@agent-native/core 0.98.17 → 0.99.1

package/dist/server/csrf.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"csrf.d.ts","sourceRoot":"","sources":["../../src/server/csrf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAsIH;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,eAAe,GAAE,MAAyB;;GAsB3C"}
+{"version":3,"file":"csrf.d.ts","sourceRoot":"","sources":["../../src/server/csrf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAuJH;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,eAAe,GAAE,MAAyB;;GAsB3C"}

package/dist/server/csrf.js

@@ -43,6 +43,7 @@
  * cross-origin-callable route, add it there.
  */
 import { defineEventHandler, getMethod, getRequestHeader, setResponseStatus, } from "h3";
+import { MCP_PUBLIC_ROUTE_PREFIX } from "../mcp/route-paths.js";
 import { getConfiguredAppBasePath } from "./app-base-path.js";
 /**
  * Path prefixes (relative to the framework prefix `/_agent-native`) that are
@@ -150,11 +151,21 @@ function isOnAllowlist(pathname, frameworkPrefix) {
 function matchingFrameworkPrefix(pathname, frameworkPrefix) {
     if (pathname.startsWith(frameworkPrefix))
         return frameworkPrefix;
+    if (pathname === MCP_PUBLIC_ROUTE_PREFIX ||
+        pathname.startsWith(`${MCP_PUBLIC_ROUTE_PREFIX}/`)) {
+        return MCP_PUBLIC_ROUTE_PREFIX;
+    }
     const basePath = getConfiguredAppBasePath();
     const basePathFrameworkPrefix = `${basePath}${frameworkPrefix}`;
     if (basePath && pathname.startsWith(basePathFrameworkPrefix)) {
         return basePathFrameworkPrefix;
     }
+    const basePathMcpPrefix = `${basePath}${MCP_PUBLIC_ROUTE_PREFIX}`;
+    if (basePath &&
+        (pathname === basePathMcpPrefix ||
+            pathname.startsWith(`${basePathMcpPrefix}/`))) {
+        return basePathMcpPrefix;
+    }
     return undefined;
 }
 /**

package/dist/server/csrf.js.map

@@ -1 +1 @@
-{"version":3,"file":"csrf.js","sourceRoot":"","sources":["../../src/server/csrf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,IAAI,CAAC;AAEZ,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,uBAAuB,GAAG;IAC9B,4EAA4E;IAC5E,gBAAgB;IAChB,2EAA2E;IAC3E,gEAAgE;IAChE,eAAe;IACf,qEAAqE;IACrE,4DAA4D;IAC5D,6BAA6B;IAC7B,2EAA2E;IAC3E,gEAAgE;IAChE,MAAM;IACN,sEAAsE;IACtE,0EAA0E;IAC1E,4DAA4D;IAC5D,QAAQ;IACR,8DAA8D;IAC9D,kBAAkB;IAClB,uEAAuE;IACvE,2EAA2E;IAC3E,SAAS;IACT,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,+BAA+B;IAC/B,SAAS;IACT,0EAA0E;IAC1E,uEAAuE;IACvE,mBAAmB;CACpB,CAAC;AAEF,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE3E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAS,eAAe,CAAC,KAAU;IACjC,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACtD,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC5D,IACE,WAAW;QACX,OAAO,WAAW,KAAK,QAAQ;QAC/B,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EACtD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,KAAU;IACnC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,QAAgB,EAAE,eAAuB;IAC9D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACnD,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;QAC9C,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAgB,EAChB,eAAuB;IAEvB,IAAI,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,eAAe,CAAC;IAEjE,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;IAC5C,MAAM,uBAAuB,GAAG,GAAG,QAAQ,GAAG,eAAe,EAAE,CAAC;IAChE,IAAI,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC7D,OAAO,uBAAuB,CAAC;IACjC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAClC,eAAe,GAAW,gBAAgB;IAE1C,OAAO,kBAAkB,CAAC,CAAC,KAAK,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QAE1D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;QAC3C,MAAM,cAAc,GAAG,uBAAuB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC1E,IAAI,CAAC,cAAc;YAAE,OAAO,SAAS,CAAC;QACtC,IAAI,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC;YAAE,OAAO,SAAS,CAAC;QAE9D,qEAAqE;QACrE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAEhD,IAAI,eAAe,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAE7C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EACH,6IAA6I;SAChJ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * Defense-in-depth CSRF check for framework state-changing routes.\n *\n * Threat model: action endpoints (`/_agent-native/actions/*`), extension\n * endpoints (`/_agent-native/extensions/*` and the legacy\n * `/_agent-native/tools/*` alias), and a handful of other state-changing\n * `/_agent-native/*` routes use the better-auth session cookie, which is\n * configured with `SameSite=None; Secure; Partitioned` so the iframe editor\n * (and other cross-site embeds) can authenticate. `SameSite=None` means the\n * browser ships the session cookie on top-level form POSTs from any origin —\n * which is exactly the precondition for classic cross-site request forgery.\n *\n * The browser still gates \"non-simple\" requests behind a CORS preflight, so\n * an attacker who has to send `Content-Type: application/json` is forced\n * through OPTIONS, which our CORS middleware (`create-server.ts`) rejects\n * for disallowed origins. But the simple-request bypass (`Content-Type:\n * text/plain` on a `<form enctype=\"text/plain\">` POST, or `multipart/form-data`)\n * never preflights — the browser delivers it cross-origin with cookies.\n *\n * Mitigation: this middleware rejects any state-changing\n * (`POST/PUT/PATCH/DELETE`) request to `/_agent-native/*` that\n *\n *   1. carries the auth-cookie pattern (any cookie at all is a heuristic\n *      good-enough proxy — we don't want to deny anonymous fetches), AND\n *   2. is NOT clearly same-origin / first-party. We trust:\n *      - `Sec-Fetch-Site: same-origin` (sent by every modern browser on\n *        same-origin fetch — Chrome/Firefox/Safari/Edge all support it).\n *      - `X-Agent-Native-CSRF` custom header. Custom headers force a\n *        preflight, so an attacker can't add one cross-origin.\n *      - `Content-Type: application/json` request body. Same logic — JSON\n *        Content-Type is a non-simple request that triggers preflight.\n *\n * Why the existing CORS check isn't enough: a simple-request POST never\n * preflights, so the browser sends it through and only blocks the *response*\n * from being readable cross-origin. The state change (delete-account, write\n * SQL, etc.) happens server-side regardless. We need a server-side check that\n * proves first-party intent before running the action.\n *\n * Opt-out marker: a handful of routes legitimately accept cross-origin POSTs\n * — webhook endpoints (Slack, Telegram, email), the public A2A endpoint\n * (`/_agent-native/a2a`), the integrations process-task self-fire, and so on.\n * Those are listed in `CSRF_ALLOWLIST_PREFIXES` below; if you add a new\n * cross-origin-callable route, add it there.\n */\n\nimport {\n  defineEventHandler,\n  getMethod,\n  getRequestHeader,\n  setResponseStatus,\n} from \"h3\";\n\nimport { getConfiguredAppBasePath } from \"./app-base-path.js\";\n\n/**\n * Path prefixes (relative to the framework prefix `/_agent-native`) that are\n * allowed to receive cross-origin state-changing POSTs without first-party\n * markers. These are signed/authenticated through other mechanisms (HMAC,\n * JWT, internal token) so they don't need cookie-based CSRF protection.\n */\nconst CSRF_ALLOWLIST_PREFIXES = [\n  // Integration webhooks — verified by HMAC against a per-integration secret.\n  \"/integrations/\",\n  // Agent Teams durable sub-agent processor self-fire — verified by the same\n  // HMAC internal-token scheme as the integration/A2A processors.\n  \"/agent-teams/\",\n  // Durable sandbox-execution processor self-fire (run-code background\n  // queue) — verified by the same HMAC internal-token scheme.\n  \"/sandbox/_process-execution\",\n  // A2A JSON-RPC endpoints — verified by signed JWT (when A2A_SECRET set) or\n  // explicitly opt-in unauthenticated (handled at the A2A layer).\n  \"/a2a\",\n  // Better Auth's own login/sign-in/social-callback routes. Better Auth\n  // ships its own CSRF protection (Origin/Sec-Fetch checks on its handlers)\n  // and cookies are needed for the OAuth callback round-trip.\n  \"/auth/\",\n  // Stripe / Paddle / billing webhooks dropped in by templates.\n  \"/billing/webhook\",\n  // Public share endpoints — read-only and never cookie-driven, but kept\n  // here so a templated POST (e.g. comment-on-public-recording) doesn't 403.\n  \"/share/\",\n  // OAuth callbacks (Builder, Google, Slack, Notion, Zoom). These get a\n  // `code` query param via top-level navigation — they DO ride the session\n  // cookie and they SHOULD validate state, but the framework can't see the\n  // state token. Each callback handler is responsible for its own CSRF\n  // check (signed state tokens).\n  \"/oauth/\",\n  // Builder's CLI-auth callback — uses the BUILDER_STATE_PARAM signed token\n  // to authenticate the round-trip; framework CSRF check would block it.\n  \"/builder/callback\",\n];\n\nconst STATE_CHANGING_METHODS = new Set([\"POST\", \"PUT\", \"PATCH\", \"DELETE\"]);\n\n/**\n * Decide whether a request is \"first-party enough\" to trust as not-CSRF.\n * Any of the following make a request non-CSRF:\n *\n *   - `Sec-Fetch-Site: same-origin` (or `none` for top-level navigations\n *     to our own pages — but state-changing methods don't ship `none`).\n *   - `X-Agent-Native-CSRF` header (any value, even \"1\"). This is a custom\n *     header so the browser forces a preflight cross-origin, which our\n *     CORS layer rejects for disallowed origins.\n *   - `Content-Type: application/json` (case-insensitive). JSON content\n *     type is a non-simple request that triggers preflight.\n *\n * We accept ANY of these — the goal is \"did the request come through a\n * channel the browser would have preflighted\", not a strict-mode token.\n *\n * NOTE: `Sec-Fetch-Site: same-site` is deliberately NOT trusted. Under a\n * shared cookie domain (COOKIE_DOMAIN / crossSubDomainCookies), the browser\n * labels a request from a SIBLING subdomain (evil.example.com → app.example.com)\n * as `same-site` even though it is cross-origin and would ride the shared\n * session cookie — a CSRF vector. Legitimate first-party clients all also send\n * `X-Agent-Native-CSRF` or `application/json`, so they still pass via those\n * paths and iframe/embed flows are unaffected.\n */\nfunction looksFirstParty(event: any): boolean {\n  const sfs = getRequestHeader(event, \"sec-fetch-site\");\n  if (sfs === \"same-origin\" || sfs === \"none\") {\n    return true;\n  }\n  if (getRequestHeader(event, \"x-agent-native-csrf\")) {\n    return true;\n  }\n  const contentType = getRequestHeader(event, \"content-type\");\n  if (\n    contentType &&\n    typeof contentType === \"string\" &&\n    contentType.toLowerCase().includes(\"application/json\")\n  ) {\n    return true;\n  }\n  return false;\n}\n\n/**\n * Returns true when the request carries any cookie. We use \"has any cookie\"\n * as a coarse heuristic for \"the browser is going to attach the session\n * cookie\" — anonymous tools (curl, server-to-server) typically don't send\n * cookies, so they bypass this check entirely.\n */\nfunction requestHasCookies(event: any): boolean {\n  const cookie = getRequestHeader(event, \"cookie\");\n  return typeof cookie === \"string\" && cookie.trim().length > 0;\n}\n\n/**\n * The path is the full request URL pathname (e.g.\n * `/_agent-native/actions/foo` or `/app/_agent-native/actions/foo`).\n * `frameworkPrefix` is the root framework route prefix without a trailing\n * slash, e.g. `/_agent-native`.\n */\nfunction isOnAllowlist(pathname: string, frameworkPrefix: string): boolean {\n  if (!pathname.startsWith(frameworkPrefix)) return false;\n  const sub = pathname.slice(frameworkPrefix.length);\n  for (const allowed of CSRF_ALLOWLIST_PREFIXES) {\n    if (sub.startsWith(allowed)) return true;\n  }\n  return false;\n}\n\nfunction matchingFrameworkPrefix(\n  pathname: string,\n  frameworkPrefix: string,\n): string | undefined {\n  if (pathname.startsWith(frameworkPrefix)) return frameworkPrefix;\n\n  const basePath = getConfiguredAppBasePath();\n  const basePathFrameworkPrefix = `${basePath}${frameworkPrefix}`;\n  if (basePath && pathname.startsWith(basePathFrameworkPrefix)) {\n    return basePathFrameworkPrefix;\n  }\n\n  return undefined;\n}\n\n/**\n * Create the framework CSRF middleware.\n *\n * Mount this BEFORE any state-changing route handler. The middleware\n *   - lets every non-state-changing method through (GET/HEAD/OPTIONS).\n *   - lets requests without cookies through (anonymous/server tools).\n *   - lets allowlisted paths through (webhooks, A2A, OAuth callbacks).\n *   - lets first-party-shaped requests through (custom header, JSON\n *     Content-Type, or `Sec-Fetch-Site: same-origin`).\n *   - rejects everything else with 403.\n */\nexport function createCsrfMiddleware(\n  frameworkPrefix: string = \"/_agent-native\",\n) {\n  return defineEventHandler((event) => {\n    const method = getMethod(event);\n    if (!STATE_CHANGING_METHODS.has(method)) return undefined;\n\n    const pathname = event.url?.pathname ?? \"\";\n    const matchingPrefix = matchingFrameworkPrefix(pathname, frameworkPrefix);\n    if (!matchingPrefix) return undefined;\n    if (isOnAllowlist(pathname, matchingPrefix)) return undefined;\n\n    // No cookie = no risk of confused-deputy CSRF on the session cookie.\n    if (!requestHasCookies(event)) return undefined;\n\n    if (looksFirstParty(event)) return undefined;\n\n    setResponseStatus(event, 403);\n    return {\n      error:\n        \"CSRF check failed: state-changing requests must include a same-origin marker. Set Content-Type: application/json or X-Agent-Native-CSRF: 1.\",\n    };\n  });\n}\n"]}
+{"version":3,"file":"csrf.js","sourceRoot":"","sources":["../../src/server/csrf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,IAAI,CAAC;AAEZ,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,uBAAuB,GAAG;IAC9B,4EAA4E;IAC5E,gBAAgB;IAChB,2EAA2E;IAC3E,gEAAgE;IAChE,eAAe;IACf,qEAAqE;IACrE,4DAA4D;IAC5D,6BAA6B;IAC7B,2EAA2E;IAC3E,gEAAgE;IAChE,MAAM;IACN,sEAAsE;IACtE,0EAA0E;IAC1E,4DAA4D;IAC5D,QAAQ;IACR,8DAA8D;IAC9D,kBAAkB;IAClB,uEAAuE;IACvE,2EAA2E;IAC3E,SAAS;IACT,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,+BAA+B;IAC/B,SAAS;IACT,0EAA0E;IAC1E,uEAAuE;IACvE,mBAAmB;CACpB,CAAC;AAEF,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE3E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAS,eAAe,CAAC,KAAU;IACjC,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACtD,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC5D,IACE,WAAW;QACX,OAAO,WAAW,KAAK,QAAQ;QAC/B,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EACtD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,KAAU;IACnC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,QAAgB,EAAE,eAAuB;IAC9D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACnD,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;QAC9C,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAgB,EAChB,eAAuB;IAEvB,IAAI,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,eAAe,CAAC;IAEjE,IACE,QAAQ,KAAK,uBAAuB;QACpC,QAAQ,CAAC,UAAU,CAAC,GAAG,uBAAuB,GAAG,CAAC,EAClD,CAAC;QACD,OAAO,uBAAuB,CAAC;IACjC,CAAC;IAED,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;IAC5C,MAAM,uBAAuB,GAAG,GAAG,QAAQ,GAAG,eAAe,EAAE,CAAC;IAChE,IAAI,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC7D,OAAO,uBAAuB,CAAC;IACjC,CAAC;IAED,MAAM,iBAAiB,GAAG,GAAG,QAAQ,GAAG,uBAAuB,EAAE,CAAC;IAClE,IACE,QAAQ;QACR,CAAC,QAAQ,KAAK,iBAAiB;YAC7B,QAAQ,CAAC,UAAU,CAAC,GAAG,iBAAiB,GAAG,CAAC,CAAC,EAC/C,CAAC;QACD,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAClC,eAAe,GAAW,gBAAgB;IAE1C,OAAO,kBAAkB,CAAC,CAAC,KAAK,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QAE1D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;QAC3C,MAAM,cAAc,GAAG,uBAAuB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC1E,IAAI,CAAC,cAAc;YAAE,OAAO,SAAS,CAAC;QACtC,IAAI,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC;YAAE,OAAO,SAAS,CAAC;QAE9D,qEAAqE;QACrE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAEhD,IAAI,eAAe,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAE7C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EACH,6IAA6I;SAChJ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * Defense-in-depth CSRF check for framework state-changing routes.\n *\n * Threat model: action endpoints (`/_agent-native/actions/*`), extension\n * endpoints (`/_agent-native/extensions/*` and the legacy\n * `/_agent-native/tools/*` alias), and a handful of other state-changing\n * `/_agent-native/*` routes use the better-auth session cookie, which is\n * configured with `SameSite=None; Secure; Partitioned` so the iframe editor\n * (and other cross-site embeds) can authenticate. `SameSite=None` means the\n * browser ships the session cookie on top-level form POSTs from any origin —\n * which is exactly the precondition for classic cross-site request forgery.\n *\n * The browser still gates \"non-simple\" requests behind a CORS preflight, so\n * an attacker who has to send `Content-Type: application/json` is forced\n * through OPTIONS, which our CORS middleware (`create-server.ts`) rejects\n * for disallowed origins. But the simple-request bypass (`Content-Type:\n * text/plain` on a `<form enctype=\"text/plain\">` POST, or `multipart/form-data`)\n * never preflights — the browser delivers it cross-origin with cookies.\n *\n * Mitigation: this middleware rejects any state-changing\n * (`POST/PUT/PATCH/DELETE`) request to `/_agent-native/*` that\n *\n *   1. carries the auth-cookie pattern (any cookie at all is a heuristic\n *      good-enough proxy — we don't want to deny anonymous fetches), AND\n *   2. is NOT clearly same-origin / first-party. We trust:\n *      - `Sec-Fetch-Site: same-origin` (sent by every modern browser on\n *        same-origin fetch — Chrome/Firefox/Safari/Edge all support it).\n *      - `X-Agent-Native-CSRF` custom header. Custom headers force a\n *        preflight, so an attacker can't add one cross-origin.\n *      - `Content-Type: application/json` request body. Same logic — JSON\n *        Content-Type is a non-simple request that triggers preflight.\n *\n * Why the existing CORS check isn't enough: a simple-request POST never\n * preflights, so the browser sends it through and only blocks the *response*\n * from being readable cross-origin. The state change (delete-account, write\n * SQL, etc.) happens server-side regardless. We need a server-side check that\n * proves first-party intent before running the action.\n *\n * Opt-out marker: a handful of routes legitimately accept cross-origin POSTs\n * — webhook endpoints (Slack, Telegram, email), the public A2A endpoint\n * (`/_agent-native/a2a`), the integrations process-task self-fire, and so on.\n * Those are listed in `CSRF_ALLOWLIST_PREFIXES` below; if you add a new\n * cross-origin-callable route, add it there.\n */\n\nimport {\n  defineEventHandler,\n  getMethod,\n  getRequestHeader,\n  setResponseStatus,\n} from \"h3\";\n\nimport { MCP_PUBLIC_ROUTE_PREFIX } from \"../mcp/route-paths.js\";\nimport { getConfiguredAppBasePath } from \"./app-base-path.js\";\n\n/**\n * Path prefixes (relative to the framework prefix `/_agent-native`) that are\n * allowed to receive cross-origin state-changing POSTs without first-party\n * markers. These are signed/authenticated through other mechanisms (HMAC,\n * JWT, internal token) so they don't need cookie-based CSRF protection.\n */\nconst CSRF_ALLOWLIST_PREFIXES = [\n  // Integration webhooks — verified by HMAC against a per-integration secret.\n  \"/integrations/\",\n  // Agent Teams durable sub-agent processor self-fire — verified by the same\n  // HMAC internal-token scheme as the integration/A2A processors.\n  \"/agent-teams/\",\n  // Durable sandbox-execution processor self-fire (run-code background\n  // queue) — verified by the same HMAC internal-token scheme.\n  \"/sandbox/_process-execution\",\n  // A2A JSON-RPC endpoints — verified by signed JWT (when A2A_SECRET set) or\n  // explicitly opt-in unauthenticated (handled at the A2A layer).\n  \"/a2a\",\n  // Better Auth's own login/sign-in/social-callback routes. Better Auth\n  // ships its own CSRF protection (Origin/Sec-Fetch checks on its handlers)\n  // and cookies are needed for the OAuth callback round-trip.\n  \"/auth/\",\n  // Stripe / Paddle / billing webhooks dropped in by templates.\n  \"/billing/webhook\",\n  // Public share endpoints — read-only and never cookie-driven, but kept\n  // here so a templated POST (e.g. comment-on-public-recording) doesn't 403.\n  \"/share/\",\n  // OAuth callbacks (Builder, Google, Slack, Notion, Zoom). These get a\n  // `code` query param via top-level navigation — they DO ride the session\n  // cookie and they SHOULD validate state, but the framework can't see the\n  // state token. Each callback handler is responsible for its own CSRF\n  // check (signed state tokens).\n  \"/oauth/\",\n  // Builder's CLI-auth callback — uses the BUILDER_STATE_PARAM signed token\n  // to authenticate the round-trip; framework CSRF check would block it.\n  \"/builder/callback\",\n];\n\nconst STATE_CHANGING_METHODS = new Set([\"POST\", \"PUT\", \"PATCH\", \"DELETE\"]);\n\n/**\n * Decide whether a request is \"first-party enough\" to trust as not-CSRF.\n * Any of the following make a request non-CSRF:\n *\n *   - `Sec-Fetch-Site: same-origin` (or `none` for top-level navigations\n *     to our own pages — but state-changing methods don't ship `none`).\n *   - `X-Agent-Native-CSRF` header (any value, even \"1\"). This is a custom\n *     header so the browser forces a preflight cross-origin, which our\n *     CORS layer rejects for disallowed origins.\n *   - `Content-Type: application/json` (case-insensitive). JSON content\n *     type is a non-simple request that triggers preflight.\n *\n * We accept ANY of these — the goal is \"did the request come through a\n * channel the browser would have preflighted\", not a strict-mode token.\n *\n * NOTE: `Sec-Fetch-Site: same-site` is deliberately NOT trusted. Under a\n * shared cookie domain (COOKIE_DOMAIN / crossSubDomainCookies), the browser\n * labels a request from a SIBLING subdomain (evil.example.com → app.example.com)\n * as `same-site` even though it is cross-origin and would ride the shared\n * session cookie — a CSRF vector. Legitimate first-party clients all also send\n * `X-Agent-Native-CSRF` or `application/json`, so they still pass via those\n * paths and iframe/embed flows are unaffected.\n */\nfunction looksFirstParty(event: any): boolean {\n  const sfs = getRequestHeader(event, \"sec-fetch-site\");\n  if (sfs === \"same-origin\" || sfs === \"none\") {\n    return true;\n  }\n  if (getRequestHeader(event, \"x-agent-native-csrf\")) {\n    return true;\n  }\n  const contentType = getRequestHeader(event, \"content-type\");\n  if (\n    contentType &&\n    typeof contentType === \"string\" &&\n    contentType.toLowerCase().includes(\"application/json\")\n  ) {\n    return true;\n  }\n  return false;\n}\n\n/**\n * Returns true when the request carries any cookie. We use \"has any cookie\"\n * as a coarse heuristic for \"the browser is going to attach the session\n * cookie\" — anonymous tools (curl, server-to-server) typically don't send\n * cookies, so they bypass this check entirely.\n */\nfunction requestHasCookies(event: any): boolean {\n  const cookie = getRequestHeader(event, \"cookie\");\n  return typeof cookie === \"string\" && cookie.trim().length > 0;\n}\n\n/**\n * The path is the full request URL pathname (e.g.\n * `/_agent-native/actions/foo` or `/app/_agent-native/actions/foo`).\n * `frameworkPrefix` is the root framework route prefix without a trailing\n * slash, e.g. `/_agent-native`.\n */\nfunction isOnAllowlist(pathname: string, frameworkPrefix: string): boolean {\n  if (!pathname.startsWith(frameworkPrefix)) return false;\n  const sub = pathname.slice(frameworkPrefix.length);\n  for (const allowed of CSRF_ALLOWLIST_PREFIXES) {\n    if (sub.startsWith(allowed)) return true;\n  }\n  return false;\n}\n\nfunction matchingFrameworkPrefix(\n  pathname: string,\n  frameworkPrefix: string,\n): string | undefined {\n  if (pathname.startsWith(frameworkPrefix)) return frameworkPrefix;\n\n  if (\n    pathname === MCP_PUBLIC_ROUTE_PREFIX ||\n    pathname.startsWith(`${MCP_PUBLIC_ROUTE_PREFIX}/`)\n  ) {\n    return MCP_PUBLIC_ROUTE_PREFIX;\n  }\n\n  const basePath = getConfiguredAppBasePath();\n  const basePathFrameworkPrefix = `${basePath}${frameworkPrefix}`;\n  if (basePath && pathname.startsWith(basePathFrameworkPrefix)) {\n    return basePathFrameworkPrefix;\n  }\n\n  const basePathMcpPrefix = `${basePath}${MCP_PUBLIC_ROUTE_PREFIX}`;\n  if (\n    basePath &&\n    (pathname === basePathMcpPrefix ||\n      pathname.startsWith(`${basePathMcpPrefix}/`))\n  ) {\n    return basePathMcpPrefix;\n  }\n\n  return undefined;\n}\n\n/**\n * Create the framework CSRF middleware.\n *\n * Mount this BEFORE any state-changing route handler. The middleware\n *   - lets every non-state-changing method through (GET/HEAD/OPTIONS).\n *   - lets requests without cookies through (anonymous/server tools).\n *   - lets allowlisted paths through (webhooks, A2A, OAuth callbacks).\n *   - lets first-party-shaped requests through (custom header, JSON\n *     Content-Type, or `Sec-Fetch-Site: same-origin`).\n *   - rejects everything else with 403.\n */\nexport function createCsrfMiddleware(\n  frameworkPrefix: string = \"/_agent-native\",\n) {\n  return defineEventHandler((event) => {\n    const method = getMethod(event);\n    if (!STATE_CHANGING_METHODS.has(method)) return undefined;\n\n    const pathname = event.url?.pathname ?? \"\";\n    const matchingPrefix = matchingFrameworkPrefix(pathname, frameworkPrefix);\n    if (!matchingPrefix) return undefined;\n    if (isOnAllowlist(pathname, matchingPrefix)) return undefined;\n\n    // No cookie = no risk of confused-deputy CSRF on the session cookie.\n    if (!requestHasCookies(event)) return undefined;\n\n    if (looksFirstParty(event)) return undefined;\n\n    setResponseStatus(event, 403);\n    return {\n      error:\n        \"CSRF check failed: state-changing requests must include a same-origin marker. Set Content-Type: application/json or X-Agent-Native-CSRF: 1.\",\n    };\n  });\n}\n"]}

package/dist/server/framework-request-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"framework-request-handler.d.ts","sourceRoot":"","sources":["../../src/server/framework-request-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,YAAY,EAAW,MAAM,IAAI,CAAC;AAUhD,QAAA,MAAM,gBAAgB,mBAAmB,CAAC;AAkD1C;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC/C,GAAG,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;CAClC;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAQ3E;AAED;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,GAAG,GAAG,SAAS,CA+FjD;AA0CD;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAOjE;AAmBD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,GAAG,EACb,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EACtB,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CAAO,GACjC,IAAI,CAuCN;AA6FD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,GAAG,EACb,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAqBf;AAoUD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,GAAG,CAAC,CAyBd;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAC"}
+{"version":3,"file":"framework-request-handler.d.ts","sourceRoot":"","sources":["../../src/server/framework-request-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,YAAY,EAAW,MAAM,IAAI,CAAC;AAWhD,QAAA,MAAM,gBAAgB,mBAAmB,CAAC;AAmD1C;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC/C,GAAG,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;CAClC;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAQ3E;AAED;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,GAAG,GAAG,SAAS,CAmGjD;AA0CD;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAOjE;AAmBD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,GAAG,EACb,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EACtB,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CAAO,GACjC,IAAI,CAuCN;AA6FD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,GAAG,EACb,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAqBf;AAoUD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,GAAG,CAAC,CAyBd;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/server/framework-request-handler.js

@@ -1,5 +1,6 @@
 import { setResponseHeader, setResponseStatus } from "h3";
 import { getMissingDefaultPlugins } from "../deploy/route-discovery.js";
+import { MCP_PUBLIC_ROUTE_PREFIX } from "../mcp/route-paths.js";
 import { getConfiguredAppBasePath } from "./app-base-path.js";
 import { captureError } from "./capture-error.js";
 import { createCsrfMiddleware } from "./csrf.js";
@@ -22,7 +23,8 @@ function pathMatchesPrefix(reqPath, prefix) {
 }
 function supportsAppBasePathMount(path) {
     return (pathMatchesPrefix(path, FRAMEWORK_PREFIX) ||
-        pathMatchesPrefix(path, WELL_KNOWN_PREFIX));
+        pathMatchesPrefix(path, WELL_KNOWN_PREFIX) ||
+        pathMatchesPrefix(path, MCP_PUBLIC_ROUTE_PREFIX));
 }
 function resolveMountMatch(reqPath, path) {
     if (pathMatchesPrefix(reqPath, path)) {
@@ -110,6 +112,9 @@ export function getH3App(nitroApp) {
         registerMiddleware(nitroApp, WELL_KNOWN_PREFIX, readinessGate, {
             prepend: true,
         });
+        registerMiddleware(nitroApp, MCP_PUBLIC_ROUTE_PREFIX, readinessGate, {
+            prepend: true,
+        });
         // CSRF (see csrf.ts): registered here — synchronously, on the very
         // first `getH3App()` call for this nitroApp — rather than inside
         // createCoreRoutesPlugin's own async init chain. Real deployments mount
@@ -139,7 +144,8 @@ export function getH3App(nitroApp) {
         nitroApp.hooks?.hook?.("request", async (event) => {
             const reqPath = event.url?.pathname ?? "";
             if (resolveMountMatch(reqPath, FRAMEWORK_PREFIX) ||
-                resolveMountMatch(reqPath, WELL_KNOWN_PREFIX)) {
+                resolveMountMatch(reqPath, WELL_KNOWN_PREFIX) ||
+                resolveMountMatch(reqPath, MCP_PUBLIC_ROUTE_PREFIX)) {
                 await awaitFrameworkRoutesReadyForRequest(nitroApp, reqPath);
             }
         });

package/dist/server/framework-request-handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"framework-request-handler.js","sourceRoot":"","sources":["../../src/server/framework-request-handler.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAC;AAE1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEjD,MAAM,YAAY,GAAG,IAAI,OAAO,EAAU,CAAC;AAC3C,MAAM,YAAY,GAAG,IAAI,OAAO,EAAU,CAAC;AAC3C,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAC1C,MAAM,iBAAiB,GAAG,cAAc,CAAC;AACzC,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAC1C,MAAM,qBAAqB,GAAG,8BAA8B,CAAC;AAC7D,MAAM,gBAAgB,GAAG,gCAAgC,CAAC;AAC1D,MAAM,6BAA6B,GAAG,qCAAqC,CAAC;AAC5E,MAAM,iBAAiB,GAAG,gCAAgC,CAAC;AAC3D,MAAM,yBAAyB,GAAG,iCAAiC,CAAC;AACpE,MAAM,iCAAiC,GACrC,yCAAyC,CAAC;AAO5C,SAAS,cAAc;IACrB,OAAO,wBAAwB,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,MAAc;IACxD,OAAO,OAAO,KAAK,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY;IAC5C,OAAO,CACL,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,CAAC;QACzC,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAe,EACf,IAAY;IAEZ,IAAI,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IAC9E,CAAC;IAED,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,IAAI,CAAC,WAAW,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEjE,MAAM,YAAY,GAAG,GAAG,WAAW,GAAG,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,OAAO;QACL,SAAS,EAAE,YAAY;QACvB,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,GAAG;KACxD,CAAC;AACJ,CAAC;AAWD;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAAa,EAAE,IAAY;IACnE,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI;QAAE,OAAO;IAC/B,MAAM,QAAQ,GAAG,QAAQ,CAAC,yBAAyB,CAEtC,CAAC;IACd,MAAM,QAAQ,GAAG,QAAQ,IAAI,IAAI,GAAG,EAAU,CAAC;IAC/C,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnB,QAAQ,CAAC,yBAAyB,CAAC,GAAG,QAAQ,CAAC;AACjD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,QAAQ,CAAC,QAAa;IACpC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACjE,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IAEzC,8DAA8D;IAC9D,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAA0B,CAAC;IAC/D,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,IAAI,GAAc;QACtB,GAAG,CAAC,IAA2B,EAAE,IAAmB;YAClD,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,MAAM,OAAO,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAiB,CAAC;YACzE,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC;IAEF,QAAQ,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;IAE9B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3B,QAAQ,CAAC,qBAAqB,CAAC,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC,KAAK,CACvE,CAAC,GAAG,EAAE,EAAE;YACN,OAAO,CAAC,IAAI,CACV,sDAAsD,EACrD,GAAa,CAAC,OAAO,CACvB,CAAC;YACF,YAAY,CAAC,GAAG,EAAE;gBAChB,KAAK,EAAE,0BAA0B;gBACjC,IAAI,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,kEAAkE;QAClE,iEAAiE;QACjE,kEAAkE;QAClE,oEAAoE;QACpE,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YAC9C,MAAM,QAAQ,GAAG,KAAY,CAAC;YAC9B,MAAM,mCAAmC,CACvC,QAAQ,EACR,QAAQ,CAAC,OAAO,EAAE,gBAAgB,IAAI,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAChE,CAAC;YACF,qDAAqD;YACrD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAiB,CAAC;QACnB,kBAAkB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE;YAC5D,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,kBAAkB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,aAAa,EAAE;YAC7D,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QAEH,mEAAmE;QACnE,iEAAiE;QACjE,wEAAwE;QACxE,0EAA0E;QAC1E,kEAAkE;QAClE,sEAAsE;QACtE,sEAAsE;QACtE,iEAAiE;QACjE,yEAAyE;QACzE,oEAAoE;QACpE,+DAA+D;QAC/D,sEAAsE;QACtE,oEAAoE;QACpE,wEAAwE;QACxE,uEAAuE;QACvE,qEAAqE;QACrE,oEAAoE;QACpE,uEAAuE;QACvE,SAAS;QACT,kBAAkB,CAAC,QAAQ,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAEzD,8EAA8E;QAC9E,2EAA2E;QAC3E,6EAA6E;QAC7E,4EAA4E;QAC5E,4EAA4E;QAC5E,uDAAuD;QACvD,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YACzD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;YAC1C,IACE,iBAAiB,CAAC,OAAO,EAAE,gBAAgB,CAAC;gBAC5C,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAC7C,CAAC;gBACD,MAAM,mCAAmC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,8BAA8B,CAAC,QAAa;IACnD,MAAM,EAAE,GAAG,QAAQ,EAAE,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE;QAAE,OAAO;IAChB,MAAM,OAAO,GAAG,EAAE,CAAC,gBAAgB,CAAC,CAAC;IACrC,IAAI,EAAE,CAAC,iCAAiC,CAAC,KAAK,OAAO;QAAE,OAAO;IAE9D,MAAM,QAAQ,GAAG,OAAO,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE9E,MAAM,oBAAoB,GAAG,CAAC,KAAc,EAAE,KAAc,EAAE,EAAE;QAC9D,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;YAChD,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,cAAc;gBACd,CAAC,CAAC,CAAC,cAAc,CAAC;gBAClB,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;YACvD,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC;YACnB,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,YAAY,CAAC;QAEvD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAC3C,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CACjD,CAAC;QACF,OAAO,aAAa,CAAC,MAAM;YACzB,CAAC,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,YAAY,CAAC;YACrC,CAAC,CAAC,YAAY,CAAC;IACnB,CAAC,CAAC;IAEF,EAAE,CAAC,gBAAgB,CAAC,GAAG,oBAAoB,CAAC;IAC5C,EAAE,CAAC,iCAAiC,CAAC,GAAG,oBAAoB,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAa;IAChD,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO;IACpD,qEAAqE;IACrE,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnB,MAAM,OAAO,GAAG,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IAChD,IAAI,OAAO;QAAE,MAAM,OAAO,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,mCAAmC,CAChD,QAAa,EACb,OAAe;IAEf,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,MAAM,gBAAgB,GAAG,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IACzD,IAAI,gBAAgB;QAAE,MAAM,gBAAgB,CAAC;IAC7C,MAAM,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAa,EACb,OAAsB,EACtB,OAAO,GAAyB,EAAE;IAElC,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,6EAA6E;IAC7E,wEAAwE;IACxE,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnB,sEAAsE;IACtE,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACjC,OAAO,CAAC,KAAK,CACX,oCAAoC,EACnC,GAAa,CAAC,OAAO,IAAI,GAAG,CAC9B,CAAC;QACF,0EAA0E;QAC1E,sEAAsE;QACtE,0EAA0E;QAC1E,wEAAwE;QACxE,mEAAmE;QACnE,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,QAAQ,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,KAAK,IAAI,GAAG,EAGtD,CAAC,CAAC;QACL,MAAM,GAAG,GAAI,GAAa,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAqB;QAC9B,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;KACtC,CAAC;IACF,MAAM,QAAQ,GAAG,QAAQ,CAAC,gBAAgB,CAAmC,CAAC;IAC9E,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,8BAA8B,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,8BAA8B,CACrC,QAAa,EACb,KAA2B;IAE3B,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO;IAC3B,MAAM,QAAQ,GAAG,QAAQ,CAAC,6BAA6B,CAE1C,CAAC;IACd,MAAM,SAAS,GAAG,QAAQ,IAAI,IAAI,GAAG,EAAU,CAAC;IAChD,QAAQ,CAAC,6BAA6B,CAAC,GAAG,SAAS,CAAC;IAEpD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC3C,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,kBAAkB,CAChB,QAAQ,EACR,IAAI,EACJ,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YACxB,MAAM,QAAQ,GAAG,KAAY,CAAC;YAC9B,MAAM,OAAO,GACX,QAAQ,CAAC,OAAO,EAAE,gBAAgB,IAAI,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,IAAI,CAAC;YACpE,MAAM,mCAAmC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC7D,+DAA+D;YAC/D,sEAAsE;YACtE,wEAAwE;YACxE,wDAAwD;YACxD,MAAM,QAAQ,GAAG,QAAQ,CAAC,iBAAiB,CAE9B,CAAC;YACd,IAAI,QAAQ,EAAE,IAAI,EAAE,CAAC;gBACnB,KAAK,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACzC,IAAI,iBAAiB,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;wBAC3C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC9B,iBAAiB,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;wBAC7C,OAAO;4BACL,KAAK,EAAE,sDAAsD,GAAG,EAAE;yBACnE,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAiB,EAClB;YACE,OAAO,EAAE,IAAI;SACd,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,IAK/B;IACC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAY,CAAC;IAChC,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,kBAAkB,IAAI,CAAC,MAAM,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,MAAM,GAAG,CAAC;IAC3F,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC1C,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,KAAK,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,KAAK,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,KAAc;IACxD,MAAM,GAAG,GAAG,KAAY,CAAC;IACzB,MAAM,OAAO,GAAG,OAAO,GAAG,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,MAAM,IAAI,GAAG,OAAO,GAAG,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,MAAM,IAAI,GAAI,KAAa,CAAC,IAAI,CAAC;IACjC,OAAO,CACL,OAAO,KAAK,SAAS;QACrB,IAAI,KAAK,YAAY;QACrB,IAAI,EAAE,GAAG,EAAE,SAAS,KAAK,IAAI;QAC7B,IAAI,EAAE,GAAG,EAAE,SAAS,KAAK,IAAI,CAC9B,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAIzB;IACC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;QAAE,OAAO;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAY,CAAC;IAC9B,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,OAAO,CAAC,KAAK,EAAE,CACb,kBAAkB,IAAI,CAAC,MAAM,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,uBAAuB,OAAO,EAAE,CAClF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAa,EACb,OAAgB;IAEhB,MAAM,OAAO,GAAG,QAAQ,CAAC,gBAAgB,CAAmC,CAAC;IAC7E,IAAI,CAAC,OAAO,EAAE,MAAM;QAAE,OAAO;IAE7B,MAAM,QAAQ,GAAG,OAAO;QACtB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK,CAAC,KAAK,EAAE,MAAM;YACjB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC9D,CAAC,CAAC,IAAI,CACT;QACH,CAAC,CAAC,OAAO,CAAC;IAEZ,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,MAAM,GACT,QAAQ,CAAC,gBAAgB,CAAoC,IAAI,EAAE,CAAC;QACvE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,MAAM,CACxC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CACjC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,kBAAkB,CACzB,QAAa,EACb,IAAY,EACZ,OAAqB,EACrB,OAAO,GAA0B,EAAE;IAEnC,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;IACvB,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,sEAAsE;YACpE,iEAAiE,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,EAAE,KAAc,EAAE,IAAe,EAAE,EAAE;QAC3D,IAAI,gBAAoC,CAAC;QACzC,IAAI,iBAAqC,CAAC;QAC1C,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,kEAAkE;QAClE,mEAAmE;QACnE,uEAAuE;QACvE,uEAAuE;QACvE,0EAA0E;QAC1E,wEAAwE;QACxE,oEAAoE;QACpE,uEAAuE;QACvE,iEAAiE;QACjE,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,MAAM,mBAAmB,GAAG,GAAG,EAAE;YAC/B,IAAI,CAAC,YAAY;gBAAE,OAAO;YAC1B,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACH,KAAK,CAAC,GAAG,CAAC,QAAQ,GAAG,gBAAgB,CAAC;gBACxC,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,gBAAgB,GAAG,SAAS,CAAC;YAC/B,CAAC;YACD,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACF,KAAa,CAAC,IAAI,GAAG,iBAAiB,CAAC;gBAC1C,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,OAAQ,KAAa,CAAC,IAAI,CAAC;gBAC7B,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QACF,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YACD,kEAAkE;YAClE,sEAAsE;YACtE,oEAAoE;YACpE,sCAAsC;YACtC,MAAM,QAAQ,GAAG,KAAY,CAAC;YAC9B,YAAY,GAAG,MAAM,IAAI,QAAQ,CAAC;YAClC,iBAAiB,GAAG,QAAQ,CAAC,IAAI,CAAC;YAClC,YAAY,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC;gBACH,gBAAgB,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACtC,uEAAuE;gBACvE,iEAAiE;gBACjE,kDAAkD;gBAClD,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC;gBAC1C,QAAQ,CAAC,OAAO,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;gBACrD,QAAQ,CAAC,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC;gBAChD,KAAK,CAAC,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC;gBACxC,QAAQ,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACnE,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;gBACnE,mEAAmE;YACrE,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,oEAAoE;gBACpE,uEAAuE;gBACvE,mEAAmE;gBACnE,4DAA4D;gBAC5D,mBAAmB,EAAE,CAAC;gBACtB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,kEAAkE;YAClE,oEAAoE;YACpE,mEAAmE;YACnE,0BAA0B;YAC1B,MAAM,OAAO,GAAG,gBAAgB,IAAI,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;YAC9D,MAAM,CAAC,GAAG,GAAU,CAAC;YACrB,MAAM,MAAM,GACV,OAAO,CAAC,EAAE,UAAU,KAAK,QAAQ;gBAC/B,CAAC,CAAC,CAAC,CAAC,UAAU;gBACd,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,QAAQ;oBAC7B,CAAC,CAAC,CAAC,CAAC,MAAM;oBACV,CAAC,CAAC,GAAG,CAAC;YACZ,IAAI,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;gBACnC,gBAAgB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBACvE,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,sBAAsB,CAAC;gBACrB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,OAAO;gBACd,MAAM;gBACN,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;YACH,uEAAuE;YACvE,sEAAsE;YACtE,mEAAmE;YACnE,gEAAgE;YAChE,mEAAmE;YACnE,6DAA6D;YAC7D,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;gBAClB,kEAAkE;gBAClE,4DAA4D;gBAC5D,MAAM,CAAC,aAAa,CAAC;qBAClB,IAAI,CAAC,CAAC,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,EAAE,EAAE;oBACrD,IAAI,CAAC,qBAAqB,EAAE;wBAAE,OAAO;oBACrC,iBAAiB,CAAC,GAAG,EAAE;wBACrB,KAAK,EAAE,OAAO;wBACd,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,SAAS,EAAE,CAAC,GAAG,EAAE;4BACf,IAAI,CAAC;gCACH,OAAO,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC;4BACvD,CAAC;4BAAC,MAAM,CAAC;gCACP,OAAO,SAAS,CAAC;4BACnB,CAAC;wBACH,CAAC,CAAC,EAAE;qBACL,CAAC,CAAC;gBACL,CAAC,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE;oBACV,gEAAgE;gBAClE,CAAC,CAAC,CAAC;YACP,CAAC;YACD,IAAI,CAAC;gBACH,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACjC,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;YAC/D,CAAC;YAAC,MAAM,CAAC;gBACP,uCAAuC;YACzC,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,CAAC,EAAE,OAAO,IAAI,uBAAuB;gBAC5C,6DAA6D;gBAC7D,+DAA+D;gBAC/D,gEAAgE;gBAChE,0DAA0D;gBAC1D,+DAA+D;gBAC/D,oDAAoD;gBACpD,GAAG,CAAC,MAAM,IAAI,GAAG;oBACjB,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG;oBAC7C,CAAC,EAAE,KAAK;oBACN,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;oBACpB,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,kEAAkE;YAClE,YAAY;YACZ,mBAAmB,EAAE,CAAC;QACxB,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,EAAE,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,uBAAuB,CAAC,QAAa;IAClD,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,iBAAiB,GAAG,MAAM,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,QAAQ,CAAC,yBAAyB,CAEtC,CAAC;QACd,MAAM,OAAO,GAAG,QAAQ;YACtB,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzD,CAAC,CAAC,iBAAiB,CAAC;QACtB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEjC,+DAA+D;QAC/D,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;QACtE,MAAM,kBAAkB,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;QACrE,MAAM,iBAAiB,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAC1E,MAAM,yBAAyB,GAC7B,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACnD,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAEjE,MAAM,cAAc,GAGhB;YACF,YAAY,EAAG,YAAoB,CAAC,sBAAsB;YAC1D,IAAI,EAAG,YAAoB,CAAC,iBAAiB;YAC7C,cAAc,EAAG,iBAAyB,CAAC,wBAAwB;YACnE,aAAa,EAAG,YAAoB,CAAC,uBAAuB;YAC5D,YAAY,EAAG,kBAA0B,CAAC,yBAAyB;YACnE,sBAAsB,EAAG,yBAAiC;iBACvD,gCAAgC;YACnC,UAAU,EAAG,gBAAwB,CAAC,uBAAuB;YAC7D,GAAG,EAAG,SAAiB,CAAC,gBAAgB;YACxC,SAAS,EAAG,YAAoB,CAAC,sBAAsB;YACvD,MAAM,EAAG,YAAoB,CAAC,mBAAmB;YACjD,QAAQ,EAAG,cAAsB,CAAC,qBAAqB;SACxD,CAAC;QAEF,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,qCAAqC;QACrC,IAAI,cAAc,GAGd,EAAE,CAAC;QACP,IAAI,CAAC;YACH,MAAM,EAAE,uBAAuB,EAAE,GAC/B,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;YAC9C,MAAM,EAAE,GAAG,MAAM,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC;oBACH,MAAM,cAAc,GAAG,MAAM,uBAAuB,CAClD,EAAE,CAAC,WAAW,EACd,EAAE,CAAC,UAAU,CACd,CAAC;oBACF,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC5D,IAAI,CAAC,UAAU;4BAAE,SAAS;wBAC1B,MAAM,IAAI,GAAI,cAAsB,CAAC,UAAU,CAAC,CAAC;wBACjD,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;4BAC/B,cAAc,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;wBAC9B,CAAC;oBACH,CAAC;oBACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;wBACtB,OAAO,CAAC,GAAG,CACT,iCAAiC,EAAE,CAAC,WAAW,2BAA2B,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnH,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,MAAM,GAAG,GAAI,CAAW,CAAC,OAAO,IAAI,EAAE,CAAC;oBACvC,gEAAgE;oBAChE,6DAA6D;oBAC7D,gEAAgE;oBAChE,iEAAiE;oBACjE,wBAAwB;oBACxB,MAAM,UAAU,GAAG,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC;wBACvD,CAAC,CAAC,gEAAgE;4BAChE,qBAAqB;4BACrB,EAAE,CAAC,WAAW;4BACd,kEAAkE;wBACpE,CAAC,CAAC,EAAE,CAAC;oBACP,OAAO,CAAC,IAAI,CACV,gDAAgD,EAAE,CAAC,WAAW,YAAY,GAAG,GAAG,UAAU,EAAE,CAC7F,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,oEAAoE;QACtE,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK;YACnB,OAAO,CAAC,GAAG,CACT,gCAAgC,OAAO,CAAC,MAAM,uBAAuB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1F,CAAC;QAEJ,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,qEAAqE;YACrE,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACvB,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,IAAI,CACV,sDAAsD,IAAI,GAAG,EAC5D,CAAW,CAAC,OAAO,CACrB,CAAC;oBACF,YAAY,CAAC,CAAC,EAAE;wBACd,KAAK,EAAE,0BAA0B;wBACjC,IAAI,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,IAAI,EAAE;qBAC1D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAmB,EACnB,UAAkB;IAElB,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,kBAAkB,CAAC,GAAG,WAAW,SAAS,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,QAAQ,GAAG,CAAC,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,sEAAsE;QACtE,wEAAwE;QACxE,mCAAmC;QACnC,MAAM,MAAM,GAAG,aAAa,CAC1B,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CACtC,CAAC,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,WAAW,SAAS,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,OAAO,EAAE,CAAC;QACjB,wEAAwE;QACxE,8DAA8D;QAC9D,MAAM,QAAQ,IAAI,OAAO,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAC","sourcesContent":["/**\n * Framework request handler — registers framework routes on Nitro's h3 instance.\n *\n * Nitro 3 exposes its h3 app as `nitroApp.h3`. We register framework routes\n * directly on it as middleware (`nitroApp.h3[\"~middleware\"]`), giving each\n * plugin a path-prefix-matched handler that runs before any file-based route.\n *\n * Plugins call `getH3App(nitroApp).use(path, handler)` exactly like h3 v1's\n * `app.use()` — the wrapper translates that into v2 middleware registration.\n *\n * Default plugins that the template doesn't provide are auto-mounted on the\n * first call to `getH3App()` per nitroApp instance.\n */\nimport type { EventHandler, H3Event } from \"h3\";\nimport { setResponseHeader, setResponseStatus } from \"h3\";\n\nimport { getMissingDefaultPlugins } from \"../deploy/route-discovery.js\";\nimport { getConfiguredAppBasePath } from \"./app-base-path.js\";\nimport { captureError } from \"./capture-error.js\";\nimport { createCsrfMiddleware } from \"./csrf.js\";\n\nconst BOOTSTRAPPED = new WeakSet<object>();\nconst IN_BOOTSTRAP = new WeakSet<object>();\nconst FRAMEWORK_PREFIX = \"/_agent-native\";\nconst WELL_KNOWN_PREFIX = \"/.well-known\";\nconst APP_SHIM_KEY = \"_agentNativeH3Shim\";\nconst BOOTSTRAP_PROMISE_KEY = \"_agentNativeBootstrapPromise\";\nconst PLUGIN_READY_KEY = \"_agentNativePluginReadyPromise\";\nconst PLUGIN_READY_PLACEHOLDERS_KEY = \"_agentNativePluginReadyPlaceholders\";\nconst PLUGIN_FAILED_KEY = \"_agentNativePluginInitFailures\";\nconst PROVIDED_PLUGIN_STEMS_KEY = \"_agentNativeProvidedPluginStems\";\nconst MIDDLEWARE_DISPATCHER_PATCHED_KEY =\n  \"_agentNativeMiddlewareDispatcherPatched\";\n\ninterface PluginReadyEntry {\n  promise: Promise<void>;\n  paths?: string[];\n}\n\nfunction getAppBasePath(): string {\n  return getConfiguredAppBasePath();\n}\n\nfunction pathMatchesPrefix(reqPath: string, prefix: string): boolean {\n  return reqPath === prefix || reqPath.startsWith(prefix + \"/\");\n}\n\nfunction supportsAppBasePathMount(path: string): boolean {\n  return (\n    pathMatchesPrefix(path, FRAMEWORK_PREFIX) ||\n    pathMatchesPrefix(path, WELL_KNOWN_PREFIX)\n  );\n}\n\nfunction resolveMountMatch(\n  reqPath: string,\n  path: string,\n): { mountPath: string; strippedPath: string } | null {\n  if (pathMatchesPrefix(reqPath, path)) {\n    return { mountPath: path, strippedPath: reqPath.slice(path.length) || \"/\" };\n  }\n\n  const appBasePath = getAppBasePath();\n  if (!appBasePath || !supportsAppBasePathMount(path)) return null;\n\n  const prefixedPath = `${appBasePath}${path}`;\n  if (!pathMatchesPrefix(reqPath, prefixedPath)) return null;\n  return {\n    mountPath: prefixedPath,\n    strippedPath: reqPath.slice(prefixedPath.length) || \"/\",\n  };\n}\n\n/**\n * Wrapper around Nitro's h3 instance that exposes a v1-style `.use()` API\n * for registering path-prefix middleware.\n */\nexport interface H3AppShim {\n  use(path: string, handler: EventHandler): void;\n  use(handler: EventHandler): void;\n}\n\n/**\n * Mark a default plugin slot as supplied by the app/template before the\n * framework default bootstrap runs.\n *\n * Bundled serverless functions often don't have the original\n * `server/plugins/*.ts` tree on disk at runtime, so filesystem route discovery\n * can falsely conclude a template plugin is missing. Explicit plugin factories\n * call this synchronously before awaiting bootstrap so the framework does not\n * auto-mount a generic default over the app's custom implementation.\n */\nexport function markDefaultPluginProvided(nitroApp: any, stem: string): void {\n  if (!nitroApp || !stem) return;\n  const existing = nitroApp[PROVIDED_PLUGIN_STEMS_KEY] as\n    | Set<string>\n    | undefined;\n  const provided = existing ?? new Set<string>();\n  provided.add(stem);\n  nitroApp[PROVIDED_PLUGIN_STEMS_KEY] = provided;\n}\n\n/**\n * Get (or create) the shared H3 app wrapper for a nitroApp. Plugins use this\n * to register routes via `.use(path, handler)`.\n *\n * On the first call per nitroApp, we kick off auto-mounting any missing\n * default plugins. User-facing plugin factories (createAgentChatPlugin,\n * createAuthPlugin, etc.) await this bootstrap via `awaitBootstrap()` so the\n * default plugins finish registering middleware before requests arrive.\n */\nexport function getH3App(nitroApp: any): H3AppShim {\n  if (!nitroApp) throw new Error(\"getH3App: nitroApp is required\");\n  ensureGlobalMiddlewareDispatch(nitroApp);\n\n  // Reuse the cached shim if we've wrapped this nitroApp before\n  const cached = nitroApp[APP_SHIM_KEY] as H3AppShim | undefined;\n  if (cached) return cached;\n\n  const shim: H3AppShim = {\n    use(arg1: string | EventHandler, arg2?: EventHandler) {\n      const path = typeof arg1 === \"string\" ? arg1 : \"\";\n      const handler = (typeof arg1 === \"string\" ? arg2 : arg1) as EventHandler;\n      if (typeof handler !== \"function\") {\n        throw new Error(\"getH3App.use: handler must be a function\");\n      }\n      registerMiddleware(nitroApp, path, handler);\n    },\n  };\n\n  nitroApp[APP_SHIM_KEY] = shim;\n\n  if (!BOOTSTRAPPED.has(nitroApp)) {\n    BOOTSTRAPPED.add(nitroApp);\n    nitroApp[BOOTSTRAP_PROMISE_KEY] = bootstrapDefaultPlugins(nitroApp).catch(\n      (err) => {\n        console.warn(\n          \"[agent-native] Failed to auto-mount default plugins:\",\n          (err as Error).message,\n        );\n        captureError(err, {\n          route: \"default-plugin-bootstrap\",\n          tags: { phase: \"default-plugin-bootstrap\" },\n        });\n      },\n    );\n\n    // Readiness gate: Nitro v3 doesn't await async plugins, so routes\n    // registered inside an async plugin may not exist when the first\n    // request arrives. These middleware entries hold framework routes\n    // until default-plugin bootstrap and tracked plugin inits complete.\n    const readinessGate = (async (event: H3Event) => {\n      const eventAny = event as any;\n      await awaitFrameworkRoutesReadyForRequest(\n        nitroApp,\n        eventAny.context?._mountedPathname ?? event.url?.pathname ?? \"\",\n      );\n      // Fall through — the actual route handler runs next.\n      return undefined;\n    }) as EventHandler;\n    registerMiddleware(nitroApp, FRAMEWORK_PREFIX, readinessGate, {\n      prepend: true,\n    });\n    registerMiddleware(nitroApp, WELL_KNOWN_PREFIX, readinessGate, {\n      prepend: true,\n    });\n\n    // CSRF (see csrf.ts): registered here — synchronously, on the very\n    // first `getH3App()` call for this nitroApp — rather than inside\n    // createCoreRoutesPlugin's own async init chain. Real deployments mount\n    // core-routes and agent-chat as SEPARATE, independently-async-initialized\n    // Nitro plugin files with no explicit ordering between them; both\n    // eventually call `getH3App(nitroApp).use(...)` to register their own\n    // routes (CSRF, action routes) after their own async setup (DB reads,\n    // dynamic imports) resolves in unpredictable relative order. The\n    // readiness gate above only guarantees every tracked plugin has FINISHED\n    // registering by the time a gated request is released — it does NOT\n    // guarantee CSRF's registration call happens to `.push()` onto\n    // `~middleware` before an action route's does. If agent-chat's action\n    // route push happened to land first, that route would match and run\n    // before CSRF ever saw the request. Registering CSRF here instead makes\n    // it the first non-prepended middleware pushed onto the array for this\n    // nitroApp, full stop — every plugin's own route registrations reach\n    // `getH3App()` (and therefore run after this point) before they can\n    // register anything, regardless of which plugin's async chain resolves\n    // first.\n    registerMiddleware(nitroApp, \"\", createCsrfMiddleware());\n\n    // Primary gate: Nitro bridges this `request` hook to h3's `config.onRequest`,\n    // which h3 awaits BEFORE `handler()` snapshots middleware and resolves the\n    // route. The middleware gate above runs too late on production dispatchers —\n    // its await finishes after the snapshot, so a route registered during async\n    // init is missing from the request and 404s. The middleware gate stays as a\n    // fallback for runtimes where `onRequest` isn't wired.\n    nitroApp.hooks?.hook?.(\"request\", async (event: H3Event) => {\n      const reqPath = event.url?.pathname ?? \"\";\n      if (\n        resolveMountMatch(reqPath, FRAMEWORK_PREFIX) ||\n        resolveMountMatch(reqPath, WELL_KNOWN_PREFIX)\n      ) {\n        await awaitFrameworkRoutesReadyForRequest(nitroApp, reqPath);\n      }\n    });\n  }\n\n  return shim;\n}\n\n/**\n * Nitro 3 production builds generate a route dispatcher by overriding h3's\n * internal `~getMiddleware()` hook. Some generated dispatchers return only\n * route-rule middleware and skip the global `h3[\"~middleware\"]` array that\n * `getH3App().use()` appends to. Wrap the dispatcher once so framework routes\n * registered at runtime are still part of request dispatch.\n */\nfunction ensureGlobalMiddlewareDispatch(nitroApp: any): void {\n  const h3 = nitroApp?.h3;\n  if (!h3) return;\n  const current = h3[\"~getMiddleware\"];\n  if (h3[MIDDLEWARE_DISPATCHER_PATCHED_KEY] === current) return;\n\n  const original = typeof current === \"function\" ? current.bind(h3) : undefined;\n\n  const wrappedGetMiddleware = (event: H3Event, route: unknown) => {\n    const originalResult = original ? original(event, route) : [];\n    const originalList = Array.isArray(originalResult)\n      ? originalResult\n      : originalResult\n        ? [originalResult]\n        : [];\n    const globalMiddleware = Array.isArray(h3[\"~middleware\"])\n      ? h3[\"~middleware\"]\n      : [];\n    if (globalMiddleware.length === 0) return originalList;\n\n    const alreadyIncluded = new Set(originalList);\n    const missingGlobal = globalMiddleware.filter(\n      (middleware) => !alreadyIncluded.has(middleware),\n    );\n    return missingGlobal.length\n      ? [...missingGlobal, ...originalList]\n      : originalList;\n  };\n\n  h3[\"~getMiddleware\"] = wrappedGetMiddleware;\n  h3[MIDDLEWARE_DISPATCHER_PATCHED_KEY] = wrappedGetMiddleware;\n}\n\n/**\n * Wait for the framework's default-plugin bootstrap to complete.\n *\n * Called by user-facing plugin factories (`createAgentChatPlugin`, etc.) at\n * the top of their plugin function, so that by the time the function returns\n * — and Nitro starts accepting requests — all default plugins have finished\n * registering their middleware.\n *\n * No-op when called from inside the bootstrap itself (avoids deadlock when a\n * default plugin happens to be running as part of bootstrap).\n */\nexport async function awaitBootstrap(nitroApp: any): Promise<void> {\n  if (!nitroApp || IN_BOOTSTRAP.has(nitroApp)) return;\n  // Trigger bootstrap if it hasn't been already (idempotent — getH3App\n  // creates the shim and kicks off bootstrap on first call).\n  getH3App(nitroApp);\n  const promise = nitroApp[BOOTSTRAP_PROMISE_KEY];\n  if (promise) await promise;\n}\n\n/**\n * Wait until framework routes are safe to dispatch.\n *\n * Request-time gates must wait for both phases:\n *   1. default-plugin bootstrap, which discovers and starts missing plugins\n *   2. async plugin init promises, which register routes such as A2A cards\n */\nasync function awaitFrameworkRoutesReadyForRequest(\n  nitroApp: any,\n  reqPath: string,\n): Promise<void> {\n  if (!nitroApp) return;\n  const bootstrapPromise = nitroApp[BOOTSTRAP_PROMISE_KEY];\n  if (bootstrapPromise) await bootstrapPromise;\n  await awaitPluginsReady(nitroApp, reqPath);\n}\n\n/**\n * Track an async plugin's initialization promise. Nitro v3 calls plugins\n * synchronously and doesn't await async return values, so routes registered\n * inside an async plugin may not be ready when the first request arrives.\n *\n * Call this from the TOP of any async plugin so that the readiness gate\n * (installed by getH3App) can hold /_agent-native requests until the plugin\n * finishes mounting its routes.\n */\nexport function trackPluginInit(\n  nitroApp: any,\n  promise: Promise<void>,\n  options: { paths?: string[] } = {},\n): void {\n  if (!nitroApp) return;\n  // Ensure the readiness gate exists even when the tracked plugin is the first\n  // framework code to run in a serverless isolate. Otherwise an immediate\n  // first request can fall through before the plugin registers its routes.\n  getH3App(nitroApp);\n  // Attach a no-op catch so the promise doesn't surface as an unhandled\n  // rejection when Nitro v3 drops the async return value. The actual error\n  // is still observable when awaitPluginsReady() re-awaits the promise.\n  const safe = promise.catch((err) => {\n    console.error(\n      \"[agent-native] Plugin init failed:\",\n      (err as Error).message || err,\n    );\n    // Record the failure so the readiness gate can return a retryable 503 for\n    // this plugin's routes instead of letting them fall through to a bare\n    // \"Cannot find any route matching\" 404. That bare 404 is what kept biting\n    // external MCP clients (pi/codex/claude) and the connect flow on cold /\n    // propagating instances whose async init rejected (e.g. DB not yet\n    // reachable): the route never registered, so the placeholder released into\n    // a 404 the client couldn't recover from. A 503 is at least retryable.\n    const failures = (nitroApp[PLUGIN_FAILED_KEY] ??= new Map<\n      string,\n      string\n    >());\n    const msg = (err as Error)?.message || String(err);\n    for (const p of options.paths?.filter(Boolean) ?? []) failures.set(p, msg);\n  });\n  const entry: PluginReadyEntry = {\n    promise: safe,\n    paths: options.paths?.filter(Boolean),\n  };\n  const existing = nitroApp[PLUGIN_READY_KEY] as PluginReadyEntry[] | undefined;\n  if (existing) {\n    existing.push(entry);\n  } else {\n    nitroApp[PLUGIN_READY_KEY] = [entry];\n  }\n  installPluginReadyPlaceholders(nitroApp, entry.paths);\n}\n\nfunction installPluginReadyPlaceholders(\n  nitroApp: any,\n  paths: string[] | undefined,\n): void {\n  if (!paths?.length) return;\n  const existing = nitroApp[PLUGIN_READY_PLACEHOLDERS_KEY] as\n    | Set<string>\n    | undefined;\n  const installed = existing ?? new Set<string>();\n  nitroApp[PLUGIN_READY_PLACEHOLDERS_KEY] = installed;\n\n  for (const path of paths) {\n    if (!path || installed.has(path)) continue;\n    installed.add(path);\n    registerMiddleware(\n      nitroApp,\n      path,\n      (async (event: H3Event) => {\n        const eventAny = event as any;\n        const reqPath =\n          eventAny.context?._mountedPathname ?? event.url?.pathname ?? path;\n        await awaitFrameworkRoutesReadyForRequest(nitroApp, reqPath);\n        // If this plugin's async init failed, its real route was never\n        // registered. Return a retryable 503 instead of releasing into a bare\n        // 404 (external MCP clients can't recover from a 404; a 503 is at least\n        // a \"try again\" the client / next instance can act on).\n        const failures = nitroApp[PLUGIN_FAILED_KEY] as\n          | Map<string, string>\n          | undefined;\n        if (failures?.size) {\n          for (const [failedPath, msg] of failures) {\n            if (resolveMountMatch(reqPath, failedPath)) {\n              setResponseStatus(event, 503);\n              setResponseHeader(event, \"retry-after\", \"5\");\n              return {\n                error: `agent-native route is initializing or unavailable: ${msg}`,\n              };\n            }\n          }\n        }\n        return undefined;\n      }) as EventHandler,\n      {\n        prepend: true,\n      },\n    );\n  }\n}\n\nfunction logFrameworkRouteError(args: {\n  method: string | undefined;\n  route: string;\n  status: number;\n  error: unknown;\n}): void {\n  const error = args.error as any;\n  const message = error?.message || String(args.error);\n  const prefix = `[agent-native] ${args.method ?? \"\"} ${args.route} failed (${args.status})`;\n  if (process.env.NODE_ENV === \"production\") {\n    console.error(`${prefix}: ${message}`);\n    return;\n  }\n  console.error(`${prefix}: ${message}`, error?.stack || args.error);\n}\n\nfunction isClientAbortError(error: unknown, event: H3Event): boolean {\n  const err = error as any;\n  const message = typeof err?.message === \"string\" ? err.message : \"\";\n  const code = typeof err?.code === \"string\" ? err.code : \"\";\n  const node = (event as any).node;\n  return (\n    message === \"aborted\" ||\n    code === \"ECONNRESET\" ||\n    node?.req?.destroyed === true ||\n    node?.res?.destroyed === true\n  );\n}\n\nfunction debugClientAbort(args: {\n  method: string | undefined;\n  route: string;\n  error: unknown;\n}): void {\n  if (process.env.NODE_ENV === \"production\") return;\n  const err = args.error as any;\n  const message = err?.message || String(args.error);\n  console.debug?.(\n    `[agent-native] ${args.method ?? \"\"} ${args.route} aborted by client: ${message}`,\n  );\n}\n\n/**\n * Await all tracked plugin initializations. Called by the readiness gate\n * middleware before dispatching framework routes.\n */\nexport async function awaitPluginsReady(\n  nitroApp: any,\n  reqPath?: string,\n): Promise<void> {\n  const entries = nitroApp[PLUGIN_READY_KEY] as PluginReadyEntry[] | undefined;\n  if (!entries?.length) return;\n\n  const relevant = reqPath\n    ? entries.filter((entry) =>\n        entry.paths?.length\n          ? entry.paths.some((path) => resolveMountMatch(reqPath, path))\n          : true,\n      )\n    : entries;\n\n  if (relevant.length) {\n    await Promise.all(relevant.map((entry) => entry.promise));\n    const completed = new Set(relevant);\n    const latest =\n      (nitroApp[PLUGIN_READY_KEY] as PluginReadyEntry[] | undefined) ?? [];\n    nitroApp[PLUGIN_READY_KEY] = latest.filter(\n      (entry) => !completed.has(entry),\n    );\n  }\n}\n\n/**\n * Register a path-prefix middleware on Nitro's h3 instance.\n *\n * The middleware:\n *   - Returns `next()` (continues) if the request path doesn't match.\n *   - Otherwise dispatches to the handler. If the handler returns a value,\n *     it short-circuits the request. If it returns undefined, next() runs.\n *\n * Path matching emulates h3 v1's `app.use(path, ...)` behavior:\n *   - Exact-match prefix: `/foo` matches `/foo`, `/foo/bar`, but not `/foobar`\n *   - Empty path: middleware runs on every request\n */\nfunction registerMiddleware(\n  nitroApp: any,\n  path: string,\n  handler: EventHandler,\n  options: { prepend?: boolean } = {},\n) {\n  const h3 = nitroApp.h3;\n  if (!h3 || !Array.isArray(h3[\"~middleware\"])) {\n    throw new Error(\n      \"[agent-native] Cannot register route: nitroApp.h3 is not available. \" +\n        \"Make sure you're calling getH3App() from inside a Nitro plugin.\",\n    );\n  }\n\n  const middleware = async (event: H3Event, next: () => any) => {\n    let originalPathname: string | undefined;\n    let originalEventPath: string | undefined;\n    let hadEventPath = false;\n    // Only true once this specific middleware invocation has actually\n    // stripped a mount prefix (i.e. `path` was non-empty and matched).\n    // Global (`path === \"\"`) middleware never mutates event.path/pathname,\n    // so `restoreOriginalPath` must be a no-op for it — otherwise it would\n    // unconditionally `delete event.path` on every pass-through (hadEventPath\n    // defaults to false), corrupting the event for any middleware that runs\n    // later in the chain (a real bug: two or more global middlewares in\n    // sequence, e.g. security-headers + CORS + CSRF, would wipe event.path\n    // for everything downstream, including the final route handler).\n    let didStripPath = false;\n    const restoreOriginalPath = () => {\n      if (!didStripPath) return;\n      if (originalPathname !== undefined) {\n        try {\n          event.url.pathname = originalPathname;\n        } catch {\n          // ignore\n        }\n        originalPathname = undefined;\n      }\n      if (hadEventPath) {\n        try {\n          (event as any).path = originalEventPath;\n        } catch {\n          // ignore\n        }\n      } else {\n        try {\n          delete (event as any).path;\n        } catch {\n          // ignore\n        }\n      }\n    };\n    if (path) {\n      const reqPath = event.url?.pathname ?? \"\";\n      const match = resolveMountMatch(reqPath, path);\n      if (!match) {\n        return next();\n      }\n      // Strip the mount prefix from event.url.pathname so handlers that\n      // dispatch sub-routes can read `event.path` (or `event.url.pathname`)\n      // and see the path RELATIVE to their mount point — matching h3 v1's\n      // `app.use(path, handler)` semantics.\n      const eventAny = event as any;\n      hadEventPath = \"path\" in eventAny;\n      originalEventPath = eventAny.path;\n      didStripPath = true;\n      try {\n        originalPathname = event.url.pathname;\n        // Save the full path in context so handlers that need the original URL\n        // (e.g. Better Auth, which extracts its own basePath prefix) can\n        // reconstruct a Request with the un-stripped URL.\n        eventAny.context = eventAny.context ?? {};\n        eventAny.context._mountedPathname = originalPathname;\n        eventAny.context._mountPrefix = match.mountPath;\n        event.url.pathname = match.strippedPath;\n        eventAny.path = `${match.strippedPath}${event.url.search || \"\"}`;\n      } catch {\n        // event.url is read-only on some runtimes — fall through. Handlers\n        // that don't depend on prefix stripping (most of them) still work.\n      }\n    }\n    try {\n      const result = await handler(event);\n      if (result === undefined) {\n        // Restore the original pathname BEFORE calling next() so downstream\n        // middleware sees the full URL — not the stripped mount-relative path.\n        // Matches h3 v2's own sub-app middleware pattern where the restore\n        // happens inside the next() callback, not after it returns.\n        restoreOriginalPath();\n        return next();\n      }\n      return result;\n    } catch (err) {\n      // Log 500s to the server console so they're debuggable, and respond\n      // with JSON instead of the default HTML error page so clients can\n      // surface error messages. This only applies to routes mounted under\n      // the framework prefix (or middleware mounted at `/`, for which we\n      // still want visibility).\n      const reqPath = originalPathname ?? event.url?.pathname ?? \"\";\n      const e = err as any;\n      const status =\n        typeof e?.statusCode === \"number\"\n          ? e.statusCode\n          : typeof e?.status === \"number\"\n            ? e.status\n            : 500;\n      if (isClientAbortError(err, event)) {\n        debugClientAbort({ method: event.method, route: reqPath, error: err });\n        return undefined;\n      }\n      logFrameworkRouteError({\n        method: event.method,\n        route: reqPath,\n        status,\n        error: err,\n      });\n      // Forward 5xx to server-side Sentry — Nitro's own `error` hook may not\n      // fire here because we convert the throw into a normal JSON response,\n      // and a console.error alone is invisible in deployed environments.\n      // 4xx are user-input errors (validation, auth) and aren't worth\n      // alerting on. Lazy-loaded so the framework-request-handler module\n      // doesn't pull @sentry/node into bundles that don't need it.\n      if (status >= 500) {\n        // Static `import` would create a cycle (sentry.ts imports auth.ts\n        // which imports… eventually, framework-request-handler.ts).\n        import(\"./sentry.js\")\n          .then(({ captureRouteError, isServerSentryEnabled }) => {\n            if (!isServerSentryEnabled()) return;\n            captureRouteError(err, {\n              route: reqPath,\n              method: event.method,\n              userAgent: (() => {\n                try {\n                  return event.headers?.get(\"user-agent\") ?? undefined;\n                } catch {\n                  return undefined;\n                }\n              })(),\n            });\n          })\n          .catch(() => {\n            // Sentry is observability — never let it break a response path.\n          });\n      }\n      try {\n        setResponseStatus(event, status);\n        setResponseHeader(event, \"content-type\", \"application/json\");\n      } catch {\n        // Response already sent — best effort.\n      }\n      return {\n        error: e?.message || \"Internal server error\",\n        // Only surface the stack to clients when explicitly enabled.\n        // `NODE_ENV !== \"production\"` was unsafe — preview deploys and\n        // any host that forgets to set NODE_ENV=production leaked stack\n        // traces (file paths, dependency versions, internal route\n        // topology) to anonymous callers. Operators who want stacks in\n        // dev set `AGENT_NATIVE_DEBUG_ERRORS=1` explicitly.\n        ...(status >= 500 &&\n        process.env.AGENT_NATIVE_DEBUG_ERRORS === \"1\" &&\n        e?.stack\n          ? { stack: e.stack }\n          : {}),\n      };\n    } finally {\n      // Restore the original pathname so downstream middleware sees the\n      // full URL.\n      restoreOriginalPath();\n    }\n  };\n\n  if (options.prepend) {\n    h3[\"~middleware\"].unshift(middleware);\n  } else {\n    h3[\"~middleware\"].push(middleware);\n  }\n}\n\n/**\n * Auto-mount any default framework plugins that the template doesn't provide.\n *\n * Runs once per nitroApp on the first `getH3App()` call. Uses route-discovery\n * to find which default plugin stems are missing from `server/plugins/`, then\n * dynamically imports and mounts them. If a workspace core is present in the\n * ancestor chain, plugin slots the workspace core exports are mounted from\n * there instead of from @agent-native/core — this is the middle layer of the\n * three-layer inheritance model (app local > workspace core > framework).\n */\nasync function bootstrapDefaultPlugins(nitroApp: any): Promise<void> {\n  IN_BOOTSTRAP.add(nitroApp);\n  try {\n    const cwd = process.cwd();\n    const discoveredMissing = await getMissingDefaultPlugins(cwd);\n    const provided = nitroApp[PROVIDED_PLUGIN_STEMS_KEY] as\n      | Set<string>\n      | undefined;\n    const missing = provided\n      ? discoveredMissing.filter((stem) => !provided.has(stem))\n      : discoveredMissing;\n    if (missing.length === 0) return;\n\n    // Lazy import to avoid circular dependency at module load time\n    const serverModule = await import(\"./index.js\");\n    const terminalModule = await import(\"../terminal/terminal-plugin.js\");\n    const integrationsModule = await import(\"../integrations/plugin.js\");\n    const contextXrayModule = await import(\"../agent/context-xray/plugin.js\");\n    const observationalMemoryModule =\n      await import(\"../agent/observational-memory/plugin.js\");\n    const orgModule = await import(\"../org/plugin.js\");\n    const onboardingModule = await import(\"../onboarding/plugin.js\");\n\n    const frameworkImpls: Record<\n      string,\n      ((nitroApp: any) => void | Promise<void>) | undefined\n    > = {\n      \"agent-chat\": (serverModule as any).defaultAgentChatPlugin,\n      auth: (serverModule as any).defaultAuthPlugin,\n      \"context-xray\": (contextXrayModule as any).defaultContextXrayPlugin,\n      \"core-routes\": (serverModule as any).defaultCoreRoutesPlugin,\n      integrations: (integrationsModule as any).defaultIntegrationsPlugin,\n      \"observational-memory\": (observationalMemoryModule as any)\n        .defaultObservationalMemoryPlugin,\n      onboarding: (onboardingModule as any).defaultOnboardingPlugin,\n      org: (orgModule as any).defaultOrgPlugin,\n      resources: (serverModule as any).defaultResourcesPlugin,\n      sentry: (serverModule as any).defaultSentryPlugin,\n      terminal: (terminalModule as any).defaultTerminalPlugin,\n    };\n\n    // Workspace core layer: if the app is inside an enterprise monorepo with\n    // `agent-native.workspaceCore` configured, pull in any plugin slots the\n    // workspace core exports from its server entry. We dynamically import the\n    // workspace core package at runtime.\n    let workspaceImpls: Record<\n      string,\n      ((nitroApp: any) => void | Promise<void>) | undefined\n    > = {};\n    try {\n      const { getWorkspaceCoreExports } =\n        await import(\"../deploy/workspace-core.js\");\n      const ws = await getWorkspaceCoreExports(cwd);\n      if (ws && Object.keys(ws.plugins).length > 0) {\n        try {\n          const wsServerModule = await loadWorkspaceCoreServer(\n            ws.packageName,\n            ws.packageDir,\n          );\n          for (const [slot, exportName] of Object.entries(ws.plugins)) {\n            if (!exportName) continue;\n            const impl = (wsServerModule as any)[exportName];\n            if (typeof impl === \"function\") {\n              workspaceImpls[slot] = impl;\n            }\n          }\n          if (process.env.DEBUG) {\n            console.log(\n              `[agent-native] Workspace core ${ws.packageName} provides plugin slots: ${Object.keys(workspaceImpls).join(\", \")}`,\n            );\n          }\n        } catch (e) {\n          const msg = (e as Error).message ?? \"\";\n          // Common cause: workspace-core's package.json points \"./server\"\n          // at a TS source file (the scaffold default), but Node can't\n          // resolve relative `.js` imports inside it without a TS loader.\n          // Tell the user to compile to dist/ rather than just dumping the\n          // raw resolution error.\n          const tsLoadHint = /\\.js' imported from .*\\.ts/.test(msg)\n            ? \" — workspace-core src is TypeScript but isn't being compiled. \" +\n              \"Run `pnpm --filter \" +\n              ws.packageName +\n              \" build` and point its `./server` export at dist/server/index.js.\"\n            : \"\";\n          console.warn(\n            `[agent-native] Failed to load workspace core ${ws.packageName}/server: ${msg}${tsLoadHint}`,\n          );\n        }\n      }\n    } catch {\n      // Workspace shared package isn't available (e.g. running on an edge\n      // runtime without fs). Silently fall through to framework defaults.\n    }\n\n    if (process.env.DEBUG)\n      console.log(\n        `[agent-native] Auto-mounting ${missing.length} default plugin(s): ${missing.join(\", \")}`,\n      );\n\n    for (const stem of missing) {\n      // Prefer workspace-core impl over framework default when both exist.\n      const impl = workspaceImpls[stem] ?? frameworkImpls[stem];\n      if (typeof impl === \"function\") {\n        try {\n          await impl(nitroApp);\n        } catch (e) {\n          console.warn(\n            `[agent-native] Failed to auto-mount default plugin ${stem}:`,\n            (e as Error).message,\n          );\n          captureError(e, {\n            route: \"default-plugin-bootstrap\",\n            tags: { phase: \"default-plugin-bootstrap\", plugin: stem },\n          });\n        }\n      }\n    }\n  } finally {\n    IN_BOOTSTRAP.delete(nitroApp);\n  }\n}\n\n/**\n * Load a workspace-core's `/server` entry, transparently handling TS source.\n *\n * The scaffolded workspace-core template ships TS sources without a build\n * step (exports point at `./src/server/index.ts`), so plain `await import()`\n * blows up the moment Node hits a relative `.js` import inside (the standard\n * TS ESM convention) — and even before that, Node may resolve the package\n * relative to the framework's own location rather than the user's monorepo.\n *\n * We try Node's plain `import()` first (fastest path when the user has\n * compiled to dist/) and fall through to jiti on any error. jiti is anchored\n * to a real file inside the workspace-core's directory, so its module\n * resolution starts in the right node_modules tree (handles pnpm hoisting\n * and linked workspaces) AND handles TS source files + `.js` → `.ts` ESM\n * extension remapping.\n *\n * Edge runtimes without `fs` won't be able to load jiti at all; the outer\n * try/catch silently falls through to framework defaults in that case.\n */\nexport async function loadWorkspaceCoreServer(\n  packageName: string,\n  packageDir: string,\n): Promise<any> {\n  let firstErr: unknown;\n  try {\n    return await import(/* @vite-ignore */ `${packageName}/server`);\n  } catch (e) {\n    firstErr = e;\n  }\n\n  try {\n    const { createJiti } = await import(\"jiti\");\n    const { pathToFileURL } = await import(\"node:url\");\n    const path = await import(\"node:path\");\n    // Anchor jiti to a real file inside the workspace-core package so its\n    // module resolution starts in the right node_modules tree (handles pnpm\n    // hoisting and linked workspaces).\n    const anchor = pathToFileURL(\n      path.join(packageDir, \"package.json\"),\n    ).toString();\n    const jiti = createJiti(anchor, { interopDefault: true });\n    return await jiti.import(`${packageName}/server`);\n  } catch (jitiErr) {\n    // jiti also failed — rethrow the original Node error since it's usually\n    // more informative about *why* the package wasn't resolvable.\n    throw firstErr ?? jitiErr;\n  }\n}\n\nexport { FRAMEWORK_PREFIX };\n"]}
+{"version":3,"file":"framework-request-handler.js","sourceRoot":"","sources":["../../src/server/framework-request-handler.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAC;AAE1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEjD,MAAM,YAAY,GAAG,IAAI,OAAO,EAAU,CAAC;AAC3C,MAAM,YAAY,GAAG,IAAI,OAAO,EAAU,CAAC;AAC3C,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAC1C,MAAM,iBAAiB,GAAG,cAAc,CAAC;AACzC,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAC1C,MAAM,qBAAqB,GAAG,8BAA8B,CAAC;AAC7D,MAAM,gBAAgB,GAAG,gCAAgC,CAAC;AAC1D,MAAM,6BAA6B,GAAG,qCAAqC,CAAC;AAC5E,MAAM,iBAAiB,GAAG,gCAAgC,CAAC;AAC3D,MAAM,yBAAyB,GAAG,iCAAiC,CAAC;AACpE,MAAM,iCAAiC,GACrC,yCAAyC,CAAC;AAO5C,SAAS,cAAc;IACrB,OAAO,wBAAwB,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,MAAc;IACxD,OAAO,OAAO,KAAK,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY;IAC5C,OAAO,CACL,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,CAAC;QACzC,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,CAAC;QAC1C,iBAAiB,CAAC,IAAI,EAAE,uBAAuB,CAAC,CACjD,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAe,EACf,IAAY;IAEZ,IAAI,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IAC9E,CAAC;IAED,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,IAAI,CAAC,WAAW,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEjE,MAAM,YAAY,GAAG,GAAG,WAAW,GAAG,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,OAAO;QACL,SAAS,EAAE,YAAY;QACvB,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,GAAG;KACxD,CAAC;AACJ,CAAC;AAWD;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAAa,EAAE,IAAY;IACnE,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI;QAAE,OAAO;IAC/B,MAAM,QAAQ,GAAG,QAAQ,CAAC,yBAAyB,CAEtC,CAAC;IACd,MAAM,QAAQ,GAAG,QAAQ,IAAI,IAAI,GAAG,EAAU,CAAC;IAC/C,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnB,QAAQ,CAAC,yBAAyB,CAAC,GAAG,QAAQ,CAAC;AACjD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,QAAQ,CAAC,QAAa;IACpC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACjE,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IAEzC,8DAA8D;IAC9D,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAA0B,CAAC;IAC/D,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,IAAI,GAAc;QACtB,GAAG,CAAC,IAA2B,EAAE,IAAmB;YAClD,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,MAAM,OAAO,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAiB,CAAC;YACzE,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC;IAEF,QAAQ,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;IAE9B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3B,QAAQ,CAAC,qBAAqB,CAAC,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC,KAAK,CACvE,CAAC,GAAG,EAAE,EAAE;YACN,OAAO,CAAC,IAAI,CACV,sDAAsD,EACrD,GAAa,CAAC,OAAO,CACvB,CAAC;YACF,YAAY,CAAC,GAAG,EAAE;gBAChB,KAAK,EAAE,0BAA0B;gBACjC,IAAI,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,kEAAkE;QAClE,iEAAiE;QACjE,kEAAkE;QAClE,oEAAoE;QACpE,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YAC9C,MAAM,QAAQ,GAAG,KAAY,CAAC;YAC9B,MAAM,mCAAmC,CACvC,QAAQ,EACR,QAAQ,CAAC,OAAO,EAAE,gBAAgB,IAAI,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAChE,CAAC;YACF,qDAAqD;YACrD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAiB,CAAC;QACnB,kBAAkB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE;YAC5D,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,kBAAkB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,aAAa,EAAE;YAC7D,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,kBAAkB,CAAC,QAAQ,EAAE,uBAAuB,EAAE,aAAa,EAAE;YACnE,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QAEH,mEAAmE;QACnE,iEAAiE;QACjE,wEAAwE;QACxE,0EAA0E;QAC1E,kEAAkE;QAClE,sEAAsE;QACtE,sEAAsE;QACtE,iEAAiE;QACjE,yEAAyE;QACzE,oEAAoE;QACpE,+DAA+D;QAC/D,sEAAsE;QACtE,oEAAoE;QACpE,wEAAwE;QACxE,uEAAuE;QACvE,qEAAqE;QACrE,oEAAoE;QACpE,uEAAuE;QACvE,SAAS;QACT,kBAAkB,CAAC,QAAQ,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAEzD,8EAA8E;QAC9E,2EAA2E;QAC3E,6EAA6E;QAC7E,4EAA4E;QAC5E,4EAA4E;QAC5E,uDAAuD;QACvD,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YACzD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;YAC1C,IACE,iBAAiB,CAAC,OAAO,EAAE,gBAAgB,CAAC;gBAC5C,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC;gBAC7C,iBAAiB,CAAC,OAAO,EAAE,uBAAuB,CAAC,EACnD,CAAC;gBACD,MAAM,mCAAmC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,8BAA8B,CAAC,QAAa;IACnD,MAAM,EAAE,GAAG,QAAQ,EAAE,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE;QAAE,OAAO;IAChB,MAAM,OAAO,GAAG,EAAE,CAAC,gBAAgB,CAAC,CAAC;IACrC,IAAI,EAAE,CAAC,iCAAiC,CAAC,KAAK,OAAO;QAAE,OAAO;IAE9D,MAAM,QAAQ,GAAG,OAAO,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE9E,MAAM,oBAAoB,GAAG,CAAC,KAAc,EAAE,KAAc,EAAE,EAAE;QAC9D,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;YAChD,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,cAAc;gBACd,CAAC,CAAC,CAAC,cAAc,CAAC;gBAClB,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;YACvD,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC;YACnB,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,YAAY,CAAC;QAEvD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAC3C,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CACjD,CAAC;QACF,OAAO,aAAa,CAAC,MAAM;YACzB,CAAC,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,YAAY,CAAC;YACrC,CAAC,CAAC,YAAY,CAAC;IACnB,CAAC,CAAC;IAEF,EAAE,CAAC,gBAAgB,CAAC,GAAG,oBAAoB,CAAC;IAC5C,EAAE,CAAC,iCAAiC,CAAC,GAAG,oBAAoB,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAa;IAChD,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO;IACpD,qEAAqE;IACrE,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnB,MAAM,OAAO,GAAG,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IAChD,IAAI,OAAO;QAAE,MAAM,OAAO,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,mCAAmC,CAChD,QAAa,EACb,OAAe;IAEf,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,MAAM,gBAAgB,GAAG,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IACzD,IAAI,gBAAgB;QAAE,MAAM,gBAAgB,CAAC;IAC7C,MAAM,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAa,EACb,OAAsB,EACtB,OAAO,GAAyB,EAAE;IAElC,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,6EAA6E;IAC7E,wEAAwE;IACxE,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnB,sEAAsE;IACtE,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACjC,OAAO,CAAC,KAAK,CACX,oCAAoC,EACnC,GAAa,CAAC,OAAO,IAAI,GAAG,CAC9B,CAAC;QACF,0EAA0E;QAC1E,sEAAsE;QACtE,0EAA0E;QAC1E,wEAAwE;QACxE,mEAAmE;QACnE,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,QAAQ,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,KAAK,IAAI,GAAG,EAGtD,CAAC,CAAC;QACL,MAAM,GAAG,GAAI,GAAa,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAqB;QAC9B,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;KACtC,CAAC;IACF,MAAM,QAAQ,GAAG,QAAQ,CAAC,gBAAgB,CAAmC,CAAC;IAC9E,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,8BAA8B,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,8BAA8B,CACrC,QAAa,EACb,KAA2B;IAE3B,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO;IAC3B,MAAM,QAAQ,GAAG,QAAQ,CAAC,6BAA6B,CAE1C,CAAC;IACd,MAAM,SAAS,GAAG,QAAQ,IAAI,IAAI,GAAG,EAAU,CAAC;IAChD,QAAQ,CAAC,6BAA6B,CAAC,GAAG,SAAS,CAAC;IAEpD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC3C,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,kBAAkB,CAChB,QAAQ,EACR,IAAI,EACJ,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YACxB,MAAM,QAAQ,GAAG,KAAY,CAAC;YAC9B,MAAM,OAAO,GACX,QAAQ,CAAC,OAAO,EAAE,gBAAgB,IAAI,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,IAAI,CAAC;YACpE,MAAM,mCAAmC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC7D,+DAA+D;YAC/D,sEAAsE;YACtE,wEAAwE;YACxE,wDAAwD;YACxD,MAAM,QAAQ,GAAG,QAAQ,CAAC,iBAAiB,CAE9B,CAAC;YACd,IAAI,QAAQ,EAAE,IAAI,EAAE,CAAC;gBACnB,KAAK,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACzC,IAAI,iBAAiB,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;wBAC3C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC9B,iBAAiB,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;wBAC7C,OAAO;4BACL,KAAK,EAAE,sDAAsD,GAAG,EAAE;yBACnE,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAiB,EAClB;YACE,OAAO,EAAE,IAAI;SACd,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,IAK/B;IACC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAY,CAAC;IAChC,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,kBAAkB,IAAI,CAAC,MAAM,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,MAAM,GAAG,CAAC;IAC3F,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC1C,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,KAAK,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,KAAK,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,KAAc;IACxD,MAAM,GAAG,GAAG,KAAY,CAAC;IACzB,MAAM,OAAO,GAAG,OAAO,GAAG,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,MAAM,IAAI,GAAG,OAAO,GAAG,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,MAAM,IAAI,GAAI,KAAa,CAAC,IAAI,CAAC;IACjC,OAAO,CACL,OAAO,KAAK,SAAS;QACrB,IAAI,KAAK,YAAY;QACrB,IAAI,EAAE,GAAG,EAAE,SAAS,KAAK,IAAI;QAC7B,IAAI,EAAE,GAAG,EAAE,SAAS,KAAK,IAAI,CAC9B,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAIzB;IACC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;QAAE,OAAO;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAY,CAAC;IAC9B,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,OAAO,CAAC,KAAK,EAAE,CACb,kBAAkB,IAAI,CAAC,MAAM,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,uBAAuB,OAAO,EAAE,CAClF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAa,EACb,OAAgB;IAEhB,MAAM,OAAO,GAAG,QAAQ,CAAC,gBAAgB,CAAmC,CAAC;IAC7E,IAAI,CAAC,OAAO,EAAE,MAAM;QAAE,OAAO;IAE7B,MAAM,QAAQ,GAAG,OAAO;QACtB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK,CAAC,KAAK,EAAE,MAAM;YACjB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC9D,CAAC,CAAC,IAAI,CACT;QACH,CAAC,CAAC,OAAO,CAAC;IAEZ,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,MAAM,GACT,QAAQ,CAAC,gBAAgB,CAAoC,IAAI,EAAE,CAAC;QACvE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,MAAM,CACxC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CACjC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,kBAAkB,CACzB,QAAa,EACb,IAAY,EACZ,OAAqB,EACrB,OAAO,GAA0B,EAAE;IAEnC,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;IACvB,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,sEAAsE;YACpE,iEAAiE,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,EAAE,KAAc,EAAE,IAAe,EAAE,EAAE;QAC3D,IAAI,gBAAoC,CAAC;QACzC,IAAI,iBAAqC,CAAC;QAC1C,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,kEAAkE;QAClE,mEAAmE;QACnE,uEAAuE;QACvE,uEAAuE;QACvE,0EAA0E;QAC1E,wEAAwE;QACxE,oEAAoE;QACpE,uEAAuE;QACvE,iEAAiE;QACjE,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,MAAM,mBAAmB,GAAG,GAAG,EAAE;YAC/B,IAAI,CAAC,YAAY;gBAAE,OAAO;YAC1B,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACH,KAAK,CAAC,GAAG,CAAC,QAAQ,GAAG,gBAAgB,CAAC;gBACxC,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,gBAAgB,GAAG,SAAS,CAAC;YAC/B,CAAC;YACD,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACF,KAAa,CAAC,IAAI,GAAG,iBAAiB,CAAC;gBAC1C,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,OAAQ,KAAa,CAAC,IAAI,CAAC;gBAC7B,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QACF,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YACD,kEAAkE;YAClE,sEAAsE;YACtE,oEAAoE;YACpE,sCAAsC;YACtC,MAAM,QAAQ,GAAG,KAAY,CAAC;YAC9B,YAAY,GAAG,MAAM,IAAI,QAAQ,CAAC;YAClC,iBAAiB,GAAG,QAAQ,CAAC,IAAI,CAAC;YAClC,YAAY,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC;gBACH,gBAAgB,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACtC,uEAAuE;gBACvE,iEAAiE;gBACjE,kDAAkD;gBAClD,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC;gBAC1C,QAAQ,CAAC,OAAO,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;gBACrD,QAAQ,CAAC,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC;gBAChD,KAAK,CAAC,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC;gBACxC,QAAQ,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACnE,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;gBACnE,mEAAmE;YACrE,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,oEAAoE;gBACpE,uEAAuE;gBACvE,mEAAmE;gBACnE,4DAA4D;gBAC5D,mBAAmB,EAAE,CAAC;gBACtB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,kEAAkE;YAClE,oEAAoE;YACpE,mEAAmE;YACnE,0BAA0B;YAC1B,MAAM,OAAO,GAAG,gBAAgB,IAAI,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;YAC9D,MAAM,CAAC,GAAG,GAAU,CAAC;YACrB,MAAM,MAAM,GACV,OAAO,CAAC,EAAE,UAAU,KAAK,QAAQ;gBAC/B,CAAC,CAAC,CAAC,CAAC,UAAU;gBACd,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,QAAQ;oBAC7B,CAAC,CAAC,CAAC,CAAC,MAAM;oBACV,CAAC,CAAC,GAAG,CAAC;YACZ,IAAI,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;gBACnC,gBAAgB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBACvE,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,sBAAsB,CAAC;gBACrB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,OAAO;gBACd,MAAM;gBACN,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;YACH,uEAAuE;YACvE,sEAAsE;YACtE,mEAAmE;YACnE,gEAAgE;YAChE,mEAAmE;YACnE,6DAA6D;YAC7D,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;gBAClB,kEAAkE;gBAClE,4DAA4D;gBAC5D,MAAM,CAAC,aAAa,CAAC;qBAClB,IAAI,CAAC,CAAC,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,EAAE,EAAE;oBACrD,IAAI,CAAC,qBAAqB,EAAE;wBAAE,OAAO;oBACrC,iBAAiB,CAAC,GAAG,EAAE;wBACrB,KAAK,EAAE,OAAO;wBACd,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,SAAS,EAAE,CAAC,GAAG,EAAE;4BACf,IAAI,CAAC;gCACH,OAAO,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC;4BACvD,CAAC;4BAAC,MAAM,CAAC;gCACP,OAAO,SAAS,CAAC;4BACnB,CAAC;wBACH,CAAC,CAAC,EAAE;qBACL,CAAC,CAAC;gBACL,CAAC,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE;oBACV,gEAAgE;gBAClE,CAAC,CAAC,CAAC;YACP,CAAC;YACD,IAAI,CAAC;gBACH,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACjC,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;YAC/D,CAAC;YAAC,MAAM,CAAC;gBACP,uCAAuC;YACzC,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,CAAC,EAAE,OAAO,IAAI,uBAAuB;gBAC5C,6DAA6D;gBAC7D,+DAA+D;gBAC/D,gEAAgE;gBAChE,0DAA0D;gBAC1D,+DAA+D;gBAC/D,oDAAoD;gBACpD,GAAG,CAAC,MAAM,IAAI,GAAG;oBACjB,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG;oBAC7C,CAAC,EAAE,KAAK;oBACN,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;oBACpB,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,kEAAkE;YAClE,YAAY;YACZ,mBAAmB,EAAE,CAAC;QACxB,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,EAAE,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,uBAAuB,CAAC,QAAa;IAClD,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,iBAAiB,GAAG,MAAM,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,QAAQ,CAAC,yBAAyB,CAEtC,CAAC;QACd,MAAM,OAAO,GAAG,QAAQ;YACtB,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzD,CAAC,CAAC,iBAAiB,CAAC;QACtB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEjC,+DAA+D;QAC/D,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;QACtE,MAAM,kBAAkB,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;QACrE,MAAM,iBAAiB,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAC1E,MAAM,yBAAyB,GAC7B,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACnD,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAEjE,MAAM,cAAc,GAGhB;YACF,YAAY,EAAG,YAAoB,CAAC,sBAAsB;YAC1D,IAAI,EAAG,YAAoB,CAAC,iBAAiB;YAC7C,cAAc,EAAG,iBAAyB,CAAC,wBAAwB;YACnE,aAAa,EAAG,YAAoB,CAAC,uBAAuB;YAC5D,YAAY,EAAG,kBAA0B,CAAC,yBAAyB;YACnE,sBAAsB,EAAG,yBAAiC;iBACvD,gCAAgC;YACnC,UAAU,EAAG,gBAAwB,CAAC,uBAAuB;YAC7D,GAAG,EAAG,SAAiB,CAAC,gBAAgB;YACxC,SAAS,EAAG,YAAoB,CAAC,sBAAsB;YACvD,MAAM,EAAG,YAAoB,CAAC,mBAAmB;YACjD,QAAQ,EAAG,cAAsB,CAAC,qBAAqB;SACxD,CAAC;QAEF,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,qCAAqC;QACrC,IAAI,cAAc,GAGd,EAAE,CAAC;QACP,IAAI,CAAC;YACH,MAAM,EAAE,uBAAuB,EAAE,GAC/B,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;YAC9C,MAAM,EAAE,GAAG,MAAM,uBAAuB,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC;oBACH,MAAM,cAAc,GAAG,MAAM,uBAAuB,CAClD,EAAE,CAAC,WAAW,EACd,EAAE,CAAC,UAAU,CACd,CAAC;oBACF,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC5D,IAAI,CAAC,UAAU;4BAAE,SAAS;wBAC1B,MAAM,IAAI,GAAI,cAAsB,CAAC,UAAU,CAAC,CAAC;wBACjD,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;4BAC/B,cAAc,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;wBAC9B,CAAC;oBACH,CAAC;oBACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;wBACtB,OAAO,CAAC,GAAG,CACT,iCAAiC,EAAE,CAAC,WAAW,2BAA2B,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnH,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,MAAM,GAAG,GAAI,CAAW,CAAC,OAAO,IAAI,EAAE,CAAC;oBACvC,gEAAgE;oBAChE,6DAA6D;oBAC7D,gEAAgE;oBAChE,iEAAiE;oBACjE,wBAAwB;oBACxB,MAAM,UAAU,GAAG,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC;wBACvD,CAAC,CAAC,gEAAgE;4BAChE,qBAAqB;4BACrB,EAAE,CAAC,WAAW;4BACd,kEAAkE;wBACpE,CAAC,CAAC,EAAE,CAAC;oBACP,OAAO,CAAC,IAAI,CACV,gDAAgD,EAAE,CAAC,WAAW,YAAY,GAAG,GAAG,UAAU,EAAE,CAC7F,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,oEAAoE;QACtE,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK;YACnB,OAAO,CAAC,GAAG,CACT,gCAAgC,OAAO,CAAC,MAAM,uBAAuB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1F,CAAC;QAEJ,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,qEAAqE;YACrE,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACvB,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,IAAI,CACV,sDAAsD,IAAI,GAAG,EAC5D,CAAW,CAAC,OAAO,CACrB,CAAC;oBACF,YAAY,CAAC,CAAC,EAAE;wBACd,KAAK,EAAE,0BAA0B;wBACjC,IAAI,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,IAAI,EAAE;qBAC1D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAmB,EACnB,UAAkB;IAElB,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,kBAAkB,CAAC,GAAG,WAAW,SAAS,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,QAAQ,GAAG,CAAC,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,sEAAsE;QACtE,wEAAwE;QACxE,mCAAmC;QACnC,MAAM,MAAM,GAAG,aAAa,CAC1B,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CACtC,CAAC,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,WAAW,SAAS,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,OAAO,EAAE,CAAC;QACjB,wEAAwE;QACxE,8DAA8D;QAC9D,MAAM,QAAQ,IAAI,OAAO,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAC","sourcesContent":["/**\n * Framework request handler — registers framework routes on Nitro's h3 instance.\n *\n * Nitro 3 exposes its h3 app as `nitroApp.h3`. We register framework routes\n * directly on it as middleware (`nitroApp.h3[\"~middleware\"]`), giving each\n * plugin a path-prefix-matched handler that runs before any file-based route.\n *\n * Plugins call `getH3App(nitroApp).use(path, handler)` exactly like h3 v1's\n * `app.use()` — the wrapper translates that into v2 middleware registration.\n *\n * Default plugins that the template doesn't provide are auto-mounted on the\n * first call to `getH3App()` per nitroApp instance.\n */\nimport type { EventHandler, H3Event } from \"h3\";\nimport { setResponseHeader, setResponseStatus } from \"h3\";\n\nimport { getMissingDefaultPlugins } from \"../deploy/route-discovery.js\";\nimport { MCP_PUBLIC_ROUTE_PREFIX } from \"../mcp/route-paths.js\";\nimport { getConfiguredAppBasePath } from \"./app-base-path.js\";\nimport { captureError } from \"./capture-error.js\";\nimport { createCsrfMiddleware } from \"./csrf.js\";\n\nconst BOOTSTRAPPED = new WeakSet<object>();\nconst IN_BOOTSTRAP = new WeakSet<object>();\nconst FRAMEWORK_PREFIX = \"/_agent-native\";\nconst WELL_KNOWN_PREFIX = \"/.well-known\";\nconst APP_SHIM_KEY = \"_agentNativeH3Shim\";\nconst BOOTSTRAP_PROMISE_KEY = \"_agentNativeBootstrapPromise\";\nconst PLUGIN_READY_KEY = \"_agentNativePluginReadyPromise\";\nconst PLUGIN_READY_PLACEHOLDERS_KEY = \"_agentNativePluginReadyPlaceholders\";\nconst PLUGIN_FAILED_KEY = \"_agentNativePluginInitFailures\";\nconst PROVIDED_PLUGIN_STEMS_KEY = \"_agentNativeProvidedPluginStems\";\nconst MIDDLEWARE_DISPATCHER_PATCHED_KEY =\n  \"_agentNativeMiddlewareDispatcherPatched\";\n\ninterface PluginReadyEntry {\n  promise: Promise<void>;\n  paths?: string[];\n}\n\nfunction getAppBasePath(): string {\n  return getConfiguredAppBasePath();\n}\n\nfunction pathMatchesPrefix(reqPath: string, prefix: string): boolean {\n  return reqPath === prefix || reqPath.startsWith(prefix + \"/\");\n}\n\nfunction supportsAppBasePathMount(path: string): boolean {\n  return (\n    pathMatchesPrefix(path, FRAMEWORK_PREFIX) ||\n    pathMatchesPrefix(path, WELL_KNOWN_PREFIX) ||\n    pathMatchesPrefix(path, MCP_PUBLIC_ROUTE_PREFIX)\n  );\n}\n\nfunction resolveMountMatch(\n  reqPath: string,\n  path: string,\n): { mountPath: string; strippedPath: string } | null {\n  if (pathMatchesPrefix(reqPath, path)) {\n    return { mountPath: path, strippedPath: reqPath.slice(path.length) || \"/\" };\n  }\n\n  const appBasePath = getAppBasePath();\n  if (!appBasePath || !supportsAppBasePathMount(path)) return null;\n\n  const prefixedPath = `${appBasePath}${path}`;\n  if (!pathMatchesPrefix(reqPath, prefixedPath)) return null;\n  return {\n    mountPath: prefixedPath,\n    strippedPath: reqPath.slice(prefixedPath.length) || \"/\",\n  };\n}\n\n/**\n * Wrapper around Nitro's h3 instance that exposes a v1-style `.use()` API\n * for registering path-prefix middleware.\n */\nexport interface H3AppShim {\n  use(path: string, handler: EventHandler): void;\n  use(handler: EventHandler): void;\n}\n\n/**\n * Mark a default plugin slot as supplied by the app/template before the\n * framework default bootstrap runs.\n *\n * Bundled serverless functions often don't have the original\n * `server/plugins/*.ts` tree on disk at runtime, so filesystem route discovery\n * can falsely conclude a template plugin is missing. Explicit plugin factories\n * call this synchronously before awaiting bootstrap so the framework does not\n * auto-mount a generic default over the app's custom implementation.\n */\nexport function markDefaultPluginProvided(nitroApp: any, stem: string): void {\n  if (!nitroApp || !stem) return;\n  const existing = nitroApp[PROVIDED_PLUGIN_STEMS_KEY] as\n    | Set<string>\n    | undefined;\n  const provided = existing ?? new Set<string>();\n  provided.add(stem);\n  nitroApp[PROVIDED_PLUGIN_STEMS_KEY] = provided;\n}\n\n/**\n * Get (or create) the shared H3 app wrapper for a nitroApp. Plugins use this\n * to register routes via `.use(path, handler)`.\n *\n * On the first call per nitroApp, we kick off auto-mounting any missing\n * default plugins. User-facing plugin factories (createAgentChatPlugin,\n * createAuthPlugin, etc.) await this bootstrap via `awaitBootstrap()` so the\n * default plugins finish registering middleware before requests arrive.\n */\nexport function getH3App(nitroApp: any): H3AppShim {\n  if (!nitroApp) throw new Error(\"getH3App: nitroApp is required\");\n  ensureGlobalMiddlewareDispatch(nitroApp);\n\n  // Reuse the cached shim if we've wrapped this nitroApp before\n  const cached = nitroApp[APP_SHIM_KEY] as H3AppShim | undefined;\n  if (cached) return cached;\n\n  const shim: H3AppShim = {\n    use(arg1: string | EventHandler, arg2?: EventHandler) {\n      const path = typeof arg1 === \"string\" ? arg1 : \"\";\n      const handler = (typeof arg1 === \"string\" ? arg2 : arg1) as EventHandler;\n      if (typeof handler !== \"function\") {\n        throw new Error(\"getH3App.use: handler must be a function\");\n      }\n      registerMiddleware(nitroApp, path, handler);\n    },\n  };\n\n  nitroApp[APP_SHIM_KEY] = shim;\n\n  if (!BOOTSTRAPPED.has(nitroApp)) {\n    BOOTSTRAPPED.add(nitroApp);\n    nitroApp[BOOTSTRAP_PROMISE_KEY] = bootstrapDefaultPlugins(nitroApp).catch(\n      (err) => {\n        console.warn(\n          \"[agent-native] Failed to auto-mount default plugins:\",\n          (err as Error).message,\n        );\n        captureError(err, {\n          route: \"default-plugin-bootstrap\",\n          tags: { phase: \"default-plugin-bootstrap\" },\n        });\n      },\n    );\n\n    // Readiness gate: Nitro v3 doesn't await async plugins, so routes\n    // registered inside an async plugin may not exist when the first\n    // request arrives. These middleware entries hold framework routes\n    // until default-plugin bootstrap and tracked plugin inits complete.\n    const readinessGate = (async (event: H3Event) => {\n      const eventAny = event as any;\n      await awaitFrameworkRoutesReadyForRequest(\n        nitroApp,\n        eventAny.context?._mountedPathname ?? event.url?.pathname ?? \"\",\n      );\n      // Fall through — the actual route handler runs next.\n      return undefined;\n    }) as EventHandler;\n    registerMiddleware(nitroApp, FRAMEWORK_PREFIX, readinessGate, {\n      prepend: true,\n    });\n    registerMiddleware(nitroApp, WELL_KNOWN_PREFIX, readinessGate, {\n      prepend: true,\n    });\n    registerMiddleware(nitroApp, MCP_PUBLIC_ROUTE_PREFIX, readinessGate, {\n      prepend: true,\n    });\n\n    // CSRF (see csrf.ts): registered here — synchronously, on the very\n    // first `getH3App()` call for this nitroApp — rather than inside\n    // createCoreRoutesPlugin's own async init chain. Real deployments mount\n    // core-routes and agent-chat as SEPARATE, independently-async-initialized\n    // Nitro plugin files with no explicit ordering between them; both\n    // eventually call `getH3App(nitroApp).use(...)` to register their own\n    // routes (CSRF, action routes) after their own async setup (DB reads,\n    // dynamic imports) resolves in unpredictable relative order. The\n    // readiness gate above only guarantees every tracked plugin has FINISHED\n    // registering by the time a gated request is released — it does NOT\n    // guarantee CSRF's registration call happens to `.push()` onto\n    // `~middleware` before an action route's does. If agent-chat's action\n    // route push happened to land first, that route would match and run\n    // before CSRF ever saw the request. Registering CSRF here instead makes\n    // it the first non-prepended middleware pushed onto the array for this\n    // nitroApp, full stop — every plugin's own route registrations reach\n    // `getH3App()` (and therefore run after this point) before they can\n    // register anything, regardless of which plugin's async chain resolves\n    // first.\n    registerMiddleware(nitroApp, \"\", createCsrfMiddleware());\n\n    // Primary gate: Nitro bridges this `request` hook to h3's `config.onRequest`,\n    // which h3 awaits BEFORE `handler()` snapshots middleware and resolves the\n    // route. The middleware gate above runs too late on production dispatchers —\n    // its await finishes after the snapshot, so a route registered during async\n    // init is missing from the request and 404s. The middleware gate stays as a\n    // fallback for runtimes where `onRequest` isn't wired.\n    nitroApp.hooks?.hook?.(\"request\", async (event: H3Event) => {\n      const reqPath = event.url?.pathname ?? \"\";\n      if (\n        resolveMountMatch(reqPath, FRAMEWORK_PREFIX) ||\n        resolveMountMatch(reqPath, WELL_KNOWN_PREFIX) ||\n        resolveMountMatch(reqPath, MCP_PUBLIC_ROUTE_PREFIX)\n      ) {\n        await awaitFrameworkRoutesReadyForRequest(nitroApp, reqPath);\n      }\n    });\n  }\n\n  return shim;\n}\n\n/**\n * Nitro 3 production builds generate a route dispatcher by overriding h3's\n * internal `~getMiddleware()` hook. Some generated dispatchers return only\n * route-rule middleware and skip the global `h3[\"~middleware\"]` array that\n * `getH3App().use()` appends to. Wrap the dispatcher once so framework routes\n * registered at runtime are still part of request dispatch.\n */\nfunction ensureGlobalMiddlewareDispatch(nitroApp: any): void {\n  const h3 = nitroApp?.h3;\n  if (!h3) return;\n  const current = h3[\"~getMiddleware\"];\n  if (h3[MIDDLEWARE_DISPATCHER_PATCHED_KEY] === current) return;\n\n  const original = typeof current === \"function\" ? current.bind(h3) : undefined;\n\n  const wrappedGetMiddleware = (event: H3Event, route: unknown) => {\n    const originalResult = original ? original(event, route) : [];\n    const originalList = Array.isArray(originalResult)\n      ? originalResult\n      : originalResult\n        ? [originalResult]\n        : [];\n    const globalMiddleware = Array.isArray(h3[\"~middleware\"])\n      ? h3[\"~middleware\"]\n      : [];\n    if (globalMiddleware.length === 0) return originalList;\n\n    const alreadyIncluded = new Set(originalList);\n    const missingGlobal = globalMiddleware.filter(\n      (middleware) => !alreadyIncluded.has(middleware),\n    );\n    return missingGlobal.length\n      ? [...missingGlobal, ...originalList]\n      : originalList;\n  };\n\n  h3[\"~getMiddleware\"] = wrappedGetMiddleware;\n  h3[MIDDLEWARE_DISPATCHER_PATCHED_KEY] = wrappedGetMiddleware;\n}\n\n/**\n * Wait for the framework's default-plugin bootstrap to complete.\n *\n * Called by user-facing plugin factories (`createAgentChatPlugin`, etc.) at\n * the top of their plugin function, so that by the time the function returns\n * — and Nitro starts accepting requests — all default plugins have finished\n * registering their middleware.\n *\n * No-op when called from inside the bootstrap itself (avoids deadlock when a\n * default plugin happens to be running as part of bootstrap).\n */\nexport async function awaitBootstrap(nitroApp: any): Promise<void> {\n  if (!nitroApp || IN_BOOTSTRAP.has(nitroApp)) return;\n  // Trigger bootstrap if it hasn't been already (idempotent — getH3App\n  // creates the shim and kicks off bootstrap on first call).\n  getH3App(nitroApp);\n  const promise = nitroApp[BOOTSTRAP_PROMISE_KEY];\n  if (promise) await promise;\n}\n\n/**\n * Wait until framework routes are safe to dispatch.\n *\n * Request-time gates must wait for both phases:\n *   1. default-plugin bootstrap, which discovers and starts missing plugins\n *   2. async plugin init promises, which register routes such as A2A cards\n */\nasync function awaitFrameworkRoutesReadyForRequest(\n  nitroApp: any,\n  reqPath: string,\n): Promise<void> {\n  if (!nitroApp) return;\n  const bootstrapPromise = nitroApp[BOOTSTRAP_PROMISE_KEY];\n  if (bootstrapPromise) await bootstrapPromise;\n  await awaitPluginsReady(nitroApp, reqPath);\n}\n\n/**\n * Track an async plugin's initialization promise. Nitro v3 calls plugins\n * synchronously and doesn't await async return values, so routes registered\n * inside an async plugin may not be ready when the first request arrives.\n *\n * Call this from the TOP of any async plugin so that the readiness gate\n * (installed by getH3App) can hold /_agent-native requests until the plugin\n * finishes mounting its routes.\n */\nexport function trackPluginInit(\n  nitroApp: any,\n  promise: Promise<void>,\n  options: { paths?: string[] } = {},\n): void {\n  if (!nitroApp) return;\n  // Ensure the readiness gate exists even when the tracked plugin is the first\n  // framework code to run in a serverless isolate. Otherwise an immediate\n  // first request can fall through before the plugin registers its routes.\n  getH3App(nitroApp);\n  // Attach a no-op catch so the promise doesn't surface as an unhandled\n  // rejection when Nitro v3 drops the async return value. The actual error\n  // is still observable when awaitPluginsReady() re-awaits the promise.\n  const safe = promise.catch((err) => {\n    console.error(\n      \"[agent-native] Plugin init failed:\",\n      (err as Error).message || err,\n    );\n    // Record the failure so the readiness gate can return a retryable 503 for\n    // this plugin's routes instead of letting them fall through to a bare\n    // \"Cannot find any route matching\" 404. That bare 404 is what kept biting\n    // external MCP clients (pi/codex/claude) and the connect flow on cold /\n    // propagating instances whose async init rejected (e.g. DB not yet\n    // reachable): the route never registered, so the placeholder released into\n    // a 404 the client couldn't recover from. A 503 is at least retryable.\n    const failures = (nitroApp[PLUGIN_FAILED_KEY] ??= new Map<\n      string,\n      string\n    >());\n    const msg = (err as Error)?.message || String(err);\n    for (const p of options.paths?.filter(Boolean) ?? []) failures.set(p, msg);\n  });\n  const entry: PluginReadyEntry = {\n    promise: safe,\n    paths: options.paths?.filter(Boolean),\n  };\n  const existing = nitroApp[PLUGIN_READY_KEY] as PluginReadyEntry[] | undefined;\n  if (existing) {\n    existing.push(entry);\n  } else {\n    nitroApp[PLUGIN_READY_KEY] = [entry];\n  }\n  installPluginReadyPlaceholders(nitroApp, entry.paths);\n}\n\nfunction installPluginReadyPlaceholders(\n  nitroApp: any,\n  paths: string[] | undefined,\n): void {\n  if (!paths?.length) return;\n  const existing = nitroApp[PLUGIN_READY_PLACEHOLDERS_KEY] as\n    | Set<string>\n    | undefined;\n  const installed = existing ?? new Set<string>();\n  nitroApp[PLUGIN_READY_PLACEHOLDERS_KEY] = installed;\n\n  for (const path of paths) {\n    if (!path || installed.has(path)) continue;\n    installed.add(path);\n    registerMiddleware(\n      nitroApp,\n      path,\n      (async (event: H3Event) => {\n        const eventAny = event as any;\n        const reqPath =\n          eventAny.context?._mountedPathname ?? event.url?.pathname ?? path;\n        await awaitFrameworkRoutesReadyForRequest(nitroApp, reqPath);\n        // If this plugin's async init failed, its real route was never\n        // registered. Return a retryable 503 instead of releasing into a bare\n        // 404 (external MCP clients can't recover from a 404; a 503 is at least\n        // a \"try again\" the client / next instance can act on).\n        const failures = nitroApp[PLUGIN_FAILED_KEY] as\n          | Map<string, string>\n          | undefined;\n        if (failures?.size) {\n          for (const [failedPath, msg] of failures) {\n            if (resolveMountMatch(reqPath, failedPath)) {\n              setResponseStatus(event, 503);\n              setResponseHeader(event, \"retry-after\", \"5\");\n              return {\n                error: `agent-native route is initializing or unavailable: ${msg}`,\n              };\n            }\n          }\n        }\n        return undefined;\n      }) as EventHandler,\n      {\n        prepend: true,\n      },\n    );\n  }\n}\n\nfunction logFrameworkRouteError(args: {\n  method: string | undefined;\n  route: string;\n  status: number;\n  error: unknown;\n}): void {\n  const error = args.error as any;\n  const message = error?.message || String(args.error);\n  const prefix = `[agent-native] ${args.method ?? \"\"} ${args.route} failed (${args.status})`;\n  if (process.env.NODE_ENV === \"production\") {\n    console.error(`${prefix}: ${message}`);\n    return;\n  }\n  console.error(`${prefix}: ${message}`, error?.stack || args.error);\n}\n\nfunction isClientAbortError(error: unknown, event: H3Event): boolean {\n  const err = error as any;\n  const message = typeof err?.message === \"string\" ? err.message : \"\";\n  const code = typeof err?.code === \"string\" ? err.code : \"\";\n  const node = (event as any).node;\n  return (\n    message === \"aborted\" ||\n    code === \"ECONNRESET\" ||\n    node?.req?.destroyed === true ||\n    node?.res?.destroyed === true\n  );\n}\n\nfunction debugClientAbort(args: {\n  method: string | undefined;\n  route: string;\n  error: unknown;\n}): void {\n  if (process.env.NODE_ENV === \"production\") return;\n  const err = args.error as any;\n  const message = err?.message || String(args.error);\n  console.debug?.(\n    `[agent-native] ${args.method ?? \"\"} ${args.route} aborted by client: ${message}`,\n  );\n}\n\n/**\n * Await all tracked plugin initializations. Called by the readiness gate\n * middleware before dispatching framework routes.\n */\nexport async function awaitPluginsReady(\n  nitroApp: any,\n  reqPath?: string,\n): Promise<void> {\n  const entries = nitroApp[PLUGIN_READY_KEY] as PluginReadyEntry[] | undefined;\n  if (!entries?.length) return;\n\n  const relevant = reqPath\n    ? entries.filter((entry) =>\n        entry.paths?.length\n          ? entry.paths.some((path) => resolveMountMatch(reqPath, path))\n          : true,\n      )\n    : entries;\n\n  if (relevant.length) {\n    await Promise.all(relevant.map((entry) => entry.promise));\n    const completed = new Set(relevant);\n    const latest =\n      (nitroApp[PLUGIN_READY_KEY] as PluginReadyEntry[] | undefined) ?? [];\n    nitroApp[PLUGIN_READY_KEY] = latest.filter(\n      (entry) => !completed.has(entry),\n    );\n  }\n}\n\n/**\n * Register a path-prefix middleware on Nitro's h3 instance.\n *\n * The middleware:\n *   - Returns `next()` (continues) if the request path doesn't match.\n *   - Otherwise dispatches to the handler. If the handler returns a value,\n *     it short-circuits the request. If it returns undefined, next() runs.\n *\n * Path matching emulates h3 v1's `app.use(path, ...)` behavior:\n *   - Exact-match prefix: `/foo` matches `/foo`, `/foo/bar`, but not `/foobar`\n *   - Empty path: middleware runs on every request\n */\nfunction registerMiddleware(\n  nitroApp: any,\n  path: string,\n  handler: EventHandler,\n  options: { prepend?: boolean } = {},\n) {\n  const h3 = nitroApp.h3;\n  if (!h3 || !Array.isArray(h3[\"~middleware\"])) {\n    throw new Error(\n      \"[agent-native] Cannot register route: nitroApp.h3 is not available. \" +\n        \"Make sure you're calling getH3App() from inside a Nitro plugin.\",\n    );\n  }\n\n  const middleware = async (event: H3Event, next: () => any) => {\n    let originalPathname: string | undefined;\n    let originalEventPath: string | undefined;\n    let hadEventPath = false;\n    // Only true once this specific middleware invocation has actually\n    // stripped a mount prefix (i.e. `path` was non-empty and matched).\n    // Global (`path === \"\"`) middleware never mutates event.path/pathname,\n    // so `restoreOriginalPath` must be a no-op for it — otherwise it would\n    // unconditionally `delete event.path` on every pass-through (hadEventPath\n    // defaults to false), corrupting the event for any middleware that runs\n    // later in the chain (a real bug: two or more global middlewares in\n    // sequence, e.g. security-headers + CORS + CSRF, would wipe event.path\n    // for everything downstream, including the final route handler).\n    let didStripPath = false;\n    const restoreOriginalPath = () => {\n      if (!didStripPath) return;\n      if (originalPathname !== undefined) {\n        try {\n          event.url.pathname = originalPathname;\n        } catch {\n          // ignore\n        }\n        originalPathname = undefined;\n      }\n      if (hadEventPath) {\n        try {\n          (event as any).path = originalEventPath;\n        } catch {\n          // ignore\n        }\n      } else {\n        try {\n          delete (event as any).path;\n        } catch {\n          // ignore\n        }\n      }\n    };\n    if (path) {\n      const reqPath = event.url?.pathname ?? \"\";\n      const match = resolveMountMatch(reqPath, path);\n      if (!match) {\n        return next();\n      }\n      // Strip the mount prefix from event.url.pathname so handlers that\n      // dispatch sub-routes can read `event.path` (or `event.url.pathname`)\n      // and see the path RELATIVE to their mount point — matching h3 v1's\n      // `app.use(path, handler)` semantics.\n      const eventAny = event as any;\n      hadEventPath = \"path\" in eventAny;\n      originalEventPath = eventAny.path;\n      didStripPath = true;\n      try {\n        originalPathname = event.url.pathname;\n        // Save the full path in context so handlers that need the original URL\n        // (e.g. Better Auth, which extracts its own basePath prefix) can\n        // reconstruct a Request with the un-stripped URL.\n        eventAny.context = eventAny.context ?? {};\n        eventAny.context._mountedPathname = originalPathname;\n        eventAny.context._mountPrefix = match.mountPath;\n        event.url.pathname = match.strippedPath;\n        eventAny.path = `${match.strippedPath}${event.url.search || \"\"}`;\n      } catch {\n        // event.url is read-only on some runtimes — fall through. Handlers\n        // that don't depend on prefix stripping (most of them) still work.\n      }\n    }\n    try {\n      const result = await handler(event);\n      if (result === undefined) {\n        // Restore the original pathname BEFORE calling next() so downstream\n        // middleware sees the full URL — not the stripped mount-relative path.\n        // Matches h3 v2's own sub-app middleware pattern where the restore\n        // happens inside the next() callback, not after it returns.\n        restoreOriginalPath();\n        return next();\n      }\n      return result;\n    } catch (err) {\n      // Log 500s to the server console so they're debuggable, and respond\n      // with JSON instead of the default HTML error page so clients can\n      // surface error messages. This only applies to routes mounted under\n      // the framework prefix (or middleware mounted at `/`, for which we\n      // still want visibility).\n      const reqPath = originalPathname ?? event.url?.pathname ?? \"\";\n      const e = err as any;\n      const status =\n        typeof e?.statusCode === \"number\"\n          ? e.statusCode\n          : typeof e?.status === \"number\"\n            ? e.status\n            : 500;\n      if (isClientAbortError(err, event)) {\n        debugClientAbort({ method: event.method, route: reqPath, error: err });\n        return undefined;\n      }\n      logFrameworkRouteError({\n        method: event.method,\n        route: reqPath,\n        status,\n        error: err,\n      });\n      // Forward 5xx to server-side Sentry — Nitro's own `error` hook may not\n      // fire here because we convert the throw into a normal JSON response,\n      // and a console.error alone is invisible in deployed environments.\n      // 4xx are user-input errors (validation, auth) and aren't worth\n      // alerting on. Lazy-loaded so the framework-request-handler module\n      // doesn't pull @sentry/node into bundles that don't need it.\n      if (status >= 500) {\n        // Static `import` would create a cycle (sentry.ts imports auth.ts\n        // which imports… eventually, framework-request-handler.ts).\n        import(\"./sentry.js\")\n          .then(({ captureRouteError, isServerSentryEnabled }) => {\n            if (!isServerSentryEnabled()) return;\n            captureRouteError(err, {\n              route: reqPath,\n              method: event.method,\n              userAgent: (() => {\n                try {\n                  return event.headers?.get(\"user-agent\") ?? undefined;\n                } catch {\n                  return undefined;\n                }\n              })(),\n            });\n          })\n          .catch(() => {\n            // Sentry is observability — never let it break a response path.\n          });\n      }\n      try {\n        setResponseStatus(event, status);\n        setResponseHeader(event, \"content-type\", \"application/json\");\n      } catch {\n        // Response already sent — best effort.\n      }\n      return {\n        error: e?.message || \"Internal server error\",\n        // Only surface the stack to clients when explicitly enabled.\n        // `NODE_ENV !== \"production\"` was unsafe — preview deploys and\n        // any host that forgets to set NODE_ENV=production leaked stack\n        // traces (file paths, dependency versions, internal route\n        // topology) to anonymous callers. Operators who want stacks in\n        // dev set `AGENT_NATIVE_DEBUG_ERRORS=1` explicitly.\n        ...(status >= 500 &&\n        process.env.AGENT_NATIVE_DEBUG_ERRORS === \"1\" &&\n        e?.stack\n          ? { stack: e.stack }\n          : {}),\n      };\n    } finally {\n      // Restore the original pathname so downstream middleware sees the\n      // full URL.\n      restoreOriginalPath();\n    }\n  };\n\n  if (options.prepend) {\n    h3[\"~middleware\"].unshift(middleware);\n  } else {\n    h3[\"~middleware\"].push(middleware);\n  }\n}\n\n/**\n * Auto-mount any default framework plugins that the template doesn't provide.\n *\n * Runs once per nitroApp on the first `getH3App()` call. Uses route-discovery\n * to find which default plugin stems are missing from `server/plugins/`, then\n * dynamically imports and mounts them. If a workspace core is present in the\n * ancestor chain, plugin slots the workspace core exports are mounted from\n * there instead of from @agent-native/core — this is the middle layer of the\n * three-layer inheritance model (app local > workspace core > framework).\n */\nasync function bootstrapDefaultPlugins(nitroApp: any): Promise<void> {\n  IN_BOOTSTRAP.add(nitroApp);\n  try {\n    const cwd = process.cwd();\n    const discoveredMissing = await getMissingDefaultPlugins(cwd);\n    const provided = nitroApp[PROVIDED_PLUGIN_STEMS_KEY] as\n      | Set<string>\n      | undefined;\n    const missing = provided\n      ? discoveredMissing.filter((stem) => !provided.has(stem))\n      : discoveredMissing;\n    if (missing.length === 0) return;\n\n    // Lazy import to avoid circular dependency at module load time\n    const serverModule = await import(\"./index.js\");\n    const terminalModule = await import(\"../terminal/terminal-plugin.js\");\n    const integrationsModule = await import(\"../integrations/plugin.js\");\n    const contextXrayModule = await import(\"../agent/context-xray/plugin.js\");\n    const observationalMemoryModule =\n      await import(\"../agent/observational-memory/plugin.js\");\n    const orgModule = await import(\"../org/plugin.js\");\n    const onboardingModule = await import(\"../onboarding/plugin.js\");\n\n    const frameworkImpls: Record<\n      string,\n      ((nitroApp: any) => void | Promise<void>) | undefined\n    > = {\n      \"agent-chat\": (serverModule as any).defaultAgentChatPlugin,\n      auth: (serverModule as any).defaultAuthPlugin,\n      \"context-xray\": (contextXrayModule as any).defaultContextXrayPlugin,\n      \"core-routes\": (serverModule as any).defaultCoreRoutesPlugin,\n      integrations: (integrationsModule as any).defaultIntegrationsPlugin,\n      \"observational-memory\": (observationalMemoryModule as any)\n        .defaultObservationalMemoryPlugin,\n      onboarding: (onboardingModule as any).defaultOnboardingPlugin,\n      org: (orgModule as any).defaultOrgPlugin,\n      resources: (serverModule as any).defaultResourcesPlugin,\n      sentry: (serverModule as any).defaultSentryPlugin,\n      terminal: (terminalModule as any).defaultTerminalPlugin,\n    };\n\n    // Workspace core layer: if the app is inside an enterprise monorepo with\n    // `agent-native.workspaceCore` configured, pull in any plugin slots the\n    // workspace core exports from its server entry. We dynamically import the\n    // workspace core package at runtime.\n    let workspaceImpls: Record<\n      string,\n      ((nitroApp: any) => void | Promise<void>) | undefined\n    > = {};\n    try {\n      const { getWorkspaceCoreExports } =\n        await import(\"../deploy/workspace-core.js\");\n      const ws = await getWorkspaceCoreExports(cwd);\n      if (ws && Object.keys(ws.plugins).length > 0) {\n        try {\n          const wsServerModule = await loadWorkspaceCoreServer(\n            ws.packageName,\n            ws.packageDir,\n          );\n          for (const [slot, exportName] of Object.entries(ws.plugins)) {\n            if (!exportName) continue;\n            const impl = (wsServerModule as any)[exportName];\n            if (typeof impl === \"function\") {\n              workspaceImpls[slot] = impl;\n            }\n          }\n          if (process.env.DEBUG) {\n            console.log(\n              `[agent-native] Workspace core ${ws.packageName} provides plugin slots: ${Object.keys(workspaceImpls).join(\", \")}`,\n            );\n          }\n        } catch (e) {\n          const msg = (e as Error).message ?? \"\";\n          // Common cause: workspace-core's package.json points \"./server\"\n          // at a TS source file (the scaffold default), but Node can't\n          // resolve relative `.js` imports inside it without a TS loader.\n          // Tell the user to compile to dist/ rather than just dumping the\n          // raw resolution error.\n          const tsLoadHint = /\\.js' imported from .*\\.ts/.test(msg)\n            ? \" — workspace-core src is TypeScript but isn't being compiled. \" +\n              \"Run `pnpm --filter \" +\n              ws.packageName +\n              \" build` and point its `./server` export at dist/server/index.js.\"\n            : \"\";\n          console.warn(\n            `[agent-native] Failed to load workspace core ${ws.packageName}/server: ${msg}${tsLoadHint}`,\n          );\n        }\n      }\n    } catch {\n      // Workspace shared package isn't available (e.g. running on an edge\n      // runtime without fs). Silently fall through to framework defaults.\n    }\n\n    if (process.env.DEBUG)\n      console.log(\n        `[agent-native] Auto-mounting ${missing.length} default plugin(s): ${missing.join(\", \")}`,\n      );\n\n    for (const stem of missing) {\n      // Prefer workspace-core impl over framework default when both exist.\n      const impl = workspaceImpls[stem] ?? frameworkImpls[stem];\n      if (typeof impl === \"function\") {\n        try {\n          await impl(nitroApp);\n        } catch (e) {\n          console.warn(\n            `[agent-native] Failed to auto-mount default plugin ${stem}:`,\n            (e as Error).message,\n          );\n          captureError(e, {\n            route: \"default-plugin-bootstrap\",\n            tags: { phase: \"default-plugin-bootstrap\", plugin: stem },\n          });\n        }\n      }\n    }\n  } finally {\n    IN_BOOTSTRAP.delete(nitroApp);\n  }\n}\n\n/**\n * Load a workspace-core's `/server` entry, transparently handling TS source.\n *\n * The scaffolded workspace-core template ships TS sources without a build\n * step (exports point at `./src/server/index.ts`), so plain `await import()`\n * blows up the moment Node hits a relative `.js` import inside (the standard\n * TS ESM convention) — and even before that, Node may resolve the package\n * relative to the framework's own location rather than the user's monorepo.\n *\n * We try Node's plain `import()` first (fastest path when the user has\n * compiled to dist/) and fall through to jiti on any error. jiti is anchored\n * to a real file inside the workspace-core's directory, so its module\n * resolution starts in the right node_modules tree (handles pnpm hoisting\n * and linked workspaces) AND handles TS source files + `.js` → `.ts` ESM\n * extension remapping.\n *\n * Edge runtimes without `fs` won't be able to load jiti at all; the outer\n * try/catch silently falls through to framework defaults in that case.\n */\nexport async function loadWorkspaceCoreServer(\n  packageName: string,\n  packageDir: string,\n): Promise<any> {\n  let firstErr: unknown;\n  try {\n    return await import(/* @vite-ignore */ `${packageName}/server`);\n  } catch (e) {\n    firstErr = e;\n  }\n\n  try {\n    const { createJiti } = await import(\"jiti\");\n    const { pathToFileURL } = await import(\"node:url\");\n    const path = await import(\"node:path\");\n    // Anchor jiti to a real file inside the workspace-core package so its\n    // module resolution starts in the right node_modules tree (handles pnpm\n    // hoisting and linked workspaces).\n    const anchor = pathToFileURL(\n      path.join(packageDir, \"package.json\"),\n    ).toString();\n    const jiti = createJiti(anchor, { interopDefault: true });\n    return await jiti.import(`${packageName}/server`);\n  } catch (jitiErr) {\n    // jiti also failed — rethrow the original Node error since it's usually\n    // more informative about *why* the package wasn't resolvable.\n    throw firstErr ?? jitiErr;\n  }\n}\n\nexport { FRAMEWORK_PREFIX };\n"]}

package/dist/server/google-oauth.d.ts

@@ -24,6 +24,8 @@ import { type H3Event } from "h3";
 export declare function isElectron(event: H3Event): boolean;
 /** Detect requests from a mobile browser (iOS/Android). */
 export declare function isMobile(event: H3Event): boolean;
+/** Return whether a candidate is one of this deployment's configured origins. */
+export declare function isConfiguredAppOrigin(value: string | undefined): boolean;
 /**
  * Get the origin from forwarded headers or Host.
  *

package/dist/server/google-oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"google-oauth.d.ts","sourceRoot":"","sources":["../../src/server/google-oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAKL,KAAK,OAAO,EACb,MAAM,IAAI,CAAC;AAiEZ;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAElD;AAED,2DAA2D;AAC3D,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEhD;AA8HD;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAgChD;AAED,uEAAuE;AACvE,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,sEAAsE;AACtE,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,SAAM,GAAG,MAAM,CAG5D;AAgED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,OAAO,GACb,OAAO,CAqCT;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,WAAW,SAAmC,GAC7C,MAAM,GAAG,IAAI,CAMf;AAID,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACxD;AAgDD;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACxD;AAeD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,uBAAuB,GAAG,MAAM,CAAC;AACxE,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,OAAO,EACjB,UAAU,CAAC,EAAE,OAAO,EACpB,GAAG,CAAC,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,MAAM,GACd,MAAM,CAAC;AA4CV;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,WAAW,EAAE,MAAM,GAClB,iBAAiB,CAuCnB;AAID,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,OAAO,EACd,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,CAAC,CAQ3B;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IACJ,oBAAoB,EAAE,OAAO,CAAC;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE;QACZ,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;KAClD,CAAC;CACH,GACA,OAAO,CAAC,kBAAkB,CAAC,CAgD7B;AAID;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IACJ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACA,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC,CAoHpE;AAED;;;kEAGkE;AAClE,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAMxD;AAED,wBAAgB,wBAAwB,CACtC,OAAO,SAA4B,GAClC,QAAQ,CAKV"}
+{"version":3,"file":"google-oauth.d.ts","sourceRoot":"","sources":["../../src/server/google-oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAKL,KAAK,OAAO,EACb,MAAM,IAAI,CAAC;AAiEZ;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAElD;AAED,2DAA2D;AAC3D,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEhD;AAqED,iFAAiF;AACjF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAGxE;AA2DD;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAgChD;AAED,uEAAuE;AACvE,wBAAgB,cAAc,IAAI,MAAM,CAMvC;AAED,sEAAsE;AACtE,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,SAAM,GAAG,MAAM,CAG5D;AAgED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,OAAO,GACb,OAAO,CAqCT;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,WAAW,SAAmC,GAC7C,MAAM,GAAG,IAAI,CAMf;AAID,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACxD;AAgDD;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACxD;AAeD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,uBAAuB,GAAG,MAAM,CAAC;AACxE,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,OAAO,EACjB,UAAU,CAAC,EAAE,OAAO,EACpB,GAAG,CAAC,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,MAAM,GACd,MAAM,CAAC;AA4CV;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,WAAW,EAAE,MAAM,GAClB,iBAAiB,CAuCnB;AAID,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,OAAO,EACd,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,CAAC,CAQ3B;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IACJ,oBAAoB,EAAE,OAAO,CAAC;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE;QACZ,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;KAClD,CAAC;CACH,GACA,OAAO,CAAC,kBAAkB,CAAC,CAgD7B;AAID;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IACJ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACA,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC,CAoHpE;AAED;;;kEAGkE;AAClE,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAMxD;AAED,wBAAgB,wBAAwB,CACtC,OAAO,SAA4B,GAClC,QAAQ,CAKV"}

package/dist/server/google-oauth.js

@@ -8,7 +8,7 @@
  */
 import crypto from "node:crypto";
 import { getHeader, getQuery, setResponseStatus, setResponseHeader, } from "h3";
-import { getConfiguredAppBasePath } from "./app-base-path.js";
+import { getAppBasePathFromViteEnv } from "./app-base-path.js";
 import { getAppName } from "./app-name.js";
 import { signupAttributionFromCookieHeader } from "./attribution.js";
 import { addSession, getSession, getSessionMaxAge, hasLegacySessionForEmail, setFrameworkSessionCookie, } from "./auth.js";
@@ -133,6 +133,11 @@ function getConfiguredOriginAllowlist() {
     }
     return out;
 }
+/** Return whether a candidate is one of this deployment's configured origins. */
+export function isConfiguredAppOrigin(value) {
+    const origin = normalizeOrigin(value);
+    return !!origin && getConfiguredOriginAllowlist().has(origin);
+}
 function getWorkspaceCallbackOrigin() {
     const publicAuthOrigin = firstOriginFromEnv(EXPLICIT_PUBLIC_ORIGIN_ENV_KEYS, {
         allowLoopback: true,
@@ -229,7 +234,11 @@ export function getOrigin(event) {
 }
 /** App mount prefix, if the template is served under APP_BASE_PATH. */
 export function getAppBasePath() {
-    return getConfiguredAppBasePath();
+    // Vite statically replaces VITE_* values in the server bundle during the
+    // build, but Netlify/Nitro does not necessarily expose those build vars at
+    // runtime. Keep auth and OAuth path matching aligned with the SSR handler by
+    // falling back to import.meta.env (including BASE_URL).
+    return getAppBasePathFromViteEnv();
 }
 /** Build an absolute same-origin URL that preserves APP_BASE_PATH. */
 export function getAppUrl(event, path = "/") {