@agent-native/core 0.93.0 → 0.94.1

package/dist/demo/fetch-interceptor.d.ts

@@ -1,5 +1,9 @@
+/** Refresh demo mode after the shared DB-sync stream reports a real change. */
+export declare function refreshDemoModeFetchInterceptor(): Promise<void>;
 /**
- * Install the demo-mode fetch interceptor and start polling demo status.
+ * Install the demo-mode fetch interceptor and read demo status once. Later
+ * changes are driven by the shared DB-sync transport instead of a separate
+ * fixed polling loop.
  * Idempotent and browser-only — safe to call from any hook that runs in
  * every template root (we call it from `useDbSync`). A no-op until demo
  * mode is actually on.

package/dist/demo/fetch-interceptor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetch-interceptor.d.ts","sourceRoot":"","sources":["../../src/demo/fetch-interceptor.ts"],"names":[],"mappings":"AA2GA;;;;;GAKG;AACH,wBAAgB,8BAA8B,IAAI,IAAI,CAuErD"}
+{"version":3,"file":"fetch-interceptor.d.ts","sourceRoot":"","sources":["../../src/demo/fetch-interceptor.ts"],"names":[],"mappings":"AA2GA,+EAA+E;AAC/E,wBAAgB,+BAA+B,IAAI,OAAO,CAAC,IAAI,CAAC,CAQ/D;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,IAAI,IAAI,CA+DrD"}

package/dist/demo/fetch-interceptor.js

@@ -45,9 +45,9 @@ const SKIP_SUBSTRINGS = [
     "/_agent-native/runs",
 ];
 let installed = false;
-let pollTimer = null;
 let demoEnabled = false;
 let originalFetch = null;
+let refreshPromise = null;
 // Set once the first demo-status check completes. We DO NOT block requests on
 // it — if status isn't known yet a response is simply passed through
 // un-redacted (a brief first-paint window) rather than delaying transport.
@@ -97,8 +97,21 @@ async function refreshDemoFlag() {
         firstStatusDone = true;
     }
 }
+/** Refresh demo mode after the shared DB-sync stream reports a real change. */
+export function refreshDemoModeFetchInterceptor() {
+    if (!installed)
+        return Promise.resolve();
+    if (!refreshPromise) {
+        refreshPromise = refreshDemoFlag().finally(() => {
+            refreshPromise = null;
+        });
+    }
+    return refreshPromise;
+}
 /**
- * Install the demo-mode fetch interceptor and start polling demo status.
+ * Install the demo-mode fetch interceptor and read demo status once. Later
+ * changes are driven by the shared DB-sync transport instead of a separate
+ * fixed polling loop.
  * Idempotent and browser-only — safe to call from any hook that runs in
  * every template root (we call it from `useDbSync`). A no-op until demo
  * mode is actually on.
@@ -160,15 +173,6 @@ export function ensureDemoModeFetchInterceptor() {
             return res;
         }
     };
-    void refreshDemoFlag();
-    pollTimer = setInterval(() => void refreshDemoFlag(), 4_000);
-    if (typeof pollTimer === "object" && "unref" in pollTimer) {
-        try {
-            pollTimer.unref();
-        }
-        catch {
-            // unref unavailable in the browser — fine, interval is cheap.
-        }
-    }
+    void refreshDemoModeFetchInterceptor();
 }
 //# sourceMappingURL=fetch-interceptor.js.map

package/dist/demo/fetch-interceptor.js.map

@@ -1 +1 @@
-{"version":3,"file":"fetch-interceptor.js","sourceRoot":"","sources":["../../src/demo/fetch-interceptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,WAAW,GAAG,eAAe,CAAC,4BAA4B,CAAC,CAAC;AAClE,MAAM,eAAe,GAAG;IACtB,4BAA4B;IAC5B,qBAAqB;IACrB,uBAAuB;IACvB,iEAAiE;IACjE,wEAAwE;IACxE,yEAAyE;IACzE,kEAAkE;IAClE,sCAAsC;IACtC,sBAAsB;IACtB,wEAAwE;IACxE,oEAAoE;IACpE,yDAAyD;IACzD,qBAAqB;CACtB,CAAC;AAEF,IAAI,SAAS,GAAG,KAAK,CAAC;AACtB,IAAI,SAAS,GAA0C,IAAI,CAAC;AAC5D,IAAI,WAAW,GAAG,KAAK,CAAC;AACxB,IAAI,aAAa,GAAwB,IAAI,CAAC;AAE9C,8EAA8E;AAC9E,qEAAqE;AACrE,2EAA2E;AAC3E,4EAA4E;AAC5E,yEAAyE;AACzE,IAAI,eAAe,GAAG,KAAK,CAAC;AAE5B,0EAA0E;AAC1E,SAAS,WAAW,CAAI,CAAa,EAAE,EAAU;IAC/C,OAAO,OAAO,CAAC,IAAI,CAAC;QAClB,CAAC;QACD,IAAI,OAAO,CAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC3B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,EAAE,EAAE,CAAC,CAC1D;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,KAAwB;IACrC,IAAI,CAAC;QACH,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5C,IAAI,KAAK,YAAY,GAAG;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC;QAC5C,OAAQ,KAAiB,CAAC,GAAG,IAAI,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAwB,EAAE,IAAkB;IAC5D,MAAM,CAAC,GACL,IAAI,EAAE,MAAM;QACZ,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC;YACnD,CAAC,CAAE,KAAiB,CAAC,MAAM;YAC3B,CAAC,CAAC,SAAS,CAAC;QACd,KAAK,CAAC;IACR,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,eAAe;IAC5B,MAAM,CAAC,GAAG,aAAa,IAAI,KAAK,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO;QACpB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAGtB,CAAC;QACT,WAAW,GAAG,IAAI,EAAE,OAAO,KAAK,IAAI,IAAI,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;YAAS,CAAC;QACT,eAAe,GAAG,IAAI,CAAC;IACzB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B;IAC5C,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC1C,IAAI,SAAS;QAAE,OAAO;IACtB,SAAS,GAAG,IAAI,CAAC;IAEjB,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,aAAa,CAAC;IAE3B,MAAM,CAAC,KAAK,GAAG,KAAK,UAAU,YAAY,CACxC,KAAwB,EACxB,IAAkB;QAElB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAEpC,uEAAuE;QACvE,qEAAqE;QACrE,qEAAqE;QACrE,+CAA+C;QAC/C,IAAI,CAAC,WAAW,IAAI,CAAC,eAAe;YAAE,OAAO,GAAG,CAAC;QACjD,IAAI,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK;YAAE,OAAO,GAAG,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC;QAExB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,GAAG,CAAC;YAE7D,uEAAuE;YACvE,sEAAsE;YACtE,sEAAsE;YACtE,oEAAoE;YACpE,+DAA+D;YAC/D,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YAC1D,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC;gBAAE,OAAO,GAAG,CAAC;YAC1D,IACE,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC;gBACpC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC9B,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAC9B,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ;gBAAE,OAAO,GAAG,CAAC;YAE7B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YAEtC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACzC,oDAAoD;YACpD,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAEnC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;gBAC5C,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;YAC9D,sEAAsE;YACtE,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,eAAe,EAAE,CAAC;IACvB,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,eAAe,EAAE,EAAE,KAAK,CAAC,CAAC;IAC7D,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;QAC1D,IAAI,CAAC;YACF,SAA8C,CAAC,KAAK,EAAE,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;QAChE,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import { agentNativePath } from \"../client/api-path.js\";\n/**\n * Client-side demo-mode redaction.\n *\n * Why client-side and not (only) at the server action boundary: templates\n * serve a lot of their UI data through their OWN custom Nitro `/api/*`\n * handlers (e.g. mail's `/api/emails`, `/api/threads/:id/messages`,\n * `/api/contacts`, `/api/apollo/person`), which never pass through the\n * framework action runtime. On this stack (Nitro v3 / h3 v2) there is no\n * single server hook that can safely rewrite every JSON body (the `response`\n * hook hands you an immutable Web `Response` and returns `void`). Patching the\n * browser's `fetch` is the one place that is BOTH universal (every template's\n * reads — actions and custom routes alike — go through it) AND low-risk: it\n * can only ever post-process JSON the app already parses for display, so it\n * physically cannot break auth, SSE streams, SSR HTML, or binary downloads.\n *\n * The agent is handled separately and in-process (its action tool results are\n * redacted in `production-agent.ts`), so it doesn't depend on this at all.\n *\n * Scope intentionally narrow:\n *   - Only same-document `GET` requests are redacted. Mutation responses\n *     (POST/PUT/PATCH/DELETE) pass through untouched so a draft you just\n *     typed isn't echoed back as fake data mid-demo.\n *   - Only `application/json` 2xx bodies. Streams (`text/event-stream`),\n *     HTML, and binary are skipped by content-type.\n *   - Framework infra endpoints (poll, events, the demo-status endpoint\n *     itself) are skipped — no PII and avoids self-recursion.\n *   - Any error during interception falls back to the original response.\n */\nimport { redactDemoData } from \"./redact.js\";\n\nconst STATUS_PATH = agentNativePath(\"/_agent-native/demo/status\");\nconst SKIP_SUBSTRINGS = [\n  \"/_agent-native/demo/status\",\n  \"/_agent-native/poll\",\n  \"/_agent-native/events\",\n  // Never touch agent transport. The agent already gets in-process\n  // redaction of its tool results; faking its own transcript adds no demo\n  // value and must stay clear of the tool_use/tool_result protocol. Covers\n  // \"/_agent-native/agent\" (stream) and \"/_agent-native/agent-chat\"\n  // (thread history) and any sub-paths.\n  \"/_agent-native/agent\",\n  // Run-manager state read by the reconnect/recovery loop. Faking numeric\n  // run state here would make recovery think it's not progressing and\n  // exhaust its retries (\"agent connection kept failing\").\n  \"/_agent-native/runs\",\n];\n\nlet installed = false;\nlet pollTimer: ReturnType<typeof setInterval> | null = null;\nlet demoEnabled = false;\nlet originalFetch: typeof fetch | null = null;\n\n// Set once the first demo-status check completes. We DO NOT block requests on\n// it — if status isn't known yet a response is simply passed through\n// un-redacted (a brief first-paint window) rather than delaying transport.\n// Injecting latency into early GETs previously risked the agent's streaming\n// reconnect logic; transport safety wins over redacting the first paint.\nlet firstStatusDone = false;\n\n/** Reject after `ms` so a misclassified streaming body can never hang. */\nfunction withTimeout<T>(p: Promise<T>, ms: number): Promise<T> {\n  return Promise.race([\n    p,\n    new Promise<T>((_, reject) =>\n      setTimeout(() => reject(new Error(\"redact-timeout\")), ms),\n    ),\n  ]);\n}\n\nfunction urlOf(input: RequestInfo | URL): string {\n  try {\n    if (typeof input === \"string\") return input;\n    if (input instanceof URL) return input.href;\n    return (input as Request).url ?? \"\";\n  } catch {\n    return \"\";\n  }\n}\n\nfunction methodOf(input: RequestInfo | URL, init?: RequestInit): string {\n  const m =\n    init?.method ??\n    (typeof input !== \"string\" && !(input instanceof URL)\n      ? (input as Request).method\n      : undefined) ??\n    \"GET\";\n  return m.toUpperCase();\n}\n\nasync function refreshDemoFlag(): Promise<void> {\n  const f = originalFetch ?? fetch;\n  try {\n    const res = await f(STATUS_PATH, { credentials: \"same-origin\" });\n    if (!res.ok) return;\n    const json = (await res.json()) as {\n      enabled?: boolean;\n      forced?: boolean;\n    } | null;\n    demoEnabled = json?.enabled === true || json?.forced === true;\n  } catch {\n    // Status endpoint unreachable — leave the last known value.\n  } finally {\n    firstStatusDone = true;\n  }\n}\n\n/**\n * Install the demo-mode fetch interceptor and start polling demo status.\n * Idempotent and browser-only — safe to call from any hook that runs in\n * every template root (we call it from `useDbSync`). A no-op until demo\n * mode is actually on.\n */\nexport function ensureDemoModeFetchInterceptor(): void {\n  if (typeof window === \"undefined\") return;\n  if (installed) return;\n  installed = true;\n\n  originalFetch = window.fetch.bind(window);\n  const base = originalFetch;\n\n  window.fetch = async function patchedFetch(\n    input: RequestInfo | URL,\n    init?: RequestInit,\n  ): Promise<Response> {\n    const res = await base(input, init);\n\n    // Fast path: anything that isn't a demo-enabled, plain GET returns the\n    // ORIGINAL response with zero body work and zero extra awaits — when\n    // demo mode is off this wrapper is byte-for-byte native fetch, so it\n    // cannot influence agent/run/stream transport.\n    if (!demoEnabled || !firstStatusDone) return res;\n    if (methodOf(input, init) !== \"GET\") return res;\n    if (!res.ok) return res;\n\n    try {\n      const url = urlOf(input);\n      if (SKIP_SUBSTRINGS.some((s) => url.includes(s))) return res;\n\n      // Only buffered, finite JSON. SSE / streaming / chunked-forever bodies\n      // never reach `redactDemoData`: streaming content-types are excluded,\n      // and the JSON read is hard-timeout-bounded so a misclassified stream\n      // degrades to \"return the original response\" instead of hanging the\n      // request (which is what tripped the reconnect/recovery loop).\n      const contentType = res.headers.get(\"content-type\") ?? \"\";\n      if (!contentType.includes(\"application/json\")) return res;\n      if (\n        contentType.includes(\"event-stream\") ||\n        contentType.includes(\"ndjson\") ||\n        contentType.includes(\"stream\")\n      ) {\n        return res;\n      }\n      if (res.bodyUsed) return res;\n\n      const data = await withTimeout(res.clone().json(), 3_000);\n      const redacted = redactDemoData(data);\n\n      const headers = new Headers(res.headers);\n      // Body is re-serialized — these would be wrong now.\n      headers.delete(\"content-length\");\n      headers.delete(\"content-encoding\");\n\n      return new Response(JSON.stringify(redacted), {\n        status: res.status,\n        statusText: res.statusText,\n        headers,\n      });\n    } catch {\n      // Never let redaction break a request — fall back to the real\n      // response (its body stream is untouched; we only ever read a clone).\n      return res;\n    }\n  };\n\n  void refreshDemoFlag();\n  pollTimer = setInterval(() => void refreshDemoFlag(), 4_000);\n  if (typeof pollTimer === \"object\" && \"unref\" in pollTimer) {\n    try {\n      (pollTimer as unknown as { unref: () => void }).unref();\n    } catch {\n      // unref unavailable in the browser — fine, interval is cheap.\n    }\n  }\n}\n"]}
+{"version":3,"file":"fetch-interceptor.js","sourceRoot":"","sources":["../../src/demo/fetch-interceptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,WAAW,GAAG,eAAe,CAAC,4BAA4B,CAAC,CAAC;AAClE,MAAM,eAAe,GAAG;IACtB,4BAA4B;IAC5B,qBAAqB;IACrB,uBAAuB;IACvB,iEAAiE;IACjE,wEAAwE;IACxE,yEAAyE;IACzE,kEAAkE;IAClE,sCAAsC;IACtC,sBAAsB;IACtB,wEAAwE;IACxE,oEAAoE;IACpE,yDAAyD;IACzD,qBAAqB;CACtB,CAAC;AAEF,IAAI,SAAS,GAAG,KAAK,CAAC;AACtB,IAAI,WAAW,GAAG,KAAK,CAAC;AACxB,IAAI,aAAa,GAAwB,IAAI,CAAC;AAC9C,IAAI,cAAc,GAAyB,IAAI,CAAC;AAEhD,8EAA8E;AAC9E,qEAAqE;AACrE,2EAA2E;AAC3E,4EAA4E;AAC5E,yEAAyE;AACzE,IAAI,eAAe,GAAG,KAAK,CAAC;AAE5B,0EAA0E;AAC1E,SAAS,WAAW,CAAI,CAAa,EAAE,EAAU;IAC/C,OAAO,OAAO,CAAC,IAAI,CAAC;QAClB,CAAC;QACD,IAAI,OAAO,CAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC3B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,EAAE,EAAE,CAAC,CAC1D;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,KAAwB;IACrC,IAAI,CAAC;QACH,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5C,IAAI,KAAK,YAAY,GAAG;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC;QAC5C,OAAQ,KAAiB,CAAC,GAAG,IAAI,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAwB,EAAE,IAAkB;IAC5D,MAAM,CAAC,GACL,IAAI,EAAE,MAAM;QACZ,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC;YACnD,CAAC,CAAE,KAAiB,CAAC,MAAM;YAC3B,CAAC,CAAC,SAAS,CAAC;QACd,KAAK,CAAC;IACR,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,eAAe;IAC5B,MAAM,CAAC,GAAG,aAAa,IAAI,KAAK,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO;QACpB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAGtB,CAAC;QACT,WAAW,GAAG,IAAI,EAAE,OAAO,KAAK,IAAI,IAAI,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;YAAS,CAAC;QACT,eAAe,GAAG,IAAI,CAAC;IACzB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,+BAA+B;IAC7C,IAAI,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IACzC,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,cAAc,GAAG,eAAe,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAC9C,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,8BAA8B;IAC5C,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC1C,IAAI,SAAS;QAAE,OAAO;IACtB,SAAS,GAAG,IAAI,CAAC;IAEjB,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,aAAa,CAAC;IAE3B,MAAM,CAAC,KAAK,GAAG,KAAK,UAAU,YAAY,CACxC,KAAwB,EACxB,IAAkB;QAElB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAEpC,uEAAuE;QACvE,qEAAqE;QACrE,qEAAqE;QACrE,+CAA+C;QAC/C,IAAI,CAAC,WAAW,IAAI,CAAC,eAAe;YAAE,OAAO,GAAG,CAAC;QACjD,IAAI,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK;YAAE,OAAO,GAAG,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC;QAExB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,GAAG,CAAC;YAE7D,uEAAuE;YACvE,sEAAsE;YACtE,sEAAsE;YACtE,oEAAoE;YACpE,+DAA+D;YAC/D,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YAC1D,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC;gBAAE,OAAO,GAAG,CAAC;YAC1D,IACE,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC;gBACpC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC9B,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAC9B,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ;gBAAE,OAAO,GAAG,CAAC;YAE7B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YAEtC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACzC,oDAAoD;YACpD,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAEnC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;gBAC5C,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;YAC9D,sEAAsE;YACtE,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,+BAA+B,EAAE,CAAC;AACzC,CAAC","sourcesContent":["import { agentNativePath } from \"../client/api-path.js\";\n/**\n * Client-side demo-mode redaction.\n *\n * Why client-side and not (only) at the server action boundary: templates\n * serve a lot of their UI data through their OWN custom Nitro `/api/*`\n * handlers (e.g. mail's `/api/emails`, `/api/threads/:id/messages`,\n * `/api/contacts`, `/api/apollo/person`), which never pass through the\n * framework action runtime. On this stack (Nitro v3 / h3 v2) there is no\n * single server hook that can safely rewrite every JSON body (the `response`\n * hook hands you an immutable Web `Response` and returns `void`). Patching the\n * browser's `fetch` is the one place that is BOTH universal (every template's\n * reads — actions and custom routes alike — go through it) AND low-risk: it\n * can only ever post-process JSON the app already parses for display, so it\n * physically cannot break auth, SSE streams, SSR HTML, or binary downloads.\n *\n * The agent is handled separately and in-process (its action tool results are\n * redacted in `production-agent.ts`), so it doesn't depend on this at all.\n *\n * Scope intentionally narrow:\n *   - Only same-document `GET` requests are redacted. Mutation responses\n *     (POST/PUT/PATCH/DELETE) pass through untouched so a draft you just\n *     typed isn't echoed back as fake data mid-demo.\n *   - Only `application/json` 2xx bodies. Streams (`text/event-stream`),\n *     HTML, and binary are skipped by content-type.\n *   - Framework infra endpoints (poll, events, the demo-status endpoint\n *     itself) are skipped — no PII and avoids self-recursion.\n *   - Any error during interception falls back to the original response.\n */\nimport { redactDemoData } from \"./redact.js\";\n\nconst STATUS_PATH = agentNativePath(\"/_agent-native/demo/status\");\nconst SKIP_SUBSTRINGS = [\n  \"/_agent-native/demo/status\",\n  \"/_agent-native/poll\",\n  \"/_agent-native/events\",\n  // Never touch agent transport. The agent already gets in-process\n  // redaction of its tool results; faking its own transcript adds no demo\n  // value and must stay clear of the tool_use/tool_result protocol. Covers\n  // \"/_agent-native/agent\" (stream) and \"/_agent-native/agent-chat\"\n  // (thread history) and any sub-paths.\n  \"/_agent-native/agent\",\n  // Run-manager state read by the reconnect/recovery loop. Faking numeric\n  // run state here would make recovery think it's not progressing and\n  // exhaust its retries (\"agent connection kept failing\").\n  \"/_agent-native/runs\",\n];\n\nlet installed = false;\nlet demoEnabled = false;\nlet originalFetch: typeof fetch | null = null;\nlet refreshPromise: Promise<void> | null = null;\n\n// Set once the first demo-status check completes. We DO NOT block requests on\n// it — if status isn't known yet a response is simply passed through\n// un-redacted (a brief first-paint window) rather than delaying transport.\n// Injecting latency into early GETs previously risked the agent's streaming\n// reconnect logic; transport safety wins over redacting the first paint.\nlet firstStatusDone = false;\n\n/** Reject after `ms` so a misclassified streaming body can never hang. */\nfunction withTimeout<T>(p: Promise<T>, ms: number): Promise<T> {\n  return Promise.race([\n    p,\n    new Promise<T>((_, reject) =>\n      setTimeout(() => reject(new Error(\"redact-timeout\")), ms),\n    ),\n  ]);\n}\n\nfunction urlOf(input: RequestInfo | URL): string {\n  try {\n    if (typeof input === \"string\") return input;\n    if (input instanceof URL) return input.href;\n    return (input as Request).url ?? \"\";\n  } catch {\n    return \"\";\n  }\n}\n\nfunction methodOf(input: RequestInfo | URL, init?: RequestInit): string {\n  const m =\n    init?.method ??\n    (typeof input !== \"string\" && !(input instanceof URL)\n      ? (input as Request).method\n      : undefined) ??\n    \"GET\";\n  return m.toUpperCase();\n}\n\nasync function refreshDemoFlag(): Promise<void> {\n  const f = originalFetch ?? fetch;\n  try {\n    const res = await f(STATUS_PATH, { credentials: \"same-origin\" });\n    if (!res.ok) return;\n    const json = (await res.json()) as {\n      enabled?: boolean;\n      forced?: boolean;\n    } | null;\n    demoEnabled = json?.enabled === true || json?.forced === true;\n  } catch {\n    // Status endpoint unreachable — leave the last known value.\n  } finally {\n    firstStatusDone = true;\n  }\n}\n\n/** Refresh demo mode after the shared DB-sync stream reports a real change. */\nexport function refreshDemoModeFetchInterceptor(): Promise<void> {\n  if (!installed) return Promise.resolve();\n  if (!refreshPromise) {\n    refreshPromise = refreshDemoFlag().finally(() => {\n      refreshPromise = null;\n    });\n  }\n  return refreshPromise;\n}\n\n/**\n * Install the demo-mode fetch interceptor and read demo status once. Later\n * changes are driven by the shared DB-sync transport instead of a separate\n * fixed polling loop.\n * Idempotent and browser-only — safe to call from any hook that runs in\n * every template root (we call it from `useDbSync`). A no-op until demo\n * mode is actually on.\n */\nexport function ensureDemoModeFetchInterceptor(): void {\n  if (typeof window === \"undefined\") return;\n  if (installed) return;\n  installed = true;\n\n  originalFetch = window.fetch.bind(window);\n  const base = originalFetch;\n\n  window.fetch = async function patchedFetch(\n    input: RequestInfo | URL,\n    init?: RequestInit,\n  ): Promise<Response> {\n    const res = await base(input, init);\n\n    // Fast path: anything that isn't a demo-enabled, plain GET returns the\n    // ORIGINAL response with zero body work and zero extra awaits — when\n    // demo mode is off this wrapper is byte-for-byte native fetch, so it\n    // cannot influence agent/run/stream transport.\n    if (!demoEnabled || !firstStatusDone) return res;\n    if (methodOf(input, init) !== \"GET\") return res;\n    if (!res.ok) return res;\n\n    try {\n      const url = urlOf(input);\n      if (SKIP_SUBSTRINGS.some((s) => url.includes(s))) return res;\n\n      // Only buffered, finite JSON. SSE / streaming / chunked-forever bodies\n      // never reach `redactDemoData`: streaming content-types are excluded,\n      // and the JSON read is hard-timeout-bounded so a misclassified stream\n      // degrades to \"return the original response\" instead of hanging the\n      // request (which is what tripped the reconnect/recovery loop).\n      const contentType = res.headers.get(\"content-type\") ?? \"\";\n      if (!contentType.includes(\"application/json\")) return res;\n      if (\n        contentType.includes(\"event-stream\") ||\n        contentType.includes(\"ndjson\") ||\n        contentType.includes(\"stream\")\n      ) {\n        return res;\n      }\n      if (res.bodyUsed) return res;\n\n      const data = await withTimeout(res.clone().json(), 3_000);\n      const redacted = redactDemoData(data);\n\n      const headers = new Headers(res.headers);\n      // Body is re-serialized — these would be wrong now.\n      headers.delete(\"content-length\");\n      headers.delete(\"content-encoding\");\n\n      return new Response(JSON.stringify(redacted), {\n        status: res.status,\n        statusText: res.statusText,\n        headers,\n      });\n    } catch {\n      // Never let redaction break a request — fall back to the real\n      // response (its body stream is untouched; we only ever read a clone).\n      return res;\n    }\n  };\n\n  void refreshDemoModeFetchInterceptor();\n}\n"]}

package/dist/integrations/adapters/slack.d.ts

@@ -4,6 +4,8 @@ export interface SlackAdapterOptions {
     resolveBotToken?: (incoming: IncomingMessage) => Promise<string | undefined>;
     /** Override active-thread detection for hosted adapters/tests. */
     isThreadActive?: (incoming: IncomingMessage) => Promise<boolean>;
+    /** Override one-shot clarification-window consumption for tests. */
+    consumeAwaitingInput?: (incoming: IncomingMessage) => Promise<boolean>;
 }
 /**
  * Create a Slack platform adapter.

package/dist/integrations/adapters/slack.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../../../src/integrations/adapters/slack.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EAOhB,MAAM,aAAa,CAAC;AAarB,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7E,kEAAkE;IAClE,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAClE;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAC1B,OAAO,GAAE,mBAAwB,GAChC,eAAe,CAgejB"}
+{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../../../src/integrations/adapters/slack.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EAOhB,MAAM,aAAa,CAAC;AAarB,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7E,kEAAkE;IAClE,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,oEAAoE;IACpE,oBAAoB,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxE;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAC1B,OAAO,GAAE,mBAAwB,GAChC,eAAe,CA8ejB"}

package/dist/integrations/adapters/slack.js

@@ -2,6 +2,7 @@ import { createError, getHeader, readRawBody } from "h3";
 import { resolveSecret } from "../../server/credential-provider.js";
 import { getRequestContext } from "../../server/request-context.js";
 import { getIntegrationRequestContext } from "../../server/request-context.js";
+import { consumeIntegrationAwaitingInput } from "../awaiting-input-store.js";
 import { createIntegrationControl } from "../controls-store.js";
 import { getActiveIntegrationInstallationByKey, getActiveIntegrationInstallationForTenant, listIntegrationInstallations, resolveIntegrationTokenBundle, } from "../installations-store.js";
 import { hasActivePendingTask } from "../pending-tasks-store.js";
@@ -216,10 +217,24 @@ export function slackAdapter(options = {}) {
                     timestamp: Math.floor(parseFloat(e.ts) * 1000),
                 };
                 if (isThreadReply) {
+                    // An ordinary thread reply is narrowly admitted when either work is
+                    // still queued or the same Slack user is answering a fresh
+                    // integration-originated clarification. Consuming the latter is a
+                    // conditional SQL delete, so concurrent replies cannot both reopen
+                    // the agent and unrelated channel messages remain ignored.
+                    const answeredClarification = options.consumeAwaitingInput
+                        ? await options.consumeAwaitingInput(partialIncoming)
+                        : options.isThreadActive
+                            ? false
+                            : await consumeIntegrationAwaitingInput({
+                                platform: "slack",
+                                externalThreadId,
+                                requesterId: e.user,
+                            });
                     const active = options.isThreadActive
                         ? await options.isThreadActive(partialIncoming)
                         : await hasActivePendingTask("slack", externalThreadId);
-                    if (!active)
+                    if (!active && !answeredClarification)
                         return null;
                 }
                 const token = await resolveBotToken(partialIncoming);
@@ -1071,6 +1086,7 @@ async function startSlackRunProgress(token, incoming) {
         return null;
     const tasks = new Map();
     const toolTaskIds = new Map();
+    const agentTaskIds = new Map();
     tasks.set("agent-native:context", {
         title: "Understand the request",
         status: "in_progress",
@@ -1212,7 +1228,8 @@ async function startSlackRunProgress(token, incoming) {
                 });
             }
             else if (event.type === "agent_call") {
-                const id = taskId("agent", event.agent);
+                const id = agentTaskIds.get(event.agent) ?? taskId("agent", event.agent);
+                agentTaskIds.set(event.agent, id);
                 const status = event.status === "start"
                     ? "in_progress"
                     : event.status === "done"
@@ -1222,6 +1239,25 @@ async function startSlackRunProgress(token, incoming) {
                 tasks.set(id, { title, status });
                 await append({ type: "task_update", id, title, status });
             }
+            else if (event.type === "agent_call_progress") {
+                // A2A calls can stay healthy for minutes. Keep the same native Slack
+                // task card alive with each real downstream poll rather than creating
+                // a new card per tick or leaving the user with a stale spinner.
+                const id = agentTaskIds.get(event.agent) ?? taskId("agent", event.agent);
+                agentTaskIds.set(event.agent, id);
+                const title = `Ask ${shortTaskTitle(event.agent)}`;
+                const details = event.detail
+                    ? shortTaskTitle(event.detail)
+                    : `Still ${event.state} after ${event.elapsedSeconds}s`;
+                tasks.set(id, { title, status: "in_progress" });
+                await append({
+                    type: "task_update",
+                    id,
+                    title,
+                    status: "in_progress",
+                    details,
+                });
+            }
             else if (event.type === "activity") {
                 await append({
                     type: "task_update",