@agent-native/core 0.90.11 → 0.91.1

package/corpus/README.md

@@ -27,5 +27,5 @@ rg -n "defineAction|useActionQuery" node_modules/@agent-native/core/corpus
 
 ## Generated Counts
 
-- core files: 2145
-- template files: 4843
+- core files: 2149
+- template files: 4941

package/corpus/core/CHANGELOG.md

@@ -1,5 +1,39 @@
 # @agent-native/core
 
+## 0.91.1
+
+### Patch Changes
+
+- 942165f: Fix design live-edit preview showing a 404/NotFound for client-side-routed
+  (SPA) dev apps. The bridge served every snapshot from its own `/live-edit`
+  path, so the proxied app's router booted at `location.pathname === "/live-edit"`
+  and matched no route. The bridge now injects a synchronous pre-boot
+  `history.replaceState` shim that rewrites the iframe path to the real target
+  route before the app bundle runs. Asset resolution (via the injected
+  `<base href>`) is unchanged, and static/non-SPA apps are unaffected.
+
+## 0.91.0
+
+### Minor Changes
+
+- e310ac1: Add first-party, Sentry-style error capture to the analytics client SDK. `configureTracking({ errorCapture })` now auto-captures uncaught exceptions (`window.onerror`) and unhandled promise rejections, exposes a manual `captureException(error, context?)` / `captureMessage(message, level?)` API plus `addErrorBreadcrumb`, and ties each captured exception to the active session replay id so errors link straight to the recording they happened in. Captured exceptions are sent through the existing first-party analytics ingest as a dedicated `$exception` event and are redacted + deduped client-side. Additive and backward-compatible; error capture only installs when a public key is configured (or explicitly enabled).
+- e310ac1: Revamp the shared settings shell (`SettingsTabsPage`): an edge-aligned,
+  independently scrolling left nav with consistent theming, a built-in settings
+  search that deep-links into tabs and sections via `searchEntries` /
+  `generalSearchEntries`, and a new controlled `value` / `onValueChange` mode so
+  apps can drive the active tab from their own routing and application state.
+- e310ac1: Make agent-native chat threads shareable through the framework share dialog so collaborators can view or edit shared chats.
+
+### Patch Changes
+
+- e310ac1: Populate in-app "What's new" surfaces from pending app changelog entries during dev and build.
+- e310ac1: Use shadcn's message scroller primitives for core chat transcripts so streaming replies, turn anchoring, and scroll-to-bottom behavior stay smoother in long or dynamically resizing chats.
+- e310ac1: Auto-continue recoverable chat run timeouts during reconnect without showing the internal resume prompt in chat history, and retry transient `ask_app_status` bridge fetch failures before surfacing an error.
+- e310ac1: Recover Google popup sign-in pages when the session cookie is present but the parent page misses the automatic OAuth exchange redirect.
+- e310ac1: Hide internal share principal ids in share dialogs by resolving organization names and using safe fallback labels.
+- e310ac1: Fix Vite dev server resolution for Agent Native templates that load local or transitive `@agent-native/toolkit` subpath exports.
+- e310ac1: Avoid repeated Sentry reports when workspace dev app discovery hits local filesystem permission errors.
+
 ## 0.90.11
 
 ### Patch Changes

package/corpus/core/docs/content/toolkit-settings.mdx

@@ -1,6 +1,6 @@
 ---
 title: "Settings Kit"
-description: "A standard settings-page contract for app, agent, provider, team, and language settings."
+description: "A standard, searchable settings-page contract for app, agent, provider, team, and language settings."
 ---
 
 # Settings Kit
@@ -10,11 +10,17 @@ not have to wonder whether model keys live in an app settings page, a giant
 agent sidebar panel, or a provider-specific setup card. The app route owns the
 page; framework tabs can be mounted inside it.
 
+Every settings page is **searchable out of the box**: `<SettingsTabsPage>`
+renders a search box that indexes tabs and their controls, so a user can type
+"language", "S3", or "API key" and jump straight to the right section across any
+tab — no hunting through the nav. This is a core value prop of the kit and comes
+free the moment an app adopts the shared page.
+
 <WireframeBlock id="doc-block-toolkit-settings">
   <Screen
     surface="desktop"
     html={
-      "<div style='min-height:520px;box-sizing:border-box;padding:26px;display:grid;grid-template-columns:200px 1fr;gap:18px'><aside class='wf-card' style='display:flex;flex-direction:column;gap:6px'><strong style='margin-bottom:4px'>Settings</strong><div style='padding:7px 9px;border-radius:8px'>General</div><div style='padding:7px 9px;border-radius:8px;background:var(--wf-accent-soft);display:flex;align-items:center;gap:8px'><span data-icon='settings'></span> AI and models</div><div style='padding:7px 9px;border-radius:8px'>Connections</div><div style='padding:7px 9px;border-radius:8px'>Team</div><div style='padding:7px 9px;border-radius:8px'>Developer</div></aside><main class='wf-card' style='display:flex;flex-direction:column;gap:14px'><h2 style='margin:0'>AI and models</h2><div style='display:flex;flex-direction:column;gap:6px'><small class='wf-muted'>Default model</small><div class='wf-box' style='display:flex;align-items:center;gap:8px'><div style='flex:1'>GPT-5</div><span data-icon='chevronDown'></span></div></div><div style='display:flex;flex-direction:column;gap:8px'><small class='wf-muted'>Provider keys</small><div class='wf-box' style='display:flex;align-items:center;gap:10px'><span data-icon='check'></span><div style='flex:1'>OpenAI</div><span class='wf-pill'>Connected</span></div><div class='wf-box' style='display:flex;align-items:center;gap:10px'><span data-icon='lock'></span><div style='flex:1'>Anthropic</div><button>Add key</button></div><div class='wf-box' style='display:flex;align-items:center;gap:10px'><span data-icon='check'></span><div style='flex:1'>Builder</div><span class='wf-pill'>Connected</span></div></div><div style='flex:1'></div><div style='display:flex;gap:10px'><button>Open agent settings</button><div style='flex:1'></div><button class='primary'>Save changes</button></div></main></div>"
+      "<div style='min-height:520px;box-sizing:border-box;padding:26px;display:grid;grid-template-columns:200px 1fr;gap:18px'><aside class='wf-card' style='display:flex;flex-direction:column;gap:6px'><strong style='margin-bottom:4px'>Settings</strong><div class='wf-box' style='display:flex;align-items:center;gap:8px;margin-bottom:4px'><span data-icon='search'></span><span class='wf-muted'>Search settings</span></div><div style='padding:7px 9px;border-radius:8px'>General</div><div style='padding:7px 9px;border-radius:8px;background:var(--wf-accent-soft);display:flex;align-items:center;gap:8px'><span data-icon='settings'></span> AI and models</div><div style='padding:7px 9px;border-radius:8px'>Connections</div><div style='padding:7px 9px;border-radius:8px'>Team</div><div style='padding:7px 9px;border-radius:8px'>Developer</div></aside><main class='wf-card' style='display:flex;flex-direction:column;gap:14px'><h2 style='margin:0'>AI and models</h2><div style='display:flex;flex-direction:column;gap:6px'><small class='wf-muted'>Default model</small><div class='wf-box' style='display:flex;align-items:center;gap:8px'><div style='flex:1'>GPT-5</div><span data-icon='chevronDown'></span></div></div><div style='display:flex;flex-direction:column;gap:8px'><small class='wf-muted'>Provider keys</small><div class='wf-box' style='display:flex;align-items:center;gap:10px'><span data-icon='check'></span><div style='flex:1'>OpenAI</div><span class='wf-pill'>Connected</span></div><div class='wf-box' style='display:flex;align-items:center;gap:10px'><span data-icon='lock'></span><div style='flex:1'>Anthropic</div><button>Add key</button></div><div class='wf-box' style='display:flex;align-items:center;gap:10px'><span data-icon='check'></span><div style='flex:1'>Builder</div><span class='wf-pill'>Connected</span></div></div><div style='flex:1'></div><div style='display:flex;gap:10px'><button>Open agent settings</button><div style='flex:1'></div><button class='primary'>Save changes</button></div></main></div>"
     }
   />
 </WireframeBlock>
@@ -23,8 +29,9 @@ page; framework tabs can be mounted inside it.
 
 | Piece                    | Purpose                                                                               |
 | ------------------------ | ------------------------------------------------------------------------------------- |
-| `<SettingsTabsPage>`     | Standard tabbed settings route surface.                                               |
+| `<SettingsTabsPage>`     | Standard tabbed settings route surface with a built-in settings search box.           |
 | `useAgentSettingsTabs()` | Framework-provided agent, model, key, automation, and voice tabs that apps can mount. |
+| `SettingsSearchEntry`    | A deep-link target (label, keywords, tab, and hash) that makes a control findable.    |
 | `<LanguagePicker>`       | Standard language selector for app settings.                                          |
 | `openAgentSettings()`    | Compatibility escape hatch for opening the sidebar settings tab when needed.          |
 | Hash deep links          | Stable links such as `/settings#secrets:OPENAI_API_KEY` and `/settings#connections`.  |
@@ -52,10 +59,56 @@ export default function SettingsRoute() {
 }
 ```
 
+## Search {#search}
+
+The search box is enabled by default. With no extra work it matches on tab
+labels, so users can already filter the nav. To make individual controls
+discoverable, register `SettingsSearchEntry` items — each result switches to the
+right tab and scrolls to the target section:
+
+```tsx
+const agentSettingsTabs = useAgentSettingsTabs(); // already ships search entries
+
+return (
+  <SettingsTabsPage
+    extraTabs={[
+      {
+        id: "alerts",
+        label: "Alerts",
+        content: <AlertRulesSettingsCard />,
+        keywords: "notifications thresholds monitors",
+        searchEntries: [
+          { id: "alert-rules", label: "Alert rules", hash: "alert-rules" },
+        ],
+      },
+      ...agentSettingsTabs,
+    ]}
+    general={<LanguagePicker label="Interface language" />}
+    // Deep-link targets that live inside the General tab.
+    generalSearchEntries={[
+      {
+        id: "language",
+        label: "Language",
+        keywords: "locale translation interface",
+        hash: "language",
+      },
+    ]}
+  />
+);
+```
+
+Give each searchable card a matching `id` (e.g. `id="language"`) so the entry's
+`hash` can scroll to it. Add `keywords` for synonyms and provider names the
+label does not contain (e.g. "S3", "R2", "bucket" for replay storage). Set
+`enableSearch={false}` only for trivial single-section pages; prefer keeping it
+on so settings stay findable everywhere.
+
 ## UX Standard {#ux-standard}
 
 - Keep model keys, OAuth connections, Builder connect, language, team, and app
   preferences in one route.
+- Keep search on and register a `SettingsSearchEntry` for every meaningful
+  control so users can find settings by name instead of scanning tabs.
 - Link to tabs by hash so setup prompts can send users to the exact missing
   credential.
 - Use the agent sidebar settings only as a compact access point, not as the

package/corpus/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.90.11",
+  "version": "0.91.1",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -265,6 +265,7 @@
     "@rrweb/record": "2.0.1",
     "@sentry/browser": "10.60.0",
     "@sentry/node": "10.60.0",
+    "@shadcn/react": "^0.2.0",
     "@standard-schema/spec": "^1.1.0",
     "@tanstack/react-table": "^8.21.3",
     "@tiptap/core": "3.27.1",

package/corpus/core/src/agent/run-ownership.ts

@@ -1,4 +1,6 @@
-import { getThread } from "../chat-threads/store.js";
+import { getThread, resolveThreadAccess } from "../chat-threads/store.js";
+import type { AccessContext } from "../sharing/access.js";
+import type { ShareRole } from "../sharing/schema.js";
 /**
  * Ownership checks for the agent run HTTP routes (`/runs/:id/events`,
  * `/runs/:id/abort`, `/runs/active`).
@@ -38,6 +40,17 @@ export async function callerOwnsThread(
   return !!thread && thread.ownerEmail === owner;
 }
 
+/** True when `owner` has at least `role` access to the chat thread. */
+export async function callerHasThreadAccess(
+  owner: string,
+  threadId: string | null | undefined,
+  role: ShareRole | "owner" = "viewer",
+  ctx: Omit<AccessContext, "userEmail"> = {},
+): Promise<boolean> {
+  if (!threadId) return false;
+  return !!(await resolveThreadAccess(owner, threadId, role, ctx));
+}
+
 /** True when `owner` owns the thread that run `runId` belongs to. */
 export async function callerOwnsRun(
   owner: string,
@@ -45,3 +58,18 @@ export async function callerOwnsRun(
 ): Promise<boolean> {
   return callerOwnsThread(owner, await resolveRunThreadId(runId));
 }
+
+/** True when `owner` has at least `role` access to the thread behind `runId`. */
+export async function callerHasRunAccess(
+  owner: string,
+  runId: string,
+  role: ShareRole | "owner" = "viewer",
+  ctx: Omit<AccessContext, "userEmail"> = {},
+): Promise<boolean> {
+  return callerHasThreadAccess(
+    owner,
+    await resolveRunThreadId(runId),
+    role,
+    ctx,
+  );
+}

package/corpus/core/src/changelog/parse.ts

@@ -242,4 +242,82 @@ export function rollupChangelog(
   return `${head}\n\n${section}\n${rest}\n`;
 }
 
+function changelogHeader(markdown: string): string {
+  const doc = (markdown || CHANGELOG_HEADER).replace(/\s+$/, "");
+  const firstRelease = doc.search(/^##\s+(?!#)/m);
+  const header =
+    (firstRelease === -1 ? doc : doc.slice(0, firstRelease)).replace(
+      /\s+$/,
+      "",
+    ) || CHANGELOG_HEADER.trim();
+  return header;
+}
+
+function pendingSectionTitle(entry: PendingChangelogEntry): string {
+  return entry.date?.match(ISO_DATE)?.[1] ?? "Unreleased";
+}
+
+function pendingSectionSort(a: string, b: string): number {
+  const aDate = a.match(ISO_DATE)?.[1];
+  const bDate = b.match(ISO_DATE)?.[1];
+  if (aDate && bDate) return bDate.localeCompare(aDate);
+  if (!aDate && bDate) return -1;
+  if (aDate && !bDate) return 1;
+  return a.localeCompare(b);
+}
+
+/**
+ * Render an app-facing changelog that includes both released CHANGELOG.md
+ * sections and adjacent pending `changelog/*.md` entries. Unlike `release`,
+ * this is pure and non-destructive, so build/dev bundles can show current
+ * product notes without deleting the conflict-free pending files.
+ */
+export function mergePendingChangelog(
+  existing: string,
+  pending: PendingChangelogEntry[],
+): string {
+  const pendingWithText = pending.filter((entry) => entry.text.trim());
+  if (pendingWithText.length === 0) return existing || CHANGELOG_HEADER;
+
+  const existingEntries = parseChangelog(existing);
+  const usedExistingIndexes = new Set<number>();
+  const pendingByTitle = new Map<string, PendingChangelogEntry[]>();
+
+  for (const entry of pendingWithText) {
+    const title = pendingSectionTitle(entry);
+    pendingByTitle.set(title, [...(pendingByTitle.get(title) ?? []), entry]);
+  }
+
+  const sections: string[] = [];
+  for (const title of [...pendingByTitle.keys()].sort(pendingSectionSort)) {
+    const body = renderReleaseBody(pendingByTitle.get(title) ?? []);
+    if (!body) continue;
+
+    const existingIndex = existingEntries.findIndex((entry, index) => {
+      if (usedExistingIndexes.has(index)) return false;
+      return entry.date === title || entry.title === title;
+    });
+
+    if (existingIndex === -1) {
+      sections.push(`## ${title}\n\n${body}`);
+      continue;
+    }
+
+    usedExistingIndexes.add(existingIndex);
+    const existingEntry = existingEntries[existingIndex];
+    sections.push(
+      `## ${existingEntry.title}\n\n${[body, existingEntry.body]
+        .filter(Boolean)
+        .join("\n\n")}`,
+    );
+  }
+
+  existingEntries.forEach((entry, index) => {
+    if (usedExistingIndexes.has(index)) return;
+    sections.push(`## ${entry.title}\n\n${entry.body}`);
+  });
+
+  return `${changelogHeader(existing)}\n\n${sections.join("\n\n")}\n`;
+}
+
 export { CHANGELOG_HEADER, GROUP_LABELS };

package/corpus/core/src/chat-threads/schema.ts

@@ -0,0 +1,43 @@
+import { table, text, integer } from "../db/schema.js";
+import { createSharesTable, ownableColumns } from "../sharing/schema.js";
+
+export const chatThreads = table("chat_threads", {
+  id: text("id").primaryKey(),
+  title: text("title").notNull().default(""),
+  preview: text("preview").notNull().default(""),
+  threadData: text("thread_data").notNull().default("{}"),
+  messageCount: integer("message_count").notNull().default(0),
+  createdAt: integer("created_at").notNull(),
+  updatedAt: integer("updated_at").notNull(),
+  scopeType: text("scope_type"),
+  scopeId: text("scope_id"),
+  scopeLabel: text("scope_label"),
+  pinnedAt: integer("pinned_at"),
+  archivedAt: integer("archived_at"),
+  shareTokenHash: text("share_token_hash"),
+  ...ownableColumns(),
+});
+
+export const chatThreadShares = createSharesTable("chat_thread_shares");
+
+export const CHAT_THREAD_SHARES_CREATE_SQL = `CREATE TABLE IF NOT EXISTS chat_thread_shares (
+  id TEXT PRIMARY KEY,
+  resource_id TEXT NOT NULL,
+  principal_type TEXT NOT NULL,
+  principal_id TEXT NOT NULL,
+  role TEXT NOT NULL DEFAULT 'viewer',
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL DEFAULT (datetime('now'))
+)`;
+
+export const CHAT_THREAD_SHARES_CREATE_SQL_PG = `CREATE TABLE IF NOT EXISTS chat_thread_shares (
+  id TEXT PRIMARY KEY,
+  resource_id TEXT NOT NULL,
+  principal_type TEXT NOT NULL,
+  principal_id TEXT NOT NULL,
+  role TEXT NOT NULL DEFAULT 'viewer',
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL DEFAULT now()
+)`;
+
+export const CHAT_THREAD_SHARES_RESOURCE_INDEX_SQL = `CREATE INDEX IF NOT EXISTS chat_thread_shares_resource_idx ON chat_thread_shares (resource_id)`;