@agent-native/core 0.108.0 → 0.109.1

package/src/templates/default/app/i18n/es-ES.ts

@@ -79,12 +79,32 @@ const messages = {
         'Apps in the "{{workspace}}" workspace. Each app gets its own route under this workspace and shares its database, auth, and agent chat.',
       appsInWorkspace: "Apps in {{workspace}}",
       workspaceApps: "Aplicaciones de espacio de trabajo",
+      otherApps: "Otras aplicaciones",
+      otherAppsDescription: "Abre otras aplicaciones disponibles para ti.",
+      availableCount: "{{count}} disponibles",
       activeCount: "{{count}} active",
       hiddenCount: "{{count}} hidden",
       createApp: "Crear aplicación",
       templates: "Plantillas",
       checkingTemplates: "Comprobando plantillas disponibles",
       templatesAvailable: "{{count}} available to scaffold",
+      curatedTemplates: "Plantillas seleccionadas",
+      curatedTemplatesDescription:
+        "Empieza con una estructura de aplicación revisada y hazla tuya.",
+      remix: "Reutilizar",
+      remixTemplate: "Reutilizar {{name}}",
+      remixAppIdLabel: "Nuevo ID de aplicación",
+      remixStarted: "Se inició la reutilización de {{name}}",
+      viewLiveApp: "Ver aplicación en vivo",
+      alreadyInWorkspace: "Ya está en el espacio de trabajo",
+      remixAppIdDescription:
+        "Elige un ID seguro para URL para la nueva aplicación.",
+      integrationSetup: "Configuración de integración",
+      source: "Origen",
+      remixing: "Reutilizando…",
+      remixSuccess: "Se inició la reutilización de la plantilla.",
+      remixError: "No se pudo reutilizar esta plantilla",
+      appIdRequired: "El ID de aplicación es obligatorio.",
       hide: "Ocultar",
       show: "Show",
       hiddenApps: "Aplicaciones ocultas",

package/src/templates/default/app/i18n/fr-FR.ts

@@ -80,12 +80,33 @@ const messages = {
         'Apps in the "{{workspace}}" workspace. Each app gets its own route under this workspace and shares its database, auth, and agent chat.',
       appsInWorkspace: "Apps in {{workspace}}",
       workspaceApps: "Applications d'espace de travail",
+      otherApps: "Autres applications",
+      otherAppsDescription:
+        "Ouvrez les autres applications qui vous sont accessibles.",
+      availableCount: "{{count}} disponibles",
       activeCount: "{{count}} active",
       hiddenCount: "{{count}} hidden",
       createApp: "Créer une application",
       templates: "Modèles",
       checkingTemplates: "Vérification des modèles disponibles",
       templatesAvailable: "{{count}} available to scaffold",
+      curatedTemplates: "Modèles sélectionnés",
+      curatedTemplatesDescription:
+        "Partez d’une structure d’application vérifiée et personnalisez-la.",
+      remix: "Remixer",
+      remixTemplate: "Remixer {{name}}",
+      remixAppIdLabel: "Nouvel identifiant d’application",
+      remixStarted: "Remix de {{name}} lancé",
+      viewLiveApp: "Voir l’application en direct",
+      alreadyInWorkspace: "Déjà dans l’espace de travail",
+      remixAppIdDescription:
+        "Choisissez un identifiant compatible avec l’URL pour la nouvelle application.",
+      integrationSetup: "Configuration de l’intégration",
+      source: "Source",
+      remixing: "Remix en cours…",
+      remixSuccess: "Le remix du modèle a démarré.",
+      remixError: "Impossible de remixer ce modèle",
+      appIdRequired: "L’identifiant de l’application est requis.",
       hide: "Masquer",
       show: "Show",
       hiddenApps: "Applications cachées",

package/src/templates/default/app/i18n/hi-IN.ts

@@ -75,12 +75,31 @@ const messages = {
         'Apps in the "{{workspace}}" workspace. Each app gets its own route under this workspace and shares its database, auth, and agent chat.',
       appsInWorkspace: "Apps in {{workspace}}",
       workspaceApps: "कार्यक्षेत्र ऐप्स",
+      otherApps: "अन्य ऐप्स",
+      otherAppsDescription: "आपके लिए उपलब्ध अन्य ऐप्स खोलें।",
+      availableCount: "{{count}} उपलब्ध",
       activeCount: "{{count}} active",
       hiddenCount: "{{count}} hidden",
       createApp: "ऐप बनाएं",
       templates: "टेम्पलेट",
       checkingTemplates: "उपलब्ध टेम्प्लेट की जाँच करना",
       templatesAvailable: "{{count}} available to scaffold",
+      curatedTemplates: "चयनित टेम्पलेट",
+      curatedTemplatesDescription:
+        "समीक्षित ऐप संरचना से शुरू करें और इसे अपने अनुसार बनाएं।",
+      remix: "रीमिक्स",
+      remixTemplate: "{{name}} रीमिक्स करें",
+      remixAppIdLabel: "नया ऐप आईडी",
+      remixStarted: "{{name}} रीमिक्स शुरू हुआ",
+      viewLiveApp: "लाइव ऐप देखें",
+      alreadyInWorkspace: "वर्कस्पेस में पहले से मौजूद",
+      remixAppIdDescription: "नए वर्कस्पेस ऐप के लिए URL-सुरक्षित आईडी चुनें।",
+      integrationSetup: "इंटीग्रेशन सेटअप",
+      source: "स्रोत",
+      remixing: "रीमिक्स हो रहा है…",
+      remixSuccess: "टेम्पलेट रीमिक्स शुरू हुआ।",
+      remixError: "यह टेम्पलेट रीमिक्स नहीं हो सका",
+      appIdRequired: "ऐप आईडी आवश्यक है।",
       hide: "छिपाएं",
       show: "Show",
       hiddenApps: "छुपे हुए ऐप्स",

package/src/templates/default/app/i18n/ja-JP.ts

@@ -77,12 +77,32 @@ const messages = {
         'Apps in the "{{workspace}}" workspace. Each app gets its own route under this workspace and shares its database, auth, and agent chat.',
       appsInWorkspace: "Apps in {{workspace}}",
       workspaceApps: "ワークスペースアプリ",
+      otherApps: "その他のアプリ",
+      otherAppsDescription: "利用できるその他のアプリを開きます。",
+      availableCount: "{{count}}件利用可能",
       activeCount: "{{count}} active",
       hiddenCount: "{{count}} hidden",
       createApp: "アプリの作成",
       templates: "テンプレート",
       checkingTemplates: "利用可能なテンプレートを確認する",
       templatesAvailable: "{{count}} available to scaffold",
+      curatedTemplates: "厳選テンプレート",
+      curatedTemplatesDescription:
+        "レビュー済みのアプリ構成をベースに、自分用にカスタマイズできます。",
+      remix: "リミックス",
+      remixTemplate: "{{name}} をリミックス",
+      remixAppIdLabel: "新しいアプリ ID",
+      remixStarted: "{{name}} のリミックスを開始しました",
+      viewLiveApp: "ライブアプリを見る",
+      alreadyInWorkspace: "ワークスペースに追加済み",
+      remixAppIdDescription:
+        "新しいワークスペースアプリの URL セーフな ID を選択してください。",
+      integrationSetup: "連携の設定",
+      source: "提供元",
+      remixing: "リミックス中…",
+      remixSuccess: "テンプレートのリミックスを開始しました。",
+      remixError: "このテンプレートをリミックスできませんでした",
+      appIdRequired: "アプリ ID は必須です。",
       hide: "非表示",
       show: "Show",
       hiddenApps: "隠しアプリ",

package/src/templates/default/app/i18n/ko-KR.ts

@@ -76,12 +76,31 @@ const messages = {
         'Apps in the "{{workspace}}" workspace. Each app gets its own route under this workspace and shares its database, auth, and agent chat.',
       appsInWorkspace: "Apps in {{workspace}}",
       workspaceApps: "작업 공간 앱",
+      otherApps: "기타 앱",
+      otherAppsDescription: "사용할 수 있는 다른 앱을 엽니다.",
+      availableCount: "{{count}}개 사용 가능",
       activeCount: "{{count}} active",
       hiddenCount: "{{count}} hidden",
       createApp: "앱 만들기",
       templates: "템플릿",
       checkingTemplates: "사용 가능한 템플릿 확인 중",
       templatesAvailable: "{{count}} available to scaffold",
+      curatedTemplates: "엄선된 템플릿",
+      curatedTemplatesDescription:
+        "검토된 앱 구조에서 시작해 나만의 앱으로 만들어 보세요.",
+      remix: "리믹스",
+      remixTemplate: "{{name}} 리믹스",
+      remixAppIdLabel: "새 앱 ID",
+      remixStarted: "{{name}} 리믹스를 시작했습니다",
+      viewLiveApp: "라이브 앱 보기",
+      alreadyInWorkspace: "워크스페이스에 이미 있음",
+      remixAppIdDescription: "새 워크스페이스 앱의 URL 안전 ID를 선택하세요.",
+      integrationSetup: "연동 설정",
+      source: "소스",
+      remixing: "리믹스 중…",
+      remixSuccess: "템플릿 리믹스를 시작했습니다.",
+      remixError: "이 템플릿을 리믹스할 수 없습니다",
+      appIdRequired: "앱 ID가 필요합니다.",
       hide: "숨기기",
       show: "Show",
       hiddenApps: "숨겨진 앱",

package/src/templates/default/app/i18n/pt-BR.ts

@@ -80,12 +80,32 @@ const messages = {
         'Apps in the "{{workspace}}" workspace. Each app gets its own route under this workspace and shares its database, auth, and agent chat.',
       appsInWorkspace: "Apps in {{workspace}}",
       workspaceApps: "Aplicativos de espaço de trabalho",
+      otherApps: "Outros aplicativos",
+      otherAppsDescription: "Abra outros aplicativos disponíveis para você.",
+      availableCount: "{{count}} disponíveis",
       activeCount: "{{count}} active",
       hiddenCount: "{{count}} hidden",
       createApp: "Criar aplicativo",
       templates: "Modelos",
       checkingTemplates: "Verificando modelos disponíveis",
       templatesAvailable: "{{count}} available to scaffold",
+      curatedTemplates: "Modelos selecionados",
+      curatedTemplatesDescription:
+        "Comece com uma estrutura de app revisada e personalize-a.",
+      remix: "Remixar",
+      remixTemplate: "Remixar {{name}}",
+      remixAppIdLabel: "Novo ID do app",
+      remixStarted: "Remix de {{name}} iniciado",
+      viewLiveApp: "Ver app ao vivo",
+      alreadyInWorkspace: "Já está no workspace",
+      remixAppIdDescription:
+        "Escolha um ID seguro para URL para o novo app do workspace.",
+      integrationSetup: "Configuração da integração",
+      source: "Origem",
+      remixing: "Remixando…",
+      remixSuccess: "Remix do modelo iniciado.",
+      remixError: "Não foi possível remixar este modelo",
+      appIdRequired: "O ID do app é obrigatório.",
       hide: "Ocultar",
       show: "Show",
       hiddenApps: "Aplicativos ocultos",

package/src/templates/default/app/i18n/zh-CN.ts

@@ -73,12 +73,31 @@ const messages = {
         'Apps in the "{{workspace}}" workspace. Each app gets its own route under this workspace and shares its database, auth, and agent chat.',
       appsInWorkspace: "Apps in {{workspace}}",
       workspaceApps: "工作区应用程序",
+      otherApps: "其他应用",
+      otherAppsDescription: "打开你可以使用的其他应用。",
+      availableCount: "可用 {{count}} 个",
       activeCount: "{{count}} active",
       hiddenCount: "{{count}} hidden",
       createApp: "创建应用程序",
       templates: "模板",
       checkingTemplates: "检查可用模板",
       templatesAvailable: "{{count}} available to scaffold",
+      curatedTemplates: "精选模板",
+      curatedTemplatesDescription:
+        "从经过审核的应用结构开始，然后打造属于你的应用。",
+      remix: "再创作",
+      remixTemplate: "再创作 {{name}}",
+      remixAppIdLabel: "新应用 ID",
+      remixStarted: "已开始再创作 {{name}}",
+      viewLiveApp: "查看在线应用",
+      alreadyInWorkspace: "已在工作区中",
+      remixAppIdDescription: "为新的工作区应用选择一个 URL 安全的 ID。",
+      integrationSetup: "集成设置",
+      source: "来源",
+      remixing: "正在再创作…",
+      remixSuccess: "已开始再创作模板。",
+      remixError: "无法再创作此模板",
+      appIdRequired: "应用 ID 是必填项。",
       hide: "隐藏",
       show: "Show",
       hiddenApps: "隐藏的应用程序",

package/src/templates/default/app/i18n/zh-TW.ts

@@ -73,12 +73,31 @@ const messages = {
         "「{{workspace}}」工作區中的應用程式。每個應用程式都會在此工作區下取得自己的路由，並共用資料庫、驗證與代理聊天。",
       appsInWorkspace: "{{workspace}} 中的應用程式",
       workspaceApps: "工作區應用程式",
+      otherApps: "其他應用程式",
+      otherAppsDescription: "開啟你可以使用的其他應用程式。",
+      availableCount: "可用 {{count}} 個",
       activeCount: "{{count}} 個作用中",
       hiddenCount: "{{count}} 個已隱藏",
       createApp: "建立應用程式",
       templates: "範本",
       checkingTemplates: "檢查可用範本",
       templatesAvailable: "{{count}} 個可用於產生架構",
+      curatedTemplates: "精選範本",
+      curatedTemplatesDescription:
+        "從經過審核的應用程式結構開始，打造屬於你的應用程式。",
+      remix: "重新混搭",
+      remixTemplate: "重新混搭 {{name}}",
+      remixAppIdLabel: "新應用程式 ID",
+      remixStarted: "已開始重新混搭 {{name}}",
+      viewLiveApp: "查看線上應用程式",
+      alreadyInWorkspace: "已在工作區中",
+      remixAppIdDescription: "為新的工作區應用程式選擇 URL 安全的 ID。",
+      integrationSetup: "整合設定",
+      source: "來源",
+      remixing: "正在重新混搭…",
+      remixSuccess: "已開始重新混搭範本。",
+      remixError: "無法重新混搭此範本",
+      appIdRequired: "應用程式 ID 為必填項目。",
       hide: "隱藏",
       show: "Show",
       hiddenApps: "隱藏的應用程式",

package/src/templates/workspace-core/.agents/skills/a2a-protocol/SKILL.md

@@ -117,6 +117,54 @@ const answer = await callAgent(
 // answer is a plain string
 ```
 
+### Fast bounded read: `invokeAgentAction()`
+
+When the caller knows the exact receiver-owned read action and arguments, skip
+the receiver's model loop:
+
+```ts
+import { invokeAgentAction } from "@agent-native/core/a2a";
+
+const { result } = await invokeAgentAction({
+  target: "analytics",
+  action: "gong-calls",
+  input: { company: "Acme", days: 90, includeTranscripts: true },
+  userEmail,
+  orgDomain,
+  orgSecret,
+});
+```
+
+The receiver still owns schema validation, credentials, access scoping, audit
+attribution, and exposure policy. Direct invocation is available only for
+cataloged, authenticated, explicitly exposed read-only actions that do not
+require approval. Its JWT is audience-bound to the receiving app. Use normal
+message delegation for planning, synthesis, multi-step work, or mutations.
+
+Inside an agent loop, `call-agent` exposes the same path with `action` + `input`;
+omit `message` and `taskId` in that mode.
+
+### Retry safety and trace linkage
+
+`call-agent` automatically derives an owner-scoped idempotency key from the
+originating turn, target, and exact message. If a retry reaches the receiver
+after the caller timed out, asynchronous `message/send` returns the existing
+active or completed task instead of starting a duplicate agent run. Failed and
+canceled tasks release the key for an intentional retry; synchronous calls are
+never deduplicated. Lower-level clients may pass an
+`idempotencyKey` explicitly; keep it stable for the same logical submission and
+change it when the work changes. Dedupe is scoped to the JWT-authenticated
+owner and verified org, and keys are limited to 128 characters.
+
+The caller also forwards bounded correlation metadata (`callerApp`,
+`callerThreadId`, `parentRunId`, `parentTurnId`, and direct-read
+`invocationId`). These fields
+are telemetry hints only. Receivers must continue to derive identity,
+ownership, org scope, access, and approval from the verified request context.
+Delegated model loops emit `$ai_generation` with A2A/MCP lineage, while direct
+reads emit the content-free `$a2a_read_invoke` event; neither event includes
+action arguments or results.
+
 ### Advanced: `A2AClient` (full control)
 
 ```ts
@@ -178,6 +226,7 @@ cannot carry these grants.
 | ---------------- | -------------------------------- | ------------- |
 | `message/send`   | Send a message, get a task back  | Yes           |
 | `message/stream` | Send a message, stream responses | Yes           |
+| `actions/invoke` | Invoke one exposed read action   | Yes, JWT      |
 | `tasks/get`      | Get task status by ID            | Yes           |
 | `tasks/cancel`   | Cancel a running task            | Yes           |
 

package/src/templates/workspace-core/.agents/skills/composable-mini-apps/SKILL.md

@@ -42,6 +42,11 @@ The main agent should discover available siblings before assuming capability:
 - In the agent loop, use `call-agent` with the sibling app id when another app
   owns the work or data. Never call the current app through `call-agent`; use
   local actions instead.
+- When the exact sibling-owned read action and input are already known, use
+  `invokeAgentAction()` or `call-agent` with `action` + `input`. This preserves
+  the receiver's credentials and access checks while skipping its second model
+  loop. Use prompt-based `invokeAgent()` only when the sibling must reason,
+  synthesize, mutate, or perform a multi-step workflow.
 
 Send narrow prompts to siblings: name the exact question, relevant ids, date
 ranges, and expected output shape. Preserve returned ids and URLs verbatim.

package/src/templates/workspace-core/.agents/skills/observability/SKILL.md

@@ -285,7 +285,13 @@ LLM generation:
 - Agent Native Analytics shape: the same event lands in `analytics_events` with
   mirrored query-friendly properties such as `run_id`, `thread_id`,
   `cost_cents_x100`, `duration_ms`, `tool_calls`, `successful_tools`,
-  `failed_tools`, and `status`.
+  `failed_tools`, and `status`. A content-free `tools` array includes at most
+  50 tool names, start offsets, durations, statuses, and coarse error classes;
+  interrupted calls are finalized as errors, and failed runs still emit with
+  zero or known usage. `tools_truncated` marks longer runs while the rollup counts remain complete.
+  Delegated runs add `delegation_protocol`, `caller_app`, `a2a_task_id`, and
+  `parent_run_id` when available. `parent_turn_id` is separate because one
+  logical turn may span multiple concrete runs.
 
 Do not build a separate LLM-observability ingestion API unless there is a clear
 reason the tracking provider registry cannot express the use case. Keep prompt,

package/src/templates/workspace-core/.agents/skills/performance/SKILL.md

@@ -99,6 +99,19 @@ index the growing tables first.
   `await`s — each `await` is another round-trip.
 - Prefer **one composed endpoint** over several dependent calls.
 
+For provider wrappers, inspect the upstream API before building a list-then-
+enrich flow. Prefer the richest endpoint that can apply the real filters and
+return the needed associations or participants in one paginated operation.
+Cursor pagination is already serial; adding a serial detail/enrichment request
+to every page doubles its critical path. Exhaustive records belong in corpus
+recipes or data programs with explicit coverage, not one agent tool call per
+page or item.
+
+First-class provider actions should represent one stable conceptual operation.
+Keep arbitrary endpoint, filter, and pagination access in the provider API
+substrate; do not turn a convenience action into a capability ceiling or
+duplicate the provider transport, auth, quota, and cache implementation.
+
 ## 4. Avoid client-side waterfalls
 
 - Don't gate query B on query A's result unless B truly needs it. Fire

package/src/templates/workspace-core/.agents/skills/tracking/SKILL.md

@@ -141,7 +141,7 @@ Other framework-level baseline events:
 - `signup` from Better Auth user creation, with `auth_provider`, `auth_user_id`, and first-touch referral attribution (`referral_source`, `referrer_user`, `referral_medium`, `referral_campaign`, `utm_*`, `first_touch_path`, `landing_referrer` — see "Referral / viral attribution" above)
 - `builder connect clicked` and `builder connect popup blocked` from browser Connect Builder CTAs
 - `builder connect started`, `builder connect succeeded`, `builder connect failed`, `builder disconnect succeeded`, and `builder disconnect failed` from the Builder connection routes, with LLM connection context when resolvable
-- `$ai_generation` from instrumented agent loops, with PostHog AI Observability fields such as `$ai_trace_id`, `$ai_session_id`, `$ai_model`, `$ai_provider`, `$ai_input_tokens`, `$ai_output_tokens`, `$ai_latency`, `$ai_total_cost_usd`, and mirrored Agent Native query fields such as `run_id`, `thread_id`, `cost_cents_x100`, `duration_ms`, `tool_calls`, and `status`. Prompt, tool argument, and output content is not included by default.
+- `$ai_generation` from instrumented agent loops, with PostHog AI Observability fields such as `$ai_trace_id`, `$ai_session_id`, `$ai_model`, `$ai_provider`, `$ai_input_tokens`, `$ai_output_tokens`, `$ai_latency`, `$ai_total_cost_usd`, and mirrored Agent Native query fields such as `run_id`, `thread_id`, `cost_cents_x100`, `duration_ms`, `tool_calls`, and `status`. A bounded `tools` array contains names, start offsets, durations, statuses, and coarse error classes only; interrupted tools and failed runs remain visible, and delegated runs include protocol/task/parent-run/parent-turn correlation. Prompt, tool argument, result, and output content is excluded.
 
 For new lifecycle events, call `track()` server-side when the server is the source of truth, and `trackEvent()` client-side only for browser interactions.
 

package/corpus/templates/analytics/server/handlers/github.ts

@@ -1,200 +0,0 @@
-import { readBody } from "@agent-native/core/server";
-import {
-  defineEventHandler,
-  getQuery,
-  setResponseStatus,
-  type H3Event,
-} from "h3";
-
-import {
-  runApiHandlerWithContext,
-  type CredentialContext,
-} from "../lib/credentials";
-import {
-  searchPRs,
-  searchIssues,
-  getPR,
-  getIssue,
-  listPRs,
-  searchOrgPRs,
-  runGraphQL,
-} from "../lib/github";
-import { getGitHubAccessToken } from "../lib/github-oauth";
-
-async function requireGitHubAccess(event: H3Event, ctx: CredentialContext) {
-  const { token } = await getGitHubAccessToken(ctx);
-  if (token) return null;
-  setResponseStatus(event, 200);
-  return {
-    error: "missing_api_key",
-    key: "GITHUB_TOKEN",
-    label: "GitHub",
-    message: "Connect your GitHub account to query repositories.",
-    settingsPath: "/data-sources",
-  };
-}
-
-/** GET /api/github/search?q=...&type=pr|issue&limit=30 */
-export const handleGitHubSearch = defineEventHandler(async (event) => {
-  return runApiHandlerWithContext(event, async (ctx) => {
-    const missing = await requireGitHubAccess(event, ctx);
-    if (missing) return missing;
-    try {
-      const { q, type: typeParam, limit: limitParam } = getQuery(event);
-      if (!q) {
-        setResponseStatus(event, 400);
-        return { error: "q parameter is required" };
-      }
-
-      const type = (typeParam as string) === "issue" ? "issue" : "pr";
-      const limit = limitParam ? parseInt(limitParam as string) : 30;
-
-      if (type === "issue") {
-        const issues = await searchIssues({ query: q as string, limit });
-        return { issues, total: issues.length };
-      } else {
-        const prs = await searchPRs({ query: q as string, limit });
-        return { prs, total: prs.length };
-      }
-    } catch (err: any) {
-      console.error("GitHub search error:", err.message);
-      setResponseStatus(event, 500);
-      return { error: err.message };
-    }
-  });
-});
-
-/** GET /api/github/pr?owner=...&repo=...&number=... */
-export const handleGitHubPR = defineEventHandler(async (event) => {
-  return runApiHandlerWithContext(event, async (ctx) => {
-    const missing = await requireGitHubAccess(event, ctx);
-    if (missing) return missing;
-    try {
-      const { owner, repo, number: numberParam } = getQuery(event);
-      const number = parseInt(numberParam as string);
-
-      if (!owner || !repo || isNaN(number)) {
-        setResponseStatus(event, 400);
-        return { error: "owner, repo, and number are required" };
-      }
-
-      const pr = await getPR(owner as string, repo as string, number);
-      return pr;
-    } catch (err: any) {
-      console.error("GitHub PR error:", err.message);
-      setResponseStatus(event, 500);
-      return { error: err.message };
-    }
-  });
-});
-
-/** GET /api/github/issue?owner=...&repo=...&number=... */
-export const handleGitHubIssue = defineEventHandler(async (event) => {
-  return runApiHandlerWithContext(event, async (ctx) => {
-    const missing = await requireGitHubAccess(event, ctx);
-    if (missing) return missing;
-    try {
-      const { owner, repo, number: numberParam } = getQuery(event);
-      const number = parseInt(numberParam as string);
-
-      if (!owner || !repo || isNaN(number)) {
-        setResponseStatus(event, 400);
-        return { error: "owner, repo, and number are required" };
-      }
-
-      const issue = await getIssue(owner as string, repo as string, number);
-      return issue;
-    } catch (err: any) {
-      console.error("GitHub issue error:", err.message);
-      setResponseStatus(event, 500);
-      return { error: err.message };
-    }
-  });
-});
-
-/** GET /api/github/prs?owner=...&repo=...&state=open|closed|all&limit=30 */
-export const handleGitHubPRList = defineEventHandler(async (event) => {
-  return runApiHandlerWithContext(event, async (ctx) => {
-    const missing = await requireGitHubAccess(event, ctx);
-    if (missing) return missing;
-    try {
-      const {
-        owner,
-        repo,
-        state: stateParam,
-        limit: limitParam,
-      } = getQuery(event);
-
-      if (!owner || !repo) {
-        setResponseStatus(event, 400);
-        return { error: "owner and repo are required" };
-      }
-
-      const state = (stateParam as "open" | "closed" | "all") ?? "open";
-      const limit = limitParam ? parseInt(limitParam as string) : 30;
-
-      const prs = await listPRs(owner as string, repo as string, {
-        state,
-        limit,
-      });
-      return { prs, total: prs.length };
-    } catch (err: any) {
-      console.error("GitHub PR list error:", err.message);
-      setResponseStatus(event, 500);
-      return { error: err.message };
-    }
-  });
-});
-
-/** GET /api/github/org-prs?org=...&q=...&state=OPEN|CLOSED|MERGED&limit=30 */
-export const handleGitHubOrgPRs = defineEventHandler(async (event) => {
-  return runApiHandlerWithContext(event, async (ctx) => {
-    const missing = await requireGitHubAccess(event, ctx);
-    if (missing) return missing;
-    try {
-      const {
-        org: orgParam,
-        q: queryParam,
-        state: stateParam,
-        limit: limitParam,
-      } = getQuery(event);
-      const org = orgParam as string | undefined;
-      if (!org) {
-        setResponseStatus(event, 400);
-        return { error: "org query parameter is required" };
-      }
-      const query = queryParam as string | undefined;
-      const state = stateParam as "OPEN" | "CLOSED" | "MERGED" | undefined;
-      const limit = limitParam ? parseInt(limitParam as string) : 30;
-
-      const prs = await searchOrgPRs({ org, query, state, limit });
-      return { prs, total: prs.length };
-    } catch (err: any) {
-      console.error("GitHub org PRs error:", err.message);
-      setResponseStatus(event, 500);
-      return { error: err.message };
-    }
-  });
-});
-
-/** POST /api/github/graphql  body: { query, variables? } */
-export const handleGitHubGraphQL = defineEventHandler(async (event) => {
-  return runApiHandlerWithContext(event, async (ctx) => {
-    const missing = await requireGitHubAccess(event, ctx);
-    if (missing) return missing;
-    try {
-      const { query, variables } = await readBody(event);
-      if (!query) {
-        setResponseStatus(event, 400);
-        return { error: "query is required" };
-      }
-
-      const data = await runGraphQL(query, variables);
-      return { data };
-    } catch (err: any) {
-      console.error("GitHub GraphQL error:", err.message);
-      setResponseStatus(event, 500);
-      return { error: err.message };
-    }
-  });
-});

package/corpus/templates/analytics/server/handlers/pylon.ts

@@ -1,43 +0,0 @@
-import { defineEventHandler, getQuery, setResponseStatus } from "h3";
-
-import {
-  requireCredential,
-  runApiHandlerWithContext,
-} from "../lib/credentials";
-import { getAccounts, getIssues } from "../lib/pylon";
-
-export const handlePylonIssues = defineEventHandler(async (event) => {
-  return runApiHandlerWithContext(event, async () => {
-    const missing = await requireCredential(event, "PYLON_API_KEY", "Pylon");
-    if (missing) return missing;
-    try {
-      const { account_id, state, query } = getQuery(event);
-      const issues = await getIssues({
-        account_id: account_id as string | undefined,
-        state: state as string | undefined,
-        query: query as string | undefined,
-      });
-      return { issues, total: issues.length };
-    } catch (err: any) {
-      console.error("Pylon issues error:", err.message);
-      setResponseStatus(event, 500);
-      return { error: err.message };
-    }
-  });
-});
-
-export const handlePylonAccounts = defineEventHandler(async (event) => {
-  return runApiHandlerWithContext(event, async () => {
-    const missing = await requireCredential(event, "PYLON_API_KEY", "Pylon");
-    if (missing) return missing;
-    try {
-      const { query } = getQuery(event);
-      const accounts = await getAccounts(query as string | undefined);
-      return { accounts, total: accounts.length };
-    } catch (err: any) {
-      console.error("Pylon accounts error:", err.message);
-      setResponseStatus(event, 500);
-      return { error: err.message };
-    }
-  });
-});