@agent-native/core 0.124.3 → 0.124.4

package/corpus/templates/slides/app/components/editor/AssetLibraryPanel.tsx

@@ -3,8 +3,10 @@ import { useT } from "@agent-native/core/client/i18n";
 import { IconUpload, IconTrash, IconLoader2, IconX } from "@tabler/icons-react";
 import { useState, useEffect, useCallback, useRef } from "react";
 import { createPortal } from "react-dom";
+import { toast } from "sonner";
 
 interface Asset {
+  id: string;
   url: string;
   filename: string;
   size: number;
@@ -67,33 +69,54 @@ export default function AssetLibraryPanel({
     const files = e.target.files;
     if (!files || files.length === 0) return;
     setUploading(true);
+    const failures: string[] = [];
     try {
       for (const file of Array.from(files)) {
         const form = new FormData();
         form.append("file", file);
-        await fetch(`${appBasePath()}/api/assets/upload`, {
-          method: "POST",
-          body: form,
-        });
+        try {
+          const res = await fetch(`${appBasePath()}/api/assets/upload`, {
+            method: "POST",
+            body: form,
+          });
+          if (!res.ok) {
+            const body = await res.json().catch(() => null);
+            failures.push(
+              `${file.name}: ${body?.error || `HTTP ${res.status}`}`,
+            );
+          }
+        } catch {
+          failures.push(`${file.name}: upload failed`);
+        }
       }
       await fetchAssets();
-    } catch {
+      if (failures.length > 0) {
+        toast.error(t("raw.assetUploadFailed"), {
+          description: failures.join("\n"),
+        });
+      }
     } finally {
       setUploading(false);
       e.target.value = "";
     }
   };
 
-  const handleDelete = async (filename: string) => {
+  const handleDelete = async (id: string) => {
     try {
-      await fetch(
-        `${appBasePath()}/api/assets/${encodeURIComponent(filename)}`,
+      const res = await fetch(
+        `${appBasePath()}/api/assets/${encodeURIComponent(id)}`,
         {
           method: "DELETE",
         },
       );
-      setAssets((prev) => prev.filter((a) => a.filename !== filename));
-    } catch {}
+      if (!res.ok) {
+        toast.error(t("raw.assetDeleteFailed"));
+        return;
+      }
+      setAssets((prev) => prev.filter((a) => a.id !== id));
+    } catch {
+      toast.error(t("raw.assetDeleteFailed"));
+    }
   };
 
   const handleSelect = (url: string) => {
@@ -185,7 +208,7 @@ export default function AssetLibraryPanel({
           <div className="grid grid-cols-3 gap-2">
             {assets.map((asset) => (
               <div
-                key={asset.filename}
+                key={asset.id}
                 className="group relative aspect-square rounded-md overflow-hidden border border-border bg-muted"
               >
                 <button
@@ -204,7 +227,7 @@ export default function AssetLibraryPanel({
                 <button
                   onClick={(e) => {
                     e.stopPropagation();
-                    handleDelete(asset.filename);
+                    handleDelete(asset.id);
                   }}
                   className="absolute top-0.5 right-0.5 w-5 h-5 bg-black/70 text-white/70 hover:text-red-400 flex items-center justify-center rounded-full opacity-0 group-hover:opacity-100 transition-opacity"
                   aria-label={`Delete ${asset.filename}`}

package/corpus/templates/slides/app/components/editor/EditorToolbar.tsx

@@ -164,6 +164,16 @@ const backgroundOptions = [
   "bg-[#ffffff]",
 ];
 
+const HEX_COLOR_PATTERN = /^#([0-9a-f]{3}|[0-9a-f]{6})$/i;
+
+/** Native <input type="color"> only accepts 3/6-digit hex — fall back to
+ * black for gradients or other raw CSS values so the picker still opens. */
+function toColorInputValue(background: string | undefined): string {
+  return background && HEX_COLOR_PATTERN.test(background)
+    ? background
+    : "#000000";
+}
+
 /** Popover anchored to a button ref */
 function ToolbarPopover({
   open,
@@ -294,6 +304,9 @@ export default function EditorToolbar({
   }, []);
 
   const activeAspectRatio: AspectRatio = aspectRatio ?? DEFAULT_ASPECT_RATIO;
+  const isCustomBackground =
+    !!currentSlide?.background &&
+    !backgroundOptions.includes(currentSlide.background);
   const [layoutOpen, setLayoutOpen] = useState(false);
   const layoutRef = useRef<HTMLButtonElement>(null);
 
@@ -544,6 +557,29 @@ export default function EditorToolbar({
                       }`}
                     />
                   ))}
+                  <label
+                    className={`relative w-10 h-7 rounded-md border cursor-pointer overflow-hidden transition-all ${
+                      isCustomBackground
+                        ? "border-[#609FF8] ring-1 ring-[#609FF8]/30"
+                        : "border-border hover:border-foreground/20"
+                    }`}
+                    style={{
+                      background: isCustomBackground
+                        ? currentSlide.background
+                        : "conic-gradient(from 180deg, #ff0000, #ffff00, #00ff00, #00ffff, #0000ff, #ff00ff, #ff0000)",
+                    }}
+                    title={t("editorToolbar.customColor")}
+                  >
+                    <input
+                      type="color"
+                      value={toColorInputValue(currentSlide.background)}
+                      onChange={(e) => {
+                        onUpdateSlide!({ background: e.target.value });
+                      }}
+                      className="absolute inset-0 h-full w-full cursor-pointer opacity-0"
+                      aria-label={t("editorToolbar.customColor")}
+                    />
+                  </label>
                 </div>
               </div>
 

package/corpus/templates/slides/app/i18n/en-US.ts

@@ -61,6 +61,8 @@ const messages = {
     deckOptions: "Deck options",
     generatingImage: "Generating image...",
     noAssetsYet: "No assets yet.",
+    assetUploadFailed: "Some uploads failed",
+    assetDeleteFailed: "Failed to delete asset",
     contentMarkdown: "Content (Markdown)",
     speakerNotes: "Speaker Notes",
     speakerNotesForSlide: "Speaker Notes — Slide {{index}} / {{count}}",
@@ -192,6 +194,7 @@ const messages = {
     slideSettings: "Slide settings",
     layout: "Layout",
     background: "Background",
+    customColor: "Custom color",
     media: "Media",
     generateImage: "Generate Image",
     assetLibrary: "Asset Library",

package/corpus/templates/slides/app/lib/dynamic-import.ts

@@ -0,0 +1,63 @@
+const RELOAD_GUARD_KEY = "slides:export-module-reload-attempted";
+
+// Chrome/Firefox/Safari all use this wording (or close to it) for a dynamic
+// `import()` whose chunk 404s — typically because the app was redeployed
+// after the page loaded and the browser still references an old, now-missing
+// chunk hash. Calling `import()` again with the *same* specifier re-requests
+// the same now-missing URL and fails immediately, so a plain retry never
+// recovers this case — only a full reload picks up the current chunk map.
+const STALE_CHUNK_PATTERN =
+  /fetch dynamically imported module|error loading dynamically imported module/i;
+
+function isStaleChunkError(error: unknown): boolean {
+  const message = error instanceof Error ? error.message : String(error);
+  return STALE_CHUNK_PATTERN.test(message);
+}
+
+function hasAlreadyReloaded(): boolean {
+  try {
+    return sessionStorage.getItem(RELOAD_GUARD_KEY) === "1";
+  } catch {
+    return false;
+  }
+}
+
+function markReloaded(): void {
+  try {
+    sessionStorage.setItem(RELOAD_GUARD_KEY, "1");
+  } catch {
+    // sessionStorage unavailable (e.g. private mode) — reload once anyway,
+    // worst case we reload more than once instead of not recovering at all.
+  }
+}
+
+/**
+ * Lazy `import()` calls for export libraries (jsPDF, modern-screenshot,
+ * dom-to-pptx) fail with "Failed to fetch dynamically imported module" when
+ * the chunk is momentarily unreachable (flaky network) or stale after a
+ * redeploy. For the stale-chunk case, retrying the same specifier is a no-op,
+ * so we reload the page once to pick up the current chunk map; for anything
+ * else, a same-specifier retry can still clear a transient blip.
+ */
+export async function importExportModule<T>(
+  loader: () => Promise<T>,
+): Promise<T> {
+  try {
+    return await loader();
+  } catch (error) {
+    if (isStaleChunkError(error) && !hasAlreadyReloaded()) {
+      markReloaded();
+      window.location.reload();
+      // The reload navigates away; never resolve so callers don't proceed
+      // against a page that's about to unload.
+      return new Promise<T>(() => {});
+    }
+    try {
+      return await loader();
+    } catch {
+      throw new Error(
+        "Couldn't load the export module. Refresh the page and try again.",
+      );
+    }
+  }
+}

package/corpus/templates/slides/app/lib/export-pdf-client.ts

@@ -11,6 +11,7 @@
  * doesn't shrink the captured pixels.
  */
 import { type AspectRatio, getAspectRatioDims } from "./aspect-ratios";
+import { importExportModule } from "./dynamic-import";
 
 /**
  * Cross-origin <img> elements without an explicit `crossOrigin="anonymous"`
@@ -99,8 +100,8 @@ export async function exportDeckAsPdf(
   // JPEG (vs PNG) keeps a typical 8-slide deck under ~10 MB instead of
   // ~100 MB — at 0.92 quality the difference is invisible on slide content.
   const [{ domToJpeg }, { jsPDF }] = await Promise.all([
-    import("modern-screenshot"),
-    import("jspdf"),
+    importExportModule(() => import("modern-screenshot")),
+    importExportModule(() => import("jspdf")),
   ]);
 
   // Web fonts (Poppins) must finish loading before capture — otherwise

package/corpus/templates/slides/app/lib/export-pptx-client.ts

@@ -1,4 +1,5 @@
 import { type AspectRatio, getAspectRatioDims } from "./aspect-ratios";
+import { importExportModule } from "./dynamic-import";
 import {
   findSlideExportSource,
   preloadImagesWithCors,
@@ -83,7 +84,7 @@ export async function addSpeakerNotesToPptxBlob(
   const hasNotes = slides.some((slide) => slide.notes?.trim());
   if (!hasNotes) return blob;
 
-  const { default: JSZip } = await import("jszip");
+  const { default: JSZip } = await importExportModule(() => import("jszip"));
   const zip = await JSZip.loadAsync(blob);
 
   const contentTypesFile = zip.file("[Content_Types].xml");
@@ -317,7 +318,9 @@ export async function exportDeckAsPptx(
   slides: PptxExportSlide[],
   aspectRatio?: AspectRatio,
 ): Promise<void> {
-  const { exportToPptx } = await import("dom-to-pptx");
+  const { exportToPptx } = await importExportModule(
+    () => import("dom-to-pptx"),
+  );
 
   if (typeof document !== "undefined" && document.fonts?.ready) {
     await document.fonts.ready;

package/corpus/templates/slides/app/pages/DesignSystems.tsx

@@ -18,6 +18,7 @@ import { Button } from "@/components/ui/button";
 import { useDesignSystems } from "@/hooks/use-design-systems";
 
 import type { DesignSystemData } from "../../shared/api";
+import { missingDesignSystemDataFields } from "../../shared/design-system-validation";
 
 export default function DesignSystems() {
   const t = useT();
@@ -52,7 +53,14 @@ export default function DesignSystems() {
 
   const parseDesignData = (dataStr: string): DesignSystemData | null => {
     try {
-      return JSON.parse(dataStr) as DesignSystemData;
+      const parsed = JSON.parse(dataStr) as DesignSystemData;
+      // DesignSystemCard reads colors.* / typography.* unconditionally, down
+      // to nested fields like typography.headingFont. Rows written before
+      // create/update validation existed can have `colors: {}` and still
+      // pass a truthy check, so reuse the same nested-field validator the
+      // actions use rather than only checking the top-level objects exist.
+      if (missingDesignSystemDataFields(parsed).length > 0) return null;
+      return parsed;
     } catch {
       return null;
     }

package/corpus/templates/slides/server/db/schema.ts

@@ -57,6 +57,17 @@ export const deckShareLinks = table("deck_share_links", {
   createdAt: text("created_at").notNull().default(now()),
 });
 
+export const uploadedAssets = table("uploaded_assets", {
+  id: text("id").primaryKey(),
+  filename: text("filename").notNull(),
+  url: text("url").notNull(),
+  type: text("type").notNull(),
+  size: integer("size").notNull(),
+  provider: text("provider"),
+  ownerEmail: text("owner_email").notNull(),
+  createdAt: text("created_at").notNull().default(now()),
+});
+
 export const slideComments = table("slide_comments", {
   id: text("id").primaryKey(),
   deckId: text("deck_id").notNull(),

package/corpus/templates/slides/server/handlers/assets.ts

@@ -3,11 +3,16 @@ import path from "path";
 import { uploadFile } from "@agent-native/core/file-upload";
 import { getSession } from "@agent-native/core/server";
 import { runWithRequestContext } from "@agent-native/core/server";
+import { and, desc, eq } from "drizzle-orm";
 import {
   defineEventHandler,
+  getRouterParam,
   setResponseStatus,
   readMultipartFormData,
 } from "h3";
+import { nanoid } from "nanoid";
+
+import { getDb, schema } from "../db/index.js";
 
 export const MAX_ASSET_FILE_SIZE = 10 * 1024 * 1024; // 10 MB
 
@@ -19,6 +24,14 @@ export interface UploadedAsset {
   provider?: string;
 }
 
+export interface ListedUploadedAsset {
+  id: string;
+  url: string;
+  filename: string;
+  size: number;
+  createdAt: string;
+}
+
 async function requireSession(event: Parameters<typeof getSession>[0]) {
   const session = await getSession(event).catch(() => null);
   if (!session?.email) {
@@ -137,13 +150,29 @@ export async function uploadImageAsset(args: {
     throw err;
   }
 
-  return {
+  const asset: UploadedAsset = {
     url: result.url,
     filename: args.originalName,
     type: args.type || "application/octet-stream",
     size: args.data.length,
     provider: result.provider,
   };
+
+  // Record the upload so it shows up in GET /api/assets — only the URL and
+  // metadata are stored, never the file bytes (those live with the provider).
+  const db = getDb();
+  await db.insert(schema.uploadedAssets).values({
+    id: nanoid(),
+    filename: asset.filename,
+    url: asset.url,
+    type: asset.type,
+    size: asset.size,
+    provider: asset.provider ?? null,
+    ownerEmail: args.email,
+    createdAt: new Date().toISOString(),
+  });
+
+  return asset;
 }
 
 /**
@@ -185,37 +214,53 @@ export const uploadAsset = defineEventHandler(async (event) => {
 });
 
 /**
- * GET /api/assets — list previously-uploaded assets.
- *
- * Asset history used to come from scanning `public/uploads/<tenant>/` on disk.
- * That source is gone now (see `uploadImageAsset` for the reasoning). Until
- * we plumb a SQL-backed asset index that records each upload (so we can list
- * across providers), this endpoint returns an empty list. The AssetLibraryPanel
- * still works for uploading new images and selecting them for the current
- * editing session.
+ * GET /api/assets — list assets this user has uploaded, most recent first.
  */
 export const listAssets = defineEventHandler(async (event) => {
   const session = await requireSession(event);
   if (!session) {
     return { error: "Unauthorized" };
   }
-  return [];
+  const db = getDb();
+  const rows: ListedUploadedAsset[] = await db
+    .select({
+      id: schema.uploadedAssets.id,
+      url: schema.uploadedAssets.url,
+      filename: schema.uploadedAssets.filename,
+      size: schema.uploadedAssets.size,
+      createdAt: schema.uploadedAssets.createdAt,
+    })
+    .from(schema.uploadedAssets)
+    .where(eq(schema.uploadedAssets.ownerEmail, session.email))
+    .orderBy(desc(schema.uploadedAssets.createdAt));
+  return rows;
 });
 
 /**
- * DELETE /api/assets/:filename — used to delete from `public/uploads/`. With
- * uploads routed through Builder.io / S3 / etc., deletion has to happen via
- * the active provider's API. Returning 501 keeps the endpoint reachable so
- * the frontend doesn't error, and signals that this isn't wired yet.
+ * DELETE /api/assets/:id — removes the upload from this user's asset library
+ * index. Keyed by the row's unique id (not filename) since two uploads can
+ * share the same original filename. The underlying file may still exist with
+ * the storage provider (Builder.io, S3, etc.) — deleting it there requires
+ * that provider's own API — but it no longer appears in this app's library.
  */
 export const deleteAsset = defineEventHandler(async (event) => {
   const session = await requireSession(event);
   if (!session) {
     return { error: "Unauthorized" };
   }
-  setResponseStatus(event, 501);
-  return {
-    error:
-      "Asset deletion via this endpoint is not implemented — uploads now live in the configured file-upload provider (Builder.io, S3, etc.). Delete them through the provider's dashboard.",
-  };
+  const id = getRouterParam(event, "id");
+  if (!id) {
+    setResponseStatus(event, 400);
+    return { error: "Asset id is required" };
+  }
+  const db = getDb();
+  await db
+    .delete(schema.uploadedAssets)
+    .where(
+      and(
+        eq(schema.uploadedAssets.id, decodeURIComponent(id)),
+        eq(schema.uploadedAssets.ownerEmail, session.email),
+      ),
+    );
+  return { success: true };
 });

package/corpus/templates/slides/server/handlers/import/html-converter.ts

@@ -9,6 +9,44 @@ function esc(text: string): string {
     .replace(/"/g, """);
 }
 
+/**
+ * Render a page's embedded photo as the full-bleed slide background with the
+ * page's extracted text overlaid on top. Designed PDF pages (photo
+ * backgrounds, gradients, custom typography) have no reliable shape
+ * structure to reconstruct, so the embedded image is reused directly — but
+ * the vector/glyph text on the page is not something we can rasterize
+ * reliably headless, so the extracted text is drawn as real HTML on top
+ * instead of relying on the page's own (font-dependent) rendering.
+ *
+ * `pdf-parse`'s plain-text extraction carries no color/font metadata, so the
+ * heading accent color below is a stand-in, not a recovered value — when a
+ * subtitle is present (a content slide, not a title slide) it renders as a
+ * centered card with a divider rule so the two text roles stay visually
+ * distinct instead of collapsing into one flat paragraph.
+ */
+export function buildFullBleedImageSlideHtml(
+  imageUrl: string,
+  headingText?: string,
+  subtitleText?: string,
+): string {
+  let overlay = "";
+  if (headingText && subtitleText) {
+    overlay = `\n    <div style="position: absolute; left: 0; right: 0; bottom: 0; background: linear-gradient(to top, rgba(12,10,8,0.95) 0%, rgba(12,10,8,0.88) 55%, rgba(12,10,8,0.4) 82%, rgba(12,10,8,0) 100%); padding: 56px 56px 60px; text-align: center; font-family: 'Poppins', sans-serif;">
+      <div style="width: 72px; height: 3px; background: #d8b26a; margin: 0 auto 20px;"></div>
+      <h2 style="font-size: 30px; font-weight: 800; color: #d8b26a; line-height: 1.25; margin: 0 0 14px;">${esc(headingText)}</h2>
+      <p style="font-size: 19px; font-weight: 500; color: #fff; line-height: 1.5; margin: 0;">${esc(subtitleText)}</p>
+    </div>`;
+  } else if (headingText) {
+    overlay = `\n    <div style="position: absolute; inset: 0; background: linear-gradient(to top, rgba(0,0,0,0.85) 0%, rgba(0,0,0,0.15) 45%, rgba(0,0,0,0) 65%);"></div>
+    <div style="position: absolute; left: 0; right: 0; bottom: 0; padding: 60px 70px; font-family: 'Poppins', sans-serif;">
+      <h2 style="font-size: 40px; font-weight: 900; color: #fff; line-height: 1.15; letter-spacing: -1px; margin: 0;">${esc(headingText)}</h2>
+    </div>`;
+  }
+  return `<div class="fmd-slide" style="position: relative; width: 100%; height: 100%; overflow: hidden;">
+    <img src="${esc(imageUrl)}" alt="" style="position: absolute; inset: 0; width: 100%; height: 100%; object-fit: cover;" />${overlay}
+</div>`;
+}
+
 /** Wrap text in formatting tags based on run properties. */
 function formatRun(run: ParsedTextRun): string {
   let text = esc(run.content);

package/corpus/templates/slides/server/plugins/db.ts

@@ -210,6 +210,26 @@ const runSlidesMigrations = runMigrations(
   CREATE INDEX IF NOT EXISTS slide_comments_deck_created_idx ON slide_comments (deck_id, created_at);
   CREATE INDEX IF NOT EXISTS slide_comments_deck_slide_created_idx ON slide_comments (deck_id, slide_id, created_at)`,
     },
+    // v20: index of assets uploaded through the file-upload provider chain.
+    // GET /api/assets previously always returned [] (no persisted record of
+    // uploads), so the Asset Library panel could never show or re-select a
+    // file after uploading it. This table only stores the returned URL/
+    // metadata, never the file bytes.
+    {
+      version: 20,
+      name: "slides-uploaded-assets-table",
+      sql: `CREATE TABLE IF NOT EXISTS uploaded_assets (
+    id TEXT PRIMARY KEY,
+    filename TEXT NOT NULL,
+    url TEXT NOT NULL,
+    type TEXT NOT NULL,
+    size INTEGER NOT NULL,
+    provider TEXT,
+    owner_email TEXT NOT NULL,
+    created_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+  CREATE INDEX IF NOT EXISTS uploaded_assets_owner_created_idx ON uploaded_assets (owner_email, created_at)`,
+    },
   ],
   { table: "slides_migrations" },
 );

package/corpus/templates/slides/shared/design-system-validation.ts

@@ -0,0 +1,62 @@
+const REQUIRED_COLOR_KEYS = [
+  "primary",
+  "secondary",
+  "accent",
+  "background",
+  "surface",
+  "text",
+  "textMuted",
+];
+
+const REQUIRED_TYPOGRAPHY_KEYS = [
+  "headingFont",
+  "bodyFont",
+  "headingWeight",
+  "bodyWeight",
+];
+
+/**
+ * The Design Systems page and slide renderers read data.colors.* and
+ * data.typography.* unconditionally (no optional chaining). A syntactically
+ * valid but incomplete `data` payload — e.g. from an interrupted generation —
+ * would otherwise persist and crash on the very next read. Shared between the
+ * create/update actions (write-time validation) and the Design Systems page
+ * (read-time validation of rows written before this check existed).
+ */
+export function missingDesignSystemDataFields(value: unknown): string[] {
+  const missing: string[] = [];
+  const record =
+    value && typeof value === "object"
+      ? (value as Record<string, unknown>)
+      : {};
+
+  const colors =
+    record.colors && typeof record.colors === "object"
+      ? (record.colors as Record<string, unknown>)
+      : null;
+  if (!colors) {
+    missing.push("colors");
+  } else {
+    for (const key of REQUIRED_COLOR_KEYS) {
+      if (typeof colors[key] !== "string" || !colors[key]) {
+        missing.push(`colors.${key}`);
+      }
+    }
+  }
+
+  const typography =
+    record.typography && typeof record.typography === "object"
+      ? (record.typography as Record<string, unknown>)
+      : null;
+  if (!typography) {
+    missing.push("typography");
+  } else {
+    for (const key of REQUIRED_TYPOGRAPHY_KEYS) {
+      if (typeof typography[key] !== "string" || !typography[key]) {
+        missing.push(`typography.${key}`);
+      }
+    }
+  }
+
+  return missing;
+}

package/dist/a2a/auth-policy.js

@@ -16,7 +16,7 @@ export function isA2AProductionRuntime() {
     }
     if (process.env.CF_PAGES === "1")
         return true;
-    if ("__cf_env" in globalThis)
+    if ("__cf_env" in globalThis || "__env__" in globalThis)
         return true;
     if (process.env.VERCEL || process.env.VERCEL_ENV)
         return true;

package/dist/a2a/auth-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-policy.js","sourceRoot":"","sources":["../../src/a2a/auth-policy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB;IACpC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,OAAO,CAAC,GAAG,CAAC,wBAAwB;QACpC,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM,EACpC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,UAAU,IAAI,UAAU;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO,sBAAsB,EAAE,IAAI,sBAAsB,EAAE,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAA2B;IAC/D,IAAI,sBAAsB,EAAE;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACjE,OAAO,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;AAChC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,iBAAiB,CAAC,IAA+B;IAC/D,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,OAAO,CACL,CAAC,KAAK,WAAW;QACjB,CAAC,KAAK,KAAK;QACX,CAAC,KAAK,kBAAkB;QACxB,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QACpB,CAAC,KAAK,WAAW,CAClB,CAAC;AACJ,CAAC","sourcesContent":["/**\n * A2A auth policy helpers shared by discovery, the JSON-RPC gate, and task\n * handlers. Serverless providers do not always expose `NODE_ENV=production`\n * consistently at runtime, so production-like A2A checks also look at the\n * provider flags those platforms set in deployed functions.\n */\nexport function isA2AProductionRuntime(): boolean {\n  if (process.env.NODE_ENV === \"production\") return true;\n  if (process.env.NETLIFY === \"true\" && process.env.NETLIFY_LOCAL !== \"true\") {\n    return true;\n  }\n  if (\n    process.env.AWS_LAMBDA_FUNCTION_NAME &&\n    process.env.NETLIFY_LOCAL !== \"true\"\n  ) {\n    return true;\n  }\n  if (process.env.CF_PAGES === \"1\") return true;\n  if (\"__cf_env\" in globalThis) return true;\n  if (process.env.VERCEL || process.env.VERCEL_ENV) return true;\n  if (process.env.RENDER || process.env.FLY_APP_NAME || process.env.K_SERVICE) {\n    return true;\n  }\n  return false;\n}\n\nexport function hasConfiguredA2ASecret(): boolean {\n  return !!process.env.A2A_SECRET?.trim();\n}\n\nexport function shouldAdvertiseJwtA2AAuth(): boolean {\n  return hasConfiguredA2ASecret() || isA2AProductionRuntime();\n}\n\n/**\n * True only when unsigned internal self-dispatch is acceptable: no A2A_SECRET\n * is configured AND we can positively identify a local/dev runtime. Everything\n * else — production, or any UNRECOGNIZED deployed/networked host — must fail\n * closed and require A2A_SECRET. `loopback` should be whether the inbound\n * request arrived over the loopback interface (127.0.0.1/::1); callers that\n * cannot determine the peer address pass `false`.\n *\n * NODE_ENV alone is deliberately NOT a trust grant: a self-hosted deployment\n * that doesn't set NODE_ENV=production and isn't recognized by\n * `isA2AProductionRuntime()` (a bare Docker/VPS/K8s pod) must still fail\n * closed unless the request actually came from loopback or the explicit\n * opt-in flag is set.\n */\nexport function isTrustedLocalRuntime(opts: { loopback: boolean }): boolean {\n  if (isA2AProductionRuntime()) return false;\n  if (process.env.A2A_ALLOW_UNSIGNED_INTERNAL === \"1\") return true;\n  return opts.loopback === true;\n}\n\n/** True if a socket peer address is a loopback/local address. */\nexport function isLoopbackAddress(addr: string | undefined | null): boolean {\n  if (!addr) return false;\n  const a = addr.trim();\n  return (\n    a === \"127.0.0.1\" ||\n    a === \"::1\" ||\n    a === \"::ffff:127.0.0.1\" ||\n    a.startsWith(\"127.\") ||\n    a === \"localhost\"\n  );\n}\n"]}
+{"version":3,"file":"auth-policy.js","sourceRoot":"","sources":["../../src/a2a/auth-policy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB;IACpC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,OAAO,CAAC,GAAG,CAAC,wBAAwB;QACpC,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM,EACpC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,UAAU,IAAI,UAAU,IAAI,SAAS,IAAI,UAAU;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO,sBAAsB,EAAE,IAAI,sBAAsB,EAAE,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAA2B;IAC/D,IAAI,sBAAsB,EAAE;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACjE,OAAO,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;AAChC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,iBAAiB,CAAC,IAA+B;IAC/D,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,OAAO,CACL,CAAC,KAAK,WAAW;QACjB,CAAC,KAAK,KAAK;QACX,CAAC,KAAK,kBAAkB;QACxB,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QACpB,CAAC,KAAK,WAAW,CAClB,CAAC;AACJ,CAAC","sourcesContent":["/**\n * A2A auth policy helpers shared by discovery, the JSON-RPC gate, and task\n * handlers. Serverless providers do not always expose `NODE_ENV=production`\n * consistently at runtime, so production-like A2A checks also look at the\n * provider flags those platforms set in deployed functions.\n */\nexport function isA2AProductionRuntime(): boolean {\n  if (process.env.NODE_ENV === \"production\") return true;\n  if (process.env.NETLIFY === \"true\" && process.env.NETLIFY_LOCAL !== \"true\") {\n    return true;\n  }\n  if (\n    process.env.AWS_LAMBDA_FUNCTION_NAME &&\n    process.env.NETLIFY_LOCAL !== \"true\"\n  ) {\n    return true;\n  }\n  if (process.env.CF_PAGES === \"1\") return true;\n  if (\"__cf_env\" in globalThis || \"__env__\" in globalThis) return true;\n  if (process.env.VERCEL || process.env.VERCEL_ENV) return true;\n  if (process.env.RENDER || process.env.FLY_APP_NAME || process.env.K_SERVICE) {\n    return true;\n  }\n  return false;\n}\n\nexport function hasConfiguredA2ASecret(): boolean {\n  return !!process.env.A2A_SECRET?.trim();\n}\n\nexport function shouldAdvertiseJwtA2AAuth(): boolean {\n  return hasConfiguredA2ASecret() || isA2AProductionRuntime();\n}\n\n/**\n * True only when unsigned internal self-dispatch is acceptable: no A2A_SECRET\n * is configured AND we can positively identify a local/dev runtime. Everything\n * else — production, or any UNRECOGNIZED deployed/networked host — must fail\n * closed and require A2A_SECRET. `loopback` should be whether the inbound\n * request arrived over the loopback interface (127.0.0.1/::1); callers that\n * cannot determine the peer address pass `false`.\n *\n * NODE_ENV alone is deliberately NOT a trust grant: a self-hosted deployment\n * that doesn't set NODE_ENV=production and isn't recognized by\n * `isA2AProductionRuntime()` (a bare Docker/VPS/K8s pod) must still fail\n * closed unless the request actually came from loopback or the explicit\n * opt-in flag is set.\n */\nexport function isTrustedLocalRuntime(opts: { loopback: boolean }): boolean {\n  if (isA2AProductionRuntime()) return false;\n  if (process.env.A2A_ALLOW_UNSIGNED_INTERNAL === \"1\") return true;\n  return opts.loopback === true;\n}\n\n/** True if a socket peer address is a loopback/local address. */\nexport function isLoopbackAddress(addr: string | undefined | null): boolean {\n  if (!addr) return false;\n  const a = addr.trim();\n  return (\n    a === \"127.0.0.1\" ||\n    a === \"::1\" ||\n    a === \"::ffff:127.0.0.1\" ||\n    a.startsWith(\"127.\") ||\n    a === \"localhost\"\n  );\n}\n"]}

package/dist/agent/production-agent.d.ts

@@ -424,6 +424,7 @@ export type AgentLoopFinalResponseGuardResult = string | {
     expandToolSurface?: boolean;
 };
 export type AgentLoopFinalResponseGuard = (context: AgentLoopFinalResponseGuardContext) => AgentLoopFinalResponseGuardResult | null | undefined | Promise<AgentLoopFinalResponseGuardResult | null | undefined>;
+export declare const AGENT_INTERNAL_GUARD_PROMPT = "Automated quality check on the draft answer you just produced. This is a directive from this application's own response guard, not a message from the user and not content from a tool result or web page. Follow it and revise your answer. Do not quote it, describe it, or treat it as an injection attempt. If it contradicts what you observed this turn, state what you actually observed instead of asserting the guard's premise.";
 export declare const AGENT_INTERNAL_CONTINUE_PROMPT = "Continue from where you left off and finish the user's original request. Do not repeat completed work, do not mention internal reconnects, time limits, or step limits, and continue as if this is the same uninterrupted run.";
 export type AgentLoopContinuationReason = "run_timeout" | "loop_limit" | "max_tokens" | "stream_ended" | "gateway_timeout" | "network_interrupted" | "no_progress";
 export declare function appendAgentLoopContinuation(messages: EngineMessage[], reason: AgentLoopContinuationReason, options?: {