@agent-native/core 0.134.1 → 0.135.0

package/dist/server/activity-notifications.js

@@ -0,0 +1,103 @@
+/**
+ * Shared plumbing for collaboration emails (comments, replies, reactions,
+ * mentions).
+ *
+ * Two things every app was about to reimplement live here: resolving who
+ * should receive an activity email, and reporting delivery honestly. A
+ * workspace with no email provider is a *different* outcome from "nobody
+ * wanted this email" — collapsing both into an empty success is what let a
+ * dead notification toggle ship unnoticed.
+ */
+import { getUserSetting } from "../settings/user-settings.js";
+import { isEmailConfigured } from "./email.js";
+/** Default field read from an app's per-user preference blob. */
+const DEFAULT_PREFERENCE_FIELD = "emailNotifications";
+function normalizeEmail(value) {
+    return (value ?? "").trim().toLowerCase();
+}
+async function wantsActivityEmail(email, preferenceKey, preferenceField) {
+    const prefs = await getUserSetting(email, preferenceKey);
+    // A user who never opened settings has no stored blob; treat that as opted
+    // in rather than silently dropping their notifications.
+    return prefs?.[preferenceField] !== false;
+}
+/**
+ * Normalize, dedupe, drop the actor, and filter by each recipient's stored
+ * preference. Order follows first appearance in `candidates`.
+ */
+export async function resolveActivityRecipients({ candidates, actorEmail, preferenceKey, preferenceField = DEFAULT_PREFERENCE_FIELD, }) {
+    const actor = normalizeEmail(actorEmail);
+    const unique = new Set();
+    for (const candidate of candidates) {
+        const email = normalizeEmail(candidate);
+        if (!email || email === actor || !email.includes("@"))
+            continue;
+        unique.add(email);
+    }
+    const decisions = await Promise.all([...unique].map(async (email) => (await wantsActivityEmail(email, preferenceKey, preferenceField))
+        ? email
+        : null));
+    return decisions.filter((email) => email !== null);
+}
+/**
+ * Resolve recipients and deliver one email each. Returns a status that
+ * distinguishes "no email provider" from "nobody to email" from a real send.
+ */
+export async function notifyActivity({ send, logLabel, ...resolve }) {
+    if (!(await isEmailConfigured())) {
+        return { status: "email-not-configured", sent: [], failed: [] };
+    }
+    const recipients = await resolveActivityRecipients(resolve);
+    if (recipients.length === 0) {
+        return { status: "no-recipients", sent: [], failed: [] };
+    }
+    const sent = [];
+    const failed = [];
+    for (const to of recipients) {
+        try {
+            await send(to);
+            sent.push(to);
+        }
+        catch (error) {
+            failed.push({
+                email: to,
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    if (failed.length > 0) {
+        console.error(`${logLabel ?? "[activity-notifications]"} delivery failed for ${failed
+            .map((failure) => `${failure.email} (${failure.error})`)
+            .join(", ")}`);
+    }
+    // Every recipient failing is an outage, not a delivery. Callers that log or
+    // surface this must not see it as the same outcome as a successful send.
+    return {
+        status: sent.length === 0 ? "delivery-failed" : "delivered",
+        sent,
+        failed,
+    };
+}
+/**
+ * Run an activity notification without letting it fail the write that caused
+ * it. The comment/reaction is already persisted by the time notification runs;
+ * rejecting here makes the client roll back and retry, which duplicates the
+ * row. The error still surfaces — as a distinct `notification-error` status,
+ * never as a silent success.
+ */
+export async function runActivityNotification(logLabel, resolve) {
+    try {
+        return await resolve();
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        console.error(`${logLabel} could not be resolved: ${message}`);
+        return {
+            status: "notification-error",
+            error: message,
+            sent: [],
+            failed: [],
+        };
+    }
+}
+//# sourceMappingURL=activity-notifications.js.map

package/dist/server/activity-notifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-notifications.js","sourceRoot":"","sources":["../../src/server/activity-notifications.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAmB/C,iEAAiE;AACjE,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AAatD,SAAS,cAAc,CAAC,KAAgC;IACtD,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,KAAa,EACb,aAAqB,EACrB,eAAuB;IAEvB,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACzD,2EAA2E;IAC3E,wDAAwD;IACxD,OAAO,KAAK,EAAE,CAAC,eAAe,CAAC,KAAK,KAAK,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAC9C,UAAU,EACV,UAAU,EACV,aAAa,EACb,eAAe,GAAG,wBAAwB,GACX;IAC/B,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAChE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAC9B,CAAC,MAAM,kBAAkB,CAAC,KAAK,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;QAC/D,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,CACT,CACF,CAAC;IACF,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;AACtE,CAAC;AASD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EACnC,IAAI,EACJ,QAAQ,EACR,GAAG,OAAO,EACU;IACpB,IAAI,CAAC,CAAC,MAAM,iBAAiB,EAAE,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC3D,CAAC;IAED,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,EAAE;gBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CACX,GAAG,QAAQ,IAAI,0BAA0B,wBAAwB,MAAM;aACpE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,GAAG,CAAC;aACvD,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,WAAW;QAC3D,IAAI;QACJ,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAO3C,QAAgB,EAChB,OAAyB;IAEzB,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,CAAC,KAAK,CAAC,GAAG,QAAQ,2BAA2B,OAAO,EAAE,CAAC,CAAC;QAC/D,OAAO;YACL,MAAM,EAAE,oBAAoB;YAC5B,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["/**\n * Shared plumbing for collaboration emails (comments, replies, reactions,\n * mentions).\n *\n * Two things every app was about to reimplement live here: resolving who\n * should receive an activity email, and reporting delivery honestly. A\n * workspace with no email provider is a *different* outcome from \"nobody\n * wanted this email\" — collapsing both into an empty success is what let a\n * dead notification toggle ship unnoticed.\n */\n\nimport { getUserSetting } from \"../settings/user-settings.js\";\nimport { isEmailConfigured } from \"./email.js\";\n\nexport type ActivityDeliveryFailure = { email: string; error: string };\n\nexport type ActivityNotificationStatus =\n  | \"delivered\"\n  | \"delivery-failed\"\n  | \"email-not-configured\"\n  | \"no-recipients\"\n  | \"notification-error\";\n\nexport type ActivityNotificationResult = {\n  status: ActivityNotificationStatus;\n  sent: string[];\n  failed: ActivityDeliveryFailure[];\n  /** Set only on `notification-error`: why recipients could not be resolved. */\n  error?: string;\n};\n\n/** Default field read from an app's per-user preference blob. */\nconst DEFAULT_PREFERENCE_FIELD = \"emailNotifications\";\n\nexport interface ResolveActivityRecipientsInput {\n  /** Owner, thread participants, mentions — duplicates and blanks are fine. */\n  candidates: (string | null | undefined)[];\n  /** The person who caused the activity. Never emailed about their own action. */\n  actorEmail?: string | null;\n  /** App-owned user settings key, e.g. `clips-user-prefs`. */\n  preferenceKey: string;\n  /** Field inside that blob. Absent or non-`false` means opted in. */\n  preferenceField?: string;\n}\n\nfunction normalizeEmail(value: string | null | undefined): string {\n  return (value ?? \"\").trim().toLowerCase();\n}\n\nasync function wantsActivityEmail(\n  email: string,\n  preferenceKey: string,\n  preferenceField: string,\n): Promise<boolean> {\n  const prefs = await getUserSetting(email, preferenceKey);\n  // A user who never opened settings has no stored blob; treat that as opted\n  // in rather than silently dropping their notifications.\n  return prefs?.[preferenceField] !== false;\n}\n\n/**\n * Normalize, dedupe, drop the actor, and filter by each recipient's stored\n * preference. Order follows first appearance in `candidates`.\n */\nexport async function resolveActivityRecipients({\n  candidates,\n  actorEmail,\n  preferenceKey,\n  preferenceField = DEFAULT_PREFERENCE_FIELD,\n}: ResolveActivityRecipientsInput): Promise<string[]> {\n  const actor = normalizeEmail(actorEmail);\n  const unique = new Set<string>();\n  for (const candidate of candidates) {\n    const email = normalizeEmail(candidate);\n    if (!email || email === actor || !email.includes(\"@\")) continue;\n    unique.add(email);\n  }\n\n  const decisions = await Promise.all(\n    [...unique].map(async (email) =>\n      (await wantsActivityEmail(email, preferenceKey, preferenceField))\n        ? email\n        : null,\n    ),\n  );\n  return decisions.filter((email): email is string => email !== null);\n}\n\nexport interface NotifyActivityInput extends ResolveActivityRecipientsInput {\n  /** Sends one email. Throwing marks that recipient failed, not the batch. */\n  send: (to: string) => Promise<unknown>;\n  /** Prefix for the delivery-failure log line, e.g. `[slides]`. */\n  logLabel?: string;\n}\n\n/**\n * Resolve recipients and deliver one email each. Returns a status that\n * distinguishes \"no email provider\" from \"nobody to email\" from a real send.\n */\nexport async function notifyActivity({\n  send,\n  logLabel,\n  ...resolve\n}: NotifyActivityInput): Promise<ActivityNotificationResult> {\n  if (!(await isEmailConfigured())) {\n    return { status: \"email-not-configured\", sent: [], failed: [] };\n  }\n\n  const recipients = await resolveActivityRecipients(resolve);\n  if (recipients.length === 0) {\n    return { status: \"no-recipients\", sent: [], failed: [] };\n  }\n\n  const sent: string[] = [];\n  const failed: ActivityDeliveryFailure[] = [];\n  for (const to of recipients) {\n    try {\n      await send(to);\n      sent.push(to);\n    } catch (error) {\n      failed.push({\n        email: to,\n        error: error instanceof Error ? error.message : String(error),\n      });\n    }\n  }\n\n  if (failed.length > 0) {\n    console.error(\n      `${logLabel ?? \"[activity-notifications]\"} delivery failed for ${failed\n        .map((failure) => `${failure.email} (${failure.error})`)\n        .join(\", \")}`,\n    );\n  }\n\n  // Every recipient failing is an outage, not a delivery. Callers that log or\n  // surface this must not see it as the same outcome as a successful send.\n  return {\n    status: sent.length === 0 ? \"delivery-failed\" : \"delivered\",\n    sent,\n    failed,\n  };\n}\n\n/**\n * Run an activity notification without letting it fail the write that caused\n * it. The comment/reaction is already persisted by the time notification runs;\n * rejecting here makes the client roll back and retry, which duplicates the\n * row. The error still surfaces — as a distinct `notification-error` status,\n * never as a silent success.\n */\nexport async function runActivityNotification<\n  T extends {\n    status: string;\n    sent: string[];\n    failed: ActivityDeliveryFailure[];\n  },\n>(\n  logLabel: string,\n  resolve: () => Promise<T>,\n): Promise<T | ActivityNotificationResult> {\n  try {\n    return await resolve();\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    console.error(`${logLabel} could not be resolved: ${message}`);\n    return {\n      status: \"notification-error\",\n      error: message,\n      sent: [],\n      failed: [],\n    };\n  }\n}\n"]}

package/dist/server/agent-engine-api-key-route.d.ts

@@ -27,11 +27,11 @@ export declare function resolveAgentEngineApiKeyWriteTarget(event: H3Event, scop
 export declare function createAgentEngineApiKeyHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: any;
 } | {
-    error?: undefined;
     ok: boolean;
     key: string;
     baseUrlKey?: string;
     scope: AgentEngineApiKeyScope;
+    error?: undefined;
 }>>;
 export {};
 //# sourceMappingURL=agent-engine-api-key-route.d.ts.map

package/dist/server/app-name.d.ts

@@ -13,4 +13,22 @@
  *   5. `undefined` — caller should degrade gracefully
  */
 export declare function getAppName(): string | undefined;
+/**
+ * Resolve the app's slug — the machine-readable identifier used for the
+ * per-app transactional email sender (e.g. `clips@agent-native.com`).
+ *
+ * Only a first-party template name matched by package.json qualifies. A slug
+ * derived from an arbitrary `APP_NAME` must not mint a mailbox on the
+ * agent-native.com domain: a custom app would then send as
+ * `<its-name>@agent-native.com` and route replies to the Builder mailbox.
+ * Returns `undefined` for anything unrecognized, which leaves the deployment's
+ * configured sender in place.
+ */
+export declare function getAppSlug(): string | undefined;
+/**
+ * One-line description of the app, used to tailor transactional email bodies
+ * so recipients recognize which app they signed up for. Sourced from the
+ * first-party template metadata; `undefined` for unknown apps.
+ */
+export declare function getAppDescription(): string | undefined;
 //# sourceMappingURL=app-name.d.ts.map

package/dist/server/app-name.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-name.d.ts","sourceRoot":"","sources":["../../src/server/app-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA0BH,wBAAgB,UAAU,IAAI,MAAM,GAAG,SAAS,CAa/C"}
+{"version":3,"file":"app-name.d.ts","sourceRoot":"","sources":["../../src/server/app-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA0BH,wBAAgB,UAAU,IAAI,MAAM,GAAG,SAAS,CAa/C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,IAAI,MAAM,GAAG,SAAS,CAI/C;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,SAAS,CAOtD"}

package/dist/server/app-name.js

@@ -49,4 +49,35 @@ export function getAppName() {
     cachedFromPkg = name ?? undefined;
     return name;
 }
+/**
+ * Resolve the app's slug — the machine-readable identifier used for the
+ * per-app transactional email sender (e.g. `clips@agent-native.com`).
+ *
+ * Only a first-party template name matched by package.json qualifies. A slug
+ * derived from an arbitrary `APP_NAME` must not mint a mailbox on the
+ * agent-native.com domain: a custom app would then send as
+ * `<its-name>@agent-native.com` and route replies to the Builder mailbox.
+ * Returns `undefined` for anything unrecognized, which leaves the deployment's
+ * configured sender in place.
+ */
+export function getAppSlug() {
+    const pkg = readPkg();
+    if (!pkg?.name)
+        return undefined;
+    return TEMPLATES.find((t) => t.name === pkg.name)?.name;
+}
+/**
+ * One-line description of the app, used to tailor transactional email bodies
+ * so recipients recognize which app they signed up for. Sourced from the
+ * first-party template metadata; `undefined` for unknown apps.
+ */
+export function getAppDescription() {
+    const pkg = readPkg();
+    if (pkg?.name) {
+        const tmpl = TEMPLATES.find((t) => t.name === pkg.name);
+        if (tmpl)
+            return tmpl.hint;
+    }
+    return undefined;
+}
 //# sourceMappingURL=app-name.js.map

package/dist/server/app-name.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-name.js","sourceRoot":"","sources":["../../src/server/app-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,IAAI,aAAa,GAA8B,IAAI,CAAC;AAEpD,SAAS,OAAO;IACd,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC;SACL,KAAK,CAAC,SAAS,CAAC;SAChB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC3C,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;IACtD,IAAI,aAAa,KAAK,IAAI;QAAE,OAAO,aAAa,IAAI,SAAS,CAAC;IAC9D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,IAAI,IAAwB,CAAC;IAC7B,IAAI,GAAG,EAAE,WAAW,EAAE,CAAC;QACrB,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC;IACzB,CAAC;SAAM,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,CAAC;IACD,aAAa,GAAG,IAAI,IAAI,SAAS,CAAC;IAClC,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["/**\n * Resolve the user-facing name of this app — used in transactional emails,\n * page titles, and anywhere the framework needs to refer to \"this app\" by\n * name (e.g. \"John invited you to Acme on Forms\").\n *\n * Resolution order:\n *   1. `APP_NAME` env var — explicit override (recommended for prod)\n *   2. `displayName` from the app's package.json\n *   3. Titlecased `name` from package.json (only if it matches a known\n *      first-party template — on serverless runtimes `process.cwd()` may\n *      point at a bundler-generated package.json with a bogus name)\n *   4. First-party template label matched by package.json name\n *   5. `undefined` — caller should degrade gracefully\n */\n\nimport fs from \"node:fs\";\nimport path from \"node:path\";\n\nimport { TEMPLATES } from \"../cli/templates-meta.js\";\n\nlet cachedFromPkg: string | undefined | null = null;\n\nfunction readPkg(): { name?: string; displayName?: string } | null {\n  try {\n    const pkgPath = path.join(process.cwd(), \"package.json\");\n    return JSON.parse(fs.readFileSync(pkgPath, \"utf8\"));\n  } catch {\n    return null;\n  }\n}\n\nfunction titlecase(s: string): string {\n  return s\n    .split(/[-_\\s]+/)\n    .filter(Boolean)\n    .map((w) => w[0].toUpperCase() + w.slice(1))\n    .join(\" \");\n}\n\nexport function getAppName(): string | undefined {\n  if (process.env.APP_NAME) return process.env.APP_NAME;\n  if (cachedFromPkg !== null) return cachedFromPkg ?? undefined;\n  const pkg = readPkg();\n  let name: string | undefined;\n  if (pkg?.displayName) {\n    name = pkg.displayName;\n  } else if (pkg?.name) {\n    const tmpl = TEMPLATES.find((t) => t.name === pkg.name);\n    name = tmpl ? tmpl.label || titlecase(tmpl.name) : undefined;\n  }\n  cachedFromPkg = name ?? undefined;\n  return name;\n}\n"]}
+{"version":3,"file":"app-name.js","sourceRoot":"","sources":["../../src/server/app-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,IAAI,aAAa,GAA8B,IAAI,CAAC;AAEpD,SAAS,OAAO;IACd,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC;SACL,KAAK,CAAC,SAAS,CAAC;SAChB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC3C,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;IACtD,IAAI,aAAa,KAAK,IAAI;QAAE,OAAO,aAAa,IAAI,SAAS,CAAC;IAC9D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,IAAI,IAAwB,CAAC;IAC7B,IAAI,GAAG,EAAE,WAAW,EAAE,CAAC;QACrB,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC;IACzB,CAAC;SAAM,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,CAAC;IACD,aAAa,GAAG,IAAI,IAAI,SAAS,CAAC;IAClC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,IAAI,CAAC,GAAG,EAAE,IAAI;QAAE,OAAO,SAAS,CAAC;IACjC,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IAC7B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["/**\n * Resolve the user-facing name of this app — used in transactional emails,\n * page titles, and anywhere the framework needs to refer to \"this app\" by\n * name (e.g. \"John invited you to Acme on Forms\").\n *\n * Resolution order:\n *   1. `APP_NAME` env var — explicit override (recommended for prod)\n *   2. `displayName` from the app's package.json\n *   3. Titlecased `name` from package.json (only if it matches a known\n *      first-party template — on serverless runtimes `process.cwd()` may\n *      point at a bundler-generated package.json with a bogus name)\n *   4. First-party template label matched by package.json name\n *   5. `undefined` — caller should degrade gracefully\n */\n\nimport fs from \"node:fs\";\nimport path from \"node:path\";\n\nimport { TEMPLATES } from \"../cli/templates-meta.js\";\n\nlet cachedFromPkg: string | undefined | null = null;\n\nfunction readPkg(): { name?: string; displayName?: string } | null {\n  try {\n    const pkgPath = path.join(process.cwd(), \"package.json\");\n    return JSON.parse(fs.readFileSync(pkgPath, \"utf8\"));\n  } catch {\n    return null;\n  }\n}\n\nfunction titlecase(s: string): string {\n  return s\n    .split(/[-_\\s]+/)\n    .filter(Boolean)\n    .map((w) => w[0].toUpperCase() + w.slice(1))\n    .join(\" \");\n}\n\nexport function getAppName(): string | undefined {\n  if (process.env.APP_NAME) return process.env.APP_NAME;\n  if (cachedFromPkg !== null) return cachedFromPkg ?? undefined;\n  const pkg = readPkg();\n  let name: string | undefined;\n  if (pkg?.displayName) {\n    name = pkg.displayName;\n  } else if (pkg?.name) {\n    const tmpl = TEMPLATES.find((t) => t.name === pkg.name);\n    name = tmpl ? tmpl.label || titlecase(tmpl.name) : undefined;\n  }\n  cachedFromPkg = name ?? undefined;\n  return name;\n}\n\n/**\n * Resolve the app's slug — the machine-readable identifier used for the\n * per-app transactional email sender (e.g. `clips@agent-native.com`).\n *\n * Only a first-party template name matched by package.json qualifies. A slug\n * derived from an arbitrary `APP_NAME` must not mint a mailbox on the\n * agent-native.com domain: a custom app would then send as\n * `<its-name>@agent-native.com` and route replies to the Builder mailbox.\n * Returns `undefined` for anything unrecognized, which leaves the deployment's\n * configured sender in place.\n */\nexport function getAppSlug(): string | undefined {\n  const pkg = readPkg();\n  if (!pkg?.name) return undefined;\n  return TEMPLATES.find((t) => t.name === pkg.name)?.name;\n}\n\n/**\n * One-line description of the app, used to tailor transactional email bodies\n * so recipients recognize which app they signed up for. Sourced from the\n * first-party template metadata; `undefined` for unknown apps.\n */\nexport function getAppDescription(): string | undefined {\n  const pkg = readPkg();\n  if (pkg?.name) {\n    const tmpl = TEMPLATES.find((t) => t.name === pkg.name);\n    if (tmpl) return tmpl.hint;\n  }\n  return undefined;\n}\n"]}

package/dist/server/better-auth-instance.js

@@ -716,11 +716,11 @@ async function createBetterAuthInstance(config) {
                     process.env.APP_BASE_PATH ||
                     "").replace(/\/$/, "");
                 const resetUrl = `${appUrl}${appBasePath}/_agent-native/auth/reset?token=${encodeURIComponent(token)}`;
-                const { subject, html, text } = renderResetPasswordEmail({
+                const { subject, html, text, appSender } = renderResetPasswordEmail({
                     email: user.email,
                     resetUrl,
                 });
-                await sendEmail({ to: user.email, subject, html, text });
+                await sendEmail({ to: user.email, subject, html, text, appSender });
             },
         },
         emailVerification: {
@@ -741,11 +741,11 @@ async function createBetterAuthInstance(config) {
                 const verifyUrl = verifyBasePath
                     ? url.replace(/(\/\/[^/]+)(\/)/, `$1${verifyBasePath}$2`)
                     : url;
-                const { subject, html, text } = renderVerifySignupEmail({
+                const { subject, html, text, appSender } = renderVerifySignupEmail({
                     email: user.email,
                     verifyUrl,
                 });
-                await sendEmail({ to: user.email, subject, html, text });
+                await sendEmail({ to: user.email, subject, html, text, appSender });
             },
         },
         socialProviders,