@agent-native/core 0.7.21 → 0.7.22

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,aAAa,GAGd,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAA0B,MAAM,UAAU,CAAC;AACpE,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,UAAU,EACV,UAAU,EACV,aAAa,EACb,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,uBAAuB,EACvB,mBAAmB,EACnB,cAAc,GAIf,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,aAAa,EAA2B,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAA4B,MAAM,cAAc,CAAC;AACvE,OAAO,EACL,4BAA4B,GAY7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAElE,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,eAAe,GAChB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACvE,2EAA2E;AAC3E,2EAA2E;AAC3E,8DAA8D;AAC9D,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EACL,sBAAsB,GAEvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,YAAY,EACZ,SAAS,EACT,WAAW,EACX,gBAAgB,EAChB,YAAY,GAGb,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,GAEvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GAEtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,kBAAkB,GAEnB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,SAAS,EACT,OAAO,EACP,eAAe,EACf,SAAS,EACT,UAAU,EACV,eAAe,GAGhB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EACL,QAAQ,EACR,cAAc,GAEf,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,iBAAiB,GAElB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,0BAA0B,GAE3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAExE,OAAO,EACL,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,uBAAuB,EACvB,2BAA2B,EAC3B,UAAU,EACV,yBAAyB,GAI1B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,YAAY,EACZ,eAAe,EACf,eAAe,EACf,YAAY,GAMb,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,UAAU,EACV,QAAQ,EACR,SAAS,EACT,cAAc,EACd,SAAS,EACT,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,EACd,wBAAwB,GAIzB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,2BAA2B,EAC3B,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,eAAe,GAEhB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,gBAAgB,GAGjB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,WAAW,EACX,WAAW,GAIZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GAGtB,MAAM,wBAAwB,CAAC;AAWhC,MAAM,UAAU,iBAAiB,CAAC,GAAmB;IACnD,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["export {\n  createServer,\n  upsertEnvFile,\n  type CreateServerOptions,\n  type EnvKeyConfig,\n} from \"./create-server.js\";\n\nexport { readBody, streamFile } from \"./h3-helpers.js\";\nexport { createSSEHandler, type SSEHandlerOptions } from \"./sse.js\";\nexport {\n  mountAuthMiddleware,\n  autoMountAuth,\n  getSession,\n  addSession,\n  removeSession,\n  getSessionEmail,\n  runAuthGuard,\n  setDesktopExchange,\n  setDesktopExchangeError,\n  DEV_MODE_USER_EMAIL,\n  safeReturnPath,\n  type DesktopExchangeErrorPayload,\n  type AuthSession,\n  type AuthOptions,\n} from \"./auth.js\";\nexport { requireEnvKey, type MissingKeyResponse } from \"./missing-key.js\";\nexport { verifyCaptcha, type CaptchaVerifyResult } from \"./captcha.js\";\nexport {\n  createProductionAgentHandler,\n  type ActionEntry,\n  type ScriptEntry,\n  type ProductionAgentOptions,\n  type ActionTool,\n  type ScriptTool,\n  type AgentMessage,\n  type AgentChatRequest,\n  type AgentChatEvent,\n  type AgentChatReference,\n  type MentionProvider,\n  type MentionProviderItem,\n} from \"../agent/index.js\";\nexport { createDevScriptRegistry } from \"../scripts/dev/index.js\";\n\nexport {\n  createPollHandler,\n  recordChange,\n  getVersion,\n  getChangesSince,\n} from \"./poll.js\";\nexport { createAuthPlugin, defaultAuthPlugin } from \"./auth-plugin.js\";\n// Re-export the org plugin so the auto-discovery's DEFAULT_PLUGIN_REGISTRY\n// (which references \"defaultOrgPlugin\" from @agent-native/core/server) can\n// resolve it during the deploy build worker-entry generation.\nexport { createOrgPlugin, defaultOrgPlugin } from \"../org/plugin.js\";\nexport {\n  createGoogleAuthPlugin,\n  type GoogleAuthPluginOptions,\n} from \"./google-auth-plugin.js\";\nexport {\n  createAgentChatPlugin,\n  defaultAgentChatPlugin,\n  type AgentChatPluginOptions,\n} from \"./agent-chat-plugin.js\";\nexport {\n  createThread,\n  getThread,\n  listThreads,\n  updateThreadData,\n  deleteThread,\n  type ChatThread,\n  type ChatThreadSummary,\n} from \"../chat-threads/store.js\";\nexport {\n  createResourcesPlugin,\n  defaultResourcesPlugin,\n} from \"./resources-plugin.js\";\nexport {\n  createCoreRoutesPlugin,\n  defaultCoreRoutesPlugin,\n  FRAMEWORK_ROUTE_PREFIX,\n  type CoreRoutesPluginOptions,\n} from \"./core-routes-plugin.js\";\nexport {\n  createTerminalPlugin,\n  defaultTerminalPlugin,\n  type TerminalPluginOptions,\n} from \"../terminal/terminal-plugin.js\";\nexport {\n  createCollabPlugin,\n  type CollabPluginOptions,\n} from \"./collab-plugin.js\";\n\nexport {\n  spawnTask,\n  getTask,\n  getTaskByThread,\n  listTasks,\n  sendToTask,\n  markTaskErrored,\n  type AgentTask,\n  type SpawnTaskOptions,\n} from \"./agent-teams.js\";\nexport { isOAuthConnected, getOAuthAccounts } from \"./oauth-helpers.js\";\nexport { wrapWithAnalytics } from \"./analytics.js\";\nexport {\n  getH3App,\n  awaitBootstrap,\n  type H3AppShim,\n} from \"./framework-request-handler.js\";\nexport {\n  autoDiscoverActions,\n  autoDiscoverScripts,\n  loadActionsFromStaticRegistry,\n  mergeCoreSharingActions,\n} from \"./action-discovery.js\";\nexport {\n  mountActionRoutes,\n  type MountActionRoutesOptions,\n} from \"./action-routes.js\";\nexport {\n  runWithRequestContext,\n  hasRequestContext,\n  getRequestContext,\n  getRequestUserEmail,\n  getRequestOrgId,\n  getRequestTimezone,\n  getCredentialContext,\n  isIntegrationCallerRequest,\n  type RequestContext,\n} from \"./request-context.js\";\nexport { formatDateInTimezone, todayInTimezone } from \"./date-utils.js\";\n\nexport {\n  createOnboardingPlugin,\n  defaultOnboardingPlugin,\n} from \"../onboarding/plugin.js\";\n\nexport {\n  registerFileUploadProvider,\n  unregisterFileUploadProvider,\n  listFileUploadProviders,\n  getActiveFileUploadProvider,\n  uploadFile,\n  builderFileUploadProvider,\n  type FileUploadInput,\n  type FileUploadProvider,\n  type FileUploadResult,\n} from \"../file-upload/index.js\";\n\nexport {\n  createIntegrationsPlugin,\n  defaultIntegrationsPlugin,\n  slackAdapter,\n  telegramAdapter,\n  whatsappAdapter,\n  emailAdapter,\n  type PlatformAdapter,\n  type IncomingMessage,\n  type OutgoingMessage,\n  type IntegrationStatus,\n  type IntegrationsPluginOptions,\n} from \"../integrations/index.js\";\n\nexport {\n  isElectron,\n  isMobile,\n  getOrigin,\n  getAppBasePath,\n  getAppUrl,\n  encodeOAuthState,\n  decodeOAuthState,\n  resolveOAuthOwner,\n  createOAuthSession,\n  oauthCallbackResponse,\n  oauthErrorPage,\n  oauthDesktopExchangePage,\n  type OAuthStatePayload,\n  type OAuthOwnerResult,\n  type OAuthSessionResult,\n} from \"./google-oauth.js\";\n\nexport {\n  FeatureNotConfiguredError,\n  hasBuilderPrivateKey,\n  isBuilderEnvManaged,\n  getBuilderProxyOrigin,\n  getBuilderAuthHeader,\n  resolveBuilderPrivateKey,\n  resolveBuilderAuthHeader,\n  resolveHasBuilderPrivateKey,\n  resolveBuilderCredentials,\n  resolveBuilderCredential,\n  writeBuilderCredentials,\n  deleteBuilderCredentials,\n  resolveSecret,\n} from \"./credential-provider.js\";\nexport {\n  getBuilderBranchProjectId,\n  isBuilderBranchingEnabled,\n  runBuilderAgent,\n  type RunBuilderAgentResult,\n} from \"./builder-browser.js\";\n\nexport {\n  sendEmail,\n  isEmailConfigured,\n  getEmailProvider,\n  type EmailProvider,\n  type SendEmailArgs,\n} from \"./email.js\";\nexport {\n  renderEmail,\n  emailStrong,\n  type RenderEmailArgs,\n  type RenderedEmail,\n  type EmailCta,\n} from \"./email-template.js\";\nexport { getAppProductionUrl, getFirstPartyProdUrl } from \"./app-url.js\";\nexport {\n  signShortLivedToken,\n  verifyShortLivedToken,\n  type ShortLivedTokenClaims,\n  type VerifyResult as ShortLivedTokenVerifyResult,\n} from \"./short-lived-token.js\";\n\n// SSR handler is NOT re-exported here — it uses a virtual module\n// (virtual:react-router/server-build) that only exists at Vite dev/build time.\n// Including it in this barrel would break the esbuild CF Pages bundler.\n// Templates import directly: import { ssrHandler } from \"@agent-native/core/server/ssr-handler\"\n\n// Nitro plugin helper — re-exported so templates don't need nitro as a direct dependency.\n// defineNitroPlugin is an identity function; this typed wrapper lets templates use it\n// without resolving `nitro/runtime` (which requires Nitro's virtual modules at runtime).\ntype NitroPluginDef = (nitroApp: any) => void | Promise<void>;\nexport function defineNitroPlugin(def: NitroPluginDef): NitroPluginDef {\n  return def;\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,aAAa,GAGd,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAA0B,MAAM,UAAU,CAAC;AACpE,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,UAAU,EACV,UAAU,EACV,aAAa,EACb,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,uBAAuB,EACvB,mBAAmB,EACnB,cAAc,GAIf,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,aAAa,EAA2B,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAA4B,MAAM,cAAc,CAAC;AACvE,OAAO,EACL,4BAA4B,GAY7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAElE,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,eAAe,GAChB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACvE,2EAA2E;AAC3E,2EAA2E;AAC3E,8DAA8D;AAC9D,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EACL,sBAAsB,GAEvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,YAAY,EACZ,SAAS,EACT,WAAW,EACX,gBAAgB,EAChB,YAAY,GAGb,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,GAEvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GAEtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,kBAAkB,GAEnB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,SAAS,EACT,OAAO,EACP,eAAe,EACf,SAAS,EACT,UAAU,EACV,eAAe,GAGhB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EACL,QAAQ,EACR,cAAc,GAEf,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,iBAAiB,GAElB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,0BAA0B,GAE3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAExE,OAAO,EACL,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,uBAAuB,EACvB,2BAA2B,EAC3B,UAAU,EACV,yBAAyB,GAI1B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,YAAY,EACZ,eAAe,EACf,eAAe,EACf,YAAY,GAMb,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,UAAU,EACV,QAAQ,EACR,SAAS,EACT,cAAc,EACd,SAAS,EACT,uBAAuB,EACvB,yBAAyB,EACzB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,EACd,wBAAwB,GAIzB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,2BAA2B,EAC3B,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,eAAe,GAEhB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,gBAAgB,GAGjB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,WAAW,EACX,WAAW,EACX,SAAS,GAIV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GAGtB,MAAM,wBAAwB,CAAC;AAWhC,MAAM,UAAU,iBAAiB,CAAC,GAAmB;IACnD,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["export {\n  createServer,\n  upsertEnvFile,\n  type CreateServerOptions,\n  type EnvKeyConfig,\n} from \"./create-server.js\";\n\nexport { readBody, streamFile } from \"./h3-helpers.js\";\nexport { createSSEHandler, type SSEHandlerOptions } from \"./sse.js\";\nexport {\n  mountAuthMiddleware,\n  autoMountAuth,\n  getSession,\n  addSession,\n  removeSession,\n  getSessionEmail,\n  runAuthGuard,\n  setDesktopExchange,\n  setDesktopExchangeError,\n  DEV_MODE_USER_EMAIL,\n  safeReturnPath,\n  type DesktopExchangeErrorPayload,\n  type AuthSession,\n  type AuthOptions,\n} from \"./auth.js\";\nexport { requireEnvKey, type MissingKeyResponse } from \"./missing-key.js\";\nexport { verifyCaptcha, type CaptchaVerifyResult } from \"./captcha.js\";\nexport {\n  createProductionAgentHandler,\n  type ActionEntry,\n  type ScriptEntry,\n  type ProductionAgentOptions,\n  type ActionTool,\n  type ScriptTool,\n  type AgentMessage,\n  type AgentChatRequest,\n  type AgentChatEvent,\n  type AgentChatReference,\n  type MentionProvider,\n  type MentionProviderItem,\n} from \"../agent/index.js\";\nexport { createDevScriptRegistry } from \"../scripts/dev/index.js\";\n\nexport {\n  createPollHandler,\n  recordChange,\n  getVersion,\n  getChangesSince,\n} from \"./poll.js\";\nexport { createAuthPlugin, defaultAuthPlugin } from \"./auth-plugin.js\";\n// Re-export the org plugin so the auto-discovery's DEFAULT_PLUGIN_REGISTRY\n// (which references \"defaultOrgPlugin\" from @agent-native/core/server) can\n// resolve it during the deploy build worker-entry generation.\nexport { createOrgPlugin, defaultOrgPlugin } from \"../org/plugin.js\";\nexport {\n  createGoogleAuthPlugin,\n  type GoogleAuthPluginOptions,\n} from \"./google-auth-plugin.js\";\nexport {\n  createAgentChatPlugin,\n  defaultAgentChatPlugin,\n  type AgentChatPluginOptions,\n} from \"./agent-chat-plugin.js\";\nexport {\n  createThread,\n  getThread,\n  listThreads,\n  updateThreadData,\n  deleteThread,\n  type ChatThread,\n  type ChatThreadSummary,\n} from \"../chat-threads/store.js\";\nexport {\n  createResourcesPlugin,\n  defaultResourcesPlugin,\n} from \"./resources-plugin.js\";\nexport {\n  createCoreRoutesPlugin,\n  defaultCoreRoutesPlugin,\n  FRAMEWORK_ROUTE_PREFIX,\n  type CoreRoutesPluginOptions,\n} from \"./core-routes-plugin.js\";\nexport {\n  createTerminalPlugin,\n  defaultTerminalPlugin,\n  type TerminalPluginOptions,\n} from \"../terminal/terminal-plugin.js\";\nexport {\n  createCollabPlugin,\n  type CollabPluginOptions,\n} from \"./collab-plugin.js\";\n\nexport {\n  spawnTask,\n  getTask,\n  getTaskByThread,\n  listTasks,\n  sendToTask,\n  markTaskErrored,\n  type AgentTask,\n  type SpawnTaskOptions,\n} from \"./agent-teams.js\";\nexport { isOAuthConnected, getOAuthAccounts } from \"./oauth-helpers.js\";\nexport { wrapWithAnalytics } from \"./analytics.js\";\nexport {\n  getH3App,\n  awaitBootstrap,\n  type H3AppShim,\n} from \"./framework-request-handler.js\";\nexport {\n  autoDiscoverActions,\n  autoDiscoverScripts,\n  loadActionsFromStaticRegistry,\n  mergeCoreSharingActions,\n} from \"./action-discovery.js\";\nexport {\n  mountActionRoutes,\n  type MountActionRoutesOptions,\n} from \"./action-routes.js\";\nexport {\n  runWithRequestContext,\n  hasRequestContext,\n  getRequestContext,\n  getRequestUserEmail,\n  getRequestOrgId,\n  getRequestTimezone,\n  getCredentialContext,\n  isIntegrationCallerRequest,\n  type RequestContext,\n} from \"./request-context.js\";\nexport { formatDateInTimezone, todayInTimezone } from \"./date-utils.js\";\n\nexport {\n  createOnboardingPlugin,\n  defaultOnboardingPlugin,\n} from \"../onboarding/plugin.js\";\n\nexport {\n  registerFileUploadProvider,\n  unregisterFileUploadProvider,\n  listFileUploadProviders,\n  getActiveFileUploadProvider,\n  uploadFile,\n  builderFileUploadProvider,\n  type FileUploadInput,\n  type FileUploadProvider,\n  type FileUploadResult,\n} from \"../file-upload/index.js\";\n\nexport {\n  createIntegrationsPlugin,\n  defaultIntegrationsPlugin,\n  slackAdapter,\n  telegramAdapter,\n  whatsappAdapter,\n  emailAdapter,\n  type PlatformAdapter,\n  type IncomingMessage,\n  type OutgoingMessage,\n  type IntegrationStatus,\n  type IntegrationsPluginOptions,\n} from \"../integrations/index.js\";\n\nexport {\n  isElectron,\n  isMobile,\n  getOrigin,\n  getAppBasePath,\n  getAppUrl,\n  resolveOAuthRedirectUri,\n  isAllowedOAuthRedirectUri,\n  encodeOAuthState,\n  decodeOAuthState,\n  resolveOAuthOwner,\n  createOAuthSession,\n  oauthCallbackResponse,\n  oauthErrorPage,\n  oauthDesktopExchangePage,\n  type OAuthStatePayload,\n  type OAuthOwnerResult,\n  type OAuthSessionResult,\n} from \"./google-oauth.js\";\n\nexport {\n  FeatureNotConfiguredError,\n  hasBuilderPrivateKey,\n  isBuilderEnvManaged,\n  getBuilderProxyOrigin,\n  getBuilderAuthHeader,\n  resolveBuilderPrivateKey,\n  resolveBuilderAuthHeader,\n  resolveHasBuilderPrivateKey,\n  resolveBuilderCredentials,\n  resolveBuilderCredential,\n  writeBuilderCredentials,\n  deleteBuilderCredentials,\n  resolveSecret,\n} from \"./credential-provider.js\";\nexport {\n  getBuilderBranchProjectId,\n  isBuilderBranchingEnabled,\n  runBuilderAgent,\n  type RunBuilderAgentResult,\n} from \"./builder-browser.js\";\n\nexport {\n  sendEmail,\n  isEmailConfigured,\n  getEmailProvider,\n  type EmailProvider,\n  type SendEmailArgs,\n} from \"./email.js\";\nexport {\n  renderEmail,\n  emailStrong,\n  emailLink,\n  type RenderEmailArgs,\n  type RenderedEmail,\n  type EmailCta,\n} from \"./email-template.js\";\nexport { getAppProductionUrl, getFirstPartyProdUrl } from \"./app-url.js\";\nexport {\n  getConfiguredAppBasePath,\n  normalizeAppBasePath,\n  withConfiguredAppBasePath,\n} from \"./app-base-path.js\";\nexport {\n  signShortLivedToken,\n  verifyShortLivedToken,\n  type ShortLivedTokenClaims,\n  type VerifyResult as ShortLivedTokenVerifyResult,\n} from \"./short-lived-token.js\";\n\n// SSR handler is NOT re-exported here — it uses a virtual module\n// (virtual:react-router/server-build) that only exists at Vite dev/build time.\n// Including it in this barrel would break the esbuild CF Pages bundler.\n// Templates import directly: import { ssrHandler } from \"@agent-native/core/server/ssr-handler\"\n\n// Nitro plugin helper — re-exported so templates don't need nitro as a direct dependency.\n// defineNitroPlugin is an identity function; this typed wrapper lets templates use it\n// without resolving `nitro/runtime` (which requires Nitro's virtual modules at runtime).\ntype NitroPluginDef = (nitroApp: any) => void | Promise<void>;\nexport function defineNitroPlugin(def: NitroPluginDef): NitroPluginDef {\n  return def;\n}\n"]}

package/dist/server/onboarding-html.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"onboarding-html.d.ts","sourceRoot":"","sources":["../../src/server/onboarding-html.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA0BH,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,SAAS,CAAC,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;CACH;AAID,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,qBAA0B,GAAG,MAAM,CA60B1E;AAED,kDAAkD;AAClD,eAAO,MAAM,eAAe,QAAsB,CAAC;AAEnD;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAwG7C"}
+{"version":3,"file":"onboarding-html.d.ts","sourceRoot":"","sources":["../../src/server/onboarding-html.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA0BH,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,SAAS,CAAC,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;CACH;AAID,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,qBAA0B,GAAG,MAAM,CAs0B1E;AAED,kDAAkD;AAClD,eAAO,MAAM,eAAe,QAAsB,CAAC;AAEnD;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAwG7C"}

package/dist/server/onboarding-html.js

@@ -128,7 +128,7 @@ export function getOnboardingHtml(opts = {}) {
     letter-spacing: -0.02em;
   }
   .app-name img.brand-mark {
-    height: 2.0125rem;
+    height: 2.21375rem;
     width: auto;
     display: block;
     flex-shrink: 0;
@@ -194,7 +194,7 @@ export function getOnboardingHtml(opts = {}) {
     .split { flex-direction: column; min-height: auto; }
     .marketing-panel { padding: 2rem 1.5rem 1.5rem; }
     .app-name { font-size: 1.375rem; }
-    .app-name img.brand-mark { height: 1.4375rem; }
+    .app-name img.brand-mark { height: 1.58125rem; }
     .app-tagline { font-size: 1rem; margin-bottom: 1rem; }
     .app-desc { margin-bottom: 1rem; }
     .feature-list { gap: 0.5rem; }
@@ -837,14 +837,7 @@ ${showGoogle
       var data = await res.json();
       if (data.url) {
         try { sessionStorage.setItem('__an_signin', '1'); } catch(e) {}
-        window.open(data.url, '_blank');
-        btn.disabled = false;
-        btn.textContent = 'Waiting for sign-in…';
-        var poll = setInterval(function() {
-          fetch(__anPath('/_agent-native/auth/session')).then(function(r) { return r.json(); }).then(function(s) {
-            if (s && s.email) { clearInterval(poll); window.location.reload(); }
-          }).catch(function() {});
-        }, 1500);
+        window.location.href = data.url;
       } else {
         err.textContent = data.message || 'Google OAuth is not configured.';
         err.classList.add('show');

package/dist/server/onboarding-html.js.map

@@ -1 +1 @@
-{"version":3,"file":"onboarding-html.js","sourceRoot":"","sources":["../../src/server/onboarding-html.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;IACjC,OAAO,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,MAAM,CAAC;AACjD,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,qBAAqB,CAAC;IACvC,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACrE,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAO,eAAe,CAAC;QACtD,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO,mBAAmB,CAAC;QACzD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,qBAAqB,CAAC;IAC1D,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5E,OAAO,cAAc,CAAC;AACxB,CAAC;AAsBD,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAEjD,MAAM,UAAU,iBAAiB,CAAC,OAA8B,EAAE;IAChE,MAAM,aAAa,GACjB,CAAC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,eAAe,EAAE,CAAC;IAC9D,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;IACrC,MAAM,cAAc,GAAG,aAAa;QAClC,CAAC,CAAC;;;;mHAI6G;QAC/G,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,eAAe,GAAG,aAAa;QACnC,CAAC,CAAC;;;;;;;oCAO8B,gBAAgB;qCACf,gBAAgB;;;;;;;;;;;;;;;;;;;;IAoBjD;QACA,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,MAAM,YAAY,GAAG,CAAC,CAAC,SAAS,CAAC;IACjC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CACxB,CAAC;SACE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAE7B,MAAM,eAAe,GAAG,YAAY;QAClC,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+GL;QACG,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,kBAAkB,GAAG,YAAY;QACrC,CAAC,CAAC;;;;;;gBAMU,GAAG,CAAC,SAAU,CAAC,OAAO,CAAC;;+BAER,GAAG,CAAC,SAAU,CAAC,OAAO,CAAC;EACpD,SAAU,CAAC,WAAW,CAAC,CAAC,CAAC,6BAA6B,GAAG,CAAC,SAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GACxF,SAAU,CAAC,QAAQ,EAAE,MAAM;YACzB,CAAC,CAAC,oCAAoC,SAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAC9H,CAAC,CAAC,EACN;;;;;;2BAMqB;QACvB,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,kBAAkB,GAAG,YAAY,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;IAEpE,MAAM,eAAe,GAAG,YAAY;QAClC,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAwFE;QACJ,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;;;;;SAKA,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,SAAU,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS;EAExE,YAAY;QACV,CAAC,CAAC,qCAAqC,GAAG,CAAC,SAAU,CAAC,OAAO,CAAC;qCAC7B,GAAG,CAAC,SAAU,CAAC,OAAO,CAAC;2CACjB,GAAG,CAAC,SAAU,CAAC,OAAO,CAAC,IAAI;QAClE,CAAC,CAAC,EACN;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoKE,eAAe;;;OAGV,YAAY,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE;EACjD,kBAAkB;;;;;;;;EASlB,UAAU;QACR,CAAC,CAAC;;;;;;EAMJ,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,qCAAqC;CACxD;QACG,CAAC,CAAC,UAAU;YACV,CAAC,CAAC;;;;;CAKP;YACK,CAAC,CAAC,EACR;EAEE,UAAU;QACR,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAqCN;EACE,cAAc;;;yDAGyC,kBAAkB,EAAE;MACvE,kBAAkB;;;;;;;;;;;;;;;;;EAkBtB,UAAU;QACR,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmNN,GAAG,eAAe;EAEhB,aAAa;QACX,CAAC,CAAC;;;;;;;;;mCAS6B,gBAAgB;;;;;;;;;;CAUlD;QACG,CAAC,CAAC,EACN;EAEE,UAAU;QACR,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA0CF;QACA,CAAC,CAAC,EACN;EACE,eAAe;;;QAGT,CAAC;AACT,CAAC;AAED,kDAAkD;AAClD,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,EAAE,CAAC;AAEnD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAsGD,CAAC;AACT,CAAC","sourcesContent":["/**\n * First-run onboarding page for agent-native apps.\n *\n * Shown when Better Auth is active and the user isn't signed in.\n * Provides two paths:\n * 1. Create account (email/password) — real identity from day one\n * 2. Use locally — sets AUTH_MODE=local for offline/solo dev (dev only)\n *\n * After first account exists, this page acts as a normal login page.\n * The \"Use locally\" escape hatch is hidden in production to ensure\n * real accounts are used (needed for per-user usage tracking/limits).\n * It's also hidden when DATABASE_URL points at a non-local DB (Postgres,\n * Turso, D1) — local@localhost has no per-user scoping, so enabling it\n * against a shared DB would silently fail server-side.\n */\n\nimport { isLocalDatabase } from \"../db/client.js\";\n\nfunction isProductionEnv(): boolean {\n  const env = process.env.NODE_ENV;\n  return env !== \"development\" && env !== \"test\";\n}\n\nfunction hasGoogleOAuth(): boolean {\n  return !!(process.env.GOOGLE_CLIENT_ID && process.env.GOOGLE_CLIENT_SECRET);\n}\n\nfunction getConnectionLabel(): string {\n  const url = process.env.DATABASE_URL || \"\";\n  if (!url) return \"SQLite (local file)\";\n  if (url.startsWith(\"postgres://\") || url.startsWith(\"postgresql://\")) {\n    if (url.includes(\"neon.tech\")) return \"Neon Postgres\";\n    if (url.includes(\"supabase\")) return \"Supabase Postgres\";\n    return \"Postgres\";\n  }\n  if (url.startsWith(\"file:\")) return \"SQLite (local file)\";\n  if (url.startsWith(\"libsql://\") || url.includes(\"turso.io\")) return \"Turso\";\n  return \"SQL database\";\n}\n\nexport interface OnboardingHtmlOptions {\n  /**\n   * Hide email/password forms and show ONLY the Google sign-in button.\n   * Useful for templates (mail, calendar) where Google is required anyway.\n   * If Google OAuth env vars are not configured, an error message is shown.\n   */\n  googleOnly?: boolean;\n  /**\n   * Product marketing content shown alongside the sign-in form.\n   * When provided, the page uses a split layout: marketing on the left,\n   * sign-in form on the right (stacked on mobile).\n   */\n  marketing?: {\n    appName: string;\n    tagline: string;\n    description?: string;\n    features?: string[];\n  };\n}\n\nconst MIGRATE_FLAG_KEY = \"an_migrate_from_local\";\n\nexport function getOnboardingHtml(opts: OnboardingHtmlOptions = {}): string {\n  const showLocalMode =\n    !isProductionEnv() && !opts.googleOnly && isLocalDatabase();\n  const showGoogle = hasGoogleOAuth();\n  const googleOnly = !!opts.googleOnly;\n  const localModeBlock = showLocalMode\n    ? `\n  <div class=\"divider\" id=\"local-divider\">or</div>\n\n  <button class=\"btn-secondary\" id=\"local-btn\" onclick=\"useLocally()\">Use locally without an account</button>\n  <p class=\"local-info\" id=\"local-info\">Skip auth for solo local development. You can create an account later.</p>`\n    : \"\";\n\n  const localModeScript = showLocalMode\n    ? `\n  async function useLocally() {\n    var btn = document.getElementById('local-btn');\n    btn.disabled = true;\n    btn.textContent = 'Setting up...';\n    try {\n      try {\n        if (localStorage.getItem('${MIGRATE_FLAG_KEY}')) {\n          localStorage.removeItem('${MIGRATE_FLAG_KEY}');\n        }\n      } catch (e) {}\n      var res = await fetch(__anPath('/_agent-native/auth/local-mode'), { method: 'POST' });\n      if (res.ok) {\n        window.location.reload();\n      } else {\n        var data = await res.json().catch(function() { return {}; });\n        var info = document.getElementById('local-info');\n        if (info && data && data.error) {\n          info.textContent = data.error;\n          info.style.color = '#f87171';\n        }\n        btn.textContent = 'Not available';\n        btn.disabled = true;\n      }\n    } catch(e) {\n      btn.textContent = 'Failed — try again';\n      btn.disabled = false;\n    }\n  }`\n    : \"\";\n\n  const marketing = opts.marketing;\n  const hasMarketing = !!marketing;\n  const esc = (s: string) =>\n    s\n      .replace(/&/g, \"&amp;\")\n      .replace(/</g, \"&lt;\")\n      .replace(/>/g, \"&gt;\")\n      .replace(/\"/g, \"&quot;\");\n\n  const marketingStyles = hasMarketing\n    ? `\n  body.has-marketing { padding: 0; position: relative; overflow-x: hidden; }\n  #starfield {\n    position: fixed;\n    inset: 0;\n    width: 100%;\n    height: 100%;\n    opacity: 0.35;\n    pointer-events: none;\n    z-index: 0;\n  }\n  .split {\n    position: relative;\n    z-index: 1;\n    display: flex;\n    min-height: 100vh;\n    width: 100%;\n    max-width: 1100px;\n    margin: 0 auto;\n  }\n  .marketing-panel {\n    flex: 1;\n    display: flex;\n    flex-direction: column;\n    justify-content: center;\n    padding: 3rem 3.5rem;\n  }\n  .marketing-content { max-width: 480px; }\n  .app-name {\n    display: flex;\n    align-items: center;\n    gap: 0.625rem;\n    font-size: 2rem;\n    font-weight: 700;\n    color: #fff;\n    margin-bottom: 0.625rem;\n    letter-spacing: -0.02em;\n  }\n  .app-name img.brand-mark {\n    height: 2.0125rem;\n    width: auto;\n    display: block;\n    flex-shrink: 0;\n  }\n  .app-tagline {\n    font-size: 1.25rem;\n    color: #a1a1aa;\n    line-height: 1.6;\n    margin-bottom: 2rem;\n  }\n  .app-desc {\n    font-size: 1rem;\n    color: #71717a;\n    line-height: 1.6;\n    margin-bottom: 2rem;\n  }\n  .feature-list {\n    list-style: none;\n    display: flex;\n    flex-direction: column;\n    gap: 0.875rem;\n  }\n  .feature-list li {\n    display: flex;\n    align-items: flex-start;\n    gap: 0.625rem;\n    font-size: 1rem;\n    color: #a1a1aa;\n    line-height: 1.5;\n  }\n  .feature-list li::before {\n    content: '';\n    flex-shrink: 0;\n    width: 8px;\n    height: 8px;\n    margin-top: 6px;\n    border-radius: 50%;\n    background: #3f3f46;\n    border: 1px solid #52525b;\n  }\n  .oss-link {\n    display: inline-flex;\n    align-items: center;\n    gap: 0.375rem;\n    margin-top: 2rem;\n    font-size: 0.8125rem;\n    color: #71717a;\n    text-decoration: none;\n  }\n  .oss-link:hover { color: #a1a1aa; }\n  .oss-link svg { width: 15px; height: 15px; flex-shrink: 0; }\n  .form-panel {\n    flex: 0 0 440px;\n    display: flex;\n    flex-direction: column;\n    align-items: center;\n    justify-content: center;\n    padding: 2rem;\n  }\n  .form-panel .card { max-width: 400px; }\n  .form-panel .local-note { max-width: 400px; }\n  @media (max-width: 900px) {\n    .split { flex-direction: column; min-height: auto; }\n    .marketing-panel { padding: 2rem 1.5rem 1.5rem; }\n    .app-name { font-size: 1.375rem; }\n    .app-name img.brand-mark { height: 1.4375rem; }\n    .app-tagline { font-size: 1rem; margin-bottom: 1rem; }\n    .app-desc { margin-bottom: 1rem; }\n    .feature-list { gap: 0.5rem; }\n    .form-panel { flex: none; padding: 1.5rem 1rem; }\n  }\n`\n    : \"\";\n\n  const marketingPanelHtml = hasMarketing\n    ? `<canvas id=\"starfield\"></canvas>\n<div class=\"split\">\n  <div class=\"marketing-panel\">\n    <div class=\"marketing-content\">\n      <h2 class=\"app-name\">\n        <img class=\"brand-mark\" src=\"/agent-native-icon-dark.svg\" alt=\"\" aria-hidden=\"true\" />\n        <span>${esc(marketing!.appName)}</span>\n      </h2>\n      <p class=\"app-tagline\">${esc(marketing!.tagline)}</p>\n${marketing!.description ? `      <p class=\"app-desc\">${esc(marketing!.description)}</p>\\n` : \"\"}${\n        marketing!.features?.length\n          ? `      <ul class=\"feature-list\">\\n${marketing!.features.map((f) => `        <li>${esc(f)}</li>`).join(\"\\n\")}\\n      </ul>\\n`\n          : \"\"\n      }      <a class=\"oss-link\" href=\"https://github.com/BuilderIO/agent-native\" target=\"_blank\" rel=\"noreferrer\">\n        <svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M9 19c-4.3 1.4-4.3-2.5-6-3m12 5v-3.5c0-1 .1-1.4-.5-2 2.8-.3 5.5-1.4 5.5-6a4.6 4.6 0 00-1.3-3.2 4.2 4.2 0 00-.1-3.2s-1.1-.3-3.5 1.3a12.3 12.3 0 00-6.2 0C6.5 2.8 5.4 3.1 5.4 3.1a4.2 4.2 0 00-.1 3.2A4.6 4.6 0 004 9.5c0 4.6 2.7 5.7 5.5 6-.6.6-.6 1.2-.5 2V21\"/></svg>\n        Open source\n      </a>\n    </div>\n  </div>\n  <div class=\"form-panel\">`\n    : \"\";\n\n  const marketingCloseHtml = hasMarketing ? `\\n  </div>\\n</div>` : \"\";\n\n  const starfieldScript = hasMarketing\n    ? `\n  (function initStarfield() {\n    var canvas = document.getElementById('starfield');\n    if (!canvas) return;\n    var gl = canvas.getContext('webgl', { alpha: false, antialias: false });\n    if (!gl) return;\n\n    var vs = gl.createShader(gl.VERTEX_SHADER);\n    gl.shaderSource(vs, 'attribute vec2 position;void main(){gl_Position=vec4(position,0.0,1.0);}');\n    gl.compileShader(vs);\n\n    var fs = gl.createShader(gl.FRAGMENT_SHADER);\n    gl.shaderSource(fs, [\n      'precision highp float;',\n      'uniform float iTime;uniform vec2 iResolution;',\n      '#define S(a,b,t) smoothstep(a,b,t)',\n      '#define NUM_LAYERS 4.',\n      'float N21(vec2 p){vec3 a=fract(vec3(p.xyx)*vec3(213.897,653.453,253.098));a+=dot(a,a.yzx+79.76);return fract((a.x+a.y)*a.z);}',\n      'vec2 GetPos(vec2 id,vec2 offs,float t){float n=N21(id+offs);float n1=fract(n*10.);float n2=fract(n*100.);float a=t+n;return offs+vec2(sin(a*n1),cos(a*n2))*.4;}',\n      'float df_line(vec2 a,vec2 b,vec2 p){vec2 pa=p-a,ba=b-a;float h=clamp(dot(pa,ba)/dot(ba,ba),0.,1.);return length(pa-ba*h);}',\n      'float line(vec2 a,vec2 b,vec2 uv){float r1=.025;float r2=.006;float d=df_line(a,b,uv);float d2=length(a-b);float fade=S(1.5,.5,d2);fade+=S(.05,.02,abs(d2-.75));return S(r1,r2,d)*fade;}',\n      'float NetLayer(vec2 st,float n,float t){',\n      '  vec2 id=floor(st)+n;st=fract(st)-.5;',\n      '  vec2 p0=GetPos(id,vec2(-1,-1),t);vec2 p1=GetPos(id,vec2(0,-1),t);vec2 p2=GetPos(id,vec2(1,-1),t);',\n      '  vec2 p3=GetPos(id,vec2(-1,0),t);vec2 p4=GetPos(id,vec2(0,0),t);vec2 p5=GetPos(id,vec2(1,0),t);',\n      '  vec2 p6=GetPos(id,vec2(-1,1),t);vec2 p7=GetPos(id,vec2(0,1),t);vec2 p8=GetPos(id,vec2(1,1),t);',\n      '  float m=0.;float sparkle=0.;float d;float s;float pulse;',\n      '  m+=line(p4,p0,st);d=length(st-p0);s=(.005/(d*d));s*=S(1.,.7,d);pulse=sin((fract(p0.x)+fract(p0.y)+t)*5.)*.4+.6;pulse=pow(pulse,20.);sparkle+=s*pulse;',\n      '  m+=line(p4,p1,st);d=length(st-p1);s=(.005/(d*d));s*=S(1.,.7,d);pulse=sin((fract(p1.x)+fract(p1.y)+t)*5.)*.4+.6;pulse=pow(pulse,20.);sparkle+=s*pulse;',\n      '  m+=line(p4,p2,st);d=length(st-p2);s=(.005/(d*d));s*=S(1.,.7,d);pulse=sin((fract(p2.x)+fract(p2.y)+t)*5.)*.4+.6;pulse=pow(pulse,20.);sparkle+=s*pulse;',\n      '  m+=line(p4,p3,st);d=length(st-p3);s=(.005/(d*d));s*=S(1.,.7,d);pulse=sin((fract(p3.x)+fract(p3.y)+t)*5.)*.4+.6;pulse=pow(pulse,20.);sparkle+=s*pulse;',\n      '  m+=line(p4,p4,st);d=length(st-p4);s=(.005/(d*d));s*=S(1.,.7,d);pulse=sin((fract(p4.x)+fract(p4.y)+t)*5.)*.4+.6;pulse=pow(pulse,20.);sparkle+=s*pulse;',\n      '  m+=line(p4,p5,st);d=length(st-p5);s=(.005/(d*d));s*=S(1.,.7,d);pulse=sin((fract(p5.x)+fract(p5.y)+t)*5.)*.4+.6;pulse=pow(pulse,20.);sparkle+=s*pulse;',\n      '  m+=line(p4,p6,st);d=length(st-p6);s=(.005/(d*d));s*=S(1.,.7,d);pulse=sin((fract(p6.x)+fract(p6.y)+t)*5.)*.4+.6;pulse=pow(pulse,20.);sparkle+=s*pulse;',\n      '  m+=line(p4,p7,st);d=length(st-p7);s=(.005/(d*d));s*=S(1.,.7,d);pulse=sin((fract(p7.x)+fract(p7.y)+t)*5.)*.4+.6;pulse=pow(pulse,20.);sparkle+=s*pulse;',\n      '  m+=line(p4,p8,st);d=length(st-p8);s=(.005/(d*d));s*=S(1.,.7,d);pulse=sin((fract(p8.x)+fract(p8.y)+t)*5.)*.4+.6;pulse=pow(pulse,20.);sparkle+=s*pulse;',\n      '  m+=line(p1,p3,st);m+=line(p1,p5,st);m+=line(p7,p5,st);m+=line(p7,p3,st);',\n      '  float sPhase=(sin(t+n)+sin(t*.1))*.25+.5;sPhase+=pow(sin(t*.1)*.5+.5,50.)*5.;m+=sparkle*sPhase;',\n      '  return m;',\n      '}',\n      'void mainImage(out vec4 fragColor,in vec2 fragCoord){',\n      '  vec2 uv=(fragCoord-iResolution.xy*.5)/iResolution.y;',\n      '  float t=iTime*.03;float s=sin(t);float c=cos(t);mat2 rot=mat2(c,-s,s,c);vec2 st=uv*rot;',\n      '  float m=0.;',\n      '  for(float i=0.;i<1.;i+=1./NUM_LAYERS){float z=fract(t+i);float size=mix(15.,1.,z);float fade=S(0.,.6,z)*S(1.,.8,z);m+=fade*NetLayer(st*size,i,iTime*0.3);}',\n      '  vec3 col=vec3(0.35)*m;col*=1.-dot(uv,uv);',\n      '  float tt=min(iTime,5.0);col*=S(0.,20.,tt);',\n      '  col=clamp(col,0.,1.);fragColor=vec4(col,1.);',\n      '}',\n      'void main(){mainImage(gl_FragColor,gl_FragCoord.xy);}'\n    ].join('\\\\n'));\n    gl.compileShader(fs);\n\n    var prog = gl.createProgram();\n    gl.attachShader(prog, vs);\n    gl.attachShader(prog, fs);\n    gl.linkProgram(prog);\n    gl.useProgram(prog);\n\n    var buf = gl.createBuffer();\n    gl.bindBuffer(gl.ARRAY_BUFFER, buf);\n    gl.bufferData(gl.ARRAY_BUFFER, new Float32Array([-1,-1,1,-1,-1,1,-1,1,1,-1,1,1]), gl.STATIC_DRAW);\n    var pos = gl.getAttribLocation(prog, 'position');\n    gl.enableVertexAttribArray(pos);\n    gl.vertexAttribPointer(pos, 2, gl.FLOAT, false, 0, 0);\n\n    var uTime = gl.getUniformLocation(prog, 'iTime');\n    var uRes = gl.getUniformLocation(prog, 'iResolution');\n\n    function resize() {\n      var w = window.innerWidth, h = window.innerHeight;\n      var dpr = Math.min(window.devicePixelRatio, 1.5);\n      canvas.width = w * dpr; canvas.height = h * dpr;\n      gl.viewport(0, 0, canvas.width, canvas.height);\n    }\n    resize();\n    window.addEventListener('resize', resize);\n\n    var start = performance.now(), last = 0;\n    function render(now) {\n      requestAnimationFrame(render);\n      if (now - last < 33) return;\n      last = now;\n      gl.uniform1f(uTime, (now - start) * 0.001);\n      gl.uniform2f(uRes, canvas.width, canvas.height);\n      gl.drawArrays(gl.TRIANGLES, 0, 6);\n    }\n    requestAnimationFrame(render);\n  })();`\n    : \"\";\n\n  return `<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"UTF-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no\">\n<title>${hasMarketing ? esc(marketing!.appName) + \" — Sign in\" : \"Welcome\"}</title>\n${\n  hasMarketing\n    ? `<meta name=\"description\" content=\"${esc(marketing!.tagline)}\">\n<meta property=\"og:title\" content=\"${esc(marketing!.appName)}\">\n<meta property=\"og:description\" content=\"${esc(marketing!.tagline)}\">`\n    : \"\"\n}\n<style>\n  *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }\n  body {\n    font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif;\n    background: #0a0a0a;\n    color: #e5e5e5;\n    display: flex;\n    flex-direction: column;\n    align-items: center;\n    justify-content: center;\n    min-height: 100vh;\n    padding: 1rem;\n  }\n  .card {\n    width: 100%;\n    max-width: 400px;\n    padding: 2rem;\n    background: #141414;\n    border: 1px solid rgba(255,255,255,0.08);\n    border-radius: 12px;\n  }\n  h1 { font-size: 1.25rem; font-weight: 600; margin-bottom: 0.25rem; color: #fff; }\n  .subtitle { font-size: 0.8125rem; color: #888; margin-bottom: 1.5rem; }\n  .tabs {\n    display: inline-flex;\n    width: 100%;\n    padding: 4px;\n    margin-bottom: 1.5rem;\n    background: rgba(255,255,255,0.06);\n    border-radius: 8px;\n  }\n  .tab {\n    flex: 1;\n    padding: 0.5rem 0.75rem;\n    background: none;\n    border: none;\n    color: #888;\n    font-size: 0.8125rem;\n    font-weight: 500;\n    cursor: pointer;\n    border-radius: 6px;\n  }\n  .tab.active {\n    background: #1e1e1e;\n    color: #fff;\n    box-shadow: 0 1px 2px rgba(0,0,0,0.3);\n  }\n  .tab:hover:not(.active) { color: #bbb; }\n  .form { display: none; }\n  .form.active { display: block; }\n  label { display: block; font-size: 0.8125rem; color: #888; margin-bottom: 0.375rem; }\n  input {\n    width: 100%;\n    padding: 0.5rem 0.75rem;\n    background: transparent;\n    border: 1px solid rgba(255,255,255,0.12);\n    border-radius: 6px;\n    color: #e5e5e5;\n    font-size: 0.875rem;\n    outline: none;\n    margin-bottom: 0.875rem;\n  }\n  input:focus { border-color: rgba(255,255,255,0.3); box-shadow: 0 0 0 1px rgba(255,255,255,0.1); }\n  input::placeholder { color: #555; }\n  button[type=\"submit\"], .btn-primary {\n    width: 100%;\n    margin-top: 0.25rem;\n    padding: 0.5rem;\n    background: #fff;\n    color: #000;\n    border: none;\n    border-radius: 6px;\n    font-size: 0.875rem;\n    font-weight: 500;\n    cursor: pointer;\n  }\n  button[type=\"submit\"]:hover, .btn-primary:hover { background: #e5e5e5; }\n  button[type=\"submit\"]:disabled { opacity: 0.5; cursor: not-allowed; }\n  .btn-secondary {\n    width: 100%;\n    margin-top: 0.75rem;\n    padding: 0.5rem;\n    background: transparent;\n    color: #888;\n    border: 1px solid rgba(255,255,255,0.1);\n    border-radius: 6px;\n    font-size: 0.8125rem;\n    cursor: pointer;\n  }\n  .btn-secondary:hover { color: #bbb; border-color: rgba(255,255,255,0.2); }\n  .msg { margin-top: 0.75rem; font-size: 0.8125rem; display: none; }\n  .msg.error { color: #f87171; }\n  .msg.success { color: #4ade80; }\n  .msg.show { display: block; }\n  .divider {\n    display: flex;\n    align-items: center;\n    gap: 0.75rem;\n    margin: 1.25rem 0;\n    font-size: 0.75rem;\n    color: #555;\n  }\n  .divider::before, .divider::after {\n    content: '';\n    flex: 1;\n    height: 1px;\n    background: rgba(255,255,255,0.08);\n  }\n  .local-info {\n    font-size: 0.75rem;\n    color: #666;\n    margin-top: 0.5rem;\n    line-height: 1.4;\n  }\n  .upgrade-note {\n    margin-bottom: 1rem;\n    padding: 0.75rem;\n    border: 1px solid rgba(255,255,255,0.08);\n    border-radius: 8px;\n    background: rgba(255,255,255,0.03);\n    font-size: 0.75rem;\n    line-height: 1.5;\n    color: #a1a1aa;\n    display: none;\n  }\n  .upgrade-note.show { display: block; }\n  .btn-google {\n    width: 100%;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    gap: 0.625rem;\n    padding: 0.5rem;\n    background: #fff;\n    color: #000;\n    border: none;\n    border-radius: 6px;\n    font-size: 0.875rem;\n    font-weight: 500;\n    cursor: pointer;\n  }\n  .btn-google:hover { background: #e5e5e5; }\n  .btn-google:disabled { opacity: 0.5; cursor: wait; }\n  .btn-google svg { width: 18px; height: 18px; flex-shrink: 0; }\n  .google-error { margin-top: 0.5rem; font-size: 0.8125rem; color: #f87171; display: none; }\n  .google-error.show { display: block; }\n  .local-note {\n    display: none;\n    max-width: 400px;\n    width: 100%;\n    margin-top: 1rem;\n    padding: 0.625rem 0.875rem;\n    font-size: 0.6875rem;\n    line-height: 1.5;\n    color: #666;\n    border: 1px dashed rgba(255,255,255,0.08);\n    border-radius: 8px;\n    text-align: center;\n  }\n  .local-note.show { display: block; }\n  .local-note strong { color: #999; font-weight: 500; }\n  .local-note a { color: #888; text-decoration: none; }\n  .local-note a:hover { color: #bbb; }\n${marketingStyles}\n</style>\n</head>\n<body${hasMarketing ? ' class=\"has-marketing\"' : \"\"}>\n${marketingPanelHtml}\n<div class=\"card\">\n  <h1 id=\"heading\">Welcome</h1>\n  <p class=\"subtitle\" id=\"subtitle\">Create an account to get started</p>\n  <p class=\"upgrade-note\" id=\"upgrade-note\">\n    You started this flow from <code>local@localhost</code>. Continue signing in to upgrade this workspace to a real account and migrate your local data. If you want to cancel that and keep using local mode, use the secondary button below.\n  </p>\n\n${\n  showGoogle\n    ? `\n  <button class=\"btn-google\" id=\"google-btn\" onclick=\"signInWithGoogle()\">\n    <svg viewBox=\"0 0 24 24\"><path fill=\"#4285F4\" d=\"M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92a5.06 5.06 0 0 1-2.2 3.32v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.1z\"/><path fill=\"#34A853\" d=\"M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z\"/><path fill=\"#FBBC05\" d=\"M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z\"/><path fill=\"#EA4335\" d=\"M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z\"/></svg>\n    Sign in with Google\n  </button>\n  <p class=\"google-error\" id=\"google-err\"></p>\n${googleOnly ? \"\" : `\\n  <div class=\"divider\">or</div>\\n`}\n`\n    : googleOnly\n      ? `\n  <p style=\"color:#f87171;font-size:0.875rem;text-align:center;padding:1rem 0\">\n    Google sign-in is not configured. Set <code>GOOGLE_CLIENT_ID</code> and\n    <code>GOOGLE_CLIENT_SECRET</code> environment variables to enable login.\n  </p>\n`\n      : \"\"\n}\n${\n  googleOnly\n    ? \"\"\n    : `  <div class=\"tabs\">\n    <button class=\"tab\" data-tab=\"signup\">Create account</button>\n    <button class=\"tab\" data-tab=\"login\">Sign in</button>\n  </div>\n\n  <form id=\"signup-form\" class=\"form\">\n    <label for=\"s-email\">Email</label>\n    <input id=\"s-email\" type=\"email\" autocomplete=\"email\" autofocus placeholder=\"you@example.com\" required />\n    <label for=\"s-pass\">Password</label>\n    <input id=\"s-pass\" type=\"password\" autocomplete=\"new-password\" placeholder=\"At least 8 characters\" required minlength=\"8\" />\n    <label for=\"s-pass2\">Confirm password</label>\n    <input id=\"s-pass2\" type=\"password\" autocomplete=\"new-password\" placeholder=\"Confirm password\" required minlength=\"8\" />\n    <button type=\"submit\">Create account</button>\n    <p class=\"msg\" id=\"s-msg\"></p>\n  </form>\n\n  <form id=\"login-form\" class=\"form\">\n    <label for=\"l-email\">Email</label>\n    <input id=\"l-email\" type=\"email\" autocomplete=\"email\" placeholder=\"you@example.com\" required />\n    <label for=\"l-pass\">Password</label>\n    <input id=\"l-pass\" type=\"password\" autocomplete=\"current-password\" placeholder=\"Enter password\" required />\n    <button type=\"submit\">Sign in</button>\n    <p class=\"msg error\" id=\"l-msg\"></p>\n    <p style=\"margin-top:0.75rem;font-size:0.75rem;text-align:right\">\n      <a href=\"#\" id=\"forgot-link\" style=\"color:#888;text-decoration:underline;text-underline-offset:2px\">Forgot password?</a>\n    </p>\n  </form>\n\n  <form id=\"forgot-form\" class=\"form\">\n    <label for=\"f-email\">Email</label>\n    <input id=\"f-email\" type=\"email\" autocomplete=\"email\" placeholder=\"you@example.com\" required />\n    <button type=\"submit\">Send reset link</button>\n    <p class=\"msg\" id=\"f-msg\"></p>\n    <p style=\"margin-top:0.75rem;font-size:0.75rem;text-align:center\">\n      <a href=\"#\" id=\"back-to-login\" style=\"color:#888;text-decoration:underline;text-underline-offset:2px\">Back to sign in</a>\n    </p>\n  </form>`\n}\n${localModeBlock}\n</div>\n<p class=\"local-note\" id=\"local-note\">\n  Your account is stored in this app's own DB (<strong>${getConnectionLabel()}</strong>), not a third-party service.\n</p>${marketingCloseHtml}\n<script>\n  function __anBasePath() {\n    var marker = '/_agent-native';\n    var idx = window.location.pathname.indexOf(marker);\n    return idx > 0 ? window.location.pathname.slice(0, idx) : '';\n  }\n  function __anPath(path) {\n    return __anBasePath() + path;\n  }\n  (function revealLocalNote() {\n    var h = location.hostname;\n    if (h === 'localhost' || h === '127.0.0.1' || h === '::1' || h.endsWith('.local')) {\n      var n = document.getElementById('local-note');\n      if (n) n.classList.add('show');\n    }\n  })();\n${\n  googleOnly\n    ? \"\"\n    : `  var TAB_STORAGE_KEY = 'an.onboarding.tab';\n  var tabs = document.querySelectorAll('.tab');\n  var forms = document.querySelectorAll('.form');\n  var subtitles = { signup: 'Create an account to get started', login: 'Sign in to your account' };\n  var headings = { signup: 'Welcome', login: 'Welcome back' };\n  function setActiveTab(name, opts) {\n    if (name !== 'signup' && name !== 'login') return;\n    var form = document.getElementById(name + '-form');\n    if (!form) return;\n    tabs.forEach(function(x) { x.classList.remove('active'); });\n    forms.forEach(function(x) { x.classList.remove('active'); });\n    var btn = document.querySelector('.tab[data-tab=\"' + name + '\"]');\n    if (btn) btn.classList.add('active');\n    form.classList.add('active');\n    var sub = document.getElementById('subtitle');\n    if (sub && subtitles[name]) sub.textContent = subtitles[name];\n    var heading = document.getElementById('heading');\n    if (heading && headings[name]) heading.textContent = headings[name];\n    if (opts && opts.persist) {\n      try { localStorage.setItem(TAB_STORAGE_KEY, name); } catch (e) {}\n    }\n  }\n  (function initActiveTab() {\n    var initial = 'signup';\n    try {\n      var params = new URLSearchParams(location.search);\n      var qp = params.get('tab');\n      if (qp === 'login' || qp === 'signup') {\n        initial = qp;\n      } else if (params.has('verified')) {\n        initial = 'login';\n      } else {\n        var stored = localStorage.getItem(TAB_STORAGE_KEY);\n        if (stored === 'login' || stored === 'signup') initial = stored;\n      }\n    } catch (e) {}\n    setActiveTab(initial, { persist: false });\n    try {\n      if (new URLSearchParams(location.search).has('verified')) {\n        var msg = document.getElementById('l-msg');\n        if (msg) {\n          msg.textContent = 'Email verified! Sign in to continue.';\n          msg.classList.remove('error');\n          msg.classList.add('show', 'success');\n        }\n      }\n    } catch (e) {}\n  })();\n  tabs.forEach(function(t) { t.addEventListener('click', function() {\n    setActiveTab(t.dataset.tab, { persist: true });\n  }); });\n\n  document.getElementById('signup-form').addEventListener('submit', async function(e) {\n    e.preventDefault();\n    var form = e.currentTarget;\n    var btn = form.querySelector('button[type=\"submit\"]');\n    var msg = document.getElementById('s-msg');\n    msg.classList.remove('show', 'error', 'success');\n    var pass = document.getElementById('s-pass').value;\n    var pass2 = document.getElementById('s-pass2').value;\n    if (pass !== pass2) {\n      msg.textContent = 'Passwords do not match';\n      msg.classList.add('show', 'error');\n      return;\n    }\n    var originalLabel = btn.textContent;\n    btn.disabled = true;\n    btn.textContent = 'Creating account…';\n    try {\n      var email = document.getElementById('s-email').value;\n      var res = await fetch(__anPath('/_agent-native/auth/register'), {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({ email: email, password: pass }),\n      });\n      var data = await res.json().catch(function() { return {}; });\n      if (res.ok) {\n        // If email verification is required, the server won't return a session.\n        // Try logging in — if it fails (unverified), show a \"check your email\" message.\n        var loginRes = await fetch(__anPath('/_agent-native/auth/login'), {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify({ email: email, password: pass }),\n        });\n        if (loginRes.ok) {\n          msg.textContent = 'Account created — signing you in…';\n          msg.classList.add('show', 'success');\n          window.location.reload();\n          return;\n        }\n        // Login failed — likely email verification required.\n        // Switch to login tab first, then show the message there so\n        // the user actually sees it (the signup form is hidden after switch).\n        btn.disabled = false;\n        btn.textContent = originalLabel;\n        setActiveTab('login', { persist: true });\n        var loginMsg = document.getElementById('l-msg');\n        if (loginMsg) {\n          loginMsg.textContent = 'Account created! Check your email to verify, then sign in.';\n          loginMsg.classList.remove('error');\n          loginMsg.classList.add('show', 'success');\n        }\n        return;\n      }\n      msg.textContent = data.error || 'Registration failed';\n      msg.classList.add('show', 'error');\n      btn.disabled = false;\n      btn.textContent = originalLabel;\n    } catch (err) {\n      msg.textContent = 'Network error — please try again';\n      msg.classList.add('show', 'error');\n      btn.disabled = false;\n      btn.textContent = originalLabel;\n    }\n  });\n\n  var forgotLink = document.getElementById('forgot-link');\n  var backToLogin = document.getElementById('back-to-login');\n  if (forgotLink) forgotLink.addEventListener('click', function(e) {\n    e.preventDefault();\n    document.getElementById('login-form').classList.remove('active');\n    document.getElementById('forgot-form').classList.add('active');\n    var sub = document.getElementById('subtitle');\n    if (sub) sub.textContent = 'Reset your password';\n    var heading = document.getElementById('heading');\n    if (heading) heading.textContent = 'Reset password';\n    var fEmail = document.getElementById('f-email');\n    var lEmail = document.getElementById('l-email');\n    if (lEmail && lEmail.value) fEmail.value = lEmail.value;\n    setTimeout(function() { fEmail.focus(); }, 0);\n  });\n  if (backToLogin) backToLogin.addEventListener('click', function(e) {\n    e.preventDefault();\n    document.getElementById('forgot-form').classList.remove('active');\n    document.getElementById('login-form').classList.add('active');\n    var sub = document.getElementById('subtitle');\n    if (sub) sub.textContent = subtitles.login;\n    var heading = document.getElementById('heading');\n    if (heading) heading.textContent = headings.login;\n  });\n\n  var forgotForm = document.getElementById('forgot-form');\n  if (forgotForm) forgotForm.addEventListener('submit', async function(e) {\n    e.preventDefault();\n    var btn = e.currentTarget.querySelector('button[type=\"submit\"]');\n    var msg = document.getElementById('f-msg');\n    msg.classList.remove('show', 'error', 'success');\n    var original = btn.textContent;\n    btn.disabled = true;\n    btn.textContent = 'Sending…';\n    try {\n      var email = document.getElementById('f-email').value;\n      var res = await fetch(__anPath('/_agent-native/auth/ba/request-password-reset'), {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({ email: email }),\n      });\n      if (res.ok) {\n        msg.textContent = 'If that email exists, a reset link is on its way.';\n        msg.classList.add('show', 'success');\n        btn.textContent = 'Sent';\n        return;\n      }\n      var data = await res.json().catch(function() { return {}; });\n      msg.textContent = (data && (data.message || data.error)) || 'Could not send reset email.';\n      msg.classList.add('show', 'error');\n      btn.disabled = false;\n      btn.textContent = original;\n    } catch (err) {\n      msg.textContent = 'Network error — please try again';\n      msg.classList.add('show', 'error');\n      btn.disabled = false;\n      btn.textContent = original;\n    }\n  });\n\n  document.getElementById('login-form').addEventListener('submit', async function(e) {\n    e.preventDefault();\n    var form = e.currentTarget;\n    var btn = form.querySelector('button[type=\"submit\"]');\n    var msg = document.getElementById('l-msg');\n    msg.classList.remove('show');\n    var originalLabel = btn.textContent;\n    btn.disabled = true;\n    btn.textContent = 'Signing in…';\n    try {\n      var res = await fetch(__anPath('/_agent-native/auth/login'), {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({\n          email: document.getElementById('l-email').value,\n          password: document.getElementById('l-pass').value,\n        }),\n      });\n      if (res.ok) {\n        window.location.reload();\n        return;\n      }\n      var data = await res.json().catch(function() { return {}; });\n      msg.textContent = data.error || 'Invalid email or password';\n      msg.classList.add('show');\n      btn.disabled = false;\n      btn.textContent = originalLabel;\n    } catch (err) {\n      msg.textContent = 'Network error — please try again';\n      msg.classList.add('show');\n      btn.disabled = false;\n      btn.textContent = originalLabel;\n    }\n  });\n`\n}${localModeScript}\n${\n  showLocalMode\n    ? `\n  (function syncUpgradeFromLocalUi() {\n    var subtitle = document.querySelector('.subtitle');\n    var note = document.getElementById('upgrade-note');\n    var localBtn = document.getElementById('local-btn');\n    var localInfo = document.getElementById('local-info');\n    var divider = document.getElementById('local-divider');\n    if (!subtitle || !note || !localBtn || !localInfo || !divider) return;\n    try {\n      if (!localStorage.getItem('${MIGRATE_FLAG_KEY}')) return;\n    } catch (e) {\n      return;\n    }\n    subtitle.textContent = 'Sign in to upgrade your local workspace';\n    note.classList.add('show');\n    localBtn.textContent = 'Stay in local mode';\n    localInfo.textContent = 'Use this if you want to cancel the upgrade and go back to local@localhost on this device.';\n    divider.textContent = 'or stay local';\n  })();\n`\n    : \"\"\n}\n${\n  showGoogle\n    ? `\n  function __anGetReturnPath() {\n    // If we landed here via /_agent-native/sign-in?return=X (force-sign-in\n    // entrypoint from a public page), prefer the inner return URL.\n    // Otherwise the loginHtml is being served at the URL the user actually\n    // wanted to reach (a bookmarked / deep-linked private path), so use it.\n    try {\n      var inner = new URLSearchParams(window.location.search).get('return');\n      if (inner) return inner;\n    } catch(e) {}\n    return window.location.pathname + window.location.search;\n  }\n  async function signInWithGoogle() {\n    var btn = document.getElementById('google-btn');\n    var err = document.getElementById('google-err');\n    btn.disabled = true;\n    err.classList.remove('show');\n    try {\n      var ret = __anGetReturnPath();\n      var authUrl = __anPath('/_agent-native/google/auth-url') + '?return=' + encodeURIComponent(ret);\n      var res = await fetch(authUrl);\n      var data = await res.json();\n      if (data.url) {\n        try { sessionStorage.setItem('__an_signin', '1'); } catch(e) {}\n        window.open(data.url, '_blank');\n        btn.disabled = false;\n        btn.textContent = 'Waiting for sign-in…';\n        var poll = setInterval(function() {\n          fetch(__anPath('/_agent-native/auth/session')).then(function(r) { return r.json(); }).then(function(s) {\n            if (s && s.email) { clearInterval(poll); window.location.reload(); }\n          }).catch(function() {});\n        }, 1500);\n      } else {\n        err.textContent = data.message || 'Google OAuth is not configured.';\n        err.classList.add('show');\n        btn.disabled = false;\n      }\n    } catch (e) {\n      err.textContent = 'Failed to connect. Please try again.';\n      err.classList.add('show');\n      btn.disabled = false;\n    }\n  }`\n    : \"\"\n}\n${starfieldScript}\n</script>\n</body>\n</html>`;\n}\n\n/** @deprecated Use getOnboardingHtml() instead */\nexport const ONBOARDING_HTML = getOnboardingHtml();\n\n/**\n * HTML for the password reset page — shown when the user clicks the link in\n * their reset email. Posts `{ newPassword, token }` to Better Auth's\n * `/reset-password` endpoint, then redirects to the login page.\n */\nexport function getResetPasswordHtml(): string {\n  return `<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"UTF-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no\">\n<title>Reset password</title>\n<style>\n  *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }\n  body { font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif; background: #0a0a0a; color: #e5e5e5; display: flex; align-items: center; justify-content: center; min-height: 100vh; padding: 1rem; }\n  .card { width: 100%; max-width: 400px; padding: 2rem; background: #141414; border: 1px solid rgba(255,255,255,0.08); border-radius: 12px; }\n  h1 { font-size: 1.25rem; font-weight: 600; margin-bottom: 0.25rem; color: #fff; }\n  .subtitle { font-size: 0.8125rem; color: #888; margin-bottom: 1.5rem; }\n  label { display: block; font-size: 0.8125rem; color: #888; margin-bottom: 0.375rem; }\n  input { width: 100%; padding: 0.5rem 0.75rem; background: transparent; border: 1px solid rgba(255,255,255,0.12); border-radius: 6px; color: #e5e5e5; font-size: 0.875rem; outline: none; margin-bottom: 0.875rem; }\n  input:focus { border-color: rgba(255,255,255,0.3); box-shadow: 0 0 0 1px rgba(255,255,255,0.1); }\n  input::placeholder { color: #555; }\n  button[type=\"submit\"] { width: 100%; margin-top: 0.25rem; padding: 0.5rem; background: #fff; color: #000; border: none; border-radius: 6px; font-size: 0.875rem; font-weight: 500; cursor: pointer; }\n  button[type=\"submit\"]:hover { background: #e5e5e5; }\n  button[type=\"submit\"]:disabled { opacity: 0.5; cursor: not-allowed; }\n  .msg { margin-top: 0.75rem; font-size: 0.8125rem; display: none; }\n  .msg.error { color: #f87171; }\n  .msg.success { color: #4ade80; }\n  .msg.show { display: block; }\n  .back { display: inline-block; margin-top: 1rem; font-size: 0.75rem; color: #888; text-decoration: none; }\n  .back:hover { color: #bbb; }\n</style>\n</head>\n<body>\n<div class=\"card\">\n  <h1>Choose a new password</h1>\n  <p class=\"subtitle\">Set a new password for your account.</p>\n  <form id=\"reset-form\">\n    <label for=\"p1\">New password</label>\n    <input id=\"p1\" type=\"password\" autocomplete=\"new-password\" autofocus placeholder=\"At least 8 characters\" required minlength=\"8\" />\n    <label for=\"p2\">Confirm password</label>\n    <input id=\"p2\" type=\"password\" autocomplete=\"new-password\" placeholder=\"Confirm password\" required minlength=\"8\" />\n    <button type=\"submit\">Save new password</button>\n    <p class=\"msg\" id=\"msg\"></p>\n  </form>\n  <a class=\"back\" id=\"back-link\" href=\"/\">Back to sign in</a>\n</div>\n<script>\n  (function() {\n    // Derive the app's base path so apps mounted under a prefix\n    // (e.g. /mail, /calendar) get sent home instead of to the root domain.\n    var RESET_PATH = '/_agent-native/auth/reset';\n    var pathname = window.location.pathname;\n    var idx = pathname.indexOf(RESET_PATH);\n    var basePath = (idx >= 0 ? pathname.slice(0, idx) : '') || '';\n    var homeHref = basePath + '/';\n    var backLink = document.getElementById('back-link');\n    if (backLink) backLink.setAttribute('href', homeHref);\n    var params = new URLSearchParams(location.search);\n    var token = params.get('token') || '';\n    var msg = document.getElementById('msg');\n    if (!token) {\n      msg.textContent = 'Missing or invalid reset token. Request a new reset link.';\n      msg.classList.add('show', 'error');\n      document.getElementById('reset-form').style.display = 'none';\n      return;\n    }\n    document.getElementById('reset-form').addEventListener('submit', async function(e) {\n      e.preventDefault();\n      var btn = e.currentTarget.querySelector('button[type=\"submit\"]');\n      var p1 = document.getElementById('p1').value;\n      var p2 = document.getElementById('p2').value;\n      msg.classList.remove('show', 'error', 'success');\n      if (p1 !== p2) {\n        msg.textContent = 'Passwords do not match';\n        msg.classList.add('show', 'error');\n        return;\n      }\n      var original = btn.textContent;\n      btn.disabled = true;\n      btn.textContent = 'Saving…';\n      try {\n        var res = await fetch(basePath + '/_agent-native/auth/ba/reset-password', {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify({ newPassword: p1, token: token }),\n        });\n        if (res.ok) {\n          msg.textContent = 'Password updated — redirecting to sign in…';\n          msg.classList.add('show', 'success');\n          setTimeout(function() { window.location.href = homeHref; }, 1200);\n          return;\n        }\n        var data = await res.json().catch(function() { return {}; });\n        msg.textContent = (data && (data.message || data.error)) || 'Reset failed. The link may have expired — request a new one.';\n        msg.classList.add('show', 'error');\n        btn.disabled = false;\n        btn.textContent = original;\n      } catch (err) {\n        msg.textContent = 'Network error — please try again';\n        msg.classList.add('show', 'error');\n        btn.disabled = false;\n        btn.textContent = original;\n      }\n    });\n  })();\n</script>\n</body>\n</html>`;\n}\n"]}
+{"version":3,"file":"onboarding-html.js","sourceRoot":"","sources":["../../src/server/onboarding-html.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;IACjC,OAAO,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,MAAM,CAAC;AACjD,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,qBAAqB,CAAC;IACvC,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACrE,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAO,eAAe,CAAC;QACtD,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO,mBAAmB,CAAC;QACzD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,qBAAqB,CAAC;IAC1D,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5E,OAAO,cAAc,CAAC;AACxB,CAAC;AAsBD,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAEjD,MAAM,UAAU,iBAAiB,CAAC,OAA8B,EAAE;IAChE,MAAM,aAAa,GACjB,CAAC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,eAAe,EAAE,CAAC;IAC9D,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;IACrC,MAAM,cAAc,GAAG,aAAa;QAClC,CAAC,CAAC;;;;mHAI6G;QAC/G,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,eAAe,GAAG,aAAa;QACnC,CAAC,CAAC;;;;;;;oCAO8B,gBAAgB;qCACf,gBAAgB;;;;;;;;;;;;;;;;;;;;IAoBjD;QACA,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,MAAM,YAAY,GAAG,CAAC,CAAC,SAAS,CAAC;IACjC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CACxB,CAAC;SACE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAE7B,MAAM,eAAe,GAAG,YAAY;QAClC,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+GL;QACG,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,kBAAkB,GAAG,YAAY;QACrC,CAAC,CAAC;;;;;;gBAMU,GAAG,CAAC,SAAU,CAAC,OAAO,CAAC;;+BAER,GAAG,CAAC,SAAU,CAAC,OAAO,CAAC;EACpD,SAAU,CAAC,WAAW,CAAC,CAAC,CAAC,6BAA6B,GAAG,CAAC,SAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GACxF,SAAU,CAAC,QAAQ,EAAE,MAAM;YACzB,CAAC,CAAC,oCAAoC,SAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAC9H,CAAC,CAAC,EACN;;;;;;2BAMqB;QACvB,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,kBAAkB,GAAG,YAAY,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;IAEpE,MAAM,eAAe,GAAG,YAAY;QAClC,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAwFE;QACJ,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;;;;;SAKA,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,SAAU,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS;EAExE,YAAY;QACV,CAAC,CAAC,qCAAqC,GAAG,CAAC,SAAU,CAAC,OAAO,CAAC;qCAC7B,GAAG,CAAC,SAAU,CAAC,OAAO,CAAC;2CACjB,GAAG,CAAC,SAAU,CAAC,OAAO,CAAC,IAAI;QAClE,CAAC,CAAC,EACN;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoKE,eAAe;;;OAGV,YAAY,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE;EACjD,kBAAkB;;;;;;;;EASlB,UAAU;QACR,CAAC,CAAC;;;;;;EAMJ,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,qCAAqC;CACxD;QACG,CAAC,CAAC,UAAU;YACV,CAAC,CAAC;;;;;CAKP;YACK,CAAC,CAAC,EACR;EAEE,UAAU;QACR,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAqCN;EACE,cAAc;;;yDAGyC,kBAAkB,EAAE;MACvE,kBAAkB;;;;;;;;;;;;;;;;;EAkBtB,UAAU;QACR,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmNN,GAAG,eAAe;EAEhB,aAAa;QACX,CAAC,CAAC;;;;;;;;;mCAS6B,gBAAgB;;;;;;;;;;CAUlD;QACG,CAAC,CAAC,EACN;EAEE,UAAU;QACR,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmCF;QACA,CAAC,CAAC,EACN;EACE,eAAe;;;QAGT,CAAC;AACT,CAAC;AAED,kDAAkD;AAClD,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,EAAE,CAAC;AAEnD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAsGD,CAAC;AACT,CAAC","sourcesContent":["/**\n * First-run onboarding page for agent-native apps.\n *\n * Shown when Better Auth is active and the user isn't signed in.\n * Provides two paths:\n * 1. Create account (email/password) — real identity from day one\n * 2. Use locally — sets AUTH_MODE=local for offline/solo dev (dev only)\n *\n * After first account exists, this page acts as a normal login page.\n * The \"Use locally\" escape hatch is hidden in production to ensure\n * real accounts are used (needed for per-user usage tracking/limits).\n * It's also hidden when DATABASE_URL points at a non-local DB (Postgres,\n * Turso, D1) — local@localhost has no per-user scoping, so enabling it\n * against a shared DB would silently fail server-side.\n */\n\nimport { isLocalDatabase } from \"../db/client.js\";\n\nfunction isProductionEnv(): boolean {\n  const env = process.env.NODE_ENV;\n  return env !== \"development\" && env !== \"test\";\n}\n\nfunction hasGoogleOAuth(): boolean {\n  return !!(process.env.GOOGLE_CLIENT_ID && process.env.GOOGLE_CLIENT_SECRET);\n}\n\nfunction getConnectionLabel(): string {\n  const url = process.env.DATABASE_URL || \"\";\n  if (!url) return \"SQLite (local file)\";\n  if (url.startsWith(\"postgres://\") || url.startsWith(\"postgresql://\")) {\n    if (url.includes(\"neon.tech\")) return \"Neon Postgres\";\n    if (url.includes(\"supabase\")) return \"Supabase Postgres\";\n    return \"Postgres\";\n  }\n  if (url.startsWith(\"file:\")) return \"SQLite (local file)\";\n  if (url.startsWith(\"libsql://\") || url.includes(\"turso.io\")) return \"Turso\";\n  return \"SQL database\";\n}\n\nexport interface OnboardingHtmlOptions {\n  /**\n   * Hide email/password forms and show ONLY the Google sign-in button.\n   * Useful for templates (mail, calendar) where Google is required anyway.\n   * If Google OAuth env vars are not configured, an error message is shown.\n   */\n  googleOnly?: boolean;\n  /**\n   * Product marketing content shown alongside the sign-in form.\n   * When provided, the page uses a split layout: marketing on the left,\n   * sign-in form on the right (stacked on mobile).\n   */\n  marketing?: {\n    appName: string;\n    tagline: string;\n    description?: string;\n    features?: string[];\n  };\n}\n\nconst MIGRATE_FLAG_KEY = \"an_migrate_from_local\";\n\nexport function getOnboardingHtml(opts: OnboardingHtmlOptions = {}): string {\n  const showLocalMode =\n    !isProductionEnv() && !opts.googleOnly && isLocalDatabase();\n  const showGoogle = hasGoogleOAuth();\n  const googleOnly = !!opts.googleOnly;\n  const localModeBlock = showLocalMode\n    ? `\n  <div class=\"divider\" id=\"local-divider\">or</div>\n\n  <button class=\"btn-secondary\" id=\"local-btn\" onclick=\"useLocally()\">Use locally without an account</button>\n  <p class=\"local-info\" id=\"local-info\">Skip auth for solo local development. You can create an account later.</p>`\n    : \"\";\n\n  const localModeScript = showLocalMode\n    ? `\n  async function useLocally() {\n    var btn = document.getElementById('local-btn');\n    btn.disabled = true;\n    btn.textContent = 'Setting up...';\n    try {\n      try {\n        if (localStorage.getItem('${MIGRATE_FLAG_KEY}')) {\n          localStorage.removeItem('${MIGRATE_FLAG_KEY}');\n        }\n      } catch (e) {}\n      var res = await fetch(__anPath('/_agent-native/auth/local-mode'), { method: 'POST' });\n      if (res.ok) {\n        window.location.reload();\n      } else {\n        var data = await res.json().catch(function() { return {}; });\n        var info = document.getElementById('local-info');\n        if (info && data && data.error) {\n          info.textContent = data.error;\n          info.style.color = '#f87171';\n        }\n        btn.textContent = 'Not available';\n        btn.disabled = true;\n      }\n    } catch(e) {\n      btn.textContent = 'Failed — try again';\n      btn.disabled = false;\n    }\n  }`\n    : \"\";\n\n  const marketing = opts.marketing;\n  const hasMarketing = !!marketing;\n  const esc = (s: string) =>\n    s\n      .replace(/&/g, \"&amp;\")\n      .replace(/</g, \"&lt;\")\n      .replace(/>/g, \"&gt;\")\n      .replace(/\"/g, \"&quot;\");\n\n  const marketingStyles = hasMarketing\n    ? `\n  body.has-marketing { padding: 0; position: relative; overflow-x: hidden; }\n  #starfield {\n    position: fixed;\n    inset: 0;\n    width: 100%;\n    height: 100%;\n    opacity: 0.35;\n    pointer-events: none;\n    z-index: 0;\n  }\n  .split {\n    position: relative;\n    z-index: 1;\n    display: flex;\n    min-height: 100vh;\n    width: 100%;\n    max-width: 1100px;\n    margin: 0 auto;\n  }\n  .marketing-panel {\n    flex: 1;\n    display: flex;\n    flex-direction: column;\n    justify-content: center;\n    padding: 3rem 3.5rem;\n  }\n  .marketing-content { max-width: 480px; }\n  .app-name {\n    display: flex;\n    align-items: center;\n    gap: 0.625rem;\n    font-size: 2rem;\n    font-weight: 700;\n    color: #fff;\n    margin-bottom: 0.625rem;\n    letter-spacing: -0.02em;\n  }\n  .app-name img.brand-mark {\n    height: 2.21375rem;\n    width: auto;\n    display: block;\n    flex-shrink: 0;\n  }\n  .app-tagline {\n    font-size: 1.25rem;\n    color: #a1a1aa;\n    line-height: 1.6;\n    margin-bottom: 2rem;\n  }\n  .app-desc {\n    font-size: 1rem;\n    color: #71717a;\n    line-height: 1.6;\n    margin-bottom: 2rem;\n  }\n  .feature-list {\n    list-style: none;\n    display: flex;\n    flex-direction: column;\n    gap: 0.875rem;\n  }\n  .feature-list li {\n    display: flex;\n    align-items: flex-start;\n    gap: 0.625rem;\n    font-size: 1rem;\n    color: #a1a1aa;\n    line-height: 1.5;\n  }\n  .feature-list li::before {\n    content: '';\n    flex-shrink: 0;\n    width: 8px;\n    height: 8px;\n    margin-top: 6px;\n    border-radius: 50%;\n    background: #3f3f46;\n    border: 1px solid #52525b;\n  }\n  .oss-link {\n    display: inline-flex;\n    align-items: center;\n    gap: 0.375rem;\n    margin-top: 2rem;\n    font-size: 0.8125rem;\n    color: #71717a;\n    text-decoration: none;\n  }\n  .oss-link:hover { color: #a1a1aa; }\n  .oss-link svg { width: 15px; height: 15px; flex-shrink: 0; }\n  .form-panel {\n    flex: 0 0 440px;\n    display: flex;\n    flex-direction: column;\n    align-items: center;\n    justify-content: center;\n    padding: 2rem;\n  }\n  .form-panel .card { max-width: 400px; }\n  .form-panel .local-note { max-width: 400px; }\n  @media (max-width: 900px) {\n    .split { flex-direction: column; min-height: auto; }\n    .marketing-panel { padding: 2rem 1.5rem 1.5rem; }\n    .app-name { font-size: 1.375rem; }\n    .app-name img.brand-mark { height: 1.58125rem; }\n    .app-tagline { font-size: 1rem; margin-bottom: 1rem; }\n    .app-desc { margin-bottom: 1rem; }\n    .feature-list { gap: 0.5rem; }\n    .form-panel { flex: none; padding: 1.5rem 1rem; }\n  }\n`\n    : \"\";\n\n  const marketingPanelHtml = hasMarketing\n    ? `<canvas id=\"starfield\"></canvas>\n<div class=\"split\">\n  <div class=\"marketing-panel\">\n    <div class=\"marketing-content\">\n      <h2 class=\"app-name\">\n        <img class=\"brand-mark\" src=\"/agent-native-icon-dark.svg\" alt=\"\" aria-hidden=\"true\" />\n        <span>${esc(marketing!.appName)}</span>\n      </h2>\n      <p class=\"app-tagline\">${esc(marketing!.tagline)}</p>\n${marketing!.description ? `      <p class=\"app-desc\">${esc(marketing!.description)}</p>\\n` : \"\"}${\n        marketing!.features?.length\n          ? `      <ul class=\"feature-list\">\\n${marketing!.features.map((f) => `        <li>${esc(f)}</li>`).join(\"\\n\")}\\n      </ul>\\n`\n          : \"\"\n      }      <a class=\"oss-link\" href=\"https://github.com/BuilderIO/agent-native\" target=\"_blank\" rel=\"noreferrer\">\n        <svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M9 19c-4.3 1.4-4.3-2.5-6-3m12 5v-3.5c0-1 .1-1.4-.5-2 2.8-.3 5.5-1.4 5.5-6a4.6 4.6 0 00-1.3-3.2 4.2 4.2 0 00-.1-3.2s-1.1-.3-3.5 1.3a12.3 12.3 0 00-6.2 0C6.5 2.8 5.4 3.1 5.4 3.1a4.2 4.2 0 00-.1 3.2A4.6 4.6 0 004 9.5c0 4.6 2.7 5.7 5.5 6-.6.6-.6 1.2-.5 2V21\"/></svg>\n        Open source\n      </a>\n    </div>\n  </div>\n  <div class=\"form-panel\">`\n    : \"\";\n\n  const marketingCloseHtml = hasMarketing ? `\\n  </div>\\n</div>` : \"\";\n\n  const starfieldScript = hasMarketing\n    ? `\n  (function initStarfield() {\n    var canvas = document.getElementById('starfield');\n    if (!canvas) return;\n    var gl = canvas.getContext('webgl', { alpha: false, antialias: false });\n    if (!gl) return;\n\n    var vs = gl.createShader(gl.VERTEX_SHADER);\n    gl.shaderSource(vs, 'attribute vec2 position;void main(){gl_Position=vec4(position,0.0,1.0);}');\n    gl.compileShader(vs);\n\n    var fs = gl.createShader(gl.FRAGMENT_SHADER);\n    gl.shaderSource(fs, [\n      'precision highp float;',\n      'uniform float iTime;uniform vec2 iResolution;',\n      '#define S(a,b,t) smoothstep(a,b,t)',\n      '#define NUM_LAYERS 4.',\n      'float N21(vec2 p){vec3 a=fract(vec3(p.xyx)*vec3(213.897,653.453,253.098));a+=dot(a,a.yzx+79.76);return fract((a.x+a.y)*a.z);}',\n      'vec2 GetPos(vec2 id,vec2 offs,float t){float n=N21(id+offs);float n1=fract(n*10.);float n2=fract(n*100.);float a=t+n;return offs+vec2(sin(a*n1),cos(a*n2))*.4;}',\n      'float df_line(vec2 a,vec2 b,vec2 p){vec2 pa=p-a,ba=b-a;float h=clamp(dot(pa,ba)/dot(ba,ba),0.,1.);return length(pa-ba*h);}',\n      'float line(vec2 a,vec2 b,vec2 uv){float r1=.025;float r2=.006;float d=df_line(a,b,uv);float d2=length(a-b);float fade=S(1.5,.5,d2);fade+=S(.05,.02,abs(d2-.75));return S(r1,r2,d)*fade;}',\n      'float NetLayer(vec2 st,float n,float t){',\n      '  vec2 id=floor(st)+n;st=fract(st)-.5;',\n      '  vec2 p0=GetPos(id,vec2(-1,-1),t);vec2 p1=GetPos(id,vec2(0,-1),t);vec2 p2=GetPos(id,vec2(1,-1),t);',\n      '  vec2 p3=GetPos(id,vec2(-1,0),t);vec2 p4=GetPos(id,vec2(0,0),t);vec2 p5=GetPos(id,vec2(1,0),t);',\n      '  vec2 p6=GetPos(id,vec2(-1,1),t);vec2 p7=GetPos(id,vec2(0,1),t);vec2 p8=GetPos(id,vec2(1,1),t);',\n      '  float m=0.;float sparkle=0.;float d;float s;float pulse;',\n      '  m+=line(p4,p0,st);d=length(st-p0);s=(.005/(d*d));s*=S(1.,.7,d);pulse=sin((fract(p0.x)+fract(p0.y)+t)*5.)*.4+.6;pulse=pow(pulse,20.);sparkle+=s*pulse;',\n      '  m+=line(p4,p1,st);d=length(st-p1);s=(.005/(d*d));s*=S(1.,.7,d);pulse=sin((fract(p1.x)+fract(p1.y)+t)*5.)*.4+.6;pulse=pow(pulse,20.);sparkle+=s*pulse;',\n      '  m+=line(p4,p2,st);d=length(st-p2);s=(.005/(d*d));s*=S(1.,.7,d);pulse=sin((fract(p2.x)+fract(p2.y)+t)*5.)*.4+.6;pulse=pow(pulse,20.);sparkle+=s*pulse;',\n      '  m+=line(p4,p3,st);d=length(st-p3);s=(.005/(d*d));s*=S(1.,.7,d);pulse=sin((fract(p3.x)+fract(p3.y)+t)*5.)*.4+.6;pulse=pow(pulse,20.);sparkle+=s*pulse;',\n      '  m+=line(p4,p4,st);d=length(st-p4);s=(.005/(d*d));s*=S(1.,.7,d);pulse=sin((fract(p4.x)+fract(p4.y)+t)*5.)*.4+.6;pulse=pow(pulse,20.);sparkle+=s*pulse;',\n      '  m+=line(p4,p5,st);d=length(st-p5);s=(.005/(d*d));s*=S(1.,.7,d);pulse=sin((fract(p5.x)+fract(p5.y)+t)*5.)*.4+.6;pulse=pow(pulse,20.);sparkle+=s*pulse;',\n      '  m+=line(p4,p6,st);d=length(st-p6);s=(.005/(d*d));s*=S(1.,.7,d);pulse=sin((fract(p6.x)+fract(p6.y)+t)*5.)*.4+.6;pulse=pow(pulse,20.);sparkle+=s*pulse;',\n      '  m+=line(p4,p7,st);d=length(st-p7);s=(.005/(d*d));s*=S(1.,.7,d);pulse=sin((fract(p7.x)+fract(p7.y)+t)*5.)*.4+.6;pulse=pow(pulse,20.);sparkle+=s*pulse;',\n      '  m+=line(p4,p8,st);d=length(st-p8);s=(.005/(d*d));s*=S(1.,.7,d);pulse=sin((fract(p8.x)+fract(p8.y)+t)*5.)*.4+.6;pulse=pow(pulse,20.);sparkle+=s*pulse;',\n      '  m+=line(p1,p3,st);m+=line(p1,p5,st);m+=line(p7,p5,st);m+=line(p7,p3,st);',\n      '  float sPhase=(sin(t+n)+sin(t*.1))*.25+.5;sPhase+=pow(sin(t*.1)*.5+.5,50.)*5.;m+=sparkle*sPhase;',\n      '  return m;',\n      '}',\n      'void mainImage(out vec4 fragColor,in vec2 fragCoord){',\n      '  vec2 uv=(fragCoord-iResolution.xy*.5)/iResolution.y;',\n      '  float t=iTime*.03;float s=sin(t);float c=cos(t);mat2 rot=mat2(c,-s,s,c);vec2 st=uv*rot;',\n      '  float m=0.;',\n      '  for(float i=0.;i<1.;i+=1./NUM_LAYERS){float z=fract(t+i);float size=mix(15.,1.,z);float fade=S(0.,.6,z)*S(1.,.8,z);m+=fade*NetLayer(st*size,i,iTime*0.3);}',\n      '  vec3 col=vec3(0.35)*m;col*=1.-dot(uv,uv);',\n      '  float tt=min(iTime,5.0);col*=S(0.,20.,tt);',\n      '  col=clamp(col,0.,1.);fragColor=vec4(col,1.);',\n      '}',\n      'void main(){mainImage(gl_FragColor,gl_FragCoord.xy);}'\n    ].join('\\\\n'));\n    gl.compileShader(fs);\n\n    var prog = gl.createProgram();\n    gl.attachShader(prog, vs);\n    gl.attachShader(prog, fs);\n    gl.linkProgram(prog);\n    gl.useProgram(prog);\n\n    var buf = gl.createBuffer();\n    gl.bindBuffer(gl.ARRAY_BUFFER, buf);\n    gl.bufferData(gl.ARRAY_BUFFER, new Float32Array([-1,-1,1,-1,-1,1,-1,1,1,-1,1,1]), gl.STATIC_DRAW);\n    var pos = gl.getAttribLocation(prog, 'position');\n    gl.enableVertexAttribArray(pos);\n    gl.vertexAttribPointer(pos, 2, gl.FLOAT, false, 0, 0);\n\n    var uTime = gl.getUniformLocation(prog, 'iTime');\n    var uRes = gl.getUniformLocation(prog, 'iResolution');\n\n    function resize() {\n      var w = window.innerWidth, h = window.innerHeight;\n      var dpr = Math.min(window.devicePixelRatio, 1.5);\n      canvas.width = w * dpr; canvas.height = h * dpr;\n      gl.viewport(0, 0, canvas.width, canvas.height);\n    }\n    resize();\n    window.addEventListener('resize', resize);\n\n    var start = performance.now(), last = 0;\n    function render(now) {\n      requestAnimationFrame(render);\n      if (now - last < 33) return;\n      last = now;\n      gl.uniform1f(uTime, (now - start) * 0.001);\n      gl.uniform2f(uRes, canvas.width, canvas.height);\n      gl.drawArrays(gl.TRIANGLES, 0, 6);\n    }\n    requestAnimationFrame(render);\n  })();`\n    : \"\";\n\n  return `<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"UTF-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no\">\n<title>${hasMarketing ? esc(marketing!.appName) + \" — Sign in\" : \"Welcome\"}</title>\n${\n  hasMarketing\n    ? `<meta name=\"description\" content=\"${esc(marketing!.tagline)}\">\n<meta property=\"og:title\" content=\"${esc(marketing!.appName)}\">\n<meta property=\"og:description\" content=\"${esc(marketing!.tagline)}\">`\n    : \"\"\n}\n<style>\n  *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }\n  body {\n    font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif;\n    background: #0a0a0a;\n    color: #e5e5e5;\n    display: flex;\n    flex-direction: column;\n    align-items: center;\n    justify-content: center;\n    min-height: 100vh;\n    padding: 1rem;\n  }\n  .card {\n    width: 100%;\n    max-width: 400px;\n    padding: 2rem;\n    background: #141414;\n    border: 1px solid rgba(255,255,255,0.08);\n    border-radius: 12px;\n  }\n  h1 { font-size: 1.25rem; font-weight: 600; margin-bottom: 0.25rem; color: #fff; }\n  .subtitle { font-size: 0.8125rem; color: #888; margin-bottom: 1.5rem; }\n  .tabs {\n    display: inline-flex;\n    width: 100%;\n    padding: 4px;\n    margin-bottom: 1.5rem;\n    background: rgba(255,255,255,0.06);\n    border-radius: 8px;\n  }\n  .tab {\n    flex: 1;\n    padding: 0.5rem 0.75rem;\n    background: none;\n    border: none;\n    color: #888;\n    font-size: 0.8125rem;\n    font-weight: 500;\n    cursor: pointer;\n    border-radius: 6px;\n  }\n  .tab.active {\n    background: #1e1e1e;\n    color: #fff;\n    box-shadow: 0 1px 2px rgba(0,0,0,0.3);\n  }\n  .tab:hover:not(.active) { color: #bbb; }\n  .form { display: none; }\n  .form.active { display: block; }\n  label { display: block; font-size: 0.8125rem; color: #888; margin-bottom: 0.375rem; }\n  input {\n    width: 100%;\n    padding: 0.5rem 0.75rem;\n    background: transparent;\n    border: 1px solid rgba(255,255,255,0.12);\n    border-radius: 6px;\n    color: #e5e5e5;\n    font-size: 0.875rem;\n    outline: none;\n    margin-bottom: 0.875rem;\n  }\n  input:focus { border-color: rgba(255,255,255,0.3); box-shadow: 0 0 0 1px rgba(255,255,255,0.1); }\n  input::placeholder { color: #555; }\n  button[type=\"submit\"], .btn-primary {\n    width: 100%;\n    margin-top: 0.25rem;\n    padding: 0.5rem;\n    background: #fff;\n    color: #000;\n    border: none;\n    border-radius: 6px;\n    font-size: 0.875rem;\n    font-weight: 500;\n    cursor: pointer;\n  }\n  button[type=\"submit\"]:hover, .btn-primary:hover { background: #e5e5e5; }\n  button[type=\"submit\"]:disabled { opacity: 0.5; cursor: not-allowed; }\n  .btn-secondary {\n    width: 100%;\n    margin-top: 0.75rem;\n    padding: 0.5rem;\n    background: transparent;\n    color: #888;\n    border: 1px solid rgba(255,255,255,0.1);\n    border-radius: 6px;\n    font-size: 0.8125rem;\n    cursor: pointer;\n  }\n  .btn-secondary:hover { color: #bbb; border-color: rgba(255,255,255,0.2); }\n  .msg { margin-top: 0.75rem; font-size: 0.8125rem; display: none; }\n  .msg.error { color: #f87171; }\n  .msg.success { color: #4ade80; }\n  .msg.show { display: block; }\n  .divider {\n    display: flex;\n    align-items: center;\n    gap: 0.75rem;\n    margin: 1.25rem 0;\n    font-size: 0.75rem;\n    color: #555;\n  }\n  .divider::before, .divider::after {\n    content: '';\n    flex: 1;\n    height: 1px;\n    background: rgba(255,255,255,0.08);\n  }\n  .local-info {\n    font-size: 0.75rem;\n    color: #666;\n    margin-top: 0.5rem;\n    line-height: 1.4;\n  }\n  .upgrade-note {\n    margin-bottom: 1rem;\n    padding: 0.75rem;\n    border: 1px solid rgba(255,255,255,0.08);\n    border-radius: 8px;\n    background: rgba(255,255,255,0.03);\n    font-size: 0.75rem;\n    line-height: 1.5;\n    color: #a1a1aa;\n    display: none;\n  }\n  .upgrade-note.show { display: block; }\n  .btn-google {\n    width: 100%;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    gap: 0.625rem;\n    padding: 0.5rem;\n    background: #fff;\n    color: #000;\n    border: none;\n    border-radius: 6px;\n    font-size: 0.875rem;\n    font-weight: 500;\n    cursor: pointer;\n  }\n  .btn-google:hover { background: #e5e5e5; }\n  .btn-google:disabled { opacity: 0.5; cursor: wait; }\n  .btn-google svg { width: 18px; height: 18px; flex-shrink: 0; }\n  .google-error { margin-top: 0.5rem; font-size: 0.8125rem; color: #f87171; display: none; }\n  .google-error.show { display: block; }\n  .local-note {\n    display: none;\n    max-width: 400px;\n    width: 100%;\n    margin-top: 1rem;\n    padding: 0.625rem 0.875rem;\n    font-size: 0.6875rem;\n    line-height: 1.5;\n    color: #666;\n    border: 1px dashed rgba(255,255,255,0.08);\n    border-radius: 8px;\n    text-align: center;\n  }\n  .local-note.show { display: block; }\n  .local-note strong { color: #999; font-weight: 500; }\n  .local-note a { color: #888; text-decoration: none; }\n  .local-note a:hover { color: #bbb; }\n${marketingStyles}\n</style>\n</head>\n<body${hasMarketing ? ' class=\"has-marketing\"' : \"\"}>\n${marketingPanelHtml}\n<div class=\"card\">\n  <h1 id=\"heading\">Welcome</h1>\n  <p class=\"subtitle\" id=\"subtitle\">Create an account to get started</p>\n  <p class=\"upgrade-note\" id=\"upgrade-note\">\n    You started this flow from <code>local@localhost</code>. Continue signing in to upgrade this workspace to a real account and migrate your local data. If you want to cancel that and keep using local mode, use the secondary button below.\n  </p>\n\n${\n  showGoogle\n    ? `\n  <button class=\"btn-google\" id=\"google-btn\" onclick=\"signInWithGoogle()\">\n    <svg viewBox=\"0 0 24 24\"><path fill=\"#4285F4\" d=\"M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92a5.06 5.06 0 0 1-2.2 3.32v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.1z\"/><path fill=\"#34A853\" d=\"M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z\"/><path fill=\"#FBBC05\" d=\"M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z\"/><path fill=\"#EA4335\" d=\"M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z\"/></svg>\n    Sign in with Google\n  </button>\n  <p class=\"google-error\" id=\"google-err\"></p>\n${googleOnly ? \"\" : `\\n  <div class=\"divider\">or</div>\\n`}\n`\n    : googleOnly\n      ? `\n  <p style=\"color:#f87171;font-size:0.875rem;text-align:center;padding:1rem 0\">\n    Google sign-in is not configured. Set <code>GOOGLE_CLIENT_ID</code> and\n    <code>GOOGLE_CLIENT_SECRET</code> environment variables to enable login.\n  </p>\n`\n      : \"\"\n}\n${\n  googleOnly\n    ? \"\"\n    : `  <div class=\"tabs\">\n    <button class=\"tab\" data-tab=\"signup\">Create account</button>\n    <button class=\"tab\" data-tab=\"login\">Sign in</button>\n  </div>\n\n  <form id=\"signup-form\" class=\"form\">\n    <label for=\"s-email\">Email</label>\n    <input id=\"s-email\" type=\"email\" autocomplete=\"email\" autofocus placeholder=\"you@example.com\" required />\n    <label for=\"s-pass\">Password</label>\n    <input id=\"s-pass\" type=\"password\" autocomplete=\"new-password\" placeholder=\"At least 8 characters\" required minlength=\"8\" />\n    <label for=\"s-pass2\">Confirm password</label>\n    <input id=\"s-pass2\" type=\"password\" autocomplete=\"new-password\" placeholder=\"Confirm password\" required minlength=\"8\" />\n    <button type=\"submit\">Create account</button>\n    <p class=\"msg\" id=\"s-msg\"></p>\n  </form>\n\n  <form id=\"login-form\" class=\"form\">\n    <label for=\"l-email\">Email</label>\n    <input id=\"l-email\" type=\"email\" autocomplete=\"email\" placeholder=\"you@example.com\" required />\n    <label for=\"l-pass\">Password</label>\n    <input id=\"l-pass\" type=\"password\" autocomplete=\"current-password\" placeholder=\"Enter password\" required />\n    <button type=\"submit\">Sign in</button>\n    <p class=\"msg error\" id=\"l-msg\"></p>\n    <p style=\"margin-top:0.75rem;font-size:0.75rem;text-align:right\">\n      <a href=\"#\" id=\"forgot-link\" style=\"color:#888;text-decoration:underline;text-underline-offset:2px\">Forgot password?</a>\n    </p>\n  </form>\n\n  <form id=\"forgot-form\" class=\"form\">\n    <label for=\"f-email\">Email</label>\n    <input id=\"f-email\" type=\"email\" autocomplete=\"email\" placeholder=\"you@example.com\" required />\n    <button type=\"submit\">Send reset link</button>\n    <p class=\"msg\" id=\"f-msg\"></p>\n    <p style=\"margin-top:0.75rem;font-size:0.75rem;text-align:center\">\n      <a href=\"#\" id=\"back-to-login\" style=\"color:#888;text-decoration:underline;text-underline-offset:2px\">Back to sign in</a>\n    </p>\n  </form>`\n}\n${localModeBlock}\n</div>\n<p class=\"local-note\" id=\"local-note\">\n  Your account is stored in this app's own DB (<strong>${getConnectionLabel()}</strong>), not a third-party service.\n</p>${marketingCloseHtml}\n<script>\n  function __anBasePath() {\n    var marker = '/_agent-native';\n    var idx = window.location.pathname.indexOf(marker);\n    return idx > 0 ? window.location.pathname.slice(0, idx) : '';\n  }\n  function __anPath(path) {\n    return __anBasePath() + path;\n  }\n  (function revealLocalNote() {\n    var h = location.hostname;\n    if (h === 'localhost' || h === '127.0.0.1' || h === '::1' || h.endsWith('.local')) {\n      var n = document.getElementById('local-note');\n      if (n) n.classList.add('show');\n    }\n  })();\n${\n  googleOnly\n    ? \"\"\n    : `  var TAB_STORAGE_KEY = 'an.onboarding.tab';\n  var tabs = document.querySelectorAll('.tab');\n  var forms = document.querySelectorAll('.form');\n  var subtitles = { signup: 'Create an account to get started', login: 'Sign in to your account' };\n  var headings = { signup: 'Welcome', login: 'Welcome back' };\n  function setActiveTab(name, opts) {\n    if (name !== 'signup' && name !== 'login') return;\n    var form = document.getElementById(name + '-form');\n    if (!form) return;\n    tabs.forEach(function(x) { x.classList.remove('active'); });\n    forms.forEach(function(x) { x.classList.remove('active'); });\n    var btn = document.querySelector('.tab[data-tab=\"' + name + '\"]');\n    if (btn) btn.classList.add('active');\n    form.classList.add('active');\n    var sub = document.getElementById('subtitle');\n    if (sub && subtitles[name]) sub.textContent = subtitles[name];\n    var heading = document.getElementById('heading');\n    if (heading && headings[name]) heading.textContent = headings[name];\n    if (opts && opts.persist) {\n      try { localStorage.setItem(TAB_STORAGE_KEY, name); } catch (e) {}\n    }\n  }\n  (function initActiveTab() {\n    var initial = 'signup';\n    try {\n      var params = new URLSearchParams(location.search);\n      var qp = params.get('tab');\n      if (qp === 'login' || qp === 'signup') {\n        initial = qp;\n      } else if (params.has('verified')) {\n        initial = 'login';\n      } else {\n        var stored = localStorage.getItem(TAB_STORAGE_KEY);\n        if (stored === 'login' || stored === 'signup') initial = stored;\n      }\n    } catch (e) {}\n    setActiveTab(initial, { persist: false });\n    try {\n      if (new URLSearchParams(location.search).has('verified')) {\n        var msg = document.getElementById('l-msg');\n        if (msg) {\n          msg.textContent = 'Email verified! Sign in to continue.';\n          msg.classList.remove('error');\n          msg.classList.add('show', 'success');\n        }\n      }\n    } catch (e) {}\n  })();\n  tabs.forEach(function(t) { t.addEventListener('click', function() {\n    setActiveTab(t.dataset.tab, { persist: true });\n  }); });\n\n  document.getElementById('signup-form').addEventListener('submit', async function(e) {\n    e.preventDefault();\n    var form = e.currentTarget;\n    var btn = form.querySelector('button[type=\"submit\"]');\n    var msg = document.getElementById('s-msg');\n    msg.classList.remove('show', 'error', 'success');\n    var pass = document.getElementById('s-pass').value;\n    var pass2 = document.getElementById('s-pass2').value;\n    if (pass !== pass2) {\n      msg.textContent = 'Passwords do not match';\n      msg.classList.add('show', 'error');\n      return;\n    }\n    var originalLabel = btn.textContent;\n    btn.disabled = true;\n    btn.textContent = 'Creating account…';\n    try {\n      var email = document.getElementById('s-email').value;\n      var res = await fetch(__anPath('/_agent-native/auth/register'), {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({ email: email, password: pass }),\n      });\n      var data = await res.json().catch(function() { return {}; });\n      if (res.ok) {\n        // If email verification is required, the server won't return a session.\n        // Try logging in — if it fails (unverified), show a \"check your email\" message.\n        var loginRes = await fetch(__anPath('/_agent-native/auth/login'), {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify({ email: email, password: pass }),\n        });\n        if (loginRes.ok) {\n          msg.textContent = 'Account created — signing you in…';\n          msg.classList.add('show', 'success');\n          window.location.reload();\n          return;\n        }\n        // Login failed — likely email verification required.\n        // Switch to login tab first, then show the message there so\n        // the user actually sees it (the signup form is hidden after switch).\n        btn.disabled = false;\n        btn.textContent = originalLabel;\n        setActiveTab('login', { persist: true });\n        var loginMsg = document.getElementById('l-msg');\n        if (loginMsg) {\n          loginMsg.textContent = 'Account created! Check your email to verify, then sign in.';\n          loginMsg.classList.remove('error');\n          loginMsg.classList.add('show', 'success');\n        }\n        return;\n      }\n      msg.textContent = data.error || 'Registration failed';\n      msg.classList.add('show', 'error');\n      btn.disabled = false;\n      btn.textContent = originalLabel;\n    } catch (err) {\n      msg.textContent = 'Network error — please try again';\n      msg.classList.add('show', 'error');\n      btn.disabled = false;\n      btn.textContent = originalLabel;\n    }\n  });\n\n  var forgotLink = document.getElementById('forgot-link');\n  var backToLogin = document.getElementById('back-to-login');\n  if (forgotLink) forgotLink.addEventListener('click', function(e) {\n    e.preventDefault();\n    document.getElementById('login-form').classList.remove('active');\n    document.getElementById('forgot-form').classList.add('active');\n    var sub = document.getElementById('subtitle');\n    if (sub) sub.textContent = 'Reset your password';\n    var heading = document.getElementById('heading');\n    if (heading) heading.textContent = 'Reset password';\n    var fEmail = document.getElementById('f-email');\n    var lEmail = document.getElementById('l-email');\n    if (lEmail && lEmail.value) fEmail.value = lEmail.value;\n    setTimeout(function() { fEmail.focus(); }, 0);\n  });\n  if (backToLogin) backToLogin.addEventListener('click', function(e) {\n    e.preventDefault();\n    document.getElementById('forgot-form').classList.remove('active');\n    document.getElementById('login-form').classList.add('active');\n    var sub = document.getElementById('subtitle');\n    if (sub) sub.textContent = subtitles.login;\n    var heading = document.getElementById('heading');\n    if (heading) heading.textContent = headings.login;\n  });\n\n  var forgotForm = document.getElementById('forgot-form');\n  if (forgotForm) forgotForm.addEventListener('submit', async function(e) {\n    e.preventDefault();\n    var btn = e.currentTarget.querySelector('button[type=\"submit\"]');\n    var msg = document.getElementById('f-msg');\n    msg.classList.remove('show', 'error', 'success');\n    var original = btn.textContent;\n    btn.disabled = true;\n    btn.textContent = 'Sending…';\n    try {\n      var email = document.getElementById('f-email').value;\n      var res = await fetch(__anPath('/_agent-native/auth/ba/request-password-reset'), {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({ email: email }),\n      });\n      if (res.ok) {\n        msg.textContent = 'If that email exists, a reset link is on its way.';\n        msg.classList.add('show', 'success');\n        btn.textContent = 'Sent';\n        return;\n      }\n      var data = await res.json().catch(function() { return {}; });\n      msg.textContent = (data && (data.message || data.error)) || 'Could not send reset email.';\n      msg.classList.add('show', 'error');\n      btn.disabled = false;\n      btn.textContent = original;\n    } catch (err) {\n      msg.textContent = 'Network error — please try again';\n      msg.classList.add('show', 'error');\n      btn.disabled = false;\n      btn.textContent = original;\n    }\n  });\n\n  document.getElementById('login-form').addEventListener('submit', async function(e) {\n    e.preventDefault();\n    var form = e.currentTarget;\n    var btn = form.querySelector('button[type=\"submit\"]');\n    var msg = document.getElementById('l-msg');\n    msg.classList.remove('show');\n    var originalLabel = btn.textContent;\n    btn.disabled = true;\n    btn.textContent = 'Signing in…';\n    try {\n      var res = await fetch(__anPath('/_agent-native/auth/login'), {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({\n          email: document.getElementById('l-email').value,\n          password: document.getElementById('l-pass').value,\n        }),\n      });\n      if (res.ok) {\n        window.location.reload();\n        return;\n      }\n      var data = await res.json().catch(function() { return {}; });\n      msg.textContent = data.error || 'Invalid email or password';\n      msg.classList.add('show');\n      btn.disabled = false;\n      btn.textContent = originalLabel;\n    } catch (err) {\n      msg.textContent = 'Network error — please try again';\n      msg.classList.add('show');\n      btn.disabled = false;\n      btn.textContent = originalLabel;\n    }\n  });\n`\n}${localModeScript}\n${\n  showLocalMode\n    ? `\n  (function syncUpgradeFromLocalUi() {\n    var subtitle = document.querySelector('.subtitle');\n    var note = document.getElementById('upgrade-note');\n    var localBtn = document.getElementById('local-btn');\n    var localInfo = document.getElementById('local-info');\n    var divider = document.getElementById('local-divider');\n    if (!subtitle || !note || !localBtn || !localInfo || !divider) return;\n    try {\n      if (!localStorage.getItem('${MIGRATE_FLAG_KEY}')) return;\n    } catch (e) {\n      return;\n    }\n    subtitle.textContent = 'Sign in to upgrade your local workspace';\n    note.classList.add('show');\n    localBtn.textContent = 'Stay in local mode';\n    localInfo.textContent = 'Use this if you want to cancel the upgrade and go back to local@localhost on this device.';\n    divider.textContent = 'or stay local';\n  })();\n`\n    : \"\"\n}\n${\n  showGoogle\n    ? `\n  function __anGetReturnPath() {\n    // If we landed here via /_agent-native/sign-in?return=X (force-sign-in\n    // entrypoint from a public page), prefer the inner return URL.\n    // Otherwise the loginHtml is being served at the URL the user actually\n    // wanted to reach (a bookmarked / deep-linked private path), so use it.\n    try {\n      var inner = new URLSearchParams(window.location.search).get('return');\n      if (inner) return inner;\n    } catch(e) {}\n    return window.location.pathname + window.location.search;\n  }\n  async function signInWithGoogle() {\n    var btn = document.getElementById('google-btn');\n    var err = document.getElementById('google-err');\n    btn.disabled = true;\n    err.classList.remove('show');\n    try {\n      var ret = __anGetReturnPath();\n      var authUrl = __anPath('/_agent-native/google/auth-url') + '?return=' + encodeURIComponent(ret);\n      var res = await fetch(authUrl);\n      var data = await res.json();\n      if (data.url) {\n        try { sessionStorage.setItem('__an_signin', '1'); } catch(e) {}\n        window.location.href = data.url;\n      } else {\n        err.textContent = data.message || 'Google OAuth is not configured.';\n        err.classList.add('show');\n        btn.disabled = false;\n      }\n    } catch (e) {\n      err.textContent = 'Failed to connect. Please try again.';\n      err.classList.add('show');\n      btn.disabled = false;\n    }\n  }`\n    : \"\"\n}\n${starfieldScript}\n</script>\n</body>\n</html>`;\n}\n\n/** @deprecated Use getOnboardingHtml() instead */\nexport const ONBOARDING_HTML = getOnboardingHtml();\n\n/**\n * HTML for the password reset page — shown when the user clicks the link in\n * their reset email. Posts `{ newPassword, token }` to Better Auth's\n * `/reset-password` endpoint, then redirects to the login page.\n */\nexport function getResetPasswordHtml(): string {\n  return `<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"UTF-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no\">\n<title>Reset password</title>\n<style>\n  *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }\n  body { font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif; background: #0a0a0a; color: #e5e5e5; display: flex; align-items: center; justify-content: center; min-height: 100vh; padding: 1rem; }\n  .card { width: 100%; max-width: 400px; padding: 2rem; background: #141414; border: 1px solid rgba(255,255,255,0.08); border-radius: 12px; }\n  h1 { font-size: 1.25rem; font-weight: 600; margin-bottom: 0.25rem; color: #fff; }\n  .subtitle { font-size: 0.8125rem; color: #888; margin-bottom: 1.5rem; }\n  label { display: block; font-size: 0.8125rem; color: #888; margin-bottom: 0.375rem; }\n  input { width: 100%; padding: 0.5rem 0.75rem; background: transparent; border: 1px solid rgba(255,255,255,0.12); border-radius: 6px; color: #e5e5e5; font-size: 0.875rem; outline: none; margin-bottom: 0.875rem; }\n  input:focus { border-color: rgba(255,255,255,0.3); box-shadow: 0 0 0 1px rgba(255,255,255,0.1); }\n  input::placeholder { color: #555; }\n  button[type=\"submit\"] { width: 100%; margin-top: 0.25rem; padding: 0.5rem; background: #fff; color: #000; border: none; border-radius: 6px; font-size: 0.875rem; font-weight: 500; cursor: pointer; }\n  button[type=\"submit\"]:hover { background: #e5e5e5; }\n  button[type=\"submit\"]:disabled { opacity: 0.5; cursor: not-allowed; }\n  .msg { margin-top: 0.75rem; font-size: 0.8125rem; display: none; }\n  .msg.error { color: #f87171; }\n  .msg.success { color: #4ade80; }\n  .msg.show { display: block; }\n  .back { display: inline-block; margin-top: 1rem; font-size: 0.75rem; color: #888; text-decoration: none; }\n  .back:hover { color: #bbb; }\n</style>\n</head>\n<body>\n<div class=\"card\">\n  <h1>Choose a new password</h1>\n  <p class=\"subtitle\">Set a new password for your account.</p>\n  <form id=\"reset-form\">\n    <label for=\"p1\">New password</label>\n    <input id=\"p1\" type=\"password\" autocomplete=\"new-password\" autofocus placeholder=\"At least 8 characters\" required minlength=\"8\" />\n    <label for=\"p2\">Confirm password</label>\n    <input id=\"p2\" type=\"password\" autocomplete=\"new-password\" placeholder=\"Confirm password\" required minlength=\"8\" />\n    <button type=\"submit\">Save new password</button>\n    <p class=\"msg\" id=\"msg\"></p>\n  </form>\n  <a class=\"back\" id=\"back-link\" href=\"/\">Back to sign in</a>\n</div>\n<script>\n  (function() {\n    // Derive the app's base path so apps mounted under a prefix\n    // (e.g. /mail, /calendar) get sent home instead of to the root domain.\n    var RESET_PATH = '/_agent-native/auth/reset';\n    var pathname = window.location.pathname;\n    var idx = pathname.indexOf(RESET_PATH);\n    var basePath = (idx >= 0 ? pathname.slice(0, idx) : '') || '';\n    var homeHref = basePath + '/';\n    var backLink = document.getElementById('back-link');\n    if (backLink) backLink.setAttribute('href', homeHref);\n    var params = new URLSearchParams(location.search);\n    var token = params.get('token') || '';\n    var msg = document.getElementById('msg');\n    if (!token) {\n      msg.textContent = 'Missing or invalid reset token. Request a new reset link.';\n      msg.classList.add('show', 'error');\n      document.getElementById('reset-form').style.display = 'none';\n      return;\n    }\n    document.getElementById('reset-form').addEventListener('submit', async function(e) {\n      e.preventDefault();\n      var btn = e.currentTarget.querySelector('button[type=\"submit\"]');\n      var p1 = document.getElementById('p1').value;\n      var p2 = document.getElementById('p2').value;\n      msg.classList.remove('show', 'error', 'success');\n      if (p1 !== p2) {\n        msg.textContent = 'Passwords do not match';\n        msg.classList.add('show', 'error');\n        return;\n      }\n      var original = btn.textContent;\n      btn.disabled = true;\n      btn.textContent = 'Saving…';\n      try {\n        var res = await fetch(basePath + '/_agent-native/auth/ba/reset-password', {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify({ newPassword: p1, token: token }),\n        });\n        if (res.ok) {\n          msg.textContent = 'Password updated — redirecting to sign in…';\n          msg.classList.add('show', 'success');\n          setTimeout(function() { window.location.href = homeHref; }, 1200);\n          return;\n        }\n        var data = await res.json().catch(function() { return {}; });\n        msg.textContent = (data && (data.message || data.error)) || 'Reset failed. The link may have expired — request a new one.';\n        msg.classList.add('show', 'error');\n        btn.disabled = false;\n        btn.textContent = original;\n      } catch (err) {\n        msg.textContent = 'Network error — please try again';\n        msg.classList.add('show', 'error');\n        btn.disabled = false;\n        btn.textContent = original;\n      }\n    });\n  })();\n</script>\n</body>\n</html>`;\n}\n"]}

package/dist/server/transcribe-voice.d.ts

@@ -2,25 +2,25 @@
  * POST /_agent-native/transcribe-voice
  *
  * Receives an audio blob from the agent sidebar composer and forwards it to
- * OpenAI Whisper. Returns `{ text }` on success, `{ error }` on failure.
+ * the configured transcription provider. Returns `{ text }` on success,
+ * `{ error }` on failure.
  *
- * Key resolution order (mirrors `templates/clips/actions/request-transcript.ts`):
+ * Key resolution order for BYOK providers:
  *   1. User-scoped encrypted secret (`readAppSecret` — set via the sidebar
  *      settings UI).
- *   2. `resolveCredential("OPENAI_API_KEY")` — env var + SQL settings store.
+ *   2. `resolveCredential("<PROVIDER>_API_KEY")` — env var + SQL settings
+ *      store.
  *
- * If no key is configured, returns 400 with an error the composer UI can
- * surface (the client falls back to the browser Web Speech API).
+ * If no server provider is configured, returns 400 with an error the
+ * composer UI can surface (the client falls back to Web Speech when possible).
  *
  * This is a framework route rather than a `defineAction` because multipart
  * audio bodies aren't a clean fit for the action contract (actions are
  * typed JSON-in / JSON-out).
  */
 export declare function createTranscribeVoiceHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
-    text?: undefined;
-} | {
     text: string;
-    error?: undefined;
+} | {
+    error: string;
 }>>;
 //# sourceMappingURL=transcribe-voice.d.ts.map

package/dist/server/transcribe-voice.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transcribe-voice.d.ts","sourceRoot":"","sources":["../../src/server/transcribe-voice.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAkFH,wBAAgB,4BAA4B;;;;;;IAqT3C"}
+{"version":3,"file":"transcribe-voice.d.ts","sourceRoot":"","sources":["../../src/server/transcribe-voice.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AA6FH,wBAAgB,4BAA4B;UA2cxB,MAAM;;;IA7FzB"}