@agent-native/core 0.91.2 → 0.92.1

package/dist/navigation/index.js

@@ -10,7 +10,7 @@ export const STANDARD_SETTINGS_TABS = {
     providers: "providers",
     connections: "connections",
     secrets: "secrets",
-    team: "team",
+    team: "organization",
     usage: "usage",
     language: "language",
     whatsNew: "whats-new",

package/dist/navigation/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/navigation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,8BAA8B,GAC/B,MAAM,gCAAgC,CAAC;AAExC,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,IAAI,EAAE,GAAG;IACT,QAAQ,EAAE,WAAW;IACrB,IAAI,EAAE,OAAO;CACL,CAAC;AAEX,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,WAAW;CACb,CAAC;AAmCX,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,GAAG,CAAC;IAC5C,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,OAAO,GAAG;SACP,IAAI,EAAE;SACN,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;SACjB,WAAW,EAAE;SACb,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAwC,EACxC,MAA8B;IAE9B,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,GAA2C,EAC3C,QAAQ,GAAG,mBAAmB,CAAC,QAAQ;IAEvC,MAAM,IAAI,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAG,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,IAAI,CAAC,aAAa,IAAI,aAAa,KAAK,sBAAsB,CAAC,OAAO,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,IAAI,IAAI,kBAAkB,CAAC,aAAa,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,OAAO,GAAyD,EAAE;IAElE,OAAO,OAAO,CAAC,cAAc;QAC3B,CAAC,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,IAAI,CAAC;QACjD,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAyB,EACzB,OAAO,GAAiC,EAAE;IAE1C,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACzE,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;IACrD,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,UAAkB,EAClB,UAAkB,EAClB,OAAO,GAA8B,EAAE;IAEvC,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,UAAU;SAC9B,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;SACtC,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,IAAI,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC/D,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,OAAO,GAAG,MAAM,IAAI,cAAc,IAAI,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAuB;IACxD,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,IAAI,KAAK,CAAC,GAAG;QAAE,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,KAAK,CAAC,EAAE;QAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;YAAE,SAAS;QACpE,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,8BAA8B,CAAC,GAAG,sBAAsB,IAAI,EAAE,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAA4C;IAE5C,OAAO;QACL,GAAG,KAAK;QACR,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,QAAQ,KAAK,CAAC,IAAI,EAAE;QAC1C,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,MAA6C,EAC7C,OAAO,GAAoC,EAAE;IAE7C,OAAO,CAAC,KAIP,EAA6B,EAAE;QAC9B,KAAK,KAAK,CAAC,GAAG,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,IAAI;YACb,OAAO,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9D,OAAO,CACL,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC;YACtD,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;YACpD,IAAI,KAAK,CAAC,IAAI,EAAE,CACjB,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import {\n  AGENT_NATIVE_OPEN_PATH,\n  withCollapsedAgentSidebarParam,\n} from \"../shared/agent-sidebar-url.js\";\n\nexport const STANDARD_APP_ROUTES = {\n  home: \"/\",\n  settings: \"/settings\",\n  team: \"/team\",\n} as const;\n\nexport const STANDARD_SETTINGS_TABS = {\n  general: \"general\",\n  agent: \"agent\",\n  providers: \"providers\",\n  connections: \"connections\",\n  secrets: \"secrets\",\n  team: \"team\",\n  usage: \"usage\",\n  language: \"language\",\n  whatsNew: \"whats-new\",\n} as const;\n\nexport type StandardAppRouteId = keyof typeof STANDARD_APP_ROUTES;\nexport type StandardSettingsTabId =\n  (typeof STANDARD_SETTINGS_TABS)[keyof typeof STANDARD_SETTINGS_TABS];\n\nexport interface BuildStandardAppRouteOptions {\n  settingsTab?: StandardSettingsTabId | string | null;\n  teamInSettings?: boolean;\n}\n\nexport interface BuildResourceRouteOptions {\n  basePath?: string;\n}\n\nexport interface NavigationTarget {\n  app?: string;\n  view: string;\n  params?: Record<string, string | number | boolean | null | undefined>;\n  to?: string;\n}\n\nexport interface NavigationLink extends NavigationTarget {\n  label: string;\n  url: string;\n}\n\nexport type StandardOpenPathRoute =\n  | string\n  | ((params: Record<string, string>) => string | null | undefined);\n\nexport interface StandardOpenPathResolverOptions {\n  fallback?: StandardOpenPathRoute;\n}\n\nfunction normalizeLeadingPath(path: string): string {\n  const trimmed = path.trim();\n  if (!trimmed || trimmed === \"/\") return \"/\";\n  return `/${trimmed.replace(/^\\/+/, \"\").replace(/\\/+$/, \"\")}`;\n}\n\nfunction normalizeTabId(tab: string): string {\n  return tab\n    .trim()\n    .replace(/^#/, \"\")\n    .toLowerCase()\n    .replace(/['\"]/g, \"\")\n    .replace(/[\\s_]+/g, \"-\");\n}\n\nfunction pathSegment(value: string): string {\n  return encodeURIComponent(value.trim().replace(/^\\/+|\\/+$/g, \"\"));\n}\n\nfunction resolveOpenPathRoute(\n  route: StandardOpenPathRoute | undefined,\n  params: Record<string, string>,\n): string | null | undefined {\n  if (!route) return null;\n  return typeof route === \"function\" ? route(params) : route;\n}\n\nexport function buildSettingsRoute(\n  tab?: StandardSettingsTabId | string | null,\n  basePath = STANDARD_APP_ROUTES.settings,\n): string {\n  const path = normalizeLeadingPath(basePath);\n  const normalizedTab = tab ? normalizeTabId(tab) : null;\n  if (!normalizedTab || normalizedTab === STANDARD_SETTINGS_TABS.general) {\n    return path;\n  }\n  return `${path}#${encodeURIComponent(normalizedTab)}`;\n}\n\nexport function buildTeamRoute(\n  options: Pick<BuildStandardAppRouteOptions, \"teamInSettings\"> = {},\n): string {\n  return options.teamInSettings\n    ? buildSettingsRoute(STANDARD_SETTINGS_TABS.team)\n    : STANDARD_APP_ROUTES.team;\n}\n\nexport function buildStandardAppRoute(\n  route: StandardAppRouteId,\n  options: BuildStandardAppRouteOptions = {},\n): string {\n  if (route === \"settings\") return buildSettingsRoute(options.settingsTab);\n  if (route === \"team\") return buildTeamRoute(options);\n  return STANDARD_APP_ROUTES[route];\n}\n\nexport function buildResourceRoute(\n  collection: string,\n  resourceId: string,\n  options: BuildResourceRouteOptions = {},\n): string {\n  const base = normalizeLeadingPath(options.basePath ?? \"/\");\n  const collectionPath = collection\n    .split(\"/\")\n    .map((segment) => pathSegment(segment))\n    .filter(Boolean)\n    .join(\"/\");\n  if (!collectionPath) throw new Error(\"collection is required\");\n  if (!resourceId.trim()) throw new Error(\"resourceId is required\");\n  const prefix = base === \"/\" ? \"\" : base;\n  return `${prefix}/${collectionPath}/${pathSegment(resourceId)}`;\n}\n\nexport function buildOpenRoutePath(input: NavigationTarget): string {\n  const sp = new URLSearchParams();\n  if (input.app) sp.set(\"app\", input.app);\n  sp.set(\"view\", input.view);\n  if (input.to) sp.set(\"to\", input.to);\n  for (const [key, value] of Object.entries(input.params ?? {})) {\n    if (value === undefined || value === null || value === \"\") continue;\n    sp.set(key, String(value));\n  }\n  return withCollapsedAgentSidebarParam(`${AGENT_NATIVE_OPEN_PATH}?${sp}`);\n}\n\nexport function buildOpenRouteLink(\n  input: NavigationTarget & { label?: string },\n): NavigationLink {\n  return {\n    ...input,\n    label: input.label ?? `Open ${input.view}`,\n    url: buildOpenRoutePath(input),\n  };\n}\n\nexport function createStandardOpenPathResolver(\n  routes: Record<string, StandardOpenPathRoute>,\n  options: StandardOpenPathResolverOptions = {},\n) {\n  return (input: {\n    app?: string;\n    view?: string;\n    params: Record<string, string>;\n  }): string | null | undefined => {\n    void input.app;\n    if (!input.view)\n      return resolveOpenPathRoute(options.fallback, input.params);\n    return (\n      resolveOpenPathRoute(routes[input.view], input.params) ??\n      resolveOpenPathRoute(options.fallback, input.params) ??\n      `/${input.view}`\n    );\n  };\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/navigation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,8BAA8B,GAC/B,MAAM,gCAAgC,CAAC;AAExC,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,IAAI,EAAE,GAAG;IACT,QAAQ,EAAE,WAAW;IACrB,IAAI,EAAE,OAAO;CACL,CAAC;AAEX,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,cAAc;IACpB,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,WAAW;CACb,CAAC;AAmCX,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,GAAG,CAAC;IAC5C,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,OAAO,GAAG;SACP,IAAI,EAAE;SACN,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;SACjB,WAAW,EAAE;SACb,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAwC,EACxC,MAA8B;IAE9B,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,GAA2C,EAC3C,QAAQ,GAAG,mBAAmB,CAAC,QAAQ;IAEvC,MAAM,IAAI,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAG,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,IAAI,CAAC,aAAa,IAAI,aAAa,KAAK,sBAAsB,CAAC,OAAO,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,IAAI,IAAI,kBAAkB,CAAC,aAAa,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,OAAO,GAAyD,EAAE;IAElE,OAAO,OAAO,CAAC,cAAc;QAC3B,CAAC,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,IAAI,CAAC;QACjD,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAyB,EACzB,OAAO,GAAiC,EAAE;IAE1C,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACzE,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;IACrD,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,UAAkB,EAClB,UAAkB,EAClB,OAAO,GAA8B,EAAE;IAEvC,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,UAAU;SAC9B,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;SACtC,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,IAAI,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC/D,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,OAAO,GAAG,MAAM,IAAI,cAAc,IAAI,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAuB;IACxD,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,IAAI,KAAK,CAAC,GAAG;QAAE,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,KAAK,CAAC,EAAE;QAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;YAAE,SAAS;QACpE,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,8BAA8B,CAAC,GAAG,sBAAsB,IAAI,EAAE,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAA4C;IAE5C,OAAO;QACL,GAAG,KAAK;QACR,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,QAAQ,KAAK,CAAC,IAAI,EAAE;QAC1C,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,MAA6C,EAC7C,OAAO,GAAoC,EAAE;IAE7C,OAAO,CAAC,KAIP,EAA6B,EAAE;QAC9B,KAAK,KAAK,CAAC,GAAG,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,IAAI;YACb,OAAO,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9D,OAAO,CACL,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC;YACtD,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;YACpD,IAAI,KAAK,CAAC,IAAI,EAAE,CACjB,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import {\n  AGENT_NATIVE_OPEN_PATH,\n  withCollapsedAgentSidebarParam,\n} from \"../shared/agent-sidebar-url.js\";\n\nexport const STANDARD_APP_ROUTES = {\n  home: \"/\",\n  settings: \"/settings\",\n  team: \"/team\",\n} as const;\n\nexport const STANDARD_SETTINGS_TABS = {\n  general: \"general\",\n  agent: \"agent\",\n  providers: \"providers\",\n  connections: \"connections\",\n  secrets: \"secrets\",\n  team: \"organization\",\n  usage: \"usage\",\n  language: \"language\",\n  whatsNew: \"whats-new\",\n} as const;\n\nexport type StandardAppRouteId = keyof typeof STANDARD_APP_ROUTES;\nexport type StandardSettingsTabId =\n  (typeof STANDARD_SETTINGS_TABS)[keyof typeof STANDARD_SETTINGS_TABS];\n\nexport interface BuildStandardAppRouteOptions {\n  settingsTab?: StandardSettingsTabId | string | null;\n  teamInSettings?: boolean;\n}\n\nexport interface BuildResourceRouteOptions {\n  basePath?: string;\n}\n\nexport interface NavigationTarget {\n  app?: string;\n  view: string;\n  params?: Record<string, string | number | boolean | null | undefined>;\n  to?: string;\n}\n\nexport interface NavigationLink extends NavigationTarget {\n  label: string;\n  url: string;\n}\n\nexport type StandardOpenPathRoute =\n  | string\n  | ((params: Record<string, string>) => string | null | undefined);\n\nexport interface StandardOpenPathResolverOptions {\n  fallback?: StandardOpenPathRoute;\n}\n\nfunction normalizeLeadingPath(path: string): string {\n  const trimmed = path.trim();\n  if (!trimmed || trimmed === \"/\") return \"/\";\n  return `/${trimmed.replace(/^\\/+/, \"\").replace(/\\/+$/, \"\")}`;\n}\n\nfunction normalizeTabId(tab: string): string {\n  return tab\n    .trim()\n    .replace(/^#/, \"\")\n    .toLowerCase()\n    .replace(/['\"]/g, \"\")\n    .replace(/[\\s_]+/g, \"-\");\n}\n\nfunction pathSegment(value: string): string {\n  return encodeURIComponent(value.trim().replace(/^\\/+|\\/+$/g, \"\"));\n}\n\nfunction resolveOpenPathRoute(\n  route: StandardOpenPathRoute | undefined,\n  params: Record<string, string>,\n): string | null | undefined {\n  if (!route) return null;\n  return typeof route === \"function\" ? route(params) : route;\n}\n\nexport function buildSettingsRoute(\n  tab?: StandardSettingsTabId | string | null,\n  basePath = STANDARD_APP_ROUTES.settings,\n): string {\n  const path = normalizeLeadingPath(basePath);\n  const normalizedTab = tab ? normalizeTabId(tab) : null;\n  if (!normalizedTab || normalizedTab === STANDARD_SETTINGS_TABS.general) {\n    return path;\n  }\n  return `${path}#${encodeURIComponent(normalizedTab)}`;\n}\n\nexport function buildTeamRoute(\n  options: Pick<BuildStandardAppRouteOptions, \"teamInSettings\"> = {},\n): string {\n  return options.teamInSettings\n    ? buildSettingsRoute(STANDARD_SETTINGS_TABS.team)\n    : STANDARD_APP_ROUTES.team;\n}\n\nexport function buildStandardAppRoute(\n  route: StandardAppRouteId,\n  options: BuildStandardAppRouteOptions = {},\n): string {\n  if (route === \"settings\") return buildSettingsRoute(options.settingsTab);\n  if (route === \"team\") return buildTeamRoute(options);\n  return STANDARD_APP_ROUTES[route];\n}\n\nexport function buildResourceRoute(\n  collection: string,\n  resourceId: string,\n  options: BuildResourceRouteOptions = {},\n): string {\n  const base = normalizeLeadingPath(options.basePath ?? \"/\");\n  const collectionPath = collection\n    .split(\"/\")\n    .map((segment) => pathSegment(segment))\n    .filter(Boolean)\n    .join(\"/\");\n  if (!collectionPath) throw new Error(\"collection is required\");\n  if (!resourceId.trim()) throw new Error(\"resourceId is required\");\n  const prefix = base === \"/\" ? \"\" : base;\n  return `${prefix}/${collectionPath}/${pathSegment(resourceId)}`;\n}\n\nexport function buildOpenRoutePath(input: NavigationTarget): string {\n  const sp = new URLSearchParams();\n  if (input.app) sp.set(\"app\", input.app);\n  sp.set(\"view\", input.view);\n  if (input.to) sp.set(\"to\", input.to);\n  for (const [key, value] of Object.entries(input.params ?? {})) {\n    if (value === undefined || value === null || value === \"\") continue;\n    sp.set(key, String(value));\n  }\n  return withCollapsedAgentSidebarParam(`${AGENT_NATIVE_OPEN_PATH}?${sp}`);\n}\n\nexport function buildOpenRouteLink(\n  input: NavigationTarget & { label?: string },\n): NavigationLink {\n  return {\n    ...input,\n    label: input.label ?? `Open ${input.view}`,\n    url: buildOpenRoutePath(input),\n  };\n}\n\nexport function createStandardOpenPathResolver(\n  routes: Record<string, StandardOpenPathRoute>,\n  options: StandardOpenPathResolverOptions = {},\n) {\n  return (input: {\n    app?: string;\n    view?: string;\n    params: Record<string, string>;\n  }): string | null | undefined => {\n    void input.app;\n    if (!input.view)\n      return resolveOpenPathRoute(options.fallback, input.params);\n    return (\n      resolveOpenPathRoute(routes[input.view], input.params) ??\n      resolveOpenPathRoute(options.fallback, input.params) ??\n      `/${input.view}`\n    );\n  };\n}\n"]}

package/dist/notifications/channels.d.ts

@@ -1,17 +1,22 @@
 /**
  * Built-in notification channels.
  *
- * Set environment variables to auto-register the webhook channel at startup.
+ * Webhook and Slack are always registered. Delivery uses (in order):
+ *   1. per-notification `metadata.webhookUrl` / `metadata.slackWebhookUrl`
+ *   2. the matching `NOTIFICATIONS_*` env URL (workspace default)
+ * If neither is set, that channel no-ops for the emission.
+ *
  * Extra channels can be registered at any time via
  * `registerNotificationChannel()` from a server plugin.
  *
- * NOTIFICATIONS_WEBHOOK_URL  → POST notifications as JSON to this URL.
+ * NOTIFICATIONS_WEBHOOK_URL  → default POST JSON URL when metadata omits one.
  *                              Supports `${keys.NAME}` substitution — the raw
  *                              value never enters the agent context.
  * NOTIFICATIONS_WEBHOOK_AUTH → optional `Authorization` header value (also
  *                              supports `${keys.NAME}`).
  * NOTIFICATIONS_SLACK_WEBHOOK_URL
- *                            → POST notifications to a Slack incoming webhook.
+ *                            → default Slack incoming webhook when metadata
+ *                              omits `slackWebhookUrl`.
  *                              Supports `${keys.NAME}` substitution.
  * NOTIFICATIONS_EMAIL_CHANNEL=1
  *                            → enable the built-in email channel for

package/dist/notifications/channels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"channels.d.ts","sourceRoot":"","sources":["../../src/notifications/channels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAcH,wBAAgB,mCAAmC,IAAI,IAAI,CAkB1D"}
+{"version":3,"file":"channels.d.ts","sourceRoot":"","sources":["../../src/notifications/channels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAcH,wBAAgB,mCAAmC,IAAI,IAAI,CAa1D"}

package/dist/notifications/channels.js

@@ -1,17 +1,22 @@
 /**
  * Built-in notification channels.
  *
- * Set environment variables to auto-register the webhook channel at startup.
+ * Webhook and Slack are always registered. Delivery uses (in order):
+ *   1. per-notification `metadata.webhookUrl` / `metadata.slackWebhookUrl`
+ *   2. the matching `NOTIFICATIONS_*` env URL (workspace default)
+ * If neither is set, that channel no-ops for the emission.
+ *
  * Extra channels can be registered at any time via
  * `registerNotificationChannel()` from a server plugin.
  *
- * NOTIFICATIONS_WEBHOOK_URL  → POST notifications as JSON to this URL.
+ * NOTIFICATIONS_WEBHOOK_URL  → default POST JSON URL when metadata omits one.
  *                              Supports `${keys.NAME}` substitution — the raw
  *                              value never enters the agent context.
  * NOTIFICATIONS_WEBHOOK_AUTH → optional `Authorization` header value (also
  *                              supports `${keys.NAME}`).
  * NOTIFICATIONS_SLACK_WEBHOOK_URL
- *                            → POST notifications to a Slack incoming webhook.
+ *                            → default Slack incoming webhook when metadata
+ *                              omits `slackWebhookUrl`.
  *                              Supports `${keys.NAME}` substitution.
  * NOTIFICATIONS_EMAIL_CHANNEL=1
  *                            → enable the built-in email channel for
@@ -30,25 +35,26 @@ export function registerBuiltinNotificationChannels() {
     if (_registered)
         return;
     _registered = true;
-    const url = process.env.NOTIFICATIONS_WEBHOOK_URL;
-    if (url) {
-        registerNotificationChannel(createWebhookChannel(url));
-    }
-    const slackUrl = process.env.NOTIFICATIONS_SLACK_WEBHOOK_URL;
-    if (slackUrl) {
-        registerNotificationChannel(createSlackWebhookChannel(slackUrl));
-    }
-    const emailRecipients = process.env.NOTIFICATIONS_EMAIL_RECIPIENTS?.trim();
-    if (process.env.NOTIFICATIONS_EMAIL_CHANNEL === "1" || emailRecipients) {
-        registerNotificationChannel(createEmailChannel());
-    }
+    registerNotificationChannel(createWebhookChannel(process.env.NOTIFICATIONS_WEBHOOK_URL));
+    registerNotificationChannel(createSlackWebhookChannel(process.env.NOTIFICATIONS_SLACK_WEBHOOK_URL));
+    // Email is always registered so per-notification `metadata.emailRecipients`
+    // work without a workspace-wide env flag (same pattern as webhook/slack).
+    registerNotificationChannel(createEmailChannel());
 }
-function createWebhookChannel(urlTemplate) {
+function createWebhookChannel(envUrlTemplate) {
     const authTemplate = process.env.NOTIFICATIONS_WEBHOOK_AUTH;
     return {
         name: "webhook",
         async deliver(input, meta) {
-            const { url, headers } = await resolveWebhookRequest(urlTemplate, authTemplate, meta.owner, "webhook");
+            const overrideUrlTemplate = deliveryMetadataString(input.metadata, "webhookUrl");
+            const urlTemplate = overrideUrlTemplate ??
+                metadataString(input.metadata, "webhookUrl") ??
+                envUrlTemplate?.trim();
+            // No-op when neither a per-notification nor workspace URL is set —
+            // mirrors email's empty-recipients behavior so notify-all stays quiet.
+            if (!urlTemplate)
+                return false;
+            const { url, headers } = await resolveWebhookRequest(urlTemplate, overrideUrlTemplate ? undefined : authTemplate, meta.owner, "webhook");
             const res = await ssrfSafeFetch(url, {
                 method: "POST",
                 headers,
@@ -56,7 +62,7 @@ function createWebhookChannel(urlTemplate) {
                     severity: input.severity,
                     title: input.title,
                     body: input.body,
-                    metadata: input.metadata,
+                    metadata: scrubDeliveryMetadata(input.metadata),
                     owner: meta.owner,
                     emittedAt: new Date().toISOString(),
                 }),
@@ -67,12 +73,18 @@ function createWebhookChannel(urlTemplate) {
         },
     };
 }
-function createSlackWebhookChannel(urlTemplate) {
+function createSlackWebhookChannel(envUrlTemplate) {
     const authTemplate = process.env.NOTIFICATIONS_SLACK_WEBHOOK_AUTH;
     return {
         name: "slack",
         async deliver(input, meta) {
-            const { url, headers } = await resolveWebhookRequest(urlTemplate, authTemplate, meta.owner, "Slack webhook");
+            const overrideUrlTemplate = deliveryMetadataString(input.metadata, "slackWebhookUrl");
+            const urlTemplate = overrideUrlTemplate ??
+                metadataString(input.metadata, "slackWebhookUrl") ??
+                envUrlTemplate?.trim();
+            if (!urlTemplate)
+                return false;
+            const { url, headers } = await resolveWebhookRequest(urlTemplate, overrideUrlTemplate ? undefined : authTemplate, meta.owner, "Slack webhook");
             const res = await ssrfSafeFetch(url, {
                 method: "POST",
                 headers,
@@ -121,7 +133,7 @@ function createEmailChannel() {
         async deliver(input) {
             const recipients = notificationEmailRecipients(input.metadata);
             if (recipients.length === 0)
-                return;
+                return false;
             const subject = typeof input.metadata?.emailSubject === "string" &&
                 input.metadata.emailSubject.trim()
                 ? input.metadata.emailSubject.trim()
@@ -170,6 +182,30 @@ async function resolveWebhookRequest(urlTemplate, authTemplate, owner, label) {
     });
     return { url, headers };
 }
+function metadataString(metadata, key) {
+    const value = metadata?.[key];
+    if (typeof value !== "string")
+        return undefined;
+    const trimmed = value.trim();
+    return trimmed || undefined;
+}
+function deliveryMetadataString(metadata, key) {
+    const delivery = metadata?.delivery;
+    if (!delivery || typeof delivery !== "object" || Array.isArray(delivery)) {
+        return undefined;
+    }
+    const value = delivery[key];
+    if (typeof value !== "string")
+        return undefined;
+    const trimmed = value.trim();
+    return trimmed || undefined;
+}
+function scrubDeliveryMetadata(metadata) {
+    if (!metadata)
+        return undefined;
+    const entries = Object.entries(metadata).filter(([key]) => key !== "delivery" && key !== "webhookUrl" && key !== "slackWebhookUrl");
+    return entries.length ? Object.fromEntries(entries) : undefined;
+}
 function notificationEmailRecipients(metadata) {
     const fromMetadata = stringArray(metadata?.emailRecipients);
     const fromEnv = commaList(process.env.NOTIFICATIONS_EMAIL_RECIPIENTS);
@@ -200,7 +236,10 @@ function commaList(value) {
 function scrubEmailMetadata(metadata) {
     if (!metadata)
         return null;
-    const entries = Object.entries(metadata).filter(([key]) => key !== "emailRecipients" && key !== "emailSubject");
+    const entries = Object.entries(metadata).filter(([key]) => key !== "emailRecipients" &&
+        key !== "emailSubject" &&
+        key !== "webhookUrl" &&
+        key !== "slackWebhookUrl");
     return entries.length ? Object.fromEntries(entries) : null;
 }
 function slackText(severity, title, body) {

package/dist/notifications/channels.js.map

@@ -1 +1 @@
-{"version":3,"file":"channels.js","sourceRoot":"","sources":["../../src/notifications/channels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,GAChB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAG5D,IAAI,WAAW,GAAG,KAAK,CAAC;AAExB,MAAM,UAAU,mCAAmC;IACjD,IAAI,WAAW;QAAE,OAAO;IACxB,WAAW,GAAG,IAAI,CAAC;IAEnB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAClD,IAAI,GAAG,EAAE,CAAC;QACR,2BAA2B,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC;IAC7D,IAAI,QAAQ,EAAE,CAAC;QACb,2BAA2B,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,EAAE,CAAC;IAC3E,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACvE,2BAA2B,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,WAAmB;IAC/C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IAC5D,OAAO;QACL,IAAI,EAAE,SAAS;QACf,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI;YACvB,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,qBAAqB,CAClD,WAAW,EACX,YAAY,EACZ,IAAI,CAAC,KAAK,EACV,SAAS,CACV,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,aAAa,CAC7B,GAAG,EACH;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC;aACH,EACD,EAAE,YAAY,EAAE,CAAC,EAAE,CACpB,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,GACnE,CAAC,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EACnC,EAAE,CACH,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,WAAmB;IACpD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;IAClE,OAAO;QACL,IAAI,EAAE,OAAO;QACb,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI;YACvB,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,qBAAqB,CAClD,WAAW,EACX,YAAY,EACZ,IAAI,CAAC,KAAK,EACV,eAAe,CAChB,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,aAAa,CAC7B,GAAG,EACH;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC;oBACxD,MAAM,EAAE;wBACN;4BACE,IAAI,EAAE,SAAS;4BACf,IAAI,EAAE;gCACJ,IAAI,EAAE,QAAQ;gCACd,IAAI,EAAE,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG;6BACtC;yBACF;wBACD,GAAG,CAAC,KAAK,CAAC,IAAI;4BACZ,CAAC,CAAC;gCACE;oCACE,IAAI,EAAE,SAAS;oCACf,IAAI,EAAE;wCACJ,IAAI,EAAE,QAAQ;wCACd,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC;qCAC9B;iCACF;6BACF;4BACH,CAAC,CAAC,EAAE,CAAC;wBACP;4BACE,IAAI,EAAE,SAAS;4BACf,QAAQ,EAAE;gCACR;oCACE,IAAI,EAAE,QAAQ;oCACd,IAAI,EAAE,eAAe,KAAK,CAAC,QAAQ,cAAc,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;iCAC3E;6BACF;yBACF;qBACF;iBACF,CAAC;aACH,EACD,EAAE,YAAY,EAAE,CAAC,EAAE,CACpB,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CACb,iCAAiC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,GACzE,CAAC,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EACnC,EAAE,CACH,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO;QACL,IAAI,EAAE,OAAO;QACb,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,UAAU,GAAG,2BAA2B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YACpC,MAAM,OAAO,GACX,OAAO,KAAK,CAAC,QAAQ,EAAE,YAAY,KAAK,QAAQ;gBAChD,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE;gBAChC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE;gBACpC,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACpD,MAAM,YAAY,GAAG,QAAQ;gBAC3B,CAAC,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;gBACvD,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,OAAO,KAAK,CAAC,IAAI,IAAI,EAAE,GAAG,YAAY,EAAE,CAAC;YACpE,MAAM,IAAI,GAAG;gBACX,cAAc,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe;gBACpD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBACpD,QAAQ;oBACN,CAAC,CAAC,QAAQ,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ;oBAC/D,CAAC,CAAC,EAAE;aACP,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAEX,MAAM,OAAO,CAAC,GAAG,CACf,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACpB,SAAS,CAAC;gBACR,EAAE;gBACF,OAAO;gBACP,IAAI;gBACJ,IAAI;aACL,CAAC,CACH,CACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,WAAmB,EACnB,YAAgC,EAChC,KAAa,EACb,KAAa;IAEb,4EAA4E;IAC5E,4EAA4E;IAC5E,8CAA8C;IAC9C,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,MAAM,oBAAoB,CAClD,WAAW,EACX,MAAM,EACN,KAAK,CACN,CAAC;IACF,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IACF,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,oBAAoB,CACnD,YAAY,EACZ,MAAM,EACN,KAAK,CACN,CAAC;QACF,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED,sEAAsE;IACtE,oEAAoE;IACpE,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CACzB,IAAI,GAAG,CACL,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CACtE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACb,CACF,CACF,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAClC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAC7D,CAAC;IACF,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAC3B,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,mBAAmB,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,qCAAqC,IAAI,GAAG,CAChG,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,2BAA2B,CAClC,QAA6C;IAE7C,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QACxC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,OAAO,KAAK;QACV,CAAC,CAAC,KAAK;aACF,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,OAAO,CAAC;QACpB,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,kBAAkB,CACzB,QAA6C;IAE7C,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAC7C,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,iBAAiB,IAAI,GAAG,KAAK,cAAc,CAC/D,CAAC;IACF,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED,SAAS,SAAS,CAChB,QAAgB,EAChB,KAAa,EACb,IAAwB;IAExB,OAAO,IAAI,QAAQ,KAAK,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAAC,GAAa;IAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IACrC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC;IACjB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACxB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,OAAO,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAClC,CAAC","sourcesContent":["/**\n * Built-in notification channels.\n *\n * Set environment variables to auto-register the webhook channel at startup.\n * Extra channels can be registered at any time via\n * `registerNotificationChannel()` from a server plugin.\n *\n * NOTIFICATIONS_WEBHOOK_URL  → POST notifications as JSON to this URL.\n *                              Supports `${keys.NAME}` substitution — the raw\n *                              value never enters the agent context.\n * NOTIFICATIONS_WEBHOOK_AUTH → optional `Authorization` header value (also\n *                              supports `${keys.NAME}`).\n * NOTIFICATIONS_SLACK_WEBHOOK_URL\n *                            → POST notifications to a Slack incoming webhook.\n *                              Supports `${keys.NAME}` substitution.\n * NOTIFICATIONS_EMAIL_CHANNEL=1\n *                            → enable the built-in email channel for\n *                              per-notification recipients.\n * NOTIFICATIONS_EMAIL_RECIPIENTS\n *                            → comma-separated fallback recipients for email\n *                              notifications that do not pass\n *                              `metadata.emailRecipients`.\n */\n\nimport { ssrfSafeFetch } from \"../extensions/url-safety.js\";\nimport {\n  resolveKeyReferences,\n  validateUrlAllowlist,\n  getKeyAllowlist,\n} from \"../secrets/substitution.js\";\nimport { sendEmail } from \"../server/email.js\";\nimport { registerNotificationChannel } from \"./registry.js\";\nimport type { NotificationChannel } from \"./types.js\";\n\nlet _registered = false;\n\nexport function registerBuiltinNotificationChannels(): void {\n  if (_registered) return;\n  _registered = true;\n\n  const url = process.env.NOTIFICATIONS_WEBHOOK_URL;\n  if (url) {\n    registerNotificationChannel(createWebhookChannel(url));\n  }\n\n  const slackUrl = process.env.NOTIFICATIONS_SLACK_WEBHOOK_URL;\n  if (slackUrl) {\n    registerNotificationChannel(createSlackWebhookChannel(slackUrl));\n  }\n\n  const emailRecipients = process.env.NOTIFICATIONS_EMAIL_RECIPIENTS?.trim();\n  if (process.env.NOTIFICATIONS_EMAIL_CHANNEL === \"1\" || emailRecipients) {\n    registerNotificationChannel(createEmailChannel());\n  }\n}\n\nfunction createWebhookChannel(urlTemplate: string): NotificationChannel {\n  const authTemplate = process.env.NOTIFICATIONS_WEBHOOK_AUTH;\n  return {\n    name: \"webhook\",\n    async deliver(input, meta) {\n      const { url, headers } = await resolveWebhookRequest(\n        urlTemplate,\n        authTemplate,\n        meta.owner,\n        \"webhook\",\n      );\n      const res = await ssrfSafeFetch(\n        url,\n        {\n          method: \"POST\",\n          headers,\n          body: JSON.stringify({\n            severity: input.severity,\n            title: input.title,\n            body: input.body,\n            metadata: input.metadata,\n            owner: meta.owner,\n            emittedAt: new Date().toISOString(),\n          }),\n        },\n        { maxRedirects: 3 },\n      );\n      if (!res.ok) {\n        throw new Error(\n          `[notifications] webhook ${new URL(url).origin} returned ${res.status}${\n            (await readErrorSnippet(res)) || \"\"\n          }`,\n        );\n      }\n    },\n  };\n}\n\nfunction createSlackWebhookChannel(urlTemplate: string): NotificationChannel {\n  const authTemplate = process.env.NOTIFICATIONS_SLACK_WEBHOOK_AUTH;\n  return {\n    name: \"slack\",\n    async deliver(input, meta) {\n      const { url, headers } = await resolveWebhookRequest(\n        urlTemplate,\n        authTemplate,\n        meta.owner,\n        \"Slack webhook\",\n      );\n      const res = await ssrfSafeFetch(\n        url,\n        {\n          method: \"POST\",\n          headers,\n          body: JSON.stringify({\n            text: slackText(input.severity, input.title, input.body),\n            blocks: [\n              {\n                type: \"section\",\n                text: {\n                  type: \"mrkdwn\",\n                  text: `*${escapeSlack(input.title)}*`,\n                },\n              },\n              ...(input.body\n                ? [\n                    {\n                      type: \"section\",\n                      text: {\n                        type: \"mrkdwn\",\n                        text: escapeSlack(input.body),\n                      },\n                    },\n                  ]\n                : []),\n              {\n                type: \"context\",\n                elements: [\n                  {\n                    type: \"mrkdwn\",\n                    text: `Severity: \\`${input.severity}\\`  Owner: ${escapeSlack(meta.owner)}`,\n                  },\n                ],\n              },\n            ],\n          }),\n        },\n        { maxRedirects: 3 },\n      );\n      if (!res.ok) {\n        throw new Error(\n          `[notifications] Slack webhook ${new URL(url).origin} returned ${res.status}${\n            (await readErrorSnippet(res)) || \"\"\n          }`,\n        );\n      }\n    },\n  };\n}\n\nfunction createEmailChannel(): NotificationChannel {\n  return {\n    name: \"email\",\n    async deliver(input) {\n      const recipients = notificationEmailRecipients(input.metadata);\n      if (recipients.length === 0) return;\n      const subject =\n        typeof input.metadata?.emailSubject === \"string\" &&\n        input.metadata.emailSubject.trim()\n          ? input.metadata.emailSubject.trim()\n          : `[${input.severity}] ${input.title}`;\n      const metadata = scrubEmailMetadata(input.metadata);\n      const metadataText = metadata\n        ? `\\n\\nMetadata:\\n${JSON.stringify(metadata, null, 2)}`\n        : \"\";\n      const text = `${input.title}\\n\\n${input.body ?? \"\"}${metadataText}`;\n      const html = [\n        `<p><strong>${escapeHtml(input.title)}</strong></p>`,\n        input.body ? `<p>${escapeHtml(input.body)}</p>` : \"\",\n        metadata\n          ? `<pre>${escapeHtml(JSON.stringify(metadata, null, 2))}</pre>`\n          : \"\",\n      ].join(\"\");\n\n      await Promise.all(\n        recipients.map((to) =>\n          sendEmail({\n            to,\n            subject,\n            text,\n            html,\n          }),\n        ),\n      );\n    },\n  };\n}\n\nasync function resolveWebhookRequest(\n  urlTemplate: string,\n  authTemplate: string | undefined,\n  owner: string,\n  label: string,\n): Promise<{ url: string; headers: Record<string, string> }> {\n  // Resolve `${keys.NAME}` references against the owner's user-scope secrets.\n  // Missing keys throw — the error surfaces in logs and the channel is marked\n  // un-delivered, but other channels still run.\n  const { resolved: url } = await resolveKeyReferences(\n    urlTemplate,\n    \"user\",\n    owner,\n  );\n  const headers: Record<string, string> = {\n    \"Content-Type\": \"application/json\",\n  };\n  if (authTemplate) {\n    const { resolved: auth } = await resolveKeyReferences(\n      authTemplate,\n      \"user\",\n      owner,\n    );\n    headers.Authorization = auth;\n  }\n\n  // If the user set an allowlist on a referenced key, enforce it here —\n  // origin-level check, same rule the automations fetch-tool applies.\n  const keyNames = Array.from(\n    new Set(\n      Array.from(urlTemplate.matchAll(/\\$\\{keys\\.([A-Za-z0-9_-]+)\\}/g), (m) =>\n        String(m[1]),\n      ),\n    ),\n  );\n  const allowlists = await Promise.all(\n    keyNames.map((name) => getKeyAllowlist(name, \"user\", owner)),\n  );\n  keyNames.forEach((name, i) => {\n    if (!validateUrlAllowlist(url, allowlists[i])) {\n      throw new Error(\n        `[notifications] ${label} URL ${new URL(url).origin} is not in the allowlist for key \"${name}\"`,\n      );\n    }\n  });\n  return { url, headers };\n}\n\nfunction notificationEmailRecipients(\n  metadata: Record<string, unknown> | undefined,\n): string[] {\n  const fromMetadata = stringArray(metadata?.emailRecipients);\n  const fromEnv = commaList(process.env.NOTIFICATIONS_EMAIL_RECIPIENTS);\n  const seen = new Set<string>();\n  const recipients: string[] = [];\n  for (const raw of [...fromMetadata, ...fromEnv]) {\n    const email = raw.trim().toLowerCase();\n    if (!email || seen.has(email)) continue;\n    seen.add(email);\n    recipients.push(email);\n  }\n  return recipients;\n}\n\nfunction stringArray(value: unknown): string[] {\n  if (!Array.isArray(value)) return [];\n  return value.filter((item): item is string => typeof item === \"string\");\n}\n\nfunction commaList(value: string | undefined): string[] {\n  return value\n    ? value\n        .split(\",\")\n        .map((item) => item.trim())\n        .filter(Boolean)\n    : [];\n}\n\nfunction scrubEmailMetadata(\n  metadata: Record<string, unknown> | undefined,\n): Record<string, unknown> | null {\n  if (!metadata) return null;\n  const entries = Object.entries(metadata).filter(\n    ([key]) => key !== \"emailRecipients\" && key !== \"emailSubject\",\n  );\n  return entries.length ? Object.fromEntries(entries) : null;\n}\n\nfunction slackText(\n  severity: string,\n  title: string,\n  body: string | undefined,\n): string {\n  return `[${severity}] ${title}${body ? `\\n${body}` : \"\"}`;\n}\n\nfunction escapeSlack(value: string): string {\n  return value\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\");\n}\n\nfunction escapeHtml(value: string): string {\n  return value\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\");\n}\n\n/**\n * Read up to ~1 KB from the body for error context. Streams chunks so a\n * misbehaving endpoint returning a large error page doesn't pin that whole\n * payload in memory per failed webhook.\n */\nasync function readErrorSnippet(res: Response): Promise<string> {\n  const reader = res.body?.getReader();\n  if (!reader) return \"\";\n  const decoder = new TextDecoder();\n  const MAX = 1024;\n  let buf = \"\";\n  try {\n    while (buf.length < MAX) {\n      const { value, done } = await reader.read();\n      if (done) break;\n      buf += decoder.decode(value, { stream: true });\n    }\n    reader.cancel().catch(() => {});\n  } catch {\n    return \"\";\n  }\n  if (!buf) return \"\";\n  return `: ${buf.slice(0, 200)}`;\n}\n"]}
+{"version":3,"file":"channels.js","sourceRoot":"","sources":["../../src/notifications/channels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,GAChB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAG5D,IAAI,WAAW,GAAG,KAAK,CAAC;AAExB,MAAM,UAAU,mCAAmC;IACjD,IAAI,WAAW;QAAE,OAAO;IACxB,WAAW,GAAG,IAAI,CAAC;IAEnB,2BAA2B,CACzB,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAC5D,CAAC;IACF,2BAA2B,CACzB,yBAAyB,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CACvE,CAAC;IACF,4EAA4E;IAC5E,0EAA0E;IAC1E,2BAA2B,CAAC,kBAAkB,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,oBAAoB,CAC3B,cAAkC;IAElC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IAC5D,OAAO;QACL,IAAI,EAAE,SAAS;QACf,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI;YACvB,MAAM,mBAAmB,GAAG,sBAAsB,CAChD,KAAK,CAAC,QAAQ,EACd,YAAY,CACb,CAAC;YACF,MAAM,WAAW,GACf,mBAAmB;gBACnB,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC;gBAC5C,cAAc,EAAE,IAAI,EAAE,CAAC;YACzB,mEAAmE;YACnE,uEAAuE;YACvE,IAAI,CAAC,WAAW;gBAAE,OAAO,KAAK,CAAC;YAC/B,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,qBAAqB,CAClD,WAAW,EACX,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,EAC9C,IAAI,CAAC,KAAK,EACV,SAAS,CACV,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,aAAa,CAC7B,GAAG,EACH;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,QAAQ,EAAE,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC;oBAC/C,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC;aACH,EACD,EAAE,YAAY,EAAE,CAAC,EAAE,CACpB,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,GACnE,CAAC,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EACnC,EAAE,CACH,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,cAAkC;IAElC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;IAClE,OAAO;QACL,IAAI,EAAE,OAAO;QACb,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI;YACvB,MAAM,mBAAmB,GAAG,sBAAsB,CAChD,KAAK,CAAC,QAAQ,EACd,iBAAiB,CAClB,CAAC;YACF,MAAM,WAAW,GACf,mBAAmB;gBACnB,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC;gBACjD,cAAc,EAAE,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,WAAW;gBAAE,OAAO,KAAK,CAAC;YAC/B,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,qBAAqB,CAClD,WAAW,EACX,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,EAC9C,IAAI,CAAC,KAAK,EACV,eAAe,CAChB,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,aAAa,CAC7B,GAAG,EACH;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC;oBACxD,MAAM,EAAE;wBACN;4BACE,IAAI,EAAE,SAAS;4BACf,IAAI,EAAE;gCACJ,IAAI,EAAE,QAAQ;gCACd,IAAI,EAAE,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG;6BACtC;yBACF;wBACD,GAAG,CAAC,KAAK,CAAC,IAAI;4BACZ,CAAC,CAAC;gCACE;oCACE,IAAI,EAAE,SAAS;oCACf,IAAI,EAAE;wCACJ,IAAI,EAAE,QAAQ;wCACd,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC;qCAC9B;iCACF;6BACF;4BACH,CAAC,CAAC,EAAE,CAAC;wBACP;4BACE,IAAI,EAAE,SAAS;4BACf,QAAQ,EAAE;gCACR;oCACE,IAAI,EAAE,QAAQ;oCACd,IAAI,EAAE,eAAe,KAAK,CAAC,QAAQ,cAAc,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;iCAC3E;6BACF;yBACF;qBACF;iBACF,CAAC;aACH,EACD,EAAE,YAAY,EAAE,CAAC,EAAE,CACpB,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CACb,iCAAiC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,GACzE,CAAC,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EACnC,EAAE,CACH,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO;QACL,IAAI,EAAE,OAAO;QACb,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,UAAU,GAAG,2BAA2B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1C,MAAM,OAAO,GACX,OAAO,KAAK,CAAC,QAAQ,EAAE,YAAY,KAAK,QAAQ;gBAChD,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE;gBAChC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE;gBACpC,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACpD,MAAM,YAAY,GAAG,QAAQ;gBAC3B,CAAC,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;gBACvD,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,OAAO,KAAK,CAAC,IAAI,IAAI,EAAE,GAAG,YAAY,EAAE,CAAC;YACpE,MAAM,IAAI,GAAG;gBACX,cAAc,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe;gBACpD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBACpD,QAAQ;oBACN,CAAC,CAAC,QAAQ,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ;oBAC/D,CAAC,CAAC,EAAE;aACP,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAEX,MAAM,OAAO,CAAC,GAAG,CACf,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACpB,SAAS,CAAC;gBACR,EAAE;gBACF,OAAO;gBACP,IAAI;gBACJ,IAAI;aACL,CAAC,CACH,CACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,WAAmB,EACnB,YAAgC,EAChC,KAAa,EACb,KAAa;IAEb,4EAA4E;IAC5E,4EAA4E;IAC5E,8CAA8C;IAC9C,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,MAAM,oBAAoB,CAClD,WAAW,EACX,MAAM,EACN,KAAK,CACN,CAAC;IACF,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IACF,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,oBAAoB,CACnD,YAAY,EACZ,MAAM,EACN,KAAK,CACN,CAAC;QACF,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED,sEAAsE;IACtE,oEAAoE;IACpE,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CACzB,IAAI,GAAG,CACL,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CACtE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACb,CACF,CACF,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAClC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAC7D,CAAC;IACF,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAC3B,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,mBAAmB,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,qCAAqC,IAAI,GAAG,CAChG,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,cAAc,CACrB,QAAuC,EACvC,GAAW;IAEX,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,IAAI,SAAS,CAAC;AAC9B,CAAC;AAED,SAAS,sBAAsB,CAC7B,QAAuC,EACvC,GAAW;IAEX,MAAM,QAAQ,GAAG,QAAQ,EAAE,QAAQ,CAAC;IACpC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAI,QAAoC,CAAC,GAAG,CAAC,CAAC;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,IAAI,SAAS,CAAC;AAC9B,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAA6C;IAE7C,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAC7C,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CACR,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,YAAY,IAAI,GAAG,KAAK,iBAAiB,CAC1E,CAAC;IACF,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC;AAED,SAAS,2BAA2B,CAClC,QAA6C;IAE7C,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QACxC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,OAAO,KAAK;QACV,CAAC,CAAC,KAAK;aACF,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,OAAO,CAAC;QACpB,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,kBAAkB,CACzB,QAA6C;IAE7C,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAC7C,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CACR,GAAG,KAAK,iBAAiB;QACzB,GAAG,KAAK,cAAc;QACtB,GAAG,KAAK,YAAY;QACpB,GAAG,KAAK,iBAAiB,CAC5B,CAAC;IACF,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED,SAAS,SAAS,CAChB,QAAgB,EAChB,KAAa,EACb,IAAwB;IAExB,OAAO,IAAI,QAAQ,KAAK,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAAC,GAAa;IAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IACrC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC;IACjB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACxB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,OAAO,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAClC,CAAC","sourcesContent":["/**\n * Built-in notification channels.\n *\n * Webhook and Slack are always registered. Delivery uses (in order):\n *   1. per-notification `metadata.webhookUrl` / `metadata.slackWebhookUrl`\n *   2. the matching `NOTIFICATIONS_*` env URL (workspace default)\n * If neither is set, that channel no-ops for the emission.\n *\n * Extra channels can be registered at any time via\n * `registerNotificationChannel()` from a server plugin.\n *\n * NOTIFICATIONS_WEBHOOK_URL  → default POST JSON URL when metadata omits one.\n *                              Supports `${keys.NAME}` substitution — the raw\n *                              value never enters the agent context.\n * NOTIFICATIONS_WEBHOOK_AUTH → optional `Authorization` header value (also\n *                              supports `${keys.NAME}`).\n * NOTIFICATIONS_SLACK_WEBHOOK_URL\n *                            → default Slack incoming webhook when metadata\n *                              omits `slackWebhookUrl`.\n *                              Supports `${keys.NAME}` substitution.\n * NOTIFICATIONS_EMAIL_CHANNEL=1\n *                            → enable the built-in email channel for\n *                              per-notification recipients.\n * NOTIFICATIONS_EMAIL_RECIPIENTS\n *                            → comma-separated fallback recipients for email\n *                              notifications that do not pass\n *                              `metadata.emailRecipients`.\n */\n\nimport { ssrfSafeFetch } from \"../extensions/url-safety.js\";\nimport {\n  resolveKeyReferences,\n  validateUrlAllowlist,\n  getKeyAllowlist,\n} from \"../secrets/substitution.js\";\nimport { sendEmail } from \"../server/email.js\";\nimport { registerNotificationChannel } from \"./registry.js\";\nimport type { NotificationChannel, NotificationInput } from \"./types.js\";\n\nlet _registered = false;\n\nexport function registerBuiltinNotificationChannels(): void {\n  if (_registered) return;\n  _registered = true;\n\n  registerNotificationChannel(\n    createWebhookChannel(process.env.NOTIFICATIONS_WEBHOOK_URL),\n  );\n  registerNotificationChannel(\n    createSlackWebhookChannel(process.env.NOTIFICATIONS_SLACK_WEBHOOK_URL),\n  );\n  // Email is always registered so per-notification `metadata.emailRecipients`\n  // work without a workspace-wide env flag (same pattern as webhook/slack).\n  registerNotificationChannel(createEmailChannel());\n}\n\nfunction createWebhookChannel(\n  envUrlTemplate: string | undefined,\n): NotificationChannel {\n  const authTemplate = process.env.NOTIFICATIONS_WEBHOOK_AUTH;\n  return {\n    name: \"webhook\",\n    async deliver(input, meta) {\n      const overrideUrlTemplate = deliveryMetadataString(\n        input.metadata,\n        \"webhookUrl\",\n      );\n      const urlTemplate =\n        overrideUrlTemplate ??\n        metadataString(input.metadata, \"webhookUrl\") ??\n        envUrlTemplate?.trim();\n      // No-op when neither a per-notification nor workspace URL is set —\n      // mirrors email's empty-recipients behavior so notify-all stays quiet.\n      if (!urlTemplate) return false;\n      const { url, headers } = await resolveWebhookRequest(\n        urlTemplate,\n        overrideUrlTemplate ? undefined : authTemplate,\n        meta.owner,\n        \"webhook\",\n      );\n      const res = await ssrfSafeFetch(\n        url,\n        {\n          method: \"POST\",\n          headers,\n          body: JSON.stringify({\n            severity: input.severity,\n            title: input.title,\n            body: input.body,\n            metadata: scrubDeliveryMetadata(input.metadata),\n            owner: meta.owner,\n            emittedAt: new Date().toISOString(),\n          }),\n        },\n        { maxRedirects: 3 },\n      );\n      if (!res.ok) {\n        throw new Error(\n          `[notifications] webhook ${new URL(url).origin} returned ${res.status}${\n            (await readErrorSnippet(res)) || \"\"\n          }`,\n        );\n      }\n    },\n  };\n}\n\nfunction createSlackWebhookChannel(\n  envUrlTemplate: string | undefined,\n): NotificationChannel {\n  const authTemplate = process.env.NOTIFICATIONS_SLACK_WEBHOOK_AUTH;\n  return {\n    name: \"slack\",\n    async deliver(input, meta) {\n      const overrideUrlTemplate = deliveryMetadataString(\n        input.metadata,\n        \"slackWebhookUrl\",\n      );\n      const urlTemplate =\n        overrideUrlTemplate ??\n        metadataString(input.metadata, \"slackWebhookUrl\") ??\n        envUrlTemplate?.trim();\n      if (!urlTemplate) return false;\n      const { url, headers } = await resolveWebhookRequest(\n        urlTemplate,\n        overrideUrlTemplate ? undefined : authTemplate,\n        meta.owner,\n        \"Slack webhook\",\n      );\n      const res = await ssrfSafeFetch(\n        url,\n        {\n          method: \"POST\",\n          headers,\n          body: JSON.stringify({\n            text: slackText(input.severity, input.title, input.body),\n            blocks: [\n              {\n                type: \"section\",\n                text: {\n                  type: \"mrkdwn\",\n                  text: `*${escapeSlack(input.title)}*`,\n                },\n              },\n              ...(input.body\n                ? [\n                    {\n                      type: \"section\",\n                      text: {\n                        type: \"mrkdwn\",\n                        text: escapeSlack(input.body),\n                      },\n                    },\n                  ]\n                : []),\n              {\n                type: \"context\",\n                elements: [\n                  {\n                    type: \"mrkdwn\",\n                    text: `Severity: \\`${input.severity}\\`  Owner: ${escapeSlack(meta.owner)}`,\n                  },\n                ],\n              },\n            ],\n          }),\n        },\n        { maxRedirects: 3 },\n      );\n      if (!res.ok) {\n        throw new Error(\n          `[notifications] Slack webhook ${new URL(url).origin} returned ${res.status}${\n            (await readErrorSnippet(res)) || \"\"\n          }`,\n        );\n      }\n    },\n  };\n}\n\nfunction createEmailChannel(): NotificationChannel {\n  return {\n    name: \"email\",\n    async deliver(input) {\n      const recipients = notificationEmailRecipients(input.metadata);\n      if (recipients.length === 0) return false;\n      const subject =\n        typeof input.metadata?.emailSubject === \"string\" &&\n        input.metadata.emailSubject.trim()\n          ? input.metadata.emailSubject.trim()\n          : `[${input.severity}] ${input.title}`;\n      const metadata = scrubEmailMetadata(input.metadata);\n      const metadataText = metadata\n        ? `\\n\\nMetadata:\\n${JSON.stringify(metadata, null, 2)}`\n        : \"\";\n      const text = `${input.title}\\n\\n${input.body ?? \"\"}${metadataText}`;\n      const html = [\n        `<p><strong>${escapeHtml(input.title)}</strong></p>`,\n        input.body ? `<p>${escapeHtml(input.body)}</p>` : \"\",\n        metadata\n          ? `<pre>${escapeHtml(JSON.stringify(metadata, null, 2))}</pre>`\n          : \"\",\n      ].join(\"\");\n\n      await Promise.all(\n        recipients.map((to) =>\n          sendEmail({\n            to,\n            subject,\n            text,\n            html,\n          }),\n        ),\n      );\n    },\n  };\n}\n\nasync function resolveWebhookRequest(\n  urlTemplate: string,\n  authTemplate: string | undefined,\n  owner: string,\n  label: string,\n): Promise<{ url: string; headers: Record<string, string> }> {\n  // Resolve `${keys.NAME}` references against the owner's user-scope secrets.\n  // Missing keys throw — the error surfaces in logs and the channel is marked\n  // un-delivered, but other channels still run.\n  const { resolved: url } = await resolveKeyReferences(\n    urlTemplate,\n    \"user\",\n    owner,\n  );\n  const headers: Record<string, string> = {\n    \"Content-Type\": \"application/json\",\n  };\n  if (authTemplate) {\n    const { resolved: auth } = await resolveKeyReferences(\n      authTemplate,\n      \"user\",\n      owner,\n    );\n    headers.Authorization = auth;\n  }\n\n  // If the user set an allowlist on a referenced key, enforce it here —\n  // origin-level check, same rule the automations fetch-tool applies.\n  const keyNames = Array.from(\n    new Set(\n      Array.from(urlTemplate.matchAll(/\\$\\{keys\\.([A-Za-z0-9_-]+)\\}/g), (m) =>\n        String(m[1]),\n      ),\n    ),\n  );\n  const allowlists = await Promise.all(\n    keyNames.map((name) => getKeyAllowlist(name, \"user\", owner)),\n  );\n  keyNames.forEach((name, i) => {\n    if (!validateUrlAllowlist(url, allowlists[i])) {\n      throw new Error(\n        `[notifications] ${label} URL ${new URL(url).origin} is not in the allowlist for key \"${name}\"`,\n      );\n    }\n  });\n  return { url, headers };\n}\n\nfunction metadataString(\n  metadata: NotificationInput[\"metadata\"],\n  key: string,\n): string | undefined {\n  const value = metadata?.[key];\n  if (typeof value !== \"string\") return undefined;\n  const trimmed = value.trim();\n  return trimmed || undefined;\n}\n\nfunction deliveryMetadataString(\n  metadata: NotificationInput[\"metadata\"],\n  key: string,\n): string | undefined {\n  const delivery = metadata?.delivery;\n  if (!delivery || typeof delivery !== \"object\" || Array.isArray(delivery)) {\n    return undefined;\n  }\n  const value = (delivery as Record<string, unknown>)[key];\n  if (typeof value !== \"string\") return undefined;\n  const trimmed = value.trim();\n  return trimmed || undefined;\n}\n\nfunction scrubDeliveryMetadata(\n  metadata: Record<string, unknown> | undefined,\n): Record<string, unknown> | undefined {\n  if (!metadata) return undefined;\n  const entries = Object.entries(metadata).filter(\n    ([key]) =>\n      key !== \"delivery\" && key !== \"webhookUrl\" && key !== \"slackWebhookUrl\",\n  );\n  return entries.length ? Object.fromEntries(entries) : undefined;\n}\n\nfunction notificationEmailRecipients(\n  metadata: Record<string, unknown> | undefined,\n): string[] {\n  const fromMetadata = stringArray(metadata?.emailRecipients);\n  const fromEnv = commaList(process.env.NOTIFICATIONS_EMAIL_RECIPIENTS);\n  const seen = new Set<string>();\n  const recipients: string[] = [];\n  for (const raw of [...fromMetadata, ...fromEnv]) {\n    const email = raw.trim().toLowerCase();\n    if (!email || seen.has(email)) continue;\n    seen.add(email);\n    recipients.push(email);\n  }\n  return recipients;\n}\n\nfunction stringArray(value: unknown): string[] {\n  if (!Array.isArray(value)) return [];\n  return value.filter((item): item is string => typeof item === \"string\");\n}\n\nfunction commaList(value: string | undefined): string[] {\n  return value\n    ? value\n        .split(\",\")\n        .map((item) => item.trim())\n        .filter(Boolean)\n    : [];\n}\n\nfunction scrubEmailMetadata(\n  metadata: Record<string, unknown> | undefined,\n): Record<string, unknown> | null {\n  if (!metadata) return null;\n  const entries = Object.entries(metadata).filter(\n    ([key]) =>\n      key !== \"emailRecipients\" &&\n      key !== \"emailSubject\" &&\n      key !== \"webhookUrl\" &&\n      key !== \"slackWebhookUrl\",\n  );\n  return entries.length ? Object.fromEntries(entries) : null;\n}\n\nfunction slackText(\n  severity: string,\n  title: string,\n  body: string | undefined,\n): string {\n  return `[${severity}] ${title}${body ? `\\n${body}` : \"\"}`;\n}\n\nfunction escapeSlack(value: string): string {\n  return value\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\");\n}\n\nfunction escapeHtml(value: string): string {\n  return value\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\");\n}\n\n/**\n * Read up to ~1 KB from the body for error context. Streams chunks so a\n * misbehaving endpoint returning a large error page doesn't pin that whole\n * payload in memory per failed webhook.\n */\nasync function readErrorSnippet(res: Response): Promise<string> {\n  const reader = res.body?.getReader();\n  if (!reader) return \"\";\n  const decoder = new TextDecoder();\n  const MAX = 1024;\n  let buf = \"\";\n  try {\n    while (buf.length < MAX) {\n      const { value, done } = await reader.read();\n      if (done) break;\n      buf += decoder.decode(value, { stream: true });\n    }\n    reader.cancel().catch(() => {});\n  } catch {\n    return \"\";\n  }\n  if (!buf) return \"\";\n  return `: ${buf.slice(0, 200)}`;\n}\n"]}

package/dist/notifications/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/notifications/registry.ts"],"names":[],"mappings":"AAOA,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,0BAA0B;IACzC,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAiCD,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,mBAAmB,GAC3B,IAAI,CAUN;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED,wBAAgB,wBAAwB,IAAI,MAAM,EAAE,CAEnD;AAgBD,wBAAsB,MAAM,CAC1B,KAAK,EAAE,iBAAiB,EACxB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAEnC;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,iBAAiB,EACxB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,0BAA0B,CAAC,CAoFrC;AASD,mDAAmD;AACnD,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AAED,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,kBAAkB,EAClB,WAAW,GACZ,MAAM,YAAY,CAAC"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/notifications/registry.ts"],"names":[],"mappings":"AAOA,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,0BAA0B;IACzC,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAiCD,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,mBAAmB,GAC3B,IAAI,CAUN;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED,wBAAgB,wBAAwB,IAAI,MAAM,EAAE,CAEnD;AAgBD,wBAAsB,MAAM,CAC1B,KAAK,EAAE,iBAAiB,EACxB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAEnC;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,iBAAiB,EACxB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,0BAA0B,CAAC,CAuFrC;AAoBD,mDAAmD;AACnD,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AAED,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,kBAAkB,EAClB,WAAW,GACZ,MAAM,YAAY,CAAC"}

package/dist/notifications/registry.js

@@ -70,6 +70,7 @@ export async function notifyWithDelivery(input, meta) {
         body: truncate(input.body, MAX_BODY_LEN),
     };
     const channels = selectChannels(input.channels);
+    const storedMetadata = scrubStoredMetadata(input.metadata);
     // The inbox channel is always included unless explicitly excluded.
     const runInbox = !input.channels || input.channels.includes("inbox");
     const delivered = [];
@@ -83,7 +84,7 @@ export async function notifyWithDelivery(input, meta) {
                 severity: input.severity,
                 title: input.title,
                 body: input.body,
-                metadata: input.metadata,
+                metadata: storedMetadata,
                 deliveredChannels: ["inbox"],
             });
             delivered.push("inbox");
@@ -94,12 +95,16 @@ export async function notifyWithDelivery(input, meta) {
     }
     // Await every channel so a 500-ing webhook doesn't end up in `delivered`.
     const results = await Promise.allSettled(channels.map(async (channel) => {
-        await channel.deliver(input, meta);
+        const delivered = await channel.deliver(input, meta);
+        // Explicit `false` means the channel skipped (no URL / recipients).
+        if (delivered === false)
+            return null;
         return channel.name;
     }));
     results.forEach((r, i) => {
         if (r.status === "fulfilled") {
-            delivered.push(r.value);
+            if (r.value)
+                delivered.push(r.value);
         }
         else {
             console.error(`[notifications] channel "${channels[i].name}" failed:`, r.reason);
@@ -134,6 +139,12 @@ export async function notifyWithDelivery(input, meta) {
     }
     return { notification: stored, deliveredChannels: delivered };
 }
+function scrubStoredMetadata(metadata) {
+    if (!metadata)
+        return undefined;
+    const entries = Object.entries(metadata).filter(([key]) => key !== "delivery" && key !== "webhookUrl" && key !== "slackWebhookUrl");
+    return entries.length ? Object.fromEntries(entries) : undefined;
+}
 function selectChannels(allowlist) {
     const registry = getRegistry();
     const all = Array.from(registry.values());

package/dist/notifications/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/notifications/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,IAAI,IAAI,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EACL,uBAAuB,GAKxB,MAAM,YAAY,CAAC;AAOpB,aAAa,CAAC;IACZ,IAAI,EAAE,mBAAmB;IACzB,WAAW,EACT,mIAAmI;IACrI,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACrC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC;QACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACvC,CAAgD;IACjD,OAAO,EAAE;QACP,cAAc,EAAE,SAAS;QACzB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,gBAAgB;QACvB,IAAI,EAAE,2BAA2B;QACjC,iBAAiB,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;KACxC;CACF,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;AAK7E,SAAS,WAAW;IAClB,MAAM,CAAC,GAAG,UAA2C,CAAC;IACtD,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;QAAE,CAAC,CAAC,YAAY,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;IAClD,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAA4B;IAE5B,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,WAAW,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,IAAY;IACxD,OAAO,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,KAAwB,EACxB,IAAsB;IAEtB,OAAO,CAAC,MAAM,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAwB,EACxB,IAAsB;IAEtB,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,KAAK,GAAG;QACN,GAAG,KAAK;QACR,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC;QAC3C,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC;KACzC,CAAC;IACF,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAEhD,mEAAmE;IACnE,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,MAAgC,CAAC;IAErC,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,qEAAqE;YACrE,qEAAqE;YACrE,MAAM,GAAG,MAAM,kBAAkB,CAAC;gBAChC,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,iBAAiB,EAAE,CAAC,OAAO,CAAC;aAC7B,CAAC,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC7B,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC,IAAI,CAAC;IACtB,CAAC,CAAC,CACH,CAAC;IACF,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACvB,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC7B,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CACX,4BAA4B,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,EACvD,CAAC,CAAC,MAAM,CACT,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;IAC7D,IAAI,MAAM,IAAI,eAAe,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,uBAAuB,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACpD,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,kDAAkD,EAAE,GAAG,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,uEAAuE;IACvE,0CAA0C;IAC1C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,YAAY,CACV,mBAAmB,EACnB;gBACE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,iBAAiB,EAAE,SAAS;aAC7B,EACD,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CACtB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,cAAc,CAAC,SAAoB;IAC1C,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,SAAS;QAAE,OAAO,GAAG,CAAC;IAC3B,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,2BAA2B;IACzC,WAAW,EAAE,CAAC,KAAK,EAAE,CAAC;AACxB,CAAC;AAED,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,kBAAkB,EAClB,WAAW,GACZ,MAAM,YAAY,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { emit as emitBusEvent } from \"../event-bus/bus.js\";\nimport { registerEvent } from \"../event-bus/registry.js\";\nimport type { EventDefinition } from \"../event-bus/types.js\";\nimport { truncate } from \"../shared/truncate.js\";\nimport { insertNotification, updateDeliveredChannels } from \"./store.js\";\nimport {\n  NOTIFICATION_SEVERITIES,\n  type NotificationChannel,\n  type NotificationInput,\n  type NotificationMeta,\n  type Notification,\n} from \"./types.js\";\n\nexport interface NotificationDeliveryResult {\n  notification?: Notification;\n  deliveredChannels: string[];\n}\n\nregisterEvent({\n  name: \"notification.sent\",\n  description:\n    \"Fires after notify() delivers to at least one channel. Automations can chain off this — e.g. fan critical notifications to Slack.\",\n  payloadSchema: z.object({\n    notificationId: z.string().optional(),\n    severity: z.enum(NOTIFICATION_SEVERITIES),\n    title: z.string(),\n    body: z.string().optional(),\n    deliveredChannels: z.array(z.string()),\n  }) as unknown as EventDefinition[\"payloadSchema\"],\n  example: {\n    notificationId: \"ntf_abc\",\n    severity: \"critical\",\n    title: \"Payment failed\",\n    body: \"Card ending 4242 declined\",\n    deliveredChannels: [\"inbox\", \"webhook\"],\n  },\n});\n\nconst REGISTRY_KEY = Symbol.for(\"@agent-native/core/notifications.registry\");\ninterface GlobalWithRegistry {\n  [REGISTRY_KEY]?: Map<string, NotificationChannel>;\n}\n\nfunction getRegistry(): Map<string, NotificationChannel> {\n  const g = globalThis as unknown as GlobalWithRegistry;\n  if (!g[REGISTRY_KEY]) g[REGISTRY_KEY] = new Map();\n  return g[REGISTRY_KEY];\n}\n\nexport function registerNotificationChannel(\n  channel: NotificationChannel,\n): void {\n  if (!channel?.name) {\n    throw new Error(\"registerNotificationChannel: channel.name is required\");\n  }\n  if (typeof channel.deliver !== \"function\") {\n    throw new Error(\n      \"registerNotificationChannel: channel.deliver must be a function\",\n    );\n  }\n  getRegistry().set(channel.name, channel);\n}\n\nexport function unregisterNotificationChannel(name: string): boolean {\n  return getRegistry().delete(name);\n}\n\nexport function listNotificationChannels(): string[] {\n  return Array.from(getRegistry().keys());\n}\n\n/**\n * Deliver a notification.\n *\n * The `inbox` channel always persists a row that drives the in-app UI\n * (bell + toast). Additional channels (webhook, custom) run in parallel,\n * best-effort. Returns the stored Notification when `inbox` ran, otherwise\n * `undefined`.\n *\n * Also emits `notification.sent` on the event bus so automations can react\n * to notifications (e.g. \"when a critical notification fires, also page me\").\n */\nconst MAX_TITLE_LEN = 100;\nconst MAX_BODY_LEN = 2000;\n\nexport async function notify(\n  input: NotificationInput,\n  meta: NotificationMeta,\n): Promise<Notification | undefined> {\n  return (await notifyWithDelivery(input, meta)).notification;\n}\n\nexport async function notifyWithDelivery(\n  input: NotificationInput,\n  meta: NotificationMeta,\n): Promise<NotificationDeliveryResult> {\n  if (!meta?.owner) {\n    throw new Error(\"notify: meta.owner is required\");\n  }\n  input = {\n    ...input,\n    title: truncate(input.title, MAX_TITLE_LEN),\n    body: truncate(input.body, MAX_BODY_LEN),\n  };\n  const channels = selectChannels(input.channels);\n\n  // The inbox channel is always included unless explicitly excluded.\n  const runInbox = !input.channels || input.channels.includes(\"inbox\");\n  const delivered: string[] = [];\n  let stored: Notification | undefined;\n\n  if (runInbox) {\n    try {\n      // Stored with just \"inbox\" first; the real delivered list is written\n      // after fan-out so a failing webhook doesn't claim it was delivered.\n      stored = await insertNotification({\n        owner: meta.owner,\n        severity: input.severity,\n        title: input.title,\n        body: input.body,\n        metadata: input.metadata,\n        deliveredChannels: [\"inbox\"],\n      });\n      delivered.push(\"inbox\");\n    } catch (err) {\n      console.error(\"[notifications] inbox persist failed:\", err);\n    }\n  }\n\n  // Await every channel so a 500-ing webhook doesn't end up in `delivered`.\n  const results = await Promise.allSettled(\n    channels.map(async (channel) => {\n      await channel.deliver(input, meta);\n      return channel.name;\n    }),\n  );\n  results.forEach((r, i) => {\n    if (r.status === \"fulfilled\") {\n      delivered.push(r.value);\n    } else {\n      console.error(\n        `[notifications] channel \"${channels[i].name}\" failed:`,\n        r.reason,\n      );\n    }\n  });\n\n  const hasExtraChannel = delivered.some((c) => c !== \"inbox\");\n  if (stored && hasExtraChannel) {\n    try {\n      await updateDeliveredChannels(stored.id, delivered);\n      stored = { ...stored, deliveredChannels: delivered };\n    } catch (err) {\n      console.error(\"[notifications] delivered-channel update failed:\", err);\n    }\n  }\n\n  // Only emit when at least one channel delivered — an emission with an\n  // empty delivery list (and likely a null notificationId) would mislead\n  // any automation chaining off this event.\n  if (delivered.length > 0) {\n    try {\n      emitBusEvent(\n        \"notification.sent\",\n        {\n          notificationId: stored?.id,\n          severity: input.severity,\n          title: input.title,\n          body: input.body,\n          deliveredChannels: delivered,\n        },\n        { owner: meta.owner },\n      );\n    } catch {\n      // best-effort\n    }\n  }\n\n  return { notification: stored, deliveredChannels: delivered };\n}\n\nfunction selectChannels(allowlist?: string[]): NotificationChannel[] {\n  const registry = getRegistry();\n  const all = Array.from(registry.values());\n  if (!allowlist) return all;\n  return all.filter((c) => allowlist.includes(c.name));\n}\n\n/** Test helper — drops all registered channels. */\nexport function __resetNotificationChannels(): void {\n  getRegistry().clear();\n}\n\nexport {\n  listNotifications,\n  markNotificationRead,\n  markAllNotificationsRead,\n  deleteNotification,\n  countUnread,\n} from \"./store.js\";\n"]}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/notifications/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,IAAI,IAAI,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EACL,uBAAuB,GAKxB,MAAM,YAAY,CAAC;AAOpB,aAAa,CAAC;IACZ,IAAI,EAAE,mBAAmB;IACzB,WAAW,EACT,mIAAmI;IACrI,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACrC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC;QACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACvC,CAAgD;IACjD,OAAO,EAAE;QACP,cAAc,EAAE,SAAS;QACzB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,gBAAgB;QACvB,IAAI,EAAE,2BAA2B;QACjC,iBAAiB,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;KACxC;CACF,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;AAK7E,SAAS,WAAW;IAClB,MAAM,CAAC,GAAG,UAA2C,CAAC;IACtD,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;QAAE,CAAC,CAAC,YAAY,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;IAClD,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAA4B;IAE5B,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,WAAW,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,IAAY;IACxD,OAAO,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,KAAwB,EACxB,IAAsB;IAEtB,OAAO,CAAC,MAAM,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAwB,EACxB,IAAsB;IAEtB,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,KAAK,GAAG;QACN,GAAG,KAAK;QACR,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC;QAC3C,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC;KACzC,CAAC;IACF,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,cAAc,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAE3D,mEAAmE;IACnE,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,MAAgC,CAAC;IAErC,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,qEAAqE;YACrE,qEAAqE;YACrE,MAAM,GAAG,MAAM,kBAAkB,CAAC;gBAChC,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,cAAc;gBACxB,iBAAiB,EAAE,CAAC,OAAO,CAAC;aAC7B,CAAC,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC7B,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACrD,oEAAoE;QACpE,IAAI,SAAS,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACrC,OAAO,OAAO,CAAC,IAAI,CAAC;IACtB,CAAC,CAAC,CACH,CAAC;IACF,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACvB,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,KAAK;gBAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CACX,4BAA4B,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,EACvD,CAAC,CAAC,MAAM,CACT,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;IAC7D,IAAI,MAAM,IAAI,eAAe,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,uBAAuB,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACpD,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,kDAAkD,EAAE,GAAG,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,uEAAuE;IACvE,0CAA0C;IAC1C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,YAAY,CACV,mBAAmB,EACnB;gBACE,cAAc,EAAE,MAAM,EAAE,EAAE;gBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,iBAAiB,EAAE,SAAS;aAC7B,EACD,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CACtB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAA6C;IAE7C,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAC7C,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CACR,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,YAAY,IAAI,GAAG,KAAK,iBAAiB,CAC1E,CAAC;IACF,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC;AAED,SAAS,cAAc,CAAC,SAAoB;IAC1C,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,SAAS;QAAE,OAAO,GAAG,CAAC;IAC3B,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,2BAA2B;IACzC,WAAW,EAAE,CAAC,KAAK,EAAE,CAAC;AACxB,CAAC;AAED,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,kBAAkB,EAClB,WAAW,GACZ,MAAM,YAAY,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { emit as emitBusEvent } from \"../event-bus/bus.js\";\nimport { registerEvent } from \"../event-bus/registry.js\";\nimport type { EventDefinition } from \"../event-bus/types.js\";\nimport { truncate } from \"../shared/truncate.js\";\nimport { insertNotification, updateDeliveredChannels } from \"./store.js\";\nimport {\n  NOTIFICATION_SEVERITIES,\n  type NotificationChannel,\n  type NotificationInput,\n  type NotificationMeta,\n  type Notification,\n} from \"./types.js\";\n\nexport interface NotificationDeliveryResult {\n  notification?: Notification;\n  deliveredChannels: string[];\n}\n\nregisterEvent({\n  name: \"notification.sent\",\n  description:\n    \"Fires after notify() delivers to at least one channel. Automations can chain off this — e.g. fan critical notifications to Slack.\",\n  payloadSchema: z.object({\n    notificationId: z.string().optional(),\n    severity: z.enum(NOTIFICATION_SEVERITIES),\n    title: z.string(),\n    body: z.string().optional(),\n    deliveredChannels: z.array(z.string()),\n  }) as unknown as EventDefinition[\"payloadSchema\"],\n  example: {\n    notificationId: \"ntf_abc\",\n    severity: \"critical\",\n    title: \"Payment failed\",\n    body: \"Card ending 4242 declined\",\n    deliveredChannels: [\"inbox\", \"webhook\"],\n  },\n});\n\nconst REGISTRY_KEY = Symbol.for(\"@agent-native/core/notifications.registry\");\ninterface GlobalWithRegistry {\n  [REGISTRY_KEY]?: Map<string, NotificationChannel>;\n}\n\nfunction getRegistry(): Map<string, NotificationChannel> {\n  const g = globalThis as unknown as GlobalWithRegistry;\n  if (!g[REGISTRY_KEY]) g[REGISTRY_KEY] = new Map();\n  return g[REGISTRY_KEY];\n}\n\nexport function registerNotificationChannel(\n  channel: NotificationChannel,\n): void {\n  if (!channel?.name) {\n    throw new Error(\"registerNotificationChannel: channel.name is required\");\n  }\n  if (typeof channel.deliver !== \"function\") {\n    throw new Error(\n      \"registerNotificationChannel: channel.deliver must be a function\",\n    );\n  }\n  getRegistry().set(channel.name, channel);\n}\n\nexport function unregisterNotificationChannel(name: string): boolean {\n  return getRegistry().delete(name);\n}\n\nexport function listNotificationChannels(): string[] {\n  return Array.from(getRegistry().keys());\n}\n\n/**\n * Deliver a notification.\n *\n * The `inbox` channel always persists a row that drives the in-app UI\n * (bell + toast). Additional channels (webhook, custom) run in parallel,\n * best-effort. Returns the stored Notification when `inbox` ran, otherwise\n * `undefined`.\n *\n * Also emits `notification.sent` on the event bus so automations can react\n * to notifications (e.g. \"when a critical notification fires, also page me\").\n */\nconst MAX_TITLE_LEN = 100;\nconst MAX_BODY_LEN = 2000;\n\nexport async function notify(\n  input: NotificationInput,\n  meta: NotificationMeta,\n): Promise<Notification | undefined> {\n  return (await notifyWithDelivery(input, meta)).notification;\n}\n\nexport async function notifyWithDelivery(\n  input: NotificationInput,\n  meta: NotificationMeta,\n): Promise<NotificationDeliveryResult> {\n  if (!meta?.owner) {\n    throw new Error(\"notify: meta.owner is required\");\n  }\n  input = {\n    ...input,\n    title: truncate(input.title, MAX_TITLE_LEN),\n    body: truncate(input.body, MAX_BODY_LEN),\n  };\n  const channels = selectChannels(input.channels);\n  const storedMetadata = scrubStoredMetadata(input.metadata);\n\n  // The inbox channel is always included unless explicitly excluded.\n  const runInbox = !input.channels || input.channels.includes(\"inbox\");\n  const delivered: string[] = [];\n  let stored: Notification | undefined;\n\n  if (runInbox) {\n    try {\n      // Stored with just \"inbox\" first; the real delivered list is written\n      // after fan-out so a failing webhook doesn't claim it was delivered.\n      stored = await insertNotification({\n        owner: meta.owner,\n        severity: input.severity,\n        title: input.title,\n        body: input.body,\n        metadata: storedMetadata,\n        deliveredChannels: [\"inbox\"],\n      });\n      delivered.push(\"inbox\");\n    } catch (err) {\n      console.error(\"[notifications] inbox persist failed:\", err);\n    }\n  }\n\n  // Await every channel so a 500-ing webhook doesn't end up in `delivered`.\n  const results = await Promise.allSettled(\n    channels.map(async (channel) => {\n      const delivered = await channel.deliver(input, meta);\n      // Explicit `false` means the channel skipped (no URL / recipients).\n      if (delivered === false) return null;\n      return channel.name;\n    }),\n  );\n  results.forEach((r, i) => {\n    if (r.status === \"fulfilled\") {\n      if (r.value) delivered.push(r.value);\n    } else {\n      console.error(\n        `[notifications] channel \"${channels[i].name}\" failed:`,\n        r.reason,\n      );\n    }\n  });\n\n  const hasExtraChannel = delivered.some((c) => c !== \"inbox\");\n  if (stored && hasExtraChannel) {\n    try {\n      await updateDeliveredChannels(stored.id, delivered);\n      stored = { ...stored, deliveredChannels: delivered };\n    } catch (err) {\n      console.error(\"[notifications] delivered-channel update failed:\", err);\n    }\n  }\n\n  // Only emit when at least one channel delivered — an emission with an\n  // empty delivery list (and likely a null notificationId) would mislead\n  // any automation chaining off this event.\n  if (delivered.length > 0) {\n    try {\n      emitBusEvent(\n        \"notification.sent\",\n        {\n          notificationId: stored?.id,\n          severity: input.severity,\n          title: input.title,\n          body: input.body,\n          deliveredChannels: delivered,\n        },\n        { owner: meta.owner },\n      );\n    } catch {\n      // best-effort\n    }\n  }\n\n  return { notification: stored, deliveredChannels: delivered };\n}\n\nfunction scrubStoredMetadata(\n  metadata: Record<string, unknown> | undefined,\n): Record<string, unknown> | undefined {\n  if (!metadata) return undefined;\n  const entries = Object.entries(metadata).filter(\n    ([key]) =>\n      key !== \"delivery\" && key !== \"webhookUrl\" && key !== \"slackWebhookUrl\",\n  );\n  return entries.length ? Object.fromEntries(entries) : undefined;\n}\n\nfunction selectChannels(allowlist?: string[]): NotificationChannel[] {\n  const registry = getRegistry();\n  const all = Array.from(registry.values());\n  if (!allowlist) return all;\n  return all.filter((c) => allowlist.includes(c.name));\n}\n\n/** Test helper — drops all registered channels. */\nexport function __resetNotificationChannels(): void {\n  getRegistry().clear();\n}\n\nexport {\n  listNotifications,\n  markNotificationRead,\n  markAllNotificationsRead,\n  deleteNotification,\n  countUnread,\n} from \"./store.js\";\n"]}

package/dist/notifications/types.d.ts

@@ -37,7 +37,10 @@ export interface NotificationChannel {
     /**
      * Deliver the notification. Must be best-effort — throwing will be logged
      * but will not block other channels from running.
+     *
+     * Return `false` to skip (e.g. no URL / no recipients configured) so the
+     * channel is not recorded in `deliveredChannels`.
      */
-    deliver(input: NotificationInput, meta: NotificationMeta): void | Promise<void>;
+    deliver(input: NotificationInput, meta: NotificationMeta): void | boolean | Promise<void | boolean>;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/notifications/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/notifications/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,uBAAuB,YAAI,MAAM,EAAE,SAAS,EAAE,UAAU,CAAU,CAAC;AAChF,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,4EAA4E;IAC5E,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,OAAO,CACL,KAAK,EAAE,iBAAiB,EACxB,IAAI,EAAE,gBAAgB,GACrB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/notifications/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,uBAAuB,YAAI,MAAM,EAAE,SAAS,EAAE,UAAU,CAAU,CAAC;AAChF,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,4EAA4E;IAC5E,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;OAMG;IACH,OAAO,CACL,KAAK,EAAE,iBAAiB,EACxB,IAAI,EAAE,gBAAgB,GACrB,IAAI,GAAG,OAAO,GAAG,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC;CAC7C"}

package/dist/notifications/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/notifications/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAU,CAAC","sourcesContent":["export const NOTIFICATION_SEVERITIES = [\"info\", \"warning\", \"critical\"] as const;\nexport type NotificationSeverity = (typeof NOTIFICATION_SEVERITIES)[number];\n\nexport interface Notification {\n  id: string;\n  owner: string;\n  severity: NotificationSeverity;\n  title: string;\n  body?: string;\n  /** Arbitrary JSON metadata — URLs, entity ids, the agent turn that produced it. */\n  metadata?: Record<string, unknown>;\n  /** ISO timestamp */\n  createdAt: string;\n  /** ISO timestamp — null while unread */\n  readAt: string | null;\n  /** Channels that delivered (or attempted delivery of) this notification. */\n  deliveredChannels: string[];\n}\n\nexport interface NotificationInput {\n  severity: NotificationSeverity;\n  title: string;\n  body?: string;\n  metadata?: Record<string, unknown>;\n  /**\n   * Explicit channel allowlist for this emission. When omitted, every\n   * registered channel runs. Use to scope a single `notify()` call to a\n   * subset (e.g. `[\"inbox\"]` to skip webhooks).\n   */\n  channels?: string[];\n}\n\nexport interface NotificationMeta {\n  /** Owner email — scopes the notification in the inbox. */\n  owner: string;\n}\n\nexport interface NotificationChannel {\n  /** Unique channel name, e.g. `\"inbox\"`, `\"webhook\"`, `\"slack\"`. */\n  name: string;\n  /**\n   * Deliver the notification. Must be best-effort — throwing will be logged\n   * but will not block other channels from running.\n   */\n  deliver(\n    input: NotificationInput,\n    meta: NotificationMeta,\n  ): void | Promise<void>;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/notifications/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAU,CAAC","sourcesContent":["export const NOTIFICATION_SEVERITIES = [\"info\", \"warning\", \"critical\"] as const;\nexport type NotificationSeverity = (typeof NOTIFICATION_SEVERITIES)[number];\n\nexport interface Notification {\n  id: string;\n  owner: string;\n  severity: NotificationSeverity;\n  title: string;\n  body?: string;\n  /** Arbitrary JSON metadata — URLs, entity ids, the agent turn that produced it. */\n  metadata?: Record<string, unknown>;\n  /** ISO timestamp */\n  createdAt: string;\n  /** ISO timestamp — null while unread */\n  readAt: string | null;\n  /** Channels that delivered (or attempted delivery of) this notification. */\n  deliveredChannels: string[];\n}\n\nexport interface NotificationInput {\n  severity: NotificationSeverity;\n  title: string;\n  body?: string;\n  metadata?: Record<string, unknown>;\n  /**\n   * Explicit channel allowlist for this emission. When omitted, every\n   * registered channel runs. Use to scope a single `notify()` call to a\n   * subset (e.g. `[\"inbox\"]` to skip webhooks).\n   */\n  channels?: string[];\n}\n\nexport interface NotificationMeta {\n  /** Owner email — scopes the notification in the inbox. */\n  owner: string;\n}\n\nexport interface NotificationChannel {\n  /** Unique channel name, e.g. `\"inbox\"`, `\"webhook\"`, `\"slack\"`. */\n  name: string;\n  /**\n   * Deliver the notification. Must be best-effort — throwing will be logged\n   * but will not block other channels from running.\n   *\n   * Return `false` to skip (e.g. no URL / no recipients configured) so the\n   * channel is not recorded in `deliveredChannels`.\n   */\n  deliver(\n    input: NotificationInput,\n    meta: NotificationMeta,\n  ): void | boolean | Promise<void | boolean>;\n}\n"]}

package/dist/resources/handlers.d.ts

@@ -58,6 +58,7 @@ export declare function handleDeleteResource(event: any): Promise<{
 /** POST /_agent-native/resources/upload — upload a file as a resource */
 export declare function handleUploadResource(event: any): Promise<import("./store.js").Resource | {
     error: string;
+    storageSetupRequired?: undefined;
 } | {
     id: string;
     path: string;
@@ -76,6 +77,10 @@ export declare function handleUploadResource(event: any): Promise<import("./stor
     error?: undefined;
     url: string;
     provider: string;
+    storageSetupRequired?: undefined;
+} | {
+    error: string;
+    storageSetupRequired: boolean;
 }>;
 export {};
 //# sourceMappingURL=handlers.d.ts.map

package/dist/resources/handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/resources/handlers.ts"],"names":[],"mappings":"AAkBA,OAAO,EAML,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AACvB,OAAO,EAcL,KAAK,YAAY,EAClB,MAAM,YAAY,CAAC;AAoEpB,UAAU,WAAW;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,QAAQ;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,OAAO,GAAG,cAAc,CAAC;IAC3D,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B,eAAe,CAAC,EAAE,mBAAmB,CAAC;CACvC;AA2DD,oDAAoD;AACpD,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,GAAG;;GAmCnD;AAED,4DAA4D;AAC5D,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,GAAG;;GA8CrD;AAED,+EAA+E;AAC/E,wBAAsB,iCAAiC,CAAC,KAAK,EAAE,GAAG;;GAYjE;AAwED;;;yEAGyE;AACzE,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,GAAG;;GAoDjD;AAED,wDAAwD;AACxD,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,GAAG;;GAoCpD;AAED,qEAAqE;AACrE,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,GAAG;;GAuEpD;AAED,8DAA8D;AAC9D,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,GAAG;;;;;;GAgCpD;AAED,yEAAyE;AACzE,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,GAAG;;;;;;;;;;;;;;;;;;;;GAkFpD"}
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/resources/handlers.ts"],"names":[],"mappings":"AAkBA,OAAO,EAML,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AACvB,OAAO,EAcL,KAAK,YAAY,EAClB,MAAM,YAAY,CAAC;AAoEpB,UAAU,WAAW;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,QAAQ;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,OAAO,GAAG,cAAc,CAAC;IAC3D,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B,eAAe,CAAC,EAAE,mBAAmB,CAAC;CACvC;AA2DD,oDAAoD;AACpD,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,GAAG;;GAmCnD;AAED,4DAA4D;AAC5D,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,GAAG;;GA8CrD;AAED,+EAA+E;AAC/E,wBAAsB,iCAAiC,CAAC,KAAK,EAAE,GAAG;;GAYjE;AAwED;;;yEAGyE;AACzE,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,GAAG;;GAoDjD;AAED,wDAAwD;AACxD,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,GAAG;;GAoCpD;AAED,qEAAqE;AACrE,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,GAAG;;GAuEpD;AAED,8DAA8D;AAC9D,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,GAAG;;;;;;GAgCpD;AAED,yEAAyE;AACzE,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;GAoFpD"}

package/dist/resources/handlers.js

@@ -447,10 +447,9 @@ export async function handleUploadResource(event) {
         await assertCanEditShared(event);
     }
     const owner = await resolveOwner(event, shared);
-    // Prefer a registered file upload provider (e.g. Builder.io) for binary
-    // assets so we get a real CDN URL instead of a base64 blob in SQL.
-    // Text resources still live in SQL — they're edited inline and benefit
-    // from the resource store's metadata/search features.
+    // Binary assets must live in file storage so resource rows do not become
+    // base64 blobs in SQL. Text resources still live in SQL because they are
+    // edited inline and benefit from the resource store's metadata/search.
     const isText = mimeType.startsWith("text/") || mimeType === "application/json";
     if (!isText) {
         // Use the actual session user email for credential resolution — not `owner`,
@@ -474,11 +473,13 @@ export async function handleUploadResource(event) {
             setResponseStatus(event, 201);
             return { ...resource, url: uploaded.url, provider: uploaded.provider };
         }
+        setResponseStatus(event, 503);
+        return {
+            error: "File storage is not configured. Connect Builder.io or register an S3/R2/GCS file upload provider before uploading binary resources.",
+            storageSetupRequired: true,
+        };
     }
-    // Fallback: store contents in SQL (base64 for binary, text as-is).
-    const content = isText
-        ? Buffer.from(filePart.data).toString("utf-8")
-        : Buffer.from(filePart.data).toString("base64");
+    const content = Buffer.from(filePart.data).toString("utf-8");
     const resource = await resourcePut(owner, path, content, mimeType);
     setResponseStatus(event, 201);
     return resource;