@agent-native/core 0.145.8 → 0.146.0

package/dist/notifications/routes.d.ts

@@ -13,13 +13,13 @@
 export declare function createNotificationsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<"" | import("./types.js").Notification[] | {
     count: number;
     updated?: undefined;
-    ok?: undefined;
     error?: undefined;
+    ok?: undefined;
 } | {
     count?: undefined;
     updated: number;
-    ok?: undefined;
     error?: undefined;
+    ok?: undefined;
 } | {
     count?: undefined;
     updated?: undefined;

package/dist/observability/routes.d.ts

@@ -62,6 +62,6 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/progress/routes.d.ts

@@ -15,6 +15,6 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    ok: boolean;
     error?: undefined;
+    ok: boolean;
 }>>;

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -75,9 +75,8 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         user: "user";
     }>>;
 }, z.core.$strip>>, {
-    message?: undefined;
+    id?: undefined;
     deleted?: undefined;
-    found?: undefined;
     providers: {
         id: string;
         label: string;
@@ -89,21 +88,21 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     }[];
     count: number;
     provider?: undefined;
+    found?: undefined;
     registered?: undefined;
-    id?: undefined;
     label?: undefined;
-} | {
     message?: undefined;
+} | {
+    id?: undefined;
     deleted?: undefined;
     providers?: undefined;
     count?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
     registered?: undefined;
-    id?: undefined;
     label?: undefined;
-} | {
     message?: undefined;
+} | {
     deleted?: undefined;
     providers?: undefined;
     count?: undefined;
@@ -112,22 +111,23 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     id: string;
     registered?: undefined;
     label?: undefined;
-} | {
     message?: undefined;
-    found?: undefined;
+} | {
     providers?: undefined;
     count?: undefined;
     provider?: undefined;
+    found?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
+    message?: undefined;
 } | {
     deleted?: undefined;
-    found?: undefined;
     providers?: undefined;
     count?: undefined;
     provider?: undefined;
+    found?: undefined;
     registered: boolean;
     id: string;
     label: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -311,10 +311,9 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         notes?: string | undefined;
         scope?: "org" | "user" | undefined;
     }, {
-        deleted?: undefined;
         id?: undefined;
         provider?: undefined;
-        found?: undefined;
+        deleted?: undefined;
         message?: undefined;
         providers: {
             id: string;
@@ -326,12 +325,13 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
             updatedAt: number;
         }[];
         count: number;
+        found?: undefined;
         registered?: undefined;
         label?: undefined;
     } | {
-        deleted?: undefined;
-        count?: undefined;
         id?: undefined;
+        count?: undefined;
+        deleted?: undefined;
         message?: undefined;
         providers?: undefined;
         found: boolean;
@@ -339,9 +339,9 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         registered?: undefined;
         label?: undefined;
     } | {
-        deleted?: undefined;
         count?: undefined;
         provider?: undefined;
+        deleted?: undefined;
         message?: undefined;
         providers?: undefined;
         found: boolean;
@@ -351,19 +351,19 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
     } | {
         count?: undefined;
         provider?: undefined;
-        found?: undefined;
         message?: undefined;
         providers?: undefined;
+        found?: undefined;
         deleted: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
     } | {
-        deleted?: undefined;
         count?: undefined;
         provider?: undefined;
-        found?: undefined;
+        deleted?: undefined;
         providers?: undefined;
+        found?: undefined;
         registered: boolean;
         id: string;
         label: string;

package/dist/provider-api/corpus-jobs.d.ts

@@ -73,7 +73,6 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     offset?: unknown;
     limit?: unknown;
 }, {
-    deleted?: undefined;
     jobs: {
         id: string;
         name: string;
@@ -84,6 +83,7 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
         updatedAt: string;
     }[];
     total: number;
+    deleted?: undefined;
     jobId?: undefined;
 } | {
     jobs?: undefined;
@@ -91,9 +91,9 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     deleted: boolean;
     jobId: string;
 } | {
-    deleted?: undefined;
     jobs?: undefined;
     total?: undefined;
+    deleted?: undefined;
     jobId?: undefined;
     hits: Record<string, unknown>[];
     offset: number;

package/dist/resources/handlers.d.ts

@@ -48,8 +48,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/scripts/docs/search.js

@@ -127,12 +127,13 @@ async function loadAgentBundleDocs() {
                 body: bundle.workspaceAgentsMd,
             });
         }
-        if (bundle.agentsMd?.trim()) {
+        const runtimeAgentsMd = bundle.runtimeAgentsMd ?? bundle.agentsMd;
+        if (runtimeAgentsMd?.trim()) {
             docs.push({
                 slug: "agents-template",
                 title: "Template AGENTS.md",
                 description: "Full bundled template/app agent instructions.",
-                body: bundle.agentsMd,
+                body: runtimeAgentsMd,
             });
         }
         // Only runtime-visible skills are searchable/readable here — `scope: dev`

package/dist/server/agent-chat/prompt-resources.js

@@ -631,13 +631,14 @@ export async function loadResourcesForPrompt(owner, compact = false, selfAppId,
             });
             addSection(block, "required");
         }
-        // 2. Template AGENTS.md — always included (critical template instructions).
-        if (bundle.agentsMd.trim()) {
+        // 2. Runtime instruction file — always included when configured.
+        const runtimeAgentsMd = bundle.runtimeAgentsMd ?? bundle.agentsMd;
+        if (runtimeAgentsMd.trim()) {
             const block = promptResourceBlock({
                 name: "AGENTS.md",
                 scope: "template",
                 path: "AGENTS.md",
-                content: bundle.agentsMd,
+                content: runtimeAgentsMd,
                 maxChars: promptResourceMaxChars,
                 readHint: 'Use docs-search --slug "agents-template" to read the full template AGENTS.md.',
             });

package/dist/server/agents-bundle.d.ts

@@ -15,7 +15,8 @@
  *   2. Filesystem fallback — `process.cwd()/AGENTS.md` +
  *      `process.cwd()/.agents/skills/` (or legacy `.agent/skills/`). Only reliable in local dev and Node
  *      production (`agent-native start`); not on Netlify/Vercel/CF at runtime.
- *   3. Empty bundle — everything silently returns empty strings.
+ *   3. Configuration and filesystem failures propagate so a broken bundle is
+ *      visible instead of being mistaken for an app with no instructions.
  *
  * Result is cached in module scope so it's only computed once per cold start.
  */
@@ -68,8 +69,15 @@ export interface Skill {
     files: Record<string, string>;
 }
 export interface AgentsBundle {
-    /** Contents of the template's AGENTS.md (empty string if missing). */
+    /**
+     * Legacy alias for the runtime instruction file. Empty when an explicitly
+     * configured runtime file is missing.
+     */
     agentsMd: string;
+    /** Contents of the runtime agent's selected instruction file. */
+    runtimeAgentsMd: string;
+    /** Contents of the development agent's selected instruction file. */
+    developmentAgentsMd: string;
     /**
      * Contents of the workspace core's AGENTS.md, if the app is inside an
      * enterprise monorepo with a `workspaceCore` configured. Empty string
@@ -86,6 +94,14 @@ export interface AgentsBundle {
      */
     skills: Record<string, Skill>;
 }
+export interface AgentsBundleReadOptions {
+    instructions?: AgentNativeInstructionsConfig;
+}
+export interface AgentInstructionPaths {
+    runtime: string;
+    development: string;
+}
+export declare function resolveAgentInstructionPaths(instructions?: AgentNativeInstructionsConfig): AgentInstructionPaths;
 export declare function normalizeSkillScope(raw: string | undefined): SkillScope;
 /**
  * Parse the YAML frontmatter at the top of a skill file.
@@ -97,6 +113,7 @@ export declare function normalizeSkillScope(raw: string | undefined): SkillScope
  *   - Literal scalar: `description: |\n  multi\n  line` → "multi\nline"
  */
 export declare function parseSkillFrontmatter(content: string): Partial<SkillMeta>;
+import type { AgentNativeInstructionsConfig } from "../config.js";
 /**
  * Paths to a workspace-core's agent resources, for merging into a template's
  * bundle. All fields optional — pass null for any missing piece.
@@ -117,7 +134,7 @@ export interface WorkspaceAgentsSource {
  *
  * Synchronous — the Vite plugin's load hook calls it inline during the build.
  */
-export declare function readAgentsBundleFromFs(cwd: string, workspaceSource?: WorkspaceAgentsSource | null): AgentsBundle;
+export declare function readAgentsBundleFromFs(cwd: string, workspaceSource?: WorkspaceAgentsSource | null, options?: AgentsBundleReadOptions): AgentsBundle;
 /**
  * Load the agents bundle. Returns a cached result on subsequent calls.
  * Tries the virtual module first (works everywhere, including edge), then

package/dist/server/agents-bundle.js

@@ -15,12 +15,19 @@
  *   2. Filesystem fallback — `process.cwd()/AGENTS.md` +
  *      `process.cwd()/.agents/skills/` (or legacy `.agent/skills/`). Only reliable in local dev and Node
  *      production (`agent-native start`); not on Netlify/Vercel/CF at runtime.
- *   3. Empty bundle — everything silently returns empty strings.
+ *   3. Configuration and filesystem failures propagate so a broken bundle is
+ *      visible instead of being mistaken for an app with no instructions.
  *
  * Result is cached in module scope so it's only computed once per cold start.
  */
 export const DEFAULT_SKILL_SCOPE = "both";
-const EMPTY = { agentsMd: "", workspaceAgentsMd: "", skills: {} };
+const DEFAULT_AGENT_INSTRUCTIONS_PATH = "AGENTS.md";
+export function resolveAgentInstructionPaths(instructions) {
+    return {
+        runtime: instructions?.runtime ?? DEFAULT_AGENT_INSTRUCTIONS_PATH,
+        development: instructions?.development ?? DEFAULT_AGENT_INSTRUCTIONS_PATH,
+    };
+}
 let cached = null;
 /**
  * Coerce a raw frontmatter `scope` value into a known `SkillScope`. Unknown,
@@ -125,6 +132,23 @@ const READABLE_SUBFILE_EXTENSIONS = new Set([".md", ".txt", ".json"]);
  */
 const MAX_SUBFILE_BYTES = 64 * 1024;
 const MAX_SKILL_FILES_BYTES = 256 * 1024;
+function readInstructionFile(cwd, relativePath) {
+    const normalizedPath = relativePath.replaceAll("\\", "/");
+    const root = fs.realpathSync(path.resolve(cwd));
+    const absolutePath = path.resolve(root, normalizedPath);
+    if (absolutePath !== root && !absolutePath.startsWith(`${root}${path.sep}`)) {
+        throw new Error(`Agent instruction path must stay inside the app root: ${relativePath}`);
+    }
+    if (!fs.existsSync(absolutePath))
+        return "";
+    const realPath = fs.realpathSync(absolutePath);
+    if (realPath !== root && !realPath.startsWith(`${root}${path.sep}`)) {
+        throw new Error(`Agent instruction path must stay inside the app root: ${relativePath}`);
+    }
+    if (!fs.statSync(realPath).isFile())
+        return "";
+    return fs.readFileSync(realPath, "utf-8");
+}
 /**
  * Read one skills directory into a `Record<string, Skill>`. Extracted so
  * both the template and workspace-core paths can reuse it. `dirPrefix` is
@@ -214,15 +238,10 @@ function readSkillsDir(skillsDir, rootForRelative, out, skipExistingNames) {
  *
  * Synchronous — the Vite plugin's load hook calls it inline during the build.
  */
-export function readAgentsBundleFromFs(cwd, workspaceSource = null) {
-    let agentsMd = "";
-    try {
-        const agentsMdPath = path.join(cwd, "AGENTS.md");
-        if (fs.existsSync(agentsMdPath)) {
-            agentsMd = fs.readFileSync(agentsMdPath, "utf-8");
-        }
-    }
-    catch { }
+export function readAgentsBundleFromFs(cwd, workspaceSource = null, options = {}) {
+    const instructionPaths = resolveAgentInstructionPaths(options.instructions);
+    const runtimeAgentsMd = readInstructionFile(cwd, instructionPaths.runtime);
+    const developmentAgentsMd = readInstructionFile(cwd, instructionPaths.development);
     let workspaceAgentsMd = "";
     if (workspaceSource?.agentsMdPath) {
         try {
@@ -249,7 +268,15 @@ export function readAgentsBundleFromFs(cwd, workspaceSource = null) {
         }
         catch { }
     }
-    return { agentsMd, workspaceAgentsMd, skills };
+    return {
+        // Keep the old field useful for callers that only know about the runtime
+        // bundle. Audience-aware consumers should use the explicit fields.
+        agentsMd: runtimeAgentsMd,
+        runtimeAgentsMd,
+        developmentAgentsMd,
+        workspaceAgentsMd,
+        skills,
+    };
 }
 /**
  * Load the agents bundle. Returns a cached result on subsequent calls.
@@ -279,29 +306,29 @@ export async function loadAgentsBundle() {
     }
     // 2. Filesystem fallback — works in dev / Node prod. If a workspace core
     //    is present in the ancestor chain, merge its skills + AGENTS.md in.
+    let workspaceSource = null;
     try {
-        let workspaceSource = null;
-        try {
-            const { getWorkspaceCoreExports } = await import("../deploy/workspace-core.js");
-            const ws = await getWorkspaceCoreExports(process.cwd());
-            if (ws) {
-                workspaceSource = {
-                    skillsDir: ws.skillsDir,
-                    agentsMdPath: ws.agentsMdPath,
-                    rootDir: ws.packageDir,
-                };
-            }
-        }
-        catch {
-            // workspace-core discovery isn't available (e.g. edge runtime).
+        const { getWorkspaceCoreExports } = await import("../deploy/workspace-core.js");
+        const ws = await getWorkspaceCoreExports(process.cwd());
+        if (ws) {
+            workspaceSource = {
+                skillsDir: ws.skillsDir,
+                agentsMdPath: ws.agentsMdPath,
+                rootDir: ws.packageDir,
+            };
         }
-        cached = readAgentsBundleFromFs(process.cwd(), workspaceSource);
-        return cached;
+        // coercion-ok: workspace-core discovery is optional in edge runtimes.
     }
     catch {
-        cached = EMPTY;
-        return cached;
+        // workspace-core discovery isn't available (e.g. edge runtime).
     }
+    const { createAgentNativeConfigContext, loadResolvedAgentNativeConfig } = await import("../vite/agent-native-config-loader.js");
+    const production = process.env.NODE_ENV === "production";
+    const config = await loadResolvedAgentNativeConfig(process.cwd(), createAgentNativeConfigContext(production ? "build" : "serve", production ? "production" : "development"));
+    cached = readAgentsBundleFromFs(process.cwd(), workspaceSource, {
+        instructions: config.instructions,
+    });
+    return cached;
 }
 /**
  * Generate the `<skills>` block to inject into the system prompt.

package/dist/server/better-auth-instance.js

@@ -16,7 +16,7 @@ import { pgTable, text as pgText, timestamp as pgTimestamp, boolean as pgBoolean
 import { sqliteTable, text as sqliteText, integer as sqliteInteger, } from "drizzle-orm/sqlite-core";
 import { TEMPLATES } from "../cli/templates-meta.js";
 import { getDbExec, isPostgres } from "../db/client.js";
-import { getDialect, getDatabaseUrl, getDatabaseAuthToken, closePgliteClients, getPgliteClient, isPgliteUrl, loadPgliteDrizzle, pgPoolOptions, neonPoolOptions, attachNeonPoolErrorLogger, sharedDbPool, onSharedDbPoolsClosed, onSharedDbPoolReplaced, } from "../db/client.js";
+import { getDialect, getDatabaseUrl, getDatabaseAuthToken, closePgliteClients, getPgliteClient, isPgliteUrl, loadPgliteDrizzle, pgPoolOptions, neonPoolOptions, guardNeonPool, sharedDbPool, onSharedDbPoolsClosed, onSharedDbPoolReplaced, } from "../db/client.js";
 import { CORE_RESET_PASSWORD_EMAIL_ID, CORE_VERIFY_SIGNUP_EMAIL_ID, } from "../email-catalog/system-emails.js";
 import { saveOAuthTokens } from "../oauth-tokens/store.js";
 import { acceptPendingInvitationsForEmail } from "../org/accept-pending.js";
@@ -1151,7 +1151,7 @@ async function buildDatabaseConfig(dialect) {
             // connections reached" across concurrent serverless instances.
             resetAuthOnPoolClose("neon", url);
             _neonAuthPool = sharedDbPool("neon", url, () => new Pool({ connectionString: url, ...neonPoolOptions() }));
-            attachNeonPoolErrorLogger(_neonAuthPool, "db/neon-auth");
+            guardNeonPool(_neonAuthPool, url, "db/neon-auth");
             const { drizzle } = await import("drizzle-orm/neon-serverless");
             const db = drizzle(buildResilientNeonPool(_neonAuthPool), {
                 schema: pgAuthSchema,

package/dist/shared/runtime-config.js

@@ -98,7 +98,7 @@ export function buildRuntimeConfigPrompt(report, appName) {
         "Detected issues:",
         issueLines || "- No issues were reported.",
         "",
-        "Inspect the app's agent-native.json or agent-native.ts, its deployment configuration, and the framework defaults. Make the smallest safe fix. Keep secrets out of source control. Do not print secret values in your response. Tell me exactly which deploy settings still need to be set, then verify the production build and runtime health check.",
+        "Inspect the app's agent-native.json or agent-native.config.ts (including compatibility aliases), its deployment configuration, and the framework defaults. Make the smallest safe fix. Keep secrets out of source control. Do not print secret values in your response. Tell me exactly which deploy settings still need to be set, then verify the production build and runtime health check.",
     ].join("\n");
 }
 export function getRuntimeConfigReport(env, requirements = {}, options = {}) {

package/dist/templates/chat/.agents/skills/turn-into-app/SKILL.md

@@ -4,7 +4,7 @@ description: >-
   Turn visible project context, a proven thread, skill, or workflow into a
   runnable Agent-Native app with simple buttons, visible agent steps, preview,
   and deployment handoff. Use when a user invokes `/turn-into-app` or asks to
-  make a workflow into an app.
+  make a workflow into an app, including from Claude or ChatGPT on the web.
 user-invocable: true
 scope: both
 metadata:
@@ -13,9 +13,32 @@ metadata:
 
 # Turn Into App
 
+## Host execution boundary
+
+The build location depends on the host. Treat this as a hard routing rule:
+
+- In Claude Web, ChatGPT Web, or a Claude/ChatGPT Project on the web, you are
+  the source analyst and handoff orchestrator. You must not build the app in
+  the host sandbox. Do not run `npm`, `pnpm`, `npx`, `agent-native create`, or
+  `add-app`; do not edit files, create artifacts, or start a local dev server.
+  After writing the bounded source brief, call the connected Dispatch action
+  `start-workspace-app-creation`. Pass the brief and repeatable workflow in
+  `prompt`, plus the inferred `appId`, `description`, `template`, and selected
+  `resourceIds` when available. This is the Builder handoff.
+- Do not substitute the generic `create_workspace_app` MCP tool in an online
+  host. That tool is a local workspace scaffolder, not the Builder handoff.
+- If `start-workspace-app-creation` is not available or Dispatch is not
+  authenticated, stop with the connector setup needed. Do not fall back to a
+  local build or claim that the app exists.
+- In Claude Code, Codex Code, or another local code-agent runtime with a target
+  workspace, follow the local implementation steps below. The local agent may
+  scaffold, edit, run, and verify the app there.
+
 ## Default behavior
 
-This is an end-to-end build skill, not a request for an app proposal.
+For a local code-agent runtime this is an end-to-end build skill, not a request
+for an app proposal. For an online host, the end-to-end result is a verified
+Builder handoff and the resulting workspace app, not code written in the host.
 
 - With no argument, choose the source in this order: visible project context,
   then the current thread. A fresh Claude or ChatGPT Project is a valid source
@@ -47,9 +70,12 @@ private web access, invent an importer, add fake OAuth, or scrape a logged-in
 page. If the needed context is not visible, ask for an export, transcript, or
 attachment and treat that artifact as imported source material.
 
-Deliver a fresh app in a new directory, implement the repeatable workflow with
-buttons and agent handoffs, start its dev server, verify the main path, and
-continue through build/deployment handoff. Do not stop at a plan.
+For local code-agent runtimes, deliver a fresh app in a new directory,
+implement the repeatable workflow with buttons and agent handoffs, start its dev
+server, verify the main path, and continue through build/deployment handoff. Do
+not stop at a plan. For online hosts, call Dispatch first after the source brief,
+then report the returned Builder branch/path and verify the workspace app through
+Dispatch when it becomes available.
 
 ## Fresh project context mode
 
@@ -190,12 +216,12 @@ Do not use `create` for an existing workspace; it scaffolds a new standalone
 workspace rather than adding an app to the current one.
 
 When the source came from a fresh external Project and the target is a Builder
-workspace, prefer the available Dispatch MCP workspace handoff after writing
-the source brief. Call `start-workspace-app-creation` with a concise prompt,
-the inferred app id, and the brief's repeatable workflow. Pass selected
-workspace resource IDs when they are available, rather than pasting entire
-knowledge files. Continue from the returned workspace path or Builder handoff
-and report the actual verification result.
+workspace, the online host path is mandatory: after writing the source brief,
+call `start-workspace-app-creation` with a concise prompt, the inferred app id,
+and the brief's repeatable workflow. Pass selected workspace resource IDs when
+they are available, rather than pasting entire knowledge files. Continue from
+the returned workspace path or Builder branch handoff and report the actual
+verification result. Do not run the local scaffold commands in this host mode.
 
 Use a first-party template only when it materially fits the workflow. Keep the
 new app independent from the source thread's working tree unless the user

package/dist/templates/chat/.agents/skills/turn-into-app/references/fresh-project.md

@@ -51,13 +51,24 @@ also place the skill instructions or this reference in the Project
 instructions/knowledge files. Then add and authenticate the Dispatch MCP
 connector from the packaged `adapters/chatgpt-mcp/connector.json`.
 
+For Claude Web, ChatGPT Web, and their web Projects, the host is an
+orchestrator, not the build environment. After forming the source brief, call
+the Dispatch `start-workspace-app-creation` action so Builder creates the app
+in the connected workspace. Do not use the host's code interpreter, shell,
+artifact editor, `create_workspace_app`, or local `pnpm`/`npm` commands. If the
+handoff action is unavailable, stop and ask the user to authenticate Dispatch;
+do not fall back to a local sandbox build. Claude Code and Codex Code are the
+local-agent exception and may follow the implementation steps in the main
+skill.
+
 In a new Project chat, say:
 
 ```text
 Turn this project into an app. Use the visible Project instructions,
 knowledge files, and any selected successful runs as the source. Create the
-app in the connected Agent-Native workspace, keep the source brief bounded,
-and report the real path and verification result.
+app in the connected Agent-Native workspace through Dispatch and Builder, keep
+the source brief bounded, and report the real Builder branch/path and
+verification result. Do not build it in this chat's sandbox.
 ```
 
 If the host does not show the Project instructions or files to the model, stop

package/dist/templates/default/.agents/skills/turn-into-app/SKILL.md

@@ -4,7 +4,7 @@ description: >-
   Turn visible project context, a proven thread, skill, or workflow into a
   runnable Agent-Native app with simple buttons, visible agent steps, preview,
   and deployment handoff. Use when a user invokes `/turn-into-app` or asks to
-  make a workflow into an app.
+  make a workflow into an app, including from Claude or ChatGPT on the web.
 user-invocable: true
 scope: both
 metadata:
@@ -13,9 +13,32 @@ metadata:
 
 # Turn Into App
 
+## Host execution boundary
+
+The build location depends on the host. Treat this as a hard routing rule:
+
+- In Claude Web, ChatGPT Web, or a Claude/ChatGPT Project on the web, you are
+  the source analyst and handoff orchestrator. You must not build the app in
+  the host sandbox. Do not run `npm`, `pnpm`, `npx`, `agent-native create`, or
+  `add-app`; do not edit files, create artifacts, or start a local dev server.
+  After writing the bounded source brief, call the connected Dispatch action
+  `start-workspace-app-creation`. Pass the brief and repeatable workflow in
+  `prompt`, plus the inferred `appId`, `description`, `template`, and selected
+  `resourceIds` when available. This is the Builder handoff.
+- Do not substitute the generic `create_workspace_app` MCP tool in an online
+  host. That tool is a local workspace scaffolder, not the Builder handoff.
+- If `start-workspace-app-creation` is not available or Dispatch is not
+  authenticated, stop with the connector setup needed. Do not fall back to a
+  local build or claim that the app exists.
+- In Claude Code, Codex Code, or another local code-agent runtime with a target
+  workspace, follow the local implementation steps below. The local agent may
+  scaffold, edit, run, and verify the app there.
+
 ## Default behavior
 
-This is an end-to-end build skill, not a request for an app proposal.
+For a local code-agent runtime this is an end-to-end build skill, not a request
+for an app proposal. For an online host, the end-to-end result is a verified
+Builder handoff and the resulting workspace app, not code written in the host.
 
 - With no argument, choose the source in this order: visible project context,
   then the current thread. A fresh Claude or ChatGPT Project is a valid source
@@ -47,9 +70,12 @@ private web access, invent an importer, add fake OAuth, or scrape a logged-in
 page. If the needed context is not visible, ask for an export, transcript, or
 attachment and treat that artifact as imported source material.
 
-Deliver a fresh app in a new directory, implement the repeatable workflow with
-buttons and agent handoffs, start its dev server, verify the main path, and
-continue through build/deployment handoff. Do not stop at a plan.
+For local code-agent runtimes, deliver a fresh app in a new directory,
+implement the repeatable workflow with buttons and agent handoffs, start its dev
+server, verify the main path, and continue through build/deployment handoff. Do
+not stop at a plan. For online hosts, call Dispatch first after the source brief,
+then report the returned Builder branch/path and verify the workspace app through
+Dispatch when it becomes available.
 
 ## Fresh project context mode
 
@@ -190,12 +216,12 @@ Do not use `create` for an existing workspace; it scaffolds a new standalone
 workspace rather than adding an app to the current one.
 
 When the source came from a fresh external Project and the target is a Builder
-workspace, prefer the available Dispatch MCP workspace handoff after writing
-the source brief. Call `start-workspace-app-creation` with a concise prompt,
-the inferred app id, and the brief's repeatable workflow. Pass selected
-workspace resource IDs when they are available, rather than pasting entire
-knowledge files. Continue from the returned workspace path or Builder handoff
-and report the actual verification result.
+workspace, the online host path is mandatory: after writing the source brief,
+call `start-workspace-app-creation` with a concise prompt, the inferred app id,
+and the brief's repeatable workflow. Pass selected workspace resource IDs when
+they are available, rather than pasting entire knowledge files. Continue from
+the returned workspace path or Builder branch handoff and report the actual
+verification result. Do not run the local scaffold commands in this host mode.
 
 Use a first-party template only when it materially fits the workflow. Keep the
 new app independent from the source thread's working tree unless the user