@agent-native/core 0.63.3 → 0.63.4

package/dist/server/onboarding-html.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"onboarding-html.d.ts","sourceRoot":"","sources":["../../src/server/onboarding-html.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAC;AA2C/B,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,SAAS,CAAC,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACxB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF;;;;OAIG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,qBAA0B,GAAG,MAAM,CAo7D1E;AAED,kDAAkD;AAClD,eAAO,MAAM,eAAe,QAAsB,CAAC;AAEnD;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CA0G7C"}
+{"version":3,"file":"onboarding-html.d.ts","sourceRoot":"","sources":["../../src/server/onboarding-html.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAC;AA2C/B,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,SAAS,CAAC,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACxB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF;;;;OAIG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,qBAA0B,GAAG,MAAM,CAi+D1E;AAED,kDAAkD;AAClD,eAAO,MAAM,eAAe,QAAsB,CAAC;AAEnD;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CA0G7C"}

package/dist/server/onboarding-html.js

@@ -115,6 +115,26 @@ ${googleNoticeRunLocalHtml}
 ${googleNoticeRunLocalPanelHtml}
   </div>`
         : "";
+    const identitySsoHtml = identitySsoLoginButtonHtml();
+    const identitySsoScript = identitySsoHtml
+        ? `
+    function __anIdentitySsoUrl() {
+      var params = new URLSearchParams();
+      params.set('return', __anGetReturnPath());
+      return __anPath('/_agent-native/identity/login') + '?' + params.toString();
+    }
+    function __anStartIdentitySso(event) {
+      if (event && event.preventDefault) event.preventDefault();
+      window.location.href = __anIdentitySsoUrl();
+      return false;
+    }
+    (function __anPrepareIdentitySsoButton() {
+      var identity = document.getElementById('identity-sso-btn');
+      if (!identity) return;
+      identity.setAttribute('href', __anIdentitySsoUrl());
+      identity.addEventListener('click', __anStartIdentitySso);
+    })();`
+        : "";
     const marketingStyles = hasMarketing
         ? `
   body.has-marketing { padding: 0; position: relative; overflow-x: hidden; }
@@ -901,7 +921,7 @@ ${marketingPanelHtml}
     id="upgrade-note"
     data-upgrade-copy="Continue signing in to attach this app to your account and migrate local data."
   ></p>
-${identitySsoLoginButtonHtml()}
+${identitySsoHtml}
 ${renderGoogleButton
         ? `
   <div class="google-signin" id="google-signin">
@@ -1095,12 +1115,35 @@ ${googleOnly
       __anSetOAuthDebug('OAuth exchange redeemed; returning to the app', flowId);
       __anRedirectToSignedInApp(ret);
     }
+    function __anHasControlCharacter(value) {
+      for (var i = 0; i < value.length; i++) {
+        if (value.charCodeAt(i) < 32) return true;
+      }
+      return false;
+    }
+    function __anNormalizeReturnPath(raw) {
+      var value = typeof raw === 'string' ? raw : '';
+      if (!value || __anHasControlCharacter(value)) return '';
+      if (value.charAt(0) === '\\\\') return '';
+      if (value.charAt(0) === '/' && (value.charAt(1) === '/' || value.charAt(1) === '\\\\')) return '';
+      try {
+        var url = new URL(value, window.location.origin);
+        if (url.origin !== window.location.origin) return '';
+        return url.pathname + url.search + url.hash;
+      } catch(e) {
+        return '';
+      }
+    }
+    function __anCurrentReturnPath() {
+      return window.location.pathname + window.location.search + window.location.hash;
+    }
     function __anGetReturnPath() {
       try {
         var inner = new URLSearchParams(window.location.search).get('return');
-        if (inner) return inner;
+        var normalized = __anNormalizeReturnPath(inner);
+        if (normalized) return normalized;
       } catch(e) {}
-      return window.location.pathname + window.location.search;
+      return __anCurrentReturnPath();
     }
     function __anMountedPathname(pathname) {
       var base = __anBasePath();
@@ -1115,10 +1158,11 @@ ${googleOnly
     function __anGetSignedInReturnPath() {
       try {
         var inner = new URLSearchParams(window.location.search).get('return');
-        if (inner) return inner;
+        var normalized = __anNormalizeReturnPath(inner);
+        if (normalized) return normalized;
       } catch(e) {}
       if (__anIsAuthEntryPath(window.location.pathname)) return __anPath('/');
-      return window.location.pathname + window.location.search + window.location.hash;
+      return __anCurrentReturnPath();
     }
     function __anWithAuthCacheBypass(ret) {
       try {
@@ -1137,6 +1181,7 @@ ${googleOnly
     function __anRedirectToSignedInApp(ret) {
       window.location.replace(__anWithAuthCacheBypass(ret || __anGetSignedInReturnPath()));
     }
+${identitySsoScript}
     (function __anRedirectIfAlreadySignedIn() {
       fetch(__anPath('/_agent-native/auth/session'), {
         headers: { 'Accept': 'application/json' },