@agent-native/core 0.141.7 → 0.144.0

package/dist/client/resources/mcp-integration-catalog.js

@@ -16,6 +16,7 @@ export const DEFAULT_MCP_INTEGRATIONS = [
         availability: "ready",
         verification: "verified",
         logoUrl: mcpIntegrationLogo("context7"),
+        supportsOrganizationScope: true,
         docsUrl: "https://context7.com/",
         keywords: ["docs", "documentation", "libraries", "frameworks"],
     },
@@ -63,6 +64,31 @@ export const DEFAULT_MCP_INTEGRATIONS = [
             "screenshots",
         ],
     },
+    {
+        id: "amplitude",
+        name: "Amplitude",
+        provider: "amplitude",
+        description: "Read and work with Amplitude product analytics.",
+        descriptionKey: "mcpIntegrations.catalog.amplitude.description",
+        useCase: "product analytics, charts, dashboards, cohorts, experiments",
+        useCaseKey: "mcpIntegrations.catalog.amplitude.useCase",
+        url: "https://mcp.amplitude.com/mcp",
+        authMode: "oauth",
+        connectionMode: "oauth",
+        availability: "ready",
+        verification: "preflight-only",
+        logoUrl: mcpIntegrationLogo("amplitude"),
+        docsUrl: "https://amplitude.com/docs/amplitude-ai/amplitude-mcp/other-clients",
+        setupNoteKey: "mcpIntegrations.catalog.amplitude.setupNote",
+        keywords: [
+            "analytics",
+            "product analytics",
+            "charts",
+            "dashboards",
+            "cohorts",
+            "experiments",
+        ],
+    },
     {
         id: "notion",
         name: "Notion",
@@ -107,6 +133,32 @@ export const DEFAULT_MCP_INTEGRATIONS = [
             "decisions",
         ],
     },
+    {
+        id: "gong",
+        name: "Gong",
+        provider: "gong",
+        description: "Search Gong calls and generate account and deal insights.",
+        descriptionKey: "mcpIntegrations.catalog.gong.description",
+        useCase: "sales calls, transcripts, deal insights, account summaries",
+        useCaseKey: "mcpIntegrations.catalog.gong.useCase",
+        url: "https://mcp.gong.io/mcp",
+        authMode: "oauth",
+        connectionMode: "manual",
+        availability: "provider-setup",
+        verification: "restricted",
+        logoUrl: mcpIntegrationLogo("gong"),
+        supportsOrganizationScope: true,
+        docsUrl: "https://help.gong.io/docs/create-an-integration-to-connect-to-the-mcp-server",
+        setupNoteKey: "mcpIntegrations.catalog.gong.setupNote",
+        keywords: [
+            "sales calls",
+            "calls",
+            "transcripts",
+            "deals",
+            "accounts",
+            "revenue intelligence",
+        ],
+    },
     {
         id: "semgrep",
         name: "Semgrep",
@@ -121,6 +173,7 @@ export const DEFAULT_MCP_INTEGRATIONS = [
         availability: "ready",
         verification: "preflight-only",
         logoUrl: mcpIntegrationLogo("semgrep"),
+        supportsOrganizationScope: true,
         docsUrl: "https://github.com/semgrep/mcp#readme",
         keywords: ["security", "sast", "code scanning", "vulnerabilities"],
     },
@@ -141,6 +194,82 @@ export const DEFAULT_MCP_INTEGRATIONS = [
         docsUrl: "https://linear.app/docs/mcp",
         keywords: ["issues", "tickets", "planning", "project management"],
     },
+    {
+        id: "apollo",
+        name: "Apollo",
+        provider: "apollo",
+        description: "Search, enrich, and manage Apollo GTM data.",
+        descriptionKey: "mcpIntegrations.catalog.apollo.description",
+        useCase: "prospecting, enrichment, contacts, sequences, account research",
+        useCaseKey: "mcpIntegrations.catalog.apollo.useCase",
+        url: "https://mcp.apollo.io/mcp",
+        authMode: "oauth",
+        connectionMode: "oauth",
+        availability: "ready",
+        verification: "preflight-only",
+        logoUrl: mcpIntegrationLogo("apollo"),
+        docsUrl: "https://docs.apollo.io/docs/apollo-mcp",
+        setupNoteKey: "mcpIntegrations.catalog.apollo.setupNote",
+        keywords: [
+            "prospecting",
+            "enrichment",
+            "contacts",
+            "sequences",
+            "accounts",
+            "GTM",
+        ],
+    },
+    {
+        id: "common-room",
+        name: "Common Room",
+        provider: "common-room",
+        description: "Research buyer signals, contacts, and organizations.",
+        descriptionKey: "mcpIntegrations.catalog.commonRoom.description",
+        useCase: "buyer intelligence, product signals, intent, contact enrichment",
+        useCaseKey: "mcpIntegrations.catalog.commonRoom.useCase",
+        url: "https://mcp.commonroom.io/mcp",
+        authMode: "oauth",
+        connectionMode: "oauth",
+        availability: "ready",
+        verification: "preflight-only",
+        logoUrl: mcpIntegrationLogo("common-room"),
+        docsUrl: "https://www.commonroom.io/docs/using-common-room/mcp-server/",
+        setupNoteKey: "mcpIntegrations.catalog.commonRoom.setupNote",
+        keywords: [
+            "buyer intelligence",
+            "intent",
+            "signals",
+            "contacts",
+            "organizations",
+            "GTM",
+        ],
+    },
+    {
+        id: "exa",
+        name: "Exa",
+        provider: "exa",
+        description: "Search the web and fetch pages with Exa.",
+        descriptionKey: "mcpIntegrations.catalog.exa.description",
+        useCase: "web search, research, code search, page fetching",
+        useCaseKey: "mcpIntegrations.catalog.exa.useCase",
+        url: "https://mcp.exa.ai/mcp",
+        authMode: "none",
+        connectionMode: "direct",
+        availability: "ready",
+        verification: "preflight-only",
+        logoUrl: mcpIntegrationLogo("exa"),
+        supportsOrganizationScope: true,
+        docsUrl: "https://exa.ai/docs/reference/exa-mcp",
+        setupNoteKey: "mcpIntegrations.catalog.exa.setupNote",
+        keywords: [
+            "web search",
+            "research",
+            "code search",
+            "crawl",
+            "fetch",
+            "web",
+        ],
+    },
     {
         id: "atlassian",
         name: "Atlassian",
@@ -229,6 +358,59 @@ export const DEFAULT_MCP_INTEGRATIONS = [
         setupNoteKey: "mcpIntegrations.catalog.cloudflare.setupNote",
         keywords: ["cloud", "workers", "dns", "security", "observability"],
     },
+    {
+        id: "grafana",
+        name: "Grafana",
+        provider: "grafana",
+        description: "Query Grafana Cloud metrics, logs, and observability data.",
+        descriptionKey: "mcpIntegrations.catalog.grafana.description",
+        useCase: "observability, metrics, logs, traces, dashboards",
+        useCaseKey: "mcpIntegrations.catalog.grafana.useCase",
+        url: "https://mcp.grafana.com/mcp",
+        authMode: "oauth",
+        connectionMode: "oauth",
+        availability: "beta",
+        verification: "preflight-only",
+        logoUrl: mcpIntegrationLogo("grafana"),
+        docsUrl: "https://grafana.com/docs/grafana-cloud/ai-tools/mcp-servers/cloud-mcp/",
+        setupNoteKey: "mcpIntegrations.catalog.grafana.setupNote",
+        keywords: [
+            "observability",
+            "metrics",
+            "logs",
+            "traces",
+            "dashboards",
+            "Grafana Cloud",
+        ],
+    },
+    {
+        id: "google-workspace",
+        name: "Google Workspace",
+        provider: "google-workspace",
+        description: "Search Google Workspace data through its remote MCP server.",
+        descriptionKey: "mcpIntegrations.catalog.googleWorkspace.description",
+        useCase: "Workspace search across Gmail, Drive, Calendar, Chat, Docs, Sheets, Slides",
+        useCaseKey: "mcpIntegrations.catalog.googleWorkspace.useCase",
+        url: "https://workspacemcp.googleapis.com/mcp/v1",
+        authMode: "oauth",
+        connectionMode: "manual",
+        availability: "beta",
+        verification: "restricted",
+        logoUrl: mcpIntegrationLogo("google-workspace"),
+        docsUrl: "https://developers.google.com/workspace/guides/configure-mcp-servers",
+        setupNoteKey: "mcpIntegrations.catalog.googleWorkspace.setupNote",
+        brandAliases: ["Google", "Gmail", "Google Drive", "Google Calendar"],
+        keywords: [
+            "email",
+            "gmail",
+            "drive",
+            "calendar",
+            "chat",
+            "docs",
+            "sheets",
+            "slides",
+        ],
+    },
     {
         id: "gitlab",
         name: "GitLab",
@@ -374,10 +556,36 @@ export const DEFAULT_MCP_INTEGRATIONS = [
         availability: "provider-setup",
         verification: "restricted",
         logoUrl: mcpIntegrationLogo("hubspot"),
+        managedOAuth: true,
         docsUrl: "https://developers.hubspot.com/docs/apps/developer-platform/build-apps/integrate-with-the-remote-hubspot-mcp-server",
         setupNoteKey: "mcpIntegrations.catalog.hubspot.setupNote",
         keywords: ["crm", "contacts", "companies", "deals", "tickets"],
     },
+    {
+        id: "pylon",
+        name: "Pylon",
+        provider: "pylon",
+        description: "Search and update Pylon support data.",
+        descriptionKey: "mcpIntegrations.catalog.pylon.description",
+        useCase: "customer support, issues, accounts, contacts, conversations",
+        useCaseKey: "mcpIntegrations.catalog.pylon.useCase",
+        url: "https://mcp.usepylon.com/",
+        authMode: "oauth",
+        connectionMode: "oauth",
+        availability: "provider-setup",
+        verification: "restricted",
+        logoUrl: mcpIntegrationLogo("pylon"),
+        docsUrl: "https://www.usepylon.com/integrations/mcp",
+        setupNoteKey: "mcpIntegrations.catalog.pylon.setupNote",
+        keywords: [
+            "support",
+            "issues",
+            "accounts",
+            "contacts",
+            "conversations",
+            "customer support",
+        ],
+    },
     {
         id: "intercom",
         name: "Intercom",
@@ -468,6 +676,32 @@ export const DEFAULT_MCP_INTEGRATIONS = [
         setupNoteKey: "mcpIntegrations.catalog.box.setupNote",
         keywords: ["files", "folders", "documents", "enterprise content"],
     },
+    {
+        id: "builder-cms",
+        name: "Builder.io",
+        provider: "builder",
+        description: "Search Builder Publish and Hybrid Space content.",
+        descriptionKey: "mcpIntegrations.catalog.builder.description",
+        useCase: "content models, pages, entries, Publish and Hybrid Spaces",
+        useCaseKey: "mcpIntegrations.catalog.builder.useCase",
+        url: "https://mcp.builder.io/mcp/publish",
+        authMode: "oauth",
+        connectionMode: "oauth",
+        availability: "ready",
+        verification: "preflight-only",
+        logoUrl: mcpIntegrationLogo("builder-cms"),
+        docsUrl: "https://www.builder.io/c/docs/mcp-builder-server/",
+        setupNoteKey: "mcpIntegrations.catalog.builder.setupNote",
+        keywords: [
+            "Builder",
+            "content",
+            "CMS",
+            "pages",
+            "models",
+            "Publish",
+            "Hybrid",
+        ],
+    },
     {
         id: "netlify",
         name: "Netlify",
@@ -608,12 +842,22 @@ export function navigateToMcpOAuthStart(url) {
         navigate();
     }
 }
-export function resolveMcpIntegrationScope(defaultScope, hasOrg, canCreateOrgMcp) {
-    return defaultScope === "org" && hasOrg && canCreateOrgMcp ? "org" : "user";
+export function resolveMcpIntegrationScope(defaultScope, hasOrg, canCreateOrgMcp, supportsOrganizationScope = true) {
+    return defaultScope === "org" &&
+        hasOrg &&
+        canCreateOrgMcp &&
+        supportsOrganizationScope
+        ? "org"
+        : "user";
 }
 export function shouldOfferMcpOrganizationScope(hasOrg, canCreateOrgMcp) {
     return hasOrg && canCreateOrgMcp;
 }
+export function shouldOfferMcpIntegrationOrganizationScope(integration, hasOrg, canCreateOrgMcp) {
+    return (shouldOfferMcpOrganizationScope(hasOrg, canCreateOrgMcp) &&
+        integration.supportsOrganizationScope === true &&
+        integration.managedOAuth !== true);
+}
 export function filterMcpIntegrations(query, integrations = getDefaultMcpIntegrations()) {
     const needle = query.trim().toLowerCase();
     if (!needle)
@@ -635,8 +879,16 @@ export function filterMcpIntegrations(query, integrations = getDefaultMcpIntegra
     });
 }
 const MCP_LINK_HOSTS = {
+    amplitude: ["amplitude.com"],
+    apollo: ["apollo.io"],
+    "common-room": ["commonroom.io"],
     context7: ["context7.com"],
+    exa: ["exa.ai"],
     sentry: ["sentry.io", "sentry.dev"],
+    gong: ["gong.io"],
+    grafana: ["grafana.com", "grafana.net"],
+    "google-workspace": ["google.com", "googleapis.com"],
+    "builder-cms": ["builder.io"],
     notion: ["notion.so", "notion.site"],
     granola: ["granola.ai"],
     semgrep: ["semgrep.dev", "semgrep.com"],
@@ -654,6 +906,7 @@ const MCP_LINK_HOSTS = {
     asana: ["asana.com"],
     hubspot: ["hubspot.com"],
     intercom: ["intercom.com"],
+    pylon: ["usepylon.com", "pylon.com"],
     monday: ["monday.com"],
     webflow: ["webflow.com"],
     paypal: ["paypal.com"],

package/dist/client/resources/mcp-integration-logos.js

@@ -108,9 +108,25 @@ const LOGOS = {
         data: "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",
     },
 };
+const FALLBACK_MONOGRAMS = {
+    amplitude: "AM",
+    apollo: "AP",
+    "common-room": "CR",
+    exa: "EX",
+    gong: "GO",
+    grafana: "GF",
+    "google-workspace": "GW",
+    pylon: "PY",
+    "builder-cms": "B",
+};
 export function mcpIntegrationLogo(id) {
     const logo = LOGOS[id];
-    if (!logo)
-        return "";
+    if (!logo) {
+        const label = FALLBACK_MONOGRAMS[id];
+        if (!label)
+            return "";
+        const svg = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><text x="12" y="12" text-anchor="middle" dominant-baseline="central" font-family="Arial,sans-serif" font-size="${label.length > 1 ? 8 : 14}" font-weight="700" fill="currentColor">${label}</text></svg>`;
+        return `data:image/svg+xml,${encodeURIComponent(svg)}`;
+    }
     return `data:${logo.mime};base64,${logo.data}`;
 }

package/dist/client/settings/AccountSettingsCard.js

@@ -2,6 +2,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { ActionButton, Avatar, TextField, } from "@agent-native/toolkit/design-system";
 import { IconCamera, IconCheck, IconLock } from "@tabler/icons-react";
 import { useEffect, useRef, useState } from "react";
+import { PASSWORD_MIN_LENGTH } from "../../shared/password-policy.js";
 import { Popover, PopoverContent, PopoverTrigger, } from "../components/ui/popover.js";
 import { useT } from "../i18n.js";
 import { useActionMutation, useActionQuery } from "../use-action.js";
@@ -46,7 +47,7 @@ function PasswordSettings() {
     const submit = () => {
         setSaved(false);
         setValidationError(null);
-        if (newPassword.length < 8) {
+        if (newPassword.length < PASSWORD_MIN_LENGTH) {
             setValidationError("length");
             return;
         }

package/dist/collab/routes.d.ts

@@ -26,8 +26,8 @@ export declare const getCollabState: import("h3").EventHandlerWithFetch<import("
  * Body: { update: string (base64), requestSource?: string }
  */
 export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/collab/struct-routes.d.ts

@@ -13,8 +13,8 @@
  * Body: { json: any, fieldName?: string, type?: "map"|"array", requestSource?: string }
  */
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/db/client.d.ts

@@ -183,6 +183,15 @@ export declare function isServerlessRuntime(): boolean;
  * leave room for concurrency.
  */
 export declare function pgPoolOptions(url: string): Record<string, unknown>;
+/**
+ * Shared options for every Neon serverless pool. The startup parameter is
+ * applied by Postgres before the first transaction, so a killed function
+ * cannot return a connection that remains idle in transaction indefinitely.
+ */
+export declare function neonPoolOptions(): {
+    max: number;
+    idle_in_transaction_session_timeout?: number;
+};
 /**
  * Connection cap for the @neondatabase/serverless `Pool`.
  *

package/dist/db/client.js

@@ -778,15 +778,35 @@ export function pgPoolOptions(url) {
     const serverless = isServerlessRuntime();
     return {
         onnotice: () => { },
-        max: serverless ? 4 : 20,
+        max: serverless ? serverlessPoolMax() : 20,
         idle_timeout: serverless ? 20 : 240,
         max_lifetime: 60 * 30,
         connect_timeout: 10,
+        ...(serverless
+            ? {
+                connection: {
+                    idle_in_transaction_session_timeout: 30_000,
+                },
+            }
+            : {}),
         // Supabase's connection pooler (Transaction mode) requires prepare:false.
         // Only disable for Supabase URLs to avoid degrading other deployments.
         ...(url.includes("supabase") ? { prepare: false } : {}),
     };
 }
+/**
+ * Shared options for every Neon serverless pool. The startup parameter is
+ * applied by Postgres before the first transaction, so a killed function
+ * cannot return a connection that remains idle in transaction indefinitely.
+ */
+export function neonPoolOptions() {
+    return {
+        max: neonPoolMax(),
+        ...(isServerlessRuntime()
+            ? { idle_in_transaction_session_timeout: 30_000 }
+            : {}),
+    };
+}
 /**
  * Connection cap for the @neondatabase/serverless `Pool`.
  *
@@ -804,20 +824,27 @@ export function pgPoolOptions(url) {
 export function neonPoolMax() {
     if (!isServerlessRuntime())
         return 20;
-    // Netlify can run several background workers concurrently; a background
-    // worker is not a global singleton and must not hold a larger pool than the
-    // foreground path. The agent's
-    // pre-send setup fires ~6 concurrent DB reads in parallel; with only 2
-    // connections that burst exhausts the pool and a single stalled connection
-    // freezes the worker before it can claim — observed on analytics' heavier
-    // action surface, where the worker froze right after `model_done` and never
-    // recorded `env_config`/`presend`, while the foreground path ran the
-    // identical code in ~2s. Four connections preserve the concurrent
-    // read burst while keeping foreground and background caps aligned, avoiding
-    // "Max client connections reached" across many warm instances.
+    return serverlessPoolMax();
+}
+function serverlessPoolMax() {
+    // Scheduled Analytics workers run independently and may overlap across
+    // invocations. They process work sequentially, so one connection prevents
+    // a slow sweep from multiplying Neon connections while foreground requests
+    // retain two slots for their concurrent reads.
+    if (isLowConnectionBackgroundRuntime())
+        return 1;
+    // Netlify can run several background workers concurrently. Keep their four
+    // slots: the agent pre-send setup fires ~6 concurrent DB reads, and two
+    // connections previously froze the worker before it could claim. Foreground
+    // requests use two slots instead, leaving more headroom across warm
+    // instances where the user-facing routes are the pressure source.
     if (isBackgroundFunctionPoolContext())
         return 4;
-    return 4;
+    return 2;
+}
+function isLowConnectionBackgroundRuntime() {
+    return (globalThis
+        .__AGENT_NATIVE_LOW_CONNECTION_BACKGROUND_RUNTIME__ === true);
 }
 /**
  * Inline mirror of `isInBackgroundFunctionRuntime()`
@@ -1085,7 +1112,7 @@ async function createDbExecInternal(config = {}, trackSingletonResources = false
             // connections, so its direct executions use stateless Neon HTTP instead.
             // The foreground and transaction surface keep the WebSocket pool.
             const bgHttp = isBackgroundFunctionPoolContext();
-            const makePool = () => new Pool({ connectionString: url, max: neonPoolMax() });
+            const makePool = () => new Pool({ connectionString: url, ...neonPoolOptions() });
             // The singleton exec shares the process pool; `createDbExec()` callers own
             // a `close()` and so must not be handed it.
             const pool = trackSingletonResources
@@ -1250,8 +1277,16 @@ async function createDbExecInternal(config = {}, trackSingletonResources = false
                             return result;
                         }
                         catch (err) {
-                            await queryNeonClient(client, "ROLLBACK").catch(() => { });
-                            releaseClient(isConnectionError(err) ? true : undefined);
+                            let rollbackFailed = false;
+                            try {
+                                await queryNeonClient(client, "ROLLBACK");
+                            }
+                            catch {
+                                rollbackFailed = true;
+                            }
+                            // A failed rollback can leave the backend inside the transaction.
+                            // Do not return that client to PgBouncer as if it were clean.
+                            releaseClient(isConnectionError(err) || rollbackFailed ? true : undefined);
                             throw err;
                         }
                     }, 1);

package/dist/db/create-get-db.js

@@ -1,6 +1,6 @@
 import { AsyncLocalStorage } from "node:async_hooks";
 import { drizzle as drizzleD1 } from "drizzle-orm/d1";
-import { getDialect, getCloudflareD1Binding, getDatabaseUrl, getDatabaseAuthToken, isLocalSqliteUrl, isPgliteUrl, isConnectionError, getPgliteClient, loadPgliteDrizzle, prepareLocalSqliteUrl, sqliteFilenameFromUrl, pgPoolOptions, neonPoolMax, attachNeonPoolErrorLogger, withDbTimeout, retryOnConnectionError, dbOpTimeoutMs, sharedDbPool, onSharedDbPoolsClosed, onSharedDbPoolReplaced, } from "./client.js";
+import { getDialect, getCloudflareD1Binding, getDatabaseUrl, getDatabaseAuthToken, isLocalSqliteUrl, isPgliteUrl, isConnectionError, getPgliteClient, loadPgliteDrizzle, prepareLocalSqliteUrl, sqliteFilenameFromUrl, pgPoolOptions, neonPoolOptions, attachNeonPoolErrorLogger, withDbTimeout, retryOnConnectionError, dbOpTimeoutMs, sharedDbPool, onSharedDbPoolsClosed, onSharedDbPoolReplaced, } from "./client.js";
 // Lazy driver loaders — cached promises so dynamic import only runs once.
 let _pgDrizzle;
 function getPgDrizzle() {
@@ -407,7 +407,7 @@ export function createGetDb(schema) {
                     // `createGetDb` store: one connect per process instead of one per
                     // schema module. See `sharedDbPool` in client.ts.
                     resetOnPoolClose("neon", url);
-                    const rawPool = sharedDbPool("neon", url, () => new Pool({ connectionString: url, max: neonPoolMax() }));
+                    const rawPool = sharedDbPool("neon", url, () => new Pool({ connectionString: url, ...neonPoolOptions() }));
                     attachNeonPoolErrorLogger(rawPool);
                     // Wrap the pool with the resilience layer so Drizzle queries get the
                     // same withDbTimeout + retryOnConnectionError protection as the raw

package/dist/db/ddl-guard.d.ts

@@ -32,33 +32,33 @@ import { type DbExec } from "./client.js";
 /**
  * True when running against Postgres AND the given table already exists in the
  * `public` schema. Returns `false` on SQLite (callers gate their own behaviour
- * there), for invalid identifiers, or when `information_schema` is unreadable —
- * the conservative answer "not known to exist" makes the caller fall through to
- * its idempotent `CREATE TABLE IF NOT EXISTS`, preserving today's behaviour.
+ * there), for invalid identifiers, and `undefined` when `information_schema`
+ * is unreadable. Unknown must stay distinct from absent: treating a timed-out
+ * probe as missing starts a DDL lock storm on a busy serverless database.
  *
  * This is a plain read (no lock), so it never blocks on an `ACCESS EXCLUSIVE`
  * lock the way `CREATE`/`ALTER` would.
  */
-export declare function pgTableExists(table: string, injectedClient?: DbExec, dialectIsPostgres?: boolean): Promise<boolean>;
+export declare function pgTableExists(table: string, injectedClient?: DbExec, dialectIsPostgres?: boolean): Promise<boolean | undefined>;
 /**
  * True when running against Postgres AND the given column already exists on the
  * given table in the `public` schema. Returns `false` on SQLite, for invalid
- * identifiers, or when `information_schema` is unreadable.
+ * identifiers, and `undefined` when `information_schema` is unreadable.
  *
  * Plain read — no lock taken.
  */
-export declare function pgColumnExists(table: string, column: string, injectedClient?: DbExec): Promise<boolean>;
+export declare function pgColumnExists(table: string, column: string, injectedClient?: DbExec): Promise<boolean | undefined>;
 /**
  * True when running against Postgres AND an index with the given name already
  * exists in the `public` schema. Returns `false` on SQLite, for invalid
- * identifiers, or when `pg_indexes` is unreadable.
+ * identifiers, and `undefined` when `pg_indexes` is unreadable.
  *
  * `CREATE INDEX` (without CONCURRENTLY) takes a `SHARE` lock that blocks
  * writes, so on a fresh background-worker process behind a concurrent
  * connection this can hang just like a `CREATE`/`ALTER` would; checking first
  * skips the lock on the already-migrated hot path.
  */
-export declare function pgIndexExists(indexName: string, injectedClient?: DbExec, dialectIsPostgres?: boolean): Promise<boolean>;
+export declare function pgIndexExists(indexName: string, injectedClient?: DbExec, dialectIsPostgres?: boolean): Promise<boolean | undefined>;
 /**
  * Probe → guarded-DDL → re-probe sequence for one piece of on-demand schema.
  *
@@ -86,8 +86,8 @@ export declare function pgIndexExists(indexName: string, injectedClient?: DbExec
  * `false` only when it already existed up front (no DDL issued).
  */
 export declare function ensureSchemaObject(options: {
-    /** Lock-free existence check; `true` ⇒ already present, skip DDL. */
-    probe: () => Promise<boolean>;
+    /** Lock-free existence check; `true` ⇒ present, `undefined` ⇒ unreadable. */
+    probe: () => Promise<boolean | undefined>;
     /** DDL to run only when `probe()` reports the object missing. */
     ddl: string;
     /** Human-readable name of what's being ensured, for the error message. */
@@ -150,6 +150,7 @@ export declare function isLockTimeoutError(err: unknown): boolean;
  */
 export declare function runGuardedDdl(ddl: string, options?: {
     lockTimeout?: string;
+    idleInTransactionTimeout?: string;
     injectedClient?: DbExec;
     dialectIsPostgres?: boolean;
 }): Promise<boolean>;