@agent-native/core 0.140.0 → 0.141.0

package/dist/collab/awareness.d.ts

@@ -62,11 +62,11 @@ export declare const postAwareness: import("h3").EventHandlerWithFetch<import("h
     error: string;
     states?: undefined;
 } | {
-    error?: undefined;
     states: {
         clientId: number;
         state: string;
     }[];
+    error?: undefined;
 }>>;
 /**
  * GET /_agent-native/collab/:docId/users
@@ -77,10 +77,10 @@ export declare const getActiveUsers: import("h3").EventHandlerWithFetch<import("
     error: string;
     users?: undefined;
 } | {
-    error?: undefined;
     users: {
         clientId: number;
         lastSeen: number;
     }[];
+    error?: undefined;
 }>>;
 //# sourceMappingURL=awareness.d.ts.map

package/dist/collab/struct-routes.d.ts

@@ -13,8 +13,8 @@
  * Body: { json: any, fieldName?: string, type?: "map"|"array", requestSource?: string }
  */
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/db/client.js

@@ -804,19 +804,19 @@ export function pgPoolOptions(url) {
 export function neonPoolMax() {
     if (!isServerlessRuntime())
         return 20;
-    // The durable background-function worker is a SINGLE process per run (unlike
-    // the many warm request-instances the foreground serverless has), so it can
-    // safely hold a larger pool without risking Neon's connection cap. The agent's
+    // Netlify can run several background workers concurrently; a background
+    // worker is not a global singleton and must not hold a larger pool than the
+    // foreground path. The agent's
     // pre-send setup fires ~6 concurrent DB reads in parallel; with only 2
     // connections that burst exhausts the pool and a single stalled connection
     // freezes the worker before it can claim — observed on analytics' heavier
     // action surface, where the worker froze right after `model_done` and never
-    // recorded `env_config`/`presend`, while the foreground (10-connection pool)
-    // ran the identical code in ~2s. Give the bg worker enough connections for the
-    // burst; keep the foreground serverless pool tiny to avoid "Max client
-    // connections reached" across many warm instances.
+    // recorded `env_config`/`presend`, while the foreground path ran the
+    // identical code in ~2s. Four connections preserve the concurrent
+    // read burst while keeping foreground and background caps aligned, avoiding
+    // "Max client connections reached" across many warm instances.
     if (isBackgroundFunctionPoolContext())
-        return 8;
+        return 4;
     return 4;
 }
 /**

package/dist/db/migrations.js

@@ -354,11 +354,12 @@ export function runMigrations(migrations, options) {
             //
             // Now: use the pooled singleton (getDbExec) for the bookkeeping SELECT. If
             // the migrations table does not yet exist we treat it as "all migrations
-            // pending" (current = -1). Only when there are pending migrations do we open
-            // the direct-endpoint exec (DDL is the only thing Neon's PgBouncer blocks —
-            // documented at getMigrationDatabaseUrl). The direct exec is shared across
-            // concurrent runners via acquireMigrationExec() and closed after the last
-            // caller via releaseMigrationExec().
+            // pending" (current = -1). Pending SQL/DDL opens the direct-endpoint exec
+            // (DDL is the only thing Neon's PgBouncer blocks — documented at
+            // getMigrationDatabaseUrl); run-only entries stay on the pooled client once
+            // both bookkeeping tables are known to exist. The direct exec is shared
+            // across concurrent runners via acquireMigrationExec() and closed after the
+            // last caller via releaseMigrationExec().
             // ---------------------------------------------------------------------------
             let current = -1; // sentinel: "table missing" → treat all as pending
             let namedRowsMissing = false; // sentinel: "named table missing" → no names applied yet
@@ -395,18 +396,34 @@ export function runMigrations(migrations, options) {
             if (pg && pendingFast !== null && pendingFast.length === 0) {
                 return;
             }
+            // A run-only migration does not need the direct endpoint: the fast path
+            // already proved both bookkeeping tables exist, and its `run` callback is
+            // responsible for its own pooled database work. Keep the direct path for
+            // any pending SQL or for the first boot, where the tables still need DDL.
+            const runOnlyPending = pg &&
+                current >= 0 &&
+                !namedRowsMissing &&
+                pendingFast !== null &&
+                pendingFast.length > 0 &&
+                pendingFast.every((m) => resolveMigrationSql(m.sql, pg) === null);
             // Acquire the exec appropriate for the dialect.
             // For Postgres: the shared direct-endpoint exec (DDL-safe, closed on release).
             // For SQLite/libsql: the singleton pooled exec (no pooler concern).
-            const exec = pg ? await acquireMigrationExec() : getDbExec();
+            const exec = pg
+                ? runOnlyPending
+                    ? getDbExec()
+                    : await acquireMigrationExec()
+                : getDbExec();
             try {
-                // Retry initial table creation — SQLITE_BUSY_RECOVERY can occur on HMR
-                // restarts when WAL files from the previous process haven't been released yet.
-                await retrySqliteBusy(() => exec.execute(`CREATE TABLE IF NOT EXISTS ${table} (version INTEGER PRIMARY KEY)`), { maxAttempts: 6, baseDelayMs: 1000, rethrow: true });
-                // Companion name-keyed bookkeeping table — never alters the existing
-                // `${table}`'s PRIMARY KEY, so legacy version rows keep working exactly
-                // as before. See the `runMigrations` doc comment for why this exists.
-                await retrySqliteBusy(() => exec.execute(`CREATE TABLE IF NOT EXISTS ${namedTable} (name TEXT PRIMARY KEY, version INTEGER, applied_at ${pg ? "TIMESTAMP NOT NULL DEFAULT now()" : "TEXT NOT NULL DEFAULT (datetime('now'))"})`), { maxAttempts: 6, baseDelayMs: 1000, rethrow: true });
+                if (!runOnlyPending) {
+                    // Retry initial table creation — SQLITE_BUSY_RECOVERY can occur on HMR
+                    // restarts when WAL files from the previous process haven't been released yet.
+                    await retrySqliteBusy(() => exec.execute(`CREATE TABLE IF NOT EXISTS ${table} (version INTEGER PRIMARY KEY)`), { maxAttempts: 6, baseDelayMs: 1000, rethrow: true });
+                    // Companion name-keyed bookkeeping table — never alters the existing
+                    // `${table}`'s PRIMARY KEY, so legacy version rows keep working exactly
+                    // as before. See the `runMigrations` doc comment for why this exists.
+                    await retrySqliteBusy(() => exec.execute(`CREATE TABLE IF NOT EXISTS ${namedTable} (name TEXT PRIMARY KEY, version INTEGER, applied_at ${pg ? "TIMESTAMP NOT NULL DEFAULT now()" : "TEXT NOT NULL DEFAULT (datetime('now'))"})`), { maxAttempts: 6, baseDelayMs: 1000, rethrow: true });
+                }
                 // For Postgres, current was already set by the fast-path SELECT above.
                 // For SQLite we run the SELECT now (via the same exec, which is the singleton).
                 if (!pg) {
@@ -417,7 +434,8 @@ export function runMigrations(migrations, options) {
                         appliedNames = new Set(nameRows.map((r) => String(r.name)));
                     }
                 }
-                else if (current === -1 || (hasNamedMigrations && namedRowsMissing)) {
+                else if (!runOnlyPending &&
+                    (current === -1 || (hasNamedMigrations && namedRowsMissing))) {
                     // Fast-path read failed (table was absent on the pooler): re-read via the
                     // direct exec now that CREATE TABLE IF NOT EXISTS has ensured it exists.
                     if (current === -1) {
@@ -435,7 +453,9 @@ export function runMigrations(migrations, options) {
                 const insertNamedSql = pg
                     ? `INSERT INTO ${namedTable} (name, version) VALUES (?, ?) ON CONFLICT DO NOTHING`
                     : `INSERT OR IGNORE INTO ${namedTable} (name, version) VALUES (?, ?)`;
-                const pending = migrations.filter((m) => m.name ? !appliedNames.has(m.name) : m.version > current);
+                const pending = runOnlyPending
+                    ? pendingFast
+                    : migrations.filter((m) => m.name ? !appliedNames.has(m.name) : m.version > current);
                 if (pending.length > 0) {
                     console.log(`[db] Applying ${pending.length} migration(s) on ${pg ? "Postgres" : "SQLite/libsql"}…`);
                 }
@@ -532,10 +552,10 @@ export function runMigrations(migrations, options) {
                 }
             }
             finally {
-                // Release the direct-endpoint exec (Postgres only). For SQLite getDbExec()
-                // returns the process-lifetime singleton, so releaseMigrationExec is a no-op
-                // (refCount never incremented for SQLite path, guard in releaseMigrationExec).
-                if (pg)
+                // Release the direct-endpoint exec (Postgres only). Run-only migrations
+                // use the process-lifetime pooled singleton, so there is nothing to close
+                // in that branch.
+                if (pg && !runOnlyPending)
                     await releaseMigrationExec();
             }
         }

package/dist/localization/default-messages.d.ts

@@ -175,7 +175,6 @@ declare const messages: {
             resources: string;
             messaging: string;
             destinations: string;
-            transactionalEmail: string;
             identities: string;
             approvals: string;
             automations: string;
@@ -206,50 +205,6 @@ declare const messages: {
             suggestionRouteSlack: string;
             suggestionGrantKey: string;
         };
-        transactionalEmail: {
-            title: string;
-            description: string;
-            retentionTitle: string;
-            retentionNote: string;
-            openRatesUnavailable: string;
-            sharedProviderMetricsUnavailable: string;
-            catalogFanoutFailed: string;
-            retry: string;
-            noApps: string;
-            catalogUnreadable: string;
-            countsUnreadable: string;
-            appSendsNoEmail: string;
-            emailNotFound: string;
-            emailNotFoundDescription: string;
-            sharedTitle: string;
-            sharedSubtitle: string;
-            email: string;
-            trigger: string;
-            sends: string;
-            openRate: string;
-            lastSent: string;
-            sendLogUnread: string;
-            failedCount: string;
-            failuresUnknown: string;
-            noProviderRecord: string;
-            noDeliveredMail: string;
-            neverSent: string;
-            lastSentUnknown: string;
-            preview: string;
-            previewDescription: string;
-            previewFailed: string;
-            previewFrameTitle: string;
-            subject: string;
-            activityLink: string;
-            activityTitle: string;
-            activityUnavailable: string;
-            activityEmpty: string;
-            recipient: string;
-            sender: string;
-            status: string;
-            opens: string;
-            lastEvent: string;
-        };
         pages: {
             appsDescription: string;
             appsDescriptionWithWorkspace: string;

package/dist/localization/default-messages.js

@@ -180,7 +180,6 @@ const messages = {
             resources: "Resources",
             messaging: "Messaging",
             destinations: "Destinations",
-            transactionalEmail: "Transactional email",
             identities: "Identities",
             approvals: "Approvals",
             automations: "Automations",
@@ -211,50 +210,6 @@ const messages = {
             suggestionRouteSlack: "Route Slack mentions to my analytics app",
             suggestionGrantKey: "Grant my OpenAI key to this app",
         },
-        transactionalEmail: {
-            title: "Transactional email",
-            description: "Every transactional email each app in this workspace can send, with its trigger, recipients, and delivery metrics.",
-            retentionTitle: "Activity feed retention is short",
-            retentionNote: "The email provider's activity feed only retains recent messages, so an empty activity list does not mean nothing was sent.",
-            openRatesUnavailable: "Open rates unavailable",
-            sharedProviderMetricsUnavailable: "Provider metrics vary by sending app. Expand an app to see its provider data.",
-            catalogFanoutFailed: "Could not load app email catalogs",
-            retry: "Retry",
-            noApps: "No ready apps reported a transactional email catalog.",
-            catalogUnreadable: "This app's email catalog could not be read",
-            countsUnreadable: "Send counts could not be read",
-            appSendsNoEmail: "This app sends no transactional email of its own.",
-            emailNotFound: "Email not found",
-            emailNotFoundDescription: "This email is not in the app's catalog.",
-            sharedTitle: "Shared system email",
-            sharedSubtitle: "sent by every app",
-            email: "Email",
-            trigger: "Trigger",
-            sends: "Sends",
-            openRate: "Open rate",
-            lastSent: "Last sent",
-            sendLogUnread: "The send log could not be read, so the number of sends is unknown.",
-            failedCount: "{{count}} failed",
-            failuresUnknown: "failures unknown",
-            noProviderRecord: "The provider reported no record for this email in the window.",
-            noDeliveredMail: "No delivered mail yet",
-            neverSent: "Never sent",
-            lastSentUnknown: "The send log could not be read, so the last send time is unknown.",
-            preview: "Preview",
-            previewDescription: "Rendered with dummy data. Scripts are disabled in this preview.",
-            previewFailed: "Preview could not be rendered",
-            previewFrameTitle: "Preview of {{name}}",
-            subject: "Subject",
-            activityLink: "Activity log",
-            activityTitle: "Activity for {{name}}",
-            activityUnavailable: "Activity feed unavailable",
-            activityEmpty: "No recent activity in the provider's retention window.",
-            recipient: "Recipient",
-            sender: "Sender",
-            status: "Status",
-            opens: "Opens",
-            lastEvent: "Last event",
-        },
         pages: {
             appsDescription: "Open workspace apps and start new app creation from Dispatch.",
             appsDescriptionWithWorkspace: 'Apps in the "{{workspace}}" workspace. Each app gets its own route under this workspace and shares its database, auth, and agent chat.',

package/dist/notifications/routes.d.ts

@@ -11,24 +11,24 @@
  *   DELETE /_agent-native/notifications/:id         — delete
  */
 export declare function createNotificationsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<"" | import("./types.js").Notification[] | {
-    error?: undefined;
     count: number;
     updated?: undefined;
     ok?: undefined;
-} | {
     error?: undefined;
-    count?: undefined;
+} | {
     updated: number;
     ok?: undefined;
-} | {
+    error?: undefined;
     count?: undefined;
+} | {
     updated?: undefined;
     error: string;
     ok?: undefined;
-} | {
-    error?: undefined;
     count?: undefined;
+} | {
     updated?: undefined;
     ok: boolean;
+    error?: undefined;
+    count?: undefined;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/observability/routes.d.ts

@@ -41,16 +41,16 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
-    error?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
+    error?: undefined;
     ok?: undefined;
 } | {
-    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id: string;
+    error?: undefined;
     ok?: undefined;
 } | {
     summary?: undefined;
@@ -59,10 +59,10 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     error: any;
     ok?: undefined;
 } | {
-    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
+    error?: undefined;
     ok: boolean;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/org/handlers.js

@@ -28,7 +28,6 @@ function extractMemberEmail(event) {
 const nanoid = () => globalThis.crypto?.randomUUID?.().replace(/-/g, "") ??
     Math.random().toString(36).slice(2) + Date.now().toString(36);
 import { getDbExec, isPostgres } from "../db/client.js";
-import { CORE_INVITE_EMAIL_ID } from "../email-catalog/system-emails.js";
 import { ssrfSafeFetch } from "../extensions/url-safety.js";
 import { getAppProductionUrl } from "../server/app-url.js";
 import { getSession } from "../server/auth.js";
@@ -276,13 +275,7 @@ async function inviteOne(ctx, rawEmail, role, event) {
                 acceptUrl: getInviteAppUrl(event),
                 inviter: ctx.email,
             });
-            await sendEmail({
-                to: email,
-                subject,
-                html,
-                text,
-                templateId: CORE_INVITE_EMAIL_ID,
-            });
+            await sendEmail({ to: email, subject, html, text });
             emailSent = true;
         }
         catch (err) {

package/dist/progress/routes.d.ts

@@ -15,7 +15,7 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -76,7 +76,9 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     }>>;
 }, z.core.$strip>>, {
     id?: undefined;
+    provider?: undefined;
     deleted?: undefined;
+    found?: undefined;
     providers: {
         id: string;
         label: string;
@@ -87,8 +89,6 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         updatedAt: number;
     }[];
     count: number;
-    provider?: undefined;
-    found?: undefined;
     registered?: undefined;
     label?: undefined;
     message?: undefined;
@@ -103,31 +103,31 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     label?: undefined;
     message?: undefined;
 } | {
+    provider?: undefined;
     deleted?: undefined;
     providers?: undefined;
     count?: undefined;
-    provider?: undefined;
     found: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
     message?: undefined;
 } | {
-    providers?: undefined;
-    count?: undefined;
     provider?: undefined;
     found?: undefined;
+    providers?: undefined;
+    count?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
     message?: undefined;
 } | {
+    provider?: undefined;
     deleted?: undefined;
+    found?: undefined;
     providers?: undefined;
     count?: undefined;
-    provider?: undefined;
-    found?: undefined;
     registered: boolean;
     id: string;
     label: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -314,6 +314,8 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         id?: undefined;
         provider?: undefined;
         deleted?: undefined;
+        found?: undefined;
+        message?: undefined;
         providers: {
             id: string;
             label: string;
@@ -324,46 +326,44 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
             updatedAt: number;
         }[];
         count: number;
-        found?: undefined;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
         id?: undefined;
         count?: undefined;
         deleted?: undefined;
+        message?: undefined;
         providers?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
         count?: undefined;
         provider?: undefined;
         deleted?: undefined;
+        message?: undefined;
         providers?: undefined;
         found: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
         count?: undefined;
         provider?: undefined;
-        providers?: undefined;
         found?: undefined;
+        message?: undefined;
+        providers?: undefined;
         deleted: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
         count?: undefined;
         provider?: undefined;
         deleted?: undefined;
-        providers?: undefined;
         found?: undefined;
+        providers?: undefined;
         registered: boolean;
         id: string;
         label: string;

package/dist/provider-api/corpus-jobs.d.ts

@@ -73,6 +73,7 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     offset?: unknown;
     limit?: unknown;
 }, {
+    deleted?: undefined;
     jobs: {
         id: string;
         name: string;
@@ -83,7 +84,6 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
         updatedAt: string;
     }[];
     total: number;
-    deleted?: undefined;
     jobId?: undefined;
 } | {
     jobs?: undefined;
@@ -91,9 +91,9 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     deleted: boolean;
     jobId: string;
 } | {
+    deleted?: undefined;
     jobs?: undefined;
     total?: undefined;
-    deleted?: undefined;
     jobId?: undefined;
     hits: Record<string, unknown>[];
     offset: number;

package/dist/resources/handlers.d.ts

@@ -48,8 +48,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/secrets/routes.d.ts

@@ -34,37 +34,37 @@ export declare function createListSecretsHandler(): import("h3").EventHandlerWit
 /** POST /_agent-native/secrets/:key — write a secret. */
 export declare function createWriteSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
-    ok?: undefined;
     status?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     status: string;
+    error?: undefined;
 } | {
-    ok?: undefined;
     error: string;
     removed?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     removed: boolean;
+    error?: undefined;
 }>>;
 /**
  * POST /_agent-native/secrets/:key/test — validate an optional candidate value
  * or the current stored value without changing anything.
  */
 export declare function createTestSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
     note?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     note?: undefined;
-} | {
     error?: undefined;
+} | {
     ok: boolean;
     note: string;
+    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -95,12 +95,12 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
-    error?: undefined;
     ok: boolean;
     key: string;
-} | {
     error?: undefined;
+} | {
     ok: boolean;
     removed: boolean;
+    error?: undefined;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/server/action-discovery.js

@@ -517,28 +517,6 @@ export async function mergeCoreSharingActions(registry) {
             () => import("../sharing/actions/create-agent-resource-link.js"),
         ],
         ["upload-image", () => import("../file-upload/actions/upload-image.js")],
-        // Transactional email catalog — mounted everywhere so Dispatch can ask any
-        // app what it sends without that app opting in.
-        [
-            "list-transactional-emails",
-            () => import("../email-catalog/actions/list-transactional-emails.js"),
-        ],
-        [
-            "render-transactional-email-preview",
-            () => import("../email-catalog/actions/render-transactional-email-preview.js"),
-        ],
-        [
-            "list-email-log",
-            () => import("../email-catalog/actions/list-email-log.js"),
-        ],
-        [
-            "list-email-activity",
-            () => import("../email-catalog/actions/list-email-activity.js"),
-        ],
-        [
-            "list-email-engagement",
-            () => import("../email-catalog/actions/list-email-engagement.js"),
-        ],
         [
             "get-feature-flags",
             () => import("../feature-flags/actions/get-feature-flags.js"),

package/dist/server/auth.js

@@ -2959,7 +2959,9 @@ async function mountBetterAuthRoutes(app, options) {
         const rawReturn = Array.isArray(query.return)
             ? query.return[0]
             : query.return;
-        setFirstRunOnboardingCookie(event);
+        if (await getSession(event)) {
+            setFirstRunOnboardingCookie(event);
+        }
         return redirectWithStagedCookies(event, safeReturnPath(rawReturn), 302);
     }));
     // Auth guard — stored both in framework middleware registry AND in