@agent-native/core 0.146.7 → 0.147.0

package/dist/notifications/routes.d.ts

@@ -28,6 +28,6 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
 } | {
     count?: undefined;
     updated?: undefined;
-    ok: boolean;
     error?: undefined;
+    ok: boolean;
 }>>;

package/dist/provider-api/actions/provider-api.d.ts

@@ -311,8 +311,8 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         notes?: string | undefined;
         scope?: "org" | "user" | undefined;
     }, {
-        message?: undefined;
         id?: undefined;
+        message?: undefined;
         provider?: undefined;
         deleted?: undefined;
         providers: {
@@ -329,9 +329,9 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         registered?: undefined;
         label?: undefined;
     } | {
+        id?: undefined;
         message?: undefined;
         count?: undefined;
-        id?: undefined;
         deleted?: undefined;
         providers?: undefined;
         found: boolean;

package/dist/server/agents-bundle.d.ts

@@ -96,6 +96,8 @@ export interface AgentsBundle {
 }
 export interface AgentsBundleReadOptions {
     instructions?: AgentNativeInstructionsConfig;
+    /** Additional skill roots supplied by a local host, such as installed plugins. */
+    additionalSkillDirs?: string[];
 }
 export interface AgentInstructionPaths {
     runtime: string;

package/dist/server/agents-bundle.js

@@ -230,6 +230,27 @@ function readSkillsDir(skillsDir, rootForRelative, out, skipExistingNames) {
         }
     }
 }
+function readNestedSkillsDir(skillsDir, rootForRelative, out) {
+    if (!fs.existsSync(skillsDir))
+        return;
+    readSkillsDir(skillsDir, rootForRelative, out, true);
+    let entries;
+    try {
+        entries = fs.readdirSync(skillsDir, { withFileTypes: true });
+    }
+    catch {
+        return;
+    }
+    for (const entry of entries) {
+        if (!entry.isDirectory() || entry.name === "." || entry.name === "..") {
+            continue;
+        }
+        const nestedDir = path.join(skillsDir, entry.name);
+        if (fs.existsSync(path.join(nestedDir, "SKILL.md")))
+            continue;
+        readSkillsDir(nestedDir, rootForRelative, out, true);
+    }
+}
 /**
  * Read AGENTS.md + all skills directly from the filesystem rooted at `cwd`.
  * Optionally also reads a workspace-core's AGENTS.md and skills directory
@@ -256,9 +277,9 @@ export function readAgentsBundleFromFs(cwd, workspaceSource = null, options = {}
     // overwrite the template's. `.agents/skills` is canonical; `.agent/skills`
     // is accepted as a legacy alias and does not override canonical skills.
     const skills = {};
-    for (const [index, relSkillsDir] of TEMPLATE_SKILLS_DIRS.entries()) {
+    for (const relSkillsDir of TEMPLATE_SKILLS_DIRS) {
         try {
-            readSkillsDir(path.join(cwd, relSkillsDir), cwd, skills, index > 0);
+            readNestedSkillsDir(path.join(cwd, relSkillsDir), cwd, skills);
         }
         catch { }
     }
@@ -268,6 +289,14 @@ export function readAgentsBundleFromFs(cwd, workspaceSource = null, options = {}
         }
         catch { }
     }
+    for (const skillsDir of options.additionalSkillDirs ?? []) {
+        try {
+            readNestedSkillsDir(skillsDir, cwd, skills);
+        }
+        catch {
+            // Optional host-provided skills must not make the coding session fail.
+        }
+    }
     return {
         // Keep the old field useful for callers that only know about the runtime
         // bundle. Audience-aware consumers should use the explicit fields.

package/dist/server/credential-provider.d.ts

@@ -85,6 +85,12 @@ export declare function isDeployCredentialFallbackAllowed(): boolean;
 export declare function canUseDeployCredentialFallbackForRequest(key?: string): boolean;
 type BuilderCredentialSource = "user" | "org" | "workspace" | "env";
 export declare function isBuilderPrivateKey(value: string | null | undefined): boolean;
+export interface BuilderCredentialLookupIdentity {
+    /** The verified owner of a background run, when it has no browser request. */
+    userEmail?: string | null;
+    /** The verified organization attached to that run, when one exists. */
+    orgId?: string | null;
+}
 /**
  * Resolve a Builder credential for the current request. User/org credentials
  * win; deployment env is only a fallback. This lets local/root .env keys keep
@@ -153,13 +159,13 @@ export interface BuilderCredentialsDetailed {
  * Callers that only need the plain credential bundle (the historical shape)
  * should use `resolveBuilderCredentials()` instead.
  */
-export declare function resolveBuilderCredentialsDetailed(): Promise<BuilderCredentialsDetailed>;
+export declare function resolveBuilderCredentialsDetailed(identity?: BuilderCredentialLookupIdentity): Promise<BuilderCredentialsDetailed>;
 /**
  * Resolve the Builder assistant credential bundle from one complete scope.
  * Kept to its original return shape (no `source`/`lookupFailed`) for existing
  * callers; use `resolveBuilderCredentialsDetailed()` for those fields.
  */
-export declare function resolveBuilderCredentials(): Promise<{
+export declare function resolveBuilderCredentials(identity?: BuilderCredentialLookupIdentity): Promise<{
     privateKey: string | null;
     publicKey: string | null;
     userId: string | null;

package/dist/server/credential-provider.js

@@ -444,8 +444,8 @@ async function resolveScopedBuilderCredential(key) {
         cause: orgLookupCause,
     };
 }
-async function resolveScopedBuilderCredentials() {
-    const email = getRequestUserEmail();
+async function resolveScopedBuilderCredentials(identity) {
+    const email = identity?.userEmail?.trim() || getRequestUserEmail();
     if (!email)
         return { creds: null, lookupFailed: false };
     const traceLookup = shouldTraceCredentialResolve();
@@ -463,7 +463,7 @@ async function resolveScopedBuilderCredentials() {
         if (await isCompleteBuilderConnection(userCreds)) {
             return { creds: userCreds, lookupFailed: false };
         }
-        let orgId = getRequestOrgId();
+        let orgId = identity?.orgId?.trim() || getRequestOrgId();
         let orgSource = orgId
             ? "request"
             : "none";
@@ -527,8 +527,12 @@ export async function resolveBuilderCredential(key) {
     const envValue = canUseBuilderDeployCredentialFallbackForRequest()
         ? (readDeployCredentialEnv(key) ?? null)
         : null;
-    if (envValue)
+    if (envValue) {
+        // A deploy fallback is still useful, but it must not turn a transient
+        // credential-store failure into a clean connected result for Builder.
+        assertCredentialStoreReadable(scoped);
         return envValue;
+    }
     // Nothing answered AND the store never gave a real answer: that is not
     // "not connected", it is "we could not look".
     assertCredentialStoreReadable(scoped);
@@ -589,8 +593,8 @@ export async function resolveBuilderCredentialSource() {
  * Callers that only need the plain credential bundle (the historical shape)
  * should use `resolveBuilderCredentials()` instead.
  */
-export async function resolveBuilderCredentialsDetailed() {
-    const { creds: scoped, lookupFailed, cause, } = await resolveScopedBuilderCredentials();
+export async function resolveBuilderCredentialsDetailed(identity) {
+    const { creds: scoped, lookupFailed, cause, } = await resolveScopedBuilderCredentials(identity);
     if (scoped) {
         const { privateKey, publicKey, userId, orgName, orgKind, subscription, subscriptionLevel, subscriptionName, isEnterprise, isFreeAccount, source, } = scoped;
         return {
@@ -683,8 +687,8 @@ export async function resolveBuilderCredentialsDetailed() {
  * Kept to its original return shape (no `source`/`lookupFailed`) for existing
  * callers; use `resolveBuilderCredentialsDetailed()` for those fields.
  */
-export async function resolveBuilderCredentials() {
-    const { privateKey, publicKey, userId, orgName, orgKind, subscription, subscriptionLevel, subscriptionName, isEnterprise, isFreeAccount, } = await resolveBuilderCredentialsDetailed();
+export async function resolveBuilderCredentials(identity) {
+    const { privateKey, publicKey, userId, orgName, orgKind, subscription, subscriptionLevel, subscriptionName, isEnterprise, isFreeAccount, } = await resolveBuilderCredentialsDetailed(identity);
     return {
         privateKey,
         publicKey,
@@ -1210,7 +1214,7 @@ export async function resolveSecretDetailed(key) {
         }
         return {
             value: envFallback,
-            lookupFailed: lookupFailed && !envFallback,
+            lookupFailed,
             cause,
         };
     }

package/dist/shared/chat-first-app-creation.d.ts

@@ -0,0 +1,19 @@
+export type ChatFirstAppCreationVaultAccessMode = "all-apps" | "manual";
+export interface ChatFirstAppCreationResource {
+    name: string;
+    kind: string;
+    path: string;
+}
+export interface ChatFirstAppCreationPromptInput {
+    appId: string;
+    prompt: string;
+    selectedKeys: string[];
+    selectedResources: ChatFirstAppCreationResource[];
+    vaultAccessMode: ChatFirstAppCreationVaultAccessMode;
+    appRoot?: string;
+    mountPath?: string;
+    scaffoldCommand?: string;
+    additionalInstructions?: string[];
+}
+export declare function titleFromChatFirstAppPrompt(prompt: string): string;
+export declare function buildChatFirstAppCreationPrompt(input: ChatFirstAppCreationPromptInput): string;

package/dist/shared/chat-first-app-creation.js

@@ -0,0 +1,75 @@
+function slugify(value) {
+    return value
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "")
+        .replace(/^[^a-z]+/, "")
+        .slice(0, 48);
+}
+export function titleFromChatFirstAppPrompt(prompt) {
+    const cleaned = prompt
+        .replace(/\b(build|create|make|an?|the|app|tool|dashboard)\b/gi, " ")
+        .replace(/\s+/g, " ")
+        .trim();
+    return slugify(cleaned || "new-app") || "new-app";
+}
+export function buildChatFirstAppCreationPrompt(input) {
+    const appRoot = input.appRoot?.trim() || `apps/${input.appId}`;
+    const mountPath = input.mountPath?.trim() || `/${input.appId}`;
+    const packagePath = `${appRoot.replace(/\/+$/, "")}/package.json`;
+    const keyList = input.selectedKeys.join(", ");
+    const grantRequest = input.vaultAccessMode === "all-apps"
+        ? "Dispatch vault access: all saved vault keys are available to every workspace app by default. No per-app vault grants are needed."
+        : keyList
+            ? `Requested Dispatch vault key grants for this app: ${keyList}`
+            : "Requested Dispatch vault key grants for this app: none";
+    const resourceList = input.selectedResources.length
+        ? input.selectedResources
+            .map((resource) => `- ${resource.name} (${resource.kind}, ${resource.path})`)
+            .join("\n")
+        : "none";
+    const scaffoldInstructions = input.scaffoldCommand
+        ? ["", "Scaffold instructions:", input.scaffoldCommand]
+        : [];
+    return [
+        "Create a new agent-native app in this workspace.",
+        "This is a new workspace app request, not a feature request for the current app.",
+        ...scaffoldInstructions,
+        "",
+        `Suggested app name: ${input.appId} (you may adjust the slug if it conflicts)`,
+        `User prompt: ${input.prompt.trim()}`,
+        `Generate a concise one-sentence app description from the user prompt before coding; save it in ${packagePath} \"description\" so Dispatch and A2A can describe the app.`,
+        "If the user mentions a product or company such as Granola, Loom, Superhuman, Linear, or Notion, treat it as product inspiration unless they explicitly ask to connect to that service. Do not invent or require third-party API keys like GRANOLA_API_KEY just because a product is named.",
+        grantRequest,
+        `Requested Dispatch workspace resources for this app:\n${resourceList}`,
+        "Dispatch workspace resources with scope=all are inherited workspace context. Do not copy or sync them into the new app; every workspace app reads them at runtime and may override with app shared or personal resources.",
+        "",
+        "Pick a UI template that fits the user's prompt - analytics, assets, brain, calendar, chat, content, design, dispatch, forms, mail, slides, or clips when none of the others fit.",
+        'If you use the chat template, treat it as scaffolding only: the finished app must use the requested app\'s real name, home screen, navigation, package metadata, and manifest, and it must not leave visible "Chat", "Starter", "Blank app", or "New app" UI behind.',
+        `Use the workspace app layout: create it under ${appRoot}, mount it at ${mountPath}, keep it on the shared workspace database/hosting model, and avoid table-name collisions by namespacing any new domain tables to the app.`,
+        `Important routing rule: from outside the app, link to ${mountPath}; inside ${appRoot}, React Router routes are app-local. Use <Link to=\"/review\"> and navigate(\"/review\"), not \"${mountPath}/review\"; APP_BASE_PATH supplies the mounted prefix, and hardcoding it causes doubled URLs.`,
+        'Prefer useActionQuery/useActionMutation for actions. If you must raw-fetch framework endpoints, wrap them with agentNativePath("/_agent-native/actions/<name>") so mounted apps call the right URL.',
+        `Use relative workspace links like ${mountPath}. Do not hardcode localhost, 127.0.0.1, 8080, 8100, or any dev port; the active workspace gateway or Desktop shell owns the port.`,
+        "Use the framework/template UI stack: shadcn/ui components and @tabler/icons-react. Do not add lucide-react or another icon library for standard UI.",
+        "Existing first-party apps are neighbors, not implementation details for this app. If the user's prompt mentions Mail, Calendar, Analytics, Brain, Assets, Dispatch, or other templates, treat them as existing hosted/connected apps that this app can link to or call through A2A/default connected agents. For example, Mail, Calendar, Analytics, Brain, and Assets already exist at https://mail.agent-native.com, https://calendar.agent-native.com, https://analytics.agent-native.com, https://brain.agent-native.com, and https://assets.agent-native.com.",
+        `Do not create wrapper apps or scaffold child apps/routes for Mail, Calendar, Analytics, Brain, Assets, etc. inside ${appRoot} just so this app can access them. If the request is a cross-app dashboard or overview, build only the new dashboard/overview app and delegate to the existing apps for domain work.`,
+        "Only create another first-party app when the user explicitly asks for a customized app from that template; otherwise keep using the hosted/shared app so improvements to the base app keep flowing to users.",
+        "Do not satisfy this by adding a route, page, component, or file inside apps/chat or another existing app unless the user explicitly asks to modify that existing app.",
+        input.vaultAccessMode === "all-apps"
+            ? "Do not create per-app Dispatch vault grants unless the workspace switches vault access to manual or the user explicitly asks for manual grants."
+            : keyList
+                ? `After the app exists, grant the selected Dispatch vault keys to appId "${input.appId}" and sync them once the app server is available. Treat these as requested grants, not active grants before creation succeeds.`
+                : "Do not grant any Dispatch vault keys unless the user asks later.",
+        input.selectedResources.length
+            ? `After the app exists, grant the selected Dispatch workspace resources to appId "${input.appId}". Do not sync All-app workspace resources; they are inherited.`
+            : "Do not grant any selected-only Dispatch workspace resources unless the user asks later.",
+        "",
+        "App readiness requirements before handing off:",
+        `- Ensure ${packagePath} exists with displayName/name and a concise description; Dispatch discovers workspace apps from the workspace filesystem and app metadata.`,
+        "- Update the app manifest/package/deploy metadata needed by the existing workspace deployment model.",
+        `- Ensure the React Router client entry preserves APP_BASE_PATH/VITE_APP_BASE_PATH so ${mountPath} hydrates correctly.`,
+        "- Verify the app's agent card/A2A metadata is ready so Dispatch can discover and delegate to the app after deployment. Every sibling workspace app is available over A2A by default through call-agent, with names and descriptions from the workspace app registry.",
+        `When it is ready, start or update the workspace dev server and navigate the user to ${mountPath} on the workspace origin. Do not prefix it with /dispatch/, /apps/, /workspace/, or any other Dispatch tab.`,
+        ...(input.additionalInstructions ?? []),
+    ].join("\n");
+}

package/dist/shared/document-title.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Browser titles must be human-readable strings. React Router stringifies a
+ * structured `title` value, which otherwise leaks the whole payload into the
+ * browser tab.
+ */
+export declare function isHumanReadableDocumentTitle(value: unknown): value is string;
+export declare function normalizeDocumentTitle(value: unknown, fallbackTitle: string): string;

package/dist/shared/document-title.js

@@ -0,0 +1,29 @@
+const STRUCTURED_TITLE_START = /^[\[{]/;
+/**
+ * Browser titles must be human-readable strings. React Router stringifies a
+ * structured `title` value, which otherwise leaks the whole payload into the
+ * browser tab.
+ */
+export function isHumanReadableDocumentTitle(value) {
+    if (typeof value !== "string")
+        return false;
+    const title = value.trim();
+    if (!title)
+        return false;
+    if (!STRUCTURED_TITLE_START.test(title))
+        return true;
+    try {
+        const parsed = JSON.parse(title);
+        return parsed === null || typeof parsed !== "object";
+    }
+    catch {
+        return true;
+    }
+}
+export function normalizeDocumentTitle(value, fallbackTitle) {
+    if (isHumanReadableDocumentTitle(value))
+        return value.trim();
+    if (isHumanReadableDocumentTitle(fallbackTitle))
+        return fallbackTitle.trim();
+    return "Agent Native";
+}

package/dist/shared/index.d.ts

@@ -3,6 +3,7 @@ export { agentEnv, type EnvVar } from "./agent-env.js";
 export { extractOAuthStateAppId } from "./oauth-state.js";
 export { SIGN_IN_CONTINUATION_MAX_LENGTH, SIGN_IN_CONTINUATION_PARAM, SIGN_IN_ENTRY_PATH, SIGN_IN_LEGACY_ENTRY_PATH, SIGN_IN_LEGACY_RETURN_PARAM, decodeContinuation, encodeContinuation, normalizeAppPath, signInJourney, signInJourneyInlineScript, type SignInJourney, type SignInJourneyInput, } from "./sign-in-journey.js";
 export { truncate } from "./truncate.js";
+export { isHumanReadableDocumentTitle, normalizeDocumentTitle, } from "./document-title.js";
 export { injectDocumentMarkup } from "./html-document.js";
 export { withBuilderUtmTrackingParams } from "./builder-link-tracking.js";
 export { buildRuntimeConfigPrompt, formatRuntimeConfigReport, getRuntimeConfigReport, parseRuntimeConfigReport, runtimeConfigRequirementsFromSearchParams, type RuntimeConfigEnvironment, type RuntimeConfigIssue, type RuntimeConfigIssueCode, type RuntimeConfigIssueSeverity, type RuntimeConfigPhase, type RuntimeConfigReport, type RuntimeConfigRequirements, } from "./runtime-config.js";
@@ -10,6 +11,7 @@ export { llmConnectionTrackingProperties, normalizeLlmConnection, type LlmConnec
 export { DISPATCH_WORKSPACE_ROOT_REDIRECTS, RESERVED_WORKSPACE_APP_IDS, assertValidWorkspaceAppId, getWorkspaceAppIdValidationError, isValidWorkspaceAppIdFormat, } from "./workspace-app-id.js";
 export { DEFAULT_WORKSPACE_APP_AUDIENCE, WORKSPACE_APP_AUDIENCES, normalizeWorkspaceAppAudience, normalizeWorkspaceAppPathList, workspaceAppAudienceFromEnv, workspaceAppAudienceFromPackageJson, workspaceAppRouteAccessFromEnv, workspaceAppRouteAccessFromPackageJson, type WorkspaceAppRouteAccess, type WorkspaceAppRouteAccessFromConfig, type WorkspaceAppAudience, } from "./workspace-app-audience.js";
 export { AGENT_NATIVE_OPEN_PATH, AGENT_SIDEBAR_QUERY_PARAM, AGENT_SIDEBAR_QUERY_VALUE_CLOSED, isAgentNativeOpenDeepLink, withCollapsedAgentSidebarParam, } from "./agent-sidebar-url.js";
+export { buildChatFirstAppCreationPrompt, titleFromChatFirstAppPrompt, type ChatFirstAppCreationPromptInput, type ChatFirstAppCreationResource, type ChatFirstAppCreationVaultAccessMode, } from "./chat-first-app-creation.js";
 export { createPollEngine, type PollEngineOptions, type PollEngineHandle, } from "./poll-engine.js";
 export { AGENT_NATIVE_DEFAULT_SOCIAL_IMAGE, AGENT_NATIVE_SOCIAL_IMAGE_CACHE_BUSTER, AGENT_NATIVE_SOCIAL_IMAGE_ALT, AGENT_NATIVE_SOCIAL_IMAGE_HEIGHT, AGENT_NATIVE_SOCIAL_IMAGE_PATH, AGENT_NATIVE_SOCIAL_IMAGE_TYPE, AGENT_NATIVE_SOCIAL_IMAGE_WIDTH, defaultSocialImageMeta, withAgentNativeSocialImageCacheBuster, withDefaultSocialImage, type SocialMetaDescriptor, } from "./social-meta.js";
 export { EMBED_MODE_QUERY_PARAM, EMBED_SESSION_COOKIE, EMBED_START_PATH, EMBED_TOKEN_QUERY_PARAM, } from "./embed-auth.js";

package/dist/shared/index.js

@@ -3,6 +3,7 @@ export { agentEnv } from "./agent-env.js";
 export { extractOAuthStateAppId } from "./oauth-state.js";
 export { SIGN_IN_CONTINUATION_MAX_LENGTH, SIGN_IN_CONTINUATION_PARAM, SIGN_IN_ENTRY_PATH, SIGN_IN_LEGACY_ENTRY_PATH, SIGN_IN_LEGACY_RETURN_PARAM, decodeContinuation, encodeContinuation, normalizeAppPath, signInJourney, signInJourneyInlineScript, } from "./sign-in-journey.js";
 export { truncate } from "./truncate.js";
+export { isHumanReadableDocumentTitle, normalizeDocumentTitle, } from "./document-title.js";
 export { injectDocumentMarkup } from "./html-document.js";
 export { withBuilderUtmTrackingParams } from "./builder-link-tracking.js";
 export { buildRuntimeConfigPrompt, formatRuntimeConfigReport, getRuntimeConfigReport, parseRuntimeConfigReport, runtimeConfigRequirementsFromSearchParams, } from "./runtime-config.js";
@@ -10,6 +11,7 @@ export { llmConnectionTrackingProperties, normalizeLlmConnection, } from "./llm-
 export { DISPATCH_WORKSPACE_ROOT_REDIRECTS, RESERVED_WORKSPACE_APP_IDS, assertValidWorkspaceAppId, getWorkspaceAppIdValidationError, isValidWorkspaceAppIdFormat, } from "./workspace-app-id.js";
 export { DEFAULT_WORKSPACE_APP_AUDIENCE, WORKSPACE_APP_AUDIENCES, normalizeWorkspaceAppAudience, normalizeWorkspaceAppPathList, workspaceAppAudienceFromEnv, workspaceAppAudienceFromPackageJson, workspaceAppRouteAccessFromEnv, workspaceAppRouteAccessFromPackageJson, } from "./workspace-app-audience.js";
 export { AGENT_NATIVE_OPEN_PATH, AGENT_SIDEBAR_QUERY_PARAM, AGENT_SIDEBAR_QUERY_VALUE_CLOSED, isAgentNativeOpenDeepLink, withCollapsedAgentSidebarParam, } from "./agent-sidebar-url.js";
+export { buildChatFirstAppCreationPrompt, titleFromChatFirstAppPrompt, } from "./chat-first-app-creation.js";
 export { createPollEngine, } from "./poll-engine.js";
 export { AGENT_NATIVE_DEFAULT_SOCIAL_IMAGE, AGENT_NATIVE_SOCIAL_IMAGE_CACHE_BUSTER, AGENT_NATIVE_SOCIAL_IMAGE_ALT, AGENT_NATIVE_SOCIAL_IMAGE_HEIGHT, AGENT_NATIVE_SOCIAL_IMAGE_PATH, AGENT_NATIVE_SOCIAL_IMAGE_TYPE, AGENT_NATIVE_SOCIAL_IMAGE_WIDTH, defaultSocialImageMeta, withAgentNativeSocialImageCacheBuster, withDefaultSocialImage, } from "./social-meta.js";
 export { EMBED_MODE_QUERY_PARAM, EMBED_SESSION_COOKIE, EMBED_START_PATH, EMBED_TOKEN_QUERY_PARAM, } from "./embed-auth.js";

package/dist/styles/chat-history-list.css

@@ -1 +1,17 @@
 @import "@agent-native/toolkit/chat-history.css";
+
+/* Chat-first rails share this geometry across Dispatch and Electron. Keep
+   the row at the same compact rhythm as the primary nav and app list. */
+section[data-chat-first-chat-history]
+  .an-chat-history--rail
+  .an-chat-history-row {
+  margin-inline: 0;
+}
+
+section[data-chat-first-chat-history]
+  .an-chat-history--rail
+  .an-chat-history-row__button {
+  min-height: 28px;
+  padding-block: 4px;
+  padding-inline: 8px 32px;
+}

package/dist/templates/chat/.agents/skills/adding-a-feature/SKILL.md

@@ -81,6 +81,13 @@ or other file-like payloads, design the upload path in the same change:
 provider upload first, then URL/id/blob handle in SQL. Do not add base64/binary
 columns or stuff files into `application_state`.
 
+If the feature adds a server-side dependency carrying a native binary or heavy
+runtime — headless browser, ffmpeg, image/video processing, ML runtime — read
+the `performance` skill §9 before adding it. A deployed app has one `/*` page
+function that every visitor's cache miss wakes, and it ships whatever the server
+bundle depends on. Run that work from a background function or a job so the page
+function never carries the weight.
+
 **If the action produces or lists a navigable resource**, add a `link` builder that returns `{ url: buildDeepLink({ app, view, params }), label }`. External coding agents and MCP hosts (Claude / ChatGPT / Claude Code / Cowork / Codex, over MCP/A2A) then surface an "Open in … →" deep link that drops the user back into the running UI focused on the record — for free. If a compatible MCP host should render an inline review/edit surface, also add `mcpApp` with `embedApp()` so the action embeds the real React app route instead of a one-off HTML UI. The `link` builder and `mcpApp` metadata must be pure and synchronous (no I/O). Any external-agent read/ingest action must be `http: { method: "GET" }` + `readOnly: true` + `publicAgent: { expose: true, readOnly: true, requiresAuth: true }`. See the `external-agents` skill.
 
 ### 3. Skills / Instructions
@@ -195,4 +202,6 @@ TL;DR: declare the vocabulary once with `defineAppRoles({ appId, roles, defaultR
 - **create-skill** — How to create skills for new patterns (area 3 in detail)
 - **storing-data** — Where to store the feature's data
 - **real-time-sync** — How the UI stays in sync when the agent writes data
+- **performance** — Query/load cost, and (§9) cold-start artifact size when a
+  feature adds a server-side dependency
 - **internationalization** — How to update localized UI copy and catalogs

package/dist/templates/chat/.agents/skills/turn-into-app/SKILL.md

@@ -3,8 +3,9 @@ name: turn-into-app
 description: >-
   Turn visible project context, a proven thread, skill, or workflow into a
   runnable Agent-Native app with simple buttons, visible agent steps, preview,
-  and deployment handoff. Use when a user invokes `/turn-into-app` or asks to
-  make a workflow into an app, including from Claude or ChatGPT on the web.
+  and deployment handoff. Use when a user invokes `/turn-into-app`,
+  `/make-into-app`, or asks to make a workflow into an app, including from
+  Claude or ChatGPT on the web.
 user-invocable: true
 scope: both
 metadata:
@@ -38,6 +39,15 @@ The build location depends on the host. Treat this as a hard routing rule:
   workspace, follow the local implementation steps below. The local agent may
   scaffold, edit, run, and verify the app there.
 
+Once the source brief is sufficient to identify a repeatable workflow, the
+handoff is non-interactive. Do not ask the user for visual, product, copy,
+layout, template, integration, or implementation choices that can be resolved
+from the source. Select the source's recommended option; otherwise choose the
+most direct conventional default and record the assumption for later review.
+Only stop for a genuine hard blocker such as missing authorization, a
+destructive external action, an ambiguous target workspace, or no identifiable
+workflow at all.
+
 ## Default behavior
 
 For a local code-agent runtime this is an end-to-end build skill, not a request
@@ -104,14 +114,16 @@ before creating the app. Read the host-provided context in this order:
 Record the brief with these headings before handoff: source and provenance,
 project goal, configuration and constraints, knowledge sources, repeatable
 workflow, inputs and outputs, judgment and review points, representative runs,
-integrations and permissions, and unknowns. This is the compact contract for
+integrations and permissions, and unknowns and assumptions. This is the compact contract for
 the app. It keeps the new app useful without pretending that hidden Project
 history was imported. See [the fresh Project reference](references/fresh-project.md)
 for the host setup and brief template.
 
-If the visible Project context has no concrete repeatable job, ask for one
-focused clarification or a representative artifact. Do not fall back to a
-generic “what app do you want to make?” builder.
+If the visible Project context has no concrete repeatable job and no primary
+goal can be inferred, ask for one focused clarification or a representative
+artifact. Otherwise use the project's primary goal and source conventions; do
+not ask a questionnaire and do not fall back to a generic “what app do you
+want to make?” builder.
 
 ## Source selection guard
 

package/dist/templates/chat/.agents/skills/turn-into-app/references/fresh-project.md

@@ -36,7 +36,7 @@ Inputs and outputs:
 Judgment and review points:
 Representative runs: none, or 1-3 selected examples
 Integrations and permissions:
-Unknowns and follow-up:
+Unknowns and assumptions:
 ```
 
 Keep source references bounded. Prefer a file name, URL, resource ID, or short
@@ -69,6 +69,13 @@ do not fall back to a local sandbox build. Claude Code and Codex Code are the
 local-agent exception and may follow the implementation steps in the main
 skill.
 
+The brief is an implementation authorization, not a questionnaire. After a
+repeatable workflow is identifiable, choose any source-recommended option
+automatically. For unresolved non-blocking choices, use the most direct
+conventional default, record it under assumptions, and continue. Ask only when
+there is no identifiable workflow, no authorized target workspace, or a
+destructive/credential boundary genuinely prevents the handoff.
+
 In a new Project chat, say:
 
 ```text

package/dist/templates/default/.agents/skills/adding-a-feature/SKILL.md

@@ -81,6 +81,13 @@ or other file-like payloads, design the upload path in the same change:
 provider upload first, then URL/id/blob handle in SQL. Do not add base64/binary
 columns or stuff files into `application_state`.
 
+If the feature adds a server-side dependency carrying a native binary or heavy
+runtime — headless browser, ffmpeg, image/video processing, ML runtime — read
+the `performance` skill §9 before adding it. A deployed app has one `/*` page
+function that every visitor's cache miss wakes, and it ships whatever the server
+bundle depends on. Run that work from a background function or a job so the page
+function never carries the weight.
+
 **If the action produces or lists a navigable resource**, add a `link` builder that returns `{ url: buildDeepLink({ app, view, params }), label }`. External coding agents and MCP hosts (Claude / ChatGPT / Claude Code / Cowork / Codex, over MCP/A2A) then surface an "Open in … →" deep link that drops the user back into the running UI focused on the record — for free. If a compatible MCP host should render an inline review/edit surface, also add `mcpApp` with `embedApp()` so the action embeds the real React app route instead of a one-off HTML UI. The `link` builder and `mcpApp` metadata must be pure and synchronous (no I/O). Any external-agent read/ingest action must be `http: { method: "GET" }` + `readOnly: true` + `publicAgent: { expose: true, readOnly: true, requiresAuth: true }`. See the `external-agents` skill.
 
 ### 3. Skills / Instructions
@@ -195,4 +202,6 @@ TL;DR: declare the vocabulary once with `defineAppRoles({ appId, roles, defaultR
 - **create-skill** — How to create skills for new patterns (area 3 in detail)
 - **storing-data** — Where to store the feature's data
 - **real-time-sync** — How the UI stays in sync when the agent writes data
+- **performance** — Query/load cost, and (§9) cold-start artifact size when a
+  feature adds a server-side dependency
 - **internationalization** — How to update localized UI copy and catalogs

package/dist/templates/default/.agents/skills/turn-into-app/SKILL.md

@@ -3,8 +3,9 @@ name: turn-into-app
 description: >-
   Turn visible project context, a proven thread, skill, or workflow into a
   runnable Agent-Native app with simple buttons, visible agent steps, preview,
-  and deployment handoff. Use when a user invokes `/turn-into-app` or asks to
-  make a workflow into an app, including from Claude or ChatGPT on the web.
+  and deployment handoff. Use when a user invokes `/turn-into-app`,
+  `/make-into-app`, or asks to make a workflow into an app, including from
+  Claude or ChatGPT on the web.
 user-invocable: true
 scope: both
 metadata:
@@ -38,6 +39,15 @@ The build location depends on the host. Treat this as a hard routing rule:
   workspace, follow the local implementation steps below. The local agent may
   scaffold, edit, run, and verify the app there.
 
+Once the source brief is sufficient to identify a repeatable workflow, the
+handoff is non-interactive. Do not ask the user for visual, product, copy,
+layout, template, integration, or implementation choices that can be resolved
+from the source. Select the source's recommended option; otherwise choose the
+most direct conventional default and record the assumption for later review.
+Only stop for a genuine hard blocker such as missing authorization, a
+destructive external action, an ambiguous target workspace, or no identifiable
+workflow at all.
+
 ## Default behavior
 
 For a local code-agent runtime this is an end-to-end build skill, not a request
@@ -104,14 +114,16 @@ before creating the app. Read the host-provided context in this order:
 Record the brief with these headings before handoff: source and provenance,
 project goal, configuration and constraints, knowledge sources, repeatable
 workflow, inputs and outputs, judgment and review points, representative runs,
-integrations and permissions, and unknowns. This is the compact contract for
+integrations and permissions, and unknowns and assumptions. This is the compact contract for
 the app. It keeps the new app useful without pretending that hidden Project
 history was imported. See [the fresh Project reference](references/fresh-project.md)
 for the host setup and brief template.
 
-If the visible Project context has no concrete repeatable job, ask for one
-focused clarification or a representative artifact. Do not fall back to a
-generic “what app do you want to make?” builder.
+If the visible Project context has no concrete repeatable job and no primary
+goal can be inferred, ask for one focused clarification or a representative
+artifact. Otherwise use the project's primary goal and source conventions; do
+not ask a questionnaire and do not fall back to a generic “what app do you
+want to make?” builder.
 
 ## Source selection guard
 

package/dist/templates/default/.agents/skills/turn-into-app/references/fresh-project.md

@@ -36,7 +36,7 @@ Inputs and outputs:
 Judgment and review points:
 Representative runs: none, or 1-3 selected examples
 Integrations and permissions:
-Unknowns and follow-up:
+Unknowns and assumptions:
 ```
 
 Keep source references bounded. Prefer a file name, URL, resource ID, or short
@@ -69,6 +69,13 @@ do not fall back to a local sandbox build. Claude Code and Codex Code are the
 local-agent exception and may follow the implementation steps in the main
 skill.
 
+The brief is an implementation authorization, not a questionnaire. After a
+repeatable workflow is identifiable, choose any source-recommended option
+automatically. For unresolved non-blocking choices, use the most direct
+conventional default, record it under assumptions, and continue. Ask only when
+there is no identifiable workflow, no authorized target workspace, or a
+destructive/credential boundary genuinely prevents the handoff.
+
 In a new Project chat, say:
 
 ```text

package/dist/templates/default/react-router.config.ts

@@ -4,4 +4,22 @@ export default {
   appDirectory: "app",
   ssr: true,
   routeDiscovery: { mode: "initial" },
+
+  // Prerendering writes a route's HTML to a static file at build time, so a CDN
+  // cache miss serves that file instead of cold-starting the SSR function
+  // (seconds of TTFB). It is off here because every route this app ships with is
+  // signed-in and personalized, and a prerendered file is served without the
+  // auth middleware ever running — freezing the wrong page for every visitor is
+  // far worse than a slow first byte.
+  //
+  // Turn it on only for paths that are all of: publicly reachable, rendered from
+  // build-time content alone (no loader data, query string, cookie, session, or
+  // database read), and never answering a redirect — prerender would bake a 301
+  // into a 200 HTML page. Keep the list in one shared constant and derive the
+  // auth plugin's `publicPaths` from it so the two cannot drift:
+  //
+  //   import { PRERENDERED_PUBLIC_PAGE_PATHS } from "./shared/prerendered-public-paths";
+  //   prerender: { paths: () => [...PRERENDERED_PUBLIC_PAGE_PATHS] },
+  //
+  // See `.agents/skills/performance/SKILL.md` §9.
 } satisfies Config;