@agent-native/core 0.88.0 → 0.90.1

package/corpus/core/src/deploy/build.ts

@@ -234,6 +234,38 @@ export const CLOUDFLARE_WORKER_NODE_BUILTIN_STUB_MODULES: Record<
     "worker",
     "workers",
   ]),
+  console: [
+    "const globalConsole = globalThis.console;",
+    "const bind = (name) => typeof globalConsole?.[name] === 'function' ? globalConsole[name].bind(globalConsole) : () => undefined;",
+    "export class Console {",
+    "  constructor() { return globalConsole; }",
+    "}",
+    "export const assert = bind('assert');",
+    "export const clear = bind('clear');",
+    "export const count = bind('count');",
+    "export const countReset = bind('countReset');",
+    "export const debug = bind('debug');",
+    "export const dir = bind('dir');",
+    "export const dirxml = bind('dirxml');",
+    "export const error = bind('error');",
+    "export const group = bind('group');",
+    "export const groupCollapsed = bind('groupCollapsed');",
+    "export const groupEnd = bind('groupEnd');",
+    "export const info = bind('info');",
+    "export const log = bind('log');",
+    "export const profile = bind('profile');",
+    "export const profileEnd = bind('profileEnd');",
+    "export const table = bind('table');",
+    "export const time = bind('time');",
+    "export const timeEnd = bind('timeEnd');",
+    "export const timeLog = bind('timeLog');",
+    "export const timeStamp = bind('timeStamp');",
+    "export const trace = bind('trace');",
+    "export const warn = bind('warn');",
+    "export { globalConsole as console };",
+    "export default globalConsole;",
+    "",
+  ].join("\n"),
   dgram: cloudflareNodeBuiltinStubSource("dgram", ["createSocket"]),
   dns: cloudflareNodeBuiltinStubSource("dns", [
     "lookup",
@@ -2991,6 +3023,7 @@ export default bundle;
             "util",
             "events",
             "buffer",
+            "console",
             "net",
             "tls",
             "assert",
@@ -3173,6 +3206,7 @@ export default bundle;
           "util",
           "events",
           "buffer",
+          "console",
           "querystring",
           "zlib",
           "net",

package/corpus/core/src/extensions/actions.ts

@@ -260,7 +260,7 @@ export function createExtensionActionEntries(): Record<string, ActionEntry> {
     "render-inline-extension": {
       tool: {
         description:
-          "Render a one-time, transient sandboxed Alpine.js mini-app directly inside the chat. Use this for generated UI that should answer the current turn inline without saving anything to the Extensions view: calculators, adjustable controls, knobs, pickers, visualizers, temporary dashboards, and interactive results. The content must be a self-contained Alpine.js HTML body snippet that can use appAction(), appFetch(), dbQuery(), dbExec(), extensionFetch(), extensionData, agentNative.ui.output(value, opts?), and agentNative.chat.send()/sendToAgentChat(). Use agentNative.ui.output for passive current values from knobs, sliders, and selections; it writes application state at inline-ui:<inline extension id>:output, which the agent can read later with readAppState when the user says to use that value. Use agentNative.chat.send for visible submit/apply actions. For transient UIs, extensionData is browser-local throwaway state; use application_state/appFetch, appAction, ui.output, or chat.send for anything the agent or app must observe. Use semantic Tailwind colors (bg-background, text-foreground, bg-primary, etc.) so it inherits the parent app theme. Use create-extension instead when the user wants the UI saved or reusable.",
+          "Render a one-time, transient sandboxed Alpine.js mini-app directly inside the chat. Use this for generated UI that should answer the current turn inline without saving anything to the Extensions view: calculators, adjustable controls, knobs, pickers, visualizers, temporary dashboards, and interactive results. The content must be a self-contained Alpine.js HTML body snippet that can use appAction(), appFetch(), dbQuery(), extensionFetch(), extensionData, agentNative.ui.output(value, opts?), and agentNative.chat.send()/sendToAgentChat(). Use appAction() or extensionData for writes; dbQuery() is for read-only inspection of known app SQL tables. Use agentNative.ui.output for passive current values from knobs, sliders, and selections; it writes application state at inline-ui:<inline extension id>:output, which the agent can read later with readAppState when the user says to use that value. Use agentNative.chat.send for visible submit/apply actions. For transient UIs, extensionData is browser-local throwaway state; use application_state/appFetch, appAction, ui.output, or chat.send for anything the agent or app must observe. Use semantic Tailwind colors (bg-background, text-foreground, bg-primary, etc.) so it inherits the parent app theme. Use create-extension instead when the user wants the UI saved or reusable.",
         parameters: {
           type: "object",
           properties: {
@@ -446,7 +446,7 @@ export function createExtensionActionEntries(): Record<string, ActionEntry> {
     "create-extension": {
       tool: {
         description:
-          'Create a persisted sandboxed Alpine.js mini-app extension and render it inline in the chat. Use this when the user wants generated UI that should be saved, reusable, or visible in the Extensions view: extensions, widgets, dashboards, calculators, mini-apps, and reusable interactive utilities. For one-time chat-only UI, use render-inline-extension instead. The content must be a self-contained Alpine.js HTML body snippet that can use appAction(), appFetch(), dbQuery(), dbExec(), extensionFetch(), extensionData, agentNative.ui.output(value, opts?), and agentNative.chat.send()/sendToAgentChat(). Use agentNative.ui.output for passive current values from knobs, sliders, and selections; it writes application state at inline-ui:<extension id>:output, which the agent can read later with readAppState when the user says to use that value. Use agentNative.chat.send for visible submit/apply actions. Persist reusable user-edited state with extensionData: if the extension has checkboxes, todos, notes, filters, preferences, or any control whose value should survive reload/reopen, load that state on init and save changes with extensionData, usually at user scope, instead of keeping it only in Alpine state. IMPORTANT — hosting a pasted file: if the user pasted a large HTML/Alpine file (it appears in your context as an <attachment name="pasted-text-…"> block) and asked you to host it as-is, do NOT copy that file into `content`. Instead leave `content` empty and pass `contentFromAttachment` set to that attachment\'s name (or the literal "latest" for the most recent pasted block) — the server reads the file verbatim. Re-emitting a large pasted file as `content` regularly gets cut off mid-stream and stalls the turn. Prefer appAction(name, params) for app data and actions, including read actions mounted as GET; do not call template /api/* routes from appFetch because the extension bridge only allows framework /_agent-native/* paths. Parse JSON string action results before aggregating; use dbQuery()/dbExec() only for known existing SQL tables. Keep the initial create-extension payload compact and working; for complex extensions, create a useful v1 first, then use focused update-extension edits for refinements rather than assembling one enormous initial tool input. For any non-trivial component (more than a couple of state fields, any methods, any string formatting, any branching) put the component in a <script> block via Alpine.data(\'name\', () => ({...})) and reference it with x-data="name" — do NOT cram methods, template literals, or branching logic into an inline x-data="{...}" attribute (HTML parser pitfalls cause ReferenceError failures). Define every variable referenced from x-text/x-show/x-if/x-for on the data object\'s initial state. If the extension\'s value depends on an LLM call, require a real key via \\${keys.OPENAI_API_KEY}/\\${keys.ANTHROPIC_API_KEY} (and tell the user to add it in the Dispatch Vault, or in app Settings → API Keys & Connections for standalone apps, if missing) or route the AI work to the agent chat — never ship a stubbed analysis step that renders a placeholder/boolean as the result.',
+          'Create a persisted sandboxed Alpine.js mini-app extension and render it inline in the chat. Use this when the user wants generated UI that should be saved, reusable, or visible in the Extensions view: extensions, widgets, dashboards, calculators, mini-apps, and reusable interactive utilities. For one-time chat-only UI, use render-inline-extension instead. The content must be a self-contained Alpine.js HTML body snippet that can use appAction(), appFetch(), dbQuery(), extensionFetch(), extensionData, agentNative.ui.output(value, opts?), and agentNative.chat.send()/sendToAgentChat(). Use appAction() for app data writes and extensionData for extension-owned persisted UI state; dbQuery() is for read-only inspection of known app SQL tables. Use agentNative.ui.output for passive current values from knobs, sliders, and selections; it writes application state at inline-ui:<extension id>:output, which the agent can read later with readAppState when the user says to use that value. Use agentNative.chat.send for visible submit/apply actions. Persist reusable user-edited state with extensionData: if the extension has checkboxes, todos, notes, filters, preferences, or any control whose value should survive reload/reopen, load that state on init and save changes with extensionData, usually at user scope, instead of keeping it only in Alpine state. IMPORTANT — hosting a pasted file: if the user pasted a large HTML/Alpine file (it appears in your context as an <attachment name="pasted-text-…"> block) and asked you to host it as-is, do NOT copy that file into `content`. Instead leave `content` empty and pass `contentFromAttachment` set to that attachment\'s name (or the literal "latest" for the most recent pasted block) — the server reads the file verbatim. Re-emitting a large pasted file as `content` regularly gets cut off mid-stream and stalls the turn. Prefer appAction(name, params) for app data and actions, including read actions mounted as GET; do not call template /api/* routes from appFetch because the extension bridge only allows framework /_agent-native/* paths. Parse JSON string action results before aggregating; use dbQuery() only for known existing SQL tables and never for writes. Keep the initial create-extension payload compact and working; for complex extensions, create a useful v1 first, then use focused update-extension edits for refinements rather than assembling one enormous initial tool input. For any non-trivial component (more than a couple of state fields, any methods, any string formatting, any branching) put the component in a <script> block via Alpine.data(\'name\', () => ({...})) and reference it with x-data="name" — do NOT cram methods, template literals, or branching logic into an inline x-data="{...}" attribute (HTML parser pitfalls cause ReferenceError failures). Define every variable referenced from x-text/x-show/x-if/x-for on the data object\'s initial state. If the extension\'s value depends on an LLM call, require a real key via \\${keys.OPENAI_API_KEY}/\\${keys.ANTHROPIC_API_KEY} (and tell the user to add it in the Dispatch Vault, or in app Settings → API Keys & Connections for standalone apps, if missing) or route the AI work to the agent chat — never ship a stubbed analysis step that renders a placeholder/boolean as the result.',
         parameters: {
           type: "object",
           properties: {

package/corpus/core/src/file-upload/builder.ts

@@ -13,6 +13,14 @@ const LARGE_FILE_THRESHOLD_BYTES = 30 * 1024 * 1024;
 const UPLOAD_TIMEOUT_MS = 120_000;
 const SMALL_FILE_RETRY_DELAYS_MS = [600, 1800];
 
+function enabledFlag(value: unknown): boolean {
+  return /^(true|1|yes|on)$/i.test(String(value || "").trim());
+}
+
+function stableUrlOptInEnabled(): boolean {
+  return enabledFlag(process.env.CLIPS_STABLE_URL_OPTIN);
+}
+
 function builderUploadHost(): string {
   return (
     process.env.BUILDER_APP_HOST ||
@@ -47,6 +55,9 @@ function fetchWithTimeout(url: string, init: RequestInit): Promise<Response> {
 function setSkipCompressionQueryParams(url: URL): void {
   url.searchParams.set("skipCompressionWait", "true");
   url.searchParams.set("skipCompression", "true");
+  if (stableUrlOptInEnabled()) {
+    url.searchParams.set("stableUrl", "true");
+  }
 }
 
 async function assertOk(res: Response, label: string): Promise<void> {

package/corpus/core/src/integrations/webhook-handler.ts

@@ -25,7 +25,10 @@ import {
   type ActionEntry,
 } from "../agent/production-agent.js";
 import { startRun, type ActiveRun } from "../agent/run-manager.js";
-import { buildRuntimeContextPrompt } from "../agent/runtime-context.js";
+import {
+  buildCurrentTimeUserContext,
+  buildRuntimeContextPrompt,
+} from "../agent/runtime-context.js";
 import {
   buildAssistantMessage,
   extractThreadMeta,
@@ -145,22 +148,30 @@ export async function resolveIntegrationApiKey(
   ownerEmail: string,
   fallbackApiKey: string,
 ): Promise<string | undefined> {
-  const canUseDeployFallback = canUseDeployCredentialFallbackForRequest();
   const engineName = explicitEngineName(engineOption);
   if (engineName) {
     const provider = engineToProvider(engineName);
     const userApiKey = await getOwnerApiKey(provider, ownerEmail);
     if (userApiKey) return userApiKey;
-    if (!canUseDeployFallback) return undefined;
     const envVar = PROVIDER_TO_ENV[provider];
-    const providerEnvKey = envVar ? readDeployCredentialEnv(envVar) : undefined;
-    return providerEnvKey || fallbackApiKey.trim() || undefined;
+    const providerEnvKey =
+      envVar && canUseDeployCredentialFallbackForRequest(envVar)
+        ? readDeployCredentialEnv(envVar)
+        : undefined;
+    return (
+      providerEnvKey ||
+      (canUseDeployCredentialFallbackForRequest("ANTHROPIC_API_KEY")
+        ? fallbackApiKey.trim()
+        : "") ||
+      undefined
+    );
   }
 
   const userApiKey = await getOwnerActiveApiKey(ownerEmail);
   if (userApiKey) return userApiKey;
-  if (!canUseDeployFallback) return undefined;
-  return fallbackApiKey.trim() || undefined;
+  return canUseDeployCredentialFallbackForRequest("ANTHROPIC_API_KEY")
+    ? fallbackApiKey.trim() || undefined
+    : undefined;
 }
 
 /**
@@ -520,9 +531,17 @@ async function processIncomingMessage(
       ? `<integration-context>\n${identityLines.join("\n")}\n</integration-context>\n\n${incoming.text}`
       : incoming.text;
 
+  // Precise current time rides the engine-facing user message (not the cached
+  // system-prompt prefix, and not the persisted thread text) — the runtime
+  // context appended to the system prompt is day-granular only.
   const messages: EngineMessage[] = [
     ...existingMessages,
-    { role: "user", content: [{ type: "text", text: userText }] },
+    {
+      role: "user",
+      content: [
+        { type: "text", text: userText + buildCurrentTimeUserContext() },
+      ],
+    },
   ];
 
   // Run agent loop via startRun, wrapped in a request context so that

package/corpus/core/src/local-artifacts/index.ts

@@ -431,7 +431,7 @@ function mergeAppConfig(
     mode: manifestApp?.mode ?? defaults?.mode,
     profile: manifestApp?.profile ?? defaults?.profile,
     roots:
-      manifestApp?.roots && manifestApp.roots.length > 0
+      manifestApp?.roots !== undefined
         ? manifestApp.roots
         : (defaults?.roots ?? []),
     components: manifestApp?.components ?? defaults?.components,

package/corpus/core/src/localization/default-messages.ts

@@ -293,7 +293,6 @@ const messages = {
       'Create a new widget that fits in slot "{{slotId}}". I\'ll describe what it should do next.',
     whatShouldItDo: "What should it do?",
     createPlaceholder: "A todo list, API dashboard, calculator...",
-    backToApp: "Back to app",
     title: "Extensions",
     hiddenShown: "Hiding shown",
     showHidden: "Show hidden",
@@ -474,7 +473,7 @@ const messages = {
     toolsAvailable_one: "{{count}} tool available",
     toolsAvailable_other: "{{count}} tools available",
     failed: "Failed",
-    docsLabel: "{{name}} docs",
+    docsLabel: "View {{name}} docs",
     catalog: {
       context7: {
         description: "Fetch current library docs in agent chats.",

package/corpus/core/src/mcp-client/index.ts

@@ -104,12 +104,14 @@ import {
 } from "@modelcontextprotocol/ext-apps/app-bridge";
 
 import { MCP_APP_MIME_TYPE } from "../action.js";
+import type { EngineToolResultImagePart } from "../agent/engine/types.js";
 /**
  * Convert MCP tools into `ActionEntry` values suitable for registration in
  * the agent's action registry. Each tool is marked `http: false` so it's
  * never auto-mounted as an HTTP endpoint — MCP tools are agent-only.
  */
 import type { ActionEntry } from "../agent/production-agent.js";
+import { normalizeToolResultImages } from "../agent/tool-result-images.js";
 import {
   MCP_ACTION_RESULT_MARKER,
   toolForMcpAppPayload,
@@ -252,6 +254,33 @@ function hasStructuredContent(result: unknown): boolean {
   );
 }
 
+/**
+ * Extract vision images from a raw MCP tool result so the model can SEE
+ * screenshots/previews returned by external MCP tools instead of only the
+ * `[image: <mime>]` placeholder that `flattenMcpToolResult` leaves in the
+ * text. Shares the per-result caps with `_agentImages` (max count, max base64
+ * size); over-cap or unsupported images stay placeholder-only. Never throws.
+ */
+export function extractMcpToolResultImages(
+  result: unknown,
+): EngineToolResultImagePart[] {
+  if (
+    !result ||
+    typeof result !== "object" ||
+    !Array.isArray((result as any).content) ||
+    (result as any).isError
+  ) {
+    return [];
+  }
+  const candidates = ((result as any).content as Array<Record<string, any>>)
+    .filter((part) => part?.type === "image" && typeof part.data === "string")
+    .map((part) => ({
+      data: part.data as string,
+      mediaType: typeof part.mimeType === "string" ? part.mimeType : undefined,
+    }));
+  return normalizeToolResultImages(candidates).images;
+}
+
 async function buildMcpActionResult(
   manager: McpClientManager,
   tool: McpTool,

package/corpus/core/src/onboarding/default-steps.ts

@@ -132,8 +132,11 @@ const llmStep: OnboardingStep = {
       // Fall through to legacy/env detection.
     }
     if (
-      canUseDeployCredentialFallbackForRequest() &&
-      PROVIDER_ENV_VARS.some((k) => !!readDeployCredentialEnv(k))
+      PROVIDER_ENV_VARS.some(
+        (k) =>
+          canUseDeployCredentialFallbackForRequest(k) &&
+          !!readDeployCredentialEnv(k),
+      )
     ) {
       return true;
     }

package/corpus/core/src/resources/store.ts

@@ -143,6 +143,31 @@ Keep this file tidy — revise, consolidate, and remove outdated entries. Don't
 ## Patterns
 `;
 
+/**
+ * Read the project-root learnings seed file for the shared LEARNINGS.md
+ * resource. Prefers `learnings.md` (scaffolded by `create.ts`, possibly
+ * customized locally), then the checked-in `learnings.defaults.md` — the
+ * scaffolded copy is gitignored, so production deploys built from git only
+ * carry the defaults file. Returns null when neither file is present, both
+ * are empty, or fs is unavailable (e.g. edge runtimes) so seeding falls back
+ * to the built-in default. Only consulted on first insert (INSERT OR IGNORE),
+ * so an existing LEARNINGS.md resource is never overwritten.
+ */
+async function readProjectRootLearningsSeed(): Promise<string | null> {
+  try {
+    const [fs, path] = await Promise.all([import("fs"), import("path")]);
+    for (const name of ["learnings.md", "learnings.defaults.md"]) {
+      const filePath = path.resolve(process.cwd(), name);
+      if (!fs.existsSync(filePath)) continue;
+      const content = fs.readFileSync(filePath, "utf-8");
+      if (content.trim()) return content;
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+
 const DEFAULT_LEARNINGS_PERSONAL_MD = `# My Learnings
 
 Personal preferences, corrections, and patterns — only visible to you.
@@ -849,15 +874,21 @@ async function _doEnsureTable(): Promise<void> {
     ],
   });
 
-  // LEARNINGS.md — shared learnings (preferences, corrections, patterns)
-  const learningsSize = Buffer.byteLength(DEFAULT_LEARNINGS_SHARED_MD, "utf8");
+  // LEARNINGS.md — shared learnings (preferences, corrections, patterns).
+  // Prefer the project-root learnings.md (scaffolded from the template's
+  // learnings.defaults.md) so template-authored defaults reach the prompt
+  // without a manual migrate-learnings step. INSERT OR IGNORE means this only
+  // applies on first seed — existing LEARNINGS.md content is never overwritten.
+  const learningsSeedContent =
+    (await readProjectRootLearningsSeed()) ?? DEFAULT_LEARNINGS_SHARED_MD;
+  const learningsSize = Buffer.byteLength(learningsSeedContent, "utf8");
   await client.execute({
     sql: seedSql,
     args: [
       crypto.randomUUID(),
       "LEARNINGS.md",
       SHARED_OWNER,
-      DEFAULT_LEARNINGS_SHARED_MD,
+      learningsSeedContent,
       "text/markdown",
       learningsSize,
       now,

package/corpus/core/src/scripts/agent-engines/list-agent-engines.ts

@@ -15,7 +15,6 @@ import {
   normalizeModelForEngine,
 } from "../../agent/engine/index.js";
 import type { ActionTool } from "../../agent/types.js";
-import { canUseDeployCredentialFallbackForRequest } from "../../server/credential-provider.js";
 import { getSetting } from "../../settings/index.js";
 
 export const tool: ActionTool = {
@@ -38,9 +37,9 @@ export async function run(args: Record<string, string> = {}): Promise<string> {
     : null;
 
   // Same priority chain resolveEngine uses after explicit request options:
-  // AGENT_ENGINE → app default → Builder app_secrets → stored (if usable)
-  // → user BYOK app_secrets → env → anthropic. Gating stored/app defaults
-  // on the request-aware helper keeps the picker in step with the runtime.
+  // AGENT_ENGINE → app default → stored (if usable) → user/Builder app_secrets
+  // → env → anthropic. Gating stored/app defaults on the request-aware helper
+  // keeps the picker in step with the runtime.
   const storedEntry =
     typeof current?.engine === "string"
       ? getAgentEngineEntry(current.engine)
@@ -65,16 +64,13 @@ export async function run(args: Record<string, string> = {}): Promise<string> {
     !!envEntry &&
     (await isStoredEngineUsableForRequest({ engine: envEntry.name }, envEntry));
   const envUnavailable = !!envEntry && !envUsable;
-  const detectedFromEnv = canUseDeployCredentialFallbackForRequest()
-    ? detectEngineFromEnv()
-    : null;
+  const detectedFromEnv = detectEngineFromEnv();
   const envSelectedEntry = envUsable ? envEntry : undefined;
 
   const currentEntry = envUnavailable
     ? undefined
     : (envSelectedEntry ??
       (appDefaultUsable ? appDefaultEntry : undefined) ??
-      (detectedFromUser?.name === "builder" ? detectedFromUser : undefined) ??
       (storedUsable ? storedEntry : undefined) ??
       detectedFromUser ??
       detectedFromEnv ??

package/corpus/core/src/scripts/agent-engines/test-agent-engine.ts

@@ -53,11 +53,18 @@ async function resolveAgentEngineSecret(
   } catch {
     // Fall through to deploy env when this request is allowed to use it.
   }
-  return canUseDeployCredentialFallbackForRequest()
+  return canUseDeployCredentialFallbackForRequest(key)
     ? readDeployCredentialEnv(key)
     : undefined;
 }
 
+function canUseDeployEnvForEntry(entry: AgentEngineEntry): boolean {
+  if (entry.requiredEnvVars.length === 0) return true;
+  return entry.requiredEnvVars.every((key) =>
+    canUseDeployCredentialFallbackForRequest(key),
+  );
+}
+
 async function createEngineConfig(
   entry: AgentEngineEntry,
   args: Record<string, string>,
@@ -67,7 +74,7 @@ async function createEngineConfig(
       entry.requiredEnvVars.length > 0
         ? await resolveAgentEngineSecret(entry.requiredEnvVars[0])
         : undefined,
-    allowEnvFallback: canUseDeployCredentialFallbackForRequest(),
+    allowEnvFallback: canUseDeployEnvForEntry(entry),
   };
 
   if (entry.name === "ai-sdk:openai") {

package/corpus/core/src/scripts/db/tool-mode.ts

@@ -6,8 +6,8 @@ export function normalizeDatabaseToolsMode(
   value: DatabaseToolsOption | undefined,
 ): DatabaseToolsMode {
   if (value === false || value === "off") return "off";
-  if (value === "read") return "read";
-  return "write";
+  if (value === true || value === "write") return "write";
+  return "read";
 }
 
 export function hasDatabaseReadTools(

package/corpus/core/src/scripts/resources/migrate-learnings.ts

@@ -1,7 +1,11 @@
 /**
  * Core script: migrate-learnings
  *
- * Migrate a learnings.md file from the project root into the SQL resource store.
+ * Migrate a learnings.md file from the project root into the SQL resource
+ * store at SHARED scope under "LEARNINGS.md". This is the exact owner/path
+ * pair the live prompt injection (`loadResourcesForPrompt` in
+ * agent-chat-plugin.ts) reads via an exact-match lookup, so the migrated
+ * content actually reaches the production agent's prompt.
  *
  * Usage:
  *   pnpm action migrate-learnings
@@ -10,9 +14,7 @@
 import fs from "fs";
 import path from "path";
 
-import { resourcePut } from "../../resources/store.js";
-import { getRequestUserEmail } from "../../server/request-context.js";
-import { fail } from "../utils.js";
+import { resourcePut, SHARED_OWNER } from "../../resources/store.js";
 
 export default async function migrateLearningsScript(
   _args: string[],
@@ -25,20 +27,14 @@ export default async function migrateLearningsScript(
   }
 
   const content = fs.readFileSync(filePath, "utf-8");
-  const owner = getRequestUserEmail() ?? process.env.AGENT_USER_EMAIL;
-  if (!owner) {
-    fail(
-      "migrate-learnings requires an authenticated user (request context or AGENT_USER_EMAIL env var).",
-    );
-  }
 
   const resource = await resourcePut(
-    owner,
-    "learnings.md",
+    SHARED_OWNER,
+    "LEARNINGS.md",
     content,
     "text/markdown",
   );
   console.log(
-    `Migrated learnings.md to resource store (${resource.size} bytes)`,
+    `Migrated learnings.md to shared resource store as LEARNINGS.md (${resource.size} bytes)`,
   );
 }