@agent-native/core 0.146.4 → 0.146.6

package/dist/deploy/build.js

@@ -1925,6 +1925,13 @@ const SERVERLESS_BROWSER_RUNTIME_PACKAGES = [
     "@sparticuz/chromium",
     "playwright-core",
 ];
+const SERVERLESS_BROWSER_RUNTIME_CONSUMER = "@agent-native/creative-context";
+const PACKAGE_DEPENDENCY_FIELDS = [
+    "dependencies",
+    "optionalDependencies",
+    "devDependencies",
+    "peerDependencies",
+];
 // Serverless functions only ever run on 64-bit Linux. The darwin/win32/android
 // and 32-bit-arm prebuilds of these native packages are ~100MB that can never
 // execute there, and Netlify copies the whole server dir again for every extra
@@ -1941,6 +1948,11 @@ const SERVERLESS_NATIVE_PACKAGE_SUFFIXES = [
 export function isServerlessNativePlatformPackage(packageName) {
     return SERVERLESS_NATIVE_PACKAGE_SUFFIXES.some((suffix) => packageName.endsWith(suffix));
 }
+// Names a prebuild package by the platform it targets: `darwin-arm64`,
+// `resvg-js-win32-ia32-msvc`, `linux-x64-gnu`. Matching only says "this is a
+// per-platform prebuild"; isServerlessNativePlatformPackage decides whether it
+// can run in the function.
+const SERVERLESS_PLATFORM_PACKAGE_NAME = /(?:^|-)(?:darwin|win32|linux|android|freebsd)-[a-z0-9]+(?:-[a-z0-9]+)?$/;
 const FFMPEG_STATIC_BINARY_NAMES = process.platform === "win32" ? ["ffmpeg.exe", "ffmpeg"] : ["ffmpeg"];
 const SERVERLESS_FFMPEG_STATIC_PLATFORM = "linux";
 const SERVERLESS_FFMPEG_STATIC_ARCHES = new Set([
@@ -1993,6 +2005,37 @@ function readPackageManifest(packageDir) {
     }
     return manifest;
 }
+function manifestDeclaresDependency(manifest, packageName) {
+    if (!manifest)
+        return false;
+    return PACKAGE_DEPENDENCY_FIELDS.some((field) => {
+        const deps = manifest[field];
+        if (!deps || typeof deps !== "object" || Array.isArray(deps))
+            return false;
+        return Object.prototype.hasOwnProperty.call(deps, packageName);
+    });
+}
+/**
+ * Which dependency gives this app a path to the serverless browser runtime, or
+ * null when it has none. Resolution cannot answer this: findInstalledPackageRoot
+ * falls back to an ancestor + .pnpm store walk, so in a workspace every app
+ * "resolves" the sibling package that actually declares Chromium and ships its
+ * ~80MB into every emitted function.
+ */
+export function findServerlessBrowserRuntimeConsumer(projectCwd = cwd) {
+    const manifest = readPackageManifest(projectCwd);
+    for (const packageName of [
+        ...SERVERLESS_BROWSER_RUNTIME_PACKAGES,
+        SERVERLESS_BROWSER_RUNTIME_CONSUMER,
+    ]) {
+        if (manifestDeclaresDependency(manifest, packageName))
+            return packageName;
+        const linked = path.join(projectCwd, "node_modules", ...packageName.split("/"));
+        if (fs.existsSync(linked))
+            return packageName;
+    }
+    return null;
+}
 function packageRootFromResolvedPath(packageName, resolvedPath) {
     let current = path.dirname(resolvedPath);
     while (true) {
@@ -2062,6 +2105,16 @@ export function copyInstalledBrowserRuntimePackages(serverDir, projectCwd = cwd)
     if (!serverDir || !fs.existsSync(serverDir))
         return 0;
     const nodeModulesRoots = nodeModulesAncestors(projectCwd);
+    const consumer = findServerlessBrowserRuntimeConsumer(projectCwd);
+    if (!consumer) {
+        const skippedBytes = SERVERLESS_BROWSER_RUNTIME_PACKAGES.reduce((total, packageName) => {
+            const packageDir = findInstalledPackageRoot(packageName, nodeModulesRoots);
+            return packageDir ? total + getDirSize(packageDir) : total;
+        }, 0);
+        console.log(`[deploy] Skipped the serverless browser runtime (${SERVERLESS_BROWSER_RUNTIME_PACKAGES.join(", ")}): this app depends on neither ${SERVERLESS_BROWSER_RUNTIME_CONSUMER} ` +
+            `nor a browser package. Kept ${(skippedBytes / 1024 / 1024).toFixed(1)}MB out of every emitted function.`);
+        return 0;
+    }
     const copiedPackages = new Set();
     let copiedCount = 0;
     for (const packageName of SERVERLESS_BROWSER_RUNTIME_PACKAGES) {
@@ -2070,9 +2123,15 @@ export function copyInstalledBrowserRuntimePackages(serverDir, projectCwd = cwd)
             continue;
         copiedCount += copyRuntimePackageTree(packageName, packageDir, serverDir, nodeModulesRoots, copiedPackages);
     }
-    if (copiedCount > 0) {
-        console.log(`[deploy] Copied ${copiedCount} serverless browser runtime package(s) into the server bundle.`);
+    if (copiedCount === 0) {
+        // Not the same as the skip above: the app asked for the browser runtime and
+        // the build could not find it, so anything that opens a browser will fail
+        // at runtime instead of at build time.
+        console.warn(`[deploy] ${consumer} needs the serverless browser runtime but none of ` +
+            `${SERVERLESS_BROWSER_RUNTIME_PACKAGES.join(", ")} is installed; the function ships without it.`);
+        return 0;
     }
+    console.log(`[deploy] Copied ${copiedCount} serverless browser runtime package(s) into the server bundle (required by ${consumer}).`);
     return copiedCount;
 }
 function findInstalledLibsqlNativePackage(nodeModulesRoots, packageName) {
@@ -2847,6 +2906,60 @@ export function bundleYjsRuntimeForServerlessOutput(serverDir, projectCwd) {
     });
     return bareImports;
 }
+// Netlify's hard limit is 250MB unzipped per function; a bundle this far under
+// it still leaves room for growth, and today's server functions land near 70MB
+// once the dead weight is out. Apps that legitimately ship the browser runtime
+// get its ~85MB on top, so the budget stays a regression signal rather than a
+// tax on Chromium-backed templates.
+const NETLIFY_FUNCTION_SIZE_BUDGET_BYTES = 120 * 1024 * 1024;
+const NETLIFY_BROWSER_RUNTIME_SIZE_ALLOWANCE_BYTES = 100 * 1024 * 1024;
+function reportNetlifyFunctionSizes(projectCwd, internalDir, failures) {
+    if (!fs.existsSync(internalDir))
+        return;
+    const functions = fs
+        .readdirSync(internalDir, { withFileTypes: true })
+        .filter((entry) => entry.isDirectory())
+        .map((entry) => ({
+        name: entry.name,
+        dir: path.join(internalDir, entry.name),
+        size: getDirSize(path.join(internalDir, entry.name)),
+    }))
+        .sort((a, b) => b.size - a.size);
+    if (functions.length === 0)
+        return;
+    const toMb = (bytes) => (bytes / 1024 / 1024).toFixed(1);
+    const total = functions.reduce((sum, fn) => sum + fn.size, 0);
+    // Every extra function is a full second copy of the bundle: the clone is
+    // hard-linked on disk, but zip-it-and-ship-it sees regular files and uploads
+    // each one whole, so the total is what the deploy actually pays.
+    console.log(`[deploy] Netlify functions: ${functions.length} (${functions
+        .map((fn) => `${fn.name} ${toMb(fn.size)}MB`)
+        .join(", ")}) — ${toMb(total)}MB uploaded in total.`);
+    const budget = NETLIFY_FUNCTION_SIZE_BUDGET_BYTES +
+        (findServerlessBrowserRuntimeConsumer(projectCwd)
+            ? NETLIFY_BROWSER_RUNTIME_SIZE_ALLOWANCE_BYTES
+            : 0);
+    for (const fn of functions) {
+        if (fn.size <= budget)
+            continue;
+        // node_modules is always the biggest child and names nothing useful; the
+        // packages inside it are what a regression actually adds.
+        const nodeModulesDir = path.join(fn.dir, "node_modules");
+        const inspectDir = fs.existsSync(nodeModulesDir) ? nodeModulesDir : fn.dir;
+        const largest = fs
+            .readdirSync(inspectDir, { withFileTypes: true })
+            .filter((entry) => entry.isDirectory())
+            .map((entry) => ({
+            name: entry.name,
+            size: getDirSize(path.join(inspectDir, entry.name)),
+        }))
+            .sort((a, b) => b.size - a.size)
+            .slice(0, 3)
+            .map((child) => `${child.name} ${toMb(child.size)}MB`)
+            .join(", ");
+        failures.push(`function ${fn.name} is ${toMb(fn.size)}MB, over the ${toMb(budget)}MB budget — largest: ${largest}`);
+    }
+}
 export function assertSingleTemplateNetlifyBuildOutput(projectCwd) {
     const failures = [];
     const publishDir = path.join(projectCwd, "dist");
@@ -2988,9 +3101,10 @@ export function assertSingleTemplateNetlifyBuildOutput(projectCwd) {
             }
         }
     }
+    reportNetlifyFunctionSizes(projectCwd, internalDir, failures);
     if (failures.length > 0) {
         throw new Error("[deploy] Netlify deploy guard failed; refusing to publish an output " +
-            "that would likely serve Netlify 404s:\n" +
+            "that would likely serve Netlify 404s or blow the function size limit:\n" +
             failures.map((failure) => `- ${failure}`).join("\n"));
     }
     console.log("[deploy] Netlify deploy guard passed: publish dir and catch-all server function are present.");
@@ -3111,13 +3225,7 @@ export function sanitizeServerlessFunctionPackageManifest(functionDir) {
         return;
     }
     let removed = 0;
-    const depFields = [
-        "dependencies",
-        "optionalDependencies",
-        "devDependencies",
-        "peerDependencies",
-    ];
-    for (const field of depFields) {
+    for (const field of PACKAGE_DEPENDENCY_FIELDS) {
         const deps = packageJson[field];
         if (!deps || typeof deps !== "object" || Array.isArray(deps))
             continue;
@@ -3145,6 +3253,70 @@ export function sanitizeServerlessFunctionPackageManifest(functionDir) {
         console.log(`[deploy] Removed ${removed} desktop-only package reference(s) from ${path.relative(cwd, functionDir)}.`);
     }
 }
+/**
+ * Nitro's dependency tracer is not subject to the copy-time filters above, so
+ * it ships every prebuild of a multi-platform native package plus whatever the
+ * local dev server left in `data/`. Prune both from the function dir before it
+ * is cloned for the extra functions, since each clone is zipped and uploaded in
+ * full.
+ *
+ * Only prunes inside a directory that still holds a runnable prebuild under the
+ * `isServerlessNativePlatformPackage` naming (`@libsql`, `@resvg`). Packages
+ * that name prebuilds differently — `@img/sharp-linux-x64` has no gnu/musl
+ * suffix — read as entirely dead and must be left alone.
+ */
+export function pruneServerlessFunctionDeadWeight(functionDir) {
+    if (!functionDir || !fs.existsSync(functionDir))
+        return 0;
+    let removedBytes = 0;
+    const removedNames = [];
+    const nodeModulesDir = path.join(functionDir, "node_modules");
+    const packageDirs = [];
+    if (fs.existsSync(nodeModulesDir)) {
+        packageDirs.push(nodeModulesDir);
+        for (const entry of fs.readdirSync(nodeModulesDir, {
+            withFileTypes: true,
+        })) {
+            if (entry.isDirectory() && entry.name.startsWith("@")) {
+                packageDirs.push(path.join(nodeModulesDir, entry.name));
+            }
+        }
+    }
+    for (const packageDir of packageDirs) {
+        const prebuilds = fs
+            .readdirSync(packageDir, { withFileTypes: true })
+            .filter((entry) => entry.isDirectory() &&
+            SERVERLESS_PLATFORM_PACKAGE_NAME.test(entry.name))
+            .map((entry) => entry.name);
+        const runnable = prebuilds.filter(isServerlessNativePlatformPackage);
+        if (runnable.length === 0)
+            continue;
+        for (const name of prebuilds) {
+            if (isServerlessNativePlatformPackage(name))
+                continue;
+            const deadDir = path.join(packageDir, name);
+            removedBytes += getDirSize(deadDir);
+            removedNames.push(path.relative(functionDir, deadDir));
+            fs.rmSync(deadDir, { recursive: true, force: true });
+        }
+        const survivors = runnable.filter((name) => fs.existsSync(path.join(packageDir, name)));
+        if (survivors.length === 0) {
+            throw new Error(`[deploy] Pruning dead-platform prebuilds from ${path.relative(cwd, packageDir)} removed every runnable Linux prebuild (had: ${runnable.join(", ")}).`);
+        }
+    }
+    const dataDir = path.join(functionDir, "data");
+    if (fs.existsSync(dataDir)) {
+        removedBytes += getDirSize(dataDir);
+        removedNames.push("data");
+        fs.rmSync(dataDir, { recursive: true, force: true });
+    }
+    if (removedNames.length > 0) {
+        console.log(`[deploy] Pruned ${removedNames.length} unrunnable path(s) (${(removedBytes /
+            1024 /
+            1024).toFixed(1)}MB) from ${path.relative(cwd, functionDir)}: ${removedNames.join(", ")}.`);
+    }
+    return removedBytes;
+}
 /**
  * Create stub directories for dangling platform-specific optional dependency
  * symlinks in the pnpm store.
@@ -3612,6 +3784,9 @@ export default bundle;
         copyInstalledFfmpegStaticPackage(nitro.options.output.serverDir);
         copyInstalledBrowserRuntimePackages(nitro.options.output.serverDir);
         sanitizeServerlessFunctionPackageManifest(nitro.options.output.serverDir);
+        // Before the Netlify block below clones this dir into the extra functions,
+        // so they inherit the pruned bundle instead of a second full copy.
+        pruneServerlessFunctionDeadWeight(nitro.options.output.serverDir);
         bundleYjsRuntimeForServerlessOutput(nitro.options.output.serverDir, cwd);
     }
     if (isCloudflareModulePreset(preset)) {

package/dist/jobs/background-automation-runner.d.ts

@@ -12,7 +12,7 @@ export interface BackgroundAutomationContext {
     resource: Resource;
 }
 export interface BackgroundAutomationDeps {
-    getActions: (automation?: BackgroundAutomationContext) => Record<string, ActionEntry>;
+    getActions: (automation?: BackgroundAutomationContext) => Record<string, ActionEntry> | Promise<Record<string, ActionEntry>>;
     getSystemPrompt: (owner: string) => Promise<string>;
     getInitialToolNames?: (automation?: BackgroundAutomationContext) => string[] | undefined;
     engine?: AgentEngine;

package/dist/jobs/background-automation-runner.js

@@ -221,7 +221,7 @@ async function executeBackgroundAutomation(options, deps, historyId) {
         userEmail: ownerEmail,
         orgId,
     }, async () => {
-        const baseActions = deps.getActions(automation);
+        const baseActions = await deps.getActions(automation);
         assertRequestedMcpToolsAvailable(automation, baseActions);
         const configuredInitialTools = deps.getInitialToolNames?.(automation);
         const initialToolNames = configuredInitialTools

package/dist/jobs/scheduler-health.d.ts

@@ -1,3 +1,7 @@
+import { type MigrationEntry } from "../db/migrations.js";
+/** Authoritative release-time schema for recurring scheduler health. */
+export declare const AUTOMATION_SCHEDULER_HEALTH_MIGRATIONS: MigrationEntry[];
+export declare function runAutomationSchedulerHealthMigrations(nitroApp: unknown): Promise<void>;
 export interface AutomationSchedulerHealth {
     appId: string;
     orgId: string | null;

package/dist/jobs/scheduler-health.js

@@ -1,8 +1,41 @@
 import { getDbExec, intType, isPostgres } from "../db/client.js";
 import { ensureColumnExists, ensureIndexExists, ensureTableExists, } from "../db/ddl-guard.js";
+import { runMigrations } from "../db/migrations.js";
 const TABLE = "automation_scheduler_health";
 const DEFAULT_APP_ID = "default";
 const MAX_ERROR_LENGTH = 500;
+/** Authoritative release-time schema for recurring scheduler health. */
+export const AUTOMATION_SCHEDULER_HEALTH_MIGRATIONS = [
+    {
+        version: 1,
+        name: "automation-scheduler-health-table",
+        sql: `
+      CREATE TABLE IF NOT EXISTS ${TABLE} (
+        id TEXT PRIMARY KEY,
+        app_id TEXT NOT NULL DEFAULT 'default',
+        org_id TEXT,
+        last_checked_at INTEGER,
+        last_dispatched_at INTEGER,
+        last_error TEXT,
+        runtime TEXT,
+        updated_at INTEGER NOT NULL DEFAULT 0
+      );
+      ALTER TABLE ${TABLE} ADD COLUMN IF NOT EXISTS app_id TEXT NOT NULL DEFAULT 'default';
+      ALTER TABLE ${TABLE} ADD COLUMN IF NOT EXISTS org_id TEXT;
+      ALTER TABLE ${TABLE} ADD COLUMN IF NOT EXISTS last_checked_at INTEGER;
+      ALTER TABLE ${TABLE} ADD COLUMN IF NOT EXISTS last_dispatched_at INTEGER;
+      ALTER TABLE ${TABLE} ADD COLUMN IF NOT EXISTS last_error TEXT;
+      ALTER TABLE ${TABLE} ADD COLUMN IF NOT EXISTS runtime TEXT;
+      ALTER TABLE ${TABLE} ADD COLUMN IF NOT EXISTS updated_at INTEGER NOT NULL DEFAULT 0;
+      CREATE INDEX IF NOT EXISTS idx_${TABLE}_updated ON ${TABLE} (updated_at)
+    `,
+    },
+];
+export async function runAutomationSchedulerHealthMigrations(nitroApp) {
+    await runMigrations(AUTOMATION_SCHEDULER_HEALTH_MIGRATIONS, {
+        table: "_automation_scheduler_health_migrations",
+    })(nitroApp);
+}
 function normalizeAppId(appId) {
     const normalized = appId?.trim();
     return normalized || DEFAULT_APP_ID;

package/dist/localization/server.d.ts

@@ -16,7 +16,6 @@ export interface ResolveLocaleFromRequestOptions {
 export interface LocaleInitScriptOptions {
     locale?: LocaleCode;
     preference?: LocalizationPreference | LocalePreference;
-    messages?: Record<string, unknown> | null;
 }
 export declare function parseAcceptLanguage(header: string | null | undefined): string[];
 export declare function resolveLocaleFromRequest(options?: ResolveLocaleFromRequestOptions): ResolvedRequestLocale;

package/dist/localization/server.js

@@ -58,11 +58,13 @@ export function getLocaleInitScript(options = {}) {
     const safeLocale = normalizeLocaleCode(options.locale) ?? DEFAULT_LOCALE;
     const shouldStorePreference = options.preference !== undefined;
     const safePreference = normalizeLocalizationPreference(options.preference ?? { locale: "system" });
+    // Translations are deliberately absent here: this script is render-blocking in
+    // <head>, and the provider already receives the same catalog through loader
+    // data as `initialMessages`. Adding them back doubles every localized payload.
     const payload = {
         locale: safeLocale,
         preference: safePreference,
         dir: localeDirection(safeLocale),
-        messages: options.messages ?? undefined,
     };
     return `(function(){try{var supported=${JSON.stringify(SUPPORTED_LOCALES)};var payload=${JSON.stringify(payload)};var shouldStorePreference=${JSON.stringify(shouldStorePreference)};function valid(x){return supported.indexOf(x)>=0}function canon(x){if(typeof x!=='string'||!x)return null;try{var c=Intl.getCanonicalLocales(x)[0];if(valid(c))return c;var lang=c&&c.split('-')[0].toLowerCase();for(var i=0;i<supported.length;i++){if(supported[i].split('-')[0].toLowerCase()===lang)return supported[i]}}catch(e){}return null}function storageGet(k){try{return window.localStorage.getItem(k)}catch(e){return null}}function storageSet(k,v){try{window.localStorage.setItem(k,v)}catch(e){}}var stored=storageGet(${JSON.stringify(LOCALE_STORAGE_KEY)});var pref=payload.preference&&payload.preference.locale;var locale=payload.locale;if(!valid(locale)){locale=null}if(!locale&&stored&&stored!=='system'){locale=canon(stored)}if(!locale&&pref&&pref!=='system'){locale=canon(pref)}if(!locale){var langs=navigator.languages&&navigator.languages.length?navigator.languages:[navigator.language];for(var j=0;j<langs.length&&!locale;j++){locale=canon(langs[j])}}if(!locale)locale=${JSON.stringify(DEFAULT_LOCALE)};var root=document.documentElement;root.setAttribute('lang',locale);root.setAttribute('dir',locale==='ar-SA'?'rtl':'ltr');root.setAttribute('data-locale',locale);payload.locale=locale;payload.dir=locale==='ar-SA'?'rtl':'ltr';window[${JSON.stringify(LOCALE_HYDRATION_GLOBAL)}]=payload;if(shouldStorePreference&&pref){storageSet(${JSON.stringify(LOCALE_STORAGE_KEY)},pref)}}catch(e){}})();`;
 }

package/dist/mcp-client/index.d.ts

@@ -10,7 +10,7 @@ export { listRemoteServers, addRemoteServer, addOAuthRemoteServer, addFirstParty
 export { finishMcpOAuthAuthorization, getMcpOAuthAccessToken, readMcpOAuthCredentials, saveMcpOAuthCredentials, startMcpOAuthAuthorization, type McpOAuthCallbackResult, type McpOAuthCredentialBundle, type McpOAuthDiscoveryState, type McpOAuthProviderOptions, type McpOAuthStartResult, } from "./oauth-client.js";
 export { areBuiltinMcpCapabilitiesSupported, BUILTIN_MCP_CAPABILITIES, getBuiltinMcpCapability, isBuiltinMcpCapabilityAvailable, listSupportedBuiltinMcpCapabilities, normalizeBuiltinMcpCapabilityIds, toBuiltinMcpServerConfig, type BuiltinMcpCapability, type BuiltinMcpCapabilityId, } from "./builtin-capabilities.js";
 export { builtinMcpCapabilitiesSettingsKey, listEnabledBuiltinMcpCapabilities, setEnabledBuiltinMcpCapabilities, setBuiltinMcpCapabilityEnabled, type StoredBuiltinMcpCapabilities, } from "./builtin-store.js";
-export { mountMcpServersRoutes, buildMergedConfig, builtinMergedConfigKey, startMcpConfigRefresh, type ClientBuiltinCapability, } from "./routes.js";
+export { mountMcpServersRoutes, buildMergedConfig, builtinMergedConfigKey, startMcpConfigRefresh, McpConfigUnreadableError, type ClientBuiltinCapability, } from "./routes.js";
 export { mountMcpHubRoutes, listHubServers, getHubStatus, isHubServeEnabled, isHubConsumeEnabled, type HubServerRecord, type HubServersResponse, } from "./hub-routes.js";
 export { fetchHubServers } from "./hub-client.js";
 export { isMcpToolAllowedForRequest } from "./visibility.js";

package/dist/mcp-client/index.js

@@ -10,7 +10,7 @@ export { listRemoteServers, addRemoteServer, addOAuthRemoteServer, addFirstParty
 export { finishMcpOAuthAuthorization, getMcpOAuthAccessToken, readMcpOAuthCredentials, saveMcpOAuthCredentials, startMcpOAuthAuthorization, } from "./oauth-client.js";
 export { areBuiltinMcpCapabilitiesSupported, BUILTIN_MCP_CAPABILITIES, getBuiltinMcpCapability, isBuiltinMcpCapabilityAvailable, listSupportedBuiltinMcpCapabilities, normalizeBuiltinMcpCapabilityIds, toBuiltinMcpServerConfig, } from "./builtin-capabilities.js";
 export { builtinMcpCapabilitiesSettingsKey, listEnabledBuiltinMcpCapabilities, setEnabledBuiltinMcpCapabilities, setBuiltinMcpCapabilityEnabled, } from "./builtin-store.js";
-export { mountMcpServersRoutes, buildMergedConfig, builtinMergedConfigKey, startMcpConfigRefresh, } from "./routes.js";
+export { mountMcpServersRoutes, buildMergedConfig, builtinMergedConfigKey, startMcpConfigRefresh, McpConfigUnreadableError, } from "./routes.js";
 export { mountMcpHubRoutes, listHubServers, getHubStatus, isHubServeEnabled, isHubConsumeEnabled, } from "./hub-routes.js";
 export { fetchHubServers } from "./hub-client.js";
 export { isMcpToolAllowedForRequest } from "./visibility.js";

package/dist/mcp-client/routes.d.ts

@@ -22,6 +22,17 @@ import type { McpConfig } from "./config.js";
 import { type McpClientManager } from "./manager.js";
 import { type RemoteMcpScope } from "./remote-store.js";
 export { formatMcpConnectError } from "./errors.js";
+/**
+ * The settings table backing remote/built-in MCP servers could not be read.
+ *
+ * Distinct from `buildMergedConfig()` returning `null`, which means the app is
+ * genuinely configured with zero MCP servers. Coercing an unreachable database
+ * into an empty settings map made every caller report "no MCP servers
+ * configured" while the real answer was "could not read the configuration".
+ */
+export declare class McpConfigUnreadableError extends Error {
+    constructor(cause: unknown);
+}
 export interface ClientServer {
     id: string;
     scope: RemoteMcpScope;

package/dist/mcp-client/routes.js

@@ -24,6 +24,7 @@ import { getSession } from "../server/auth.js";
 import { getH3App } from "../server/framework-request-handler.js";
 import { readBody } from "../server/h3-helpers.js";
 import { runWithRequestContext } from "../server/request-context.js";
+import { shouldDisableInProcessSweeps } from "../server/sweep-runtime.js";
 import { getAllSettings, getSettingsEmitter } from "../settings/store.js";
 import { areBuiltinMcpCapabilitiesSupported, BUILTIN_MCP_CAPABILITIES, getBuiltinMcpCapability, isBuiltinMcpCapabilityAvailable, listSupportedBuiltinMcpCapabilities, normalizeBuiltinMcpCapabilityIds, toBuiltinMcpServerConfig, } from "./builtin-capabilities.js";
 import { builtinMcpCapabilitiesSettingsKey, listEnabledBuiltinMcpCapabilities, setBuiltinMcpCapabilityEnabled, setEnabledBuiltinMcpCapabilities, } from "./builtin-store.js";
@@ -36,6 +37,21 @@ import { addRemoteServer, listRemoteServers, mergedConfigKey, removeRemoteServer
 import { isMcpToolAllowedForRequest } from "./visibility.js";
 import { loadWorkspaceMcpServers } from "./workspace-servers.js";
 export { formatMcpConnectError } from "./errors.js";
+/**
+ * The settings table backing remote/built-in MCP servers could not be read.
+ *
+ * Distinct from `buildMergedConfig()` returning `null`, which means the app is
+ * genuinely configured with zero MCP servers. Coercing an unreachable database
+ * into an empty settings map made every caller report "no MCP servers
+ * configured" while the real answer was "could not read the configuration".
+ */
+export class McpConfigUnreadableError extends Error {
+    constructor(cause) {
+        super(`Could not read MCP configuration from settings: ${cause?.message ?? cause}`);
+        this.name = "McpConfigUnreadableError";
+        this.cause = cause;
+    }
+}
 /** Redact obvious auth header values before sending to the client. */
 function redactHeaders(headers) {
     if (!headers)
@@ -114,7 +130,10 @@ export function builtinMergedConfigKey(scope, capability, ownerId) {
 export async function buildMergedConfig() {
     const base = loadMcpConfig() ?? autoDetectMcpConfig();
     const servers = { ...(base?.servers ?? {}) };
-    const all = await getAllSettings().catch(() => ({}));
+    const all = await getAllSettings().catch((err) => {
+        console.warn(`[mcp-client] settings read failed: ${err?.message ?? err}`);
+        throw new McpConfigUnreadableError(err);
+    });
     for (const [fullKey, value] of Object.entries(all)) {
         const userMatch = /^u:([^:]+):mcp-servers-remote$/.exec(fullKey);
         const orgMatch = /^o:([^:]+):mcp-servers-remote$/.exec(fullKey);
@@ -222,6 +241,12 @@ export function startMcpConfigRefresh(manager) {
     const intervalMs = mcpConfigRefreshIntervalMs();
     if (intervalMs <= 0 || typeof setInterval !== "function")
         return null;
+    // Billed per warm container on serverless, and the first tick always runs a
+    // full settings scan because `settingsDirty` starts true. Request-driven
+    // reconfigures (`waitUntilReady` on the MCP routes, `refreshGlobalMcpManager`)
+    // already cover config changes there, and a fresh container re-reads config.
+    if (shouldDisableInProcessSweeps())
+        return null;
     let currentSignature = sortedConfigSignature(manager.getConfig());
     let refreshing = false;
     // `buildMergedConfig` reads the entire settings table just to diff a

package/dist/navigation/index.d.ts

@@ -38,6 +38,7 @@ export interface StandardOpenPathResolverOptions {
     fallback?: StandardOpenPathRoute;
 }
 export declare function buildSettingsRoute(tab?: StandardSettingsTabId | string | null, basePath?: "/settings"): string;
+export declare function buildLegacyAgentSettingsRoute(hash?: string | null, search?: string): string;
 export declare function buildTeamRoute(options?: Pick<BuildStandardAppRouteOptions, "teamInSettings">): string;
 export declare function buildStandardAppRoute(route: StandardAppRouteId, options?: BuildStandardAppRouteOptions): string;
 export declare function buildResourceRoute(collection: string, resourceId: string, options?: BuildResourceRouteOptions): string;

package/dist/navigation/index.js

@@ -15,6 +15,21 @@ export const STANDARD_SETTINGS_TABS = {
     language: "language",
     whatsNew: "whats-new",
 };
+const LEGACY_AGENT_RESOURCE_TABS = new Set([
+    "files",
+    "instructions",
+    "agents",
+    "memory",
+    "skills",
+    "learnings",
+]);
+const LEGACY_AGENT_SETTINGS_TABS = new Set([
+    "llm",
+    "app-models",
+    "limits",
+    "voice",
+    "background",
+]);
 function normalizeLeadingPath(path) {
     const trimmed = path.trim();
     if (!trimmed || trimmed === "/")
@@ -56,6 +71,25 @@ export function buildSettingsRoute(tab, basePath = STANDARD_APP_ROUTES.settings)
         .filter(Boolean);
     return `${path}/${segments.join("/")}`;
 }
+export function buildLegacyAgentSettingsRoute(hash, search = "") {
+    const legacyTab = hash?.replace(/^#/, "").toLowerCase() ?? "";
+    const destination = LEGACY_AGENT_RESOURCE_TABS.has(legacyTab)
+        ? buildSettingsRoute(`agent:resources:${legacyTab}`)
+        : legacyTab === "remote-agents"
+            ? buildSettingsRoute("agent:agents")
+            : legacyTab === "connections"
+                ? buildSettingsRoute("connections")
+                : legacyTab === "jobs"
+                    ? buildSettingsRoute("agent:automations")
+                    : legacyTab === "library"
+                        ? buildSettingsRoute("library")
+                        : legacyTab === "access"
+                            ? buildSettingsRoute("agent")
+                            : LEGACY_AGENT_SETTINGS_TABS.has(legacyTab)
+                                ? buildSettingsRoute(`agent:${legacyTab}`)
+                                : buildSettingsRoute("agent");
+    return `${destination}${search}`;
+}
 export function buildTeamRoute(options = {}) {
     return options.teamInSettings
         ? buildSettingsRoute(STANDARD_SETTINGS_TABS.team)

package/dist/notifications/routes.d.ts

@@ -13,13 +13,13 @@
 export declare function createNotificationsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<"" | import("./types.js").Notification[] | {
     count: number;
     updated?: undefined;
-    ok?: undefined;
     error?: undefined;
+    ok?: undefined;
 } | {
     count?: undefined;
     updated: number;
-    ok?: undefined;
     error?: undefined;
+    ok?: undefined;
 } | {
     count?: undefined;
     updated?: undefined;

package/dist/observability/routes.d.ts

@@ -41,16 +41,16 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
-    error?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
+    error?: undefined;
     ok?: undefined;
 } | {
-    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id: string;
+    error?: undefined;
     ok?: undefined;
 } | {
     summary?: undefined;
@@ -59,9 +59,9 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     error: any;
     ok?: undefined;
 } | {
-    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -75,8 +75,8 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         user: "user";
     }>>;
 }, z.core.$strip>>, {
-    id?: undefined;
     deleted?: undefined;
+    id?: undefined;
     providers: {
         id: string;
         label: string;
@@ -93,10 +93,10 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     label?: undefined;
     message?: undefined;
 } | {
-    id?: undefined;
     deleted?: undefined;
-    providers?: undefined;
     count?: undefined;
+    id?: undefined;
+    providers?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
     registered?: undefined;
@@ -104,8 +104,8 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     message?: undefined;
 } | {
     deleted?: undefined;
-    providers?: undefined;
     count?: undefined;
+    providers?: undefined;
     provider?: undefined;
     found: boolean;
     id: string;
@@ -113,8 +113,8 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     label?: undefined;
     message?: undefined;
 } | {
-    providers?: undefined;
     count?: undefined;
+    providers?: undefined;
     provider?: undefined;
     found?: undefined;
     deleted: boolean;
@@ -124,8 +124,8 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     message?: undefined;
 } | {
     deleted?: undefined;
-    providers?: undefined;
     count?: undefined;
+    providers?: undefined;
     provider?: undefined;
     found?: undefined;
     registered: boolean;

package/dist/provider-api/actions/provider-api.d.ts

@@ -311,10 +311,10 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         notes?: string | undefined;
         scope?: "org" | "user" | undefined;
     }, {
+        message?: undefined;
         id?: undefined;
         provider?: undefined;
         deleted?: undefined;
-        message?: undefined;
         providers: {
             id: string;
             label: string;
@@ -329,29 +329,29 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         registered?: undefined;
         label?: undefined;
     } | {
-        id?: undefined;
+        message?: undefined;
         count?: undefined;
+        id?: undefined;
         deleted?: undefined;
-        message?: undefined;
         providers?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
         registered?: undefined;
         label?: undefined;
     } | {
+        message?: undefined;
         count?: undefined;
         provider?: undefined;
         deleted?: undefined;
-        message?: undefined;
         providers?: undefined;
         found: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
     } | {
+        message?: undefined;
         count?: undefined;
         provider?: undefined;
-        message?: undefined;
         providers?: undefined;
         found?: undefined;
         deleted: boolean;