@agent-native/core 0.228.0-nightly-20261111212500 → 0.228.0

package/dist/integrations/slack-input-request.js

@@ -0,0 +1,87 @@
+/** One `ask-question` call's input as a Slack message, or null if Slack cannot show it. */
+export function slackInputRequestText(input) {
+    let items = [input];
+    // Absent, null or empty `questions` means the single-question form, as in the tool.
+    if (input?.questions !== undefined &&
+        input.questions !== null &&
+        input.questions !== "") {
+        try {
+            const parsed = Array.isArray(input.questions)
+                ? input.questions
+                : JSON.parse(stringifyInboundValue(input.questions));
+            if (!Array.isArray(parsed))
+                return null;
+            items = parsed.slice(0, 4);
+            // coercion-ok: questions Slack cannot read mean no input request; the run's own reply is sent instead.
+        }
+        catch {
+            return null;
+        }
+    }
+    const parsedBlocks = items.map((item) => slackQuestionBlock(item));
+    // A question Slack cannot show would leave the others unanswerable.
+    if (!parsedBlocks.length || parsedBlocks.includes(null))
+        return null;
+    const blocks = parsedBlocks.filter((block) => block !== null);
+    const allowFreeText = blocks.some((block) => block.allowFreeText);
+    const severalChoices = blocks.length > 1 || blocks.some((block) => block.allowMultiple);
+    return [
+        ...blocks.flatMap((block, blockIndex) => [
+            ...(blockIndex > 0 ? [""] : []),
+            ...block.lines,
+        ]),
+        "",
+        `Reply in this thread with your choice${severalChoices ? "s" : ""}${allowFreeText ? " or a short answer" : ""}.`,
+    ].join("\n");
+}
+function stringifyInboundValue(value) {
+    return typeof value === "string" ? value : JSON.stringify(value);
+}
+function slackQuestionBlock(input) {
+    const question = typeof input?.question === "string" ? input.question.trim() : "";
+    if (!question)
+        return null;
+    let rawOptions;
+    try {
+        rawOptions = Array.isArray(input?.options)
+            ? input.options
+            : JSON.parse(stringifyInboundValue(input?.options ?? "[]"));
+        // coercion-ok: options Slack cannot read mean no input request; the run's own reply is sent instead.
+    }
+    catch {
+        return null;
+    }
+    if (!Array.isArray(rawOptions) || rawOptions.length === 0)
+        return null;
+    const options = rawOptions
+        .slice(0, 4)
+        .map((option) => {
+        const value = option;
+        const label = typeof value?.label === "string"
+            ? value.label.trim()
+            : typeof value?.value === "string"
+                ? value.value.trim()
+                : "";
+        if (!label)
+            return null;
+        const description = typeof value?.description === "string" ? value.description.trim() : "";
+        return {
+            label: label.slice(0, 200),
+            description: description.slice(0, 400),
+        };
+    })
+        .filter((option) => option !== null);
+    if (!options.length)
+        return null;
+    const header = typeof input?.header === "string" ? input.header.trim().slice(0, 80) : "";
+    return {
+        allowFreeText: stringifyInboundValue(input?.allowFreeText ?? "true") !== "false",
+        allowMultiple: stringifyInboundValue(input?.allowMultiple ?? "false") === "true",
+        lines: [
+            ...(header ? [`*${header}*`] : []),
+            question.slice(0, 1_500),
+            "",
+            ...options.map((option, optionIndex) => `${optionIndex + 1}. ${option.label}${option.description ? ` — ${option.description}` : ""}`),
+        ],
+    };
+}

package/dist/integrations/webhook-handler.js

@@ -31,6 +31,7 @@ import { loadIntegrationMemoryPrompt } from "./integration-memory.js";
 import { insertPendingTask, isDuplicateEventError, stageTaskDeliveryPayload, } from "./pending-tasks-store.js";
 import { integrationRequestContext, resolveIntegrationRequestScope, } from "./request-scope.js";
 import { integrationScopeSubjectKey } from "./scope-store.js";
+import { slackInputRequestText } from "./slack-input-request.js";
 import { getThreadMapping, saveThreadMapping } from "./thread-mapping-store.js";
 import { listIntegrationUsageBudgets, releaseIntegrationUsageBudget, reserveIntegrationUsageBudget, settleIntegrationUsageBudget, } from "./usage-budget-store.js";
 const PROCESSOR_DISPATCH_SETTLE_WAIT_MS = 1_500;
@@ -1457,64 +1458,15 @@ function extractSlackInputRequest(completedRun) {
     if (!delivered)
         return null;
     const deliveredId = delivered.type === "tool_done" ? delivered.id : "";
-    for (let index = events.length - 1; index >= 0; index--) {
-        const event = events[index];
-        if (event.type !== "tool_start" ||
-            event.tool !== "ask-question" ||
-            event.id !== deliveredId) {
-            continue;
-        }
-        const input = event.input;
-        const question = typeof input?.question === "string" ? input.question.trim() : "";
-        if (!question)
-            return null;
-        let rawOptions;
-        try {
-            rawOptions = JSON.parse(stringifyInboundValue(input?.options ?? "[]"));
-        }
-        catch {
-            return null;
-        }
-        if (!Array.isArray(rawOptions) || rawOptions.length === 0)
-            return null;
-        const options = rawOptions
-            .slice(0, 4)
-            .map((option) => {
-            const value = option;
-            const label = typeof value?.label === "string"
-                ? value.label.trim()
-                : typeof value?.value === "string"
-                    ? value.value.trim()
-                    : "";
-            if (!label)
-                return null;
-            const description = typeof value?.description === "string"
-                ? value.description.trim()
-                : "";
-            return {
-                label: label.slice(0, 200),
-                description: description.slice(0, 400),
-            };
-        })
-            .filter((option) => option !== null);
-        if (!options.length)
-            return null;
-        const header = typeof input?.header === "string" ? input.header.trim().slice(0, 80) : "";
-        const allowFreeText = stringifyInboundValue(input?.allowFreeText ?? "true") !== "false";
-        return {
-            text: [
-                header ? `*${header}*` : null,
-                question.slice(0, 1_500),
-                "",
-                ...options.map((option, optionIndex) => `${optionIndex + 1}. ${option.label}${option.description ? ` — ${option.description}` : ""}`),
-                "",
-                `Reply in this thread with your choice${allowFreeText ? " or a short answer" : ""}.`,
-            ]
-                .filter((line) => line !== null)
-                .join("\n"),
-        };
-    }
-    return null;
+    const started = [...events]
+        .reverse()
+        .find((event) => event.type === "tool_start" &&
+        event.tool === "ask-question" &&
+        event.id === deliveredId);
+    if (started?.type !== "tool_start")
+        return null;
+    const text = slackInputRequestText(started.input);
+    return text === null ? null : { text };
 }
 function extractRecoverableA2AArtifactToolResult(completedRun) {
     for (let i = completedRun.events.length - 1; i >= 0; i--) {

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -75,9 +75,7 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         user: "user";
     }>>;
 }, z.core.$strip>>, {
-    deleted?: undefined;
     id?: undefined;
-    provider?: undefined;
     message?: undefined;
     found?: undefined;
     providers: {
@@ -90,44 +88,46 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         updatedAt: number;
     }[];
     count: number;
+    provider?: undefined;
+    deleted?: undefined;
     registered?: undefined;
     label?: undefined;
 } | {
-    deleted?: undefined;
     id?: undefined;
+    count?: undefined;
     message?: undefined;
     providers?: undefined;
-    count?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
+    deleted?: undefined;
     registered?: undefined;
     label?: undefined;
 } | {
-    deleted?: undefined;
-    provider?: undefined;
+    count?: undefined;
     message?: undefined;
     providers?: undefined;
-    count?: undefined;
+    provider?: undefined;
     found: boolean;
     id: string;
+    deleted?: undefined;
     registered?: undefined;
     label?: undefined;
 } | {
-    provider?: undefined;
+    count?: undefined;
     message?: undefined;
     found?: undefined;
     providers?: undefined;
-    count?: undefined;
+    provider?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
 } | {
-    deleted?: undefined;
-    provider?: undefined;
+    count?: undefined;
     found?: undefined;
     providers?: undefined;
-    count?: undefined;
+    provider?: undefined;
+    deleted?: undefined;
     registered: boolean;
     id: string;
     label: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -316,7 +316,9 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         notes?: string | undefined;
         scope?: "org" | "user" | undefined;
     }, {
+        deleted?: undefined;
         id?: undefined;
+        provider?: undefined;
         found?: undefined;
         message?: undefined;
         providers: {
@@ -329,46 +331,44 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
             updatedAt: number;
         }[];
         count: number;
-        provider?: undefined;
-        deleted?: undefined;
         registered?: undefined;
         label?: undefined;
     } | {
+        deleted?: undefined;
         id?: undefined;
-        count?: undefined;
         message?: undefined;
         providers?: undefined;
+        count?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
-        deleted?: undefined;
         registered?: undefined;
         label?: undefined;
     } | {
-        count?: undefined;
+        deleted?: undefined;
+        provider?: undefined;
         message?: undefined;
         providers?: undefined;
-        provider?: undefined;
+        count?: undefined;
         found: boolean;
         id: string;
-        deleted?: undefined;
         registered?: undefined;
         label?: undefined;
     } | {
-        count?: undefined;
+        provider?: undefined;
         found?: undefined;
         message?: undefined;
         providers?: undefined;
-        provider?: undefined;
+        count?: undefined;
         deleted: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
     } | {
-        count?: undefined;
+        deleted?: undefined;
+        provider?: undefined;
         found?: undefined;
         providers?: undefined;
-        provider?: undefined;
-        deleted?: undefined;
+        count?: undefined;
         registered: boolean;
         id: string;
         label: string;

package/dist/resources/handlers.d.ts

@@ -49,6 +49,7 @@ export declare function handleUploadResource(event: any): Promise<import("./stor
     error: string;
     storageSetupRequired?: undefined;
 } | {
+    error?: undefined;
     id: string;
     path: string;
     owner: string;
@@ -63,7 +64,6 @@ export declare function handleUploadResource(event: any): Promise<import("./stor
     runId: string | null;
     expiresAt: number | null;
     metadata: string | null;
-    error?: undefined;
     url: string;
     provider: string;
     storageSetupRequired?: undefined;

package/dist/scripts/db/safety.js

@@ -40,6 +40,7 @@ function isPunctuation(token, text) {
 }
 const SENSITIVE_FRAMEWORK_TABLES = new Set([
     "app_secrets",
+    "vault_secrets",
     "oauth_tokens",
     "mcp_oauth_clients",
     "mcp_oauth_codes",

package/dist/server/agent-chat/context-tools.js

@@ -469,62 +469,98 @@ function parseAskQuestion(args) {
     }
     return { question, header, allowMultiple, allowFreeText, options };
 }
+const MAX_ASK_QUESTIONS = 4;
+function parseAskQuestions(args) {
+    const raw = typeof args === "object" && args !== null
+        ? args.questions
+        : undefined;
+    if (raw === undefined || raw === null || raw === "") {
+        return { questions: [parseAskQuestion(args)] };
+    }
+    let parsed = raw;
+    if (!Array.isArray(raw)) {
+        try {
+            parsed = JSON.parse(String(raw));
+        }
+        catch {
+            throw new ActionInputValidationError("'questions' must be a JSON array of { question, header?, options, allowMultiple?, allowFreeText? }.");
+        }
+    }
+    if (!Array.isArray(parsed) ||
+        parsed.length === 0 ||
+        parsed.length > MAX_ASK_QUESTIONS) {
+        throw new ActionInputValidationError(`'questions' must be a JSON array of 1 to ${MAX_ASK_QUESTIONS} questions.`);
+    }
+    return {
+        questions: parsed.map((item) => {
+            const fields = (item ?? {});
+            return parseAskQuestion({
+                ...fields,
+                options: Array.isArray(fields.options)
+                    ? JSON.stringify(fields.options)
+                    : fields.options,
+            });
+        }),
+    };
+}
 function createAskQuestionTool() {
     const entry = {
         endsTurn: true,
         tool: {
-            description: "Ask the user a multiple-choice clarifying question and render it inline in the chat. Use this ONLY when you are genuinely blocked on a decision you cannot resolve from context and a wrong guess would be costly — an ambiguous metric, date range, or grain; a real fork in approach. Present 2-5 concrete options and mark the most likely one recommended. Do NOT use it for confirmations, for things the user already specified, or to dodge easy work you could just do. Calling this ends the turn: one question per turn, and any other tool call you emit alongside it will not run.",
+            description: "Ask 1-4 multiple-choice clarifying questions in a card above the message box. Use ONLY when blocked on a costly decision you cannot resolve from context (an ambiguous metric, date range or grain; a real fork in approach), never for confirmations, things already specified, or easy work. One question: `question` and `options`; several: `questions`, answered together in one message. Mark the likely option recommended. Ends the turn: other tool calls in the same response will not run.",
             parameters: {
                 type: "object",
                 properties: {
                     question: {
                         type: "string",
-                        description: "The complete question to ask the user. Clear, specific, ends with a question mark.",
+                        description: "The question, with the context needed to choose, ending in a question mark. Omit it with `questions`.",
+                    },
+                    questions: {
+                        type: "string",
+                        description: 'Instead of `question` and `options`: a JSON array of 1-4 `{ "question", "header"?, "options", "allowMultiple"?, "allowFreeText"? }`, each field as below.',
                     },
                     header: {
                         type: "string",
-                        description: 'Optional very short label (max ~12 chars) shown as a chip/heading above the question, e.g. "Date range", "Approach", "Library".',
+                        description: 'Optional short chip label (about 12 characters), e.g. "Date range".',
                     },
                     options: {
                         type: "string",
-                        description: 'A JSON array of 2-4 distinct, mutually-exclusive options (unless `allowMultiple` is true), each `{ "label": string, "value"?: string, "description"?: string, "preview"?: string, "recommended"?: boolean }`. `label` is 1-5 words; `description` explains the trade-off; `preview` is optional content (mockup, code snippet, short comparison) rendered under the option. `value` defaults to `label` when omitted. Mark the most likely option `"recommended": true`. Do NOT add an "Other" option — free text is provided automatically when `allowFreeText` is on.',
+                        description: 'A JSON array of 2-4 distinct options (exclusive unless `allowMultiple`), each `{ "label", "value"?, "recommended"? }`. The user sees only the label, on one line, so it says what you would do, specific to this case, in 3-10 words ("Checker fix only", not "Option A"); context every option shares goes in the question. `value` defaults to `label`. Add no "Other" option: `allowFreeText` provides one.',
                     },
                     allowFreeText: {
                         type: "string",
-                        description: 'Whether the user may also type a free-text "Other" answer. Keep this "true" (the default) for preferences and clarifying questions. Use "false" only when the underlying workflow can accept one of the enumerated values and cannot handle a custom answer.',
+                        description: 'Allow a typed "Other" answer. Keep "true" (the default) unless the workflow accepts only the listed values.',
                         enum: ["true", "false"],
                     },
                     allowMultiple: {
                         type: "string",
-                        description: 'Whether the user may select more than one option (multi-select). "true" or "false" (default).',
+                        description: 'Allow more than one option. "true" or "false" (the default).',
                         enum: ["true", "false"],
                     },
                 },
-                required: ["question", "options"],
+                required: [],
             },
         },
         run: async (args) => {
-            const { question, header, allowMultiple, allowFreeText, options } = args;
+            const { questions } = args;
             const askingRunCtx = getRequestRunContext();
             const askingThreadId = askingRunCtx?.threadId && askingRunCtx.threadId !== askingRunCtx.runId
                 ? askingRunCtx.threadId
                 : undefined;
             const payload = {
                 ...(askingThreadId ? { threadId: askingThreadId } : {}),
-                questions: [
-                    {
-                        id: "q1",
-                        type: "text-options",
-                        question,
-                        ...(header ? { header } : {}),
-                        required: !allowFreeText,
-                        multiSelect: allowMultiple,
-                        allowOther: allowFreeText,
-                        includeExplore: false,
-                        includeDecide: false,
-                        options,
-                    },
-                ],
+                questions: questions.map(({ question, header, allowMultiple, allowFreeText, options }, index) => ({
+                    id: `q${index + 1}`,
+                    type: "text-options",
+                    question,
+                    ...(header ? { header } : {}),
+                    required: !allowFreeText,
+                    multiSelect: allowMultiple,
+                    allowOther: allowFreeText,
+                    includeExplore: false,
+                    includeDecide: false,
+                    options,
+                })),
             };
             const { writeAppState } = await import("../../application-state/script-helpers.js");
             await writeAppState(appStateKeyForBrowserTab("guided-questions", getRequestRunContext()?.browserTabId), payload);
@@ -533,7 +569,7 @@ function createAskQuestionTool() {
     };
     const action = defineAction({
         description: entry.tool.description,
-        schema: z.unknown().transform(parseAskQuestion),
+        schema: z.unknown().transform(parseAskQuestions),
         endsTurn: true,
         run: entry.run,
     });

package/dist/server/builder-signup-experiment.js

@@ -330,9 +330,12 @@ export function createBuilderSignupExperiment(dependencies) {
             if (session)
                 return { status: "disabled" };
             if (!assignment) {
+                const { builderSignupAutomaticPercent } = getAppConfig().onboarding;
                 assignment = {
                     id: randomBytes(16).toString("hex"),
-                    variant: randomInt(2) === 0 ? "control" : "automatic",
+                    variant: randomInt(100) < builderSignupAutomaticPercent
+                        ? "automatic"
+                        : "control",
                     issuedAt: Date.now(),
                     policy: BUILDER_SIGNUP_POLICY,
                 };

package/dist/shared/ssr-session-bootstrap.js

@@ -68,8 +68,12 @@ export function isSessionNavigationPending() {
         typeof window[SESSION_NAVIGATION_FLAG] === "string");
 }
 function releaseSessionNavigation(href) {
-    if (window[SESSION_NAVIGATION_FLAG] !== href)
+    // The stall timer can outlive window: a test environment tears it down
+    // while the timer is still pending.
+    if (typeof window === "undefined" ||
+        window[SESSION_NAVIGATION_FLAG] !== href) {
         return;
+    }
     delete window[SESSION_NAVIGATION_FLAG];
     window.dispatchEvent?.(new Event(SESSION_NAVIGATION_RELEASED_EVENT));
 }

package/dist/templates/chat/app/components/chat/ChatRouteContent.tsx

@@ -39,8 +39,9 @@ import {
 } from "@agent-native/toolkit/app/chat/agentkit-chat/connections";
 import { CoreAgentKitRoot } from "@agent-native/toolkit/app/chat/agentkit-chat/index";
 import {
-  GuidedQuestionFlow,
+  GuidedQuestionCard,
   useGuidedQuestionFlow,
+  useRefetchGuidedQuestionsWhenAsked,
 } from "@agent-native/toolkit/app/chat/agentkit-chat/questions";
 import { isClientDraftThread } from "@agent-native/toolkit/app/chat/agentkit-chat/rail";
 import {
@@ -899,6 +900,8 @@ function ChatInitialMessage({
       control.sendMessage({
         text: requestText,
         attachments: [...(composerOptions?.uploadedAttachments ?? [])],
+        // The run reads mentions from here; metadata only records them.
+        ...(references.length ? { references: [...references] } : {}),
         options: runOptions,
         metadata,
         queueWhileRunning: metadata.custom.agentNativeQueueWhileRunning,
@@ -1048,6 +1051,7 @@ function ChatAgentFooter({ children }: { children: ReactNode }) {
     retryProviderStatus,
     handleSubmit,
     handleSkip,
+    refetchPendingQuestion,
   } = useGuidedQuestionFlow({
     stateKey: "guided-questions",
     queryKey: ["guided-questions", "agentkit"],
@@ -1058,12 +1062,16 @@ function ChatAgentFooter({ children }: { children: ReactNode }) {
     onSubmitMessage: submitAnswers,
     onSkipMessage: skipQuestions,
   });
+  useRefetchGuidedQuestionsWhenAsked({
+    tools: thread.tools,
+    refetch: refetchPendingQuestion,
+  });
 
   return (
     <div className="agent-kit-chat-footer-stack">
       {questions?.length ? (
         <div className="agent-kit-chat-guided-question">
-          <GuidedQuestionFlow
+          <GuidedQuestionCard
             questions={questions}
             onSubmit={handleSubmit}
             onSkip={handleSkip}
@@ -1074,7 +1082,6 @@ function ChatAgentFooter({ children }: { children: ReactNode }) {
             isSubmissionBlocked={isSubmissionBlocked}
             providerStatus={providerStatus}
             onRetryProviderStatus={retryProviderStatus}
-            className="h-auto items-stretch justify-stretch bg-transparent"
           />
         </div>
       ) : null}

package/dist/templates/chat/app/global.css

@@ -83,11 +83,6 @@
 .agent-kit-chat-guided-question {
   max-block-size: min(32rem, 58dvh);
   overflow: auto;
-  margin-block-end: 0.5rem;
-  border: 1px solid var(--agentkit-border);
-  border-radius: var(--agentkit-radius);
-  background: var(--agentkit-surface);
-  box-shadow: var(--agentkit-elevation);
 }
 
 .chat-sidebar-history .an-chat-history__list {

package/dist/vite/client.js

@@ -946,6 +946,22 @@ const disableDepSourcemapsPlugin = {
     name: "agent-native:no-dep-prebundle-sourcemaps",
     outputOptions: (options) => ({ ...options, sourcemap: false }),
 };
+const disableServedDepSourcemapsPlugin = {
+    name: "agent-native:no-served-dep-sourcemaps",
+    apply: "serve",
+    enforce: "post",
+    transform(code, id) {
+        if (process.env.AGENT_NATIVE_DEP_SOURCEMAPS === "1" ||
+            this.environment.name !== "client" ||
+            this.environment.mode !== "dev" ||
+            !this.environment.depsOptimizer?.isOptimizedDepFile(id)) {
+            return;
+        }
+        // Vite injects an identity map when no map is present. It only takes the
+        // transformed map when the code changes, so add a trailing newline.
+        return { code: `${code}\n`, map: { mappings: "" } };
+    },
+};
 function getDefaultOptimizeDeps(cwd) {
     const inMonorepo = findCoreSrcDir(cwd) !== null;
     const entries = [
@@ -3729,6 +3745,7 @@ function createAgentNativePlugins(options, { command, includeReactTransform, use
         clientOptionalPeerStubPlugin(cwd),
         ...userPlugins,
         externalStoreShimPlugin(),
+        disableServedDepSourcemapsPlugin,
         appChangelogRawPlugin(),
         actionTypesPlugin(),
         agentsBundlePlugin({ agentNativeConfig: options.agentNativeConfig }),

package/docs/content/dispatch.mdx

@@ -109,7 +109,7 @@ Slack, email, Telegram, and WhatsApp all flow into Dispatch's agent loop. Connec
 
 ### Secret vault
 
-Store credentials once in Dispatch's vault. By default, vault access is **all apps**: every saved key is available to every workspace app, and `sync-vault-to-app` pushes the full vault to the target app. Workspaces that need stricter separation can switch the vault to **manual** mode, where explicit per-app grants are required before sync. Non-admins can **request** a secret for an app; admins **approve**, which creates the secret and, in manual workflows, the grant. Every read, grant, sync, and rotation is captured in an audit log. This is what makes "rotate the OpenAI key" a one-click operation across ten apps instead of ten PRs.
+Store credentials once in Dispatch's vault. The value is encrypted into the shared credential store; the vault itself keeps only the key name, label, and grants, never a plaintext copy. By default, vault access is **all apps**: every saved key is available to every app that shares Dispatch's database. Workspaces that need stricter separation can switch the vault to **manual** mode, where explicit per-app grants are required. Non-admins can **request** a secret for an app; admins **approve**, which creates the secret and, in manual workflows, the grant. Every read, grant, and rotation is captured in an audit log. This is what makes "rotate the OpenAI key" a one-click operation across ten apps instead of ten PRs.
 
 ### Cross-app delegation
 

package/docs/content/multi-app-workspace.mdx

@@ -295,7 +295,7 @@ See [MCP Clients](/docs/mcp-clients) for the config schema, precedence rules, an
 
 The workspace root `.env` is loaded into every app automatically for deployment-level configuration such as `A2A_SECRET`, `BETTER_AUTH_SECRET`, and `DATABASE_URL`. User, org, and workspace API keys should be saved as scoped DB secrets instead of being written into `.env`. Per-app deploy-time overrides can still go in `apps/<name>/.env` and win on conflict.
 
-For runtime app credentials, prefer the Dispatch vault over hand-editing `.env` files. The vault defaults to all-apps access, so every saved vault key is available to every workspace app and can be pushed with `sync-vault-to-app`. Switch the vault to manual mode only when apps need explicit per-key grants.
+For runtime app credentials, prefer the Dispatch vault over hand-editing `.env` files. The vault defaults to all-apps access, so every saved vault key is available to every workspace app that shares its database. Switch the vault to manual mode only when apps need explicit per-key grants.
 
 ```text
 my-company-platform/

package/docs/content/security.mdx

@@ -322,7 +322,7 @@ pnpm action db-check-scoping --require-org  # Also require org_id
 | OAuth tokens (Google, GitHub)      | `oauth_tokens` store via `saveOAuthTokens()`               |
 | Session tokens                     | Automatic (Better Auth handles this)                       |
 
-Per-user/per-org credentials and the vault are encrypted at rest with AES-256-GCM. For a per-user/per-org credential, the key precedence is `<APP_NAME>_SECRETS_ENCRYPTION_KEY` (app-scoped — useful in a multi-app workspace where apps shouldn't share one key) → `SECRETS_ENCRYPTION_KEY` → `BETTER_AUTH_SECRET`; production refuses to start without one of these set. The shared workspace vault (`app_secrets`, meant to decrypt the same in sibling apps) prefers `WORKSPACE_SECRETS_ENCRYPTION_KEY`, then the legacy combined `SECRETS_ENCRYPTION_KEY`, then material derived from `A2A_SECRET`, with `BETTER_AUTH_SECRET` and the app-scoped key retained as compatibility candidates. Successful fallback reads compare-and-swap re-encrypt the shared column under the preferred key. During a workspace-key rotation, set `WORKSPACE_SECRETS_ENCRYPTION_KEY_PREVIOUS` to the old value until reads have migrated existing rows. To encrypt any pre-existing plaintext credential rows in place, run `pnpm action db-migrate-encrypt-credentials` (idempotent, non-destructive).
+Per-user/per-org credentials and the vault are encrypted at rest with AES-256-GCM. The Dispatch vault keeps no plaintext copy: `vault_secrets` holds names and metadata, and each value lives only in `app_secrets`. For a per-user/per-org credential, the key precedence is `<APP_NAME>_SECRETS_ENCRYPTION_KEY` (app-scoped — useful in a multi-app workspace where apps shouldn't share one key) → `SECRETS_ENCRYPTION_KEY` → `BETTER_AUTH_SECRET`; production refuses to start without one of these set. The shared workspace vault (`app_secrets`, meant to decrypt the same in sibling apps) prefers `WORKSPACE_SECRETS_ENCRYPTION_KEY`, then the legacy combined `SECRETS_ENCRYPTION_KEY`, then material derived from `A2A_SECRET`, with `BETTER_AUTH_SECRET` and the app-scoped key retained as compatibility candidates. Successful fallback reads compare-and-swap re-encrypt the shared column under the preferred key. During a workspace-key rotation, set `WORKSPACE_SECRETS_ENCRYPTION_KEY_PREVIOUS` to the old value until reads have migrated existing rows. To encrypt any pre-existing plaintext credential rows in place, run `pnpm action db-migrate-encrypt-credentials` (idempotent, non-destructive).
 
 Never store secrets in `settings`, `application_state`, source code, or action responses. Use the credential / vault APIs above — they handle both encryption and per-user scoping.
 

package/docs/content/template-dispatch-reference.mdx

@@ -44,7 +44,7 @@ Dispatch ships close to a hundred actions. Most of the UI-facing ones are alread
 | `create-vault-secret` / `update-vault-secret` / `delete-vault-secret`                           | Manage a stored credential.                              |
 | `create-vault-grant` / `revoke-vault-grant` / `list-vault-grants`                               | Grant, revoke, or list per-app secret access.            |
 | `request-vault-secret` / `approve-vault-request` / `deny-vault-request` / `list-vault-requests` | The request-and-review workflow for a new secret.        |
-| `grant-vault-secrets-to-app` / `sync-vault-to-app`                                              | Push access, or push the full vault, to one app.         |
+| `grant-vault-secrets-to-app`                                                                    | Grant several vault keys to one app in manual mode.      |
 | `list-vault-secrets` / `list-vault-secret-options` / `list-vault-audit`                         | Read secret metadata (never values) and the audit trail. |
 | `get-vault-access-settings` / `set-vault-access-settings`                                       | Read or change the all-apps vs. manual access mode.      |
 

package/docs/content/workspace-management.mdx

@@ -230,7 +230,6 @@ For a new workspace, after running `npx --yes @agent-native/core@latest create`:
 
 - [ ] Add shared secrets to the vault (API keys, OAuth credentials, etc.)
 - [ ] Keep the default all-apps vault policy or switch to manual per-app grants
-- [ ] Sync vault secrets to push them to apps
 - [ ] Register reusable workspace connections for shared provider accounts, then
       grant apps such as Brain, Analytics, Mail, or Dispatch only when they need
       that account