@agent-native/core 0.161.20 → 0.161.23

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -75,9 +75,10 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         user: "user";
     }>>;
 }, z.core.$strip>>, {
+    message?: undefined;
     id?: undefined;
-    provider?: undefined;
     deleted?: undefined;
+    found?: undefined;
     providers: {
         id: string;
         label: string;
@@ -88,46 +89,45 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         updatedAt: number;
     }[];
     count: number;
-    found?: undefined;
+    provider?: undefined;
     registered?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
+    message?: undefined;
+    count?: undefined;
     id?: undefined;
     deleted?: undefined;
     providers?: undefined;
-    count?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
     registered?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
-    provider?: undefined;
+    message?: undefined;
+    count?: undefined;
     deleted?: undefined;
     providers?: undefined;
-    count?: undefined;
+    provider?: undefined;
     found: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
-    provider?: undefined;
-    providers?: undefined;
+    message?: undefined;
     count?: undefined;
     found?: undefined;
+    providers?: undefined;
+    provider?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
-    provider?: undefined;
-    deleted?: undefined;
-    providers?: undefined;
     count?: undefined;
+    deleted?: undefined;
     found?: undefined;
+    providers?: undefined;
+    provider?: undefined;
     registered: boolean;
     id: string;
     label: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -312,7 +312,9 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         scope?: "org" | "user" | undefined;
     }, {
         id?: undefined;
-        message?: undefined;
+        deleted?: undefined;
+        provider?: undefined;
+        found?: undefined;
         providers: {
             id: string;
             label: string;
@@ -323,47 +325,45 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
             updatedAt: number;
         }[];
         count: number;
-        provider?: undefined;
-        found?: undefined;
-        deleted?: undefined;
         registered?: undefined;
         label?: undefined;
+        message?: undefined;
     } | {
         id?: undefined;
-        message?: undefined;
+        deleted?: undefined;
         providers?: undefined;
         count?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
-        deleted?: undefined;
         registered?: undefined;
         label?: undefined;
-    } | {
         message?: undefined;
+    } | {
+        deleted?: undefined;
+        provider?: undefined;
         providers?: undefined;
         count?: undefined;
-        provider?: undefined;
         found: boolean;
         id: string;
-        deleted?: undefined;
         registered?: undefined;
         label?: undefined;
-    } | {
         message?: undefined;
-        providers?: undefined;
-        count?: undefined;
+    } | {
         provider?: undefined;
         found?: undefined;
+        providers?: undefined;
+        count?: undefined;
         deleted: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
+        message?: undefined;
     } | {
-        providers?: undefined;
-        count?: undefined;
+        deleted?: undefined;
         provider?: undefined;
         found?: undefined;
-        deleted?: undefined;
+        providers?: undefined;
+        count?: undefined;
         registered: boolean;
         id: string;
         label: string;

package/dist/server/app-origin-config.d.ts

@@ -19,5 +19,6 @@ export declare function resolvePublicAppOriginConfig(): {
     appUrl?: string;
     workspaceGatewayUrl?: string;
     workspaceOAuthOrigin?: string;
+    workspaceRuntime?: boolean;
 } | null;
 export declare function getAppOriginClientConfigScript(): string | null;

package/dist/server/app-origin-config.js

@@ -18,6 +18,8 @@ import { getAppConfig } from "../app-config/index.js";
  */
 export function resolvePublicAppOriginConfig() {
     const config = getAppConfig();
+    const workspaceRuntime = config.workspace.isWorkspace === true ||
+        typeof config.workspace.appsJson === "string";
     const resolved = {
         ...(config.app.url ? { appUrl: config.app.url } : {}),
         ...(config.workspace.gatewayUrl
@@ -26,6 +28,7 @@ export function resolvePublicAppOriginConfig() {
         ...(config.workspace.oauthOrigin
             ? { workspaceOAuthOrigin: config.workspace.oauthOrigin }
             : {}),
+        ...(workspaceRuntime ? { workspaceRuntime: true } : {}),
     };
     return Object.keys(resolved).length > 0 ? resolved : null;
 }

package/dist/server/auth.js

@@ -2957,8 +2957,8 @@ async function mountBetterAuthRoutes(app, options) {
                 redirectPath: oauthDebugUrlPath(redirectUri),
                 returnUrl,
                 redirect: q.redirect === "1",
-                workspace: process.env.AGENT_NATIVE_WORKSPACE === "1" ||
-                    process.env.VITE_AGENT_NATIVE_WORKSPACE === "1",
+                workspace: getAppConfig().workspace.isWorkspace === true ||
+                    typeof getAppConfig().workspace.appsJson === "string",
             });
             const params = new URLSearchParams({
                 client_id: googleSignInCredentials.clientId,

package/dist/server/cookie-namespace.js

@@ -1,9 +1,12 @@
 import fs from "node:fs";
 import path from "node:path";
+import { getAppConfig } from "../app-config/index.js";
+import { isTruthyRuntimeValue } from "../shared/runtime-config.js";
 const FIRST_PARTY_COOKIE_DOMAIN = "agent-native.com";
 export function resolveAuthCookieNamespace(env = process.env, cwd = process.cwd()) {
-    const isWorkspaceMode = env.AGENT_NATIVE_WORKSPACE === "1" ||
-        env.VITE_AGENT_NATIVE_WORKSPACE === "1";
+    const isWorkspaceMode = env === process.env
+        ? isConfiguredWorkspaceRuntime()
+        : isWorkspaceModeFromEnv(env);
     const configuredCookieDomain = normalizeCookieDomain(env.COOKIE_DOMAIN);
     const isFirstPartyCookieDomain = normalizeDomainForCompare(configuredCookieDomain) ===
         FIRST_PARTY_COOKIE_DOMAIN;
@@ -63,6 +66,18 @@ export function resolveAuthCookieNamespace(env = process.env, cwd = process.cwd(
         isFirstPartyCookieDomain,
     };
 }
+function isConfiguredWorkspaceRuntime() {
+    const workspace = getAppConfig().workspace;
+    return (workspace.isWorkspace === true || typeof workspace.appsJson === "string");
+}
+function isWorkspaceModeFromEnv(env) {
+    const workspaceFlag = firstConfiguredValue(env.AGENT_NATIVE_WORKSPACE, env.VITE_AGENT_NATIVE_WORKSPACE);
+    const workspaceApps = firstConfiguredValue(env.AGENT_NATIVE_WORKSPACE_APPS_JSON, env.VITE_AGENT_NATIVE_WORKSPACE_APPS_JSON);
+    return isTruthyRuntimeValue(workspaceFlag) || Boolean(workspaceApps);
+}
+function firstConfiguredValue(...values) {
+    return values.find((value) => value?.trim())?.trim();
+}
 function readPackageJsonName(cwd) {
     try {
         const raw = fs.readFileSync(path.join(cwd, "package.json"), "utf8");

package/dist/server/credential-provider.js

@@ -22,6 +22,7 @@ import { CREDENTIAL_STORE_UNAVAILABLE_ERROR_CODE, GATEWAY_UNAVAILABLE_VISITOR_ME
 import { getAppConfig } from "../app-config/index.js";
 import { getDbExec, isLocalDatabase, isTransientDatabaseError, } from "../db/client.js";
 import { getOrgSetting } from "../settings/org-settings.js";
+import { isTruthyRuntimeValue } from "../shared/runtime-config.js";
 import { getRequestUserEmail, getRequestOrgId } from "./request-context.js";
 const DISPATCH_VAULT_ACCESS_SETTINGS_KEY = "dispatch-vault-access-settings";
 /**
@@ -209,8 +210,10 @@ function isHostedWorkspaceRuntime() {
     const hasFusionPreview = Boolean(process.env.FUSION_ENVIRONMENT ||
         process.env.FUSION_ENV_ORIGIN ||
         process.env.VITE_FUSION_ENV_ORIGIN);
-    return (/^(1|true)$/i.test(process.env.AGENT_NATIVE_WORKSPACE ?? "") ||
-        /^(1|true)$/i.test(process.env.VITE_AGENT_NATIVE_WORKSPACE ?? "") ||
+    return (isTruthyRuntimeValue(process.env.AGENT_NATIVE_WORKSPACE) ||
+        isTruthyRuntimeValue(process.env.VITE_AGENT_NATIVE_WORKSPACE) ||
+        Boolean(process.env.AGENT_NATIVE_WORKSPACE_APPS_JSON?.trim()) ||
+        Boolean(process.env.VITE_AGENT_NATIVE_WORKSPACE_APPS_JSON?.trim()) ||
         hasFusionPreview);
 }
 function isProductionLikeRuntime() {

package/dist/server/derived-secret.js

@@ -1,8 +1,9 @@
 import crypto from "node:crypto";
+import { getAppConfig } from "../app-config/index.js";
 const DERIVED_SECRET_PREFIX = "agent-native:derived-secret:v1";
 function isWorkspaceRuntime() {
-    return (process.env.AGENT_NATIVE_WORKSPACE === "1" ||
-        process.env.VITE_AGENT_NATIVE_WORKSPACE === "1");
+    const workspace = getAppConfig().workspace;
+    return (workspace.isWorkspace === true || typeof workspace.appsJson === "string");
 }
 export function deriveServerSecret(rootSecret, purpose) {
     return crypto

package/dist/server/onboarding-html.js

@@ -6,6 +6,7 @@
  *
  * After first account exists, this page acts as a normal login page.
  */
+import { getAppConfig } from "../app-config/index.js";
 import { getLocaleInitScript } from "../localization/server.js";
 import { DEFAULT_LOCALE, LOCALE_METADATA, LOCALE_STORAGE_KEY, SUPPORTED_LOCALES, } from "../localization/shared.js";
 import { NATIVE_AUTH_COPY } from "../shared/auth-copy.js";
@@ -42,6 +43,25 @@ function getConnectionLabel() {
         return "Turso";
     return "SQL database";
 }
+function isWorkspaceRuntime() {
+    const workspace = getAppConfig().workspace;
+    return (workspace.isWorkspace === true || typeof workspace.appsJson === "string");
+}
+function workspaceBasePathFromRequest(requestPath) {
+    if (!isWorkspaceRuntime() || !requestPath)
+        return "";
+    const pathname = requestPath.split(/[?#]/, 1)[0] || "/";
+    const firstSegment = pathname.split("/").find(Boolean);
+    if (!firstSegment ||
+        firstSegment === "_agent-native" ||
+        firstSegment === "api" ||
+        firstSegment === "sign-in" ||
+        firstSegment === "login" ||
+        firstSegment === "signup") {
+        return "";
+    }
+    return normalizeAppBasePath(`/${firstSegment}`);
+}
 function withAppBasePath(path) {
     const cleanPath = path.startsWith("/") ? path : `/${path}`;
     const basePath = normalizeAppBasePath(process.env.VITE_APP_BASE_PATH || process.env.APP_BASE_PATH);
@@ -997,7 +1017,9 @@ export function getOnboardingHtml(opts = {}) {
     // for every visitor. A genuinely misconfigured server instead surfaces a
     // clear error at click time via the auth API.
     const renderGoogleButton = showGoogle || googleOnly;
-    const appBasePath = normalizeAppBasePath(process.env.VITE_APP_BASE_PATH || process.env.APP_BASE_PATH);
+    const configuredAppBasePath = normalizeAppBasePath(process.env.VITE_APP_BASE_PATH || process.env.APP_BASE_PATH);
+    const appBasePath = configuredAppBasePath || workspaceBasePathFromRequest(opts.requestPath);
+    const workspaceRuntime = isWorkspaceRuntime();
     const publicOAuthOrigin = getPublicOAuthOrigin();
     const workspaceGatewayReturnOrigin = getWorkspaceGatewayReturnOrigin();
     const googleAuthMode = resolveGoogleAuthMode(opts.googleAuthMode);
@@ -2126,7 +2148,17 @@ ${signupLocalModeNoteHtml}
     if (configured) return configured;
     var marker = '/_agent-native';
     var idx = window.location.pathname.indexOf(marker);
-    return idx > 0 ? window.location.pathname.slice(0, idx) : '';
+    if (idx > 0) return window.location.pathname.slice(0, idx);
+    if (${JSON.stringify(workspaceRuntime)}) {
+      var segments = window.location.pathname.split('/');
+      for (var i = 0; i < segments.length; i++) {
+        var segment = segments[i];
+        if (segment && segment !== '_agent-native' && segment !== 'api' && segment !== 'sign-in' && segment !== 'login' && segment !== 'signup') {
+          return '/' + segment;
+        }
+      }
+    }
+    return '';
   }
     function __anPath(path) {
       return __anBasePath() + path;

package/dist/server/workspace-oauth.js

@@ -1,3 +1,5 @@
+import { getAppConfig } from "../app-config/index.js";
+import { isTruthyRuntimeValue } from "../shared/runtime-config.js";
 /**
  * Whether workspace OAuth callbacks use the root framework relay.
  *
@@ -8,13 +10,16 @@
  * the mounted app that initiated it.
  */
 export function isWorkspaceOAuthCallbackRelayEnabled() {
+    const workspace = getAppConfig().workspace;
     const metaEnv = import.meta.env;
-    return ([
-        process.env.AGENT_NATIVE_WORKSPACE,
-        process.env.VITE_AGENT_NATIVE_WORKSPACE,
-        metaEnv?.AGENT_NATIVE_WORKSPACE,
-        metaEnv?.VITE_AGENT_NATIVE_WORKSPACE,
-    ].some((value) => value === "1" || value === "true") ||
+    return (workspace.isWorkspace === true ||
+        typeof workspace.appsJson === "string" ||
+        [
+            process.env.AGENT_NATIVE_WORKSPACE,
+            process.env.VITE_AGENT_NATIVE_WORKSPACE,
+            metaEnv?.AGENT_NATIVE_WORKSPACE,
+            metaEnv?.VITE_AGENT_NATIVE_WORKSPACE,
+        ].some((value) => isTruthyRuntimeValue(value)) ||
         [
             process.env.AGENT_NATIVE_WORKSPACE_APP_ID,
             process.env.VITE_AGENT_NATIVE_WORKSPACE_APP_ID,

package/dist/shared/runtime-config.d.ts

@@ -37,6 +37,8 @@ export interface RuntimeConfigReportOptions {
     phase?: RuntimeConfigPhase;
     appName?: string;
 }
+/** Parse the truthy spellings accepted by typed runtime configuration flags. */
+export declare function isTruthyRuntimeValue(value: string | boolean | undefined): boolean;
 export declare function runtimeConfigRequirementsFromSearchParams(searchParams: URLSearchParams): RuntimeConfigRequirements;
 export declare function buildRuntimeConfigPrompt(report: Pick<RuntimeConfigReport, "environment" | "phase" | "issues">, appName?: string): string;
 export declare function getRuntimeConfigReport(env: Record<string, string | undefined>, requirements?: RuntimeConfigRequirements, options?: RuntimeConfigReportOptions): RuntimeConfigReport;

package/dist/shared/runtime-config.js

@@ -5,6 +5,13 @@
  * process.env so the same rules can run during a Vite build, on the server,
  * and in focused tests without ever exposing secret values to the browser.
  */
+/** Parse the truthy spellings accepted by typed runtime configuration flags. */
+export function isTruthyRuntimeValue(value) {
+    if (value === true)
+        return true;
+    return (typeof value === "string" &&
+        ["1", "true", "yes", "on"].includes(value.trim().toLowerCase()));
+}
 const ENV_KEY_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
 const RUNTIME_CONFIG_ISSUE_CODES = new Set([
     "auth-disabled-in-production",
@@ -36,7 +43,7 @@ function valueOf(env, key) {
     return value || undefined;
 }
 function truthy(value) {
-    return value === "1" || value?.toLowerCase() === "true";
+    return isTruthyRuntimeValue(value);
 }
 function isProductionEnvironment(env) {
     return (valueOf(env, "NODE_ENV") === "production" ||
@@ -44,8 +51,10 @@ function isProductionEnvironment(env) {
         valueOf(env, "VERCEL_ENV") === "production");
 }
 function isWorkspaceRuntime(env) {
-    return (valueOf(env, "AGENT_NATIVE_WORKSPACE") === "1" ||
-        valueOf(env, "VITE_AGENT_NATIVE_WORKSPACE") === "1");
+    return (isTruthyRuntimeValue(valueOf(env, "AGENT_NATIVE_WORKSPACE")) ||
+        isTruthyRuntimeValue(valueOf(env, "VITE_AGENT_NATIVE_WORKSPACE")) ||
+        Boolean(valueOf(env, "AGENT_NATIVE_WORKSPACE_APPS_JSON")) ||
+        Boolean(valueOf(env, "VITE_AGENT_NATIVE_WORKSPACE_APPS_JSON")));
 }
 function appEnvPrefix(env, appName) {
     const raw = appName ?? valueOf(env, "APP_NAME");

package/dist/vite/client.js

@@ -15,7 +15,7 @@ import { EMBED_SESSION_COOKIE, EMBED_TOKEN_QUERY_PARAM, MCP_APP_CHAT_BRIDGE_QUER
 import { isMcpEmbedCorsOrigin, MCP_EMBED_CORS_ALLOW_HEADERS, MCP_EMBED_STATIC_ASSET_HEADERS, mcpEmbedStaticAssetRouteRules, shouldAllowMcpEmbedCredentials, } from "../shared/mcp-embed-headers.js";
 import { normalizeMcpIntegrationsConfig, } from "../shared/mcp-integration-config.js";
 import { normalizeAgentNativeRouteWarmupConfig, } from "../shared/route-warmup-config.js";
-import { formatRuntimeConfigReport, getRuntimeConfigReport, } from "../shared/runtime-config.js";
+import { formatRuntimeConfigReport, getRuntimeConfigReport, isTruthyRuntimeValue, } from "../shared/runtime-config.js";
 import { actionTypesPlugin } from "./action-types-plugin.js";
 import { createAgentNativeConfigContext, loadAgentNativeConfigFile, loadWorkspaceAgentNativeConfigFile, readAgentNativeJsonConfig, } from "./agent-native-config-loader.js";
 import { agentsBundlePlugin } from "./agents-bundle-plugin.js";
@@ -2791,7 +2791,10 @@ function createAgentNativeConfig(options = {}, command, userConfig = {}, mode =
     };
     reportRuntimeConfigDiagnostics(appConfig, configContext, mode, runtimeEnv);
     const { base } = getConfiguredAppBasePath();
-    const isWorkspaceChild = process.env.AGENT_NATIVE_WORKSPACE === "1";
+    const isWorkspaceChild = isTruthyRuntimeValue(process.env.AGENT_NATIVE_WORKSPACE) ||
+        isTruthyRuntimeValue(process.env.VITE_AGENT_NATIVE_WORKSPACE) ||
+        Boolean(process.env.AGENT_NATIVE_WORKSPACE_APPS_JSON?.trim()) ||
+        Boolean(process.env.VITE_AGENT_NATIVE_WORKSPACE_APPS_JSON?.trim());
     const monorepoPackageAllow = [
         path.resolve(cwd, "../../packages/core"),
         path.resolve(cwd, "../core"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.161.20",
+  "version": "0.161.23",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -425,7 +425,7 @@
     "tweetnacl": "^1.0.3",
     "undici": "^7.28.0",
     "y-protocols": "^1.0.7",
-    "yjs": "^13.6.31",
+    "yjs": "^13.6.32",
     "zod": "^4.3.6",
     "@agent-native/recap-cli": "0.5.4",
     "@agent-native/toolkit": "^0.16.4"