@agent-native/core 0.147.0 → 0.148.0

package/corpus/templates/factory/app/i18n/en-US.ts

@@ -154,6 +154,31 @@ const messages = {
     metricRuns: "Runs",
     rulesTab: "Rules",
     automationsTab: "Automations",
+    auditTab: "Audit",
+    auditTitle: "Run audit",
+    auditDescription:
+      "See exactly which sources the agent inspected, what it decided, and which actions it took.",
+    auditRefresh: "Refresh",
+    auditLoadError: "Could not load the run audit.",
+    auditEmpty: "No automation runs have been recorded yet.",
+    auditRuns: "Recent runs",
+    auditEventsShort: "events",
+    auditActionsShort: "actions",
+    auditRunDetail: "Evidence and decisions recorded for this run.",
+    auditStarted: "Started",
+    auditFinished: "Finished",
+    auditItems: "Items",
+    auditRunError: "Run error",
+    auditEvidence: "Evidence and decisions",
+    auditNoEvents:
+      "No item-level audit events were recorded. Open the agent thread for the full trace.",
+    auditOpenThread: "Open thread",
+    auditOpenItem: "Open item",
+    auditOpenSource: "Open source",
+    auditInternal: "Factory",
+    auditClearBug: "Clear bug",
+    auditUxImpact: "UX impact",
+    auditOwnerArea: "Owner area",
     automationsTitle: "Automations",
     automationsDescription: "Schedule and run Factory prompts.",
     automationsLoading: "Loading automations...",

package/corpus/templates/factory/app/routes/factory.tsx

@@ -10,10 +10,12 @@ import {
   IconLoader2,
   IconPlayerPlay,
   IconPlus,
+  IconRefresh,
 } from "@tabler/icons-react";
 import { useEffect, useMemo, useState } from "react";
 import { useSearchParams } from "react-router";
 
+import { FactoryAuditView } from "@/components/factory/FactoryAuditView";
 import {
   FactoryCanvas,
   type FactoryCanvasEdge,
@@ -111,7 +113,13 @@ type TriageConfig = {
 };
 
 type Verdict = "correct" | "incorrect" | "uncertain";
-type WorkspaceTab = "map" | "inbox" | "rules" | "automations" | "settings";
+type WorkspaceTab =
+  | "map"
+  | "inbox"
+  | "rules"
+  | "automations"
+  | "audit"
+  | "settings";
 
 type FactoryAutomationRun = {
   id?: string;
@@ -164,6 +172,7 @@ export default function FactoryRoute() {
   const [dirty, setDirty] = useState(false);
   const [selectedNodeId, setSelectedNodeId] = useState<string | null>(null);
   const [selectedEdgeId, setSelectedEdgeId] = useState<string | null>(null);
+  const [auditRefreshToken, setAuditRefreshToken] = useState(0);
 
   function setActiveTab(tab: WorkspaceTab) {
     setSearchParams(
@@ -418,41 +427,62 @@ export default function FactoryRoute() {
             </Button>
           </div>
         </div>
-        <nav
-          className="mt-4 flex items-center gap-1 overflow-x-auto"
-          aria-label={t("factoryRoute.factoryViews")}
-        >
-          <TabButton
-            active={activeTab === "map"}
-            onClick={() => setActiveTab("map")}
-          >
-            Map
-          </TabButton>
-          <TabButton
-            active={activeTab === "inbox"}
-            onClick={() => setActiveTab("inbox")}
-          >
-            Inbox
-          </TabButton>
-          <TabButton
-            active={activeTab === "rules"}
-            onClick={() => setActiveTab("rules")}
-          >
-            {t("factoryRoute.rulesTab")}
-          </TabButton>
-          <TabButton
-            active={activeTab === "automations"}
-            onClick={() => setActiveTab("automations")}
+        <div className="mt-4 flex items-center gap-2">
+          <nav
+            className="flex min-w-0 flex-1 items-center gap-1 overflow-x-auto"
+            aria-label={t("factoryRoute.factoryViews")}
           >
-            {t("factoryRoute.automationsTab")}
-          </TabButton>
-          <TabButton
-            active={activeTab === "settings"}
-            onClick={() => setActiveTab("settings")}
-          >
-            Settings
-          </TabButton>
-        </nav>
+            <TabButton
+              active={activeTab === "map"}
+              onClick={() => setActiveTab("map")}
+            >
+              Map
+            </TabButton>
+            <TabButton
+              active={activeTab === "inbox"}
+              onClick={() => setActiveTab("inbox")}
+            >
+              Inbox
+            </TabButton>
+            <TabButton
+              active={activeTab === "rules"}
+              onClick={() => setActiveTab("rules")}
+            >
+              {t("factoryRoute.rulesTab")}
+            </TabButton>
+            <TabButton
+              active={activeTab === "automations"}
+              onClick={() => setActiveTab("automations")}
+            >
+              {t("factoryRoute.automationsTab")}
+            </TabButton>
+            <TabButton
+              active={activeTab === "audit"}
+              onClick={() => setActiveTab("audit")}
+            >
+              {t("factoryRoute.auditTab")}
+            </TabButton>
+            <TabButton
+              active={activeTab === "settings"}
+              onClick={() => setActiveTab("settings")}
+            >
+              Settings
+            </TabButton>
+          </nav>
+          {activeTab === "audit" && (
+            <Button
+              type="button"
+              variant="ghost"
+              size="icon"
+              className="size-8 shrink-0 text-muted-foreground hover:text-foreground"
+              aria-label={t("factoryRoute.auditRefresh")}
+              title={t("factoryRoute.auditRefresh")}
+              onClick={() => setAuditRefreshToken((current) => current + 1)}
+            >
+              <IconRefresh className="size-4" />
+            </Button>
+          )}
+        </div>
       </header>
 
       <main className="min-h-0 flex-1 overflow-y-auto">
@@ -526,6 +556,11 @@ export default function FactoryRoute() {
           <RulesView t={t} />
         ) : activeTab === "automations" ? (
           <AutomationsView factoryId={factoryId} t={t} />
+        ) : activeTab === "audit" ? (
+          <FactoryAuditView
+            factoryId={factoryId}
+            refreshToken={auditRefreshToken}
+          />
         ) : (
           <SettingsView t={t} />
         )}
@@ -559,6 +594,7 @@ function parseWorkspaceTab(value: string | null): WorkspaceTab {
   return value === "inbox" ||
     value === "rules" ||
     value === "automations" ||
+    value === "audit" ||
     value === "settings"
     ? value
     : "map";
@@ -729,7 +765,7 @@ function AutomationsView({
                     <span className="block truncate text-sm font-medium">
                       {automation.name}
                     </span>
-                    <span className="mt-1 block text-xs text-muted-foreground">
+                    <span className="mt-1 block truncate text-xs text-muted-foreground">
                       {automation.enabled
                         ? t("factoryRoute.automationEnabled")
                         : t("factoryRoute.automationDisabled")}
@@ -956,8 +992,11 @@ function formatModelName(model: string | null | undefined) {
 }
 
 function InboxView({ t }: { t: ReturnType<typeof useT> }) {
+  const [searchParams, setSearchParams] = useSearchParams();
   const [status, setStatus] = useState("");
-  const [selectedId, setSelectedId] = useState<string | null>(null);
+  const [selectedId, setSelectedId] = useState<string | null>(
+    searchParams.get("itemId"),
+  );
   const [feedbackNote, setFeedbackNote] = useState("");
   const [verdict, setVerdict] = useState<Verdict | null>(null);
   const listQuery = useActionQuery("list-triage-items", {
@@ -989,6 +1028,24 @@ function InboxView({ t }: { t: ReturnType<typeof useT> }) {
   const normalizedItems = Array.isArray(items) ? items : (items.items ?? []);
   const selectedItem = detailQuery.data as TriageItem | undefined;
 
+  useEffect(() => {
+    setSelectedId(searchParams.get("itemId"));
+  }, [searchParams]);
+
+  function selectItem(itemId: string) {
+    setSelectedId(itemId);
+    setVerdict(null);
+    setFeedbackNote("");
+    setSearchParams(
+      (current) => {
+        const next = new URLSearchParams(current);
+        next.set("itemId", itemId);
+        return next;
+      },
+      { replace: true },
+    );
+  }
+
   return (
     <div className="grid gap-4 p-4 lg:grid-cols-[minmax(0,1.3fr)_minmax(320px,.7fr)] lg:p-6">
       <Card>
@@ -1046,11 +1103,7 @@ function InboxView({ t }: { t: ReturnType<typeof useT> }) {
                     key={id}
                     type="button"
                     className={`grid w-full gap-3 p-4 text-left transition-colors hover:bg-muted/50 sm:grid-cols-[1.1fr_.7fr_.9fr_1.6fr] ${selectedId === id ? "bg-muted/60" : ""}`}
-                    onClick={() => {
-                      setSelectedId(id);
-                      setVerdict(null);
-                      setFeedbackNote("");
-                    }}
+                    onClick={() => selectItem(id)}
                   >
                     <span className="min-w-0">
                       <span className="block truncate text-sm font-medium">

package/corpus/templates/factory/server/db/schema.ts

@@ -132,6 +132,43 @@ export const triageConfig = table("factory_config", {
   orgId: text("org_id"),
 });
 
+export const factoryAuditEvents = table(
+  "factory_audit_events",
+  {
+    id: text("id").primaryKey(),
+    automationRunId: text("automation_run_id"),
+    automationThreadId: text("automation_thread_id"),
+    automationName: text("automation_name"),
+    itemId: text("item_id"),
+    source: text("source"),
+    sourceUrl: text("source_url"),
+    action: text("action").notNull(),
+    kind: text("kind").notNull(),
+    status: text("status").notNull(),
+    summary: text("summary").notNull(),
+    detailsJson: text("details_json").notNull().default("{}"),
+    createdAt: text("created_at").notNull().default(now()),
+    ownerEmail: text("owner_email").notNull(),
+    orgId: text("org_id"),
+  },
+  (event) => ({
+    orgCreatedIdx: index("factory_audit_events_org_created_idx").on(
+      event.orgId,
+      event.createdAt,
+    ),
+    runCreatedIdx: index("factory_audit_events_run_created_idx").on(
+      event.orgId,
+      event.automationRunId,
+      event.createdAt,
+    ),
+    itemCreatedIdx: index("factory_audit_events_item_created_idx").on(
+      event.orgId,
+      event.itemId,
+      event.createdAt,
+    ),
+  }),
+);
+
 export const factoryDefinitions = table(
   "factory_definitions",
   {

package/corpus/templates/factory/server/lib/require-factory-automation.ts

@@ -45,7 +45,11 @@ export async function requireFactoryAutomation(
 
   const definition = (
     await listAutomationDefinitions(
-      { userEmail: identity.userEmail, orgId: identity.orgId },
+      {
+        userEmail: identity.userEmail,
+        orgId: identity.orgId,
+        appId: "factory",
+      },
       "organization",
     )
   ).find((entry) => entry.resource.id === lineage.triggerId);

package/corpus/templates/factory/server/plugins/factory-migrations.ts

@@ -258,6 +258,35 @@ const migrations = [
       ALTER TABLE factory_config ADD COLUMN last_automation_failure_alert_at TEXT;
     `,
   },
+  {
+    version: 18,
+    name: "factory-audit-events-table",
+    sql: `
+      CREATE TABLE IF NOT EXISTS factory_audit_events (
+        id TEXT PRIMARY KEY,
+        automation_run_id TEXT,
+        automation_thread_id TEXT,
+        automation_name TEXT,
+        item_id TEXT,
+        source TEXT,
+        source_url TEXT,
+        action TEXT NOT NULL,
+        kind TEXT NOT NULL,
+        status TEXT NOT NULL,
+        summary TEXT NOT NULL,
+        details_json TEXT NOT NULL DEFAULT '{}',
+        created_at TEXT NOT NULL,
+        owner_email TEXT NOT NULL,
+        org_id TEXT
+      );
+      CREATE INDEX IF NOT EXISTS factory_audit_events_org_created_idx
+        ON factory_audit_events (org_id, created_at);
+      CREATE INDEX IF NOT EXISTS factory_audit_events_run_created_idx
+        ON factory_audit_events (org_id, automation_run_id, created_at);
+      CREATE INDEX IF NOT EXISTS factory_audit_events_item_created_idx
+        ON factory_audit_events (org_id, item_id, created_at);
+    `,
+  },
 ];
 
 export const runFactoryMigrations = runMigrations(migrations, {

package/corpus/templates/factory/server/triage/audit.ts

@@ -0,0 +1,79 @@
+import { randomUUID } from "node:crypto";
+
+import type { ActionRunContext } from "@agent-native/core/action";
+
+import { getDb } from "../db/index.js";
+import { factoryAuditEvents } from "../db/schema.js";
+
+const MAX_SUMMARY_LENGTH = 500;
+const MAX_DETAILS_LENGTH = 4_000;
+
+export type FactoryAuditKind =
+  | "observed"
+  | "read"
+  | "decision"
+  | "external_action"
+  | "governance";
+
+export type FactoryAuditStatus = "success" | "error" | "skipped";
+
+export interface FactoryAuditInput {
+  action: string;
+  kind: FactoryAuditKind;
+  status?: FactoryAuditStatus;
+  itemId?: string | null;
+  source?: string | null;
+  sourceUrl?: string | null;
+  summary: string;
+  details?: Record<string, unknown>;
+}
+
+function boundedText(value: string, max: number): string {
+  const compact = value.replace(/\s+/g, " ").trim();
+  return compact.length > max ? `${compact.slice(0, max - 1)}…` : compact;
+}
+
+function boundedDetails(value: Record<string, unknown> | undefined): string {
+  if (!value) return "{}";
+  let serialized: string;
+  try {
+    serialized = JSON.stringify(value);
+  } catch {
+    throw new Error("Factory audit details are not serializable.");
+  }
+  return serialized.length > MAX_DETAILS_LENGTH
+    ? JSON.stringify({ truncated: true })
+    : serialized;
+}
+
+/**
+ * Persist a bounded, source-linked explanation of an automation action. The
+ * agent run id is the join key to core's automation history; no raw provider
+ * payload is copied into this table.
+ */
+export async function recordFactoryAudit(
+  context: ActionRunContext | undefined,
+  identity: { userEmail: string; orgId: string },
+  input: FactoryAuditInput,
+): Promise<void> {
+  if (context?.caller !== "automation" || !context.runId) return;
+  await getDb()
+    .insert(factoryAuditEvents)
+    .values({
+      id: randomUUID(),
+      automationRunId: context.runId,
+      automationThreadId: context.threadId ?? null,
+      automationName: context.automation?.triggerName ?? null,
+      itemId: input.itemId ?? null,
+      source: input.source ?? null,
+      sourceUrl: input.sourceUrl ?? null,
+      action: boundedText(input.action, 120),
+      kind: input.kind,
+      status: input.status ?? "success",
+      summary: boundedText(input.summary, MAX_SUMMARY_LENGTH),
+      detailsJson: boundedDetails(input.details),
+      createdAt: new Date().toISOString(),
+      ownerEmail: identity.userEmail,
+      orgId: identity.orgId,
+    });
+}