@agent-native/core 0.7.13 → 0.7.15

package/dist/server/credential-provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"credential-provider.js","sourceRoot":"","sources":["../../src/server/credential-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,kBAAkB,CAAS;IAC3B,iBAAiB,CAAU;IAC3B,WAAW,CAAU;IAE9B,YAAY,IAKX;QACC,KAAK,CACH,IAAI,CAAC,OAAO;YACV,gCAAgC,IAAI,CAAC,kBAAkB,yCAAyC,CACnG,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAClD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAChD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACtC,CAAC;CACF;AAED,yEAAyE;AACzE,MAAM,UAAU,oBAAoB;IAClC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;AAC3C,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,qBAAqB;IACnC,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAChC,OAAO,CAAC,GAAG,CAAC,QAAQ;QACpB,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC5B,gCAAgC,CACjC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,wBAAwB;QACpC,2CAA2C,CAC5C,CAAC;AACJ,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,oBAAoB;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC5C,OAAO,GAAG,CAAC,CAAC,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACtC,CAAC"}
+{"version":3,"file":"credential-provider.js","sourceRoot":"","sources":["../../src/server/credential-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEhD,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,kBAAkB,CAAS;IAC3B,iBAAiB,CAAU;IAC3B,WAAW,CAAU;IAE9B,YAAY,IAKX;QACC,KAAK,CACH,IAAI,CAAC,OAAO;YACV,gCAAgC,IAAI,CAAC,kBAAkB,yCAAyC,CACnG,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAClD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAChD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACtC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;AACvC,CAAC;AAED,8EAA8E;AAC9E,yCAAyC;AACzC,EAAE;AACF,iEAAiE;AACjE,8EAA8E;AAC9E,6EAA6E;AAC7E,sDAAsD;AACtD,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,GAAW;IAEX,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,CAAC;YACH,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;gBACjC,GAAG;gBACH,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YACH,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;QACD,oEAAoE;QACpE,6EAA6E;QAC7E,4EAA4E;QAC5E,4EAA4E;QAC5E,0EAA0E;QAC1E,qEAAqE;QACrE,0EAA0E;QAC1E,wEAAwE;QACxE,IAAI,KAAK,KAAK,mBAAmB,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,uBAAuB,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC5C,OAAO,wBAAwB,CAAC,qBAAqB,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC5C,MAAM,GAAG,GAAG,MAAM,wBAAwB,EAAE,CAAC;IAC7C,OAAO,GAAG,CAAC,CAAC,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAC/C,OAAO,CAAC,CAAC,CAAC,MAAM,wBAAwB,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAO7C,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1E,wBAAwB,CAAC,qBAAqB,CAAC;QAC/C,wBAAwB,CAAC,oBAAoB,CAAC;QAC9C,wBAAwB,CAAC,iBAAiB,CAAC;QAC3C,wBAAwB,CAAC,kBAAkB,CAAC;QAC5C,wBAAwB,CAAC,kBAAkB,CAAC;KAC7C,CAAC,CAAC;IACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC7D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAa,EACb,KAMC;IAED,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IACjE,MAAM,OAAO,GAA0C;QACrD,EAAE,GAAG,EAAE,qBAAqB,EAAE,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE;QACvD,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE;KACtD,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAC7B,cAAc,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAC9D,CACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAAa;IAC1D,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG;QACX,qBAAqB;QACrB,oBAAoB;QACpB,iBAAiB;QACjB,kBAAkB;QAClB,kBAAkB;KACnB,CAAC;IACF,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACf,eAAe,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CACxE,CACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,qCAAqC;AACrC,EAAE;AACF,0EAA0E;AAC1E,yEAAyE;AACzE,wEAAwE;AACxE,yEAAyE;AACzE,uEAAuE;AACvE,uEAAuE;AACvE,0EAA0E;AAC1E,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW;IAC7C,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,IAAI,KAAK,IAAI,KAAK,KAAK,mBAAmB,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;gBACjC,GAAG;gBACH,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YACH,IAAI,MAAM,EAAE,KAAK;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;QACD,sEAAsE;QACtE,mEAAmE;QACnE,6BAA6B;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,uEAAuE;IACvE,mDAAmD;IACnD,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AAClC,CAAC;AAED,8EAA8E;AAC9E,uEAAuE;AACvE,iEAAiE;AACjE,8EAA8E;AAE9E,6EAA6E;AAC7E,MAAM,UAAU,oBAAoB;IAClC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;AAC3C,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,qBAAqB;IACnC,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAChC,OAAO,CAAC,GAAG,CAAC,QAAQ;QACpB,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC5B,gCAAgC,CACjC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,wBAAwB;QACpC,2CAA2C,CAC5C,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,oBAAoB;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC5C,OAAO,GAAG,CAAC,CAAC,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACtC,CAAC"}

package/dist/server/csrf.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Defense-in-depth CSRF check for framework state-changing routes.
+ *
+ * Threat model: action endpoints (`/_agent-native/actions/*`), tool endpoints
+ * (`/_agent-native/tools/*`), and a handful of other state-changing
+ * `/_agent-native/*` routes use the better-auth session cookie, which is
+ * configured with `SameSite=None; Secure; Partitioned` so the iframe editor
+ * (and other cross-site embeds) can authenticate. `SameSite=None` means the
+ * browser ships the session cookie on top-level form POSTs from any origin —
+ * which is exactly the precondition for classic cross-site request forgery.
+ *
+ * The browser still gates "non-simple" requests behind a CORS preflight, so
+ * an attacker who has to send `Content-Type: application/json` is forced
+ * through OPTIONS, which our CORS middleware (`create-server.ts`) rejects
+ * for disallowed origins. But the simple-request bypass (`Content-Type:
+ * text/plain` on a `<form enctype="text/plain">` POST, or `multipart/form-data`)
+ * never preflights — the browser delivers it cross-origin with cookies.
+ *
+ * Mitigation: this middleware rejects any state-changing
+ * (`POST/PUT/PATCH/DELETE`) request to `/_agent-native/*` that
+ *
+ *   1. carries the auth-cookie pattern (any cookie at all is a heuristic
+ *      good-enough proxy — we don't want to deny anonymous fetches), AND
+ *   2. is NOT clearly same-origin / first-party. We trust:
+ *      - `Sec-Fetch-Site: same-origin` (sent by every modern browser on
+ *        same-origin fetch — Chrome/Firefox/Safari/Edge all support it).
+ *      - `X-Agent-Native-CSRF` custom header. Custom headers force a
+ *        preflight, so an attacker can't add one cross-origin.
+ *      - `Content-Type: application/json` request body. Same logic — JSON
+ *        Content-Type is a non-simple request that triggers preflight.
+ *
+ * Why the existing CORS check isn't enough: a simple-request POST never
+ * preflights, so the browser sends it through and only blocks the *response*
+ * from being readable cross-origin. The state change (delete-account, write
+ * SQL, etc.) happens server-side regardless. We need a server-side check that
+ * proves first-party intent before running the action.
+ *
+ * Opt-out marker: a handful of routes legitimately accept cross-origin POSTs
+ * — webhook endpoints (Slack, Telegram, email), the public A2A endpoint
+ * (`/_agent-native/a2a`), the integrations process-task self-fire, and so on.
+ * Those are listed in `CSRF_ALLOWLIST_PREFIXES` below; if you add a new
+ * cross-origin-callable route, add it there.
+ */
+/**
+ * Create the framework CSRF middleware.
+ *
+ * Mount this BEFORE any state-changing route handler. The middleware
+ *   - lets every non-state-changing method through (GET/HEAD/OPTIONS).
+ *   - lets requests without cookies through (anonymous/server tools).
+ *   - lets allowlisted paths through (webhooks, A2A, OAuth callbacks).
+ *   - lets first-party-shaped requests through (custom header, JSON
+ *     Content-Type, or `Sec-Fetch-Site: same-origin`).
+ *   - rejects everything else with 403.
+ */
+export declare function createCsrfMiddleware(frameworkPrefix?: string): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, {
+    error: string;
+}>;
+//# sourceMappingURL=csrf.d.ts.map

package/dist/server/csrf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf.d.ts","sourceRoot":"","sources":["../../src/server/csrf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAsGH;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,eAAe,GAAE,MAAyB;;GAqB3C"}

package/dist/server/csrf.js

@@ -0,0 +1,165 @@
+/**
+ * Defense-in-depth CSRF check for framework state-changing routes.
+ *
+ * Threat model: action endpoints (`/_agent-native/actions/*`), tool endpoints
+ * (`/_agent-native/tools/*`), and a handful of other state-changing
+ * `/_agent-native/*` routes use the better-auth session cookie, which is
+ * configured with `SameSite=None; Secure; Partitioned` so the iframe editor
+ * (and other cross-site embeds) can authenticate. `SameSite=None` means the
+ * browser ships the session cookie on top-level form POSTs from any origin —
+ * which is exactly the precondition for classic cross-site request forgery.
+ *
+ * The browser still gates "non-simple" requests behind a CORS preflight, so
+ * an attacker who has to send `Content-Type: application/json` is forced
+ * through OPTIONS, which our CORS middleware (`create-server.ts`) rejects
+ * for disallowed origins. But the simple-request bypass (`Content-Type:
+ * text/plain` on a `<form enctype="text/plain">` POST, or `multipart/form-data`)
+ * never preflights — the browser delivers it cross-origin with cookies.
+ *
+ * Mitigation: this middleware rejects any state-changing
+ * (`POST/PUT/PATCH/DELETE`) request to `/_agent-native/*` that
+ *
+ *   1. carries the auth-cookie pattern (any cookie at all is a heuristic
+ *      good-enough proxy — we don't want to deny anonymous fetches), AND
+ *   2. is NOT clearly same-origin / first-party. We trust:
+ *      - `Sec-Fetch-Site: same-origin` (sent by every modern browser on
+ *        same-origin fetch — Chrome/Firefox/Safari/Edge all support it).
+ *      - `X-Agent-Native-CSRF` custom header. Custom headers force a
+ *        preflight, so an attacker can't add one cross-origin.
+ *      - `Content-Type: application/json` request body. Same logic — JSON
+ *        Content-Type is a non-simple request that triggers preflight.
+ *
+ * Why the existing CORS check isn't enough: a simple-request POST never
+ * preflights, so the browser sends it through and only blocks the *response*
+ * from being readable cross-origin. The state change (delete-account, write
+ * SQL, etc.) happens server-side regardless. We need a server-side check that
+ * proves first-party intent before running the action.
+ *
+ * Opt-out marker: a handful of routes legitimately accept cross-origin POSTs
+ * — webhook endpoints (Slack, Telegram, email), the public A2A endpoint
+ * (`/_agent-native/a2a`), the integrations process-task self-fire, and so on.
+ * Those are listed in `CSRF_ALLOWLIST_PREFIXES` below; if you add a new
+ * cross-origin-callable route, add it there.
+ */
+import { defineEventHandler, getMethod, getRequestHeader, setResponseStatus, } from "h3";
+/**
+ * Path prefixes (relative to the framework prefix `/_agent-native`) that are
+ * allowed to receive cross-origin state-changing POSTs without first-party
+ * markers. These are signed/authenticated through other mechanisms (HMAC,
+ * JWT, internal token) so they don't need cookie-based CSRF protection.
+ */
+const CSRF_ALLOWLIST_PREFIXES = [
+    // Integration webhooks — verified by HMAC against a per-integration secret.
+    "/integrations/",
+    // A2A JSON-RPC endpoints — verified by signed JWT (when A2A_SECRET set) or
+    // explicitly opt-in unauthenticated (handled at the A2A layer).
+    "/a2a",
+    // Better Auth's own login/sign-in/social-callback routes. Better Auth
+    // ships its own CSRF protection (Origin/Sec-Fetch checks on its handlers)
+    // and cookies are needed for the OAuth callback round-trip.
+    "/auth/",
+    // Stripe / Paddle / billing webhooks dropped in by templates.
+    "/billing/webhook",
+    // Public share endpoints — read-only and never cookie-driven, but kept
+    // here so a templated POST (e.g. comment-on-public-recording) doesn't 403.
+    "/share/",
+    // OAuth callbacks (Builder, Google, Slack, Notion, Zoom). These get a
+    // `code` query param via top-level navigation — they DO ride the session
+    // cookie and they SHOULD validate state, but the framework can't see the
+    // state token. Each callback handler is responsible for its own CSRF
+    // check (signed state tokens).
+    "/oauth/",
+    // Builder's CLI-auth callback — uses the BUILDER_STATE_PARAM signed token
+    // to authenticate the round-trip; framework CSRF check would block it.
+    "/builder/callback",
+];
+const STATE_CHANGING_METHODS = new Set(["POST", "PUT", "PATCH", "DELETE"]);
+/**
+ * Decide whether a request is "first-party enough" to trust as not-CSRF.
+ * Any of the following make a request non-CSRF:
+ *
+ *   - `Sec-Fetch-Site: same-origin` (or `none` for top-level navigations
+ *     to our own pages — but state-changing methods don't ship `none`).
+ *   - `X-Agent-Native-CSRF` header (any value, even "1"). This is a custom
+ *     header so the browser forces a preflight cross-origin, which our
+ *     CORS layer rejects for disallowed origins.
+ *   - `Content-Type: application/json` (case-insensitive). JSON content
+ *     type is a non-simple request that triggers preflight.
+ *
+ * We accept ANY of these — the goal is "did the request come through a
+ * channel the browser would have preflighted", not a strict-mode token.
+ */
+function looksFirstParty(event) {
+    const sfs = getRequestHeader(event, "sec-fetch-site");
+    if (sfs === "same-origin" || sfs === "same-site" || sfs === "none") {
+        return true;
+    }
+    if (getRequestHeader(event, "x-agent-native-csrf")) {
+        return true;
+    }
+    const contentType = getRequestHeader(event, "content-type");
+    if (contentType &&
+        typeof contentType === "string" &&
+        contentType.toLowerCase().includes("application/json")) {
+        return true;
+    }
+    return false;
+}
+/**
+ * Returns true when the request carries any cookie. We use "has any cookie"
+ * as a coarse heuristic for "the browser is going to attach the session
+ * cookie" — anonymous tools (curl, server-to-server) typically don't send
+ * cookies, so they bypass this check entirely.
+ */
+function requestHasCookies(event) {
+    const cookie = getRequestHeader(event, "cookie");
+    return typeof cookie === "string" && cookie.trim().length > 0;
+}
+/**
+ * Path passed in is the full request URL pathname (e.g. `/_agent-native/actions/foo`).
+ * `frameworkPrefix` should be the framework route prefix without trailing slash,
+ * e.g. `/_agent-native`.
+ */
+function isOnAllowlist(pathname, frameworkPrefix) {
+    if (!pathname.startsWith(frameworkPrefix))
+        return false;
+    const sub = pathname.slice(frameworkPrefix.length);
+    for (const allowed of CSRF_ALLOWLIST_PREFIXES) {
+        if (sub.startsWith(allowed))
+            return true;
+    }
+    return false;
+}
+/**
+ * Create the framework CSRF middleware.
+ *
+ * Mount this BEFORE any state-changing route handler. The middleware
+ *   - lets every non-state-changing method through (GET/HEAD/OPTIONS).
+ *   - lets requests without cookies through (anonymous/server tools).
+ *   - lets allowlisted paths through (webhooks, A2A, OAuth callbacks).
+ *   - lets first-party-shaped requests through (custom header, JSON
+ *     Content-Type, or `Sec-Fetch-Site: same-origin`).
+ *   - rejects everything else with 403.
+ */
+export function createCsrfMiddleware(frameworkPrefix = "/_agent-native") {
+    return defineEventHandler((event) => {
+        const method = getMethod(event);
+        if (!STATE_CHANGING_METHODS.has(method))
+            return undefined;
+        const pathname = event.url?.pathname ?? "";
+        if (!pathname.startsWith(frameworkPrefix))
+            return undefined;
+        if (isOnAllowlist(pathname, frameworkPrefix))
+            return undefined;
+        // No cookie = no risk of confused-deputy CSRF on the session cookie.
+        if (!requestHasCookies(event))
+            return undefined;
+        if (looksFirstParty(event))
+            return undefined;
+        setResponseStatus(event, 403);
+        return {
+            error: "CSRF check failed: state-changing requests must include a same-origin marker. Set Content-Type: application/json or X-Agent-Native-CSRF: 1.",
+        };
+    });
+}
+//# sourceMappingURL=csrf.js.map

package/dist/server/csrf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf.js","sourceRoot":"","sources":["../../src/server/csrf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,IAAI,CAAC;AAEZ;;;;;GAKG;AACH,MAAM,uBAAuB,GAAG;IAC9B,4EAA4E;IAC5E,gBAAgB;IAChB,2EAA2E;IAC3E,gEAAgE;IAChE,MAAM;IACN,sEAAsE;IACtE,0EAA0E;IAC1E,4DAA4D;IAC5D,QAAQ;IACR,8DAA8D;IAC9D,kBAAkB;IAClB,uEAAuE;IACvE,2EAA2E;IAC3E,SAAS;IACT,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,+BAA+B;IAC/B,SAAS;IACT,0EAA0E;IAC1E,uEAAuE;IACvE,mBAAmB;CACpB,CAAC;AAEF,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE3E;;;;;;;;;;;;;;GAcG;AACH,SAAS,eAAe,CAAC,KAAU;IACjC,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACtD,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC5D,IACE,WAAW;QACX,OAAO,WAAW,KAAK,QAAQ;QAC/B,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EACtD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,KAAU;IACnC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,QAAgB,EAAE,eAAuB;IAC9D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACnD,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;QAC9C,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAClC,kBAA0B,gBAAgB;IAE1C,OAAO,kBAAkB,CAAC,CAAC,KAAK,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QAE1D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5D,IAAI,aAAa,CAAC,QAAQ,EAAE,eAAe,CAAC;YAAE,OAAO,SAAS,CAAC;QAE/D,qEAAqE;QACrE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAEhD,IAAI,eAAe,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAE7C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EACH,6IAA6I;SAChJ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/design-token-utils.d.ts

@@ -0,0 +1,132 @@
+/**
+ * Shared design-token extraction utilities.
+ *
+ * Pure functions for parsing Tailwind configs, CSS files, package.json,
+ * documents, and URLs to extract colors, fonts, spacing, border-radius,
+ * and CSS custom properties. Used by the import-* actions across all
+ * templates (design, slides, videos).
+ *
+ * No framework dependencies — no defineAction, no zod, no drizzle.
+ */
+/** Maximum number of files to fetch from a single GitHub repo. */
+export declare const MAX_FILES = 10;
+/** Maximum individual file size (100 KB). */
+export declare const MAX_FILE_SIZE: number;
+/** Timeout for GitHub API / URL fetch calls (ms). */
+export declare const FETCH_TIMEOUT = 15000;
+/** File-name patterns to look for at the repo root. */
+export declare const ROOT_PATTERNS: RegExp[];
+/** Secondary paths (files and directories) to check for design tokens. */
+export declare const SECONDARY_PATHS: string[];
+/** Maximum files accepted in import-code. */
+export declare const CODE_MAX_FILES = 20;
+/** Maximum total bytes accepted in import-code. */
+export declare const CODE_MAX_TOTAL_BYTES: number;
+/** Regex for hex colors (3-8 digit, including alpha). */
+export declare const HEX_COLOR_RE: RegExp;
+/** Regex for well-known named CSS colors. */
+export declare const NAMED_COLOR_RE: RegExp;
+/** Regex for well-known font family names found in documents. */
+export declare const FONT_NAME_RE: RegExp;
+/** Regex matching CSS custom property values that look like colors. */
+export declare const COLOR_VAR_PATTERN: RegExp;
+/** Well-known styling framework deps to detect in package.json. */
+export declare const FRAMEWORK_DETECTORS: {
+    name: string;
+    label: string;
+}[];
+export type ContentType = "presentation" | "document" | "spreadsheet" | "pdf" | "other";
+export interface ParsedCss {
+    cssCustomProperties: Record<string, string> | undefined;
+    fonts: string[] | undefined;
+}
+export interface ParsedTailwindConfig {
+    colors?: Record<string, string>;
+    fontFamily?: Record<string, string>;
+    spacing?: Record<string, string>;
+    borderRadius?: Record<string, string>;
+}
+export interface CodeAnalysisState {
+    colors: Record<string, string>;
+    cssCustomProperties: Record<string, string>;
+    fonts: {
+        family: string;
+        source?: string;
+    }[];
+    spacing: Record<string, string>;
+    borderRadius: Record<string, string>;
+    stylingFramework: string | null;
+    rawExtracts: {
+        filename: string;
+        type: string;
+        data: unknown;
+    }[];
+    seenFonts: Set<string>;
+}
+export interface UrlExtractionResult {
+    url: string;
+    pageTitle?: string;
+    metaDescription?: string;
+    themeColor?: string;
+    cssCustomProperties?: Record<string, string>;
+    colors?: string[];
+    fontFaces?: {
+        family?: string;
+        src?: string;
+    }[];
+    googleFonts?: string[];
+    ogImage?: string;
+    favicon?: string;
+}
+/** Validate a URL is safe to fetch (blocks localhost, private IPs, metadata endpoints). */
+export declare function validateUrl(url: string): void;
+/** Parse a GitHub URL or "org/repo" shorthand into owner + repo. */
+export declare function parseOwnerRepo(raw: string): {
+    owner: string;
+    repo: string;
+};
+/** Fetch a path from the GitHub Contents API as JSON. Returns null on error. */
+export declare function fetchGitHubJson(owner: string, repo: string, path: string): Promise<unknown>;
+/** Fetch raw file content from the GitHub Contents API. Returns null on error or oversize. */
+export declare function fetchGitHubRaw(owner: string, repo: string, path: string): Promise<string | null>;
+/** Extract colors, fonts, spacing, borderRadius from a Tailwind config file string. */
+export declare function parseTailwindConfig(content: string): Record<string, unknown>;
+/** Extract CSS custom properties and @font-face / Google Fonts from CSS content. */
+export declare function parseCss(content: string): ParsedCss;
+/** Detect the styling framework from a package.json string. */
+export declare function detectStylingFramework(content: string): string | undefined;
+/** Create a fresh state object for code file analysis. */
+export declare function createCodeAnalysisState(): CodeAnalysisState;
+/** De-duplicate and add a font to the analysis state. */
+export declare function addFont(state: CodeAnalysisState, family: string, source?: string): void;
+/** Extract CSS custom properties, classifying them by name into colors/spacing/radius. */
+export declare function extractCssVars(state: CodeAnalysisState, content: string): void;
+/** Extract literal color values (hex, rgb, hsl, oklch) from content. */
+export declare function extractCodeColors(state: CodeAnalysisState, content: string): void;
+/** Extract font-family declarations and @font-face blocks from CSS-like content. */
+export declare function extractCodeFonts(state: CodeAnalysisState, content: string, filename: string): void;
+/** Analyze a CSS/SCSS/LESS file, extracting vars, colors, and fonts. */
+export declare function analyzeCssFile(state: CodeAnalysisState, content: string, filename: string): void;
+/** Analyze a Tailwind config file for tokens. */
+export declare function analyzeTailwindConfig(state: CodeAnalysisState, content: string, filename: string): void;
+/** Walk a parsed JSON theme object, extracting tokens into state. */
+export declare function analyzeJsonTheme(state: CodeAnalysisState, content: string, filename: string): void;
+/** Analyze package.json for styling framework deps. */
+export declare function analyzePackageJson(state: CodeAnalysisState, content: string, filename: string): void;
+/** Analyze a theme source file (theme.ts, tokens.ts) for design tokens. */
+export declare function analyzeThemeSourceFile(state: CodeAnalysisState, content: string, filename: string): void;
+/** Route a file to the correct analyzer based on filename. */
+export declare function analyzeCodeFile(state: CodeAnalysisState, filename: string, content: string): void;
+/** Deduplicate and trim an array of strings. */
+export declare function unique(arr: string[]): string[];
+/** Extract hex and named colors from plain text. */
+export declare function extractDocumentColors(text: string): string[];
+/** Extract known font family names from plain text. */
+export declare function extractDocumentFonts(text: string): string[];
+/** Classify a file type string into a content category. */
+export declare function classifyFile(fileType: string): ContentType;
+/** Return per-type suggestions for how to use a document for design extraction. */
+export declare function suggestionsForType(contentType: ContentType, hasText: boolean): string[];
+/** Fetch and extract design tokens from a URL's HTML. */
+export declare function extractDesignTokensFromUrl(rawUrl: string): Promise<UrlExtractionResult>;
+//# sourceMappingURL=design-token-utils.d.ts.map

package/dist/server/design-token-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"design-token-utils.d.ts","sourceRoot":"","sources":["../../src/server/design-token-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,kEAAkE;AAClE,eAAO,MAAM,SAAS,KAAK,CAAC;AAE5B,6CAA6C;AAC7C,eAAO,MAAM,aAAa,QAAa,CAAC;AAExC,qDAAqD;AACrD,eAAO,MAAM,aAAa,QAAQ,CAAC;AAEnC,uDAAuD;AACvD,eAAO,MAAM,aAAa,EAAE,MAAM,EAOjC,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,eAAe,EAAE,MAAM,EASnC,CAAC;AAEF,6CAA6C;AAC7C,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC,mDAAmD;AACnD,eAAO,MAAM,oBAAoB,QAAa,CAAC;AAE/C,yDAAyD;AACzD,eAAO,MAAM,YAAY,QAAkC,CAAC;AAE5D,6CAA6C;AAC7C,eAAO,MAAM,cAAc,QACoM,CAAC;AAEhO,iEAAiE;AACjE,eAAO,MAAM,YAAY,QACma,CAAC;AAE7b,uEAAuE;AACvE,eAAO,MAAM,iBAAiB,QAC0B,CAAC;AAEzD,mEAAmE;AACnE,eAAO,MAAM,mBAAmB,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAgBhE,CAAC;AAMF,MAAM,MAAM,WAAW,GACnB,cAAc,GACd,UAAU,GACV,aAAa,GACb,KAAK,GACL,OAAO,CAAC;AAEZ,MAAM,WAAW,SAAS;IACxB,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IACxD,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,WAAW,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IACjE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAChD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAMD,2FAA2F;AAC3F,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CA2B7C;AAMD,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd,CAeA;AAED,gFAAgF;AAChF,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,OAAO,CAAC,CAYlB;AAED,8FAA8F;AAC9F,wBAAsB,cAAc,CAClC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAkBxB;AAMD,uFAAuF;AACvF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgE5E;AAMD,oFAAoF;AACpF,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CA+BnD;AAMD,+DAA+D;AAC/D,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAmB1E;AAMD,0DAA0D;AAC1D,wBAAgB,uBAAuB,IAAI,iBAAiB,CAW3D;AAED,yDAAyD;AACzD,wBAAgB,OAAO,CACrB,KAAK,EAAE,iBAAiB,EACxB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,GACd,IAAI,CAKN;AAED,0FAA0F;AAC1F,wBAAgB,cAAc,CAC5B,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,MAAM,GACd,IAAI,CAoBN;AAED,wEAAwE;AACxE,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,MAAM,GACd,IAAI,CAwBN;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,IAAI,CA0BN;AAED,wEAAwE;AACxE,wBAAgB,cAAc,CAC5B,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,IAAI,CAKN;AAED,iDAAiD;AACjD,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,IAAI,CAmDN;AAED,qEAAqE;AACrE,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,IAAI,CA4CN;AAED,uDAAuD;AACvD,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,IAAI,CA8BN;AAED,2EAA2E;AAC3E,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,IAAI,CAgCN;AAED,8DAA8D;AAC9D,wBAAgB,eAAe,CAC7B,KAAK,EAAE,iBAAiB,EACxB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,IAAI,CA+CN;AAMD,gDAAgD;AAChD,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAE9C;AAED,oDAAoD;AACpD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAI5D;AAED,uDAAuD;AACvD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAG3D;AAED,2DAA2D;AAC3D,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,CAyB1D;AAED,mFAAmF;AACnF,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,WAAW,EACxB,OAAO,EAAE,OAAO,GACf,MAAM,EAAE,CAoDV;AAMD,yDAAyD;AACzD,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,mBAAmB,CAAC,CA8G9B"}