@agent-native/core 0.77.24 → 0.78.1

package/corpus/templates/analytics/server/plugins/auth.ts

@@ -1,7 +1,7 @@
 import { createAuthPlugin } from "@agent-native/core/server";
 
 export default createAuthPlugin({
-  publicPaths: ["/track", "/api/analytics/track"],
+  publicPaths: ["/track", "/api/analytics/track", "/api/analytics/replay"],
   marketing: {
     appName: "Agent-Native Analytics",
     tagline:

package/corpus/templates/analytics/server/plugins/dashboard-report-jobs.ts

@@ -0,0 +1,47 @@
+import { runDashboardReportsOnce } from "../jobs/dashboard-report";
+
+const INTERVAL_MS = 60_000;
+let skippingLogged = false;
+
+declare global {
+  var __AGENT_NATIVE_DASHBOARD_REPORT_SCHEDULED_RUNTIME__: boolean | undefined;
+}
+
+function platformSchedulerOwnsReports(): boolean {
+  return (
+    process.env.NETLIFY === "true" ||
+    globalThis.__AGENT_NATIVE_DASHBOARD_REPORT_SCHEDULED_RUNTIME__ === true
+  );
+}
+
+export default function registerDashboardReportJobs(): void {
+  const isProd = process.env.NODE_ENV === "production";
+  const flag =
+    process.env.ANALYTICS_DASHBOARD_REPORT_JOBS ??
+    process.env.RUN_BACKGROUND_JOBS;
+  const enabled =
+    !platformSchedulerOwnsReports() &&
+    (flag === "1" || (isProd && flag !== "0"));
+
+  if (!enabled) {
+    if (!skippingLogged) {
+      console.log(
+        platformSchedulerOwnsReports()
+          ? "[dashboard-report] Skipping in-process cron because the platform scheduler owns dashboard reports."
+          : "[dashboard-report] Skipping background cron (set ANALYTICS_DASHBOARD_REPORT_JOBS=1 or RUN_BACKGROUND_JOBS=1 to enable in dev; on by default in production)",
+      );
+      skippingLogged = true;
+    }
+    return;
+  }
+
+  setInterval(() => {
+    runDashboardReportsOnce().catch((err) =>
+      console.error("[dashboard-report] interval failed:", err),
+    );
+  }, INTERVAL_MS);
+
+  console.log(
+    `[dashboard-report] Recurring dashboard report sweep every ${INTERVAL_MS / 1000}s.`,
+  );
+}

package/corpus/templates/analytics/server/plugins/db.ts

@@ -114,6 +114,9 @@ export default runMigrations(
       created_at TEXT NOT NULL DEFAULT (datetime('now')),
       last_used_at TEXT,
       revoked_at TEXT,
+      replay_allowed_origins TEXT NOT NULL DEFAULT '[]',
+      replay_max_bytes_per_day INTEGER NOT NULL DEFAULT 104857600,
+      replay_max_requests_per_minute INTEGER NOT NULL DEFAULT 120,
       owner_email TEXT NOT NULL DEFAULT 'local@localhost',
       org_id TEXT
     )`,
@@ -292,6 +295,203 @@ export default runMigrations(
         sqlite: `UPDATE analytics_events SET event_date = COALESCE(NULLIF(event_date, ''), substr(timestamp, 1, 10)), user_key = COALESCE(NULLIF(user_key, ''), NULLIF(user_id, ''), NULLIF(anonymous_id, '')) WHERE (event_date IS NULL OR event_date = '' OR user_key IS NULL OR user_key = '') AND timestamp >= date('now', '-400 days')`,
       },
     },
+    {
+      version: 50,
+      sql: {
+        postgres: `CREATE TABLE IF NOT EXISTS dashboard_report_subscriptions (
+      id TEXT PRIMARY KEY,
+      dashboard_id TEXT NOT NULL,
+      name TEXT NOT NULL,
+      recipients TEXT NOT NULL DEFAULT '[]',
+      filters TEXT NOT NULL DEFAULT '{}',
+      frequency TEXT NOT NULL DEFAULT 'daily',
+      time_of_day TEXT NOT NULL DEFAULT '09:00',
+      timezone TEXT NOT NULL DEFAULT 'UTC',
+      enabled BOOLEAN NOT NULL DEFAULT true,
+      next_run_at TEXT,
+      last_run_at TEXT,
+      last_status TEXT,
+      last_error TEXT,
+      created_at TEXT NOT NULL DEFAULT (now()::text),
+      updated_at TEXT NOT NULL DEFAULT (now()::text),
+      owner_email TEXT NOT NULL DEFAULT 'local@localhost',
+      org_id TEXT
+    )`,
+        sqlite: `CREATE TABLE IF NOT EXISTS dashboard_report_subscriptions (
+      id TEXT PRIMARY KEY,
+      dashboard_id TEXT NOT NULL,
+      name TEXT NOT NULL,
+      recipients TEXT NOT NULL DEFAULT '[]',
+      filters TEXT NOT NULL DEFAULT '{}',
+      frequency TEXT NOT NULL DEFAULT 'daily',
+      time_of_day TEXT NOT NULL DEFAULT '09:00',
+      timezone TEXT NOT NULL DEFAULT 'UTC',
+      enabled INTEGER NOT NULL DEFAULT 1,
+      next_run_at TEXT,
+      last_run_at TEXT,
+      last_status TEXT,
+      last_error TEXT,
+      created_at TEXT NOT NULL DEFAULT (datetime('now')),
+      updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+      owner_email TEXT NOT NULL DEFAULT 'local@localhost',
+      org_id TEXT
+    )`,
+      },
+    },
+    {
+      version: 51,
+      sql: `CREATE INDEX IF NOT EXISTS dashboard_report_subscriptions_due_idx ON dashboard_report_subscriptions (enabled, next_run_at)`,
+    },
+    {
+      version: 52,
+      sql: `CREATE INDEX IF NOT EXISTS dashboard_report_subscriptions_owner_dashboard_idx ON dashboard_report_subscriptions (owner_email, org_id, dashboard_id)`,
+    },
+    {
+      version: 53,
+      sql: `CREATE TABLE IF NOT EXISTS session_recordings (
+      id TEXT PRIMARY KEY,
+      public_key_id TEXT NOT NULL,
+      client_recording_id TEXT NOT NULL,
+      session_id TEXT NOT NULL,
+      user_id TEXT,
+      anonymous_id TEXT,
+      user_key TEXT,
+      started_at TEXT NOT NULL,
+      ended_at TEXT,
+      duration_ms INTEGER,
+      chunk_count INTEGER NOT NULL DEFAULT 0,
+      event_count INTEGER NOT NULL DEFAULT 0,
+      total_bytes INTEGER NOT NULL DEFAULT 0,
+      page_count INTEGER NOT NULL DEFAULT 0,
+      error_count INTEGER NOT NULL DEFAULT 0,
+      rage_click_count INTEGER NOT NULL DEFAULT 0,
+      privacy_mode TEXT NOT NULL DEFAULT 'unknown',
+      first_url TEXT,
+      last_url TEXT,
+      path TEXT,
+      hostname TEXT,
+      referrer TEXT,
+      app TEXT,
+      template TEXT,
+      status TEXT NOT NULL DEFAULT 'active',
+      metadata TEXT NOT NULL DEFAULT '{}',
+      created_at TEXT NOT NULL DEFAULT (datetime('now')),
+      updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+      last_ingested_at TEXT,
+      owner_email TEXT NOT NULL DEFAULT 'local@localhost',
+      org_id TEXT,
+      visibility TEXT NOT NULL DEFAULT 'private'
+    )`,
+    },
+    {
+      version: 54,
+      sql: `CREATE TABLE IF NOT EXISTS session_replay_chunks (
+      id TEXT PRIMARY KEY,
+      recording_id TEXT NOT NULL,
+      seq INTEGER NOT NULL,
+      checksum TEXT NOT NULL,
+      byte_length INTEGER NOT NULL DEFAULT 0,
+      event_count INTEGER NOT NULL DEFAULT 0,
+      started_at TEXT,
+      ended_at TEXT,
+      storage_kind TEXT NOT NULL,
+      storage_ref TEXT,
+      inline_data TEXT,
+      created_at TEXT NOT NULL DEFAULT (datetime('now')),
+      owner_email TEXT NOT NULL DEFAULT 'local@localhost',
+      org_id TEXT
+    )`,
+    },
+    {
+      version: 55,
+      sql: `CREATE TABLE IF NOT EXISTS session_recording_shares (
+      id TEXT PRIMARY KEY,
+      resource_id TEXT NOT NULL,
+      principal_type TEXT NOT NULL,
+      principal_id TEXT NOT NULL,
+      role TEXT NOT NULL DEFAULT 'viewer',
+      created_by TEXT NOT NULL,
+      created_at TEXT NOT NULL DEFAULT (datetime('now'))
+    )`,
+    },
+    {
+      version: 56,
+      sql: `CREATE UNIQUE INDEX IF NOT EXISTS session_recordings_key_client_idx ON session_recordings (public_key_id, client_recording_id)`,
+    },
+    {
+      version: 57,
+      sql: `CREATE UNIQUE INDEX IF NOT EXISTS session_replay_chunks_recording_seq_idx ON session_replay_chunks (recording_id, seq)`,
+    },
+    {
+      version: 58,
+      sql: `CREATE INDEX IF NOT EXISTS session_recordings_scope_started_idx ON session_recordings (org_id, owner_email, started_at)`,
+    },
+    {
+      version: 59,
+      sql: `CREATE INDEX IF NOT EXISTS session_recordings_session_idx ON session_recordings (session_id)`,
+    },
+    {
+      version: 60,
+      sql: `CREATE INDEX IF NOT EXISTS session_recording_shares_resource_idx ON session_recording_shares (resource_id)`,
+    },
+    {
+      version: 61,
+      sql: `ALTER TABLE session_recordings ADD COLUMN IF NOT EXISTS page_count INTEGER NOT NULL DEFAULT 0`,
+    },
+    {
+      version: 62,
+      sql: `ALTER TABLE session_recordings ADD COLUMN IF NOT EXISTS error_count INTEGER NOT NULL DEFAULT 0`,
+    },
+    {
+      version: 63,
+      sql: `ALTER TABLE session_recordings ADD COLUMN IF NOT EXISTS rage_click_count INTEGER NOT NULL DEFAULT 0`,
+    },
+    {
+      version: 64,
+      sql: `ALTER TABLE session_recordings ADD COLUMN IF NOT EXISTS privacy_mode TEXT NOT NULL DEFAULT 'unknown'`,
+    },
+    {
+      version: 65,
+      sql: `ALTER TABLE analytics_public_keys ADD COLUMN IF NOT EXISTS replay_allowed_origins TEXT NOT NULL DEFAULT '[]'`,
+    },
+    {
+      version: 66,
+      sql: `ALTER TABLE analytics_public_keys ADD COLUMN IF NOT EXISTS replay_max_bytes_per_day INTEGER NOT NULL DEFAULT 104857600`,
+    },
+    {
+      version: 67,
+      sql: `ALTER TABLE analytics_public_keys ADD COLUMN IF NOT EXISTS replay_max_requests_per_minute INTEGER NOT NULL DEFAULT 120`,
+    },
+    {
+      version: 68,
+      sql: {
+        postgres: `
+        ALTER TABLE dashboard_report_subscriptions ALTER COLUMN enabled DROP DEFAULT;
+        ALTER TABLE dashboard_report_subscriptions ALTER COLUMN enabled TYPE boolean USING (enabled::text IN ('true', 't', '1'));
+        ALTER TABLE dashboard_report_subscriptions ALTER COLUMN enabled SET DEFAULT true;
+      `,
+      },
+    },
+    {
+      version: 69,
+      sql: `CREATE TABLE IF NOT EXISTS session_replay_ingests (
+      id TEXT PRIMARY KEY,
+      public_key_id TEXT NOT NULL,
+      recording_id TEXT NOT NULL,
+      byte_length INTEGER NOT NULL DEFAULT 0,
+      created_at TEXT NOT NULL DEFAULT (datetime('now')),
+      owner_email TEXT NOT NULL DEFAULT 'local@localhost',
+      org_id TEXT
+    )`,
+    },
+    {
+      version: 70,
+      sql: `CREATE INDEX IF NOT EXISTS session_replay_ingests_public_key_created_at_idx ON session_replay_ingests (public_key_id, created_at)`,
+    },
+    {
+      version: 71,
+      sql: `CREATE INDEX IF NOT EXISTS session_replay_ingests_recording_idx ON session_replay_ingests (recording_id)`,
+    },
   ],
   { table: "analytics_migrations" },
 );

package/corpus/templates/analytics/server/plugins/session-replay-retention-jobs.ts

@@ -0,0 +1,41 @@
+import { runSessionReplayRetentionOnce } from "../jobs/session-replay-retention";
+
+const ONE_DAY_MS = 24 * 60 * 60 * 1000;
+let skippingLogged = false;
+
+export default function registerSessionReplayRetentionJobs(): void {
+  const isProd = process.env.NODE_ENV === "production";
+  const flag =
+    process.env.ANALYTICS_SESSION_REPLAY_RETENTION_JOBS ??
+    process.env.RUN_BACKGROUND_JOBS;
+  const enabled = flag === "1" || (isProd && flag !== "0");
+
+  if (!enabled) {
+    if (!skippingLogged) {
+      console.log(
+        "[session-replay] Skipping retention job (set ANALYTICS_SESSION_REPLAY_RETENTION_JOBS=1 or RUN_BACKGROUND_JOBS=1 to enable in dev; on by default in production)",
+      );
+      skippingLogged = true;
+    }
+    return;
+  }
+
+  setInterval(() => {
+    runSessionReplayRetentionOnce()
+      .then((result) => {
+        if (
+          result.finalized ||
+          result.expired ||
+          result.chunks ||
+          result.blobDeleteFailures
+        ) {
+          console.log("[session-replay] Retention sweep completed", result);
+        }
+      })
+      .catch((err) =>
+        console.error("[session-replay] retention interval failed:", err),
+      );
+  }, ONE_DAY_MS);
+
+  console.log("[session-replay] Retention sweep scheduled daily.");
+}

package/corpus/templates/analytics/server/routes/api/analytics/replay.options.ts

@@ -0,0 +1 @@
+export { handleSessionReplayOptions as default } from "../../../handlers/session-replay";

package/corpus/templates/analytics/server/routes/api/analytics/replay.post.ts

@@ -0,0 +1 @@
+export { handleSessionReplayIngest as default } from "../../../handlers/session-replay";

package/corpus/templates/analytics/server/routes/api/dashboard-reports/run.post.ts

@@ -0,0 +1,61 @@
+import { timingSafeEqual } from "node:crypto";
+
+import { createError, defineEventHandler, getHeader } from "h3";
+
+import { runDashboardReportsOnce } from "../../../jobs/dashboard-report";
+
+declare global {
+  var __AGENT_NATIVE_DASHBOARD_REPORT_SCHEDULED_RUNTIME__: boolean | undefined;
+}
+
+function productionLike(): boolean {
+  return (
+    process.env.NODE_ENV === "production" || process.env.NETLIFY === "true"
+  );
+}
+
+function scheduledFunctionRuntime(): boolean {
+  return (
+    globalThis.__AGENT_NATIVE_DASHBOARD_REPORT_SCHEDULED_RUNTIME__ === true
+  );
+}
+
+function cronSecret(): string | null {
+  const secret = process.env.DASHBOARD_REPORTS_CRON_SECRET?.trim();
+  return secret ? secret : null;
+}
+
+function headerMatchesSecret(
+  header: string | undefined,
+  secret: string,
+): boolean {
+  const expected = `Bearer ${secret}`;
+  const value = header?.trim() ?? "";
+  if (value.length !== expected.length) return false;
+  return timingSafeEqual(Buffer.from(value), Buffer.from(expected));
+}
+
+export default defineEventHandler(async (event) => {
+  const secret = cronSecret();
+  const scheduledRuntime = scheduledFunctionRuntime();
+  if (!secret && productionLike() && !scheduledRuntime) {
+    throw createError({
+      statusCode: 503,
+      statusMessage: "DASHBOARD_REPORTS_CRON_SECRET is required",
+    });
+  }
+
+  if (
+    secret &&
+    !scheduledRuntime &&
+    !headerMatchesSecret(getHeader(event, "authorization"), secret)
+  ) {
+    throw createError({
+      statusCode: 401,
+      statusMessage: "Unauthorized",
+    });
+  }
+
+  const result = await runDashboardReportsOnce();
+  return { ok: true, ...result };
+});

package/corpus/templates/analytics/server/routes/api/session-replay/recordings/[recordingId]/chunks/[seq].get.ts

@@ -0,0 +1 @@
+export { handleSessionReplayChunkBytes as default } from "../../../../../../handlers/session-replay";

package/corpus/templates/analytics/server/routes/api/session-replay/recordings/[recordingId]/events.get.ts

@@ -0,0 +1 @@
+export { handleSessionReplayEvents as default } from "../../../../../handlers/session-replay";

package/corpus/templates/analytics/server/routes/api/session-replay/recordings/[recordingId]/manifest.get.ts

@@ -0,0 +1 @@
+export { handleSessionReplayManifest as default } from "../../../../../handlers/session-replay";

package/corpus/templates/analytics/server/routes/api/session-replay/recordings/[recordingId].get.ts

@@ -0,0 +1 @@
+export { handleSessionReplaySummary as default } from "../../../../handlers/session-replay";

package/corpus/templates/analytics/server/routes/api/session-replay/recordings.get.ts

@@ -0,0 +1 @@
+export { handleSessionReplayList as default } from "../../../handlers/session-replay";

package/corpus/templates/assets/.agents/skills/asset-generation/SKILL.md

@@ -21,12 +21,19 @@ or generated image/video assets that another app can reference by ID and URL.
   when `libraryId` is omitted, generates candidates, returns the picker filtered
   to those run IDs, and works in in-app chat plus external MCP hosts.
 - Use `open-asset-picker` when a person should browse, search, or select an
-  existing asset in UI, or when you want the picker to handle generation itself.
+  existing asset inside an embedded picker, or when you want the picker to
+  handle generation itself. It still opens `/library` with the iframe/bridge
+  contract. The normal human Library workspace is `/library` and `/library/:id`.
   Pass `mediaType: "image"` by default, or `mediaType: "video"` for video
   libraries.
 - Use unattended actions when the agent already knows what to do:
   `search-assets`, `list-assets`, `generate-image`, `generate-image-batch`,
   `generate-video`, `refresh-generation-run`, and `export-asset`.
+- In chat, consume composer `@` references as structured generation inputs:
+  `brand-kit` maps to `libraryId`, `preset` maps to `presetId`, and
+  `media-type` chooses image generation versus video generation. If no mention
+  is available, use `view-screen`, `list-libraries`, and
+  `list-generation-presets` to choose explicit args.
 - Use generation presets when the user asks for a repeatable output format
   like social image, blog hero, or diagram. Call `list-generation-presets` for
   the library and pass `presetId` through generation/refinement actions.
@@ -58,7 +65,8 @@ or generated image/video assets that another app can reference by ID and URL.
    `generate-image-batch` returns, use its returned `images` / asset fields
    directly; do not call `get-generation-run`, `refresh-generation-run`, or
    regenerate just to verify image runs.
-4. For preset-backed work, pass `presetId`; for handoff work, pass `sessionId`.
+4. For preset-backed work, pass a mentioned or selected `presetId`; for handoff
+   work, pass `sessionId`.
 5. Let the server choose a small deterministic reference set unless the user
    named exact assets. Canonical style anchors come from
    `assetLibraries.settings.canonicalStyleAssetIds` and

package/corpus/templates/assets/.agents/skills/image-generation/SKILL.md

@@ -10,8 +10,13 @@ Use this skill before calling `generate-image`, `generate-image-batch`, or
 
 ## Rules
 
-- Start from the current library. Call `view-screen` when the user says "this
-  library" or "this image" and you need fresh IDs.
+- Start from composer `@` mentions when the user tags generation inputs.
+  `brand-kit` references map to `libraryId`, `preset` references map to
+  `presetId`, and `media-type` references choose image generation versus video
+  generation. Call `view-screen` when the user says "this library" or "this
+  image" and you need fresh IDs. The image model may default from the composer
+  image-model picker; all other generation settings should be explicit action
+  args, preset values, or action schema defaults.
 - Use category-tagged references. Blog heroes should prefer `hero`; diagrams
   should prefer `diagram`; product imagery should include `product` and `logo`
   references.
@@ -20,16 +25,18 @@ Use this skill before calling `generate-image`, `generate-image-batch`, or
   `assets.metadata.isStyleAnchor` before sampling other relevant references.
 - Honor library custom instructions. They are persistent prompt guidance and
   should be updated when the user wants durable generation behavior.
-- Generate 2-4 candidates for open-ended requests. Use `generate-image-batch`
-  with stable `slotId`s so the UI can show live slots.
+- Generate the selected candidate count for open-ended requests, usually 2-4.
+  Use `generate-image-batch` with stable `slotId`s so the shared generation tray
+  can show live slots.
 - `generate-image` and `generate-image-batch` are synchronous for images. One
   batch call should produce the requested candidates and return their asset
   IDs/URLs; do not follow it with `get-generation-run`,
   `refresh-generation-run`, or more generation unless the user asks for another
   direction or the returned slot has `ok: false`.
-- For repeatable deliverables, call `list-generation-presets` and pass the
-  selected `presetId` to `generate-image`, `generate-image-batch`,
-  `refine-image`, or `rerun-generation-run`.
+- For repeatable deliverables, honor a `preset` @mention as `presetId` or call
+  `list-generation-presets` when choosing one. Pass the preset through
+  `generate-image`, `generate-image-batch`, `refine-image`, or
+  `rerun-generation-run`.
 - For designer handoff, preserve `sessionId` and call
   `update-generation-session` after each new candidate so the active asset,
   feedback, and run lineage stay resumable.

package/corpus/templates/assets/.agents/skills/library-management/SKILL.md

@@ -7,6 +7,14 @@ description: Schema, CRUD, sharing, and cascade-delete patterns for asset librar
 
 Use this skill before adding fields, changing access checks, or modifying delete behavior.
 
+## User surface
+
+The human Library workspace is canonical at `/library`. The root selects
+"All assets" and browses assets across every accessible brand kit; `/library/:id`
+opens one kit's management detail. Legacy `/brand-kits` URLs redirect here.
+Embedded picker hosts still load `/library` in an iframe and keep the existing
+bridge contract.
+
 ## Schema overview
 
 ```
@@ -24,6 +32,8 @@ image_libraries           — top-level library, has ownableColumns + shares
 Every action that touches an ownable resource must scope its queries:
 
 - **List queries**: `accessFilter(schema.assetLibraries, schema.assetLibraryShares)` in WHERE.
+  Cross-kit asset lists must first resolve the accessible library IDs, then
+  query `image_assets` by those IDs and include the parent kit title for UI chips.
 - **Read by id**: `await resolveAccess("asset-library", libraryId)`. The `requireLibrary(id)` helper in `_helpers.ts` wraps this.
 - **Write**: `await assertAccess("asset-library", libraryId, "editor")` for updates / inserts; `"admin"` for deletes.
 
@@ -52,6 +62,7 @@ Example: adding `image_libraries.icon`:
 ## Sharing
 
 Libraries follow the standard framework sharing model:
+
 - `visibility: "private" | "org" | "public"`
 - Per-user / per-org grants in `image_library_shares` with `viewer | editor | admin` roles.
 - Use the framework actions `share-resource`, `unshare-resource`, `set-resource-visibility` with `--resourceType=asset-library`. The legacy `image-library` alias remains registered for existing grants.
@@ -61,6 +72,7 @@ Generated assets and references inherit the parent library's visibility. v1 does
 ## Cascade delete
 
 `delete-library` deletes in order:
+
 1. `image_assets WHERE library_id = ?`
 2. `image_generation_runs WHERE library_id = ?`
 3. `image_collections WHERE library_id = ?`

package/corpus/templates/assets/AGENTS.md

@@ -21,7 +21,9 @@ Detailed library, generation, image, embed, and engine rules live in
   ad hoc provider calls when the app has an action/engine abstraction.
 - Preserve provenance and metadata for generated or imported assets.
 - Use `view-screen` when the active library, selected asset, picker, generation,
-  or embed target is unclear. The picker is also available from the left nav.
+  or embed target is unclear. The human Library surface is `/library` for
+  cross-kit browsing and `/library/:libraryId` for a single brand kit; embedded
+  picker hosts still use `/library` with their iframe/auth bridge params.
 - The Create tab (`/`) is the full-page Assets chat surface. Use the shared
   `assets` chat thread storage there, keep past chats in the left sidebar, and
   use the right agent sidebar only on non-Create routes with view-transition
@@ -33,8 +35,21 @@ Detailed library, generation, image, embed, and engine rules live in
 ## Application State
 
 - `navigation` exposes library, asset, generation, picker, embed, and selection
-  context. Picker state includes media type, selected library, query, prompt, and
-  aspect ratio when available.
+  context. Human Library state uses
+  `{ view: "library", selection: "all" | libraryId, tab, scope, folderId, search }`.
+  Embedded picker state keeps `{ view: "picker", mediaType, libraryId, query,
+prompt, aspectRatio }`.
+- Composer `@` mentions are the source of generation inputs. Map
+  `brand-kit` references to `libraryId`, `preset` references to `presetId`, and
+  `media-type` references to choosing image (`generate-image` /
+  `generate-image-batch`) or video (`generate-video`) generation. The current
+  library view auto-tags its brand kit as a visible removable chip when the
+  composer is empty. The image model is the only remaining composer-side
+  default; the image-model picker writes `imageGenerationModel`, which image
+  generation actions may use when `model` is omitted.
+- `asset-variants` is the shared live generation tray state. New image
+  candidates should appear there through `generate-image` or
+  `generate-image-batch`; do not invent page-local progress surfaces.
 - `navigate` moves the UI to picker, library, generation, asset, and settings
   surfaces.
 

package/corpus/templates/assets/actions/_image-model-default.ts

@@ -0,0 +1,24 @@
+import { readAppState } from "@agent-native/core/application-state";
+
+import { IMAGE_MODELS, type ImageModel } from "../shared/api.js";
+
+export const IMAGE_MODEL_STATE_KEY = "imageGenerationModel";
+
+function imageModelValue(value: unknown): ImageModel | undefined {
+  return typeof value === "string" &&
+    (IMAGE_MODELS as readonly string[]).includes(value)
+    ? (value as ImageModel)
+    : undefined;
+}
+
+function recordValue(value: unknown): Record<string, unknown> {
+  return value && typeof value === "object" && !Array.isArray(value)
+    ? (value as Record<string, unknown>)
+    : {};
+}
+
+export async function readImageModelDefault(): Promise<ImageModel | undefined> {
+  const raw = await readAppState(IMAGE_MODEL_STATE_KEY).catch(() => null);
+  const state = recordValue(raw);
+  return imageModelValue(state.model) ?? imageModelValue(raw);
+}

package/corpus/templates/assets/actions/dismiss-variant-slots.ts

@@ -1,38 +1,36 @@
 import { defineAction } from "@agent-native/core";
-import {
-  deleteAppState,
-  readAppState,
-  writeAppState,
-} from "@agent-native/core/application-state";
+import type { ActionRunContext } from "@agent-native/core/action";
 import { assertAccess } from "@agent-native/core/sharing";
 import { eq } from "drizzle-orm";
 import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
-import type { AssetVariantState } from "../shared/api.js";
+import {
+  deleteVariantState,
+  readVariantState,
+  writeVariantState,
+} from "./variant-slots.js";
 
 export default defineAction({
   description:
-    "Clear one or more live candidate slots from application_state.asset-variants. Use slotId for a single slot, scope='failed' to drop every failed slot, or scope='all' to clear the panel. Any underlying asset rows for cleared slots are deleted (requires editor access on the library).",
+    "Clear one or more live candidate slots from application_state.asset-variants. Uses the current chat thread when available. Use slotId for a single slot, scope='failed' to drop every failed slot, or scope='all' to clear the panel. Any underlying asset rows for cleared slots are deleted (requires editor access on the library).",
   schema: z
     .object({
       slotId: z.string().optional(),
       scope: z.enum(["failed", "all"]).optional(),
+      threadId: z.string().nullable().optional(),
     })
     .refine((v) => Boolean(v.slotId) !== Boolean(v.scope), {
       message: "Provide exactly one of `slotId` or `scope`.",
     }),
-  run: async ({ slotId, scope }) => {
-    const raw = (await readAppState("asset-variants")) as unknown | null;
-    const legacyRaw =
-      raw ??
-      ((await readAppState("image-variants").catch(() => null)) as
-        | unknown
-        | null);
-    const state = (legacyRaw ?? null) as AssetVariantState | null;
+  run: async ({ slotId, scope, threadId }, context?: ActionRunContext) => {
+    const effectiveThreadId = threadId ?? context?.threadId ?? null;
+    const state = await readVariantState(effectiveThreadId);
     if (!state || !Array.isArray(state.slots) || state.slots.length === 0) {
       return { dismissed: 0, assetsDeleted: 0, cleared: true };
     }
+    const stateThreadId =
+      effectiveThreadId ?? state.variantScopeId ?? state.threadId ?? null;
 
     await assertAccess("asset-library", state.libraryId, "editor");
 
@@ -64,8 +62,7 @@ export default defineAction({
     const remaining = state.slots.filter((s) => !removed.has(s.slotId));
 
     if (remaining.length === 0) {
-      await deleteAppState("asset-variants");
-      await deleteAppState("image-variants").catch(() => {});
+      await deleteVariantState(stateThreadId);
       return {
         dismissed: toRemove.length,
         assetsDeleted,
@@ -75,11 +72,7 @@ export default defineAction({
 
     state.slots = remaining;
     state.updatedAt = new Date().toISOString();
-    await writeAppState(
-      "asset-variants",
-      state as unknown as Record<string, unknown>,
-    );
-    await deleteAppState("image-variants").catch(() => {});
+    await writeVariantState(state, stateThreadId);
     return {
       dismissed: toRemove.length,
       assetsDeleted,