@agent-native/core 0.0.0-beta-20260819181349 → 0.0.0-beta-20260819183007

package/corpus/README.md

@@ -31,4 +31,4 @@ rg -n "defineAction|useActionQuery" node_modules/@agent-native/core/corpus
 
 ## Generated Counts
 
-- template files: 8458
+- template files: 8459

package/corpus/templates/plan/app/pages/PlansPage.tsx

@@ -1,6 +1,5 @@
 import {
   SIDEBAR_STATE_CHANGE_EVENT,
-  BuilderSetupCard,
   sendToAgentChat,
   setAgentChatContextItem,
   useAgentEngineConfigured,
@@ -8466,23 +8465,12 @@ function CreatePlanDialog({
           </DialogDescription>
         </DialogHeader>
         <div className="grid gap-3">
-          {canCreate && agentMissing ? (
-            <BuilderSetupCard
-              fullWidth
-              onConnected={() =>
-                window.dispatchEvent(
-                  new Event("agent-engine:configured-changed"),
-                )
-              }
-            />
-          ) : null}
           <div className="rounded-xl border border-border bg-background p-2 shadow-sm">
             <PromptComposer
               autoFocus
               disabled={composerLocked}
               attachmentsEnabled={false}
               showModelSelector={false}
-              modelStatusChecksEnabled={false}
               placeholder={t("plansPage.create.placeholder")}
               draftScope="plans:create-plan"
               initialText={promptSeed}

package/corpus/templates/plan/changelog/2026-08-19-plan-prompts-now-guide-you-to-connect-ai-before-sending-and-.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-08-19
+---
+
+Plan prompts now guide you to connect AI before sending and offer a clear retry after setup.

package/dist/a2a/task-store.d.ts

@@ -1,6 +1,7 @@
 import type { Task, Message, TaskState, Artifact } from "./types.js";
 export declare const MAX_A2A_IDEMPOTENCY_KEY_CHARS = 128;
 export declare const A2A_PERSONAL_OWNER_SCOPE = "__personal__";
+export declare function ensureTable(): Promise<void>;
 export interface A2AApprovalRecord {
     id: string;
     taskId: string;

package/dist/a2a/task-store.js

@@ -5,7 +5,7 @@ let _initPromise;
 export const MAX_A2A_IDEMPOTENCY_KEY_CHARS = 128;
 const A2A_IDEMPOTENCY_INDEX = "idx_a2a_tasks_owner_scope_idempotency";
 export const A2A_PERSONAL_OWNER_SCOPE = "__personal__";
-async function ensureTable() {
+export async function ensureTable() {
     if (!_initPromise) {
         _initPromise = (async () => {
             const client = getDbExec();

package/dist/agent/observational-memory/store.d.ts

@@ -12,6 +12,7 @@
  * runtime even before the migration plugin is registered.
  */
 import type { ObservationalMemoryEntry, ObservationalMemoryOwner, ObservationalMemoryTier } from "./types.js";
+export declare function ensureTable(): Promise<void>;
 /** Reset the cached ensureTable promise — test-only seam. */
 export declare function __resetObservationalMemoryTableCache(): void;
 export interface InsertObservationalMemoryInput extends ObservationalMemoryOwner {

package/dist/agent/observational-memory/store.js

@@ -14,7 +14,7 @@
 import { getDbExec, isPostgres } from "../../db/client.js";
 import { ensureTableExists, ensureIndexExists } from "../../db/ddl-guard.js";
 let tableReady = null;
-async function ensureTable() {
+export async function ensureTable() {
     if (tableReady)
         return tableReady;
     tableReady = (async () => {

package/dist/agent/run-store.d.ts

@@ -217,6 +217,7 @@ export declare const IN_FLIGHT_RUN_STALE_GRACE_MS: number;
  * is reaped like any other stale run.
  */
 export declare const IN_FLIGHT_GRACE_MAX_LIVENESS_GAP_MS = 120000;
+export declare function ensureRunTables(): Promise<void>;
 /**
  * Persist a zombie tool-call completion to the ledger. Called by the detached
  * promise continuation after `Promise.race` abandons it. Best-effort — never

package/dist/agent/run-store.js

@@ -294,7 +294,7 @@ export const IN_FLIGHT_RUN_STALE_GRACE_MS = 14.5 * 60_000; // 870_000
  * is reaped like any other stale run.
  */
 export const IN_FLIGHT_GRACE_MAX_LIVENESS_GAP_MS = 120_000;
-async function ensureRunTables() {
+export async function ensureRunTables() {
     if (!_initPromise) {
         _initPromise = (async () => {
             const client = getDbExec();

package/dist/agent/tool-approval-store.d.ts

@@ -1,3 +1,4 @@
+export declare function ensureAgentToolApprovalTable(): Promise<void>;
 export interface AgentToolApprovalBinding {
     ownerEmail: string;
     orgId?: string | null;

package/dist/agent/tool-approval-store.js

@@ -11,7 +11,7 @@ import { AGENT_TOOL_APPROVAL_INDEX_SQL, AGENT_TOOL_APPROVAL_LOGICAL_INDEX_SQL, A
 const APPROVAL_TTL_MS = 60 * 60_000;
 const APPROVAL_CLEANUP_AGE_MS = 24 * 60 * 60_000;
 let initPromise;
-async function ensureAgentToolApprovalTable() {
+export async function ensureAgentToolApprovalTable() {
     if (!initPromise) {
         initPromise = (async () => {
             const createSql = AGENT_TOOL_APPROVAL_TABLE_SQL[isPostgres() ? "postgres" : "sqlite"];

package/dist/application-state/store.d.ts

@@ -1,4 +1,5 @@
 import type { StoreWriteOptions } from "../settings/store.js";
+export declare function ensureTable(): Promise<void>;
 export declare function appStateGet(sessionId: string, key: string): Promise<Record<string, unknown> | null>;
 /**
  * Read several application-state keys for one session in a single SQL query,

package/dist/application-state/store.js

@@ -11,7 +11,7 @@ const MAX_HOSTED_APP_STATE_VALUE_BYTES = 1024 * 1024;
 function escapeLike(s) {
     return s.replace(/[!%_]/g, (match) => `!${match}`);
 }
-async function ensureTable() {
+export async function ensureTable() {
     if (!_initPromise) {
         _initPromise = (async () => {
             const client = getDbExec();

package/dist/browser-sessions/store.d.ts

@@ -2,6 +2,7 @@ import type { AgentNativeBrowserSessionRecord, AgentNativeBrowserSessionRequest,
 export declare const DEFAULT_BROWSER_SESSION_TTL_MS = 45000;
 export declare const DEFAULT_BROWSER_SESSION_REQUEST_TIMEOUT_MS = 30000;
 export declare const DEFAULT_BROWSER_SESSION_REQUEST_POLL_MS = 250;
+export declare function ensureTables(): Promise<void>;
 export declare function registerBrowserSession(ownerEmailInput: string, input: RegisterAgentNativeBrowserSessionInput): Promise<AgentNativeBrowserSessionRecord>;
 export declare function listBrowserSessions(ownerEmailInput: string, options?: {
     includeExpired?: boolean;

package/dist/browser-sessions/store.js

@@ -13,7 +13,7 @@ function nowMs() {
 function sleep(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
 }
-async function ensureTables() {
+export async function ensureTables() {
     if (!initPromise) {
         initPromise = (async () => {
             const client = getDbExec();

package/dist/checkpoints/store.d.ts

@@ -1,3 +1,4 @@
+export declare function ensureCheckpointTable(): Promise<void>;
 export declare function insertCheckpoint(id: string, threadId: string, runId: string | null, commitSha: string, message: string): Promise<void>;
 export declare function getCheckpointsByThread(threadId: string): Promise<Array<{
     id: string;

package/dist/checkpoints/store.js

@@ -1,7 +1,7 @@
 import { getDbExec, intType, isPostgres } from "../db/client.js";
 import { ensureIndexExists, ensureTableExists } from "../db/ddl-guard.js";
 let _initPromise;
-async function ensureCheckpointTable() {
+export async function ensureCheckpointTable() {
     if (!_initPromise) {
         _initPromise = (async () => {
             const client = getDbExec();

package/dist/client/agent-chat-adapter.js

@@ -1429,6 +1429,16 @@ function isMissingCredentialMessage(message) {
         msg.includes("no llm provider") ||
         msg.includes("llm provider is connected"));
 }
+function isMissingProviderErrorMessage(message, errorCode) {
+    const text = message.toLowerCase();
+    const code = (errorCode ?? "").toLowerCase();
+    return (text.includes("no llm provider") ||
+        text.includes("missing credentials") ||
+        text.includes("missing api key") ||
+        text.includes("missing_api_key") ||
+        ((code === "missing_credentials" || code === "missing_api_key") &&
+            text.includes("llm provider")));
+}
 function missingCredentialFailure(message) {
     try {
         const parsed = JSON.parse(message);
@@ -1439,9 +1449,10 @@ function missingCredentialFailure(message) {
                 : message;
         const errorCode = typeof parsed.errorCode === "string"
             ? parsed.errorCode
-            : "missing_credentials";
+            : isMissingCredentialMessage(raw)
+                ? "missing_credentials"
+                : "authentication_error";
         return {
-            text: formatChatErrorText(raw, typeof parsed.upgradeUrl === "string" ? parsed.upgradeUrl : undefined, errorCode),
             runError: {
                 message: normalizeChatError(raw).message,
                 errorCode,
@@ -1450,10 +1461,11 @@ function missingCredentialFailure(message) {
     }
     catch {
         return {
-            text: formatChatErrorText(message, undefined, "missing_credentials"),
             runError: {
                 message: normalizeChatError(message).message,
-                errorCode: "missing_credentials",
+                errorCode: isMissingCredentialMessage(message)
+                    ? "missing_credentials"
+                    : "authentication_error",
             },
         };
     }
@@ -2290,10 +2302,12 @@ export function createAgentChatAdapter(options) {
                     settleInterruptedToolCalls(content, undefined, {
                         includeActivity: true,
                     });
-                    content.push({
-                        type: "text",
-                        text: formatChatErrorText(args.message, undefined, args.errorCode),
-                    });
+                    if (!isMissingProviderErrorMessage(args.message, args.errorCode)) {
+                        content.push({
+                            type: "text",
+                            text: formatChatErrorText(args.message, undefined, args.errorCode),
+                        });
+                    }
                     settleTerminalChatRun();
                     yield {
                         content: [...content],
@@ -3351,7 +3365,6 @@ export function createAgentChatAdapter(options) {
                                             detail: { ...failure.runError, tabId },
                                         }));
                                     }
-                                    content.push({ type: "text", text: failure.text });
                                     settleTerminalChatRun();
                                     yield {
                                         content: [...content],
@@ -3664,7 +3677,6 @@ export function createAgentChatAdapter(options) {
                                     detail: { ...failure.runError, tabId },
                                 }));
                             }
-                            content.push({ type: "text", text: failure.text });
                             settleTerminalChatRun();
                             yield {
                                 content: [...content],

package/dist/client/chat/message-components.d.ts

@@ -71,6 +71,10 @@ export declare function MessageActionsMenu({ showRevert, onRevert, threadId, }?:
 export declare function UserMessage(): React.JSX.Element | null;
 export declare function messageTextFromContent(content: unknown): string;
 export declare function isMissingFinalResponseWarningText(text: string): boolean;
+export declare function isMissingCredentialAssistantMessage(message: {
+    content?: unknown;
+    metadata?: unknown;
+}): boolean;
 export declare function latestUserMessageText(messages: readonly unknown[]): string;
 export declare function userMessageTextBeforeAssistant(messages: readonly unknown[], assistantMessageId: string): string;
 export declare function assistantMessageHasUnresolvedTool(content: unknown): boolean;

package/dist/client/chat/message-components.js

@@ -539,6 +539,32 @@ function missingFinalResponseWarningText(content) {
     }
     return null;
 }
+export function isMissingCredentialAssistantMessage(message) {
+    const metadata = message.metadata;
+    const runError = metadata?.custom?.runError ?? metadata?.runError;
+    const errorCode = typeof runError?.errorCode === "string"
+        ? runError.errorCode.toLowerCase()
+        : "";
+    const errorMessage = typeof runError?.message === "string" ? runError.message : "";
+    if (/no llm provider(?: key)? (?:is connected|was found)|missing credentials|missing api key|missing_api_key/i.test(errorMessage) ||
+        ((errorCode === "missing_credentials" || errorCode === "missing_api_key") &&
+            !errorMessage &&
+            !message.content)) {
+        return true;
+    }
+    const text = Array.isArray(message.content)
+        ? message.content
+            .filter((part) => Boolean(part) &&
+            typeof part === "object" &&
+            part.type === "text" &&
+            typeof part.text === "string")
+            .map((part) => part.text)
+            .join("\n")
+        : typeof message.content === "string"
+            ? message.content
+            : "";
+    return /^Error:\s*(?:No LLM provider(?: key)? (?:is connected|was found))/i.test(text.trim());
+}
 export function latestUserMessageText(messages) {
     for (let index = messages.length - 1; index >= 0; index -= 1) {
         const message = messages[index];
@@ -847,6 +873,7 @@ export function AssistantMessage() {
     const activeTurnId = React.useContext(ChatRunningTurnIdContext);
     const lastRunDurationMs = React.useContext(ChatRunDurationContext);
     const msg = messageRuntime.getState();
+    const isMissingCredential = isMissingCredentialAssistantMessage(msg);
     const persistedDurationMs = getAssistantRunDurationMs(msg);
     const timestamp = formatMessageTimestamp(msg.createdAt, locale, t("agentChat.history.yesterday"));
     const isLast = msg.isLast;
@@ -1052,7 +1079,7 @@ export function AssistantMessage() {
         chatRunning,
         isLast,
     });
-    if (!hasRenderableContent)
+    if (!hasRenderableContent || isMissingCredential)
         return null;
     return (_jsxs("div", { className: "group relative", style: { contentVisibility: isComplete ? "auto" : "visible" }, children: [_jsxs("div", { className: "w-full max-w-[95%] text-sm leading-relaxed text-foreground", children: [isComplete && (_jsx(McpConnectionSuggestion, { text: responseConnectionText, contextText: responseConnectionContext, variant: "response" })), _jsx(ToolCallStackMotion, { children: _jsx(MessagePrimitive.GroupedParts, { groupBy: groupAssistantWorkParts, children: ({ part, children }) => {
                                 switch (part.type) {

package/dist/client/chat/run-recovery.js

@@ -112,6 +112,14 @@ function isConnectionRecoveryRunError(info) {
         message.includes("connection kept failing") ||
         message.includes("automatic recovery attempts"));
 }
+function isMissingLlmProviderRunError(info) {
+    const code = (info.errorCode ?? "").toLowerCase();
+    const text = [info.message, info.details].filter(Boolean).join("\n");
+    const hasCredentialSetupText = /no llm provider(?: key)? (?:is connected|was found)|missing credentials|missing api key|missing_api_key|(?:api[_ -]?key|auth[_ -]?token)\s*(?:(?:is|was)\s+)?(?:not\s+(?:set|configured|available|present|provided|found)|missing|unavailable|empty|unset|unconfigured)/i.test(text);
+    return (hasCredentialSetupText ||
+        ((code === "missing_credentials" || code === "missing_api_key") &&
+            !text.trim()));
+}
 // ─── BuilderConnectCta ────────────────────────────────────────────────────────
 // Renders a single row with left-aligned copy and a right-aligned action.
 // Click opens the Builder OAuth popup via the shared
@@ -194,11 +202,15 @@ export function RunErrorRecoveryCard({ info, onContinue, onRetry, onFork, onDism
     const [copyState, setCopyState] = useState("idle");
     const [forking, setForking] = useState(false);
     const [forkError, setForkError] = useState(null);
+    const [providerConnected, setProviderConnected] = useState(false);
+    const retryRequestedRef = useRef(false);
+    const [retryRequested, setRetryRequested] = useState(false);
     const builderReconnect = useBuilderConnectFlow({
         trackingSource: "assistant_chat_reconnect_error",
     });
     const canRecover = info.recoverable === true;
     const shouldShowBuilderReconnect = isBuilderReconnectRunError(info);
+    const shouldShowMissingProviderSetup = isMissingLlmProviderRunError(info);
     const isProviderAuthError = isProviderAuthenticationError([info.message, info.details].filter(Boolean).join("\n"), info.errorCode);
     // Blocked on something the reader goes and fixes elsewhere, then comes back
     // to. Without a retry the card is a dead end and its own copy ("then retry")
@@ -241,6 +253,17 @@ export function RunErrorRecoveryCard({ info, onContinue, onRetry, onFork, onDism
         onRetry();
         onDismiss();
     }, [onDismiss, onProviderConnected, onRetry]);
+    const handleMissingProviderConnected = useCallback(() => {
+        setProviderConnected(true);
+        onProviderConnected?.();
+    }, [onProviderConnected]);
+    const handleMissingProviderRetry = useCallback(() => {
+        if (retryRequestedRef.current)
+            return;
+        retryRequestedRef.current = true;
+        setRetryRequested(true);
+        onRetry();
+    }, [onRetry]);
     const handleFork = useCallback(async () => {
         if (!onFork || forking)
             return;
@@ -264,6 +287,9 @@ export function RunErrorRecoveryCard({ info, onContinue, onRetry, onFork, onDism
             onDismiss();
         }
     }, [builderReconnectResolved, onDismiss]);
+    if (shouldShowMissingProviderSetup) {
+        return (_jsxs("div", { className: "w-full", children: [_jsx(BuilderSetupCard, { fullWidth: true, layout: "sidebar", onConnected: handleMissingProviderConnected }), providerConnected ? (_jsx("div", { className: "flex justify-center px-3 pt-1", children: _jsxs("button", { type: "button", onClick: handleMissingProviderRetry, disabled: retryRequested, className: "inline-flex h-8 items-center gap-1.5 rounded-md bg-foreground px-3 text-xs font-medium text-background hover:opacity-90 disabled:cursor-wait disabled:opacity-60", children: [_jsx(IconRefresh, { size: 13 }), t("agentChat.common.retry")] }) })) : null] }));
+    }
     return (_jsxs("div", { className: "rounded-lg border border-amber-500/25 bg-amber-500/[0.06] p-3 text-sm", children: [_jsxs("div", { className: "flex items-start gap-2", children: [_jsx("span", { className: "mt-0.5 flex h-6 w-6 shrink-0 items-center justify-center rounded-md bg-amber-500/10 text-amber-700 dark:text-amber-300", children: _jsx(IconAlertTriangle, { size: 14 }) }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx("div", { className: "font-medium text-foreground", children: runErrorHeadline(info, {
                                     recoverable: t("agentChat.error.stopped"),
                                     terminal: t("agentChat.error.failed"),

package/dist/client/sse-event-processor.js

@@ -605,6 +605,12 @@ function isMissingCredentialText(message, errorCode) {
         msg.includes("no llm provider") ||
         msg.includes("llm provider is connected"));
 }
+function isMissingProviderErrorText(message, errorCode) {
+    const code = String(errorCode ?? "").toLowerCase();
+    return (code === "missing_api_key" ||
+        code === "missing_credentials" ||
+        /no llm provider(?: key)? (?:is connected|was found)/i.test(message));
+}
 function dispatchActivityClear(tabId) {
     if (typeof window === "undefined")
         return;
@@ -1389,10 +1395,6 @@ export function processEvent(ev, content, toolCallCounter, tabId, state) {
         // the last preparation activity, so do not leave its label mounted.
         dispatchActivityClear(tabId);
         settleInterruptedToolCalls(content, undefined, { includeActivity: true });
-        content.push({
-            type: "text",
-            text: formatChatErrorText(errMsg, undefined, errorCode),
-        });
         return {
             action: "missing_api_key",
             result: {
@@ -1472,6 +1474,7 @@ export function processEvent(ev, content, toolCallCounter, tabId, state) {
             };
         }
         const normalized = normalizeChatError(errMsg, ev.errorCode);
+        const missingProviderError = isMissingProviderErrorText(errMsg, ev.errorCode);
         if (isMissingCredentialText(errMsg, ev.errorCode)) {
             dispatchMissingApiKey(tabId);
         }
@@ -1492,10 +1495,12 @@ export function processEvent(ev, content, toolCallCounter, tabId, state) {
             }));
         }
         settleInterruptedToolCalls(content, undefined, { includeActivity: true });
-        content.push({
-            type: "text",
-            text: formatChatErrorText(errMsg, ev.upgradeUrl, ev.errorCode),
-        });
+        if (!missingProviderError) {
+            content.push({
+                type: "text",
+                text: formatChatErrorText(errMsg, ev.upgradeUrl, ev.errorCode),
+            });
+        }
         return {
             action: "error",
             result: {

package/dist/coding-tools/sandbox/executions-store.d.ts

@@ -84,6 +84,7 @@ export declare const SANDBOX_EXECUTION_DEFAULT_MAX_ATTEMPTS = 2;
  * the caller's `maxOutputChars`) is applied first; this bounds even that.
  */
 export declare const SANDBOX_EXECUTION_MAX_STORED_OUTPUT_CHARS = 200000;
+export declare function ensureTable(): Promise<void>;
 /** Test-only: forget the memoized init so a fresh in-memory DB re-creates. */
 export declare function resetSandboxExecutionsStoreForTests(): void;
 /** Enqueue a new execution row in `queued` state. */

package/dist/coding-tools/sandbox/executions-store.js

@@ -40,7 +40,7 @@ export const SANDBOX_EXECUTION_DEFAULT_MAX_ATTEMPTS = 2;
 export const SANDBOX_EXECUTION_MAX_STORED_OUTPUT_CHARS = 200_000;
 const TABLE = "sandbox_executions";
 let _initPromise;
-async function ensureTable() {
+export async function ensureTable() {
     if (!_initPromise) {
         _initPromise = _doEnsureTable().catch((err) => {
             // Don't cache the rejection — let the next caller retry a fresh init.

package/dist/collab/awareness-store.d.ts

@@ -14,6 +14,7 @@
  * state hasn't changed; expired rows are purged opportunistically.
  */
 import type { AwarenessEntry } from "./awareness.js";
+export declare function ensureTable(): Promise<void>;
 /**
  * Mirror a client's awareness state to SQL. Throttled: unchanged state is
  * rewritten at most every {@link WRITE_THROTTLE_MS} (to refresh last_seen).

package/dist/collab/awareness-store.js

@@ -22,7 +22,7 @@ const WRITE_THROTTLE_MS = 2_000;
 /** Minimum interval between opportunistic purges per document. */
 const PURGE_INTERVAL_MS = 30_000;
 let _initPromise;
-async function ensureTable() {
+export async function ensureTable() {
     if (!_initPromise) {
         _initPromise = (async () => {
             const client = getDbExec();

package/dist/collab/awareness.d.ts

@@ -62,11 +62,11 @@ export declare const postAwareness: import("h3").EventHandlerWithFetch<import("h
     error: string;
     states?: undefined;
 } | {
-    error?: undefined;
     states: {
         clientId: number;
         state: string;
     }[];
+    error?: undefined;
 }>>;
 /**
  * GET /_agent-native/collab/:docId/users
@@ -77,9 +77,9 @@ export declare const getActiveUsers: import("h3").EventHandlerWithFetch<import("
     error: string;
     users?: undefined;
 } | {
-    error?: undefined;
     users: {
         clientId: number;
         lastSeen: number;
     }[];
+    error?: undefined;
 }>>;

package/dist/collab/routes.d.ts

@@ -26,8 +26,8 @@ export declare const getCollabState: import("h3").EventHandlerWithFetch<import("
  * Body: { update: string (base64), requestSource?: string }
  */
 export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/collab/storage.d.ts

@@ -4,6 +4,7 @@
  * Uses a framework-level `_collab_docs` table (TEXT columns with base64
  * encoding for binary Yjs state) that works across SQLite and Postgres.
  */
+export declare function ensureTable(): Promise<void>;
 export interface YDocStateRecord {
     state: Uint8Array;
     version: number;

package/dist/collab/storage.js

@@ -33,7 +33,7 @@ async function executeWithSqliteRetry(client, statement) {
         }
     }
 }
-async function ensureTable() {
+export async function ensureTable() {
     if (!_initPromise) {
         _initPromise = (async () => {
             const client = getDbExec();

package/dist/collab/struct-routes.d.ts

@@ -13,8 +13,8 @@
  * Body: { json: any, fieldName?: string, type?: "map"|"array", requestSource?: string }
  */
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/db/client.js

@@ -1,3 +1,4 @@
+import path from "path";
 /**
  * Central database client abstraction.
  *
@@ -8,7 +9,7 @@
  * (dynamic import) so this module can be loaded in any runtime (Node.js,
  * Cloudflare Workers, edge) without failing on missing native deps.
  */
-import path from "path";
+import { isMigrationAuthorizedRuntime } from "./migration-runtime.js";
 import { beginDatabaseOperation, recordDatabaseRetry, } from "./request-telemetry.js";
 const recyclingPostgresPools = new WeakSet();
 const loggedNeonPools = new WeakSet();
@@ -803,9 +804,8 @@ export function isSchemaMutationStatement(statement) {
  * is the only supported production opt-in.
  */
 export function assertSchemaMutationAllowed(statement) {
-    const migrationRuntime = globalThis.__AGENT_NATIVE_MIGRATION_RUNTIME__ === true;
     if (isProductionServerlessFunctionRuntime() &&
-        !migrationRuntime &&
+        !isMigrationAuthorizedRuntime() &&
         isSchemaMutationStatement(statement)) {
         throw new Error("Schema mutation attempted in a production serverless request. Run migrations in the release job instead.");
     }

package/dist/db/ddl-guard.js

@@ -29,6 +29,7 @@
  * behaviour there.
  */
 import { getDbExec, isPostgres, isProductionServerlessFunctionRuntime, } from "./client.js";
+import { isMigrationAuthorizedRuntime } from "./migration-runtime.js";
 const PLAIN_IDENTIFIER = /^[A-Za-z_][A-Za-z0-9_]*$/;
 /**
  * Skip on-demand schema DDL entirely. For deployments that run real migrations,
@@ -45,6 +46,13 @@ const PLAIN_IDENTIFIER = /^[A-Za-z_][A-Za-z0-9_]*$/;
  * down the DDL path this flag exists to avoid.
  */
 function schemaEnsureDisabled() {
+    // The release runner is the deployment that OWNS schema creation, so it is the
+    // one caller that must never be skipped. Without this, the skip below applies
+    // to `migrate:production` too — the Netlify build environment also sets
+    // `NETLIFY=true` — and the release step reports success having created
+    // nothing.
+    if (isMigrationAuthorizedRuntime())
+        return false;
     if (isProductionServerlessFunctionRuntime())
         return true;
     const raw = process.env.AGENT_NATIVE_SKIP_ENSURE_TABLES?.trim();

package/dist/db/migration-runtime.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Migration duty: the process-local claim that the current call is allowed to
+ * create or alter schema.
+ *
+ * Its own module, and deliberately dependency-free, because both `./client.js`
+ * and `./ddl-guard.js` need to read it. Putting the reader on `client.js` would
+ * mean every `vi.mock("../db/client.js")` in the codebase has to stub one more
+ * export to keep `ensureTable()` working — the exact coupling `ddl-guard.ts`
+ * was split out to avoid.
+ */
+/**
+ * A runtime that is ALLOWED to migrate: release scripts, scheduled jobs, and
+ * durable background workers, which are off the request path and may take as
+ * long as they need. Claimed with {@link withMigrationRuntime}.
+ */
+export declare function isMigrationAuthorizedRuntime(): boolean;
+/**
+ * Run an explicit release-time migration job with migration duty enabled.
+ *
+ * The flag is process-local and restored even when the job fails, so a build
+ * step can opt in without creating a permanent escape hatch for request code.
+ */
+export declare function withMigrationRuntime<T>(run: () => Promise<T>): Promise<T>;

package/dist/db/migration-runtime.js

@@ -0,0 +1,41 @@
+/**
+ * Migration duty: the process-local claim that the current call is allowed to
+ * create or alter schema.
+ *
+ * Its own module, and deliberately dependency-free, because both `./client.js`
+ * and `./ddl-guard.js` need to read it. Putting the reader on `client.js` would
+ * mean every `vi.mock("../db/client.js")` in the codebase has to stub one more
+ * export to keep `ensureTable()` working — the exact coupling `ddl-guard.ts`
+ * was split out to avoid.
+ */
+/**
+ * A runtime that is ALLOWED to migrate: release scripts, scheduled jobs, and
+ * durable background workers, which are off the request path and may take as
+ * long as they need. Claimed with {@link withMigrationRuntime}.
+ */
+export function isMigrationAuthorizedRuntime() {
+    return (globalThis
+        .__AGENT_NATIVE_MIGRATION_RUNTIME__ === true);
+}
+/**
+ * Run an explicit release-time migration job with migration duty enabled.
+ *
+ * The flag is process-local and restored even when the job fails, so a build
+ * step can opt in without creating a permanent escape hatch for request code.
+ */
+export async function withMigrationRuntime(run) {
+    const runtime = globalThis;
+    const previous = runtime.__AGENT_NATIVE_MIGRATION_RUNTIME__;
+    runtime.__AGENT_NATIVE_MIGRATION_RUNTIME__ = true;
+    try {
+        return await run();
+    }
+    finally {
+        if (previous === undefined) {
+            delete runtime.__AGENT_NATIVE_MIGRATION_RUNTIME__;
+        }
+        else {
+            runtime.__AGENT_NATIVE_MIGRATION_RUNTIME__ = previous;
+        }
+    }
+}