@agent-native/core 0.92.12 → 0.93.0

package/corpus/core/src/server/auth.ts

@@ -1982,8 +1982,8 @@ function createAuthGuardFn(): (
 // validator (a bare `dev@local` has no TLD and is rejected as INVALID_EMAIL,
 // which silently broke the zero-setup auto-sign-in on every fresh dev DB).
 const AUTO_DEV_ACCOUNT_EMAIL = "dev@local.test";
-// No fixed password: maybeAutoCreateDevSession mints a random one per DB
-// and prints it to the console once (see there).
+// No fixed password: maybeAutoCreateDevSession mints a random one per DB and
+// never emits it to logs.
 
 // Pre-fix local dev DBs may already contain a `dev@local` user. Treat that
 // legacy address as the dev account too, so the "any real users?" check
@@ -2058,15 +2058,12 @@ async function createAutoDevAccountForSession(
         return null;
       }
 
-      // Print the throwaway credential exactly once so the developer can
-      // sign back in manually after logout (auto-flow won't refire once the
-      // dev row exists). Local console only — never Sentry.
+      // Confirm the convenience path without emitting the generated email or
+      // password. Terminal output is frequently captured and shared in bug
+      // reports, CI artifacts, and remote development sessions.
       console.log(
-        `\n[agent-native] Local dev auto-login ready.\n` +
-          `  email:    ${AUTO_DEV_ACCOUNT_EMAIL}\n` +
-          `  password: ${devPassword}\n` +
-          `  (random, this DB only — needed to sign back in after logout.\n` +
-          `   Set AGENT_NATIVE_DISABLE_AUTO_DEV_ACCOUNT=1 to disable.)\n`,
+        "[agent-native] Local dev auto-login ready. " +
+          "Set AGENT_NATIVE_DISABLE_AUTO_DEV_ACCOUNT=1 to disable.",
       );
 
       return { password: devPassword };
@@ -2110,10 +2107,9 @@ async function createAutoDevAccountForSession(
  *    reverse-proxied / misconfigured-non-prod dev server never auto-signs
  *    in a directly-remote visitor (mirrors the desktop SSO broker).
  *  - **Random per-DB password.** The account password is freshly
- *    generated on creation and printed to the server console exactly
- *    once — there is no source-code-known credential. After logout the
- *    auto-flow won't refire (dev row exists), so signing back in uses
- *    that printed password; lost it ⇒ drop the row or wipe the local DB.
+ *    generated on creation and never logged — there is no
+ *    source-code-known credential. After logout the auto-flow won't refire
+ *    (dev row exists); use normal signup or reset the local DB to start over.
  *  - **NODE_ENV.** Still gated on development/test.
  *
  * Set `AGENT_NATIVE_DISABLE_AUTO_DEV_ACCOUNT=1` to opt out entirely

package/corpus/core/src/server/builder-design-systems.ts

@@ -39,6 +39,8 @@ export interface BuildBuilderDesignSystemIndexFilesOptions {
   designMdFilename?: string;
   maxCodeFiles?: number;
   maxTotalCodeBytes?: number;
+  /** Default keeps legacy best-effort code indexing; upload/chat surfaces should fail loudly. */
+  overflowBehavior?: "skip" | "throw";
 }
 
 export interface BuilderDesignSystemProxyFieldsOptions {
@@ -194,6 +196,7 @@ export function buildBuilderDesignSystemIndexFiles({
   designMdFilename,
   maxCodeFiles = DEFAULT_MAX_CODE_FILES,
   maxTotalCodeBytes = DEFAULT_MAX_TOTAL_CODE_BYTES,
+  overflowBehavior = "skip",
 }: BuildBuilderDesignSystemIndexFilesOptions): BuilderDesignSystemIndexFile[] {
   const encoder = new TextEncoder();
   const files: BuilderDesignSystemIndexFile[] = [];
@@ -214,7 +217,14 @@ export function buildBuilderDesignSystemIndexFiles({
         ? new Uint8Array(Buffer.from(content, "base64"))
         : encoder.encode(content);
     if (data.byteLength === 0) return;
-    if (totalBytes + data.byteLength > maxTotalCodeBytes) return;
+    if (totalBytes + data.byteLength > maxTotalCodeBytes) {
+      if (overflowBehavior === "throw") {
+        throw new Error(
+          `Design-system file "${normalizedName}" exceeds the ${Math.round(maxTotalCodeBytes / 1024 / 1024)} MB inline upload budget. Use the dedicated file upload instead of sending large binary files through an action payload.`,
+        );
+      }
+      return;
+    }
     totalBytes += data.byteLength;
     files.push({
       name: normalizedName,
@@ -234,6 +244,11 @@ export function buildBuilderDesignSystemIndexFiles({
     );
   }
 
+  if (overflowBehavior === "throw" && (codeFiles?.length ?? 0) > maxCodeFiles) {
+    throw new Error(
+      `Too many design-system files (max ${maxCodeFiles}); no files were indexed.`,
+    );
+  }
   for (const file of (codeFiles ?? []).slice(0, maxCodeFiles)) {
     pushFile(file.filename, file.content, file.mimeType, file.encoding);
   }

package/corpus/core/src/server/edge.ts

@@ -22,12 +22,30 @@ export {
   slackAdapter,
   telegramAdapter,
   whatsappAdapter,
+  discordAdapter,
+  microsoftTeamsAdapter,
   emailAdapter,
+  assertPlatformCapability,
   type PlatformAdapter,
   type IncomingMessage,
   type OutgoingMessage,
+  type PlatformAdapterCapabilities,
+  type ImmediateWebhookResponse,
   type IntegrationStatus,
   type IntegrationsPluginOptions,
+  BUILT_IN_INTEGRATION_CATALOG,
+  INTEGRATION_CATEGORIES,
+  getIntegrationCatalogEntry,
+  listBuiltInChannelIntegrations,
+  listIntegrationCatalog,
+  type BuiltInChannelId,
+  type ChannelCapabilities,
+  type IntegrationAvailability,
+  type IntegrationCatalogEntry,
+  type IntegrationCategory,
+  type IntegrationCredentialRequirement,
+  type IntegrationIconKey,
+  type IntegrationSupportMaturity,
 } from "../integrations/index.js";
 export {
   createObservationalMemoryPlugin,

package/corpus/core/src/server/index.ts

@@ -3,6 +3,13 @@ export {
   type CreateServerOptions,
   type EnvKeyConfig,
 } from "./create-server.js";
+export {
+  AGENT_BACKGROUND_PROCESSOR_FIELD,
+  AGENT_BACKGROUND_PROCESSOR_ROUTE,
+  AGENT_BACKGROUND_PROCESSOR_ROUTE_FIELD,
+  dispatchPathTargetsNetlifyBackgroundFunction,
+  resolveDurableBackgroundDispatchPath,
+} from "../agent/durable-background.js";
 
 export {
   readBody,
@@ -339,12 +346,31 @@ export {
   slackAdapter,
   telegramAdapter,
   whatsappAdapter,
+  discordAdapter,
+  microsoftTeamsAdapter,
   emailAdapter,
+  assertPlatformCapability,
   type PlatformAdapter,
   type IncomingMessage,
   type OutgoingMessage,
+  type PlatformAdapterCapabilities,
+  type ImmediateWebhookResponse,
   type IntegrationStatus,
   type IntegrationsPluginOptions,
+  type IntegrationExecutionContext,
+  BUILT_IN_INTEGRATION_CATALOG,
+  INTEGRATION_CATEGORIES,
+  getIntegrationCatalogEntry,
+  listBuiltInChannelIntegrations,
+  listIntegrationCatalog,
+  type BuiltInChannelId,
+  type ChannelCapabilities,
+  type IntegrationAvailability,
+  type IntegrationCatalogEntry,
+  type IntegrationCategory,
+  type IntegrationCredentialRequirement,
+  type IntegrationIconKey,
+  type IntegrationSupportMaturity,
 } from "../integrations/index.js";
 
 export {

package/corpus/core/src/server/request-context.ts

@@ -164,6 +164,24 @@ export interface RequestContext {
     attempts?: number;
     incoming: import("../integrations/types.js").IncomingMessage;
     placeholderRef?: string;
+    installationId?: string;
+    scopeId?: string;
+    principalType?: "user" | "service";
+    lineage?: {
+      runId?: string;
+      parentTaskId?: string;
+      source?: {
+        kind: string;
+        platform?: string;
+        id: string;
+        url?: string;
+      };
+      network?: {
+        protocol: "a2a" | "mcp" | "provider-api";
+        id: string;
+        peer?: string;
+      };
+    };
   };
   /**
    * Mutable per-request agent-run state. Populated by the agent-chat plugin

package/corpus/core/src/server/social-og-image.ts

@@ -37,6 +37,7 @@ const BRAND_BLUE = "#00B5FF";
 const BRAND_MINT = "#48FFE4";
 const BG = "#000000";
 const FG = "#f5f5f5";
+const GRID_SIZE = 48;
 const DEFAULT_FONT_FAMILY = `${OG_FONT_FAMILY}, Arial, Helvetica, system-ui, sans-serif`;
 const ARABIC_FONT_FAMILY = `${OG_ARABIC_FONT_FAMILY}, ${OG_FONT_FAMILY}, Arial, Helvetica, system-ui, sans-serif`;
 const DEFAULT_ACCENT_TEXT = "100% free and open source";
@@ -327,8 +328,8 @@ export function renderAgentNativeOgImageSvg(
       <stop stop-color="${BRAND_BLUE}"/>
       <stop offset="1" stop-color="${BRAND_MINT}"/>
     </linearGradient>
-    <pattern id="grid" width="48" height="48" patternUnits="userSpaceOnUse">
-      <path d="M 48 0 L 0 0 0 48" fill="none" stroke="#ffffff" stroke-opacity="0.07" stroke-width="1"/>
+    <pattern id="grid" width="${GRID_SIZE}" height="${GRID_SIZE}" patternUnits="userSpaceOnUse">
+      <path d="M 0 0.5 H ${GRID_SIZE} M 0.5 0 V ${GRID_SIZE}" fill="none" stroke="#ffffff" stroke-opacity="0.07" stroke-width="1"/>
     </pattern>
   </defs>
   <rect width="${WIDTH}" height="${HEIGHT}" fill="${BG}"/>

package/corpus/core/src/styles/agent-native.css

@@ -67,12 +67,7 @@
   );
   --agent-native-raised-surface: hsl(var(--background));
   --agent-native-card-surface: hsl(var(--card));
-  --agent-native-raised-border: hsl(var(--border));
   --agent-native-raised-radius: 8px;
-  --agent-native-raised-outline: inset 0 0 0 1px
-    var(--agent-native-raised-border);
-  --agent-native-raised-shadow-left: -1px 0 3px rgb(0 0 0 / 0.018);
-  --agent-native-raised-shadow-right: 1px 0 3px rgb(0 0 0 / 0.018);
   height: var(--agent-native-viewport-height);
   min-height: 0;
   background: var(--agent-native-lower-surface);
@@ -86,11 +81,6 @@
       hsl(var(--sidebar-background, var(--background))) 98%,
       black
     );
-    --agent-native-raised-border: color-mix(
-      in srgb,
-      hsl(var(--border)) 84%,
-      transparent
-    );
   }
 
   .dark .agent-sidebar-shell,
@@ -222,19 +212,19 @@
   .agent-layout-shell > .agent-sidebar-shell > .agent-sidebar-main-surface {
     border-start-start-radius: var(--agent-native-raised-radius);
     border-end-start-radius: var(--agent-native-raised-radius);
-    box-shadow: var(--agent-native-raised-shadow-left);
+    box-shadow: none;
   }
 
   .agent-sidebar-main-surface[data-agent-sidebar-main-state="open"][data-agent-sidebar-main-position="right"] {
     border-start-end-radius: var(--agent-native-raised-radius);
     border-end-end-radius: var(--agent-native-raised-radius);
-    box-shadow: var(--agent-native-raised-shadow-right);
+    box-shadow: none;
   }
 
   .agent-sidebar-main-surface[data-agent-sidebar-main-state="open"][data-agent-sidebar-main-position="left"] {
     border-start-start-radius: var(--agent-native-raised-radius);
     border-end-start-radius: var(--agent-native-raised-radius);
-    box-shadow: var(--agent-native-raised-shadow-left);
+    box-shadow: none;
   }
 }
 
@@ -764,6 +754,65 @@
   line-height: 1.75rem;
 }
 
+.agent-composer-root--missing-key {
+  overflow: visible;
+}
+
+.agent-composer-missing-key-trigger {
+  display: flex;
+  min-height: 4.5rem;
+  width: 100%;
+  flex: 1;
+  align-items: center;
+  justify-content: flex-start;
+  border: 0;
+  border-radius: inherit;
+  background: transparent;
+  padding: 0.875rem;
+  text-align: start;
+  color: hsl(var(--foreground));
+  outline: none;
+}
+
+.agent-composer-missing-key-trigger:hover {
+  background: hsl(var(--accent) / 0.45);
+}
+
+.agent-composer-missing-key-trigger:focus-visible {
+  box-shadow: inset 0 0 0 2px hsl(var(--ring));
+}
+
+.agent-composer-missing-key-copy {
+  display: flex;
+  min-width: 0;
+  flex-direction: column;
+  gap: 0.25rem;
+}
+
+.agent-composer-missing-key-title {
+  font-size: 0.8125rem;
+  font-weight: 500;
+  line-height: 1.25rem;
+}
+
+.agent-composer-missing-key-description {
+  font-size: 0.6875rem;
+  line-height: 1rem;
+  color: hsl(var(--muted-foreground));
+}
+
+.agent-composer-root--hero .agent-composer-missing-key-trigger {
+  min-height: 7.5rem;
+  justify-content: center;
+  padding: 1.25rem;
+  text-align: center;
+}
+
+.agent-composer-root--hero .agent-composer-missing-key-title {
+  font-size: 0.9375rem;
+  line-height: 1.375rem;
+}
+
 .agent-composer-stack {
   position: relative;
   flex-shrink: 0;
@@ -777,10 +826,6 @@
   gap: 0.5rem;
 }
 
-.agent-composer-setup-card {
-  width: 100%;
-}
-
 /* Plan-mode callout pill: lives inside .agent-composer-stack directly above
    the composer. Matching .agent-composer-area's own width keeps the pill
    visually attached to (and right-aligned with) the composer instead of the
@@ -798,33 +843,6 @@
   overflow: visible;
 }
 
-[data-agent-empty-state="centered"]
-  > .agent-composer-stack:not([data-agent-composer-adjacent-ui="true"]):not(
-    :has(.agent-selection-attached-pill)
-  )
-  > .agent-composer-setup-card {
-  position: absolute;
-  left: 0;
-  right: 0;
-  z-index: 3;
-}
-
-[data-agent-empty-state="centered"]
-  > .agent-composer-stack:not([data-agent-composer-adjacent-ui="true"]):not(
-    :has(.agent-selection-attached-pill)
-  )
-  > .agent-composer-setup-card[data-agent-composer-setup-position="above"] {
-  bottom: calc(100% + 0.5rem);
-}
-
-[data-agent-empty-state="centered"]
-  > .agent-composer-stack:not([data-agent-composer-adjacent-ui="true"]):not(
-    :has(.agent-selection-attached-pill)
-  )
-  > .agent-composer-setup-card[data-agent-composer-setup-position="below"] {
-  top: calc(100% + 0.5rem);
-}
-
 [data-agent-empty-state="compact-setup"] .agent-empty-state {
   height: auto;
   min-height: 5rem;

package/corpus/core/src/templates/default/.agents/skills/capture-learnings/SKILL.md

@@ -11,11 +11,14 @@ metadata:
 
 # Capture Learnings
 
-This is background knowledge, not a slash command. **Your memory index is loaded at the start of every conversation.** Use `save-memory` proactively when you learn something worth remembering.
+This is background knowledge, not a slash command. **Organization learnings and your personal memory index are loaded at the start of every conversation, including Slack/integration turns.** Capture durable context proactively when you learn something worth remembering.
 
 ## How to Read & Write Memories
 
-Memories are stored as **resources** in the SQL database (personal scope), not as files on disk.
+Memories are stored as **resources** in the SQL database, not as files on disk.
+
+- **Team/organization knowledge:** shared `LEARNINGS.md`. Read it first, merge the new fact, then write the full updated file with the `resources` tool using `scope: "shared"`. Shared scope resolves to the active organization; it must never leak to another organization in the same deployment.
+- **Personal knowledge:** `memory/MEMORY.md` plus `memory/<name>.md`, written with `save-memory`.
 
 - **Save a memory:** `save-memory --name <name> --type <type> --description "..." --content "..."`
 - **Read a memory:** `resource-read --path memory/<name>.md`
@@ -33,6 +36,14 @@ Memories are stored as **resources** in the SQL database (personal scope), not a
 
 ## When to Capture
 
+### Team and organization knowledge (`LEARNINGS.md`, shared scope)
+- Canonical destinations and workflows (for example, which Content database receives a type of Slack request)
+- Required intake fields, ownership, prioritization conventions, metric definitions, and approved terminology
+- Durable external references that the whole team needs, including the canonical page/database URL
+- Corrections or decisions that should affect every organization member's future Slack and app conversations
+
+Store the fact and a concise provenance link when available. Do not paste full private conversations, customer data, credentials, or secrets into learnings. Put stable always-on policy in shared `AGENTS.md`; put learned facts and evolving conventions in shared `LEARNINGS.md`.
+
 ### User Preferences & Memory (`user`)
 - **Tone and style** — "I prefer casual tone", "don't use emojis", "keep replies short"
 - **Personal context** — contacts, relationships, habits ("my wife's email is...", "I'm in PST timezone")
@@ -58,19 +69,21 @@ Memories are stored as **resources** in the SQL database (personal scope), not a
 - Things obvious from reading the code
 - Standard language/framework behavior
 - Temporary debugging notes
-- Anything already in AGENTS.md or skills
+- Anything already in AGENTS.md, shared LEARNINGS.md, or skills
 - Ephemeral task details (use tasks/plans instead)
 
 ## Key Rules
 
-1. **Save proactively — don't ask permission.** When you learn something, save it immediately.
-2. **One memory per topic** — e.g. `coding-style`, `project-alpha`, not one giant dump
-3. **Read before updating** — if a memory exists, read it first and merge, don't overwrite
-4. **Keep descriptions concise** — the index is loaded every conversation
-5. **Memories are SQL-backed** — safe for personal info, persist across sessions, not in git
+1. **Save proactively — don't ask permission.** When you learn something durable, save it immediately at the correct scope.
+2. **Choose scope by audience.** Organization workflow or reference → shared `LEARNINGS.md`; one person's preference/context → personal memory.
+3. **One memory per topic** — e.g. `coding-style`, `project-alpha`, not one giant dump
+4. **Read before updating** — if a memory exists, read it first and merge, don't overwrite
+5. **Keep descriptions concise** — the index is loaded every conversation
+6. **Memories are SQL-backed** — they persist across sessions and are not in git; still minimize sensitive content
 
 ## Graduation
 
 When a memory is referenced repeatedly, it may belong in AGENTS.md or a skill:
-- Saving a memory is lightweight (auto-apply, personal scope)
+- Saving a personal memory is lightweight (auto-apply, personal scope)
+- Shared LEARNINGS.md is the lightweight organization knowledge layer
 - Updating AGENTS.md or a skill is heavier (affects all users/agents)

package/corpus/core/src/templates/default/AGENTS.md

@@ -76,9 +76,13 @@ only the hosted URL/reference in SQL.
 1. **`AGENTS.md`** -- inherited workspace defaults, app/team instructions, and user-specific context.
 2. **`LEARNINGS.md`** -- user preferences, corrections, and patterns. Read personal and shared scopes.
 
-**Update `LEARNINGS.md` when you learn something important.** Built-in app
-chat agents use the `resources` tool with the `action` argument. External CLI
-agents can use the equivalent `pnpm action resource-*` commands.
+**Update the shared `LEARNINGS.md` when you learn something important for the
+team.** Canonical destinations, request fields, metric definitions, routing
+conventions, and corrections learned in Slack belong there with concise source
+links. Shared scope resolves to the active organization. Personal preferences
+and user-specific context go through `save-memory` into `memory/MEMORY.md`.
+Built-in app chat agents use the `resources` tool with the `action` argument.
+External CLI agents can use the equivalent `pnpm action resource-*` commands.
 
 | Built-in agent tool call                                                | CLI equivalent                                                                         | Purpose                 |
 | ----------------------------------------------------------------------- | -------------------------------------------------------------------------------------- | ----------------------- |

package/corpus/core/src/templates/workspace-core/.agents/skills/authentication/SKILL.md

@@ -19,7 +19,7 @@ Auth is powered by **Better Auth** with account-first design. Every new user cre
 
 | Mode                      | Behavior                                                                                                                                 |
 | ------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------- |
-| **Development (default)** | Real Better Auth — same flow as production. There is **no auth bypass**. On first run the framework auto-creates a throwaway dev account and signs you in (credentials printed once to the console; disable with `AGENT_NATIVE_DISABLE_AUTO_DEV_ACCOUNT=1`), so you are not stuck at a login wall. `getSession()` returns the signed-in user or `null` — it never falls back to a sentinel identity. |
+| **Development (default)** | Real Better Auth — same flow as production. There is **no auth bypass**. On first run the framework auto-creates a throwaway dev account and signs you in without printing its credentials (disable with `AGENT_NATIVE_DISABLE_AUTO_DEV_ACCOUNT=1`), so you are not stuck at a login wall. `getSession()` returns the signed-in user or `null` — it never falls back to a sentinel identity. |
 | **Production (default)**  | Better Auth with email/password + social providers (Google, GitHub). Organizations built in.                                             |
 | **`AUTH_MODE=local`**     | **Not** a browser auth bypass, and never returns `local@localhost`. It only affects CLI/agent identity: it lets `pnpm action` / the local agent loop auto-bind to the single real signed-in dev user from the `sessions` table (see `scripts/dev-session.ts`). Browser login is unchanged. |
 | **`AUTH_SKIP_EMAIL_VERIFICATION=1`** | QA/preview escape hatch for real email/password accounts. Signup skips email verification and does not send the signup verification email. Local dev/test skips verification by default; set `AUTH_SKIP_EMAIL_VERIFICATION=0` only when testing verification itself. Use `+qa` emails for test accounts. |

package/corpus/core/src/templates/workspace-core/.agents/skills/capture-learnings/SKILL.md

@@ -11,11 +11,14 @@ metadata:
 
 # Capture Learnings
 
-This is background knowledge, not a slash command. **Your memory index is loaded at the start of every conversation.** Use `save-memory` proactively when you learn something worth remembering.
+This is background knowledge, not a slash command. **Organization learnings and your personal memory index are loaded at the start of every conversation, including Slack/integration turns.** Capture durable context proactively when you learn something worth remembering.
 
 ## How to Read & Write Memories
 
-Memories are stored as **resources** in the SQL database (personal scope), not as files on disk.
+Memories are stored as **resources** in the SQL database, not as files on disk.
+
+- **Team/organization knowledge:** shared `LEARNINGS.md`. Read it first, merge the new fact, then write the full updated file with the `resources` tool using `scope: "shared"`. Shared scope resolves to the active organization; it must never leak to another organization in the same deployment.
+- **Personal knowledge:** `memory/MEMORY.md` plus `memory/<name>.md`, written with `save-memory`.
 
 - **Save a memory:** `save-memory --name <name> --type <type> --description "..." --content "..."`
 - **Read a memory:** `resource-read --path memory/<name>.md`
@@ -33,6 +36,14 @@ Memories are stored as **resources** in the SQL database (personal scope), not a
 
 ## When to Capture
 
+### Team and organization knowledge (`LEARNINGS.md`, shared scope)
+- Canonical destinations and workflows (for example, which Content database receives a type of Slack request)
+- Required intake fields, ownership, prioritization conventions, metric definitions, and approved terminology
+- Durable external references that the whole team needs, including the canonical page/database URL
+- Corrections or decisions that should affect every organization member's future Slack and app conversations
+
+Store the fact and a concise provenance link when available. Do not paste full private conversations, customer data, credentials, or secrets into learnings. Put stable always-on policy in shared `AGENTS.md`; put learned facts and evolving conventions in shared `LEARNINGS.md`.
+
 ### User Preferences & Memory (`user`)
 - **Tone and style** — "I prefer casual tone", "don't use emojis", "keep replies short"
 - **Personal context** — contacts, relationships, habits ("my wife's email is...", "I'm in PST timezone")
@@ -58,19 +69,21 @@ Memories are stored as **resources** in the SQL database (personal scope), not a
 - Things obvious from reading the code
 - Standard language/framework behavior
 - Temporary debugging notes
-- Anything already in AGENTS.md or skills
+- Anything already in AGENTS.md, shared LEARNINGS.md, or skills
 - Ephemeral task details (use tasks/plans instead)
 
 ## Key Rules
 
-1. **Save proactively — don't ask permission.** When you learn something, save it immediately.
-2. **One memory per topic** — e.g. `coding-style`, `project-alpha`, not one giant dump
-3. **Read before updating** — if a memory exists, read it first and merge, don't overwrite
-4. **Keep descriptions concise** — the index is loaded every conversation
-5. **Memories are SQL-backed** — safe for personal info, persist across sessions, not in git
+1. **Save proactively — don't ask permission.** When you learn something durable, save it immediately at the correct scope.
+2. **Choose scope by audience.** Organization workflow or reference → shared `LEARNINGS.md`; one person's preference/context → personal memory.
+3. **One memory per topic** — e.g. `coding-style`, `project-alpha`, not one giant dump
+4. **Read before updating** — if a memory exists, read it first and merge, don't overwrite
+5. **Keep descriptions concise** — the index is loaded every conversation
+6. **Memories are SQL-backed** — they persist across sessions and are not in git; still minimize sensitive content
 
 ## Graduation
 
 When a memory is referenced repeatedly, it may belong in AGENTS.md or a skill:
-- Saving a memory is lightweight (auto-apply, personal scope)
+- Saving a personal memory is lightweight (auto-apply, personal scope)
+- Shared LEARNINGS.md is the lightweight organization knowledge layer
 - Updating AGENTS.md or a skill is heavier (affects all users/agents)

package/corpus/core/src/templates/workspace-core/.agents/skills/extension-points/SKILL.md

@@ -195,9 +195,12 @@ the `slot-installs` query and the host re-renders without the iframe.
 - **Not a slot manifest.** Slot targets live in the `tool_slots` table
   (Drizzle export `extensionSlots`), not in the extension's HTML content.
   The agent can re-target an extension without rewriting it.
-- **Not for arbitrary code modification.** If a user wants to change how
-  the app itself behaves (not add a sandboxed widget), use the
-  `self-modifying-code` skill instead.
+- **Not for arbitrary code modification.** If the exact request needs UI inside
+  a native component or at a location with no slot, do not stop at "slots
+  cannot do that" or silently move it elsewhere. Treat it as full app
+  customization: use `connect-builder` for the Builder.io Cloud Agent/local
+  editing handoff in hosted chat, or follow `self-modifying-code` in a local
+  code-editing surface.
 
 ## Cross-references
 

package/corpus/core/src/templates/workspace-core/.agents/skills/extensions/SKILL.md

@@ -51,6 +51,31 @@ and Alpine.js runtime.
 - Action files in `actions/`
 - Routes
 
+## When the Request Needs Code Instead
+
+Route by the user's exact outcome, not by whether they called it an
+"extension." Extensions render only on their own page or inside an existing
+named `ExtensionSlot`; they cannot inject UI into arbitrary native components,
+replace built-in views, or appear at a location where the host app has no slot.
+
+If the requested placement or behavior requires changing native components,
+host layout/styles/routes/business logic, or adding a new slot:
+
+1. Briefly explain the extension boundary.
+2. Do **not** stop at "an extension cannot do that," and do not silently move the
+   UI to a less useful slot.
+3. Continue through the normal source-code customization flow:
+   - In hosted/app-rendered chat, call `connect-builder`. When its
+     `builderEnabled` result is true, offer the Builder.io Cloud Agent handoff;
+     when false, say the change can be made with local code editing, Agent
+     Native Desktop, or Builder.io cloud editing.
+   - In a local development or outer code-editing surface, follow the
+     `self-modifying-code` skill and edit the app source directly.
+
+Full source-code customization is a core Agent Native capability. Extensions
+are the fast, sandboxed, no-deploy layer—not the limit of what the app can
+become.
+
 **When a user asks to "make an extension", "create an extension", or "build
 a ... extension" (or the older phrasings "make a tool" / "create a tool"):**
 

package/corpus/core/src/templates/workspace-core/.agents/skills/integration-webhooks/SKILL.md

@@ -298,6 +298,21 @@ queue + retry job for at-least-once delivery.
 6. **Reply not delivered?** The processor likely succeeded but
    `adapter.sendResponse` failed — check the adapter's outbound logs.
 
+## Automation connectors
+
+Workflow systems such as n8n and Zapier are not messaging channels. Do not add
+them as `PlatformAdapter`s or route them through `provider-api`.
+
+For n8n-style workflow invocation and callbacks, use
+`@agent-native/core/automation` with static workflow IDs and allow-listed
+origins. Agents provide structured input, never a target URL or credential.
+Callbacks must verify a configured secret/signature, claim a durable event ID,
+enqueue work through the established queue, and acknowledge quickly.
+
+Zapier is blueprint-only unless the app implements Zapier's explicit REST Hook
+subscribe/unsubscribe contract or configures a separate Zapier MCP connection.
+Do not imply a generic Zapier workflow-execution API exists.
+
 ## Related Skills
 
 - `server-plugins` — How `/_agent-native/` routes get mounted

package/corpus/core/src/templates/workspace-core/AGENTS.md

@@ -71,8 +71,9 @@ agent should know.
 
 ## Adding Apps
 
-When a user asks from Dispatch chat or by tagging `@agent-native` in Slack to
-create, build, make, scaffold, or generate an "agent", classify the ask first.
+When a user asks from Dispatch chat or through `@agent-native` in Slack or
+Telegram to create, build, make, scaffold, or generate an "agent", classify
+the ask first.
 Simple Dispatch-native behavior such as a reminder, digest, monitor, routing
 rule, saved instruction, or recurring workflow can stay in Dispatch as a
 recurring job/resource/destination. Robust unique products or teammates that