@agent-native/core 0.131.6 → 0.131.9

package/dist/client/frame-protocol.d.ts

@@ -88,6 +88,7 @@ export interface ChatRunningMessage {
     detail: {
         isRunning: boolean;
         tabId?: string;
+        reason?: "stopped" | "failed";
     };
 }
 export interface UserInfoMessage {

package/dist/client/frame-protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"frame-protocol.d.ts","sourceRoot":"","sources":["../../src/client/frame-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,+BAA+B,EAC/B,6BAA6B,EAC7B,0BAA0B,EAC1B,gBAAgB,EACjB,MAAM,iBAAiB,CAAC;AAMzB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,sBAAsB,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,4BAA4B,CAAC;IACnC,IAAI,EAAE,0BAA0B,CAAC;CAClC;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,+BAA+B,CAAC;IACtC,IAAI,EAAE,6BAA6B,CAAC;CACrC;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,8BAA8B,CAAC;IACrC,IAAI,EAAE,+BAA+B,CAAC;CACvC;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,yBAAyB,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,IAAI,EAAE;QAAE,IAAI,EAAE,KAAK,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;CACvD;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,2BAA2B,CAAC;IAClC,IAAI,EAAE;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,2BAA2B,CAAC;IAClC,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,+BAA+B,CAAC;IACtC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,8BAA8B,CAAC;IACrC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,+BAA+B,CAAC;CACvC;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,8BAA8B,CAAC;IACrC,IAAI,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,cAAc,CAAC;CACtB;AAED,MAAM,MAAM,iBAAiB,GACzB,eAAe,GACf,iBAAiB,GACjB,qBAAqB,GACrB,wBAAwB,GACxB,uBAAuB,GACvB,kBAAkB,GAClB,iBAAiB,GACjB,oBAAoB,GACpB,oBAAoB,GACpB,wBAAwB,GACxB,uBAAuB,GACvB,wBAAwB,GACxB,uBAAuB,GACvB,kBAAkB,CAAC;AAMvB,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,yBAAyB,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,yBAAyB,CAAC;IAChC,MAAM,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,sBAAsB,CAAC;IAC7B,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,0BAA0B,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,yBAAyB,CAAC;IAChC,IAAI,EAAE;QACJ,mFAAmF;QACnF,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;QACrB,4DAA4D;QAC5D,OAAO,CAAC,EAAE,KAAK,GAAG,WAAW,GAAG,MAAM,CAAC;QACvC,2DAA2D;QAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,gDAAgD;QAChD,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE;QACJ,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,OAAO,CAAC,EAAE;YAAE,SAAS,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACrE,CAAC;CACH;AAED,MAAM,MAAM,iBAAiB,GACzB,kBAAkB,GAClB,kBAAkB,GAClB,eAAe,GACf,mBAAmB,GACnB,kBAAkB,GAClB,uBAAuB,GACvB,iBAAiB,CAAC;AAMtB,MAAM,MAAM,YAAY,GAAG,iBAAiB,GAAG,iBAAiB,CAAC"}
+{"version":3,"file":"frame-protocol.d.ts","sourceRoot":"","sources":["../../src/client/frame-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,+BAA+B,EAC/B,6BAA6B,EAC7B,0BAA0B,EAC1B,gBAAgB,EACjB,MAAM,iBAAiB,CAAC;AAMzB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,sBAAsB,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,4BAA4B,CAAC;IACnC,IAAI,EAAE,0BAA0B,CAAC;CAClC;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,+BAA+B,CAAC;IACtC,IAAI,EAAE,6BAA6B,CAAC;CACrC;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,8BAA8B,CAAC;IACrC,IAAI,EAAE,+BAA+B,CAAC;CACvC;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,yBAAyB,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,IAAI,EAAE;QAAE,IAAI,EAAE,KAAK,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;CACvD;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,2BAA2B,CAAC;IAClC,IAAI,EAAE;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,2BAA2B,CAAC;IAClC,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,+BAA+B,CAAC;IACtC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,8BAA8B,CAAC;IACrC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,+BAA+B,CAAC;CACvC;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,8BAA8B,CAAC;IACrC,IAAI,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,cAAc,CAAC;CACtB;AAED,MAAM,MAAM,iBAAiB,GACzB,eAAe,GACf,iBAAiB,GACjB,qBAAqB,GACrB,wBAAwB,GACxB,uBAAuB,GACvB,kBAAkB,GAClB,iBAAiB,GACjB,oBAAoB,GACpB,oBAAoB,GACpB,wBAAwB,GACxB,uBAAuB,GACvB,wBAAwB,GACxB,uBAAuB,GACvB,kBAAkB,CAAC;AAMvB,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,yBAAyB,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,yBAAyB,CAAC;IAChC,MAAM,EAAE;QACN,SAAS,EAAE,OAAO,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;KAC/B,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,sBAAsB,CAAC;IAC7B,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,0BAA0B,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,yBAAyB,CAAC;IAChC,IAAI,EAAE;QACJ,mFAAmF;QACnF,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;QACrB,4DAA4D;QAC5D,OAAO,CAAC,EAAE,KAAK,GAAG,WAAW,GAAG,MAAM,CAAC;QACvC,2DAA2D;QAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,gDAAgD;QAChD,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE;QACJ,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,OAAO,CAAC,EAAE;YAAE,SAAS,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACrE,CAAC;CACH;AAED,MAAM,MAAM,iBAAiB,GACzB,kBAAkB,GAClB,kBAAkB,GAClB,eAAe,GACf,mBAAmB,GACnB,kBAAkB,GAClB,uBAAuB,GACvB,iBAAiB,CAAC;AAMtB,MAAM,MAAM,YAAY,GAAG,iBAAiB,GAAG,iBAAiB,CAAC"}

package/dist/client/frame-protocol.js.map

@@ -1 +1 @@
-{"version":3,"file":"frame-protocol.js","sourceRoot":"","sources":["../../src/client/frame-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG","sourcesContent":["/**\n * Frame Protocol — typed message definitions for frame communication.\n *\n * Any frame implementation (local dev frame, Builder.io cloud, Electron)\n * must support these message types. Communication happens via postMessage\n * between the app iframe and the parent frame.\n */\n\nimport type {\n  AgentChatContextMutationOptions,\n  AgentChatContextRemoveOptions,\n  AgentChatContextSetOptions,\n  AgentChatMessage,\n} from \"./agent-chat.js\";\n\n// ---------------------------------------------------------------------------\n// Messages FROM app TO frame\n// ---------------------------------------------------------------------------\n\nexport interface AppReadyMessage {\n  type: \"agentNative.appReady\";\n}\n\nexport interface SubmitChatMessage {\n  type: \"agentNative.submitChat\";\n  data: AgentChatMessage;\n}\n\nexport interface SetChatContextMessage {\n  type: \"agentNative.setChatContext\";\n  data: AgentChatContextSetOptions;\n}\n\nexport interface RemoveChatContextMessage {\n  type: \"agentNative.removeChatContext\";\n  data: AgentChatContextRemoveOptions;\n}\n\nexport interface ClearChatContextMessage {\n  type: \"agentNative.clearChatContext\";\n  data: AgentChatContextMutationOptions;\n}\n\nexport interface GetUserInfoMessage {\n  type: \"agentNative.getUserInfo\";\n}\n\nexport interface SetEnvVarsMessage {\n  type: \"agentNative.setEnvVars\";\n  data: { vars: Array<{ key: string; value: string }> };\n}\n\nexport interface DevModeChangeMessage {\n  type: \"agentNative.devModeChange\";\n  data: { isDevMode: boolean };\n}\n\nexport interface ToggleSidebarMessage {\n  type: \"agentNative.toggleSidebar\";\n  data?: { open?: boolean };\n}\n\nexport interface EnterStyleEditingMessage {\n  type: \"agentNative.enterStyleEditing\";\n  data: { selector: string };\n}\n\nexport interface EnterTextEditingMessage {\n  type: \"agentNative.enterTextEditing\";\n  data: { selector: string };\n}\n\nexport interface ExitSelectionModeMessage {\n  type: \"agentNative.exitSelectionMode\";\n}\n\n/**\n * Sent both ways: the app announces it has entered/exited presentation mode\n * (so the frame can hide its chrome), and an outer frame can push the app\n * into presentation mode (so the app's sidebar hides).\n */\nexport interface PresentationModeMessage {\n  type: \"agentNative.presentationMode\";\n  data: { active: boolean };\n}\n\nexport interface DesignCloseMessage {\n  type: \"design:close\";\n}\n\nexport type AppToFrameMessage =\n  | AppReadyMessage\n  | SubmitChatMessage\n  | SetChatContextMessage\n  | RemoveChatContextMessage\n  | ClearChatContextMessage\n  | GetUserInfoMessage\n  | SetEnvVarsMessage\n  | DevModeChangeMessage\n  | ToggleSidebarMessage\n  | EnterStyleEditingMessage\n  | EnterTextEditingMessage\n  | ExitSelectionModeMessage\n  | PresentationModeMessage\n  | DesignCloseMessage;\n\n// ---------------------------------------------------------------------------\n// Messages FROM frame TO app\n// ---------------------------------------------------------------------------\n\nexport interface FrameOriginMessage {\n  type: \"agentNative.frameOrigin\";\n  origin: string;\n}\n\nexport interface ChatRunningMessage {\n  type: \"agentNative.chatRunning\";\n  detail: { isRunning: boolean; tabId?: string };\n}\n\nexport interface UserInfoMessage {\n  type: \"agentNative.userInfo\";\n  data: { name?: string; email?: string };\n}\n\nexport interface CodeCompleteMessage {\n  type: \"agentNative.codeComplete\";\n  tabId: string;\n  success: boolean;\n}\n\nexport interface SidebarModeMessage {\n  type: \"agentNative.sidebarMode\";\n  data: {\n    /** \"code\" hides the app's sidebar (frame controls it); \"app\" defers to the app. */\n    mode: \"code\" | \"app\";\n    /** When mode === \"app\", which panel the app should show. */\n    appMode?: \"cli\" | \"resources\" | \"chat\";\n    /** Frame-controlled sidebar width to sync into the app. */\n    width?: number;\n    /** Whether the app's sidebar should be open. */\n    open?: boolean;\n  };\n}\n\nexport interface DesignInitMessage {\n  type: \"design:init\";\n  data: {\n    previewUrl: string;\n    themeVars?: Record<string, string>;\n    context?: { projectId?: string; branchId?: string; orgId?: string };\n  };\n}\n\nexport type FrameToAppMessage =\n  | FrameOriginMessage\n  | ChatRunningMessage\n  | UserInfoMessage\n  | CodeCompleteMessage\n  | SidebarModeMessage\n  | PresentationModeMessage\n  | DesignInitMessage;\n\n// ---------------------------------------------------------------------------\n// All message types\n// ---------------------------------------------------------------------------\n\nexport type FrameMessage = AppToFrameMessage | FrameToAppMessage;\n"]}
+{"version":3,"file":"frame-protocol.js","sourceRoot":"","sources":["../../src/client/frame-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG","sourcesContent":["/**\n * Frame Protocol — typed message definitions for frame communication.\n *\n * Any frame implementation (local dev frame, Builder.io cloud, Electron)\n * must support these message types. Communication happens via postMessage\n * between the app iframe and the parent frame.\n */\n\nimport type {\n  AgentChatContextMutationOptions,\n  AgentChatContextRemoveOptions,\n  AgentChatContextSetOptions,\n  AgentChatMessage,\n} from \"./agent-chat.js\";\n\n// ---------------------------------------------------------------------------\n// Messages FROM app TO frame\n// ---------------------------------------------------------------------------\n\nexport interface AppReadyMessage {\n  type: \"agentNative.appReady\";\n}\n\nexport interface SubmitChatMessage {\n  type: \"agentNative.submitChat\";\n  data: AgentChatMessage;\n}\n\nexport interface SetChatContextMessage {\n  type: \"agentNative.setChatContext\";\n  data: AgentChatContextSetOptions;\n}\n\nexport interface RemoveChatContextMessage {\n  type: \"agentNative.removeChatContext\";\n  data: AgentChatContextRemoveOptions;\n}\n\nexport interface ClearChatContextMessage {\n  type: \"agentNative.clearChatContext\";\n  data: AgentChatContextMutationOptions;\n}\n\nexport interface GetUserInfoMessage {\n  type: \"agentNative.getUserInfo\";\n}\n\nexport interface SetEnvVarsMessage {\n  type: \"agentNative.setEnvVars\";\n  data: { vars: Array<{ key: string; value: string }> };\n}\n\nexport interface DevModeChangeMessage {\n  type: \"agentNative.devModeChange\";\n  data: { isDevMode: boolean };\n}\n\nexport interface ToggleSidebarMessage {\n  type: \"agentNative.toggleSidebar\";\n  data?: { open?: boolean };\n}\n\nexport interface EnterStyleEditingMessage {\n  type: \"agentNative.enterStyleEditing\";\n  data: { selector: string };\n}\n\nexport interface EnterTextEditingMessage {\n  type: \"agentNative.enterTextEditing\";\n  data: { selector: string };\n}\n\nexport interface ExitSelectionModeMessage {\n  type: \"agentNative.exitSelectionMode\";\n}\n\n/**\n * Sent both ways: the app announces it has entered/exited presentation mode\n * (so the frame can hide its chrome), and an outer frame can push the app\n * into presentation mode (so the app's sidebar hides).\n */\nexport interface PresentationModeMessage {\n  type: \"agentNative.presentationMode\";\n  data: { active: boolean };\n}\n\nexport interface DesignCloseMessage {\n  type: \"design:close\";\n}\n\nexport type AppToFrameMessage =\n  | AppReadyMessage\n  | SubmitChatMessage\n  | SetChatContextMessage\n  | RemoveChatContextMessage\n  | ClearChatContextMessage\n  | GetUserInfoMessage\n  | SetEnvVarsMessage\n  | DevModeChangeMessage\n  | ToggleSidebarMessage\n  | EnterStyleEditingMessage\n  | EnterTextEditingMessage\n  | ExitSelectionModeMessage\n  | PresentationModeMessage\n  | DesignCloseMessage;\n\n// ---------------------------------------------------------------------------\n// Messages FROM frame TO app\n// ---------------------------------------------------------------------------\n\nexport interface FrameOriginMessage {\n  type: \"agentNative.frameOrigin\";\n  origin: string;\n}\n\nexport interface ChatRunningMessage {\n  type: \"agentNative.chatRunning\";\n  detail: {\n    isRunning: boolean;\n    tabId?: string;\n    reason?: \"stopped\" | \"failed\";\n  };\n}\n\nexport interface UserInfoMessage {\n  type: \"agentNative.userInfo\";\n  data: { name?: string; email?: string };\n}\n\nexport interface CodeCompleteMessage {\n  type: \"agentNative.codeComplete\";\n  tabId: string;\n  success: boolean;\n}\n\nexport interface SidebarModeMessage {\n  type: \"agentNative.sidebarMode\";\n  data: {\n    /** \"code\" hides the app's sidebar (frame controls it); \"app\" defers to the app. */\n    mode: \"code\" | \"app\";\n    /** When mode === \"app\", which panel the app should show. */\n    appMode?: \"cli\" | \"resources\" | \"chat\";\n    /** Frame-controlled sidebar width to sync into the app. */\n    width?: number;\n    /** Whether the app's sidebar should be open. */\n    open?: boolean;\n  };\n}\n\nexport interface DesignInitMessage {\n  type: \"design:init\";\n  data: {\n    previewUrl: string;\n    themeVars?: Record<string, string>;\n    context?: { projectId?: string; branchId?: string; orgId?: string };\n  };\n}\n\nexport type FrameToAppMessage =\n  | FrameOriginMessage\n  | ChatRunningMessage\n  | UserInfoMessage\n  | CodeCompleteMessage\n  | SidebarModeMessage\n  | PresentationModeMessage\n  | DesignInitMessage;\n\n// ---------------------------------------------------------------------------\n// All message types\n// ---------------------------------------------------------------------------\n\nexport type FrameMessage = AppToFrameMessage | FrameToAppMessage;\n"]}

package/dist/collab/routes.d.ts

@@ -26,8 +26,8 @@ export declare const getCollabState: import("h3").EventHandlerWithFetch<import("
  * Body: { update: string (base64), requestSource?: string }
  */
 export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/collab/struct-routes.d.ts

@@ -13,8 +13,8 @@
  * Body: { json: any, fieldName?: string, type?: "map"|"array", requestSource?: string }
  */
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/file-upload/actions/upload-image.d.ts

@@ -17,12 +17,12 @@ declare const _default: import("../../action.js").ActionDefinition<{
     id?: undefined;
     provider?: undefined;
 } | {
+    error?: undefined;
     configured?: undefined;
     connectPath?: undefined;
     url: string;
     id: string;
     provider: string;
-    error?: undefined;
 }>;
 export default _default;
 //# sourceMappingURL=upload-image.d.ts.map

package/dist/guards/no-env-credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"no-env-credentials.d.ts","sourceRoot":"","sources":["../../src/guards/no-env-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAQH,OAAO,KAAK,EAAgB,WAAW,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AA4G9E,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,GAAG,WAAW,CAgFzE"}
+{"version":3,"file":"no-env-credentials.d.ts","sourceRoot":"","sources":["../../src/guards/no-env-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAQH,OAAO,KAAK,EAAgB,WAAW,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AA8G9E,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,GAAG,WAAW,CAgFzE"}

package/dist/guards/no-env-credentials.js

@@ -57,6 +57,8 @@ const ALLOWLIST_EXACT = new Set([
     "PORT",
     "HOST",
     "SECRETS_ENCRYPTION_KEY",
+    "WORKSPACE_SECRETS_ENCRYPTION_KEY",
+    "WORKSPACE_SECRETS_ENCRYPTION_KEY_PREVIOUS",
 ]);
 const ALLOWLIST_PREFIX = [
     "npm_",

package/dist/guards/no-env-credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"no-env-credentials.js","sourceRoot":"","sources":["../../src/guards/no-env-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,QAAQ,EACR,IAAI,GACL,MAAM,iBAAiB,CAAC;AAGzB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,cAAc;IACd,qBAAqB;IACrB,UAAU;IACV,IAAI;IACJ,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,cAAc;IACd,WAAW;IACX,0BAA0B;IAC1B,oBAAoB;IACpB,iBAAiB;IACjB,kBAAkB;IAClB,sBAAsB;IACtB,qBAAqB;IACrB,0BAA0B;IAC1B,8BAA8B;IAC9B,aAAa;IACb,YAAY;IACZ,cAAc;IACd,MAAM;IACN,MAAM;IACN,wBAAwB;CACzB,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG;IACvB,MAAM;IACN,eAAe;IACf,QAAQ;IACR,UAAU;IACV,SAAS;IACT,KAAK;CACN,CAAC;AAEF;;;oDAGoD;AACpD,MAAM,sBAAsB,GAAG;IAC7B,kBAAkB;IAClB,kBAAkB;IAClB,YAAY;CACb,CAAC;AAEF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAErD,MAAM,cAAc,GAAG,2CAA2C,CAAC;AACnE,MAAM,uBAAuB,GAAG,+CAA+C,CAAC;AAEhF,MAAM,cAAc,GAClB,0EAA0E,CAAC;AAE7E,MAAM,sBAAsB,GAC1B,wDAAwD,CAAC;AAE3D,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,eAAe,CAAC,KAAe,EAAE,OAAe;IACvD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAe,EACf,OAAe,EACf,GAAW,EACX,GAAW;IAEX,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC;QACjD,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAClC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,yBAAyB,EAAE,CAAC;IAErE,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,GAAG,EAAE,QAAQ,GAAG,+CAA+C;aAChE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,GAAG,EAAE,0DAA0D;aAChE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAyB;IAC1D,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IACzB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC3D,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAEjC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC;YAAE,SAAS;QAErE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEnC,cAAc,CAAC,SAAS,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC;YACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;YACrC,IACE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBACvB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBACxB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EACxB,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,gBAAgB,CAAC,GAAG,CAAC;gBAAE,SAAS;YACpC,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC9D,IAAI,OAAO,CAAC,EAAE;oBAAE,SAAS;gBACzB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,GAAG;oBACT,IAAI;oBACJ,OAAO,EAAE,eAAe,GAAG,qBAAqB,OAAO,CAAC,GAAG,EAAE;iBAC9D,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,GAAG;gBACT,IAAI;gBACJ,OAAO,EAAE,eAAe,GAAG,gJAAgJ;aAC5K,CAAC,CAAC;QACL,CAAC;QAED,sBAAsB,CAAC,SAAS,GAAG,CAAC,CAAC;QACrC,OAAO,CAAC,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5D,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC;YACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;YACrC,IACE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBACvB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBACxB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EACxB,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;gBACtE,IAAI,OAAO,CAAC,EAAE;oBAAE,SAAS;gBACzB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,GAAG;oBACT,IAAI;oBACJ,OAAO,EAAE,2CAA2C,OAAO,CAAC,GAAG,EAAE;iBAClE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,GAAG;gBACT,IAAI;gBACJ,OAAO,EAAE,iFAAiF;aAC3F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC;AAClD,CAAC","sourcesContent":["/**\n * scanEnvCredentials — ported from `scripts/guard-no-env-credentials.mjs`.\n *\n * User credentials are per-user (or per-org) data. They MUST live in SQL,\n * scoped by `userEmail` / `orgId`, never in `process.env` — a deployment's\n * env vars are shared by every signed-in user. This guard flags any\n * `process.env.<KEY>` / `process.env[\"KEY\"]` read whose key is not on the\n * deploy-level allowlist (`DATABASE_URL`, `BETTER_AUTH_SECRET`, etc.), plus\n * any dynamic `process.env[key]` read (the key is only known at runtime, so\n * it can never be allowlisted safely).\n *\n * Conditional guard — per report 005's V1 guard set table, this is \"the big\n * one\": the original only scans a curated set of monorepo subtrees\n * (`packages/core/src/{credentials,secrets,vault,agent}/`, template\n * credential libs/routes) via `FORBIDDEN_PATH_PREDICATES` — none of which\n * exist in a generated app, so nothing would ever be scanned. This port\n * replaces that default-allow-outside-a-curated-subtree behavior with\n * default-deny across the whole app source tree: every `process.env.<KEY>`\n * read anywhere in app source must be on the deploy-var allowlist (kept\n * verbatim) or carry the opt-out marker. `HIGH_RISK_ENV_KEY_ALLOWLIST`,\n * `HIGH_RISK_PROCESS_ENV_ALLOWLIST`, and `HIGH_RISK_ENV_VARS_WRITE_ALLOWLIST`\n * — the three monorepo-file-keyed exception maps for specific template\n * platform-adapter files — are dropped entirely per the report; with\n * default-deny scanning already covering every `process.env` read\n * everywhere, the narrower `env-config.ts`/`core-routes.ts`-specific\n * registration checks those maps supported become redundant (any\n * high-risk key would already be caught by the general scan) and are\n * dropped along with them. The per-line `// guard:allow-env-credential`\n * marker remains the only escape hatch.\n *\n * Opt-out (same line, or the line immediately above):\n *   process.env.SOMETHING // guard:allow-env-credential — short reason\n */\n\nimport {\n  lineColForOffset,\n  readFileSafe,\n  relPosix,\n  walk,\n} from \"./scan-utils.js\";\nimport type { GuardFinding, GuardResult, GuardScanOptions } from \"./types.js\";\n\nconst ALLOWLIST_EXACT = new Set([\n  \"DATABASE_URL\",\n  \"DATABASE_AUTH_TOKEN\",\n  \"NODE_ENV\",\n  \"CI\",\n  \"DEBUG\",\n  \"NETLIFY\",\n  \"VERCEL\",\n  \"RENDER\",\n  \"FLY_APP_NAME\",\n  \"K_SERVICE\",\n  \"AWS_LAMBDA_FUNCTION_NAME\",\n  \"BETTER_AUTH_SECRET\",\n  \"BETTER_AUTH_URL\",\n  \"NOTION_CLIENT_ID\",\n  \"NOTION_CLIENT_SECRET\",\n  \"NOTION_STATE_SECRET\",\n  \"GOOGLE_SIGN_IN_CLIENT_ID\",\n  \"GOOGLE_SIGN_IN_CLIENT_SECRET\",\n  \"AUTH_SECRET\",\n  \"A2A_SECRET\",\n  \"ACCESS_TOKEN\",\n  \"PORT\",\n  \"HOST\",\n  \"SECRETS_ENCRYPTION_KEY\",\n]);\n\nconst ALLOWLIST_PREFIX = [\n  \"npm_\",\n  \"AGENT_NATIVE_\",\n  \"AGENT_\",\n  \"NETLIFY_\",\n  \"VERCEL_\",\n  \"CF_\",\n];\n\n/** Dev-only paths where ANTHROPIC_API_KEY etc. may legitimately be read\n * from env (local dev tooling, scripts, tests). Portable subset of the\n * original — the monorepo-only `packages/core/src/dev` predicate is\n * dropped (see report 005's V1 guard set table). */\nconst DEV_ONLY_PATH_PATTERNS = [\n  /\\.spec\\.[tj]sx?$/,\n  /\\.test\\.[tj]sx?$/,\n  /^scripts\\//,\n];\n\nconst DEV_ONLY_KEYS = new Set([\"ANTHROPIC_API_KEY\"]);\n\nconst OPT_OUT_MARKER = /\\/\\/\\s*guard:allow-env-credential\\b[^\\n]*/;\nconst OPT_OUT_REQUIRES_REASON = /\\/\\/\\s*guard:allow-env-credential\\s*[—-]\\s*\\S/;\n\nconst ENV_READ_REGEX =\n  /process\\.env(?:\\.([A-Z][A-Z0-9_]*)|\\[\\s*[\"']([A-Z][A-Z0-9_]*)[\"']\\s*\\])/g;\n\nconst ENV_DYNAMIC_READ_REGEX =\n  /process\\.env(?:\\?\\.)?\\s*\\[\\s*(?![\"'])([^\\]\\n]+?)\\s*\\]/g;\n\nfunction isAllowlistedKey(key: string): boolean {\n  if (ALLOWLIST_EXACT.has(key)) return true;\n  return ALLOWLIST_PREFIX.some((prefix) => key.startsWith(prefix));\n}\n\nfunction isDevOnlyPath(rel: string): boolean {\n  return DEV_ONLY_PATH_PATTERNS.some((re) => re.test(rel));\n}\n\nfunction hasOptOutOnLine(lines: string[], lineIdx: number): boolean {\n  const cur = lines[lineIdx] ?? \"\";\n  if (OPT_OUT_MARKER.test(cur)) return true;\n  const prev = lines[lineIdx - 1] ?? \"\";\n  if (/^\\s*\\/\\//.test(prev) && OPT_OUT_MARKER.test(prev)) return true;\n  return false;\n}\n\nfunction optOutOnLineIsValid(\n  lines: string[],\n  lineIdx: number,\n  key: string,\n  rel: string,\n): { ok: boolean; why?: string } {\n  const cur = lines[lineIdx] ?? \"\";\n  const prev = lines[lineIdx - 1] ?? \"\";\n  const candidate = OPT_OUT_REQUIRES_REASON.test(cur)\n    ? cur\n    : OPT_OUT_REQUIRES_REASON.test(prev)\n      ? prev\n      : null;\n  if (!candidate) return { ok: false, why: \"missing or empty reason\" };\n\n  if (/dev-only\\b/i.test(candidate)) {\n    if (!DEV_ONLY_KEYS.has(key)) {\n      return {\n        ok: false,\n        why: `key \"${key}\" is not in the dev-only credential allowlist`,\n      };\n    }\n    if (!isDevOnlyPath(rel)) {\n      return {\n        ok: false,\n        why: \"dev-only opt-out used outside dev / scripts / test paths\",\n      };\n    }\n  }\n  return { ok: true };\n}\n\nexport function scanEnvCredentials(options: GuardScanOptions): GuardResult {\n  const { root } = options;\n  const findings: GuardFinding[] = [];\n\n  for (const file of walk(root)) {\n    if (!/\\.(ts|tsx|mts|cts|js|mjs|cjs)$/.test(file)) continue;\n    if (file.endsWith(\".d.ts\")) continue;\n    const rel = relPosix(root, file);\n\n    const contents = readFileSafe(file);\n    if (contents === null || !contents.includes(\"process.env\")) continue;\n\n    const lines = contents.split(\"\\n\");\n\n    ENV_READ_REGEX.lastIndex = 0;\n    let m: RegExpExecArray | null;\n    while ((m = ENV_READ_REGEX.exec(contents)) !== null) {\n      const key = m[1] ?? m[2];\n      if (!key) continue;\n      const { line } = lineColForOffset(contents, m.index);\n      const lineIdx = line - 1;\n      const lineText = lines[lineIdx] ?? \"\";\n      const trimmed = lineText.trimStart();\n      if (\n        trimmed.startsWith(\"*\") ||\n        trimmed.startsWith(\"//\") ||\n        trimmed.startsWith(\"/*\")\n      ) {\n        continue;\n      }\n      if (isAllowlistedKey(key)) continue;\n      if (hasOptOutOnLine(lines, lineIdx)) {\n        const verdict = optOutOnLineIsValid(lines, lineIdx, key, rel);\n        if (verdict.ok) continue;\n        findings.push({\n          file: rel,\n          line,\n          message: `process.env.${key} opt-out invalid: ${verdict.why}`,\n        });\n        continue;\n      }\n      findings.push({\n        file: rel,\n        line,\n        message: `process.env.${key} read — not a deploy-level allowlisted key. User credentials must be read via resolveCredential(key, { userEmail, orgId }), never process.env.`,\n      });\n    }\n\n    ENV_DYNAMIC_READ_REGEX.lastIndex = 0;\n    while ((m = ENV_DYNAMIC_READ_REGEX.exec(contents)) !== null) {\n      const { line } = lineColForOffset(contents, m.index);\n      const lineIdx = line - 1;\n      const lineText = lines[lineIdx] ?? \"\";\n      const trimmed = lineText.trimStart();\n      if (\n        trimmed.startsWith(\"*\") ||\n        trimmed.startsWith(\"//\") ||\n        trimmed.startsWith(\"/*\")\n      ) {\n        continue;\n      }\n      if (hasOptOutOnLine(lines, lineIdx)) {\n        const verdict = optOutOnLineIsValid(lines, lineIdx, \"<dynamic>\", rel);\n        if (verdict.ok) continue;\n        findings.push({\n          file: rel,\n          line,\n          message: `process.env[<dynamic>] opt-out invalid: ${verdict.why}`,\n        });\n        continue;\n      }\n      findings.push({\n        file: rel,\n        line,\n        message: `process.env[<dynamic key>] read — dynamic keys can never be allowlisted safely.`,\n      });\n    }\n  }\n\n  return { name: \"no-env-credentials\", findings };\n}\n"]}
+{"version":3,"file":"no-env-credentials.js","sourceRoot":"","sources":["../../src/guards/no-env-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,QAAQ,EACR,IAAI,GACL,MAAM,iBAAiB,CAAC;AAGzB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,cAAc;IACd,qBAAqB;IACrB,UAAU;IACV,IAAI;IACJ,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,cAAc;IACd,WAAW;IACX,0BAA0B;IAC1B,oBAAoB;IACpB,iBAAiB;IACjB,kBAAkB;IAClB,sBAAsB;IACtB,qBAAqB;IACrB,0BAA0B;IAC1B,8BAA8B;IAC9B,aAAa;IACb,YAAY;IACZ,cAAc;IACd,MAAM;IACN,MAAM;IACN,wBAAwB;IACxB,kCAAkC;IAClC,2CAA2C;CAC5C,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG;IACvB,MAAM;IACN,eAAe;IACf,QAAQ;IACR,UAAU;IACV,SAAS;IACT,KAAK;CACN,CAAC;AAEF;;;oDAGoD;AACpD,MAAM,sBAAsB,GAAG;IAC7B,kBAAkB;IAClB,kBAAkB;IAClB,YAAY;CACb,CAAC;AAEF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAErD,MAAM,cAAc,GAAG,2CAA2C,CAAC;AACnE,MAAM,uBAAuB,GAAG,+CAA+C,CAAC;AAEhF,MAAM,cAAc,GAClB,0EAA0E,CAAC;AAE7E,MAAM,sBAAsB,GAC1B,wDAAwD,CAAC;AAE3D,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,eAAe,CAAC,KAAe,EAAE,OAAe;IACvD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAe,EACf,OAAe,EACf,GAAW,EACX,GAAW;IAEX,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC;QACjD,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAClC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,yBAAyB,EAAE,CAAC;IAErE,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,GAAG,EAAE,QAAQ,GAAG,+CAA+C;aAChE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,GAAG,EAAE,0DAA0D;aAChE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAyB;IAC1D,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IACzB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC3D,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAEjC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC;YAAE,SAAS;QAErE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEnC,cAAc,CAAC,SAAS,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC;YACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;YACrC,IACE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBACvB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBACxB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EACxB,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,gBAAgB,CAAC,GAAG,CAAC;gBAAE,SAAS;YACpC,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC9D,IAAI,OAAO,CAAC,EAAE;oBAAE,SAAS;gBACzB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,GAAG;oBACT,IAAI;oBACJ,OAAO,EAAE,eAAe,GAAG,qBAAqB,OAAO,CAAC,GAAG,EAAE;iBAC9D,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,GAAG;gBACT,IAAI;gBACJ,OAAO,EAAE,eAAe,GAAG,gJAAgJ;aAC5K,CAAC,CAAC;QACL,CAAC;QAED,sBAAsB,CAAC,SAAS,GAAG,CAAC,CAAC;QACrC,OAAO,CAAC,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5D,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC;YACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;YACrC,IACE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBACvB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBACxB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EACxB,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;gBACtE,IAAI,OAAO,CAAC,EAAE;oBAAE,SAAS;gBACzB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,GAAG;oBACT,IAAI;oBACJ,OAAO,EAAE,2CAA2C,OAAO,CAAC,GAAG,EAAE;iBAClE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,GAAG;gBACT,IAAI;gBACJ,OAAO,EAAE,iFAAiF;aAC3F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC;AAClD,CAAC","sourcesContent":["/**\n * scanEnvCredentials — ported from `scripts/guard-no-env-credentials.mjs`.\n *\n * User credentials are per-user (or per-org) data. They MUST live in SQL,\n * scoped by `userEmail` / `orgId`, never in `process.env` — a deployment's\n * env vars are shared by every signed-in user. This guard flags any\n * `process.env.<KEY>` / `process.env[\"KEY\"]` read whose key is not on the\n * deploy-level allowlist (`DATABASE_URL`, `BETTER_AUTH_SECRET`, etc.), plus\n * any dynamic `process.env[key]` read (the key is only known at runtime, so\n * it can never be allowlisted safely).\n *\n * Conditional guard — per report 005's V1 guard set table, this is \"the big\n * one\": the original only scans a curated set of monorepo subtrees\n * (`packages/core/src/{credentials,secrets,vault,agent}/`, template\n * credential libs/routes) via `FORBIDDEN_PATH_PREDICATES` — none of which\n * exist in a generated app, so nothing would ever be scanned. This port\n * replaces that default-allow-outside-a-curated-subtree behavior with\n * default-deny across the whole app source tree: every `process.env.<KEY>`\n * read anywhere in app source must be on the deploy-var allowlist (kept\n * verbatim) or carry the opt-out marker. `HIGH_RISK_ENV_KEY_ALLOWLIST`,\n * `HIGH_RISK_PROCESS_ENV_ALLOWLIST`, and `HIGH_RISK_ENV_VARS_WRITE_ALLOWLIST`\n * — the three monorepo-file-keyed exception maps for specific template\n * platform-adapter files — are dropped entirely per the report; with\n * default-deny scanning already covering every `process.env` read\n * everywhere, the narrower `env-config.ts`/`core-routes.ts`-specific\n * registration checks those maps supported become redundant (any\n * high-risk key would already be caught by the general scan) and are\n * dropped along with them. The per-line `// guard:allow-env-credential`\n * marker remains the only escape hatch.\n *\n * Opt-out (same line, or the line immediately above):\n *   process.env.SOMETHING // guard:allow-env-credential — short reason\n */\n\nimport {\n  lineColForOffset,\n  readFileSafe,\n  relPosix,\n  walk,\n} from \"./scan-utils.js\";\nimport type { GuardFinding, GuardResult, GuardScanOptions } from \"./types.js\";\n\nconst ALLOWLIST_EXACT = new Set([\n  \"DATABASE_URL\",\n  \"DATABASE_AUTH_TOKEN\",\n  \"NODE_ENV\",\n  \"CI\",\n  \"DEBUG\",\n  \"NETLIFY\",\n  \"VERCEL\",\n  \"RENDER\",\n  \"FLY_APP_NAME\",\n  \"K_SERVICE\",\n  \"AWS_LAMBDA_FUNCTION_NAME\",\n  \"BETTER_AUTH_SECRET\",\n  \"BETTER_AUTH_URL\",\n  \"NOTION_CLIENT_ID\",\n  \"NOTION_CLIENT_SECRET\",\n  \"NOTION_STATE_SECRET\",\n  \"GOOGLE_SIGN_IN_CLIENT_ID\",\n  \"GOOGLE_SIGN_IN_CLIENT_SECRET\",\n  \"AUTH_SECRET\",\n  \"A2A_SECRET\",\n  \"ACCESS_TOKEN\",\n  \"PORT\",\n  \"HOST\",\n  \"SECRETS_ENCRYPTION_KEY\",\n  \"WORKSPACE_SECRETS_ENCRYPTION_KEY\",\n  \"WORKSPACE_SECRETS_ENCRYPTION_KEY_PREVIOUS\",\n]);\n\nconst ALLOWLIST_PREFIX = [\n  \"npm_\",\n  \"AGENT_NATIVE_\",\n  \"AGENT_\",\n  \"NETLIFY_\",\n  \"VERCEL_\",\n  \"CF_\",\n];\n\n/** Dev-only paths where ANTHROPIC_API_KEY etc. may legitimately be read\n * from env (local dev tooling, scripts, tests). Portable subset of the\n * original — the monorepo-only `packages/core/src/dev` predicate is\n * dropped (see report 005's V1 guard set table). */\nconst DEV_ONLY_PATH_PATTERNS = [\n  /\\.spec\\.[tj]sx?$/,\n  /\\.test\\.[tj]sx?$/,\n  /^scripts\\//,\n];\n\nconst DEV_ONLY_KEYS = new Set([\"ANTHROPIC_API_KEY\"]);\n\nconst OPT_OUT_MARKER = /\\/\\/\\s*guard:allow-env-credential\\b[^\\n]*/;\nconst OPT_OUT_REQUIRES_REASON = /\\/\\/\\s*guard:allow-env-credential\\s*[—-]\\s*\\S/;\n\nconst ENV_READ_REGEX =\n  /process\\.env(?:\\.([A-Z][A-Z0-9_]*)|\\[\\s*[\"']([A-Z][A-Z0-9_]*)[\"']\\s*\\])/g;\n\nconst ENV_DYNAMIC_READ_REGEX =\n  /process\\.env(?:\\?\\.)?\\s*\\[\\s*(?![\"'])([^\\]\\n]+?)\\s*\\]/g;\n\nfunction isAllowlistedKey(key: string): boolean {\n  if (ALLOWLIST_EXACT.has(key)) return true;\n  return ALLOWLIST_PREFIX.some((prefix) => key.startsWith(prefix));\n}\n\nfunction isDevOnlyPath(rel: string): boolean {\n  return DEV_ONLY_PATH_PATTERNS.some((re) => re.test(rel));\n}\n\nfunction hasOptOutOnLine(lines: string[], lineIdx: number): boolean {\n  const cur = lines[lineIdx] ?? \"\";\n  if (OPT_OUT_MARKER.test(cur)) return true;\n  const prev = lines[lineIdx - 1] ?? \"\";\n  if (/^\\s*\\/\\//.test(prev) && OPT_OUT_MARKER.test(prev)) return true;\n  return false;\n}\n\nfunction optOutOnLineIsValid(\n  lines: string[],\n  lineIdx: number,\n  key: string,\n  rel: string,\n): { ok: boolean; why?: string } {\n  const cur = lines[lineIdx] ?? \"\";\n  const prev = lines[lineIdx - 1] ?? \"\";\n  const candidate = OPT_OUT_REQUIRES_REASON.test(cur)\n    ? cur\n    : OPT_OUT_REQUIRES_REASON.test(prev)\n      ? prev\n      : null;\n  if (!candidate) return { ok: false, why: \"missing or empty reason\" };\n\n  if (/dev-only\\b/i.test(candidate)) {\n    if (!DEV_ONLY_KEYS.has(key)) {\n      return {\n        ok: false,\n        why: `key \"${key}\" is not in the dev-only credential allowlist`,\n      };\n    }\n    if (!isDevOnlyPath(rel)) {\n      return {\n        ok: false,\n        why: \"dev-only opt-out used outside dev / scripts / test paths\",\n      };\n    }\n  }\n  return { ok: true };\n}\n\nexport function scanEnvCredentials(options: GuardScanOptions): GuardResult {\n  const { root } = options;\n  const findings: GuardFinding[] = [];\n\n  for (const file of walk(root)) {\n    if (!/\\.(ts|tsx|mts|cts|js|mjs|cjs)$/.test(file)) continue;\n    if (file.endsWith(\".d.ts\")) continue;\n    const rel = relPosix(root, file);\n\n    const contents = readFileSafe(file);\n    if (contents === null || !contents.includes(\"process.env\")) continue;\n\n    const lines = contents.split(\"\\n\");\n\n    ENV_READ_REGEX.lastIndex = 0;\n    let m: RegExpExecArray | null;\n    while ((m = ENV_READ_REGEX.exec(contents)) !== null) {\n      const key = m[1] ?? m[2];\n      if (!key) continue;\n      const { line } = lineColForOffset(contents, m.index);\n      const lineIdx = line - 1;\n      const lineText = lines[lineIdx] ?? \"\";\n      const trimmed = lineText.trimStart();\n      if (\n        trimmed.startsWith(\"*\") ||\n        trimmed.startsWith(\"//\") ||\n        trimmed.startsWith(\"/*\")\n      ) {\n        continue;\n      }\n      if (isAllowlistedKey(key)) continue;\n      if (hasOptOutOnLine(lines, lineIdx)) {\n        const verdict = optOutOnLineIsValid(lines, lineIdx, key, rel);\n        if (verdict.ok) continue;\n        findings.push({\n          file: rel,\n          line,\n          message: `process.env.${key} opt-out invalid: ${verdict.why}`,\n        });\n        continue;\n      }\n      findings.push({\n        file: rel,\n        line,\n        message: `process.env.${key} read — not a deploy-level allowlisted key. User credentials must be read via resolveCredential(key, { userEmail, orgId }), never process.env.`,\n      });\n    }\n\n    ENV_DYNAMIC_READ_REGEX.lastIndex = 0;\n    while ((m = ENV_DYNAMIC_READ_REGEX.exec(contents)) !== null) {\n      const { line } = lineColForOffset(contents, m.index);\n      const lineIdx = line - 1;\n      const lineText = lines[lineIdx] ?? \"\";\n      const trimmed = lineText.trimStart();\n      if (\n        trimmed.startsWith(\"*\") ||\n        trimmed.startsWith(\"//\") ||\n        trimmed.startsWith(\"/*\")\n      ) {\n        continue;\n      }\n      if (hasOptOutOnLine(lines, lineIdx)) {\n        const verdict = optOutOnLineIsValid(lines, lineIdx, \"<dynamic>\", rel);\n        if (verdict.ok) continue;\n        findings.push({\n          file: rel,\n          line,\n          message: `process.env[<dynamic>] opt-out invalid: ${verdict.why}`,\n        });\n        continue;\n      }\n      findings.push({\n        file: rel,\n        line,\n        message: `process.env[<dynamic key>] read — dynamic keys can never be allowlisted safely.`,\n      });\n    }\n  }\n\n  return { name: \"no-env-credentials\", findings };\n}\n"]}

package/dist/mcp/screen-memory-stdio.d.ts

@@ -137,13 +137,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -159,6 +159,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -174,7 +175,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -190,6 +190,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
     inputSchema: {
         type: string;
         properties: {
+            count?: undefined;
             minutes: {
                 type: string;
                 description: string;
@@ -199,7 +200,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -216,6 +216,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query: {
                 type: string;
                 description: string;
@@ -234,7 +235,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
             };
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;
@@ -250,6 +250,7 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
@@ -263,7 +264,6 @@ export declare function screenMemoryMcpToolDefinitions(): ({
                 description: string;
             };
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             includeMicrophone?: undefined;
@@ -314,13 +314,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt: {
                 type: string;
                 description: string;
@@ -349,13 +349,13 @@ export declare function screenMemoryMcpToolDefinitions(): ({
         type: string;
         required: string[];
         properties: {
+            count?: undefined;
             query?: undefined;
             minutes?: undefined;
             limit?: undefined;
             clientHint?: undefined;
             timestamp?: undefined;
             chapterId?: undefined;
-            count?: undefined;
             startAt?: undefined;
             endAt?: undefined;
             reason?: undefined;

package/dist/mcp/screen-memory-stdio.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"screen-memory-stdio.d.ts","sourceRoot":"","sources":["../../src/mcp/screen-memory-stdio.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAiBhF,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvE,SAAS,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvE,YAAY,EAAE,KAAK,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,QAAQ,EAAE,KAAK,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;IACH,qBAAqB,EAAE,KAAK,CAAC;QAC3B,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IACH,sBAAsB,CAAC,EACnB,MAAM,GACN;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IACvE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,UAAU,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;CAC7C;AAED,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,wBAAwB;IACvC,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;CACjD;AAWD,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,8DAA8D;IAC9D,WAAW,CAAC,EAAE,wBAAwB,CAAC;CACxC;AA8RD,4FAA4F;AAC5F,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,GACf,4BAA4B,GAAG,IAAI,CA2BrC;AAED,KAAK,eAAe,GAAG;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB,CAAC;AAsBF,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,4BAA4B,EACtC,KAAK,EAAE,MAAM,EACb,KAAK,SAAI,EACT,UAAU,CAAC,EAAE,MAAM,GAClB,KAAK,CACN,mBAAmB,GAAG;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,eAAe,EAAE,eAAe,EAAE,CAAC;CACpC,CACF,CA+HA;AAED,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,UAAU,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC;;;;;;;;;;;;;;kBAlhBlD,MAAM;sBACF,MAAM;mBACT,MAAM;;;;;;;;uBAWE,MAAM;qBAAe,MAAM;mBAAa,OAAO;;;;;;;EA2iBrE;AAqGD,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,wBAAgD;;;;QAVrD,IAAI,EAAE,OAAO;QACb,IAAI;QACJ,QAAQ;;EAeb;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,cAAc,GAAE,MAAM,EAAO,GAC5B,MAAM,EAAE,CAsCV;AAED,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,kBAAkB,EAAE,OAAO,GAC1B,OAAO,CAET;AAiCD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAW1D;AAgHD,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,KAAK,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,GACxD,IAAI,CAgBN;AAkDD,wBAAgB,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAgBlC,IAAI;gBACJ,WAAW;;;gBAGX,IAAI;gBACJ,WAAW;;;gBAGX,IAAI;gBACJ,WAAW;;;;;;;;;;;;;;;;;;;;;;gBAaX,IAAI;gBACJ,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;gBAcX,IAAI;gBACJ,WAAW;;;gBAIX,IAAI;gBACJ,WAAW;;;gBAGX,IAAI;gBACJ,WAAW;;;gBAGX,IAAI;gBACJ,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;gBAeX,IAAI;gBACJ,WAAW;;;gBAGX,IAAI;gBACJ,WAAW;;;;;;;;;;;;;;;;;;;;;;;gBAYA,IAAI;;;;;;;;;;;gBAIf,IAAI;gBACJ,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAcF,IAAI;gBAAY,WAAW;;;gBAC7B,IAAI;gBAAY,WAAW;;;gBAElC,IAAI;gBACJ,WAAW;;;gBAEQ,IAAI;;;gBACH,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;gBAWD,IAAI;;;;KAItC;AAED,wBAAsB,gCAAgC,CACpD,IAAI,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,CAAC,CAAC,EACpD,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,CAAC,UAAU,mFAavB;AAED,wBAAsB,uBAAuB,CAC3C,IAAI,GAAE,8BAAmC,GACxC,OAAO,CAAC,IAAI,CAAC,CAkaf"}
+{"version":3,"file":"screen-memory-stdio.d.ts","sourceRoot":"","sources":["../../src/mcp/screen-memory-stdio.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAiBhF,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvE,SAAS,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvE,YAAY,EAAE,KAAK,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,QAAQ,EAAE,KAAK,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;IACH,qBAAqB,EAAE,KAAK,CAAC;QAC3B,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IACH,sBAAsB,CAAC,EACnB,MAAM,GACN;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IACvE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,UAAU,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;CAC7C;AAED,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,wBAAwB;IACvC,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;CACjD;AAWD,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,8DAA8D;IAC9D,WAAW,CAAC,EAAE,wBAAwB,CAAC;CACxC;AA8RD,4FAA4F;AAC5F,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,GACf,4BAA4B,GAAG,IAAI,CA2BrC;AAED,KAAK,eAAe,GAAG;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB,CAAC;AAsBF,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,4BAA4B,EACtC,KAAK,EAAE,MAAM,EACb,KAAK,SAAI,EACT,UAAU,CAAC,EAAE,MAAM,GAClB,KAAK,CACN,mBAAmB,GAAG;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,eAAe,EAAE,eAAe,EAAE,CAAC;CACpC,CACF,CA+HA;AAED,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,UAAU,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC;;;;;;;;;;;;;;kBAlhBlD,MAAM;sBACF,MAAM;mBACT,MAAM;;;;;;;;uBAWE,MAAM;qBAAe,MAAM;mBAAa,OAAO;;;;;;;EA2iBrE;AAqGD,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,wBAAgD;;;;QAVrD,IAAI,EAAE,OAAO;QACb,IAAI;QACJ,QAAQ;;EAeb;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,cAAc,GAAE,MAAM,EAAO,GAC5B,MAAM,EAAE,CAsCV;AAED,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,kBAAkB,EAAE,OAAO,GAC1B,OAAO,CAET;AAiCD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAW1D;AAgHD,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,KAAK,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,GACxD,IAAI,CAgBN;AAkDD,wBAAgB,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAgBlC,IAAI;gBACJ,WAAW;;;gBAGX,IAAI;gBACJ,WAAW;;;gBAGX,IAAI;gBACJ,WAAW;;;;;;;;;;;;;;;;;;;;;;gBAaX,IAAI;gBACJ,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;gBAcX,IAAI;gBACJ,WAAW;;;gBAIX,IAAI;gBACJ,WAAW;;;gBAGX,IAAI;gBACJ,WAAW;;;gBAGX,IAAI;gBACJ,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;gBAeX,IAAI;gBACJ,WAAW;;;gBAGX,IAAI;gBACJ,WAAW;;;;;;;;;;;;;;;;;;;;;;gBAYA,IAAI;;;;;;;;;;;gBAIf,IAAI;gBACJ,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAcF,IAAI;gBAAY,WAAW;;;gBAC7B,IAAI;gBAAY,WAAW;;;gBAElC,IAAI;gBACJ,WAAW;;;gBAEQ,IAAI;;;gBACH,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;gBAWD,IAAI;;;;KAItC;AAED,wBAAsB,gCAAgC,CACpD,IAAI,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,CAAC,CAAC,EACpD,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,CAAC,UAAU,mFAavB;AAED,wBAAsB,uBAAuB,CAC3C,IAAI,GAAE,8BAAmC,GACxC,OAAO,CAAC,IAAI,CAAC,CAkaf"}

package/dist/notifications/routes.d.ts

@@ -13,22 +13,22 @@
 export declare function createNotificationsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<"" | import("./types.js").Notification[] | {
     count: number;
     updated?: undefined;
-    ok?: undefined;
     error?: undefined;
+    ok?: undefined;
 } | {
+    count?: undefined;
     updated: number;
-    ok?: undefined;
     error?: undefined;
-    count?: undefined;
+    ok?: undefined;
 } | {
+    count?: undefined;
     updated?: undefined;
     error: string;
     ok?: undefined;
-    count?: undefined;
 } | {
+    count?: undefined;
     updated?: undefined;
-    ok: boolean;
     error?: undefined;
-    count?: undefined;
+    ok: boolean;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/observability/routes.d.ts

@@ -41,16 +41,16 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
-    error?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
+    error?: undefined;
     ok?: undefined;
 } | {
-    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id: string;
+    error?: undefined;
     ok?: undefined;
 } | {
     summary?: undefined;
@@ -59,10 +59,10 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     error: any;
     ok?: undefined;
 } | {
-    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
+    error?: undefined;
     ok: boolean;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/scripts/call-agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"call-agent.d.ts","sourceRoot":"","sources":["../../src/scripts/call-agent.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AA8OpD,eAAO,MAAM,IAAI,EAAE,UAsDlB,CAAC;AAEF,wBAAsB,GAAG,CACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,CAAC,EAAE,gBAAgB,EAC1B,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,CA6kBjB;AAqPD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CASzE"}
+{"version":3,"file":"call-agent.d.ts","sourceRoot":"","sources":["../../src/scripts/call-agent.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AA8OpD,eAAO,MAAM,IAAI,EAAE,UAsDlB,CAAC;AAEF,wBAAsB,GAAG,CACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,CAAC,EAAE,gBAAgB,EAC1B,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,CA+kBjB;AAqPD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CASzE"}

package/dist/scripts/call-agent.js

@@ -353,10 +353,12 @@ export async function run(args, context, selfAppId) {
     const messageWithHint = taskId
         ? ""
         : `${message}${integrationSourceContextHint(sourceContext)}\n\n` +
-            `[Note: this request comes from another app via A2A. The caller cannot see your local UI, deck list, or navigation — only the literal text you put in your reply. ` +
+            `<a2a-caller-hint>\n` +
+            `This request comes from another app via A2A. The caller cannot see your local UI, deck list, or navigation — only the literal text you put in your reply. ` +
             `If you create or reference a deck/document/design/dashboard, include its FULLY-QUALIFIED URL (e.g. ${agent.url}/deck/<id>) in your reply, not a relative path. ` +
             `Use only artifact IDs and URL paths returned by successful actions — never invent slugs, IDs, or hosts. ` +
-            `Return a concise caller-ready synthesis rather than raw tool output or full transcripts; preserve source counts, IDs, short supporting quotes, and URLs needed to substantiate the answer.]`;
+            `Return a concise caller-ready synthesis rather than raw tool output or full transcripts; preserve source counts, IDs, short supporting quotes, and URLs needed to substantiate the answer.\n` +
+            `</a2a-caller-hint>`;
     const invocationId = randomUUID();
     const invocationStartedAt = Date.now();
     let invocationStatus = "error";