@agent-native/core 0.59.1 → 0.61.0

package/dist/onboarding/default-steps.js

@@ -271,6 +271,107 @@ const emailStep = {
         return false;
     },
 };
+const githubRepositoryStep = {
+    id: "github-repository",
+    order: 50,
+    required: false,
+    title: "Connect a GitHub repository",
+    description: "Optional for cloud/headless repo work. Grants connector-scoped file read and write access without cloning a repo or running code.",
+    methods: [
+        {
+            id: "settings",
+            kind: "link",
+            primary: true,
+            label: "Open GitHub token settings",
+            description: "Save a fine-grained token scoped to the repositories this workspace may access.",
+            payload: {
+                url: "#secrets:GITHUB_TOKEN",
+                external: false,
+            },
+        },
+        {
+            id: "local-env",
+            kind: "form",
+            label: "Use local .env",
+            description: "For local/single-tenant work, save a token and optional default owner/repo.",
+            payload: {
+                writeScope: "workspace",
+                fields: [
+                    {
+                        key: "GITHUB_TOKEN",
+                        label: "GITHUB_TOKEN",
+                        placeholder: "github_pat_...",
+                        secret: true,
+                    },
+                    {
+                        key: "GITHUB_REPOSITORY",
+                        label: "GITHUB_REPOSITORY",
+                        placeholder: "owner/repo",
+                    },
+                ],
+            },
+        },
+    ],
+    isComplete: async (context) => {
+        const userEmail = context?.userEmail;
+        const orgId = context?.orgId ?? null;
+        if (userEmail) {
+            try {
+                const { resolveWorkspaceConnectionCredentialForApp } = await import("../workspace-connections/index.js");
+                const result = await resolveWorkspaceConnectionCredentialForApp({
+                    appId: process.env.AGENT_NATIVE_APP_ID ||
+                        process.env.APP_ID ||
+                        process.env.npm_package_name ||
+                        "app",
+                    provider: "github",
+                    key: "GITHUB_TOKEN",
+                    userEmail,
+                    orgId,
+                });
+                if (result.available)
+                    return true;
+            }
+            catch {
+                // Fall through to local credential stores.
+            }
+            try {
+                const { resolveCredential } = await import("../credentials/index.js");
+                if (await resolveCredential("GITHUB_TOKEN", { userEmail, orgId })) {
+                    return true;
+                }
+            }
+            catch {
+                // Fall through to app_secrets.
+            }
+            try {
+                const { readAppSecretMeta } = await import("../secrets/storage.js");
+                const refs = [{ scope: "user", scopeId: userEmail }];
+                if (orgId) {
+                    refs.push({ scope: "org", scopeId: orgId }, { scope: "workspace", scopeId: orgId });
+                }
+                else {
+                    refs.push({ scope: "workspace", scopeId: `solo:${userEmail}` });
+                }
+                for (const ref of refs) {
+                    const meta = await readAppSecretMeta({
+                        key: "GITHUB_TOKEN",
+                        scope: ref.scope,
+                        scopeId: ref.scopeId,
+                    });
+                    if (meta)
+                        return true;
+                }
+            }
+            catch {
+                // Fall through to local/single-tenant env.
+            }
+        }
+        if (!canUseDeployCredentialFallbackForRequest())
+            return false;
+        return !!(readDeployCredentialEnv("GITHUB_TOKEN") ||
+            readDeployCredentialEnv("GH_TOKEN"));
+    },
+};
 let registered = false;
 /** Idempotent. Safe to call from every plugin-mount call. */
 export function registerDefaultOnboardingSteps() {
@@ -281,5 +382,6 @@ export function registerDefaultOnboardingSteps() {
     registerOnboardingStep(databaseStep);
     registerOnboardingStep(authStep);
     registerOnboardingStep(emailStep);
+    registerOnboardingStep(githubRepositoryStep);
 }
 //# sourceMappingURL=default-steps.js.map

package/dist/onboarding/default-steps.js.map

@@ -1 +1 @@
-{"version":3,"file":"default-steps.js","sourceRoot":"","sources":["../../src/onboarding/default-steps.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEvD,OAAO,EACL,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,wCAAwC,EACxC,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAUlD,MAAM,eAAe,GAAmB;IACtC;QACE,QAAQ,EAAE,WAAW;QACrB,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,4CAA4C;KAC1D;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,sCAAsC;KACpD;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,4CAA4C;KAC1D;IACD;QACE,QAAQ,EAAE,YAAY;QACtB,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,iDAAiD;KAC/D;IACD;QACE,QAAQ,EAAE,MAAM;QAChB,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,4CAA4C;KAC1D;IACD;QACE,QAAQ,EAAE,SAAS;QACnB,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,2CAA2C;KACzD;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,yCAAyC;KACvD;CACF,CAAC;AAEF,MAAM,OAAO,GAAmB;IAC9B,EAAE,EAAE,KAAK;IACT,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,IAAI;IACd,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EAAE,gEAAgE;IAC7E,OAAO,EAAE;QACP;YACE,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,iBAAiB;YACxB,WAAW,EACT,+NAA+N;YACjO,OAAO,EAAE,IAAI;YACb,OAAO,EAAE;gBACP,KAAK,EAAE,KAAK;aACb;SACF;QACD,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE;YACvE,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YACzC,OAAO;gBACL,EAAE;gBACF,IAAI,EAAE,MAAe;gBACrB,KAAK;gBACL,WAAW;gBACX,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrC,OAAO,EAAE;oBACP,UAAU,EAAE,WAAoB;oBAChC,MAAM,EAAE;wBACN;4BACE,GAAG,EAAE,IAAI,CAAC,MAAM;4BAChB,KAAK,EAAE,IAAI,CAAC,MAAM;4BAClB,WAAW,EAAE,IAAI,CAAC,WAAW;4BAC7B,MAAM,EAAE,IAAI;yBACb;qBACF;iBACF;aACF,CAAC;QACJ,CAAC,CAAC;KACH;IACD,UAAU,EAAE,KAAK,IAAI,EAAE;QACrB,IAAI,CAAC;YACH,MAAM,EAAE,mCAAmC,EAAE,GAC3C,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;YACnD,IAAI,MAAM,mCAAmC,EAAE;gBAAE,OAAO,IAAI,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;gBACtE,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,IAAI,MAAM,2BAA2B,EAAE;gBAAE,OAAO,IAAI,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;QACD,IACE,wCAAwC,EAAE;YAC1C,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAC3D,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,8BAA8B,CAAC,MAAM,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF,CAAC;AAEF,6EAA6E;AAC7E,MAAM,YAAY,GAAmB;IACnC,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,UAAU;IACjB,WAAW,EACT,+GAA+G;IACjH,OAAO,EAAE;QACP;YACE,EAAE,EAAE,cAAc;YAClB,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,sDAAsD;YACnE,OAAO,EAAE;gBACP,UAAU,EAAE,WAAW;gBACvB,MAAM,EAAE;oBACN;wBACE,GAAG,EAAE,cAAc;wBACnB,KAAK,EAAE,cAAc;wBACrB,WAAW,EAAE,kDAAkD;qBAChE;oBACD;wBACE,GAAG,EAAE,qBAAqB;wBAC1B,KAAK,EAAE,iCAAiC;wBACxC,WAAW,EAAE,0CAA0C;wBACvD,MAAM,EAAE,IAAI;qBACb;iBACF;aACF;SACF;KACF;IACD,kEAAkE;IAClE,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI;CACvB,CAAC;AAEF,yEAAyE;AACzE,MAAM,QAAQ,GAAmB;IAC/B,EAAE,EAAE,MAAM;IACV,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,gBAAgB;IACvB,WAAW,EACT,qHAAqH;IACvH,OAAO,EAAE;QACP;YACE,EAAE,EAAE,cAAc;YAClB,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,cAAc;YACrB,WAAW,EAAE,6CAA6C;YAC1D,OAAO,EAAE;gBACP,UAAU,EAAE,WAAW;gBACvB,MAAM,EAAE;oBACN,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,kBAAkB,EAAE;oBACtD;wBACE,GAAG,EAAE,sBAAsB;wBAC3B,KAAK,EAAE,sBAAsB;wBAC7B,MAAM,EAAE,IAAI;qBACb;iBACF;aACF;SACF;QACD;YACE,EAAE,EAAE,cAAc;YAClB,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,cAAc;YACrB,WAAW,EAAE,6CAA6C;YAC1D,OAAO,EAAE;gBACP,UAAU,EAAE,WAAW;gBACvB,MAAM,EAAE;oBACN,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,kBAAkB,EAAE;oBACtD;wBACE,GAAG,EAAE,sBAAsB;wBAC3B,KAAK,EAAE,sBAAsB;wBAC7B,MAAM,EAAE,IAAI;qBACb;iBACF;aACF;SACF;KACF;IACD,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI;CACvB,CAAC;AAEF,6EAA6E;AAC7E,MAAM,SAAS,GAAmB;IAChC,EAAE,EAAE,OAAO;IACX,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,gBAAgB;IACvB,WAAW,EACT,iIAAiI;IACnI,OAAO,EAAE;QACP;YACE,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,QAAQ;YACf,WAAW,EAAE,qCAAqC;YAClD,OAAO,EAAE;gBACP,UAAU,EAAE,WAAW;gBACvB,MAAM,EAAE;oBACN;wBACE,GAAG,EAAE,gBAAgB;wBACrB,KAAK,EAAE,gBAAgB;wBACvB,WAAW,EAAE,QAAQ;wBACrB,MAAM,EAAE,IAAI;qBACb;oBACD;wBACE,GAAG,EAAE,YAAY;wBACjB,KAAK,EAAE,2BAA2B;wBAClC,WAAW,EAAE,uCAAuC;qBACrD;oBACD;wBACE,GAAG,EAAE,UAAU;wBACf,KAAK,EAAE,mCAAmC;wBAC1C,WAAW,EAAE,YAAY;qBAC1B;iBACF;aACF;SACF;QACD;YACE,EAAE,EAAE,UAAU;YACd,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,UAAU;YACjB,WAAW,EAAE,uCAAuC;YACpD,OAAO,EAAE;gBACP,UAAU,EAAE,WAAW;gBACvB,MAAM,EAAE;oBACN;wBACE,GAAG,EAAE,kBAAkB;wBACvB,KAAK,EAAE,kBAAkB;wBACzB,WAAW,EAAE,QAAQ;wBACrB,MAAM,EAAE,IAAI;qBACb;oBACD;wBACE,GAAG,EAAE,YAAY;wBACjB,KAAK,EAAE,2BAA2B;wBAClC,WAAW,EAAE,uCAAuC;qBACrD;iBACF;aACF;SACF;KACF;IACD,UAAU,EAAE,GAAG,EAAE;QACf,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC;QAC5C,uEAAuE;QACvE,wEAAwE;QACxE,iBAAiB;QACjB,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB;YAAE,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAClE,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAC;AAEF,IAAI,UAAU,GAAG,KAAK,CAAC;AAEvB,6DAA6D;AAC7D,MAAM,UAAU,8BAA8B;IAC5C,IAAI,UAAU;QAAE,OAAO;IACvB,UAAU,GAAG,IAAI,CAAC;IAClB,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,sBAAsB,CAAC,YAAY,CAAC,CAAC;IACrC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACjC,sBAAsB,CAAC,SAAS,CAAC,CAAC;AACpC,CAAC","sourcesContent":["/**\n * Default framework-level onboarding steps.\n *\n * Registered when `createOnboardingPlugin()` mounts (auto-mount or explicit).\n * Templates can override any step by registering another step with the same\n * `id` after these have been registered.\n */\n\nimport { registerOnboardingStep } from \"./registry.js\";\nimport type { OnboardingStep } from \"./types.js\";\nimport {\n  PROVIDER_ENV_META,\n  PROVIDER_ENV_VARS,\n} from \"../agent/engine/provider-env-vars.js\";\nimport {\n  detectEngineFromUserSecrets,\n  isAgentEngineSettingConfigured,\n} from \"../agent/engine/registry.js\";\nimport {\n  canUseDeployCredentialFallbackForRequest,\n  readDeployCredentialEnv,\n} from \"../server/credential-provider.js\";\nimport { getSetting } from \"../settings/store.js\";\n\ntype LlmKeyMethod = {\n  provider: keyof typeof PROVIDER_ENV_META;\n  id: string;\n  label: string;\n  description: string;\n  primary?: boolean;\n};\n\nconst LLM_KEY_METHODS: LlmKeyMethod[] = [\n  {\n    provider: \"anthropic\",\n    id: \"anthropic-key\",\n    label: \"Anthropic\",\n    description: \"Claude models with your own Anthropic key.\",\n  },\n  {\n    provider: \"openai\",\n    id: \"openai-key\",\n    label: \"OpenAI\",\n    description: \"GPT models with your own OpenAI key.\",\n  },\n  {\n    provider: \"google\",\n    id: \"google-key\",\n    label: \"Google Gemini\",\n    description: \"Gemini models with your own Google AI key.\",\n  },\n  {\n    provider: \"openrouter\",\n    id: \"openrouter-key\",\n    label: \"OpenRouter\",\n    description: \"OpenRouter models with your own OpenRouter key.\",\n  },\n  {\n    provider: \"groq\",\n    id: \"groq-key\",\n    label: \"Groq\",\n    description: \"Groq-hosted models with your own Groq key.\",\n  },\n  {\n    provider: \"mistral\",\n    id: \"mistral-key\",\n    label: \"Mistral\",\n    description: \"Mistral models with your own Mistral key.\",\n  },\n  {\n    provider: \"cohere\",\n    id: \"cohere-key\",\n    label: \"Cohere\",\n    description: \"Cohere models with your own Cohere key.\",\n  },\n];\n\nconst llmStep: OnboardingStep = {\n  id: \"llm\",\n  order: 10,\n  required: true,\n  title: \"Connect an AI engine\",\n  description: \"Use Builder's managed gateway, or bring your own provider key.\",\n  methods: [\n    {\n      id: \"builder\",\n      kind: \"builder-cli-auth\",\n      label: \"Connect Builder\",\n      description:\n        \"Connect the Builder space where this app should run. This unlocks managed LLM credits, web search, browser automation, and file uploads. Cloud code changes appear when Builder Cloud Agents are available for the workspace.\",\n      primary: true,\n      payload: {\n        scope: \"llm\",\n      },\n    },\n    ...LLM_KEY_METHODS.map(({ provider, id, label, description, primary }) => {\n      const meta = PROVIDER_ENV_META[provider];\n      return {\n        id,\n        kind: \"form\" as const,\n        label,\n        description,\n        ...(primary ? { primary: true } : {}),\n        payload: {\n          writeScope: \"workspace\" as const,\n          fields: [\n            {\n              key: meta.envVar,\n              label: meta.envVar,\n              placeholder: meta.placeholder,\n              secret: true,\n            },\n          ],\n        },\n      };\n    }),\n  ],\n  isComplete: async () => {\n    try {\n      const { resolveHasCompleteBuilderConnection } =\n        await import(\"../server/credential-provider.js\");\n      if (await resolveHasCompleteBuilderConnection()) return true;\n    } catch {\n      if (process.env.BUILDER_PRIVATE_KEY && process.env.BUILDER_PUBLIC_KEY) {\n        return true;\n      }\n    }\n    try {\n      if (await detectEngineFromUserSecrets()) return true;\n    } catch {\n      // Fall through to legacy/env detection.\n    }\n    if (\n      canUseDeployCredentialFallbackForRequest() &&\n      PROVIDER_ENV_VARS.some((k) => !!readDeployCredentialEnv(k))\n    ) {\n      return true;\n    }\n    try {\n      return isAgentEngineSettingConfigured(await getSetting(\"agent-engine\"));\n    } catch {\n      return false;\n    }\n  },\n};\n\n/** Step 2 — where application data lives. The default DB is non-blocking. */\nconst databaseStep: OnboardingStep = {\n  id: \"database\",\n  order: 20,\n  required: false,\n  title: \"Database\",\n  description:\n    \"Agent-native stores app data in SQL. Set DATABASE_URL when you want to point this app at a specific database.\",\n  methods: [\n    {\n      id: \"database-url\",\n      kind: \"form\",\n      label: \"Set DATABASE_URL\",\n      description: \"Paste the SQL connection string this app should use.\",\n      payload: {\n        writeScope: \"workspace\",\n        fields: [\n          {\n            key: \"DATABASE_URL\",\n            label: \"DATABASE_URL\",\n            placeholder: \"postgres://..., libsql://..., file:./data/app.db\",\n          },\n          {\n            key: \"DATABASE_AUTH_TOKEN\",\n            label: \"DATABASE_AUTH_TOKEN (if needed)\",\n            placeholder: \"Token for providers such as Turso/libSQL\",\n            secret: true,\n          },\n        ],\n      },\n    },\n  ],\n  // The default local database means this step is always satisfied.\n  isComplete: () => true,\n};\n\n/** Step 3 — how users sign in. Built-in account auth is non-blocking. */\nconst authStep: OnboardingStep = {\n  id: \"auth\",\n  order: 30,\n  required: false,\n  title: \"Authentication\",\n  description:\n    \"Built-in email/password accounts work by default. Add OAuth or access tokens only if you want another sign-in path.\",\n  methods: [\n    {\n      id: \"google-oauth\",\n      kind: \"form\",\n      label: \"Google OAuth\",\n      description: \"Add Google as an optional sign-in provider.\",\n      payload: {\n        writeScope: \"workspace\",\n        fields: [\n          { key: \"GOOGLE_CLIENT_ID\", label: \"GOOGLE_CLIENT_ID\" },\n          {\n            key: \"GOOGLE_CLIENT_SECRET\",\n            label: \"GOOGLE_CLIENT_SECRET\",\n            secret: true,\n          },\n        ],\n      },\n    },\n    {\n      id: \"github-oauth\",\n      kind: \"form\",\n      label: \"GitHub OAuth\",\n      description: \"Add GitHub as an optional sign-in provider.\",\n      payload: {\n        writeScope: \"workspace\",\n        fields: [\n          { key: \"GITHUB_CLIENT_ID\", label: \"GITHUB_CLIENT_ID\" },\n          {\n            key: \"GITHUB_CLIENT_SECRET\",\n            label: \"GITHUB_CLIENT_SECRET\",\n            secret: true,\n          },\n        ],\n      },\n    },\n  ],\n  isComplete: () => true,\n};\n\n/** Step 4 — transactional email (password resets, invitations). Optional. */\nconst emailStep: OnboardingStep = {\n  id: \"email\",\n  order: 40,\n  required: false,\n  title: \"Email delivery\",\n  description:\n    \"Optional for local work. Before deploying with password resets, invitations, or share notifications, connect an email provider.\",\n  methods: [\n    {\n      id: \"resend\",\n      kind: \"form\",\n      label: \"Resend\",\n      description: \"Use Resend for transactional email.\",\n      payload: {\n        writeScope: \"workspace\",\n        fields: [\n          {\n            key: \"RESEND_API_KEY\",\n            label: \"RESEND_API_KEY\",\n            placeholder: \"re_...\",\n            secret: true,\n          },\n          {\n            key: \"EMAIL_FROM\",\n            label: \"EMAIL_FROM (from address)\",\n            placeholder: \"Agent Native <noreply@yourdomain.com>\",\n          },\n          {\n            key: \"APP_NAME\",\n            label: \"APP_NAME (shown in invite emails)\",\n            placeholder: \"Acme Forms\",\n          },\n        ],\n      },\n    },\n    {\n      id: \"sendgrid\",\n      kind: \"form\",\n      label: \"SendGrid\",\n      description: \"Use SendGrid for transactional email.\",\n      payload: {\n        writeScope: \"workspace\",\n        fields: [\n          {\n            key: \"SENDGRID_API_KEY\",\n            label: \"SENDGRID_API_KEY\",\n            placeholder: \"SG....\",\n            secret: true,\n          },\n          {\n            key: \"EMAIL_FROM\",\n            label: \"EMAIL_FROM (from address)\",\n            placeholder: \"Agent Native <noreply@yourdomain.com>\",\n          },\n        ],\n      },\n    },\n  ],\n  isComplete: () => {\n    if (process.env.RESEND_API_KEY) return true;\n    // SendGrid rejects Resend's sandbox sender, so EMAIL_FROM must also be\n    // set — otherwise sendEmail() throws at runtime even though the API key\n    // is configured.\n    if (process.env.SENDGRID_API_KEY) return !!process.env.EMAIL_FROM;\n    return false;\n  },\n};\n\nlet registered = false;\n\n/** Idempotent. Safe to call from every plugin-mount call. */\nexport function registerDefaultOnboardingSteps(): void {\n  if (registered) return;\n  registered = true;\n  registerOnboardingStep(llmStep);\n  registerOnboardingStep(databaseStep);\n  registerOnboardingStep(authStep);\n  registerOnboardingStep(emailStep);\n}\n"]}
+{"version":3,"file":"default-steps.js","sourceRoot":"","sources":["../../src/onboarding/default-steps.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEvD,OAAO,EACL,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,wCAAwC,EACxC,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAUlD,MAAM,eAAe,GAAmB;IACtC;QACE,QAAQ,EAAE,WAAW;QACrB,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,4CAA4C;KAC1D;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,sCAAsC;KACpD;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,4CAA4C;KAC1D;IACD;QACE,QAAQ,EAAE,YAAY;QACtB,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,iDAAiD;KAC/D;IACD;QACE,QAAQ,EAAE,MAAM;QAChB,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,4CAA4C;KAC1D;IACD;QACE,QAAQ,EAAE,SAAS;QACnB,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,2CAA2C;KACzD;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,yCAAyC;KACvD;CACF,CAAC;AAEF,MAAM,OAAO,GAAmB;IAC9B,EAAE,EAAE,KAAK;IACT,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,IAAI;IACd,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EAAE,gEAAgE;IAC7E,OAAO,EAAE;QACP;YACE,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,iBAAiB;YACxB,WAAW,EACT,+NAA+N;YACjO,OAAO,EAAE,IAAI;YACb,OAAO,EAAE;gBACP,KAAK,EAAE,KAAK;aACb;SACF;QACD,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE;YACvE,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YACzC,OAAO;gBACL,EAAE;gBACF,IAAI,EAAE,MAAe;gBACrB,KAAK;gBACL,WAAW;gBACX,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrC,OAAO,EAAE;oBACP,UAAU,EAAE,WAAoB;oBAChC,MAAM,EAAE;wBACN;4BACE,GAAG,EAAE,IAAI,CAAC,MAAM;4BAChB,KAAK,EAAE,IAAI,CAAC,MAAM;4BAClB,WAAW,EAAE,IAAI,CAAC,WAAW;4BAC7B,MAAM,EAAE,IAAI;yBACb;qBACF;iBACF;aACF,CAAC;QACJ,CAAC,CAAC;KACH;IACD,UAAU,EAAE,KAAK,IAAI,EAAE;QACrB,IAAI,CAAC;YACH,MAAM,EAAE,mCAAmC,EAAE,GAC3C,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;YACnD,IAAI,MAAM,mCAAmC,EAAE;gBAAE,OAAO,IAAI,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;gBACtE,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,IAAI,MAAM,2BAA2B,EAAE;gBAAE,OAAO,IAAI,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;QACD,IACE,wCAAwC,EAAE;YAC1C,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAC3D,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,8BAA8B,CAAC,MAAM,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF,CAAC;AAEF,6EAA6E;AAC7E,MAAM,YAAY,GAAmB;IACnC,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,UAAU;IACjB,WAAW,EACT,+GAA+G;IACjH,OAAO,EAAE;QACP;YACE,EAAE,EAAE,cAAc;YAClB,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,sDAAsD;YACnE,OAAO,EAAE;gBACP,UAAU,EAAE,WAAW;gBACvB,MAAM,EAAE;oBACN;wBACE,GAAG,EAAE,cAAc;wBACnB,KAAK,EAAE,cAAc;wBACrB,WAAW,EAAE,kDAAkD;qBAChE;oBACD;wBACE,GAAG,EAAE,qBAAqB;wBAC1B,KAAK,EAAE,iCAAiC;wBACxC,WAAW,EAAE,0CAA0C;wBACvD,MAAM,EAAE,IAAI;qBACb;iBACF;aACF;SACF;KACF;IACD,kEAAkE;IAClE,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI;CACvB,CAAC;AAEF,yEAAyE;AACzE,MAAM,QAAQ,GAAmB;IAC/B,EAAE,EAAE,MAAM;IACV,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,gBAAgB;IACvB,WAAW,EACT,qHAAqH;IACvH,OAAO,EAAE;QACP;YACE,EAAE,EAAE,cAAc;YAClB,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,cAAc;YACrB,WAAW,EAAE,6CAA6C;YAC1D,OAAO,EAAE;gBACP,UAAU,EAAE,WAAW;gBACvB,MAAM,EAAE;oBACN,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,kBAAkB,EAAE;oBACtD;wBACE,GAAG,EAAE,sBAAsB;wBAC3B,KAAK,EAAE,sBAAsB;wBAC7B,MAAM,EAAE,IAAI;qBACb;iBACF;aACF;SACF;QACD;YACE,EAAE,EAAE,cAAc;YAClB,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,cAAc;YACrB,WAAW,EAAE,6CAA6C;YAC1D,OAAO,EAAE;gBACP,UAAU,EAAE,WAAW;gBACvB,MAAM,EAAE;oBACN,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,kBAAkB,EAAE;oBACtD;wBACE,GAAG,EAAE,sBAAsB;wBAC3B,KAAK,EAAE,sBAAsB;wBAC7B,MAAM,EAAE,IAAI;qBACb;iBACF;aACF;SACF;KACF;IACD,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI;CACvB,CAAC;AAEF,6EAA6E;AAC7E,MAAM,SAAS,GAAmB;IAChC,EAAE,EAAE,OAAO;IACX,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,gBAAgB;IACvB,WAAW,EACT,iIAAiI;IACnI,OAAO,EAAE;QACP;YACE,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,QAAQ;YACf,WAAW,EAAE,qCAAqC;YAClD,OAAO,EAAE;gBACP,UAAU,EAAE,WAAW;gBACvB,MAAM,EAAE;oBACN;wBACE,GAAG,EAAE,gBAAgB;wBACrB,KAAK,EAAE,gBAAgB;wBACvB,WAAW,EAAE,QAAQ;wBACrB,MAAM,EAAE,IAAI;qBACb;oBACD;wBACE,GAAG,EAAE,YAAY;wBACjB,KAAK,EAAE,2BAA2B;wBAClC,WAAW,EAAE,uCAAuC;qBACrD;oBACD;wBACE,GAAG,EAAE,UAAU;wBACf,KAAK,EAAE,mCAAmC;wBAC1C,WAAW,EAAE,YAAY;qBAC1B;iBACF;aACF;SACF;QACD;YACE,EAAE,EAAE,UAAU;YACd,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,UAAU;YACjB,WAAW,EAAE,uCAAuC;YACpD,OAAO,EAAE;gBACP,UAAU,EAAE,WAAW;gBACvB,MAAM,EAAE;oBACN;wBACE,GAAG,EAAE,kBAAkB;wBACvB,KAAK,EAAE,kBAAkB;wBACzB,WAAW,EAAE,QAAQ;wBACrB,MAAM,EAAE,IAAI;qBACb;oBACD;wBACE,GAAG,EAAE,YAAY;wBACjB,KAAK,EAAE,2BAA2B;wBAClC,WAAW,EAAE,uCAAuC;qBACrD;iBACF;aACF;SACF;KACF;IACD,UAAU,EAAE,GAAG,EAAE;QACf,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC;QAC5C,uEAAuE;QACvE,wEAAwE;QACxE,iBAAiB;QACjB,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB;YAAE,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAClE,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAC;AAEF,MAAM,oBAAoB,GAAmB;IAC3C,EAAE,EAAE,mBAAmB;IACvB,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,6BAA6B;IACpC,WAAW,EACT,mIAAmI;IACrI,OAAO,EAAE;QACP;YACE,EAAE,EAAE,UAAU;YACd,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,4BAA4B;YACnC,WAAW,EACT,iFAAiF;YACnF,OAAO,EAAE;gBACP,GAAG,EAAE,uBAAuB;gBAC5B,QAAQ,EAAE,KAAK;aAChB;SACF;QACD;YACE,EAAE,EAAE,WAAW;YACf,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,gBAAgB;YACvB,WAAW,EACT,6EAA6E;YAC/E,OAAO,EAAE;gBACP,UAAU,EAAE,WAAW;gBACvB,MAAM,EAAE;oBACN;wBACE,GAAG,EAAE,cAAc;wBACnB,KAAK,EAAE,cAAc;wBACrB,WAAW,EAAE,gBAAgB;wBAC7B,MAAM,EAAE,IAAI;qBACb;oBACD;wBACE,GAAG,EAAE,mBAAmB;wBACxB,KAAK,EAAE,mBAAmB;wBAC1B,WAAW,EAAE,YAAY;qBAC1B;iBACF;aACF;SACF;KACF;IACD,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC5B,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,CAAC;QACrC,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC;QACrC,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,EAAE,0CAA0C,EAAE,GAClD,MAAM,MAAM,CAAC,mCAAmC,CAAC,CAAC;gBACpD,MAAM,MAAM,GAAG,MAAM,0CAA0C,CAAC;oBAC9D,KAAK,EACH,OAAO,CAAC,GAAG,CAAC,mBAAmB;wBAC/B,OAAO,CAAC,GAAG,CAAC,MAAM;wBAClB,OAAO,CAAC,GAAG,CAAC,gBAAgB;wBAC5B,KAAK;oBACP,QAAQ,EAAE,QAAQ;oBAClB,GAAG,EAAE,cAAc;oBACnB,SAAS;oBACT,KAAK;iBACN,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,SAAS;oBAAE,OAAO,IAAI,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;YAC7C,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;gBACtE,IAAI,MAAM,iBAAiB,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;oBAClE,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,+BAA+B;YACjC,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;gBACpE,MAAM,IAAI,GAGL,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC7C,IAAI,KAAK,EAAE,CAAC;oBACV,IAAI,CAAC,IAAI,CACP,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAChC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CACvC,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,SAAS,EAAE,EAAE,CAAC,CAAC;gBAClE,CAAC;gBACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC;wBACnC,GAAG,EAAE,cAAc;wBACnB,KAAK,EAAE,GAAG,CAAC,KAAK;wBAChB,OAAO,EAAE,GAAG,CAAC,OAAO;qBACrB,CAAC,CAAC;oBACH,IAAI,IAAI;wBAAE,OAAO,IAAI,CAAC;gBACxB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;YAC7C,CAAC;QACH,CAAC;QAED,IAAI,CAAC,wCAAwC,EAAE;YAAE,OAAO,KAAK,CAAC;QAC9D,OAAO,CAAC,CAAC,CACP,uBAAuB,CAAC,cAAc,CAAC;YACvC,uBAAuB,CAAC,UAAU,CAAC,CACpC,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,IAAI,UAAU,GAAG,KAAK,CAAC;AAEvB,6DAA6D;AAC7D,MAAM,UAAU,8BAA8B;IAC5C,IAAI,UAAU;QAAE,OAAO;IACvB,UAAU,GAAG,IAAI,CAAC;IAClB,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,sBAAsB,CAAC,YAAY,CAAC,CAAC;IACrC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACjC,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAClC,sBAAsB,CAAC,oBAAoB,CAAC,CAAC;AAC/C,CAAC","sourcesContent":["/**\n * Default framework-level onboarding steps.\n *\n * Registered when `createOnboardingPlugin()` mounts (auto-mount or explicit).\n * Templates can override any step by registering another step with the same\n * `id` after these have been registered.\n */\n\nimport { registerOnboardingStep } from \"./registry.js\";\nimport type { OnboardingStep } from \"./types.js\";\nimport {\n  PROVIDER_ENV_META,\n  PROVIDER_ENV_VARS,\n} from \"../agent/engine/provider-env-vars.js\";\nimport {\n  detectEngineFromUserSecrets,\n  isAgentEngineSettingConfigured,\n} from \"../agent/engine/registry.js\";\nimport {\n  canUseDeployCredentialFallbackForRequest,\n  readDeployCredentialEnv,\n} from \"../server/credential-provider.js\";\nimport { getSetting } from \"../settings/store.js\";\n\ntype LlmKeyMethod = {\n  provider: keyof typeof PROVIDER_ENV_META;\n  id: string;\n  label: string;\n  description: string;\n  primary?: boolean;\n};\n\nconst LLM_KEY_METHODS: LlmKeyMethod[] = [\n  {\n    provider: \"anthropic\",\n    id: \"anthropic-key\",\n    label: \"Anthropic\",\n    description: \"Claude models with your own Anthropic key.\",\n  },\n  {\n    provider: \"openai\",\n    id: \"openai-key\",\n    label: \"OpenAI\",\n    description: \"GPT models with your own OpenAI key.\",\n  },\n  {\n    provider: \"google\",\n    id: \"google-key\",\n    label: \"Google Gemini\",\n    description: \"Gemini models with your own Google AI key.\",\n  },\n  {\n    provider: \"openrouter\",\n    id: \"openrouter-key\",\n    label: \"OpenRouter\",\n    description: \"OpenRouter models with your own OpenRouter key.\",\n  },\n  {\n    provider: \"groq\",\n    id: \"groq-key\",\n    label: \"Groq\",\n    description: \"Groq-hosted models with your own Groq key.\",\n  },\n  {\n    provider: \"mistral\",\n    id: \"mistral-key\",\n    label: \"Mistral\",\n    description: \"Mistral models with your own Mistral key.\",\n  },\n  {\n    provider: \"cohere\",\n    id: \"cohere-key\",\n    label: \"Cohere\",\n    description: \"Cohere models with your own Cohere key.\",\n  },\n];\n\nconst llmStep: OnboardingStep = {\n  id: \"llm\",\n  order: 10,\n  required: true,\n  title: \"Connect an AI engine\",\n  description: \"Use Builder's managed gateway, or bring your own provider key.\",\n  methods: [\n    {\n      id: \"builder\",\n      kind: \"builder-cli-auth\",\n      label: \"Connect Builder\",\n      description:\n        \"Connect the Builder space where this app should run. This unlocks managed LLM credits, web search, browser automation, and file uploads. Cloud code changes appear when Builder Cloud Agents are available for the workspace.\",\n      primary: true,\n      payload: {\n        scope: \"llm\",\n      },\n    },\n    ...LLM_KEY_METHODS.map(({ provider, id, label, description, primary }) => {\n      const meta = PROVIDER_ENV_META[provider];\n      return {\n        id,\n        kind: \"form\" as const,\n        label,\n        description,\n        ...(primary ? { primary: true } : {}),\n        payload: {\n          writeScope: \"workspace\" as const,\n          fields: [\n            {\n              key: meta.envVar,\n              label: meta.envVar,\n              placeholder: meta.placeholder,\n              secret: true,\n            },\n          ],\n        },\n      };\n    }),\n  ],\n  isComplete: async () => {\n    try {\n      const { resolveHasCompleteBuilderConnection } =\n        await import(\"../server/credential-provider.js\");\n      if (await resolveHasCompleteBuilderConnection()) return true;\n    } catch {\n      if (process.env.BUILDER_PRIVATE_KEY && process.env.BUILDER_PUBLIC_KEY) {\n        return true;\n      }\n    }\n    try {\n      if (await detectEngineFromUserSecrets()) return true;\n    } catch {\n      // Fall through to legacy/env detection.\n    }\n    if (\n      canUseDeployCredentialFallbackForRequest() &&\n      PROVIDER_ENV_VARS.some((k) => !!readDeployCredentialEnv(k))\n    ) {\n      return true;\n    }\n    try {\n      return isAgentEngineSettingConfigured(await getSetting(\"agent-engine\"));\n    } catch {\n      return false;\n    }\n  },\n};\n\n/** Step 2 — where application data lives. The default DB is non-blocking. */\nconst databaseStep: OnboardingStep = {\n  id: \"database\",\n  order: 20,\n  required: false,\n  title: \"Database\",\n  description:\n    \"Agent-native stores app data in SQL. Set DATABASE_URL when you want to point this app at a specific database.\",\n  methods: [\n    {\n      id: \"database-url\",\n      kind: \"form\",\n      label: \"Set DATABASE_URL\",\n      description: \"Paste the SQL connection string this app should use.\",\n      payload: {\n        writeScope: \"workspace\",\n        fields: [\n          {\n            key: \"DATABASE_URL\",\n            label: \"DATABASE_URL\",\n            placeholder: \"postgres://..., libsql://..., file:./data/app.db\",\n          },\n          {\n            key: \"DATABASE_AUTH_TOKEN\",\n            label: \"DATABASE_AUTH_TOKEN (if needed)\",\n            placeholder: \"Token for providers such as Turso/libSQL\",\n            secret: true,\n          },\n        ],\n      },\n    },\n  ],\n  // The default local database means this step is always satisfied.\n  isComplete: () => true,\n};\n\n/** Step 3 — how users sign in. Built-in account auth is non-blocking. */\nconst authStep: OnboardingStep = {\n  id: \"auth\",\n  order: 30,\n  required: false,\n  title: \"Authentication\",\n  description:\n    \"Built-in email/password accounts work by default. Add OAuth or access tokens only if you want another sign-in path.\",\n  methods: [\n    {\n      id: \"google-oauth\",\n      kind: \"form\",\n      label: \"Google OAuth\",\n      description: \"Add Google as an optional sign-in provider.\",\n      payload: {\n        writeScope: \"workspace\",\n        fields: [\n          { key: \"GOOGLE_CLIENT_ID\", label: \"GOOGLE_CLIENT_ID\" },\n          {\n            key: \"GOOGLE_CLIENT_SECRET\",\n            label: \"GOOGLE_CLIENT_SECRET\",\n            secret: true,\n          },\n        ],\n      },\n    },\n    {\n      id: \"github-oauth\",\n      kind: \"form\",\n      label: \"GitHub OAuth\",\n      description: \"Add GitHub as an optional sign-in provider.\",\n      payload: {\n        writeScope: \"workspace\",\n        fields: [\n          { key: \"GITHUB_CLIENT_ID\", label: \"GITHUB_CLIENT_ID\" },\n          {\n            key: \"GITHUB_CLIENT_SECRET\",\n            label: \"GITHUB_CLIENT_SECRET\",\n            secret: true,\n          },\n        ],\n      },\n    },\n  ],\n  isComplete: () => true,\n};\n\n/** Step 4 — transactional email (password resets, invitations). Optional. */\nconst emailStep: OnboardingStep = {\n  id: \"email\",\n  order: 40,\n  required: false,\n  title: \"Email delivery\",\n  description:\n    \"Optional for local work. Before deploying with password resets, invitations, or share notifications, connect an email provider.\",\n  methods: [\n    {\n      id: \"resend\",\n      kind: \"form\",\n      label: \"Resend\",\n      description: \"Use Resend for transactional email.\",\n      payload: {\n        writeScope: \"workspace\",\n        fields: [\n          {\n            key: \"RESEND_API_KEY\",\n            label: \"RESEND_API_KEY\",\n            placeholder: \"re_...\",\n            secret: true,\n          },\n          {\n            key: \"EMAIL_FROM\",\n            label: \"EMAIL_FROM (from address)\",\n            placeholder: \"Agent Native <noreply@yourdomain.com>\",\n          },\n          {\n            key: \"APP_NAME\",\n            label: \"APP_NAME (shown in invite emails)\",\n            placeholder: \"Acme Forms\",\n          },\n        ],\n      },\n    },\n    {\n      id: \"sendgrid\",\n      kind: \"form\",\n      label: \"SendGrid\",\n      description: \"Use SendGrid for transactional email.\",\n      payload: {\n        writeScope: \"workspace\",\n        fields: [\n          {\n            key: \"SENDGRID_API_KEY\",\n            label: \"SENDGRID_API_KEY\",\n            placeholder: \"SG....\",\n            secret: true,\n          },\n          {\n            key: \"EMAIL_FROM\",\n            label: \"EMAIL_FROM (from address)\",\n            placeholder: \"Agent Native <noreply@yourdomain.com>\",\n          },\n        ],\n      },\n    },\n  ],\n  isComplete: () => {\n    if (process.env.RESEND_API_KEY) return true;\n    // SendGrid rejects Resend's sandbox sender, so EMAIL_FROM must also be\n    // set — otherwise sendEmail() throws at runtime even though the API key\n    // is configured.\n    if (process.env.SENDGRID_API_KEY) return !!process.env.EMAIL_FROM;\n    return false;\n  },\n};\n\nconst githubRepositoryStep: OnboardingStep = {\n  id: \"github-repository\",\n  order: 50,\n  required: false,\n  title: \"Connect a GitHub repository\",\n  description:\n    \"Optional for cloud/headless repo work. Grants connector-scoped file read and write access without cloning a repo or running code.\",\n  methods: [\n    {\n      id: \"settings\",\n      kind: \"link\",\n      primary: true,\n      label: \"Open GitHub token settings\",\n      description:\n        \"Save a fine-grained token scoped to the repositories this workspace may access.\",\n      payload: {\n        url: \"#secrets:GITHUB_TOKEN\",\n        external: false,\n      },\n    },\n    {\n      id: \"local-env\",\n      kind: \"form\",\n      label: \"Use local .env\",\n      description:\n        \"For local/single-tenant work, save a token and optional default owner/repo.\",\n      payload: {\n        writeScope: \"workspace\",\n        fields: [\n          {\n            key: \"GITHUB_TOKEN\",\n            label: \"GITHUB_TOKEN\",\n            placeholder: \"github_pat_...\",\n            secret: true,\n          },\n          {\n            key: \"GITHUB_REPOSITORY\",\n            label: \"GITHUB_REPOSITORY\",\n            placeholder: \"owner/repo\",\n          },\n        ],\n      },\n    },\n  ],\n  isComplete: async (context) => {\n    const userEmail = context?.userEmail;\n    const orgId = context?.orgId ?? null;\n    if (userEmail) {\n      try {\n        const { resolveWorkspaceConnectionCredentialForApp } =\n          await import(\"../workspace-connections/index.js\");\n        const result = await resolveWorkspaceConnectionCredentialForApp({\n          appId:\n            process.env.AGENT_NATIVE_APP_ID ||\n            process.env.APP_ID ||\n            process.env.npm_package_name ||\n            \"app\",\n          provider: \"github\",\n          key: \"GITHUB_TOKEN\",\n          userEmail,\n          orgId,\n        });\n        if (result.available) return true;\n      } catch {\n        // Fall through to local credential stores.\n      }\n\n      try {\n        const { resolveCredential } = await import(\"../credentials/index.js\");\n        if (await resolveCredential(\"GITHUB_TOKEN\", { userEmail, orgId })) {\n          return true;\n        }\n      } catch {\n        // Fall through to app_secrets.\n      }\n\n      try {\n        const { readAppSecretMeta } = await import(\"../secrets/storage.js\");\n        const refs: Array<{\n          scope: \"user\" | \"org\" | \"workspace\";\n          scopeId: string;\n        }> = [{ scope: \"user\", scopeId: userEmail }];\n        if (orgId) {\n          refs.push(\n            { scope: \"org\", scopeId: orgId },\n            { scope: \"workspace\", scopeId: orgId },\n          );\n        } else {\n          refs.push({ scope: \"workspace\", scopeId: `solo:${userEmail}` });\n        }\n        for (const ref of refs) {\n          const meta = await readAppSecretMeta({\n            key: \"GITHUB_TOKEN\",\n            scope: ref.scope,\n            scopeId: ref.scopeId,\n          });\n          if (meta) return true;\n        }\n      } catch {\n        // Fall through to local/single-tenant env.\n      }\n    }\n\n    if (!canUseDeployCredentialFallbackForRequest()) return false;\n    return !!(\n      readDeployCredentialEnv(\"GITHUB_TOKEN\") ||\n      readDeployCredentialEnv(\"GH_TOKEN\")\n    );\n  },\n};\n\nlet registered = false;\n\n/** Idempotent. Safe to call from every plugin-mount call. */\nexport function registerDefaultOnboardingSteps(): void {\n  if (registered) return;\n  registered = true;\n  registerOnboardingStep(llmStep);\n  registerOnboardingStep(databaseStep);\n  registerOnboardingStep(authStep);\n  registerOnboardingStep(emailStep);\n  registerOnboardingStep(githubRepositoryStep);\n}\n"]}

package/dist/provider-api/actions/github-repo-files.d.ts

@@ -0,0 +1,84 @@
+import { z } from "zod";
+import type { ProviderApiRuntime } from "../index.js";
+declare const GitHubRepoFilesActionSchema: z.ZodObject<{
+    operation: z.ZodEnum<{
+        search: "search";
+        list: "list";
+        delete: "delete";
+        write: "write";
+        read: "read";
+    }>;
+    owner: z.ZodString;
+    repo: z.ZodString;
+    path: z.ZodOptional<z.ZodString>;
+    ref: z.ZodOptional<z.ZodString>;
+    recursive: z.ZodOptional<z.ZodBoolean>;
+    includeDirectories: z.ZodOptional<z.ZodBoolean>;
+    query: z.ZodOptional<z.ZodString>;
+    filename: z.ZodOptional<z.ZodString>;
+    extension: z.ZodOptional<z.ZodString>;
+    language: z.ZodOptional<z.ZodString>;
+    page: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+    perPage: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+    maxFiles: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+    includeTextMatches: z.ZodOptional<z.ZodBoolean>;
+    content: z.ZodOptional<z.ZodString>;
+    message: z.ZodOptional<z.ZodString>;
+    branch: z.ZodOptional<z.ZodString>;
+    sha: z.ZodOptional<z.ZodString>;
+    overwriteExisting: z.ZodOptional<z.ZodBoolean>;
+    committer: z.ZodOptional<z.ZodObject<{
+        name: z.ZodString;
+        email: z.ZodString;
+        date: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    author: z.ZodOptional<z.ZodObject<{
+        name: z.ZodString;
+        email: z.ZodString;
+        date: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    connectionId: z.ZodOptional<z.ZodString>;
+    timeoutMs: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+    maxBytes: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strip>;
+export interface CreateGitHubRepoFilesActionOptions {
+    description?: string;
+    requireApprovalForWrites?: boolean;
+}
+export declare function createGitHubRepoFilesAction(runtime: Pick<ProviderApiRuntime, "listGitHubRepositoryFiles" | "searchGitHubRepositoryFiles" | "readGitHubRepositoryFile" | "writeGitHubRepositoryFile" | "deleteGitHubRepositoryFile">, options?: CreateGitHubRepoFilesActionOptions): import("../../action.js").ActionDefinition<{
+    operation: "search" | "list" | "delete" | "write" | "read";
+    owner: string;
+    repo: string;
+    path?: string | undefined;
+    ref?: string | undefined;
+    recursive?: boolean | undefined;
+    includeDirectories?: boolean | undefined;
+    query?: string | undefined;
+    filename?: string | undefined;
+    extension?: string | undefined;
+    language?: string | undefined;
+    page?: unknown;
+    perPage?: unknown;
+    maxFiles?: unknown;
+    includeTextMatches?: boolean | undefined;
+    content?: string | undefined;
+    message?: string | undefined;
+    branch?: string | undefined;
+    sha?: string | undefined;
+    overwriteExisting?: boolean | undefined;
+    committer?: {
+        name: string;
+        email: string;
+        date?: string | undefined;
+    } | undefined;
+    author?: {
+        name: string;
+        email: string;
+        date?: string | undefined;
+    } | undefined;
+    connectionId?: string | undefined;
+    timeoutMs?: unknown;
+    maxBytes?: unknown;
+}, import("../index.js").GitHubRepositoryFileListResult | import("../index.js").GitHubRepositoryFileSearchResult | import("../index.js").GitHubRepositoryFileReadResult | import("../index.js").GitHubRepositoryFileDeleteResult>;
+export { GitHubRepoFilesActionSchema };
+//# sourceMappingURL=github-repo-files.d.ts.map

package/dist/provider-api/actions/github-repo-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-repo-files.d.ts","sourceRoot":"","sources":["../../../src/provider-api/actions/github-repo-files.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAMV,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAQrB,QAAA,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA6H/B,CAAC;AAIH,MAAM,WAAW,kCAAkC;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,IAAI,CACX,kBAAkB,EAChB,2BAA2B,GAC3B,6BAA6B,GAC7B,0BAA0B,GAC1B,2BAA2B,GAC3B,4BAA4B,CAC/B,EACD,OAAO,GAAE,kCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kOAsGjD;AAED,OAAO,EAAE,2BAA2B,EAAE,CAAC"}

package/dist/provider-api/actions/github-repo-files.js

@@ -0,0 +1,213 @@
+import { defineAction } from "../../action.js";
+import { z } from "zod";
+const GitHubCommitIdentitySchema = z.object({
+    name: z.string().min(1).describe("Commit identity name."),
+    email: z.string().email().describe("Commit identity email."),
+    date: z.string().optional().describe("Optional ISO timestamp."),
+});
+const GitHubRepoFilesActionSchema = z.object({
+    operation: z
+        .enum(["list", "search", "read", "write", "delete"])
+        .describe("Operation to perform: list repository file paths, search code/files, read one file, create/update one file, or delete one file."),
+    owner: z.string().min(1).describe("Repository owner or organization."),
+    repo: z
+        .string()
+        .min(1)
+        .describe("Repository name, with or without a trailing .git suffix."),
+    path: z
+        .string()
+        .optional()
+        .describe("Repository-relative file or directory path. For search without query, this filters matching paths."),
+    ref: z
+        .string()
+        .optional()
+        .describe("Branch, tag, or commit-ish for list/read. Code search uses GitHub's default-branch search."),
+    recursive: z
+        .boolean()
+        .optional()
+        .describe("For list, read the repository tree recursively."),
+    includeDirectories: z
+        .boolean()
+        .optional()
+        .describe("For list, include directory entries along with files."),
+    query: z
+        .string()
+        .optional()
+        .describe("For search, a GitHub code-search term. Omit to search/filter file paths from the repository tree."),
+    filename: z
+        .string()
+        .optional()
+        .describe("For search, restrict to an exact filename."),
+    extension: z
+        .string()
+        .optional()
+        .describe("For search, restrict to a file extension such as ts or md."),
+    language: z
+        .string()
+        .optional()
+        .describe("For code search, restrict to a GitHub language qualifier."),
+    page: z.coerce
+        .number()
+        .int()
+        .min(1)
+        .max(100)
+        .optional()
+        .describe("For code search, result page to fetch."),
+    perPage: z.coerce
+        .number()
+        .int()
+        .min(1)
+        .max(100)
+        .optional()
+        .describe("For code search, results per page."),
+    maxFiles: z.coerce
+        .number()
+        .int()
+        .min(1)
+        .max(10_000)
+        .optional()
+        .describe("Maximum file entries to return from list or tree-filter search."),
+    includeTextMatches: z
+        .boolean()
+        .optional()
+        .describe("For code search, request GitHub text-match metadata."),
+    content: z
+        .string()
+        .optional()
+        .describe("For write, complete replacement UTF-8 file content."),
+    message: z.string().optional().describe("For write, commit message."),
+    branch: z
+        .string()
+        .optional()
+        .describe("For write, branch to create/update on. Defaults to GitHub's default branch."),
+    sha: z
+        .string()
+        .optional()
+        .describe("For write updates, the current blob SHA. The action reads it first by default when omitted."),
+    overwriteExisting: z
+        .boolean()
+        .optional()
+        .describe("For write, read the current file SHA first when sha is omitted, then update if it exists. Defaults to true."),
+    committer: GitHubCommitIdentitySchema.optional().describe("Optional GitHub contents API committer identity."),
+    author: GitHubCommitIdentitySchema.optional().describe("Optional GitHub contents API author identity."),
+    connectionId: z
+        .string()
+        .trim()
+        .min(1)
+        .optional()
+        .describe("Optional workspace GitHub connection id to use."),
+    timeoutMs: z.coerce
+        .number()
+        .int()
+        .min(1_000)
+        .max(120_000)
+        .optional()
+        .describe("Request timeout in milliseconds."),
+    maxBytes: z.coerce
+        .number()
+        .int()
+        .min(1_000)
+        .max(4 * 1024 * 1024)
+        .optional()
+        .describe("Maximum provider response bytes to read."),
+});
+export function createGitHubRepoFilesAction(runtime, options = {}) {
+    const requireApprovalForWrites = options.requireApprovalForWrites ?? true;
+    return defineAction({
+        description: options.description ??
+            "List, search, read, create/update, and delete GitHub repository files through the configured GitHub connector or GITHUB_TOKEN. Uses GitHub REST APIs directly; it does not clone repositories or use a filesystem sandbox.",
+        schema: GitHubRepoFilesActionSchema,
+        http: false,
+        needsApproval: requireApprovalForWrites
+            ? (args) => args.operation === "write" || args.operation === "delete"
+            : false,
+        run: async (args) => {
+            if (args.operation === "list") {
+                return runtime.listGitHubRepositoryFiles({
+                    owner: args.owner,
+                    repo: args.repo,
+                    path: args.path,
+                    ref: args.ref,
+                    recursive: args.recursive,
+                    includeDirectories: args.includeDirectories,
+                    maxFiles: args.maxFiles,
+                    connectionId: args.connectionId,
+                    timeoutMs: args.timeoutMs,
+                    maxBytes: args.maxBytes,
+                });
+            }
+            if (args.operation === "search") {
+                return runtime.searchGitHubRepositoryFiles({
+                    owner: args.owner,
+                    repo: args.repo,
+                    query: args.query,
+                    path: args.path,
+                    filename: args.filename,
+                    extension: args.extension,
+                    language: args.language,
+                    ref: args.ref,
+                    perPage: args.perPage,
+                    page: args.page,
+                    maxFiles: args.maxFiles,
+                    includeTextMatches: args.includeTextMatches,
+                    connectionId: args.connectionId,
+                    timeoutMs: args.timeoutMs,
+                    maxBytes: args.maxBytes,
+                });
+            }
+            if (args.operation === "read") {
+                if (!args.path)
+                    throw new Error("path is required for read.");
+                return runtime.readGitHubRepositoryFile({
+                    owner: args.owner,
+                    repo: args.repo,
+                    path: args.path,
+                    ref: args.ref,
+                    connectionId: args.connectionId,
+                    timeoutMs: args.timeoutMs,
+                    maxBytes: args.maxBytes,
+                });
+            }
+            if (!args.path) {
+                throw new Error(`path is required for ${args.operation}.`);
+            }
+            if (args.operation === "delete") {
+                return runtime.deleteGitHubRepositoryFile({
+                    owner: args.owner,
+                    repo: args.repo,
+                    path: args.path,
+                    message: args.message ?? `Delete ${args.path}`,
+                    branch: args.branch,
+                    sha: args.sha,
+                    committer: args.committer,
+                    author: args.author,
+                    connectionId: args.connectionId,
+                    timeoutMs: args.timeoutMs,
+                    maxBytes: args.maxBytes,
+                });
+            }
+            if (args.content === undefined) {
+                throw new Error("content is required for write.");
+            }
+            if (!args.message)
+                throw new Error("message is required for write.");
+            return runtime.writeGitHubRepositoryFile({
+                owner: args.owner,
+                repo: args.repo,
+                path: args.path,
+                content: args.content,
+                message: args.message,
+                branch: args.branch,
+                sha: args.sha,
+                overwriteExisting: args.overwriteExisting ?? true,
+                committer: args.committer,
+                author: args.author,
+                connectionId: args.connectionId,
+                timeoutMs: args.timeoutMs,
+                maxBytes: args.maxBytes,
+            });
+        },
+    });
+}
+export { GitHubRepoFilesActionSchema };
+//# sourceMappingURL=github-repo-files.js.map

package/dist/provider-api/actions/github-repo-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-repo-files.js","sourceRoot":"","sources":["../../../src/provider-api/actions/github-repo-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACzD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IAC5D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;CAChE,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,SAAS,EAAE,CAAC;SACT,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;SACnD,QAAQ,CACP,iIAAiI,CAClI;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IACtE,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,0DAA0D,CAAC;IACvE,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,oGAAoG,CACrG;IACH,GAAG,EAAE,CAAC;SACH,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,4FAA4F,CAC7F;IACH,SAAS,EAAE,CAAC;SACT,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,iDAAiD,CAAC;IAC9D,kBAAkB,EAAE,CAAC;SAClB,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,uDAAuD,CAAC;IACpE,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,mGAAmG,CACpG;IACH,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,4CAA4C,CAAC;IACzD,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,4DAA4D,CAAC;IACzE,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,2DAA2D,CAAC;IACxE,IAAI,EAAE,CAAC,CAAC,MAAM;SACX,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,wCAAwC,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,MAAM;SACd,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,oCAAoC,CAAC;IACjD,QAAQ,EAAE,CAAC,CAAC,MAAM;SACf,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,MAAM,CAAC;SACX,QAAQ,EAAE;SACV,QAAQ,CACP,iEAAiE,CAClE;IACH,kBAAkB,EAAE,CAAC;SAClB,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,sDAAsD,CAAC;IACnE,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,qDAAqD,CAAC;IAClE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IACrE,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,6EAA6E,CAC9E;IACH,GAAG,EAAE,CAAC;SACH,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,6FAA6F,CAC9F;IACH,iBAAiB,EAAE,CAAC;SACjB,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CACP,6GAA6G,CAC9G;IACH,SAAS,EAAE,0BAA0B,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACvD,kDAAkD,CACnD;IACD,MAAM,EAAE,0BAA0B,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACpD,+CAA+C,CAChD;IACD,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,iDAAiD,CAAC;IAC9D,SAAS,EAAE,CAAC,CAAC,MAAM;SAChB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,KAAK,CAAC;SACV,GAAG,CAAC,OAAO,CAAC;SACZ,QAAQ,EAAE;SACV,QAAQ,CAAC,kCAAkC,CAAC;IAC/C,QAAQ,EAAE,CAAC,CAAC,MAAM;SACf,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,KAAK,CAAC;SACV,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;SACpB,QAAQ,EAAE;SACV,QAAQ,CAAC,0CAA0C,CAAC;CACxD,CAAC,CAAC;AASH,MAAM,UAAU,2BAA2B,CACzC,OAOC,EACD,UAA8C,EAAE;IAEhD,MAAM,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,IAAI,IAAI,CAAC;IAC1E,OAAO,YAAY,CAAC;QAClB,WAAW,EACT,OAAO,CAAC,WAAW;YACnB,4NAA4N;QAC9N,MAAM,EAAE,2BAA2B;QACnC,IAAI,EAAE,KAAK;QACX,aAAa,EAAE,wBAAwB;YACrC,CAAC,CAAC,CAAC,IAA+B,EAAE,EAAE,CAClC,IAAI,CAAC,SAAS,KAAK,OAAO,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ;YAC7D,CAAC,CAAC,KAAK;QACT,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAClB,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;gBAC9B,OAAO,OAAO,CAAC,yBAAyB,CAAC;oBACvC,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;oBAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACe,CAAC,CAAC;YAC5C,CAAC;YAED,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAChC,OAAO,OAAO,CAAC,2BAA2B,CAAC;oBACzC,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;oBAC3C,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACiB,CAAC,CAAC;YAC9C,CAAC;YAED,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAC9D,OAAO,OAAO,CAAC,wBAAwB,CAAC;oBACtC,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACe,CAAC,CAAC;YAC5C,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAChC,OAAO,OAAO,CAAC,0BAA0B,CAAC;oBACxC,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,UAAU,IAAI,CAAC,IAAI,EAAE;oBAC9C,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACiB,CAAC,CAAC;YAC9C,CAAC;YAED,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACrE,OAAO,OAAO,CAAC,yBAAyB,CAAC;gBACvC,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,IAAI;gBACjD,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACgB,CAAC,CAAC;QAC7C,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EAAE,2BAA2B,EAAE,CAAC","sourcesContent":["import { defineAction } from \"../../action.js\";\nimport { z } from \"zod\";\nimport type {\n  GitHubRepositoryFileDeleteArgs,\n  GitHubRepositoryFileListArgs,\n  GitHubRepositoryFileReadArgs,\n  GitHubRepositoryFileSearchArgs,\n  GitHubRepositoryFileWriteArgs,\n  ProviderApiRuntime,\n} from \"../index.js\";\n\nconst GitHubCommitIdentitySchema = z.object({\n  name: z.string().min(1).describe(\"Commit identity name.\"),\n  email: z.string().email().describe(\"Commit identity email.\"),\n  date: z.string().optional().describe(\"Optional ISO timestamp.\"),\n});\n\nconst GitHubRepoFilesActionSchema = z.object({\n  operation: z\n    .enum([\"list\", \"search\", \"read\", \"write\", \"delete\"])\n    .describe(\n      \"Operation to perform: list repository file paths, search code/files, read one file, create/update one file, or delete one file.\",\n    ),\n  owner: z.string().min(1).describe(\"Repository owner or organization.\"),\n  repo: z\n    .string()\n    .min(1)\n    .describe(\"Repository name, with or without a trailing .git suffix.\"),\n  path: z\n    .string()\n    .optional()\n    .describe(\n      \"Repository-relative file or directory path. For search without query, this filters matching paths.\",\n    ),\n  ref: z\n    .string()\n    .optional()\n    .describe(\n      \"Branch, tag, or commit-ish for list/read. Code search uses GitHub's default-branch search.\",\n    ),\n  recursive: z\n    .boolean()\n    .optional()\n    .describe(\"For list, read the repository tree recursively.\"),\n  includeDirectories: z\n    .boolean()\n    .optional()\n    .describe(\"For list, include directory entries along with files.\"),\n  query: z\n    .string()\n    .optional()\n    .describe(\n      \"For search, a GitHub code-search term. Omit to search/filter file paths from the repository tree.\",\n    ),\n  filename: z\n    .string()\n    .optional()\n    .describe(\"For search, restrict to an exact filename.\"),\n  extension: z\n    .string()\n    .optional()\n    .describe(\"For search, restrict to a file extension such as ts or md.\"),\n  language: z\n    .string()\n    .optional()\n    .describe(\"For code search, restrict to a GitHub language qualifier.\"),\n  page: z.coerce\n    .number()\n    .int()\n    .min(1)\n    .max(100)\n    .optional()\n    .describe(\"For code search, result page to fetch.\"),\n  perPage: z.coerce\n    .number()\n    .int()\n    .min(1)\n    .max(100)\n    .optional()\n    .describe(\"For code search, results per page.\"),\n  maxFiles: z.coerce\n    .number()\n    .int()\n    .min(1)\n    .max(10_000)\n    .optional()\n    .describe(\n      \"Maximum file entries to return from list or tree-filter search.\",\n    ),\n  includeTextMatches: z\n    .boolean()\n    .optional()\n    .describe(\"For code search, request GitHub text-match metadata.\"),\n  content: z\n    .string()\n    .optional()\n    .describe(\"For write, complete replacement UTF-8 file content.\"),\n  message: z.string().optional().describe(\"For write, commit message.\"),\n  branch: z\n    .string()\n    .optional()\n    .describe(\n      \"For write, branch to create/update on. Defaults to GitHub's default branch.\",\n    ),\n  sha: z\n    .string()\n    .optional()\n    .describe(\n      \"For write updates, the current blob SHA. The action reads it first by default when omitted.\",\n    ),\n  overwriteExisting: z\n    .boolean()\n    .optional()\n    .describe(\n      \"For write, read the current file SHA first when sha is omitted, then update if it exists. Defaults to true.\",\n    ),\n  committer: GitHubCommitIdentitySchema.optional().describe(\n    \"Optional GitHub contents API committer identity.\",\n  ),\n  author: GitHubCommitIdentitySchema.optional().describe(\n    \"Optional GitHub contents API author identity.\",\n  ),\n  connectionId: z\n    .string()\n    .trim()\n    .min(1)\n    .optional()\n    .describe(\"Optional workspace GitHub connection id to use.\"),\n  timeoutMs: z.coerce\n    .number()\n    .int()\n    .min(1_000)\n    .max(120_000)\n    .optional()\n    .describe(\"Request timeout in milliseconds.\"),\n  maxBytes: z.coerce\n    .number()\n    .int()\n    .min(1_000)\n    .max(4 * 1024 * 1024)\n    .optional()\n    .describe(\"Maximum provider response bytes to read.\"),\n});\n\ntype GitHubRepoFilesActionArgs = z.infer<typeof GitHubRepoFilesActionSchema>;\n\nexport interface CreateGitHubRepoFilesActionOptions {\n  description?: string;\n  requireApprovalForWrites?: boolean;\n}\n\nexport function createGitHubRepoFilesAction(\n  runtime: Pick<\n    ProviderApiRuntime,\n    | \"listGitHubRepositoryFiles\"\n    | \"searchGitHubRepositoryFiles\"\n    | \"readGitHubRepositoryFile\"\n    | \"writeGitHubRepositoryFile\"\n    | \"deleteGitHubRepositoryFile\"\n  >,\n  options: CreateGitHubRepoFilesActionOptions = {},\n) {\n  const requireApprovalForWrites = options.requireApprovalForWrites ?? true;\n  return defineAction({\n    description:\n      options.description ??\n      \"List, search, read, create/update, and delete GitHub repository files through the configured GitHub connector or GITHUB_TOKEN. Uses GitHub REST APIs directly; it does not clone repositories or use a filesystem sandbox.\",\n    schema: GitHubRepoFilesActionSchema,\n    http: false,\n    needsApproval: requireApprovalForWrites\n      ? (args: GitHubRepoFilesActionArgs) =>\n          args.operation === \"write\" || args.operation === \"delete\"\n      : false,\n    run: async (args) => {\n      if (args.operation === \"list\") {\n        return runtime.listGitHubRepositoryFiles({\n          owner: args.owner,\n          repo: args.repo,\n          path: args.path,\n          ref: args.ref,\n          recursive: args.recursive,\n          includeDirectories: args.includeDirectories,\n          maxFiles: args.maxFiles,\n          connectionId: args.connectionId,\n          timeoutMs: args.timeoutMs,\n          maxBytes: args.maxBytes,\n        } satisfies GitHubRepositoryFileListArgs);\n      }\n\n      if (args.operation === \"search\") {\n        return runtime.searchGitHubRepositoryFiles({\n          owner: args.owner,\n          repo: args.repo,\n          query: args.query,\n          path: args.path,\n          filename: args.filename,\n          extension: args.extension,\n          language: args.language,\n          ref: args.ref,\n          perPage: args.perPage,\n          page: args.page,\n          maxFiles: args.maxFiles,\n          includeTextMatches: args.includeTextMatches,\n          connectionId: args.connectionId,\n          timeoutMs: args.timeoutMs,\n          maxBytes: args.maxBytes,\n        } satisfies GitHubRepositoryFileSearchArgs);\n      }\n\n      if (args.operation === \"read\") {\n        if (!args.path) throw new Error(\"path is required for read.\");\n        return runtime.readGitHubRepositoryFile({\n          owner: args.owner,\n          repo: args.repo,\n          path: args.path,\n          ref: args.ref,\n          connectionId: args.connectionId,\n          timeoutMs: args.timeoutMs,\n          maxBytes: args.maxBytes,\n        } satisfies GitHubRepositoryFileReadArgs);\n      }\n\n      if (!args.path) {\n        throw new Error(`path is required for ${args.operation}.`);\n      }\n      if (args.operation === \"delete\") {\n        return runtime.deleteGitHubRepositoryFile({\n          owner: args.owner,\n          repo: args.repo,\n          path: args.path,\n          message: args.message ?? `Delete ${args.path}`,\n          branch: args.branch,\n          sha: args.sha,\n          committer: args.committer,\n          author: args.author,\n          connectionId: args.connectionId,\n          timeoutMs: args.timeoutMs,\n          maxBytes: args.maxBytes,\n        } satisfies GitHubRepositoryFileDeleteArgs);\n      }\n\n      if (args.content === undefined) {\n        throw new Error(\"content is required for write.\");\n      }\n      if (!args.message) throw new Error(\"message is required for write.\");\n      return runtime.writeGitHubRepositoryFile({\n        owner: args.owner,\n        repo: args.repo,\n        path: args.path,\n        content: args.content,\n        message: args.message,\n        branch: args.branch,\n        sha: args.sha,\n        overwriteExisting: args.overwriteExisting ?? true,\n        committer: args.committer,\n        author: args.author,\n        connectionId: args.connectionId,\n        timeoutMs: args.timeoutMs,\n        maxBytes: args.maxBytes,\n      } satisfies GitHubRepositoryFileWriteArgs);\n    },\n  });\n}\n\nexport { GitHubRepoFilesActionSchema };\n"]}

package/dist/provider-api/github-repo.d.ts

@@ -0,0 +1,11 @@
+import type { ActionEntry } from "../agent/production-agent.js";
+import type { CredentialContext } from "../credentials/index.js";
+import { type ProviderApiCredentialResolver } from "./index.js";
+interface GitHubRepoToolOptions {
+    appId?: string;
+    getCredentialContext?: () => CredentialContext | null;
+    resolveCredential?: ProviderApiCredentialResolver;
+}
+export declare function createGitHubRepoToolEntries(options?: GitHubRepoToolOptions): Record<string, ActionEntry>;
+export {};
+//# sourceMappingURL=github-repo.d.ts.map

package/dist/provider-api/github-repo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-repo.d.ts","sourceRoot":"","sources":["../../src/provider-api/github-repo.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAKhE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,EAGL,KAAK,6BAA6B,EAEnC,MAAM,YAAY,CAAC;AAEpB,UAAU,qBAAqB;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oBAAoB,CAAC,EAAE,MAAM,iBAAiB,GAAG,IAAI,CAAC;IACtD,iBAAiB,CAAC,EAAE,6BAA6B,CAAC;CACnD;AAmfD,wBAAgB,2BAA2B,CACzC,OAAO,GAAE,qBAA0B,GAClC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CA2J7B"}