@agent-native/core 0.103.1 → 0.105.0

package/corpus/templates/slides/app/lib/validate-native-slide-html.ts

@@ -0,0 +1,176 @@
+const MAX_NATIVE_SLIDE_BYTES = 64 * 1024 * 1024;
+
+const ALLOWED_TAGS = new Set([
+  "a",
+  "br",
+  "div",
+  "img",
+  "p",
+  "span",
+  "table",
+  "tbody",
+  "td",
+  "tr",
+]);
+
+const ALLOWED_ATTRIBUTES = new Set([
+  "alt",
+  "class",
+  "colspan",
+  "data-fallback-reason",
+  "data-source-object-id",
+  "data-source-slide-id",
+  "rowspan",
+  "src",
+  "style",
+]);
+
+const ALLOWED_CSS_PROPERTIES = new Set([
+  "align-items",
+  "background",
+  "background-color",
+  "border",
+  "border-bottom",
+  "border-collapse",
+  "border-left",
+  "border-radius",
+  "border-right",
+  "border-top",
+  "box-sizing",
+  "clip-path",
+  "color",
+  "display",
+  "direction",
+  "font",
+  "font-family",
+  "font-size",
+  "font-style",
+  "font-variant",
+  "font-weight",
+  "filter",
+  "flex-direction",
+  "height",
+  "justify-content",
+  "left",
+  "line-height",
+  "margin",
+  "object-fit",
+  "opacity",
+  "overflow",
+  "padding",
+  "padding-bottom",
+  "padding-left",
+  "padding-right",
+  "padding-top",
+  "position",
+  "table-layout",
+  "text-align",
+  "text-decoration",
+  "text-indent",
+  "top",
+  "transform",
+  "transform-origin",
+  "vertical-align",
+  "width",
+  "z-index",
+]);
+
+export function validateNativeSlideHtml(html: string): string {
+  if (new TextEncoder().encode(html).byteLength > MAX_NATIVE_SLIDE_BYTES) {
+    throw new Error("Slides-native artifact exceeds the 64 MiB clone limit.");
+  }
+  if (
+    !/^<div\s[^>]*class="[^"]*\bfmd-slide\b[^"]*\bgoogle-slides-native\b/i.test(
+      html.trimStart(),
+    )
+  ) {
+    throw new Error("Slides-native artifact is missing its compiler root.");
+  }
+  if (
+    /<\/?(?:script|style|svg|iframe|object|embed|link|meta|form|input|button)\b/i.test(
+      html,
+    ) ||
+    /\son[a-z]+\s*=/i.test(html) ||
+    /\s(?:href|srcset|srcdoc)\s*=/i.test(html)
+  ) {
+    throw new Error("Slides-native artifact contains forbidden active markup.");
+  }
+
+  for (const match of html.matchAll(/<\/?([a-z][a-z0-9-]*)([^>]*)>/gi)) {
+    const tag = match[1]!.toLowerCase();
+    if (!ALLOWED_TAGS.has(tag)) {
+      throw new Error(
+        `Slides-native artifact contains forbidden <${tag}> markup.`,
+      );
+    }
+    if (match[0].startsWith("</") || tag === "br") continue;
+    validateAttributes(tag, match[2] ?? "");
+  }
+  return html;
+}
+
+function validateAttributes(tag: string, source: string): void {
+  let consumed = "";
+  for (const match of source.matchAll(/\s+([a-z][a-z0-9-]*)="([^"]*)"/gi)) {
+    const name = match[1]!.toLowerCase();
+    const value = match[2] ?? "";
+    if (!ALLOWED_ATTRIBUTES.has(name)) {
+      throw new Error(
+        `Slides-native artifact contains forbidden ${name} attribute.`,
+      );
+    }
+    if (name === "src") {
+      if (
+        tag !== "img" ||
+        !/^\/_agent-native\/creative-context\/media\?mediaId=ccm_[a-f0-9]{28}$/.test(
+          value,
+        )
+      ) {
+        throw new Error("Slides-native artifact contains an unsafe asset URL.");
+      }
+    }
+    if (name === "class") {
+      for (const token of value.split(/\s+/).filter(Boolean)) {
+        if (
+          token !== "fmd-slide" &&
+          token !== "google-slides-native" &&
+          token !== "google-slides-source-canvas" &&
+          !/^gslide-[a-z0-9_-]+$/.test(token)
+        ) {
+          throw new Error(
+            "Slides-native artifact contains an unexpected class.",
+          );
+        }
+      }
+    }
+    if (name === "style") validateStyle(value);
+    consumed += match[0];
+  }
+  const remainder = source.replace(consumed, "").replace(/\/$/, "").trim();
+  if (remainder) {
+    throw new Error("Slides-native artifact contains malformed attributes.");
+  }
+}
+
+function validateStyle(value: string): void {
+  if (
+    /(?:url\s*\(|expression\s*\(|@import|javascript:|vbscript:|data:|\\)/i.test(
+      value,
+    )
+  ) {
+    throw new Error("Slides-native artifact contains unsafe CSS.");
+  }
+  for (const declaration of value.split(";")) {
+    if (!declaration.trim()) continue;
+    const separator = declaration.indexOf(":");
+    if (separator <= 0) {
+      throw new Error("Slides-native artifact contains malformed CSS.");
+    }
+    const property = declaration.slice(0, separator).trim().toLowerCase();
+    if (!ALLOWED_CSS_PROPERTIES.has(property)) {
+      throw new Error(
+        `Slides-native artifact contains forbidden ${property} CSS.`,
+      );
+    }
+  }
+}

package/corpus/templates/slides/app/routes/agent.tsx

@@ -1,4 +1,5 @@
 import { AgentTabsPage, useT } from "@agent-native/core/client";
+import { createCreativeContextAgentTab } from "@agent-native/creative-context/client";
 import { useSetPageTitle } from "@agent-native/toolkit/app-shell";
 
 import messages from "@/i18n/en-US";
@@ -11,5 +12,10 @@ export default function AgentRoute() {
   const t = useT();
   useSetPageTitle(t("settings.agentTitle"));
 
-  return <AgentTabsPage appName="Slides" />;
+  return (
+    <AgentTabsPage
+      appName="Slides"
+      extraTabFactories={[createCreativeContextAgentTab]}
+    />
+  );
 }

package/corpus/templates/slides/app/routes/settings.tsx

@@ -7,6 +7,7 @@ import {
   type SettingsSearchEntry,
 } from "@agent-native/core/client";
 import { TeamPage } from "@agent-native/core/client/org";
+import { CreativeContextSettingsLink } from "@agent-native/creative-context/client";
 import { useSetPageTitle } from "@agent-native/toolkit/app-shell";
 import { useMemo } from "react";
 
@@ -54,6 +55,8 @@ export default function SettingsRoute() {
             {t("settings.description")}
           </p>
 
+          <CreativeContextSettingsLink />
+
           <Card id="language" className="scroll-mt-16">
             <CardHeader>
               <CardTitle className="text-base">

package/corpus/templates/slides/changelog/2026-07-16-creative-context-library.md

@@ -0,0 +1,6 @@
+---
+type: added
+date: 2026-07-16
+---
+
+The Agent workspace now includes a Library for reusing verified creative context and choosing when it applies to presentations.

package/corpus/templates/slides/changelog/2026-07-16-google-slides-native-cloning.md

@@ -0,0 +1,6 @@
+---
+type: added
+date: 2026-07-16
+---
+
+Google Slides references can now be cloned as editable slides with their original layout, text, shapes, tables, and images intact.

package/corpus/templates/slides/package.json

@@ -15,6 +15,7 @@
   },
   "dependencies": {
     "@agent-native/core": "workspace:*",
+    "@agent-native/creative-context": "workspace:*",
     "@agent-native/pinpoint": "workspace:*",
     "@agent-native/toolkit": "workspace:*",
     "@dnd-kit/core": "^6.3.1",

package/corpus/templates/slides/server/handlers/import/docx-parser.ts

@@ -1,85 +1,4 @@
-export interface ParsedDocument {
-  title: string;
-  html: string;
-  text: string;
-  sections: { heading: string; content: string }[];
-}
-
-export async function parseDocx(fileBuffer: Buffer): Promise<ParsedDocument> {
-  const mammoth = await import("mammoth");
-
-  const htmlResult = await mammoth.convertToHtml({ buffer: fileBuffer });
-  const html = htmlResult.value;
-
-  const textResult = await mammoth.extractRawText({ buffer: fileBuffer });
-  const text = textResult.value;
-
-  // Parse sections by splitting on headings in the HTML
-  const sections = extractSections(html);
-
-  // Derive title from the first heading or first line of text
-  let title = "Imported Document";
-  if (sections.length > 0 && sections[0].heading) {
-    title = sections[0].heading;
-  } else {
-    const firstLine = text.split("\n").find((l) => l.trim().length > 0);
-    if (firstLine && firstLine.trim().length < 200) {
-      title = firstLine.trim();
-    }
-  }
-
-  return { title, html, text, sections };
-}
-
-/** Split HTML into sections based on h1/h2/h3 tags. */
-function extractSections(html: string): { heading: string; content: string }[] {
-  const sections: { heading: string; content: string }[] = [];
-
-  // Split on heading tags, keeping the delimiter
-  const parts = html.split(/(?=<h[1-3][^>]*>)/i);
-
-  for (const part of parts) {
-    const trimmed = part.trim();
-    if (!trimmed) continue;
-
-    // Try to extract the heading text
-    const headingMatch = trimmed.match(/^<h[1-3][^>]*>(.*?)<\/h[1-3]>/is);
-
-    if (headingMatch) {
-      const heading = stripHtmlTags(headingMatch[1]).trim();
-      const content = trimmed.slice(headingMatch[0].length).trim();
-      sections.push({ heading, content });
-    } else {
-      // Content before the first heading
-      if (sections.length === 0) {
-        sections.push({ heading: "", content: trimmed });
-      } else {
-        // Append to previous section
-        sections[sections.length - 1].content += "\n" + trimmed;
-      }
-    }
-  }
-
-  // If no headings were found, treat the whole document as one section
-  if (sections.length === 0 && html.trim()) {
-    // Try splitting by paragraphs for a rough section breakdown
-    const paragraphs = html
-      .split(/<\/p>/i)
-      .map((p) => p.trim())
-      .filter(Boolean);
-
-    if (paragraphs.length > 0) {
-      const firstText = stripHtmlTags(paragraphs[0]).trim();
-      sections.push({
-        heading: firstText.length < 200 ? firstText : "",
-        content: html,
-      });
-    }
-  }
-
-  return sections;
-}
-
-function stripHtmlTags(html: string): string {
-  return html.replace(/<[^>]+>/g, "");
-}
+export {
+  parseDocxDocument as parseDocx,
+  type ParsedDocxDocument as ParsedDocument,
+} from "@agent-native/core/ingestion";