@agent-native/core 0.6.1 → 0.7.2

package/dist/templates/workspace-core/src/server/agent-chat-plugin.ts

@@ -0,0 +1,30 @@
+/**
+ * Workspace-wide agent-chat plugin for @{{APP_NAME}}/core-module.
+ *
+ * This mounts the framework's default agent-chat plugin so every app in
+ * the workspace gets the same chat endpoint, mention providers, and
+ * built-in tools. The ENTERPRISE-WIDE system prompt additions — things
+ * the agent should know across every app — live in the workspace's
+ * AGENTS.md file, which is loaded automatically into the prompt as a
+ * `<resource scope="workspace">` block.
+ *
+ * Customize this wrapper when you need agent behavior that can't be
+ * expressed in AGENTS.md — e.g. injecting enterprise-specific mention
+ * providers, pre-loading a custom set of MCP servers, or rewriting
+ * model choice based on your company's allowlist.
+ */
+import { defaultAgentChatPlugin } from "@agent-native/core/server";
+
+export const agentChatPlugin = async (nitroApp: any): Promise<void> => {
+  await defaultAgentChatPlugin(nitroApp);
+
+  // Hook for enterprise customization:
+  //
+  //   const chat = createAgentChatPlugin({
+  //     systemPrompt: (base) => `${base}\n\nCompany policy: …`,
+  //     mentionProviders: {
+  //       people: async (query) => searchCompanyDirectory(query),
+  //     },
+  //   });
+  //   await chat(nitroApp);
+};

package/dist/templates/workspace-core/src/server/auth-plugin.ts

@@ -0,0 +1,35 @@
+/**
+ * Workspace-wide auth plugin for @{{APP_NAME}}/core-module.
+ *
+ * Today this just re-uses the framework default, which already does the
+ * right thing for most enterprises (Better Auth with Google SSO when
+ * GOOGLE_CLIENT_ID/SECRET are set, email/password otherwise, local dev
+ * bypass via AUTH_MODE=local). Customize it here when your enterprise
+ * needs specific behavior — e.g.:
+ *
+ *   - Wrap the default to force a specific SSO provider
+ *   - Add a callback that provisions users into your directory
+ *   - Pre-register organizations / role mappings from Okta groups
+ *   - Fail closed on unauthenticated requests outside dev
+ *
+ * Every app in the workspace inherits this automatically (as long as the
+ * root package.json has `"agent-native": { "workspaceCore": "@{{APP_NAME}}/core-module" }`).
+ */
+import { defaultAuthPlugin } from "@agent-native/core/server";
+
+export const authPlugin = async (nitroApp: any): Promise<void> => {
+  // Run the framework default first so Better Auth, org tables, and session
+  // middleware are all set up.
+  await defaultAuthPlugin(nitroApp);
+
+  // Add enterprise-specific post-auth behavior here. Examples:
+  //
+  //   const h3 = getH3App(nitroApp);
+  //   h3.use(defineEventHandler(async (event) => {
+  //     const session = await getSession(event);
+  //     if (session?.email && !session.email.endsWith("@{{APP_NAME}}.com")) {
+  //       setResponseStatus(event, 403);
+  //       return { error: "Only @{{APP_NAME}}.com accounts allowed" };
+  //     }
+  //   }));
+};

package/dist/templates/workspace-core/src/server/index.ts

@@ -0,0 +1,22 @@
+/**
+ * Server-side entry for @{{APP_NAME}}/core-module.
+ *
+ * Exports plugin overrides for any framework slot you want to customize
+ * across every app in this workspace. The agent-native framework looks for
+ * these exports by name when deciding what to auto-mount — see the "three
+ * layer inheritance" section in the root README.
+ *
+ * Supported export names (any subset):
+ *   - authPlugin            → overrides @agent-native/core's auth
+ *   - orgPlugin             → overrides @agent-native/core's org
+ *   - agentChatPlugin       → overrides @agent-native/core's agent-chat
+ *   - coreRoutesPlugin      → overrides @agent-native/core's core-routes
+ *   - integrationsPlugin    → overrides @agent-native/core's integrations
+ *   - resourcesPlugin       → overrides @agent-native/core's resources
+ *   - terminalPlugin        → overrides @agent-native/core's terminal
+ *
+ * Anything you don't export falls through to the framework default.
+ */
+
+export { authPlugin } from "./auth-plugin.js";
+export { agentChatPlugin } from "./agent-chat-plugin.js";

package/dist/templates/workspace-core/tailwind.preset.ts

@@ -0,0 +1,34 @@
+/**
+ * Workspace-wide Tailwind preset for @{{APP_NAME}}/core-module.
+ *
+ * Extends the framework's base preset with enterprise brand tokens. Every
+ * app in the workspace should import THIS preset in its own
+ * tailwind.config.ts instead of importing @agent-native/core/tailwind
+ * directly, so brand updates in one place propagate to all apps.
+ *
+ *   // apps/<name>/tailwind.config.ts
+ *   import preset from "@{{APP_NAME}}/core-module/tailwind";
+ *   export default { presets: [preset], content: ["./app/**\/*.{ts,tsx}"] };
+ *
+ * If your enterprise already has a design-system package with its own
+ * Tailwind preset, swap `corePreset` out for that one (or chain both).
+ */
+import corePreset from "@agent-native/core/tailwind";
+import type { Config } from "tailwindcss";
+
+const preset: Partial<Config> = {
+  presets: [corePreset],
+  theme: {
+    extend: {
+      colors: {
+        // Replace with your actual brand palette.
+        brand: {
+          DEFAULT: "#4f46e5",
+          foreground: "#ffffff",
+        },
+      },
+    },
+  },
+};
+
+export default preset;

package/dist/templates/workspace-core/tsconfig.json

@@ -0,0 +1,9 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "rootDir": "src",
+    "outDir": "dist",
+    "noEmit": true
+  },
+  "include": ["src/**/*", "tailwind.preset.ts"]
+}

package/dist/templates/workspace-root/.env.example

@@ -0,0 +1,37 @@
+# Shared across every app in this workspace.
+# Copy to .env and fill in values, or override per-app in apps/<app>/.env.
+# Per-app values win on conflict — use workspace-level for shared secrets.
+
+# Database shared by every app in the workspace. Leave blank to default to
+# SQLite per app (apps/<app>/data/app.db), or set DATABASE_URL per app.
+DATABASE_URL=
+
+# Better Auth — required for login to work. Generate with:
+#   openssl rand -hex 32
+BETTER_AUTH_SECRET=
+
+# Anthropic API key for the agent chat.
+ANTHROPIC_API_KEY=
+
+# Optional: OpenAI key if any app uses OpenAI engines.
+OPENAI_API_KEY=
+
+# Builder browser integration (run `agent-native dev` and visit any app,
+# then click "Connect Builder" — these are written automatically by the
+# callback handler to this workspace-level .env).
+BUILDER_PRIVATE_KEY=
+BUILDER_PUBLIC_KEY=
+
+# A2A shared secret — required for cross-app JWT verification. Every app
+# in the workspace should use the same value. Generate with:
+#   openssl rand -hex 32
+A2A_SECRET=
+
+# Google sign-in — optional. Leave blank to use email/password only.
+# Both values come from Google Cloud Console → APIs & Services → Credentials.
+GOOGLE_CLIENT_ID=
+GOOGLE_CLIENT_SECRET=
+
+# Optional: GitHub sign-in.
+GITHUB_CLIENT_ID=
+GITHUB_CLIENT_SECRET=

package/dist/templates/workspace-root/README.md

@@ -0,0 +1,62 @@
+# {{APP_TITLE}} — Agent-Native Workspace
+
+A monorepo hosting multiple agent-native apps that all inherit from a single
+private **workspace core** package. The core module provides shared auth,
+agent instructions, skills, components, and plugins; each app just ships its
+own screens and template-specific actions.
+
+## Layout
+
+```
+{{APP_NAME}}/
+├── packages/
+│   └── core-module/          # @{{APP_NAME}}/core-module — the shared mid-layer
+│       ├── src/server/       # Auth / org / agent-chat plugin overrides
+│       ├── src/client/       # Shared React components (org switcher, layouts…)
+│       ├── actions/          # Shared agent-callable actions
+│       ├── skills/           # Shared .agents skills baked into every app
+│       └── AGENTS.md         # Enterprise-wide agent instructions
+└── apps/
+    └── example/              # Sample app demonstrating inheritance
+```
+
+## Three-layer inheritance
+
+Every app in this workspace inherits cross-cutting behavior automatically:
+
+1. **App local** (highest priority) — anything under `apps/<name>/server/plugins/`,
+   `apps/<name>/actions/`, `apps/<name>/.agents/skills/`, `apps/<name>/AGENTS.md`.
+2. **Workspace core** (middle) — `packages/core-module/src/server/`,
+   `packages/core-module/actions/`, `packages/core-module/skills/`,
+   `packages/core-module/AGENTS.md`.
+3. **Framework** (lowest) — `@agent-native/core` defaults.
+
+Apps don't need any configuration to opt in. Discovery happens via the
+`agent-native.workspaceCore` field in this root `package.json`, which names
+the workspace core package (`@{{APP_NAME}}/core-module`).
+
+## Getting started
+
+```bash
+pnpm install
+cp .env.example .env   # fill in DATABASE_URL, BETTER_AUTH_SECRET, ANTHROPIC_API_KEY
+pnpm dev               # starts the example app
+```
+
+## Adding a new app
+
+```bash
+cd apps
+pnpm exec agent-native create crm
+```
+
+The CLI detects the workspace root and scaffolds a minimal app that already
+depends on `@{{APP_NAME}}/core-module`. Edit only the routes you care about;
+auth, org switching, skills, and instructions come from the core module.
+
+## Editing shared behavior
+
+Everything cross-cutting lives in `packages/core-module/`. A change to
+`packages/core-module/src/server/auth-plugin.ts`, for example, is picked up
+by every app in the workspace on the next dev reload — no need to touch any
+individual app.

package/dist/templates/workspace-root/_gitignore

@@ -0,0 +1,23 @@
+node_modules/
+dist/
+build/
+.deploy-tmp/
+
+# Env files — never commit secrets
+.env
+.env.local
+apps/*/.env
+apps/*/.env.local
+packages/*/.env
+
+# Editor / OS
+.DS_Store
+.vscode/
+.idea/
+
+# pnpm
+.pnpm-store/
+pnpm-debug.log*
+
+# Personal agent memory — per-developer, not shared
+learnings.md

package/dist/templates/workspace-root/package.json

@@ -0,0 +1,18 @@
+{
+  "name": "{{APP_NAME}}",
+  "private": true,
+  "version": "0.0.0",
+  "scripts": {
+    "dev": "pnpm --filter example dev",
+    "build": "pnpm -r build",
+    "typecheck": "pnpm -r typecheck"
+  },
+  "agent-native": {
+    "workspaceCore": "@{{APP_NAME}}/core-module"
+  },
+  "devDependencies": {
+    "prettier": "^3.6.2",
+    "typescript": "^5.9.2"
+  },
+  "packageManager": "pnpm@10.14.0"
+}

package/dist/templates/workspace-root/pnpm-workspace.yaml

@@ -0,0 +1,3 @@
+packages:
+  - "packages/*"
+  - "apps/*"

package/dist/templates/workspace-root/tsconfig.base.json

@@ -0,0 +1,21 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "lib": ["ES2022", "DOM", "DOM.Iterable"],
+    "types": ["node"],
+    "jsx": "react-jsx",
+    "strict": true,
+    "noUnusedLocals": false,
+    "noUnusedParameters": false,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitOverride": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "allowSyntheticDefaultImports": true,
+    "forceConsistentCasingInFileNames": true
+  }
+}

package/dist/usage/store.d.ts

@@ -1,22 +1,33 @@
-/** Default usage limit per user in cents ($1.00) */
+/** Default usage limit per user in cents ($1.00) for hosted prod mode */
 export declare const DEFAULT_USAGE_LIMIT_CENTS = 100;
+export interface UsageRecord {
+    ownerEmail: string;
+    inputTokens: number;
+    outputTokens: number;
+    cacheReadTokens?: number;
+    cacheWriteTokens?: number;
+    model: string;
+    /** Category for this call — e.g. "chat", "automation", "job", "custom-agent". */
+    label?: string;
+    /** Optional template/app name (e.g. "mail"). Falls back to AGENT_APP env. */
+    app?: string;
+}
 /**
- * Calculate cost in cents * 100 (for integer precision) given token counts and model.
- * Returns cost in "centicents" (1/100th of a cent) so we can store as integer.
+ * Calculate cost in centicents (1/100th of a cent).
+ * Accepts cache tokens so callers that use prompt caching are priced
+ * correctly. Non-cache-aware callers can pass 0 for the cache fields.
  */
-export declare function calculateCost(inputTokens: number, outputTokens: number, model: string): number;
+export declare function calculateCost(inputTokens: number, outputTokens: number, model: string, cacheReadTokens?: number, cacheWriteTokens?: number): number;
 /**
- * Record token usage for a user after an agent run.
+ * Record token usage from an LLM call.
+ *
+ * Accepts an object with the full set of fields. A positional overload
+ * remains for backward compatibility with the older 4-arg signature.
  */
+export declare function recordUsage(record: UsageRecord): Promise<void>;
 export declare function recordUsage(ownerEmail: string, inputTokens: number, outputTokens: number, model: string): Promise<void>;
-/**
- * Get total usage cost for a user in cents.
- */
+/** Total cost (in cents) charged against a user, across all time. */
 export declare function getUserUsageCents(ownerEmail: string): Promise<number>;
-/**
- * Check if a user has exceeded their usage limit.
- * Returns { allowed: true } or { allowed: false, usageCents, limitCents }.
- */
 export declare function checkUsageLimit(ownerEmail: string, limitCents?: number): Promise<{
     allowed: true;
     usageCents: number;
@@ -26,4 +37,55 @@ export declare function checkUsageLimit(ownerEmail: string, limitCents?: number)
     usageCents: number;
     limitCents: number;
 }>;
+export interface UsageSummaryOptions {
+    ownerEmail: string;
+    /** Inclusive lower bound (ms since epoch). Defaults to 30 days ago. */
+    sinceMs?: number;
+}
+export interface UsageBucket {
+    key: string;
+    inputTokens: number;
+    outputTokens: number;
+    cacheReadTokens: number;
+    cacheWriteTokens: number;
+    cents: number;
+    calls: number;
+}
+export interface DailyBucket {
+    /** YYYY-MM-DD (UTC) */
+    date: string;
+    cents: number;
+    calls: number;
+}
+export interface UsageRecentEntry {
+    id: number;
+    createdAt: number;
+    label: string;
+    app: string;
+    model: string;
+    inputTokens: number;
+    outputTokens: number;
+    cacheReadTokens: number;
+    cacheWriteTokens: number;
+    cents: number;
+}
+export interface UsageSummary {
+    totalCents: number;
+    totalCalls: number;
+    totalInputTokens: number;
+    totalOutputTokens: number;
+    totalCacheReadTokens: number;
+    totalCacheWriteTokens: number;
+    sinceMs: number;
+    byLabel: UsageBucket[];
+    byModel: UsageBucket[];
+    byApp: UsageBucket[];
+    byDay: DailyBucket[];
+    recent: UsageRecentEntry[];
+}
+/**
+ * Produce an aggregated spend view for the Usage admin panel.
+ * Scoped to the passed owner email; the UI always passes the session user.
+ */
+export declare function getUsageSummary(options: UsageSummaryOptions): Promise<UsageSummary>;
 //# sourceMappingURL=store.d.ts.map

package/dist/usage/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/usage/store.ts"],"names":[],"mappings":"AAOA,oDAAoD;AACpD,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAkC7C;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,GACZ,MAAM,CAeR;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC/B,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAU3E;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,UAAU,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CACN;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAC7D,CAQA"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/usage/store.ts"],"names":[],"mappings":"AAWA,yEAAyE;AACzE,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAqC7C,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AA2DD;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,eAAe,SAAI,EACnB,gBAAgB,SAAI,GACnB,MAAM,CAUR;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AACtE,wBAAsB,WAAW,CAC/B,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAAC;AA+DjB,qEAAqE;AACrE,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAS3E;AAED,wBAAsB,eAAe,CACnC,UAAU,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CACN;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAC7D,CAQA;AAID,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,uBAAuB;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,MAAM,EAAE,gBAAgB,EAAE,CAAC;CAC5B;AAID;;;GAGG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,YAAY,CAAC,CAoHvB"}