@agent-native/core 0.161.23 → 0.162.0

package/dist/collab/awareness.d.ts

@@ -62,11 +62,11 @@ export declare const postAwareness: import("h3").EventHandlerWithFetch<import("h
     error: string;
     states?: undefined;
 } | {
+    error?: undefined;
     states: {
         clientId: number;
         state: string;
     }[];
-    error?: undefined;
 }>>;
 /**
  * GET /_agent-native/collab/:docId/users
@@ -77,9 +77,9 @@ export declare const getActiveUsers: import("h3").EventHandlerWithFetch<import("
     error: string;
     users?: undefined;
 } | {
+    error?: undefined;
     users: {
         clientId: number;
         lastSeen: number;
     }[];
-    error?: undefined;
 }>>;

package/dist/collab/struct-routes.d.ts

@@ -13,8 +13,8 @@
  * Body: { json: any, fieldName?: string, type?: "map"|"array", requestSource?: string }
  */
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/config.d.ts

@@ -38,6 +38,11 @@ export interface AgentNativeRuntimeConfig {
     database?: AgentNativeRuntimeDatabaseConfig;
     environment?: AgentNativeRuntimeEnvironmentConfig;
 }
+export type AgentNativeDeploymentEnvironment = "local" | "beta" | "production" | "preview";
+export interface AgentNativeDeploymentConfig {
+    /** The release lane that produced the currently running client bundle. */
+    environment?: AgentNativeDeploymentEnvironment;
+}
 export interface AgentNativeDiagnosticsConfig {
     /** Fail a production Vite build when runtime configuration has issues. */
     failOnBuild?: boolean;
@@ -73,6 +78,7 @@ export interface AgentNativeConfig {
     version?: typeof AGENT_NATIVE_CONFIG_VERSION;
     onboarding?: AgentNativeOnboardingConfig;
     runtime?: AgentNativeRuntimeConfig;
+    deployment?: AgentNativeDeploymentConfig;
     diagnostics?: AgentNativeDiagnosticsConfig;
     instructions?: AgentNativeInstructionsConfig;
     translations?: AgentNativeTranslationsConfig;
@@ -99,3 +105,12 @@ export declare function normalizeAgentNativeConfig(input: unknown, source?: stri
 export declare function mergeAgentNativeConfigs(base: AgentNativeConfig, override: AgentNativeConfig): AgentNativeConfig;
 export declare function resolveAgentNativeConfig(input: AgentNativeConfigInput | undefined, context: AgentNativeConfigContext): AgentNativeConfig;
 export declare function resolveFirstRunOnboardingMode(setting: AgentNativeFirstRunOnboardingSetting, context: AgentNativeConfigContext): AgentNativeFirstRunOnboardingMode;
+export declare function isAgentNativeDeploymentEnvironment(value: unknown): value is AgentNativeDeploymentEnvironment;
+/**
+ * Resolve the public deployment lane from hosting facts at build time.
+ *
+ * Netlify exposes `CONTEXT` and `BRANCH` to builds. Keeping this inference in
+ * the Vite/config boundary means browser code consumes typed public config and
+ * never parses process.env itself.
+ */
+export declare function inferAgentNativeDeploymentEnvironment(env: Record<string, string | undefined>, mode?: string): AgentNativeDeploymentEnvironment | undefined;

package/dist/config.js

@@ -26,6 +26,7 @@ export function normalizeAgentNativeConfig(input, source = "agent-native config"
     }
     const onboardingValue = input.onboarding;
     const runtimeValue = input.runtime;
+    const deploymentValue = input.deployment;
     const diagnosticsValue = input.diagnostics;
     const instructionsValue = input.instructions;
     const translationsValue = input.translations;
@@ -46,6 +47,9 @@ export function normalizeAgentNativeConfig(input, source = "agent-native config"
     if (runtimeValue !== undefined) {
         normalized.runtime = normalizeRuntimeConfig(runtimeValue, `${source}.runtime`);
     }
+    if (deploymentValue !== undefined) {
+        normalized.deployment = normalizeDeploymentConfig(deploymentValue, `${source}.deployment`);
+    }
     if (diagnosticsValue !== undefined) {
         normalized.diagnostics = normalizeDiagnosticsConfig(diagnosticsValue, `${source}.diagnostics`);
     }
@@ -101,6 +105,12 @@ export function mergeAgentNativeConfigs(base, override) {
                     : undefined,
             }
             : undefined,
+        deployment: base.deployment || override.deployment
+            ? {
+                ...base.deployment,
+                ...override.deployment,
+            }
+            : undefined,
         diagnostics: base.diagnostics || override.diagnostics
             ? {
                 ...base.diagnostics,
@@ -205,6 +215,18 @@ function normalizeRuntimeConfig(value, source) {
     }
     return result;
 }
+function normalizeDeploymentConfig(value, source) {
+    if (!isRecord(value)) {
+        throw new Error(`${source} must be an object`);
+    }
+    const environment = value.environment;
+    if (environment === undefined)
+        return {};
+    if (!isAgentNativeDeploymentEnvironment(environment)) {
+        throw new Error(`${source}.environment must be "local", "beta", "production", or "preview"`);
+    }
+    return { environment };
+}
 function normalizeDiagnosticsConfig(value, source) {
     if (!isRecord(value)) {
         throw new Error(`${source} must be an object`);
@@ -338,6 +360,37 @@ function isAgentNativeHarnessRuntime(value) {
         value === "pi" ||
         value === "opencode");
 }
+export function isAgentNativeDeploymentEnvironment(value) {
+    return (value === "local" ||
+        value === "beta" ||
+        value === "production" ||
+        value === "preview");
+}
+/**
+ * Resolve the public deployment lane from hosting facts at build time.
+ *
+ * Netlify exposes `CONTEXT` and `BRANCH` to builds. Keeping this inference in
+ * the Vite/config boundary means browser code consumes typed public config and
+ * never parses process.env itself.
+ */
+export function inferAgentNativeDeploymentEnvironment(env, mode) {
+    const context = env.CONTEXT?.trim().toLowerCase();
+    const branch = env.BRANCH?.trim().toLowerCase();
+    if (branch === "production" || context === "production") {
+        return "production";
+    }
+    if (branch === "beta" || (context === "branch-deploy" && branch === "main")) {
+        return "beta";
+    }
+    if (context === "deploy-preview" ||
+        context === "branch-deploy" ||
+        branch?.startsWith("deploy-preview")) {
+        return "preview";
+    }
+    if (mode === "development")
+        return "local";
+    return undefined;
+}
 function isRecord(value) {
     return !!value && typeof value === "object" && !Array.isArray(value);
 }

package/dist/extensions/fetch-tool.js

@@ -306,7 +306,7 @@ export function createFetchToolEntry(opts = {}) {
                     // saveToFile: write full body to workspace and return compact summary.
                     if (saveToFilePath) {
                         try {
-                            const { writeWorkspaceFile, SAVE_TO_FILE_MAX_BYTES } = await import("../workspace-files/store.js");
+                            const { writeWorkspaceFile, SAVE_TO_FILE_MAX_BYTES, isScratchWorkspacePath, toWorkspaceFileCard, } = await import("../workspace-files/store.js");
                             const { getRequestOrgId, getRequestUserEmail } = await import("../server/request-context.js");
                             const orgId = getRequestOrgId();
                             const email = getRequestUserEmail();
@@ -317,7 +317,7 @@ export function createFetchToolEntry(opts = {}) {
                                     : null;
                             if (!scope)
                                 throw new Error("No authenticated context for saveToFile");
-                            await writeWorkspaceFile(scope, saveToFilePath, body, contentType, {
+                            const meta = await writeWorkspaceFile(scope, saveToFilePath, body, contentType, {
                                 maxFileBytes: SAVE_TO_FILE_MAX_BYTES,
                             });
                             const bytes = Buffer.byteLength(body, "utf8");
@@ -330,6 +330,12 @@ export function createFetchToolEntry(opts = {}) {
                                 contentType,
                                 responseMode: processedMode,
                                 preview: preview.length < displayBody.length ? `${preview}…` : preview,
+                                // A durable (non-scratch) file renders a download card the
+                                // moment it's created — no separate show-workspace-file call
+                                // needed to get a link.
+                                ...(isScratchWorkspacePath(saveToFilePath)
+                                    ? {}
+                                    : { file: toWorkspaceFileCard(meta) }),
                             });
                         }
                         catch (saveErr) {

package/dist/mcp/embed-app.js

@@ -735,7 +735,7 @@ export function embedApp(options = {}) {
 
     function stripDevOnlyModuleImports(code) {
       return String(code).replace(
-        /\\bimport\\s+(?:[^"']+\\s+from\\s+)?["'][^"']*(?:virtual:react-router\\/inject-hmr-runtime|__x00__virtual:react-router\\/inject-hmr-runtime)[^"']*["']\\s*;?/g,
+        /\\bimport\\s+(?:[^"']+\\s+from\\s+)?["'][^"']*(?:virtual:react-router\\/(?:inject-)?hmr-runtime|__x00__virtual:react-router\\/(?:inject-)?hmr-runtime)[^"']*["']\\s*;?/g,
         ""
       );
     }

package/dist/notifications/routes.d.ts

@@ -28,6 +28,6 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
 } | {
     count?: undefined;
     updated?: undefined;
-    ok: boolean;
     error?: undefined;
+    ok: boolean;
 }>>;

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -75,10 +75,10 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         user: "user";
     }>>;
 }, z.core.$strip>>, {
-    message?: undefined;
     id?: undefined;
+    provider?: undefined;
     deleted?: undefined;
-    found?: undefined;
+    message?: undefined;
     providers: {
         id: string;
         label: string;
@@ -89,45 +89,45 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         updatedAt: number;
     }[];
     count: number;
-    provider?: undefined;
+    found?: undefined;
     registered?: undefined;
     label?: undefined;
 } | {
-    message?: undefined;
-    count?: undefined;
     id?: undefined;
     deleted?: undefined;
+    message?: undefined;
     providers?: undefined;
+    count?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
     registered?: undefined;
     label?: undefined;
 } | {
-    message?: undefined;
-    count?: undefined;
+    provider?: undefined;
     deleted?: undefined;
+    message?: undefined;
     providers?: undefined;
-    provider?: undefined;
+    count?: undefined;
     found: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
 } | {
+    provider?: undefined;
     message?: undefined;
+    providers?: undefined;
     count?: undefined;
     found?: undefined;
-    providers?: undefined;
-    provider?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
 } | {
-    count?: undefined;
+    provider?: undefined;
     deleted?: undefined;
-    found?: undefined;
     providers?: undefined;
-    provider?: undefined;
+    count?: undefined;
+    found?: undefined;
     registered: boolean;
     id: string;
     label: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -312,9 +312,6 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         scope?: "org" | "user" | undefined;
     }, {
         id?: undefined;
-        deleted?: undefined;
-        provider?: undefined;
-        found?: undefined;
         providers: {
             id: string;
             label: string;
@@ -325,45 +322,48 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
             updatedAt: number;
         }[];
         count: number;
+        provider?: undefined;
+        found?: undefined;
+        deleted?: undefined;
         registered?: undefined;
         label?: undefined;
         message?: undefined;
     } | {
         id?: undefined;
-        deleted?: undefined;
         providers?: undefined;
         count?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
+        deleted?: undefined;
         registered?: undefined;
         label?: undefined;
         message?: undefined;
     } | {
-        deleted?: undefined;
-        provider?: undefined;
         providers?: undefined;
         count?: undefined;
+        provider?: undefined;
         found: boolean;
         id: string;
+        deleted?: undefined;
         registered?: undefined;
         label?: undefined;
         message?: undefined;
     } | {
-        provider?: undefined;
-        found?: undefined;
         providers?: undefined;
         count?: undefined;
+        provider?: undefined;
+        found?: undefined;
         deleted: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
         message?: undefined;
     } | {
-        deleted?: undefined;
-        provider?: undefined;
-        found?: undefined;
         providers?: undefined;
         count?: undefined;
+        provider?: undefined;
+        found?: undefined;
+        deleted?: undefined;
         registered: boolean;
         id: string;
         label: string;

package/dist/provider-api/index.d.ts

@@ -286,6 +286,16 @@ export interface ProviderApiConfig {
     accessErrorGuidance?: string;
     corpusRecipes?: readonly ProviderApiCorpusRecipe[];
     templateUses?: readonly WorkspaceConnectionTemplateUse[];
+    /**
+     * Some provider APIs (Slack's Web API is the documented case) answer every
+     * request with HTTP 200 and encode the real outcome as a boolean field in
+     * the JSON body instead. When set, a response with this field explicitly
+     * `false` is treated as a failed request — `response.ok` is flipped to
+     * `false` — so a caller (or the agent) that only checks the transport-level
+     * `ok`, the same signal every other provider uses for success, can't
+     * mistake a rejected send for a delivered one.
+     */
+    bodyOkField?: string;
 }
 export interface ProviderApiPlaceholder {
     name: string;

package/dist/provider-api/index.js

@@ -991,6 +991,11 @@ const PROVIDER_CONFIGS = {
         id: "slack",
         label: "Slack Web API",
         defaultBaseUrl: "https://slack.com/api",
+        // Slack answers every call with HTTP 200, success or failure — see
+        // bodyOkField's doc comment. Without this, a rejected chat.postMessage
+        // (not_in_channel, channel_not_found, msg_too_long, …) looks identical to
+        // a delivered one at the transport level.
+        bodyOkField: "ok",
         auth: {
             type: "bearer",
             keys: ["SLACK_BOT_TOKEN"],
@@ -1301,7 +1306,7 @@ export async function executeProviderApiRequest(args, runtime) {
                 body: pageBody,
                 headers,
             });
-            const resp = await fetchWithTimeout(pageUrl.href, {
+            const resp = applyBodyEnvelopeOutcome(await fetchWithTimeout(pageUrl.href, {
                 method,
                 headers,
                 body: pageBody,
@@ -1315,7 +1320,7 @@ export async function executeProviderApiRequest(args, runtime) {
                     target: describeProviderRequestTarget(pageUrl.href, auth.secretValues),
                     requestKey,
                 },
-            });
+            }), config);
             return {
                 text: resp.text ??
                     (resp.json !== undefined ? JSON.stringify(resp.json) : ""),
@@ -1347,7 +1352,7 @@ export async function executeProviderApiRequest(args, runtime) {
         body,
         headers,
     });
-    const response = await fetchWithTimeout(url.href, {
+    const response = applyBodyEnvelopeOutcome(await fetchWithTimeout(url.href, {
         method,
         headers,
         body,
@@ -1361,12 +1366,12 @@ export async function executeProviderApiRequest(args, runtime) {
             target: describeProviderRequestTarget(url.href, auth.secretValues),
             requestKey,
         },
-    });
+    }), config);
     // saveToFile: write full body to workspace file and return compact summary.
     if (args.saveToFile) {
         const rawText = response.text ??
             (response.json !== undefined ? JSON.stringify(response.json) : "");
-        const saved = (await handleSaveToFile(args.saveToFile, rawText, response.contentType, response.status));
+        const saved = (await handleSaveToFile(args.saveToFile, rawText, response.contentType, response.status, response.ok));
         return {
             provider: { id: config.id, label: config.label },
             request: {
@@ -2119,7 +2124,7 @@ async function executeCustomProviderApiRequest(args, customConfig, runtime) {
     if (args.saveToFile) {
         const rawText = response.text ??
             (response.json !== undefined ? JSON.stringify(response.json) : "");
-        const saved = (await handleSaveToFile(args.saveToFile, rawText, response.contentType, response.status));
+        const saved = (await handleSaveToFile(args.saveToFile, rawText, response.contentType, response.status, response.ok));
         return {
             provider: {
                 id: customConfig.id,
@@ -3817,6 +3822,31 @@ function providerQuotaExhaustedResponse(detail) {
         },
     };
 }
+/**
+ * Flip transport-level `ok` to `false` when the provider's own success field
+ * (config.bodyOkField) says the call failed. See ProviderApiConfig's
+ * bodyOkField doc comment: Slack answers every request with HTTP 200, so
+ * without this a rejected send is indistinguishable from a delivered one to
+ * any caller — including the agent — that trusts `response.ok`.
+ */
+function applyBodyEnvelopeOutcome(response, config) {
+    const field = config.bodyOkField;
+    if (!field || !response.ok)
+        return response;
+    const body = response.json;
+    if (!body || typeof body !== "object" || Array.isArray(body))
+        return response;
+    if (body[field] !== false)
+        return response;
+    const error = stringOrNull(body.error);
+    return {
+        ...response,
+        ok: false,
+        statusText: error
+            ? `${response.statusText} (${config.label} reported ${field}: false — ${error})`
+            : `${response.statusText} (${config.label} reported ${field}: false)`,
+    };
+}
 async function fetchProviderResponse(url, fetchOptions, options) {
     const startedAt = Date.now();
     const res = await fetch(url, fetchOptions);
@@ -4000,8 +4030,8 @@ function dotGet(obj, path) {
  * Handle saveToFile: write the full provider-api response body to a workspace
  * file and return a compact summary.
  */
-async function handleSaveToFile(filePath, responseText, contentType, status) {
-    const { writeWorkspaceFile, SAVE_TO_FILE_MAX_BYTES: maxSaveBytes } = await import("../workspace-files/store.js");
+async function handleSaveToFile(filePath, responseText, contentType, status, ok = true) {
+    const { writeWorkspaceFile, SAVE_TO_FILE_MAX_BYTES: maxSaveBytes, isScratchWorkspacePath, toWorkspaceFileCard, } = await import("../workspace-files/store.js");
     const { getRequestOrgId, getRequestUserEmail } = await import("../server/request-context.js");
     const orgId = getRequestOrgId();
     const email = getRequestUserEmail();
@@ -4014,7 +4044,7 @@ async function handleSaveToFile(filePath, responseText, contentType, status) {
         throw new Error("saveToFile requires an authenticated request context (no user email or orgId found).");
     }
     const mimeType = contentType?.split(";")[0].trim() ?? "text/plain";
-    await writeWorkspaceFile(scope, filePath, responseText, mimeType, {
+    const meta = await writeWorkspaceFile(scope, filePath, responseText, mimeType, {
         maxFileBytes: maxSaveBytes,
     });
     const bytes = Buffer.byteLength(responseText, "utf8");
@@ -4023,9 +4053,15 @@ async function handleSaveToFile(filePath, responseText, contentType, status) {
         savedToFile: true,
         savedTo: filePath,
         status,
+        ok,
         bytes,
         contentType: mimeType,
         preview: preview.length < responseText.length ? `${preview}…` : preview,
+        // A durable (non-scratch) file renders a download card the moment it's
+        // created — no separate show-workspace-file call needed to get a link.
+        ...(isScratchWorkspacePath(filePath)
+            ? {}
+            : { file: toWorkspaceFileCard(meta) }),
     };
 }
 /**

package/dist/server/auth.js

@@ -636,9 +636,16 @@ async function ensureEmailVerifiedForRedirect(request, response) {
             args: [email],
         });
     }
-    catch {
-        // Better Auth already handled the verification route. This repair is
-        // best-effort so response cookies/redirects are never lost to DB noise.
+    catch (error) {
+        // Better Auth already handled the verification route, so this repair
+        // staying best-effort (never blocking the response) is correct. But a
+        // failure here must never be silent: "repair didn't run" and "there was
+        // nothing to repair" are the same observable outcome to a caller unless
+        // this is logged, which is exactly the shape of "clicked the verify
+        // link, login still says not verified" (Slack C0ATH3CCZT4, reported
+        // 2026-07-31 and 2026-08-05) — this UPDATE is the only place that would
+        // show whether Better Auth's own write is failing too.
+        captureAuthError(error, { route: "verify-email", email });
     }
 }
 async function emailFromVerificationResponseSession(response) {

package/dist/server/poll.js

@@ -1506,11 +1506,15 @@ export class AppSyncState {
             // marker rows back into extension-source events for targeted client
             // invalidation while preserving user/org scope.
             if (extensionMarkerTs > this.lastExtensionMarkerTs) {
+                // Bound the scan by the watermark instead of reading every marker row
+                // ever written and filtering in memory: this table keeps one row per
+                // session that has ever mutated an extension, so the unbounded read
+                // grows with lifetime users rather than with pending work.
                 const extensionMarkerResult = await db.execute({
-                    sql: "SELECT session_id, value, updated_at FROM application_state WHERE key = ? ORDER BY updated_at ASC",
-                    args: [EXTENSION_CHANGE_MARKER_KEY],
+                    sql: "SELECT session_id, value, updated_at FROM application_state WHERE key = ? AND updated_at > ? ORDER BY updated_at ASC",
+                    args: [EXTENSION_CHANGE_MARKER_KEY, this.lastExtensionMarkerTs],
                 });
-                const changedExtensionMarkers = extensionMarkerResult.rows.filter((row) => timestampValue(row.updated_at) > this.lastExtensionMarkerTs);
+                const changedExtensionMarkers = extensionMarkerResult.rows;
                 if (this.lastExtensionMarkerTs > 0) {
                     this.recordExtensionChanges(changedExtensionMarkers
                         .map((row) => parseExtensionChangeMarker(row.session_id, row.value))

package/dist/server/sentry.d.ts

@@ -57,7 +57,7 @@ export declare function setSentryRequestContext(ctx: {
  * this just records the error for observability.
  */
 export declare function captureAuthError(error: unknown, context: {
-    route: "login" | "signup" | "logout" | "magic-link";
+    route: "login" | "signup" | "logout" | "magic-link" | "verify-email";
     email?: string;
 }): string | undefined;
 export interface RouteErrorContext {

package/dist/templates/chat/.agents/skills/real-time-sync/SKILL.md

@@ -50,7 +50,7 @@ The agent modifies data in SQL, but the UI runs in the browser. SSE bridges same
 
    For list/sidebar queries, use the same pattern — pass the counter into the queryKey of every list query you want to keep fresh.
 
-4. **Fallback** polling calls `/_agent-native/poll?since=N`. It runs every 2 seconds until SSE is connected, then relaxes to 15 seconds (`SSE_FALLBACK_INTERVAL_MS`). If SSE is disabled or unavailable (e.g., edge/serverless deployments), polling continues at the 2 s cadence. Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
+4. **Fallback** polling calls `/_agent-native/poll?since=N`. It polls every 2 seconds only while an agent run is in flight; otherwise it idles at 60 seconds whether or not SSE is connected (`SSE_FALLBACK_INTERVAL_MS` and `IDLE_POLL_INTERVAL_MS`, both 60 s). A hidden tab polls no faster than every 10 seconds (`HIDDEN_POLL_INTERVAL_MS`). Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
 
 5. When the agent writes to the database, the version increments, SSE/polling detects it, and React Query refetches the affected queries.
 

package/dist/templates/default/.agents/skills/real-time-sync/SKILL.md

@@ -50,7 +50,7 @@ The agent modifies data in SQL, but the UI runs in the browser. SSE bridges same
 
    For list/sidebar queries, use the same pattern — pass the counter into the queryKey of every list query you want to keep fresh.
 
-4. **Fallback** polling calls `/_agent-native/poll?since=N`. It runs every 2 seconds until SSE is connected, then relaxes to 15 seconds (`SSE_FALLBACK_INTERVAL_MS`). If SSE is disabled or unavailable (e.g., edge/serverless deployments), polling continues at the 2 s cadence. Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
+4. **Fallback** polling calls `/_agent-native/poll?since=N`. It polls every 2 seconds only while an agent run is in flight; otherwise it idles at 60 seconds whether or not SSE is connected (`SSE_FALLBACK_INTERVAL_MS` and `IDLE_POLL_INTERVAL_MS`, both 60 s). A hidden tab polls no faster than every 10 seconds (`HIDDEN_POLL_INTERVAL_MS`). Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
 
 5. When the agent writes to the database, the version increments, SSE/polling detects it, and React Query refetches the affected queries.
 

package/dist/templates/workspace-core/.agents/skills/real-time-sync/SKILL.md

@@ -50,7 +50,7 @@ The agent modifies data in SQL, but the UI runs in the browser. SSE bridges same
 
    For list/sidebar queries, use the same pattern — pass the counter into the queryKey of every list query you want to keep fresh.
 
-4. **Fallback** polling calls `/_agent-native/poll?since=N`. It runs every 2 seconds until SSE is connected, then relaxes to 15 seconds (`SSE_FALLBACK_INTERVAL_MS`). If SSE is disabled or unavailable (e.g., edge/serverless deployments), polling continues at the 2 s cadence. Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
+4. **Fallback** polling calls `/_agent-native/poll?since=N`. It polls every 2 seconds only while an agent run is in flight; otherwise it idles at 60 seconds whether or not SSE is connected (`SSE_FALLBACK_INTERVAL_MS` and `IDLE_POLL_INTERVAL_MS`, both 60 s). A hidden tab polls no faster than every 10 seconds (`HIDDEN_POLL_INTERVAL_MS`). Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
 
 5. When the agent writes to the database, the version increments, SSE/polling detects it, and React Query refetches the affected queries.
 

package/dist/vite/client.d.ts

@@ -193,6 +193,11 @@ export interface AgentNativeVitePluginOptions extends Omit<ClientConfigOptions,
 }
 export declare function stripMountedDevApiPath(reqUrl: string | undefined, base: string | undefined): string | undefined;
 export declare function isFrameworkDevPath(reqUrl: string, base: string | undefined): boolean;
+/**
+ * Framework-owned dynamic dev paths whose responses are served by the h3 app:
+ * the `/_agent-native/*` API surface plus framework `/.well-known/*` documents.
+ */
+export declare function isFrameworkDynamicDevPath(reqUrl: string, base: string | undefined): boolean;
 declare function nitroModuleGraphSignature(environment: unknown): string | null;
 declare function nitroStartupGate(options?: {
     now?: () => number;