@agent-native/core 0.176.4-nightly-20260902024948 → 0.176.4-nightly-20260902103608

package/corpus/README.md

@@ -31,4 +31,4 @@ rg -n "defineAction|useActionQuery" node_modules/@agent-native/core/corpus
 
 ## Generated Counts
 
-- template files: 8839
+- template files: 8840

package/corpus/templates/assets/.agents/skills/a2a-assets/SKILL.md

@@ -22,8 +22,9 @@ delegation, but A2A replies cannot render MCP App pickers.
    `callerAppId` with the calling app id (`slides`, `design`, `content`,
    `mail`) so the Assets audit log can group cross-agent generations.
 3. Treat image batches as complete when the action returns. Use returned
-   successful `images` entries directly; only regenerate slots that returned
-   `ok: false`.
+   successful compact `images` entries directly; only regenerate slots that
+   returned `ok: false`. Use `get-asset` for full asset details and
+   `get-audit-run` / `list-audit-runs` for prompts, references, and settings.
    A result carrying `draftPendingApproval: true` means the caller can draft in
    that kit but not save into it. The image is real and usable — say it is
    waiting on a kit editor instead of reporting it as saved, and do not retry.
@@ -33,12 +34,13 @@ delegation, but A2A replies cannot render MCP App pickers.
 5. When a human designer needs to continue the work, create or update a
    generation session and preserve the returned `sessionId`.
 6. For video, call `generate-video` and then `refresh-generation-run` until the run completes.
-7. Preserve returned `assetId`, `runId`, `previewUrl`, `downloadUrl`, and
-   `embedPath` exactly.
+7. Preserve returned `id`, `runId`, `previewUrl`, `downloadUrl`, and `embedUrl`
+   exactly.
 8. Insert chosen/exported URLs into the caller's artifact. Design callers should
    call `insert-asset` after the picker returns a selected asset.
-9. On feedback, call `refine-image` with the prior `assetId`, `source: "a2a"`,
-   and the same `callerAppId`, then replace only the affected destination.
+9. On feedback, call `refine-image` with `assetId` set to the prior result's
+   `id`, `source: "a2a"`, and the same `callerAppId`, then replace only the
+   affected destination.
 
 ## Audit Trail
 

package/corpus/templates/assets/.agents/skills/asset-generation/SKILL.md

@@ -89,9 +89,10 @@ claiming a brand match.
 3. For one asset, call `generate-image`; for multiple independent slots, call
    `generate-image-batch` with stable `slotId` values.
 4. Image generation actions are synchronous. After `generate-image` or
-   `generate-image-batch` returns, use its returned `images` / asset fields
+   `generate-image-batch` returns, use its compact `images` / asset summaries
    directly; do not call `get-generation-run`, `refresh-generation-run`, or
-   regenerate just to verify image runs.
+   regenerate just to verify image runs. Use `get-asset` for full asset details
+   and the audit-run actions for prompts, references, and settings.
    A result with `draftPendingApproval: true` came from a kit the user can draft
    in but not save into. Offer the candidate and say it needs a kit editor to be
    saved; `save-generated-image` will refuse, so do not call it or retry. Video
@@ -112,9 +113,10 @@ claiming a brand match.
      another ratio (16:9, 9:16, 4:5, 21:9, …), pick a Gemini model rather than
      `gpt-image-2` — an unsupported pairing is rejected upstream. Source of truth
      is `supportedAspectRatiosForModel` / `MODEL_ASPECT_RATIOS` in `shared/api.ts`.
-8. Preserve returned `assetId`, `runId`, `previewUrl`, and `downloadUrl`.
-   Preserve the immutable `contextPackId` and reuse labels on both generation
-   run and output-asset metadata; rendered pixels are not provenance.
+8. Direct generation returns `id`; picker selections return `assetId`. Preserve
+   that asset identifier with `runId`, `previewUrl`, `downloadUrl`, and
+   `embedUrl`. Preserve the immutable `contextPackId` and reuse labels on both
+   generation run and output-asset metadata; rendered pixels are not provenance.
 9. Use `refine-image` for feedback on an existing asset, `edit-image` for
    targeted changes, and `restyle-image` with `subjectAssetId` and
    `styleStrength` for subject-preserving brand restyles.

package/corpus/templates/assets/.agents/skills/image-generation/SKILL.md

@@ -54,10 +54,13 @@ evidence, screenshots, or exact logos.
   Use `generate-image-batch` with stable `slotId`s so the shared generation tray
   can show live slots.
 - `generate-image` and `generate-image-batch` are synchronous for images. One
-  batch call should produce the requested candidates and return their asset
-  IDs/URLs; do not follow it with `get-generation-run`,
+  batch call should produce the requested candidates and return compact asset
+  summaries with IDs and URLs; do not follow it with `get-generation-run`,
   `refresh-generation-run`, or more generation unless the user asks for another
   direction or the returned slot has `ok: false`.
+- Use `get-asset` when full asset details are needed. Use `get-audit-run` or
+  `list-audit-runs` for the prompt, compiled prompt, references, and generation
+  settings.
 - For repeatable deliverables, honor a `template` @mention as `templateId` or
   call `list-templates` when choosing one. Pass the template through
   `generate-image`, `generate-image-batch`, `refine-image`, or

package/corpus/templates/assets/actions/_helpers.ts

@@ -438,6 +438,112 @@ export function serializeAsset(
   };
 }
 
+/**
+ * Caller-facing generation result. Generation internals are replayed into the
+ * model context on later turns and can be truncated by delegated/ledger caps;
+ * full details remain available through get-asset and the audit-run actions.
+ */
+export function serializeAssetSummary(row: {
+  id: string;
+  generationRunId?: string | null;
+  title?: string | null;
+  libraryId: string;
+  collectionId?: string | null;
+  status: string;
+  mediaType?: string | null;
+  aspectRatio?: string | null;
+  width?: number | null;
+  height?: number | null;
+  mimeType: string;
+  objectKey: string;
+  thumbnailObjectKey?: string | null;
+}) {
+  const urls = assetUrls(row);
+  return {
+    id: row.id,
+    runId: row.generationRunId ?? null,
+    artifactType: "image" as const,
+    title: row.title ?? null,
+    libraryId: row.libraryId,
+    collectionId: row.collectionId ?? null,
+    status: row.status,
+    mediaType:
+      row.mediaType ?? (row.mimeType.startsWith("video/") ? "video" : "image"),
+    aspectRatio: row.aspectRatio ?? null,
+    width: row.width ?? null,
+    height: row.height ?? null,
+    mimeType: row.mimeType,
+    url: urls.url,
+    previewUrl: urls.previewUrl,
+    downloadUrl: urls.downloadUrl,
+    embedUrl: urls.embedUrl,
+  };
+}
+
+export function serializeAssetListItem(
+  row: {
+    id: string;
+    libraryId: string;
+    collectionId?: string | null;
+    folderId?: string | null;
+    mediaType?: string | null;
+    role: string;
+    status: string;
+    title?: string | null;
+    description?: string | null;
+    altText?: string | null;
+    prompt?: string | null;
+    model?: string | null;
+    aspectRatio?: string | null;
+    mimeType: string;
+    width?: number | null;
+    height?: number | null;
+    durationSeconds?: number | null;
+    objectKey: string;
+    thumbnailObjectKey?: string | null;
+    metadata?: string | null;
+  },
+  lineage: AssetLineageSummary | null = null,
+) {
+  const metadata = parseJson<Record<string, unknown>>(row.metadata, {});
+  const urls = assetUrls(row);
+  return {
+    id: row.id,
+    libraryId: row.libraryId,
+    collectionId: row.collectionId ?? null,
+    folderId: row.folderId ?? null,
+    mediaType:
+      row.mediaType ?? (row.mimeType.startsWith("video/") ? "video" : "image"),
+    role: row.role,
+    status: row.status,
+    category: metadata.category ?? null,
+    title: row.title ?? null,
+    description: row.description ?? metadata.description ?? null,
+    altText: row.altText ?? null,
+    prompt: row.prompt ?? null,
+    model: row.model ?? null,
+    aspectRatio: row.aspectRatio ?? null,
+    mimeType: row.mimeType,
+    width: row.width ?? null,
+    height: row.height ?? null,
+    durationSeconds: row.durationSeconds ?? null,
+    metadata: {
+      category: metadata.category ?? null,
+      intent: metadata.intent ?? null,
+      description: metadata.description ?? null,
+      originalName: metadata.originalName ?? null,
+      provider: metadata.provider ?? null,
+    },
+    lineage,
+    url: urls.url,
+    previewUrl: urls.previewUrl,
+    thumbnailUrl: urls.thumbnailUrl,
+    downloadUrl: urls.downloadUrl,
+    embedPath: urls.embedPath,
+    embedUrl: urls.embedUrl,
+  };
+}
+
 export async function getAssetOrThrow(id: string) {
   const db = getDb();
   const [asset] = await db

package/corpus/templates/assets/actions/generate-image-batch.ts

@@ -70,7 +70,7 @@ const imageBatchAgentInputSchema = z.object({
 
 export default defineAction({
   description:
-    "Generate several brand-consistent images in parallel from one brand kit/library. Use @brand-kit mentions as libraryId and @preset mentions as presetId when present. If no preset is tagged, call list-generation-presets first and use a matching preset's presetId; the user may not know presets exist. Generate presetless only when no preset matches the request. This is synchronous for images: one call waits for every slot and returns final image artifacts. Use this for slide decks, landing pages, and multi-slot design work. Do not call get-generation-run or refresh-generation-run after a normal image batch result.",
+    "Generate several brand-consistent images in parallel from one brand kit/library. Use @brand-kit mentions as libraryId and @preset mentions as presetId when present. If no preset is tagged, call list-generation-presets first and use a matching preset's presetId; the user may not know presets exist. Generate presetless only when no preset matches the request. This is synchronous for images: one call waits for every slot and returns compact image summaries; use get-asset for full asset details and get-audit-run for prompt, references, and settings. Use this for slide decks, landing pages, and multi-slot design work. Do not call get-generation-run or refresh-generation-run after a normal image batch result.",
   schema: z.object({
     libraryId: z
       .string()
@@ -296,15 +296,45 @@ export default defineAction({
           .where(eq(schema.assetGenerationSessions.id, base.sessionId));
       }
     }
+    const creativeContextProvenance = firstCreativeContextProvenance(results);
     return {
       count: results.length,
       images: results.map((result, index) =>
         serializeBatchResult(slots[index].slotId, result),
       ),
+      ...creativeContextProvenance,
     };
   },
 });
 
+function firstCreativeContextProvenance(
+  results: PromiseSettledResult<Record<string, unknown>>[],
+) {
+  for (const result of results) {
+    if (result.status !== "fulfilled") continue;
+    const contextMode = result.value.contextMode;
+    if (
+      contextMode !== "off" &&
+      contextMode !== "auto" &&
+      contextMode !== "pinned"
+    ) {
+      continue;
+    }
+    const contextPackId = result.value.contextPackId;
+    return {
+      contextMode,
+      contextPackId:
+        typeof contextPackId === "string" || contextPackId === null
+          ? contextPackId
+          : null,
+      reuseLabels: Array.isArray(result.value.reuseLabels)
+        ? result.value.reuseLabels
+        : [],
+    };
+  }
+  return {};
+}
+
 function firstSuccessfulAssetId(
   results: PromiseSettledResult<Record<string, unknown>>[],
 ): string | null {
@@ -351,7 +381,13 @@ function serializeBatchResult(
     };
   }
 
-  return { slotId, ok: true, ...result.value };
+  const {
+    contextMode: _contextMode,
+    contextPackId: _contextPackId,
+    reuseLabels: _reuseLabels,
+    ...image
+  } = result.value;
+  return { slotId, ok: true, ...image };
 }
 
 function imageAssetId(value: Record<string, unknown>): string | undefined {

package/corpus/templates/assets/actions/generate-image.ts

@@ -73,9 +73,10 @@ import {
   type StyleBrief,
 } from "../shared/api.js";
 import {
+  assetUrls,
   imageArtifactLinks,
   requireGenerationSessionInLibrary,
-  serializeAsset,
+  serializeAssetSummary,
 } from "./_helpers.js";
 import { readImageModelDefault } from "./_image-model-default.js";
 import { resolveTemplateAccess } from "./_template-access.js";
@@ -127,7 +128,7 @@ const imageGenerationAgentInputSchema = z.object({
 
 export default defineAction({
   description:
-    "Generate one brand-consistent image from a brand kit/library. This is synchronous for images and returns the final asset with preview/download/embed URLs. Use @brand-kit mentions as libraryId and @preset mentions as presetId when present. If no preset is tagged, call list-generation-presets first and use a matching preset's presetId; the user may not know presets exist. Generate presetless only when no preset matches the request. Use generate-image-batch for multiple independent slots; do not poll image runs after this action returns.",
+    "Generate one brand-consistent image from a brand kit/library. This is synchronous for images and returns a compact asset summary with preview/download/embed URLs; use get-asset for full asset details and get-audit-run for prompt, references, and settings. Use @brand-kit mentions as libraryId and @preset mentions as presetId when present. If no preset is tagged, call list-generation-presets first and use a matching preset's presetId; the user may not know presets exist. Generate presetless only when no preset matches the request. Use generate-image-batch for multiple independent slots; do not poll image runs after this action returns.",
   schema: z.object({
     libraryId: z
       .string()
@@ -1129,7 +1130,8 @@ export default defineAction({
           }),
         })
         .where(eq(schema.assetGenerationRuns.id, runId));
-      const serialized = serializeAsset(asset);
+      const serialized = serializeAssetSummary(asset);
+      const urls = assetUrls(asset);
       await upsertVariantSlot({
         runId,
         batchId: args.variantBatchId ?? null,
@@ -1144,12 +1146,11 @@ export default defineAction({
         status: "ready",
         assetId: asset.id,
         previewUrl: serialized.previewUrl,
-        thumbnailUrl: serialized.thumbnailUrl,
+        thumbnailUrl: urls.thumbnailUrl,
       });
       return {
         ...serialized,
         runId,
-        artifactType: "image",
         // Cross-app callers embed the artifact in HTML. `url` is the Assets
         // detail page; previewUrl is the actual media response.
         Artifacts: imageArtifactLinks({

package/corpus/templates/assets/actions/list-assets.ts

@@ -18,7 +18,7 @@ import {
 import {
   buildAssetLineage,
   requireLibrary,
-  serializeAsset,
+  serializeAssetListItem,
 } from "./_helpers.js";
 
 export default defineAction({
@@ -99,7 +99,29 @@ export default defineAction({
     const candidateRunIdSet = new Set(candidateRunIds ?? []);
     const [rows, lineageRows] = await Promise.all([
       db
-        .select()
+        .select({
+          id: schema.assets.id,
+          libraryId: schema.assets.libraryId,
+          collectionId: schema.assets.collectionId,
+          folderId: schema.assets.folderId,
+          mediaType: schema.assets.mediaType,
+          role: schema.assets.role,
+          status: schema.assets.status,
+          title: schema.assets.title,
+          description: schema.assets.description,
+          altText: schema.assets.altText,
+          prompt: schema.assets.prompt,
+          model: schema.assets.model,
+          aspectRatio: schema.assets.aspectRatio,
+          mimeType: schema.assets.mimeType,
+          width: schema.assets.width,
+          height: schema.assets.height,
+          durationSeconds: schema.assets.durationSeconds,
+          objectKey: schema.assets.objectKey,
+          thumbnailObjectKey: schema.assets.thumbnailObjectKey,
+          generationRunId: schema.assets.generationRunId,
+          metadata: schema.assets.metadata,
+        })
         .from(schema.assets)
         .where(and(...filters))
         .orderBy(desc(schema.assets.createdAt)),
@@ -148,7 +170,7 @@ export default defineAction({
       })
       .filter((asset) => assetMatchesSearch(asset, normalizedQuery, category))
       .map((asset) => ({
-        ...serializeAsset(asset, lineageById.get(asset.id) ?? null),
+        ...serializeAssetListItem(asset, lineageById.get(asset.id) ?? null),
         libraryTitle: libraryTitleById.get(asset.libraryId) ?? null,
       }));
     return { count: assets.length, assets };

package/corpus/templates/assets/changelog/2026-09-01-image-generation-returns-compact-results.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-09-01
+---
+
+Image generation returns compact results so multi-image runs stop hitting delegated result limits.

package/corpus/templates/slides/server/lib/assets-image-delegation.ts

@@ -107,7 +107,8 @@ function buildDelegationMessage(request: AssetsImageRequest): string {
         `${references.join(", ")}\n`
       : "") +
     `\nPick the best matching library via match-library if no libraryId is ` +
-    `obvious, then generate with generate-image-batch. Return assetId, runId, ` +
+    `obvious, then generate with generate-image-batch. Return id (the asset ` +
+    `ID), runId, ` +
     `previewUrl, and downloadUrl verbatim so the slides agent can drop them ` +
     `into the slide HTML. Set source: "a2a" and callerAppId: "slides" so the ` +
     `Assets audit log groups these generations.`

package/dist/agent/chat-health-alert.d.ts

@@ -18,6 +18,12 @@ export type ChatHealthAlertOutcome = {
     turns: number;
     badRate: number;
     recipients: number;
+} | {
+    status: "delivery-failed";
+    reason: string;
+} | {
+    status: "persistence-failed";
+    reason: string;
 } | {
     status: "check-failed";
     reason: string;

package/dist/agent/chat-health-alert.js

@@ -1,8 +1,10 @@
+import { randomUUID } from "node:crypto";
 import { getDbExec } from "../db/client.js";
-import { notify } from "../notifications/registry.js";
-import { getSetting, putSetting } from "../settings/store.js";
+import { notifyWithDelivery } from "../notifications/registry.js";
+import { runWithRequestContext } from "../server/request-context.js";
+import { deleteSettingIfValue, mutateSetting } from "../settings/store.js";
 /**
- * Pages the people who can act when an app's chat stops answering.
+ * Sends one Slack alert when an app's chat stops answering.
  *
  * The detector for this already existed as `scripts/chat-health.mjs --strict`,
  * correctly calibrated and exiting 1 on a partial outage — but nothing ever ran
@@ -27,7 +29,9 @@ const MIN_TURNS = 5;
 const BAD_RATE_THRESHOLD = 0.5;
 /** One page per outage, not one per sweep. */
 const COOLDOWN_MS = 60 * 60_000;
-const LAST_ALERT_SETTING_KEY = "chat-health-alert:last-paged-at";
+/** Slack sends time out well inside this lease; failed sends release it early. */
+const CLAIM_LEASE_MS = 5 * 60_000;
+const LAST_ALERT_SETTING_KEY = "chat-health-alert:last-slack-alert-at";
 /**
  * Scores the LAST run of each turn in the window, matching how
  * `scripts/chat-health.mjs` reports so a page and the CLI never disagree.
@@ -57,16 +61,38 @@ async function countRecentTurns(since) {
         bad: Number(row?.bad ?? 0),
     };
 }
-/** Owners and admins — the people who can actually change a model or a key. */
-async function alertRecipients() {
+/** Use one owner/admin only when the app has an unambiguous org scope. */
+async function alertOwner() {
     const { rows } = await getDbExec().execute({
-        sql: `SELECT DISTINCT email FROM org_members
-          WHERE role IN ('owner', 'admin')`,
+        sql: `SELECT org_id, email, role FROM org_members
+          WHERE role IN ('owner', 'admin')
+          ORDER BY CASE role WHEN 'owner' THEN 0 WHEN 'admin' THEN 1 ELSE 2 END, email`,
         args: [],
     });
-    return rows
-        .map((r) => String(r.email ?? ""))
-        .filter(Boolean);
+    const orgIds = new Set(rows.map((row) => String(row.org_id ?? "")));
+    if (orgIds.size !== 1 || orgIds.has(""))
+        return null;
+    const recipient = rows.find((row) => {
+        const role = row.role;
+        return role === "owner" || role === "admin";
+    });
+    const email = String(recipient?.email ?? "");
+    const [orgId] = [...orgIds];
+    return email && orgId ? { owner: email, orgId } : null;
+}
+async function releaseAlertClaim(claimId, claimExpiresAt) {
+    try {
+        await deleteSettingIfValue(LAST_ALERT_SETTING_KEY, {
+            claimId,
+            claimExpiresAt,
+        });
+        return null;
+    }
+    catch (error) {
+        const reason = "The Slack alert claim could not be released.";
+        console.error(`[chat-health-alert] ${reason}`, error);
+        return reason;
+    }
 }
 export async function checkChatHealthAndAlert(now = Date.now()) {
     let counts;
@@ -84,58 +110,116 @@ export async function checkChatHealthAndAlert(now = Date.now()) {
     if (badRate < BAD_RATE_THRESHOLD) {
         return { status: "healthy", turns: counts.turns, badRate };
     }
-    // A cooldown stamp we could not READ is not a cooldown that is absent:
-    // treating it as absent pages on every sweep for as long as settings stay
-    // unreadable, which is exactly the spam the cooldown exists to prevent.
-    let stored;
+    // Claim the page before awaiting the external send. The short lease keeps
+    // overlapping sweeps from both sending; failed sends release it below,
+    // while a crashed send becomes retryable after the lease.
+    const claimId = randomUUID();
+    const claimExpiresAt = now + CLAIM_LEASE_MS;
+    let claim;
     try {
-        stored = (await getSetting(LAST_ALERT_SETTING_KEY));
+        claim = await mutateSetting(LAST_ALERT_SETTING_KEY, (current) => {
+            const lastPagedAt = Number(current?.at ?? 0);
+            const existingClaimExpiresAt = Number(current?.claimExpiresAt ?? 0);
+            if ((Number.isFinite(lastPagedAt) && now - lastPagedAt < COOLDOWN_MS) ||
+                (Number.isFinite(existingClaimExpiresAt) &&
+                    existingClaimExpiresAt > now)) {
+                return current ?? {};
+            }
+            return { claimId, claimExpiresAt };
+        });
     }
     catch (error) {
         return { status: "check-failed", reason: String(error) };
     }
-    const lastPagedAt = Number(stored?.at ?? 0);
-    if (Number.isFinite(lastPagedAt) && now - lastPagedAt < COOLDOWN_MS) {
+    if (String(claim.claimId ?? "") !== claimId) {
+        const lastPagedAt = Number(claim.at ?? 0);
+        const retryAfterMs = Number.isFinite(lastPagedAt) && now - lastPagedAt < COOLDOWN_MS
+            ? COOLDOWN_MS - (now - lastPagedAt)
+            : Math.max(0, Number(claim.claimExpiresAt ?? 0) - now);
         return {
             status: "cooldown",
-            retryAfterMs: COOLDOWN_MS - (now - lastPagedAt),
+            retryAfterMs,
         };
     }
-    let recipients;
+    let recipient;
     try {
-        recipients = await alertRecipients();
+        recipient = await alertOwner();
     }
     catch (error) {
-        return { status: "check-failed", reason: String(error) };
+        const releaseReason = await releaseAlertClaim(claimId, claimExpiresAt);
+        return {
+            status: "check-failed",
+            reason: releaseReason
+                ? `${String(error)} ${releaseReason}`
+                : String(error),
+        };
+    }
+    if (!recipient) {
+        const reason = "No single owner/admin organization scope is available for Slack health alerts.";
+        const releaseReason = await releaseAlertClaim(claimId, claimExpiresAt);
+        return {
+            status: "delivery-failed",
+            reason: releaseReason ? `${reason} ${releaseReason}` : reason,
+        };
     }
     const pct = Math.round(badRate * 100);
-    for (const owner of recipients) {
-        await notify({
+    let delivery;
+    try {
+        delivery = await runWithRequestContext({ userEmail: recipient.owner, orgId: recipient.orgId }, () => notifyWithDelivery({
             severity: "critical",
             title: `Chat is failing: ${pct}% of turns ended without an answer`,
             body: `${counts.bad} of ${counts.turns} turns in the last hour ended without ` +
                 `an answer. Run \`node scripts/chat-health.mjs --hours 1\` for the ` +
                 `per-reason breakdown.`,
+            channels: ["slack"],
             metadata: {
                 turns: counts.turns,
                 bad: counts.bad,
                 badRate,
                 windowMs: WINDOW_MS,
             },
-        }, { owner }).catch((error) => {
-            // One undeliverable recipient must not suppress the rest.
-            console.error("[chat-health-alert] notify failed for a recipient:", error);
-        });
+        }, { owner: recipient.owner }));
+    }
+    catch (error) {
+        console.error("[chat-health-alert] Slack delivery failed:", error);
+        const releaseReason = await releaseAlertClaim(claimId, claimExpiresAt);
+        return {
+            status: "delivery-failed",
+            reason: releaseReason
+                ? `${String(error)} ${releaseReason}`
+                : String(error),
+        };
+    }
+    if (!delivery.deliveredChannels.includes("slack")) {
+        const reason = "Slack health alert was not delivered.";
+        console.error(`[chat-health-alert] ${reason}`);
+        const releaseReason = await releaseAlertClaim(claimId, claimExpiresAt);
+        return {
+            status: "delivery-failed",
+            reason: releaseReason ? `${reason} ${releaseReason}` : reason,
+        };
+    }
+    // Finalize only after Slack confirms delivery. The claim id keeps a slow or
+    // expired sender from overwriting a newer claim's cooldown.
+    try {
+        const finalized = await mutateSetting(LAST_ALERT_SETTING_KEY, (current) => String(current?.claimId ?? "") === claimId
+            ? { at: now, claimId }
+            : (current ?? {}));
+        if (String(finalized.claimId ?? "") !== claimId) {
+            const reason = "Slack delivered, but its alert cooldown claim was lost before persistence.";
+            console.error(`[chat-health-alert] ${reason}`);
+            return { status: "persistence-failed", reason };
+        }
     }
-    // Stamped only after an attempt was actually made, so a failed page retries
-    // on the next sweep instead of being silenced by its own cooldown.
-    await putSetting(LAST_ALERT_SETTING_KEY, { at: now }).catch((error) => {
+    catch (error) {
+        const reason = "Slack delivered, but the alert cooldown could not be persisted.";
         console.error("[chat-health-alert] could not stamp cooldown:", error);
-    });
+        return { status: "persistence-failed", reason };
+    }
     return {
         status: "alerted",
         turns: counts.turns,
         badRate,
-        recipients: recipients.length,
+        recipients: 1,
     };
 }

package/dist/collab/routes.d.ts

@@ -26,8 +26,8 @@ export declare const getCollabState: import("h3").EventHandlerWithFetch<import("
  * Body: { update: string (base64), requestSource?: string }
  */
 export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/file-upload/actions/upload-image.d.ts

@@ -3,18 +3,18 @@ declare const _default: import("../../action.js").ActionDefinition<{
     url?: string;
     filename?: string;
 }, {
-    id?: undefined;
     error: string;
     configured?: undefined;
     connectPath?: undefined;
     url?: undefined;
+    id?: undefined;
     provider?: undefined;
 } | {
-    id?: undefined;
     error: string;
     configured: boolean;
     connectPath: string;
     url?: undefined;
+    id?: undefined;
     provider?: undefined;
 } | {
     error?: undefined;

package/dist/notifications/channels.js

@@ -32,6 +32,7 @@ import { getKeyAllowlist, getResolvedKeyAllowlist, resolveKeyReferencesWithReque
 import { sendEmail } from "../server/email.js";
 import { registerNotificationChannel } from "./registry.js";
 let _registered = false;
+const SLACK_DELIVERY_TIMEOUT_MS = 10_000;
 export function registerBuiltinNotificationChannels() {
     if (_registered)
         return;
@@ -89,6 +90,7 @@ function createSlackWebhookChannel(envUrlTemplate) {
             const res = await ssrfSafeFetch(url, {
                 method: "POST",
                 headers,
+                signal: AbortSignal.timeout(SLACK_DELIVERY_TIMEOUT_MS),
                 body: JSON.stringify({
                     text: slackText(input.severity, input.title, input.body),
                     blocks: [

package/dist/observability/routes.d.ts

@@ -43,25 +43,25 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
 } | {
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
-    id?: undefined;
-    error?: undefined;
     ok?: undefined;
+    error?: undefined;
+    id?: undefined;
 } | {
     summary?: undefined;
     spans?: undefined;
     id: string;
-    error?: undefined;
     ok?: undefined;
+    error?: undefined;
 } | {
     summary?: undefined;
     spans?: undefined;
-    id?: undefined;
     error: any;
     ok?: undefined;
+    id?: undefined;
 } | {
     summary?: undefined;
     spans?: undefined;
-    id?: undefined;
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
+    id?: undefined;
 }>>;

package/dist/progress/routes.d.ts

@@ -15,6 +15,6 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    ok: boolean;
     error?: undefined;
+    ok: boolean;
 }>>;

package/dist/secrets/routes.d.ts

@@ -37,17 +37,17 @@ export declare function createWriteSecretHandler(): import("h3").EventHandlerWit
     ok?: undefined;
     status?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     status: string;
+    error?: undefined;
 } | {
     ok?: undefined;
     error: string;
     removed?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     removed: boolean;
+    error?: undefined;
 }>>;
 /**
  * POST /_agent-native/secrets/:key/test — validate an optional candidate value
@@ -58,13 +58,13 @@ export declare function createTestSecretHandler(): import("h3").EventHandlerWith
     error: string;
     note?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     note?: undefined;
-} | {
     error?: undefined;
+} | {
     ok: boolean;
     note: string;
+    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -95,11 +95,11 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
-    error?: undefined;
     ok: boolean;
     key: string;
-} | {
     error?: undefined;
+} | {
     ok: boolean;
     removed: boolean;
+    error?: undefined;
 }>>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.176.4-nightly-20260902024948",
+  "version": "0.176.4-nightly-20260902103608",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -437,8 +437,8 @@
     "y-protocols": "^1.0.7",
     "yjs": "^13.6.32",
     "zod": "^4.3.6",
-    "@agent-native/recap-cli": "0.5.23",
-    "@agent-native/toolkit": "^0.19.1"
+    "@agent-native/toolkit": "^0.19.1",
+    "@agent-native/recap-cli": "0.5.23"
   },
   "devDependencies": {
     "@ai-sdk/anthropic": "^3.0.71",