@agent-native/core 0.201.1 → 0.202.0-nightly-20261006033736

package/dist/server/onboarding-html.js

@@ -1812,6 +1812,34 @@ export function getOnboardingHtml(opts = {}) {
     text-align: center;
   }
   .auth-fallback p { opacity: 0.65; font-size: 0.8125rem; }
+  .auth-page {
+    --auth-wave-bg: #0a0a0a; /* guard:allow-raw-color - standalone auth canvas base */
+    --auth-wave-fg: #aeadac; /* guard:allow-raw-color - shared wave foreground */
+    --b-bg-page: var(--auth-wave-bg);
+    --b-hero-shader-fg: var(--auth-wave-fg);
+    --b-hero-shader-brightness: 3;
+    --b-hero-shader-opacity: 0.3;
+    position: relative;
+    isolation: isolate;
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    justify-content: center;
+    width: 100%;
+    min-height: 100vh;
+    min-height: 100svh;
+  }
+  .auth-page[data-auth-marketing="true"] {
+    align-items: stretch;
+    justify-content: flex-start;
+  }
+  .auth-page-content { position: relative; z-index: 1; width: 100%; }
+  .auth-wave-background {
+    position: fixed;
+    inset: 0;
+    z-index: 0;
+    pointer-events: none;
+  }
   .auth-centered {
     display: flex;
     justify-content: center;
@@ -1859,13 +1887,6 @@ export function getOnboardingHtml(opts = {}) {
     overflow: hidden;
     padding: 3rem 3.5rem;
   }
-  .auth-marketing-visual > [data-agent-native-marketing-background] {
-    position: absolute;
-    inset: 0;
-    width: 100%;
-    height: 100%;
-    transform: none;
-  }
   .auth-marketing-visual .marketing-content {
     position: relative;
     z-index: 1;
@@ -1890,7 +1911,6 @@ export function getOnboardingHtml(opts = {}) {
   }
   .auth-marketing-home .form-panel > .card { margin-block: auto; }
   @media not all and (min-width: 901px) {
-    .auth-marketing-home .auth-marketing-screenshot-wrap { display: none; }
     body.has-marketing {
       align-items: flex-start;
       justify-content: flex-start;
@@ -1935,7 +1955,7 @@ export function getOnboardingHtml(opts = {}) {
     font-synthesis: none;
   }
   .auth-marketing-home {
-    background: var(--auth-marketing-right-bg);
+    background: transparent;
     color: var(--auth-marketing-foreground);
   }
   .auth-marketing-home .auth-marketing-top-right {
@@ -1957,43 +1977,12 @@ export function getOnboardingHtml(opts = {}) {
     border: 0;
   }
   .auth-marketing-home .marketing-panel {
-    background: var(--auth-marketing-left-bg);
+    background: transparent;
   }
   .auth-marketing-home .auth-marketing-visual {
     min-height: 100vh;
     padding: 4.5rem 5rem 4rem;
-    background: var(--auth-marketing-left-bg);
-  }
-  .auth-marketing-home .auth-marketing-screenshot-wrap {
-    position: fixed;
-    inset: 0;
-    z-index: 0;
-    display: block;
-    width: 100%;
-    height: 100%;
-    max-width: none;
-    max-height: none;
-    margin: 0;
-    border-radius: 0;
-    box-shadow: none;
-  }
-  .auth-marketing-home .auth-marketing-screenshot {
-    display: block;
-    width: 100%;
-    height: 100%;
-    max-width: none;
-    max-height: none;
-    filter: none;
-    background:
-      radial-gradient(ellipse 82% 72% at 80% 64%, color-mix(in srgb, var(--auth-marketing-foreground) 16%, transparent), transparent 72%),
-      radial-gradient(ellipse 48% 36% at 24% 26%, color-mix(in srgb, var(--auth-marketing-foreground) 8%, transparent), transparent 82%);
-  }
-  .auth-marketing-home [data-agent-native-marketing-background] {
-    position: fixed;
-    inset: 0;
-    width: 100%;
-    height: 100%;
-    transform: translateY(-5vh);
+    background: transparent;
   }
   .auth-marketing-home .auth-marketing-visual .marketing-content {
     min-height: calc(100vh - 8.5rem);
@@ -2070,10 +2059,11 @@ export function getOnboardingHtml(opts = {}) {
   }
   .auth-marketing-home .form-panel {
     padding: 0 5rem;
-    background: var(--auth-marketing-right-bg);
+    background: transparent;
     border-inline-start: 1px solid var(--auth-marketing-border);
     position: relative;
     z-index: 1;
+    backdrop-filter: blur(10px);
   }
   .auth-marketing-home .form-panel > .card {
     width: min(27.5rem, 100%);
@@ -2124,17 +2114,6 @@ export function getOnboardingHtml(opts = {}) {
     text-decoration: underline;
     text-underline-offset: 0.125rem;
   }
-  .auth-marketing-home .auth-marketing-signup-wave {
-    height: clamp(10rem, 24vh, 15rem);
-    margin-top: 1.25rem;
-    opacity: 0.6;
-    overflow: hidden;
-    pointer-events: none;
-  }
-  .auth-marketing-home .auth-marketing-signup-wave-canvas {
-    width: 100%;
-    height: 100%;
-  }
   body.has-marketing .locale-picker {
     top: auto;
     bottom: max(1.25rem, env(safe-area-inset-bottom));
@@ -2142,20 +2121,12 @@ export function getOnboardingHtml(opts = {}) {
   }
   @media (prefers-color-scheme: light) {
     body.has-marketing {
-      --b-hero-ocean-opacity: 0.3;
-      --auth-marketing-left-bg: Canvas;
-      --auth-marketing-right-bg: Canvas;
-      --auth-marketing-foreground: CanvasText;
-      --auth-marketing-muted: GrayText;
-      --auth-marketing-subtle: GrayText;
-      --auth-marketing-border: color-mix(in srgb, CanvasText 18%, transparent);
-      --auth-marketing-badge-bg: color-mix(in srgb, CanvasText 7%, Canvas);
-      color-scheme: light;
+      --auth-marketing-border: color-mix(in srgb, var(--auth-marketing-foreground) 18%, transparent);
     }
     .auth-marketing-home .auth-marketing-visual,
     .auth-marketing-home .marketing-panel,
     .auth-marketing-home .form-panel {
-      background: Canvas;
+      background: transparent;
     }
     .auth-marketing-home .card input {
       color: var(--auth-marketing-foreground);
@@ -2174,9 +2145,6 @@ export function getOnboardingHtml(opts = {}) {
     .auth-marketing-home .card button[type="submit"] {
       border: 1px solid var(--auth-marketing-border);
     }
-    .auth-marketing-home .app-name img.brand-mark {
-      filter: grayscale(1) brightness(0);
-    }
   }
   @media not all and (min-width: 901px) {
     .auth-marketing-home {

package/dist/server/release-schema.js

@@ -225,6 +225,10 @@ const FRAMEWORK_SCHEMA_ENSURES = [
         "RemoteRunEvents",
         () => import("../integrations/remote-run-events-store.js").then((m) => m.ensureTable()),
     ],
+    [
+        "ResourceAccessRequests",
+        () => import("../sharing/access-request-store.js").then((m) => m.ensureTable()),
+    ],
     [
         "ResourceChanges",
         () => import("../resource-changes/store.js").then((m) => m.ensureResourceChangeTables()),

package/dist/server/short-lived-token.d.ts

@@ -31,6 +31,13 @@ export declare function signShortLivedToken(claims: ShortLivedTokenClaims): stri
  * not surface the reason to viewers (it's useful for server-side logs only).
  */
 export declare function verifyShortLivedToken(token: string, expectedResourceId: string): VerifyResult;
+export declare function signCompactShortLivedToken(claims: ShortLivedTokenClaims): string;
+/**
+ * Verify a token produced by {@link signCompactShortLivedToken}. A token for a
+ * different resource, and any legacy token, fails as `bad_signature` — the id
+ * is not in the payload, so a mismatch is indistinguishable from tampering.
+ */
+export declare function verifyCompactShortLivedToken(token: string, expectedResourceId: string): VerifyResult;
 /** Payload `typ` discriminator for realtime subscribe tokens. */
 export declare const REALTIME_SUBSCRIBE_TOKEN_TYPE = "rt-subscribe";
 export interface RealtimeSubscribeClaims {

package/dist/server/short-lived-token.js

@@ -1,6 +1,7 @@
 import crypto from "node:crypto";
 import { getWorkspaceA2ADerivedSecret } from "./derived-secret.js";
 const DEFAULT_TTL_SECONDS = 600;
+const MAX_COMPACT_AGENT_LABEL_ENCODED_BYTES = 16;
 let _devSigningKey;
 function getSigningKey() {
     const secret = process.env.OAUTH_STATE_SECRET ||
@@ -94,6 +95,64 @@ export function verifyShortLivedToken(token, expectedResourceId) {
         agentLabel: claims.agentLabel,
     };
 }
+function compactSignature(resourceId, payloadStr) {
+    return hmacB64(`agent-access\n${resourceId}\n${payloadStr}`, getSigningKey());
+}
+export function signCompactShortLivedToken(claims) {
+    const ttl = claims.ttlSeconds ?? DEFAULT_TTL_SECONDS;
+    const payload = {
+        e: Math.floor(Date.now() / 1000) + ttl,
+    };
+    if (claims.viewerEmail)
+        payload.v = claims.viewerEmail;
+    if (claims.agentLabel) {
+        let label = "";
+        let encodedBytes = 0;
+        for (const character of claims.agentLabel) {
+            const characterBytes = Buffer.byteLength(JSON.stringify(character)) - 2;
+            if (encodedBytes + characterBytes > MAX_COMPACT_AGENT_LABEL_ENCODED_BYTES)
+                break;
+            label += character;
+            encodedBytes += characterBytes;
+        }
+        if (label)
+            payload.l = label;
+    }
+    const payloadStr = base64UrlEncode(JSON.stringify(payload));
+    return `${payloadStr}.${compactSignature(claims.resourceId, payloadStr)}`;
+}
+/**
+ * Verify a token produced by {@link signCompactShortLivedToken}. A token for a
+ * different resource, and any legacy token, fails as `bad_signature` — the id
+ * is not in the payload, so a mismatch is indistinguishable from tampering.
+ */
+export function verifyCompactShortLivedToken(token, expectedResourceId) {
+    if (typeof token !== "string" || !token.includes(".")) {
+        return { ok: false, reason: "malformed" };
+    }
+    const [payloadStr, sig] = token.split(".", 2);
+    if (!payloadStr || !sig)
+        return { ok: false, reason: "malformed" };
+    if (!timingSafeEqualB64(sig, compactSignature(expectedResourceId, payloadStr))) {
+        return { ok: false, reason: "bad_signature" };
+    }
+    let claims;
+    try {
+        claims = JSON.parse(base64UrlDecode(payloadStr).toString("utf8"));
+    }
+    catch {
+        return { ok: false, reason: "bad_payload" };
+    }
+    if (typeof claims.e !== "number")
+        return { ok: false, reason: "bad_payload" };
+    if ((claims.v !== undefined && typeof claims.v !== "string") ||
+        (claims.l !== undefined && typeof claims.l !== "string")) {
+        return { ok: false, reason: "bad_payload" };
+    }
+    if (claims.e * 1000 < Date.now())
+        return { ok: false, reason: "expired" };
+    return { ok: true, viewerEmail: claims.v, agentLabel: claims.l };
+}
 // ── Realtime subscribe tokens ────────────────────────────────────────────────
 //
 // An identity-bearing extension of the same HMAC discipline, used by the hosted

package/dist/shared/analytics-anonymous-id.d.ts

@@ -1,4 +1,5 @@
 export declare const ANALYTICS_ANONYMOUS_ID_COOKIE_NAME = "an_aid";
 export declare const ANALYTICS_ANONYMOUS_ID_COOKIE_MAX_AGE_SECONDS: number;
+export declare const ANALYTICS_ANONYMOUS_ID_MAX_LENGTH = 128;
 export declare function normalizeAnalyticsAnonymousId(value: unknown): string | undefined;
 export declare function serializeAnalyticsAnonymousIdCookie(value: unknown): string | undefined;

package/dist/shared/analytics-anonymous-id.js

@@ -1,6 +1,6 @@
 export const ANALYTICS_ANONYMOUS_ID_COOKIE_NAME = "an_aid";
 export const ANALYTICS_ANONYMOUS_ID_COOKIE_MAX_AGE_SECONDS = 60 * 60 * 24 * 30;
-const ANALYTICS_ANONYMOUS_ID_MAX_LENGTH = 128;
+export const ANALYTICS_ANONYMOUS_ID_MAX_LENGTH = 128;
 const ANALYTICS_ANONYMOUS_ID_PATTERN = /^[A-Za-z0-9_-]+$/;
 export function normalizeAnalyticsAnonymousId(value) {
     if (typeof value !== "string")

package/dist/shared/attribution-source.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Whether a visit says where the person came from. The browser uses this to
+ * decide which visits to keep as first and last touch, and the server uses the
+ * same share-link rules to derive `referral_source`, so the two can't drift.
+ */
+export interface AttributionTouch {
+    ref?: string;
+    via?: string;
+    utm_source?: string;
+    utm_medium?: string;
+    utm_campaign?: string;
+    utm_content?: string;
+    utm_term?: string;
+    gclid?: string;
+    msclkid?: string;
+    vector_source?: string;
+    landing_path?: string;
+    landing_referrer?: string;
+    site_referrer?: string;
+}
+export declare function shareLandingSource(path: string | undefined): "clip_share" | "plan_share" | undefined;
+export declare function isFirstPartyHost(host: string | undefined): boolean;
+/**
+ * Whether a referrer host says where someone came from. Moving between our own
+ * apps and the marketing site, a local dev server, or returning from Google
+ * sign-in is navigation, not a source. The browser and the server both use
+ * this, so capture and `referral_source` agree.
+ */
+export declare function isSourceReferrerHost(host: string | undefined): boolean;
+export declare function hasAttributionSource(touch: AttributionTouch | null | undefined): boolean;

package/dist/shared/attribution-source.js

@@ -0,0 +1,65 @@
+const TAG_FIELDS = [
+    "ref",
+    "via",
+    "utm_source",
+    "utm_medium",
+    "utm_campaign",
+    "utm_content",
+    "utm_term",
+    "gclid",
+    "msclkid",
+    "vector_source",
+];
+const PLAN_SHARE_PATH_SEGMENTS = [
+    "/p/",
+    "/plan/",
+    "/plans/",
+    "/recaps/",
+    "/share-plan/",
+];
+export function shareLandingSource(path) {
+    if (!path)
+        return undefined;
+    if (path.startsWith("/share/"))
+        return "clip_share";
+    if (PLAN_SHARE_PATH_SEGMENTS.some((segment) => path.includes(segment))) {
+        return "plan_share";
+    }
+    return undefined;
+}
+export function isFirstPartyHost(host) {
+    const normalized = host?.trim().toLowerCase().replace(/\.$/, "") ?? "";
+    return (normalized === "agent-native.com" ||
+        normalized.endsWith(".agent-native.com"));
+}
+// Coming back from Google sign-in sends this referrer. It's a step in signing
+// in, never where someone heard about us.
+const SIGN_IN_HOSTS = new Set(["accounts.google.com"]);
+// A developer's own machine, with or without a port.
+const LOCAL_HOSTS = new Set(["localhost", "127.0.0.1", "[::1]", "0.0.0.0"]);
+/**
+ * Whether a referrer host says where someone came from. Moving between our own
+ * apps and the marketing site, a local dev server, or returning from Google
+ * sign-in is navigation, not a source. The browser and the server both use
+ * this, so capture and `referral_source` agree.
+ */
+export function isSourceReferrerHost(host) {
+    const normalized = host?.trim().toLowerCase().replace(/\.$/, "") ?? "";
+    if (!normalized)
+        return false;
+    const hostname = normalized.startsWith("[")
+        ? normalized.slice(0, normalized.indexOf("]") + 1)
+        : normalized.split(":")[0];
+    return (!isFirstPartyHost(hostname) &&
+        !LOCAL_HOSTS.has(hostname) &&
+        !SIGN_IN_HOSTS.has(hostname));
+}
+export function hasAttributionSource(touch) {
+    if (!touch)
+        return false;
+    if (TAG_FIELDS.some((field) => !!touch[field]?.trim()))
+        return true;
+    if (shareLandingSource(touch.landing_path))
+        return true;
+    return [touch.landing_referrer, touch.site_referrer].some(isSourceReferrerHost);
+}

package/dist/sharing/access-request-store.d.ts

@@ -0,0 +1,96 @@
+import { type DbExec } from "../db/client.js";
+import type { ShareRole } from "./schema.js";
+/**
+ * Requests from signed-in people who hold a link to a resource they can't
+ * open. One row per resource and requester: asking again reopens the same row
+ * with a new generation, so owners are never notified twice for one ask.
+ */
+export type AccessRequestState = "pending" | "approved" | "declined";
+export interface AccessRequestRow {
+    id: string;
+    resourceType: string;
+    resourceId: string;
+    requesterEmail: string;
+    requesterName: string | null;
+    /** The resource owner when the request was made, for per-owner limits. */
+    ownerEmail: string;
+    note: string | null;
+    state: AccessRequestState;
+    /** Increments each time a closed request is asked again. */
+    generation: number;
+    /** When this generation was asked, in epoch ms. */
+    requestedAt: number;
+    /** When the requester first asked for this resource, in epoch ms. */
+    createdAt: number;
+    decidedBy: string | null;
+    decidedAt: number | null;
+    grantedRole: ShareRole | null;
+    /** Whether anyone was told about this generation. */
+    delivered: boolean;
+}
+export declare function ensureTable(): Promise<void>;
+export declare function getAccessRequest(id: string): Promise<AccessRequestRow | null>;
+export declare function findAccessRequest(resourceType: string, resourceId: string, requesterEmail: string): Promise<AccessRequestRow | null>;
+export declare function listPendingAccessRequests(resourceType: string, resourceId: string, limit: number): Promise<AccessRequestRow[]>;
+/**
+ * How many requests were asked since `since` by one requester or against one
+ * owner, and when the oldest of them was asked.
+ */
+export declare function countRecentAccessRequests(by: {
+    requesterEmail: string;
+} | {
+    ownerEmail: string;
+}, since: number): Promise<{
+    count: number;
+    oldestAt: number | null;
+}>;
+export interface OpenAccessRequestInput {
+    resourceType: string;
+    resourceId: string;
+    requesterEmail: string;
+    requesterName: string | null;
+    ownerEmail: string;
+    note: string | null;
+    now: number;
+    /** A request declined after this time stays closed instead of reopening. */
+    declinedCooldownStart: number;
+    /**
+     * A pending request nobody was told about, asked before this time, is
+     * claimed to be sent again; one asked later may still be sending.
+     */
+    sendWindowStart: number;
+}
+/**
+ * Opens a request, or reopens a closed one as a new generation. A pending
+ * request whose send was cut off before anyone was told is claimed again in
+ * its own generation, so recipients the cut-off send reached get nothing new.
+ * Returns `opened: false` with the existing row when a request is already
+ * pending, or was declined too recently to ask again, so the caller sends
+ * nothing.
+ */
+export declare function openAccessRequest(input: OpenAccessRequestInput): Promise<{
+    request: AccessRequestRow;
+    opened: boolean;
+}>;
+/**
+ * Withdraws a request that was just opened but reached nobody, so asking
+ * again isn't blocked and doesn't count toward the limits. Only the ask that
+ * opened or claimed it at `requestedAt` can: one another ask has claimed
+ * since, or already delivered, stays.
+ */
+export declare function deleteAccessRequest(id: string, generation: number, requestedAt: number): Promise<void>;
+export declare function recordAccessRequestDelivery(id: string, generation: number, delivery: Record<string, unknown>): Promise<void>;
+/**
+ * Closes a pending request. Only a request still pending in the generation
+ * the decider saw changes, so a decision on a stale page can't close a newer
+ * ask and two people can't both decide one. Pass the transaction a grant runs
+ * in so both commit together.
+ */
+export declare function decideAccessRequest(input: {
+    id: string;
+    generation: number;
+    state: Exclude<AccessRequestState, "pending">;
+    decidedBy: string;
+    grantedRole: ShareRole | null;
+    now: number;
+}, exec?: DbExec): Promise<AccessRequestRow | null>;