@agent-native/core 0.92.7 → 0.92.8

package/corpus/core/src/cli/recap.ts

@@ -99,7 +99,7 @@ export const PR_VISUAL_RECAP_SETUP: string[] = [
   "  ANTHROPIC_API_KEY  — the LLM key for the default Claude Code backend",
   "Optional (only if you change defaults):",
   "  OPENAI_API_KEY (secret) + VISUAL_RECAP_AGENT=codex (variable) — use Codex instead of Claude",
-  "  VISUAL_RECAP_MODEL / VISUAL_RECAP_REASONING (variables) — pin the model (e.g. gpt-5.5) and reasoning depth (none|minimal|low|medium|high|xhigh; Codex only)",
+  "  VISUAL_RECAP_MODEL / VISUAL_RECAP_REASONING (variables) — pin the model (e.g. gpt-5.6-sol) and reasoning depth (none|minimal|low|medium|high|xhigh; Codex only)",
   "  VISUAL_RECAP_SKILL_SOURCE=repo (variable) — pin CI to the repo-local visual-recap skill instead of latest bundled guidance",
   "  VISUAL_RECAP_SECRET_SCAN=off|high-confidence|strict (variable) — default high-confidence; strict restores generic TOKEN/SECRET assignment suppression",
   "  PLAN_RECAP_APP_URL (secret) — only when self-hosting the plan app (defaults to https://plan.agent-native.com)",
@@ -4135,7 +4135,7 @@ async function runUsage(args: Record<string, string | boolean>): Promise<void> {
   const model =
     parsed.model ??
     optionalArg(args, "model") ??
-    (agent === "codex" ? "gpt-5.5" : "claude");
+    (agent === "codex" ? "gpt-5.6-sol" : "claude");
   const body: Record<string, unknown> = {
     planId,
     ...(agent === "codex" || agent === "claude" ? { agent } : {}),

package/corpus/core/src/client/AgentPanel.tsx

@@ -1274,7 +1274,14 @@ function AgentPanelInner({
                 {t("agentPanel.settings")}
               </DropdownMenuItem>
             )}
-            <DropdownMenuItem onSelect={() => setFeedbackOpen(true)}>
+            <DropdownMenuItem
+              onSelect={() => {
+                // Defer past the closing DropdownMenu's focus-restore/dismiss-layer
+                // teardown, otherwise it can immediately dismiss the Popover we're
+                // opening in the same tick (Radix nested-overlay race).
+                setTimeout(() => setFeedbackOpen(true), 0);
+              }}
+            >
               <IconMessageDots size={14} className="shrink-0" />
               {t("agentPanel.feedback")}
             </DropdownMenuItem>

package/corpus/core/src/client/agent-chat-adapter.ts

@@ -751,7 +751,7 @@ function hasContinuationProgress(content: ContentPart[]): boolean {
 }
 
 const COMPLETED_TOOL_TIMEOUT_NAME_RE =
-  /^(add|apply|archive|capture|create|delete|deploy|duplicate|edit|generate|grant|insert|migrate|move|present|publish|remove|rename|reorder|revoke|save|send|set|sync|trash|update|write)(-|$)/;
+  /^(add|apply|archive|capture|compose|create|delete|deploy|duplicate|edit|generate|grant|insert|install|migrate|move|mutate|present|publish|remove|rename|reorder|revoke|save|send|set|sync|trash|update|write)(-|$)/;
 const COMPLETED_TOOL_TIMEOUT_NAME_ALLOWLIST = new Set([
   "connect-assets-mcp",
   "import-design-tokens",
@@ -1728,8 +1728,10 @@ export function createAgentChatAdapter(
 
       // Mode switch for recovery ownership: durable/background-dispatched runs
       // are always recovered by the server. Foreground self-chain follows the
-      // server on healthy handoffs, but a loud self-dispatch failure falls back
-      // to the client POST path because no successor run owns recovery yet.
+      // server on healthy handoffs. A loud continuation-dispatch failure falls
+      // back to the client POST path in either mode because the server has
+      // already marked the unclaimed successor terminal; the per-turn tool
+      // journal keeps that retry from replaying completed side effects.
       const isDurableBackgroundDispatch = () =>
         currentRunDispatchMode?.startsWith("background") === true;
       const isForegroundSelfChainDispatch = () =>
@@ -1737,12 +1739,15 @@ export function createAgentChatAdapter(
       const shouldFollowServerContinuation = (
         signal?: AgentAutoContinueSignal,
       ) => {
+        if (
+          signal?.errorInfo?.errorCode ===
+          "background_continuation_dispatch_failed"
+        ) {
+          return false;
+        }
         if (isDurableBackgroundDispatch()) return true;
         if (!isForegroundSelfChainDispatch()) return false;
-        return (
-          signal?.errorInfo?.errorCode !==
-          "background_continuation_dispatch_failed"
-        );
+        return true;
       };
 
       const rememberRunSeq = (seq: number) => {

package/corpus/core/src/client/composer/TiptapComposer.tsx

@@ -835,7 +835,7 @@ function latestModelsOnly(models: string[]): string[] {
       seen.add(claude[1]);
       return true;
     }
-    // GPT: family = gpt-{major} (e.g. gpt-5.4 and gpt-5.4-mini are different)
+    // GPT: family = gpt-{major} (e.g. gpt-5.6-sol and gpt-5.6-luna are different)
     // OpenAI reasoning: each is its own family
     // Gemini: family = gemini-{major} + variant
     const gemini = m.match(/^gemini-(\d+(?:\.\d+)?)-(.+?)(?:-preview)?$/);

package/corpus/core/src/client/index.ts

@@ -920,12 +920,16 @@ export {
   type DevOptionValue,
 } from "./dev-overlay/index.js";
 export {
+  ACTION_KEEPALIVE_BODY_BUDGET_BYTES,
   callAction,
+  tryCallActionKeepalive,
   useActionQuery,
   useActionMutation,
   type ActionRegistry,
   type ClientActionCallOptions,
   type ClientActionMethod,
+  type KeepaliveActionCallRejectionReason,
+  type KeepaliveActionCallResult,
 } from "./use-action.js";
 export { createAgentNativeQueryClient } from "./create-query-client.js";
 export { AppProviders, type AppProvidersProps } from "./app-providers.js";

package/corpus/core/src/client/org/TeamPage.tsx

@@ -26,6 +26,7 @@ import {
   IconPlus,
   IconAlertTriangle,
   IconUsersGroup,
+  IconHelpCircle,
 } from "@tabler/icons-react";
 import { useMemo, useRef, useState, type ReactNode } from "react";
 
@@ -327,8 +328,6 @@ function MembersCard() {
   const { data: invitationsData } = useOrgInvitations();
   const switchOrg = useSwitchOrg();
 
-  const [showInviteForm, setShowInviteForm] = useState(false);
-
   if (!org?.orgId) return null;
 
   const isOwner = org.role === "owner";
@@ -372,26 +371,6 @@ function MembersCard() {
           )}
         </div>
 
-        {isOwnerOrAdmin && (
-          <div className="border-t border-border pt-4">
-            {!showInviteForm ? (
-              <button
-                type="button"
-                onClick={() => setShowInviteForm(true)}
-                className="inline-flex items-center gap-1.5 rounded-md bg-foreground px-3 py-1.5 text-xs font-medium text-background hover:opacity-90"
-              >
-                <IconUserPlus className="h-3.5 w-3.5" />
-                {t("org.inviteMembers")}
-              </button>
-            ) : (
-              <BulkInviteForm
-                currentUserRole={org.role}
-                onClose={() => setShowInviteForm(false)}
-              />
-            )}
-          </div>
-        )}
-
         {isOwnerOrAdmin && (
           <div className="grid gap-5 border-t border-border pt-4 lg:grid-cols-2">
             <DomainSettingsSection
@@ -431,17 +410,37 @@ function MembersTableCard({
   currentUserRole: string | null;
 }) {
   const t = useT();
+  const [showInviteForm, setShowInviteForm] = useState(false);
+  const canInvite = currentUserRole === "owner" || currentUserRole === "admin";
 
   return (
     <section className="rounded-lg border border-border bg-card">
-      <div className="flex flex-col gap-1 border-b border-border px-4 py-3 sm:flex-row sm:items-center sm:justify-between">
+      <div className="flex flex-col gap-3 border-b border-border px-4 py-3 sm:flex-row sm:items-center sm:justify-between">
         <div>
           <h3 className="text-sm font-medium">{t("org.members")}</h3>
           <p className="text-xs text-muted-foreground">
             {t("org.memberCount", { count: members.length })}
           </p>
         </div>
+        {canInvite && !showInviteForm && (
+          <button
+            type="button"
+            onClick={() => setShowInviteForm(true)}
+            className="inline-flex items-center justify-center gap-1.5 rounded-md bg-foreground px-3 py-1.5 text-xs font-medium text-background hover:opacity-90"
+          >
+            <IconUserPlus className="h-3.5 w-3.5" />
+            {t("org.inviteMembers")}
+          </button>
+        )}
       </div>
+      {canInvite && showInviteForm && (
+        <div className="border-b border-border p-4">
+          <BulkInviteForm
+            currentUserRole={currentUserRole}
+            onClose={() => setShowInviteForm(false)}
+          />
+        </div>
+      )}
       <Table>
         <TableHeader>
           <TableRow>
@@ -1181,9 +1180,25 @@ function A2ASecretSection({ secret }: { secret: string | null | undefined }) {
   const masked = secret ? "****" + secret.slice(-8) : "Not set";
 
   return (
-    <div className="space-y-2 border-t border-border pt-3 first:border-t-0 first:pt-0">
-      <div className="text-xs font-medium text-muted-foreground uppercase tracking-wide">
-        Cross-app authentication
+    <div className="space-y-2">
+      <div className="flex items-center gap-1 text-xs font-medium text-muted-foreground uppercase tracking-wide">
+        <span>Cross-app authentication</span>
+        <Tooltip>
+          <TooltipTrigger asChild>
+            <a
+              href="/docs/a2a-protocol#organization-secret-sync"
+              target="_blank"
+              rel="noopener noreferrer"
+              aria-label="Read the cross-app authentication documentation"
+              className="inline-flex size-3.5 items-center justify-center rounded-full text-muted-foreground hover:text-foreground"
+            >
+              <IconHelpCircle className="size-3" />
+            </a>
+          </TooltipTrigger>
+          <TooltipContent>
+            Read the cross-app authentication documentation
+          </TooltipContent>
+        </Tooltip>
       </div>
       <p className="text-[11px] text-muted-foreground">
         This secret authenticates cross-app delegation (e.g. Dispatch to

package/corpus/core/src/client/use-action.ts

@@ -212,6 +212,40 @@ export interface ActionFetchOptions {
   signal?: AbortSignal;
   /** Per-call override for the fetch timeout. */
   timeoutMs?: number;
+  /** Keep the request alive while the document is being unloaded. */
+  keepalive?: boolean;
+  /** Pre-serialized mutation body used by the keepalive budget coordinator. */
+  serializedBody?: string;
+}
+
+/**
+ * Conservative per-document keepalive body budget. Browsers commonly enforce
+ * an approximately 64 KiB aggregate limit across every in-flight keepalive
+ * request; leaving headroom for other framework traffic prevents a request
+ * that passed our guard from being rejected by the browser at send time.
+ */
+export const ACTION_KEEPALIVE_BODY_BUDGET_BYTES = 48_000;
+
+let reservedKeepaliveBodyBytes = 0;
+
+function utf8ByteLength(value: string): number {
+  if (typeof TextEncoder !== "undefined") {
+    return new TextEncoder().encode(value).byteLength;
+  }
+
+  let bytes = 0;
+  for (const character of value) {
+    const codePoint = character.codePointAt(0) ?? 0;
+    bytes +=
+      codePoint <= 0x7f
+        ? 1
+        : codePoint <= 0x7ff
+          ? 2
+          : codePoint <= 0xffff
+            ? 3
+            : 4;
+  }
+  return bytes;
 }
 
 async function actionFetch<T>(
@@ -237,6 +271,7 @@ async function actionFetch<T>(
     method,
     headers,
     cache: "no-store",
+    keepalive: options?.keepalive,
   };
 
   if (method === "GET" && params && Object.keys(params).length > 0) {
@@ -245,7 +280,7 @@ async function actionFetch<T>(
     const qs = serializeActionQueryParams(params);
     if (qs) url += `?${qs}`;
   } else if (method !== "GET" && params) {
-    init.body = JSON.stringify(params);
+    init.body = options?.serializedBody ?? JSON.stringify(params);
   }
 
   // One controller drives both cancellation sources: the caller's signal
@@ -394,6 +429,83 @@ export function callAction<
   });
 }
 
+export type KeepaliveActionCallRejectionReason =
+  | "body-too-large"
+  | "budget-exhausted";
+
+export type KeepaliveActionCallResult<TResult> =
+  | {
+      accepted: true;
+      bodyBytes: number;
+      completion: Promise<TResult>;
+    }
+  | {
+      accepted: false;
+      bodyBytes: number;
+      reason: KeepaliveActionCallRejectionReason;
+      completion: null;
+    };
+
+/**
+ * Attempts an unload-safe action call without exceeding the browser's shared
+ * keepalive request budget. The reservation remains held until the response
+ * body has completed, because browsers count every in-flight keepalive body
+ * against the same per-document quota.
+ *
+ * A rejected attempt is deliberately synchronous so callers can fall back to
+ * a durable outbox before returning from `pagehide`.
+ */
+export function tryCallActionKeepalive<
+  TResult = undefined,
+  TName extends ActionName = ActionName,
+>(
+  actionName: TName,
+  params?: ActionParams<TName>,
+  options: Omit<ClientActionCallOptions, "method"> = {},
+): KeepaliveActionCallResult<
+  TResult extends undefined ? ActionResult<TName> : TResult
+> {
+  type R = TResult extends undefined ? ActionResult<TName> : TResult;
+  const serializedBody = JSON.stringify(params ?? {});
+  const bodyBytes = utf8ByteLength(serializedBody);
+
+  if (bodyBytes > ACTION_KEEPALIVE_BODY_BUDGET_BYTES) {
+    return {
+      accepted: false,
+      bodyBytes,
+      reason: "body-too-large",
+      completion: null,
+    };
+  }
+
+  if (
+    reservedKeepaliveBodyBytes + bodyBytes >
+    ACTION_KEEPALIVE_BODY_BUDGET_BYTES
+  ) {
+    return {
+      accepted: false,
+      bodyBytes,
+      reason: "budget-exhausted",
+      completion: null,
+    };
+  }
+
+  reservedKeepaliveBodyBytes += bodyBytes;
+  const completion = actionFetch<R>(actionName, "POST", params, {
+    signal: options.signal,
+    timeoutMs: options.timeoutMs,
+    keepalive: true,
+    serializedBody,
+  }).finally(() => {
+    reservedKeepaliveBodyBytes = Math.max(
+      0,
+      reservedKeepaliveBodyBytes - bodyBytes,
+    );
+  });
+
+  return { accepted: true, bodyBytes, completion };
+}
+
 // ---------------------------------------------------------------------------
 // Query hook
 // ---------------------------------------------------------------------------

package/corpus/core/src/db/client.ts

@@ -39,6 +39,16 @@ export interface DbExecConfig {
   d1Binding?: any;
 }
 
+/** Read the request-scoped Cloudflare binding without requiring every
+ * consuming app's TypeScript program to include core's ambient Worker globals. */
+export function getCloudflareD1Binding(): unknown {
+  return (
+    globalThis as typeof globalThis & {
+      __cf_env?: { DB?: unknown };
+    }
+  ).__cf_env?.DB;
+}
+
 // ---------------------------------------------------------------------------
 // Per-app DATABASE_URL resolution
 // ---------------------------------------------------------------------------
@@ -412,7 +422,7 @@ export function getDialect(): Dialect {
     return _dialect;
   }
 
-  const d1 = globalThis.__cf_env?.DB;
+  const d1 = getCloudflareD1Binding();
   if (d1) {
     _dialect = "d1";
     return _dialect;
@@ -1447,7 +1457,7 @@ async function initClient(): Promise<void> {
     {
       url,
       authToken: getDatabaseAuthToken(),
-      d1Binding: dialect === "d1" ? globalThis.__cf_env?.DB : undefined,
+      d1Binding: dialect === "d1" ? getCloudflareD1Binding() : undefined,
     },
     true,
   );

package/corpus/core/src/db/create-get-db.ts

@@ -5,6 +5,7 @@ import type { LibSQLDatabase } from "drizzle-orm/libsql";
 
 import {
   getDialect,
+  getCloudflareD1Binding,
   getDatabaseUrl,
   getDatabaseAuthToken,
   isLocalSqliteUrl,
@@ -444,7 +445,9 @@ export function createGetDb<T extends Record<string, unknown>>(schema: T) {
 
     // D1 only if dialect detected it (DATABASE_URL takes priority)
     if (dialect === "d1") {
-      const d1 = globalThis.__cf_env?.DB;
+      const d1 = getCloudflareD1Binding() as
+        | Parameters<typeof drizzleD1>[0]
+        | undefined;
       if (d1) {
         _db = drizzleD1(d1, { schema }) as unknown as LibSQLDatabase<T>;
         _dbReady = Promise.resolve(_db);

package/corpus/core/src/scripts/agent-engines/manage-agent-engine.ts

@@ -54,7 +54,7 @@ export const tool: ActionTool = {
       model: {
         type: "string",
         description:
-          "Model ID (e.g. 'gpt-5.5', 'claude-sonnet-5', 'gemini-3-1-pro'). Required for \"set-app-default\"; optional for \"set\" and \"test\" where it defaults to the engine's default model.",
+          "Model ID (e.g. 'gpt-5.6-sol', 'claude-sonnet-5', 'gemini-3-1-pro'). Required for \"set-app-default\"; optional for \"set\" and \"test\" where it defaults to the engine's default model.",
       },
       baseUrl: {
         type: "string",

package/corpus/core/src/scripts/agent-engines/set-agent-engine.ts

@@ -27,7 +27,7 @@ export const tool: ActionTool = {
       model: {
         type: "string",
         description:
-          "Model ID to use with this engine (e.g. 'gpt-5.5', 'claude-sonnet-5'). Defaults to the engine's default model if omitted.",
+          "Model ID to use with this engine (e.g. 'gpt-5.6-sol', 'claude-sonnet-5'). Defaults to the engine's default model if omitted.",
       },
     },
     required: ["engine"],

package/corpus/core/src/server/transcribe-voice.ts

@@ -51,7 +51,7 @@ const GROQ_MODEL = "whisper-large-v3-turbo";
 const GROQ_CLEANUP_MODEL = "llama-3.3-70b-versatile";
 const OPENAI_MODEL = "whisper-1";
 const OPENAI_CHAT_URL = "https://api.openai.com/v1/chat/completions";
-const OPENAI_CLEANUP_MODEL = "gpt-5.4-mini";
+const OPENAI_CLEANUP_MODEL = "gpt-5.6-luna";
 const MAX_AUDIO_BYTES = 25 * 1024 * 1024; // Whisper hard limit.
 // Hard cap for the dictation-cleanup text path (`sanitizeTranscriptText`
 // below). This endpoint has no `task` field — it's always the Hold-Fn

package/corpus/core/src/usage/store.ts

@@ -98,13 +98,22 @@ const PRICING: Array<{ match: RegExp; pricing: ModelPricing }> = [
     pricing: { input: 100, output: 500, cacheRead: 10, cacheWrite: 125 },
   },
   // ── OpenAI / Codex ──────────────────────────────────────────────────────────
-  // Published rates as of 2026-06; OpenAI bills cached input at a discount
-  // and has no separate cache-write token charge, so cacheWrite is 0.
-  // /gpt-5\.5/ must precede /gpt-5/ since the latter also matches "gpt-5.5".
+  // Published rates as of 2026-07; OpenAI bills cached input at a discount
+  // and has no separate cache-write token charge, so cacheWrite is 0. Sol and
+  // Terra have higher large-context rates after 272K tokens; this table tracks
+  // the standard rate because usage rows do not preserve request context size.
   {
-    match: /gpt-5\.5/i,
+    match: /gpt-5[.-]6-sol/i,
     pricing: { input: 500, output: 3000, cacheRead: 50, cacheWrite: 0 },
   },
+  {
+    match: /gpt-5[.-]6-terra/i,
+    pricing: { input: 250, output: 1500, cacheRead: 25, cacheWrite: 0 },
+  },
+  {
+    match: /gpt-5[.-]6-luna/i,
+    pricing: { input: 100, output: 600, cacheRead: 10, cacheWrite: 0 },
+  },
   {
     match: /gpt-5/i,
     pricing: { input: 125, output: 1000, cacheRead: 12.5, cacheWrite: 0 },

package/corpus/core/src/vite/client.ts

@@ -762,12 +762,15 @@ function getDefaultOptimizeDeps(cwd: string): string[] {
     { specifier: "@libsql/client" },
     { specifier: "@amplitude/analytics-browser" },
     { specifier: "@assistant-ui/react" },
+    { specifier: "@codemirror/lang-sql" },
+    { specifier: "@codemirror/theme-one-dark" },
     { specifier: "@excalidraw/excalidraw" },
     { specifier: "@excalidraw/mermaid-to-excalidraw" },
     {
       specifier: "@modelcontextprotocol/ext-apps/app-bridge",
       packageName: "@modelcontextprotocol/ext-apps",
     },
+    { specifier: "@paper-design/shaders-react" },
     { specifier: "@radix-ui/react-accordion" },
     { specifier: "@radix-ui/react-alert-dialog" },
     { specifier: "@radix-ui/react-aspect-ratio" },
@@ -795,6 +798,11 @@ function getDefaultOptimizeDeps(cwd: string): string[] {
     { specifier: "@radix-ui/react-toggle" },
     { specifier: "@radix-ui/react-toggle-group" },
     { specifier: "@radix-ui/react-tooltip" },
+    { specifier: "@sentry/browser" },
+    {
+      specifier: "@shadcn/react/message-scroller",
+      packageName: "@shadcn/react",
+    },
     { specifier: "@tanstack/react-query" },
     { specifier: "@tabler/icons-react" },
     { specifier: "@tiptap/core" },
@@ -813,6 +821,7 @@ function getDefaultOptimizeDeps(cwd: string): string[] {
     { specifier: "@tiptap/pm/state", packageName: "@tiptap/pm" },
     { specifier: "@tiptap/react" },
     { specifier: "@tiptap/starter-kit" },
+    { specifier: "@uiw/react-codemirror" },
     { specifier: "@xterm/addon-fit" },
     { specifier: "@xterm/addon-web-links" },
     { specifier: "@xterm/xterm" },
@@ -865,6 +874,8 @@ function getDefaultOptimizeDeps(cwd: string): string[] {
       specifier: "highlight.js/lib/languages/yaml",
       packageName: "highlight.js",
     },
+    { specifier: "html2canvas" },
+    { specifier: "i18next" },
     { specifier: "input-otp" },
     { specifier: "lowlight" },
     { specifier: "mermaid" },
@@ -872,6 +883,7 @@ function getDefaultOptimizeDeps(cwd: string): string[] {
     { specifier: "next-themes" },
     { specifier: "react-hook-form" },
     { specifier: "react-day-picker" },
+    { specifier: "react-i18next" },
     { specifier: "react-markdown" },
     { specifier: "react-resizable-panels" },
     { specifier: "recharts" },
@@ -916,7 +928,24 @@ function getDefaultOptimizeDeps(cwd: string): string[] {
     .filter(({ specifier, packageName }) =>
       hasOptimizeDep(packageName ?? specifier, cwd),
     )
-    .map(({ specifier }) => specifier);
+    .map(({ specifier, packageName }) => {
+      const dependencyName = packageName ?? specifier;
+      // In the monorepo, core is source-aliased and its dependencies live
+      // under packages/core/node_modules. A bare optimizeDeps.include entry
+      // is resolved from the template root, so core-only dependencies fail
+      // the initial prebundle and are rediscovered after the page loads. Vite
+      // then rebundles and reloads the editor. Its documented nested-dependency
+      // syntax resolves the right-hand package from core's package directory,
+      // while app-owned dependencies should remain direct entries.
+      if (
+        inMonorepo &&
+        !hasDep(dependencyName, cwd) &&
+        hasCoreDep(dependencyName, cwd)
+      ) {
+        return `@agent-native/core > ${specifier}`;
+      }
+      return specifier;
+    });
 }
 
 /**
@@ -2590,6 +2619,14 @@ function createAgentNativeConfig(
           ...(userConfig.ssr ?? {}),
           noExternal: /^(?!node:)/,
           external: [
+            // Yjs is used by both server-side collaboration actions and the
+            // client SSR graph. If Vite inlines it here, Nitro also emits its
+            // own server copy and a single request imports Yjs twice, breaking
+            // Yjs constructor identity. This externalizes only Vite's
+            // intermediate React Router SSR graph; Nitro's final Node/edge
+            // bundle still owns and bundles the dependency, so both paths
+            // share one portable module instance.
+            "yjs",
             ...NODE_SSR_NATIVE_EXTERNALS,
             ...arrayFrom((userConfig.ssr as { external?: any })?.external),
           ],

package/corpus/templates/analytics/AGENTS.md

@@ -175,6 +175,9 @@ details live in `.agents/skills/`.
 
 - `navigation` exposes current dashboard, analysis, source, chart, and selected
   context.
+- Clicking a dashboard chart, table, or extension stages that panel as a chat
+  context chip and writes `selected-object` with `type="dashboard-panel"`.
+  Use its dashboard and panel ids to scope inspection and edits to that panel.
 - `navigate` moves the user to the relevant analytics view, including
   `view="catalog"` for the template catalog, `view="sessions"` for session
   replay, `view="monitoring"` with `monitoringView="uptime|errors"` (plus the

package/corpus/templates/analytics/actions/get-data-program.ts

@@ -0,0 +1,78 @@
+/**
+ * Analytics HTTP surface for reading a stored data program and its latest run.
+ */
+import { defineAction } from "@agent-native/core";
+import {
+  getDataProgram,
+  getLatestRun,
+  hashDataProgramParams,
+} from "@agent-native/core/data-programs";
+import { getCredentialContext } from "@agent-native/core/server/request-context";
+import { resolveAccess } from "@agent-native/core/sharing";
+import { z } from "zod";
+
+import { ANALYTICS_APP_ID } from "../server/lib/provider-credentials";
+
+export default defineAction({
+  description:
+    "Get one Analytics data program's metadata and last-run summary. Pass includeRows to return cached rows.",
+  schema: z.object({
+    programId: z.string().min(1),
+    includeRows: z.boolean().optional(),
+  }),
+  http: { method: "GET" },
+  readOnly: true,
+  run: async (args) => {
+    const ctx = getCredentialContext();
+    if (!ctx) throw new Error("No authenticated context for get-data-program.");
+
+    const program = await getDataProgram(args.programId, ANALYTICS_APP_ID);
+    if (!program) throw new Error("Data program not found.");
+
+    const access = await resolveAccess("data_program", args.programId, {
+      userEmail: ctx.userEmail,
+      orgId: ctx.orgId ?? undefined,
+    });
+    if (!access) throw new Error("Access denied to this data program.");
+
+    const defaultParams = program.defaultParams
+      ? (JSON.parse(program.defaultParams) as Record<string, unknown>)
+      : {};
+    const hash = hashDataProgramParams(
+      defaultParams,
+      ctx.userEmail,
+      ctx.orgId ?? null,
+    );
+    const lastRun = await getLatestRun(program.id, hash);
+
+    return {
+      id: program.id,
+      name: program.name,
+      title: program.title,
+      description: program.description,
+      code: program.code,
+      paramsSchema: program.paramsSchema
+        ? JSON.parse(program.paramsSchema)
+        : null,
+      defaultParams,
+      refreshMode: program.refreshMode,
+      refreshTtlMs: program.refreshTtlMs,
+      background: program.background,
+      archivedAt: program.archivedAt,
+      columns: program.outputColumns ? JSON.parse(program.outputColumns) : [],
+      lastRun: lastRun
+        ? {
+            status: lastRun.status,
+            rowCount: lastRun.rowCount,
+            truncated: lastRun.truncated,
+            errorCode: lastRun.errorCode,
+            errorMessage: lastRun.errorMessage,
+            finishedAt: lastRun.finishedAt,
+            ...(args.includeRows && lastRun.rowsJson
+              ? { rows: JSON.parse(lastRun.rowsJson) }
+              : {}),
+          }
+        : null,
+    };
+  },
+});