@agent-native/core 0.113.0 → 0.114.1

package/dist/provider-api/runtime.d.ts

@@ -0,0 +1,2 @@
+export * from "./index.js";
+//# sourceMappingURL=runtime.d.ts.map

package/dist/provider-api/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/provider-api/runtime.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC"}

package/dist/provider-api/runtime.js

@@ -0,0 +1,2 @@
+export * from "./index.js";
+//# sourceMappingURL=runtime.js.map

package/dist/provider-api/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/provider-api/runtime.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC","sourcesContent":["export * from \"./index.js\";\n"]}

package/dist/resources/handlers.d.ts

@@ -49,8 +49,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/server/action-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action-routes.d.ts","sourceRoot":"","sources":["../../src/server/action-routes.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAWhE,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,wBAAwB,CAAC;AAwChC,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,eAAe,GAC5B,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAMrB;AA2HD;;;;;;;GAOG;AACH,MAAM,MAAM,yBAAyB,GAAG,oBAAoB,GAAG;IAC7D;;;;;;;;OAQG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,WAAW,sBAAsB;IACrC;;;;;;;;;;;;;;OAcG;IACH,aAAa,CAAC,EAAE,CACd,KAAK,EAAE,GAAG,KAER,yBAAyB,GACzB,IAAI,GACJ,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,wBAAwB;IACvC,gEAAgE;IAChE,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,8DAA8D;IAC9D,oBAAoB,CAAC,EAAE,CACrB,KAAK,EAAE,GAAG,KACP,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACtD,0DAA0D;IAC1D,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACtE;;;;OAIG;IACH,eAAe,CAAC,EAAE,sBAAsB,CAAC;CAC1C;AA4BD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,GAAG,EACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EACpC,OAAO,CAAC,EAAE,wBAAwB,QAqTnC"}
+{"version":3,"file":"action-routes.d.ts","sourceRoot":"","sources":["../../src/server/action-routes.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAWhE,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,wBAAwB,CAAC;AA4DhC,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,eAAe,GAC5B,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAMrB;AA2HD;;;;;;;GAOG;AACH,MAAM,MAAM,yBAAyB,GAAG,oBAAoB,GAAG;IAC7D;;;;;;;;OAQG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,WAAW,sBAAsB;IACrC;;;;;;;;;;;;;;OAcG;IACH,aAAa,CAAC,EAAE,CACd,KAAK,EAAE,GAAG,KAER,yBAAyB,GACzB,IAAI,GACJ,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,wBAAwB;IACvC,gEAAgE;IAChE,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,8DAA8D;IAC9D,oBAAoB,CAAC,EAAE,CACrB,KAAK,EAAE,GAAG,KACP,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACtD,0DAA0D;IAC1D,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACtE;;;;OAIG;IACH,eAAe,CAAC,EAAE,sBAAsB,CAAC;CAC1C;AA4BD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,GAAG,EACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EACpC,OAAO,CAAC,EAAE,wBAAwB,QAmVnC"}

package/dist/server/action-routes.js

@@ -9,6 +9,18 @@ import { isMcpEmbedCorsOrigin, MCP_EMBED_CORS_ALLOW_HEADERS, shouldAllowMcpEmbed
 import { notifyActionChange } from "./action-change.js";
 import { seedAgentRunOwnerContext, } from "./agent-run-context.js";
 import { getAllowedCorsOrigin as resolveAllowedCorsOrigin, readCorsAllowedOrigins, } from "./cors-origins.js";
+function requiredClientCompatibilityVersion() {
+    const configured = typeof __AGENT_NATIVE_CLIENT_COMPATIBILITY_VERSION__ === "string"
+        ? __AGENT_NATIVE_CLIENT_COMPATIBILITY_VERSION__
+        : process.env.AGENT_NATIVE_CLIENT_COMPATIBILITY_VERSION;
+    return configured?.trim() ?? "";
+}
+function currentBuildId() {
+    const configured = typeof __AGENT_NATIVE_BUILD_ID__ === "string"
+        ? __AGENT_NATIVE_BUILD_ID__
+        : process.env.AGENT_NATIVE_BUILD_ID;
+    return configured?.trim() || "unknown";
+}
 /**
  * Auto-mount actions as HTTP endpoints under /_agent-native/actions/:name.
  *
@@ -141,8 +153,8 @@ function handleOptionsRequest(event) {
         }
         setResponseHeader(event, "Access-Control-Allow-Methods", "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS");
         setResponseHeader(event, "Access-Control-Allow-Headers", cors.credentials
-            ? `Content-Type,Authorization,X-Requested-With,X-Request-Source,X-Agent-Native-CSRF,X-User-Timezone,X-Agent-Native-Tool-Bridge,X-Agent-Native-Tool-Id,X-Agent-Native-Frontend,${EMBED_TARGET_HEADER}`
-            : `${MCP_EMBED_CORS_ALLOW_HEADERS},X-Agent-Native-Tool-Bridge,X-Agent-Native-Tool-Id,X-Agent-Native-Frontend`);
+            ? `Content-Type,Authorization,X-Requested-With,X-Request-Source,X-Agent-Native-CSRF,X-User-Timezone,X-Agent-Native-Tool-Bridge,X-Agent-Native-Tool-Id,X-Agent-Native-Frontend,X-Agent-Native-Client-Compatibility,X-Agent-Native-Build-Id,${EMBED_TARGET_HEADER}`
+            : `${MCP_EMBED_CORS_ALLOW_HEADERS},X-Agent-Native-Tool-Bridge,X-Agent-Native-Tool-Id,X-Agent-Native-Frontend,X-Agent-Native-Client-Compatibility,X-Agent-Native-Build-Id`);
     }
     setResponseStatus(event, 204);
     return "";
@@ -188,11 +200,29 @@ export function mountActionRoutes(nitroApp, actions, options) {
                 return handleOptionsRequest(event);
             }
             setResponseHeader(event, "Cache-Control", "no-store");
+            setResponseHeader(event, "Access-Control-Expose-Headers", "X-Agent-Native-Client-Mismatch,X-Agent-Native-Build-Id,X-Agent-Native-Client-Compatibility");
             // Allow the declared method
             if (effectiveMethod !== method) {
                 setResponseStatus(event, 405);
                 return { error: `Method not allowed. Use ${method}.` };
             }
+            const requiredCompatibility = requiredClientCompatibilityVersion();
+            if (isFrontendActionRequest(event) && requiredCompatibility) {
+                const receivedCompatibility = getHeader(event, "x-agent-native-client-compatibility");
+                if (receivedCompatibility !== requiredCompatibility) {
+                    const serverBuildId = currentBuildId();
+                    setResponseStatus(event, 409);
+                    setResponseHeader(event, "X-Agent-Native-Client-Mismatch", "1");
+                    setResponseHeader(event, "X-Agent-Native-Build-Id", serverBuildId);
+                    setResponseHeader(event, "X-Agent-Native-Client-Compatibility", requiredCompatibility);
+                    return {
+                        error: "This browser tab must reload before it can use this app.",
+                        code: "client_build_mismatch",
+                        serverBuildId,
+                        requiredCompatibility,
+                    };
+                }
+            }
             // (audit H5) Per-action `toolCallable` opt-out for the tools-iframe
             // bridge. The bridge tags every outbound action call with
             // X-Agent-Native-Tool-Bridge: 1. When that header is present and the

package/dist/server/action-routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"action-routes.js","sourceRoot":"","sources":["../../src/server/action-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,SAAS,EACT,QAAQ,EACR,SAAS,EACT,aAAa,GACd,MAAM,IAAI,CAAC;AAEZ,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEtD,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EACL,wBAAwB,GAEzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,oBAAoB,IAAI,wBAAwB,EAChD,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B;;;;;GAKG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAE9C,KAAK,UAAU,2BAA2B,CAAC,KAAU,EAAE,UAAkB;IACvE,MAAM,QAAQ,GACZ,UAAU,KAAK,oBAAoB;QACjC,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,UAAU,KAAK,kBAAkB;YACjC,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,IAAI,CAAC;IACb,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACxD,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,6BAA6B,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS,EAAE,KAAK;QAChB,aAAa,EAAE,MAAM,CAAC,GAAG;QACzB,gBAAgB,EAAE,MAAM,CAAC,MAAM;KACH,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,YAA6B;IAE7B,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QACrD,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAA8B;IAE9B,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC/D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,IAAI,IAAI;gBAAE,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CACxB,MAA2B,EAC3B,MAAc,EACd,KAAU;IAEV,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzC,sEAAsE;IACtE,uDAAuD;IACvD,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACtD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7C,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,KAAU;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACtD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,uBAAuB,CAAC,KAAU;IACzC,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,KAAK,EAAE,yBAAyB,CAAC,KAAK,GAAG,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAOD,SAAS,oBAAoB,CAAC,MAA0B;IACtD,MAAM,aAAa,GAAG,wBAAwB,CAAC,MAAM,EAAE;QACrD,cAAc,EAAE,sBAAsB,EAAE;QACxC,sEAAsE;QACtE,8DAA8D;KAC/D,CAAC,CAAC;IACH,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACtD,CAAC;IACD,IAAI,MAAM,IAAI,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3C,OAAO;YACL,MAAM;YACN,WAAW,EAAE,8BAA8B,CAAC,MAAM,CAAC;SACpD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAU;IACtC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,oBAAoB,CAC/B,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAChD,CAAC;IAEF,IAAI,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,iBAAiB,CAAC,KAAK,EAAE,6BAA6B,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACrE,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,iBAAiB,CAAC,KAAK,EAAE,kCAAkC,EAAE,MAAM,CAAC,CAAC;QACvE,CAAC;QACD,iBAAiB,CACf,KAAK,EACL,8BAA8B,EAC9B,wCAAwC,CACzC,CAAC;QACF,iBAAiB,CACf,KAAK,EACL,8BAA8B,EAC9B,IAAI,CAAC,WAAW;YACd,CAAC,CAAC,8KAA8K,mBAAmB,EAAE;YACrM,CAAC,CAAC,GAAG,4BAA4B,4EAA4E,CAChH,CAAC;IACJ,CAAC;IAED,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC;AACZ,CAAC;AAmED,SAAS,cAAc,CAAC,KAAgC;IACtD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACzD,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QACd,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,WAAW,GAAG,KAInB,CAAC;IACF,MAAM,MAAM,GACV,OAAO,WAAW,CAAC,UAAU,KAAK,QAAQ;QACxC,CAAC,CAAC,WAAW,CAAC,UAAU;QACxB,CAAC,CAAC,OAAO,WAAW,CAAC,MAAM,KAAK,QAAQ;YACtC,CAAC,CAAC,WAAW,CAAC,MAAM;YACpB,CAAC,CAAC,SAAS,CAAC;IAClB,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,CACL,OAAO,WAAW,CAAC,aAAa,KAAK,QAAQ;QAC7C,4BAA4B,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAa,EACb,OAAoC,EACpC,OAAkC;IAElC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,0BAA0B;QAC1B,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;YAAE,SAAS;QAEnC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,MAAM,IAAI,MAAM,CAAC;QAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC;QACtC,MAAM,SAAS,GAAG,GAAG,YAAY,IAAI,IAAI,EAAE,CAAC;QAE5C,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,CACpB,SAAS,EACT,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,eAAe,GACnB,SAAS,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAE/D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC;YAED,iBAAiB,CAAC,KAAK,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;YAEtD,4BAA4B;YAC5B,IAAI,eAAe,KAAK,MAAM,EAAE,CAAC;gBAC/B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,2BAA2B,MAAM,GAAG,EAAE,CAAC;YACzD,CAAC;YAED,oEAAoE;YACpE,0DAA0D;YAC1D,qEAAqE;YACrE,8DAA8D;YAC9D,kDAAkD;YAClD,gEAAgE;YAChE,mEAAmE;YACnE,gEAAgE;YAChE,uCAAuC;YACvC,+DAA+D;YAC/D,oEAAoE;YACpE,+BAA+B;YAC/B,MAAM,cAAc,GAClB,SAAS,CAAC,KAAK,EAAE,4BAA4B,CAAC,KAAK,GAAG,CAAC;YACzD,IAAI,cAAc,IAAI,KAAK,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;gBACnD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO;oBACL,KAAK,EAAE,WAAW,IAAI,+BAA+B;iBACtD,CAAC;YACJ,CAAC;YAED,+CAA+C;YAC/C,IAAI,SAA6B,CAAC;YAClC,IAAI,QAA4B,CAAC;YACjC,gEAAgE;YAChE,uEAAuE;YACvE,yEAAyE;YACzE,sEAAsE;YACtE,wEAAwE;YACxE,kCAAkC;YAClC,EAAE;YACF,oEAAoE;YACpE,wEAAwE;YACxE,mEAAmE;YACnE,uEAAuE;YACvE,uEAAuE;YACvE,qCAAqC;YACrC,IAAI,cAAc,GAAqC,IAAI,CAAC;YAC5D,CAAC;gBACC,IAAI,MAAwC,CAAC;gBAC7C,IAAI,CAAC;oBACH,MAAM,GAAG,OAAO,EAAE,eAAe,EAAE,aAAa;wBAC9C,CAAC,CAAC,MAAM,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC;wBACpD,CAAC,CAAC,IAAI,CAAC;oBACT,IAAI,CAAC,MAAM;wBACT,MAAM,GAAG,MAAM,2BAA2B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAC5D,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,WAAW,CAAC;wBAChB,UAAU,EAAE,GAAG;wBACf,aAAa,EAAE,cAAc;qBAC9B,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,MAAM,EAAE,CAAC;oBACX,wBAAwB,CAAC,KAAK,EAAE;wBAC9B,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;qBAClB,CAAC,CAAC;oBACH,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;oBACzB,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;oBACvB,cAAc,GAAG,MAAM,CAAC;gBAC1B,CAAC;YACH,CAAC;YACD,IAAI,CAAC,cAAc,IAAI,OAAO,EAAE,iBAAiB,EAAE,CAAC;gBAClD,IAAI,CAAC;oBACH,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;oBACnD,QAAQ,GAAG,OAAO,EAAE,oBAAoB;wBACtC,CAAC,CAAC,MAAM,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC;wBAC3C,CAAC,CAAC,SAAS,CAAC;gBAChB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IACE,KAAK,CAAC,YAAY,KAAK,KAAK;wBAC5B,uBAAuB,CAAC,KAAK,CAAC,EAC9B,CAAC;wBACD,SAAS,GAAG,SAAS,CAAC;wBACtB,QAAQ,GAAG,SAAS,CAAC;oBACvB,CAAC;yBAAM,CAAC;wBACN,MAAM,KAAK,CAAC;oBACd,CAAC;gBACH,CAAC;YACH,CAAC;YACD,8DAA8D;YAC9D,iEAAiE;YACjE,mEAAmE;YACnE,mEAAmE;YACnE,mEAAmE;YACnE,qEAAqE;YACrE,gEAAgE;YAChE,qEAAqE;YACrE,uCAAuC;YACvC,IAAI,KAAyB,CAAC;YAC9B,IAAI,cAAc,EAAE,CAAC;gBACnB,KAAK,GAAG,cAAc,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC7C,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC,KAAK,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC;oBAChE,IAAI,CAAC;wBACH,KAAK,GAAG,cAAc,CACpB,MAAM,oBAAoB,CAAC,cAAc,CAAC,KAAK,CAAC,CACjD,CAAC;oBACJ,CAAC;oBAAC,MAAM,CAAC;wBACP,8CAA8C;oBAChD,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,KAAK,GAAG,OAAO,EAAE,YAAY;oBAC3B,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;oBACpD,CAAC,CAAC,SAAS,CAAC;YAChB,CAAC;YACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAE3C,OAAO,qBAAqB,CAC1B;gBACE,SAAS;gBACT,QAAQ;gBACR,KAAK;gBACL,QAAQ;gBACR,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,MAAM;aAC3C,EACD,KAAK,IAAI,EAAE;gBACT,kEAAkE;gBAClE,gEAAgE;gBAChE,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;oBAC/D,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;oBACjD,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;4BAC7D,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;4BAC9B,OAAO;gCACL,KAAK,EAAE,+BAA+B,KAAK,CAAC,YAAY,SAAS;6BAClE,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,kEAAkE;gBAClE,qEAAqE;gBACrE,qEAAqE;gBACrE,sCAAsC;gBACtC,IAAI,MAA2B,CAAC;gBAChC,IAAI,CAAC;oBACH,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;wBACrB,sDAAsD;wBACtD,MAAM,MAAM,GAAI,KAAa,CAAC,GAAG,CAAC;wBAClC,IAAI,MAAM,EAAE,GAAG,EAAE,CAAC;4BAChB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;4BAChC,MAAM,GAAG,uBAAuB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;wBACrD,CAAC;6BAAM,CAAC;4BACN,MAAM,GAAG,sBAAsB,CAC7B,QAAQ,CAAC,KAAK,CAAwB,CACvC,CAAC;wBACJ,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,MAAM,MAAM,GAAI,KAAa,CAAC,GAAG,CAAC;wBAClC,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;4BAChD,6DAA6D;4BAC7D,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;wBACzD,CAAC;6BAAM,CAAC;4BACN,wCAAwC;4BACxC,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;wBACzC,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,GAAG,EAAE,CAAC;gBACd,CAAC;gBAED,kEAAkE;gBAClE,mEAAmE;gBACnE,iEAAiE;gBACjE,kEAAkE;gBAClE,qEAAqE;gBACrE,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,cAAc;wBAC3B,CAAC,CAAC,KAAK;wBACP,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC;4BAC9B,CAAC,CAAC,UAAU;4BACZ,CAAC,CAAC,MAAM,CAAC;oBACb,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE;wBACrC,SAAS;wBACT,KAAK,EAAE,KAAK,IAAI,IAAI;wBACpB,MAAM;wBACN,UAAU,EAAE,IAAI;wBAChB,GAAG,CAAC,cAAc,EAAE,aAAa;4BAC/B,CAAC,CAAC;gCACE,eAAe,EAAE,KAAK;gCACtB,SAAS,EAAE,cAAc,CAAC,aAAa;gCACvC,WAAW,EAAE,cAAc,CAAC,gBAAgB;6BAC7C;4BACH,CAAC,CAAC,EAAE,CAAC;qBACR,CAAC,CAAC;oBAEH,8DAA8D;oBAC9D,+DAA+D;oBAC/D,gEAAgE;oBAChE,8DAA8D;oBAC9D,6DAA6D;oBAC7D,qDAAqD;oBACrD,+DAA+D;oBAC/D,mEAAmE;oBACnE,gEAAgE;oBAChE,6DAA6D;oBAC7D,MAAM,UAAU,GACd,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS;wBACjC,CAAC,CAAC,KAAK,CAAC,QAAQ;wBAChB,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC;oBACvB,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,IAAI,CAAC;4BACH,MAAM,kBAAkB,CAAC;gCACvB,UAAU,EAAE,IAAI;gCAChB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gCAC1C,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,kBAAkB,CAAC;oCACtC,CAAC,CAAC;wCACE,aAAa,EAAE,SAAS,CACtB,KAAK,EACL,kBAAkB,CACT;qCACZ;oCACH,CAAC,CAAC,EAAE,CAAC;6BACR,CAAC,CAAC;wBACL,CAAC;wBAAC,MAAM,CAAC;4BACP,SAAS;wBACX,CAAC;oBACH,CAAC;oBAED,8DAA8D;oBAC9D,+DAA+D;oBAC/D,kEAAkE;oBAClE,6DAA6D;oBAC7D,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;wBAC/B,IAAI,CAAC;4BACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;wBAC5B,CAAC;wBAAC,MAAM,CAAC;4BACP,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;4BAC7D,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;wBAChC,CAAC;oBACH,CAAC;oBAED,OAAO,MAAM,CAAC;gBAChB,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,MAAM,GAAG,GAAG,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;oBACxC,MAAM,iBAAiB,GAAG,GAAG,CAAC,UAAU,CACtC,2BAA2B,CAC5B,CAAC;oBACF,MAAM,cAAc,GAClB,OAAO,GAAG,EAAE,UAAU,KAAK,QAAQ;wBACjC,CAAC,CAAC,GAAG,CAAC,UAAU;wBAChB,CAAC,CAAC,SAAS,CAAC;oBAChB,+DAA+D;oBAC/D,sBAAsB;oBACtB,MAAM,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC;oBACjE,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;oBAEjC,kDAAkD;oBAClD,6DAA6D;oBAC7D,iEAAiE;oBACjE,8DAA8D;oBAC9D,gEAAgE;oBAChE,2DAA2D;oBAC3D,kDAAkD;oBAClD,MAAM,YAAY,GAChB,iBAAiB;wBACjB,sBAAsB,CAAC,GAAG,CAAC;wBAC3B,CAAC,cAAc,KAAK,SAAS,IAAI,cAAc,GAAG,GAAG,CAAC,CAAC;oBACzD,IAAI,YAAY,EAAE,CAAC;wBACjB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;oBACxB,CAAC;oBACD,OAAO,CAAC,KAAK,CAAC,0BAA0B,IAAI,WAAW,EAAE,GAAG,CAAC,CAAC;oBAC9D,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;gBAC5C,CAAC;YACH,CAAC,CACF,CAAC,CAAC,4BAA4B;QACjC,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK;QACzC,OAAO,CAAC,GAAG,CACT,2BAA2B,OAAO,CAAC,MAAM,qBAAqB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnF,CAAC;AACN,CAAC","sourcesContent":["import {\n  createError,\n  defineEventHandler,\n  setResponseStatus,\n  setResponseHeader,\n  getMethod,\n  getQuery,\n  getHeader,\n  getRequestURL,\n} from \"h3\";\n\nimport { verifyA2ATokenWithClaims } from \"../a2a-claims.js\";\nimport { isAgentActionStopError } from \"../action.js\";\nimport type { ActionEntry } from \"../agent/production-agent.js\";\nimport { declaresFeatureFlagDelegation } from \"../feature-flags/a2a-action-route.js\";\nimport { resolveOrgIdForEmail } from \"../org/context.js\";\nimport { readBody } from \"../server/h3-helpers.js\";\nimport { EMBED_TARGET_HEADER } from \"../shared/embed-auth.js\";\nimport {\n  isMcpEmbedCorsOrigin,\n  MCP_EMBED_CORS_ALLOW_HEADERS,\n  shouldAllowMcpEmbedCredentials,\n} from \"../shared/mcp-embed-headers.js\";\nimport { notifyActionChange } from \"./action-change.js\";\nimport {\n  seedAgentRunOwnerContext,\n  type AgentRunOwnerContext,\n} from \"./agent-run-context.js\";\nimport {\n  getAllowedCorsOrigin as resolveAllowedCorsOrigin,\n  readCorsAllowedOrigins,\n} from \"./cors-origins.js\";\n/**\n * Auto-mount actions as HTTP endpoints under /_agent-native/actions/:name.\n *\n * Actions are exposed as POST by default. Use `http: { method: \"GET\" }` in\n * defineAction to expose as GET. Use `http: false` to mark as agent-only.\n */\nimport { getH3App } from \"./framework-request-handler.js\";\nimport { runWithRequestContext } from \"./request-context.js\";\n\nconst ROUTE_PREFIX = \"/_agent-native/actions\";\n\nasync function resolveFeatureFlagA2ACaller(event: any, actionName: string) {\n  const required =\n    actionName === \"list-feature-flags\"\n      ? \"flags:read\"\n      : actionName === \"set-feature-flag\"\n        ? \"flags:write\"\n        : null;\n  if (!required) return null;\n  const authorization = getHeader(event, \"authorization\");\n  if (!authorization?.startsWith(\"Bearer \")) return null;\n  const token = authorization.slice(7);\n  if (!declaresFeatureFlagDelegation(token)) return null;\n  const claims = await verifyA2ATokenWithClaims(token, event);\n  if (!claims || !claims.scope.includes(required))\n    throw new Error(\"Invalid feature flag delegation\");\n  return {\n    owner: claims.email,\n    orgId: claims.orgId,\n    anonymous: false,\n    delegationJti: claims.jti,\n    delegationIssuer: claims.issuer,\n  } as ActionRouteResolvedCaller;\n}\n\nexport function parseActionSearchParams(\n  searchParams: URLSearchParams,\n): Record<string, any> {\n  const params: Record<string, any> = {};\n  for (const [rawKey, value] of searchParams.entries()) {\n    appendActionParam(params, rawKey, value);\n  }\n  return params;\n}\n\nfunction parseActionQueryObject(\n  query: Record<string, unknown>,\n): Record<string, any> {\n  const params: Record<string, any> = {};\n  for (const [rawKey, rawValue] of Object.entries(query)) {\n    const values = Array.isArray(rawValue) ? rawValue : [rawValue];\n    for (const value of values) {\n      if (value != null) appendActionParam(params, rawKey, String(value));\n    }\n  }\n  return params;\n}\n\nfunction appendActionParam(\n  params: Record<string, any>,\n  rawKey: string,\n  value: any,\n) {\n  const isArrayKey = rawKey.endsWith(\"[]\");\n  // The core client serializes arrays as `key[]=value` so even a single\n  // value can validate against z.array() action schemas.\n  const key = isArrayKey ? rawKey.slice(0, -2) : rawKey;\n  const current = params[key];\n  if (current === undefined) {\n    params[key] = isArrayKey ? [value] : value;\n  } else if (Array.isArray(current)) {\n    current.push(value);\n  } else {\n    params[key] = [current, value];\n  }\n}\n\n/**\n * Read the caller's IANA timezone from the `x-user-timezone` header. The core\n * client sends this on every action request so server-side \"today\" fallbacks\n * can honor the user's local day.\n */\nfunction readTimezoneHeader(event: any): string | undefined {\n  try {\n    const raw = getHeader(event, \"x-user-timezone\");\n    if (!raw || typeof raw !== \"string\") return undefined;\n    const trimmed = raw.trim();\n    return trimmed.length > 0 && trimmed.length < 64 ? trimmed : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * True when the request originated from the browser action client\n * (`useActionQuery` / `useActionMutation` / `callAction`), which tags every\n * call with `X-Agent-Native-Frontend: 1`. Used to set `ctx.caller` to\n * `\"frontend\"` vs a bare programmatic `\"http\"` POST. The header carries no\n * auth weight — it only narrows the caller tag for tracking/branching.\n */\nfunction isFrontendActionRequest(event: any): boolean {\n  try {\n    return getHeader(event, \"x-agent-native-frontend\") === \"1\";\n  } catch {\n    return false;\n  }\n}\n\ntype CorsOrigin = {\n  origin: string;\n  credentials: boolean;\n};\n\nfunction getAllowedCorsOrigin(origin: string | undefined): CorsOrigin | null {\n  const allowedOrigin = resolveAllowedCorsOrigin(origin, {\n    allowedOrigins: readCorsAllowedOrigins(),\n    // Let the cors-origins default apply (dev-only). Omitting this option\n    // keeps production from trusting arbitrary localhost callers.\n  });\n  if (allowedOrigin) {\n    return { origin: allowedOrigin, credentials: true };\n  }\n  if (origin && isMcpEmbedCorsOrigin(origin)) {\n    return {\n      origin,\n      credentials: shouldAllowMcpEmbedCredentials(origin),\n    };\n  }\n  return null;\n}\n\nfunction handleOptionsRequest(event: any): string {\n  const origin = getHeader(event, \"origin\");\n  const cors = getAllowedCorsOrigin(\n    typeof origin === \"string\" ? origin : undefined,\n  );\n\n  if (origin && !cors) {\n    setResponseStatus(event, 403);\n    return \"\";\n  }\n\n  if (cors) {\n    setResponseHeader(event, \"Access-Control-Allow-Origin\", cors.origin);\n    setResponseHeader(event, \"Vary\", \"Origin\");\n    if (cors.credentials) {\n      setResponseHeader(event, \"Access-Control-Allow-Credentials\", \"true\");\n    }\n    setResponseHeader(\n      event,\n      \"Access-Control-Allow-Methods\",\n      \"GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS\",\n    );\n    setResponseHeader(\n      event,\n      \"Access-Control-Allow-Headers\",\n      cors.credentials\n        ? `Content-Type,Authorization,X-Requested-With,X-Request-Source,X-Agent-Native-CSRF,X-User-Timezone,X-Agent-Native-Tool-Bridge,X-Agent-Native-Tool-Id,X-Agent-Native-Frontend,${EMBED_TARGET_HEADER}`\n        : `${MCP_EMBED_CORS_ALLOW_HEADERS},X-Agent-Native-Tool-Bridge,X-Agent-Native-Tool-Id,X-Agent-Native-Frontend`,\n    );\n  }\n\n  setResponseStatus(event, 204);\n  return \"\";\n}\n\n/**\n * Declarative auth adapter for the HTTP action route. Its `resolveCaller` runs\n * BEFORE the framework's `getOwnerFromEvent` / `getSession` chain, letting an\n * app accept caller identities `getSession` doesn't understand (e.g. an A2A\n * JWT) without reaching into request context from a Nitro `request` hook.\n *\n * Scoped to `/_agent-native/actions/*` only — it does not affect other routes.\n */\nexport type ActionRouteResolvedCaller = AgentRunOwnerContext & {\n  /**\n   * Org to scope the request to, verified from the same credential as the\n   * caller identity (e.g. the A2A token's org claim). When omitted, the org\n   * is derived from the verified owner email via the framework's owner→org\n   * membership lookup. The ambient session/org state on the request is never\n   * consulted for adapter-resolved callers: a request can carry both a valid\n   * A2A bearer and an unrelated browser cookie, and the cookie user's org\n   * must not leak into the token caller's request context.\n   */\n  orgId?: string;\n  /** Verified A2A correlation and issuer metadata for the audit row. */\n  delegationJti?: string;\n  delegationIssuer?: string;\n};\n\nexport interface ActionRouteAuthAdapter {\n  /**\n   * Resolve a caller from the raw event before the cookie/bearer chain.\n   *\n   * - Return the resolved caller to run the action scoped to that identity.\n   *   Org scoping comes exclusively from the caller: the returned `orgId` if\n   *   set, otherwise the owner-email membership lookup — never from the\n   *   request's session cookie or org context.\n   * - Return `null` when the credential isn't yours to judge — the request\n   *   defers to `getOwnerFromEvent` / `getSession`.\n   * - THROW to hard-reject: the credential is present but invalid (e.g. an\n   *   expired or forged A2A bearer). The action route responds 401 and does\n   *   NOT fall through to the cookie/session chain, so a valid same-origin\n   *   session cookie can't be used to execute the request as the logged-in\n   *   user. Do not throw merely to signal \"not mine\" — return `null` for that.\n   */\n  resolveCaller?: (\n    event: any,\n  ) =>\n    | ActionRouteResolvedCaller\n    | null\n    | Promise<ActionRouteResolvedCaller | null>;\n}\n\nexport interface MountActionRoutesOptions {\n  /** Resolve owner email from the H3 event (for data scoping). */\n  getOwnerFromEvent?: (event: any) => string | Promise<string>;\n  /** Resolve display name from the H3 event, when available. */\n  getUserNameFromEvent?: (\n    event: any,\n  ) => string | undefined | Promise<string | undefined>;\n  /** Resolve org ID from the H3 event (for org scoping). */\n  resolveOrgId?: (event: any) => string | null | Promise<string | null>;\n  /**\n   * Optional caller resolver that runs before the `getOwnerFromEvent` /\n   * `getSession` chain. Lets apps accept A2A JWTs (or other bearer schemes) on\n   * the action route declaratively. See {@link ActionRouteAuthAdapter}.\n   */\n  actionRouteAuth?: ActionRouteAuthAdapter;\n}\n\nfunction normalizeOrgId(value: string | null | undefined): string | undefined {\n  return typeof value === \"string\" && value.trim().length > 0\n    ? value.trim()\n    : undefined;\n}\n\nfunction isAuthResolutionFailure(error: unknown): boolean {\n  if (!error || typeof error !== \"object\") return false;\n  const maybeStatus = error as {\n    status?: unknown;\n    statusCode?: unknown;\n    statusMessage?: unknown;\n  };\n  const status =\n    typeof maybeStatus.statusCode === \"number\"\n      ? maybeStatus.statusCode\n      : typeof maybeStatus.status === \"number\"\n        ? maybeStatus.status\n        : undefined;\n  if (status === 401 || status === 403) return true;\n  return (\n    typeof maybeStatus.statusMessage === \"string\" &&\n    /unauthenticated|forbidden/i.test(maybeStatus.statusMessage)\n  );\n}\n\n/**\n * Mount discovered actions as HTTP endpoints.\n *\n * Only actions from `autoDiscoverActions` (template actions) are mounted.\n * Built-in actions (resource-*, chat-*, shell, etc.) are NOT passed here.\n */\nexport function mountActionRoutes(\n  nitroApp: any,\n  actions: Record<string, ActionEntry>,\n  options?: MountActionRoutesOptions,\n) {\n  const mounted: string[] = [];\n\n  for (const [name, entry] of Object.entries(actions)) {\n    // Skip agent-only actions\n    if (entry.http === false) continue;\n\n    const method = entry.http?.method ?? \"POST\";\n    const path = entry.http?.path ?? name;\n    const routePath = `${ROUTE_PREFIX}/${path}`;\n\n    getH3App(nitroApp).use(\n      routePath,\n      defineEventHandler(async (event) => {\n        const reqMethod = getMethod(event);\n        const effectiveMethod =\n          reqMethod === \"HEAD\" && method === \"GET\" ? \"GET\" : reqMethod;\n\n        if (reqMethod === \"OPTIONS\") {\n          return handleOptionsRequest(event);\n        }\n\n        setResponseHeader(event, \"Cache-Control\", \"no-store\");\n\n        // Allow the declared method\n        if (effectiveMethod !== method) {\n          setResponseStatus(event, 405);\n          return { error: `Method not allowed. Use ${method}.` };\n        }\n\n        // (audit H5) Per-action `toolCallable` opt-out for the tools-iframe\n        // bridge. The bridge tags every outbound action call with\n        // X-Agent-Native-Tool-Bridge: 1. When that header is present and the\n        // action declares `toolCallable: false`, we 403 — used by the\n        // framework's share-resource / unshare-resource /\n        // set-resource-visibility for defense-in-depth on auth-adjacent\n        // operations. Undefined defaults to allow: tools are intra-org and\n        // typically authored by trusted teammates, so the default is to\n        // trust the org-level access controls.\n        // The header is set by the parent (the React host), not by the\n        // iframe's user-authored content; sanitizeToolRequestOptions strips\n        // iframe attempts to spoof it.\n        const fromToolBridge =\n          getHeader(event, \"x-agent-native-tool-bridge\") === \"1\";\n        if (fromToolBridge && entry.toolCallable === false) {\n          setResponseStatus(event, 403);\n          return {\n            error: `Action '${name}' is not callable from tools.`,\n          };\n        }\n\n        // Resolve auth context for per-request scoping\n        let userEmail: string | undefined;\n        let userName: string | undefined;\n        // An app-supplied auth adapter runs first: it can accept caller\n        // identities the framework's getSession chain doesn't understand (e.g.\n        // an A2A JWT). A resolved caller is seeded onto the event context so any\n        // downstream resolveAgentRunOwnerContext (nested agent runs) sees the\n        // same identity. The adapter is only consulted for the action route, so\n        // it can't affect other surfaces.\n        //\n        // Contract: `resolveCaller` returning `null` means \"this credential\n        // isn't mine — defer to the cookie/session chain below\". THROWING means\n        // \"the credential is mine but invalid\" (e.g. an expired/forged A2A\n        // bearer) and is a hard rejection: we surface a 401 instead of falling\n        // through, so a live same-origin session cookie can't silently execute\n        // the request as the logged-in user.\n        let resolvedCaller: ActionRouteResolvedCaller | null = null;\n        {\n          let caller: ActionRouteResolvedCaller | null;\n          try {\n            caller = options?.actionRouteAuth?.resolveCaller\n              ? await options.actionRouteAuth.resolveCaller(event)\n              : null;\n            if (!caller)\n              caller = await resolveFeatureFlagA2ACaller(event, name);\n          } catch {\n            throw createError({\n              statusCode: 401,\n              statusMessage: \"Unauthorized\",\n            });\n          }\n          if (caller) {\n            seedAgentRunOwnerContext(event, {\n              owner: caller.owner,\n              anonymous: caller.anonymous,\n              name: caller.name,\n            });\n            userEmail = caller.owner;\n            userName = caller.name;\n            resolvedCaller = caller;\n          }\n        }\n        if (!resolvedCaller && options?.getOwnerFromEvent) {\n          try {\n            userEmail = await options.getOwnerFromEvent(event);\n            userName = options?.getUserNameFromEvent\n              ? await options.getUserNameFromEvent(event)\n              : undefined;\n          } catch (error) {\n            if (\n              entry.requiresAuth === false &&\n              isAuthResolutionFailure(error)\n            ) {\n              userEmail = undefined;\n              userName = undefined;\n            } else {\n              throw error;\n            }\n          }\n        }\n        // Org scoping. For adapter-resolved callers the org must come\n        // exclusively from the verified credential: the adapter-asserted\n        // orgId when present, otherwise the owner-email membership lookup.\n        // The request's ambient session/org state (`resolveOrgId`, usually\n        // getSession-backed) is deliberately NOT consulted — a request can\n        // carry both a valid A2A bearer and an unrelated same-origin browser\n        // cookie, and the cookie user's org must not become the org the\n        // token caller's actions execute under. Non-adapter callers keep the\n        // original resolveOrgId-only behavior.\n        let orgId: string | undefined;\n        if (resolvedCaller) {\n          orgId = normalizeOrgId(resolvedCaller.orgId);\n          if (!orgId && resolvedCaller.owner && !resolvedCaller.anonymous) {\n            try {\n              orgId = normalizeOrgId(\n                await resolveOrgIdForEmail(resolvedCaller.owner),\n              );\n            } catch {\n              // Org tables may not exist yet on first boot.\n            }\n          }\n        } else {\n          orgId = options?.resolveOrgId\n            ? ((await options.resolveOrgId(event)) ?? undefined)\n            : undefined;\n        }\n        const timezone = readTimezoneHeader(event);\n\n        return runWithRequestContext(\n          {\n            userEmail,\n            userName,\n            orgId,\n            timezone,\n            requestOrigin: getRequestURL(event).origin,\n          },\n          async () => {\n            // Reject oversize bodies from Content-Length before parsing, so a\n            // public no-auth POST can't force parse work on a huge request.\n            if (typeof entry.maxBodyBytes === \"number\" && method !== \"GET\") {\n              const clRaw = getHeader(event, \"content-length\");\n              if (clRaw) {\n                const declared = parseInt(clRaw, 10);\n                if (!Number.isNaN(declared) && declared > entry.maxBodyBytes) {\n                  setResponseStatus(event, 413);\n                  return {\n                    error: `Request body too large (max ${entry.maxBodyBytes} bytes)`,\n                  };\n                }\n              }\n            }\n            // Parse params based on method. On web-standard runtimes (Netlify\n            // Functions, CF Workers), event.req IS the web Request — use .json()\n            // directly. H3's readBody fails on those runtimes because it expects\n            // a Node.js stream on event.node.req.\n            let params: Record<string, any>;\n            try {\n              if (method === \"GET\") {\n                // H3 v2: prefer web Request URL, fallback to getQuery\n                const webReq = (event as any).req;\n                if (webReq?.url) {\n                  const url = new URL(webReq.url);\n                  params = parseActionSearchParams(url.searchParams);\n                } else {\n                  params = parseActionQueryObject(\n                    getQuery(event) as Record<string, any>,\n                  );\n                }\n              } else {\n                const webReq = (event as any).req;\n                if (webReq && typeof webReq.json === \"function\") {\n                  // H3 v2: event.req is the web Request — use .json() directly\n                  params = (await webReq.json().catch(() => null)) ?? {};\n                } else {\n                  // Fallback: H3's readBody (Node.js dev)\n                  params = (await readBody(event)) ?? {};\n                }\n              }\n            } catch {\n              params = {};\n            }\n\n            // Run the action. Tag the caller: browser calls (useActionQuery /\n            // useActionMutation / callAction) send X-Agent-Native-Frontend: 1,\n            // so they become \"frontend\"; bare programmatic POSTs are \"http\".\n            // userEmail / orgId mirror the request context resolved above (do\n            // NOT inject a dev identity — leave undefined when unauthenticated).\n            try {\n              const caller = resolvedCaller\n                ? \"a2a\"\n                : isFrontendActionRequest(event)\n                  ? \"frontend\"\n                  : \"http\";\n              const result = await entry.run(params, {\n                userEmail,\n                orgId: orgId ?? null,\n                caller,\n                actionName: name,\n                ...(resolvedCaller?.delegationJti\n                  ? {\n                      networkProtocol: \"a2a\",\n                      networkId: resolvedCaller.delegationJti,\n                      networkPeer: resolvedCaller.delegationIssuer,\n                    }\n                  : {}),\n              });\n\n              // Auto-refresh the UI after a successful mutating action. GET\n              // actions and actions explicitly flagged readOnly are skipped.\n              // Other tabs' useDbSync will see source:\"action\" and invalidate\n              // their action queries. The calling tab already refetches via\n              // useActionMutation's onSuccess, so this is mainly cross-tab\n              // sync (and parity with the agent's tool-call path).\n              // Explicit entry.readOnly (true OR false) wins over the method\n              // heuristic. defineAction already auto-infers GET → readOnly=true,\n              // so for actions registered through that path entry.readOnly is\n              // always set and the fallback just guards legacy wrap paths.\n              const isReadOnly =\n                typeof entry.readOnly === \"boolean\"\n                  ? entry.readOnly\n                  : method === \"GET\";\n              if (!isReadOnly) {\n                try {\n                  await notifyActionChange({\n                    actionName: name,\n                    ...(userEmail ? { owner: userEmail } : {}),\n                    ...(getHeader(event, \"x-request-source\")\n                      ? {\n                          requestSource: getHeader(\n                            event,\n                            \"x-request-source\",\n                          ) as string,\n                        }\n                      : {}),\n                  });\n                } catch {\n                  // ignore\n                }\n              }\n\n              // If the action returned a string, try to parse as JSON for a\n              // clean response. Plain strings still need to go over the HTTP\n              // action transport as JSON, otherwise H3 sends text/plain and the\n              // browser action client rejects the successful 2xx response.\n              if (typeof result === \"string\") {\n                try {\n                  return JSON.parse(result);\n                } catch {\n                  setResponseHeader(event, \"Content-Type\", \"application/json\");\n                  return JSON.stringify(result);\n                }\n              }\n\n              return result;\n            } catch (err: any) {\n              const msg = err?.message ?? String(err);\n              const isValidationError = msg.startsWith(\n                \"Invalid action parameters\",\n              );\n              const explicitStatus =\n                typeof err?.statusCode === \"number\"\n                  ? err.statusCode\n                  : undefined;\n              // Return 400 for validation errors, the explicit statusCode if\n              // set, otherwise 500.\n              const status = isValidationError ? 400 : (explicitStatus ?? 500);\n              setResponseStatus(event, status);\n\n              // Only echo the raw message for known-safe cases:\n              //  - validation errors (deterministic, parameter-shape only)\n              //  - explicit user-facing errors (AgentActionStopError / fail())\n              //  - errors with an explicit statusCode < 500 (client errors)\n              // For uncategorized 500s, return a generic message and keep the\n              // real detail server-side only — it can contain DB/driver/\n              // upstream text we must not leak to HTTP callers.\n              const isUserFacing =\n                isValidationError ||\n                isAgentActionStopError(err) ||\n                (explicitStatus !== undefined && explicitStatus < 500);\n              if (isUserFacing) {\n                return { error: msg };\n              }\n              console.error(`[agent-native] action '${name}' failed:`, err);\n              return { error: \"Internal server error\" };\n            }\n          },\n        ); // end runWithRequestContext\n      }),\n    );\n\n    mounted.push(`${method} ${routePath}`);\n  }\n\n  if (mounted.length > 0 && process.env.DEBUG)\n    console.log(\n      `[action-routes] Mounted ${mounted.length} action route(s): ${mounted.join(\", \")}`,\n    );\n}\n"]}
+{"version":3,"file":"action-routes.js","sourceRoot":"","sources":["../../src/server/action-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,SAAS,EACT,QAAQ,EACR,SAAS,EACT,aAAa,GACd,MAAM,IAAI,CAAC;AAEZ,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEtD,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EACL,wBAAwB,GAEzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,oBAAoB,IAAI,wBAAwB,EAChD,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAK3B,SAAS,kCAAkC;IACzC,MAAM,UAAU,GACd,OAAO,6CAA6C,KAAK,QAAQ;QAC/D,CAAC,CAAC,6CAA6C;QAC/C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC;IAC5D,OAAO,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,UAAU,GACd,OAAO,yBAAyB,KAAK,QAAQ;QAC3C,CAAC,CAAC,yBAAyB;QAC3B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACxC,OAAO,UAAU,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAE9C,KAAK,UAAU,2BAA2B,CAAC,KAAU,EAAE,UAAkB;IACvE,MAAM,QAAQ,GACZ,UAAU,KAAK,oBAAoB;QACjC,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,UAAU,KAAK,kBAAkB;YACjC,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,IAAI,CAAC;IACb,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACxD,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,6BAA6B,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS,EAAE,KAAK;QAChB,aAAa,EAAE,MAAM,CAAC,GAAG;QACzB,gBAAgB,EAAE,MAAM,CAAC,MAAM;KACH,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,YAA6B;IAE7B,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QACrD,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAA8B;IAE9B,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC/D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,IAAI,IAAI;gBAAE,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CACxB,MAA2B,EAC3B,MAAc,EACd,KAAU;IAEV,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzC,sEAAsE;IACtE,uDAAuD;IACvD,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACtD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7C,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,KAAU;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACtD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,uBAAuB,CAAC,KAAU;IACzC,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,KAAK,EAAE,yBAAyB,CAAC,KAAK,GAAG,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAOD,SAAS,oBAAoB,CAAC,MAA0B;IACtD,MAAM,aAAa,GAAG,wBAAwB,CAAC,MAAM,EAAE;QACrD,cAAc,EAAE,sBAAsB,EAAE;QACxC,sEAAsE;QACtE,8DAA8D;KAC/D,CAAC,CAAC;IACH,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACtD,CAAC;IACD,IAAI,MAAM,IAAI,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3C,OAAO;YACL,MAAM;YACN,WAAW,EAAE,8BAA8B,CAAC,MAAM,CAAC;SACpD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAU;IACtC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,oBAAoB,CAC/B,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAChD,CAAC;IAEF,IAAI,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,iBAAiB,CAAC,KAAK,EAAE,6BAA6B,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACrE,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,iBAAiB,CAAC,KAAK,EAAE,kCAAkC,EAAE,MAAM,CAAC,CAAC;QACvE,CAAC;QACD,iBAAiB,CACf,KAAK,EACL,8BAA8B,EAC9B,wCAAwC,CACzC,CAAC;QACF,iBAAiB,CACf,KAAK,EACL,8BAA8B,EAC9B,IAAI,CAAC,WAAW;YACd,CAAC,CAAC,0OAA0O,mBAAmB,EAAE;YACjQ,CAAC,CAAC,GAAG,4BAA4B,wIAAwI,CAC5K,CAAC;IACJ,CAAC;IAED,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC;AACZ,CAAC;AAmED,SAAS,cAAc,CAAC,KAAgC;IACtD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACzD,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QACd,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,WAAW,GAAG,KAInB,CAAC;IACF,MAAM,MAAM,GACV,OAAO,WAAW,CAAC,UAAU,KAAK,QAAQ;QACxC,CAAC,CAAC,WAAW,CAAC,UAAU;QACxB,CAAC,CAAC,OAAO,WAAW,CAAC,MAAM,KAAK,QAAQ;YACtC,CAAC,CAAC,WAAW,CAAC,MAAM;YACpB,CAAC,CAAC,SAAS,CAAC;IAClB,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,CACL,OAAO,WAAW,CAAC,aAAa,KAAK,QAAQ;QAC7C,4BAA4B,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAa,EACb,OAAoC,EACpC,OAAkC;IAElC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,0BAA0B;QAC1B,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;YAAE,SAAS;QAEnC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,MAAM,IAAI,MAAM,CAAC;QAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC;QACtC,MAAM,SAAS,GAAG,GAAG,YAAY,IAAI,IAAI,EAAE,CAAC;QAE5C,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,CACpB,SAAS,EACT,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,eAAe,GACnB,SAAS,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAE/D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC;YAED,iBAAiB,CAAC,KAAK,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;YACtD,iBAAiB,CACf,KAAK,EACL,+BAA+B,EAC/B,4FAA4F,CAC7F,CAAC;YAEF,4BAA4B;YAC5B,IAAI,eAAe,KAAK,MAAM,EAAE,CAAC;gBAC/B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,2BAA2B,MAAM,GAAG,EAAE,CAAC;YACzD,CAAC;YAED,MAAM,qBAAqB,GAAG,kCAAkC,EAAE,CAAC;YACnE,IAAI,uBAAuB,CAAC,KAAK,CAAC,IAAI,qBAAqB,EAAE,CAAC;gBAC5D,MAAM,qBAAqB,GAAG,SAAS,CACrC,KAAK,EACL,qCAAqC,CACtC,CAAC;gBACF,IAAI,qBAAqB,KAAK,qBAAqB,EAAE,CAAC;oBACpD,MAAM,aAAa,GAAG,cAAc,EAAE,CAAC;oBACvC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,iBAAiB,CAAC,KAAK,EAAE,gCAAgC,EAAE,GAAG,CAAC,CAAC;oBAChE,iBAAiB,CAAC,KAAK,EAAE,yBAAyB,EAAE,aAAa,CAAC,CAAC;oBACnE,iBAAiB,CACf,KAAK,EACL,qCAAqC,EACrC,qBAAqB,CACtB,CAAC;oBACF,OAAO;wBACL,KAAK,EAAE,0DAA0D;wBACjE,IAAI,EAAE,uBAAuB;wBAC7B,aAAa;wBACb,qBAAqB;qBACtB,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,oEAAoE;YACpE,0DAA0D;YAC1D,qEAAqE;YACrE,8DAA8D;YAC9D,kDAAkD;YAClD,gEAAgE;YAChE,mEAAmE;YACnE,gEAAgE;YAChE,uCAAuC;YACvC,+DAA+D;YAC/D,oEAAoE;YACpE,+BAA+B;YAC/B,MAAM,cAAc,GAClB,SAAS,CAAC,KAAK,EAAE,4BAA4B,CAAC,KAAK,GAAG,CAAC;YACzD,IAAI,cAAc,IAAI,KAAK,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;gBACnD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO;oBACL,KAAK,EAAE,WAAW,IAAI,+BAA+B;iBACtD,CAAC;YACJ,CAAC;YAED,+CAA+C;YAC/C,IAAI,SAA6B,CAAC;YAClC,IAAI,QAA4B,CAAC;YACjC,gEAAgE;YAChE,uEAAuE;YACvE,yEAAyE;YACzE,sEAAsE;YACtE,wEAAwE;YACxE,kCAAkC;YAClC,EAAE;YACF,oEAAoE;YACpE,wEAAwE;YACxE,mEAAmE;YACnE,uEAAuE;YACvE,uEAAuE;YACvE,qCAAqC;YACrC,IAAI,cAAc,GAAqC,IAAI,CAAC;YAC5D,CAAC;gBACC,IAAI,MAAwC,CAAC;gBAC7C,IAAI,CAAC;oBACH,MAAM,GAAG,OAAO,EAAE,eAAe,EAAE,aAAa;wBAC9C,CAAC,CAAC,MAAM,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC;wBACpD,CAAC,CAAC,IAAI,CAAC;oBACT,IAAI,CAAC,MAAM;wBACT,MAAM,GAAG,MAAM,2BAA2B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAC5D,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,WAAW,CAAC;wBAChB,UAAU,EAAE,GAAG;wBACf,aAAa,EAAE,cAAc;qBAC9B,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,MAAM,EAAE,CAAC;oBACX,wBAAwB,CAAC,KAAK,EAAE;wBAC9B,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;qBAClB,CAAC,CAAC;oBACH,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;oBACzB,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;oBACvB,cAAc,GAAG,MAAM,CAAC;gBAC1B,CAAC;YACH,CAAC;YACD,IAAI,CAAC,cAAc,IAAI,OAAO,EAAE,iBAAiB,EAAE,CAAC;gBAClD,IAAI,CAAC;oBACH,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;oBACnD,QAAQ,GAAG,OAAO,EAAE,oBAAoB;wBACtC,CAAC,CAAC,MAAM,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC;wBAC3C,CAAC,CAAC,SAAS,CAAC;gBAChB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IACE,KAAK,CAAC,YAAY,KAAK,KAAK;wBAC5B,uBAAuB,CAAC,KAAK,CAAC,EAC9B,CAAC;wBACD,SAAS,GAAG,SAAS,CAAC;wBACtB,QAAQ,GAAG,SAAS,CAAC;oBACvB,CAAC;yBAAM,CAAC;wBACN,MAAM,KAAK,CAAC;oBACd,CAAC;gBACH,CAAC;YACH,CAAC;YACD,8DAA8D;YAC9D,iEAAiE;YACjE,mEAAmE;YACnE,mEAAmE;YACnE,mEAAmE;YACnE,qEAAqE;YACrE,gEAAgE;YAChE,qEAAqE;YACrE,uCAAuC;YACvC,IAAI,KAAyB,CAAC;YAC9B,IAAI,cAAc,EAAE,CAAC;gBACnB,KAAK,GAAG,cAAc,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC7C,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC,KAAK,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC;oBAChE,IAAI,CAAC;wBACH,KAAK,GAAG,cAAc,CACpB,MAAM,oBAAoB,CAAC,cAAc,CAAC,KAAK,CAAC,CACjD,CAAC;oBACJ,CAAC;oBAAC,MAAM,CAAC;wBACP,8CAA8C;oBAChD,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,KAAK,GAAG,OAAO,EAAE,YAAY;oBAC3B,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;oBACpD,CAAC,CAAC,SAAS,CAAC;YAChB,CAAC;YACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAE3C,OAAO,qBAAqB,CAC1B;gBACE,SAAS;gBACT,QAAQ;gBACR,KAAK;gBACL,QAAQ;gBACR,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,MAAM;aAC3C,EACD,KAAK,IAAI,EAAE;gBACT,kEAAkE;gBAClE,gEAAgE;gBAChE,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;oBAC/D,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;oBACjD,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;4BAC7D,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;4BAC9B,OAAO;gCACL,KAAK,EAAE,+BAA+B,KAAK,CAAC,YAAY,SAAS;6BAClE,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,kEAAkE;gBAClE,qEAAqE;gBACrE,qEAAqE;gBACrE,sCAAsC;gBACtC,IAAI,MAA2B,CAAC;gBAChC,IAAI,CAAC;oBACH,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;wBACrB,sDAAsD;wBACtD,MAAM,MAAM,GAAI,KAAa,CAAC,GAAG,CAAC;wBAClC,IAAI,MAAM,EAAE,GAAG,EAAE,CAAC;4BAChB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;4BAChC,MAAM,GAAG,uBAAuB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;wBACrD,CAAC;6BAAM,CAAC;4BACN,MAAM,GAAG,sBAAsB,CAC7B,QAAQ,CAAC,KAAK,CAAwB,CACvC,CAAC;wBACJ,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,MAAM,MAAM,GAAI,KAAa,CAAC,GAAG,CAAC;wBAClC,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;4BAChD,6DAA6D;4BAC7D,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;wBACzD,CAAC;6BAAM,CAAC;4BACN,wCAAwC;4BACxC,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;wBACzC,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,GAAG,EAAE,CAAC;gBACd,CAAC;gBAED,kEAAkE;gBAClE,mEAAmE;gBACnE,iEAAiE;gBACjE,kEAAkE;gBAClE,qEAAqE;gBACrE,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,cAAc;wBAC3B,CAAC,CAAC,KAAK;wBACP,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC;4BAC9B,CAAC,CAAC,UAAU;4BACZ,CAAC,CAAC,MAAM,CAAC;oBACb,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE;wBACrC,SAAS;wBACT,KAAK,EAAE,KAAK,IAAI,IAAI;wBACpB,MAAM;wBACN,UAAU,EAAE,IAAI;wBAChB,GAAG,CAAC,cAAc,EAAE,aAAa;4BAC/B,CAAC,CAAC;gCACE,eAAe,EAAE,KAAK;gCACtB,SAAS,EAAE,cAAc,CAAC,aAAa;gCACvC,WAAW,EAAE,cAAc,CAAC,gBAAgB;6BAC7C;4BACH,CAAC,CAAC,EAAE,CAAC;qBACR,CAAC,CAAC;oBAEH,8DAA8D;oBAC9D,+DAA+D;oBAC/D,gEAAgE;oBAChE,8DAA8D;oBAC9D,6DAA6D;oBAC7D,qDAAqD;oBACrD,+DAA+D;oBAC/D,mEAAmE;oBACnE,gEAAgE;oBAChE,6DAA6D;oBAC7D,MAAM,UAAU,GACd,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS;wBACjC,CAAC,CAAC,KAAK,CAAC,QAAQ;wBAChB,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC;oBACvB,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,IAAI,CAAC;4BACH,MAAM,kBAAkB,CAAC;gCACvB,UAAU,EAAE,IAAI;gCAChB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gCAC1C,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,kBAAkB,CAAC;oCACtC,CAAC,CAAC;wCACE,aAAa,EAAE,SAAS,CACtB,KAAK,EACL,kBAAkB,CACT;qCACZ;oCACH,CAAC,CAAC,EAAE,CAAC;6BACR,CAAC,CAAC;wBACL,CAAC;wBAAC,MAAM,CAAC;4BACP,SAAS;wBACX,CAAC;oBACH,CAAC;oBAED,8DAA8D;oBAC9D,+DAA+D;oBAC/D,kEAAkE;oBAClE,6DAA6D;oBAC7D,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;wBAC/B,IAAI,CAAC;4BACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;wBAC5B,CAAC;wBAAC,MAAM,CAAC;4BACP,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;4BAC7D,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;wBAChC,CAAC;oBACH,CAAC;oBAED,OAAO,MAAM,CAAC;gBAChB,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,MAAM,GAAG,GAAG,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;oBACxC,MAAM,iBAAiB,GAAG,GAAG,CAAC,UAAU,CACtC,2BAA2B,CAC5B,CAAC;oBACF,MAAM,cAAc,GAClB,OAAO,GAAG,EAAE,UAAU,KAAK,QAAQ;wBACjC,CAAC,CAAC,GAAG,CAAC,UAAU;wBAChB,CAAC,CAAC,SAAS,CAAC;oBAChB,+DAA+D;oBAC/D,sBAAsB;oBACtB,MAAM,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC;oBACjE,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;oBAEjC,kDAAkD;oBAClD,6DAA6D;oBAC7D,iEAAiE;oBACjE,8DAA8D;oBAC9D,gEAAgE;oBAChE,2DAA2D;oBAC3D,kDAAkD;oBAClD,MAAM,YAAY,GAChB,iBAAiB;wBACjB,sBAAsB,CAAC,GAAG,CAAC;wBAC3B,CAAC,cAAc,KAAK,SAAS,IAAI,cAAc,GAAG,GAAG,CAAC,CAAC;oBACzD,IAAI,YAAY,EAAE,CAAC;wBACjB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;oBACxB,CAAC;oBACD,OAAO,CAAC,KAAK,CAAC,0BAA0B,IAAI,WAAW,EAAE,GAAG,CAAC,CAAC;oBAC9D,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;gBAC5C,CAAC;YACH,CAAC,CACF,CAAC,CAAC,4BAA4B;QACjC,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK;QACzC,OAAO,CAAC,GAAG,CACT,2BAA2B,OAAO,CAAC,MAAM,qBAAqB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnF,CAAC;AACN,CAAC","sourcesContent":["import {\n  createError,\n  defineEventHandler,\n  setResponseStatus,\n  setResponseHeader,\n  getMethod,\n  getQuery,\n  getHeader,\n  getRequestURL,\n} from \"h3\";\n\nimport { verifyA2ATokenWithClaims } from \"../a2a-claims.js\";\nimport { isAgentActionStopError } from \"../action.js\";\nimport type { ActionEntry } from \"../agent/production-agent.js\";\nimport { declaresFeatureFlagDelegation } from \"../feature-flags/a2a-action-route.js\";\nimport { resolveOrgIdForEmail } from \"../org/context.js\";\nimport { readBody } from \"../server/h3-helpers.js\";\nimport { EMBED_TARGET_HEADER } from \"../shared/embed-auth.js\";\nimport {\n  isMcpEmbedCorsOrigin,\n  MCP_EMBED_CORS_ALLOW_HEADERS,\n  shouldAllowMcpEmbedCredentials,\n} from \"../shared/mcp-embed-headers.js\";\nimport { notifyActionChange } from \"./action-change.js\";\nimport {\n  seedAgentRunOwnerContext,\n  type AgentRunOwnerContext,\n} from \"./agent-run-context.js\";\nimport {\n  getAllowedCorsOrigin as resolveAllowedCorsOrigin,\n  readCorsAllowedOrigins,\n} from \"./cors-origins.js\";\n\ndeclare const __AGENT_NATIVE_BUILD_ID__: string | undefined;\ndeclare const __AGENT_NATIVE_CLIENT_COMPATIBILITY_VERSION__: string | undefined;\n\nfunction requiredClientCompatibilityVersion(): string {\n  const configured =\n    typeof __AGENT_NATIVE_CLIENT_COMPATIBILITY_VERSION__ === \"string\"\n      ? __AGENT_NATIVE_CLIENT_COMPATIBILITY_VERSION__\n      : process.env.AGENT_NATIVE_CLIENT_COMPATIBILITY_VERSION;\n  return configured?.trim() ?? \"\";\n}\n\nfunction currentBuildId(): string {\n  const configured =\n    typeof __AGENT_NATIVE_BUILD_ID__ === \"string\"\n      ? __AGENT_NATIVE_BUILD_ID__\n      : process.env.AGENT_NATIVE_BUILD_ID;\n  return configured?.trim() || \"unknown\";\n}\n\n/**\n * Auto-mount actions as HTTP endpoints under /_agent-native/actions/:name.\n *\n * Actions are exposed as POST by default. Use `http: { method: \"GET\" }` in\n * defineAction to expose as GET. Use `http: false` to mark as agent-only.\n */\nimport { getH3App } from \"./framework-request-handler.js\";\nimport { runWithRequestContext } from \"./request-context.js\";\n\nconst ROUTE_PREFIX = \"/_agent-native/actions\";\n\nasync function resolveFeatureFlagA2ACaller(event: any, actionName: string) {\n  const required =\n    actionName === \"list-feature-flags\"\n      ? \"flags:read\"\n      : actionName === \"set-feature-flag\"\n        ? \"flags:write\"\n        : null;\n  if (!required) return null;\n  const authorization = getHeader(event, \"authorization\");\n  if (!authorization?.startsWith(\"Bearer \")) return null;\n  const token = authorization.slice(7);\n  if (!declaresFeatureFlagDelegation(token)) return null;\n  const claims = await verifyA2ATokenWithClaims(token, event);\n  if (!claims || !claims.scope.includes(required))\n    throw new Error(\"Invalid feature flag delegation\");\n  return {\n    owner: claims.email,\n    orgId: claims.orgId,\n    anonymous: false,\n    delegationJti: claims.jti,\n    delegationIssuer: claims.issuer,\n  } as ActionRouteResolvedCaller;\n}\n\nexport function parseActionSearchParams(\n  searchParams: URLSearchParams,\n): Record<string, any> {\n  const params: Record<string, any> = {};\n  for (const [rawKey, value] of searchParams.entries()) {\n    appendActionParam(params, rawKey, value);\n  }\n  return params;\n}\n\nfunction parseActionQueryObject(\n  query: Record<string, unknown>,\n): Record<string, any> {\n  const params: Record<string, any> = {};\n  for (const [rawKey, rawValue] of Object.entries(query)) {\n    const values = Array.isArray(rawValue) ? rawValue : [rawValue];\n    for (const value of values) {\n      if (value != null) appendActionParam(params, rawKey, String(value));\n    }\n  }\n  return params;\n}\n\nfunction appendActionParam(\n  params: Record<string, any>,\n  rawKey: string,\n  value: any,\n) {\n  const isArrayKey = rawKey.endsWith(\"[]\");\n  // The core client serializes arrays as `key[]=value` so even a single\n  // value can validate against z.array() action schemas.\n  const key = isArrayKey ? rawKey.slice(0, -2) : rawKey;\n  const current = params[key];\n  if (current === undefined) {\n    params[key] = isArrayKey ? [value] : value;\n  } else if (Array.isArray(current)) {\n    current.push(value);\n  } else {\n    params[key] = [current, value];\n  }\n}\n\n/**\n * Read the caller's IANA timezone from the `x-user-timezone` header. The core\n * client sends this on every action request so server-side \"today\" fallbacks\n * can honor the user's local day.\n */\nfunction readTimezoneHeader(event: any): string | undefined {\n  try {\n    const raw = getHeader(event, \"x-user-timezone\");\n    if (!raw || typeof raw !== \"string\") return undefined;\n    const trimmed = raw.trim();\n    return trimmed.length > 0 && trimmed.length < 64 ? trimmed : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * True when the request originated from the browser action client\n * (`useActionQuery` / `useActionMutation` / `callAction`), which tags every\n * call with `X-Agent-Native-Frontend: 1`. Used to set `ctx.caller` to\n * `\"frontend\"` vs a bare programmatic `\"http\"` POST. The header carries no\n * auth weight — it only narrows the caller tag for tracking/branching.\n */\nfunction isFrontendActionRequest(event: any): boolean {\n  try {\n    return getHeader(event, \"x-agent-native-frontend\") === \"1\";\n  } catch {\n    return false;\n  }\n}\n\ntype CorsOrigin = {\n  origin: string;\n  credentials: boolean;\n};\n\nfunction getAllowedCorsOrigin(origin: string | undefined): CorsOrigin | null {\n  const allowedOrigin = resolveAllowedCorsOrigin(origin, {\n    allowedOrigins: readCorsAllowedOrigins(),\n    // Let the cors-origins default apply (dev-only). Omitting this option\n    // keeps production from trusting arbitrary localhost callers.\n  });\n  if (allowedOrigin) {\n    return { origin: allowedOrigin, credentials: true };\n  }\n  if (origin && isMcpEmbedCorsOrigin(origin)) {\n    return {\n      origin,\n      credentials: shouldAllowMcpEmbedCredentials(origin),\n    };\n  }\n  return null;\n}\n\nfunction handleOptionsRequest(event: any): string {\n  const origin = getHeader(event, \"origin\");\n  const cors = getAllowedCorsOrigin(\n    typeof origin === \"string\" ? origin : undefined,\n  );\n\n  if (origin && !cors) {\n    setResponseStatus(event, 403);\n    return \"\";\n  }\n\n  if (cors) {\n    setResponseHeader(event, \"Access-Control-Allow-Origin\", cors.origin);\n    setResponseHeader(event, \"Vary\", \"Origin\");\n    if (cors.credentials) {\n      setResponseHeader(event, \"Access-Control-Allow-Credentials\", \"true\");\n    }\n    setResponseHeader(\n      event,\n      \"Access-Control-Allow-Methods\",\n      \"GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS\",\n    );\n    setResponseHeader(\n      event,\n      \"Access-Control-Allow-Headers\",\n      cors.credentials\n        ? `Content-Type,Authorization,X-Requested-With,X-Request-Source,X-Agent-Native-CSRF,X-User-Timezone,X-Agent-Native-Tool-Bridge,X-Agent-Native-Tool-Id,X-Agent-Native-Frontend,X-Agent-Native-Client-Compatibility,X-Agent-Native-Build-Id,${EMBED_TARGET_HEADER}`\n        : `${MCP_EMBED_CORS_ALLOW_HEADERS},X-Agent-Native-Tool-Bridge,X-Agent-Native-Tool-Id,X-Agent-Native-Frontend,X-Agent-Native-Client-Compatibility,X-Agent-Native-Build-Id`,\n    );\n  }\n\n  setResponseStatus(event, 204);\n  return \"\";\n}\n\n/**\n * Declarative auth adapter for the HTTP action route. Its `resolveCaller` runs\n * BEFORE the framework's `getOwnerFromEvent` / `getSession` chain, letting an\n * app accept caller identities `getSession` doesn't understand (e.g. an A2A\n * JWT) without reaching into request context from a Nitro `request` hook.\n *\n * Scoped to `/_agent-native/actions/*` only — it does not affect other routes.\n */\nexport type ActionRouteResolvedCaller = AgentRunOwnerContext & {\n  /**\n   * Org to scope the request to, verified from the same credential as the\n   * caller identity (e.g. the A2A token's org claim). When omitted, the org\n   * is derived from the verified owner email via the framework's owner→org\n   * membership lookup. The ambient session/org state on the request is never\n   * consulted for adapter-resolved callers: a request can carry both a valid\n   * A2A bearer and an unrelated browser cookie, and the cookie user's org\n   * must not leak into the token caller's request context.\n   */\n  orgId?: string;\n  /** Verified A2A correlation and issuer metadata for the audit row. */\n  delegationJti?: string;\n  delegationIssuer?: string;\n};\n\nexport interface ActionRouteAuthAdapter {\n  /**\n   * Resolve a caller from the raw event before the cookie/bearer chain.\n   *\n   * - Return the resolved caller to run the action scoped to that identity.\n   *   Org scoping comes exclusively from the caller: the returned `orgId` if\n   *   set, otherwise the owner-email membership lookup — never from the\n   *   request's session cookie or org context.\n   * - Return `null` when the credential isn't yours to judge — the request\n   *   defers to `getOwnerFromEvent` / `getSession`.\n   * - THROW to hard-reject: the credential is present but invalid (e.g. an\n   *   expired or forged A2A bearer). The action route responds 401 and does\n   *   NOT fall through to the cookie/session chain, so a valid same-origin\n   *   session cookie can't be used to execute the request as the logged-in\n   *   user. Do not throw merely to signal \"not mine\" — return `null` for that.\n   */\n  resolveCaller?: (\n    event: any,\n  ) =>\n    | ActionRouteResolvedCaller\n    | null\n    | Promise<ActionRouteResolvedCaller | null>;\n}\n\nexport interface MountActionRoutesOptions {\n  /** Resolve owner email from the H3 event (for data scoping). */\n  getOwnerFromEvent?: (event: any) => string | Promise<string>;\n  /** Resolve display name from the H3 event, when available. */\n  getUserNameFromEvent?: (\n    event: any,\n  ) => string | undefined | Promise<string | undefined>;\n  /** Resolve org ID from the H3 event (for org scoping). */\n  resolveOrgId?: (event: any) => string | null | Promise<string | null>;\n  /**\n   * Optional caller resolver that runs before the `getOwnerFromEvent` /\n   * `getSession` chain. Lets apps accept A2A JWTs (or other bearer schemes) on\n   * the action route declaratively. See {@link ActionRouteAuthAdapter}.\n   */\n  actionRouteAuth?: ActionRouteAuthAdapter;\n}\n\nfunction normalizeOrgId(value: string | null | undefined): string | undefined {\n  return typeof value === \"string\" && value.trim().length > 0\n    ? value.trim()\n    : undefined;\n}\n\nfunction isAuthResolutionFailure(error: unknown): boolean {\n  if (!error || typeof error !== \"object\") return false;\n  const maybeStatus = error as {\n    status?: unknown;\n    statusCode?: unknown;\n    statusMessage?: unknown;\n  };\n  const status =\n    typeof maybeStatus.statusCode === \"number\"\n      ? maybeStatus.statusCode\n      : typeof maybeStatus.status === \"number\"\n        ? maybeStatus.status\n        : undefined;\n  if (status === 401 || status === 403) return true;\n  return (\n    typeof maybeStatus.statusMessage === \"string\" &&\n    /unauthenticated|forbidden/i.test(maybeStatus.statusMessage)\n  );\n}\n\n/**\n * Mount discovered actions as HTTP endpoints.\n *\n * Only actions from `autoDiscoverActions` (template actions) are mounted.\n * Built-in actions (resource-*, chat-*, shell, etc.) are NOT passed here.\n */\nexport function mountActionRoutes(\n  nitroApp: any,\n  actions: Record<string, ActionEntry>,\n  options?: MountActionRoutesOptions,\n) {\n  const mounted: string[] = [];\n\n  for (const [name, entry] of Object.entries(actions)) {\n    // Skip agent-only actions\n    if (entry.http === false) continue;\n\n    const method = entry.http?.method ?? \"POST\";\n    const path = entry.http?.path ?? name;\n    const routePath = `${ROUTE_PREFIX}/${path}`;\n\n    getH3App(nitroApp).use(\n      routePath,\n      defineEventHandler(async (event) => {\n        const reqMethod = getMethod(event);\n        const effectiveMethod =\n          reqMethod === \"HEAD\" && method === \"GET\" ? \"GET\" : reqMethod;\n\n        if (reqMethod === \"OPTIONS\") {\n          return handleOptionsRequest(event);\n        }\n\n        setResponseHeader(event, \"Cache-Control\", \"no-store\");\n        setResponseHeader(\n          event,\n          \"Access-Control-Expose-Headers\",\n          \"X-Agent-Native-Client-Mismatch,X-Agent-Native-Build-Id,X-Agent-Native-Client-Compatibility\",\n        );\n\n        // Allow the declared method\n        if (effectiveMethod !== method) {\n          setResponseStatus(event, 405);\n          return { error: `Method not allowed. Use ${method}.` };\n        }\n\n        const requiredCompatibility = requiredClientCompatibilityVersion();\n        if (isFrontendActionRequest(event) && requiredCompatibility) {\n          const receivedCompatibility = getHeader(\n            event,\n            \"x-agent-native-client-compatibility\",\n          );\n          if (receivedCompatibility !== requiredCompatibility) {\n            const serverBuildId = currentBuildId();\n            setResponseStatus(event, 409);\n            setResponseHeader(event, \"X-Agent-Native-Client-Mismatch\", \"1\");\n            setResponseHeader(event, \"X-Agent-Native-Build-Id\", serverBuildId);\n            setResponseHeader(\n              event,\n              \"X-Agent-Native-Client-Compatibility\",\n              requiredCompatibility,\n            );\n            return {\n              error: \"This browser tab must reload before it can use this app.\",\n              code: \"client_build_mismatch\",\n              serverBuildId,\n              requiredCompatibility,\n            };\n          }\n        }\n\n        // (audit H5) Per-action `toolCallable` opt-out for the tools-iframe\n        // bridge. The bridge tags every outbound action call with\n        // X-Agent-Native-Tool-Bridge: 1. When that header is present and the\n        // action declares `toolCallable: false`, we 403 — used by the\n        // framework's share-resource / unshare-resource /\n        // set-resource-visibility for defense-in-depth on auth-adjacent\n        // operations. Undefined defaults to allow: tools are intra-org and\n        // typically authored by trusted teammates, so the default is to\n        // trust the org-level access controls.\n        // The header is set by the parent (the React host), not by the\n        // iframe's user-authored content; sanitizeToolRequestOptions strips\n        // iframe attempts to spoof it.\n        const fromToolBridge =\n          getHeader(event, \"x-agent-native-tool-bridge\") === \"1\";\n        if (fromToolBridge && entry.toolCallable === false) {\n          setResponseStatus(event, 403);\n          return {\n            error: `Action '${name}' is not callable from tools.`,\n          };\n        }\n\n        // Resolve auth context for per-request scoping\n        let userEmail: string | undefined;\n        let userName: string | undefined;\n        // An app-supplied auth adapter runs first: it can accept caller\n        // identities the framework's getSession chain doesn't understand (e.g.\n        // an A2A JWT). A resolved caller is seeded onto the event context so any\n        // downstream resolveAgentRunOwnerContext (nested agent runs) sees the\n        // same identity. The adapter is only consulted for the action route, so\n        // it can't affect other surfaces.\n        //\n        // Contract: `resolveCaller` returning `null` means \"this credential\n        // isn't mine — defer to the cookie/session chain below\". THROWING means\n        // \"the credential is mine but invalid\" (e.g. an expired/forged A2A\n        // bearer) and is a hard rejection: we surface a 401 instead of falling\n        // through, so a live same-origin session cookie can't silently execute\n        // the request as the logged-in user.\n        let resolvedCaller: ActionRouteResolvedCaller | null = null;\n        {\n          let caller: ActionRouteResolvedCaller | null;\n          try {\n            caller = options?.actionRouteAuth?.resolveCaller\n              ? await options.actionRouteAuth.resolveCaller(event)\n              : null;\n            if (!caller)\n              caller = await resolveFeatureFlagA2ACaller(event, name);\n          } catch {\n            throw createError({\n              statusCode: 401,\n              statusMessage: \"Unauthorized\",\n            });\n          }\n          if (caller) {\n            seedAgentRunOwnerContext(event, {\n              owner: caller.owner,\n              anonymous: caller.anonymous,\n              name: caller.name,\n            });\n            userEmail = caller.owner;\n            userName = caller.name;\n            resolvedCaller = caller;\n          }\n        }\n        if (!resolvedCaller && options?.getOwnerFromEvent) {\n          try {\n            userEmail = await options.getOwnerFromEvent(event);\n            userName = options?.getUserNameFromEvent\n              ? await options.getUserNameFromEvent(event)\n              : undefined;\n          } catch (error) {\n            if (\n              entry.requiresAuth === false &&\n              isAuthResolutionFailure(error)\n            ) {\n              userEmail = undefined;\n              userName = undefined;\n            } else {\n              throw error;\n            }\n          }\n        }\n        // Org scoping. For adapter-resolved callers the org must come\n        // exclusively from the verified credential: the adapter-asserted\n        // orgId when present, otherwise the owner-email membership lookup.\n        // The request's ambient session/org state (`resolveOrgId`, usually\n        // getSession-backed) is deliberately NOT consulted — a request can\n        // carry both a valid A2A bearer and an unrelated same-origin browser\n        // cookie, and the cookie user's org must not become the org the\n        // token caller's actions execute under. Non-adapter callers keep the\n        // original resolveOrgId-only behavior.\n        let orgId: string | undefined;\n        if (resolvedCaller) {\n          orgId = normalizeOrgId(resolvedCaller.orgId);\n          if (!orgId && resolvedCaller.owner && !resolvedCaller.anonymous) {\n            try {\n              orgId = normalizeOrgId(\n                await resolveOrgIdForEmail(resolvedCaller.owner),\n              );\n            } catch {\n              // Org tables may not exist yet on first boot.\n            }\n          }\n        } else {\n          orgId = options?.resolveOrgId\n            ? ((await options.resolveOrgId(event)) ?? undefined)\n            : undefined;\n        }\n        const timezone = readTimezoneHeader(event);\n\n        return runWithRequestContext(\n          {\n            userEmail,\n            userName,\n            orgId,\n            timezone,\n            requestOrigin: getRequestURL(event).origin,\n          },\n          async () => {\n            // Reject oversize bodies from Content-Length before parsing, so a\n            // public no-auth POST can't force parse work on a huge request.\n            if (typeof entry.maxBodyBytes === \"number\" && method !== \"GET\") {\n              const clRaw = getHeader(event, \"content-length\");\n              if (clRaw) {\n                const declared = parseInt(clRaw, 10);\n                if (!Number.isNaN(declared) && declared > entry.maxBodyBytes) {\n                  setResponseStatus(event, 413);\n                  return {\n                    error: `Request body too large (max ${entry.maxBodyBytes} bytes)`,\n                  };\n                }\n              }\n            }\n            // Parse params based on method. On web-standard runtimes (Netlify\n            // Functions, CF Workers), event.req IS the web Request — use .json()\n            // directly. H3's readBody fails on those runtimes because it expects\n            // a Node.js stream on event.node.req.\n            let params: Record<string, any>;\n            try {\n              if (method === \"GET\") {\n                // H3 v2: prefer web Request URL, fallback to getQuery\n                const webReq = (event as any).req;\n                if (webReq?.url) {\n                  const url = new URL(webReq.url);\n                  params = parseActionSearchParams(url.searchParams);\n                } else {\n                  params = parseActionQueryObject(\n                    getQuery(event) as Record<string, any>,\n                  );\n                }\n              } else {\n                const webReq = (event as any).req;\n                if (webReq && typeof webReq.json === \"function\") {\n                  // H3 v2: event.req is the web Request — use .json() directly\n                  params = (await webReq.json().catch(() => null)) ?? {};\n                } else {\n                  // Fallback: H3's readBody (Node.js dev)\n                  params = (await readBody(event)) ?? {};\n                }\n              }\n            } catch {\n              params = {};\n            }\n\n            // Run the action. Tag the caller: browser calls (useActionQuery /\n            // useActionMutation / callAction) send X-Agent-Native-Frontend: 1,\n            // so they become \"frontend\"; bare programmatic POSTs are \"http\".\n            // userEmail / orgId mirror the request context resolved above (do\n            // NOT inject a dev identity — leave undefined when unauthenticated).\n            try {\n              const caller = resolvedCaller\n                ? \"a2a\"\n                : isFrontendActionRequest(event)\n                  ? \"frontend\"\n                  : \"http\";\n              const result = await entry.run(params, {\n                userEmail,\n                orgId: orgId ?? null,\n                caller,\n                actionName: name,\n                ...(resolvedCaller?.delegationJti\n                  ? {\n                      networkProtocol: \"a2a\",\n                      networkId: resolvedCaller.delegationJti,\n                      networkPeer: resolvedCaller.delegationIssuer,\n                    }\n                  : {}),\n              });\n\n              // Auto-refresh the UI after a successful mutating action. GET\n              // actions and actions explicitly flagged readOnly are skipped.\n              // Other tabs' useDbSync will see source:\"action\" and invalidate\n              // their action queries. The calling tab already refetches via\n              // useActionMutation's onSuccess, so this is mainly cross-tab\n              // sync (and parity with the agent's tool-call path).\n              // Explicit entry.readOnly (true OR false) wins over the method\n              // heuristic. defineAction already auto-infers GET → readOnly=true,\n              // so for actions registered through that path entry.readOnly is\n              // always set and the fallback just guards legacy wrap paths.\n              const isReadOnly =\n                typeof entry.readOnly === \"boolean\"\n                  ? entry.readOnly\n                  : method === \"GET\";\n              if (!isReadOnly) {\n                try {\n                  await notifyActionChange({\n                    actionName: name,\n                    ...(userEmail ? { owner: userEmail } : {}),\n                    ...(getHeader(event, \"x-request-source\")\n                      ? {\n                          requestSource: getHeader(\n                            event,\n                            \"x-request-source\",\n                          ) as string,\n                        }\n                      : {}),\n                  });\n                } catch {\n                  // ignore\n                }\n              }\n\n              // If the action returned a string, try to parse as JSON for a\n              // clean response. Plain strings still need to go over the HTTP\n              // action transport as JSON, otherwise H3 sends text/plain and the\n              // browser action client rejects the successful 2xx response.\n              if (typeof result === \"string\") {\n                try {\n                  return JSON.parse(result);\n                } catch {\n                  setResponseHeader(event, \"Content-Type\", \"application/json\");\n                  return JSON.stringify(result);\n                }\n              }\n\n              return result;\n            } catch (err: any) {\n              const msg = err?.message ?? String(err);\n              const isValidationError = msg.startsWith(\n                \"Invalid action parameters\",\n              );\n              const explicitStatus =\n                typeof err?.statusCode === \"number\"\n                  ? err.statusCode\n                  : undefined;\n              // Return 400 for validation errors, the explicit statusCode if\n              // set, otherwise 500.\n              const status = isValidationError ? 400 : (explicitStatus ?? 500);\n              setResponseStatus(event, status);\n\n              // Only echo the raw message for known-safe cases:\n              //  - validation errors (deterministic, parameter-shape only)\n              //  - explicit user-facing errors (AgentActionStopError / fail())\n              //  - errors with an explicit statusCode < 500 (client errors)\n              // For uncategorized 500s, return a generic message and keep the\n              // real detail server-side only — it can contain DB/driver/\n              // upstream text we must not leak to HTTP callers.\n              const isUserFacing =\n                isValidationError ||\n                isAgentActionStopError(err) ||\n                (explicitStatus !== undefined && explicitStatus < 500);\n              if (isUserFacing) {\n                return { error: msg };\n              }\n              console.error(`[agent-native] action '${name}' failed:`, err);\n              return { error: \"Internal server error\" };\n            }\n          },\n        ); // end runWithRequestContext\n      }),\n    );\n\n    mounted.push(`${method} ${routePath}`);\n  }\n\n  if (mounted.length > 0 && process.env.DEBUG)\n    console.log(\n      `[action-routes] Mounted ${mounted.length} action route(s): ${mounted.join(\", \")}`,\n    );\n}\n"]}

package/dist/server/auth-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-plugin.d.ts","sourceRoot":"","sources":["../../src/server/auth-plugin.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAO7C,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE9D,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,cAAc,CAOtE;AAED;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,cAE/B,CAAC"}
+{"version":3,"file":"auth-plugin.d.ts","sourceRoot":"","sources":["../../src/server/auth-plugin.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAQ7C,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE9D,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,cAAc,CAWtE;AAED;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,cAE/B,CAAC"}

package/dist/server/auth-plugin.js

@@ -1,11 +1,15 @@
 import { autoMountAuth } from "./auth.js";
-import { getH3App, awaitBootstrap, markDefaultPluginProvided, } from "./framework-request-handler.js";
+import { getH3App, awaitBootstrap, markDefaultPluginProvided, trackPluginInit, } from "./framework-request-handler.js";
 export function createAuthPlugin(options) {
-    return async (nitroApp) => {
+    return (nitroApp) => {
         markDefaultPluginProvided(nitroApp, "auth");
-        // Wait for any other default plugins to finish mounting first.
-        await awaitBootstrap(nitroApp);
-        await autoMountAuth(getH3App(nitroApp), options);
+        const initPromise = (async () => {
+            await awaitBootstrap(nitroApp);
+            await autoMountAuth(getH3App(nitroApp), options);
+        })();
+        trackPluginInit(nitroApp, initPromise, {
+            paths: ["/_agent-native/auth"],
+        });
     };
 }
 /**

package/dist/server/auth-plugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-plugin.js","sourceRoot":"","sources":["../../src/server/auth-plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EACL,QAAQ,EACR,cAAc,EACd,yBAAyB,GAC1B,MAAM,gCAAgC,CAAC;AAIxC,MAAM,UAAU,gBAAgB,CAAC,OAAqB;IACpD,OAAO,KAAK,EAAE,QAAa,EAAE,EAAE;QAC7B,yBAAyB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5C,+DAA+D;QAC/D,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAmB,KAAK,EAAE,QAAa,EAAE,EAAE;IACvE,OAAO,gBAAgB,EAAE,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC,CAAC","sourcesContent":["import { autoMountAuth } from \"./auth.js\";\nimport type { AuthOptions } from \"./auth.js\";\nimport {\n  getH3App,\n  awaitBootstrap,\n  markDefaultPluginProvided,\n} from \"./framework-request-handler.js\";\n\ntype NitroPluginDef = (nitroApp: any) => void | Promise<void>;\n\nexport function createAuthPlugin(options?: AuthOptions): NitroPluginDef {\n  return async (nitroApp: any) => {\n    markDefaultPluginProvided(nitroApp, \"auth\");\n    // Wait for any other default plugins to finish mounting first.\n    await awaitBootstrap(nitroApp);\n    await autoMountAuth(getH3App(nitroApp), options);\n  };\n}\n\n/**\n * Default auth plugin — email/password auth with optional Google OAuth.\n * Google sign-in button appears automatically on the login page when\n * GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET env vars are set.\n */\nexport const defaultAuthPlugin: NitroPluginDef = async (nitroApp: any) => {\n  return createAuthPlugin()(nitroApp);\n};\n"]}
+{"version":3,"file":"auth-plugin.js","sourceRoot":"","sources":["../../src/server/auth-plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EACL,QAAQ,EACR,cAAc,EACd,yBAAyB,EACzB,eAAe,GAChB,MAAM,gCAAgC,CAAC;AAIxC,MAAM,UAAU,gBAAgB,CAAC,OAAqB;IACpD,OAAO,CAAC,QAAa,EAAE,EAAE;QACvB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE;YAC9B,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;YAC/B,MAAM,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;QACnD,CAAC,CAAC,EAAE,CAAC;QACL,eAAe,CAAC,QAAQ,EAAE,WAAW,EAAE;YACrC,KAAK,EAAE,CAAC,qBAAqB,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAmB,KAAK,EAAE,QAAa,EAAE,EAAE;IACvE,OAAO,gBAAgB,EAAE,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC,CAAC","sourcesContent":["import { autoMountAuth } from \"./auth.js\";\nimport type { AuthOptions } from \"./auth.js\";\nimport {\n  getH3App,\n  awaitBootstrap,\n  markDefaultPluginProvided,\n  trackPluginInit,\n} from \"./framework-request-handler.js\";\n\ntype NitroPluginDef = (nitroApp: any) => void | Promise<void>;\n\nexport function createAuthPlugin(options?: AuthOptions): NitroPluginDef {\n  return (nitroApp: any) => {\n    markDefaultPluginProvided(nitroApp, \"auth\");\n    const initPromise = (async () => {\n      await awaitBootstrap(nitroApp);\n      await autoMountAuth(getH3App(nitroApp), options);\n    })();\n    trackPluginInit(nitroApp, initPromise, {\n      paths: [\"/_agent-native/auth\"],\n    });\n  };\n}\n\n/**\n * Default auth plugin — email/password auth with optional Google OAuth.\n * Google sign-in button appears automatically on the login page when\n * GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET env vars are set.\n */\nexport const defaultAuthPlugin: NitroPluginDef = async (nitroApp: any) => {\n  return createAuthPlugin()(nitroApp);\n};\n"]}

package/dist/server/better-auth-instance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"better-auth-instance.d.ts","sourceRoot":"","sources":["../../src/server/better-auth-instance.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,EAAc,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAwDjE,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO5E;AAED,wBAAsB,gBAAgB,CAAC,EACrC,YAAY,EACZ,UAAU,EACV,KAAK,EACL,IAAI,EACJ,WAAW,GACZ,EAAE;IACD,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAClD,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBhB;AAkJD,gBAAgB;AAChB,wBAAgB,6BAA6B,IAAI;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAiCA;AAED,gBAAgB;AAChB,wBAAgB,+BAA+B,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxE;AAED,wBAAgB,2BAA2B,IAAI,OAAO,CASrD;AAED,uDAAuD;AACvD,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAMD,4FAA4F;AAC5F,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjD,GAAG,EAAE;QACH,UAAU,EAAE,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,OAAO,CAAA;SAAE,KAAK,OAAO,CAAC;YAClD,IAAI,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAC;gBAAC,KAAK,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAA;aAAE,CAAC;YAClD,OAAO,EAAE;gBACP,EAAE,EAAE,MAAM,CAAC;gBACX,KAAK,EAAE,MAAM,CAAC;gBACd,SAAS,EAAE,IAAI,CAAC;aACjB,CAAC;SACH,GAAG,IAAI,CAAC,CAAC;QACV,WAAW,EAAE,CAAC,IAAI,EAAE;YAClB,IAAI,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAC;gBAAC,QAAQ,EAAE,MAAM,CAAA;aAAE,CAAC;SAC3C,KAAK,OAAO,CAAC;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,GAAG,CAAA;SAAE,GAAG,IAAI,CAAC,CAAC;QACrD,WAAW,EAAE,CAAC,IAAI,EAAE;YAClB,IAAI,EAAE;gBACJ,KAAK,EAAE,MAAM,CAAC;gBACd,QAAQ,EAAE,MAAM,CAAC;gBACjB,IAAI,EAAE,MAAM,CAAC;gBACb,WAAW,CAAC,EAAE,MAAM,CAAC;aACtB,CAAC;YACF,OAAO,CAAC,EAAE,OAAO,CAAC;SACnB,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,EAAE,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,OAAO,CAAA;SAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;KACvD,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,eAAe,CAAC,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;IACvD,qCAAqC;IACrC,OAAO,CAAC,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACvC;;;;;;;;;;;;;OAaG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAqUD;;;GAGG;AACH,wBAAsB,aAAa,CACjC,MAAM,CAAC,EAAE,gBAAgB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAO7B;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,kBAAkB,GAAG,SAAS,CAElE;AAED;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB;IACxC,eAAe,EAAE,CACf,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QAAE,eAAe,EAAE,OAAO,CAAA;KAAE,KACnC,OAAO,CAAC;QACX,IAAI,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACnD,QAAQ,EAAE,KAAK,CAAC;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAC5D,GAAG,IAAI,CAAC,CAAC;IACV,WAAW,EAAE,CAAC,OAAO,EAAE;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;KACnB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvB,UAAU,EAAE,CAAC,IAAI,EAAE;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,wBAAsB,4BAA4B,CAChD,MAAM,CAAC,EAAE,gBAAgB,GACxB,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAmBhD;AAED,wBAAwB;AACxB,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAYrD"}
+{"version":3,"file":"better-auth-instance.d.ts","sourceRoot":"","sources":["../../src/server/better-auth-instance.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,EAAc,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAwDjE,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO5E;AAED,wBAAsB,gBAAgB,CAAC,EACrC,YAAY,EACZ,UAAU,EACV,KAAK,EACL,IAAI,EACJ,WAAW,GACZ,EAAE;IACD,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAClD,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBhB;AAkJD,gBAAgB;AAChB,wBAAgB,6BAA6B,IAAI;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAiCA;AAED,gBAAgB;AAChB,wBAAgB,+BAA+B,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxE;AAED,wBAAgB,2BAA2B,IAAI,OAAO,CAarD;AAED,uDAAuD;AACvD,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAMD,4FAA4F;AAC5F,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjD,GAAG,EAAE;QACH,UAAU,EAAE,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,OAAO,CAAA;SAAE,KAAK,OAAO,CAAC;YAClD,IAAI,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAC;gBAAC,KAAK,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAA;aAAE,CAAC;YAClD,OAAO,EAAE;gBACP,EAAE,EAAE,MAAM,CAAC;gBACX,KAAK,EAAE,MAAM,CAAC;gBACd,SAAS,EAAE,IAAI,CAAC;aACjB,CAAC;SACH,GAAG,IAAI,CAAC,CAAC;QACV,WAAW,EAAE,CAAC,IAAI,EAAE;YAClB,IAAI,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAC;gBAAC,QAAQ,EAAE,MAAM,CAAA;aAAE,CAAC;SAC3C,KAAK,OAAO,CAAC;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,GAAG,CAAA;SAAE,GAAG,IAAI,CAAC,CAAC;QACrD,WAAW,EAAE,CAAC,IAAI,EAAE;YAClB,IAAI,EAAE;gBACJ,KAAK,EAAE,MAAM,CAAC;gBACd,QAAQ,EAAE,MAAM,CAAC;gBACjB,IAAI,EAAE,MAAM,CAAC;gBACb,WAAW,CAAC,EAAE,MAAM,CAAC;aACtB,CAAC;YACF,OAAO,CAAC,EAAE,OAAO,CAAC;SACnB,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,EAAE,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,OAAO,CAAA;SAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;KACvD,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,eAAe,CAAC,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;IACvD,qCAAqC;IACrC,OAAO,CAAC,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACvC;;;;;;;;;;;;;OAaG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAqUD;;;GAGG;AACH,wBAAsB,aAAa,CACjC,MAAM,CAAC,EAAE,gBAAgB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAO7B;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,kBAAkB,GAAG,SAAS,CAElE;AAED;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB;IACxC,eAAe,EAAE,CACf,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QAAE,eAAe,EAAE,OAAO,CAAA;KAAE,KACnC,OAAO,CAAC;QACX,IAAI,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACnD,QAAQ,EAAE,KAAK,CAAC;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAC5D,GAAG,IAAI,CAAC,CAAC;IACV,WAAW,EAAE,CAAC,OAAO,EAAE;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;KACnB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvB,UAAU,EAAE,CAAC,IAAI,EAAE;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,wBAAsB,4BAA4B,CAChD,MAAM,CAAC,EAAE,gBAAgB,GACxB,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAmBhD;AAED,wBAAwB;AACxB,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAYrD"}

package/dist/server/better-auth-instance.js

@@ -240,7 +240,10 @@ export function resolveSignupTrackingProperties() {
 export function shouldSkipEmailVerification() {
     const value = process.env.AUTH_SKIP_EMAIL_VERIFICATION;
     if (value == null) {
-        return (process.env.NODE_ENV === "development" || process.env.NODE_ENV === "test");
+        const deployContext = process.env.AGENT_NATIVE_BUILD_DEPLOY_CONTEXT || process.env.CONTEXT;
+        return (process.env.NODE_ENV === "development" ||
+            process.env.NODE_ENV === "test" ||
+            deployContext === "deploy-preview");
     }
     const normalized = value.trim().toLowerCase();
     return normalized !== "" && normalized !== "0" && normalized !== "false";