@agent-native/core 0.99.2 → 0.100.0

package/dist/shared/mcp-connect-content.js

@@ -0,0 +1,92 @@
+/**
+ * Shared copy and templates for connecting external MCP clients.
+ *
+ * Keep this module free of React and server-only imports so the server-rendered
+ * connect page and the client Agent access tab use the same instructions.
+ */
+export const MCP_CONNECT_MCP_URL_TEMPLATE = "{appUrl}/mcp";
+export const MCP_CONNECT_GUIDES = [
+    {
+        id: "claude",
+        label: "Claude",
+        steps: [
+            "Open Customize → Connectors in Claude.",
+            "Click the + button → Add custom connector.",
+            "Paste the MCP URL above, name it {appName}, click Connect.",
+            "On the consent page, click Authorize to approve mcp:read, mcp:write, mcp:apps.",
+        ],
+        action: {
+            kind: "link",
+            label: "Open Claude → Connectors",
+            href: "https://claude.ai/customize/connectors",
+        },
+        note: "Works in Claude web and Claude Desktop. Inline MCP Apps (charts, dashboards, drafts) render automatically inside the chat.",
+    },
+    {
+        id: "chatgpt",
+        label: "ChatGPT",
+        steps: [
+            "In ChatGPT, open Settings → Apps (Business/Enterprise/Edu workspaces with developer mode enabled).",
+            "Scroll to Advanced settings → Create app, paste the MCP URL above, name it {appName}.",
+            "Click Connect, sign in with your Agent-Native account, and approve mcp:read, mcp:write, mcp:apps.",
+        ],
+        action: {
+            kind: "link",
+            label: "Open ChatGPT",
+            href: "https://chatgpt.com/",
+        },
+        note: 'Got "Connector name already exists" but don\'t see it under Enabled apps? ChatGPT saves a hidden draft the moment you click Create — even if you closed the OAuth popup before approving. In Settings → Apps, scroll past Enabled apps to the Drafts section ("Private apps you\'ve created in developer mode"). Click the draft and either press Connect to finish OAuth, or use the ⋯ → Delete menu and re-create. Workspace admins may also need to enable custom connectors under org settings; each member still authorizes their own account.',
+    },
+    {
+        id: "cursor",
+        label: "Cursor",
+        steps: [
+            "Open Cursor → Settings → MCP.",
+            "Click Add MCP Server, paste the MCP URL above, save.",
+            "When prompted, sign in with your Agent-Native account and approve the MCP scopes.",
+        ],
+        note: "Cursor supports remote-OAuth MCP servers, same paste-URL flow as Claude — no terminal needed.",
+    },
+    {
+        id: "claude-code",
+        label: "Claude Code",
+        intro: "In your terminal, run:",
+        commandTemplate: "claude mcp add --transport http {serverId} {mcpUrl}",
+        action: { kind: "copy", label: "Copy command" },
+        note: "Then inside Claude Code type /mcp, choose {serverId}, and click Authenticate. Claude completes the OAuth flow itself — no static token needed.",
+    },
+    {
+        id: "codex",
+        label: "Codex",
+        intro: "In your terminal, run:",
+        commandTemplate: "npx @agent-native/core@latest connect {appUrl}",
+        action: { kind: "copy", label: "Copy command" },
+        note: "Opens this page in your browser and writes Codex's ~/.codex/config.toml automatically. The same command works for Claude Cowork and Goose.",
+    },
+    {
+        id: "other",
+        label: "Other",
+        intro: "Any MCP-compatible client with remote-OAuth support: paste the MCP URL above. For clients without OAuth, paste this .mcp.json snippet and generate a static bearer below:",
+        configTemplate: `{
+  "mcpServers": {
+    "{serverId}": {
+      "type": "http",
+      "url": "{mcpUrl}"
+    }
+  }
+}`,
+        action: { kind: "copy", label: "Copy config" },
+    },
+];
+export const MCP_STATIC_TOKEN_FALLBACK = {
+    title: "Generate a static token",
+    state: "Advanced — clients without OAuth",
+    resultTitle: "Connection token created",
+    resultCopy: "Paste this into your agent's MCP config. The token is shown only once.",
+};
+export function interpolateMcpConnectTemplate(template, values) {
+    return template.replace(/\{(appName|appUrl|mcpUrl|serverId)\}/g, (_, key) => {
+        return values[key];
+    });
+}
+//# sourceMappingURL=mcp-connect-content.js.map

package/dist/shared/mcp-connect-content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-connect-content.js","sourceRoot":"","sources":["../../src/shared/mcp-connect-content.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAgCH,MAAM,CAAC,MAAM,4BAA4B,GAAG,cAAc,CAAC;AAE3D,MAAM,CAAC,MAAM,kBAAkB,GAA+B;IAC5D;QACE,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE;YACL,wCAAwC;YACxC,4CAA4C;YAC5C,4DAA4D;YAC5D,gFAAgF;SACjF;QACD,MAAM,EAAE;YACN,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,0BAA0B;YACjC,IAAI,EAAE,wCAAwC;SAC/C;QACD,IAAI,EAAE,4HAA4H;KACnI;IACD;QACE,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE;YACL,oGAAoG;YACpG,uFAAuF;YACvF,mGAAmG;SACpG;QACD,MAAM,EAAE;YACN,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,cAAc;YACrB,IAAI,EAAE,sBAAsB;SAC7B;QACD,IAAI,EAAE,qhBAAqhB;KAC5hB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE;YACL,+BAA+B;YAC/B,sDAAsD;YACtD,mFAAmF;SACpF;QACD,IAAI,EAAE,+FAA+F;KACtG;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,aAAa;QACpB,KAAK,EAAE,wBAAwB;QAC/B,eAAe,EAAE,qDAAqD;QACtE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE;QAC/C,IAAI,EAAE,gJAAgJ;KACvJ;IACD;QACE,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,wBAAwB;QAC/B,eAAe,EAAE,gDAAgD;QACjE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE;QAC/C,IAAI,EAAE,4IAA4I;KACnJ;IACD;QACE,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,OAAO;QACd,KAAK,EACH,2KAA2K;QAC7K,cAAc,EAAE;;;;;;;EAOlB;QACE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE;KAC/C;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,KAAK,EAAE,yBAAyB;IAChC,KAAK,EAAE,kCAAkC;IACzC,WAAW,EAAE,0BAA0B;IACvC,UAAU,EACR,wEAAwE;CAClE,CAAC;AAEX,MAAM,UAAU,6BAA6B,CAC3C,QAAgB,EAChB,MAAgC;IAEhC,OAAO,QAAQ,CAAC,OAAO,CAAC,uCAAuC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;QAC1E,OAAO,MAAM,CAAC,GAAqC,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * Shared copy and templates for connecting external MCP clients.\n *\n * Keep this module free of React and server-only imports so the server-rendered\n * connect page and the client Agent access tab use the same instructions.\n */\n\nexport type McpConnectGuideId =\n  | \"claude\"\n  | \"chatgpt\"\n  | \"cursor\"\n  | \"claude-code\"\n  | \"codex\"\n  | \"other\";\n\nexport interface McpConnectTemplateValues {\n  appName: string;\n  appUrl: string;\n  mcpUrl: string;\n  serverId: string;\n}\n\nexport interface McpConnectGuide {\n  id: McpConnectGuideId;\n  label: string;\n  steps?: readonly string[];\n  intro?: string;\n  commandTemplate?: string;\n  configTemplate?: string;\n  action?: {\n    kind: \"link\" | \"copy\";\n    label: string;\n    href?: string;\n  };\n  note?: string;\n}\n\nexport const MCP_CONNECT_MCP_URL_TEMPLATE = \"{appUrl}/mcp\";\n\nexport const MCP_CONNECT_GUIDES: readonly McpConnectGuide[] = [\n  {\n    id: \"claude\",\n    label: \"Claude\",\n    steps: [\n      \"Open Customize → Connectors in Claude.\",\n      \"Click the + button → Add custom connector.\",\n      \"Paste the MCP URL above, name it {appName}, click Connect.\",\n      \"On the consent page, click Authorize to approve mcp:read, mcp:write, mcp:apps.\",\n    ],\n    action: {\n      kind: \"link\",\n      label: \"Open Claude → Connectors\",\n      href: \"https://claude.ai/customize/connectors\",\n    },\n    note: \"Works in Claude web and Claude Desktop. Inline MCP Apps (charts, dashboards, drafts) render automatically inside the chat.\",\n  },\n  {\n    id: \"chatgpt\",\n    label: \"ChatGPT\",\n    steps: [\n      \"In ChatGPT, open Settings → Apps (Business/Enterprise/Edu workspaces with developer mode enabled).\",\n      \"Scroll to Advanced settings → Create app, paste the MCP URL above, name it {appName}.\",\n      \"Click Connect, sign in with your Agent-Native account, and approve mcp:read, mcp:write, mcp:apps.\",\n    ],\n    action: {\n      kind: \"link\",\n      label: \"Open ChatGPT\",\n      href: \"https://chatgpt.com/\",\n    },\n    note: 'Got \"Connector name already exists\" but don\\'t see it under Enabled apps? ChatGPT saves a hidden draft the moment you click Create — even if you closed the OAuth popup before approving. In Settings → Apps, scroll past Enabled apps to the Drafts section (\"Private apps you\\'ve created in developer mode\"). Click the draft and either press Connect to finish OAuth, or use the ⋯ → Delete menu and re-create. Workspace admins may also need to enable custom connectors under org settings; each member still authorizes their own account.',\n  },\n  {\n    id: \"cursor\",\n    label: \"Cursor\",\n    steps: [\n      \"Open Cursor → Settings → MCP.\",\n      \"Click Add MCP Server, paste the MCP URL above, save.\",\n      \"When prompted, sign in with your Agent-Native account and approve the MCP scopes.\",\n    ],\n    note: \"Cursor supports remote-OAuth MCP servers, same paste-URL flow as Claude — no terminal needed.\",\n  },\n  {\n    id: \"claude-code\",\n    label: \"Claude Code\",\n    intro: \"In your terminal, run:\",\n    commandTemplate: \"claude mcp add --transport http {serverId} {mcpUrl}\",\n    action: { kind: \"copy\", label: \"Copy command\" },\n    note: \"Then inside Claude Code type /mcp, choose {serverId}, and click Authenticate. Claude completes the OAuth flow itself — no static token needed.\",\n  },\n  {\n    id: \"codex\",\n    label: \"Codex\",\n    intro: \"In your terminal, run:\",\n    commandTemplate: \"npx @agent-native/core@latest connect {appUrl}\",\n    action: { kind: \"copy\", label: \"Copy command\" },\n    note: \"Opens this page in your browser and writes Codex's ~/.codex/config.toml automatically. The same command works for Claude Cowork and Goose.\",\n  },\n  {\n    id: \"other\",\n    label: \"Other\",\n    intro:\n      \"Any MCP-compatible client with remote-OAuth support: paste the MCP URL above. For clients without OAuth, paste this .mcp.json snippet and generate a static bearer below:\",\n    configTemplate: `{\n  \"mcpServers\": {\n    \"{serverId}\": {\n      \"type\": \"http\",\n      \"url\": \"{mcpUrl}\"\n    }\n  }\n}`,\n    action: { kind: \"copy\", label: \"Copy config\" },\n  },\n] as const;\n\nexport const MCP_STATIC_TOKEN_FALLBACK = {\n  title: \"Generate a static token\",\n  state: \"Advanced — clients without OAuth\",\n  resultTitle: \"Connection token created\",\n  resultCopy:\n    \"Paste this into your agent's MCP config. The token is shown only once.\",\n} as const;\n\nexport function interpolateMcpConnectTemplate(\n  template: string,\n  values: McpConnectTemplateValues,\n): string {\n  return template.replace(/\\{(appName|appUrl|mcpUrl|serverId)\\}/g, (_, key) => {\n    return values[key as keyof McpConnectTemplateValues];\n  });\n}\n"]}

package/dist/templates/default/app/routes/_index.tsx

@@ -74,6 +74,17 @@ export default function IndexPage() {
               {t("home.settingsDescription")}
             </p>
           </Link>
+          <Link
+            to="/agent"
+            className="group rounded-lg border border-border/50 px-4 py-3 hover:bg-accent/50 transition-colors"
+          >
+            <p className="text-[13px] font-medium text-foreground">
+              {t("settings.agentTitle")}
+            </p>
+            <p className="text-[12px] text-muted-foreground mt-0.5">
+              {t("settings.agentDescription")}
+            </p>
+          </Link>
         </div>
       </div>
     </div>

package/dist/templates/default/app/routes/agent.tsx

@@ -0,0 +1,33 @@
+import { AgentTabsPage, useT } from "@agent-native/core/client";
+import { Link } from "react-router";
+
+export function meta() {
+  return [{ title: "Agent - {{APP_TITLE}}" }];
+}
+
+export default function AgentPage() {
+  const t = useT();
+
+  return (
+    <main className="min-h-screen bg-background px-6 py-10">
+      <div className="mx-auto w-full max-w-5xl space-y-6">
+        <div className="space-y-2">
+          <Link
+            to="/settings"
+            className="text-[13px] text-muted-foreground hover:text-foreground"
+          >
+            {t("settings.title")}
+          </Link>
+          <h1 className="text-2xl font-semibold tracking-tight text-foreground">
+            {t("settings.agentTitle")}
+          </h1>
+          <p className="text-[14px] leading-relaxed text-muted-foreground">
+            {t("settings.agentDescription")}
+          </p>
+        </div>
+
+        <AgentTabsPage className="min-h-[640px] rounded-lg border border-border/50" />
+      </div>
+    </main>
+  );
+}

package/dist/templates/workspace-core/.agents/skills/agent-native-toolkit/SKILL.md

@@ -57,6 +57,12 @@ in the moment of agent use.
   missing-secret states, OAuth grants, and provider connection health.
 - **Agent UX kit**: sidebar, composer, staged context, mentions, voice, human
   approval, generative UI, progress, and screen-state exposure.
+- **Agent page kit**: the full-page `/agent` surface (`AgentTabsPage` from
+  `@agent-native/core/client`) with Context, Files, Connections, Jobs, and
+  Access tabs plus a Personal/Organization scope toggle. The canonical home
+  for context transparency, MCP servers, A2A remote agents, recurring
+  jobs/automations, and external-client connect flows. See the `agent-page`
+  skill.
 - **History and recovery kit**: audit log, activity feed, version history,
   checkpoints, undo, redo, restore, and proof-of-done.
 - **Comments and review kit**: anchored comments, pins, mentions, review

package/dist/templates/workspace-core/.agents/skills/agent-page/SKILL.md

@@ -0,0 +1,59 @@
+---
+name: agent-page
+description: >-
+  The full-page Agent surface (/agent) with Context, Files, Connections, Jobs,
+  and Access tabs. Use when mounting the Agent page in a template, adding an
+  app-specific tab, surfacing context transparency, MCP servers, A2A agents,
+  recurring jobs, or external-client connect flows in the UI.
+metadata:
+  internal: true
+---
+
+# Agent Page
+
+`AgentTabsPage` (from `@agent-native/core/client`, source
+`packages/core/src/client/agent-page/`) is the canonical full-page surface for
+everything that can influence the agent. Design principles:
+
+- The page answers "what can influence this agent, and why" — it is not a
+  generic admin console.
+- Capability and access stay separate: **Connections** is what this agent can
+  reach; **Access** is who can reach this agent.
+- It is a thin shell that re-hosts existing components (ResourcesPanel, MCP
+  hooks, AgentsSection, context X-Ray, jobs actions) — do not re-implement
+  those surfaces inside it.
+- Context must be inspectable, attributable, and governable — provenance and
+  governance tiers, not just a token meter.
+
+## Tabs
+
+| Tab | Contents |
+| --- | --- |
+| `context` | System-vs-conversation split meter, provenance-grouped system sections (governance tiers: required/inherited/user), live-thread manifest. Backed by `context-preview-get` / `context-manifest-get` (see `context-xray` skill). |
+| `files` | ResourcesPanel (skills, instructions, memory, uploads) with the virtual `mcp-servers/` folder hidden (`showMcpServers={false}`). |
+| `connections` | MCP server management (both scopes, admin-gated org writes) plus A2A remote agents this app can call. |
+| `jobs` | Recurring jobs (personal + org) and automations (personal) with pause/resume/delete (see `recurring-jobs` skill). |
+| `access` | Copyable MCP URL and A2A agent-card URL, per-client connect steps (Claude, ChatGPT, Cursor, Claude Code, Codex, Other) from `packages/core/src/shared/mcp-connect-content.ts` (shared with the `/mcp/connect` route — edit the shared module, never fork copy), static-token fallback link. Grants/scopes/revocation UI is future work. |
+
+## Mounting In A Template
+
+1. Add an `/agent` route following the template's settings-route pattern
+   (`app/routes/agent.tsx` or `_app.agent.tsx`), mounting `AgentTabsPage`.
+   CSR is fine; keep the app shell in `root.tsx` so navigation does not
+   remount it (`client-side-routing` skill).
+2. Add an "Agent" item to primary navigation and the command palette,
+   mirroring the Settings entries. Link-first (`native-navigation` skill).
+3. Pass `agentPageHref="/agent"` to `AgentSidebar` so the sidebar workspace
+   and settings modes link out to the full page.
+4. Hash deep-links work out of the box: `/agent#context`, `/agent#files`,
+   `/agent#connections`, `/agent#jobs`, `/agent#access`.
+5. App-specific additions go in `extraTabs` (same `SettingsTabItem` shape as
+   the settings page); hide built-ins only with `hiddenTabs` when a template
+   genuinely lacks the underlying capability.
+
+## Scope
+
+The page-level Personal/Organization toggle passes `scope` (and
+`canManageOrg`) to every tab via `AgentPageTabProps`. Hide nothing silently:
+if a capability is personal-only today (e.g. automations), the org view says
+so honestly instead of faking an org variant.

package/dist/templates/workspace-core/.agents/skills/context-xray/SKILL.md

@@ -20,15 +20,40 @@ counts, then lets the user or agent pin, evict, or restore individual segments.
 | Action | When to use |
 | --- | --- |
 | `context-manifest-get` | Read the current manifest for a thread. Returns token totals, segment status, source, and whether changes are enforceable. |
+| `context-preview-get` | Compose the would-be system context for the current user/org/app without a live thread. Returns labeled system sections with provenance, governance tier, token counts, and bounded previews. Backs the Agent page Context tab. |
 | `context-pin` | Preserve a segment across future compaction/model calls. Use for task specs, acceptance criteria, user constraints, and other durable context. |
 | `context-evict` | Exclude a stale or irrelevant segment from future model calls. Eviction is reversible and never deletes chat history. |
 | `context-restore` | Undo a pin, evict, or summarize directive for a segment. |
 | `context-report` | External hosts can report their visible context inventory. These manifests are advisory unless Agent-Native owns the emitted content. |
 
+## System Sections
+
+Manifests now cover the system-prompt half of context, not just conversation
+segments. Each system section carries a `provenance` label (framework-core,
+actions-prompt, template, enterprise-workspace-core, sql-workspace,
+legacy-app-default, organization, personal, memory, db-schema, tools,
+model-overlay, runtime-context) and a `governance` tier:
+
+- `required` — framework/enterprise policy; can never be altered by the user.
+- `inherited` — template/org/workspace instructions; managed elsewhere,
+  visible here.
+- `user` — personal instructions and memory; editable through Files.
+
+System sections are display-only provenance: they cannot be pinned, evicted,
+or summarized. The persisted manifest stores source refs, scope, content
+hashes, token counts, and bounded previews (~200 chars) — never raw prompt
+bodies; full content stays behind the resource/access model. The in-chat
+X-Ray panel groups these under "System", and the Agent page Context tab
+renders the full breakdown (via `context-preview-get`) with a
+system-vs-conversation split meter. Manifests are the latest snapshot per
+thread; there is no per-iteration history.
+
 ## Rules
 
 - Never evict or summarize protected segments. The manifest marks active-turn
   user/tool/thinking context as `protected`.
+- System sections are never evictable; required/inherited tiers are locked by
+  design — do not present controls that imply otherwise.
 - Prefer pinning the user's task, requirements, and decisions before evicting
   large stale tool results.
 - Eviction excludes content from future model calls; it does not delete the

package/dist/templates/workspace-core/.agents/skills/external-agents/SKILL.md

@@ -28,6 +28,13 @@ For a deliberately isolated app, add that app directly at
 `https://<app>.agent-native.com/mcp` or
 `https://<your-host>/mcp`.
 
+In-app, the Agent page's **Access** tab (`/agent#access`, see the
+`agent-page` skill) is the discoverable home for all of this: it shows the
+app's copyable MCP URL and A2A agent-card URL, per-client setup steps
+(Claude, ChatGPT, Cursor, Claude Code, Codex, Other), and links to the full
+`/mcp/connect` page including the static-token fallback. Point users there
+instead of dictating URLs in chat.
+
 OAuth-capable hosts should use the standard remote MCP OAuth flow. Claude
 connectors and Claude Code `/mcp` authentication discover the protected
 resource, open the Agent-Native authorization page, and store their own tokens.

package/dist/templates/workspace-core/.agents/skills/recurring-jobs/SKILL.md

@@ -29,6 +29,15 @@ Recurring jobs are scheduled tasks the agent executes automatically on a cron sc
 | `manage-jobs` | `list`     | List all jobs and their status                             |
 | `manage-jobs` | `update`   | Update schedule, instructions, or toggle enabled           |
 
+## UI Surface
+
+Users can see and manage jobs without the agent on the Agent page's Jobs tab
+(`/agent#jobs`, `AgentJobsTab` in `packages/core/src/client/agent-page/`):
+recurring jobs (personal and organization scope) with pause/resume/delete and
+run status, plus automations (personal-only today). Backed by the scoped
+list/manage actions in `packages/core/src/jobs/actions/` — direct users there
+instead of describing job files when they just want to view or toggle jobs.
+
 ## Key Files
 
 | File                                  | Purpose                                                  |

package/dist/triggers/actions/list-automations.d.ts

@@ -0,0 +1,24 @@
+export interface AutomationActionItem {
+    id: string;
+    name: string;
+    path: string;
+    scope: "personal" | "organization";
+    triggerType: "event" | "schedule";
+    event: string | null;
+    schedule: string | null;
+    scheduleDescription: string | null;
+    condition: string | null;
+    body: string;
+    enabled: boolean;
+    lastRun: string | null;
+    lastStatus: string | null;
+    lastError: string | null;
+    nextRun: string | null;
+    createdBy: string | null;
+    canUpdate: boolean;
+}
+declare const _default: import("../../action.js").ActionDefinition<{
+    scope?: "organization" | "personal";
+}, AutomationActionItem[]>;
+export default _default;
+//# sourceMappingURL=list-automations.d.ts.map

package/dist/triggers/actions/list-automations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-automations.d.ts","sourceRoot":"","sources":["../../../src/triggers/actions/list-automations.ts"],"names":[],"mappings":"AA6BA,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,GAAG,cAAc,CAAC;IACnC,WAAW,EAAE,OAAO,GAAG,UAAU,CAAC;IAClC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;CACpB"}

package/dist/triggers/actions/list-automations.js

@@ -0,0 +1,72 @@
+import { z } from "zod";
+import { defineAction } from "../../action.js";
+import { describeCron, isValidCron, nextOccurrence } from "../../jobs/cron.js";
+import { resourceGetByPath, resourceList } from "../../resources/store.js";
+import { parseTriggerFrontmatter } from "../dispatcher.js";
+const scopeSchema = z.enum(["personal", "organization"]);
+function hasTriggerFrontmatter(content) {
+    const header = content.match(/^---\n([\s\S]*?)\n---/m)?.[1] ?? "";
+    return /^triggerType\s*:/m.test(header);
+}
+function nextRun(meta) {
+    if (!meta.enabled)
+        return null;
+    if (meta.nextRun)
+        return meta.nextRun;
+    if (meta.triggerType === "schedule" &&
+        meta.schedule &&
+        isValidCron(meta.schedule)) {
+        return nextOccurrence(meta.schedule).toISOString();
+    }
+    return null;
+}
+export default defineAction({
+    description: "List event-triggered and schedule-triggered automations in the selected scope. Automations are currently personal-only.",
+    agentTool: false,
+    schema: z.object({
+        scope: scopeSchema.default("personal"),
+    }),
+    http: { method: "GET" },
+    readOnly: true,
+    parallelSafe: true,
+    run: async ({ scope }, ctx) => {
+        const userEmail = ctx?.userEmail;
+        if (!userEmail)
+            throw new Error("Not authenticated.");
+        if (scope === "organization")
+            return [];
+        const owner = userEmail;
+        const resources = await resourceList(owner, "jobs/");
+        const automations = [];
+        for (const resource of resources) {
+            if (!resource.path.endsWith(".md") || resource.path.endsWith(".keep")) {
+                continue;
+            }
+            const full = await resourceGetByPath(owner, resource.path);
+            if (!full || !hasTriggerFrontmatter(full.content))
+                continue;
+            const { meta, body } = parseTriggerFrontmatter(full.content);
+            automations.push({
+                id: full.id,
+                name: resource.path.replace(/^jobs\//, "").replace(/\.md$/, ""),
+                path: resource.path,
+                scope,
+                triggerType: meta.triggerType,
+                event: meta.event ?? null,
+                schedule: meta.schedule || null,
+                scheduleDescription: meta.schedule ? describeCron(meta.schedule) : null,
+                condition: meta.condition ?? null,
+                body,
+                enabled: meta.enabled,
+                lastRun: meta.lastRun ?? null,
+                lastStatus: meta.lastStatus ?? null,
+                lastError: meta.lastError ?? null,
+                nextRun: nextRun(meta),
+                createdBy: meta.createdBy ?? null,
+                canUpdate: true,
+            });
+        }
+        return automations;
+    },
+});
+//# sourceMappingURL=list-automations.js.map

package/dist/triggers/actions/list-automations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-automations.js","sourceRoot":"","sources":["../../../src/triggers/actions/list-automations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;AAEzD,SAAS,qBAAqB,CAAC,OAAe;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,OAAO,CACd,IAAwD;IAExD,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC;IACtC,IACE,IAAI,CAAC,WAAW,KAAK,UAAU;QAC/B,IAAI,CAAC,QAAQ;QACb,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC1B,CAAC;QACD,OAAO,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAsBD,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,yHAAyH;IAC3H,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;KACvC,CAAC;IACF,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;IACvB,QAAQ,EAAE,IAAI;IACd,YAAY,EAAE,IAAI;IAClB,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,EAAmC,EAAE;QAC7D,MAAM,SAAS,GAAG,GAAG,EAAE,SAAS,CAAC;QACjC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACtD,IAAI,KAAK,KAAK,cAAc;YAAE,OAAO,EAAE,CAAC;QAExC,MAAM,KAAK,GAAG,SAAS,CAAC;QACxB,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,WAAW,GAA2B,EAAE,CAAC;QAE/C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtE,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,CAAC,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,SAAS;YAC5D,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7D,WAAW,CAAC,IAAI,CAAC;gBACf,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC/D,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,KAAK;gBACL,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;gBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;gBAC/B,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;gBACvE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;gBACjC,IAAI;gBACJ,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;gBAC7B,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;gBACnC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;gBACjC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC;gBACtB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;gBACjC,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { defineAction } from \"../../action.js\";\nimport { describeCron, isValidCron, nextOccurrence } from \"../../jobs/cron.js\";\nimport { resourceGetByPath, resourceList } from \"../../resources/store.js\";\nimport { parseTriggerFrontmatter } from \"../dispatcher.js\";\n\nconst scopeSchema = z.enum([\"personal\", \"organization\"]);\n\nfunction hasTriggerFrontmatter(content: string): boolean {\n  const header = content.match(/^---\\n([\\s\\S]*?)\\n---/m)?.[1] ?? \"\";\n  return /^triggerType\\s*:/m.test(header);\n}\n\nfunction nextRun(\n  meta: ReturnType<typeof parseTriggerFrontmatter>[\"meta\"],\n): string | null {\n  if (!meta.enabled) return null;\n  if (meta.nextRun) return meta.nextRun;\n  if (\n    meta.triggerType === \"schedule\" &&\n    meta.schedule &&\n    isValidCron(meta.schedule)\n  ) {\n    return nextOccurrence(meta.schedule).toISOString();\n  }\n  return null;\n}\n\nexport interface AutomationActionItem {\n  id: string;\n  name: string;\n  path: string;\n  scope: \"personal\" | \"organization\";\n  triggerType: \"event\" | \"schedule\";\n  event: string | null;\n  schedule: string | null;\n  scheduleDescription: string | null;\n  condition: string | null;\n  body: string;\n  enabled: boolean;\n  lastRun: string | null;\n  lastStatus: string | null;\n  lastError: string | null;\n  nextRun: string | null;\n  createdBy: string | null;\n  canUpdate: boolean;\n}\n\nexport default defineAction({\n  description:\n    \"List event-triggered and schedule-triggered automations in the selected scope. Automations are currently personal-only.\",\n  agentTool: false,\n  schema: z.object({\n    scope: scopeSchema.default(\"personal\"),\n  }),\n  http: { method: \"GET\" },\n  readOnly: true,\n  parallelSafe: true,\n  run: async ({ scope }, ctx): Promise<AutomationActionItem[]> => {\n    const userEmail = ctx?.userEmail;\n    if (!userEmail) throw new Error(\"Not authenticated.\");\n    if (scope === \"organization\") return [];\n\n    const owner = userEmail;\n    const resources = await resourceList(owner, \"jobs/\");\n    const automations: AutomationActionItem[] = [];\n\n    for (const resource of resources) {\n      if (!resource.path.endsWith(\".md\") || resource.path.endsWith(\".keep\")) {\n        continue;\n      }\n      const full = await resourceGetByPath(owner, resource.path);\n      if (!full || !hasTriggerFrontmatter(full.content)) continue;\n      const { meta, body } = parseTriggerFrontmatter(full.content);\n      automations.push({\n        id: full.id,\n        name: resource.path.replace(/^jobs\\//, \"\").replace(/\\.md$/, \"\"),\n        path: resource.path,\n        scope,\n        triggerType: meta.triggerType,\n        event: meta.event ?? null,\n        schedule: meta.schedule || null,\n        scheduleDescription: meta.schedule ? describeCron(meta.schedule) : null,\n        condition: meta.condition ?? null,\n        body,\n        enabled: meta.enabled,\n        lastRun: meta.lastRun ?? null,\n        lastStatus: meta.lastStatus ?? null,\n        lastError: meta.lastError ?? null,\n        nextRun: nextRun(meta),\n        createdBy: meta.createdBy ?? null,\n        canUpdate: true,\n      });\n    }\n\n    return automations;\n  },\n});\n"]}

package/dist/triggers/actions/manage-automation.d.ts

@@ -0,0 +1,18 @@
+declare const _default: import("../../action.js").ActionDefinition<{
+    operation: "delete" | "update";
+    name: string;
+    scope?: "organization" | "personal";
+    enabled?: boolean;
+}, {
+    deleted: boolean;
+    name: string;
+    enabled?: undefined;
+    nextRun?: undefined;
+} | {
+    deleted?: undefined;
+    name: string;
+    enabled: boolean;
+    nextRun: string;
+}>;
+export default _default;
+//# sourceMappingURL=manage-automation.d.ts.map

package/dist/triggers/actions/manage-automation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-automation.d.ts","sourceRoot":"","sources":["../../../src/triggers/actions/manage-automation.ts"],"names":[],"mappings":""}

package/dist/triggers/actions/manage-automation.js

@@ -0,0 +1,60 @@
+import { z } from "zod";
+import { defineAction } from "../../action.js";
+import { isValidCron, nextOccurrence } from "../../jobs/cron.js";
+import { resourceDelete, resourceGetByPath, resourcePut, } from "../../resources/store.js";
+import { buildTriggerContent, parseTriggerFrontmatter, refreshEventSubscriptions, } from "../dispatcher.js";
+export default defineAction({
+    description: "Enable, disable, or delete a personal automation from the Agent Jobs page.",
+    agentTool: false,
+    schema: z.object({
+        operation: z.enum(["update", "delete"]),
+        name: z.string().min(1),
+        scope: z.enum(["personal", "organization"]).default("personal"),
+        enabled: z.boolean().optional(),
+    }),
+    run: async ({ operation, name, scope, enabled }, ctx) => {
+        const userEmail = ctx?.userEmail;
+        if (!userEmail)
+            throw new Error("Not authenticated.");
+        if (scope === "organization") {
+            throw Object.assign(new Error("Automations are personal today."), {
+                statusCode: 400,
+            });
+        }
+        const path = `jobs/${name}.md`;
+        const resource = await resourceGetByPath(userEmail, path);
+        if (!resource) {
+            throw Object.assign(new Error(`Automation "${name}" not found.`), {
+                statusCode: 404,
+            });
+        }
+        const { meta, body } = parseTriggerFrontmatter(resource.content);
+        const header = resource.content.match(/^---\n([\s\S]*?)\n---/m)?.[1] ?? "";
+        if (!/^triggerType\s*:/m.test(header)) {
+            throw Object.assign(new Error(`Automation "${name}" not found.`), {
+                statusCode: 404,
+            });
+        }
+        if (operation === "delete") {
+            await resourceDelete(resource.id);
+            await refreshEventSubscriptions();
+            return { deleted: true, name };
+        }
+        if (enabled === undefined) {
+            throw Object.assign(new Error("enabled is required for update."), {
+                statusCode: 400,
+            });
+        }
+        meta.enabled = enabled;
+        if (enabled &&
+            meta.triggerType === "schedule" &&
+            meta.schedule &&
+            isValidCron(meta.schedule)) {
+            meta.nextRun = nextOccurrence(meta.schedule).toISOString();
+        }
+        await resourcePut(resource.owner, resource.path, buildTriggerContent(meta, body));
+        await refreshEventSubscriptions();
+        return { name, enabled: meta.enabled, nextRun: meta.nextRun ?? null };
+    },
+});
+//# sourceMappingURL=manage-automation.js.map

package/dist/triggers/actions/manage-automation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-automation.js","sourceRoot":"","sources":["../../../src/triggers/actions/manage-automation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,WAAW,GACZ,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAE1B,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,4EAA4E;IAC9E,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC/D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE;QACtD,MAAM,SAAS,GAAG,GAAG,EAAE,SAAS,CAAC;QACjC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACtD,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;YAC7B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,EAAE;gBAChE,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,IAAI,KAAK,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,IAAI,cAAc,CAAC,EAAE;gBAChE,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3E,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,IAAI,cAAc,CAAC,EAAE;gBAChE,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAClC,MAAM,yBAAyB,EAAE,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;QACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,EAAE;gBAChE,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IACE,OAAO;YACP,IAAI,CAAC,WAAW,KAAK,UAAU;YAC/B,IAAI,CAAC,QAAQ;YACb,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC1B,CAAC;YACD,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7D,CAAC;QACD,MAAM,WAAW,CACf,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,IAAI,EACb,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAChC,CAAC;QACF,MAAM,yBAAyB,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;IACxE,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { defineAction } from \"../../action.js\";\nimport { isValidCron, nextOccurrence } from \"../../jobs/cron.js\";\nimport {\n  resourceDelete,\n  resourceGetByPath,\n  resourcePut,\n} from \"../../resources/store.js\";\nimport {\n  buildTriggerContent,\n  parseTriggerFrontmatter,\n  refreshEventSubscriptions,\n} from \"../dispatcher.js\";\n\nexport default defineAction({\n  description:\n    \"Enable, disable, or delete a personal automation from the Agent Jobs page.\",\n  agentTool: false,\n  schema: z.object({\n    operation: z.enum([\"update\", \"delete\"]),\n    name: z.string().min(1),\n    scope: z.enum([\"personal\", \"organization\"]).default(\"personal\"),\n    enabled: z.boolean().optional(),\n  }),\n  run: async ({ operation, name, scope, enabled }, ctx) => {\n    const userEmail = ctx?.userEmail;\n    if (!userEmail) throw new Error(\"Not authenticated.\");\n    if (scope === \"organization\") {\n      throw Object.assign(new Error(\"Automations are personal today.\"), {\n        statusCode: 400,\n      });\n    }\n\n    const path = `jobs/${name}.md`;\n    const resource = await resourceGetByPath(userEmail, path);\n    if (!resource) {\n      throw Object.assign(new Error(`Automation \"${name}\" not found.`), {\n        statusCode: 404,\n      });\n    }\n    const { meta, body } = parseTriggerFrontmatter(resource.content);\n    const header = resource.content.match(/^---\\n([\\s\\S]*?)\\n---/m)?.[1] ?? \"\";\n    if (!/^triggerType\\s*:/m.test(header)) {\n      throw Object.assign(new Error(`Automation \"${name}\" not found.`), {\n        statusCode: 404,\n      });\n    }\n\n    if (operation === \"delete\") {\n      await resourceDelete(resource.id);\n      await refreshEventSubscriptions();\n      return { deleted: true, name };\n    }\n    if (enabled === undefined) {\n      throw Object.assign(new Error(\"enabled is required for update.\"), {\n        statusCode: 400,\n      });\n    }\n\n    meta.enabled = enabled;\n    if (\n      enabled &&\n      meta.triggerType === \"schedule\" &&\n      meta.schedule &&\n      isValidCron(meta.schedule)\n    ) {\n      meta.nextRun = nextOccurrence(meta.schedule).toISOString();\n    }\n    await resourcePut(\n      resource.owner,\n      resource.path,\n      buildTriggerContent(meta, body),\n    );\n    await refreshEventSubscriptions();\n    return { name, enabled: meta.enabled, nextRun: meta.nextRun ?? null };\n  },\n});\n"]}

package/docs/content/a2a-protocol.mdx

@@ -392,6 +392,48 @@ app environment and pass the caller identity (`userEmail`) so outbound calls are
 signed as JWT bearer tokens. Use `apiKeyEnv` only for legacy external peers that
 expect a static bearer token. Use local actions instead of invoking yourself.
 
+## CLI: agent-native invoke {#cli-invoke}
+
+`agent-native invoke` is a thin CLI wrapper over the same resolve-and-call primitive as `agentNative.invoke()`. Use it to trigger an app's agent from a shell script, a CI job, a cron entry, or any external system that can shell out — the CLI equivalent of posting to `/_agent-native/a2a` by hand.
+
+```bash
+agent-native invoke <app-or-url> "prompt" [options]
+```
+
+```bash
+# Resolve "analytics" in the workspace registry and wait for the reply
+agent-native invoke analytics "Summarize signups by source this month"
+
+# Call a deployed app directly by URL, reading the bearer token from env
+agent-native invoke https://analytics.example.com "How many signups last week?" \
+  --api-key-env ANALYTICS_A2A_KEY
+
+# Force one blocking message/send instead of the default async+poll
+agent-native invoke analytics "Quick lookup" --sync
+
+# Machine-readable output for scripting
+agent-native invoke analytics "Summarize signups" --json
+```
+
+| Option                    | Description                                                               |
+| ------------------------- | ------------------------------------------------------------------------- |
+| `--agent <id\|name\|url>` | Target agent (alias for the positional `<app-or-url>`)                    |
+| `--message <text>`        | Prompt (alias for the positional `"prompt"`)                              |
+| `--api-key-env <name>`    | Read the bearer token from an environment variable                        |
+| `--api-key <token>`       | Bearer token value, passed inline                                         |
+| `--context-id <id>`       | A2A `contextId`, to continue an existing task's conversation              |
+| `--self-app-id <id>`      | Current app id, used for self-call prevention                             |
+| `--self-url <url>`        | Current app URL, used for self-call prevention                            |
+| `--timeout-ms <n>`        | Async polling timeout                                                     |
+| `--poll-interval-ms <n>`  | Async polling interval                                                    |
+| `--sync`                  | Use one blocking `message/send` request instead of the async+poll default |
+| `--no-hint`               | Send the prompt as-is, without the cross-app invocation hint              |
+| `--json`                  | Print target metadata and response text as JSON                           |
+
+Like `callAgent()`, the CLI defaults to async + poll (`invokeAgent` → `callAgent` under the hood), which is the safe choice against hosted/serverless targets — see [Serverless webhook and gateway timeouts](#json-rpc-methods) above. Pass `--sync` only when you know the target isn't behind a gateway with a short execution limit.
+
+The target resolves the same way as `agentNative.invoke()`: by workspace app id, by app name, or by a full URL — so the same command works against a sibling app in a multi-app workspace or an arbitrary A2A peer elsewhere.
+
 ## Task lifecycle {#task-lifecycle}
 
 Each message creates a task that moves through these states:

package/docs/content/agent-surfaces.mdx

@@ -29,6 +29,49 @@ start in chat, appear as a native table or chart, become a durable page in the
 app, and still run from jobs, scripts, MCP, or A2A without changing the operation
 the agent calls.
 
+## Full-page Agent workspace {#agent-page}
+
+When a full application needs a durable place to inspect and configure its
+agent, mount `AgentTabsPage` at `/agent`. Current templates pair that route
+with an app-navigation entry and pass `agentPageHref="/agent"` to
+`AgentSidebar`; the sidebar's Resources and Settings modes can then link to the
+full page without duplicating those flows.
+
+```tsx filename="app/routes/agent.tsx"
+import { AgentTabsPage } from "@agent-native/core/client";
+
+export default function AgentRoute() {
+  return <AgentTabsPage />;
+}
+```
+
+The shared page currently provides five tabs:
+
+- **Context** shows a scope preview, token budget, ordered system sections
+  grouped by provenance, governance, and source, a list/treemap view, and the
+  latest live-thread snapshot. It is a current snapshot, not per-iteration
+  provenance history.
+- **Files** re-hosts the existing `ResourcesPanel` for personal or
+  organization resources.
+- **Connections** re-hosts MCP server management and the A2A remote-agent list:
+  what this app's agent can call.
+- **Jobs** shows scoped recurring jobs and automations with the existing
+  pause/resume, details, and delete flows. Automations are personal-only today.
+- **Access** shows the app MCP URL, an A2A agent card when available, and shared
+  setup guides for Claude, ChatGPT, Cursor, Claude Code, Codex, and other
+  clients. It links to `/mcp/connect` for the full connect flow and token
+  fallback.
+
+The page-level **Personal / Organization** toggle supplies scope to the tabs.
+Members can inspect organization data while organization management remains
+restricted to owners/admins where the hosted component enforces that boundary.
+The design goal is inspectable, attributable, governable context, with
+capability separated from access: Connections describes what the app can call;
+Access describes how external clients connect to it. The page is a thin shell
+over existing components, actions, and access checks—not a new admin console.
+Grants, scope editing, revocation UI, and per-iteration provenance history are
+not provided by this page yet.
+
 <Diagram id="doc-block-hvdxgh" title="The surface spectrum" summary={"One action surface, four product shapes — each adds UI without changing the operation underneath."}>
 
 ```html