@agent-native/core 0.98.1 → 0.98.2

package/dist/client/settings/DemoModeSection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DemoModeSection.d.ts","sourceRoot":"","sources":["../../../src/client/settings/DemoModeSection.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAmBH,wBAAgB,eAAe,gCA4F9B;AAED,wBAAgB,YAAY,gCAE3B"}
+{"version":3,"file":"DemoModeSection.d.ts","sourceRoot":"","sources":["../../../src/client/settings/DemoModeSection.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAYH,wBAAgB,eAAe,gCA2E9B;AAED,wBAAgB,YAAY,gCAE3B"}

package/dist/client/settings/DemoModeSection.js

@@ -13,29 +13,13 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  * accidentally turned off on stage.
  */
 import { IconEyeOff } from "@tabler/icons-react";
-import { useQuery } from "@tanstack/react-query";
 import { useEffect, useState } from "react";
 import { agentNativePath } from "../api-path.js";
-import { useChangeVersion } from "../use-change-version.js";
-const DEMO_STATUS_URL = agentNativePath("/_agent-native/demo/status");
+import { useDemoModeStatus } from "../use-demo-mode-status.js";
 const DEMO_MODE_WRITE_URL = agentNativePath("/_agent-native/application-state/demo-mode");
 export function DemoModeSection() {
     const [enabled, setEnabled] = useState(null);
-    const demoModeVersion = useChangeVersion("app-state:demo-mode");
-    const { data } = useQuery({
-        queryKey: ["agent-native", "demo-mode", demoModeVersion],
-        queryFn: async () => {
-            const res = await fetch(DEMO_STATUS_URL, {
-                credentials: "same-origin",
-            });
-            if (!res.ok)
-                return null;
-            return (await res.json());
-        },
-        staleTime: Infinity,
-    });
-    const serverEnabled = data?.enabled;
-    const forced = data?.forced === true;
+    const { enabled: serverEnabled, forced, isLoading } = useDemoModeStatus();
     // Surface the server value once it arrives (and on subsequent polls), but
     // never clobber an in-flight optimistic toggle with a stale read. When
     // forced by env, always reflect the locked-on state.
@@ -43,13 +27,10 @@ export function DemoModeSection() {
         if (forced) {
             setEnabled(true);
         }
-        else if (typeof serverEnabled === "boolean") {
+        else if (!isLoading) {
             setEnabled((prev) => (prev === null ? serverEnabled : prev));
         }
-        else if (serverEnabled === undefined && data !== undefined) {
-            setEnabled((prev) => (prev === null ? false : prev));
-        }
-    }, [serverEnabled, forced, data]);
+    }, [serverEnabled, forced, isLoading]);
     const toggle = async (next) => {
         if (forced)
             return;

package/dist/client/settings/DemoModeSection.js.map

@@ -1 +1 @@
-{"version":3,"file":"DemoModeSection.js","sourceRoot":"","sources":["../../../src/client/settings/DemoModeSection.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAE5C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAO5D,MAAM,eAAe,GAAG,eAAe,CAAC,4BAA4B,CAAC,CAAC;AACtE,MAAM,mBAAmB,GAAG,eAAe,CACzC,4CAA4C,CAC7C,CAAC;AAEF,MAAM,UAAU,eAAe;IAC7B,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAiB,IAAI,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAG,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;IAEhE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;QACxB,QAAQ,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,eAAe,CAAC;QACxD,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE;gBACvC,WAAW,EAAE,aAAa;aAC3B,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YACzB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC;QACjD,CAAC;QACD,SAAS,EAAE,QAAQ;KACpB,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,IAAI,EAAE,OAAO,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAErC,0EAA0E;IAC1E,uEAAuE;IACvE,qDAAqD;IACrD,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,MAAM,EAAE,CAAC;YACX,UAAU,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;aAAM,IAAI,OAAO,aAAa,KAAK,SAAS,EAAE,CAAC;YAC9C,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,CAAC;aAAM,IAAI,aAAa,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7D,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAElC,MAAM,MAAM,GAAG,KAAK,EAAE,IAAa,EAAE,EAAE;QACrC,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,QAAQ,GAAG,OAAO,CAAC;QACzB,yDAAyD;QACzD,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,mBAAmB,EAAE;gBAC3C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,WAAW,EAAE,SAAS;gBACtB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;aACxC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CACL,eAAK,SAAS,EAAC,iGAAiG,aAC9G,eAAK,SAAS,EAAC,SAAS,aACtB,cAAK,SAAS,EAAC,yCAAyC,iCAElD,EACN,YAAG,SAAS,EAAC,0CAA0C,sNAInD,EACH,MAAM,IAAI,CACT,aAAG,SAAS,EAAC,0CAA0C,iCACrC,uCAAsB,8DAEpC,CACL,IACG,EACN,iBACE,IAAI,EAAC,QAAQ,EACb,IAAI,EAAC,QAAQ,kBACC,CAAC,CAAC,OAAO,gBACZ,kBAAkB,EAC7B,QAAQ,EAAE,OAAO,KAAK,IAAI,IAAI,MAAM,EACpC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBAC/B,6CAA6C;gBAC7C,SAAS,EAAE,oGACT,OAAO;oBACL,CAAC,CAAC,YAAY;oBACd,CAAC,CAAC,qDACN,IAAI,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,YAEpD,eACE,SAAS,EAAE,kFACT,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAChC,EAAE,GACF,GACK,IACL,CACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,KAAC,UAAU,IAAC,IAAI,EAAE,EAAE,GAAI,CAAC;AAClC,CAAC","sourcesContent":["/**\n * <DemoModeSection /> — toggle that replaces contact/free-text names, emails,\n * and numbers with realistic fake data everywhere (UI + what the agent sees)\n * while preserving labels, IDs, and structure so the app keeps working.\n *\n * The toggle is stored in application_state under `demo-mode`\n * (`{ enabled: boolean }`) and written via `PUT\n * /_agent-native/application-state/demo-mode` (optimistic — flip first,\n * write in the background). It READS from `/_agent-native/demo/status`\n * instead, which ORs the per-user toggle with the `DEMO_MODE` env: a hosted\n * demo deployment is forced on and the switch is locked so it can't be\n * accidentally turned off on stage.\n */\n\nimport { IconEyeOff } from \"@tabler/icons-react\";\nimport { useQuery } from \"@tanstack/react-query\";\nimport { useEffect, useState } from \"react\";\n\nimport { agentNativePath } from \"../api-path.js\";\nimport { useChangeVersion } from \"../use-change-version.js\";\n\ninterface DemoStatus {\n  enabled?: boolean;\n  forced?: boolean;\n}\n\nconst DEMO_STATUS_URL = agentNativePath(\"/_agent-native/demo/status\");\nconst DEMO_MODE_WRITE_URL = agentNativePath(\n  \"/_agent-native/application-state/demo-mode\",\n);\n\nexport function DemoModeSection() {\n  const [enabled, setEnabled] = useState<boolean | null>(null);\n  const demoModeVersion = useChangeVersion(\"app-state:demo-mode\");\n\n  const { data } = useQuery({\n    queryKey: [\"agent-native\", \"demo-mode\", demoModeVersion],\n    queryFn: async () => {\n      const res = await fetch(DEMO_STATUS_URL, {\n        credentials: \"same-origin\",\n      });\n      if (!res.ok) return null;\n      return (await res.json()) as DemoStatus | null;\n    },\n    staleTime: Infinity,\n  });\n\n  const serverEnabled = data?.enabled;\n  const forced = data?.forced === true;\n\n  // Surface the server value once it arrives (and on subsequent polls), but\n  // never clobber an in-flight optimistic toggle with a stale read. When\n  // forced by env, always reflect the locked-on state.\n  useEffect(() => {\n    if (forced) {\n      setEnabled(true);\n    } else if (typeof serverEnabled === \"boolean\") {\n      setEnabled((prev) => (prev === null ? serverEnabled : prev));\n    } else if (serverEnabled === undefined && data !== undefined) {\n      setEnabled((prev) => (prev === null ? false : prev));\n    }\n  }, [serverEnabled, forced, data]);\n\n  const toggle = async (next: boolean) => {\n    if (forced) return;\n    const previous = enabled;\n    // Optimistic: flip immediately, write in the background.\n    setEnabled(next);\n    try {\n      const res = await fetch(DEMO_MODE_WRITE_URL, {\n        method: \"PUT\",\n        headers: { \"Content-Type\": \"application/json\" },\n        credentials: \"include\",\n        body: JSON.stringify({ enabled: next }),\n      });\n      if (!res.ok) {\n        throw new Error(`HTTP ${res.status}`);\n      }\n    } catch {\n      setEnabled(previous);\n    }\n  };\n\n  return (\n    <div className=\"flex items-start justify-between gap-3 rounded-md border border-border bg-accent/30 px-2.5 py-2\">\n      <div className=\"min-w-0\">\n        <div className=\"text-[11px] font-medium text-foreground\">\n          Enable demo mode\n        </div>\n        <p className=\"text-[10px] text-muted-foreground mt-0.5\">\n          Replace contact/free-text names, emails, and numbers with realistic\n          fake data everywhere — in the UI and what the agent sees. Labels, IDs,\n          and structure are preserved so the app keeps working.\n        </p>\n        {forced && (\n          <p className=\"text-[10px] text-muted-foreground mt-0.5\">\n            Enforced by the <code>DEMO_MODE</code> environment variable — can't\n            be turned off here.\n          </p>\n        )}\n      </div>\n      <button\n        type=\"button\"\n        role=\"switch\"\n        aria-checked={!!enabled}\n        aria-label=\"Enable demo mode\"\n        disabled={enabled === null || forced}\n        onClick={() => toggle(!enabled)}\n        // Theme tokens; streaming agent owns layout.\n        className={`relative inline-flex h-4 w-7 shrink-0 cursor-pointer items-center rounded-full transition-colors ${\n          enabled\n            ? \"bg-primary\"\n            : \"bg-muted-foreground/30 hover:bg-muted-foreground/50\"\n        } ${enabled === null || forced ? \"opacity-60\" : \"\"}`}\n      >\n        <span\n          className={`inline-block h-3 w-3 transform rounded-full bg-background transition-transform ${\n            enabled ? \"translate-x-3.5\" : \"translate-x-0.5\"\n          }`}\n        />\n      </button>\n    </div>\n  );\n}\n\nexport function DemoModeIcon() {\n  return <IconEyeOff size={14} />;\n}\n"]}
+{"version":3,"file":"DemoModeSection.js","sourceRoot":"","sources":["../../../src/client/settings/DemoModeSection.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAE5C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D,MAAM,mBAAmB,GAAG,eAAe,CACzC,4CAA4C,CAC7C,CAAC;AAEF,MAAM,UAAU,eAAe;IAC7B,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAiB,IAAI,CAAC,CAAC;IAC7D,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,iBAAiB,EAAE,CAAC;IAE1E,0EAA0E;IAC1E,uEAAuE;IACvE,qDAAqD;IACrD,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,MAAM,EAAE,CAAC;YACX,UAAU,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;aAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtB,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,KAAK,EAAE,IAAa,EAAE,EAAE;QACrC,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,QAAQ,GAAG,OAAO,CAAC;QACzB,yDAAyD;QACzD,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,mBAAmB,EAAE;gBAC3C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,WAAW,EAAE,SAAS;gBACtB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;aACxC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CACL,eAAK,SAAS,EAAC,iGAAiG,aAC9G,eAAK,SAAS,EAAC,SAAS,aACtB,cAAK,SAAS,EAAC,yCAAyC,iCAElD,EACN,YAAG,SAAS,EAAC,0CAA0C,sNAInD,EACH,MAAM,IAAI,CACT,aAAG,SAAS,EAAC,0CAA0C,iCACrC,uCAAsB,8DAEpC,CACL,IACG,EACN,iBACE,IAAI,EAAC,QAAQ,EACb,IAAI,EAAC,QAAQ,kBACC,CAAC,CAAC,OAAO,gBACZ,kBAAkB,EAC7B,QAAQ,EAAE,OAAO,KAAK,IAAI,IAAI,MAAM,EACpC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBAC/B,6CAA6C;gBAC7C,SAAS,EAAE,oGACT,OAAO;oBACL,CAAC,CAAC,YAAY;oBACd,CAAC,CAAC,qDACN,IAAI,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,YAEpD,eACE,SAAS,EAAE,kFACT,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAChC,EAAE,GACF,GACK,IACL,CACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,KAAC,UAAU,IAAC,IAAI,EAAE,EAAE,GAAI,CAAC;AAClC,CAAC","sourcesContent":["/**\n * <DemoModeSection /> — toggle that replaces contact/free-text names, emails,\n * and numbers with realistic fake data everywhere (UI + what the agent sees)\n * while preserving labels, IDs, and structure so the app keeps working.\n *\n * The toggle is stored in application_state under `demo-mode`\n * (`{ enabled: boolean }`) and written via `PUT\n * /_agent-native/application-state/demo-mode` (optimistic — flip first,\n * write in the background). It READS from `/_agent-native/demo/status`\n * instead, which ORs the per-user toggle with the `DEMO_MODE` env: a hosted\n * demo deployment is forced on and the switch is locked so it can't be\n * accidentally turned off on stage.\n */\n\nimport { IconEyeOff } from \"@tabler/icons-react\";\nimport { useEffect, useState } from \"react\";\n\nimport { agentNativePath } from \"../api-path.js\";\nimport { useDemoModeStatus } from \"../use-demo-mode-status.js\";\n\nconst DEMO_MODE_WRITE_URL = agentNativePath(\n  \"/_agent-native/application-state/demo-mode\",\n);\n\nexport function DemoModeSection() {\n  const [enabled, setEnabled] = useState<boolean | null>(null);\n  const { enabled: serverEnabled, forced, isLoading } = useDemoModeStatus();\n\n  // Surface the server value once it arrives (and on subsequent polls), but\n  // never clobber an in-flight optimistic toggle with a stale read. When\n  // forced by env, always reflect the locked-on state.\n  useEffect(() => {\n    if (forced) {\n      setEnabled(true);\n    } else if (!isLoading) {\n      setEnabled((prev) => (prev === null ? serverEnabled : prev));\n    }\n  }, [serverEnabled, forced, isLoading]);\n\n  const toggle = async (next: boolean) => {\n    if (forced) return;\n    const previous = enabled;\n    // Optimistic: flip immediately, write in the background.\n    setEnabled(next);\n    try {\n      const res = await fetch(DEMO_MODE_WRITE_URL, {\n        method: \"PUT\",\n        headers: { \"Content-Type\": \"application/json\" },\n        credentials: \"include\",\n        body: JSON.stringify({ enabled: next }),\n      });\n      if (!res.ok) {\n        throw new Error(`HTTP ${res.status}`);\n      }\n    } catch {\n      setEnabled(previous);\n    }\n  };\n\n  return (\n    <div className=\"flex items-start justify-between gap-3 rounded-md border border-border bg-accent/30 px-2.5 py-2\">\n      <div className=\"min-w-0\">\n        <div className=\"text-[11px] font-medium text-foreground\">\n          Enable demo mode\n        </div>\n        <p className=\"text-[10px] text-muted-foreground mt-0.5\">\n          Replace contact/free-text names, emails, and numbers with realistic\n          fake data everywhere — in the UI and what the agent sees. Labels, IDs,\n          and structure are preserved so the app keeps working.\n        </p>\n        {forced && (\n          <p className=\"text-[10px] text-muted-foreground mt-0.5\">\n            Enforced by the <code>DEMO_MODE</code> environment variable — can't\n            be turned off here.\n          </p>\n        )}\n      </div>\n      <button\n        type=\"button\"\n        role=\"switch\"\n        aria-checked={!!enabled}\n        aria-label=\"Enable demo mode\"\n        disabled={enabled === null || forced}\n        onClick={() => toggle(!enabled)}\n        // Theme tokens; streaming agent owns layout.\n        className={`relative inline-flex h-4 w-7 shrink-0 cursor-pointer items-center rounded-full transition-colors ${\n          enabled\n            ? \"bg-primary\"\n            : \"bg-muted-foreground/30 hover:bg-muted-foreground/50\"\n        } ${enabled === null || forced ? \"opacity-60\" : \"\"}`}\n      >\n        <span\n          className={`inline-block h-3 w-3 transform rounded-full bg-background transition-transform ${\n            enabled ? \"translate-x-3.5\" : \"translate-x-0.5\"\n          }`}\n        />\n      </button>\n    </div>\n  );\n}\n\nexport function DemoModeIcon() {\n  return <IconEyeOff size={14} />;\n}\n"]}

package/dist/client/url-scrub.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"url-scrub.d.ts","sourceRoot":"","sources":["../../src/client/url-scrub.ts"],"names":[],"mappings":"AAgBA,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAqBpE"}
+{"version":3,"file":"url-scrub.d.ts","sourceRoot":"","sources":["../../src/client/url-scrub.ts"],"names":[],"mappings":"AAiBA,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAiCpE"}

package/dist/client/url-scrub.js

@@ -12,6 +12,7 @@ const SENSITIVE_QUERY_PARAMS = new Set([
     "code",
     "share",
     "share_token",
+    "bridge",
 ]);
 export function scrubUrl(url) {
     if (!url || typeof url !== "string")
@@ -26,6 +27,19 @@ export function scrubUrl(url) {
                 mutated = true;
             }
         }
+        if (u.hash.includes("=")) {
+            const hashParams = new URLSearchParams(u.hash.slice(1));
+            let hashMutated = false;
+            for (const key of Array.from(hashParams.keys())) {
+                if (SENSITIVE_QUERY_PARAMS.has(key.toLowerCase())) {
+                    hashParams.set(key, "<redacted>");
+                    mutated = true;
+                    hashMutated = true;
+                }
+            }
+            if (hashMutated)
+                u.hash = hashParams.toString();
+        }
         if (!mutated)
             return url;
         // If the original URL was relative, return only the path/query/fragment.

package/dist/client/url-scrub.js.map

@@ -1 +1 @@
-{"version":3,"file":"url-scrub.js","sourceRoot":"","sources":["../../src/client/url-scrub.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,UAAU;IACV,GAAG;IACH,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,UAAU,QAAQ,CAAC,GAAuB;IAC9C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAChD,IAAI,CAAC;QACH,yDAAyD;QACzD,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACnD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACpD,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAClD,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBACtC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC;QACzB,yEAAyE;QACzE,IAAI,CAAC,CAAC,MAAM,KAAK,0BAA0B,EAAE,CAAC;YAC5C,OAAO,GAAG,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,CAAC;QACD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC","sourcesContent":["/**\n * Query parameters that may carry sensitive values in the URL bar. Browser\n * telemetry and feedback integrations must not copy OAuth codes, share tokens,\n * password params, email-confirm tokens, or similar secrets into downstream\n * systems.\n */\nconst SENSITIVE_QUERY_PARAMS = new Set([\n  \"password\",\n  \"p\",\n  \"token\",\n  \"state\",\n  \"code\",\n  \"share\",\n  \"share_token\",\n]);\n\nexport function scrubUrl(url: string | undefined): string | undefined {\n  if (!url || typeof url !== \"string\") return url;\n  try {\n    // Parse using a base origin so relative URLs still work.\n    const u = new URL(url, \"http://placeholder.local\");\n    let mutated = false;\n    for (const key of Array.from(u.searchParams.keys())) {\n      if (SENSITIVE_QUERY_PARAMS.has(key.toLowerCase())) {\n        u.searchParams.set(key, \"<redacted>\");\n        mutated = true;\n      }\n    }\n    if (!mutated) return url;\n    // If the original URL was relative, return only the path/query/fragment.\n    if (u.origin === \"http://placeholder.local\") {\n      return `${u.pathname}${u.search}${u.hash}`;\n    }\n    return u.toString();\n  } catch {\n    return url;\n  }\n}\n"]}
+{"version":3,"file":"url-scrub.js","sourceRoot":"","sources":["../../src/client/url-scrub.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,UAAU;IACV,GAAG;IACH,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,aAAa;IACb,QAAQ;CACT,CAAC,CAAC;AAEH,MAAM,UAAU,QAAQ,CAAC,GAAuB;IAC9C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAChD,IAAI,CAAC;QACH,yDAAyD;QACzD,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACnD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACpD,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAClD,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBACtC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,IAAI,WAAW,GAAG,KAAK,CAAC;YACxB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBAChD,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBAClD,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;oBAClC,OAAO,GAAG,IAAI,CAAC;oBACf,WAAW,GAAG,IAAI,CAAC;gBACrB,CAAC;YACH,CAAC;YACD,IAAI,WAAW;gBAAE,CAAC,CAAC,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC;QACzB,yEAAyE;QACzE,IAAI,CAAC,CAAC,MAAM,KAAK,0BAA0B,EAAE,CAAC;YAC5C,OAAO,GAAG,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,CAAC;QACD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC","sourcesContent":["/**\n * Query parameters that may carry sensitive values in the URL bar. Browser\n * telemetry and feedback integrations must not copy OAuth codes, share tokens,\n * password params, email-confirm tokens, or similar secrets into downstream\n * systems.\n */\nconst SENSITIVE_QUERY_PARAMS = new Set([\n  \"password\",\n  \"p\",\n  \"token\",\n  \"state\",\n  \"code\",\n  \"share\",\n  \"share_token\",\n  \"bridge\",\n]);\n\nexport function scrubUrl(url: string | undefined): string | undefined {\n  if (!url || typeof url !== \"string\") return url;\n  try {\n    // Parse using a base origin so relative URLs still work.\n    const u = new URL(url, \"http://placeholder.local\");\n    let mutated = false;\n    for (const key of Array.from(u.searchParams.keys())) {\n      if (SENSITIVE_QUERY_PARAMS.has(key.toLowerCase())) {\n        u.searchParams.set(key, \"<redacted>\");\n        mutated = true;\n      }\n    }\n    if (u.hash.includes(\"=\")) {\n      const hashParams = new URLSearchParams(u.hash.slice(1));\n      let hashMutated = false;\n      for (const key of Array.from(hashParams.keys())) {\n        if (SENSITIVE_QUERY_PARAMS.has(key.toLowerCase())) {\n          hashParams.set(key, \"<redacted>\");\n          mutated = true;\n          hashMutated = true;\n        }\n      }\n      if (hashMutated) u.hash = hashParams.toString();\n    }\n    if (!mutated) return url;\n    // If the original URL was relative, return only the path/query/fragment.\n    if (u.origin === \"http://placeholder.local\") {\n      return `${u.pathname}${u.search}${u.hash}`;\n    }\n    return u.toString();\n  } catch {\n    return url;\n  }\n}\n"]}

package/dist/client/use-demo-mode-status.d.ts

@@ -0,0 +1,12 @@
+export interface DemoModeStatus {
+    enabled: boolean;
+    forced: boolean;
+    isLoading: boolean;
+}
+/**
+ * Reads the effective Demo mode status for the current user. The shared
+ * change-version stream advances after Demo mode application state changes,
+ * so mounted consumers refresh without polling or duplicating the route call.
+ */
+export declare function useDemoModeStatus(): DemoModeStatus;
+//# sourceMappingURL=use-demo-mode-status.d.ts.map

package/dist/client/use-demo-mode-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-demo-mode-status.d.ts","sourceRoot":"","sources":["../../src/client/use-demo-mode-status.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAID;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,CAoBlD"}

package/dist/client/use-demo-mode-status.js

@@ -0,0 +1,30 @@
+import { useQuery } from "@tanstack/react-query";
+import { agentNativePath } from "./api-path.js";
+import { useChangeVersion } from "./use-change-version.js";
+const DEMO_STATUS_URL = agentNativePath("/_agent-native/demo/status");
+/**
+ * Reads the effective Demo mode status for the current user. The shared
+ * change-version stream advances after Demo mode application state changes,
+ * so mounted consumers refresh without polling or duplicating the route call.
+ */
+export function useDemoModeStatus() {
+    const demoModeVersion = useChangeVersion("app-state:demo-mode");
+    const { data, isLoading } = useQuery({
+        queryKey: ["agent-native", "demo-mode", demoModeVersion],
+        queryFn: async () => {
+            const res = await fetch(DEMO_STATUS_URL, {
+                credentials: "same-origin",
+            });
+            if (!res.ok)
+                return null;
+            return (await res.json());
+        },
+        staleTime: Infinity,
+    });
+    return {
+        enabled: data?.enabled === true,
+        forced: data?.forced === true,
+        isLoading,
+    };
+}
+//# sourceMappingURL=use-demo-mode-status.js.map

package/dist/client/use-demo-mode-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-demo-mode-status.js","sourceRoot":"","sources":["../../src/client/use-demo-mode-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEjD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAa3D,MAAM,eAAe,GAAG,eAAe,CAAC,4BAA4B,CAAC,CAAC;AAEtE;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,eAAe,GAAG,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;IAEhE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;QACnC,QAAQ,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,eAAe,CAAC;QACxD,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE;gBACvC,WAAW,EAAE,aAAa;aAC3B,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YACzB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkC,CAAC;QAC7D,CAAC;QACD,SAAS,EAAE,QAAQ;KACpB,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,IAAI,EAAE,OAAO,KAAK,IAAI;QAC/B,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI;QAC7B,SAAS;KACV,CAAC;AACJ,CAAC","sourcesContent":["import { useQuery } from \"@tanstack/react-query\";\n\nimport { agentNativePath } from \"./api-path.js\";\nimport { useChangeVersion } from \"./use-change-version.js\";\n\ninterface DemoModeStatusResponse {\n  enabled?: boolean;\n  forced?: boolean;\n}\n\nexport interface DemoModeStatus {\n  enabled: boolean;\n  forced: boolean;\n  isLoading: boolean;\n}\n\nconst DEMO_STATUS_URL = agentNativePath(\"/_agent-native/demo/status\");\n\n/**\n * Reads the effective Demo mode status for the current user. The shared\n * change-version stream advances after Demo mode application state changes,\n * so mounted consumers refresh without polling or duplicating the route call.\n */\nexport function useDemoModeStatus(): DemoModeStatus {\n  const demoModeVersion = useChangeVersion(\"app-state:demo-mode\");\n\n  const { data, isLoading } = useQuery({\n    queryKey: [\"agent-native\", \"demo-mode\", demoModeVersion],\n    queryFn: async () => {\n      const res = await fetch(DEMO_STATUS_URL, {\n        credentials: \"same-origin\",\n      });\n      if (!res.ok) return null;\n      return (await res.json()) as DemoModeStatusResponse | null;\n    },\n    staleTime: Infinity,\n  });\n\n  return {\n    enabled: data?.enabled === true,\n    forced: data?.forced === true,\n    isLoading,\n  };\n}\n"]}

package/dist/collab/struct-routes.d.ts

@@ -13,8 +13,8 @@
  * Body: { json: any, fieldName?: string, type?: "map"|"array", requestSource?: string }
  */
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/notifications/routes.d.ts

@@ -13,13 +13,13 @@
 export declare function createNotificationsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<"" | import("./types.js").Notification[] | {
     count: number;
     updated?: undefined;
-    ok?: undefined;
     error?: undefined;
+    ok?: undefined;
 } | {
     count?: undefined;
     updated: number;
-    ok?: undefined;
     error?: undefined;
+    ok?: undefined;
 } | {
     count?: undefined;
     updated?: undefined;
@@ -28,7 +28,7 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
 } | {
     count?: undefined;
     updated?: undefined;
-    ok: boolean;
     error?: undefined;
+    ok: boolean;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/observability/routes.d.ts

@@ -41,28 +41,28 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
-    error?: undefined;
-    ok?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
-} | {
     error?: undefined;
     ok?: undefined;
+} | {
     summary?: undefined;
     spans?: undefined;
     id: string;
-} | {
+    error?: undefined;
     ok?: undefined;
+} | {
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
     error: any;
+    ok?: undefined;
 } | {
-    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
+    error?: undefined;
     ok: boolean;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/progress/routes.d.ts

@@ -15,7 +15,7 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/resources/handlers.d.ts

@@ -49,11 +49,11 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>;
 /** POST /_agent-native/resources/upload — upload a file as a resource */
 export declare function handleUploadResource(event: any): Promise<import("./store.js").Resource | {
@@ -74,10 +74,10 @@ export declare function handleUploadResource(event: any): Promise<import("./stor
     runId: string | null;
     expiresAt: number | null;
     metadata: string | null;
-    error?: undefined;
     url: string;
     provider: string;
     storageSetupRequired?: undefined;
+    error?: undefined;
 } | {
     error: string;
     storageSetupRequired: boolean;

package/dist/secrets/routes.d.ts

@@ -34,37 +34,37 @@ export declare function createListSecretsHandler(): import("h3").EventHandlerWit
 /** POST /_agent-native/secrets/:key — write a secret. */
 export declare function createWriteSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
-    ok?: undefined;
     status?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     status: string;
+    error?: undefined;
 } | {
-    ok?: undefined;
     error: string;
     removed?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     removed: boolean;
+    error?: undefined;
 }>>;
 /**
  * POST /_agent-native/secrets/:key/test — re-run the validator against the
  * current stored value without changing anything. Useful for the "Test" button.
  */
 export declare function createTestSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
     note?: undefined;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
     note?: undefined;
-} | {
     error?: undefined;
+} | {
     ok: boolean;
     note: string;
+    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -95,12 +95,12 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
-    error?: undefined;
     ok: boolean;
     key: string;
-} | {
     error?: undefined;
+} | {
     ok: boolean;
     removed: boolean;
+    error?: undefined;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/docs/content/locales/ar-SA/pr-visual-recap.mdx

@@ -123,6 +123,28 @@ npx @agent-native/core@latest recap doctor
 يثبت مجلد `visual-recap` المخصص له، ويضبط متغير المستودع
 `VISUAL_RECAP_SKILL_SOURCE=repo`.
 
+## اختيار المشغّل
+
+يعمل سير العمل افتراضيًا على مشغّلات `ubuntu-latest` المستضافة من GitHub. لاستخدام مشغّل مستضاف آخر أو مشغّل ذاتي الاستضافة، اضبط متغير المستودع أو المؤسسة `VISUAL_RECAP_RUNS_ON` على سلسلة JSON صالحة أو مصفوفة JSON من تسميات المشغّل:
+
+```text
+"ubuntu-latest"
+["self-hosted", "linux", "x64", "visual-recap"]
+```
+
+علامات الاقتباس في JSON مطلوبة. تحدد هذه القيمة مشغّل مهمة `recap` الكاملة. لتكوينه أثناء الإعداد الموجّه، مرّر قيمة JSON نفسها إلى `--runs-on`، ثم تحقق من سير العمل وتوفر المشغّل باستخدام `doctor`:
+
+```bash
+npx @agent-native/core@latest recap setup --runs-on '["self-hosted","linux","x64","visual-recap"]'
+npx @agent-native/core@latest recap doctor
+```
+
+تستخدم بوابة الأمان الخفيفة `ubuntu-latest` بشكل منفصل. يمكن للمستودعات التي تعطل مشغّلات GitHub المستضافة ضبط `VISUAL_RECAP_GATE_RUNS_ON` على تسمية نصية واحدة بلا JSON، أو استخدام `--gate-runs-on visual-recap-gate`. تُستخدم التسمية المخصصة فقط لمؤلفي `OWNER` أو `MEMBER` أو `COLLABORATOR` من المستودع نفسه؛ تُفرض `ubuntu-latest` على الفروع والمؤلفين الآخرين وقد تبقى عملياتهم بلا جدولة عند تعطيل مشغّلات GitHub المستضافة. استخدم مشغّلًا مخصصًا ويفضل أن يكون مؤقتًا؛ لا تسحب البوابة القياسية شجرة PR وتقيّم منطق سير العمل وبيانات PR الوصفية.
+
+يرفض `recap doctor` بيانات JSON غير الصالحة أو غير المدعومة، ويبلغ عندما لا يعرض GitHub مشغّلًا متصلًا يطابق جميع التسميات المكوّنة. يظل تسجيل المشغّل وتثبيته وترقياته وسعته وصيانته من مسؤوليتك؛ يحدد Agent Native التسميات ولكنه لا يوفر المشغّل ولا يديره.
+
+**الأمان:** يُفضّل استخدام مشغّلات ذاتية الاستضافة مؤقتة. يجب أن تخدم المشغّلات الدائمة ذاتية الاستضافة المستودعات الخاصة التي يقتصر المساهمون فيها على أشخاص موثوق بهم. يُغلق سير العمل بأمان قبل جدولة عمل ذاتي الاستضافة لمؤلفي PR غير الموثوق بهم في المستودعات العامة أو المتفرعة، لكن الجهاز الدائم يظل محتفظًا بحالة مساحة العمل والعمليات بين المهام. لا تضعف هذه البوابة ولا توجه مساهمات غير موثوقة إلى مشغّل دائم.
+
 ## تحديد الخلفية
 
 اختر وكيل الترميز الذي يقوم بتشغيل المهارة باستخدام متغير المستودع `VISUAL_RECAP_AGENT`:
@@ -460,10 +482,12 @@ jobs:
       model: ${{ vars.VISUAL_RECAP_MODEL || '' }}
       reasoning: ${{ vars.VISUAL_RECAP_REASONING || '' }}
       skill-source: ${{ vars.VISUAL_RECAP_SKILL_SOURCE || 'auto' }}
+      runs-on: ${{ vars.VISUAL_RECAP_RUNS_ON || '"ubuntu-latest"' }}
+      gate-runs-on: ${{ vars.VISUAL_RECAP_GATE_RUNS_ON || 'ubuntu-latest' }}
       # cli-version: "latest"  # pin to a specific @agent-native/core version
 ```
 
-تنطبق نفس الأسرار والمتغيرات الموضحة في [Secrets and variables](#secrets-and-variables) - قم بتعيينها في إعدادات الريبو الخاصة بك بنفس الطريقة كما في متغير النسخ.
+تنطبق الأسرار والمتغيرات نفسها الموضحة في [Secrets and variables](#secrets-and-variables). يمرر المتصل القابل لإعادة الاستخدام `VISUAL_RECAP_RUNS_ON` كـ `runs-on` للمهمة الكاملة، و`VISUAL_RECAP_GATE_RUNS_ON` كتسمية مفردة `gate-runs-on` للبوابة. يستخدم كلاهما `ubuntu-latest` عند الحذف.
 
 ### التثبيت عبر CLI
 

package/docs/content/locales/ar-SA/template-plan.mdx

@@ -290,7 +290,7 @@ npx @agent-native/core@latest plan local serve --dir plans/<slug> --kind plan --
 ```
 
 يبدو شكل الجسر URL
-`https://plan.agent-native.com/local-plans/<slug>?bridge=http://127.0.0.1:...`.
+`https://plan.agent-native.com/local-plans/local-<opaque-id>#bridge=http://127.0.0.1:...`.
 الصفحة هي عارض الخطة العادي، لكن المتصفح يجلب `plan.mdx`،
 `canvas.mdx`، و`prototype.mdx`، و`.plan-state.json`، وأصول الصور المحلية من
 جسر المضيف المحلي. لا تتم كتابة محتوى الخطة في قاعدة البيانات المستضافة وهي

package/docs/content/locales/de-DE/pr-visual-recap.mdx

@@ -123,6 +123,28 @@ Referenzdateien, mit denen der Skill geliefert wird. Wenn Ihr Repo absichtlich a
 pinnen den festgeschriebenen `visual-recap`-Ordner an und legen die Repository-Variable fest
 `VISUAL_RECAP_SKILL_SOURCE=repo`.
 
+## Runner-Auswahl
+
+Standardmäßig wird der Workflow auf von GitHub gehosteten `ubuntu-latest`-Runnern ausgeführt. Um einen anderen gehosteten Runner oder einen eigenen selbst gehosteten Runner zu verwenden, setzen Sie die Repository- oder Organisationsvariable `VISUAL_RECAP_RUNS_ON` auf eine gültige JSON-Zeichenfolge oder ein JSON-Array mit Runner-Labels:
+
+```text
+"ubuntu-latest"
+["self-hosted", "linux", "x64", "visual-recap"]
+```
+
+Die JSON-Anführungszeichen sind erforderlich. Dieser Wert wählt den Runner für den vollständigen `recap`-Job. Übergeben Sie zur Konfiguration während der geführten Einrichtung denselben JSON-Wert an `--runs-on` und prüfen Sie anschließend den Workflow und die Verfügbarkeit des Runners mit `doctor`:
+
+```bash
+npx @agent-native/core@latest recap setup --runs-on '["self-hosted","linux","x64","visual-recap"]'
+npx @agent-native/core@latest recap doctor
+```
+
+Das einfache Gate verwendet separat `ubuntu-latest`. Repositorys ohne von GitHub gehostete Runner können `VISUAL_RECAP_GATE_RUNS_ON` auf ein einzelnes Klartext-Label ohne JSON setzen oder `--gate-runs-on visual-recap-gate` verwenden. Das benutzerdefinierte Label gilt nur für `OWNER`-, `MEMBER`- oder `COLLABORATOR`-Autoren desselben Repositorys; Forks und andere Autoren werden auf `ubuntu-latest` gezwungen und können ohne GitHub-gehostete Runner ungeplant bleiben. Nutzen Sie einen dedizierten, möglichst kurzlebigen Runner: Das Standard-Gate checkt den PR-Baum nicht aus und wertet Workflow-Logik sowie PR-Metadaten aus.
+
+`recap doctor` lehnt fehlerhaftes oder nicht unterstütztes JSON ab und meldet, wenn GitHub keinen Online-Runner bereitstellt, der alle konfigurierten Labels erfüllt. Registrierung, Installation, Upgrades, Kapazität und Wartung des Runners liegen weiterhin in Ihrer Verantwortung; Agent Native wählt die Labels aus, stellt oder betreibt den Runner jedoch nicht.
+
+**Sicherheit:** Bevorzugen Sie kurzlebige selbst gehostete Runner. Persistente selbst gehostete Runner sollten nur privaten Repositorys mit vertrauenswürdigen Mitwirkenden dienen. Der Workflow bricht ab, bevor selbst gehostete Arbeit für nicht vertrauenswürdige Autoren öffentlicher oder Fork-PRs eingeplant wird, doch eine persistente Maschine behält zwischen Jobs weiterhin Arbeitsbereichs- und Prozesszustand. Schwächen Sie dieses Gate nicht ab und leiten Sie keine nicht vertrauenswürdigen Beiträge an einen persistenten Runner weiter.
+
 ## Backend-Auswahl
 
 Wählen Sie mit der Repository-Variable `VISUAL_RECAP_AGENT` aus, welcher Codierungsagent den Skill ausführt:
@@ -460,10 +482,12 @@ jobs:
       model: ${{ vars.VISUAL_RECAP_MODEL || '' }}
       reasoning: ${{ vars.VISUAL_RECAP_REASONING || '' }}
       skill-source: ${{ vars.VISUAL_RECAP_SKILL_SOURCE || 'auto' }}
+      runs-on: ${{ vars.VISUAL_RECAP_RUNS_ON || '"ubuntu-latest"' }}
+      gate-runs-on: ${{ vars.VISUAL_RECAP_GATE_RUNS_ON || 'ubuntu-latest' }}
       # cli-version: "latest"  # pin to a specific @agent-native/core version
 ```
 
-Es gelten die gleichen Geheimnisse und Variablen wie in [Secrets and variables](#secrets-and-variables) beschrieben – legen Sie sie in Ihren Repo-Einstellungen auf die gleiche Weise fest wie für die Kopiervariante.
+Es gelten dieselben Geheimnisse und Variablen wie unter [Secrets and variables](#secrets-and-variables). Der wiederverwendbare Aufrufer leitet `VISUAL_RECAP_RUNS_ON` als `runs-on` für den vollständigen Job und `VISUAL_RECAP_GATE_RUNS_ON` als einfaches `gate-runs-on`-Label für das Gate weiter. Ohne Eingabe verwenden beide `ubuntu-latest`.
 
 ### Installation über CLI
 

package/docs/content/locales/de-DE/template-plan.mdx

@@ -292,7 +292,7 @@ npx @agent-native/core@latest plan local serve --dir plans/<slug> --kind plan --
 ```
 
 Die Brücke URL sieht aus wie
-`https://plan.agent-native.com/local-plans/<slug>?bridge=http://127.0.0.1:...`.
+`https://plan.agent-native.com/local-plans/local-<opaque-id>#bridge=http://127.0.0.1:...`.
 Die Seite ist der normale Plan-Viewer, aber der Browser ruft `plan.mdx` ab,
 `canvas.mdx`, `prototype.mdx`, `.plan-state.json` und lokale Bildressourcen von
 die Localhost-Brücke. Planinhalte werden nicht in die gehostete Datenbank geschrieben und sind

package/docs/content/locales/es-ES/pr-visual-recap.mdx

@@ -123,6 +123,28 @@ archivos de referencia con los que se envía la habilidad. Si su repositorio per
 fija su carpeta `visual-recap` comprometida, establece la variable del repositorio
 `VISUAL_RECAP_SKILL_SOURCE=repo`.
 
+## Selección del ejecutor
+
+De forma predeterminada, el flujo de trabajo se ejecuta en ejecutores `ubuntu-latest` alojados por GitHub. Para usar otro ejecutor alojado o uno autohospedado, establezca la variable de repositorio u organización `VISUAL_RECAP_RUNS_ON` en una cadena JSON válida o en una matriz JSON de etiquetas de ejecutor:
+
+```text
+"ubuntu-latest"
+["self-hosted", "linux", "x64", "visual-recap"]
+```
+
+Las comillas JSON son obligatorias. Este valor selecciona el ejecutor del trabajo completo `recap`. Para configurarlo durante la instalación guiada, pase el mismo valor JSON a `--runs-on` y después valide el flujo de trabajo y la disponibilidad del ejecutor con `doctor`:
+
+```bash
+npx @agent-native/core@latest recap setup --runs-on '["self-hosted","linux","x64","visual-recap"]'
+npx @agent-native/core@latest recap doctor
+```
+
+La barrera ligera usa `ubuntu-latest` por separado. Los repositorios sin ejecutores alojados por GitHub pueden establecer `VISUAL_RECAP_GATE_RUNS_ON` en una sola etiqueta de texto sin JSON, o usar `--gate-runs-on visual-recap-gate`. La etiqueta personalizada solo se usa para autores `OWNER`, `MEMBER` o `COLLABORATOR` del mismo repositorio; los forks y demás autores se fuerzan a `ubuntu-latest` y pueden quedar sin programar si los ejecutores alojados están desactivados. Use un ejecutor dedicado y, preferiblemente, efímero: la barrera estándar no descarga el árbol del PR y evalúa la lógica del flujo de trabajo y los metadatos del PR.
+
+`recap doctor` rechaza JSON con formato incorrecto o no compatible e informa cuando GitHub no expone ningún ejecutor en línea que coincida con todas las etiquetas configuradas. El registro, la instalación, las actualizaciones, la capacidad y el mantenimiento del ejecutor siguen siendo su responsabilidad; Agent Native selecciona las etiquetas, pero no proporciona ni opera el ejecutor.
+
+**Seguridad:** Prefiera ejecutores autohospedados efímeros. Los ejecutores autohospedados persistentes solo deben servir a repositorios privados cuyos colaboradores sean de confianza. El flujo de trabajo se cierra de forma segura antes de asignar trabajo autohospedado a autores no confiables de PR públicos o de bifurcaciones, pero una máquina persistente conserva el estado del espacio de trabajo y de los procesos entre trabajos. No debilite esa barrera ni envíe contribuciones no confiables a un ejecutor persistente.
+
 ## Selección de backend
 
 Elija qué agente de codificación ejecuta la habilidad con la variable de repositorio `VISUAL_RECAP_AGENT`:
@@ -460,10 +482,12 @@ jobs:
       model: ${{ vars.VISUAL_RECAP_MODEL || '' }}
       reasoning: ${{ vars.VISUAL_RECAP_REASONING || '' }}
       skill-source: ${{ vars.VISUAL_RECAP_SKILL_SOURCE || 'auto' }}
+      runs-on: ${{ vars.VISUAL_RECAP_RUNS_ON || '"ubuntu-latest"' }}
+      gate-runs-on: ${{ vars.VISUAL_RECAP_GATE_RUNS_ON || 'ubuntu-latest' }}
       # cli-version: "latest"  # pin to a specific @agent-native/core version
 ```
 
-Se aplican los mismos secretos y variables descritos en [Secrets and variables](#secrets-and-variables); configúrelos en la configuración de su repositorio de la misma manera que para la variante de copia.
+Se aplican los mismos secretos y variables descritos en [Secrets and variables](#secrets-and-variables); configúrelos como en la variante de copia. El llamador reutilizable reenvía `VISUAL_RECAP_RUNS_ON` como `runs-on` para el trabajo completo y `VISUAL_RECAP_GATE_RUNS_ON` como la etiqueta simple `gate-runs-on` para la barrera. Ambos conservan `ubuntu-latest` cuando se omiten.
 
 ### Instalación mediante CLI
 

package/docs/content/locales/es-ES/template-plan.mdx

@@ -290,7 +290,7 @@ npx @agent-native/core@latest plan local serve --dir plans/<slug> --kind plan --
 ```
 
 Parece el puente URL
-`https://plan.agent-native.com/local-plans/<slug>?bridge=http://127.0.0.1:...`.
+`https://plan.agent-native.com/local-plans/local-<opaque-id>#bridge=http://127.0.0.1:...`.
 La página es el visor de planes normal, pero el navegador recupera `plan.mdx`,
 `canvas.mdx`, `prototype.mdx`, `.plan-state.json` y recursos de imagen locales de
 el puente del host local. El contenido del plan no se escribe en la base de datos alojada y se

package/docs/content/locales/fr-FR/pr-visual-recap.mdx

@@ -123,6 +123,28 @@ fichiers de référence avec lesquels la compétence est livrée. Si votre dép
 épingle son dossier `visual-recap` validé, définit la variable du référentiel
 `VISUAL_RECAP_SKILL_SOURCE=repo`.
 
+## Sélection du runner
+
+Par défaut, le workflow s'exécute sur des runners `ubuntu-latest` hébergés par GitHub. Pour utiliser un autre runner hébergé ou votre propre runner auto-hébergé, définissez la variable de dépôt ou d'organisation `VISUAL_RECAP_RUNS_ON` sur une chaîne JSON valide ou un tableau JSON d'étiquettes de runner :
+
+```text
+"ubuntu-latest"
+["self-hosted", "linux", "x64", "visual-recap"]
+```
+
+Les guillemets JSON sont obligatoires. Cette valeur sélectionne le runner du job complet `recap`. Pour le configurer pendant l'installation guidée, transmettez la même valeur JSON à `--runs-on`, puis validez le workflow et la disponibilité du runner avec `doctor` :
+
+```bash
+npx @agent-native/core@latest recap setup --runs-on '["self-hosted","linux","x64","visual-recap"]'
+npx @agent-native/core@latest recap doctor
+```
+
+Le gate léger utilise séparément `ubuntu-latest`. Les dépôts sans runners hébergés par GitHub peuvent définir `VISUAL_RECAP_GATE_RUNS_ON` sur une seule étiquette en texte brut, sans JSON, ou utiliser `--gate-runs-on visual-recap-gate`. L'étiquette personnalisée ne s'applique qu'aux auteurs `OWNER`, `MEMBER` ou `COLLABORATOR` du même dépôt ; les forks et autres auteurs sont forcés sur `ubuntu-latest` et peuvent rester non planifiés si les runners hébergés sont désactivés. Utilisez un runner dédié et de préférence éphémère : le gate standard n'extrait pas l'arborescence de la PR et évalue la logique du workflow ainsi que les métadonnées de la PR.
+
+`recap doctor` rejette les données JSON mal formées ou non prises en charge et signale lorsque GitHub ne présente aucun runner en ligne correspondant à toutes les étiquettes configurées. L'enregistrement, l'installation, les mises à niveau, la capacité et la maintenance du runner restent sous votre responsabilité ; Agent Native sélectionne les étiquettes, mais ne fournit ni n'exploite le runner.
+
+**Sécurité :** Privilégiez les runners auto-hébergés éphémères. Les runners auto-hébergés persistants ne doivent servir que des dépôts privés dont les contributeurs sont dignes de confiance. Le workflow échoue de manière sûre avant de planifier du travail auto-hébergé pour des auteurs non fiables de PR publiques ou provenant de forks, mais une machine persistante conserve toujours l'état de l'espace de travail et des processus entre les jobs. N'affaiblissez pas cette barrière et n'acheminez pas de contributions non fiables vers un runner persistant.
+
 ## Sélection du back-end
 
 Choisissez quel agent de codage exécute la compétence avec la variable du référentiel `VISUAL_RECAP_AGENT` :
@@ -461,10 +483,12 @@ jobs:
       model: ${{ vars.VISUAL_RECAP_MODEL || '' }}
       reasoning: ${{ vars.VISUAL_RECAP_REASONING || '' }}
       skill-source: ${{ vars.VISUAL_RECAP_SKILL_SOURCE || 'auto' }}
+      runs-on: ${{ vars.VISUAL_RECAP_RUNS_ON || '"ubuntu-latest"' }}
+      gate-runs-on: ${{ vars.VISUAL_RECAP_GATE_RUNS_ON || 'ubuntu-latest' }}
       # cli-version: "latest"  # pin to a specific @agent-native/core version
 ```
 
-Les mêmes secrets et variables décrits dans [Secrets and variables](#secrets-and-variables) s'appliquent : définissez-les dans les paramètres de votre dépôt de la même manière que pour la variante de copie.
+Les mêmes secrets et variables décrits dans [Secrets and variables](#secrets-and-variables) s'appliquent. L'appelant réutilisable transmet `VISUAL_RECAP_RUNS_ON` via `runs-on` pour le job complet et `VISUAL_RECAP_GATE_RUNS_ON` via l'étiquette simple `gate-runs-on` pour le gate. Les deux utilisent `ubuntu-latest` par défaut.
 
 ### Installation via le CLI
 

package/docs/content/locales/fr-FR/template-plan.mdx

@@ -290,7 +290,7 @@ npx @agent-native/core@latest plan local serve --dir plans/<slug> --kind plan --
 ```
 
 Le pont URL ressemble à
-`https://plan.agent-native.com/local-plans/<slug>?bridge=http://127.0.0.1:...`.
+`https://plan.agent-native.com/local-plans/local-<opaque-id>#bridge=http://127.0.0.1:...`.
 La page est la visionneuse de plan normale, mais le navigateur récupère `plan.mdx`,
 `canvas.mdx`, `prototype.mdx`, `.plan-state.json` et éléments d'image locaux de
 le pont localhost. Le contenu du plan n'est pas écrit dans la base de données hébergée et est