@agent-native/core 0.101.14 → 0.102.1

package/corpus/templates/tasks/server/db/test-tasks-table.ts

@@ -0,0 +1,76 @@
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+
+import { createClient } from "@libsql/client";
+import { drizzle } from "drizzle-orm/libsql";
+
+import * as schema from "./schema.js";
+
+export const TEST_TASKS_TABLE_SQL = `
+CREATE TABLE IF NOT EXISTS tasks (
+  id TEXT PRIMARY KEY,
+  title TEXT NOT NULL,
+  done INTEGER NOT NULL DEFAULT 0,
+  promoted_to_task INTEGER NOT NULL DEFAULT 1,
+  sort_order INTEGER NOT NULL DEFAULT 0,
+  owner_email TEXT NOT NULL DEFAULT 'local@localhost',
+  created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+CREATE INDEX IF NOT EXISTS idx_tasks_owner_done_updated
+  ON tasks (owner_email, done, updated_at);
+CREATE INDEX IF NOT EXISTS idx_tasks_owner_sort
+  ON tasks (owner_email, sort_order);
+CREATE INDEX IF NOT EXISTS idx_tasks_owner_promoted_sort
+  ON tasks (owner_email, promoted_to_task, sort_order);
+CREATE TABLE IF NOT EXISTS custom_fields (
+  id TEXT PRIMARY KEY,
+  title TEXT NOT NULL,
+  type TEXT NOT NULL,
+  config_json TEXT NOT NULL,
+  sort_order INTEGER NOT NULL DEFAULT 0,
+  owner_email TEXT NOT NULL,
+  created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+CREATE INDEX IF NOT EXISTS idx_custom_fields_owner_sort
+  ON custom_fields (owner_email, sort_order);
+CREATE TABLE IF NOT EXISTS custom_field_values (
+  id TEXT PRIMARY KEY,
+  field_id TEXT NOT NULL,
+  task_id TEXT NOT NULL,
+  value_json TEXT NOT NULL,
+  owner_email TEXT NOT NULL,
+  created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_custom_field_values_unique_task_field
+  ON custom_field_values (owner_email, task_id, field_id);
+CREATE INDEX IF NOT EXISTS idx_custom_field_values_owner_task
+  ON custom_field_values (owner_email, task_id);
+CREATE INDEX IF NOT EXISTS idx_custom_field_values_owner_field
+  ON custom_field_values (owner_email, field_id);
+CREATE TABLE IF NOT EXISTS user_config (
+  owner_email TEXT PRIMARY KEY,
+  task_card_field_ids_json TEXT NOT NULL DEFAULT '[]',
+  updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+`;
+
+// libsql, not better-sqlite3: its sync driver lets `.run()`/`.all()`/`.get()` pass here and fail in production.
+// A temp file, not `:memory:`: libsql scopes in-memory dbs per connection, so a transaction loses the schema.
+export async function createInMemoryTasksDb() {
+  const dir = mkdtempSync(join(tmpdir(), "tasks-test-"));
+  const client = createClient({ url: `file:${join(dir, "test.db")}` });
+  await client.executeMultiple(TEST_TASKS_TABLE_SQL);
+  const testDb = drizzle(client, { schema });
+
+  const close = client.close.bind(client);
+  client.close = () => {
+    close();
+    rmSync(dir, { recursive: true, force: true });
+  };
+
+  return { client, testDb };
+}

package/corpus/templates/tasks/server/db/transaction.ts

@@ -0,0 +1,6 @@
+import { getDb } from "./index.js";
+
+export type DbHandle = Pick<
+  ReturnType<typeof getDb>,
+  "select" | "insert" | "update" | "delete" | "transaction"
+>;

package/corpus/templates/tasks/server/errors.ts

@@ -0,0 +1,31 @@
+/**
+ * Errors whose `statusCode` the action layer surfaces to callers instead of
+ * hiding behind a generic 500 (see packages/core action-routes: errors with a
+ * numeric `statusCode < 500` are echoed with their message). Use these for
+ * caller mistakes so the agent and UI get an actionable 4xx, not "Internal
+ * server error". Genuine invariant failures should stay a plain Error (500).
+ */
+
+export class UserInputError extends Error {
+  readonly statusCode = 400;
+  constructor(message: string) {
+    super(message);
+    this.name = "UserInputError";
+  }
+}
+
+export class NotFoundError extends Error {
+  readonly statusCode = 404;
+  constructor(message: string) {
+    super(message);
+    this.name = "NotFoundError";
+  }
+}
+
+export class AuthError extends Error {
+  readonly statusCode = 401;
+  constructor(message: string) {
+    super(message);
+    this.name = "AuthError";
+  }
+}

package/corpus/templates/tasks/server/inbox/store.ts

@@ -0,0 +1,216 @@
+import { getDb } from "../db/index.js";
+import type { StoredItem } from "../db/schema.js";
+import type { DbHandle } from "../db/transaction.js";
+import { NotFoundError } from "../errors.js";
+import {
+  assertStoredItemsExist,
+  createStoredItem,
+  deleteStoredItems,
+  getStoredItem,
+  listStoredItems,
+  promoteStoredItemsToTasks,
+  reorderStoredItems,
+  requireUserEmail,
+  updateStoredItems,
+} from "../stored-items/store.js";
+import { type Task, toTask } from "../tasks/store.js";
+
+export { requireUserEmail };
+
+/** Action/UI view of an inbox item (`promotedToTask = false` in storage). */
+export type InboxItem = Omit<StoredItem, "promotedToTask" | "done">;
+
+const NOT_FOUND = "Stored item not found.";
+
+export async function createInboxItem(
+  input: {
+    ownerEmail: string;
+    title: string;
+    id?: string;
+    now?: string;
+  },
+  db: DbHandle = getDb(),
+): Promise<InboxItem> {
+  const item = await createStoredItem(
+    {
+      ownerEmail: input.ownerEmail,
+      title: input.title,
+      id: input.id ?? crypto.randomUUID(),
+      now: input.now ?? new Date().toISOString(),
+      promotedToTask: false,
+    },
+    db,
+  );
+  return toInboxItem(item);
+}
+
+export async function getInboxItem(
+  input: {
+    ownerEmail: string;
+    id: string;
+  },
+  db: DbHandle = getDb(),
+): Promise<InboxItem | null> {
+  const item = await getStoredItem(
+    {
+      ...input,
+      promotedToTask: false,
+    },
+    db,
+  );
+  return item ? toInboxItem(item) : null;
+}
+
+export async function listInboxItems(
+  input: {
+    ownerEmail: string;
+    ids?: string[];
+  },
+  db: DbHandle = getDb(),
+): Promise<InboxItem[]> {
+  const items = await listStoredItems(
+    {
+      ...input,
+      promotedToTask: false,
+      notFoundMessage: NOT_FOUND,
+    },
+    db,
+  );
+  return items.map(toInboxItem);
+}
+
+export async function updateInboxItems(
+  input: {
+    ownerEmail: string;
+    ids: string[];
+    title?: string;
+    now?: string;
+  },
+  db: DbHandle = getDb(),
+): Promise<InboxItem[]> {
+  const items = await updateStoredItems(
+    {
+      ...input,
+      promotedToTask: false,
+      notFoundMessage: NOT_FOUND,
+    },
+    db,
+  );
+  return items.map(toInboxItem);
+}
+
+export async function updateInboxItem(
+  input: {
+    ownerEmail: string;
+    id: string;
+    title?: string;
+    now?: string;
+  },
+  db: DbHandle = getDb(),
+): Promise<InboxItem> {
+  const [item] = await updateInboxItems({ ...input, ids: [input.id] }, db);
+  if (!item) throw new NotFoundError(NOT_FOUND);
+  return item;
+}
+
+export async function deleteInboxItems(
+  input: {
+    ownerEmail: string;
+    ids: string[];
+  },
+  db: DbHandle = getDb(),
+): Promise<{ ok: true; deleted: number }> {
+  const ids = [...new Set(input.ids)];
+  await assertStoredItemsExist(
+    {
+      ownerEmail: input.ownerEmail,
+      ids,
+      promotedToTask: false,
+      notFoundMessage: NOT_FOUND,
+    },
+    db,
+  );
+
+  await deleteStoredItems(
+    {
+      ownerEmail: input.ownerEmail,
+      ids,
+      promotedToTask: false,
+    },
+    db,
+  );
+
+  return { ok: true, deleted: ids.length };
+}
+
+export async function deleteInboxItem(
+  input: {
+    ownerEmail: string;
+    id: string;
+  },
+  db: DbHandle = getDb(),
+): Promise<void> {
+  await deleteInboxItems({ ownerEmail: input.ownerEmail, ids: [input.id] }, db);
+}
+
+export async function reorderInboxItems(
+  input: {
+    ownerEmail: string;
+    inboxItemIds: string[];
+  },
+  db: DbHandle = getDb(),
+): Promise<{ items: InboxItem[] }> {
+  await reorderStoredItems(
+    {
+      ownerEmail: input.ownerEmail,
+      promotedToTask: false,
+      orderedIds: input.inboxItemIds,
+      idLabel: "inboxItemIds",
+    },
+    db,
+  );
+
+  const items = await listInboxItems({ ownerEmail: input.ownerEmail }, db);
+  return { items };
+}
+
+export async function markInboxItemsReady(
+  input: {
+    ownerEmail: string;
+    ids: string[];
+    now?: string;
+  },
+  db: DbHandle = getDb(),
+): Promise<{ tasks: Task[] }> {
+  const items = await promoteStoredItemsToTasks(
+    {
+      ownerEmail: input.ownerEmail,
+      ids: input.ids,
+      now: input.now,
+    },
+    db,
+  );
+  return { tasks: items.map(toTask) };
+}
+
+export async function markInboxItemReady(
+  input: {
+    ownerEmail: string;
+    id: string;
+    now?: string;
+  },
+  db: DbHandle = getDb(),
+): Promise<{ task: Task }> {
+  const { tasks } = await markInboxItemsReady(
+    { ownerEmail: input.ownerEmail, ids: [input.id], now: input.now },
+    db,
+  );
+  const task = tasks[0];
+  if (!task) throw new NotFoundError(NOT_FOUND);
+  return { task };
+}
+
+function toInboxItem(item: StoredItem): InboxItem {
+  const { promotedToTask: _, done: __, ...inboxItem } = item;
+  return inboxItem;
+}

package/corpus/templates/tasks/server/middleware/auth.ts

@@ -0,0 +1,15 @@
+import { runAuthGuard } from "@agent-native/core/server";
+/**
+ * Global auth middleware — runs for ALL requests (page routes, API routes,
+ * framework routes). The auth plugin configures the guard; this middleware
+ * enforces it on every request.
+ *
+ * Without this, auth only runs for /_agent-native/* routes because the
+ * framework handler's middleware registry is scoped to that catch-all.
+ * Page routes (/, /settings) and API routes (/api/*) would bypass auth.
+ */
+import { defineEventHandler } from "h3";
+
+export default defineEventHandler(async (event) => {
+  return runAuthGuard(event);
+});

package/corpus/templates/tasks/server/plugins/agent-chat.ts

@@ -0,0 +1,46 @@
+import { getOrgContext } from "@agent-native/core/org";
+import {
+  createAgentChatPlugin,
+  loadActionsFromStaticRegistry,
+} from "@agent-native/core/server";
+
+import actionsRegistry from "../../.generated/actions-registry.js";
+
+const INITIAL_TOOL_NAMES = [
+  "view-screen",
+  "navigate",
+  "list-tasks",
+  "create-task",
+  "update-task",
+  "delete-task",
+  "bulk-update-tasks",
+  "bulk-delete-tasks",
+  "bulk-delete-inbox-items",
+  "reorder-tasks",
+  "list-inbox-items",
+  "create-inbox-item",
+  "update-inbox-item",
+  "delete-inbox-item",
+  "mark-inbox-item-ready",
+  "reorder-inbox-items",
+];
+
+export default createAgentChatPlugin({
+  appId: "tasks",
+  actions: loadActionsFromStaticRegistry(actionsRegistry),
+  initialToolNames: INITIAL_TOOL_NAMES,
+  resolveOrgId: async (event) => (await getOrgContext(event)).orgId,
+  systemPrompt: `You are the Tasks app agent. Tasks live on /tasks; not-ready capture lives in /inbox. Use actions for all operations.
+
+When the user asks to add a reminder, todo, or rough idea, create an inbox item with create-inbox-item unless they explicitly ask to add directly to the task list (then use create-task).
+Use mark-inbox-item-ready when an inbox item is clear enough to become a task.
+Use reorder-tasks when the user asks to move or reorder tasks in the visible list.
+Use reorder-inbox-items when the user asks to reorder the inbox list.
+Use inbox actions to list, edit, delete, and promote inbox items.
+Call view-screen first when the user's visible task or inbox context matters.
+When view-screen returns selection, treat selectedItems as the user's current UI multi-select on /tasks or /inbox.
+Prefer bulk-update-tasks and bulk-delete-tasks when the user clearly means multiple tasks (e.g. "mark these done", "delete the selected ones", or several titles at once). Use single-task actions for one task or when bulk selection is not in play.
+Prefer bulk-delete-inbox-items when the user clearly means multiple inbox items.
+Ask for confirmation before delete-task, bulk-delete-tasks, delete-inbox-item, and bulk-delete-inbox-items.
+Do not use db-query for normal task or inbox operations.`,
+});

package/corpus/templates/tasks/server/plugins/auth.ts

@@ -0,0 +1,15 @@
+import { createAuthPlugin } from "@agent-native/core/server";
+
+export default createAuthPlugin({
+  marketing: {
+    appName: "Tasks",
+    tagline:
+      "Manage your personal tasks: triage in the inbox, finish from the list. Use an agent that can do all of that for you.",
+    features: [
+      "Inbox triage — capture ideas and drafts as they come, then promote them to tasks when they are ready",
+      "Task management — create, reorder, and complete tasks in a list that stays in the order you put it in",
+      "Track what you care about with custom fields — text, numbers, currency, dates, and color-coded selects",
+      "Anything you can do here, the agent can do too — and it sees what is on your screen, so “finish these” means the rows you actually selected",
+    ],
+  },
+});

package/corpus/templates/tasks/server/plugins/db.ts

@@ -0,0 +1,90 @@
+import { runMigrations } from "@agent-native/core/db";
+
+export default runMigrations(
+  [
+    {
+      version: 1,
+      sql: `CREATE TABLE IF NOT EXISTS tasks (
+        id TEXT PRIMARY KEY,
+        title TEXT NOT NULL,
+        done INTEGER NOT NULL DEFAULT 0,
+        owner_email TEXT NOT NULL DEFAULT 'local@localhost',
+        created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
+      )`,
+    },
+    {
+      version: 2,
+      sql: `CREATE INDEX IF NOT EXISTS idx_tasks_owner_done_updated
+        ON tasks (owner_email, done, updated_at)`,
+    },
+    {
+      version: 3,
+      sql: `ALTER TABLE tasks ADD COLUMN sort_order INTEGER NOT NULL DEFAULT 0`,
+    },
+    {
+      version: 4,
+      sql: `CREATE INDEX IF NOT EXISTS idx_tasks_owner_sort
+        ON tasks (owner_email, sort_order)`,
+    },
+    {
+      version: 5,
+      sql: `WITH ranked AS (
+        SELECT id,
+          (ROW_NUMBER() OVER (
+            PARTITION BY owner_email
+            ORDER BY updated_at DESC, created_at DESC
+          ) - 1) * 1000 AS next_sort
+        FROM tasks
+      )
+      UPDATE tasks
+      SET sort_order = (SELECT next_sort FROM ranked WHERE ranked.id = tasks.id)
+      WHERE EXISTS (SELECT 1 FROM ranked WHERE ranked.id = tasks.id)`,
+    },
+    {
+      version: 6,
+      sql: `ALTER TABLE tasks ADD COLUMN promoted_to_task INTEGER NOT NULL DEFAULT 1;
+      CREATE INDEX IF NOT EXISTS idx_tasks_owner_promoted_sort
+        ON tasks (owner_email, promoted_to_task, sort_order)`,
+    },
+    {
+      version: 7,
+      sql: `CREATE TABLE IF NOT EXISTS custom_fields (
+        id TEXT PRIMARY KEY,
+        title TEXT NOT NULL,
+        type TEXT NOT NULL,
+        config_json TEXT NOT NULL,
+        sort_order INTEGER NOT NULL DEFAULT 0,
+        owner_email TEXT NOT NULL,
+        created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
+      );
+      CREATE INDEX IF NOT EXISTS idx_custom_fields_owner_sort
+        ON custom_fields (owner_email, sort_order);
+      CREATE TABLE IF NOT EXISTS custom_field_values (
+        id TEXT PRIMARY KEY,
+        field_id TEXT NOT NULL,
+        task_id TEXT NOT NULL,
+        value_json TEXT NOT NULL,
+        owner_email TEXT NOT NULL,
+        created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
+      );
+      CREATE UNIQUE INDEX IF NOT EXISTS idx_custom_field_values_unique_task_field
+        ON custom_field_values (owner_email, task_id, field_id);
+      CREATE INDEX IF NOT EXISTS idx_custom_field_values_owner_task
+        ON custom_field_values (owner_email, task_id);
+      CREATE INDEX IF NOT EXISTS idx_custom_field_values_owner_field
+        ON custom_field_values (owner_email, field_id)`,
+    },
+    {
+      version: 8,
+      sql: `CREATE TABLE IF NOT EXISTS user_config (
+        owner_email TEXT PRIMARY KEY,
+        task_card_field_ids_json TEXT NOT NULL DEFAULT '[]',
+        updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
+      )`,
+    },
+  ],
+  { table: "tasks_migrations" },
+);

package/corpus/templates/tasks/server/routes/[...page].get.ts

@@ -0,0 +1,5 @@
+import { createH3SSRHandler } from "@agent-native/core/server/ssr-handler";
+
+export default createH3SSRHandler(
+  () => import("virtual:react-router/server-build"),
+);