@agent-native/core 0.97.0 → 0.98.1

package/src/templates/default/app/i18n/zh-CN.ts

@@ -352,6 +352,12 @@ const messages = {
     contentLabel: "内容",
     previewTitle: "扩展预览",
     previewEmpty: "预览将出现在这里",
+    loadError: "无法加载扩展。",
+    widgetsLoadError: "无法加载小部件。",
+    widgetAreasLoadError: "无法加载小部件区域。",
+    historyLoadError: "无法加载扩展历史记录。",
+    versionLoadError: "无法加载此扩展版本。",
+    retry: "重试",
   },
   org: {
     createTitle: "创建您的组织",

package/src/templates/default/app/i18n/zh-TW.ts

@@ -350,6 +350,12 @@ const messages = {
     contentLabel: "內容",
     previewTitle: "擴充功能預覽",
     previewEmpty: "預覽將出現在這裡",
+    loadError: "無法載入擴充功能。",
+    widgetsLoadError: "無法載入小工具。",
+    widgetAreasLoadError: "無法載入小工具區域。",
+    historyLoadError: "無法載入擴充功能歷史記錄。",
+    versionLoadError: "無法載入此擴充功能版本。",
+    retry: "重試",
   },
   org: {
     createTitle: "建立您的組織",

package/src/templates/workspace-core/.agents/skills/authentication/SKILL.md

@@ -13,7 +13,7 @@ metadata:
 
 ## Rule
 
-Auth is powered by **Better Auth** with account-first design. Every new user creates an account on first visit. Use `getSession(event)` to authenticate custom routes; actions are auto-protected.
+Auth is powered by **Better Auth** with account-first design. Every new user creates an account on first visit. Use `getSession(event)` to authenticate custom routes; actions are auto-protected. Normal app HTML and React Router page-data responses are one impersonal, public-cacheable shell for every visitor. The client decides whether to render private UI or redirect to sign-in.
 
 ## Auth Modes
 
@@ -43,8 +43,9 @@ and `/.well-known/oauth-authorization-server`, dynamically register a public
 client, and complete authorization-code + PKCE at
 `/_agent-native/mcp/oauth/authorize` / `/_agent-native/mcp/oauth/token`.
 Access tokens are audience-bound to the exact MCP URL and carry user/org
-identity plus `mcp:read`, `mcp:write`, and/or `mcp:apps`; refresh tokens are
-stored hashed and rotate. Keep `ACCESS_TOKEN` and `pnpm exec agent-native connect` for
+identity plus `mcp:read`, `mcp:write`, `mcp:apps`, and/or `offline_access`;
+advertising `offline_access` lets hosts such as ChatGPT retain refresh access.
+Refresh tokens are stored hashed and rotate. Keep `ACCESS_TOKEN` and `pnpm exec agent-native connect` for
 local stdio proxying and fallback clients. The CLI
 uses the OAuth-native URL-only entry for Claude Code/Claude Code CLI by
 default; use the Connect page or `npx @agent-native/core@latest connect --token <token>` when a
@@ -129,44 +130,41 @@ window.location.href =
   "/_agent-native/sign-in?return=" + encodeURIComponent(ret);
 ```
 
-After successful sign-in (token / email-password / Google OAuth), the framework 302s to `return`. The path is validated as same-origin via the URL parser — open-redirect / header-injection inputs fall back to `/`.
+After successful sign-in (token / email-password / Google OAuth), the framework redirects to `return`. The path is validated as same-origin via the URL parser — open-redirect / header-injection inputs fall back to `/`.
 
-Bookmarked private paths already work _when the request reaches the server_ — the auth guard serves the login page at the requested URL and post-login reload returns the user there.
+Bookmarked private paths work through the client session gate: the shared shell hydrates, `AppProviders` redirects the signed-out visitor to the framework sign-in entrypoint with the current path as `return`, and successful sign-in sends them back.
 
 ## Gating the App Shell (avoid the logged-out infinite spinner)
 
-The server auth guard only protects requests that actually reach the Nitro
-function. A statically-served / CDN-cached SPA shell, or a client-side (React
-Router) navigation made after the session expired, never re-hits the guard — so
-the app boots with **no session**, every data query 401s, and the UI sticks on
-its loading state forever. Server-side protection alone is not enough; gate on
-the client too.
+Normal app HTML and React Router page-data responses deliberately bypass the
+server session guard. They are rendered impersonally and cached as one shared
+shell; APIs, actions, and framework data routes remain server-protected. The
+client session gate is therefore the authoritative decision point for whether
+private app UI renders.
 
-For a fully private app (every page requires auth, like mail), wrap the routed
-shell with the framework's `RequireSession`. It resolves the session on the
-client and redirects signed-out visitors to `/_agent-native/sign-in?return=…`
-instead of spinning:
+`AppProviders` applies `RequireSession` automatically on its private branch. It
+resolves the session on the client and redirects signed-out visitors to
+`/_agent-native/sign-in?return=…` before mounting the routed shell:
 
 ```tsx
-import { AppProviders, RequireSession } from "@agent-native/core/client";
+import { AppProviders } from "@agent-native/core/client";
 
 <AppProviders queryClient={queryClient}>
-  <RequireSession bypass={isMcpEmbedSurface()}>
-    <AppLayout>
-      <Outlet />
-    </AppLayout>
-  </RequireSession>
+  <AppLayout>
+    <Outlet />
+  </AppLayout>
 </AppProviders>;
 ```
 
-- Place it **inside** `AppProviders` (so the loading fallback is themed) and
-  **around** the layout/outlet — also around any always-mounted effects (poll,
-  automation trigger) so they don't fire 401s for logged-out visitors.
-- Pass `bypass` for surfaces that authenticate by another mechanism (embed /
-  popout iframes carrying their own token) so they are never bounced to sign-in.
-- Apps with public/anonymous routes (share pages) must **not** wrap the whole
-  app — gate only the private subtree, or use the `redirect={false}` +
-  `signedOut` props to render an inline call-to-action instead of redirecting.
+- Keep the layout/outlet and always-mounted effects (poll, automation trigger)
+  inside `AppProviders` so they do not fire 401s before the gate resolves.
+- Pass `sessionBypass` to `AppProviders` only for a private-looking surface that
+  authenticates by another mechanism (for example, an embed iframe carrying
+  its own scoped token).
+- Pass `isPublicPath` for public/anonymous and SEO routes. That branch does not
+  mount `RequireSession` and SSRs real content.
+- Use `RequireSession` directly only when a nested subtree needs custom
+  `redirect={false}` / `signedOut` behavior.
 
 ## Related Skills
 

package/src/templates/workspace-core/.agents/skills/external-agents/SKILL.md

@@ -84,7 +84,8 @@ https://<your-app>.agent-native.com/_agent-native/mcp
 ```
 
 Claude / Claude Desktop: add a custom connector with the URL, click Connect,
-then sign in and approve `mcp:read`, `mcp:write`, and `mcp:apps`. Claude Code:
+then sign in and approve `mcp:read`, `mcp:write`, `mcp:apps`, and
+`offline_access`. Claude Code:
 add the same remote HTTP URL, restart if needed, run `/mcp`, and choose
 Authenticate. ChatGPT: create a custom MCP connector/app, paste the same URL,
 choose OAuth, scan/discover tools, then sign in and approve scopes. Each host

package/src/templates/workspace-core/.agents/skills/frontend-design/SKILL.md

@@ -48,7 +48,7 @@ Default to Apple/Linear-level restraint: make the primary workflow obvious, then
 
 - **Typography**: Use the product's existing type system first. For net-new public pages, choose characterful but readable type and keep sizing appropriate to the surface.
 - **Color and theme**: Use semantic tokens and CSS variables. Avoid one-note palettes and default purple/blue gradients unless the brand demands them.
-- **Motion**: Prefer purposeful transitions and small state changes. Use CSS transitions/keyframes unless the app already uses a motion library.
+- **Motion**: Prefer purposeful transitions and small state changes. Use CSS transitions/keyframes unless the app already uses a motion library. Never `transition-all` — list the properties that actually change (e.g. `transition-[opacity,transform]`). Use the shared easing tokens defined in `packages/core/src/styles/agent-native.css` instead of hand-typing curves: `var(--ease-drawer)` (260ms, drawers/app chrome), `var(--ease-collapse)` (200ms, expand/collapse), `var(--ease-out-strong)` (snappy entrances) — in Tailwind, `ease-[var(--ease-collapse)]`. Enter/exit with ease-out, never `ease-in`. Overlays that zoom in must set the Radix origin var (e.g. `origin-[--radix-popover-content-transform-origin]`). Animate `transform`/`opacity`, not width/height/padding/box-shadow. Gate looping or large-movement animations with `motion-reduce:`. Command palettes and keyboard-triggered actions get no animation.
 - **Composition**: Match the workflow. Operational apps should be dense and scannable; marketing or portfolio pages can be more immersive.
 - **Visual assets**: Websites, games, and object-focused pages need real or generated media when images help users understand the subject.
 - **Responsive fit**: Text must not overflow buttons, cards, tabs, sidebars, or fixed-format tools. Use stable dimensions for boards, grids, toolbars, and counters.

package/src/templates/workspace-core/.agents/skills/observability/SKILL.md

@@ -34,9 +34,41 @@ await putSetting("observability-config", {
   captureToolArgs: true,    // capture action input args
   captureToolResults: false,
   evalSampleRate: 0.05,     // 5% of runs get LLM-as-judge eval
+  inferredSentimentEnabled: false,
+  inferredSentimentSampleRate: 0,
+  inferredSentimentModel: "gpt-5-6-luna",
 });
 ```
 
+#### Optional inferred sentiment
+
+Self-hosted apps default to no inferred sentiment. First-party apps hosted on
+`agent-native.com` automatically classify 100% of eligible user replies with
+`gpt-5-6-luna`; an explicit stored `inferredSentimentEnabled: false` remains an
+opt-out. Deployment overrides are `AGENT_NATIVE_INFERRED_SENTIMENT=on|off`,
+`AGENT_NATIVE_INFERRED_SENTIMENT_SAMPLE_RATE=0..1`, and
+`AGENT_NATIVE_INFERRED_SENTIMENT_MODEL=<model>`; `off` is always the emergency
+kill switch.
+
+Classification uses only the original visible user text, capped at 2,000
+characters, with no tools, temperature 0, an eight-token output, and a five
+second timeout. It skips attachment-only turns, internal continuations, chained
+background chunks, and first turns that have no preceding response to
+attribute. The managed Builder engine runs the classifier after the main
+response has streamed, so it does not contend with the user's response.
+
+Successful classifications emit a content-free `$ai_sentiment` tracking event:
+
+- `sentiment`: `positive`, `negative`, or `neutral`
+- `method`: `llm`
+- `model` / `$ai_model`: model that generated the preceding assistant response
+- `run_id` / `$ai_trace_id`: preceding response run
+- `thread_id` / `$ai_session_id`: conversation
+- `classification_trigger_run_id`: run started by the classified user reply
+- `classifier_model` and `classifier_engine`: classifier attribution
+
+No raw message, prompt, or response text is persisted or tracked.
+
 ### 2. Feedback
 
 **Explicit** — `ThumbsFeedback` component renders inline thumbs up/down on every agent message in the chat UI. Thumbs down opens a category popover (Inaccurate, Not helpful, Wrong tool, Too slow). Already wired into `AssistantChat.tsx` via `React.lazy`.

package/src/templates/workspace-core/.agents/skills/real-time-sync/SKILL.md

@@ -30,7 +30,7 @@ The agent modifies data in SQL, but the UI runs in the browser. SSE bridges same
    useDbSync({ queryClient });
    ```
 
-   For each non-own event, `useDbSync` bumps a per-source counter (e.g. `dashboards`, `analyses`, `settings`, `action`) and invalidates a small fixed list of framework-internal prefixes (`["action"]`, `["app-state"]`, `["__set_url__"]`, etc.). It does **not** blanket-invalidate templates' own data queries for ordinary domain events — that caused a request storm in production. The exception is `source: "action"`: a successful mutating action is the framework-wide "agent changed app data" signal, so `useDbSync` also refreshes active React Query observers as a compatibility safety net for custom apps that have not yet moved every read to `useActionQuery` or source-versioned query keys.
+   For each non-own event, `useDbSync` bumps a per-source counter (e.g. `dashboards`, `analyses`, `settings`, `action`) and invalidates a small fixed list of framework-internal prefixes (`["action"]`, `["app-state"]`, `["__set_url__"]`, etc.). It does **not** blanket-invalidate templates' own data queries — that caused request storms in production. A successful mutating action refreshes active `useActionQuery` observers under the `["action"]` prefix. Browser actions carry a tab id so their originating tab ignores the sync echo while other tabs refresh. Legacy apps can opt into broader compatibility with `actionInvalidatePredicate`, but first-party apps should use action-backed or source-versioned query keys. Idle fallback polling runs once per minute; active agent work temporarily uses the faster cadence.
 
 3. **Templates fold per-source counters into their query keys.** This is the pattern that makes "agent writes show up without a manual refresh" reliable:
 
@@ -117,7 +117,7 @@ useQuery({
 | UI not updating after agent writes | Is `useDbSync` called with the correct `queryClient`? Does the affected query have an active observer?         |
 | Poll endpoint not responding       | Is `/_agent-native/poll` accessible? Is the server running?                                                    |
 | SSE not connecting                 | Is `/_agent-native/events` accessible and authenticated? Polling should still keep the UI fresh as fallback.   |
-| High CPU / event storms            | The agent is writing rapidly. Add `staleTime` to queries to debounce refetches.                                |
+| High CPU / event storms            | Use targeted source keys, settle bursty list counters, and avoid broad action invalidation.                   |
 
 ## Jitter Prevention
 

package/src/templates/workspace-core/.agents/skills/secrets/SKILL.md

@@ -170,9 +170,13 @@ Core routes plugin mounts these under `/_agent-native/secrets/` automatically:
 - Values are stored in `app_secrets` (created on-demand; no migration
   needed).
 - Encrypted at rest with AES-256-GCM. Key material is derived from
-  `SECRETS_ENCRYPTION_KEY` (preferred) or `BETTER_AUTH_SECRET` (fallback).
-  If neither is set, the framework uses a machine-local fallback and logs a
-  one-time warning — set `SECRETS_ENCRYPTION_KEY` in production.
+  `<APP_NAME>_SECRETS_ENCRYPTION_KEY` when set (for example,
+  `ANALYTICS_SECRETS_ENCRYPTION_KEY`), then `SECRETS_ENCRYPTION_KEY`, then
+  `BETTER_AUTH_SECRET`. App-scoped keys are useful when a local multi-app
+  workspace connects one app to its production database without replacing the
+  shared local authentication secret. If none is set, the framework uses a
+  machine-local fallback and logs a one-time warning — set stable key material
+  in production and in every runtime that reads the same encrypted data.
 
 ## Ad-hoc Keys
 

package/src/templates/workspace-core/.agents/skills/voice-transcription/SKILL.md

@@ -52,24 +52,54 @@ action before requesting microphone permission.
 - Starting voice mode collapses the chat into a persistent bottom-end speech
   orb. The orb stays visible above the chat even when the chat opens
   automatically. Clicking it shows or hides chat without ending the session;
-  ending the session is a separate, explicit control.
-- The orb's compact waveform must reflect actual microphone or assistant audio
-  activity. It is an audio-level indicator, not a decorative animation.
+  opening chat slides the orb clear of the sidebar. The progressively disclosed
+  controls contain only settings and the separate end-session action.
+- The orb's compact waveform stays visible for the full session and reflects
+  actual microphone or assistant audio activity. At silence it rests at its
+  baseline instead of turning into a loading spinner. While connecting, show a
+  distinct compact spinner; when the session becomes live, the assistant gives
+  one brief spoken greeting so readiness is unambiguous. Do not apply a
+  text-sized `max_output_tokens` cap to that audio greeting because audio tokens
+  can truncate it mid-sentence.
+- The orb settings cog opens in place without ending voice mode or navigating
+  away. Nested pickers must not dismiss the settings popover. Language and
+  intelligence update the active Realtime session; the microphone picker swaps
+  the live WebRTC input track and remembers the browser-local device choice;
+  an output-voice change updates immediately only before the assistant has
+  emitted audio and otherwise applies to the next conversation, matching the
+  Realtime API's voice immutability rule.
 - Semantic VAD keeps listening, starts responses automatically, and supports
   barge-in while the agent is speaking.
 - Function calls must cross the authenticated realtime tool bridge and enter
   `executeAgentToolCall`. Never call `ActionEntry.run` directly: that bypasses
   schema validation, approvals, audit/journal behavior, timeouts, redaction,
   and mutation refreshes.
-- Preserve the active browser-tab id in request context so `set-url`,
+- Preserve the active browser-tab id in request context so `set-url-path`,
   `set-search-params`, `view-screen`, and tab-scoped application state affect
-  the app the user is actually speaking to.
+  the app the user is actually speaking to. Realtime tool manifests are capped,
+  so prioritize `navigate`, `set-url-path`, `set-search-params`, and
+  `view-screen` before packing large template registries.
+- Keep `tool-search` in the initial Realtime manifest. A successful specific
+  search may expand the live session with matching action schemas, but the
+  server must derive those schemas from its own registry, bind authorization
+  to the authenticated voice session, and continue execution through
+  `executeAgentToolCall`. Treat `session.update.tools` as a full replacement:
+  preserve the pinned navigation/discovery tools, evict lower-priority entries
+  within the manifest cap, and wait for `session.updated` before asking the
+  model to continue with a newly discovered tool.
 - Do not persist audio or interim transcript deltas. Append completed user and
   assistant utterances as ordinary text messages to the exact chat thread
-  captured when the session starts. Ending voice mode opens that chat so the
-  user can continue over text. Store only compact lifecycle and latest context
-  at `application_state["realtime-voice-session"]`; delete it when the session
-  ends.
+  captured when the session starts. Input transcription completes
+  asynchronously from assistant generation, so reserve provider conversation
+  item order and publish only the contiguous completed sequence; never use
+  completion arrival time as chat order. Ending voice mode opens that chat so
+  the user can continue over text. Store only compact lifecycle and latest
+  context at `application_state["realtime-voice-session"]`; delete it when the
+  session ends.
+- Store the user-controlled language, intelligence, and output-voice choices at
+  `application_state["realtime-voice-prefs"]`. Keep this separate from
+  `voice-transcription-prefs`, which configures editable dictation rather than
+  the speech-to-speech session.
 - Missing-key failures should open Settings focused on the user-scoped
   `OPENAI_API_KEY` field. Never send, log, or echo the key to the browser.
 

package/src/templates/workspace-core/.agents/skills/writing-agent-instructions/SKILL.md

@@ -96,6 +96,31 @@ contract:
 - Do not create pass-through routes whose main job is to call, repackage, or
   re-export an action.
 
+## Budget the first model request
+
+Treat the initial prompt and tool catalog as a latency budget. The agent should
+start with a compact map of the app, then retrieve depth only when the task
+needs it.
+
+- Set `initialToolNames` to the small set of actions used in the app's primary
+  workflows. Keep `tool-search` available so every other registered action and
+  connected MCP tool remains discoverable on demand.
+- Keep essential, always-applicable rules in `AGENTS.md`. Put workflow detail
+  in skills and long reference material in `references/` or workspace
+  resources that the agent can read when relevant.
+- Do not inject full documents, transcripts, data dictionaries, source trees,
+  or provider catalogs through `systemPrompt` or `extraContext`. Inject a
+  bounded summary, stable ids/paths, and the exact action or resource lookup
+  that retrieves the full content.
+- Avoid duplicating action descriptions in prose. The starter tools already
+  carry schemas; uncommon actions are available through `tool-search`.
+- Keep `view-screen` concise. Return navigation, selection, visible summary,
+  and ids needed for a follow-up read rather than full record bodies.
+
+The goal is progressive disclosure, not reduced capability: a compact first
+request, precise discovery, and full fidelity once the agent knows which depth
+is relevant.
+
 When documenting version history, restore, or audit trails, use actions for
 full restorable snapshots (`list-<resource>-versions`,
 `get-<resource>-version`, `restore-<resource>-version`). Do not copy legacy

package/src/templates/workspace-core/src/server/index.ts

@@ -5,13 +5,15 @@ import {
   createAgentChatPlugin,
   defaultAuthPlugin,
   type AgentChatPluginOptions,
+  type NitroPluginDef,
 } from "@agent-native/core/server";
 
 export function createWorkspaceAgentChatPlugin(
   options?: AgentChatPluginOptions,
-) {
+): NitroPluginDef {
   return createAgentChatPlugin(options);
 }
 
-export const defaultAgentChatPlugin = createWorkspaceAgentChatPlugin();
+export const defaultAgentChatPlugin: NitroPluginDef =
+  createWorkspaceAgentChatPlugin();
 export { defaultAuthPlugin };

package/corpus/core/src/client/ProductionAgentPanel.tsx

@@ -1,9 +0,0 @@
-/**
- * @deprecated Use AgentSidebar and AgentToggleButton from "./AgentPanel.js" instead.
- * This file re-exports for backward compatibility.
- */
-export {
-  AgentSidebar as ProductionAgentPanel,
-  AgentToggleButton,
-  type AgentSidebarProps as ProductionAgentPanelProps,
-} from "./AgentPanel.js";

package/corpus/core/src/client/auth-redirect-url.ts

@@ -1,23 +0,0 @@
-import { AUTH_REDIRECT_QUERY_PARAM } from "../shared/auth-redirect-url.js";
-
-function browserWindow(): Window | null {
-  return typeof window === "undefined" ? null : window;
-}
-
-export function stripAuthRedirectParamFromUrl(win = browserWindow()): void {
-  if (!win) return;
-
-  try {
-    const url = new URL(win.location.href);
-    if (!url.searchParams.has(AUTH_REDIRECT_QUERY_PARAM)) return;
-
-    url.searchParams.delete(AUTH_REDIRECT_QUERY_PARAM);
-    win.history.replaceState(
-      win.history.state,
-      "",
-      `${url.pathname}${url.search}${url.hash}`,
-    );
-  } catch {
-    // Cosmetic cleanup only; never block app boot if history/location is odd.
-  }
-}

package/corpus/core/src/client/useProductionAgent.ts

@@ -1,253 +0,0 @@
-import { useState, useCallback, useRef } from "react";
-
-import type {
-  AgentMessage,
-  AgentChatEvent,
-  AgentToolInput,
-} from "../agent/types.js";
-import { agentNativePath } from "./api-path.js";
-import { formatChatErrorText } from "./error-format.js";
-
-export interface ProductionAgentMessage {
-  id: string;
-  role: "user" | "assistant";
-  content: string;
-  toolCalls?: Array<{
-    tool: string;
-    input: AgentToolInput;
-    result?: string;
-  }>;
-}
-
-export interface UseProductionAgentOptions {
-  /** API endpoint URL. Default: "/_agent-native/agent-chat" */
-  apiUrl?: string;
-}
-
-export interface UseProductionAgentResult {
-  messages: ProductionAgentMessage[];
-  isGenerating: boolean;
-  sendMessage: (text: string) => void;
-  clearHistory: () => void;
-}
-
-/** @deprecated Use `AssistantChat` component instead */
-export function useProductionAgent(
-  options?: UseProductionAgentOptions,
-): UseProductionAgentResult {
-  const apiUrl =
-    options?.apiUrl ?? agentNativePath("/_agent-native/agent-chat");
-  const [messages, setMessages] = useState<ProductionAgentMessage[]>([]);
-  const [isGenerating, setIsGenerating] = useState(false);
-  const abortRef = useRef<AbortController | null>(null);
-
-  const sendMessage = useCallback(
-    async (text: string) => {
-      if (!text.trim() || isGenerating) return;
-
-      const userMsg: ProductionAgentMessage = {
-        id: `user-${Date.now()}`,
-        role: "user",
-        content: text.trim(),
-      };
-
-      setMessages((prev) => [...prev, userMsg]);
-      setIsGenerating(true);
-
-      // Notify any listeners that generation is running
-      window.dispatchEvent(
-        new CustomEvent("agentNative.chatRunning", {
-          detail: { isRunning: true, running: true },
-        }),
-      );
-
-      // Build history for this request — skip empty-content messages
-      // (assistant turns with only tool calls have no text content to send)
-      const history: AgentMessage[] = messages
-        .filter((m) => m.content.trim())
-        .map((m) => ({
-          role: m.role,
-          content: m.content,
-        }));
-
-      const assistantId = `assistant-${Date.now()}`;
-      const assistantMsg: ProductionAgentMessage = {
-        id: assistantId,
-        role: "assistant",
-        content: "",
-        toolCalls: [],
-      };
-      setMessages((prev) => [...prev, assistantMsg]);
-
-      const abort = new AbortController();
-      abortRef.current = abort;
-
-      try {
-        const res = await fetch(apiUrl, {
-          method: "POST",
-          headers: { "Content-Type": "application/json" },
-          body: JSON.stringify({ message: text.trim(), history }),
-          signal: abort.signal,
-        });
-
-        if (!res.ok || !res.body) {
-          throw new Error(`Server error: ${res.status}`);
-        }
-
-        const reader = res.body.getReader();
-        const decoder = new TextDecoder();
-        let buf = "";
-
-        while (true) {
-          const { done, value } = await reader.read();
-          if (done) break;
-
-          buf += decoder.decode(value, { stream: true });
-          const lines = buf.split("\n");
-          buf = lines.pop() ?? "";
-
-          for (const line of lines) {
-            if (!line.startsWith("data: ")) continue;
-            const raw = line.slice(6).trim();
-            if (!raw) continue;
-
-            let ev: AgentChatEvent;
-            try {
-              ev = JSON.parse(raw);
-            } catch {
-              continue;
-            }
-
-            if (ev.type === "text") {
-              setMessages((prev) =>
-                prev.map((m) =>
-                  m.id === assistantId
-                    ? { ...m, content: m.content + ev.text }
-                    : m,
-                ),
-              );
-            } else if (ev.type === "tool_start") {
-              setMessages((prev) =>
-                prev.map((m) =>
-                  m.id === assistantId
-                    ? {
-                        ...m,
-                        toolCalls: [
-                          ...(m.toolCalls ?? []),
-                          { tool: ev.tool, input: ev.input },
-                        ],
-                      }
-                    : m,
-                ),
-              );
-            } else if (ev.type === "tool_done") {
-              setMessages((prev) =>
-                prev.map((m) => {
-                  if (m.id !== assistantId) return m;
-                  const calls = [...(m.toolCalls ?? [])];
-                  // Results can arrive out of order for concurrent same-named
-                  // calls, so attach to the first not-yet-resolved match
-                  // (FIFO) rather than the most recent same-named call.
-                  let idx = calls.findIndex(
-                    (c) => c.tool === ev.tool && c.result === undefined,
-                  );
-                  if (idx < 0)
-                    idx = calls.map((c) => c.tool).lastIndexOf(ev.tool);
-                  if (idx >= 0)
-                    calls[idx] = { ...calls[idx], result: ev.result };
-                  return { ...m, toolCalls: calls };
-                }),
-              );
-            } else if (ev.type === "agent_call") {
-              const agentName = ev.agent;
-              if (ev.status === "start") {
-                setMessages((prev) =>
-                  prev.map((m) =>
-                    m.id === assistantId
-                      ? {
-                          ...m,
-                          toolCalls: [
-                            ...(m.toolCalls ?? []),
-                            {
-                              tool: `agent:${agentName}`,
-                              input: {},
-                            },
-                          ],
-                        }
-                      : m,
-                  ),
-                );
-              } else if (ev.status === "done" || ev.status === "error") {
-                setMessages((prev) =>
-                  prev.map((m) => {
-                    if (m.id !== assistantId) return m;
-                    const calls = [...(m.toolCalls ?? [])];
-                    const idx = calls
-                      .map((c) => c.tool)
-                      .lastIndexOf(`agent:${agentName}`);
-                    if (idx >= 0)
-                      calls[idx] = {
-                        ...calls[idx],
-                        result:
-                          ev.status === "error"
-                            ? "Error calling agent"
-                            : "Done",
-                      };
-                    return { ...m, toolCalls: calls };
-                  }),
-                );
-              }
-            } else if (ev.type === "done" || ev.type === "error") {
-              if (ev.type === "error") {
-                const fallbackContent = formatChatErrorText(
-                  ev.error ?? "Unknown error",
-                  ev.upgradeUrl,
-                  ev.errorCode,
-                );
-                setMessages((prev) =>
-                  prev.map((m) =>
-                    m.id === assistantId
-                      ? { ...m, content: m.content || fallbackContent }
-                      : m,
-                  ),
-                );
-              }
-              break;
-            }
-          }
-        }
-      } catch (err: any) {
-        if (err?.name !== "AbortError") {
-          setMessages((prev) =>
-            prev.map((m) =>
-              m.id === assistantId
-                ? {
-                    ...m,
-                    content:
-                      m.content || "Something went wrong. Please try again.",
-                  }
-                : m,
-            ),
-          );
-        }
-      } finally {
-        setIsGenerating(false);
-        window.dispatchEvent(
-          new CustomEvent("agentNative.chatRunning", {
-            detail: { isRunning: false, running: false },
-          }),
-        );
-        abortRef.current = null;
-      }
-    },
-    [messages, isGenerating],
-  );
-
-  const clearHistory = useCallback(() => {
-    abortRef.current?.abort();
-    setMessages([]);
-    setIsGenerating(false);
-  }, []);
-
-  return { messages, isGenerating, sendMessage, clearHistory };
-}

package/corpus/core/src/shared/auth-redirect-url.ts

@@ -1 +0,0 @@
-export const AUTH_REDIRECT_QUERY_PARAM = "__an_auth_redirect";

package/corpus/templates/analytics/app/pages/Index.tsx

@@ -1,16 +0,0 @@
-import { callAction } from "@agent-native/core/client";
-import { useEffect } from "react";
-import { useNavigate } from "react-router";
-
-export default function Index() {
-  const navigate = useNavigate();
-
-  useEffect(() => {
-    void callAction("ensure-demo-dashboards", {}).catch((err) => {
-      console.warn("[analytics] demo dashboard install failed", err);
-    });
-    navigate("/ask", { replace: true });
-  }, [navigate]);
-
-  return null;
-}