@agent-native/core 0.161.12 → 0.161.16

package/corpus/templates/clips/desktop/src/app.tsx

@@ -112,6 +112,7 @@ import {
   copyRecordingShareLink,
   recordingShareUrl,
 } from "./lib/recording-link";
+import { boundedCleanup } from "./lib/recording-start-guard";
 import { REWIND_AGENT_PROMPT } from "./lib/rewind-agent-prompt";
 import { getRewindStatusPresentation } from "./lib/rewind-status";
 import {
@@ -3218,16 +3219,14 @@ export function App() {
         bubbleStreamTransferredToRecorder.current = false;
         recordingFlowGateRef.current = false;
         setRecordingFlowActive(false);
-        try {
-          await invoke("set_recording_state", { active: false });
-        } catch {
-          // ignore — best-effort
-        }
-        try {
-          await invoke("show_popover");
-        } catch {
-          // ignore — best-effort
-        }
+        // Bounded, not just best-effort: a plain unbounded await here would
+        // let a stuck native command (e.g. a ScreenCaptureKit handshake that
+        // never returns) turn this "always recovers" block into another
+        // permanent hang on top of the one that just failed — exactly the
+        // "stuck on Preparing…, have to restart" symptom this exists to
+        // prevent.
+        await boundedCleanup(invoke("set_recording_state", { active: false }));
+        await boundedCleanup(invoke("show_popover"));
       }
     }
 

package/corpus/templates/clips/desktop/src/lib/recorder.ts

@@ -84,6 +84,7 @@ import {
   type NativeRecordingRequestOptions,
 } from "./recording-request";
 import {
+  boundedCleanup,
   guardRecordingStart,
   RECORDING_START_TIMEOUT_MS,
   RecordingStartCancelledError,
@@ -2748,7 +2749,7 @@ async function tryStartRewindFullscreenRecording(
       },
       async countdown() {
         console.log("[rewind-latency] countdown shown after preparation");
-        await invoke("hide_preparing").catch(() => {});
+        await boundedCleanup(invoke("hide_preparing"));
         // Overlap whisper startup with the countdown so the capture boundary
         // never waits on it, but have both settled before activation.
         await Promise.all([
@@ -2792,7 +2793,7 @@ async function tryStartRewindFullscreenRecording(
       });
     }
   } catch (err) {
-    await invoke("hide_preparing").catch(() => {});
+    await boundedCleanup(invoke("hide_preparing"));
     transcriptionAborted = true;
     // Cast: `transcriptionCapture` is only assigned inside the
     // `startRewindTranscription` closure, which TS's control-flow analysis
@@ -4090,7 +4091,7 @@ export async function startRecording(
       },
     });
   } catch (err) {
-    await invoke("hide_recording_chrome").catch(() => {});
+    await boundedCleanup(invoke("hide_recording_chrome"));
     const e = err as { name?: string; message?: string } | null;
     console.error(
       "[clips-recorder] startRecording threw:",

package/corpus/templates/clips/desktop/src/lib/recording-start-guard.ts

@@ -1,5 +1,12 @@
 export const RECORDING_START_TIMEOUT_MS = 90_000;
 
+// Cleanup invokes (closing overlay windows, clearing recording state) are
+// normally instant. This bounds them well above any real duration but far
+// below forever, so a stuck native call (e.g. a ScreenCaptureKit handshake
+// that never returns its completion) can't turn "recovery" into another
+// permanent hang on top of the one the start guard already gave up on.
+export const RECOVERY_INVOKE_TIMEOUT_MS = 5_000;
+
 export class RecordingStartTimeoutError extends Error {
   constructor(timeoutMs: number) {
     super(
@@ -82,3 +89,22 @@ export function guardRecordingStart<T>(
     }, timeoutMs);
   });
 }
+
+/**
+ * Best-effort recovery step that must never block the caller. Recording-start
+ * failure paths (and their "always restore the UI" `finally` blocks) await
+ * cleanup invokes like `hide_recording_chrome` — if the underlying native
+ * command hangs, an unbounded `await ...catch(() => {})` hangs the whole
+ * recovery with it, leaving the toolbar/"Preparing…" state stuck until the
+ * user restarts the app. Swallows both success and failure; only existence
+ * to cap how long a single cleanup step can stall recovery.
+ */
+export function boundedCleanup(
+  operation: Promise<unknown>,
+  timeoutMs = RECOVERY_INVOKE_TIMEOUT_MS,
+): Promise<void> {
+  return guardRecordingStart(operation, { timeoutMs }).then(
+    () => undefined,
+    () => undefined,
+  );
+}

package/corpus/templates/dispatch/app/chat-first-pages.ts

@@ -8,8 +8,8 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
       searchAppsPlaceholder: "依名稱或描述搜尋",
       clearAppSearch: "清除搜尋",
       noAppsMatch: "沒有符合搜尋條件的應用程式",
-      pinApp: "釘選 {{name}}",
-      unpinApp: "取消釘選 {{name}}",
+      pinApp: "釘選此應用程式",
+      unpinApp: "取消釘選此應用程式",
       appPinSaveFailed: "無法儲存應用程式釘選。",
       appPinSavedLocally: "應用程式釘選只儲存在此裝置上。",
       chatFirstCreateWorkspaceApp: "建立工作區應用程式",
@@ -18,8 +18,8 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
       chatFirstNoWorkspaceApps: "尚無工作區應用程式。",
       chatFirstCreateApp: "建立應用程式",
       chatFirstRetry: "重試",
-      chatFirstUnpinApp: "取消釘選 {{name}}",
-      chatFirstPinApp: "釘選 {{name}}",
+      chatFirstUnpinApp: "取消釘選此應用程式",
+      chatFirstPinApp: "釘選此應用程式",
       chatFirstRemovePinned: "從釘選應用程式移除",
       chatFirstPinTop: "將應用程式釘選至頂端",
       chatFirstOpenSideSurfaces: "開啟側邊面板",
@@ -85,8 +85,8 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
       searchAppsPlaceholder: "按名称或描述搜索",
       clearAppSearch: "清除搜索",
       noAppsMatch: "没有匹配搜索的应用",
-      pinApp: "固定 {{name}}",
-      unpinApp: "取消固定 {{name}}",
+      pinApp: "固定此应用",
+      unpinApp: "取消固定此应用",
       appPinSaveFailed: "无法保存应用固定设置。",
       appPinSavedLocally: "应用固定设置仅保存在此设备上。",
       chatFirstCreateWorkspaceApp: "创建工作区应用",
@@ -95,8 +95,8 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
       chatFirstNoWorkspaceApps: "尚无工作区应用。",
       chatFirstCreateApp: "创建应用",
       chatFirstRetry: "重试",
-      chatFirstUnpinApp: "取消固定 {{name}}",
-      chatFirstPinApp: "固定 {{name}}",
+      chatFirstUnpinApp: "取消固定此应用",
+      chatFirstPinApp: "固定此应用",
       chatFirstRemovePinned: "从固定应用中移除",
       chatFirstPinTop: "固定应用到顶部",
       chatFirstOpenSideSurfaces: "打开侧边面板",
@@ -162,8 +162,8 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
       searchAppsPlaceholder: "Buscar por nombre o descripción",
       clearAppSearch: "Borrar búsqueda",
       noAppsMatch: "Ninguna app coincide con tu búsqueda",
-      pinApp: "Fijar {{name}}",
-      unpinApp: "Desfijar {{name}}",
+      pinApp: "Fijar esta app",
+      unpinApp: "Desfijar esta app",
       appPinSaveFailed: "No se pudieron guardar las apps fijadas.",
       appPinSavedLocally:
         "Las apps fijadas solo se guardan en este dispositivo.",
@@ -174,8 +174,8 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
       chatFirstNoWorkspaceApps: "Aún no hay apps del espacio de trabajo.",
       chatFirstCreateApp: "Crear app",
       chatFirstRetry: "Reintentar",
-      chatFirstUnpinApp: "Quitar fijación a {{name}}",
-      chatFirstPinApp: "Fijar {{name}}",
+      chatFirstUnpinApp: "Quitar fijación a esta app",
+      chatFirstPinApp: "Fijar esta app",
       chatFirstRemovePinned: "Quitar de las apps fijadas",
       chatFirstPinTop: "Fijar app arriba",
       chatFirstOpenSideSurfaces: "Abrir paneles laterales",
@@ -248,8 +248,8 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
       searchAppsPlaceholder: "Rechercher par nom ou description",
       clearAppSearch: "Effacer la recherche",
       noAppsMatch: "Aucune application ne correspond à votre recherche",
-      pinApp: "Épingler {{name}}",
-      unpinApp: "Désépingler {{name}}",
+      pinApp: "Épingler cette application",
+      unpinApp: "Désépingler cette application",
       appPinSaveFailed: "Impossible d’enregistrer les applications épinglées.",
       appPinSavedLocally:
         "Les applications épinglées sont enregistrées uniquement sur cet appareil.",
@@ -261,8 +261,8 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
         "Aucune application d’espace de travail pour le moment.",
       chatFirstCreateApp: "Créer une application",
       chatFirstRetry: "Réessayer",
-      chatFirstUnpinApp: "Désépingler {{name}}",
-      chatFirstPinApp: "Épingler {{name}}",
+      chatFirstUnpinApp: "Désépingler cette application",
+      chatFirstPinApp: "Épingler cette application",
       chatFirstRemovePinned: "Retirer des applications épinglées",
       chatFirstPinTop: "Épingler l’application en haut",
       chatFirstOpenSideSurfaces: "Ouvrir les panneaux latéraux",
@@ -336,8 +336,8 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
       searchAppsPlaceholder: "Nach Name oder Beschreibung suchen",
       clearAppSearch: "Suche löschen",
       noAppsMatch: "Keine Apps entsprechen deiner Suche",
-      pinApp: "{{name}} anheften",
-      unpinApp: "{{name}} loslösen",
+      pinApp: "Diese App anheften",
+      unpinApp: "Diese App loslösen",
       appPinSaveFailed: "App-Anheftungen konnten nicht gespeichert werden.",
       appPinSavedLocally:
         "App-Anheftungen werden nur auf diesem Gerät gespeichert.",
@@ -348,8 +348,8 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
       chatFirstNoWorkspaceApps: "Noch keine Arbeitsbereich-Apps.",
       chatFirstCreateApp: "App erstellen",
       chatFirstRetry: "Erneut versuchen",
-      chatFirstUnpinApp: "{{name}} loslösen",
-      chatFirstPinApp: "{{name}} anheften",
+      chatFirstUnpinApp: "Diese App loslösen",
+      chatFirstPinApp: "Diese App anheften",
       chatFirstRemovePinned: "Aus angehefteten Apps entfernen",
       chatFirstPinTop: "App oben anheften",
       chatFirstOpenSideSurfaces: "Seitenflächen öffnen",
@@ -423,8 +423,8 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
       searchAppsPlaceholder: "名前または説明で検索",
       clearAppSearch: "検索をクリア",
       noAppsMatch: "検索に一致するアプリはありません",
-      pinApp: "{{name}}を固定",
-      unpinApp: "{{name}}の固定を解除",
+      pinApp: "このアプリを固定",
+      unpinApp: "このアプリの固定を解除",
       appPinSaveFailed: "アプリの固定を保存できませんでした。",
       appPinSavedLocally: "アプリの固定はこのデバイスにのみ保存されます。",
       chatFirstCreateWorkspaceApp: "ワークスペースアプリを作成",
@@ -433,8 +433,8 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
       chatFirstNoWorkspaceApps: "ワークスペースアプリはまだありません。",
       chatFirstCreateApp: "アプリを作成",
       chatFirstRetry: "再試行",
-      chatFirstUnpinApp: "{{name}}の固定を解除",
-      chatFirstPinApp: "{{name}}を固定",
+      chatFirstUnpinApp: "このアプリの固定を解除",
+      chatFirstPinApp: "このアプリを固定",
       chatFirstRemovePinned: "固定アプリから削除",
       chatFirstPinTop: "アプリを上部に固定",
       chatFirstOpenSideSurfaces: "サイドサーフェスを開く",
@@ -508,8 +508,8 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
       searchAppsPlaceholder: "이름 또는 설명으로 검색",
       clearAppSearch: "검색 지우기",
       noAppsMatch: "검색 결과가 없습니다",
-      pinApp: "{{name}} 고정",
-      unpinApp: "{{name}} 고정 해제",
+      pinApp: "이 앱 고정",
+      unpinApp: "이 앱 고정 해제",
       appPinSaveFailed: "앱 고정을 저장하지 못했습니다.",
       appPinSavedLocally: "앱 고정은 이 기기에만 저장됩니다.",
       chatFirstCreateWorkspaceApp: "워크스페이스 앱 만들기",
@@ -518,8 +518,8 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
       chatFirstNoWorkspaceApps: "아직 워크스페이스 앱이 없습니다.",
       chatFirstCreateApp: "앱 만들기",
       chatFirstRetry: "다시 시도",
-      chatFirstUnpinApp: "{{name}} 고정 해제",
-      chatFirstPinApp: "{{name}} 고정",
+      chatFirstUnpinApp: "이 앱 고정 해제",
+      chatFirstPinApp: "이 앱 고정",
       chatFirstRemovePinned: "고정된 앱에서 제거",
       chatFirstPinTop: "앱을 맨 위에 고정",
       chatFirstOpenSideSurfaces: "사이드 표면 열기",
@@ -589,8 +589,8 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
       searchAppsPlaceholder: "Pesquisar por nome ou descrição",
       clearAppSearch: "Limpar pesquisa",
       noAppsMatch: "Nenhum app corresponde à sua pesquisa",
-      pinApp: "Fixar {{name}}",
-      unpinApp: "Desafixar {{name}}",
+      pinApp: "Fixar este app",
+      unpinApp: "Desafixar este app",
       appPinSaveFailed: "Não foi possível salvar os apps fixados.",
       appPinSavedLocally:
         "Os apps fixados são salvos somente neste dispositivo.",
@@ -601,8 +601,8 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
       chatFirstNoWorkspaceApps: "Ainda não há apps do espaço de trabalho.",
       chatFirstCreateApp: "Criar app",
       chatFirstRetry: "Tentar novamente",
-      chatFirstUnpinApp: "Desafixar {{name}}",
-      chatFirstPinApp: "Fixar {{name}}",
+      chatFirstUnpinApp: "Desafixar este app",
+      chatFirstPinApp: "Fixar este app",
       chatFirstRemovePinned: "Remover dos apps fixados",
       chatFirstPinTop: "Fixar app no topo",
       chatFirstOpenSideSurfaces: "Abrir superfícies laterais",
@@ -675,8 +675,8 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
       searchAppsPlaceholder: "नाम या विवरण से खोजें",
       clearAppSearch: "खोज साफ़ करें",
       noAppsMatch: "आपकी खोज से कोई ऐप मेल नहीं खाता",
-      pinApp: "{{name}} पिन करें",
-      unpinApp: "{{name}} अनपिन करें",
+      pinApp: "इस ऐप को पिन करें",
+      unpinApp: "इस ऐप से पिन हटाएं",
       appPinSaveFailed: "ऐप पिन सहेजे नहीं जा सके।",
       appPinSavedLocally: "ऐप पिन केवल इस डिवाइस पर सहेजे गए हैं।",
       chatFirstCreateWorkspaceApp: "वर्कस्पेस ऐप बनाएँ",
@@ -685,8 +685,8 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
       chatFirstNoWorkspaceApps: "अभी कोई वर्कस्पेस ऐप नहीं है।",
       chatFirstCreateApp: "ऐप बनाएँ",
       chatFirstRetry: "पुनः प्रयास करें",
-      chatFirstUnpinApp: "{{name}} को अनपिन करें",
-      chatFirstPinApp: "{{name}} को पिन करें",
+      chatFirstUnpinApp: "इस ऐप से पिन हटाएं",
+      chatFirstPinApp: "इस ऐप को पिन करें",
       chatFirstRemovePinned: "पिन किए गए ऐप्स से हटाएँ",
       chatFirstPinTop: "ऐप को सबसे ऊपर पिन करें",
       chatFirstOpenSideSurfaces: "साइड पैनल खोलें",
@@ -754,8 +754,8 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
       searchAppsPlaceholder: "البحث بالاسم أو الوصف",
       clearAppSearch: "مسح البحث",
       noAppsMatch: "لا توجد تطبيقات تطابق بحثك",
-      pinApp: "تثبيت {{name}}",
-      unpinApp: "إلغاء تثبيت {{name}}",
+      pinApp: "تثبيت هذا التطبيق",
+      unpinApp: "إلغاء تثبيت هذا التطبيق",
       appPinSaveFailed: "تعذر حفظ تثبيتات التطبيقات.",
       appPinSavedLocally: "تُحفظ تثبيتات التطبيقات على هذا الجهاز فقط.",
       chatFirstCreateWorkspaceApp: "إنشاء تطبيق مساحة عمل",
@@ -764,8 +764,8 @@ export const chatFirstPageTranslations: Record<string, ChatFirstPageMessages> =
       chatFirstNoWorkspaceApps: "لا توجد تطبيقات لمساحة العمل بعد.",
       chatFirstCreateApp: "إنشاء تطبيق",
       chatFirstRetry: "إعادة المحاولة",
-      chatFirstUnpinApp: "إلغاء تثبيت {{name}}",
-      chatFirstPinApp: "تثبيت {{name}}",
+      chatFirstUnpinApp: "إلغاء تثبيت هذا التطبيق",
+      chatFirstPinApp: "تثبيت هذا التطبيق",
       chatFirstRemovePinned: "إزالة من التطبيقات المثبتة",
       chatFirstPinTop: "تثبيت التطبيق في الأعلى",
       chatFirstOpenSideSurfaces: "فتح الأسطح الجانبية",

package/corpus/templates/dispatch/app/i18n-data.ts

@@ -432,11 +432,11 @@ const enUS = {
       threadDebugSelectPrompt: "Select a failed run or thread to inspect.",
       chatFirstWorkspaceApps: "Workspace apps",
       searchApps: "Search apps",
-      searchAppsPlaceholder: "Search by name or description",
+      searchAppsPlaceholder: "Search apps",
       clearAppSearch: "Clear search",
       noAppsMatch: "No apps match your search",
-      pinApp: "Pin {{name}}",
-      unpinApp: "Unpin {{name}}",
+      pinApp: "Pin this app",
+      unpinApp: "Unpin this app",
       appPinSaveFailed: "App pins could not be saved.",
       appPinSavedLocally: "App pins are saved on this device only.",
       chatFirstCreateWorkspaceApp: "Create workspace app",
@@ -445,8 +445,8 @@ const enUS = {
       chatFirstNoWorkspaceApps: "No workspace apps yet.",
       chatFirstCreateApp: "Create app",
       chatFirstRetry: "Retry",
-      chatFirstUnpinApp: "Unpin {{name}}",
-      chatFirstPinApp: "Pin {{name}}",
+      chatFirstUnpinApp: "Unpin this app",
+      chatFirstPinApp: "Pin this app",
       chatFirstRemovePinned: "Remove from pinned apps",
       chatFirstPinTop: "Pin app to the top",
       chatFirstOpenSideSurfaces: "Open side surfaces",

package/corpus/templates/factory/AGENTS.md

@@ -22,11 +22,20 @@ decisions, feedback, agent runs, and provider audit records.
   `reconciliation_required` state.
 - Deduplicate by Factory item and rule/run identity, not provider comment ID.
 - Use the generic Slack adapter: clear-bug automations add 👀 and tag
-  `@builderio`; GitHub/Sentry clear bugs use the Builder run API. Clips, Design,
-  and Content stay owner-managed outside autonomous dispatch and PR governance.
-- PR governance requires verified BuilderIO membership, a clear bug, passing CI,
-  and handled review feedback; product/UX implications stay manual. Auto-merge
-  also requires a verified Factory Builder run.
+  `@builder.io`, ask Builder to run `/address-feedback`, and group repeated
+  reports into one Builder thread; GitHub/Sentry clear bugs use the Builder run
+  API. Clips, Design, and Content stay owner-managed outside autonomous
+  dispatch and PR governance.
+- PR governance follows `review-prs`: verify current BuilderIO membership and
+  the complete diff/review/check evidence, never approve external or
+  unverified authors, and keep ultra-scary security, auth, tenant-isolation,
+  secrets, data-loss, execution, payment, and deployment risks manual. The
+  verified internal-author evidence does not waive ordinary failed or
+  unresolved checks or feedback; those gates remain required and their exact
+  states must stay visible. It never waives membership or the ultra-scary
+  gate.
+  Product/UX ownership still needs the verified owner, with the documented Sid
+  exception. Auto-merge also requires a verified Factory Builder run.
 - Graph edits create immutable blueprint versions. AI proposes with `source=ai`;
   a person reviews and publishes through the same action surface.
 - Provider credentials belong to Dispatch/shared workspace integrations, never
@@ -35,47 +44,39 @@ decisions, feedback, agent runs, and provider audit records.
 
 ## Application state
 
-- `navigation.view`: `factory` for the Factory workspace or `agents` for the
-  shared Agents sidebar surface.
-- `navigation.factoryId`: selected Factory id when present.
-- `navigation.factoryTab`: `map` | `inbox` | `rules` | `automations` | `agents` | `audit` | `settings`.
-- `navigation.factoryAuditRunId`: selected automation run in the audit view when present.
-- `navigation.factoryNodeId` / `navigation.factoryEdgeId`: selected graph item.
-- A selected graph node or edge is part of `navigation` context. Read
-  `view-screen` before answering why a route exists or changing the selected
-  Factory.
-- The `/agents` surface shows mounted agentic apps and reusable agent packs from
-  the same Dispatch SQL/action registry. Use `view-screen` there before
-  answering questions about the visible agent inventory.
+- `navigation.view` is `factory` or `agents`; `factoryId`, `factoryTab`,
+  `factoryAuditRunId`, `factoryNodeId`, and `factoryEdgeId` hold the selected
+  Factory context. Read `view-screen` before explaining a route, changing the
+  selected Factory, or answering about the `/agents` inventory.
 
 ## Action contract
 
 | Action | Purpose |
 | --- | --- |
-| `list-triage-items` / `get-triage-item` | Inspect queue and evidence; scheduled reviewers must pass `needsReview: true` with a bounded `source` and `limit`. |
+| `list-triage-items` / `get-triage-item` | Inspect bounded queue evidence; scheduled reviewers pass `needsReview: true`, `source`, and `limit`. |
 | `poll-slack-channel` | Observe Slack history; never writes to Slack. |
 | `get-slack-feedback-context` | Read the bounded full Slack thread before classification. |
-| `poll-github-sources` / `poll-sentry-errors` | Observe bounded GitHub and Sentry source queues. |
+| `poll-github-sources` / `poll-sentry-errors` | Observe bounded source queues. |
 | `ingest-github-observation` | Store read-only PR evidence. |
-| `list-triage-rules` / `save-triage-rule` | Tune prompt rules and guards. |
+| `list-triage-rules` / `save-triage-rule` | Tune rules and guards. |
 | `evaluate-triage-item` | Append a decision. |
 | `record-triage-feedback` | Capture human correction for learning. |
 | `approve-factory-item` | Explicitly authorize one bounded run. |
 | `start-builder-for-item` | Govern clear-bug dispatch through Slack or Builder API. |
-| `govern-agent-native-pull-request` | Apply CI, review, author, product, and owner gates. |
-| `list-factory-automations` / `save-factory-automation` / `run-factory-automation` | Inspect or edit org-owned prompts, schedules, and runs. |
+| `govern-agent-native-pull-request` | Apply PR evidence and ownership gates. |
+| `list-factory-automations` / `save-factory-automation` / `run-factory-automation` | Inspect or edit org-owned automations. |
 | `list-factory-audit` | Inspect automation runs, evidence, decisions, and provider actions. |
 | `get-factory-automation-health` | Inspect scheduler heartbeat and last error. |
-| `suggest-factory-rules` | Mine feedback and fast approvals into proposals. |
+| `suggest-factory-rules` | Mine feedback into proposals. |
 | `reconcile-triage-run` | Persist callback/provider reconciliation. |
-| `list-factories` / `get-factory-graph` | Inspect Factory definitions, graph versions, and live evidence metrics. |
+| `list-factories` / `get-factory-graph` | Inspect definitions, versions, and metrics. |
 | `save-factory-graph` | Create or version a complete visual graph; never starts provider work. |
 | `list-factory-comments` / `add-factory-comment` | Read or attach comments to a canvas, node, or edge. |
-| `provider-api-catalog` / `provider-api-docs` / `provider-api-request` | Discover and use connected provider APIs with shared workspace credentials; never request raw keys. |
-| `list-workspace-apps` / `update-workspace-app-metadata` | Inventory and edit mounted agentic apps in the shared workspace. |
-| `list-workspace-resources` / `create-workspace-resource` / `update-workspace-resource` | Manage shared resource records used by agents and apps. |
-| `import-agent` / `import-agent-pack` / `list-agent-pack` | Import a simple profile or a Claude/Cowork-style folder-backed agent pack. |
-| `start-workspace-app-creation` | Promote an agent and all of its pack resource ids into an app-creation handoff. |
+| `provider-api-catalog` / `provider-api-docs` / `provider-api-request` | Use connected provider APIs with shared credentials; never request raw keys. |
+| `list-workspace-apps` / `update-workspace-app-metadata` | Inventory and edit mounted apps. |
+| `list-workspace-resources` / `create-workspace-resource` / `update-workspace-resource` | Manage shared agent resources. |
+| `import-agent` / `import-agent-pack` / `list-agent-pack` | Import profiles or agent packs. |
+| `start-workspace-app-creation` | Promote an agent and its pack into an app handoff. |
 
 Rules start in shadow mode; hard guards always apply. Organization automations
 execute stored prompts, and every external mutation needs a durable run,

package/corpus/templates/slides/app/root.tsx

@@ -66,6 +66,26 @@ const BARE_ROUTES = new Set(["/slide"]);
 /** Route prefixes that render without the app shell */
 const BARE_PREFIXES = ["/share/", "/p/"];
 
+/**
+ * Routes that serve deck content to any visitor — owner, teammate, or an
+ * anonymous recipient of a shared link — rather than an app-management
+ * surface. `/deck/:id` renders the full editor shell (so it's not "bare"
+ * above: viewers still get chrome, just read-only), but it must never force
+ * sign-in or gate on first-run onboarding, or a shared link flashes the deck
+ * and then buries it under "create your first deck" (the onboarding gate has
+ * no route awareness of its own — see `sessionBypass` below). `/present` is
+ * the full-screen presentation view and `/slide` is the agent-embed preview;
+ * both are shown to viewers the same way.
+ */
+export function isShareableContentPath(pathname: string): boolean {
+  return (
+    BARE_ROUTES.has(pathname) ||
+    BARE_PREFIXES.some((p) => pathname.startsWith(p)) ||
+    pathname.startsWith("/deck/") ||
+    pathname.endsWith("/present")
+  );
+}
+
 export const links: LinksFunction = () => [
   { rel: "stylesheet", href: stylesheet },
 ];
@@ -311,6 +331,7 @@ export default function Root() {
         queryClient={queryClient}
         defaultTheme="dark"
         i18n={{ catalog: i18nCatalog }}
+        sessionBypass={isShareableContentPath(location.pathname)}
       >
         <AppContent />
       </AppProviders>

package/corpus/templates/slides/server/handlers/decks.ts

@@ -1,7 +1,7 @@
 import { recordChange } from "@agent-native/core/server/poll";
 import { defineEventHandler, setResponseStatus, createEventStream } from "h3";
 
-import { resolveSlidesRequestAuthContext } from "./request-auth-context.js";
+import { resolveSlidesRequestAuth } from "./request-auth-context.js";
 
 // --- SSE for change notifications ---
 type SSEPush = (data: string) => void;
@@ -91,8 +91,12 @@ export function notifyClients(
 // callers can't tail the stream. (The agent path runs server-side and is
 // not affected.)
 export const deckEvents = defineEventHandler(async (event) => {
-  const session = await resolveSlidesRequestAuthContext(event);
-  if (!session.email) {
+  const auth = await resolveSlidesRequestAuth(event);
+  if (!auth.ok) {
+    setResponseStatus(event, auth.statusCode);
+    return { error: auth.error };
+  }
+  if (!auth.context.email) {
     setResponseStatus(event, 401);
     return { error: "Unauthorized" };
   }

package/corpus/templates/slides/server/handlers/request-auth-context.ts

@@ -7,10 +7,36 @@ export interface SlidesRequestAuthContext {
   orgId?: string;
 }
 
+/**
+ * A session lookup that failed outright (DB blip, cookie race) — distinct
+ * from `getSession` resolving to `null`, which means "no session" and is a
+ * legitimate outcome for anonymous callers (public share/deck viewers).
+ * `getSession` only throws on a real backend failure, never merely because a
+ * request carries no session cookie, so this never fires for genuine
+ * anonymous access. Previously this was swallowed into the same
+ * `email: undefined` an anonymous visitor gets, so a transient failure
+ * presented as "unauthorized" on the upload path and as an untraceable error
+ * on deck creation — see `resolveSlidesRequestAuth` for the caller-facing
+ * shape.
+ */
+export class SlidesSessionLookupError extends Error {
+  readonly statusCode = 503;
+  constructor(cause: unknown) {
+    super("Could not verify your session. Please try again.");
+    this.name = "SlidesSessionLookupError";
+    this.cause = cause;
+  }
+}
+
 export async function resolveSlidesRequestAuthContext(
   event: H3Event,
 ): Promise<SlidesRequestAuthContext> {
-  const session = await getSession(event).catch(() => null);
+  let session: Awaited<ReturnType<typeof getSession>>;
+  try {
+    session = await getSession(event);
+  } catch (err) {
+    throw new SlidesSessionLookupError(err);
+  }
 
   // Prefer the live active org context over `session.orgId`. Better Auth's
   // session.orgId is set at sign-in and not refreshed when the user switches
@@ -39,6 +65,37 @@ export async function resolveSlidesRequestAuthContext(
   };
 }
 
+/** Discriminated result for route handlers that must fail closed on a
+ * session-lookup error rather than treat it as "logged out". */
+export type SlidesRequestAuthResolution =
+  | { ok: true; context: SlidesRequestAuthContext }
+  | { ok: false; statusCode: number; error: string };
+
+/**
+ * Like `resolveSlidesRequestAuthContext`, but turns a `SlidesSessionLookupError`
+ * into a response the caller can return directly instead of a 401 — so a
+ * route handler that gates on `!context.email` never mistakes "the session
+ * lookup failed" for "this visitor is signed out". A route with legitimate
+ * anonymous access (e.g. a public deck view) still gets `email: undefined`
+ * for real anonymous callers via `ok: true`; only a genuine lookup failure
+ * takes the `ok: false` branch.
+ */
+export async function resolveSlidesRequestAuth(
+  event: H3Event,
+): Promise<SlidesRequestAuthResolution> {
+  try {
+    return { ok: true, context: await resolveSlidesRequestAuthContext(event) };
+  } catch (err) {
+    return {
+      ok: false,
+      statusCode:
+        err instanceof SlidesSessionLookupError ? err.statusCode : 500,
+      error:
+        err instanceof Error ? err.message : "Failed to verify your session.",
+    };
+  }
+}
+
 export async function withSlidesRequestContext<T>(
   event: H3Event,
   fn: (session: SlidesRequestAuthContext) => Promise<T>,

package/corpus/templates/slides/server/handlers/share.ts

@@ -18,7 +18,7 @@ import { defineEventHandler, getRouterParam, setResponseStatus } from "h3";
 
 import { getDb, schema } from "../db";
 import {
-  resolveSlidesRequestAuthContext,
+  resolveSlidesRequestAuth,
   withSlidesRequestContext,
 } from "./request-auth-context.js";
 
@@ -47,7 +47,12 @@ export const shareDeck = defineEventHandler(async (event) => {
   // and pass the resolved context into `withSlidesRequestContext` so it
   // doesn't re-resolve session + org on the same request (which would
   // double the session/getOrgContext I/O per share).
-  const session = await resolveSlidesRequestAuthContext(event);
+  const auth = await resolveSlidesRequestAuth(event);
+  if (!auth.ok) {
+    setResponseStatus(event, auth.statusCode);
+    return { error: auth.error };
+  }
+  const session = auth.context;
   if (!session.email) {
     setResponseStatus(event, 401);
     return { error: "Unauthorized" };

package/corpus/templates/slides/server/handlers/uploads.ts

@@ -21,7 +21,7 @@ import {
 } from "../lib/uploaded-reference-storage.js";
 import { canSaveAsUploadedAsset, uploadImageAsset } from "./assets.js";
 import {
-  resolveSlidesRequestAuthContext,
+  resolveSlidesRequestAuth,
   withSlidesRequestContext,
 } from "./request-auth-context.js";
 
@@ -211,7 +211,12 @@ export async function saveUploadedReferenceFile(args: {
 
 // Upload one or more files
 export const uploadFiles = defineEventHandler(async (event) => {
-  const authContext = await resolveSlidesRequestAuthContext(event);
+  const auth = await resolveSlidesRequestAuth(event);
+  if (!auth.ok) {
+    setResponseStatus(event, auth.statusCode);
+    return { error: auth.error };
+  }
+  const authContext = auth.context;
   const email = authContext.email;
   if (!email) {
     setResponseStatus(event, 401);