@agent-native/core 0.93.0 → 0.94.1

package/corpus/templates/design/e2e/helpers.ts

@@ -167,14 +167,20 @@ async function waitForDesignBridgeReady(page: Page): Promise<void> {
     page.locator(DESIGN_PREVIEW_IFRAME_SELECTOR).first(),
   ).toBeVisible();
   const overviewChromeVisible = await page
-    .getByRole("button", { name: "Interact", exact: true })
+    .locator("[data-screen-shell]")
     .first()
     .isVisible()
     .catch(() => false);
   if (!overviewChromeVisible) {
-    await expect(
-      designFrame(page).locator('[data-agent-native-edit-overlay="shield"]'),
-    ).toBeVisible({ timeout: 10_000 });
+    const editShield = designFrame(page).locator(
+      '[data-agent-native-edit-overlay="shield"]',
+    );
+    // Edit mode installs the pointer shield; Interact mode intentionally does
+    // not. If a shield exists, wait for it, but don't confuse the persistent
+    // toolbar Interact button with overview screen-card chrome.
+    if ((await editShield.count()) > 0) {
+      await expect(editShield).toBeVisible({ timeout: 10_000 });
+    }
   }
   // Wait for the iframe bridge to stamp at least one selectable node.
   await expect
@@ -239,7 +245,12 @@ export async function enterDirectMode(
       : fullView.last();
     await expect(targetFullView).toHaveCount(1);
     await targetFullView.click();
-    await expect(fullView).toHaveCount(0);
+    // The top toolbar's Interact mode button intentionally remains visible
+    // (and becomes pressed) in direct mode. The old assertion expected every
+    // button named "Interact" to disappear, which now mistakes that persistent
+    // mode control for an overview card. The overview screen shells are the
+    // stable boundary that actually unmounts when the transition succeeds.
+    await expect(page.locator("[data-screen-shell]")).toHaveCount(0);
   }
   await expect
     .poll(

package/corpus/templates/design/server/source-workspace.ts

@@ -8,7 +8,10 @@ import { assertAccess, resolveAccess } from "@agent-native/core/sharing";
 import { and, eq, isNull } from "drizzle-orm";
 
 import { isBoardFile } from "../shared/board-file.js";
-import { assertDesignHtmlEditIntegrity } from "../shared/html-integrity.js";
+import {
+  assertDesignHtmlEditIntegrity,
+  isDesignHtmlIntegrityError,
+} from "../shared/html-integrity.js";
 import { assertLockedLayersPreserved } from "../shared/locked-layers.js";
 import { designSourceTypeFromData } from "../shared/source-mode.js";
 import type { DesignSourceType } from "../shared/source-mode.js";
@@ -367,7 +370,30 @@ export async function writeInlineSourceFile(args: {
         );
       }
       if (liveBeforeApply !== args.content) {
-        await applyText(args.file.id, args.content, "content", "agent");
+        try {
+          await applyText(args.file.id, args.content, "content", "agent", {
+            // A human artboard edit can reach the shared Y.Doc from another
+            // serverless process after the version check above. Validate the
+            // fully converged CRDT snapshot before core persists or broadcasts
+            // the agent diff so clients never observe a malformed intermediate
+            // document that is immediately rolled back below.
+            validateSnapshot: (snapshot) =>
+              assertDesignHtmlEditIntegrity({
+                previousContent: current.content,
+                nextContent: snapshot,
+                fileType: currentFile.fileType ?? args.file.fileType ?? "html",
+              }),
+          });
+        } catch (error) {
+          if (!isDesignHtmlIntegrityError(error)) throw error;
+          // The caller's candidate already passed the integrity check above.
+          // A failure here therefore came from concurrent CRDT convergence,
+          // so surface it as a retryable conflict instead of blaming the edit
+          // with the invalid-HTML toast.
+          throw new SourceWorkspaceEditConflictError(
+            "Source file changed while the edit was being applied. Re-read the file and retry.",
+          );
+        }
       }
     } else {
       // No collab doc exists for this file yet. Without the write-lock this

package/corpus/templates/design/shared/html-integrity.ts

@@ -56,11 +56,21 @@ function countMatchesOutsideRanges(
   value: string,
   pattern: RegExp,
   ranges: RawTextScan["bodyRanges"],
+  requireMarkupStart = false,
 ): number {
-  return Array.from(value.matchAll(pattern)).filter(
-    (match) =>
-      match.index !== undefined && !matchFallsInsideRanges(match.index, ranges),
-  ).length;
+  return Array.from(value.matchAll(pattern)).filter((match) => {
+    // Root-tag-shaped strings inside quoted Alpine attributes and comments
+    // are data, not document structure. Counting them here made an otherwise
+    // valid document look like it had duplicate <html>/<body>/<head> roots.
+    // Every caller of this helper is counting a markup token, so require the
+    // tokenizer to agree that the candidate starts outside those contexts.
+    return (
+      match.index !== undefined &&
+      !matchFallsInsideRanges(match.index, ranges) &&
+      (!requireMarkupStart ||
+        matchStartsMarkupToken(value, match.index, ranges))
+    );
+  }).length;
 }
 
 function firstMatchOutsideRanges(
@@ -71,7 +81,8 @@ function firstMatchOutsideRanges(
   const match = Array.from(value.matchAll(pattern)).find(
     (candidate) =>
       candidate.index !== undefined &&
-      !matchFallsInsideRanges(candidate.index, ranges),
+      !matchFallsInsideRanges(candidate.index, ranges) &&
+      matchStartsMarkupToken(value, candidate.index, ranges),
   );
   return match?.index === undefined
     ? null
@@ -86,11 +97,56 @@ function matchStartsMarkupToken(
   if (matchFallsInsideRanges(index, rawTextBodyRanges)) return false;
 
   // A bare regex also finds tag-shaped strings in Alpine attributes and HTML
-  // comments, for example `x-data="{ sample: '<html></html>' }"`. In both
-  // cases another `<` starts the still-open markup token before the candidate.
-  // An actual root/doctype token is the first `<` after the preceding `>`.
-  const precedingClose = value.lastIndexOf(">", index - 1);
-  return value.indexOf("<", precedingClose + 1) === index;
+  // comments, for example `x-data="{ sample: '>' + '<html></html>' }"`.
+  // Walk the markup tokenizer state up to the candidate so a `>` inside a
+  // quoted attribute cannot fool a last-delimiter heuristic into treating the
+  // following string as a real root tag.
+  let inTag = false;
+  let quote: '"' | "'" | null = null;
+  let rawRangeIndex = 0;
+  for (let cursor = 0; cursor <= index; cursor += 1) {
+    while (
+      rawRangeIndex < rawTextBodyRanges.length &&
+      cursor >= rawTextBodyRanges[rawRangeIndex]!.end
+    ) {
+      rawRangeIndex += 1;
+    }
+    const rawRange = rawTextBodyRanges[rawRangeIndex];
+    if (!inTag && rawRange) {
+      if (cursor >= rawRange.start && cursor < rawRange.end) {
+        if (index < rawRange.end) return false;
+        cursor = rawRange.end - 1;
+        continue;
+      }
+    }
+
+    if (!inTag && value.startsWith("<!--", cursor)) {
+      const commentEnd = value.indexOf("-->", cursor + 4);
+      if (commentEnd === -1 || index < commentEnd + 3) return false;
+      cursor = commentEnd + 2;
+      continue;
+    }
+
+    const character = value[cursor];
+    if (!inTag) {
+      if (character !== "<") continue;
+      if (cursor === index) return true;
+      inTag = true;
+      quote = null;
+      continue;
+    }
+
+    if (quote) {
+      if (character === quote) quote = null;
+      continue;
+    }
+    if (character === '"' || character === "'") {
+      quote = character;
+    } else if (character === ">") {
+      inTag = false;
+    }
+  }
+  return false;
 }
 
 function isDocumentHtml(
@@ -124,11 +180,13 @@ function tagCount(
       value,
       new RegExp(`<${tag}\\b[^>]*>`, "gi"),
       ranges,
+      true,
     ),
     close: countMatchesOutsideRanges(
       value,
       new RegExp(`<\\s*\\/\\s*${tag}\\s*>`, "gi"),
       ranges,
+      true,
     ),
   };
 }
@@ -139,27 +197,63 @@ function scanRawTextTags(value: string): RawTextScan {
   // seen, ignore every tag-like token except that element's own closer. This
   // mirrors browser tokenization closely enough to avoid rejecting code-heavy
   // Alpine documents while still detecting an orphaned closer/missing opener.
-  const token = /<\s*(\/?)\s*(style|script)\b[^>]*>/gi;
   let active: "style" | "script" | null = null;
-  let bodyStart = 0;
+  let bodyStart = -1;
   let severity = 0;
   const bodyRanges: RawTextScan["bodyRanges"] = [];
-  for (const match of value.matchAll(token)) {
-    if (match.index === undefined) continue;
-    const closing = match[1] === "/";
-    const tag = match[2]!.toLowerCase() as "style" | "script";
+  let cursor = 0;
+  while (cursor < value.length) {
     if (active) {
-      if (closing && tag === active) {
-        bodyRanges.push({ start: bodyStart, end: match.index });
-        active = null;
-      }
+      // HTML raw-text elements terminate at the first matching end-tag token,
+      // even when that text happens to look like a JavaScript/CSS string.
+      const closer = new RegExp(`<\\s*\\/\\s*${active}\\b[^>]*>`, "gi");
+      closer.lastIndex = cursor;
+      const match = closer.exec(value);
+      if (!match) break;
+      bodyRanges.push({ start: bodyStart, end: match.index });
+      active = null;
+      bodyStart = -1;
+      cursor = match.index + match[0].length;
+      continue;
+    }
+
+    const nextOpen = value.indexOf("<", cursor);
+    if (nextOpen === -1) break;
+    if (value.startsWith("<!--", nextOpen)) {
+      const commentEnd = value.indexOf("-->", nextOpen + 4);
+      cursor = commentEnd === -1 ? value.length : commentEnd + 3;
       continue;
     }
-    if (closing) severity += 1;
-    else {
-      active = tag;
-      bodyStart = match.index + match[0].length;
+
+    // Consume one complete markup token while respecting quoted attributes.
+    // This is the important distinction from the former bare regex: an
+    // Alpine value such as x-data="{ sample: '<style></style>' }" must not
+    // open raw-text mode halfway through the surrounding start tag.
+    let quote: '"' | "'" | null = null;
+    let tokenEnd = nextOpen + 1;
+    for (; tokenEnd < value.length; tokenEnd += 1) {
+      const character = value[tokenEnd];
+      if (quote) {
+        if (character === quote) quote = null;
+      } else if (character === '"' || character === "'") {
+        quote = character;
+      } else if (character === ">") {
+        tokenEnd += 1;
+        break;
+      }
+    }
+    const token = value.slice(nextOpen, tokenEnd);
+    const match = token.match(/^<\s*(\/?)\s*(style|script)\b/i);
+    if (match) {
+      const closing = match[1] === "/";
+      const tag = match[2]!.toLowerCase() as "style" | "script";
+      if (closing) severity += 1;
+      else {
+        active = tag;
+        bodyStart = tokenEnd;
+      }
     }
+    cursor = Math.max(tokenEnd, nextOpen + 1);
   }
   if (active) bodyRanges.push({ start: bodyStart, end: value.length });
   return { severity: severity + (active ? 1 : 0), bodyRanges };
@@ -182,6 +276,7 @@ function markerCounts(
       value,
       new RegExp(`<${tag}\\b[^>]*\\b${escapedMarker}\\b[^>]*>`, "gi"),
       ranges,
+      true,
     ),
   };
 }

package/corpus/templates/dispatch/AGENTS.md

@@ -31,13 +31,21 @@ specific essentials.
   setup item is unclear.
 - Keep approval and routing behavior explicit. Never silently widen access to
   secrets, apps, integrations, or workspace resources.
+- `/operations` is the focused operator console. Its Monitoring tab reuses the
+  shared observability dashboard for traces, conversations, evaluations,
+  experiments, and feedback; its Database tab reuses the Code-mode database
+  admin. Use `navigate --view operations|monitoring|observability|database` and
+  `view-screen` to align with the active tab. Use Thread Debug, Audit, and
+  Destinations for concrete thread, change-history, and delivery investigations;
+  Dispatch does not invent a separate issue tracker when those framework
+  surfaces contain the operational evidence.
 
 ## Application State
 
 - `navigation` exposes current Dispatch view, selected integration/resource,
   approval, route, or settings panel.
-- `navigate` moves the UI to setup, vault, integrations, resources, routing, and
-  approval surfaces.
+- `navigate` moves the UI to setup, vault, integrations, resources, routing,
+  approval, and operator surfaces.
 
 ## Skills
 

package/corpus/templates/dispatch/actions/view-screen.ts

@@ -64,6 +64,17 @@ export default defineAction({
       screen.connectedAgents = connectedAgents;
       screen.mcpAppAccess = mcpAccess;
     }
+    if (navigation?.view === "operations") {
+      const nav = navigation as { operationsView?: string };
+      screen.operatorConsole = {
+        view: nav.operationsView === "database" ? "database" : "monitoring",
+        monitoring:
+          "The shared observability dashboard provides traces, conversations, evaluations, experiments, and feedback.",
+        database:
+          "The shared database admin is available in Code mode for table browsing and SQL inspection.",
+        relatedTools: ["thread-debug", "audit", "destinations", "automations"],
+      };
+    }
     if (
       navigation?.view === "overview" ||
       navigation?.view === "metrics" ||

package/corpus/templates/dispatch/app/hooks/use-navigation-state.ts

@@ -20,6 +20,7 @@ export interface NavigationState {
   dreamId?: string;
   sourceId?: string;
   query?: string;
+  operationsView?: "monitoring" | "database";
 }
 
 export function useNavigationState(extensions?: DispatchExtensionConfig) {
@@ -92,6 +93,12 @@ export function buildDispatchNavigationState(
     if (query) state.query = query;
   }
 
+  if (state.view === "operations") {
+    const params = new URLSearchParams(search);
+    state.operationsView =
+      params.get("view") === "database" ? "database" : "monitoring";
+  }
+
   return state;
 }
 
@@ -153,6 +160,7 @@ function resolveView(
   }
   if (pathname.startsWith("/chat")) return "chat";
   if (pathname.startsWith("/apps")) return "apps";
+  if (pathname.startsWith("/operations")) return "operations";
   if (pathname.startsWith("/metrics")) return "metrics";
   if (pathname.startsWith("/new-app")) return "new-app";
   if (pathname.startsWith("/vault")) return "vault";
@@ -183,6 +191,11 @@ function resolvePath(
       return "/overview";
     case "apps":
       return "/apps";
+    case "operations":
+    case "monitoring":
+    case "observability":
+    case "database":
+      return view === "database" ? "/operations?view=database" : "/operations";
     case "metrics":
     case "usage":
       return "/metrics";

package/corpus/templates/dispatch/app/i18n/zh-TW.ts

@@ -253,9 +253,12 @@ const messages = {
       agents: "代理",
       vault: "保管庫",
       audit: "稽核",
+      operations: "營運",
     },
     pages: {
       also: "還有",
+      monitoring: "監控",
+      database: "資料庫",
       workspaceShortcutsAria: "工作區快捷入口",
       deliveryQueue: "投遞佇列",
       failedLastHour: "過去一小時失敗 {{count}} 次",

package/corpus/templates/dispatch/app/i18n-data.ts

@@ -271,9 +271,12 @@ const enUS = {
       agents: "Agents",
       vault: "Vault",
       audit: "Audit",
+      operations: "Operations",
     },
     pages: {
       also: "Also",
+      monitoring: "Monitoring",
+      database: "Database",
       workspaceShortcutsAria: "Workspace shortcuts",
       deliveryQueue: "Delivery queue",
       failedLastHour: "{{count}} failed in the last hour",
@@ -300,7 +303,13 @@ type PartialMessages = {
         managed?: Partial<Messages["messaging"]["managed"]> &
           Record<string, unknown>;
       } & Record<string, unknown>
-    : Partial<Messages[K]> & Record<string, unknown>;
+    : K extends "dispatch"
+      ? {
+          nav?: Partial<Messages["dispatch"]["nav"]> & Record<string, unknown>;
+          pages?: Partial<Messages["dispatch"]["pages"]> &
+            Record<string, unknown>;
+        } & Record<string, unknown>
+      : Partial<Messages[K]> & Record<string, unknown>;
 };
 
 function mergeMessages(overrides: PartialMessages): Messages {
@@ -635,9 +644,12 @@ export const messagesByLocale = {
         agents: "代理",
         vault: "保险库",
         audit: "审计",
+        operations: "运营",
       },
       pages: {
         also: "还有",
+        monitoring: "监控",
+        database: "数据库",
         workspaceShortcutsAria: "工作区快捷入口",
         deliveryQueue: "投递队列",
         failedLastHour: "过去一小时失败 {{count}} 次",
@@ -941,9 +953,12 @@ export const messagesByLocale = {
         agents: "Agentes",
         vault: "Bóveda",
         audit: "Auditoría",
+        operations: "Operaciones",
       },
       pages: {
         also: "También",
+        monitoring: "Monitorización",
+        database: "Base de datos",
         workspaceShortcutsAria: "Accesos directos del espacio de trabajo",
         deliveryQueue: "Cola de entrega",
         failedLastHour: "{{count}} fallos en la última hora",
@@ -1248,9 +1263,12 @@ export const messagesByLocale = {
         agents: "Agents",
         vault: "Coffre",
         audit: "Audit",
+        operations: "Opérations",
       },
       pages: {
         also: "Aussi",
+        monitoring: "Surveillance",
+        database: "Base de données",
         workspaceShortcutsAria: "Raccourcis de l’espace de travail",
         deliveryQueue: "File de livraison",
         failedLastHour: "{{count}} échecs au cours de la dernière heure",
@@ -1544,9 +1562,12 @@ export const messagesByLocale = {
         agents: "Agenten",
         vault: "Tresor",
         audit: "Audit",
+        operations: "Betrieb",
       },
       pages: {
         also: "Außerdem",
+        monitoring: "Überwachung",
+        database: "Datenbank",
         workspaceShortcutsAria: "Workspace-Kurzbefehle",
         deliveryQueue: "Zustellungswarteschlange",
         failedLastHour: "{{count}} fehlgeschlagen in der letzten Stunde",
@@ -1837,9 +1858,12 @@ export const messagesByLocale = {
         agents: "エージェント",
         vault: "ボールト",
         audit: "監査",
+        operations: "運用",
       },
       pages: {
         also: "その他",
+        monitoring: "監視",
+        database: "データベース",
         workspaceShortcutsAria: "ワークスペースのショートカット",
         deliveryQueue: "配信キュー",
         failedLastHour: "過去 1 時間で {{count}} 件失敗",
@@ -2127,9 +2151,12 @@ export const messagesByLocale = {
         agents: "에이전트",
         vault: "볼트",
         audit: "감사",
+        operations: "운영",
       },
       pages: {
         also: "또한",
+        monitoring: "모니터링",
+        database: "데이터베이스",
         workspaceShortcutsAria: "워크스페이스 바로가기",
         deliveryQueue: "전달 대기열",
         failedLastHour: "지난 1시간 동안 {{count}}건 실패",
@@ -2429,9 +2456,12 @@ export const messagesByLocale = {
         agents: "Agentes",
         vault: "Cofre",
         audit: "Auditoria",
+        operations: "Operações",
       },
       pages: {
         also: "Também",
+        monitoring: "Monitoramento",
+        database: "Banco de dados",
         workspaceShortcutsAria: "Atalhos do espaço de trabalho",
         deliveryQueue: "Fila de entrega",
         failedLastHour: "{{count}} falhas na última hora",
@@ -2714,9 +2744,12 @@ export const messagesByLocale = {
         agents: "एजेंट",
         vault: "वॉल्ट",
         audit: "ऑडिट",
+        operations: "संचालन",
       },
       pages: {
         also: "और भी",
+        monitoring: "निगरानी",
+        database: "डेटाबेस",
         workspaceShortcutsAria: "कार्यस्थान शॉर्टकट",
         deliveryQueue: "डिलीवरी कतार",
         failedLastHour: "पिछले घंटे में {{count}} विफल",
@@ -3037,9 +3070,12 @@ export const messagesByLocale = {
         agents: "الوكلاء",
         vault: "الخزنة",
         audit: "التدقيق",
+        operations: "التشغيل",
       },
       pages: {
         also: "أيضًا",
+        monitoring: "المراقبة",
+        database: "قاعدة البيانات",
         workspaceShortcutsAria: "اختصارات مساحة العمل",
         deliveryQueue: "قائمة انتظار التسليم",
         failedLastHour: "{{count}} فشل خلال الساعة الماضية",

package/corpus/templates/dispatch/app/routes/operations.tsx

@@ -0,0 +1 @@
+export { default, meta } from "@agent-native/dispatch/routes/pages/operations";

package/corpus/templates/dispatch/changelog/2026-07-10-dispatch-now-has-a-cleaner-chat-history-and-quieter-sidebar-.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-10
+---
+
+Dispatch now has a cleaner chat history and quieter sidebar identity.

package/corpus/templates/dispatch/changelog/2026-07-10-operations-console-brings-agent-monitoring-and-database-inspection-tog.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-10
+---
+
+Dispatch now groups its workspace controls more clearly and adds an Operations console for agent monitoring, experiments, feedback, and Code-mode database inspection.

package/corpus/templates/mail/actions/get-integration-statuses.ts

@@ -0,0 +1,36 @@
+import { defineAction } from "@agent-native/core";
+import { appStateGetMany } from "@agent-native/core/application-state";
+import { getRequestUserEmail } from "@agent-native/core/server";
+import { z } from "zod";
+
+const PROVIDERS = ["apollo", "hubspot", "gong", "pylon"] as const;
+
+function hasConfiguredKey(value: Record<string, unknown> | null): boolean {
+  return typeof value?.apiKey === "string" && value.apiKey.trim().length > 0;
+}
+
+export default defineAction({
+  description:
+    "Read which optional Mail contact-sidebar integrations are configured without returning credential values.",
+  schema: z.object({}),
+  outputSchema: z.object({
+    apollo: z.boolean(),
+    hubspot: z.boolean(),
+    gong: z.boolean(),
+    pylon: z.boolean(),
+  }),
+  http: { method: "GET" },
+  readOnly: true,
+  agentTool: false,
+  run: async () => {
+    const ownerEmail = getRequestUserEmail();
+    if (!ownerEmail) throw new Error("no authenticated user");
+    const states = await appStateGetMany(ownerEmail, PROVIDERS);
+    return {
+      apollo: hasConfiguredKey(states.apollo),
+      hubspot: hasConfiguredKey(states.hubspot),
+      gong: hasConfiguredKey(states.gong),
+      pylon: hasConfiguredKey(states.pylon),
+    };
+  },
+});

package/corpus/templates/mail/app/components/email/EmailThread.tsx

@@ -2204,8 +2204,9 @@ function PlainTextBody({
 
 // ─── HTML email body (iframe) ────────────────────────────────────────────────
 
-// Match the expanded card bg: hsl(220, 5%, 10%) ≈ #17181a
-const IFRAME_BG_DARK = "#17181a";
+// Let normalized dark-mode emails inherit the message card's themed surface.
+// The iframe and its document are transparent, so theme token changes stay in sync.
+const IFRAME_BG_DARK = "transparent";
 const IFRAME_BG_LIGHT = "#ffffff";
 
 // ─── Color utilities for dark-mode email processing ─────────────────────────

package/corpus/templates/mail/app/components/email/IntegrationsSidebar.tsx

@@ -35,6 +35,7 @@ import {
   usePylonContact,
   isAuthError,
 } from "@/hooks/use-integrations";
+import type { MailIntegrationStatuses } from "@/lib/integration-status";
 import { isMcpEmbedSurface } from "@/lib/mcp-embed";
 import { cn } from "@/lib/utils";
 
@@ -259,17 +260,16 @@ export function IntegrationsSidebar({
 
       {/* Integration setup */}
       <div className="h-px bg-border/30 mx-4" />
-      <IntegrationSetup />
+      <IntegrationSetup statuses={statuses} />
     </div>
   );
 }
 
 // ─── Integration Setup ──────────────────────────────────────────────────────
 
-function IntegrationSetup() {
+function IntegrationSetup({ statuses }: { statuses: MailIntegrationStatuses }) {
   const [expanded, setExpanded] = useState(false);
   const [configuring, setConfiguring] = useState<ProviderId | null>(null);
-  const statuses = useAllIntegrations();
 
   if (configuring) {
     const def = INTEGRATIONS.find((i) => i.id === configuring)!;