@agent-native/core 0.222.1 → 0.222.2-nightly-20261029182928

package/dist/agent/engine-status.d.ts

@@ -21,6 +21,8 @@ export interface AgentEngineStatusResult {
 export interface AgentEngineStatusResponse extends AgentEngineStatusResult {
     /** Fast chat setup snapshot; dispatch rechecks credentials before model use. */
     chatEligible: boolean;
+    /** The deploy's Builder.io credits pair is set but this runtime refuses it. */
+    builderCreditsRefused?: true;
 }
 export interface AgentEngineStatusDeps<E extends AgentEngineStatusEntry = AgentEngineStatusEntry> {
     readStoredEngine: () => Promise<{

package/dist/client/agent-run-status.d.ts

@@ -5,6 +5,8 @@ export type AgentRunStatusRead = {
     runId?: string;
     turnId?: string;
     terminalReason?: string;
+    /** A truncated run whose continuation the server has not started yet. */
+    awaitingRedispatch?: boolean;
 } | {
     ok: false;
 };

package/dist/client/agent-run-status.js

@@ -38,6 +38,9 @@ export async function readAgentRunStatus(input) {
             ...(typeof state.terminalReason === "string" && state.terminalReason
                 ? { terminalReason: state.terminalReason }
                 : {}),
+            ...(state.awaitingRedispatch === true
+                ? { awaitingRedispatch: true }
+                : {}),
         };
     }
     catch {

package/dist/client/chat/agentkit-agent-native.js

@@ -3416,6 +3416,7 @@ export function createAgentNativeAgentKitTransport(options = {}) {
                 threadId: input.threadId,
                 tabId: input.threadId,
                 runId: run.runId,
+                reason: "run.submitted",
             });
             return run;
         }

package/dist/client/use-agent-chat-running-threads.d.ts

@@ -7,6 +7,10 @@ export interface AgentChatRunningEventDetail {
     tabId?: string;
     turnId?: string;
     runId?: string;
+    /**
+     * `"run.submitted"` marks the run this client just started for a submitted
+     * message, which carries no successor link to any earlier run.
+     */
     reason?: string;
 }
 export interface UseAgentChatRunningThreadsOptions {

package/dist/localization/default-messages.d.ts

@@ -104,6 +104,11 @@ declare const messages: {
         composer: {
             chatgptManageUsage: string;
             chatgptPlanUsing: string;
+            newChatPlaceholder: string;
+        };
+        setup: {
+            connectBuilder: string;
+            connectPlaceholder: string;
         };
         error: {
             chatgptPlanUsageLimit: string;

package/dist/localization/default-messages.js

@@ -28,6 +28,11 @@ const messages = {
         composer: {
             chatgptManageUsage: "Manage usage",
             chatgptPlanUsing: "Using ChatGPT plan",
+            newChatPlaceholder: "Ask anything",
+        },
+        setup: {
+            connectBuilder: "Connect Builder.io",
+            connectPlaceholder: "Connect AI to start chatting...",
         },
         error: {
             chatgptPlanUsageLimit: "Your ChatGPT plan usage limit has been reached.",

package/dist/server/builder-branch-files.d.ts

@@ -1,4 +1,4 @@
-export type BuilderBranchReadbackStage = "status_request" | "status_shape" | "status_binding" | "status_currentness" | "post_read_status_request" | "post_read_status_shape" | "post_read_status_binding" | "post_read_status_currentness" | "download_url_request" | "download_url_shape" | "download_url_binding" | "bundle_download" | "bundle_read" | "bundle_digest" | "bundle_parse" | "target_subtree_missing" | "post_read_currentness";
+export type BuilderBranchReadbackStage = "status_request" | "status_shape" | "status_binding" | "status_no_backup" | "status_currentness" | "post_read_status_request" | "post_read_status_shape" | "post_read_status_binding" | "post_read_status_currentness" | "download_url_request" | "download_url_shape" | "download_url_binding" | "bundle_download" | "bundle_read" | "bundle_digest" | "bundle_parse" | "target_subtree_missing" | "post_read_currentness";
 export declare class BuilderBranchFilesError extends Error {
     readonly code: "invalid_request" | "not_connected" | "forbidden" | "unavailable" | "unverified" | "integrity_failed";
     readonly readbackStage?: BuilderBranchReadbackStage | undefined;
@@ -8,6 +8,16 @@ type BranchRef = {
     projectId: string;
     branchName: string;
 };
+export declare function readBuilderBranchBackupStatus(input: BranchRef): Promise<{
+    branchState: "active" | "archived" | "deleted" | "unknown";
+    backupPartial: "invalid" | "missing" | boolean;
+    backupValid: boolean;
+    backupComplete: boolean;
+    backupCurrent: boolean;
+    agentIdle: boolean;
+    hasUnpushedChanges: boolean;
+    verificationPerformed: false;
+}>;
 export declare function readBuilderBranchFiles(input: BranchRef & {
     appPath: string;
 }): Promise<{

package/dist/server/builder-branch-files.js

@@ -52,6 +52,78 @@ const statusSchema = z.object({
         }),
     }),
 });
+const inspectedBackupSchema = z.object({
+    projectId: z.string().min(1).max(200),
+    ownerId: z.string().min(1).max(256),
+    branchName: z.string().min(1).max(256),
+    at: z.number().finite().positive(),
+    lastCommitHash: z.string().min(1).max(8192),
+    partial: z.unknown().optional(),
+    status: z.enum(["initiated", "completed"]),
+});
+const invalidBackupOutcomes = z.enum([
+    "no-backup",
+    "error",
+    "not-completed",
+    "no-session-id",
+    "no-last-commit-hash",
+    "no-backup-file",
+    "empty-full-backup",
+    "no-vcpCodeGenEvent",
+    "commits-not-in-repo",
+    "no-after-commit",
+    "no-signed-url",
+    "no-git-branch-name",
+    "repo-url-mismatch",
+    "branch-uninitialized",
+    "unexpected-partial-backup",
+    "unexpected-full-backup",
+    "no-backup-keys",
+]);
+const backupCheckSchema = z.discriminatedUnion("state", [
+    z.object({
+        state: z.literal("valid"),
+        outcome: z.literal("valid"),
+        backup: inspectedBackupSchema,
+    }),
+    z.object({
+        state: z.literal("forced-backup"),
+        outcome: z.literal("forced-offline-full-backup"),
+        backup: inspectedBackupSchema,
+    }),
+    z.object({
+        state: z.literal("stale"),
+        outcome: z.literal("hash-mismatch"),
+        backup: inspectedBackupSchema,
+    }),
+    z.object({
+        state: z.literal("submodule-changes"),
+        outcome: z.literal("submodule-changes"),
+        backup: inspectedBackupSchema,
+    }),
+    z.object({
+        state: z.literal("invalid"),
+        outcome: invalidBackupOutcomes,
+        backup: inspectedBackupSchema.optional(),
+    }),
+]);
+const backupInspectionSchema = z.object({
+    status: z.literal("ok"),
+    branch: z.object({
+        projectId: z.string().min(1).max(200),
+        name: z.string().min(1).max(256),
+        ownerId: z.string().min(1).max(256),
+        state: z.enum(["active", "archived", "deleted"]).optional(),
+        deleted: z.boolean().optional(),
+        agentState: z.enum(["running", "waiting", "idle"]),
+        hasUnpushedChanges: z.boolean(),
+        lastCommitHash: z.string().min(1).max(8192),
+        lastActivityAt: z.number().finite().nonnegative(),
+    }),
+    backupStatuses: z.object({
+        code: backupCheckSchema,
+    }),
+});
 const downloadSchema = z.object({
     signedUrl: z.string().url(),
     filePath: z.string().min(1).max(4096),
@@ -86,6 +158,124 @@ function backupIdentityFingerprint(backup) {
 function unverified(stage) {
     throw new BuilderBranchFilesError("unverified", "Builder has no complete, current, identity-bound branch backup to verify.", stage);
 }
+async function authorizeBranchRead() {
+    let authorization;
+    try {
+        authorization = await resolveBuilderRequestAuthorization({
+            requiredScope: "builder:projects:read",
+            legacyCredentialKeys: [],
+        });
+    }
+    catch (error) {
+        const requiresReauthorization = isBuilderReauthorizationRequired(error);
+        throw new BuilderBranchFilesError(requiresReauthorization ? "not_connected" : "unavailable", requiresReauthorization
+            ? "Connect Builder with project read access."
+            : "Builder read access could not be checked.");
+    }
+    if (!authorization || authorization.source !== "oauth") {
+        throw new BuilderBranchFilesError("not_connected", "Connect Builder with project read access.");
+    }
+    return { authorization: authorization.authorization };
+}
+async function requestBranchStatus(input, authorization) {
+    const url = new URL("/projects/branch/status", getBuilderApiHost());
+    url.searchParams.set("projectId", input.projectId);
+    url.searchParams.set("branchName", input.branchName);
+    let response;
+    try {
+        response = await fetch(url, {
+            method: "GET",
+            redirect: "error",
+            headers: { Authorization: authorization },
+            signal: AbortSignal.timeout(API_TIMEOUT_MS),
+        });
+    }
+    catch {
+        throw new BuilderBranchFilesError("unavailable", "Builder branch readback could not be reached.");
+    }
+    if (!response.ok) {
+        await response.body?.cancel().catch(() => { });
+        throw new BuilderBranchFilesError(response.status === 401 || response.status === 403
+            ? "forbidden"
+            : "unavailable", "Builder branch readback was rejected.");
+    }
+    const bytes = await readBytes(response, 512 * 1024);
+    try {
+        return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
+    }
+    catch {
+        throw new BuilderBranchFilesError("unavailable", "Builder returned an invalid readback response.");
+    }
+}
+function validateBranchRef(input) {
+    if (!/^[A-Za-z0-9_-]{1,200}$/.test(input.projectId) ||
+        input.branchName.length > 256 ||
+        input.branchName
+            .split("/")
+            .some((part) => !/^[A-Za-z0-9_.-]+$/.test(part) || part === "." || part === "..")) {
+        throw new BuilderBranchFilesError("invalid_request", "A canonical project and branch are required.");
+    }
+}
+export async function readBuilderBranchBackupStatus(input) {
+    validateBranchRef(input);
+    const auth = await authorizeBranchRead();
+    let rawStatus;
+    try {
+        rawStatus = await requestBranchStatus(input, auth.authorization);
+    }
+    catch (error) {
+        if (error instanceof BuilderBranchFilesError) {
+            throw new BuilderBranchFilesError(error.code, error.message, "status_request");
+        }
+        throw error;
+    }
+    const result = backupInspectionSchema.safeParse(rawStatus);
+    if (!result.success)
+        return unverified("status_shape");
+    const { branch, backupStatuses } = result.data;
+    const backup = backupStatuses.code.backup;
+    if (branch.projectId !== input.projectId ||
+        branch.name !== input.branchName) {
+        return unverified("status_binding");
+    }
+    if (branch.deleted !== undefined &&
+        branch.state !== undefined &&
+        branch.deleted !== (branch.state === "deleted")) {
+        return unverified("status_binding");
+    }
+    if (!backup) {
+        if (backupStatuses.code.state === "invalid" &&
+            backupStatuses.code.outcome === "no-backup") {
+            return unverified("status_no_backup");
+        }
+        return unverified("status_shape");
+    }
+    if (backup.projectId !== input.projectId ||
+        backup.branchName !== input.branchName ||
+        branch.ownerId !== backup.ownerId) {
+        return unverified("status_binding");
+    }
+    const branchCommit = primaryCommit(branch.lastCommitHash, "status_currentness");
+    const backupCommit = primaryCommit(backup.lastCommitHash, "status_currentness");
+    if (!branchCommit || !backupCommit)
+        return unverified("status_currentness");
+    const branchState = branch.state ?? (branch.deleted === true ? "deleted" : "unknown");
+    const backupPartial = typeof backup.partial === "boolean"
+        ? backup.partial
+        : backup.partial === undefined
+            ? "missing"
+            : "invalid";
+    return {
+        branchState,
+        backupPartial,
+        backupValid: backupStatuses.code.state === "valid",
+        backupComplete: backup.status === "completed",
+        backupCurrent: backup.at >= branch.lastActivityAt && branchCommit === backupCommit,
+        agentIdle: branch.agentState === "idle",
+        hasUnpushedChanges: branch.hasUnpushedChanges,
+        verificationPerformed: false,
+    };
+}
 function primaryCommit(snapshot, failureStage) {
     if (SHA.test(snapshot))
         return snapshot;
@@ -153,23 +343,7 @@ export async function readBuilderBranchFiles(input) {
         appId.length > 64) {
         throw new BuilderBranchFilesError("invalid_request", "A canonical project, branch and app path are required.");
     }
-    let authorization;
-    try {
-        authorization = await resolveBuilderRequestAuthorization({
-            requiredScope: "builder:projects:read",
-            legacyCredentialKeys: [],
-        });
-    }
-    catch (error) {
-        const requiresReauthorization = isBuilderReauthorizationRequired(error);
-        throw new BuilderBranchFilesError(requiresReauthorization ? "not_connected" : "unavailable", requiresReauthorization
-            ? "Connect Builder with project read access."
-            : "Builder read access could not be checked.");
-    }
-    if (!authorization || authorization.source !== "oauth") {
-        throw new BuilderBranchFilesError("not_connected", "Connect Builder with project read access.");
-    }
-    const auth = authorization;
+    const auth = await authorizeBranchRead();
     async function request(pathname, body) {
         const url = new URL(pathname, getBuilderApiHost());
         if (!body) {
@@ -209,7 +383,7 @@ export async function readBuilderBranchFiles(input) {
     async function readStatus(phase) {
         let rawStatus;
         try {
-            rawStatus = await request("/projects/branch/status");
+            rawStatus = await requestBranchStatus(input, auth.authorization);
         }
         catch (error) {
             if (error instanceof BuilderBranchFilesError) {

package/dist/server/core-routes-plugin.js

@@ -76,7 +76,7 @@ import { captureError, registerErrorCaptureProvider } from "./capture-error.js";
 import { createChatGPTSubscriptionOAuthCallbackHandler, createChatGPTSubscriptionOAuthStartHandler, } from "./chatgpt-subscription-oauth.js";
 import { resolveCoreRoutesMcpOptions, } from "./core-routes/mcp-connect-options.js";
 import { getAllowedCorsOrigin, readCorsAllowedOrigins, } from "./cors-origins.js";
-import { assertCredentialStoreReadable, CredentialStoreUnavailableError, getBuilderKeyConnections, prefetchSecrets, resolveSecret, resolveSecretDetailed, resolveBuilderGatewayCredentialsDetailed, resolveBuilderPrivateKey, } from "./credential-provider.js";
+import { assertCredentialStoreReadable, CredentialStoreUnavailableError, builderCreditsRefusalStatus, getBuilderKeyConnections, prefetchSecrets, resolveSecret, resolveSecretDetailed, resolveBuilderGatewayCredentialsDetailed, resolveBuilderPrivateKey, } from "./credential-provider.js";
 import { decideCredentialWriteScope, } from "./credential-write-scope.js";
 import { readDatabaseIdentity, resolveRunningAppIdentity, } from "./database-identity.js";
 import { probeDbPressure } from "./db-pressure.js";
@@ -4243,7 +4243,11 @@ export function createCoreRoutesPlugin(options = {}) {
                             status: engineStatus,
                             detectFromUserSecrets: deps.detectFromUserSecrets,
                         });
-                        return { ...engineStatus, chatEligible };
+                        return {
+                            ...engineStatus,
+                            chatEligible,
+                            ...builderCreditsRefusalStatus(chatEligible),
+                        };
                     }));
                     const statusMs = Date.now() - statusStartedAt;
                     if (statusMs >= 1_000) {

package/dist/server/credential-provider.d.ts

@@ -60,6 +60,11 @@ export { BUILDER_CREDENTIAL_KEYS };
 export declare function hasPlatformRuntimeMarker(): boolean;
 export declare function isProductionLikeRuntime(): boolean;
 export declare function isTrustedSelfHostedRuntime(): boolean;
+export declare function builderCreditsRefusalStatus(chatEligible: boolean): {
+    builderCreditsRefused?: true;
+};
+/** @internal Test isolation for the once-per-process refusal warning. */
+export declare function resetBuilderCreditsRefusedWarningForTests(): void;
 type BuilderCredentialSource = "user" | "org" | "workspace" | "env";
 /**
  * Host hook: an app hosted inside Builder, with Builder as its identity

package/dist/server/credential-provider.js

@@ -8,7 +8,7 @@ import { BUILDER_CREDENTIAL_KEYS } from "./builder-credential-keys.js";
 import { BuilderOAuthScopeError, BUILDER_OAUTH_SCOPE, getBuilderOAuthSession, hasBuilderOAuthSession, } from "./builder-oauth.js";
 import { readsOrgCredentialFirst } from "./credential-read-order.js";
 import { decideCredentialWriteScope } from "./credential-write-scope.js";
-import { isHostedWorkspaceRuntime } from "./deployment-protection.js";
+import { isFusionPreviewRuntime, isHostedWorkspaceRuntime, } from "./deployment-protection.js";
 import { isPersonalProviderKeyUseRestricted, isPersonalProviderPolicyKey, } from "./personal-provider-key-policy.js";
 export { isHostedWorkspaceRuntime, resolveVercelDeploymentProtectionHeaders, } from "./deployment-protection.js";
 import { getRequestContext, getRequestUserEmail, getRequestOrgId, getRequestBuilderStorageCredentialOrgId, } from "./request-context.js";
@@ -211,7 +211,7 @@ export function canUseDeployCredentialFallbackForRequest(key) {
     if (key && isNetlifyAiGatewayInjected(key))
         return false;
     if (key && BUILDER_CREDITS_DEPLOY_ENV_KEYS.has(key)) {
-        return isTrustedSelfHostedRuntime();
+        return isBuilderCreditsPairAllowedInRuntime();
     }
     if (key && DEPLOY_LLM_PROVIDER_ENV_KEYS.has(key)) {
         const hostedWorkspace = isHostedWorkspaceRuntime();
@@ -258,6 +258,27 @@ export function isTrustedSelfHostedRuntime() {
         return true;
     return isLocalDatabase();
 }
+// Fusion mints the preview pod's pair for the project's own space, so the
+// hosted-workspace block on deploy keys must not reach it.
+function isBuilderCreditsPairAllowedInRuntime() {
+    return isTrustedSelfHostedRuntime() || isFusionPreviewRuntime();
+}
+/** Deployed but refused by runtime policy, which is not the same as absent. */
+function isBuilderCreditsPairRefusedByRuntime() {
+    return (Boolean(process.env[BUILDER_GATEWAY_TOKEN_ENV_VAR]?.trim()) &&
+        Boolean(process.env[BUILDER_GATEWAY_SPACE_ID_ENV_VAR]?.trim()) &&
+        !isBuilderCreditsPairAllowedInRuntime());
+}
+export function builderCreditsRefusalStatus(chatEligible) {
+    return !chatEligible && isBuilderCreditsPairRefusedByRuntime()
+        ? { builderCreditsRefused: true }
+        : {};
+}
+let warnedBuilderCreditsRefused = false;
+/** @internal Test isolation for the once-per-process refusal warning. */
+export function resetBuilderCreditsRefusedWarningForTests() {
+    warnedBuilderCreditsRefused = false;
+}
 function canUseBuilderDeployCredentialFallbackForRequest() {
     const email = getRequestUserEmail();
     if (!email)
@@ -951,8 +972,14 @@ export async function resolveUsableBuilderGatewayDeployCredentials() {
     const spaceId = canUseDeployCredentialFallbackForRequest(BUILDER_GATEWAY_SPACE_ID_ENV_VAR)
         ? readDeployCredentialEnv(BUILDER_GATEWAY_SPACE_ID_ENV_VAR)
         : undefined;
-    if (!token || !spaceId)
+    if (!token || !spaceId) {
+        if (!warnedBuilderCreditsRefused &&
+            isBuilderCreditsPairRefusedByRuntime()) {
+            warnedBuilderCreditsRefused = true;
+            console.warn("[agent-native] BUILDER_GATEWAY_TOKEN and BUILDER_GATEWAY_SPACE_ID are set, but this runtime does not allow Builder.io credits, so chat will ask for an AI connection.");
+        }
         return null;
+    }
     const failure = await getProviderCredentialAuthFailure({
         key: BUILDER_GATEWAY_TOKEN_ENV_VAR,
         value: token,
@@ -960,6 +987,9 @@ export async function resolveUsableBuilderGatewayDeployCredentials() {
     return failure ? null : { token, spaceId };
 }
 export function isBuilderGatewayDeployConfigured() {
+    // The preview carries the published site's token but is read by the owner.
+    if (isFusionPreviewRuntime())
+        return false;
     return (canUseDeployCredentialFallbackForRequest(BUILDER_GATEWAY_TOKEN_ENV_VAR) &&
         Boolean(readDeployCredentialEnv(BUILDER_GATEWAY_TOKEN_ENV_VAR)));
 }

package/dist/server/deployment-protection.d.ts

@@ -4,4 +4,5 @@
  * not receive it just because this deployment has the credential configured.
  */
 export declare function resolveVercelDeploymentProtectionHeaders(targetUrl: string): Record<string, string>;
+export declare function isFusionPreviewRuntime(): boolean;
 export declare function isHostedWorkspaceRuntime(): boolean;

package/dist/server/deployment-protection.js

@@ -49,12 +49,14 @@ export function resolveVercelDeploymentProtectionHeaders(targetUrl) {
         return {};
     return { "x-vercel-protection-bypass": secret.trim() };
 }
-export function isHostedWorkspaceRuntime() {
-    const workspace = getAppConfig().workspace;
-    const hasFusionPreview = Boolean(process.env.FUSION_ENVIRONMENT || // config-ok: Fusion injects preview markers outside app configuration.
+export function isFusionPreviewRuntime() {
+    return Boolean(process.env.FUSION_ENVIRONMENT || // config-ok: Fusion injects preview markers outside app configuration.
         process.env.FUSION_ENV_ORIGIN || // config-ok: Fusion injects preview markers outside app configuration.
         process.env.VITE_FUSION_ENV_ORIGIN);
+}
+export function isHostedWorkspaceRuntime() {
+    const workspace = getAppConfig().workspace;
     return (workspace.isWorkspace === true ||
         Boolean(workspace.appsJson?.trim()) ||
-        hasFusionPreview);
+        isFusionPreviewRuntime());
 }

package/dist/server/index.d.ts

@@ -115,7 +115,7 @@ export { BUILDER_ASSETS_WRITE_SCOPE, BUILDER_CONTENT_READ_SCOPE, BUILDER_CONTENT
 export { assertBuilderDesignSystemCodeIndexingAllowed, builderDesignSystemUrl, builderProjectBranchUrl, buildBuilderDesignSystemIndexFiles, collectBuilderDesignSystemGitHubFiles, createBuilderDesignSystemProxyFields, designSystemTierUpgradeUrl, fetchBuilderDesignSystemDecodeJobStatus, fetchBuilderDesignSystemDocs, fetchBuilderDesignSystemDocumentCount, fetchBuilderDesignSystemRecord, fetchBuilderDesignSystemTierLimit, getBuilderDesignSystemsBaseUrl, hydrateBuilderDesignSystemReference, indexBuilderDesignSystem, isBuilderDesignSystemReadyByCount, localBuilderDesignSystemId, mimeTypeForBuilderDesignSystemFilename, parseBuilderDesignSystemProxyReference, startBuilderDesignSystemIndex, startBuilderDesignSystemUpload, type BuildBuilderDesignSystemIndexFilesOptions, type BuilderDesignSystemCodeFileInput, type BuilderDesignSystemDecodeJobStatus, type BuilderDesignSystemDocsOptions, type BuilderDesignSystemDocument, type BuilderDesignSystemDocumentCountResult, type BuilderDesignSystemHydratedReference, type BuilderDesignSystemIndexFile, type BuilderDesignSystemIndexFromSourcesOptions, type BuilderDesignSystemIndexOptions, type BuilderDesignSystemIndexResult, type BuilderDesignSystemRecord, type BuilderDesignSystemStatus, type BuilderDesignSystemTierLimit, type BuilderDesignSystemGitHubFile, type BuilderDesignSystemGitHubFileCollection, type BuilderDesignSystemGitHubSource, type BuilderDesignSystemUploadAttachment, type BuilderDesignSystemUploadSlot, type BuilderDesignSystemProxyFields, type BuilderDesignSystemProxyFieldsOptions, type BuilderDesignSystemProxyReference, type BuilderDesignSystemSourceKind, } from "./builder-design-systems.js";
 export { cdnSafeOriginStatus, createBuilderProject, ensureBuilderProject, findBuilderProjectForRepo, getBuilderBranchProjectId, isBuilderBranchingEnabled, registerBuilderBranchProject, requestBuilderBrowserConnection, resolveBuilderBranchProjectId, resolveBuilderHandoffProjectId, resolveIsBuilderBranchingEnabled, normalizeBuilderAgentAttachments, runBuilderAgent, type BuilderAgentAttachment, type BuilderAgentUploadAttachment, type BuilderAgentUrlAttachment, type BuilderProjectResult, type RunBuilderAgentResult, } from "./builder-browser.js";
 export { BuilderBranchError, getBuilderBranchStatus, sendBuilderBranchMessage, type BuilderBranchAgentState, type BuilderBranchErrorCode, type BuilderBranchOperation, type BuilderBranchPrStatus, type BuilderBranchRef, type BuilderBranchState, type BuilderBranchStatus, type GetBuilderBranchStatusOptions, type SendBuilderBranchMessageOptions, type SendBuilderBranchMessageResult, } from "./builder-branch.js";
-export { BuilderBranchFilesError, readBuilderBranchFiles, } from "./builder-branch-files.js";
+export { BuilderBranchFilesError, readBuilderBranchBackupStatus, readBuilderBranchFiles, } from "./builder-branch-files.js";
 export { ensureFusionContainer, sendFusionBranchMessage, pushFusionBranch, reserveFusionHostingSlug, deployFusionProject, getFusionDeploys, getFusionBranchEditorUrl, getFusionHostingUrl, type FusionBranchRef, type EnsureFusionContainerResult, type SendFusionMessageResult, } from "./fusion-app.js";
 export { sendEmail, isEmailConfigured, getEmailReadiness, getEmailProvider, type EmailAttachment, type EmailReadiness, type EmailProvider, type SendEmailArgs, } from "./email.js";
 export { defineTransactionalEmail, defineTransactionalEmails, replaceTransactionalEmails, listTransactionalEmails, getTransactionalEmail, renderTransactionalEmailPreview, renderTransactionalEmailPreviewAsync, type TransactionalEmailDefinition, type RegisteredTransactionalEmail, } from "../email-catalog/registry.js";

package/dist/server/index.js

@@ -108,7 +108,7 @@ export { BUILDER_ASSETS_WRITE_SCOPE, BUILDER_CONTENT_READ_SCOPE, BUILDER_CONTENT
 export { assertBuilderDesignSystemCodeIndexingAllowed, builderDesignSystemUrl, builderProjectBranchUrl, buildBuilderDesignSystemIndexFiles, collectBuilderDesignSystemGitHubFiles, createBuilderDesignSystemProxyFields, designSystemTierUpgradeUrl, fetchBuilderDesignSystemDecodeJobStatus, fetchBuilderDesignSystemDocs, fetchBuilderDesignSystemDocumentCount, fetchBuilderDesignSystemRecord, fetchBuilderDesignSystemTierLimit, getBuilderDesignSystemsBaseUrl, hydrateBuilderDesignSystemReference, indexBuilderDesignSystem, isBuilderDesignSystemReadyByCount, localBuilderDesignSystemId, mimeTypeForBuilderDesignSystemFilename, parseBuilderDesignSystemProxyReference, startBuilderDesignSystemIndex, startBuilderDesignSystemUpload, } from "./builder-design-systems.js";
 export { cdnSafeOriginStatus, createBuilderProject, ensureBuilderProject, findBuilderProjectForRepo, getBuilderBranchProjectId, isBuilderBranchingEnabled, registerBuilderBranchProject, requestBuilderBrowserConnection, resolveBuilderBranchProjectId, resolveBuilderHandoffProjectId, resolveIsBuilderBranchingEnabled, normalizeBuilderAgentAttachments, runBuilderAgent, } from "./builder-browser.js";
 export { BuilderBranchError, getBuilderBranchStatus, sendBuilderBranchMessage, } from "./builder-branch.js";
-export { BuilderBranchFilesError, readBuilderBranchFiles, } from "./builder-branch-files.js";
+export { BuilderBranchFilesError, readBuilderBranchBackupStatus, readBuilderBranchFiles, } from "./builder-branch-files.js";
 export { ensureFusionContainer, sendFusionBranchMessage, pushFusionBranch, reserveFusionHostingSlug, deployFusionProject, getFusionDeploys, getFusionBranchEditorUrl, getFusionHostingUrl, } from "./fusion-app.js";
 export { sendEmail, isEmailConfigured, getEmailReadiness, getEmailProvider, } from "./email.js";
 export { defineTransactionalEmail, defineTransactionalEmails, replaceTransactionalEmails, listTransactionalEmails, getTransactionalEmail, renderTransactionalEmailPreview, renderTransactionalEmailPreviewAsync, } from "../email-catalog/registry.js";

package/dist/templates/factory/.agents/skills/review-latest-feedback/SKILL.md

@@ -163,9 +163,21 @@ checkout, or the expected worktree is missing, create one
 to stop.
 
 Window: roots posted in the last 5 days (or since the timestamp or permalink
-the invocation gives), for new reports and open items alike. Older threads
-are left as they are, except reports listed under `Reports` in a sweep PR
-opened or merged in that window: those always get their close-out.
+the invocation gives), for new reports and open items alike. An older thread
+is in the window too when we have already replied in it and a person has
+replied since the window began: a channel read only shows roots, so search for
+recent thread replies (`in:<#channel> is:thread after:<date>`) to find them.
+On 10/29 a teammate's vote and question sat unanswered under a 3-week-old
+root. Other older threads are left as they are, except reports listed under
+`Reports` in a sweep PR opened or merged in that window: those always get
+their close-out.
+
+Reading a source is a good job for a helper: give each source below its own
+helper on the cheapest model (Luna in Codex, Haiku in Claude Code), ask for a
+short list of candidates with links, and close it as soon as it reports. On
+10/29 the three source reads cost $0.44 together; reusing those same helpers
+for fixes afterwards cost $6.36, because each new job paid for its whole
+growing history.
 
 - **Read the channels.** Use `slack_read_channel` with
   `response_format: detailed` (paginate) back 5 days. Its output shows
@@ -250,8 +262,9 @@ apart from Steve's own 👀.
 ## 3. Fix as many as you can
 
 - Group related reports so one cause gets one fix. Give each independent
-  group a subagent on a cheaper model with disjoint files. The main thread
-  plans, reviews diffs, and integrates.
+  group a fresh subagent on your own model and effort, with disjoint files,
+  or fix it in the main thread. Never hand a finished helper a new job; start
+  a fresh one. The main thread plans, reviews diffs, and integrates.
 - **Reproduce before you edit.** Get the failure on screen first: a test
   that fails, the action returning the wrong thing, a stack trace, or the
   flow broken in a signed-in local app. Reading code is not an attempt:
@@ -274,9 +287,12 @@ apart from Steve's own 👀.
   green, stop editing and capture the real failure first (stack, logs, the
   reporter's actual data). If that doesn't settle it within about 30
   minutes, it becomes 🎫 with one line on what you learned.
-- **Second opinion before the PR.** Give a fresh subagent only the report
-  text, the diff, and the proof, and ask: does the check exercise what the
-  reporter saw, and is this the cause or a symptom? Fix what it finds.
+- **Second opinion before the PR, every time.** Give a fresh subagent on
+  your own model only the report text, the diff, and the proof, and ask: does
+  the check exercise what the reporter saw, is this the cause or a symptom,
+  and what edge case breaks it? Fix what it finds before you open the PR. The
+  10/29 run skipped this, and PR review found the edge cases one round at a
+  time instead.
 - **Keep fixes small.** Each report's fix goes in its own commit so a bad
   one can be reverted alone. A fix that grows past about 300 lines, or into
   a new subsystem (timeouts, cancellation, retries) the reporter didn't ask
@@ -293,6 +309,19 @@ PR per item. End the PR body with a
 Slack thread, or the Sentry, Analytics, or GitHub issue. That list is the
 only set of threads a later `/ship` may close out as fixed.
 
+Wait for CI with one blocking command, such as
+`gh pr checks <number> --watch --required --interval 60`, and don't post a
+status line while it runs: every turn re-sends your whole context, and on
+10/28 polling CI was half the main thread's cost.
+
+Fix each review round's findings in one batch. If a second round still finds
+a problem in the same fix, take that fix out of the PR, remove its whole entry
+from the PR's `Reports` section: the link and its `fix-proof:` and `visual:`
+lines (close-out marks every listed report fixed, and a stray evidence line
+counts toward the report above it). Then 🎫 its
+report with what review found, and merge the rest. Close the PR only when nothing verified
+is left in it.
+
 Merge it the way this repo merges PRs. In a Factory workspace, that means
 the workflow's merge step after its merge gate, never a direct merge.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.222.1",
+  "version": "0.222.2-nightly-20261029182928",
   "description": "The agentic application framework for building autonomous agents with intuitive UIs",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -742,7 +742,7 @@
     "yaml": "^2.9.0",
     "yjs": "^13.6.33",
     "zod": "^4.3.6",
-    "@agent-native/agentkit": "^0.222.1",
+    "@agent-native/agentkit": "^0.222.2-nightly-20261029182928",
     "@agent-native/recap-cli": "^0.5.92"
   },
   "devDependencies": {
@@ -814,7 +814,7 @@
     "xlsx": "^0.18.5"
   },
   "peerDependencies": {
-    "@agent-native/core-corpus": ">=0.196.0",
+    "@agent-native/core-corpus": "0.222.2-nightly-20261029182928",
     "@ai-sdk/anthropic": ">=3",
     "@ai-sdk/cohere": ">=3",
     "@ai-sdk/google": ">=3",

package/src/templates/factory/.agents/skills/review-latest-feedback/SKILL.md

@@ -163,9 +163,21 @@ checkout, or the expected worktree is missing, create one
 to stop.
 
 Window: roots posted in the last 5 days (or since the timestamp or permalink
-the invocation gives), for new reports and open items alike. Older threads
-are left as they are, except reports listed under `Reports` in a sweep PR
-opened or merged in that window: those always get their close-out.
+the invocation gives), for new reports and open items alike. An older thread
+is in the window too when we have already replied in it and a person has
+replied since the window began: a channel read only shows roots, so search for
+recent thread replies (`in:<#channel> is:thread after:<date>`) to find them.
+On 10/29 a teammate's vote and question sat unanswered under a 3-week-old
+root. Other older threads are left as they are, except reports listed under
+`Reports` in a sweep PR opened or merged in that window: those always get
+their close-out.
+
+Reading a source is a good job for a helper: give each source below its own
+helper on the cheapest model (Luna in Codex, Haiku in Claude Code), ask for a
+short list of candidates with links, and close it as soon as it reports. On
+10/29 the three source reads cost $0.44 together; reusing those same helpers
+for fixes afterwards cost $6.36, because each new job paid for its whole
+growing history.
 
 - **Read the channels.** Use `slack_read_channel` with
   `response_format: detailed` (paginate) back 5 days. Its output shows
@@ -250,8 +262,9 @@ apart from Steve's own 👀.
 ## 3. Fix as many as you can
 
 - Group related reports so one cause gets one fix. Give each independent
-  group a subagent on a cheaper model with disjoint files. The main thread
-  plans, reviews diffs, and integrates.
+  group a fresh subagent on your own model and effort, with disjoint files,
+  or fix it in the main thread. Never hand a finished helper a new job; start
+  a fresh one. The main thread plans, reviews diffs, and integrates.
 - **Reproduce before you edit.** Get the failure on screen first: a test
   that fails, the action returning the wrong thing, a stack trace, or the
   flow broken in a signed-in local app. Reading code is not an attempt:
@@ -274,9 +287,12 @@ apart from Steve's own 👀.
   green, stop editing and capture the real failure first (stack, logs, the
   reporter's actual data). If that doesn't settle it within about 30
   minutes, it becomes 🎫 with one line on what you learned.
-- **Second opinion before the PR.** Give a fresh subagent only the report
-  text, the diff, and the proof, and ask: does the check exercise what the
-  reporter saw, and is this the cause or a symptom? Fix what it finds.
+- **Second opinion before the PR, every time.** Give a fresh subagent on
+  your own model only the report text, the diff, and the proof, and ask: does
+  the check exercise what the reporter saw, is this the cause or a symptom,
+  and what edge case breaks it? Fix what it finds before you open the PR. The
+  10/29 run skipped this, and PR review found the edge cases one round at a
+  time instead.
 - **Keep fixes small.** Each report's fix goes in its own commit so a bad
   one can be reverted alone. A fix that grows past about 300 lines, or into
   a new subsystem (timeouts, cancellation, retries) the reporter didn't ask
@@ -293,6 +309,19 @@ PR per item. End the PR body with a
 Slack thread, or the Sentry, Analytics, or GitHub issue. That list is the
 only set of threads a later `/ship` may close out as fixed.
 
+Wait for CI with one blocking command, such as
+`gh pr checks <number> --watch --required --interval 60`, and don't post a
+status line while it runs: every turn re-sends your whole context, and on
+10/28 polling CI was half the main thread's cost.
+
+Fix each review round's findings in one batch. If a second round still finds
+a problem in the same fix, take that fix out of the PR, remove its whole entry
+from the PR's `Reports` section: the link and its `fix-proof:` and `visual:`
+lines (close-out marks every listed report fixed, and a stray evidence line
+counts toward the report above it). Then 🎫 its
+report with what review found, and merge the rest. Close the PR only when nothing verified
+is left in it.
+
 Merge it the way this repo merges PRs. In a Factory workspace, that means
 the workflow's merge step after its merge gate, never a direct merge.