@agent-native/core 0.205.0 → 0.205.1-nightly-20261008213122

package/dist/authorization/check-action.js

@@ -1,6 +1,7 @@
 import { getDbExec } from "../db/client.js";
 import { getAppPermissionOverrides, getRegisteredAppRoles, resolveAppRole, } from "../org/app-roles.js";
 import { isWorkspaceAppAccessAllowed, WORKSPACE_APP_ACCESS_UNAVAILABLE, WORKSPACE_APP_ACCESS_UNAVAILABLE_MESSAGE, } from "../org/workspace-app-access.js";
+import { resolveWorkspaceAccessAppId } from "../org/workspace-app-identity.js";
 import { ForbiddenError, resolveAccess } from "../sharing/access.js";
 import { ROLE_RANK } from "../sharing/schema.js";
 import { registerActionAccessChecker } from "./action-access-runtime.js";
@@ -63,10 +64,13 @@ export async function checkAction(config, args, ctx, target) {
                 permission,
             };
         }
-        const appAllowed = await isWorkspaceAppAccessAllowed(appId, {
-            email: identity.userEmail,
-            orgId: identity.orgId,
-        });
+        const workspaceAppId = resolveWorkspaceAccessAppId(appId);
+        const appAllowed = workspaceAppId
+            ? await isWorkspaceAppAccessAllowed(workspaceAppId, {
+                email: identity.userEmail,
+                orgId: identity.orgId,
+            })
+            : true;
         if (appAllowed === WORKSPACE_APP_ACCESS_UNAVAILABLE) {
             throw Object.assign(new Error(WORKSPACE_APP_ACCESS_UNAVAILABLE_MESSAGE), {
                 statusCode: 503,

package/dist/collab/routes.d.ts

@@ -13,8 +13,8 @@ export declare const getCollabState: import("h3").EventHandlerWithFetch<import("
     };
 }>>;
 export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/deploy/build.js

@@ -4029,6 +4029,12 @@ export async function runNitroBuildPipeline(opts) {
         patchReactRouterServerManifestInOutput(nitro.options.output.serverDir, trustedClientDirectory, resolvedClientDir);
     }
 }
+function removeServerSourceMaps(serverDir) {
+    const sourceMaps = fs.globSync("**/*.map", { cwd: serverDir });
+    for (const sourceMap of sourceMaps) {
+        fs.rmSync(path.join(serverDir, sourceMap), { force: true });
+    }
+}
 function resolveNitroClientDirectory(cwd, defaultClientDirectory) {
     const configured = process.env[PREBUILT_CLIENT_DIRECTORY_ENV]?.trim();
     const clientDirectory = configured
@@ -4357,6 +4363,10 @@ export default bundle;
     if (isCloudflareModulePreset(preset)) {
         bundleYjsRuntimeForServerlessOutput(nitro.options.output.serverDir, cwd);
     }
+    if (sentryServerSourceMapPlugins.length > 0) {
+        removeServerSourceMaps(nitro.options.output.serverDir);
+        console.log("[deploy] Ensured Nitro server output is free of source maps before function packaging.");
+    }
     if (preset === "netlify") {
         if (isDurableBackgroundEmitRequired()) {
             emitSingleTemplateNetlifyBackgroundFunction(cwd);

package/dist/notifications/routes.d.ts

@@ -1,13 +1,13 @@
 export declare function createNotificationsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<"" | import("./types.js").Notification[] | {
     count: number;
     updated?: undefined;
-    ok?: undefined;
     error?: undefined;
+    ok?: undefined;
 } | {
     count?: undefined;
     updated: number;
-    ok?: undefined;
     error?: undefined;
+    ok?: undefined;
 } | {
     count?: undefined;
     updated?: undefined;
@@ -16,6 +16,6 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
 } | {
     count?: undefined;
     updated?: undefined;
-    ok: boolean;
     error?: undefined;
+    ok: boolean;
 }>>;

package/dist/observability/routes.d.ts

@@ -33,27 +33,27 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     summary?: undefined;
     spans?: undefined;
 } | {
+    error?: undefined;
     ok?: undefined;
     message?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
-    error?: undefined;
 } | {
+    error?: undefined;
     ok?: undefined;
     message?: undefined;
     summary?: undefined;
     spans?: undefined;
     traceMissing: true;
     id: string;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok?: undefined;
     message?: undefined;
     summary?: undefined;
     spans?: undefined;
     traceMissing?: undefined;
     id: string;
-    error?: undefined;
 } | {
     ok?: undefined;
     message?: undefined;
@@ -61,9 +61,9 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     spans?: undefined;
     error: any;
 } | {
+    error?: undefined;
     message?: undefined;
     summary?: undefined;
     spans?: undefined;
     ok: boolean;
-    error?: undefined;
 }>>;

package/dist/org/index.d.ts

@@ -177,10 +177,10 @@ export declare const getMyOrgHandler: import("h3").EventHandlerWithFetch<import(
     soloDeploymentAdmin: boolean | undefined;
 }>>;
 export declare const createOrgHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
+    role?: undefined;
     name?: undefined;
     success: boolean;
     id?: undefined;
-    role?: undefined;
 } | {
     success?: undefined;
     id: string;

package/dist/org/workspace-app-identity.d.ts

@@ -0,0 +1 @@
+export declare function resolveWorkspaceAccessAppId(targetAppId?: string): string;

package/dist/org/workspace-app-identity.js

@@ -0,0 +1,25 @@
+import { getAppConfig } from "../app-config/index.js";
+export function resolveWorkspaceAccessAppId(targetAppId) {
+    const app = getAppConfig().app;
+    const identities = [
+        app.id,
+        app.legacyId,
+        app.template,
+        app.slug,
+        app.packageName,
+        app.workspaceId,
+    ]
+        .map((value) => value?.trim())
+        .filter(Boolean);
+    // Other apps still require their own workspace grant; only this deployment's
+    // aliases resolve to the identity used by its HTTP access gate.
+    const target = targetAppId?.trim();
+    if (target && !identities.includes(target))
+        return target;
+    const workspaceId = app.workspaceId?.trim();
+    if (workspaceId)
+        return workspaceId;
+    return identities.some((value) => value?.toLowerCase() === "dispatch")
+        ? "dispatch"
+        : "";
+}

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -75,8 +75,8 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         user: "user";
     }>>;
 }, z.core.$strip>>, {
-    message?: undefined;
     id?: undefined;
+    message?: undefined;
     found?: undefined;
     providers: {
         id: string;
@@ -93,9 +93,9 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     registered?: undefined;
     label?: undefined;
 } | {
-    message?: undefined;
     id?: undefined;
     count?: undefined;
+    message?: undefined;
     providers?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
@@ -103,8 +103,8 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     registered?: undefined;
     label?: undefined;
 } | {
-    message?: undefined;
     count?: undefined;
+    message?: undefined;
     providers?: undefined;
     provider?: undefined;
     found: boolean;
@@ -113,8 +113,8 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     registered?: undefined;
     label?: undefined;
 } | {
-    message?: undefined;
     count?: undefined;
+    message?: undefined;
     found?: undefined;
     providers?: undefined;
     provider?: undefined;

package/dist/server/agent-engine-default-model-route.d.ts

@@ -9,16 +9,16 @@ export declare const AGENT_ENGINE_API_KEY_ACTION_NAME = "agent-engine-api-key";
  */
 export declare function createAgentEngineDisconnectHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
-    ok?: undefined;
     scope?: undefined;
+    ok?: undefined;
 } | {
     ok: boolean;
     error: any;
     scope?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     scope: "org" | "user";
+    error?: undefined;
 }>>;
 export interface DefaultModelSelectionRequest {
     engine: string;

package/dist/server/auth.js

@@ -4,6 +4,7 @@ import { getAppConfig, resolveAppHomePath } from "../app-config/index.js";
 import { acceptPendingInvitationsForEmail } from "../org/accept-pending.js";
 import { newOrgSelection, ORG_SELECTION_COOKIE, } from "../org/request-org-cache.js";
 import { isWorkspaceAppAccessAllowed, WORKSPACE_APP_ACCESS_UNAVAILABLE, WORKSPACE_APP_ACCESS_UNAVAILABLE_MESSAGE, } from "../org/workspace-app-access.js";
+import { resolveWorkspaceAccessAppId } from "../org/workspace-app-identity.js";
 import { EMBED_SESSION_COOKIE, EMBED_START_PATH, EMBED_TARGET_HEADER, isMcpDirectoryWidgetReadCapabilityScope, } from "../shared/embed-auth.js";
 import { FIRST_RUN_ONBOARDING_COOKIE, FIRST_RUN_ONBOARDING_MAX_AGE, } from "../shared/first-run-onboarding.js";
 import { isGoogleProfileImageUrl } from "../shared/google-profile-image.js";
@@ -2682,20 +2683,6 @@ function loginHtmlResponse(config, event, requestPath, options = {}) {
         },
     });
 }
-function resolveWorkspaceAccessAppId() {
-    const app = getAppConfig().app;
-    const workspaceId = app.workspaceId?.trim();
-    if (workspaceId)
-        return workspaceId;
-    const isDispatch = [
-        app.id,
-        app.legacyId,
-        app.template,
-        app.slug,
-        app.packageName,
-    ].some((value) => value?.trim().toLowerCase() === "dispatch");
-    return isDispatch ? "dispatch" : "";
-}
 function isHtmlDocumentRequest(event, pathname) {
     if (!isReadMethod(event))
         return false;

package/dist/server/google-oauth.js

@@ -4,7 +4,7 @@ import { getAppConfig } from "../app-config/index.js";
 import { normalizeAnalyticsAnonymousId } from "../shared/analytics-anonymous-id.js";
 import { normalizeAppPath } from "../shared/sign-in-journey.js";
 import { getAppBasePathFromViteEnv } from "./app-base-path.js";
-import { readAnalyticsAnonymousId, signupAttributionFromCookieHeader, } from "./attribution.js";
+import { readAnalyticsAnonymousId, readAnalyticsSessionId, signupAttributionFromCookieHeader, } from "./attribution.js";
 import { getBetterAuthUserIdForEmail, hasBetterAuthUserEmail, trackSignupEvent, } from "./better-auth-instance.js";
 import { getWorkspaceA2ADerivedSecret } from "./derived-secret.js";
 import { writeDesktopSso } from "./desktop-sso.js";
@@ -575,10 +575,12 @@ export async function createOAuthSession(event, email, opts) {
             setFirstRunOnboardingCookie(event);
         }
         if (shouldTrackSignup && opts.trackSignup) {
+            const signupCookieHeader = getHeader(event, "cookie") ?? null;
             const attribution = opts.trackSignup.attribution ??
-                signupAttributionFromCookieHeader(getHeader(event, "cookie") ?? null);
+                signupAttributionFromCookieHeader(signupCookieHeader);
             const anonymousId = opts.trackSignup.signupAnonymousId ??
-                readAnalyticsAnonymousId(getHeader(event, "cookie") ?? null);
+                readAnalyticsAnonymousId(signupCookieHeader);
+            const sessionId = readAnalyticsSessionId(signupCookieHeader);
             const authUserId = (await getBetterAuthUserIdForEmail(email)) ??
                 opts.trackSignup.canonicalAuthUserId;
             await trackSignupEvent({
@@ -590,6 +592,7 @@ export async function createOAuthSession(event, email, opts) {
                 name: opts.trackSignup.name,
                 attribution,
                 anonymousId,
+                sessionId,
             });
         }
         // Desktop SSO: record this session in the home-dir broker file so

package/dist/triggers/actions/manage-automation.d.ts

@@ -29,10 +29,10 @@ declare const _default: import("../../action.js").ActionDefinition<{
     executionEngine?: undefined;
     executionCwd?: undefined;
 } | {
+    scope?: undefined;
     enabled?: undefined;
     nextRun?: undefined;
     created?: undefined;
-    scope?: undefined;
     triggerType?: undefined;
     event?: undefined;
     deleted: boolean;
@@ -45,9 +45,9 @@ declare const _default: import("../../action.js").ActionDefinition<{
     executionCwd?: undefined;
     webhookPath?: undefined;
 } | {
+    scope?: undefined;
     deleted?: undefined;
     created?: undefined;
-    scope?: undefined;
     triggerType?: undefined;
     event?: undefined;
     name: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.205.0",
+  "version": "0.205.1-nightly-20261008213122",
   "description": "The agentic application framework for building autonomous agents with intuitive UIs",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -685,8 +685,8 @@
     "yaml": "^2.9.0",
     "yjs": "^13.6.33",
     "zod": "^4.3.6",
-    "@agent-native/recap-cli": "^0.5.67",
-    "@agent-native/agentkit": "^0.205.0"
+    "@agent-native/agentkit": "^0.205.1-nightly-20261008213122",
+    "@agent-native/recap-cli": "^0.5.67"
   },
   "devDependencies": {
     "@ai-sdk/anthropic": "^3.0.71",
@@ -756,7 +756,7 @@
     "xlsx": "^0.18.5"
   },
   "peerDependencies": {
-    "@agent-native/core-corpus": ">=0.196.0",
+    "@agent-native/core-corpus": "0.205.1-nightly-20261008213122",
     "@ai-sdk/anthropic": ">=3",
     "@ai-sdk/cohere": ">=3",
     "@ai-sdk/google": ">=3",