@agent-native/core 0.136.4 → 0.137.0

package/corpus/templates/design/changelog/2026-08-03-export-preview-shows-the-selected-element-instead-of-the-who.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-08-03
+---
+
+Export preview shows the selected element instead of the whole screen, with its real pixel size.

package/corpus/templates/design/changelog/2026-08-03-inspector-sections-show-an-expand-indicator-so-it-is-clear-w.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-08-03
+---
+
+Inspector sections show an expand indicator, so it is clear which ones open.

package/corpus/templates/design/changelog/2026-08-03-paste-lands-inside-a-selected-frame-instead-of-beside-it.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-08-03
+---
+
+Pasting with a frame selected now places the copy inside that frame, joining its auto layout when it has one, while pasting with an object selected still places the copy beside it.

package/corpus/templates/design/changelog/2026-08-03-the-add-breakpoint-button-sits-outside-the-breakpoint-select.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-08-03
+---
+
+The add-breakpoint button sits outside the breakpoint selector, so it no longer looks like a breakpoint you can pick.

package/corpus/templates/design/changelog/2026-08-03-the-agent-s-follow-up-questions-keep-space-below-the-continu.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-08-03
+---
+
+The agent's follow-up questions keep space below the Continue buttons instead of pinning them to the bottom edge.

package/corpus/templates/design/changelog/2026-08-03-the-agent-s-follow-up-questions-share-the-chat-panel-s-backg.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-08-03
+---
+
+The agent's follow-up questions share the chat panel's background, so they read as part of the conversation.

package/corpus/templates/design/changelog/2026-08-03-the-export-panel-no-longer-stacks-a-duplicate-export-block-o.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-08-03
+---
+
+The export panel no longer stacks a duplicate Export block on every inspector update.

package/corpus/templates/design/changelog/2026-08-03-the-text-tool-uses-a-t-icon-matching-the-letter-it-inserts.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-08-03
+---
+
+The text tool uses a T icon, matching the letter it inserts.

package/corpus/templates/factory/.env.example

@@ -4,6 +4,15 @@ PING_MESSAGE=pong
 # Email stamped as the creator of the deployment-owned observation scheduler.
 WORKSPACE_OWNER_EMAIL=
 
+# Optional explicit id of the Dispatch vault organization. Leave blank when
+# the deployment owner is a member of the organization where Dispatch synced
+# the shared keys. This is an org id, not a secret.
+AGENT_VAULT_ORG_ID=
+
+# Use the same stable workspace key as Dispatch and sibling apps so they can
+# decrypt shared app_secrets rows. Do not rotate this independently per app.
+WORKSPACE_SECRETS_ENCRYPTION_KEY=
+
 # Public URL used for signed Builder completion callbacks after an explicit
 # approval. Keep this aligned with the deployed Netlify URL until a custom
 # domain is explicitly approved and configured.
@@ -20,5 +29,13 @@ BUILDER_PROJECT_ID=
 BUILDER_PRIVATE_KEY=
 FACTORY_BUILDER_WEBHOOK_SECRET=
 
+# Optional deployment fallbacks. Prefer Dispatch Vault and leave these blank
+# when the shared workspace secret rows are available.
+SLACK_BOT_TOKEN=
+GITHUB_TOKEN=
+SENTRY_SERVER_TOKEN=
+SENTRY_AUTH_TOKEN=
+SENTRY_ORG_SLUG=
+
 # Skip login/signup (local dev / preview only)
 # AUTH_DISABLED=true

package/corpus/templates/factory/AGENTS.md

@@ -27,27 +27,30 @@ ladder.
   `packages/*` changes always require human review.
 - All work is deduped by Factory item and rule/run identity. Provider comment IDs
   are not the idempotency boundary.
-- Slack interaction uses the generic Agent-Native Slack adapter. Polling is for
-  observation; mentions are for explanation, rule tuning, and explicit approval.
+- Slack interaction uses the generic Agent-Native Slack adapter. Clear-bug Slack
+  automations add 👀 and tag `@builderio` in the source thread; GitHub and Sentry
+  clear bugs use the Builder run API. Clips, Design, and Content are always
+  owner-managed and never enter autonomous dispatch or PR governance.
+- PR governance requires verified internal BuilderIO membership, a clear bug,
+  passing CI, and handled review feedback. Product or UX implications stay
+  manual. Auto-merge additionally requires a verified Factory Builder run.
 - Reuse the existing ai-services GitHub read and Builder execution APIs. Do not
   duplicate GitHub installation/webhook infrastructure in this template.
 - Do not add CRUD routes under `server/routes/api/`; actions are the domain
   surface. Provider callbacks are the only exception and must verify signatures.
 - Factory graph edits create immutable blueprint versions. AI proposes a
   complete graph with `source=ai`; a person reviews and publishes it through
-  the same action surface as manual edits. The current evaluator runs enabled
-  rules in parallel, so graph edges describe intended handoffs until a runtime
-  binding exists.
-- A selected graph node or edge is part of `navigation` context. Read
-  `view-screen` before answering why a route exists or changing the selected
-  Factory.
+  the same action surface as manual edits.
 
 ## Application state
 
 - `navigation.view`: `factory` when the visual workspace is open.
 - `navigation.factoryId`: selected Factory id when present.
-- `navigation.factoryTab`: `map` | `inbox` | `rules` | `settings`.
+- `navigation.factoryTab`: `map` | `inbox` | `rules` | `automations` | `settings`.
 - `navigation.factoryNodeId` / `navigation.factoryEdgeId`: selected graph target.
+- A selected graph node or edge is part of `navigation` context. Read
+  `view-screen` before answering why a route exists or changing the selected
+  Factory.
 
 ## Action contract
 
@@ -55,20 +58,26 @@ ladder.
 | --- | --- |
 | `list-triage-items` / `get-triage-item` | Inspect the queue and evidence. |
 | `poll-slack-channel` | Observe Slack history; never writes to Slack. |
+| `get-slack-feedback-context` | Read the bounded full Slack thread before classification. |
+| `poll-github-sources` / `poll-sentry-errors` | Observe bounded GitHub and Sentry source queues. |
 | `ingest-github-observation` | Store read-only PR evidence. |
 | `list-triage-rules` / `save-triage-rule` | Tune prompt rules and guards. |
 | `evaluate-triage-item` | Append a structured decision. |
 | `record-triage-feedback` | Capture human correction for learning. |
 | `approve-factory-item` | Explicitly authorize one bounded run. |
+| `start-builder-for-item` | Govern clear-bug dispatch; Slack tags Builder in-thread, other sources use Builder API. |
+| `govern-agent-native-pull-request` | Apply CI, review, internal-author, product, and owner gates to PR approval/merge. |
+| `list-factory-automations` / `save-factory-automation` / `run-factory-automation` | Inspect and edit organization-owned Factory prompts, models, schedules, and runs. |
 | `suggest-factory-rules` | Mine feedback and fast approvals into proposals. |
 | `reconcile-triage-run` | Persist callback/provider reconciliation. |
 | `list-factories` / `get-factory-graph` | Inspect Factory definitions, graph versions, and live evidence metrics. |
 | `save-factory-graph` | Create or version a complete visual graph; never starts provider work. |
 | `list-factory-comments` / `add-factory-comment` | Read or attach comments to a canvas, node, or edge. |
 
-Rules start in shadow mode. Enabling a rule never bypasses hard guards or
-creates an implicit approval. Slack "do it now" and the UI approval control
-both call `approve-factory-item`, which records the approver before dispatch.
+Rules start in shadow mode; hard guards always apply. Editable organization
+automations execute stored prompts; every external mutation needs a durable run,
+idempotency key, and provider confirmation. The legacy observer is disabled
+when organization automations are seeded.
 
 Use the visual editor for direct blueprint changes. Use the agent chat for
 natural language design, explanations, and proposals; it must preserve a
@@ -78,13 +87,14 @@ actions, never through graph JSON.
 
 ## Scheduler identity
 
-`WORKSPACE_OWNER_EMAIL` is read only at startup to stamp the deployment-owned
-job's `createdBy`; it is never caller identity and must not enter request
-authorization or credential resolution.
+`WORKSPACE_OWNER_EMAIL` is read only at startup to find the deployment
+organization and stamp seeded automation `createdBy`; it is never caller
+identity and must not enter request authorization or credential resolution.
 
 ## Hosting
 
 Production needs `DATABASE_URL`, `WORKSPACE_OWNER_EMAIL`, and
 `FACTORY_PUBLIC_URL`. Builder execution additionally needs the service URL and
-project ID plus workspace-resolved Builder credentials. Keep rules in shadow
-mode and require an explicit approval for every provider run.
+project ID plus workspace-resolved Builder credentials. GitHub and Sentry
+polling use workspace-resolved provider credentials. Provider callbacks and
+external writes must remain auditable and fail closed when evidence is partial.

package/corpus/templates/factory/README.md

@@ -29,11 +29,19 @@ without a terminal record.
 
 ## Configure Slack
 
-Set `WORKSPACE_OWNER_EMAIL` to an existing workspace member for the deployment-
-owned scheduler job. Connect Slack in Settings -> Messaging; Factory resolves
-the workspace credential through the vault resolver and only uses
-`SLACK_BOT_TOKEN` as the resolver's deployment fallback. Do not add a second
-env-only read.
+Set `WORKSPACE_OWNER_EMAIL` to an existing member of the Builder.io organization
+that Dispatch uses. Factory does not need a separate organization: startup
+finds that existing organization and seeds its organization-owned automations.
+If Dispatch synced the vault into a different organization, set
+`AGENT_VAULT_ORG_ID` to that existing org id instead of creating a new org.
+
+Connect Slack in Dispatch or in Settings -> Connections. Factory resolves
+Slack, GitHub, Sentry, and Builder credentials from the shared workspace vault
+and only uses matching deployment env vars as a last-resort fallback. All apps
+that read shared `app_secrets` rows must use the same
+`WORKSPACE_SECRETS_ENCRYPTION_KEY` (or the workspace's existing shared
+encryption fallback). Never copy raw tokens between apps or add a second
+env-only read in a provider client.
 
 In Factory, set the Slack workspace, channel ID, channel name, repository, and
 polling switch. The default scheduler polls once per minute, evaluates a
@@ -47,11 +55,13 @@ inspectable Factory link when a human decision is required.
 ## Hosting
 
 Production expects a direct PostgreSQL `DATABASE_URL`,
-`WORKSPACE_OWNER_EMAIL`, and `FACTORY_PUBLIC_URL`. The Builder executor also
+`WORKSPACE_OWNER_EMAIL`, and `FACTORY_PUBLIC_URL`. `AGENT_VAULT_ORG_ID` is
+optional and is only needed when the deployment owner cannot reach the existing
+Dispatch vault organization through membership. The Builder executor also
 needs `BUILDER_AI_SERVICES_URL` and `BUILDER_PROJECT_ID`; its private key and
-signed callback secret belong in workspace credentials and are resolved at
-runtime. The app remains observe-only until a human explicitly approves a
-Factory item.
+signed callback secret belong in Dispatch workspace credentials and are
+resolved at runtime. The app remains observe-only until a human explicitly
+approves a Factory item.
 
 ## Development
 

package/corpus/templates/factory/actions/get-slack-feedback-context.ts

@@ -0,0 +1,90 @@
+import { defineAction } from "@agent-native/core/action";
+import { and, eq } from "drizzle-orm";
+import { z } from "zod";
+
+import type { SlackMessage } from "../server/connectors/slack.js";
+import { getDb } from "../server/db/index.js";
+import { triageConfig, triageItems } from "../server/db/schema.js";
+import {
+  requireWorkspaceMember,
+  workspaceMemberIdentityFromContext,
+} from "../server/lib/require-workspace-member.js";
+import { createSlackReader } from "../server/triage/slack-client.js";
+
+const MAX_THREAD_PAGES = 5;
+
+export default defineAction({
+  description:
+    "Read the bounded full Slack thread for one Factory feedback item. Use this before deciding whether a report is a clear bug; unreadable or truncated context is not a green light.",
+  schema: z.object({ itemId: z.string().min(1) }),
+  http: { method: "GET" },
+  readOnly: true,
+  run: async ({ itemId }, context) => {
+    const { userEmail, orgId } = await requireWorkspaceMember(
+      workspaceMemberIdentityFromContext(context),
+    );
+    const item = (
+      await getDb()
+        .select()
+        .from(triageItems)
+        .where(and(eq(triageItems.id, itemId), eq(triageItems.orgId, orgId)))
+        .limit(1)
+    )[0];
+    if (!item) throw new Error("Factory item not found.");
+    if (item.source !== "slack" || !item.channelId || !item.threadTs) {
+      throw new Error("Factory item is not a readable Slack feedback item.");
+    }
+
+    const config = (
+      await getDb()
+        .select({ slackWorkspace: triageConfig.slackWorkspace })
+        .from(triageConfig)
+        .where(and(eq(triageConfig.id, orgId), eq(triageConfig.orgId, orgId)))
+        .limit(1)
+    )[0];
+    const workspace =
+      config?.slackWorkspace === "secondary" ? "secondary" : "primary";
+    const slack = createSlackReader({ ownerEmail: userEmail, orgId });
+    const messages: SlackMessage[] = [];
+    let cursor: string | undefined;
+    let hasMore = false;
+    for (let page = 0; page < MAX_THREAD_PAGES; page += 1) {
+      const result = await slack.getThread(
+        workspace,
+        item.channelId,
+        item.threadTs,
+        100,
+        cursor,
+      );
+      messages.push(...result.messages);
+      if (result.has_more && !result.next_cursor) {
+        throw new Error(
+          "Slack thread pagination is incomplete because the provider omitted its next cursor.",
+        );
+      }
+      if (!result.has_more) {
+        hasMore = false;
+        break;
+      }
+      hasMore = page === MAX_THREAD_PAGES - 1;
+      if (hasMore) break;
+      cursor = result.next_cursor;
+    }
+
+    return {
+      ok: true,
+      itemId,
+      sourceUrl: item.sourceUrl,
+      channelId: item.channelId,
+      threadTs: item.threadTs,
+      coverage: hasMore ? "partial" : "complete",
+      messages: messages.map((message) => ({
+        user: message.user ?? message.username ?? message.bot_id ?? null,
+        text: message.text,
+        ts: message.ts,
+        threadTs: message.thread_ts ?? item.threadTs,
+        replyCount: message.reply_count ?? 0,
+      })),
+    };
+  },
+});

package/corpus/templates/factory/actions/get-triage-config.ts

@@ -1,5 +1,5 @@
 import { defineAction } from "@agent-native/core/action";
-import { eq } from "drizzle-orm";
+import { and, eq } from "drizzle-orm";
 import { z } from "zod";
 
 import { getDb } from "../server/db/index.js";
@@ -23,7 +23,7 @@ export default defineAction({
       await getDb()
         .select()
         .from(triageConfig)
-        .where(eq(triageConfig.id, orgId))
+        .where(and(eq(triageConfig.id, orgId), eq(triageConfig.orgId, orgId)))
         .limit(1)
     )[0];
     if (!row) {
@@ -35,8 +35,19 @@ export default defineAction({
         lastSlackTs: null,
         slackHistoryCursor: null,
         repository: null,
+        githubPollingEnabled: false,
+        sentryPollingEnabled: false,
+        sentryOrgSlug: null,
+        sentryProjectSlug: null,
+        sentryEnvironment: null,
+        lastSentrySeenAt: null,
       };
     }
-    return { ...row, pollingEnabled: row.pollingEnabled === 1 };
+    return {
+      ...row,
+      pollingEnabled: row.pollingEnabled === 1,
+      githubPollingEnabled: row.githubPollingEnabled === 1,
+      sentryPollingEnabled: row.sentryPollingEnabled === 1,
+    };
   },
 });