@agent-native/core 0.148.0 → 0.149.0

package/dist/server/onboarding-html.js

@@ -8,7 +8,7 @@
  */
 import { getLocaleInitScript } from "../localization/server.js";
 import { DEFAULT_LOCALE, LOCALE_METADATA, LOCALE_STORAGE_KEY, SUPPORTED_LOCALES, } from "../localization/shared.js";
-import { PASSWORD_MIN_LENGTH } from "../shared/password-policy.js";
+import { PASSWORD_MAX_LENGTH, PASSWORD_MIN_LENGTH, } from "../shared/password-policy.js";
 import { signInJourneyInlineScript } from "../shared/sign-in-journey.js";
 import { AGENT_NATIVE_SOCIAL_IMAGE_ALT, AGENT_NATIVE_SOCIAL_IMAGE_HEIGHT, AGENT_NATIVE_SOCIAL_IMAGE_PATH, AGENT_NATIVE_SOCIAL_IMAGE_TYPE, AGENT_NATIVE_SOCIAL_IMAGE_WIDTH, withAgentNativeSocialImageCacheBuster, } from "../shared/social-meta.js";
 import { normalizeAppBasePath } from "./app-base-path.js";
@@ -89,7 +89,7 @@ const EN_AUTH_COPY = {
     sendMagicLink: "Continue",
     magicLinkSent: "Check your email",
     magicLinkSentCopy: "We sent a secure sign-in link to",
-    magicLinkFailed: "Could not send sign-in link.",
+    magicLinkFailed: "We couldn't send a sign-in link. Check your email and try again.",
     usePasswordInstead: "Use a password instead",
     backToMagicLink: "Use a sign-in link instead",
     signupProgress: "Signup progress",
@@ -129,31 +129,32 @@ const EN_AUTH_COPY = {
     legalSuffix: ".",
     invalidEmail: "Enter a valid email address, like you@example.com.",
     signInToContinue: "Sign in to continue.",
-    finishSignInFailed: "Could not finish sign-in automatically.",
+    finishSignInFailed: "We couldn't finish signing you in. Please sign in manually.",
     enterPasswordAfterVerification: "Enter your password after verifying your email.",
-    finishSignInManually: "We could not finish sign-in automatically. Sign in to continue.",
+    finishSignInManually: "We couldn't finish signing you in automatically. Sign in to continue.",
     stillWaitingVerification: "Still waiting on verification. Click the link in your email, then try Continue again.",
-    checkVerificationFailed: "Could not check verification. Please try again.",
+    checkVerificationFailed: "We couldn't check your verification status. Please try again.",
+    verificationLinkInvalid: "This verification link is invalid or expired. Request a new one.",
     checking: "Checking...",
     checkingVerification: "Checking your verification...",
     sending: "Sending...",
     sent: "Sent",
     sentVerification: "Sent a fresh verification link.",
-    resendVerificationFailed: "Could not resend the verification email.",
-    networkErrorRetry: "Network error. Please try again.",
-    networkErrorDashRetry: "Network error — please try again",
-    passwordsMismatch: "Passwords do not match",
+    resendVerificationFailed: "We couldn't resend the verification email. Please try again.",
+    networkErrorRetry: "We couldn't reach the server. Check your connection and try again.",
+    networkErrorDashRetry: "We couldn't reach the server. Check your connection and try again.",
+    passwordsMismatch: "Passwords do not match.",
     creatingAccount: "Creating account…",
-    registrationFailed: "Registration failed",
+    registrationFailed: "We couldn't create your account. Please try again.",
     accountCreatedSigningIn: "Account created — signing you in…",
     emailVerifiedFinishing: "Email verified. Finishing sign-in...",
     emailVerifiedSignIn: "Email verified. Sign in to continue.",
     resetEmailSent: "If that email exists, a reset link is on its way.",
-    resetEmailFailed: "Could not send reset email.",
+    resetEmailFailed: "We couldn't send a password reset email. Check your email and try again.",
     signingIn: "Signing in…",
-    invalidLogin: "Invalid email or password",
-    googleNotConfigured: "Google OAuth is not configured.",
-    failedToConnect: "Failed to connect. Please try again.",
+    invalidLogin: "The email or password is incorrect.",
+    googleNotConfigured: "Google sign-in is not available right now.",
+    failedToConnect: "We couldn't connect. Please try again.",
     migrateLocalFallback: "Continue signing in to migrate local data.",
     googlePopupHelp: "Allow popups for this site and try again",
     googleNeverFinished: "Google sign-in did not finish. Check the Google OAuth redirect URI and server logs for [agent-native][google-oauth].",
@@ -236,6 +237,7 @@ const AUTH_LOCALE_COPY = {
         finishSignInManually: "无法自动完成登录。请登录以继续。",
         stillWaitingVerification: "仍在等待验证。请点击邮件中的链接，然后再次点击继续。",
         checkVerificationFailed: "无法检查验证状态。请重试。",
+        verificationLinkInvalid: "此验证链接无效或已过期。请重新请求一个。",
         checking: "正在检查...",
         checkingVerification: "正在检查验证状态...",
         sending: "正在发送...",
@@ -336,6 +338,7 @@ const AUTH_LOCALE_COPY = {
         finishSignInManually: "無法自動完成登入。請登入以繼續。",
         stillWaitingVerification: "仍在等待驗證。請點擊郵件中的連結，然後再次點擊繼續。",
         checkVerificationFailed: "無法檢查驗證狀態。請重試。",
+        verificationLinkInvalid: "此驗證連結無效或已過期。請重新索取。",
         checking: "正在檢查...",
         checkingVerification: "正在檢查驗證狀態...",
         sending: "正在寄送...",
@@ -436,6 +439,7 @@ const AUTH_LOCALE_COPY = {
         finishSignInManually: "No se pudo completar el inicio automáticamente. Inicia sesión para continuar.",
         stillWaitingVerification: "Aún esperamos la verificación. Haz clic en el enlace del email y luego prueba Continuar de nuevo.",
         checkVerificationFailed: "No se pudo comprobar la verificación. Inténtalo de nuevo.",
+        verificationLinkInvalid: "Este enlace de verificación no es válido o ha caducado. Solicita uno nuevo.",
         checking: "Comprobando...",
         checkingVerification: "Comprobando tu verificación...",
         sending: "Enviando...",
@@ -536,6 +540,7 @@ const AUTH_LOCALE_COPY = {
         finishSignInManually: "Impossible de terminer la connexion automatiquement. Connectez-vous pour continuer.",
         stillWaitingVerification: "La vérification est toujours en attente. Cliquez sur le lien dans votre e-mail, puis réessayez Continuer.",
         checkVerificationFailed: "Impossible de vérifier l'état. Veuillez réessayer.",
+        verificationLinkInvalid: "Ce lien de vérification est invalide ou expiré. Demandez-en un nouveau.",
         checking: "Vérification...",
         checkingVerification: "Vérification en cours...",
         sending: "Envoi...",
@@ -636,6 +641,7 @@ const AUTH_LOCALE_COPY = {
         finishSignInManually: "Die Anmeldung konnte nicht automatisch abgeschlossen werden. Melde dich an, um fortzufahren.",
         stillWaitingVerification: "Die Bestätigung steht noch aus. Klicke auf den Link in deiner E-Mail und versuche Weiter erneut.",
         checkVerificationFailed: "Bestätigung konnte nicht geprüft werden. Bitte erneut versuchen.",
+        verificationLinkInvalid: "Dieser Bestätigungslink ist ungültig oder abgelaufen. Fordere einen neuen an.",
         checking: "Prüfen...",
         checkingVerification: "Bestätigung wird geprüft...",
         sending: "Senden...",
@@ -736,6 +742,7 @@ const AUTH_LOCALE_COPY = {
         finishSignInManually: "サインインを自動で完了できませんでした。続行するにはサインインしてください。",
         stillWaitingVerification: "まだ確認待ちです。メール内のリンクをクリックしてから、もう一度続行してください。",
         checkVerificationFailed: "確認状態をチェックできませんでした。もう一度お試しください。",
+        verificationLinkInvalid: "この確認リンクは無効か期限切れです。新しいリンクをリクエストしてください。",
         checking: "確認中...",
         checkingVerification: "確認状態をチェック中...",
         sending: "送信中...",
@@ -836,6 +843,7 @@ const AUTH_LOCALE_COPY = {
         finishSignInManually: "자동으로 로그인을 완료할 수 없습니다. 계속하려면 로그인하세요.",
         stillWaitingVerification: "아직 확인을 기다리고 있습니다. 이메일의 링크를 클릭한 뒤 계속을 다시 눌러주세요.",
         checkVerificationFailed: "확인 상태를 확인할 수 없습니다. 다시 시도하세요.",
+        verificationLinkInvalid: "이 인증 링크가 유효하지 않거나 만료되었습니다. 새 링크를 요청하세요.",
         checking: "확인 중...",
         checkingVerification: "확인 상태 확인 중...",
         sending: "보내는 중...",
@@ -936,6 +944,7 @@ const AUTH_LOCALE_COPY = {
         finishSignInManually: "Não foi possível concluir o login automaticamente. Entre para continuar.",
         stillWaitingVerification: "Ainda estamos aguardando a verificação. Clique no link do email e tente Continuar novamente.",
         checkVerificationFailed: "Não foi possível verificar. Tente novamente.",
+        verificationLinkInvalid: "Este link de verificação é inválido ou expirou. Solicite um novo.",
         checking: "Verificando...",
         checkingVerification: "Verificando sua confirmação...",
         sending: "Enviando...",
@@ -1036,6 +1045,7 @@ const AUTH_LOCALE_COPY = {
         finishSignInManually: "साइन इन अपने आप पूरा नहीं हो सका। जारी रखने के लिए साइन इन करें।",
         stillWaitingVerification: "सत्यापन का इंतजार है। ईमेल में लिंक खोलें, फिर Continue दोबारा दबाएं।",
         checkVerificationFailed: "सत्यापन जांच नहीं हो सकी। कृपया फिर कोशिश करें।",
+        verificationLinkInvalid: "यह सत्यापन लिंक अमान्य या समाप्त हो गया है। नया लिंक मांगें।",
         checking: "जांच हो रही है...",
         checkingVerification: "आपका सत्यापन जांच रहे हैं...",
         sending: "भेजा जा रहा है...",
@@ -1136,6 +1146,7 @@ const AUTH_LOCALE_COPY = {
         finishSignInManually: "تعذر إكمال تسجيل الدخول تلقائيًا. سجّل الدخول للمتابعة.",
         stillWaitingVerification: "ما زلنا ننتظر التحقق. افتح الرابط في بريدك الإلكتروني ثم جرّب متابعة مرة أخرى.",
         checkVerificationFailed: "تعذر التحقق من الحالة. حاول مرة أخرى.",
+        verificationLinkInvalid: "رابط التحقق هذا غير صالح أو منتهي الصلاحية. اطلب رابطًا جديدًا.",
         checking: "جارٍ التحقق...",
         checkingVerification: "جارٍ التحقق من حالتك...",
         sending: "جارٍ الإرسال...",
@@ -2572,9 +2583,9 @@ ${googleOnly
       <label for="s-email"${i18nAttr("email")}>${esc(t("email"))}</label>
       <input id="s-email" type="email" autocomplete="email" autofocus placeholder="you@example.com" required />
     <label for="s-pass"${i18nAttr("password")}>${esc(t("password"))}</label>
-    <input id="s-pass" type="password" autocomplete="new-password" placeholder="${esc(t("passwordMinPlaceholder"))}"${i18nPlaceholderAttr("passwordMinPlaceholder")} required minlength="${PASSWORD_MIN_LENGTH}" />
+    <input id="s-pass" type="password" autocomplete="new-password" placeholder="${esc(t("passwordMinPlaceholder"))}"${i18nPlaceholderAttr("passwordMinPlaceholder")} required minlength="${PASSWORD_MIN_LENGTH}" maxlength="${PASSWORD_MAX_LENGTH}" />
     <label for="s-pass2"${i18nAttr("confirmPassword")}>${esc(t("confirmPassword"))}</label>
-    <input id="s-pass2" type="password" autocomplete="new-password" placeholder="${esc(t("confirmPasswordPlaceholder"))}"${i18nPlaceholderAttr("confirmPasswordPlaceholder")} required minlength="${PASSWORD_MIN_LENGTH}" />
+    <input id="s-pass2" type="password" autocomplete="new-password" placeholder="${esc(t("confirmPasswordPlaceholder"))}"${i18nPlaceholderAttr("confirmPasswordPlaceholder")} required minlength="${PASSWORD_MIN_LENGTH}" maxlength="${PASSWORD_MAX_LENGTH}" />
       <button type="submit"${i18nAttr("createAccount")}>${esc(t("createAccount"))}</button>
 ${signupLegalNoteHtml}
 ${signupLocalModeNoteHtml}
@@ -2721,6 +2732,28 @@ ${signInJourneyInlineScript()}
       var fallback = __AN_AUTH_LOCALES[__AN_AUTH_DEFAULT_LOCALE] || {};
       return localized[key] || fallback[key] || key;
     }
+    function __anAuthErrorText(data, fallback) {
+      var candidate = data && (data.error || data.message);
+      if (typeof candidate !== 'string' || !candidate.trim()) return fallback;
+      var message = candidate.trim();
+      if (/failed query|\bselect\b.*\bfrom\b|\binsert\b.*\binto\b|\bupdate\b.*\bset\b|\bdelete\b.*\bfrom\b|\bsql\b|database|relation .* does not exist|column .* does not exist|syntax error|constraint|connection refused|econn|timeout/i.test(message)) {
+        return fallback;
+      }
+      return message;
+    }
+    function __anBindPasswordValidation(input) {
+      if (!input) return;
+      input.addEventListener('invalid', function() {
+        if (input.validity && input.validity.tooShort) {
+          input.setCustomValidity(__anT('passwordMinPlaceholder'));
+        } else if (input.validity && input.validity.tooLong) {
+          input.setCustomValidity('Choose a password with no more than ${PASSWORD_MAX_LENGTH} characters.');
+        }
+      });
+      input.addEventListener('input', function() {
+        input.setCustomValidity('');
+      });
+    }
     function __anSetAuthI18nKey(node, key) {
       if (!node || !key) return;
       node.setAttribute('data-i18n', key);
@@ -3275,7 +3308,7 @@ ${identitySsoScript}
       try {
         __anOpenOAuthUrl(__anGoogleAuthUrlPath() + '?' + params.toString());
       } catch(e) {
-        __anShowOAuthError(err, btn, 'Could not start Google sign-in redirect' + (flowId ? ' for flow ' + __anFlowDebugId(flowId) : '') + ': ' + (e && e.message ? e.message : 'unknown error'));
+        __anShowOAuthError(err, btn, __anT('failedToConnect'));
       }
     }
     function __anWaitForOAuthExchange(flowId, ret, btn, err) {
@@ -3295,7 +3328,7 @@ ${identitySsoScript}
           }
           if (data && data.error) {
             __anSetOAuthDebug('OAuth exchange returned an error: ' + (data.message || data.error), flowId);
-            __anShowOAuthError(err, btn, data.message || data.error);
+            __anShowOAuthError(err, btn, __anAuthErrorText(data, __anT('googleNotConfigured')));
             return;
           }
           if (data && data.pending && (__anOAuthPollCount === 1 || __anOAuthPollCount % 5 === 0)) {
@@ -3538,6 +3571,16 @@ ${googleOnly
 	        return false;
 	      }
 	    }
+	    function __anVerificationRedirectError() {
+	      try {
+	        var params = new URLSearchParams(location.search);
+        return params.get('error') === 'verification_link_invalid'
+          ? __anT('verificationLinkInvalid')
+          : '';
+      } catch (e) { // coercion-ok: malformed query has no verification error to render
+        return '';
+      }
+	    }
 	    function __anShowEmailValidationError(input, msg) {
 	      if (msg) {
 	        msg.textContent = __anT('invalidEmail');
@@ -3579,7 +3622,7 @@ ${googleOnly
         console.warn('[auth] Could not parse sign-in response', error);
         return null;
       });
-      var error = (data && (data.error || data.message)) || __anT('finishSignInFailed');
+      var error = __anAuthErrorText(data, __anT('finishSignInFailed'));
       return {
         ok: false,
         error: error,
@@ -3702,7 +3745,7 @@ ${googleOnly
 	        }
 	        var data = await res.json().catch(function() { return {}; });
 	        if (msg) {
-          msg.textContent = (data && (data.message || data.error)) || __anT('resendVerificationFailed');
+          msg.textContent = __anAuthErrorText(data, __anT('resendVerificationFailed'));
           msg.classList.add('show', 'error');
         }
         if (btn) {
@@ -3722,6 +3765,7 @@ ${googleOnly
     }
     (function initActiveTab() {
     var initial = __AN_AUTH_MODE === 'magic-link' ? 'magicLink' : 'signup';
+    var verificationError = __anVerificationRedirectError();
     try {
       var params = new URLSearchParams(location.search);
       var qp = params.get('tab');
@@ -3731,6 +3775,8 @@ ${googleOnly
         initial = qp;
 	      } else if (__anIsVerifiedRedirectSuccess()) {
 	        initial = 'login';
+	      } else if (verificationError) {
+	        initial = 'login';
 	      } else if (path === '/login' || path.endsWith('/login')) {
         initial = 'login';
       } else if (path === '/signup' || path.endsWith('/signup')) {
@@ -3742,6 +3788,13 @@ ${googleOnly
     } catch (e) {}
     if (initial === 'magicLink') showMagicLinkForm();
     else setActiveTab(initial, { persist: false });
+	    if (verificationError) {
+	      var verificationMsg = document.getElementById('l-msg');
+	      if (verificationMsg) {
+	        verificationMsg.textContent = verificationError;
+	        verificationMsg.classList.add('show', 'error');
+	      }
+	    }
 	      try {
 	        if (__anIsVerifiedRedirectSuccess()) {
 	          var rememberedEmail = readRememberedPendingSignupEmail();
@@ -3784,6 +3837,8 @@ ${googleOnly
   });
 
   var magicLinkForm = document.getElementById('magic-link-form');
+  __anBindPasswordValidation(document.getElementById('s-pass'));
+  __anBindPasswordValidation(document.getElementById('s-pass2'));
   var magicLinkEmail = document.getElementById('m-email');
   if (magicLinkEmail) {
     magicLinkEmail.addEventListener('input', updateMagicLinkSubmitState);
@@ -3820,7 +3875,7 @@ ${googleOnly
         showMagicLinkSuccess(email);
         return;
       }
-      msg.textContent = (data && (data.error || data.message)) || __anT('magicLinkFailed');
+      msg.textContent = __anAuthErrorText(data, __anT('magicLinkFailed'));
       msg.classList.add('show', 'error');
       btn.disabled = false;
       btn.textContent = originalLabel;
@@ -3887,7 +3942,7 @@ ${googleOnly
           showVerificationStep(email, pass);
           return;
         }
-      msg.textContent = data.error || __anT('registrationFailed');
+      msg.textContent = __anAuthErrorText(data, __anT('registrationFailed'));
       msg.classList.add('show', 'error');
       btn.disabled = false;
       btn.textContent = originalLabel;
@@ -3971,7 +4026,7 @@ ${googleOnly
         return;
       }
       var data = await res.json().catch(function() { return {}; });
-      msg.textContent = (data && (data.message || data.error)) || __anT('resetEmailFailed');
+      msg.textContent = __anAuthErrorText(data, __anT('resetEmailFailed'));
       msg.classList.add('show', 'error');
       btn.disabled = false;
       btn.textContent = original;
@@ -4016,7 +4071,7 @@ ${googleOnly
         return;
       }
       var data = await res.json().catch(function() { return {}; });
-      msg.textContent = data.error || __anT('invalidLogin');
+      msg.textContent = __anAuthErrorText(data, __anT('invalidLogin'));
       msg.classList.add('show');
       btn.disabled = false;
       btn.textContent = originalLabel;
@@ -4065,7 +4120,7 @@ ${renderGoogleButton
       if (data.url) {
         __anOpenOAuthUrl(data.url);
       } else {
-        err.textContent = data.message || __anT('googleNotConfigured');
+        err.textContent = __anAuthErrorText(data, __anT('googleNotConfigured'));
         err.classList.add('show');
         btn.disabled = false;
         __anGoogleSignInInFlight = false;
@@ -4228,9 +4283,9 @@ export function getResetPasswordHtml() {
   <p class="subtitle">Set a new password for your account.</p>
   <form id="reset-form">
     <label for="p1">New password</label>
-    <input id="p1" type="password" autocomplete="new-password" autofocus placeholder="At least ${PASSWORD_MIN_LENGTH} characters" required minlength="${PASSWORD_MIN_LENGTH}" />
+    <input id="p1" type="password" autocomplete="new-password" autofocus placeholder="At least ${PASSWORD_MIN_LENGTH} characters" required minlength="${PASSWORD_MIN_LENGTH}" maxlength="${PASSWORD_MAX_LENGTH}" />
     <label for="p2">Confirm password</label>
-    <input id="p2" type="password" autocomplete="new-password" placeholder="Confirm password" required minlength="${PASSWORD_MIN_LENGTH}" />
+    <input id="p2" type="password" autocomplete="new-password" placeholder="Confirm password" required minlength="${PASSWORD_MIN_LENGTH}" maxlength="${PASSWORD_MAX_LENGTH}" />
     <button type="submit">Save new password</button>
     <p class="msg" id="msg"></p>
   </form>
@@ -4250,20 +4305,51 @@ export function getResetPasswordHtml() {
     var params = new URLSearchParams(location.search);
     var token = params.get('token') || '';
     var msg = document.getElementById('msg');
+    var resetForm = document.getElementById('reset-form');
+    function resetErrorText(data, fallback) {
+      var candidate = data && (data.error || data.message);
+      if (typeof candidate !== 'string' || !candidate.trim()) return fallback;
+      var message = candidate.trim();
+      if (/failed query|\bselect\b.*\bfrom\b|\binsert\b.*\binto\b|\bupdate\b.*\bset\b|\bdelete\b.*\bfrom\b|\bsql\b|database|relation .* does not exist|column .* does not exist|syntax error|constraint|connection refused|econn|timeout/i.test(message)) {
+        return fallback;
+      }
+      if (/password.*(?:at least|minimum|min(?:imum)?|too short)/i.test(message)) {
+        return 'Choose a password with at least ${PASSWORD_MIN_LENGTH} characters.';
+      }
+      if (/password.*(?:at most|maximum|max(?:imum)?|too long)/i.test(message)) {
+        return 'Choose a password with no more than ${PASSWORD_MAX_LENGTH} characters.';
+      }
+      return message;
+    }
+    function bindPasswordValidation(input) {
+      if (!input) return;
+      input.addEventListener('invalid', function() {
+        if (input.validity && input.validity.tooShort) {
+          input.setCustomValidity('Choose a password with at least ${PASSWORD_MIN_LENGTH} characters.');
+        } else if (input.validity && input.validity.tooLong) {
+          input.setCustomValidity('Choose a password with no more than ${PASSWORD_MAX_LENGTH} characters.');
+        }
+      });
+      input.addEventListener('input', function() {
+        input.setCustomValidity('');
+      });
+    }
+    bindPasswordValidation(document.getElementById('p1'));
+    bindPasswordValidation(document.getElementById('p2'));
     if (!token) {
-      msg.textContent = 'Missing or invalid reset token. Request a new reset link.';
+      msg.textContent = 'This password reset link is missing or invalid. Request a new one.';
       msg.classList.add('show', 'error');
-      document.getElementById('reset-form').style.display = 'none';
+      resetForm.style.display = 'none';
       return;
     }
-    document.getElementById('reset-form').addEventListener('submit', async function(e) {
+    resetForm.addEventListener('submit', async function(e) {
       e.preventDefault();
       var btn = e.currentTarget.querySelector('button[type="submit"]');
       var p1 = document.getElementById('p1').value;
       var p2 = document.getElementById('p2').value;
       msg.classList.remove('show', 'error', 'success');
       if (p1 !== p2) {
-        msg.textContent = 'Passwords do not match';
+        msg.textContent = 'Passwords do not match.';
         msg.classList.add('show', 'error');
         return;
       }
@@ -4283,12 +4369,12 @@ export function getResetPasswordHtml() {
           return;
         }
         var data = await res.json().catch(function() { return {}; });
-        msg.textContent = (data && (data.message || data.error)) || 'Reset failed. The link may have expired — request a new one.';
+        msg.textContent = resetErrorText(data, "We couldn't update your password. The link may have expired; request a new one.");
         msg.classList.add('show', 'error');
         btn.disabled = false;
         btn.textContent = original;
       } catch (err) {
-        msg.textContent = 'Network error — please try again';
+        msg.textContent = "We couldn't reach the server. Check your connection and try again.";
         msg.classList.add('show', 'error');
         btn.disabled = false;
         btn.textContent = original;

package/dist/server/transcribe-voice.d.ts

@@ -20,6 +20,6 @@ export declare function createTranscribeVoiceHandler(): import("h3").EventHandle
     error: string;
     text?: undefined;
 } | {
-    error?: undefined;
     text: string;
+    error?: undefined;
 }>>;

package/dist/shared/password-policy.d.ts

@@ -1,3 +1,4 @@
 export declare const PASSWORD_MIN_LENGTH = 12;
 export declare const PASSWORD_MAX_LENGTH = 128;
-export declare const PASSWORD_MIN_LENGTH_MESSAGE = "Password must be at least 12 characters";
+export declare const PASSWORD_MIN_LENGTH_MESSAGE = "Choose a password with at least 12 characters.";
+export declare const PASSWORD_MAX_LENGTH_MESSAGE = "Choose a password with no more than 128 characters.";

package/dist/shared/password-policy.js

@@ -1,3 +1,4 @@
 export const PASSWORD_MIN_LENGTH = 12;
 export const PASSWORD_MAX_LENGTH = 128;
-export const PASSWORD_MIN_LENGTH_MESSAGE = `Password must be at least ${PASSWORD_MIN_LENGTH} characters`;
+export const PASSWORD_MIN_LENGTH_MESSAGE = `Choose a password with at least ${PASSWORD_MIN_LENGTH} characters.`;
+export const PASSWORD_MAX_LENGTH_MESSAGE = `Choose a password with no more than ${PASSWORD_MAX_LENGTH} characters.`;

package/dist/styles/agent-conversation.css

@@ -43,10 +43,16 @@
   border-radius: 999px;
   background: hsl(var(--popover));
   color: hsl(var(--foreground));
-  box-shadow: 0 10px 30px hsl(var(--background) / 0.28);
+  --agent-shadow: 0 0% 0%;
+  --agent-shadow-o: 0.14;
+  box-shadow: 0 10px 30px hsl(var(--agent-shadow) / var(--agent-shadow-o));
   cursor: pointer;
 }
 
+.dark .agent-conversation__scroll-bottom {
+  --agent-shadow-o: 0.08;
+}
+
 .agent-conversation-message {
   display: flex;
   width: 100%;
@@ -638,6 +644,17 @@
   font-size: 0.875em;
 }
 
+.agent-markdown-table-wrap {
+  max-width: 100%;
+  overflow-x: auto;
+  overscroll-behavior-inline: contain;
+}
+
+.agent-markdown-table-wrap > table {
+  min-width: 100%;
+  width: max-content;
+}
+
 .agent-markdown th,
 .agent-markdown td {
   border: 1px solid hsl(var(--border, 0 0% 20%));
@@ -653,7 +670,7 @@
 
 /* Streaming caret appended after last non-code paragraph while text is live. */
 .agent-markdown[data-streaming="true"]
-  > :last-child:not(pre):not(table)::after {
+  > :last-child:not(pre):not(table):not(.agent-markdown-table-wrap)::after {
   content: "";
   display: inline-block;
   width: 0.42em;
@@ -678,7 +695,7 @@
 
 @media (prefers-reduced-motion: reduce) {
   .agent-markdown[data-streaming="true"]
-    > :last-child:not(pre):not(table)::after {
+    > :last-child:not(pre):not(table):not(.agent-markdown-table-wrap)::after {
     animation: none;
     opacity: 0.28;
   }

package/dist/styles/agent-native.css

@@ -309,7 +309,9 @@
 .agent-sidebar-panel[data-agent-sidebar-animation="drawer"] {
   overflow: clip;
   will-change: transform;
-  box-shadow: -12px 0 30px hsl(var(--foreground) / 0.08);
+  --agent-shadow: 0 0% 0%;
+  --agent-shadow-o: 0.14;
+  box-shadow: -12px 0 30px hsl(var(--agent-shadow) / var(--agent-shadow-o));
   transition:
     transform 260ms var(--ease-drawer),
     width 260ms var(--ease-drawer);
@@ -329,14 +331,22 @@
 }
 
 .agent-sidebar-panel[data-agent-sidebar-animation="mobile"] {
+  --agent-shadow: 0 0% 0%;
+  --agent-shadow-o: 0.14;
   transform: var(
     --agent-sidebar-closed-transform,
     translateX(calc(100% + 1px))
   );
   will-change: transform;
+  box-shadow: 0 18px 40px hsl(var(--agent-shadow) / var(--agent-shadow-o));
   transition: transform 260ms var(--ease-drawer);
 }
 
+.dark .agent-sidebar-panel[data-agent-sidebar-animation="drawer"],
+.dark .agent-sidebar-panel[data-agent-sidebar-animation="mobile"] {
+  --agent-shadow-o: 0.08;
+}
+
 .agent-sidebar-panel[data-agent-sidebar-animation="mobile"][data-agent-sidebar-state="open"] {
   transform: translateX(0);
 }
@@ -1079,7 +1089,9 @@
     }
 
     ::view-transition-old(agent-native-chat),
-    ::view-transition-new(agent-native-chat) {
+    ::view-transition-new(agent-native-chat),
+    ::view-transition-old(agent-native-sidebar-drawer),
+    ::view-transition-new(agent-native-sidebar-drawer) {
       /* The default `block-size: auto` scales each snapshot by width, so as the
          panel narrows (896 -> 380) its captured height shrinks and the
          bottom-pinned chat field gets dragged upward (the "rises to half-page"

package/dist/styles/blocks.css

@@ -1333,6 +1333,138 @@
   direction: inherit;
 }
 
+/* Diagram arrows are geometry, not text glyphs. The clean path draws these
+   shapes with CSS; sketchy mode replaces them with the rough.js paths below. */
+.plan-diagram-frame :is(.diagram-arrow[data-arrow]) {
+  position: relative;
+  display: inline-block;
+  flex: 0 0 28px;
+  width: 28px;
+  height: 24px;
+  min-width: 28px;
+  font-size: 0 !important;
+  line-height: 1;
+}
+
+.plan-diagram-frame .diagram-arrow[data-arrow]::before,
+.plan-diagram-frame .diagram-arrow[data-arrow]::after {
+  position: absolute;
+  display: block;
+  content: "";
+  pointer-events: none;
+}
+
+.plan-diagram-frame
+  :is(
+    .diagram-arrow[data-arrow="right"],
+    .diagram-arrow[data-arrow="left"]
+  )::before {
+  top: calc(50% - 0.75px);
+  left: 3px;
+  width: 22px;
+  height: 1.5px;
+  background: currentColor;
+}
+
+.plan-diagram-frame
+  :is(
+    .diagram-arrow[data-arrow="up"],
+    .diagram-arrow[data-arrow="down"]
+  )::before {
+  top: 2px;
+  left: calc(50% - 0.75px);
+  width: 1.5px;
+  height: 20px;
+  background: currentColor;
+}
+
+.plan-diagram-frame .diagram-arrow[data-arrow="right"]::after,
+.plan-diagram-frame .diagram-arrow[data-arrow="left"]::after,
+.plan-diagram-frame .diagram-arrow[data-arrow="up"]::after,
+.plan-diagram-frame .diagram-arrow[data-arrow="down"]::after {
+  width: 7px;
+  height: 7px;
+  border-top: 1.5px solid currentColor;
+  border-right: 1.5px solid currentColor;
+}
+
+.plan-diagram-frame .diagram-arrow[data-arrow="right"]::after {
+  top: calc(50% - 4px);
+  right: 2px;
+  transform: rotate(45deg);
+}
+
+.plan-diagram-frame .diagram-arrow[data-arrow="left"]::after {
+  top: calc(50% - 4px);
+  left: 2px;
+  transform: rotate(225deg);
+}
+
+.plan-diagram-frame .diagram-arrow[data-arrow="up"]::after {
+  top: 0;
+  left: calc(50% - 4px);
+  transform: rotate(-45deg);
+}
+
+.plan-diagram-frame .diagram-arrow[data-arrow="down"]::after {
+  bottom: 0;
+  left: calc(50% - 4px);
+  transform: rotate(135deg);
+}
+
+.plan-diagram-frame .diagram-arrow[data-arrow="both"]::before {
+  top: calc(50% - 0.75px);
+  left: 3px;
+  width: 22px;
+  height: 1.5px;
+  background: currentColor;
+}
+
+.plan-diagram-frame .diagram-arrow[data-arrow="both"]::after {
+  inset: 3px;
+  background: currentColor;
+  clip-path: polygon(
+    0 50%,
+    22% 0,
+    22% 38%,
+    78% 38%,
+    78% 0,
+    100% 50%,
+    78% 100%,
+    78% 62%,
+    22% 62%,
+    22% 100%
+  );
+}
+
+.plan-diagram-frame .diagram-arrow[data-arrow="refresh"]::before {
+  top: 3px;
+  left: 5px;
+  width: 16px;
+  height: 16px;
+  border: 1.5px solid currentColor;
+  border-left-color: transparent;
+  border-radius: 50%;
+}
+
+.plan-diagram-frame .diagram-arrow[data-arrow="refresh"]::after {
+  top: 1px;
+  right: 2px;
+  width: 0;
+  height: 0;
+  border-right: 4px solid transparent;
+  border-bottom: 7px solid currentColor;
+  border-left: 4px solid transparent;
+  transform: rotate(35deg);
+}
+
+.plan-diagram-frame[data-style="sketchy"][data-rough-ready]
+  .diagram-arrow[data-arrow]::before,
+.plan-diagram-frame[data-style="sketchy"][data-rough-ready]
+  .diagram-arrow[data-arrow]::after {
+  opacity: 0;
+}
+
 .plan-diagram-frame[data-frame="show"] .plan-diagram-frame-content {
   padding: 0;
 }