@softr/sdk 0.0.90-alpha.3 → 0.0.90-alpha.5

package/dist/app-identity.js

@@ -0,0 +1,77 @@
+import { version } from "./package.js";
+import { assert } from "./assertions.js";
+import { createMiddleware } from "@tanstack/react-start";
+import * as startServer from "@tanstack/react-start/server";
+
+//#region src/app-identity.ts
+const HTML_TAG = new TextEncoder().encode("<html");
+const HTML_TAG_SEARCH_LIMIT = 1024;
+/**
+* Marks every HTML page with the Softr app it belongs to and the SDK version it
+* runs on, so support can read both from the page source.
+*
+* They go on `<html>` as `data-appid` and `data-sdk-version`, and
+* in a comment just before it. React keeps the attributes when it hydrates, but
+* drops them if it ever renders the document again on the client. The comment
+* sits outside what React owns, so it always stays.
+*/
+function appIdentityMiddleware() {
+	return createMiddleware({ type: "request" }).server(async ({ next }) => {
+		const result = await next();
+		const { response } = result;
+		if (!response.body || !response.headers.get("content-type")?.startsWith("text/html")) return result;
+		const applicationId = process.env.SOFTR_APPLICATION_ID;
+		if (!applicationId) return result;
+		assert(/^[\w-]+$/.test(applicationId), `SOFTR_APPLICATION_ID is not an id: "${applicationId}"`);
+		const encoder = new TextEncoder();
+		const comment = encoder.encode(`<!-- Softr app ${applicationId}, @softr/sdk ${version} -->`);
+		const attributes = encoder.encode(` data-appid="${applicationId}" data-sdk-version="${version}"`);
+		let held = new Uint8Array(0);
+		let done = false;
+		const body = response.body.pipeThrough(new TransformStream({
+			transform(chunk, controller) {
+				if (done) {
+					controller.enqueue(chunk);
+					return;
+				}
+				const bytes = new Uint8Array(held.length + chunk.length);
+				bytes.set(held);
+				bytes.set(chunk, held.length);
+				let at = -1;
+				search: for (let i = 0; i + HTML_TAG.length < bytes.length; i++) {
+					for (let j = 0; j < HTML_TAG.length; j++) if (bytes[i + j] !== HTML_TAG[j]) continue search;
+					const after = bytes[i + HTML_TAG.length];
+					if (after === 32 || after === 62) {
+						at = i;
+						break;
+					}
+				}
+				if (at === -1) {
+					if (bytes.length > HTML_TAG_SEARCH_LIMIT) {
+						done = true;
+						controller.enqueue(bytes);
+						return;
+					}
+					held = bytes;
+					return;
+				}
+				done = true;
+				const end = at + HTML_TAG.length;
+				controller.enqueue(bytes.subarray(0, at));
+				controller.enqueue(comment);
+				controller.enqueue(bytes.subarray(at, end));
+				controller.enqueue(attributes);
+				controller.enqueue(bytes.subarray(end));
+			},
+			flush(controller) {
+				if (!done) controller.enqueue(held);
+			}
+		}));
+		const marked = new Response(body, response);
+		marked.headers.delete("content-length");
+		return "transferResponseBodyOwnership" in startServer ? startServer.transferResponseBodyOwnership(response, marked) : marked;
+	});
+}
+
+//#endregion
+export { appIdentityMiddleware };

package/dist/auth/isomorphic.d.ts

@@ -22,7 +22,7 @@ import * as _tanstack_react_start0 from "@tanstack/react-start";
  *   requestMiddleware: [softrAuthMiddleware()],
  * }))
  */
-declare function softrAuthMiddleware(): _tanstack_react_start0.RequestMiddlewareAfterServer<{}, readonly [_tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>, _tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>, _tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>, _tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>], {
+declare function softrAuthMiddleware(): _tanstack_react_start0.RequestMiddlewareAfterServer<{}, readonly [_tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>, _tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>, _tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>, _tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>, _tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>], {
   user: User | null;
   permissions: Permissions;
   formatting: Formatting;

package/dist/auth/isomorphic.js

@@ -10,6 +10,7 @@ import { bootErrorMiddleware } from "../boot-error.js";
 import { pwaMiddleware } from "../pwa.js";
 import { faviconMiddleware } from "../favicon.js";
 import { embeddingMiddleware } from "../embedding.js";
+import { appIdentityMiddleware } from "../app-identity.js";
 import { createContext, useContext } from "react";
 import { createMiddleware, createServerFn, getGlobalStartContext } from "@tanstack/react-start";
 import { getRequestHeader } from "@tanstack/react-start/server";
@@ -34,6 +35,7 @@ import { jsx } from "react/jsx-runtime";
 function softrAuthMiddleware() {
 	return createMiddleware({ type: "request" }).middleware([
 		embeddingMiddleware(),
+		appIdentityMiddleware(),
 		bootErrorMiddleware(),
 		pwaMiddleware(),
 		faviconMiddleware()

package/dist/formatting.d.ts

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import * as react0 from "react";
+import * as react2 from "react";
 import { ReactNode } from "react";
 
 //#region src/formatting.d.ts
@@ -94,7 +94,7 @@ declare function FormattingScope({
   /** A BCP 47 locale, such as `de-DE`. It drops the app's fixed date format inside the scope. */
   locale?: string;
   children?: ReactNode;
-}): react0.FunctionComponentElement<react0.ProviderProps<Scope>>;
+}): react2.FunctionComponentElement<react2.ProviderProps<Scope>>;
 /**
  * A date in the app's format, safe to render on the server. A timestamp whose
  * zone is not known yet renders `fallback` until the browser supplies it, so
@@ -115,6 +115,6 @@ declare function FormattedDate({
   time?: boolean;
   /** What renders while the visitor's zone is unknown. */
   fallback?: ReactNode;
-}): react0.FunctionComponentElement<react0.FragmentProps>;
+}): react2.FunctionComponentElement<react2.FragmentProps>;
 //#endregion
 export { DateOptions, DateParts, DateSeparator, DateValue, FixedDateFormat, FormattedDate, Formatting, FormattingScope, WeekDay, formatDate, formatDateTime, formatNumber, useFormatting };

package/dist/index.d.ts

@@ -16,7 +16,5 @@ import { useOverrides } from "./core/use-overrides.js";
 import { useUserTimezone } from "./timezone.js";
 import { PwaInstall, PwaPlatform, SoftrPwaHead, usePwaInstall } from "./pwa.js";
 import { DefaultErrorOverlay } from "./default-error-overlay.js";
-import { Agent, AgentChatSummary, listAgents } from "./agent/agent-fns.js";
-import { AgentBlock, AgentChat, AgentChatOptions, AgentMessage, AgentQuestion, AgentTodo, AgentToolCall, useAgentChat } from "./agent/use-agent-chat.js";
 import { Audience } from "./route/audience.js";
-export { type ActionPermissions, type Agent, type AgentBlock, type AgentChat, type AgentChatOptions, type AgentChatSummary, type AgentMessage, type AgentQuestion, type AgentTodo, type AgentToolCall, Audience, type AuthOptions, type AuthSettings, AuthSettingsProvider, type DateOptions, type DateParts, type DateSeparator, type DateValue, DefaultErrorOverlay, type FieldShape, type FileAttachment, type FileItem, type FixedDateFormat, FormattedDate, type Formatting, FormattingScope, type Page, type PageSettings, type PwaInstall, type PwaPlatform, type SoftrContext, type SoftrDatasources, type SoftrFieldRegistry, SoftrPwaHead, type SoftrUserGroupId, type SoftrUserGroups, type SoftrUserProperties, type User, type WeekDay, assertRouteAccess, checkAccess, defineIntegration, defineMutation, definePage, defineQuery, defineVisibility, defineWorkflow, fieldShape, formatDate, formatDateTime, formatDuration, formatField, formatNumber, formatValue, getAuthSettings, getSoftrContext, guardRoute, initialSoftrContext, isAccessError, isAlreadyAuthenticatedError, isAuthorized, isForbiddenError, isUnauthenticatedError, listAgents, pageHead, registerSoftrFields, softrAuthMiddleware, softrMcpMiddleware, toReturnPath, useAgentChat, useAuthSettings, useCurrentUser, useFileUpload, useFormatting, useOverrides, usePwaInstall, useUserTimezone };
+export { type ActionPermissions, Audience, type AuthOptions, type AuthSettings, AuthSettingsProvider, type DateOptions, type DateParts, type DateSeparator, type DateValue, DefaultErrorOverlay, type FieldShape, type FileAttachment, type FileItem, type FixedDateFormat, FormattedDate, type Formatting, FormattingScope, type Page, type PageSettings, type PwaInstall, type PwaPlatform, type SoftrContext, type SoftrDatasources, type SoftrFieldRegistry, SoftrPwaHead, type SoftrUserGroupId, type SoftrUserGroups, type SoftrUserProperties, type User, type WeekDay, assertRouteAccess, checkAccess, defineIntegration, defineMutation, definePage, defineQuery, defineVisibility, defineWorkflow, fieldShape, formatDate, formatDateTime, formatDuration, formatField, formatNumber, formatValue, getAuthSettings, getSoftrContext, guardRoute, initialSoftrContext, isAccessError, isAlreadyAuthenticatedError, isAuthorized, isForbiddenError, isUnauthenticatedError, pageHead, registerSoftrFields, softrAuthMiddleware, softrMcpMiddleware, toReturnPath, useAuthSettings, useCurrentUser, useFileUpload, useFormatting, useOverrides, usePwaInstall, useUserTimezone };

package/dist/index.js

@@ -12,8 +12,6 @@ import { fieldShape, formatDuration, formatField, formatValue, registerSoftrFiel
 import { useOverrides } from "./core/use-overrides.js";
 import { useUserTimezone } from "./timezone.js";
 import { DefaultErrorOverlay } from "./default-error-overlay.js";
-import { listAgents } from "./agent/agent-fns.js";
-import { useAgentChat } from "./agent/use-agent-chat.js";
 import { Audience } from "./route/audience.js";
 
-export { Audience, AuthSettingsProvider, DefaultErrorOverlay, FormattedDate, FormattingScope, SoftrPwaHead, assertRouteAccess, checkAccess, defineIntegration, defineMutation, definePage, defineQuery, defineVisibility, defineWorkflow, fieldShape, formatDate, formatDateTime, formatDuration, formatField, formatNumber, formatValue, getAuthSettings, getSoftrContext, guardRoute, initialSoftrContext, isAccessError, isAlreadyAuthenticatedError, isAuthorized, isForbiddenError, isUnauthenticatedError, listAgents, pageHead, registerSoftrFields, softrAuthMiddleware, softrMcpMiddleware, toReturnPath, useAgentChat, useAuthSettings, useCurrentUser, useFileUpload, useFormatting, useOverrides, usePwaInstall, useUserTimezone };
+export { Audience, AuthSettingsProvider, DefaultErrorOverlay, FormattedDate, FormattingScope, SoftrPwaHead, assertRouteAccess, checkAccess, defineIntegration, defineMutation, definePage, defineQuery, defineVisibility, defineWorkflow, fieldShape, formatDate, formatDateTime, formatDuration, formatField, formatNumber, formatValue, getAuthSettings, getSoftrContext, guardRoute, initialSoftrContext, isAccessError, isAlreadyAuthenticatedError, isAuthorized, isForbiddenError, isUnauthenticatedError, pageHead, registerSoftrFields, softrAuthMiddleware, softrMcpMiddleware, toReturnPath, useAuthSettings, useCurrentUser, useFileUpload, useFormatting, useOverrides, usePwaInstall, useUserTimezone };

package/dist/mcp.js

@@ -244,8 +244,7 @@ const WHOAMI = {
 		type: "object",
 		properties: {},
 		additionalProperties: false
-	},
-	annotations: { readOnlyHint: true }
+	}
 };
 /** How many records a read returns when the caller does not say. */
 const DEFAULT_LIMIT = 20;
@@ -266,7 +265,6 @@ function describeTool(action) {
 		case "read": return {
 			name: action.id,
 			description: `Read records from "${action.id}". Returns the fields ${names.join(", ")}. Only records the signed-in user may see come back.`,
-			annotations: { readOnlyHint: true },
 			inputSchema: {
 				type: "object",
 				properties: {
@@ -387,10 +385,8 @@ async function rpc(request, origin, actions) {
 	const token = bearerToken(request);
 	if (token === null) return unauthorized(origin);
 	const session = await platformSession(token);
-	let sessionToken;
-	if (session.ok) sessionToken = session.sessionToken;
-	else if (session.refused && await resolveUser(token) !== null) sessionToken = token;
-	else return session.refused ? unauthorized(origin) : unavailable();
+	if (!session.ok) return session.refused ? unauthorized(origin) : unavailable();
+	const { sessionToken } = session;
 	const body = await readJson(request);
 	const message = z.object({
 		id: z.union([z.string(), z.number()]).optional(),

package/dist/package.js

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.0.90-alpha.3";
+var version = "0.0.90-alpha.5";
 
 //#endregion
 export { version };

package/dist/pwa.d.ts

@@ -1,4 +1,4 @@
-import * as react4 from "react";
+import * as react0 from "react";
 import "@tanstack/react-start";
 
 //#region src/pwa.d.ts
@@ -23,7 +23,7 @@ import "@tanstack/react-start";
  *   )
  * }
  */
-declare function SoftrPwaHead(): react4.FunctionComponentElement<react4.FragmentProps>;
+declare function SoftrPwaHead(): react0.FunctionComponentElement<react0.FragmentProps>;
 type PwaPlatform = "ios" | "android" | "desktop";
 type PwaInstall = {
   available: false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softr/sdk",
-  "version": "0.0.90-alpha.3",
+  "version": "0.0.90-alpha.5",
   "type": "module",
   "exports": {
     ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" },
@@ -21,8 +21,8 @@
   },
   "devDependencies": {
     "@tanstack/intent": "^0.3.6",
-    "@tanstack/react-router": "^1.168.0",
-    "@tanstack/react-start": "^1.168.0",
+    "@tanstack/react-router": "^1.170.41",
+    "@tanstack/react-start": "^1.168.60",
     "@types/node": "^24.3.0",
     "tsdown": "^0.15.0",
     "typescript": "^5.9.2",

package/skills/softr-sdk/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: core
   library: softr-sdk
-  library_version: 0.0.90-alpha.3
+  library_version: 0.0.90-alpha.5
 ---
 
 # Softr SDK core
@@ -49,7 +49,6 @@ Each sub-skill stands alone for its task and repeats the boundary above, so most
 | Sign a visitor in, out, or up | [auth/SKILL.md](./auth/SKILL.md) |
 | Call a connected third-party API (Slack, Stripe, Gmail, …) | [integrations/SKILL.md](./integrations/SKILL.md) |
 | Open the app to AI assistants over MCP | [mcp/SKILL.md](./mcp/SKILL.md) |
-| Let visitors chat with a Softr agent | [agent-chat/SKILL.md](./agent-chat/SKILL.md) |
 | Let visitors install the app on their home screen | [pwa/SKILL.md](./pwa/SKILL.md) |
 | Show a date, a time or a number | [formatting/SKILL.md](./formatting/SKILL.md) |
 
@@ -86,9 +85,6 @@ Calling a connected third-party API (Slack, Stripe, Gmail, Google Calendar, …)
 Opening the app to an AI assistant over MCP?
   load softr-sdk/mcp
 
-Adding a chat with one of the app's Softr agents, or a Connect button for the visitor's account it needs?
-  load softr-sdk/agent-chat
-
 Adding an install button, or making the app installable?
   load softr-sdk/pwa
 

package/skills/softr-sdk/auth/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.90-alpha.3
+  library_version: 0.0.90-alpha.5
 ---
 
 **Boundary.** `auth` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build.

package/skills/softr-sdk/charts-and-metrics/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.90-alpha.3
+  library_version: 0.0.90-alpha.5
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler or a server-side route hook — importing it into a component fails the build. `defineQuery` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/current-user/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.90-alpha.3
+  library_version: 0.0.90-alpha.5
 ---
 
 # The current user

package/skills/softr-sdk/file-uploads/SKILL.md

@@ -7,7 +7,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.90-alpha.3
+  library_version: 0.0.90-alpha.5
 ---
 
 **Boundary.** `upload` lives on `@softr/sdk/server` and runs inside server functions. `useFileUpload` and `FileItem` live on `@softr/sdk` and run in components. `FileAttachment` comes from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/formatting/SKILL.md

@@ -8,7 +8,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.90-alpha.3
+  library_version: 0.0.90-alpha.5
 ---
 
 # Dates, times and numbers

package/skills/softr-sdk/integrations/SKILL.md

@@ -7,7 +7,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.90-alpha.3
+  library_version: 0.0.90-alpha.5
 ---
 
 **Boundary.** `integration` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineIntegration` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/mcp/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.90-alpha.3
+  library_version: 0.0.90-alpha.5
 ---
 
 **Boundary.** `softrMcpMiddleware` lives on `@softr/sdk` and is registered once, in `src/start.ts`. The actions you hand it are the same `defineQuery` / `defineMutation` values the app's own pages use — declared wherever they already live, not duplicated for MCP.

package/skills/softr-sdk/pwa/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.90-alpha.3
+  library_version: 0.0.90-alpha.5
 ---
 
 # Installing the app

package/skills/softr-sdk/record-mutations/SKILL.md

@@ -8,7 +8,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.90-alpha.3
+  library_version: 0.0.90-alpha.5
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineMutation` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/record-queries/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.90-alpha.3
+  library_version: 0.0.90-alpha.5
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler or a server-side route hook — importing it into a component fails the build. The same holds for any helper that calls `ds`: declare it inside the handler. A function at module level that calls `ds` keeps the server-only import in the browser bundle, and every page stops loading until it moves. `defineQuery` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/region-visibility/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.90-alpha.3
+  library_version: 0.0.90-alpha.5
 ---
 
 **Boundary.** `Audience` and `defineVisibility` come from `@softr/sdk` and work anywhere.

package/skills/softr-sdk/routes-and-visibility/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.90-alpha.3
+  library_version: 0.0.90-alpha.5
 ---
 
 **Boundary.** `definePage`, `pageHead`, the access functions and the error predicates come from `@softr/sdk` and work anywhere.

package/skills/softr-sdk/workflows/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.90-alpha.3
+  library_version: 0.0.90-alpha.5
 ---
 
 **Boundary.** `workflow` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineWorkflow` and every type come from `@softr/sdk` and can be imported anywhere.

package/dist/agent/agent-fns.d.ts

@@ -1,30 +0,0 @@
-import { z } from "zod";
-import * as _tanstack_react_start8 from "@tanstack/react-start";
-
-//#region src/agent/agent-fns.d.ts
-
-declare const agentSchema: z.ZodObject<{
-  id: z.ZodString;
-  title: z.ZodString;
-  avatar: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-  thumbnail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-}, z.core.$strip>;
-/** An agent the visitor may chat with. */
-type Agent = z.infer<typeof agentSchema>;
-/**
- * The agents the visitor may chat with in this app. The builder attaches them
- * in Studio, and each one's visibility settings decide who sees it.
- */
-declare const listAgents: _tanstack_react_start8.OptionalFetcher<undefined, undefined, Promise<{
-  id: string;
-  title: string;
-  avatar?: string | null | undefined;
-  thumbnail?: string | null | undefined;
-}[]>>;
-/** One past chat with an agent. `title` is null until the agent names the chat. */
-type AgentChatSummary = {
-  id: string;
-  title: string | null;
-};
-//#endregion
-export { Agent, AgentChatSummary, listAgents };

package/dist/agent/agent-fns.js

@@ -1,215 +0,0 @@
-import { assert } from "../assertions.js";
-import { softrApiUrl } from "../softr-api.js";
-import { fetch } from "../fetch.js";
-import { sessionConfig } from "../auth/config.js";
-import { readSessionToken } from "../auth/session.js";
-import { describeFailure, refererHeader } from "../datasource/record.js";
-import { z } from "zod";
-import { createServerFn } from "@tanstack/react-start";
-import { getRequest } from "@tanstack/react-start/server";
-
-//#region src/agent/agent-fns.ts
-const AGENTS_PRODUCTION = "https://agents-api.softr.io";
-const PLATFORM_HOST = /^(platform-api|platform-preview-api|preview-api)(?=[.-])/;
-/**
-* Where the agents service is. It sits next to the platform API, so unless
-* `SOFTR_AGENTS_API_URL` says otherwise, it's the platform's host with
-* `agents-api` in place of the platform's name. Live and preview share one
-* agents service.
-*/
-function agentsApiUrl() {
-	const explicit = process.env.SOFTR_AGENTS_API_URL;
-	if (explicit) return explicit.replace(/\/+$/, "");
-	if (!process.env.SOFTR_PLATFORM_API_URL) return AGENTS_PRODUCTION;
-	const platform = new URL(softrApiUrl("SOFTR_PLATFORM_API_URL"));
-	assert(PLATFORM_HOST.test(platform.hostname), () => `can't tell the agents API from ${platform.origin}, set SOFTR_AGENTS_API_URL`);
-	platform.hostname = platform.hostname.replace(PLATFORM_HOST, "agents-api");
-	return platform.origin;
-}
-function agentsFetch(path, init = {}) {
-	const token = readSessionToken();
-	return fetch(`${agentsApiUrl()}/v1/agents/${path}`, {
-		method: init.method ?? "GET",
-		signal: init.signal,
-		headers: {
-			"Content-Type": "application/json",
-			...token ? { Authorization: `Bearer ${token}` } : {},
-			"Softr-Application-ID": sessionConfig().applicationId,
-			...refererHeader(),
-			...init.headers
-		},
-		body: init.body === void 0 ? void 0 : JSON.stringify(init.body)
-	});
-}
-const chatSchema = z.object({
-	agentId: z.string().min(1),
-	message: z.string(),
-	sessionId: z.string().nullable(),
-	timezone: z.string(),
-	pageName: z.string(),
-	pageUrl: z.string(),
-	record: z.object({
-		id: z.string(),
-		fields: z.record(z.string(), z.unknown())
-	}).nullable()
-});
-/**
-* Sends one message and streams the reply back as it comes, one JSON event per line.
-*
-* Takes FormData so the browser can call it with plain `fetch` and read the
-* stream itself. A failed call passes the agents service's status and message on.
-*/
-const agentChatFn = createServerFn({ method: "POST" }).validator((data) => {
-	const payload = data.get("payload");
-	assert(typeof payload === "string", "agent chat: payload is required");
-	return chatSchema.parse(JSON.parse(payload));
-}).handler(async ({ data }) => {
-	const upstream = await agentsFetch(`${encodeURIComponent(data.agentId)}/chat`, {
-		method: "POST",
-		signal: getRequest().signal,
-		headers: {
-			Accept: "application/x-ndjson",
-			"X-User-Timezone": data.timezone
-		},
-		body: {
-			message: data.message,
-			...data.sessionId ? { sessionId: data.sessionId } : {},
-			context: {
-				pageName: data.pageName,
-				pageUrl: data.pageUrl,
-				...data.record ? { currentRecord: { data: data.record } } : {}
-			}
-		}
-	});
-	return new Response(upstream.body, {
-		status: upstream.status,
-		headers: { "Content-Type": upstream.headers.get("Content-Type") ?? "application/x-ndjson" }
-	});
-});
-const agentSchema = z.object({
-	id: z.string(),
-	title: z.string(),
-	avatar: z.string().nullish(),
-	thumbnail: z.string().nullish()
-});
-/**
-* The agents the visitor may chat with in this app. The builder attaches them
-* in Studio, and each one's visibility settings decide who sees it.
-*/
-const listAgents = createServerFn({ method: "GET" }).handler(async () => {
-	const token = readSessionToken();
-	const res = await fetch(`${softrApiUrl("SOFTR_PLATFORM_API_URL")}/v1/vibe/applications/${sessionConfig().applicationId}/agents`, { headers: token ? { Authorization: `Bearer ${token}` } : {} });
-	if (!res.ok) throw new Error(`Loading agents failed: ${await describeFailure(res)}`);
-	return z.array(agentSchema).parse(await res.json());
-});
-const listAgentChatsFn = createServerFn({ method: "POST" }).validator(z.object({ agentId: z.string().min(1) })).handler(async ({ data }) => {
-	const res = await agentsFetch(`${encodeURIComponent(data.agentId)}/sessions`);
-	if (!res.ok) throw new Error(`Loading chats failed: ${await describeFailure(res)}`);
-	return z.array(z.object({
-		id: z.string(),
-		title: z.string().nullable()
-	})).parse(await res.json());
-});
-const historySchema = z.object({
-	messages: z.array(z.object({
-		id: z.string(),
-		role: z.enum(["USER", "ASSISTANT"]),
-		content: z.string(),
-		createdAt: z.number()
-	})),
-	toolCalls: z.array(z.object({
-		id: z.string(),
-		messageId: z.string(),
-		toolName: z.string(),
-		input: z.string(),
-		createdAt: z.number(),
-		metadata: z.object({
-			innerThought: z.string().nullish(),
-			durationMs: z.number().nullish(),
-			failed: z.boolean().nullish()
-		})
-	}))
-});
-const CHAT_GONE = [
-	401,
-	403,
-	404,
-	410
-];
-/** What a past chat holds, or `null` when it's gone or belongs to someone else. */
-const loadAgentChatFn = createServerFn({ method: "POST" }).validator(z.object({
-	agentId: z.string().min(1),
-	sessionId: z.string().min(1)
-})).handler(async ({ data }) => {
-	const res = await agentsFetch(`${encodeURIComponent(data.agentId)}/sessions/${encodeURIComponent(data.sessionId)}`);
-	if (CHAT_GONE.includes(res.status)) return null;
-	if (!res.ok) throw new Error(`Loading the chat failed: ${await describeFailure(res)}`);
-	return historySchema.parse(await res.json());
-});
-/** Saves the visitor's answer. `false` when the chat is gone, see `loadAgentChatFn`. */
-const decideAgentToolFn = createServerFn({ method: "POST" }).validator(z.object({
-	agentId: z.string().min(1),
-	sessionId: z.string().min(1),
-	toolCallId: z.string().min(1),
-	toolName: z.string().min(1),
-	decision: z.enum(["APPROVE", "REJECT"]),
-	scope: z.enum([
-		"ONCE",
-		"SESSION",
-		"USER"
-	])
-})).handler(async ({ data: { agentId,...decision } }) => {
-	const res = await agentsFetch(`${encodeURIComponent(agentId)}/tool-permission-decisions`, {
-		method: "POST",
-		body: decision
-	});
-	if (CHAT_GONE.includes(res.status)) return false;
-	if (!res.ok) throw new Error(`Saving the answer failed: ${await describeFailure(res)}`);
-	return true;
-});
-const connectionSchema = z.object({
-	integration: z.string().min(1),
-	requestId: z.string().min(1)
-});
-function connectionUrl({ integration, requestId }, step) {
-	const { applicationId } = sessionConfig();
-	const provider = encodeURIComponent(integration.toLowerCase());
-	return `${`${softrApiUrl("SOFTR_DATASOURCE_API_URL")}/v1/datasource/applications/${applicationId}`}/integrations/${provider}/oauth/${step}?${new URLSearchParams({ requestId })}`;
-}
-/** The sign-in page to open in the popup. */
-const startAgentConnectionFn = createServerFn({ method: "POST" }).validator(connectionSchema).handler(async ({ data }) => {
-	const token = readSessionToken();
-	const res = await fetch(connectionUrl(data, "register"), {
-		method: "POST",
-		headers: {
-			...token ? { Authorization: `Bearer ${token}` } : {},
-			...refererHeader()
-		}
-	});
-	if (!res.ok) throw new Error(`Starting the connection failed: ${await describeFailure(res)}`);
-	return z.object({ url: z.string() }).parse(await res.json()).url;
-});
-/** Waits a while for the visitor to finish signing in. `false` when they haven't yet. */
-const awaitAgentConnectionFn = createServerFn({ method: "POST" }).validator(connectionSchema).handler(async ({ data }) => {
-	const res = await fetch(connectionUrl(data, "register-result"), { signal: getRequest().signal });
-	if (res.status === 503) return false;
-	if (!res.ok) throw new Error(`Connecting failed: ${await describeFailure(res)}`);
-	return true;
-});
-/** Tells the agent the account is connected. `false` when the chat is gone, see `loadAgentChatFn`. */
-const finishAgentConnectionFn = createServerFn({ method: "POST" }).validator(z.object({
-	agentId: z.string().min(1),
-	sessionId: z.string().min(1),
-	toolCallId: z.string().min(1)
-})).handler(async ({ data: { agentId,...completion } }) => {
-	const res = await agentsFetch(`${encodeURIComponent(agentId)}/integration-auth-completions`, {
-		method: "POST",
-		body: completion
-	});
-	if (CHAT_GONE.includes(res.status)) return false;
-	if (!res.ok) throw new Error(`Finishing the connection failed: ${await describeFailure(res)}`);
-	return true;
-});
-
-//#endregion
-export { agentChatFn, awaitAgentConnectionFn, decideAgentToolFn, finishAgentConnectionFn, listAgentChatsFn, listAgents, loadAgentChatFn, startAgentConnectionFn };