@agent-native/core 0.92.12 → 0.94.0

package/corpus/core/src/shared/reasoning-effort.ts

@@ -11,6 +11,13 @@ export const REASONING_EFFORTS = [
 
 export type ReasoningEffort = (typeof REASONING_EFFORTS)[number];
 
+/**
+ * Shared chat always chooses an explicit reasoning tier. Keep `auto` in the
+ * accepted type only so older persisted selections and external callers can
+ * migrate cleanly; new UI and engine defaults resolve it to Medium.
+ */
+export const DEFAULT_REASONING_EFFORT: ReasoningEffort = "medium";
+
 export const REASONING_EFFORT_LABELS: Record<ReasoningEffort, string> = {
   auto: "Auto",
   none: "None",
@@ -22,12 +29,7 @@ export const REASONING_EFFORT_LABELS: Record<ReasoningEffort, string> = {
   max: "Max",
 };
 
-const VISIBLE_STANDARD_EFFORTS: ReasoningEffort[] = [
-  "auto",
-  "low",
-  "medium",
-  "high",
-];
+const VISIBLE_STANDARD_EFFORTS: ReasoningEffort[] = ["low", "medium", "high"];
 
 const VISIBLE_GPT_EFFORTS: ReasoningEffort[] = [
   ...VISIBLE_STANDARD_EFFORTS,
@@ -73,10 +75,9 @@ export function normalizeReasoningEffortForModel(
   model: string | undefined,
   effort: ReasoningEffort | undefined,
 ): ReasoningEffort | undefined {
-  if (!model || !effort || effort === "auto") {
-    return undefined;
-  }
-  let normalized = effort;
+  if (!model) return undefined;
+  let normalized =
+    !effort || effort === "auto" ? DEFAULT_REASONING_EFFORT : effort;
   if (
     normalized === "xhigh" &&
     isClaudeReasoningModel(model) &&
@@ -94,13 +95,47 @@ export function normalizeReasoningEffortForModel(
   return normalized;
 }
 
+/**
+ * Normalize a chat request before it reaches an engine. Explicit off/minimal
+ * sentinels must survive this layer so the engine can distinguish them from a
+ * missing selection, which now means the Medium default.
+ */
+export function normalizeReasoningEffortForRequest(
+  model: string | undefined,
+  effort: ReasoningEffort | undefined,
+): ReasoningEffort | undefined {
+  if (effort === "none" || effort === "minimal") return effort;
+  return normalizeReasoningEffortForModel(model, effort);
+}
+
 export function reasoningEffortLabel(effort: ReasoningEffort | undefined) {
-  return REASONING_EFFORT_LABELS[effort ?? "auto"];
+  return REASONING_EFFORT_LABELS[
+    !effort || effort === "auto" ? DEFAULT_REASONING_EFFORT : effort
+  ];
+}
+
+/**
+ * Resolve a user-facing selection for a model. Legacy `auto`, missing values,
+ * and tiers unsupported by the newly selected model all become Medium.
+ * Non-reasoning models still retain Medium in persisted chat state so moving
+ * back to a reasoning model has a predictable default; their engines omit the
+ * effort through `normalizeReasoningEffortForModel`.
+ */
+export function resolveReasoningEffortSelection(
+  model: string | undefined,
+  effort: ReasoningEffort | undefined,
+): ReasoningEffort {
+  const requested =
+    !effort || effort === "auto" ? DEFAULT_REASONING_EFFORT : effort;
+  const options = getReasoningEffortOptionsForModel(model);
+  return options.length === 0 || options.includes(requested)
+    ? requested
+    : DEFAULT_REASONING_EFFORT;
 }
 
 /**
- * One tier down from each effort, stopping at "minimal" — "none"/"auto"
- * (not really "tiers") and "minimal" itself are left unchanged. Used by the
+ * One tier down from each effort, stopping at "minimal" — legacy `auto`,
+ * "none", and "minimal" itself are left unchanged. Used by the
  * empty-final-response retry so a retried turn asks for meaningfully less
  * reasoning instead of repeating the exact request that came back empty.
  */
@@ -122,24 +157,31 @@ export function stepDownReasoningEffort(
 }
 
 function isGPTReasoningModel(model: string) {
-  return /^gpt-5/.test(model) || /^o\d/.test(model);
+  const id = model.toLowerCase().replace(/^openai\//, "");
+  return /^gpt-5/.test(id) || /^o\d/.test(id);
 }
 
 function isClaudeReasoningModel(model: string) {
-  return /^claude-/.test(model);
+  const id = model.toLowerCase().replace(/^anthropic\//, "");
+  if (id.includes("fable-5") || id.includes("mythos-5")) return true;
+  if (id.includes("sonnet-5") || id.includes("sonnet-4-6")) return true;
+  if (id.includes("haiku-4-5")) return true;
+  const opusMatch = id.match(/opus-4[-.](\d+)/);
+  return opusMatch ? parseInt(opusMatch[1], 10) >= 6 : false;
 }
 
 function supportsClaudeXHigh(model: string) {
+  const id = model.toLowerCase().replace(/^anthropic\//, "");
   // Models that support the xhigh effort tier (built-in extended thinking via
   // output_config.effort). Keep this version-aware so any future Claude model
   // with a higher patch/minor number is automatically included rather than
   // silently falling back to the lower "high" tier.
   // claude-fable-5 is a Mythos-class model and also supports xhigh.
-  if (model.includes("fable-5")) return true;
+  if (id.includes("fable-5")) return true;
   // Sonnet 5 supports the expanded effort ladder through Builder/Anthropic.
-  if (model.includes("sonnet-5")) return true;
+  if (id.includes("sonnet-5")) return true;
   // opus-4-7 introduced xhigh; all opus-4.x successors (4-8, 4-9…) should too.
-  const opusMatch = model.match(/opus-4-(\d+)/);
+  const opusMatch = id.match(/opus-4[-.](\d+)/);
   if (opusMatch) {
     return parseInt(opusMatch[1], 10) >= 7;
   }
@@ -147,5 +189,5 @@ function supportsClaudeXHigh(model: string) {
 }
 
 function isGeminiReasoningModel(model: string) {
-  return /^gemini-/.test(model);
+  return /^gemini-/.test(model.toLowerCase().replace(/^google\//, ""));
 }

package/corpus/core/src/styles/agent-conversation.css

@@ -476,6 +476,23 @@
   }
 }
 
+/* ─── ReasoningCell streaming tail clamp ────────────────────────────────────── */
+/* While a reasoning cell is actively streaming and open, clamp the body to
+   roughly the last ~6 lines instead of letting it grow and push the rest of
+   the transcript around (the Claude Code "tail view" behavior). The reversed
+   column anchors the box to its bottom edge, so overflow is clipped off the
+   top while the newest lines stay pinned in view — pure CSS, no scroll/rAF
+   tracking needed. A soft fade masks the clipped edge in both themes since
+   it only touches alpha, not color. */
+.reasoning-cell-tail {
+  display: flex;
+  flex-direction: column-reverse;
+  overflow: hidden;
+  max-height: 8rem;
+  mask-image: linear-gradient(to bottom, transparent, black 1.5rem);
+  -webkit-mask-image: linear-gradient(to bottom, transparent, black 1.5rem);
+}
+
 /* ─── Agent-Markdown (AssistantChat react-markdown render surface) ─────────── */
 /* These classes are applied by the SmoothMarkdownText/MarkdownText components  */
 /* in the AssistantChat/AssistantChatInner tree. The shiki dual-theme rules      */

package/corpus/core/src/styles/agent-native.css

@@ -67,12 +67,7 @@
   );
   --agent-native-raised-surface: hsl(var(--background));
   --agent-native-card-surface: hsl(var(--card));
-  --agent-native-raised-border: hsl(var(--border));
   --agent-native-raised-radius: 8px;
-  --agent-native-raised-outline: inset 0 0 0 1px
-    var(--agent-native-raised-border);
-  --agent-native-raised-shadow-left: -1px 0 3px rgb(0 0 0 / 0.018);
-  --agent-native-raised-shadow-right: 1px 0 3px rgb(0 0 0 / 0.018);
   height: var(--agent-native-viewport-height);
   min-height: 0;
   background: var(--agent-native-lower-surface);
@@ -86,11 +81,6 @@
       hsl(var(--sidebar-background, var(--background))) 98%,
       black
     );
-    --agent-native-raised-border: color-mix(
-      in srgb,
-      hsl(var(--border)) 84%,
-      transparent
-    );
   }
 
   .dark .agent-sidebar-shell,
@@ -222,19 +212,19 @@
   .agent-layout-shell > .agent-sidebar-shell > .agent-sidebar-main-surface {
     border-start-start-radius: var(--agent-native-raised-radius);
     border-end-start-radius: var(--agent-native-raised-radius);
-    box-shadow: var(--agent-native-raised-shadow-left);
+    box-shadow: none;
   }
 
   .agent-sidebar-main-surface[data-agent-sidebar-main-state="open"][data-agent-sidebar-main-position="right"] {
     border-start-end-radius: var(--agent-native-raised-radius);
     border-end-end-radius: var(--agent-native-raised-radius);
-    box-shadow: var(--agent-native-raised-shadow-right);
+    box-shadow: none;
   }
 
   .agent-sidebar-main-surface[data-agent-sidebar-main-state="open"][data-agent-sidebar-main-position="left"] {
     border-start-start-radius: var(--agent-native-raised-radius);
     border-end-start-radius: var(--agent-native-raised-radius);
-    box-shadow: var(--agent-native-raised-shadow-left);
+    box-shadow: none;
   }
 }
 
@@ -764,6 +754,65 @@
   line-height: 1.75rem;
 }
 
+.agent-composer-root--missing-key {
+  overflow: visible;
+}
+
+.agent-composer-missing-key-trigger {
+  display: flex;
+  min-height: 4.5rem;
+  width: 100%;
+  flex: 1;
+  align-items: center;
+  justify-content: flex-start;
+  border: 0;
+  border-radius: inherit;
+  background: transparent;
+  padding: 0.875rem;
+  text-align: start;
+  color: hsl(var(--foreground));
+  outline: none;
+}
+
+.agent-composer-missing-key-trigger:hover {
+  background: hsl(var(--accent) / 0.45);
+}
+
+.agent-composer-missing-key-trigger:focus-visible {
+  box-shadow: inset 0 0 0 2px hsl(var(--ring));
+}
+
+.agent-composer-missing-key-copy {
+  display: flex;
+  min-width: 0;
+  flex-direction: column;
+  gap: 0.25rem;
+}
+
+.agent-composer-missing-key-title {
+  font-size: 0.8125rem;
+  font-weight: 500;
+  line-height: 1.25rem;
+}
+
+.agent-composer-missing-key-description {
+  font-size: 0.6875rem;
+  line-height: 1rem;
+  color: hsl(var(--muted-foreground));
+}
+
+.agent-composer-root--hero .agent-composer-missing-key-trigger {
+  min-height: 7.5rem;
+  justify-content: center;
+  padding: 1.25rem;
+  text-align: center;
+}
+
+.agent-composer-root--hero .agent-composer-missing-key-title {
+  font-size: 0.9375rem;
+  line-height: 1.375rem;
+}
+
 .agent-composer-stack {
   position: relative;
   flex-shrink: 0;
@@ -777,10 +826,6 @@
   gap: 0.5rem;
 }
 
-.agent-composer-setup-card {
-  width: 100%;
-}
-
 /* Plan-mode callout pill: lives inside .agent-composer-stack directly above
    the composer. Matching .agent-composer-area's own width keeps the pill
    visually attached to (and right-aligned with) the composer instead of the
@@ -798,33 +843,6 @@
   overflow: visible;
 }
 
-[data-agent-empty-state="centered"]
-  > .agent-composer-stack:not([data-agent-composer-adjacent-ui="true"]):not(
-    :has(.agent-selection-attached-pill)
-  )
-  > .agent-composer-setup-card {
-  position: absolute;
-  left: 0;
-  right: 0;
-  z-index: 3;
-}
-
-[data-agent-empty-state="centered"]
-  > .agent-composer-stack:not([data-agent-composer-adjacent-ui="true"]):not(
-    :has(.agent-selection-attached-pill)
-  )
-  > .agent-composer-setup-card[data-agent-composer-setup-position="above"] {
-  bottom: calc(100% + 0.5rem);
-}
-
-[data-agent-empty-state="centered"]
-  > .agent-composer-stack:not([data-agent-composer-adjacent-ui="true"]):not(
-    :has(.agent-selection-attached-pill)
-  )
-  > .agent-composer-setup-card[data-agent-composer-setup-position="below"] {
-  top: calc(100% + 0.5rem);
-}
-
 [data-agent-empty-state="compact-setup"] .agent-empty-state {
   height: auto;
   min-height: 5rem;

package/corpus/core/src/templates/default/.agents/skills/capture-learnings/SKILL.md

@@ -11,11 +11,14 @@ metadata:
 
 # Capture Learnings
 
-This is background knowledge, not a slash command. **Your memory index is loaded at the start of every conversation.** Use `save-memory` proactively when you learn something worth remembering.
+This is background knowledge, not a slash command. **Organization learnings and your personal memory index are loaded at the start of every conversation, including Slack/integration turns.** Capture durable context proactively when you learn something worth remembering.
 
 ## How to Read & Write Memories
 
-Memories are stored as **resources** in the SQL database (personal scope), not as files on disk.
+Memories are stored as **resources** in the SQL database, not as files on disk.
+
+- **Team/organization knowledge:** shared `LEARNINGS.md`. Read it first, merge the new fact, then write the full updated file with the `resources` tool using `scope: "shared"`. Shared scope resolves to the active organization; it must never leak to another organization in the same deployment.
+- **Personal knowledge:** `memory/MEMORY.md` plus `memory/<name>.md`, written with `save-memory`.
 
 - **Save a memory:** `save-memory --name <name> --type <type> --description "..." --content "..."`
 - **Read a memory:** `resource-read --path memory/<name>.md`
@@ -33,6 +36,14 @@ Memories are stored as **resources** in the SQL database (personal scope), not a
 
 ## When to Capture
 
+### Team and organization knowledge (`LEARNINGS.md`, shared scope)
+- Canonical destinations and workflows (for example, which Content database receives a type of Slack request)
+- Required intake fields, ownership, prioritization conventions, metric definitions, and approved terminology
+- Durable external references that the whole team needs, including the canonical page/database URL
+- Corrections or decisions that should affect every organization member's future Slack and app conversations
+
+Store the fact and a concise provenance link when available. Do not paste full private conversations, customer data, credentials, or secrets into learnings. Put stable always-on policy in shared `AGENTS.md`; put learned facts and evolving conventions in shared `LEARNINGS.md`.
+
 ### User Preferences & Memory (`user`)
 - **Tone and style** — "I prefer casual tone", "don't use emojis", "keep replies short"
 - **Personal context** — contacts, relationships, habits ("my wife's email is...", "I'm in PST timezone")
@@ -58,19 +69,21 @@ Memories are stored as **resources** in the SQL database (personal scope), not a
 - Things obvious from reading the code
 - Standard language/framework behavior
 - Temporary debugging notes
-- Anything already in AGENTS.md or skills
+- Anything already in AGENTS.md, shared LEARNINGS.md, or skills
 - Ephemeral task details (use tasks/plans instead)
 
 ## Key Rules
 
-1. **Save proactively — don't ask permission.** When you learn something, save it immediately.
-2. **One memory per topic** — e.g. `coding-style`, `project-alpha`, not one giant dump
-3. **Read before updating** — if a memory exists, read it first and merge, don't overwrite
-4. **Keep descriptions concise** — the index is loaded every conversation
-5. **Memories are SQL-backed** — safe for personal info, persist across sessions, not in git
+1. **Save proactively — don't ask permission.** When you learn something durable, save it immediately at the correct scope.
+2. **Choose scope by audience.** Organization workflow or reference → shared `LEARNINGS.md`; one person's preference/context → personal memory.
+3. **One memory per topic** — e.g. `coding-style`, `project-alpha`, not one giant dump
+4. **Read before updating** — if a memory exists, read it first and merge, don't overwrite
+5. **Keep descriptions concise** — the index is loaded every conversation
+6. **Memories are SQL-backed** — they persist across sessions and are not in git; still minimize sensitive content
 
 ## Graduation
 
 When a memory is referenced repeatedly, it may belong in AGENTS.md or a skill:
-- Saving a memory is lightweight (auto-apply, personal scope)
+- Saving a personal memory is lightweight (auto-apply, personal scope)
+- Shared LEARNINGS.md is the lightweight organization knowledge layer
 - Updating AGENTS.md or a skill is heavier (affects all users/agents)

package/corpus/core/src/templates/default/AGENTS.md

@@ -76,9 +76,13 @@ only the hosted URL/reference in SQL.
 1. **`AGENTS.md`** -- inherited workspace defaults, app/team instructions, and user-specific context.
 2. **`LEARNINGS.md`** -- user preferences, corrections, and patterns. Read personal and shared scopes.
 
-**Update `LEARNINGS.md` when you learn something important.** Built-in app
-chat agents use the `resources` tool with the `action` argument. External CLI
-agents can use the equivalent `pnpm action resource-*` commands.
+**Update the shared `LEARNINGS.md` when you learn something important for the
+team.** Canonical destinations, request fields, metric definitions, routing
+conventions, and corrections learned in Slack belong there with concise source
+links. Shared scope resolves to the active organization. Personal preferences
+and user-specific context go through `save-memory` into `memory/MEMORY.md`.
+Built-in app chat agents use the `resources` tool with the `action` argument.
+External CLI agents can use the equivalent `pnpm action resource-*` commands.
 
 | Built-in agent tool call                                                | CLI equivalent                                                                         | Purpose                 |
 | ----------------------------------------------------------------------- | -------------------------------------------------------------------------------------- | ----------------------- |

package/corpus/core/src/templates/workspace-core/.agents/skills/authentication/SKILL.md

@@ -19,7 +19,7 @@ Auth is powered by **Better Auth** with account-first design. Every new user cre
 
 | Mode                      | Behavior                                                                                                                                 |
 | ------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------- |
-| **Development (default)** | Real Better Auth — same flow as production. There is **no auth bypass**. On first run the framework auto-creates a throwaway dev account and signs you in (credentials printed once to the console; disable with `AGENT_NATIVE_DISABLE_AUTO_DEV_ACCOUNT=1`), so you are not stuck at a login wall. `getSession()` returns the signed-in user or `null` — it never falls back to a sentinel identity. |
+| **Development (default)** | Real Better Auth — same flow as production. There is **no auth bypass**. On first run the framework auto-creates a throwaway dev account and signs you in without printing its credentials (disable with `AGENT_NATIVE_DISABLE_AUTO_DEV_ACCOUNT=1`), so you are not stuck at a login wall. `getSession()` returns the signed-in user or `null` — it never falls back to a sentinel identity. |
 | **Production (default)**  | Better Auth with email/password + social providers (Google, GitHub). Organizations built in.                                             |
 | **`AUTH_MODE=local`**     | **Not** a browser auth bypass, and never returns `local@localhost`. It only affects CLI/agent identity: it lets `pnpm action` / the local agent loop auto-bind to the single real signed-in dev user from the `sessions` table (see `scripts/dev-session.ts`). Browser login is unchanged. |
 | **`AUTH_SKIP_EMAIL_VERIFICATION=1`** | QA/preview escape hatch for real email/password accounts. Signup skips email verification and does not send the signup verification email. Local dev/test skips verification by default; set `AUTH_SKIP_EMAIL_VERIFICATION=0` only when testing verification itself. Use `+qa` emails for test accounts. |

package/corpus/core/src/templates/workspace-core/.agents/skills/capture-learnings/SKILL.md

@@ -11,11 +11,14 @@ metadata:
 
 # Capture Learnings
 
-This is background knowledge, not a slash command. **Your memory index is loaded at the start of every conversation.** Use `save-memory` proactively when you learn something worth remembering.
+This is background knowledge, not a slash command. **Organization learnings and your personal memory index are loaded at the start of every conversation, including Slack/integration turns.** Capture durable context proactively when you learn something worth remembering.
 
 ## How to Read & Write Memories
 
-Memories are stored as **resources** in the SQL database (personal scope), not as files on disk.
+Memories are stored as **resources** in the SQL database, not as files on disk.
+
+- **Team/organization knowledge:** shared `LEARNINGS.md`. Read it first, merge the new fact, then write the full updated file with the `resources` tool using `scope: "shared"`. Shared scope resolves to the active organization; it must never leak to another organization in the same deployment.
+- **Personal knowledge:** `memory/MEMORY.md` plus `memory/<name>.md`, written with `save-memory`.
 
 - **Save a memory:** `save-memory --name <name> --type <type> --description "..." --content "..."`
 - **Read a memory:** `resource-read --path memory/<name>.md`
@@ -33,6 +36,14 @@ Memories are stored as **resources** in the SQL database (personal scope), not a
 
 ## When to Capture
 
+### Team and organization knowledge (`LEARNINGS.md`, shared scope)
+- Canonical destinations and workflows (for example, which Content database receives a type of Slack request)
+- Required intake fields, ownership, prioritization conventions, metric definitions, and approved terminology
+- Durable external references that the whole team needs, including the canonical page/database URL
+- Corrections or decisions that should affect every organization member's future Slack and app conversations
+
+Store the fact and a concise provenance link when available. Do not paste full private conversations, customer data, credentials, or secrets into learnings. Put stable always-on policy in shared `AGENTS.md`; put learned facts and evolving conventions in shared `LEARNINGS.md`.
+
 ### User Preferences & Memory (`user`)
 - **Tone and style** — "I prefer casual tone", "don't use emojis", "keep replies short"
 - **Personal context** — contacts, relationships, habits ("my wife's email is...", "I'm in PST timezone")
@@ -58,19 +69,21 @@ Memories are stored as **resources** in the SQL database (personal scope), not a
 - Things obvious from reading the code
 - Standard language/framework behavior
 - Temporary debugging notes
-- Anything already in AGENTS.md or skills
+- Anything already in AGENTS.md, shared LEARNINGS.md, or skills
 - Ephemeral task details (use tasks/plans instead)
 
 ## Key Rules
 
-1. **Save proactively — don't ask permission.** When you learn something, save it immediately.
-2. **One memory per topic** — e.g. `coding-style`, `project-alpha`, not one giant dump
-3. **Read before updating** — if a memory exists, read it first and merge, don't overwrite
-4. **Keep descriptions concise** — the index is loaded every conversation
-5. **Memories are SQL-backed** — safe for personal info, persist across sessions, not in git
+1. **Save proactively — don't ask permission.** When you learn something durable, save it immediately at the correct scope.
+2. **Choose scope by audience.** Organization workflow or reference → shared `LEARNINGS.md`; one person's preference/context → personal memory.
+3. **One memory per topic** — e.g. `coding-style`, `project-alpha`, not one giant dump
+4. **Read before updating** — if a memory exists, read it first and merge, don't overwrite
+5. **Keep descriptions concise** — the index is loaded every conversation
+6. **Memories are SQL-backed** — they persist across sessions and are not in git; still minimize sensitive content
 
 ## Graduation
 
 When a memory is referenced repeatedly, it may belong in AGENTS.md or a skill:
-- Saving a memory is lightweight (auto-apply, personal scope)
+- Saving a personal memory is lightweight (auto-apply, personal scope)
+- Shared LEARNINGS.md is the lightweight organization knowledge layer
 - Updating AGENTS.md or a skill is heavier (affects all users/agents)

package/corpus/core/src/templates/workspace-core/.agents/skills/extension-points/SKILL.md

@@ -195,9 +195,12 @@ the `slot-installs` query and the host re-renders without the iframe.
 - **Not a slot manifest.** Slot targets live in the `tool_slots` table
   (Drizzle export `extensionSlots`), not in the extension's HTML content.
   The agent can re-target an extension without rewriting it.
-- **Not for arbitrary code modification.** If a user wants to change how
-  the app itself behaves (not add a sandboxed widget), use the
-  `self-modifying-code` skill instead.
+- **Not for arbitrary code modification.** If the exact request needs UI inside
+  a native component or at a location with no slot, do not stop at "slots
+  cannot do that" or silently move it elsewhere. Treat it as full app
+  customization: use `connect-builder` for the Builder.io Cloud Agent/local
+  editing handoff in hosted chat, or follow `self-modifying-code` in a local
+  code-editing surface.
 
 ## Cross-references
 

package/corpus/core/src/templates/workspace-core/.agents/skills/extensions/SKILL.md

@@ -51,6 +51,31 @@ and Alpine.js runtime.
 - Action files in `actions/`
 - Routes
 
+## When the Request Needs Code Instead
+
+Route by the user's exact outcome, not by whether they called it an
+"extension." Extensions render only on their own page or inside an existing
+named `ExtensionSlot`; they cannot inject UI into arbitrary native components,
+replace built-in views, or appear at a location where the host app has no slot.
+
+If the requested placement or behavior requires changing native components,
+host layout/styles/routes/business logic, or adding a new slot:
+
+1. Briefly explain the extension boundary.
+2. Do **not** stop at "an extension cannot do that," and do not silently move the
+   UI to a less useful slot.
+3. Continue through the normal source-code customization flow:
+   - In hosted/app-rendered chat, call `connect-builder`. When its
+     `builderEnabled` result is true, offer the Builder.io Cloud Agent handoff;
+     when false, say the change can be made with local code editing, Agent
+     Native Desktop, or Builder.io cloud editing.
+   - In a local development or outer code-editing surface, follow the
+     `self-modifying-code` skill and edit the app source directly.
+
+Full source-code customization is a core Agent Native capability. Extensions
+are the fast, sandboxed, no-deploy layer—not the limit of what the app can
+become.
+
 **When a user asks to "make an extension", "create an extension", or "build
 a ... extension" (or the older phrasings "make a tool" / "create a tool"):**
 

package/corpus/core/src/templates/workspace-core/.agents/skills/integration-webhooks/SKILL.md

@@ -298,6 +298,21 @@ queue + retry job for at-least-once delivery.
 6. **Reply not delivered?** The processor likely succeeded but
    `adapter.sendResponse` failed — check the adapter's outbound logs.
 
+## Automation connectors
+
+Workflow systems such as n8n and Zapier are not messaging channels. Do not add
+them as `PlatformAdapter`s or route them through `provider-api`.
+
+For n8n-style workflow invocation and callbacks, use
+`@agent-native/core/automation` with static workflow IDs and allow-listed
+origins. Agents provide structured input, never a target URL or credential.
+Callbacks must verify a configured secret/signature, claim a durable event ID,
+enqueue work through the established queue, and acknowledge quickly.
+
+Zapier is blueprint-only unless the app implements Zapier's explicit REST Hook
+subscribe/unsubscribe contract or configures a separate Zapier MCP connection.
+Do not imply a generic Zapier workflow-execution API exists.
+
 ## Related Skills
 
 - `server-plugins` — How `/_agent-native/` routes get mounted

package/corpus/core/src/templates/workspace-core/.agents/skills/voice-transcription/SKILL.md

@@ -13,17 +13,21 @@ metadata:
 
 # Voice Transcription
 
-Click-to-toggle microphone inside the sidebar composer turns speech into
-text. Users configure live transcription separately from AI cleanup in
-Settings → Voice Transcription. The feature is available in every template
-that renders `TiptapComposer`.
+The microphone inside the sidebar composer offers two distinct paths:
+editable dictation and an opt-in realtime speech-to-speech agent session.
+Users configure dictation separately from AI cleanup in Settings → Voice
+Transcription. Both paths are available in every template that renders the
+shared agent sidebar.
 
 ## UX rules
 
 - **Always show the mic alongside the send button.** Cursor replaces send
   with mic when the composer is empty; their users complain. We keep both
   visible — Lovable does the same.
-- **Click-to-toggle, not push-to-talk.** More forgiving in a sidebar, avoids
+- **Ask before switching modes.** The mic opens a shadcn popover offering
+  **Start voice mode** and **Keep dictating**; never silently replace the
+  established dictation behavior.
+- **Dictation is click-to-toggle, not push-to-talk.** More forgiving in a sidebar, avoids
   host-app hotkey clashes. Keyboard shortcut is `Cmd/Ctrl+Shift+M` and
   `Escape` cancels mid-recording.
 - **Transcript lands in the composer, editable, never auto-sent.** Insert at
@@ -34,6 +38,31 @@ that renders `TiptapComposer`.
   Never use a sparkle or robot icon.
 - **Errors via inline alert or toast, never `window.alert`.**
 
+## Realtime speech mode
+
+Realtime speech mode is a full-duplex OpenAI Realtime WebRTC session, separate
+from the dictation providers below. It requires the authenticated user's
+`OPENAI_API_KEY`, uses the server-owned `gpt-realtime-2.1` session
+configuration, and keeps the key out of browser code.
+
+- Starting voice mode collapses the chat into a persistent bottom-end speech
+  orb. Clicking the orb shows or hides chat without ending the session; ending
+  the session is a separate, explicit control.
+- Semantic VAD keeps listening, starts responses automatically, and supports
+  barge-in while the agent is speaking.
+- Function calls must cross the authenticated realtime tool bridge and enter
+  `executeAgentToolCall`. Never call `ActionEntry.run` directly: that bypasses
+  schema validation, approvals, audit/journal behavior, timeouts, redaction,
+  and mutation refreshes.
+- Preserve the active browser-tab id in request context so `set-url`,
+  `set-search-params`, `view-screen`, and tab-scoped application state affect
+  the app the user is actually speaking to.
+- Do not persist audio. Store only compact lifecycle and latest-transcript
+  context at `application_state["realtime-voice-session"]`; delete it when the
+  session ends.
+- Missing-key failures should open Settings focused on the user-scoped
+  `OPENAI_API_KEY` field. Never send, log, or echo the key to the browser.
+
 ## Source And Cleanup
 
 Settings must keep these as separate choices:
@@ -80,11 +109,14 @@ Default behavior:
 | --------------------------------------------------------------------- | --------------------------------------------------- |
 | `packages/core/src/client/composer/useVoiceDictation.ts`              | Provider-routing hook (MediaRecorder / Web Speech)  |
 | `packages/core/src/client/composer/VoiceButton.tsx`                   | Mic button + live amplitude + cancel overlay        |
+| `packages/core/src/client/composer/RealtimeVoiceMode.tsx`            | Opt-in popover + persistent speech orb              |
+| `packages/core/src/client/composer/useRealtimeVoiceMode.tsx`         | WebRTC lifecycle, provider events, and tool bridge  |
 | `packages/core/src/client/composer/TiptapComposer.tsx`                | Wires the hook, insertion, and keyboard shortcut    |
 | `packages/core/src/client/settings/VoiceTranscriptionSection.tsx`     | Live source + cleanup controls in sidebar settings  |
 | `packages/core/src/client/transcription/BuilderTranscriptionCta.tsx`  | CTA shown when Builder account isn't connected      |
 | `packages/core/src/client/transcription/use-live-transcription.ts`    | Web Speech live-transcription hook for recordings   |
 | `packages/core/src/server/transcribe-voice.ts`                        | Route handler (routes to Builder/Gemini/Groq/Whisper) |
+| `packages/core/src/server/realtime-voice.ts`                          | Authenticated OpenAI SDP and action-tool routes     |
 | `packages/core/src/transcription/builder-transcription.ts`            | Builder proxy transcription client                  |
 | `packages/core/src/voice/`                                            | Shared voice context pack, prompt, and replacement helpers |
 | `packages/core/src/secrets/register-framework-secrets.ts`             | Framework-level provider key registration           |
@@ -139,4 +171,6 @@ Templates can:
 - Don't call transcription providers from the client — go through `/_agent-native/transcribe-voice` so the user's secret stays server-side.
 - Don't remove the cancel affordance — mic permission abuse paranoia is real.
 - Don't auto-submit the transcript — users always edit before sending.
+- Don't route realtime tool calls around the central guarded agent executor.
+- Don't persist realtime audio or put provider keys in SDP/session payloads.
 - Don't copy Cursor's "hide send when empty" pattern — it confuses users.

package/corpus/core/src/templates/workspace-core/AGENTS.md

@@ -71,8 +71,9 @@ agent should know.
 
 ## Adding Apps
 
-When a user asks from Dispatch chat or by tagging `@agent-native` in Slack to
-create, build, make, scaffold, or generate an "agent", classify the ask first.
+When a user asks from Dispatch chat or through `@agent-native` in Slack or
+Telegram to create, build, make, scaffold, or generate an "agent", classify
+the ask first.
 Simple Dispatch-native behavior such as a reminder, digest, monitor, routing
 rule, saved instruction, or recurring workflow can stay in Dispatch as a
 recurring job/resource/destination. Robust unique products or teammates that