@agent-native/core 0.176.1 → 0.176.2-nightly-20260831184159

package/corpus/templates/factory/server/triage/ai-services-git.ts

@@ -1,205 +0,0 @@
-import type { AiServicesPullRequestSnapshot } from "./github-ingestion.js";
-import type { ReviewCommentObservation } from "./pr-babysit.js";
-import type {
-  PullRequestCheckObservation,
-  PullRequestReviewObservation,
-} from "./pr-monitor.js";
-
-export interface AiServicesGitReadClientOptions {
-  baseUrl: string;
-  authorization: string;
-  fetchImpl?: typeof fetch;
-}
-
-export interface AiServicesPullRequestLookup {
-  projectId: string;
-  repo: string;
-  pullRequestNumber: number;
-}
-
-export interface AiServicesPullRequestRead extends AiServicesPullRequestSnapshot {
-  readonly comments: readonly ReviewCommentObservation[];
-  readonly commentsTruncated: boolean;
-}
-
-// ai-services fetches exactly one uncapped page of this many review comments
-// and returns no truncated flag, so a full page is the only evidence that
-// newer comments were dropped. GitHub returns them oldest-first, so the ones
-// lost are the most likely to still be open.
-const REVIEW_COMMENT_PAGE_SIZE = 100;
-
-type JsonResponse = {
-  ok: boolean;
-  status: number;
-  json(): Promise<unknown>;
-};
-
-export function createAiServicesGitReadClient(
-  options: AiServicesGitReadClientOptions,
-) {
-  const fetchImpl = options.fetchImpl ?? fetch;
-  const baseUrl = options.baseUrl.replace(/\/+$/, "");
-
-  async function get<T>(path: string, lookup: AiServicesPullRequestLookup) {
-    const url = new URL(path, `${baseUrl}/`);
-    url.searchParams.set("projectId", lookup.projectId);
-    url.searchParams.set("prNumber", String(lookup.pullRequestNumber));
-    const response = (await fetchImpl(url, {
-      headers: { Authorization: options.authorization },
-    })) as JsonResponse;
-    if (!response.ok) {
-      throw new Error(
-        `ai-services GitHub read failed for ${path}: HTTP ${response.status}`,
-      );
-    }
-    return (await response.json()) as T;
-  }
-
-  return {
-    async fetchPullRequest(
-      lookup: AiServicesPullRequestLookup,
-    ): Promise<AiServicesPullRequestRead> {
-      const [detail, reviews, checks, files] = await Promise.all([
-        get<{
-          pullRequest: {
-            title: string;
-            body: string;
-            head: { sha: string };
-            htmlUrl: string;
-            changedFiles: number;
-            additions: number;
-            deletions: number;
-          };
-        }>("/projects/git/fetch-pull-request-detail", lookup),
-        get<{
-          reviews: Array<{
-            user: { login: string };
-            state: string;
-            submittedAt: string;
-            commitId?: string | null;
-            htmlUrl?: string | null;
-            body?: string | null;
-            comments?: Array<{
-              id: number;
-              user: { login: string };
-              body: string;
-              createdAt: string;
-              path?: string;
-              // GitHub sends a literal null once the line leaves the diff.
-              line?: number | null;
-              inReplyToId?: number;
-              isResolved?: boolean;
-            }>;
-          }>;
-        }>("/projects/git/fetch-pull-request-reviews", lookup),
-        get<{
-          checks: Array<{
-            name: string;
-            status: string;
-            conclusion?: string;
-            startedAt?: string;
-            completedAt?: string;
-          }>;
-        }>("/projects/git/fetch-pull-request-checks", lookup),
-        get<{
-          files: Array<{
-            filename: string;
-            additions: number;
-            deletions: number;
-          }>;
-        }>("/projects/git/fetch-pull-request-files", lookup),
-      ]);
-      const observedAt = new Date().toISOString();
-      const pullRequest = detail.pullRequest;
-      const reviewObservations: PullRequestReviewObservation[] =
-        reviews.reviews.map((review) => ({
-          author: review.user.login,
-          state: normalizeReviewState(review.state),
-          commitSha: review.commitId,
-          htmlUrl: review.htmlUrl,
-          body: review.body,
-          observedAt: review.submittedAt || observedAt,
-        }));
-      const reviewComments: ReviewCommentObservation[] =
-        reviews.reviews.flatMap((review) =>
-          (review.comments ?? []).map((comment) => ({
-            id: String(comment.id),
-            author: comment.user.login,
-            // `== null` on purpose: upstream omits this field on a
-            // thread-starting comment, so `=== null` would stringify undefined
-            // into "undefined" and no reply would ever match it.
-            inReplyToId:
-              comment.inReplyToId == null ? null : String(comment.inReplyToId),
-            body: comment.body,
-            path: comment.path,
-            line: comment.line ?? undefined,
-            // Never defaulted: undefined means the provider could not
-            // determine thread resolution, which is not "resolved".
-            isResolved: comment.isResolved,
-            createdAt: comment.createdAt,
-          })),
-        );
-      const checkObservations: PullRequestCheckObservation[] =
-        checks.checks.map((check) => ({
-          name: check.name,
-          state: normalizeCheckState(check.status, check.conclusion),
-          observedAt: check.completedAt || check.startedAt || observedAt,
-        }));
-
-      return {
-        repo: lookup.repo,
-        pullRequestNumber: lookup.pullRequestNumber,
-        headSha: pullRequest.head.sha,
-        title: pullRequest.title,
-        sourceUrl: pullRequest.htmlUrl,
-        summary: pullRequest.body.slice(0, 4_000),
-        changedFiles: files.files.map((file) => file.filename),
-        diffLines: files.files.reduce(
-          (total, file) => total + file.additions + file.deletions,
-          0,
-        ),
-        coverage: "complete",
-        reviews: reviewObservations,
-        checks: checkObservations,
-        comments: reviewComments,
-        commentsTruncated: reviewComments.length >= REVIEW_COMMENT_PAGE_SIZE,
-        observedAt,
-      };
-    },
-  };
-}
-
-function normalizeReviewState(
-  state: string,
-): PullRequestReviewObservation["state"] {
-  switch (state) {
-    case "APPROVED":
-      return "approved";
-    case "CHANGES_REQUESTED":
-      return "changes_requested";
-    case "PENDING":
-      return "pending";
-    case "DISMISSED":
-      return "dismissed";
-    default:
-      return "commented";
-  }
-}
-
-function normalizeCheckState(
-  status: string,
-  conclusion?: string,
-): PullRequestCheckObservation["state"] {
-  if (status !== "completed") {
-    return status === "in_progress" ? "in_progress" : "queued";
-  }
-  switch (conclusion) {
-    case "success":
-      return "passed";
-    case "cancelled":
-    case "timed_out":
-      return "cancelled";
-    default:
-      return "failed";
-  }
-}

package/corpus/templates/factory/server/triage/builder-executor.ts

@@ -1,123 +0,0 @@
-import { resolveConnectorSecret } from "../connectors/credentials.js";
-
-export interface BuilderExecutorInput {
-  runId: string;
-  itemId: string;
-  ownerEmail: string;
-  orgId: string;
-  repository?: string | null;
-  summary?: string | null;
-  sourceUrl?: string | null;
-  instructions?: string | null;
-}
-
-export interface BuilderExecutorResult {
-  providerTaskId?: string;
-  branchName: string;
-}
-
-function requiredEnv(
-  name: "BUILDER_AI_SERVICES_URL" | "BUILDER_PROJECT_ID" | "FACTORY_PUBLIC_URL",
-): string {
-  const value =
-    name === "BUILDER_AI_SERVICES_URL"
-      ? process.env.BUILDER_AI_SERVICES_URL // guard:allow-env-credential - non-secret deployment endpoint
-      : name === "BUILDER_PROJECT_ID"
-        ? process.env.BUILDER_PROJECT_ID // guard:allow-env-credential - non-secret deployment project id
-        : process.env.FACTORY_PUBLIC_URL; // guard:allow-env-credential - public callback origin
-  if (!value) throw new Error(`${name} is required for the Builder executor.`);
-  return value;
-}
-
-function publicCallbackUrl(runId: string): string {
-  const base = requiredEnv("FACTORY_PUBLIC_URL").replace(/\/$/, "");
-  return `${base}/_agent-native/factory/builder-callback?runId=${encodeURIComponent(runId)}`;
-}
-
-export async function startBuilderRun(
-  input: BuilderExecutorInput,
-): Promise<BuilderExecutorResult> {
-  const baseUrl = requiredEnv("BUILDER_AI_SERVICES_URL").replace(/\/$/, "");
-  const projectId = requiredEnv("BUILDER_PROJECT_ID");
-  const privateKey = await resolveConnectorSecret(
-    "BUILDER_PRIVATE_KEY",
-    input.ownerEmail,
-    {
-      orgId: input.orgId,
-    },
-  );
-  if (!privateKey) {
-    throw new Error(
-      "No Builder executor credential configured. Connect the Builder service in workspace settings or configure BUILDER_PRIVATE_KEY through the workspace resolver.",
-    );
-  }
-  const webhookSecret = await resolveConnectorSecret(
-    "FACTORY_BUILDER_WEBHOOK_SECRET",
-    input.ownerEmail,
-    { orgId: input.orgId },
-  );
-  if (!webhookSecret)
-    throw new Error(
-      "FACTORY_BUILDER_WEBHOOK_SECRET is required for signed callbacks.",
-    );
-
-  const branchName = `factory/${input.itemId.slice(0, 12)}`;
-  const prompt = [
-    "Work on this approved Factory item.",
-    `Factory item: ${input.itemId}`,
-    input.summary
-      ? `Feedback: ${input.summary}`
-      : "No feedback summary was supplied.",
-    input.sourceUrl ? `Source: ${input.sourceUrl}` : "",
-    input.repository ? `Repository: ${input.repository}` : "",
-    input.instructions ? `Triage instructions: ${input.instructions}` : "",
-    "Run /address-feedback in the repository and read the address-feedback, address-feedback-with-replies, review-latest-feedback, and review-prs skills as relevant. Search for repeat reports, fix the smallest owning boundary, and verify the full path before opening the pull request.",
-    "Inspect the repository, make the smallest safe fix, run validation, and open a pull request.",
-    "Include the Factory item id and source link in the pull request description.",
-    "Do not touch protected areas: auth/session/identity, credentials/vault, migrations, payments, security, or publishable packages.",
-  ]
-    .filter(Boolean)
-    .join("\n");
-
-  const response = await fetch(`${baseUrl}/projects/branch/message`, {
-    method: "POST",
-    headers: {
-      Authorization: `Bearer ${privateKey.startsWith("bpk-") ? privateKey : `bpk-${privateKey}`}`,
-      "Content-Type": "application/json",
-    },
-    body: JSON.stringify({
-      projectId,
-      branchName,
-      userMessage: {
-        userPrompt: prompt,
-        runValidateCommand: true,
-        queue: true,
-      },
-      fireAndForget: true,
-      webhook: { url: publicCallbackUrl(input.runId), secret: webhookSecret },
-    }),
-  });
-  if (!response.ok) {
-    throw new Error(
-      `Builder executor rejected the run: HTTP ${response.status} ${await response.text()}`,
-    );
-  }
-  let payload: {
-    id?: string;
-    taskId?: string;
-    runId?: string;
-  };
-  try {
-    payload = (await response.json()) as typeof payload;
-  } catch {
-    throw new Error("Builder executor returned invalid JSON.");
-  }
-  const providerTaskId = payload.id ?? payload.taskId ?? payload.runId;
-  if (!providerTaskId) {
-    throw new Error("Builder executor response did not include a task id.");
-  }
-  return {
-    providerTaskId,
-    branchName,
-  };
-}

package/docs/content/template-forms-building-publishing.mdx

@@ -1,135 +0,0 @@
----
-title: "Building and publishing a form"
-description: "The field types Forms ships with, conditional show/hide logic, fine-tuning fields in the visual editor, and publishing a protected, branded public form."
----
-
-# Building and publishing a form
-
-This page covers designing a form's fields and getting it in front of respondents — through chat, the visual editor, or both. It's written for whoever is putting the form together, with a JSON reference partway through for anyone scripting form creation directly.
-
-## Field types {#field-types}
-
-Forms ships with 11 field types out of the box. Ask the agent for any of them by name, or describe the question and let it pick:
-
-<Table
-  id="doc-block-forms3"
-  title="Shipped field types"
-  columns={["Type", "Needs options", "Example use"]}
-  rows={[
-    ["text", "No", "Name, company"],
-    ["email", "No", "Contact email"],
-    ["number", "No", "Age, quantity"],
-    ["textarea", "No", "Message, comments"],
-    ["select", "Yes", "Country, department"],
-    ["multiselect", "Yes", "Skills, interests"],
-    ["checkbox", "No", "Consent, opt-in"],
-    ["radio", "Yes", "Gender, preference"],
-    ["date", "No", "Birthday, deadline"],
-    ["rating", "No", "Satisfaction, quality (1-5 stars)"],
-    ["scale", "No", "NPS, likelihood (numeric range)"],
-  ]}
-/>
-
-Each field is a JSON object under the hood, whether the agent writes it or you script `create-form` directly:
-
-```json
-{
-  "id": "team_size",
-  "type": "select",
-  "label": "Team size",
-  "placeholder": "Select...",
-  "description": "Roughly how many people are on your team?",
-  "required": true,
-  "options": ["1-5", "6-20", "21-100", "100+"],
-  "validation": {
-    "min": 1,
-    "max": 100,
-    "pattern": "^[0-9]+$",
-    "message": "Enter a number"
-  },
-  "width": "half"
-}
-```
-
-`id`, `type`, `label`, and `required` are the only required properties. `options` is required for `select`, `multiselect`, and `radio`; `validation` (`min`/`max`/`pattern`/`message`) is optional and type-appropriate; `width` is `"full"` (default) or `"half"` for a side-by-side layout.
-
-## Conditional fields
-
-A field can stay hidden until an earlier answer matches a rule:
-
-```json
-{
-  "id": "other_use_case",
-  "type": "text",
-  "label": "Tell us more",
-  "required": false,
-  "conditional": {
-    "fieldId": "use_case",
-    "operator": "equals",
-    "value": "Other"
-  }
-}
-```
-
-`fieldId` must reference a field that appears **earlier** in the form — a forward or missing reference is rejected before it can be saved. The supported operators are `equals`, `not_equals`, and `contains` (the last one matches against multi-select arrays too). When a field is hidden by its condition, its value is stripped before the response is stored or delivered to any integration — a hidden field never leaks a stale or default value into your data.
-
-## Fine-tuning visually
-
-Once a form exists, open its builder to edit labels, placeholders, required state, options, and field order directly — useful when you want pixel-level control rather than describing the change in chat. The builder has four tabs: Edit, Responses, Settings, and Integrations.
-
-<WireframeBlock id="doc-block-forms4">
-  <Screen
-    surface="desktop"
-    html={
-      "<div style='display:flex;flex-direction:column;min-height:520px;box-sizing:border-box'><div style='display:flex;align-items:center;gap:10px;padding:14px 16px;border-bottom:1.4px solid var(--wf-line)'><strong>Beta signup</strong><span class='wf-pill accent'>published</span><div style='flex:1'></div><button>Share</button><button class='primary'>Unpublish</button></div><div style='display:flex;gap:8px;padding:12px 16px;border-bottom:1.4px solid var(--wf-line)'><span class='wf-pill accent'>Edit</span><span class='wf-pill'>Responses 187</span><span class='wf-pill'>Settings</span><span class='wf-pill'>Integrations</span></div><div style='display:flex;flex-direction:column;gap:12px;padding:30px 78px;overflow:hidden'><h2 style='margin:0'>Beta signup</h2><p class='wf-muted' style='margin:0'>Reserve a spot in the upcoming private beta cohort.</p><div class='wf-card'><strong>Full name</strong><input value='Ada Lovelace'/></div><div class='wf-card'><strong>Work email</strong><input value='you@company.com'/></div><div class='wf-card'><strong>Your role</strong><input value='Select...'/></div><div class='wf-card'><strong>Team size</strong><input value='Select...'/></div></div></div>"
-    }
-  />
-</WireframeBlock>
-
-## Publishing
-
-A form moves through three statuses:
-
-| Status      | Meaning                                  | Public access          |
-| ----------- | ---------------------------------------- | ---------------------- |
-| `draft`     | Work in progress, not publicly available | No                     |
-| `published` | Live and accepting responses             | Yes                    |
-| `closed`    | No longer accepting responses            | Shows a closed message |
-
-A form can't be published if it has no fields, any field is missing a label, or a `select`/`multiselect`/`radio` field has no options — publishing is rejected with the specific reason so it's easy to fix.
-
-The public URL is `/f/<slug>`, where the slug is generated from the title plus a short unique suffix (`beta-signup-a1b2c3`) and regenerates automatically whenever the title changes, unless you set a custom slug. For a form meant to be genuinely anonymous, create it with `status: "published"` from the start and use the exact public URL the create step returns, rather than assuming a later publish step.
-
-## Protecting and branding a public form
-
-**Captcha.** Public submissions can require [Cloudflare Turnstile](https://www.cloudflare.com/products/turnstile/) verification — opt-in by setting a site key and secret key in Settings. Turnstile is on top of two always-on defenses: a hidden honeypot field that silently discards bot submissions, and a minimum fill-time check that rejects anything submitted faster than a human plausibly could.
-
-<Callout tone="warning">
-  Both Turnstile keys need to be set together. The public form page only renders
-  the captcha widget (and produces a token) when the site key is configured, and
-  the server only verifies that token when it exists — so setting just the
-  secret key verifies nothing, and setting just the site key shows a widget the
-  server never checks.
-</Callout>
-
-**Branding.** Every standalone public form shows a small "Built with Agent-Native" badge in the bottom corner. It isn't a per-form setting — it's hidden automatically only when the form is embedded inside another page, such as an embedded feedback popover, since that context already carries its host app's own branding.
-
-**Anonymous mode.** Set `anonymous: true` on a form's settings for genuine anonymity: submissions on that form skip capturing the request IP, the submitter's session or claimed email, the page URL, the client surface, and any chat/run ids — none of it is ever written, not just hidden later. This is different from an ordinary published form, which is publicly reachable but still records who and where a response came from when that information is available.
-
-<WireframeBlock id="doc-block-forms5">
-  <Screen
-    surface="desktop"
-    html={
-      "<div style='display:flex;flex-direction:column;min-height:520px;box-sizing:border-box;padding:40px 60px;gap:20px;position:relative'><div><h2 style='margin:0'>Customer feedback</h2><p class='wf-muted' style='margin:6px 0 0'>Tell us what is and isn't working.</p></div><div class='wf-card'><strong>Overall satisfaction</strong><span style='font-size:20px;letter-spacing:2px'>★★★★☆</span></div><div class='wf-card'><strong>What could be better?</strong><input value='Type your answer...'/></div><div class='wf-card' style='align-items:center;text-align:center;gap:6px'><span class='wf-pill'>Verify you're human</span><span class='wf-muted' style='font-size:12px'>Cloudflare Turnstile widget</span></div><button class='primary' style='align-self:flex-start'>Submit</button><span class='wf-pill' style='position:absolute;right:24px;bottom:20px'>Built with Agent-Native</span></div>"
-    }
-  />
-</WireframeBlock>
-
-One more setting worth knowing: `allowedOrigins` restricts which origins may submit to the form cross-origin — handy when embedding a form's submit endpoint in another site's widget. Leaving it unset allows any origin, matching how a plain public form link behaves today.
-
-## What's next
-
-- [**Forms**](/docs/template-forms) — the product overview
-- [**Responses, insights, and destinations**](/docs/template-forms-responses) — what happens after a submission arrives
-- [**Forms — data model and actions**](/docs/template-forms-developers) — the `FormField`/`FormSettings` schema and every action
-- [**Messaging**](/docs/messaging) — connecting Slack for submission notifications

package/docs/content/template-forms-responses.mdx

@@ -1,120 +0,0 @@
----
-title: "Forms — responses, insights, and destinations"
-description: "Where form submissions live, how to ask the agent for charts and summaries, exporting to CSV or JSON, and routing new responses to Slack, Discord, Sheets, or a webhook."
----
-
-# Responses, insights, and destinations
-
-This page covers what happens after someone submits a form: where the response is stored, how to ask the agent to analyze it, how to export it, and how to route it to other tools automatically. It's for anyone reviewing form results, whether or not they touch code.
-
-## Collecting responses
-
-Every submission to a published form becomes one row: the answers (keyed by field id), when it arrived, and — unless the form is anonymous — who sent it and where from. You can open any form's Responses tab for a per-response detail view, or just ask:
-
-- "How many responses does the beta signup form have?"
-- "Who submitted today?"
-- "Show me the responses for the customer feedback form."
-
-When a response was submitted through an embedded feedback widget elsewhere (rather than filled out directly on the public form page), the responses table also shows a **Page** and **Source** column — the page the respondent was on and whether they were on web, desktop (Electron), or desktop (Tauri). These only appear when at least one response actually carries that context.
-
-## Response insights {#response-insights}
-
-Ask for trends or summaries instead of scrolling rows — "submissions by day," "how many responses this week," "summarize this week's feedback" — and the agent returns a native chart, table, or combined dashboard rather than a wall of raw data. Which one comes back depends on what you asked for:
-
-<Diagram
-  id="doc-block-forms6"
-  title="Response insights: one action, three shapes"
-  summary={
-    "The same analysis runs every time; only what gets returned changes with what you asked for."
-  }
->
-
-```html
-<div class="diagram-branch">
-  <div class="diagram-panel center">
-    <span class="diagram-pill accent">response-insights</span
-    ><small class="diagram-muted">displayMode</small>
-  </div>
-  <div class="diagram-arrow diagram-muted" aria-hidden="true">&rarr;</div>
-  <div class="diagram-col">
-    <div class="diagram-node">
-      chart<br /><small class="diagram-muted"
-        >"submissions by day" — bar chart only</small
-      >
-    </div>
-    <div class="diagram-node">
-      table<br /><small class="diagram-muted"
-        >"show me the rows" — response table only</small
-      >
-    </div>
-    <div class="diagram-node">
-      insights (default)<br /><small class="diagram-muted"
-        >"summarize this" — chart + table + summary</small
-      >
-    </div>
-  </div>
-</div>
-```
-
-```css
-.diagram-branch {
-  display: flex;
-  align-items: center;
-  gap: 12px;
-  flex-wrap: wrap;
-}
-.diagram-branch .diagram-col {
-  display: flex;
-  flex-direction: column;
-  gap: 10px;
-}
-.diagram-branch .diagram-arrow {
-  font-size: 22px;
-  line-height: 1;
-}
-.diagram-branch .center {
-  display: flex;
-  flex-direction: column;
-  align-items: center;
-  gap: 4px;
-}
-```
-
-</Diagram>
-
-<WireframeBlock id="doc-block-forms7">
-  <Screen
-    surface="desktop"
-    html={
-      "<div style='display:flex;flex-direction:column;min-height:420px;box-sizing:border-box;padding:32px 48px;justify-content:center'><div class='wf-card' style='max-width:520px;gap:14px'><strong>Beta signup — response insights</strong><div style='display:flex;align-items:flex-end;gap:6px;height:64px'><div style='width:18px;height:20%;background:var(--wf-line)'></div><div style='width:18px;height:45%;background:var(--wf-line)'></div><div style='width:18px;height:30%;background:var(--wf-line)'></div><div style='width:18px;height:70%;background:var(--wf-line)'></div><div style='width:18px;height:55%;background:var(--wf-line)'></div><div style='width:18px;height:90%;background:var(--wf-line)'></div><div style='width:18px;height:60%;background:var(--wf-line)'></div></div><span class='wf-muted' style='font-size:12px'>Submissions by day · last 30 days · 187 responses</span><span class='wf-pill accent'>Open response insights</span></div></div>"
-    }
-  />
-</WireframeBlock>
-
-When you don't name a form, the agent scopes the analysis to your most recently updated accessible forms (up to 50 by default, 100 max) instead of just one — useful for "how are submissions trending across all my forms this month?" Every result reports whether it's exact or sampled, along with the row counts, so you always know if you're looking at everything or a preview.
-
-## Exporting
-
-"Export this to CSV" or "give me a JSON export of all responses" uploads a file to your configured file storage and returns the link — exports are never written to local disk, since serverless hosts have a read-only filesystem. CSV rows use field labels as headers, join multi-select answers with semicolons, and neutralize any cell that looks like a spreadsheet formula (a defense against CSV injection from anonymous submitters).
-
-## Routing submissions
-
-Turn on automatic delivery so new responses show up where your team already works, instead of someone having to check the Responses tab:
-
-| Destination   | What it needs                                                                                                                                                     |
-| ------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| Slack         | An Incoming Webhook URL for the target channel                                                                                                                    |
-| Discord       | A Discord channel webhook URL                                                                                                                                     |
-| Google Sheets | A deployed Apps Script `/exec` URL that calls `JSON.parse(e.postData.contents)` and appends the values — a spreadsheet or `/dev` URL will not receive submissions |
-| Webhook       | Any HTTPS endpoint; receives the full structured submission payload as JSON                                                                                       |
-
-These are configured per form in the builder's Integrations tab and are separate from the app-wide Slack connection under [Messaging](/docs/messaging) — connect that first if you want the agent to post there directly instead. Every destination URL is checked against private IPs, cloud-metadata addresses, and non-`http(s)` schemes both when you save it and again each time a response fires, so a form can't be turned into an internal-network probe.
-
-Turn on `settings.emailOnNewResponses` to also email the form owner's account on every new response, using whichever email provider is configured (Resend or SendGrid). Email delivery is best-effort: a public submission still succeeds even if the email fails to send, so check server logs and provider configuration if an expected email never arrives.
-
-## What's next
-
-- [**Forms**](/docs/template-forms) — the product overview
-- [**Building and publishing a form**](/docs/template-forms-building-publishing) — fields, conditional logic, and public-form protections
-- [**Forms — data model and actions**](/docs/template-forms-developers) — the `response-insights`, `export-responses`, and `list-responses` action contracts
-- [**Messaging**](/docs/messaging) — connecting Slack for direct agent posting