@agent-native/core 0.130.1 → 0.131.2

package/dist/server/csrf.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"csrf.d.ts","sourceRoot":"","sources":["../../src/server/csrf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAuJH;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,eAAe,GAAE,MAAyB;;GAsB3C"}
+{"version":3,"file":"csrf.d.ts","sourceRoot":"","sources":["../../src/server/csrf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAgLH;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,eAAe,GAAE,MAAyB;;GAsB3C"}

package/dist/server/csrf.js

@@ -51,6 +51,27 @@ import { getConfiguredAppBasePath } from "./app-base-path.js";
  * markers. These are signed/authenticated through other mechanisms (HMAC,
  * JWT, internal token) so they don't need cookie-based CSRF protection.
  */
+/**
+ * Sub-prefixes that must stay CSRF-protected even though a broader entry in
+ * `CSRF_ALLOWLIST_PREFIXES` covers them. Checked first, and they win.
+ *
+ * An allowlist entry is a promise that everything beneath it authenticates on
+ * something the browser will not attach by itself. Mount a route that calls
+ * `requireSessionContext` under such a prefix and that promise silently breaks:
+ * the route now rides the ambient `SameSite=None` session cookie with no
+ * first-party check, and nothing about the route's own code looks wrong.
+ * `/integrations/remote/*` is exactly that shape — device-token relay routes
+ * and cookie-authenticated control routes share one subtree.
+ */
+const CSRF_PROTECTED_PREFIXES = [
+    // Remote-device relay. The device's own routes (poll/result/heartbeat)
+    // authenticate with a bearer token and send no cookies, so they never reach
+    // the check; the sibling routes (register, enqueue, computer/approvals,
+    // computer/commands) are session-authenticated and must not be exempt —
+    // approving a browser-control operation is a state change an attacker page
+    // must never be able to make ride the victim's cookie.
+    "/integrations/remote/",
+];
 const CSRF_ALLOWLIST_PREFIXES = [
     // Integration webhooks — verified by HMAC against a per-integration secret.
     "/integrations/",
@@ -142,6 +163,10 @@ function isOnAllowlist(pathname, frameworkPrefix) {
     if (!pathname.startsWith(frameworkPrefix))
         return false;
     const sub = pathname.slice(frameworkPrefix.length);
+    for (const protectedPrefix of CSRF_PROTECTED_PREFIXES) {
+        if (sub.startsWith(protectedPrefix))
+            return false;
+    }
     for (const allowed of CSRF_ALLOWLIST_PREFIXES) {
         if (sub.startsWith(allowed))
             return true;

package/dist/server/csrf.js.map

@@ -1 +1 @@
-{"version":3,"file":"csrf.js","sourceRoot":"","sources":["../../src/server/csrf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,IAAI,CAAC;AAEZ,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,uBAAuB,GAAG;IAC9B,4EAA4E;IAC5E,gBAAgB;IAChB,2EAA2E;IAC3E,gEAAgE;IAChE,eAAe;IACf,qEAAqE;IACrE,4DAA4D;IAC5D,6BAA6B;IAC7B,2EAA2E;IAC3E,gEAAgE;IAChE,MAAM;IACN,sEAAsE;IACtE,0EAA0E;IAC1E,4DAA4D;IAC5D,QAAQ;IACR,8DAA8D;IAC9D,kBAAkB;IAClB,uEAAuE;IACvE,2EAA2E;IAC3E,SAAS;IACT,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,+BAA+B;IAC/B,SAAS;IACT,0EAA0E;IAC1E,uEAAuE;IACvE,mBAAmB;CACpB,CAAC;AAEF,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE3E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAS,eAAe,CAAC,KAAU;IACjC,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACtD,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC5D,IACE,WAAW;QACX,OAAO,WAAW,KAAK,QAAQ;QAC/B,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EACtD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,KAAU;IACnC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,QAAgB,EAAE,eAAuB;IAC9D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACnD,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;QAC9C,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAgB,EAChB,eAAuB;IAEvB,IAAI,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,eAAe,CAAC;IAEjE,IACE,QAAQ,KAAK,uBAAuB;QACpC,QAAQ,CAAC,UAAU,CAAC,GAAG,uBAAuB,GAAG,CAAC,EAClD,CAAC;QACD,OAAO,uBAAuB,CAAC;IACjC,CAAC;IAED,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;IAC5C,MAAM,uBAAuB,GAAG,GAAG,QAAQ,GAAG,eAAe,EAAE,CAAC;IAChE,IAAI,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC7D,OAAO,uBAAuB,CAAC;IACjC,CAAC;IAED,MAAM,iBAAiB,GAAG,GAAG,QAAQ,GAAG,uBAAuB,EAAE,CAAC;IAClE,IACE,QAAQ;QACR,CAAC,QAAQ,KAAK,iBAAiB;YAC7B,QAAQ,CAAC,UAAU,CAAC,GAAG,iBAAiB,GAAG,CAAC,CAAC,EAC/C,CAAC;QACD,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAClC,eAAe,GAAW,gBAAgB;IAE1C,OAAO,kBAAkB,CAAC,CAAC,KAAK,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QAE1D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;QAC3C,MAAM,cAAc,GAAG,uBAAuB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC1E,IAAI,CAAC,cAAc;YAAE,OAAO,SAAS,CAAC;QACtC,IAAI,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC;YAAE,OAAO,SAAS,CAAC;QAE9D,qEAAqE;QACrE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAEhD,IAAI,eAAe,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAE7C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EACH,6IAA6I;SAChJ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * Defense-in-depth CSRF check for framework state-changing routes.\n *\n * Threat model: action endpoints (`/_agent-native/actions/*`), extension\n * endpoints (`/_agent-native/extensions/*` and the legacy\n * `/_agent-native/tools/*` alias), and a handful of other state-changing\n * `/_agent-native/*` routes use the better-auth session cookie, which is\n * configured with `SameSite=None; Secure; Partitioned` so the iframe editor\n * (and other cross-site embeds) can authenticate. `SameSite=None` means the\n * browser ships the session cookie on top-level form POSTs from any origin —\n * which is exactly the precondition for classic cross-site request forgery.\n *\n * The browser still gates \"non-simple\" requests behind a CORS preflight, so\n * an attacker who has to send `Content-Type: application/json` is forced\n * through OPTIONS, which our CORS middleware (`create-server.ts`) rejects\n * for disallowed origins. But the simple-request bypass (`Content-Type:\n * text/plain` on a `<form enctype=\"text/plain\">` POST, or `multipart/form-data`)\n * never preflights — the browser delivers it cross-origin with cookies.\n *\n * Mitigation: this middleware rejects any state-changing\n * (`POST/PUT/PATCH/DELETE`) request to `/_agent-native/*` that\n *\n *   1. carries the auth-cookie pattern (any cookie at all is a heuristic\n *      good-enough proxy — we don't want to deny anonymous fetches), AND\n *   2. is NOT clearly same-origin / first-party. We trust:\n *      - `Sec-Fetch-Site: same-origin` (sent by every modern browser on\n *        same-origin fetch — Chrome/Firefox/Safari/Edge all support it).\n *      - `X-Agent-Native-CSRF` custom header. Custom headers force a\n *        preflight, so an attacker can't add one cross-origin.\n *      - `Content-Type: application/json` request body. Same logic — JSON\n *        Content-Type is a non-simple request that triggers preflight.\n *\n * Why the existing CORS check isn't enough: a simple-request POST never\n * preflights, so the browser sends it through and only blocks the *response*\n * from being readable cross-origin. The state change (delete-account, write\n * SQL, etc.) happens server-side regardless. We need a server-side check that\n * proves first-party intent before running the action.\n *\n * Opt-out marker: a handful of routes legitimately accept cross-origin POSTs\n * — webhook endpoints (Slack, Telegram, email), the public A2A endpoint\n * (`/_agent-native/a2a`), the integrations process-task self-fire, and so on.\n * Those are listed in `CSRF_ALLOWLIST_PREFIXES` below; if you add a new\n * cross-origin-callable route, add it there.\n */\n\nimport {\n  defineEventHandler,\n  getMethod,\n  getRequestHeader,\n  setResponseStatus,\n} from \"h3\";\n\nimport { MCP_PUBLIC_ROUTE_PREFIX } from \"../mcp/route-paths.js\";\nimport { getConfiguredAppBasePath } from \"./app-base-path.js\";\n\n/**\n * Path prefixes (relative to the framework prefix `/_agent-native`) that are\n * allowed to receive cross-origin state-changing POSTs without first-party\n * markers. These are signed/authenticated through other mechanisms (HMAC,\n * JWT, internal token) so they don't need cookie-based CSRF protection.\n */\nconst CSRF_ALLOWLIST_PREFIXES = [\n  // Integration webhooks — verified by HMAC against a per-integration secret.\n  \"/integrations/\",\n  // Agent Teams durable sub-agent processor self-fire — verified by the same\n  // HMAC internal-token scheme as the integration/A2A processors.\n  \"/agent-teams/\",\n  // Durable sandbox-execution processor self-fire (run-code background\n  // queue) — verified by the same HMAC internal-token scheme.\n  \"/sandbox/_process-execution\",\n  // A2A JSON-RPC endpoints — verified by signed JWT (when A2A_SECRET set) or\n  // explicitly opt-in unauthenticated (handled at the A2A layer).\n  \"/a2a\",\n  // Better Auth's own login/sign-in/social-callback routes. Better Auth\n  // ships its own CSRF protection (Origin/Sec-Fetch checks on its handlers)\n  // and cookies are needed for the OAuth callback round-trip.\n  \"/auth/\",\n  // Stripe / Paddle / billing webhooks dropped in by templates.\n  \"/billing/webhook\",\n  // Public share endpoints — read-only and never cookie-driven, but kept\n  // here so a templated POST (e.g. comment-on-public-recording) doesn't 403.\n  \"/share/\",\n  // OAuth callbacks (Builder, Google, Slack, Notion, Zoom). These get a\n  // `code` query param via top-level navigation — they DO ride the session\n  // cookie and they SHOULD validate state, but the framework can't see the\n  // state token. Each callback handler is responsible for its own CSRF\n  // check (signed state tokens).\n  \"/oauth/\",\n  // Builder's CLI-auth callback — uses the BUILDER_STATE_PARAM signed token\n  // to authenticate the round-trip; framework CSRF check would block it.\n  \"/builder/callback\",\n];\n\nconst STATE_CHANGING_METHODS = new Set([\"POST\", \"PUT\", \"PATCH\", \"DELETE\"]);\n\n/**\n * Decide whether a request is \"first-party enough\" to trust as not-CSRF.\n * Any of the following make a request non-CSRF:\n *\n *   - `Sec-Fetch-Site: same-origin` (or `none` for top-level navigations\n *     to our own pages — but state-changing methods don't ship `none`).\n *   - `X-Agent-Native-CSRF` header (any value, even \"1\"). This is a custom\n *     header so the browser forces a preflight cross-origin, which our\n *     CORS layer rejects for disallowed origins.\n *   - `Content-Type: application/json` (case-insensitive). JSON content\n *     type is a non-simple request that triggers preflight.\n *\n * We accept ANY of these — the goal is \"did the request come through a\n * channel the browser would have preflighted\", not a strict-mode token.\n *\n * NOTE: `Sec-Fetch-Site: same-site` is deliberately NOT trusted. Under a\n * shared cookie domain (COOKIE_DOMAIN / crossSubDomainCookies), the browser\n * labels a request from a SIBLING subdomain (evil.example.com → app.example.com)\n * as `same-site` even though it is cross-origin and would ride the shared\n * session cookie — a CSRF vector. Legitimate first-party clients all also send\n * `X-Agent-Native-CSRF` or `application/json`, so they still pass via those\n * paths and iframe/embed flows are unaffected.\n */\nfunction looksFirstParty(event: any): boolean {\n  const sfs = getRequestHeader(event, \"sec-fetch-site\");\n  if (sfs === \"same-origin\" || sfs === \"none\") {\n    return true;\n  }\n  if (getRequestHeader(event, \"x-agent-native-csrf\")) {\n    return true;\n  }\n  const contentType = getRequestHeader(event, \"content-type\");\n  if (\n    contentType &&\n    typeof contentType === \"string\" &&\n    contentType.toLowerCase().includes(\"application/json\")\n  ) {\n    return true;\n  }\n  return false;\n}\n\n/**\n * Returns true when the request carries any cookie. We use \"has any cookie\"\n * as a coarse heuristic for \"the browser is going to attach the session\n * cookie\" — anonymous tools (curl, server-to-server) typically don't send\n * cookies, so they bypass this check entirely.\n */\nfunction requestHasCookies(event: any): boolean {\n  const cookie = getRequestHeader(event, \"cookie\");\n  return typeof cookie === \"string\" && cookie.trim().length > 0;\n}\n\n/**\n * The path is the full request URL pathname (e.g.\n * `/_agent-native/actions/foo` or `/app/_agent-native/actions/foo`).\n * `frameworkPrefix` is the root framework route prefix without a trailing\n * slash, e.g. `/_agent-native`.\n */\nfunction isOnAllowlist(pathname: string, frameworkPrefix: string): boolean {\n  if (!pathname.startsWith(frameworkPrefix)) return false;\n  const sub = pathname.slice(frameworkPrefix.length);\n  for (const allowed of CSRF_ALLOWLIST_PREFIXES) {\n    if (sub.startsWith(allowed)) return true;\n  }\n  return false;\n}\n\nfunction matchingFrameworkPrefix(\n  pathname: string,\n  frameworkPrefix: string,\n): string | undefined {\n  if (pathname.startsWith(frameworkPrefix)) return frameworkPrefix;\n\n  if (\n    pathname === MCP_PUBLIC_ROUTE_PREFIX ||\n    pathname.startsWith(`${MCP_PUBLIC_ROUTE_PREFIX}/`)\n  ) {\n    return MCP_PUBLIC_ROUTE_PREFIX;\n  }\n\n  const basePath = getConfiguredAppBasePath();\n  const basePathFrameworkPrefix = `${basePath}${frameworkPrefix}`;\n  if (basePath && pathname.startsWith(basePathFrameworkPrefix)) {\n    return basePathFrameworkPrefix;\n  }\n\n  const basePathMcpPrefix = `${basePath}${MCP_PUBLIC_ROUTE_PREFIX}`;\n  if (\n    basePath &&\n    (pathname === basePathMcpPrefix ||\n      pathname.startsWith(`${basePathMcpPrefix}/`))\n  ) {\n    return basePathMcpPrefix;\n  }\n\n  return undefined;\n}\n\n/**\n * Create the framework CSRF middleware.\n *\n * Mount this BEFORE any state-changing route handler. The middleware\n *   - lets every non-state-changing method through (GET/HEAD/OPTIONS).\n *   - lets requests without cookies through (anonymous/server tools).\n *   - lets allowlisted paths through (webhooks, A2A, OAuth callbacks).\n *   - lets first-party-shaped requests through (custom header, JSON\n *     Content-Type, or `Sec-Fetch-Site: same-origin`).\n *   - rejects everything else with 403.\n */\nexport function createCsrfMiddleware(\n  frameworkPrefix: string = \"/_agent-native\",\n) {\n  return defineEventHandler((event) => {\n    const method = getMethod(event);\n    if (!STATE_CHANGING_METHODS.has(method)) return undefined;\n\n    const pathname = event.url?.pathname ?? \"\";\n    const matchingPrefix = matchingFrameworkPrefix(pathname, frameworkPrefix);\n    if (!matchingPrefix) return undefined;\n    if (isOnAllowlist(pathname, matchingPrefix)) return undefined;\n\n    // No cookie = no risk of confused-deputy CSRF on the session cookie.\n    if (!requestHasCookies(event)) return undefined;\n\n    if (looksFirstParty(event)) return undefined;\n\n    setResponseStatus(event, 403);\n    return {\n      error:\n        \"CSRF check failed: state-changing requests must include a same-origin marker. Set Content-Type: application/json or X-Agent-Native-CSRF: 1.\",\n    };\n  });\n}\n"]}
+{"version":3,"file":"csrf.js","sourceRoot":"","sources":["../../src/server/csrf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,IAAI,CAAC;AAEZ,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE9D;;;;;GAKG;AACH;;;;;;;;;;;GAWG;AACH,MAAM,uBAAuB,GAAG;IAC9B,uEAAuE;IACvE,4EAA4E;IAC5E,wEAAwE;IACxE,wEAAwE;IACxE,2EAA2E;IAC3E,uDAAuD;IACvD,uBAAuB;CACxB,CAAC;AAEF,MAAM,uBAAuB,GAAG;IAC9B,4EAA4E;IAC5E,gBAAgB;IAChB,2EAA2E;IAC3E,gEAAgE;IAChE,eAAe;IACf,qEAAqE;IACrE,4DAA4D;IAC5D,6BAA6B;IAC7B,2EAA2E;IAC3E,gEAAgE;IAChE,MAAM;IACN,sEAAsE;IACtE,0EAA0E;IAC1E,4DAA4D;IAC5D,QAAQ;IACR,8DAA8D;IAC9D,kBAAkB;IAClB,uEAAuE;IACvE,2EAA2E;IAC3E,SAAS;IACT,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,+BAA+B;IAC/B,SAAS;IACT,0EAA0E;IAC1E,uEAAuE;IACvE,mBAAmB;CACpB,CAAC;AAEF,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE3E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAS,eAAe,CAAC,KAAU;IACjC,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACtD,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC5D,IACE,WAAW;QACX,OAAO,WAAW,KAAK,QAAQ;QAC/B,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EACtD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,KAAU;IACnC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,QAAgB,EAAE,eAAuB;IAC9D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACnD,KAAK,MAAM,eAAe,IAAI,uBAAuB,EAAE,CAAC;QACtD,IAAI,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,OAAO,KAAK,CAAC;IACpD,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;QAC9C,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAgB,EAChB,eAAuB;IAEvB,IAAI,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,eAAe,CAAC;IAEjE,IACE,QAAQ,KAAK,uBAAuB;QACpC,QAAQ,CAAC,UAAU,CAAC,GAAG,uBAAuB,GAAG,CAAC,EAClD,CAAC;QACD,OAAO,uBAAuB,CAAC;IACjC,CAAC;IAED,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;IAC5C,MAAM,uBAAuB,GAAG,GAAG,QAAQ,GAAG,eAAe,EAAE,CAAC;IAChE,IAAI,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC7D,OAAO,uBAAuB,CAAC;IACjC,CAAC;IAED,MAAM,iBAAiB,GAAG,GAAG,QAAQ,GAAG,uBAAuB,EAAE,CAAC;IAClE,IACE,QAAQ;QACR,CAAC,QAAQ,KAAK,iBAAiB;YAC7B,QAAQ,CAAC,UAAU,CAAC,GAAG,iBAAiB,GAAG,CAAC,CAAC,EAC/C,CAAC;QACD,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAClC,eAAe,GAAW,gBAAgB;IAE1C,OAAO,kBAAkB,CAAC,CAAC,KAAK,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QAE1D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;QAC3C,MAAM,cAAc,GAAG,uBAAuB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC1E,IAAI,CAAC,cAAc;YAAE,OAAO,SAAS,CAAC;QACtC,IAAI,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC;YAAE,OAAO,SAAS,CAAC;QAE9D,qEAAqE;QACrE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAEhD,IAAI,eAAe,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAE7C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EACH,6IAA6I;SAChJ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * Defense-in-depth CSRF check for framework state-changing routes.\n *\n * Threat model: action endpoints (`/_agent-native/actions/*`), extension\n * endpoints (`/_agent-native/extensions/*` and the legacy\n * `/_agent-native/tools/*` alias), and a handful of other state-changing\n * `/_agent-native/*` routes use the better-auth session cookie, which is\n * configured with `SameSite=None; Secure; Partitioned` so the iframe editor\n * (and other cross-site embeds) can authenticate. `SameSite=None` means the\n * browser ships the session cookie on top-level form POSTs from any origin —\n * which is exactly the precondition for classic cross-site request forgery.\n *\n * The browser still gates \"non-simple\" requests behind a CORS preflight, so\n * an attacker who has to send `Content-Type: application/json` is forced\n * through OPTIONS, which our CORS middleware (`create-server.ts`) rejects\n * for disallowed origins. But the simple-request bypass (`Content-Type:\n * text/plain` on a `<form enctype=\"text/plain\">` POST, or `multipart/form-data`)\n * never preflights — the browser delivers it cross-origin with cookies.\n *\n * Mitigation: this middleware rejects any state-changing\n * (`POST/PUT/PATCH/DELETE`) request to `/_agent-native/*` that\n *\n *   1. carries the auth-cookie pattern (any cookie at all is a heuristic\n *      good-enough proxy — we don't want to deny anonymous fetches), AND\n *   2. is NOT clearly same-origin / first-party. We trust:\n *      - `Sec-Fetch-Site: same-origin` (sent by every modern browser on\n *        same-origin fetch — Chrome/Firefox/Safari/Edge all support it).\n *      - `X-Agent-Native-CSRF` custom header. Custom headers force a\n *        preflight, so an attacker can't add one cross-origin.\n *      - `Content-Type: application/json` request body. Same logic — JSON\n *        Content-Type is a non-simple request that triggers preflight.\n *\n * Why the existing CORS check isn't enough: a simple-request POST never\n * preflights, so the browser sends it through and only blocks the *response*\n * from being readable cross-origin. The state change (delete-account, write\n * SQL, etc.) happens server-side regardless. We need a server-side check that\n * proves first-party intent before running the action.\n *\n * Opt-out marker: a handful of routes legitimately accept cross-origin POSTs\n * — webhook endpoints (Slack, Telegram, email), the public A2A endpoint\n * (`/_agent-native/a2a`), the integrations process-task self-fire, and so on.\n * Those are listed in `CSRF_ALLOWLIST_PREFIXES` below; if you add a new\n * cross-origin-callable route, add it there.\n */\n\nimport {\n  defineEventHandler,\n  getMethod,\n  getRequestHeader,\n  setResponseStatus,\n} from \"h3\";\n\nimport { MCP_PUBLIC_ROUTE_PREFIX } from \"../mcp/route-paths.js\";\nimport { getConfiguredAppBasePath } from \"./app-base-path.js\";\n\n/**\n * Path prefixes (relative to the framework prefix `/_agent-native`) that are\n * allowed to receive cross-origin state-changing POSTs without first-party\n * markers. These are signed/authenticated through other mechanisms (HMAC,\n * JWT, internal token) so they don't need cookie-based CSRF protection.\n */\n/**\n * Sub-prefixes that must stay CSRF-protected even though a broader entry in\n * `CSRF_ALLOWLIST_PREFIXES` covers them. Checked first, and they win.\n *\n * An allowlist entry is a promise that everything beneath it authenticates on\n * something the browser will not attach by itself. Mount a route that calls\n * `requireSessionContext` under such a prefix and that promise silently breaks:\n * the route now rides the ambient `SameSite=None` session cookie with no\n * first-party check, and nothing about the route's own code looks wrong.\n * `/integrations/remote/*` is exactly that shape — device-token relay routes\n * and cookie-authenticated control routes share one subtree.\n */\nconst CSRF_PROTECTED_PREFIXES = [\n  // Remote-device relay. The device's own routes (poll/result/heartbeat)\n  // authenticate with a bearer token and send no cookies, so they never reach\n  // the check; the sibling routes (register, enqueue, computer/approvals,\n  // computer/commands) are session-authenticated and must not be exempt —\n  // approving a browser-control operation is a state change an attacker page\n  // must never be able to make ride the victim's cookie.\n  \"/integrations/remote/\",\n];\n\nconst CSRF_ALLOWLIST_PREFIXES = [\n  // Integration webhooks — verified by HMAC against a per-integration secret.\n  \"/integrations/\",\n  // Agent Teams durable sub-agent processor self-fire — verified by the same\n  // HMAC internal-token scheme as the integration/A2A processors.\n  \"/agent-teams/\",\n  // Durable sandbox-execution processor self-fire (run-code background\n  // queue) — verified by the same HMAC internal-token scheme.\n  \"/sandbox/_process-execution\",\n  // A2A JSON-RPC endpoints — verified by signed JWT (when A2A_SECRET set) or\n  // explicitly opt-in unauthenticated (handled at the A2A layer).\n  \"/a2a\",\n  // Better Auth's own login/sign-in/social-callback routes. Better Auth\n  // ships its own CSRF protection (Origin/Sec-Fetch checks on its handlers)\n  // and cookies are needed for the OAuth callback round-trip.\n  \"/auth/\",\n  // Stripe / Paddle / billing webhooks dropped in by templates.\n  \"/billing/webhook\",\n  // Public share endpoints — read-only and never cookie-driven, but kept\n  // here so a templated POST (e.g. comment-on-public-recording) doesn't 403.\n  \"/share/\",\n  // OAuth callbacks (Builder, Google, Slack, Notion, Zoom). These get a\n  // `code` query param via top-level navigation — they DO ride the session\n  // cookie and they SHOULD validate state, but the framework can't see the\n  // state token. Each callback handler is responsible for its own CSRF\n  // check (signed state tokens).\n  \"/oauth/\",\n  // Builder's CLI-auth callback — uses the BUILDER_STATE_PARAM signed token\n  // to authenticate the round-trip; framework CSRF check would block it.\n  \"/builder/callback\",\n];\n\nconst STATE_CHANGING_METHODS = new Set([\"POST\", \"PUT\", \"PATCH\", \"DELETE\"]);\n\n/**\n * Decide whether a request is \"first-party enough\" to trust as not-CSRF.\n * Any of the following make a request non-CSRF:\n *\n *   - `Sec-Fetch-Site: same-origin` (or `none` for top-level navigations\n *     to our own pages — but state-changing methods don't ship `none`).\n *   - `X-Agent-Native-CSRF` header (any value, even \"1\"). This is a custom\n *     header so the browser forces a preflight cross-origin, which our\n *     CORS layer rejects for disallowed origins.\n *   - `Content-Type: application/json` (case-insensitive). JSON content\n *     type is a non-simple request that triggers preflight.\n *\n * We accept ANY of these — the goal is \"did the request come through a\n * channel the browser would have preflighted\", not a strict-mode token.\n *\n * NOTE: `Sec-Fetch-Site: same-site` is deliberately NOT trusted. Under a\n * shared cookie domain (COOKIE_DOMAIN / crossSubDomainCookies), the browser\n * labels a request from a SIBLING subdomain (evil.example.com → app.example.com)\n * as `same-site` even though it is cross-origin and would ride the shared\n * session cookie — a CSRF vector. Legitimate first-party clients all also send\n * `X-Agent-Native-CSRF` or `application/json`, so they still pass via those\n * paths and iframe/embed flows are unaffected.\n */\nfunction looksFirstParty(event: any): boolean {\n  const sfs = getRequestHeader(event, \"sec-fetch-site\");\n  if (sfs === \"same-origin\" || sfs === \"none\") {\n    return true;\n  }\n  if (getRequestHeader(event, \"x-agent-native-csrf\")) {\n    return true;\n  }\n  const contentType = getRequestHeader(event, \"content-type\");\n  if (\n    contentType &&\n    typeof contentType === \"string\" &&\n    contentType.toLowerCase().includes(\"application/json\")\n  ) {\n    return true;\n  }\n  return false;\n}\n\n/**\n * Returns true when the request carries any cookie. We use \"has any cookie\"\n * as a coarse heuristic for \"the browser is going to attach the session\n * cookie\" — anonymous tools (curl, server-to-server) typically don't send\n * cookies, so they bypass this check entirely.\n */\nfunction requestHasCookies(event: any): boolean {\n  const cookie = getRequestHeader(event, \"cookie\");\n  return typeof cookie === \"string\" && cookie.trim().length > 0;\n}\n\n/**\n * The path is the full request URL pathname (e.g.\n * `/_agent-native/actions/foo` or `/app/_agent-native/actions/foo`).\n * `frameworkPrefix` is the root framework route prefix without a trailing\n * slash, e.g. `/_agent-native`.\n */\nfunction isOnAllowlist(pathname: string, frameworkPrefix: string): boolean {\n  if (!pathname.startsWith(frameworkPrefix)) return false;\n  const sub = pathname.slice(frameworkPrefix.length);\n  for (const protectedPrefix of CSRF_PROTECTED_PREFIXES) {\n    if (sub.startsWith(protectedPrefix)) return false;\n  }\n  for (const allowed of CSRF_ALLOWLIST_PREFIXES) {\n    if (sub.startsWith(allowed)) return true;\n  }\n  return false;\n}\n\nfunction matchingFrameworkPrefix(\n  pathname: string,\n  frameworkPrefix: string,\n): string | undefined {\n  if (pathname.startsWith(frameworkPrefix)) return frameworkPrefix;\n\n  if (\n    pathname === MCP_PUBLIC_ROUTE_PREFIX ||\n    pathname.startsWith(`${MCP_PUBLIC_ROUTE_PREFIX}/`)\n  ) {\n    return MCP_PUBLIC_ROUTE_PREFIX;\n  }\n\n  const basePath = getConfiguredAppBasePath();\n  const basePathFrameworkPrefix = `${basePath}${frameworkPrefix}`;\n  if (basePath && pathname.startsWith(basePathFrameworkPrefix)) {\n    return basePathFrameworkPrefix;\n  }\n\n  const basePathMcpPrefix = `${basePath}${MCP_PUBLIC_ROUTE_PREFIX}`;\n  if (\n    basePath &&\n    (pathname === basePathMcpPrefix ||\n      pathname.startsWith(`${basePathMcpPrefix}/`))\n  ) {\n    return basePathMcpPrefix;\n  }\n\n  return undefined;\n}\n\n/**\n * Create the framework CSRF middleware.\n *\n * Mount this BEFORE any state-changing route handler. The middleware\n *   - lets every non-state-changing method through (GET/HEAD/OPTIONS).\n *   - lets requests without cookies through (anonymous/server tools).\n *   - lets allowlisted paths through (webhooks, A2A, OAuth callbacks).\n *   - lets first-party-shaped requests through (custom header, JSON\n *     Content-Type, or `Sec-Fetch-Site: same-origin`).\n *   - rejects everything else with 403.\n */\nexport function createCsrfMiddleware(\n  frameworkPrefix: string = \"/_agent-native\",\n) {\n  return defineEventHandler((event) => {\n    const method = getMethod(event);\n    if (!STATE_CHANGING_METHODS.has(method)) return undefined;\n\n    const pathname = event.url?.pathname ?? \"\";\n    const matchingPrefix = matchingFrameworkPrefix(pathname, frameworkPrefix);\n    if (!matchingPrefix) return undefined;\n    if (isOnAllowlist(pathname, matchingPrefix)) return undefined;\n\n    // No cookie = no risk of confused-deputy CSRF on the session cookie.\n    if (!requestHasCookies(event)) return undefined;\n\n    if (looksFirstParty(event)) return undefined;\n\n    setResponseStatus(event, 403);\n    return {\n      error:\n        \"CSRF check failed: state-changing requests must include a same-origin marker. Set Content-Type: application/json or X-Agent-Native-CSRF: 1.\",\n    };\n  });\n}\n"]}

package/dist/server/email-template.d.ts

@@ -36,6 +36,8 @@ export interface RenderEmailArgs {
     paragraphs: string[];
     /** Primary call-to-action rendered as a real button. */
     cta?: EmailCta;
+    /** Optional second button rendered beside the primary CTA, dark-filled. */
+    secondaryCta?: EmailCta;
     /** A treated, copyable URL shown before or after the CTA. */
     linkBlock?: EmailLinkBlock;
     /**
@@ -44,6 +46,8 @@ export interface RenderEmailArgs {
      * by app/template code (never raw user input), and escape any dynamic values.
      */
     heroHtml?: string;
+    /** Body paragraphs rendered after the CTA and link block. Escaped-by-caller. */
+    closingParagraphs?: string[];
     /** Small muted text under the CTA (e.g. expiry note). */
     footer?: string;
     /** Optional app name shown beside the framework logo. */

package/dist/server/email-template.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"email-template.d.ts","sourceRoot":"","sources":["../../src/server/email-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,eAAO,MAAM,kCAAkC,sBAAsB,CAAC;AAEtE,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,YAAY,GAAG,WAAW,CAAC;CACxC;AAED,MAAM,WAAW,eAAe;IAC9B,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,wDAAwD;IACxD,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,6DAA6D;IAC7D,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAsCD,wBAAgB,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,aAAa,CA2IhE;AAeD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAE5D"}
+{"version":3,"file":"email-template.d.ts","sourceRoot":"","sources":["../../src/server/email-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,eAAO,MAAM,kCAAkC,sBAAsB,CAAC;AAEtE,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,YAAY,GAAG,WAAW,CAAC;CACxC;AAED,MAAM,WAAW,eAAe;IAC9B,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,wDAAwD;IACxD,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,2EAA2E;IAC3E,YAAY,CAAC,EAAE,QAAQ,CAAC;IACxB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAsCD,wBAAgB,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,aAAa,CAqKhE;AAeD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAE5D"}

package/dist/server/email-template.js

@@ -70,9 +70,13 @@ export function renderEmail(args) {
     // thumbnail with a play badge). Callers are responsible for escaping any
     // dynamic values they interpolate.
     const heroHtml = args.heroHtml ?? "";
-    const paragraphsHtml = args.paragraphs
+    const renderParagraphs = (paragraphs) => (paragraphs ?? [])
         .map((p) => `<p style="margin:0 0 16px 0; font-size:16px; line-height:1.6; color:#d4d4d8;">${p}</p>`)
         .join("");
+    const paragraphsHtml = renderParagraphs(args.paragraphs);
+    const closingParagraphsHtml = args.closingParagraphs?.length
+        ? `<div style="margin:28px 0 0 0;">${renderParagraphs(args.closingParagraphs)}</div>`
+        : "";
     const linkBlockHtml = args.linkBlock
         ? `
       <p style="margin:24px 0 12px 0; font-size:15px; line-height:1.6; color:#d4d4d8;">${escapeHtml(args.linkBlock.intro)}</p>
@@ -85,16 +89,20 @@ export function renderEmail(args) {
       </table>
     `
         : "";
+    const ctaButtonCell = (cta, background, color, border) => `
+          <td style="border-radius:10px; background:${background}; border:${border};">
+            <a href="${escapeAttr(cta.url)}"
+               style="display:inline-block; padding:14px 26px; font-family:'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; font-size:15px; font-weight:600; color:${color}; text-decoration:none; border-radius:10px;">
+              ${escapeHtml(cta.label)}
+            </a>
+          </td>`;
+    const secondaryCtaHtml = args.secondaryCta
+        ? `<td style="width:12px;">&nbsp;</td>${ctaButtonCell(args.secondaryCta, "#141417", "#fafafa", "1px solid #3f3f46")}`
+        : "";
     const ctaHtml = args.cta
         ? `
       <table role="presentation" cellpadding="0" cellspacing="0" border="0" style="margin:24px 0 0 0;">
-        <tr>
-          <td style="border-radius:10px; background:${ctaBg};">
-            <a href="${escapeAttr(args.cta.url)}"
-               style="display:inline-block; padding:14px 26px; font-family:'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; font-size:15px; font-weight:600; color:${ctaFg}; text-decoration:none; border-radius:10px;">
-              ${escapeHtml(args.cta.label)}
-            </a>
-          </td>
+        <tr>${ctaButtonCell(args.cta, ctaBg, ctaFg, "0")}${secondaryCtaHtml}
         </tr>
       </table>
     `
@@ -145,6 +153,7 @@ export function renderEmail(args) {
                 ${args.linkBlock?.placement !== "after-cta" ? linkBlockHtml : ""}
                 ${ctaHtml}
                 ${args.linkBlock?.placement === "after-cta" ? linkBlockHtml : ""}
+                ${closingParagraphsHtml}
                 ${footerHtml}
               </td>
             </tr>
@@ -170,11 +179,19 @@ export function renderEmail(args) {
         textLines.push(`${args.cta.label}: ${args.cta.url}`);
         textLines.push("");
     }
+    if (args.secondaryCta) {
+        textLines.push(`${args.secondaryCta.label}: ${args.secondaryCta.url}`);
+        textLines.push("");
+    }
     if (args.linkBlock?.placement === "after-cta") {
         textLines.push(args.linkBlock.intro);
         textLines.push(args.linkBlock.url);
         textLines.push("");
     }
+    for (const p of args.closingParagraphs ?? []) {
+        textLines.push(stripTags(p));
+        textLines.push("");
+    }
     if (args.footer) {
         textLines.push(args.footer);
     }

package/dist/server/email-template.js.map

@@ -1 +1 @@
-{"version":3,"file":"email-template.js","sourceRoot":"","sources":["../../src/server/email-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,MAAM,CAAC,MAAM,kCAAkC,GAAG,mBAAmB,CAAC;AAoDtE,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC;SACL,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,KAAyB;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,KAAyB;IAChD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAqB;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,UAAU,EAAE,IAAI,cAAc,CAAC;IAC3E,MAAM,OAAO,GACX,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC;QAClC,OAAO,kCAAkC,EAAE,CAAC;IAE9C,wEAAwE;IACxE,kCAAkC;IAClC,MAAM,KAAK,GAAG,KAAK,IAAI,SAAS,CAAC;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5C,MAAM,SAAS,GAAG,KAAK,IAAI,SAAS,CAAC;IAErC,yEAAyE;IACzE,2EAA2E;IAC3E,yEAAyE;IACzE,mCAAmC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAErC,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU;SACnC,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,iFAAiF,CAAC,MAAM,CAC3F;SACA,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS;QAClC,CAAC,CAAC;yFACmF,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;;;;uBAIlG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,sNAAsN,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;;;;KAIpS;QACD,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG;QACtB,CAAC,CAAC;;;sDAGgD,KAAK;uBACpC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gMACiJ,KAAK;gBACrL,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;;;;;KAKrC;QACD,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM;QAC5B,CAAC,CAAC,iFAAiF,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;QAChH,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,eAAe,GAAG;;;;kCAIQ,UAAU,CAAC,OAAO,CAAC,UAAU,UAAU,CAAC,SAAS,CAAC;+HAC2C,UAAU,CAAC,SAAS,CAAC;;;yBAG3H,CAAC;IAExB,MAAM,IAAI,GAAG;;;;;;;aAOF,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;;;;mBAKlB,SAAS;;;;;QAKpB,UAAU,CAAC,SAAS,CAAC;;;;;;;;kBAQX,eAAe;;oBAEb,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;kBAE1B,cAAc;kBACd,QAAQ;kBACR,IAAI,CAAC,SAAS,EAAE,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;kBAC9D,OAAO;kBACP,IAAI,CAAC,SAAS,EAAE,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;kBAC9D,UAAU;;;;;;;;QAQpB,CAAC;IAEP,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAChC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;QAC/D,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACrC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QACrD,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,SAAS,KAAK,WAAW,EAAE,CAAC;QAC9C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACrC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC;SACL,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC;SAC7B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,mDAAmD,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AACxF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,GAAW;IAClD,OAAO,YAAY,UAAU,CAAC,GAAG,CAAC,uDAAuD,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC;AACnH,CAAC","sourcesContent":["/**\n * Reusable dark-themed HTML email template.\n *\n * Email clients have limited CSS support, so everything is inlined and layout\n * uses tables for Outlook compatibility. The design mirrors the app's dark UI:\n * near-black card on neutral background, Inter typography with safe fallbacks.\n *\n * Default is monochrome (white CTA on dark). Pass `brandColor` to tint the\n * CTA button and inline links — Clips, for example, passes its purple.\n *\n * Usage:\n *   const { html, text } = renderEmail({\n *     preheader: \"…\",\n *     heading: \"You're invited to join Acme\",\n *     paragraphs: [\"Alice invited you to join…\"],\n *     cta: { label: \"Accept invite\", url: \"https://…\" },\n *     footer: \"If you weren't expecting this, ignore this email.\",\n *   });\n */\n\nimport { getAppName } from \"./app-name.js\";\n\nexport const AGENT_NATIVE_EMAIL_LOGO_CONTENT_ID = \"agent-native-logo\";\n\nexport interface EmailCta {\n  label: string;\n  url: string;\n}\n\nexport interface EmailLinkBlock {\n  intro: string;\n  url: string;\n  placement?: \"before-cta\" | \"after-cta\";\n}\n\nexport interface RenderEmailArgs {\n  /** Short preview text shown by email clients next to the subject. */\n  preheader?: string;\n  /** Large headline at the top of the card. */\n  heading: string;\n  /** Body paragraphs rendered after the heading. Plain strings — escaped. */\n  paragraphs: string[];\n  /** Primary call-to-action rendered as a real button. */\n  cta?: EmailCta;\n  /** A treated, copyable URL shown before or after the CTA. */\n  linkBlock?: EmailLinkBlock;\n  /**\n   * Optional trusted HTML injected above the CTA — e.g. a template-owned video\n   * thumbnail with a play badge. Injected verbatim, so only pass markup built\n   * by app/template code (never raw user input), and escape any dynamic values.\n   */\n  heroHtml?: string;\n  /** Small muted text under the CTA (e.g. expiry note). */\n  footer?: string;\n  /** Optional app name shown beside the framework logo. */\n  brandName?: string;\n  /**\n   * Optional absolute `https://` logo URL shown in the brand header. When a\n   * valid URL is provided it replaces the default embedded Agent Native logo;\n   * anything else (missing, relative, non-https) falls back to that logo.\n   */\n  brandLogoUrl?: string;\n  /**\n   * Optional brand hex color for the CTA button and inline links. Defaults to\n   * a monochrome near-white button with dark text.\n   */\n  brandColor?: string;\n}\n\nexport interface RenderedEmail {\n  html: string;\n  text: string;\n}\n\nfunction escapeHtml(s: string): string {\n  return s\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&#39;\");\n}\n\nfunction escapeAttr(s: string): string {\n  return escapeHtml(s);\n}\n\n/**\n * Only accept a strict `#rrggbb` hex color for `brandColor`. Anything else\n * could inject CSS into the inline `style` attribute (`red; background:url(…)`).\n */\nfunction sanitizeHexColor(input: string | undefined): string | undefined {\n  if (!input) return undefined;\n  return /^#[0-9a-fA-F]{6}$/.test(input) ? input : undefined;\n}\n\n/**\n * Only accept an absolute `https://` URL for the brand logo. Email clients drop\n * relative and mixed-content images, and an unvalidated string in `src` is an\n * injection surface — so anything else falls back to the embedded logo.\n */\nfunction sanitizeLogoUrl(input: string | undefined): string | undefined {\n  if (!input) return undefined;\n  try {\n    return new URL(input).protocol === \"https:\" ? input : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nexport function renderEmail(args: RenderEmailArgs): RenderedEmail {\n  const preheader = args.preheader || \"\";\n  const brand = sanitizeHexColor(args.brandColor);\n  const brandName = args.brandName?.trim() || getAppName() || \"Agent Native\";\n  const logoSrc =\n    sanitizeLogoUrl(args.brandLogoUrl) ??\n    `cid:${AGENT_NATIVE_EMAIL_LOGO_CONTENT_ID}`;\n\n  // Monochrome default: near-white button with dark text. Brand override:\n  // colored button with white text.\n  const ctaBg = brand ?? \"#fafafa\";\n  const ctaFg = brand ? \"#ffffff\" : \"#0a0a0c\";\n  const linkColor = brand ?? \"#a1a1aa\";\n\n  // Trusted markup supplied by the caller (template code, not user input),\n  // injected as-is so a template can own app-specific previews (e.g. a video\n  // thumbnail with a play badge). Callers are responsible for escaping any\n  // dynamic values they interpolate.\n  const heroHtml = args.heroHtml ?? \"\";\n\n  const paragraphsHtml = args.paragraphs\n    .map(\n      (p) =>\n        `<p style=\"margin:0 0 16px 0; font-size:16px; line-height:1.6; color:#d4d4d8;\">${p}</p>`,\n    )\n    .join(\"\");\n\n  const linkBlockHtml = args.linkBlock\n    ? `\n      <p style=\"margin:24px 0 12px 0; font-size:15px; line-height:1.6; color:#d4d4d8;\">${escapeHtml(args.linkBlock.intro)}</p>\n      <table role=\"presentation\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"100%\" style=\"margin:0; border:1px solid #3f3f46; border-radius:10px; background:#0a0a0c;\">\n        <tr>\n          <td style=\"padding:14px 16px;\">\n            <a href=\"${escapeAttr(args.linkBlock.url)}\" style=\"display:block; color:#d4d4d8; font-family:'SFMono-Regular', Consolas, 'Liberation Mono', monospace; font-size:13px; line-height:1.5; text-decoration:none; word-break:break-all; overflow-wrap:anywhere;\">${escapeHtml(args.linkBlock.url)}</a>\n          </td>\n        </tr>\n      </table>\n    `\n    : \"\";\n\n  const ctaHtml = args.cta\n    ? `\n      <table role=\"presentation\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" style=\"margin:24px 0 0 0;\">\n        <tr>\n          <td style=\"border-radius:10px; background:${ctaBg};\">\n            <a href=\"${escapeAttr(args.cta.url)}\"\n               style=\"display:inline-block; padding:14px 26px; font-family:'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; font-size:15px; font-weight:600; color:${ctaFg}; text-decoration:none; border-radius:10px;\">\n              ${escapeHtml(args.cta.label)}\n            </a>\n          </td>\n        </tr>\n      </table>\n    `\n    : \"\";\n\n  const footerHtml = args.footer\n    ? `<p style=\"margin:28px 0 0 0; font-size:13px; line-height:1.5; color:#71717a;\">${escapeHtml(args.footer)}</p>`\n    : \"\";\n\n  const brandHeaderHtml = `\n                <table role=\"presentation\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"100%\" style=\"margin:0 0 28px 0; padding:0 0 24px 0; border-bottom:1px solid #27272a;\">\n                  <tr>\n                    <td align=\"center\">\n                      <img src=\"${escapeAttr(logoSrc)}\" alt=\"${escapeAttr(brandName)}\" width=\"28\" height=\"28\" style=\"display:inline-block; vertical-align:middle; width:28px; height:28px; margin:0 8px 0 0; border:0;\" />\n                      <span style=\"font-size:18px; line-height:28px; font-weight:600; color:#fafafa; vertical-align:middle;\">${escapeHtml(brandName)}</span>\n                    </td>\n                  </tr>\n                </table>`;\n\n  const html = `<!DOCTYPE html>\n<html lang=\"en\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n    <meta name=\"color-scheme\" content=\"dark light\" />\n    <meta name=\"supported-color-schemes\" content=\"dark light\" />\n    <title>${escapeHtml(args.heading)}</title>\n    <style>\n      @media (prefers-color-scheme: light) {\n        .bg-outer { background-color: #0a0a0c !important; }\n      }\n      a { color: ${linkColor}; }\n    </style>\n  </head>\n  <body style=\"margin:0; padding:0; background-color:#0a0a0c; font-family:'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; -webkit-font-smoothing:antialiased;\">\n    <div style=\"display:none; max-height:0; overflow:hidden; opacity:0; color:transparent;\">\n      ${escapeHtml(preheader)}\n    </div>\n    <table role=\"presentation\" class=\"bg-outer\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"100%\" style=\"background-color:#0a0a0c; padding:40px 16px;\">\n      <tr>\n        <td align=\"center\">\n          <table role=\"presentation\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"100%\" style=\"max-width:560px;\">\n            <tr>\n              <td style=\"background-color:#141417; border:1px solid #27272a; border-radius:16px; padding:36px 36px 32px 36px;\">\n                ${brandHeaderHtml}\n                <h1 style=\"margin:0 0 20px 0; font-size:24px; line-height:1.3; font-weight:600; color:#fafafa; letter-spacing:-0.02em;\">\n                  ${escapeHtml(args.heading)}\n                </h1>\n                ${paragraphsHtml}\n                ${heroHtml}\n                ${args.linkBlock?.placement !== \"after-cta\" ? linkBlockHtml : \"\"}\n                ${ctaHtml}\n                ${args.linkBlock?.placement === \"after-cta\" ? linkBlockHtml : \"\"}\n                ${footerHtml}\n              </td>\n            </tr>\n          </table>\n        </td>\n      </tr>\n    </table>\n  </body>\n</html>`;\n\n  const textLines: string[] = [];\n  textLines.push(args.heading);\n  textLines.push(\"\");\n  for (const p of args.paragraphs) {\n    textLines.push(stripTags(p));\n    textLines.push(\"\");\n  }\n  if (args.linkBlock && args.linkBlock.placement !== \"after-cta\") {\n    textLines.push(args.linkBlock.intro);\n    textLines.push(args.linkBlock.url);\n    textLines.push(\"\");\n  }\n  if (args.cta) {\n    textLines.push(`${args.cta.label}: ${args.cta.url}`);\n    textLines.push(\"\");\n  }\n  if (args.linkBlock?.placement === \"after-cta\") {\n    textLines.push(args.linkBlock.intro);\n    textLines.push(args.linkBlock.url);\n    textLines.push(\"\");\n  }\n  if (args.footer) {\n    textLines.push(args.footer);\n  }\n\n  return { html, text: textLines.join(\"\\n\").trim() };\n}\n\nfunction stripTags(s: string): string {\n  return s\n    .replace(/<br\\s*\\/?>/gi, \"\\n\")\n    .replace(/<[^>]+>/g, \"\")\n    .replace(/&nbsp;/g, \" \")\n    .replace(/&amp;/g, \"&\")\n    .replace(/&lt;/g, \"<\")\n    .replace(/&gt;/g, \">\")\n    .replace(/&quot;/g, '\"')\n    .replace(/&#39;/g, \"'\")\n    .trim();\n}\n\n/**\n * Build an inline `<strong>` tag with consistent styling for use inside\n * paragraph strings passed to `renderEmail`. Escapes the content.\n */\nexport function emailStrong(text: string): string {\n  return `<strong style=\"color:#fafafa; font-weight:600;\">${escapeHtml(text)}</strong>`;\n}\n\n/**\n * Build a labelled inline link for paragraph strings passed to `renderEmail`.\n * Use this instead of rendering raw URLs in the visible email body.\n */\nexport function emailLink(label: string, url: string): string {\n  return `<a href=\"${escapeAttr(url)}\" style=\"color:#a1a1aa; text-decoration:underline;\">${escapeHtml(label)}</a>`;\n}\n"]}
+{"version":3,"file":"email-template.js","sourceRoot":"","sources":["../../src/server/email-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,MAAM,CAAC,MAAM,kCAAkC,GAAG,mBAAmB,CAAC;AAwDtE,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC;SACL,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,KAAyB;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,KAAyB;IAChD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAqB;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,UAAU,EAAE,IAAI,cAAc,CAAC;IAC3E,MAAM,OAAO,GACX,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC;QAClC,OAAO,kCAAkC,EAAE,CAAC;IAE9C,wEAAwE;IACxE,kCAAkC;IAClC,MAAM,KAAK,GAAG,KAAK,IAAI,SAAS,CAAC;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5C,MAAM,SAAS,GAAG,KAAK,IAAI,SAAS,CAAC;IAErC,yEAAyE;IACzE,2EAA2E;IAC3E,yEAAyE;IACzE,mCAAmC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAErC,MAAM,gBAAgB,GAAG,CAAC,UAAgC,EAAU,EAAE,CACpE,CAAC,UAAU,IAAI,EAAE,CAAC;SACf,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,iFAAiF,CAAC,MAAM,CAC3F;SACA,IAAI,CAAC,EAAE,CAAC,CAAC;IAEd,MAAM,cAAc,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,qBAAqB,GAAG,IAAI,CAAC,iBAAiB,EAAE,MAAM;QAC1D,CAAC,CAAC,mCAAmC,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ;QACrF,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS;QAClC,CAAC,CAAC;yFACmF,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;;;;uBAIlG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,sNAAsN,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;;;;KAIpS;QACD,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,aAAa,GAAG,CACpB,GAAa,EACb,UAAkB,EAClB,KAAa,EACb,MAAc,EACN,EAAE,CAAC;sDACuC,UAAU,YAAY,MAAM;uBAC3D,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;gMACsJ,KAAK;gBACrL,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;;gBAErB,CAAC;IAEf,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY;QACxC,CAAC,CAAC,sCAAsC,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,CAAC,EAAE;QACrH,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG;QACtB,CAAC,CAAC;;cAEQ,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,gBAAgB;;;KAGtE;QACD,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM;QAC5B,CAAC,CAAC,iFAAiF,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;QAChH,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,eAAe,GAAG;;;;kCAIQ,UAAU,CAAC,OAAO,CAAC,UAAU,UAAU,CAAC,SAAS,CAAC;+HAC2C,UAAU,CAAC,SAAS,CAAC;;;yBAG3H,CAAC;IAExB,MAAM,IAAI,GAAG;;;;;;;aAOF,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;;;;mBAKlB,SAAS;;;;;QAKpB,UAAU,CAAC,SAAS,CAAC;;;;;;;;kBAQX,eAAe;;oBAEb,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;kBAE1B,cAAc;kBACd,QAAQ;kBACR,IAAI,CAAC,SAAS,EAAE,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;kBAC9D,OAAO;kBACP,IAAI,CAAC,SAAS,EAAE,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;kBAC9D,qBAAqB;kBACrB,UAAU;;;;;;;;QAQpB,CAAC;IAEP,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAChC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;QAC/D,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACrC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QACrD,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,KAAK,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;QACvE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,SAAS,KAAK,WAAW,EAAE,CAAC;QAC9C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACrC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,iBAAiB,IAAI,EAAE,EAAE,CAAC;QAC7C,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC;SACL,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC;SAC7B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,mDAAmD,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AACxF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,GAAW;IAClD,OAAO,YAAY,UAAU,CAAC,GAAG,CAAC,uDAAuD,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC;AACnH,CAAC","sourcesContent":["/**\n * Reusable dark-themed HTML email template.\n *\n * Email clients have limited CSS support, so everything is inlined and layout\n * uses tables for Outlook compatibility. The design mirrors the app's dark UI:\n * near-black card on neutral background, Inter typography with safe fallbacks.\n *\n * Default is monochrome (white CTA on dark). Pass `brandColor` to tint the\n * CTA button and inline links — Clips, for example, passes its purple.\n *\n * Usage:\n *   const { html, text } = renderEmail({\n *     preheader: \"…\",\n *     heading: \"You're invited to join Acme\",\n *     paragraphs: [\"Alice invited you to join…\"],\n *     cta: { label: \"Accept invite\", url: \"https://…\" },\n *     footer: \"If you weren't expecting this, ignore this email.\",\n *   });\n */\n\nimport { getAppName } from \"./app-name.js\";\n\nexport const AGENT_NATIVE_EMAIL_LOGO_CONTENT_ID = \"agent-native-logo\";\n\nexport interface EmailCta {\n  label: string;\n  url: string;\n}\n\nexport interface EmailLinkBlock {\n  intro: string;\n  url: string;\n  placement?: \"before-cta\" | \"after-cta\";\n}\n\nexport interface RenderEmailArgs {\n  /** Short preview text shown by email clients next to the subject. */\n  preheader?: string;\n  /** Large headline at the top of the card. */\n  heading: string;\n  /** Body paragraphs rendered after the heading. Plain strings — escaped. */\n  paragraphs: string[];\n  /** Primary call-to-action rendered as a real button. */\n  cta?: EmailCta;\n  /** Optional second button rendered beside the primary CTA, dark-filled. */\n  secondaryCta?: EmailCta;\n  /** A treated, copyable URL shown before or after the CTA. */\n  linkBlock?: EmailLinkBlock;\n  /**\n   * Optional trusted HTML injected above the CTA — e.g. a template-owned video\n   * thumbnail with a play badge. Injected verbatim, so only pass markup built\n   * by app/template code (never raw user input), and escape any dynamic values.\n   */\n  heroHtml?: string;\n  /** Body paragraphs rendered after the CTA and link block. Escaped-by-caller. */\n  closingParagraphs?: string[];\n  /** Small muted text under the CTA (e.g. expiry note). */\n  footer?: string;\n  /** Optional app name shown beside the framework logo. */\n  brandName?: string;\n  /**\n   * Optional absolute `https://` logo URL shown in the brand header. When a\n   * valid URL is provided it replaces the default embedded Agent Native logo;\n   * anything else (missing, relative, non-https) falls back to that logo.\n   */\n  brandLogoUrl?: string;\n  /**\n   * Optional brand hex color for the CTA button and inline links. Defaults to\n   * a monochrome near-white button with dark text.\n   */\n  brandColor?: string;\n}\n\nexport interface RenderedEmail {\n  html: string;\n  text: string;\n}\n\nfunction escapeHtml(s: string): string {\n  return s\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&#39;\");\n}\n\nfunction escapeAttr(s: string): string {\n  return escapeHtml(s);\n}\n\n/**\n * Only accept a strict `#rrggbb` hex color for `brandColor`. Anything else\n * could inject CSS into the inline `style` attribute (`red; background:url(…)`).\n */\nfunction sanitizeHexColor(input: string | undefined): string | undefined {\n  if (!input) return undefined;\n  return /^#[0-9a-fA-F]{6}$/.test(input) ? input : undefined;\n}\n\n/**\n * Only accept an absolute `https://` URL for the brand logo. Email clients drop\n * relative and mixed-content images, and an unvalidated string in `src` is an\n * injection surface — so anything else falls back to the embedded logo.\n */\nfunction sanitizeLogoUrl(input: string | undefined): string | undefined {\n  if (!input) return undefined;\n  try {\n    return new URL(input).protocol === \"https:\" ? input : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nexport function renderEmail(args: RenderEmailArgs): RenderedEmail {\n  const preheader = args.preheader || \"\";\n  const brand = sanitizeHexColor(args.brandColor);\n  const brandName = args.brandName?.trim() || getAppName() || \"Agent Native\";\n  const logoSrc =\n    sanitizeLogoUrl(args.brandLogoUrl) ??\n    `cid:${AGENT_NATIVE_EMAIL_LOGO_CONTENT_ID}`;\n\n  // Monochrome default: near-white button with dark text. Brand override:\n  // colored button with white text.\n  const ctaBg = brand ?? \"#fafafa\";\n  const ctaFg = brand ? \"#ffffff\" : \"#0a0a0c\";\n  const linkColor = brand ?? \"#a1a1aa\";\n\n  // Trusted markup supplied by the caller (template code, not user input),\n  // injected as-is so a template can own app-specific previews (e.g. a video\n  // thumbnail with a play badge). Callers are responsible for escaping any\n  // dynamic values they interpolate.\n  const heroHtml = args.heroHtml ?? \"\";\n\n  const renderParagraphs = (paragraphs: string[] | undefined): string =>\n    (paragraphs ?? [])\n      .map(\n        (p) =>\n          `<p style=\"margin:0 0 16px 0; font-size:16px; line-height:1.6; color:#d4d4d8;\">${p}</p>`,\n      )\n      .join(\"\");\n\n  const paragraphsHtml = renderParagraphs(args.paragraphs);\n  const closingParagraphsHtml = args.closingParagraphs?.length\n    ? `<div style=\"margin:28px 0 0 0;\">${renderParagraphs(args.closingParagraphs)}</div>`\n    : \"\";\n\n  const linkBlockHtml = args.linkBlock\n    ? `\n      <p style=\"margin:24px 0 12px 0; font-size:15px; line-height:1.6; color:#d4d4d8;\">${escapeHtml(args.linkBlock.intro)}</p>\n      <table role=\"presentation\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"100%\" style=\"margin:0; border:1px solid #3f3f46; border-radius:10px; background:#0a0a0c;\">\n        <tr>\n          <td style=\"padding:14px 16px;\">\n            <a href=\"${escapeAttr(args.linkBlock.url)}\" style=\"display:block; color:#d4d4d8; font-family:'SFMono-Regular', Consolas, 'Liberation Mono', monospace; font-size:13px; line-height:1.5; text-decoration:none; word-break:break-all; overflow-wrap:anywhere;\">${escapeHtml(args.linkBlock.url)}</a>\n          </td>\n        </tr>\n      </table>\n    `\n    : \"\";\n\n  const ctaButtonCell = (\n    cta: EmailCta,\n    background: string,\n    color: string,\n    border: string,\n  ): string => `\n          <td style=\"border-radius:10px; background:${background}; border:${border};\">\n            <a href=\"${escapeAttr(cta.url)}\"\n               style=\"display:inline-block; padding:14px 26px; font-family:'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; font-size:15px; font-weight:600; color:${color}; text-decoration:none; border-radius:10px;\">\n              ${escapeHtml(cta.label)}\n            </a>\n          </td>`;\n\n  const secondaryCtaHtml = args.secondaryCta\n    ? `<td style=\"width:12px;\">&nbsp;</td>${ctaButtonCell(args.secondaryCta, \"#141417\", \"#fafafa\", \"1px solid #3f3f46\")}`\n    : \"\";\n\n  const ctaHtml = args.cta\n    ? `\n      <table role=\"presentation\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" style=\"margin:24px 0 0 0;\">\n        <tr>${ctaButtonCell(args.cta, ctaBg, ctaFg, \"0\")}${secondaryCtaHtml}\n        </tr>\n      </table>\n    `\n    : \"\";\n\n  const footerHtml = args.footer\n    ? `<p style=\"margin:28px 0 0 0; font-size:13px; line-height:1.5; color:#71717a;\">${escapeHtml(args.footer)}</p>`\n    : \"\";\n\n  const brandHeaderHtml = `\n                <table role=\"presentation\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"100%\" style=\"margin:0 0 28px 0; padding:0 0 24px 0; border-bottom:1px solid #27272a;\">\n                  <tr>\n                    <td align=\"center\">\n                      <img src=\"${escapeAttr(logoSrc)}\" alt=\"${escapeAttr(brandName)}\" width=\"28\" height=\"28\" style=\"display:inline-block; vertical-align:middle; width:28px; height:28px; margin:0 8px 0 0; border:0;\" />\n                      <span style=\"font-size:18px; line-height:28px; font-weight:600; color:#fafafa; vertical-align:middle;\">${escapeHtml(brandName)}</span>\n                    </td>\n                  </tr>\n                </table>`;\n\n  const html = `<!DOCTYPE html>\n<html lang=\"en\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n    <meta name=\"color-scheme\" content=\"dark light\" />\n    <meta name=\"supported-color-schemes\" content=\"dark light\" />\n    <title>${escapeHtml(args.heading)}</title>\n    <style>\n      @media (prefers-color-scheme: light) {\n        .bg-outer { background-color: #0a0a0c !important; }\n      }\n      a { color: ${linkColor}; }\n    </style>\n  </head>\n  <body style=\"margin:0; padding:0; background-color:#0a0a0c; font-family:'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; -webkit-font-smoothing:antialiased;\">\n    <div style=\"display:none; max-height:0; overflow:hidden; opacity:0; color:transparent;\">\n      ${escapeHtml(preheader)}\n    </div>\n    <table role=\"presentation\" class=\"bg-outer\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"100%\" style=\"background-color:#0a0a0c; padding:40px 16px;\">\n      <tr>\n        <td align=\"center\">\n          <table role=\"presentation\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"100%\" style=\"max-width:560px;\">\n            <tr>\n              <td style=\"background-color:#141417; border:1px solid #27272a; border-radius:16px; padding:36px 36px 32px 36px;\">\n                ${brandHeaderHtml}\n                <h1 style=\"margin:0 0 20px 0; font-size:24px; line-height:1.3; font-weight:600; color:#fafafa; letter-spacing:-0.02em;\">\n                  ${escapeHtml(args.heading)}\n                </h1>\n                ${paragraphsHtml}\n                ${heroHtml}\n                ${args.linkBlock?.placement !== \"after-cta\" ? linkBlockHtml : \"\"}\n                ${ctaHtml}\n                ${args.linkBlock?.placement === \"after-cta\" ? linkBlockHtml : \"\"}\n                ${closingParagraphsHtml}\n                ${footerHtml}\n              </td>\n            </tr>\n          </table>\n        </td>\n      </tr>\n    </table>\n  </body>\n</html>`;\n\n  const textLines: string[] = [];\n  textLines.push(args.heading);\n  textLines.push(\"\");\n  for (const p of args.paragraphs) {\n    textLines.push(stripTags(p));\n    textLines.push(\"\");\n  }\n  if (args.linkBlock && args.linkBlock.placement !== \"after-cta\") {\n    textLines.push(args.linkBlock.intro);\n    textLines.push(args.linkBlock.url);\n    textLines.push(\"\");\n  }\n  if (args.cta) {\n    textLines.push(`${args.cta.label}: ${args.cta.url}`);\n    textLines.push(\"\");\n  }\n  if (args.secondaryCta) {\n    textLines.push(`${args.secondaryCta.label}: ${args.secondaryCta.url}`);\n    textLines.push(\"\");\n  }\n  if (args.linkBlock?.placement === \"after-cta\") {\n    textLines.push(args.linkBlock.intro);\n    textLines.push(args.linkBlock.url);\n    textLines.push(\"\");\n  }\n  for (const p of args.closingParagraphs ?? []) {\n    textLines.push(stripTags(p));\n    textLines.push(\"\");\n  }\n  if (args.footer) {\n    textLines.push(args.footer);\n  }\n\n  return { html, text: textLines.join(\"\\n\").trim() };\n}\n\nfunction stripTags(s: string): string {\n  return s\n    .replace(/<br\\s*\\/?>/gi, \"\\n\")\n    .replace(/<[^>]+>/g, \"\")\n    .replace(/&nbsp;/g, \" \")\n    .replace(/&amp;/g, \"&\")\n    .replace(/&lt;/g, \"<\")\n    .replace(/&gt;/g, \">\")\n    .replace(/&quot;/g, '\"')\n    .replace(/&#39;/g, \"'\")\n    .trim();\n}\n\n/**\n * Build an inline `<strong>` tag with consistent styling for use inside\n * paragraph strings passed to `renderEmail`. Escapes the content.\n */\nexport function emailStrong(text: string): string {\n  return `<strong style=\"color:#fafafa; font-weight:600;\">${escapeHtml(text)}</strong>`;\n}\n\n/**\n * Build a labelled inline link for paragraph strings passed to `renderEmail`.\n * Use this instead of rendering raw URLs in the visible email body.\n */\nexport function emailLink(label: string, url: string): string {\n  return `<a href=\"${escapeAttr(url)}\" style=\"color:#a1a1aa; text-decoration:underline;\">${escapeHtml(label)}</a>`;\n}\n"]}

package/dist/server/google-oauth.d.ts

@@ -100,6 +100,7 @@ export interface OAuthStatePayload {
     returnUrl?: string;
     flowId?: string;
     signupAttribution?: Record<string, string | undefined>;
+    signupAnonymousId?: string;
 }
 /**
  * Options for the named-argument form of {@link encodeOAuthState}.
@@ -117,6 +118,7 @@ export interface EncodeOAuthStateOptions {
     returnUrl?: string;
     flowId?: string;
     signupAttribution?: Record<string, string | undefined>;
+    signupAnonymousId?: string;
 }
 /**
  * Encode OAuth state into a signed base64url string.
@@ -168,6 +170,7 @@ export declare function createOAuthSession(event: H3Event, email: string, opts:
         authUserId?: string;
         name?: string | null;
         attribution?: Record<string, string | undefined>;
+        signupAnonymousId?: string;
     };
 }): Promise<OAuthSessionResult>;
 /**

package/dist/server/google-oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"google-oauth.d.ts","sourceRoot":"","sources":["../../src/server/google-oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAKL,KAAK,OAAO,EACb,MAAM,IAAI,CAAC;AAkEZ;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAElD;AAED,2DAA2D;AAC3D,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEhD;AAqED,iFAAiF;AACjF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAGxE;AA2DD;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAgChD;AAED,uEAAuE;AACvE,wBAAgB,cAAc,IAAI,MAAM,CAMvC;AAED,sEAAsE;AACtE,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,SAAM,GAAG,MAAM,CAG5D;AAyDD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,OAAO,GACb,OAAO,CAqCT;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,WAAW,SAAmC,GAC7C,MAAM,GAAG,IAAI,CAMf;AAID,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACxD;AAgDD;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACxD;AAeD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,uBAAuB,GAAG,MAAM,CAAC;AACxE,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,OAAO,EACjB,UAAU,CAAC,EAAE,OAAO,EACpB,GAAG,CAAC,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,MAAM,GACd,MAAM,CAAC;AA4CV;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,WAAW,EAAE,MAAM,GAClB,iBAAiB,CAuCnB;AAID,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,OAAO,EACd,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,CAAC,CAQ3B;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IACJ,oBAAoB,EAAE,OAAO,CAAC;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE;QACZ,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;KAClD,CAAC;CACH,GACA,OAAO,CAAC,kBAAkB,CAAC,CAgD7B;AAID;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IACJ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACA,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC,CAoHpE;AAED;;;kEAGkE;AAClE,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAMxD;AAED,wBAAgB,wBAAwB,CACtC,OAAO,SAA4B,GAClC,QAAQ,CAKV"}
+{"version":3,"file":"google-oauth.d.ts","sourceRoot":"","sources":["../../src/server/google-oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAKL,KAAK,OAAO,EACb,MAAM,IAAI,CAAC;AAsEZ;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAElD;AAED,2DAA2D;AAC3D,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEhD;AAqED,iFAAiF;AACjF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAGxE;AA2DD;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAgChD;AAED,uEAAuE;AACvE,wBAAgB,cAAc,IAAI,MAAM,CAMvC;AAED,sEAAsE;AACtE,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,SAAM,GAAG,MAAM,CAG5D;AAyDD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,OAAO,GACb,OAAO,CAqCT;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,WAAW,SAAmC,GAC7C,MAAM,GAAG,IAAI,CAMf;AAID,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACvD,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAgDD;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACvD,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAmBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,uBAAuB,GAAG,MAAM,CAAC;AACxE,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,OAAO,EACjB,UAAU,CAAC,EAAE,OAAO,EACpB,GAAG,CAAC,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,MAAM,GACd,MAAM,CAAC;AAgDV;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,WAAW,EAAE,MAAM,GAClB,iBAAiB,CAwCnB;AAID,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,OAAO,EACd,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,CAAC,CAQ3B;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IACJ,oBAAoB,EAAE,OAAO,CAAC;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE;QACZ,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;QACjD,iBAAiB,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;CACH,GACA,OAAO,CAAC,kBAAkB,CAAC,CAoD7B;AAID;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IACJ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACA,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC,CAoHpE;AAED;;;kEAGkE;AAClE,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAMxD;AAED,wBAAgB,wBAAwB,CACtC,OAAO,SAA4B,GAClC,QAAQ,CAKV"}

package/dist/server/google-oauth.js

@@ -8,9 +8,10 @@
  */
 import crypto from "node:crypto";
 import { getHeader, getQuery, setResponseStatus, setResponseHeader, } from "h3";
+import { normalizeAnalyticsAnonymousId } from "../shared/analytics-anonymous-id.js";
 import { getAppBasePathFromViteEnv } from "./app-base-path.js";
 import { getAppName } from "./app-name.js";
-import { signupAttributionFromCookieHeader } from "./attribution.js";
+import { readAnalyticsAnonymousId, signupAttributionFromCookieHeader, } from "./attribution.js";
 import { addSession, getSession, getSessionMaxAge, hasLegacySessionForEmail, setFrameworkSessionCookie, } from "./auth.js";
 import { hasBetterAuthUserEmail, trackSignupEvent, } from "./better-auth-instance.js";
 import { getWorkspaceA2ADerivedSecret } from "./derived-secret.js";
@@ -426,6 +427,9 @@ function sanitizeStateAttribution(value) {
     }
     return Object.keys(out).length > 0 ? out : undefined;
 }
+function sanitizeStateAnonymousId(value) {
+    return normalizeAnalyticsAnonymousId(value);
+}
 export function encodeOAuthState(redirectUriOrOpts, owner, desktop, addAccount, app, returnUrl, flowId) {
     const opts = typeof redirectUriOrOpts === "string"
         ? {
@@ -459,6 +463,9 @@ export function encodeOAuthState(redirectUriOrOpts, owner, desktop, addAccount,
         payload.f = opts.flowId;
     if (opts.signupAttribution)
         payload.ft = opts.signupAttribution;
+    const signupAnonymousId = normalizeAnalyticsAnonymousId(opts.signupAnonymousId);
+    if (signupAnonymousId)
+        payload.ai = signupAnonymousId;
     const data = Buffer.from(JSON.stringify(payload)).toString("base64url");
     const sig = crypto
         .createHmac("sha256", getStateSigningKey())
@@ -502,6 +509,7 @@ export function decodeOAuthState(stateParam, fallbackUri) {
                 returnUrl: typeof parsed.r2 === "string" ? parsed.r2 : undefined,
                 flowId: parsed.f || undefined,
                 signupAttribution: sanitizeStateAttribution(parsed.ft),
+                signupAnonymousId: sanitizeStateAnonymousId(parsed.ai),
             };
         }
         catch { }
@@ -548,12 +556,15 @@ export async function createOAuthSession(event, email, opts) {
         if (shouldTrackSignup && opts.trackSignup) {
             const attribution = opts.trackSignup.attribution ??
                 signupAttributionFromCookieHeader(getHeader(event, "cookie") ?? null);
+            const anonymousId = opts.trackSignup.signupAnonymousId ??
+                readAnalyticsAnonymousId(getHeader(event, "cookie") ?? null);
             await trackSignupEvent({
                 authProvider: opts.trackSignup.authProvider,
                 authUserId: opts.trackSignup.authUserId,
                 email,
                 name: opts.trackSignup.name,
                 attribution,
+                anonymousId,
             });
         }
         // Desktop SSO: record this session in the home-dir broker file so