@agent-native/core 0.139.0 → 0.141.0

package/dist/db/migrations.js

@@ -354,11 +354,12 @@ export function runMigrations(migrations, options) {
             //
             // Now: use the pooled singleton (getDbExec) for the bookkeeping SELECT. If
             // the migrations table does not yet exist we treat it as "all migrations
-            // pending" (current = -1). Only when there are pending migrations do we open
-            // the direct-endpoint exec (DDL is the only thing Neon's PgBouncer blocks —
-            // documented at getMigrationDatabaseUrl). The direct exec is shared across
-            // concurrent runners via acquireMigrationExec() and closed after the last
-            // caller via releaseMigrationExec().
+            // pending" (current = -1). Pending SQL/DDL opens the direct-endpoint exec
+            // (DDL is the only thing Neon's PgBouncer blocks — documented at
+            // getMigrationDatabaseUrl); run-only entries stay on the pooled client once
+            // both bookkeeping tables are known to exist. The direct exec is shared
+            // across concurrent runners via acquireMigrationExec() and closed after the
+            // last caller via releaseMigrationExec().
             // ---------------------------------------------------------------------------
             let current = -1; // sentinel: "table missing" → treat all as pending
             let namedRowsMissing = false; // sentinel: "named table missing" → no names applied yet
@@ -395,18 +396,34 @@ export function runMigrations(migrations, options) {
             if (pg && pendingFast !== null && pendingFast.length === 0) {
                 return;
             }
+            // A run-only migration does not need the direct endpoint: the fast path
+            // already proved both bookkeeping tables exist, and its `run` callback is
+            // responsible for its own pooled database work. Keep the direct path for
+            // any pending SQL or for the first boot, where the tables still need DDL.
+            const runOnlyPending = pg &&
+                current >= 0 &&
+                !namedRowsMissing &&
+                pendingFast !== null &&
+                pendingFast.length > 0 &&
+                pendingFast.every((m) => resolveMigrationSql(m.sql, pg) === null);
             // Acquire the exec appropriate for the dialect.
             // For Postgres: the shared direct-endpoint exec (DDL-safe, closed on release).
             // For SQLite/libsql: the singleton pooled exec (no pooler concern).
-            const exec = pg ? await acquireMigrationExec() : getDbExec();
+            const exec = pg
+                ? runOnlyPending
+                    ? getDbExec()
+                    : await acquireMigrationExec()
+                : getDbExec();
             try {
-                // Retry initial table creation — SQLITE_BUSY_RECOVERY can occur on HMR
-                // restarts when WAL files from the previous process haven't been released yet.
-                await retrySqliteBusy(() => exec.execute(`CREATE TABLE IF NOT EXISTS ${table} (version INTEGER PRIMARY KEY)`), { maxAttempts: 6, baseDelayMs: 1000, rethrow: true });
-                // Companion name-keyed bookkeeping table — never alters the existing
-                // `${table}`'s PRIMARY KEY, so legacy version rows keep working exactly
-                // as before. See the `runMigrations` doc comment for why this exists.
-                await retrySqliteBusy(() => exec.execute(`CREATE TABLE IF NOT EXISTS ${namedTable} (name TEXT PRIMARY KEY, version INTEGER, applied_at ${pg ? "TIMESTAMP NOT NULL DEFAULT now()" : "TEXT NOT NULL DEFAULT (datetime('now'))"})`), { maxAttempts: 6, baseDelayMs: 1000, rethrow: true });
+                if (!runOnlyPending) {
+                    // Retry initial table creation — SQLITE_BUSY_RECOVERY can occur on HMR
+                    // restarts when WAL files from the previous process haven't been released yet.
+                    await retrySqliteBusy(() => exec.execute(`CREATE TABLE IF NOT EXISTS ${table} (version INTEGER PRIMARY KEY)`), { maxAttempts: 6, baseDelayMs: 1000, rethrow: true });
+                    // Companion name-keyed bookkeeping table — never alters the existing
+                    // `${table}`'s PRIMARY KEY, so legacy version rows keep working exactly
+                    // as before. See the `runMigrations` doc comment for why this exists.
+                    await retrySqliteBusy(() => exec.execute(`CREATE TABLE IF NOT EXISTS ${namedTable} (name TEXT PRIMARY KEY, version INTEGER, applied_at ${pg ? "TIMESTAMP NOT NULL DEFAULT now()" : "TEXT NOT NULL DEFAULT (datetime('now'))"})`), { maxAttempts: 6, baseDelayMs: 1000, rethrow: true });
+                }
                 // For Postgres, current was already set by the fast-path SELECT above.
                 // For SQLite we run the SELECT now (via the same exec, which is the singleton).
                 if (!pg) {
@@ -417,7 +434,8 @@ export function runMigrations(migrations, options) {
                         appliedNames = new Set(nameRows.map((r) => String(r.name)));
                     }
                 }
-                else if (current === -1 || (hasNamedMigrations && namedRowsMissing)) {
+                else if (!runOnlyPending &&
+                    (current === -1 || (hasNamedMigrations && namedRowsMissing))) {
                     // Fast-path read failed (table was absent on the pooler): re-read via the
                     // direct exec now that CREATE TABLE IF NOT EXISTS has ensured it exists.
                     if (current === -1) {
@@ -435,7 +453,9 @@ export function runMigrations(migrations, options) {
                 const insertNamedSql = pg
                     ? `INSERT INTO ${namedTable} (name, version) VALUES (?, ?) ON CONFLICT DO NOTHING`
                     : `INSERT OR IGNORE INTO ${namedTable} (name, version) VALUES (?, ?)`;
-                const pending = migrations.filter((m) => m.name ? !appliedNames.has(m.name) : m.version > current);
+                const pending = runOnlyPending
+                    ? pendingFast
+                    : migrations.filter((m) => m.name ? !appliedNames.has(m.name) : m.version > current);
                 if (pending.length > 0) {
                     console.log(`[db] Applying ${pending.length} migration(s) on ${pg ? "Postgres" : "SQLite/libsql"}…`);
                 }
@@ -532,10 +552,10 @@ export function runMigrations(migrations, options) {
                 }
             }
             finally {
-                // Release the direct-endpoint exec (Postgres only). For SQLite getDbExec()
-                // returns the process-lifetime singleton, so releaseMigrationExec is a no-op
-                // (refCount never incremented for SQLite path, guard in releaseMigrationExec).
-                if (pg)
+                // Release the direct-endpoint exec (Postgres only). Run-only migrations
+                // use the process-lifetime pooled singleton, so there is nothing to close
+                // in that branch.
+                if (pg && !runOnlyPending)
                     await releaseMigrationExec();
             }
         }

package/dist/file-upload/actions/upload-image.d.ts

@@ -17,12 +17,12 @@ declare const _default: import("../../action.js").ActionDefinition<{
     id?: undefined;
     provider?: undefined;
 } | {
+    error?: undefined;
     configured?: undefined;
     connectPath?: undefined;
     url: string;
     id: string;
     provider: string;
-    error?: undefined;
 }>;
 export default _default;
 //# sourceMappingURL=upload-image.d.ts.map

package/dist/localization/default-messages.d.ts

@@ -175,7 +175,6 @@ declare const messages: {
             resources: string;
             messaging: string;
             destinations: string;
-            transactionalEmail: string;
             identities: string;
             approvals: string;
             automations: string;
@@ -206,50 +205,6 @@ declare const messages: {
             suggestionRouteSlack: string;
             suggestionGrantKey: string;
         };
-        transactionalEmail: {
-            title: string;
-            description: string;
-            retentionTitle: string;
-            retentionNote: string;
-            openRatesUnavailable: string;
-            sharedProviderMetricsUnavailable: string;
-            catalogFanoutFailed: string;
-            retry: string;
-            noApps: string;
-            catalogUnreadable: string;
-            countsUnreadable: string;
-            appSendsNoEmail: string;
-            emailNotFound: string;
-            emailNotFoundDescription: string;
-            sharedTitle: string;
-            sharedSubtitle: string;
-            email: string;
-            trigger: string;
-            sends: string;
-            openRate: string;
-            lastSent: string;
-            sendLogUnread: string;
-            failedCount: string;
-            failuresUnknown: string;
-            noProviderRecord: string;
-            noDeliveredMail: string;
-            neverSent: string;
-            lastSentUnknown: string;
-            preview: string;
-            previewDescription: string;
-            previewFailed: string;
-            previewFrameTitle: string;
-            subject: string;
-            activityLink: string;
-            activityTitle: string;
-            activityUnavailable: string;
-            activityEmpty: string;
-            recipient: string;
-            sender: string;
-            status: string;
-            opens: string;
-            lastEvent: string;
-        };
         pages: {
             appsDescription: string;
             appsDescriptionWithWorkspace: string;

package/dist/localization/default-messages.js

@@ -180,7 +180,6 @@ const messages = {
             resources: "Resources",
             messaging: "Messaging",
             destinations: "Destinations",
-            transactionalEmail: "Transactional email",
             identities: "Identities",
             approvals: "Approvals",
             automations: "Automations",
@@ -211,50 +210,6 @@ const messages = {
             suggestionRouteSlack: "Route Slack mentions to my analytics app",
             suggestionGrantKey: "Grant my OpenAI key to this app",
         },
-        transactionalEmail: {
-            title: "Transactional email",
-            description: "Every transactional email each app in this workspace can send, with its trigger, recipients, and delivery metrics.",
-            retentionTitle: "Activity feed retention is short",
-            retentionNote: "The email provider's activity feed only retains recent messages, so an empty activity list does not mean nothing was sent.",
-            openRatesUnavailable: "Open rates unavailable",
-            sharedProviderMetricsUnavailable: "Provider metrics vary by sending app. Expand an app to see its provider data.",
-            catalogFanoutFailed: "Could not load app email catalogs",
-            retry: "Retry",
-            noApps: "No ready apps reported a transactional email catalog.",
-            catalogUnreadable: "This app's email catalog could not be read",
-            countsUnreadable: "Send counts could not be read",
-            appSendsNoEmail: "This app sends no transactional email of its own.",
-            emailNotFound: "Email not found",
-            emailNotFoundDescription: "This email is not in the app's catalog.",
-            sharedTitle: "Shared system email",
-            sharedSubtitle: "sent by every app",
-            email: "Email",
-            trigger: "Trigger",
-            sends: "Sends",
-            openRate: "Open rate",
-            lastSent: "Last sent",
-            sendLogUnread: "The send log could not be read, so the number of sends is unknown.",
-            failedCount: "{{count}} failed",
-            failuresUnknown: "failures unknown",
-            noProviderRecord: "The provider reported no record for this email in the window.",
-            noDeliveredMail: "No delivered mail yet",
-            neverSent: "Never sent",
-            lastSentUnknown: "The send log could not be read, so the last send time is unknown.",
-            preview: "Preview",
-            previewDescription: "Rendered with dummy data. Scripts are disabled in this preview.",
-            previewFailed: "Preview could not be rendered",
-            previewFrameTitle: "Preview of {{name}}",
-            subject: "Subject",
-            activityLink: "Activity log",
-            activityTitle: "Activity for {{name}}",
-            activityUnavailable: "Activity feed unavailable",
-            activityEmpty: "No recent activity in the provider's retention window.",
-            recipient: "Recipient",
-            sender: "Sender",
-            status: "Status",
-            opens: "Opens",
-            lastEvent: "Last event",
-        },
         pages: {
             appsDescription: "Open workspace apps and start new app creation from Dispatch.",
             appsDescriptionWithWorkspace: 'Apps in the "{{workspace}}" workspace. Each app gets its own route under this workspace and shares its database, auth, and agent chat.',

package/dist/notifications/routes.d.ts

@@ -13,22 +13,22 @@
 export declare function createNotificationsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<"" | import("./types.js").Notification[] | {
     count: number;
     updated?: undefined;
-    error?: undefined;
     ok?: undefined;
+    error?: undefined;
 } | {
-    count?: undefined;
     updated: number;
-    error?: undefined;
     ok?: undefined;
-} | {
+    error?: undefined;
     count?: undefined;
+} | {
     updated?: undefined;
     error: string;
     ok?: undefined;
-} | {
     count?: undefined;
+} | {
     updated?: undefined;
     ok: boolean;
     error?: undefined;
+    count?: undefined;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/observability/routes.d.ts

@@ -41,16 +41,16 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
-    error?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
+    error?: undefined;
     ok?: undefined;
 } | {
-    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id: string;
+    error?: undefined;
     ok?: undefined;
 } | {
     summary?: undefined;
@@ -59,10 +59,10 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     error: any;
     ok?: undefined;
 } | {
-    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
+    error?: undefined;
     ok: boolean;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/org/handlers.js

@@ -28,7 +28,6 @@ function extractMemberEmail(event) {
 const nanoid = () => globalThis.crypto?.randomUUID?.().replace(/-/g, "") ??
     Math.random().toString(36).slice(2) + Date.now().toString(36);
 import { getDbExec, isPostgres } from "../db/client.js";
-import { CORE_INVITE_EMAIL_ID } from "../email-catalog/system-emails.js";
 import { ssrfSafeFetch } from "../extensions/url-safety.js";
 import { getAppProductionUrl } from "../server/app-url.js";
 import { getSession } from "../server/auth.js";
@@ -276,13 +275,7 @@ async function inviteOne(ctx, rawEmail, role, event) {
                 acceptUrl: getInviteAppUrl(event),
                 inviter: ctx.email,
             });
-            await sendEmail({
-                to: email,
-                subject,
-                html,
-                text,
-                templateId: CORE_INVITE_EMAIL_ID,
-            });
+            await sendEmail({ to: email, subject, html, text });
             emailSent = true;
         }
         catch (err) {

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -75,9 +75,9 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         user: "user";
     }>>;
 }, z.core.$strip>>, {
-    deleted?: undefined;
     id?: undefined;
     provider?: undefined;
+    deleted?: undefined;
     found?: undefined;
     providers: {
         id: string;
@@ -93,41 +93,41 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     label?: undefined;
     message?: undefined;
 } | {
-    deleted?: undefined;
-    count?: undefined;
     id?: undefined;
+    deleted?: undefined;
     providers?: undefined;
+    count?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
     registered?: undefined;
     label?: undefined;
     message?: undefined;
 } | {
-    deleted?: undefined;
-    count?: undefined;
     provider?: undefined;
+    deleted?: undefined;
     providers?: undefined;
+    count?: undefined;
     found: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
     message?: undefined;
 } | {
-    count?: undefined;
     provider?: undefined;
     found?: undefined;
     providers?: undefined;
+    count?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
     message?: undefined;
 } | {
-    deleted?: undefined;
-    count?: undefined;
     provider?: undefined;
+    deleted?: undefined;
     found?: undefined;
     providers?: undefined;
+    count?: undefined;
     registered: boolean;
     id: string;
     label: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -311,10 +311,11 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         notes?: string | undefined;
         scope?: "org" | "user" | undefined;
     }, {
-        message?: undefined;
         id?: undefined;
+        provider?: undefined;
         deleted?: undefined;
         found?: undefined;
+        message?: undefined;
         providers: {
             id: string;
             label: string;
@@ -325,45 +326,44 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
             updatedAt: number;
         }[];
         count: number;
-        provider?: undefined;
         registered?: undefined;
         label?: undefined;
     } | {
-        message?: undefined;
         id?: undefined;
-        deleted?: undefined;
         count?: undefined;
+        deleted?: undefined;
+        message?: undefined;
         providers?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
         registered?: undefined;
         label?: undefined;
     } | {
-        message?: undefined;
-        deleted?: undefined;
         count?: undefined;
-        providers?: undefined;
         provider?: undefined;
+        deleted?: undefined;
+        message?: undefined;
+        providers?: undefined;
         found: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
     } | {
-        message?: undefined;
-        found?: undefined;
         count?: undefined;
-        providers?: undefined;
         provider?: undefined;
+        found?: undefined;
+        message?: undefined;
+        providers?: undefined;
         deleted: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
     } | {
+        count?: undefined;
+        provider?: undefined;
         deleted?: undefined;
         found?: undefined;
-        count?: undefined;
         providers?: undefined;
-        provider?: undefined;
         registered: boolean;
         id: string;
         label: string;

package/dist/secrets/routes.d.ts

@@ -34,37 +34,37 @@ export declare function createListSecretsHandler(): import("h3").EventHandlerWit
 /** POST /_agent-native/secrets/:key — write a secret. */
 export declare function createWriteSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
-    ok?: undefined;
     status?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     status: string;
+    error?: undefined;
 } | {
-    ok?: undefined;
     error: string;
     removed?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     removed: boolean;
+    error?: undefined;
 }>>;
 /**
  * POST /_agent-native/secrets/:key/test — validate an optional candidate value
  * or the current stored value without changing anything.
  */
 export declare function createTestSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
     note?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     note?: undefined;
-} | {
     error?: undefined;
+} | {
     ok: boolean;
     note: string;
+    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -95,12 +95,12 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
-    error?: undefined;
     ok: boolean;
     key: string;
-} | {
     error?: undefined;
+} | {
     ok: boolean;
     removed: boolean;
+    error?: undefined;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/server/action-discovery.js

@@ -517,28 +517,6 @@ export async function mergeCoreSharingActions(registry) {
             () => import("../sharing/actions/create-agent-resource-link.js"),
         ],
         ["upload-image", () => import("../file-upload/actions/upload-image.js")],
-        // Transactional email catalog — mounted everywhere so Dispatch can ask any
-        // app what it sends without that app opting in.
-        [
-            "list-transactional-emails",
-            () => import("../email-catalog/actions/list-transactional-emails.js"),
-        ],
-        [
-            "render-transactional-email-preview",
-            () => import("../email-catalog/actions/render-transactional-email-preview.js"),
-        ],
-        [
-            "list-email-log",
-            () => import("../email-catalog/actions/list-email-log.js"),
-        ],
-        [
-            "list-email-activity",
-            () => import("../email-catalog/actions/list-email-activity.js"),
-        ],
-        [
-            "list-email-engagement",
-            () => import("../email-catalog/actions/list-email-engagement.js"),
-        ],
         [
             "get-feature-flags",
             () => import("../feature-flags/actions/get-feature-flags.js"),

package/dist/server/agent-engine-api-key-route.d.ts

@@ -27,11 +27,11 @@ export declare function resolveAgentEngineApiKeyWriteTarget(event: H3Event, scop
 export declare function createAgentEngineApiKeyHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: any;
 } | {
+    error?: undefined;
     ok: boolean;
     key: string;
     baseUrlKey?: string;
     scope: AgentEngineApiKeyScope;
-    error?: undefined;
 }>>;
 export {};
 //# sourceMappingURL=agent-engine-api-key-route.d.ts.map

package/dist/server/auth.js

@@ -2959,7 +2959,9 @@ async function mountBetterAuthRoutes(app, options) {
         const rawReturn = Array.isArray(query.return)
             ? query.return[0]
             : query.return;
-        setFirstRunOnboardingCookie(event);
+        if (await getSession(event)) {
+            setFirstRunOnboardingCookie(event);
+        }
         return redirectWithStagedCookies(event, safeReturnPath(rawReturn), 302);
     }));
     // Auth guard — stored both in framework middleware registry AND in

package/dist/server/better-auth-instance.js

@@ -18,7 +18,6 @@ import { TEMPLATES } from "../cli/templates-meta.js";
 import { getDbExec, isPostgres } from "../db/client.js";
 import { getDialect, getDatabaseUrl, getDatabaseAuthToken, closePgliteClients, getPgliteClient, isPgliteUrl, loadPgliteDrizzle, pgPoolOptions, neonPoolMax, attachNeonPoolErrorLogger, sharedDbPool, onSharedDbPoolsClosed, onSharedDbPoolReplaced, } from "../db/client.js";
 import { ensureTableExists } from "../db/ddl-guard.js";
-import { CORE_RESET_PASSWORD_EMAIL_ID, CORE_VERIFY_SIGNUP_EMAIL_ID, } from "../email-catalog/system-emails.js";
 import { saveOAuthTokens } from "../oauth-tokens/store.js";
 import { acceptPendingInvitationsForEmail } from "../org/accept-pending.js";
 import { getAuthEmailForUserId, getRequiredAuthProviderForEmail, } from "../org/auth-policy.js";
@@ -919,14 +918,7 @@ async function createBetterAuthInstance(config) {
                     email: user.email,
                     resetUrl,
                 });
-                await sendEmail({
-                    to: user.email,
-                    subject,
-                    html,
-                    text,
-                    appSender,
-                    templateId: CORE_RESET_PASSWORD_EMAIL_ID,
-                });
+                await sendEmail({ to: user.email, subject, html, text, appSender });
             },
         },
         emailVerification: {
@@ -950,14 +942,7 @@ async function createBetterAuthInstance(config) {
                     email: user.email,
                     verifyUrl,
                 });
-                await sendEmail({
-                    to: user.email,
-                    subject,
-                    html,
-                    text,
-                    appSender,
-                    templateId: CORE_VERIFY_SIGNUP_EMAIL_ID,
-                });
+                await sendEmail({ to: user.email, subject, html, text, appSender });
             },
         },
         socialProviders,

package/dist/server/email.d.ts

@@ -58,15 +58,6 @@ export interface SendEmailArgs {
     references?: string;
     attachments?: EmailAttachment[];
     timeoutMs?: number;
-    /**
-     * Registered transactional email id (see `defineTransactionalEmail`), e.g.
-     * `calendar.booking-confirmed`. Tags the message at the provider so delivery
-     * and open metrics attribute to one email instead of to the whole account,
-     * and keys the row written to `email_log`. Omit for genuinely one-off sends.
-     */
-    templateId?: string;
-    /** App slug that owns the send. Defaults to the running app. */
-    app?: string;
 }
 export declare function isEmailConfigured(): Promise<boolean>;
 /**