@terreno/agent-plugin 57.21.0 → 58.0.0-beta.2

package/.claude-plugin/plugin.json

@@ -28,5 +28,5 @@
   "name": "terreno",
   "repository": "https://github.com/TerrenoLabs/terreno",
   "skills": "./skills/",
-  "version": "57.21.0"
+  "version": "58.0.0-beta.2"
 }

package/CHANGELOG.md

@@ -20,6 +20,95 @@ Upgrade notes for consumer action live in [`mcp-server/src/docs/upgrades/`](mcp-
 
 Unreleased changes live in [`changelog/unreleased/`](changelog/unreleased/). Add one Markdown file per feature (see that directory's README) instead of editing this section.
 
+## [58.0.0-beta.2] - 2026-11-03
+
+Upgrade note: [`mcp-server/src/docs/upgrades/58.0.0-beta.2.md`](mcp-server/src/docs/upgrades/58.0.0-beta.2.md).
+
+### Breaking
+
+- Terreno 58 targets Expo SDK 58 (`~58.0.14`), React Native `0.88.0`, and React `19.3.0`. `@terreno/ui` peers `react-native` `0.88.0`. Native catalog moves with the SDK: `react-native-gesture-handler` `~3.3.0`, `react-native-reanimated` `4.7.1` + `react-native-worklets` `0.13.0`, `react-native-screens` `~4.30.0`, `react-native-webview` `14.0.1`, `@sentry/react-native` `~8.28.0`, `@shopify/flash-list` `2.3.2`, `@shopify/react-native-skia` `2.14.0`. Rebuild dev clients and store binaries.
+- Expo Router 58: set `export const unstable_settings = {initialRouteName}` on the layout instead of passing `initialRouteName` to `<Slot>` / navigators. `SidebarNavigation` ignores the prop.
+- Expo Router 58 static rendering: a custom `app/+html.tsx` must render `headNodes` and `bodyNodes` from `useServerDocumentContext()` (`expo-router/html`), or exported pages ship without their JavaScript. `example-frontend` is updated.
+- React Native 0.88 generated types: type refs as `ViewInstance`, `TextInstance`, `ScrollViewInstance`, and `TextInputInstance` (`Box.scrollRef`, `TextField.inputRef`, `Text` `ref`).
+- `create-terreno-app` scaffolds Expo `~58.0.14`, React Native `0.88.0`, and React `19.3.0`.
+- The Terreno 58 native module baseline lands in `example-frontend` and `demo`: `@stripe/stripe-react-native` 0.81.0, `react-native-purchases` and `react-native-purchases-ui` 10.12.2, `expo-device`, `expo-crypto`, `expo-local-authentication`, `expo-system-ui`, and `expo-build-properties` (Android Kotlin 2.2.21 and `compileSdkVersion` 37 pins). Rebuild every dev client and store binary. `react-native-otp-verify` is left out because it does not support the New Architecture. The demo has a hidden **Native Modules** page that shows each module's version and whether the running binary links it. See the 58.0.0 upgrade note.
+- `TerrenoApp` turns HTTP rate limiting on by default. Omitting `rateLimit` now mounts the limiter with the memory store (auth 20 / 15 min, api 600 / 15 min). Pass `rateLimit: false` to turn it off. On Cloud Run pass `rateLimit: {trustProxy: 1}` so unauthenticated traffic keys by client IP. See the 58.0.0 upgrade note.
+- `@terreno/admin-frontend` no longer takes an RTK `api`. The `api` prop is removed from every admin component (`AdminProvider`, `AdminShellLayout`, `AdminHome`, `AdminModelList`, `AdminModelTable`, `AdminModelForm`, `AdminScreenRouter`, `ConfigurationScreen`, `DocumentStorageBrowser`, `ConsentHistory`, comms, jobs, org, consent, and announcement screens, and widget props), and admin hooks drop their `api` argument (`useAdminConfig(apiBase)`, `useAdminScripts(apiBase)`, `useAdminRoles(apiBase)`, `useConfigurationApi({basePath})`, `useDocumentStorageApi(basePath)`, `useConsentHistory(baseUrl)`, `useOrganizationsApi(basePath)`, `useCommsDashboardApi()`, `useJobsDashboardApi()`, and the `useAiObservability*Api()` hooks).
+- `useAdminApi(api, routePath, modelName)` is removed. Use `useAdminModelApi(routePath, modelName)`, which keeps the same hook names and calls the same `/admin/{routePath}` URLs through the admin fetch client. `AdminApi`, `EndpointBuilder`, and admin `injectEndpoints` are gone; `@reduxjs/toolkit` and `react-redux` are no longer peers of admin-frontend.
+- `AdminProvider` is now the required auth binding for every admin request, including ObjectId and API-only model CRUD. Cookie SPAs pass `credentials="same-origin"`; embedded apps pass `apiOrigin` and `getAuthHeaders`. Product screens that reuse admin components wrap them in `AdminProvider`. See the 58.0.0 upgrade guide.
+- Removed the legacy RTK realtime path. Use `sync` on `modelRouter` with `@terreno/syncdb` for live collection updates. `RealtimeApp`, `SyncApp`, socket auth, `sync:delta`, and admin `admin:model.changed` events are unchanged. See the 58.0.0 upgrade note.
+- `@terreno/api`: `modelRouter` no longer accepts `realtime` (now a TypeScript error), and the change stream no longer emits the `sync` websocket event. Removed `RealtimeConfig`, `RealtimeEvent`, `DocumentSubscription`, `QuerySubscription`, `registerRealtime`, `getRealtimeRegistry`, `findRegistryEntryByCollection`, `findRegistryEntryByRoutePath`, `updateRealtimeRegistryOptions`, `clearRealtimeRegistry`, `RealtimeRegistryEntry`, the query-subscription store (`addQuerySubscription`, `removeQuerySubscription`, `removeAllSocketQueries`, `getQuerySubscriptionsForCollection`, `computeQueryId`, `clearQueryStore`), and `MAX_MODEL_SUBSCRIPTIONS` / `MAX_DOCUMENT_SUBSCRIPTIONS` / `MAX_QUERY_SUBSCRIPTIONS`. Sockets no longer handle `subscribe:model`, `subscribe:document`, or `subscribe:query`.
+- `@terreno/rtk`: removed `realtimeList`, `realtimeDocument`, `setRealtimeSocket`, `getRealtimeSocket`, `useSyncConnection`, and the `RealtimeEvent` type. The rest of `@terreno/rtk` (including `useSocketConnection` and `useRealtimeDebug`) is removed in the same release; see `remove-rtk.md`.
+- Removed `@terreno/rtk` and every Redux dependency (`@reduxjs/toolkit`, `react-redux`, `redux-persist`, `@rtk-query/codegen-openapi`). `@terreno/rtk` is not published for 58. `@terreno/syncdb` is the only frontend data, request, and session layer. Follow `docs/how-to/migrate-rtk-to-syncdb.md`, which maps every removed export to its replacement, and the 58.0.0 upgrade note.
+- `@terreno/syncdb` adds `@terreno/syncdb/api` (`createApiClient`, `ApiError`), request hooks in `@terreno/syncdb/react` (`ApiClientProvider`, `useApiQuery`, `useLazyApiQuery`, `useApiMutation`, `useSocketEvent`), `@terreno/syncdb/config` (`baseUrl`, `baseWebsocketsUrl`, `appHeaders`), `@terreno/syncdb/auth` (`createBetterAuthClient`, `SessionProvider`, `useSession`, `jwtAuthAdapter`, `useJwtAuth`, token-expiry helpers), `@terreno/syncdb/flags` (`useFeatureFlags`, `useTerrenoFeatureFlags` on the sync socket), `@terreno/syncdb/app` (`useUpgradeCheck`, `hasPermission`, `canOpenAdminPage`, `installDevConsoleLogger`, `useMCPTools`), and `@terreno/syncdb/buildNumber`.
+- `terreno-syncdb-codegen --api-out` generates typed hooks for every non-synced OpenAPI operation (same names as the RTK codegen), replacing `@rtk-query/codegen-openapi`. `bun run sdk` writes `store/apiSdk.ts`.
+- `@terreno/ui` `ConsentNavigator`, `AnnouncementNavigator`, `useConsentForms`, `useSubmitConsent`, `useAnnouncements`, and `useAcknowledgeAnnouncement` take a request `client` instead of an RTK `api`.
+- `GptHistory` (`gpt/histories`) is a synced collection and keeps its ObjectId `_id` (no migration). `McpServiceToken` (`mcp/service-tokens`, read-only) is a synced collection with String ids; run `mcpServiceTokenStringIdsMigration` (`@terreno/api`) before deploying 58 frontends.
+- `create-terreno-app`, the `terreno_bootstrap` prompt, and the `terreno_generate_screen` tool scaffold apps without Redux or `@terreno/rtk`. The terreno-mcp-local `get_rtk_state` tool, the MCP resource `terreno://docs/rtk`, and `terreno state --slice rtk` are removed; use `get_syncdb_state` and `terreno state`.
+
+### Added
+
+- `DataTable` columns size themselves when `width` is omitted. Each auto column starts at the wider of its header and its content (sampled from at most 50 rows, measured with a canvas on web and estimated on native), clamped to 80–360px, and auto columns grow to fill the table's container. Columns that set `width` keep it. `DataTableColumn.width` is now optional.
+- `@terreno/syncdb` `createSyncDb({idFormats})` mints 24-hex ObjectIds for a collection set to `"objectId"`, so a model that keeps Mongoose's default ObjectId `_id` can sync without migrating its ids. `mutate()` throws on an explicit non-hex id for such a collection. `generateObjectId` and the `SyncIdFormat` type are exported.
+- Sync `validation` nacks carry an optional `reason`: `invalid_id` when an ObjectId-keyed collection gets a non-hex id (rejected before the mutation is claimed), and `id_collision` when a create names an `_id` another document holds. A collision never touches the existing document and its message never names the holder. The ledger records the reason (`SyncMutation.nackReason`) so a redelivery replays it.
+- `GET /sync/entities` leaves out non-hex ids for an ObjectId-keyed model instead of answering 400, so a rejected create queued for repair cannot fail the rest of the repair batch.
+
+### Changed
+
+- The repository's agent rules now generate with rulesync 17 (up from 9). The root rule `.rulesync/rules/00-root.md` now generates `AGENTS.md`, which Devin and other AGENTS.md readers load, in place of `.devin/rules/00-root.md`. Never edit `AGENTS.md` by hand: edit the root rule and run `bun run rules`. The examples that existed only in the old hand-edited `AGENTS.md` (syncdb and RTK SDK usage) moved into the root rule, so `CLAUDE.md`, the Cursor root rule, and Copilot instructions get them too. Links in the root rule now resolve from the repository root. Generated Copilot hooks use the portable `command` field. Generated Copilot subagents no longer list `agent/runSubagent` as their only tool, so they get every default tool. Generated skills carry their `license`, `disable-model-invocation`, and Devin `triggers` frontmatter.
+- `@terreno/syncdb/auth` `SessionProvider`: `logout()` no longer clears the session before the server answers. The session stays in the state until `authClient.signOut()` finishes (`signOutTimeoutMs`, default 10 seconds), and then it is cleared. Meanwhile the new `isSigningOut` state (`useSession().isSigningOut`) is true; `isLoading` is left alone, so a navigator gated on it keeps its screen. Before, a login screen that opened at once could find the still-live session and sign the user straight back in. A sign-out that fails or times out checks the session first. A session that is still live, or a cookie or native session the server cannot be asked about, stays signed in, and `error` is set to `SIGN_OUT_FAILED_MESSAGE` ("Couldn't sign out. Check your connection and try again."). A web bearer client, which drops its token before the request leaves, ends signed out. The global `auth/logout` action (a refused session) now ends signed out even when the sign-out request fails. With `apisToReset` (57.17.0), `logout()` purges the cache when the session clears, not when it is dispatched: a purge at dispatch refetched every mounted screen mid-sign-out, and a refetch that could not reach the server answered 401 and signed the user out even though the sign-out failed. A failed sign-out keeps both the session and the cache. The global `auth/logout` action still purges at once (only the first of several in flight) and again when the session clears. A sign-in for another user that lands while a sign-out is in flight is kept; a sign-out that started signed out asks `getSession` first, so a restore of the session it revoked is cleared. Show `selectBetterAuthIsSigningOut` on the sign-out control and `selectBetterAuthError` after a failed sign-out.
+
+### Removed
+
+- `@terreno/ui` no longer exports the `Filter` and `FilterProps` aliases deprecated in 57.7.0. Import `DropdownPanel` and `DropdownPanelProps` instead. `FilterSelectMenu`, `FilterBoolean`, `FilterAccordion`, and `FilterChangesBadge` keep their names.
+
+### Fixed
+
+- `@terreno/syncdb`: logging out while `syncDb.start()` is still running no longer loses local writes or logs errors. `start()` now resolves the web encryption key from `GET /sync/key` before it loads the store, so the flush in `stop()` never needs the network after the session has ended. A `stop()` or `signOut()` call now cancels a `start()` that is running or queued ahead of it, so the transport never connects without a session. A failed key fetch is now retried on the next save instead of failing every save for the rest of the session.
+
+## [58.0.0-beta.1] - 2026-11-02
+
+Upgrade note: [`mcp-server/src/docs/upgrades/58.0.0-beta.1.md`](mcp-server/src/docs/upgrades/58.0.0-beta.1.md).
+
+### Breaking
+
+- Terreno 58 targets Expo SDK 58 (`~58.0.14`), React Native `0.88.0`, and React `19.3.0`. `@terreno/ui` peers `react-native` `0.88.0`. Native catalog moves with the SDK: `react-native-gesture-handler` `~3.3.0`, `react-native-reanimated` `4.7.1` + `react-native-worklets` `0.13.0`, `react-native-screens` `~4.30.0`, `react-native-webview` `14.0.1`, `@sentry/react-native` `~8.28.0`, `@shopify/flash-list` `2.3.2`, `@shopify/react-native-skia` `2.14.0`. Rebuild dev clients and store binaries.
+- Expo Router 58: set `export const unstable_settings = {initialRouteName}` on the layout instead of passing `initialRouteName` to `<Slot>` / navigators. `SidebarNavigation` ignores the prop.
+- Expo Router 58 static rendering: a custom `app/+html.tsx` must render `headNodes` and `bodyNodes` from `useServerDocumentContext()` (`expo-router/html`), or exported pages ship without their JavaScript. `example-frontend` is updated.
+- React Native 0.88 generated types: type refs as `ViewInstance`, `TextInstance`, `ScrollViewInstance`, and `TextInputInstance` (`Box.scrollRef`, `TextField.inputRef`, `Text` `ref`).
+- `create-terreno-app` scaffolds Expo `~58.0.14`, React Native `0.88.0`, and React `19.3.0`.
+- The Terreno 58 native module baseline lands in `example-frontend` and `demo`: `@stripe/stripe-react-native` 0.81.0, `react-native-purchases` and `react-native-purchases-ui` 10.12.2, `expo-device`, `expo-crypto`, `expo-local-authentication`, `expo-system-ui`, and `expo-build-properties` (Android Kotlin 2.2.21 and `compileSdkVersion` 37 pins). Rebuild every dev client and store binary. `react-native-otp-verify` is left out because it does not support the New Architecture. The demo has a hidden **Native Modules** page that shows each module's version and whether the running binary links it. See the 58.0.0 upgrade note.
+- `TerrenoApp` turns HTTP rate limiting on by default. Omitting `rateLimit` now mounts the limiter with the memory store (auth 20 / 15 min, api 600 / 15 min). Pass `rateLimit: false` to turn it off. On Cloud Run pass `rateLimit: {trustProxy: 1}` so unauthenticated traffic keys by client IP. See the 58.0.0 upgrade note.
+- `@terreno/admin-frontend` no longer takes an RTK `api`. The `api` prop is removed from every admin component (`AdminProvider`, `AdminShellLayout`, `AdminHome`, `AdminModelList`, `AdminModelTable`, `AdminModelForm`, `AdminScreenRouter`, `ConfigurationScreen`, `DocumentStorageBrowser`, `ConsentHistory`, comms, jobs, org, consent, and announcement screens, and widget props), and admin hooks drop their `api` argument (`useAdminConfig(apiBase)`, `useAdminScripts(apiBase)`, `useAdminRoles(apiBase)`, `useConfigurationApi({basePath})`, `useDocumentStorageApi(basePath)`, `useConsentHistory(baseUrl)`, `useOrganizationsApi(basePath)`, `useCommsDashboardApi()`, `useJobsDashboardApi()`, and the `useAiObservability*Api()` hooks).
+- `useAdminApi(api, routePath, modelName)` is removed. Use `useAdminModelApi(routePath, modelName)`, which keeps the same hook names and calls the same `/admin/{routePath}` URLs through the admin fetch client. `AdminApi`, `EndpointBuilder`, and admin `injectEndpoints` are gone; `@reduxjs/toolkit` and `react-redux` are no longer peers of admin-frontend.
+- `AdminProvider` is now the required auth binding for every admin request, including ObjectId and API-only model CRUD. Cookie SPAs pass `credentials="same-origin"`; embedded apps pass `apiOrigin` and `getAuthHeaders`. Product screens that reuse admin components wrap them in `AdminProvider`. See the 58.0.0 upgrade guide.
+- Removed the legacy RTK realtime path. Use `sync` on `modelRouter` with `@terreno/syncdb` for live collection updates. `RealtimeApp`, `SyncApp`, socket auth, `sync:delta`, and admin `admin:model.changed` events are unchanged. See the 58.0.0 upgrade note.
+- `@terreno/api`: `modelRouter` no longer accepts `realtime` (now a TypeScript error), and the change stream no longer emits the `sync` websocket event. Removed `RealtimeConfig`, `RealtimeEvent`, `DocumentSubscription`, `QuerySubscription`, `registerRealtime`, `getRealtimeRegistry`, `findRegistryEntryByCollection`, `findRegistryEntryByRoutePath`, `updateRealtimeRegistryOptions`, `clearRealtimeRegistry`, `RealtimeRegistryEntry`, the query-subscription store (`addQuerySubscription`, `removeQuerySubscription`, `removeAllSocketQueries`, `getQuerySubscriptionsForCollection`, `computeQueryId`, `clearQueryStore`), and `MAX_MODEL_SUBSCRIPTIONS` / `MAX_DOCUMENT_SUBSCRIPTIONS` / `MAX_QUERY_SUBSCRIPTIONS`. Sockets no longer handle `subscribe:model`, `subscribe:document`, or `subscribe:query`.
+- `@terreno/rtk`: removed `realtimeList`, `realtimeDocument`, `setRealtimeSocket`, `getRealtimeSocket`, `useSyncConnection`, and the `RealtimeEvent` type. The rest of `@terreno/rtk` (including `useSocketConnection` and `useRealtimeDebug`) is removed in the same release; see `remove-rtk.md`.
+- Removed `@terreno/rtk` and every Redux dependency (`@reduxjs/toolkit`, `react-redux`, `redux-persist`, `@rtk-query/codegen-openapi`). `@terreno/rtk` is not published for 58. `@terreno/syncdb` is the only frontend data, request, and session layer. Follow `docs/how-to/migrate-rtk-to-syncdb.md`, which maps every removed export to its replacement, and the 58.0.0 upgrade note.
+- `@terreno/syncdb` adds `@terreno/syncdb/api` (`createApiClient`, `ApiError`), request hooks in `@terreno/syncdb/react` (`ApiClientProvider`, `useApiQuery`, `useLazyApiQuery`, `useApiMutation`, `useSocketEvent`), `@terreno/syncdb/config` (`baseUrl`, `baseWebsocketsUrl`, `appHeaders`), `@terreno/syncdb/auth` (`createBetterAuthClient`, `SessionProvider`, `useSession`, `jwtAuthAdapter`, `useJwtAuth`, token-expiry helpers), `@terreno/syncdb/flags` (`useFeatureFlags`, `useTerrenoFeatureFlags` on the sync socket), `@terreno/syncdb/app` (`useUpgradeCheck`, `hasPermission`, `canOpenAdminPage`, `installDevConsoleLogger`, `useMCPTools`), and `@terreno/syncdb/buildNumber`.
+- `terreno-syncdb-codegen --api-out` generates typed hooks for every non-synced OpenAPI operation (same names as the RTK codegen), replacing `@rtk-query/codegen-openapi`. `bun run sdk` writes `store/apiSdk.ts`.
+- `@terreno/ui` `ConsentNavigator`, `AnnouncementNavigator`, `useConsentForms`, `useSubmitConsent`, `useAnnouncements`, and `useAcknowledgeAnnouncement` take a request `client` instead of an RTK `api`.
+- `GptHistory` (`gpt/histories`) and `McpServiceToken` (`mcp/service-tokens`, read-only) are synced collections with String ids. Run the `gptHistoryStringIdsMigration` (`@terreno/ai`) and `mcpServiceTokenStringIdsMigration` (`@terreno/api`) before deploying 58 frontends.
+- `create-terreno-app`, the `terreno_bootstrap` prompt, and the `terreno_generate_screen` tool scaffold apps without Redux or `@terreno/rtk`. The terreno-mcp-local `get_rtk_state` tool, the MCP resource `terreno://docs/rtk`, and `terreno state --slice rtk` are removed; use `get_syncdb_state` and `terreno state`.
+
+### Added
+
+- `DataTable` columns size themselves when `width` is omitted. Each auto column starts at the wider of its header and its content (sampled from at most 50 rows, measured with a canvas on web and estimated on native), clamped to 80–360px, and auto columns grow to fill the table's container. Columns that set `width` keep it. `DataTableColumn.width` is now optional.
+
+### Changed
+
+- The repository's agent rules now generate with rulesync 17 (up from 9). The root rule `.rulesync/rules/00-root.md` now generates `AGENTS.md`, which Devin and other AGENTS.md readers load, in place of `.devin/rules/00-root.md`. Never edit `AGENTS.md` by hand: edit the root rule and run `bun run rules`. The examples that existed only in the old hand-edited `AGENTS.md` (syncdb and RTK SDK usage) moved into the root rule, so `CLAUDE.md`, the Cursor root rule, and Copilot instructions get them too. Links in the root rule now resolve from the repository root. Generated Copilot hooks use the portable `command` field. Generated Copilot subagents no longer list `agent/runSubagent` as their only tool, so they get every default tool. Generated skills carry their `license`, `disable-model-invocation`, and Devin `triggers` frontmatter.
+- `@terreno/syncdb/auth` `SessionProvider`: `logout()` no longer clears the session before the server answers. The session stays in the state until `authClient.signOut()` finishes (`signOutTimeoutMs`, default 10 seconds), and then it is cleared. Meanwhile the new `isSigningOut` state (`useSession().isSigningOut`) is true; `isLoading` is left alone, so a navigator gated on it keeps its screen. Before, a login screen that opened at once could find the still-live session and sign the user straight back in. A sign-out that fails or times out checks the session first. A session that is still live, or a cookie or native session the server cannot be asked about, stays signed in, and `error` is set to `SIGN_OUT_FAILED_MESSAGE` ("Couldn't sign out. Check your connection and try again."). A web bearer client, which drops its token before the request leaves, ends signed out. The global `auth/logout` action (a refused session) now ends signed out even when the sign-out request fails. With `apisToReset` (57.17.0), `logout()` purges the cache when the session clears, not when it is dispatched: a purge at dispatch refetched every mounted screen mid-sign-out, and a refetch that could not reach the server answered 401 and signed the user out even though the sign-out failed. A failed sign-out keeps both the session and the cache. The global `auth/logout` action still purges at once (only the first of several in flight) and again when the session clears. A sign-in for another user that lands while a sign-out is in flight is kept; a sign-out that started signed out asks `getSession` first, so a restore of the session it revoked is cleared. Show `selectBetterAuthIsSigningOut` on the sign-out control and `selectBetterAuthError` after a failed sign-out.
+
+### Removed
+
+- `@terreno/ui` no longer exports the `Filter` and `FilterProps` aliases deprecated in 57.7.0. Import `DropdownPanel` and `DropdownPanelProps` instead. `FilterSelectMenu`, `FilterBoolean`, `FilterAccordion`, and `FilterChangesBadge` keep their names.
+
+### Fixed
+
+- `@terreno/syncdb`: logging out while `syncDb.start()` is still running no longer loses local writes or logs errors. `start()` now resolves the web encryption key from `GET /sync/key` before it loads the store, so the flush in `stop()` never needs the network after the session has ended. A `stop()` or `signOut()` call now cancels a `start()` that is running or queued ahead of it, so the transport never connects without a session. A failed key fetch is now retried on the next save instead of failing every save for the rest of the session.
+
 ## [57.21.0] - 2026-11-01
 
 Upgrade note: [`mcp-server/src/docs/upgrades/57.21.0.md`](mcp-server/src/docs/upgrades/57.21.0.md).

package/package.json

@@ -30,5 +30,5 @@
     "type": "git",
     "url": "git+https://github.com/TerrenoLabs/terreno.git"
   },
-  "version": "57.21.0"
+  "version": "58.0.0-beta.2"
 }

package/skills/building-admin-interfaces/SKILL.md

@@ -37,9 +37,10 @@ and [Build admin screens](../../../../docs/how-to/build-admin-screens.md).
    no per-model copy of the table exists.
 5. UI: `@terreno/ui` + `AdminScreenPage` for custom screens; `color="transparent"`
    inside the shell. String-`_id` models with `adminBroadcast` use windowed
-   syncdb; framework RPC uses host-bound `adminRequest`; ObjectId compatibility
-   CRUD keeps `useAdminApi` in Terreno 57. Done when there is no app-owned
-   `fetch`/`axios` or new admin `injectEndpoints`.
+   syncdb; ObjectId/API-only model CRUD uses `useAdminModelApi`; custom RPC uses
+   `useAdminRpc` + `useAdminRpcQuery`. All of it goes through the `AdminProvider`
+   fetch client. Done when there is no app-owned `fetch`/`axios` and no `api`
+   prop on admin components.
 6. Verify with `verify-ui-changes` on the example admin or admin-spa. Done when
    home, sidebar, and the new flow are exercised as an admin user.
 
@@ -56,11 +57,13 @@ references/
 
 - Do not hand-roll a DataTable per model. Use `AdminModelTable` / `AdminScreenRouter`.
 - Do not put a second sidebar inside a screen. `AdminShell` owns nav.
-- Do not add new admin `injectEndpoints`. Terreno 58 removes `useAdminApi` and
-  the required `api` prop; use windowed syncdb for eligible model CRUD.
+- Do not pass an `api` prop to admin components (removed in Terreno 58).
+  `AdminProvider` (`credentials` for cookie SPAs, `apiOrigin` = `baseUrl` from
+  `@terreno/syncdb/config` + `getAuthHeaders` reading the app's
+  `authProvider.getToken()` for embedded apps) is the only auth binding.
 - Do not invent sidebar entries. Config (filtered by RBAC) is the nav source.
 - Do not use `router.back()` as the custom-screen back action; use `AdminScreenPage`.
-- Do not edit `openApiSdk.ts` by hand.
+- Do not edit generated `store/apiSdk.ts` / `store/syncDbSdk.ts` by hand.
 
 ## Decision tree
 

package/skills/building-admin-interfaces/references/nav-and-shell.md

@@ -38,5 +38,5 @@ relocates those two into Platform.
 ## Auth gate
 
 `admin:access` opens the page (`GET /admin/config` 403 without it). Hosts call
-`canOpenAdminPage({admin, permissions})` from `@terreno/rtk` and hide product
+`canOpenAdminPage({admin, permissions})` from `@terreno/syncdb/app` and hide product
 nav to admin with the same check.

package/skills/building-admin-interfaces/references/patterns-and-tools.md

@@ -43,10 +43,11 @@ Reference: [admin-config](../../../../../docs/reference/admin-config.md).
 ## Data and MCP
 
 - Admin String-`_id` collection CRUD: windowed syncdb with `adminBroadcast`.
-- Framework admin RPC: host-bound `adminRequest`; do not add `injectEndpoints`.
-- ObjectId/API-only compatibility CRUD: `useAdminApi` until Terreno 58.
+- ObjectId/API-only model CRUD: `useAdminModelApi(routePath, modelName)`.
+- Framework and custom admin RPC: `useAdminRpc` + `useAdminRpcQuery` /
+  `useAdminRpcMutation` over the `AdminProvider` client.
 - After backend route changes: `cd example-frontend && bun run sdk` (non-synced
-  only). Do not generate RTK CRUD for synced product collections.
+  routes, `store/apiSdk.ts`) and `bun run sync-sdk` (synced collections).
 - MCP: `terreno_install_admin` scaffolds wiring; still follow this skill for
   screens and nav. `terreno_search_docs` / `terreno_get_component_docs` for APIs.
 

package/skills/building-terreno-apps/SKILL.md

@@ -2,12 +2,12 @@
 name: building-terreno-apps
 description: >-
   Complete guide for building Terreno full-stack Expo apps with @terreno/ui,
-  Expo Router, and @terreno/rtk. Covers layout, forms, navigation, theming,
+  Expo Router, and @terreno/syncdb. Covers layout, forms, navigation, theming,
   screen patterns, and when to use Expo Go vs custom builds.
 ---
 # Building Terreno Apps
 
-Use this skill when building or refactoring screens in a Terreno Expo app (`example-frontend`, `admin-spa`, or a consumer app using `@terreno/ui` + `@terreno/rtk`).
+Use this skill when building or refactoring screens in a Terreno Expo app (`example-frontend`, `admin-spa`, or a consumer app using `@terreno/ui` + `@terreno/syncdb`). Terreno 58 apps have no Redux and no `@terreno/rtk`; upgrade old apps with `docs/how-to/migrate-rtk-to-syncdb.md`.
 
 **Related skills:** `terreno-ui` (component selection), `terreno-data-fetching` (API hooks), `verify-ui-changes` (mandatory UI verification), `generate-sdk` (after backend changes), `building-admin-interfaces` (admin shell, custom screens, sidebar).
 
@@ -42,29 +42,43 @@ Admin CRUD, sidebar, custom screens, and `apiBase`/`routeBase`: use skill
 
 ## Provider Stack
 
-Every Terreno app root layout should wrap children in this order (outer → inner):
+Every Terreno app root layout wraps children in this order (outer → inner). There is no
+Redux store.
 
 ```tsx
-import {Provider} from "react-redux";
-import {PersistGate} from "redux-persist/integration/react";
+import {SessionProvider} from "@terreno/syncdb/auth";
+import {ApiClientProvider, SyncDbProvider} from "@terreno/syncdb/react";
 import {TerrenoProvider} from "@terreno/ui";
-// Import from your app's store bootstrap module (see example-frontend/store/index.ts)
-import store, {persistor} from "../store/index.ts";
+import {betterAuthClient} from "@/lib/betterAuth";
+import {apiClient} from "@/store/apiClient";
+import {syncDb} from "@/store/syncdb";
 
 const RootLayout: React.FC = () => {
   return (
-    <Provider store={store}>
-      <PersistGate loading={null} persistor={persistor}>
+    <SessionProvider authClient={betterAuthClient} syncDbs={[syncDb]} onLogout={() => apiClient.reset()}>
+      <ApiClientProvider client={apiClient}>
         <TerrenoProvider>
-          <Stack />
+          <SyncDbProvider client={syncDb}>
+            <Stack />
+          </SyncDbProvider>
         </TerrenoProvider>
-      </PersistGate>
-    </Provider>
+      </ApiClientProvider>
+    </SessionProvider>
   );
 };
 ```
 
-See `example-frontend/app/_layout.tsx` for the full pattern including auth routing, sockets, and feature flags.
+| File | Holds |
+|------|-------|
+| `lib/betterAuth.ts` | `createBetterAuthClient` (`@terreno/syncdb/auth`) |
+| `store/syncdb.ts` | Shared `authProvider` + `createSyncDb` client |
+| `store/apiClient.ts` | `createApiClient` (`@terreno/syncdb/api`) for non-synced routes |
+| `store/apiSdk.ts` | Generated request hooks — never edit |
+| `store/syncDbSdk.ts` | Generated `SYNC_COLLECTIONS` + collection hooks — never edit |
+
+See `example-frontend/app/_layout.tsx` for the full pattern including auth routing,
+`syncDb.start()` on login, feature flags, consents, and announcements. App-wide UI state
+uses React context or `useStoredState` from `@terreno/ui`.
 
 ## Code Style
 
@@ -119,20 +133,23 @@ Use the spacing scale via props (`padding={4}` → 16px). Prefer `gap` over marg
 
 ## Data on Screens
 
-Never call `fetch` or `axios` in screen components. Use generated RTK Query hooks:
+Never call `fetch` or `axios` in screen components. Synced collections use syncdb hooks;
+every other route uses the generated hooks in `store/apiSdk.ts`:
 
 ```tsx
-import {useGetTodosQuery, usePostTodosMutation} from "@/store/sdk";
+import {useMutate, useQuery} from "@terreno/syncdb/react";
+import {useGetAuthMeQuery} from "@/store/apiSdk";
 
-const {data, isLoading, error, refetch} = useGetTodosQuery({});
-const [createTodo, {isLoading: isCreating}] = usePostTodosMutation();
+const todos = useQuery<Todo>("todos", {sort: "-created"});
+const {create, update, remove} = useMutate("todos");
+const {data: me, isLoading, error, refetch} = useGetAuthMeQuery();
 ```
 
 See `terreno-data-fetching` for auth, caching, and error handling.
 
 ## Forms
 
-Use `@terreno/ui` form fields with local state and RTK mutations:
+Use `@terreno/ui` form fields with local state. Synced writes apply locally and never throw:
 
 ```tsx
 import {Button, TextField} from "@terreno/ui";
@@ -145,13 +162,9 @@ const handleSubmit = useCallback(async (): Promise<void> => {
     setTitleError("Title is required");
     return;
   }
-  try {
-    await createTodo({title: title.trim(), completed: false}).unwrap();
-    setTitle("");
-  } catch (err) {
-    console.error("Failed to create todo", err);
-  }
-}, [createTodo, title]);
+  create({data: {_id: generateMutationId(), title: title.trim(), completed: false}});
+  setTitle("");
+}, [create, title]);
 
 <TextField
   title="Title"
@@ -159,7 +172,7 @@ const handleSubmit = useCallback(async (): Promise<void> => {
   onChange={setTitle}
   errorText={titleError}
 />
-<Button text="Create" onClick={handleSubmit} loading={isCreating} />
+<Button text="Create" onClick={handleSubmit} />
 ```
 
 ## Navigation
@@ -173,7 +186,8 @@ See `./references/navigation.md` and `./references/route-structure.md`.
 
 ## Loading, Error, and Empty States
 
-Every data-driven screen must handle all three:
+Every screen that loads data over the request client must handle all three (synced
+collections are local after bootstrap, so they need only the empty state):
 
 ```tsx
 if (isLoading) {
@@ -187,7 +201,7 @@ if (error) {
     </Page>
   );
 }
-if (!data?.data?.length) {
+if (!data?.length) {
   return (
     <Page title="Todos">
       <Text>No todos yet</Text>
@@ -216,10 +230,10 @@ Building or changing a screen?
   |   \-- Page for full screens, Box for sections, Card for grouped content
   |
   |-- Need data from API?
-  |   \-- terreno-data-fetching (RTK Query hooks, never raw fetch)
+  |   \-- terreno-data-fetching (syncdb + generated apiSdk hooks, never raw fetch)
   |
   |-- Need a form?
-  |   \-- @terreno/ui TextField/SelectField/DateTimeField + local state + mutation
+  |   \-- @terreno/ui TextField/SelectField/DateTimeField + local state + useMutate / generated mutation
   |
   |-- Need navigation?
   |   \-- references/navigation.md (Expo Router + auth gating)
@@ -261,16 +275,16 @@ useEffect(() => {
 }, []);
 ```
 
-**Right: Generated RTK Query hook**
+**Right: syncdb hook for a synced collection**
 
 ```tsx
-const {data} = useGetTodosQuery({});
+const todos = useQuery<Todo>("todos");
 ```
 
-**Wrong: Editing openApiSdk.ts by hand**
+**Wrong: Editing store/apiSdk.ts by hand**
 
 ```tsx
-// Manually adding a hook to store/openApiSdk.ts
+// Manually adding a hook to store/apiSdk.ts
 ```
 
 **Right: Regenerate SDK after backend changes**

package/skills/building-terreno-apps/agents/openai.yaml

@@ -1,4 +1,4 @@
 interface:
   display_name: "Building Terreno Apps"
-  short_description: "Build Terreno Expo apps with @terreno/ui layout, RTK Query data, Expo Router navigation, and mandatory UI verification"
-  default_prompt: "Use $building-terreno-apps to build or refactor a Terreno screen with @terreno/ui components, generated RTK Query hooks, and Expo Router navigation."
+  short_description: "Build Terreno Expo apps with @terreno/ui layout, @terreno/syncdb data and session, Expo Router navigation, and mandatory UI verification"
+  default_prompt: "Use $building-terreno-apps to build or refactor a Terreno screen with @terreno/ui components, @terreno/syncdb hooks, generated store/apiSdk.ts hooks, and Expo Router navigation."

package/skills/building-terreno-apps/references/navigation.md

@@ -6,34 +6,40 @@ Terreno-specific navigation patterns.
 
 ## Auth flow
 
-1. Root `_layout.tsx` checks `useSelectCurrentUserId()` from `@terreno/rtk`.
+1. Root `_layout.tsx` reads `useSession()` from `@terreno/syncdb/auth`.
 2. Unauthenticated users redirect to `/login`.
-3. Login screen calls `useEmailLoginMutation()` (from generated SDK via `generateAuthSlice`).
-4. On success, tokens are stored automatically and `setUserId` is dispatched.
-5. Root layout redirects to `/(tabs)` or the intended deep link.
+3. Login calls `betterAuthClient.signIn.email`, then `useSession().refresh()`.
+4. Once `userId` is set, the root layout starts syncdb and redirects to `/(tabs)` or the
+   intended deep link.
 
 ```tsx
-import {useEmailLoginMutation} from "@/store/sdk";
-import {Button, TextField, Page, Box} from "@terreno/ui";
+import {useSession} from "@terreno/syncdb/auth";
+import {Box, Button, Page, TextField} from "@terreno/ui";
+import {betterAuthClient} from "@/lib/betterAuth";
 
 const LoginScreen: React.FC = () => {
+  const {refresh} = useSession();
   const [email, setEmail] = useState<string>("");
   const [password, setPassword] = useState<string>("");
-  const [login, {isLoading, error}] = useEmailLoginMutation();
+  const [isLoading, setIsLoading] = useState<boolean>(false);
+  const [error, setError] = useState<string | undefined>();
 
   const handleLogin = useCallback(async (): Promise<void> => {
-    try {
-      await login({email, password}).unwrap();
-    } catch (err) {
-      console.error("Login failed", err);
+    setIsLoading(true);
+    const result = await betterAuthClient.signIn.email({email, password});
+    setIsLoading(false);
+    if (result.error) {
+      setError(result.error.message ?? "Login failed");
+      return;
     }
-  }, [email, login, password]);
+    await refresh();
+  }, [email, password, refresh]);
 
   return (
     <Page title="Login" scroll>
       <Box gap={3} padding={4}>
         <TextField title="Email" value={email} onChange={setEmail} type="email" />
-        <TextField title="Password" value={password} onChange={setPassword} type="password" />
+        <TextField title="Password" value={password} onChange={setPassword} type="password" errorText={error} />
         <Button text="Sign in" onClick={handleLogin} loading={isLoading} fullWidth />
       </Box>
     </Page>
@@ -87,7 +93,7 @@ For confirmation dialogs and action sheets, prefer `@terreno/ui` `Modal` or `Act
 
 ## Deep linking
 
-Configure `scheme` in `app.json`. Terreno RTK resolves API base URLs from `EXPO_PUBLIC_API_URL` or `expo.extra.BASE_URL` — keep deep link schemes separate from API URLs.
+Configure `scheme` in `app.json`. `@terreno/syncdb/config` resolves API base URLs from `expo.extra.BASE_URL` or `EXPO_PUBLIC_API_URL` — keep deep link schemes separate from API URLs.
 
 ## Programmatic navigation
 

package/skills/building-terreno-apps/references/route-structure.md

@@ -28,10 +28,13 @@ app/
       [id].tsx             # AdminModelForm (edit)
 components/                # Screen components (NOT in app/)
 hooks/                     # Custom hooks
+lib/
+  betterAuth.ts            # createBetterAuthClient (@terreno/syncdb/auth)
 store/
-  index.ts                 # Redux store + generateAuthSlice
-  sdk.ts                   # Hand-maintained SDK extensions
-  openApiSdk.ts            # Generated — never edit manually
+  syncdb.ts                # Shared authProvider + createSyncDb client
+  apiClient.ts             # createApiClient for non-synced routes
+  apiSdk.ts                # Generated request hooks — never edit manually
+  syncDbSdk.ts             # Generated collection hooks — never edit manually
 ```
 
 ### Rules
@@ -49,12 +52,15 @@ store/
 
 ```tsx
 import {Redirect, Stack, useSegments} from "expo-router";
-import {useSelectCurrentUserId} from "@terreno/rtk";
+import {useSession} from "@terreno/syncdb/auth";
 
 const RootLayoutNav: React.FC = () => {
-  const userId = useSelectCurrentUserId();
+  const {userId, isLoading} = useSession();
   const segments = useSegments();
 
+  if (isLoading) {
+    return null;
+  }
   if (!userId && segments[0] !== "login") {
     return <Redirect href="/login" />;
   }
@@ -71,21 +77,28 @@ const RootLayoutNav: React.FC = () => {
 Wrap admin routes once in `app/admin/_layout.tsx`:
 
 ```tsx
-import {AdminShellLayout} from "@terreno/admin-frontend";
+import {AdminProvider, AdminShellLayout} from "@terreno/admin-frontend";
+import {baseUrl} from "@terreno/syncdb/config";
 import {Stack} from "expo-router";
-import {terrenoApi} from "@/store/sdk";
+import {getAdminAuthHeaders} from "@/store/syncdb"; // Bearer header from authProvider.getToken()
 
 export default function AdminLayout(): React.ReactElement {
   return (
-    <AdminShellLayout
-      api={terrenoApi}
+    <AdminProvider
       apiBase="/admin"
-      configurationPath="/admin/configuration"
+      apiOrigin={baseUrl}
+      getAuthHeaders={getAdminAuthHeaders}
       routeBase="/admin"
-      versionConfigPath="/version-config"
     >
-      <Stack screenOptions={{headerShown: false, contentStyle: {flex: 1}}} />
-    </AdminShellLayout>
+      <AdminShellLayout
+        apiBase="/admin"
+        configurationPath="/admin/configuration"
+        routeBase="/admin"
+        versionConfigPath="/version-config"
+      >
+        <Stack screenOptions={{headerShown: false, contentStyle: {flex: 1}}} />
+      </AdminShellLayout>
+    </AdminProvider>
   );
 }
 ```