@agent-native/core 0.145.5 → 0.145.6

package/corpus/templates/factory/server/plugins/factory-scheduler-job.ts

@@ -5,6 +5,7 @@ import {
   organizationResourceOwner,
   resourceGetByPath,
   resourcePut,
+  resourcePutIfCurrent,
   WORKSPACE_OWNER,
 } from "@agent-native/core/resources";
 import {
@@ -264,6 +265,30 @@ fully owned by their product owners. Auto-merge is limited to PRs with a
 verified Factory Builder run; all other PRs can at most pass the approval
 policy. Do not call GitHub write actions directly or claim a merge unless the
 governance action confirms it.
+`,
+  },
+  {
+    name: "factory-pr-babysit",
+    schedule: "*/2 * * * *",
+    body: `
+# Factory builder-io-bot PR babysitting
+
+Read the Factory configuration. When GitHub polling is enabled and a repository
+is configured, call poll-github-sources with includeIssues false and
+includePullRequests true. List a bounded page of open github pull-request items.
+
+For each item, call babysit-agent-native-pull-request. That action fetches fresh
+GitHub and ai-services evidence and is the only place allowed to decide whether
+to post the bounded @builderio-bot feedback-fix request. It only acts on open
+non-draft PRs authored by builder-io-bot (including GitHub's bot login variants),
+and skips owner-managed Clips, Design, and Content work. It persists the latest
+feedback fingerprint and quiet window, so repeated scheduler ticks do not spam
+comments. A changed commit, new unresolved feedback, failing or pending CI, or
+merge conflict starts a new bounded request; twenty minutes without new work to
+address ends that babysitting window. The action never approves or merges.
+
+Preserve action errors and never claim that Builder fixed a PR unless fresh
+evidence confirms the resulting state.
 `,
   },
 ];
@@ -274,6 +299,19 @@ function workspaceOwnerEmail(): string | undefined {
   return email;
 }
 
+function defaultRepository(): string | null {
+  const repository = process.env.FACTORY_DEFAULT_REPOSITORY?.trim(); // guard:allow-env-credential - repository configuration, not a credential
+  if (!repository || /[\r\n]/.test(repository)) return null;
+  return repository;
+}
+
+function defaultGithubPollingEnabled(): 0 | 1 {
+  return process.env.FACTORY_ENABLE_GITHUB_POLLING?.trim().toLowerCase() === // guard:allow-env-credential - deployment feature flag, not a credential
+    "true"
+    ? 1
+    : 0;
+}
+
 function setFrontmatterField(
   content: string,
   key: string,
@@ -327,16 +365,47 @@ async function ensureOrganizationAutomations(
   orgId: string,
 ): Promise<void> {
   const owner = organizationResourceOwner(orgId);
-  for (const seed of AUTOMATION_SEEDS) {
-    const path = `jobs/${seed.name}.md`;
-    if (await resourceGetByPath(owner, path)) continue;
-    await resourcePut(
-      owner,
-      path,
-      automationContent(ownerEmail, orgId, seed),
-      "text/markdown",
-    );
-  }
+  await Promise.all(
+    AUTOMATION_SEEDS.map(async (seed) => {
+      const path = `jobs/${seed.name}.md`;
+      const existing = await resourceGetByPath(owner, path);
+      if (!existing) {
+        await resourcePut(
+          owner,
+          path,
+          automationContent(ownerEmail, orgId, seed),
+          "text/markdown",
+        );
+        return;
+      }
+
+      // Earlier Factory versions created these rows without the metadata the
+      // list and action guards use. Patch only identity metadata and keep the
+      // user's prompt, model, schedule, and enabled state intact.
+      let repaired = existing.content;
+      repaired = setFrontmatterField(repaired, "triggerType", "schedule");
+      repaired = setFrontmatterField(repaired, "domain", "factory");
+      repaired = setFrontmatterField(repaired, "orgId", orgId);
+      repaired = setFrontmatterField(repaired, "createdBy", ownerEmail);
+      repaired = setFrontmatterField(repaired, "runAs", "creator");
+      if (repaired === existing.content) return;
+
+      const updated = await resourcePutIfCurrent({
+        owner,
+        path,
+        content: repaired,
+        mimeType: "text/markdown",
+        expectedId: existing.id,
+        expectedUpdatedAt: existing.updatedAt,
+        expectedContent: existing.content,
+      });
+      if (!updated) {
+        console.warn(
+          `[factory-scheduler-job] skipped metadata repair for ${path}: the resource changed concurrently`,
+        );
+      }
+    }),
+  );
 }
 
 async function ensureDefaultTriageConfig(
@@ -359,11 +428,11 @@ async function ensureDefaultTriageConfig(
     slackChannelId: DEFAULT_SLACK_CHANNEL_ID,
     slackChannelName: DEFAULT_SLACK_CHANNEL_NAME,
     pollingEnabled: 1,
-    githubPollingEnabled: 0,
+    githubPollingEnabled: defaultGithubPollingEnabled(),
     sentryPollingEnabled: 0,
     lastSlackTs: null,
     slackHistoryCursor: null,
-    repository: null,
+    repository: defaultRepository(),
     sentryOrgSlug: null,
     sentryProjectSlug: null,
     sentryEnvironment: null,

package/corpus/templates/factory/server/triage/github-client.ts

@@ -73,6 +73,11 @@ export interface GitHubMergeResult {
   message: string;
 }
 
+export interface GitHubComment {
+  id: number;
+  htmlUrl: string;
+}
+
 interface JsonResponse {
   ok: boolean;
   status: number;
@@ -361,6 +366,32 @@ export function createGitHubClient(options: GitHubClientOptions) {
       };
     },
 
+    async createIssueComment(
+      repository: GitHubRepositoryRef,
+      issueNumber: number,
+      body: string,
+    ): Promise<GitHubComment> {
+      if (!Number.isInteger(issueNumber) || issueNumber < 1) {
+        throw new Error("GitHub issue number must be a positive integer");
+      }
+      const trimmedBody = body.trim();
+      if (!trimmedBody) throw new Error("GitHub comment body is required");
+      const item = record(
+        await request<unknown>(
+          `${repositoryPath(repository)}/issues/${issueNumber}/comments`,
+          {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ body: trimmedBody.slice(0, 65_536) }),
+          },
+        ),
+      );
+      return {
+        id: requiredNumber(item.id, "comment id"),
+        htmlUrl: requiredString(item.html_url, "comment URL"),
+      };
+    },
+
     async mergePullRequest(
       repository: GitHubRepositoryRef,
       pullRequestNumber: number,

package/corpus/templates/factory/server/triage/pr-babysit.ts

@@ -1,5 +1,24 @@
 import type { PullRequestCheckObservation } from "./pr-monitor.js";
 
+export const BUILDER_BOT_LOGINS = new Set([
+  "builder-io-bot",
+  "builder-io-bot[bot]",
+  "builderio-bot",
+  "builderio-bot[bot]",
+  "builderio[bot]",
+]);
+
+export const DEFAULT_BABYSIT_BOT_AUTHORS = [
+  "builder-io-bot",
+  "builder-io-bot[bot]",
+  "builderio-bot",
+  "builderio-bot[bot]",
+  "builderio[bot]",
+  "github-actions",
+  "github-actions[bot]",
+  "dependabot[bot]",
+] as const;
+
 export interface ReviewCommentObservation {
   id: string;
   author: string;
@@ -30,6 +49,61 @@ export interface BabysitProposal {
   isClean: boolean;
 }
 
+export interface BuilderBotBabysitSignal {
+  author: string;
+  mergeable: boolean | null;
+  mergeableState: string | null;
+  snapshot: BabysitProposal;
+}
+
+export function isBuilderBotLogin(login: string): boolean {
+  return BUILDER_BOT_LOGINS.has(login.trim().toLowerCase());
+}
+
+export function hasMergeConflict(input: {
+  mergeable: boolean | null;
+  mergeableState: string | null;
+}): boolean {
+  return (
+    input.mergeable === false ||
+    input.mergeableState === "dirty" ||
+    input.mergeableState === "conflicting"
+  );
+}
+
+export function shouldBabysitBuilderBotPullRequest(
+  input: BuilderBotBabysitSignal,
+): boolean {
+  return (
+    isBuilderBotLogin(input.author) &&
+    (hasMergeConflict(input) || !input.snapshot.isClean)
+  );
+}
+
+export function babysitFingerprint(input: {
+  headSha: string;
+  mergeable: boolean | null;
+  mergeableState: string | null;
+  snapshot: BabysitProposal;
+  reviewStates?: readonly string[];
+}): string {
+  return JSON.stringify({
+    headSha: input.headSha,
+    mergeable: input.mergeable,
+    mergeableState: input.mergeableState,
+    unansweredComments: input.snapshot.unansweredComments.map((comment) => ({
+      id: comment.id,
+      body: comment.body,
+      isResolved: comment.isResolved ?? null,
+    })),
+    failingChecks: input.snapshot.failingChecks.map((check) => check.name),
+    pendingChecks: input.snapshot.pendingChecks.map((check) => check.name),
+    missingChangesetPackages: input.snapshot.missingChangesetPackages,
+    commentsTruncated: input.snapshot.commentsTruncated,
+    reviewStates: input.reviewStates ?? [],
+  });
+}
+
 const MISSING_CHANGESET_LINE = /^MISSING_CHANGESET_PACKAGES:\s*(.*)$/m;
 
 function parseMissingChangesetPackages(log: string | undefined): string[] {
@@ -71,7 +145,7 @@ export function reconcileBabysitState(input: BabysitInput): BabysitProposal {
       !botAuthors.has(comment.author),
   );
   const failingChecks = input.checks.filter(
-    (check) => check.state === "failed",
+    (check) => check.state === "failed" || check.state === "cancelled",
   );
   const pendingChecks = input.checks.filter(
     (check) => check.state === "queued" || check.state === "in_progress",

package/corpus/templates/forms/.agents/skills/actions/SKILL.md

@@ -20,6 +20,24 @@ Before creating any custom REST/API route for app data, inspect `actions/` and t
 
 **Stop trigger:** the moment you are about to create a file under `server/routes/api/` — or add server middleware to guard one — stop and check it against the exception list in *When You Still Need Custom `/api/` Routes* below. If it is not on that list, write a `defineAction` instead. This applies even when you already started the route; abandoning a half-written action to hand-roll routes is the exact failure this rule exists to prevent.
 
+## Keep actions deterministic and composable
+
+An action may call a provider API, validate or normalize data, and persist
+records without being an AI feature. Keep those operations deterministic,
+focused, and independently useful to the agent. Do not put LLM calls or a
+second model runtime in ordinary actions. The only narrow exception is the
+`completeText()` text-in/text-out escape hatch described in
+`delegate-to-agent`; it must not own tools, chat history, run state, side
+effects, or user steering.
+
+When a workflow is framed as research, analysis, generation, recommendation,
+or synthesis, or spans several provider calls and writes, route the user into
+the AgentSidebar and let the agent orchestrate focused actions. Do not hide an
+AI-shaped workflow behind one opaque `generate-*` or `create-*` action just
+because its implementation is deterministic. A visible user-initiated run
+should use `sendToAgentChat({ openSidebar: true })`, and its follow-ups should
+continue in the same thread rather than a separate freeform input.
+
 ## Why
 
 Actions give the agent callable tools with structured input/output, AND they give the frontend a typed client contract through hooks. One implementation serves both the agent and the UI. They keep the agent's chat context clean, they're reusable, and they can be tested independently.

package/corpus/templates/forms/.agents/skills/agent-native-toolkit/SKILL.md

@@ -56,6 +56,11 @@ The repeated app shell has two distinct navigation surfaces:
   labeled as local, preview, or analyze. For original/generated review, stack
   the source above the result by default and use side-by-side only for short,
   highly scannable content.
+- Deterministic implementation does not make an AI-shaped experience
+  deterministic. If the user expects research, analysis, generation,
+  recommendation, synthesis, visible progress, or steering, route the button
+  to the AgentSidebar and let the agent call focused actions. Keep revisions in
+  the same thread instead of adding a second freeform prompt box.
 - Standalone apps with `AgentSidebar` must resolve one assistant-ui runtime
   context. Match direct assistant-ui pins to the installed core/toolkit peer
   graph, use Vite dedupe/aliases when linked dependencies can split contexts,

package/corpus/templates/forms/.agents/skills/delegate-to-agent/SKILL.md

@@ -14,11 +14,21 @@ metadata:
 
 ## Rule
 
-The UI never calls an LLM directly. Product workflows are delegated to the
-agent through the chat bridge so users can see, steer, and audit the work.
-Server-side one-shot model calls are an explicit escape hatch for narrow text
-transforms only; use `completeText()` from `@agent-native/core/server` when the
-work intentionally does not need tools, chat history, or run state.
+The app's default AI surface is the agent chat. Any user-facing work that asks
+the model to research, analyze, generate, recommend, synthesize, or reason over
+multiple steps must start or continue in the AgentSidebar so users can see,
+steer, and audit the work. UI buttons use `sendToAgentChat()` with
+`openSidebar: true`, and follow-up or revision text belongs in that same thread
+instead of a second app-local textbox.
+
+Actions are tools, not alternate AI runtimes. Keep them deterministic and
+focused: provider reads, validation, deterministic transforms, CRUD, and
+persistence are good action work. Let the agent orchestrate several such tools
+when the workflow is AI-shaped or user-steerable. Server-side one-shot model
+calls are a rare escape hatch for narrow text transforms only; use
+`completeText()` from `@agent-native/core/server` only when the work
+intentionally does not need tools, chat history, run state, side effects, or
+user steering.
 
 ## Why
 
@@ -35,6 +45,7 @@ sendToAgentChat({
   message: "Generate a summary of this document",
   context: documentContent, // optional hidden context (not shown in chat UI)
   submit: true, // auto-submit to the agent
+  openSidebar: true,
 });
 ```
 
@@ -56,6 +67,10 @@ sendToAgentChat({
 This is still a full agent run: tools, actions, thread state, and run tracking
 all remain active. It simply does not focus or open the sidebar.
 
+Use this silent form only for explicitly background or system-initiated work.
+It is not the default for a user clicking an AI-labeled button; visible work
+should open the sidebar so the user can follow and redirect the run.
+
 **From scripts (Node):**
 
 ```ts
@@ -77,8 +92,9 @@ const result = await completeText({
 });
 ```
 
-Wrap user-facing uses in actions so the UI and agent share the same operation.
-Do not call provider SDKs directly.
+If the narrow exception is exposed to the UI, wrap it in an action so the UI
+and agent share the same operation. Keep it clearly non-conversational and do
+not call provider SDKs directly.
 
 **From the UI, detecting when agent is done:**
 
@@ -97,9 +113,9 @@ The `submit` option controls whether the message is sent automatically or placed
 
 | `submit` value | Behavior                                | Use when                                                                            |
 | -------------- | --------------------------------------- | ----------------------------------------------------------------------------------- |
-| `true`         | Auto-submits to the agent immediately   | Routine operations the user has already approved                                    |
-| `false`        | Prefills the chat input for user review | High-stakes operations (deleting data, modifying code, API calls with side effects) |
-| omitted        | Uses the project's default setting      | General-purpose delegation                                                          |
+| `true`         | Auto-submits to the agent immediately   | Routine operations with clear intent; keep `openSidebar: true` for visible work |
+| `false`        | Prefills the AgentSidebar composer      | Review, edit, or add detail before the run; use the existing sidebar thread   |
+| omitted        | Uses the project's default setting      | General-purpose delegation                                                       |
 
 ```ts
 // Auto-submit: routine operation
@@ -109,61 +125,43 @@ sendToAgentChat({ message: "Update the project summary", submit: true });
 sendToAgentChat({
   message: "Delete all projects older than 30 days",
   submit: false,
+  openSidebar: true,
 });
 ```
 
-## Capture user input first when generating from a prompt
-
-Buttons that produce new content ("New Design", "Create Dashboard", "Make Deck", "Generate Form") need the user's prompt as input. **Never hardcode a generic message** — the result will be a generic generation the user didn't actually ask for.
+## Capture user input in the sidebar
 
-**Bad** — auto-submits a placeholder message; the user never said what they wanted:
+The AgentSidebar composer is the default prompt surface. When a button needs
+the user to describe what to create, prefill that same composer and let the
+user edit or complete it:
 
 ```tsx
 <Button
   onClick={() =>
-    sendToAgentChat({ message: "make a design", submit: true })
+    sendToAgentChat({
+      message: "Help me create a research report from this brief:",
+      context: researchBrief,
+      submit: false,
+      openSidebar: true,
+    })
   }
 >
-  New Design
+  Start in agent
 </Button>
 ```
 
-**Good** — Popover anchored to the button captures the prompt, then submits it:
-
-```tsx
-<Popover open={open} onOpenChange={setOpen}>
-  <PopoverTrigger asChild>
-    <Button>New Design</Button>
-  </PopoverTrigger>
-  <PopoverContent className="w-96">
-    <Textarea
-      autoFocus
-      value={prompt}
-      onChange={(e) => setPrompt(e.target.value)}
-      placeholder="What do you want to design?"
-    />
-    <Button
-      onClick={() => {
-        sendToAgentChat({ message: prompt, submit: true });
-        setOpen(false);
-        setPrompt("");
-      }}
-    >
-      Create
-    </Button>
-  </PopoverContent>
-</Popover>
-```
-
-**Always ask for input first when** the output depends on a prompt the user must provide — "design what?", "deck about what?", "dashboard for which metric?", "form for which use case?".
-
-**Auto-submit without input is fine when intent is unambiguous:**
+Never auto-submit a generic creative prompt when the user has not said what
+they want. Auto-submit without additional input is fine when intent is
+unambiguous:
 
 - "Try to fix" on a tool error — submits the error details with a clear fix instruction
 - "Retry the last operation" after a transient failure
 - Single-purpose buttons where there is nothing meaningful for the user to add
 
-If you find yourself writing `submit: true` with a hardcoded creative verb (`"design a..."`, `"write a..."`, `"build a..."`), stop and add a Popover.
+Use a Popover only for compact, structured parameters the UI must validate,
+such as a date range, target, or approval choice. Do not add a second freeform
+prompt or follow-up textbox for an AI workflow; keep the conversation and
+revisions in the AgentSidebar thread.
 
 ## Delegating to a Sub-Agent (Agent Teams)
 

package/corpus/templates/forms/.agents/skills/frontend-design/SKILL.md

@@ -130,6 +130,7 @@ passed this requirement yet.
 - Do not build custom dropdowns, menus, popovers, modals, or confirmations with manual absolute positioning and click-outside effects.
 - Never use browser dialogs (`window.alert`, `window.confirm`, `window.prompt`). Use `AlertDialog`, `Dialog`, or app-specific confirmation UI.
 - Use Tabler icons for all first-party UI icons. Do not add Lucide, Heroicons, inline SVG icon sets, or emoji icons.
+- Keep inline help/info glyphs next to labels at `size-3` (12px) or smaller than the adjacent text. Preserve a larger hit area on the trigger, not the glyph. Use `guard:allow-large-help-icon` only for deliberate heading documentation or menu action exceptions.
 - Use `useActionQuery` and `useActionMutation` from `@agent-native/core/client` for action-backed UI. Standard CRUD should go through actions, not custom `/api/` routes.
 - Keep UI optimistic where possible: update cache and navigation immediately, then reconcile or roll back on mutation result.
 - Custom styles belong in Tailwind classes, component CSS, or the existing global CSS theme file; avoid inline styles.

package/corpus/templates/forms/.agents/skills/turn-into-app/SKILL.md

@@ -1,10 +1,10 @@
 ---
 name: turn-into-app
 description: >-
-  Turn a proven thread, skill, or workflow into a runnable Agent-Native app
-  with simple buttons, visible agent steps, preview, and deployment handoff.
-  Use when a user invokes `/turn-into-app` or asks to make a workflow into an
-  app.
+  Turn visible project context, a proven thread, skill, or workflow into a
+  runnable Agent-Native app with simple buttons, visible agent steps, preview,
+  and deployment handoff. Use when a user invokes `/turn-into-app` or asks to
+  make a workflow into an app.
 user-invocable: true
 scope: both
 metadata:
@@ -17,34 +17,72 @@ metadata:
 
 This is an end-to-end build skill, not a request for an app proposal.
 
-- With no argument, use the current thread as the source. This is the normal
-  invocation at the end of a successful workflow.
+- With no argument, choose the source in this order: visible project context,
+  then the current thread. A fresh Claude or ChatGPT Project is a valid source
+  on its first turn. Treat its visible project instructions, knowledge files,
+  and supplied past runs as the source; a completed thread is not required.
+  Treat the current turn as a request or configuration unless it contains a
+  concrete repeatable workflow.
 - With a named skill or local workflow, read that source and package it
   immediately, even at the beginning of a thread. For example,
   `/turn-into-app /some-skill` means “turn `/some-skill` into an app.”
 - With an attachment or path, read the supplied artifact as the source.
 - Do not ask the user to restate context that is already in the thread.
-- When invoked from an Agent-Native app, keep the current thread as the source
-  and use the available workspace/coding-agent handoff when the current runtime
-  cannot edit files. Do not claim the app exists without an actual path and
-  verification result.
+- When invoked from an Agent-Native app, use its visible project context first,
+  then the current thread, and use the available workspace/coding-agent
+  handoff when the current runtime cannot edit files. Do not claim the app
+  exists without an actual path and verification result.
 
 ## Source support
 
-Supported source paths today are the current Codex thread, a named skill, or a
-local workflow/transcript supplied as a path or attachment. An exported
-ChatGPT or Claude transcript can use the same local-file path today.
+Supported source paths today are visible Claude or ChatGPT Project context, the
+current Codex or host thread, a named skill, or a local workflow/transcript
+supplied as a path or attachment. An exported ChatGPT or Claude transcript can
+use the same local-file path today.
 
-ChatGPT shared-conversation import and Claude web conversation/project import
-are **coming soon**. Do not claim private web access, invent an importer, add
-fake OAuth, or scrape a logged-in page without an explicit supported adapter.
-If a user gives one of those URLs before an adapter exists, ask for an export or
-transcript instead and treat it as imported source material.
+Claude and ChatGPT Project context is supported only when the host supplies it
+to the model in the current context. The MCP connector does not read hidden
+project chats, private URLs, account settings, or credentials. Do not claim
+private web access, invent an importer, add fake OAuth, or scrape a logged-in
+page. If the needed context is not visible, ask for an export, transcript, or
+attachment and treat that artifact as imported source material.
 
 Deliver a fresh app in a new directory, implement the repeatable workflow with
 buttons and agent handoffs, start its dev server, verify the main path, and
 continue through build/deployment handoff. Do not stop at a plan.
 
+## Fresh project context mode
+
+When the source is a fresh Claude or ChatGPT Project, build a short source brief
+before creating the app. Read the host-provided context in this order:
+
+1. Project instructions and configuration: goal, audience, constraints, output
+   standards, approved tools, and integration expectations. Treat these as
+   product configuration, not as a transcript.
+2. Knowledge files and attachments: read the relevant files fully, preserve
+   their provenance, and reduce them to bounded references, IDs, URLs, or
+   summaries for the new app. Do not copy secrets or large raw payloads into
+   prompts or SQL.
+3. Past runs or examples that are actually visible in the context: select at
+   most 1-3 successful, representative runs. Extract repeatable decisions and
+   review criteria. Treat one-off answers and private data as examples, not as
+   product behavior. If no runs are supplied, proceed from the instructions
+   and knowledge files and say that examples were not available.
+4. The current turn: use it for the requested app boundary, target workspace,
+   naming, and any explicit corrections.
+
+Record the brief with these headings before handoff: source and provenance,
+project goal, configuration and constraints, knowledge sources, repeatable
+workflow, inputs and outputs, judgment and review points, representative runs,
+integrations and permissions, and unknowns. This is the compact contract for
+the app. It keeps the new app useful without pretending that hidden Project
+history was imported. See [the fresh Project reference](references/fresh-project.md)
+for the host setup and brief template.
+
+If the visible Project context has no concrete repeatable job, ask for one
+focused clarification or a representative artifact. Do not fall back to a
+generic “what app do you want to make?” builder.
+
 ## Source selection guard
 
 The generated app must implement the concrete workflow found in the source. It
@@ -151,6 +189,14 @@ pnpm exec agent-native add-app <slug> --template=chat
 Do not use `create` for an existing workspace; it scaffolds a new standalone
 workspace rather than adding an app to the current one.
 
+When the source came from a fresh external Project and the target is a Builder
+workspace, prefer the available Dispatch MCP workspace handoff after writing
+the source brief. Call `start-workspace-app-creation` with a concise prompt,
+the inferred app id, and the brief's repeatable workflow. Pass selected
+workspace resource IDs when they are available, rather than pasting entire
+knowledge files. Continue from the returned workspace path or Builder handoff
+and report the actual verification result.
+
 Use a first-party template only when it materially fits the workflow. Keep the
 new app independent from the source thread's working tree unless the user
 explicitly asks to extend an existing app.
@@ -167,13 +213,20 @@ should make the repeated path obvious without hiding the agent's judgment:
 - Give each important repeated moment a clear button, such as “Analyze,”
   “Suggest options,” “Draft,” “Review,” or “Publish.” Use the source's actual
   vocabulary when it is clear.
-- Put deterministic reads, writes, approvals, and publishing in `actions/`
-  with `defineAction`. The UI and agent must call the same action surface.
+- Put deterministic reads, writes, approvals, provider fetches, and publishing
+  in focused `actions/` with `defineAction`. The UI and agent must call the
+  same action surface.
+- If a workflow is framed as research, analysis, generation, recommendation,
+  or synthesis, start it in the AgentSidebar and let the agent orchestrate
+  those actions. Do not hide an AI-shaped multi-step workflow behind one
+  opaque action just because the implementation is deterministic.
 - Use application state for the current screen, selected item, and focused
   object so the agent can see where the user is.
-- Use `sendToAgentChat({ message, context, submit: true })` for intentional
-  button-triggered agent work. Use `submit: false` when the user should review
-  or edit the proposed prompt first.
+- Use `sendToAgentChat({ message, context, submit: true, openSidebar: true })`
+  for intentional button-triggered agent work. Use `submit: false` when the
+  user should review or edit the proposed prompt in the AgentSidebar first.
+  Keep follow-up and revision prompts in that same thread; do not add a second
+  freeform textbox beside the result.
 - Pass IDs, URLs, and bounded summaries in context. Do not paste large provider
   dumps into prompts, call an LLM directly from the browser, or invent fake
   progress.

package/corpus/templates/forms/.agents/skills/turn-into-app/agents/openai.yaml

@@ -1,4 +1,4 @@
 interface:
   display_name: "Turn Into App"
-  short_description: "Turn a thread or skill into a runnable app"
-  default_prompt: "Scan the current thread, turn the workflow into a new Agent-Native app with clear buttons, run it locally, verify it, and complete the deployment handoff."
+  short_description: "Turn project context or a workflow into a runnable app"
+  default_prompt: "Use the visible project context first, then any supplied workflow. Turn the instructions, knowledge files, and selected successful runs into a new Agent-Native app with clear buttons, run it locally, verify it, and complete the deployment handoff."