@agent-native/core 0.146.3 → 0.146.5

package/dist/templates/default/.agents/skills/self-modifying-code/SKILL.md

@@ -36,8 +36,10 @@ Tier 4 includes **all** of the following — not only editing package source:
 - Files under `node_modules/@agent-native/*` (core, dispatch, scheduling, …)
 - `pnpm.overrides`, `overrides`, `resolutions`, or `patchedDependencies` that
   target any `@agent-native/*` package
-- Local package patches or invented "dispatch/core behavior" shims meant to
-  paper over a version skew or failed upgrade
+- `pnpm patch`, `pnpm patch-commit`, or local package patch artifacts for any
+  dependency
+- Invented "dispatch/core behavior" shims meant to paper over a version skew
+  or failed upgrade
 
 This does not prohibit intentional app-owned UI customization. When public
 props and composition are insufficient, the `customizing-agent-native` skill
@@ -100,8 +102,10 @@ inline strings in components.
 - Don't confuse readable package source with app-owned code: use
   `customizing-agent-native` and `agent-native eject` for supported ownership
   transfer
+- Don't use `pnpm patch` / `pnpm patch-commit`, commit `patches/` artifacts, or
+  add `pnpm.patchedDependencies` to "make the app run" after a version bump
 - Don't add `pnpm.overrides` / `patchedDependencies` / `resolutions` for
-  `@agent-native/*` to "make the app run" after a version bump
+  `@agent-native/*` to paper over a broken upgrade
 - Don't invent local dispatch/core behavior overrides when upgrade fails —
   run `npx @agent-native/core@latest upgrade`, then fix app-level errors only
 - Don't modify `.agents/skills/` or `AGENTS.md` unless explicitly requested

package/dist/templates/default/.agents/skills/upgrade-agent-native/SKILL.md

@@ -15,8 +15,9 @@ metadata:
 
 When an older Agent Native app/branch needs to run on current packages, use
 `agent-native upgrade`. Never "fix" upgrade breakage with
-`pnpm.overrides`, `patchedDependencies`, `resolutions`, local patches, or
-edits under `node_modules/@agent-native/*` — especially not against
+`pnpm patch`, `pnpm patch-commit`, `pnpm.patchedDependencies`,
+`pnpm.overrides`, `patchedDependencies`, `resolutions`, local patch artifacts,
+or edits under `node_modules/@agent-native/*` — especially not against
 `@agent-native/core` or `@agent-native/dispatch`.
 
 ## Why
@@ -109,6 +110,8 @@ install → refresh scaffold skills → verify, then fix **app** code only.
 
 - Don't add `pnpm.overrides`, `overrides`, `resolutions`, or
   `patchedDependencies` for any `@agent-native/*` package
+- Don't run `pnpm patch` or `pnpm patch-commit`, or commit files under
+  `patches/`, for any dependency
 - Don't edit `node_modules/@agent-native/core` or
   `node_modules/@agent-native/dispatch`
 - Don't invent local "dispatch behavior" shims to paper over version skew

package/dist/templates/default/app/routes/_index.tsx

@@ -76,7 +76,7 @@ export default function IndexPage() {
             </p>
           </Link>
           <Link
-            to="/agent"
+            to="/settings/agent"
             className="group rounded-lg border border-border/50 px-4 py-3 hover:bg-accent/50 transition-colors"
           >
             <p className="text-[13px] font-medium text-foreground">

package/dist/templates/default/app/routes/agent.tsx

@@ -1,34 +1,16 @@
-import { AgentTabsPage } from "@agent-native/core/client/agent-chat";
-import { useT } from "@agent-native/core/client/i18n";
-import { Link } from "react-router";
+import { buildLegacyAgentSettingsRoute } from "@agent-native/core/client/navigation";
+import { Navigate, useLocation } from "react-router";
 
 export function meta() {
   return [{ title: "Agent - {{APP_TITLE}}" }];
 }
 
 export default function AgentPage() {
-  const t = useT();
-
+  const location = useLocation();
   return (
-    <main className="min-h-screen bg-background px-6 py-10">
-      <div className="mx-auto w-full max-w-5xl space-y-6">
-        <div className="space-y-2">
-          <Link
-            to="/settings"
-            className="text-[13px] text-muted-foreground hover:text-foreground"
-          >
-            {t("settings.title")}
-          </Link>
-          <h1 className="text-2xl font-semibold tracking-tight text-foreground">
-            {t("settings.agentTitle")}
-          </h1>
-          <p className="text-[14px] leading-relaxed text-muted-foreground">
-            {t("settings.agentDescription")}
-          </p>
-        </div>
-
-        <AgentTabsPage className="min-h-[640px] rounded-lg border border-border/50" />
-      </div>
-    </main>
+    <Navigate
+      to={buildLegacyAgentSettingsRoute(location.hash, location.search)}
+      replace
+    />
   );
 }

package/dist/templates/default/package.json

@@ -11,6 +11,7 @@
     "agent-native:doctor": "agent-native doctor",
     "action": "agent-native action",
     "script": "agent-native script",
+    "migrate:production": "tsx scripts/migrate-production.ts",
     "skills:update": "agent-native skills update scaffold --project",
     "upgrade:agent-native": "agent-native upgrade"
   },

package/dist/templates/default/scripts/migrate-production.ts

@@ -0,0 +1,31 @@
+import { closeDbExec, withMigrationRuntime } from "@agent-native/core/db";
+import { runFrameworkReleaseMigrations } from "@agent-native/core/server";
+
+/**
+ * Release-time schema entrypoint.
+ *
+ * Every deploy runs this once, and request functions never touch schema. That
+ * ordering is not an optimization: on serverless, "migrate on first use" means
+ * migrate on EVERY cold start, and a production incident traced a multi-hour
+ * outage to schema introspection running 4-6 times concurrently on the request
+ * path.
+ *
+ * `withMigrationRuntime()` is load-bearing. The Netlify BUILD environment sets
+ * NETLIFY=true, so this script looks like a serverless request to the guard in
+ * `runMigrations` — it is allowed to migrate only because it claims duty here.
+ * A release entrypoint that forgets the wrapper silently does nothing.
+ *
+ * If this app owns tables of its own, export its migration runner from
+ * `server/plugins/db.ts` and call it inside the same block.
+ */
+async function main(): Promise<void> {
+  await withMigrationRuntime(async () => {
+    await runFrameworkReleaseMigrations(null);
+  });
+}
+
+try {
+  await main();
+} finally {
+  await closeDbExec();
+}

package/dist/templates/default/tsconfig.json

@@ -4,6 +4,7 @@
     "app/**/*",
     "server/**/*",
     "shared/**/*",
+    "scripts/**/*",
     "vite.config.ts",
     "react-router.config.ts",
     ".react-router/types/**/*",

package/dist/templates/headless/.agents/skills/upgrade-agent-native/SKILL.md

@@ -15,8 +15,9 @@ metadata:
 
 When an older Agent Native app/branch needs to run on current packages, use
 `agent-native upgrade`. Never "fix" upgrade breakage with
-`pnpm.overrides`, `patchedDependencies`, `resolutions`, local patches, or
-edits under `node_modules/@agent-native/*` — especially not against
+`pnpm patch`, `pnpm patch-commit`, `pnpm.patchedDependencies`,
+`pnpm.overrides`, `patchedDependencies`, `resolutions`, local patch artifacts,
+or edits under `node_modules/@agent-native/*` — especially not against
 `@agent-native/core` or `@agent-native/dispatch`.
 
 ## Why
@@ -109,6 +110,8 @@ install → refresh scaffold skills → verify, then fix **app** code only.
 
 - Don't add `pnpm.overrides`, `overrides`, `resolutions`, or
   `patchedDependencies` for any `@agent-native/*` package
+- Don't run `pnpm patch` or `pnpm patch-commit`, or commit files under
+  `patches/`, for any dependency
 - Don't edit `node_modules/@agent-native/core` or
   `node_modules/@agent-native/dispatch`
 - Don't invent local "dispatch behavior" shims to paper over version skew

package/dist/templates/workspace-core/.agents/skills/self-modifying-code/SKILL.md

@@ -36,8 +36,10 @@ Tier 4 includes **all** of the following — not only editing package source:
 - Files under `node_modules/@agent-native/*` (core, dispatch, scheduling, …)
 - `pnpm.overrides`, `overrides`, `resolutions`, or `patchedDependencies` that
   target any `@agent-native/*` package
-- Local package patches or invented "dispatch/core behavior" shims meant to
-  paper over a version skew or failed upgrade
+- `pnpm patch`, `pnpm patch-commit`, or local package patch artifacts for any
+  dependency
+- Invented "dispatch/core behavior" shims meant to paper over a version skew
+  or failed upgrade
 
 This does not prohibit intentional app-owned UI customization. When public
 props and composition are insufficient, the `customizing-agent-native` skill
@@ -100,8 +102,10 @@ inline strings in components.
 - Don't confuse readable package source with app-owned code: use
   `customizing-agent-native` and `agent-native eject` for supported ownership
   transfer
+- Don't use `pnpm patch` / `pnpm patch-commit`, commit `patches/` artifacts, or
+  add `pnpm.patchedDependencies` to "make the app run" after a version bump
 - Don't add `pnpm.overrides` / `patchedDependencies` / `resolutions` for
-  `@agent-native/*` to "make the app run" after a version bump
+  `@agent-native/*` to paper over a broken upgrade
 - Don't invent local dispatch/core behavior overrides when upgrade fails —
   run `npx @agent-native/core@latest upgrade`, then fix app-level errors only
 - Don't modify `.agents/skills/` or `AGENTS.md` unless explicitly requested

package/dist/templates/workspace-core/.agents/skills/upgrade-agent-native/SKILL.md

@@ -15,8 +15,9 @@ metadata:
 
 When an older Agent Native app/branch needs to run on current packages, use
 `agent-native upgrade`. Never "fix" upgrade breakage with
-`pnpm.overrides`, `patchedDependencies`, `resolutions`, local patches, or
-edits under `node_modules/@agent-native/*` — especially not against
+`pnpm patch`, `pnpm patch-commit`, `pnpm.patchedDependencies`,
+`pnpm.overrides`, `patchedDependencies`, `resolutions`, local patch artifacts,
+or edits under `node_modules/@agent-native/*` — especially not against
 `@agent-native/core` or `@agent-native/dispatch`.
 
 ## Why
@@ -109,6 +110,8 @@ install → refresh scaffold skills → verify, then fix **app** code only.
 
 - Don't add `pnpm.overrides`, `overrides`, `resolutions`, or
   `patchedDependencies` for any `@agent-native/*` package
+- Don't run `pnpm patch` or `pnpm patch-commit`, or commit files under
+  `patches/`, for any dependency
 - Don't edit `node_modules/@agent-native/core` or
   `node_modules/@agent-native/dispatch`
 - Don't invent local "dispatch behavior" shims to paper over version skew

package/dist/templates/workspace-root/AGENTS.md

@@ -36,7 +36,8 @@ Preview before `--apply`, commit `agent-native.ejections.json`, and never edit
 To bring an older workspace current, run `pnpm upgrade:agent-native` or
 `npx @agent-native/core@latest upgrade` from the workspace root. That bumps
 `@agent-native/*` deps, installs, refreshes scaffold skills, and typechecks.
-Do **not** add `pnpm.overrides` / patches against `@agent-native/*` or edit
+Do **not** run `pnpm patch` / `pnpm patch-commit`, add
+`pnpm.patchedDependencies`, commit dependency patches, or edit
 `node_modules/@agent-native/*` when an upgrade fails — fix app code or ask.
 See the `upgrade-agent-native` and `self-modifying-code` skills.
 After a manual core bump only, `pnpm skills:update` (or

package/dist/triggers/actions/list-automations.js

@@ -35,7 +35,7 @@ export default defineAction({
         const userEmail = ctx?.userEmail;
         if (!userEmail)
             throw new Error("Not authenticated.");
-        const definitions = await listAutomationDefinitions({ userEmail, orgId: ctx?.orgId }, scope);
+        const definitions = await listAutomationDefinitions({ userEmail, orgId: ctx?.orgId, appId: ctx?.appId }, scope);
         return definitions.map(({ resource, name, meta, body, canUpdate }) => ({
             id: resource.id,
             name,

package/dist/triggers/actions/manage-automation.js

@@ -17,7 +17,11 @@ export default defineAction({
         const userEmail = ctx?.userEmail;
         if (!userEmail)
             throw new Error("Not authenticated.");
-        const actor = { userEmail, orgId: ctx?.orgId };
+        const actor = {
+            userEmail,
+            orgId: ctx?.orgId,
+            appId: ctx?.appId,
+        };
         if (operation === "delete") {
             await deleteAutomation(actor, scope, name);
             await refreshEventSubscriptions();

package/dist/triggers/actions.d.ts

@@ -9,4 +9,4 @@
  * with an `action` discriminator to keep the tool registry compact.
  */
 import type { ActionEntry } from "../agent/production-agent.js";
-export declare function createAutomationToolEntries(getCurrentUser: () => string): Record<string, ActionEntry>;
+export declare function createAutomationToolEntries(getCurrentUser: () => string, appId?: string): Record<string, ActionEntry>;

package/dist/triggers/actions.js

@@ -41,9 +41,9 @@ async function handleListEvents() {
     });
     return lines.join("\n");
 }
-async function handleList(args, getCurrentUser) {
+async function handleList(args, getCurrentUser, appId) {
     const scope = automationScope(args.scope);
-    const definitions = await listAutomationDefinitions({ userEmail: getCurrentUser(), orgId: getRequestOrgId() }, scope);
+    const definitions = await listAutomationDefinitions({ userEmail: getCurrentUser(), orgId: getRequestOrgId(), appId }, scope);
     const automations = definitions
         .filter(({ meta }) => !args.domain || meta.domain === args.domain)
         .filter(({ meta }) => args.enabled_only !== "true" || meta.enabled)
@@ -60,6 +60,7 @@ async function handleList(args, getCurrentUser) {
         condition: meta.condition ?? null,
         mode: meta.mode,
         domain: meta.domain ?? null,
+        appId: meta.appId ?? null,
         enabled: meta.enabled,
         lastRun: meta.lastRun ?? null,
         lastStatus: meta.lastStatus ?? null,
@@ -91,7 +92,7 @@ function automationTriggerType(value) {
         return value;
     throw new Error('trigger_type must be "schedule" or "event".');
 }
-async function handleDefine(args, getCurrentUser) {
+async function handleDefine(args, getCurrentUser, appId) {
     if (args.mode === "deterministic") {
         return ("Error: Deterministic mode was removed — it was never implemented and " +
             "automations that set it never fired. Create the automation without " +
@@ -99,7 +100,11 @@ async function handleDefine(args, getCurrentUser) {
     }
     const integration = getIntegrationRequestContext();
     try {
-        const definition = await defineAutomation({ userEmail: getCurrentUser(), orgId: getRequestOrgId() }, {
+        const definition = await defineAutomation({
+            userEmail: getCurrentUser(),
+            orgId: getRequestOrgId(),
+            appId,
+        }, {
             name: typeof args.name === "string" ? args.name : "",
             scope: automationScope(args.scope),
             triggerType: automationTriggerType(args.trigger_type),
@@ -154,9 +159,9 @@ async function handleDefine(args, getCurrentUser) {
         return `Error: ${error.message}`;
     }
 }
-async function handleUpdate(args, getCurrentUser) {
+async function handleUpdate(args, getCurrentUser, appId) {
     try {
-        const definition = await updateAutomation({ userEmail: getCurrentUser(), orgId: getRequestOrgId() }, {
+        const definition = await updateAutomation({ userEmail: getCurrentUser(), orgId: getRequestOrgId(), appId }, {
             name: typeof args.name === "string" ? args.name : "",
             scope: automationScope(args.scope),
             enabled: args.enabled === undefined
@@ -207,10 +212,10 @@ async function handleUpdate(args, getCurrentUser) {
         return `Error: ${error.message}`;
     }
 }
-async function handleDelete(args, getCurrentUser) {
+async function handleDelete(args, getCurrentUser, appId) {
     const name = typeof args.name === "string" ? args.name : "";
     try {
-        await deleteAutomation({ userEmail: getCurrentUser(), orgId: getRequestOrgId() }, automationScope(args.scope), name);
+        await deleteAutomation({ userEmail: getCurrentUser(), orgId: getRequestOrgId(), appId }, automationScope(args.scope), name);
         await refreshEventSubscriptions();
         return JSON.stringify({ deleted: true, name });
     }
@@ -236,7 +241,7 @@ async function handleFireTest(args, getCurrentUser) {
     emit("test.event.fired", { data }, { owner });
     return `Test event fired with payload: ${JSON.stringify({ data })}. Any automations subscribed to "test.event.fired" will be evaluated.`;
 }
-async function handleRunNow(args, getCurrentUser, context) {
+async function handleRunNow(args, getCurrentUser, appId, context) {
     if (context?.caller === "automation") {
         return "Error: an automation cannot run another automation.";
     }
@@ -244,6 +249,7 @@ async function handleRunNow(args, getCurrentUser, context) {
         const result = await queueAutomationRunNow({
             userEmail: getCurrentUser(),
             orgId: getRequestOrgId(),
+            appId,
             scope: automationScope(args.scope),
             name: typeof args.name === "string" ? args.name : "",
         });
@@ -265,7 +271,7 @@ const VALID_ACTIONS = [
     "fire-test",
     "run-now",
 ];
-export function createAutomationToolEntries(getCurrentUser) {
+export function createAutomationToolEntries(getCurrentUser, appId) {
     return {
         "manage-automations": {
             tool: {
@@ -371,17 +377,17 @@ export function createAutomationToolEntries(getCurrentUser) {
                     case "list-events":
                         return handleListEvents();
                     case "list":
-                        return handleList(args, getCurrentUser);
+                        return handleList(args, getCurrentUser, appId);
                     case "define":
-                        return handleDefine(args, getCurrentUser);
+                        return handleDefine(args, getCurrentUser, appId);
                     case "update":
-                        return handleUpdate(args, getCurrentUser);
+                        return handleUpdate(args, getCurrentUser, appId);
                     case "delete":
-                        return handleDelete(args, getCurrentUser);
+                        return handleDelete(args, getCurrentUser, appId);
                     case "fire-test":
                         return handleFireTest(args, getCurrentUser);
                     case "run-now":
-                        return handleRunNow(args, getCurrentUser, context);
+                        return handleRunNow(args, getCurrentUser, appId, context);
                     default:
                         return `Error: unknown action "${action}". Valid actions: ${VALID_ACTIONS.join(", ")}.`;
                 }

package/dist/triggers/dispatcher.js

@@ -39,6 +39,13 @@ const _eventSubscriptions = new Map();
 // deployments; multi-instance would need a conditional DB update.
 const _dispatchingTriggers = new Set();
 let _deps = null;
+function jobBelongsToApp(meta, appId) {
+    const ownerAppId = meta.appId?.trim();
+    if (!ownerAppId)
+        return true;
+    const dispatcherAppId = appId?.trim();
+    return Boolean(dispatcherAppId && ownerAppId === dispatcherAppId);
+}
 /**
  * Record that a tick evaluated this trigger and declined to dispatch it.
  * `lastRun` stays untouched — nothing ran — and an unchanged outcome is not
@@ -106,6 +113,8 @@ export async function refreshEventSubscriptions() {
             if (!resource.path.endsWith(".md"))
                 continue;
             const { meta } = parseTriggerFrontmatter(resource.content);
+            if (!jobBelongsToApp(meta, _deps?.appId))
+                continue;
             if (meta.triggerType === "event" && meta.event && meta.enabled) {
                 eventNames.add(meta.event);
             }
@@ -129,7 +138,8 @@ export async function refreshEventSubscriptions() {
     }
 }
 async function handleEvent(eventName, payload, eventMeta) {
-    if (!_deps)
+    const deps = _deps;
+    if (!deps)
         return;
     try {
         const jobResources = await resourceListAllOwners("jobs/");
@@ -140,6 +150,7 @@ async function handleEvent(eventName, payload, eventMeta) {
             return (meta.triggerType === "event" &&
                 meta.event === eventName &&
                 meta.enabled &&
+                jobBelongsToApp(meta, deps.appId) &&
                 !isBackgroundAutomationRunActive(meta));
         });
         for (const resource of matchingTriggers) {
@@ -178,7 +189,7 @@ async function handleEvent(eventName, payload, eventMeta) {
             // Resolve API key for condition evaluation
             const owner = identity.userEmail;
             const userApiKey = await getOwnerActiveApiKey(owner);
-            const apiKey = userApiKey || _deps.apiKey;
+            const apiKey = userApiKey || deps.apiKey;
             if (!apiKey) {
                 await recordTriggerSkip(resource, "error", "No API key is available for this automation");
                 console.warn(`[triggers] ${meta.lastError}: "${resource.path}"`);
@@ -227,6 +238,10 @@ async function dispatchAgentic(resource, payload, eventMeta, identity) {
         return;
     }
     const latestTrigger = parseTriggerFrontmatter(latest.content);
+    if (!jobBelongsToApp(latestTrigger.meta, _deps.appId)) {
+        console.log(`[triggers] "${resource.path}" belongs to a different app; dropping the event.`);
+        return;
+    }
     const runningMeta = {
         ...latestTrigger.meta,
         lastRun: now.toISOString(),

package/dist/triggers/routes.d.ts

@@ -5,6 +5,7 @@ export interface AutomationRouteItem {
     name: string;
     path: string;
     owner: string;
+    appId?: string;
     scope: "personal" | "organization";
     canUpdate: boolean;
     triggerType: TriggerFrontmatter["triggerType"];

package/dist/triggers/routes.js

@@ -122,6 +122,7 @@ async function resourceToAutomationItem(event, userEmail, resource) {
         name: automationName(resource.path),
         path: resource.path,
         owner: resource.owner,
+        appId: meta.appId,
         scope: resource.owner === userEmail && !meta.orgId ? "personal" : "organization",
         canUpdate: await currentUserCanUpdateAutomation(event, userEmail, resource, meta),
         triggerType: meta.triggerType,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.146.3",
+  "version": "0.146.5",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -412,8 +412,8 @@
     "y-protocols": "^1.0.7",
     "yjs": "^13.6.31",
     "zod": "^4.3.6",
-    "@agent-native/recap-cli": "0.5.3",
-    "@agent-native/toolkit": "^0.13.5"
+    "@agent-native/toolkit": "^0.13.5",
+    "@agent-native/recap-cli": "0.5.3"
   },
   "devDependencies": {
     "@ai-sdk/anthropic": "^3.0.71",

package/src/templates/chat/.agents/skills/self-modifying-code/SKILL.md

@@ -36,8 +36,10 @@ Tier 4 includes **all** of the following — not only editing package source:
 - Files under `node_modules/@agent-native/*` (core, dispatch, scheduling, …)
 - `pnpm.overrides`, `overrides`, `resolutions`, or `patchedDependencies` that
   target any `@agent-native/*` package
-- Local package patches or invented "dispatch/core behavior" shims meant to
-  paper over a version skew or failed upgrade
+- `pnpm patch`, `pnpm patch-commit`, or local package patch artifacts for any
+  dependency
+- Invented "dispatch/core behavior" shims meant to paper over a version skew
+  or failed upgrade
 
 This does not prohibit intentional app-owned UI customization. When public
 props and composition are insufficient, the `customizing-agent-native` skill
@@ -100,8 +102,10 @@ inline strings in components.
 - Don't confuse readable package source with app-owned code: use
   `customizing-agent-native` and `agent-native eject` for supported ownership
   transfer
+- Don't use `pnpm patch` / `pnpm patch-commit`, commit `patches/` artifacts, or
+  add `pnpm.patchedDependencies` to "make the app run" after a version bump
 - Don't add `pnpm.overrides` / `patchedDependencies` / `resolutions` for
-  `@agent-native/*` to "make the app run" after a version bump
+  `@agent-native/*` to paper over a broken upgrade
 - Don't invent local dispatch/core behavior overrides when upgrade fails —
   run `npx @agent-native/core@latest upgrade`, then fix app-level errors only
 - Don't modify `.agents/skills/` or `AGENTS.md` unless explicitly requested

package/src/templates/chat/.agents/skills/upgrade-agent-native/SKILL.md

@@ -15,8 +15,9 @@ metadata:
 
 When an older Agent Native app/branch needs to run on current packages, use
 `agent-native upgrade`. Never "fix" upgrade breakage with
-`pnpm.overrides`, `patchedDependencies`, `resolutions`, local patches, or
-edits under `node_modules/@agent-native/*` — especially not against
+`pnpm patch`, `pnpm patch-commit`, `pnpm.patchedDependencies`,
+`pnpm.overrides`, `patchedDependencies`, `resolutions`, local patch artifacts,
+or edits under `node_modules/@agent-native/*` — especially not against
 `@agent-native/core` or `@agent-native/dispatch`.
 
 ## Why
@@ -109,6 +110,8 @@ install → refresh scaffold skills → verify, then fix **app** code only.
 
 - Don't add `pnpm.overrides`, `overrides`, `resolutions`, or
   `patchedDependencies` for any `@agent-native/*` package
+- Don't run `pnpm patch` or `pnpm patch-commit`, or commit files under
+  `patches/`, for any dependency
 - Don't edit `node_modules/@agent-native/core` or
   `node_modules/@agent-native/dispatch`
 - Don't invent local "dispatch behavior" shims to paper over version skew

package/src/templates/chat/app/hooks/use-navigation-state.ts

@@ -42,7 +42,10 @@ function viewForPath(pathname: string): string {
   if (pathname.startsWith("/database")) return "database";
   if (pathname.startsWith("/extensions")) return "extensions";
   if (pathname.startsWith("/observability")) return "observability";
-  if (pathname.startsWith("/agent")) return "agent";
+  if (pathname.startsWith("/settings/agent") || pathname.startsWith("/agent")) {
+    return "agent";
+  }
+  if (pathname.startsWith("/settings")) return "settings";
   if (pathname.startsWith("/team")) return "settings";
   return "chat";
 }
@@ -60,7 +63,7 @@ function pathForView(view?: string): string {
     case "observability":
       return "/observability";
     case "agent":
-      return "/agent";
+      return "/settings/agent";
     case "settings":
       return "/settings";
     case "team":

package/src/templates/chat/app/routes/agent.tsx

@@ -1,5 +1,4 @@
-import { useT } from "@agent-native/core/client/i18n";
-import { useSetPageTitle } from "@agent-native/toolkit/app-shell";
+import { buildLegacyAgentSettingsRoute } from "@agent-native/core/client/navigation";
 import { Navigate, useLocation } from "react-router";
 
 export function meta() {
@@ -7,34 +6,11 @@ export function meta() {
 }
 
 export default function AgentRoute() {
-  const t = useT();
   const location = useLocation();
-  useSetPageTitle(t("settings.agentTitle"));
-
-  const legacyTab = location.hash.replace(/^#/, "").toLowerCase();
-  const resourceTabs = new Set([
-    "files",
-    "instructions",
-    "agents",
-    "memory",
-    "skills",
-    "learnings",
-  ]);
-  const destination = resourceTabs.has(legacyTab)
-    ? `/settings/agent/resources/${legacyTab}`
-    : legacyTab === "remote-agents"
-      ? "/settings/agent/agents"
-      : legacyTab === "connections"
-        ? "/settings/integrations"
-        : legacyTab === "jobs"
-          ? "/settings/agent/automations"
-          : legacyTab === "access"
-            ? "/settings/agent"
-            : ["llm", "app-models", "limits", "voice", "background"].includes(
-                  legacyTab,
-                )
-              ? `/settings/agent/${legacyTab}`
-              : "/settings/agent";
-
-  return <Navigate to={destination} replace />;
+  return (
+    <Navigate
+      to={buildLegacyAgentSettingsRoute(location.hash, location.search)}
+      replace
+    />
+  );
 }

package/src/templates/chat/netlify.toml

@@ -1,6 +1,6 @@
 [build]
 ignore = "node ./scripts/netlify-ignore-build.mjs chat"
-command = "export DATABASE_URL=${NETLIFY_DATABASE_URL:-$DATABASE_URL} && pnpm install && NITRO_PRESET=netlify pnpm --filter chat build"
+command = "export DATABASE_URL=${NETLIFY_DATABASE_URL:-$DATABASE_URL} && pnpm install && NITRO_PRESET=netlify pnpm --filter chat build && if [ \"${CONTEXT:-}\" = \"production\" ]; then pnpm --filter chat migrate:production; fi"
 publish = "templates/chat/dist"
 functions = "templates/chat/.netlify/functions-internal"
 

package/src/templates/chat/package.json

@@ -5,6 +5,7 @@
   "description": "Minimal chat-first agent-native app template.",
   "type": "module",
   "scripts": {
+    "migrate:production": "tsx scripts/migrate-production.ts",
     "dev": "agent-native dev --open",
     "build": "agent-native build",
     "start": "agent-native start",

package/src/templates/chat/scripts/migrate-production.ts

@@ -0,0 +1,31 @@
+import { closeDbExec, withMigrationRuntime } from "@agent-native/core/db";
+import { runFrameworkReleaseMigrations } from "@agent-native/core/server";
+
+/**
+ * Release-time schema entrypoint.
+ *
+ * Every deploy runs this once, and request functions never touch schema. That
+ * ordering is not an optimization: on serverless, "migrate on first use" means
+ * migrate on EVERY cold start, and a production incident traced a multi-hour
+ * outage to schema introspection running 4-6 times concurrently on the request
+ * path.
+ *
+ * `withMigrationRuntime()` is load-bearing. The Netlify BUILD environment sets
+ * NETLIFY=true, so this script looks like a serverless request to the guard in
+ * `runMigrations` — it is allowed to migrate only because it claims duty here.
+ * A release entrypoint that forgets the wrapper silently does nothing.
+ *
+ * If this app owns tables of its own, export its migration runner from
+ * `server/plugins/db.ts` and call it inside the same block.
+ */
+async function main(): Promise<void> {
+  await withMigrationRuntime(async () => {
+    await runFrameworkReleaseMigrations(null);
+  });
+}
+
+try {
+  await main();
+} finally {
+  await closeDbExec();
+}