@agent-native/core 0.161.1 → 0.161.4

package/dist/vite/client.js

@@ -1451,6 +1451,66 @@ const EMBED_DEV_STATIC_ASSET_PATHS = new Set([
     "/favicon.svg",
     "/manifest.json",
 ]);
+const VITE_RUNTIME_MODULE_QUERY_KEYS = new Set([
+    "commonjs-proxy",
+    "direct",
+    "html-proxy",
+    "import",
+    "inline",
+    "inline-css",
+    "no-inline",
+    "raw",
+    "sharedworker",
+    "style-attr",
+    "transform-only",
+    "url",
+    "worker",
+]);
+const VITE_STATIC_ASSET_EXTENSIONS = new Set([
+    ".aac",
+    ".apng",
+    ".avif",
+    ".bmp",
+    ".css",
+    ".cur",
+    ".eot",
+    ".flac",
+    ".gif",
+    ".ico",
+    ".jfif",
+    ".jpeg",
+    ".jpg",
+    ".jxl",
+    ".less",
+    ".m4a",
+    ".mp3",
+    ".mp4",
+    ".mov",
+    ".ogg",
+    ".otf",
+    ".pjp",
+    ".pjpeg",
+    ".pcss",
+    ".pdf",
+    ".png",
+    ".postcss",
+    ".opus",
+    ".sass",
+    ".scss",
+    ".svg",
+    ".styl",
+    ".stylus",
+    ".ttf",
+    ".txt",
+    ".vtt",
+    ".wasm",
+    ".wav",
+    ".webm",
+    ".webp",
+    ".webmanifest",
+    ".woff",
+    ".woff2",
+]);
 function mountedPathCandidates(reqUrl, base) {
     if (!reqUrl)
         return [];
@@ -1528,9 +1588,38 @@ function mountedEmbedRuntimeModuleUrl(reqUrl, base) {
     if (!VITE_RUNTIME_PATH_PREFIXES.some((prefix) => url.pathname.startsWith(prefix))) {
         return null;
     }
-    url.searchParams.delete(EMBED_TOKEN_QUERY_PARAM);
-    url.searchParams.delete(MCP_APP_CHAT_BRIDGE_QUERY_PARAM);
-    return `${url.pathname}${url.search}${url.hash}`;
+    // Vite distinguishes valueless module flags such as `?url` from `?url=`.
+    // Strip only the embed controls so those flags reach Vite byte-for-byte.
+    const hashStart = runtimeUrl.indexOf("#");
+    const searchStart = runtimeUrl.indexOf("?");
+    const search = searchStart >= 0 && (hashStart < 0 || searchStart < hashStart)
+        ? runtimeUrl.slice(searchStart, hashStart < 0 ? undefined : hashStart)
+        : "";
+    return `${url.pathname}${stripMountedEmbedRuntimeQueryParams(search)}${url.hash}`;
+}
+function stripMountedEmbedRuntimeQueryParams(search) {
+    if (!search)
+        return "";
+    const kept = search
+        .slice(1)
+        .split("&")
+        .filter((pair) => {
+        const key = pair.split("=", 1)[0];
+        return (key !== EMBED_TOKEN_QUERY_PARAM &&
+            key !== MCP_APP_CHAT_BRIDGE_QUERY_PARAM);
+    });
+    return kept.length > 0 ? `?${kept.join("&")}` : "";
+}
+function isMountedEmbedStaticAssetRequest(req, runtimeUrl) {
+    const url = new URL(runtimeUrl, "http://agent-native.local");
+    const isViteModuleQuery = [...url.searchParams.keys()].some((key) => VITE_RUNTIME_MODULE_QUERY_KEYS.has(key));
+    if (isViteModuleQuery)
+        return false;
+    const fetchDestination = String(req.headers["sec-fetch-dest"] ?? "").toLowerCase();
+    if (["audio", "font", "image", "style", "track", "video"].includes(fetchDestination)) {
+        return true;
+    }
+    return VITE_STATIC_ASSET_EXTENSIONS.has(path.extname(url.pathname).toLowerCase());
 }
 function virtualModuleIdFromRuntimeUrl(runtimeUrl) {
     try {
@@ -1564,6 +1653,8 @@ function serveMountedEmbedRuntimeModule(server, req, res, base) {
     const runtimeUrl = mountedEmbedRuntimeModuleUrl(req.url, base);
     if (!runtimeUrl)
         return false;
+    if (isMountedEmbedStaticAssetRequest(req, runtimeUrl))
+        return false;
     void loadMountedEmbedRuntimeModule(server, runtimeUrl)
         .then((code) => {
         if (!code) {

package/dist/workspace-connections/migrations.d.ts

@@ -0,0 +1,18 @@
+import type { MigrationEntry } from "../db/migrations.js";
+export declare const WORKSPACE_CONNECTIONS_MIGRATIONS_TABLE = "_workspace_connections_migrations";
+/**
+ * Deploy-time schema for workspace connections, grants, and user groups.
+ *
+ * These three tables were shipped with only their runtime `ensureTable`
+ * helpers in `store.ts` / `groups.ts`. That is enough locally and on a
+ * long-lived server, but `schemaEnsureDisabled()` makes every probe report
+ * "present" on a production serverless runtime, so the ensure path issues no
+ * DDL there at all. A table with no entry here therefore never gets created in
+ * production, and the first read fails with `relation ... does not exist` —
+ * which is exactly what `workspace_user_groups` did from the day after it
+ * shipped. Runtime ensure covers dev; this list is the production contract.
+ *
+ * `created_at` / `updated_at` must be BIGINT on Postgres: they store epoch
+ * milliseconds, which overflow int4.
+ */
+export declare const WORKSPACE_CONNECTIONS_MIGRATIONS: MigrationEntry[];

package/dist/workspace-connections/migrations.js

@@ -0,0 +1,153 @@
+export const WORKSPACE_CONNECTIONS_MIGRATIONS_TABLE = "_workspace_connections_migrations";
+/**
+ * Deploy-time schema for workspace connections, grants, and user groups.
+ *
+ * These three tables were shipped with only their runtime `ensureTable`
+ * helpers in `store.ts` / `groups.ts`. That is enough locally and on a
+ * long-lived server, but `schemaEnsureDisabled()` makes every probe report
+ * "present" on a production serverless runtime, so the ensure path issues no
+ * DDL there at all. A table with no entry here therefore never gets created in
+ * production, and the first read fails with `relation ... does not exist` —
+ * which is exactly what `workspace_user_groups` did from the day after it
+ * shipped. Runtime ensure covers dev; this list is the production contract.
+ *
+ * `created_at` / `updated_at` must be BIGINT on Postgres: they store epoch
+ * milliseconds, which overflow int4.
+ */
+export const WORKSPACE_CONNECTIONS_MIGRATIONS = [
+    {
+        version: 1,
+        sql: {
+            postgres: `CREATE TABLE IF NOT EXISTS workspace_connections (
+        id TEXT PRIMARY KEY,
+        provider TEXT NOT NULL DEFAULT '',
+        label TEXT NOT NULL DEFAULT '',
+        account_id TEXT,
+        account_label TEXT,
+        status TEXT NOT NULL DEFAULT 'connected',
+        scopes_json TEXT NOT NULL DEFAULT '[]',
+        config_json TEXT NOT NULL DEFAULT '{}',
+        allowed_apps_json TEXT NOT NULL DEFAULT '[]',
+        allowed_users_json TEXT NOT NULL DEFAULT '[]',
+        allowed_user_groups_json TEXT NOT NULL DEFAULT '[]',
+        credential_refs_json TEXT NOT NULL DEFAULT '[]',
+        owner_email TEXT NOT NULL DEFAULT '',
+        org_id TEXT,
+        created_at BIGINT NOT NULL DEFAULT 0,
+        updated_at BIGINT NOT NULL DEFAULT 0,
+        last_used_at BIGINT,
+        last_checked_at BIGINT,
+        last_error TEXT
+      )`,
+            sqlite: `CREATE TABLE IF NOT EXISTS workspace_connections (
+        id TEXT PRIMARY KEY,
+        provider TEXT NOT NULL DEFAULT '',
+        label TEXT NOT NULL DEFAULT '',
+        account_id TEXT,
+        account_label TEXT,
+        status TEXT NOT NULL DEFAULT 'connected',
+        scopes_json TEXT NOT NULL DEFAULT '[]',
+        config_json TEXT NOT NULL DEFAULT '{}',
+        allowed_apps_json TEXT NOT NULL DEFAULT '[]',
+        allowed_users_json TEXT NOT NULL DEFAULT '[]',
+        allowed_user_groups_json TEXT NOT NULL DEFAULT '[]',
+        credential_refs_json TEXT NOT NULL DEFAULT '[]',
+        owner_email TEXT NOT NULL DEFAULT '',
+        org_id TEXT,
+        created_at INTEGER NOT NULL DEFAULT 0,
+        updated_at INTEGER NOT NULL DEFAULT 0,
+        last_used_at INTEGER,
+        last_checked_at INTEGER,
+        last_error TEXT
+      )`,
+        },
+    },
+    {
+        version: 2,
+        sql: `CREATE INDEX IF NOT EXISTS idx_workspace_connections_scope_provider
+      ON workspace_connections (org_id, owner_email, provider)`,
+    },
+    {
+        version: 3,
+        sql: `CREATE INDEX IF NOT EXISTS idx_workspace_connections_updated_at
+      ON workspace_connections (updated_at)`,
+    },
+    {
+        version: 4,
+        sql: {
+            postgres: `CREATE TABLE IF NOT EXISTS workspace_connection_grants (
+        id TEXT PRIMARY KEY,
+        connection_id TEXT NOT NULL DEFAULT '',
+        provider TEXT NOT NULL DEFAULT '',
+        app_id TEXT NOT NULL DEFAULT '',
+        scopes_json TEXT NOT NULL DEFAULT '[]',
+        config_json TEXT NOT NULL DEFAULT '{}',
+        credential_refs_json TEXT NOT NULL DEFAULT '[]',
+        granted_by_email TEXT NOT NULL DEFAULT '',
+        owner_email TEXT NOT NULL DEFAULT '',
+        org_id TEXT,
+        created_at BIGINT NOT NULL DEFAULT 0,
+        updated_at BIGINT NOT NULL DEFAULT 0,
+        last_used_at BIGINT
+      )`,
+            sqlite: `CREATE TABLE IF NOT EXISTS workspace_connection_grants (
+        id TEXT PRIMARY KEY,
+        connection_id TEXT NOT NULL DEFAULT '',
+        provider TEXT NOT NULL DEFAULT '',
+        app_id TEXT NOT NULL DEFAULT '',
+        scopes_json TEXT NOT NULL DEFAULT '[]',
+        config_json TEXT NOT NULL DEFAULT '{}',
+        credential_refs_json TEXT NOT NULL DEFAULT '[]',
+        granted_by_email TEXT NOT NULL DEFAULT '',
+        owner_email TEXT NOT NULL DEFAULT '',
+        org_id TEXT,
+        created_at INTEGER NOT NULL DEFAULT 0,
+        updated_at INTEGER NOT NULL DEFAULT 0,
+        last_used_at INTEGER
+      )`,
+        },
+    },
+    {
+        version: 5,
+        sql: `CREATE UNIQUE INDEX IF NOT EXISTS idx_workspace_connection_grants_connection_app
+      ON workspace_connection_grants (connection_id, app_id)`,
+    },
+    {
+        version: 6,
+        sql: `CREATE INDEX IF NOT EXISTS idx_workspace_connection_grants_scope_app
+      ON workspace_connection_grants (org_id, owner_email, app_id)`,
+    },
+    {
+        version: 7,
+        sql: `CREATE INDEX IF NOT EXISTS idx_workspace_connection_grants_updated_at
+      ON workspace_connection_grants (updated_at)`,
+    },
+    {
+        version: 8,
+        sql: {
+            postgres: `CREATE TABLE IF NOT EXISTS workspace_user_groups (
+        id TEXT PRIMARY KEY,
+        org_id TEXT NOT NULL DEFAULT '',
+        name TEXT NOT NULL DEFAULT '',
+        member_emails_json TEXT NOT NULL DEFAULT '[]',
+        created_by_email TEXT NOT NULL DEFAULT '',
+        created_at BIGINT NOT NULL DEFAULT 0,
+        updated_at BIGINT NOT NULL DEFAULT 0
+      )`,
+            sqlite: `CREATE TABLE IF NOT EXISTS workspace_user_groups (
+        id TEXT PRIMARY KEY,
+        org_id TEXT NOT NULL DEFAULT '',
+        name TEXT NOT NULL DEFAULT '',
+        member_emails_json TEXT NOT NULL DEFAULT '[]',
+        created_by_email TEXT NOT NULL DEFAULT '',
+        created_at INTEGER NOT NULL DEFAULT 0,
+        updated_at INTEGER NOT NULL DEFAULT 0
+      )`,
+        },
+    },
+    {
+        version: 9,
+        sql: `CREATE INDEX IF NOT EXISTS idx_workspace_user_groups_org_updated
+      ON workspace_user_groups (org_id, updated_at)`,
+    },
+];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.161.1",
+  "version": "0.161.4",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {