Minor Changes
-
aeb3d12: Let the share panel choose what general access allows. Anyone at the organization gets a role picker for Can view, Can comment, or Can edit, and Anyone with the link gets one for Can view or Can comment.
set-resource-visibilitytakes an optionalrolewithvisibility: "org"or"public". The organization's role is stored as the share grant to the resource's own organization, and the link's role as a share row for the newlinkprincipal, which only signed-in callers receive and which is never listed or shared as a person. Each is removed when the resource leaves that visibility, and raising the link role needs the same approval as making a resource public.list-resource-sharesreturnslinkRolefor a public resource.useShareButtonControlleraddsgeneralAccessRole,canSetGeneralAccessRoleandhandleGeneralAccessRole, and while visibility isorgitssharesno longer lists the organization grant.ShareGeneralAccessRowtakesroleCopyandallowedRoles.Going from private to the organization no longer opens a confirmation for every resource type. A registration opts in with
confirmOrgVisibility: true, which chat threads set;useShareVisibilityTransitiontakes the matchingconfirmOrgVisibilityoption. -
573f431:
tool-searchfinds the right tool more often in large apps. It now scores each field separately (name, then search hints, then the description's first sentence, then the rest, then parameters), drops conversational words such as "can you" and "my", marks results that delete or cancel asdestructiveso the agent confirms intent before calling one, matches tense ("archived" finds "archive", "running" finds "run") and joined words ("powerpoint" finds "PowerPoint"), counts common synonyms ("copy" for duplicate, "page" for document) at half weight, and ranks an app's own actions slightly above framework tools with the same words.defineActionacceptssearchHints, a short list of words users say for the action, whichtool-searchranks just below the name and never sends to the model. An action with malformedsearchHintsnow fails to load with anActionDefinitionErrorin every loader, instead of being skipped or run as a CLI wrapper; the error names the action when the loader knows it, which an error raised while a module is evaluated may not.
Patch Changes
- 891c0ae: Accept an active Better Auth session token as a bearer credential, so the Clips Chrome extension stays signed in when the browser session has no legacy session row. Reject expired Better Auth tokens presented in framework session cookies.
- 00835a7: Actions now accept a boolean for a parameter declared as the strings
"true"and"false". Models read a flag likecompactas a boolean and sendfalse; that call used to fail validation, and it now runs as"false". - fdf139b: Factory template feedback sweep skill: a test-only change means only test files, plus an optional
.changeset/entry; Markdown changes no longer count as test-only. - e61063b: Feedback sweep skill: every run also searches for roots with no eyes reaction, so a last-seen timestamp can no longer skip reports, and that timestamp advances only to report roots.
- Release all public npm packages with a patch version bump.
- 3ae69a9: Keep a redacted private reply attributed to its run so later prompts in the same chat no longer fail with "Thread history cannot be verified".
- 2d71bbb: Allow WOFF2 font files through the shared upload endpoint.
- 5c25ab0: Allow organization A2A secret sync to configured loopback workspace gateways without following redirects or syncing to the sender. Fail sync when workspace manifests or recipient URLs are invalid instead of silently omitting apps, including URLs with query strings or fragments, while ignoring non-app folders.
- Updated dependencies
- @agent-native/agentkit@0.225.0
- @agent-native/recap-cli@0.5.97