@agent-native/core 0.14.8 → 0.15.1

package/dist/server/local-migration.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Migrate data owned by `local@localhost` to a real account.
+ *
+ * When a user starts an app in local mode and later signs in to create a real
+ * account, this function moves all of their existing data over to the new
+ * account so they don't lose anything.
+ *
+ * Scope of the migration:
+ *   - `application_state`: rows with `session_id = 'local'`
+ *   - `settings`: keys prefixed with `u:local@localhost:`
+ *   - `oauth_tokens`: rows with `owner = 'local@localhost'`
+ *   - Any template table that has an `owner_email` column: rows with
+ *     `owner_email = 'local@localhost'`
+ *
+ * The operation is a no-op if the target email is itself `local@localhost`,
+ * empty, or if there is nothing to migrate.
+ */
+export interface LocalMigrationResult {
+    /** Whether anything was actually migrated. */
+    migrated: boolean;
+    /** Per-table row counts that were updated. Omits tables with zero updates. */
+    tables: Record<string, number>;
+    /** Target email the data now belongs to. */
+    targetEmail: string;
+    /**
+     * Non-fatal per-step errors encountered during migration. One bad table
+     * no longer fails the whole upgrade — we migrate everything we can and
+     * report any steps that threw here so the UI can surface them.
+     */
+    errors?: Array<{
+        step: string;
+        message: string;
+    }>;
+}
+/**
+ * Migrate every piece of local-mode data to the given real account email.
+ * Safe to call multiple times — it only touches rows that are still attached
+ * to `local@localhost`.
+ */
+export declare function migrateLocalUserData(targetEmail: string): Promise<LocalMigrationResult>;
+//# sourceMappingURL=local-migration.d.ts.map

package/dist/server/local-migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-migration.d.ts","sourceRoot":"","sources":["../../src/server/local-migration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAQH,MAAM,WAAW,oBAAoB;IACnC,8CAA8C;IAC9C,QAAQ,EAAE,OAAO,CAAC;IAClB,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACnD;AAoLD;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,oBAAoB,CAAC,CAyD/B"}

package/dist/server/local-migration.js

@@ -0,0 +1,235 @@
+/**
+ * Migrate data owned by `local@localhost` to a real account.
+ *
+ * When a user starts an app in local mode and later signs in to create a real
+ * account, this function moves all of their existing data over to the new
+ * account so they don't lose anything.
+ *
+ * Scope of the migration:
+ *   - `application_state`: rows with `session_id = 'local'`
+ *   - `settings`: keys prefixed with `u:local@localhost:`
+ *   - `oauth_tokens`: rows with `owner = 'local@localhost'`
+ *   - Any template table that has an `owner_email` column: rows with
+ *     `owner_email = 'local@localhost'`
+ *
+ * The operation is a no-op if the target email is itself `local@localhost`,
+ * empty, or if there is nothing to migrate.
+ */
+import { getDbExec, isPostgres } from "../db/client.js";
+const LOCAL_EMAIL = "local@localhost";
+const LOCAL_SESSION_ID = "local";
+const OWNER_COLUMN = "owner_email";
+/**
+ * Error messages that indicate a missing/inaccessible table or column — the
+ * migration treats these as "feature not enabled" and skips silently.
+ */
+const SCHEMA_SKIP_ERR = /no such table|no such column|does not exist|undefined table|undefined column|relation .* does not exist|column .* does not exist|permission denied|is not a table|cannot update view|cannot change column in a view/i;
+function shouldSkipSchemaError(err) {
+    const message = err instanceof Error ? err.message : String(err);
+    return SCHEMA_SKIP_ERR.test(message);
+}
+/**
+ * Discover every table (not view) in `public` that has an `owner_email`
+ * column. Views and materialized views are excluded — they can't be updated
+ * directly and would 500 the migration.
+ */
+async function discoverOwnerEmailTables() {
+    const client = getDbExec();
+    if (isPostgres()) {
+        // Join against information_schema.tables to filter out views and
+        // materialized views (anything that isn't a plain BASE TABLE).
+        const { rows } = await client.execute({
+            sql: `SELECT c.table_name
+              FROM information_schema.columns c
+              JOIN information_schema.tables t
+                ON t.table_schema = c.table_schema
+               AND t.table_name = c.table_name
+             WHERE c.table_schema = 'public'
+               AND c.column_name = $1
+               AND t.table_type = 'BASE TABLE'`,
+            args: [OWNER_COLUMN],
+        });
+        return rows.map((r) => r.table_name ?? r[0]).filter(Boolean);
+    }
+    // SQLite path: iterate tables (type='table', not 'view') and inspect columns via PRAGMA
+    const tablesRes = await client.execute(`SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%'`);
+    const tables = tablesRes.rows
+        .map((r) => (r.name ?? r[0]))
+        .filter(Boolean);
+    const withOwner = [];
+    for (const table of tables) {
+        const escaped = table.replace(/"/g, '""');
+        const colsRes = await client.execute(`PRAGMA table_info("${escaped}")`);
+        const hasOwner = colsRes.rows.some((row) => (row.name ?? row[1]) === OWNER_COLUMN);
+        if (hasOwner)
+            withOwner.push(table);
+    }
+    return withOwner;
+}
+/** Replace `?` placeholders with `$1`, `$2`, … for Postgres. */
+function sqlWithParams(sql) {
+    if (!isPostgres())
+        return sql;
+    let i = 0;
+    return sql.replace(/\?/g, () => `$${++i}`);
+}
+/**
+ * Rename `settings` keys so a user's config carries over. Keys are prefixed
+ * with `u:<email>:` — moving from one email to another is a prefix swap.
+ *
+ * If a destination key already exists (unlikely but possible if the user had
+ * previously signed in with the same email) we leave the destination alone
+ * and drop the local row, so we never clobber real-account state.
+ */
+async function migrateSettings(targetEmail) {
+    const client = getDbExec();
+    const oldPrefix = `u:${LOCAL_EMAIL}:`;
+    const newPrefix = `u:${targetEmail}:`;
+    const { rows } = await client.execute({
+        sql: sqlWithParams(`SELECT key FROM settings WHERE key LIKE ? ESCAPE '\\'`),
+        args: [oldPrefix.replace(/([\\%_])/g, "\\$1") + "%"],
+    });
+    let updated = 0;
+    for (const row of rows) {
+        const oldKey = (row.key ?? row[0]);
+        if (!oldKey.startsWith(oldPrefix))
+            continue;
+        const newKey = newPrefix + oldKey.slice(oldPrefix.length);
+        // Skip if the destination already exists — don't overwrite real data.
+        const existsRes = await client.execute({
+            sql: sqlWithParams(`SELECT 1 FROM settings WHERE key = ?`),
+            args: [newKey],
+        });
+        if (existsRes.rows.length > 0) {
+            await client.execute({
+                sql: sqlWithParams(`DELETE FROM settings WHERE key = ?`),
+                args: [oldKey],
+            });
+            continue;
+        }
+        await client.execute({
+            sql: sqlWithParams(`UPDATE settings SET key = ? WHERE key = ?`),
+            args: [newKey, oldKey],
+        });
+        updated++;
+    }
+    return updated;
+}
+/**
+ * Move application_state rows from `session_id='local'` to the target email.
+ * Rows that already exist for the destination session are left alone.
+ */
+async function migrateApplicationState(targetEmail) {
+    const client = getDbExec();
+    // Only migrate keys that don't already exist under the destination session.
+    const { rows } = await client.execute({
+        sql: sqlWithParams(`SELECT key FROM application_state WHERE session_id = ?`),
+        args: [LOCAL_SESSION_ID],
+    });
+    let updated = 0;
+    for (const row of rows) {
+        const key = (row.key ?? row[0]);
+        const existsRes = await client.execute({
+            sql: sqlWithParams(`SELECT 1 FROM application_state WHERE session_id = ? AND key = ?`),
+            args: [targetEmail, key],
+        });
+        if (existsRes.rows.length > 0) {
+            await client.execute({
+                sql: sqlWithParams(`DELETE FROM application_state WHERE session_id = ? AND key = ?`),
+                args: [LOCAL_SESSION_ID, key],
+            });
+            continue;
+        }
+        await client.execute({
+            sql: sqlWithParams(`UPDATE application_state SET session_id = ? WHERE session_id = ? AND key = ?`),
+            args: [targetEmail, LOCAL_SESSION_ID, key],
+        });
+        updated++;
+    }
+    return updated;
+}
+/** Move oauth_tokens rows. `owner` is the user's email in core tables. */
+async function migrateOauthTokens(targetEmail) {
+    const client = getDbExec();
+    const res = await client.execute({
+        sql: sqlWithParams(`UPDATE oauth_tokens SET owner = ? WHERE owner = ?`),
+        args: [targetEmail, LOCAL_EMAIL],
+    });
+    return res.rowsAffected ?? 0;
+}
+/** Move rows in a template table that uses the `owner_email` convention. */
+async function migrateOwnerEmailTable(table, targetEmail) {
+    const client = getDbExec();
+    const escaped = table.replace(/"/g, '""');
+    const res = await client.execute({
+        sql: sqlWithParams(`UPDATE "${escaped}" SET owner_email = ? WHERE owner_email = ?`),
+        args: [targetEmail, LOCAL_EMAIL],
+    });
+    return res.rowsAffected ?? 0;
+}
+/**
+ * Migrate every piece of local-mode data to the given real account email.
+ * Safe to call multiple times — it only touches rows that are still attached
+ * to `local@localhost`.
+ */
+export async function migrateLocalUserData(targetEmail) {
+    const email = targetEmail?.trim().toLowerCase();
+    if (!email || email === LOCAL_EMAIL) {
+        return { migrated: false, tables: {}, targetEmail: email || "" };
+    }
+    const tables = {};
+    // Core tables — best-effort. A missing table just means the feature isn't
+    // enabled in this app (e.g. an app that doesn't use oauth_tokens).
+    const coreSteps = [
+        ["settings", () => migrateSettings(email)],
+        ["application_state", () => migrateApplicationState(email)],
+        ["oauth_tokens", () => migrateOauthTokens(email)],
+    ];
+    const errors = [];
+    for (const [name, fn] of coreSteps) {
+        try {
+            const count = await fn();
+            if (count > 0)
+                tables[name] = count;
+        }
+        catch (err) {
+            // Missing table or column — skip silently. Other errors are logged
+            // per-step so one bad table doesn't 500 the entire migration.
+            if (!shouldSkipSchemaError(err)) {
+                const message = err?.message ?? String(err);
+                errors.push({ step: name, message });
+                console.error(`[local-migration] ${name} failed:`, err);
+            }
+        }
+    }
+    // Template tables — discovered dynamically. If discovery itself fails,
+    // fall back to an empty list so the migration doesn't 500.
+    let templateTables = [];
+    try {
+        templateTables = await discoverOwnerEmailTables();
+    }
+    catch (err) {
+        console.error("[local-migration] owner_email table discovery failed:", err);
+        templateTables = [];
+    }
+    for (const table of templateTables) {
+        try {
+            const count = await migrateOwnerEmailTable(table, email);
+            if (count > 0)
+                tables[table] = count;
+        }
+        catch (err) {
+            if (!shouldSkipSchemaError(err)) {
+                const message = err?.message ?? String(err);
+                errors.push({ step: table, message });
+                console.error(`[local-migration] ${table} failed:`, err);
+            }
+        }
+    }
+    const migrated = Object.values(tables).some((n) => n > 0);
+    const result = { migrated, tables, targetEmail: email };
+    if (errors.length > 0)
+        result.errors = errors;
+    return result;
+}
+//# sourceMappingURL=local-migration.js.map

package/dist/server/local-migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-migration.js","sourceRoot":"","sources":["../../src/server/local-migration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAExD,MAAM,WAAW,GAAG,iBAAiB,CAAC;AACtC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACjC,MAAM,YAAY,GAAG,aAAa,CAAC;AAiBnC;;;GAGG;AACH,MAAM,eAAe,GACnB,sNAAsN,CAAC;AAEzN,SAAS,qBAAqB,CAAC,GAAY;IACzC,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,wBAAwB;IACrC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,iEAAiE;QACjE,+DAA+D;QAC/D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACpC,GAAG,EAAE;;;;;;;+CAOoC;YACzC,IAAI,EAAE,CAAC,YAAY,CAAC;SACrB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpE,CAAC;IAED,wFAAwF;IACxF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CACpC,gFAAgF,CACjF,CAAC;IACF,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI;SAC1B,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC;SAC3C,MAAM,CAAC,OAAO,CAAC,CAAC;IAEnB,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,OAAO,IAAI,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAChC,CAAC,GAAQ,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,CACpD,CAAC;QACF,IAAI,QAAQ;YAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gEAAgE;AAChE,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC,UAAU,EAAE;QAAE,OAAO,GAAG,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,eAAe,CAAC,WAAmB;IAChD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,KAAK,WAAW,GAAG,CAAC;IACtC,MAAM,SAAS,GAAG,KAAK,WAAW,GAAG,CAAC;IAEtC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,aAAa,CAAC,uDAAuD,CAAC;QAC3E,IAAI,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC;KACrD,CAAC,CAAC;IAEH,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,GAAG,IAAK,GAAW,CAAC,CAAC,CAAC,CAAW,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QAC5C,MAAM,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAE1D,sEAAsE;QACtE,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACrC,GAAG,EAAE,aAAa,CAAC,sCAAsC,CAAC;YAC1D,IAAI,EAAE,CAAC,MAAM,CAAC;SACf,CAAC,CAAC;QACH,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,MAAM,CAAC,OAAO,CAAC;gBACnB,GAAG,EAAE,aAAa,CAAC,oCAAoC,CAAC;gBACxD,IAAI,EAAE,CAAC,MAAM,CAAC;aACf,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,MAAM,CAAC,OAAO,CAAC;YACnB,GAAG,EAAE,aAAa,CAAC,2CAA2C,CAAC;YAC/D,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;SACvB,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,uBAAuB,CAAC,WAAmB;IACxD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,4EAA4E;IAC5E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,aAAa,CAChB,wDAAwD,CACzD;QACD,IAAI,EAAE,CAAC,gBAAgB,CAAC;KACzB,CAAC,CAAC;IAEH,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,IAAK,GAAW,CAAC,CAAC,CAAC,CAAW,CAAC;QACnD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACrC,GAAG,EAAE,aAAa,CAChB,kEAAkE,CACnE;YACD,IAAI,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC;SACzB,CAAC,CAAC;QACH,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,MAAM,CAAC,OAAO,CAAC;gBACnB,GAAG,EAAE,aAAa,CAChB,gEAAgE,CACjE;gBACD,IAAI,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC;aAC9B,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,MAAM,CAAC,OAAO,CAAC;YACnB,GAAG,EAAE,aAAa,CAChB,8EAA8E,CAC/E;YACD,IAAI,EAAE,CAAC,WAAW,EAAE,gBAAgB,EAAE,GAAG,CAAC;SAC3C,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,0EAA0E;AAC1E,KAAK,UAAU,kBAAkB,CAAC,WAAmB;IACnD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAC/B,GAAG,EAAE,aAAa,CAAC,mDAAmD,CAAC;QACvE,IAAI,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;KACjC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,sBAAsB,CACnC,KAAa,EACb,WAAmB;IAEnB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAC/B,GAAG,EAAE,aAAa,CAChB,WAAW,OAAO,6CAA6C,CAChE;QACD,IAAI,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;KACjC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAmB;IAEnB,MAAM,KAAK,GAAG,WAAW,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;IACnE,CAAC;IAED,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,0EAA0E;IAC1E,mEAAmE;IACnE,MAAM,SAAS,GAA2C;QACxD,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;KAClD,CAAC;IACF,MAAM,MAAM,GAA6C,EAAE,CAAC;IAC5D,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,EAAE,EAAE,CAAC;YACzB,IAAI,KAAK,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACtC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,mEAAmE;YACnE,8DAA8D;YAC9D,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;gBACrC,OAAO,CAAC,KAAK,CAAC,qBAAqB,IAAI,UAAU,EAAE,GAAG,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,2DAA2D;IAC3D,IAAI,cAAc,GAAa,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,wBAAwB,EAAE,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,uDAAuD,EAAE,GAAG,CAAC,CAAC;QAC5E,cAAc,GAAG,EAAE,CAAC;IACtB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACzD,IAAI,KAAK,GAAG,CAAC;gBAAE,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;QACvC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;gBACtC,OAAO,CAAC,KAAK,CAAC,qBAAqB,KAAK,UAAU,EAAE,GAAG,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAyB,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAC9E,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IAC9C,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["/**\n * Migrate data owned by `local@localhost` to a real account.\n *\n * When a user starts an app in local mode and later signs in to create a real\n * account, this function moves all of their existing data over to the new\n * account so they don't lose anything.\n *\n * Scope of the migration:\n *   - `application_state`: rows with `session_id = 'local'`\n *   - `settings`: keys prefixed with `u:local@localhost:`\n *   - `oauth_tokens`: rows with `owner = 'local@localhost'`\n *   - Any template table that has an `owner_email` column: rows with\n *     `owner_email = 'local@localhost'`\n *\n * The operation is a no-op if the target email is itself `local@localhost`,\n * empty, or if there is nothing to migrate.\n */\n\nimport { getDbExec, isPostgres } from \"../db/client.js\";\n\nconst LOCAL_EMAIL = \"local@localhost\";\nconst LOCAL_SESSION_ID = \"local\";\nconst OWNER_COLUMN = \"owner_email\";\n\nexport interface LocalMigrationResult {\n  /** Whether anything was actually migrated. */\n  migrated: boolean;\n  /** Per-table row counts that were updated. Omits tables with zero updates. */\n  tables: Record<string, number>;\n  /** Target email the data now belongs to. */\n  targetEmail: string;\n  /**\n   * Non-fatal per-step errors encountered during migration. One bad table\n   * no longer fails the whole upgrade — we migrate everything we can and\n   * report any steps that threw here so the UI can surface them.\n   */\n  errors?: Array<{ step: string; message: string }>;\n}\n\n/**\n * Error messages that indicate a missing/inaccessible table or column — the\n * migration treats these as \"feature not enabled\" and skips silently.\n */\nconst SCHEMA_SKIP_ERR =\n  /no such table|no such column|does not exist|undefined table|undefined column|relation .* does not exist|column .* does not exist|permission denied|is not a table|cannot update view|cannot change column in a view/i;\n\nfunction shouldSkipSchemaError(err: unknown): boolean {\n  const message = err instanceof Error ? err.message : String(err);\n  return SCHEMA_SKIP_ERR.test(message);\n}\n\n/**\n * Discover every table (not view) in `public` that has an `owner_email`\n * column. Views and materialized views are excluded — they can't be updated\n * directly and would 500 the migration.\n */\nasync function discoverOwnerEmailTables(): Promise<string[]> {\n  const client = getDbExec();\n  if (isPostgres()) {\n    // Join against information_schema.tables to filter out views and\n    // materialized views (anything that isn't a plain BASE TABLE).\n    const { rows } = await client.execute({\n      sql: `SELECT c.table_name\n              FROM information_schema.columns c\n              JOIN information_schema.tables t\n                ON t.table_schema = c.table_schema\n               AND t.table_name = c.table_name\n             WHERE c.table_schema = 'public'\n               AND c.column_name = $1\n               AND t.table_type = 'BASE TABLE'`,\n      args: [OWNER_COLUMN],\n    });\n    return rows.map((r: any) => r.table_name ?? r[0]).filter(Boolean);\n  }\n\n  // SQLite path: iterate tables (type='table', not 'view') and inspect columns via PRAGMA\n  const tablesRes = await client.execute(\n    `SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%'`,\n  );\n  const tables = tablesRes.rows\n    .map((r: any) => (r.name ?? r[0]) as string)\n    .filter(Boolean);\n\n  const withOwner: string[] = [];\n  for (const table of tables) {\n    const escaped = table.replace(/\"/g, '\"\"');\n    const colsRes = await client.execute(`PRAGMA table_info(\"${escaped}\")`);\n    const hasOwner = colsRes.rows.some(\n      (row: any) => (row.name ?? row[1]) === OWNER_COLUMN,\n    );\n    if (hasOwner) withOwner.push(table);\n  }\n  return withOwner;\n}\n\n/** Replace `?` placeholders with `$1`, `$2`, … for Postgres. */\nfunction sqlWithParams(sql: string): string {\n  if (!isPostgres()) return sql;\n  let i = 0;\n  return sql.replace(/\\?/g, () => `$${++i}`);\n}\n\n/**\n * Rename `settings` keys so a user's config carries over. Keys are prefixed\n * with `u:<email>:` — moving from one email to another is a prefix swap.\n *\n * If a destination key already exists (unlikely but possible if the user had\n * previously signed in with the same email) we leave the destination alone\n * and drop the local row, so we never clobber real-account state.\n */\nasync function migrateSettings(targetEmail: string): Promise<number> {\n  const client = getDbExec();\n  const oldPrefix = `u:${LOCAL_EMAIL}:`;\n  const newPrefix = `u:${targetEmail}:`;\n\n  const { rows } = await client.execute({\n    sql: sqlWithParams(`SELECT key FROM settings WHERE key LIKE ? ESCAPE '\\\\'`),\n    args: [oldPrefix.replace(/([\\\\%_])/g, \"\\\\$1\") + \"%\"],\n  });\n\n  let updated = 0;\n  for (const row of rows) {\n    const oldKey = (row.key ?? (row as any)[0]) as string;\n    if (!oldKey.startsWith(oldPrefix)) continue;\n    const newKey = newPrefix + oldKey.slice(oldPrefix.length);\n\n    // Skip if the destination already exists — don't overwrite real data.\n    const existsRes = await client.execute({\n      sql: sqlWithParams(`SELECT 1 FROM settings WHERE key = ?`),\n      args: [newKey],\n    });\n    if (existsRes.rows.length > 0) {\n      await client.execute({\n        sql: sqlWithParams(`DELETE FROM settings WHERE key = ?`),\n        args: [oldKey],\n      });\n      continue;\n    }\n\n    await client.execute({\n      sql: sqlWithParams(`UPDATE settings SET key = ? WHERE key = ?`),\n      args: [newKey, oldKey],\n    });\n    updated++;\n  }\n  return updated;\n}\n\n/**\n * Move application_state rows from `session_id='local'` to the target email.\n * Rows that already exist for the destination session are left alone.\n */\nasync function migrateApplicationState(targetEmail: string): Promise<number> {\n  const client = getDbExec();\n  // Only migrate keys that don't already exist under the destination session.\n  const { rows } = await client.execute({\n    sql: sqlWithParams(\n      `SELECT key FROM application_state WHERE session_id = ?`,\n    ),\n    args: [LOCAL_SESSION_ID],\n  });\n\n  let updated = 0;\n  for (const row of rows) {\n    const key = (row.key ?? (row as any)[0]) as string;\n    const existsRes = await client.execute({\n      sql: sqlWithParams(\n        `SELECT 1 FROM application_state WHERE session_id = ? AND key = ?`,\n      ),\n      args: [targetEmail, key],\n    });\n    if (existsRes.rows.length > 0) {\n      await client.execute({\n        sql: sqlWithParams(\n          `DELETE FROM application_state WHERE session_id = ? AND key = ?`,\n        ),\n        args: [LOCAL_SESSION_ID, key],\n      });\n      continue;\n    }\n    await client.execute({\n      sql: sqlWithParams(\n        `UPDATE application_state SET session_id = ? WHERE session_id = ? AND key = ?`,\n      ),\n      args: [targetEmail, LOCAL_SESSION_ID, key],\n    });\n    updated++;\n  }\n  return updated;\n}\n\n/** Move oauth_tokens rows. `owner` is the user's email in core tables. */\nasync function migrateOauthTokens(targetEmail: string): Promise<number> {\n  const client = getDbExec();\n  const res = await client.execute({\n    sql: sqlWithParams(`UPDATE oauth_tokens SET owner = ? WHERE owner = ?`),\n    args: [targetEmail, LOCAL_EMAIL],\n  });\n  return res.rowsAffected ?? 0;\n}\n\n/** Move rows in a template table that uses the `owner_email` convention. */\nasync function migrateOwnerEmailTable(\n  table: string,\n  targetEmail: string,\n): Promise<number> {\n  const client = getDbExec();\n  const escaped = table.replace(/\"/g, '\"\"');\n  const res = await client.execute({\n    sql: sqlWithParams(\n      `UPDATE \"${escaped}\" SET owner_email = ? WHERE owner_email = ?`,\n    ),\n    args: [targetEmail, LOCAL_EMAIL],\n  });\n  return res.rowsAffected ?? 0;\n}\n\n/**\n * Migrate every piece of local-mode data to the given real account email.\n * Safe to call multiple times — it only touches rows that are still attached\n * to `local@localhost`.\n */\nexport async function migrateLocalUserData(\n  targetEmail: string,\n): Promise<LocalMigrationResult> {\n  const email = targetEmail?.trim().toLowerCase();\n  if (!email || email === LOCAL_EMAIL) {\n    return { migrated: false, tables: {}, targetEmail: email || \"\" };\n  }\n\n  const tables: Record<string, number> = {};\n\n  // Core tables — best-effort. A missing table just means the feature isn't\n  // enabled in this app (e.g. an app that doesn't use oauth_tokens).\n  const coreSteps: Array<[string, () => Promise<number>]> = [\n    [\"settings\", () => migrateSettings(email)],\n    [\"application_state\", () => migrateApplicationState(email)],\n    [\"oauth_tokens\", () => migrateOauthTokens(email)],\n  ];\n  const errors: Array<{ step: string; message: string }> = [];\n  for (const [name, fn] of coreSteps) {\n    try {\n      const count = await fn();\n      if (count > 0) tables[name] = count;\n    } catch (err: any) {\n      // Missing table or column — skip silently. Other errors are logged\n      // per-step so one bad table doesn't 500 the entire migration.\n      if (!shouldSkipSchemaError(err)) {\n        const message = err?.message ?? String(err);\n        errors.push({ step: name, message });\n        console.error(`[local-migration] ${name} failed:`, err);\n      }\n    }\n  }\n\n  // Template tables — discovered dynamically. If discovery itself fails,\n  // fall back to an empty list so the migration doesn't 500.\n  let templateTables: string[] = [];\n  try {\n    templateTables = await discoverOwnerEmailTables();\n  } catch (err) {\n    console.error(\"[local-migration] owner_email table discovery failed:\", err);\n    templateTables = [];\n  }\n  for (const table of templateTables) {\n    try {\n      const count = await migrateOwnerEmailTable(table, email);\n      if (count > 0) tables[table] = count;\n    } catch (err: any) {\n      if (!shouldSkipSchemaError(err)) {\n        const message = err?.message ?? String(err);\n        errors.push({ step: table, message });\n        console.error(`[local-migration] ${table} failed:`, err);\n      }\n    }\n  }\n\n  const migrated = Object.values(tables).some((n) => n > 0);\n  const result: LocalMigrationResult = { migrated, tables, targetEmail: email };\n  if (errors.length > 0) result.errors = errors;\n  return result;\n}\n"]}

package/dist/server/oauth-public-origin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-public-origin.d.ts","sourceRoot":"","sources":["../../src/server/oauth-public-origin.ts"],"names":[],"mappings":"AASA,wBAAgB,oBAAoB,IAAI,MAAM,CAe7C"}
+{"version":3,"file":"oauth-public-origin.d.ts","sourceRoot":"","sources":["../../src/server/oauth-public-origin.ts"],"names":[],"mappings":"AAuBA,wBAAgB,oBAAoB,IAAI,MAAM,CAoB7C"}

package/dist/server/oauth-public-origin.js

@@ -8,6 +8,18 @@ function normalizeOrigin(raw) {
         return "";
     }
 }
+function isLoopbackOrigin(origin) {
+    try {
+        const hostname = new URL(origin).hostname;
+        return (hostname === "localhost" ||
+            hostname === "127.0.0.1" ||
+            hostname === "::1" ||
+            hostname === "[::1]");
+    }
+    catch {
+        return false;
+    }
+}
 export function getPublicOAuthOrigin() {
     for (const raw of [
         process.env.WORKSPACE_OAUTH_ORIGIN,
@@ -16,11 +28,17 @@ export function getPublicOAuthOrigin() {
         process.env.VITE_APP_URL,
         process.env.BETTER_AUTH_URL,
         process.env.VITE_BETTER_AUTH_URL,
+    ]) {
+        const origin = normalizeOrigin(raw);
+        if (origin && !isLoopbackOrigin(origin))
+            return origin;
+    }
+    for (const raw of [
         process.env.WORKSPACE_GATEWAY_URL,
         process.env.VITE_WORKSPACE_GATEWAY_URL,
     ]) {
         const origin = normalizeOrigin(raw);
-        if (origin)
+        if (origin && !isLoopbackOrigin(origin))
             return origin;
     }
     return "";

package/dist/server/oauth-public-origin.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-public-origin.js","sourceRoot":"","sources":["../../src/server/oauth-public-origin.ts"],"names":[],"mappings":"AAAA,SAAS,eAAe,CAAC,GAAuB;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,KAAK,MAAM,GAAG,IAAI;QAChB,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAClC,OAAO,CAAC,GAAG,CAAC,2BAA2B;QACvC,OAAO,CAAC,GAAG,CAAC,OAAO;QACnB,OAAO,CAAC,GAAG,CAAC,YAAY;QACxB,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAChC,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACjC,OAAO,CAAC,GAAG,CAAC,0BAA0B;KACvC,EAAE,CAAC;QACF,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC","sourcesContent":["function normalizeOrigin(raw: string | undefined): string {\n  if (!raw) return \"\";\n  try {\n    return new URL(raw).origin;\n  } catch {\n    return \"\";\n  }\n}\n\nexport function getPublicOAuthOrigin(): string {\n  for (const raw of [\n    process.env.WORKSPACE_OAUTH_ORIGIN,\n    process.env.VITE_WORKSPACE_OAUTH_ORIGIN,\n    process.env.APP_URL,\n    process.env.VITE_APP_URL,\n    process.env.BETTER_AUTH_URL,\n    process.env.VITE_BETTER_AUTH_URL,\n    process.env.WORKSPACE_GATEWAY_URL,\n    process.env.VITE_WORKSPACE_GATEWAY_URL,\n  ]) {\n    const origin = normalizeOrigin(raw);\n    if (origin) return origin;\n  }\n  return \"\";\n}\n"]}
+{"version":3,"file":"oauth-public-origin.js","sourceRoot":"","sources":["../../src/server/oauth-public-origin.ts"],"names":[],"mappings":"AAAA,SAAS,eAAe,CAAC,GAAuB;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;QAC1C,OAAO,CACL,QAAQ,KAAK,WAAW;YACxB,QAAQ,KAAK,WAAW;YACxB,QAAQ,KAAK,KAAK;YAClB,QAAQ,KAAK,OAAO,CACrB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,KAAK,MAAM,GAAG,IAAI;QAChB,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAClC,OAAO,CAAC,GAAG,CAAC,2BAA2B;QACvC,OAAO,CAAC,GAAG,CAAC,OAAO;QACnB,OAAO,CAAC,GAAG,CAAC,YAAY;QACxB,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,OAAO,CAAC,GAAG,CAAC,oBAAoB;KACjC,EAAE,CAAC;QACF,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;IACzD,CAAC;IACD,KAAK,MAAM,GAAG,IAAI;QAChB,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACjC,OAAO,CAAC,GAAG,CAAC,0BAA0B;KACvC,EAAE,CAAC;QACF,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC","sourcesContent":["function normalizeOrigin(raw: string | undefined): string {\n  if (!raw) return \"\";\n  try {\n    return new URL(raw).origin;\n  } catch {\n    return \"\";\n  }\n}\n\nfunction isLoopbackOrigin(origin: string): boolean {\n  try {\n    const hostname = new URL(origin).hostname;\n    return (\n      hostname === \"localhost\" ||\n      hostname === \"127.0.0.1\" ||\n      hostname === \"::1\" ||\n      hostname === \"[::1]\"\n    );\n  } catch {\n    return false;\n  }\n}\n\nexport function getPublicOAuthOrigin(): string {\n  for (const raw of [\n    process.env.WORKSPACE_OAUTH_ORIGIN,\n    process.env.VITE_WORKSPACE_OAUTH_ORIGIN,\n    process.env.APP_URL,\n    process.env.VITE_APP_URL,\n    process.env.BETTER_AUTH_URL,\n    process.env.VITE_BETTER_AUTH_URL,\n  ]) {\n    const origin = normalizeOrigin(raw);\n    if (origin && !isLoopbackOrigin(origin)) return origin;\n  }\n  for (const raw of [\n    process.env.WORKSPACE_GATEWAY_URL,\n    process.env.VITE_WORKSPACE_GATEWAY_URL,\n  ]) {\n    const origin = normalizeOrigin(raw);\n    if (origin && !isLoopbackOrigin(origin)) return origin;\n  }\n  return \"\";\n}\n"]}

package/dist/server/onboarding-html.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"onboarding-html.d.ts","sourceRoot":"","sources":["../../src/server/onboarding-html.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAC;AAmC/B,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,SAAS,CAAC,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF;;;;OAIG;IACH,kBAAkB,CAAC,EAAE;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACxB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF;;;;OAIG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,qBAA0B,GAAG,MAAM,CA2kD1E;AAED,kDAAkD;AAClD,eAAO,MAAM,eAAe,QAAsB,CAAC;AAEnD;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAwG7C"}
+{"version":3,"file":"onboarding-html.d.ts","sourceRoot":"","sources":["../../src/server/onboarding-html.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAC;AAmC/B,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,SAAS,CAAC,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF;;;;OAIG;IACH,kBAAkB,CAAC,EAAE;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACxB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF;;;;OAIG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,qBAA0B,GAAG,MAAM,CAgoD1E;AAED,kDAAkD;AAClD,eAAO,MAAM,eAAe,QAAsB,CAAC;AAEnD;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CA0G7C"}

package/dist/server/onboarding-html.js

@@ -419,6 +419,8 @@ ${runLocalCommand
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
 <title>${hasMarketing ? esc(marketing.appName) + " — Sign in" : "Welcome"}</title>
+<link rel="icon" type="image/svg+xml" href="${withAppBasePath("/favicon.svg")}">
+<link rel="apple-touch-icon" href="${withAppBasePath("/icon-180.svg")}">
 ${hasMarketing
         ? `<meta name="description" content="${esc(marketing.tagline)}">
 <meta property="og:title" content="${esc(marketing.appName)}">
@@ -855,18 +857,27 @@ ${googleOnly
       return origin ? origin + path : __anPath(path);
     }
     function __anBuilderPreviewReturnOrigin() {
+      var candidates = [window.location.href, document.referrer || ''];
       try {
-        var url = new URL(window.location.href);
-        var host = url.hostname.toLowerCase();
-        var isPreviewHost =
-          host === 'builderio.xyz' || host.slice(-14) === '.builderio.xyz' ||
-          host === 'builderio.dev' || host.slice(-14) === '.builderio.dev' ||
-          host === 'builder.codes' || host.slice(-14) === '.builder.codes' ||
-          host === 'builder.my' || host.slice(-11) === '.builder.my';
-        return url.protocol === 'https:' && isPreviewHost ? url.origin : '';
-      } catch(e) {
-        return '';
+        if (window.location.ancestorOrigins) {
+          for (var j = 0; j < window.location.ancestorOrigins.length; j++) {
+            candidates.push(window.location.ancestorOrigins[j]);
+          }
+        }
+      } catch(e) {}
+      for (var i = 0; i < candidates.length; i++) {
+        try {
+          var url = new URL(candidates[i]);
+          var host = url.hostname.toLowerCase();
+          var isPreviewHost =
+            host === 'builderio.xyz' || host.slice(-14) === '.builderio.xyz' ||
+            host === 'builderio.dev' || host.slice(-14) === '.builderio.dev' ||
+            host === 'builder.codes' || host.slice(-14) === '.builder.codes' ||
+            host === 'builder.my' || host.slice(-11) === '.builder.my';
+          if (url.protocol === 'https:' && isPreviewHost) return url.origin;
+        } catch(e) {}
       }
+      return '';
     }
     function __anWorkspaceGatewayReturnOrigin() {
       var previewOrigin = __anBuilderPreviewReturnOrigin();
@@ -906,6 +917,15 @@ ${googleOnly
       var origin = __anWorkspaceGatewayReturnOrigin();
       return origin ? origin + path : path;
     }
+    function __anFinishOAuthExchange(ret, flowId) {
+      if (__anIsBuilderPreview()) {
+        __anSetOAuthDebug('OAuth exchange redeemed; reloading the embedded app', flowId);
+        window.location.reload();
+        return;
+      }
+      __anSetOAuthDebug('OAuth exchange redeemed; returning to the app', flowId);
+      window.location.href = ret || '/';
+    }
     function __anGetReturnPath() {
       try {
         var inner = new URLSearchParams(window.location.search).get('return');
@@ -933,6 +953,13 @@ ${googleOnly
         return false;
       }
     }
+    function __anIsAgentNativeDesktop() {
+      try {
+        return (navigator.userAgent || '').indexOf('AgentNativeDesktop') !== -1;
+      } catch(e) {
+        return false;
+      }
+    }
     function __anIsElectron() {
       try {
         return (navigator.userAgent || '').indexOf('Electron') !== -1;
@@ -947,9 +974,9 @@ ${googleOnly
         var qp = new URLSearchParams(window.location.search).get('authMode');
         if (qp === 'popup' || qp === 'redirect') return qp;
       } catch(e) {}
-      // Builder.io browser iframe must use popup — Google sets
-      // X-Frame-Options: DENY so a redirect inside the iframe fails.
-      if (__anIsBuilderPreview() && !__anIsBuilderDesktop()) return 'popup';
+      // Builder.io preview surfaces must use popup — Google sets
+      // X-Frame-Options: DENY so a redirect inside the webview/iframe fails.
+      if (__anIsBuilderPreview()) return 'popup';
       var mode = __AN_GOOGLE_AUTH_MODE || 'auto';
       if (mode === 'popup') return 'popup';
       if (mode === 'redirect') return 'redirect';
@@ -971,12 +998,22 @@ ${googleOnly
     function __anSetOAuthDebug(message, flowId) {
       var text = message + (flowId ? ' (flow ' + __anFlowDebugId(flowId) + ')' : '');
       try {
-        console.info('[agent-native][google-oauth]', { message: message, flow: __anFlowDebugId(flowId) || undefined });
+        console.info('[agent-native][google-oauth] ' + text);
+      } catch(e) {}
+      // Only surface the debug overlay when explicitly opted in via #oauth-debug
+      // hash or ?oauth_debug=1 query — otherwise it leaks raw flow IDs and
+      // diagnostic strings into the user-facing sign-in screen.
+      var showDebugOverlay = false;
+      try {
+        var loc = window.location || {};
+        showDebugOverlay =
+          (typeof loc.hash === 'string' && loc.hash.indexOf('oauth-debug') !== -1) ||
+          (typeof loc.search === 'string' && loc.search.indexOf('oauth_debug=1') !== -1);
       } catch(e) {}
       var debug = document.getElementById('google-debug');
       if (debug) {
         debug.textContent = text;
-        debug.classList.add('show');
+        if (showDebugOverlay) debug.classList.add('show');
       }
     }
     function __anShowOAuthError(err, btn, message) {
@@ -1000,8 +1037,7 @@ ${googleOnly
           if (data && (data.email || data.token)) {
             if (__anOAuthPollTimer) clearInterval(__anOAuthPollTimer);
             __anOAuthPollTimer = null;
-            __anSetOAuthDebug('OAuth exchange redeemed; returning to the app', flowId);
-            window.location.href = ret || '/';
+            __anFinishOAuthExchange(ret, flowId);
             return;
           }
           if (data && data.error) {
@@ -1018,7 +1054,7 @@ ${googleOnly
           }
         }
         if (Date.now() - started > timeoutMs) {
-          __anShowOAuthError(err, btn, 'Google sign-in did not finish. Flow ' + __anFlowDebugId(flowId) + ' never redeemed; check server logs for [agent-native][google-oauth].');
+          __anShowOAuthError(err, btn, 'Google sign-in did not finish. Flow ' + __anFlowDebugId(flowId) + ' never reached this app. Check the Google OAuth redirect URI and server logs for [agent-native][google-oauth].');
         }
       }
       if (__anOAuthPollTimer) clearInterval(__anOAuthPollTimer);
@@ -1027,8 +1063,9 @@ ${googleOnly
     }
     function __anStartPopupOAuth(ret, btn, err) {
       var flowId = __anNewOAuthFlowId();
+      var oauthReturn = __anIsBuilderPreview() ? __anOAuthReturnTarget(ret) : ret;
       var params = new URLSearchParams();
-      if (ret) params.set('return', ret);
+      if (oauthReturn) params.set('return', oauthReturn);
       params.set('desktop', '1');
       params.set('flow_id', flowId);
       params.set('redirect', '1');
@@ -1056,6 +1093,18 @@ ${googleOnly
       }
       __anWaitForOAuthExchange(flowId, ret, btn, err);
     }
+    function __anStartNativeDesktopOAuth(ret, btn, err) {
+      var flowId = __anNewOAuthFlowId();
+      var params = new URLSearchParams();
+      if (ret) params.set('return', ret);
+      params.set('desktop', '1');
+      params.set('flow_id', flowId);
+      params.set('redirect', '1');
+      var url = __anPath('/_agent-native/google/auth-url') + '?' + params.toString();
+      __anSetOAuthDebug('Opening Google sign-in in system browser', flowId);
+      __anOpenOAuthUrl(url);
+      __anWaitForOAuthExchange(flowId, ret, btn, err);
+    }
     function __anOpenOAuthUrl(url) {
       try { sessionStorage.setItem('__an_signin', '1'); } catch(e) {}
       window.location.href = url;
@@ -1535,6 +1584,10 @@ ${showGoogle
       __anStartPopupOAuth(ret, btn, err);
       return;
     }
+    if (__anIsAgentNativeDesktop()) {
+      __anStartNativeDesktopOAuth(ret, btn, err);
+      return;
+    }
     if (__anIsBuilderPreview()) {
       var params = new URLSearchParams();
       if (ret) params.set('return', __anOAuthReturnTarget(ret));
@@ -1636,6 +1689,8 @@ export function getResetPasswordHtml() {
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
 <title>Reset password</title>
+<link rel="icon" type="image/svg+xml" href="${withAppBasePath("/favicon.svg")}">
+<link rel="apple-touch-icon" href="${withAppBasePath("/icon-180.svg")}">
 <style>
   *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
   body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; background: #0a0a0a; color: #e5e5e5; display: flex; align-items: center; justify-content: center; min-height: 100vh; padding: 1rem; }