@agent-native/core 0.84.32 → 0.84.34

package/corpus/templates/design/server/lib/import-design-files.ts

@@ -0,0 +1,314 @@
+import { readAppStateForCurrentTab } from "@agent-native/core/application-state";
+import {
+  applyText,
+  hasCollabState,
+  seedFromText,
+} from "@agent-native/core/collab";
+import { assertAccess } from "@agent-native/core/sharing";
+import { eq } from "drizzle-orm";
+import { nanoid } from "nanoid";
+
+import {
+  mergeCanvasFramePlacements,
+  type CanvasFramePlacement,
+} from "../../shared/canvas-frames.js";
+import { getDb, schema } from "../db/index.js";
+
+const DEFAULT_FRAME_WIDTH = 1440;
+const DEFAULT_FRAME_HEIGHT = 900;
+const FRAME_GAP = 96;
+
+export interface ImportedDesignFile {
+  filename: string;
+  fileType: "html" | "css" | "jsx" | "asset";
+  content: string;
+  source?: Record<string, unknown>;
+  preferredFrame?: {
+    title?: string;
+    width?: number;
+    height?: number;
+    x?: number;
+    y?: number;
+  };
+}
+
+export interface SaveImportedDesignFilesInput {
+  designId?: string;
+  files: ImportedDesignFile[];
+  sourceType: string;
+  warnings?: string[];
+}
+
+export interface SavedImportedDesignFile {
+  id: string;
+  filename: string;
+  fileType: string;
+  source?: Record<string, unknown>;
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+
+function stringFromState(value: unknown, key: string): string | undefined {
+  return isRecord(value) && typeof value[key] === "string"
+    ? (value[key] as string)
+    : undefined;
+}
+
+export async function resolveImportDesignId(
+  explicitDesignId?: string,
+): Promise<string> {
+  if (explicitDesignId?.trim()) return explicitDesignId.trim();
+  const navigation = await readAppStateForCurrentTab("navigation").catch(
+    () => null,
+  );
+  const designId = stringFromState(navigation, "designId");
+  if (!designId) {
+    throw new Error(
+      "No designId was provided and no active design was found in the current editor.",
+    );
+  }
+  return designId;
+}
+
+function parseJson(value: string | null | undefined): Record<string, unknown> {
+  if (!value) return {};
+  try {
+    const parsed = JSON.parse(value);
+    return isRecord(parsed) ? parsed : {};
+  } catch {
+    return {};
+  }
+}
+
+export function sanitizeImportedFilename(filename: string): string {
+  const trimmed = filename.trim();
+  if (!trimmed || trimmed.includes("..") || /[\\/]/.test(trimmed)) {
+    throw new Error("Imported filename is invalid.");
+  }
+  const cleaned = trimmed
+    .replace(/[^\w. -]+/g, "-")
+    .replace(/\s+/g, "-")
+    .replace(/-+/g, "-")
+    .replace(/^-+|-+$/g, "");
+  if (!cleaned) throw new Error("Imported filename is invalid.");
+  return cleaned;
+}
+
+function ensureExtension(
+  filename: string,
+  fileType: ImportedDesignFile["fileType"],
+) {
+  if (/\.[A-Za-z0-9]+$/.test(filename)) return filename;
+  if (fileType === "css") return `${filename}.css`;
+  if (fileType === "jsx") return `${filename}.jsx`;
+  if (fileType === "asset") return filename;
+  return `${filename}.html`;
+}
+
+function uniqueFilename(filename: string, used: Set<string>): string {
+  if (!used.has(filename)) {
+    used.add(filename);
+    return filename;
+  }
+  const dot = filename.lastIndexOf(".");
+  const base = dot > 0 ? filename.slice(0, dot) : filename;
+  const ext = dot > 0 ? filename.slice(dot) : "";
+  let index = 2;
+  while (used.has(`${base}-${index}${ext}`)) index += 1;
+  const next = `${base}-${index}${ext}`;
+  used.add(next);
+  return next;
+}
+
+function positiveDimension(value: unknown, fallback: number): number {
+  return typeof value === "number" && Number.isFinite(value) && value > 0
+    ? Math.round(value)
+    : fallback;
+}
+
+function sanitizeImportedHtml(content: string): string {
+  return content
+    .replace(/<\s*script\b[^>]*>[\s\S]*?<\s*\/\s*script\s*>/gi, "")
+    .replace(/<\s*script\b[^>]*\/?\s*>/gi, "")
+    .replace(/<\s*(iframe|object|embed)\b[^>]*>[\s\S]*?<\s*\/\s*\1\s*>/gi, "")
+    .replace(/<\s*(iframe|object|embed)\b[^>]*\/?\s*>/gi, "")
+    .replace(/\s+on[a-z][\w:-]*\s*=\s*(?:"[^"]*"|'[^']*'|[^\s>]+)/gi, "")
+    .replace(/\s+srcdoc\s*=\s*(?:"[^"]*"|'[^']*'|[^\s>]+)/gi, "")
+    .replace(
+      /\s+(href|src|xlink:href|action|formaction)\s*=\s*"[\s]*(?:javascript|vbscript):[^"]*"/gi,
+      "",
+    )
+    .replace(
+      /\s+(href|src|xlink:href|action|formaction)\s*=\s*'[\s]*(?:javascript|vbscript):[^']*'/gi,
+      "",
+    )
+    .replace(
+      /\s+(href|src|xlink:href|action|formaction)\s*=\s*(?:javascript|vbscript):[^\s>]*/gi,
+      "",
+    )
+    .replace(
+      /\s+style\s*=\s*(["'])(?:(?!\1).)*(?:expression\s*\(|javascript:)(?:(?!\1).)*\1/gi,
+      "",
+    );
+}
+
+export function normalizeImportedHtmlDocument(
+  content: string,
+  sourceLabel: string,
+): string {
+  const normalized = sanitizeImportedHtml(content.replace(/\0/g, "")).trim();
+  if (!normalized) throw new Error("HTML import content is empty.");
+  const safeSourceLabel = sourceLabel.replace(/--+/g, "-").replace(/[<>]/g, "");
+  const comment = `<!-- Imported into Design from ${safeSourceLabel}. -->`;
+  if (/<html[\s>]/i.test(normalized)) {
+    return normalized.replace(
+      /<head(\s[^>]*)?>/i,
+      (match) => `${match}\n  ${comment}`,
+    );
+  }
+  return `<!doctype html>
+<html>
+<head>
+  <meta charset="utf-8" />
+  ${comment}
+</head>
+<body>
+${normalized}
+</body>
+</html>`;
+}
+
+export async function saveImportedDesignFiles(
+  input: SaveImportedDesignFilesInput,
+) {
+  if (input.files.length === 0) {
+    throw new Error("No files were produced by the import.");
+  }
+  const designId = await resolveImportDesignId(input.designId);
+  await assertAccess("design", designId, "editor");
+
+  const db = getDb();
+  const now = new Date().toISOString();
+  const savedFiles: SavedImportedDesignFile[] = [];
+  const seedRecords: Array<{ id: string; content: string }> = [];
+  let placedFrames:
+    | Array<{
+        fileId: string;
+        filename?: string;
+        frame: CanvasFramePlacement;
+      }>
+    | undefined;
+
+  await db.transaction(async (tx) => {
+    const [design] = await tx
+      .select()
+      .from(schema.designs)
+      .where(eq(schema.designs.id, designId))
+      .limit(1);
+    if (!design) throw new Error(`Design ${designId} was not found.`);
+
+    const existingFiles = await tx
+      .select()
+      .from(schema.designFiles)
+      .where(eq(schema.designFiles.designId, designId));
+    const usedFilenames = new Set(existingFiles.map((file) => file.filename));
+    const prevData = parseJson(design.data);
+    const previousMetadata = isRecord(prevData.screenMetadata)
+      ? { ...prevData.screenMetadata }
+      : {};
+    const placements: CanvasFramePlacement[] = [];
+    let nextFrameX = 0;
+
+    for (let index = 0; index < input.files.length; index += 1) {
+      const file = input.files[index]!;
+      const filename = uniqueFilename(
+        ensureExtension(sanitizeImportedFilename(file.filename), file.fileType),
+        usedFilenames,
+      );
+      const fileId = nanoid();
+      await tx.insert(schema.designFiles).values({
+        id: fileId,
+        designId,
+        filename,
+        fileType: file.fileType,
+        content: file.content,
+        createdAt: now,
+        updatedAt: now,
+      });
+      seedRecords.push({ id: fileId, content: file.content });
+
+      const width = positiveDimension(
+        file.preferredFrame?.width,
+        DEFAULT_FRAME_WIDTH,
+      );
+      const height = positiveDimension(
+        file.preferredFrame?.height,
+        DEFAULT_FRAME_HEIGHT,
+      );
+      placements.push({
+        fileId,
+        filename,
+        x: file.preferredFrame?.x ?? nextFrameX,
+        y: file.preferredFrame?.y ?? 0,
+        width,
+        height,
+        z: index,
+      });
+      nextFrameX += width + FRAME_GAP;
+      const source = {
+        sourceType: input.sourceType,
+        previewState: "static",
+        title: file.preferredFrame?.title ?? filename.replace(/\.[^.]+$/, ""),
+        width,
+        height,
+        ...file.source,
+      };
+      previousMetadata[fileId] = source;
+      savedFiles.push({
+        id: fileId,
+        filename,
+        fileType: file.fileType,
+        source,
+      });
+    }
+
+    const mergedFrames = mergeCanvasFramePlacements({
+      existing: prevData.canvasFrames,
+      placements,
+      resolveFileId: (placement) => placement.fileId,
+    });
+    placedFrames = mergedFrames.placedFrames;
+    await tx
+      .update(schema.designs)
+      .set({
+        data: JSON.stringify({
+          ...prevData,
+          sourceMode: "import",
+          canvasFrames: mergedFrames.canvasFrames,
+          screenMetadata: previousMetadata,
+          updatedAt: now,
+        }),
+        updatedAt: now,
+      })
+      .where(eq(schema.designs.id, designId));
+  });
+
+  for (const record of seedRecords) {
+    if (await hasCollabState(record.id)) {
+      await applyText(record.id, record.content, "content", "agent");
+    } else {
+      await seedFromText(record.id, record.content);
+    }
+  }
+
+  return {
+    designId,
+    files: savedFiles,
+    warnings: input.warnings ?? [],
+    placedFrames: placedFrames ?? [],
+    overview: true,
+    urlPath: `/design/${designId}`,
+  };
+}

package/corpus/templates/design/server/routes/api/import-design-file.post.ts

@@ -0,0 +1 @@
+export { importDesignFile as default } from "../../handlers/import-design-file.js";

package/dist/client/use-action.d.ts

@@ -5,7 +5,11 @@ import type { UseQueryOptions, UseMutationOptions } from "@tanstack/react-query"
  * it maps action names to their parameter and return types, enabling
  * end-to-end type safety for `useActionQuery` and `useActionMutation`.
  */
-export interface ActionRegistry {
+declare global {
+    interface AgentNativeActionRegistry {
+    }
+}
+export interface ActionRegistry extends AgentNativeActionRegistry {
 }
 /** Resolves to the union of registered action names, or `string` if no registry exists. */
 type ActionName = keyof ActionRegistry extends never ? string : (keyof ActionRegistry & string) | (string & {});

package/dist/client/use-action.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"use-action.d.ts","sourceRoot":"","sources":["../../src/client/use-action.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EACV,eAAe,EACf,kBAAkB,EACnB,MAAM,uBAAuB,CAAC;AA6B/B;;;;;GAKG;AACH,MAAM,WAAW,cAAc;CAAG;AAElC,2FAA2F;AAC3F,KAAK,UAAU,GAAG,MAAM,cAAc,SAAS,KAAK,GAChD,MAAM,GACN,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEpD,8EAA8E;AAC9E,KAAK,YAAY,CAAC,CAAC,SAAS,MAAM,IAAI,CAAC,SAAS,MAAM,cAAc,GAChE,cAAc,CAAC,CAAC,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAC3C,CAAC,GACD,GAAG,GACL,GAAG,CAAC;AAER,iGAAiG;AACjG,KAAK,YAAY,CAAC,CAAC,SAAS,MAAM,IAAI,CAAC,SAAS,MAAM,cAAc,GAChE,cAAc,CAAC,CAAC,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAC3C,CAAC,GACD,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GACrB,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAExB,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEnE,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,kBAAkB,CAAC;CAC7B;AAmBD,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC1B,MAAM,CAMR;AAsID;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,OAAO,GAAG,SAAS,EACnB,KAAK,SAAS,UAAU,GAAG,UAAU,EAErC,UAAU,EAAE,KAAK,EACjB,MAAM,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,EAC5B,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,OAAO,SAAS,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAGpE;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAC5B,OAAO,GAAG,SAAS,EACnB,KAAK,SAAS,UAAU,GAAG,UAAU,EAErC,UAAU,EAAE,KAAK,EACjB,MAAM,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,EAC5B,OAAO,CAAC,EAAE,IAAI,CACZ,eAAe,CAAC,OAAO,SAAS,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,EAC1E,UAAU,GAAG,SAAS,CACvB,6HASF;AAMD;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,GAAG,SAAS,EACjB,UAAU,GAAG,SAAS,EACtB,KAAK,SAAS,UAAU,GAAG,UAAU,EAErC,UAAU,EAAE,KAAK,EACjB,OAAO,CAAC,EAAE,IAAI,CACZ,kBAAkB,CAChB,KAAK,SAAS,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,KAAK,EACrD,KAAK,EACL,UAAU,SAAS,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,UAAU,CAChE,EACD,YAAY,CACb,GAAG;IACF,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;CACpC,6LAuBF"}
+{"version":3,"file":"use-action.d.ts","sourceRoot":"","sources":["../../src/client/use-action.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EACV,eAAe,EACf,kBAAkB,EACnB,MAAM,uBAAuB,CAAC;AA6B/B;;;;;GAKG;AACH,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,yBAAyB;KAAG;CACvC;AAED,MAAM,WAAW,cAAe,SAAQ,yBAAyB;CAAG;AAEpE,2FAA2F;AAC3F,KAAK,UAAU,GAAG,MAAM,cAAc,SAAS,KAAK,GAChD,MAAM,GACN,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEpD,8EAA8E;AAC9E,KAAK,YAAY,CAAC,CAAC,SAAS,MAAM,IAAI,CAAC,SAAS,MAAM,cAAc,GAChE,cAAc,CAAC,CAAC,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAC3C,CAAC,GACD,GAAG,GACL,GAAG,CAAC;AAER,iGAAiG;AACjG,KAAK,YAAY,CAAC,CAAC,SAAS,MAAM,IAAI,CAAC,SAAS,MAAM,cAAc,GAChE,cAAc,CAAC,CAAC,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAC3C,CAAC,GACD,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GACrB,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAExB,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEnE,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,kBAAkB,CAAC;CAC7B;AAmBD,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC1B,MAAM,CAMR;AAsID;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,OAAO,GAAG,SAAS,EACnB,KAAK,SAAS,UAAU,GAAG,UAAU,EAErC,UAAU,EAAE,KAAK,EACjB,MAAM,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,EAC5B,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,OAAO,SAAS,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAGpE;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAC5B,OAAO,GAAG,SAAS,EACnB,KAAK,SAAS,UAAU,GAAG,UAAU,EAErC,UAAU,EAAE,KAAK,EACjB,MAAM,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,EAC5B,OAAO,CAAC,EAAE,IAAI,CACZ,eAAe,CAAC,OAAO,SAAS,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,EAC1E,UAAU,GAAG,SAAS,CACvB,6HASF;AAMD;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,GAAG,SAAS,EACjB,UAAU,GAAG,SAAS,EACtB,KAAK,SAAS,UAAU,GAAG,UAAU,EAErC,UAAU,EAAE,KAAK,EACjB,OAAO,CAAC,EAAE,IAAI,CACZ,kBAAkB,CAChB,KAAK,SAAS,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,KAAK,EACrD,KAAK,EACL,UAAU,SAAS,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,UAAU,CAChE,EACD,YAAY,CACb,GAAG;IACF,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;CACpC,6LAuBF"}

package/dist/client/use-action.js.map

@@ -1 +1 @@
-{"version":3,"file":"use-action.js","sourceRoot":"","sources":["../../src/client/use-action.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAM9E,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,+BAA+B,EAAE,MAAM,iBAAiB,CAAC;AAElE,MAAM,aAAa,GAAG,eAAe,CAAC,wBAAwB,CAAC,CAAC;AAEhE,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,CAAC,CAAC,KAAK;QACP,OAAO,KAAK,KAAK,QAAQ;QACzB,QAAQ,IAAI,KAAK;QACjB,CAAE,KAA8B,CAAC,MAAM,KAAK,GAAG;YAC5C,KAA8B,CAAC,MAAM,KAAK,GAAG,CAAC,CAClD,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,YAAoB,EACpB,KAAc;IAEd,IAAI,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,YAAY,GAAG,CAAC,CAAC;AAC1B,CAAC;AAuCD,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E;;;;GAIG;AACH,SAAS,mBAAmB;IAC1B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,QAAQ,IAAI,SAAS,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,MAA2B;IAE3B,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,sBAAsB,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,sBAAsB,CAC7B,EAAmB,EACnB,GAAW,EACX,KAAc;IAEd,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAClD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,2EAA2E;QAC3E,2EAA2E;QAC3E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,sBAAsB,CAAC,EAAE,EAAE,GAAG,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO;IACT,CAAC;IACD,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,IAAY,EACZ,MAAc,EACd,MAA4B;IAE5B,+BAA+B,EAAE,CAAC;IAClC,IAAI,GAAG,GAAG,GAAG,aAAa,IAAI,IAAI,EAAE,CAAC;IACrC,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,4DAA4D;QAC5D,oEAAoE;QACpE,sEAAsE;QACtE,uEAAuE;QACvE,mDAAmD;QACnD,yBAAyB,EAAE,GAAG;KAC/B,CAAC;IACF,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACjC,IAAI,EAAE;QAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC;IACxC,MAAM,IAAI,GAAgB;QACxB,MAAM;QACN,OAAO;QACP,KAAK,EAAE,UAAU;KAClB,CAAC;IAEF,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjE,yEAAyE;QACzE,uDAAuD;QACvD,MAAM,EAAE,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,EAAE;YAAE,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;IAC1B,CAAC;SAAM,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uEAAuE;QACvE,0DAA0D;QAC1D,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,YAAY,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,qCAAqC;IACrC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,IAAS,CAAC;IAEzC,yCAAyC;IACzC,oEAAoE;IACpE,8EAA8E;IAC9E,4DAA4D;IAC5D,0EAA0E;IAC1E,qEAAqE;IACrE,uBAAuB;IACvB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,UAAU,GAAG,IAAI,CAAC;QAClB,SAAS,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,IAAI,IAAI,GAAQ,SAAS,CAAC;IAC1B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,OAAO,GACX,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;YACtC,uEAAuE;YACvE,qEAAqE;YACrE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1B,GAAG,CAAC,UAAU;YACd,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,UAAU,IAAI,YAAY,OAAO,EAAE,CAAC,CAAC;QAC5D,KAAa,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACnC,MAAM,KAAK,CAAC;IACd,CAAC;IAED,4EAA4E;IAC5E,wDAAwD;IACxD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,KAAK,GACT,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,UAAU,IAAI,aAAa,GAAG,CAAC,MAAM,oCAAoC,KAAK,EAAE,CACjF,CAAC;QACD,KAAa,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACnC,MAAM,KAAK,CAAC;IACd,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,uEAAuE;IACvE,+BAA+B;IAC/B,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,UAAU,IAAI,wBAAwB,GAAG,CAAC,MAAM,cAAc,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAClF,CAAC;QACD,KAAa,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACnC,MAAM,KAAK,CAAC;IACd,CAAC;IAED,OAAO,CAAC,IAAI,IAAK,IAAgB,CAAM,CAAC;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAIxB,UAAiB,EACjB,MAA4B,EAC5B,OAAO,GAA4B,EAAE;IAGrC,OAAO,WAAW,CAAI,UAAU,EAAE,OAAO,CAAC,MAAM,IAAI,MAAM,EAAE,MAAM,CAAC,CAAC;AACtE,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAI5B,UAAiB,EACjB,MAA4B,EAC5B,OAGC;IAGD,OAAO,QAAQ,CAAI;QACjB,QAAQ,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC;QACxC,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAI,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC;QACxD,KAAK,EAAE,uBAAuB;QAC9B,GAAG,OAAO;KACX,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAK/B,UAAiB,EACjB,OASC;IAED,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,EACJ,MAAM,EAAE,SAAS,EACjB,SAAS,EACT,GAAG,WAAW,EACf,GAAG,OAAO,IAAK,EAAU,CAAC;IAC3B,MAAM,MAAM,GAAG,SAAS,IAAI,MAAM,CAAC;IAKnC,OAAO,WAAW,CAAc;QAC9B,GAAG,WAAW;QACd,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CACrB,WAAW,CAAI,UAAU,EAAE,MAAM,EAAE,MAA6B,CAAC;QACnE,SAAS,EAAE,CAAC,GAAG,IAAqB,EAAE,EAAE;YACtC,oCAAoC;YACpC,WAAW,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACvD,SAAsB,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACrC,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * Client helpers for calling actions through the framework transport.\n *\n * Components should prefer `useActionQuery` / `useActionMutation`; use\n * `callAction` for imperative cases such as debounced search, prefetching, or\n * event handlers that do not fit a hook.\n *\n * ## End-to-end type safety\n *\n * When the action type registry is generated (via the Vite plugin or CLI),\n * `useActionQuery` and `useActionMutation` automatically infer the correct\n * return type and parameter types from the action definitions — no manual\n * type annotations needed.\n *\n * ```ts\n * // Fully typed — return type and params inferred from the action's defineAction()\n * const { data } = useActionQuery(\"list-forms\", { status: \"published\" });\n * //      ^? Form[]  (inferred from the action's run() return type)\n * ```\n *\n * Without the registry, the hooks fall back to `any` types for backward\n * compatibility.\n */\nimport { useQuery, useMutation, useQueryClient } from \"@tanstack/react-query\";\nimport type {\n  UseQueryOptions,\n  UseMutationOptions,\n} from \"@tanstack/react-query\";\n\nimport { agentNativePath } from \"./api-path.js\";\nimport { ensureEmbedAuthFetchInterceptor } from \"./embed-auth.js\";\n\nconst ACTION_PREFIX = agentNativePath(\"/_agent-native/actions\");\n\nfunction isAuthFailure(error: unknown): boolean {\n  return (\n    !!error &&\n    typeof error === \"object\" &&\n    \"status\" in error &&\n    ((error as { status?: unknown }).status === 401 ||\n      (error as { status?: unknown }).status === 403)\n  );\n}\n\nfunction defaultActionQueryRetry(\n  failureCount: number,\n  error: unknown,\n): boolean {\n  if (isAuthFailure(error)) return false;\n  return failureCount < 3;\n}\n\n// ---------------------------------------------------------------------------\n// Action type registry — augmented by generated code\n// ---------------------------------------------------------------------------\n\n/**\n * Action type registry. This interface is empty by default and gets augmented\n * by the auto-generated `.generated/action-types.d.ts` file. When augmented,\n * it maps action names to their parameter and return types, enabling\n * end-to-end type safety for `useActionQuery` and `useActionMutation`.\n */\nexport interface ActionRegistry {}\n\n/** Resolves to the union of registered action names, or `string` if no registry exists. */\ntype ActionName = keyof ActionRegistry extends never\n  ? string\n  : (keyof ActionRegistry & string) | (string & {});\n\n/** Resolves the return type of an action, or `any` if not in the registry. */\ntype ActionResult<T extends string> = T extends keyof ActionRegistry\n  ? ActionRegistry[T] extends { result: infer R }\n    ? R\n    : any\n  : any;\n\n/** Resolves the parameter type of an action, or `Record<string, any>` if not in the registry. */\ntype ActionParams<T extends string> = T extends keyof ActionRegistry\n  ? ActionRegistry[T] extends { params: infer P }\n    ? P\n    : Record<string, any>\n  : Record<string, any>;\n\nexport type ClientActionMethod = \"GET\" | \"POST\" | \"PUT\" | \"DELETE\";\n\nexport interface ClientActionCallOptions {\n  method?: ClientActionMethod;\n}\n\n// ---------------------------------------------------------------------------\n// Fetch helper\n// ---------------------------------------------------------------------------\n\n/**\n * Resolve the browser's IANA timezone (e.g. \"America/Los_Angeles\"). This is\n * sent on every action request as `x-user-timezone` so server-side defaults\n * like \"today\" honor the user's local day rather than the server's UTC clock.\n */\nfunction resolveUserTimezone(): string | undefined {\n  try {\n    return Intl.DateTimeFormat().resolvedOptions().timeZone || undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nexport function serializeActionQueryParams(\n  params: Record<string, any>,\n): string {\n  const qs = new URLSearchParams();\n  for (const [key, value] of Object.entries(params)) {\n    appendActionQueryParam(qs, key, value);\n  }\n  return qs.toString();\n}\n\nfunction appendActionQueryParam(\n  qs: URLSearchParams,\n  key: string,\n  value: unknown,\n) {\n  if (value === null || value === undefined) return;\n  if (Array.isArray(value)) {\n    // Use bracket keys so a one-item array still arrives as an array after the\n    // server parses URLSearchParams. Repeated bare keys lose that distinction.\n    for (const item of value) {\n      appendActionQueryParam(qs, `${key}[]`, item);\n    }\n    return;\n  }\n  qs.append(key, String(value));\n}\n\nasync function actionFetch<T>(\n  name: string,\n  method: string,\n  params?: Record<string, any>,\n): Promise<T> {\n  ensureEmbedAuthFetchInterceptor();\n  let url = `${ACTION_PREFIX}/${name}`;\n  const headers: Record<string, string> = {\n    \"Content-Type\": \"application/json\",\n    // Tag browser-originated action calls so the server can set\n    // `ctx.caller = \"frontend\"` (vs a bare programmatic `\"http\"` POST).\n    // Mirrors the X-Agent-Native-Tool-Bridge: 1 convention. The header is\n    // safe to expose: CORS allows it (see action-routes.ts) and it carries\n    // no auth weight — it only narrows the caller tag.\n    \"X-Agent-Native-Frontend\": \"1\",\n  };\n  const tz = resolveUserTimezone();\n  if (tz) headers[\"x-user-timezone\"] = tz;\n  const init: RequestInit = {\n    method,\n    headers,\n    cache: \"no-store\",\n  };\n\n  if (method === \"GET\" && params && Object.keys(params).length > 0) {\n    // Skip null/undefined so optional filters don't turn into literal \"null\"\n    // strings in the query string (e.g. `?folderId=null`).\n    const qs = serializeActionQueryParams(params);\n    if (qs) url += `?${qs}`;\n  } else if (method !== \"GET\" && params) {\n    init.body = JSON.stringify(params);\n  }\n\n  let res: Response;\n  try {\n    res = await fetch(url, init);\n  } catch (err) {\n    // Network failures, CORS, server unreachable, etc. — give the caller a\n    // useful message instead of the opaque \"Failed to fetch\".\n    const cause = err instanceof Error ? err.message : String(err);\n    throw new Error(`Action ${name} failed: ${cause}`);\n  }\n\n  // 204 No Content — nothing to parse.\n  if (res.status === 204) return null as T;\n\n  // Read the body as text first so we can:\n  //   - tolerate empty bodies (avoids \"Unexpected end of JSON input\")\n  //   - surface non-JSON error responses (HTML 401/404 pages, plain text, etc.)\n  //   - preserve the original HTTP status in the thrown error\n  // Track read failures separately from \"no body\" — a stream interruption /\n  // decode failure on a 2xx response should error rather than silently\n  // succeed with `null`.\n  let raw = \"\";\n  let readFailed = false;\n  let readError: unknown;\n  try {\n    raw = await res.text();\n  } catch (err) {\n    readFailed = true;\n    readError = err;\n  }\n\n  let data: any = undefined;\n  let parseFailed = false;\n  if (raw.length > 0) {\n    try {\n      data = JSON.parse(raw);\n    } catch {\n      // Body wasn't JSON — keep `data` undefined and use the raw text below.\n      parseFailed = true;\n    }\n  }\n\n  if (!res.ok) {\n    const message =\n      (data && (data.error || data.message)) ||\n      // Truncate non-JSON bodies so we don't dump entire HTML pages into the\n      // console, but still give the developer a hint as to what came back.\n      (raw && raw.slice(0, 200)) ||\n      res.statusText ||\n      `HTTP ${res.status}`;\n    const error = new Error(`Action ${name} failed: ${message}`);\n    (error as any).status = res.status;\n    throw error;\n  }\n\n  // 2xx but the body couldn't even be read (mid-stream abort, decode failure,\n  // etc.). Don't silently treat that as a `null` success.\n  if (readFailed) {\n    const cause =\n      readError instanceof Error ? readError.message : String(readError);\n    const error = new Error(\n      `Action ${name} returned ${res.status} but the body could not be read: ${cause}`,\n    );\n    (error as any).status = res.status;\n    throw error;\n  }\n\n  // 2xx with a non-empty, non-JSON body. Action callers expect typed data, so\n  // returning `null` here would silently mask a real server bug (e.g. a proxy\n  // returning HTML 200 instead of JSON). Throw instead — empty bodies (handled\n  // above by the `raw.length > 0` guard and the 204 short-circuit) still\n  // correctly resolve to `null`.\n  if (parseFailed) {\n    const error = new Error(\n      `Action ${name} returned a non-JSON ${res.status} response: ${raw.slice(0, 200)}`,\n    );\n    (error as any).status = res.status;\n    throw error;\n  }\n\n  return (data ?? (null as unknown)) as T;\n}\n\n/**\n * Imperatively call an action from browser/client code.\n *\n * Prefer `useActionQuery` / `useActionMutation` in React render flows. Use this\n * helper when a hook is not ergonomic; do not hand-write fetch calls to\n * `/_agent-native/actions/*` in components.\n */\nexport function callAction<\n  TResult = undefined,\n  TName extends ActionName = ActionName,\n>(\n  actionName: TName,\n  params?: ActionParams<TName>,\n  options: ClientActionCallOptions = {},\n): Promise<TResult extends undefined ? ActionResult<TName> : TResult> {\n  type R = TResult extends undefined ? ActionResult<TName> : TResult;\n  return actionFetch<R>(actionName, options.method ?? \"POST\", params);\n}\n\n// ---------------------------------------------------------------------------\n// Query hook\n// ---------------------------------------------------------------------------\n\n/**\n * Query an action exposed as GET.\n *\n * When the action type registry is generated, the return type and parameter\n * types are inferred automatically from the action's `defineAction()` call.\n *\n * ```ts\n * // Type-safe — no manual generic needed\n * const { data } = useActionQuery(\"list-meals\", { date: \"2025-01-01\" });\n *\n * // Manual override still works when needed\n * const { data } = useActionQuery<CustomType>(\"list-meals\");\n * ```\n */\nexport function useActionQuery<\n  TResult = undefined,\n  TName extends ActionName = ActionName,\n>(\n  actionName: TName,\n  params?: ActionParams<TName>,\n  options?: Omit<\n    UseQueryOptions<TResult extends undefined ? ActionResult<TName> : TResult>,\n    \"queryKey\" | \"queryFn\"\n  >,\n) {\n  type R = TResult extends undefined ? ActionResult<TName> : TResult;\n  return useQuery<R>({\n    queryKey: [\"action\", actionName, params],\n    queryFn: () => actionFetch<R>(actionName, \"GET\", params),\n    retry: defaultActionQueryRetry,\n    ...options,\n  });\n}\n\n// ---------------------------------------------------------------------------\n// Mutation hook\n// ---------------------------------------------------------------------------\n\n/**\n * Mutate via an action exposed as POST (default), PUT, or DELETE.\n *\n * When the action type registry is generated, the return type and parameter\n * types are inferred automatically.\n *\n * ```ts\n * // Type-safe\n * const { mutate } = useActionMutation(\"log-meal\");\n * mutate({ name: \"Salad\", calories: 350 });\n * ```\n */\nexport function useActionMutation<\n  TData = undefined,\n  TVariables = undefined,\n  TName extends ActionName = ActionName,\n>(\n  actionName: TName,\n  options?: Omit<\n    UseMutationOptions<\n      TData extends undefined ? ActionResult<TName> : TData,\n      Error,\n      TVariables extends undefined ? ActionParams<TName> : TVariables\n    >,\n    \"mutationFn\"\n  > & {\n    method?: \"POST\" | \"PUT\" | \"DELETE\";\n  },\n) {\n  const queryClient = useQueryClient();\n  const {\n    method: methodOpt,\n    onSuccess,\n    ...restOptions\n  } = options ?? ({} as any);\n  const method = methodOpt ?? \"POST\";\n\n  type D = TData extends undefined ? ActionResult<TName> : TData;\n  type V = TVariables extends undefined ? ActionParams<TName> : TVariables;\n\n  return useMutation<D, Error, V>({\n    ...restOptions,\n    mutationFn: (params) =>\n      actionFetch<D>(actionName, method, params as Record<string, any>),\n    onSuccess: (...args: [any, any, any]) => {\n      // Invalidate related action queries\n      queryClient.invalidateQueries({ queryKey: [\"action\"] });\n      (onSuccess as Function)?.(...args);\n    },\n  });\n}\n"]}
+{"version":3,"file":"use-action.js","sourceRoot":"","sources":["../../src/client/use-action.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAM9E,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,+BAA+B,EAAE,MAAM,iBAAiB,CAAC;AAElE,MAAM,aAAa,GAAG,eAAe,CAAC,wBAAwB,CAAC,CAAC;AAEhE,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,CAAC,CAAC,KAAK;QACP,OAAO,KAAK,KAAK,QAAQ;QACzB,QAAQ,IAAI,KAAK;QACjB,CAAE,KAA8B,CAAC,MAAM,KAAK,GAAG;YAC5C,KAA8B,CAAC,MAAM,KAAK,GAAG,CAAC,CAClD,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,YAAoB,EACpB,KAAc;IAEd,IAAI,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,YAAY,GAAG,CAAC,CAAC;AAC1B,CAAC;AA2CD,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E;;;;GAIG;AACH,SAAS,mBAAmB;IAC1B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,QAAQ,IAAI,SAAS,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,MAA2B;IAE3B,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,sBAAsB,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,sBAAsB,CAC7B,EAAmB,EACnB,GAAW,EACX,KAAc;IAEd,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAClD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,2EAA2E;QAC3E,2EAA2E;QAC3E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,sBAAsB,CAAC,EAAE,EAAE,GAAG,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO;IACT,CAAC;IACD,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,IAAY,EACZ,MAAc,EACd,MAA4B;IAE5B,+BAA+B,EAAE,CAAC;IAClC,IAAI,GAAG,GAAG,GAAG,aAAa,IAAI,IAAI,EAAE,CAAC;IACrC,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,4DAA4D;QAC5D,oEAAoE;QACpE,sEAAsE;QACtE,uEAAuE;QACvE,mDAAmD;QACnD,yBAAyB,EAAE,GAAG;KAC/B,CAAC;IACF,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACjC,IAAI,EAAE;QAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC;IACxC,MAAM,IAAI,GAAgB;QACxB,MAAM;QACN,OAAO;QACP,KAAK,EAAE,UAAU;KAClB,CAAC;IAEF,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjE,yEAAyE;QACzE,uDAAuD;QACvD,MAAM,EAAE,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,EAAE;YAAE,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;IAC1B,CAAC;SAAM,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uEAAuE;QACvE,0DAA0D;QAC1D,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,YAAY,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,qCAAqC;IACrC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,IAAS,CAAC;IAEzC,yCAAyC;IACzC,oEAAoE;IACpE,8EAA8E;IAC9E,4DAA4D;IAC5D,0EAA0E;IAC1E,qEAAqE;IACrE,uBAAuB;IACvB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,UAAU,GAAG,IAAI,CAAC;QAClB,SAAS,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,IAAI,IAAI,GAAQ,SAAS,CAAC;IAC1B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,OAAO,GACX,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;YACtC,uEAAuE;YACvE,qEAAqE;YACrE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1B,GAAG,CAAC,UAAU;YACd,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,UAAU,IAAI,YAAY,OAAO,EAAE,CAAC,CAAC;QAC5D,KAAa,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACnC,MAAM,KAAK,CAAC;IACd,CAAC;IAED,4EAA4E;IAC5E,wDAAwD;IACxD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,KAAK,GACT,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,UAAU,IAAI,aAAa,GAAG,CAAC,MAAM,oCAAoC,KAAK,EAAE,CACjF,CAAC;QACD,KAAa,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACnC,MAAM,KAAK,CAAC;IACd,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,uEAAuE;IACvE,+BAA+B;IAC/B,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,UAAU,IAAI,wBAAwB,GAAG,CAAC,MAAM,cAAc,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAClF,CAAC;QACD,KAAa,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACnC,MAAM,KAAK,CAAC;IACd,CAAC;IAED,OAAO,CAAC,IAAI,IAAK,IAAgB,CAAM,CAAC;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAIxB,UAAiB,EACjB,MAA4B,EAC5B,OAAO,GAA4B,EAAE;IAGrC,OAAO,WAAW,CAAI,UAAU,EAAE,OAAO,CAAC,MAAM,IAAI,MAAM,EAAE,MAAM,CAAC,CAAC;AACtE,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAI5B,UAAiB,EACjB,MAA4B,EAC5B,OAGC;IAGD,OAAO,QAAQ,CAAI;QACjB,QAAQ,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC;QACxC,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAI,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC;QACxD,KAAK,EAAE,uBAAuB;QAC9B,GAAG,OAAO;KACX,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAK/B,UAAiB,EACjB,OASC;IAED,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,EACJ,MAAM,EAAE,SAAS,EACjB,SAAS,EACT,GAAG,WAAW,EACf,GAAG,OAAO,IAAK,EAAU,CAAC;IAC3B,MAAM,MAAM,GAAG,SAAS,IAAI,MAAM,CAAC;IAKnC,OAAO,WAAW,CAAc;QAC9B,GAAG,WAAW;QACd,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CACrB,WAAW,CAAI,UAAU,EAAE,MAAM,EAAE,MAA6B,CAAC;QACnE,SAAS,EAAE,CAAC,GAAG,IAAqB,EAAE,EAAE;YACtC,oCAAoC;YACpC,WAAW,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACvD,SAAsB,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACrC,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * Client helpers for calling actions through the framework transport.\n *\n * Components should prefer `useActionQuery` / `useActionMutation`; use\n * `callAction` for imperative cases such as debounced search, prefetching, or\n * event handlers that do not fit a hook.\n *\n * ## End-to-end type safety\n *\n * When the action type registry is generated (via the Vite plugin or CLI),\n * `useActionQuery` and `useActionMutation` automatically infer the correct\n * return type and parameter types from the action definitions — no manual\n * type annotations needed.\n *\n * ```ts\n * // Fully typed — return type and params inferred from the action's defineAction()\n * const { data } = useActionQuery(\"list-forms\", { status: \"published\" });\n * //      ^? Form[]  (inferred from the action's run() return type)\n * ```\n *\n * Without the registry, the hooks fall back to `any` types for backward\n * compatibility.\n */\nimport { useQuery, useMutation, useQueryClient } from \"@tanstack/react-query\";\nimport type {\n  UseQueryOptions,\n  UseMutationOptions,\n} from \"@tanstack/react-query\";\n\nimport { agentNativePath } from \"./api-path.js\";\nimport { ensureEmbedAuthFetchInterceptor } from \"./embed-auth.js\";\n\nconst ACTION_PREFIX = agentNativePath(\"/_agent-native/actions\");\n\nfunction isAuthFailure(error: unknown): boolean {\n  return (\n    !!error &&\n    typeof error === \"object\" &&\n    \"status\" in error &&\n    ((error as { status?: unknown }).status === 401 ||\n      (error as { status?: unknown }).status === 403)\n  );\n}\n\nfunction defaultActionQueryRetry(\n  failureCount: number,\n  error: unknown,\n): boolean {\n  if (isAuthFailure(error)) return false;\n  return failureCount < 3;\n}\n\n// ---------------------------------------------------------------------------\n// Action type registry — augmented by generated code\n// ---------------------------------------------------------------------------\n\n/**\n * Action type registry. This interface is empty by default and gets augmented\n * by the auto-generated `.generated/action-types.d.ts` file. When augmented,\n * it maps action names to their parameter and return types, enabling\n * end-to-end type safety for `useActionQuery` and `useActionMutation`.\n */\ndeclare global {\n  interface AgentNativeActionRegistry {}\n}\n\nexport interface ActionRegistry extends AgentNativeActionRegistry {}\n\n/** Resolves to the union of registered action names, or `string` if no registry exists. */\ntype ActionName = keyof ActionRegistry extends never\n  ? string\n  : (keyof ActionRegistry & string) | (string & {});\n\n/** Resolves the return type of an action, or `any` if not in the registry. */\ntype ActionResult<T extends string> = T extends keyof ActionRegistry\n  ? ActionRegistry[T] extends { result: infer R }\n    ? R\n    : any\n  : any;\n\n/** Resolves the parameter type of an action, or `Record<string, any>` if not in the registry. */\ntype ActionParams<T extends string> = T extends keyof ActionRegistry\n  ? ActionRegistry[T] extends { params: infer P }\n    ? P\n    : Record<string, any>\n  : Record<string, any>;\n\nexport type ClientActionMethod = \"GET\" | \"POST\" | \"PUT\" | \"DELETE\";\n\nexport interface ClientActionCallOptions {\n  method?: ClientActionMethod;\n}\n\n// ---------------------------------------------------------------------------\n// Fetch helper\n// ---------------------------------------------------------------------------\n\n/**\n * Resolve the browser's IANA timezone (e.g. \"America/Los_Angeles\"). This is\n * sent on every action request as `x-user-timezone` so server-side defaults\n * like \"today\" honor the user's local day rather than the server's UTC clock.\n */\nfunction resolveUserTimezone(): string | undefined {\n  try {\n    return Intl.DateTimeFormat().resolvedOptions().timeZone || undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nexport function serializeActionQueryParams(\n  params: Record<string, any>,\n): string {\n  const qs = new URLSearchParams();\n  for (const [key, value] of Object.entries(params)) {\n    appendActionQueryParam(qs, key, value);\n  }\n  return qs.toString();\n}\n\nfunction appendActionQueryParam(\n  qs: URLSearchParams,\n  key: string,\n  value: unknown,\n) {\n  if (value === null || value === undefined) return;\n  if (Array.isArray(value)) {\n    // Use bracket keys so a one-item array still arrives as an array after the\n    // server parses URLSearchParams. Repeated bare keys lose that distinction.\n    for (const item of value) {\n      appendActionQueryParam(qs, `${key}[]`, item);\n    }\n    return;\n  }\n  qs.append(key, String(value));\n}\n\nasync function actionFetch<T>(\n  name: string,\n  method: string,\n  params?: Record<string, any>,\n): Promise<T> {\n  ensureEmbedAuthFetchInterceptor();\n  let url = `${ACTION_PREFIX}/${name}`;\n  const headers: Record<string, string> = {\n    \"Content-Type\": \"application/json\",\n    // Tag browser-originated action calls so the server can set\n    // `ctx.caller = \"frontend\"` (vs a bare programmatic `\"http\"` POST).\n    // Mirrors the X-Agent-Native-Tool-Bridge: 1 convention. The header is\n    // safe to expose: CORS allows it (see action-routes.ts) and it carries\n    // no auth weight — it only narrows the caller tag.\n    \"X-Agent-Native-Frontend\": \"1\",\n  };\n  const tz = resolveUserTimezone();\n  if (tz) headers[\"x-user-timezone\"] = tz;\n  const init: RequestInit = {\n    method,\n    headers,\n    cache: \"no-store\",\n  };\n\n  if (method === \"GET\" && params && Object.keys(params).length > 0) {\n    // Skip null/undefined so optional filters don't turn into literal \"null\"\n    // strings in the query string (e.g. `?folderId=null`).\n    const qs = serializeActionQueryParams(params);\n    if (qs) url += `?${qs}`;\n  } else if (method !== \"GET\" && params) {\n    init.body = JSON.stringify(params);\n  }\n\n  let res: Response;\n  try {\n    res = await fetch(url, init);\n  } catch (err) {\n    // Network failures, CORS, server unreachable, etc. — give the caller a\n    // useful message instead of the opaque \"Failed to fetch\".\n    const cause = err instanceof Error ? err.message : String(err);\n    throw new Error(`Action ${name} failed: ${cause}`);\n  }\n\n  // 204 No Content — nothing to parse.\n  if (res.status === 204) return null as T;\n\n  // Read the body as text first so we can:\n  //   - tolerate empty bodies (avoids \"Unexpected end of JSON input\")\n  //   - surface non-JSON error responses (HTML 401/404 pages, plain text, etc.)\n  //   - preserve the original HTTP status in the thrown error\n  // Track read failures separately from \"no body\" — a stream interruption /\n  // decode failure on a 2xx response should error rather than silently\n  // succeed with `null`.\n  let raw = \"\";\n  let readFailed = false;\n  let readError: unknown;\n  try {\n    raw = await res.text();\n  } catch (err) {\n    readFailed = true;\n    readError = err;\n  }\n\n  let data: any = undefined;\n  let parseFailed = false;\n  if (raw.length > 0) {\n    try {\n      data = JSON.parse(raw);\n    } catch {\n      // Body wasn't JSON — keep `data` undefined and use the raw text below.\n      parseFailed = true;\n    }\n  }\n\n  if (!res.ok) {\n    const message =\n      (data && (data.error || data.message)) ||\n      // Truncate non-JSON bodies so we don't dump entire HTML pages into the\n      // console, but still give the developer a hint as to what came back.\n      (raw && raw.slice(0, 200)) ||\n      res.statusText ||\n      `HTTP ${res.status}`;\n    const error = new Error(`Action ${name} failed: ${message}`);\n    (error as any).status = res.status;\n    throw error;\n  }\n\n  // 2xx but the body couldn't even be read (mid-stream abort, decode failure,\n  // etc.). Don't silently treat that as a `null` success.\n  if (readFailed) {\n    const cause =\n      readError instanceof Error ? readError.message : String(readError);\n    const error = new Error(\n      `Action ${name} returned ${res.status} but the body could not be read: ${cause}`,\n    );\n    (error as any).status = res.status;\n    throw error;\n  }\n\n  // 2xx with a non-empty, non-JSON body. Action callers expect typed data, so\n  // returning `null` here would silently mask a real server bug (e.g. a proxy\n  // returning HTML 200 instead of JSON). Throw instead — empty bodies (handled\n  // above by the `raw.length > 0` guard and the 204 short-circuit) still\n  // correctly resolve to `null`.\n  if (parseFailed) {\n    const error = new Error(\n      `Action ${name} returned a non-JSON ${res.status} response: ${raw.slice(0, 200)}`,\n    );\n    (error as any).status = res.status;\n    throw error;\n  }\n\n  return (data ?? (null as unknown)) as T;\n}\n\n/**\n * Imperatively call an action from browser/client code.\n *\n * Prefer `useActionQuery` / `useActionMutation` in React render flows. Use this\n * helper when a hook is not ergonomic; do not hand-write fetch calls to\n * `/_agent-native/actions/*` in components.\n */\nexport function callAction<\n  TResult = undefined,\n  TName extends ActionName = ActionName,\n>(\n  actionName: TName,\n  params?: ActionParams<TName>,\n  options: ClientActionCallOptions = {},\n): Promise<TResult extends undefined ? ActionResult<TName> : TResult> {\n  type R = TResult extends undefined ? ActionResult<TName> : TResult;\n  return actionFetch<R>(actionName, options.method ?? \"POST\", params);\n}\n\n// ---------------------------------------------------------------------------\n// Query hook\n// ---------------------------------------------------------------------------\n\n/**\n * Query an action exposed as GET.\n *\n * When the action type registry is generated, the return type and parameter\n * types are inferred automatically from the action's `defineAction()` call.\n *\n * ```ts\n * // Type-safe — no manual generic needed\n * const { data } = useActionQuery(\"list-meals\", { date: \"2025-01-01\" });\n *\n * // Manual override still works when needed\n * const { data } = useActionQuery<CustomType>(\"list-meals\");\n * ```\n */\nexport function useActionQuery<\n  TResult = undefined,\n  TName extends ActionName = ActionName,\n>(\n  actionName: TName,\n  params?: ActionParams<TName>,\n  options?: Omit<\n    UseQueryOptions<TResult extends undefined ? ActionResult<TName> : TResult>,\n    \"queryKey\" | \"queryFn\"\n  >,\n) {\n  type R = TResult extends undefined ? ActionResult<TName> : TResult;\n  return useQuery<R>({\n    queryKey: [\"action\", actionName, params],\n    queryFn: () => actionFetch<R>(actionName, \"GET\", params),\n    retry: defaultActionQueryRetry,\n    ...options,\n  });\n}\n\n// ---------------------------------------------------------------------------\n// Mutation hook\n// ---------------------------------------------------------------------------\n\n/**\n * Mutate via an action exposed as POST (default), PUT, or DELETE.\n *\n * When the action type registry is generated, the return type and parameter\n * types are inferred automatically.\n *\n * ```ts\n * // Type-safe\n * const { mutate } = useActionMutation(\"log-meal\");\n * mutate({ name: \"Salad\", calories: 350 });\n * ```\n */\nexport function useActionMutation<\n  TData = undefined,\n  TVariables = undefined,\n  TName extends ActionName = ActionName,\n>(\n  actionName: TName,\n  options?: Omit<\n    UseMutationOptions<\n      TData extends undefined ? ActionResult<TName> : TData,\n      Error,\n      TVariables extends undefined ? ActionParams<TName> : TVariables\n    >,\n    \"mutationFn\"\n  > & {\n    method?: \"POST\" | \"PUT\" | \"DELETE\";\n  },\n) {\n  const queryClient = useQueryClient();\n  const {\n    method: methodOpt,\n    onSuccess,\n    ...restOptions\n  } = options ?? ({} as any);\n  const method = methodOpt ?? \"POST\";\n\n  type D = TData extends undefined ? ActionResult<TName> : TData;\n  type V = TVariables extends undefined ? ActionParams<TName> : TVariables;\n\n  return useMutation<D, Error, V>({\n    ...restOptions,\n    mutationFn: (params) =>\n      actionFetch<D>(actionName, method, params as Record<string, any>),\n    onSuccess: (...args: [any, any, any]) => {\n      // Invalidate related action queries\n      queryClient.invalidateQueries({ queryKey: [\"action\"] });\n      (onSuccess as Function)?.(...args);\n    },\n  });\n}\n"]}

package/dist/collab/awareness.d.ts

@@ -49,11 +49,11 @@ export declare const postAwareness: import("h3").EventHandlerWithFetch<import("h
     error: string;
     states?: undefined;
 } | {
+    error?: undefined;
     states: {
         clientId: number;
         state: string;
     }[];
-    error?: undefined;
 }>>;
 /**
  * GET /_agent-native/collab/:docId/users
@@ -64,10 +64,10 @@ export declare const getActiveUsers: import("h3").EventHandlerWithFetch<import("
     error: string;
     users?: undefined;
 } | {
+    error?: undefined;
     users: {
         clientId: number;
         lastSeen: number;
     }[];
-    error?: undefined;
 }>>;
 //# sourceMappingURL=awareness.d.ts.map

package/dist/collab/awareness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"awareness.d.ts","sourceRoot":"","sources":["../../src/collab/awareness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAS3C,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAOD,eAAO,MAAM,sBAAsB,EAAG,kBAA2B,CAAC;AAElE,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,MAAM,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAKD,wBAAgB,mBAAmB,IAAI,YAAY,CAElD;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,EAClD,KAAK,CAAC,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,GACb,IAAI,CAUN;AAKD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAO1E;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,IAAI,CAOnE;AAUD;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa;;;;;kBAuCa,MAAM;eAAS,MAAM;;;GAa1D,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,cAAc;;;;;kBAWM,MAAM;kBAAY,MAAM;;;GAMvD,CAAC"}
+{"version":3,"file":"awareness.d.ts","sourceRoot":"","sources":["../../src/collab/awareness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAS3C,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAOD,eAAO,MAAM,sBAAsB,EAAG,kBAA2B,CAAC;AAElE,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,MAAM,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAKD,wBAAgB,mBAAmB,IAAI,YAAY,CAElD;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,EAClD,KAAK,CAAC,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,GACb,IAAI,CAUN;AAKD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAO1E;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,IAAI,CAOnE;AAUD;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa;;;;;;kBAuCa,MAAM;eAAS,MAAM;;GAa1D,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,cAAc;;;;;;kBAWM,MAAM;kBAAY,MAAM;;GAMvD,CAAC"}

package/dist/collab/routes.d.ts

@@ -26,8 +26,8 @@ export declare const getCollabState: import("h3").EventHandlerWithFetch<import("
  * Body: { update: string (base64), requestSource?: string }
  */
 export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/notifications/routes.d.ts

@@ -11,14 +11,14 @@
  *   DELETE /_agent-native/notifications/:id         — delete
  */
 export declare function createNotificationsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<"" | import("./types.js").Notification[] | {
+    error?: undefined;
     count: number;
     updated?: undefined;
-    error?: undefined;
     ok?: undefined;
 } | {
+    error?: undefined;
     count?: undefined;
     updated: number;
-    error?: undefined;
     ok?: undefined;
 } | {
     count?: undefined;
@@ -26,9 +26,9 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
     error: string;
     ok?: undefined;
 } | {
+    error?: undefined;
     count?: undefined;
     updated?: undefined;
     ok: boolean;
-    error?: undefined;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/observability/routes.d.ts

@@ -41,16 +41,16 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
+    error?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
-    error?: undefined;
     ok?: undefined;
 } | {
+    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id: string;
-    error?: undefined;
     ok?: undefined;
 } | {
     summary?: undefined;
@@ -59,10 +59,10 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     error: any;
     ok?: undefined;
 } | {
+    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
-    error?: undefined;
     ok: boolean;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/resources/handlers.d.ts

@@ -52,8 +52,8 @@ export declare function handleDeleteResource(event: any): Promise<{
     error: string;
     ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>;
 /** POST /_agent-native/resources/upload — upload a file as a resource */
 export declare function handleUploadResource(event: any): Promise<import("./store.js").Resource | {
@@ -73,9 +73,9 @@ export declare function handleUploadResource(event: any): Promise<import("./stor
     runId: string | null;
     expiresAt: number | null;
     metadata: string | null;
-    error?: undefined;
     url: string;
     provider: string;
+    error?: undefined;
 }>;
 export {};
 //# sourceMappingURL=handlers.d.ts.map

package/dist/server/agent-engine-api-key-route.d.ts

@@ -27,11 +27,11 @@ export declare function resolveAgentEngineApiKeyWriteTarget(event: H3Event, scop
 export declare function createAgentEngineApiKeyHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: any;
 } | {
+    error?: undefined;
     ok: boolean;
     key: string;
     baseUrlKey?: string;
     scope: AgentEngineApiKeyScope;
-    error?: undefined;
 }>>;
 export {};
 //# sourceMappingURL=agent-engine-api-key-route.d.ts.map

package/dist/server/ssr-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ssr-handler.d.ts","sourceRoot":"","sources":["../../src/server/ssr-handler.ts"],"names":[],"mappings":"AA8CA,OAAO,EACL,yBAAyB,EACzB,gCAAgC,EAChC,yBAAyB,GAC1B,MAAM,4BAA4B,CAAC;AA0nBpC;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,2FAgE5E"}
+{"version":3,"file":"ssr-handler.d.ts","sourceRoot":"","sources":["../../src/server/ssr-handler.ts"],"names":[],"mappings":"AA8CA,OAAO,EACL,yBAAyB,EACzB,gCAAgC,EAChC,yBAAyB,GAC1B,MAAM,4BAA4B,CAAC;AAsoBpC;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,2FAgE5E"}

package/dist/server/ssr-handler.js

@@ -310,6 +310,11 @@ function appendToExistingCspDirective(directives, name, additions) {
         return;
     existing.tokens = appendCspTokens(existing.tokens, additions);
 }
+function ensureCspDirective(directives, name, tokens) {
+    if (findCspDirective(directives, name))
+        return;
+    directives.push({ name, tokens: [...tokens] });
+}
 function hasStrictNonceScriptPolicy(tokens) {
     return tokens.some((token) => token === "'strict-dynamic'" || token.startsWith("'nonce-"));
 }
@@ -358,6 +363,8 @@ function augmentExistingEnforcedCspForFrameworkScripts(policy, options) {
             appendToExistingOrDefaultCspDirective(directives, "img-src", GA_CSP_IMG_HOSTS);
         }
     }
+    ensureCspDirective(directives, "object-src", ["'none'"]);
+    ensureCspDirective(directives, "base-uri", ["'self'"]);
     return serializeCsp(directives);
 }
 function augmentExistingReportOnlyCspForFrameworkScripts(policy, options) {