@agent-native/core 0.7.2 → 0.7.4

package/dist/sharing/schema.d.ts

@@ -0,0 +1,202 @@
+/**
+ * Schema factories for sharing/ownership.
+ *
+ * Templates make a resource table "ownable" by spreading `ownableColumns()` into
+ * the table definition and declaring a companion shares table via
+ * `createSharesTable()`. The shares table carries per-principal grants; the
+ * parent table's `visibility` column is the coarse default (private / org /
+ * public).
+ *
+ *   import { table, text, ownableColumns, createSharesTable } from
+ *     "@agent-native/core/db/schema";
+ *
+ *   export const decks = table("decks", {
+ *     id: text("id").primaryKey(),
+ *     title: text("title").notNull(),
+ *     data: text("data").notNull(),
+ *     ...ownableColumns(),
+ *   });
+ *
+ *   export const deckShares = createSharesTable("deck_shares");
+ *
+ * The share row `role` supports `viewer | editor | admin`. `admin` is a
+ * share-level capability — it lets non-owners manage shares. The single
+ * `owner_email` column on the resource remains the ground truth for ownership.
+ */
+/**
+ * Columns any ownable resource should include. Spread into the table definition.
+ *
+ * - `ownerEmail` — the creator. Auto-filled by write actions from the request context.
+ * - `orgId`     — owner's active org at creation time. Used for `visibility = 'org'` checks.
+ * - `visibility`— coarse default: `'private' | 'org' | 'public'`. Default `'private'`.
+ */
+export declare function ownableColumns(): {
+    ownerEmail: import("drizzle-orm").HasDefault<import("drizzle-orm").NotNull<import("drizzle-orm/sqlite-core").SQLiteTextBuilderInitial<"owner_email", [string, ...string[]], number>>>;
+    orgId: import("drizzle-orm/sqlite-core").SQLiteTextBuilderInitial<"org_id", [string, ...string[]], number>;
+    visibility: import("drizzle-orm").HasDefault<import("drizzle-orm").NotNull<import("drizzle-orm/sqlite-core").SQLiteTextBuilderInitial<"visibility", ["private", "org", "public"], number>>>;
+};
+/**
+ * Create a companion shares table for an ownable resource. Call this right
+ * after defining the parent table.
+ *
+ * Columns:
+ * - `id`              — share row id (generated by the share action)
+ * - `resourceId`      — id of the parent resource
+ * - `principalType`   — `'user' | 'org'`
+ * - `principalId`     — email (for user) or org id (for org)
+ * - `role`            — `'viewer' | 'editor' | 'admin'`
+ * - `createdBy`       — email of the user who created the share
+ * - `createdAt`       — ISO timestamp
+ *
+ * Uniqueness across `(resource_id, principal_type, principal_id)` is enforced
+ * at the action layer via upsert-style logic. A composite DB-level unique
+ * index can be added per template if desired — omitted here to keep the
+ * factory dialect-agnostic.
+ */
+export declare function createSharesTable(tableName: string): import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
+    name: string;
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "id";
+            tableName: string;
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number;
+        }>;
+        resourceId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "resource_id";
+            tableName: string;
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number;
+        }>;
+        principalType: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "principal_type";
+            tableName: string;
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: "user" | "org";
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: ["user", "org"];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number;
+        }>;
+        principalId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "principal_id";
+            tableName: string;
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number;
+        }>;
+        role: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "role";
+            tableName: string;
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: "admin" | "viewer" | "editor";
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: ["viewer", "editor", "admin"];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number;
+        }>;
+        createdBy: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "created_by";
+            tableName: string;
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number;
+        }>;
+        createdAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+            name: "created_at";
+            tableName: string;
+            dataType: "string";
+            columnType: "SQLiteText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: number;
+        }>;
+    };
+    dialect: "sqlite";
+}>;
+export type Visibility = "private" | "org" | "public";
+export type ShareRole = "viewer" | "editor" | "admin";
+export type PrincipalType = "user" | "org";
+/** Role precedence — higher number = stronger capability. */
+export declare const ROLE_RANK: Record<ShareRole | "owner", number>;
+export declare function roleSatisfies(actual: ShareRole | "owner", minimum: ShareRole | "owner"): boolean;
+//# sourceMappingURL=schema.d.ts.map

package/dist/sharing/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/sharing/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH;;;;;;GAMG;AACH,wBAAgB,cAAc;;;;EAU7B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAclD;AAED,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,CAAC;AACtD,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;AACtD,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,KAAK,CAAC;AAE3C,6DAA6D;AAC7D,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAKzD,CAAC;AAEF,wBAAgB,aAAa,CAC3B,MAAM,EAAE,SAAS,GAAG,OAAO,EAC3B,OAAO,EAAE,SAAS,GAAG,OAAO,GAC3B,OAAO,CAET"}

package/dist/sharing/schema.js

@@ -0,0 +1,88 @@
+/**
+ * Schema factories for sharing/ownership.
+ *
+ * Templates make a resource table "ownable" by spreading `ownableColumns()` into
+ * the table definition and declaring a companion shares table via
+ * `createSharesTable()`. The shares table carries per-principal grants; the
+ * parent table's `visibility` column is the coarse default (private / org /
+ * public).
+ *
+ *   import { table, text, ownableColumns, createSharesTable } from
+ *     "@agent-native/core/db/schema";
+ *
+ *   export const decks = table("decks", {
+ *     id: text("id").primaryKey(),
+ *     title: text("title").notNull(),
+ *     data: text("data").notNull(),
+ *     ...ownableColumns(),
+ *   });
+ *
+ *   export const deckShares = createSharesTable("deck_shares");
+ *
+ * The share row `role` supports `viewer | editor | admin`. `admin` is a
+ * share-level capability — it lets non-owners manage shares. The single
+ * `owner_email` column on the resource remains the ground truth for ownership.
+ */
+import { table, text, now } from "../db/schema.js";
+/**
+ * Columns any ownable resource should include. Spread into the table definition.
+ *
+ * - `ownerEmail` — the creator. Auto-filled by write actions from the request context.
+ * - `orgId`     — owner's active org at creation time. Used for `visibility = 'org'` checks.
+ * - `visibility`— coarse default: `'private' | 'org' | 'public'`. Default `'private'`.
+ */
+export function ownableColumns() {
+    return {
+        ownerEmail: text("owner_email").notNull().default("local@localhost"),
+        orgId: text("org_id"),
+        visibility: text("visibility", {
+            enum: ["private", "org", "public"],
+        })
+            .notNull()
+            .default("private"),
+    };
+}
+/**
+ * Create a companion shares table for an ownable resource. Call this right
+ * after defining the parent table.
+ *
+ * Columns:
+ * - `id`              — share row id (generated by the share action)
+ * - `resourceId`      — id of the parent resource
+ * - `principalType`   — `'user' | 'org'`
+ * - `principalId`     — email (for user) or org id (for org)
+ * - `role`            — `'viewer' | 'editor' | 'admin'`
+ * - `createdBy`       — email of the user who created the share
+ * - `createdAt`       — ISO timestamp
+ *
+ * Uniqueness across `(resource_id, principal_type, principal_id)` is enforced
+ * at the action layer via upsert-style logic. A composite DB-level unique
+ * index can be added per template if desired — omitted here to keep the
+ * factory dialect-agnostic.
+ */
+export function createSharesTable(tableName) {
+    return table(tableName, {
+        id: text("id").primaryKey(),
+        resourceId: text("resource_id").notNull(),
+        principalType: text("principal_type", {
+            enum: ["user", "org"],
+        }).notNull(),
+        principalId: text("principal_id").notNull(),
+        role: text("role", { enum: ["viewer", "editor", "admin"] })
+            .notNull()
+            .default("viewer"),
+        createdBy: text("created_by").notNull(),
+        createdAt: text("created_at").notNull().default(now()),
+    });
+}
+/** Role precedence — higher number = stronger capability. */
+export const ROLE_RANK = {
+    viewer: 1,
+    editor: 2,
+    admin: 3,
+    owner: 4,
+};
+export function roleSatisfies(actual, minimum) {
+    return ROLE_RANK[actual] >= ROLE_RANK[minimum];
+}
+//# sourceMappingURL=schema.js.map

package/dist/sharing/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/sharing/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC;QACpE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC;QACrB,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE;YAC7B,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC;SACnC,CAAC;aACC,OAAO,EAAE;aACT,OAAO,CAAC,SAAS,CAAC;KACtB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,OAAO,KAAK,CAAC,SAAS,EAAE;QACtB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;QAC3B,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;QACzC,aAAa,EAAE,IAAI,CAAC,gBAAgB,EAAE;YACpC,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC;SACtB,CAAC,CAAC,OAAO,EAAE;QACZ,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;QAC3C,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;aACxD,OAAO,EAAE;aACT,OAAO,CAAC,QAAQ,CAAC;QACpB,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;QACvC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;KACvD,CAAC,CAAC;AACL,CAAC;AAMD,6DAA6D;AAC7D,MAAM,CAAC,MAAM,SAAS,GAAwC;IAC5D,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;IACT,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,CAAC;CACT,CAAC;AAEF,MAAM,UAAU,aAAa,CAC3B,MAA2B,EAC3B,OAA4B;IAE5B,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;AACjD,CAAC"}

package/dist/vite/action-types-plugin.d.ts

@@ -10,4 +10,9 @@ import type { Plugin } from "vite";
  * ```
  */
 export declare function actionTypesPlugin(): Plugin;
+/**
+ * Public helper to regenerate the types + registry from a non-Vite context
+ * (e.g. the Nitro deploy build, where Vite plugins don't run).
+ */
+export declare function generateActionRegistryForProject(projectRoot: string): void;
 //# sourceMappingURL=action-types-plugin.d.ts.map

package/dist/vite/action-types-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action-types-plugin.d.ts","sourceRoot":"","sources":["../../src/vite/action-types-plugin.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAmFnC;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAgC1C"}
+{"version":3,"file":"action-types-plugin.d.ts","sourceRoot":"","sources":["../../src/vite/action-types-plugin.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAiLnC;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAgC1C;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAG1E"}

package/dist/vite/action-types-plugin.js

@@ -1,14 +1,18 @@
 /**
- * Vite plugin that generates end-to-end type-safe action types.
+ * Vite plugin that generates end-to-end type-safe action types AND a runtime
+ * registry of static imports so bundlers (Nitro on Netlify/Vercel/AWS-Lambda,
+ * Rolldown, etc.) include every action file in the server bundle.
  *
- * Watches the `actions/` directory and emits `.generated/action-types.d.ts`,
- * which augments the `ActionRegistry` interface in `@agent-native/core/client`.
- * This gives `useActionQuery` and `useActionMutation` full type inference
- * for action names, parameters, and return types — similar to tRPC.
- *
- * The generated file uses `typeof import()` to reference action source files,
- * so TypeScript resolves the actual types at type-check time without any
- * runtime cost or complex AST parsing.
+ * Watches the `actions/` directory and emits:
+ *   - `.generated/action-types.d.ts` — type-only module that augments the
+ *     `ActionRegistry` interface in `@agent-native/core/client`, giving
+ *     `useActionQuery`/`useActionMutation` full inference.
+ *   - `.generated/actions-registry.ts` — runtime registry keyed by action
+ *     name, with static `import` statements for every action. Templates
+ *     import this file from their `server/plugins/agent-chat.ts` so Nitro
+ *     bundles the actions into the server function; without it the runtime
+ *     `fs.readdirSync` inside `autoDiscoverActions` finds nothing in a
+ *     bundled serverless function and every action route 404s.
  */
 import path from "path";
 import fs from "fs";
@@ -21,18 +25,41 @@ const SKIP_FILES = new Set([
     "registry",
 ]);
 /**
- * Scan the actions directory and emit a `.generated/action-types.d.ts` file.
- * Only writes if the content has changed, to avoid triggering unnecessary rebuilds.
+ * Framework-level sharing actions that must ALWAYS be in the generated
+ * registry, even when the template's `actions/` directory doesn't contain
+ * them. Each entry maps the action name to the bare-specifier import path so
+ * bundlers see a static import and pull the module into the server bundle.
+ *
+ * Order matters: templates can override by defining a same-named file in
+ * their own `actions/` directory — the merge below is skip-existing.
  */
-function generateActionTypes(actionsDir, projectRoot) {
+const CORE_SHARING_ACTIONS = [
+    {
+        name: "share-resource",
+        specifier: "@agent-native/core/sharing/actions/share-resource",
+    },
+    {
+        name: "unshare-resource",
+        specifier: "@agent-native/core/sharing/actions/unshare-resource",
+    },
+    {
+        name: "list-resource-shares",
+        specifier: "@agent-native/core/sharing/actions/list-resource-shares",
+    },
+    {
+        name: "set-resource-visibility",
+        specifier: "@agent-native/core/sharing/actions/set-resource-visibility",
+    },
+];
+function scanActionFiles(actionsDir) {
     let files;
     try {
         files = fs.readdirSync(actionsDir);
     }
     catch {
-        return; // No actions directory — nothing to generate
+        return [];
     }
-    const actionFiles = files.filter((f) => {
+    return files.filter((f) => {
         if (!f.endsWith(".ts") && !f.endsWith(".js"))
             return false;
         const name = f.replace(/\.(ts|js)$/, "");
@@ -40,17 +67,48 @@ function generateActionTypes(actionsDir, projectRoot) {
             return false;
         if (SKIP_FILES.has(name))
             return false;
+        // Only include files that actually call defineAction. CLI scripts or
+        // example templates that live in actions/ but don't export a defineAction
+        // would otherwise drag their own (often app/, browser-only, or fs-only)
+        // imports into the serverless bundle and fail to resolve.
+        try {
+            const content = fs.readFileSync(path.join(actionsDir, f), "utf-8");
+            if (!content.includes("defineAction"))
+                return false;
+        }
+        catch {
+            return false;
+        }
         return true;
     });
-    // Compute relative path from .generated/ to actions/
+}
+function toIdent(name) {
+    return "a_" + name.replace(/[^a-zA-Z0-9_]/g, "_");
+}
+function writeIfChanged(outFile, content) {
+    const existing = fs.existsSync(outFile)
+        ? fs.readFileSync(outFile, "utf-8")
+        : "";
+    if (existing !== content) {
+        fs.mkdirSync(path.dirname(outFile), { recursive: true });
+        fs.writeFileSync(outFile, content);
+    }
+}
+/**
+ * Scan the actions directory and emit the types + runtime registry files.
+ * Only writes files whose content has changed, to avoid triggering rebuilds.
+ */
+function generateActionArtifacts(actionsDir, projectRoot) {
     const outDir = path.resolve(projectRoot, ".generated");
     const relActionsDir = path.relative(outDir, actionsDir).replace(/\\/g, "/");
-    const entries = actionFiles.map((f) => {
+    const actionFiles = scanActionFiles(actionsDir);
+    // --- types file ---------------------------------------------------------
+    const typeEntries = actionFiles.map((f) => {
         const name = f.replace(/\.(ts|js)$/, "");
         const relPath = `${relActionsDir}/${name}`;
         return `    "${name}": ActionEntry<typeof import("${relPath}")>;`;
     });
-    const content = `// AUTO-GENERATED by @agent-native/core — do not edit manually.
+    const typesContent = `// AUTO-GENERATED by @agent-native/core — do not edit manually.
 // Regenerated when files in actions/ change.
 // This file augments the ActionRegistry interface so that useActionQuery and
 // useActionMutation infer the correct types from your action definitions.
@@ -65,20 +123,55 @@ type ActionEntry<T> = T extends { default: { run: (...args: infer A) => infer R
 
 declare module "@agent-native/core/client" {
   interface ActionRegistry {
-${entries.join("\n")}
+${typeEntries.join("\n")}
   }
 }
 
 export {};
 `;
-    fs.mkdirSync(outDir, { recursive: true });
-    const outFile = path.join(outDir, "action-types.d.ts");
-    const existing = fs.existsSync(outFile)
-        ? fs.readFileSync(outFile, "utf-8")
-        : "";
-    if (existing !== content) {
-        fs.writeFileSync(outFile, content);
+    writeIfChanged(path.join(outDir, "action-types.d.ts"), typesContent);
+    // --- runtime registry ---------------------------------------------------
+    // Static imports of each action's default export so bundlers see every
+    // action and include it in the server bundle. Normalization matches
+    // `loadActionsIntoRegistry` in server/action-discovery.ts.
+    const imports = [];
+    const entries = [];
+    const templateActionNames = new Set();
+    for (const f of actionFiles) {
+        const name = f.replace(/\.(ts|js)$/, "");
+        templateActionNames.add(name);
+        const ident = toIdent(name);
+        const relPath = `${relActionsDir}/${name}`;
+        imports.push(`import * as ${ident} from "${relPath}";`);
+        entries.push(`  ${JSON.stringify(name)}: ${ident},`);
     }
+    // Framework-level sharing actions — only added when the template hasn't
+    // provided a same-named file (skip-existing merge). Static imports ensure
+    // bundlers pull these modules into the server bundle so
+    // `/_agent-native/actions/share-resource` (etc.) always resolve.
+    for (const entry of CORE_SHARING_ACTIONS) {
+        if (templateActionNames.has(entry.name))
+            continue;
+        const ident = toIdent(entry.name);
+        imports.push(`import * as ${ident} from "${entry.specifier}";`);
+        entries.push(`  ${JSON.stringify(entry.name)}: ${ident},`);
+    }
+    const registryContent = `// AUTO-GENERATED by @agent-native/core — do not edit manually.
+// Static-import registry of every action file. Bundlers (Nitro, Rolldown)
+// see these imports and include the action modules in the server bundle.
+// The agent-chat plugin normalizes each module into an ActionEntry shape.
+${imports.join("\n")}
+
+const modules: Record<string, unknown> = {
+${entries.join("\n")}
+};
+
+export default modules;
+`;
+    // Always write the registry — even when the template has no actions/ files
+    // we still emit imports for the framework-level sharing actions so they get
+    // mounted on every template that consumes the registry.
+    writeIfChanged(path.join(outDir, "actions-registry.ts"), registryContent);
     // Ensure .generated/ is in .gitignore
     const gitignorePath = path.join(projectRoot, ".gitignore");
     if (fs.existsSync(gitignorePath)) {
@@ -108,16 +201,16 @@ export function actionTypesPlugin() {
             actionsDir = path.resolve(projectRoot, "actions");
         },
         buildStart() {
-            generateActionTypes(actionsDir, projectRoot);
+            generateActionArtifacts(actionsDir, projectRoot);
         },
         configureServer(server) {
             // Generate on startup
-            generateActionTypes(actionsDir, projectRoot);
+            generateActionArtifacts(actionsDir, projectRoot);
             // Watch for changes in actions/
             const watcher = server.watcher;
             const handleChange = (file) => {
                 if (file.startsWith(actionsDir) && /\.(ts|js)$/.test(file)) {
-                    generateActionTypes(actionsDir, projectRoot);
+                    generateActionArtifacts(actionsDir, projectRoot);
                 }
             };
             watcher.add(actionsDir);
@@ -129,4 +222,12 @@ export function actionTypesPlugin() {
         },
     };
 }
+/**
+ * Public helper to regenerate the types + registry from a non-Vite context
+ * (e.g. the Nitro deploy build, where Vite plugins don't run).
+ */
+export function generateActionRegistryForProject(projectRoot) {
+    const actionsDir = path.resolve(projectRoot, "actions");
+    generateActionArtifacts(actionsDir, projectRoot);
+}
 //# sourceMappingURL=action-types-plugin.js.map

package/dist/vite/action-types-plugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"action-types-plugin.js","sourceRoot":"","sources":["../../src/vite/action-types-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AAGpB,oEAAoE;AACpE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,SAAS;IACT,KAAK;IACL,YAAY;IACZ,WAAW;IACX,UAAU;CACX,CAAC,CAAC;AAEH;;;GAGG;AACH,SAAS,mBAAmB,CAAC,UAAkB,EAAE,WAAmB;IAClE,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,6CAA6C;IACvD,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACrC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3D,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,qDAAqD;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAE5E,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACpC,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,GAAG,aAAa,IAAI,IAAI,EAAE,CAAC;QAC3C,OAAO,QAAQ,IAAI,iCAAiC,OAAO,MAAM,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG;;;;;;;;;;;;;;;EAehB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;CAKnB,CAAC;IAEA,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QACrC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;QACnC,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,sCAAsC;IACtC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAC3D,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACtC,EAAE,CAAC,cAAc,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,UAAU,GAAG,EAAE,CAAC;IAEpB,OAAO;QACL,IAAI,EAAE,2BAA2B;QACjC,cAAc,CAAC,MAAM;YACnB,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC;YAC1B,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACpD,CAAC;QACD,UAAU;YACR,mBAAmB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC/C,CAAC;QACD,eAAe,CAAC,MAAM;YACpB,sBAAsB;YACtB,mBAAmB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YAE7C,gCAAgC;YAChC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YAC/B,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,EAAE;gBACpC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3D,mBAAmB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACxB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YAChC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YACnC,qEAAqE;YACrE,uEAAuE;YACvE,6CAA6C;QAC/C,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"action-types-plugin.js","sourceRoot":"","sources":["../../src/vite/action-types-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AAGpB,oEAAoE;AACpE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,SAAS;IACT,KAAK;IACL,YAAY;IACZ,WAAW;IACX,UAAU;CACX,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,oBAAoB,GAA+C;IACvE;QACE,IAAI,EAAE,gBAAgB;QACtB,SAAS,EAAE,mDAAmD;KAC/D;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,SAAS,EAAE,qDAAqD;KACjE;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,SAAS,EAAE,yDAAyD;KACrE;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,SAAS,EAAE,4DAA4D;KACxE;CACF,CAAC;AAEF,SAAS,eAAe,CAAC,UAAkB;IACzC,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3D,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,qEAAqE;QACrE,0EAA0E;QAC1E,wEAAwE;QACxE,0DAA0D;QAC1D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACnE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;gBAAE,OAAO,KAAK,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,OAAe;IACtD,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QACrC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;QACnC,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAC9B,UAAkB,EAClB,WAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAE5E,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAEhD,2EAA2E;IAC3E,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,GAAG,aAAa,IAAI,IAAI,EAAE,CAAC;QAC3C,OAAO,QAAQ,IAAI,iCAAiC,OAAO,MAAM,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;EAerB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;CAKvB,CAAC;IAEA,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAAE,YAAY,CAAC,CAAC;IAErE,2EAA2E;IAC3E,uEAAuE;IACvE,oEAAoE;IACpE,2DAA2D;IAC3D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACzC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,GAAG,aAAa,IAAI,IAAI,EAAE,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,eAAe,KAAK,UAAU,OAAO,IAAI,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC;IACvD,CAAC;IACD,wEAAwE;IACxE,0EAA0E;IAC1E,wDAAwD;IACxD,iEAAiE;IACjE,KAAK,MAAM,KAAK,IAAI,oBAAoB,EAAE,CAAC;QACzC,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,eAAe,KAAK,UAAU,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,eAAe,GAAG;;;;EAIxB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;;;EAGlB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;;;;CAInB,CAAC;IAEA,2EAA2E;IAC3E,4EAA4E;IAC5E,wDAAwD;IACxD,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,qBAAqB,CAAC,EAAE,eAAe,CAAC,CAAC;IAE1E,sCAAsC;IACtC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAC3D,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACtC,EAAE,CAAC,cAAc,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,UAAU,GAAG,EAAE,CAAC;IAEpB,OAAO;QACL,IAAI,EAAE,2BAA2B;QACjC,cAAc,CAAC,MAAM;YACnB,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC;YAC1B,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACpD,CAAC;QACD,UAAU;YACR,uBAAuB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACnD,CAAC;QACD,eAAe,CAAC,MAAM;YACpB,sBAAsB;YACtB,uBAAuB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YAEjD,gCAAgC;YAChC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YAC/B,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,EAAE;gBACpC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3D,uBAAuB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACxB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YAChC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YACnC,qEAAqE;YACrE,uEAAuE;YACvE,6CAA6C;QAC/C,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gCAAgC,CAAC,WAAmB;IAClE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACxD,uBAAuB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AACnD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.7.2",
+  "version": "0.7.4",
   "type": "module",
   "description": "Framework for agent-native application development — where AI agents and UI share state via files",
   "license": "MIT",
@@ -37,8 +37,15 @@
     "./resources/store": "./dist/resources/store.js",
     "./resources/metadata": "./dist/resources/metadata.js",
     "./oauth-tokens": "./dist/oauth-tokens/index.js",
+    "./secrets": "./dist/secrets/index.js",
     "./org": "./dist/org/index.js",
     "./client/org": "./dist/client/org/index.js",
+    "./sharing": "./dist/sharing/index.js",
+    "./sharing/actions/share-resource": "./dist/sharing/actions/share-resource.js",
+    "./sharing/actions/unshare-resource": "./dist/sharing/actions/unshare-resource.js",
+    "./sharing/actions/list-resource-shares": "./dist/sharing/actions/list-resource-shares.js",
+    "./sharing/actions/set-resource-visibility": "./dist/sharing/actions/set-resource-visibility.js",
+    "./client/sharing": "./dist/client/sharing/index.js",
     "./adapters/cli": "./dist/adapters/cli/index.js",
     "./router": "./dist/router/index.js",
     "./collab": "./dist/collab/index.js",
@@ -70,7 +77,7 @@
     "@clack/prompts": "^1.2.0",
     "@libsql/client": "^0.15.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@neondatabase/serverless": "^1.0.2",
+    "@neondatabase/serverless": "^1.1.0",
     "@radix-ui/react-popover": "^1.1.15",
     "@radix-ui/react-select": "^2.2.6",
     "@radix-ui/react-tooltip": "^1.2.8",
@@ -91,7 +98,7 @@
     "cron-parser": "^5.5.0",
     "diff-match-patch": "^1.0.5",
     "dotenv": "^17.2.1",
-    "drizzle-orm": "^0.44.0",
+    "drizzle-orm": "^0.45.2",
     "h3": "^2.0.1-rc.20",
     "isbot": "^5",
     "jose": "^6.2.2",
@@ -105,7 +112,8 @@
     "tailwind-merge": "^2.6.0",
     "tiptap-markdown": "^0.9.0",
     "y-protocols": "^1.0.7",
-    "yjs": "^13.6.30"
+    "yjs": "^13.6.30",
+    "zod": "^3.24.0"
   },
   "peerDependencies": {
     "@ai-sdk/anthropic": ">=1",