@agent-native/core 0.4.1 → 0.4.3

package/dist/vite/dev-api-server.js

@@ -0,0 +1,160 @@
+import path from "path";
+import fs from "fs";
+import { createApp, createRouter, toNodeListener } from "h3";
+/**
+ * Map a Nitro-style route file path to { method, route }.
+ *
+ * Examples:
+ *   api/emails/index.get.ts      → GET  /api/emails
+ *   api/emails/[id].get.ts       → GET  /api/emails/:id
+ *   api/emails/[id]/star.patch.ts→ PATCH /api/emails/:id/star
+ *   api/events.get.ts            → GET  /api/events
+ */
+function parseRouteFile(relPath) {
+    // Strip .ts extension
+    const withoutExt = relPath.replace(/\.ts$/, "");
+    // Extract HTTP method from the last segment (e.g. "status.get" → method="get")
+    const dotIdx = withoutExt.lastIndexOf(".");
+    if (dotIdx === -1)
+        return null;
+    const method = withoutExt.slice(dotIdx + 1).toLowerCase();
+    const validMethods = ["get", "post", "put", "patch", "delete", "options"];
+    if (!validMethods.includes(method))
+        return null;
+    let routePath = withoutExt.slice(0, dotIdx);
+    // Replace [param] with :param
+    routePath = routePath.replace(/\[([^\]]+)\]/g, ":$1");
+    // Remove trailing /index
+    routePath = routePath.replace(/\/index$/, "");
+    // Ensure leading slash
+    if (!routePath.startsWith("/"))
+        routePath = "/" + routePath;
+    return { method, route: routePath };
+}
+/**
+ * Recursively discover all .ts files under a directory.
+ */
+function discoverFiles(dir, prefix = "") {
+    if (!fs.existsSync(dir))
+        return [];
+    const entries = fs.readdirSync(dir, { withFileTypes: true });
+    const files = [];
+    for (const entry of entries) {
+        const rel = prefix ? `${prefix}/${entry.name}` : entry.name;
+        if (entry.isDirectory()) {
+            files.push(...discoverFiles(path.join(dir, entry.name), rel));
+        }
+        else if (entry.name.endsWith(".ts")) {
+            files.push(rel);
+        }
+    }
+    return files;
+}
+/**
+ * Load all API routes and server plugins, return an H3 listener.
+ */
+async function buildApiListener(server, cwd) {
+    const apiDir = path.join(cwd, "server/routes/api");
+    const pluginsDir = path.join(cwd, "server/plugins");
+    const app = createApp();
+    const router = createRouter();
+    app.use(router);
+    // Discover and register API route files
+    const routeFiles = discoverFiles(apiDir, "api");
+    let registered = 0;
+    for (const relFile of routeFiles) {
+        const parsed = parseRouteFile(relFile);
+        if (!parsed)
+            continue;
+        const absPath = path.join(cwd, "server/routes", relFile);
+        try {
+            const mod = await server.ssrLoadModule(`/${path.relative(cwd, absPath)}`);
+            const handler = mod.default;
+            if (typeof handler !== "function")
+                continue;
+            const routerMethod = router[parsed.method];
+            if (typeof routerMethod === "function") {
+                routerMethod.call(router, parsed.route, handler);
+                registered++;
+            }
+        }
+        catch (e) {
+            console.warn(`[dev-api-server] Failed to load route ${relFile}:`, e.message);
+        }
+    }
+    // Run server plugins (auth, file-sync, etc.)
+    if (fs.existsSync(pluginsDir)) {
+        const pluginFiles = fs
+            .readdirSync(pluginsDir)
+            .filter((f) => f.endsWith(".ts"))
+            .sort();
+        for (const file of pluginFiles) {
+            try {
+                const absPath = path.join(pluginsDir, file);
+                const mod = await server.ssrLoadModule(`/${path.relative(cwd, absPath)}`);
+                const plugin = mod.default;
+                if (typeof plugin === "function") {
+                    await plugin({ h3App: app });
+                }
+            }
+            catch (e) {
+                console.warn(`[dev-api-server] Failed to load plugin ${file}:`, e.message);
+            }
+        }
+    }
+    console.log(`[dev-api-server] ${registered} API routes registered`);
+    return toNodeListener(app);
+}
+/**
+ * Vite plugin that serves H3 API routes from server/routes/api/ during dev.
+ *
+ * This replaces the disabled Nitro Vite plugin for dev-mode API route serving.
+ * It scans the file-based routes, imports them, and mounts them on an H3 app
+ * that handles /api/* requests before React Router's SSR handler.
+ */
+export function devApiServer() {
+    return {
+        name: "agent-native-dev-api-server",
+        apply: "serve",
+        configureServer(server) {
+            const cwd = server.config.root || process.cwd();
+            const apiDir = path.join(cwd, "server/routes/api");
+            const serverDir = path.join(cwd, "server");
+            // Skip if no API routes directory exists
+            if (!fs.existsSync(apiDir))
+                return;
+            // Lazily initialize the H3 listener on first /api/ request.
+            // This avoids blocking server startup and ensures ssrLoadModule is ready.
+            let listenerPromise = null;
+            // Watch server/ directory for changes and invalidate the listener
+            // so it rebuilds on the next API request (no full restart needed).
+            if (fs.existsSync(serverDir)) {
+                const watcher = fs.watch(serverDir, { recursive: true }, (_, filename) => {
+                    if (filename && filename.endsWith(".ts")) {
+                        listenerPromise = null;
+                        console.log(`[dev-api-server] Server file changed: ${filename} — will reload on next request`);
+                    }
+                });
+                server.httpServer?.on("close", () => watcher.close());
+            }
+            // Add middleware DIRECTLY (not via return) so it runs BEFORE
+            // Vite's internal middleware and React Router's SSR handler.
+            server.middlewares.use((req, res, next) => {
+                if (!req.url?.startsWith("/api/")) {
+                    return next();
+                }
+                if (!listenerPromise) {
+                    listenerPromise = buildApiListener(server, cwd);
+                }
+                listenerPromise
+                    .then((listener) => listener(req, res))
+                    .catch((err) => {
+                    console.error("[dev-api-server] Error handling request:", err);
+                    res.statusCode = 500;
+                    res.end(JSON.stringify({ error: "Internal server error" }));
+                });
+            });
+        },
+    };
+}
+//# sourceMappingURL=dev-api-server.js.map

package/dist/vite/dev-api-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-api-server.js","sourceRoot":"","sources":["../../src/vite/dev-api-server.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,IAAI,CAAC;AAG7D;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,OAAe;IAIrC,sBAAsB;IACtB,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAEhD,+EAA+E;IAC/E,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,MAAM,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/B,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC1E,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhD,IAAI,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAE5C,8BAA8B;IAC9B,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IAEtD,yBAAyB;IACzB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAE9C,uBAAuB;IACvB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,GAAG,GAAG,GAAG,SAAS,CAAC;IAE5D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,GAAW,EAAE,MAAM,GAAG,EAAE;IAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAC5D,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAChE,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gBAAgB,CAC7B,MAAqB,EACrB,GAAW;IAEX,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAEpD,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEhB,wCAAwC;IACxC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM;YAAE,SAAS;QAEtB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;QAEzD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YAC1E,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YAC5B,IAAI,OAAO,OAAO,KAAK,UAAU;gBAAE,SAAS;YAE5C,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAA6B,CAAC,CAAC;YAClE,IAAI,OAAO,YAAY,KAAK,UAAU,EAAE,CAAC;gBACtC,YAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAC/D,UAAU,EAAE,CAAC;YACf,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CACV,yCAAyC,OAAO,GAAG,EAClD,CAAW,CAAC,OAAO,CACrB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,EAAE;aACnB,WAAW,CAAC,UAAU,CAAC;aACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;aAChC,IAAI,EAAE,CAAC;QAEV,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBAC5C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,aAAa,CACpC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAClC,CAAC;gBACF,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC;gBAC3B,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;oBACjC,MAAM,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CACV,0CAA0C,IAAI,GAAG,EAChD,CAAW,CAAC,OAAO,CACrB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,oBAAoB,UAAU,wBAAwB,CAAC,CAAC;IACpE,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,KAAK,EAAE,OAAO;QAEd,eAAe,CAAC,MAAM;YACpB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAE3C,yCAAyC;YACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO;YAEnC,4DAA4D;YAC5D,0EAA0E;YAC1E,IAAI,eAAe,GACjB,IAAI,CAAC;YAEP,kEAAkE;YAClE,mEAAmE;YACnE,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CACtB,SAAS,EACT,EAAE,SAAS,EAAE,IAAI,EAAE,EACnB,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE;oBACd,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBACzC,eAAe,GAAG,IAAI,CAAC;wBACvB,OAAO,CAAC,GAAG,CACT,yCAAyC,QAAQ,gCAAgC,CAClF,CAAC;oBACJ,CAAC;gBACH,CAAC,CACF,CAAC;gBACF,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YACxD,CAAC;YAED,6DAA6D;YAC7D,6DAA6D;YAC7D,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;gBACxC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBAClC,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;gBAED,IAAI,CAAC,eAAe,EAAE,CAAC;oBACrB,eAAe,GAAG,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAClD,CAAC;gBAED,eAAe;qBACZ,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;qBACtC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACb,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAC;oBAC/D,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;oBACrB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;gBAC9D,CAAC,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/vite/index.d.ts

@@ -1,4 +1,3 @@
-export { defineConfig, type ClientConfigOptions } from "./client.js";
-export { defineServerConfig, type ServerConfigOptions } from "./server.js";
-export { expressPlugin, type ExpressPluginOptions } from "./express-plugin.js";
+export { defineConfig, type ClientConfigOptions, type NitroOptions, } from "./client.js";
+export { devApiServer } from "./dev-api-server.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/vite/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/vite/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/vite/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,KAAK,mBAAmB,EACxB,KAAK,YAAY,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/vite/index.js

@@ -1,4 +1,3 @@
-export { defineConfig } from "./client.js";
-export { defineServerConfig } from "./server.js";
-export { expressPlugin } from "./express-plugin.js";
+export { defineConfig, } from "./client.js";
+export { devApiServer } from "./dev-api-server.js";
 //# sourceMappingURL=index.js.map

package/dist/vite/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/vite/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA4B,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAA4B,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,aAAa,EAA6B,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/vite/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,GAGb,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.4.1",
+  "version": "0.4.3",
   "type": "module",
   "description": "Framework for agent-native application development — where AI agents and UI share state via files",
   "license": "MIT",
@@ -19,15 +19,23 @@
     },
     "./vite": "./dist/vite/index.js",
     "./server": "./dist/server/index.js",
+    "./db": "./dist/db/index.js",
     "./client": "./dist/client/index.js",
     "./shared": "./dist/shared/index.js",
     "./scripts": "./dist/scripts/index.js",
+    "./application-state": "./dist/application-state/index.js",
+    "./settings": "./dist/settings/index.js",
+    "./oauth-tokens": "./dist/oauth-tokens/index.js",
     "./adapters/sync": "./dist/adapters/sync/index.js",
+    "./adapters/drizzle": "./dist/adapters/drizzle/index.js",
     "./adapters/firestore": "./dist/adapters/firestore/index.js",
     "./adapters/supabase": "./dist/adapters/supabase/index.js",
-    "./adapters/neon": "./dist/adapters/neon/index.js",
+    "./adapters/convex": "./dist/adapters/convex/index.js",
     "./adapters/cli": "./dist/adapters/cli/index.js",
+    "./router": "./dist/router/index.js",
     "./a2a": "./dist/a2a/index.js",
+    "./terminal": "./dist/client/terminal/index.js",
+    "./terminal/server": "./dist/terminal/index.js",
     "./tailwind": "./dist/tailwind.preset.js",
     "./tsconfig.base.json": "./tsconfig.base.json"
   },
@@ -46,29 +54,55 @@
     "release": "npm version patch && npm publish --access public"
   },
   "dependencies": {
+    "@anthropic-ai/sdk": "^0.80.0",
+    "@libsql/client": "^0.15.0",
+    "@react-router/dev": "^7.13.1",
+    "@react-router/fs-routes": "^7.13.1",
+    "@tailwindcss/typography": "^0.5.19",
+    "better-sqlite3": "^12.8.0",
     "chokidar": "^4.0.0",
     "clsx": "^2.1.1",
     "dotenv": "^17.2.1",
+    "drizzle-orm": "^0.44.0",
+    "h3": "^1.14.0",
+    "isbot": "^5",
     "minimatch": "^10.0.0",
+    "nitro": "^3.0.0",
+    "p-limit": "^7.3.0",
+    "react-markdown": "^10.1.0",
+    "react-router": "^7.13.1",
+    "remark-gfm": "^4.0.1",
     "tailwind-merge": "^2.6.0"
   },
   "peerDependencies": {
+    "@assistant-ui/react": ">=0.12",
+    "@assistant-ui/react-markdown": ">=0.12",
     "@supabase/supabase-js": ">=2",
-    "@neondatabase/serverless": ">=0.9",
     "@tanstack/react-query": ">=5",
     "@vitejs/plugin-react-swc": ">=4",
+    "@xterm/addon-fit": ">=0.10",
+    "@xterm/addon-web-links": ">=0.11",
+    "@xterm/xterm": ">=5",
     "autoprefixer": ">=10",
-    "cors": ">=2",
-    "express": ">=5",
+    "convex": ">=1",
+    "node-pty": ">=1",
     "postcss": ">=8",
     "react": ">=18",
     "react-dom": ">=18",
+    "react-router": ">=7",
     "tailwindcss": ">=3",
     "tailwindcss-animate": ">=1",
     "typescript": ">=5",
-    "vite": ">=7"
+    "vite": ">=7",
+    "ws": ">=8"
   },
   "peerDependenciesMeta": {
+    "@assistant-ui/react": {
+      "optional": true
+    },
+    "@assistant-ui/react-markdown": {
+      "optional": true
+    },
     "@tanstack/react-query": {
       "optional": true
     },
@@ -84,13 +118,10 @@
     "postcss": {
       "optional": true
     },
-    "cors": {
-      "optional": true
-    },
-    "express": {
+    "@vitejs/plugin-react-swc": {
       "optional": true
     },
-    "@vitejs/plugin-react-swc": {
+    "react-router": {
       "optional": true
     },
     "vite": {
@@ -99,29 +130,53 @@
     "@supabase/supabase-js": {
       "optional": true
     },
-    "@neondatabase/serverless": {
+    "convex": {
+      "optional": true
+    },
+    "@xterm/xterm": {
+      "optional": true
+    },
+    "@xterm/addon-fit": {
+      "optional": true
+    },
+    "@xterm/addon-web-links": {
+      "optional": true
+    },
+    "node-pty": {
+      "optional": true
+    },
+    "ws": {
       "optional": true
     }
   },
   "devDependencies": {
+    "@assistant-ui/react": "^0.12.19",
+    "@assistant-ui/react-markdown": "^0.12.6",
+    "@react-router/dev": "^7.13.1",
+    "@react-router/fs-routes": "^7.13.1",
+    "@supabase/supabase-js": "^2.49.0",
     "@tanstack/react-query": "^5.84.2",
-    "@types/cors": "^2.8.19",
-    "@types/express": "^5.0.3",
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/express": "^5.0.6",
     "@types/node": "^24.2.1",
     "@types/react": "^18.3.23",
+    "@types/ws": "^8.18.1",
     "@vitejs/plugin-react-swc": "^4.0.0",
+    "@xterm/addon-fit": "^0.10.0",
+    "@xterm/addon-web-links": "^0.11.0",
+    "@xterm/xterm": "^5.5.0",
     "autoprefixer": "^10.4.21",
-    "cors": "^2.8.5",
-    "express": "^5.1.0",
-    "@neondatabase/serverless": "^1.0.0",
-    "@supabase/supabase-js": "^2.49.0",
+    "express": "^5.2.1",
     "firebase-admin": "^13.0.0",
+    "node-pty": "^1.1.0",
     "postcss": "^8.5.6",
     "react": "^18.3.1",
+    "react-router": "^7.13.1",
     "tailwindcss": "^3.4.17",
     "tailwindcss-animate": "^1.0.7",
     "typescript": "^5.9.2",
     "vite": "^8.0.0",
-    "vitest": "^3.2.4"
+    "vitest": "^3.2.4",
+    "ws": "^8.18.0"
   }
 }

package/src/templates/default/.agents/skills/create-skill/SKILL.md

@@ -135,7 +135,7 @@ description: >-
 ## Naming Conventions
 
 - Hyphen-case only: `[a-z0-9-]`, max 64 characters
-- Pattern skills: descriptive names (`files-as-database`, `delegate-to-agent`)
+- Pattern skills: descriptive names (`storing-data`, `delegate-to-agent`)
 - Workflow/generator skills: verb-noun (`create-script`, `capture-learnings`)
 
 ## Tips

package/src/templates/default/.agents/skills/delegate-to-agent/SKILL.md

@@ -14,7 +14,7 @@ The UI and server never call an LLM directly. All AI work is delegated to the ag
 
 ## Why
 
-The agent is the single AI interface. It has context about the full project, can read/write any file, and can run scripts. Inline LLM calls bypass this — they create a shadow AI that doesn't know what the agent knows and can't coordinate with it.
+The agent is the single AI interface. It has context about the full project, can read/write the database, and can run scripts. Inline LLM calls bypass this — they create a shadow AI that doesn't know what the agent knows and can't coordinate with it.
 
 ## How
 
@@ -86,5 +86,5 @@ Scripts may call external APIs (image generation, search, etc.) — but the AI r
 
 - **scripts** — The agent invokes scripts via `pnpm script <name>` to perform complex operations
 - **self-modifying-code** — The agent operates through the chat bridge to make code changes
-- **files-as-database** — The agent writes results to data files after processing requests
-- **sse-file-watcher** — The UI updates automatically when the agent writes files
+- **storing-data** — The agent writes results to the database after processing requests
+- **real-time-sync** — The UI updates automatically when the agent writes to the database

package/src/templates/default/.agents/skills/files-as-database/SKILL.md

@@ -1,91 +1,110 @@
 ---
-name: files-as-database
+name: storing-data
 description: >-
-  How to store and manage application state as JSON/markdown files in data/.
-  Use when adding data models, creating file-based state, deciding where to
-  store data, or reading/writing application data files.
+  How and where to store application data. Use when adding new data models,
+  deciding between settings vs Drizzle tables, reading/writing app config,
+  or working with application state.
 ---
 
-# Files as Database
+# Storing Data
 
-## Rule
+## Where Data Goes
 
-All application state must be stored as files. There is no traditional database in an agent-native app.
+All data lives in one SQLite database (`data/app.db`). In production, set `DATABASE_URL` to point to Turso, Neon, Supabase, or D1 — same code, no changes needed.
 
-## Why
+There are three storage layers, each for a different kind of data:
 
-Files are the shared interface between the AI agent and the UI. The agent reads and writes files directly on the filesystem. The UI reads files via API routes. SSE streams file changes back to the UI in real-time. This only works if files are the single source of truth.
+### 1. Settings — app configuration
 
-## How
+Key-value store for persistent config that the user or agent can change. Theme, preferences, integration API keys, availability schedules.
 
-- Store data as JSON or markdown files in `data/` (or a project-specific subdirectory).
-- API routes in `server/index.ts` read files with `fs.readFile` and return them.
-- The agent modifies files directly — no API calls needed from the agent side.
-- `createFileWatcher("./data")` watches for changes and streams them via SSE.
-- `useFileWatcher()` on the client invalidates React Query caches when files change.
+```ts
+import { getSetting, putSetting } from "@agent-native/core/settings";
+
+// Read (returns null if not set)
+const prefs = await getSetting("user-preferences");
+
+// Write (creates or replaces)
+await putSetting("user-preferences", { theme: "dark", density: "comfortable" });
+```
+
+From scripts:
+```ts
+import { readSetting, writeSetting } from "@agent-native/core/settings";
+const prefs = await readSetting("user-preferences");
+```
 
-## Don't
+SSE: writes automatically notify the UI via `{ source: "settings", type: "change", key }`.
 
-- Don't add a database (SQLite, Postgres, MongoDB, etc.)
-- Don't store app state in localStorage, sessionStorage, or cookies
-- Don't keep state only in memory (server variables, global stores)
-- Don't use Redis or any external state store
-- Don't interpolate user input directly into file paths (see Security below)
+### 2. Application State — ephemeral UI state
 
-## Example
+For state the agent and UI share in real-time: what the user is looking at, compose drafts, navigation commands. Scoped by session — cleared between sessions.
 
 ```ts
-import fs from "fs";
-
-// Writing state (agent or script)
-fs.writeFileSync(
-  "data/projects/my-project.json",
-  JSON.stringify(project, null, 2),
-);
-
-// Reading state (server route) — note the path sanitization
-app.get("/api/projects/:id", (req, res) => {
-  const id = req.params.id.replace(/[^a-zA-Z0-9_-]/g, "");
-  const data = fs.readFileSync(`data/projects/${id}.json`, "utf-8");
-  res.json(JSON.parse(data));
-});
+import { readAppState, writeAppState, deleteAppState, listAppState } from "@agent-native/core/application-state";
+
+// Write state (UI updates instantly via SSE)
+await writeAppState("navigate", { view: "inbox", threadId: "t-123" });
+
+// Read state
+const nav = await readAppState("navigation");
+
+// List by prefix (e.g., all compose drafts)
+const drafts = await listAppState("compose-");
+
+// Delete (one-shot commands: UI reads, then agent or UI deletes)
+await deleteAppState("navigate");
 ```
 
-## Creating a New Data Model
+SSE: writes automatically notify the UI via `{ source: "app-state", type: "change", key }`.
+
+### 3. Drizzle Tables — structured domain data
+
+For data with schemas, relationships, and queries: forms, bookings, emails, compositions. Define tables in `server/db/schema.ts` using Drizzle ORM.
+
+```ts
+import { sqliteTable, text, integer } from "drizzle-orm/sqlite-core";
+
+export const bookings = sqliteTable("bookings", {
+  id: text("id").primaryKey(),
+  name: text("name").notNull(),
+  email: text("email").notNull(),
+  startTime: integer("start_time").notNull(),
+  endTime: integer("end_time").notNull(),
+});
+```
 
-When adding a new data entity (e.g., projects, tasks, settings):
+Query via `getDb()` singleton from `server/db/index.ts`.
 
-1. **Define the type** in `shared/` so both client and server import it
-2. **Create the data directory** — `data/<model>/<id>.json` (one file per item) or `data/<model>.json` (single collection)
-3. **Add API routes** in `server/` that read/write the files (sanitize IDs from params)
-4. **Wire SSE invalidation** — Add the query key to `useFileWatcher()` so the UI refreshes on changes
+### 4. OAuth Tokens — credentials
 
-## Judgment Criteria
+For OAuth tokens acquired at runtime (Google, etc.). Never store these in settings — use the dedicated encrypted store.
 
-| Question                             | Single file       | Directory of files           |
-| ------------------------------------ | ----------------- | ---------------------------- |
-| Are items independently addressable? | No — use one file | Yes — one file per item      |
-| Will there be >50 items?             | Probably fine     | Definitely split             |
-| Do items need individual URLs?       | No                | Yes                          |
-| Do items change independently?       | No                | Yes — avoids write conflicts |
+```ts
+import { saveOAuthTokens, getOAuthTokens, listOAuthAccounts } from "@agent-native/core/oauth-tokens";
 
-## Scaling Guidance
+await saveOAuthTokens("google", "user@gmail.com", { access_token: "...", refresh_token: "..." });
+const tokens = await getOAuthTokens("google", "user@gmail.com");
+const accounts = await listOAuthAccounts("google");
+```
 
-| File Count | Recommendation                                                        |
-| ---------- | --------------------------------------------------------------------- |
-| Under 50   | Read-all with `readdirSync` + `readFileSync` is fine                  |
-| 50–200     | Add an index file (`data/<model>/_index.json`) with IDs and summaries |
-| 200+       | Partition into subdirectories                                         |
+## Which Layer to Use
 
-For list endpoints serving many files, use `fs.promises.readFile` instead of `readFileSync` to avoid blocking the event loop.
+| Data | Layer | Why |
+|------|-------|-----|
+| User preferences, theme, config | Settings | Persistent KV, SSE notifications, simple read/write |
+| What the user sees on screen | Application State | Ephemeral, real-time sync, agent ↔ UI bridge |
+| Compose drafts, wizard steps | Application State | Temporary, deleted when done |
+| Domain records (forms, bookings) | Drizzle table | Needs schema, queries, relationships |
+| OAuth refresh tokens | OAuth Tokens | Secure, per-provider, per-account |
 
-## Security
+## Environment Variables
 
-- **Path sanitization** — Always sanitize IDs from request params before constructing file paths. Use `id.replace(/[^a-zA-Z0-9_-]/g, "")` or the core utility `isValidPath()`. Without this, `../../.env` as an ID reads your environment file.
-- **Validate before writing** — Check data shape before writing files, especially for user-submitted data. A malformed write can break all subsequent reads.
+Infrastructure config stays in `.env` — these differ per deployment:
 
-## Related Skills
+- `DATABASE_URL` — database connection (default: `file:./data/app.db`)
+- `DATABASE_AUTH_TOKEN` — for remote databases
+- `GOOGLE_CLIENT_ID`, `GOOGLE_CLIENT_SECRET` — OAuth app credentials
+- `ACCESS_TOKEN` — production auth token
 
-- **sse-file-watcher** — Set up real-time sync so the UI updates when data files change
-- **scripts** — Create scripts that read/write data files for complex operations
-- **self-modifying-code** — The agent writes data files as Tier 1 (auto-apply) modifications
+Everything else (user settings, tokens, app state) goes in SQL.

package/src/templates/default/.agents/skills/frontend-design/SKILL.md

@@ -61,9 +61,9 @@ In the agent-native framework context:
 - For complex visual effects, use a `<style>` tag in the component or a dedicated CSS file
 - Fonts can be loaded from Google Fonts via `@import` in a CSS file or `<link>` in `index.html`
 - Animation libraries: prefer CSS transitions and keyframes; use Framer Motion for complex sequences
-- All new UI components should be placed in `client/components/`
+- All new UI components should be placed in `app/components/`
 
 ## Related Skills
 
 - **self-modifying-code** — The agent can edit source code to apply design changes
-- **files-as-database** — Design configuration can be stored as JSON in `data/` for agent-editable theming
+- **storing-data** — Design configuration can be stored in the settings table for agent-editable theming