@agent-native/core 0.47.1 → 0.48.2

package/dist/server/app-base-path.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-base-path.js","sourceRoot":"","sources":["../../src/server/app-base-path.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,oBAAoB,CAAC,KAAyB;IAC5D,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC;IAC3C,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnE,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,oBAAoB,CACzB,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAC5D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACvD,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ;QAAE,OAAO,OAAO,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjE,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;IAC5D,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC;QACnE,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,OAAO,GAAG,QAAQ,EAAE,CAAC;AACjC,CAAC","sourcesContent":["export function normalizeAppBasePath(value: string | undefined): string {\n  if (!value || value === \"/\") return \"\";\n  const trimmed = value.trim();\n  if (!trimmed || trimmed === \"/\") return \"\";\n  const normalized = trimmed.replace(/^\\/+/, \"\").replace(/\\/+$/, \"\");\n  return normalized ? `/${normalized}` : \"\";\n}\n\nexport function getConfiguredAppBasePath(): string {\n  return normalizeAppBasePath(\n    process.env.VITE_APP_BASE_PATH || process.env.APP_BASE_PATH,\n  );\n}\n\nexport function withConfiguredAppBasePath(baseUrl: string): string {\n  const basePath = getConfiguredAppBasePath();\n  const trimmed = baseUrl.replace(/\\/$/, \"\");\n  if (!basePath) return trimmed;\n\n  try {\n    const url = new URL(trimmed);\n    const pathname = normalizeAppBasePath(url.pathname);\n    if (pathname === basePath || pathname.startsWith(`${basePath}/`)) {\n      return trimmed;\n    }\n  } catch {\n    // Fall through for relative or otherwise non-URL strings.\n  }\n\n  if (trimmed.endsWith(basePath) || trimmed.includes(`${basePath}/`)) {\n    return trimmed;\n  }\n  return `${trimmed}${basePath}`;\n}\n"]}
+{"version":3,"file":"app-base-path.js","sourceRoot":"","sources":["../../src/server/app-base-path.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,oBAAoB,CAAC,KAAyB;IAC5D,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC;IAC3C,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnE,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,oBAAoB,CACzB,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAC5D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,OAAO,GACX,MAAM,CAAC,IAGR,CAAC,GAAG,CAAC;IACN,OAAO,oBAAoB,CACzB,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAC5B,OAAO,CAAC,GAAG,CAAC,aAAa;QACzB,OAAO,EAAE,kBAAkB;QAC3B,OAAO,EAAE,aAAa;QACtB,OAAO,EAAE,QAAQ,CACpB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,QAAQ,GAAG,wBAAwB,EAAE;IAErC,IAAI,CAAC,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC/B,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACtC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;IAChD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACvD,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ;QAAE,OAAO,OAAO,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjE,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;IAC5D,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC;QACnE,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,OAAO,GAAG,QAAQ,EAAE,CAAC;AACjC,CAAC","sourcesContent":["export function normalizeAppBasePath(value: string | undefined): string {\n  if (!value || value === \"/\") return \"\";\n  const trimmed = value.trim();\n  if (!trimmed || trimmed === \"/\") return \"\";\n  const normalized = trimmed.replace(/^\\/+/, \"\").replace(/\\/+$/, \"\");\n  return normalized ? `/${normalized}` : \"\";\n}\n\nexport function getConfiguredAppBasePath(): string {\n  return normalizeAppBasePath(\n    process.env.VITE_APP_BASE_PATH || process.env.APP_BASE_PATH,\n  );\n}\n\n/**\n * SSR-aware variant of getConfiguredAppBasePath.\n *\n * In SSR builds (Vite's server-side bundle), `process.env` may not carry\n * VITE_* variables that were only statically replaced at build time. As a\n * fallback this variant also checks `import.meta.env` (available inside a\n * Vite SSR build) including `BASE_URL`, which Vite sets from the `base`\n * config option. Used by ssr-handler.ts where the Nitro server bundle is\n * built with Vite and the env may be delivered via import.meta rather than\n * process.env.\n */\nexport function getAppBasePathFromViteEnv(): string {\n  const metaEnv = (\n    import.meta as unknown as {\n      env?: Record<string, string | undefined>;\n    }\n  ).env;\n  return normalizeAppBasePath(\n    process.env.VITE_APP_BASE_PATH ||\n      process.env.APP_BASE_PATH ||\n      metaEnv?.VITE_APP_BASE_PATH ||\n      metaEnv?.APP_BASE_PATH ||\n      metaEnv?.BASE_URL,\n  );\n}\n\n/**\n * Strip the configured app base path prefix from a pathname.\n *\n * Returns \"/\" when the pathname equals the base path exactly, the suffix\n * when it starts with `${basePath}/`, or the original pathname unchanged\n * when no prefix match is found.\n */\nexport function stripAppBasePath(\n  pathname: string,\n  basePath = getConfiguredAppBasePath(),\n): string {\n  if (!basePath) return pathname;\n  if (pathname === basePath) return \"/\";\n  if (pathname.startsWith(`${basePath}/`)) {\n    return pathname.slice(basePath.length) || \"/\";\n  }\n  return pathname;\n}\n\nexport function withConfiguredAppBasePath(baseUrl: string): string {\n  const basePath = getConfiguredAppBasePath();\n  const trimmed = baseUrl.replace(/\\/$/, \"\");\n  if (!basePath) return trimmed;\n\n  try {\n    const url = new URL(trimmed);\n    const pathname = normalizeAppBasePath(url.pathname);\n    if (pathname === basePath || pathname.startsWith(`${basePath}/`)) {\n      return trimmed;\n    }\n  } catch {\n    // Fall through for relative or otherwise non-URL strings.\n  }\n\n  if (trimmed.endsWith(basePath) || trimmed.includes(`${basePath}/`)) {\n    return trimmed;\n  }\n  return `${trimmed}${basePath}`;\n}\n"]}

package/dist/server/attachment-actions.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Core `read-attachment` agent tool.
+ *
+ * Large text pastes, CSVs, JSON files, and code files are truncated to
+ * 60 K chars when injected into the model context. This action lets the agent
+ * read the full content in offset/limit slices from the durable resource
+ * stored at attach-time.
+ *
+ * Storage: text-y attachments are persisted as `agent_scratch` resources
+ * keyed  `attachments/<threadId>/<sanitised-name>` under the owner's scope.
+ * The maximum stored size per attachment is 20 MB.
+ */
+import type { ActionEntry } from "../agent/production-agent.js";
+/**
+ * Determine whether a MIME type or filename represents a text-like attachment
+ * that should be stored as a durable resource for paginated reads.
+ */
+export declare function isTextLikeMimeType(contentType: string | undefined): boolean;
+export declare function isTextLikeFilename(name: string | undefined): boolean;
+/**
+ * Persist text-ish attachments from a chat turn as thread-scoped resources
+ * so the agent can later read them in slices via `read-attachment`.
+ *
+ * Silently skips attachments that aren't text-like or have no text content.
+ * Returns a map from attachment index → stored resource id for use in the
+ * truncation-notice injected into the model context.
+ */
+export declare function persistTextAttachmentsAsResources(opts: {
+    attachments: Array<{
+        type?: string;
+        name?: string;
+        contentType?: string;
+        text?: string;
+    }>;
+    threadId: string;
+    ownerEmail: string | null | undefined;
+}): Promise<Map<number, {
+    resourceId: string;
+    path: string;
+    totalChars: number;
+}>>;
+export declare function createCoreAttachmentActionEntries(): Record<string, ActionEntry>;
+//# sourceMappingURL=attachment-actions.d.ts.map

package/dist/server/attachment-actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-actions.d.ts","sourceRoot":"","sources":["../../src/server/attachment-actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAuBhE;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAQ3E;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAKpE;AAED;;;;;;;GAOG;AACH,wBAAsB,iCAAiC,CAAC,IAAI,EAAE;IAC5D,WAAW,EAAE,KAAK,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACvC,GAAG,OAAO,CACT,GAAG,CAAC,MAAM,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CACtE,CAuDA;AAED,wBAAgB,iCAAiC,IAAI,MAAM,CACzD,MAAM,EACN,WAAW,CACZ,CA2IA"}

package/dist/server/attachment-actions.js

@@ -0,0 +1,214 @@
+/**
+ * Core `read-attachment` agent tool.
+ *
+ * Large text pastes, CSVs, JSON files, and code files are truncated to
+ * 60 K chars when injected into the model context. This action lets the agent
+ * read the full content in offset/limit slices from the durable resource
+ * stored at attach-time.
+ *
+ * Storage: text-y attachments are persisted as `agent_scratch` resources
+ * keyed  `attachments/<threadId>/<sanitised-name>` under the owner's scope.
+ * The maximum stored size per attachment is 20 MB.
+ */
+import { resourceGet, resourcePut, resourceList } from "../resources/store.js";
+import { getRequestUserEmail } from "./request-context.js";
+const MAX_ATTACHMENT_RESOURCE_BYTES = 20 * 1024 * 1024; // 20 MB
+const DEFAULT_SLICE_LIMIT = 8_000; // chars returned by default per call
+/**
+ * Derive a deterministic resource path for a text attachment stored inside a
+ * thread scope.
+ */
+function attachmentResourcePath(threadId, name, index) {
+    // Sanitise the name: keep alphanum, dot, dash, underscore; replace anything
+    // else with '_'. Append the index to avoid collisions between same-named
+    // files in the same thread.
+    const safe = name.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
+    return `attachments/${threadId}/${index}-${safe}`;
+}
+/**
+ * Determine whether a MIME type or filename represents a text-like attachment
+ * that should be stored as a durable resource for paginated reads.
+ */
+export function isTextLikeMimeType(contentType) {
+    if (!contentType)
+        return false;
+    const ct = contentType.toLowerCase().split(";")[0].trim();
+    if (ct.startsWith("text/"))
+        return true;
+    if (ct === "application/json")
+        return true;
+    if (ct === "application/javascript")
+        return true;
+    if (ct === "application/typescript")
+        return true;
+    return false;
+}
+export function isTextLikeFilename(name) {
+    if (!name)
+        return false;
+    return /\.(txt|md|markdown|csv|json|jsonl|yaml|yml|ts|tsx|js|jsx|py|rb|go|rs|java|c|cpp|h|cs|swift|kt|sh|bash|zsh|fish|toml|ini|cfg|conf|xml|html|htm|css|scss|sass|less|sql|graphql|gql)$/i.test(name);
+}
+/**
+ * Persist text-ish attachments from a chat turn as thread-scoped resources
+ * so the agent can later read them in slices via `read-attachment`.
+ *
+ * Silently skips attachments that aren't text-like or have no text content.
+ * Returns a map from attachment index → stored resource id for use in the
+ * truncation-notice injected into the model context.
+ */
+export async function persistTextAttachmentsAsResources(opts) {
+    const result = new Map();
+    const owner = opts.ownerEmail || "anonymous";
+    for (let i = 0; i < opts.attachments.length; i++) {
+        const att = opts.attachments[i];
+        if (!att.text || att.text.length === 0)
+            continue;
+        if (!isTextLikeMimeType(att.contentType) && !isTextLikeFilename(att.name)) {
+            continue;
+        }
+        const text = att.text.length > MAX_ATTACHMENT_RESOURCE_BYTES
+            ? att.text.slice(0, MAX_ATTACHMENT_RESOURCE_BYTES)
+            : att.text;
+        const path = attachmentResourcePath(opts.threadId, att.name || "attachment", i);
+        try {
+            const resource = await resourcePut(owner, path, text, att.contentType || "text/plain", {
+                createdBy: "user",
+                visibility: "agent_scratch",
+                threadId: opts.threadId,
+                // 7-day TTL — long enough for multi-session threads.
+                expiresAt: Date.now() + 7 * 24 * 60 * 60 * 1000,
+            });
+            result.set(i, {
+                resourceId: resource.id,
+                path,
+                totalChars: text.length,
+            });
+        }
+        catch (err) {
+            // Best-effort: if storage fails the agent still gets the truncated
+            // context and the read-attachment call will return a not-found error.
+            console.warn("[agent-native] persistTextAttachmentsAsResources failed:", err instanceof Error ? err.message : String(err));
+        }
+    }
+    return result;
+}
+export function createCoreAttachmentActionEntries() {
+    return {
+        "read-attachment": {
+            tool: {
+                description: [
+                    "Read a slice of a large text attachment (CSV, code, JSON, markdown, plain text) that was",
+                    "truncated in the conversation context. Use this when the initial context showed a truncated",
+                    "attachment and you need to read more of it.",
+                    "",
+                    "Identify the attachment by name (e.g. name='data.csv') exactly as shown in the",
+                    "<attachment name='...'> tag in the conversation. Use offset and limit to page through it.",
+                    "",
+                    "Returns { content, offset, limit, totalChars, hasMore }.",
+                    "If totalChars is unknown (attachment not stored as a resource), returns a not-found message.",
+                ].join("\n"),
+                parameters: {
+                    type: "object",
+                    properties: {
+                        name: {
+                            type: "string",
+                            description: "The exact attachment name as it appeared in the <attachment name='...'> tag.",
+                        },
+                        threadId: {
+                            type: "string",
+                            description: "The chat thread ID. If omitted, the current thread is used.",
+                        },
+                        offset: {
+                            type: "string",
+                            description: "Character offset to start reading from. Default: 0.",
+                        },
+                        limit: {
+                            type: "string",
+                            description: `Maximum characters to return. Default: ${DEFAULT_SLICE_LIMIT}.`,
+                        },
+                    },
+                    required: ["name"],
+                },
+            },
+            run: async (input, ctx) => {
+                const ownerEmail = ctx?.userEmail || getRequestUserEmail() || "anonymous";
+                const name = String(input.name || "").trim();
+                const offset = Math.max(0, parseInt(input.offset || "0", 10) || 0);
+                const limit = Math.min(50_000, Math.max(1, parseInt(input.limit || String(DEFAULT_SLICE_LIMIT), 10) ||
+                    DEFAULT_SLICE_LIMIT));
+                if (!name) {
+                    return { error: "name is required" };
+                }
+                // Determine threadId — from input or from turn-scoped run context.
+                let threadId = String(input.threadId || "").trim();
+                if (!threadId) {
+                    try {
+                        const { getRequestRunContext } = await import("./request-context.js");
+                        const runCtx = getRequestRunContext();
+                        threadId = runCtx?.threadId || "";
+                    }
+                    catch {
+                        // ignore
+                    }
+                }
+                if (!threadId) {
+                    return {
+                        error: "threadId is required (could not be resolved from context). Re-call with the thread id.",
+                    };
+                }
+                // Search the owner's resources for an attachment matching the name.
+                try {
+                    const prefix = `attachments/${threadId}/`;
+                    const metas = await resourceList(ownerEmail, prefix, {
+                        includeAgentScratch: true,
+                    });
+                    // Find by name suffix match (the path ends with <index>-<safe-name>).
+                    const safeName = name.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
+                    const matching = metas.filter((m) => m.path.endsWith(`-${safeName}`));
+                    // If no exact match, try a partial search on the raw name.
+                    const candidates = matching.length > 0
+                        ? matching
+                        : metas.filter((m) => {
+                            const basename = m.path.split("/").pop() || "";
+                            // Strip the leading index prefix (<digits>-)
+                            const withoutIndex = basename.replace(/^\d+-/, "");
+                            return withoutIndex
+                                .toLowerCase()
+                                .includes(name.toLowerCase());
+                        });
+                    if (candidates.length === 0) {
+                        return {
+                            error: `No stored attachment found with name "${name}" in thread ${threadId}. The attachment may not have been persisted as a resource (only text-like files are stored).`,
+                        };
+                    }
+                    // Use the first match (most recent upsert wins when there are
+                    // multiple same-name attachments in the same thread).
+                    const meta = candidates[0];
+                    const resource = await resourceGet(meta.id);
+                    if (!resource) {
+                        return { error: `Attachment resource "${name}" not found.` };
+                    }
+                    const totalChars = resource.content.length;
+                    const slice = resource.content.slice(offset, offset + limit);
+                    return {
+                        name,
+                        content: slice,
+                        offset,
+                        limit,
+                        totalChars,
+                        hasMore: offset + limit < totalChars,
+                        note: offset + limit < totalChars
+                            ? `${totalChars - offset - limit} chars remain. Call again with offset=${offset + limit}.`
+                            : "End of attachment.",
+                    };
+                }
+                catch (err) {
+                    return {
+                        error: `Failed to read attachment: ${err instanceof Error ? err.message : String(err)}`,
+                    };
+                }
+            },
+        },
+    };
+}
+//# sourceMappingURL=attachment-actions.js.map

package/dist/server/attachment-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-actions.js","sourceRoot":"","sources":["../../src/server/attachment-actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,6BAA6B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;AAChE,MAAM,mBAAmB,GAAG,KAAK,CAAC,CAAC,qCAAqC;AAExE;;;GAGG;AACH,SAAS,sBAAsB,CAC7B,QAAgB,EAChB,IAAY,EACZ,KAAa;IAEb,4EAA4E;IAC5E,yEAAyE;IACzE,4BAA4B;IAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChE,OAAO,eAAe,QAAQ,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAA+B;IAChE,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,EAAE,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,EAAE,KAAK,kBAAkB;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,EAAE,KAAK,wBAAwB;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,EAAE,KAAK,wBAAwB;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAwB;IACzD,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,qLAAqL,CAAC,IAAI,CAC/L,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,IASvD;IAGC,MAAM,MAAM,GAAG,IAAI,GAAG,EAGnB,CAAC;IACJ,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,IAAI,WAAW,CAAC;IAE7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1E,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GACR,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,6BAA6B;YAC7C,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,6BAA6B,CAAC;YAClD,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAEf,MAAM,IAAI,GAAG,sBAAsB,CACjC,IAAI,CAAC,QAAQ,EACb,GAAG,CAAC,IAAI,IAAI,YAAY,EACxB,CAAC,CACF,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAChC,KAAK,EACL,IAAI,EACJ,IAAI,EACJ,GAAG,CAAC,WAAW,IAAI,YAAY,EAC/B;gBACE,SAAS,EAAE,MAAM;gBACjB,UAAU,EAAE,eAAe;gBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,qDAAqD;gBACrD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;aAChD,CACF,CAAC;YACF,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE;gBACZ,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,IAAI;gBACJ,UAAU,EAAE,IAAI,CAAC,MAAM;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mEAAmE;YACnE,sEAAsE;YACtE,OAAO,CAAC,IAAI,CACV,0DAA0D,EAC1D,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iCAAiC;IAI/C,OAAO;QACL,iBAAiB,EAAE;YACjB,IAAI,EAAE;gBACJ,WAAW,EAAE;oBACX,0FAA0F;oBAC1F,6FAA6F;oBAC7F,6CAA6C;oBAC7C,EAAE;oBACF,gFAAgF;oBAChF,2FAA2F;oBAC3F,EAAE;oBACF,0DAA0D;oBAC1D,8FAA8F;iBAC/F,CAAC,IAAI,CAAC,IAAI,CAAC;gBACZ,UAAU,EAAE;oBACV,IAAI,EAAE,QAAiB;oBACvB,UAAU,EAAE;wBACV,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,8EAA8E;yBACjF;wBACD,QAAQ,EAAE;4BACR,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,6DAA6D;yBAChE;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,qDAAqD;yBACxD;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,0CAA0C,mBAAmB,GAAG;yBAC9E;qBACF;oBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;iBACnB;aACF;YACD,GAAG,EAAE,KAAK,EAAE,KAA6B,EAAE,GAAG,EAAE,EAAE;gBAChD,MAAM,UAAU,GACd,GAAG,EAAE,SAAS,IAAI,mBAAmB,EAAE,IAAI,WAAW,CAAC;gBACzD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;gBACnE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,MAAM,EACN,IAAI,CAAC,GAAG,CACN,CAAC,EACD,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,mBAAmB,CAAC,EAAE,EAAE,CAAC;oBACtD,mBAAmB,CACtB,CACF,CAAC;gBAEF,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;gBACvC,CAAC;gBAED,mEAAmE;gBACnE,IAAI,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,IAAI,CAAC;wBACH,MAAM,EAAE,oBAAoB,EAAE,GAC5B,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;wBACvC,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;wBACtC,QAAQ,GAAI,MAAc,EAAE,QAAQ,IAAI,EAAE,CAAC;oBAC7C,CAAC;oBAAC,MAAM,CAAC;wBACP,SAAS;oBACX,CAAC;gBACH,CAAC;gBAED,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO;wBACL,KAAK,EACH,wFAAwF;qBAC3F,CAAC;gBACJ,CAAC;gBAED,oEAAoE;gBACpE,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,eAAe,QAAQ,GAAG,CAAC;oBAC1C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE;wBACnD,mBAAmB,EAAE,IAAI;qBAC1B,CAAC,CAAC;oBAEH,sEAAsE;oBACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACpE,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC;oBAEtE,2DAA2D;oBAC3D,MAAM,UAAU,GACd,QAAQ,CAAC,MAAM,GAAG,CAAC;wBACjB,CAAC,CAAC,QAAQ;wBACV,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;4BACjB,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;4BAC/C,6CAA6C;4BAC7C,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;4BACnD,OAAO,YAAY;iCAChB,WAAW,EAAE;iCACb,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;wBAClC,CAAC,CAAC,CAAC;oBAET,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAC5B,OAAO;4BACL,KAAK,EAAE,yCAAyC,IAAI,eAAe,QAAQ,+FAA+F;yBAC3K,CAAC;oBACJ,CAAC;oBAED,8DAA8D;oBAC9D,sDAAsD;oBACtD,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;oBAC3B,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,OAAO,EAAE,KAAK,EAAE,wBAAwB,IAAI,cAAc,EAAE,CAAC;oBAC/D,CAAC;oBAED,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;oBAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;oBAC7D,OAAO;wBACL,IAAI;wBACJ,OAAO,EAAE,KAAK;wBACd,MAAM;wBACN,KAAK;wBACL,UAAU;wBACV,OAAO,EAAE,MAAM,GAAG,KAAK,GAAG,UAAU;wBACpC,IAAI,EACF,MAAM,GAAG,KAAK,GAAG,UAAU;4BACzB,CAAC,CAAC,GAAG,UAAU,GAAG,MAAM,GAAG,KAAK,yCAAyC,MAAM,GAAG,KAAK,GAAG;4BAC1F,CAAC,CAAC,oBAAoB;qBAC3B,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO;wBACL,KAAK,EAAE,8BAA8B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;qBACxF,CAAC;gBACJ,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Core `read-attachment` agent tool.\n *\n * Large text pastes, CSVs, JSON files, and code files are truncated to\n * 60 K chars when injected into the model context. This action lets the agent\n * read the full content in offset/limit slices from the durable resource\n * stored at attach-time.\n *\n * Storage: text-y attachments are persisted as `agent_scratch` resources\n * keyed  `attachments/<threadId>/<sanitised-name>` under the owner's scope.\n * The maximum stored size per attachment is 20 MB.\n */\n\nimport type { ActionEntry } from \"../agent/production-agent.js\";\nimport { resourceGet, resourcePut, resourceList } from \"../resources/store.js\";\nimport { getRequestUserEmail } from \"./request-context.js\";\n\nconst MAX_ATTACHMENT_RESOURCE_BYTES = 20 * 1024 * 1024; // 20 MB\nconst DEFAULT_SLICE_LIMIT = 8_000; // chars returned by default per call\n\n/**\n * Derive a deterministic resource path for a text attachment stored inside a\n * thread scope.\n */\nfunction attachmentResourcePath(\n  threadId: string,\n  name: string,\n  index: number,\n): string {\n  // Sanitise the name: keep alphanum, dot, dash, underscore; replace anything\n  // else with '_'. Append the index to avoid collisions between same-named\n  // files in the same thread.\n  const safe = name.replace(/[^a-zA-Z0-9._-]/g, \"_\").slice(0, 80);\n  return `attachments/${threadId}/${index}-${safe}`;\n}\n\n/**\n * Determine whether a MIME type or filename represents a text-like attachment\n * that should be stored as a durable resource for paginated reads.\n */\nexport function isTextLikeMimeType(contentType: string | undefined): boolean {\n  if (!contentType) return false;\n  const ct = contentType.toLowerCase().split(\";\")[0].trim();\n  if (ct.startsWith(\"text/\")) return true;\n  if (ct === \"application/json\") return true;\n  if (ct === \"application/javascript\") return true;\n  if (ct === \"application/typescript\") return true;\n  return false;\n}\n\nexport function isTextLikeFilename(name: string | undefined): boolean {\n  if (!name) return false;\n  return /\\.(txt|md|markdown|csv|json|jsonl|yaml|yml|ts|tsx|js|jsx|py|rb|go|rs|java|c|cpp|h|cs|swift|kt|sh|bash|zsh|fish|toml|ini|cfg|conf|xml|html|htm|css|scss|sass|less|sql|graphql|gql)$/i.test(\n    name,\n  );\n}\n\n/**\n * Persist text-ish attachments from a chat turn as thread-scoped resources\n * so the agent can later read them in slices via `read-attachment`.\n *\n * Silently skips attachments that aren't text-like or have no text content.\n * Returns a map from attachment index → stored resource id for use in the\n * truncation-notice injected into the model context.\n */\nexport async function persistTextAttachmentsAsResources(opts: {\n  attachments: Array<{\n    type?: string;\n    name?: string;\n    contentType?: string;\n    text?: string;\n  }>;\n  threadId: string;\n  ownerEmail: string | null | undefined;\n}): Promise<\n  Map<number, { resourceId: string; path: string; totalChars: number }>\n> {\n  const result = new Map<\n    number,\n    { resourceId: string; path: string; totalChars: number }\n  >();\n  const owner = opts.ownerEmail || \"anonymous\";\n\n  for (let i = 0; i < opts.attachments.length; i++) {\n    const att = opts.attachments[i];\n    if (!att.text || att.text.length === 0) continue;\n    if (!isTextLikeMimeType(att.contentType) && !isTextLikeFilename(att.name)) {\n      continue;\n    }\n\n    const text =\n      att.text.length > MAX_ATTACHMENT_RESOURCE_BYTES\n        ? att.text.slice(0, MAX_ATTACHMENT_RESOURCE_BYTES)\n        : att.text;\n\n    const path = attachmentResourcePath(\n      opts.threadId,\n      att.name || \"attachment\",\n      i,\n    );\n\n    try {\n      const resource = await resourcePut(\n        owner,\n        path,\n        text,\n        att.contentType || \"text/plain\",\n        {\n          createdBy: \"user\",\n          visibility: \"agent_scratch\",\n          threadId: opts.threadId,\n          // 7-day TTL — long enough for multi-session threads.\n          expiresAt: Date.now() + 7 * 24 * 60 * 60 * 1000,\n        },\n      );\n      result.set(i, {\n        resourceId: resource.id,\n        path,\n        totalChars: text.length,\n      });\n    } catch (err) {\n      // Best-effort: if storage fails the agent still gets the truncated\n      // context and the read-attachment call will return a not-found error.\n      console.warn(\n        \"[agent-native] persistTextAttachmentsAsResources failed:\",\n        err instanceof Error ? err.message : String(err),\n      );\n    }\n  }\n\n  return result;\n}\n\nexport function createCoreAttachmentActionEntries(): Record<\n  string,\n  ActionEntry\n> {\n  return {\n    \"read-attachment\": {\n      tool: {\n        description: [\n          \"Read a slice of a large text attachment (CSV, code, JSON, markdown, plain text) that was\",\n          \"truncated in the conversation context. Use this when the initial context showed a truncated\",\n          \"attachment and you need to read more of it.\",\n          \"\",\n          \"Identify the attachment by name (e.g. name='data.csv') exactly as shown in the\",\n          \"<attachment name='...'> tag in the conversation. Use offset and limit to page through it.\",\n          \"\",\n          \"Returns { content, offset, limit, totalChars, hasMore }.\",\n          \"If totalChars is unknown (attachment not stored as a resource), returns a not-found message.\",\n        ].join(\"\\n\"),\n        parameters: {\n          type: \"object\" as const,\n          properties: {\n            name: {\n              type: \"string\",\n              description:\n                \"The exact attachment name as it appeared in the <attachment name='...'> tag.\",\n            },\n            threadId: {\n              type: \"string\",\n              description:\n                \"The chat thread ID. If omitted, the current thread is used.\",\n            },\n            offset: {\n              type: \"string\",\n              description:\n                \"Character offset to start reading from. Default: 0.\",\n            },\n            limit: {\n              type: \"string\",\n              description: `Maximum characters to return. Default: ${DEFAULT_SLICE_LIMIT}.`,\n            },\n          },\n          required: [\"name\"],\n        },\n      },\n      run: async (input: Record<string, string>, ctx) => {\n        const ownerEmail =\n          ctx?.userEmail || getRequestUserEmail() || \"anonymous\";\n        const name = String(input.name || \"\").trim();\n        const offset = Math.max(0, parseInt(input.offset || \"0\", 10) || 0);\n        const limit = Math.min(\n          50_000,\n          Math.max(\n            1,\n            parseInt(input.limit || String(DEFAULT_SLICE_LIMIT), 10) ||\n              DEFAULT_SLICE_LIMIT,\n          ),\n        );\n\n        if (!name) {\n          return { error: \"name is required\" };\n        }\n\n        // Determine threadId — from input or from turn-scoped run context.\n        let threadId = String(input.threadId || \"\").trim();\n        if (!threadId) {\n          try {\n            const { getRequestRunContext } =\n              await import(\"./request-context.js\");\n            const runCtx = getRequestRunContext();\n            threadId = (runCtx as any)?.threadId || \"\";\n          } catch {\n            // ignore\n          }\n        }\n\n        if (!threadId) {\n          return {\n            error:\n              \"threadId is required (could not be resolved from context). Re-call with the thread id.\",\n          };\n        }\n\n        // Search the owner's resources for an attachment matching the name.\n        try {\n          const prefix = `attachments/${threadId}/`;\n          const metas = await resourceList(ownerEmail, prefix, {\n            includeAgentScratch: true,\n          });\n\n          // Find by name suffix match (the path ends with <index>-<safe-name>).\n          const safeName = name.replace(/[^a-zA-Z0-9._-]/g, \"_\").slice(0, 80);\n          const matching = metas.filter((m) => m.path.endsWith(`-${safeName}`));\n\n          // If no exact match, try a partial search on the raw name.\n          const candidates =\n            matching.length > 0\n              ? matching\n              : metas.filter((m) => {\n                  const basename = m.path.split(\"/\").pop() || \"\";\n                  // Strip the leading index prefix (<digits>-)\n                  const withoutIndex = basename.replace(/^\\d+-/, \"\");\n                  return withoutIndex\n                    .toLowerCase()\n                    .includes(name.toLowerCase());\n                });\n\n          if (candidates.length === 0) {\n            return {\n              error: `No stored attachment found with name \"${name}\" in thread ${threadId}. The attachment may not have been persisted as a resource (only text-like files are stored).`,\n            };\n          }\n\n          // Use the first match (most recent upsert wins when there are\n          // multiple same-name attachments in the same thread).\n          const meta = candidates[0];\n          const resource = await resourceGet(meta.id);\n          if (!resource) {\n            return { error: `Attachment resource \"${name}\" not found.` };\n          }\n\n          const totalChars = resource.content.length;\n          const slice = resource.content.slice(offset, offset + limit);\n          return {\n            name,\n            content: slice,\n            offset,\n            limit,\n            totalChars,\n            hasMore: offset + limit < totalChars,\n            note:\n              offset + limit < totalChars\n                ? `${totalChars - offset - limit} chars remain. Call again with offset=${offset + limit}.`\n                : \"End of attachment.\",\n          };\n        } catch (err) {\n          return {\n            error: `Failed to read attachment: ${err instanceof Error ? err.message : String(err)}`,\n          };\n        }\n      },\n    },\n  };\n}\n"]}

package/dist/server/auth.js

@@ -1935,7 +1935,7 @@ async function mountBetterAuthRoutes(app, options) {
                 const code = query.code;
                 const { redirectUri, desktop, returnUrl, flowId } = decodeOAuthState(query.state, getAppUrl(event, "/_agent-native/google/callback"));
                 callbackFlowId = flowId;
-                callbackDesktop = desktop;
+                callbackDesktop = desktop ?? false;
                 logGoogleOAuthDebug(event, "callback-start", {
                     flowId,
                     desktop,