agentfax 0.0.1 → 0.1.0

package/dist/client.js

@@ -0,0 +1,109 @@
+// Served at /assets/fax.js. The page's CSP allows only same-origin scripts, so this can't be inline.
+// It reads a reply link's fragment, fills in the form and removes the fragment. It never sends anything:
+// the reply goes out only when the person clicks Send.
+export const CLIENT_JS = `(function () {
+  var form = document.getElementById('reply-form');
+  // Runs on load, and again when a reply link is opened on a page that's already open:
+  // browsers then only change the fragment and don't reload.
+  function prefill() {
+    if (apply(location.hash.slice(1))) history.replaceState(null, '', location.pathname + location.search);
+  }
+  // Fills the form from a reply fragment. Returns true if anything was filled.
+  function apply(raw) {
+  if (form && raw) {
+    var filled = 0;
+    raw.split('&').forEach(function (pair) {
+      var i = pair.indexOf('=');
+      if (i < 1) return;
+      var id = pair.slice(0, i), value;
+      try { value = decodeURIComponent(pair.slice(i + 1)); } catch (e) { return; }
+      var fields = form.querySelectorAll('[name="' + CSS.escape(id) + '"]');
+      var ok = false;
+      fields.forEach(function (el) {
+        if (el.type === 'radio') { if (el.value === value) { el.checked = true; ok = true; } }
+        else { el.value = value; ok = true; }
+      });
+      if (ok) {
+        filled++;
+        var tag = form.querySelector('[data-filled-for="' + CSS.escape(id) + '"]');
+        if (tag) tag.hidden = false;
+      }
+    });
+    if (filled) {
+      document.getElementById('prefill-banner').hidden = false;
+      var ask = document.getElementById('ask-row');
+      if (ask) ask.hidden = true;
+    }
+    if (filled) form.scrollIntoView({ block: 'start' });
+    return filled > 0;
+  }
+  return false;
+  }
+  prefill();
+  addEventListener('hashchange', prefill);
+
+  // When a pasted reply names exactly one option of an unanswered choice, pick it and say so.
+  // Never overrides a choice the person made.
+  var box = form && form.querySelector('textarea[name="message"]');
+  if (box) {
+    box.addEventListener('input', function () {
+      var text = box.value.toLowerCase();
+      var groups = {};
+      form.querySelectorAll('input[type="radio"]').forEach(function (r) { (groups[r.name] = groups[r.name] || []).push(r); });
+      Object.keys(groups).forEach(function (name) {
+        var radios = groups[name];
+        if (radios.some(function (r) { return r.checked; })) return;
+        var hits = radios.filter(function (r) {
+          var word = r.value.toLowerCase().replace(/[.*+?^\${}()|[\\]\\\\]/g, '\\\\$&');
+          return new RegExp('(^|[^\\\\p{L}\\\\p{N}])' + word + '($|[^\\\\p{L}\\\\p{N}])', 'u').test(text);
+        });
+        if (hits.length !== 1) return;
+        hits[0].checked = true;
+        var tag = form.querySelector('[data-picked-for="' + CSS.escape(name) + '"]');
+        if (tag) tag.hidden = false;
+      });
+    });
+  }
+
+  // A reply needs the required answers or a message in the box. Got it is always fine.
+  // The server checks the same thing; this just says it without a round trip.
+  if (form) {
+    var required = [];
+    try { required = JSON.parse(form.getAttribute('data-required') || '[]'); } catch (e) {}
+    form.addEventListener('submit', function (e) {
+      if (e.submitter && e.submitter.name === 'ack') return;
+      var note = document.getElementById('form-note');
+      var message = form.querySelector('[name="message"]');
+      if (message && message.value.trim()) return;
+      var data = new FormData(form);
+      var missing = required.filter(function (q) { return !String(data.get(q.id) || '').trim(); })[0];
+      var answered = Array.from(data.entries()).some(function (p) { return p[0] !== 'message' && String(p[1]).trim(); });
+      if (missing) { e.preventDefault(); note.textContent = 'Answer \\u201c' + missing.label + '\\u201d, or type a reply in the box.'; }
+      else if (!answered) { e.preventDefault(); note.textContent = 'Type a reply in the box first.'; }
+    });
+  }
+
+  // Size the sender frame to its content. Only a height number is accepted, and only from that frame.
+  var frame = document.querySelector('.frame iframe');
+  if (frame) {
+    addEventListener('message', function (e) {
+      var d = e.data;
+      if (e.source !== frame.contentWindow || !d || d.type !== 'agentfax:height' || typeof d.height !== 'number' || !isFinite(d.height)) return;
+      frame.style.minHeight = '0';
+      frame.style.height = Math.max(60, Math.min(8000, Math.round(d.height))) + 'px';
+    });
+  }
+  var button = document.getElementById('ask-ai');
+  if (button) {
+    button.hidden = false;
+    button.addEventListener('click', function () {
+      var prompt = button.getAttribute('data-prompt');
+      var note = document.getElementById('ask-note');
+      navigator.clipboard.writeText(prompt).then(
+        function () { note.textContent = 'Copied. Paste it into your AI.'; },
+        function () { note.textContent = prompt; }
+      );
+    });
+  }
+})();
+`;

package/dist/fax.d.ts

@@ -0,0 +1,168 @@
+import { z } from 'zod';
+export declare const QuestionSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    id: z.ZodString;
+    label: z.ZodString;
+    required: z.ZodOptional<z.ZodBoolean>;
+    hint: z.ZodOptional<z.ZodString>;
+    probes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    type: z.ZodEnum<{
+        longtext: "longtext";
+        number: "number";
+        text: "text";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    id: z.ZodString;
+    label: z.ZodString;
+    required: z.ZodOptional<z.ZodBoolean>;
+    hint: z.ZodOptional<z.ZodString>;
+    probes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    type: z.ZodLiteral<"choice">;
+    options: z.ZodArray<z.ZodString>;
+}, z.core.$strict>], "type">;
+export declare const FaxSchema: z.ZodObject<{
+    agentfax: z.ZodLiteral<"0.1">;
+    title: z.ZodString;
+    from: z.ZodObject<{
+        name: z.ZodString;
+        origin: z.ZodURL;
+    }, z.core.$strip>;
+    to: z.ZodOptional<z.ZodString>;
+    note: z.ZodOptional<z.ZodString>;
+    content: z.ZodObject<{
+        text: z.ZodString;
+        view: z.ZodOptional<z.ZodURL>;
+    }, z.core.$strip>;
+    questions: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        required: z.ZodOptional<z.ZodBoolean>;
+        hint: z.ZodOptional<z.ZodString>;
+        probes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        type: z.ZodEnum<{
+            longtext: "longtext";
+            number: "number";
+            text: "text";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        required: z.ZodOptional<z.ZodBoolean>;
+        hint: z.ZodOptional<z.ZodString>;
+        probes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        type: z.ZodLiteral<"choice">;
+        options: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>], "type">>;
+    ack: z.ZodOptional<z.ZodBoolean>;
+    reply: z.ZodOptional<z.ZodObject<{
+        link: z.ZodURL;
+        format: z.ZodString;
+    }, z.core.$strip>>;
+    expires: z.ZodOptional<z.ZodISODateTime>;
+    about: z.ZodURL;
+}, z.core.$strip>;
+export type Question = z.infer<typeof QuestionSchema>;
+export type Fax = z.infer<typeof FaxSchema>;
+export declare const faxJsonSchema: () => {
+    $schema?: "https://json-schema.org/draft/2020-12/schema" | "http://json-schema.org/draft-07/schema#" | "http://json-schema.org/draft-04/schema#";
+    $anchor?: string;
+    $ref?: string;
+    $dynamicRef?: string;
+    $dynamicAnchor?: string;
+    $vocabulary?: Record<string, boolean>;
+    $comment?: string;
+    $defs?: Record<string, z.core.JSONSchema.JSONSchema>;
+    type?: z.core.JSONSchema.SchemaType | z.core.JSONSchema.SchemaType[];
+    additionalItems?: z.core.JSONSchema._JSONSchema;
+    unevaluatedItems?: z.core.JSONSchema._JSONSchema;
+    prefixItems?: z.core.JSONSchema._JSONSchema[];
+    items?: z.core.JSONSchema._JSONSchema | z.core.JSONSchema._JSONSchema[];
+    contains?: z.core.JSONSchema._JSONSchema;
+    additionalProperties?: z.core.JSONSchema._JSONSchema;
+    unevaluatedProperties?: z.core.JSONSchema._JSONSchema;
+    properties?: Record<string, z.core.JSONSchema._JSONSchema>;
+    patternProperties?: Record<string, z.core.JSONSchema._JSONSchema>;
+    dependentSchemas?: Record<string, z.core.JSONSchema._JSONSchema>;
+    propertyNames?: z.core.JSONSchema._JSONSchema;
+    if?: z.core.JSONSchema._JSONSchema;
+    then?: z.core.JSONSchema._JSONSchema;
+    else?: z.core.JSONSchema._JSONSchema;
+    allOf?: z.core.JSONSchema.JSONSchema[];
+    anyOf?: z.core.JSONSchema.JSONSchema[];
+    oneOf?: z.core.JSONSchema.JSONSchema[];
+    not?: z.core.JSONSchema._JSONSchema;
+    multipleOf?: number;
+    maximum?: number;
+    exclusiveMaximum?: number | boolean;
+    minimum?: number;
+    exclusiveMinimum?: number | boolean;
+    maxLength?: number;
+    minLength?: number;
+    pattern?: string;
+    maxItems?: number;
+    minItems?: number;
+    uniqueItems?: boolean;
+    maxContains?: number;
+    minContains?: number;
+    maxProperties?: number;
+    minProperties?: number;
+    required?: string[];
+    dependentRequired?: Record<string, string[]>;
+    enum?: Array<string | number | boolean | null>;
+    const?: string | number | boolean | null;
+    id?: string;
+    description?: string;
+    default?: unknown;
+    deprecated?: boolean;
+    readOnly?: boolean;
+    writeOnly?: boolean;
+    nullable?: boolean;
+    examples?: unknown[];
+    format?: string;
+    contentMediaType?: string;
+    contentEncoding?: string;
+    contentSchema?: z.core.JSONSchema.JSONSchema;
+    _prefault?: unknown;
+    "~standard": z.core.ZodStandardSchemaWithJSON<z.ZodObject<{
+        agentfax: z.ZodLiteral<"0.1">;
+        title: z.ZodString;
+        from: z.ZodObject<{
+            name: z.ZodString;
+            origin: z.ZodURL;
+        }, z.core.$strip>;
+        to: z.ZodOptional<z.ZodString>;
+        note: z.ZodOptional<z.ZodString>;
+        content: z.ZodObject<{
+            text: z.ZodString;
+            view: z.ZodOptional<z.ZodURL>;
+        }, z.core.$strip>;
+        questions: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            required: z.ZodOptional<z.ZodBoolean>;
+            hint: z.ZodOptional<z.ZodString>;
+            probes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            type: z.ZodEnum<{
+                longtext: "longtext";
+                number: "number";
+                text: "text";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            required: z.ZodOptional<z.ZodBoolean>;
+            hint: z.ZodOptional<z.ZodString>;
+            probes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            type: z.ZodLiteral<"choice">;
+            options: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>], "type">>;
+        ack: z.ZodOptional<z.ZodBoolean>;
+        reply: z.ZodOptional<z.ZodObject<{
+            link: z.ZodURL;
+            format: z.ZodString;
+        }, z.core.$strip>>;
+        expires: z.ZodOptional<z.ZodISODateTime>;
+        about: z.ZodURL;
+    }, z.core.$strip>>;
+    $id: string;
+    title: string;
+};

package/dist/fax.js

@@ -0,0 +1,50 @@
+import { z } from 'zod';
+// Question ids go straight into the reply fragment (#id=value), so they must never need encoding.
+// `message` and `ack` are reserved: every reply can carry a free-text message, and ack is the read confirmation.
+const QuestionId = z.string().regex(/^(?!(message|ack)$)[a-z][a-z0-9_]{0,39}$/, 'lowercase letters, digits and _, starting with a letter, max 40; not message or ack');
+const base = {
+    id: QuestionId,
+    label: z.string().min(1).max(200),
+    required: z.boolean().optional(),
+    // Shown to people under the question and to agents in the agent section.
+    hint: z.string().min(1).max(200).optional(),
+    // Follow-ups the sender wants the answer to cover.
+    probes: z.array(z.string().min(1).max(150)).min(1).max(3).optional(),
+};
+const FreeQuestion = z.strictObject({ ...base, type: z.enum(['text', 'longtext', 'number']) });
+const ChoiceQuestion = z.strictObject({
+    ...base,
+    type: z.literal('choice'),
+    options: z.array(z.string().min(1).max(100)).min(1).max(20),
+});
+export const QuestionSchema = z.discriminatedUnion('type', [FreeQuestion, ChoiceQuestion]);
+export const FaxSchema = z
+    .object({
+    agentfax: z.literal('0.1'),
+    title: z.string().min(1).max(200),
+    from: z.object({ name: z.string().min(1).max(100), origin: z.url() }),
+    to: z.string().max(100).optional(),
+    note: z.string().max(2000).optional(),
+    content: z.object({ text: z.string(), view: z.url().optional() }),
+    questions: z.array(QuestionSchema).max(20),
+    ack: z.boolean().optional(),
+    reply: z.object({ link: z.url().endsWith('#'), format: z.string() }).optional(),
+    expires: z.iso.datetime().optional(),
+    about: z.url(),
+})
+    // Cross-field rules. JSON Schema can't express these, so SPEC.md states them as rules.
+    .superRefine((fax, ctx) => {
+    const ids = fax.questions.map((q) => q.id);
+    if (new Set(ids).size !== ids.length)
+        ctx.addIssue({ code: 'custom', path: ['questions'], message: 'question ids must be unique' });
+    const expectsReply = fax.questions.length > 0 || fax.ack === true;
+    if (expectsReply && !fax.reply)
+        ctx.addIssue({ code: 'custom', path: ['reply'], message: 'reply is required when the fax has questions or ack' });
+    if (!expectsReply && fax.reply)
+        ctx.addIssue({ code: 'custom', path: ['reply'], message: 'reply is only allowed when the fax has questions or ack' });
+});
+export const faxJsonSchema = () => ({
+    $id: 'https://github.com/sptr11/agentfax/blob/main/spec/fax.schema.json',
+    title: 'AgentFax 0.1',
+    ...z.toJSONSchema(FaxSchema, { target: 'draft-2020-12', io: 'input' }),
+});

package/dist/html-to-text.d.ts

@@ -0,0 +1 @@
+export declare function htmlToText(html: string): string;

package/dist/html-to-text.js

@@ -0,0 +1,60 @@
+// Plain-text version of a sender's page, for the agent section.
+// Drops anything a person wouldn't see, so hidden text can't reach the agent.
+// Text hidden through CSS classes can't be detected here; neutralization still applies downstream.
+const DROP_ELEMENTS = /<(script|style|template|noscript|head|svg)\b[\s\S]*?<\/\1\s*>/gi;
+const HIDDEN_ATTR = /\s(hidden|aria-hidden\s*=\s*["']?true["']?|style\s*=\s*["'][^"']*(display\s*:\s*none|visibility\s*:\s*hidden)[^"']*["'])/i;
+const BLOCK = /^(p|div|section|article|header|footer|main|aside|nav|h[1-6]|li|ul|ol|tr|table|blockquote|pre|br|hr|dt|dd|figure|figcaption)$/i;
+const VOID = /^(br|hr|img|input|meta|link|area|base|col|embed|source|track|wbr)$/i;
+const ENTITIES = { amp: '&', lt: '<', gt: '>', quot: '"', apos: "'", nbsp: ' ', mdash: '—', ndash: '–', hellip: '…', rsquo: '’', lsquo: '‘', rdquo: '”', ldquo: '“' };
+function decode(s) {
+    return s.replace(/&(#x[0-9a-f]+|#\d+|[a-z]+);/gi, (m, e) => {
+        if (e[0] === '#') {
+            const code = e[1] === 'x' || e[1] === 'X' ? parseInt(e.slice(2), 16) : parseInt(e.slice(1), 10);
+            return Number.isFinite(code) && code <= 0x10ffff ? String.fromCodePoint(code) : m;
+        }
+        return ENTITIES[e.toLowerCase()] ?? m;
+    });
+}
+export function htmlToText(html) {
+    const src = html.replace(/<!--[\s\S]*?-->/g, '').replace(DROP_ELEMENTS, '');
+    let out = '';
+    let hiddenDepth = 0;
+    const hiddenStack = [];
+    for (const part of src.split(/(<[^>]+>)/)) {
+        if (!part.startsWith('<')) {
+            // Source newlines are just whitespace in HTML; only block elements break lines.
+            if (hiddenDepth === 0)
+                out += part.replace(/\s+/g, ' ');
+            continue;
+        }
+        const m = part.match(/^<\s*(\/)?\s*([a-z0-9]+)/i);
+        if (!m)
+            continue;
+        const [, closing, tag] = m;
+        if (closing) {
+            if (hiddenStack.length && hiddenStack[hiddenStack.length - 1] === tag.toLowerCase()) {
+                hiddenStack.pop();
+                hiddenDepth--;
+            }
+        }
+        else if (hiddenDepth > 0 && !VOID.test(tag) && !part.endsWith('/>')) {
+            if (hiddenStack.length && hiddenStack[hiddenStack.length - 1] === tag.toLowerCase()) {
+                hiddenStack.push(tag.toLowerCase());
+                hiddenDepth++;
+            }
+        }
+        else if (HIDDEN_ATTR.test(part) && !VOID.test(tag)) {
+            hiddenStack.push(tag.toLowerCase());
+            hiddenDepth++;
+        }
+        if (hiddenDepth === 0 && BLOCK.test(tag))
+            out += '\n';
+        else if (hiddenDepth === 0 && !closing && /^t[dh]$/i.test(tag))
+            out += ' | ';
+    }
+    return decode(out)
+        .split('\n')
+        .map((l) => l.replace(/[ \t\r\f\v ]+/g, ' ').trim().replace(/^\|\s*/, '').replace(/\s*\|$/, ''))
+        .filter(Boolean)
+        .join('\n');
+}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { FaxSchema, QuestionSchema, faxJsonSchema, type Fax, type Question } from './fax.js';
+export { renderAgentSection } from './agent-section.js';
+export { buildReplyLink, parseReplyFragment, type Answers } from './reply-link.js';
+export { htmlToText } from './html-to-text.js';
+export { memoryStore, type Store, type FaxRecord, type LinkRecord, type ReplyRecord, type StoredFax } from './store.js';

package/dist/index.js

@@ -0,0 +1,6 @@
+// The fax format and helpers. The server lives at 'agentfax/hono', the SQLite store at 'agentfax/sqlite'.
+export { FaxSchema, QuestionSchema, faxJsonSchema } from './fax.js';
+export { renderAgentSection } from './agent-section.js';
+export { buildReplyLink, parseReplyFragment } from './reply-link.js';
+export { htmlToText } from './html-to-text.js';
+export { memoryStore } from './store.js';

package/dist/page.d.ts

@@ -0,0 +1,11 @@
+import type { Fax } from './fax.js';
+import type { ReplyRecord } from './store.js';
+export declare const esc: (s: string) => string;
+export declare function stamp(iso: string): string;
+export declare function faxPage(fax: Fax, faxPath: string, faxUrl: string, agentSection: string, hasHtml: boolean, sentAt: string): string;
+export declare function receiptPage(fax: Fax, sentAt: string, answers: Record<string, string>, message: string, ack: boolean, repliedAt: string): string;
+export declare function problemPage(title: string, message: string, back?: {
+    href: string;
+    label: string;
+}, issues?: string[]): string;
+export declare function inboxPage(title: string, replies: ReplyRecord[]): string;

package/dist/page.js

@@ -0,0 +1,152 @@
+export const esc = (s) => s.replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[c]);
+// System fonts only: the page CSP blocks font CDNs. Themeable through the custom properties on :root.
+const STYLE = `
+:root{--desk:#e4e7e3;--paper:#fcfcfa;--ink:#1d2126;--muted:#5e666e;--rule:#d5d9d4;--accent:#27467a;--accent-ink:#fff;--accent-soft:#e6ecf5;--ok:#1f6b45;--ok-soft:#e3f1e8;--warn:#8a5300;--warn-soft:#fbf0dc;--frame:#fff;--shadow:0 1px 2px rgba(20,24,28,.06),0 8px 28px rgba(20,24,28,.08);--font-sans:-apple-system,BlinkMacSystemFont,"Segoe UI",system-ui,Roboto,"Helvetica Neue",Arial,sans-serif;--font-mono:ui-monospace,SFMono-Regular,"SF Mono",Menlo,Consolas,"Liberation Mono",monospace;color-scheme:light}
+@media (prefers-color-scheme:dark){:root{--desk:#101215;--paper:#1a1d21;--ink:#e5e8eb;--muted:#9aa3ab;--rule:#2c3137;--accent:#8fb0e6;--accent-ink:#0d1a2e;--accent-soft:#1d2a3d;--ok:#74cf9c;--ok-soft:#14291e;--warn:#e8b665;--warn-soft:#2e2412;--frame:#22262b;--shadow:0 1px 2px rgba(0,0,0,.4),0 8px 28px rgba(0,0,0,.35);color-scheme:dark}}
+*{box-sizing:border-box}
+body{margin:0;background:var(--desk);color:var(--ink);font:16px/1.55 var(--font-sans);padding:24px max(16px,env(safe-area-inset-right)) 64px max(16px,env(safe-area-inset-left))}
+[hidden]{display:none!important}
+.sheet{max-width:760px;margin:0 auto;background:var(--paper);box-shadow:var(--shadow);border-radius:3px;overflow:hidden}
+.tx{font:11.5px/1.4 var(--font-mono);letter-spacing:.04em;text-transform:uppercase;color:var(--muted);padding:10px 28px;border-bottom:1px dashed var(--rule);display:flex;flex-wrap:wrap;gap:4px 22px}
+.tx b{color:var(--ink);font-weight:600}
+.body{padding:28px 28px 8px;display:flex;flex-direction:column;gap:18px}
+h1{margin:0;font-size:clamp(26px,5vw,34px);line-height:1.12;letter-spacing:-.015em;text-wrap:balance;overflow-wrap:anywhere}
+.note{margin:0;font-size:17px;max-width:60ch;overflow-wrap:anywhere}
+.from{font-size:14px;color:var(--muted);display:flex;flex-wrap:wrap;gap:4px 10px;align-items:center}
+.from strong{color:var(--ink);font-weight:600}
+.origin{font-family:var(--font-mono);font-size:12.5px;padding:2px 7px;border-radius:4px;background:var(--accent-soft);color:var(--accent);overflow-wrap:anywhere}
+.frame{border:1px solid var(--rule);border-radius:6px;background:var(--frame);overflow:hidden}
+.frame-tag{font:10.5px var(--font-mono);letter-spacing:.06em;text-transform:uppercase;color:var(--muted);padding:6px 12px;border-bottom:1px solid var(--rule);display:flex;gap:8px}
+.frame-tag span:first-child{margin-right:auto}
+.frame iframe{display:block;width:100%;min-height:420px;border:0;background:#fff}
+.frame pre{margin:0;padding:16px 18px;font:15px/1.6 var(--font-sans);white-space:pre-wrap;overflow-wrap:anywhere}
+.cut{display:flex;align-items:center;gap:12px;font:11px var(--font-mono);letter-spacing:.12em;color:var(--muted);padding:6px 28px 0}
+.cut::before,.cut::after{content:"";flex:1;border-top:1px dashed var(--rule)}
+.reply{padding:18px 28px 28px;display:flex;flex-direction:column;gap:20px}
+.banner{background:var(--accent-soft);border-radius:8px;padding:12px 14px;font-size:14.5px}
+.banner b{color:var(--accent)}
+.q{display:flex;flex-direction:column;gap:8px;border:0;padding:0;margin:0;min-width:0}
+.q>.label,.q>legend{font-weight:600;font-size:15.5px;padding:0}
+.req,.filled{font:11px var(--font-mono);letter-spacing:.04em;text-transform:uppercase;font-weight:400;margin-left:6px;color:var(--muted)}
+.filled{color:var(--accent);font-weight:500}
+.chips{display:flex;flex-wrap:wrap;gap:8px}
+.chip{position:relative}
+.chip input{position:absolute;opacity:0;inset:0;margin:0;cursor:pointer}
+.chip span{display:inline-block;padding:8px 14px;border:1px solid var(--rule);border-radius:999px;font-size:15px;background:var(--paper)}
+.chip input:checked+span{border-color:var(--accent);background:var(--accent-soft);color:var(--accent);font-weight:600}
+.chip input:focus-visible+span,textarea:focus-visible,input:focus-visible,.btn:focus-visible{outline:2px solid var(--accent);outline-offset:2px}
+textarea,input[type=text],input[type=number]{font:15.5px/1.5 var(--font-sans);color:var(--ink);background:var(--paper);border:1px solid var(--rule);border-radius:8px;padding:10px 12px;width:100%}
+textarea{min-height:96px;resize:vertical}
+.hint{font-size:14px;color:var(--muted);margin:0}
+.cover{font-size:14px;color:var(--muted);margin:0;padding-left:18px}
+.actions{display:flex;flex-wrap:wrap;gap:10px 14px;align-items:center}
+.btn{font:600 15.5px var(--font-sans);padding:11px 22px;border-radius:8px;border:1px solid var(--accent);background:var(--accent);color:var(--accent-ink);cursor:pointer}
+.btn.ghost{background:transparent;color:var(--accent)}
+.small{font-size:13.5px;color:var(--muted);margin:0}
+.report{margin:0;font:12.5px/1.7 var(--font-mono);background:var(--ok-soft);color:var(--ok);border-radius:8px;padding:14px 16px}
+.answers{display:grid;grid-template-columns:max-content minmax(0,1fr);gap:6px 16px;font-size:15px;margin:0}
+.answers dt{color:var(--muted)}
+.answers dd{margin:0;overflow-wrap:anywhere;white-space:pre-wrap}
+.own{border-top:1px dashed var(--rule);padding-top:14px;font-size:14.5px;color:var(--muted);margin:0}
+.own a,.back{color:var(--accent);font-weight:600;text-decoration:none}
+.gone{background:var(--warn-soft);color:var(--warn);border-radius:8px;padding:14px 16px;font-size:15px;margin:0}
+.agent{max-width:760px;margin:28px auto 0;color:var(--muted)}
+.agent h2{font:600 11px var(--font-mono);letter-spacing:.1em;text-transform:uppercase;margin:0 0 8px}
+.agent pre{margin:0;font:12px/1.6 var(--font-mono);white-space:pre-wrap;overflow-wrap:anywhere;border-left:2px solid var(--rule);padding:4px 0 4px 14px}
+.foot{max-width:760px;margin:18px auto 0;font:11.5px var(--font-mono);color:var(--muted);text-align:center}
+.foot a{color:inherit}
+.replies{list-style:none;margin:0;padding:0;display:flex;flex-direction:column;gap:14px}
+.replies li{border-top:1px dashed var(--rule);padding-top:12px}
+.ai-help{display:flex;flex-wrap:wrap;gap:10px 14px;align-items:center}
+.pair{display:flex;gap:10px;flex-wrap:wrap}
+@media (max-width:560px){.actions>.btn[type=submit]{width:100%}.ai-help{width:100%}.pair{display:grid;grid-template-columns:1fr 1fr;width:100%}.pair .btn{padding-left:8px;padding-right:8px}.tx,.body,.reply,.cut{padding-left:18px;padding-right:18px}.answers{grid-template-columns:minmax(0,1fr);gap:2px}.answers dd{margin-bottom:10px}.frame-tag .long{display:none}}
+@media (min-width:561px){.frame-tag .long+span{display:none}}
+`;
+const FOOT = '<p class="foot">Sent with <a href="https://github.com/sptr11/agentfax">AgentFax</a>. Your AI can read this page too.</p>';
+const OWN = '<p class="own">Want your own AI to send pages like this? <a href="https://github.com/sptr11/agentfax">Set up AgentFax →</a></p>';
+function shell(title, body, script = false) {
+    return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,viewport-fit=cover"><title>${esc(title)}</title><style>${STYLE}</style>${script ? '<script src="/assets/fax.js" defer></script>' : ''}</head><body>${body}</body></html>`;
+}
+const MONTHS = ['JAN', 'FEB', 'MAR', 'APR', 'MAY', 'JUN', 'JUL', 'AUG', 'SEP', 'OCT', 'NOV', 'DEC'];
+export function stamp(iso) {
+    const d = new Date(iso);
+    const p = (n) => String(n).padStart(2, '0');
+    return `${d.getUTCDate()} ${MONTHS[d.getUTCMonth()]} ${d.getUTCFullYear()} ${p(d.getUTCHours())}:${p(d.getUTCMinutes())} UTC`;
+}
+const day = (iso) => stamp(iso).split(' ').slice(0, 3).join(' ');
+function header(fax, sentAt) {
+    return `<div class="tx"><span>From <b>${esc(fax.from.name)}</b></span>${fax.to ? `<span>To <b>${esc(fax.to)}</b></span>` : ''}<span>${stamp(sentAt)}</span><span>Page 1/1</span></div>`;
+}
+function intro(fax) {
+    const host = new URL(fax.from.origin).host;
+    return `<div class="from"><strong>${esc(fax.from.name)}</strong><span>sent from</span><span class="origin">${esc(host)}</span></div><h1>${esc(fax.title)}</h1>${fax.note ? `<p class="note">${esc(fax.note)}</p>` : ''}`;
+}
+function field(q) {
+    const id = `q-${q.id}`;
+    const tags = `${q.required ? '<span class="req">required</span>' : ''}<span class="filled" data-filled-for="${q.id}" hidden>from your AI</span>${q.type === 'choice' ? `<span class="filled" data-picked-for="${q.id}" hidden>picked from your reply</span>` : ''}`;
+    const help = `${q.hint ? `<p class="hint">${esc(q.hint)}</p>` : ''}${q.probes ? `<ul class="cover">${q.probes.map((p) => `<li>${esc(p)}</li>`).join('')}</ul>` : ''}`;
+    if (q.type === 'choice') {
+        const chips = q.options.map((o, i) => `<label class="chip"><input type="radio" name="${q.id}" id="${id}-${i}" value="${esc(o)}"><span>${esc(o)}</span></label>`).join('');
+        return `<fieldset class="q"><legend>${esc(q.label)}${tags}</legend>${help}<div class="chips">${chips}</div></fieldset>`;
+    }
+    const input = q.type === 'longtext'
+        ? `<textarea id="${id}" name="${q.id}"></textarea>`
+        : `<input id="${id}" name="${q.id}" type="${q.type === 'number' ? 'number' : 'text'}"${q.type === 'number' ? ' step="any" inputmode="decimal"' : ''}>`;
+    return `<div class="q"><label class="label" for="${id}">${esc(q.label)}${tags}</label>${help}${input}</div>`;
+}
+export function faxPage(fax, faxPath, faxUrl, agentSection, hasHtml, sentAt) {
+    const content = hasHtml
+        ? `<div class="frame"><div class="frame-tag"><span>From the sender</span><span class="long">can show anything, can’t send anything</span><span>sandboxed</span></div><iframe src="${faxPath}/view" sandbox="allow-scripts" title="${esc(fax.title)}" loading="lazy"></iframe></div>`
+        : `<div class="frame"><pre>${esc(fax.content.text)}</pre></div>`;
+    const sender = esc(fax.from.name);
+    const prompt = fax.questions.length
+        ? `Read ${faxUrl} and help me reply. Draft the answers, show me, then give me the reply link.`
+        : `Read ${faxUrl} and summarize it for me.`;
+    const askRow = `<span id="ask-row" class="ai-help"><span class="pair"><button class="btn ghost" type="button" id="ask-ai" data-prompt="${esc(prompt)}" hidden>Ask your AI</button></span><span class="small" id="ask-note">${fax.questions.length ? 'Your AI can read this page and draft your answers.' : 'Your AI can read and summarize this page.'}</span></span>`;
+    // Every fax has a reply box: the fallback when an AI's reply link won't open, and a way to ask the sender something.
+    const messageBox = `<div class="q"><label class="label" for="q-message">Or type or paste your reply here</label><textarea id="q-message" name="message" rows="3" placeholder="Anything for ${sender}. Your AI’s draft works too."></textarea></div>`;
+    const required = JSON.stringify(fax.questions.filter((q) => q.required).map((q) => ({ id: q.id, label: q.label })));
+    const formNote = '<p class="small" id="form-note" aria-live="polite"></p>';
+    let reply = '';
+    if (fax.questions.length) {
+        reply = `<div class="cut">REPLY</div><form class="reply" id="reply-form" method="post" action="${faxPath}/reply" data-required="${esc(required)}">` +
+            `<div class="banner" id="prefill-banner" hidden><b>Your AI filled this in.</b> Check the answers, change anything, then send. Nothing has been sent yet.</div>` +
+            fax.questions.map(field).join('') + messageBox +
+            `<div class="actions"><button class="btn" type="submit">Send to ${sender}</button>${askRow}</div>${formNote}</form>`;
+    }
+    else {
+        const gotIt = fax.ack ? `<button class="btn" type="submit" name="ack" value="1" formnovalidate>Got it</button>` : '';
+        reply = `<div class="cut">${fax.ack ? 'NO REPLY NEEDED' : 'REPLY IF YOU LIKE'}</div><form class="reply" id="reply-form" method="post" action="${faxPath}/reply">` +
+            (fax.ack ? `<p class="small">Click Got it to let ${sender} know you read it.</p>` : '') +
+            `${messageBox}<div class="actions">${gotIt}<button class="btn${fax.ack ? ' ghost' : ''}" type="submit">Send to ${sender}</button></div>${formNote}<div class="actions">${askRow}</div></form>`;
+    }
+    return shell(fax.title, `<article class="sheet">${header(fax, sentAt)}<div class="body">${intro(fax)}${content}</div>${reply}</article>` +
+        `<section class="agent"><h2>For AI assistants</h2><pre>${esc(agentSection)}</pre></section>${FOOT}`, true);
+}
+export function receiptPage(fax, sentAt, answers, message, ack, repliedAt) {
+    const sender = fax.from.name.toUpperCase();
+    const pairs = fax.questions.filter((q) => answers[q.id]).map((q) => `<dt>${esc(q.label)}</dt><dd>${esc(answers[q.id])}</dd>`).join('') +
+        (message ? `<dt>Message</dt><dd>${esc(message)}</dd>` : '');
+    const n = Object.keys(answers).length;
+    const what = [n ? `${n} ANSWER${n === 1 ? '' : 'S'}` : '', message ? 'A MESSAGE' : ''].filter(Boolean).join(' AND ');
+    const report = ack && !n && !message
+        ? `<p class="report"><b>OK</b> · ${esc(sender)} KNOWS YOU READ IT · ${stamp(repliedAt)}</p>`
+        : `<p class="report"><b>OK</b> · SENT TO ${esc(sender)} · ${stamp(repliedAt)}${what ? ` · ${what}` : ''}</p>`;
+    const again = fax.questions.length && fax.to && fax.expires
+        ? `<p class="small">You can change your answers until the fax expires on ${day(fax.expires)}. Sending again replaces them.</p>`
+        : '';
+    return shell(`Sent: ${fax.title}`, `<article class="sheet">${header(fax, sentAt)}<div class="body">${intro(fax)}</div><div class="cut">TRANSMISSION REPORT</div><div class="reply">${report}${pairs ? `<dl class="answers">${pairs}</dl>` : ''}${again}${OWN}</div></article>${FOOT}`);
+}
+export function problemPage(title, message, back, issues) {
+    const list = issues?.length ? `<ul class="cover">${issues.map((i) => `<li>${esc(i)}</li>`).join('')}</ul>` : '';
+    return shell(title, `<article class="sheet"><div class="body"><h1>${esc(title)}</h1><p class="gone">${esc(message)}</p>${list}${back ? `<p><a class="back" href="${esc(back.href)}">${esc(back.label)}</a></p>` : ''}</div></article>${FOOT}`);
+}
+export function inboxPage(title, replies) {
+    const rows = replies.length
+        ? replies.map((r) => {
+            const pairs = Object.entries(r.answers).map(([k, v]) => `<dt>${esc(k)}</dt><dd>${esc(v)}</dd>`).join('') + (r.message ? `<dt>message</dt><dd>${esc(r.message)}</dd>` : '');
+            return `<li><p class="small"><b>${esc(r.recipient ?? 'Someone')}</b> · ${stamp(r.createdAt)}${r.ack ? ' · Got it' : ''}</p>${pairs ? `<dl class="answers">${pairs}</dl>` : ''}</li>`;
+        }).join('')
+        : '<li><p class="small">No replies yet.</p></li>';
+    return shell(`Replies: ${title}`, `<article class="sheet"><div class="tx"><span>Inbox</span><span>${replies.length} repl${replies.length === 1 ? 'y' : 'ies'}</span></div><div class="body"><h1>${esc(title)}</h1><ul class="replies">${rows}</ul></div></article>${FOOT}`);
+}

package/dist/reply-link.d.ts

@@ -0,0 +1,4 @@
+import type { Question } from './fax.js';
+export type Answers = Record<string, string>;
+export declare function parseReplyFragment(fragment: string, questions: Question[]): Answers;
+export declare function buildReplyLink(faxUrl: string, questions: Question[], answers: Answers): string;

package/dist/reply-link.js

@@ -0,0 +1,33 @@
+// Reads `id=value&id=value` from a reply link's fragment.
+// Values are percent-decoded only: `+` stays a plus (assistants encode spaces as %20 and plus as %2B).
+// Unknown ids and pairs that fail to decode are dropped. A repeated key keeps its last value.
+export function parseReplyFragment(fragment, questions) {
+    const ids = new Set(questions.map((q) => q.id));
+    const out = {};
+    for (const pair of fragment.replace(/^#/, '').split('&')) {
+        const i = pair.indexOf('=');
+        if (i < 1)
+            continue;
+        const id = pair.slice(0, i);
+        if (!ids.has(id))
+            continue;
+        try {
+            out[id] = decodeURIComponent(pair.slice(i + 1));
+        }
+        catch {
+            continue;
+        }
+    }
+    return out;
+}
+export function buildReplyLink(faxUrl, questions, answers) {
+    const pairs = questions.flatMap((q) => {
+        const v = answers[q.id];
+        return v === undefined || v === '' ? [] : [`${q.id}=${encode(v)}`];
+    });
+    return `${faxUrl}#${pairs.join('&')}`;
+}
+// encodeURIComponent leaves ' ( ) ! * alone; assistants in the receiver tests encoded ' as %27.
+function encode(value) {
+    return encodeURIComponent(value).replace(/['()!*]/g, (c) => '%' + c.charCodeAt(0).toString(16).toUpperCase());
+}

package/dist/server.d.ts

@@ -0,0 +1,15 @@
+import { Hono } from 'hono';
+import type { Store } from './store.js';
+export type AgentfaxOptions = {
+    store: Store;
+    publicUrl?: string | (() => string | undefined);
+    senderKey?: string;
+    authorize?: (req: Request) => Promise<string | null>;
+    now?: () => Date;
+    about?: string;
+    repliesPerMinute?: {
+        personal?: number;
+        shared?: number;
+    };
+};
+export declare function agentfax(opts: AgentfaxOptions): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;