@agent-native/core 0.164.23 → 0.164.24

package/dist/app-config/app.d.ts

@@ -27,6 +27,8 @@ export declare const appConfig: z.ZodObject<{
     id: z.ZodOptional<z.ZodString>;
     workspaceId: z.ZodOptional<z.ZodString>;
     name: z.ZodOptional<z.ZodString>;
+    pingMessage: z.ZodDefault<z.ZodString>;
+    healthStrictSchema: z.ZodDefault<z.ZodBoolean>;
     url: z.ZodOptional<z.ZodString>;
     packageName: z.ZodOptional<z.ZodString>;
     template: z.ZodOptional<z.ZodString>;

package/dist/app-config/app.js

@@ -51,6 +51,21 @@ export const appConfig = z.object({
         env: ["APP_NAME"],
         doc: "User-facing display name of this app.",
     }),
+    pingMessage: z
+        .string()
+        .min(1)
+        .default("pong")
+        .meta({
+        env: ["PING_MESSAGE"],
+        doc: "Message returned by the framework ping route.",
+    }),
+    healthStrictSchema: z
+        .boolean()
+        .default(false)
+        .meta({
+        env: ["AGENT_NATIVE_HEALTH_STRICT_SCHEMA"],
+        doc: "Return HTTP 503 when the framework health schema probe is not ready.",
+    }),
     /**
      * The app's canonical public URL — what a user sees in a share link, an
      * email, or a JWT issuer claim.

package/dist/app-config/schema.d.ts

@@ -28,6 +28,8 @@ export declare const appConfigSchema: z.ZodObject<{
         id: z.ZodOptional<z.ZodString>;
         workspaceId: z.ZodOptional<z.ZodString>;
         name: z.ZodOptional<z.ZodString>;
+        pingMessage: z.ZodDefault<z.ZodString>;
+        healthStrictSchema: z.ZodDefault<z.ZodBoolean>;
         url: z.ZodOptional<z.ZodString>;
         packageName: z.ZodOptional<z.ZodString>;
         template: z.ZodOptional<z.ZodString>;

package/dist/collab/awareness.d.ts

@@ -62,11 +62,11 @@ export declare const postAwareness: import("h3").EventHandlerWithFetch<import("h
     error: string;
     states?: undefined;
 } | {
-    error?: undefined;
     states: {
         clientId: number;
         state: string;
     }[];
+    error?: undefined;
 }>>;
 /**
  * GET /_agent-native/collab/:docId/users
@@ -77,9 +77,9 @@ export declare const getActiveUsers: import("h3").EventHandlerWithFetch<import("
     error: string;
     users?: undefined;
 } | {
-    error?: undefined;
     users: {
         clientId: number;
         lastSeen: number;
     }[];
+    error?: undefined;
 }>>;

package/dist/mcp/screen-memory-stdio.d.ts

@@ -137,13 +137,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -159,6 +159,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -174,7 +175,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -190,6 +190,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             minutes: {
                 type: string;
                 description: string;
@@ -199,7 +200,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -216,6 +216,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -234,7 +235,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             };
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -250,6 +250,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
@@ -263,7 +264,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
                 description: string;
             };
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             includeMicrophone?: undefined;
@@ -314,13 +314,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt: {
                 type: string;
                 description: string;
@@ -349,13 +349,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;

package/dist/notifications/routes.d.ts

@@ -11,23 +11,23 @@
  *   DELETE /_agent-native/notifications/:id         — delete
  */
 export declare function createNotificationsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<"" | import("./types.js").Notification[] | {
-    error?: undefined;
     count: number;
     updated?: undefined;
+    error?: undefined;
     ok?: undefined;
 } | {
-    error?: undefined;
+    count?: undefined;
     updated: number;
+    error?: undefined;
     ok?: undefined;
-    count?: undefined;
 } | {
+    count?: undefined;
     updated?: undefined;
     error: string;
     ok?: undefined;
-    count?: undefined;
 } | {
-    error?: undefined;
+    count?: undefined;
     updated?: undefined;
+    error?: undefined;
     ok: boolean;
-    count?: undefined;
 }>>;

package/dist/observability/routes.d.ts

@@ -41,14 +41,14 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
-    error?: undefined;
     ok?: undefined;
+    error?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
 } | {
-    error?: undefined;
     ok?: undefined;
+    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id: string;

package/dist/progress/routes.d.ts

@@ -15,6 +15,6 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/server/auth-plugin.js

@@ -1,19 +1,33 @@
 import { autoMountAuth } from "./auth.js";
 import { runBetterAuthMigrations } from "./better-auth-migrations.js";
-import { getH3App, awaitBootstrap, markDefaultPluginProvided, trackPluginInit, } from "./framework-request-handler.js";
+import { FRAMEWORK_AUTH_EARLY_PATHS, awaitBootstrap, getH3App, markDefaultPluginProvided, markFrameworkRoutesReadyBeforeBootstrap, trackPluginInit, } from "./framework-request-handler.js";
 export function createAuthPlugin(options) {
     return (nitroApp) => {
         markDefaultPluginProvided(nitroApp, "auth");
+        const isByoa = Boolean(options?.getSession);
+        const app = getH3App(nitroApp);
         const initPromise = (async () => {
+            // A BYOA provider owns its session lookup and login HTML. Mount it
+            // immediately so a transient database outage in Better Auth or another
+            // default plugin cannot make the custom sign-in document unavailable.
+            if (isByoa) {
+                // The guard is mounted synchronously by the BYOA branch above. Only
+                // after that synchronous registration is it safe to let these paths
+                // skip unrelated bootstrap work.
+                const mountPromise = autoMountAuth(app, options);
+                markFrameworkRoutesReadyBeforeBootstrap(nitroApp, FRAMEWORK_AUTH_EARLY_PATHS);
+                await mountPromise;
+                return;
+            }
             await awaitBootstrap(nitroApp);
             // guard:allow-boot-data-work — local/long-lived runtimes provision auth
             // before mounting routes; production functions are rejected by the
             // migration runner and use the release job instead.
             await runBetterAuthMigrations(nitroApp);
-            await autoMountAuth(getH3App(nitroApp), options);
+            await autoMountAuth(app, options);
         })();
         trackPluginInit(nitroApp, initPromise, {
-            paths: ["/_agent-native/auth"],
+            paths: [...FRAMEWORK_AUTH_EARLY_PATHS],
         });
     };
 }

package/dist/server/beta-opt-out-html.js

@@ -1,14 +1,139 @@
-import { BETA_OPT_OUT_QUERY_PARAM, BETA_OPT_OUT_STORAGE_KEY, } from "../shared/environment-lanes.js";
+import { BETA_OPT_OUT_DURATION_MS, BETA_OPT_OUT_QUERY_PARAM, BETA_OPT_OUT_STORAGE_KEY, ENVIRONMENT_BETA_HOSTS, } from "../shared/environment-lanes.js";
 export const BETA_OPT_OUT_PERSISTENCE_MARKER = "Persist the beta opt-out before authentication";
-/**
- * Custom auth pages do not necessarily use the framework onboarding shell.
- * Keep the production switcher's one-time opt-out behavior at the shared auth
- * response boundary so those pages cannot drop the handoff before sign-in.
- */
-export function injectBetaOptOutPersistence(loginHtml) {
-    if (loginHtml.includes(BETA_OPT_OUT_PERSISTENCE_MARKER))
-        return loginHtml;
-    const script = `<script data-agent-native-beta-opt-out>
+const ENVIRONMENT_SWITCHER_MARKER = 'data-agent-native-environment-switcher="1"';
+const ENVIRONMENT_SWITCHER_STYLE_MARKER = 'data-agent-native-environment-switcher-style="1"';
+const ENVIRONMENT_SWITCHER_SCRIPT_MARKER = 'data-agent-native-environment-switcher-script="1"';
+const EXISTING_ENVIRONMENT_SWITCHER_RE = /\bid=["']environment-switcher["']/;
+function insertBeforeClosingTag(html, fragment, closingTag) {
+    const closeIndex = html.indexOf(closingTag);
+    if (closeIndex < 0)
+        return html + fragment;
+    return html.slice(0, closeIndex) + fragment + html.slice(closeIndex);
+}
+const environmentSwitcherMarkup = `<div class="environment-switcher" id="environment-switcher" ${ENVIRONMENT_SWITCHER_MARKER} hidden>
+  <button type="button" class="environment-badge" id="environment-badge" aria-expanded="false" aria-controls="environment-popover">beta</button>
+  <div class="environment-popover" id="environment-popover" role="dialog" aria-labelledby="environment-popover-title" hidden>
+    <div class="environment-popover-title" id="environment-popover-title">You're on Agent Native Beta</div>
+    <div class="environment-popover-copy">Choose where you want to continue.</div>
+    <a class="environment-production-link" id="environment-production-link" href="">Switch to production</a>
+  </div>
+</div>`;
+const environmentSwitcherStyles = `<style ${ENVIRONMENT_SWITCHER_STYLE_MARKER}>
+  color-scheme: dark;
+  .environment-switcher {
+    position: fixed;
+    right: max(0.75rem, env(safe-area-inset-right));
+    bottom: max(0.75rem, env(safe-area-inset-bottom));
+    z-index: 100;
+  }
+  .environment-switcher[hidden],
+  .environment-popover[hidden] { display: none; }
+  .environment-badge {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    height: 1.5rem;
+    min-width: 0;
+    padding: 0 0.5rem;
+    background: CanvasText;
+    color: Canvas;
+    border: 1px solid color-mix(in srgb, Canvas 16%, transparent);
+    border-radius: 0.75rem;
+    box-shadow: 0 2px 8px color-mix(in srgb, CanvasText 25%, transparent);
+    font: inherit;
+    font-size: 0.6875rem;
+    font-weight: 600;
+    letter-spacing: 0.03125rem;
+    line-height: 1;
+    text-transform: uppercase;
+    cursor: pointer;
+  }
+  .environment-badge:hover,
+  .environment-badge[aria-expanded="true"] {
+    background: color-mix(in srgb, CanvasText 85%, Canvas);
+  }
+  .environment-badge:focus-visible,
+  .environment-production-link:focus-visible {
+    outline: 2px solid LinkText;
+    outline-offset: 2px;
+  }
+  .environment-popover {
+    position: absolute;
+    right: 0;
+    bottom: calc(100% + 0.5rem);
+    width: min(17.5rem, calc(100vw - 1.5rem));
+    padding: 1.25rem;
+    background: Canvas;
+    color: CanvasText;
+    border: 1px solid color-mix(in srgb, CanvasText 12%, transparent);
+    border-radius: 0.75rem;
+    box-shadow: 0 18px 50px color-mix(in srgb, CanvasText 42%, transparent);
+  }
+  .environment-popover-title { margin-bottom: 0.25rem; font-size: 0.875rem; font-weight: 600; line-height: 1.25rem; }
+  .environment-popover-copy { margin-bottom: 1rem; color: GrayText; font-size: 0.875rem; line-height: 1.25rem; }
+  .environment-production-link {
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    min-height: 2rem;
+    padding: 0.375rem 0.75rem;
+    color: CanvasText;
+    border: 1px solid color-mix(in srgb, CanvasText 16%, transparent);
+    border-radius: 0.375rem;
+    font-size: 0.8125rem;
+    text-decoration: none;
+  }
+  .environment-production-link:hover {
+    background: color-mix(in srgb, CanvasText 12%, Canvas);
+  }
+</style>`;
+const environmentSwitcherScript = `<script ${ENVIRONMENT_SWITCHER_SCRIPT_MARKER}>
+(function __anInitEnvironmentBadge() {
+  var switcher = document.getElementById('environment-switcher');
+  var button = document.getElementById('environment-badge');
+  var popover = document.getElementById('environment-popover');
+  var productionLink = document.getElementById('environment-production-link');
+  if (!switcher || !button || !popover || !productionLink) return;
+  if (window.parent !== window) return;
+
+  var betaHosts = ${JSON.stringify(ENVIRONMENT_BETA_HOSTS)};
+  var hostname = (window.location.hostname || '').toLowerCase().replace(/\\.$/, '');
+  var productionHost = hostname.indexOf('beta.') === 0 ? hostname.slice(5) : '';
+  if (!productionHost || betaHosts[productionHost] !== hostname) return;
+
+  try {
+    var productionUrl = new URL(window.location.href);
+    productionUrl.protocol = 'https:';
+    productionUrl.hostname = productionHost;
+    productionUrl.port = '';
+    productionUrl.searchParams.set(
+      ${JSON.stringify(BETA_OPT_OUT_QUERY_PARAM)},
+      String(Date.now() + ${BETA_OPT_OUT_DURATION_MS}),
+    );
+    productionLink.href = productionUrl.toString();
+  } catch (error) {
+    void error;
+    return;
+  }
+
+  function setOpen(open) {
+    popover.hidden = !open;
+    button.setAttribute('aria-expanded', String(open));
+  }
+
+  switcher.hidden = false;
+  button.addEventListener('click', function() {
+    setOpen(popover.hidden);
+  });
+  document.addEventListener('click', function(event) {
+    if (!switcher.contains(event.target)) setOpen(false);
+  });
+  document.addEventListener('keydown', function(event) {
+    if (event.key === 'Escape') setOpen(false);
+  });
+})();
+</script>`;
+const betaOptOutPersistenceScript = `<script data-agent-native-beta-opt-out>
 // ${BETA_OPT_OUT_PERSISTENCE_MARKER}.
 (function __anPersistBetaOptOut() {
   try {
@@ -37,17 +162,29 @@ export function injectBetaOptOutPersistence(loginHtml) {
   }
 })();
 </script>`;
-    const bodyCloseIndex = loginHtml.indexOf("</body>");
-    if (bodyCloseIndex >= 0) {
-        return (loginHtml.slice(0, bodyCloseIndex) +
-            script +
-            loginHtml.slice(bodyCloseIndex));
+/**
+ * Custom auth pages do not necessarily use the framework onboarding shell.
+ * Keep the production switcher's one-time opt-out behavior at the shared auth
+ * response boundary so those pages cannot drop the handoff before sign-in.
+ */
+export function injectBetaOptOutPersistence(loginHtml) {
+    let html = loginHtml;
+    if (!html.includes(BETA_OPT_OUT_PERSISTENCE_MARKER)) {
+        html = insertBeforeClosingTag(html, betaOptOutPersistenceScript, "</body>");
+    }
+    // The standard onboarding shell already owns this markup, style, and
+    // initializer. Custom login pages need the shared switcher, but adding a
+    // second copy would create duplicate IDs and event handlers.
+    if (EXISTING_ENVIRONMENT_SWITCHER_RE.test(html))
+        return html;
+    if (!html.includes(ENVIRONMENT_SWITCHER_STYLE_MARKER)) {
+        html = insertBeforeClosingTag(html, environmentSwitcherStyles, "</head>");
+    }
+    if (!html.includes(ENVIRONMENT_SWITCHER_MARKER)) {
+        html = insertBeforeClosingTag(html, environmentSwitcherMarkup, "</body>");
     }
-    const headCloseIndex = loginHtml.indexOf("</head>");
-    if (headCloseIndex >= 0) {
-        return (loginHtml.slice(0, headCloseIndex) +
-            script +
-            loginHtml.slice(headCloseIndex));
+    if (!html.includes(ENVIRONMENT_SWITCHER_SCRIPT_MARKER)) {
+        html = insertBeforeClosingTag(html, environmentSwitcherScript, "</body>");
     }
-    return loginHtml + script;
+    return html;
 }

package/dist/server/core-routes-plugin.js

@@ -51,7 +51,7 @@ import { probeDbPressure } from "./db-pressure.js";
 import { resolveDeployEnvironment, resolveServerRelease, } from "./deploy-environment.js";
 import { createEmbedStartRouteHandler } from "./embed-route.js";
 import { shouldReportError } from "./error-noise-filter.js";
-import { getH3App, awaitBootstrap, markDefaultPluginProvided, trackPluginInit, } from "./framework-request-handler.js";
+import { FRAMEWORK_AUTH_EARLY_PATHS, getH3App, awaitBootstrap, markDefaultPluginProvided, markFrameworkRoutesReadyBeforeBootstrap, trackPluginInit, } from "./framework-request-handler.js";
 import { createGatewayAccessCheckHandler } from "./gateway-access-check.js";
 import { getAppBasePath, getOrigin } from "./google-oauth.js";
 import { createGoogleRealtimeSessionHandler } from "./google-realtime-session.js";
@@ -939,9 +939,21 @@ export function createCoreRoutesPlugin(options = {}) {
         });
         trackPluginInit(nitroApp, initPromise, {
             paths: [FRAMEWORK_ROUTE_PREFIX, "/mcp", "/.well-known"],
+            // Liveness and BYOA auth routes are mounted before the DB-dependent
+            // bootstrap below. The broad core entry must not hold those routes while
+            // an unrelated migration or connection pool is unavailable.
+            excludedPaths: [
+                `${FRAMEWORK_ROUTE_PREFIX}/ping`,
+                `${FRAMEWORK_ROUTE_PREFIX}/health`,
+                ...FRAMEWORK_AUTH_EARLY_PATHS,
+            ],
         });
         try {
             const P = FRAMEWORK_ROUTE_PREFIX;
+            markFrameworkRoutesReadyBeforeBootstrap(nitroApp, [
+                ...(!options.disablePing ? [`${P}/ping`] : []),
+                ...(!options.disableHealth ? [`${P}/health`] : []),
+            ]);
             // Keep the framework-owned S3-compatible provider available even when an
             // app does not mount the optional onboarding plugin. The settings CTA and
             // the upload route share this registry. An app may register its own
@@ -962,6 +974,52 @@ export function createCoreRoutesPlugin(options = {}) {
                 }
                 return EMPTY_SPECULATION_RULES;
             }));
+            // Keep liveness independent from the rest of framework bootstrap. A
+            // cold-start database failure must report a useful ping/health result,
+            // not prevent these handlers from being registered at all.
+            if (!options.disablePing) {
+                getH3App(nitroApp).use(`${P}/ping`, defineEventHandler((event) => {
+                    const message = getAppConfig().app.pingMessage;
+                    const configuration = event.url?.searchParams.get("configuration") === "1" ||
+                        event.url?.searchParams.get("configuration") === "true";
+                    if (!configuration)
+                        return { message };
+                    const requirements = {
+                        ...(event.url?.searchParams.get("auth") === "0"
+                            ? { authEnabled: false }
+                            : {}),
+                        ...(event.url?.searchParams.get("database") === "0"
+                            ? { databaseRequired: false }
+                            : {}),
+                    };
+                    return {
+                        message,
+                        configuration: getRuntimeConfigReport(process.env, requirements, {
+                            phase: "runtime",
+                            appName: getAppConfig().app.name,
+                        }),
+                    };
+                }));
+            }
+            if (!options.disableHealth) {
+                getH3App(nitroApp).use(`${P}/health`, defineEventHandler(async (event) => {
+                    setResponseHeader(event, "cache-control", "no-store");
+                    const schema = event.url?.searchParams.get("schema") === "1" ||
+                        event.url?.searchParams.get("schema") === "true";
+                    const strict = event.url?.searchParams.get("strict") === "1" ||
+                        event.url?.searchParams.get("strict") === "true" ||
+                        getAppConfig().app.healthStrictSchema;
+                    const pressure = event.url?.searchParams.get("pressure") === "1" ||
+                        event.url?.searchParams.get("pressure") === "true";
+                    const result = await runDbHealthProbe(getDbExec, {
+                        schema,
+                        pressure,
+                    });
+                    if (strict && !result.ready)
+                        setResponseStatus(event, 503);
+                    return result;
+                }));
+            }
             await awaitBootstrap(nitroApp);
             const runBootDatabaseWork = shouldRunCoreRouteBootDatabaseWork();
             const { persistedEnvVars, builderDisconnected } = runBootDatabaseWork
@@ -1264,33 +1322,6 @@ export function createCoreRoutesPlugin(options = {}) {
                     getH3App(nitroApp).use(route, createPollEventsHandler());
                 }
             }
-            // Ping
-            if (!options.disablePing) {
-                getH3App(nitroApp).use(`${P}/ping`, defineEventHandler((event) => {
-                    const message = process.env.PING_MESSAGE ?? "pong";
-                    const configuration = event.url?.searchParams.get("configuration") === "1" ||
-                        event.url?.searchParams.get("configuration") === "true";
-                    if (!configuration)
-                        return { message };
-                    // Custom required keys must come from server-side app configuration;
-                    // never let an anonymous caller turn this into an env-name oracle.
-                    const requirements = {
-                        ...(event.url?.searchParams.get("auth") === "0"
-                            ? { authEnabled: false }
-                            : {}),
-                        ...(event.url?.searchParams.get("database") === "0"
-                            ? { databaseRequired: false }
-                            : {}),
-                    };
-                    return {
-                        message,
-                        configuration: getRuntimeConfigReport(process.env, requirements, {
-                            phase: "runtime",
-                            appName: process.env.APP_NAME,
-                        }),
-                    };
-                }));
-            }
             // ─── Durable sandbox execution processor ─────────────────────────
             // Self-fired by run-code's background queue (see
             // coding-tools/sandbox/background.ts): the enqueueing request POSTs here
@@ -1370,37 +1401,6 @@ export function createCoreRoutesPlugin(options = {}) {
                     }, 30_000); // Check every 30s but only sweep once per 2min
                 }, 25_000); // Start 25s after init (after the agent sweeps)
             })();
-            // Health + DB warmup — liveness probe that touches the database so
-            // uptime monitors and the keep-warm cron prevent a scale-to-zero
-            // serverless DB (e.g. Neon) from cold-starting on the next real
-            // request. Public, side-effect free, and never cached. Add ?schema=1
-            // for metadata-only schema checks, and ?strict=1 to turn a not-ready
-            // DB/schema probe into a failing HTTP status for monitors.
-            if (!options.disableHealth) {
-                getH3App(nitroApp).use(`${P}/health`, defineEventHandler(async (event) => {
-                    setResponseHeader(event, "cache-control", "no-store");
-                    const schema = event.url?.searchParams.get("schema") === "1" ||
-                        event.url?.searchParams.get("schema") === "true";
-                    const strict = event.url?.searchParams.get("strict") === "1" ||
-                        event.url?.searchParams.get("strict") === "true" ||
-                        process.env.AGENT_NATIVE_HEALTH_STRICT_SCHEMA === "true";
-                    // Off by default: the one-minute warm cron does not need it, and
-                    // an extra `pg_stat_activity` read every minute per app is waste.
-                    // Pressure deliberately does NOT change `ready` or the status
-                    // code — a pressured database is still serving, and an uptime
-                    // monitor that pages on it would learn to ignore this route. The
-                    // fleet audit reads the counters and decides.
-                    const pressure = event.url?.searchParams.get("pressure") === "1" ||
-                        event.url?.searchParams.get("pressure") === "true";
-                    const result = await runDbHealthProbe(getDbExec, {
-                        schema,
-                        pressure,
-                    });
-                    if (strict && !result.ready)
-                        setResponseStatus(event, 503);
-                    return result;
-                }));
-            }
             getH3App(nitroApp).use(`${P}/debug/runtime`, defineEventHandler(async (event) => {
                 setResponseHeader(event, "cache-control", "no-store");
                 const session = await getSession(event).catch(() => null);

package/dist/server/create-server.d.ts

@@ -14,7 +14,7 @@ export interface CreateServerOptions {
     cors?: Record<string, unknown> | false;
     /** JSON body parser limit. Kept for API compatibility (H3 uses readBody). */
     jsonLimit?: string;
-    /** Custom ping message. Default: reads PING_MESSAGE env var, falls back to "pong" */
+    /** Custom ping message. Default: reads the shared app config. */
     pingMessage?: string;
     /** Disable the /_agent-native/ping health check. Default: false */
     disablePing?: boolean;

package/dist/server/create-server.js

@@ -1,4 +1,5 @@
 import { createApp, createRouter, defineEventHandler, getMethod, getRequestHeader, setResponseHeader, setResponseStatus, } from "h3";
+import { getAppConfig } from "../app-config/index.js";
 import { getOrgContext } from "../org/context.js";
 import { readBody } from "../server/h3-helpers.js";
 import { EMBED_TARGET_HEADER } from "../shared/embed-auth.js";
@@ -109,7 +110,7 @@ export function createServer(options = {}) {
     // Health check
     if (!options.disablePing) {
         router.get("/_agent-native/ping", defineEventHandler((event) => {
-            const message = options.pingMessage ?? process.env.PING_MESSAGE ?? "pong";
+            const message = options.pingMessage ?? getAppConfig().app.pingMessage;
             const configuration = event.url?.searchParams.get("configuration") === "1" ||
                 event.url?.searchParams.get("configuration") === "true";
             if (!configuration)
@@ -128,7 +129,7 @@ export function createServer(options = {}) {
                 message,
                 configuration: getRuntimeConfigReport(process.env, requirements, {
                     phase: "runtime",
-                    appName: process.env.APP_NAME,
+                    appName: getAppConfig().app.name,
                 }),
             };
         }));

package/dist/server/embedded.js

@@ -71,17 +71,24 @@ function markEmbeddedPluginStems(nitroApp) {
 export async function mountAgentNativeEmbedded(nitroApp, options = {}) {
     configureAgentNativeEmbeddedEnvironment(options);
     markEmbeddedPluginStems(nitroApp);
+    // The auth plugin tracks its async initialization itself. Do not await the
+    // factory call here: with default Better Auth, its DB bootstrap can be the
+    // thing that is unavailable while public liveness routes still need to
+    // mount below.
+    createAuthPlugin(createAgentNativeEmbeddedAuthOptions(options.auth))(nitroApp);
+    // Mount framework auth and liveness before waiting on the host application's
+    // bootstrap. The embedded plugin tracks its full init as an unscoped promise,
+    // so early requests deliberately skip that promise.
+    if (options.coreRoutes !== false) {
+        await createCoreRoutesPlugin(options.coreRoutes ?? undefined)(nitroApp);
+    }
     await awaitBootstrap(nitroApp);
-    await createAuthPlugin(createAgentNativeEmbeddedAuthOptions(options.auth))(nitroApp);
     if (options.sentry !== false) {
         await createSentryPlugin()(nitroApp);
     }
     if (options.org === true) {
         await createOrgPlugin()(nitroApp);
     }
-    if (options.coreRoutes !== false) {
-        await createCoreRoutesPlugin(options.coreRoutes ?? undefined)(nitroApp);
-    }
     if (options.resources !== false) {
         await createResourcesPlugin()(nitroApp);
     }

package/dist/server/framework-request-handler.d.ts

@@ -13,6 +13,7 @@
  */
 import type { EventHandler } from "h3";
 declare const FRAMEWORK_PREFIX = "/_agent-native";
+export declare const FRAMEWORK_AUTH_EARLY_PATHS: readonly ["/_agent-native/auth", "/sign-in", "/_agent-native/sign-in", "/_agent-native/login", "/_agent-native/signup", "/login", "/signup"];
 /**
  * Wrapper around Nitro's h3 instance that exposes a v1-style `.use()` API
  * for registering path-prefix middleware.
@@ -32,6 +33,13 @@ export interface H3AppShim {
  * auto-mount a generic default over the app's custom implementation.
  */
 export declare function markDefaultPluginProvided(nitroApp: any, stem: string): void;
+/**
+ * Mark routes that are mounted without waiting for unrelated default-plugin
+ * bootstrap. BYOA auth uses this for its cacheable login document: waiting
+ * for Better Auth or another DB-backed plugin turns an available login form
+ * into a serverless 502 during a cold-start database outage.
+ */
+export declare function markFrameworkRoutesReadyBeforeBootstrap(nitroApp: any, paths: readonly string[]): void;
 /**
  * Get (or create) the shared H3 app wrapper for a nitroApp. Plugins use this
  * to register routes via `.use(path, handler)`.
@@ -65,12 +73,15 @@ export declare function awaitBootstrap(nitroApp: any): Promise<void>;
  */
 export declare function trackPluginInit(nitroApp: any, promise: Promise<void>, options?: {
     paths?: string[];
+    excludedPaths?: string[];
 }): void;
 /**
  * Await all tracked plugin initializations. Called by the readiness gate
  * middleware before dispatching framework routes.
  */
-export declare function awaitPluginsReady(nitroApp: any, reqPath?: string): Promise<void>;
+export declare function awaitPluginsReady(nitroApp: any, reqPath?: string, options?: {
+    skipUnscoped?: boolean;
+}): Promise<void>;
 /**
  * Load a workspace-core's `/server` entry, transparently handling TS source.
  *

package/dist/server/framework-request-handler.js

@@ -1,6 +1,7 @@
 import { setResponseHeader, setResponseStatus } from "h3";
 import { getMissingDefaultPlugins } from "../deploy/route-discovery.js";
 import { MCP_PUBLIC_ROUTE_PREFIX } from "../mcp/route-paths.js";
+import { SIGN_IN_ENTRY_PATH, SIGN_IN_LEGACY_ENTRY_PATH, } from "../shared/sign-in-journey.js";
 import { getConfiguredAppBasePath } from "./app-base-path.js";
 import { captureError } from "./capture-error.js";
 import { createCsrfMiddleware } from "./csrf.js";
@@ -16,8 +17,23 @@ const PLUGIN_READY_KEY = "_agentNativePluginReadyPromise";
 const PLUGIN_READY_PLACEHOLDERS_KEY = "_agentNativePluginReadyPlaceholders";
 const PLUGIN_FAILED_KEY = "_agentNativePluginInitFailures";
 const PROVIDED_PLUGIN_STEMS_KEY = "_agentNativeProvidedPluginStems";
+const EARLY_FRAMEWORK_PATHS_KEY = "_agentNativeEarlyFrameworkPaths";
 const MIDDLEWARE_DISPATCHER_PATCHED_KEY = "_agentNativeMiddlewareDispatcherPatched";
 const REQUEST_CONTEXT_BOUNDARY_KEY = "_agentNativeRequestContextBoundary";
+const CANONICAL_AUTH_EARLY_PATHS = [
+    SIGN_IN_ENTRY_PATH,
+    "/login",
+    "/signup",
+];
+export const FRAMEWORK_AUTH_EARLY_PATHS = [
+    `${FRAMEWORK_PREFIX}/auth`,
+    SIGN_IN_ENTRY_PATH,
+    SIGN_IN_LEGACY_ENTRY_PATH,
+    `${FRAMEWORK_PREFIX}/login`,
+    `${FRAMEWORK_PREFIX}/signup`,
+    "/login",
+    "/signup",
+];
 function getAppBasePath() {
     return getConfiguredAppBasePath();
 }
@@ -27,7 +43,8 @@ function pathMatchesPrefix(reqPath, prefix) {
 function supportsAppBasePathMount(path) {
     return (pathMatchesPrefix(path, FRAMEWORK_PREFIX) ||
         pathMatchesPrefix(path, WELL_KNOWN_PREFIX) ||
-        pathMatchesPrefix(path, MCP_PUBLIC_ROUTE_PREFIX));
+        pathMatchesPrefix(path, MCP_PUBLIC_ROUTE_PREFIX) ||
+        CANONICAL_AUTH_EARLY_PATHS.some((authPath) => pathMatchesPrefix(path, authPath)));
 }
 function resolveMountMatch(reqPath, path) {
     if (pathMatchesPrefix(reqPath, path)) {
@@ -62,6 +79,23 @@ export function markDefaultPluginProvided(nitroApp, stem) {
     provided.add(stem);
     nitroApp[PROVIDED_PLUGIN_STEMS_KEY] = provided;
 }
+/**
+ * Mark routes that are mounted without waiting for unrelated default-plugin
+ * bootstrap. BYOA auth uses this for its cacheable login document: waiting
+ * for Better Auth or another DB-backed plugin turns an available login form
+ * into a serverless 502 during a cold-start database outage.
+ */
+export function markFrameworkRoutesReadyBeforeBootstrap(nitroApp, paths) {
+    if (!nitroApp)
+        return;
+    const existing = nitroApp[EARLY_FRAMEWORK_PATHS_KEY] ??
+        new Set();
+    for (const path of paths) {
+        if (path)
+            existing.add(path);
+    }
+    nitroApp[EARLY_FRAMEWORK_PATHS_KEY] = existing;
+}
 /**
  * Get (or create) the shared H3 app wrapper for a nitroApp. Plugins use this
  * to register routes via `.use(path, handler)`.
@@ -119,6 +153,9 @@ export function getH3App(nitroApp) {
         registerMiddleware(nitroApp, MCP_PUBLIC_ROUTE_PREFIX, readinessGate, {
             prepend: true,
         });
+        for (const path of CANONICAL_AUTH_EARLY_PATHS) {
+            registerMiddleware(nitroApp, path, readinessGate, { prepend: true });
+        }
         // CSRF (see csrf.ts): registered here — synchronously, on the very
         // first `getH3App()` call for this nitroApp — rather than inside
         // createCoreRoutesPlugin's own async init chain. Real deployments mount
@@ -152,7 +189,8 @@ export function getH3App(nitroApp) {
             const reqPath = event.url?.pathname ?? "";
             if (resolveMountMatch(reqPath, FRAMEWORK_PREFIX) ||
                 resolveMountMatch(reqPath, WELL_KNOWN_PREFIX) ||
-                resolveMountMatch(reqPath, MCP_PUBLIC_ROUTE_PREFIX)) {
+                resolveMountMatch(reqPath, MCP_PUBLIC_ROUTE_PREFIX) ||
+                FRAMEWORK_AUTH_EARLY_PATHS.some((path) => resolveMountMatch(reqPath, path))) {
                 const startedAt = Date.now();
                 try {
                     await awaitFrameworkRoutesReadyForRequest(nitroApp, reqPath);
@@ -276,9 +314,15 @@ async function awaitFrameworkRoutesReadyForRequest(nitroApp, reqPath) {
         return await Promise.race([
             (async () => {
                 const bootstrapPromise = nitroApp[BOOTSTRAP_PROMISE_KEY];
-                if (bootstrapPromise)
+                const earlyPaths = nitroApp[EARLY_FRAMEWORK_PATHS_KEY];
+                const canDispatchBeforeBootstrap = Boolean(earlyPaths?.size &&
+                    Array.from(earlyPaths).some((path) => resolveMountMatch(reqPath, path)));
+                if (bootstrapPromise && !canDispatchBeforeBootstrap) {
                     await bootstrapPromise;
-                await awaitPluginsReady(nitroApp, reqPath);
+                }
+                await awaitPluginsReady(nitroApp, reqPath, {
+                    skipUnscoped: canDispatchBeforeBootstrap,
+                });
                 return true;
             })(),
             new Promise((resolve) => {
@@ -341,6 +385,7 @@ export function trackPluginInit(nitroApp, promise, options = {}) {
     const entry = {
         promise: safe,
         paths: options.paths?.filter(Boolean),
+        excludedPaths: options.excludedPaths?.filter(Boolean),
     };
     const existing = nitroApp[PLUGIN_READY_KEY];
     if (existing) {
@@ -349,9 +394,9 @@ export function trackPluginInit(nitroApp, promise, options = {}) {
     else {
         nitroApp[PLUGIN_READY_KEY] = [entry];
     }
-    installPluginReadyPlaceholders(nitroApp, entry.paths);
+    installPluginReadyPlaceholders(nitroApp, entry.paths, entry.excludedPaths);
 }
-function installPluginReadyPlaceholders(nitroApp, paths) {
+function installPluginReadyPlaceholders(nitroApp, paths, excludedPaths) {
     if (!paths?.length)
         return;
     const existing = nitroApp[PLUGIN_READY_PLACEHOLDERS_KEY];
@@ -364,6 +409,9 @@ function installPluginReadyPlaceholders(nitroApp, paths) {
         registerMiddleware(nitroApp, path, (async (event) => {
             const eventAny = event;
             const reqPath = eventAny.context?._mountedPathname ?? event.url?.pathname ?? path;
+            if (excludedPaths?.some((excludedPath) => resolveMountMatch(reqPath, excludedPath))) {
+                return undefined;
+            }
             const ready = await awaitFrameworkRoutesReadyForRequest(nitroApp, reqPath);
             if (!ready) {
                 // Boot is still running and we are out of budget. Answer now, while
@@ -425,14 +473,16 @@ function debugClientAbort(args) {
  * Await all tracked plugin initializations. Called by the readiness gate
  * middleware before dispatching framework routes.
  */
-export async function awaitPluginsReady(nitroApp, reqPath) {
+export async function awaitPluginsReady(nitroApp, reqPath, options = {}) {
     const entries = nitroApp[PLUGIN_READY_KEY];
     if (!entries?.length)
         return;
     const relevant = reqPath
-        ? entries.filter((entry) => entry.paths?.length
-            ? entry.paths.some((path) => resolveMountMatch(reqPath, path))
-            : true)
+        ? entries.filter((entry) => !(options.skipUnscoped && !entry.paths?.length) &&
+            !entry.excludedPaths?.some((path) => resolveMountMatch(reqPath, path)) &&
+            (entry.paths?.length
+                ? entry.paths.some((path) => resolveMountMatch(reqPath, path))
+                : true))
         : entries;
     if (relevant.length) {
         await Promise.all(relevant.map((entry) => entry.promise));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.164.23",
+  "version": "0.164.24",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {