Schedule a review.
" +} +``` + +Keep the document self-contained. The sandbox uses `allow-scripts` without +`allow-same-origin`: author code cannot access Pagent account cookies, storage, +or the parent DOM. External assets, network APIs, forms, nested frames, popups, +top navigation, `eval`, and workers are outside the supported contract and are +restricted by the sandbox and CSP. The parent frame policy blocks external +navigation. These controls are not a promise that arbitrary HTML can never +attempt a network request. + +Protected HTML delivery uses POST forms, never credentials in URLs. The served +document adds an invisible activity bridge; stored source stays unchanged. +The viewer reveals the document on iframe load without waiting for that bridge. +An author's CSP can block the bridge and prevent metrics without hiding the +document. For an allowlisted Origin, document errors requested with +`Accept: text/html` return a generic sandboxed error page that signals +`pagent:error`, preserving the HTTP status and no-store policy; JSON clients +keep their existing error responses. +HTML visits have no slide rollups: completion, viewed-slides, furthest-slide, +and last-slide values are null. Analytics identify `contentFormat` as `html`, +`slides`, or `mixed` and include `revisionNumbers`; mixed completion uses only +visits with known legacy slide completion. Retained immutable snapshots are +available now; browsing, previewing, and restoring earlier revisions remain P1. + ### Breaking migration The two-tool contract is intentionally breaking. There are no legacy aliases: -| Removed tool | Replacement | -| -------------- | ----------------------------------------------------- | -| `show_ui` | `write({ type: "interactive", spec })` | -| `show_html` | `write({ type: "document", html })` | -| `publish_deck` | `write({ type: "presentation", title, slides, ... })` | -| `check_result` | `read({ page_id, include: "response" })` | +| Removed tool | Replacement | +| -------------- | --------------------------------------------------- | +| `show_ui` | `write({ type: "interactive", spec })` | +| `show_html` | `write({ type: "document", html })` | +| `publish_deck` | `write({ type: "presentation", title, html, ... })` | +| `check_result` | `read({ page_id, include: "response" })` | Restart the MCP client after upgrading so it refreshes the advertised tool list. Clients should see exactly `write` and `read`. @@ -135,7 +174,7 @@ Each app validates its environment at boot/build with Zod and fails loudly on mi | | `NODE_EXTRA_CA_CERTS` | Supabase in production | Path to the bundled Supabase root CA so `verify-full` can validate the pooler certificate. | | | `PUBLIC_URL` | **production** | HTTPS renderer origin. Used in `write` responses. | | | `API_PUBLIC_URL` | **production** | HTTPS API origin. Used for OAuth issuer, callbacks, magic links, and discovery metadata. | -| | `ALLOWED_ORIGINS` | **production** | Comma-separated origin list. CORS allow-list. | +| | `ALLOWED_ORIGINS` | **HTML frames / prod** | Exact renderer origins for CORS and protected HTML frames. Required for HTML in every environment, e.g. `http://localhost:8788` locally. | | | `PORT` | optional | Coerced to number. Default `8787`. Railway sets this. | | | `PAGE_TTL_MS` | optional | Coerced to number. Default `1800000` (30 min). | | | `RATE_LIMIT_MAX` | optional | Positive integer. Default `30`; caps writes and viewer starts per IP. Events: 4x/IP, 30/session/window, 10/request. | @@ -289,7 +328,7 @@ must deploy from the repository root because it uses npm workspaces and serves 3. Set environment variables (see `apps/api/.env.example`): - `PUBLIC_URL` — the Vercel URL of `apps/web` (e.g. `https://pagent.link`). Used in MCP `write` responses. **Required in production.** Boot fails loudly if missing. - `API_PUBLIC_URL` — the Railway public origin of `apps/api` (e.g. `https://api.pagent.link`). Used for OAuth issuer/discovery, default Google callbacks, magic links, and MCP auth metadata. **Required in production.** Must be HTTPS. - - `ALLOWED_ORIGINS` — comma-separated origins allowed to call the API (set to your Vercel URL). **Required in production.** API boot fails loudly if missing. + - `ALLOWED_ORIGINS` — comma-separated exact renderer origins (set to your Vercel origin). **Required for HTML frames in every environment**; use the actual browser origin, e.g. `http://localhost:8788` locally. Missing/mismatched origins return 403. Production API boot also fails if missing. - `PORT` — Railway sets this automatically; the server reads it. - `PAGE_TTL_MS` — optional; default 30 minutes. - `RATE_LIMIT_MAX` / `RATE_LIMIT_WINDOW_MS` — optional. Per-IP limits for temporary writes and public viewer access/visit starts. Engagement delivery allows 4x the base cap per IP, 30 requests per viewer session, and at most 10 events per request. Defaults: 30 / 60000. @@ -411,6 +450,12 @@ in Grafana from the trace and log streams. ### Rollback +After HTML migration 4 has run, prefer a forward fix. A pre-HTML API rejects the +applied migration and cannot read HTML revisions. Any revert must preserve migration +4's registration and HTML storage/read compatibility; never delete the migration +ledger entry, column, or saved content. Verify API, renderer, and rebuilt MCP together +against migrated legacy and HTML data. See [the release runbook](docs/RELEASING.md#rollback). + The MCP plugin marketplace tracks `main`. Rolling back means reverting the bad commit on `main`; Railway and Vercel auto-redeploy on push. @@ -444,7 +489,7 @@ behaviour without touching code. `apps/api/.env.example` is the source of truth. | `PUBLIC_URL` | _(required in prod)_ | Base URL of the renderer, returned in MCP `write` responses. Redeploy required after change. | | `API_PUBLIC_URL` | _(required in prod)_ | API origin used for OAuth issuer, callbacks, magic links, and MCP discovery. Restart required. | | `PAGE_TTL_MS` | `1800000` (30 min) | How long a page lives before expiring. Raising it keeps pages alive longer but grows the DB. | -| `ALLOWED_ORIGINS` | _(required in prod)_ | Comma-separated origins the CORS middleware allows. Add an origin here and restart — no redeploy. | +| `ALLOWED_ORIGINS` | _(required for HTML)_ | Exact renderer origins for CORS and protected HTML frames in all environments. Update and restart the API. Production boot also requires this setting. | | `RATE_LIMIT_MAX` | `30` | Base per-IP write cap for temporary pages and public viewer access/visit starts; event delivery uses 4x per IP plus a 30-request viewer-session cap and 10-event batches. | | `RATE_LIMIT_WINDOW_MS` | `60000` (60 s) | Shared rolling window for the write and viewer limits. | | `TRUSTED_PROXY_MODE` | _(required in prod)_ | Set to `railway` to use Railway's `X-Real-IP` for abuse limits; `X-Forwarded-For` is ignored. | diff --git a/apps/api/.env.example b/apps/api/.env.example index 677795e..ce2dd09 100644 --- a/apps/api/.env.example +++ b/apps/api/.env.example @@ -22,9 +22,11 @@ API_PUBLIC_URL=http://localhost:8787 # How long pages live, in milliseconds (default 30 minutes). PAGE_TTL_MS=1800000 -# Comma-separated list of origins allowed to call the API. Leave unset for dev (allows all). -# Required when NODE_ENV=production — boot will fail loudly otherwise. Set to your Vercel URL (e.g. https://pagent.link). -ALLOWED_ORIGINS= +# Comma-separated exact renderer origins for CORS and protected HTML document frames. +# HTML frames require this in EVERY environment; missing or mismatched origins return 403. +# Use the browser's actual origin (localhost and 127.0.0.1 differ). Production boot also +# requires this setting; set to your Vercel origin, e.g. https://pagent.link. +ALLOWED_ORIGINS=http://localhost:8788 # Supabase Postgres connection string (Session pooler, port 5432). In # production, sslmode=disable is rejected; the API always uses verify-full. diff --git a/apps/api/app.ts b/apps/api/app.ts index b3ee473..f2db660 100644 --- a/apps/api/app.ts +++ b/apps/api/app.ts @@ -46,14 +46,17 @@ const newPageLimiter = createNewPageLimiter(); export const app = new Hono<{ Variables: RequestIdVariables & AuthVariables }>(); app.use('*', requestId()); +app.use('*', async (c, next) => { + c.header('X-Frame-Options', 'DENY'); + await next(); +}); app.use( '*', secureHeaders({ // contentSecurityPolicy is intentionally omitted — Hono does not set CSP // by default, and its HTML-page preset would be noise on a JSON API. - // Hono defaults X-Frame-Options to SAMEORIGIN; bump to DENY — this API - // has no frames to embed and DENY is more restrictive. - xFrameOptions: 'DENY', + // Framing defaults run before handlers; only protected document responses opt out. + xFrameOptions: false, // Browsers default Cross-Origin-Resource-Policy to same-origin which would // block the renderer at pagent.link from reading API responses at // api.pagent.link. CORS already gates cross-origin reads explicitly. diff --git a/apps/api/decks/analytics-aggregate-fixture.ts b/apps/api/decks/analytics-aggregate-fixture.ts new file mode 100644 index 0000000..50aeb9f --- /dev/null +++ b/apps/api/decks/analytics-aggregate-fixture.ts @@ -0,0 +1,109 @@ +export const firstStartedAt = new Date('2026-09-01T12:00:00.000Z'); +export const firstLastActivityAt = new Date('2026-09-01T12:03:00.000Z'); +export const secondStartedAt = new Date('2026-09-02T12:00:00.000Z'); +export const secondLastActivityAt = new Date('2026-09-02T12:01:00.000Z'); +export const analyticsInput = { + owner: { id: 'owner-1', email: 'owner@example.test' }, + visitRows: [ + { + id: 'visit-1', + viewerSessionId: 'session-1', + viewerUserId: null, + viewerEmail: 'viewer@example.test', + identityConfidence: 'authenticated' as const, + startedAt: firstStartedAt, + lastActivityAt: firstLastActivityAt, + revisionNumber: 1, + linkId: 'link-1', + linkName: 'Customer link', + senderId: 'sender-1', + senderEmail: 'sender@example.test', + totalSlides: 2, + }, + { + id: 'visit-2', + viewerSessionId: 'session-2', + viewerUserId: null, + viewerEmail: null, + identityConfidence: 'anonymous' as const, + startedAt: secondStartedAt, + lastActivityAt: secondLastActivityAt, + revisionNumber: 1, + linkId: 'link-1', + linkName: 'Customer link', + senderId: 'sender-1', + senderEmail: 'sender@example.test', + totalSlides: 2, + }, + ], + slideRows: [ + { + id: 'slide-1', + revisionNumber: 1, + stableSlideId: 'stable-slide-1', + ordinal: 1, + title: 'Introduction', + }, + { + id: 'slide-2', + revisionNumber: 1, + stableSlideId: 'stable-slide-2', + ordinal: 2, + title: 'Details', + }, + ], + engagementRows: [ + { + visitId: 'visit-1', + id: 'slide-1', + revisionNumber: 1, + stableSlideId: 'stable-slide-1', + ordinal: 1, + title: 'Introduction', + activeDurationMs: 100, + viewCount: 1, + qualified: true, + firstSequence: 2, + lastSequence: 2, + }, + { + visitId: 'visit-1', + id: 'slide-2', + revisionNumber: 1, + stableSlideId: 'stable-slide-2', + ordinal: 2, + title: 'Details', + activeDurationMs: 200, + viewCount: 1, + qualified: true, + firstSequence: 1, + lastSequence: 1, + }, + { + visitId: 'visit-2', + id: 'slide-1', + revisionNumber: 1, + stableSlideId: 'stable-slide-1', + ordinal: 1, + title: 'Introduction', + activeDurationMs: 100, + viewCount: 1, + qualified: true, + firstSequence: 1, + lastSequence: 1, + }, + { + visitId: 'missing-visit', + id: 'slide-1', + revisionNumber: 1, + stableSlideId: 'stable-slide-1', + ordinal: 1, + title: 'Introduction', + activeDurationMs: 999, + viewCount: 1, + qualified: true, + firstSequence: 1, + lastSequence: 1, + }, + ], +}; diff --git a/apps/api/decks/analytics-aggregate.test.ts b/apps/api/decks/analytics-aggregate.test.ts index 39268b8..9afbbab 100644 --- a/apps/api/decks/analytics-aggregate.test.ts +++ b/apps/api/decks/analytics-aggregate.test.ts @@ -1,118 +1,16 @@ import { describe, expect, it } from 'vitest'; import { aggregateDeckAnalytics } from './analytics-aggregate.ts'; +import { + analyticsInput, + firstStartedAt, + firstLastActivityAt, + secondStartedAt, + secondLastActivityAt, +} from './analytics-aggregate-fixture.ts'; describe('deck analytics aggregation', () => { it('rolls up visits and engagements by visit identifier', () => { // Given - const firstStartedAt = new Date('2026-09-01T12:00:00.000Z'); - const firstLastActivityAt = new Date('2026-09-01T12:03:00.000Z'); - const secondStartedAt = new Date('2026-09-02T12:00:00.000Z'); - const secondLastActivityAt = new Date('2026-09-02T12:01:00.000Z'); - const analyticsInput = { - owner: { id: 'owner-1', email: 'owner@example.test' }, - visitRows: [ - { - id: 'visit-1', - viewerSessionId: 'session-1', - viewerUserId: null, - viewerEmail: 'viewer@example.test', - identityConfidence: 'authenticated' as const, - startedAt: firstStartedAt, - lastActivityAt: firstLastActivityAt, - revisionNumber: 1, - linkId: 'link-1', - linkName: 'Customer link', - senderId: 'sender-1', - senderEmail: 'sender@example.test', - totalSlides: 2, - }, - { - id: 'visit-2', - viewerSessionId: 'session-2', - viewerUserId: null, - viewerEmail: null, - identityConfidence: 'anonymous' as const, - startedAt: secondStartedAt, - lastActivityAt: secondLastActivityAt, - revisionNumber: 1, - linkId: 'link-1', - linkName: 'Customer link', - senderId: 'sender-1', - senderEmail: 'sender@example.test', - totalSlides: 2, - }, - ], - slideRows: [ - { - id: 'slide-1', - revisionNumber: 1, - stableSlideId: 'stable-slide-1', - ordinal: 1, - title: 'Introduction', - }, - { - id: 'slide-2', - revisionNumber: 1, - stableSlideId: 'stable-slide-2', - ordinal: 2, - title: 'Details', - }, - ], - engagementRows: [ - { - visitId: 'visit-1', - id: 'slide-1', - revisionNumber: 1, - stableSlideId: 'stable-slide-1', - ordinal: 1, - title: 'Introduction', - activeDurationMs: 100, - viewCount: 1, - qualified: true, - firstSequence: 2, - lastSequence: 2, - }, - { - visitId: 'visit-1', - id: 'slide-2', - revisionNumber: 1, - stableSlideId: 'stable-slide-2', - ordinal: 2, - title: 'Details', - activeDurationMs: 200, - viewCount: 1, - qualified: true, - firstSequence: 1, - lastSequence: 1, - }, - { - visitId: 'visit-2', - id: 'slide-1', - revisionNumber: 1, - stableSlideId: 'stable-slide-1', - ordinal: 1, - title: 'Introduction', - activeDurationMs: 100, - viewCount: 1, - qualified: true, - firstSequence: 1, - lastSequence: 1, - }, - { - visitId: 'missing-visit', - id: 'slide-1', - revisionNumber: 1, - stableSlideId: 'stable-slide-1', - ordinal: 1, - title: 'Introduction', - activeDurationMs: 999, - viewCount: 1, - qualified: true, - firstSequence: 1, - lastSequence: 1, - }, - ], - }; // When const eventRows = analyticsInput.engagementRows.map((row) => ({ @@ -128,6 +26,8 @@ describe('deck analytics aggregation', () => { // Then expect(analytics).toEqual({ owner: analyticsInput.owner, + contentFormat: 'slides', + revisionNumbers: [1], overview: { totalVisits: 2, uniqueViewers: 2, @@ -206,6 +106,7 @@ describe('deck analytics aggregation', () => { senderEmail: 'sender@example.test', revisionNumber: 1, totalActiveTimeMs: 300, + contentFormat: 'slides', viewedSlides: 2, completion: 1, furthestSlide: 2, @@ -240,6 +141,7 @@ describe('deck analytics aggregation', () => { senderEmail: 'sender@example.test', revisionNumber: 1, totalActiveTimeMs: 100, + contentFormat: 'slides', viewedSlides: 1, completion: 0.5, furthestSlide: 1, diff --git a/apps/api/decks/analytics-aggregate.ts b/apps/api/decks/analytics-aggregate.ts index 7e82db1..e15a9a3 100644 --- a/apps/api/decks/analytics-aggregate.ts +++ b/apps/api/decks/analytics-aggregate.ts @@ -4,6 +4,7 @@ import type { AnalyticsEventRow, AnalyticsVisitRow, DeckAnalytics, + DeckContentFormat, MutableVisitor, SlideAccumulator, SlideRollup, @@ -20,6 +21,14 @@ function viewerKey(visit: AnalyticsVisitRow): string { export function aggregateDeckAnalytics(input: AnalyticsAggregationInput): DeckAnalytics { const { owner, visitRows, slideRows, engagementRows, eventRows } = input; + const revisionFormats = new MapThe page could not be opened. Return to the sharing page and try again.
`; +} + +function scriptString(value: string): string { + return JSON.stringify(value) + .replace(//g, '\\u003e') + .replace(/&/g, '\\u0026') + .replace(/\u2028/g, '\\u2028') + .replace(/\u2029/g, '\\u2029'); +} diff --git a/apps/api/decks/http-schemas.test.ts b/apps/api/decks/http-schemas.test.ts new file mode 100644 index 0000000..b417c02 --- /dev/null +++ b/apps/api/decks/http-schemas.test.ts @@ -0,0 +1,37 @@ +import { describe, expect, it } from 'vitest'; +import { startVisitBodySchema } from './http-schemas.ts'; + +const readiness = { + visible: true, + interacted: true, + analyticsConsent: true, + deviceClass: 'desktop', + browserFamily: 'Chromium', + countryCode: null, +}; + +describe('visit revision boundary', () => { + it('accepts the displayed revision when a valid identifier is supplied', () => { + // Given + const revisionId = '11111111-1111-4111-8111-111111111111'; + // When + const result = startVisitBodySchema.safeParse({ ...readiness, revisionId }); + // Then + expect(result.success).toBe(true); + if (result.success) expect(result.data).toMatchObject({ revisionId }); + }); + + it('accepts a shipped client when its request omits the revision', () => { + // Given / When + const result = startVisitBodySchema.safeParse(readiness); + // Then + expect(result.success).toBe(true); + }); + + it('rejects malformed revision identifiers when starting a visit', () => { + // Given / When + const result = startVisitBodySchema.safeParse({ ...readiness, revisionId: 'not-an-id' }); + // Then + expect(result.success).toBe(false); + }); +}); diff --git a/apps/api/decks/http-schemas.ts b/apps/api/decks/http-schemas.ts index 39ea3c0..650ff1e 100644 --- a/apps/api/decks/http-schemas.ts +++ b/apps/api/decks/http-schemas.ts @@ -12,6 +12,7 @@ export const accessDecisionBodySchema = z export const startVisitBodySchema = z .object({ + revisionId: z.string().uuid().optional(), visible: z.boolean(), interacted: z.boolean(), analyticsConsent: z.boolean(), diff --git a/apps/api/decks/migrations/0004-add-html-deck-revisions.ts b/apps/api/decks/migrations/0004-add-html-deck-revisions.ts new file mode 100644 index 0000000..7425f86 --- /dev/null +++ b/apps/api/decks/migrations/0004-add-html-deck-revisions.ts @@ -0,0 +1,9 @@ +import type { DeckMigration } from '../schema-migrations.ts'; + +export const htmlDeckRevisionsMigration = { + version: 4, + name: 'add_html_deck_revisions', + async up(database) { + await database`alter table deck_revisions add column if not exists html text`; + }, +} satisfies DeckMigration; diff --git a/apps/api/decks/repository-analytics.ts b/apps/api/decks/repository-analytics.ts index 7721066..e5c0dae 100644 --- a/apps/api/decks/repository-analytics.ts +++ b/apps/api/decks/repository-analytics.ts @@ -5,6 +5,7 @@ import type { AnalyticsEventRow, AnalyticsSlideRow, AnalyticsVisitRow, + AnalyticsRevisionRow, DeckAnalytics, } from './analytics-types.ts'; import { canViewAnalytics } from './authorization.ts'; @@ -98,6 +99,14 @@ export async function getDeckAnalytics( const database = db.database(); const viewerSearch = filters.viewer === undefined ? null : `%${filters.viewer.toLowerCase()}%`; const sender = access.restrictToCreator ? userId : (filters.sender ?? null); + const revisionRows = await databaseNew document
'; + + // When + await publishDeck( + owner, + publishDeckBodySchema.parse({ + title: 'Updated', + update_deck_id: original.deckId, + html: updated, + }), + ); + const rows = await setup<{ revision_number: number; html: string }[]>` + select revision_number, html from deck_revisions where deck_id = ${original.deckId} order by revision_number + `; + + // Then + expect(rows).toEqual([ + { revision_number: 1, html }, + { revision_number: 2, html: updated }, + ]); + }); + + it('tracks accepted visit-level time without invented slides when an HTML viewer is active', async () => { + // Given + const published = await publishDeck( + owner, + publishDeckBodySchema.parse({ title: 'Track document', html }), + ); + const link = await createShareLink(owner.id, published.deckId, { + name: 'Review', + access_mode: 'anyone', + allowed_emails: [], + allowed_domains: [], + }); + const access = await grantViewerAccess({ token: link.token }); + expect(access.kind).toBe('granted'); + if (access.kind !== 'granted') return; + const viewer = await getViewerDeck(access.sessionToken); + const started = await startVisit(access.sessionToken, { + visible: true, + interacted: true, + analyticsConsent: true, + deviceClass: 'desktop', + browserFamily: 'Chromium', + countryCode: null, + }); + expect(started.kind).toBe('started'); + if (started.kind !== 'started') return; + const base = new Date(Date.now() - 10_000); + await setup`update visits set started_at = ${base}, last_activity_at = ${base} where id = ${started.visitId}`; + const event = { + id: randomUUID(), + eventType: 'heartbeat' as const, + eventAt: new Date(base.getTime() + 5000), + sequence: 1, + visibleRatio: 1, + visibleDurationMs: 5000, + tabVisible: true, + recentlyActive: true, + }; + + // When + await ingestEngagement(access.sessionToken, started.visitId, [event, event]); + const analytics = await getDeckAnalytics(owner.id, published.deckId, {}); + + // Then + expect(viewer).toMatchObject({ html, slides: [] }); + expect(analytics.visits[0]).toMatchObject({ + contentFormat: 'html', + totalActiveTimeMs: 5000, + viewedSlides: null, + completion: null, + furthestSlide: null, + lastSlide: null, + slideSequence: [], + }); + expect(analytics.overview).toMatchObject({ + totalVisits: 1, + averageActiveTimeMs: 5000, + averageCompletion: null, + topSlide: null, + }); + expect(analytics.slides).toEqual([]); + const rows = await setup< + { count: number }[] + >`select count(*)::integer as count from slide_engagement where visit_id = ${started.visitId}`; + expect(rows).toEqual([{ count: 0 }]); + }); +}); diff --git a/apps/api/decks/repository-launch-acceptance.integration.test.ts b/apps/api/decks/repository-launch-acceptance.integration.test.ts index c216002..e37177c 100644 --- a/apps/api/decks/repository-launch-acceptance.integration.test.ts +++ b/apps/api/decks/repository-launch-acceptance.integration.test.ts @@ -436,7 +436,7 @@ integration('launch acceptance repository matrix', () => { ordinal: 1, title: 'Slide 1', uniqueViewers: 1, - viewRate: 0.5, + viewRate: 1, averageActiveTimeMs: expect.any(Number), totalActiveTimeMs: expect.any(Number), exits: 0, @@ -463,7 +463,7 @@ integration('launch acceptance repository matrix', () => { ordinal: 1, title: 'Slide 1', uniqueViewers: 1, - viewRate: 0.5, + viewRate: 1, averageActiveTimeMs: expect.any(Number), totalActiveTimeMs: expect.any(Number), exits: 0, diff --git a/apps/api/decks/repository-viewer-access.ts b/apps/api/decks/repository-viewer-access.ts index a55009d..309e72d 100644 --- a/apps/api/decks/repository-viewer-access.ts +++ b/apps/api/decks/repository-viewer-access.ts @@ -5,7 +5,7 @@ import { normalizeEmail, type IdentityConfidence, } from './domain.ts'; -import { DeckDataInvariantError, ShareUnavailableError, type UnavailableState } from './errors.ts'; +import { DeckDataInvariantError, ShareUnavailableError } from './errors.ts'; import { createOpaqueToken, hashOpaqueToken } from './tokens.ts'; type AuthenticatedViewer = { @@ -169,107 +169,11 @@ export async function grantViewerAccess(input: ViewerAccessInput): PromiseMissing title
' }, + { type: 'presentation', title: '', html: 'Empty title
' }, + { type: 'document', html: 'Document
', title: 'Unexpected title' }, + { type: 'interactive', spec: [], html: 'Unexpected HTML
' }, + { type: 'presentation', title: 'Old format', slides: [{ id: 'one', html: 'Slide
' }] }, + ])('rejects invalid write variant %# before routing', async (input) => { + await expect(tool(makeTools(), 'write').handler(input, auth)).rejects.toThrow(); + }); + it('writes interactive and document pages through one tool', async () => { const seen: string[] = []; const tools = makeTools({ @@ -99,9 +110,13 @@ describe('registerPagentTools', () => { it('writes a durable presentation page and maps page_id to the existing revision model', async () => { let updateDeckId: string | undefined; + let submittedHtml: unknown; + const html = + 'Top slide
-- Highest total active time in the selected scope. Engagement signals describe attention, - not purchase intent. -
-+ HTML pages report visits and active time. Their layout and navigation belong to the + author; slide completion is not inferred. +
` + : html`Top slide
++ Highest total active time in the selected scope. Engagement signals describe + attention, not purchase intent. +
+| Viewer | Sender | -Sequence | +${showSlides ? 'Sequence' : 'Document'} | Active | -Completion | -Furthest | -Last | + ${showSlides + ? html`Completion | +Furthest | +Last | ` + : nothing}
${visit.senderEmail} ${visit.linkName} |
- ${visitSequence(visit)} | +${visitSequence(visit)} | ${duration(visit.totalActiveTimeMs)} | -${percent(visit.completion)} | -${visit.furthestSlide ?? '—'} | -${visit.lastSlide ?? '—'} | + ${showSlides + ? html`${percent(visit.completion)} | +${visit.furthestSlide ?? '—'} | +${visit.lastSlide ?? '—'} | ` + : nothing} `, )}
|---|