@agent-native/core 0.13.1 → 0.14.1

package/dist/server/agent-discovery.d.ts

@@ -5,6 +5,27 @@ export interface DiscoveredAgent {
     url: string;
     color: string;
 }
+export interface WorkspaceAppManifestEntry {
+    id: string;
+    name: string;
+    description: string;
+    path: string;
+    url?: string | null;
+    isDispatch?: boolean;
+}
+/**
+ * Resolve the workspace app manifest from the same fallback chain that
+ * `discoverWorkspaceAgents` uses: `AGENT_NATIVE_WORKSPACE_APPS_JSON` env →
+ * `.agent-native/workspace-apps.json` (or sibling) on disk → live filesystem
+ * scan of `apps/<id>/package.json` under the workspace root.
+ *
+ * Callers (e.g. the dispatch `/dispatch/<appId>` catch-all loader) need this
+ * to behave the same in production deploys (which write the manifest file)
+ * and during local dev (where new apps appear under `apps/` without an env
+ * restart). Reading only the env var would silently downgrade the behavior
+ * in both cases.
+ */
+export declare function loadWorkspaceAppsManifest(): WorkspaceAppManifestEntry[] | null;
 export declare function shouldIncludeRemoteAgentManifest(manifest: {
     id?: string | null;
 }, selfAppId?: string): boolean;

package/dist/server/agent-discovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-discovery.d.ts","sourceRoot":"","sources":["../../src/server/agent-discovery.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAgDD,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EAChC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAST;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,eAAe,EAAE,CAUtE;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,EAAE,CAAC,CAyE5B;AAED;;GAEG;AACH,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAItC;AAsND;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,EAAE,eAAe,EAOnD,CAAC"}
+{"version":3,"file":"agent-discovery.d.ts","sourceRoot":"","sources":["../../src/server/agent-discovery.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAuCD,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,IACrC,yBAAyB,EAAE,GAC3B,IAAI,CAMP;AAED,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EAChC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAST;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,eAAe,EAAE,CAUtE;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,EAAE,CAAC,CAyE5B;AAED;;GAEG;AACH,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAItC;AAmND;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,EAAE,eAAe,EAOnD,CAAC"}

package/dist/server/agent-discovery.js

@@ -19,6 +19,23 @@ const BUILTIN_AGENTS = TEMPLATES.filter((template) => (!template.hidden || templ
 const HIDDEN_FIRST_PARTY_AGENT_IDS = new Set(TEMPLATES.filter((template) => template.hidden && !template.defaultAgent && template.prodUrl).map((template) => template.name));
 const WORKSPACE_APPS_ENV_KEY = "AGENT_NATIVE_WORKSPACE_APPS_JSON";
 const WORKSPACE_APPS_MANIFEST_FILE = "workspace-apps.json";
+/**
+ * Resolve the workspace app manifest from the same fallback chain that
+ * `discoverWorkspaceAgents` uses: `AGENT_NATIVE_WORKSPACE_APPS_JSON` env →
+ * `.agent-native/workspace-apps.json` (or sibling) on disk → live filesystem
+ * scan of `apps/<id>/package.json` under the workspace root.
+ *
+ * Callers (e.g. the dispatch `/dispatch/<appId>` catch-all loader) need this
+ * to behave the same in production deploys (which write the manifest file)
+ * and during local dev (where new apps appear under `apps/` without an env
+ * restart). Reading only the env var would silently downgrade the behavior
+ * in both cases.
+ */
+export function loadWorkspaceAppsManifest() {
+    return (readWorkspaceAppsFromEnv() ??
+        readWorkspaceAppsFromManifestFile() ??
+        readWorkspaceAppsFromFilesystem());
+}
 export function shouldIncludeRemoteAgentManifest(manifest, selfAppId) {
     const id = manifest.id?.trim();
     if (!id)
@@ -292,9 +309,7 @@ function workspaceAppUrl(app) {
     }
 }
 function discoverWorkspaceAgents(selfAppId) {
-    const workspaceApps = readWorkspaceAppsFromEnv() ??
-        readWorkspaceAppsFromManifestFile() ??
-        readWorkspaceAppsFromFilesystem();
+    const workspaceApps = loadWorkspaceAppsManifest();
     if (!workspaceApps)
         return [];
     return workspaceApps

package/dist/server/agent-discovery.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-discovery.js","sourceRoot":"","sources":["../../src/server/agent-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAoBrD;;;;GAIG;AACH,MAAM,cAAc,GAAiB,SAAS,CAAC,MAAM,CACnD,CAAC,QAAQ,EAAE,EAAE,CACX,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CACpE,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACnB,EAAE,EAAE,QAAQ,CAAC,IAAI;IACjB,IAAI,EAAE,QAAQ,CAAC,KAAK;IACpB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,IAAI;IAClD,GAAG,EAAE,QAAQ,CAAC,OAAQ;IACtB,MAAM,EAAE,oBAAoB,QAAQ,CAAC,OAAO,EAAE;IAC9C,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;CACtB,CAAC,CAAC,CAAC;AAEJ,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAC1C,SAAS,CAAC,MAAM,CACd,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,OAAO,CAC5E,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CACnC,CAAC;AAEF,MAAM,sBAAsB,GAAG,kCAAkC,CAAC;AAClE,MAAM,4BAA4B,GAAG,qBAAqB,CAAC;AAW3D,MAAM,UAAU,gCAAgC,CAC9C,QAAgC,EAChC,SAAkB;IAElB,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,MAAM,YAAY,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,MAAM,mBAAmB,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5D,IAAI,mBAAmB,IAAI,YAAY,KAAK,mBAAmB,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,4BAA4B,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAkB;IACjD,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CACxE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACR,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC;QACzB,KAAK,EAAE,GAAG,CAAC,KAAK;KACjB,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAkB;IAElB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEtD,uBAAuB;IACvB,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,uCAAuC;IACvC,IAAI,CAAC;QACH,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,GAC/C,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAExC,MAAM,EAAE,wBAAwB,EAAE,8BAA8B,EAAE,GAChE,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAE3C,MAAM,SAAS,GAAwC,EAAE,CAAC;QAC1D,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,8BAA8B,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACnE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YACxC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrC,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAChE,IAAI,CAAC,QAAQ,IAAI,CAAC,gCAAgC,CAAC,QAAQ,EAAE,SAAS,CAAC;oBACrE,SAAS;gBAEX,qEAAqE;gBACrE,qEAAqE;gBACrE,gEAAgE;gBAChE,qEAAqE;gBACrE,kEAAkE;gBAClE,sEAAsE;gBACtE,2DAA2D;gBAC3D,IAAI,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;gBACvB,MAAM,YAAY,GAChB,OAAO,OAAO,KAAK,WAAW;oBAC9B,OAAO,CAAC,GAAG,EAAE,QAAQ,KAAK,YAAY,CAAC;gBACzC,IACE,YAAY;oBACZ,OAAO,GAAG,KAAK,QAAQ;oBACvB,yDAAyD,CAAC,IAAI,CAAC,GAAG,CAAC,EACnE,CAAC;oBACD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBAC5C,IAAI,OAAO,EAAE,GAAG;wBAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;gBACtC,CAAC;gBAED,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE;oBAC1B,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;oBACvC,GAAG;oBACH,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,SAAS;iBACnC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,4BAA4B;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,KAAK,MAAM,KAAK,IAAI,uBAAuB,CAAC,SAAS,CAAC,EAAE,CAAC;QACvD,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAgB,EAChB,SAAkB;IAElB,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,CACL,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,QAAQ,KAAK,YAAY,CACzE,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,GAAe;IACtC,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,MAAM,IAAI,oBAAoB,GAAG,CAAC,OAAO,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE;IACjD,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;QACrD,IAAI,OAAO,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC7D,OAAO,GAAG,CAAC;QACb,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK;SACT,KAAK,CAAC,SAAS,CAAC;SAChB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC3D,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,0BAA0B,CACjC,MAAW;IAEX,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;QACzC,CAAC,CAAC,MAAM,CAAC,IAAI;QACb,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACrB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,IAAI,GAAG,OAAO;SACjB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACrD,MAAM,EAAE,GAAG,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACnD,OAAO;YACL,EAAE;YACF,IAAI,EACF,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;gBACjD,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;gBACnB,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YACnB,WAAW,EACT,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;YAChE,IAAI,EAAE,SAAS;YACf,GAAG,EACD,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;gBAC/C,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;gBAClB,CAAC,CAAC,IAAI;YACV,UAAU,EACR,OAAO,KAAK,CAAC,UAAU,KAAK,SAAS;gBACnC,CAAC,CAAC,KAAK,CAAC,UAAU;gBAClB,CAAC,CAAC,EAAE,KAAK,UAAU;SACY,CAAC;IACxC,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,GAAG,EAAoC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;SACxD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACb,IAAI,CAAC,CAAC,EAAE,KAAK,UAAU;YAAE,OAAO,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,EAAE,KAAK,UAAU;YAAE,OAAO,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEL,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACnC,CAAC;AAED,SAAS,wBAAwB;IAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B;IACtC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,CACb,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,eAAe,EAAE,4BAA4B,CAAC,EACvE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,4BAA4B,CAAC,CACvD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,UAAU,CAAC,IAAI,CACb,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,EAAE,4BAA4B,CAAC,EACnE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,4BAA4B,CAAC,CACnD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,iDAAiD;IACnD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,iCAAiC;IAGxC,KAAK,MAAM,IAAI,IAAI,+BAA+B,EAAE,EAAE,CAAC;QACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,IAAI,GAAG,0BAA0B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACxD,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,+BAA+B;IACtC,MAAM,aAAa,GAAG,iBAAiB,EAAE,CAAC;IAC1C,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,IAAI,GAAG,EAAE;SACZ,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SAC7C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;SACtC,GAAG,CAAC,CAAC,KAAK,EAAoC,EAAE;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;YAC9C,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;YAClC,IAAI,EAAE,IAAI,KAAK,CAAC,IAAI,EAAE;YACtB,UAAU,EAAE,KAAK,CAAC,IAAI,KAAK,UAAU;SACF,CAAC;IACxC,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,GAAG,EAAoC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;SACxD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACb,IAAI,CAAC,CAAC,EAAE,KAAK,UAAU;YAAE,OAAO,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,EAAE,KAAK,UAAU;YAAE,OAAO,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEL,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACnC,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACjC,OAAO,CAAC,GAAG,CAAC,OAAO;QACnB,OAAO,CAAC,GAAG,CAAC,GAAG;QACf,OAAO,CAAC,GAAG,CAAC,UAAU;QACtB,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,IAAI,CACL,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,GAA8B;IACrD,IAAI,GAAG,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC;IAC5B,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,SAAkB;IACjD,MAAM,aAAa,GACjB,wBAAwB,EAAE;QAC1B,iCAAiC,EAAE;QACnC,+BAA+B,EAAE,CAAC;IACpC,IAAI,CAAC,aAAa;QAAE,OAAO,EAAE,CAAC;IAE9B,OAAO,aAAa;SACjB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC;SACrC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACX,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;QACpE,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,WAAW,EACT,GAAG,CAAC,WAAW;gBACf,OAAO,EAAE,WAAW;gBACpB,4BAA4B,GAAG,CAAC,IAAI,EAAE;YACxC,GAAG;YACH,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,SAAS;SACT,CAAC;IAC9B,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAA4B,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GACrC,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACpD,EAAE,EAAE,GAAG,CAAC,EAAE;IACV,IAAI,EAAE,GAAG,CAAC,IAAI;IACd,WAAW,EAAE,GAAG,CAAC,WAAW;IAC5B,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,cAAc;IAC5B,KAAK,EAAE,GAAG,CAAC,KAAK;CACjB,CAAC,CAAC,CAAC","sourcesContent":["import fs from \"node:fs\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { TEMPLATES } from \"../cli/templates-meta.js\";\n\nexport interface DiscoveredAgent {\n  id: string;\n  name: string;\n  description: string;\n  url: string;\n  color: string;\n}\n\ninterface AgentEntry {\n  id: string;\n  name: string;\n  description: string;\n  url: string;\n  devUrl?: string;\n  devPort: number;\n  color: string;\n}\n\n/**\n * Built-in agent registry. Derive this from the published CLI metadata so\n * connected-agent discovery stays aligned with first-party template metadata\n * without depending on @agent-native/shared-app-config at runtime.\n */\nconst BUILTIN_AGENTS: AgentEntry[] = TEMPLATES.filter(\n  (template) =>\n    (!template.hidden || template.defaultAgent) && !!template.prodUrl,\n).map((template) => ({\n  id: template.name,\n  name: template.label,\n  description: template.description ?? template.hint,\n  url: template.prodUrl!,\n  devUrl: `http://localhost:${template.devPort}`,\n  devPort: template.devPort,\n  color: template.color,\n}));\n\nconst HIDDEN_FIRST_PARTY_AGENT_IDS = new Set(\n  TEMPLATES.filter(\n    (template) => template.hidden && !template.defaultAgent && template.prodUrl,\n  ).map((template) => template.name),\n);\n\nconst WORKSPACE_APPS_ENV_KEY = \"AGENT_NATIVE_WORKSPACE_APPS_JSON\";\nconst WORKSPACE_APPS_MANIFEST_FILE = \"workspace-apps.json\";\n\ninterface WorkspaceAppManifestEntry {\n  id: string;\n  name: string;\n  description: string;\n  path: string;\n  url?: string | null;\n  isDispatch?: boolean;\n}\n\nexport function shouldIncludeRemoteAgentManifest(\n  manifest: { id?: string | null },\n  selfAppId?: string,\n): boolean {\n  const id = manifest.id?.trim();\n  if (!id) return false;\n  const normalizedId = id.toLowerCase();\n  const normalizedSelfAppId = selfAppId?.trim().toLowerCase();\n  if (normalizedSelfAppId && normalizedId === normalizedSelfAppId) {\n    return false;\n  }\n  return !HIDDEN_FIRST_PARTY_AGENT_IDS.has(normalizedId);\n}\n\n/**\n * Get built-in agents (static, no DB). Used as fallback and for seeding.\n */\nexport function getBuiltinAgents(selfAppId?: string): DiscoveredAgent[] {\n  return BUILTIN_AGENTS.filter((app) => app.id !== selfAppId && app.url).map(\n    (app) => ({\n      id: app.id,\n      name: app.name,\n      description: app.description,\n      url: resolveAgentUrl(app),\n      color: app.color,\n    }),\n  );\n}\n\n/**\n * Discover all agents: built-in + custom agents stored as resources.\n * Custom agents override built-in agents with the same ID.\n */\nexport async function discoverAgents(\n  selfAppId?: string,\n): Promise<DiscoveredAgent[]> {\n  const builtins = getBuiltinAgents(selfAppId);\n  const agentsById = new Map<string, DiscoveredAgent>();\n\n  // Start with built-ins\n  for (const agent of builtins) {\n    agentsById.set(agent.id, agent);\n  }\n\n  // Overlay custom agents from resources\n  try {\n    const { resourceList, resourceGet, SHARED_OWNER } =\n      await import(\"../resources/store.js\");\n\n    const { parseRemoteAgentManifest, REMOTE_AGENT_RESOURCE_PREFIXES } =\n      await import(\"../resources/metadata.js\");\n\n    const resources: Array<{ id: string; path: string }> = [];\n    for (const prefix of [...REMOTE_AGENT_RESOURCE_PREFIXES].reverse()) {\n      resources.push(...(await resourceList(SHARED_OWNER, prefix)));\n    }\n\n    for (const r of resources) {\n      if (!r.path.endsWith(\".json\")) continue;\n      try {\n        const full = await resourceGet(r.id);\n        if (!full) continue;\n        const manifest = parseRemoteAgentManifest(full.content, r.path);\n        if (!manifest || !shouldIncludeRemoteAgentManifest(manifest, selfAppId))\n          continue;\n\n        // If the resource override carries a localhost URL but we're running\n        // in production (e.g. a stale dev-time seed got promoted to the prod\n        // DB), fall back to the matching built-in's prod URL instead of\n        // letting the override win — otherwise outbound `call-agent` fetches\n        // from a serverless function would target localhost and fail with\n        // \"fetch failed\" instantly. The override still wins for non-localhost\n        // URLs (the supported case for self-hosted custom agents).\n        let url = manifest.url;\n        const isProduction =\n          typeof process !== \"undefined\" &&\n          process.env?.NODE_ENV === \"production\";\n        if (\n          isProduction &&\n          typeof url === \"string\" &&\n          /^https?:\\/\\/(localhost|127\\.0\\.0\\.1|0\\.0\\.0\\.0)(:|\\/|$)/.test(url)\n        ) {\n          const builtin = agentsById.get(manifest.id);\n          if (builtin?.url) url = builtin.url;\n        }\n\n        agentsById.set(manifest.id, {\n          id: manifest.id,\n          name: manifest.name,\n          description: manifest.description || \"\",\n          url,\n          color: manifest.color || \"#6B7280\",\n        });\n      } catch {\n        // Skip unreadable resources\n      }\n    }\n  } catch {\n    // Resources not available — use built-ins only\n  }\n\n  // Overlay sibling workspace apps last so same-origin workspaces prefer the\n  // app mounted in this workspace over the public template with the same id.\n  for (const agent of discoverWorkspaceAgents(selfAppId)) {\n    agentsById.set(agent.id, agent);\n  }\n\n  return Array.from(agentsById.values());\n}\n\n/**\n * Look up a single agent by ID or name (case-insensitive).\n */\nexport async function findAgent(\n  idOrName: string,\n  selfAppId?: string,\n): Promise<DiscoveredAgent | undefined> {\n  const lower = idOrName.toLowerCase();\n  const agents = await discoverAgents(selfAppId);\n  return agents.find((a) => a.id === lower || a.name.toLowerCase() === lower);\n}\n\nfunction isDevEnvironment(): boolean {\n  return (\n    typeof process !== \"undefined\" && process.env?.NODE_ENV !== \"production\"\n  );\n}\n\nfunction resolveAgentUrl(app: AgentEntry): string {\n  if (isDevEnvironment()) {\n    return app.devUrl || `http://localhost:${app.devPort}`;\n  }\n  return app.url;\n}\n\nfunction readJson(file: string): any {\n  try {\n    return JSON.parse(fs.readFileSync(file, \"utf8\"));\n  } catch {\n    return null;\n  }\n}\n\nfunction findWorkspaceRoot(startDir = process.cwd()): string | null {\n  let dir = path.resolve(startDir);\n  for (let i = 0; i < 20; i++) {\n    const pkg = readJson(path.join(dir, \"package.json\"));\n    if (typeof pkg?.[\"agent-native\"]?.workspaceCore === \"string\") {\n      return dir;\n    }\n    const parent = path.dirname(dir);\n    if (parent === dir) break;\n    dir = parent;\n  }\n  return null;\n}\n\nfunction titleCase(value: string): string {\n  return value\n    .split(/[-_\\s]+/)\n    .filter(Boolean)\n    .map((part) => part.charAt(0).toUpperCase() + part.slice(1))\n    .join(\" \");\n}\n\nfunction parseWorkspaceAppsManifest(\n  parsed: any,\n): WorkspaceAppManifestEntry[] | null {\n  const rawApps = Array.isArray(parsed?.apps)\n    ? parsed.apps\n    : Array.isArray(parsed)\n      ? parsed\n      : null;\n  if (!rawApps) return null;\n\n  const apps = rawApps\n    .map((entry) => {\n      if (!entry || typeof entry !== \"object\") return null;\n      const id = typeof entry.id === \"string\" ? entry.id.trim() : \"\";\n      const pathValue = typeof entry.path === \"string\" ? entry.path.trim() : \"\";\n      if (!id || !pathValue.startsWith(\"/\")) return null;\n      return {\n        id,\n        name:\n          typeof entry.name === \"string\" && entry.name.trim()\n            ? entry.name.trim()\n            : titleCase(id),\n        description:\n          typeof entry.description === \"string\" ? entry.description : \"\",\n        path: pathValue,\n        url:\n          typeof entry.url === \"string\" && entry.url.trim()\n            ? entry.url.trim()\n            : null,\n        isDispatch:\n          typeof entry.isDispatch === \"boolean\"\n            ? entry.isDispatch\n            : id === \"dispatch\",\n      } satisfies WorkspaceAppManifestEntry;\n    })\n    .filter((app): app is WorkspaceAppManifestEntry => !!app)\n    .sort((a, b) => {\n      if (a.id === \"dispatch\") return -1;\n      if (b.id === \"dispatch\") return 1;\n      return a.name.localeCompare(b.name);\n    });\n\n  return apps.length ? apps : null;\n}\n\nfunction readWorkspaceAppsFromEnv(): WorkspaceAppManifestEntry[] | null {\n  const raw = process.env[WORKSPACE_APPS_ENV_KEY];\n  if (!raw) return null;\n  try {\n    return parseWorkspaceAppsManifest(JSON.parse(raw));\n  } catch {\n    return null;\n  }\n}\n\nfunction workspaceAppsManifestCandidates(): string[] {\n  const candidates: string[] = [];\n  try {\n    candidates.push(\n      path.join(process.cwd(), \".agent-native\", WORKSPACE_APPS_MANIFEST_FILE),\n      path.join(process.cwd(), WORKSPACE_APPS_MANIFEST_FILE),\n    );\n  } catch {\n    // Some edge runtimes do not expose process.cwd().\n  }\n  try {\n    const moduleDir = path.dirname(fileURLToPath(import.meta.url));\n    candidates.push(\n      path.join(moduleDir, \".agent-native\", WORKSPACE_APPS_MANIFEST_FILE),\n      path.join(moduleDir, WORKSPACE_APPS_MANIFEST_FILE),\n    );\n  } catch {\n    // Some edge runtimes expose non-file module URLs. The env manifest still\n    // works there, so skip file-relative candidates.\n  }\n  return candidates;\n}\n\nfunction readWorkspaceAppsFromManifestFile():\n  | WorkspaceAppManifestEntry[]\n  | null {\n  for (const file of workspaceAppsManifestCandidates()) {\n    if (!fs.existsSync(file)) continue;\n    const apps = parseWorkspaceAppsManifest(readJson(file));\n    if (apps) return apps;\n  }\n  return null;\n}\n\nfunction readWorkspaceAppsFromFilesystem(): WorkspaceAppManifestEntry[] | null {\n  const workspaceRoot = findWorkspaceRoot();\n  if (!workspaceRoot) return null;\n  const appsDir = path.join(workspaceRoot, \"apps\");\n  if (!fs.existsSync(appsDir)) return null;\n\n  const apps = fs\n    .readdirSync(appsDir, { withFileTypes: true })\n    .filter((entry) => entry.isDirectory())\n    .map((entry): WorkspaceAppManifestEntry | null => {\n      const appDir = path.join(appsDir, entry.name);\n      const pkg = readJson(path.join(appDir, \"package.json\"));\n      if (!pkg) return null;\n      return {\n        id: entry.name,\n        name: pkg.displayName || titleCase(entry.name),\n        description: pkg.description || \"\",\n        path: `/${entry.name}`,\n        isDispatch: entry.name === \"dispatch\",\n      } satisfies WorkspaceAppManifestEntry;\n    })\n    .filter((app): app is WorkspaceAppManifestEntry => !!app)\n    .sort((a, b) => {\n      if (a.id === \"dispatch\") return -1;\n      if (b.id === \"dispatch\") return 1;\n      return a.name.localeCompare(b.name);\n    });\n\n  return apps.length ? apps : null;\n}\n\nfunction workspaceBaseUrl(): string | null {\n  return (\n    process.env.WORKSPACE_GATEWAY_URL ||\n    process.env.APP_URL ||\n    process.env.URL ||\n    process.env.DEPLOY_URL ||\n    process.env.BETTER_AUTH_URL ||\n    null\n  );\n}\n\nfunction workspaceAppUrl(app: WorkspaceAppManifestEntry): string | null {\n  if (app.url) return app.url;\n  const base = workspaceBaseUrl();\n  if (!base) return null;\n  try {\n    return new URL(app.path, `${base.replace(/\\/$/, \"\")}/`).toString();\n  } catch {\n    return null;\n  }\n}\n\nfunction discoverWorkspaceAgents(selfAppId?: string): DiscoveredAgent[] {\n  const workspaceApps =\n    readWorkspaceAppsFromEnv() ??\n    readWorkspaceAppsFromManifestFile() ??\n    readWorkspaceAppsFromFilesystem();\n  if (!workspaceApps) return [];\n\n  return workspaceApps\n    .filter((app) => app.id !== selfAppId)\n    .map((app) => {\n      const url = workspaceAppUrl(app);\n      if (!url) return null;\n      const builtin = BUILTIN_AGENTS.find((agent) => agent.id === app.id);\n      return {\n        id: app.id,\n        name: app.name,\n        description:\n          app.description ||\n          builtin?.description ||\n          `Workspace app mounted at ${app.path}`,\n        url,\n        color: builtin?.color || \"#6B7280\",\n      } satisfies DiscoveredAgent;\n    })\n    .filter((agent): agent is DiscoveredAgent => !!agent);\n}\n\n/**\n * Like `getBuiltinAgents`, but always returns the production URL — never the\n * env-resolved devUrl. Used by the resource seeder so that a one-time seed\n * (`ON CONFLICT DO NOTHING`) can't permanently bake a localhost URL into the\n * DB, which would override the built-in's prod URL for every later\n * production deploy.\n */\nexport const BUILTIN_AGENTS_FOR_SEEDING: DiscoveredAgent[] =\n  BUILTIN_AGENTS.filter((app) => app.url).map((app) => ({\n    id: app.id,\n    name: app.name,\n    description: app.description,\n    url: app.url, // ALWAYS prod\n    color: app.color,\n  }));\n"]}
+{"version":3,"file":"agent-discovery.js","sourceRoot":"","sources":["../../src/server/agent-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAoBrD;;;;GAIG;AACH,MAAM,cAAc,GAAiB,SAAS,CAAC,MAAM,CACnD,CAAC,QAAQ,EAAE,EAAE,CACX,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CACpE,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACnB,EAAE,EAAE,QAAQ,CAAC,IAAI;IACjB,IAAI,EAAE,QAAQ,CAAC,KAAK;IACpB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,IAAI;IAClD,GAAG,EAAE,QAAQ,CAAC,OAAQ;IACtB,MAAM,EAAE,oBAAoB,QAAQ,CAAC,OAAO,EAAE;IAC9C,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;CACtB,CAAC,CAAC,CAAC;AAEJ,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAC1C,SAAS,CAAC,MAAM,CACd,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,OAAO,CAC5E,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CACnC,CAAC;AAEF,MAAM,sBAAsB,GAAG,kCAAkC,CAAC;AAClE,MAAM,4BAA4B,GAAG,qBAAqB,CAAC;AAW3D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,yBAAyB;IAGvC,OAAO,CACL,wBAAwB,EAAE;QAC1B,iCAAiC,EAAE;QACnC,+BAA+B,EAAE,CAClC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,QAAgC,EAChC,SAAkB;IAElB,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,MAAM,YAAY,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,MAAM,mBAAmB,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5D,IAAI,mBAAmB,IAAI,YAAY,KAAK,mBAAmB,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,4BAA4B,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAkB;IACjD,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CACxE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACR,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC;QACzB,KAAK,EAAE,GAAG,CAAC,KAAK;KACjB,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAkB;IAElB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEtD,uBAAuB;IACvB,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,uCAAuC;IACvC,IAAI,CAAC;QACH,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,GAC/C,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAExC,MAAM,EAAE,wBAAwB,EAAE,8BAA8B,EAAE,GAChE,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAE3C,MAAM,SAAS,GAAwC,EAAE,CAAC;QAC1D,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,8BAA8B,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACnE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YACxC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrC,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAChE,IAAI,CAAC,QAAQ,IAAI,CAAC,gCAAgC,CAAC,QAAQ,EAAE,SAAS,CAAC;oBACrE,SAAS;gBAEX,qEAAqE;gBACrE,qEAAqE;gBACrE,gEAAgE;gBAChE,qEAAqE;gBACrE,kEAAkE;gBAClE,sEAAsE;gBACtE,2DAA2D;gBAC3D,IAAI,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;gBACvB,MAAM,YAAY,GAChB,OAAO,OAAO,KAAK,WAAW;oBAC9B,OAAO,CAAC,GAAG,EAAE,QAAQ,KAAK,YAAY,CAAC;gBACzC,IACE,YAAY;oBACZ,OAAO,GAAG,KAAK,QAAQ;oBACvB,yDAAyD,CAAC,IAAI,CAAC,GAAG,CAAC,EACnE,CAAC;oBACD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBAC5C,IAAI,OAAO,EAAE,GAAG;wBAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;gBACtC,CAAC;gBAED,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE;oBAC1B,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;oBACvC,GAAG;oBACH,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,SAAS;iBACnC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,4BAA4B;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,KAAK,MAAM,KAAK,IAAI,uBAAuB,CAAC,SAAS,CAAC,EAAE,CAAC;QACvD,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAgB,EAChB,SAAkB;IAElB,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,CACL,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,QAAQ,KAAK,YAAY,CACzE,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,GAAe;IACtC,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,MAAM,IAAI,oBAAoB,GAAG,CAAC,OAAO,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE;IACjD,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;QACrD,IAAI,OAAO,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC7D,OAAO,GAAG,CAAC;QACb,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK;SACT,KAAK,CAAC,SAAS,CAAC;SAChB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC3D,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,0BAA0B,CACjC,MAAW;IAEX,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;QACzC,CAAC,CAAC,MAAM,CAAC,IAAI;QACb,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACrB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,IAAI,GAAG,OAAO;SACjB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACrD,MAAM,EAAE,GAAG,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACnD,OAAO;YACL,EAAE;YACF,IAAI,EACF,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;gBACjD,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;gBACnB,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YACnB,WAAW,EACT,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;YAChE,IAAI,EAAE,SAAS;YACf,GAAG,EACD,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;gBAC/C,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;gBAClB,CAAC,CAAC,IAAI;YACV,UAAU,EACR,OAAO,KAAK,CAAC,UAAU,KAAK,SAAS;gBACnC,CAAC,CAAC,KAAK,CAAC,UAAU;gBAClB,CAAC,CAAC,EAAE,KAAK,UAAU;SACY,CAAC;IACxC,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,GAAG,EAAoC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;SACxD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACb,IAAI,CAAC,CAAC,EAAE,KAAK,UAAU;YAAE,OAAO,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,EAAE,KAAK,UAAU;YAAE,OAAO,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEL,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACnC,CAAC;AAED,SAAS,wBAAwB;IAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B;IACtC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,CACb,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,eAAe,EAAE,4BAA4B,CAAC,EACvE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,4BAA4B,CAAC,CACvD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,UAAU,CAAC,IAAI,CACb,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,EAAE,4BAA4B,CAAC,EACnE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,4BAA4B,CAAC,CACnD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,iDAAiD;IACnD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,iCAAiC;IAGxC,KAAK,MAAM,IAAI,IAAI,+BAA+B,EAAE,EAAE,CAAC;QACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,IAAI,GAAG,0BAA0B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACxD,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,+BAA+B;IACtC,MAAM,aAAa,GAAG,iBAAiB,EAAE,CAAC;IAC1C,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,IAAI,GAAG,EAAE;SACZ,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SAC7C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;SACtC,GAAG,CAAC,CAAC,KAAK,EAAoC,EAAE;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;YAC9C,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;YAClC,IAAI,EAAE,IAAI,KAAK,CAAC,IAAI,EAAE;YACtB,UAAU,EAAE,KAAK,CAAC,IAAI,KAAK,UAAU;SACF,CAAC;IACxC,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,GAAG,EAAoC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;SACxD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACb,IAAI,CAAC,CAAC,EAAE,KAAK,UAAU;YAAE,OAAO,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,EAAE,KAAK,UAAU;YAAE,OAAO,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEL,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACnC,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACjC,OAAO,CAAC,GAAG,CAAC,OAAO;QACnB,OAAO,CAAC,GAAG,CAAC,GAAG;QACf,OAAO,CAAC,GAAG,CAAC,UAAU;QACtB,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,IAAI,CACL,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,GAA8B;IACrD,IAAI,GAAG,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC;IAC5B,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,SAAkB;IACjD,MAAM,aAAa,GAAG,yBAAyB,EAAE,CAAC;IAClD,IAAI,CAAC,aAAa;QAAE,OAAO,EAAE,CAAC;IAE9B,OAAO,aAAa;SACjB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC;SACrC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACX,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;QACpE,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,WAAW,EACT,GAAG,CAAC,WAAW;gBACf,OAAO,EAAE,WAAW;gBACpB,4BAA4B,GAAG,CAAC,IAAI,EAAE;YACxC,GAAG;YACH,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,SAAS;SACT,CAAC;IAC9B,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAA4B,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GACrC,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACpD,EAAE,EAAE,GAAG,CAAC,EAAE;IACV,IAAI,EAAE,GAAG,CAAC,IAAI;IACd,WAAW,EAAE,GAAG,CAAC,WAAW;IAC5B,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,cAAc;IAC5B,KAAK,EAAE,GAAG,CAAC,KAAK;CACjB,CAAC,CAAC,CAAC","sourcesContent":["import fs from \"node:fs\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { TEMPLATES } from \"../cli/templates-meta.js\";\n\nexport interface DiscoveredAgent {\n  id: string;\n  name: string;\n  description: string;\n  url: string;\n  color: string;\n}\n\ninterface AgentEntry {\n  id: string;\n  name: string;\n  description: string;\n  url: string;\n  devUrl?: string;\n  devPort: number;\n  color: string;\n}\n\n/**\n * Built-in agent registry. Derive this from the published CLI metadata so\n * connected-agent discovery stays aligned with first-party template metadata\n * without depending on @agent-native/shared-app-config at runtime.\n */\nconst BUILTIN_AGENTS: AgentEntry[] = TEMPLATES.filter(\n  (template) =>\n    (!template.hidden || template.defaultAgent) && !!template.prodUrl,\n).map((template) => ({\n  id: template.name,\n  name: template.label,\n  description: template.description ?? template.hint,\n  url: template.prodUrl!,\n  devUrl: `http://localhost:${template.devPort}`,\n  devPort: template.devPort,\n  color: template.color,\n}));\n\nconst HIDDEN_FIRST_PARTY_AGENT_IDS = new Set(\n  TEMPLATES.filter(\n    (template) => template.hidden && !template.defaultAgent && template.prodUrl,\n  ).map((template) => template.name),\n);\n\nconst WORKSPACE_APPS_ENV_KEY = \"AGENT_NATIVE_WORKSPACE_APPS_JSON\";\nconst WORKSPACE_APPS_MANIFEST_FILE = \"workspace-apps.json\";\n\nexport interface WorkspaceAppManifestEntry {\n  id: string;\n  name: string;\n  description: string;\n  path: string;\n  url?: string | null;\n  isDispatch?: boolean;\n}\n\n/**\n * Resolve the workspace app manifest from the same fallback chain that\n * `discoverWorkspaceAgents` uses: `AGENT_NATIVE_WORKSPACE_APPS_JSON` env →\n * `.agent-native/workspace-apps.json` (or sibling) on disk → live filesystem\n * scan of `apps/<id>/package.json` under the workspace root.\n *\n * Callers (e.g. the dispatch `/dispatch/<appId>` catch-all loader) need this\n * to behave the same in production deploys (which write the manifest file)\n * and during local dev (where new apps appear under `apps/` without an env\n * restart). Reading only the env var would silently downgrade the behavior\n * in both cases.\n */\nexport function loadWorkspaceAppsManifest():\n  | WorkspaceAppManifestEntry[]\n  | null {\n  return (\n    readWorkspaceAppsFromEnv() ??\n    readWorkspaceAppsFromManifestFile() ??\n    readWorkspaceAppsFromFilesystem()\n  );\n}\n\nexport function shouldIncludeRemoteAgentManifest(\n  manifest: { id?: string | null },\n  selfAppId?: string,\n): boolean {\n  const id = manifest.id?.trim();\n  if (!id) return false;\n  const normalizedId = id.toLowerCase();\n  const normalizedSelfAppId = selfAppId?.trim().toLowerCase();\n  if (normalizedSelfAppId && normalizedId === normalizedSelfAppId) {\n    return false;\n  }\n  return !HIDDEN_FIRST_PARTY_AGENT_IDS.has(normalizedId);\n}\n\n/**\n * Get built-in agents (static, no DB). Used as fallback and for seeding.\n */\nexport function getBuiltinAgents(selfAppId?: string): DiscoveredAgent[] {\n  return BUILTIN_AGENTS.filter((app) => app.id !== selfAppId && app.url).map(\n    (app) => ({\n      id: app.id,\n      name: app.name,\n      description: app.description,\n      url: resolveAgentUrl(app),\n      color: app.color,\n    }),\n  );\n}\n\n/**\n * Discover all agents: built-in + custom agents stored as resources.\n * Custom agents override built-in agents with the same ID.\n */\nexport async function discoverAgents(\n  selfAppId?: string,\n): Promise<DiscoveredAgent[]> {\n  const builtins = getBuiltinAgents(selfAppId);\n  const agentsById = new Map<string, DiscoveredAgent>();\n\n  // Start with built-ins\n  for (const agent of builtins) {\n    agentsById.set(agent.id, agent);\n  }\n\n  // Overlay custom agents from resources\n  try {\n    const { resourceList, resourceGet, SHARED_OWNER } =\n      await import(\"../resources/store.js\");\n\n    const { parseRemoteAgentManifest, REMOTE_AGENT_RESOURCE_PREFIXES } =\n      await import(\"../resources/metadata.js\");\n\n    const resources: Array<{ id: string; path: string }> = [];\n    for (const prefix of [...REMOTE_AGENT_RESOURCE_PREFIXES].reverse()) {\n      resources.push(...(await resourceList(SHARED_OWNER, prefix)));\n    }\n\n    for (const r of resources) {\n      if (!r.path.endsWith(\".json\")) continue;\n      try {\n        const full = await resourceGet(r.id);\n        if (!full) continue;\n        const manifest = parseRemoteAgentManifest(full.content, r.path);\n        if (!manifest || !shouldIncludeRemoteAgentManifest(manifest, selfAppId))\n          continue;\n\n        // If the resource override carries a localhost URL but we're running\n        // in production (e.g. a stale dev-time seed got promoted to the prod\n        // DB), fall back to the matching built-in's prod URL instead of\n        // letting the override win — otherwise outbound `call-agent` fetches\n        // from a serverless function would target localhost and fail with\n        // \"fetch failed\" instantly. The override still wins for non-localhost\n        // URLs (the supported case for self-hosted custom agents).\n        let url = manifest.url;\n        const isProduction =\n          typeof process !== \"undefined\" &&\n          process.env?.NODE_ENV === \"production\";\n        if (\n          isProduction &&\n          typeof url === \"string\" &&\n          /^https?:\\/\\/(localhost|127\\.0\\.0\\.1|0\\.0\\.0\\.0)(:|\\/|$)/.test(url)\n        ) {\n          const builtin = agentsById.get(manifest.id);\n          if (builtin?.url) url = builtin.url;\n        }\n\n        agentsById.set(manifest.id, {\n          id: manifest.id,\n          name: manifest.name,\n          description: manifest.description || \"\",\n          url,\n          color: manifest.color || \"#6B7280\",\n        });\n      } catch {\n        // Skip unreadable resources\n      }\n    }\n  } catch {\n    // Resources not available — use built-ins only\n  }\n\n  // Overlay sibling workspace apps last so same-origin workspaces prefer the\n  // app mounted in this workspace over the public template with the same id.\n  for (const agent of discoverWorkspaceAgents(selfAppId)) {\n    agentsById.set(agent.id, agent);\n  }\n\n  return Array.from(agentsById.values());\n}\n\n/**\n * Look up a single agent by ID or name (case-insensitive).\n */\nexport async function findAgent(\n  idOrName: string,\n  selfAppId?: string,\n): Promise<DiscoveredAgent | undefined> {\n  const lower = idOrName.toLowerCase();\n  const agents = await discoverAgents(selfAppId);\n  return agents.find((a) => a.id === lower || a.name.toLowerCase() === lower);\n}\n\nfunction isDevEnvironment(): boolean {\n  return (\n    typeof process !== \"undefined\" && process.env?.NODE_ENV !== \"production\"\n  );\n}\n\nfunction resolveAgentUrl(app: AgentEntry): string {\n  if (isDevEnvironment()) {\n    return app.devUrl || `http://localhost:${app.devPort}`;\n  }\n  return app.url;\n}\n\nfunction readJson(file: string): any {\n  try {\n    return JSON.parse(fs.readFileSync(file, \"utf8\"));\n  } catch {\n    return null;\n  }\n}\n\nfunction findWorkspaceRoot(startDir = process.cwd()): string | null {\n  let dir = path.resolve(startDir);\n  for (let i = 0; i < 20; i++) {\n    const pkg = readJson(path.join(dir, \"package.json\"));\n    if (typeof pkg?.[\"agent-native\"]?.workspaceCore === \"string\") {\n      return dir;\n    }\n    const parent = path.dirname(dir);\n    if (parent === dir) break;\n    dir = parent;\n  }\n  return null;\n}\n\nfunction titleCase(value: string): string {\n  return value\n    .split(/[-_\\s]+/)\n    .filter(Boolean)\n    .map((part) => part.charAt(0).toUpperCase() + part.slice(1))\n    .join(\" \");\n}\n\nfunction parseWorkspaceAppsManifest(\n  parsed: any,\n): WorkspaceAppManifestEntry[] | null {\n  const rawApps = Array.isArray(parsed?.apps)\n    ? parsed.apps\n    : Array.isArray(parsed)\n      ? parsed\n      : null;\n  if (!rawApps) return null;\n\n  const apps = rawApps\n    .map((entry) => {\n      if (!entry || typeof entry !== \"object\") return null;\n      const id = typeof entry.id === \"string\" ? entry.id.trim() : \"\";\n      const pathValue = typeof entry.path === \"string\" ? entry.path.trim() : \"\";\n      if (!id || !pathValue.startsWith(\"/\")) return null;\n      return {\n        id,\n        name:\n          typeof entry.name === \"string\" && entry.name.trim()\n            ? entry.name.trim()\n            : titleCase(id),\n        description:\n          typeof entry.description === \"string\" ? entry.description : \"\",\n        path: pathValue,\n        url:\n          typeof entry.url === \"string\" && entry.url.trim()\n            ? entry.url.trim()\n            : null,\n        isDispatch:\n          typeof entry.isDispatch === \"boolean\"\n            ? entry.isDispatch\n            : id === \"dispatch\",\n      } satisfies WorkspaceAppManifestEntry;\n    })\n    .filter((app): app is WorkspaceAppManifestEntry => !!app)\n    .sort((a, b) => {\n      if (a.id === \"dispatch\") return -1;\n      if (b.id === \"dispatch\") return 1;\n      return a.name.localeCompare(b.name);\n    });\n\n  return apps.length ? apps : null;\n}\n\nfunction readWorkspaceAppsFromEnv(): WorkspaceAppManifestEntry[] | null {\n  const raw = process.env[WORKSPACE_APPS_ENV_KEY];\n  if (!raw) return null;\n  try {\n    return parseWorkspaceAppsManifest(JSON.parse(raw));\n  } catch {\n    return null;\n  }\n}\n\nfunction workspaceAppsManifestCandidates(): string[] {\n  const candidates: string[] = [];\n  try {\n    candidates.push(\n      path.join(process.cwd(), \".agent-native\", WORKSPACE_APPS_MANIFEST_FILE),\n      path.join(process.cwd(), WORKSPACE_APPS_MANIFEST_FILE),\n    );\n  } catch {\n    // Some edge runtimes do not expose process.cwd().\n  }\n  try {\n    const moduleDir = path.dirname(fileURLToPath(import.meta.url));\n    candidates.push(\n      path.join(moduleDir, \".agent-native\", WORKSPACE_APPS_MANIFEST_FILE),\n      path.join(moduleDir, WORKSPACE_APPS_MANIFEST_FILE),\n    );\n  } catch {\n    // Some edge runtimes expose non-file module URLs. The env manifest still\n    // works there, so skip file-relative candidates.\n  }\n  return candidates;\n}\n\nfunction readWorkspaceAppsFromManifestFile():\n  | WorkspaceAppManifestEntry[]\n  | null {\n  for (const file of workspaceAppsManifestCandidates()) {\n    if (!fs.existsSync(file)) continue;\n    const apps = parseWorkspaceAppsManifest(readJson(file));\n    if (apps) return apps;\n  }\n  return null;\n}\n\nfunction readWorkspaceAppsFromFilesystem(): WorkspaceAppManifestEntry[] | null {\n  const workspaceRoot = findWorkspaceRoot();\n  if (!workspaceRoot) return null;\n  const appsDir = path.join(workspaceRoot, \"apps\");\n  if (!fs.existsSync(appsDir)) return null;\n\n  const apps = fs\n    .readdirSync(appsDir, { withFileTypes: true })\n    .filter((entry) => entry.isDirectory())\n    .map((entry): WorkspaceAppManifestEntry | null => {\n      const appDir = path.join(appsDir, entry.name);\n      const pkg = readJson(path.join(appDir, \"package.json\"));\n      if (!pkg) return null;\n      return {\n        id: entry.name,\n        name: pkg.displayName || titleCase(entry.name),\n        description: pkg.description || \"\",\n        path: `/${entry.name}`,\n        isDispatch: entry.name === \"dispatch\",\n      } satisfies WorkspaceAppManifestEntry;\n    })\n    .filter((app): app is WorkspaceAppManifestEntry => !!app)\n    .sort((a, b) => {\n      if (a.id === \"dispatch\") return -1;\n      if (b.id === \"dispatch\") return 1;\n      return a.name.localeCompare(b.name);\n    });\n\n  return apps.length ? apps : null;\n}\n\nfunction workspaceBaseUrl(): string | null {\n  return (\n    process.env.WORKSPACE_GATEWAY_URL ||\n    process.env.APP_URL ||\n    process.env.URL ||\n    process.env.DEPLOY_URL ||\n    process.env.BETTER_AUTH_URL ||\n    null\n  );\n}\n\nfunction workspaceAppUrl(app: WorkspaceAppManifestEntry): string | null {\n  if (app.url) return app.url;\n  const base = workspaceBaseUrl();\n  if (!base) return null;\n  try {\n    return new URL(app.path, `${base.replace(/\\/$/, \"\")}/`).toString();\n  } catch {\n    return null;\n  }\n}\n\nfunction discoverWorkspaceAgents(selfAppId?: string): DiscoveredAgent[] {\n  const workspaceApps = loadWorkspaceAppsManifest();\n  if (!workspaceApps) return [];\n\n  return workspaceApps\n    .filter((app) => app.id !== selfAppId)\n    .map((app) => {\n      const url = workspaceAppUrl(app);\n      if (!url) return null;\n      const builtin = BUILTIN_AGENTS.find((agent) => agent.id === app.id);\n      return {\n        id: app.id,\n        name: app.name,\n        description:\n          app.description ||\n          builtin?.description ||\n          `Workspace app mounted at ${app.path}`,\n        url,\n        color: builtin?.color || \"#6B7280\",\n      } satisfies DiscoveredAgent;\n    })\n    .filter((agent): agent is DiscoveredAgent => !!agent);\n}\n\n/**\n * Like `getBuiltinAgents`, but always returns the production URL — never the\n * env-resolved devUrl. Used by the resource seeder so that a one-time seed\n * (`ON CONFLICT DO NOTHING`) can't permanently bake a localhost URL into the\n * DB, which would override the built-in's prod URL for every later\n * production deploy.\n */\nexport const BUILTIN_AGENTS_FOR_SEEDING: DiscoveredAgent[] =\n  BUILTIN_AGENTS.filter((app) => app.url).map((app) => ({\n    id: app.id,\n    name: app.name,\n    description: app.description,\n    url: app.url, // ALWAYS prod\n    color: app.color,\n  }));\n"]}

package/dist/server/auth.d.ts

@@ -2,6 +2,7 @@ import type { H3Event } from "h3";
 import type { H3AppShim } from "./framework-request-handler.js";
 type H3App = H3AppShim;
 import type { BetterAuthConfig } from "./better-auth-instance.js";
+import type { GoogleAuthMode } from "./google-auth-mode.js";
 /**
  * Get the configured session max age. Desktop SSO broker writes from
  * OAuth flows read this so expiration stays consistent with the cookie.
@@ -97,12 +98,38 @@ export interface AuthOptions {
         continueLabel?: string;
         cancelLabel?: string;
     };
+    /**
+     * Google sign-in flow: `'popup'`, `'redirect'`, or `'auto'` (default).
+     *
+     * - `'auto'` — popup in normal browsers, redirect in Electron. Always uses
+     *   popup inside the Builder.io browser iframe (Google blocks framing).
+     * - `'popup'` — force popup everywhere.
+     * - `'redirect'` — force redirect everywhere except the Builder.io browser
+     *   iframe, which stays popup for technical reasons.
+     *
+     * Falls back to the `GOOGLE_AUTH_MODE` env var, then `'auto'`.
+     */
+    googleAuthMode?: GoogleAuthMode;
     /**
      * Additional Better Auth configuration (social providers, plugins, etc.)
      */
     betterAuth?: BetterAuthConfig;
 }
+/**
+ * When set, the framework session cookie is shared across every subdomain
+ * matching this domain (e.g. `.agent-native.com`). Reads `COOKIE_DOMAIN`.
+ * Returns undefined when unset so cookies stay scoped to the origin host.
+ */
+export declare function getCookieDomain(): string | undefined;
 export declare const COOKIE_NAME: string;
+/**
+ * Cookie domain attribute spread into every `setCookie`/`deleteCookie`.
+ * Empty when `COOKIE_DOMAIN` isn't set so the cookie stays scoped to the
+ * single origin (current production default for non-first-party apps).
+ */
+export declare function cookieDomainAttrs(): {
+    domain?: string;
+};
 /**
  * Check if we're in a development/test environment.
  * Used for cookie security settings, not for auth bypass.

package/dist/server/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/server/auth.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAsChE,KAAK,KAAK,GAAG,SAAS,CAAC;AAQvB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AA6BlE;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAMD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC7D;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;OAIG;IACH,SAAS,CAAC,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF;;;OAGG;IACH,kBAAkB,CAAC,EAAE;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACxB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF;;OAEG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAqBD,eAAO,MAAM,WAAW,QAER,CAAC;AAoDjB;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAG1C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAUrE;AA8ND;;;GAGG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW7E;AAED,uDAAuD;AACvD,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAShE;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmB3E;AA8CD,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAmBD,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,QAWd;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,2BAA2B,QAOnC;AAmGD;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,CAG5C;AAwUD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CA6E5E;AAkCD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAO7E;AA6xCD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,KAAK,EACV,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,OAAO,CAAC,CAmKlB;AAMD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAEzE"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/server/auth.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAsChE,KAAK,KAAK,GAAG,SAAS,CAAC;AAQvB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAMlE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAwB5D;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAMD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC7D;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;OAIG;IACH,SAAS,CAAC,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF;;;OAGG;IACH,kBAAkB,CAAC,EAAE;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACxB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;OAEG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAwCD;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,MAAM,GAAG,SAAS,CAKpD;AAID,eAAO,MAAM,WAAW,QAMJ,CAAC;AAErB;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAGvD;AAoDD;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAG1C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAUrE;AA8ND;;;GAGG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW7E;AAED,uDAAuD;AACvD,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAShE;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmB3E;AA8CD,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAmBD,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,QAWd;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,2BAA2B,QAOnC;AAmGD;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,CAG5C;AAwUD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CA6E5E;AA0CD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAQ7E;AAkyCD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,KAAK,EACV,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,OAAO,CAAC,CAqKlB;AAMD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAEzE"}

package/dist/server/auth.js

@@ -64,14 +64,58 @@ export function getSessionMaxAge() {
  * `an_session` cookie and ping-pong each other into a logged-out state.
  *
  * When `APP_NAME` is set, suffix the cookie so each app gets its own slot.
+ *
+ * Workspace exception: in workspace mode (`AGENT_NATIVE_WORKSPACE=1`),
+ * every app shares the same origin AND the same DB, and cross-app SSO is
+ * the desired behavior — signing into Dispatch should mean you're signed
+ * in across the workspace's other apps too. Per-app suffixes break that.
+ * Use a single workspace-wide cookie so the legacy `an_session_*` token
+ * flow set by `setFrameworkSessionCookie` (which the Builder OAuth popup
+ * exchange relies on — see `desktop-exchange` and `oauthCallbackResponse`)
+ * is recognised by every app in the workspace.
+ *
+ * Cross-subdomain exception: when `COOKIE_DOMAIN` is set (e.g.
+ * `.agent-native.com` for first-party deploys where each app is its own
+ * subdomain — mail.agent-native.com, calendar.agent-native.com, …),
+ * use the unsuffixed `an_session` and emit `Domain=<COOKIE_DOMAIN>` so
+ * the cookie is shared across every subdomain. Signing into one app
+ * signs the user into all of them. Per-app suffixes would defeat the
+ * shared cookie since each subdomain reads a different name.
  */
 const APP_NAME_SLUG = (process.env.APP_NAME || "")
     .toLowerCase()
     .replace(/[^a-z0-9]+/g, "_")
     .replace(/^_+|_+$/g, "");
-export const COOKIE_NAME = APP_NAME_SLUG
-    ? `an_session_${APP_NAME_SLUG}`
-    : "an_session";
+const IS_WORKSPACE_MODE = process.env.AGENT_NATIVE_WORKSPACE === "1";
+/**
+ * When set, the framework session cookie is shared across every subdomain
+ * matching this domain (e.g. `.agent-native.com`). Reads `COOKIE_DOMAIN`.
+ * Returns undefined when unset so cookies stay scoped to the origin host.
+ */
+export function getCookieDomain() {
+    const raw = process.env.COOKIE_DOMAIN;
+    if (!raw)
+        return undefined;
+    const trimmed = raw.trim();
+    return trimmed || undefined;
+}
+const HAS_COOKIE_DOMAIN = !!getCookieDomain();
+export const COOKIE_NAME = HAS_COOKIE_DOMAIN
+    ? "an_session"
+    : IS_WORKSPACE_MODE
+        ? "an_session_workspace"
+        : APP_NAME_SLUG
+            ? `an_session_${APP_NAME_SLUG}`
+            : "an_session";
+/**
+ * Cookie domain attribute spread into every `setCookie`/`deleteCookie`.
+ * Empty when `COOKIE_DOMAIN` isn't set so the cookie stays scoped to the
+ * single origin (current production default for non-first-party apps).
+ */
+export function cookieDomainAttrs() {
+    const domain = getCookieDomain();
+    return domain ? { domain } : {};
+}
 function getOAuthStateAppId() {
     const raw = process.env.APP_NAME || process.env.npm_package_name;
     if (!raw)
@@ -914,19 +958,27 @@ function isReadMethod(event) {
 }
 /**
  * Cookie attributes that work in both same-site and third-party iframe
- * contexts. Over HTTPS we emit `SameSite=None; Secure` (required by browsers
- * to ship the cookie back inside a cross-origin iframe); for plain HTTP dev
- * we keep `SameSite=Lax` since `None` requires Secure.
+ * contexts. Over HTTPS we emit `SameSite=None; Secure; Partitioned` —
+ * `None`+`Secure` is required by browsers to ship the cookie back inside a
+ * cross-origin iframe at all; `Partitioned` keeps the cookie working under
+ * Chrome's third-party-cookie deprecation by binding it to the embedding
+ * site's storage partition. (Better Auth already sets the same trio on its
+ * own session cookie; this matches so the framework's legacy cookie —
+ * which the Builder OAuth popup exchange writes via
+ * `setFrameworkSessionCookie` — survives iframe contexts too.) Plain-HTTP
+ * dev keeps the default `SameSite=Lax`; `None` requires Secure, and
+ * `Partitioned` only takes effect alongside `Secure`.
  */
 function crossSiteCookieAttrs(event) {
     return isHttpsRequest(event)
-        ? { sameSite: "none", secure: true }
+        ? { sameSite: "none", secure: true, partitioned: true }
         : { sameSite: "lax", secure: false };
 }
 export function setFrameworkSessionCookie(event, token) {
     setCookie(event, COOKIE_NAME, token, {
         httpOnly: true,
         ...crossSiteCookieAttrs(event),
+        ...cookieDomainAttrs(),
         path: "/",
         maxAge: sessionMaxAge,
     });
@@ -1738,6 +1790,7 @@ async function mountBetterAuthRoutes(app, options) {
             setCookie(event, COOKIE_NAME, sessionToken, {
                 httpOnly: true,
                 ...crossSiteCookieAttrs(event),
+                ...cookieDomainAttrs(),
                 path: "/",
                 maxAge: sessionMaxAge,
             });
@@ -1758,6 +1811,7 @@ async function mountBetterAuthRoutes(app, options) {
                 setCookie(event, COOKIE_NAME, result.token, {
                     httpOnly: true,
                     ...crossSiteCookieAttrs(event),
+                    ...cookieDomainAttrs(),
                     path: "/",
                     maxAge: sessionMaxAge,
                 });
@@ -1829,7 +1883,7 @@ async function mountBetterAuthRoutes(app, options) {
         const bearerToken = getBearerSessionToken(event);
         if (bearerToken)
             await removeSession(bearerToken);
-        deleteCookie(event, COOKIE_NAME, { path: "/" });
+        deleteCookie(event, COOKIE_NAME, { path: "/", ...cookieDomainAttrs() });
         try {
             await auth.api.signOut({ headers: event.headers });
         }
@@ -1892,7 +1946,7 @@ async function mountBetterAuthRoutes(app, options) {
             }
             // 3. Drop the current request's cookie and best-effort sign out
             // of Better Auth (so the response sets the proper expiry header).
-            deleteCookie(event, COOKIE_NAME, { path: "/" });
+            deleteCookie(event, COOKIE_NAME, { path: "/", ...cookieDomainAttrs() });
             try {
                 await auth.api.signOut({ headers: event.headers });
             }
@@ -1936,6 +1990,7 @@ async function mountBetterAuthRoutes(app, options) {
             googleOnly: options.googleOnly,
             marketing: options.marketing,
             googleSignInNotice: options.googleSignInNotice,
+            googleAuthMode: options.googleAuthMode,
         });
     _authGuardConfig = { loginHtml, publicPaths };
     const guardFn = createAuthGuardFn();
@@ -1963,6 +2018,7 @@ function mountTokenOnlyRoutes(app, accessTokens, publicPaths = []) {
         setCookie(event, COOKIE_NAME, sessionToken, {
             httpOnly: true,
             ...crossSiteCookieAttrs(event),
+            ...cookieDomainAttrs(),
             path: "/",
             maxAge: sessionMaxAge,
         });
@@ -1975,7 +2031,7 @@ function mountTokenOnlyRoutes(app, accessTokens, publicPaths = []) {
         const bearerToken = getBearerSessionToken(event);
         if (bearerToken)
             await removeSession(bearerToken);
-        deleteCookie(event, COOKIE_NAME, { path: "/" });
+        deleteCookie(event, COOKIE_NAME, { path: "/", ...cookieDomainAttrs() });
         if (isElectronRequest(event))
             await clearDesktopSso();
         return { ok: true };
@@ -2022,6 +2078,7 @@ function mountAuthFallbackRoutes(app) {
                 setCookie(event, COOKIE_NAME, result.token, {
                     httpOnly: true,
                     ...crossSiteCookieAttrs(event),
+                    ...cookieDomainAttrs(),
                     path: "/",
                     maxAge: sessionMaxAge,
                 });
@@ -2086,7 +2143,7 @@ function mountAuthFallbackRoutes(app) {
         const bearerToken = getBearerSessionToken(event);
         if (bearerToken)
             await removeSession(bearerToken);
-        deleteCookie(event, COOKIE_NAME, { path: "/" });
+        deleteCookie(event, COOKIE_NAME, { path: "/", ...cookieDomainAttrs() });
         try {
             const auth = await getBetterAuth();
             await auth.api.signOut({ headers: event.headers });
@@ -2157,6 +2214,7 @@ export async function autoMountAuth(app, options = {}) {
                             googleOnly: options.googleOnly,
                             marketing: options.marketing,
                             googleSignInNotice: options.googleSignInNotice,
+                            googleAuthMode: options.googleAuthMode,
                         });
             }
             if (options.publicPaths) {
@@ -2206,7 +2264,7 @@ export async function autoMountAuth(app, options = {}) {
             const bearerToken = getBearerSessionToken(event);
             if (bearerToken)
                 await removeSession(bearerToken);
-            deleteCookie(event, COOKIE_NAME, { path: "/" });
+            deleteCookie(event, COOKIE_NAME, { path: "/", ...cookieDomainAttrs() });
             if (isElectronRequest(event))
                 await clearDesktopSso();
             return { ok: true };
@@ -2253,6 +2311,7 @@ export async function autoMountAuth(app, options = {}) {
                 googleOnly: options.googleOnly,
                 marketing: options.marketing,
                 googleSignInNotice: options.googleSignInNotice,
+                googleAuthMode: options.googleAuthMode,
             });
         _authGuardConfig = { loginHtml, publicPaths };
         const guardFn = createAuthGuardFn();