Own Your Agents · 02.06
Portability: Workspace Bundles
Encrypted, portable exports of an entire workspace — share it, sell it, or back it up. The profile is the secrets boundary.
Three profiles, one export call
A workspace bundle is a signed envelope produced by one export call, shaped by which of three profiles you choose — and the profile is what decides the secrets boundary, not an afterthought bolted on:
| Profile | Secrets | Embeddings | Use it for |
|---|---|---|---|
backup | Included | Included | Restoring your own workspace on a new machine, byte-for-byte. |
share | Stripped | Dropped, recompiled on install | Handing a workspace to a teammate or another environment. |
sell | Stripped, and blocked if any is detected | Dropped, recompiled on install | Distributing a workspace commercially, with a sellability check and signing. |
Only backup ever includes secret values. share and sell instead export a list of credential slots the receiving workspace needs to reconnect — the shape of what's required travels, the values never do.
Selling has a hard gate
A sell export runs an explicit sellability assertion before it's allowed to complete. If the bundle contains secrets or other sensitive data that shouldn't be resold, the export fails outright rather than shipping something that leaks credentials to a buyer. Sellable bundles are also signed, giving the receiving side something to verify against tampering.
Export, preview, import
POST /v1/workspace/bundle/export { profile: "share", name: "My Workspace" }
POST /v1/workspace/bundle/preview { envelope } // non-mutating — inspect before installing
POST /v1/workspace/bundle/import { envelope, permissionsAcknowledged: true }Preview is deliberately non-mutating: the receiving side can inspect exactly what a bundle contains — how many agents, how many credential slots it will need reconnected, what it will overwrite — before committing to the import.
Continue
Embedded SQLite, a bundled offline embedding model, and a content-addressed local asset store — how Agentis runs complete on your own machine.
How one Agentis install runs multiple environments, each with its own separate secrets vault.