@agent-native/core 0.7.24 → 0.7.26

package/dist/integrations/plugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/integrations/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,wCAAwC,CAAC;AAMlE,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EACL,gBAAgB,EAEhB,iBAAiB,EACjB,cAAc,GACf,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,IAAI,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAIvE,IAAI,4BAA4B,GAA0C,IAAI,CAAC;AAE/E,SAAS,4BAA4B,CACnC,QAAsC;IAEtC,IAAI,4BAA4B;QAAE,OAAO;IACzC,4BAA4B,GAAG,WAAW,CAAC,GAAG,EAAE;QAC9C,0BAA0B,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACrD,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC;AAED,+EAA+E;AAC/E,uEAAuE;AACvE,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,0EAA0E;AAC1E,MAAM,WAAW,GAAG,kBAAkB,CACpC,IAAI,GAAG,CAAC,4CAA4C,CAAC,CACtD,CAAC;AACF,MAAM,cAAc,GAAG,CAAC,6BAA6B,EAAE,qBAAqB,CAAC,CAAC;AAE9E;;;;;;GAMG;AACH,KAAK,UAAU,yBAAyB,CAAC,UAAkB;IACzD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE;QACtD,MAAM,EAAE,cAAc;QACtB,QAAQ;KACT,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,sEAAsE;IACtE,4DAA4D;IAC5D,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;IACjE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,6CAA6C;AAC7C,SAAS,kBAAkB;IACzB,OAAO;QACL,YAAY,EAAE;QACd,eAAe,EAAE;QACjB,eAAe,EAAE;QACjB,iBAAiB,EAAE;QACnB,YAAY,EAAE;KACf,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,sBAAsB,CAAC,KAAa;IACjD,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YAC3D,IAAI,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CACX,mBAAmB,IAAI,sBAAsB,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAClF,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAEV,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBACtD,IAAI,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;oBAC9B,QAAQ,CAAC,IAAI,CACX,mBAAmB,IAAI,wBAAwB,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CACtF,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,CACL,0FAA0F;QAC1F,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CACtB,CAAC;AACJ,CAAC;AAED,MAAM,yBAAyB,GAAG;;;;;;0FAMwD,CAAC;AAE3F;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAmC;IAEnC,OAAO,KAAK,EAAE,QAAa,EAAE,EAAE;QAC7B,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,kBAAkB,EAAE,CAAC;QAC3D,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;QACtD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,aAAa,CAAC;QAC9C,qEAAqE;QACrE,sEAAsE;QACtE,kEAAkE;QAClE,6DAA6D;QAC7D,mEAAmE;QACnE,cAAc;QACd,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,OAAO,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;QAEzD,0BAA0B;QAC1B,MAAM,gBAAgB,GAAG,OAAO,EAAE,YAAY,IAAI,yBAAyB,CAAC;QAE5E,yEAAyE;QACzE,8EAA8E;QAC9E,MAAM,YAAY,GAAG,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;QAC5C,IAAI,cAAc,GAA4B,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACrD,cAAc,GAAG;gBACf,YAAY,EAAE;oBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,GAAG,EAAE,CAAC,IAA4B,EAAE,OAAgB,EAAE,EAAE,CACtD,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAc,EAAE,OAAO,EAAE,KAAK,CAAC;iBAChD;aACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;QACD,MAAM,OAAO,GAAG;YACd,GAAG,YAAY;YACf,GAAG,cAAc;SACK,CAAC;QAEzB,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,GAAG,sBAAsB,eAAe,CAAC;QAEnD,KAAK,UAAU,cAAc,CAAC,KAAU;YACtC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,OAAO,EAAE,KAAK;gBAAE,OAAO,IAAI,CAAC;YAChC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QAED;;;;;;;;;;;;;;;;;;;WAmBG;QACH,KAAK,UAAU,aAAa,CAC1B,KAAU;YAEV,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;gBACpB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YAC9C,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACzD,wDAAwD;YACxD,IAAI,CAAC,GAAG,EAAE,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACrC,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtE,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EACH,mEAAmE;aACtE,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,EAAE,CAAC,GAAG,CACJ,GAAG,CAAC,SAAS,EACb,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC/B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YACrE,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAwB,EAAE,CAAC;YACzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBAChD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC5D,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC;gBAC/C,MAAM,CAAC,UAAU,GAAG,GAAG,OAAO,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,UAAU,CAAC;gBACjE,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;oBAC5B,IAAI,CAAC;wBACH,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;oBACxD,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,CAAC,eAAe,GAAG,EAAE,CAAC;oBAC9B,CAAC;gBACH,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxB,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CACH,CAAC;QAEF,gEAAgE;QAChE,oDAAoD;QACpD,qEAAqE;QACrE,wEAAwE;QACxE,qEAAqE;QACrE,qEAAqE;QACrE,EAAE,CAAC,GAAG,CACJ,GAAG,CAAC,oBAAoB,EACxB,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC/B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YACrE,IAAI,CAAC;gBACH,OAAO,MAAM,iBAAiB,EAAE,CAAC;YACnC,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QAEF,gEAAgE;QAChE,gDAAgD;QAChD,sEAAsE;QACtE,oEAAoE;QACpE,qEAAqE;QACrE,EAAE,CAAC,GAAG,CACJ,GAAG,CAAC,eAAe,EACnB,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;gBAChC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAwB,CAAC;YAC5D,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC;YAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;YACtC,CAAC;YAED,yCAAyC;YACzC,EAAE;YACF,iEAAiE;YACjE,kEAAkE;YAClE,qEAAqE;YACrE,kEAAkE;YAClE,oCAAoC;YACpC,EAAE;YACF,iEAAiE;YACjE,6DAA6D;YAC7D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;gBAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;oBAC1C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO;wBACL,KAAK,EACH,4GAA4G;qBAC/G,CAAC;gBACJ,CAAC;gBACD,+EAA+E;YACjF,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,kBAAkB,CAC5B,gBAAgB,CAAC,KAAK,EAAE,eAAe,CAAC,CACzC,CAAC;gBACF,IAAI,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC9C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;gBACxD,CAAC;YACH,CAAC;YAED,8DAA8D;YAC9D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;YAC7D,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,cAAc,CAAC,MAAM,EAAE,qBAAqB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACnE,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;gBACvC,CAAC;gBACD,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAChE,MAAM,sBAAsB,CAAC,IAAI,EAAE;oBACjC,OAAO;oBACP,YAAY,EAAE,gBAAgB,GAAG,SAAS;oBAC1C,OAAO;oBACP,KAAK;oBACL,MAAM,EAAE,SAAS,EAAE;oBACnB,MAAM,EAAE,OAAO,EAAE,MAAM;oBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;iBAC5B,CAAC,CAAC;gBACH,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAChC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC9B,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,MAAM,cAAc,CAClB,MAAM,EACN,GAAG,EAAE,OAAO;oBACV,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;oBACpC,CAAC,CAAC,kBAAkB,CACvB,CAAC;gBACF,iEAAiE;gBACjE,iEAAiE;gBACjE,iEAAiE;gBACjE,2DAA2D;gBAC3D,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;gBAC3D,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;YAC3C,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QAEF,mEAAmE;QACnE,4DAA4D;QAC5D,gEAAgE;QAChE,8DAA8D;QAC9D,EAAE,CAAC,GAAG,CACJ,GAAG,CAAC,2BAA2B,EAC/B,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;gBAChC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAgC,CAAC;YACpE,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,CAAC;YAC5C,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;YAC9C,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;gBAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;oBAC1C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO;wBACL,KAAK,EACH,4GAA4G;qBAC/G,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,kBAAkB,CAC5B,gBAAgB,CAAC,KAAK,EAAE,eAAe,CAAC,CACzC,CAAC;gBACF,IAAI,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC;oBACtD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;gBACxD,CAAC;YACH,CAAC;YAED,MAAM,0BAA0B,CAAC,cAAc,EAAE;gBAC/C,QAAQ,EAAE,UAAU;aACrB,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QACtC,CAAC,CAAC,CACH,CAAC;QAEF,iEAAiE;QACjE,qEAAqE;QACrE,EAAE,CAAC,GAAG,CACJ,GAAG,CAAC,EAAE,EACN,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAChC,iEAAiE;YACjE,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACjE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAE7C,uDAAuD;YACvD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YACxD,kEAAkE;YAClE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY;gBAAE,OAAO;YACtC,6DAA6D;YAC7D,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,cAAc;gBAAE,OAAO;YACxC,yEAAyE;YACzE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,0BAA0B;gBAAE,OAAO;YAEpD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,0CAA0C;YAEnE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;YACxC,CAAC;YAED,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,QAAQ,EAAE,EAAE,CAAC;YACpD,CAAC;YAED,yCAAyC;YACzC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG;oBACrB,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM;oBACvB,QAAQ;iBACT,CAAC;YACJ,CAAC;YAED,0DAA0D;YAC1D,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC5C,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;oBAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;gBACrE,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBAChD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;gBACpD,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC;gBAC/C,MAAM,CAAC,UAAU,GAAG,GAAG,OAAO,GAAG,CAAC,IAAI,QAAQ,UAAU,CAAC;gBACzD,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;oBAC5B,IAAI,CAAC;wBACH,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;oBACxD,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,CAAC,eAAe,GAAG,EAAE,CAAC;oBAC9B,CAAC;gBACH,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,0DAA0D;YAC1D,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9C,kEAAkE;gBAClE,kEAAkE;gBAClE,iEAAiE;gBACjE,iEAAiE;gBACjE,sCAAsC;gBACtC,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;oBAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;oBACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;4BAC1C,6DAA6D;4BAC7D,qDAAqD;4BACrD,gCAAgC;4BAChC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;4BAC9B,OAAO;gCACL,EAAE,EAAE,KAAK;gCACT,KAAK,EACH,8DAA8D;6BACjE,CAAC;wBACJ,CAAC;wBACD,gEAAgE;wBAChE,mDAAmD;wBACnD,sBAAsB,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;4BACrC,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;wBAC1D,CAAC,CAAC,CAAC;wBACH,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,EAAE,CAAC;oBAClE,IAAI,CAAC;wBACH,MAAM,yBAAyB,CAAC,UAAU,CAAC,CAAC;oBAC9C,CAAC;oBAAC,OAAO,GAAQ,EAAE,CAAC;wBAClB,OAAO,CAAC,IAAI,CACV,qCAAqC,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CACnE,CAAC;wBACF,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;oBAC9C,CAAC;oBACD,sBAAsB,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;wBACrC,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;oBAC1D,CAAC,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,wEAAwE;gBACxE,uDAAuD;gBACvD,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAC7D,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;oBACzB,OAAO,YAAY,CAAC,QAAQ,IAAI,IAAI,CAAC;gBACvC,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;gBACpD,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;oBACjC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,EAAE,KAAK,EAAE,eAAe,QAAQ,iBAAiB,EAAE,CAAC;gBAC7D,CAAC;gBAED,gEAAgE;gBAChE,kEAAkE;gBAClE,gEAAgE;gBAChE,+DAA+D;gBAC/D,oDAAoD;gBACpD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;gBACnD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;gBAChD,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;gBAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,KAAK,GAAG,eAAe,QAAQ,EAAE,CAAC;gBACtC,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;oBAC1B,IAAI,CAAC;wBACH,KAAK,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;oBAC/C,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,OAAO,CAAC,KAAK,CACX,oDAAoD,EACpD,GAAG,CACJ,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,CAAC;gBACtD,MAAM,YAAY,GAAG,gBAAgB,GAAG,SAAS,CAAC;gBAClD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE;oBACxC,OAAO;oBACP,YAAY;oBACZ,OAAO;oBACP,KAAK;oBACL,MAAM,EAAE,SAAS,EAAE;oBACnB,MAAM,EAAE,OAAO,EAAE,MAAM;oBACvB,UAAU,EAAE,KAAK;oBACjB,aAAa,EAAE,OAAO,EAAE,aAAa;oBACrC,QAAQ;iBACT,CAAC,CAAC;gBACH,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBACxC,OAAO,MAAM,CAAC,IAAI,CAAC;YACrB,CAAC;YAED,0DAA0D;YAC1D,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC7C,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC9C,IAAI,UAAU,CAAC,EAAE,KAAK,KAAK;oBAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;gBAChE,8DAA8D;gBAC9D,8DAA8D;gBAC9D,0CAA0C;gBAC1C,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC1D,MAAM,qBAAqB,CACzB,QAAQ,EACR,EAAE,OAAO,EAAE,IAAI,EAAE,EACjB,SAAS,EACT,OAAO,EAAE,KAAK,CACf,CAAC;gBACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC/C,CAAC;YAED,0DAA0D;YAC1D,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9C,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC9C,IAAI,UAAU,CAAC,EAAE,KAAK,KAAK;oBAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;gBAChE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC1D,MAAM,qBAAqB,CACzB,QAAQ,EACR,EAAE,OAAO,EAAE,KAAK,EAAE,EAClB,SAAS,EACT,OAAO,EAAE,KAAK,CACf,CAAC;gBACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAChD,CAAC;YAED,0DAA0D;YAC1D,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC5C,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC9C,IAAI,UAAU,CAAC,EAAE,KAAK,KAAK;oBAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;gBAChE,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;oBAC5B,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;oBAClC,MAAM,UAAU,GAAG,GAAG,OAAO,GAAG,CAAC,mBAAmB,CAAC;oBACrD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;oBAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;wBACX,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC9B,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;oBACxD,CAAC;oBACD,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,+BAA+B,KAAK,aAAa,EACjD;4BACE,MAAM,EAAE,MAAM;4BACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;4BAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;yBAC1C,CACF,CAAC;wBACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;wBAC9B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;oBAC1D,CAAC;oBAAC,OAAO,GAAQ,EAAE,CAAC;wBAClB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC9B,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;oBAChC,CAAC;gBACH,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;YAC9D,CAAC;YAED,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAChC,CAAC,CAAC,CACH,CAAC;QAEF,iEAAiE;QACjE,wEAAwE;QACxE,mEAAmE;QACnE,qEAAqE;QACrE,8CAA8C;QAC9C,yBAAyB,CAAC;YACxB,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;SAC7C,CAAC,CAAC;QACH,4BAA4B,CAAC,UAAU,CAAC,CAAC;QAEzC,iEAAiE;QACjE,IAAI,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YAClC,sDAAsD;YACtD,UAAU,CAAC,GAAG,EAAE;gBACd,iEAAiE;gBACjE,mEAAmE;gBACnE,oEAAoE;gBACpE,mEAAmE;gBACnE,8CAA8C;gBAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;gBAC7C,MAAM,UAAU,GAAG,OAAO;oBACxB,CAAC,CAAC,GAAG,yBAAyB,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB;oBACjE,CAAC,CAAC,SAAS,CAAC;gBAEd,qBAAqB,CAAC;oBACpB,YAAY,EAAE,gBAAgB;oBAC9B,OAAO;oBACP,KAAK;oBACL,MAAM,EAAE,SAAS,EAAE;oBACnB,UAAU,EAAE,yBAAyB;oBACrC,UAAU;iBACX,CAAC,CAAC;YACL,CAAC,EAAE,IAAI,CAAC,CAAC;QACX,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK;YACnB,OAAO,CAAC,GAAG,CACT,kDAAkD,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/F,CAAC;IACN,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,wBAAwB,EAAE,CAAC;AAEpE,wCAAwC;AACxC,SAAS,UAAU,CAAC,KAAU;IAC5B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QAChE,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CACjC,OAAO,OAAO,CAAC,GAAG,KAAK,UAAU;YAC/B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YACnB,CAAC,CAAE,OAAkC,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,SAAS,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC;QACvD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC;QACnD,OAAO,yBAAyB,CAAC,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC","sourcesContent":["import { defineEventHandler, setResponseStatus, getMethod } from \"h3\";\nimport { createRemoteJWKSet, jwtVerify } from \"jose\";\nimport { FRAMEWORK_ROUTE_PREFIX } from \"../server/core-routes-plugin.js\";\nimport { getH3App } from \"../server/framework-request-handler.js\";\nimport type {\n  PlatformAdapter,\n  IntegrationsPluginOptions,\n  IntegrationStatus,\n} from \"./types.js\";\nimport { handleWebhook, processIntegrationTask } from \"./webhook-handler.js\";\nimport { DEFAULT_MODEL } from \"../agent/default-model.js\";\nimport {\n  claimPendingTask,\n  getPendingTask,\n  markTaskCompleted,\n  markTaskFailed,\n} from \"./pending-tasks-store.js\";\nimport { extractBearerToken, verifyInternalToken } from \"./internal-token.js\";\nimport { readBody } from \"../server/h3-helpers.js\";\nimport { getRequestHeader } from \"h3\";\nimport { getIntegrationConfig, saveIntegrationConfig } from \"./config-store.js\";\nimport { slackAdapter } from \"./adapters/slack.js\";\nimport { telegramAdapter } from \"./adapters/telegram.js\";\nimport { whatsappAdapter } from \"./adapters/whatsapp.js\";\nimport { googleDocsAdapter } from \"./adapters/google-docs.js\";\nimport { emailAdapter } from \"./adapters/email.js\";\nimport {\n  startGoogleDocsPoller,\n  handlePushNotification,\n} from \"./google-docs-poller.js\";\nimport { startPendingTasksRetryJob } from \"./pending-tasks-retry-job.js\";\nimport {\n  processA2AContinuationById,\n  processDueA2AContinuations,\n} from \"./a2a-continuation-processor.js\";\nimport { resourceGetByPath, SHARED_OWNER } from \"../resources/store.js\";\nimport { getTaskQueueStats } from \"./task-queue-stats.js\";\nimport { getSession } from \"../server/auth.js\";\nimport { getOrgContext } from \"../org/context.js\";\nimport { withConfiguredAppBasePath } from \"../server/app-base-path.js\";\n\ntype NitroPluginDef = (nitroApp: any) => void | Promise<void>;\n\nlet a2aContinuationRetryInterval: ReturnType<typeof setInterval> | null = null;\n\nfunction startA2AContinuationRetryJob(\n  adapters: Map<string, PlatformAdapter>,\n): void {\n  if (a2aContinuationRetryInterval) return;\n  a2aContinuationRetryInterval = setInterval(() => {\n    processDueA2AContinuations({ adapters }).catch((err) => {\n      console.error(\"[integrations] A2A continuation retry job failed:\", err);\n    });\n  }, 60_000);\n}\n\n// ─── Google Pub/Sub OIDC verifier (for Drive changes.watch push) ────────────\n// Cache Google's public keys for OIDC verification. jose handles TTL +\n// refresh internally — same pattern as templates/mail/.../gmail/push.post.ts.\n// Used to verify Google Pub/Sub push notifications carry a valid bearer token\n// signed by a configured service account. Without this, the webhook is wide\n// open to anonymous callers who can force a Drive sync (H7 in the audit).\nconst GOOGLE_JWKS = createRemoteJWKSet(\n  new URL(\"https://www.googleapis.com/oauth2/v3/certs\"),\n);\nconst GOOGLE_ISSUERS = [\"https://accounts.google.com\", \"accounts.google.com\"];\n\n/**\n * Verify a Pub/Sub OIDC bearer token. Throws on any verification failure.\n * Requires GOOGLE_DOCS_PUSH_AUDIENCE and GOOGLE_DOCS_PUSH_SIGNER_EMAIL to be\n * set; if either is missing in production, the webhook handler refuses the\n * request entirely (so a misconfigured deployment fails closed, surfacing in\n * Pub/Sub's delivery metrics).\n */\nasync function verifyGoogleDocsPushToken(authHeader: string): Promise<void> {\n  if (!authHeader.startsWith(\"Bearer \")) {\n    throw new Error(\"missing bearer token\");\n  }\n  const token = authHeader.slice(7);\n  const audience = process.env.GOOGLE_DOCS_PUSH_AUDIENCE;\n  if (!audience) {\n    throw new Error(\"GOOGLE_DOCS_PUSH_AUDIENCE not configured\");\n  }\n  const { payload } = await jwtVerify(token, GOOGLE_JWKS, {\n    issuer: GOOGLE_ISSUERS,\n    audience,\n  });\n  if (payload.email_verified !== true) {\n    throw new Error(\"email_verified claim is not true\");\n  }\n  // Pin to a specific service account — without this, any Google-issued\n  // token with the right audience could trigger a Drive sync.\n  const expectedSigner = process.env.GOOGLE_DOCS_PUSH_SIGNER_EMAIL;\n  if (!expectedSigner) {\n    throw new Error(\"GOOGLE_DOCS_PUSH_SIGNER_EMAIL not configured\");\n  }\n  if (payload.email !== expectedSigner) {\n    throw new Error(`unexpected signer: ${String(payload.email)}`);\n  }\n}\n\n/** Built-in adapters, instantiated lazily */\nfunction getDefaultAdapters(): PlatformAdapter[] {\n  return [\n    slackAdapter(),\n    telegramAdapter(),\n    whatsappAdapter(),\n    googleDocsAdapter(),\n    emailAdapter(),\n  ];\n}\n\n/**\n * Load resources for the integration agent's system prompt.\n * Mirrors the pattern from agent-chat-plugin.ts.\n */\nasync function loadResourcesForPrompt(owner: string): Promise<string> {\n  const resourceNames = [\"AGENTS.md\", \"LEARNINGS.md\"];\n  const sections: string[] = [];\n\n  for (const name of resourceNames) {\n    try {\n      const shared = await resourceGetByPath(SHARED_OWNER, name);\n      if (shared?.content?.trim()) {\n        sections.push(\n          `<resource name=\"${name}\" scope=\"shared\">\\n${shared.content.trim()}\\n</resource>`,\n        );\n      }\n    } catch {}\n\n    if (owner !== SHARED_OWNER) {\n      try {\n        const personal = await resourceGetByPath(owner, name);\n        if (personal?.content?.trim()) {\n          sections.push(\n            `<resource name=\"${name}\" scope=\"personal\">\\n${personal.content.trim()}\\n</resource>`,\n          );\n        }\n      } catch {}\n    }\n  }\n\n  if (sections.length === 0) return \"\";\n  return (\n    \"\\n\\nThe following resources contain template-specific instructions and user context.\\n\\n\" +\n    sections.join(\"\\n\\n\")\n  );\n}\n\nconst INTEGRATION_SYSTEM_PROMPT = `You are an AI agent responding via a messaging platform integration (Slack, Telegram, WhatsApp, etc.).\n\nYou have the same capabilities as the web chat agent. Use your tools to help the user.\n\nKeep responses concise — messaging platforms have character limits and users expect shorter replies than in a web interface. Use markdown sparingly (bold and lists are fine, but avoid complex formatting that may not render well on all platforms).\n\nIf a task requires many steps, summarize what you did rather than streaming every detail.`;\n\n/**\n * Creates a Nitro plugin that mounts messaging platform integration webhook routes.\n *\n * Routes:\n *   POST   /_agent-native/integrations/:platform/webhook  — receive platform webhooks\n *   GET    /_agent-native/integrations/status              — all integrations status\n *   GET    /_agent-native/integrations/:platform/status    — single platform status\n *   POST   /_agent-native/integrations/:platform/enable    — enable integration\n *   POST   /_agent-native/integrations/:platform/disable   — disable integration\n *   POST   /_agent-native/integrations/:platform/setup     — platform-specific setup\n */\nexport function createIntegrationsPlugin(\n  options?: IntegrationsPluginOptions,\n): NitroPluginDef {\n  return async (nitroApp: any) => {\n    const adapters = options?.adapters ?? getDefaultAdapters();\n    const adapterMap = new Map<string, PlatformAdapter>();\n    for (const adapter of adapters) {\n      adapterMap.set(adapter.platform, adapter);\n    }\n\n    const model = options?.model ?? DEFAULT_MODEL;\n    // Read the API key at REQUEST time, not plugin-init time. On Netlify\n    // Lambda the plugin module loads in a context where env vars from the\n    // site's runtime config may not yet be populated, so capturing at\n    // init can leave us with an empty string forever. The getter\n    // re-resolves on every webhook so freshly-set secrets work without\n    // a redeploy.\n    const getApiKey = () =>\n      options?.apiKey ?? process.env.ANTHROPIC_API_KEY ?? \"\";\n\n    // Build the system prompt\n    const baseSystemPrompt = options?.systemPrompt ?? INTEGRATION_SYSTEM_PROMPT;\n\n    // Resolve actions — auto-include call-agent so the integration agent can\n    // delegate to other A2A apps, matching the behavior of the agent-chat plugin.\n    const localActions = options?.actions ?? {};\n    let callAgentEntry: Record<string, unknown> = {};\n    try {\n      const mod = await import(\"../scripts/call-agent.js\");\n      callAgentEntry = {\n        \"call-agent\": {\n          tool: mod.tool,\n          run: (args: Record<string, string>, context: unknown) =>\n            mod.run(args, context as any, options?.appId),\n        },\n      };\n    } catch {\n      // call-agent script not available — skip\n    }\n    const actions = {\n      ...localActions,\n      ...callAgentEntry,\n    } as typeof localActions;\n\n    const h3 = getH3App(nitroApp);\n    const P = `${FRAMEWORK_ROUTE_PREFIX}/integrations`;\n\n    async function requireSession(event: any): Promise<boolean> {\n      const session = await getSession(event).catch(() => null);\n      if (session?.email) return true;\n      setResponseStatus(event, 401);\n      return false;\n    }\n\n    /**\n     * Gate destructive integration writes (enable/disable, setup,\n     * setIntegrationConfig…) behind an org-owner/admin check.\n     *\n     * `integration_configs` is keyed `(platform, config_key)` with no\n     * owner column in the PRIMARY KEY — so this row is effectively\n     * deployment-wide. Any signed-in user toggling /enable or /disable\n     * would otherwise affect every other user (a regular org member could\n     * disable Slack/email org-wide, write a malicious allowlist for\n     * inbound email, etc.). This check enforces that only owners and\n     * admins of the user's active org may mutate integration config.\n     *\n     * Solo / no-org sessions (i.e. ctx.orgId == null) are allowed — that's\n     * the local-dev / single-user case where there's no privilege gradient\n     * to enforce. The deployment is single-tenant by definition there.\n     *\n     * Returns an `{ ok: true }` on pass, or `{ ok: false, error }` with the\n     * status already set on the event. The error string lines up with the\n     * status code (401 → \"unauthorized\"; 403 → admin-required message).\n     */\n    async function checkOrgAdmin(\n      event: any,\n    ): Promise<{ ok: true } | { ok: false; error: string }> {\n      const session = await getSession(event).catch(() => null);\n      if (!session?.email) {\n        setResponseStatus(event, 401);\n        return { ok: false, error: \"unauthorized\" };\n      }\n      const ctx = await getOrgContext(event).catch(() => null);\n      // Solo (no org membership) — single-tenant flow, allow.\n      if (!ctx?.orgId) return { ok: true };\n      if (ctx.role === \"owner\" || ctx.role === \"admin\") return { ok: true };\n      setResponseStatus(event, 403);\n      return {\n        ok: false,\n        error:\n          \"Only organization owners and admins can mutate integration config\",\n      };\n    }\n\n    // ─── Status endpoint (all integrations) ───────────────────────\n    h3.use(\n      `${P}/status`,\n      defineEventHandler(async (event) => {\n        if (getMethod(event) !== \"GET\") {\n          setResponseStatus(event, 405);\n          return { error: \"Method not allowed\" };\n        }\n        if (!(await requireSession(event))) return { error: \"unauthorized\" };\n        const baseUrl = getBaseUrl(event);\n        const statuses: IntegrationStatus[] = [];\n        for (const adapter of adapters) {\n          const status = await adapter.getStatus(baseUrl);\n          const config = await getIntegrationConfig(adapter.platform);\n          status.enabled = !!config?.configData?.enabled;\n          status.webhookUrl = `${baseUrl}${P}/${adapter.platform}/webhook`;\n          if (!status.requiredEnvKeys) {\n            try {\n              status.requiredEnvKeys = adapter.getRequiredEnvKeys();\n            } catch {\n              status.requiredEnvKeys = [];\n            }\n          }\n          statuses.push(status);\n        }\n        return statuses;\n      }),\n    );\n\n    // ─── Task queue status (observability) ───────────────────────\n    // GET /_agent-native/integrations/task-queue/status\n    // Returns counts + recent failures for the integration_pending_tasks\n    // queue. Requires a normal session — this exposes operational data, not\n    // platform secrets. If the queue table doesn't exist yet (no inbound\n    // webhook has been processed), returns zeroed stats rather than 500.\n    h3.use(\n      `${P}/task-queue/status`,\n      defineEventHandler(async (event) => {\n        if (getMethod(event) !== \"GET\") {\n          setResponseStatus(event, 405);\n          return { error: \"Method not allowed\" };\n        }\n        if (!(await requireSession(event))) return { error: \"unauthorized\" };\n        try {\n          return await getTaskQueueStats();\n        } catch (err: any) {\n          setResponseStatus(event, 500);\n          return { error: err?.message ?? String(err) };\n        }\n      }),\n    );\n\n    // ─── Process pending task (cross-platform task queue) ────────\n    // POST /_agent-native/integrations/process-task\n    // Internal endpoint invoked via fire-and-forget self-webhook from the\n    // public webhook handler. Auth: HMAC bearer signed with A2A_SECRET.\n    // Each invocation runs the agent loop in a fresh function execution.\n    h3.use(\n      `${P}/process-task`,\n      defineEventHandler(async (event) => {\n        if (getMethod(event) !== \"POST\") {\n          setResponseStatus(event, 405);\n          return { error: \"Method not allowed\" };\n        }\n\n        const body = (await readBody(event)) as { taskId?: string };\n        const taskId = body?.taskId;\n        if (!taskId) {\n          setResponseStatus(event, 400);\n          return { error: \"taskId required\" };\n        }\n\n        // Auth: HMAC token bound to the task id.\n        //\n        // In production we MUST require A2A_SECRET — a publicly-callable\n        // process-task endpoint lets attackers re-trigger any queued task\n        // by guessing or sniffing its id (C3 in the webhook security audit).\n        // The atomic SQL claim only prevents *double*-processing, not the\n        // first attacker-driven processing.\n        //\n        // In dev we keep the loose posture so contributors don't have to\n        // configure A2A_SECRET to play with the integration locally.\n        if (!process.env.A2A_SECRET) {\n          if (process.env.NODE_ENV === \"production\") {\n            setResponseStatus(event, 503);\n            return {\n              error:\n                \"A2A_SECRET not configured — internal token signing is required to process integration tasks in production.\",\n            };\n          }\n          // Dev: fall through unsigned (the atomic claim still gates double-processing).\n        } else {\n          const tok = extractBearerToken(\n            getRequestHeader(event, \"authorization\"),\n          );\n          if (!tok || !verifyInternalToken(taskId, tok)) {\n            setResponseStatus(event, 401);\n            return { error: \"Invalid or expired internal token\" };\n          }\n        }\n\n        // Atomic claim: only one invocation gets to process this task\n        const task = await claimPendingTask(taskId);\n        if (!task) {\n          setResponseStatus(event, 200);\n          return { ok: true, skipped: \"already-claimed-or-missing\" };\n        }\n\n        try {\n          const adapter = adapterMap.get(task.platform);\n          if (!adapter) {\n            await markTaskFailed(taskId, `Unknown platform: ${task.platform}`);\n            setResponseStatus(event, 404);\n            return { error: \"Unknown platform\" };\n          }\n          const resources = await loadResourcesForPrompt(task.ownerEmail);\n          await processIntegrationTask(task, {\n            adapter,\n            systemPrompt: baseSystemPrompt + resources,\n            actions,\n            model,\n            apiKey: getApiKey(),\n            engine: options?.engine,\n            ownerEmail: task.ownerEmail,\n          });\n          await markTaskCompleted(taskId);\n          return { ok: true, taskId };\n        } catch (err: any) {\n          await markTaskFailed(\n            taskId,\n            err?.message\n              ? String(err.message).slice(0, 1000)\n              : \"processor failed\",\n          );\n          // Log the detail server-side; never return the raw error message\n          // to the caller. Raw messages have leaked DB error codes, schema\n          // names, and stack hints in the past (L3 in the webhook security\n          // audit). Sentry / log providers still see the full error.\n          console.error(\"[integrations] process-task failure:\", err);\n          setResponseStatus(event, 500);\n          return { error: \"Internal task failed\" };\n        }\n      }),\n    );\n\n    // ─── Process deferred A2A continuation ──────────────────────────\n    // POST /_agent-native/integrations/process-a2a-continuation\n    // Internal endpoint invoked when call-agent timed out inside an\n    // integration processor but the remote A2A task kept running.\n    h3.use(\n      `${P}/process-a2a-continuation`,\n      defineEventHandler(async (event) => {\n        if (getMethod(event) !== \"POST\") {\n          setResponseStatus(event, 405);\n          return { error: \"Method not allowed\" };\n        }\n\n        const body = (await readBody(event)) as { continuationId?: string };\n        const continuationId = body?.continuationId;\n        if (!continuationId) {\n          setResponseStatus(event, 400);\n          return { error: \"continuationId required\" };\n        }\n\n        if (!process.env.A2A_SECRET) {\n          if (process.env.NODE_ENV === \"production\") {\n            setResponseStatus(event, 503);\n            return {\n              error:\n                \"A2A_SECRET not configured — internal token signing is required to process A2A continuations in production.\",\n            };\n          }\n        } else {\n          const tok = extractBearerToken(\n            getRequestHeader(event, \"authorization\"),\n          );\n          if (!tok || !verifyInternalToken(continuationId, tok)) {\n            setResponseStatus(event, 401);\n            return { error: \"Invalid or expired internal token\" };\n          }\n        }\n\n        await processA2AContinuationById(continuationId, {\n          adapters: adapterMap,\n        });\n        return { ok: true, continuationId };\n      }),\n    );\n\n    // ─── Per-platform catch-all ───────────────────────────────────\n    // Handles: webhook, status, enable, disable, setup for each platform\n    h3.use(\n      `${P}`,\n      defineEventHandler(async (event) => {\n        const method = getMethod(event);\n        // event.path is stripped to the remainder after the mount prefix\n        const raw = (event.path || \"/\").split(\"?\")[0].replace(/^\\//, \"\");\n        const parts = raw.split(\"/\").filter(Boolean);\n\n        // Already handled by the dedicated /status route above\n        if (parts[0] === \"status\" && parts.length === 1) return;\n        // Already handled by the dedicated /task-queue/status route above\n        if (parts[0] === \"task-queue\") return;\n        // Already handled by the dedicated /process-task route above\n        if (parts[0] === \"process-task\") return;\n        // Already handled by the dedicated /process-a2a-continuation route above\n        if (parts[0] === \"process-a2a-continuation\") return;\n\n        const platform = parts[0];\n        const action = parts[1]; // webhook, status, enable, disable, setup\n\n        if (!platform) {\n          setResponseStatus(event, 404);\n          return { error: \"Platform required\" };\n        }\n\n        const adapter = adapterMap.get(platform);\n        if (!adapter) {\n          setResponseStatus(event, 404);\n          return { error: `Unknown platform: ${platform}` };\n        }\n\n        // Set params for handlers that read them\n        if (event.context) {\n          event.context.params = {\n            ...event.context.params,\n            platform,\n          };\n        }\n\n        // ─── GET /:platform/status ─────────────────────────────\n        if (action === \"status\" && method === \"GET\") {\n          if (!(await requireSession(event))) return { error: \"unauthorized\" };\n          const baseUrl = getBaseUrl(event);\n          const status = await adapter.getStatus(baseUrl);\n          const config = await getIntegrationConfig(platform);\n          status.enabled = !!config?.configData?.enabled;\n          status.webhookUrl = `${baseUrl}${P}/${platform}/webhook`;\n          if (!status.requiredEnvKeys) {\n            try {\n              status.requiredEnvKeys = adapter.getRequiredEnvKeys();\n            } catch {\n              status.requiredEnvKeys = [];\n            }\n          }\n          return status;\n        }\n\n        // ─── POST /:platform/webhook ───────────────────────────\n        if (action === \"webhook\" && method === \"POST\") {\n          // Google Docs push notifications bypass the normal webhook flow —\n          // they're opaque \"something changed\" pings, not message payloads.\n          // We MUST verify the Pub/Sub OIDC token here. Without it, anyone\n          // could POST any body to this URL and force a Drive changes pull\n          // (H7 in the webhook security audit).\n          if (platform === \"google-docs\") {\n            const audience = process.env.GOOGLE_DOCS_PUSH_AUDIENCE;\n            if (!audience) {\n              if (process.env.NODE_ENV === \"production\") {\n                // Fail closed in prod so a misconfigured deployment surfaces\n                // in Pub/Sub's delivery metrics rather than silently\n                // accepting anonymous requests.\n                setResponseStatus(event, 503);\n                return {\n                  ok: false,\n                  error:\n                    \"google-docs push endpoint disabled (audience not configured)\",\n                };\n              }\n              // Dev: keep the loose posture so contributors can play with the\n              // integration locally without configuring Pub/Sub.\n              handlePushNotification().catch((err) => {\n                console.error(\"[google-docs] Push handler error:\", err);\n              });\n              return \"ok\";\n            }\n            const authHeader = getRequestHeader(event, \"authorization\") || \"\";\n            try {\n              await verifyGoogleDocsPushToken(authHeader);\n            } catch (err: any) {\n              console.warn(\n                `[google-docs] OIDC verify failed: ${err?.message ?? String(err)}`,\n              );\n              setResponseStatus(event, 401);\n              return { ok: false, error: \"unauthorized\" };\n            }\n            handlePushNotification().catch((err) => {\n              console.error(\"[google-docs] Push handler error:\", err);\n            });\n            return \"ok\";\n          }\n\n          // Handle platform verification challenges (e.g. Slack url_verification)\n          // before checking enable state or parsing the message.\n          const verification = await adapter.handleVerification(event);\n          if (verification.handled) {\n            return verification.response ?? \"ok\";\n          }\n\n          const config = await getIntegrationConfig(platform);\n          if (!config?.configData?.enabled) {\n            setResponseStatus(event, 404);\n            return { error: `Integration ${platform} is not enabled` };\n          }\n\n          // Verify the webhook signature BEFORE parsing. We pre-parse the\n          // body here (so handleWebhook can skip its second readBody, which\n          // hangs on streaming providers), and that means handleWebhook's\n          // own verifyWebhook step is bypassed. Without this call anyone\n          // could POST a forged Slack/Telegram/email payload.\n          const isValid = await adapter.verifyWebhook(event);\n          if (!isValid) {\n            setResponseStatus(event, 401);\n            return { error: \"Invalid webhook signature\" };\n          }\n\n          const incoming = await adapter.parseIncomingMessage(event);\n          if (!incoming) {\n            setResponseStatus(event, 200);\n            return \"ok\";\n          }\n          let owner = `integration@${platform}`;\n          if (options?.resolveOwner) {\n            try {\n              owner = await options.resolveOwner(incoming);\n            } catch (err) {\n              console.error(\n                `[integrations] resolveOwner failed, using default:`,\n                err,\n              );\n            }\n          }\n          const resources = await loadResourcesForPrompt(owner);\n          const systemPrompt = baseSystemPrompt + resources;\n          const result = await handleWebhook(event, {\n            adapter,\n            systemPrompt,\n            actions,\n            model,\n            apiKey: getApiKey(),\n            engine: options?.engine,\n            ownerEmail: owner,\n            beforeProcess: options?.beforeProcess,\n            incoming,\n          });\n          setResponseStatus(event, result.status);\n          return result.body;\n        }\n\n        // ─── POST /:platform/enable ────────────────────────────\n        if (action === \"enable\" && method === \"POST\") {\n          const adminCheck = await checkOrgAdmin(event);\n          if (adminCheck.ok === false) return { error: adminCheck.error };\n          // Stamp the org-admin who toggled this so downstream code can\n          // tell who is responsible — useful for audit logs even though\n          // the row itself remains deployment-wide.\n          const session = await getSession(event).catch(() => null);\n          await saveIntegrationConfig(\n            platform,\n            { enabled: true },\n            \"default\",\n            session?.email,\n          );\n          return { ok: true, platform, enabled: true };\n        }\n\n        // ─── POST /:platform/disable ───────────────────────────\n        if (action === \"disable\" && method === \"POST\") {\n          const adminCheck = await checkOrgAdmin(event);\n          if (adminCheck.ok === false) return { error: adminCheck.error };\n          const session = await getSession(event).catch(() => null);\n          await saveIntegrationConfig(\n            platform,\n            { enabled: false },\n            \"default\",\n            session?.email,\n          );\n          return { ok: true, platform, enabled: false };\n        }\n\n        // ─── POST /:platform/setup ─────────────────────────────\n        if (action === \"setup\" && method === \"POST\") {\n          const adminCheck = await checkOrgAdmin(event);\n          if (adminCheck.ok === false) return { error: adminCheck.error };\n          if (platform === \"telegram\") {\n            const baseUrl = getBaseUrl(event);\n            const webhookUrl = `${baseUrl}${P}/telegram/webhook`;\n            const token = process.env.TELEGRAM_BOT_TOKEN;\n            if (!token) {\n              setResponseStatus(event, 400);\n              return { error: \"TELEGRAM_BOT_TOKEN not configured\" };\n            }\n            try {\n              const res = await fetch(\n                `https://api.telegram.org/bot${token}/setWebhook`,\n                {\n                  method: \"POST\",\n                  headers: { \"Content-Type\": \"application/json\" },\n                  body: JSON.stringify({ url: webhookUrl }),\n                },\n              );\n              const data = await res.json();\n              return { ok: true, platform, webhookUrl, result: data };\n            } catch (err: any) {\n              setResponseStatus(event, 500);\n              return { error: err.message };\n            }\n          }\n          return { ok: true, platform, message: \"No setup required\" };\n        }\n\n        setResponseStatus(event, 404);\n        return { error: \"Not found\" };\n      }),\n    );\n\n    // ─── Start pending-tasks retry sweeper ────────────────────────\n    // Sweeps the integration_pending_tasks queue every 60s and re-fires the\n    // processor for any tasks that got stuck (initial dispatch lost or\n    // processor killed mid-flight). No-ops gracefully if the queue table\n    // hasn't been created yet on this deployment.\n    startPendingTasksRetryJob({\n      webhookBaseUrl: process.env.WEBHOOK_BASE_URL,\n    });\n    startA2AContinuationRetryJob(adapterMap);\n\n    // ─── Start Google Docs poller/push ────────────────────────────\n    if (adapterMap.has(\"google-docs\")) {\n      // Defer startup slightly so the server is fully ready\n      setTimeout(() => {\n        // We don't know the base URL at plugin init time — it depends on\n        // the incoming request. For push mode, the webhook URL needs to be\n        // resolved. We pass it as a special option; the poller will attempt\n        // to register a watch when the first request reveals the base URL,\n        // or use the WEBHOOK_BASE_URL env var if set.\n        const baseUrl = process.env.WEBHOOK_BASE_URL;\n        const webhookUrl = baseUrl\n          ? `${withConfiguredAppBasePath(baseUrl)}${P}/google-docs/webhook`\n          : undefined;\n\n        startGoogleDocsPoller({\n          systemPrompt: baseSystemPrompt,\n          actions,\n          model,\n          apiKey: getApiKey(),\n          ownerEmail: \"integration@google-docs\",\n          webhookUrl,\n        });\n      }, 2000);\n    }\n\n    if (process.env.DEBUG)\n      console.log(\n        `[integrations] Mounted integration routes for: ${adapters.map((a) => a.platform).join(\", \")}`,\n      );\n  };\n}\n\n/**\n * Default integrations plugin — auto-mounts all adapters.\n */\nexport const defaultIntegrationsPlugin = createIntegrationsPlugin();\n\n/** Extract base URL from the request */\nfunction getBaseUrl(event: any): string {\n  try {\n    const headers = event.node?.req?.headers || event.headers || {};\n    const getHeader = (name: string) =>\n      typeof headers.get === \"function\"\n        ? headers.get(name)\n        : (headers as Record<string, string>)[name];\n    const proto = getHeader(\"x-forwarded-proto\") || \"http\";\n    const host = getHeader(\"host\") || \"localhost:3000\";\n    return withConfiguredAppBasePath(`${proto}://${host}`);\n  } catch {\n    return withConfiguredAppBasePath(\"http://localhost:3000\");\n  }\n}\n"]}
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/integrations/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,wCAAwC,CAAC;AAMlE,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EACL,gBAAgB,EAEhB,iBAAiB,EACjB,cAAc,GACf,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,IAAI,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAIvE,IAAI,4BAA4B,GAA0C,IAAI,CAAC;AAE/E,SAAS,4BAA4B,CACnC,QAAsC;IAEtC,IAAI,4BAA4B;QAAE,OAAO;IACzC,UAAU,CAAC,GAAG,EAAE;QACd,0BAA0B,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACrD,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,MAAM,CAAC,CAAC;IACX,4BAA4B,GAAG,WAAW,CAAC,GAAG,EAAE;QAC9C,0BAA0B,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACrD,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC;AAED,+EAA+E;AAC/E,uEAAuE;AACvE,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,0EAA0E;AAC1E,MAAM,WAAW,GAAG,kBAAkB,CACpC,IAAI,GAAG,CAAC,4CAA4C,CAAC,CACtD,CAAC;AACF,MAAM,cAAc,GAAG,CAAC,6BAA6B,EAAE,qBAAqB,CAAC,CAAC;AAE9E;;;;;;GAMG;AACH,KAAK,UAAU,yBAAyB,CAAC,UAAkB;IACzD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE;QACtD,MAAM,EAAE,cAAc;QACtB,QAAQ;KACT,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,sEAAsE;IACtE,4DAA4D;IAC5D,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;IACjE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,6CAA6C;AAC7C,SAAS,kBAAkB;IACzB,OAAO;QACL,YAAY,EAAE;QACd,eAAe,EAAE;QACjB,eAAe,EAAE;QACjB,iBAAiB,EAAE;QACnB,YAAY,EAAE;KACf,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,sBAAsB,CAAC,KAAa;IACjD,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YAC3D,IAAI,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CACX,mBAAmB,IAAI,sBAAsB,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAClF,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAEV,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBACtD,IAAI,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;oBAC9B,QAAQ,CAAC,IAAI,CACX,mBAAmB,IAAI,wBAAwB,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CACtF,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,CACL,0FAA0F;QAC1F,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CACtB,CAAC;AACJ,CAAC;AAED,MAAM,yBAAyB,GAAG;;;;;;0FAMwD,CAAC;AAE3F;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAmC;IAEnC,OAAO,KAAK,EAAE,QAAa,EAAE,EAAE;QAC7B,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,kBAAkB,EAAE,CAAC;QAC3D,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;QACtD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,aAAa,CAAC;QAC9C,qEAAqE;QACrE,sEAAsE;QACtE,kEAAkE;QAClE,6DAA6D;QAC7D,mEAAmE;QACnE,cAAc;QACd,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,OAAO,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;QAEzD,0BAA0B;QAC1B,MAAM,gBAAgB,GAAG,OAAO,EAAE,YAAY,IAAI,yBAAyB,CAAC;QAE5E,yEAAyE;QACzE,8EAA8E;QAC9E,MAAM,YAAY,GAAG,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;QAC5C,IAAI,cAAc,GAA4B,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACrD,cAAc,GAAG;gBACf,YAAY,EAAE;oBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,GAAG,EAAE,CAAC,IAA4B,EAAE,OAAgB,EAAE,EAAE,CACtD,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAc,EAAE,OAAO,EAAE,KAAK,CAAC;iBAChD;aACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;QACD,MAAM,OAAO,GAAG;YACd,GAAG,YAAY;YACf,GAAG,cAAc;SACK,CAAC;QAEzB,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,GAAG,sBAAsB,eAAe,CAAC;QAEnD,KAAK,UAAU,cAAc,CAAC,KAAU;YACtC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,OAAO,EAAE,KAAK;gBAAE,OAAO,IAAI,CAAC;YAChC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QAED;;;;;;;;;;;;;;;;;;;WAmBG;QACH,KAAK,UAAU,aAAa,CAC1B,KAAU;YAEV,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;gBACpB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YAC9C,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACzD,wDAAwD;YACxD,IAAI,CAAC,GAAG,EAAE,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACrC,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtE,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EACH,mEAAmE;aACtE,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,EAAE,CAAC,GAAG,CACJ,GAAG,CAAC,SAAS,EACb,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC/B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YACrE,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAwB,EAAE,CAAC;YACzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBAChD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC5D,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC;gBAC/C,MAAM,CAAC,UAAU,GAAG,GAAG,OAAO,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,UAAU,CAAC;gBACjE,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;oBAC5B,IAAI,CAAC;wBACH,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;oBACxD,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,CAAC,eAAe,GAAG,EAAE,CAAC;oBAC9B,CAAC;gBACH,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxB,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CACH,CAAC;QAEF,gEAAgE;QAChE,oDAAoD;QACpD,qEAAqE;QACrE,wEAAwE;QACxE,qEAAqE;QACrE,qEAAqE;QACrE,EAAE,CAAC,GAAG,CACJ,GAAG,CAAC,oBAAoB,EACxB,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC/B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YACrE,IAAI,CAAC;gBACH,OAAO,MAAM,iBAAiB,EAAE,CAAC;YACnC,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QAEF,gEAAgE;QAChE,gDAAgD;QAChD,sEAAsE;QACtE,oEAAoE;QACpE,qEAAqE;QACrE,EAAE,CAAC,GAAG,CACJ,GAAG,CAAC,eAAe,EACnB,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;gBAChC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAwB,CAAC;YAC5D,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC;YAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;YACtC,CAAC;YAED,yCAAyC;YACzC,EAAE;YACF,iEAAiE;YACjE,kEAAkE;YAClE,qEAAqE;YACrE,kEAAkE;YAClE,oCAAoC;YACpC,EAAE;YACF,iEAAiE;YACjE,6DAA6D;YAC7D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;gBAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;oBAC1C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO;wBACL,KAAK,EACH,4GAA4G;qBAC/G,CAAC;gBACJ,CAAC;gBACD,+EAA+E;YACjF,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,kBAAkB,CAC5B,gBAAgB,CAAC,KAAK,EAAE,eAAe,CAAC,CACzC,CAAC;gBACF,IAAI,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC9C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;gBACxD,CAAC;YACH,CAAC;YAED,8DAA8D;YAC9D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;YAC7D,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,cAAc,CAAC,MAAM,EAAE,qBAAqB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACnE,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;gBACvC,CAAC;gBACD,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAChE,MAAM,sBAAsB,CAAC,IAAI,EAAE;oBACjC,OAAO;oBACP,YAAY,EAAE,gBAAgB,GAAG,SAAS;oBAC1C,OAAO;oBACP,KAAK;oBACL,MAAM,EAAE,SAAS,EAAE;oBACnB,MAAM,EAAE,OAAO,EAAE,MAAM;oBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;iBAC5B,CAAC,CAAC;gBACH,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAChC,MAAM,0BAA0B,CAAC;oBAC/B,QAAQ,EAAE,UAAU;oBACpB,KAAK,EAAE,CAAC;iBACT,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACf,OAAO,CAAC,KAAK,CACX,6DAA6D,EAC7D,GAAG,CACJ,CAAC;gBACJ,CAAC,CAAC,CAAC;gBACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC9B,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,MAAM,cAAc,CAClB,MAAM,EACN,GAAG,EAAE,OAAO;oBACV,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;oBACpC,CAAC,CAAC,kBAAkB,CACvB,CAAC;gBACF,iEAAiE;gBACjE,iEAAiE;gBACjE,iEAAiE;gBACjE,2DAA2D;gBAC3D,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;gBAC3D,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;YAC3C,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QAEF,mEAAmE;QACnE,4DAA4D;QAC5D,gEAAgE;QAChE,8DAA8D;QAC9D,EAAE,CAAC,GAAG,CACJ,GAAG,CAAC,2BAA2B,EAC/B,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;gBAChC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAgC,CAAC;YACpE,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,CAAC;YAC5C,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;YAC9C,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;gBAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;oBAC1C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO;wBACL,KAAK,EACH,4GAA4G;qBAC/G,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,kBAAkB,CAC5B,gBAAgB,CAAC,KAAK,EAAE,eAAe,CAAC,CACzC,CAAC;gBACF,IAAI,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC;oBACtD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;gBACxD,CAAC;YACH,CAAC;YAED,MAAM,0BAA0B,CAAC,cAAc,EAAE;gBAC/C,QAAQ,EAAE,UAAU;aACrB,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QACtC,CAAC,CAAC,CACH,CAAC;QAEF,iEAAiE;QACjE,qEAAqE;QACrE,EAAE,CAAC,GAAG,CACJ,GAAG,CAAC,EAAE,EACN,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAChC,iEAAiE;YACjE,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACjE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAE7C,uDAAuD;YACvD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YACxD,kEAAkE;YAClE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY;gBAAE,OAAO;YACtC,6DAA6D;YAC7D,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,cAAc;gBAAE,OAAO;YACxC,yEAAyE;YACzE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,0BAA0B;gBAAE,OAAO;YAEpD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,0CAA0C;YAEnE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;YACxC,CAAC;YAED,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,QAAQ,EAAE,EAAE,CAAC;YACpD,CAAC;YAED,yCAAyC;YACzC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG;oBACrB,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM;oBACvB,QAAQ;iBACT,CAAC;YACJ,CAAC;YAED,0DAA0D;YAC1D,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC5C,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;oBAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;gBACrE,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBAChD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;gBACpD,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC;gBAC/C,MAAM,CAAC,UAAU,GAAG,GAAG,OAAO,GAAG,CAAC,IAAI,QAAQ,UAAU,CAAC;gBACzD,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;oBAC5B,IAAI,CAAC;wBACH,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;oBACxD,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,CAAC,eAAe,GAAG,EAAE,CAAC;oBAC9B,CAAC;gBACH,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,0DAA0D;YAC1D,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9C,kEAAkE;gBAClE,kEAAkE;gBAClE,iEAAiE;gBACjE,iEAAiE;gBACjE,sCAAsC;gBACtC,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;oBAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;oBACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;4BAC1C,6DAA6D;4BAC7D,qDAAqD;4BACrD,gCAAgC;4BAChC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;4BAC9B,OAAO;gCACL,EAAE,EAAE,KAAK;gCACT,KAAK,EACH,8DAA8D;6BACjE,CAAC;wBACJ,CAAC;wBACD,gEAAgE;wBAChE,mDAAmD;wBACnD,sBAAsB,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;4BACrC,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;wBAC1D,CAAC,CAAC,CAAC;wBACH,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,EAAE,CAAC;oBAClE,IAAI,CAAC;wBACH,MAAM,yBAAyB,CAAC,UAAU,CAAC,CAAC;oBAC9C,CAAC;oBAAC,OAAO,GAAQ,EAAE,CAAC;wBAClB,OAAO,CAAC,IAAI,CACV,qCAAqC,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CACnE,CAAC;wBACF,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;oBAC9C,CAAC;oBACD,sBAAsB,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;wBACrC,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;oBAC1D,CAAC,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,wEAAwE;gBACxE,uDAAuD;gBACvD,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAC7D,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;oBACzB,OAAO,YAAY,CAAC,QAAQ,IAAI,IAAI,CAAC;gBACvC,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;gBACpD,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;oBACjC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,EAAE,KAAK,EAAE,eAAe,QAAQ,iBAAiB,EAAE,CAAC;gBAC7D,CAAC;gBAED,gEAAgE;gBAChE,kEAAkE;gBAClE,gEAAgE;gBAChE,+DAA+D;gBAC/D,oDAAoD;gBACpD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;gBACnD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;gBAChD,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;gBAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,KAAK,GAAG,eAAe,QAAQ,EAAE,CAAC;gBACtC,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;oBAC1B,IAAI,CAAC;wBACH,KAAK,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;oBAC/C,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,OAAO,CAAC,KAAK,CACX,oDAAoD,EACpD,GAAG,CACJ,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,CAAC;gBACtD,MAAM,YAAY,GAAG,gBAAgB,GAAG,SAAS,CAAC;gBAClD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE;oBACxC,OAAO;oBACP,YAAY;oBACZ,OAAO;oBACP,KAAK;oBACL,MAAM,EAAE,SAAS,EAAE;oBACnB,MAAM,EAAE,OAAO,EAAE,MAAM;oBACvB,UAAU,EAAE,KAAK;oBACjB,aAAa,EAAE,OAAO,EAAE,aAAa;oBACrC,QAAQ;iBACT,CAAC,CAAC;gBACH,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBACxC,OAAO,MAAM,CAAC,IAAI,CAAC;YACrB,CAAC;YAED,0DAA0D;YAC1D,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC7C,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC9C,IAAI,UAAU,CAAC,EAAE,KAAK,KAAK;oBAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;gBAChE,8DAA8D;gBAC9D,8DAA8D;gBAC9D,0CAA0C;gBAC1C,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC1D,MAAM,qBAAqB,CACzB,QAAQ,EACR,EAAE,OAAO,EAAE,IAAI,EAAE,EACjB,SAAS,EACT,OAAO,EAAE,KAAK,CACf,CAAC;gBACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC/C,CAAC;YAED,0DAA0D;YAC1D,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9C,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC9C,IAAI,UAAU,CAAC,EAAE,KAAK,KAAK;oBAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;gBAChE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC1D,MAAM,qBAAqB,CACzB,QAAQ,EACR,EAAE,OAAO,EAAE,KAAK,EAAE,EAClB,SAAS,EACT,OAAO,EAAE,KAAK,CACf,CAAC;gBACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAChD,CAAC;YAED,0DAA0D;YAC1D,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC5C,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC9C,IAAI,UAAU,CAAC,EAAE,KAAK,KAAK;oBAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;gBAChE,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;oBAC5B,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;oBAClC,MAAM,UAAU,GAAG,GAAG,OAAO,GAAG,CAAC,mBAAmB,CAAC;oBACrD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;oBAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;wBACX,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC9B,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;oBACxD,CAAC;oBACD,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,+BAA+B,KAAK,aAAa,EACjD;4BACE,MAAM,EAAE,MAAM;4BACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;4BAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;yBAC1C,CACF,CAAC;wBACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;wBAC9B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;oBAC1D,CAAC;oBAAC,OAAO,GAAQ,EAAE,CAAC;wBAClB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC9B,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;oBAChC,CAAC;gBACH,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;YAC9D,CAAC;YAED,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAChC,CAAC,CAAC,CACH,CAAC;QAEF,iEAAiE;QACjE,wEAAwE;QACxE,mEAAmE;QACnE,qEAAqE;QACrE,8CAA8C;QAC9C,yBAAyB,CAAC;YACxB,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;SAC7C,CAAC,CAAC;QACH,4BAA4B,CAAC,UAAU,CAAC,CAAC;QAEzC,iEAAiE;QACjE,IAAI,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YAClC,sDAAsD;YACtD,UAAU,CAAC,GAAG,EAAE;gBACd,iEAAiE;gBACjE,mEAAmE;gBACnE,oEAAoE;gBACpE,mEAAmE;gBACnE,8CAA8C;gBAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;gBAC7C,MAAM,UAAU,GAAG,OAAO;oBACxB,CAAC,CAAC,GAAG,yBAAyB,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB;oBACjE,CAAC,CAAC,SAAS,CAAC;gBAEd,qBAAqB,CAAC;oBACpB,YAAY,EAAE,gBAAgB;oBAC9B,OAAO;oBACP,KAAK;oBACL,MAAM,EAAE,SAAS,EAAE;oBACnB,UAAU,EAAE,yBAAyB;oBACrC,UAAU;iBACX,CAAC,CAAC;YACL,CAAC,EAAE,IAAI,CAAC,CAAC;QACX,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK;YACnB,OAAO,CAAC,GAAG,CACT,kDAAkD,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/F,CAAC;IACN,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,wBAAwB,EAAE,CAAC;AAEpE,wCAAwC;AACxC,SAAS,UAAU,CAAC,KAAU;IAC5B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QAChE,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CACjC,OAAO,OAAO,CAAC,GAAG,KAAK,UAAU;YAC/B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YACnB,CAAC,CAAE,OAAkC,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,SAAS,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC;QACvD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC;QACnD,OAAO,yBAAyB,CAAC,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC","sourcesContent":["import { defineEventHandler, setResponseStatus, getMethod } from \"h3\";\nimport { createRemoteJWKSet, jwtVerify } from \"jose\";\nimport { FRAMEWORK_ROUTE_PREFIX } from \"../server/core-routes-plugin.js\";\nimport { getH3App } from \"../server/framework-request-handler.js\";\nimport type {\n  PlatformAdapter,\n  IntegrationsPluginOptions,\n  IntegrationStatus,\n} from \"./types.js\";\nimport { handleWebhook, processIntegrationTask } from \"./webhook-handler.js\";\nimport { DEFAULT_MODEL } from \"../agent/default-model.js\";\nimport {\n  claimPendingTask,\n  getPendingTask,\n  markTaskCompleted,\n  markTaskFailed,\n} from \"./pending-tasks-store.js\";\nimport { extractBearerToken, verifyInternalToken } from \"./internal-token.js\";\nimport { readBody } from \"../server/h3-helpers.js\";\nimport { getRequestHeader } from \"h3\";\nimport { getIntegrationConfig, saveIntegrationConfig } from \"./config-store.js\";\nimport { slackAdapter } from \"./adapters/slack.js\";\nimport { telegramAdapter } from \"./adapters/telegram.js\";\nimport { whatsappAdapter } from \"./adapters/whatsapp.js\";\nimport { googleDocsAdapter } from \"./adapters/google-docs.js\";\nimport { emailAdapter } from \"./adapters/email.js\";\nimport {\n  startGoogleDocsPoller,\n  handlePushNotification,\n} from \"./google-docs-poller.js\";\nimport { startPendingTasksRetryJob } from \"./pending-tasks-retry-job.js\";\nimport {\n  processA2AContinuationById,\n  processDueA2AContinuations,\n} from \"./a2a-continuation-processor.js\";\nimport { resourceGetByPath, SHARED_OWNER } from \"../resources/store.js\";\nimport { getTaskQueueStats } from \"./task-queue-stats.js\";\nimport { getSession } from \"../server/auth.js\";\nimport { getOrgContext } from \"../org/context.js\";\nimport { withConfiguredAppBasePath } from \"../server/app-base-path.js\";\n\ntype NitroPluginDef = (nitroApp: any) => void | Promise<void>;\n\nlet a2aContinuationRetryInterval: ReturnType<typeof setInterval> | null = null;\n\nfunction startA2AContinuationRetryJob(\n  adapters: Map<string, PlatformAdapter>,\n): void {\n  if (a2aContinuationRetryInterval) return;\n  setTimeout(() => {\n    processDueA2AContinuations({ adapters }).catch((err) => {\n      console.error(\"[integrations] A2A continuation retry job failed:\", err);\n    });\n  }, 10_000);\n  a2aContinuationRetryInterval = setInterval(() => {\n    processDueA2AContinuations({ adapters }).catch((err) => {\n      console.error(\"[integrations] A2A continuation retry job failed:\", err);\n    });\n  }, 60_000);\n}\n\n// ─── Google Pub/Sub OIDC verifier (for Drive changes.watch push) ────────────\n// Cache Google's public keys for OIDC verification. jose handles TTL +\n// refresh internally — same pattern as templates/mail/.../gmail/push.post.ts.\n// Used to verify Google Pub/Sub push notifications carry a valid bearer token\n// signed by a configured service account. Without this, the webhook is wide\n// open to anonymous callers who can force a Drive sync (H7 in the audit).\nconst GOOGLE_JWKS = createRemoteJWKSet(\n  new URL(\"https://www.googleapis.com/oauth2/v3/certs\"),\n);\nconst GOOGLE_ISSUERS = [\"https://accounts.google.com\", \"accounts.google.com\"];\n\n/**\n * Verify a Pub/Sub OIDC bearer token. Throws on any verification failure.\n * Requires GOOGLE_DOCS_PUSH_AUDIENCE and GOOGLE_DOCS_PUSH_SIGNER_EMAIL to be\n * set; if either is missing in production, the webhook handler refuses the\n * request entirely (so a misconfigured deployment fails closed, surfacing in\n * Pub/Sub's delivery metrics).\n */\nasync function verifyGoogleDocsPushToken(authHeader: string): Promise<void> {\n  if (!authHeader.startsWith(\"Bearer \")) {\n    throw new Error(\"missing bearer token\");\n  }\n  const token = authHeader.slice(7);\n  const audience = process.env.GOOGLE_DOCS_PUSH_AUDIENCE;\n  if (!audience) {\n    throw new Error(\"GOOGLE_DOCS_PUSH_AUDIENCE not configured\");\n  }\n  const { payload } = await jwtVerify(token, GOOGLE_JWKS, {\n    issuer: GOOGLE_ISSUERS,\n    audience,\n  });\n  if (payload.email_verified !== true) {\n    throw new Error(\"email_verified claim is not true\");\n  }\n  // Pin to a specific service account — without this, any Google-issued\n  // token with the right audience could trigger a Drive sync.\n  const expectedSigner = process.env.GOOGLE_DOCS_PUSH_SIGNER_EMAIL;\n  if (!expectedSigner) {\n    throw new Error(\"GOOGLE_DOCS_PUSH_SIGNER_EMAIL not configured\");\n  }\n  if (payload.email !== expectedSigner) {\n    throw new Error(`unexpected signer: ${String(payload.email)}`);\n  }\n}\n\n/** Built-in adapters, instantiated lazily */\nfunction getDefaultAdapters(): PlatformAdapter[] {\n  return [\n    slackAdapter(),\n    telegramAdapter(),\n    whatsappAdapter(),\n    googleDocsAdapter(),\n    emailAdapter(),\n  ];\n}\n\n/**\n * Load resources for the integration agent's system prompt.\n * Mirrors the pattern from agent-chat-plugin.ts.\n */\nasync function loadResourcesForPrompt(owner: string): Promise<string> {\n  const resourceNames = [\"AGENTS.md\", \"LEARNINGS.md\"];\n  const sections: string[] = [];\n\n  for (const name of resourceNames) {\n    try {\n      const shared = await resourceGetByPath(SHARED_OWNER, name);\n      if (shared?.content?.trim()) {\n        sections.push(\n          `<resource name=\"${name}\" scope=\"shared\">\\n${shared.content.trim()}\\n</resource>`,\n        );\n      }\n    } catch {}\n\n    if (owner !== SHARED_OWNER) {\n      try {\n        const personal = await resourceGetByPath(owner, name);\n        if (personal?.content?.trim()) {\n          sections.push(\n            `<resource name=\"${name}\" scope=\"personal\">\\n${personal.content.trim()}\\n</resource>`,\n          );\n        }\n      } catch {}\n    }\n  }\n\n  if (sections.length === 0) return \"\";\n  return (\n    \"\\n\\nThe following resources contain template-specific instructions and user context.\\n\\n\" +\n    sections.join(\"\\n\\n\")\n  );\n}\n\nconst INTEGRATION_SYSTEM_PROMPT = `You are an AI agent responding via a messaging platform integration (Slack, Telegram, WhatsApp, etc.).\n\nYou have the same capabilities as the web chat agent. Use your tools to help the user.\n\nKeep responses concise — messaging platforms have character limits and users expect shorter replies than in a web interface. Use markdown sparingly (bold and lists are fine, but avoid complex formatting that may not render well on all platforms).\n\nIf a task requires many steps, summarize what you did rather than streaming every detail.`;\n\n/**\n * Creates a Nitro plugin that mounts messaging platform integration webhook routes.\n *\n * Routes:\n *   POST   /_agent-native/integrations/:platform/webhook  — receive platform webhooks\n *   GET    /_agent-native/integrations/status              — all integrations status\n *   GET    /_agent-native/integrations/:platform/status    — single platform status\n *   POST   /_agent-native/integrations/:platform/enable    — enable integration\n *   POST   /_agent-native/integrations/:platform/disable   — disable integration\n *   POST   /_agent-native/integrations/:platform/setup     — platform-specific setup\n */\nexport function createIntegrationsPlugin(\n  options?: IntegrationsPluginOptions,\n): NitroPluginDef {\n  return async (nitroApp: any) => {\n    const adapters = options?.adapters ?? getDefaultAdapters();\n    const adapterMap = new Map<string, PlatformAdapter>();\n    for (const adapter of adapters) {\n      adapterMap.set(adapter.platform, adapter);\n    }\n\n    const model = options?.model ?? DEFAULT_MODEL;\n    // Read the API key at REQUEST time, not plugin-init time. On Netlify\n    // Lambda the plugin module loads in a context where env vars from the\n    // site's runtime config may not yet be populated, so capturing at\n    // init can leave us with an empty string forever. The getter\n    // re-resolves on every webhook so freshly-set secrets work without\n    // a redeploy.\n    const getApiKey = () =>\n      options?.apiKey ?? process.env.ANTHROPIC_API_KEY ?? \"\";\n\n    // Build the system prompt\n    const baseSystemPrompt = options?.systemPrompt ?? INTEGRATION_SYSTEM_PROMPT;\n\n    // Resolve actions — auto-include call-agent so the integration agent can\n    // delegate to other A2A apps, matching the behavior of the agent-chat plugin.\n    const localActions = options?.actions ?? {};\n    let callAgentEntry: Record<string, unknown> = {};\n    try {\n      const mod = await import(\"../scripts/call-agent.js\");\n      callAgentEntry = {\n        \"call-agent\": {\n          tool: mod.tool,\n          run: (args: Record<string, string>, context: unknown) =>\n            mod.run(args, context as any, options?.appId),\n        },\n      };\n    } catch {\n      // call-agent script not available — skip\n    }\n    const actions = {\n      ...localActions,\n      ...callAgentEntry,\n    } as typeof localActions;\n\n    const h3 = getH3App(nitroApp);\n    const P = `${FRAMEWORK_ROUTE_PREFIX}/integrations`;\n\n    async function requireSession(event: any): Promise<boolean> {\n      const session = await getSession(event).catch(() => null);\n      if (session?.email) return true;\n      setResponseStatus(event, 401);\n      return false;\n    }\n\n    /**\n     * Gate destructive integration writes (enable/disable, setup,\n     * setIntegrationConfig…) behind an org-owner/admin check.\n     *\n     * `integration_configs` is keyed `(platform, config_key)` with no\n     * owner column in the PRIMARY KEY — so this row is effectively\n     * deployment-wide. Any signed-in user toggling /enable or /disable\n     * would otherwise affect every other user (a regular org member could\n     * disable Slack/email org-wide, write a malicious allowlist for\n     * inbound email, etc.). This check enforces that only owners and\n     * admins of the user's active org may mutate integration config.\n     *\n     * Solo / no-org sessions (i.e. ctx.orgId == null) are allowed — that's\n     * the local-dev / single-user case where there's no privilege gradient\n     * to enforce. The deployment is single-tenant by definition there.\n     *\n     * Returns an `{ ok: true }` on pass, or `{ ok: false, error }` with the\n     * status already set on the event. The error string lines up with the\n     * status code (401 → \"unauthorized\"; 403 → admin-required message).\n     */\n    async function checkOrgAdmin(\n      event: any,\n    ): Promise<{ ok: true } | { ok: false; error: string }> {\n      const session = await getSession(event).catch(() => null);\n      if (!session?.email) {\n        setResponseStatus(event, 401);\n        return { ok: false, error: \"unauthorized\" };\n      }\n      const ctx = await getOrgContext(event).catch(() => null);\n      // Solo (no org membership) — single-tenant flow, allow.\n      if (!ctx?.orgId) return { ok: true };\n      if (ctx.role === \"owner\" || ctx.role === \"admin\") return { ok: true };\n      setResponseStatus(event, 403);\n      return {\n        ok: false,\n        error:\n          \"Only organization owners and admins can mutate integration config\",\n      };\n    }\n\n    // ─── Status endpoint (all integrations) ───────────────────────\n    h3.use(\n      `${P}/status`,\n      defineEventHandler(async (event) => {\n        if (getMethod(event) !== \"GET\") {\n          setResponseStatus(event, 405);\n          return { error: \"Method not allowed\" };\n        }\n        if (!(await requireSession(event))) return { error: \"unauthorized\" };\n        const baseUrl = getBaseUrl(event);\n        const statuses: IntegrationStatus[] = [];\n        for (const adapter of adapters) {\n          const status = await adapter.getStatus(baseUrl);\n          const config = await getIntegrationConfig(adapter.platform);\n          status.enabled = !!config?.configData?.enabled;\n          status.webhookUrl = `${baseUrl}${P}/${adapter.platform}/webhook`;\n          if (!status.requiredEnvKeys) {\n            try {\n              status.requiredEnvKeys = adapter.getRequiredEnvKeys();\n            } catch {\n              status.requiredEnvKeys = [];\n            }\n          }\n          statuses.push(status);\n        }\n        return statuses;\n      }),\n    );\n\n    // ─── Task queue status (observability) ───────────────────────\n    // GET /_agent-native/integrations/task-queue/status\n    // Returns counts + recent failures for the integration_pending_tasks\n    // queue. Requires a normal session — this exposes operational data, not\n    // platform secrets. If the queue table doesn't exist yet (no inbound\n    // webhook has been processed), returns zeroed stats rather than 500.\n    h3.use(\n      `${P}/task-queue/status`,\n      defineEventHandler(async (event) => {\n        if (getMethod(event) !== \"GET\") {\n          setResponseStatus(event, 405);\n          return { error: \"Method not allowed\" };\n        }\n        if (!(await requireSession(event))) return { error: \"unauthorized\" };\n        try {\n          return await getTaskQueueStats();\n        } catch (err: any) {\n          setResponseStatus(event, 500);\n          return { error: err?.message ?? String(err) };\n        }\n      }),\n    );\n\n    // ─── Process pending task (cross-platform task queue) ────────\n    // POST /_agent-native/integrations/process-task\n    // Internal endpoint invoked via fire-and-forget self-webhook from the\n    // public webhook handler. Auth: HMAC bearer signed with A2A_SECRET.\n    // Each invocation runs the agent loop in a fresh function execution.\n    h3.use(\n      `${P}/process-task`,\n      defineEventHandler(async (event) => {\n        if (getMethod(event) !== \"POST\") {\n          setResponseStatus(event, 405);\n          return { error: \"Method not allowed\" };\n        }\n\n        const body = (await readBody(event)) as { taskId?: string };\n        const taskId = body?.taskId;\n        if (!taskId) {\n          setResponseStatus(event, 400);\n          return { error: \"taskId required\" };\n        }\n\n        // Auth: HMAC token bound to the task id.\n        //\n        // In production we MUST require A2A_SECRET — a publicly-callable\n        // process-task endpoint lets attackers re-trigger any queued task\n        // by guessing or sniffing its id (C3 in the webhook security audit).\n        // The atomic SQL claim only prevents *double*-processing, not the\n        // first attacker-driven processing.\n        //\n        // In dev we keep the loose posture so contributors don't have to\n        // configure A2A_SECRET to play with the integration locally.\n        if (!process.env.A2A_SECRET) {\n          if (process.env.NODE_ENV === \"production\") {\n            setResponseStatus(event, 503);\n            return {\n              error:\n                \"A2A_SECRET not configured — internal token signing is required to process integration tasks in production.\",\n            };\n          }\n          // Dev: fall through unsigned (the atomic claim still gates double-processing).\n        } else {\n          const tok = extractBearerToken(\n            getRequestHeader(event, \"authorization\"),\n          );\n          if (!tok || !verifyInternalToken(taskId, tok)) {\n            setResponseStatus(event, 401);\n            return { error: \"Invalid or expired internal token\" };\n          }\n        }\n\n        // Atomic claim: only one invocation gets to process this task\n        const task = await claimPendingTask(taskId);\n        if (!task) {\n          setResponseStatus(event, 200);\n          return { ok: true, skipped: \"already-claimed-or-missing\" };\n        }\n\n        try {\n          const adapter = adapterMap.get(task.platform);\n          if (!adapter) {\n            await markTaskFailed(taskId, `Unknown platform: ${task.platform}`);\n            setResponseStatus(event, 404);\n            return { error: \"Unknown platform\" };\n          }\n          const resources = await loadResourcesForPrompt(task.ownerEmail);\n          await processIntegrationTask(task, {\n            adapter,\n            systemPrompt: baseSystemPrompt + resources,\n            actions,\n            model,\n            apiKey: getApiKey(),\n            engine: options?.engine,\n            ownerEmail: task.ownerEmail,\n          });\n          await markTaskCompleted(taskId);\n          await processDueA2AContinuations({\n            adapters: adapterMap,\n            limit: 2,\n          }).catch((err) => {\n            console.error(\n              \"[integrations] A2A continuation opportunistic sweep failed:\",\n              err,\n            );\n          });\n          return { ok: true, taskId };\n        } catch (err: any) {\n          await markTaskFailed(\n            taskId,\n            err?.message\n              ? String(err.message).slice(0, 1000)\n              : \"processor failed\",\n          );\n          // Log the detail server-side; never return the raw error message\n          // to the caller. Raw messages have leaked DB error codes, schema\n          // names, and stack hints in the past (L3 in the webhook security\n          // audit). Sentry / log providers still see the full error.\n          console.error(\"[integrations] process-task failure:\", err);\n          setResponseStatus(event, 500);\n          return { error: \"Internal task failed\" };\n        }\n      }),\n    );\n\n    // ─── Process deferred A2A continuation ──────────────────────────\n    // POST /_agent-native/integrations/process-a2a-continuation\n    // Internal endpoint invoked when call-agent timed out inside an\n    // integration processor but the remote A2A task kept running.\n    h3.use(\n      `${P}/process-a2a-continuation`,\n      defineEventHandler(async (event) => {\n        if (getMethod(event) !== \"POST\") {\n          setResponseStatus(event, 405);\n          return { error: \"Method not allowed\" };\n        }\n\n        const body = (await readBody(event)) as { continuationId?: string };\n        const continuationId = body?.continuationId;\n        if (!continuationId) {\n          setResponseStatus(event, 400);\n          return { error: \"continuationId required\" };\n        }\n\n        if (!process.env.A2A_SECRET) {\n          if (process.env.NODE_ENV === \"production\") {\n            setResponseStatus(event, 503);\n            return {\n              error:\n                \"A2A_SECRET not configured — internal token signing is required to process A2A continuations in production.\",\n            };\n          }\n        } else {\n          const tok = extractBearerToken(\n            getRequestHeader(event, \"authorization\"),\n          );\n          if (!tok || !verifyInternalToken(continuationId, tok)) {\n            setResponseStatus(event, 401);\n            return { error: \"Invalid or expired internal token\" };\n          }\n        }\n\n        await processA2AContinuationById(continuationId, {\n          adapters: adapterMap,\n        });\n        return { ok: true, continuationId };\n      }),\n    );\n\n    // ─── Per-platform catch-all ───────────────────────────────────\n    // Handles: webhook, status, enable, disable, setup for each platform\n    h3.use(\n      `${P}`,\n      defineEventHandler(async (event) => {\n        const method = getMethod(event);\n        // event.path is stripped to the remainder after the mount prefix\n        const raw = (event.path || \"/\").split(\"?\")[0].replace(/^\\//, \"\");\n        const parts = raw.split(\"/\").filter(Boolean);\n\n        // Already handled by the dedicated /status route above\n        if (parts[0] === \"status\" && parts.length === 1) return;\n        // Already handled by the dedicated /task-queue/status route above\n        if (parts[0] === \"task-queue\") return;\n        // Already handled by the dedicated /process-task route above\n        if (parts[0] === \"process-task\") return;\n        // Already handled by the dedicated /process-a2a-continuation route above\n        if (parts[0] === \"process-a2a-continuation\") return;\n\n        const platform = parts[0];\n        const action = parts[1]; // webhook, status, enable, disable, setup\n\n        if (!platform) {\n          setResponseStatus(event, 404);\n          return { error: \"Platform required\" };\n        }\n\n        const adapter = adapterMap.get(platform);\n        if (!adapter) {\n          setResponseStatus(event, 404);\n          return { error: `Unknown platform: ${platform}` };\n        }\n\n        // Set params for handlers that read them\n        if (event.context) {\n          event.context.params = {\n            ...event.context.params,\n            platform,\n          };\n        }\n\n        // ─── GET /:platform/status ─────────────────────────────\n        if (action === \"status\" && method === \"GET\") {\n          if (!(await requireSession(event))) return { error: \"unauthorized\" };\n          const baseUrl = getBaseUrl(event);\n          const status = await adapter.getStatus(baseUrl);\n          const config = await getIntegrationConfig(platform);\n          status.enabled = !!config?.configData?.enabled;\n          status.webhookUrl = `${baseUrl}${P}/${platform}/webhook`;\n          if (!status.requiredEnvKeys) {\n            try {\n              status.requiredEnvKeys = adapter.getRequiredEnvKeys();\n            } catch {\n              status.requiredEnvKeys = [];\n            }\n          }\n          return status;\n        }\n\n        // ─── POST /:platform/webhook ───────────────────────────\n        if (action === \"webhook\" && method === \"POST\") {\n          // Google Docs push notifications bypass the normal webhook flow —\n          // they're opaque \"something changed\" pings, not message payloads.\n          // We MUST verify the Pub/Sub OIDC token here. Without it, anyone\n          // could POST any body to this URL and force a Drive changes pull\n          // (H7 in the webhook security audit).\n          if (platform === \"google-docs\") {\n            const audience = process.env.GOOGLE_DOCS_PUSH_AUDIENCE;\n            if (!audience) {\n              if (process.env.NODE_ENV === \"production\") {\n                // Fail closed in prod so a misconfigured deployment surfaces\n                // in Pub/Sub's delivery metrics rather than silently\n                // accepting anonymous requests.\n                setResponseStatus(event, 503);\n                return {\n                  ok: false,\n                  error:\n                    \"google-docs push endpoint disabled (audience not configured)\",\n                };\n              }\n              // Dev: keep the loose posture so contributors can play with the\n              // integration locally without configuring Pub/Sub.\n              handlePushNotification().catch((err) => {\n                console.error(\"[google-docs] Push handler error:\", err);\n              });\n              return \"ok\";\n            }\n            const authHeader = getRequestHeader(event, \"authorization\") || \"\";\n            try {\n              await verifyGoogleDocsPushToken(authHeader);\n            } catch (err: any) {\n              console.warn(\n                `[google-docs] OIDC verify failed: ${err?.message ?? String(err)}`,\n              );\n              setResponseStatus(event, 401);\n              return { ok: false, error: \"unauthorized\" };\n            }\n            handlePushNotification().catch((err) => {\n              console.error(\"[google-docs] Push handler error:\", err);\n            });\n            return \"ok\";\n          }\n\n          // Handle platform verification challenges (e.g. Slack url_verification)\n          // before checking enable state or parsing the message.\n          const verification = await adapter.handleVerification(event);\n          if (verification.handled) {\n            return verification.response ?? \"ok\";\n          }\n\n          const config = await getIntegrationConfig(platform);\n          if (!config?.configData?.enabled) {\n            setResponseStatus(event, 404);\n            return { error: `Integration ${platform} is not enabled` };\n          }\n\n          // Verify the webhook signature BEFORE parsing. We pre-parse the\n          // body here (so handleWebhook can skip its second readBody, which\n          // hangs on streaming providers), and that means handleWebhook's\n          // own verifyWebhook step is bypassed. Without this call anyone\n          // could POST a forged Slack/Telegram/email payload.\n          const isValid = await adapter.verifyWebhook(event);\n          if (!isValid) {\n            setResponseStatus(event, 401);\n            return { error: \"Invalid webhook signature\" };\n          }\n\n          const incoming = await adapter.parseIncomingMessage(event);\n          if (!incoming) {\n            setResponseStatus(event, 200);\n            return \"ok\";\n          }\n          let owner = `integration@${platform}`;\n          if (options?.resolveOwner) {\n            try {\n              owner = await options.resolveOwner(incoming);\n            } catch (err) {\n              console.error(\n                `[integrations] resolveOwner failed, using default:`,\n                err,\n              );\n            }\n          }\n          const resources = await loadResourcesForPrompt(owner);\n          const systemPrompt = baseSystemPrompt + resources;\n          const result = await handleWebhook(event, {\n            adapter,\n            systemPrompt,\n            actions,\n            model,\n            apiKey: getApiKey(),\n            engine: options?.engine,\n            ownerEmail: owner,\n            beforeProcess: options?.beforeProcess,\n            incoming,\n          });\n          setResponseStatus(event, result.status);\n          return result.body;\n        }\n\n        // ─── POST /:platform/enable ────────────────────────────\n        if (action === \"enable\" && method === \"POST\") {\n          const adminCheck = await checkOrgAdmin(event);\n          if (adminCheck.ok === false) return { error: adminCheck.error };\n          // Stamp the org-admin who toggled this so downstream code can\n          // tell who is responsible — useful for audit logs even though\n          // the row itself remains deployment-wide.\n          const session = await getSession(event).catch(() => null);\n          await saveIntegrationConfig(\n            platform,\n            { enabled: true },\n            \"default\",\n            session?.email,\n          );\n          return { ok: true, platform, enabled: true };\n        }\n\n        // ─── POST /:platform/disable ───────────────────────────\n        if (action === \"disable\" && method === \"POST\") {\n          const adminCheck = await checkOrgAdmin(event);\n          if (adminCheck.ok === false) return { error: adminCheck.error };\n          const session = await getSession(event).catch(() => null);\n          await saveIntegrationConfig(\n            platform,\n            { enabled: false },\n            \"default\",\n            session?.email,\n          );\n          return { ok: true, platform, enabled: false };\n        }\n\n        // ─── POST /:platform/setup ─────────────────────────────\n        if (action === \"setup\" && method === \"POST\") {\n          const adminCheck = await checkOrgAdmin(event);\n          if (adminCheck.ok === false) return { error: adminCheck.error };\n          if (platform === \"telegram\") {\n            const baseUrl = getBaseUrl(event);\n            const webhookUrl = `${baseUrl}${P}/telegram/webhook`;\n            const token = process.env.TELEGRAM_BOT_TOKEN;\n            if (!token) {\n              setResponseStatus(event, 400);\n              return { error: \"TELEGRAM_BOT_TOKEN not configured\" };\n            }\n            try {\n              const res = await fetch(\n                `https://api.telegram.org/bot${token}/setWebhook`,\n                {\n                  method: \"POST\",\n                  headers: { \"Content-Type\": \"application/json\" },\n                  body: JSON.stringify({ url: webhookUrl }),\n                },\n              );\n              const data = await res.json();\n              return { ok: true, platform, webhookUrl, result: data };\n            } catch (err: any) {\n              setResponseStatus(event, 500);\n              return { error: err.message };\n            }\n          }\n          return { ok: true, platform, message: \"No setup required\" };\n        }\n\n        setResponseStatus(event, 404);\n        return { error: \"Not found\" };\n      }),\n    );\n\n    // ─── Start pending-tasks retry sweeper ────────────────────────\n    // Sweeps the integration_pending_tasks queue every 60s and re-fires the\n    // processor for any tasks that got stuck (initial dispatch lost or\n    // processor killed mid-flight). No-ops gracefully if the queue table\n    // hasn't been created yet on this deployment.\n    startPendingTasksRetryJob({\n      webhookBaseUrl: process.env.WEBHOOK_BASE_URL,\n    });\n    startA2AContinuationRetryJob(adapterMap);\n\n    // ─── Start Google Docs poller/push ────────────────────────────\n    if (adapterMap.has(\"google-docs\")) {\n      // Defer startup slightly so the server is fully ready\n      setTimeout(() => {\n        // We don't know the base URL at plugin init time — it depends on\n        // the incoming request. For push mode, the webhook URL needs to be\n        // resolved. We pass it as a special option; the poller will attempt\n        // to register a watch when the first request reveals the base URL,\n        // or use the WEBHOOK_BASE_URL env var if set.\n        const baseUrl = process.env.WEBHOOK_BASE_URL;\n        const webhookUrl = baseUrl\n          ? `${withConfiguredAppBasePath(baseUrl)}${P}/google-docs/webhook`\n          : undefined;\n\n        startGoogleDocsPoller({\n          systemPrompt: baseSystemPrompt,\n          actions,\n          model,\n          apiKey: getApiKey(),\n          ownerEmail: \"integration@google-docs\",\n          webhookUrl,\n        });\n      }, 2000);\n    }\n\n    if (process.env.DEBUG)\n      console.log(\n        `[integrations] Mounted integration routes for: ${adapters.map((a) => a.platform).join(\", \")}`,\n      );\n  };\n}\n\n/**\n * Default integrations plugin — auto-mounts all adapters.\n */\nexport const defaultIntegrationsPlugin = createIntegrationsPlugin();\n\n/** Extract base URL from the request */\nfunction getBaseUrl(event: any): string {\n  try {\n    const headers = event.node?.req?.headers || event.headers || {};\n    const getHeader = (name: string) =>\n      typeof headers.get === \"function\"\n        ? headers.get(name)\n        : (headers as Record<string, string>)[name];\n    const proto = getHeader(\"x-forwarded-proto\") || \"http\";\n    const host = getHeader(\"host\") || \"localhost:3000\";\n    return withConfiguredAppBasePath(`${proto}://${host}`);\n  } catch {\n    return withConfiguredAppBasePath(\"http://localhost:3000\");\n  }\n}\n"]}

package/dist/server/agent-discovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-discovery.d.ts","sourceRoot":"","sources":["../../src/server/agent-discovery.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AA6BD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,eAAe,EAAE,CAUtE;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,EAAE,CAAC,CAiE5B;AAED;;GAEG;AACH,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAItC;AAeD;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,EAAE,eAAe,EAOnD,CAAC"}
+{"version":3,"file":"agent-discovery.d.ts","sourceRoot":"","sources":["../../src/server/agent-discovery.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAmCD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,eAAe,EAAE,CAUtE;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,EAAE,CAAC,CAkE5B;AAED;;GAEG;AACH,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAItC;AAeD;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,EAAE,eAAe,EAOnD,CAAC"}

package/dist/server/agent-discovery.js

@@ -1,4 +1,4 @@
-import { visibleTemplates } from "../cli/templates-meta.js";
+import { TEMPLATES, visibleTemplates } from "../cli/templates-meta.js";
 /**
  * Built-in agent registry. Derive this from the published CLI metadata so
  * connected-agent discovery stays aligned with the public template allow-list
@@ -15,6 +15,7 @@ const BUILTIN_AGENTS = visibleTemplates()
     devPort: template.devPort,
     color: template.color,
 }));
+const HIDDEN_FIRST_PARTY_AGENT_IDS = new Set(TEMPLATES.filter((template) => template.hidden && template.prodUrl).map((template) => template.name));
 /**
  * Get built-in agents (static, no DB). Used as fallback and for seeding.
  */
@@ -57,6 +58,8 @@ export async function discoverAgents(selfAppId) {
                 const manifest = parseRemoteAgentManifest(full.content, r.path);
                 if (!manifest || manifest.id === selfAppId)
                     continue;
+                if (HIDDEN_FIRST_PARTY_AGENT_IDS.has(manifest.id))
+                    continue;
                 // If the resource override carries a localhost URL but we're running
                 // in production (e.g. a stale dev-time seed got promoted to the prod
                 // DB), fall back to the matching built-in's prod URL instead of

package/dist/server/agent-discovery.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-discovery.js","sourceRoot":"","sources":["../../src/server/agent-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAoB5D;;;;GAIG;AACH,MAAM,cAAc,GAAiB,gBAAgB,EAAE;KACpD,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;KACxC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAClB,EAAE,EAAE,QAAQ,CAAC,IAAI;IACjB,IAAI,EAAE,QAAQ,CAAC,KAAK;IACpB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,IAAI;IAClD,GAAG,EAAE,QAAQ,CAAC,OAAQ;IACtB,MAAM,EAAE,oBAAoB,QAAQ,CAAC,OAAO,EAAE;IAC9C,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;CACtB,CAAC,CAAC,CAAC;AAEN;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAkB;IACjD,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CACxE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACR,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC;QACzB,KAAK,EAAE,GAAG,CAAC,KAAK;KACjB,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAkB;IAElB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEtD,uBAAuB;IACvB,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,uCAAuC;IACvC,IAAI,CAAC;QACH,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,sBAAsB,EAAE,GACvE,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACxC,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAE1D,MAAM,SAAS,GACb,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,QAAQ,KAAK,YAAY,CAAC;QAE3E,MAAM,SAAS,GAAG,SAAS;YACzB,CAAC,CAAC,MAAM,sBAAsB,CAAC,mBAAmB,EAAE,gBAAgB,CAAC;YACrE,CAAC,CAAC,MAAM,YAAY,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;QACvD,MAAM,EAAE,wBAAwB,EAAE,GAChC,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAE3C,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YACxC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrC,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAChE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,KAAK,SAAS;oBAAE,SAAS;gBAErD,qEAAqE;gBACrE,qEAAqE;gBACrE,gEAAgE;gBAChE,qEAAqE;gBACrE,kEAAkE;gBAClE,sEAAsE;gBACtE,2DAA2D;gBAC3D,IAAI,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;gBACvB,IACE,CAAC,SAAS;oBACV,OAAO,GAAG,KAAK,QAAQ;oBACvB,yDAAyD,CAAC,IAAI,CAAC,GAAG,CAAC,EACnE,CAAC;oBACD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBAC5C,IAAI,OAAO,EAAE,GAAG;wBAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;gBACtC,CAAC;gBAED,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE;oBAC1B,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;oBACvC,GAAG;oBACH,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,SAAS;iBACnC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,4BAA4B;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAgB,EAChB,SAAkB;IAElB,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,CACL,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,QAAQ,KAAK,YAAY,CACzE,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,GAAe;IACtC,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,MAAM,IAAI,oBAAoB,GAAG,CAAC,OAAO,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GACrC,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACpD,EAAE,EAAE,GAAG,CAAC,EAAE;IACV,IAAI,EAAE,GAAG,CAAC,IAAI;IACd,WAAW,EAAE,GAAG,CAAC,WAAW;IAC5B,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,cAAc;IAC5B,KAAK,EAAE,GAAG,CAAC,KAAK;CACjB,CAAC,CAAC,CAAC","sourcesContent":["import { visibleTemplates } from \"../cli/templates-meta.js\";\n\nexport interface DiscoveredAgent {\n  id: string;\n  name: string;\n  description: string;\n  url: string;\n  color: string;\n}\n\ninterface AgentEntry {\n  id: string;\n  name: string;\n  description: string;\n  url: string;\n  devUrl?: string;\n  devPort: number;\n  color: string;\n}\n\n/**\n * Built-in agent registry. Derive this from the published CLI metadata so\n * connected-agent discovery stays aligned with the public template allow-list\n * without depending on @agent-native/shared-app-config at runtime.\n */\nconst BUILTIN_AGENTS: AgentEntry[] = visibleTemplates()\n  .filter((template) => !!template.prodUrl)\n  .map((template) => ({\n    id: template.name,\n    name: template.label,\n    description: template.description ?? template.hint,\n    url: template.prodUrl!,\n    devUrl: `http://localhost:${template.devPort}`,\n    devPort: template.devPort,\n    color: template.color,\n  }));\n\n/**\n * Get built-in agents (static, no DB). Used as fallback and for seeding.\n */\nexport function getBuiltinAgents(selfAppId?: string): DiscoveredAgent[] {\n  return BUILTIN_AGENTS.filter((app) => app.id !== selfAppId && app.url).map(\n    (app) => ({\n      id: app.id,\n      name: app.name,\n      description: app.description,\n      url: resolveAgentUrl(app),\n      color: app.color,\n    }),\n  );\n}\n\n/**\n * Discover all agents: built-in + custom agents stored as resources.\n * Custom agents override built-in agents with the same ID.\n */\nexport async function discoverAgents(\n  selfAppId?: string,\n): Promise<DiscoveredAgent[]> {\n  const builtins = getBuiltinAgents(selfAppId);\n  const agentsById = new Map<string, DiscoveredAgent>();\n\n  // Start with built-ins\n  for (const agent of builtins) {\n    agentsById.set(agent.id, agent);\n  }\n\n  // Overlay custom agents from resources\n  try {\n    const { resourceList, resourceGet, SHARED_OWNER, resourceListAccessible } =\n      await import(\"../resources/store.js\");\n    const { DEV_MODE_USER_EMAIL } = await import(\"./auth.js\");\n\n    const isDevMode =\n      typeof process !== \"undefined\" && process.env?.NODE_ENV !== \"production\";\n\n    const resources = isDevMode\n      ? await resourceListAccessible(DEV_MODE_USER_EMAIL, \"remote-agents/\")\n      : await resourceList(SHARED_OWNER, \"remote-agents/\");\n    const { parseRemoteAgentManifest } =\n      await import(\"../resources/metadata.js\");\n\n    for (const r of resources) {\n      if (!r.path.endsWith(\".json\")) continue;\n      try {\n        const full = await resourceGet(r.id);\n        if (!full) continue;\n        const manifest = parseRemoteAgentManifest(full.content, r.path);\n        if (!manifest || manifest.id === selfAppId) continue;\n\n        // If the resource override carries a localhost URL but we're running\n        // in production (e.g. a stale dev-time seed got promoted to the prod\n        // DB), fall back to the matching built-in's prod URL instead of\n        // letting the override win — otherwise outbound `call-agent` fetches\n        // from a serverless function would target localhost and fail with\n        // \"fetch failed\" instantly. The override still wins for non-localhost\n        // URLs (the supported case for self-hosted custom agents).\n        let url = manifest.url;\n        if (\n          !isDevMode &&\n          typeof url === \"string\" &&\n          /^https?:\\/\\/(localhost|127\\.0\\.0\\.1|0\\.0\\.0\\.0)(:|\\/|$)/.test(url)\n        ) {\n          const builtin = agentsById.get(manifest.id);\n          if (builtin?.url) url = builtin.url;\n        }\n\n        agentsById.set(manifest.id, {\n          id: manifest.id,\n          name: manifest.name,\n          description: manifest.description || \"\",\n          url,\n          color: manifest.color || \"#6B7280\",\n        });\n      } catch {\n        // Skip unreadable resources\n      }\n    }\n  } catch {\n    // Resources not available — use built-ins only\n  }\n\n  return Array.from(agentsById.values());\n}\n\n/**\n * Look up a single agent by ID or name (case-insensitive).\n */\nexport async function findAgent(\n  idOrName: string,\n  selfAppId?: string,\n): Promise<DiscoveredAgent | undefined> {\n  const lower = idOrName.toLowerCase();\n  const agents = await discoverAgents(selfAppId);\n  return agents.find((a) => a.id === lower || a.name.toLowerCase() === lower);\n}\n\nfunction isDevEnvironment(): boolean {\n  return (\n    typeof process !== \"undefined\" && process.env?.NODE_ENV !== \"production\"\n  );\n}\n\nfunction resolveAgentUrl(app: AgentEntry): string {\n  if (isDevEnvironment()) {\n    return app.devUrl || `http://localhost:${app.devPort}`;\n  }\n  return app.url;\n}\n\n/**\n * Like `getBuiltinAgents`, but always returns the production URL — never the\n * env-resolved devUrl. Used by the resource seeder so that a one-time seed\n * (`ON CONFLICT DO NOTHING`) can't permanently bake a localhost URL into the\n * DB, which would override the built-in's prod URL for every later\n * production deploy.\n */\nexport const BUILTIN_AGENTS_FOR_SEEDING: DiscoveredAgent[] =\n  BUILTIN_AGENTS.filter((app) => app.url).map((app) => ({\n    id: app.id,\n    name: app.name,\n    description: app.description,\n    url: app.url, // ALWAYS prod\n    color: app.color,\n  }));\n"]}
+{"version":3,"file":"agent-discovery.js","sourceRoot":"","sources":["../../src/server/agent-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAoBvE;;;;GAIG;AACH,MAAM,cAAc,GAAiB,gBAAgB,EAAE;KACpD,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;KACxC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAClB,EAAE,EAAE,QAAQ,CAAC,IAAI;IACjB,IAAI,EAAE,QAAQ,CAAC,KAAK;IACpB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,IAAI;IAClD,GAAG,EAAE,QAAQ,CAAC,OAAQ;IACtB,MAAM,EAAE,oBAAoB,QAAQ,CAAC,OAAO,EAAE;IAC9C,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;CACtB,CAAC,CAAC,CAAC;AAEN,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAC1C,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CACrE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAC5B,CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAkB;IACjD,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CACxE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACR,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC;QACzB,KAAK,EAAE,GAAG,CAAC,KAAK;KACjB,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAkB;IAElB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEtD,uBAAuB;IACvB,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,uCAAuC;IACvC,IAAI,CAAC;QACH,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,sBAAsB,EAAE,GACvE,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACxC,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAE1D,MAAM,SAAS,GACb,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,QAAQ,KAAK,YAAY,CAAC;QAE3E,MAAM,SAAS,GAAG,SAAS;YACzB,CAAC,CAAC,MAAM,sBAAsB,CAAC,mBAAmB,EAAE,gBAAgB,CAAC;YACrE,CAAC,CAAC,MAAM,YAAY,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;QACvD,MAAM,EAAE,wBAAwB,EAAE,GAChC,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAE3C,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YACxC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrC,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAChE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,KAAK,SAAS;oBAAE,SAAS;gBACrD,IAAI,4BAA4B,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAE5D,qEAAqE;gBACrE,qEAAqE;gBACrE,gEAAgE;gBAChE,qEAAqE;gBACrE,kEAAkE;gBAClE,sEAAsE;gBACtE,2DAA2D;gBAC3D,IAAI,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;gBACvB,IACE,CAAC,SAAS;oBACV,OAAO,GAAG,KAAK,QAAQ;oBACvB,yDAAyD,CAAC,IAAI,CAAC,GAAG,CAAC,EACnE,CAAC;oBACD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBAC5C,IAAI,OAAO,EAAE,GAAG;wBAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;gBACtC,CAAC;gBAED,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE;oBAC1B,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;oBACvC,GAAG;oBACH,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,SAAS;iBACnC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,4BAA4B;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAgB,EAChB,SAAkB;IAElB,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,CACL,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,QAAQ,KAAK,YAAY,CACzE,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,GAAe;IACtC,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,MAAM,IAAI,oBAAoB,GAAG,CAAC,OAAO,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GACrC,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACpD,EAAE,EAAE,GAAG,CAAC,EAAE;IACV,IAAI,EAAE,GAAG,CAAC,IAAI;IACd,WAAW,EAAE,GAAG,CAAC,WAAW;IAC5B,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,cAAc;IAC5B,KAAK,EAAE,GAAG,CAAC,KAAK;CACjB,CAAC,CAAC,CAAC","sourcesContent":["import { TEMPLATES, visibleTemplates } from \"../cli/templates-meta.js\";\n\nexport interface DiscoveredAgent {\n  id: string;\n  name: string;\n  description: string;\n  url: string;\n  color: string;\n}\n\ninterface AgentEntry {\n  id: string;\n  name: string;\n  description: string;\n  url: string;\n  devUrl?: string;\n  devPort: number;\n  color: string;\n}\n\n/**\n * Built-in agent registry. Derive this from the published CLI metadata so\n * connected-agent discovery stays aligned with the public template allow-list\n * without depending on @agent-native/shared-app-config at runtime.\n */\nconst BUILTIN_AGENTS: AgentEntry[] = visibleTemplates()\n  .filter((template) => !!template.prodUrl)\n  .map((template) => ({\n    id: template.name,\n    name: template.label,\n    description: template.description ?? template.hint,\n    url: template.prodUrl!,\n    devUrl: `http://localhost:${template.devPort}`,\n    devPort: template.devPort,\n    color: template.color,\n  }));\n\nconst HIDDEN_FIRST_PARTY_AGENT_IDS = new Set(\n  TEMPLATES.filter((template) => template.hidden && template.prodUrl).map(\n    (template) => template.name,\n  ),\n);\n\n/**\n * Get built-in agents (static, no DB). Used as fallback and for seeding.\n */\nexport function getBuiltinAgents(selfAppId?: string): DiscoveredAgent[] {\n  return BUILTIN_AGENTS.filter((app) => app.id !== selfAppId && app.url).map(\n    (app) => ({\n      id: app.id,\n      name: app.name,\n      description: app.description,\n      url: resolveAgentUrl(app),\n      color: app.color,\n    }),\n  );\n}\n\n/**\n * Discover all agents: built-in + custom agents stored as resources.\n * Custom agents override built-in agents with the same ID.\n */\nexport async function discoverAgents(\n  selfAppId?: string,\n): Promise<DiscoveredAgent[]> {\n  const builtins = getBuiltinAgents(selfAppId);\n  const agentsById = new Map<string, DiscoveredAgent>();\n\n  // Start with built-ins\n  for (const agent of builtins) {\n    agentsById.set(agent.id, agent);\n  }\n\n  // Overlay custom agents from resources\n  try {\n    const { resourceList, resourceGet, SHARED_OWNER, resourceListAccessible } =\n      await import(\"../resources/store.js\");\n    const { DEV_MODE_USER_EMAIL } = await import(\"./auth.js\");\n\n    const isDevMode =\n      typeof process !== \"undefined\" && process.env?.NODE_ENV !== \"production\";\n\n    const resources = isDevMode\n      ? await resourceListAccessible(DEV_MODE_USER_EMAIL, \"remote-agents/\")\n      : await resourceList(SHARED_OWNER, \"remote-agents/\");\n    const { parseRemoteAgentManifest } =\n      await import(\"../resources/metadata.js\");\n\n    for (const r of resources) {\n      if (!r.path.endsWith(\".json\")) continue;\n      try {\n        const full = await resourceGet(r.id);\n        if (!full) continue;\n        const manifest = parseRemoteAgentManifest(full.content, r.path);\n        if (!manifest || manifest.id === selfAppId) continue;\n        if (HIDDEN_FIRST_PARTY_AGENT_IDS.has(manifest.id)) continue;\n\n        // If the resource override carries a localhost URL but we're running\n        // in production (e.g. a stale dev-time seed got promoted to the prod\n        // DB), fall back to the matching built-in's prod URL instead of\n        // letting the override win — otherwise outbound `call-agent` fetches\n        // from a serverless function would target localhost and fail with\n        // \"fetch failed\" instantly. The override still wins for non-localhost\n        // URLs (the supported case for self-hosted custom agents).\n        let url = manifest.url;\n        if (\n          !isDevMode &&\n          typeof url === \"string\" &&\n          /^https?:\\/\\/(localhost|127\\.0\\.0\\.1|0\\.0\\.0\\.0)(:|\\/|$)/.test(url)\n        ) {\n          const builtin = agentsById.get(manifest.id);\n          if (builtin?.url) url = builtin.url;\n        }\n\n        agentsById.set(manifest.id, {\n          id: manifest.id,\n          name: manifest.name,\n          description: manifest.description || \"\",\n          url,\n          color: manifest.color || \"#6B7280\",\n        });\n      } catch {\n        // Skip unreadable resources\n      }\n    }\n  } catch {\n    // Resources not available — use built-ins only\n  }\n\n  return Array.from(agentsById.values());\n}\n\n/**\n * Look up a single agent by ID or name (case-insensitive).\n */\nexport async function findAgent(\n  idOrName: string,\n  selfAppId?: string,\n): Promise<DiscoveredAgent | undefined> {\n  const lower = idOrName.toLowerCase();\n  const agents = await discoverAgents(selfAppId);\n  return agents.find((a) => a.id === lower || a.name.toLowerCase() === lower);\n}\n\nfunction isDevEnvironment(): boolean {\n  return (\n    typeof process !== \"undefined\" && process.env?.NODE_ENV !== \"production\"\n  );\n}\n\nfunction resolveAgentUrl(app: AgentEntry): string {\n  if (isDevEnvironment()) {\n    return app.devUrl || `http://localhost:${app.devPort}`;\n  }\n  return app.url;\n}\n\n/**\n * Like `getBuiltinAgents`, but always returns the production URL — never the\n * env-resolved devUrl. Used by the resource seeder so that a one-time seed\n * (`ON CONFLICT DO NOTHING`) can't permanently bake a localhost URL into the\n * DB, which would override the built-in's prod URL for every later\n * production deploy.\n */\nexport const BUILTIN_AGENTS_FOR_SEEDING: DiscoveredAgent[] =\n  BUILTIN_AGENTS.filter((app) => app.url).map((app) => ({\n    id: app.id,\n    name: app.name,\n    description: app.description,\n    url: app.url, // ALWAYS prod\n    color: app.color,\n  }));\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.7.24",
+  "version": "0.7.26",
   "type": "module",
   "description": "Framework for agent-native application development — where AI agents and UI share state via files",
   "license": "MIT",