@agent-native/core 0.97.0 → 0.98.0

package/corpus/core/src/sharing/access.ts

@@ -24,7 +24,7 @@ import {
   requireShareableResource,
   type ShareableResourceRegistration,
 } from "./registry.js";
-import { ROLE_RANK, type ShareRole } from "./schema.js";
+import { ROLE_RANK, type ShareRole, type Visibility } from "./schema.js";
 
 /**
  * Find a registration by its drizzle table identity. Used to look up
@@ -233,6 +233,49 @@ export interface ResolvedAccess {
   resource: any;
 }
 
+/**
+ * Minimal resource shape returned when a caller opts into a projected access
+ * load via `{ skipResourceBody: true }`. Contains exactly the columns the
+ * access-decision logic itself reads — identity, ownership, org scope, and
+ * visibility — never a resource type's heavy body columns (`data`,
+ * `content`, and similar blobs).
+ */
+export interface AccessProjectedResource {
+  id: string;
+  ownerEmail: string;
+  orgId: string | null;
+  visibility: Visibility;
+}
+
+export interface ResolvedAccessProjected {
+  /** Effective role: 'owner' for the resource owner, or the share role. */
+  role: "owner" | ShareRole;
+  /** Only the access-decision columns — not the full resource row. */
+  resource: AccessProjectedResource;
+}
+
+export interface ResolveAccessOptions {
+  /**
+   * When true, load only the columns the access decision itself needs
+   * (`id`, `ownerEmail`, `orgId`, `visibility`) instead of the full resource
+   * row. Use this when the caller only needs the access decision — not the
+   * resource body — and wants to skip fetching heavy type-specific columns
+   * (e.g. `data`/`content` blobs) on every `assertAccess`/`resolveAccess`
+   * call.
+   *
+   * Silently ignored (falls back to a full row load) for any resource type
+   * registered with a `publicAccessRole` *function* resolver, since that
+   * callback can read arbitrary resource fields the projection would have
+   * omitted — see `hasDynamicPublicAccessRoleResolver` below.
+   *
+   * Default: `false` — the full row is loaded, matching historical behavior.
+   * Callers that need resource body fields (most call sites today — for
+   * many resource types `resolveAccess().resource` doubles as the action's
+   * primary data read) must NOT pass this.
+   */
+  skipResourceBody?: boolean;
+}
+
 async function publicAccessRoleForResource(
   reg: ShareableResourceRegistration,
   resource: any,
@@ -278,12 +321,12 @@ function missingColumnName(err: unknown): string | null {
   return null;
 }
 
-function selectAllExistingResourceColumns(
-  resourceTable: any,
+function selectExistingColumns(
+  columns: Record<string, unknown>,
   omittedColumnNames: Set<string>,
 ): Record<string, unknown> {
   const selection: Record<string, unknown> = {};
-  for (const [key, column] of Object.entries(resourceTable)) {
+  for (const [key, column] of Object.entries(columns)) {
     const name = columnName(column);
     if (!name || omittedColumnNames.has(name)) continue;
     selection[key] = column;
@@ -291,21 +334,61 @@ function selectAllExistingResourceColumns(
   return selection;
 }
 
+/**
+ * The fixed column set the access-decision logic in `resolveAccess` itself
+ * reads: identity (`id`), ownership (`ownerEmail`, `orgId`), and the coarse
+ * `visibility` flag. This is intentionally NOT caller-configurable — an
+ * arbitrary caller-supplied column list could omit a column the access
+ * checks below depend on and silently break authorization. Every ownable
+ * resource table has these columns (`ownableColumns()` + a primary key
+ * named `id`), so this projection is safe for any registration that
+ * doesn't also read the row through a dynamic resolver (see below).
+ */
+function projectedAccessColumns(resourceTable: any): Record<string, unknown> {
+  return {
+    id: resourceTable.id,
+    ownerEmail: resourceTable.ownerEmail,
+    orgId: resourceTable.orgId,
+    visibility: resourceTable.visibility,
+  };
+}
+
+/**
+ * True when this registration's `publicAccessRole` is a callback rather than
+ * a fixed role string. Callbacks receive the loaded `resource` and may read
+ * arbitrary fields on it (see e.g. `templates/design`'s
+ * `publicDesignAccessRole`, which inspects design-specific data). The
+ * projected access load must never be used for these registrations — always
+ * fall back to a full row load so the resolver sees the complete resource.
+ */
+function hasDynamicPublicAccessRoleResolver(
+  reg: ShareableResourceRegistration,
+): boolean {
+  return typeof reg.publicAccessRole === "function";
+}
+
 async function loadResourceForAccess(
   reg: ShareableResourceRegistration,
   resourceId: string,
+  options: ResolveAccessOptions = {},
 ): Promise<any | null> {
   const db = reg.getDb() as any;
+  const useProjection =
+    options.skipResourceBody === true &&
+    !hasDynamicPublicAccessRoleResolver(reg);
+  const projectedColumns = useProjection
+    ? projectedAccessColumns(reg.resourceTable)
+    : null;
   const omittedColumnNames = new Set<string>();
 
   for (let attempt = 0; attempt < 12; attempt++) {
     try {
       const query =
-        omittedColumnNames.size === 0
+        !projectedColumns && omittedColumnNames.size === 0
           ? db.select()
           : db.select(
-              selectAllExistingResourceColumns(
-                reg.resourceTable,
+              selectExistingColumns(
+                projectedColumns ?? reg.resourceTable,
                 omittedColumnNames,
               ),
             );
@@ -331,16 +414,53 @@ async function loadResourceForAccess(
 /**
  * Return the effective role the current user has on a specific resource, or
  * null if they have no access. Loads the resource and relevant share rows.
+ *
+ * By default the full resource row is loaded (unchanged historical
+ * behavior — for most resource types `.resource` here doubles as the
+ * action's primary data read). Pass `{ skipResourceBody: true }` when the
+ * caller only needs the access decision to load just the access-decision
+ * columns instead — see `ResolveAccessOptions`.
  */
 export async function resolveAccess(
+  resourceType: string,
+  resourceId: string,
+  rawCtx?: AccessContext,
+  options?: { skipResourceBody?: false },
+): Promise<ResolvedAccess | null>;
+export async function resolveAccess(
+  resourceType: string,
+  resourceId: string,
+  rawCtx: AccessContext | undefined,
+  options: { skipResourceBody: true },
+): Promise<ResolvedAccessProjected | null>;
+export async function resolveAccess(
+  resourceType: string,
+  resourceId: string,
+  rawCtx: AccessContext = currentAccess(),
+  options: ResolveAccessOptions = {},
+): Promise<ResolvedAccess | ResolvedAccessProjected | null> {
+  return resolveAccessImpl(resourceType, resourceId, rawCtx, options);
+}
+
+/**
+ * Un-overloaded implementation shared by the `resolveAccess` overloads and
+ * called directly by `assertAccess` below. Kept separate from the exported
+ * `resolveAccess` so internal callers passing a widened
+ * `ResolveAccessOptions` (rather than a `{ skipResourceBody: true }` /
+ * `{ skipResourceBody?: false }` literal) don't have to satisfy TypeScript's
+ * overload resolution, which only matches against the declared overload
+ * signatures, not the implementation signature.
+ */
+async function resolveAccessImpl(
   resourceType: string,
   resourceId: string,
   rawCtx: AccessContext = currentAccess(),
-): Promise<ResolvedAccess | null> {
+  options: ResolveAccessOptions = {},
+): Promise<ResolvedAccess | ResolvedAccessProjected | null> {
   const reg = requireShareableResource(resourceType);
   const ctx = resolveRegisteredAccessContext(reg, rawCtx);
 
-  const resource = await loadResourceForAccess(reg, resourceId);
+  const resource = await loadResourceForAccess(reg, resourceId, options);
   if (!resource) return null;
 
   const { userEmail, orgId } = ctx;
@@ -421,14 +541,38 @@ async function highestShareRole(
 /**
  * Throw ForbiddenError if the current user can't act on this resource with at
  * least the given role. Used at the top of update/delete actions.
+ *
+ * By default the full resource row is loaded (unchanged historical
+ * behavior). Pass `{ skipResourceBody: true }` as the fifth argument when
+ * the caller only needs the access decision — see `ResolveAccessOptions`.
  */
+export async function assertAccess(
+  resourceType: string,
+  resourceId: string,
+  minRole?: ShareRole | "owner",
+  ctx?: AccessContext,
+  options?: { skipResourceBody?: false },
+): Promise<ResolvedAccess>;
+export async function assertAccess(
+  resourceType: string,
+  resourceId: string,
+  minRole: ShareRole | "owner" | undefined,
+  ctx: AccessContext | undefined,
+  options: { skipResourceBody: true },
+): Promise<ResolvedAccessProjected>;
 export async function assertAccess(
   resourceType: string,
   resourceId: string,
   minRole: ShareRole | "owner" = "viewer",
   ctx: AccessContext = currentAccess(),
-): Promise<ResolvedAccess> {
-  const access = await resolveAccess(resourceType, resourceId, ctx);
+  options: ResolveAccessOptions = {},
+): Promise<ResolvedAccess | ResolvedAccessProjected> {
+  const access = await resolveAccessImpl(
+    resourceType,
+    resourceId,
+    ctx,
+    options,
+  );
   if (!access) {
     throw new ForbiddenError(`No access to ${resourceType} ${resourceId}`);
   }

package/corpus/core/src/sharing/registry.ts

@@ -61,6 +61,13 @@ export interface ShareableResourceRegistration {
    * this so public visibility remains viewer-only. Use narrowly for local or
    * otherwise constrained resources where the resource owner intentionally wants
    * unauthenticated link holders to do more than view.
+   *
+   * When this is a function, it may read arbitrary fields on the resource row
+   * (not just the ownership/visibility columns). Because of that,
+   * `resolveAccess`/`assertAccess`'s opt-in `{ skipResourceBody: true }`
+   * projected load (see `access.ts`) is automatically ignored for this
+   * registration and always loads the full row instead — a fixed role string
+   * has no such requirement and is compatible with the projection.
    */
   publicAccessRole?:
     | "viewer"

package/corpus/core/src/styles/agent-native.css

@@ -109,8 +109,7 @@
 .agent-layout-left-drawer[data-collapsed] {
   overflow: clip;
   width: var(--agent-layout-left-drawer-width, auto);
-  will-change: width;
-  transition: width 260ms cubic-bezier(0.32, 0.72, 0, 1);
+  transition: width 260ms var(--ease-drawer);
 }
 
 .agent-layout-left-drawer[data-collapsed="true"] {
@@ -151,9 +150,9 @@
   container: agent-native-main / inline-size;
   background: var(--agent-native-raised-surface);
   transition:
-    border-radius 260ms cubic-bezier(0.32, 0.72, 0, 1),
-    border-color 260ms cubic-bezier(0.32, 0.72, 0, 1),
-    box-shadow 260ms cubic-bezier(0.32, 0.72, 0, 1);
+    border-radius 260ms var(--ease-drawer),
+    border-color 260ms var(--ease-drawer),
+    box-shadow 260ms var(--ease-drawer);
 }
 
 .agent-native-app-main {
@@ -235,8 +234,7 @@
 .agent-sidebar-panel[data-agent-sidebar-animation="desktop"] {
   width: 0;
   overflow: clip;
-  will-change: width;
-  transition: width 260ms cubic-bezier(0.32, 0.72, 0, 1);
+  transition: width 260ms var(--ease-drawer);
 }
 
 .agent-sidebar-panel[data-agent-sidebar-animation="desktop"][data-agent-sidebar-state="open"] {
@@ -251,7 +249,7 @@
   height: 100%;
   transform: var(--agent-sidebar-inner-closed-transform, translateX(100%));
   will-change: transform;
-  transition: transform 260ms cubic-bezier(0.32, 0.72, 0, 1);
+  transition: transform 260ms var(--ease-drawer);
 }
 
 .agent-sidebar-panel[data-agent-sidebar-animation="desktop"][data-agent-sidebar-state="open"]
@@ -265,7 +263,7 @@
     translateX(calc(100% + 1px))
   );
   will-change: transform;
-  transition: transform 260ms cubic-bezier(0.32, 0.72, 0, 1);
+  transition: transform 260ms var(--ease-drawer);
 }
 
 .agent-sidebar-panel[data-agent-sidebar-animation="mobile"][data-agent-sidebar-state="open"] {
@@ -357,6 +355,9 @@
   --animate-accordion-down: accordion-down 0.2s ease-out;
   --animate-accordion-up: accordion-up 0.2s ease-out;
   --animate-bounce-once: bounce-once 0.55s cubic-bezier(0.34, 1.56, 0.64, 1);
+  --ease-drawer: cubic-bezier(0.32, 0.72, 0, 1);
+  --ease-collapse: cubic-bezier(0.2, 0, 0, 1);
+  --ease-out-strong: cubic-bezier(0.23, 1, 0.32, 1);
 
   @keyframes accordion-down {
     from {
@@ -516,9 +517,9 @@
   clip-path: inset(0);
   interpolate-size: allow-keywords;
   transition:
-    height 200ms cubic-bezier(0.2, 0, 0, 1),
+    height 200ms var(--ease-collapse),
     opacity 150ms ease,
-    clip-path 200ms cubic-bezier(0.2, 0, 0, 1);
+    clip-path 200ms var(--ease-collapse);
 }
 
 .agent-native-settings-section-body[data-state="closed"] {
@@ -541,9 +542,9 @@
     height: auto;
     max-height: 64rem;
     transition:
-      max-height 200ms cubic-bezier(0.2, 0, 0, 1),
+      max-height 200ms var(--ease-collapse),
       opacity 150ms ease,
-      clip-path 200ms cubic-bezier(0.2, 0, 0, 1);
+      clip-path 200ms var(--ease-collapse);
   }
 
   .agent-native-settings-section-body[data-state="closed"] {
@@ -553,7 +554,7 @@
 
 @media (prefers-reduced-motion: reduce) {
   .agent-native-settings-section-body {
-    transition: none;
+    transition: opacity 150ms ease;
   }
 }
 

package/corpus/core/src/templates/default/.agents/skills/frontend-design/SKILL.md

@@ -48,7 +48,7 @@ Default to Apple/Linear-level restraint: make the primary workflow obvious, then
 
 - **Typography**: Use the product's existing type system first. For net-new public pages, choose characterful but readable type and keep sizing appropriate to the surface.
 - **Color and theme**: Use semantic tokens and CSS variables. Avoid one-note palettes and default purple/blue gradients unless the brand demands them.
-- **Motion**: Prefer purposeful transitions and small state changes. Use CSS transitions/keyframes unless the app already uses a motion library.
+- **Motion**: Prefer purposeful transitions and small state changes. Use CSS transitions/keyframes unless the app already uses a motion library. Never `transition-all` — list the properties that actually change (e.g. `transition-[opacity,transform]`). Use the shared easing tokens defined in `packages/core/src/styles/agent-native.css` instead of hand-typing curves: `var(--ease-drawer)` (260ms, drawers/app chrome), `var(--ease-collapse)` (200ms, expand/collapse), `var(--ease-out-strong)` (snappy entrances) — in Tailwind, `ease-[var(--ease-collapse)]`. Enter/exit with ease-out, never `ease-in`. Overlays that zoom in must set the Radix origin var (e.g. `origin-[--radix-popover-content-transform-origin]`). Animate `transform`/`opacity`, not width/height/padding/box-shadow. Gate looping or large-movement animations with `motion-reduce:`. Command palettes and keyboard-triggered actions get no animation.
 - **Composition**: Match the workflow. Operational apps should be dense and scannable; marketing or portfolio pages can be more immersive.
 - **Visual assets**: Websites, games, and object-focused pages need real or generated media when images help users understand the subject.
 - **Responsive fit**: Text must not overflow buttons, cards, tabs, sidebars, or fixed-format tools. Use stable dimensions for boards, grids, toolbars, and counters.

package/corpus/core/src/templates/default/app/i18n/ar-SA.ts

@@ -391,6 +391,12 @@ const messages = {
     contentLabel: "المحتوى",
     previewTitle: "معاينة الامتداد",
     previewEmpty: "ستظهر المعاينة هنا",
+    loadError: "تعذر تحميل الإضافات.",
+    widgetsLoadError: "تعذر تحميل الأدوات.",
+    widgetAreasLoadError: "تعذر تحميل مناطق الأدوات.",
+    historyLoadError: "تعذر تحميل سجل الإضافة.",
+    versionLoadError: "تعذر تحميل إصدار الإضافة هذا.",
+    retry: "إعادة المحاولة",
   },
   org: {
     createTitle: "قم بإنشاء مؤسستك",

package/corpus/core/src/templates/default/app/i18n/de-DE.ts

@@ -378,6 +378,12 @@ const messages = {
     contentLabel: "Inhalt",
     previewTitle: "Erweiterungsvorschau",
     previewEmpty: "Hier wird eine Vorschau angezeigt",
+    loadError: "Erweiterungen konnten nicht geladen werden.",
+    widgetsLoadError: "Widgets konnten nicht geladen werden.",
+    widgetAreasLoadError: "Widget-Bereiche konnten nicht geladen werden.",
+    historyLoadError: "Der Erweiterungsverlauf konnte nicht geladen werden.",
+    versionLoadError: "Diese Erweiterungsversion konnte nicht geladen werden.",
+    retry: "Erneut versuchen",
   },
   org: {
     createTitle: "Erstellen Sie Ihre Organisation",

package/corpus/core/src/templates/default/app/i18n/en-US.ts

@@ -369,6 +369,12 @@ const messages = {
     contentLabel: "Content",
     previewTitle: "Extension preview",
     previewEmpty: "Preview will appear here",
+    loadError: "Couldn't load extensions.",
+    widgetsLoadError: "Couldn't load widgets.",
+    widgetAreasLoadError: "Couldn't load widget areas.",
+    historyLoadError: "Couldn't load extension history.",
+    versionLoadError: "Couldn't load this extension version.",
+    retry: "Retry",
   },
   org: {
     createTitle: "Create your organization",

package/corpus/core/src/templates/default/app/i18n/es-ES.ts

@@ -385,6 +385,12 @@ const messages = {
     contentLabel: "Contenido",
     previewTitle: "Vista previa de la extensión",
     previewEmpty: "La vista previa aparecerá aquí",
+    loadError: "No se pudieron cargar las extensiones.",
+    widgetsLoadError: "No se pudieron cargar los widgets.",
+    widgetAreasLoadError: "No se pudieron cargar las áreas de widgets.",
+    historyLoadError: "No se pudo cargar el historial de la extensión.",
+    versionLoadError: "No se pudo cargar esta versión de la extensión.",
+    retry: "Reintentar",
   },
   org: {
     createTitle: "Crea tu organización",

package/corpus/core/src/templates/default/app/i18n/fr-FR.ts

@@ -383,6 +383,12 @@ const messages = {
     contentLabel: "Contenu",
     previewTitle: "Aperçu des extensions",
     previewEmpty: "L'aperçu apparaîtra ici",
+    loadError: "Impossible de charger les extensions.",
+    widgetsLoadError: "Impossible de charger les widgets.",
+    widgetAreasLoadError: "Impossible de charger les zones de widgets.",
+    historyLoadError: "Impossible de charger l'historique de l'extension.",
+    versionLoadError: "Impossible de charger cette version de l'extension.",
+    retry: "Réessayer",
   },
   org: {
     createTitle: "Créez votre organisation",

package/corpus/core/src/templates/default/app/i18n/hi-IN.ts

@@ -365,6 +365,12 @@ const messages = {
     contentLabel: "कॉन्टेंट",
     previewTitle: "एक्सटेंशन पूर्वावलोकन",
     previewEmpty: "पूर्वावलोकन यहां दिखाई देगा",
+    loadError: "एक्सटेंशन लोड नहीं हो सके।",
+    widgetsLoadError: "विजेट लोड नहीं हो सके।",
+    widgetAreasLoadError: "विजेट क्षेत्र लोड नहीं हो सके।",
+    historyLoadError: "एक्सटेंशन इतिहास लोड नहीं हो सका।",
+    versionLoadError: "यह एक्सटेंशन संस्करण लोड नहीं हो सका।",
+    retry: "पुनः प्रयास करें",
   },
   org: {
     createTitle: "अपना संगठन बनाएं",

package/corpus/core/src/templates/default/app/i18n/ja-JP.ts

@@ -370,6 +370,12 @@ const messages = {
     contentLabel: "コンテンツ",
     previewTitle: "拡張機能のプレビュー",
     previewEmpty: "ここにプレビューが表示されます",
+    loadError: "拡張機能を読み込めませんでした。",
+    widgetsLoadError: "ウィジェットを読み込めませんでした。",
+    widgetAreasLoadError: "ウィジェット領域を読み込めませんでした。",
+    historyLoadError: "拡張機能の履歴を読み込めませんでした。",
+    versionLoadError: "この拡張機能のバージョンを読み込めませんでした。",
+    retry: "再試行",
   },
   org: {
     createTitle: "組織を作成する",

package/corpus/core/src/templates/default/app/i18n/ko-KR.ts

@@ -363,6 +363,12 @@ const messages = {
     contentLabel: "콘텐츠",
     previewTitle: "확장 프로그램 미리보기",
     previewEmpty: "미리보기가 여기에 표시됩니다.",
+    loadError: "확장 프로그램을 불러올 수 없습니다.",
+    widgetsLoadError: "위젯을 불러올 수 없습니다.",
+    widgetAreasLoadError: "위젯 영역을 불러올 수 없습니다.",
+    historyLoadError: "확장 프로그램 기록을 불러올 수 없습니다.",
+    versionLoadError: "이 확장 프로그램 버전을 불러올 수 없습니다.",
+    retry: "다시 시도",
   },
   org: {
     createTitle: "조직 만들기",

package/corpus/core/src/templates/default/app/i18n/pt-BR.ts

@@ -382,6 +382,12 @@ const messages = {
     contentLabel: "Conteúdo",
     previewTitle: "Visualização da extensão",
     previewEmpty: "A visualização aparecerá aqui",
+    loadError: "Não foi possível carregar as extensões.",
+    widgetsLoadError: "Não foi possível carregar os widgets.",
+    widgetAreasLoadError: "Não foi possível carregar as áreas de widgets.",
+    historyLoadError: "Não foi possível carregar o histórico da extensão.",
+    versionLoadError: "Não foi possível carregar esta versão da extensão.",
+    retry: "Tentar novamente",
   },
   org: {
     createTitle: "Crie sua organização",

package/corpus/core/src/templates/default/app/i18n/zh-CN.ts

@@ -352,6 +352,12 @@ const messages = {
     contentLabel: "内容",
     previewTitle: "扩展预览",
     previewEmpty: "预览将出现在这里",
+    loadError: "无法加载扩展。",
+    widgetsLoadError: "无法加载小部件。",
+    widgetAreasLoadError: "无法加载小部件区域。",
+    historyLoadError: "无法加载扩展历史记录。",
+    versionLoadError: "无法加载此扩展版本。",
+    retry: "重试",
   },
   org: {
     createTitle: "创建您的组织",

package/corpus/core/src/templates/default/app/i18n/zh-TW.ts

@@ -350,6 +350,12 @@ const messages = {
     contentLabel: "內容",
     previewTitle: "擴充功能預覽",
     previewEmpty: "預覽將出現在這裡",
+    loadError: "無法載入擴充功能。",
+    widgetsLoadError: "無法載入小工具。",
+    widgetAreasLoadError: "無法載入小工具區域。",
+    historyLoadError: "無法載入擴充功能歷史記錄。",
+    versionLoadError: "無法載入此擴充功能版本。",
+    retry: "重試",
   },
   org: {
     createTitle: "建立您的組織",

package/corpus/core/src/templates/workspace-core/.agents/skills/authentication/SKILL.md

@@ -13,7 +13,7 @@ metadata:
 
 ## Rule
 
-Auth is powered by **Better Auth** with account-first design. Every new user creates an account on first visit. Use `getSession(event)` to authenticate custom routes; actions are auto-protected.
+Auth is powered by **Better Auth** with account-first design. Every new user creates an account on first visit. Use `getSession(event)` to authenticate custom routes; actions are auto-protected. Normal app HTML and React Router page-data responses are one impersonal, public-cacheable shell for every visitor. The client decides whether to render private UI or redirect to sign-in.
 
 ## Auth Modes
 
@@ -43,8 +43,9 @@ and `/.well-known/oauth-authorization-server`, dynamically register a public
 client, and complete authorization-code + PKCE at
 `/_agent-native/mcp/oauth/authorize` / `/_agent-native/mcp/oauth/token`.
 Access tokens are audience-bound to the exact MCP URL and carry user/org
-identity plus `mcp:read`, `mcp:write`, and/or `mcp:apps`; refresh tokens are
-stored hashed and rotate. Keep `ACCESS_TOKEN` and `pnpm exec agent-native connect` for
+identity plus `mcp:read`, `mcp:write`, `mcp:apps`, and/or `offline_access`;
+advertising `offline_access` lets hosts such as ChatGPT retain refresh access.
+Refresh tokens are stored hashed and rotate. Keep `ACCESS_TOKEN` and `pnpm exec agent-native connect` for
 local stdio proxying and fallback clients. The CLI
 uses the OAuth-native URL-only entry for Claude Code/Claude Code CLI by
 default; use the Connect page or `npx @agent-native/core@latest connect --token <token>` when a
@@ -129,44 +130,41 @@ window.location.href =
   "/_agent-native/sign-in?return=" + encodeURIComponent(ret);
 ```
 
-After successful sign-in (token / email-password / Google OAuth), the framework 302s to `return`. The path is validated as same-origin via the URL parser — open-redirect / header-injection inputs fall back to `/`.
+After successful sign-in (token / email-password / Google OAuth), the framework redirects to `return`. The path is validated as same-origin via the URL parser — open-redirect / header-injection inputs fall back to `/`.
 
-Bookmarked private paths already work _when the request reaches the server_ — the auth guard serves the login page at the requested URL and post-login reload returns the user there.
+Bookmarked private paths work through the client session gate: the shared shell hydrates, `AppProviders` redirects the signed-out visitor to the framework sign-in entrypoint with the current path as `return`, and successful sign-in sends them back.
 
 ## Gating the App Shell (avoid the logged-out infinite spinner)
 
-The server auth guard only protects requests that actually reach the Nitro
-function. A statically-served / CDN-cached SPA shell, or a client-side (React
-Router) navigation made after the session expired, never re-hits the guard — so
-the app boots with **no session**, every data query 401s, and the UI sticks on
-its loading state forever. Server-side protection alone is not enough; gate on
-the client too.
+Normal app HTML and React Router page-data responses deliberately bypass the
+server session guard. They are rendered impersonally and cached as one shared
+shell; APIs, actions, and framework data routes remain server-protected. The
+client session gate is therefore the authoritative decision point for whether
+private app UI renders.
 
-For a fully private app (every page requires auth, like mail), wrap the routed
-shell with the framework's `RequireSession`. It resolves the session on the
-client and redirects signed-out visitors to `/_agent-native/sign-in?return=…`
-instead of spinning:
+`AppProviders` applies `RequireSession` automatically on its private branch. It
+resolves the session on the client and redirects signed-out visitors to
+`/_agent-native/sign-in?return=…` before mounting the routed shell:
 
 ```tsx
-import { AppProviders, RequireSession } from "@agent-native/core/client";
+import { AppProviders } from "@agent-native/core/client";
 
 <AppProviders queryClient={queryClient}>
-  <RequireSession bypass={isMcpEmbedSurface()}>
-    <AppLayout>
-      <Outlet />
-    </AppLayout>
-  </RequireSession>
+  <AppLayout>
+    <Outlet />
+  </AppLayout>
 </AppProviders>;
 ```
 
-- Place it **inside** `AppProviders` (so the loading fallback is themed) and
-  **around** the layout/outlet — also around any always-mounted effects (poll,
-  automation trigger) so they don't fire 401s for logged-out visitors.
-- Pass `bypass` for surfaces that authenticate by another mechanism (embed /
-  popout iframes carrying their own token) so they are never bounced to sign-in.
-- Apps with public/anonymous routes (share pages) must **not** wrap the whole
-  app — gate only the private subtree, or use the `redirect={false}` +
-  `signedOut` props to render an inline call-to-action instead of redirecting.
+- Keep the layout/outlet and always-mounted effects (poll, automation trigger)
+  inside `AppProviders` so they do not fire 401s before the gate resolves.
+- Pass `sessionBypass` to `AppProviders` only for a private-looking surface that
+  authenticates by another mechanism (for example, an embed iframe carrying
+  its own scoped token).
+- Pass `isPublicPath` for public/anonymous and SEO routes. That branch does not
+  mount `RequireSession` and SSRs real content.
+- Use `RequireSession` directly only when a nested subtree needs custom
+  `redirect={false}` / `signedOut` behavior.
 
 ## Related Skills
 

package/corpus/core/src/templates/workspace-core/.agents/skills/external-agents/SKILL.md

@@ -84,7 +84,8 @@ https://<your-app>.agent-native.com/_agent-native/mcp
 ```
 
 Claude / Claude Desktop: add a custom connector with the URL, click Connect,
-then sign in and approve `mcp:read`, `mcp:write`, and `mcp:apps`. Claude Code:
+then sign in and approve `mcp:read`, `mcp:write`, `mcp:apps`, and
+`offline_access`. Claude Code:
 add the same remote HTTP URL, restart if needed, run `/mcp`, and choose
 Authenticate. ChatGPT: create a custom MCP connector/app, paste the same URL,
 choose OAuth, scan/discover tools, then sign in and approve scopes. Each host

package/corpus/core/src/templates/workspace-core/.agents/skills/frontend-design/SKILL.md

@@ -48,7 +48,7 @@ Default to Apple/Linear-level restraint: make the primary workflow obvious, then
 
 - **Typography**: Use the product's existing type system first. For net-new public pages, choose characterful but readable type and keep sizing appropriate to the surface.
 - **Color and theme**: Use semantic tokens and CSS variables. Avoid one-note palettes and default purple/blue gradients unless the brand demands them.
-- **Motion**: Prefer purposeful transitions and small state changes. Use CSS transitions/keyframes unless the app already uses a motion library.
+- **Motion**: Prefer purposeful transitions and small state changes. Use CSS transitions/keyframes unless the app already uses a motion library. Never `transition-all` — list the properties that actually change (e.g. `transition-[opacity,transform]`). Use the shared easing tokens defined in `packages/core/src/styles/agent-native.css` instead of hand-typing curves: `var(--ease-drawer)` (260ms, drawers/app chrome), `var(--ease-collapse)` (200ms, expand/collapse), `var(--ease-out-strong)` (snappy entrances) — in Tailwind, `ease-[var(--ease-collapse)]`. Enter/exit with ease-out, never `ease-in`. Overlays that zoom in must set the Radix origin var (e.g. `origin-[--radix-popover-content-transform-origin]`). Animate `transform`/`opacity`, not width/height/padding/box-shadow. Gate looping or large-movement animations with `motion-reduce:`. Command palettes and keyboard-triggered actions get no animation.
 - **Composition**: Match the workflow. Operational apps should be dense and scannable; marketing or portfolio pages can be more immersive.
 - **Visual assets**: Websites, games, and object-focused pages need real or generated media when images help users understand the subject.
 - **Responsive fit**: Text must not overflow buttons, cards, tabs, sidebars, or fixed-format tools. Use stable dimensions for boards, grids, toolbars, and counters.