@agent-native/core 0.22.32 → 0.22.34

package/dist/scripts/dev-session.js

@@ -9,20 +9,16 @@
  * this helper every db-* CLI run hands the user a stack trace.
  *
  * What this does: when the runner is about to dispatch, resolve a real
- * email by reading the most-recent row from the legacy `sessions` table
- * (the same table that `addSession()` writes from google-oauth.ts and the
- * A2A receiver fallback already consults). The runner then wraps dispatch
- * in `runWithRequestContext({ userEmail })` so the action sees a real
- * identity.
+ * email from the legacy `sessions` table (the same table that
+ * `addSession()` writes from google-oauth.ts and the A2A receiver fallback
+ * already consults). The runner then wraps dispatch in
+ * `runWithRequestContext({ userEmail })` so the action sees a real identity.
  *
- * SHARED-DEV-BOX CAVEAT: the `SELECT email FROM sessions ORDER BY
- * created_at DESC LIMIT 1` query is unscoped — on a machine where
- * multiple developers have signed in (or after a `pnpm action …` run
- * from another team's app), this will bind to whoever signed in most
- * recently across *all* sessions in the DB. If that is wrong, set
- * `AGENT_USER_EMAIL=<your-email>` in your shell or `.env`; explicit env
- * always wins. A `[dev-session]` log line is emitted so wrong-binding
- * is easy to spot.
+ * SHARED-DEV-BOX CAVEAT: this table is unscoped. To avoid silently binding
+ * to another developer, auto-binding only happens when the table contains
+ * exactly one distinct real email. If multiple developers have signed in,
+ * set `AGENT_USER_EMAIL=<your-email>` in your shell or `.env`; explicit env
+ * always wins.
  *
  * Strict gating mirrors the A2A precedent in
  * `server/agent-chat-plugin.ts` (search for "latest session"):
@@ -59,14 +55,28 @@ export async function resolveDevUserEmail() {
     try {
         const { getDbExec } = await import("../db/client.js");
         const { rows } = await getDbExec().execute({
-            sql: `SELECT email FROM sessions
-            WHERE email IS NOT NULL AND email <> ?
-            ORDER BY created_at DESC LIMIT 1`,
+            sql: `SELECT email
+            FROM (
+              SELECT TRIM(email) AS email, MAX(created_at) AS last_seen
+              FROM sessions
+              WHERE email IS NOT NULL AND TRIM(email) <> ?
+              GROUP BY TRIM(email)
+            ) AS session_owners
+            WHERE email <> ''
+            ORDER BY last_seen DESC
+            LIMIT 2`,
             args: [DEV_FALLBACK_EMAIL],
         });
-        const email = rows[0]?.email;
-        if (!email || email.trim().length === 0)
+        const emails = rows
+            .map((row) => (typeof row.email === "string" ? row.email.trim() : ""))
+            .filter((email) => email.length > 0);
+        if (emails.length === 0)
             return undefined;
+        if (emails.length > 1) {
+            console.warn(`[dev-session] multiple session owners found (${emails.join(", ")}); set AGENT_USER_EMAIL=<email> to choose one`);
+            return undefined;
+        }
+        const email = emails[0];
         console.log(`[dev-session] auto-bound to ${email} (set AGENT_USER_EMAIL to override)`);
         return email;
     }

package/dist/scripts/dev-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"dev-session.js","sourceRoot":"","sources":["../../src/scripts/dev-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,CAAC,qGAAqG;AAEnJ;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC9C,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,gEAAgE;IAChE,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;QAAE,OAAO,SAAS,CAAC;IAE5D,sEAAsE;IACtE,oEAAoE;IACpE,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IACvC,IAAI,QAAQ,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAEvD,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;YACzC,GAAG,EAAE;;6CAEkC;YACvC,IAAI,EAAE,CAAC,kBAAkB,CAAC;SAC3B,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,KAA2B,CAAC;QACnD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1D,OAAO,CAAC,GAAG,CACT,+BAA+B,KAAK,qCAAqC,CAC1E,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,kEAAkE;QAClE,+DAA+D;QAC/D,mCAAmC;QACnC,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC","sourcesContent":["/**\n * Dev-only session bootstrap for `pnpm action <name>` (and any other CLI\n * caller of `runScript`).\n *\n * After changes-53, db-exec / db-query / db-patch refuse to run unless\n * `getRequestUserEmail()` returns a real identity. In an HTTP request the\n * Nitro plugin wraps the handler in `runWithRequestContext({ userEmail })`\n * so scoping just works. CLI invocations have no such wrapper, so without\n * this helper every db-* CLI run hands the user a stack trace.\n *\n * What this does: when the runner is about to dispatch, resolve a real\n * email by reading the most-recent row from the legacy `sessions` table\n * (the same table that `addSession()` writes from google-oauth.ts and the\n * A2A receiver fallback already consults). The runner then wraps dispatch\n * in `runWithRequestContext({ userEmail })` so the action sees a real\n * identity.\n *\n * SHARED-DEV-BOX CAVEAT: the `SELECT email FROM sessions ORDER BY\n * created_at DESC LIMIT 1` query is unscoped — on a machine where\n * multiple developers have signed in (or after a `pnpm action …` run\n * from another team's app), this will bind to whoever signed in most\n * recently across *all* sessions in the DB. If that is wrong, set\n * `AGENT_USER_EMAIL=<your-email>` in your shell or `.env`; explicit env\n * always wins. A `[dev-session]` log line is emitted so wrong-binding\n * is easy to spot.\n *\n * Strict gating mirrors the A2A precedent in\n * `server/agent-chat-plugin.ts` (search for \"latest session\"):\n *   - NODE_ENV !== \"production\".\n *   - AUTH_MODE unset or === \"local\" — don't auto-impersonate when an\n *     admin or hosted auth mode is in use.\n *\n * If `process.env.AGENT_USER_EMAIL` is already set we return it unchanged\n * — explicit env wins over any DB-derived guess (matches how\n * `getRequestUserEmail()` itself behaves).\n */\n\nconst DEV_FALLBACK_EMAIL = \"local@localhost\"; // guard:allow-localhost-fallback — sentinel intentionally rejected so the resolver doesn't return it\n\n/**\n * Resolve the local dev user's email for the current CLI invocation.\n *\n * Returns the resolved email, or `undefined` when no real identity is\n * available. Callers should let the downstream \"no authenticated user\"\n * error propagate — its message points the user at the two fixes\n * (sign in via the running app, or set `AGENT_USER_EMAIL`).\n */\nexport async function resolveDevUserEmail(): Promise<string | undefined> {\n  const explicit = process.env.AGENT_USER_EMAIL;\n  if (explicit) return explicit;\n\n  // Hard refusal: this helper must never source identity in prod.\n  if (process.env.NODE_ENV === \"production\") return undefined;\n\n  // AUTH_MODE may be unset (default dev shim) or \"local\". Anything else\n  // means a non-dev auth mode is in play; don't try to fish a session\n  // out of the DB on its behalf.\n  const authMode = process.env.AUTH_MODE;\n  if (authMode && authMode !== \"local\") return undefined;\n\n  try {\n    const { getDbExec } = await import(\"../db/client.js\");\n    const { rows } = await getDbExec().execute({\n      sql: `SELECT email FROM sessions\n            WHERE email IS NOT NULL AND email <> ?\n            ORDER BY created_at DESC LIMIT 1`,\n      args: [DEV_FALLBACK_EMAIL],\n    });\n    const email = rows[0]?.email as string | undefined;\n    if (!email || email.trim().length === 0) return undefined;\n    console.log(\n      `[dev-session] auto-bound to ${email} (set AGENT_USER_EMAIL to override)`,\n    );\n    return email;\n  } catch {\n    // The sessions table doesn't exist yet (fresh install where the web\n    // server has never booted) or the DB isn't reachable. Either way,\n    // we can't produce an identity — let the caller throw with the\n    // friendlier \"sign in first\" hint.\n    return undefined;\n  }\n}\n"]}
+{"version":3,"file":"dev-session.js","sourceRoot":"","sources":["../../src/scripts/dev-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,CAAC,qGAAqG;AAEnJ;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC9C,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,gEAAgE;IAChE,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;QAAE,OAAO,SAAS,CAAC;IAE5D,sEAAsE;IACtE,oEAAoE;IACpE,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IACvC,IAAI,QAAQ,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAEvD,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;YACzC,GAAG,EAAE;;;;;;;;;oBASS;YACd,IAAI,EAAE,CAAC,kBAAkB,CAAC;SAC3B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI;aAChB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aACrE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,IAAI,CACV,gDAAgD,MAAM,CAAC,IAAI,CACzD,IAAI,CACL,+CAA+C,CACjD,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,OAAO,CAAC,GAAG,CACT,+BAA+B,KAAK,qCAAqC,CAC1E,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,kEAAkE;QAClE,+DAA+D;QAC/D,mCAAmC;QACnC,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC","sourcesContent":["/**\n * Dev-only session bootstrap for `pnpm action <name>` (and any other CLI\n * caller of `runScript`).\n *\n * After changes-53, db-exec / db-query / db-patch refuse to run unless\n * `getRequestUserEmail()` returns a real identity. In an HTTP request the\n * Nitro plugin wraps the handler in `runWithRequestContext({ userEmail })`\n * so scoping just works. CLI invocations have no such wrapper, so without\n * this helper every db-* CLI run hands the user a stack trace.\n *\n * What this does: when the runner is about to dispatch, resolve a real\n * email from the legacy `sessions` table (the same table that\n * `addSession()` writes from google-oauth.ts and the A2A receiver fallback\n * already consults). The runner then wraps dispatch in\n * `runWithRequestContext({ userEmail })` so the action sees a real identity.\n *\n * SHARED-DEV-BOX CAVEAT: this table is unscoped. To avoid silently binding\n * to another developer, auto-binding only happens when the table contains\n * exactly one distinct real email. If multiple developers have signed in,\n * set `AGENT_USER_EMAIL=<your-email>` in your shell or `.env`; explicit env\n * always wins.\n *\n * Strict gating mirrors the A2A precedent in\n * `server/agent-chat-plugin.ts` (search for \"latest session\"):\n *   - NODE_ENV !== \"production\".\n *   - AUTH_MODE unset or === \"local\" — don't auto-impersonate when an\n *     admin or hosted auth mode is in use.\n *\n * If `process.env.AGENT_USER_EMAIL` is already set we return it unchanged\n * — explicit env wins over any DB-derived guess (matches how\n * `getRequestUserEmail()` itself behaves).\n */\n\nconst DEV_FALLBACK_EMAIL = \"local@localhost\"; // guard:allow-localhost-fallback — sentinel intentionally rejected so the resolver doesn't return it\n\n/**\n * Resolve the local dev user's email for the current CLI invocation.\n *\n * Returns the resolved email, or `undefined` when no real identity is\n * available. Callers should let the downstream \"no authenticated user\"\n * error propagate — its message points the user at the two fixes\n * (sign in via the running app, or set `AGENT_USER_EMAIL`).\n */\nexport async function resolveDevUserEmail(): Promise<string | undefined> {\n  const explicit = process.env.AGENT_USER_EMAIL;\n  if (explicit) return explicit;\n\n  // Hard refusal: this helper must never source identity in prod.\n  if (process.env.NODE_ENV === \"production\") return undefined;\n\n  // AUTH_MODE may be unset (default dev shim) or \"local\". Anything else\n  // means a non-dev auth mode is in play; don't try to fish a session\n  // out of the DB on its behalf.\n  const authMode = process.env.AUTH_MODE;\n  if (authMode && authMode !== \"local\") return undefined;\n\n  try {\n    const { getDbExec } = await import(\"../db/client.js\");\n    const { rows } = await getDbExec().execute({\n      sql: `SELECT email\n            FROM (\n              SELECT TRIM(email) AS email, MAX(created_at) AS last_seen\n              FROM sessions\n              WHERE email IS NOT NULL AND TRIM(email) <> ?\n              GROUP BY TRIM(email)\n            ) AS session_owners\n            WHERE email <> ''\n            ORDER BY last_seen DESC\n            LIMIT 2`,\n      args: [DEV_FALLBACK_EMAIL],\n    });\n    const emails = rows\n      .map((row) => (typeof row.email === \"string\" ? row.email.trim() : \"\"))\n      .filter((email) => email.length > 0);\n    if (emails.length === 0) return undefined;\n    if (emails.length > 1) {\n      console.warn(\n        `[dev-session] multiple session owners found (${emails.join(\n          \", \",\n        )}); set AGENT_USER_EMAIL=<email> to choose one`,\n      );\n      return undefined;\n    }\n    const email = emails[0];\n    console.log(\n      `[dev-session] auto-bound to ${email} (set AGENT_USER_EMAIL to override)`,\n    );\n    return email;\n  } catch {\n    // The sessions table doesn't exist yet (fresh install where the web\n    // server has never booted) or the DB isn't reachable. Either way,\n    // we can't produce an identity — let the caller throw with the\n    // friendlier \"sign in first\" hint.\n    return undefined;\n  }\n}\n"]}

package/dist/scripts/runner.js

@@ -84,7 +84,7 @@ export async function runScript(options = {}) {
     // it, db-exec / db-query / db-patch and any action that calls
     // `getRequestUserEmail()` see no identity and refuse to run. The
     // resolver picks up `AGENT_USER_EMAIL` if explicitly set, otherwise
-    // reads the most-recent signed-in session from the DB (dev-only,
+    // reads the DB session owner only when it is unambiguous (dev-only,
     // narrowly gated — see dev-session.ts).
     //
     // This wrap is intentionally a single point of injection: it covers

package/dist/scripts/runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/scripts/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAGhE,kFAAkF;AAClF,OAAO,EAAE,CAAC;AAYV,KAAK,UAAU,uBAAuB;IACpC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,sBAAsB,CAAC,CAAC;IACzE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO;IAEzC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC;IAC3B,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,MAAM,MAAM,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,UAA4B,EAAE;IAC5D,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEnC,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAE/D,yDAAyD;QACzD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;QACrE,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,EAAE;iBACd,WAAW,CAAC,QAAQ,CAAC;iBACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC;iBAClD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;YACtC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;gBAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;oBAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5E,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,kBAAkB,IAAI,iBAAiB,GAAG,CAAC,CAAC;YACrE,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;QACvC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC1C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,2DAA2D;IAC3D,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,OAAO,CAAC,KAAK,CAAC,+BAA+B,UAAU,GAAG,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnC,wEAAwE;IACxE,8DAA8D;IAC9D,iEAAiE;IACjE,oEAAoE;IACpE,iEAAiE;IACjE,wCAAwC;IACxC,EAAE;IACF,oEAAoE;IACpE,oEAAoE;IACpE,uEAAuE;IACvE,6DAA6D;IAC7D,mEAAmE;IACnE,6CAA6C;IAC7C,0DAA0D;IAC1D,MAAM,SAAS,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,SAAS,CAAC;IAEpD,OAAO,qBAAqB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CACtD,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAC1C,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,KAAa,EACb,cAAuB;IAEvB,IAAI,CAAC,cAAc;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CACnB,MAA+B,EAC/B,GAAW,EACX,KAAc;IAEd,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACpB,OAAO;IACT,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACnC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC;QACtB,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,eAAe,CACtB,IAAc,EACd,UAAwC,EAAE;IAE1C,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;IACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACpC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,YAAY,CACV,MAAM,EACN,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EACnB,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC,CACrD,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;gBAChE,CAAC,EAAE,CAAC;YACN,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,UAAkB,EAClB,IAAc,EACd,OAAyB;IAEzB,8EAA8E;IAC9E,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAC9B,OAAO,CAAC,GAAG,EAAE,EACb,SAAS,EACT,GAAG,UAAU,KAAK,CACnB,CAAC;IACF,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAC9B,OAAO,CAAC,GAAG,EAAE,EACb,SAAS,EACT,GAAG,UAAU,KAAK,CACnB,CAAC;IACF,MAAM,SAAS,GAAG,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;IAEzE,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,uBAAuB,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,MAAM,MAAM;YACtB,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,CACjD,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YAC5B,sEAAsE;YACtE,IACE,OAAO;gBACP,OAAO,OAAO,KAAK,QAAQ;gBAC3B,OAAO,OAAO,CAAC,GAAG,KAAK,UAAU,EACjC,CAAC;gBACD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACzC,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;oBAC9B,MAAM,kBAAkB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC3D,CAAC;gBACD,IAAI,MAAM;oBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClC,CAAC;iBAAM,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;gBACzC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CACX,WAAW,UAAU,uDAAuD,CAC7E,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,KAAK,CAAC,WAAW,UAAU,WAAW,EAAE,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,MAAM,aAAa,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,uBAAuB,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,MAAgC,CAAC,CAAC;YACzE,IAAI,aAAa,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACpC,MAAM,kBAAkB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAChC,MAAM,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,KAAK,CAAC,WAAW,UAAU,WAAW,EAAE,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,KAAK,CAAC,gBAAgB,UAAU,WAAW,EAAE,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;YACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,OAAO,CAAC,KAAK,CACX,kBAAkB,UAAU,8DAA8D,CAC3F,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC","sourcesContent":["/**\n * Generic action dispatcher for @agent-native/core apps.\n *\n * Dynamically imports and runs actions from the app's actions/ directory.\n * Falls back to scripts/ directory for backwards compatibility, then to\n * core scripts (db-schema, db-query, db-exec, etc.) when no local action is found.\n *\n * Actions must export a default function: (args: string[]) => Promise<void>\n *\n * Usage: pnpm action <action-name> [--args]\n */\n\nimport path from \"path\";\nimport fs from \"fs\";\nimport { pathToFileURL } from \"url\";\nimport { coreScripts, getCoreScriptNames } from \"./core-scripts.js\";\nimport { closeDbExec } from \"../db/client.js\";\nimport { loadEnv } from \"./utils.js\";\nimport { runWithRequestContext } from \"../server/request-context.js\";\nimport { resolveDevUserEmail } from \"./dev-session.js\";\nimport { notifyActionChange } from \"../server/action-change.js\";\nimport type { ActionEntry } from \"../agent/production-agent.js\";\n\n// Load .env from cwd so DATABASE_URL and other vars are available to all actions.\nloadEnv();\n\nexport interface RunScriptOptions {\n  /**\n   * Actions contributed by packages rather than the app's local `actions/`\n   * directory. Local app actions still win on name collision.\n   */\n  packageActions?: Record<string, ActionEntry>;\n  /** Help-section label for package actions. */\n  packageActionLabel?: string;\n}\n\nasync function runAppDbPluginIfPresent(): Promise<void> {\n  const dbPluginPath = path.resolve(process.cwd(), \"server/plugins/db.ts\");\n  if (!fs.existsSync(dbPluginPath)) return;\n\n  const mod = await import(/* @vite-ignore */ pathToFileURL(dbPluginPath).href);\n  const plugin = mod.default;\n  if (typeof plugin === \"function\") {\n    await plugin({});\n  }\n}\n\n/**\n * Run the action dispatcher. Call this from your app's actions/run.ts (or scripts/run.ts):\n *\n *   import { runScript } from \"@agent-native/core\";\n *   runScript();\n */\nexport async function runScript(options: RunScriptOptions = {}): Promise<void> {\n  const actionName = process.argv[2];\n\n  if (!actionName || actionName === \"--help\") {\n    console.log(`Usage: pnpm action <action-name> [--arg value ...]`);\n    console.log(`\\nRun any action with --help for usage details.`);\n\n    // List local actions (try actions/ first, then scripts/)\n    const actionsDir = path.resolve(process.cwd(), \"actions\");\n    const scriptsDir = path.resolve(process.cwd(), \"scripts\");\n    const localDir = fs.existsSync(actionsDir) ? actionsDir : scriptsDir;\n    if (fs.existsSync(localDir)) {\n      const locals = fs\n        .readdirSync(localDir)\n        .filter((f) => f.endsWith(\".ts\") && f !== \"run.ts\")\n        .map((f) => f.replace(/\\.ts$/, \"\"));\n      if (locals.length > 0) {\n        console.log(`\\nApp actions:`);\n        for (const name of locals) {\n          console.log(`  ${name}`);\n        }\n      }\n    }\n\n    const packageActionNames = Object.keys(options.packageActions ?? {}).sort();\n    if (packageActionNames.length > 0) {\n      console.log(`\\n${options.packageActionLabel ?? \"Package actions\"}:`);\n      for (const name of packageActionNames) {\n        console.log(`  ${name}`);\n      }\n    }\n\n    // List core scripts\n    const coreNames = getCoreScriptNames();\n    if (coreNames.length > 0) {\n      console.log(`\\nCore actions (built-in):`);\n      for (const name of coreNames) {\n        console.log(`  ${name}`);\n      }\n    }\n\n    process.exit(0);\n  }\n\n  // Validate action name (only allow alphanumeric + hyphens)\n  if (!/^[a-z][a-z0-9-]*$/.test(actionName)) {\n    console.error(`Error: Invalid action name \"${actionName}\"`);\n    process.exit(1);\n  }\n\n  const args = process.argv.slice(3);\n\n  // Establish a request context for the duration of this CLI run. Without\n  // it, db-exec / db-query / db-patch and any action that calls\n  // `getRequestUserEmail()` see no identity and refuse to run. The\n  // resolver picks up `AGENT_USER_EMAIL` if explicitly set, otherwise\n  // reads the most-recent signed-in session from the DB (dev-only,\n  // narrowly gated — see dev-session.ts).\n  //\n  // This wrap is intentionally a single point of injection: it covers\n  // both the local-action branch and the fall-through to core scripts\n  // (db-query, db-exec, …) so every CLI entrypoint runs scoped to a real\n  // user. It uses `runWithRequestContext` rather than mutating\n  // `process.env.AGENT_USER_EMAIL` because env mutation leaks across\n  // boundaries — see the cautionary comment in\n  // `server/request-context.ts` about exactly that pattern.\n  const userEmail = await resolveDevUserEmail();\n  const orgId = process.env.AGENT_ORG_ID || undefined;\n\n  return runWithRequestContext({ userEmail, orgId }, () =>\n    dispatchAction(actionName, args, options),\n  );\n}\n\nfunction coerceCliValue(\n  value: string,\n  coerceBooleans: boolean,\n): string | boolean {\n  if (!coerceBooleans) return value;\n  if (value === \"true\") return true;\n  if (value === \"false\") return false;\n  return value;\n}\n\nfunction setParsedArg(\n  parsed: Record<string, unknown>,\n  key: string,\n  value: unknown,\n) {\n  const existing = parsed[key];\n  if (existing === undefined) {\n    parsed[key] = value;\n    return;\n  }\n  parsed[key] = Array.isArray(existing)\n    ? [...existing, value]\n    : [existing, value];\n}\n\nfunction parseActionArgs(\n  args: string[],\n  options: { coerceBooleans?: boolean } = {},\n): Record<string, unknown> {\n  const parsed: Record<string, unknown> = {};\n  const coerceBooleans = options.coerceBooleans ?? false;\n  for (let i = 0; i < args.length; i++) {\n    const arg = args[i];\n    if (!arg.startsWith(\"--\")) continue;\n    const eqIdx = arg.indexOf(\"=\");\n    if (eqIdx > 0) {\n      setParsedArg(\n        parsed,\n        arg.slice(2, eqIdx),\n        coerceCliValue(arg.slice(eqIdx + 1), coerceBooleans),\n      );\n    } else {\n      const key = arg.slice(2);\n      const next = args[i + 1];\n      if (next && !next.startsWith(\"--\")) {\n        setParsedArg(parsed, key, coerceCliValue(next, coerceBooleans));\n        i++;\n      } else {\n        setParsedArg(parsed, key, coerceBooleans ? true : \"true\");\n      }\n    }\n  }\n  return parsed;\n}\n\nasync function dispatchAction(\n  actionName: string,\n  args: string[],\n  options: RunScriptOptions,\n): Promise<void> {\n  // 1. Try local app action first (actions/ then scripts/ for backwards compat)\n  const actionsPath = path.resolve(\n    process.cwd(),\n    \"actions\",\n    `${actionName}.ts`,\n  );\n  const scriptsPath = path.resolve(\n    process.cwd(),\n    \"scripts\",\n    `${actionName}.ts`,\n  );\n  const localPath = fs.existsSync(actionsPath) ? actionsPath : scriptsPath;\n\n  if (fs.existsSync(localPath)) {\n    try {\n      await runAppDbPluginIfPresent();\n      const mod = await import(\n        /* @vite-ignore */ pathToFileURL(localPath).href\n      );\n      const handler = mod.default;\n      // Support defineAction-style default exports (object with run method)\n      if (\n        handler &&\n        typeof handler === \"object\" &&\n        typeof handler.run === \"function\"\n      ) {\n        const parsed = parseActionArgs(args, { coerceBooleans: true });\n        const result = await handler.run(parsed);\n        if (handler.readOnly !== true) {\n          await notifyActionChange({ actionName }).catch(() => {});\n        }\n        if (result) console.log(result);\n      } else if (typeof handler === \"function\") {\n        await handler(args);\n      } else {\n        console.error(\n          `Action \"${actionName}\" does not export a default function or defineAction.`,\n        );\n        process.exit(1);\n      }\n      await closeDbExec().catch(() => {});\n      process.exit(0);\n    } catch (err: any) {\n      await closeDbExec().catch(() => {});\n      console.error(`Action \"${actionName}\" failed:`, err.message || err);\n      process.exit(1);\n    }\n  }\n\n  // 2. Try package-contributed actions (e.g. @agent-native/dispatch)\n  const packageAction = options.packageActions?.[actionName];\n  if (packageAction) {\n    try {\n      await runAppDbPluginIfPresent();\n      const parsed = parseActionArgs(args, { coerceBooleans: true });\n      const result = await packageAction.run(parsed as Record<string, string>);\n      if (packageAction.readOnly !== true) {\n        await notifyActionChange({ actionName }).catch(() => {});\n      }\n      if (result) console.log(result);\n      await closeDbExec().catch(() => {});\n      process.exit(0);\n    } catch (err: any) {\n      await closeDbExec().catch(() => {});\n      console.error(`Action \"${actionName}\" failed:`, err.message || err);\n      process.exit(1);\n    }\n  }\n\n  // 3. Fall back to core scripts\n  const coreScript = coreScripts[actionName];\n  if (coreScript) {\n    try {\n      await coreScript(args);\n      await closeDbExec().catch(() => {});\n      process.exit(0);\n    } catch (err: any) {\n      await closeDbExec().catch(() => {});\n      console.error(`Core action \"${actionName}\" failed:`, err.message || err);\n      process.exit(1);\n    }\n  }\n\n  // 4. Not found anywhere\n  console.error(\n    `Error: Action \"${actionName}\" not found. Run \"pnpm action --help\" for available actions.`,\n  );\n  process.exit(1);\n}\n"]}
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/scripts/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAGhE,kFAAkF;AAClF,OAAO,EAAE,CAAC;AAYV,KAAK,UAAU,uBAAuB;IACpC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,sBAAsB,CAAC,CAAC;IACzE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO;IAEzC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC;IAC3B,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,MAAM,MAAM,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,UAA4B,EAAE;IAC5D,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEnC,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAE/D,yDAAyD;QACzD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;QACrE,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,EAAE;iBACd,WAAW,CAAC,QAAQ,CAAC;iBACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC;iBAClD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;YACtC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;gBAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;oBAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5E,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,kBAAkB,IAAI,iBAAiB,GAAG,CAAC,CAAC;YACrE,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;QACvC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC1C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,2DAA2D;IAC3D,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,OAAO,CAAC,KAAK,CAAC,+BAA+B,UAAU,GAAG,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnC,wEAAwE;IACxE,8DAA8D;IAC9D,iEAAiE;IACjE,oEAAoE;IACpE,oEAAoE;IACpE,wCAAwC;IACxC,EAAE;IACF,oEAAoE;IACpE,oEAAoE;IACpE,uEAAuE;IACvE,6DAA6D;IAC7D,mEAAmE;IACnE,6CAA6C;IAC7C,0DAA0D;IAC1D,MAAM,SAAS,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,SAAS,CAAC;IAEpD,OAAO,qBAAqB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CACtD,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAC1C,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,KAAa,EACb,cAAuB;IAEvB,IAAI,CAAC,cAAc;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CACnB,MAA+B,EAC/B,GAAW,EACX,KAAc;IAEd,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACpB,OAAO;IACT,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACnC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC;QACtB,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,eAAe,CACtB,IAAc,EACd,UAAwC,EAAE;IAE1C,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;IACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACpC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,YAAY,CACV,MAAM,EACN,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EACnB,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC,CACrD,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;gBAChE,CAAC,EAAE,CAAC;YACN,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,UAAkB,EAClB,IAAc,EACd,OAAyB;IAEzB,8EAA8E;IAC9E,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAC9B,OAAO,CAAC,GAAG,EAAE,EACb,SAAS,EACT,GAAG,UAAU,KAAK,CACnB,CAAC;IACF,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAC9B,OAAO,CAAC,GAAG,EAAE,EACb,SAAS,EACT,GAAG,UAAU,KAAK,CACnB,CAAC;IACF,MAAM,SAAS,GAAG,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;IAEzE,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,uBAAuB,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,MAAM,MAAM;YACtB,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,CACjD,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YAC5B,sEAAsE;YACtE,IACE,OAAO;gBACP,OAAO,OAAO,KAAK,QAAQ;gBAC3B,OAAO,OAAO,CAAC,GAAG,KAAK,UAAU,EACjC,CAAC;gBACD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACzC,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;oBAC9B,MAAM,kBAAkB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC3D,CAAC;gBACD,IAAI,MAAM;oBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClC,CAAC;iBAAM,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;gBACzC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CACX,WAAW,UAAU,uDAAuD,CAC7E,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,KAAK,CAAC,WAAW,UAAU,WAAW,EAAE,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,MAAM,aAAa,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,uBAAuB,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,MAAgC,CAAC,CAAC;YACzE,IAAI,aAAa,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACpC,MAAM,kBAAkB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAChC,MAAM,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,KAAK,CAAC,WAAW,UAAU,WAAW,EAAE,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,KAAK,CAAC,gBAAgB,UAAU,WAAW,EAAE,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;YACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,OAAO,CAAC,KAAK,CACX,kBAAkB,UAAU,8DAA8D,CAC3F,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC","sourcesContent":["/**\n * Generic action dispatcher for @agent-native/core apps.\n *\n * Dynamically imports and runs actions from the app's actions/ directory.\n * Falls back to scripts/ directory for backwards compatibility, then to\n * core scripts (db-schema, db-query, db-exec, etc.) when no local action is found.\n *\n * Actions must export a default function: (args: string[]) => Promise<void>\n *\n * Usage: pnpm action <action-name> [--args]\n */\n\nimport path from \"path\";\nimport fs from \"fs\";\nimport { pathToFileURL } from \"url\";\nimport { coreScripts, getCoreScriptNames } from \"./core-scripts.js\";\nimport { closeDbExec } from \"../db/client.js\";\nimport { loadEnv } from \"./utils.js\";\nimport { runWithRequestContext } from \"../server/request-context.js\";\nimport { resolveDevUserEmail } from \"./dev-session.js\";\nimport { notifyActionChange } from \"../server/action-change.js\";\nimport type { ActionEntry } from \"../agent/production-agent.js\";\n\n// Load .env from cwd so DATABASE_URL and other vars are available to all actions.\nloadEnv();\n\nexport interface RunScriptOptions {\n  /**\n   * Actions contributed by packages rather than the app's local `actions/`\n   * directory. Local app actions still win on name collision.\n   */\n  packageActions?: Record<string, ActionEntry>;\n  /** Help-section label for package actions. */\n  packageActionLabel?: string;\n}\n\nasync function runAppDbPluginIfPresent(): Promise<void> {\n  const dbPluginPath = path.resolve(process.cwd(), \"server/plugins/db.ts\");\n  if (!fs.existsSync(dbPluginPath)) return;\n\n  const mod = await import(/* @vite-ignore */ pathToFileURL(dbPluginPath).href);\n  const plugin = mod.default;\n  if (typeof plugin === \"function\") {\n    await plugin({});\n  }\n}\n\n/**\n * Run the action dispatcher. Call this from your app's actions/run.ts (or scripts/run.ts):\n *\n *   import { runScript } from \"@agent-native/core\";\n *   runScript();\n */\nexport async function runScript(options: RunScriptOptions = {}): Promise<void> {\n  const actionName = process.argv[2];\n\n  if (!actionName || actionName === \"--help\") {\n    console.log(`Usage: pnpm action <action-name> [--arg value ...]`);\n    console.log(`\\nRun any action with --help for usage details.`);\n\n    // List local actions (try actions/ first, then scripts/)\n    const actionsDir = path.resolve(process.cwd(), \"actions\");\n    const scriptsDir = path.resolve(process.cwd(), \"scripts\");\n    const localDir = fs.existsSync(actionsDir) ? actionsDir : scriptsDir;\n    if (fs.existsSync(localDir)) {\n      const locals = fs\n        .readdirSync(localDir)\n        .filter((f) => f.endsWith(\".ts\") && f !== \"run.ts\")\n        .map((f) => f.replace(/\\.ts$/, \"\"));\n      if (locals.length > 0) {\n        console.log(`\\nApp actions:`);\n        for (const name of locals) {\n          console.log(`  ${name}`);\n        }\n      }\n    }\n\n    const packageActionNames = Object.keys(options.packageActions ?? {}).sort();\n    if (packageActionNames.length > 0) {\n      console.log(`\\n${options.packageActionLabel ?? \"Package actions\"}:`);\n      for (const name of packageActionNames) {\n        console.log(`  ${name}`);\n      }\n    }\n\n    // List core scripts\n    const coreNames = getCoreScriptNames();\n    if (coreNames.length > 0) {\n      console.log(`\\nCore actions (built-in):`);\n      for (const name of coreNames) {\n        console.log(`  ${name}`);\n      }\n    }\n\n    process.exit(0);\n  }\n\n  // Validate action name (only allow alphanumeric + hyphens)\n  if (!/^[a-z][a-z0-9-]*$/.test(actionName)) {\n    console.error(`Error: Invalid action name \"${actionName}\"`);\n    process.exit(1);\n  }\n\n  const args = process.argv.slice(3);\n\n  // Establish a request context for the duration of this CLI run. Without\n  // it, db-exec / db-query / db-patch and any action that calls\n  // `getRequestUserEmail()` see no identity and refuse to run. The\n  // resolver picks up `AGENT_USER_EMAIL` if explicitly set, otherwise\n  // reads the DB session owner only when it is unambiguous (dev-only,\n  // narrowly gated — see dev-session.ts).\n  //\n  // This wrap is intentionally a single point of injection: it covers\n  // both the local-action branch and the fall-through to core scripts\n  // (db-query, db-exec, …) so every CLI entrypoint runs scoped to a real\n  // user. It uses `runWithRequestContext` rather than mutating\n  // `process.env.AGENT_USER_EMAIL` because env mutation leaks across\n  // boundaries — see the cautionary comment in\n  // `server/request-context.ts` about exactly that pattern.\n  const userEmail = await resolveDevUserEmail();\n  const orgId = process.env.AGENT_ORG_ID || undefined;\n\n  return runWithRequestContext({ userEmail, orgId }, () =>\n    dispatchAction(actionName, args, options),\n  );\n}\n\nfunction coerceCliValue(\n  value: string,\n  coerceBooleans: boolean,\n): string | boolean {\n  if (!coerceBooleans) return value;\n  if (value === \"true\") return true;\n  if (value === \"false\") return false;\n  return value;\n}\n\nfunction setParsedArg(\n  parsed: Record<string, unknown>,\n  key: string,\n  value: unknown,\n) {\n  const existing = parsed[key];\n  if (existing === undefined) {\n    parsed[key] = value;\n    return;\n  }\n  parsed[key] = Array.isArray(existing)\n    ? [...existing, value]\n    : [existing, value];\n}\n\nfunction parseActionArgs(\n  args: string[],\n  options: { coerceBooleans?: boolean } = {},\n): Record<string, unknown> {\n  const parsed: Record<string, unknown> = {};\n  const coerceBooleans = options.coerceBooleans ?? false;\n  for (let i = 0; i < args.length; i++) {\n    const arg = args[i];\n    if (!arg.startsWith(\"--\")) continue;\n    const eqIdx = arg.indexOf(\"=\");\n    if (eqIdx > 0) {\n      setParsedArg(\n        parsed,\n        arg.slice(2, eqIdx),\n        coerceCliValue(arg.slice(eqIdx + 1), coerceBooleans),\n      );\n    } else {\n      const key = arg.slice(2);\n      const next = args[i + 1];\n      if (next && !next.startsWith(\"--\")) {\n        setParsedArg(parsed, key, coerceCliValue(next, coerceBooleans));\n        i++;\n      } else {\n        setParsedArg(parsed, key, coerceBooleans ? true : \"true\");\n      }\n    }\n  }\n  return parsed;\n}\n\nasync function dispatchAction(\n  actionName: string,\n  args: string[],\n  options: RunScriptOptions,\n): Promise<void> {\n  // 1. Try local app action first (actions/ then scripts/ for backwards compat)\n  const actionsPath = path.resolve(\n    process.cwd(),\n    \"actions\",\n    `${actionName}.ts`,\n  );\n  const scriptsPath = path.resolve(\n    process.cwd(),\n    \"scripts\",\n    `${actionName}.ts`,\n  );\n  const localPath = fs.existsSync(actionsPath) ? actionsPath : scriptsPath;\n\n  if (fs.existsSync(localPath)) {\n    try {\n      await runAppDbPluginIfPresent();\n      const mod = await import(\n        /* @vite-ignore */ pathToFileURL(localPath).href\n      );\n      const handler = mod.default;\n      // Support defineAction-style default exports (object with run method)\n      if (\n        handler &&\n        typeof handler === \"object\" &&\n        typeof handler.run === \"function\"\n      ) {\n        const parsed = parseActionArgs(args, { coerceBooleans: true });\n        const result = await handler.run(parsed);\n        if (handler.readOnly !== true) {\n          await notifyActionChange({ actionName }).catch(() => {});\n        }\n        if (result) console.log(result);\n      } else if (typeof handler === \"function\") {\n        await handler(args);\n      } else {\n        console.error(\n          `Action \"${actionName}\" does not export a default function or defineAction.`,\n        );\n        process.exit(1);\n      }\n      await closeDbExec().catch(() => {});\n      process.exit(0);\n    } catch (err: any) {\n      await closeDbExec().catch(() => {});\n      console.error(`Action \"${actionName}\" failed:`, err.message || err);\n      process.exit(1);\n    }\n  }\n\n  // 2. Try package-contributed actions (e.g. @agent-native/dispatch)\n  const packageAction = options.packageActions?.[actionName];\n  if (packageAction) {\n    try {\n      await runAppDbPluginIfPresent();\n      const parsed = parseActionArgs(args, { coerceBooleans: true });\n      const result = await packageAction.run(parsed as Record<string, string>);\n      if (packageAction.readOnly !== true) {\n        await notifyActionChange({ actionName }).catch(() => {});\n      }\n      if (result) console.log(result);\n      await closeDbExec().catch(() => {});\n      process.exit(0);\n    } catch (err: any) {\n      await closeDbExec().catch(() => {});\n      console.error(`Action \"${actionName}\" failed:`, err.message || err);\n      process.exit(1);\n    }\n  }\n\n  // 3. Fall back to core scripts\n  const coreScript = coreScripts[actionName];\n  if (coreScript) {\n    try {\n      await coreScript(args);\n      await closeDbExec().catch(() => {});\n      process.exit(0);\n    } catch (err: any) {\n      await closeDbExec().catch(() => {});\n      console.error(`Core action \"${actionName}\" failed:`, err.message || err);\n      process.exit(1);\n    }\n  }\n\n  // 4. Not found anywhere\n  console.error(\n    `Error: Action \"${actionName}\" not found. Run \"pnpm action --help\" for available actions.`,\n  );\n  process.exit(1);\n}\n"]}

package/dist/server/auth-marketing.d.ts

@@ -0,0 +1,14 @@
+export interface AuthMarketingContent {
+    appName: string;
+    tagline: string;
+    description?: string;
+    features?: string[];
+    runLocalCommand?: string;
+}
+export interface ResolveBuiltInAuthMarketingOptions {
+    requestHost?: string;
+    requestPath?: string;
+}
+export declare const BUILT_IN_AUTH_MARKETING: Record<string, AuthMarketingContent>;
+export declare function resolveBuiltInAuthMarketing(opts?: ResolveBuiltInAuthMarketingOptions): AuthMarketingContent | undefined;
+//# sourceMappingURL=auth-marketing.d.ts.map

package/dist/server/auth-marketing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-marketing.d.ts","sourceRoot":"","sources":["../../src/server/auth-marketing.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kCAAkC;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CA0MxE,CAAC;AAiFF,wBAAgB,2BAA2B,CACzC,IAAI,GAAE,kCAAuC,GAC5C,oBAAoB,GAAG,SAAS,CAMlC"}

package/dist/server/auth-marketing.js

@@ -0,0 +1,268 @@
+export const BUILT_IN_AUTH_MARKETING = {
+    analytics: {
+        appName: "Agent-Native Analytics",
+        tagline: "Your AI agent queries your data sources, builds dashboards, and answers business questions alongside you.",
+        features: [
+            "Ask any question and get answers from BigQuery, HubSpot, Jira, and more",
+            "Agent-built dashboards that pull live data from all your sources",
+            "Saved analyses the agent can re-run on demand with fresh numbers",
+        ],
+    },
+    brain: {
+        appName: "Agent-Native Brain",
+        tagline: "A company memory layer where raw conversations become reviewed, searchable institutional knowledge.",
+        features: [
+            "Import transcripts, notes, Slack exports, and Granola summaries",
+            "Validate every fact against exact source quotes",
+            "Review company-wide knowledge through proposal workflows",
+        ],
+    },
+    calendar: {
+        appName: "Agent-Native Calendar",
+        tagline: "Your AI agent schedules, reschedules, and manages your calendar so you never have to.",
+        features: [
+            "Finds open slots and books meetings on your behalf",
+            "Manages availability and booking links automatically",
+            "Answers schedule questions and resolves conflicts instantly",
+        ],
+    },
+    calls: {
+        appName: "Agent-Native Calls",
+        tagline: "Your AI agent transcribes, summarizes, and surfaces key moments from every conversation.",
+        features: [
+            "Automatic recaps, action items, and next steps after every call",
+            "Smart trackers that detect competitor mentions, objections, and custom topics",
+            "Shareable snippets for the exact moment that matters",
+        ],
+    },
+    clips: {
+        appName: "Agent-Native Clips",
+        tagline: "Your AI agent transcribes, summarizes, and searches everything you record alongside you.",
+        features: [
+            "One-click screen recording with automatic titles, summaries, and chapters",
+            "Calendar-synced meeting notes with live transcripts and action items",
+            "One searchable library across recordings, meetings, and dictations",
+        ],
+    },
+    code: {
+        appName: "Agent-Native Code",
+        tagline: "A customizable local Agent-Native Code UI for long-running coding sessions, slash commands, and migration goals.",
+        features: [
+            "Start and resume local coding sessions",
+            "Use the same transcript store as the CLI and Desktop",
+            "Customize the UI while reusing the agent-native run harness",
+        ],
+    },
+    content: {
+        appName: "Agent-Native Content",
+        tagline: "Your AI agent creates, edits, and organizes documents alongside you in a Notion-like workspace.",
+        features: [
+            "Create and restructure entire document trees from a single prompt",
+            "Surgical edits that sync live to your editor via real-time collaboration",
+            "Search, summarize, and cross-reference documents instantly",
+        ],
+    },
+    design: {
+        appName: "Agent-Native Design",
+        tagline: "Design and prototype by describing what you want. The AI agent turns your ideas into interactive, fully responsive designs in seconds.",
+        features: [
+            "Create polished prototypes just by describing them",
+            "Build and apply design systems to keep everything on-brand",
+            "Export your work or share it with a link",
+        ],
+    },
+    dispatch: {
+        appName: "Agent-Native Dispatch",
+        tagline: "Your AI agent manages secrets, orchestrates other agents, and routes messages across your workspace.",
+        features: [
+            "Centralized vault for secrets with granular per-app grants",
+            "Cross-agent orchestration and delegation to specialist apps",
+            "Slack and Telegram routing with approval workflows",
+        ],
+    },
+    forms: {
+        appName: "Agent-Native Forms",
+        tagline: "Your AI agent builds, publishes, and analyzes forms alongside you.",
+        features: [
+            "Create complete forms from a single sentence",
+            "Instant publishing with shareable links and captcha",
+            "Response summaries, exports, and trend analysis on demand",
+        ],
+    },
+    images: {
+        appName: "Agent-Native Images",
+        tagline: "Your AI agent creates, refines, and organizes on-brand images alongside you.",
+        features: [
+            "Build reusable brand image libraries from logos, product shots, and references",
+            "Generate heroes, diagrams, slide art, and product visuals from a prompt",
+            "Audit prompts, references, outputs, and refinements across every run",
+        ],
+    },
+    mail: {
+        appName: "Agent-Native Mail",
+        tagline: "Your AI agent reads, drafts, and organizes email alongside you.",
+        features: [
+            "Replies that match your tone and style",
+            "Multi-account Gmail in a single unified inbox",
+            "Autonomous triage, archiving, and follow-ups",
+        ],
+        runLocalCommand: "npx @agent-native/core create my-mail-app --template mail",
+    },
+    "meeting-notes": {
+        appName: "Agent-Native Meeting Notes",
+        tagline: "Your AI agent transcribes, enhances, and organizes your meeting notes while you focus on the conversation.",
+        features: [
+            "AI-enhanced meeting notes that merge raw notes with transcripts",
+            "Smart contact and company tracking from meeting attendees",
+            "Reusable templates for consistent note formatting",
+        ],
+    },
+    migration: {
+        appName: "Migration Workbench",
+        tagline: "Move existing apps to agent-native with assessment, human approval, and deterministic verification.",
+        features: [
+            "Inventory routes, components, behavior, and content before touching output",
+            "Approve plans before generated writes begin",
+            "Verify output with structured migration reports",
+        ],
+    },
+    recruiting: {
+        appName: "Agent-Native Recruiting",
+        tagline: "Your AI agent screens candidates, manages pipelines, and keeps your hiring on track.",
+        features: [
+            "AI resume analysis and candidate comparison",
+            "Pipeline management with automated stage progression",
+            "Scorecard tracking and overdue feedback alerts",
+        ],
+    },
+    scheduling: {
+        appName: "Agent-Native Scheduling",
+        tagline: "Your AI agent manages availability, books meetings, and handles rescheduling alongside you.",
+        features: [
+            "Automatic round-robin and team scheduling across hosts",
+            "Smart availability management with conflict detection",
+            "Autonomous rescheduling, reminders, and follow-ups",
+        ],
+    },
+    slides: {
+        appName: "Agent-Native Slides",
+        tagline: "Your AI agent builds, edits, and refines presentations alongside you.",
+        features: [
+            "Generate entire decks from a single prompt",
+            "Surgical slide edits while you present or review",
+            "Real-time collaboration between you and the agent",
+        ],
+    },
+    starter: {
+        appName: "Blank app",
+        tagline: "Build an agent-native app where the AI agent and UI share state, actions, and context.",
+        features: [
+            "Define once, use everywhere: actions work as agent tools and API endpoints",
+            "The agent always knows what you are looking at and can act on it",
+            "Modify your app's own code, routes, and styles through conversation",
+        ],
+    },
+    videos: {
+        appName: "Agent-Native Videos",
+        tagline: "Your AI agent builds, animates, and refines programmatic videos alongside you.",
+        features: [
+            "Generate animated components and compositions from a description",
+            "Fine-tune tracks, keyframes, and easing without touching code",
+            "Camera moves, interactive elements, and effects the agent wires for you",
+        ],
+    },
+    voice: {
+        appName: "Agent-Native Voice",
+        tagline: "Speak to type anywhere with context-aware formatting, snippets, and custom vocabulary.",
+        features: [
+            "Push-to-talk or hands-free dictation with Whisper transcription",
+            "Context-aware style presets for formal, casual, and excited tones",
+            "Text expansion snippets and custom dictionary for tricky words",
+        ],
+    },
+};
+const SLUG_ALIASES = {
+    "agent-native": "",
+    "blank-app": "starter",
+    "migration-goal-surface": "migration",
+    video: "videos",
+};
+function cloneMarketing(marketing) {
+    return {
+        ...marketing,
+        features: marketing.features ? [...marketing.features] : undefined,
+    };
+}
+function normalizeSlug(value) {
+    if (!value)
+        return undefined;
+    let slug = value.trim().toLowerCase();
+    if (!slug)
+        return undefined;
+    slug = slug.replace(/^@agent-native\//, "");
+    slug = slug
+        .replace(/&/g, " and ")
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "");
+    slug = slug.replace(/^agent-native-/, "");
+    slug = SLUG_ALIASES[slug] ?? slug;
+    if (!slug)
+        return undefined;
+    return BUILT_IN_AUTH_MARKETING[slug] ? slug : undefined;
+}
+function slugFromUrl(value) {
+    if (!value)
+        return undefined;
+    try {
+        const url = new URL(value);
+        return slugFromHost(url.host) ?? slugFromPath(url.pathname);
+    }
+    catch {
+        return undefined;
+    }
+}
+function slugFromHost(value) {
+    if (!value)
+        return undefined;
+    const host = value.split(",")[0]?.trim().split(":")[0]?.toLowerCase();
+    if (!host)
+        return undefined;
+    if (host.endsWith(".agent-native.com")) {
+        return normalizeSlug(host.slice(0, -".agent-native.com".length));
+    }
+    return undefined;
+}
+function slugFromPath(value) {
+    if (!value)
+        return undefined;
+    const firstSegment = value.split("?")[0]?.split("/").filter(Boolean)[0];
+    return normalizeSlug(firstSegment);
+}
+function candidateSlugs(opts = {}) {
+    const env = process.env;
+    const candidates = [
+        opts.requestHost ? slugFromHost(opts.requestHost) : undefined,
+        opts.requestPath ? slugFromPath(opts.requestPath) : undefined,
+        normalizeSlug(env.AGENT_NATIVE_TEMPLATE),
+        normalizeSlug(env.APP_NAME),
+        normalizeSlug(env.npm_package_name),
+        slugFromPath(env.APP_BASE_PATH),
+        slugFromPath(env.VITE_APP_BASE_PATH),
+        slugFromUrl(env.APP_URL),
+        slugFromUrl(env.BETTER_AUTH_URL),
+        slugFromUrl(env.VITE_BETTER_AUTH_URL),
+        slugFromUrl(env.URL),
+        slugFromUrl(env.DEPLOY_URL),
+        slugFromUrl(env.DEPLOY_PRIME_URL),
+    ];
+    return candidates.filter((slug) => !!slug);
+}
+export function resolveBuiltInAuthMarketing(opts = {}) {
+    for (const slug of candidateSlugs(opts)) {
+        const marketing = BUILT_IN_AUTH_MARKETING[slug];
+        if (marketing)
+            return cloneMarketing(marketing);
+    }
+    return undefined;
+}
+//# sourceMappingURL=auth-marketing.js.map

package/dist/server/auth-marketing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-marketing.js","sourceRoot":"","sources":["../../src/server/auth-marketing.ts"],"names":[],"mappings":"AAaA,MAAM,CAAC,MAAM,uBAAuB,GAAyC;IAC3E,SAAS,EAAE;QACT,OAAO,EAAE,wBAAwB;QACjC,OAAO,EACL,2GAA2G;QAC7G,QAAQ,EAAE;YACR,yEAAyE;YACzE,kEAAkE;YAClE,kEAAkE;SACnE;KACF;IACD,KAAK,EAAE;QACL,OAAO,EAAE,oBAAoB;QAC7B,OAAO,EACL,qGAAqG;QACvG,QAAQ,EAAE;YACR,iEAAiE;YACjE,iDAAiD;YACjD,0DAA0D;SAC3D;KACF;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,uBAAuB;QAChC,OAAO,EACL,uFAAuF;QACzF,QAAQ,EAAE;YACR,oDAAoD;YACpD,sDAAsD;YACtD,6DAA6D;SAC9D;KACF;IACD,KAAK,EAAE;QACL,OAAO,EAAE,oBAAoB;QAC7B,OAAO,EACL,0FAA0F;QAC5F,QAAQ,EAAE;YACR,iEAAiE;YACjE,+EAA+E;YAC/E,sDAAsD;SACvD;KACF;IACD,KAAK,EAAE;QACL,OAAO,EAAE,oBAAoB;QAC7B,OAAO,EACL,0FAA0F;QAC5F,QAAQ,EAAE;YACR,2EAA2E;YAC3E,sEAAsE;YACtE,oEAAoE;SACrE;KACF;IACD,IAAI,EAAE;QACJ,OAAO,EAAE,mBAAmB;QAC5B,OAAO,EACL,kHAAkH;QACpH,QAAQ,EAAE;YACR,wCAAwC;YACxC,sDAAsD;YACtD,6DAA6D;SAC9D;KACF;IACD,OAAO,EAAE;QACP,OAAO,EAAE,sBAAsB;QAC/B,OAAO,EACL,iGAAiG;QACnG,QAAQ,EAAE;YACR,mEAAmE;YACnE,0EAA0E;YAC1E,4DAA4D;SAC7D;KACF;IACD,MAAM,EAAE;QACN,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EACL,wIAAwI;QAC1I,QAAQ,EAAE;YACR,oDAAoD;YACpD,4DAA4D;YAC5D,0CAA0C;SAC3C;KACF;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,uBAAuB;QAChC,OAAO,EACL,sGAAsG;QACxG,QAAQ,EAAE;YACR,4DAA4D;YAC5D,6DAA6D;YAC7D,oDAAoD;SACrD;KACF;IACD,KAAK,EAAE;QACL,OAAO,EAAE,oBAAoB;QAC7B,OAAO,EACL,oEAAoE;QACtE,QAAQ,EAAE;YACR,8CAA8C;YAC9C,qDAAqD;YACrD,2DAA2D;SAC5D;KACF;IACD,MAAM,EAAE;QACN,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EACL,8EAA8E;QAChF,QAAQ,EAAE;YACR,gFAAgF;YAChF,yEAAyE;YACzE,sEAAsE;SACvE;KACF;IACD,IAAI,EAAE;QACJ,OAAO,EAAE,mBAAmB;QAC5B,OAAO,EAAE,iEAAiE;QAC1E,QAAQ,EAAE;YACR,wCAAwC;YACxC,+CAA+C;YAC/C,8CAA8C;SAC/C;QACD,eAAe,EACb,2DAA2D;KAC9D;IACD,eAAe,EAAE;QACf,OAAO,EAAE,4BAA4B;QACrC,OAAO,EACL,4GAA4G;QAC9G,QAAQ,EAAE;YACR,iEAAiE;YACjE,2DAA2D;YAC3D,mDAAmD;SACpD;KACF;IACD,SAAS,EAAE;QACT,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EACL,qGAAqG;QACvG,QAAQ,EAAE;YACR,4EAA4E;YAC5E,6CAA6C;YAC7C,iDAAiD;SAClD;KACF;IACD,UAAU,EAAE;QACV,OAAO,EAAE,yBAAyB;QAClC,OAAO,EACL,sFAAsF;QACxF,QAAQ,EAAE;YACR,6CAA6C;YAC7C,sDAAsD;YACtD,gDAAgD;SACjD;KACF;IACD,UAAU,EAAE;QACV,OAAO,EAAE,yBAAyB;QAClC,OAAO,EACL,6FAA6F;QAC/F,QAAQ,EAAE;YACR,wDAAwD;YACxD,uDAAuD;YACvD,oDAAoD;SACrD;KACF;IACD,MAAM,EAAE;QACN,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EACL,uEAAuE;QACzE,QAAQ,EAAE;YACR,4CAA4C;YAC5C,kDAAkD;YAClD,mDAAmD;SACpD;KACF;IACD,OAAO,EAAE;QACP,OAAO,EAAE,WAAW;QACpB,OAAO,EACL,wFAAwF;QAC1F,QAAQ,EAAE;YACR,4EAA4E;YAC5E,kEAAkE;YAClE,qEAAqE;SACtE;KACF;IACD,MAAM,EAAE;QACN,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EACL,gFAAgF;QAClF,QAAQ,EAAE;YACR,kEAAkE;YAClE,+DAA+D;YAC/D,yEAAyE;SAC1E;KACF;IACD,KAAK,EAAE;QACL,OAAO,EAAE,oBAAoB;QAC7B,OAAO,EACL,wFAAwF;QAC1F,QAAQ,EAAE;YACR,iEAAiE;YACjE,mEAAmE;YACnE,gEAAgE;SACjE;KACF;CACF,CAAC;AAEF,MAAM,YAAY,GAA2B;IAC3C,cAAc,EAAE,EAAE;IAClB,WAAW,EAAE,SAAS;IACtB,wBAAwB,EAAE,WAAW;IACrC,KAAK,EAAE,QAAQ;CAChB,CAAC;AAEF,SAAS,cAAc,CAAC,SAA+B;IACrD,OAAO;QACL,GAAG,SAAS;QACZ,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB;IAC9C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAE5B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,GAAG,IAAI;SACR,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB;IAC5C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IACtE,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACvC,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,aAAa,CAAC,YAAY,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CACrB,OAA2C,EAAE;IAE7C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7D,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7D,aAAa,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACxC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC3B,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACnC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC;QAC/B,YAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACpC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;QACxB,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC;QAChC,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACrC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;QACpB,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;QAC3B,WAAW,CAAC,GAAG,CAAC,gBAAgB,CAAC;KAClC,CAAC;IAEF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAA2C,EAAE;IAE7C,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,SAAS;YAAE,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["export interface AuthMarketingContent {\n  appName: string;\n  tagline: string;\n  description?: string;\n  features?: string[];\n  runLocalCommand?: string;\n}\n\nexport interface ResolveBuiltInAuthMarketingOptions {\n  requestHost?: string;\n  requestPath?: string;\n}\n\nexport const BUILT_IN_AUTH_MARKETING: Record<string, AuthMarketingContent> = {\n  analytics: {\n    appName: \"Agent-Native Analytics\",\n    tagline:\n      \"Your AI agent queries your data sources, builds dashboards, and answers business questions alongside you.\",\n    features: [\n      \"Ask any question and get answers from BigQuery, HubSpot, Jira, and more\",\n      \"Agent-built dashboards that pull live data from all your sources\",\n      \"Saved analyses the agent can re-run on demand with fresh numbers\",\n    ],\n  },\n  brain: {\n    appName: \"Agent-Native Brain\",\n    tagline:\n      \"A company memory layer where raw conversations become reviewed, searchable institutional knowledge.\",\n    features: [\n      \"Import transcripts, notes, Slack exports, and Granola summaries\",\n      \"Validate every fact against exact source quotes\",\n      \"Review company-wide knowledge through proposal workflows\",\n    ],\n  },\n  calendar: {\n    appName: \"Agent-Native Calendar\",\n    tagline:\n      \"Your AI agent schedules, reschedules, and manages your calendar so you never have to.\",\n    features: [\n      \"Finds open slots and books meetings on your behalf\",\n      \"Manages availability and booking links automatically\",\n      \"Answers schedule questions and resolves conflicts instantly\",\n    ],\n  },\n  calls: {\n    appName: \"Agent-Native Calls\",\n    tagline:\n      \"Your AI agent transcribes, summarizes, and surfaces key moments from every conversation.\",\n    features: [\n      \"Automatic recaps, action items, and next steps after every call\",\n      \"Smart trackers that detect competitor mentions, objections, and custom topics\",\n      \"Shareable snippets for the exact moment that matters\",\n    ],\n  },\n  clips: {\n    appName: \"Agent-Native Clips\",\n    tagline:\n      \"Your AI agent transcribes, summarizes, and searches everything you record alongside you.\",\n    features: [\n      \"One-click screen recording with automatic titles, summaries, and chapters\",\n      \"Calendar-synced meeting notes with live transcripts and action items\",\n      \"One searchable library across recordings, meetings, and dictations\",\n    ],\n  },\n  code: {\n    appName: \"Agent-Native Code\",\n    tagline:\n      \"A customizable local Agent-Native Code UI for long-running coding sessions, slash commands, and migration goals.\",\n    features: [\n      \"Start and resume local coding sessions\",\n      \"Use the same transcript store as the CLI and Desktop\",\n      \"Customize the UI while reusing the agent-native run harness\",\n    ],\n  },\n  content: {\n    appName: \"Agent-Native Content\",\n    tagline:\n      \"Your AI agent creates, edits, and organizes documents alongside you in a Notion-like workspace.\",\n    features: [\n      \"Create and restructure entire document trees from a single prompt\",\n      \"Surgical edits that sync live to your editor via real-time collaboration\",\n      \"Search, summarize, and cross-reference documents instantly\",\n    ],\n  },\n  design: {\n    appName: \"Agent-Native Design\",\n    tagline:\n      \"Design and prototype by describing what you want. The AI agent turns your ideas into interactive, fully responsive designs in seconds.\",\n    features: [\n      \"Create polished prototypes just by describing them\",\n      \"Build and apply design systems to keep everything on-brand\",\n      \"Export your work or share it with a link\",\n    ],\n  },\n  dispatch: {\n    appName: \"Agent-Native Dispatch\",\n    tagline:\n      \"Your AI agent manages secrets, orchestrates other agents, and routes messages across your workspace.\",\n    features: [\n      \"Centralized vault for secrets with granular per-app grants\",\n      \"Cross-agent orchestration and delegation to specialist apps\",\n      \"Slack and Telegram routing with approval workflows\",\n    ],\n  },\n  forms: {\n    appName: \"Agent-Native Forms\",\n    tagline:\n      \"Your AI agent builds, publishes, and analyzes forms alongside you.\",\n    features: [\n      \"Create complete forms from a single sentence\",\n      \"Instant publishing with shareable links and captcha\",\n      \"Response summaries, exports, and trend analysis on demand\",\n    ],\n  },\n  images: {\n    appName: \"Agent-Native Images\",\n    tagline:\n      \"Your AI agent creates, refines, and organizes on-brand images alongside you.\",\n    features: [\n      \"Build reusable brand image libraries from logos, product shots, and references\",\n      \"Generate heroes, diagrams, slide art, and product visuals from a prompt\",\n      \"Audit prompts, references, outputs, and refinements across every run\",\n    ],\n  },\n  mail: {\n    appName: \"Agent-Native Mail\",\n    tagline: \"Your AI agent reads, drafts, and organizes email alongside you.\",\n    features: [\n      \"Replies that match your tone and style\",\n      \"Multi-account Gmail in a single unified inbox\",\n      \"Autonomous triage, archiving, and follow-ups\",\n    ],\n    runLocalCommand:\n      \"npx @agent-native/core create my-mail-app --template mail\",\n  },\n  \"meeting-notes\": {\n    appName: \"Agent-Native Meeting Notes\",\n    tagline:\n      \"Your AI agent transcribes, enhances, and organizes your meeting notes while you focus on the conversation.\",\n    features: [\n      \"AI-enhanced meeting notes that merge raw notes with transcripts\",\n      \"Smart contact and company tracking from meeting attendees\",\n      \"Reusable templates for consistent note formatting\",\n    ],\n  },\n  migration: {\n    appName: \"Migration Workbench\",\n    tagline:\n      \"Move existing apps to agent-native with assessment, human approval, and deterministic verification.\",\n    features: [\n      \"Inventory routes, components, behavior, and content before touching output\",\n      \"Approve plans before generated writes begin\",\n      \"Verify output with structured migration reports\",\n    ],\n  },\n  recruiting: {\n    appName: \"Agent-Native Recruiting\",\n    tagline:\n      \"Your AI agent screens candidates, manages pipelines, and keeps your hiring on track.\",\n    features: [\n      \"AI resume analysis and candidate comparison\",\n      \"Pipeline management with automated stage progression\",\n      \"Scorecard tracking and overdue feedback alerts\",\n    ],\n  },\n  scheduling: {\n    appName: \"Agent-Native Scheduling\",\n    tagline:\n      \"Your AI agent manages availability, books meetings, and handles rescheduling alongside you.\",\n    features: [\n      \"Automatic round-robin and team scheduling across hosts\",\n      \"Smart availability management with conflict detection\",\n      \"Autonomous rescheduling, reminders, and follow-ups\",\n    ],\n  },\n  slides: {\n    appName: \"Agent-Native Slides\",\n    tagline:\n      \"Your AI agent builds, edits, and refines presentations alongside you.\",\n    features: [\n      \"Generate entire decks from a single prompt\",\n      \"Surgical slide edits while you present or review\",\n      \"Real-time collaboration between you and the agent\",\n    ],\n  },\n  starter: {\n    appName: \"Blank app\",\n    tagline:\n      \"Build an agent-native app where the AI agent and UI share state, actions, and context.\",\n    features: [\n      \"Define once, use everywhere: actions work as agent tools and API endpoints\",\n      \"The agent always knows what you are looking at and can act on it\",\n      \"Modify your app's own code, routes, and styles through conversation\",\n    ],\n  },\n  videos: {\n    appName: \"Agent-Native Videos\",\n    tagline:\n      \"Your AI agent builds, animates, and refines programmatic videos alongside you.\",\n    features: [\n      \"Generate animated components and compositions from a description\",\n      \"Fine-tune tracks, keyframes, and easing without touching code\",\n      \"Camera moves, interactive elements, and effects the agent wires for you\",\n    ],\n  },\n  voice: {\n    appName: \"Agent-Native Voice\",\n    tagline:\n      \"Speak to type anywhere with context-aware formatting, snippets, and custom vocabulary.\",\n    features: [\n      \"Push-to-talk or hands-free dictation with Whisper transcription\",\n      \"Context-aware style presets for formal, casual, and excited tones\",\n      \"Text expansion snippets and custom dictionary for tricky words\",\n    ],\n  },\n};\n\nconst SLUG_ALIASES: Record<string, string> = {\n  \"agent-native\": \"\",\n  \"blank-app\": \"starter\",\n  \"migration-goal-surface\": \"migration\",\n  video: \"videos\",\n};\n\nfunction cloneMarketing(marketing: AuthMarketingContent): AuthMarketingContent {\n  return {\n    ...marketing,\n    features: marketing.features ? [...marketing.features] : undefined,\n  };\n}\n\nfunction normalizeSlug(value: string | undefined): string | undefined {\n  if (!value) return undefined;\n  let slug = value.trim().toLowerCase();\n  if (!slug) return undefined;\n\n  slug = slug.replace(/^@agent-native\\//, \"\");\n  slug = slug\n    .replace(/&/g, \" and \")\n    .replace(/[^a-z0-9]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  slug = slug.replace(/^agent-native-/, \"\");\n  slug = SLUG_ALIASES[slug] ?? slug;\n  if (!slug) return undefined;\n  return BUILT_IN_AUTH_MARKETING[slug] ? slug : undefined;\n}\n\nfunction slugFromUrl(value: string | undefined): string | undefined {\n  if (!value) return undefined;\n  try {\n    const url = new URL(value);\n    return slugFromHost(url.host) ?? slugFromPath(url.pathname);\n  } catch {\n    return undefined;\n  }\n}\n\nfunction slugFromHost(value: string | undefined): string | undefined {\n  if (!value) return undefined;\n  const host = value.split(\",\")[0]?.trim().split(\":\")[0]?.toLowerCase();\n  if (!host) return undefined;\n  if (host.endsWith(\".agent-native.com\")) {\n    return normalizeSlug(host.slice(0, -\".agent-native.com\".length));\n  }\n  return undefined;\n}\n\nfunction slugFromPath(value: string | undefined): string | undefined {\n  if (!value) return undefined;\n  const firstSegment = value.split(\"?\")[0]?.split(\"/\").filter(Boolean)[0];\n  return normalizeSlug(firstSegment);\n}\n\nfunction candidateSlugs(\n  opts: ResolveBuiltInAuthMarketingOptions = {},\n): string[] {\n  const env = process.env;\n  const candidates = [\n    opts.requestHost ? slugFromHost(opts.requestHost) : undefined,\n    opts.requestPath ? slugFromPath(opts.requestPath) : undefined,\n    normalizeSlug(env.AGENT_NATIVE_TEMPLATE),\n    normalizeSlug(env.APP_NAME),\n    normalizeSlug(env.npm_package_name),\n    slugFromPath(env.APP_BASE_PATH),\n    slugFromPath(env.VITE_APP_BASE_PATH),\n    slugFromUrl(env.APP_URL),\n    slugFromUrl(env.BETTER_AUTH_URL),\n    slugFromUrl(env.VITE_BETTER_AUTH_URL),\n    slugFromUrl(env.URL),\n    slugFromUrl(env.DEPLOY_URL),\n    slugFromUrl(env.DEPLOY_PRIME_URL),\n  ];\n\n  return candidates.filter((slug): slug is string => !!slug);\n}\n\nexport function resolveBuiltInAuthMarketing(\n  opts: ResolveBuiltInAuthMarketingOptions = {},\n): AuthMarketingContent | undefined {\n  for (const slug of candidateSlugs(opts)) {\n    const marketing = BUILT_IN_AUTH_MARKETING[slug];\n    if (marketing) return cloneMarketing(marketing);\n  }\n  return undefined;\n}\n"]}

package/dist/server/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/server/auth.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAyChE,KAAK,KAAK,GAAG,SAAS,CAAC;AAQvB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAMlE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAwB5D,OAAO,EAIL,KAAK,oBAAoB,EAC1B,MAAM,qCAAqC,CAAC;AAc7C;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAMD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC7D;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB;;;;;;;;OAQG;IACH,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC;;;OAGG;IACH,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC;IACtC;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;OAIG;IACH,SAAS,CAAC,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF;;;OAGG;IACH,kBAAkB,CAAC,EAAE;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACxB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;OAEG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAoCD;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,MAAM,GAAG,SAAS,CAEpD;AAED,eAAO,MAAM,WAAW,QAA4C,CAAC;AACrE,eAAO,MAAM,yBAAyB,QACQ,CAAC;AAE/C;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAGvD;AAmCD,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAExE;AAgCD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAIjE;AAkGD;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAG1C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAUrE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAOpE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CASjE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAQzD;AAmJD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAI7D;AAyDD;;;GAGG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW7E;AAED,uDAAuD;AACvD,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAShE;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmB3E;AAsED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAmBD,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,QAWd;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,2BAA2B,QAOnC;AAmGD;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,CAG5C;AA+mBD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAY5E;AAgID,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAS7E;AAo7CD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,KAAK,EACV,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,OAAO,CAAC,CAmMlB;AAMD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAEzE"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/server/auth.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAyChE,KAAK,KAAK,GAAG,SAAS,CAAC;AAQvB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAUlE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAwB5D,OAAO,EAIL,KAAK,oBAAoB,EAC1B,MAAM,qCAAqC,CAAC;AAc7C;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAMD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC7D;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB;;;;;;;;OAQG;IACH,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC;;;OAGG;IACH,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC;IACtC;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;OAIG;IACH,SAAS,CAAC,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF;;;OAGG;IACH,kBAAkB,CAAC,EAAE;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACxB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;OAEG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAoCD;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,MAAM,GAAG,SAAS,CAEpD;AAED,eAAO,MAAM,WAAW,QAA4C,CAAC;AACrE,eAAO,MAAM,yBAAyB,QACQ,CAAC;AAE/C;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAGvD;AAmCD,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAExE;AAgCD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAIjE;AAkGD;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAG1C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAUrE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAOpE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CASjE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAQzD;AAmJD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAI7D;AAyDD;;;GAGG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW7E;AAED,uDAAuD;AACvD,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAShE;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmB3E;AAgHD,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAmBD,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,QAWd;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,2BAA2B,QAOnC;AAmGD;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,CAG5C;AA+mBD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAY5E;AAgID,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAS7E;AA66CD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,KAAK,EACV,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,OAAO,CAAC,CAuLlB;AAMD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAEzE"}

package/dist/server/auth.js

@@ -40,7 +40,7 @@ function toWebRequest(event) {
 import { getDbExec, isPostgres, intType, retryOnDdlRace, } from "../db/client.js";
 import { getBetterAuth, getBetterAuthSync } from "./better-auth-instance.js";
 import { getAllowedCorsOrigin, readCorsAllowedOrigins, } from "./cors-origins.js";
-import { getOnboardingHtml, getResetPasswordHtml } from "./onboarding-html.js";
+import { getOnboardingHtml, getResetPasswordHtml, } from "./onboarding-html.js";
 import { readBody } from "../server/h3-helpers.js";
 import { readDesktopSso, writeDesktopSso, clearDesktopSso, } from "./desktop-sso.js";
 import { isElectron as isElectronRequest, getAppBasePath, getAppUrl, encodeOAuthState, decodeOAuthState, createOAuthSession, oauthCallbackResponse, oauthErrorPage, resolveOAuthRedirectUri, isAllowedOAuthRedirectUri, } from "./google-oauth.js";
@@ -594,6 +594,32 @@ export async function getSessionEmail(token) {
 let customGetSession = null;
 let _authGuardConfig = null;
 const _genericGoogleOAuthRoutesEnabled = new WeakMap();
+function getRequestHost(event) {
+    return (getHeader(event, "x-forwarded-host") ??
+        getHeader(event, "host") ??
+        undefined);
+}
+function getOnboardingHtmlOptions(options, event, rawPath) {
+    return {
+        googleOnly: options.googleOnly,
+        marketing: options.marketing,
+        googleSignInNotice: options.googleSignInNotice,
+        googleAuthMode: options.googleAuthMode,
+        requestHost: event ? getRequestHost(event) : undefined,
+        requestPath: rawPath,
+    };
+}
+function getAuthOnboardingHtml(options, event, rawPath) {
+    return getOnboardingHtml(getOnboardingHtmlOptions(options, event, rawPath));
+}
+function getOnboardingLoginHtmlConfig(options) {
+    if (options.loginHtml)
+        return { loginHtml: options.loginHtml };
+    return {
+        loginHtml: getAuthOnboardingHtml(options),
+        getLoginHtml: (event, rawPath) => getAuthOnboardingHtml(options, event, rawPath),
+    };
+}
 function resolveWorkspaceAppAudience(options = {}) {
     return normalizeWorkspaceAppAudience(options.workspaceAppAudience ?? workspaceAppAudienceFromEnv());
 }
@@ -2558,15 +2584,9 @@ async function mountBetterAuthRoutes(app, options) {
     }));
     // Auth guard — stored both in framework middleware registry AND in
     // _authGuardFn so the server middleware can enforce it on ALL routes.
-    const loginHtml = options.loginHtml ??
-        getOnboardingHtml({
-            googleOnly: options.googleOnly,
-            marketing: options.marketing,
-            googleSignInNotice: options.googleSignInNotice,
-            googleAuthMode: options.googleAuthMode,
-        });
+    const loginHtmlConfig = getOnboardingLoginHtmlConfig(options);
     _authGuardConfig = {
-        loginHtml,
+        ...loginHtmlConfig,
         publicPaths,
         workspaceAppAudience,
         workspaceAppPublicPaths: workspaceAppRouteAccess.publicPaths,
@@ -2778,14 +2798,9 @@ export async function autoMountAuth(app, options = {}) {
                 options.loginHtml ||
                 options.marketing ||
                 options.googleSignInNotice) {
-                _authGuardConfig.loginHtml =
-                    options.loginHtml ??
-                        getOnboardingHtml({
-                            googleOnly: options.googleOnly,
-                            marketing: options.marketing,
-                            googleSignInNotice: options.googleSignInNotice,
-                            googleAuthMode: options.googleAuthMode,
-                        });
+                const loginHtmlConfig = getOnboardingLoginHtmlConfig(options);
+                _authGuardConfig.loginHtml = loginHtmlConfig.loginHtml;
+                _authGuardConfig.getLoginHtml = loginHtmlConfig.getLoginHtml;
             }
             if (options.publicPaths) {
                 _authGuardConfig.publicPaths = [
@@ -2893,15 +2908,9 @@ export async function autoMountAuth(app, options = {}) {
         // CRITICAL: Even if Better Auth fails, register the auth guard so
         // unauthenticated users can't access the app. They'll see the login
         // page but won't be able to sign in until the DB is available.
-        const loginHtml = options.loginHtml ??
-            getOnboardingHtml({
-                googleOnly: options.googleOnly,
-                marketing: options.marketing,
-                googleSignInNotice: options.googleSignInNotice,
-                googleAuthMode: options.googleAuthMode,
-            });
+        const loginHtmlConfig = getOnboardingLoginHtmlConfig(options);
         _authGuardConfig = {
-            loginHtml,
+            ...loginHtmlConfig,
             publicPaths,
             workspaceAppAudience,
             workspaceAppPublicPaths: workspaceAppRouteAccess.publicPaths,