@agent-native/core 0.51.5 → 0.51.6

package/dist/cli/templates-meta.js

@@ -31,7 +31,7 @@ export const TEMPLATES = [
     {
         name: "content",
         label: "Content",
-        hint: "Agent-native Notion/Google Docs — write and organize with agent assistance",
+        hint: "Open-source Obsidian for MDX — edit local docs with agent assistance",
         icon: "FileText",
         color: "#10B981",
         colorRgb: "16 185 129",

package/dist/cli/templates-meta.js.map

@@ -1 +1 @@
-{"version":3,"file":"templates-meta.js","sourceRoot":"","sources":["../../src/cli/templates-meta.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAqCH,MAAM,CAAC,MAAM,SAAS,GAAmB;IACvC;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,wEAAwE;QAC9E,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EAAE,MAAM;QACnB,gBAAgB,EAAE,CAAC,YAAY,CAAC;QAChC,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,4EAA4E;QAClF,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,MAAM;QACb,IAAI,EAAE,uGAAuG;QAC7G,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,+BAA+B;QACxC,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,oEAAoE;QAC1E,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EAAE,MAAM;QACnB,gBAAgB,EAAE,CAAC,UAAU,CAAC;QAC9B,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,0CAA0C;QAChD,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EAAE,MAAM;QACnB,gBAAgB,EAAE,CAAC,UAAU,CAAC;KAC/B;IACD;QACE,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,WAAW;QAClB,IAAI,EAAE,2EAA2E;QACjF,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,oCAAoC;QAC7C,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,MAAM;QACb,IAAI,EAAE,8EAA8E;QACpF,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,+BAA+B;QACxC,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,gFAAgF;QACtF,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,4DAA4D;QAClE,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,gCAAgC;QACzC,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,qEAAqE;QAC3E,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EAAE,MAAM;QACnB,eAAe,EAAE,IAAI;QACrB,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,IAAI;KACb;IACD;QACE,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,oEAAoE;QAC1E,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,gCAAgC;QACzC,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,0EAA0E;QAChF,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,gCAAgC;QACzC,WAAW,EAAE,MAAM;QACnB,YAAY,EAAE,IAAI;QAClB,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,iFAAiF;QACvF,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EAAE,MAAM;QACnB,gBAAgB,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;QAC3C,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,2FAA2F;QACjG,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EAAE,MAAM;QACnB,YAAY,EAAE,IAAI;QAClB,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,0CAA0C;QAChD,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,iCAAiC;QAC1C,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,KAAK;KACnB;CACF,CAAC;AAEF,yEAAyE;AACzE,MAAM,UAAU,gBAAgB;IAC9B,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,aAAa;IAC3B,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,qCAAqC;IACrC,IAAI,IAAI,KAAK,OAAO;QAAE,IAAI,GAAG,QAAQ,CAAC;IACtC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAC9D,IAAI,GAAG,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,cAAc;QAAE,IAAI,GAAG,MAAM,CAAC;IACnE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,gBAAgB;IAC9B,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC","sourcesContent":["/**\n * First-party template metadata used by the `agent-native` CLI.\n *\n * This file is intentionally inlined here (rather than imported from a\n * separate workspace package) so that the published `@agent-native/core`\n * has no `workspace:*` runtime dependencies. Without this inlining, `npx\n * @agent-native/core create ...` fails on a fresh machine with:\n *\n *   npm error code EUNSUPPORTEDPROTOCOL\n *   npm error Unsupported URL Type \"workspace:\": workspace:*\n *\n * Keep this list in sync with `packages/shared-app-config/templates.ts`,\n * which serves the same metadata to the desktop / mobile / frame packages\n * that always run inside the workspace. Duplication is intentional: the\n * CLI must remain installable outside the monorepo.\n */\n\nexport interface TemplateMeta {\n  /** Directory name under templates/ and package name */\n  name: string;\n  /** Display name in pickers */\n  label: string;\n  /** One-line description shown in the picker */\n  hint: string;\n  /** Longer description (optional) */\n  description?: string;\n  /** Tabler icon name used in the desktop sidebar */\n  icon: string;\n  /** Hex accent color */\n  color: string;\n  /** CSS-safe RGB triplet (e.g. \"59 130 246\") */\n  colorRgb: string;\n  /** Dev server port for desktop `pnpm dev` */\n  devPort: number;\n  /** Production URL when running as a first-party app on agent-native.com */\n  prodUrl?: string;\n  /** Default URL path when deployed in a workspace (defaults to \"/<name>\") */\n  prodPath?: string;\n  /** Default mode when added to desktop app */\n  defaultMode?: \"dev\" | \"prod\";\n  /** Hide from pickers but still scaffoldable via explicit --template */\n  hidden?: boolean;\n  /** Include as a built-in connected A2A agent even when hidden from pickers */\n  defaultAgent?: boolean;\n  /** Always scaffold without prompting (e.g. starter as fallback) */\n  alwaysAvailable?: boolean;\n  /** Internal workspace packages this template depends on (e.g. \"scheduling\") */\n  requiredPackages?: string[];\n  /** Core app — featured in the CLI picker, homepage, and docs gallery */\n  core?: boolean;\n}\n\nexport const TEMPLATES: TemplateMeta[] = [\n  {\n    name: \"calendar\",\n    label: \"Calendar\",\n    hint: \"Agent-native Google Calendar — manage events, sync, and public booking\",\n    icon: \"CalendarDays\",\n    color: \"#00B5FF\",\n    colorRgb: \"0 181 255\",\n    devPort: 8082,\n    prodUrl: \"https://calendar.agent-native.com\",\n    defaultMode: \"prod\",\n    requiredPackages: [\"scheduling\"],\n    core: true,\n  },\n  {\n    name: \"content\",\n    label: \"Content\",\n    hint: \"Agent-native Notion/Google Docs — write and organize with agent assistance\",\n    icon: \"FileText\",\n    color: \"#10B981\",\n    colorRgb: \"16 185 129\",\n    devPort: 8083,\n    prodUrl: \"https://content.agent-native.com\",\n    defaultMode: \"prod\",\n    core: true,\n  },\n  {\n    name: \"plan\",\n    label: \"Plan\",\n    hint: \"Structured visual plans and PR recaps with diagrams, wireframes, prototypes, annotations, and sharing\",\n    icon: \"FileText\",\n    color: \"#52525B\",\n    colorRgb: \"82 82 91\",\n    devPort: 8105,\n    prodUrl: \"https://plan.agent-native.com\",\n    defaultMode: \"prod\",\n    core: true,\n  },\n  {\n    name: \"slides\",\n    label: \"Slides\",\n    hint: \"Agent-native Google Slides — generate and edit React presentations\",\n    icon: \"GalleryHorizontal\",\n    color: \"#EC4899\",\n    colorRgb: \"236 72 153\",\n    devPort: 8086,\n    prodUrl: \"https://slides.agent-native.com\",\n    defaultMode: \"prod\",\n    requiredPackages: [\"pinpoint\"],\n    core: true,\n  },\n  {\n    name: \"videos\",\n    label: \"Video\",\n    hint: \"Agent-native video editing with Remotion\",\n    icon: \"Video\",\n    color: \"#EF4444\",\n    colorRgb: \"239 68 68\",\n    devPort: 8087,\n    prodUrl: \"https://videos.agent-native.com\",\n    defaultMode: \"prod\",\n    requiredPackages: [\"pinpoint\"],\n  },\n  {\n    name: \"analytics\",\n    label: \"Analytics\",\n    hint: \"Agent-native Amplitude/Mixpanel — connect data sources, prompt for charts\",\n    icon: \"BarChart2\",\n    color: \"#F59E0B\",\n    colorRgb: \"245 158 11\",\n    devPort: 8088,\n    prodUrl: \"https://analytics.agent-native.com\",\n    defaultMode: \"prod\",\n    core: true,\n  },\n  {\n    name: \"mail\",\n    label: \"Mail\",\n    hint: \"Agent-native Superhuman — email client with keyboard shortcuts and AI triage\",\n    icon: \"Mail\",\n    color: \"#3B82F6\",\n    colorRgb: \"59 130 246\",\n    devPort: 8085,\n    prodUrl: \"https://mail.agent-native.com\",\n    defaultMode: \"prod\",\n    core: true,\n  },\n  {\n    name: \"dispatch\",\n    label: \"Dispatch\",\n    hint: \"Central Slack/Telegram router with jobs, memory, approvals, and A2A delegation\",\n    icon: \"MessageCircle\",\n    color: \"#14B8A6\",\n    colorRgb: \"20 184 166\",\n    devPort: 8092,\n    prodUrl: \"https://dispatch.agent-native.com\",\n    defaultMode: \"prod\",\n    core: true,\n  },\n  {\n    name: \"forms\",\n    label: \"Forms\",\n    hint: \"Agent-native form builder — create, edit, and manage forms\",\n    icon: \"ClipboardList\",\n    color: \"#06B6D4\",\n    colorRgb: \"6 182 212\",\n    devPort: 8084,\n    prodUrl: \"https://forms.agent-native.com\",\n    defaultMode: \"prod\",\n    core: true,\n  },\n  {\n    name: \"starter\",\n    label: \"Starter\",\n    hint: \"Minimal scaffold with the agent chat and core architecture wired up\",\n    icon: \"Code\",\n    color: \"#71717A\",\n    colorRgb: \"113 113 122\",\n    devPort: 8089,\n    prodUrl: \"https://starter.agent-native.com\",\n    defaultMode: \"prod\",\n    alwaysAvailable: true,\n    core: true,\n    hidden: true,\n  },\n  {\n    name: \"clips\",\n    label: \"Clips\",\n    hint: \"Screen recording, meeting notes, and voice dictation — all with AI\",\n    icon: \"ScreenShare\",\n    color: \"#0EA5E9\",\n    colorRgb: \"14 165 233\",\n    devPort: 8094,\n    prodUrl: \"https://clips.agent-native.com\",\n    defaultMode: \"prod\",\n    core: true,\n  },\n  {\n    name: \"brain\",\n    label: \"Brain\",\n    hint: \"Cited company knowledge from Slack, meetings, transcripts, and decisions\",\n    icon: \"Brain\",\n    color: \"#8B5CF6\",\n    colorRgb: \"139 92 246\",\n    devPort: 8102,\n    prodUrl: \"https://brain.agent-native.com\",\n    defaultMode: \"prod\",\n    defaultAgent: true,\n    core: true,\n  },\n  {\n    name: \"design\",\n    label: \"Design\",\n    hint: \"Agent-native design tool — create and edit visual designs with agent assistance\",\n    icon: \"Brush\",\n    color: \"#F472B6\",\n    colorRgb: \"244 114 182\",\n    devPort: 8099,\n    prodUrl: \"https://design.agent-native.com\",\n    defaultMode: \"prod\",\n    requiredPackages: [\"pinpoint\", \"embedding\"],\n    core: true,\n  },\n  {\n    name: \"assets\",\n    label: \"Assets\",\n    hint: \"Digital asset manager — upload, organize, search, and generate on-brand images and videos\",\n    icon: \"Photo\",\n    color: \"#0F766E\",\n    colorRgb: \"15 118 110\",\n    devPort: 8100,\n    prodUrl: \"https://assets.agent-native.com\",\n    defaultMode: \"prod\",\n    defaultAgent: true,\n    core: true,\n  },\n  {\n    name: \"macros\",\n    label: \"Macros\",\n    hint: \"Internal template — not shown in pickers\",\n    icon: \"Code\",\n    color: \"#71717A\",\n    colorRgb: \"113 113 122\",\n    devPort: 8093,\n    prodUrl: \"https://macros.agent-native.com\",\n    hidden: true,\n    defaultMode: \"dev\",\n  },\n];\n\n/** Return templates visible in user-facing pickers (excludes hidden). */\nexport function visibleTemplates(): TemplateMeta[] {\n  return TEMPLATES.filter((t) => !t.hidden);\n}\n\n/** Return core templates — the featured set shown in CLI pickers by default. */\nexport function coreTemplates(): TemplateMeta[] {\n  return TEMPLATES.filter((t) => t.core);\n}\n\n/** Lookup by name. Returns undefined for unknown names. */\nexport function getTemplate(name: string): TemplateMeta | undefined {\n  // Tolerate legacy / renamed aliases.\n  if (name === \"video\") name = \"videos\";\n  if (name === \"image\" || name === \"images\" || name === \"asset\") {\n    name = \"assets\";\n  }\n  if (name === \"contracts\" || name === \"visual-plans\") name = \"plan\";\n  return TEMPLATES.find((t) => t.name === name);\n}\n\n/** Names of all templates (including hidden) for validation. */\nexport function allTemplateNames(): string[] {\n  return TEMPLATES.map((t) => t.name);\n}\n"]}
+{"version":3,"file":"templates-meta.js","sourceRoot":"","sources":["../../src/cli/templates-meta.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAqCH,MAAM,CAAC,MAAM,SAAS,GAAmB;IACvC;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,wEAAwE;QAC9E,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EAAE,MAAM;QACnB,gBAAgB,EAAE,CAAC,YAAY,CAAC;QAChC,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,sEAAsE;QAC5E,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,MAAM;QACb,IAAI,EAAE,uGAAuG;QAC7G,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,+BAA+B;QACxC,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,oEAAoE;QAC1E,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EAAE,MAAM;QACnB,gBAAgB,EAAE,CAAC,UAAU,CAAC;QAC9B,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,0CAA0C;QAChD,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EAAE,MAAM;QACnB,gBAAgB,EAAE,CAAC,UAAU,CAAC;KAC/B;IACD;QACE,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,WAAW;QAClB,IAAI,EAAE,2EAA2E;QACjF,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,oCAAoC;QAC7C,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,MAAM;QACb,IAAI,EAAE,8EAA8E;QACpF,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,+BAA+B;QACxC,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,gFAAgF;QACtF,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,4DAA4D;QAClE,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,gCAAgC;QACzC,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,qEAAqE;QAC3E,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EAAE,MAAM;QACnB,eAAe,EAAE,IAAI;QACrB,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,IAAI;KACb;IACD;QACE,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,oEAAoE;QAC1E,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,gCAAgC;QACzC,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,0EAA0E;QAChF,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,gCAAgC;QACzC,WAAW,EAAE,MAAM;QACnB,YAAY,EAAE,IAAI;QAClB,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,iFAAiF;QACvF,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EAAE,MAAM;QACnB,gBAAgB,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;QAC3C,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,2FAA2F;QACjG,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EAAE,MAAM;QACnB,YAAY,EAAE,IAAI;QAClB,IAAI,EAAE,IAAI;KACX;IACD;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,0CAA0C;QAChD,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,iCAAiC;QAC1C,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,KAAK;KACnB;CACF,CAAC;AAEF,yEAAyE;AACzE,MAAM,UAAU,gBAAgB;IAC9B,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,aAAa;IAC3B,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,qCAAqC;IACrC,IAAI,IAAI,KAAK,OAAO;QAAE,IAAI,GAAG,QAAQ,CAAC;IACtC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAC9D,IAAI,GAAG,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,cAAc;QAAE,IAAI,GAAG,MAAM,CAAC;IACnE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,gBAAgB;IAC9B,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC","sourcesContent":["/**\n * First-party template metadata used by the `agent-native` CLI.\n *\n * This file is intentionally inlined here (rather than imported from a\n * separate workspace package) so that the published `@agent-native/core`\n * has no `workspace:*` runtime dependencies. Without this inlining, `npx\n * @agent-native/core create ...` fails on a fresh machine with:\n *\n *   npm error code EUNSUPPORTEDPROTOCOL\n *   npm error Unsupported URL Type \"workspace:\": workspace:*\n *\n * Keep this list in sync with `packages/shared-app-config/templates.ts`,\n * which serves the same metadata to the desktop / mobile / frame packages\n * that always run inside the workspace. Duplication is intentional: the\n * CLI must remain installable outside the monorepo.\n */\n\nexport interface TemplateMeta {\n  /** Directory name under templates/ and package name */\n  name: string;\n  /** Display name in pickers */\n  label: string;\n  /** One-line description shown in the picker */\n  hint: string;\n  /** Longer description (optional) */\n  description?: string;\n  /** Tabler icon name used in the desktop sidebar */\n  icon: string;\n  /** Hex accent color */\n  color: string;\n  /** CSS-safe RGB triplet (e.g. \"59 130 246\") */\n  colorRgb: string;\n  /** Dev server port for desktop `pnpm dev` */\n  devPort: number;\n  /** Production URL when running as a first-party app on agent-native.com */\n  prodUrl?: string;\n  /** Default URL path when deployed in a workspace (defaults to \"/<name>\") */\n  prodPath?: string;\n  /** Default mode when added to desktop app */\n  defaultMode?: \"dev\" | \"prod\";\n  /** Hide from pickers but still scaffoldable via explicit --template */\n  hidden?: boolean;\n  /** Include as a built-in connected A2A agent even when hidden from pickers */\n  defaultAgent?: boolean;\n  /** Always scaffold without prompting (e.g. starter as fallback) */\n  alwaysAvailable?: boolean;\n  /** Internal workspace packages this template depends on (e.g. \"scheduling\") */\n  requiredPackages?: string[];\n  /** Core app — featured in the CLI picker, homepage, and docs gallery */\n  core?: boolean;\n}\n\nexport const TEMPLATES: TemplateMeta[] = [\n  {\n    name: \"calendar\",\n    label: \"Calendar\",\n    hint: \"Agent-native Google Calendar — manage events, sync, and public booking\",\n    icon: \"CalendarDays\",\n    color: \"#00B5FF\",\n    colorRgb: \"0 181 255\",\n    devPort: 8082,\n    prodUrl: \"https://calendar.agent-native.com\",\n    defaultMode: \"prod\",\n    requiredPackages: [\"scheduling\"],\n    core: true,\n  },\n  {\n    name: \"content\",\n    label: \"Content\",\n    hint: \"Open-source Obsidian for MDX — edit local docs with agent assistance\",\n    icon: \"FileText\",\n    color: \"#10B981\",\n    colorRgb: \"16 185 129\",\n    devPort: 8083,\n    prodUrl: \"https://content.agent-native.com\",\n    defaultMode: \"prod\",\n    core: true,\n  },\n  {\n    name: \"plan\",\n    label: \"Plan\",\n    hint: \"Structured visual plans and PR recaps with diagrams, wireframes, prototypes, annotations, and sharing\",\n    icon: \"FileText\",\n    color: \"#52525B\",\n    colorRgb: \"82 82 91\",\n    devPort: 8105,\n    prodUrl: \"https://plan.agent-native.com\",\n    defaultMode: \"prod\",\n    core: true,\n  },\n  {\n    name: \"slides\",\n    label: \"Slides\",\n    hint: \"Agent-native Google Slides — generate and edit React presentations\",\n    icon: \"GalleryHorizontal\",\n    color: \"#EC4899\",\n    colorRgb: \"236 72 153\",\n    devPort: 8086,\n    prodUrl: \"https://slides.agent-native.com\",\n    defaultMode: \"prod\",\n    requiredPackages: [\"pinpoint\"],\n    core: true,\n  },\n  {\n    name: \"videos\",\n    label: \"Video\",\n    hint: \"Agent-native video editing with Remotion\",\n    icon: \"Video\",\n    color: \"#EF4444\",\n    colorRgb: \"239 68 68\",\n    devPort: 8087,\n    prodUrl: \"https://videos.agent-native.com\",\n    defaultMode: \"prod\",\n    requiredPackages: [\"pinpoint\"],\n  },\n  {\n    name: \"analytics\",\n    label: \"Analytics\",\n    hint: \"Agent-native Amplitude/Mixpanel — connect data sources, prompt for charts\",\n    icon: \"BarChart2\",\n    color: \"#F59E0B\",\n    colorRgb: \"245 158 11\",\n    devPort: 8088,\n    prodUrl: \"https://analytics.agent-native.com\",\n    defaultMode: \"prod\",\n    core: true,\n  },\n  {\n    name: \"mail\",\n    label: \"Mail\",\n    hint: \"Agent-native Superhuman — email client with keyboard shortcuts and AI triage\",\n    icon: \"Mail\",\n    color: \"#3B82F6\",\n    colorRgb: \"59 130 246\",\n    devPort: 8085,\n    prodUrl: \"https://mail.agent-native.com\",\n    defaultMode: \"prod\",\n    core: true,\n  },\n  {\n    name: \"dispatch\",\n    label: \"Dispatch\",\n    hint: \"Central Slack/Telegram router with jobs, memory, approvals, and A2A delegation\",\n    icon: \"MessageCircle\",\n    color: \"#14B8A6\",\n    colorRgb: \"20 184 166\",\n    devPort: 8092,\n    prodUrl: \"https://dispatch.agent-native.com\",\n    defaultMode: \"prod\",\n    core: true,\n  },\n  {\n    name: \"forms\",\n    label: \"Forms\",\n    hint: \"Agent-native form builder — create, edit, and manage forms\",\n    icon: \"ClipboardList\",\n    color: \"#06B6D4\",\n    colorRgb: \"6 182 212\",\n    devPort: 8084,\n    prodUrl: \"https://forms.agent-native.com\",\n    defaultMode: \"prod\",\n    core: true,\n  },\n  {\n    name: \"starter\",\n    label: \"Starter\",\n    hint: \"Minimal scaffold with the agent chat and core architecture wired up\",\n    icon: \"Code\",\n    color: \"#71717A\",\n    colorRgb: \"113 113 122\",\n    devPort: 8089,\n    prodUrl: \"https://starter.agent-native.com\",\n    defaultMode: \"prod\",\n    alwaysAvailable: true,\n    core: true,\n    hidden: true,\n  },\n  {\n    name: \"clips\",\n    label: \"Clips\",\n    hint: \"Screen recording, meeting notes, and voice dictation — all with AI\",\n    icon: \"ScreenShare\",\n    color: \"#0EA5E9\",\n    colorRgb: \"14 165 233\",\n    devPort: 8094,\n    prodUrl: \"https://clips.agent-native.com\",\n    defaultMode: \"prod\",\n    core: true,\n  },\n  {\n    name: \"brain\",\n    label: \"Brain\",\n    hint: \"Cited company knowledge from Slack, meetings, transcripts, and decisions\",\n    icon: \"Brain\",\n    color: \"#8B5CF6\",\n    colorRgb: \"139 92 246\",\n    devPort: 8102,\n    prodUrl: \"https://brain.agent-native.com\",\n    defaultMode: \"prod\",\n    defaultAgent: true,\n    core: true,\n  },\n  {\n    name: \"design\",\n    label: \"Design\",\n    hint: \"Agent-native design tool — create and edit visual designs with agent assistance\",\n    icon: \"Brush\",\n    color: \"#F472B6\",\n    colorRgb: \"244 114 182\",\n    devPort: 8099,\n    prodUrl: \"https://design.agent-native.com\",\n    defaultMode: \"prod\",\n    requiredPackages: [\"pinpoint\", \"embedding\"],\n    core: true,\n  },\n  {\n    name: \"assets\",\n    label: \"Assets\",\n    hint: \"Digital asset manager — upload, organize, search, and generate on-brand images and videos\",\n    icon: \"Photo\",\n    color: \"#0F766E\",\n    colorRgb: \"15 118 110\",\n    devPort: 8100,\n    prodUrl: \"https://assets.agent-native.com\",\n    defaultMode: \"prod\",\n    defaultAgent: true,\n    core: true,\n  },\n  {\n    name: \"macros\",\n    label: \"Macros\",\n    hint: \"Internal template — not shown in pickers\",\n    icon: \"Code\",\n    color: \"#71717A\",\n    colorRgb: \"113 113 122\",\n    devPort: 8093,\n    prodUrl: \"https://macros.agent-native.com\",\n    hidden: true,\n    defaultMode: \"dev\",\n  },\n];\n\n/** Return templates visible in user-facing pickers (excludes hidden). */\nexport function visibleTemplates(): TemplateMeta[] {\n  return TEMPLATES.filter((t) => !t.hidden);\n}\n\n/** Return core templates — the featured set shown in CLI pickers by default. */\nexport function coreTemplates(): TemplateMeta[] {\n  return TEMPLATES.filter((t) => t.core);\n}\n\n/** Lookup by name. Returns undefined for unknown names. */\nexport function getTemplate(name: string): TemplateMeta | undefined {\n  // Tolerate legacy / renamed aliases.\n  if (name === \"video\") name = \"videos\";\n  if (name === \"image\" || name === \"images\" || name === \"asset\") {\n    name = \"assets\";\n  }\n  if (name === \"contracts\" || name === \"visual-plans\") name = \"plan\";\n  return TEMPLATES.find((t) => t.name === name);\n}\n\n/** Names of all templates (including hidden) for validation. */\nexport function allTemplateNames(): string[] {\n  return TEMPLATES.map((t) => t.name);\n}\n"]}

package/dist/coding-tools/run-code.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-code.d.ts","sourceRoot":"","sources":["../../src/coding-tools/run-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AASH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AA8DhE,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EAC7C,IAAI,GAAE,cAAmB,GACxB,WAAW,CA2Mb"}
+{"version":3,"file":"run-code.d.ts","sourceRoot":"","sources":["../../src/coding-tools/run-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AASH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AA8DhE,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EAC7C,IAAI,GAAE,cAAmB,GACxB,WAAW,CA4Mb"}

package/dist/coding-tools/run-code.js

@@ -110,6 +110,7 @@ export function createRunCodeEntry(getActions, opts = {}) {
                 "    Example: `const data = await providerFetch('<provider-id>', '/records', { query: { limit: 100 } });`",
                 "  - `providerRequest(provider, path, init?)` — same authenticated call, but returns the full provider-api envelope with request, response status/headers, truncation, and body metadata.",
                 "  - `providerFetchAll(provider, path, init?)` — generic pagination helper for cursor, page, and offset APIs. Pass `pagination: { itemsPath, cursorPath or nextCursorPath, cursorParam or cursorBodyPath, pageParam, offsetParam, pageSize, maxPages }`. Returns `{ items, pages, pageCount, itemCount, hasMore, lastCursor, stoppedReason }`.",
+                "  - `providerSearchAll(provider, path, init?, options?)` — streaming search helper for broad provider corpora such as transcripts, messages, tickets, issues, notes, events, or documents. Use this before hand-written loops when searching many provider records for terms/phrases/regexes or proving absence. Pass the same `pagination` config as `providerFetchAll`, plus options like `{ query, queries, terms, regex, textPaths, idPaths, metadataPaths, maxHits }`. Returns structured hits with item ids, paths, snippets, page/item indexes, and coverage fields (`pageCount`, `itemCount`, `hasMore`, `stoppedReason`).",
                 "  - `webFetch(url, init?)` — outbound HTTP request via the web-request action.",
                 "    Returns `{ status, body }` where body is the response text.",
                 "    Example: `const { body } = await webFetch('https://api.example.com/data');`",
@@ -376,8 +377,8 @@ function handleBridgeRequest(rawBody, actions, context, defaultTools, extraTools
 // ---------------------------------------------------------------------------
 /**
  * Wrap the user's code in an ESM module that:
- *  1. Defines `providerFetch`, `providerRequest`, `providerFetchAll`, and
- *     `webFetch` helpers via the bridge.
+ *  1. Defines `providerFetch`, `providerRequest`, `providerFetchAll`,
+ *     `providerSearchAll`, and `webFetch` helpers via the bridge.
  *  2. Runs the user's code as top-level await in an async IIFE.
  */
 function buildSandboxModule(userCode, bridgePort, bridgeToken) {
@@ -524,7 +525,7 @@ function _extractItems(page, itemsPath) {
   }
   if (Array.isArray(page)) return page;
   if (!page || typeof page !== "object") return [];
-  for (const key of ["data", "results", "items", "records", "rows", "calls", "messages", "tickets", "issues", "deals"]) {
+  for (const key of ["data", "results", "items", "records", "rows", "calls", "callTranscripts", "transcripts", "messages", "tickets", "issues", "deals", "events", "notes", "documents", "entries", "objects"]) {
     if (Array.isArray(page[key])) return page[key];
   }
   return [];
@@ -542,6 +543,437 @@ function _withoutProviderFetchAllOptions(init) {
   return rest;
 }
 
+function _asArray(value) {
+  if (value === undefined || value === null) return [];
+  return Array.isArray(value) ? value : [value];
+}
+
+function _stringifySearchValue(value) {
+  if (typeof value === "string") return value;
+  if (value === undefined || value === null) return "";
+  if (typeof value === "number" || typeof value === "boolean" || typeof value === "bigint") {
+    return String(value);
+  }
+  try {
+    return JSON.stringify(value);
+  } catch {
+    return String(value);
+  }
+}
+
+function _collectStrings(value, basePath = "", out = [], limit = 5000) {
+  if (out.length >= limit || value === undefined || value === null) return out;
+  if (typeof value === "string" || typeof value === "number" || typeof value === "boolean" || typeof value === "bigint") {
+    out.push({ path: basePath || "$", text: String(value) });
+    return out;
+  }
+  if (Array.isArray(value)) {
+    for (let i = 0; i < value.length && out.length < limit; i++) {
+      _collectStrings(value[i], basePath ? basePath + "[" + i + "]" : "[" + i + "]", out, limit);
+    }
+    return out;
+  }
+  if (typeof value === "object") {
+    for (const key of Object.keys(value)) {
+      if (out.length >= limit) break;
+      _collectStrings(value[key], basePath ? basePath + "." + key : key, out, limit);
+    }
+  }
+  return out;
+}
+
+function _collectSearchStrings(item, textPaths, maxFieldsPerItem) {
+  const paths = _asArray(textPaths).filter((path) => typeof path === "string" && path.trim());
+  if (!paths.length) return _collectStrings(item, "", [], maxFieldsPerItem);
+  const out = [];
+  for (const path of paths) {
+    const value = _getByPath(item, path);
+    if (value !== undefined) _collectStrings(value, path, out, maxFieldsPerItem);
+    if (out.length >= maxFieldsPerItem) break;
+  }
+  return out;
+}
+
+function _firstValueByPath(value, paths) {
+  for (const path of paths) {
+    const found = _getByPath(value, path);
+    if (found !== undefined && found !== null && String(found) !== "") {
+      return { path, value: found };
+    }
+  }
+  return null;
+}
+
+const _DEFAULT_ID_PATHS = [
+  "id",
+  "callId",
+  "callID",
+  "call_id",
+  "call.id",
+  "call.metaData.id",
+  "metaData.id",
+  "metadata.id",
+  "recordId",
+  "record_id",
+  "objectId",
+  "object_id",
+  "ticketId",
+  "ticket_id",
+  "issueId",
+  "issue_id",
+  "messageId",
+  "message_id",
+  "conversationId",
+  "conversation_id",
+  "eventId",
+  "event_id",
+  "documentId",
+  "document_id",
+  "url",
+  "webUrl",
+  "permalink",
+];
+
+function _extractItemIdentity(item, idPaths) {
+  const paths = [
+    ..._asArray(idPaths).filter((path) => typeof path === "string" && path.trim()),
+    ..._DEFAULT_ID_PATHS,
+  ];
+  const found = _firstValueByPath(item, paths);
+  if (!found) return { id: null, idPath: null };
+  return { id: _stringifySearchValue(found.value), idPath: found.path };
+}
+
+function _extractMetadata(item, metadataPaths) {
+  const metadata = {};
+  for (const path of _asArray(metadataPaths)) {
+    if (typeof path !== "string" || !path.trim()) continue;
+    const value = _getByPath(item, path);
+    if (value !== undefined) metadata[path] = value;
+  }
+  return metadata;
+}
+
+function _makeSnippet(text, index, contextChars) {
+  const source = String(text);
+  const context = Math.max(20, Math.min(Number(contextChars) || 180, 1000));
+  const start = Math.max(0, index - context);
+  const end = Math.min(source.length, Math.max(index, 0) + context);
+  const prefix = start > 0 ? "..." : "";
+  const suffix = end < source.length ? "..." : "";
+  return (prefix + source.slice(start, end) + suffix).replace(/\\s+/g, " ").trim();
+}
+
+function _normalizeFlags(flags, caseSensitive) {
+  const raw = typeof flags === "string" ? flags : "";
+  const allowed = raw.replace(/[^dgimsuvy]/g, "");
+  const withoutGlobalOrSticky = allowed.replace(/[gy]/g, "");
+  const withCase =
+    caseSensitive || /i/.test(withoutGlobalOrSticky)
+      ? withoutGlobalOrSticky
+      : withoutGlobalOrSticky + "i";
+  return withCase + "g";
+}
+
+function _normalizedSearchTerms(options) {
+  const explicitTerms = _asArray(options.terms)
+    .map((term) => String(term).trim())
+    .filter(Boolean);
+  if (explicitTerms.length) return explicitTerms;
+  if (options.matchMode === "allTerms" && typeof options.query === "string") {
+    return options.query
+      .split(/\\s+/)
+      .map((term) => term.trim())
+      .filter(Boolean);
+  }
+  return [];
+}
+
+function _findItemWideTermMatch(fields, options) {
+  const terms = _normalizedSearchTerms(options);
+  if (!terms.length || options.matchMode === "anyTerm") return null;
+  const caseSensitive = Boolean(options.caseSensitive);
+  const normalizedFields = fields.map((field) => ({
+    field,
+    haystack: caseSensitive ? String(field.text) : String(field.text).toLowerCase(),
+  }));
+  const termHits = terms.map((term) => {
+    const searchTerm = caseSensitive ? term : term.toLowerCase();
+    for (const entry of normalizedFields) {
+      const index = entry.haystack.indexOf(searchTerm);
+      if (index >= 0) return { term, field: entry.field, index };
+    }
+    return { term, field: null, index: -1 };
+  });
+  if (termHits.some((hit) => hit.index < 0 || !hit.field)) return null;
+  const first = termHits
+    .filter((hit) => hit.field)
+    .sort((a, b) => {
+      const fieldOrder = fields.indexOf(a.field) - fields.indexOf(b.field);
+      return fieldOrder || a.index - b.index;
+    })[0];
+  return {
+    field: first.field,
+    match: {
+      kind: "allTerms",
+      query: terms.join(" "),
+      index: first.index,
+      match: first.term,
+    },
+  };
+}
+
+function _findSearchMatches(text, options, includeTerms = true) {
+  const source = String(text);
+  const caseSensitive = Boolean(options.caseSensitive);
+  const haystack = caseSensitive ? source : source.toLowerCase();
+  const maxMatchesPerField = _boundedNumber(options.maxMatchesPerField, 1000, 1, 100000);
+  const matches = [];
+
+  const addSubstring = (needle, label, kind) => {
+    if (needle === undefined || needle === null) return;
+    const rawNeedle = String(needle);
+    if (!rawNeedle) return;
+    const searchNeedle = caseSensitive ? rawNeedle : rawNeedle.toLowerCase();
+    let from = 0;
+    while (from <= haystack.length) {
+      const index = haystack.indexOf(searchNeedle, from);
+      if (index < 0) break;
+      matches.push({ kind, query: label ?? rawNeedle, index, match: source.slice(index, index + rawNeedle.length) });
+      from = index + Math.max(1, searchNeedle.length);
+      if (matches.length >= maxMatchesPerField) break;
+    }
+  };
+
+  if (options.regex) {
+    try {
+      const regex = new RegExp(String(options.regex), _normalizeFlags(options.regexFlags, caseSensitive));
+      let match;
+      while ((match = regex.exec(source)) && typeof match.index === "number") {
+        matches.push({ kind: "regex", query: String(options.regex), index: match.index, match: match[0] });
+        if (matches.length >= maxMatchesPerField) break;
+        if (match[0] === "") regex.lastIndex += 1;
+      }
+    } catch (err) {
+      throw new Error("providerSearchAll invalid regex: " + (err?.message || err));
+    }
+  }
+
+  for (const query of _asArray(options.query).concat(_asArray(options.queries))) {
+    addSubstring(query, String(query), "query");
+  }
+
+  const terms = includeTerms ? _normalizedSearchTerms(options) : [];
+  if (terms.length) {
+    const termHits = terms
+      .map((term) => {
+        const searchTerm = caseSensitive ? term : term.toLowerCase();
+        const index = haystack.indexOf(searchTerm);
+        return { term, index };
+      })
+      .filter((hit) => hit.index >= 0);
+    const mode = options.matchMode === "anyTerm" ? "anyTerm" : "allTerms";
+    if ((mode === "allTerms" && termHits.length === terms.length) || (mode === "anyTerm" && termHits.length > 0)) {
+      const first = termHits.sort((a, b) => a.index - b.index)[0];
+      matches.push({ kind: mode, query: terms.join(" "), index: first.index, match: first.term });
+    }
+  }
+
+  return matches.sort((a, b) => a.index - b.index);
+}
+
+function _boundedNumber(value, defaultValue, min, max) {
+  const parsed = Number(value);
+  const finite = Number.isFinite(parsed) ? parsed : defaultValue;
+  return Math.max(min, Math.min(finite, max));
+}
+
+function _hitKey(identity, path, query, index, pageIndex, pageItemIndex) {
+  const itemKey =
+    identity.id !== null && identity.id !== undefined
+      ? "id:" + identity.id
+      : "page:" + String(pageIndex) + ":" + String(pageItemIndex);
+  return [itemKey, path ?? "", query ?? "", String(index ?? "")].join("\\n");
+}
+
+/**
+ * Stream pages from a provider API and search item text structurally. This is
+ * for broad mention searches and absence checks where keeping every raw page
+ * in memory or hand-parsing JSON strings is brittle.
+ */
+async function providerSearchAll(provider, apiPath, init = {}, options = {}) {
+  const pagination = init.pagination || init.fetchAllPages || {};
+  const itemsPath = pagination.itemsPath || init.itemsPath || options.itemsPath;
+  const cursorPath = pagination.nextCursorPath || pagination.cursorPath;
+  const maxPagesRaw = Number(pagination.maxPages || init.maxPages || options.maxPages || 100);
+  const maxPages = Math.max(1, Math.min(Number.isFinite(maxPagesRaw) ? maxPagesRaw : 100, 500));
+  const maxHits = _boundedNumber(options.maxHits, 100, 1, 5000);
+  const maxHitsPerItem = _boundedNumber(options.maxHitsPerItem, 3, 1, 100);
+  const maxFieldsPerItem = _boundedNumber(options.maxFieldsPerItem, 5000, 1, 50000);
+  const contextChars = options.contextChars ?? options.snippetChars ?? 180;
+  const baseInit = _withoutProviderFetchAllOptions(init);
+  let query = _cloneJson(init.query || {});
+  let body = _cloneJson(init.body);
+  let pageNumber = Number(pagination.startPage || 1);
+  let offset = Number(pagination.startOffset || 0);
+  let lastCursor = null;
+  let stoppedReason = "completed";
+  let itemCount = 0;
+  let matchedItemCount = 0;
+  let totalHitCount = 0;
+  const hits = [];
+  const seenHitKeys = new Set();
+  let pageIndex = 0;
+
+  for (; pageIndex < maxPages; pageIndex++) {
+    if (pagination.pageParam) query = { ...(query || {}), [pagination.pageParam]: pageNumber };
+    if (pagination.offsetParam) query = { ...(query || {}), [pagination.offsetParam]: offset };
+
+    const page = await providerFetch(provider, apiPath, {
+      ...baseInit,
+      query,
+      ...(body !== undefined ? { body } : {}),
+    });
+    const nextCursor = cursorPath ? _getByPath(page, cursorPath) : undefined;
+    const hasNextCursor =
+      nextCursor !== undefined && nextCursor !== null && String(nextCursor) !== "";
+    if (hasNextCursor && lastCursor !== null && String(nextCursor) === String(lastCursor)) {
+      stoppedReason = "repeated-cursor";
+      break;
+    }
+
+    const pageItems = _extractItems(page, itemsPath);
+    itemCount += pageItems.length;
+
+    for (let pageItemIndex = 0; pageItemIndex < pageItems.length; pageItemIndex++) {
+      const item = pageItems[pageItemIndex];
+      const identity = _extractItemIdentity(item, options.idPaths);
+      const metadata = _extractMetadata(item, options.metadataPaths);
+      const fields = _collectSearchStrings(item, options.textPaths, maxFieldsPerItem);
+      let storedItemHitCount = 0;
+      let itemMatched = false;
+
+      const addHit = (field, match) => {
+        const key = _hitKey(identity, field.path, match.query, match.index, pageIndex, pageItemIndex);
+        if (seenHitKeys.has(key)) return false;
+        seenHitKeys.add(key);
+        totalHitCount += 1;
+        if (!itemMatched) {
+          matchedItemCount += 1;
+          itemMatched = true;
+        }
+        if (hits.length < maxHits && storedItemHitCount < maxHitsPerItem) {
+          storedItemHitCount += 1;
+          hits.push({
+            id: identity.id,
+            idPath: identity.idPath,
+            pageIndex,
+            pageItemIndex,
+            itemIndex: itemCount - pageItems.length + pageItemIndex,
+            path: field.path,
+            kind: match.kind,
+            query: match.query,
+            match: match.match,
+            snippet: _makeSnippet(field.text, match.index, contextChars),
+            ...(Object.keys(metadata).length ? { metadata } : {}),
+          });
+        }
+        return true;
+      };
+
+      const itemWideTermMatch = _findItemWideTermMatch(fields, options);
+      if (itemWideTermMatch) {
+        addHit(itemWideTermMatch.field, itemWideTermMatch.match);
+      }
+
+      for (const field of fields) {
+        const fieldMatches = _findSearchMatches(field.text, options, !itemWideTermMatch);
+        for (const match of fieldMatches) {
+          addHit(field, match);
+        }
+      }
+    }
+
+    if (hasNextCursor) {
+      lastCursor = nextCursor;
+      if (pagination.cursorBodyPath) {
+        body = _setByPath(body || {}, pagination.cursorBodyPath, nextCursor);
+      } else if (pagination.cursorParam) {
+        query = { ...(query || {}), [pagination.cursorParam]: nextCursor };
+      } else {
+        stoppedReason = "cursor-found-without-destination";
+        break;
+      }
+      continue;
+    }
+
+    lastCursor = null;
+    if (pagination.pageParam) {
+      if (pageItems.length === 0) {
+        stoppedReason = "empty-page";
+        break;
+      }
+      pageNumber += 1;
+      continue;
+    }
+    if (pagination.offsetParam) {
+      if (pageItems.length === 0) {
+        stoppedReason = "empty-page";
+        break;
+      }
+      const step = Number(pagination.pageSize || pageItems.length);
+      if (!Number.isFinite(step) || step <= 0) {
+        stoppedReason = "invalid-page-size";
+        break;
+      }
+      offset += step;
+      if (pagination.pageSize && pageItems.length < Number(pagination.pageSize)) {
+        stoppedReason = "short-page";
+        break;
+      }
+      continue;
+    }
+
+    break;
+  }
+
+  const pageCount = pageIndex + (pageIndex < maxPages ? 1 : 0);
+  const hitPageOrOffsetLimit =
+    Boolean(pagination.pageParam || pagination.offsetParam) &&
+    stoppedReason === "completed" &&
+    pageCount >= maxPages;
+  const hasMore =
+    stoppedReason === "cursor-found-without-destination" ||
+    (lastCursor !== null && pageCount >= maxPages) || hitPageOrOffsetLimit;
+  if (hasMore && stoppedReason === "completed") stoppedReason = "max-pages";
+
+  return {
+    hits,
+    hitCount: hits.length,
+    totalHitCount,
+    truncatedHits: totalHitCount > hits.length,
+    matchedItemCount,
+    itemCount,
+    pageCount,
+    hasMore,
+    lastCursor,
+    stoppedReason,
+    searched: {
+      provider,
+      path: apiPath,
+      itemsPath: itemsPath || null,
+      textPaths: _asArray(options.textPaths),
+      idPaths: _asArray(options.idPaths),
+      query: options.query ?? null,
+      queries: _asArray(options.queries),
+      terms: _asArray(options.terms),
+      regex: options.regex ?? null,
+      matchMode: options.matchMode || (options.terms ? "allTerms" : "query"),
+      caseSensitive: Boolean(options.caseSensitive),
+    },
+  };
+}
+
 /**
  * Fetch every page from a provider API using generic cursor, page-number, or
  * offset pagination. Prefer this inside run-code when the answer depends on a

package/dist/coding-tools/run-code.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-code.js","sourceRoot":"","sources":["../../src/coding-tools/run-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAKtD,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,MAAM,cAAc,GAAG,OAAO,CAAC;AAC/B,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACjC,uFAAuF;AACvF,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE/C,SAAS,qBAAqB,CAAC,MAAc;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAc;IAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,IAAI,oBAA+C,CAAC;AACpD,SAAS,qBAAqB;IAC5B,IAAI,oBAAoB,KAAK,SAAS;QAAE,OAAO,oBAAoB,CAAC;IACpE,KAAK,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,2BAA2B,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,SAAS,CACrB,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,EAAE,IAAI,EAAE,iBAAiB,CAAC,EAC/B,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CACrC,CAAC;YACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,oBAAoB,GAAG,IAAI,CAAC;gBAC5B,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;QACnE,CAAC;IACH,CAAC;IACD,oBAAoB,GAAG,IAAI,CAAC;IAC5B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wDAAwD;AACxD,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,sBAAsB;IACtB,mBAAmB;IACnB,sBAAsB;IACtB,aAAa;IACb,iBAAiB;CAClB,CAAC,CAAC;AAUH;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAA6C,EAC7C,OAAuB,EAAE;IAEzB,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAEzD,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,4EAA4E;QAC5E,qCAAqC;QACrC,SAAS,EAAE,cAAc;QACzB,cAAc,EAAE,gBAAgB;QAChC,IAAI,EAAE;YACJ,WAAW,EAAE;gBACX,sFAAsF;gBACtF,mHAAmH;gBACnH,8bAA8b;gBAC9b,oBAAoB;gBACpB,uHAAuH;gBACvH,mIAAmI;gBACnI,+HAA+H;gBAC/H,0DAA0D;gBAC1D,6FAA6F;gBAC7F,0GAA0G;gBAC1G,0LAA0L;gBAC1L,+UAA+U;gBAC/U,gFAAgF;gBAChF,iEAAiE;gBACjE,iFAAiF;gBACjF,kJAAkJ;gBAClJ,0HAA0H;gBAC1H,6LAA6L;gBAC7L,yEAAyE;gBACzE,6GAA6G;gBAC7G,sEAAsE;gBACtE,sGAAsG;aACvG,CAAC,IAAI,CAAC,GAAG,CAAC;YACX,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,oEAAoE;qBACvE;oBACD,SAAS,EAAE;wBACT,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,+CAA+C,kBAAkB,UAAU,cAAc,GAAG;qBAC1G;oBACD,cAAc,EAAE;wBACd,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,iEAAiE,wBAAwB,UAAU,gBAAgB,GAAG;qBACpI;iBACF;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;SACF;QACD,GAAG,EAAE,KAAK,EAAE,IAA4B,EAAE,OAA0B,EAAE,EAAE;YACtE,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,OAAO,0BAA0B,CAAC;YAEpD,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChD,MAAM,SAAS,GACb,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC;gBACvD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,cAAc,CAAC;gBAC5C,CAAC,CAAC,kBAAkB,CAAC;YAEzB,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACvD,MAAM,cAAc,GAClB,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,kBAAkB,GAAG,CAAC;gBAC3D,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;gBAChD,CAAC,CAAC,wBAAwB,CAAC;YAE/B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;YAC7B,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAE3D,+DAA+D;YAC/D,MAAM,EACJ,MAAM,EACN,UAAU,EACV,YAAY,EACZ,OAAO,EAAE,aAAa,GACvB,GAAG,MAAM,iBAAiB,CACzB,WAAW,EACX,OAAO,EACP,OAAO,EACP,oBAAoB,EACpB,gBAAgB,CACjB,CAAC;YAEF,IAAI,MAA0B,CAAC;YAC/B,IAAI,OAA2B,CAAC;YAChC,IAAI,CAAC;gBACH,kEAAkE;gBAClE,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;gBAChD,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;gBAClE,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;gBAC3C,EAAE,CAAC,aAAa,CACd,OAAO,EACP,kBAAkB,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,EACjD,MAAM,CACP,CAAC;gBAEF,yDAAyD;gBACzD,MAAM,OAAO,GAA2B,EAAE,CAAC;gBAC3C,KAAK,MAAM,GAAG,IAAI;oBAChB,MAAM;oBACN,MAAM;oBACN,QAAQ;oBACR,MAAM;oBACN,KAAK;oBACL,MAAM;oBACN,QAAQ;iBACT,EAAE,CAAC;oBACF,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;wBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;gBACzD,CAAC;gBACD,qEAAqE;gBACrE,0CAA0C;gBAC1C,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;gBACxB,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC;gBACtB,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC;gBAErB,qEAAqE;gBACrE,sEAAsE;gBACtE,8CAA8C;gBAC9C,MAAM,cAAc,GAAG,qBAAqB,EAAE,CAAC;gBAC/C,MAAM,QAAQ,GAAG,cAAc;oBAC7B,CAAC,CAAC;wBACE,cAAc;wBACd,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC,GAAG,CAClC,CAAC,WAAW,EAAE,EAAE,CAAC,mBAAmB,WAAW,EAAE,CAClD;wBACD,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC,GAAG,CACnC,CAAC,WAAW,EAAE,EAAE,CAAC,oBAAoB,WAAW,EAAE,CACnD;wBACD,OAAO;qBACR;oBACH,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAEd,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE;oBAC9C,GAAG,EAAE,MAAM;oBACX,GAAG,EAAE,OAAO;oBACZ,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;iBAClC,CAAC,CAAC;gBAEH,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;gBAErB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC5B,QAAQ,GAAG,IAAI,CAAC;oBAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACtB,UAAU,CAAC,GAAG,EAAE;wBACd,IAAI,CAAC;4BACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBACxB,CAAC;wBAAC,MAAM,CAAC,CAAA,CAAC;oBACZ,CAAC,EAAE,KAAK,CAAC,CAAC;gBACZ,CAAC,EAAE,SAAS,CAAC,CAAC;gBAEd,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBACzC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC7B,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBACzC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC7B,CAAC,CAAC,CAAC;gBAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBACpE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC9B,CAAC,CAAC,CAAC;gBACH,YAAY,CAAC,KAAK,CAAC,CAAC;gBAEpB,MAAM,QAAQ,GACZ;oBACE,MAAM,CAAC,CAAC,CAAC,YAAY,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;oBAClC,MAAM,CAAC,CAAC,CAAC,YAAY,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;iBACnC;qBACE,MAAM,CAAC,OAAO,CAAC;qBACf,IAAI,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC;gBAEnC,MAAM,KAAK,GAAa,EAAE,CAAC;gBAC3B,IAAI,QAAQ;oBAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,SAAS,KAAK,CAAC,CAAC;gBAC5D,IAAI,QAAQ,KAAK,CAAC,IAAI,QAAQ,KAAK,IAAI;oBACrC,KAAK,CAAC,IAAI,CAAC,aAAa,QAAQ,EAAE,CAAC,CAAC;gBACtC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;gBACjC,IAAI,SAAS,CAAC,MAAM;oBAClB,KAAK,CAAC,IAAI,CAAC,oBAAoB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACzD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAErB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAChC,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;oBACjC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;oBAChD,OAAO,GAAG,SAAS,qBAAqB,CAAC,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,cAAc,EAAE,SAAS,CAAC;gBACnG,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;oBAAS,CAAC;gBACT,aAAa,EAAE,CAAC;gBAChB,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,qCAAqC;gBACrC,IAAI,CAAC;oBACH,IAAI,OAAO;wBAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBACjD,IAAI,MAAM;wBAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClE,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAaD,KAAK,UAAU,iBAAiB,CAC9B,KAAa,EACb,OAAoC,EACpC,OAAqC,EACrC,YAAyB,EACzB,UAAuB;IAEvB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;YACjD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,8CAA8C;QAC9C,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;QACnD,IAAI,UAAU,KAAK,UAAU,KAAK,EAAE,EAAE,CAAC;YACrC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QAED,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,aAAa,IAAI,KAAK,CAAC,MAAM,CAAC;YAC9B,IAAI,aAAa,GAAG,qBAAqB,EAAE,CAAC;gBAC1C,QAAQ,GAAG,IAAI,CAAC;gBAChB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBAC7B,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,QAAQ;gBAAE,OAAO;YACrB,mBAAmB,CACjB,IAAI,EACJ,OAAO,EACP,OAAO,EACP,YAAY,EACZ,UAAU,EACV,SAAS,EACT,GAAG,CACJ,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACnB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAsB,CAAC;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC;IAE7B,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC,CAAC;IAEF,OAAO;QACL,MAAM;QACN,UAAU;QACV,YAAY,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE;QAChD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAAe,EACf,OAAoC,EACpC,OAAqC,EACrC,YAAyB,EACzB,UAAuB,EACvB,SAAsB,EACtB,GAAwB;IAExB,IAAI,MAAwD,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IAED,qBAAqB;IACrB,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,gBAAgB,GACpB,KAAK,EAAE,QAAQ,KAAK,IAAI;QACxB,KAAK,CAAC,SAAS,KAAK,KAAK;QACzB,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC;IAC/B,IACE,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC3B,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,CAAC,gBAAgB,EACjB,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,SAAS,QAAQ,gFAAgF;SACzG,CAAC,CACH,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,QAAQ,sBAAsB,EAAE,CAAC,CAAC,CAAC;QAC5E,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;IACnC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,4EAA4E;IAC5E,qDAAqD;IACrD,KAAK;SACF,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC;SACtB,IAAI,CAAC,CAAC,MAAe,EAAE,EAAE;QACxB,MAAM,IAAI,GACR,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACxE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACP,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAS,kBAAkB,CACzB,QAAgB,EAChB,UAAkB,EAClB,WAAmB;IAEnB,OAAO;;;;wCAI+B,UAAU;wBAC1B,WAAW;;;;;;;;cAQrB,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwVtB,QAAQ;;;;;CAKT,CAAC;AACF,CAAC","sourcesContent":["/**\n * Sandboxed JavaScript execution tool for the agent.\n *\n * Executes user-supplied JavaScript in an isolated child process with:\n *  - A scrubbed environment (no app secrets or env vars; only PATH/HOME/TMPDIR).\n *  - A fresh temporary working directory.\n *  - An ephemeral bridge HTTP server on 127.0.0.1 so the child can call\n *    allowlisted registered tools (provider-api-request, web-request, etc.)\n *    with the same request context as the parent — without leaking secrets.\n *\n * Security notes:\n *  - The bridge token is a 32-byte random hex string generated per invocation.\n *  - The bridge binds to 127.0.0.1 only; no external exposure.\n *  - The allowlist of callable bridge tools is enforced server-side.\n *  - Secret values are NEVER included in the env passed to the child.\n *  - When the Node permission model is available (`--permission`, or\n *    `--experimental-permission` on Node 20), the child is denied filesystem\n *    access outside its own temp dir, child processes, workers, and native\n *    addons. Outbound network from the child is NOT blocked by the permission\n *    model; the env scrub means such requests carry no credentials, and all\n *    authenticated calls must go through the bridge (which applies the\n *    registered tools' host allowlists and SSRF guards).\n */\n\nimport crypto from \"node:crypto\";\nimport fs from \"node:fs\";\nimport http from \"node:http\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport { spawn, spawnSync } from \"node:child_process\";\n\nimport type { ActionEntry } from \"../agent/production-agent.js\";\nimport type { ActionRunContext } from \"../action.js\";\n\nconst DEFAULT_TIMEOUT_MS = 120_000;\nconst MAX_TIMEOUT_MS = 600_000;\nconst DEFAULT_MAX_OUTPUT_CHARS = 50_000;\nconst MAX_OUTPUT_CHARS = 200_000;\n/** Hard cap on bridge request bodies so sandboxed code can't exhaust parent memory. */\nconst BRIDGE_MAX_BODY_BYTES = 10 * 1024 * 1024;\n\nfunction sandboxReadAllowPaths(tmpDir: string): string[] {\n  const paths = new Set<string>([tmpDir]);\n  try {\n    paths.add(fs.realpathSync(tmpDir));\n  } catch {}\n  return [...paths];\n}\n\nfunction sandboxWriteAllowPaths(tmpDir: string): string[] {\n  const paths = new Set<string>([tmpDir]);\n  try {\n    paths.add(fs.realpathSync(tmpDir));\n  } catch {}\n  return [...paths];\n}\n\n/**\n * Resolve the Node permission-model flag supported by the current runtime,\n * probing once and caching. Returns null when the permission model is\n * unavailable (the sandbox then falls back to env-scrub isolation only).\n */\nlet cachedPermissionFlag: string | null | undefined;\nfunction resolvePermissionFlag(): string | null {\n  if (cachedPermissionFlag !== undefined) return cachedPermissionFlag;\n  for (const flag of [\"--permission\", \"--experimental-permission\"]) {\n    try {\n      const probe = spawnSync(\n        process.execPath,\n        [flag, \"-e\", \"process.exit(0)\"],\n        { timeout: 10_000, stdio: \"ignore\" },\n      );\n      if (probe.status === 0) {\n        cachedPermissionFlag = flag;\n        return flag;\n      }\n    } catch {\n      // Probe failure means the flag is unsupported; try the next one.\n    }\n  }\n  cachedPermissionFlag = null;\n  return null;\n}\n\n/** Tools callable via the sandbox bridge by default. */\nconst DEFAULT_BRIDGE_TOOLS = new Set([\n  \"provider-api-request\",\n  \"provider-api-docs\",\n  \"provider-api-catalog\",\n  \"web-request\",\n  \"workspace-files\",\n]);\n\nexport interface RunCodeOptions {\n  /**\n   * Extra tool names (beyond the default set) that the sandbox bridge will\n   * forward to the registered action registry.\n   */\n  bridgeTools?: string[];\n}\n\n/**\n * Create a `run-code` ActionEntry.\n *\n * @param getActions  Supplier that returns the current action registry (called\n *                    at invocation time so updates are reflected).\n * @param opts        Optional configuration.\n */\nexport function createRunCodeEntry(\n  getActions: () => Record<string, ActionEntry>,\n  opts: RunCodeOptions = {},\n): ActionEntry {\n  const extraBridgeTools = new Set(opts.bridgeTools ?? []);\n\n  return {\n    readOnly: true,\n    // Allow a generous per-call timeout so large data-processing jobs don't hit\n    // the agent-loop's default 60 s cap.\n    timeoutMs: MAX_TIMEOUT_MS,\n    maxResultChars: MAX_OUTPUT_CHARS,\n    tool: {\n      description: [\n        \"Execute JavaScript (Node.js, ESM, top-level await supported) in an isolated sandbox.\",\n        \"Use this to fetch, join, aggregate, and reduce large datasets, returning only printed output to the conversation.\",\n        \"The sandbox runs with a scrubbed environment (no secrets) and, where the Node permission model is available, no filesystem access outside its own temp dir, no child processes, and no workers. Authenticated calls must go through the provided globals; direct network requests carry no credentials. Note: isolation is process-level (env scrub + Node permission model), not an OS-level container — outbound network from sandbox code is not blocked.\",\n        \"Available globals:\",\n        \"  - `appAction(name, args?)` — call any registered agent-exposed read-only app action/tool and get its parsed result.\",\n        \"    Use this to loop over app data readers and compose multi-source analyses without forcing every intermediate result into chat.\",\n        \"  - `providerFetch(provider, path, init?)` — authenticated call to a registered provider via the provider-api-request action.\",\n        \"    Returns the parsed JSON result (or throws on error).\",\n        \"    Supports stageAs/saveToFile/fetchAllPages; use cursorBodyPath for POST-body pagination.\",\n        \"    Example: `const data = await providerFetch('<provider-id>', '/records', { query: { limit: 100 } });`\",\n        \"  - `providerRequest(provider, path, init?)` — same authenticated call, but returns the full provider-api envelope with request, response status/headers, truncation, and body metadata.\",\n        \"  - `providerFetchAll(provider, path, init?)` — generic pagination helper for cursor, page, and offset APIs. Pass `pagination: { itemsPath, cursorPath or nextCursorPath, cursorParam or cursorBodyPath, pageParam, offsetParam, pageSize, maxPages }`. Returns `{ items, pages, pageCount, itemCount, hasMore, lastCursor, stoppedReason }`.\",\n        \"  - `webFetch(url, init?)` — outbound HTTP request via the web-request action.\",\n        \"    Returns `{ status, body }` where body is the response text.\",\n        \"    Example: `const { body } = await webFetch('https://api.example.com/data');`\",\n        \"  - `workspaceRead(path, opts?)` — read a Resources-backed workspace file by path. Returns content string or null. opts: { offset?, maxChars? }.\",\n        \"  - `workspaceReadMeta(path, opts?)` — read a workspace file with metadata such as sizeBytes, truncated, and nextOffset.\",\n        \"  - `workspaceWrite(path, content, contentType?)` — create or overwrite a workspace file. Use `scratch/...` for temporary staging; use durable folders only for files the user should keep.\",\n        \"  - `workspaceAppend(path, content)` — append text to a workspace file.\",\n        \"  - `workspaceList(prefix?)` — list workspace files, returns [{ path, sizeBytes, contentType, updatedAt }].\",\n        \"Print results with `console.log()`; only stdout+stderr are returned.\",\n        \"Timeout defaults to 120 s (max 600 s). Output is truncated to 50 000 chars by default (max 200 000).\",\n      ].join(\" \"),\n      parameters: {\n        type: \"object\",\n        properties: {\n          code: {\n            type: \"string\",\n            description:\n              \"JavaScript source to execute. ESM syntax, top-level await allowed.\",\n          },\n          timeoutMs: {\n            type: \"number\",\n            description: `Execution timeout in milliseconds. Default: ${DEFAULT_TIMEOUT_MS}. Max: ${MAX_TIMEOUT_MS}.`,\n          },\n          maxOutputChars: {\n            type: \"number\",\n            description: `Maximum combined stdout+stderr characters to return. Default: ${DEFAULT_MAX_OUTPUT_CHARS}. Max: ${MAX_OUTPUT_CHARS}.`,\n          },\n        },\n        required: [\"code\"],\n      },\n    },\n    run: async (args: Record<string, string>, context?: ActionRunContext) => {\n      const code = typeof args.code === \"string\" ? args.code : \"\";\n      if (!code.trim()) return \"Error: code is required.\";\n\n      const requestedTimeout = Number(args.timeoutMs);\n      const timeoutMs =\n        Number.isFinite(requestedTimeout) && requestedTimeout > 0\n          ? Math.min(requestedTimeout, MAX_TIMEOUT_MS)\n          : DEFAULT_TIMEOUT_MS;\n\n      const requestedMaxOutput = Number(args.maxOutputChars);\n      const maxOutputChars =\n        Number.isFinite(requestedMaxOutput) && requestedMaxOutput > 0\n          ? Math.min(requestedMaxOutput, MAX_OUTPUT_CHARS)\n          : DEFAULT_MAX_OUTPUT_CHARS;\n\n      const actions = getActions();\n      const bridgeToken = crypto.randomBytes(32).toString(\"hex\");\n\n      // Start bridge server — resolves once the server is listening.\n      const {\n        server,\n        bridgePort,\n        getUsedTools,\n        cleanup: cleanupBridge,\n      } = await startBridgeServer(\n        bridgeToken,\n        actions,\n        context,\n        DEFAULT_BRIDGE_TOOLS,\n        extraBridgeTools,\n      );\n\n      let tmpDir: string | undefined;\n      let tmpFile: string | undefined;\n      try {\n        // Write code to a temp ESM file (top-level await needs a module).\n        const tmpBaseDir = fs.realpathSync(os.tmpdir());\n        tmpDir = fs.mkdtempSync(path.join(tmpBaseDir, \"agent-run-code-\"));\n        tmpFile = path.join(tmpDir, \"sandbox.mjs\");\n        fs.writeFileSync(\n          tmpFile,\n          buildSandboxModule(code, bridgePort, bridgeToken),\n          \"utf8\",\n        );\n\n        // Build scrubbed env — only safe POSIX vars, no secrets.\n        const safeEnv: Record<string, string> = {};\n        for (const key of [\n          \"PATH\",\n          \"HOME\",\n          \"TMPDIR\",\n          \"TEMP\",\n          \"TMP\",\n          \"LANG\",\n          \"LC_ALL\",\n        ]) {\n          if (process.env[key]) safeEnv[key] = process.env[key]!;\n        }\n        // Point TMPDIR inside the sandbox dir so in-sandbox temp writes stay\n        // within the permission-model allow list.\n        safeEnv.TMPDIR = tmpDir;\n        safeEnv.TEMP = tmpDir;\n        safeEnv.TMP = tmpDir;\n\n        // Lock the child down with the Node permission model when available:\n        // filesystem restricted to the sandbox temp dir, and child processes,\n        // workers, and native addons denied entirely.\n        const permissionFlag = resolvePermissionFlag();\n        const nodeArgs = permissionFlag\n          ? [\n              permissionFlag,\n              ...sandboxReadAllowPaths(tmpDir).map(\n                (allowedPath) => `--allow-fs-read=${allowedPath}`,\n              ),\n              ...sandboxWriteAllowPaths(tmpDir).map(\n                (allowedPath) => `--allow-fs-write=${allowedPath}`,\n              ),\n              tmpFile,\n            ]\n          : [tmpFile];\n\n        const child = spawn(process.execPath, nodeArgs, {\n          cwd: tmpDir,\n          env: safeEnv,\n          stdio: [\"ignore\", \"pipe\", \"pipe\"],\n        });\n\n        let stdout = \"\";\n        let stderr = \"\";\n        let timedOut = false;\n\n        const timer = setTimeout(() => {\n          timedOut = true;\n          child.kill(\"SIGTERM\");\n          setTimeout(() => {\n            try {\n              child.kill(\"SIGKILL\");\n            } catch {}\n          }, 2_000);\n        }, timeoutMs);\n\n        child.stdout?.on(\"data\", (chunk: Buffer) => {\n          stdout += chunk.toString();\n        });\n        child.stderr?.on(\"data\", (chunk: Buffer) => {\n          stderr += chunk.toString();\n        });\n\n        const exitCode = await new Promise<number | null>((resolve, reject) => {\n          child.once(\"error\", reject);\n          child.once(\"exit\", resolve);\n        });\n        clearTimeout(timer);\n\n        const combined =\n          [\n            stdout ? `stdout:\\n${stdout}` : \"\",\n            stderr ? `stderr:\\n${stderr}` : \"\",\n          ]\n            .filter(Boolean)\n            .join(\"\\n\\n\") || \"(no output)\";\n\n        const lines: string[] = [];\n        if (timedOut) lines.push(`timedOut: true (${timeoutMs}ms)`);\n        if (exitCode !== 0 && exitCode !== null)\n          lines.push(`exitCode: ${exitCode}`);\n        const usedTools = getUsedTools();\n        if (usedTools.length)\n          lines.push(`bridgeToolsUsed: ${usedTools.join(\", \")}`);\n        lines.push(combined);\n\n        const full = lines.join(\"\\n\\n\");\n        if (full.length > maxOutputChars) {\n          const truncated = full.slice(0, maxOutputChars);\n          return `${truncated}\\n\\n...[truncated ${(full.length - maxOutputChars).toLocaleString()} chars]`;\n        }\n        return full;\n      } finally {\n        cleanupBridge();\n        server.close();\n        // Clean up temp files (best-effort).\n        try {\n          if (tmpFile) fs.rmSync(tmpFile, { force: true });\n          if (tmpDir) fs.rmSync(tmpDir, { recursive: true, force: true });\n        } catch {}\n      }\n    },\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Bridge server\n// ---------------------------------------------------------------------------\n\ninterface BridgeResult {\n  server: http.Server;\n  bridgePort: number;\n  getUsedTools: () => string[];\n  cleanup: () => void;\n}\n\nasync function startBridgeServer(\n  token: string,\n  actions: Record<string, ActionEntry>,\n  context: ActionRunContext | undefined,\n  defaultTools: Set<string>,\n  extraTools: Set<string>,\n): Promise<BridgeResult> {\n  const usedTools = new Set<string>();\n  const server = http.createServer((req, res) => {\n    if (req.method !== \"POST\" || req.url !== \"/tool\") {\n      res.writeHead(404);\n      res.end(\"Not found\");\n      return;\n    }\n\n    // Validate bearer token — must match exactly.\n    const authHeader = req.headers.authorization ?? \"\";\n    if (authHeader !== `Bearer ${token}`) {\n      res.writeHead(401);\n      res.end(\"Unauthorized\");\n      return;\n    }\n\n    let body = \"\";\n    let receivedBytes = 0;\n    let rejected = false;\n    req.on(\"data\", (chunk: Buffer) => {\n      receivedBytes += chunk.length;\n      if (receivedBytes > BRIDGE_MAX_BODY_BYTES) {\n        rejected = true;\n        res.writeHead(413);\n        res.end(\"Payload too large\");\n        req.destroy();\n        return;\n      }\n      body += chunk.toString();\n    });\n    req.on(\"end\", () => {\n      if (rejected) return;\n      handleBridgeRequest(\n        body,\n        actions,\n        context,\n        defaultTools,\n        extraTools,\n        usedTools,\n        res,\n      );\n    });\n    req.on(\"error\", () => {\n      res.writeHead(500);\n      res.end(\"Request error\");\n    });\n  });\n\n  await new Promise<void>((resolve, reject) => {\n    server.once(\"error\", reject);\n    server.listen(0, \"127.0.0.1\", () => resolve());\n  });\n\n  const addr = server.address() as { port: number };\n  const bridgePort = addr.port;\n\n  const cleanup = () => {\n    try {\n      server.close();\n    } catch {}\n  };\n\n  return {\n    server,\n    bridgePort,\n    getUsedTools: () => Array.from(usedTools).sort(),\n    cleanup,\n  };\n}\n\nfunction handleBridgeRequest(\n  rawBody: string,\n  actions: Record<string, ActionEntry>,\n  context: ActionRunContext | undefined,\n  defaultTools: Set<string>,\n  extraTools: Set<string>,\n  usedTools: Set<string>,\n  res: http.ServerResponse,\n): void {\n  let parsed: { tool?: string; args?: Record<string, string> };\n  try {\n    parsed = JSON.parse(rawBody);\n  } catch {\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(JSON.stringify({ error: \"Invalid JSON body\" }));\n    return;\n  }\n\n  const toolName = typeof parsed.tool === \"string\" ? parsed.tool.trim() : \"\";\n  if (!toolName) {\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(JSON.stringify({ error: \"Missing tool name\" }));\n    return;\n  }\n\n  // Enforce allowlist.\n  const entry = actions[toolName];\n  const isReadOnlyAction =\n    entry?.readOnly === true &&\n    entry.agentTool !== false &&\n    entry.toolCallable !== false;\n  if (\n    !defaultTools.has(toolName) &&\n    !extraTools.has(toolName) &&\n    !isReadOnlyAction\n  ) {\n    res.writeHead(403, { \"Content-Type\": \"application/json\" });\n    res.end(\n      JSON.stringify({\n        error: `Tool \"${toolName}\" is not an agent-exposed read-only action or sandbox bridge allowlisted tool.`,\n      }),\n    );\n    return;\n  }\n\n  if (!entry) {\n    res.writeHead(404, { \"Content-Type\": \"application/json\" });\n    res.end(JSON.stringify({ error: `Tool \"${toolName}\" is not registered.` }));\n    return;\n  }\n\n  const toolArgs = parsed.args ?? {};\n  usedTools.add(toolName);\n  // Run the tool with the parent request context so auth/org/owner resolution\n  // works exactly as it does in the normal agent loop.\n  entry\n    .run(toolArgs, context)\n    .then((result: unknown) => {\n      const body =\n        typeof result === \"string\" ? result : JSON.stringify(result, null, 2);\n      res.writeHead(200, { \"Content-Type\": \"application/json\" });\n      res.end(JSON.stringify({ result: body }));\n    })\n    .catch((err: unknown) => {\n      const message = err instanceof Error ? err.message : String(err);\n      res.writeHead(500, { \"Content-Type\": \"application/json\" });\n      res.end(JSON.stringify({ error: message }));\n    });\n}\n\n// ---------------------------------------------------------------------------\n// Sandbox module template\n// ---------------------------------------------------------------------------\n\n/**\n * Wrap the user's code in an ESM module that:\n *  1. Defines `providerFetch`, `providerRequest`, `providerFetchAll`, and\n *     `webFetch` helpers via the bridge.\n *  2. Runs the user's code as top-level await in an async IIFE.\n */\nfunction buildSandboxModule(\n  userCode: string,\n  bridgePort: number,\n  bridgeToken: string,\n): string {\n  return `\nimport { createRequire } from \"node:module\";\nconst require = createRequire(import.meta.url);\n\nconst _bridgeBase = \"http://127.0.0.1:${bridgePort}/tool\";\nconst _bridgeToken = \"${bridgeToken}\";\n\nasync function _bridgeCall(tool, args) {\n  const http = await import(\"node:http\");\n  return new Promise((resolve, reject) => {\n    const body = JSON.stringify({ tool, args });\n    const options = {\n      hostname: \"127.0.0.1\",\n      port: ${bridgePort},\n      path: \"/tool\",\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        \"Content-Length\": Buffer.byteLength(body),\n        \"Authorization\": \"Bearer \" + _bridgeToken,\n      },\n    };\n    const req = http.request(options, (res) => {\n      let data = \"\";\n      res.on(\"data\", (chunk) => { data += chunk; });\n      res.on(\"end\", () => {\n        try {\n          const parsed = JSON.parse(data);\n          if (parsed.error) {\n            reject(new Error(parsed.error));\n          } else {\n            resolve(parsed.result);\n          }\n        } catch (e) {\n          reject(new Error(\"Bridge response parse error: \" + e.message));\n        }\n      });\n    });\n    req.on(\"error\", reject);\n    req.end(body);\n  });\n}\n\nfunction _parseBridgeResult(rawResult) {\n  if (typeof rawResult !== \"string\") return rawResult;\n  try { return JSON.parse(rawResult); } catch { return rawResult; }\n}\n\n/**\n * Call any registered agent-exposed read-only app action/tool via the sandbox bridge.\n * Mutating and explicitly hidden actions are blocked by the parent bridge.\n */\nasync function appAction(name, args = {}) {\n  return _parseBridgeResult(await _bridgeCall(name, args));\n}\n\nasync function providerRequest(provider, apiPath, init = {}) {\n  const method = (init.method || \"GET\").toUpperCase();\n  const rawResult = await _bridgeCall(\"provider-api-request\", {\n    provider,\n    path: apiPath,\n    method,\n    ...(init.query ? { query: init.query } : {}),\n    ...(init.body ? { body: init.body } : {}),\n    ...(init.headers ? { headers: init.headers } : {}),\n    ...(init.auth ? { auth: init.auth } : {}),\n    ...(init.connectionId ? { connectionId: init.connectionId } : {}),\n    ...(init.accountId ? { accountId: init.accountId } : {}),\n    ...(init.timeoutMs ? { timeoutMs: init.timeoutMs } : {}),\n    ...(init.maxBytes ? { maxBytes: init.maxBytes } : {}),\n    ...(init.stageAs ? { stageAs: init.stageAs } : {}),\n    ...(init.itemsPath ? { itemsPath: init.itemsPath } : {}),\n    ...(init.pagination ? { pagination: init.pagination } : {}),\n    ...(init.saveToFile ? { saveToFile: init.saveToFile } : {}),\n    ...(init.fetchAllPages ? { fetchAllPages: init.fetchAllPages } : {}),\n  });\n  return _parseBridgeResult(rawResult);\n}\n\n/**\n * Call a provider API via the authenticated provider-api-request action.\n * Returns the parsed JSON response body (or throws on error).\n */\nasync function providerFetch(provider, apiPath, init = {}) {\n  const parsed = await providerRequest(provider, apiPath, init);\n  // Unwrap the provider-api-request envelope ({ provider, request, response, guidance })\n  // so callers get the actual response body. fetchAllPages / saveToFile results\n  // (which have no \\`response\\` field) are returned as-is.\n  if (parsed && typeof parsed === \"object\" && parsed.response && typeof parsed.response === \"object\") {\n    const r = parsed.response;\n    if (typeof r.status === \"number\" && r.status >= 400) {\n      const detail = typeof r.text === \"string\" ? r.text : JSON.stringify(r.json ?? \"\");\n      throw new Error(\\`Provider request failed (\\${r.status}): \\${String(detail).slice(0, 500)}\\`);\n    }\n    return r.json !== undefined ? r.json : r.text;\n  }\n  return parsed;\n}\n\nfunction _cloneJson(value) {\n  if (value === undefined || value === null) return value;\n  return JSON.parse(JSON.stringify(value));\n}\n\nfunction _pathParts(path) {\n  if (!path || typeof path !== \"string\") return [];\n  return path\n    .replace(/\\\\[(\\\\d+)\\\\]/g, \".$1\")\n    .split(\".\")\n    .map((part) => part.trim())\n    .filter(Boolean);\n}\n\nfunction _getByPath(value, path) {\n  let current = value;\n  for (const part of _pathParts(path)) {\n    if (current === undefined || current === null) return undefined;\n    current = current[part];\n  }\n  return current;\n}\n\nfunction _setByPath(value, path, nextValue) {\n  const parts = _pathParts(path);\n  if (!parts.length) return value;\n  const root = value && typeof value === \"object\" ? _cloneJson(value) : {};\n  let current = root;\n  for (let i = 0; i < parts.length - 1; i++) {\n    const part = parts[i];\n    if (!current[part] || typeof current[part] !== \"object\") current[part] = {};\n    current = current[part];\n  }\n  current[parts[parts.length - 1]] = nextValue;\n  return root;\n}\n\nfunction _extractItems(page, itemsPath) {\n  if (itemsPath) {\n    const value = _getByPath(page, itemsPath);\n    return Array.isArray(value) ? value : [];\n  }\n  if (Array.isArray(page)) return page;\n  if (!page || typeof page !== \"object\") return [];\n  for (const key of [\"data\", \"results\", \"items\", \"records\", \"rows\", \"calls\", \"messages\", \"tickets\", \"issues\", \"deals\"]) {\n    if (Array.isArray(page[key])) return page[key];\n  }\n  return [];\n}\n\nfunction _withoutProviderFetchAllOptions(init) {\n  const {\n    pagination: _pagination,\n    fetchAllPages: _fetchAllPages,\n    stageAs: _stageAs,\n    itemsPath: _itemsPath,\n    saveToFile: _saveToFile,\n    ...rest\n  } = init || {};\n  return rest;\n}\n\n/**\n * Fetch every page from a provider API using generic cursor, page-number, or\n * offset pagination. Prefer this inside run-code when the answer depends on a\n * broad provider corpus rather than a single bounded request.\n */\nasync function providerFetchAll(provider, apiPath, init = {}) {\n  const pagination = init.pagination || init.fetchAllPages || {};\n  const itemsPath = pagination.itemsPath || init.itemsPath;\n  const cursorPath = pagination.nextCursorPath || pagination.cursorPath;\n  const maxPagesRaw = Number(pagination.maxPages || init.maxPages || 50);\n  const maxPages = Math.max(1, Math.min(Number.isFinite(maxPagesRaw) ? maxPagesRaw : 50, 200));\n  const baseInit = _withoutProviderFetchAllOptions(init);\n  let query = _cloneJson(init.query || {});\n  let body = _cloneJson(init.body);\n  let pageNumber = Number(pagination.startPage || 1);\n  let offset = Number(pagination.startOffset || 0);\n  const pages = [];\n  const items = [];\n  let lastCursor = null;\n  let stoppedReason = \"completed\";\n\n  for (let pageIndex = 0; pageIndex < maxPages; pageIndex++) {\n    if (pagination.pageParam) {\n      query = { ...(query || {}), [pagination.pageParam]: pageNumber };\n    }\n    if (pagination.offsetParam) {\n      query = { ...(query || {}), [pagination.offsetParam]: offset };\n    }\n\n    const page = await providerFetch(provider, apiPath, {\n      ...baseInit,\n      query,\n      ...(body !== undefined ? { body } : {}),\n    });\n    pages.push(page);\n    const pageItems = _extractItems(page, itemsPath);\n    items.push(...pageItems);\n\n    const nextCursor = cursorPath ? _getByPath(page, cursorPath) : undefined;\n    if (nextCursor !== undefined && nextCursor !== null && String(nextCursor) !== \"\") {\n      if (lastCursor !== null && String(nextCursor) === String(lastCursor)) {\n        stoppedReason = \"repeated-cursor\";\n        break;\n      }\n      lastCursor = nextCursor;\n      if (pagination.cursorBodyPath) {\n        body = _setByPath(body || {}, pagination.cursorBodyPath, nextCursor);\n      } else if (pagination.cursorParam) {\n        query = { ...(query || {}), [pagination.cursorParam]: nextCursor };\n      } else {\n        stoppedReason = \"cursor-found-without-destination\";\n        break;\n      }\n      continue;\n    }\n\n    lastCursor = null;\n    if (pagination.pageParam) {\n      if (pageItems.length === 0) {\n        stoppedReason = \"empty-page\";\n        break;\n      }\n      pageNumber += 1;\n      continue;\n    }\n    if (pagination.offsetParam) {\n      if (pageItems.length === 0) {\n        stoppedReason = \"empty-page\";\n        break;\n      }\n      const step = Number(pagination.pageSize || pageItems.length);\n      if (!Number.isFinite(step) || step <= 0) {\n        stoppedReason = \"invalid-page-size\";\n        break;\n      }\n      offset += step;\n      if (pagination.pageSize && pageItems.length < Number(pagination.pageSize)) {\n        stoppedReason = \"short-page\";\n        break;\n      }\n      continue;\n    }\n\n    break;\n  }\n\n  const hitPageOrOffsetLimit =\n    Boolean(pagination.pageParam || pagination.offsetParam) &&\n    stoppedReason === \"completed\" &&\n    pages.length >= maxPages;\n  const hasMore =\n    (lastCursor !== null && pages.length >= maxPages) || hitPageOrOffsetLimit;\n  if (hasMore) stoppedReason = \"max-pages\";\n  return {\n    items,\n    pages,\n    pageCount: pages.length,\n    itemCount: items.length,\n    hasMore,\n    lastCursor,\n    stoppedReason,\n  };\n}\n\n/**\n * Make an outbound HTTP request via the web-request action.\n * Returns an object \\`{ status, body }\\` where \\`body\\` is the response text.\n */\nasync function webFetch(url, init = {}) {\n  const method = (init.method || \"GET\").toUpperCase();\n  const rawResult = await _bridgeCall(\"web-request\", {\n    url,\n    method,\n    ...(init.headers ? { headers: typeof init.headers === \"string\" ? init.headers : JSON.stringify(init.headers) } : {}),\n    ...(init.body ? { body: typeof init.body === \"string\" ? init.body : JSON.stringify(init.body) } : {}),\n  });\n  // rawResult is \"HTTP <status> <statusText>\\\\n\\\\n<body>\"\n  const statusMatch = typeof rawResult === \"string\" ? rawResult.match(/^HTTP (\\\\d+) [^\\\\n]*\\\\n\\\\n/) : null;\n  if (statusMatch) {\n    return {\n      status: Number(statusMatch[1]),\n      body: rawResult.slice(statusMatch[0].length),\n    };\n  }\n  return { status: 0, body: rawResult };\n}\n\n/**\n * Read a Resources-backed workspace file by path. Returns the file content as\n * a string, or null if not found.\n * Supports optional offset and maxChars for paging large files.\n */\nasync function workspaceRead(path, opts = {}) {\n  const parsed = await workspaceReadMeta(path, opts);\n  if (parsed && parsed.ok === false) return null;\n  return parsed && typeof parsed.content === \"string\" ? parsed.content : null;\n}\n\n/**\n * Read a workspace file by path and return the full metadata envelope.\n * Use this when offset/maxChars paging or truncation status matters.\n */\nasync function workspaceReadMeta(path, opts = {}) {\n  const rawResult = await _bridgeCall(\"workspace-files\", {\n    action: \"read\",\n    path,\n    ...(opts.offset !== undefined ? { offset: opts.offset } : {}),\n    ...(opts.maxChars !== undefined ? { maxChars: opts.maxChars } : {}),\n  });\n  return _parseBridgeResult(rawResult);\n}\n\n/**\n * Write (create or overwrite) a workspace file. Use \\`scratch/...\\` for\n * temporary staging files.\n * \\`content\\` must be a string. Returns metadata { path, sizeBytes, updatedAt }.\n */\nasync function workspaceWrite(path, content, contentType = \"text/plain\") {\n  const rawResult = await _bridgeCall(\"workspace-files\", {\n    action: \"write\",\n    path,\n    content: typeof content === \"string\" ? content : JSON.stringify(content),\n    contentType,\n  });\n  try { return typeof rawResult === \"string\" ? JSON.parse(rawResult) : rawResult; } catch { return rawResult; }\n}\n\n/**\n * Append text to a workspace file (creates if absent).\n */\nasync function workspaceAppend(path, content) {\n  const rawResult = await _bridgeCall(\"workspace-files\", {\n    action: \"append\",\n    path,\n    content: typeof content === \"string\" ? content : JSON.stringify(content),\n  });\n  try { return typeof rawResult === \"string\" ? JSON.parse(rawResult) : rawResult; } catch { return rawResult; }\n}\n\n/**\n * List workspace files, optionally filtered by path prefix.\n * Returns an array of { path, sizeBytes, contentType, updatedAt }.\n */\nasync function workspaceList(prefix) {\n  const rawResult = await _bridgeCall(\"workspace-files\", {\n    action: \"list\",\n    ...(prefix ? { path: prefix } : {}),\n  });\n  const parsed = typeof rawResult === \"string\" ? JSON.parse(rawResult) : rawResult;\n  if (parsed && Array.isArray(parsed.files)) return parsed.files;\n  if (Array.isArray(parsed)) return parsed;\n  throw new Error(\"workspaceList: unexpected result shape: \" + JSON.stringify(parsed).slice(0, 200));\n}\n\n// Run user code\n(async () => {\n${userCode}\n})().catch((err) => {\n  console.error(\"Unhandled error:\", err?.message ?? String(err));\n  process.exit(1);\n});\n`;\n}\n"]}
+{"version":3,"file":"run-code.js","sourceRoot":"","sources":["../../src/coding-tools/run-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAKtD,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,MAAM,cAAc,GAAG,OAAO,CAAC;AAC/B,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACjC,uFAAuF;AACvF,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE/C,SAAS,qBAAqB,CAAC,MAAc;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAc;IAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,IAAI,oBAA+C,CAAC;AACpD,SAAS,qBAAqB;IAC5B,IAAI,oBAAoB,KAAK,SAAS;QAAE,OAAO,oBAAoB,CAAC;IACpE,KAAK,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,2BAA2B,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,SAAS,CACrB,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,EAAE,IAAI,EAAE,iBAAiB,CAAC,EAC/B,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CACrC,CAAC;YACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,oBAAoB,GAAG,IAAI,CAAC;gBAC5B,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;QACnE,CAAC;IACH,CAAC;IACD,oBAAoB,GAAG,IAAI,CAAC;IAC5B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wDAAwD;AACxD,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,sBAAsB;IACtB,mBAAmB;IACnB,sBAAsB;IACtB,aAAa;IACb,iBAAiB;CAClB,CAAC,CAAC;AAUH;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAA6C,EAC7C,OAAuB,EAAE;IAEzB,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAEzD,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,4EAA4E;QAC5E,qCAAqC;QACrC,SAAS,EAAE,cAAc;QACzB,cAAc,EAAE,gBAAgB;QAChC,IAAI,EAAE;YACJ,WAAW,EAAE;gBACX,sFAAsF;gBACtF,mHAAmH;gBACnH,8bAA8b;gBAC9b,oBAAoB;gBACpB,uHAAuH;gBACvH,mIAAmI;gBACnI,+HAA+H;gBAC/H,0DAA0D;gBAC1D,6FAA6F;gBAC7F,0GAA0G;gBAC1G,0LAA0L;gBAC1L,+UAA+U;gBAC/U,omBAAomB;gBACpmB,gFAAgF;gBAChF,iEAAiE;gBACjE,iFAAiF;gBACjF,kJAAkJ;gBAClJ,0HAA0H;gBAC1H,6LAA6L;gBAC7L,yEAAyE;gBACzE,6GAA6G;gBAC7G,sEAAsE;gBACtE,sGAAsG;aACvG,CAAC,IAAI,CAAC,GAAG,CAAC;YACX,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,oEAAoE;qBACvE;oBACD,SAAS,EAAE;wBACT,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,+CAA+C,kBAAkB,UAAU,cAAc,GAAG;qBAC1G;oBACD,cAAc,EAAE;wBACd,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,iEAAiE,wBAAwB,UAAU,gBAAgB,GAAG;qBACpI;iBACF;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;SACF;QACD,GAAG,EAAE,KAAK,EAAE,IAA4B,EAAE,OAA0B,EAAE,EAAE;YACtE,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,OAAO,0BAA0B,CAAC;YAEpD,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChD,MAAM,SAAS,GACb,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC;gBACvD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,cAAc,CAAC;gBAC5C,CAAC,CAAC,kBAAkB,CAAC;YAEzB,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACvD,MAAM,cAAc,GAClB,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,kBAAkB,GAAG,CAAC;gBAC3D,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;gBAChD,CAAC,CAAC,wBAAwB,CAAC;YAE/B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;YAC7B,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAE3D,+DAA+D;YAC/D,MAAM,EACJ,MAAM,EACN,UAAU,EACV,YAAY,EACZ,OAAO,EAAE,aAAa,GACvB,GAAG,MAAM,iBAAiB,CACzB,WAAW,EACX,OAAO,EACP,OAAO,EACP,oBAAoB,EACpB,gBAAgB,CACjB,CAAC;YAEF,IAAI,MAA0B,CAAC;YAC/B,IAAI,OAA2B,CAAC;YAChC,IAAI,CAAC;gBACH,kEAAkE;gBAClE,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;gBAChD,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;gBAClE,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;gBAC3C,EAAE,CAAC,aAAa,CACd,OAAO,EACP,kBAAkB,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,EACjD,MAAM,CACP,CAAC;gBAEF,yDAAyD;gBACzD,MAAM,OAAO,GAA2B,EAAE,CAAC;gBAC3C,KAAK,MAAM,GAAG,IAAI;oBAChB,MAAM;oBACN,MAAM;oBACN,QAAQ;oBACR,MAAM;oBACN,KAAK;oBACL,MAAM;oBACN,QAAQ;iBACT,EAAE,CAAC;oBACF,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;wBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;gBACzD,CAAC;gBACD,qEAAqE;gBACrE,0CAA0C;gBAC1C,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;gBACxB,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC;gBACtB,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC;gBAErB,qEAAqE;gBACrE,sEAAsE;gBACtE,8CAA8C;gBAC9C,MAAM,cAAc,GAAG,qBAAqB,EAAE,CAAC;gBAC/C,MAAM,QAAQ,GAAG,cAAc;oBAC7B,CAAC,CAAC;wBACE,cAAc;wBACd,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC,GAAG,CAClC,CAAC,WAAW,EAAE,EAAE,CAAC,mBAAmB,WAAW,EAAE,CAClD;wBACD,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC,GAAG,CACnC,CAAC,WAAW,EAAE,EAAE,CAAC,oBAAoB,WAAW,EAAE,CACnD;wBACD,OAAO;qBACR;oBACH,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAEd,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE;oBAC9C,GAAG,EAAE,MAAM;oBACX,GAAG,EAAE,OAAO;oBACZ,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;iBAClC,CAAC,CAAC;gBAEH,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;gBAErB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC5B,QAAQ,GAAG,IAAI,CAAC;oBAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACtB,UAAU,CAAC,GAAG,EAAE;wBACd,IAAI,CAAC;4BACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBACxB,CAAC;wBAAC,MAAM,CAAC,CAAA,CAAC;oBACZ,CAAC,EAAE,KAAK,CAAC,CAAC;gBACZ,CAAC,EAAE,SAAS,CAAC,CAAC;gBAEd,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBACzC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC7B,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBACzC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC7B,CAAC,CAAC,CAAC;gBAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBACpE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC9B,CAAC,CAAC,CAAC;gBACH,YAAY,CAAC,KAAK,CAAC,CAAC;gBAEpB,MAAM,QAAQ,GACZ;oBACE,MAAM,CAAC,CAAC,CAAC,YAAY,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;oBAClC,MAAM,CAAC,CAAC,CAAC,YAAY,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;iBACnC;qBACE,MAAM,CAAC,OAAO,CAAC;qBACf,IAAI,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC;gBAEnC,MAAM,KAAK,GAAa,EAAE,CAAC;gBAC3B,IAAI,QAAQ;oBAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,SAAS,KAAK,CAAC,CAAC;gBAC5D,IAAI,QAAQ,KAAK,CAAC,IAAI,QAAQ,KAAK,IAAI;oBACrC,KAAK,CAAC,IAAI,CAAC,aAAa,QAAQ,EAAE,CAAC,CAAC;gBACtC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;gBACjC,IAAI,SAAS,CAAC,MAAM;oBAClB,KAAK,CAAC,IAAI,CAAC,oBAAoB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACzD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAErB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAChC,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;oBACjC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;oBAChD,OAAO,GAAG,SAAS,qBAAqB,CAAC,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,cAAc,EAAE,SAAS,CAAC;gBACnG,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;oBAAS,CAAC;gBACT,aAAa,EAAE,CAAC;gBAChB,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,qCAAqC;gBACrC,IAAI,CAAC;oBACH,IAAI,OAAO;wBAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBACjD,IAAI,MAAM;wBAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClE,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAaD,KAAK,UAAU,iBAAiB,CAC9B,KAAa,EACb,OAAoC,EACpC,OAAqC,EACrC,YAAyB,EACzB,UAAuB;IAEvB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;YACjD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,8CAA8C;QAC9C,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;QACnD,IAAI,UAAU,KAAK,UAAU,KAAK,EAAE,EAAE,CAAC;YACrC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QAED,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,aAAa,IAAI,KAAK,CAAC,MAAM,CAAC;YAC9B,IAAI,aAAa,GAAG,qBAAqB,EAAE,CAAC;gBAC1C,QAAQ,GAAG,IAAI,CAAC;gBAChB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBAC7B,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,QAAQ;gBAAE,OAAO;YACrB,mBAAmB,CACjB,IAAI,EACJ,OAAO,EACP,OAAO,EACP,YAAY,EACZ,UAAU,EACV,SAAS,EACT,GAAG,CACJ,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACnB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAsB,CAAC;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC;IAE7B,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC,CAAC;IAEF,OAAO;QACL,MAAM;QACN,UAAU;QACV,YAAY,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE;QAChD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAAe,EACf,OAAoC,EACpC,OAAqC,EACrC,YAAyB,EACzB,UAAuB,EACvB,SAAsB,EACtB,GAAwB;IAExB,IAAI,MAAwD,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IAED,qBAAqB;IACrB,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,gBAAgB,GACpB,KAAK,EAAE,QAAQ,KAAK,IAAI;QACxB,KAAK,CAAC,SAAS,KAAK,KAAK;QACzB,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC;IAC/B,IACE,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC3B,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,CAAC,gBAAgB,EACjB,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,SAAS,QAAQ,gFAAgF;SACzG,CAAC,CACH,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,QAAQ,sBAAsB,EAAE,CAAC,CAAC,CAAC;QAC5E,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;IACnC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,4EAA4E;IAC5E,qDAAqD;IACrD,KAAK;SACF,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC;SACtB,IAAI,CAAC,CAAC,MAAe,EAAE,EAAE;QACxB,MAAM,IAAI,GACR,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACxE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACP,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAS,kBAAkB,CACzB,QAAgB,EAChB,UAAkB,EAClB,WAAmB;IAEnB,OAAO;;;;wCAI+B,UAAU;wBAC1B,WAAW;;;;;;;;cAQrB,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuwBtB,QAAQ;;;;;CAKT,CAAC;AACF,CAAC","sourcesContent":["/**\n * Sandboxed JavaScript execution tool for the agent.\n *\n * Executes user-supplied JavaScript in an isolated child process with:\n *  - A scrubbed environment (no app secrets or env vars; only PATH/HOME/TMPDIR).\n *  - A fresh temporary working directory.\n *  - An ephemeral bridge HTTP server on 127.0.0.1 so the child can call\n *    allowlisted registered tools (provider-api-request, web-request, etc.)\n *    with the same request context as the parent — without leaking secrets.\n *\n * Security notes:\n *  - The bridge token is a 32-byte random hex string generated per invocation.\n *  - The bridge binds to 127.0.0.1 only; no external exposure.\n *  - The allowlist of callable bridge tools is enforced server-side.\n *  - Secret values are NEVER included in the env passed to the child.\n *  - When the Node permission model is available (`--permission`, or\n *    `--experimental-permission` on Node 20), the child is denied filesystem\n *    access outside its own temp dir, child processes, workers, and native\n *    addons. Outbound network from the child is NOT blocked by the permission\n *    model; the env scrub means such requests carry no credentials, and all\n *    authenticated calls must go through the bridge (which applies the\n *    registered tools' host allowlists and SSRF guards).\n */\n\nimport crypto from \"node:crypto\";\nimport fs from \"node:fs\";\nimport http from \"node:http\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport { spawn, spawnSync } from \"node:child_process\";\n\nimport type { ActionEntry } from \"../agent/production-agent.js\";\nimport type { ActionRunContext } from \"../action.js\";\n\nconst DEFAULT_TIMEOUT_MS = 120_000;\nconst MAX_TIMEOUT_MS = 600_000;\nconst DEFAULT_MAX_OUTPUT_CHARS = 50_000;\nconst MAX_OUTPUT_CHARS = 200_000;\n/** Hard cap on bridge request bodies so sandboxed code can't exhaust parent memory. */\nconst BRIDGE_MAX_BODY_BYTES = 10 * 1024 * 1024;\n\nfunction sandboxReadAllowPaths(tmpDir: string): string[] {\n  const paths = new Set<string>([tmpDir]);\n  try {\n    paths.add(fs.realpathSync(tmpDir));\n  } catch {}\n  return [...paths];\n}\n\nfunction sandboxWriteAllowPaths(tmpDir: string): string[] {\n  const paths = new Set<string>([tmpDir]);\n  try {\n    paths.add(fs.realpathSync(tmpDir));\n  } catch {}\n  return [...paths];\n}\n\n/**\n * Resolve the Node permission-model flag supported by the current runtime,\n * probing once and caching. Returns null when the permission model is\n * unavailable (the sandbox then falls back to env-scrub isolation only).\n */\nlet cachedPermissionFlag: string | null | undefined;\nfunction resolvePermissionFlag(): string | null {\n  if (cachedPermissionFlag !== undefined) return cachedPermissionFlag;\n  for (const flag of [\"--permission\", \"--experimental-permission\"]) {\n    try {\n      const probe = spawnSync(\n        process.execPath,\n        [flag, \"-e\", \"process.exit(0)\"],\n        { timeout: 10_000, stdio: \"ignore\" },\n      );\n      if (probe.status === 0) {\n        cachedPermissionFlag = flag;\n        return flag;\n      }\n    } catch {\n      // Probe failure means the flag is unsupported; try the next one.\n    }\n  }\n  cachedPermissionFlag = null;\n  return null;\n}\n\n/** Tools callable via the sandbox bridge by default. */\nconst DEFAULT_BRIDGE_TOOLS = new Set([\n  \"provider-api-request\",\n  \"provider-api-docs\",\n  \"provider-api-catalog\",\n  \"web-request\",\n  \"workspace-files\",\n]);\n\nexport interface RunCodeOptions {\n  /**\n   * Extra tool names (beyond the default set) that the sandbox bridge will\n   * forward to the registered action registry.\n   */\n  bridgeTools?: string[];\n}\n\n/**\n * Create a `run-code` ActionEntry.\n *\n * @param getActions  Supplier that returns the current action registry (called\n *                    at invocation time so updates are reflected).\n * @param opts        Optional configuration.\n */\nexport function createRunCodeEntry(\n  getActions: () => Record<string, ActionEntry>,\n  opts: RunCodeOptions = {},\n): ActionEntry {\n  const extraBridgeTools = new Set(opts.bridgeTools ?? []);\n\n  return {\n    readOnly: true,\n    // Allow a generous per-call timeout so large data-processing jobs don't hit\n    // the agent-loop's default 60 s cap.\n    timeoutMs: MAX_TIMEOUT_MS,\n    maxResultChars: MAX_OUTPUT_CHARS,\n    tool: {\n      description: [\n        \"Execute JavaScript (Node.js, ESM, top-level await supported) in an isolated sandbox.\",\n        \"Use this to fetch, join, aggregate, and reduce large datasets, returning only printed output to the conversation.\",\n        \"The sandbox runs with a scrubbed environment (no secrets) and, where the Node permission model is available, no filesystem access outside its own temp dir, no child processes, and no workers. Authenticated calls must go through the provided globals; direct network requests carry no credentials. Note: isolation is process-level (env scrub + Node permission model), not an OS-level container — outbound network from sandbox code is not blocked.\",\n        \"Available globals:\",\n        \"  - `appAction(name, args?)` — call any registered agent-exposed read-only app action/tool and get its parsed result.\",\n        \"    Use this to loop over app data readers and compose multi-source analyses without forcing every intermediate result into chat.\",\n        \"  - `providerFetch(provider, path, init?)` — authenticated call to a registered provider via the provider-api-request action.\",\n        \"    Returns the parsed JSON result (or throws on error).\",\n        \"    Supports stageAs/saveToFile/fetchAllPages; use cursorBodyPath for POST-body pagination.\",\n        \"    Example: `const data = await providerFetch('<provider-id>', '/records', { query: { limit: 100 } });`\",\n        \"  - `providerRequest(provider, path, init?)` — same authenticated call, but returns the full provider-api envelope with request, response status/headers, truncation, and body metadata.\",\n        \"  - `providerFetchAll(provider, path, init?)` — generic pagination helper for cursor, page, and offset APIs. Pass `pagination: { itemsPath, cursorPath or nextCursorPath, cursorParam or cursorBodyPath, pageParam, offsetParam, pageSize, maxPages }`. Returns `{ items, pages, pageCount, itemCount, hasMore, lastCursor, stoppedReason }`.\",\n        \"  - `providerSearchAll(provider, path, init?, options?)` — streaming search helper for broad provider corpora such as transcripts, messages, tickets, issues, notes, events, or documents. Use this before hand-written loops when searching many provider records for terms/phrases/regexes or proving absence. Pass the same `pagination` config as `providerFetchAll`, plus options like `{ query, queries, terms, regex, textPaths, idPaths, metadataPaths, maxHits }`. Returns structured hits with item ids, paths, snippets, page/item indexes, and coverage fields (`pageCount`, `itemCount`, `hasMore`, `stoppedReason`).\",\n        \"  - `webFetch(url, init?)` — outbound HTTP request via the web-request action.\",\n        \"    Returns `{ status, body }` where body is the response text.\",\n        \"    Example: `const { body } = await webFetch('https://api.example.com/data');`\",\n        \"  - `workspaceRead(path, opts?)` — read a Resources-backed workspace file by path. Returns content string or null. opts: { offset?, maxChars? }.\",\n        \"  - `workspaceReadMeta(path, opts?)` — read a workspace file with metadata such as sizeBytes, truncated, and nextOffset.\",\n        \"  - `workspaceWrite(path, content, contentType?)` — create or overwrite a workspace file. Use `scratch/...` for temporary staging; use durable folders only for files the user should keep.\",\n        \"  - `workspaceAppend(path, content)` — append text to a workspace file.\",\n        \"  - `workspaceList(prefix?)` — list workspace files, returns [{ path, sizeBytes, contentType, updatedAt }].\",\n        \"Print results with `console.log()`; only stdout+stderr are returned.\",\n        \"Timeout defaults to 120 s (max 600 s). Output is truncated to 50 000 chars by default (max 200 000).\",\n      ].join(\" \"),\n      parameters: {\n        type: \"object\",\n        properties: {\n          code: {\n            type: \"string\",\n            description:\n              \"JavaScript source to execute. ESM syntax, top-level await allowed.\",\n          },\n          timeoutMs: {\n            type: \"number\",\n            description: `Execution timeout in milliseconds. Default: ${DEFAULT_TIMEOUT_MS}. Max: ${MAX_TIMEOUT_MS}.`,\n          },\n          maxOutputChars: {\n            type: \"number\",\n            description: `Maximum combined stdout+stderr characters to return. Default: ${DEFAULT_MAX_OUTPUT_CHARS}. Max: ${MAX_OUTPUT_CHARS}.`,\n          },\n        },\n        required: [\"code\"],\n      },\n    },\n    run: async (args: Record<string, string>, context?: ActionRunContext) => {\n      const code = typeof args.code === \"string\" ? args.code : \"\";\n      if (!code.trim()) return \"Error: code is required.\";\n\n      const requestedTimeout = Number(args.timeoutMs);\n      const timeoutMs =\n        Number.isFinite(requestedTimeout) && requestedTimeout > 0\n          ? Math.min(requestedTimeout, MAX_TIMEOUT_MS)\n          : DEFAULT_TIMEOUT_MS;\n\n      const requestedMaxOutput = Number(args.maxOutputChars);\n      const maxOutputChars =\n        Number.isFinite(requestedMaxOutput) && requestedMaxOutput > 0\n          ? Math.min(requestedMaxOutput, MAX_OUTPUT_CHARS)\n          : DEFAULT_MAX_OUTPUT_CHARS;\n\n      const actions = getActions();\n      const bridgeToken = crypto.randomBytes(32).toString(\"hex\");\n\n      // Start bridge server — resolves once the server is listening.\n      const {\n        server,\n        bridgePort,\n        getUsedTools,\n        cleanup: cleanupBridge,\n      } = await startBridgeServer(\n        bridgeToken,\n        actions,\n        context,\n        DEFAULT_BRIDGE_TOOLS,\n        extraBridgeTools,\n      );\n\n      let tmpDir: string | undefined;\n      let tmpFile: string | undefined;\n      try {\n        // Write code to a temp ESM file (top-level await needs a module).\n        const tmpBaseDir = fs.realpathSync(os.tmpdir());\n        tmpDir = fs.mkdtempSync(path.join(tmpBaseDir, \"agent-run-code-\"));\n        tmpFile = path.join(tmpDir, \"sandbox.mjs\");\n        fs.writeFileSync(\n          tmpFile,\n          buildSandboxModule(code, bridgePort, bridgeToken),\n          \"utf8\",\n        );\n\n        // Build scrubbed env — only safe POSIX vars, no secrets.\n        const safeEnv: Record<string, string> = {};\n        for (const key of [\n          \"PATH\",\n          \"HOME\",\n          \"TMPDIR\",\n          \"TEMP\",\n          \"TMP\",\n          \"LANG\",\n          \"LC_ALL\",\n        ]) {\n          if (process.env[key]) safeEnv[key] = process.env[key]!;\n        }\n        // Point TMPDIR inside the sandbox dir so in-sandbox temp writes stay\n        // within the permission-model allow list.\n        safeEnv.TMPDIR = tmpDir;\n        safeEnv.TEMP = tmpDir;\n        safeEnv.TMP = tmpDir;\n\n        // Lock the child down with the Node permission model when available:\n        // filesystem restricted to the sandbox temp dir, and child processes,\n        // workers, and native addons denied entirely.\n        const permissionFlag = resolvePermissionFlag();\n        const nodeArgs = permissionFlag\n          ? [\n              permissionFlag,\n              ...sandboxReadAllowPaths(tmpDir).map(\n                (allowedPath) => `--allow-fs-read=${allowedPath}`,\n              ),\n              ...sandboxWriteAllowPaths(tmpDir).map(\n                (allowedPath) => `--allow-fs-write=${allowedPath}`,\n              ),\n              tmpFile,\n            ]\n          : [tmpFile];\n\n        const child = spawn(process.execPath, nodeArgs, {\n          cwd: tmpDir,\n          env: safeEnv,\n          stdio: [\"ignore\", \"pipe\", \"pipe\"],\n        });\n\n        let stdout = \"\";\n        let stderr = \"\";\n        let timedOut = false;\n\n        const timer = setTimeout(() => {\n          timedOut = true;\n          child.kill(\"SIGTERM\");\n          setTimeout(() => {\n            try {\n              child.kill(\"SIGKILL\");\n            } catch {}\n          }, 2_000);\n        }, timeoutMs);\n\n        child.stdout?.on(\"data\", (chunk: Buffer) => {\n          stdout += chunk.toString();\n        });\n        child.stderr?.on(\"data\", (chunk: Buffer) => {\n          stderr += chunk.toString();\n        });\n\n        const exitCode = await new Promise<number | null>((resolve, reject) => {\n          child.once(\"error\", reject);\n          child.once(\"exit\", resolve);\n        });\n        clearTimeout(timer);\n\n        const combined =\n          [\n            stdout ? `stdout:\\n${stdout}` : \"\",\n            stderr ? `stderr:\\n${stderr}` : \"\",\n          ]\n            .filter(Boolean)\n            .join(\"\\n\\n\") || \"(no output)\";\n\n        const lines: string[] = [];\n        if (timedOut) lines.push(`timedOut: true (${timeoutMs}ms)`);\n        if (exitCode !== 0 && exitCode !== null)\n          lines.push(`exitCode: ${exitCode}`);\n        const usedTools = getUsedTools();\n        if (usedTools.length)\n          lines.push(`bridgeToolsUsed: ${usedTools.join(\", \")}`);\n        lines.push(combined);\n\n        const full = lines.join(\"\\n\\n\");\n        if (full.length > maxOutputChars) {\n          const truncated = full.slice(0, maxOutputChars);\n          return `${truncated}\\n\\n...[truncated ${(full.length - maxOutputChars).toLocaleString()} chars]`;\n        }\n        return full;\n      } finally {\n        cleanupBridge();\n        server.close();\n        // Clean up temp files (best-effort).\n        try {\n          if (tmpFile) fs.rmSync(tmpFile, { force: true });\n          if (tmpDir) fs.rmSync(tmpDir, { recursive: true, force: true });\n        } catch {}\n      }\n    },\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Bridge server\n// ---------------------------------------------------------------------------\n\ninterface BridgeResult {\n  server: http.Server;\n  bridgePort: number;\n  getUsedTools: () => string[];\n  cleanup: () => void;\n}\n\nasync function startBridgeServer(\n  token: string,\n  actions: Record<string, ActionEntry>,\n  context: ActionRunContext | undefined,\n  defaultTools: Set<string>,\n  extraTools: Set<string>,\n): Promise<BridgeResult> {\n  const usedTools = new Set<string>();\n  const server = http.createServer((req, res) => {\n    if (req.method !== \"POST\" || req.url !== \"/tool\") {\n      res.writeHead(404);\n      res.end(\"Not found\");\n      return;\n    }\n\n    // Validate bearer token — must match exactly.\n    const authHeader = req.headers.authorization ?? \"\";\n    if (authHeader !== `Bearer ${token}`) {\n      res.writeHead(401);\n      res.end(\"Unauthorized\");\n      return;\n    }\n\n    let body = \"\";\n    let receivedBytes = 0;\n    let rejected = false;\n    req.on(\"data\", (chunk: Buffer) => {\n      receivedBytes += chunk.length;\n      if (receivedBytes > BRIDGE_MAX_BODY_BYTES) {\n        rejected = true;\n        res.writeHead(413);\n        res.end(\"Payload too large\");\n        req.destroy();\n        return;\n      }\n      body += chunk.toString();\n    });\n    req.on(\"end\", () => {\n      if (rejected) return;\n      handleBridgeRequest(\n        body,\n        actions,\n        context,\n        defaultTools,\n        extraTools,\n        usedTools,\n        res,\n      );\n    });\n    req.on(\"error\", () => {\n      res.writeHead(500);\n      res.end(\"Request error\");\n    });\n  });\n\n  await new Promise<void>((resolve, reject) => {\n    server.once(\"error\", reject);\n    server.listen(0, \"127.0.0.1\", () => resolve());\n  });\n\n  const addr = server.address() as { port: number };\n  const bridgePort = addr.port;\n\n  const cleanup = () => {\n    try {\n      server.close();\n    } catch {}\n  };\n\n  return {\n    server,\n    bridgePort,\n    getUsedTools: () => Array.from(usedTools).sort(),\n    cleanup,\n  };\n}\n\nfunction handleBridgeRequest(\n  rawBody: string,\n  actions: Record<string, ActionEntry>,\n  context: ActionRunContext | undefined,\n  defaultTools: Set<string>,\n  extraTools: Set<string>,\n  usedTools: Set<string>,\n  res: http.ServerResponse,\n): void {\n  let parsed: { tool?: string; args?: Record<string, string> };\n  try {\n    parsed = JSON.parse(rawBody);\n  } catch {\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(JSON.stringify({ error: \"Invalid JSON body\" }));\n    return;\n  }\n\n  const toolName = typeof parsed.tool === \"string\" ? parsed.tool.trim() : \"\";\n  if (!toolName) {\n    res.writeHead(400, { \"Content-Type\": \"application/json\" });\n    res.end(JSON.stringify({ error: \"Missing tool name\" }));\n    return;\n  }\n\n  // Enforce allowlist.\n  const entry = actions[toolName];\n  const isReadOnlyAction =\n    entry?.readOnly === true &&\n    entry.agentTool !== false &&\n    entry.toolCallable !== false;\n  if (\n    !defaultTools.has(toolName) &&\n    !extraTools.has(toolName) &&\n    !isReadOnlyAction\n  ) {\n    res.writeHead(403, { \"Content-Type\": \"application/json\" });\n    res.end(\n      JSON.stringify({\n        error: `Tool \"${toolName}\" is not an agent-exposed read-only action or sandbox bridge allowlisted tool.`,\n      }),\n    );\n    return;\n  }\n\n  if (!entry) {\n    res.writeHead(404, { \"Content-Type\": \"application/json\" });\n    res.end(JSON.stringify({ error: `Tool \"${toolName}\" is not registered.` }));\n    return;\n  }\n\n  const toolArgs = parsed.args ?? {};\n  usedTools.add(toolName);\n  // Run the tool with the parent request context so auth/org/owner resolution\n  // works exactly as it does in the normal agent loop.\n  entry\n    .run(toolArgs, context)\n    .then((result: unknown) => {\n      const body =\n        typeof result === \"string\" ? result : JSON.stringify(result, null, 2);\n      res.writeHead(200, { \"Content-Type\": \"application/json\" });\n      res.end(JSON.stringify({ result: body }));\n    })\n    .catch((err: unknown) => {\n      const message = err instanceof Error ? err.message : String(err);\n      res.writeHead(500, { \"Content-Type\": \"application/json\" });\n      res.end(JSON.stringify({ error: message }));\n    });\n}\n\n// ---------------------------------------------------------------------------\n// Sandbox module template\n// ---------------------------------------------------------------------------\n\n/**\n * Wrap the user's code in an ESM module that:\n *  1. Defines `providerFetch`, `providerRequest`, `providerFetchAll`,\n *     `providerSearchAll`, and `webFetch` helpers via the bridge.\n *  2. Runs the user's code as top-level await in an async IIFE.\n */\nfunction buildSandboxModule(\n  userCode: string,\n  bridgePort: number,\n  bridgeToken: string,\n): string {\n  return `\nimport { createRequire } from \"node:module\";\nconst require = createRequire(import.meta.url);\n\nconst _bridgeBase = \"http://127.0.0.1:${bridgePort}/tool\";\nconst _bridgeToken = \"${bridgeToken}\";\n\nasync function _bridgeCall(tool, args) {\n  const http = await import(\"node:http\");\n  return new Promise((resolve, reject) => {\n    const body = JSON.stringify({ tool, args });\n    const options = {\n      hostname: \"127.0.0.1\",\n      port: ${bridgePort},\n      path: \"/tool\",\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        \"Content-Length\": Buffer.byteLength(body),\n        \"Authorization\": \"Bearer \" + _bridgeToken,\n      },\n    };\n    const req = http.request(options, (res) => {\n      let data = \"\";\n      res.on(\"data\", (chunk) => { data += chunk; });\n      res.on(\"end\", () => {\n        try {\n          const parsed = JSON.parse(data);\n          if (parsed.error) {\n            reject(new Error(parsed.error));\n          } else {\n            resolve(parsed.result);\n          }\n        } catch (e) {\n          reject(new Error(\"Bridge response parse error: \" + e.message));\n        }\n      });\n    });\n    req.on(\"error\", reject);\n    req.end(body);\n  });\n}\n\nfunction _parseBridgeResult(rawResult) {\n  if (typeof rawResult !== \"string\") return rawResult;\n  try { return JSON.parse(rawResult); } catch { return rawResult; }\n}\n\n/**\n * Call any registered agent-exposed read-only app action/tool via the sandbox bridge.\n * Mutating and explicitly hidden actions are blocked by the parent bridge.\n */\nasync function appAction(name, args = {}) {\n  return _parseBridgeResult(await _bridgeCall(name, args));\n}\n\nasync function providerRequest(provider, apiPath, init = {}) {\n  const method = (init.method || \"GET\").toUpperCase();\n  const rawResult = await _bridgeCall(\"provider-api-request\", {\n    provider,\n    path: apiPath,\n    method,\n    ...(init.query ? { query: init.query } : {}),\n    ...(init.body ? { body: init.body } : {}),\n    ...(init.headers ? { headers: init.headers } : {}),\n    ...(init.auth ? { auth: init.auth } : {}),\n    ...(init.connectionId ? { connectionId: init.connectionId } : {}),\n    ...(init.accountId ? { accountId: init.accountId } : {}),\n    ...(init.timeoutMs ? { timeoutMs: init.timeoutMs } : {}),\n    ...(init.maxBytes ? { maxBytes: init.maxBytes } : {}),\n    ...(init.stageAs ? { stageAs: init.stageAs } : {}),\n    ...(init.itemsPath ? { itemsPath: init.itemsPath } : {}),\n    ...(init.pagination ? { pagination: init.pagination } : {}),\n    ...(init.saveToFile ? { saveToFile: init.saveToFile } : {}),\n    ...(init.fetchAllPages ? { fetchAllPages: init.fetchAllPages } : {}),\n  });\n  return _parseBridgeResult(rawResult);\n}\n\n/**\n * Call a provider API via the authenticated provider-api-request action.\n * Returns the parsed JSON response body (or throws on error).\n */\nasync function providerFetch(provider, apiPath, init = {}) {\n  const parsed = await providerRequest(provider, apiPath, init);\n  // Unwrap the provider-api-request envelope ({ provider, request, response, guidance })\n  // so callers get the actual response body. fetchAllPages / saveToFile results\n  // (which have no \\`response\\` field) are returned as-is.\n  if (parsed && typeof parsed === \"object\" && parsed.response && typeof parsed.response === \"object\") {\n    const r = parsed.response;\n    if (typeof r.status === \"number\" && r.status >= 400) {\n      const detail = typeof r.text === \"string\" ? r.text : JSON.stringify(r.json ?? \"\");\n      throw new Error(\\`Provider request failed (\\${r.status}): \\${String(detail).slice(0, 500)}\\`);\n    }\n    return r.json !== undefined ? r.json : r.text;\n  }\n  return parsed;\n}\n\nfunction _cloneJson(value) {\n  if (value === undefined || value === null) return value;\n  return JSON.parse(JSON.stringify(value));\n}\n\nfunction _pathParts(path) {\n  if (!path || typeof path !== \"string\") return [];\n  return path\n    .replace(/\\\\[(\\\\d+)\\\\]/g, \".$1\")\n    .split(\".\")\n    .map((part) => part.trim())\n    .filter(Boolean);\n}\n\nfunction _getByPath(value, path) {\n  let current = value;\n  for (const part of _pathParts(path)) {\n    if (current === undefined || current === null) return undefined;\n    current = current[part];\n  }\n  return current;\n}\n\nfunction _setByPath(value, path, nextValue) {\n  const parts = _pathParts(path);\n  if (!parts.length) return value;\n  const root = value && typeof value === \"object\" ? _cloneJson(value) : {};\n  let current = root;\n  for (let i = 0; i < parts.length - 1; i++) {\n    const part = parts[i];\n    if (!current[part] || typeof current[part] !== \"object\") current[part] = {};\n    current = current[part];\n  }\n  current[parts[parts.length - 1]] = nextValue;\n  return root;\n}\n\nfunction _extractItems(page, itemsPath) {\n  if (itemsPath) {\n    const value = _getByPath(page, itemsPath);\n    return Array.isArray(value) ? value : [];\n  }\n  if (Array.isArray(page)) return page;\n  if (!page || typeof page !== \"object\") return [];\n  for (const key of [\"data\", \"results\", \"items\", \"records\", \"rows\", \"calls\", \"callTranscripts\", \"transcripts\", \"messages\", \"tickets\", \"issues\", \"deals\", \"events\", \"notes\", \"documents\", \"entries\", \"objects\"]) {\n    if (Array.isArray(page[key])) return page[key];\n  }\n  return [];\n}\n\nfunction _withoutProviderFetchAllOptions(init) {\n  const {\n    pagination: _pagination,\n    fetchAllPages: _fetchAllPages,\n    stageAs: _stageAs,\n    itemsPath: _itemsPath,\n    saveToFile: _saveToFile,\n    ...rest\n  } = init || {};\n  return rest;\n}\n\nfunction _asArray(value) {\n  if (value === undefined || value === null) return [];\n  return Array.isArray(value) ? value : [value];\n}\n\nfunction _stringifySearchValue(value) {\n  if (typeof value === \"string\") return value;\n  if (value === undefined || value === null) return \"\";\n  if (typeof value === \"number\" || typeof value === \"boolean\" || typeof value === \"bigint\") {\n    return String(value);\n  }\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n\nfunction _collectStrings(value, basePath = \"\", out = [], limit = 5000) {\n  if (out.length >= limit || value === undefined || value === null) return out;\n  if (typeof value === \"string\" || typeof value === \"number\" || typeof value === \"boolean\" || typeof value === \"bigint\") {\n    out.push({ path: basePath || \"$\", text: String(value) });\n    return out;\n  }\n  if (Array.isArray(value)) {\n    for (let i = 0; i < value.length && out.length < limit; i++) {\n      _collectStrings(value[i], basePath ? basePath + \"[\" + i + \"]\" : \"[\" + i + \"]\", out, limit);\n    }\n    return out;\n  }\n  if (typeof value === \"object\") {\n    for (const key of Object.keys(value)) {\n      if (out.length >= limit) break;\n      _collectStrings(value[key], basePath ? basePath + \".\" + key : key, out, limit);\n    }\n  }\n  return out;\n}\n\nfunction _collectSearchStrings(item, textPaths, maxFieldsPerItem) {\n  const paths = _asArray(textPaths).filter((path) => typeof path === \"string\" && path.trim());\n  if (!paths.length) return _collectStrings(item, \"\", [], maxFieldsPerItem);\n  const out = [];\n  for (const path of paths) {\n    const value = _getByPath(item, path);\n    if (value !== undefined) _collectStrings(value, path, out, maxFieldsPerItem);\n    if (out.length >= maxFieldsPerItem) break;\n  }\n  return out;\n}\n\nfunction _firstValueByPath(value, paths) {\n  for (const path of paths) {\n    const found = _getByPath(value, path);\n    if (found !== undefined && found !== null && String(found) !== \"\") {\n      return { path, value: found };\n    }\n  }\n  return null;\n}\n\nconst _DEFAULT_ID_PATHS = [\n  \"id\",\n  \"callId\",\n  \"callID\",\n  \"call_id\",\n  \"call.id\",\n  \"call.metaData.id\",\n  \"metaData.id\",\n  \"metadata.id\",\n  \"recordId\",\n  \"record_id\",\n  \"objectId\",\n  \"object_id\",\n  \"ticketId\",\n  \"ticket_id\",\n  \"issueId\",\n  \"issue_id\",\n  \"messageId\",\n  \"message_id\",\n  \"conversationId\",\n  \"conversation_id\",\n  \"eventId\",\n  \"event_id\",\n  \"documentId\",\n  \"document_id\",\n  \"url\",\n  \"webUrl\",\n  \"permalink\",\n];\n\nfunction _extractItemIdentity(item, idPaths) {\n  const paths = [\n    ..._asArray(idPaths).filter((path) => typeof path === \"string\" && path.trim()),\n    ..._DEFAULT_ID_PATHS,\n  ];\n  const found = _firstValueByPath(item, paths);\n  if (!found) return { id: null, idPath: null };\n  return { id: _stringifySearchValue(found.value), idPath: found.path };\n}\n\nfunction _extractMetadata(item, metadataPaths) {\n  const metadata = {};\n  for (const path of _asArray(metadataPaths)) {\n    if (typeof path !== \"string\" || !path.trim()) continue;\n    const value = _getByPath(item, path);\n    if (value !== undefined) metadata[path] = value;\n  }\n  return metadata;\n}\n\nfunction _makeSnippet(text, index, contextChars) {\n  const source = String(text);\n  const context = Math.max(20, Math.min(Number(contextChars) || 180, 1000));\n  const start = Math.max(0, index - context);\n  const end = Math.min(source.length, Math.max(index, 0) + context);\n  const prefix = start > 0 ? \"...\" : \"\";\n  const suffix = end < source.length ? \"...\" : \"\";\n  return (prefix + source.slice(start, end) + suffix).replace(/\\\\s+/g, \" \").trim();\n}\n\nfunction _normalizeFlags(flags, caseSensitive) {\n  const raw = typeof flags === \"string\" ? flags : \"\";\n  const allowed = raw.replace(/[^dgimsuvy]/g, \"\");\n  const withoutGlobalOrSticky = allowed.replace(/[gy]/g, \"\");\n  const withCase =\n    caseSensitive || /i/.test(withoutGlobalOrSticky)\n      ? withoutGlobalOrSticky\n      : withoutGlobalOrSticky + \"i\";\n  return withCase + \"g\";\n}\n\nfunction _normalizedSearchTerms(options) {\n  const explicitTerms = _asArray(options.terms)\n    .map((term) => String(term).trim())\n    .filter(Boolean);\n  if (explicitTerms.length) return explicitTerms;\n  if (options.matchMode === \"allTerms\" && typeof options.query === \"string\") {\n    return options.query\n      .split(/\\\\s+/)\n      .map((term) => term.trim())\n      .filter(Boolean);\n  }\n  return [];\n}\n\nfunction _findItemWideTermMatch(fields, options) {\n  const terms = _normalizedSearchTerms(options);\n  if (!terms.length || options.matchMode === \"anyTerm\") return null;\n  const caseSensitive = Boolean(options.caseSensitive);\n  const normalizedFields = fields.map((field) => ({\n    field,\n    haystack: caseSensitive ? String(field.text) : String(field.text).toLowerCase(),\n  }));\n  const termHits = terms.map((term) => {\n    const searchTerm = caseSensitive ? term : term.toLowerCase();\n    for (const entry of normalizedFields) {\n      const index = entry.haystack.indexOf(searchTerm);\n      if (index >= 0) return { term, field: entry.field, index };\n    }\n    return { term, field: null, index: -1 };\n  });\n  if (termHits.some((hit) => hit.index < 0 || !hit.field)) return null;\n  const first = termHits\n    .filter((hit) => hit.field)\n    .sort((a, b) => {\n      const fieldOrder = fields.indexOf(a.field) - fields.indexOf(b.field);\n      return fieldOrder || a.index - b.index;\n    })[0];\n  return {\n    field: first.field,\n    match: {\n      kind: \"allTerms\",\n      query: terms.join(\" \"),\n      index: first.index,\n      match: first.term,\n    },\n  };\n}\n\nfunction _findSearchMatches(text, options, includeTerms = true) {\n  const source = String(text);\n  const caseSensitive = Boolean(options.caseSensitive);\n  const haystack = caseSensitive ? source : source.toLowerCase();\n  const maxMatchesPerField = _boundedNumber(options.maxMatchesPerField, 1000, 1, 100000);\n  const matches = [];\n\n  const addSubstring = (needle, label, kind) => {\n    if (needle === undefined || needle === null) return;\n    const rawNeedle = String(needle);\n    if (!rawNeedle) return;\n    const searchNeedle = caseSensitive ? rawNeedle : rawNeedle.toLowerCase();\n    let from = 0;\n    while (from <= haystack.length) {\n      const index = haystack.indexOf(searchNeedle, from);\n      if (index < 0) break;\n      matches.push({ kind, query: label ?? rawNeedle, index, match: source.slice(index, index + rawNeedle.length) });\n      from = index + Math.max(1, searchNeedle.length);\n      if (matches.length >= maxMatchesPerField) break;\n    }\n  };\n\n  if (options.regex) {\n    try {\n      const regex = new RegExp(String(options.regex), _normalizeFlags(options.regexFlags, caseSensitive));\n      let match;\n      while ((match = regex.exec(source)) && typeof match.index === \"number\") {\n        matches.push({ kind: \"regex\", query: String(options.regex), index: match.index, match: match[0] });\n        if (matches.length >= maxMatchesPerField) break;\n        if (match[0] === \"\") regex.lastIndex += 1;\n      }\n    } catch (err) {\n      throw new Error(\"providerSearchAll invalid regex: \" + (err?.message || err));\n    }\n  }\n\n  for (const query of _asArray(options.query).concat(_asArray(options.queries))) {\n    addSubstring(query, String(query), \"query\");\n  }\n\n  const terms = includeTerms ? _normalizedSearchTerms(options) : [];\n  if (terms.length) {\n    const termHits = terms\n      .map((term) => {\n        const searchTerm = caseSensitive ? term : term.toLowerCase();\n        const index = haystack.indexOf(searchTerm);\n        return { term, index };\n      })\n      .filter((hit) => hit.index >= 0);\n    const mode = options.matchMode === \"anyTerm\" ? \"anyTerm\" : \"allTerms\";\n    if ((mode === \"allTerms\" && termHits.length === terms.length) || (mode === \"anyTerm\" && termHits.length > 0)) {\n      const first = termHits.sort((a, b) => a.index - b.index)[0];\n      matches.push({ kind: mode, query: terms.join(\" \"), index: first.index, match: first.term });\n    }\n  }\n\n  return matches.sort((a, b) => a.index - b.index);\n}\n\nfunction _boundedNumber(value, defaultValue, min, max) {\n  const parsed = Number(value);\n  const finite = Number.isFinite(parsed) ? parsed : defaultValue;\n  return Math.max(min, Math.min(finite, max));\n}\n\nfunction _hitKey(identity, path, query, index, pageIndex, pageItemIndex) {\n  const itemKey =\n    identity.id !== null && identity.id !== undefined\n      ? \"id:\" + identity.id\n      : \"page:\" + String(pageIndex) + \":\" + String(pageItemIndex);\n  return [itemKey, path ?? \"\", query ?? \"\", String(index ?? \"\")].join(\"\\\\n\");\n}\n\n/**\n * Stream pages from a provider API and search item text structurally. This is\n * for broad mention searches and absence checks where keeping every raw page\n * in memory or hand-parsing JSON strings is brittle.\n */\nasync function providerSearchAll(provider, apiPath, init = {}, options = {}) {\n  const pagination = init.pagination || init.fetchAllPages || {};\n  const itemsPath = pagination.itemsPath || init.itemsPath || options.itemsPath;\n  const cursorPath = pagination.nextCursorPath || pagination.cursorPath;\n  const maxPagesRaw = Number(pagination.maxPages || init.maxPages || options.maxPages || 100);\n  const maxPages = Math.max(1, Math.min(Number.isFinite(maxPagesRaw) ? maxPagesRaw : 100, 500));\n  const maxHits = _boundedNumber(options.maxHits, 100, 1, 5000);\n  const maxHitsPerItem = _boundedNumber(options.maxHitsPerItem, 3, 1, 100);\n  const maxFieldsPerItem = _boundedNumber(options.maxFieldsPerItem, 5000, 1, 50000);\n  const contextChars = options.contextChars ?? options.snippetChars ?? 180;\n  const baseInit = _withoutProviderFetchAllOptions(init);\n  let query = _cloneJson(init.query || {});\n  let body = _cloneJson(init.body);\n  let pageNumber = Number(pagination.startPage || 1);\n  let offset = Number(pagination.startOffset || 0);\n  let lastCursor = null;\n  let stoppedReason = \"completed\";\n  let itemCount = 0;\n  let matchedItemCount = 0;\n  let totalHitCount = 0;\n  const hits = [];\n  const seenHitKeys = new Set();\n  let pageIndex = 0;\n\n  for (; pageIndex < maxPages; pageIndex++) {\n    if (pagination.pageParam) query = { ...(query || {}), [pagination.pageParam]: pageNumber };\n    if (pagination.offsetParam) query = { ...(query || {}), [pagination.offsetParam]: offset };\n\n    const page = await providerFetch(provider, apiPath, {\n      ...baseInit,\n      query,\n      ...(body !== undefined ? { body } : {}),\n    });\n    const nextCursor = cursorPath ? _getByPath(page, cursorPath) : undefined;\n    const hasNextCursor =\n      nextCursor !== undefined && nextCursor !== null && String(nextCursor) !== \"\";\n    if (hasNextCursor && lastCursor !== null && String(nextCursor) === String(lastCursor)) {\n      stoppedReason = \"repeated-cursor\";\n      break;\n    }\n\n    const pageItems = _extractItems(page, itemsPath);\n    itemCount += pageItems.length;\n\n    for (let pageItemIndex = 0; pageItemIndex < pageItems.length; pageItemIndex++) {\n      const item = pageItems[pageItemIndex];\n      const identity = _extractItemIdentity(item, options.idPaths);\n      const metadata = _extractMetadata(item, options.metadataPaths);\n      const fields = _collectSearchStrings(item, options.textPaths, maxFieldsPerItem);\n      let storedItemHitCount = 0;\n      let itemMatched = false;\n\n      const addHit = (field, match) => {\n        const key = _hitKey(identity, field.path, match.query, match.index, pageIndex, pageItemIndex);\n        if (seenHitKeys.has(key)) return false;\n        seenHitKeys.add(key);\n        totalHitCount += 1;\n        if (!itemMatched) {\n          matchedItemCount += 1;\n          itemMatched = true;\n        }\n        if (hits.length < maxHits && storedItemHitCount < maxHitsPerItem) {\n          storedItemHitCount += 1;\n          hits.push({\n            id: identity.id,\n            idPath: identity.idPath,\n            pageIndex,\n            pageItemIndex,\n            itemIndex: itemCount - pageItems.length + pageItemIndex,\n            path: field.path,\n            kind: match.kind,\n            query: match.query,\n            match: match.match,\n            snippet: _makeSnippet(field.text, match.index, contextChars),\n            ...(Object.keys(metadata).length ? { metadata } : {}),\n          });\n        }\n        return true;\n      };\n\n      const itemWideTermMatch = _findItemWideTermMatch(fields, options);\n      if (itemWideTermMatch) {\n        addHit(itemWideTermMatch.field, itemWideTermMatch.match);\n      }\n\n      for (const field of fields) {\n        const fieldMatches = _findSearchMatches(field.text, options, !itemWideTermMatch);\n        for (const match of fieldMatches) {\n          addHit(field, match);\n        }\n      }\n    }\n\n    if (hasNextCursor) {\n      lastCursor = nextCursor;\n      if (pagination.cursorBodyPath) {\n        body = _setByPath(body || {}, pagination.cursorBodyPath, nextCursor);\n      } else if (pagination.cursorParam) {\n        query = { ...(query || {}), [pagination.cursorParam]: nextCursor };\n      } else {\n        stoppedReason = \"cursor-found-without-destination\";\n        break;\n      }\n      continue;\n    }\n\n    lastCursor = null;\n    if (pagination.pageParam) {\n      if (pageItems.length === 0) {\n        stoppedReason = \"empty-page\";\n        break;\n      }\n      pageNumber += 1;\n      continue;\n    }\n    if (pagination.offsetParam) {\n      if (pageItems.length === 0) {\n        stoppedReason = \"empty-page\";\n        break;\n      }\n      const step = Number(pagination.pageSize || pageItems.length);\n      if (!Number.isFinite(step) || step <= 0) {\n        stoppedReason = \"invalid-page-size\";\n        break;\n      }\n      offset += step;\n      if (pagination.pageSize && pageItems.length < Number(pagination.pageSize)) {\n        stoppedReason = \"short-page\";\n        break;\n      }\n      continue;\n    }\n\n    break;\n  }\n\n  const pageCount = pageIndex + (pageIndex < maxPages ? 1 : 0);\n  const hitPageOrOffsetLimit =\n    Boolean(pagination.pageParam || pagination.offsetParam) &&\n    stoppedReason === \"completed\" &&\n    pageCount >= maxPages;\n  const hasMore =\n    stoppedReason === \"cursor-found-without-destination\" ||\n    (lastCursor !== null && pageCount >= maxPages) || hitPageOrOffsetLimit;\n  if (hasMore && stoppedReason === \"completed\") stoppedReason = \"max-pages\";\n\n  return {\n    hits,\n    hitCount: hits.length,\n    totalHitCount,\n    truncatedHits: totalHitCount > hits.length,\n    matchedItemCount,\n    itemCount,\n    pageCount,\n    hasMore,\n    lastCursor,\n    stoppedReason,\n    searched: {\n      provider,\n      path: apiPath,\n      itemsPath: itemsPath || null,\n      textPaths: _asArray(options.textPaths),\n      idPaths: _asArray(options.idPaths),\n      query: options.query ?? null,\n      queries: _asArray(options.queries),\n      terms: _asArray(options.terms),\n      regex: options.regex ?? null,\n      matchMode: options.matchMode || (options.terms ? \"allTerms\" : \"query\"),\n      caseSensitive: Boolean(options.caseSensitive),\n    },\n  };\n}\n\n/**\n * Fetch every page from a provider API using generic cursor, page-number, or\n * offset pagination. Prefer this inside run-code when the answer depends on a\n * broad provider corpus rather than a single bounded request.\n */\nasync function providerFetchAll(provider, apiPath, init = {}) {\n  const pagination = init.pagination || init.fetchAllPages || {};\n  const itemsPath = pagination.itemsPath || init.itemsPath;\n  const cursorPath = pagination.nextCursorPath || pagination.cursorPath;\n  const maxPagesRaw = Number(pagination.maxPages || init.maxPages || 50);\n  const maxPages = Math.max(1, Math.min(Number.isFinite(maxPagesRaw) ? maxPagesRaw : 50, 200));\n  const baseInit = _withoutProviderFetchAllOptions(init);\n  let query = _cloneJson(init.query || {});\n  let body = _cloneJson(init.body);\n  let pageNumber = Number(pagination.startPage || 1);\n  let offset = Number(pagination.startOffset || 0);\n  const pages = [];\n  const items = [];\n  let lastCursor = null;\n  let stoppedReason = \"completed\";\n\n  for (let pageIndex = 0; pageIndex < maxPages; pageIndex++) {\n    if (pagination.pageParam) {\n      query = { ...(query || {}), [pagination.pageParam]: pageNumber };\n    }\n    if (pagination.offsetParam) {\n      query = { ...(query || {}), [pagination.offsetParam]: offset };\n    }\n\n    const page = await providerFetch(provider, apiPath, {\n      ...baseInit,\n      query,\n      ...(body !== undefined ? { body } : {}),\n    });\n    pages.push(page);\n    const pageItems = _extractItems(page, itemsPath);\n    items.push(...pageItems);\n\n    const nextCursor = cursorPath ? _getByPath(page, cursorPath) : undefined;\n    if (nextCursor !== undefined && nextCursor !== null && String(nextCursor) !== \"\") {\n      if (lastCursor !== null && String(nextCursor) === String(lastCursor)) {\n        stoppedReason = \"repeated-cursor\";\n        break;\n      }\n      lastCursor = nextCursor;\n      if (pagination.cursorBodyPath) {\n        body = _setByPath(body || {}, pagination.cursorBodyPath, nextCursor);\n      } else if (pagination.cursorParam) {\n        query = { ...(query || {}), [pagination.cursorParam]: nextCursor };\n      } else {\n        stoppedReason = \"cursor-found-without-destination\";\n        break;\n      }\n      continue;\n    }\n\n    lastCursor = null;\n    if (pagination.pageParam) {\n      if (pageItems.length === 0) {\n        stoppedReason = \"empty-page\";\n        break;\n      }\n      pageNumber += 1;\n      continue;\n    }\n    if (pagination.offsetParam) {\n      if (pageItems.length === 0) {\n        stoppedReason = \"empty-page\";\n        break;\n      }\n      const step = Number(pagination.pageSize || pageItems.length);\n      if (!Number.isFinite(step) || step <= 0) {\n        stoppedReason = \"invalid-page-size\";\n        break;\n      }\n      offset += step;\n      if (pagination.pageSize && pageItems.length < Number(pagination.pageSize)) {\n        stoppedReason = \"short-page\";\n        break;\n      }\n      continue;\n    }\n\n    break;\n  }\n\n  const hitPageOrOffsetLimit =\n    Boolean(pagination.pageParam || pagination.offsetParam) &&\n    stoppedReason === \"completed\" &&\n    pages.length >= maxPages;\n  const hasMore =\n    (lastCursor !== null && pages.length >= maxPages) || hitPageOrOffsetLimit;\n  if (hasMore) stoppedReason = \"max-pages\";\n  return {\n    items,\n    pages,\n    pageCount: pages.length,\n    itemCount: items.length,\n    hasMore,\n    lastCursor,\n    stoppedReason,\n  };\n}\n\n/**\n * Make an outbound HTTP request via the web-request action.\n * Returns an object \\`{ status, body }\\` where \\`body\\` is the response text.\n */\nasync function webFetch(url, init = {}) {\n  const method = (init.method || \"GET\").toUpperCase();\n  const rawResult = await _bridgeCall(\"web-request\", {\n    url,\n    method,\n    ...(init.headers ? { headers: typeof init.headers === \"string\" ? init.headers : JSON.stringify(init.headers) } : {}),\n    ...(init.body ? { body: typeof init.body === \"string\" ? init.body : JSON.stringify(init.body) } : {}),\n  });\n  // rawResult is \"HTTP <status> <statusText>\\\\n\\\\n<body>\"\n  const statusMatch = typeof rawResult === \"string\" ? rawResult.match(/^HTTP (\\\\d+) [^\\\\n]*\\\\n\\\\n/) : null;\n  if (statusMatch) {\n    return {\n      status: Number(statusMatch[1]),\n      body: rawResult.slice(statusMatch[0].length),\n    };\n  }\n  return { status: 0, body: rawResult };\n}\n\n/**\n * Read a Resources-backed workspace file by path. Returns the file content as\n * a string, or null if not found.\n * Supports optional offset and maxChars for paging large files.\n */\nasync function workspaceRead(path, opts = {}) {\n  const parsed = await workspaceReadMeta(path, opts);\n  if (parsed && parsed.ok === false) return null;\n  return parsed && typeof parsed.content === \"string\" ? parsed.content : null;\n}\n\n/**\n * Read a workspace file by path and return the full metadata envelope.\n * Use this when offset/maxChars paging or truncation status matters.\n */\nasync function workspaceReadMeta(path, opts = {}) {\n  const rawResult = await _bridgeCall(\"workspace-files\", {\n    action: \"read\",\n    path,\n    ...(opts.offset !== undefined ? { offset: opts.offset } : {}),\n    ...(opts.maxChars !== undefined ? { maxChars: opts.maxChars } : {}),\n  });\n  return _parseBridgeResult(rawResult);\n}\n\n/**\n * Write (create or overwrite) a workspace file. Use \\`scratch/...\\` for\n * temporary staging files.\n * \\`content\\` must be a string. Returns metadata { path, sizeBytes, updatedAt }.\n */\nasync function workspaceWrite(path, content, contentType = \"text/plain\") {\n  const rawResult = await _bridgeCall(\"workspace-files\", {\n    action: \"write\",\n    path,\n    content: typeof content === \"string\" ? content : JSON.stringify(content),\n    contentType,\n  });\n  try { return typeof rawResult === \"string\" ? JSON.parse(rawResult) : rawResult; } catch { return rawResult; }\n}\n\n/**\n * Append text to a workspace file (creates if absent).\n */\nasync function workspaceAppend(path, content) {\n  const rawResult = await _bridgeCall(\"workspace-files\", {\n    action: \"append\",\n    path,\n    content: typeof content === \"string\" ? content : JSON.stringify(content),\n  });\n  try { return typeof rawResult === \"string\" ? JSON.parse(rawResult) : rawResult; } catch { return rawResult; }\n}\n\n/**\n * List workspace files, optionally filtered by path prefix.\n * Returns an array of { path, sizeBytes, contentType, updatedAt }.\n */\nasync function workspaceList(prefix) {\n  const rawResult = await _bridgeCall(\"workspace-files\", {\n    action: \"list\",\n    ...(prefix ? { path: prefix } : {}),\n  });\n  const parsed = typeof rawResult === \"string\" ? JSON.parse(rawResult) : rawResult;\n  if (parsed && Array.isArray(parsed.files)) return parsed.files;\n  if (Array.isArray(parsed)) return parsed;\n  throw new Error(\"workspaceList: unexpected result shape: \" + JSON.stringify(parsed).slice(0, 200));\n}\n\n// Run user code\n(async () => {\n${userCode}\n})().catch((err) => {\n  console.error(\"Unhandled error:\", err?.message ?? String(err));\n  process.exit(1);\n});\n`;\n}\n"]}

package/dist/server/auth-marketing.js

@@ -37,11 +37,11 @@ export const BUILT_IN_AUTH_MARKETING = {
     },
     content: {
         appName: "Agent-Native Content",
-        tagline: "Your AI agent creates, edits, and organizes documents alongside you in a Notion-like workspace.",
+        tagline: "Open-source Obsidian for MDX: your AI agent edits local docs, creates custom blocks, and organizes everything alongside you.",
         features: [
-            "Create and restructure entire document trees from a single prompt",
-            "Surgical edits that sync live to your editor via real-time collaboration",
-            "Search, summarize, and cross-reference documents instantly",
+            "Edit local Markdown/MDX files directly, with hosted sync when you need it",
+            "Generate rich interactive custom MDX blocks and edit their props visually",
+            "Search, summarize, cross-reference, and restructure document trees instantly",
         ],
     },
     design: {

package/dist/server/auth-marketing.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-marketing.js","sourceRoot":"","sources":["../../src/server/auth-marketing.ts"],"names":[],"mappings":"AAaA,MAAM,CAAC,MAAM,uBAAuB,GAAyC;IAC3E,SAAS,EAAE;QACT,OAAO,EAAE,wBAAwB;QACjC,OAAO,EACL,2GAA2G;QAC7G,QAAQ,EAAE;YACR,yEAAyE;YACzE,kEAAkE;YAClE,kEAAkE;SACnE;KACF;IACD,KAAK,EAAE;QACL,OAAO,EAAE,oBAAoB;QAC7B,OAAO,EACL,qGAAqG;QACvG,QAAQ,EAAE;YACR,iEAAiE;YACjE,iDAAiD;YACjD,0DAA0D;SAC3D;KACF;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,uBAAuB;QAChC,OAAO,EACL,uFAAuF;QACzF,QAAQ,EAAE;YACR,oDAAoD;YACpD,sDAAsD;YACtD,6DAA6D;SAC9D;KACF;IACD,KAAK,EAAE;QACL,OAAO,EAAE,oBAAoB;QAC7B,OAAO,EACL,0FAA0F;QAC5F,QAAQ,EAAE;YACR,2EAA2E;YAC3E,sEAAsE;YACtE,oEAAoE;SACrE;KACF;IACD,OAAO,EAAE;QACP,OAAO,EAAE,sBAAsB;QAC/B,OAAO,EACL,iGAAiG;QACnG,QAAQ,EAAE;YACR,mEAAmE;YACnE,0EAA0E;YAC1E,4DAA4D;SAC7D;KACF;IACD,MAAM,EAAE;QACN,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EACL,wIAAwI;QAC1I,QAAQ,EAAE;YACR,oDAAoD;YACpD,4DAA4D;YAC5D,0CAA0C;SAC3C;KACF;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,uBAAuB;QAChC,OAAO,EACL,sGAAsG;QACxG,QAAQ,EAAE;YACR,4DAA4D;YAC5D,6DAA6D;YAC7D,oDAAoD;SACrD;KACF;IACD,KAAK,EAAE;QACL,OAAO,EAAE,oBAAoB;QAC7B,OAAO,EACL,oEAAoE;QACtE,QAAQ,EAAE;YACR,8CAA8C;YAC9C,qDAAqD;YACrD,2DAA2D;SAC5D;KACF;IACD,MAAM,EAAE;QACN,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EACL,8EAA8E;QAChF,QAAQ,EAAE;YACR,kFAAkF;YAClF,iFAAiF;YACjF,sEAAsE;SACvE;KACF;IACD,IAAI,EAAE;QACJ,OAAO,EAAE,mBAAmB;QAC5B,OAAO,EAAE,iEAAiE;QAC1E,QAAQ,EAAE;YACR,wCAAwC;YACxC,+CAA+C;YAC/C,8CAA8C;SAC/C;QACD,eAAe,EACb,kEAAkE;KACrE;IACD,MAAM,EAAE;QACN,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EACL,uEAAuE;QACzE,QAAQ,EAAE;YACR,4CAA4C;YAC5C,kDAAkD;YAClD,mDAAmD;SACpD;KACF;IACD,OAAO,EAAE;QACP,OAAO,EAAE,WAAW;QACpB,OAAO,EACL,wFAAwF;QAC1F,QAAQ,EAAE;YACR,4EAA4E;YAC5E,kEAAkE;YAClE,qEAAqE;SACtE;KACF;IACD,MAAM,EAAE;QACN,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EACL,gFAAgF;QAClF,QAAQ,EAAE;YACR,kEAAkE;YAClE,+DAA+D;YAC/D,yEAAyE;SAC1E;KACF;CACF,CAAC;AAEF,MAAM,YAAY,GAA2B;IAC3C,cAAc,EAAE,EAAE;IAClB,WAAW,EAAE,SAAS;IACtB,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,QAAQ;CAChB,CAAC;AAEF,SAAS,cAAc,CAAC,SAA+B;IACrD,OAAO;QACL,GAAG,SAAS;QACZ,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB;IAC9C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAE5B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,GAAG,IAAI;SACR,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB;IAC5C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IACtE,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACvC,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,aAAa,CAAC,YAAY,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CACrB,OAA2C,EAAE;IAE7C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7D,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7D,aAAa,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACxC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC3B,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACnC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC;QAC/B,YAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACpC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;QACxB,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC;QAChC,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACrC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;QACpB,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;QAC3B,WAAW,CAAC,GAAG,CAAC,gBAAgB,CAAC;KAClC,CAAC;IAEF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAA2C,EAAE;IAE7C,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,SAAS;YAAE,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAAyB;IAEzB,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,OAAO,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC","sourcesContent":["export interface AuthMarketingContent {\n  appName: string;\n  tagline: string;\n  description?: string;\n  features?: string[];\n  runLocalCommand?: string;\n}\n\nexport interface ResolveBuiltInAuthMarketingOptions {\n  requestHost?: string;\n  requestPath?: string;\n}\n\nexport const BUILT_IN_AUTH_MARKETING: Record<string, AuthMarketingContent> = {\n  analytics: {\n    appName: \"Agent-Native Analytics\",\n    tagline:\n      \"Your AI agent queries your data sources, builds dashboards, and answers business questions alongside you.\",\n    features: [\n      \"Ask any question and get answers from BigQuery, HubSpot, Jira, and more\",\n      \"Agent-built dashboards that pull live data from all your sources\",\n      \"Saved analyses the agent can re-run on demand with fresh numbers\",\n    ],\n  },\n  brain: {\n    appName: \"Agent-Native Brain\",\n    tagline:\n      \"A company memory layer where raw conversations become reviewed, searchable institutional knowledge.\",\n    features: [\n      \"Import transcripts, notes, Slack exports, and Granola summaries\",\n      \"Validate every fact against exact source quotes\",\n      \"Review company-wide knowledge through proposal workflows\",\n    ],\n  },\n  calendar: {\n    appName: \"Agent-Native Calendar\",\n    tagline:\n      \"Your AI agent schedules, reschedules, and manages your calendar so you never have to.\",\n    features: [\n      \"Finds open slots and books meetings on your behalf\",\n      \"Manages availability and booking links automatically\",\n      \"Answers schedule questions and resolves conflicts instantly\",\n    ],\n  },\n  clips: {\n    appName: \"Agent-Native Clips\",\n    tagline:\n      \"Your AI agent transcribes, summarizes, and searches everything you record alongside you.\",\n    features: [\n      \"One-click screen recording with automatic titles, summaries, and chapters\",\n      \"Calendar-synced meeting notes with live transcripts and action items\",\n      \"One searchable library across recordings, meetings, and dictations\",\n    ],\n  },\n  content: {\n    appName: \"Agent-Native Content\",\n    tagline:\n      \"Your AI agent creates, edits, and organizes documents alongside you in a Notion-like workspace.\",\n    features: [\n      \"Create and restructure entire document trees from a single prompt\",\n      \"Surgical edits that sync live to your editor via real-time collaboration\",\n      \"Search, summarize, and cross-reference documents instantly\",\n    ],\n  },\n  design: {\n    appName: \"Agent-Native Design\",\n    tagline:\n      \"Design and prototype by describing what you want. The AI agent turns your ideas into interactive, fully responsive designs in seconds.\",\n    features: [\n      \"Create polished prototypes just by describing them\",\n      \"Build and apply design systems to keep everything on-brand\",\n      \"Export your work or share it with a link\",\n    ],\n  },\n  dispatch: {\n    appName: \"Agent-Native Dispatch\",\n    tagline:\n      \"Your AI agent manages secrets, orchestrates other agents, and routes messages across your workspace.\",\n    features: [\n      \"Centralized vault for secrets with granular per-app grants\",\n      \"Cross-agent orchestration and delegation to specialist apps\",\n      \"Slack and Telegram routing with approval workflows\",\n    ],\n  },\n  forms: {\n    appName: \"Agent-Native Forms\",\n    tagline:\n      \"Your AI agent builds, publishes, and analyzes forms alongside you.\",\n    features: [\n      \"Create complete forms from a single sentence\",\n      \"Instant publishing with shareable links and captcha\",\n      \"Response summaries, exports, and trend analysis on demand\",\n    ],\n  },\n  assets: {\n    appName: \"Agent-Native Assets\",\n    tagline:\n      \"Your AI agent creates, refines, and organizes on-brand assets alongside you.\",\n    features: [\n      \"Build reusable asset libraries from logos, product shots, videos, and references\",\n      \"Generate heroes, diagrams, slide art, product visuals, and videos from a prompt\",\n      \"Audit prompts, references, outputs, and refinements across every run\",\n    ],\n  },\n  mail: {\n    appName: \"Agent-Native Mail\",\n    tagline: \"Your AI agent reads, drafts, and organizes email alongside you.\",\n    features: [\n      \"Replies that match your tone and style\",\n      \"Multi-account Gmail in a single unified inbox\",\n      \"Autonomous triage, archiving, and follow-ups\",\n    ],\n    runLocalCommand:\n      \"npx @agent-native/core@latest create my-mail-app --template mail\",\n  },\n  slides: {\n    appName: \"Agent-Native Slides\",\n    tagline:\n      \"Your AI agent builds, edits, and refines presentations alongside you.\",\n    features: [\n      \"Generate entire decks from a single prompt\",\n      \"Surgical slide edits while you present or review\",\n      \"Real-time collaboration between you and the agent\",\n    ],\n  },\n  starter: {\n    appName: \"Blank app\",\n    tagline:\n      \"Build an agent-native app where the AI agent and UI share state, actions, and context.\",\n    features: [\n      \"Define once, use everywhere: actions work as agent tools and API endpoints\",\n      \"The agent always knows what you are looking at and can act on it\",\n      \"Modify your app's own code, routes, and styles through conversation\",\n    ],\n  },\n  videos: {\n    appName: \"Agent-Native Videos\",\n    tagline:\n      \"Your AI agent builds, animates, and refines programmatic videos alongside you.\",\n    features: [\n      \"Generate animated components and compositions from a description\",\n      \"Fine-tune tracks, keyframes, and easing without touching code\",\n      \"Camera moves, interactive elements, and effects the agent wires for you\",\n    ],\n  },\n};\n\nconst SLUG_ALIASES: Record<string, string> = {\n  \"agent-native\": \"\",\n  \"blank-app\": \"starter\",\n  asset: \"assets\",\n  image: \"assets\",\n  images: \"assets\",\n  video: \"videos\",\n};\n\nfunction cloneMarketing(marketing: AuthMarketingContent): AuthMarketingContent {\n  return {\n    ...marketing,\n    features: marketing.features ? [...marketing.features] : undefined,\n  };\n}\n\nfunction normalizeSlug(value: string | undefined): string | undefined {\n  if (!value) return undefined;\n  let slug = value.trim().toLowerCase();\n  if (!slug) return undefined;\n\n  slug = slug.replace(/^@agent-native\\//, \"\");\n  slug = slug\n    .replace(/&/g, \" and \")\n    .replace(/[^a-z0-9]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  slug = slug.replace(/^agent-native-/, \"\");\n  slug = SLUG_ALIASES[slug] ?? slug;\n  if (!slug) return undefined;\n  return BUILT_IN_AUTH_MARKETING[slug] ? slug : undefined;\n}\n\nfunction slugFromUrl(value: string | undefined): string | undefined {\n  if (!value) return undefined;\n  try {\n    const url = new URL(value);\n    return slugFromHost(url.host) ?? slugFromPath(url.pathname);\n  } catch {\n    return undefined;\n  }\n}\n\nfunction slugFromHost(value: string | undefined): string | undefined {\n  if (!value) return undefined;\n  const host = value.split(\",\")[0]?.trim().split(\":\")[0]?.toLowerCase();\n  if (!host) return undefined;\n  if (host.endsWith(\".agent-native.com\")) {\n    return normalizeSlug(host.slice(0, -\".agent-native.com\".length));\n  }\n  return undefined;\n}\n\nfunction slugFromPath(value: string | undefined): string | undefined {\n  if (!value) return undefined;\n  const firstSegment = value.split(\"?\")[0]?.split(\"/\").filter(Boolean)[0];\n  return normalizeSlug(firstSegment);\n}\n\nfunction candidateSlugs(\n  opts: ResolveBuiltInAuthMarketingOptions = {},\n): string[] {\n  const env = process.env;\n  const candidates = [\n    opts.requestHost ? slugFromHost(opts.requestHost) : undefined,\n    opts.requestPath ? slugFromPath(opts.requestPath) : undefined,\n    normalizeSlug(env.AGENT_NATIVE_TEMPLATE),\n    normalizeSlug(env.APP_NAME),\n    normalizeSlug(env.npm_package_name),\n    slugFromPath(env.APP_BASE_PATH),\n    slugFromPath(env.VITE_APP_BASE_PATH),\n    slugFromUrl(env.APP_URL),\n    slugFromUrl(env.BETTER_AUTH_URL),\n    slugFromUrl(env.VITE_BETTER_AUTH_URL),\n    slugFromUrl(env.URL),\n    slugFromUrl(env.DEPLOY_URL),\n    slugFromUrl(env.DEPLOY_PRIME_URL),\n  ];\n\n  return candidates.filter((slug): slug is string => !!slug);\n}\n\nexport function resolveBuiltInAuthMarketing(\n  opts: ResolveBuiltInAuthMarketingOptions = {},\n): AuthMarketingContent | undefined {\n  for (const slug of candidateSlugs(opts)) {\n    const marketing = BUILT_IN_AUTH_MARKETING[slug];\n    if (marketing) return cloneMarketing(marketing);\n  }\n  return undefined;\n}\n\nexport function resolveBuiltInAuthMarketingByName(\n  value: string | undefined,\n): AuthMarketingContent | undefined {\n  const slug = normalizeSlug(value);\n  const marketing = slug ? BUILT_IN_AUTH_MARKETING[slug] : undefined;\n  return marketing ? cloneMarketing(marketing) : undefined;\n}\n"]}
+{"version":3,"file":"auth-marketing.js","sourceRoot":"","sources":["../../src/server/auth-marketing.ts"],"names":[],"mappings":"AAaA,MAAM,CAAC,MAAM,uBAAuB,GAAyC;IAC3E,SAAS,EAAE;QACT,OAAO,EAAE,wBAAwB;QACjC,OAAO,EACL,2GAA2G;QAC7G,QAAQ,EAAE;YACR,yEAAyE;YACzE,kEAAkE;YAClE,kEAAkE;SACnE;KACF;IACD,KAAK,EAAE;QACL,OAAO,EAAE,oBAAoB;QAC7B,OAAO,EACL,qGAAqG;QACvG,QAAQ,EAAE;YACR,iEAAiE;YACjE,iDAAiD;YACjD,0DAA0D;SAC3D;KACF;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,uBAAuB;QAChC,OAAO,EACL,uFAAuF;QACzF,QAAQ,EAAE;YACR,oDAAoD;YACpD,sDAAsD;YACtD,6DAA6D;SAC9D;KACF;IACD,KAAK,EAAE;QACL,OAAO,EAAE,oBAAoB;QAC7B,OAAO,EACL,0FAA0F;QAC5F,QAAQ,EAAE;YACR,2EAA2E;YAC3E,sEAAsE;YACtE,oEAAoE;SACrE;KACF;IACD,OAAO,EAAE;QACP,OAAO,EAAE,sBAAsB;QAC/B,OAAO,EACL,8HAA8H;QAChI,QAAQ,EAAE;YACR,2EAA2E;YAC3E,2EAA2E;YAC3E,8EAA8E;SAC/E;KACF;IACD,MAAM,EAAE;QACN,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EACL,wIAAwI;QAC1I,QAAQ,EAAE;YACR,oDAAoD;YACpD,4DAA4D;YAC5D,0CAA0C;SAC3C;KACF;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,uBAAuB;QAChC,OAAO,EACL,sGAAsG;QACxG,QAAQ,EAAE;YACR,4DAA4D;YAC5D,6DAA6D;YAC7D,oDAAoD;SACrD;KACF;IACD,KAAK,EAAE;QACL,OAAO,EAAE,oBAAoB;QAC7B,OAAO,EACL,oEAAoE;QACtE,QAAQ,EAAE;YACR,8CAA8C;YAC9C,qDAAqD;YACrD,2DAA2D;SAC5D;KACF;IACD,MAAM,EAAE;QACN,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EACL,8EAA8E;QAChF,QAAQ,EAAE;YACR,kFAAkF;YAClF,iFAAiF;YACjF,sEAAsE;SACvE;KACF;IACD,IAAI,EAAE;QACJ,OAAO,EAAE,mBAAmB;QAC5B,OAAO,EAAE,iEAAiE;QAC1E,QAAQ,EAAE;YACR,wCAAwC;YACxC,+CAA+C;YAC/C,8CAA8C;SAC/C;QACD,eAAe,EACb,kEAAkE;KACrE;IACD,MAAM,EAAE;QACN,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EACL,uEAAuE;QACzE,QAAQ,EAAE;YACR,4CAA4C;YAC5C,kDAAkD;YAClD,mDAAmD;SACpD;KACF;IACD,OAAO,EAAE;QACP,OAAO,EAAE,WAAW;QACpB,OAAO,EACL,wFAAwF;QAC1F,QAAQ,EAAE;YACR,4EAA4E;YAC5E,kEAAkE;YAClE,qEAAqE;SACtE;KACF;IACD,MAAM,EAAE;QACN,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EACL,gFAAgF;QAClF,QAAQ,EAAE;YACR,kEAAkE;YAClE,+DAA+D;YAC/D,yEAAyE;SAC1E;KACF;CACF,CAAC;AAEF,MAAM,YAAY,GAA2B;IAC3C,cAAc,EAAE,EAAE;IAClB,WAAW,EAAE,SAAS;IACtB,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,QAAQ;CAChB,CAAC;AAEF,SAAS,cAAc,CAAC,SAA+B;IACrD,OAAO;QACL,GAAG,SAAS;QACZ,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB;IAC9C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAE5B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,GAAG,IAAI;SACR,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB;IAC5C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IACtE,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACvC,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,aAAa,CAAC,YAAY,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CACrB,OAA2C,EAAE;IAE7C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7D,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7D,aAAa,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACxC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC3B,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACnC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC;QAC/B,YAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACpC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;QACxB,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC;QAChC,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACrC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;QACpB,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;QAC3B,WAAW,CAAC,GAAG,CAAC,gBAAgB,CAAC;KAClC,CAAC;IAEF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAA2C,EAAE;IAE7C,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,SAAS;YAAE,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAAyB;IAEzB,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,OAAO,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC","sourcesContent":["export interface AuthMarketingContent {\n  appName: string;\n  tagline: string;\n  description?: string;\n  features?: string[];\n  runLocalCommand?: string;\n}\n\nexport interface ResolveBuiltInAuthMarketingOptions {\n  requestHost?: string;\n  requestPath?: string;\n}\n\nexport const BUILT_IN_AUTH_MARKETING: Record<string, AuthMarketingContent> = {\n  analytics: {\n    appName: \"Agent-Native Analytics\",\n    tagline:\n      \"Your AI agent queries your data sources, builds dashboards, and answers business questions alongside you.\",\n    features: [\n      \"Ask any question and get answers from BigQuery, HubSpot, Jira, and more\",\n      \"Agent-built dashboards that pull live data from all your sources\",\n      \"Saved analyses the agent can re-run on demand with fresh numbers\",\n    ],\n  },\n  brain: {\n    appName: \"Agent-Native Brain\",\n    tagline:\n      \"A company memory layer where raw conversations become reviewed, searchable institutional knowledge.\",\n    features: [\n      \"Import transcripts, notes, Slack exports, and Granola summaries\",\n      \"Validate every fact against exact source quotes\",\n      \"Review company-wide knowledge through proposal workflows\",\n    ],\n  },\n  calendar: {\n    appName: \"Agent-Native Calendar\",\n    tagline:\n      \"Your AI agent schedules, reschedules, and manages your calendar so you never have to.\",\n    features: [\n      \"Finds open slots and books meetings on your behalf\",\n      \"Manages availability and booking links automatically\",\n      \"Answers schedule questions and resolves conflicts instantly\",\n    ],\n  },\n  clips: {\n    appName: \"Agent-Native Clips\",\n    tagline:\n      \"Your AI agent transcribes, summarizes, and searches everything you record alongside you.\",\n    features: [\n      \"One-click screen recording with automatic titles, summaries, and chapters\",\n      \"Calendar-synced meeting notes with live transcripts and action items\",\n      \"One searchable library across recordings, meetings, and dictations\",\n    ],\n  },\n  content: {\n    appName: \"Agent-Native Content\",\n    tagline:\n      \"Open-source Obsidian for MDX: your AI agent edits local docs, creates custom blocks, and organizes everything alongside you.\",\n    features: [\n      \"Edit local Markdown/MDX files directly, with hosted sync when you need it\",\n      \"Generate rich interactive custom MDX blocks and edit their props visually\",\n      \"Search, summarize, cross-reference, and restructure document trees instantly\",\n    ],\n  },\n  design: {\n    appName: \"Agent-Native Design\",\n    tagline:\n      \"Design and prototype by describing what you want. The AI agent turns your ideas into interactive, fully responsive designs in seconds.\",\n    features: [\n      \"Create polished prototypes just by describing them\",\n      \"Build and apply design systems to keep everything on-brand\",\n      \"Export your work or share it with a link\",\n    ],\n  },\n  dispatch: {\n    appName: \"Agent-Native Dispatch\",\n    tagline:\n      \"Your AI agent manages secrets, orchestrates other agents, and routes messages across your workspace.\",\n    features: [\n      \"Centralized vault for secrets with granular per-app grants\",\n      \"Cross-agent orchestration and delegation to specialist apps\",\n      \"Slack and Telegram routing with approval workflows\",\n    ],\n  },\n  forms: {\n    appName: \"Agent-Native Forms\",\n    tagline:\n      \"Your AI agent builds, publishes, and analyzes forms alongside you.\",\n    features: [\n      \"Create complete forms from a single sentence\",\n      \"Instant publishing with shareable links and captcha\",\n      \"Response summaries, exports, and trend analysis on demand\",\n    ],\n  },\n  assets: {\n    appName: \"Agent-Native Assets\",\n    tagline:\n      \"Your AI agent creates, refines, and organizes on-brand assets alongside you.\",\n    features: [\n      \"Build reusable asset libraries from logos, product shots, videos, and references\",\n      \"Generate heroes, diagrams, slide art, product visuals, and videos from a prompt\",\n      \"Audit prompts, references, outputs, and refinements across every run\",\n    ],\n  },\n  mail: {\n    appName: \"Agent-Native Mail\",\n    tagline: \"Your AI agent reads, drafts, and organizes email alongside you.\",\n    features: [\n      \"Replies that match your tone and style\",\n      \"Multi-account Gmail in a single unified inbox\",\n      \"Autonomous triage, archiving, and follow-ups\",\n    ],\n    runLocalCommand:\n      \"npx @agent-native/core@latest create my-mail-app --template mail\",\n  },\n  slides: {\n    appName: \"Agent-Native Slides\",\n    tagline:\n      \"Your AI agent builds, edits, and refines presentations alongside you.\",\n    features: [\n      \"Generate entire decks from a single prompt\",\n      \"Surgical slide edits while you present or review\",\n      \"Real-time collaboration between you and the agent\",\n    ],\n  },\n  starter: {\n    appName: \"Blank app\",\n    tagline:\n      \"Build an agent-native app where the AI agent and UI share state, actions, and context.\",\n    features: [\n      \"Define once, use everywhere: actions work as agent tools and API endpoints\",\n      \"The agent always knows what you are looking at and can act on it\",\n      \"Modify your app's own code, routes, and styles through conversation\",\n    ],\n  },\n  videos: {\n    appName: \"Agent-Native Videos\",\n    tagline:\n      \"Your AI agent builds, animates, and refines programmatic videos alongside you.\",\n    features: [\n      \"Generate animated components and compositions from a description\",\n      \"Fine-tune tracks, keyframes, and easing without touching code\",\n      \"Camera moves, interactive elements, and effects the agent wires for you\",\n    ],\n  },\n};\n\nconst SLUG_ALIASES: Record<string, string> = {\n  \"agent-native\": \"\",\n  \"blank-app\": \"starter\",\n  asset: \"assets\",\n  image: \"assets\",\n  images: \"assets\",\n  video: \"videos\",\n};\n\nfunction cloneMarketing(marketing: AuthMarketingContent): AuthMarketingContent {\n  return {\n    ...marketing,\n    features: marketing.features ? [...marketing.features] : undefined,\n  };\n}\n\nfunction normalizeSlug(value: string | undefined): string | undefined {\n  if (!value) return undefined;\n  let slug = value.trim().toLowerCase();\n  if (!slug) return undefined;\n\n  slug = slug.replace(/^@agent-native\\//, \"\");\n  slug = slug\n    .replace(/&/g, \" and \")\n    .replace(/[^a-z0-9]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  slug = slug.replace(/^agent-native-/, \"\");\n  slug = SLUG_ALIASES[slug] ?? slug;\n  if (!slug) return undefined;\n  return BUILT_IN_AUTH_MARKETING[slug] ? slug : undefined;\n}\n\nfunction slugFromUrl(value: string | undefined): string | undefined {\n  if (!value) return undefined;\n  try {\n    const url = new URL(value);\n    return slugFromHost(url.host) ?? slugFromPath(url.pathname);\n  } catch {\n    return undefined;\n  }\n}\n\nfunction slugFromHost(value: string | undefined): string | undefined {\n  if (!value) return undefined;\n  const host = value.split(\",\")[0]?.trim().split(\":\")[0]?.toLowerCase();\n  if (!host) return undefined;\n  if (host.endsWith(\".agent-native.com\")) {\n    return normalizeSlug(host.slice(0, -\".agent-native.com\".length));\n  }\n  return undefined;\n}\n\nfunction slugFromPath(value: string | undefined): string | undefined {\n  if (!value) return undefined;\n  const firstSegment = value.split(\"?\")[0]?.split(\"/\").filter(Boolean)[0];\n  return normalizeSlug(firstSegment);\n}\n\nfunction candidateSlugs(\n  opts: ResolveBuiltInAuthMarketingOptions = {},\n): string[] {\n  const env = process.env;\n  const candidates = [\n    opts.requestHost ? slugFromHost(opts.requestHost) : undefined,\n    opts.requestPath ? slugFromPath(opts.requestPath) : undefined,\n    normalizeSlug(env.AGENT_NATIVE_TEMPLATE),\n    normalizeSlug(env.APP_NAME),\n    normalizeSlug(env.npm_package_name),\n    slugFromPath(env.APP_BASE_PATH),\n    slugFromPath(env.VITE_APP_BASE_PATH),\n    slugFromUrl(env.APP_URL),\n    slugFromUrl(env.BETTER_AUTH_URL),\n    slugFromUrl(env.VITE_BETTER_AUTH_URL),\n    slugFromUrl(env.URL),\n    slugFromUrl(env.DEPLOY_URL),\n    slugFromUrl(env.DEPLOY_PRIME_URL),\n  ];\n\n  return candidates.filter((slug): slug is string => !!slug);\n}\n\nexport function resolveBuiltInAuthMarketing(\n  opts: ResolveBuiltInAuthMarketingOptions = {},\n): AuthMarketingContent | undefined {\n  for (const slug of candidateSlugs(opts)) {\n    const marketing = BUILT_IN_AUTH_MARKETING[slug];\n    if (marketing) return cloneMarketing(marketing);\n  }\n  return undefined;\n}\n\nexport function resolveBuiltInAuthMarketingByName(\n  value: string | undefined,\n): AuthMarketingContent | undefined {\n  const slug = normalizeSlug(value);\n  const marketing = slug ? BUILT_IN_AUTH_MARKETING[slug] : undefined;\n  return marketing ? cloneMarketing(marketing) : undefined;\n}\n"]}

package/docs/content/cloneable-saas.md

@@ -17,7 +17,7 @@ Each one is a real app you could use today, and the launching pad for your own v
 | ----------------------------------------- | -------------------------------------------------------------------------------------------------------------- |
 | [**Mail**](/docs/template-mail)           | An agent-native Superhuman. Inbox, labels, AI triage, keyboard-first, drafts and sends through the agent.      |
 | [**Calendar**](/docs/template-calendar)   | An agent-native Google Calendar. Events, sync, public booking links, agent-driven scheduling.                  |
-| [**Content**](/docs/template-content)     | An agent-native Notion / Google Docs. Markdown + Tiptap editor, Notion sync, real-time multi-user collab.      |
+| [**Content**](/docs/template-content)     | Open-source Obsidian for MDX. Local Markdown/MDX, Tiptap editor, Notion sync, real-time multi-user collab.     |
 | [**Brain**](/docs/template-brain)         | Clean company chat backed by cited institutional memory, approved sources, review gates, and citations.        |
 | [**Assets**](/docs/template-assets)       | Digital asset manager for brand libraries, uploads, references, and on-brand image/video generation.           |
 | [**Slides**](/docs/template-slides)       | An agent-native Google Slides. React-based decks the agent generates and edits directly.                       |

package/docs/content/getting-started.md

@@ -52,7 +52,7 @@ Each template is a complete app with UI, agent actions, database schema, and AI
 | Template                              | What it is                                                            |
 | ------------------------------------- | --------------------------------------------------------------------- |
 | [Calendar](/docs/template-calendar)   | Agent-native Google Calendar + Calendly-style booking                 |
-| [Content](/docs/template-content)     | Agent-native Notion / Google Docs                                     |
+| [Content](/docs/template-content)     | Open-source Obsidian for MDX                                          |
 | [Brain](/docs/template-brain)         | Company chat with cited institutional memory                          |
 | [Assets](/docs/template-assets)       | Brand asset libraries and generated media                             |
 | [Slides](/docs/template-slides)       | Agent-native Google Slides / Pitch                                    |

package/docs/content/local-file-mode.md

@@ -1,6 +1,6 @@
 ---
 title: "Local File Mode"
-description: "Run agent-native apps with local Markdown, MDX, and other repo files as the source of truth instead of SQL-backed records."
+description: "Run agent-native apps with local Markdown, MDX, and other repo files as the source of truth - including Obsidian-style MDX docs with custom components."
 ---
 
 # Local File Mode
@@ -16,12 +16,17 @@ Content editor, and saving writes back to the selected file. The same files can
 also be edited by Codex, Claude Code, the Agent-Native sidebar agent, or a normal
 editor.
 
+For Content, this makes the product feel like open-source Obsidian for MDX:
+your docs live as files, while the app adds a visual editor, agent actions,
+shareable copies, and rich interactive MDX components.
+
 Use Local File Mode when you want a repo-first workflow:
 
 - a docs repo with `docs/*.mdx`
 - a blog with `blog/*.mdx`
 - resources such as positioning, messaging, or team notes in `resources/*.md`
 - a personal Obsidian-style knowledge base with a richer MDX editor
+- docs that need interactive custom MDX blocks generated from local React code
 - app artifacts that should be easy for coding agents to inspect and patch
 
 Use database mode when you want the hosted collaborative app experience:

package/docs/content/template-content.md

@@ -1,11 +1,15 @@
 ---
 title: "Content"
-description: "A Notion-style document editor with an AI agent that can read, write, reorganize, and publish your pages — all in plain English."
+description: "Open-source Obsidian for MDX: edit local Markdown/MDX files, generate rich interactive custom blocks, and write with an AI agent."
 ---
 
 # Content
 
-A Notion-style document workspace where the agent can read, write, reorganize, and publish pages for you. Open a doc, ask "rewrite this paragraph to be more concise" or "create a page called Q4 Planning with sub-pages for Goals, Metrics, and Risks" — same result whether you do it yourself or ask.
+Content is open-source Obsidian for MDX: a local-file-friendly document
+workspace where the agent can read, write, reorganize, and publish pages for
+you. Open a doc, ask "rewrite this paragraph to be more concise" or "create a
+page called Q4 Planning with sub-pages for Goals, Metrics, and Risks" - same
+result whether you do it yourself or ask.
 
 <!-- screenshot:
   app: content
@@ -24,9 +28,13 @@ When you open the app, you'll see a sidebar tree of pages on the left, the edito
 - **Write rich text** with headings, lists, tables, code blocks, images, and links. Slash commands (`/`) insert blocks; selecting text pops up a formatting toolbar.
 - **Organize pages in a tree** — nest infinitely, drag to reorder, favorite pages you use often.
 - **Search across everything** with full-text search across titles and content.
-- **Sync with local Markdown/MDX files.** Use the `/local-files` view to export
-  your workspace to files, edit them in your own tools, preview changes, and
-  import them back.
+- **Edit local Markdown/MDX files like Obsidian.** Use the `/local-files` view
+  to export your workspace to files, edit them in your own tools, preview
+  changes, and import them back. In Local File Mode, Content writes straight to
+  the selected `.md` or `.mdx` file.
+- **Generate rich interactive custom blocks.** Register local React components,
+  insert them as MDX, and let the agent create or update component files for
+  your docs.
 - **Sync with Notion.** Link a local doc to a Notion page and pull or push content in either direction. Comments sync both ways too.
 - **Collaborate in real time.** Multiple people (and the agent) can edit the same doc at the same time.
 - **Share docs** with teammates or make them public — private by default, with viewer / editor / admin roles.
@@ -46,11 +54,13 @@ When you open the app, click **+ New page** in the sidebar, give it a title, and
 
 Select text and hit Cmd+I to focus the agent with that selection pre-loaded — "make this punchier" then operates on exactly what you highlighted.
 
-## Local Markdown files {#local-files}
+## Local Markdown/MDX files {#local-files}
 
 Content can round-trip documents through local files without cloning or running
-the Content app locally. Open `/local-files`, choose a folder in your browser or
-Agent Native Desktop, and export the current document tree as Markdown/MDX under
+the Content app locally. It feels like Obsidian for MDX: files stay inspectable
+and editable, while the app gives you a rich editor, agent actions, sharing, and
+custom blocks. Open `/local-files`, choose a folder in your browser or Agent
+Native Desktop, and export the current document tree as Markdown/MDX under
 `content/`.
 
 Each exported file contains frontmatter for document metadata (`id`, `title`,
@@ -70,19 +80,25 @@ truth instead of SQL documents. Add `agent-native.json` to a repo, set
 `content/`, and `resources/`. The standard Content editor then populates its
 left sidebar from those local `.md`/`.mdx` files and writes edits back to the
 selected file through the normal document actions. Use this for repo-first docs,
-blogs, resource libraries, or Obsidian-style personal content; switch back to
-database mode when you want hosted collaboration and SQL-backed sharing. See
-[Local File Mode](/docs/local-file-mode) for the standalone repo layout,
-configuration, custom MDX components, local `extensions/` widgets, and
-production safety guide.
+blogs, resource libraries, or Obsidian-style personal content with MDX-powered
+components; switch back to database mode when you want hosted collaboration and
+SQL-backed sharing. See [Local File Mode](/docs/local-file-mode) for the
+standalone repo layout, configuration, custom MDX components, local
+`extensions/` widgets, and production safety guide.
 
 ## Why it's interesting
 
-Three things make Content a good showcase of the framework:
+Five things make Content a good showcase of the framework:
 
-1. **Agent and editor share one Yjs document.** The same CRDT that prevents conflicts between two simultaneous human typists is what the agent writes through via `edit-document`. There is no separate AI path — the diff appears live in every open browser tab.
-2. **Notion sync as a two-way bridge.** Rather than replacing Notion, the template treats it as a peer: pull, push, bidirectional comment sync, conflict detection, and content-hash deduplication are all first-class. It demonstrates how agent-native apps can round-trip with external systems without losing their SQL-backed canonical form.
-3. **Inline databases alongside prose.** The `content_databases` / `content_database_items` / `document_property_definitions` stack shows how structured tabular data can live inside an agent-native document without needing a separate app or a custom Airtable integration.
+1. **Local MDX can be the source of truth.** Content can operate directly on
+   repo files while keeping the same editor and action surface, which makes it
+   feel like open-source Obsidian for MDX rather than a hosted-only doc store.
+2. **Custom interactive blocks are just local code.** Docs can use workspace
+   components such as tabs, calculators, or product-specific demos, and the
+   agent can generate or edit those components alongside the MDX.
+3. **Agent and editor share one Yjs document.** The same CRDT that prevents conflicts between two simultaneous human typists is what the agent writes through via `edit-document`. There is no separate AI path — the diff appears live in every open browser tab.
+4. **Notion sync as a two-way bridge.** Rather than replacing Notion, the template treats it as a peer: pull, push, bidirectional comment sync, conflict detection, and content-hash deduplication are all first-class. It demonstrates how agent-native apps can round-trip with external systems without losing their SQL-backed canonical form.
+5. **Inline databases alongside prose.** The `content_databases` / `content_database_items` / `document_property_definitions` stack shows how structured tabular data can live inside an agent-native document without needing a separate app or a custom Airtable integration.
 
 ## For developers
 
@@ -172,8 +188,10 @@ Local file workspaces can also provide repo-local React components through the
 configured `components` folder. The Content dev server imports PascalCase
 exports from those files, renders matching MDX tags such as `<ImpactCounter />`
 inside the editor, and exposes them in the slash menu under Local components.
-This keeps custom MDX blocks local to the workspace without cloning the Content
-app. A minimal workspace component can be:
+This is the "Obsidian for MDX" layer: custom MDX blocks stay local to the
+workspace, but the editor can render them and the agent can generate or update
+their source without cloning the Content app. A minimal workspace component can
+be:
 
 ```tsx
 // components/ImpactCounter.tsx

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.51.5",
+  "version": "0.51.6",
   "type": "module",
   "engines": {
     "node": ">=22"