@agent-native/core 0.4.4 → 0.5.0-dev.b51eaae

package/dist/server/google-oauth.js

@@ -0,0 +1,187 @@
+/**
+ * Shared Google OAuth utilities for all templates.
+ *
+ * Handles platform detection (desktop/mobile), state encoding,
+ * session token creation, and deep-link responses — the logic
+ * that was previously copy-pasted across every template's
+ * google-auth.ts handler.
+ */
+import crypto from "node:crypto";
+import { getHeader, setCookie, sendRedirect, setResponseHeader, } from "h3";
+import { addSession, getSession } from "./auth.js";
+// ─── Platform Detection ─────────────────────────────────────────────────────
+/** Detect requests from the Electron desktop app webview. */
+export function isElectron(event) {
+    return /Electron/i.test(getHeader(event, "user-agent") || "");
+}
+/** Detect requests from a mobile browser (iOS/Android). */
+export function isMobile(event) {
+    return /iPhone|iPad|iPod|Android/i.test(getHeader(event, "user-agent") || "");
+}
+/** Get the origin from forwarded headers or Host. */
+export function getOrigin(event) {
+    const host = getHeader(event, "x-forwarded-host") || getHeader(event, "host");
+    const proto = getHeader(event, "x-forwarded-proto") || "http";
+    return `${proto}://${host}`;
+}
+/**
+ * Derive a signing key for HMAC verification of OAuth state.
+ * Uses GOOGLE_CLIENT_SECRET as the key material — it's always available
+ * when OAuth is configured and is never exposed to the browser.
+ */
+function getStateSigningKey() {
+    return process.env.GOOGLE_CLIENT_SECRET || "oauth-state-key";
+}
+/**
+ * Encode OAuth state into a signed base64url string.
+ * The state is HMAC-signed so the callback can verify it wasn't forged,
+ * preventing CSRF attacks on the OAuth flow.
+ */
+export function encodeOAuthState(redirectUri, owner, desktop, addAccount) {
+    const nonce = crypto.randomBytes(8).toString("hex");
+    const payload = {
+        n: nonce,
+        r: redirectUri,
+    };
+    if (owner)
+        payload.o = owner;
+    if (desktop)
+        payload.d = true;
+    if (addAccount)
+        payload.a = true;
+    const data = Buffer.from(JSON.stringify(payload)).toString("base64url");
+    const sig = crypto
+        .createHmac("sha256", getStateSigningKey())
+        .update(data)
+        .digest("base64url");
+    return `${data}.${sig}`;
+}
+/**
+ * Decode and verify OAuth state from the callback's state query parameter.
+ * Rejects forged or tampered state by checking the HMAC signature.
+ * Falls back to the provided URI if decoding or verification fails.
+ */
+export function decodeOAuthState(stateParam, fallbackUri) {
+    if (stateParam) {
+        try {
+            const dotIdx = stateParam.lastIndexOf(".");
+            if (dotIdx === -1)
+                return { redirectUri: fallbackUri };
+            const data = stateParam.slice(0, dotIdx);
+            const sig = stateParam.slice(dotIdx + 1);
+            const expected = crypto
+                .createHmac("sha256", getStateSigningKey())
+                .update(data)
+                .digest("base64url");
+            if (sig.length !== expected.length ||
+                !crypto.timingSafeEqual(Buffer.from(sig), Buffer.from(expected))) {
+                return { redirectUri: fallbackUri };
+            }
+            const parsed = JSON.parse(Buffer.from(data, "base64url").toString());
+            return {
+                redirectUri: parsed.r || fallbackUri,
+                owner: parsed.o || undefined,
+                desktop: !!parsed.d,
+                addAccount: !!parsed.a,
+            };
+        }
+        catch { }
+    }
+    return { redirectUri: fallbackUri };
+}
+/**
+ * Determine the token owner from the current session and OAuth state.
+ * Call this BEFORE exchangeCode to get the owner parameter.
+ */
+export async function resolveOAuthOwner(event, stateOwner) {
+    const existingSession = await getSession(event);
+    const isDevSession = existingSession?.email === "local@localhost";
+    const hasProductionSession = !!(existingSession?.email && !isDevSession);
+    const owner = isDevSession
+        ? "local@localhost"
+        : hasProductionSession
+            ? existingSession.email
+            : stateOwner || undefined;
+    return { owner, isDevSession, hasProductionSession };
+}
+/**
+ * Create a session token after a successful OAuth exchange.
+ *
+ * Desktop and mobile apps have separate cookie jars from the system
+ * browser, so they always get a fresh session token (even if the browser
+ * already has one). The token is then passed via deep link so the native
+ * app can inject it.
+ */
+export async function createOAuthSession(event, email, opts) {
+    const mobile = isMobile(event);
+    const needsDeepLink = opts.desktop || mobile;
+    let sessionToken;
+    if (!opts.hasProductionSession || needsDeepLink) {
+        sessionToken = crypto.randomBytes(32).toString("hex");
+        await addSession(sessionToken, email);
+        setCookie(event, "an_session", sessionToken, {
+            httpOnly: true,
+            secure: process.env.NODE_ENV === "production",
+            sameSite: "lax",
+            path: "/",
+            maxAge: 60 * 60 * 24 * 30, // 30 days
+        });
+    }
+    return { sessionToken };
+}
+// ─── Callback Responses ──────────────────────────────────────────────────────
+/**
+ * Return the appropriate response after a successful OAuth callback.
+ *
+ * Handles mobile deep links, desktop deep links, add-account close-tab
+ * pages, and plain web redirects — so templates don't have to.
+ */
+export function oauthCallbackResponse(event, email, opts) {
+    const mobile = isMobile(event);
+    // Mobile: deep link back to native app
+    if (mobile) {
+        const deepLink = opts.sessionToken
+            ? `agentnative://oauth-complete?token=${opts.sessionToken}`
+            : `agentnative://oauth-complete`;
+        setResponseHeader(event, "Content-Type", "text/html; charset=utf-8");
+        return `<!DOCTYPE html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width"><title>Connected</title></head><body style="background:#111;color:#aaa;font-family:system-ui;display:flex;align-items:center;justify-content:center;height:100vh;margin:0"><p>Connected! Returning to app…</p><script>window.location.href=${JSON.stringify(deepLink)};setTimeout(function(){window.location.href="/"},1500)</script></body></html>`;
+    }
+    // Desktop: deep link back to Electron app
+    if (opts.desktop) {
+        return desktopSuccessPage(event, email, opts.sessionToken);
+    }
+    // Add-account web flow: close-tab page
+    if (opts.addAccount) {
+        const safeEmail = JSON.stringify(email);
+        setResponseHeader(event, "Content-Type", "text/html; charset=utf-8");
+        return `<!DOCTYPE html><html><body><script>
+        window.close();
+        var p = document.createElement('p');
+        p.style.cssText = 'font-family:system-ui;text-align:center;margin-top:40vh';
+        p.textContent = 'Connected ' + ${safeEmail} + '! You can close this tab.';
+        document.body.appendChild(p);
+      </script></body></html>`;
+    }
+    // Web: redirect to app home
+    return sendRedirect(event, "/");
+}
+/** HTML error page for OAuth failures. */
+export function oauthErrorPage(message) {
+    return `<!DOCTYPE html><html><body>
+    <div style="font-family:system-ui;max-width:420px;margin:30vh auto;text-align:center">
+      <p style="font-size:15px;color:#e55">${message}</p>
+      <p style="margin-top:16px;font-size:13px;color:#888"><a href="/" style="color:#888">Back to login</a></p>
+    </div>
+  </body></html>`;
+}
+// ─── Internal ────────────────────────────────────────────────────────────────
+function desktopSuccessPage(event, email, sessionToken) {
+    const msg = email ? `Connected ${email}!` : "Connected!";
+    setResponseHeader(event, "Content-Type", "text/html; charset=utf-8");
+    if (sessionToken) {
+        const deepLink = `agentnative://oauth-complete?token=${sessionToken}`;
+        return `<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connected</title></head><body style="background:#111;color:#ccc;font-family:system-ui;display:flex;align-items:center;justify-content:center;height:100vh;margin:0;flex-direction:column;gap:12px"><p style="font-size:16px">${msg}</p><a href=${JSON.stringify(deepLink)} style="display:inline-block;margin-top:8px;padding:10px 24px;background:#fff;color:#000;border-radius:8px;text-decoration:none;font-size:14px;font-weight:500">Open Agent Native</a><p style="font-size:12px;color:#666;margin-top:4px">If the app didn\u2019t open automatically, click the button above.</p><script>window.location.href=${JSON.stringify(deepLink)}</script></body></html>`;
+    }
+    return `<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connected</title></head><body style="background:#111;color:#ccc;font-family:system-ui;display:flex;align-items:center;justify-content:center;height:100vh;margin:0;flex-direction:column;gap:8px"><p style="font-size:16px">${msg}</p><p style="font-size:13px;color:#888">You can close this tab and return to Agent Native.</p></body></html>`;
+}
+//# sourceMappingURL=google-oauth.js.map

package/dist/server/google-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-oauth.js","sourceRoot":"","sources":["../../src/server/google-oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EACL,SAAS,EACT,SAAS,EACT,YAAY,EACZ,iBAAiB,GAElB,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEnD,+EAA+E;AAE/E,6DAA6D;AAC7D,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,2BAA2B,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,kBAAkB,CAAC,IAAI,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,mBAAmB,CAAC,IAAI,MAAM,CAAC;IAC9D,OAAO,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC;AAC9B,CAAC;AAWD;;;;GAIG;AACH,SAAS,kBAAkB;IACzB,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,iBAAiB,CAAC;AAC/D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAAmB,EACnB,KAAc,EACd,OAAiB,EACjB,UAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,OAAO,GAAqC;QAChD,CAAC,EAAE,KAAK;QACR,CAAC,EAAE,WAAW;KACf,CAAC;IACF,IAAI,KAAK;QAAE,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC;IAC7B,IAAI,OAAO;QAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAC9B,IAAI,UAAU;QAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,MAAM;SACf,UAAU,CAAC,QAAQ,EAAE,kBAAkB,EAAE,CAAC;SAC1C,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,WAAW,CAAC,CAAC;IACvB,OAAO,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAA8B,EAC9B,WAAmB;IAEnB,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,MAAM,KAAK,CAAC,CAAC;gBAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;YAEvD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACzC,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,MAAM;iBACpB,UAAU,CAAC,QAAQ,EAAE,kBAAkB,EAAE,CAAC;iBAC1C,MAAM,CAAC,IAAI,CAAC;iBACZ,MAAM,CAAC,WAAW,CAAC,CAAC;YAEvB,IACE,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;gBAC9B,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAChE,CAAC;gBACD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;YACtC,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACrE,OAAO;gBACL,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,WAAW;gBACpC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,SAAS;gBAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;gBACnB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;aACvB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;AACtC,CAAC;AAUD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAc,EACd,UAAmB;IAEnB,MAAM,eAAe,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,eAAe,EAAE,KAAK,KAAK,iBAAiB,CAAC;IAClE,MAAM,oBAAoB,GAAG,CAAC,CAAC,CAAC,eAAe,EAAE,KAAK,IAAI,CAAC,YAAY,CAAC,CAAC;IAEzE,MAAM,KAAK,GAAG,YAAY;QACxB,CAAC,CAAC,iBAAiB;QACnB,CAAC,CAAC,oBAAoB;YACpB,CAAC,CAAC,eAAgB,CAAC,KAAK;YACxB,CAAC,CAAC,UAAU,IAAI,SAAS,CAAC;IAE9B,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC;AACvD,CAAC;AAMD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAc,EACd,KAAa,EACb,IAGC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC;IAE7C,IAAI,YAAgC,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,aAAa,EAAE,CAAC;QAChD,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACtC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE;YAC3C,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;YAC7C,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,UAAU;SACtC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,CAAC;AAC1B,CAAC;AAED,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAc,EACd,KAAa,EACb,IAIC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE/B,uCAAuC;IACvC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY;YAChC,CAAC,CAAC,sCAAsC,IAAI,CAAC,YAAY,EAAE;YAC3D,CAAC,CAAC,8BAA8B,CAAC;QACnC,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,0BAA0B,CAAC,CAAC;QACrE,OAAO,kVAAkV,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,+EAA+E,CAAC;IACnc,CAAC;IAED,0CAA0C;IAC1C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7D,CAAC;IAED,uCAAuC;IACvC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACxC,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,0BAA0B,CAAC,CAAC;QACrE,OAAO;;;;yCAI8B,SAAS;;8BAEpB,CAAC;IAC7B,CAAC;IAED,4BAA4B;IAC5B,OAAO,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAClC,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO;;6CAEoC,OAAO;;;iBAGnC,CAAC;AAClB,CAAC;AAED,gFAAgF;AAEhF,SAAS,kBAAkB,CACzB,KAAc,EACd,KAAc,EACd,YAAqB;IAErB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,aAAa,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;IACzD,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,0BAA0B,CAAC,CAAC;IACrE,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,QAAQ,GAAG,sCAAsC,YAAY,EAAE,CAAC;QACtE,OAAO,wRAAwR,GAAG,eAAe,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,+UAA+U,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAC5sB,CAAC;IACD,OAAO,uRAAuR,GAAG,+GAA+G,CAAC;AACnZ,CAAC"}

package/dist/server/index.d.ts

@@ -3,14 +3,22 @@ export { createFileWatcher, createSSEHandler, type FileWatcherOptions, type SSEH
 export { mountAuthMiddleware, autoMountAuth, getSession, addSession, removeSession, getSessionEmail, type AuthSession, type AuthOptions, } from "./auth.js";
 export { requireEnvKey, type MissingKeyResponse } from "./missing-key.js";
 export { verifyCaptcha, type CaptchaVerifyResult } from "./captcha.js";
-export { createProductionAgentHandler, type ScriptEntry, type ProductionAgentOptions, type ScriptTool, type AgentMessage, type AgentChatRequest, type AgentChatEvent, } from "../agent/index.js";
+export { createProductionAgentHandler, type ActionEntry, type ScriptEntry, type ProductionAgentOptions, type ActionTool, type ScriptTool, type AgentMessage, type AgentChatRequest, type AgentChatEvent, type AgentChatReference, type MentionProvider, type MentionProviderItem, } from "../agent/index.js";
 export { createDevScriptRegistry } from "../scripts/dev/index.js";
-export { getDefaultSSEEmitters, setDefaultSyncResult, createDefaultSSEHandler, defaultSyncStatusHandler, } from "./default-watcher.js";
+export { getDefaultSSEEmitters, setDefaultSyncResult, createDefaultSSEHandler, createDefaultPollHandler, defaultSyncStatusHandler, } from "./default-watcher.js";
+export { createPollHandler, recordChange, getVersion, getChangesSince, } from "./poll.js";
 export { createAuthPlugin, defaultAuthPlugin } from "./auth-plugin.js";
 export { createGoogleAuthPlugin, type GoogleAuthPluginOptions, } from "./google-auth-plugin.js";
 export { createAgentChatPlugin, defaultAgentChatPlugin, type AgentChatPluginOptions, } from "./agent-chat-plugin.js";
+export { createThread, getThread, listThreads, updateThreadData, deleteThread, type ChatThread, type ChatThreadSummary, } from "../chat-threads/store.js";
 export { createFileSyncPlugin, defaultFileSyncPlugin, } from "./file-sync-plugin.js";
+export { createResourcesPlugin, defaultResourcesPlugin, } from "./resources-plugin.js";
+export { createCoreRoutesPlugin, defaultCoreRoutesPlugin, FRAMEWORK_ROUTE_PREFIX, type CoreRoutesPluginOptions, } from "./core-routes-plugin.js";
 export { createTerminalPlugin, defaultTerminalPlugin, type TerminalPluginOptions, } from "../terminal/terminal-plugin.js";
+export { isOAuthConnected, getOAuthAccounts } from "./oauth-helpers.js";
+export { wrapWithAnalytics } from "./analytics.js";
+export { autoDiscoverActions, autoDiscoverScripts, } from "./action-discovery.js";
+export { isElectron, isMobile, getOrigin, encodeOAuthState, decodeOAuthState, resolveOAuthOwner, createOAuthSession, oauthCallbackResponse, oauthErrorPage, type OAuthStatePayload, type OAuthOwnerResult, type OAuthSessionResult, } from "./google-oauth.js";
 type NitroPluginDef = (nitroApp: any) => void | Promise<void>;
 export declare function defineNitroPlugin(def: NitroPluginDef): NitroPluginDef;
 //# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,aAAa,EACb,KAAK,mBAAmB,EACxB,KAAK,YAAY,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,GACvB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,UAAU,EACV,UAAU,EACV,aAAa,EACb,eAAe,EACf,KAAK,WAAW,EAChB,KAAK,WAAW,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,aAAa,EAAE,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EACL,4BAA4B,EAC5B,KAAK,WAAW,EAChB,KAAK,sBAAsB,EAC3B,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,cAAc,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAElE,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EACL,sBAAsB,EACtB,KAAK,uBAAuB,GAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,KAAK,qBAAqB,GAC3B,MAAM,gCAAgC,CAAC;AAKxC,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAC9D,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,cAAc,GAAG,cAAc,CAErE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,aAAa,EACb,KAAK,mBAAmB,EACxB,KAAK,YAAY,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,GACvB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,UAAU,EACV,UAAU,EACV,aAAa,EACb,eAAe,EACf,KAAK,WAAW,EAChB,KAAK,WAAW,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,aAAa,EAAE,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EACL,4BAA4B,EAC5B,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,sBAAsB,EAC3B,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,mBAAmB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAElE,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,eAAe,GAChB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EACL,sBAAsB,EACtB,KAAK,uBAAuB,GAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,YAAY,EACZ,SAAS,EACT,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,iBAAiB,GACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,KAAK,uBAAuB,GAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,KAAK,qBAAqB,GAC3B,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,UAAU,EACV,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,EACd,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,GACxB,MAAM,mBAAmB,CAAC;AAK3B,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAC9D,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,cAAc,GAAG,cAAc,CAErE"}

package/dist/server/index.js

@@ -5,12 +5,20 @@ export { requireEnvKey } from "./missing-key.js";
 export { verifyCaptcha } from "./captcha.js";
 export { createProductionAgentHandler, } from "../agent/index.js";
 export { createDevScriptRegistry } from "../scripts/dev/index.js";
-export { getDefaultSSEEmitters, setDefaultSyncResult, createDefaultSSEHandler, defaultSyncStatusHandler, } from "./default-watcher.js";
+export { getDefaultSSEEmitters, setDefaultSyncResult, createDefaultSSEHandler, createDefaultPollHandler, defaultSyncStatusHandler, } from "./default-watcher.js";
+export { createPollHandler, recordChange, getVersion, getChangesSince, } from "./poll.js";
 export { createAuthPlugin, defaultAuthPlugin } from "./auth-plugin.js";
 export { createGoogleAuthPlugin, } from "./google-auth-plugin.js";
 export { createAgentChatPlugin, defaultAgentChatPlugin, } from "./agent-chat-plugin.js";
+export { createThread, getThread, listThreads, updateThreadData, deleteThread, } from "../chat-threads/store.js";
 export { createFileSyncPlugin, defaultFileSyncPlugin, } from "./file-sync-plugin.js";
+export { createResourcesPlugin, defaultResourcesPlugin, } from "./resources-plugin.js";
+export { createCoreRoutesPlugin, defaultCoreRoutesPlugin, FRAMEWORK_ROUTE_PREFIX, } from "./core-routes-plugin.js";
 export { createTerminalPlugin, defaultTerminalPlugin, } from "../terminal/terminal-plugin.js";
+export { isOAuthConnected, getOAuthAccounts } from "./oauth-helpers.js";
+export { wrapWithAnalytics } from "./analytics.js";
+export { autoDiscoverActions, autoDiscoverScripts, } from "./action-discovery.js";
+export { isElectron, isMobile, getOrigin, encodeOAuthState, decodeOAuthState, resolveOAuthOwner, createOAuthSession, oauthCallbackResponse, oauthErrorPage, } from "./google-oauth.js";
 export function defineNitroPlugin(def) {
     return def;
 }

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,aAAa,GAGd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GAGjB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,UAAU,EACV,UAAU,EACV,aAAa,EACb,eAAe,GAGhB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,aAAa,EAA2B,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAA4B,MAAM,cAAc,CAAC;AACvE,OAAO,EACL,4BAA4B,GAO7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAElE,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EACL,sBAAsB,GAEvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GAEtB,MAAM,gCAAgC,CAAC;AAMxC,MAAM,UAAU,iBAAiB,CAAC,GAAmB;IACnD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,aAAa,GAGd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GAGjB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,UAAU,EACV,UAAU,EACV,aAAa,EACb,eAAe,GAGhB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,aAAa,EAA2B,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAA4B,MAAM,cAAc,CAAC;AACvE,OAAO,EACL,4BAA4B,GAY7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAElE,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,eAAe,GAChB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EACL,sBAAsB,GAEvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,YAAY,EACZ,SAAS,EACT,WAAW,EACX,gBAAgB,EAChB,YAAY,GAGb,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,GAEvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GAEtB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,UAAU,EACV,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,GAIf,MAAM,mBAAmB,CAAC;AAM3B,MAAM,UAAU,iBAAiB,CAAC,GAAmB;IACnD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/server/oauth-helpers.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Check if any OAuth tokens exist for a provider.
+ * Handles dev mode correctly — when session email is "local@localhost",
+ * checks ALL tokens regardless of owner.
+ */
+export declare function isOAuthConnected(provider: string, forEmail?: string): Promise<boolean>;
+/**
+ * Get OAuth accounts for a provider.
+ * Handles dev mode correctly — when session email is "local@localhost",
+ * returns ALL accounts regardless of owner.
+ */
+export declare function getOAuthAccounts(provider: string, forEmail?: string): Promise<Array<{
+    accountId: string;
+    tokens: Record<string, unknown>;
+}>>;
+//# sourceMappingURL=oauth-helpers.d.ts.map

package/dist/server/oauth-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-helpers.d.ts","sourceRoot":"","sources":["../../src/server/oauth-helpers.ts"],"names":[],"mappings":"AAMA;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,KAAK,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAAC,CAKxE"}

package/dist/server/oauth-helpers.js

@@ -0,0 +1,25 @@
+import { hasOAuthTokens, listOAuthAccountsByOwner, listOAuthAccounts, } from "../oauth-tokens/index.js";
+/**
+ * Check if any OAuth tokens exist for a provider.
+ * Handles dev mode correctly — when session email is "local@localhost",
+ * checks ALL tokens regardless of owner.
+ */
+export async function isOAuthConnected(provider, forEmail) {
+    if (forEmail && forEmail !== "local@localhost") {
+        const accounts = await listOAuthAccountsByOwner(provider, forEmail);
+        return accounts.length > 0;
+    }
+    return hasOAuthTokens(provider);
+}
+/**
+ * Get OAuth accounts for a provider.
+ * Handles dev mode correctly — when session email is "local@localhost",
+ * returns ALL accounts regardless of owner.
+ */
+export async function getOAuthAccounts(provider, forEmail) {
+    if (forEmail && forEmail !== "local@localhost") {
+        return listOAuthAccountsByOwner(provider, forEmail);
+    }
+    return listOAuthAccounts(provider);
+}
+//# sourceMappingURL=oauth-helpers.js.map

package/dist/server/oauth-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-helpers.js","sourceRoot":"","sources":["../../src/server/oauth-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,iBAAiB,GAClB,MAAM,0BAA0B,CAAC;AAElC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAgB,EAChB,QAAiB;IAEjB,IAAI,QAAQ,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpE,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAgB,EAChB,QAAiB;IAEjB,IAAI,QAAQ,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;QAC/C,OAAO,wBAAwB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC"}

package/dist/server/poll.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Polling-based change notification.
+ *
+ * Replaces SSE with a simple version counter. Each DB mutation (app-state,
+ * settings, resources) increments the version. Clients poll `/_agent-native/poll?since=N`
+ * and receive any events that occurred after version N.
+ *
+ * Works in all deployment environments (serverless, edge, long-lived).
+ */
+export interface ChangeEvent {
+    version: number;
+    source: string;
+    type: string;
+    key?: string;
+    [k: string]: unknown;
+}
+/** Get the current global version counter. */
+export declare function getVersion(): number;
+/** Record a change event. Called by emitter listeners. */
+export declare function recordChange(event: {
+    source: string;
+    type: string;
+    key?: string;
+    [k: string]: unknown;
+}): void;
+/** Get all changes after a given version. */
+export declare function getChangesSince(since: number): {
+    version: number;
+    events: ChangeEvent[];
+};
+/**
+ * Create an H3 handler for the poll endpoint.
+ *
+ * GET /_agent-native/poll?since=N → { version, events[] }
+ */
+export declare function createPollHandler(): import("h3").EventHandler<import("h3").EventHandlerRequest, {
+    version: number;
+    events: ChangeEvent[];
+}>;
+//# sourceMappingURL=poll.d.ts.map

package/dist/server/poll.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"poll.d.ts","sourceRoot":"","sources":["../../src/server/poll.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAQD,8CAA8C;AAC9C,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,0DAA0D;AAC1D,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB,GAAG,IAAI,CAOP;AAED,6CAA6C;AAC7C,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB,CAMA;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB;aAftB,MAAM;YACP,WAAW,EAAE;GAoBtB"}

package/dist/server/poll.js

@@ -0,0 +1,49 @@
+/**
+ * Polling-based change notification.
+ *
+ * Replaces SSE with a simple version counter. Each DB mutation (app-state,
+ * settings, resources) increments the version. Clients poll `/_agent-native/poll?since=N`
+ * and receive any events that occurred after version N.
+ *
+ * Works in all deployment environments (serverless, edge, long-lived).
+ */
+import { defineEventHandler, getQuery } from "h3";
+// In-memory ring buffer of recent changes. Kept small since clients
+// poll frequently (every 2-3s) and only need events since their last poll.
+const MAX_BUFFER = 200;
+let _version = 0;
+const _buffer = [];
+/** Get the current global version counter. */
+export function getVersion() {
+    return _version;
+}
+/** Record a change event. Called by emitter listeners. */
+export function recordChange(event) {
+    _version++;
+    const entry = { ...event, version: _version };
+    _buffer.push(entry);
+    if (_buffer.length > MAX_BUFFER) {
+        _buffer.splice(0, _buffer.length - MAX_BUFFER);
+    }
+}
+/** Get all changes after a given version. */
+export function getChangesSince(since) {
+    if (since >= _version) {
+        return { version: _version, events: [] };
+    }
+    const events = _buffer.filter((e) => e.version > since);
+    return { version: _version, events };
+}
+/**
+ * Create an H3 handler for the poll endpoint.
+ *
+ * GET /_agent-native/poll?since=N → { version, events[] }
+ */
+export function createPollHandler() {
+    return defineEventHandler((event) => {
+        const query = getQuery(event);
+        const since = parseInt(String(query.since ?? "0"), 10) || 0;
+        return getChangesSince(since);
+    });
+}
+//# sourceMappingURL=poll.js.map

package/dist/server/poll.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"poll.js","sourceRoot":"","sources":["../../src/server/poll.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AAUlD,oEAAoE;AACpE,2EAA2E;AAC3E,MAAM,UAAU,GAAG,GAAG,CAAC;AACvB,IAAI,QAAQ,GAAG,CAAC,CAAC;AACjB,MAAM,OAAO,GAAkB,EAAE,CAAC;AAElC,8CAA8C;AAC9C,MAAM,UAAU,UAAU;IACxB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,YAAY,CAAC,KAK5B;IACC,QAAQ,EAAE,CAAC;IACX,MAAM,KAAK,GAAgB,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC3D,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,IAAI,OAAO,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,eAAe,CAAC,KAAa;IAI3C,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC;IACxD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,kBAAkB,CAAC,CAAC,KAAK,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5D,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/resources-plugin.d.ts

@@ -0,0 +1,27 @@
+type NitroPluginDef = (nitroApp: any) => void | Promise<void>;
+/**
+ * Creates a Nitro plugin that mounts all resource CRUD routes.
+ *
+ * Routes:
+ *   GET    /_agent-native/resources          — list resources
+ *   POST   /_agent-native/resources          — create resource
+ *   GET    /_agent-native/resources/tree     — get resource tree
+ *   POST   /_agent-native/resources/upload   — upload file
+ *   GET    /_agent-native/resources/:id      — get resource by ID
+ *   PUT    /_agent-native/resources/:id      — update resource
+ *   DELETE /_agent-native/resources/:id      — delete resource
+ */
+export declare function createResourcesPlugin(): NitroPluginDef;
+/**
+ * Default resources plugin — mount with no configuration needed.
+ *
+ * Usage in templates:
+ * ```ts
+ * // server/plugins/resources.ts
+ * import { defaultResourcesPlugin } from "@agent-native/core/server";
+ * export default defaultResourcesPlugin;
+ * ```
+ */
+export declare const defaultResourcesPlugin: NitroPluginDef;
+export {};
+//# sourceMappingURL=resources-plugin.d.ts.map

package/dist/server/resources-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources-plugin.d.ts","sourceRoot":"","sources":["../../src/server/resources-plugin.ts"],"names":[],"mappings":"AAWA,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE9D;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,IAAI,cAAc,CA0DtD;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,EAAE,cAAwC,CAAC"}

package/dist/server/resources-plugin.js

@@ -0,0 +1,74 @@
+import { defineEventHandler, setResponseStatus, getMethod } from "h3";
+import { handleListResources, handleGetResourceTree, handleGetResource, handleCreateResource, handleUpdateResource, handleDeleteResource, handleUploadResource, } from "../resources/handlers.js";
+/**
+ * Creates a Nitro plugin that mounts all resource CRUD routes.
+ *
+ * Routes:
+ *   GET    /_agent-native/resources          — list resources
+ *   POST   /_agent-native/resources          — create resource
+ *   GET    /_agent-native/resources/tree     — get resource tree
+ *   POST   /_agent-native/resources/upload   — upload file
+ *   GET    /_agent-native/resources/:id      — get resource by ID
+ *   PUT    /_agent-native/resources/:id      — update resource
+ *   DELETE /_agent-native/resources/:id      — delete resource
+ */
+export function createResourcesPlugin() {
+    return async (nitroApp) => {
+        // Mount specific sub-routes BEFORE the catch-all
+        nitroApp.h3App.use("/_agent-native/resources/tree", defineEventHandler(async (event) => {
+            if (getMethod(event) !== "GET") {
+                setResponseStatus(event, 405);
+                return { error: "Method not allowed" };
+            }
+            return handleGetResourceTree(event);
+        }));
+        nitroApp.h3App.use("/_agent-native/resources/upload", defineEventHandler(async (event) => {
+            if (getMethod(event) !== "POST") {
+                setResponseStatus(event, 405);
+                return { error: "Method not allowed" };
+            }
+            return handleUploadResource(event);
+        }));
+        // Catch-all for /_agent-native/resources and /_agent-native/resources/:id
+        nitroApp.h3App.use("/_agent-native/resources", defineEventHandler(async (event) => {
+            const method = getMethod(event);
+            // h3 strips the mount prefix, so event.path is "/" or "/:id"
+            const raw = (event.path || "/").split("?")[0];
+            const subPath = raw.replace(/^\//, "");
+            // No sub-path: /_agent-native/resources — list or create
+            if (!subPath || subPath === "") {
+                if (method === "GET")
+                    return handleListResources(event);
+                if (method === "POST")
+                    return handleCreateResource(event);
+                setResponseStatus(event, 405);
+                return { error: "Method not allowed" };
+            }
+            // Already handled by dedicated routes above
+            if (subPath === "tree" || subPath === "upload")
+                return;
+            // /_agent-native/resources/:id — get, update, delete
+            event.context.params = { ...event.context.params, id: subPath };
+            if (method === "GET")
+                return handleGetResource(event);
+            if (method === "PUT")
+                return handleUpdateResource(event);
+            if (method === "DELETE")
+                return handleDeleteResource(event);
+            setResponseStatus(event, 405);
+            return { error: "Method not allowed" };
+        }));
+    };
+}
+/**
+ * Default resources plugin — mount with no configuration needed.
+ *
+ * Usage in templates:
+ * ```ts
+ * // server/plugins/resources.ts
+ * import { defaultResourcesPlugin } from "@agent-native/core/server";
+ * export default defaultResourcesPlugin;
+ * ```
+ */
+export const defaultResourcesPlugin = createResourcesPlugin();
+//# sourceMappingURL=resources-plugin.js.map

package/dist/server/resources-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources-plugin.js","sourceRoot":"","sources":["../../src/server/resources-plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACtE,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAIlC;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,KAAK,EAAE,QAAa,EAAE,EAAE;QAC7B,iDAAiD;QAEjD,QAAQ,CAAC,KAAK,CAAC,GAAG,CAChB,+BAA+B,EAC/B,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC/B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YACD,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC,CAAC,CACH,CAAC;QAEF,QAAQ,CAAC,KAAK,CAAC,GAAG,CAChB,iCAAiC,EACjC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;gBAChC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YACD,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC,CACH,CAAC;QAEF,0EAA0E;QAC1E,QAAQ,CAAC,KAAK,CAAC,GAAG,CAChB,0BAA0B,EAC1B,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAChC,6DAA6D;YAC7D,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAEvC,yDAAyD;YACzD,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBAC/B,IAAI,MAAM,KAAK,KAAK;oBAAE,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;gBACxD,IAAI,MAAM,KAAK,MAAM;oBAAE,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;gBAC1D,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YAED,4CAA4C;YAC5C,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,QAAQ;gBAAE,OAAO;YAEvD,qDAAqD;YACrD,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;YAEhE,IAAI,MAAM,KAAK,KAAK;gBAAE,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACtD,IAAI,MAAM,KAAK,KAAK;gBAAE,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;YACzD,IAAI,MAAM,KAAK,QAAQ;gBAAE,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAE5D,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QACzC,CAAC,CAAC,CACH,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAmB,qBAAqB,EAAE,CAAC"}

package/dist/server/script-discovery.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @deprecated Use `action-discovery.ts` / `autoDiscoverActions` instead.
+ * This file is kept for backwards compatibility.
+ */
+export { autoDiscoverActions as autoDiscoverScripts, autoDiscoverActions, } from "./action-discovery.js";
+//# sourceMappingURL=script-discovery.d.ts.map

package/dist/server/script-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-discovery.d.ts","sourceRoot":"","sources":["../../src/server/script-discovery.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,mBAAmB,IAAI,mBAAmB,EAC1C,mBAAmB,GACpB,MAAM,uBAAuB,CAAC"}

package/dist/server/script-discovery.js

@@ -0,0 +1,6 @@
+/**
+ * @deprecated Use `action-discovery.ts` / `autoDiscoverActions` instead.
+ * This file is kept for backwards compatibility.
+ */
+export { autoDiscoverActions as autoDiscoverScripts, autoDiscoverActions, } from "./action-discovery.js";
+//# sourceMappingURL=script-discovery.js.map

package/dist/server/script-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-discovery.js","sourceRoot":"","sources":["../../src/server/script-discovery.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,mBAAmB,IAAI,mBAAmB,EAC1C,mBAAmB,GACpB,MAAM,uBAAuB,CAAC"}

package/dist/server/sse.d.ts

@@ -34,7 +34,7 @@ export interface SSEHandlerOptions {
  * and optionally from a file watcher.
  *
  * Usage:
- *   router.get("/api/events", createSSEHandler({ extraEmitters }));
+ *   router.get("/_agent-native/events", createSSEHandler({ extraEmitters }));
  */
 export declare function createSSEHandler(options?: SSEHandlerOptions): import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
 //# sourceMappingURL=sse.d.ts.map

package/dist/server/sse.js

@@ -18,7 +18,7 @@ export function createFileWatcher(dir, options = {}) {
  * and optionally from a file watcher.
  *
  * Usage:
- *   router.get("/api/events", createSSEHandler({ extraEmitters }));
+ *   router.get("/_agent-native/events", createSSEHandler({ extraEmitters }));
  */
 export function createSSEHandler(options = {}) {
     const projectRoot = options.contentRoot

package/dist/settings/handlers.d.ts

@@ -1,8 +1,8 @@
-/** GET /api/settings/:key */
+/** GET /_agent-native/settings/:key */
 export declare const getSettingHandler: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<Record<string, unknown>>>;
-/** PUT /api/settings/:key */
+/** PUT /_agent-native/settings/:key */
 export declare const putSettingHandler: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<any>>;
-/** DELETE /api/settings/:key */
+/** DELETE /_agent-native/settings/:key */
 export declare const deleteSettingHandler: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<{
     ok: boolean;
 }>>;

package/dist/settings/handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/settings/handlers.ts"],"names":[],"mappings":"AAaA,6BAA6B;AAC7B,eAAO,MAAM,iBAAiB,+FAQ5B,CAAC;AAEH,6BAA6B;AAC7B,eAAO,MAAM,iBAAiB,2EAK5B,CAAC;AAEH,gCAAgC;AAChC,eAAO,MAAM,oBAAoB;;GAMhC,CAAC"}
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/settings/handlers.ts"],"names":[],"mappings":"AAcA,uCAAuC;AACvC,eAAO,MAAM,iBAAiB,+FAQ5B,CAAC;AAEH,uCAAuC;AACvC,eAAO,MAAM,iBAAiB,2EAM5B,CAAC;AAEH,0CAA0C;AAC1C,eAAO,MAAM,oBAAoB;;GAOhC,CAAC"}