@agent-native/core 0.201.0-nightly-20261005153421 → 0.201.0

package/README.md

@@ -15,7 +15,7 @@
 
 # Agent-Native
 
-Agent-Native is an open-source TypeScript framework for building agents that pair autonomous work with a purpose-built UI. Define each capability once as an [action](https://agent-native.com/docs/actions-overview): the agent uses it as a tool, and the UI calls it from code.
+Agent-Native is an open-source TypeScript framework for building agents that pair autonomous work with a purpose-built UI. Define each capability once as an [action](https://agent-native.com/docs/actions-overview?utm_source=npm&utm_medium=referral&utm_content=core-readme): the agent uses it as a tool, and the UI calls it from code.
 
 ## Quick start
 
@@ -23,7 +23,7 @@ Agent-Native is an open-source TypeScript framework for building agents that pai
 npx --yes @agent-native/core@latest create my-agent --standalone --template chat
 ```
 
-Follow the [getting started guide](https://agent-native.com/docs/getting-started) for a full intro to the framework.
+Follow the [getting started guide](https://agent-native.com/docs/getting-started?utm_source=npm&utm_medium=referral&utm_content=core-readme) for a full intro to the framework.
 
 ## Why build agents with UIs?
 
@@ -33,9 +33,9 @@ Knowledge work needs that same kind of environment. A UI shows what an agent can
 
 ## How Agent-Native works
 
-- **[Shared actions](https://agent-native.com/docs/actions-overview).** The agent calls each capability as a tool, and the UI calls it from code. Both paths use the same validation, permissions, and implementation.
-- **[Shared data](https://agent-native.com/docs/server-database).** Work done by the agent appears in the UI, and work done in the UI is available to the agent.
-- **[Shared application state](https://agent-native.com/docs/context-awareness).** The agent receives relevant UI state, such as the current page, selected record, or active view.
+- **[Shared actions](https://agent-native.com/docs/actions-overview?utm_source=npm&utm_medium=referral&utm_content=core-readme).** The agent calls each capability as a tool, and the UI calls it from code. Both paths use the same validation, permissions, and implementation.
+- **[Shared data](https://agent-native.com/docs/server-database?utm_source=npm&utm_medium=referral&utm_content=core-readme).** Work done by the agent appears in the UI, and work done in the UI is available to the agent.
+- **[Shared application state](https://agent-native.com/docs/context-awareness?utm_source=npm&utm_medium=referral&utm_content=core-readme).** The agent receives relevant UI state, such as the current page, selected record, or active view.
 
 The agent does not click through the UI. It works through the same action layer as the UI.
 
@@ -64,12 +64,12 @@ The agent receives `hello` as a tool. React calls the same function with `useAct
 
 ## Included
 
-- **[Agent chat](https://agent-native.com/docs/agent-surfaces):** Let people delegate work, ask questions, and review results in the same UI.
-- **[Authentication and permissions](https://agent-native.com/docs/authentication):** Control who can access and change shared work.
-- **[Skills and memory](https://agent-native.com/docs/agent-resources):** Give agents reusable expertise and persistent context.
-- **[Automations](https://agent-native.com/docs/automations):** Run agent work on schedules or events.
-- **[Agent teams](https://agent-native.com/docs/agent-teams):** Delegate work to specialist agents in the same workspace or across connected agents.
-- **[PostgreSQL backend](https://agent-native.com/docs/server-database):** Use PostgreSQL in production and PGlite for local development on any Nitro-compatible host.
+- **[Agent chat](https://agent-native.com/docs/agent-surfaces?utm_source=npm&utm_medium=referral&utm_content=core-readme):** Let people delegate work, ask questions, and review results in the same UI.
+- **[Authentication and permissions](https://agent-native.com/docs/authentication?utm_source=npm&utm_medium=referral&utm_content=core-readme):** Control who can access and change shared work.
+- **[Skills and memory](https://agent-native.com/docs/agent-resources?utm_source=npm&utm_medium=referral&utm_content=core-readme):** Give agents reusable expertise and persistent context.
+- **[Automations](https://agent-native.com/docs/automations?utm_source=npm&utm_medium=referral&utm_content=core-readme):** Run agent work on schedules or events.
+- **[Agent teams](https://agent-native.com/docs/agent-teams?utm_source=npm&utm_medium=referral&utm_content=core-readme):** Delegate work to specialist agents in the same workspace or across connected agents.
+- **[PostgreSQL backend](https://agent-native.com/docs/server-database?utm_source=npm&utm_medium=referral&utm_content=core-readme):** Use PostgreSQL in production and PGlite for local development on any Nitro-compatible host.
 
 ### Example: edit a running app visually
 
@@ -108,7 +108,7 @@ Start from one of these agents or use it as an example for your own.
 
 **Clips**
 
-<a href="https://agent-native.com/apps/clips/">
+<a href="https://agent-native.com/apps/clips/?utm_source=npm&utm_medium=referral&utm_content=core-readme">
 <picture>
 <source media="(prefers-color-scheme: dark)" srcset="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F4dc9c87b9a224132855e1cb68cd89f9e?format=webp&width=800">
 <img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F462fdb643d5d403a8c54540c5c3292f6?format=webp&width=800" alt="Clips app screenshot" width="100%">
@@ -126,7 +126,7 @@ Record and understand meetings, screens, and voice notes.
 
 **Design**
 
-<a href="https://agent-native.com/apps/design/">
+<a href="https://agent-native.com/apps/design/?utm_source=npm&utm_medium=referral&utm_content=core-readme">
 <picture>
 <source media="(prefers-color-scheme: dark)" srcset="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F072f66a3e360464fb48617670ceee46f?format=webp&width=800">
 <img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2Fc9f693f170294bde8ebc733cff368af9?format=webp&width=800" alt="Design app screenshot" width="100%">
@@ -144,7 +144,7 @@ Generate and refine interactive designs.
 
 **Slides**
 
-<a href="https://agent-native.com/apps/slides/">
+<a href="https://agent-native.com/apps/slides/?utm_source=npm&utm_medium=referral&utm_content=core-readme">
 <picture>
 <source media="(prefers-color-scheme: dark)" srcset="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F710f5b7586cc41deaa0e6f8de658a499?format=webp&width=800">
 <img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F6223a64717a04931a6f509696019f48b?format=webp&width=800" alt="Slides app screenshot" width="100%">
@@ -164,7 +164,7 @@ Create and edit on-brand presentations.
 
 **Analytics**
 
-<a href="https://agent-native.com/apps/analytics/">
+<a href="https://agent-native.com/apps/analytics/?utm_source=npm&utm_medium=referral&utm_content=core-readme">
 <picture>
 <source media="(prefers-color-scheme: dark)" srcset="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2Fba632b39758d448594f7e5d2403e5d0f?format=webp&width=800">
 <img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F976ea93771b64b9e8c1b3eb12e606e07?format=webp&width=800" alt="Analytics app screenshot" width="100%">
@@ -182,7 +182,7 @@ Ask questions of your data and build dashboards.
 
 **Calendar**
 
-<a href="https://agent-native.com/apps/calendar/">
+<a href="https://agent-native.com/apps/calendar/?utm_source=npm&utm_medium=referral&utm_content=core-readme">
 <picture>
 <source media="(prefers-color-scheme: dark)" srcset="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F91d4c18d256b49e6bca24c23ce90a4f2?format=webp&width=800">
 <img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F8d9d48bb2f1d498f9601ac28c64edd4c?format=webp&width=800" alt="Calendar app screenshot" width="100%">
@@ -200,7 +200,7 @@ Find time, schedule events, and manage bookings.
 
 **Mail**
 
-<a href="https://agent-native.com/apps/mail/">
+<a href="https://agent-native.com/apps/mail/?utm_source=npm&utm_medium=referral&utm_content=core-readme">
 <picture>
 <source media="(prefers-color-scheme: dark)" srcset="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F216aaef9859144ffa3eb9498fa1132da?format=webp&width=800">
 <img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F064aee3ec5cd44879b9c186f63a6d6f4?format=webp&width=800" alt="Mail app screenshot" width="100%">
@@ -220,7 +220,7 @@ Prioritize email, draft replies, and follow up.
 
 **Assets**
 
-<a href="https://agent-native.com/apps/assets/">
+<a href="https://agent-native.com/apps/assets/?utm_source=npm&utm_medium=referral&utm_content=core-readme">
 <picture>
 <source media="(prefers-color-scheme: dark)" srcset="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2Fde445dd867744e9bac5d3e5d04c903b2?format=webp&width=800">
 <img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2Fac5701f0871f4edbb06fa9cdb12b166e?format=webp&width=800" alt="Assets app screenshot" width="100%">
@@ -238,7 +238,7 @@ Create and organize on-brand media.
 
 **Content**
 
-<a href="https://agent-native.com/apps/content/">
+<a href="https://agent-native.com/apps/content/?utm_source=npm&utm_medium=referral&utm_content=core-readme">
 <picture>
 <source media="(prefers-color-scheme: dark)" srcset="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2Fa9f30380b03b4fd1a7d2ab371ddfd798?format=webp&width=800">
 <img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F979f792c79834470a513a9d9b733dd84?format=webp&width=800" alt="Content app screenshot" width="100%">
@@ -256,7 +256,7 @@ Draft, organize, and publish content.
 
 **Plans**
 
-<a href="https://agent-native.com/apps/plan/">
+<a href="https://agent-native.com/apps/plan/?utm_source=npm&utm_medium=referral&utm_content=core-readme">
 <picture>
 <source media="(prefers-color-scheme: dark)" srcset="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2Fe89439e917044fc9ac9663737e35bf1f?format=webp&width=800">
 <img src="https://cdn.builder.io/api/v1/image/assets%2FYJIGb4i01jvw0SRdL5Bt%2F98427229c8c84c30afee56172503c294?format=webp&width=800" alt="Plans app screenshot" width="100%">
@@ -271,11 +271,11 @@ Create and review visual plans with diagrams, wireframes, and prototypes.
 </tr>
 </table>
 
-Explore the [full app gallery](https://agent-native.com/apps), or start with the [framework guide](https://agent-native.com/docs/getting-started).
+Explore the [full app gallery](https://agent-native.com/apps?utm_source=npm&utm_medium=referral&utm_content=core-readme), or start with the [framework guide](https://agent-native.com/docs/getting-started?utm_source=npm&utm_medium=referral&utm_content=core-readme).
 
 ## Documentation and community
 
-- Read the [documentation](https://agent-native.com/docs).
+- Read the [documentation](https://agent-native.com/docs?utm_source=npm&utm_medium=referral&utm_content=core-readme).
 - Join [Discord](https://discord.gg/qm82StQ2NC) to ask questions, share what you're building, and get help.
 
 ## Contributing

package/dist/a2a/server.d.ts

@@ -21,8 +21,8 @@ export interface A2ATokenPayload {
  * plus any org-level secret for that domain), then verifies the JWT — checking
  * `aud`/`iss` when the token carries them and `exp` always. Returns the
  * caller's email (`sub`) and org domain on success, or `{ email: null,
- * orgDomain: null }` on any failure (malformed, bad signature, expired, or no
- * secret configured), never throwing.
+ * orgDomain: null }` on any failure (malformed, bad signature, expired, no
+ * secret configured, or an MCP credential), never throwing.
  *
  * Exported so workspaces can accept A2A callers on the HTTP action route with
  * the same routine — including org-level fallback secrets — instead of

package/dist/a2a/server.js

@@ -67,6 +67,15 @@ function audienceForRoute(baseAudience, options) {
         ? [routeAudience, baseAudience]
         : routeAudience;
 }
+/**
+ * MCP connect tokens and MCP OAuth access tokens can be signed with the A2A
+ * secret, but they are long-lived bearers whose revocation and membership
+ * checks live in the MCP endpoint's `verifyAuth`. A2A callers sign a
+ * short-lived token per call, so an MCP credential is never an A2A token.
+ */
+function isMcpCredential(payload) {
+    return (payload.scope === "mcp-connect" || payload.typ === "agent-native-mcp-oauth");
+}
 function tokenHasAudienceClaim(token) {
     return typeof jose.decodeJwt(token).aud !== "undefined";
 }
@@ -81,8 +90,8 @@ function isDirectReadSkill(skill) {
  * plus any org-level secret for that domain), then verifies the JWT — checking
  * `aud`/`iss` when the token carries them and `exp` always. Returns the
  * caller's email (`sub`) and org domain on success, or `{ email: null,
- * orgDomain: null }` on any failure (malformed, bad signature, expired, or no
- * secret configured), never throwing.
+ * orgDomain: null }` on any failure (malformed, bad signature, expired, no
+ * secret configured, or an MCP credential), never throwing.
  *
  * Exported so workspaces can accept A2A callers on the HTTP action route with
  * the same routine — including org-level fallback secrets — instead of
@@ -166,6 +175,8 @@ export async function verifyA2AToken(token, event, audienceOptions) {
         for (const secret of candidateSecrets) {
             try {
                 const { payload } = await jose.jwtVerify(token, new TextEncoder().encode(secret), verifyOptions);
+                if (isMcpCredential(payload))
+                    return { email: null, orgDomain: null };
                 const orgId = typeof payload.org_id === "string" && payload.org_id.trim()
                     ? payload.org_id.trim()
                     : undefined;

package/dist/agent/thread-data-builder.d.ts

@@ -100,9 +100,13 @@ export interface MergeThreadDataOptions {
 export declare function hasClaimedQueuedMessage(repo: any, messageId: string): boolean;
 export declare function claimQueuedMessage(repo: any, messageId: string): any;
 export declare function applySubmittedUserMessage(repo: any, userMessage: UserMessage, queuedMessage?: {
+    kind?: "queued-message";
     id: string;
     claimId?: string;
     now?: number;
+} | {
+    kind: "background-operation";
+    id: string;
 }): {
     status: "submitted" | "already_submitted";
     repo: any;

package/dist/agent/thread-data-builder.js

@@ -1140,6 +1140,14 @@ export function applySubmittedUserMessage(repo, userMessage, queuedMessage) {
             typeof message === "object" &&
             message.id === queuedMessage.id)
         : undefined;
+    if (queuedMessage.kind === "background-operation") {
+        if (queued)
+            return { status: "claim_expired" };
+        return {
+            status: "submitted",
+            repo: upsertUserMessage(claimQueuedMessage(repo, queuedMessage.id), userMessage),
+        };
+    }
     const claim = queued?.promotionClaim;
     if (!queued ||
         typeof queuedMessage.claimId !== "string" ||

package/dist/agent-sql/analysis.d.ts

@@ -0,0 +1,31 @@
+import type { AgentSqlToken } from "./lexer.js";
+/**
+ * Splits tokens into statements on `;`. A trailing `;` does not start a new
+ * statement, so `SELECT 1;` is one statement.
+ */
+export declare function splitAgentSqlStatements(tokens: AgentSqlToken[]): AgentSqlToken[][];
+/** The first keyword of a statement, ignoring leading parentheses. */
+export declare function leadingAgentSqlKeyword(tokens: AgentSqlToken[]): string | null;
+export interface AgentSqlQualifiedReference {
+    /** Every name before the last dot, as the database resolves them. */
+    qualifiers: string[];
+    name: string;
+    /** Index of the first token of the reference. */
+    index: number;
+}
+/**
+ * Every dotted name chain, such as `a.b` or `a.b.c`. The lexer has already
+ * removed comments and whitespace, so spacing or comments around the dot do
+ * not hide a chain. Column references (`alias.column`) are included; callers
+ * decide which qualifiers matter.
+ */
+export declare function agentSqlQualifiedReferences(tokens: AgentSqlToken[]): AgentSqlQualifiedReference[];
+/** Names immediately followed by `(`, i.e. function calls and type modifiers. */
+export declare function agentSqlCalledNames(tokens: AgentSqlToken[]): string[];
+/**
+ * Type-conversion candidates in Postgres expressions. Calls are included
+ * because `name(value)` can resolve as a cast instead of a function.
+ */
+export declare function agentSqlTypeNames(tokens: AgentSqlToken[]): Set<string>;
+/** Every unquoted and quoted identifier value in the statement. */
+export declare function agentSqlIdentifierNames(tokens: AgentSqlToken[]): Set<string>;

package/dist/agent-sql/analysis.js

@@ -0,0 +1,169 @@
+function isName(token) {
+    return token?.kind === "word" || token?.kind === "quoted-identifier";
+}
+function isPunctuation(token, text) {
+    return token?.kind === "punctuation" && token.text === text;
+}
+/**
+ * Splits tokens into statements on `;`. A trailing `;` does not start a new
+ * statement, so `SELECT 1;` is one statement.
+ */
+export function splitAgentSqlStatements(tokens) {
+    const statements = [];
+    let current = [];
+    for (const token of tokens) {
+        if (isPunctuation(token, ";")) {
+            if (current.length > 0)
+                statements.push(current);
+            current = [];
+            continue;
+        }
+        current.push(token);
+    }
+    if (current.length > 0)
+        statements.push(current);
+    return statements;
+}
+/** The first keyword of a statement, ignoring leading parentheses. */
+export function leadingAgentSqlKeyword(tokens) {
+    for (const token of tokens) {
+        if (isPunctuation(token, "("))
+            continue;
+        return token.kind === "word" ? token.value : null;
+    }
+    return null;
+}
+/**
+ * Every dotted name chain, such as `a.b` or `a.b.c`. The lexer has already
+ * removed comments and whitespace, so spacing or comments around the dot do
+ * not hide a chain. Column references (`alias.column`) are included; callers
+ * decide which qualifiers matter.
+ */
+export function agentSqlQualifiedReferences(tokens) {
+    const references = [];
+    for (let index = 0; index < tokens.length; index++) {
+        if (!isName(tokens[index]))
+            continue;
+        // Start only at the head of a chain.
+        if (index > 0 && isPunctuation(tokens[index - 1], "."))
+            continue;
+        const parts = [tokens[index].value];
+        let cursor = index;
+        while (isPunctuation(tokens[cursor + 1], ".") &&
+            (isName(tokens[cursor + 2]) ||
+                (tokens[cursor + 2]?.kind === "operator" &&
+                    tokens[cursor + 2].text === "*"))) {
+            parts.push(tokens[cursor + 2].value);
+            cursor += 2;
+        }
+        if (parts.length > 1) {
+            references.push({
+                qualifiers: parts.slice(0, -1),
+                name: parts[parts.length - 1],
+                index,
+            });
+        }
+    }
+    return references;
+}
+/** Names immediately followed by `(`, i.e. function calls and type modifiers. */
+export function agentSqlCalledNames(tokens) {
+    const names = [];
+    for (let index = 0; index < tokens.length - 1; index++) {
+        if (isName(tokens[index]) && isPunctuation(tokens[index + 1], "(")) {
+            names.push(tokens[index].value);
+        }
+    }
+    return names;
+}
+/**
+ * Type-conversion candidates in Postgres expressions. Calls are included
+ * because `name(value)` can resolve as a cast instead of a function.
+ */
+export function agentSqlTypeNames(tokens) {
+    const names = new Set();
+    const declarationNames = new Set();
+    const closingParentheses = new Map();
+    const openingParentheses = [];
+    const parentheses = [];
+    function nameEnd(index) {
+        if (!isName(tokens[index]))
+            return null;
+        while (isPunctuation(tokens[index + 1], ".") && isName(tokens[index + 2])) {
+            index += 2;
+        }
+        return index;
+    }
+    function addType(index) {
+        const end = nameEnd(index);
+        if (end !== null)
+            names.add(tokens[end].value);
+    }
+    // INSERT target column lists are declarations, even though their target
+    // name followed by `(` otherwise looks like a type-conversion call.
+    for (let index = 0; index < tokens.length; index++) {
+        if (isPunctuation(tokens[index], "("))
+            openingParentheses.push(index);
+        else if (isPunctuation(tokens[index], ")")) {
+            const open = openingParentheses.pop();
+            if (open !== undefined)
+                closingParentheses.set(open, index);
+        }
+        if (tokens[index].kind !== "word" || tokens[index].value !== "into")
+            continue;
+        const end = nameEnd(index + 1);
+        if (end === null)
+            continue;
+        declarationNames.add(end);
+    }
+    for (let index = 0; index < tokens.length; index++) {
+        const token = tokens[index];
+        if (isPunctuation(token, "::"))
+            addType(index + 1);
+        if (token.kind === "word" &&
+            token.value === "as" &&
+            parentheses.at(-1)?.cast) {
+            addType(index + 1);
+        }
+        if (isPunctuation(token, "(")) {
+            const previous = tokens[index - 1];
+            parentheses.push({
+                cast: previous?.kind === "word" && previous.value === "cast",
+            });
+        }
+        else if (isPunctuation(token, ")")) {
+            parentheses.pop();
+        }
+        if (!isName(token))
+            continue;
+        if (tokens[index + 1]?.kind === "string")
+            names.add(token.value);
+        if (!isPunctuation(tokens[index + 1], "("))
+            continue;
+        if (declarationNames.has(index))
+            continue;
+        const previous = tokens[index - 1];
+        if (previous?.kind === "word" && previous.value === "as")
+            continue;
+        const close = closingParentheses.get(index + 1);
+        if (close !== undefined &&
+            tokens[close + 1]?.kind === "word" &&
+            tokens[close + 1].value === "as" &&
+            (isPunctuation(tokens[close + 2], "(") ||
+                (tokens[close + 2]?.kind === "word" &&
+                    ["materialized", "not"].includes(tokens[close + 2].value)))) {
+            continue;
+        }
+        names.add(token.value);
+    }
+    return names;
+}
+/** Every unquoted and quoted identifier value in the statement. */
+export function agentSqlIdentifierNames(tokens) {
+    const names = new Set();
+    for (const token of tokens) {
+        if (isName(token))
+            names.add(token.value);
+    }
+    return names;
+}

package/dist/agent-sql/index.d.ts

@@ -0,0 +1,4 @@
+export { AgentSqlSyntaxError, lexAgentSql, type AgentSqlDialect, type AgentSqlSyntaxErrorCode, type AgentSqlToken, type AgentSqlTokenKind, } from "./lexer.js";
+export { agentSqlCalledNames, agentSqlIdentifierNames, agentSqlQualifiedReferences, agentSqlTypeNames, leadingAgentSqlKeyword, splitAgentSqlStatements, type AgentSqlQualifiedReference, } from "./analysis.js";
+export { AgentSqlPolicyError, assertAgentPostgresExpressionTokenPolicy, assertAgentPostgresTokenPolicy, readAgentPostgresStatement, verifyAgentPostgresExpressions, verifyAgentPostgresResolution, type AgentPostgresStatement, type AgentSqlPolicyErrorCode, type AgentSqlQueryRunner, } from "./postgres.js";
+export { readAgentSqlQuery, rewriteAgentSqlQuerySources, type AgentSqlQuery, type AgentSqlQueryCte, type AgentSqlQuerySource, } from "./query.js";

package/dist/agent-sql/index.js

@@ -0,0 +1,4 @@
+export { AgentSqlSyntaxError, lexAgentSql, } from "./lexer.js";
+export { agentSqlCalledNames, agentSqlIdentifierNames, agentSqlQualifiedReferences, agentSqlTypeNames, leadingAgentSqlKeyword, splitAgentSqlStatements, } from "./analysis.js";
+export { AgentSqlPolicyError, assertAgentPostgresExpressionTokenPolicy, assertAgentPostgresTokenPolicy, readAgentPostgresStatement, verifyAgentPostgresExpressions, verifyAgentPostgresResolution, } from "./postgres.js";
+export { readAgentSqlQuery, rewriteAgentSqlQuerySources, } from "./query.js";

package/dist/agent-sql/lexer.d.ts

@@ -0,0 +1,37 @@
+export type AgentSqlDialect = "postgres" | "bigquery";
+export type AgentSqlTokenKind = 
+/** Unquoted keyword or identifier. `value` is case-folded. */
+"word"
+/** `"name"` on Postgres, `` `name` `` on BigQuery. `value` is the exact name. */
+ | "quoted-identifier" | "string" | "number"
+/** `?`, `$1`, or BigQuery `@name` / `@@name`. */
+ | "parameter" | "operator" | "punctuation";
+export interface AgentSqlToken {
+    kind: AgentSqlTokenKind;
+    /** Source text of the token. */
+    text: string;
+    /** Identifier name as the database resolves it; source text otherwise. */
+    value: string;
+    start: number;
+    end: number;
+}
+export type AgentSqlSyntaxErrorCode = "unterminated" | "unsupported_syntax" | "unexpected_character";
+/**
+ * The lexer could not read the SQL the way the database would. Callers must
+ * refuse to run the statement: a guard that skipped what it could not read
+ * would be checking different text from what executes.
+ */
+export declare class AgentSqlSyntaxError extends Error {
+    readonly code: AgentSqlSyntaxErrorCode;
+    readonly position: number;
+    constructor(code: AgentSqlSyntaxErrorCode, message: string, position: number);
+}
+/**
+ * Splits agent-authored SQL into the tokens the target database will see.
+ * Comments and whitespace are dropped; everything else is kept with its
+ * source offsets. Throws {@link AgentSqlSyntaxError} for anything the lexer
+ * cannot read the same way the database does.
+ */
+export declare function lexAgentSql(sql: string, options: {
+    dialect: AgentSqlDialect;
+}): AgentSqlToken[];