@agent-native/core 0.117.1 → 0.118.0

package/corpus/core/src/client/use-agent-engine-configured.ts

@@ -6,7 +6,11 @@ import { agentNativePath } from "./api-path.js";
 const PROVIDER_ENV_VAR_SET = new Set(PROVIDER_ENV_VARS);
 
 /** `unknown` until the first check resolves, so callers don't flash the gate. */
-export type AgentEngineConfiguredState = "unknown" | "configured" | "missing";
+export type AgentEngineConfiguredState =
+  | "unknown"
+  | "configured"
+  | "missing"
+  | "unavailable";
 
 export interface UseAgentEngineConfiguredResult {
   /** True once we know nothing can run the agent (no key / Builder / BYOK). */
@@ -30,7 +34,6 @@ export interface UseAgentEngineConfiguredOptions {
 }
 
 const DEFAULT_STATUS_CHECK_TIMEOUT_MS = 2500;
-const UNKNOWN_STATUS_RETRY_MS = 2000;
 
 async function fetchStatusJson(
   path: string,
@@ -108,11 +111,10 @@ export async function fetchAgentEngineConfiguredState(
     fetchStatusJson("/_agent-native/agent-engine/status", timeoutMs),
   ]);
 
-  // All three failed — likely a flaky network; keep the caller in unknown.
-  // Even an explicit missing-key stream event should not pin the composer into
-  // setup without a fresh authoritative status response.
+  // All three failed — surface a retryable unavailable state instead of
+  // leaving the composer in an infinite checking loop.
   if (envKeys == null && builderStatus == null && engineStatus == null) {
-    return "unknown";
+    return "unavailable";
   }
 
   const envKeysKnown = Array.isArray(envKeys);
@@ -138,7 +140,7 @@ export async function fetchAgentEngineConfiguredState(
   if (engineStatusKnown) return "missing";
 
   // Compatibility fallback for older hosts without the canonical route.
-  return envKeysKnown && builderStatusKnown ? "missing" : "unknown";
+  return envKeysKnown && builderStatusKnown ? "missing" : "unavailable";
 }
 
 /**
@@ -146,7 +148,8 @@ export async function fetchAgentEngineConfiguredState(
  * composer and app prompt boxes. Checks the env-key / Builder / BYOK status
  * endpoints on mount, re-checks on `agent-engine:configured-changed`, and folds
  * in the adapter's `agent-chat:missing-api-key` signal. Pass `enabled = false`
- * to short-circuit to configured; flaky requests stay `unknown`.
+ * to short-circuit to configured; unavailable checks can be retried by firing
+ * `agent-engine:configured-changed`.
  */
 export function useAgentEngineConfigured(
   enabled = true,
@@ -156,25 +159,16 @@ export function useAgentEngineConfigured(
 
   useEffect(() => {
     let cancelled = false;
-    let retryId: ReturnType<typeof setTimeout> | undefined;
     // Monotonic call counter: overlapping checks (mount + a
     // `agent-engine:configured-changed` fired right after a key is saved) can
     // resolve out of order; only the latest call may write state, or a slow
     // stale "missing" response would overwrite the fresh "configured" one.
     let requestSeq = 0;
     const check = async (options?: { missingFallback?: boolean }) => {
-      if (retryId !== undefined) {
-        clearTimeout(retryId);
-        retryId = undefined;
-      }
       const seq = ++requestSeq;
       const nextState = await fetchAgentEngineConfiguredState(enabled, options);
       if (cancelled || seq !== requestSeq) return;
-      if (nextState === "unknown") {
-        retryId = setTimeout(() => void check(), UNKNOWN_STATUS_RETRY_MS);
-        return;
-      }
-      setState(nextState);
+      setState(nextState === "unknown" ? "unavailable" : nextState);
     };
     const onConfiguredChanged = () => {
       void check();
@@ -198,7 +192,6 @@ export function useAgentEngineConfigured(
     window.addEventListener("agent-chat:missing-api-key", onMissing);
     return () => {
       cancelled = true;
-      if (retryId !== undefined) clearTimeout(retryId);
       window.removeEventListener(
         "agent-engine:configured-changed",
         onConfiguredChanged,

package/corpus/core/src/client/use-chat-threads.ts

@@ -344,6 +344,24 @@ export function useChatThreads(
   const activeThreadIdRef = useRef(activeThreadId);
   activeThreadIdRef.current = activeThreadId;
 
+  const persistActiveThreadId = useCallback(
+    (id: string) => {
+      try {
+        const threadScope = readKnownThreadScope(id);
+        const targetKey =
+          threadScope === undefined
+            ? activeThreadKey
+            : activeThreadStorageKey(storageKey, threadScope);
+        localStorage.setItem(targetKey, id);
+        localStorage.setItem(
+          activeThreadSeenStorageKey(targetKey),
+          String(Date.now()),
+        );
+      } catch {}
+    },
+    [activeThreadKey, readKnownThreadScope, storageKey],
+  );
+
   // Persist active thread ID — and rehydrate on scope flips. When the user
   // navigates from deck A to deck B, `activeThreadKey` changes; we re-read B's
   // scoped thread only if the currently visible chat is itself scoped to a
@@ -388,6 +406,9 @@ export function useChatThreads(
       setActiveThreadId(nextActiveThreadId);
       return;
     }
+    if (!activeThreadId && !restoreActiveThread && !routeControlsActiveThread) {
+      return;
+    }
     try {
       if (routeControlsActiveThread && !routeThreadId) {
         localStorage.removeItem(activeThreadKey);
@@ -395,14 +416,7 @@ export function useChatThreads(
         return;
       }
       if (activeThreadId) {
-        const threadScope = readKnownThreadScope(activeThreadId);
-        if (threadScope === undefined) return;
-        const targetKey = activeThreadStorageKey(storageKey, threadScope);
-        localStorage.setItem(targetKey, activeThreadId);
-        localStorage.setItem(
-          activeThreadSeenStorageKey(targetKey),
-          String(Date.now()),
-        );
+        persistActiveThreadId(activeThreadId);
       } else {
         localStorage.removeItem(activeThreadKey);
         localStorage.removeItem(activeThreadSeenKey);
@@ -414,7 +428,9 @@ export function useChatThreads(
     activeThreadSeenKey,
     addOptimisticThread,
     autoCreate,
+    persistActiveThreadId,
     readKnownThreadScope,
+    restoreActiveThread,
     routeControlsActiveThread,
     routeThreadId,
     storageKey,
@@ -640,10 +656,11 @@ export function useChatThreads(
       const id = preferredId || createLocalThreadId();
       newlyCreatedRef.current.add(id);
       addOptimisticThread(id, scopeRef.current ?? null);
+      persistActiveThreadId(id);
       setActiveThreadId(id);
       return Promise.resolve(id);
     },
-    [addOptimisticThread],
+    [addOptimisticThread, persistActiveThreadId],
   );
 
   useEffect(() => {
@@ -890,9 +907,13 @@ export function useChatThreads(
     [],
   );
 
-  const switchThread = useCallback((id: string) => {
-    setActiveThreadId(id);
-  }, []);
+  const switchThread = useCallback(
+    (id: string) => {
+      persistActiveThreadId(id);
+      setActiveThreadId(id);
+    },
+    [persistActiveThreadId],
+  );
 
   const removeThread = useCallback(
     async (id: string) => {

package/corpus/core/src/db/client.ts

@@ -649,6 +649,8 @@ const CONNECTION_ERROR_CODES = new Set([
   "ETIMEDOUT",
   "EPIPE",
   "ENOTFOUND",
+  "EMAXCONN",
+  "53300",
   "CONNECT_TIMEOUT",
   "CONNECTION_ENDED",
   "CONNECTION_DESTROYED",
@@ -672,7 +674,7 @@ export function isConnectionError(err: any): boolean {
     return true;
   }
   const msg = String(err.message || err.cause?.message || "");
-  return /ECONNRESET|ETIMEDOUT|EPIPE|connection.*(closed|ended|terminated)|socket hang up|websocket/i.test(
+  return /ECONNRESET|ETIMEDOUT|EPIPE|EMAXCONN|too many connections|max client connections|remaining connection slots|connection.*(closed|ended|terminated)|socket hang up|websocket/i.test(
     msg,
   );
 }
@@ -699,6 +701,7 @@ export function isTransientDatabaseError(err: unknown): boolean {
   const code = String(error?.code ?? error?.cause?.code ?? "");
   if (
     code === "ECHECKOUTTIMEOUT" ||
+    code === "EMAXCONN" ||
     code === "53300" ||
     code === "57014" ||
     /^08/.test(code) ||
@@ -880,10 +883,10 @@ export function isServerlessRuntime(): boolean {
 
 /**
  * postgres.js pool options tuned per runtime. A serverless instance handles
- * one request at a time, so a tiny pool is enough — but we cap at 2 (not 1)
- * so a single slow query or open transaction can't serialize every other
- * query in the same request. Total connections stay bounded to ≈ 2×
- * concurrent-instance count instead of 10×. idle_timeout is shortened on
+ * one request at a time, so a single connection is enough. Keeping the
+ * foreground pool at 1 is important because each instance can also open an
+ * app and Better Auth pool; a max of 2 on each pool still exhausted Neon
+ * under a burst of warm instances. idle_timeout is shortened on
  * serverless so a thawed-but-idle instance releases its connections quickly.
  * Long-lived Node servers keep the normal pool for throughput.
  */
@@ -891,7 +894,7 @@ export function pgPoolOptions(url: string): Record<string, unknown> {
   const serverless = isServerlessRuntime();
   return {
     onnotice: () => {},
-    max: serverless ? 2 : 10,
+    max: serverless ? 1 : 10,
     idle_timeout: serverless ? 20 : 240,
     max_lifetime: 60 * 30,
     connect_timeout: 10,
@@ -903,9 +906,9 @@ export function pgPoolOptions(url: string): Record<string, unknown> {
 
 /**
  * Connection cap for the @neondatabase/serverless `Pool`. Same instance
- * accumulation risk as postgres.js — a small pool (2) is enough on serverless
- * and keeps total connections bounded while still letting a second query
- * proceed when one connection is busy.
+ * accumulation risk as postgres.js — one connection is enough for a
+ * foreground serverless invocation and keeps the aggregate app/framework/auth
+ * budget bounded.
  */
 export function neonPoolMax(): number {
   if (!isServerlessRuntime()) return 10;
@@ -921,7 +924,7 @@ export function neonPoolMax(): number {
   // burst; keep the foreground serverless pool tiny to avoid "Max client
   // connections reached" across many warm instances.
   if (isBackgroundFunctionPoolContext()) return 8;
-  return 2;
+  return 1;
 }
 
 /**

package/corpus/core/src/extensions/actions.ts

@@ -839,7 +839,11 @@ export function createExtensionActionEntries(): Record<string, ActionEntry> {
 
         await ensureExtensionsTables();
         const access = await resolveAccess("extension", extensionId);
-        if (!access || access.role === "viewer")
+        if (
+          !access ||
+          (access.resource as ExtensionRow | undefined)?.archivedAt ||
+          access.role === "viewer"
+        )
           return `Error: editor access required for extension ${extensionId}.`;
 
         const userEmail = getRequestUserEmail()?.toLowerCase() ?? "";
@@ -942,7 +946,11 @@ export function createExtensionActionEntries(): Record<string, ActionEntry> {
 
         await ensureExtensionsTables();
         const access = await resolveAccess("extension", extensionId);
-        if (!access) return `Error: no access to extension ${extensionId}.`;
+        if (
+          !access ||
+          (access.resource as ExtensionRow | undefined)?.archivedAt
+        )
+          return `Error: no access to extension ${extensionId}.`;
 
         const userEmail = getRequestUserEmail()?.toLowerCase() ?? "";
         const scope = args?.scope ?? "user";
@@ -1012,14 +1020,14 @@ export function createExtensionActionEntries(): Record<string, ActionEntry> {
     "delete-extension": {
       tool: {
         description:
-          "Permanently delete an extension everywhere it is shared. Requires owner/admin access. If the user only wants a shared extension removed from their own sidebar/list, use hide-extension instead.",
+          "Archive an extension everywhere it is shared. Archiving is a soft delete: the extension and its history, data, sharing, and slot configuration are retained, but it disappears from normal lists. Requires owner/admin access. If the user only wants a shared extension removed from their own sidebar/list, use hide-extension instead.",
         parameters: {
           type: "object",
           properties: {
             id: {
               type: "string",
               description:
-                "Extension id to permanently delete. Use list-extensions first if you only know the display name.",
+                "Extension id to archive. Use list-extensions first if you only know the display name.",
             },
           },
           required: ["id"],
@@ -1036,7 +1044,7 @@ export function createExtensionActionEntries(): Record<string, ActionEntry> {
         try {
           const ok = await deleteExtension(id);
           if (!ok) return `Error: extension not found: ${id}`;
-          return { ok: true, deleted: summarizeDeletedExtension(extension) };
+          return { ok: true, archived: summarizeDeletedExtension(extension) };
         } catch (err: any) {
           return {
             ok: false,

package/corpus/core/src/extensions/local.ts

@@ -322,6 +322,7 @@ async function readLocalExtensionFolder(options: {
     icon: typeof manifest.icon === "string" ? manifest.icon : null,
     createdAt,
     updatedAt,
+    archivedAt: null,
     hiddenAt: null,
     hiddenBy: null,
     ownerEmail: "local-files",

package/corpus/core/src/extensions/routes.ts

@@ -227,8 +227,8 @@ async function dispatch(
     }
 
     const access = await resolveAccess("extension", parts[0]);
-    const extension = access?.resource;
-    if (!extension) {
+    const extension = access?.resource as ExtensionRow | undefined;
+    if (!access || !extension || extension.archivedAt) {
       setResponseStatus(event, 404);
       return { error: "Extension not found" };
     }
@@ -317,11 +317,12 @@ async function dispatch(
     }
 
     const access = await resolveAccess("extension", parts[0]);
-    if (!access) {
+    const extension = access?.resource as ExtensionRow | undefined;
+    if (!access || !extension || extension.archivedAt) {
       setResponseStatus(event, 404);
       return { error: "Extension not found" };
     }
-    return extensionResponse(access.resource as ExtensionRow, access.role);
+    return extensionResponse(extension, access.role);
   }
 
   // POST /:id/hide — remove from the current user's Extensions list/sidebar
@@ -433,7 +434,7 @@ async function dispatch(
       setResponseStatus(event, 404);
       return { error: "Extension not found" };
     }
-    return { ok: true };
+    return { ok: true, archived: true };
   }
 
   setResponseStatus(event, 404);
@@ -662,6 +663,10 @@ async function requireExtensionDataAccess(
   minRole: ShareRole,
 ): Promise<{ ok: true } | { ok: false; response: unknown }> {
   const access = await resolveAccess("extension", extensionId);
+  if (access?.resource && (access.resource as ExtensionRow).archivedAt) {
+    setResponseStatus(event, 404);
+    return { ok: false, response: { error: "Extension not found" } };
+  }
   if (access) {
     if (ROLE_RANK[access.role] < ROLE_RANK[minRole]) {
       setResponseStatus(event, 403);

package/corpus/core/src/extensions/schema.ts

@@ -27,6 +27,7 @@ export const extensions = table("tools", {
   icon: text("icon"),
   createdAt: text("created_at").notNull().default(now()),
   updatedAt: text("updated_at").notNull().default(now()),
+  archivedAt: text("archived_at"),
   hiddenAt: text("hidden_at"),
   hiddenBy: text("hidden_by"),
   ...ownableColumns(),
@@ -66,6 +67,7 @@ export const EXTENSIONS_CREATE_SQL = `CREATE TABLE IF NOT EXISTS tools (
   icon TEXT,
   created_at TEXT NOT NULL DEFAULT (datetime('now')),
   updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+  archived_at TEXT,
   hidden_at TEXT,
   hidden_by TEXT,
   owner_email TEXT NOT NULL DEFAULT 'local@localhost',
@@ -81,6 +83,7 @@ export const EXTENSIONS_CREATE_SQL_PG = `CREATE TABLE IF NOT EXISTS tools (
   icon TEXT,
   created_at TEXT NOT NULL DEFAULT now(),
   updated_at TEXT NOT NULL DEFAULT now(),
+  archived_at TEXT,
   hidden_at TEXT,
   hidden_by TEXT,
   owner_email TEXT NOT NULL DEFAULT 'local@localhost',
@@ -162,6 +165,8 @@ export const EXTENSION_DATA_DROP_OLD_INDEX_SQL_PG = `DROP INDEX IF EXISTS tool_d
 export const EXTENSIONS_OWNER_INDEX_SQL = `CREATE INDEX IF NOT EXISTS tools_owner_idx ON tools (owner_email)`;
 export const EXTENSIONS_ORG_INDEX_SQL = `CREATE INDEX IF NOT EXISTS tools_org_idx ON tools (org_id)`;
 export const EXTENSIONS_UPDATED_INDEX_SQL = `CREATE INDEX IF NOT EXISTS tools_updated_at_idx ON tools (updated_at)`;
+export const EXTENSIONS_ARCHIVED_AT_COLUMN_SQL = `ALTER TABLE tools ADD COLUMN IF NOT EXISTS archived_at TEXT`;
+export const EXTENSIONS_ARCHIVED_AT_INDEX_SQL = `CREATE INDEX IF NOT EXISTS tools_archived_at_idx ON tools (archived_at)`;
 
 // Global (admin) hide: when set, the extension row is hidden from EVERYONE's
 // list, distinct from the per-user `tool_hidden_extensions` table. Additive

package/corpus/core/src/extensions/slots/store.ts

@@ -1,6 +1,6 @@
 import { randomUUID } from "node:crypto";
 
-import { and, eq, inArray, sql } from "drizzle-orm";
+import { and, eq, inArray, isNull, sql } from "drizzle-orm";
 
 import { getDbExec, isPostgres } from "../../db/client.js";
 import { createGetDb } from "../../db/create-get-db.js";
@@ -203,7 +203,12 @@ export async function listExtensionsForSlot(slotId: string): Promise<
       icon: extensions.icon,
     })
     .from(extensions)
-    .where(accessFilter(extensions, extensionShares));
+    .where(
+      and(
+        accessFilter(extensions, extensionShares),
+        isNull(extensions.archivedAt),
+      ),
+    );
   const localRows = (await listLocalExtensions())
     .filter((extension) => extension.source.slots.includes(slotId))
     .map((extension) => ({
@@ -397,7 +402,12 @@ export async function listSlotInstallsForUser(slotId: string): Promise<
       updatedAt: extensions.updatedAt,
     })
     .from(extensions)
-    .where(accessFilter(extensions, extensionShares));
+    .where(
+      and(
+        accessFilter(extensions, extensionShares),
+        isNull(extensions.archivedAt),
+      ),
+    );
   const byId = new Map(accessible.map((t: any) => [t.id, t]));
 
   const sqlInstalls = (installs as ExtensionSlotInstallRow[])
@@ -419,7 +429,7 @@ export async function listSlotInstallsForUser(slotId: string): Promise<
   return [...localInstalls, ...sqlInstalls];
 }
 
-/** Delete every slot/install row referencing a extension. Called from deleteExtension. */
+/** Delete every slot/install row referencing an extension for maintenance. */
 export async function cascadeDeleteExtensionSlots(
   extensionId: string,
 ): Promise<void> {

package/corpus/core/src/extensions/store.ts

@@ -52,6 +52,8 @@ import {
   EXTENSIONS_OWNER_INDEX_SQL,
   EXTENSIONS_ORG_INDEX_SQL,
   EXTENSIONS_UPDATED_INDEX_SQL,
+  EXTENSIONS_ARCHIVED_AT_COLUMN_SQL,
+  EXTENSIONS_ARCHIVED_AT_INDEX_SQL,
   EXTENSIONS_HIDDEN_AT_COLUMN_SQL,
   EXTENSIONS_HIDDEN_BY_COLUMN_SQL,
   EXTENSIONS_HIDDEN_AT_INDEX_SQL,
@@ -103,6 +105,11 @@ export async function ensureExtensionsTables(): Promise<void> {
           "tools_updated_at_idx",
           EXTENSIONS_UPDATED_INDEX_SQL,
         );
+        await ensureExtensionsArchivedColumn(client, pg);
+        await ensureIndexExists(
+          "tools_archived_at_idx",
+          EXTENSIONS_ARCHIVED_AT_INDEX_SQL,
+        );
         await ensureExtensionsGlobalHideColumns(client, pg); // ADD COLUMN — guarded inside
         await ensureIndexExists(
           "tools_hidden_at_idx",
@@ -176,6 +183,10 @@ export async function ensureExtensionsTables(): Promise<void> {
       await retryOnDdlRace(() => client.execute(EXTENSIONS_OWNER_INDEX_SQL));
       await retryOnDdlRace(() => client.execute(EXTENSIONS_ORG_INDEX_SQL));
       await retryOnDdlRace(() => client.execute(EXTENSIONS_UPDATED_INDEX_SQL));
+      await ensureExtensionsArchivedColumn(client, pg);
+      await retryOnDdlRace(() =>
+        client.execute(EXTENSIONS_ARCHIVED_AT_INDEX_SQL),
+      );
       await ensureExtensionsGlobalHideColumns(client, pg);
       await retryOnDdlRace(() =>
         client.execute(EXTENSIONS_HIDDEN_AT_INDEX_SQL),
@@ -346,6 +357,31 @@ async function ensureExtensionsGlobalHideColumns(
   await addCol(EXTENSIONS_HIDDEN_BY_COLUMN_SQL, "hidden_by", "TEXT");
 }
 
+async function ensureExtensionsArchivedColumn(
+  client: ReturnType<typeof getDbExec>,
+  pg: boolean,
+): Promise<void> {
+  if (pg) {
+    await ensureColumnExists(
+      "tools",
+      "archived_at",
+      EXTENSIONS_ARCHIVED_AT_COLUMN_SQL,
+    );
+    return;
+  }
+  await client
+    .execute("ALTER TABLE tools ADD COLUMN archived_at TEXT")
+    .catch((err: any) => {
+      if (
+        !String(err?.message ?? err)
+          .toLowerCase()
+          .includes("duplicate")
+      ) {
+        throw err;
+      }
+    });
+}
+
 export function registerExtensionsShareable() {
   registerShareableResource({
     type: "extension",
@@ -373,6 +409,7 @@ export interface ExtensionRow {
   icon: string | null;
   createdAt: string;
   updatedAt: string;
+  archivedAt: string | null;
   hiddenAt: string | null;
   hiddenBy: string | null;
   ownerEmail: string;
@@ -881,9 +918,10 @@ export async function listExtensions(
   // on repeated `.where()` calls, so combine the access filter and the
   // global-hidden filter into one condition.
   const base = accessFilter(extensions, extensionShares);
+  const visible = and(base, isNull(extensions.archivedAt));
   const where = options.includeGloballyHidden
-    ? base
-    : and(base, isNull(extensions.hiddenAt));
+    ? visible
+    : and(visible, isNull(extensions.hiddenAt));
   const rows = (await db
     .select()
     .from(extensions)
@@ -899,7 +937,8 @@ export async function listExtensions(
 export async function getExtension(id: string): Promise<ExtensionRow | null> {
   await ensureExtensionsTables();
   const access = await resolveAccess("extension", id);
-  return (access?.resource as ExtensionRow | undefined) ?? null;
+  const resource = access?.resource as ExtensionRow | undefined;
+  return resource?.archivedAt ? null : (resource ?? null);
 }
 
 export interface ListExtensionHistoryOptions {
@@ -983,7 +1022,7 @@ export async function restoreExtensionHistoryVersion(
     .from(extensions)
     .where(eq(extensions.id, id));
   const existing = existingRows[0] as ExtensionRow | undefined;
-  if (!existing) return null;
+  if (!existing || existing.archivedAt) return null;
 
   await ensureExtensionHistoryBaseline(existing);
   const target = await getPersistedHistoryEntry(id, version, true);
@@ -1045,6 +1084,7 @@ export async function createExtension(
     icon: data.icon ?? null,
     createdAt: now,
     updatedAt: now,
+    archivedAt: null,
     hiddenAt: null,
     hiddenBy: null,
     ownerEmail: userEmail,
@@ -1098,6 +1138,7 @@ export async function findRecentDuplicateExtension(data: {
         eq(extensions.description, description),
         icon === null ? isNull(extensions.icon) : eq(extensions.icon, icon),
         gte(extensions.createdAt, fiveMinutesAgo),
+        isNull(extensions.archivedAt),
         isNull(extensions.hiddenAt),
       ),
     )
@@ -1146,7 +1187,7 @@ export async function updateExtension(
     .from(extensions)
     .where(eq(extensions.id, id));
   const existing = existingRows[0] as ExtensionRow | undefined;
-  if (!existing) return null;
+  if (!existing || existing.archivedAt) return null;
   await ensureExtensionHistoryBaseline(existing);
   await db.update(extensions).set(updates).where(eq(extensions.id, id));
   const rows = await db.select().from(extensions).where(eq(extensions.id, id));
@@ -1200,7 +1241,9 @@ export async function updateExtensionContent(
     .select()
     .from(extensions)
     .where(eq(extensions.id, id));
-  if (!existingRows[0]) return null;
+  if (!existingRows[0] || (existingRows[0] as ExtensionRow).archivedAt) {
+    return null;
+  }
   const existing = existingRows[0] as ExtensionRow;
   const existingContent = existing.content;
   await ensureExtensionHistoryBaseline(existing);
@@ -1234,20 +1277,13 @@ export async function deleteExtension(id: string): Promise<boolean> {
   const rows = await db.select().from(extensions).where(eq(extensions.id, id));
   const row = rows[0] as ExtensionRow | undefined;
   if (!row) return false;
+  if (row.archivedAt) return true;
   const targets = await extensionChangeTargetsForRow(row);
-  await db.delete(extensionShares).where(eq(extensionShares.resourceId, id));
-  await db.delete(extensionHides).where(eq(extensionHides.extensionId, id));
-  await getDbExec().execute({
-    sql: `DELETE FROM tool_data WHERE tool_id = ?`,
-    args: [id],
-  });
-  await getDbExec().execute({
-    sql: `DELETE FROM tool_history WHERE tool_id = ?`,
-    args: [id],
-  });
-  const { cascadeDeleteExtensionSlots } = await import("./slots/store.js");
-  await cascadeDeleteExtensionSlots(id);
-  await db.delete(extensions).where(eq(extensions.id, id));
+  const archivedAt = new Date().toISOString();
+  await db
+    .update(extensions)
+    .set({ archivedAt, updatedAt: archivedAt })
+    .where(eq(extensions.id, id));
   await notifyExtensionChanged(targets);
   return true;
 }

package/corpus/core/src/extensions/theme.ts

@@ -92,7 +92,7 @@ export function getThemeVars(_isDark?: boolean): string {
   --muted-foreground: 240 5% 64.9%;
   --accent: 240 3.7% 15.9%;
   --accent-foreground: 0 0% 98%;
-  --destructive: 0 62.8% 30.6%;
+  --destructive: 0 84% 60%;
   --destructive-foreground: 0 0% 98%;
   --border: 240 3.7% 15.9%;
   --input: 240 3.7% 15.9%;

package/corpus/core/src/file-upload/registry.ts

@@ -69,6 +69,15 @@ export async function getActiveFileUploadProviderForRequest(): Promise<FileUploa
   if (builderFileUploadProvider.isConfigured()) {
     return builderFileUploadProvider;
   }
+  try {
+    const { resolveHasBuilderPrivateKey } =
+      await import("../server/credential-provider.js");
+    if (await resolveHasBuilderPrivateKey()) {
+      return builderFileUploadProvider;
+    }
+  } catch {
+    // Treat failed scoped credential lookups as unavailable.
+  }
   return null;
 }
 

package/corpus/core/src/index.browser.ts

@@ -100,6 +100,11 @@ export {
   type ActionMcpAppResourceConfig,
   type ActionMcpAppResourceMeta,
 } from "./action.js";
+export {
+  normalizeUserProfileName,
+  USER_PROFILE_SETTING_KEY,
+  type UserProfile,
+} from "./user-profile/index.js";
 export {
   ACTION_CHAT_UI_DATA_CHART_RENDERER,
   ACTION_CHAT_UI_DATA_INSIGHTS_RENDERER,

package/corpus/core/src/index.ts

@@ -41,6 +41,7 @@ export {
   type ActionMcpAppResourceConfig,
   type ActionMcpAppResourceMeta,
 } from "./action.js";
+export * from "./user-profile/index.js";
 export {
   embedApp,
   MCP_APP_REQUEST_ORIGIN_CSP_SOURCE,