@agent-native/core 0.115.4 → 0.116.0

package/corpus/templates/brain/app/i18n-data.ts

@@ -403,6 +403,18 @@ const enUS = {
     noCapturesTitle: "No captures match this view",
     noCapturesDetail:
       "Try another status, run a source sync, or import a transcript.",
+    rotateIngestToken: "Rotate ingest token",
+    connectIngestSource: "Connect {{source}}",
+    ingestHandoffDescription:
+      "Save these values in the sending app now. The ingest token is shown only once and cannot be recovered after this dialog closes.",
+    endpoint: "Endpoint",
+    sourceKey: "Source key",
+    ingestToken: "Ingest token",
+    copied: "Copied",
+    copy: "Copy",
+    ingestTokenSecurity:
+      "For security, Brain stores only a hash of this token. Rotate the token whenever the receiving app needs a new credential.",
+    ingestHandoffSaved: "I saved these values",
     tuneSource: "Tune source",
     setupDescription:
       "Configure what Brain may ingest. Credentials stay in the workspace credential store; this form only saves allow-lists, cursors, and review rules.",
@@ -3052,6 +3064,18 @@ const exactEnglishDebtOverrides: Partial<
       noCapturesDetail:
         "جرب حالة أخرى، أو قم بتشغيل مزامنة المصدر، أو قم باستيراد نص.",
       noCapturesTitle: "لا توجد لقطات تطابق هذا الرأي",
+      rotateIngestToken: "تدوير رمز الإدخال",
+      connectIngestSource: "ربط {{source}}",
+      ingestHandoffDescription:
+        "احفظ هذه القيم في التطبيق المرسل الآن. سيُعرض رمز الإدخال مرة واحدة فقط ولا يمكن استعادته بعد إغلاق هذا الحوار.",
+      endpoint: "نقطة النهاية",
+      sourceKey: "مفتاح المصدر",
+      ingestToken: "رمز الإدخال",
+      copied: "تم النسخ",
+      copy: "نسخ",
+      ingestTokenSecurity:
+        "لأسباب أمنية، يخزّن Brain تجزئة هذا الرمز فقط. أدر الرمز كلما احتاج التطبيق المستلم إلى بيانات اعتماد جديدة.",
+      ingestHandoffSaved: "حفظت هذه القيم",
       noConnectionProviders:
         "لا يتوفر أي موفري اتصال Brain من الكتالوج المشترك.",
       noCredentialKeysRequired: "لا توجد مفاتيح الاعتماد المطلوبة",
@@ -3467,6 +3491,18 @@ const exactEnglishDebtOverrides: Partial<
       noCapturesDetail:
         "Versuchen Sie es mit einem anderen Status, führen Sie eine Quellsynchronisierung durch oder importieren Sie ein Transkript.",
       noCapturesTitle: "Keine Aufnahmen stimmen mit dieser Ansicht überein",
+      rotateIngestToken: "Aufnahmetoken drehen",
+      connectIngestSource: "{{source}} verbinden",
+      ingestHandoffDescription:
+        "Speichern Sie diese Werte jetzt in der sendenden App. Das Aufnahmetoken wird nur einmal angezeigt und kann nach dem Schließen dieses Dialogs nicht wiederhergestellt werden.",
+      endpoint: "Endpunkt",
+      sourceKey: "Quellschlüssel",
+      ingestToken: "Aufnahmetoken",
+      copied: "Kopiert",
+      copy: "Kopieren",
+      ingestTokenSecurity:
+        "Aus Sicherheitsgründen speichert Brain nur einen Hash dieses Tokens. Drehen Sie das Token, sobald die empfangende App neue Anmeldedaten benötigt.",
+      ingestHandoffSaved: "Ich habe diese Werte gespeichert",
       noConnectionProviders:
         "Im freigegebenen Katalog sind keine Brain-Verbindungsanbieter verfügbar.",
       noCredentialKeysRequired:
@@ -3891,6 +3927,18 @@ const exactEnglishDebtOverrides: Partial<
       noCapturesDetail:
         "Pruebe con otro estado, ejecute una sincronización de origen o importe una transcripción.",
       noCapturesTitle: "Ninguna captura coincide con esta vista.",
+      rotateIngestToken: "Rotar token de ingesta",
+      connectIngestSource: "Conectar {{source}}",
+      ingestHandoffDescription:
+        "Guarde estos valores ahora en la aplicación emisora. El token de ingesta se muestra una sola vez y no se puede recuperar después de cerrar este diálogo.",
+      endpoint: "Punto final",
+      sourceKey: "Clave de origen",
+      ingestToken: "Token de ingesta",
+      copied: "Copiado",
+      copy: "Copiar",
+      ingestTokenSecurity:
+        "Por seguridad, Brain solo almacena un hash de este token. Rote el token cuando la aplicación receptora necesite una credencial nueva.",
+      ingestHandoffSaved: "He guardado estos valores",
       noConnectionProviders:
         "No hay proveedores de conexión Brain disponibles en el catálogo compartido.",
       noCredentialKeysRequired: "No se requieren claves de credenciales",
@@ -4316,6 +4364,18 @@ const exactEnglishDebtOverrides: Partial<
       noCapturesDetail:
         "Essayez un autre statut, exécutez une synchronisation source ou importez une transcription.",
       noCapturesTitle: "Aucune capture ne correspond à cette vue",
+      rotateIngestToken: "Faire pivoter le jeton d’ingestion",
+      connectIngestSource: "Connecter {{source}}",
+      ingestHandoffDescription:
+        "Enregistrez maintenant ces valeurs dans l’application émettrice. Le jeton d’ingestion ne s’affiche qu’une seule fois et ne peut pas être récupéré après la fermeture de cette boîte de dialogue.",
+      endpoint: "Point de terminaison",
+      sourceKey: "Clé de source",
+      ingestToken: "Jeton d’ingestion",
+      copied: "Copié",
+      copy: "Copier",
+      ingestTokenSecurity:
+        "Pour des raisons de sécurité, Brain ne stocke que le hachage de ce jeton. Faites pivoter le jeton lorsque l’application destinataire a besoin d’un nouvel identifiant.",
+      ingestHandoffSaved: "J’ai enregistré ces valeurs",
       noConnectionProviders:
         "Aucun fournisseur de connexion Brain n’est disponible dans le catalogue partagé.",
       noCredentialKeysRequired: "Aucune clé d'identification requise",
@@ -4717,6 +4777,18 @@ const exactEnglishDebtOverrides: Partial<
       noCapturesDetail:
         "कोई अन्य स्थिति आज़माएँ, स्रोत सिंक चलाएँ, या एक प्रतिलेख आयात करें।",
       noCapturesTitle: "कोई भी कैप्चर इस दृश्य से मेल नहीं खाता",
+      rotateIngestToken: "इंजेस्ट टोकन घुमाएँ",
+      connectIngestSource: "कनेक्ट करें: {{source}}",
+      ingestHandoffDescription:
+        "इन मानों को अभी भेजने वाले ऐप में सहेजें। इंजेस्ट टोकन केवल एक बार दिखाया जाता है और यह संवाद बंद होने के बाद इसे पुनर्प्राप्त नहीं किया जा सकता।",
+      endpoint: "एंडपॉइंट",
+      sourceKey: "सोर्स कुंजी",
+      ingestToken: "इंजेस्ट टोकन",
+      copied: "कॉपी किया गया",
+      copy: "कॉपी करें",
+      ingestTokenSecurity:
+        "सुरक्षा के लिए, Brain इस टोकन का केवल हैश संग्रहीत करता है। जब प्राप्त करने वाले ऐप को नए क्रेडेंशियल की आवश्यकता हो, तब टोकन घुमाएँ।",
+      ingestHandoffSaved: "मैंने ये मान सहेज लिए हैं",
       noConnectionProviders: "साझा कैटलॉग से कोई Brain कनेक्शन प्रदाता उपलब्ध नहीं हैं।",
       noCredentialKeysRequired: "किसी क्रेडेंशियल कुंजी की आवश्यकता नहीं है",
       noCredentialRefs: "इस संबंध पर कोई क्रेडेंशियल संदर्भ नहीं है",
@@ -5111,6 +5183,18 @@ const exactEnglishDebtOverrides: Partial<
       noCapturesDetail:
         "別のステータスを試すか、ソース同期を実行するか、トランスクリプトをインポートしてください。",
       noCapturesTitle: "このビューに一致するキャプチャはありません",
+      rotateIngestToken: "取り込みトークンをローテーション",
+      connectIngestSource: "「{{source}}」を接続",
+      ingestHandoffDescription:
+        "これらの値を今すぐ送信元アプリに保存してください。取り込みトークンは一度しか表示されず、このダイアログを閉じると復元できません。",
+      endpoint: "エンドポイント",
+      sourceKey: "ソースキー",
+      ingestToken: "取り込みトークン",
+      copied: "コピーしました",
+      copy: "コピー",
+      ingestTokenSecurity:
+        "セキュリティのため、Brain はこのトークンのハッシュのみを保存します。受信アプリに新しい認証情報が必要になったら、トークンをローテーションしてください。",
+      ingestHandoffSaved: "これらの値を保存しました",
       noConnectionProviders:
         "共有カタログから使用できる Brain 接続プロバイダーはありません。",
       noCredentialKeysRequired: "認証キーは必要ありません",
@@ -5511,6 +5595,18 @@ const exactEnglishDebtOverrides: Partial<
       noCapturesDetail:
         "다른 상태를 시도하거나, 소스 동기화를 실행하거나, 스크립트를 가져오세요.",
       noCapturesTitle: "이 보기와 일치하는 캡처가 없습니다.",
+      rotateIngestToken: "수집 토큰 교체",
+      connectIngestSource: "{{source}} 연결",
+      ingestHandoffDescription:
+        "지금 이 값을 보내는 앱에 저장하세요. 수집 토큰은 한 번만 표시되며 이 대화상자를 닫으면 복구할 수 없습니다.",
+      endpoint: "엔드포인트",
+      sourceKey: "소스 키",
+      ingestToken: "수집 토큰",
+      copied: "복사됨",
+      copy: "복사",
+      ingestTokenSecurity:
+        "보안을 위해 Brain은 이 토큰의 해시만 저장합니다. 수신 앱에 새 자격 증명이 필요할 때 토큰을 교체하세요.",
+      ingestHandoffSaved: "이 값을 저장했습니다",
       noConnectionProviders:
         "공유 카탈로그에서는 Brain 연결 공급자를 사용할 수 없습니다.",
       noCredentialKeysRequired: "자격 증명 키가 필요하지 않습니다",
@@ -5921,6 +6017,18 @@ const exactEnglishDebtOverrides: Partial<
       noCapturesDetail:
         "Tente outro status, execute uma sincronização de origem ou importe uma transcrição.",
       noCapturesTitle: "Nenhuma captura corresponde a esta visualização",
+      rotateIngestToken: "Alternar token de ingestão",
+      connectIngestSource: "Conectar {{source}}",
+      ingestHandoffDescription:
+        "Salve estes valores agora no aplicativo emissor. O token de ingestão é exibido apenas uma vez e não pode ser recuperado depois que esta caixa de diálogo for fechada.",
+      endpoint: "Endpoint",
+      sourceKey: "Chave da fonte",
+      ingestToken: "Token de ingestão",
+      copied: "Copiado",
+      copy: "Copiar",
+      ingestTokenSecurity:
+        "Por segurança, o Brain armazena apenas um hash deste token. Alterne o token sempre que o aplicativo receptor precisar de uma nova credencial.",
+      ingestHandoffSaved: "Salvei estes valores",
       noConnectionProviders:
         "Nenhum provedor de conexão Brain está disponível no catálogo compartilhado.",
       noCredentialKeysRequired: "Nenhuma chave de credencial necessária",
@@ -6300,6 +6408,18 @@ const exactEnglishDebtOverrides: Partial<
       noBrainSourcesYet: "还没有 Brain 来源",
       noCapturesDetail: "尝试其他状态、运行源同步或导入转录本。",
       noCapturesTitle: "没有与此视图匹配的捕获",
+      rotateIngestToken: "轮换摄取令牌",
+      connectIngestSource: "连接 {{source}}",
+      ingestHandoffDescription:
+        "现在将这些值保存到发送应用中。摄取令牌只显示一次，关闭此对话框后将无法恢复。",
+      endpoint: "端点",
+      sourceKey: "源密钥",
+      ingestToken: "摄取令牌",
+      copied: "已复制",
+      copy: "复制",
+      ingestTokenSecurity:
+        "出于安全考虑，Brain 只存储此令牌的哈希值。当接收应用需要新的凭据时，请轮换令牌。",
+      ingestHandoffSaved: "我已保存这些值",
       noConnectionProviders: "共享目录中没有可用的 Brain 连接提供程序。",
       noCredentialKeysRequired: "无需凭证密钥",
       noCredentialRefs: "此连接上没有凭据参考",

package/corpus/templates/brain/app/routes/sources.tsx

@@ -3,6 +3,14 @@ import {
   useActionQuery,
 } from "@agent-native/core/client/hooks";
 import { useT } from "@agent-native/core/client/i18n";
+import {
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+} from "@agent-native/toolkit/ui/dialog";
 import {
   IconAlertTriangle,
   IconArchive,
@@ -12,6 +20,7 @@ import {
   IconCircleCheck,
   IconCircleDashed,
   IconClock,
+  IconCopy,
   IconDatabaseImport,
   IconDotsVertical,
   IconExternalLink,
@@ -73,6 +82,7 @@ import {
   type BrainCaptureReviewItem,
   type EnqueueCapturesDistillationResponse,
   type CapturesResponse,
+  type CreateSourceResponse,
   type BrainSource,
   type BrainWorkspaceConnectionGrantState,
   type BrainWorkspaceConnectionStatus,
@@ -90,6 +100,10 @@ import {
   sourceReviewRequired,
   sourceType,
 } from "@/lib/brain";
+import {
+  createOneTimeIngestHandoff,
+  type OneTimeIngestHandoff,
+} from "@/lib/ingest-handoff";
 
 type Provider = "manual" | "generic" | "clips" | "slack" | "granola" | "github";
 type CaptureStatusFilter = BrainCaptureReviewStatus | "all";
@@ -1499,16 +1513,25 @@ function SourceFact({ label, value }: { label: string; value: ReactNode }) {
   );
 }
 
+function ingestSourceKey(source: BrainSource) {
+  const sourceKey = source.config?.sourceKey;
+  return typeof sourceKey === "string" && sourceKey.trim()
+    ? sourceKey.trim()
+    : null;
+}
+
 function SourceListItem({
   source,
   syncPending,
   onReview,
+  onRotateIngestToken,
   onSync,
   onTune,
 }: {
   source: BrainSource;
   syncPending: boolean;
   onReview: () => void;
+  onRotateIngestToken?: () => void;
   onSync: () => void;
   onTune: () => void;
 }) {
@@ -1602,6 +1625,12 @@ function SourceListItem({
                   <IconSettings2 className="size-4" />
                   {t("sources.tuneSource")}
                 </DropdownMenuItem>
+                {onRotateIngestToken ? (
+                  <DropdownMenuItem onSelect={onRotateIngestToken}>
+                    <IconRefresh className="size-4" />
+                    {t("sources.rotateIngestToken")}
+                  </DropdownMenuItem>
+                ) : null}
               </DropdownMenuContent>
             </DropdownMenu>
           </div>
@@ -1633,6 +1662,11 @@ export default function SourcesRoute() {
   const type = params.get("type") ?? "all";
   const [advancedOpen, setAdvancedOpen] = useState(false);
   const [setupOpen, setSetupOpen] = useState(false);
+  const [ingestHandoff, setIngestHandoff] =
+    useState<OneTimeIngestHandoff | null>(null);
+  const [copiedHandoffField, setCopiedHandoffField] = useState<string | null>(
+    null,
+  );
   const [editingSource, setEditingSource] = useState<BrainSource | null>(null);
   const [reviewSource, setReviewSource] = useState<BrainSource | null>(null);
   const [captureStatus, setCaptureStatus] =
@@ -1672,7 +1706,7 @@ export default function SourcesRoute() {
     }
   >("update-source" as any);
   const createSource = useActionMutation<
-    unknown,
+    CreateSourceResponse,
     {
       title: string;
       provider: Provider;
@@ -1681,6 +1715,10 @@ export default function SourcesRoute() {
       sourceKey?: string;
     }
   >("create-source" as any);
+  const rotateSourceIngestToken = useActionMutation<
+    CreateSourceResponse,
+    { sourceId: string }
+  >("rotate-source-ingest-token" as any);
   const syncSource = useActionMutation<unknown, { sourceId: string }>(
     "sync-source" as any,
   );
@@ -1818,10 +1856,20 @@ export default function SourcesRoute() {
     setForm((current) => ({ ...current, ...patch }));
   }
 
-  function submitSource() {
+  function closeIngestHandoff() {
+    setIngestHandoff(null);
+    setCopiedHandoffField(null);
+  }
+
+  async function copyIngestHandoffValue(value: string, field: string) {
+    await navigator.clipboard.writeText(value);
+    setCopiedHandoffField(field);
+  }
+
+  async function submitSource() {
     const config = buildConfig(form);
     if (editingSource) {
-      updateSource.mutate({
+      await updateSource.mutateAsync({
         id: editingSource.id,
         title: form.title.trim() || defaultTitle(form.provider, t),
         status:
@@ -1829,17 +1877,39 @@ export default function SourcesRoute() {
         config,
       });
     } else {
-      createSource.mutate({
+      const result = await createSource.mutateAsync({
         title: form.title.trim() || defaultTitle(form.provider, t),
         provider: form.provider,
         visibility: "org",
         config,
         sourceKey: form.sourceKey.trim() || undefined,
       });
+      const handoff = createOneTimeIngestHandoff({
+        origin: window.location.origin,
+        provider: form.provider,
+        result,
+        sourceKey: form.sourceKey,
+      });
+      if (handoff) setIngestHandoff(handoff);
     }
     setSetupOpen(false);
   }
 
+  async function rotateIngestToken(source: BrainSource) {
+    const sourceKey = ingestSourceKey(source);
+    if (!sourceKey) return;
+    const result = await rotateSourceIngestToken.mutateAsync({
+      sourceId: source.id,
+    });
+    const handoff = createOneTimeIngestHandoff({
+      origin: window.location.origin,
+      provider: source.provider ?? "",
+      result,
+      sourceKey,
+    });
+    if (handoff) setIngestHandoff(handoff);
+  }
+
   function toggleCaptureSelection(captureId: string, checked: boolean) {
     setSelectedCaptureIds((current) => {
       const next = new Set(current);
@@ -1909,8 +1979,17 @@ export default function SourcesRoute() {
             <SourceListItem
               key={source.id}
               source={source}
-              syncPending={syncSource.isPending}
+              syncPending={
+                syncSource.isPending || rotateSourceIngestToken.isPending
+              }
               onReview={() => openCaptureReview(source)}
+              onRotateIngestToken={
+                (source.provider === "clips" ||
+                  source.provider === "generic") &&
+                ingestSourceKey(source)
+                  ? () => void rotateIngestToken(source)
+                  : undefined
+              }
               onSync={() => syncSource.mutate({ sourceId: source.id })}
               onTune={() => openEdit(source)}
             />
@@ -1928,6 +2007,7 @@ export default function SourcesRoute() {
         connectionProvidersQuery.isError ||
         updateSource.isError ||
         createSource.isError ||
+        rotateSourceIngestToken.isError ||
         syncSource.isError ||
         syncDueSources.isError ||
         enqueueCapturesDistillation.isError ? (
@@ -2302,6 +2382,77 @@ export default function SourcesRoute() {
         </SheetContent>
       </Sheet>
 
+      <Dialog
+        open={Boolean(ingestHandoff)}
+        onOpenChange={(open) => {
+          if (!open) closeIngestHandoff();
+        }}
+      >
+        {ingestHandoff ? (
+          <DialogContent className="max-w-xl gap-5">
+            <DialogHeader>
+              <DialogTitle>
+                {t("sources.connectIngestSource", {
+                  source: ingestHandoff.source.title,
+                })}
+              </DialogTitle>
+              <DialogDescription>
+                {t("sources.ingestHandoffDescription")}
+              </DialogDescription>
+            </DialogHeader>
+
+            <div className="grid gap-4">
+              {[
+                [t("sources.endpoint"), ingestHandoff.endpoint, "endpoint"],
+                [t("sources.sourceKey"), ingestHandoff.sourceKey, "source-key"],
+                [
+                  t("sources.ingestToken"),
+                  ingestHandoff.ingestToken,
+                  "ingest-token",
+                ],
+              ].map(([label, value, field]) => (
+                <div key={field} className="grid gap-2">
+                  <Label htmlFor={`ingest-handoff-${field}`}>{label}</Label>
+                  <div className="flex gap-2">
+                    <Input
+                      id={`ingest-handoff-${field}`}
+                      value={value}
+                      readOnly
+                      className="min-w-0 font-mono text-xs"
+                    />
+                    <Button
+                      type="button"
+                      variant="outline"
+                      className="shrink-0"
+                      onClick={() => void copyIngestHandoffValue(value, field)}
+                    >
+                      {copiedHandoffField === field ? (
+                        <IconChecks className="size-4" />
+                      ) : (
+                        <IconCopy className="size-4" />
+                      )}
+                      {copiedHandoffField === field
+                        ? t("sources.copied")
+                        : t("sources.copy")}
+                    </Button>
+                  </div>
+                </div>
+              ))}
+            </div>
+
+            <div className="rounded-md border border-border bg-muted/25 p-3 text-sm leading-6 text-muted-foreground">
+              {t("sources.ingestTokenSecurity")}
+            </div>
+
+            <DialogFooter>
+              <Button type="button" onClick={closeIngestHandoff}>
+                {t("sources.ingestHandoffSaved")}
+              </Button>
+            </DialogFooter>
+          </DialogContent>
+        ) : null}
+      </Dialog>
+
       <Sheet open={setupOpen} onOpenChange={setSetupOpen}>
         <SheetContent className="w-full overflow-y-auto sm:max-w-xl">
           <SheetHeader>

package/corpus/templates/brain/changelog/2026-07-22-chat-runs-always-end-with-an-answer.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-22
+---
+
+Chat runs now keep working through long source syncs and always end with a visible answer.

package/corpus/templates/brain/changelog/2026-07-22-clear-background-chat-progress.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-22
+---
+
+Chat stays current in background tabs and keeps its latest tool visibly active without covering the first message.

package/corpus/templates/brain/changelog/2026-07-22-compact-sidebar-footer.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-22
+---
+
+The sidebar footer now keeps Feedback and the collapse control on one compact row.

package/corpus/templates/brain/changelog/2026-07-22-full-page-chat-keeps-the-active-conversation-when-moving-to-.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-22
+---
+
+Full-page chat keeps the active conversation when moving to and from the sidebar.

package/corpus/templates/brain/changelog/2026-07-22-long-chat-titles-stay-inside-the-sidebar.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-22
+---
+
+Long chat titles now stay inside the sidebar, and recent chats expand from a compact five-item list.

package/corpus/templates/brain/changelog/2026-07-22-new-clips-and-webhook-sources-now-show-their-secure-connecti.md

@@ -0,0 +1,6 @@
+---
+type: added
+date: 2026-07-22
+---
+
+New Clips and webhook sources now show their secure connection details once, with copy controls and token rotation.

package/corpus/templates/brain/jobs/emit-netlify-brain-queue-cron.ts

@@ -0,0 +1,125 @@
+#!/usr/bin/env tsx
+
+import { randomBytes } from "node:crypto";
+import { cpSync, existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const FUNCTIONS_DIR = path.join(ROOT, ".netlify", "functions-internal");
+const SERVER_DIR = path.join(FUNCTIONS_DIR, "server");
+export const SCHEDULED_NAME = "brain-queue-cron";
+export const WORKER_NAME = "brain-queue-sweep-background";
+export const ROUTE_PATH = "/api/brain/queue/run";
+export const SCHEDULE = "* * * * *";
+
+function ensureDir(dir: string) {
+  mkdirSync(dir, { recursive: true });
+}
+
+export function scheduledTriggerSource(token: string) {
+  return `const WORKER_PATH = "/.netlify/functions/${WORKER_NAME}";
+const CRON_TOKEN = ${JSON.stringify(token)};
+
+function siteOrigin(request) {
+  return new URL(request.url).origin;
+}
+
+export default async function handler(request) {
+  const response = await fetch(new URL(WORKER_PATH, siteOrigin(request)), {
+    method: "POST",
+    headers: { "content-type": "application/json", "x-agent-native-brain-cron": CRON_TOKEN },
+    body: JSON.stringify({ scheduled: true }),
+  });
+  if (!response.ok && response.status !== 202) {
+    console.error("[brain-queue-cron] Background sweep trigger failed:", response.status);
+  }
+}
+
+export const config = {
+  name: "brain queue cron trigger",
+  generator: "agent-native brain build",
+  schedule: ${JSON.stringify(SCHEDULE)},
+};
+`;
+}
+
+export function backgroundWorkerSource(token: string) {
+  return `globalThis.__AGENT_NATIVE_BRAIN_SCHEDULED_RUNTIME__ = true;
+const CRON_TOKEN = ${JSON.stringify(token)};
+const ROUTE_PATH = ${JSON.stringify(ROUTE_PATH)};
+let cachedHandler;
+
+function timingSafeEquals(a, b) {
+  if (a.length !== b.length) return false;
+  let diff = 0;
+  for (let i = 0; i < a.length; i += 1) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  return diff === 0;
+}
+
+export default async function handler(request, context) {
+  const token = request.headers.get("x-agent-native-brain-cron") || "";
+  if (!timingSafeEquals(token, CRON_TOKEN)) return new Response("Unauthorized", { status: 401 });
+  cachedHandler ??= (await import("./main.mjs")).default;
+  const url = new URL(request.url);
+  url.pathname = ROUTE_PATH;
+  url.search = "";
+  return cachedHandler(new Request(url, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({ scheduled: true }),
+  }), context);
+}
+
+export const config = {
+  name: "brain queue background sweep",
+  generator: "agent-native brain build",
+  background: true,
+  nodeBundler: "none",
+  includedFiles: ["**"],
+  preferStatic: false,
+};
+`;
+}
+
+export function emitNetlifyBrainQueueCron(
+  options: {
+    functionsDir?: string;
+    serverDir?: string;
+    token?: string;
+  } = {},
+) {
+  const functionsDir = options.functionsDir ?? FUNCTIONS_DIR;
+  const serverDir = options.serverDir ?? SERVER_DIR;
+  if (!existsSync(serverDir)) {
+    throw new Error(
+      "Expected Nitro Netlify server output before emitting Brain cron functions.",
+    );
+  }
+  const token = options.token ?? randomBytes(32).toString("hex");
+  const scheduledDir = path.join(functionsDir, SCHEDULED_NAME);
+  const workerDir = path.join(functionsDir, WORKER_NAME);
+  rmSync(scheduledDir, { recursive: true, force: true });
+  rmSync(workerDir, { recursive: true, force: true });
+  ensureDir(scheduledDir);
+  cpSync(serverDir, workerDir, { recursive: true });
+  rmSync(path.join(workerDir, "server.mjs"), { force: true });
+  writeFileSync(
+    path.join(scheduledDir, `${SCHEDULED_NAME}.mjs`),
+    scheduledTriggerSource(token),
+  );
+  writeFileSync(
+    path.join(workerDir, `${WORKER_NAME}.mjs`),
+    backgroundWorkerSource(token),
+  );
+}
+
+if (
+  process.argv[1] &&
+  path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)
+) {
+  emitNetlifyBrainQueueCron();
+  console.log(
+    "[brain-queue-cron] Emitted scheduled queue sweep and background worker.",
+  );
+}

package/corpus/templates/brain/netlify.toml

@@ -1,6 +1,6 @@
 [build]
 ignore = "node ./scripts/netlify-ignore-build.mjs brain"
-command = "export DATABASE_URL=${NETLIFY_DATABASE_URL:-$DATABASE_URL} && pnpm install && NITRO_PRESET=netlify pnpm --filter brain build"
+command = "export DATABASE_URL=${NETLIFY_DATABASE_URL:-$DATABASE_URL} && pnpm install && NITRO_PRESET=netlify pnpm --filter brain build && pnpm exec tsx templates/brain/jobs/emit-netlify-brain-queue-cron.ts"
 publish = "templates/brain/dist"
 functions = "templates/brain/.netlify/functions-internal"
 
@@ -15,3 +15,7 @@ NPM_CONFIG_PRODUCTION = "false"
 # auto-continuation path can hand off before Netlify kills the function.
 [functions."*"]
 timeout = 75
+
+[functions.brain-queue-sweep-background]
+timeout = 900
+memory = "2gb"