@agent-native/core 0.92.5 → 0.92.6

package/corpus/core/src/extensions/url-safety.ts

@@ -247,17 +247,26 @@ export async function createSsrfSafeDispatcher(): Promise<unknown | null> {
  * Throws an Error whose message starts with "SSRF blocked:" when a target
  * (initial or via redirect) resolves to a private/internal address, or when the
  * redirect limit is exceeded. Otherwise returns the final Response.
+ *
+ * `httpsOnly` extends the per-hop validation to the URL scheme: redirects are
+ * followed only to `https:` targets, so an HTTPS-only caller cannot be
+ * downgraded to plain HTTP by a 30x from the (untrusted) origin.
  */
 export async function ssrfSafeFetch(
   url: string,
   init: RequestInit = {},
-  options: { maxRedirects?: number } = {},
+  options: { maxRedirects?: number; httpsOnly?: boolean } = {},
 ): Promise<Response> {
   const maxRedirects = options.maxRedirects ?? 3;
   const dispatcher = (await createSsrfSafeDispatcher()) ?? undefined;
 
   let currentUrl = url;
   for (let hop = 0; hop <= maxRedirects; hop++) {
+    if (options.httpsOnly && new URL(currentUrl).protocol !== "https:") {
+      throw new Error(
+        `SSRF blocked: refusing to fetch non-HTTPS address (${currentUrl})`,
+      );
+    }
     if (await isBlockedExtensionUrlWithDns(currentUrl)) {
       throw new Error(
         `SSRF blocked: refusing to fetch private/internal address (${currentUrl})`,
@@ -273,6 +282,9 @@ export async function ssrfSafeFetch(
     if (response.status >= 300 && response.status < 400) {
       const location = response.headers.get("location");
       if (!location) return response;
+      // Drain the redirect body so the hop's connection is released instead
+      // of being held until GC.
+      await response.body?.cancel().catch(() => {});
       currentUrl = new URL(location, currentUrl).href;
       continue;
     }

package/corpus/core/src/localization/default-messages.ts

@@ -410,9 +410,16 @@ const messages = {
     join: "Join",
     invitedByLabel: "Invited by {{name}}",
     you: "You",
+    owner: "Owner",
     admin: "Admin",
     member: "Member",
     members: "Members",
+    inviteMembers: "Invite members",
+    invited: "Invited",
+    role: "Role",
+    status: "Status",
+    actions: "Actions",
+    noMembers: "No members yet.",
     memberCount_one: "{{count}} member",
     memberCount_other: "{{count}} members",
     youAreRole: "You are {{role}}",

package/corpus/core/src/templates/default/app/i18n/ar-SA.ts

@@ -423,9 +423,16 @@ const messages = {
     join: "Join",
     invitedByLabel: "Invited by {{name}}",
     you: "You",
+    owner: "المالك",
     admin: "مسؤول",
     member: "Member",
     members: "Members",
+    inviteMembers: "دعوة أعضاء",
+    invited: "تمت الدعوة",
+    role: "الدور",
+    status: "الحالة",
+    actions: "الإجراءات",
+    noMembers: "لا يوجد أعضاء بعد.",
     memberCount_one: "{{count}} member",
     memberCount_other: "{{count}} members",
     memberCount_zero: "{{count}} members",

package/corpus/core/src/templates/default/app/i18n/de-DE.ts

@@ -410,9 +410,16 @@ const messages = {
     join: "Join",
     invitedByLabel: "Invited by {{name}}",
     you: "You",
+    owner: "Eigentümer",
     admin: "Admin",
     member: "Member",
     members: "Members",
+    inviteMembers: "Mitglieder einladen",
+    invited: "Eingeladen",
+    role: "Rolle",
+    status: "Status",
+    actions: "Aktionen",
+    noMembers: "Noch keine Mitglieder.",
     memberCount_one: "{{count}} member",
     memberCount_other: "{{count}} members",
     youAreRole: "You are {{role}}",

package/corpus/core/src/templates/default/app/i18n/en-US.ts

@@ -401,9 +401,16 @@ const messages = {
     join: "Join",
     invitedByLabel: "Invited by {{name}}",
     you: "You",
+    owner: "Owner",
     admin: "Admin",
     member: "Member",
     members: "Members",
+    inviteMembers: "Invite members",
+    invited: "Invited",
+    role: "Role",
+    status: "Status",
+    actions: "Actions",
+    noMembers: "No members yet.",
     memberCount_one: "{{count}} member",
     memberCount_other: "{{count}} members",
     youAreRole: "You are {{role}}",

package/corpus/core/src/templates/default/app/i18n/es-ES.ts

@@ -417,9 +417,16 @@ const messages = {
     join: "Join",
     invitedByLabel: "Invited by {{name}}",
     you: "You",
+    owner: "Propietario",
     admin: "Administrador",
     member: "Member",
     members: "Members",
+    inviteMembers: "Invitar miembros",
+    invited: "Invitado",
+    role: "Rol",
+    status: "Estado",
+    actions: "Acciones",
+    noMembers: "Aún no hay miembros.",
     memberCount_one: "{{count}} member",
     memberCount_other: "{{count}} members",
     memberCount_many: "{{count}} members",

package/corpus/core/src/templates/default/app/i18n/fr-FR.ts

@@ -415,9 +415,16 @@ const messages = {
     join: "Join",
     invitedByLabel: "Invited by {{name}}",
     you: "You",
+    owner: "Propriétaire",
     admin: "Admin",
     member: "Member",
     members: "Members",
+    inviteMembers: "Inviter des membres",
+    invited: "Invité",
+    role: "Rôle",
+    status: "Statut",
+    actions: "Actions",
+    noMembers: "Aucun membre pour le moment.",
     memberCount_one: "{{count}} member",
     memberCount_other: "{{count}} members",
     memberCount_many: "{{count}} members",

package/corpus/core/src/templates/default/app/i18n/hi-IN.ts

@@ -397,9 +397,16 @@ const messages = {
     join: "Join",
     invitedByLabel: "Invited by {{name}}",
     you: "You",
+    owner: "स्वामी",
     admin: "व्यवस्थापक",
     member: "Member",
     members: "Members",
+    inviteMembers: "सदस्यों को आमंत्रित करें",
+    invited: "आमंत्रित",
+    role: "भूमिका",
+    status: "स्थिति",
+    actions: "कार्रवाइयां",
+    noMembers: "अभी कोई सदस्य नहीं है.",
     memberCount_one: "{{count}} member",
     memberCount_other: "{{count}} members",
     youAreRole: "You are {{role}}",

package/corpus/core/src/templates/default/app/i18n/ja-JP.ts

@@ -402,9 +402,16 @@ const messages = {
     join: "Join",
     invitedByLabel: "Invited by {{name}}",
     you: "You",
+    owner: "オーナー",
     admin: "管理者",
     member: "Member",
     members: "Members",
+    inviteMembers: "メンバーを招待",
+    invited: "招待済み",
+    role: "ロール",
+    status: "ステータス",
+    actions: "操作",
+    noMembers: "メンバーはまだいません。",
     memberCount_other: "{{count}} members",
     youAreRole: "You are {{role}}",
     changeRole: "役割を変更する",

package/corpus/core/src/templates/default/app/i18n/ko-KR.ts

@@ -395,9 +395,16 @@ const messages = {
     join: "Join",
     invitedByLabel: "Invited by {{name}}",
     you: "You",
+    owner: "소유자",
     admin: "관리자",
     member: "Member",
     members: "Members",
+    inviteMembers: "구성원 초대",
+    invited: "초대됨",
+    role: "역할",
+    status: "상태",
+    actions: "작업",
+    noMembers: "아직 구성원이 없습니다.",
     memberCount_other: "{{count}} members",
     youAreRole: "You are {{role}}",
     changeRole: "역할 변경",

package/corpus/core/src/templates/default/app/i18n/pt-BR.ts

@@ -414,9 +414,16 @@ const messages = {
     join: "Join",
     invitedByLabel: "Invited by {{name}}",
     you: "You",
+    owner: "Proprietário",
     admin: "Admin",
     member: "Member",
     members: "Members",
+    inviteMembers: "Convidar membros",
+    invited: "Convidado",
+    role: "Função",
+    status: "Status",
+    actions: "Ações",
+    noMembers: "Ainda não há membros.",
     memberCount_one: "{{count}} member",
     memberCount_other: "{{count}} members",
     memberCount_many: "{{count}} members",

package/corpus/core/src/templates/default/app/i18n/zh-CN.ts

@@ -383,9 +383,16 @@ const messages = {
     join: "Join",
     invitedByLabel: "Invited by {{name}}",
     you: "You",
+    owner: "所有者",
     admin: "管理员",
     member: "Member",
     members: "Members",
+    inviteMembers: "邀请成员",
+    invited: "已邀请",
+    role: "角色",
+    status: "状态",
+    actions: "操作",
+    noMembers: "暂无成员。",
     memberCount_other: "{{count}} members",
     youAreRole: "You are {{role}}",
     changeRole: "改变角色",

package/corpus/core/src/templates/default/app/i18n/zh-TW.ts

@@ -381,9 +381,16 @@ const messages = {
     join: "Join",
     invitedByLabel: "由 {{name}} 邀請",
     you: "You",
+    owner: "擁有者",
     admin: "管理員",
     member: "Member",
     members: "Members",
+    inviteMembers: "邀請成員",
+    invited: "已邀請",
+    role: "角色",
+    status: "狀態",
+    actions: "操作",
+    noMembers: "尚無成員。",
     memberCount_other: "{{count}} 位成員",
     youAreRole: "你的角色是 {{role}}",
     changeRole: "改變角色",

package/corpus/templates/analytics/AGENTS.md

@@ -236,9 +236,12 @@ details live in `.agents/skills/`.
   `run-monitor-check`, `delete-monitor`. Checks/alerting run server-side in
   `server/lib/uptime-monitors.ts` (sweep job `server/jobs/uptime-monitors.ts`,
   scheduler `server/plugins/uptime-monitor-jobs.ts`) over
-  `server/db/schema-monitoring.ts`. Deep links: list `?view=uptime`, detail
-  `?view=uptime&monitor=<id>`, create `?view=uptime&monitor=new`, edit
-  `?view=uptime&monitor=<id>&edit=1`. See `docs/uptime-monitoring.md`.
+  `server/db/schema-monitoring.ts`. Production serverless/Netlify-style
+  runtimes skip the in-process interval scheduler and rely on the generated
+  scheduled/background worker or external cron instead. Deep links: list
+  `?view=uptime`, detail `?view=uptime&monitor=<id>`, create
+  `?view=uptime&monitor=new`, edit `?view=uptime&monitor=<id>&edit=1`. See
+  `docs/uptime-monitoring.md`.
 - Status pages (`app/pages/monitoring/uptime/status-pages/**`) are a config
   sub-view under Uptime that bundle chosen monitors under a public
   `/status/<slug>` page. Actions: `list-status-pages`, `get-status-page`,

package/corpus/templates/analytics/changelog/2026-07-09-uptime-monitors-use-scheduled-workers-in-production-serverless.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-09
+---
+
+Uptime monitors now skip in-process sweeps in production serverless runtimes and rely on scheduled workers to avoid false timeout alerts.

package/corpus/templates/analytics/docs/uptime-monitoring.md

@@ -122,6 +122,11 @@ external cron with `UPTIME_MONITORS_CRON_SECRET`. Both paths run
 monitors whose interval has elapsed, checks them, records results, opens/resolves
 incidents, and prunes old check results.
 
+Production serverless function runtimes skip the in-process interval scheduler
+even when `UPTIME_MONITOR_JOBS=1`, because the function may freeze or time out
+mid-sweep. Use the generated scheduled/background worker or an external cron
+calling `/api/uptime-monitors/run` for production serverless checks.
+
 Environment flags (mirrors the analytics alert job):
 
 | flag                                                   | effect                                                                                           |

package/corpus/templates/analytics/server/plugins/uptime-monitor-jobs.ts

@@ -16,9 +16,21 @@ declare global {
   var __AGENT_NATIVE_UPTIME_MONITOR_SCHEDULED_RUNTIME__: boolean | undefined;
 }
 
-function platformSchedulerOwnsMonitors(): boolean {
+function isProductionServerlessRuntime(): boolean {
+  if (process.env.NODE_ENV !== "production") return false;
   return (
     process.env.NETLIFY === "true" ||
+    Boolean(process.env.NETLIFY_FUNCTION_NAME) ||
+    Boolean(process.env.AWS_LAMBDA_FUNCTION_NAME) ||
+    Boolean(process.env.LAMBDA_TASK_ROOT) ||
+    process.env.AWS_EXECUTION_ENV?.startsWith("AWS_Lambda") === true ||
+    process.env.VERCEL === "1"
+  );
+}
+
+function platformSchedulerOwnsMonitors(): boolean {
+  return (
+    isProductionServerlessRuntime() ||
     globalThis.__AGENT_NATIVE_UPTIME_MONITOR_SCHEDULED_RUNTIME__ === true
   );
 }
@@ -44,7 +56,7 @@ export default function registerUptimeMonitorJobs(): void {
     if (!skippingLogged) {
       console.log(
         platformSchedulerOwnsMonitors()
-          ? "[uptime-monitors] Skipping in-process cron because the platform scheduler owns monitor sweeps."
+          ? "[uptime-monitors] Skipping in-process cron because production serverless runtimes rely on scheduled/background monitor sweeps."
           : "[uptime-monitors] Skipping background cron (set UPTIME_MONITOR_JOBS=1 or RUN_BACKGROUND_JOBS=1 to enable in dev; on by default in production)",
       );
       skippingLogged = true;

package/corpus/templates/assets/.agents/skills/image-generation/SKILL.md

@@ -27,6 +27,9 @@ Use this skill before calling `generate-image`, `generate-image-batch`, or
 - Use category-tagged references. Blog heroes should prefer `hero`; diagrams
   should prefer `diagram`; product imagery should include `product` and `logo`
   references.
+- Imported external images with `status: "reference"` are valid generation
+  inputs. Use their returned asset IDs in preset reference fills or reference
+  boards the same way you would use uploaded reference assets.
 - Keep reference sets small and deterministic. Prefer anchors listed in
   `assetLibraries.settings.canonicalStyleAssetIds` and assets marked
   `assets.metadata.isStyleAnchor` before sampling other relevant references.
@@ -59,12 +62,44 @@ Use this skill before calling `generate-image`, `generate-image-batch`, or
   `generate-image-batch` / `refine-image`. The design team uses the audit log
   to review quality by app, library, model, prompt, and lineage.
 
+## Preset-first Generation
+
+- Before any ad-hoc generation for a brand kit, call
+  `list-generation-presets` and scan titles/descriptions/categories for a
+  use-case match. A preset encodes the designer's format, model, layout, and
+  reference board; using it is always better than improvising.
+- If one preset clearly matches: use its `presetId`; do not restate its saved
+  aspect ratio/size/model/tier. If several plausibly match: pick the best and
+  state which one you used; do not ask the user to choose.
+- Match named people/products/backdrops in the request to the preset's
+  reference board entry labels in `settings.presetReferences`. Fill required
+  variable entries via `presetReferenceFills`: search the library for assets of
+  those people first; ask the user for photos only when none exist. Never skip a
+  required entry.
+- Route exact visible copy such as event titles, dates, and times to
+  `embeddedText` per the existing text rules; keep the creative direction in
+  `prompt`.
+- If nothing matches: generate ad-hoc, say that no preset fit, and mention a
+  preset could be created for this recurring use case.
+
 ## Prompting
 
 - Treat references as evidence, not decoration.
 - Let the server choose references unless the user named exact assets. Automatic
   generation uses up to 6 relevant current references, seeded by canonical
   style anchors; explicit `referenceAssetIds` are preserved.
+- Preset reference boards live on tagged presets as named entries such as a
+  usual host, product, backdrop, style sample, or per-event speaker. Fixed
+  entries attach automatically. Variable entries may be replaced for a run with
+  `presetReferenceFills`; each fill REPLACES that entry's pinned images rather
+  than appending. Required variable entries block generation until you provide
+  at least one image.
+- When a tagged preset brief names required variable references, collect the
+  needed images from the user's attachments or the library and pass
+  `presetReferenceFills: [{ referenceId, assetIds }]` to `generate-image` or
+  `generate-image-batch`. Board images are additive to brand style references.
+  User-uploaded per-event people/photos should be uploaded as content images
+  (`subject` intent/role), not as reusable brand style references.
 - If a collection's style feels underspecified, call `analyze-collection-style`
   and use its vision brand analysis for palette, composition, lighting, subject
   treatment, typography policy, and constraints.

package/corpus/templates/assets/.agents/skills/library-management/SKILL.md

@@ -90,6 +90,25 @@ Reference images and generated images live in the **same** `image_assets` table,
 
 The unified table simplifies access control (one `library_id`, one access check) and makes "use a saved generation as a reference for a future generation" a first-class operation — just bump its `role` to `prior-candidate` (planned for v2; v1 just selects from any non-archived asset).
 
+## Importing external references
+
+Use `import-asset-from-url` when the agent has found a public HTTPS image that
+belongs in a brand kit, such as a blog hero, product shot, logo, campaign image,
+or diagram. Choose the narrowest reference `role` (`style_reference`,
+`subject_reference`, `product_reference`, `background_reference`,
+`logo_reference`, or `diagram_reference`) and preserve a useful title or
+description when known. The deliverable `category` defaults to match the role
+(logo → `logo`, product → `product`, diagram → `diagram`); pass an explicit
+`category` such as `hero` or `campaign` when the image belongs in one of those
+filtered views.
+
+For a blog-to-brand-kit workflow: inspect the page, pick the strongest image
+URLs, import each URL into the target `libraryId`, then wire the returned
+`assetId`s into generation preset reference fills or call `set-canonical-logo`
+for the exact logo. Imported assets are stored as `status: "reference"` with
+`sourceUrl` provenance, so downstream generation, preset boards, and logo
+compositing can use them like uploaded reference assets.
+
 ## When to add a collection
 
 Collections are optional. Most users won't create them. Use them when:

package/corpus/templates/assets/AGENTS.md

@@ -24,6 +24,8 @@ Detailed library, generation, image, embed, and engine rules live in
 - Use the configured generation/engine path for image and asset work. Do not add
   ad hoc provider calls when the app has an action/engine abstraction.
 - Preserve provenance and metadata for generated or imported assets.
+- Ingest external brand or blog imagery with `import-asset-from-url`, then pin
+  the returned asset to preset reference boards or set it as the canonical logo.
 - Use `view-screen` when the active library, selected asset, picker, generation,
   or embed target is unclear. The human Library surface is `/library` for
   cross-kit browsing and `/library/:libraryId` for a single brand kit; embedded
@@ -59,6 +61,17 @@ prompt, aspectRatio }`.
   composition, mood, lighting, and subject — then pass the `presetId` to
   `generate-image` / `generate-image-batch` so the saved format/model/tier/logo
   apply automatically. Do not restate those as ad-hoc args.
+- Image requests without a tagged preset are preset-first: the user may not know
+  presets exist. Call `list-generation-presets` for the library before
+  generating and compare the request against each preset's title, description,
+  and category. If one matches the use case (e.g. "livestream poster" -> a
+  Livestream Announcement preset), generate with its `presetId` instead of
+  ad-hoc settings. Only generate presetless when nothing plausibly matches.
+- Presets may declare a reference board with fixed or variable named entries
+  such as a host, guest speaker, product, backdrop, or style. Fixed entries
+  attach automatically; collect images for required variable entries and pass
+  them via `presetReferenceFills` on `generate-image` /
+  `generate-image-batch`. See the `image-generation` skill for fill semantics.
 - For exact visible copy inside a generated image, pass `embeddedText` and
   optional `textPlacement` to `generate-image` or each `generate-image-batch`
   slot. Keep the general `prompt` for creative direction; the structured text

package/corpus/templates/assets/actions/_generation-preset-settings.ts

@@ -1,5 +1,11 @@
 import { z } from "zod";
 
+import {
+  PRESET_REFERENCE_SUBJECT_IMAGES_ERROR,
+  PRESET_REFERENCE_TOTAL_IMAGES_ERROR,
+} from "../server/lib/preset-references.js";
+import { PRESET_REFERENCE_ROLES } from "../shared/api.js";
+
 const fractionSchema = z.coerce.number().min(0).max(1);
 const positiveFractionSchema = z.coerce.number().min(0.02).max(1);
 
@@ -40,9 +46,76 @@ export const presetSkeletonSpecSchema = z.object({
     .optional(),
 });
 
+export const presetReferenceSchema = z.object({
+  id: z
+    .string()
+    .regex(/^[a-z0-9][a-z0-9-]*$/)
+    .max(40),
+  label: z.string().min(1).max(60),
+  role: z.enum(PRESET_REFERENCE_ROLES),
+  description: z.string().max(400).optional(),
+  assetIds: z.array(z.string().min(1)).max(4),
+  variable: z.coerce.boolean(),
+  required: z.coerce.boolean(),
+});
+
 export const generationPresetSettingsSchema = z
   .object({
     includeLogo: z.coerce.boolean().optional(),
     skeletonSpec: presetSkeletonSpecSchema.nullable().optional(),
+    presetReferences: z
+      .array(presetReferenceSchema)
+      .max(6)
+      .nullable()
+      .optional(),
+  })
+  .superRefine((settings, ctx) => {
+    const references = settings.presetReferences ?? [];
+    const seen = new Set<string>();
+    for (const entry of references) {
+      if (seen.has(entry.id)) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["presetReferences"],
+          message: "Reference entry ids must be unique.",
+        });
+        break;
+      }
+      seen.add(entry.id);
+      if (entry.required && !entry.variable && entry.assetIds.length === 0) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["presetReferences", entry.id],
+          message:
+            "A required fixed reference needs at least one image. Pin images or mark it as variable.",
+        });
+      }
+    }
+    // Budget with the minimum images each entry consumes at run time: a
+    // required entry with no pinned images still needs at least one fill
+    // image, so reserve it here or the saved preset can never generate.
+    const minimumImages = (entry: { required: boolean; assetIds: string[] }) =>
+      Math.max(entry.assetIds.length, entry.required ? 1 : 0);
+    const total = references.reduce(
+      (sum, entry) => sum + minimumImages(entry),
+      0,
+    );
+    if (total > 8) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["presetReferences"],
+        message: PRESET_REFERENCE_TOTAL_IMAGES_ERROR,
+      });
+    }
+    const subjectTotal = references
+      .filter((entry) => entry.role === "subject")
+      .reduce((sum, entry) => sum + minimumImages(entry), 0);
+    if (subjectTotal > 4) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["presetReferences"],
+        message: PRESET_REFERENCE_SUBJECT_IMAGES_ERROR,
+      });
+    }
   })
   .catchall(z.unknown());

package/corpus/templates/assets/actions/_preset-skeleton-validation.ts

@@ -1,6 +1,7 @@
 import { inArray } from "drizzle-orm";
 
 import { schema } from "../server/db/index.js";
+import { normalizePresetReferences } from "../server/lib/preset-references.js";
 
 export async function assertPresetSkeletonAssetsValid(input: {
   db: any;
@@ -62,3 +63,65 @@ export async function assertPresetSkeletonAssetsValid(input: {
     );
   }
 }
+
+export async function assertPresetReferenceAssetsValid(input: {
+  db: any;
+  libraryId: string;
+  settings: unknown;
+}) {
+  const rawReferences =
+    input.settings && typeof input.settings === "object"
+      ? (input.settings as { presetReferences?: unknown }).presetReferences
+      : null;
+  const references = normalizePresetReferences(rawReferences);
+  const assetIds = [...new Set(references.flatMap((entry) => entry.assetIds))];
+  if (!assetIds.length) return;
+
+  const rows = await input.db
+    .select({
+      id: schema.assets.id,
+      libraryId: schema.assets.libraryId,
+      mimeType: schema.assets.mimeType,
+      status: schema.assets.status,
+    })
+    .from(schema.assets)
+    .where(inArray(schema.assets.id, assetIds));
+  const byId = new Map<string, any>(
+    (rows as any[]).map((asset) => [asset.id, asset]),
+  );
+  const valid = assetIds.every((assetId) => {
+    const asset = byId.get(assetId);
+    return (
+      asset &&
+      asset.libraryId === input.libraryId &&
+      typeof asset.mimeType === "string" &&
+      asset.mimeType.startsWith("image/") &&
+      asset.status !== "archived" &&
+      asset.status !== "failed"
+    );
+  });
+  if (!valid) {
+    throw new Error(
+      "Reference board images must be images in this asset library.",
+    );
+  }
+}
+
+export function assertPresetReferenceModelCompatible(input: {
+  model: string | null | undefined;
+  settings: unknown;
+}) {
+  const rawReferences =
+    input.settings && typeof input.settings === "object"
+      ? (input.settings as { presetReferences?: unknown }).presetReferences
+      : null;
+  const references = normalizePresetReferences(rawReferences);
+  if (
+    input.model === "gemini-2.5-flash-image" &&
+    references.some((entry) => entry.role === "subject")
+  ) {
+    throw new Error(
+      "Subject reference entries need a model with character consistency. Use gemini-3.1-flash-image, gemini-3-pro-image, gpt-image-1, or gpt-image-2.",
+    );
+  }
+}

package/corpus/templates/assets/actions/create-generation-preset.ts

@@ -15,7 +15,11 @@ import {
 } from "../shared/api.js";
 import { generationPresetSettingsSchema } from "./_generation-preset-settings.js";
 import { serializeGenerationPreset } from "./_helpers.js";
-import { assertPresetSkeletonAssetsValid } from "./_preset-skeleton-validation.js";
+import {
+  assertPresetReferenceAssetsValid,
+  assertPresetReferenceModelCompatible,
+  assertPresetSkeletonAssetsValid,
+} from "./_preset-skeleton-validation.js";
 
 export default defineAction({
   description:
@@ -56,10 +60,25 @@ export default defineAction({
         throw new Error("Collection does not belong to this asset library.");
       }
     }
+    const settings = {
+      ...(args.settings ?? {}),
+      ...(args.includeLogo !== undefined
+        ? { includeLogo: args.includeLogo }
+        : {}),
+    };
     await assertPresetSkeletonAssetsValid({
       db,
       libraryId: args.libraryId,
-      settings: args.settings,
+      settings,
+    });
+    await assertPresetReferenceAssetsValid({
+      db,
+      libraryId: args.libraryId,
+      settings,
+    });
+    assertPresetReferenceModelCompatible({
+      model: args.model,
+      settings,
     });
     const now = nowIso();
     const row = {
@@ -76,12 +95,7 @@ export default defineAction({
       model: args.model,
       textPolicy: args.textPolicy,
       referencePolicy: args.referencePolicy,
-      settings: stringifyJson({
-        ...(args.settings ?? {}),
-        ...(args.includeLogo !== undefined
-          ? { includeLogo: args.includeLogo }
-          : {}),
-      }),
+      settings: stringifyJson(settings),
       sortOrder: args.sortOrder ?? 100,
       createdAt: now,
       updatedAt: now,