@agent-native/core 0.84.21 → 0.84.22

package/corpus/templates/analytics/server/lib/session-replay.ts

@@ -1591,7 +1591,8 @@ export async function readSessionReplayChunkBytes(
   recording: SessionRecordingSummary;
   seq: number;
   checksum: string;
-  data: Buffer;
+  /** Decompressed replay-chunk JSON text (a serialized rrweb events array). */
+  json: string;
 }> {
   const recording = await getSessionReplaySummary(recordingId, scope);
   const db = getDb() as any;
@@ -1608,6 +1609,12 @@ export async function readSessionReplayChunkBytes(
     .limit(1);
   if (!row) throw replayError("Session replay chunk not found", 404);
 
+  // Return decompressed JSON and let normal Accept-Encoding negotiation handle
+  // wire compression. We intentionally do NOT hand back a pre-gzipped body with
+  // a manual `Content-Encoding: gzip` header: serverless hosts (Netlify) mangle
+  // binary function bodies and re-negotiate compression, which corrupted replay
+  // chunk downloads in production and left the player blank. Storing gzip at
+  // rest is unchanged — we just gunzip before serving.
   if (row.storageKind === "blob" && row.storageRef) {
     const ref = decodeReplayBlobRef(row.storageRef);
     if (!ref)
@@ -1617,7 +1624,7 @@ export async function readSessionReplayChunkBytes(
       recording,
       seq: row.seq,
       checksum: row.checksum,
-      data: Buffer.from(blob.data),
+      json: gunzipSync(Buffer.from(blob.data)).toString("utf8"),
     };
   }
   if (!row.inlineData)
@@ -1626,7 +1633,7 @@ export async function readSessionReplayChunkBytes(
     recording,
     seq: row.seq,
     checksum: row.checksum,
-    data: gzipSync(Buffer.from(row.inlineData, "utf8")),
+    json: row.inlineData,
   };
 }
 

package/corpus/templates/analytics/server/plugins/analytics-alert-jobs.ts

@@ -0,0 +1,54 @@
+import { runAnalyticsAlertsOnce } from "../jobs/analytics-alerts";
+
+const DEFAULT_INTERVAL_MS = 60_000;
+let skippingLogged = false;
+
+declare global {
+  var __AGENT_NATIVE_ANALYTICS_ALERT_SCHEDULED_RUNTIME__: boolean | undefined;
+}
+
+function platformSchedulerOwnsAlerts(): boolean {
+  return (
+    process.env.NETLIFY === "true" ||
+    globalThis.__AGENT_NATIVE_ANALYTICS_ALERT_SCHEDULED_RUNTIME__ === true
+  );
+}
+
+function intervalMs(): number {
+  const raw = process.env.ANALYTICS_ALERT_INTERVAL_MS?.trim();
+  if (!raw) return DEFAULT_INTERVAL_MS;
+  const parsed = Number.parseInt(raw, 10);
+  return Number.isFinite(parsed) && parsed >= 10_000
+    ? parsed
+    : DEFAULT_INTERVAL_MS;
+}
+
+export default function registerAnalyticsAlertJobs(): void {
+  const isProd = process.env.NODE_ENV === "production";
+  const flag =
+    process.env.ANALYTICS_ALERT_JOBS ?? process.env.RUN_BACKGROUND_JOBS;
+  const enabled =
+    !platformSchedulerOwnsAlerts() &&
+    (flag === "1" || (isProd && flag !== "0"));
+
+  if (!enabled) {
+    if (!skippingLogged) {
+      console.log(
+        platformSchedulerOwnsAlerts()
+          ? "[analytics-alerts] Skipping in-process cron because the platform scheduler owns alert sweeps."
+          : "[analytics-alerts] Skipping background cron (set ANALYTICS_ALERT_JOBS=1 or RUN_BACKGROUND_JOBS=1 to enable in dev; on by default in production)",
+      );
+      skippingLogged = true;
+    }
+    return;
+  }
+
+  const ms = intervalMs();
+  setInterval(() => {
+    runAnalyticsAlertsOnce().catch((err) =>
+      console.error("[analytics-alerts] interval failed:", err),
+    );
+  }, ms);
+
+  console.log(`[analytics-alerts] Recurring alert sweep every ${ms / 1000}s.`);
+}

package/corpus/templates/analytics/server/plugins/db.ts

@@ -513,6 +513,106 @@ export default runMigrations(
         sqlite: `UPDATE session_replay_chunks SET started_at = CASE WHEN started_at IS NOT NULL AND substr(started_at, 1, 10) > date('now') THEN min(COALESCE(NULLIF(created_at, ''), datetime('now')), datetime('now')) ELSE started_at END, ended_at = CASE WHEN ended_at IS NOT NULL AND substr(ended_at, 1, 10) > date('now') THEN min(COALESCE(NULLIF(created_at, ''), datetime('now')), datetime('now')) ELSE ended_at END WHERE (started_at IS NOT NULL AND substr(started_at, 1, 10) > date('now')) OR (ended_at IS NOT NULL AND substr(ended_at, 1, 10) > date('now'))`,
       },
     },
+    {
+      version: 75,
+      sql: {
+        postgres: `CREATE TABLE IF NOT EXISTS analytics_alert_rules (
+      id TEXT PRIMARY KEY,
+      name TEXT NOT NULL,
+      description TEXT NOT NULL DEFAULT '',
+      event_name TEXT,
+      filters TEXT NOT NULL DEFAULT '[]',
+      threshold_mode TEXT NOT NULL DEFAULT 'event_count',
+      distinct_by TEXT,
+      threshold INTEGER NOT NULL DEFAULT 1,
+      window_minutes INTEGER NOT NULL DEFAULT 10,
+      cooldown_minutes INTEGER NOT NULL DEFAULT 30,
+      severity TEXT NOT NULL DEFAULT 'warning',
+      channels TEXT NOT NULL DEFAULT '["inbox"]',
+      email_recipients TEXT NOT NULL DEFAULT '[]',
+      enabled BOOLEAN NOT NULL DEFAULT true,
+      last_evaluated_at TEXT,
+      last_triggered_at TEXT,
+      last_status TEXT,
+      last_error TEXT,
+      created_at TEXT NOT NULL DEFAULT (now()::text),
+      updated_at TEXT NOT NULL DEFAULT (now()::text),
+      owner_email TEXT NOT NULL DEFAULT 'local@localhost',
+      org_id TEXT
+    )`,
+        sqlite: `CREATE TABLE IF NOT EXISTS analytics_alert_rules (
+      id TEXT PRIMARY KEY,
+      name TEXT NOT NULL,
+      description TEXT NOT NULL DEFAULT '',
+      event_name TEXT,
+      filters TEXT NOT NULL DEFAULT '[]',
+      threshold_mode TEXT NOT NULL DEFAULT 'event_count',
+      distinct_by TEXT,
+      threshold INTEGER NOT NULL DEFAULT 1,
+      window_minutes INTEGER NOT NULL DEFAULT 10,
+      cooldown_minutes INTEGER NOT NULL DEFAULT 30,
+      severity TEXT NOT NULL DEFAULT 'warning',
+      channels TEXT NOT NULL DEFAULT '["inbox"]',
+      email_recipients TEXT NOT NULL DEFAULT '[]',
+      enabled INTEGER NOT NULL DEFAULT 1,
+      last_evaluated_at TEXT,
+      last_triggered_at TEXT,
+      last_status TEXT,
+      last_error TEXT,
+      created_at TEXT NOT NULL DEFAULT (datetime('now')),
+      updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+      owner_email TEXT NOT NULL DEFAULT 'local@localhost',
+      org_id TEXT
+    )`,
+      },
+    },
+    {
+      version: 76,
+      sql: {
+        postgres: `CREATE TABLE IF NOT EXISTS analytics_alert_incidents (
+      id TEXT PRIMARY KEY,
+      rule_id TEXT NOT NULL,
+      triggered_at TEXT NOT NULL,
+      window_start TEXT NOT NULL,
+      window_end TEXT NOT NULL,
+      threshold INTEGER NOT NULL,
+      observed_value INTEGER NOT NULL,
+      event_count INTEGER NOT NULL,
+      severity TEXT NOT NULL,
+      channels TEXT NOT NULL DEFAULT '[]',
+      sample_events TEXT NOT NULL DEFAULT '[]',
+      notification_id TEXT,
+      created_at TEXT NOT NULL DEFAULT (now()::text),
+      owner_email TEXT NOT NULL DEFAULT 'local@localhost',
+      org_id TEXT
+    )`,
+        sqlite: `CREATE TABLE IF NOT EXISTS analytics_alert_incidents (
+      id TEXT PRIMARY KEY,
+      rule_id TEXT NOT NULL,
+      triggered_at TEXT NOT NULL,
+      window_start TEXT NOT NULL,
+      window_end TEXT NOT NULL,
+      threshold INTEGER NOT NULL,
+      observed_value INTEGER NOT NULL,
+      event_count INTEGER NOT NULL,
+      severity TEXT NOT NULL,
+      channels TEXT NOT NULL DEFAULT '[]',
+      sample_events TEXT NOT NULL DEFAULT '[]',
+      notification_id TEXT,
+      created_at TEXT NOT NULL DEFAULT (datetime('now')),
+      owner_email TEXT NOT NULL DEFAULT 'local@localhost',
+      org_id TEXT
+    )`,
+      },
+    },
+    {
+      version: 77,
+      sql: `CREATE INDEX IF NOT EXISTS analytics_alert_rules_scope_enabled_idx ON analytics_alert_rules (org_id, owner_email, enabled, updated_at)`,
+    },
+    {
+      version: 78,
+      sql: `CREATE INDEX IF NOT EXISTS analytics_alert_incidents_rule_triggered_idx ON analytics_alert_incidents (rule_id, triggered_at)`,
+    },
   ],
   { table: "analytics_migrations" },
 );

package/corpus/templates/analytics/server/routes/api/analytics-alerts/run.post.ts

@@ -0,0 +1,60 @@
+import { timingSafeEqual } from "node:crypto";
+
+import { createError, defineEventHandler, getHeader } from "h3";
+
+// guard:allow-action-twin — external cron endpoint authenticates scheduled callers before invoking the alert action logic.
+import { runAnalyticsAlertsOnce } from "../../../jobs/analytics-alerts";
+
+declare global {
+  var __AGENT_NATIVE_ANALYTICS_ALERT_SCHEDULED_RUNTIME__: boolean | undefined;
+}
+
+function productionLike(): boolean {
+  return (
+    process.env.NODE_ENV === "production" || process.env.NETLIFY === "true"
+  );
+}
+
+function scheduledFunctionRuntime(): boolean {
+  return globalThis.__AGENT_NATIVE_ANALYTICS_ALERT_SCHEDULED_RUNTIME__ === true;
+}
+
+function cronSecret(): string | null {
+  const secret = process.env.ANALYTICS_ALERTS_CRON_SECRET?.trim();
+  return secret ? secret : null;
+}
+
+function headerMatchesSecret(
+  header: string | undefined,
+  secret: string,
+): boolean {
+  const expected = `Bearer ${secret}`;
+  const value = header?.trim() ?? "";
+  if (value.length !== expected.length) return false;
+  return timingSafeEqual(Buffer.from(value), Buffer.from(expected));
+}
+
+export default defineEventHandler(async (event) => {
+  const secret = cronSecret();
+  const scheduledRuntime = scheduledFunctionRuntime();
+  if (!secret && productionLike() && !scheduledRuntime) {
+    throw createError({
+      statusCode: 503,
+      statusMessage: "ANALYTICS_ALERTS_CRON_SECRET is required",
+    });
+  }
+
+  if (
+    secret &&
+    !scheduledRuntime &&
+    !headerMatchesSecret(getHeader(event, "authorization"), secret)
+  ) {
+    throw createError({
+      statusCode: 401,
+      statusMessage: "Unauthorized",
+    });
+  }
+
+  const result = await runAnalyticsAlertsOnce();
+  return { ok: true, ...result };
+});

package/corpus/templates/assets/README.md

@@ -1,12 +1,34 @@
 # Assets
 
-Agent-native digital asset libraries for brand-consistent image and video generation.
+An open-source, agent-native digital asset manager (DAM) and brand-image/video
+generation workspace — a self-hostable alternative to tools like Brandfolder and
+Air, with generation built in.
 
-Use libraries and folders to collect uploaded images, videos, logos, product
-shots, diagrams, style briefs, generated candidates, and saved assets. The UI
-curates the DAM; the agent handles generation, search, and iteration through
-actions and A2A.
+**Live app: [assets.agent-native.com](https://assets.agent-native.com)**
 
-Every generated asset writes an audit run with user prompt, compiled prompt,
-model, source app, references, outputs, status, and refinement lineage. Org
-admins can review the log at `/audit` and export CSV for design-team QA.
+Organize uploaded and generated media into libraries and folders, then route
+image and video generation through the agent chat so every asset can be reviewed,
+refined, and kept on-brand. Every generated asset writes an audit run with the
+prompt, model, references, and lineage.
+
+## Features
+
+- Brand-consistent image and video generation through the agent.
+- Libraries, folders, and brand kits for organizing uploads and generated results.
+- Generation presets that carry a brand style brief, prompt template, and logo policy.
+- Pixel-perfect canonical logo compositing onto generated images.
+- Reusable across apps: pick or generate assets from other apps over A2A and MCP.
+- Full audit log of every generation run, exportable to CSV.
+
+## Develop locally
+
+Scaffold your own copy and run it:
+
+```bash
+npx @agent-native/core@latest create my-assets --standalone --template assets
+cd my-assets
+pnpm install
+pnpm dev
+```
+
+Full docs: [agent-native.com/docs/template-assets](https://agent-native.com/docs/template-assets).