@agent-native/core 0.188.0 → 0.189.0

package/dist/localization/core-messages/ar-SA.js

@@ -497,10 +497,12 @@ const messages = {
     "message.regenerate": "إعادة إنشاء الرد",
     "message.restoreFailed": "فشلت الاستعادة ({{status}}).",
     "message.restoreQuestion": "هل تريد الاستعادة إلى هنا؟",
+    "message.revertQuestion": "هل تريد الرجوع إلى هذه النقطة؟ ستفقد التغييرات التي أُجريت بعدها.",
     "message.restoreRequestFailed": "فشل طلب الاستعادة.",
     "message.threadNotFound": "لم تعد سلسلة الدردشة هذه متاحة. ابدأ دردشة جديدة أو أعد المحاولة إذا كان ذلك غير متوقع.",
     "message.restoring": "جارٍ الاستعادة...",
     "message.revertHere": "الرجوع إلى هنا",
+    "message.revertToBeginning": "الرجوع إلى البداية",
     "message.sentAt": "أُرسلت في {{time}}",
     "contextMeter.ariaLabel": "السياق {{percent}}%، {{totalTokens}}{{breakdown}}. افتح تحليل السياق.",
     "contextMeter.breakdown": " الإجمالي: {{systemTokens}} للنظام + {{conversationTokens}} للمحادثة",

package/dist/localization/core-messages/de-DE.js

@@ -258,10 +258,12 @@ const messages = {
     "message.regenerate": "Antwort neu generieren",
     "message.restoreFailed": "Wiederherstellung fehlgeschlagen ({{status}}).",
     "message.restoreQuestion": "Bis hierher wiederherstellen?",
+    "message.revertQuestion": "Zu diesem Punkt zurückkehren? Änderungen danach gehen verloren.",
     "message.restoreRequestFailed": "Wiederherstellungsanfrage fehlgeschlagen.",
     "message.threadNotFound": "Dieser Chat-Thread ist nicht mehr verfügbar. Starte einen neuen Chat oder versuche es erneut, falls das unerwartet war.",
     "message.restoring": "Wird wiederhergestellt...",
     "message.revertHere": "Bis hierher zurücksetzen",
+    "message.revertToBeginning": "Zum Anfang zurückkehren",
     "message.sentAt": "Gesendet {{time}}",
     "plan.act": "Ausführen",
     "plan.implement": "Umsetzen",

package/dist/localization/core-messages/en-US.d.ts

@@ -485,10 +485,12 @@ declare const messages: {
     readonly "message.regenerate": "Regenerate response";
     readonly "message.restoreFailed": "Restore failed ({{status}}).";
     readonly "message.restoreQuestion": "Restore to here?";
+    readonly "message.revertQuestion": "Revert to this point? Changes made after this point will be lost.";
     readonly "message.restoreRequestFailed": "Restore request failed.";
     readonly "message.threadNotFound": "This chat thread is no longer available. Start a new chat or retry if this was unexpected.";
     readonly "message.restoring": "Restoring...";
     readonly "message.revertHere": "Revert to here";
+    readonly "message.revertToBeginning": "Revert to beginning";
     readonly "message.sentAt": "Sent {{time}}";
     readonly "contextMeter.ariaLabel": "Context {{percent}}%, {{totalTokens}}{{breakdown}}. Open Context X-Ray.";
     readonly "contextMeter.breakdown": " total: {{systemTokens}} system + {{conversationTokens}} conversation";

package/dist/localization/core-messages/en-US.js

@@ -485,10 +485,12 @@ const messages = {
     "message.regenerate": "Regenerate response",
     "message.restoreFailed": "Restore failed ({{status}}).",
     "message.restoreQuestion": "Restore to here?",
+    "message.revertQuestion": "Revert to this point? Changes made after this point will be lost.",
     "message.restoreRequestFailed": "Restore request failed.",
     "message.threadNotFound": "This chat thread is no longer available. Start a new chat or retry if this was unexpected.",
     "message.restoring": "Restoring...",
     "message.revertHere": "Revert to here",
+    "message.revertToBeginning": "Revert to beginning",
     "message.sentAt": "Sent {{time}}",
     "contextMeter.ariaLabel": "Context {{percent}}%, {{totalTokens}}{{breakdown}}. Open Context X-Ray.",
     "contextMeter.breakdown": " total: {{systemTokens}} system + {{conversationTokens}} conversation",

package/dist/localization/core-messages/es-ES.js

@@ -258,10 +258,12 @@ const messages = {
     "message.regenerate": "Regenerar respuesta",
     "message.restoreFailed": "Error al restaurar ({{status}}).",
     "message.restoreQuestion": "¿Restaurar hasta aquí?",
+    "message.revertQuestion": "¿Volver a este punto? Se perderán los cambios posteriores.",
     "message.restoreRequestFailed": "Error en la solicitud de restauración.",
     "message.threadNotFound": "Este hilo de chat ya no está disponible. Inicia un chat nuevo o inténtalo de nuevo si esto no era esperado.",
     "message.restoring": "Restaurando...",
     "message.revertHere": "Revertir hasta aquí",
+    "message.revertToBeginning": "Volver al inicio",
     "message.sentAt": "Enviado a las {{time}}",
     "plan.act": "Actuar",
     "plan.implement": "Implementar",

package/dist/localization/core-messages/fr-FR.js

@@ -258,10 +258,12 @@ const messages = {
     "message.regenerate": "Régénérer la réponse",
     "message.restoreFailed": "Échec de la restauration ({{status}}).",
     "message.restoreQuestion": "Restaurer jusqu’ici ?",
+    "message.revertQuestion": "Revenir à ce point ? Les modifications ultérieures seront perdues.",
     "message.restoreRequestFailed": "Échec de la demande de restauration.",
     "message.threadNotFound": "Ce fil de discussion n’est plus disponible. Démarrez une nouvelle discussion ou réessayez si cela est inattendu.",
     "message.restoring": "Restauration...",
     "message.revertHere": "Revenir jusqu’ici",
+    "message.revertToBeginning": "Revenir au début",
     "message.sentAt": "Envoyé à {{time}}",
     "plan.act": "Agir",
     "plan.implement": "Implémenter",

package/dist/localization/core-messages/hi-IN.js

@@ -485,10 +485,12 @@ const messages = {
     "message.regenerate": "जवाब फिर से बनाएँ",
     "message.restoreFailed": "पुनर्स्थापना विफल रही ({{status}})।",
     "message.restoreQuestion": "यहाँ तक पुनर्स्थापित करें?",
+    "message.revertQuestion": "इस बिंदु पर वापस जाएँ? इसके बाद किए गए बदलाव खो जाएँगे।",
     "message.restoreRequestFailed": "पुनर्स्थापना अनुरोध विफल रहा।",
     "message.threadNotFound": "यह चैट थ्रेड अब उपलब्ध नहीं है। नई चैट शुरू करें या यदि यह अप्रत्याशित है तो फिर कोशिश करें।",
     "message.restoring": "पुनर्स्थापित किया जा रहा है...",
     "message.revertHere": "यहाँ तक वापस जाएँ",
+    "message.revertToBeginning": "शुरुआत पर वापस जाएँ",
     "message.sentAt": "{{time}} पर भेजा गया",
     "contextMeter.ariaLabel": "संदर्भ {{percent}}%, {{totalTokens}}{{breakdown}}। संदर्भ विश्लेषण खोलें।",
     "contextMeter.breakdown": " कुल: {{systemTokens}} सिस्टम + {{conversationTokens}} बातचीत",

package/dist/localization/core-messages/ja-JP.js

@@ -482,10 +482,12 @@ const messages = {
     "message.regenerate": "応答を再生成",
     "message.restoreFailed": "復元に失敗しました（{{status}}）。",
     "message.restoreQuestion": "ここまで復元しますか？",
+    "message.revertQuestion": "この時点に戻しますか？この後の変更は失われます。",
     "message.restoreRequestFailed": "復元リクエストに失敗しました。",
     "message.threadNotFound": "このチャットスレッドは利用できなくなりました。新しいチャットを開始するか、想定外の場合は再試行してください。",
     "message.restoring": "復元中...",
     "message.revertHere": "ここまで戻す",
+    "message.revertToBeginning": "最初に戻す",
     "message.sentAt": "{{time}} に送信",
     "contextMeter.ariaLabel": "コンテキスト {{percent}}%、合計 {{totalTokens}}{{breakdown}}。コンテキスト X-Ray を開きます。",
     "contextMeter.breakdown": "：システム {{systemTokens}} + 会話 {{conversationTokens}}",

package/dist/localization/core-messages/ko-KR.js

@@ -482,10 +482,12 @@ const messages = {
     "message.regenerate": "응답 다시 생성",
     "message.restoreFailed": "복원 실패({{status}}).",
     "message.restoreQuestion": "여기로 복원하시겠습니까?",
+    "message.revertQuestion": "이 지점으로 되돌릴까요? 이후 변경 사항은 사라집니다.",
     "message.restoreRequestFailed": "복원 요청에 실패했습니다.",
     "message.threadNotFound": "이 채팅 스레드는 더 이상 사용할 수 없습니다. 새 채팅을 시작하거나 예상치 못한 문제라면 다시 시도하세요.",
     "message.restoring": "복원 중...",
     "message.revertHere": "여기로 되돌리기",
+    "message.revertToBeginning": "처음으로 되돌리기",
     "message.sentAt": "{{time}}에 전송",
     "contextMeter.ariaLabel": "컨텍스트 {{percent}}%, 총 {{totalTokens}}{{breakdown}}. 컨텍스트 X-Ray를 엽니다.",
     "contextMeter.breakdown": ": 시스템 {{systemTokens}} + 대화 {{conversationTokens}}",

package/dist/localization/core-messages/pt-BR.js

@@ -258,10 +258,12 @@ const messages = {
     "message.regenerate": "Gerar resposta novamente",
     "message.restoreFailed": "Falha ao restaurar ({{status}}).",
     "message.restoreQuestion": "Restaurar até aqui?",
+    "message.revertQuestion": "Reverter para este ponto? As alterações feitas depois serão perdidas.",
     "message.restoreRequestFailed": "Falha na solicitação de restauração.",
     "message.threadNotFound": "Esta conversa não está mais disponível. Inicie uma nova conversa ou tente novamente se isso for inesperado.",
     "message.restoring": "Restaurando...",
     "message.revertHere": "Reverter até aqui",
+    "message.revertToBeginning": "Reverter ao início",
     "message.sentAt": "Enviado às {{time}}",
     "plan.act": "Agir",
     "plan.implement": "Implementar",

package/dist/localization/core-messages/zh-CN.js

@@ -482,10 +482,12 @@ const messages = {
     "message.regenerate": "重新生成响应",
     "message.restoreFailed": "恢复失败（{{status}}）。",
     "message.restoreQuestion": "恢复到此处？",
+    "message.revertQuestion": "还原到此处？此后所做的更改将会丢失。",
     "message.restoreRequestFailed": "恢复请求失败。",
     "message.threadNotFound": "此聊天线程已不可用。请开始新聊天；如果这是意外情况，也可以重试。",
     "message.restoring": "正在恢复...",
     "message.revertHere": "还原到此处",
+    "message.revertToBeginning": "还原到开头",
     "message.sentAt": "发送于 {{time}}",
     "contextMeter.ariaLabel": "上下文 {{percent}}%，共 {{totalTokens}}{{breakdown}}。打开上下文透视。",
     "contextMeter.breakdown": "：{{systemTokens}} 系统 + {{conversationTokens}} 对话",

package/dist/localization/core-messages/zh-TW.js

@@ -482,10 +482,12 @@ const messages = {
     "message.regenerate": "重新產生回應",
     "message.restoreFailed": "還原失敗（{{status}}）。",
     "message.restoreQuestion": "要還原到這裡嗎？",
+    "message.revertQuestion": "要還原到這裡嗎？之後所做的變更將會遺失。",
     "message.restoreRequestFailed": "還原要求失敗。",
     "message.threadNotFound": "此聊天串已無法使用。請開始新的聊天；如果這是意外情況，也可以重試。",
     "message.restoring": "正在還原...",
     "message.revertHere": "還原到這裡",
+    "message.revertToBeginning": "還原到開頭",
     "message.sentAt": "傳送於 {{time}}",
     "contextMeter.ariaLabel": "上下文 {{percent}}%，共 {{totalTokens}}{{breakdown}}。開啟上下文透視。",
     "contextMeter.breakdown": "：{{systemTokens}} 系統 + {{conversationTokens}} 對話",

package/dist/localization/core-messages.d.ts

@@ -487,10 +487,12 @@ export declare const englishAgentChatMessages: {
     readonly "message.regenerate": "Regenerate response";
     readonly "message.restoreFailed": "Restore failed ({{status}}).";
     readonly "message.restoreQuestion": "Restore to here?";
+    readonly "message.revertQuestion": "Revert to this point? Changes made after this point will be lost.";
     readonly "message.restoreRequestFailed": "Restore request failed.";
     readonly "message.threadNotFound": "This chat thread is no longer available. Start a new chat or retry if this was unexpected.";
     readonly "message.restoring": "Restoring...";
     readonly "message.revertHere": "Revert to here";
+    readonly "message.revertToBeginning": "Revert to beginning";
     readonly "message.sentAt": "Sent {{time}}";
     readonly "contextMeter.ariaLabel": "Context {{percent}}%, {{totalTokens}}{{breakdown}}. Open Context X-Ray.";
     readonly "contextMeter.breakdown": " total: {{systemTokens}} system + {{conversationTokens}} conversation";

package/dist/observability/routes.d.ts

@@ -41,16 +41,16 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
+    error?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
-    error?: undefined;
     ok?: undefined;
 } | {
+    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id: string;
-    error?: undefined;
     ok?: undefined;
 } | {
     summary?: undefined;
@@ -59,9 +59,9 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     error: any;
     ok?: undefined;
 } | {
+    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
-    error?: undefined;
     ok: boolean;
 }>>;

package/dist/progress/routes.d.ts

@@ -15,6 +15,6 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    ok: boolean;
     error?: undefined;
+    ok: boolean;
 }>>;

package/dist/secrets/routes.d.ts

@@ -57,37 +57,37 @@ export declare function createListSecretsHandler(): import("h3").EventHandlerWit
 /** POST /_agent-native/secrets/:key — write a secret. */
 export declare function createWriteSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
-    ok?: undefined;
     status?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     status: string;
+    error?: undefined;
 } | {
-    ok?: undefined;
     error: string;
     removed?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     removed: boolean;
+    error?: undefined;
 }>>;
 /**
  * POST /_agent-native/secrets/:key/test — validate an optional candidate value
  * or the current stored value without changing anything.
  */
 export declare function createTestSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
     note?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     note?: undefined;
-} | {
     error?: undefined;
+} | {
     ok: boolean;
     note: string;
+    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -119,11 +119,11 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
-    error?: undefined;
     ok: boolean;
     key: string;
-} | {
     error?: undefined;
+} | {
     ok: boolean;
     removed: boolean;
+    error?: undefined;
 }>>;

package/dist/server/agent-chat/plugin-options.d.ts

@@ -11,6 +11,8 @@ import type { AgentChatMcpIcon, AgentChatMcpOptions } from "./mcp-options.js";
  * startup and may register routes/hooks synchronously or asynchronously. */
 export type NitroPluginDef = (nitroApp: any) => void | Promise<void>;
 export interface AgentChatPluginOptions {
+    /** Best-effort app checkpoint taken before the first model generation. */
+    onAgentTurnStart?: (scope: AgentChatScope, run: Pick<ActiveRun, "threadId" | "runId">) => void | Promise<void>;
     /**
      * Best-effort app autosave hook. It runs after the chat thread has been
      * persisted and only when the run completed a side effect. Errors are

package/dist/server/agent-chat-plugin.d.ts

@@ -41,6 +41,7 @@ export { scheduledTriggerAvailability };
 export { shouldDisableRecurringJobsRuntime };
 export { finalizeClaimedAgentChatProcessRunFailure };
 export declare function runPostAgentTurnAutosave(callback: AgentChatPluginOptions["onAgentTurnComplete"] | undefined, scope: AgentChatScope | null | undefined, run: ActiveRun): Promise<void>;
+export declare function runPreAgentTurnAutosave(callback: AgentChatPluginOptions["onAgentTurnStart"] | undefined, scope: AgentChatScope | null | undefined, run: Pick<ActiveRun, "threadId" | "runId">): Promise<void>;
 /**
  * The model this mount runs with, when the caller does not pass one per request.
  *

package/dist/server/agent-chat-plugin.js

@@ -184,6 +184,30 @@ export async function runPostAgentTurnAutosave(callback, scope, run) {
         console.error("[agent-chat] post-agent-turn autosave failed:", error);
     }
 }
+export async function runPreAgentTurnAutosave(callback, scope, run) {
+    if (!callback || !scope)
+        return;
+    try {
+        await callback(scope, run);
+    }
+    catch (error) {
+        captureError(error, {
+            route: "agent-chat",
+            aiTraceId: run.runId,
+            tags: {
+                source: "agent-chat",
+                failureClass: "pre-agent-turn-autosave",
+            },
+            extra: {
+                runId: run.runId,
+                threadId: run.threadId,
+                scopeType: scope.type,
+                scopeId: scope.id,
+            },
+        });
+        console.error("[agent-chat] pre-agent-turn autosave failed:", error);
+    }
+}
 /**
  * The model this mount runs with, when the caller does not pass one per request.
  *
@@ -3266,6 +3290,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                         runCtx.threadId = threadId;
                         runCtx.runId = runId;
                     }
+                    await runPreAgentTurnAutosave(options?.onAgentTurnStart, runCtx?.chatScope, { threadId, runId });
                 },
                 onRunComplete: async (run, threadId) => {
                     if (threadId)
@@ -3524,6 +3549,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                             runCtx.threadId = threadId;
                             runCtx.runId = runId;
                         }
+                        await runPreAgentTurnAutosave(options?.onAgentTurnStart, runCtx?.chatScope, { threadId, runId });
                     },
                     onRunComplete: async (run, threadId) => {
                         if (threadId)

package/dist/server/agent-engine-api-key-route.d.ts

@@ -56,10 +56,10 @@ export declare function createAgentEngineApiKeyHandler(): import("h3").EventHand
     ok: boolean;
     error: string;
 } | {
-    error?: undefined;
     ok: boolean;
     key: string;
     baseUrlKey?: string;
     scope: AgentEngineApiKeyScope;
+    error?: undefined;
 }>>;
 export {};

package/dist/server/agent-engine-ollama-models-route.d.ts

@@ -5,11 +5,11 @@
  * static suggestion list in `model-config.ts`.
  */
 export declare function createAgentEngineOllamaModelsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
     models?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     models: string[];
+    error?: undefined;
 }>>;

package/dist/server/onboarding-html.js

@@ -2199,9 +2199,8 @@ ${marketingStyles}
       flex: none;
       width: 100%;
       min-height: auto;
-      padding: 2rem 1rem 5rem;
+      padding: 1.5rem 1.25rem;
       border-inline-start: 0;
-      border-top: 1px solid color-mix(in srgb, CanvasText 10%, transparent);
     }
     .auth-marketing-home .auth-marketing-layout { min-height: auto; }
     .auth-marketing-home .auth-marketing-shell { display: block; }
@@ -2434,6 +2433,10 @@ ${marketingStyles}
     }
   }
   @media (max-width: 900px) {
+    .auth-marketing-home {
+      min-height: 100vh;
+      min-height: 100svh;
+    }
     .auth-marketing-home .auth-marketing-shell-with-top-right {
       flex-direction: column;
     }
@@ -2455,11 +2458,31 @@ ${marketingStyles}
     }
     .auth-marketing-home .form-panel {
       order: 1;
-      padding: 3rem 1rem 5rem;
+      padding: max(1.5rem, env(safe-area-inset-top)) 1.25rem max(1.5rem, env(safe-area-inset-bottom));
       border-inline-start: 0;
-      border-top: 1px solid var(--auth-marketing-border);
     }
-    .auth-marketing-home .marketing-panel { order: 2; }
+    .auth-marketing-home .marketing-panel { display: none; }
+    .auth-marketing-home .card h1 {
+      font-size: clamp(1.625rem, 6vw, 2rem);
+      line-height: 1.15;
+      margin-bottom: 0.5rem;
+    }
+    .auth-marketing-home .card .subtitle {
+      margin-bottom: 1.5rem;
+      font-size: 1rem;
+      line-height: 1.4;
+    }
+    .auth-marketing-home .card .divider { margin: 1rem 0; }
+    .auth-marketing-home .card .legal-note { margin-top: 1.5rem; }
+    .auth-marketing-home .card input,
+    .auth-marketing-home .card button {
+      min-height: 2.75rem;
+    }
+    body.has-marketing .locale-trigger {
+      min-width: 2.75rem;
+      min-height: 2.75rem;
+    }
+    .auth-marketing-home .card input { font-size: 1rem; }
   }
 `;
     const authClientScriptPath = authClientAssetPath(appBasePath);

package/dist/vite/client.d.ts

@@ -81,7 +81,7 @@ declare function getReactRouterAliases(cwd: string): Array<{
 }>;
 declare function getDefaultOptimizeDeps(cwd: string): string[];
 export interface NitroOptions {
-    /** Nitro deployment preset (e.g. "node", "vercel", "netlify", "aws_amplify", "cloudflare_pages", "cloudflare_module"). Default: "node" */
+    /** Nitro deployment preset (e.g. "node", "vercel", "netlify", "aws_amplify", "cloudflare_module"). Default: "node" */
     preset?: string;
     /** Source directory for server files. Default: "./server" */
     srcDir?: string;

package/docs/content/a2a-protocol.mdx

@@ -280,7 +280,7 @@ When `message/send` is called with `async: true`, the JSON-RPC handler enqueues
 
 <Callout tone="warning">
 
-**Serverless webhook and gateway timeouts.** Hosted environment gateways (such as Netlify, Vercel, or Cloudflare Pages) impose strict execution limits (often 10 to 30 seconds) on public-facing HTTP routes. Because agent loops can take significant time to run queries, fetch context, and execute tools, you **must use `async: true`** when calling A2A endpoints or handling external webhooks. This immediately returns a `working` status to the API gateway, keeping the connection open only for a few milliseconds, while the self-fired `/process-task` POST executes the agent loop in the background. Do not block the primary HTTP request waiting for the agent loop to finish.
+**Serverless webhook and gateway timeouts.** Hosted environment gateways (such as Netlify, Vercel, or Cloudflare Workers) impose strict execution limits (often 10 to 30 seconds) on public-facing HTTP routes. Because agent loops can take significant time to run queries, fetch context, and execute tools, you **must use `async: true`** when calling A2A endpoints or handling external webhooks. This immediately returns a `working` status to the API gateway, keeping the connection open only for a few milliseconds, while the self-fired `/process-task` POST executes the agent loop in the background. Do not block the primary HTTP request waiting for the agent loop to finish.
 
 </Callout>
 
@@ -641,7 +641,7 @@ The agent card endpoint is always public (no auth) so other agents can discover
 
 Bearer validation runs at the request boundary — in the JSON-RPC handler — before the agent loop ever sees the message. The shared helpers in `packages/core/src/a2a/auth-policy.ts` decide what the deployment requires:
 
-- `isA2AProductionRuntime()` returns `true` on Netlify, AWS Lambda, Cloudflare Pages/Workers, Vercel, Render, Fly, and Cloud Run — even when `NODE_ENV` isn't `"production"`. Some serverless providers don't set `NODE_ENV` consistently, so the policy reads provider-specific flags too.
+- `isA2AProductionRuntime()` returns `true` on Netlify, AWS Lambda, Cloudflare Workers, Vercel, Render, Fly, and Cloud Run — even when `NODE_ENV` isn't `"production"`. Some serverless providers don't set `NODE_ENV` consistently, so the policy reads provider-specific flags too.
 - `hasConfiguredA2ASecret()` returns `true` when `A2A_SECRET` is set.
 - `shouldAdvertiseJwtA2AAuth()` is what the agent card uses to decide whether to publish a `jwtBearer` security scheme.
 

package/docs/content/cloudflare.mdx

@@ -1,18 +1,10 @@
 ---
 title: "Cloudflare"
-description: "Deploy an agent-native app to Cloudflare Pages or Cloudflare Workers with the matching Nitro preset."
+description: "Deploy an agent-native app to Cloudflare Workers with the cloudflare_module Nitro preset."
 ---
 
 # Cloudflare
 
-## Cloudflare Pages {#cloudflare-pages}
-
-```ts filename="vite.config.ts"
-export default defineConfig({
-  plugins: [agentNative({ nitro: { preset: "cloudflare_pages" } })],
-});
-```
-
 ## Cloudflare Workers {#cloudflare-workers}
 
 Use Nitro's native module output for a Cloudflare Worker. This keeps SSR
@@ -39,5 +31,5 @@ before deploying. A Worker filesystem is not a persistent application store.
 ## What's next
 
 - [**Deployment**](/docs/deployment) — pick a persistent database and a preset before your first production deploy
-- [**Workspace Deployment**](/docs/workspace-deployment) — Cloudflare Pages is the default preset for the unified `deploy` command
+- [**Workspace Deployment**](/docs/workspace-deployment) — deploy every workspace app to one origin with Netlify or Vercel
 - [**Node.js**](/docs/node-js), [**Docker**](/docs/docker), [**Vercel**](/docs/vercel), [**Netlify**](/docs/netlify), [**AWS Lambda**](/docs/aws-lambda), and [**Deno Deploy**](/docs/deno-deploy) — the other Nitro presets

package/docs/content/deploy-an-app.mdx

@@ -44,7 +44,6 @@ See the target page for the provider command and runtime details:
 - [**Docker**](/docs/docker)
 - [**Vercel**](/docs/vercel)
 - [**Netlify**](/docs/netlify)
-- [**Cloudflare Pages**](/docs/cloudflare#cloudflare-pages)
 - [**Cloudflare Workers**](/docs/cloudflare#cloudflare-workers)
 - [**AWS Amplify**](/docs/aws-amplify)
 - [**AWS Lambda**](/docs/aws-lambda)

package/docs/content/deployment.mdx

@@ -84,7 +84,7 @@ contract stay the same.
 
 <!-- i18n-copy-ignore: renderer-only Diagram attributes keep this shared UI block in clean mode. -->
 
-<Diagram id="doc-block-deployment-targets" title="Supported deployment targets" summary="Agent-Native apps can deploy to Node.js, Docker, Vercel, Netlify, Cloudflare Pages, Cloudflare Workers, AWS Amplify, AWS Lambda, Deno Deploy, Azure Static Web Apps, Koyeb, and Render." frame="hide" renderMode="design">
+<Diagram id="doc-block-deployment-targets" title="Supported deployment targets" summary="Agent-Native apps can deploy to Node.js, Docker, Vercel, Netlify, Cloudflare Workers, AWS Amplify, AWS Lambda, Deno Deploy, Azure Static Web Apps, Koyeb, and Render." frame="hide" renderMode="design">
 
 ```html
 <!-- i18n-copy-ignore: deployment target logo markup is visual-only; labels are unchanged. -->
@@ -127,16 +127,21 @@ contract stay the same.
   </a>
   <a class="deployment-target" href="/docs/netlify">
     <span class="deployment-target-mark">
-      <img src="/integration-logos/netlify.svg" alt="" />
+      <!-- i18n-copy-ignore: Netlify's light/dark logo pair is image markup; localized deployment pages have no logo grid. -->
+      <img
+        class="deployment-target-logo deployment-target-logo-light"
+        src="/integration-logos/netlify.svg"
+        alt=""
+      />
+      <img
+        class="deployment-target-logo deployment-target-logo-dark"
+        src="/integration-logos/netlify-darkmode.svg"
+        alt=""
+        aria-hidden="true"
+      />
     </span>
     <strong>Netlify</strong>
   </a>
-  <a class="deployment-target" href="/docs/cloudflare#cloudflare-pages">
-    <span class="deployment-target-mark">
-      <img src="/integration-logos/cloudflare.svg" alt="" />
-    </span>
-    <strong>Cloudflare Pages</strong>
-  </a>
   <a class="deployment-target" href="/docs/cloudflare#cloudflare-workers">
     <span class="deployment-target-mark">
       <img src="/integration-logos/cloudflare.svg" alt="" />
@@ -282,7 +287,7 @@ settings or production controls:
 
 - [**Node.js**](/docs/node-js) - run the default Nitro server preset
 - [**Docker**](/docs/docker) - package the Node.js server in a container
-- [**Vercel**](/docs/vercel), [**Netlify**](/docs/netlify), [**Cloudflare Pages**](/docs/cloudflare#cloudflare-pages), and [**Cloudflare Workers**](/docs/cloudflare#cloudflare-workers) - configure hosted targets
+- [**Vercel**](/docs/vercel), [**Netlify**](/docs/netlify), and [**Cloudflare Workers**](/docs/cloudflare#cloudflare-workers) - configure hosted targets
 - [**AWS Amplify**](/docs/aws-amplify) and [**AWS Lambda**](/docs/aws-lambda) - deploy Nitro's serverless output on AWS
 - [**Deno Deploy**](/docs/deno-deploy) - deploy to the Deno runtime
 - [**Azure Static Web Apps**](/docs/azure-static-web-apps), [**Koyeb**](/docs/koyeb), and [**Render**](/docs/render) - use additional Nitro providers

package/docs/content/environment-variables.mdx

@@ -72,7 +72,7 @@ public app behavior, use the config paths above instead.
 | `BETTER_AUTH_TRUSTED_ORIGINS`                  | Exact browser origins trusted by Better Auth, including configured host aliases.                                                                                               | A comma-separated list of absolute `http(s)` origins; wildcards are not accepted.                                       |
 | `APP_BASE_PATH`                                | Mounts an app under a path such as `/mail`.                                                                                                                                    | Unset for a standalone app, or a slash-prefixed path.                                                                   |
 | `PORT`                                         | Local Node/Nitro server port.                                                                                                                                                  | A decimal TCP port.                                                                                                     |
-| `NITRO_PRESET`                                 | Build and deployment adapter.                                                                                                                                                  | A preset supported by the target host, such as `node`, `netlify`, `vercel`, or `cloudflare_pages`.                      |
+| `NITRO_PRESET`                                 | Build and deployment adapter.                                                                                                                                                  | A preset supported by the target host, such as `node`, `netlify`, `vercel`, or `cloudflare_module`.                     |
 | `BETTER_AUTH_SECRET`                           | Stable Better Auth session signing secret for standalone production apps. Workspace deploys can derive it from `A2A_SECRET`.                                                   | A fresh random value of at least 32 characters.                                                                         |
 | `OAUTH_STATE_SECRET`                           | Dedicated signing key for OAuth state envelopes. Falls back to `BETTER_AUTH_SECRET` when unset.                                                                                | A fresh random value of at least 32 characters.                                                                         |
 | `A2A_SECRET`                                   | Shared HMAC for trusted cross-app A2A calls and signed handoffs.                                                                                                               | One shared random value across trusted apps.                                                                            |

package/docs/content/multi-app-workspace.mdx

@@ -304,7 +304,7 @@ Brand colors, typography, spacing scales, and any shared component classes can l
 
 ## Deployment {#deployment}
 
-You have two options: **unified deploy** (the default for workspaces) or per-app independent deploy. [Workspace Deployment — One Origin, Many Apps](/docs/workspace-deployment#workspace-deploy) covers the full command, per-preset details (Cloudflare, Netlify, Vercel), and a diagram of the shape; the tradeoff:
+You have two options: **unified deploy** (the default for workspaces) or per-app independent deploy. [Workspace Deployment — One Origin, Many Apps](/docs/workspace-deployment#workspace-deploy) covers the full command, per-preset details (Netlify and Vercel), and a diagram of the shape; the tradeoff:
 
 - **Unified deploy (recommended)** — `npx @agent-native/core@latest deploy` builds every app in the workspace and ships them behind a single origin, one path per app (`your-agents.com/mail/*`, `/calendar/*`, ...). Being on the same origin is where the real payoff lives: a shared login session (log into any app, every app is logged in), zero-config cross-app A2A (`@mail` tagging `@calendar` is a same-origin fetch — no CORS, no JWT signing between siblings), and one DNS record, cert, and CDN cache to manage.
 - **Per-app independent deploy** — prefer each app on its own domain (`mail.company.com`, `calendar.company.com`)? Every app in the workspace is still an independent deployable — `cd apps/mail && pnpm build` behaves exactly like a standalone scaffold. Cross-app A2A then goes through the standard JWT-signed path with a shared `A2A_SECRET`. Cross-domain SSO between separately-deployed apps is handled by identity federation with Dispatch as the hub — see [Cross-App SSO](/docs/cross-app-sso); the unified single-origin deploy avoids needing it. For a self-hosted VPS or Docker Compose setup on one origin instead, see [Workspace Deployment — Self-hosted Workspace with Docker Compose](/docs/workspace-deployment#workspace-docker-compose).

package/docs/content/netlify.mdx

@@ -5,7 +5,7 @@ description: "Deploy an agent-native app to Netlify with the Netlify Nitro prese
 
 # Netlify
 
-The Nitro `netlify` preset works well and, in practice, has given us much faster cold starts than Cloudflare Pages (~200ms TTFB vs ~9s) for templates that talk to external Postgres (Neon). For a minimal configuration outside the generated scaffold, set the preset in `vite.config.ts`:
+The Nitro `netlify` preset works well and, in practice, has given us much faster cold starts (~200ms TTFB) for templates that talk to external Postgres (Neon). For a minimal configuration outside the generated scaffold, set the preset in `vite.config.ts`:
 
 ```ts filename="vite.config.ts"
 export default defineConfig({

package/docs/content/real-time-collaboration.mdx

@@ -640,12 +640,12 @@ Nothing here happens on a deployment that has not set it.
 The deployment must also already satisfy four things, all of which a normal
 production app does:
 
-| Requirement                                                    | Why                                                                                                                                                                             | How to check                                                                                                                                                                           |
-| -------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| **Postgres on a publicly reachable host**                      | The gateway dials the database from its own network. PGlite, `localhost`, `*.internal` and bare IP addresses are refused before the connection string ever leaves your machine. | `DATABASE_URL` points at a managed Postgres such as Neon                                                                                                                               |
-| **`BUILDER_PRIVATE_KEY` set as a DEPLOY environment variable** | This authenticates the registration and decides which Builder organization owns the channel.                                                                                    | See the note below — this is the step people miss                                                                                                                                      |
-| **A production deploy**                                        | Deploy previews keep local sync, so a throwaway branch credential never leaves the machine and a busy repo does not mint one channel per pull request.                          | `CONTEXT=production` / `BRANCH=production`, or `VERCEL_ENV=production`                                                                                                                 |
-| **The platform identifies the deployment**                     | Registration is keyed on the app's public origin, so a process that is not actually the deployment must not claim it.                                                           | Netlify, Vercel, AWS Lambda, Cloud Run, Render and Cloudflare Pages all mark themselves. On a bare container or VM, set `AGENT_NATIVE_REALTIME_APP_URL` to the deployment's own origin |
+| Requirement                                                    | Why                                                                                                                                                                             | How to check                                                                                                                                                                                                            |
+| -------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| **Postgres on a publicly reachable host**                      | The gateway dials the database from its own network. PGlite, `localhost`, `*.internal` and bare IP addresses are refused before the connection string ever leaves your machine. | `DATABASE_URL` points at a managed Postgres such as Neon                                                                                                                                                                |
+| **`BUILDER_PRIVATE_KEY` set as a DEPLOY environment variable** | This authenticates the registration and decides which Builder organization owns the channel.                                                                                    | See the note below — this is the step people miss                                                                                                                                                                       |
+| **A production deploy**                                        | Deploy previews keep local sync, so a throwaway branch credential never leaves the machine and a busy repo does not mint one channel per pull request.                          | `CONTEXT=production` / `BRANCH=production`, or `VERCEL_ENV=production`                                                                                                                                                  |
+| **The platform identifies the deployment**                     | Registration is keyed on the app's public origin, so a process that is not actually the deployment must not claim it.                                                           | Netlify, Vercel, AWS Lambda, Cloud Run, and Render mark themselves. Cloudflare Workers do not, so set `AGENT_NATIVE_REALTIME_APP_URL` to the deployment's own origin. On a bare container or VM, set that same variable |
 
 <Callout tone="warning">