@agent-native/core 0.145.7 → 0.146.0

package/dist/db/migrations.js

@@ -226,6 +226,56 @@ function resolveMigrationSql(sql, pg) {
  * extend the same list concurrently), giving new entries a name is what makes
  * them immune to the collision class described above.
  */
+/**
+ * True in a production serverless runtime that serves user REQUESTS.
+ *
+ * Deliberately mirrors the analytics template's own predicate rather than
+ * importing it: `packages/core/src/db` must not depend on a template, and the
+ * agent/background modules that carry the sibling predicates would introduce a
+ * cycle here.
+ */
+function isServerlessRequestRuntime() {
+    if (process.env.NODE_ENV !== "production")
+        return false;
+    return (process.env.NETLIFY === "true" ||
+        Boolean(process.env.NETLIFY_FUNCTION_NAME) ||
+        Boolean(process.env.AWS_LAMBDA_FUNCTION_NAME) ||
+        Boolean(process.env.LAMBDA_TASK_ROOT) ||
+        process.env.AWS_EXECUTION_ENV?.startsWith("AWS_Lambda") === true ||
+        process.env.VERCEL === "1");
+}
+/**
+ * A runtime that is ALLOWED to migrate: scheduled jobs and durable background
+ * workers, which are off the request path and may take as long as they need.
+ *
+ * Set by whichever runtime claims migration duty. Analytics sets its own
+ * equivalent flag before running the scheduled rollup.
+ */
+function isMigrationAuthorizedRuntime() {
+    return (globalThis.__AGENT_NATIVE_MIGRATION_RUNTIME__ === true);
+}
+/**
+ * Run an explicit release-time migration job with migration duty enabled.
+ *
+ * The flag is process-local and restored even when the job fails, so a build
+ * step can opt in without creating a permanent escape hatch for request code.
+ */
+export async function withMigrationRuntime(run) {
+    const runtime = globalThis;
+    const previous = runtime.__AGENT_NATIVE_MIGRATION_RUNTIME__;
+    runtime.__AGENT_NATIVE_MIGRATION_RUNTIME__ = true;
+    try {
+        return await run();
+    }
+    finally {
+        if (previous === undefined) {
+            delete runtime.__AGENT_NATIVE_MIGRATION_RUNTIME__;
+        }
+        else {
+            runtime.__AGENT_NATIVE_MIGRATION_RUNTIME__ = previous;
+        }
+    }
+}
 export function runMigrations(migrations, options) {
     const table = options?.table;
     if (!table ||
@@ -256,6 +306,26 @@ export function runMigrations(migrations, options) {
         return async () => { };
     const namedTable = `${table}_named`;
     return async () => {
+        // Migrations are schema DDL plus an introspection pass. On serverless
+        // "first touch" is EVERY cold start, so this lands on the critical path of
+        // a user request — measured at ~5.5-8.6s for the version check alone on a
+        // 180-table database, with 4-6 copies running concurrently under load.
+        //
+        // Guarded HERE rather than at each call site on purpose. The analytics
+        // template guarded its own runner in #2708; three core plugins
+        // (org, context-xray, observational-memory) kept calling this unguarded,
+        // so the probe storm survived the fix that was supposed to end it. A
+        // fourth special case would have shipped the same bug a fourth time.
+        //
+        // Schema still has to exist: a scheduled/background runtime sets
+        // `__AGENT_NATIVE_MIGRATION_RUNTIME__`, and `runInServerlessRequest` is
+        // the explicit opt-in for a caller that genuinely cannot defer.
+        if (options?.runInServerlessRequest !== true &&
+            isServerlessRequestRuntime() &&
+            !isMigrationAuthorizedRuntime()) {
+            console.info(`[migrations] Skipping "${table}" migrations in a serverless request runtime`);
+            return;
+        }
         try {
             // Check for Cloudflare D1 binding (only if DATABASE_URL not set)
             const d1 = getDialect() === "d1"

package/dist/deploy/build.js

@@ -27,6 +27,7 @@ import { DEFAULT_SPECULATION_RULES_PATH, resolveSsrCacheHeaders, } from "../shar
 import { mcpEmbedStaticAssetRouteRules } from "../shared/mcp-embed-headers.js";
 import { AGENT_NATIVE_SOCIAL_IMAGE_ALT, AGENT_NATIVE_SOCIAL_IMAGE_CACHE_BUSTER, AGENT_NATIVE_SOCIAL_IMAGE_HEIGHT, AGENT_NATIVE_SOCIAL_IMAGE_PATH, AGENT_NATIVE_SOCIAL_IMAGE_TYPE, AGENT_NATIVE_SOCIAL_IMAGE_WIDTH, } from "../shared/social-meta.js";
 import { generateActionRegistryForProject } from "../vite/action-types-plugin.js";
+import { createAgentNativeConfigContext, loadResolvedAgentNativeConfig, } from "../vite/agent-native-config-loader.js";
 import { cloneServerBundleForFunction, copyDir } from "./function-bundle.js";
 import { collectImmutableAssetPaths, IMMUTABLE_ASSET_CACHE_CONTROL, IMMUTABLE_ASSET_CACHE_HEADERS, prefixAssetPath, } from "./immutable-assets.js";
 import { discoverApiRoutes, discoverPlugins, discoverActionFiles, getMissingDefaultPlugins, DEFAULT_PLUGIN_REGISTRY, } from "./route-discovery.js";
@@ -3493,6 +3494,7 @@ async function buildWithNitro() {
     // own virtual module registration. Both paths reuse `readAgentsBundleFromFs`
     // from `server/agents-bundle.ts` to guarantee identical content.
     const { readAgentsBundleFromFs } = await import("../server/agents-bundle.js");
+    const nitroAgentConfig = await loadResolvedAgentNativeConfig(cwd, createAgentNativeConfigContext("build", process.env.NODE_ENV === "development" ? "development" : "production"));
     // Resolve the workspace core (if present) up front so the bundle embeds
     // enterprise-wide AGENTS.md + skills alongside the template's.
     const nitroWorkspaceCore = await getWorkspaceCoreExports(cwd);
@@ -3504,7 +3506,9 @@ async function buildWithNitro() {
         }
         : null;
     const agentsBundleModuleSource = () => {
-        const bundle = readAgentsBundleFromFs(cwd, nitroWorkspaceSource);
+        const bundle = readAgentsBundleFromFs(cwd, nitroWorkspaceSource, {
+            instructions: nitroAgentConfig.instructions,
+        });
         return `// AUTO-GENERATED by @agent-native/core deploy build (Nitro virtual)
 // Contains the inlined AGENTS.md + .agents/skills/ content from the template,
 // merged with the workspace core's AGENTS.md + skills/ when present.

package/dist/jobs/index.d.ts

@@ -3,3 +3,4 @@ export { processRecurringJobs, parseJobFrontmatter, buildJobContent, type JobFro
 export { getAutomationSchedulerHealth, recordAutomationSchedulerHealth, type AutomationSchedulerHealth, } from "./scheduler-health.js";
 export { RECURRING_JOBS_SWEEP_PATH, RECURRING_JOBS_SWEEP_TOKEN_SUBJECT, } from "./scheduler-dispatch.js";
 export { createJobTools } from "./tools.js";
+export { AUTOMATION_RUN_MIGRATIONS, runAutomationRunMigrations, } from "./run-history.js";

package/dist/jobs/index.js

@@ -3,3 +3,4 @@ export { processRecurringJobs, parseJobFrontmatter, buildJobContent, } from "./s
 export { getAutomationSchedulerHealth, recordAutomationSchedulerHealth, } from "./scheduler-health.js";
 export { RECURRING_JOBS_SWEEP_PATH, RECURRING_JOBS_SWEEP_TOKEN_SUBJECT, } from "./scheduler-dispatch.js";
 export { createJobTools } from "./tools.js";
+export { AUTOMATION_RUN_MIGRATIONS, runAutomationRunMigrations, } from "./run-history.js";

package/dist/jobs/run-history.d.ts

@@ -1,3 +1,4 @@
+import { type MigrationEntry } from "../db/migrations.js";
 /**
  * "interrupted" is derived at read time, never stored: a process killed
  * mid-run cannot write its own outcome, so a row left running long past the
@@ -30,6 +31,9 @@ export interface StartAutomationRunInput {
     /** A pre-created row still waiting for its background worker handoff. */
     dispatchPending?: boolean;
 }
+/** Authoritative release-time schema for durable automation history. */
+export declare const AUTOMATION_RUN_MIGRATIONS: MigrationEntry[];
+export declare function runAutomationRunMigrations(nitroApp: unknown): Promise<void>;
 /**
  * Record an automation execution. Manual runs create the row before dispatch,
  * so `dispatchPending` distinguishes that durable handoff from a run that has

package/dist/jobs/run-history.js

@@ -2,6 +2,7 @@ import { randomUUID } from "node:crypto";
 import { z } from "zod";
 import { getDbExec, intType, isPostgres } from "../db/client.js";
 import { ensureColumnExists, ensureIndexExists, ensureTableExists, } from "../db/ddl-guard.js";
+import { runMigrations } from "../db/migrations.js";
 import { emit as emitBusEvent, registerEvent } from "../event-bus/index.js";
 registerEvent({
     name: "automation.run.finished",
@@ -32,6 +33,49 @@ const INTERRUPTED_RUN_MESSAGE = "Worker stopped before a terminal result was rec
 const CLAIM_LEASE_MS = RUN_LIVENESS_CEILING_MS;
 /** Rows kept per automation, so a per-minute schedule cannot grow forever. */
 const RUNS_RETAINED_PER_AUTOMATION = 50;
+/** Authoritative release-time schema for durable automation history. */
+export const AUTOMATION_RUN_MIGRATIONS = [
+    {
+        version: 1,
+        name: "automation-runs-table",
+        sql: `
+      CREATE TABLE IF NOT EXISTS ${TABLE} (
+        id TEXT PRIMARY KEY,
+        owner TEXT NOT NULL,
+        automation TEXT NOT NULL,
+        path TEXT NOT NULL,
+        scope TEXT,
+        org_id TEXT,
+        run_id TEXT,
+        thread_id TEXT,
+        status TEXT NOT NULL DEFAULT 'running',
+        started_at INTEGER NOT NULL,
+        finished_at INTEGER,
+        error TEXT,
+        claimed_at INTEGER,
+        dispatch_pending INTEGER NOT NULL DEFAULT 0
+      );
+      CREATE INDEX IF NOT EXISTS idx_${TABLE}_owner_automation
+        ON ${TABLE} (owner, automation, started_at)
+    `,
+    },
+    {
+        version: 2,
+        name: "automation-runs-claimed-at",
+        sql: `ALTER TABLE ${TABLE} ADD COLUMN IF NOT EXISTS claimed_at INTEGER`,
+    },
+    {
+        version: 3,
+        name: "automation-runs-dispatch-pending",
+        sql: `ALTER TABLE ${TABLE}
+      ADD COLUMN IF NOT EXISTS dispatch_pending INTEGER NOT NULL DEFAULT 0`,
+    },
+];
+export async function runAutomationRunMigrations(nitroApp) {
+    await runMigrations(AUTOMATION_RUN_MIGRATIONS, {
+        table: "_automation_run_migrations",
+    })(nitroApp);
+}
 let _initPromise;
 async function ensureTable() {
     if (!_initPromise) {

package/dist/provider-api/actions/provider-api.d.ts

@@ -314,6 +314,7 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         id?: undefined;
         provider?: undefined;
         deleted?: undefined;
+        message?: undefined;
         providers: {
             id: string;
             label: string;
@@ -327,37 +328,36 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         found?: undefined;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
         id?: undefined;
         count?: undefined;
         deleted?: undefined;
+        message?: undefined;
         providers?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
         count?: undefined;
         provider?: undefined;
         deleted?: undefined;
+        message?: undefined;
         providers?: undefined;
         found: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
         count?: undefined;
         provider?: undefined;
+        message?: undefined;
         providers?: undefined;
         found?: undefined;
         deleted: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
         count?: undefined;
         provider?: undefined;

package/dist/scripts/docs/search.js

@@ -127,12 +127,13 @@ async function loadAgentBundleDocs() {
                 body: bundle.workspaceAgentsMd,
             });
         }
-        if (bundle.agentsMd?.trim()) {
+        const runtimeAgentsMd = bundle.runtimeAgentsMd ?? bundle.agentsMd;
+        if (runtimeAgentsMd?.trim()) {
             docs.push({
                 slug: "agents-template",
                 title: "Template AGENTS.md",
                 description: "Full bundled template/app agent instructions.",
-                body: bundle.agentsMd,
+                body: runtimeAgentsMd,
             });
         }
         // Only runtime-visible skills are searchable/readable here — `scope: dev`

package/dist/secrets/routes.d.ts

@@ -37,17 +37,17 @@ export declare function createWriteSecretHandler(): import("h3").EventHandlerWit
     ok?: undefined;
     status?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     status: string;
-    error?: undefined;
 } | {
     ok?: undefined;
     error: string;
     removed?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;
 /**
  * POST /_agent-native/secrets/:key/test — validate an optional candidate value
@@ -58,13 +58,13 @@ export declare function createTestSecretHandler(): import("h3").EventHandlerWith
     error: string;
     note?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note?: undefined;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note: string;
-    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -95,11 +95,11 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
+    error?: undefined;
     ok: boolean;
     key: string;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;

package/dist/server/agent-chat/prompt-resources.js

@@ -631,13 +631,14 @@ export async function loadResourcesForPrompt(owner, compact = false, selfAppId,
             });
             addSection(block, "required");
         }
-        // 2. Template AGENTS.md — always included (critical template instructions).
-        if (bundle.agentsMd.trim()) {
+        // 2. Runtime instruction file — always included when configured.
+        const runtimeAgentsMd = bundle.runtimeAgentsMd ?? bundle.agentsMd;
+        if (runtimeAgentsMd.trim()) {
             const block = promptResourceBlock({
                 name: "AGENTS.md",
                 scope: "template",
                 path: "AGENTS.md",
-                content: bundle.agentsMd,
+                content: runtimeAgentsMd,
                 maxChars: promptResourceMaxChars,
                 readHint: 'Use docs-search --slug "agents-template" to read the full template AGENTS.md.',
             });

package/dist/server/agent-chat-plugin.js

@@ -4885,10 +4885,12 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
             catch (error) {
                 console.warn("[recurring-jobs] Scheduler module unavailable:", error instanceof Error ? error.message : error);
             }
-            // A non-Netlify self-dispatch only waits for the request to leave the
-            // current invocation. Keep the durable history row as a retryable queue
-            // so a frozen serverless handoff is recovered on the next sweep.
-            if (!isBackgroundRuntime && !sweepsDisabled) {
+            // A synchronous self-dispatch only waits for the request to leave the
+            // current invocation. Long-lived runtimes keep this retryable-queue
+            // backstop; serverless runtimes use their durable scheduler instead.
+            if (!isBackgroundRuntime &&
+                !disableRecurringJobsRuntime &&
+                !sweepsDisabled) {
                 (() => {
                     let inFlight = false;
                     const sweep = async () => {

package/dist/server/agents-bundle.d.ts

@@ -15,7 +15,8 @@
  *   2. Filesystem fallback — `process.cwd()/AGENTS.md` +
  *      `process.cwd()/.agents/skills/` (or legacy `.agent/skills/`). Only reliable in local dev and Node
  *      production (`agent-native start`); not on Netlify/Vercel/CF at runtime.
- *   3. Empty bundle — everything silently returns empty strings.
+ *   3. Configuration and filesystem failures propagate so a broken bundle is
+ *      visible instead of being mistaken for an app with no instructions.
  *
  * Result is cached in module scope so it's only computed once per cold start.
  */
@@ -68,8 +69,15 @@ export interface Skill {
     files: Record<string, string>;
 }
 export interface AgentsBundle {
-    /** Contents of the template's AGENTS.md (empty string if missing). */
+    /**
+     * Legacy alias for the runtime instruction file. Empty when an explicitly
+     * configured runtime file is missing.
+     */
     agentsMd: string;
+    /** Contents of the runtime agent's selected instruction file. */
+    runtimeAgentsMd: string;
+    /** Contents of the development agent's selected instruction file. */
+    developmentAgentsMd: string;
     /**
      * Contents of the workspace core's AGENTS.md, if the app is inside an
      * enterprise monorepo with a `workspaceCore` configured. Empty string
@@ -86,6 +94,14 @@ export interface AgentsBundle {
      */
     skills: Record<string, Skill>;
 }
+export interface AgentsBundleReadOptions {
+    instructions?: AgentNativeInstructionsConfig;
+}
+export interface AgentInstructionPaths {
+    runtime: string;
+    development: string;
+}
+export declare function resolveAgentInstructionPaths(instructions?: AgentNativeInstructionsConfig): AgentInstructionPaths;
 export declare function normalizeSkillScope(raw: string | undefined): SkillScope;
 /**
  * Parse the YAML frontmatter at the top of a skill file.
@@ -97,6 +113,7 @@ export declare function normalizeSkillScope(raw: string | undefined): SkillScope
  *   - Literal scalar: `description: |\n  multi\n  line` → "multi\nline"
  */
 export declare function parseSkillFrontmatter(content: string): Partial<SkillMeta>;
+import type { AgentNativeInstructionsConfig } from "../config.js";
 /**
  * Paths to a workspace-core's agent resources, for merging into a template's
  * bundle. All fields optional — pass null for any missing piece.
@@ -117,7 +134,7 @@ export interface WorkspaceAgentsSource {
  *
  * Synchronous — the Vite plugin's load hook calls it inline during the build.
  */
-export declare function readAgentsBundleFromFs(cwd: string, workspaceSource?: WorkspaceAgentsSource | null): AgentsBundle;
+export declare function readAgentsBundleFromFs(cwd: string, workspaceSource?: WorkspaceAgentsSource | null, options?: AgentsBundleReadOptions): AgentsBundle;
 /**
  * Load the agents bundle. Returns a cached result on subsequent calls.
  * Tries the virtual module first (works everywhere, including edge), then

package/dist/server/agents-bundle.js

@@ -15,12 +15,19 @@
  *   2. Filesystem fallback — `process.cwd()/AGENTS.md` +
  *      `process.cwd()/.agents/skills/` (or legacy `.agent/skills/`). Only reliable in local dev and Node
  *      production (`agent-native start`); not on Netlify/Vercel/CF at runtime.
- *   3. Empty bundle — everything silently returns empty strings.
+ *   3. Configuration and filesystem failures propagate so a broken bundle is
+ *      visible instead of being mistaken for an app with no instructions.
  *
  * Result is cached in module scope so it's only computed once per cold start.
  */
 export const DEFAULT_SKILL_SCOPE = "both";
-const EMPTY = { agentsMd: "", workspaceAgentsMd: "", skills: {} };
+const DEFAULT_AGENT_INSTRUCTIONS_PATH = "AGENTS.md";
+export function resolveAgentInstructionPaths(instructions) {
+    return {
+        runtime: instructions?.runtime ?? DEFAULT_AGENT_INSTRUCTIONS_PATH,
+        development: instructions?.development ?? DEFAULT_AGENT_INSTRUCTIONS_PATH,
+    };
+}
 let cached = null;
 /**
  * Coerce a raw frontmatter `scope` value into a known `SkillScope`. Unknown,
@@ -125,6 +132,23 @@ const READABLE_SUBFILE_EXTENSIONS = new Set([".md", ".txt", ".json"]);
  */
 const MAX_SUBFILE_BYTES = 64 * 1024;
 const MAX_SKILL_FILES_BYTES = 256 * 1024;
+function readInstructionFile(cwd, relativePath) {
+    const normalizedPath = relativePath.replaceAll("\\", "/");
+    const root = fs.realpathSync(path.resolve(cwd));
+    const absolutePath = path.resolve(root, normalizedPath);
+    if (absolutePath !== root && !absolutePath.startsWith(`${root}${path.sep}`)) {
+        throw new Error(`Agent instruction path must stay inside the app root: ${relativePath}`);
+    }
+    if (!fs.existsSync(absolutePath))
+        return "";
+    const realPath = fs.realpathSync(absolutePath);
+    if (realPath !== root && !realPath.startsWith(`${root}${path.sep}`)) {
+        throw new Error(`Agent instruction path must stay inside the app root: ${relativePath}`);
+    }
+    if (!fs.statSync(realPath).isFile())
+        return "";
+    return fs.readFileSync(realPath, "utf-8");
+}
 /**
  * Read one skills directory into a `Record<string, Skill>`. Extracted so
  * both the template and workspace-core paths can reuse it. `dirPrefix` is
@@ -214,15 +238,10 @@ function readSkillsDir(skillsDir, rootForRelative, out, skipExistingNames) {
  *
  * Synchronous — the Vite plugin's load hook calls it inline during the build.
  */
-export function readAgentsBundleFromFs(cwd, workspaceSource = null) {
-    let agentsMd = "";
-    try {
-        const agentsMdPath = path.join(cwd, "AGENTS.md");
-        if (fs.existsSync(agentsMdPath)) {
-            agentsMd = fs.readFileSync(agentsMdPath, "utf-8");
-        }
-    }
-    catch { }
+export function readAgentsBundleFromFs(cwd, workspaceSource = null, options = {}) {
+    const instructionPaths = resolveAgentInstructionPaths(options.instructions);
+    const runtimeAgentsMd = readInstructionFile(cwd, instructionPaths.runtime);
+    const developmentAgentsMd = readInstructionFile(cwd, instructionPaths.development);
     let workspaceAgentsMd = "";
     if (workspaceSource?.agentsMdPath) {
         try {
@@ -249,7 +268,15 @@ export function readAgentsBundleFromFs(cwd, workspaceSource = null) {
         }
         catch { }
     }
-    return { agentsMd, workspaceAgentsMd, skills };
+    return {
+        // Keep the old field useful for callers that only know about the runtime
+        // bundle. Audience-aware consumers should use the explicit fields.
+        agentsMd: runtimeAgentsMd,
+        runtimeAgentsMd,
+        developmentAgentsMd,
+        workspaceAgentsMd,
+        skills,
+    };
 }
 /**
  * Load the agents bundle. Returns a cached result on subsequent calls.
@@ -279,29 +306,29 @@ export async function loadAgentsBundle() {
     }
     // 2. Filesystem fallback — works in dev / Node prod. If a workspace core
     //    is present in the ancestor chain, merge its skills + AGENTS.md in.
+    let workspaceSource = null;
     try {
-        let workspaceSource = null;
-        try {
-            const { getWorkspaceCoreExports } = await import("../deploy/workspace-core.js");
-            const ws = await getWorkspaceCoreExports(process.cwd());
-            if (ws) {
-                workspaceSource = {
-                    skillsDir: ws.skillsDir,
-                    agentsMdPath: ws.agentsMdPath,
-                    rootDir: ws.packageDir,
-                };
-            }
-        }
-        catch {
-            // workspace-core discovery isn't available (e.g. edge runtime).
+        const { getWorkspaceCoreExports } = await import("../deploy/workspace-core.js");
+        const ws = await getWorkspaceCoreExports(process.cwd());
+        if (ws) {
+            workspaceSource = {
+                skillsDir: ws.skillsDir,
+                agentsMdPath: ws.agentsMdPath,
+                rootDir: ws.packageDir,
+            };
         }
-        cached = readAgentsBundleFromFs(process.cwd(), workspaceSource);
-        return cached;
+        // coercion-ok: workspace-core discovery is optional in edge runtimes.
     }
     catch {
-        cached = EMPTY;
-        return cached;
+        // workspace-core discovery isn't available (e.g. edge runtime).
     }
+    const { createAgentNativeConfigContext, loadResolvedAgentNativeConfig } = await import("../vite/agent-native-config-loader.js");
+    const production = process.env.NODE_ENV === "production";
+    const config = await loadResolvedAgentNativeConfig(process.cwd(), createAgentNativeConfigContext(production ? "build" : "serve", production ? "production" : "development"));
+    cached = readAgentsBundleFromFs(process.cwd(), workspaceSource, {
+        instructions: config.instructions,
+    });
+    return cached;
 }
 /**
  * Generate the `<skills>` block to inject into the system prompt.

package/dist/server/auth-plugin.js

@@ -1,10 +1,15 @@
 import { autoMountAuth } from "./auth.js";
+import { runBetterAuthMigrations } from "./better-auth-migrations.js";
 import { getH3App, awaitBootstrap, markDefaultPluginProvided, trackPluginInit, } from "./framework-request-handler.js";
 export function createAuthPlugin(options) {
     return (nitroApp) => {
         markDefaultPluginProvided(nitroApp, "auth");
         const initPromise = (async () => {
             await awaitBootstrap(nitroApp);
+            // guard:allow-boot-data-work — local/long-lived runtimes provision auth
+            // before mounting routes; production functions are rejected by the
+            // migration runner and use the release job instead.
+            await runBetterAuthMigrations(nitroApp);
             await autoMountAuth(getH3App(nitroApp), options);
         })();
         trackPluginInit(nitroApp, initPromise, {

package/dist/server/better-auth-instance.js

@@ -16,8 +16,7 @@ import { pgTable, text as pgText, timestamp as pgTimestamp, boolean as pgBoolean
 import { sqliteTable, text as sqliteText, integer as sqliteInteger, } from "drizzle-orm/sqlite-core";
 import { TEMPLATES } from "../cli/templates-meta.js";
 import { getDbExec, isPostgres } from "../db/client.js";
-import { getDialect, getDatabaseUrl, getDatabaseAuthToken, closePgliteClients, getPgliteClient, isPgliteUrl, loadPgliteDrizzle, pgPoolOptions, neonPoolOptions, attachNeonPoolErrorLogger, sharedDbPool, onSharedDbPoolsClosed, onSharedDbPoolReplaced, } from "../db/client.js";
-import { ensureTableExists } from "../db/ddl-guard.js";
+import { getDialect, getDatabaseUrl, getDatabaseAuthToken, closePgliteClients, getPgliteClient, isPgliteUrl, loadPgliteDrizzle, pgPoolOptions, neonPoolOptions, guardNeonPool, sharedDbPool, onSharedDbPoolsClosed, onSharedDbPoolReplaced, } from "../db/client.js";
 import { CORE_RESET_PASSWORD_EMAIL_ID, CORE_VERIFY_SIGNUP_EMAIL_ID, } from "../email-catalog/system-emails.js";
 import { saveOAuthTokens } from "../oauth-tokens/store.js";
 import { acceptPendingInvitationsForEmail } from "../org/accept-pending.js";
@@ -518,65 +517,6 @@ async function mirrorGoogleAccountToOAuthTokens(account) {
         tokens.id_token = account.idToken;
     await saveOAuthTokens("google", email, tokens, email);
 }
-async function ensureBetterAuthTables() {
-    const db = getDbExec();
-    // PG guard: probe information_schema first (no lock) for each table; run
-    // DDL only when missing, bounded by a transaction-scoped lock_timeout.
-    // Probe names are UNQUOTED (what information_schema.tables.table_name stores);
-    // createSql keeps the QUOTED "user"/"session"/… form required by Postgres.
-    if (isPostgres()) {
-        const pgTables = [
-            [
-                "user",
-                `CREATE TABLE IF NOT EXISTS "user" (id TEXT PRIMARY KEY, name TEXT NOT NULL, email TEXT NOT NULL UNIQUE, email_verified BOOLEAN NOT NULL DEFAULT FALSE, image TEXT, created_at TIMESTAMPTZ NOT NULL, updated_at TIMESTAMPTZ NOT NULL)`,
-            ],
-            [
-                "session",
-                `CREATE TABLE IF NOT EXISTS "session" (id TEXT PRIMARY KEY, expires_at TIMESTAMPTZ NOT NULL, token TEXT NOT NULL UNIQUE, created_at TIMESTAMPTZ NOT NULL, updated_at TIMESTAMPTZ NOT NULL, ip_address TEXT, user_agent TEXT, user_id TEXT NOT NULL, active_organization_id TEXT)`,
-            ],
-            [
-                "account",
-                `CREATE TABLE IF NOT EXISTS "account" (id TEXT PRIMARY KEY, account_id TEXT NOT NULL, provider_id TEXT NOT NULL, user_id TEXT NOT NULL, access_token TEXT, refresh_token TEXT, id_token TEXT, access_token_expires_at TIMESTAMPTZ, refresh_token_expires_at TIMESTAMPTZ, scope TEXT, password TEXT, created_at TIMESTAMPTZ NOT NULL, updated_at TIMESTAMPTZ NOT NULL)`,
-            ],
-            [
-                "verification",
-                `CREATE TABLE IF NOT EXISTS "verification" (id TEXT PRIMARY KEY, identifier TEXT NOT NULL, value TEXT NOT NULL, expires_at TIMESTAMPTZ NOT NULL, created_at TIMESTAMPTZ NOT NULL, updated_at TIMESTAMPTZ NOT NULL)`,
-            ],
-            [
-                "organization",
-                `CREATE TABLE IF NOT EXISTS "organization" (id TEXT PRIMARY KEY, name TEXT NOT NULL, slug TEXT NOT NULL UNIQUE, logo TEXT, metadata TEXT, created_at TIMESTAMPTZ NOT NULL, updated_at TIMESTAMPTZ NOT NULL)`,
-            ],
-            [
-                "member",
-                `CREATE TABLE IF NOT EXISTS "member" (id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, user_id TEXT NOT NULL, role TEXT NOT NULL DEFAULT 'member', created_at TIMESTAMPTZ NOT NULL, updated_at TIMESTAMPTZ NOT NULL)`,
-            ],
-            [
-                "invitation",
-                `CREATE TABLE IF NOT EXISTS "invitation" (id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, email TEXT NOT NULL, role TEXT, status TEXT NOT NULL DEFAULT 'pending', expires_at TIMESTAMPTZ NOT NULL, inviter_id TEXT NOT NULL, created_at TIMESTAMPTZ NOT NULL, updated_at TIMESTAMPTZ NOT NULL)`,
-            ],
-            [
-                "jwks",
-                `CREATE TABLE IF NOT EXISTS "jwks" (id TEXT PRIMARY KEY, public_key TEXT NOT NULL, private_key TEXT NOT NULL, created_at TIMESTAMPTZ NOT NULL, expires_at TIMESTAMPTZ)`,
-            ],
-        ];
-        for (const [name, sql] of pgTables)
-            await ensureTableExists(name, sql);
-        return;
-    }
-    // SQLite (local dev): no lock problem — keep the original behaviour.
-    const sqliteStatements = [
-        `CREATE TABLE IF NOT EXISTS user (id TEXT PRIMARY KEY, name TEXT NOT NULL, email TEXT NOT NULL UNIQUE, email_verified INTEGER NOT NULL DEFAULT 0, image TEXT, created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL)`,
-        `CREATE TABLE IF NOT EXISTS session (id TEXT PRIMARY KEY, expires_at INTEGER NOT NULL, token TEXT NOT NULL UNIQUE, created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL, ip_address TEXT, user_agent TEXT, user_id TEXT NOT NULL, active_organization_id TEXT)`,
-        `CREATE TABLE IF NOT EXISTS account (id TEXT PRIMARY KEY, account_id TEXT NOT NULL, provider_id TEXT NOT NULL, user_id TEXT NOT NULL, access_token TEXT, refresh_token TEXT, id_token TEXT, access_token_expires_at INTEGER, refresh_token_expires_at INTEGER, scope TEXT, password TEXT, created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL)`,
-        `CREATE TABLE IF NOT EXISTS verification (id TEXT PRIMARY KEY, identifier TEXT NOT NULL, value TEXT NOT NULL, expires_at INTEGER NOT NULL, created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL)`,
-        `CREATE TABLE IF NOT EXISTS organization (id TEXT PRIMARY KEY, name TEXT NOT NULL, slug TEXT NOT NULL UNIQUE, logo TEXT, metadata TEXT, created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL)`,
-        `CREATE TABLE IF NOT EXISTS member (id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, user_id TEXT NOT NULL, role TEXT NOT NULL DEFAULT 'member', created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL)`,
-        `CREATE TABLE IF NOT EXISTS invitation (id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, email TEXT NOT NULL, role TEXT, status TEXT NOT NULL DEFAULT 'pending', expires_at INTEGER NOT NULL, inviter_id TEXT NOT NULL, created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL)`,
-        `CREATE TABLE IF NOT EXISTS jwks (id TEXT PRIMARY KEY, public_key TEXT NOT NULL, private_key TEXT NOT NULL, created_at INTEGER NOT NULL, expires_at INTEGER)`,
-    ];
-    for (const sql of sqliteStatements)
-        await db.execute(sql);
-}
 /**
  * Get or create the Better Auth instance.
  * Lazily initialized on first call — the database must be reachable by then.
@@ -860,7 +800,6 @@ function resetAuthOnPoolClose(driver, url) {
 async function createBetterAuthInstance(config) {
     const dialect = getDialect();
     const basePath = config?.basePath ?? "/_agent-native/auth/ba";
-    await ensureBetterAuthTables();
     // Build social providers from env vars
     const socialProviders = {
         ...config?.socialProviders,
@@ -1212,7 +1151,7 @@ async function buildDatabaseConfig(dialect) {
             // connections reached" across concurrent serverless instances.
             resetAuthOnPoolClose("neon", url);
             _neonAuthPool = sharedDbPool("neon", url, () => new Pool({ connectionString: url, ...neonPoolOptions() }));
-            attachNeonPoolErrorLogger(_neonAuthPool, "db/neon-auth");
+            guardNeonPool(_neonAuthPool, url, "db/neon-auth");
             const { drizzle } = await import("drizzle-orm/neon-serverless");
             const db = drizzle(buildResilientNeonPool(_neonAuthPool), {
                 schema: pgAuthSchema,