@agent-native/core 0.0.0-beta-20260820071604 → 0.0.0-beta-20260820115430

package/corpus/templates/clips/netlify.toml

@@ -1,6 +1,6 @@
 [build]
 ignore = "node ./scripts/netlify-ignore-build.mjs clips"
-command = "export DATABASE_URL=${NETLIFY_DATABASE_URL:-$DATABASE_URL} && pnpm install && NITRO_PRESET=netlify pnpm --filter clips build && pnpm exec tsx templates/clips/jobs/emit-netlify-brain-export-cron.ts && if [ \"${CONTEXT:-}\" = \"production\" ]; then pnpm --filter clips migrate:production; fi"
+command = "export DATABASE_URL=${NETLIFY_DATABASE_URL:-$DATABASE_URL} && if [ \"${agentNativePrebuiltBuild:-}\" = \"true\" ]; then export DATABASE_URL=\"${agentNativePrebuiltDatabaseUrl:?}\" BETTER_AUTH_SECRET=\"${agentNativePrebuiltAuthSecret:?}\"; fi && pnpm install && NITRO_PRESET=netlify pnpm --filter clips build && pnpm exec tsx templates/clips/jobs/emit-netlify-brain-export-cron.ts && if [ \"${CONTEXT:-}\" = \"production\" ] && [ \"${agentNativePrebuiltBuild:-}\" != \"true\" ]; then pnpm --filter clips migrate:production; fi"
 publish = "templates/clips/dist"
 functions = "templates/clips/.netlify/functions-internal"
 

package/corpus/templates/slides/app/components/editor/NewDeckReferenceStep.tsx

@@ -7,6 +7,7 @@ import {
   IconChevronDown,
   IconFileText,
   IconFileTypePdf,
+  IconPaperclip,
   IconPresentation,
   IconWorld,
 } from "@tabler/icons-react";
@@ -40,6 +41,16 @@ import { sortDecksByRecency } from "@/lib/deck-sorting";
 import { cn } from "@/lib/utils";
 
 import { GoogleDriveConnectionCta } from "./GoogleDriveConnectionCta";
+import type { UploadedFile } from "./PromptDialog";
+
+const promptFileIcons: Record<string, typeof IconPaperclip> = {
+  pdf: IconFileTypePdf,
+  ppt: IconPresentation,
+  pptx: IconPresentation,
+  doc: IconFileText,
+  docx: IconFileText,
+  txt: IconFileText,
+};
 
 export interface NewDeckReferenceSelection {
   designSystemId?: string | null;
@@ -88,6 +99,7 @@ interface NewDeckReferenceStepProps {
   skipLabel: string;
   searchDecksLabel: string;
   promptSummary?: string;
+  promptFiles?: UploadedFile[];
 }
 
 export function NewDeckReferenceStep({
@@ -110,6 +122,7 @@ export function NewDeckReferenceStep({
   skipLabel,
   searchDecksLabel,
   promptSummary,
+  promptFiles,
 }: NewDeckReferenceStepProps) {
   const t = useT();
   const [selectedDesignSystemId, setSelectedDesignSystemId] = useState<
@@ -238,6 +251,29 @@ export function NewDeckReferenceStep({
               “{promptSummary.trim()}”
             </p>
           )}
+          {promptFiles && promptFiles.length > 0 && (
+            <div className="mt-4">
+              <span className="text-xs font-medium text-muted-foreground">
+                {t("home.attachedFiles")}
+              </span>
+              <ul className="mt-2 flex flex-wrap gap-2">
+                {promptFiles.map((file) => {
+                  const extension =
+                    file.originalName.toLowerCase().split(".").pop() ?? "";
+                  const FileIcon = promptFileIcons[extension] ?? IconPaperclip;
+                  return (
+                    <li
+                      key={file.path}
+                      className="flex max-w-full items-center gap-2 rounded-md border border-border bg-muted/40 px-2.5 py-1.5 text-sm"
+                    >
+                      <FileIcon className="size-4 shrink-0 text-muted-foreground" />
+                      <span className="truncate">{file.originalName}</span>
+                    </li>
+                  );
+                })}
+              </ul>
+            </div>
+          )}
 
           <div className="mt-10 space-y-6">
             <div className="grid gap-2">

package/corpus/templates/slides/app/i18n/en-US.ts

@@ -744,6 +744,7 @@ const messages = {
     chooseReferences: "Choose references",
     addDesignSystem: "+ Design system",
     importFrom: "Import from",
+    attachedFiles: "Attached",
     imported: "Imported",
     importedReferenceDeck: "Imported reference deck",
     referenceImportSuccess: "Imported successfully",

package/corpus/templates/slides/app/pages/Index.tsx

@@ -1570,6 +1570,7 @@ export default function Index() {
         skipLabel={t("home.referenceDeckNone")}
         searchDecksLabel={t("root.searchDecks")}
         promptSummary={pendingDeck?.prompt}
+        promptFiles={pendingDeck?.files}
       />
 
       {/* Sign-in required to create a deck. Shown when an unauthenticated

package/dist/agent/engine/ai-sdk-engine.js

@@ -12,7 +12,7 @@
  * so the core package remains installable without the AI SDK.
  */
 import { clearProviderCredentialAuthFailure, readDeployCredentialEnv, recordProviderCredentialAuthFailure, } from "../../server/credential-provider.js";
-import { anthropicManualThinkingBudget, normalizeReasoningEffortForModel, supportsClaudeAdaptiveThinking, } from "../../shared/reasoning-effort.js";
+import { allowsSamplingParams, anthropicManualThinkingBudget, normalizeReasoningEffortForModel, supportsClaudeAdaptiveThinking, } from "../../shared/reasoning-effort.js";
 import { AI_SDK_MODEL_CONFIG } from "../model-config.js";
 import { LLM_MISSING_CREDENTIALS_ERROR_CODE, LLM_MISSING_CREDENTIALS_MESSAGE, } from "./credential-errors.js";
 import { classifyProviderError, describeErrorWithCauses, } from "./error-detail.js";
@@ -351,6 +351,17 @@ class AISDKEngine {
                 };
             }
         }
+        // Thinking and temperature cannot travel together on Anthropic: any value
+        // but 1 is rejected once thinking is on, and the Opus 4.7+ / Sonnet 5
+        // families removed the sampling parameters outright. Effort defaults to
+        // High on every reasoning-capable Claude model, so a caller that only asked
+        // for `temperature: 0` was building a request the API always 400s.
+        const samplingAllowed = allowsSamplingParams({
+            model: opts.model,
+            thinkingEnabled: this.provider === "anthropic" &&
+                Boolean(providerOpts.anthropic
+                    ?.thinking),
+        });
         let assistantContent = [];
         const firstEventAbort = createFirstEventAbortController(opts.abortSignal);
         const toolInputs = createStreamedToolInputState();
@@ -365,7 +376,7 @@ class AISDKEngine {
                 // backoff. Leaving the SDK on its default (2) multiplies the two retry
                 // layers into ~12 HTTP requests per failed run.
                 maxRetries: 1,
-                ...(opts.temperature !== undefined
+                ...(samplingAllowed && opts.temperature !== undefined
                     ? { temperature: opts.temperature }
                     : {}),
                 abortSignal: firstEventAbort.signal,

package/dist/agent/engine/anthropic-engine.js

@@ -8,7 +8,7 @@
  * All providerOptions.anthropic fields are forwarded directly to the SDK.
  */
 import { clearProviderCredentialAuthFailure, readDeployCredentialEnv, recordProviderCredentialAuthFailure, } from "../../server/credential-provider.js";
-import { anthropicManualThinkingBudget, normalizeReasoningEffortForModel, supportsClaudeAdaptiveThinking, } from "../../shared/reasoning-effort.js";
+import { allowsSamplingParams, anthropicManualThinkingBudget, normalizeReasoningEffortForModel, supportsClaudeAdaptiveThinking, } from "../../shared/reasoning-effort.js";
 import { ANTHROPIC_MODEL_CONFIG } from "../model-config.js";
 import { LLM_MISSING_CREDENTIALS_ERROR_CODE, LLM_MISSING_CREDENTIALS_MESSAGE, } from "./credential-errors.js";
 import { describeErrorWithCauses } from "./error-detail.js";
@@ -62,9 +62,6 @@ class AnthropicEngine {
                     : anthropicOpts.thinking.budgetTokens,
             };
         }
-        if (anthropicOpts?.topK !== undefined) {
-            extra.top_k = anthropicOpts.topK;
-        }
         const reasoningEffort = normalizeReasoningEffortForModel(opts.model, opts.reasoningEffort);
         if (reasoningEffort && !extra.thinking) {
             if (supportsClaudeAdaptiveThinking(opts.model)) {
@@ -78,6 +75,18 @@ class AnthropicEngine {
                 }
             }
         }
+        // Thinking and the sampling parameters cannot travel together: Anthropic
+        // rejects any temperature but 1 once thinking is on, and the Opus 4.7+ /
+        // Sonnet 5 families removed temperature/top_k outright. Effort defaults to
+        // High on every reasoning-capable Claude model, so a caller that only asked
+        // for `temperature: 0` was building a request the API always 400s.
+        const samplingAllowed = allowsSamplingParams({
+            model: opts.model,
+            thinkingEnabled: Boolean(extra.thinking),
+        });
+        if (samplingAllowed && anthropicOpts?.topK !== undefined) {
+            extra.top_k = anthropicOpts.topK;
+        }
         // Apply prompt caching to the system prompt and tools by default.
         // Cache is pure upside: identical prefixes on subsequent turns get ~90%
         // off input cost and much faster time-to-first-token. If the prefix
@@ -138,7 +147,7 @@ class AnthropicEngine {
             system: systemBlocks,
             tools: cachedTools.length > 0 ? cachedTools : undefined,
             messages: cachedMessages,
-            ...(opts.temperature !== undefined
+            ...(samplingAllowed && opts.temperature !== undefined
                 ? { temperature: opts.temperature }
                 : {}),
             ...extra,

package/dist/agent/engine/builder-engine.js

@@ -20,7 +20,7 @@ import { captureError } from "../../server/capture-error.js";
 import { clearBuilderGatewayAuthFailure, isBuilderGatewayDeployConfigured, resolveBuilderGatewayCredentialsDetailed, getBuilderGatewayBaseUrl, recordBuilderGatewayAuthFailure, } from "../../server/credential-provider.js";
 import { getRequestUserEmail } from "../../server/request-context.js";
 import { applyBuilderUtmTrackingParams } from "../../shared/builder-link-tracking.js";
-import { isGPTReasoningModel, normalizeReasoningEffortForModel, } from "../../shared/reasoning-effort.js";
+import { allowsSamplingParams, isGPTReasoningModel, normalizeReasoningEffortForModel, } from "../../shared/reasoning-effort.js";
 import { isInBackgroundFunctionRuntime } from "../durable-background.js";
 import { BUILDER_MODEL_CONFIG } from "../model-config.js";
 import { getBuilderGatewayRequestHeaders } from "./builder-gateway-headers.js";
@@ -235,6 +235,16 @@ class BuilderEngine {
                 }
             }
         }
+        // The gateway turns `reasoning_effort` into Anthropic thinking on the
+        // Claude lane, and Anthropic rejects any temperature but 1 once thinking is
+        // on — the Opus 4.7+ / Sonnet 5 families reject the sampling parameters
+        // outright. Effort defaults to High for every reasoning-capable Claude
+        // model, so a caller that only asked for `temperature: 0` was building a
+        // request that always 400s. GPT and Gemini lanes keep their temperature.
+        const samplingAllowed = allowsSamplingParams({
+            model,
+            thinkingEnabled: Boolean(reasoningEffort) && /claude/i.test(model),
+        });
         const gptToolsRequireExplicitNoReasoning = cachedTools.length > 0 && isGPTReasoningModel(model);
         const body = {
             model,
@@ -242,7 +252,7 @@ class BuilderEngine {
             ...(systemValue !== undefined ? { system: systemValue } : {}),
             ...(cachedTools.length > 0 ? { tools: cachedTools } : {}),
             max_tokens: resolveMaxOutputTokensForEngine(this.name, opts.maxOutputTokens, model),
-            ...(typeof opts.temperature === "number"
+            ...(samplingAllowed && typeof opts.temperature === "number"
                 ? { temperature: opts.temperature }
                 : {}),
             // OpenAI rejects `reasoning_effort` alongside function tools on Chat

package/dist/agent/observational-memory/internal-run.js

@@ -43,6 +43,11 @@ export async function runInternalAgentCall(options) {
             tools: [],
             abortSignal: signal,
             maxOutputTokens: options.maxOutputTokens ?? 4_000,
+            // Thinking shares the small output budget above, and the engine defaults
+            // effort to High: at High a compaction pass can spend the whole budget
+            // reasoning and return no text, which the Observer reads as "nothing to
+            // observe". Compression does not need the ladder.
+            reasoningEffort: "low",
             temperature: 0,
         });
         for await (const event of stream) {

package/dist/app-config/app.d.ts

@@ -27,6 +27,8 @@ export declare const appConfig: z.ZodObject<{
     id: z.ZodOptional<z.ZodString>;
     workspaceId: z.ZodOptional<z.ZodString>;
     name: z.ZodOptional<z.ZodString>;
+    pingMessage: z.ZodDefault<z.ZodString>;
+    healthStrictSchema: z.ZodDefault<z.ZodBoolean>;
     url: z.ZodOptional<z.ZodString>;
     packageName: z.ZodOptional<z.ZodString>;
     template: z.ZodOptional<z.ZodString>;

package/dist/app-config/app.js

@@ -51,6 +51,21 @@ export const appConfig = z.object({
         env: ["APP_NAME"],
         doc: "User-facing display name of this app.",
     }),
+    pingMessage: z
+        .string()
+        .min(1)
+        .default("pong")
+        .meta({
+        env: ["PING_MESSAGE"],
+        doc: "Message returned by the framework ping route.",
+    }),
+    healthStrictSchema: z
+        .boolean()
+        .default(false)
+        .meta({
+        env: ["AGENT_NATIVE_HEALTH_STRICT_SCHEMA"],
+        doc: "Return HTTP 503 when the framework health schema probe is not ready.",
+    }),
     /**
      * The app's canonical public URL — what a user sees in a share link, an
      * email, or a JWT issuer claim.

package/dist/app-config/schema.d.ts

@@ -28,6 +28,8 @@ export declare const appConfigSchema: z.ZodObject<{
         id: z.ZodOptional<z.ZodString>;
         workspaceId: z.ZodOptional<z.ZodString>;
         name: z.ZodOptional<z.ZodString>;
+        pingMessage: z.ZodDefault<z.ZodString>;
+        healthStrictSchema: z.ZodDefault<z.ZodBoolean>;
         url: z.ZodOptional<z.ZodString>;
         packageName: z.ZodOptional<z.ZodString>;
         template: z.ZodOptional<z.ZodString>;

package/dist/collab/awareness.d.ts

@@ -62,11 +62,11 @@ export declare const postAwareness: import("h3").EventHandlerWithFetch<import("h
     error: string;
     states?: undefined;
 } | {
+    error?: undefined;
     states: {
         clientId: number;
         state: string;
     }[];
-    error?: undefined;
 }>>;
 /**
  * GET /_agent-native/collab/:docId/users
@@ -77,9 +77,9 @@ export declare const getActiveUsers: import("h3").EventHandlerWithFetch<import("
     error: string;
     users?: undefined;
 } | {
+    error?: undefined;
     users: {
         clientId: number;
         lastSeen: number;
     }[];
-    error?: undefined;
 }>>;

package/dist/mcp/screen-memory-stdio.d.ts

@@ -137,13 +137,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
-            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
+            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -159,7 +159,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
-            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -175,6 +174,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
+            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -190,7 +190,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
-            count?: undefined;
             minutes: {
                 type: string;
                 description: string;
@@ -200,6 +199,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
+            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -216,7 +216,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
-            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -235,6 +234,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             };
             timestamp?: undefined;
             chapterId?: undefined;
+            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -250,7 +250,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
-            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
@@ -264,6 +263,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
                 description: string;
             };
             chapterId?: undefined;
+            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             includeMicrophone?: undefined;
@@ -314,13 +314,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
-            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
+            count?: undefined;
             startAt: {
                 type: string;
                 description: string;
@@ -349,13 +349,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
-            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
+            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;

package/dist/notifications/routes.d.ts

@@ -11,23 +11,23 @@
  *   DELETE /_agent-native/notifications/:id         — delete
  */
 export declare function createNotificationsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<"" | import("./types.js").Notification[] | {
+    error?: undefined;
     count: number;
     updated?: undefined;
-    error?: undefined;
     ok?: undefined;
 } | {
-    count?: undefined;
-    updated: number;
     error?: undefined;
+    updated: number;
     ok?: undefined;
-} | {
     count?: undefined;
+} | {
     updated?: undefined;
     error: string;
     ok?: undefined;
-} | {
     count?: undefined;
-    updated?: undefined;
+} | {
     error?: undefined;
+    updated?: undefined;
     ok: boolean;
+    count?: undefined;
 }>>;

package/dist/server/auth-plugin.js

@@ -1,19 +1,33 @@
 import { autoMountAuth } from "./auth.js";
 import { runBetterAuthMigrations } from "./better-auth-migrations.js";
-import { getH3App, awaitBootstrap, markDefaultPluginProvided, trackPluginInit, } from "./framework-request-handler.js";
+import { FRAMEWORK_AUTH_EARLY_PATHS, awaitBootstrap, getH3App, markDefaultPluginProvided, markFrameworkRoutesReadyBeforeBootstrap, trackPluginInit, } from "./framework-request-handler.js";
 export function createAuthPlugin(options) {
     return (nitroApp) => {
         markDefaultPluginProvided(nitroApp, "auth");
+        const isByoa = Boolean(options?.getSession);
+        const app = getH3App(nitroApp);
         const initPromise = (async () => {
+            // A BYOA provider owns its session lookup and login HTML. Mount it
+            // immediately so a transient database outage in Better Auth or another
+            // default plugin cannot make the custom sign-in document unavailable.
+            if (isByoa) {
+                // The guard is mounted synchronously by the BYOA branch above. Only
+                // after that synchronous registration is it safe to let these paths
+                // skip unrelated bootstrap work.
+                const mountPromise = autoMountAuth(app, options);
+                markFrameworkRoutesReadyBeforeBootstrap(nitroApp, FRAMEWORK_AUTH_EARLY_PATHS);
+                await mountPromise;
+                return;
+            }
             await awaitBootstrap(nitroApp);
             // guard:allow-boot-data-work — local/long-lived runtimes provision auth
             // before mounting routes; production functions are rejected by the
             // migration runner and use the release job instead.
             await runBetterAuthMigrations(nitroApp);
-            await autoMountAuth(getH3App(nitroApp), options);
+            await autoMountAuth(app, options);
         })();
         trackPluginInit(nitroApp, initPromise, {
-            paths: ["/_agent-native/auth"],
+            paths: [...FRAMEWORK_AUTH_EARLY_PATHS],
         });
     };
 }

package/dist/server/beta-opt-out-html.js

@@ -1,14 +1,139 @@
-import { BETA_OPT_OUT_QUERY_PARAM, BETA_OPT_OUT_STORAGE_KEY, } from "../shared/environment-lanes.js";
+import { BETA_OPT_OUT_DURATION_MS, BETA_OPT_OUT_QUERY_PARAM, BETA_OPT_OUT_STORAGE_KEY, ENVIRONMENT_BETA_HOSTS, } from "../shared/environment-lanes.js";
 export const BETA_OPT_OUT_PERSISTENCE_MARKER = "Persist the beta opt-out before authentication";
-/**
- * Custom auth pages do not necessarily use the framework onboarding shell.
- * Keep the production switcher's one-time opt-out behavior at the shared auth
- * response boundary so those pages cannot drop the handoff before sign-in.
- */
-export function injectBetaOptOutPersistence(loginHtml) {
-    if (loginHtml.includes(BETA_OPT_OUT_PERSISTENCE_MARKER))
-        return loginHtml;
-    const script = `<script data-agent-native-beta-opt-out>
+const ENVIRONMENT_SWITCHER_MARKER = 'data-agent-native-environment-switcher="1"';
+const ENVIRONMENT_SWITCHER_STYLE_MARKER = 'data-agent-native-environment-switcher-style="1"';
+const ENVIRONMENT_SWITCHER_SCRIPT_MARKER = 'data-agent-native-environment-switcher-script="1"';
+const EXISTING_ENVIRONMENT_SWITCHER_RE = /\bid=["']environment-switcher["']/;
+function insertBeforeClosingTag(html, fragment, closingTag) {
+    const closeIndex = html.indexOf(closingTag);
+    if (closeIndex < 0)
+        return html + fragment;
+    return html.slice(0, closeIndex) + fragment + html.slice(closeIndex);
+}
+const environmentSwitcherMarkup = `<div class="environment-switcher" id="environment-switcher" ${ENVIRONMENT_SWITCHER_MARKER} hidden>
+  <button type="button" class="environment-badge" id="environment-badge" aria-expanded="false" aria-controls="environment-popover">beta</button>
+  <div class="environment-popover" id="environment-popover" role="dialog" aria-labelledby="environment-popover-title" hidden>
+    <div class="environment-popover-title" id="environment-popover-title">You're on Agent Native Beta</div>
+    <div class="environment-popover-copy">Choose where you want to continue.</div>
+    <a class="environment-production-link" id="environment-production-link" href="">Switch to production</a>
+  </div>
+</div>`;
+const environmentSwitcherStyles = `<style ${ENVIRONMENT_SWITCHER_STYLE_MARKER}>
+  color-scheme: dark;
+  .environment-switcher {
+    position: fixed;
+    right: max(0.75rem, env(safe-area-inset-right));
+    bottom: max(0.75rem, env(safe-area-inset-bottom));
+    z-index: 100;
+  }
+  .environment-switcher[hidden],
+  .environment-popover[hidden] { display: none; }
+  .environment-badge {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    height: 1.5rem;
+    min-width: 0;
+    padding: 0 0.5rem;
+    background: CanvasText;
+    color: Canvas;
+    border: 1px solid color-mix(in srgb, Canvas 16%, transparent);
+    border-radius: 0.75rem;
+    box-shadow: 0 2px 8px color-mix(in srgb, CanvasText 25%, transparent);
+    font: inherit;
+    font-size: 0.6875rem;
+    font-weight: 600;
+    letter-spacing: 0.03125rem;
+    line-height: 1;
+    text-transform: uppercase;
+    cursor: pointer;
+  }
+  .environment-badge:hover,
+  .environment-badge[aria-expanded="true"] {
+    background: color-mix(in srgb, CanvasText 85%, Canvas);
+  }
+  .environment-badge:focus-visible,
+  .environment-production-link:focus-visible {
+    outline: 2px solid LinkText;
+    outline-offset: 2px;
+  }
+  .environment-popover {
+    position: absolute;
+    right: 0;
+    bottom: calc(100% + 0.5rem);
+    width: min(17.5rem, calc(100vw - 1.5rem));
+    padding: 1.25rem;
+    background: Canvas;
+    color: CanvasText;
+    border: 1px solid color-mix(in srgb, CanvasText 12%, transparent);
+    border-radius: 0.75rem;
+    box-shadow: 0 18px 50px color-mix(in srgb, CanvasText 42%, transparent);
+  }
+  .environment-popover-title { margin-bottom: 0.25rem; font-size: 0.875rem; font-weight: 600; line-height: 1.25rem; }
+  .environment-popover-copy { margin-bottom: 1rem; color: GrayText; font-size: 0.875rem; line-height: 1.25rem; }
+  .environment-production-link {
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    min-height: 2rem;
+    padding: 0.375rem 0.75rem;
+    color: CanvasText;
+    border: 1px solid color-mix(in srgb, CanvasText 16%, transparent);
+    border-radius: 0.375rem;
+    font-size: 0.8125rem;
+    text-decoration: none;
+  }
+  .environment-production-link:hover {
+    background: color-mix(in srgb, CanvasText 12%, Canvas);
+  }
+</style>`;
+const environmentSwitcherScript = `<script ${ENVIRONMENT_SWITCHER_SCRIPT_MARKER}>
+(function __anInitEnvironmentBadge() {
+  var switcher = document.getElementById('environment-switcher');
+  var button = document.getElementById('environment-badge');
+  var popover = document.getElementById('environment-popover');
+  var productionLink = document.getElementById('environment-production-link');
+  if (!switcher || !button || !popover || !productionLink) return;
+  if (window.parent !== window) return;
+
+  var betaHosts = ${JSON.stringify(ENVIRONMENT_BETA_HOSTS)};
+  var hostname = (window.location.hostname || '').toLowerCase().replace(/\\.$/, '');
+  var productionHost = hostname.indexOf('beta.') === 0 ? hostname.slice(5) : '';
+  if (!productionHost || betaHosts[productionHost] !== hostname) return;
+
+  try {
+    var productionUrl = new URL(window.location.href);
+    productionUrl.protocol = 'https:';
+    productionUrl.hostname = productionHost;
+    productionUrl.port = '';
+    productionUrl.searchParams.set(
+      ${JSON.stringify(BETA_OPT_OUT_QUERY_PARAM)},
+      String(Date.now() + ${BETA_OPT_OUT_DURATION_MS}),
+    );
+    productionLink.href = productionUrl.toString();
+  } catch (error) {
+    void error;
+    return;
+  }
+
+  function setOpen(open) {
+    popover.hidden = !open;
+    button.setAttribute('aria-expanded', String(open));
+  }
+
+  switcher.hidden = false;
+  button.addEventListener('click', function() {
+    setOpen(popover.hidden);
+  });
+  document.addEventListener('click', function(event) {
+    if (!switcher.contains(event.target)) setOpen(false);
+  });
+  document.addEventListener('keydown', function(event) {
+    if (event.key === 'Escape') setOpen(false);
+  });
+})();
+</script>`;
+const betaOptOutPersistenceScript = `<script data-agent-native-beta-opt-out>
 // ${BETA_OPT_OUT_PERSISTENCE_MARKER}.
 (function __anPersistBetaOptOut() {
   try {
@@ -37,17 +162,29 @@ export function injectBetaOptOutPersistence(loginHtml) {
   }
 })();
 </script>`;
-    const bodyCloseIndex = loginHtml.indexOf("</body>");
-    if (bodyCloseIndex >= 0) {
-        return (loginHtml.slice(0, bodyCloseIndex) +
-            script +
-            loginHtml.slice(bodyCloseIndex));
+/**
+ * Custom auth pages do not necessarily use the framework onboarding shell.
+ * Keep the production switcher's one-time opt-out behavior at the shared auth
+ * response boundary so those pages cannot drop the handoff before sign-in.
+ */
+export function injectBetaOptOutPersistence(loginHtml) {
+    let html = loginHtml;
+    if (!html.includes(BETA_OPT_OUT_PERSISTENCE_MARKER)) {
+        html = insertBeforeClosingTag(html, betaOptOutPersistenceScript, "</body>");
+    }
+    // The standard onboarding shell already owns this markup, style, and
+    // initializer. Custom login pages need the shared switcher, but adding a
+    // second copy would create duplicate IDs and event handlers.
+    if (EXISTING_ENVIRONMENT_SWITCHER_RE.test(html))
+        return html;
+    if (!html.includes(ENVIRONMENT_SWITCHER_STYLE_MARKER)) {
+        html = insertBeforeClosingTag(html, environmentSwitcherStyles, "</head>");
+    }
+    if (!html.includes(ENVIRONMENT_SWITCHER_MARKER)) {
+        html = insertBeforeClosingTag(html, environmentSwitcherMarkup, "</body>");
     }
-    const headCloseIndex = loginHtml.indexOf("</head>");
-    if (headCloseIndex >= 0) {
-        return (loginHtml.slice(0, headCloseIndex) +
-            script +
-            loginHtml.slice(headCloseIndex));
+    if (!html.includes(ENVIRONMENT_SWITCHER_SCRIPT_MARKER)) {
+        html = insertBeforeClosingTag(html, environmentSwitcherScript, "</body>");
     }
-    return loginHtml + script;
+    return html;
 }

package/dist/server/core-routes-plugin.js

@@ -51,7 +51,7 @@ import { probeDbPressure } from "./db-pressure.js";
 import { resolveDeployEnvironment, resolveServerRelease, } from "./deploy-environment.js";
 import { createEmbedStartRouteHandler } from "./embed-route.js";
 import { shouldReportError } from "./error-noise-filter.js";
-import { getH3App, awaitBootstrap, markDefaultPluginProvided, trackPluginInit, } from "./framework-request-handler.js";
+import { FRAMEWORK_AUTH_EARLY_PATHS, getH3App, awaitBootstrap, markDefaultPluginProvided, markFrameworkRoutesReadyBeforeBootstrap, trackPluginInit, } from "./framework-request-handler.js";
 import { createGatewayAccessCheckHandler } from "./gateway-access-check.js";
 import { getAppBasePath, getOrigin } from "./google-oauth.js";
 import { createGoogleRealtimeSessionHandler } from "./google-realtime-session.js";
@@ -939,9 +939,21 @@ export function createCoreRoutesPlugin(options = {}) {
         });
         trackPluginInit(nitroApp, initPromise, {
             paths: [FRAMEWORK_ROUTE_PREFIX, "/mcp", "/.well-known"],
+            // Liveness and BYOA auth routes are mounted before the DB-dependent
+            // bootstrap below. The broad core entry must not hold those routes while
+            // an unrelated migration or connection pool is unavailable.
+            excludedPaths: [
+                `${FRAMEWORK_ROUTE_PREFIX}/ping`,
+                `${FRAMEWORK_ROUTE_PREFIX}/health`,
+                ...FRAMEWORK_AUTH_EARLY_PATHS,
+            ],
         });
         try {
             const P = FRAMEWORK_ROUTE_PREFIX;
+            markFrameworkRoutesReadyBeforeBootstrap(nitroApp, [
+                ...(!options.disablePing ? [`${P}/ping`] : []),
+                ...(!options.disableHealth ? [`${P}/health`] : []),
+            ]);
             // Keep the framework-owned S3-compatible provider available even when an
             // app does not mount the optional onboarding plugin. The settings CTA and
             // the upload route share this registry. An app may register its own
@@ -962,6 +974,52 @@ export function createCoreRoutesPlugin(options = {}) {
                 }
                 return EMPTY_SPECULATION_RULES;
             }));
+            // Keep liveness independent from the rest of framework bootstrap. A
+            // cold-start database failure must report a useful ping/health result,
+            // not prevent these handlers from being registered at all.
+            if (!options.disablePing) {
+                getH3App(nitroApp).use(`${P}/ping`, defineEventHandler((event) => {
+                    const message = getAppConfig().app.pingMessage;
+                    const configuration = event.url?.searchParams.get("configuration") === "1" ||
+                        event.url?.searchParams.get("configuration") === "true";
+                    if (!configuration)
+                        return { message };
+                    const requirements = {
+                        ...(event.url?.searchParams.get("auth") === "0"
+                            ? { authEnabled: false }
+                            : {}),
+                        ...(event.url?.searchParams.get("database") === "0"
+                            ? { databaseRequired: false }
+                            : {}),
+                    };
+                    return {
+                        message,
+                        configuration: getRuntimeConfigReport(process.env, requirements, {
+                            phase: "runtime",
+                            appName: getAppConfig().app.name,
+                        }),
+                    };
+                }));
+            }
+            if (!options.disableHealth) {
+                getH3App(nitroApp).use(`${P}/health`, defineEventHandler(async (event) => {
+                    setResponseHeader(event, "cache-control", "no-store");
+                    const schema = event.url?.searchParams.get("schema") === "1" ||
+                        event.url?.searchParams.get("schema") === "true";
+                    const strict = event.url?.searchParams.get("strict") === "1" ||
+                        event.url?.searchParams.get("strict") === "true" ||
+                        getAppConfig().app.healthStrictSchema;
+                    const pressure = event.url?.searchParams.get("pressure") === "1" ||
+                        event.url?.searchParams.get("pressure") === "true";
+                    const result = await runDbHealthProbe(getDbExec, {
+                        schema,
+                        pressure,
+                    });
+                    if (strict && !result.ready)
+                        setResponseStatus(event, 503);
+                    return result;
+                }));
+            }
             await awaitBootstrap(nitroApp);
             const runBootDatabaseWork = shouldRunCoreRouteBootDatabaseWork();
             const { persistedEnvVars, builderDisconnected } = runBootDatabaseWork
@@ -1264,33 +1322,6 @@ export function createCoreRoutesPlugin(options = {}) {
                     getH3App(nitroApp).use(route, createPollEventsHandler());
                 }
             }
-            // Ping
-            if (!options.disablePing) {
-                getH3App(nitroApp).use(`${P}/ping`, defineEventHandler((event) => {
-                    const message = process.env.PING_MESSAGE ?? "pong";
-                    const configuration = event.url?.searchParams.get("configuration") === "1" ||
-                        event.url?.searchParams.get("configuration") === "true";
-                    if (!configuration)
-                        return { message };
-                    // Custom required keys must come from server-side app configuration;
-                    // never let an anonymous caller turn this into an env-name oracle.
-                    const requirements = {
-                        ...(event.url?.searchParams.get("auth") === "0"
-                            ? { authEnabled: false }
-                            : {}),
-                        ...(event.url?.searchParams.get("database") === "0"
-                            ? { databaseRequired: false }
-                            : {}),
-                    };
-                    return {
-                        message,
-                        configuration: getRuntimeConfigReport(process.env, requirements, {
-                            phase: "runtime",
-                            appName: process.env.APP_NAME,
-                        }),
-                    };
-                }));
-            }
             // ─── Durable sandbox execution processor ─────────────────────────
             // Self-fired by run-code's background queue (see
             // coding-tools/sandbox/background.ts): the enqueueing request POSTs here
@@ -1370,37 +1401,6 @@ export function createCoreRoutesPlugin(options = {}) {
                     }, 30_000); // Check every 30s but only sweep once per 2min
                 }, 25_000); // Start 25s after init (after the agent sweeps)
             })();
-            // Health + DB warmup — liveness probe that touches the database so
-            // uptime monitors and the keep-warm cron prevent a scale-to-zero
-            // serverless DB (e.g. Neon) from cold-starting on the next real
-            // request. Public, side-effect free, and never cached. Add ?schema=1
-            // for metadata-only schema checks, and ?strict=1 to turn a not-ready
-            // DB/schema probe into a failing HTTP status for monitors.
-            if (!options.disableHealth) {
-                getH3App(nitroApp).use(`${P}/health`, defineEventHandler(async (event) => {
-                    setResponseHeader(event, "cache-control", "no-store");
-                    const schema = event.url?.searchParams.get("schema") === "1" ||
-                        event.url?.searchParams.get("schema") === "true";
-                    const strict = event.url?.searchParams.get("strict") === "1" ||
-                        event.url?.searchParams.get("strict") === "true" ||
-                        process.env.AGENT_NATIVE_HEALTH_STRICT_SCHEMA === "true";
-                    // Off by default: the one-minute warm cron does not need it, and
-                    // an extra `pg_stat_activity` read every minute per app is waste.
-                    // Pressure deliberately does NOT change `ready` or the status
-                    // code — a pressured database is still serving, and an uptime
-                    // monitor that pages on it would learn to ignore this route. The
-                    // fleet audit reads the counters and decides.
-                    const pressure = event.url?.searchParams.get("pressure") === "1" ||
-                        event.url?.searchParams.get("pressure") === "true";
-                    const result = await runDbHealthProbe(getDbExec, {
-                        schema,
-                        pressure,
-                    });
-                    if (strict && !result.ready)
-                        setResponseStatus(event, 503);
-                    return result;
-                }));
-            }
             getH3App(nitroApp).use(`${P}/debug/runtime`, defineEventHandler(async (event) => {
                 setResponseHeader(event, "cache-control", "no-store");
                 const session = await getSession(event).catch(() => null);

package/dist/server/create-server.d.ts

@@ -14,7 +14,7 @@ export interface CreateServerOptions {
     cors?: Record<string, unknown> | false;
     /** JSON body parser limit. Kept for API compatibility (H3 uses readBody). */
     jsonLimit?: string;
-    /** Custom ping message. Default: reads PING_MESSAGE env var, falls back to "pong" */
+    /** Custom ping message. Default: reads the shared app config. */
     pingMessage?: string;
     /** Disable the /_agent-native/ping health check. Default: false */
     disablePing?: boolean;

package/dist/server/create-server.js

@@ -1,4 +1,5 @@
 import { createApp, createRouter, defineEventHandler, getMethod, getRequestHeader, setResponseHeader, setResponseStatus, } from "h3";
+import { getAppConfig } from "../app-config/index.js";
 import { getOrgContext } from "../org/context.js";
 import { readBody } from "../server/h3-helpers.js";
 import { EMBED_TARGET_HEADER } from "../shared/embed-auth.js";
@@ -109,7 +110,7 @@ export function createServer(options = {}) {
     // Health check
     if (!options.disablePing) {
         router.get("/_agent-native/ping", defineEventHandler((event) => {
-            const message = options.pingMessage ?? process.env.PING_MESSAGE ?? "pong";
+            const message = options.pingMessage ?? getAppConfig().app.pingMessage;
             const configuration = event.url?.searchParams.get("configuration") === "1" ||
                 event.url?.searchParams.get("configuration") === "true";
             if (!configuration)
@@ -128,7 +129,7 @@ export function createServer(options = {}) {
                 message,
                 configuration: getRuntimeConfigReport(process.env, requirements, {
                     phase: "runtime",
-                    appName: process.env.APP_NAME,
+                    appName: getAppConfig().app.name,
                 }),
             };
         }));

package/dist/server/embedded.js

@@ -71,17 +71,24 @@ function markEmbeddedPluginStems(nitroApp) {
 export async function mountAgentNativeEmbedded(nitroApp, options = {}) {
     configureAgentNativeEmbeddedEnvironment(options);
     markEmbeddedPluginStems(nitroApp);
+    // The auth plugin tracks its async initialization itself. Do not await the
+    // factory call here: with default Better Auth, its DB bootstrap can be the
+    // thing that is unavailable while public liveness routes still need to
+    // mount below.
+    createAuthPlugin(createAgentNativeEmbeddedAuthOptions(options.auth))(nitroApp);
+    // Mount framework auth and liveness before waiting on the host application's
+    // bootstrap. The embedded plugin tracks its full init as an unscoped promise,
+    // so early requests deliberately skip that promise.
+    if (options.coreRoutes !== false) {
+        await createCoreRoutesPlugin(options.coreRoutes ?? undefined)(nitroApp);
+    }
     await awaitBootstrap(nitroApp);
-    await createAuthPlugin(createAgentNativeEmbeddedAuthOptions(options.auth))(nitroApp);
     if (options.sentry !== false) {
         await createSentryPlugin()(nitroApp);
     }
     if (options.org === true) {
         await createOrgPlugin()(nitroApp);
     }
-    if (options.coreRoutes !== false) {
-        await createCoreRoutesPlugin(options.coreRoutes ?? undefined)(nitroApp);
-    }
     if (options.resources !== false) {
         await createResourcesPlugin()(nitroApp);
     }

package/dist/server/framework-request-handler.d.ts

@@ -13,6 +13,7 @@
  */
 import type { EventHandler } from "h3";
 declare const FRAMEWORK_PREFIX = "/_agent-native";
+export declare const FRAMEWORK_AUTH_EARLY_PATHS: readonly ["/_agent-native/auth", "/sign-in", "/_agent-native/sign-in", "/_agent-native/login", "/_agent-native/signup", "/login", "/signup"];
 /**
  * Wrapper around Nitro's h3 instance that exposes a v1-style `.use()` API
  * for registering path-prefix middleware.
@@ -32,6 +33,13 @@ export interface H3AppShim {
  * auto-mount a generic default over the app's custom implementation.
  */
 export declare function markDefaultPluginProvided(nitroApp: any, stem: string): void;
+/**
+ * Mark routes that are mounted without waiting for unrelated default-plugin
+ * bootstrap. BYOA auth uses this for its cacheable login document: waiting
+ * for Better Auth or another DB-backed plugin turns an available login form
+ * into a serverless 502 during a cold-start database outage.
+ */
+export declare function markFrameworkRoutesReadyBeforeBootstrap(nitroApp: any, paths: readonly string[]): void;
 /**
  * Get (or create) the shared H3 app wrapper for a nitroApp. Plugins use this
  * to register routes via `.use(path, handler)`.
@@ -65,12 +73,15 @@ export declare function awaitBootstrap(nitroApp: any): Promise<void>;
  */
 export declare function trackPluginInit(nitroApp: any, promise: Promise<void>, options?: {
     paths?: string[];
+    excludedPaths?: string[];
 }): void;
 /**
  * Await all tracked plugin initializations. Called by the readiness gate
  * middleware before dispatching framework routes.
  */
-export declare function awaitPluginsReady(nitroApp: any, reqPath?: string): Promise<void>;
+export declare function awaitPluginsReady(nitroApp: any, reqPath?: string, options?: {
+    skipUnscoped?: boolean;
+}): Promise<void>;
 /**
  * Load a workspace-core's `/server` entry, transparently handling TS source.
  *

package/dist/server/framework-request-handler.js

@@ -1,6 +1,7 @@
 import { setResponseHeader, setResponseStatus } from "h3";
 import { getMissingDefaultPlugins } from "../deploy/route-discovery.js";
 import { MCP_PUBLIC_ROUTE_PREFIX } from "../mcp/route-paths.js";
+import { SIGN_IN_ENTRY_PATH, SIGN_IN_LEGACY_ENTRY_PATH, } from "../shared/sign-in-journey.js";
 import { getConfiguredAppBasePath } from "./app-base-path.js";
 import { captureError } from "./capture-error.js";
 import { createCsrfMiddleware } from "./csrf.js";
@@ -16,8 +17,23 @@ const PLUGIN_READY_KEY = "_agentNativePluginReadyPromise";
 const PLUGIN_READY_PLACEHOLDERS_KEY = "_agentNativePluginReadyPlaceholders";
 const PLUGIN_FAILED_KEY = "_agentNativePluginInitFailures";
 const PROVIDED_PLUGIN_STEMS_KEY = "_agentNativeProvidedPluginStems";
+const EARLY_FRAMEWORK_PATHS_KEY = "_agentNativeEarlyFrameworkPaths";
 const MIDDLEWARE_DISPATCHER_PATCHED_KEY = "_agentNativeMiddlewareDispatcherPatched";
 const REQUEST_CONTEXT_BOUNDARY_KEY = "_agentNativeRequestContextBoundary";
+const CANONICAL_AUTH_EARLY_PATHS = [
+    SIGN_IN_ENTRY_PATH,
+    "/login",
+    "/signup",
+];
+export const FRAMEWORK_AUTH_EARLY_PATHS = [
+    `${FRAMEWORK_PREFIX}/auth`,
+    SIGN_IN_ENTRY_PATH,
+    SIGN_IN_LEGACY_ENTRY_PATH,
+    `${FRAMEWORK_PREFIX}/login`,
+    `${FRAMEWORK_PREFIX}/signup`,
+    "/login",
+    "/signup",
+];
 function getAppBasePath() {
     return getConfiguredAppBasePath();
 }
@@ -27,7 +43,8 @@ function pathMatchesPrefix(reqPath, prefix) {
 function supportsAppBasePathMount(path) {
     return (pathMatchesPrefix(path, FRAMEWORK_PREFIX) ||
         pathMatchesPrefix(path, WELL_KNOWN_PREFIX) ||
-        pathMatchesPrefix(path, MCP_PUBLIC_ROUTE_PREFIX));
+        pathMatchesPrefix(path, MCP_PUBLIC_ROUTE_PREFIX) ||
+        CANONICAL_AUTH_EARLY_PATHS.some((authPath) => pathMatchesPrefix(path, authPath)));
 }
 function resolveMountMatch(reqPath, path) {
     if (pathMatchesPrefix(reqPath, path)) {
@@ -62,6 +79,23 @@ export function markDefaultPluginProvided(nitroApp, stem) {
     provided.add(stem);
     nitroApp[PROVIDED_PLUGIN_STEMS_KEY] = provided;
 }
+/**
+ * Mark routes that are mounted without waiting for unrelated default-plugin
+ * bootstrap. BYOA auth uses this for its cacheable login document: waiting
+ * for Better Auth or another DB-backed plugin turns an available login form
+ * into a serverless 502 during a cold-start database outage.
+ */
+export function markFrameworkRoutesReadyBeforeBootstrap(nitroApp, paths) {
+    if (!nitroApp)
+        return;
+    const existing = nitroApp[EARLY_FRAMEWORK_PATHS_KEY] ??
+        new Set();
+    for (const path of paths) {
+        if (path)
+            existing.add(path);
+    }
+    nitroApp[EARLY_FRAMEWORK_PATHS_KEY] = existing;
+}
 /**
  * Get (or create) the shared H3 app wrapper for a nitroApp. Plugins use this
  * to register routes via `.use(path, handler)`.
@@ -119,6 +153,9 @@ export function getH3App(nitroApp) {
         registerMiddleware(nitroApp, MCP_PUBLIC_ROUTE_PREFIX, readinessGate, {
             prepend: true,
         });
+        for (const path of CANONICAL_AUTH_EARLY_PATHS) {
+            registerMiddleware(nitroApp, path, readinessGate, { prepend: true });
+        }
         // CSRF (see csrf.ts): registered here — synchronously, on the very
         // first `getH3App()` call for this nitroApp — rather than inside
         // createCoreRoutesPlugin's own async init chain. Real deployments mount
@@ -152,7 +189,8 @@ export function getH3App(nitroApp) {
             const reqPath = event.url?.pathname ?? "";
             if (resolveMountMatch(reqPath, FRAMEWORK_PREFIX) ||
                 resolveMountMatch(reqPath, WELL_KNOWN_PREFIX) ||
-                resolveMountMatch(reqPath, MCP_PUBLIC_ROUTE_PREFIX)) {
+                resolveMountMatch(reqPath, MCP_PUBLIC_ROUTE_PREFIX) ||
+                FRAMEWORK_AUTH_EARLY_PATHS.some((path) => resolveMountMatch(reqPath, path))) {
                 const startedAt = Date.now();
                 try {
                     await awaitFrameworkRoutesReadyForRequest(nitroApp, reqPath);
@@ -276,9 +314,15 @@ async function awaitFrameworkRoutesReadyForRequest(nitroApp, reqPath) {
         return await Promise.race([
             (async () => {
                 const bootstrapPromise = nitroApp[BOOTSTRAP_PROMISE_KEY];
-                if (bootstrapPromise)
+                const earlyPaths = nitroApp[EARLY_FRAMEWORK_PATHS_KEY];
+                const canDispatchBeforeBootstrap = Boolean(earlyPaths?.size &&
+                    Array.from(earlyPaths).some((path) => resolveMountMatch(reqPath, path)));
+                if (bootstrapPromise && !canDispatchBeforeBootstrap) {
                     await bootstrapPromise;
-                await awaitPluginsReady(nitroApp, reqPath);
+                }
+                await awaitPluginsReady(nitroApp, reqPath, {
+                    skipUnscoped: canDispatchBeforeBootstrap,
+                });
                 return true;
             })(),
             new Promise((resolve) => {
@@ -341,6 +385,7 @@ export function trackPluginInit(nitroApp, promise, options = {}) {
     const entry = {
         promise: safe,
         paths: options.paths?.filter(Boolean),
+        excludedPaths: options.excludedPaths?.filter(Boolean),
     };
     const existing = nitroApp[PLUGIN_READY_KEY];
     if (existing) {
@@ -349,9 +394,9 @@ export function trackPluginInit(nitroApp, promise, options = {}) {
     else {
         nitroApp[PLUGIN_READY_KEY] = [entry];
     }
-    installPluginReadyPlaceholders(nitroApp, entry.paths);
+    installPluginReadyPlaceholders(nitroApp, entry.paths, entry.excludedPaths);
 }
-function installPluginReadyPlaceholders(nitroApp, paths) {
+function installPluginReadyPlaceholders(nitroApp, paths, excludedPaths) {
     if (!paths?.length)
         return;
     const existing = nitroApp[PLUGIN_READY_PLACEHOLDERS_KEY];
@@ -364,6 +409,9 @@ function installPluginReadyPlaceholders(nitroApp, paths) {
         registerMiddleware(nitroApp, path, (async (event) => {
             const eventAny = event;
             const reqPath = eventAny.context?._mountedPathname ?? event.url?.pathname ?? path;
+            if (excludedPaths?.some((excludedPath) => resolveMountMatch(reqPath, excludedPath))) {
+                return undefined;
+            }
             const ready = await awaitFrameworkRoutesReadyForRequest(nitroApp, reqPath);
             if (!ready) {
                 // Boot is still running and we are out of budget. Answer now, while
@@ -425,14 +473,16 @@ function debugClientAbort(args) {
  * Await all tracked plugin initializations. Called by the readiness gate
  * middleware before dispatching framework routes.
  */
-export async function awaitPluginsReady(nitroApp, reqPath) {
+export async function awaitPluginsReady(nitroApp, reqPath, options = {}) {
     const entries = nitroApp[PLUGIN_READY_KEY];
     if (!entries?.length)
         return;
     const relevant = reqPath
-        ? entries.filter((entry) => entry.paths?.length
-            ? entry.paths.some((path) => resolveMountMatch(reqPath, path))
-            : true)
+        ? entries.filter((entry) => !(options.skipUnscoped && !entry.paths?.length) &&
+            !entry.excludedPaths?.some((path) => resolveMountMatch(reqPath, path)) &&
+            (entry.paths?.length
+                ? entry.paths.some((path) => resolveMountMatch(reqPath, path))
+                : true))
         : entries;
     if (relevant.length) {
         await Promise.all(relevant.map((entry) => entry.promise));

package/dist/shared/reasoning-effort.d.ts

@@ -38,3 +38,19 @@ export declare function supportsClaudeAdaptiveThinking(model: string | undefined
  * models that do not support adaptive thinking (currently Claude Haiku 4.5).
  */
 export declare function anthropicManualThinkingBudget(effort: ReasoningEffort): 1024 | 4096 | 8000 | 16000 | 32000;
+/**
+ * Whether a request may carry the sampling parameters (`temperature`,
+ * `top_p`, `top_k`) at all. Effort resolves to High for every
+ * reasoning-capable Claude model, so a caller that asked only for
+ * `temperature: 0` — an eval judge, a classifier, the memory compactor — was
+ * building a request Anthropic answers with "`temperature` may only be set to
+ * 1 when thinking is enabled or in adaptive mode". Thinking is the capability
+ * worth keeping; the sampling knobs are what the provider withdrew, so they
+ * are dropped once at the engine boundary instead of at every caller. Pass
+ * `thinkingEnabled` only for requests that actually carry Anthropic thinking,
+ * so other providers keep their sampling controls.
+ */
+export declare function allowsSamplingParams(args: {
+    model: string | undefined;
+    thinkingEnabled: boolean;
+}): boolean;

package/dist/shared/reasoning-effort.js

@@ -194,3 +194,44 @@ function supportsClaudeXHigh(model) {
 function isGeminiReasoningModel(model) {
     return /^gemini-/.test(model.toLowerCase().replace(/^google\//, ""));
 }
+/**
+ * Claude dropped the sampling parameters (`temperature`, `top_p`, `top_k`)
+ * starting with Opus 4.7 / Opus 5 / Sonnet 5 / Fable 5; sending one there is a
+ * 400. Older Claude models still accept them, but only the value 1 once
+ * thinking is on.
+ */
+function claudeAcceptsSamplingParams(model) {
+    const id = model.toLowerCase().replace(/^anthropic\//, "");
+    if (id.includes("fable-5") || id.includes("mythos-5"))
+        return false;
+    if (id.includes("sonnet-5"))
+        return false;
+    const opusMatch = id.match(/opus-(\d+)(?:[-.](\d+))?/);
+    if (opusMatch) {
+        const major = parseInt(opusMatch[1], 10);
+        if (major >= 5)
+            return false;
+        const minor = opusMatch[2] ? parseInt(opusMatch[2], 10) : 0;
+        return !(major === 4 && minor >= 7);
+    }
+    return true;
+}
+/**
+ * Whether a request may carry the sampling parameters (`temperature`,
+ * `top_p`, `top_k`) at all. Effort resolves to High for every
+ * reasoning-capable Claude model, so a caller that asked only for
+ * `temperature: 0` — an eval judge, a classifier, the memory compactor — was
+ * building a request Anthropic answers with "`temperature` may only be set to
+ * 1 when thinking is enabled or in adaptive mode". Thinking is the capability
+ * worth keeping; the sampling knobs are what the provider withdrew, so they
+ * are dropped once at the engine boundary instead of at every caller. Pass
+ * `thinkingEnabled` only for requests that actually carry Anthropic thinking,
+ * so other providers keep their sampling controls.
+ */
+export function allowsSamplingParams(args) {
+    if (!args.model)
+        return true;
+    if (args.thinkingEnabled)
+        return false;
+    return claudeAcceptsSamplingParams(args.model);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.0.0-beta-20260820071604",
+  "version": "0.0.0-beta-20260820115430",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {