@agent-native/core 0.176.1 → 0.176.2-nightly-20260831185956

package/dist/client/analytics.js

@@ -1,5 +1,7 @@
 import { ANALYTICS_CLIENT_PLATFORM_PROPERTY, } from "../shared/analytics-platform.js";
 import { llmConnectionTrackingProperties, } from "../shared/llm-connection.js";
+import { isQaTestEmail } from "../shared/qa-test-email.js";
+import { isSyntheticTrafficValue } from "../shared/test-traffic.js";
 import { toPostHogExceptionProperties } from "../tracking/posthog-exception.js";
 import { getAnalyticsClientPlatform } from "./analytics-platform.js";
 import { getOrCreateAnalyticsAnonymousId, getOrCreateAnalyticsSessionId, } from "./analytics-session.js";
@@ -176,6 +178,13 @@ function installLlmConnectionRefresh() {
 function readTrackingString(value) {
     return typeof value === "string" && value.trim() ? value.trim() : undefined;
 }
+function isQaTrackingIdentity(identity) {
+    return Boolean(identity &&
+        (isQaTestEmail(identity.userId) || isQaTestEmail(identity.userEmail)));
+}
+function isQaTrackingUser(user) {
+    return Boolean(user && (isQaTestEmail(user.id) || isQaTestEmail(user.email)));
+}
 function stopSessionReplayForAuthClear(previousIdentity) {
     if (!_sessionReplayOptions?.requireSignedInUser) {
         _sessionReplayIdentitySnapshot = null;
@@ -451,7 +460,13 @@ function isLocalAnalyticsHostname(hostname) {
         h.endsWith(".localhost") ||
         h.endsWith(".local"));
 }
+function isSyntheticBrowserTraffic() {
+    return (typeof window !== "undefined" &&
+        isSyntheticTrafficValue(window.__AGENT_NATIVE_SYNTHETIC_TRAFFIC__));
+}
 function ensureAmplitude() {
+    if (isSyntheticBrowserTraffic())
+        return false;
     if (_amplitudeInitialized)
         return true;
     const key = import.meta.env
@@ -718,6 +733,8 @@ function captureWithSentry(module, error, context) {
     });
 }
 function ensureSentry(loadWithoutDsn = false) {
+    if (isSyntheticBrowserTraffic())
+        return;
     if (_sentryInitialized || _sentryLoadPromise)
         return;
     const dsn = getClientSentryDsn();
@@ -737,6 +754,8 @@ function ensureSentry(loadWithoutDsn = false) {
             dsn,
             environment: resolveClientDeploymentEnvironment(),
             beforeSend(event) {
+                if (isSyntheticBrowserTraffic())
+                    return null;
                 event.tags = {
                     ...event.tags,
                     deployment_environment: resolveClientDeploymentEnvironment(),
@@ -803,6 +822,8 @@ function ensureSentry(loadWithoutDsn = false) {
  * for filtering Sentry by tenant.
  */
 export function setSentryUser(user, orgId) {
+    const previousIdentity = _trackingIdentity;
+    const suppressTracking = isQaTrackingUser(user);
     let shouldRetryReplay = false;
     if (user) {
         const userId = user.email || user.id;
@@ -817,11 +838,15 @@ export function setSentryUser(user, orgId) {
         else {
             clearTrackingIdentity();
         }
-        shouldRetryReplay = Boolean(user.email);
+        shouldRetryReplay = Boolean(user.email) && !suppressTracking;
     }
     else {
         clearTrackingIdentity();
     }
+    if (suppressTracking) {
+        _pendingSentryCaptures = [];
+        stopSessionReplayForAuthClear(previousIdentity);
+    }
     _trackingIdentityResolved = true;
     if (shouldRetryReplay &&
         _trackingContentCaptureEnabled &&
@@ -829,13 +854,13 @@ export function setSentryUser(user, orgId) {
         void startConfiguredSessionReplay(_sessionReplayOptions);
     }
     if (_sentryInitialized && _sentryModule) {
-        _sentryModule.setUser(user);
+        _sentryModule.setUser(suppressTracking ? null : user);
         if (orgId !== undefined) {
             _sentryModule.setTag("orgId", orgId ?? null);
         }
         return;
     }
-    _pendingSentryUser = user;
+    _pendingSentryUser = suppressTracking ? null : user;
     if (orgId !== undefined) {
         _pendingSentryOrgId = orgId ?? null;
     }
@@ -857,6 +882,10 @@ export function setTrackingIdentity(user, orgId) {
 export function captureClientException(error, context = {}) {
     if (typeof window === "undefined")
         return undefined;
+    if (isSyntheticBrowserTraffic())
+        return undefined;
+    if (isQaTrackingIdentity(_trackingIdentity))
+        return undefined;
     try {
         ensureSentry(true);
         if (_sentryModule)
@@ -905,6 +934,8 @@ function getAgentChatTrackingState() {
 export function trackAgentChatLifecycle(input) {
     if (typeof window === "undefined")
         return;
+    if (isSyntheticBrowserTraffic())
+        return;
     const surface = input.surface?.trim() || "app";
     const dedupeKey = [
         input.phase,
@@ -944,16 +975,22 @@ export function trackAgentChatLifecycle(input) {
                 : (replayResult?.reason ?? "not-configured"),
         };
         trackEvent("agent_chat_lifecycle", properties);
-        _sessionReplayModuleForCapture?.emitSessionReplayAgentChatEvent?.({
-            phase: input.phase,
-            surface,
-            ...(input.threadId ? { threadId: input.threadId } : {}),
-            ...(input.runId ? { runId: input.runId } : {}),
-            ...(input.tabId ? { tabId: input.tabId } : {}),
-        });
+        if (!isQaTrackingIdentity(_trackingIdentity)) {
+            _sessionReplayModuleForCapture?.emitSessionReplayAgentChatEvent?.({
+                phase: input.phase,
+                surface,
+                ...(input.threadId ? { threadId: input.threadId } : {}),
+                ...(input.runId ? { runId: input.runId } : {}),
+                ...(input.tabId ? { tabId: input.tabId } : {}),
+            });
+        }
     })();
 }
 export function configureTracking(options) {
+    if (isSyntheticBrowserTraffic()) {
+        _trackingContentCaptureEnabled = false;
+        return;
+    }
     if (options.clientPlatform) {
         _configuredAnalyticsClientPlatform = options.clientPlatform;
     }
@@ -1095,6 +1132,8 @@ function posthogErrorConfig() {
  * id, which `$identify` later aliases on login.
  */
 function sendPostHogExceptionEvent(event) {
+    if (isSyntheticBrowserTraffic())
+        return;
     const config = posthogErrorConfig();
     if (!config)
         return;
@@ -1142,6 +1181,10 @@ function sendPostHogExceptionEvent(event) {
     }
 }
 function sendExceptionEvent(event) {
+    if (isSyntheticBrowserTraffic())
+        return;
+    if (isQaTrackingIdentity(_trackingIdentity))
+        return;
     // Route through the existing first-party analytics ingest as a dedicated
     // `$exception` event. This reuses the public-key auth + sendBeacon/keepalive
     // transport; the server forks it into error_issues/error_events and still
@@ -1150,6 +1193,10 @@ function sendExceptionEvent(event) {
     sendPostHogExceptionEvent(event);
 }
 function emitExceptionToReplay(event) {
+    if (isSyntheticBrowserTraffic())
+        return;
+    if (isQaTrackingIdentity(_trackingIdentity))
+        return;
     _sessionReplayModuleForCapture?.emitSessionReplayException?.({
         type: event.type,
         message: event.message,
@@ -1280,7 +1327,8 @@ function replayExtraPropertiesWithDefaults(source) {
                 : {};
         const props = rawProps && typeof rawProps === "object" ? rawProps : {};
         const withDefaults = _getDefaultProps?.("session_replay", props) ?? props;
-        return applyTrackingIdentity(withDefaults, _trackingIdentity ?? _sessionReplayIdentitySnapshot);
+        const identity = _trackingIdentity ?? _sessionReplayIdentitySnapshot;
+        return applyTrackingIdentity(withDefaults, isQaTrackingIdentity(identity) ? null : identity);
     };
 }
 function replayEndpointFromTrackingEndpoint(value) {
@@ -1316,6 +1364,8 @@ function maybeInstallSessionReplay(config, tracking, start = true) {
     void startConfiguredSessionReplay(options);
 }
 async function waitForSessionReplayAuthIfRequired(options) {
+    if (isQaTrackingIdentity(_trackingIdentity))
+        return false;
     if (!options.requireSignedInUser)
         return true;
     if (_trackingIdentity?.userEmail)
@@ -1331,9 +1381,12 @@ async function waitForSessionReplayAuthIfRequired(options) {
     catch {
         // best-effort; missing identity below keeps replay off
     }
-    return !!_trackingIdentity?.userEmail;
+    return (!!_trackingIdentity?.userEmail && !isQaTrackingIdentity(_trackingIdentity));
 }
 async function startConfiguredSessionReplay(options) {
+    if (isSyntheticBrowserTraffic()) {
+        return { started: false, reason: "disabled" };
+    }
     if (_sessionReplayStartPromise)
         return _sessionReplayStartPromise;
     _sessionReplayStartPromise = (async () => {
@@ -1353,7 +1406,9 @@ async function startConfiguredSessionReplay(options) {
         }
         return mod.startSessionReplay({
             ...options,
-            shouldStart: () => _trackingContentCaptureEnabled && (options.shouldStart?.() ?? true),
+            shouldStart: () => _trackingContentCaptureEnabled &&
+                !isQaTrackingIdentity(_trackingIdentity) &&
+                (options.shouldStart?.() ?? true),
         });
     })()
         .catch(() => ({ started: false, reason: "import-failed" }))
@@ -1363,6 +1418,9 @@ async function startConfiguredSessionReplay(options) {
     return _sessionReplayStartPromise;
 }
 export async function startSessionReplay(options = {}) {
+    if (isSyntheticBrowserTraffic()) {
+        return { started: false, reason: "disabled" };
+    }
     if (!_trackingContentCaptureEnabled) {
         return { started: false, reason: "disabled" };
     }
@@ -1374,10 +1432,15 @@ export async function startSessionReplay(options = {}) {
     _sessionReplayModuleForCapture = mod;
     return mod.startSessionReplay({
         ...configured,
-        shouldStart: () => _trackingContentCaptureEnabled && (configured.shouldStart?.() ?? true),
+        shouldStart: () => _trackingContentCaptureEnabled &&
+            !isQaTrackingIdentity(_trackingIdentity) &&
+            (configured.shouldStart?.() ?? true),
     });
 }
 export async function maybeStartSessionReplay(options = {}) {
+    if (isSyntheticBrowserTraffic()) {
+        return { started: false, reason: "disabled" };
+    }
     if (!_trackingContentCaptureEnabled) {
         return { started: false, reason: "disabled" };
     }
@@ -1388,7 +1451,9 @@ export async function maybeStartSessionReplay(options = {}) {
     const mod = await import("./session-replay.js");
     return mod.maybeStartSessionReplay({
         ...configured,
-        shouldStart: () => _trackingContentCaptureEnabled && (configured.shouldStart?.() ?? true),
+        shouldStart: () => _trackingContentCaptureEnabled &&
+            !isQaTrackingIdentity(_trackingIdentity) &&
+            (configured.shouldStart?.() ?? true),
     });
 }
 export async function stopSessionReplay(reason = "manual") {
@@ -1550,6 +1615,8 @@ function installPageviewTracking() {
     });
 }
 function sendAgentNativeAnalytics(name, properties) {
+    if (isSyntheticBrowserTraffic())
+        return;
     if (isLocalAnalyticsHostname(window.location.hostname))
         return;
     const publicKey = _agentNativeAnalyticsPublicKey ||
@@ -1593,6 +1660,10 @@ function sendAgentNativeAnalytics(name, properties) {
 export function trackEvent(name, params) {
     if (typeof window === "undefined")
         return;
+    if (isSyntheticBrowserTraffic())
+        return;
+    if (isQaTrackingIdentity(_trackingIdentity))
+        return;
     ensureSentry();
     const props = resolveProps(name, params);
     const amplitudeProps = amplitudeEventProperties(name, props);

package/dist/client/app-providers.js

@@ -66,6 +66,7 @@ import { AgentNativeRouteWarmup } from "./route-warmup.js";
 import { RouteTransitionIndicator } from "./RouteTransitionIndicator.js";
 import { RuntimeConfigNotice } from "./RuntimeConfigNotice.js";
 import { EMBEDDED_THEME_CHANGE_EVENT, applyEmbeddedThemeUpdate, parseEmbeddedThemeUpdate, } from "./theme.js";
+import { createAgentNativeServerActionWebMcpRegistration } from "./webmcp.js";
 const DEFAULT_TOASTER = (_jsx(Toaster, { richColors: true, position: "bottom-left", offset: { bottom: 44, left: 32 }, mobileOffset: { bottom: 44, left: 16 } }));
 function RoutedAppEnhancements() {
     const isInRouter = useInRouterContext();
@@ -73,6 +74,17 @@ function RoutedAppEnhancements() {
         return null;
     return (_jsxs(_Fragment, { children: [_jsx(AgentNativeRouteWarmup, {}), _jsx(RouteTransitionIndicator, {})] }));
 }
+function AutomaticWebMcpActionRegistration() {
+    useEffect(() => {
+        const registration = createAgentNativeServerActionWebMcpRegistration();
+        void registration.start().catch(() => {
+            // WebMCP is progressive enhancement. Session expiry or a transient
+            // manifest failure must not prevent the authenticated app from loading.
+        });
+        return () => registration.stop();
+    }, []);
+    return null;
+}
 function readDocumentTitleFallback() {
     const selectors = [
         'meta[name="application-name"]',
@@ -153,5 +165,5 @@ export function AppProviders({ queryClient, isPublicPath = false, clientOnlyFall
     if (isPublicPath) {
         return (_jsx(ProvidersInner, { queryClient: queryClient, defaultTheme: defaultTheme, themeAttribute: themeAttribute, tooltipDelayDuration: tooltipDelayDuration, toaster: toaster, disableThemeTransitions: disableThemeTransitions, i18n: i18n, documentTitleFallback: documentTitleFallback, showProductionEnvironmentBadge: false, children: children }));
     }
-    return (_jsx(ClientOnly, { fallback: fallback, children: _jsx(ProvidersInner, { queryClient: queryClient, defaultTheme: defaultTheme, themeAttribute: themeAttribute, tooltipDelayDuration: tooltipDelayDuration, toaster: toaster, disableThemeTransitions: disableThemeTransitions, i18n: i18n, documentTitleFallback: documentTitleFallback, showProductionEnvironmentBadge: !sessionBypass, children: _jsx(RequireSession, { bypass: sessionBypass, fallback: fallback, children: sessionBypass ? (children) : (_jsx(FirstRunOnboardingStartupGate, { children: children })) }) }) }));
+    return (_jsx(ClientOnly, { fallback: fallback, children: _jsx(ProvidersInner, { queryClient: queryClient, defaultTheme: defaultTheme, themeAttribute: themeAttribute, tooltipDelayDuration: tooltipDelayDuration, toaster: toaster, disableThemeTransitions: disableThemeTransitions, i18n: i18n, documentTitleFallback: documentTitleFallback, showProductionEnvironmentBadge: !sessionBypass, children: _jsx(RequireSession, { bypass: sessionBypass, fallback: fallback, children: sessionBypass ? (children) : (_jsxs(FirstRunOnboardingStartupGate, { children: [_jsx(AutomaticWebMcpActionRegistration, {}), children] })) }) }) }));
 }

package/dist/client/auth/AuthPage.d.ts

@@ -0,0 +1,87 @@
+/** @jsxRuntime classic */
+import * as React from "react";
+export type AuthView = "signup" | "login" | "forgot" | "verification" | "magicLink" | "magicLinkSent" | "googleOnly";
+export interface AuthMarketingProps {
+    appName: string;
+    tagline?: string;
+    description?: string;
+    features?: string[];
+}
+export interface AuthLocaleOption {
+    value: string;
+    label: string;
+}
+export interface AuthLegalNotice {
+    termsUrl: string;
+    privacyUrl: string;
+    termsLabel?: string;
+    privacyLabel?: string;
+    prefix?: string;
+    connector?: string;
+    suffix?: string;
+}
+export interface AuthPageProps {
+    authMode: "magic-link" | "password";
+    googleOnly: boolean;
+    initialPrompt: boolean;
+    initialView: AuthView;
+    appBasePath: string;
+    workspaceRuntime: boolean;
+    trackingApp: string;
+    defaultLocale: string;
+    localeStorageKey: string;
+    locales: Record<string, Record<string, string>>;
+    localeMetadata: Record<string, {
+        dir?: string;
+    }>;
+    localeOptions: AuthLocaleOption[];
+    marketing?: AuthMarketingProps;
+    marketingLocales: Record<string, AuthMarketingProps>;
+    brandMarkSrc: string;
+    githubUrl: string;
+    showGoogle: boolean;
+    signupLegalNotice?: AuthLegalNotice;
+    signupLocalModeNote?: {
+        text: string;
+        command: string;
+    };
+    connectionLabel: string;
+    docsAuthUrl: string;
+    identitySsoEnabled: boolean;
+    publicOAuthOrigin: string;
+    workspaceGatewayReturnOrigin: string;
+    googleAuthMode: "popup" | "redirect" | "auto";
+    builderPreviewLocalDevEnabled: boolean;
+    environmentBetaHosts: Record<string, string>;
+    betaForceQueryParam: string;
+    betaForceSessionStorageKey: string;
+    betaOptOutQueryParam: string;
+    betaOptOutStorageKey: string;
+    betaOptOutDurationMs: number;
+    passwordMinLength: number;
+    passwordMaxLength: number;
+    passwordMaxCopy: string;
+}
+export declare function shouldRetryAuthSessionProbe(response: Pick<Response, "status">, readable: boolean): boolean;
+export declare function isAgentNativeDesktop(userAgent?: string): boolean;
+export declare function isElectron(userAgent?: string): boolean;
+/**
+ * Builder's desktop webview uses Electron without the Agent-Native marker.
+ * This only selects the local workspace return origin; native deep-link
+ * handling remains exclusive to Agent-Native Desktop.
+ */
+export declare function isBuilderDesktop(userAgent?: string): boolean;
+export declare function normalizeOAuthReturnPath(target: string, origin?: string): string;
+export declare function resolveOAuthReturnOrigin(input: {
+    previewOrigin: string;
+    workspaceGatewayReturnOrigin: string;
+    userAgent: string;
+}): string;
+export declare function oauthReturnTarget(target: string, workspaceGatewayReturnOrigin: string, userAgent?: string): string;
+export declare function resolveGoogleAuthUrlPath(input: {
+    builderPreview: boolean;
+    currentOrigin: string;
+    publicOAuthOrigin: string;
+    runtimeAppBasePath: string;
+}): string;
+export declare function AuthPage(props: AuthPageProps): React.JSX.Element;