@agent-native/core 0.4.1 → 0.4.3

package/dist/server/create-server.js

@@ -1,5 +1,4 @@
-import express from "express";
-import cors from "cors";
+import { createApp, createRouter, defineEventHandler, readBody, setResponseStatus, } from "h3";
 import fs from "fs";
 import path from "path";
 import { agentEnv } from "../shared/agent-env.js";
@@ -29,7 +28,13 @@ function parseEnvFile(content) {
 /**
  * Upsert vars into a .env file, preserving existing structure.
  */
-function upsertEnvFile(envPath, vars) {
+export function upsertEnvFile(envPath, vars) {
+    // Sanitize: reject values that could inject additional env vars
+    for (const { key, value } of vars) {
+        if (/[\n\r\0]/.test(value)) {
+            throw new Error(`Invalid env var value for ${key}: must not contain newlines or control characters`);
+        }
+    }
     let content = "";
     try {
         content = fs.readFileSync(envPath, "utf-8");
@@ -67,51 +72,66 @@ function upsertEnvFile(envPath, vars) {
     fs.writeFileSync(envPath, result);
 }
 /**
- * Create a pre-configured Express app with standard agent-native middleware:
- * - CORS
- * - JSON body parser (50mb limit)
- * - URL-encoded body parser
+ * Create a pre-configured H3 app with standard agent-native setup:
+ * - CORS headers via middleware
  * - /api/ping health check
  * - /api/env-status and /api/env-vars (when envKeys is provided)
+ *
+ * Returns { app, router } — mount routes on `router`.
  */
 export function createServer(options = {}) {
-    const app = express();
-    // Middleware
+    const app = createApp({
+        onError(error, event) {
+            console.error("[agent-native] Server error:", error);
+        },
+    });
+    // CORS middleware
     if (options.cors !== false) {
-        app.use(cors(options.cors));
+        app.use(defineEventHandler((event) => {
+            const headers = event.node.res;
+            headers.setHeader("Access-Control-Allow-Origin", "*");
+            headers.setHeader("Access-Control-Allow-Methods", "GET,POST,PUT,PATCH,DELETE,OPTIONS");
+            headers.setHeader("Access-Control-Allow-Headers", "Content-Type,Authorization,X-Requested-With");
+            if (event.node.req.method === "OPTIONS") {
+                headers.writeHead(204);
+                headers.end();
+                return null;
+            }
+        }));
     }
-    app.use(express.json({ limit: options.jsonLimit ?? "50mb" }));
-    app.use(express.urlencoded({ extended: true }));
+    const router = createRouter();
+    app.use(router);
     // Health check
     if (!options.disablePing) {
-        app.get("/api/ping", (_req, res) => {
+        router.get("/api/ping", defineEventHandler(() => {
             const message = options.pingMessage ?? process.env.PING_MESSAGE ?? "pong";
-            res.json({ message });
-        });
+            return { message };
+        }));
     }
     // Env key management routes
     if (options.envKeys) {
         const envKeys = options.envKeys;
-        app.get("/api/env-status", (_req, res) => {
-            res.json(envKeys.map((cfg) => ({
+        router.get("/api/env-status", defineEventHandler(() => {
+            return envKeys.map((cfg) => ({
                 key: cfg.key,
                 label: cfg.label,
                 required: cfg.required ?? false,
                 configured: !!process.env[cfg.key],
-            })));
-        });
-        app.post("/api/env-vars", (req, res) => {
-            const { vars } = req.body;
+            }));
+        }));
+        router.post("/api/env-vars", defineEventHandler(async (event) => {
+            const body = await readBody(event);
+            const { vars } = body;
             if (!Array.isArray(vars) || vars.length === 0) {
-                res.status(400).json({ error: "vars array required" });
-                return;
+                setResponseStatus(event, 400);
+                return { error: "vars array required" };
             }
             // Only allow keys that are in the env config
             const allowedKeys = new Set(envKeys.map((k) => k.key));
             const filtered = vars.filter((v) => allowedKeys.has(v.key));
             if (filtered.length === 0) {
-                res.status(400).json({ error: "No recognized env keys in request" });
-                return;
+                setResponseStatus(event, 400);
+                return { error: "No recognized env keys in request" };
             }
             // Write to .env file
             const envPath = path.join(process.cwd(), ".env");
@@ -122,9 +142,9 @@ export function createServer(options = {}) {
             }
             // Notify parent (Builder or harness) via postMessage
             agentEnv.setVars(filtered);
-            res.json({ saved: filtered.map((v) => v.key) });
-        });
+            return { saved: filtered.map((v) => v.key) };
+        }));
     }
-    return app;
+    return { app, router };
 }
 //# sourceMappingURL=create-server.js.map

package/dist/server/create-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-server.js","sourceRoot":"","sources":["../../src/server/create-server.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAwBlD;;GAEG;AACH,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,SAAS;QAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,2BAA2B;QAC3B,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CACpB,OAAe,EACf,IAA2C;IAE3C,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE7D,iCAAiC;IACjC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACrD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;YAClC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,OAAO,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,kBAAkB;IAClB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,0BAA0B;IAC1B,IAAI,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,IAAI,CAAC;IAE3C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,UAA+B,EAAE;IAEjC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,aAAa;IACb,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEhD,eAAe;IACf,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACzB,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACjC,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM,CAAC;YAC1E,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,4BAA4B;IAC5B,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAEhC,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACvC,GAAG,CAAC,IAAI,CACN,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACpB,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,KAAK;gBAC/B,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;aACnC,CAAC,CAAC,CACJ,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACrC,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAEpB,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;gBACvD,OAAO;YACT,CAAC;YAED,6CAA6C;YAC7C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;gBACrE,OAAO;YACT,CAAC;YAED,qBAAqB;YACrB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;YACjD,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAEjC,oEAAoE;YACpE,KAAK,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,QAAQ,EAAE,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC3B,CAAC;YAED,qDAAqD;YACrD,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAE3B,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"create-server.js","sourceRoot":"","sources":["../../src/server/create-server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,YAAY,EACZ,kBAAkB,EAClB,QAAQ,EACR,iBAAiB,GAElB,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAwBlD;;GAEG;AACH,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,SAAS;QAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,2BAA2B;QAC3B,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAe,EACf,IAA2C;IAE3C,gEAAgE;IAChE,KAAK,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC;QAClC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,6BAA6B,GAAG,mDAAmD,CACpF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE7D,iCAAiC;IACjC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACrD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;YAClC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,OAAO,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,kBAAkB;IAClB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,0BAA0B;IAC1B,IAAI,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,IAAI,CAAC;IAE3C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAOD;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,UAA+B,EAAE;IAEjC,MAAM,GAAG,GAAG,SAAS,CAAC;QACpB,OAAO,CAAC,KAAK,EAAE,KAAK;YAClB,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;QACvD,CAAC;KACF,CAAC,CAAC;IAEH,kBAAkB;IAClB,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,CACL,kBAAkB,CAAC,CAAC,KAAK,EAAE,EAAE;YAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;YAC/B,OAAO,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YACtD,OAAO,CAAC,SAAS,CACf,8BAA8B,EAC9B,mCAAmC,CACpC,CAAC;YACF,OAAO,CAAC,SAAS,CACf,8BAA8B,EAC9B,6CAA6C,CAC9C,CAAC;YAEF,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACxC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACvB,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEhB,eAAe;IACf,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,CACR,WAAW,EACX,kBAAkB,CAAC,GAAG,EAAE;YACtB,MAAM,OAAO,GACX,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM,CAAC;YAC5D,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,4BAA4B;IAC5B,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAEhC,MAAM,CAAC,GAAG,CACR,iBAAiB,EACjB,kBAAkB,CAAC,GAAG,EAAE;YACtB,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC3B,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,KAAK;gBAC/B,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;aACnC,CAAC,CAAC,CAAC;QACN,CAAC,CAAC,CACH,CAAC;QAEF,MAAM,CAAC,IAAI,CACT,eAAe,EACf,kBAAkB,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YAC1C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,EAAE,IAAI,EAAE,GAAG,IAEhB,CAAC;YAEF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;YAC1C,CAAC;YAED,6CAA6C;YAC7C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;YACxD,CAAC;YAED,qBAAqB;YACrB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;YACjD,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAEjC,oEAAoE;YACpE,KAAK,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,QAAQ,EAAE,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC3B,CAAC;YAED,qDAAqD;YACrD,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAE3B,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACzB,CAAC"}

package/dist/server/default-watcher.d.ts

@@ -0,0 +1,17 @@
+import type { SSEHandlerOptions } from "./sse.js";
+export declare function getDefaultSSEEmitters(): NonNullable<SSEHandlerOptions["extraEmitters"]>;
+/** @deprecated File sync is no longer used. Returns no-op status. */
+export declare function defaultSyncStatusHandler(): {
+    enabled: boolean;
+    conflicts: number;
+};
+/** @deprecated File sync is no longer used. No-op. */
+export declare function setDefaultSyncResult(_result: any): void;
+/**
+ * Create the default SSE handler for all templates.
+ *
+ * Streams DB change events (application state, settings) to connected clients.
+ * No file watcher — all data lives in SQL.
+ */
+export declare function createDefaultSSEHandler(): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+//# sourceMappingURL=default-watcher.d.ts.map

package/dist/server/default-watcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-watcher.d.ts","sourceRoot":"","sources":["../../src/server/default-watcher.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAelD,wBAAgB,qBAAqB,IAAI,WAAW,CAClD,iBAAiB,CAAC,eAAe,CAAC,CACnC,CAGA;AAID,qEAAqE;AACrE,wBAAgB,wBAAwB;;;EAEvC;AAED,sDAAsD;AACtD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,GAAG,QAAI;AAErD;;;;;GAKG;AACH,wBAAgB,uBAAuB,+EAKtC"}

package/dist/server/default-watcher.js

@@ -0,0 +1,37 @@
+import { createSSEHandler } from "./sse.js";
+import { getAppStateEmitter } from "../application-state/emitter.js";
+import { getSettingsEmitter } from "../settings/store.js";
+const _emitters = [];
+let _emittersRegistered = false;
+/** Ensure the DB change emitters are wired into SSE. */
+function ensureEmitters() {
+    if (_emittersRegistered)
+        return;
+    _emittersRegistered = true;
+    _emitters.push({ emitter: getAppStateEmitter(), event: "app-state" });
+    _emitters.push({ emitter: getSettingsEmitter(), event: "settings" });
+}
+export function getDefaultSSEEmitters() {
+    ensureEmitters();
+    return _emitters;
+}
+// --- Legacy file sync compat (deprecated — data is SQL-backed now) ---
+/** @deprecated File sync is no longer used. Returns no-op status. */
+export function defaultSyncStatusHandler() {
+    return { enabled: false, conflicts: 0 };
+}
+/** @deprecated File sync is no longer used. No-op. */
+export function setDefaultSyncResult(_result) { }
+/**
+ * Create the default SSE handler for all templates.
+ *
+ * Streams DB change events (application state, settings) to connected clients.
+ * No file watcher — all data lives in SQL.
+ */
+export function createDefaultSSEHandler() {
+    ensureEmitters();
+    return createSSEHandler({
+        extraEmitters: _emitters,
+    });
+}
+//# sourceMappingURL=default-watcher.js.map

package/dist/server/default-watcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-watcher.js","sourceRoot":"","sources":["../../src/server/default-watcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,MAAM,SAAS,GAAoD,EAAE,CAAC;AACtE,IAAI,mBAAmB,GAAG,KAAK,CAAC;AAEhC,wDAAwD;AACxD,SAAS,cAAc;IACrB,IAAI,mBAAmB;QAAE,OAAO;IAChC,mBAAmB,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACtE,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,qBAAqB;IAGnC,cAAc,EAAE,CAAC;IACjB,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,wEAAwE;AAExE,qEAAqE;AACrE,MAAM,UAAU,wBAAwB;IACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,oBAAoB,CAAC,OAAY,IAAG,CAAC;AAErD;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB;IACrC,cAAc,EAAE,CAAC;IACjB,OAAO,gBAAgB,CAAC;QACtB,aAAa,EAAE,SAAS;KACzB,CAAC,CAAC;AACL,CAAC"}

package/dist/server/file-sync-plugin.d.ts

@@ -0,0 +1,7 @@
+type NitroPluginDef = (nitroApp: any) => void | Promise<void>;
+export declare function createFileSyncPlugin(options?: {
+    contentRoot?: string;
+}): NitroPluginDef;
+export declare const defaultFileSyncPlugin: NitroPluginDef;
+export {};
+//# sourceMappingURL=file-sync-plugin.d.ts.map

package/dist/server/file-sync-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-sync-plugin.d.ts","sourceRoot":"","sources":["../../src/server/file-sync-plugin.ts"],"names":[],"mappings":"AAGA,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE9D,wBAAgB,oBAAoB,CAAC,OAAO,CAAC,EAAE;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,cAAc,CAoCjB;AAED,eAAO,MAAM,qBAAqB,EAAE,cAAuC,CAAC"}

package/dist/server/file-sync-plugin.js

@@ -0,0 +1,38 @@
+import fs from "fs";
+import { setDefaultSyncResult } from "./default-watcher.js";
+export function createFileSyncPlugin(options) {
+    return async () => {
+        // Dynamic import to avoid loading sync deps when not needed
+        const { createFileSync } = await import("../adapters/sync/index.js");
+        const result = await createFileSync({
+            contentRoot: options?.contentRoot || "./data",
+        });
+        setDefaultSyncResult(result);
+        if (result.status === "error") {
+            console.warn(`[app] File sync failed: ${result.reason}`);
+        }
+        process.on("SIGTERM", async () => {
+            if (result.status === "ready")
+                await result.shutdown();
+            process.exit(0);
+        });
+        if (result.status === "ready") {
+            result.fileSync.syncEvents.on("sync", (event) => {
+                try {
+                    if (event.type === "conflict-needs-llm") {
+                        fs.mkdirSync("application-state", { recursive: true });
+                        fs.writeFileSync("application-state/sync-conflict.json", JSON.stringify(event, null, 2));
+                    }
+                    else if (event.type === "conflict-resolved") {
+                        fs.rmSync("application-state/sync-conflict.json", { force: true });
+                    }
+                }
+                catch {
+                    /* best-effort */
+                }
+            });
+        }
+    };
+}
+export const defaultFileSyncPlugin = createFileSyncPlugin();
+//# sourceMappingURL=file-sync-plugin.js.map

package/dist/server/file-sync-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-sync-plugin.js","sourceRoot":"","sources":["../../src/server/file-sync-plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAI5D,MAAM,UAAU,oBAAoB,CAAC,OAEpC;IACC,OAAO,KAAK,IAAI,EAAE;QAChB,4DAA4D;QAC5D,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;YAClC,WAAW,EAAE,OAAO,EAAE,WAAW,IAAI,QAAQ;SAC9C,CAAC,CAAC;QACH,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAE7B,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,2BAA2B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;YAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;gBAAE,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAU,EAAE,EAAE;gBACnD,IAAI,CAAC;oBACH,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;wBACxC,EAAE,CAAC,SAAS,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;wBACvD,EAAE,CAAC,aAAa,CACd,sCAAsC,EACtC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAC/B,CAAC;oBACJ,CAAC;yBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;wBAC9C,EAAE,CAAC,MAAM,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBACrE,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,iBAAiB;gBACnB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAmB,oBAAoB,EAAE,CAAC"}

package/dist/server/google-auth-plugin.d.ts

@@ -0,0 +1,22 @@
+type NitroPluginDef = (nitroApp: any) => void | Promise<void>;
+export interface GoogleAuthPluginOptions {
+    /** Additional paths accessible without authentication */
+    publicPaths?: string[];
+}
+/**
+ * Create an auth plugin that uses Google OAuth for authentication.
+ *
+ * When a user visits the app unauthenticated, they see a "Sign in with Google"
+ * page. The Google OAuth callback (handled by the template) creates a session
+ * tied to the user's Google email. `getSession()` then returns `{ email }` for
+ * all subsequent requests.
+ *
+ * Usage in a template's `server/plugins/auth.ts`:
+ * ```ts
+ * import { createGoogleAuthPlugin } from "@agent-native/core/server";
+ * export default createGoogleAuthPlugin();
+ * ```
+ */
+export declare function createGoogleAuthPlugin(options?: GoogleAuthPluginOptions): NitroPluginDef;
+export {};
+//# sourceMappingURL=google-auth-plugin.d.ts.map

package/dist/server/google-auth-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-auth-plugin.d.ts","sourceRoot":"","sources":["../../src/server/google-auth-plugin.ts"],"names":[],"mappings":"AAIA,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE9D,MAAM,WAAW,uBAAuB;IACtC,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAwFD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,CAAC,EAAE,uBAAuB,GAChC,cAAc,CAgBhB"}

package/dist/server/google-auth-plugin.js

@@ -0,0 +1,122 @@
+import { getCookie } from "h3";
+import { createAuthPlugin } from "./auth-plugin.js";
+import { getSessionEmail } from "./auth.js";
+const GOOGLE_LOGIN_HTML = `<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>Sign in</title>
+<style>
+  *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+  body {
+    font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+    background: #0a0a0a;
+    color: #e5e5e5;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    min-height: 100vh;
+  }
+  .card {
+    width: 100%;
+    max-width: 360px;
+    padding: 2rem;
+    background: #141414;
+    border: 1px solid rgba(255,255,255,0.08);
+    border-radius: 12px;
+    text-align: center;
+  }
+  h1 { font-size: 1.125rem; font-weight: 600; margin-bottom: 0.5rem; color: #fff; }
+  .subtitle { font-size: 0.8125rem; color: #888; margin-bottom: 1.5rem; }
+  button {
+    width: 100%;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    gap: 0.625rem;
+    padding: 0.625rem;
+    background: #fff;
+    color: #000;
+    border: none;
+    border-radius: 8px;
+    font-size: 0.9375rem;
+    font-weight: 500;
+    cursor: pointer;
+  }
+  button:hover { opacity: 0.85; }
+  button:disabled { opacity: 0.5; cursor: wait; }
+  .error { margin-top: 0.75rem; font-size: 0.8125rem; color: #f87171; display: none; }
+  .error.show { display: block; }
+  svg { width: 18px; height: 18px; }
+</style>
+</head>
+<body>
+<div class="card">
+  <h1>Sign in</h1>
+  <p class="subtitle">Continue with your Google account</p>
+  <button id="btn" onclick="signIn()">
+    <svg viewBox="0 0 24 24"><path fill="#4285F4" d="M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92a5.06 5.06 0 0 1-2.2 3.32v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.1z"/><path fill="#34A853" d="M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z"/><path fill="#FBBC05" d="M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z"/><path fill="#EA4335" d="M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z"/></svg>
+    Sign in with Google
+  </button>
+  <p class="error" id="err"></p>
+</div>
+<script>
+  async function signIn() {
+    var btn = document.getElementById('btn');
+    var err = document.getElementById('err');
+    btn.disabled = true;
+    err.classList.remove('show');
+    try {
+      var res = await fetch('/api/google/auth-url');
+      var data = await res.json();
+      if (data.url) {
+        window.location.href = data.url;
+      } else {
+        err.textContent = data.message || 'Google OAuth is not configured. Set GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET.';
+        err.classList.add('show');
+        btn.disabled = false;
+      }
+    } catch (e) {
+      err.textContent = 'Failed to connect. Please try again.';
+      err.classList.add('show');
+      btn.disabled = false;
+    }
+  }
+</script>
+</body>
+</html>`;
+/**
+ * Create an auth plugin that uses Google OAuth for authentication.
+ *
+ * When a user visits the app unauthenticated, they see a "Sign in with Google"
+ * page. The Google OAuth callback (handled by the template) creates a session
+ * tied to the user's Google email. `getSession()` then returns `{ email }` for
+ * all subsequent requests.
+ *
+ * Usage in a template's `server/plugins/auth.ts`:
+ * ```ts
+ * import { createGoogleAuthPlugin } from "@agent-native/core/server";
+ * export default createGoogleAuthPlugin();
+ * ```
+ */
+export function createGoogleAuthPlugin(options) {
+    return createAuthPlugin({
+        getSession: async (event) => {
+            const cookie = getCookie(event, "an_session");
+            if (!cookie)
+                return null;
+            const email = await getSessionEmail(cookie);
+            if (!email)
+                return null;
+            return { email, token: cookie };
+        },
+        publicPaths: [
+            "/api/google/callback",
+            "/api/google/auth-url",
+            ...(options?.publicPaths ?? []),
+        ],
+        loginHtml: GOOGLE_LOGIN_HTML,
+    });
+}
+//# sourceMappingURL=google-auth-plugin.js.map

package/dist/server/google-auth-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-auth-plugin.js","sourceRoot":"","sources":["../../src/server/google-auth-plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAS5C,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAoFlB,CAAC;AAET;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAiC;IAEjC,OAAO,gBAAgB,CAAC;QACtB,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YAC1B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAClC,CAAC;QACD,WAAW,EAAE;YACX,sBAAsB;YACtB,sBAAsB;YACtB,GAAG,CAAC,OAAO,EAAE,WAAW,IAAI,EAAE,CAAC;SAChC;QACD,SAAS,EAAE,iBAAiB;KAC7B,CAAC,CAAC;AACL,CAAC"}

package/dist/server/index.d.ts

@@ -1,5 +1,16 @@
-export { createServer, type CreateServerOptions, type EnvKeyConfig, } from "./create-server.js";
+export { createServer, upsertEnvFile, type CreateServerOptions, type EnvKeyConfig, } from "./create-server.js";
 export { createFileWatcher, createSSEHandler, type FileWatcherOptions, type SSEHandlerOptions, } from "./sse.js";
-export { createProductionServer, type ProductionServerOptions, } from "./production.js";
+export { mountAuthMiddleware, autoMountAuth, getSession, addSession, removeSession, getSessionEmail, type AuthSession, type AuthOptions, } from "./auth.js";
 export { requireEnvKey, type MissingKeyResponse } from "./missing-key.js";
+export { verifyCaptcha, type CaptchaVerifyResult } from "./captcha.js";
+export { createProductionAgentHandler, type ScriptEntry, type ProductionAgentOptions, type ScriptTool, type AgentMessage, type AgentChatRequest, type AgentChatEvent, } from "../agent/index.js";
+export { createDevScriptRegistry } from "../scripts/dev/index.js";
+export { getDefaultSSEEmitters, setDefaultSyncResult, createDefaultSSEHandler, defaultSyncStatusHandler, } from "./default-watcher.js";
+export { createAuthPlugin, defaultAuthPlugin } from "./auth-plugin.js";
+export { createGoogleAuthPlugin, type GoogleAuthPluginOptions, } from "./google-auth-plugin.js";
+export { createAgentChatPlugin, defaultAgentChatPlugin, type AgentChatPluginOptions, } from "./agent-chat-plugin.js";
+export { createFileSyncPlugin, defaultFileSyncPlugin, } from "./file-sync-plugin.js";
+export { createTerminalPlugin, defaultTerminalPlugin, type TerminalPluginOptions, } from "../terminal/terminal-plugin.js";
+type NitroPluginDef = (nitroApp: any) => void | Promise<void>;
+export declare function defineNitroPlugin(def: NitroPluginDef): NitroPluginDef;
 //# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,KAAK,mBAAmB,EACxB,KAAK,YAAY,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,GACvB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,sBAAsB,EACtB,KAAK,uBAAuB,GAC7B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,aAAa,EACb,KAAK,mBAAmB,EACxB,KAAK,YAAY,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,GACvB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,UAAU,EACV,UAAU,EACV,aAAa,EACb,eAAe,EACf,KAAK,WAAW,EAChB,KAAK,WAAW,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,aAAa,EAAE,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EACL,4BAA4B,EAC5B,KAAK,WAAW,EAChB,KAAK,sBAAsB,EAC3B,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,cAAc,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAElE,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EACL,sBAAsB,EACtB,KAAK,uBAAuB,GAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,KAAK,qBAAqB,GAC3B,MAAM,gCAAgC,CAAC;AAKxC,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAC9D,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,cAAc,GAAG,cAAc,CAErE"}

package/dist/server/index.js

@@ -1,5 +1,17 @@
-export { createServer, } from "./create-server.js";
+export { createServer, upsertEnvFile, } from "./create-server.js";
 export { createFileWatcher, createSSEHandler, } from "./sse.js";
-export { createProductionServer, } from "./production.js";
+export { mountAuthMiddleware, autoMountAuth, getSession, addSession, removeSession, getSessionEmail, } from "./auth.js";
 export { requireEnvKey } from "./missing-key.js";
+export { verifyCaptcha } from "./captcha.js";
+export { createProductionAgentHandler, } from "../agent/index.js";
+export { createDevScriptRegistry } from "../scripts/dev/index.js";
+export { getDefaultSSEEmitters, setDefaultSyncResult, createDefaultSSEHandler, defaultSyncStatusHandler, } from "./default-watcher.js";
+export { createAuthPlugin, defaultAuthPlugin } from "./auth-plugin.js";
+export { createGoogleAuthPlugin, } from "./google-auth-plugin.js";
+export { createAgentChatPlugin, defaultAgentChatPlugin, } from "./agent-chat-plugin.js";
+export { createFileSyncPlugin, defaultFileSyncPlugin, } from "./file-sync-plugin.js";
+export { createTerminalPlugin, defaultTerminalPlugin, } from "../terminal/terminal-plugin.js";
+export function defineNitroPlugin(def) {
+    return def;
+}
 //# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,GAGb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GAGjB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,sBAAsB,GAEvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,aAAa,EAA2B,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,aAAa,GAGd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GAGjB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,UAAU,EACV,UAAU,EACV,aAAa,EACb,eAAe,GAGhB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,aAAa,EAA2B,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAA4B,MAAM,cAAc,CAAC;AACvE,OAAO,EACL,4BAA4B,GAO7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAElE,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EACL,sBAAsB,GAEvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GAEtB,MAAM,gCAAgC,CAAC;AAMxC,MAAM,UAAU,iBAAiB,CAAC,GAAmB;IACnD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/server/missing-key.d.ts

@@ -1,4 +1,4 @@
-import type { Response } from "express";
+import { type H3Event } from "h3";
 export interface MissingKeyResponse {
     error: "missing_api_key";
     key: string;
@@ -7,11 +7,15 @@ export interface MissingKeyResponse {
     settingsPath: string;
 }
 /**
- * Check if an env var is set. If not, send a structured missing_api_key response.
- * Returns true if the key is missing (response was sent), false if the key exists.
+ * Check if an env var is set. If not, set response status and return a structured
+ * missing_api_key response object. Returns null if the key exists (no action needed).
+ *
+ * Usage:
+ *   const missing = requireEnvKey(event, 'MY_KEY', 'My Service');
+ *   if (missing) return missing;
  */
-export declare function requireEnvKey(res: Response, key: string, label: string, options?: {
+export declare function requireEnvKey(event: H3Event, key: string, label: string, options?: {
     message?: string;
     settingsPath?: string;
-}): boolean;
+}): MissingKeyResponse | null;
 //# sourceMappingURL=missing-key.d.ts.map

package/dist/server/missing-key.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"missing-key.d.ts","sourceRoot":"","sources":["../../src/server/missing-key.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAExC,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,iBAAiB,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GACpD,OAAO,CAYT"}
+{"version":3,"file":"missing-key.d.ts","sourceRoot":"","sources":["../../src/server/missing-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,OAAO,EAAE,MAAM,IAAI,CAAC;AAErD,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,iBAAiB,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GACpD,kBAAkB,GAAG,IAAI,CAY3B"}

package/dist/server/missing-key.js

@@ -1,17 +1,22 @@
+import { setResponseStatus } from "h3";
 /**
- * Check if an env var is set. If not, send a structured missing_api_key response.
- * Returns true if the key is missing (response was sent), false if the key exists.
+ * Check if an env var is set. If not, set response status and return a structured
+ * missing_api_key response object. Returns null if the key exists (no action needed).
+ *
+ * Usage:
+ *   const missing = requireEnvKey(event, 'MY_KEY', 'My Service');
+ *   if (missing) return missing;
  */
-export function requireEnvKey(res, key, label, options) {
+export function requireEnvKey(event, key, label, options) {
     if (process.env[key])
-        return false;
-    res.status(200).json({
+        return null;
+    setResponseStatus(event, 200);
+    return {
         error: "missing_api_key",
         key,
         label,
         message: options?.message ?? `Connect your ${label} account to see this data`,
         settingsPath: options?.settingsPath ?? "/settings",
-    });
-    return true;
+    };
 }
 //# sourceMappingURL=missing-key.js.map

package/dist/server/missing-key.js.map

@@ -1 +1 @@
-{"version":3,"file":"missing-key.js","sourceRoot":"","sources":["../../src/server/missing-key.ts"],"names":[],"mappings":"AAUA;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAa,EACb,GAAW,EACX,KAAa,EACb,OAAqD;IAErD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAEnC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACnB,KAAK,EAAE,iBAAiB;QACxB,GAAG;QACH,KAAK;QACL,OAAO,EACL,OAAO,EAAE,OAAO,IAAI,gBAAgB,KAAK,2BAA2B;QACtE,YAAY,EAAE,OAAO,EAAE,YAAY,IAAI,WAAW;KACtB,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"missing-key.js","sourceRoot":"","sources":["../../src/server/missing-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAgB,MAAM,IAAI,CAAC;AAUrD;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAc,EACd,GAAW,EACX,KAAa,EACb,OAAqD;IAErD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAElC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9B,OAAO;QACL,KAAK,EAAE,iBAAiB;QACxB,GAAG;QACH,KAAK;QACL,OAAO,EACL,OAAO,EAAE,OAAO,IAAI,gBAAgB,KAAK,2BAA2B;QACtE,YAAY,EAAE,OAAO,EAAE,YAAY,IAAI,WAAW;KACnD,CAAC;AACJ,CAAC"}

package/dist/server/sse.d.ts

@@ -1,10 +1,8 @@
 import { type FSWatcher } from "chokidar";
-import { EventEmitter } from "events";
-import type { Request, Response } from "express";
 export type { FSWatcher } from "chokidar";
 export interface FileWatcherOptions {
     /** Glob patterns or regex to ignore. */
-    ignored?: any;
+    ignored?: string | RegExp | string[];
     /** Whether to emit events for the initial file scan. Default: false (ignoreInitial: true) */
     emitInitial?: boolean;
 }
@@ -13,18 +11,30 @@ export interface FileWatcherOptions {
  * Returns a chokidar.FSWatcher that emits "all" events on file changes.
  */
 export declare function createFileWatcher(dir: string | string[], options?: FileWatcherOptions): FSWatcher;
+/** Any object with on/off methods (compatible with EventEmitter, TypedEventEmitter, etc.). */
+interface EventLike {
+    on(event: string, listener: (...args: any[]) => void): any;
+    off(event: string, listener: (...args: any[]) => void): any;
+}
 export interface SSEHandlerOptions {
-    /** Additional EventEmitters to stream events from (e.g. sync events). */
+    /** Additional EventEmitters to stream events from (e.g. DB change events). */
     extraEmitters?: Array<{
-        emitter: EventEmitter;
+        emitter: EventLike;
         event: string;
     }>;
+    /** Optional file watcher for streaming file change events (e.g. code modifications). */
+    watcher?: FSWatcher;
+    /** Content root for computing relative paths. If provided, absolute paths are stripped. */
+    contentRoot?: string;
 }
 /**
- * Create an Express route handler that streams Server-Sent Events for file changes.
+ * Create an H3 event handler that streams Server-Sent Events.
+ *
+ * Streams events from DB change emitters (application state, settings)
+ * and optionally from a file watcher.
  *
  * Usage:
- *   app.get("/api/events", createSSEHandler(watcher));
+ *   router.get("/api/events", createSSEHandler({ extraEmitters }));
  */
-export declare function createSSEHandler(watcher: FSWatcher, options?: SSEHandlerOptions): (req: Request, res: Response) => void;
+export declare function createSSEHandler(options?: SSEHandlerOptions): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
 //# sourceMappingURL=sse.d.ts.map

package/dist/server/sse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../../src/server/sse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEjD,YAAY,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAE1C,MAAM,WAAW,kBAAkB;IACjC,wCAAwC;IACxC,OAAO,CAAC,EAAE,GAAG,CAAC;IACd,6FAA6F;IAC7F,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,EACtB,OAAO,GAAE,kBAAuB,GAC/B,SAAS,CAKX;AAED,MAAM,WAAW,iBAAiB;IAChC,yEAAyE;IACzE,aAAa,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,YAAY,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,SAAS,EAClB,OAAO,GAAE,iBAAsB,GAC9B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,KAAK,IAAI,CA8BvC"}
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../../src/server/sse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC;AAKjD,YAAY,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAE1C,MAAM,WAAW,kBAAkB;IACjC,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;IACrC,6FAA6F;IAC7F,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,EACtB,OAAO,GAAE,kBAAuB,GAC/B,SAAS,CAKX;AAED,8FAA8F;AAC9F,UAAU,SAAS;IAEjB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,GAAG,GAAG,CAAC;IAE3D,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,GAAG,GAAG,CAAC;CAC7D;AAED,MAAM,WAAW,iBAAiB;IAChC,8EAA8E;IAC9E,aAAa,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,SAAS,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7D,wFAAwF;IACxF,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,2FAA2F;IAC3F,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,iBAAsB,8EA+F/D"}