@agent-native/core 0.141.3 → 0.141.4

package/corpus/templates/factory/changelog/2026-08-05-factory-now-keeps-production-automations-running-shows-sched.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-08-05
+---
+
+Factory now keeps production automations running, shows scheduler health and run errors, and can email failure diagnostics.

package/corpus/templates/factory/server/db/schema.ts

@@ -120,6 +120,12 @@ export const triageConfig = table("factory_config", {
   sentryProjectSlug: text("sentry_project_slug"),
   sentryEnvironment: text("sentry_environment"),
   lastSentrySeenAt: text("last_sentry_seen_at"),
+  automationFailureAlertsEnabled: integer("automation_failure_alerts_enabled")
+    .notNull()
+    .default(1),
+  automationFailureAlertEmail: text("automation_failure_alert_email"),
+  lastAutomationFailureAlertKey: text("last_automation_failure_alert_key"),
+  lastAutomationFailureAlertAt: text("last_automation_failure_alert_at"),
   createdAt: text("created_at").notNull().default(now()),
   updatedAt: text("updated_at").notNull().default(now()),
   ownerEmail: text("owner_email").notNull(),

package/corpus/templates/factory/server/plugins/factory-migrations.ts

@@ -248,6 +248,16 @@ const migrations = [
       ALTER TABLE factory_config ADD COLUMN last_sentry_seen_at TEXT;
     `,
   },
+  {
+    version: 17,
+    name: "factory-automation-failure-alert-settings",
+    sql: `
+      ALTER TABLE factory_config ADD COLUMN automation_failure_alerts_enabled INTEGER NOT NULL DEFAULT 1;
+      ALTER TABLE factory_config ADD COLUMN automation_failure_alert_email TEXT;
+      ALTER TABLE factory_config ADD COLUMN last_automation_failure_alert_key TEXT;
+      ALTER TABLE factory_config ADD COLUMN last_automation_failure_alert_at TEXT;
+    `,
+  },
 ];
 
 export const runFactoryMigrations = runMigrations(migrations, {

package/corpus/templates/factory/server/plugins/factory-scheduler-job.ts

@@ -1,3 +1,5 @@
+import { subscribe } from "@agent-native/core/event-bus";
+import { notify } from "@agent-native/core/notifications";
 import { resolveOrgIdForEmail } from "@agent-native/core/org";
 import {
   organizationResourceOwner,
@@ -5,8 +7,11 @@ import {
   resourcePut,
   WORKSPACE_OWNER,
 } from "@agent-native/core/resources";
-import { defineNitroPlugin } from "@agent-native/core/server";
-import { and, eq } from "drizzle-orm";
+import {
+  defineNitroPlugin,
+  runWithRequestContext,
+} from "@agent-native/core/server";
+import { and, eq, isNull, lt, ne, or } from "drizzle-orm";
 
 import { getDb } from "../db/index.js";
 import { triageConfig } from "../db/schema.js";
@@ -14,6 +19,139 @@ import { triageConfig } from "../db/schema.js";
 const LEGACY_JOB_PATH = "jobs/factory-observation-scheduler.md";
 const DEFAULT_SLACK_CHANNEL_ID = "C0ATH3CCZT4";
 const DEFAULT_SLACK_CHANNEL_NAME = "product-agent-native-feedback";
+const FAILURE_ALERT_COOLDOWN_MS = 15 * 60_000;
+
+type AutomationRunFinishedEvent = {
+  automationRunId: string;
+  owner: string;
+  automation: string;
+  path: string;
+  orgId: string | null;
+  runId: string | null;
+  threadId: string | null;
+  status: "success" | "error" | "interrupted";
+  error: string | null;
+};
+
+let failureAlertSubscription: string | null = null;
+
+function factoryPublicUrl(): string | undefined {
+  const value = process.env.FACTORY_PUBLIC_URL?.trim(); // guard:allow-env-credential - public callback origin, not a credential
+  if (!value || /[\r\n]/.test(value)) return undefined;
+  return value.replace(/\/+$/, "");
+}
+
+async function notifyFactoryAutomationFailure(
+  event: AutomationRunFinishedEvent,
+): Promise<void> {
+  if (
+    (event.status !== "error" && event.status !== "interrupted") ||
+    !event.orgId ||
+    !event.path.startsWith("jobs/factory-")
+  ) {
+    return;
+  }
+
+  const db = getDb();
+  const config = (
+    await db
+      .select({
+        ownerEmail: triageConfig.ownerEmail,
+        alertsEnabled: triageConfig.automationFailureAlertsEnabled,
+        alertEmail: triageConfig.automationFailureAlertEmail,
+      })
+      .from(triageConfig)
+      .where(
+        and(
+          eq(triageConfig.id, event.orgId),
+          eq(triageConfig.orgId, event.orgId),
+        ),
+      )
+      .limit(1)
+  )[0];
+  if (!config || config.alertsEnabled !== 1) return;
+
+  const recipient = (config.alertEmail || config.ownerEmail || "")
+    .trim()
+    .toLowerCase();
+  if (!recipient) return;
+
+  const error =
+    event.error ||
+    "The automation ended without recording a terminal result. No delivery was confirmed.";
+  const alertKey = `${event.automation}\n${error}`.slice(0, 700);
+  const now = new Date();
+  const cutoff = new Date(now.getTime() - FAILURE_ALERT_COOLDOWN_MS);
+  const claimed = await db
+    .update(triageConfig)
+    .set({
+      lastAutomationFailureAlertKey: alertKey,
+      lastAutomationFailureAlertAt: now.toISOString(),
+    })
+    .where(
+      and(
+        eq(triageConfig.id, event.orgId),
+        eq(triageConfig.orgId, event.orgId),
+        eq(triageConfig.automationFailureAlertsEnabled, 1),
+        or(
+          isNull(triageConfig.lastAutomationFailureAlertKey),
+          ne(triageConfig.lastAutomationFailureAlertKey, alertKey),
+          isNull(triageConfig.lastAutomationFailureAlertAt),
+          lt(triageConfig.lastAutomationFailureAlertAt, cutoff.toISOString()),
+        ),
+      ),
+    )
+    .returning({ id: triageConfig.id });
+  if (claimed.length === 0) return;
+
+  const url = factoryPublicUrl();
+  const debugTarget = url
+    ? `${url}/factory?tab=automations`
+    : "Factory > Automations";
+  const details = [
+    `Automation: ${event.automation}`,
+    `Run: ${event.automationRunId}`,
+    `Error: ${error}`,
+    `Debug: ${debugTarget}`,
+    "Next steps: open Scheduler health, then open this run's thread and inspect the last error. If health is stale, inspect the deployed scheduled function and background worker.",
+    event.threadId ? `Agent thread: ${event.threadId}` : "",
+    event.runId ? `Agent run: ${event.runId}` : "",
+  ]
+    .filter(Boolean)
+    .join("\n");
+  await runWithRequestContext(
+    { userEmail: config.ownerEmail, orgId: event.orgId },
+    () =>
+      notify(
+        {
+          severity: "critical",
+          title: `Factory automation failed: ${event.automation}`,
+          body: details,
+          metadata: {
+            emailRecipients: [recipient],
+            emailSubject: `Factory automation failed: ${event.automation}`,
+            automationRunId: event.automationRunId,
+          },
+          channels: ["inbox", "email"],
+        },
+        { owner: config.ownerEmail },
+      ),
+  );
+}
+
+function subscribeToAutomationFailures(): void {
+  if (failureAlertSubscription) return;
+  failureAlertSubscription = subscribe("automation.run.finished", (payload) =>
+    notifyFactoryAutomationFailure(payload as AutomationRunFinishedEvent).catch(
+      (error) => {
+        console.error(
+          "[factory-scheduler-job] automation failure alert failed:",
+          error,
+        );
+      },
+    ),
+  );
+}
 
 type AutomationSeed = {
   name: string;
@@ -256,6 +394,7 @@ async function ensureSchedulerJobs(): Promise<void> {
 }
 
 export default defineNitroPlugin(async () => {
+  subscribeToAutomationFailures();
   try {
     await ensureSchedulerJobs();
   } catch (error) {

package/corpus/templates/forms/app/pages/FormsListPage.tsx

@@ -21,7 +21,7 @@ import {
   IconX,
 } from "@tabler/icons-react";
 import { useEffect, useMemo, useState } from "react";
-import { useNavigate } from "react-router";
+import { Link, useNavigate } from "react-router";
 import { toast } from "sonner";
 
 import { CloudUpgrade } from "@/components/CloudUpgrade";
@@ -469,6 +469,9 @@ export function FormsListPage() {
         <div className="forms-list-shell overflow-hidden bg-card">
           {forms.map((form: any) => {
             const selected = selectedIds.has(form.id);
+            const formHref = isArchive
+              ? `/forms/${form.id}/responses`
+              : `/forms/${form.id}`;
             const dateLabel =
               isArchive && (form as any).deletedAt
                 ? t("forms.deletedDate", {
@@ -481,6 +484,20 @@ export function FormsListPage() {
                     month: "short",
                     day: "numeric",
                   });
+            const formDetails = (
+              <>
+                <div className="flex min-w-0 items-center gap-2">
+                  <h3 className="min-w-0 flex-1 truncate text-sm font-medium">
+                    {form.title}
+                  </h3>
+                </div>
+                {form.description && (
+                  <p className="mt-0.5 truncate text-xs text-muted-foreground">
+                    {form.description}
+                  </p>
+                )}
+              </>
+            );
 
             return (
               <div
@@ -496,16 +513,22 @@ export function FormsListPage() {
                 role="button"
                 tabIndex={0}
                 aria-pressed={selectionMode ? selected : undefined}
-                onClick={() => {
+                onClick={(event) => {
+                  if (
+                    event.defaultPrevented ||
+                    event.metaKey ||
+                    event.ctrlKey ||
+                    event.shiftKey ||
+                    event.altKey ||
+                    event.button !== 0
+                  ) {
+                    return;
+                  }
                   if (selectionMode) {
                     toggleSelection(form.id);
                     return;
                   }
-                  navigate(
-                    isArchive
-                      ? `/forms/${form.id}/responses`
-                      : `/forms/${form.id}`,
-                  );
+                  navigate(formHref);
                 }}
                 onKeyDown={(e) => {
                   if (
@@ -517,11 +540,7 @@ export function FormsListPage() {
                       toggleSelection(form.id);
                       return;
                     }
-                    navigate(
-                      isArchive
-                        ? `/forms/${form.id}/responses`
-                        : `/forms/${form.id}`,
-                    );
+                    navigate(formHref);
                   }
                 }}
               >
@@ -538,15 +557,16 @@ export function FormsListPage() {
                     />
                   )}
                   <div className="min-w-0 flex-1">
-                    <div className="flex min-w-0 items-center gap-2">
-                      <h3 className="min-w-0 flex-1 truncate text-sm font-medium">
-                        {form.title}
-                      </h3>
-                    </div>
-                    {form.description && (
-                      <p className="mt-0.5 truncate text-xs text-muted-foreground">
-                        {form.description}
-                      </p>
+                    {selectionMode ? (
+                      formDetails
+                    ) : (
+                      <Link
+                        to={formHref}
+                        className="block min-w-0 rounded-sm outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2"
+                        onClick={(event) => event.stopPropagation()}
+                      >
+                        {formDetails}
+                      </Link>
                     )}
                   </div>
                 </div>

package/corpus/templates/forms/changelog/2026-08-05-form-links-can-now-be-cmd-clicked-to-open-in-a-new-tab.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-08-05
+---
+
+Form links can now be Cmd-clicked to open in a new tab

package/corpus/templates/forms/server/lib/emails.ts

@@ -0,0 +1,52 @@
+/**
+ * Catalog entries for the transactional emails Forms sends.
+ *
+ * Registered from `server/plugins/transactional-emails.ts` so Dispatch can list
+ * and preview them without the app having sent anything yet.
+ */
+
+import { defineTransactionalEmail } from "@agent-native/core/email-catalog";
+
+import { renderNewResponseEmail } from "./response-email.js";
+
+export const FORMS_NEW_RESPONSE_EMAIL_ID = "forms.new-response";
+
+let registered = false;
+
+export function registerFormsEmails(): void {
+  if (registered) return;
+  registered = true;
+
+  defineTransactionalEmail({
+    id: FORMS_NEW_RESPONSE_EMAIL_ID,
+    name: "New form response",
+    trigger:
+      "A response is submitted and persisted for a form whose settings have `emailOnNewResponses` enabled. Delivery is best-effort: a send failure never rejects the submission.",
+    recipientLabel: "Form owner",
+    recipient:
+      "The form's `ownerEmail`, and only that address — the respondent is never emailed. Skipped when the form has no owner address.",
+    senderLabel: "Default sender",
+    sender:
+      "The configured default sender. This call site sets no `from`, `fromName`, `replyTo`, or `appSender`, so a reply goes to the sending mailbox rather than to the respondent.",
+    preview: () =>
+      renderNewResponseEmail({
+        formTitle: "Beta feedback",
+        fields: [
+          { id: "name", type: "text", label: "Name", required: true },
+          { id: "email", type: "email", label: "Email", required: true },
+          {
+            id: "notes",
+            type: "textarea",
+            label: "What should we fix first?",
+            required: false,
+          },
+        ],
+        data: {
+          name: "Sam Rivera",
+          email: "sam.rivera@example.com",
+          notes: "The export button is hard to find on mobile.",
+        },
+        submittedAt: "2025-03-04T17:20:00.000Z",
+      }),
+  });
+}

package/corpus/templates/forms/server/lib/response-email.ts

@@ -1,6 +1,7 @@
 import { emailStrong, renderEmail, sendEmail } from "@agent-native/core/server";
 
 import type { FormField } from "../../shared/types.js";
+import { FORMS_NEW_RESPONSE_EMAIL_ID } from "./emails.js";
 
 export interface NewResponseEmailArgs {
   to: string;
@@ -61,5 +62,6 @@ export async function sendNewResponseEmail(
   await sendEmail({
     to: args.to,
     ...renderNewResponseEmail(args),
+    templateId: FORMS_NEW_RESPONSE_EMAIL_ID,
   });
 }

package/corpus/templates/forms/server/plugins/transactional-emails.ts

@@ -0,0 +1,5 @@
+import { registerFormsEmails } from "../lib/emails.js";
+
+export default function registerTransactionalEmails(): void {
+  registerFormsEmails();
+}

package/corpus/templates/plan/actions/request-plan-access.ts

@@ -22,6 +22,8 @@ import {
 } from "../server/lib/local-identity.js";
 import { newId, nowIso, planPath, writeEvent } from "../server/plans.js";
 
+export const PLAN_ACCESS_REQUEST_EMAIL_ID = "plan.access-request";
+
 function httpError(message: string, statusCode: number): Error {
   return Object.assign(new Error(message), { statusCode });
 }
@@ -49,6 +51,28 @@ function absolutePlanUrl(planId: string, kind: "plan" | "recap"): string {
   }
 }
 
+export function renderPlanAccessRequestEmail(input: {
+  requesterName: string;
+  requesterEmail: string;
+  planTitle: string;
+  url: string;
+}) {
+  const subject = `${input.requesterName} requested access to "${input.planTitle}"`;
+  return {
+    subject,
+    ...renderEmail({
+      preheader: subject,
+      heading: "Access request",
+      paragraphs: [
+        `${emailStrong(input.requesterName)} (${emailStrong(input.requesterEmail)}) requested access to ${emailStrong(input.planTitle)}.`,
+        "Open the plan and use Share to grant access if this request should be approved.",
+      ],
+      cta: { label: "Open plan", url: input.url },
+      footer: "You received this because you own this Agent-Native Plan.",
+    }),
+  };
+}
+
 async function notifyOwner(input: {
   planId: string;
   planKind: "plan" | "recap";
@@ -62,19 +86,16 @@ async function notifyOwner(input: {
     return false;
   }
 
-  const url = absolutePlanUrl(input.planId, input.planKind);
-  const subject = `${input.requesterName} requested access to "${input.planTitle}"`;
-  const { html, text } = renderEmail({
-    preheader: subject,
-    heading: "Access request",
-    paragraphs: [
-      `${emailStrong(input.requesterName)} (${emailStrong(input.requesterEmail)}) requested access to ${emailStrong(input.planTitle)}.`,
-      "Open the plan and use Share to grant access if this request should be approved.",
-    ],
-    cta: { label: "Open plan", url },
-    footer: "You received this because you own this Agent-Native Plan.",
+  await sendEmail({
+    ...renderPlanAccessRequestEmail({
+      requesterName: input.requesterName,
+      requesterEmail: input.requesterEmail,
+      planTitle: input.planTitle,
+      url: absolutePlanUrl(input.planId, input.planKind),
+    }),
+    to: input.ownerEmail,
+    templateId: PLAN_ACCESS_REQUEST_EMAIL_ID,
   });
-  await sendEmail({ to: input.ownerEmail, subject, html, text });
   return true;
 }
 

package/corpus/templates/plan/server/lib/comment-notifications.ts

@@ -14,6 +14,8 @@ import {
 import type { PlanBundle, PlanComment } from "../../shared/types.js";
 import { getDb, schema } from "../db/index.js";
 
+export const PLAN_COMMENT_EMAIL_ID = "plan.plan-comment";
+
 type CommentNotificationInput = {
   bundle: PlanBundle;
   insertedCommentIds: string[];
@@ -205,40 +207,64 @@ export function planCommentNotificationRecipients(input: {
   return Array.from(recipients.values());
 }
 
-async function sendPlanCommentNotification(input: {
-  recipient: NotificationRecipient;
-  comment: PlanComment;
+export function renderPlanCommentEmail(input: {
+  actor: string;
+  app: string;
   planTitle: string;
-  planId: string;
+  planUrl: string;
+  message: string;
+  isReply: boolean;
+  reason: NotificationRecipient["reason"];
 }) {
-  const actor = actorName(input.comment);
-  const app = appName();
-  const isReply = Boolean(input.comment.parentCommentId);
-  const subject = isReply
-    ? `${actor} replied to a comment on "${input.planTitle}"`
-    : `${actor} commented on "${input.planTitle}"`;
   const actionText =
-    input.recipient.reason === "mention"
+    input.reason === "mention"
       ? "mentioned you in a comment on"
-      : input.recipient.reason === "plan-owner"
+      : input.reason === "plan-owner"
         ? "left a comment on your plan"
         : "replied in a comment thread you participated in";
-  const { html, text } = renderEmail({
-    preheader: `${actor} ${actionText} on ${app}.`,
-    heading: isReply ? "New reply on your plan" : "New comment on your plan",
-    paragraphs: [
-      `${emailStrong(actor)} ${actionText} ${emailStrong(input.planTitle)}.`,
-      `Comment: "${commentExcerpt(input.comment.message)}"`,
-    ],
-    cta: { label: "Open plan", url: planUrl(input.planId) },
-    footer:
-      input.recipient.reason === "plan-owner"
-        ? "You received this because you own this plan."
-        : input.recipient.reason === "mention"
-          ? "You received this because you were mentioned in this comment."
-          : "You received this because you participated in this comment thread.",
+  return {
+    subject: input.isReply
+      ? `${input.actor} replied to a comment on "${input.planTitle}"`
+      : `${input.actor} commented on "${input.planTitle}"`,
+    ...renderEmail({
+      preheader: `${input.actor} ${actionText} on ${input.app}.`,
+      heading: input.isReply
+        ? "New reply on your plan"
+        : "New comment on your plan",
+      paragraphs: [
+        `${emailStrong(input.actor)} ${actionText} ${emailStrong(input.planTitle)}.`,
+        `Comment: "${commentExcerpt(input.message)}"`,
+      ],
+      cta: { label: "Open plan", url: input.planUrl },
+      footer:
+        input.reason === "plan-owner"
+          ? "You received this because you own this plan."
+          : input.reason === "mention"
+            ? "You received this because you were mentioned in this comment."
+            : "You received this because you participated in this comment thread.",
+    }),
+  };
+}
+
+async function sendPlanCommentNotification(input: {
+  recipient: NotificationRecipient;
+  comment: PlanComment;
+  planTitle: string;
+  planId: string;
+}) {
+  await sendEmail({
+    ...renderPlanCommentEmail({
+      actor: actorName(input.comment),
+      app: appName(),
+      planTitle: input.planTitle,
+      planUrl: planUrl(input.planId),
+      message: input.comment.message,
+      isReply: Boolean(input.comment.parentCommentId),
+      reason: input.recipient.reason,
+    }),
+    to: input.recipient.email,
+    templateId: PLAN_COMMENT_EMAIL_ID,
   });
-  await sendEmail({ to: input.recipient.email, subject, html, text });
 }
 
 export async function notifyPlanCommentRecipients({

package/corpus/templates/plan/server/lib/emails.ts

@@ -0,0 +1,67 @@
+/**
+ * Catalog entries for the transactional emails Plan sends.
+ *
+ * Registered from `server/plugins/transactional-emails.ts` so Dispatch can list
+ * and preview them without the app having sent anything yet.
+ */
+
+import { defineTransactionalEmail } from "@agent-native/core/email-catalog";
+
+import {
+  PLAN_ACCESS_REQUEST_EMAIL_ID,
+  renderPlanAccessRequestEmail,
+} from "../../actions/request-plan-access.js";
+import {
+  PLAN_COMMENT_EMAIL_ID,
+  renderPlanCommentEmail,
+} from "./comment-notifications.js";
+
+let registered = false;
+
+export function registerPlanEmails(): void {
+  if (registered) return;
+  registered = true;
+
+  defineTransactionalEmail({
+    id: PLAN_COMMENT_EMAIL_ID,
+    name: "Plan comment",
+    trigger:
+      "A human (never the agent) posts a comment or reply on a plan or recap. The subject changes for a reply and the body changes with why the recipient was picked; all variants send under this id.",
+    recipientLabel: "Owner, mentions, authors",
+    recipient:
+      "The plan owner, everyone mentioned in the comment, and — for a reply — every other human author in the same thread. The comment's own author, synthetic QA addresses, and the owner when the comment mentions the source author are all dropped. One email per remaining address.",
+    senderLabel: "Default sender",
+    sender:
+      "The configured default sender. This call site sets no `from`, `fromName`, `replyTo`, or `appSender`.",
+    preview: () =>
+      renderPlanCommentEmail({
+        actor: "Sam Rivera",
+        app: "Agent-Native Plan",
+        planTitle: "Checkout rewrite",
+        planUrl: "https://example.com/plans/plan_sample",
+        message: "Can we split the migration into two deploys?",
+        isReply: false,
+        reason: "plan-owner",
+      }),
+  });
+
+  defineTransactionalEmail({
+    id: PLAN_ACCESS_REQUEST_EMAIL_ID,
+    name: "Plan access request",
+    trigger:
+      "A signed-in user who cannot resolve access calls `request-plan-access` on a private plan URL. Skipped when email is not configured or the requester is the owner.",
+    recipientLabel: "Plan owner",
+    recipient:
+      "The plan's `ownerEmail` column. Anonymous public viewers and guest author identities cannot reach this path.",
+    senderLabel: "Default sender",
+    sender:
+      "The configured default sender. This call site sets no `from`, `fromName`, `replyTo`, or `appSender`, so the owner cannot reply straight to the requester.",
+    preview: () =>
+      renderPlanAccessRequestEmail({
+        requesterName: "Sam Rivera",
+        requesterEmail: "sam.rivera@example.com",
+        planTitle: "Checkout rewrite",
+        url: "https://example.com/plans/plan_sample",
+      }),
+  });
+}

package/corpus/templates/plan/server/plugins/transactional-emails.ts

@@ -0,0 +1,5 @@
+import { registerPlanEmails } from "../lib/emails.js";
+
+export default function registerTransactionalEmails(): void {
+  registerPlanEmails();
+}

package/corpus/templates/slides/actions/import-from-url.ts

@@ -6,6 +6,7 @@ export default defineAction({
   description:
     "Analyze a website URL to extract design tokens (colors, fonts, metadata) " +
     "for use in creating or updating a design project. " +
+    "Follows bounded, SSRF-safe linked stylesheets and reports any stylesheet failures. " +
     "Returns extracted CSS variables, font faces, colors, and meta information.",
   schema: z.object({
     url: z.string().describe("Website URL to analyze"),