@agent-native/core 0.161.23 → 0.162.0

package/dist/vite/client.js

@@ -7,7 +7,7 @@ import { renderDesignSystemThemeCss, } from "@agent-native/toolkit/design-system
 import { loadEnv, } from "vite";
 import { mergePendingChangelog, parsePendingEntry, } from "../changelog/parse.js";
 import { getViteDevRecoveryScript } from "../client/vite-dev-recovery-script.js";
-import { mergeAgentNativeConfigs, resolveAgentNativeConfig, } from "../config.js";
+import { inferAgentNativeDeploymentEnvironment, mergeAgentNativeConfigs, resolveAgentNativeConfig, } from "../config.js";
 import { writeAgentNativeNitroPresetMarker } from "../deploy/nitro-preset.js";
 import { findWorkspaceRoot } from "../scripts/utils.js";
 import { verifyEmbedSessionToken } from "../server/embed-session.js";
@@ -1432,6 +1432,41 @@ function baseRedirectGuard() {
         },
     };
 }
+/**
+ * Force Nitro's dev middleware to treat extension-bearing framework endpoints
+ * as dynamic so they reach the h3 server instead of Vite's static pipeline.
+ *
+ * Nitro's Vite dev middleware routes paths with asset-like extensions through
+ * Vite unless a Nitro route matches them. Framework endpoints are registered
+ * as h3 middleware, so mounted `/_agent-native/*` and `/.well-known/*` paths
+ * can otherwise become dev-only 404s before reaching the framework handler.
+ */
+function frameworkDevDynamicForwarder() {
+    return {
+        name: "agent-native-framework-dev-dynamic-forwarder",
+        apply: "serve",
+        configureServer(server) {
+            server.middlewares.use((req, _res, next) => {
+                const url = req.url;
+                if (url && isFrameworkDynamicDevPath(url, server.config.base)) {
+                    const accept = req.headers["accept"];
+                    if (typeof accept !== "string" || !/\btext\/html\b/.test(accept)) {
+                        req.headers["accept"] = accept
+                            ? `text/html,${accept}`
+                            : "text/html";
+                    }
+                    // Embed-start uses document/iframe to select its transplant response.
+                    // Only supply the classifier hint when the browser did not provide a
+                    // destination; never overwrite the request's original intent.
+                    if (req.headers["sec-fetch-dest"] === undefined) {
+                        req.headers["sec-fetch-dest"] = "empty";
+                    }
+                }
+                next();
+            });
+        },
+    };
+}
 const VITE_RUNTIME_PATH_PREFIXES = [
     "/@fs/",
     "/@id/",
@@ -1872,6 +1907,23 @@ export function isFrameworkDevPath(reqUrl, base) {
     return (pathname === `${normalizedBase}/_agent-native` ||
         pathname.startsWith(`${normalizedBase}/_agent-native/`));
 }
+/**
+ * Framework-owned dynamic dev paths whose responses are served by the h3 app:
+ * the `/_agent-native/*` API surface plus framework `/.well-known/*` documents.
+ */
+export function isFrameworkDynamicDevPath(reqUrl, base) {
+    if (isFrameworkDevPath(reqUrl, base))
+        return true;
+    const pathname = devPathname(reqUrl);
+    if (pathname.startsWith("/.well-known/"))
+        return true;
+    if (base && base !== "/") {
+        const normalizedBase = base.endsWith("/") ? base.slice(0, -1) : base;
+        if (pathname.startsWith(`${normalizedBase}/.well-known/`))
+            return true;
+    }
+    return false;
+}
 /**
  * Work around a Rolldown bug where Nitro passes service entries as objects
  * ({index: "path"}) but Rolldown expects strings. This plugin normalizes
@@ -2679,6 +2731,7 @@ function createAgentNativePlugins(options, { command, includeReactTransform, use
         fullReloadOnOptimizeDep504(),
         embedDevFrameHeaders(),
         baseRedirectGuard(),
+        frameworkDevDynamicForwarder(),
         portExposer(),
         nitroStartupGate(),
         reactRouterVirtualInvalidationMirrorPlugin(),
@@ -2755,6 +2808,15 @@ function createAgentNativeConfig(options = {}, command, userConfig = {}, mode =
     const appConfig = resolveAgentNativeConfig(mergeAgentNativeConfigs(readAgentNativeJsonConfig(cwd), projectConfigInput
         ? resolveAgentNativeConfig(projectConfigInput, configContext)
         : {}), configContext);
+    const inferredDeploymentEnvironment = appConfig.deployment?.environment ??
+        inferAgentNativeDeploymentEnvironment(process.env, mode);
+    const resolvedAppConfig = appConfig.deployment?.environment === undefined &&
+        inferredDeploymentEnvironment !== undefined
+        ? {
+            ...appConfig,
+            deployment: { environment: inferredDeploymentEnvironment },
+        }
+        : appConfig;
     const buildId = process.env.DEPLOY_ID?.trim() ||
         process.env.COMMIT_REF?.trim() ||
         process.env.VERCEL_GIT_COMMIT_SHA?.trim() ||
@@ -2844,7 +2906,7 @@ function createAgentNativeConfig(options = {}, command, userConfig = {}, mode =
             ...(options.define ?? {}),
             __AGENT_NATIVE_BUILD_ID__: JSON.stringify(buildId),
             __AGENT_NATIVE_CLIENT_COMPATIBILITY_VERSION__: JSON.stringify(options.clientCompatibilityVersion?.trim() || ""),
-            __AGENT_NATIVE_APP_CONFIG__: JSON.stringify(appConfig),
+            __AGENT_NATIVE_APP_CONFIG__: JSON.stringify(resolvedAppConfig),
             __AGENT_NATIVE_BUILD_GA_MEASUREMENT_ID__: JSON.stringify(process.env.GA_MEASUREMENT_ID?.trim() || ""),
             "process.env.AGENT_NATIVE_BUILD_GA_MEASUREMENT_ID": JSON.stringify(process.env.GA_MEASUREMENT_ID?.trim() || ""),
             // The release migration owner is configured at build time. Netlify's

package/dist/workspace-files/actions.d.ts

@@ -14,14 +14,7 @@ export type WorkspaceFileActionResult = z.infer<typeof workspaceFileResultSchema
 export declare const showWorkspaceFileAction: import("../action.js").ActionDefinition<{
     path: string;
 }, {
-    file: {
-        resourceId: string;
-        path: string;
-        name: string;
-        contentType: string;
-        sizeBytes: number;
-        updatedAt: string;
-    };
+    file: import("./store.js").WorkspaceFileCard;
 }>;
 export declare function createWorkspaceFileActionEntries(): Record<string, ActionEntry>;
 export {};

package/dist/workspace-files/actions.js

@@ -2,7 +2,7 @@ import { z } from "zod";
 import { ACTION_CHAT_UI_WORKSPACE_FILE_RENDERER } from "../action-ui.js";
 import { defineAction } from "../action.js";
 import { getRequestOrgId, getRequestUserEmail, } from "../server/request-context.js";
-import { getWorkspaceFileMeta } from "./store.js";
+import { getWorkspaceFileMeta, toWorkspaceFileCard, } from "./store.js";
 const workspaceFileResultSchema = z.object({
     file: z.object({
         resourceId: z.string().min(1),
@@ -22,13 +22,6 @@ function currentWorkspaceScope() {
         return { scope: "user", scopeId: userEmail };
     throw new Error("show-workspace-file requires an authenticated request context.");
 }
-function fileName(path) {
-    return path.split("/").at(-1) || path;
-}
-function isTextWorkspaceFile(contentType) {
-    const mimeType = contentType.split(";")[0].trim().toLowerCase();
-    return mimeType.startsWith("text/") || mimeType === "application/json";
-}
 export const showWorkspaceFileAction = defineAction({
     description: "Render a workspace file as a downloadable card in chat. Call this after writing a user-requested export or other durable file with workspaceWrite; a file export is not complete until this action succeeds and the download card appears. The path must exactly match an existing file in the current organization or personal workspace.",
     schema: z.object({
@@ -52,19 +45,10 @@ export const showWorkspaceFileAction = defineAction({
         if (!file) {
             throw new Error(`Workspace file not found: "${path}"`);
         }
-        if (!isTextWorkspaceFile(file.contentType)) {
-            throw new Error(`Workspace file "${path}" has unsupported content type "${file.contentType}". show-workspace-file currently supports text files and application/json.`);
-        }
-        return {
-            file: {
-                resourceId: file.id,
-                path: file.path,
-                name: fileName(file.path),
-                contentType: file.contentType,
-                sizeBytes: file.sizeBytes,
-                updatedAt: file.updatedAt,
-            },
-        };
+        // The card only ever renders name/size/type + a download link — it never
+        // inlines file content — so every content type, binary included, is safe
+        // to show here.
+        return { file: toWorkspaceFileCard(file) };
     },
 });
 export function createWorkspaceFileActionEntries() {

package/dist/workspace-files/index.d.ts

@@ -1,2 +1,2 @@
-export { writeWorkspaceFile, appendWorkspaceFile, readWorkspaceFile, getWorkspaceFileMeta, listWorkspaceFiles, deleteWorkspaceFile, grepWorkspaceFiles, validatePath, MAX_FILE_BYTES, MAX_SCOPE_BYTES, SAVE_TO_FILE_MAX_BYTES, type WorkspaceFilesScope, type WorkspaceFile, type WorkspaceFileMeta, } from "./store.js";
+export { writeWorkspaceFile, appendWorkspaceFile, readWorkspaceFile, getWorkspaceFileMeta, listWorkspaceFiles, deleteWorkspaceFile, grepWorkspaceFiles, validatePath, isScratchWorkspacePath, fileNameFromPath, toWorkspaceFileCard, MAX_FILE_BYTES, MAX_SCOPE_BYTES, SAVE_TO_FILE_MAX_BYTES, type WorkspaceFilesScope, type WorkspaceFile, type WorkspaceFileMeta, type WorkspaceFileCard, } from "./store.js";
 export { createWorkspaceFilesTool } from "./tool.js";

package/dist/workspace-files/index.js

@@ -1,2 +1,2 @@
-export { writeWorkspaceFile, appendWorkspaceFile, readWorkspaceFile, getWorkspaceFileMeta, listWorkspaceFiles, deleteWorkspaceFile, grepWorkspaceFiles, validatePath, MAX_FILE_BYTES, MAX_SCOPE_BYTES, SAVE_TO_FILE_MAX_BYTES, } from "./store.js";
+export { writeWorkspaceFile, appendWorkspaceFile, readWorkspaceFile, getWorkspaceFileMeta, listWorkspaceFiles, deleteWorkspaceFile, grepWorkspaceFiles, validatePath, isScratchWorkspacePath, fileNameFromPath, toWorkspaceFileCard, MAX_FILE_BYTES, MAX_SCOPE_BYTES, SAVE_TO_FILE_MAX_BYTES, } from "./store.js";
 export { createWorkspaceFilesTool } from "./tool.js";

package/dist/workspace-files/store.d.ts

@@ -20,6 +20,8 @@ export interface WorkspaceFilesScope {
     scope: "user" | "org";
     scopeId: string;
 }
+/** True for `scratch/...` paths — hidden agent staging, never durable. */
+export declare function isScratchWorkspacePath(path: string): boolean;
 /**
  * Validate a workspace file path.
  * - Non-empty, no leading slash, no ".." components, no null bytes.
@@ -44,6 +46,22 @@ export interface WorkspaceFileMeta {
     createdAt: string;
     updatedAt: string;
 }
+/** Display name for a workspace path — the last path segment. */
+export declare function fileNameFromPath(path: string): string;
+export interface WorkspaceFileCard {
+    resourceId: string;
+    path: string;
+    name: string;
+    contentType: string;
+    sizeBytes: number;
+    updatedAt: string;
+}
+/**
+ * Shape any workspace-file creator can spread into its own tool result as
+ * `{ file: toWorkspaceFileCard(meta) }` to get a download card in chat —
+ * the chat renderer matches on this shape alone, no per-caller wiring needed.
+ */
+export declare function toWorkspaceFileCard(meta: WorkspaceFileMeta): WorkspaceFileCard;
 /**
  * Write (create or overwrite) a workspace file.
  * Enforces per-file limits for the compatibility API; persistence is handled by

package/dist/workspace-files/store.js

@@ -23,10 +23,12 @@ export const SAVE_TO_FILE_MAX_BYTES = 20 * 1024 * 1024; // 20 MB
 function ownerForScope(scope) {
     return scope.scope === "org" ? SHARED_OWNER : scope.scopeId;
 }
+/** True for `scratch/...` paths — hidden agent staging, never durable. */
+export function isScratchWorkspacePath(path) {
+    return path === "scratch" || path.startsWith("scratch/");
+}
 function visibilityForPath(path) {
-    return path === "scratch" || path.startsWith("scratch/")
-        ? "agent_scratch"
-        : "workspace";
+    return isScratchWorkspacePath(path) ? "agent_scratch" : "workspace";
 }
 function workspaceFileMetadata(scope) {
     return {
@@ -55,6 +57,25 @@ export function validatePath(path) {
     }
     return null;
 }
+/** Display name for a workspace path — the last path segment. */
+export function fileNameFromPath(path) {
+    return path.split("/").at(-1) || path;
+}
+/**
+ * Shape any workspace-file creator can spread into its own tool result as
+ * `{ file: toWorkspaceFileCard(meta) }` to get a download card in chat —
+ * the chat renderer matches on this shape alone, no per-caller wiring needed.
+ */
+export function toWorkspaceFileCard(meta) {
+    return {
+        resourceId: meta.id,
+        path: meta.path,
+        name: fileNameFromPath(meta.path),
+        contentType: meta.contentType,
+        sizeBytes: meta.sizeBytes,
+        updatedAt: meta.updatedAt,
+    };
+}
 // ---------------------------------------------------------------------------
 // Store operations
 // ---------------------------------------------------------------------------

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.161.23",
+  "version": "0.162.0",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -427,8 +427,8 @@
     "y-protocols": "^1.0.7",
     "yjs": "^13.6.32",
     "zod": "^4.3.6",
-    "@agent-native/recap-cli": "0.5.4",
-    "@agent-native/toolkit": "^0.16.4"
+    "@agent-native/recap-cli": "0.5.5",
+    "@agent-native/toolkit": "^0.16.5"
   },
   "devDependencies": {
     "@ai-sdk/anthropic": "^3.0.71",

package/src/templates/chat/.agents/skills/real-time-sync/SKILL.md

@@ -50,7 +50,7 @@ The agent modifies data in SQL, but the UI runs in the browser. SSE bridges same
 
    For list/sidebar queries, use the same pattern — pass the counter into the queryKey of every list query you want to keep fresh.
 
-4. **Fallback** polling calls `/_agent-native/poll?since=N`. It runs every 2 seconds until SSE is connected, then relaxes to 15 seconds (`SSE_FALLBACK_INTERVAL_MS`). If SSE is disabled or unavailable (e.g., edge/serverless deployments), polling continues at the 2 s cadence. Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
+4. **Fallback** polling calls `/_agent-native/poll?since=N`. It polls every 2 seconds only while an agent run is in flight; otherwise it idles at 60 seconds whether or not SSE is connected (`SSE_FALLBACK_INTERVAL_MS` and `IDLE_POLL_INTERVAL_MS`, both 60 s). A hidden tab polls no faster than every 10 seconds (`HIDDEN_POLL_INTERVAL_MS`). Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
 
 5. When the agent writes to the database, the version increments, SSE/polling detects it, and React Query refetches the affected queries.
 

package/src/templates/default/.agents/skills/real-time-sync/SKILL.md

@@ -50,7 +50,7 @@ The agent modifies data in SQL, but the UI runs in the browser. SSE bridges same
 
    For list/sidebar queries, use the same pattern — pass the counter into the queryKey of every list query you want to keep fresh.
 
-4. **Fallback** polling calls `/_agent-native/poll?since=N`. It runs every 2 seconds until SSE is connected, then relaxes to 15 seconds (`SSE_FALLBACK_INTERVAL_MS`). If SSE is disabled or unavailable (e.g., edge/serverless deployments), polling continues at the 2 s cadence. Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
+4. **Fallback** polling calls `/_agent-native/poll?since=N`. It polls every 2 seconds only while an agent run is in flight; otherwise it idles at 60 seconds whether or not SSE is connected (`SSE_FALLBACK_INTERVAL_MS` and `IDLE_POLL_INTERVAL_MS`, both 60 s). A hidden tab polls no faster than every 10 seconds (`HIDDEN_POLL_INTERVAL_MS`). Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
 
 5. When the agent writes to the database, the version increments, SSE/polling detects it, and React Query refetches the affected queries.
 

package/src/templates/workspace-core/.agents/skills/real-time-sync/SKILL.md

@@ -50,7 +50,7 @@ The agent modifies data in SQL, but the UI runs in the browser. SSE bridges same
 
    For list/sidebar queries, use the same pattern — pass the counter into the queryKey of every list query you want to keep fresh.
 
-4. **Fallback** polling calls `/_agent-native/poll?since=N`. It runs every 2 seconds until SSE is connected, then relaxes to 15 seconds (`SSE_FALLBACK_INTERVAL_MS`). If SSE is disabled or unavailable (e.g., edge/serverless deployments), polling continues at the 2 s cadence. Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
+4. **Fallback** polling calls `/_agent-native/poll?since=N`. It polls every 2 seconds only while an agent run is in flight; otherwise it idles at 60 seconds whether or not SSE is connected (`SSE_FALLBACK_INTERVAL_MS` and `IDLE_POLL_INTERVAL_MS`, both 60 s). A hidden tab polls no faster than every 10 seconds (`HIDDEN_POLL_INTERVAL_MS`). Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
 
 5. When the agent writes to the database, the version increments, SSE/polling detects it, and React Query refetches the affected queries.