@agent-native/core 0.203.1-nightly-20261007154213 → 0.203.1

package/dist/server/core-routes-plugin.js

@@ -2,13 +2,15 @@ import { createHash } from "node:crypto";
 import { assertBodySize, defineEventHandler, setResponseStatus, setResponseHeader, getMethod, getHeader, getRequestURL, getRequestIP, readRawBody, getCookie, setCookie, deleteCookie, } from "h3";
 import { readMultipartFormData } from "h3";
 import { z } from "zod";
+import { readAgentAppModelDefaultSettings, normalizeAgentAppModelDefaultAppId, } from "../agent/app-model-defaults.js";
 import { CHATGPT_SUBSCRIPTION_CALLBACK_PATH } from "../agent/chatgpt-subscription-contract.js";
 import { readDefaultAgentEngineSetting } from "../agent/default-agent-engine.js";
-import { DEFAULT_MODEL } from "../agent/default-model.js";
+import { resolveAgentEngineStatus, } from "../agent/engine-status.js";
 import { registerBuiltinEngines } from "../agent/engine/builtin.js";
 import { OPENAI_BASE_URL_ENV_VAR, PROVIDER_ENV_META, } from "../agent/engine/provider-env-vars.js";
-import { isAgentEngineSettingConfigured, getAgentEngineEntry, detectEngineFromEnv, detectEngineFromUserSecrets, isStoredEngineUsableForRequest, normalizeModelForEngine, } from "../agent/engine/registry.js";
+import { detectEngineFromEnv, detectEngineFromUserSecrets, isStoredEngineUsableForRequest, } from "../agent/engine/registry.js";
 import { canUpdateAgentLoopSettings, readAgentLoopSettings, resetAgentLoopSettings, validateMaxIterationsInput, writeAgentLoopSettings, } from "../agent/loop-settings.js";
+export { normalizeAgentEngineStatusModel, resolveAgentEngineStatus, } from "../agent/engine-status.js";
 import { getAppConfig } from "../app-config/index.js";
 import { getState, putState, compareAndSetState, deleteState, listComposeDrafts, getComposeDraft, putComposeDraft, deleteComposeDraft, deleteAllComposeDrafts, getStateMany, APP_STATE_ANONYMOUS_OWNER_CONTEXT_KEY, } from "../application-state/handlers.js";
 import { recordOrgAdminAuditEvent } from "../audit/org-admin.js";
@@ -86,7 +88,7 @@ import { createPollEventsHandler, validateSseMaxDurationMs, } from "./poll-event
 import { createPollHandler } from "./poll.js";
 import { isHostedRealtimeTransport, realtimeRegistrationUnavailable, } from "./realtime-registration.js";
 import { createRealtimeTokenHandler, resolveActiveRealtimeChannel, } from "./realtime-token.js";
-import { getRequestContext, hasRequestContext, runWithRequestContext, } from "./request-context.js";
+import { getRequestContext, getRequestOrgId, getRequestUserEmail, hasRequestContext, runWithRequestContext, } from "./request-context.js";
 import { isSameOriginRequest } from "./request-origin.js";
 import { findUnsupportedScopedKeyNames, saveKeyValuesToScopedSecrets, ScopedKeyStorageError, } from "./scoped-key-storage.js";
 import { createSpeakHandler } from "./speak.js";
@@ -103,97 +105,18 @@ import { createWorkspaceProviderOAuthHandler } from "./workspace-provider-oauth.
 export const FRAMEWORK_ROUTE_PREFIX = "/_agent-native";
 export const FRAMEWORK_EVENTS_ROUTE = `${FRAMEWORK_ROUTE_PREFIX}/events`;
 export const LEGACY_FRAMEWORK_EVENTS_ROUTE = `${FRAMEWORK_ROUTE_PREFIX}/poll-events`;
-export function normalizeAgentEngineStatusModel(entry, model) {
-    if (!entry)
-        return model ?? DEFAULT_MODEL;
-    return normalizeModelForEngine(entry, model ?? entry.defaultModel);
-}
-/**
- * Resolve "does this request have a usable AI provider" for one identity.
- *
- * Every call site pays for these lookups on a user-visible path (the agent
- * composer blocks on the status probe), so the two identity-independent reads
- * start together and the expensive `app_secrets` sweep only runs when the
- * cheaper sources have not already answered.
- */
-export async function resolveAgentEngineStatus(deps) {
-    const lookupEntry = (deps.lookupEntry ?? getAgentEngineEntry);
-    const [stored, openAiBaseUrlConfigured] = await Promise.all([
-        deps.readStoredEngine(),
-        deps.readOpenAiBaseUrlConfigured(),
-    ]);
-    if (isAgentEngineSettingConfigured(stored)) {
-        const engine = stored.engine;
-        const entry = lookupEntry(engine);
-        return {
-            configured: true,
-            engine,
-            model: normalizeAgentEngineStatusModel(entry, stored?.model),
-            source: "settings",
-            openAiBaseUrlConfigured,
-        };
-    }
-    const configuredEngine = getAppConfig().agent.engine;
-    const envEntry = configuredEngine ? lookupEntry(configuredEngine) : undefined;
-    if (envEntry) {
-        if (await deps.isStoredEngineUsable({ engine: envEntry.name }, envEntry)) {
-            return {
-                configured: true,
-                engine: envEntry.name,
-                model: envEntry.defaultModel ?? DEFAULT_MODEL,
-                source: "env",
-                envVar: "AGENT_ENGINE",
-                openAiBaseUrlConfigured,
-            };
-        }
-        if (getRequestContext()?.isSyntheticTraffic !== true) {
-            return { configured: false, openAiBaseUrlConfigured };
-        }
-    }
-    // Stored provider selections win over an existing Builder connection, so
-    // this is checked before the app_secrets sweep — and the sweep is skipped
-    // entirely when it answers.
-    if (stored && typeof stored.engine === "string") {
-        const entry = lookupEntry(stored.engine);
-        if (entry && (await deps.isStoredEngineUsable(stored, entry))) {
-            return {
-                configured: true,
-                engine: stored.engine,
-                model: normalizeAgentEngineStatusModel(entry, stored.model),
-                source: "env",
-                envVar: entry.requiredEnvVars[0],
-                openAiBaseUrlConfigured,
-            };
-        }
-    }
-    // Per-user app_secrets — a user who connected Builder (or pasted their own
-    // provider key) may not have any deploy-level env vars set.
-    const detectedFromUser = await deps.detectFromUserSecrets();
-    if (detectedFromUser) {
-        return {
-            configured: true,
-            engine: detectedFromUser.name,
-            model: detectedFromUser.defaultModel ?? DEFAULT_MODEL,
-            source: "app_secrets",
-            envVar: detectedFromUser.requiredEnvVars[0],
-            openAiBaseUrlConfigured,
-        };
-    }
-    const detected = await deps.detectFromEnv();
-    if (detected) {
-        return {
-            configured: true,
-            engine: detected.name,
-            model: detected.defaultModel ?? DEFAULT_MODEL,
-            source: "env",
-            envVar: detected.requiredEnvVars[0],
-            openAiBaseUrlConfigured,
-        };
-    }
-    return { configured: false, openAiBaseUrlConfigured };
-}
 function requestAgentEngineStatusDeps() {
     return {
+        readAppDefault: async () => {
+            const app = getAppConfig().app;
+            const appId = normalizeAgentAppModelDefaultAppId(app.id ?? app.template ?? app.slug);
+            if (!appId)
+                return null;
+            const settings = await readAgentAppModelDefaultSettings({ userEmail: getRequestUserEmail(), orgId: getRequestOrgId() }, appId);
+            return settings.engine && settings.model
+                ? { engine: settings.engine, model: settings.model }
+                : null;
+        },
         readStoredEngine: async () => (await readDefaultAgentEngineSetting()),
         readOpenAiBaseUrlConfigured: async () => {
             try {

package/dist/server/email-auth-links.js

@@ -1,3 +1,4 @@
+import { randomBytes } from "node:crypto";
 import { canonicalFrameworkPathname, publicFrameworkPath, } from "./framework-route-prefix.js";
 export const EMAIL_AUTH_LINK_LANDING_PATH = "/_agent-native/auth/email-link/landing";
 const BETTER_AUTH_MAGIC_LINK_VERIFY_PATH = "/_agent-native/auth/ba/magic-link/verify";
@@ -108,16 +109,111 @@ function escapeHtml(value) {
         }
     });
 }
+const EMAIL_AUTH_LINK_LANDING_STYLES = `
+  *, *::before, *::after { box-sizing: border-box; }
+  :root {
+    color-scheme: dark;
+    --auth-canvas: #0a0a0a; /* guard:allow-raw-color - match the standalone auth palette */
+    --auth-card: #141414; /* guard:allow-raw-color - match the standalone auth palette */
+    --auth-border: rgba(255, 255, 255, 0.08); /* guard:allow-raw-color - match the standalone auth palette */
+    --auth-foreground: #e5e5e5; /* guard:allow-raw-color - match the standalone auth palette */
+    --auth-heading: #fff; /* guard:allow-raw-color - match the standalone auth palette */
+    --auth-muted: #888; /* guard:allow-raw-color - match the standalone auth palette */
+    --auth-primary: #fff; /* guard:allow-raw-color - match the standalone auth palette */
+    --auth-primary-foreground: #000; /* guard:allow-raw-color - match the standalone auth palette */
+    --auth-primary-hover: #e5e5e5; /* guard:allow-raw-color - match the standalone auth palette */
+    --auth-focus: #33c4ff; /* guard:allow-raw-color - match the standalone auth palette */
+  }
+  body {
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    min-height: 100vh;
+    min-height: 100svh;
+    margin: 0;
+    padding: 1rem;
+    background: var(--auth-canvas);
+    color: var(--auth-foreground);
+    font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  }
+  .auth-card {
+    width: 100%;
+    max-width: 400px;
+    padding: 2rem;
+    background: var(--auth-card);
+    border: 1px solid var(--auth-border);
+    border-radius: 12px;
+  }
+  h1 {
+    margin: 0 0 0.25rem;
+    color: var(--auth-heading);
+    font-size: 1.25rem;
+    font-weight: 600;
+    line-height: 1.5;
+  }
+  p {
+    margin: 0 0 1.5rem;
+    color: var(--auth-muted);
+    font-size: 0.8125rem;
+    line-height: 1.5;
+  }
+  form { margin: 0; }
+  button {
+    width: 100%;
+    min-height: 2.75rem;
+    padding: 0.625rem 0.75rem;
+    background: var(--auth-primary);
+    color: var(--auth-primary-foreground);
+    border: 0;
+    border-radius: 6px;
+    font: inherit;
+    font-size: 0.875rem;
+    font-weight: 500;
+    cursor: pointer;
+    transition: background-color 120ms ease;
+  }
+  button:hover { background: var(--auth-primary-hover); }
+  button:focus-visible {
+    outline: 2px solid var(--auth-focus);
+    outline-offset: 2px;
+  }
+  @media (max-width: 420px) {
+    .auth-card { padding: 1.5rem; }
+  }
+  @media (prefers-reduced-motion: reduce) {
+    button { transition: none; }
+  }
+`;
 export function emailAuthLinkLandingPage(actionUrl, fields, copy, locale, direction) {
     const hiddenInputs = Object.entries(fields)
         .map(([name, value]) => `<input type="hidden" name="${escapeHtml(name)}" value="${escapeHtml(value)}">`)
         .join("");
-    const html = `<!DOCTYPE html><html lang="${escapeHtml(locale)}" dir="${direction}"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>${escapeHtml(copy.title)}</title></head><body><main><h1>${escapeHtml(copy.title)}</h1><p>${escapeHtml(copy.message)}</p><form method="post" action="${escapeHtml(actionUrl)}" autocomplete="off">${hiddenInputs}<button type="submit">${escapeHtml(copy.action)}</button></form></main></body></html>`;
+    // A nonce keeps the standalone page styled without allowing arbitrary inline CSS.
+    const styleNonce = randomBytes(16).toString("base64");
+    const html = `<!doctype html>
+<html lang="${escapeHtml(locale)}" dir="${direction}">
+  <head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <title>${escapeHtml(copy.title)}</title>
+    <style nonce="${styleNonce}">${EMAIL_AUTH_LINK_LANDING_STYLES}</style>
+  </head>
+  <body>
+    <main class="auth-card">
+      <h1>${escapeHtml(copy.title)}</h1>
+      <p>${escapeHtml(copy.message)}</p>
+      <form method="post" action="${escapeHtml(actionUrl)}" autocomplete="off">
+        ${hiddenInputs}
+        <button type="submit">${escapeHtml(copy.action)}</button>
+      </form>
+    </main>
+  </body>
+</html>`;
     return new Response(html, {
         status: 200,
         headers: {
             "cache-control": "no-store",
-            "content-security-policy": "default-src 'none'; form-action 'self'; base-uri 'none'; frame-ancestors 'none'",
+            "content-security-policy": `default-src 'none'; style-src 'nonce-${styleNonce}'; form-action 'self'; base-uri 'none'; frame-ancestors 'none'`,
             "content-type": "text/html; charset=utf-8",
             "referrer-policy": "no-referrer",
             "x-robots-tag": "noindex",

package/dist/templates/factory/.agents/skills/review-latest-feedback/SKILL.md

@@ -1,10 +1,10 @@
 ---
 name: review-latest-feedback
 description: >-
-  Sweep Slack, GitHub, Sentry, Analytics, trackers, and automated diagnostics,
-  plus app/template, desktop, and package deploy/release/publish lanes. Fix
-  verified defects, verify recovery targets, and recap. Use for scheduled or
-  manual sweeps.
+  Review Slack, GitHub, CI, Sentry, Analytics, diagnostics, linked trackers,
+  and app/template, desktop, and package deploy/release lanes. Answer reporters
+  first; fix verified defects, verify delivery, build upvoted features, and
+  recap. Use for scheduled or manual sweeps.
 user-invocable: true
 scope: dev
 metadata:
@@ -218,15 +218,9 @@ Phase 2 reapplies these rules after full-thread review.
 Use `## Slack channels` unless the invocation narrows scope.
 
 **Automated diagnostics are feedback.** For Slack, gate before reading.
-Before investigating, use only alert and linked issue/PR/run/task metadata to
-identify repo/ref/SHA, workflow/service/environment, failure fingerprint, and
-active same-failure owner; this is Phase 0's sole pre-claim exception. If
-unowned/in scope, claim: Slack `👀`; elsewhere, current-task status row with
-source permalink, fingerprint, owner task/worktree, next action. Continue if
-this task owns it; else record **Owned elsewhere** (owner/link/action) and
-stop. No logs/tests/artifacts before claim. The required Slack claim reaction
-is authorized here; other source mutations need exact authorization. Then read
-`references/automated-diagnostics.md`.
+Before claiming, use only alert/link metadata. Follow
+[`automated-diagnostics.md`](references/automated-diagnostics.md) for ownership,
+claim, and stop/continue; inspect logs, tests, and artifacts only afterward.
 
 **Defects and design feedback.** A clear bug has observable broken behavior: a
 click or submit does nothing, an action errors, data is lost or reverted, the
@@ -271,13 +265,12 @@ the query also returns ordinary replies and old polls that happen to carry the
 reaction. Take the ones that name a concrete improvement; skip the rest
 without comment.
 
-An upvoted item is a **feature or UX change**: it skips only the clear-bug bar,
-not `👀`, fix-altitude, verification, or question-budget requirements. The
-upvote overrides the bug gate, not ownership; build the smallest endorsed
-version and name Sid or Alice in the recap. Add `👀` before investigation or
-delegation and read it back. Keep an evidence-limited disposition until Phase
-2's four bars hold; then use **Shipped**, adding `✅` only if it also meets
-**Fixed**.
+An upvote endorses a **feature or UX change** and skips only the clear-bug bar;
+it does not change ownership, reaction, verification, or question-budget rules.
+Build the smallest endorsed version, name Sid or Alice, and state requested
+versus actual behavior in the recap. Add `👀` before investigation or
+delegation and read it back. Keep it evidence-limited until Phase 2's four bars
+hold; then use **Shipped**, adding `✅` only if it meets **Fixed**.
 
 Don't search `has::eyes:`; use the owner or handoff path above.
 
@@ -326,13 +319,15 @@ inventing a fix.
 
 ### Deployment, release, and publish failures
 
-Scan app/template, desktop build/release, and package-publish lanes on every
-sweep, even without a linked report. Include queued/running runs, run-only
-failures, and missing/stale artifacts; carry active run IDs and rows across
-cursors. Fix verified repo-owned causes; record external/manual causes with the
-next owner/action. Use [`deployment-recovery.md`](references/deployment-recovery.md)
-for lane-specific recovery and target proof. Green CI or merged source
-does not prove delivery.
+Scan app/template, desktop, and package lanes every sweep, even without linked
+feedback. Carry active run IDs, queued/running runs, failures, and missing/stale
+artifacts across cursors. Fix repo causes; record external/manual causes with
+the next owner/action. CI-red deploy rows from [CI triage](references/ci-red-report.md)
+reuse this operational fingerprint. Follow
+[`deployment-recovery.md`](references/deployment-recovery.md) for recovery and
+target proof; keep delivery active until proof passes. A source issue may be
+**Fixed** separately; delivery gaps are never **Quarantined**. Green CI or
+merged source does not prove delivery.
 
 ## Phase 2: fix
 
@@ -363,8 +358,7 @@ slack_search: <2-4 distinctive symptom words> in:<#CHANNEL>
 ```
 
 Search in the reporter's words — `zoom invalid_client`, `logout twice` — not
-your diagnosis. People describe one bug differently, so read the hits rather
-than trusting the count.
+your diagnosis. Read hits; one bug may have different descriptions.
 
 **A repeat report after a Fixed claim is evidence that fix failed.** It is the
 only falsification signal this workflow gets, and it outranks your belief that
@@ -435,10 +429,9 @@ pre-existing.
 ### Npx and package reports have a release follow-up
 
 Use [`deployment-recovery.md`](references/deployment-recovery.md) for npx
-version evidence, registry proof, publication status, and existing-app upgrade
-verification. A verified merge may be **Fixed** under the issue-closure rule
-above while its delivery row stays open; a local scaffold or beta promise is not
-delivery.
+version, registry, publication, and existing-app upgrade proof. A verified merge
+may be **Fixed** while its delivery row stays open; a local scaffold or beta
+promise is not delivery.
 
 ### Documentation has a runnable proof obligation
 
@@ -457,12 +450,6 @@ Never hard-code a rule for the wording of one report. One data point justifies
 a local regression test or a contained fix; it never justifies a global agent
 instruction or prompt exception.
 
-### The bar for saying "Fixed"
-
-Phase 2 defines the proof bars for **Fixed**, **Shipped**, and
-**Live verified**. Upvoted improvements state requested versus actual behavior
-and use **Shipped**.
-
 ## Phase 3: reply
 
 Thank issue reporters for opening it and Slack reporters for sharing. Give the

package/dist/templates/workspace-core/.agents/skills/recurring-jobs/SKILL.md

@@ -46,10 +46,25 @@ and pass normalized action items to an app's idempotent `import` action.
 
 | Tool          | Action     | Purpose                                                    |
 | ------------- | ---------- | ---------------------------------------------------------- |
-| `manage-jobs` | `create`   | Create a recurring job (name, cron schedule, instructions) |
+| `manage-jobs` | `create`   | Create a recurring job (name, cron schedule, instructions); fails if the name exists |
 | `manage-jobs` | `list`     | List all jobs and their status                             |
 | `manage-jobs` | `update`   | Update schedule, instructions, or toggle enabled           |
 
+## Job files an app owns
+
+`create` never replaces an existing job file, so a name that collides with an
+app's file (Factory's `factories/<id>/<name>`) is refused instead of reset.
+An app that stores its own settings in a job's frontmatter marks the file with
+`triggerType`, which makes `list`, `update`, and `delete` skip it and sends the
+caller to `manage-automations`. Edit those files only through the owning app's
+actions, and patch fields in place; rebuilding a file from the fields the writer
+knows drops the rest while the job keeps running.
+
+Any write to a `jobs/` file that removes a frontmatter field other than run
+bookkeeping is recorded as a `job-fields-dropped` audit event (org admins read
+it with `list-audit-events` and `action: "job-fields-dropped"`). Its input names
+the writer, the dropped fields, and the agent thread and run that made it.
+
 ## UI Surface
 
 `/agent#jobs` is the stable compatibility URL for the Agent page's

package/dist/triggers/actions/manage-automation.d.ts

@@ -13,8 +13,6 @@ declare const _default: import("../../action.js").ActionDefinition<{
     executionEngine?: string;
     executionCwd?: string;
 }, {
-    deleted?: undefined;
-    enabled?: undefined;
     created: boolean;
     name: string;
     scope: "organization" | "personal";
@@ -25,31 +23,33 @@ declare const _default: import("../../action.js").ActionDefinition<{
     reasoningEffort: "auto" | "high" | "low" | "max" | "medium" | "minimal" | "none" | "xhigh";
     webhookPath: string;
     nextRun: string;
+    deleted?: undefined;
+    enabled?: undefined;
     executionHostId?: undefined;
     executionEngine?: undefined;
     executionCwd?: undefined;
 } | {
-    scope?: undefined;
-    enabled?: undefined;
-    nextRun?: undefined;
     created?: undefined;
+    scope?: undefined;
     triggerType?: undefined;
     event?: undefined;
     deleted: boolean;
     name: string;
+    enabled?: undefined;
     schedule?: undefined;
     timezone?: undefined;
     reasoningEffort?: undefined;
     executionHostId?: undefined;
     executionEngine?: undefined;
     executionCwd?: undefined;
+    nextRun?: undefined;
     webhookPath?: undefined;
 } | {
-    scope?: undefined;
-    deleted?: undefined;
     created?: undefined;
+    scope?: undefined;
     triggerType?: undefined;
     event?: undefined;
+    deleted?: undefined;
     name: string;
     enabled: boolean;
     schedule: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.203.1-nightly-20261007154213",
+  "version": "0.203.1",
   "description": "The agentic application framework for building autonomous agents with intuitive UIs",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -682,8 +682,8 @@
     "yaml": "^2.9.0",
     "yjs": "^13.6.33",
     "zod": "^4.3.6",
-    "@agent-native/agentkit": "^0.203.1-nightly-20261007154213",
-    "@agent-native/recap-cli": "^0.5.64"
+    "@agent-native/agentkit": "^0.203.1",
+    "@agent-native/recap-cli": "^0.5.65"
   },
   "devDependencies": {
     "@ai-sdk/anthropic": "^3.0.71",
@@ -753,7 +753,7 @@
     "xlsx": "^0.18.5"
   },
   "peerDependencies": {
-    "@agent-native/core-corpus": "0.203.1-nightly-20261007154213",
+    "@agent-native/core-corpus": ">=0.196.0",
     "@ai-sdk/anthropic": ">=3",
     "@ai-sdk/cohere": ">=3",
     "@ai-sdk/google": ">=3",

package/src/templates/factory/.agents/skills/review-latest-feedback/SKILL.md

@@ -1,10 +1,10 @@
 ---
 name: review-latest-feedback
 description: >-
-  Sweep Slack, GitHub, Sentry, Analytics, trackers, and automated diagnostics,
-  plus app/template, desktop, and package deploy/release/publish lanes. Fix
-  verified defects, verify recovery targets, and recap. Use for scheduled or
-  manual sweeps.
+  Review Slack, GitHub, CI, Sentry, Analytics, diagnostics, linked trackers,
+  and app/template, desktop, and package deploy/release lanes. Answer reporters
+  first; fix verified defects, verify delivery, build upvoted features, and
+  recap. Use for scheduled or manual sweeps.
 user-invocable: true
 scope: dev
 metadata:
@@ -218,15 +218,9 @@ Phase 2 reapplies these rules after full-thread review.
 Use `## Slack channels` unless the invocation narrows scope.
 
 **Automated diagnostics are feedback.** For Slack, gate before reading.
-Before investigating, use only alert and linked issue/PR/run/task metadata to
-identify repo/ref/SHA, workflow/service/environment, failure fingerprint, and
-active same-failure owner; this is Phase 0's sole pre-claim exception. If
-unowned/in scope, claim: Slack `👀`; elsewhere, current-task status row with
-source permalink, fingerprint, owner task/worktree, next action. Continue if
-this task owns it; else record **Owned elsewhere** (owner/link/action) and
-stop. No logs/tests/artifacts before claim. The required Slack claim reaction
-is authorized here; other source mutations need exact authorization. Then read
-`references/automated-diagnostics.md`.
+Before claiming, use only alert/link metadata. Follow
+[`automated-diagnostics.md`](references/automated-diagnostics.md) for ownership,
+claim, and stop/continue; inspect logs, tests, and artifacts only afterward.
 
 **Defects and design feedback.** A clear bug has observable broken behavior: a
 click or submit does nothing, an action errors, data is lost or reverted, the
@@ -271,13 +265,12 @@ the query also returns ordinary replies and old polls that happen to carry the
 reaction. Take the ones that name a concrete improvement; skip the rest
 without comment.
 
-An upvoted item is a **feature or UX change**: it skips only the clear-bug bar,
-not `👀`, fix-altitude, verification, or question-budget requirements. The
-upvote overrides the bug gate, not ownership; build the smallest endorsed
-version and name Sid or Alice in the recap. Add `👀` before investigation or
-delegation and read it back. Keep an evidence-limited disposition until Phase
-2's four bars hold; then use **Shipped**, adding `✅` only if it also meets
-**Fixed**.
+An upvote endorses a **feature or UX change** and skips only the clear-bug bar;
+it does not change ownership, reaction, verification, or question-budget rules.
+Build the smallest endorsed version, name Sid or Alice, and state requested
+versus actual behavior in the recap. Add `👀` before investigation or
+delegation and read it back. Keep it evidence-limited until Phase 2's four bars
+hold; then use **Shipped**, adding `✅` only if it meets **Fixed**.
 
 Don't search `has::eyes:`; use the owner or handoff path above.
 
@@ -326,13 +319,15 @@ inventing a fix.
 
 ### Deployment, release, and publish failures
 
-Scan app/template, desktop build/release, and package-publish lanes on every
-sweep, even without a linked report. Include queued/running runs, run-only
-failures, and missing/stale artifacts; carry active run IDs and rows across
-cursors. Fix verified repo-owned causes; record external/manual causes with the
-next owner/action. Use [`deployment-recovery.md`](references/deployment-recovery.md)
-for lane-specific recovery and target proof. Green CI or merged source
-does not prove delivery.
+Scan app/template, desktop, and package lanes every sweep, even without linked
+feedback. Carry active run IDs, queued/running runs, failures, and missing/stale
+artifacts across cursors. Fix repo causes; record external/manual causes with
+the next owner/action. CI-red deploy rows from [CI triage](references/ci-red-report.md)
+reuse this operational fingerprint. Follow
+[`deployment-recovery.md`](references/deployment-recovery.md) for recovery and
+target proof; keep delivery active until proof passes. A source issue may be
+**Fixed** separately; delivery gaps are never **Quarantined**. Green CI or
+merged source does not prove delivery.
 
 ## Phase 2: fix
 
@@ -363,8 +358,7 @@ slack_search: <2-4 distinctive symptom words> in:<#CHANNEL>
 ```
 
 Search in the reporter's words — `zoom invalid_client`, `logout twice` — not
-your diagnosis. People describe one bug differently, so read the hits rather
-than trusting the count.
+your diagnosis. Read hits; one bug may have different descriptions.
 
 **A repeat report after a Fixed claim is evidence that fix failed.** It is the
 only falsification signal this workflow gets, and it outranks your belief that
@@ -435,10 +429,9 @@ pre-existing.
 ### Npx and package reports have a release follow-up
 
 Use [`deployment-recovery.md`](references/deployment-recovery.md) for npx
-version evidence, registry proof, publication status, and existing-app upgrade
-verification. A verified merge may be **Fixed** under the issue-closure rule
-above while its delivery row stays open; a local scaffold or beta promise is not
-delivery.
+version, registry, publication, and existing-app upgrade proof. A verified merge
+may be **Fixed** while its delivery row stays open; a local scaffold or beta
+promise is not delivery.
 
 ### Documentation has a runnable proof obligation
 
@@ -457,12 +450,6 @@ Never hard-code a rule for the wording of one report. One data point justifies
 a local regression test or a contained fix; it never justifies a global agent
 instruction or prompt exception.
 
-### The bar for saying "Fixed"
-
-Phase 2 defines the proof bars for **Fixed**, **Shipped**, and
-**Live verified**. Upvoted improvements state requested versus actual behavior
-and use **Shipped**.
-
 ## Phase 3: reply
 
 Thank issue reporters for opening it and Slack reporters for sharing. Give the

package/src/templates/workspace-core/.agents/skills/recurring-jobs/SKILL.md

@@ -46,10 +46,25 @@ and pass normalized action items to an app's idempotent `import` action.
 
 | Tool          | Action     | Purpose                                                    |
 | ------------- | ---------- | ---------------------------------------------------------- |
-| `manage-jobs` | `create`   | Create a recurring job (name, cron schedule, instructions) |
+| `manage-jobs` | `create`   | Create a recurring job (name, cron schedule, instructions); fails if the name exists |
 | `manage-jobs` | `list`     | List all jobs and their status                             |
 | `manage-jobs` | `update`   | Update schedule, instructions, or toggle enabled           |
 
+## Job files an app owns
+
+`create` never replaces an existing job file, so a name that collides with an
+app's file (Factory's `factories/<id>/<name>`) is refused instead of reset.
+An app that stores its own settings in a job's frontmatter marks the file with
+`triggerType`, which makes `list`, `update`, and `delete` skip it and sends the
+caller to `manage-automations`. Edit those files only through the owning app's
+actions, and patch fields in place; rebuilding a file from the fields the writer
+knows drops the rest while the job keeps running.
+
+Any write to a `jobs/` file that removes a frontmatter field other than run
+bookkeeping is recorded as a `job-fields-dropped` audit event (org admins read
+it with `list-audit-events` and `action: "job-fields-dropped"`). Its input names
+the writer, the dropped fields, and the agent thread and run that made it.
+
 ## UI Surface
 
 `/agent#jobs` is the stable compatibility URL for the Agent page's