@agent-native/core 0.0.0-beta-20260819222946 → 0.0.0-beta-20260819225910

package/corpus/README.md

@@ -31,4 +31,4 @@ rg -n "defineAction|useActionQuery" node_modules/@agent-native/core/corpus
 
 ## Generated Counts
 
-- template files: 8478
+- template files: 8479

package/corpus/templates/analytics/netlify.toml

@@ -22,6 +22,10 @@ AGENT_CHAT_DURABLE_BACKGROUND = "true"
 AGENT_NATIVE_HOSTED_HARNESS = "true"
 AGENT_NATIVE_ENABLE_KEEP_WARM = "1"
 AGENT_NATIVE_DISABLE_KEEP_WARM_BACKGROUND = "1"
+# Keep the public shell close to the current deploy. A stale shell can retain
+# hashed modulepreload URLs after a Netlify asset publish and leave the app on
+# its loading screen while those chunks return 404.
+AGENT_NATIVE_SSR_CACHE = "30s"
 # Analytics owns its schema at release time (`migrate:production` above), so
 # production request functions skip migrations. Preview functions still run
 # request-path migrations because previews do not run the production release

package/corpus/templates/clips/actions/request-transcript.ts

@@ -1526,18 +1526,22 @@ const requestTranscriptAction = defineAction({
             transcribeWithBuilderModelFallback({
               audioBytes: audioMedia.audioBytes,
               mimeType: audioMedia.mimeType,
-              diarize: false,
+              diarize: true,
               instructions: SPEECH_ONLY_TRANSCRIPTION_INSTRUCTIONS,
               timeoutMs: builderTranscriptionTimeoutMs(rec.durationMs),
             }),
         );
 
         const segments = (builderResult.segments ?? [])
-          .map((s) => ({
-            startMs: s.startMs,
-            endMs: s.endMs,
-            text: s.text.trim(),
-          }))
+          .map((s) => {
+            const speaker = s.speakerLabel?.trim();
+            return {
+              startMs: s.startMs,
+              endMs: s.endMs,
+              text: s.text.trim(),
+              ...(speaker ? { speaker } : {}),
+            };
+          })
           .filter((segment) => segment.text);
         const normalizedTranscript = normalizeProviderTranscript(
           builderResult.text,

package/corpus/templates/factory/AGENTS.md

@@ -24,18 +24,19 @@ decisions, feedback, agent runs, and provider audit records.
 - Use the generic Slack adapter: clear-bug automations add 👀 and tag
   `@builder.io`, ask Builder to run `/address-feedback`, and group repeated
   reports into one Builder thread; GitHub/Sentry clear bugs use the Builder run
-  API. Clips, Design, and Content stay owner-managed outside autonomous
-  dispatch and PR governance.
-- PR governance follows `review-prs`: verify current BuilderIO membership and
-  the complete diff/review/check evidence, never approve external or
-  unverified authors, and keep ultra-scary security, auth, tenant-isolation,
-  secrets, data-loss, execution, payment, and deployment risks manual. The
-  verified internal-author evidence does not waive ordinary failed or
-  unresolved checks or feedback; those gates remain required and their exact
-  states must stay visible. It never waives membership or the ultra-scary
-  gate.
-  Product/UX ownership still needs the verified owner, with the documented Sid
-  exception. Auto-merge also requires a verified Factory Builder run.
+  API. Follow `review-latest-feedback` for full-thread evidence, existing
+  reaction and owner checks, answered-clarification priority, one-question
+  clarification limits, durable rechecks, and the required `@agent-native`
+  disposition after every actionable 👀. Clips, Design, and Content stay
+  owner-managed for feedback dispatch.
+- PR governance follows `review-prs`: verify BuilderIO membership and complete
+  diff/review/check evidence; skip drafts/current approvals and never approve
+  external authors. Keep ultra-scary security, auth, tenant-isolation,
+  secrets, data-loss, execution, payment, and deployment risks manual.
+  Verified members may pass ordinary uncertain checks or review feedback, but
+  record exact states and never call them clean. Apply the Alice/Content,
+  Nick/Slides, Enzo/Factory, Sid/Design, and docs-only exceptions only after
+  membership and the ultra-scary gate. Never auto-merge.
 - Graph edits create immutable blueprint versions. AI proposes with `source=ai`;
   a person reviews and publishes through the same action surface.
 - Provider credentials belong to Dispatch/shared workspace integrations, never
@@ -80,17 +81,11 @@ decisions, feedback, agent runs, and provider audit records.
 | `import-agent` / `import-agent-pack` / `list-agent-pack` | Import profiles or agent packs. |
 | `start-workspace-app-creation` | Promote an agent and its pack into an app handoff. |
 
-Rules start in shadow mode; hard guards always apply. Organization automations
-execute stored prompts, and every external mutation needs a durable run,
-idempotency key, and provider confirmation. The legacy observer ends once org
-automations are seeded. Use the visual editor for graph changes and agent chat
+Rules start in shadow mode; hard guards apply. Organization automations use
+stored prompts; external mutations require durable, idempotent runs and
+provider confirmation. Use the visual editor for graph changes and agent chat
 for proposals; persist complete graphs with `save-factory-graph`. Change rules
-through triage rule actions, never graph JSON.
-
-The Slack, GitHub, and Sentry pollers are bounded ingestion adapters for the
-legacy default triage queue. They do not define the complete tool surface.
-Interactive and scheduled agents may discover additional connected provider or
-MCP tools through the shared workspace context.
+through triage actions, never graph JSON.
 
 ## Source Changes
 

package/corpus/templates/factory/actions/get-slack-feedback-context.ts

@@ -2,7 +2,6 @@ import { defineAction } from "@agent-native/core/action";
 import { and, eq } from "drizzle-orm";
 import { z } from "zod";
 
-import type { SlackMessage } from "../server/connectors/slack.js";
 import { getDb } from "../server/db/index.js";
 import { triageConfig, triageItems } from "../server/db/schema.js";
 import {
@@ -12,8 +11,6 @@ import {
 import { recordFactoryAudit } from "../server/triage/audit.js";
 import { createSlackReader } from "../server/triage/slack-client.js";
 
-const MAX_THREAD_PAGES = 5;
-
 export default defineAction({
   description:
     "Read the bounded full Slack thread for one Factory feedback item. Use this before deciding whether a report is a clear bug; unreadable or truncated context is not a green light.",
@@ -46,31 +43,11 @@ export default defineAction({
     const workspace =
       config?.slackWorkspace === "secondary" ? "secondary" : "primary";
     const slack = createSlackReader({ ownerEmail: userEmail, orgId });
-    const messages: SlackMessage[] = [];
-    let cursor: string | undefined;
-    let hasMore = false;
-    for (let page = 0; page < MAX_THREAD_PAGES; page += 1) {
-      const result = await slack.getThread(
-        workspace,
-        item.channelId,
-        item.threadTs,
-        100,
-        cursor,
-      );
-      messages.push(...result.messages);
-      if (result.has_more && !result.next_cursor) {
-        throw new Error(
-          "Slack thread pagination is incomplete because the provider omitted its next cursor.",
-        );
-      }
-      if (!result.has_more) {
-        hasMore = false;
-        break;
-      }
-      hasMore = page === MAX_THREAD_PAGES - 1;
-      if (hasMore) break;
-      cursor = result.next_cursor;
-    }
+    const { messages, hasMore } = await slack.getCompleteThread(
+      workspace,
+      item.channelId,
+      item.threadTs,
+    );
 
     await recordFactoryAudit(
       context,
@@ -100,10 +77,13 @@ export default defineAction({
       coverage: hasMore ? "partial" : "complete",
       messages: messages.map((message) => ({
         user: message.user ?? message.username ?? message.bot_id ?? null,
+        username: message.username ?? null,
+        botId: message.bot_id ?? null,
         text: message.text,
         ts: message.ts,
         threadTs: message.thread_ts ?? item.threadTs,
         replyCount: message.reply_count ?? 0,
+        reactions: message.reactions ?? [],
       })),
     };
   },

package/corpus/templates/factory/actions/govern-agent-native-pull-request.ts

@@ -24,7 +24,10 @@ import {
   serializeTriageMetadata,
 } from "../server/triage/metadata.js";
 import { reconcileBabysitState } from "../server/triage/pr-babysit.js";
-import { decidePullRequestGovernance } from "../server/triage/pr-policy.js";
+import {
+  decidePullRequestGovernance,
+  hasCurrentPullRequestApproval,
+} from "../server/triage/pr-policy.js";
 
 function repositoryRef(value: string): { owner: string; repo: string } {
   const match = /^([^/\s]+)\/([^/\s]+)$/.exec(value.trim());
@@ -103,7 +106,7 @@ async function hasVerifiedFactoryRun(input: {
 
 export default defineAction({
   description:
-    "Govern one agent-native pull request after fetching bounded GitHub and ai-services evidence. Auto-approve only clear internal bug fixes with clean CI and handled review feedback; auto-merge only the verified Factory Builder flow. Clips, Design, and Content are always owner-managed.",
+    "Govern one agent-native pull request after fetching bounded GitHub and ai-services evidence. Auto-approve only under the current review-prs membership, owner, evidence, and ultra-scary gates. Never auto-merge. Clips, Design, and Content feedback remains owner-managed while their verified PR-owner exceptions still apply.",
   schema: z.object({
     repo: z.string().trim().min(1).max(256),
     pullRequestNumber: z.number().int().positive(),
@@ -167,6 +170,24 @@ export default defineAction({
       repository,
       pullRequestNumber,
     );
+    if (pullRequest.state !== "open" || pullRequest.draft) {
+      if (itemId) {
+        await getDb()
+          .update(triageItems)
+          .set({
+            status: "pr_observed",
+            updatedAt: new Date().toISOString(),
+          })
+          .where(and(eq(triageItems.id, itemId), eq(triageItems.orgId, orgId)));
+      }
+      return {
+        ok: true,
+        action: "skipped",
+        reason: pullRequest.draft
+          ? "Pull request is a draft and is excluded before evidence review."
+          : "Pull request is not open and is excluded before evidence review.",
+      };
+    }
     const privateKey = await resolveConnectorSecret(
       "BUILDER_PRIVATE_KEY",
       userEmail,
@@ -186,6 +207,38 @@ export default defineAction({
         `PR evidence is stale: GitHub reports ${pullRequest.headSha}, ai-services reports ${snapshot.headSha}.`,
       );
     }
+    if (hasCurrentPullRequestApproval(snapshot.reviews)) {
+      await recordFactoryAudit(
+        context,
+        { userEmail, orgId },
+        {
+          action: "govern-agent-native-pull-request",
+          kind: "governance",
+          status: "skipped",
+          itemId: itemId ?? null,
+          source: "github",
+          sourceUrl: pullRequest.htmlUrl,
+          summary:
+            "Skipped the pull request because it already has a current non-dismissed approval.",
+          details: { repo, pullRequestNumber },
+        },
+      );
+      if (itemId) {
+        await getDb()
+          .update(triageItems)
+          .set({
+            status: "pr_observed",
+            updatedAt: new Date().toISOString(),
+          })
+          .where(and(eq(triageItems.id, itemId), eq(triageItems.orgId, orgId)));
+      }
+      return {
+        ok: true,
+        action: "skipped",
+        reason:
+          "Pull request already has a current non-dismissed approval; no duplicate review was created.",
+      };
+    }
 
     const checksPassed =
       snapshot.coverage === "complete" &&
@@ -254,6 +307,7 @@ export default defineAction({
           reviewFeedbackHandled,
           autoApprove: governance.autoApprove,
           autoMerge: governance.autoMerge,
+          ownerException: governance.ownerException,
           ownerOwnedArea: governance.ownerOwnedArea ?? null,
           guardResults: governance.guardResults,
         },
@@ -341,7 +395,9 @@ export default defineAction({
         const approval = await github.approvePullRequest(
           repository,
           pullRequestNumber,
-          "Factory auto-approved: clear internal bug fix with passing CI and handled review feedback.",
+          governance.ownerException
+            ? `Factory auto-approved under the verified ${governance.ownerException} owner exception; ordinary check and review states remain recorded.`
+            : "Factory auto-approved under verified BuilderIO membership; ordinary check and review states remain recorded.",
         );
         approvalUrl = approval.htmlUrl;
         metadata.autoApprovedAt = new Date().toISOString();
@@ -361,61 +417,13 @@ export default defineAction({
         await github.approvePullRequest(
           repository,
           pullRequestNumber,
-          "Factory auto-approved: clear internal bug fix with passing CI and handled review feedback.",
+          governance.ownerException
+            ? `Factory auto-approved under the verified ${governance.ownerException} owner exception; ordinary check and review states remain recorded.`
+            : "Factory auto-approved under verified BuilderIO membership; ordinary check and review states remain recorded.",
         )
       ).htmlUrl;
     }
 
-    if (!governance.autoMerge) {
-      await recordFactoryAudit(
-        context,
-        { userEmail, orgId },
-        {
-          action: "govern-agent-native-pull-request",
-          kind: "external_action",
-          itemId: itemId ?? null,
-          source: "github",
-          sourceUrl: approvalUrl,
-          summary: "Approved the pull request after governance checks passed.",
-          details: { repo, pullRequestNumber, approvalUrl },
-        },
-      );
-      return {
-        ok: true,
-        action: "approved",
-        approvalUrl,
-        checksPassed,
-        reviewFeedbackHandled,
-      };
-    }
-
-    const merge = await github.mergePullRequest(
-      repository,
-      pullRequestNumber,
-      `Merge Factory bug fix #${pullRequestNumber}`,
-      snapshot.headSha,
-    );
-    if (itemId) {
-      const item = (
-        await getDb()
-          .select({ metadataJson: triageItems.metadataJson })
-          .from(triageItems)
-          .where(and(eq(triageItems.id, itemId), eq(triageItems.orgId, orgId)))
-          .limit(1)
-      )[0];
-      if (!item) throw new Error("Factory item disappeared after PR merge.");
-      const metadata = parseTriageMetadata(item.metadataJson);
-      metadata.autoMergedAt = new Date().toISOString();
-      metadata.mergeSha = merge.sha;
-      await getDb()
-        .update(triageItems)
-        .set({
-          metadataJson: serializeTriageMetadata(metadata),
-          status: "merged",
-          updatedAt: new Date().toISOString(),
-        })
-        .where(and(eq(triageItems.id, itemId), eq(triageItems.orgId, orgId)));
-    }
     await recordFactoryAudit(
       context,
       { userEmail, orgId },
@@ -424,16 +432,16 @@ export default defineAction({
         kind: "external_action",
         itemId: itemId ?? null,
         source: "github",
-        sourceUrl: pullRequest.htmlUrl,
-        summary: "Merged the pull request after governance checks passed.",
-        details: { repo, pullRequestNumber, approvalUrl, mergeSha: merge.sha },
+        sourceUrl: approvalUrl,
+        summary:
+          "Approved the pull request under the current review-prs policy.",
+        details: { repo, pullRequestNumber, approvalUrl },
       },
     );
     return {
       ok: true,
-      action: "merged",
+      action: "approved",
       approvalUrl,
-      mergeSha: merge.sha,
       checksPassed,
       reviewFeedbackHandled,
     };

package/corpus/templates/factory/actions/list-triage-items.ts

@@ -30,7 +30,12 @@ export default defineAction({
       workspaceMemberIdentityFromContext(context),
     );
     const db = getDb();
-    const reviewStatuses = source === "github" ? ["pr_observed"] : ["received"];
+    const reviewStatuses =
+      source === "github"
+        ? ["pr_observed"]
+        : source === "slack"
+          ? ["received", "automation_started", "evidence_ready"]
+          : ["received"];
     const items = await db
       .select()
       .from(triageItems)

package/corpus/templates/factory/actions/reconcile-triage-run.ts

@@ -20,7 +20,13 @@ import {
 
 const reviewSchema = z.object({
   author: z.string(),
-  state: z.enum(["approved", "changes_requested", "commented", "pending"]),
+  state: z.enum([
+    "approved",
+    "changes_requested",
+    "commented",
+    "pending",
+    "dismissed",
+  ]),
   observedAt: z.string().datetime(),
 });
 const checkSchema = z.object({

package/corpus/templates/factory/actions/start-builder-for-item.ts

@@ -26,7 +26,7 @@ import { detectOwnerOwnedArea } from "../server/triage/pr-policy.js";
 import { createSlackReader } from "../server/triage/slack-client.js";
 
 const replyTextPrefix =
-  "@builder.io please run /address-feedback in the repo to address this feedback. Read the address-feedback, address-feedback-with-replies, review-latest-feedback, and review-prs skills as relevant, inspect the full thread and linked evidence, and fix the owning boundary. Please send a PR when ready.";
+  "@builder.io please run /address-feedback in the repo to address this feedback. Read the address-feedback, address-feedback-with-replies, review-latest-feedback, and review-prs skills as relevant, inspect the full thread and linked evidence, and fix the owning boundary. Please send a PR when ready, then have the @agent-native bot post a concise Fixed, In progress, or Clarification needed disposition in this same thread; an 👀 reaction or this handoff alone is not completion.";
 const legacyReplyTextPrefix = "@builderio please fix this in a reply.";
 
 type RelatedFeedbackItem = {
@@ -474,30 +474,53 @@ export default defineAction({
         const workspace =
           config?.slackWorkspace === "secondary" ? "secondary" : "primary";
         const slack = createSlackReader({ ownerEmail: userEmail, orgId });
-        for (const feedbackItem of [item, ...relatedItems]) {
-          const feedbackMetadata =
-            feedbackItem.id === itemId
-              ? metadata
-              : parseTriageMetadata(feedbackItem.metadataJson);
-          if (metadataBoolean(feedbackMetadata, "slackEyesReactedAt")) {
-            continue;
+        const thread = await slack.getCompleteThread(
+          workspace,
+          item.channelId,
+          item.threadTs,
+        );
+        const completeThreads = new Map([[item.id, thread]]);
+        if (thread.hasMore) {
+          throw new Error(
+            "Slack thread is truncated; refusing to dispatch without complete evidence.",
+          );
+        }
+        for (const related of relatedItems) {
+          if (!related.channelId || !related.threadTs) {
+            throw new Error(
+              "Grouped Slack feedback is missing a channel or thread identity.",
+            );
+          }
+          const relatedThread = await slack.getCompleteThread(
+            workspace,
+            related.channelId,
+            related.threadTs,
+          );
+          completeThreads.set(related.id, relatedThread);
+          if (relatedThread.hasMore) {
+            throw new Error(
+              "A grouped Slack thread is truncated; refusing to dispatch without complete evidence.",
+            );
           }
-          const reaction = await slack.addEyesReaction(
+        }
+        for (const feedbackItem of [item, ...relatedItems]) {
+          const reactionState = await slack.getEyesReaction(
             workspace,
             feedbackItem.channelId!,
             feedbackItem.threadTs!,
           );
+          const reaction = reactionState.eyesPresent
+            ? { added: false, already_present: true }
+            : await slack.addEyesReaction(
+                workspace,
+                feedbackItem.channelId!,
+                feedbackItem.threadTs!,
+              );
           await writeMetadata(feedbackItem.id, orgId, {
             slackEyesReactedAt: new Date().toISOString(),
             slackEyesReactionAlreadyPresent: reaction.already_present,
           });
         }
-        const thread = await slack.getThread(
-          workspace,
-          item.channelId,
-          item.threadTs,
-          100,
-        );
         const hasCurrentBuilderReply = thread.messages.some((message) =>
           message.text.includes(replyTextPrefix),
         );
@@ -510,7 +533,7 @@ export default defineAction({
           ),
         );
         if (
-          thread.has_more &&
+          thread.hasMore &&
           !hasCurrentBuilderReply &&
           !hasLegacyBuilderReply
         ) {
@@ -534,6 +557,35 @@ export default defineAction({
             slackBuilderReplyTs: posted.ts,
           });
         }
+        const agentNative = await slack.getAgentNativeIdentity(workspace);
+        for (const feedbackItem of [item, ...relatedItems]) {
+          const feedbackThread = completeThreads.get(feedbackItem.id);
+          if (!feedbackThread) {
+            throw new Error(
+              `Slack thread evidence is missing for Factory item ${feedbackItem.id}.`,
+            );
+          }
+          const hasAgentNativeDisposition = feedbackThread.messages.some(
+            (message) =>
+              (message.user === agentNative.userId ||
+                message.username?.trim().toLowerCase() === "agent-native") &&
+              /^(Fixed|In progress|Clarification needed):/i.test(
+                message.text.trim(),
+              ),
+          );
+          if (hasAgentNativeDisposition) continue;
+          const disposition = await slack.postThreadReply(
+            workspace,
+            feedbackItem.channelId!,
+            feedbackItem.threadTs!,
+            `Thanks - Builder owns this feedback cluster and will follow up after verification. In progress: ${reason}`,
+          );
+          await writeMetadata(feedbackItem.id, orgId, {
+            slackDispositionAt: new Date().toISOString(),
+            slackDispositionTs: disposition.ts,
+            slackDisposition: "In progress",
+          });
+        }
         const clusterItemIds = [itemId, ...relatedItems.map(({ id }) => id)];
         const clusterMetadata = {
           feedbackClusterRepresentativeId: itemId,

package/corpus/templates/factory/server/connectors/slack.ts

@@ -14,6 +14,14 @@ export interface SlackMessage {
   thread_ts?: string;
   reply_count?: number;
   permalink?: string;
+  reactions?: Array<{ name: string; count?: number; users?: string[] }>;
+}
+
+export interface SlackAuthTestResult {
+  userId: string;
+  userName: string;
+  teamId: string;
+  teamName: string;
 }
 
 export interface SlackTeamInfo {
@@ -45,6 +53,10 @@ export interface SlackReactionResult {
   already_present: boolean;
 }
 
+export interface SlackReactionState {
+  eyesPresent: boolean;
+}
+
 export interface SlackPostMessageResult {
   ok?: boolean;
   error?: string;
@@ -219,6 +231,56 @@ export async function getThread(
   };
 }
 
+export async function authTest(
+  workspace: Workspace,
+  tokenResolver?: SlackTokenResolver,
+): Promise<SlackAuthTestResult> {
+  const data = await slackApi<{
+    user_id?: string;
+    user?: string;
+    team_id?: string;
+    team?: string;
+  }>(workspace, "auth.test", undefined, tokenResolver);
+  if (
+    typeof data.user_id !== "string" ||
+    typeof data.user !== "string" ||
+    typeof data.team_id !== "string" ||
+    typeof data.team !== "string"
+  ) {
+    throw new Error("Slack auth.test response is missing bot identity.");
+  }
+  return {
+    userId: data.user_id,
+    userName: data.user,
+    teamId: data.team_id,
+    teamName: data.team,
+  };
+}
+
+export async function getEyesReaction(
+  workspace: Workspace,
+  channelId: string,
+  timestamp: string,
+  tokenResolver?: SlackTokenResolver,
+): Promise<SlackReactionState> {
+  const data = await slackApi<{
+    message?: { reactions?: Array<{ name?: string; count?: number }> };
+  }>(
+    workspace,
+    "reactions.get",
+    { channel: channelId, timestamp },
+    tokenResolver,
+  );
+  if (!data.message) {
+    throw new Error("Slack reaction response is missing the message.");
+  }
+  return {
+    eyesPresent: (data.message.reactions ?? []).some(
+      (reaction) => reaction.name === "eyes" && (reaction.count ?? 0) > 0,
+    ),
+  };
+}
+
 export async function addEyesReaction(
   workspace: Workspace,
   channelId: string,