@agent-native/core 0.130.1 → 0.130.2

package/dist/sharing/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/sharing/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAgLH,0EAA0E;AAC1E,6EAA6E;AAC7E,8EAA8E;AAC9E,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,8EAA8E;AAC9E,+EAA+E;AAC/E,MAAM,YAAY,GAAG,mCAAmC,CAAC;AAEzD,MAAM,cAAc,GAClB,UAAiB,CAAC;AAEpB,SAAS,aAAa;IACpB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM;QAC/B,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM;QAC7B,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B;IACnC,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;IACtC,OAAO,oEAAoE,CAAC,IAAI,CAC9E,KAAK,CACN,CAAC;AACJ,CAAC;AAED,SAAS,WAAW;IAClB,IAAI,CAAC,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,GAAG,IAAI,GAAG,EAAyC,CAAC;QACrD,cAAc,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,KAAoC;IAEpC,IAAI,CAAC,aAAa,EAAE,IAAI,4BAA4B,EAAE;QAAE,OAAO;IAC/D,WAAW,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAAY;IAEZ,OAAO,WAAW,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,IAAY;IAEZ,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,gDAAgD,CAC1F,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5C,CAAC","sourcesContent":["/**\n * Registry of shareable resources.\n *\n * Each template registers its ownable resource(s) once on module load so the\n * framework-level share actions (`share-resource`, `list-resource-shares`,\n * etc.) can dispatch to the correct tables.\n *\n *   import { registerShareableResource } from \"@agent-native/core/sharing\";\n *   import * as schema from \"./schema.js\";\n *\n *   registerShareableResource({\n *     type: \"document\",\n *     resourceTable: schema.documents,\n *     sharesTable: schema.documentShares,\n *     displayName: \"Document\",\n *     titleColumn: \"title\",\n *   });\n */\n\nimport type { UserProfile } from \"../user-profile/shared.js\";\n\nexport interface ShareableResourceRegistration {\n  /** Stable identifier used across actions, UI, and analytics. e.g. \"document\". */\n  type: string;\n  /** Drizzle table for the parent resource (must have ownableColumns()). */\n  resourceTable: any;\n  /** Drizzle table produced by createSharesTable(). */\n  sharesTable: any;\n  /** Human-readable singular label shown in the share dialog. */\n  displayName: string;\n  /**\n   * Column on the resource table that holds a human-readable title for\n   * display in the share UI. Default: \"title\".\n   */\n  titleColumn?: string;\n  /**\n   * Optional app-relative path to this resource. Used by share notifications\n   * when the caller does not pass a more specific resourceUrl.\n   */\n  getResourcePath?: (resource: any) => string | undefined;\n  /**\n   * Optional resolver for the share-notification email's brand logo. Return an\n   * absolute `https://` URL to override the default embedded Agent Native logo\n   * (e.g. the sharing org's own logo), or undefined to fall back. Receives the\n   * resource row being shared so the template can scope the logo to its org.\n   */\n  getLogoUrl?: (\n    resource: any,\n  ) => string | undefined | Promise<string | undefined>;\n  /**\n   * Optional resolver for the brand name shown beside the logo in the\n   * share-notification email header. Return a display name (e.g. the sharing\n   * org's name) to override the app name, or undefined to keep the default.\n   * Receives the resource row being shared.\n   */\n  getBrandName?: (\n    resource: any,\n  ) => string | undefined | Promise<string | undefined>;\n  /**\n   * Optional resolver for who the share-notification email appears to come\n   * from. `fromName` changes only the display name and keeps the configured,\n   * domain-verified sending address (e.g. \"Alice via Clips\"); `replyTo` routes\n   * replies to the sharer. `ctx.sender` is the account doing the sharing, so the\n   * template decides how to present them (name, email, avatar).\n   *\n   * Do not put a user's address in the sending address itself — SPF/DKIM sign\n   * the app's domain, so recipients would bounce or spam-filter it.\n   */\n  getSender?: (\n    resource: any,\n    ctx: { sender: UserProfile },\n  ) =>\n    | { fromName?: string; replyTo?: string }\n    | undefined\n    | Promise<{ fromName?: string; replyTo?: string } | undefined>;\n  /**\n   * Optional resolver for a preview block shown above the CTA in the\n   * share-notification email — e.g. a recording thumbnail with a play badge.\n   * Return trusted HTML (built by template code, dynamic values escaped) that\n   * is injected verbatim, or undefined to omit it. `ctx.href` is the resolved\n   * link to the resource; `ctx.alt` is its title. The template owns the entire\n   * preview markup so the generic share action stays app-agnostic.\n   */\n  getHeroHtml?: (\n    resource: any,\n    ctx: { href: string; alt?: string },\n  ) => string | undefined | Promise<string | undefined>;\n  /**\n   * Drizzle DB accessor from the template's server/db/index.ts. Required —\n   * the framework-level share actions and access helpers call this to reach\n   * the right DB instance (schema is template-specific).\n   */\n  getDb: () => any;\n  /**\n   * When `false`, `visibility: \"public\"` is rejected by `set-resource-visibility`,\n   * and `accessFilter` / `resolveAccess` treat any stored public row as private\n   * (defense in depth — only owner + explicit shares grant access).\n   *\n   * Use this for resources that execute code or expose privileged data and must\n   * never be reachable by a random authenticated user. Extensions set this:\n   * extension HTML runs inside an iframe that calls actions / DB / proxied APIs\n   * as the *viewer*, so a public extension would be arbitrary code with the\n   * viewer's credentials.\n   *\n   * Default: `true` (matches the historical behavior — most resources can be public).\n   */\n  allowPublic?: boolean;\n  /**\n   * Optional role granted by a public-by-link read. Most resources should omit\n   * this so public visibility remains viewer-only. Use narrowly for local or\n   * otherwise constrained resources where the resource owner intentionally wants\n   * unauthenticated link holders to do more than view.\n   *\n   * When this is a function, it may read arbitrary fields on the resource row\n   * (not just the ownership/visibility columns). Because of that,\n   * `resolveAccess`/`assertAccess`'s opt-in `{ skipResourceBody: true }`\n   * projected load (see `access.ts`) is automatically ignored for this\n   * registration and always loads the full row instead — a fixed role string\n   * has no such requirement and is compatible with the projection.\n   */\n  publicAccessRole?:\n    | \"viewer\"\n    | \"editor\"\n    | \"admin\"\n    | ((\n        resource: any,\n        ctx: {\n          userEmail?: string;\n          orgId?: string;\n          authCapability?: string;\n        },\n      ) =>\n        | \"viewer\"\n        | \"editor\"\n        | \"admin\"\n        | Promise<\"viewer\" | \"editor\" | \"admin\">);\n  /**\n   * When `true`, individual user shares (`principalType: \"user\"`) must target\n   * an email that is already a member of the same org as the resource, OR has\n   * a pending invitation to that org. Cross-org user shares are rejected.\n   *\n   * Pair with `allowPublic: false` for resources that need a hard \"this org\n   * only\" trust boundary. Extensions set this so a malicious caller can't\n   * widen reach by sharing a code-executing extension to an outsider email.\n   *\n   * Default: `false` (matches the historical behavior — any email can be granted).\n   */\n  requireOrgMemberForUserShares?: boolean;\n  /**\n   * Optional per-resource access-context adapter. Most resources should use the\n   * request user/org unchanged. Templates with an intentional alternate local\n   * identity can normalize here so the generic framework sharing actions and\n   * access helpers stay in sync with template-owned actions.\n   */\n  resolveAccessContext?: (ctx: {\n    userEmail?: string;\n    orgId?: string;\n    authCapability?: string;\n  }) => {\n    userEmail?: string;\n    orgId?: string;\n    authCapability?: string;\n  };\n  /**\n   * When true, direct ownership is recognized by owner_email regardless of the\n   * caller's active org. Use this only for resource types where the template's\n   * own actions already treat owner_email as the cross-org authority and list\n   * views add their own org filters.\n   *\n   * Default: `false`.\n   */\n  ownerAccessIgnoresOrg?: boolean;\n  /**\n   * Optional external-agent read handoff. When set, the framework-level\n   * `create-agent-resource-link` action can mint a short-lived, read-only\n   * `agent_access` URL for this resource. The context endpoint is owned by the\n   * template so it can expose the same intentionally shareable shape as the\n   * public page, not a generic raw database row.\n   */\n  agentReadable?:\n    | false\n    | {\n        /** Token scope. Include the app name to avoid cross-app collisions. */\n        resourceKind: string;\n        /** App-relative JSON endpoint that accepts `id` + `agent_access`. */\n        getContextPath: (resource: any) => string | undefined;\n        /** Optional override for the page URL. Defaults to getResourcePath. */\n        getPagePath?: (resource: any) => string | undefined;\n        /** Optional override for the default two-hour token lifetime. */\n        ttlSeconds?: number;\n      };\n}\n\n// Stash the registry on globalThis so it survives SSR bundle duplication.\n// Vite SSR's `noExternal: /^(?!node:)/` policy means @agent-native/core gets\n// inlined into every server bundle that imports it — and each bundle gets its\n// own module-level state. A plain `new Map()` here would create one Map per\n// bundle, so the template's `registerShareableResource()` (called from the\n// Nitro plugin graph) wouldn't be visible to the framework's auto-mounted\n// share-resource action (loaded via `import(\"../sharing/actions/...js\")` in a\n// different module instance). Using globalThis collapses them back to one Map.\nconst REGISTRY_KEY = \"__agentNativeShareableResources__\";\ntype RegistryStore = Map<string, ShareableResourceRegistration>;\nconst globalRegistry: { [K in typeof REGISTRY_KEY]?: RegistryStore } =\n  globalThis as any;\n\nfunction isTestRuntime(): boolean {\n  return (\n    process.env.NODE_ENV === \"test\" ||\n    process.env.VITEST === \"true\" ||\n    process.env.VITEST === \"1\"\n  );\n}\n\nfunction registrationCameFromTestFile(): boolean {\n  const stack = new Error().stack ?? \"\";\n  return /[./\\\\](?:[^/\\\\]+[.-])(?:test|spec)\\.[cm]?[jt]sx?(?::\\d+)?(?::\\d+)?/.test(\n    stack,\n  );\n}\n\nfunction getRegistry(): RegistryStore {\n  let r = globalRegistry[REGISTRY_KEY];\n  if (!r) {\n    r = new Map<string, ShareableResourceRegistration>();\n    globalRegistry[REGISTRY_KEY] = r;\n  }\n  return r;\n}\n\nexport function registerShareableResource(\n  entry: ShareableResourceRegistration,\n): void {\n  if (!isTestRuntime() && registrationCameFromTestFile()) return;\n  getRegistry().set(entry.type, entry);\n}\n\nexport function getShareableResource(\n  type: string,\n): ShareableResourceRegistration | undefined {\n  return getRegistry().get(type);\n}\n\nexport function requireShareableResource(\n  type: string,\n): ShareableResourceRegistration {\n  const reg = getRegistry();\n  const entry = reg.get(type);\n  if (!entry) {\n    throw new Error(\n      `Unknown shareable resource type: \"${type}\". Did you forget registerShareableResource()?`,\n    );\n  }\n  return entry;\n}\n\nexport function listShareableResources(): ShareableResourceRegistration[] {\n  return Array.from(getRegistry().values());\n}\n"]}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/sharing/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAuMH,0EAA0E;AAC1E,6EAA6E;AAC7E,8EAA8E;AAC9E,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,8EAA8E;AAC9E,+EAA+E;AAC/E,MAAM,YAAY,GAAG,mCAAmC,CAAC;AAEzD,MAAM,cAAc,GAClB,UAAiB,CAAC;AAEpB,SAAS,aAAa;IACpB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM;QAC/B,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM;QAC7B,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B;IACnC,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;IACtC,OAAO,oEAAoE,CAAC,IAAI,CAC9E,KAAK,CACN,CAAC;AACJ,CAAC;AAED,SAAS,WAAW;IAClB,IAAI,CAAC,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,GAAG,IAAI,GAAG,EAAyC,CAAC;QACrD,cAAc,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,KAAoC;IAEpC,IAAI,CAAC,aAAa,EAAE,IAAI,4BAA4B,EAAE;QAAE,OAAO;IAC/D,WAAW,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAAY;IAEZ,OAAO,WAAW,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,IAAY;IAEZ,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,gDAAgD,CAC1F,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5C,CAAC","sourcesContent":["/**\n * Registry of shareable resources.\n *\n * Each template registers its ownable resource(s) once on module load so the\n * framework-level share actions (`share-resource`, `list-resource-shares`,\n * etc.) can dispatch to the correct tables.\n *\n *   import { registerShareableResource } from \"@agent-native/core/sharing\";\n *   import * as schema from \"./schema.js\";\n *\n *   registerShareableResource({\n *     type: \"document\",\n *     resourceTable: schema.documents,\n *     sharesTable: schema.documentShares,\n *     displayName: \"Document\",\n *     titleColumn: \"title\",\n *   });\n */\n\nimport type { EmailCta, EmailLinkBlock } from \"../server/email-template.js\";\nimport type { UserProfile } from \"../user-profile/shared.js\";\n\nexport interface ShareEmailExtras {\n  /**\n   * Replaces the default body paragraphs between the heading and the preview.\n   * Pass `[]` to send none. Omit to keep the default copy.\n   */\n  paragraphs?: string[];\n  secondaryCta?: EmailCta;\n  linkBlock?: EmailLinkBlock;\n  closingParagraphs?: string[];\n}\n\nexport interface ShareableResourceRegistration {\n  /** Stable identifier used across actions, UI, and analytics. e.g. \"document\". */\n  type: string;\n  /** Drizzle table for the parent resource (must have ownableColumns()). */\n  resourceTable: any;\n  /** Drizzle table produced by createSharesTable(). */\n  sharesTable: any;\n  /** Human-readable singular label shown in the share dialog. */\n  displayName: string;\n  /**\n   * Column on the resource table that holds a human-readable title for\n   * display in the share UI. Default: \"title\".\n   */\n  titleColumn?: string;\n  /**\n   * Optional app-relative path to this resource. Used by share notifications\n   * when the caller does not pass a more specific resourceUrl.\n   */\n  getResourcePath?: (resource: any) => string | undefined;\n  /**\n   * Optional resolver for the share-notification email's brand logo. Return an\n   * absolute `https://` URL to override the default embedded Agent Native logo\n   * (e.g. the sharing org's own logo), or undefined to fall back. Receives the\n   * resource row being shared so the template can scope the logo to its org.\n   */\n  getLogoUrl?: (\n    resource: any,\n  ) => string | undefined | Promise<string | undefined>;\n  /**\n   * Optional resolver for the brand name shown beside the logo in the\n   * share-notification email header. Return a display name (e.g. the sharing\n   * org's name) to override the app name, or undefined to keep the default.\n   * Receives the resource row being shared.\n   */\n  getBrandName?: (\n    resource: any,\n  ) => string | undefined | Promise<string | undefined>;\n  /**\n   * Optional resolver for who the share-notification email appears to come\n   * from. `fromName` changes only the display name and keeps the configured,\n   * domain-verified sending address (e.g. \"Alice via Clips\"); `replyTo` routes\n   * replies to the sharer. `ctx.sender` is the account doing the sharing, so the\n   * template decides how to present them (name, email, avatar).\n   *\n   * Do not put a user's address in the sending address itself — SPF/DKIM sign\n   * the app's domain, so recipients would bounce or spam-filter it.\n   */\n  getSender?: (\n    resource: any,\n    ctx: { sender: UserProfile },\n  ) =>\n    | { fromName?: string; replyTo?: string }\n    | undefined\n    | Promise<{ fromName?: string; replyTo?: string } | undefined>;\n  /**\n   * Optional resolver for a preview block shown above the CTA in the\n   * share-notification email — e.g. a recording thumbnail with a play badge.\n   * Return trusted HTML (built by template code, dynamic values escaped) that\n   * is injected verbatim, or undefined to omit it. `ctx.href` is the resolved\n   * link to the resource; `ctx.alt` is its title. The template owns the entire\n   * preview markup so the generic share action stays app-agnostic.\n   */\n  getHeroHtml?: (\n    resource: any,\n    ctx: { href: string; alt?: string },\n  ) => string | undefined | Promise<string | undefined>;\n  /**\n   * Optional resolver for app-specific content in the share-notification\n   * email: a second button beside the primary CTA, a treated copyable link,\n   * and closing paragraphs beneath it. Closing paragraphs are injected\n   * verbatim (use `emailLink` / `emailStrong` for inline markup), so escape\n   * any dynamic values.\n   */\n  getShareEmailExtras?: (\n    resource: any,\n    ctx: { href: string; sender: UserProfile; recipientEmail: string },\n  ) => ShareEmailExtras | undefined | Promise<ShareEmailExtras | undefined>;\n  /**\n   * Drizzle DB accessor from the template's server/db/index.ts. Required —\n   * the framework-level share actions and access helpers call this to reach\n   * the right DB instance (schema is template-specific).\n   */\n  getDb: () => any;\n  /**\n   * When `false`, `visibility: \"public\"` is rejected by `set-resource-visibility`,\n   * and `accessFilter` / `resolveAccess` treat any stored public row as private\n   * (defense in depth — only owner + explicit shares grant access).\n   *\n   * Use this for resources that execute code or expose privileged data and must\n   * never be reachable by a random authenticated user. Extensions set this:\n   * extension HTML runs inside an iframe that calls actions / DB / proxied APIs\n   * as the *viewer*, so a public extension would be arbitrary code with the\n   * viewer's credentials.\n   *\n   * Default: `true` (matches the historical behavior — most resources can be public).\n   */\n  allowPublic?: boolean;\n  /**\n   * Optional role granted by a public-by-link read. Most resources should omit\n   * this so public visibility remains viewer-only. Use narrowly for local or\n   * otherwise constrained resources where the resource owner intentionally wants\n   * unauthenticated link holders to do more than view.\n   *\n   * When this is a function, it may read arbitrary fields on the resource row\n   * (not just the ownership/visibility columns). Because of that,\n   * `resolveAccess`/`assertAccess`'s opt-in `{ skipResourceBody: true }`\n   * projected load (see `access.ts`) is automatically ignored for this\n   * registration and always loads the full row instead — a fixed role string\n   * has no such requirement and is compatible with the projection.\n   */\n  publicAccessRole?:\n    | \"viewer\"\n    | \"editor\"\n    | \"admin\"\n    | ((\n        resource: any,\n        ctx: {\n          userEmail?: string;\n          orgId?: string;\n          authCapability?: string;\n        },\n      ) =>\n        | \"viewer\"\n        | \"editor\"\n        | \"admin\"\n        | Promise<\"viewer\" | \"editor\" | \"admin\">);\n  /**\n   * When `true`, individual user shares (`principalType: \"user\"`) must target\n   * an email that is already a member of the same org as the resource, OR has\n   * a pending invitation to that org. Cross-org user shares are rejected.\n   *\n   * Pair with `allowPublic: false` for resources that need a hard \"this org\n   * only\" trust boundary. Extensions set this so a malicious caller can't\n   * widen reach by sharing a code-executing extension to an outsider email.\n   *\n   * Default: `false` (matches the historical behavior — any email can be granted).\n   */\n  requireOrgMemberForUserShares?: boolean;\n  /**\n   * Optional per-resource access-context adapter. Most resources should use the\n   * request user/org unchanged. Templates with an intentional alternate local\n   * identity can normalize here so the generic framework sharing actions and\n   * access helpers stay in sync with template-owned actions.\n   */\n  resolveAccessContext?: (ctx: {\n    userEmail?: string;\n    orgId?: string;\n    authCapability?: string;\n  }) => {\n    userEmail?: string;\n    orgId?: string;\n    authCapability?: string;\n  };\n  /**\n   * When true, direct ownership is recognized by owner_email regardless of the\n   * caller's active org. Use this only for resource types where the template's\n   * own actions already treat owner_email as the cross-org authority and list\n   * views add their own org filters.\n   *\n   * Default: `false`.\n   */\n  ownerAccessIgnoresOrg?: boolean;\n  /**\n   * Optional external-agent read handoff. When set, the framework-level\n   * `create-agent-resource-link` action can mint a short-lived, read-only\n   * `agent_access` URL for this resource. The context endpoint is owned by the\n   * template so it can expose the same intentionally shareable shape as the\n   * public page, not a generic raw database row.\n   */\n  agentReadable?:\n    | false\n    | {\n        /** Token scope. Include the app name to avoid cross-app collisions. */\n        resourceKind: string;\n        /** App-relative JSON endpoint that accepts `id` + `agent_access`. */\n        getContextPath: (resource: any) => string | undefined;\n        /** Optional override for the page URL. Defaults to getResourcePath. */\n        getPagePath?: (resource: any) => string | undefined;\n        /** Optional override for the default two-hour token lifetime. */\n        ttlSeconds?: number;\n      };\n}\n\n// Stash the registry on globalThis so it survives SSR bundle duplication.\n// Vite SSR's `noExternal: /^(?!node:)/` policy means @agent-native/core gets\n// inlined into every server bundle that imports it — and each bundle gets its\n// own module-level state. A plain `new Map()` here would create one Map per\n// bundle, so the template's `registerShareableResource()` (called from the\n// Nitro plugin graph) wouldn't be visible to the framework's auto-mounted\n// share-resource action (loaded via `import(\"../sharing/actions/...js\")` in a\n// different module instance). Using globalThis collapses them back to one Map.\nconst REGISTRY_KEY = \"__agentNativeShareableResources__\";\ntype RegistryStore = Map<string, ShareableResourceRegistration>;\nconst globalRegistry: { [K in typeof REGISTRY_KEY]?: RegistryStore } =\n  globalThis as any;\n\nfunction isTestRuntime(): boolean {\n  return (\n    process.env.NODE_ENV === \"test\" ||\n    process.env.VITEST === \"true\" ||\n    process.env.VITEST === \"1\"\n  );\n}\n\nfunction registrationCameFromTestFile(): boolean {\n  const stack = new Error().stack ?? \"\";\n  return /[./\\\\](?:[^/\\\\]+[.-])(?:test|spec)\\.[cm]?[jt]sx?(?::\\d+)?(?::\\d+)?/.test(\n    stack,\n  );\n}\n\nfunction getRegistry(): RegistryStore {\n  let r = globalRegistry[REGISTRY_KEY];\n  if (!r) {\n    r = new Map<string, ShareableResourceRegistration>();\n    globalRegistry[REGISTRY_KEY] = r;\n  }\n  return r;\n}\n\nexport function registerShareableResource(\n  entry: ShareableResourceRegistration,\n): void {\n  if (!isTestRuntime() && registrationCameFromTestFile()) return;\n  getRegistry().set(entry.type, entry);\n}\n\nexport function getShareableResource(\n  type: string,\n): ShareableResourceRegistration | undefined {\n  return getRegistry().get(type);\n}\n\nexport function requireShareableResource(\n  type: string,\n): ShareableResourceRegistration {\n  const reg = getRegistry();\n  const entry = reg.get(type);\n  if (!entry) {\n    throw new Error(\n      `Unknown shareable resource type: \"${type}\". Did you forget registerShareableResource()?`,\n    );\n  }\n  return entry;\n}\n\nexport function listShareableResources(): ShareableResourceRegistration[] {\n  return Array.from(getRegistry().values());\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.130.1",
+  "version": "0.130.2",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {

package/src/server/email-template.ts

@@ -42,6 +42,8 @@ export interface RenderEmailArgs {
   paragraphs: string[];
   /** Primary call-to-action rendered as a real button. */
   cta?: EmailCta;
+  /** Optional second button rendered beside the primary CTA, dark-filled. */
+  secondaryCta?: EmailCta;
   /** A treated, copyable URL shown before or after the CTA. */
   linkBlock?: EmailLinkBlock;
   /**
@@ -50,6 +52,8 @@ export interface RenderEmailArgs {
    * by app/template code (never raw user input), and escape any dynamic values.
    */
   heroHtml?: string;
+  /** Body paragraphs rendered after the CTA and link block. Escaped-by-caller. */
+  closingParagraphs?: string[];
   /** Small muted text under the CTA (e.g. expiry note). */
   footer?: string;
   /** Optional app name shown beside the framework logo. */
@@ -128,12 +132,18 @@ export function renderEmail(args: RenderEmailArgs): RenderedEmail {
   // dynamic values they interpolate.
   const heroHtml = args.heroHtml ?? "";
 
-  const paragraphsHtml = args.paragraphs
-    .map(
-      (p) =>
-        `<p style="margin:0 0 16px 0; font-size:16px; line-height:1.6; color:#d4d4d8;">${p}</p>`,
-    )
-    .join("");
+  const renderParagraphs = (paragraphs: string[] | undefined): string =>
+    (paragraphs ?? [])
+      .map(
+        (p) =>
+          `<p style="margin:0 0 16px 0; font-size:16px; line-height:1.6; color:#d4d4d8;">${p}</p>`,
+      )
+      .join("");
+
+  const paragraphsHtml = renderParagraphs(args.paragraphs);
+  const closingParagraphsHtml = args.closingParagraphs?.length
+    ? `<div style="margin:28px 0 0 0;">${renderParagraphs(args.closingParagraphs)}</div>`
+    : "";
 
   const linkBlockHtml = args.linkBlock
     ? `
@@ -148,16 +158,27 @@ export function renderEmail(args: RenderEmailArgs): RenderedEmail {
     `
     : "";
 
+  const ctaButtonCell = (
+    cta: EmailCta,
+    background: string,
+    color: string,
+    border: string,
+  ): string => `
+          <td style="border-radius:10px; background:${background}; border:${border};">
+            <a href="${escapeAttr(cta.url)}"
+               style="display:inline-block; padding:14px 26px; font-family:'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; font-size:15px; font-weight:600; color:${color}; text-decoration:none; border-radius:10px;">
+              ${escapeHtml(cta.label)}
+            </a>
+          </td>`;
+
+  const secondaryCtaHtml = args.secondaryCta
+    ? `<td style="width:12px;">&nbsp;</td>${ctaButtonCell(args.secondaryCta, "#141417", "#fafafa", "1px solid #3f3f46")}`
+    : "";
+
   const ctaHtml = args.cta
     ? `
       <table role="presentation" cellpadding="0" cellspacing="0" border="0" style="margin:24px 0 0 0;">
-        <tr>
-          <td style="border-radius:10px; background:${ctaBg};">
-            <a href="${escapeAttr(args.cta.url)}"
-               style="display:inline-block; padding:14px 26px; font-family:'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; font-size:15px; font-weight:600; color:${ctaFg}; text-decoration:none; border-radius:10px;">
-              ${escapeHtml(args.cta.label)}
-            </a>
-          </td>
+        <tr>${ctaButtonCell(args.cta, ctaBg, ctaFg, "0")}${secondaryCtaHtml}
         </tr>
       </table>
     `
@@ -211,6 +232,7 @@ export function renderEmail(args: RenderEmailArgs): RenderedEmail {
                 ${args.linkBlock?.placement !== "after-cta" ? linkBlockHtml : ""}
                 ${ctaHtml}
                 ${args.linkBlock?.placement === "after-cta" ? linkBlockHtml : ""}
+                ${closingParagraphsHtml}
                 ${footerHtml}
               </td>
             </tr>
@@ -237,11 +259,19 @@ export function renderEmail(args: RenderEmailArgs): RenderedEmail {
     textLines.push(`${args.cta.label}: ${args.cta.url}`);
     textLines.push("");
   }
+  if (args.secondaryCta) {
+    textLines.push(`${args.secondaryCta.label}: ${args.secondaryCta.url}`);
+    textLines.push("");
+  }
   if (args.linkBlock?.placement === "after-cta") {
     textLines.push(args.linkBlock.intro);
     textLines.push(args.linkBlock.url);
     textLines.push("");
   }
+  for (const p of args.closingParagraphs ?? []) {
+    textLines.push(stripTags(p));
+    textLines.push("");
+  }
   if (args.footer) {
     textLines.push(args.footer);
   }

package/src/sharing/actions/share-resource.ts

@@ -4,13 +4,14 @@ import { z } from "zod";
 import { defineAction } from "../../action.js";
 import { getDbExec } from "../../db/client.js";
 import { getAppProductionUrl } from "../../server/app-url.js";
-import { renderEmail, emailStrong } from "../../server/email-template.js";
+import { emailStrong, renderEmail } from "../../server/email-template.js";
 import { sendEmail, isEmailConfigured } from "../../server/email.js";
 import { invalidateCollabAccessCache } from "../../server/poll.js";
 import { getRequestUserEmail } from "../../server/request-context.js";
 import { getUserProfile } from "../../user-profile/store.js";
 import { assertAccess, ForbiddenError } from "../access.js";
 import { requireShareableResource } from "../registry.js";
+import type { ShareEmailExtras } from "../registry.js";
 import {
   getExtensionShareChangeTargets,
   notifyExtensionShareChanged,
@@ -320,12 +321,14 @@ export default defineAction({
             );
           }
         }
+        const senderProfile = await getUserProfile(actor);
+        const senderDisplayName = senderProfile.name?.trim() || actor;
         let fromName: string | undefined;
         let replyTo: string | undefined;
         if (reg.getSender) {
           try {
             const sender = await reg.getSender(resource, {
-              sender: await getUserProfile(actor),
+              sender: senderProfile,
             });
             fromName = sender?.fromName?.trim() || undefined;
             replyTo = sender?.replyTo?.trim() || undefined;
@@ -351,18 +354,37 @@ export default defineAction({
             );
           }
         }
+        let extras: ShareEmailExtras | undefined;
+        if (reg.getShareEmailExtras) {
+          try {
+            extras =
+              (await reg.getShareEmailExtras(resource, {
+                href: notificationUrl,
+                sender: senderProfile,
+                recipientEmail: principalId,
+              })) ?? undefined;
+          } catch (err) {
+            console.error(
+              "[share-resource] share email extras resolver failed; sending the plain notification:",
+              err,
+            );
+          }
+        }
         const subject = `${actor} shared "${resourceTitle}" with you on ${appName}`;
         const { html, text } = renderEmail({
           brandName,
           brandLogoUrl,
           preheader: subject,
-          heading: "You've been given access",
-          paragraphs: [
+          heading: `${senderDisplayName} shared "${resourceTitle}" with you`,
+          paragraphs: extras?.paragraphs ?? [
             `${emailStrong(actor)} has shared the ${reg.displayName} ${emailStrong(resourceTitle)} with you as a ${emailStrong(args.role)}.`,
             `Use the button below to open it. If prompted, sign in with ${emailStrong(principalId)}.`,
           ],
           heroHtml,
           cta: { label: `Open ${reg.displayName}`, url: notificationUrl },
+          secondaryCta: extras?.secondaryCta,
+          linkBlock: extras?.linkBlock,
+          closingParagraphs: extras?.closingParagraphs,
           footer: `You received this because ${actor} granted you ${args.role} access.`,
         });
         await sendEmail({

package/src/sharing/index.ts

@@ -22,6 +22,7 @@ export {
   requireShareableResource,
   listShareableResources,
   type ShareableResourceRegistration,
+  type ShareEmailExtras,
 } from "./registry.js";
 
 export {

package/src/sharing/registry.ts

@@ -17,8 +17,20 @@
  *   });
  */
 
+import type { EmailCta, EmailLinkBlock } from "../server/email-template.js";
 import type { UserProfile } from "../user-profile/shared.js";
 
+export interface ShareEmailExtras {
+  /**
+   * Replaces the default body paragraphs between the heading and the preview.
+   * Pass `[]` to send none. Omit to keep the default copy.
+   */
+  paragraphs?: string[];
+  secondaryCta?: EmailCta;
+  linkBlock?: EmailLinkBlock;
+  closingParagraphs?: string[];
+}
+
 export interface ShareableResourceRegistration {
   /** Stable identifier used across actions, UI, and analytics. e.g. "document". */
   type: string;
@@ -85,6 +97,17 @@ export interface ShareableResourceRegistration {
     resource: any,
     ctx: { href: string; alt?: string },
   ) => string | undefined | Promise<string | undefined>;
+  /**
+   * Optional resolver for app-specific content in the share-notification
+   * email: a second button beside the primary CTA, a treated copyable link,
+   * and closing paragraphs beneath it. Closing paragraphs are injected
+   * verbatim (use `emailLink` / `emailStrong` for inline markup), so escape
+   * any dynamic values.
+   */
+  getShareEmailExtras?: (
+    resource: any,
+    ctx: { href: string; sender: UserProfile; recipientEmail: string },
+  ) => ShareEmailExtras | undefined | Promise<ShareEmailExtras | undefined>;
   /**
    * Drizzle DB accessor from the template's server/db/index.ts. Required —
    * the framework-level share actions and access helpers call this to reach

package/corpus/templates/clips/app/routes/_app.settings.organization.tsx

@@ -1,232 +0,0 @@
-import { useActionQuery, useSession } from "@agent-native/core/client/hooks";
-import { useT } from "@agent-native/core/client/i18n";
-import { IconMailFast, IconUsers } from "@tabler/icons-react";
-import { useMemo } from "react";
-
-import { PageHeader } from "@/components/library/page-header";
-import { Badge } from "@/components/ui/badge";
-import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
-import { Skeleton } from "@/components/ui/skeleton";
-import {
-  Table,
-  TableBody,
-  TableCell,
-  TableHead,
-  TableHeader,
-  TableRow,
-} from "@/components/ui/table";
-import {
-  BrandingEditor,
-  type RecordingVisibility,
-} from "@/components/workspace/branding-editor";
-import { InviteDialog } from "@/components/workspace/invite-dialog";
-import {
-  MembersList,
-  type MemberRole,
-} from "@/components/workspace/members-list";
-import enMessages from "@/i18n/en-US";
-
-export function meta() {
-  return [{ title: enMessages.organizationSettings.pageTitle }];
-}
-
-interface OrganizationStateResponse {
-  organization: {
-    id: string;
-    name: string;
-    brandColor: string;
-    brandLogoUrl: string | null;
-    defaultVisibility: RecordingVisibility;
-    ownerEmail?: string;
-  } | null;
-  members: {
-    id: string;
-    email: string;
-    role: MemberRole;
-    joinedAt: string | null;
-    invitedAt: string | null;
-  }[];
-  invites: {
-    id: string;
-    email: string;
-    role: MemberRole;
-    createdAt: string;
-  }[];
-}
-
-export default function OrganizationSettingsRoute() {
-  const t = useT();
-  const { session } = useSession();
-  const email = session?.email ?? "";
-
-  const { data, isLoading } = useActionQuery<OrganizationStateResponse>(
-    "list-organization-state",
-    undefined,
-  );
-
-  const organization = data?.organization ?? null;
-  const members = data?.members ?? [];
-  const invites = data?.invites ?? [];
-
-  const isOwner = !!(
-    organization?.ownerEmail && organization.ownerEmail === email
-  );
-  const currentRole: MemberRole = useMemo(() => {
-    const me = members.find((m) => m.email === email);
-    if (me) return me.role;
-    if (isOwner) return "admin";
-    return "member";
-  }, [members, email, isOwner]);
-
-  const isAdmin = currentRole === "admin" || currentRole === "owner" || isOwner;
-
-  if (isLoading) {
-    return (
-      <>
-        <PageHeader>
-          <h1 className="text-base font-semibold tracking-tight truncate">
-            {t("organizationSettings.title")}
-          </h1>
-        </PageHeader>
-        <div className="p-6 max-w-3xl mx-auto space-y-4">
-          <Skeleton className="h-10 w-64" />
-          <Skeleton className="h-32 w-full" />
-          <Skeleton className="h-48 w-full" />
-        </div>
-      </>
-    );
-  }
-
-  if (!organization) {
-    return (
-      <>
-        <PageHeader>
-          <h1 className="text-base font-semibold tracking-tight truncate">
-            {t("organizationSettings.title")}
-          </h1>
-        </PageHeader>
-        <div className="p-6 max-w-2xl mx-auto">
-          <Card>
-            <CardContent className="py-12 text-center text-sm text-muted-foreground">
-              {t("organizationSettings.noOrganization")}
-            </CardContent>
-          </Card>
-        </div>
-      </>
-    );
-  }
-
-  return (
-    <>
-      <PageHeader>
-        <h1 className="text-base font-semibold tracking-tight truncate">
-          {t("organizationSettings.namedTitle", { name: organization.name })}
-        </h1>
-      </PageHeader>
-      <div className="p-6 max-w-3xl mx-auto space-y-6">
-        <p className="text-sm text-muted-foreground">
-          {t("organizationSettings.description")}
-        </p>
-
-        {isAdmin ? (
-          <BrandingEditor
-            organizationId={organization.id}
-            initialName={organization.name}
-            initialBrandColor={organization.brandColor}
-            initialBrandLogoUrl={organization.brandLogoUrl}
-            initialDefaultVisibility={organization.defaultVisibility}
-          />
-        ) : (
-          <Card>
-            <CardHeader>
-              <CardTitle className="text-base">
-                {t("brandingEditor.title")}
-              </CardTitle>
-            </CardHeader>
-            <CardContent>
-              <div className="flex items-center gap-3">
-                <div
-                  className="h-10 w-10 rounded"
-                  style={{ background: organization.brandColor }}
-                />
-                <div>
-                  <div className="font-medium">{organization.name}</div>
-                  <div className="text-xs text-muted-foreground">
-                    {t("organizationSettings.adminsOnlyBranding")}
-                  </div>
-                </div>
-              </div>
-            </CardContent>
-          </Card>
-        )}
-
-        <Card>
-          <CardHeader className="flex flex-row items-center justify-between">
-            <CardTitle className="text-base flex items-center gap-2">
-              <IconUsers className="size-4 text-primary" />
-              {t("organizationSettings.members")}
-            </CardTitle>
-            {isAdmin ? <InviteDialog organizationId={organization.id} /> : null}
-          </CardHeader>
-          <CardContent>
-            <MembersList
-              organizationId={organization.id}
-              members={members}
-              currentUserEmail={email}
-              currentUserRole={currentRole}
-            />
-          </CardContent>
-        </Card>
-
-        <Card>
-          <CardHeader>
-            <CardTitle className="text-base flex items-center gap-2">
-              <IconMailFast className="size-4 text-primary" />
-              {t("organizationSettings.pendingInvites")}
-            </CardTitle>
-          </CardHeader>
-          <CardContent>
-            {invites.length === 0 ? (
-              <div className="py-4 text-center text-sm text-muted-foreground">
-                {t("organizationSettings.noPendingInvites")}
-              </div>
-            ) : (
-              <div className="rounded-md border">
-                <Table>
-                  <TableHeader>
-                    <TableRow>
-                      <TableHead>{t("organizationSettings.email")}</TableHead>
-                      <TableHead className="w-32">
-                        {t("organizationSettings.role")}
-                      </TableHead>
-                      <TableHead className="w-32">
-                        {t("organizationSettings.sent")}
-                      </TableHead>
-                    </TableRow>
-                  </TableHeader>
-                  <TableBody>
-                    {invites.map((inv) => (
-                      <TableRow key={inv.id}>
-                        <TableCell className="font-medium">
-                          {inv.email}
-                        </TableCell>
-                        <TableCell>
-                          <Badge variant="outline" className="capitalize">
-                            {inv.role.replace("-", " ")}
-                          </Badge>
-                        </TableCell>
-                        <TableCell className="text-muted-foreground text-sm">
-                          {new Date(inv.createdAt).toLocaleDateString()}
-                        </TableCell>
-                      </TableRow>
-                    ))}
-                  </TableBody>
-                </Table>
-              </div>
-            )}
-          </CardContent>
-        </Card>
-      </div>
-    </>
-  );
-}