@agent-native/core 0.81.2 → 0.82.0

package/dist/client/frame.js.map

@@ -1 +1 @@
-{"version":3,"file":"frame.js","sourceRoot":"","sources":["../../src/client/frame.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD;;;;;GAKG;AAEH,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAU;IAClD,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACjE,MAAM,YAAY,GAChB,+BAA+B,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9D,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,YAAY,CAAC,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,OAA4B;IAE5B,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAEnD,MAAM,QAAQ,GAAG,CAAC,KAAmB,EAAE,EAAE;QACvC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;YAAE,OAAO;QAC1C,IAAI,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC;IACF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC7C,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC/D,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,IAAI,YAAY,GAAkB,IAAI,CAAC;AAEvC,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,OAAO,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAmB;IACvD,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAEhD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;IACzC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,CACL,KAAK,CAAC,MAAM,KAAK,MAAM;YACvB,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAE/C,OAAO,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;AACnE,CAAC;AAED,gDAAgD;AAChD,+DAA+D;AAC/D,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;IAClC,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,KAAmB,EAAE,EAAE;QACzD,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,WAAW,IAAI,aAAa,CAAC;QAC5C,IACE,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,yBAAyB;YAC9C,MAAM;YACN,CAAC,CAAC,aAAa,IAAI,aAAa,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC;YACjE,CAAC,YAAY;YACb,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAC9B,CAAC;YACD,YAAY,GAAG,MAAM,CAAC;YACtB,MAAM,CAAC,MAAM,CAAC,WAAW,CACvB,EAAE,IAAI,EAAE,8BAA8B,EAAE,EACxC,+BAA+B,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,YAAY,KAAK,IAAI,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,IAAI,CAAC;AAC7D,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,aAAa,GACjB,OAAO,IAGR,CAAC,GAAG,CAAC;IACN,IAAI,aAAa,EAAE,CAAC,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;IACpE,OAAO,OAAO,OAAO,KAAK,WAAW;QACnC,CAAC,CAAE,OAAO,CAAC,GAA0C,EAAE,CAAC,IAAI,CAAC;QAC7D,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB;IAC3B,MAAM,GAAG,GACP,eAAe,CAAC,6BAA6B,CAAC;QAC9C,eAAe,CAAC,wBAAwB,CAAC;QACzC,eAAe,CAAC,cAAc,CAAC;QAC/B,eAAe,CAAC,SAAS,CAAC;QAC1B,eAAe,CAAC,sBAAsB,CAAC;QACvC,eAAe,CAAC,iBAAiB,CAAC;QAClC,eAAe,CAAC,4BAA4B,CAAC;QAC7C,eAAe,CAAC,uBAAuB,CAAC,CAAC;IAC3C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CAAC,IAAY;IACnD,OAAO,CACL,OAAO,CAAC,6BAA6B,CAAC;QACtC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC;QAClC,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,YAAoB;IACnD,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC;QAC7C,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,+BAA+B,CAAC,UAAU,CAAC;QACtD,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,WAAW,GAAG,+BAA+B,CAAC,UAAU,CAAC;QAC7D,CAAC,CAAC,oBAAoB,EAAE;QACxB,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,MAAM,GAAG,WAAW,IAAI,iBAAiB,EAAE,CAAC;IAClD,OAAO,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;AAC5B,CAAC;AAWD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,SAAS,GAAG,IAAI;IAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9D,OAAO,CAAC,EAAE,CAAC,CAAC;YACZ,OAAO;QACT,CAAC;QAED,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBAC/C,OAAO,CAAC,EAAE,CAAC,CAAC;YACd,CAAC;QACH,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,SAAS,OAAO,CAAC,KAAmB;YAClC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,sBAAsB;gBAAE,OAAO;YACtE,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;gBAAE,OAAO;YAC3C,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;YACrC,IAAI,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;gBAAE,OAAO;YACxD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;YAC9C,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,SAAS,EAAE,KAAK,EAAE,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,WAAW,CACvB,EAAE,IAAI,EAAE,yBAAyB,EAAE,EACnC,+BAA+B,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAC5D,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,WAAW,CAAC,+BAA+B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,WAAW,CAAC,8BAA8B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,WAAW,CAAC,+BAA+B,CAAC,CAAC;AAC/C,CAAC","sourcesContent":["import { agentNativePath } from \"./api-path.js\";\n\n/**\n * Frame Communication (browser)\n *\n * Utilities for communicating with the parent frame via postMessage.\n * Provides typed request/response patterns and message sending.\n */\n\n// ---------------------------------------------------------------------------\n// Low-level parent messaging\n// ---------------------------------------------------------------------------\n\n/**\n * Send a typed message to the parent frame.\n * No-op if running at top level (no parent frame).\n */\nexport function sendToFrame(type: string, data?: any): void {\n  if (typeof window === \"undefined\") return;\n  const target = window.parent !== window ? window.parent : window;\n  const targetOrigin =\n    getFramePostMessageTargetOrigin() || window.location.origin;\n  target.postMessage({ type, data }, targetOrigin);\n}\n\n/**\n * Listen for a specific message type from the parent frame.\n * Returns a cleanup function.\n */\nexport function onFrameMessage(\n  type: string,\n  handler: (data: any) => void,\n): () => void {\n  if (typeof window === \"undefined\") return () => {};\n\n  const listener = (event: MessageEvent) => {\n    if (!isTrustedFrameMessage(event)) return;\n    if (event.data?.type === type) {\n      handler(event.data.data ?? event.data.detail ?? event.data);\n    }\n  };\n  window.addEventListener(\"message\", listener);\n  return () => window.removeEventListener(\"message\", listener);\n}\n\n// ---------------------------------------------------------------------------\n// Frame Origin\n// ---------------------------------------------------------------------------\n\nlet _frameOrigin: string | null = null;\n\nfunction normalizeOrigin(value: unknown): string | null {\n  if (typeof value !== \"string\") return null;\n  if (value === \"null\") return \"null\";\n  try {\n    return new URL(value).origin;\n  } catch {\n    return null;\n  }\n}\n\nexport function getFramePostMessageTargetOrigin(): string | null {\n  const origin = getFrameOrigin();\n  return origin === \"null\" ? \"*\" : origin;\n}\n\nexport function isTrustedFrameMessage(event: MessageEvent): boolean {\n  if (typeof window === \"undefined\") return false;\n\n  const ownOrigin = window.location.origin;\n  if (event.origin === ownOrigin) return true;\n\n  const frameOrigin = getFrameOrigin();\n  if (!frameOrigin) return false;\n  if (frameOrigin === \"null\") {\n    return (\n      event.origin === \"null\" &&\n      (event.source === window.parent || event.source === window)\n    );\n  }\n  if (event.origin !== frameOrigin) return false;\n\n  return event.source === window.parent || event.source === window;\n}\n\n// Listen for frame origin message and cache it.\n// Only accept from the direct parent frame, and only set once.\nif (typeof window !== \"undefined\") {\n  window.addEventListener(\"message\", (event: MessageEvent) => {\n    const eventOrigin = normalizeOrigin(event.origin);\n    const payloadOrigin = normalizeOrigin(event.data?.origin);\n    const origin = eventOrigin ?? payloadOrigin;\n    if (\n      event.data?.type === \"agentNative.frameOrigin\" &&\n      origin &&\n      (!payloadOrigin || payloadOrigin === origin || origin === \"null\") &&\n      !_frameOrigin &&\n      event.source === window.parent\n    ) {\n      _frameOrigin = origin;\n      window.parent.postMessage(\n        { type: \"agentNative.embeddedAppReady\" },\n        getFramePostMessageTargetOrigin() ?? window.location.origin,\n      );\n    }\n  });\n}\n\n/**\n * Get the frame origin (e.g. \"http://localhost:3334\").\n * Returns null if not running inside a frame iframe.\n */\nexport function getFrameOrigin(): string | null {\n  return _frameOrigin;\n}\n\n/**\n * Returns true if the app is running inside a frame iframe\n * (local dev frame, Builder.io, or any compatible frame).\n */\nexport function isInFrame(): boolean {\n  return _frameOrigin !== null;\n}\n\n/**\n * Get the origin for OAuth callbacks.\n * Always uses the app's own origin (window.location.origin), NOT the frame\n * origin. The redirect URI registered in Google Cloud Console (or any OAuth\n * provider) must match the template app's direct URL, not the dev frame's\n * proxy URL, so this must be consistent regardless of how the app is accessed.\n */\nexport function getCallbackOrigin(): string {\n  return typeof window !== \"undefined\" ? window.location.origin : \"\";\n}\n\nfunction envFlag(name: string): boolean {\n  const value = runtimeEnvValue(name);\n  return value === \"1\" || value === \"true\" || value === true;\n}\n\nfunction runtimeEnvValue(name: string): string | boolean | undefined {\n  const importMetaEnv = (\n    import.meta as unknown as {\n      env?: Record<string, string | boolean | undefined>;\n    }\n  ).env;\n  if (importMetaEnv?.[name] !== undefined) return importMetaEnv[name];\n  return typeof process !== \"undefined\"\n    ? (process.env as Record<string, string | undefined>)?.[name]\n    : undefined;\n}\n\nfunction workspaceOAuthOrigin(): string | null {\n  const raw =\n    runtimeEnvValue(\"VITE_WORKSPACE_OAUTH_ORIGIN\") ||\n    runtimeEnvValue(\"WORKSPACE_OAUTH_ORIGIN\") ||\n    runtimeEnvValue(\"VITE_APP_URL\") ||\n    runtimeEnvValue(\"APP_URL\") ||\n    runtimeEnvValue(\"VITE_BETTER_AUTH_URL\") ||\n    runtimeEnvValue(\"BETTER_AUTH_URL\") ||\n    runtimeEnvValue(\"VITE_WORKSPACE_GATEWAY_URL\") ||\n    runtimeEnvValue(\"WORKSPACE_GATEWAY_URL\");\n  if (typeof raw !== \"string\" || !raw) return null;\n  try {\n    return new URL(raw).origin;\n  } catch {\n    return null;\n  }\n}\n\nfunction shouldUseWorkspaceCallbackRelay(path: string): boolean {\n  return (\n    envFlag(\"VITE_AGENT_NATIVE_WORKSPACE\") &&\n    path.startsWith(\"/_agent-native/\") &&\n    (path.endsWith(\"/callback\") || path.includes(\"/callback/\"))\n  );\n}\n\n/**\n * Build an OAuth redirect URI for a framework callback route.\n *\n * Workspace deploys use one provider-registered root callback URL and then\n * relay to the app-specific callback based on OAuth state. Standalone apps\n * keep using their mounted app callback path.\n */\nexport function oauthRedirectUri(callbackPath: string): string {\n  const normalized = callbackPath.startsWith(\"/\")\n    ? callbackPath\n    : `/${callbackPath}`;\n  const path = shouldUseWorkspaceCallbackRelay(normalized)\n    ? normalized\n    : agentNativePath(normalized);\n  const oauthOrigin = shouldUseWorkspaceCallbackRelay(normalized)\n    ? workspaceOAuthOrigin()\n    : null;\n  const origin = oauthOrigin ?? getCallbackOrigin();\n  return `${origin}${path}`;\n}\n\n// ---------------------------------------------------------------------------\n// User Info\n// ---------------------------------------------------------------------------\n\nexport interface UserInfo {\n  name?: string;\n  email?: string;\n}\n\n/**\n * Request user info (name + email) from the parent frame.\n * Falls back to empty object if frame doesn't respond within timeout.\n */\nexport function requestUserInfo(timeoutMs = 1500): Promise<UserInfo> {\n  return new Promise((resolve) => {\n    if (typeof window === \"undefined\" || window.parent === window) {\n      resolve({});\n      return;\n    }\n\n    let settled = false;\n\n    const timer = setTimeout(() => {\n      if (!settled) {\n        settled = true;\n        window.removeEventListener(\"message\", handler);\n        resolve({});\n      }\n    }, timeoutMs);\n\n    function handler(event: MessageEvent) {\n      if (!event.data || event.data.type !== \"agentNative.userInfo\") return;\n      if (event.source !== window.parent) return;\n      const frameOrigin = getFrameOrigin();\n      if (frameOrigin && event.origin !== frameOrigin) return;\n      if (settled) return;\n      settled = true;\n      clearTimeout(timer);\n      window.removeEventListener(\"message\", handler);\n      const { name, email } = event.data.data ?? {};\n      resolve({ name: name || undefined, email: email || undefined });\n    }\n\n    window.addEventListener(\"message\", handler);\n    window.parent.postMessage(\n      { type: \"agentNative.getUserInfo\" },\n      getFramePostMessageTargetOrigin() ?? window.location.origin,\n    );\n  });\n}\n\n// ---------------------------------------------------------------------------\n// Selection Mode (visual editing)\n// ---------------------------------------------------------------------------\n\n/**\n * Enter visual editing selection mode for a specific element.\n */\nexport function enterStyleEditing(selector: string): void {\n  sendToFrame(\"agentNative.enterStyleEditing\", { selector });\n}\n\n/**\n * Enter text editing mode for a specific element.\n */\nexport function enterTextEditing(selector: string): void {\n  sendToFrame(\"agentNative.enterTextEditing\", { selector });\n}\n\n/**\n * Exit selection mode.\n */\nexport function exitSelectionMode(): void {\n  sendToFrame(\"agentNative.exitSelectionMode\");\n}\n"]}
+{"version":3,"file":"frame.js","sourceRoot":"","sources":["../../src/client/frame.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD;;;;;GAKG;AAEH,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAU;IAClD,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACjE,MAAM,YAAY,GAChB,+BAA+B,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9D,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,YAAY,CAAC,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,OAA4B;IAE5B,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAEnD,MAAM,QAAQ,GAAG,CAAC,KAAmB,EAAE,EAAE;QACvC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;YAAE,OAAO;QAC1C,IAAI,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC;IACF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC7C,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC/D,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,IAAI,YAAY,GAAkB,IAAI,CAAC;AAEvC,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,OAAO,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAmB;IACvD,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAEhD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;IACzC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,CACL,KAAK,CAAC,MAAM,KAAK,MAAM;YACvB,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAE/C,OAAO,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;AACnE,CAAC;AAED,8EAA8E;AAC9E,gDAAgD;AAChD,8EAA8E;AAC9E,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,qBAAqB;AACrB,IAAI,8BAA8B,GAAG,KAAK,CAAC;AAC3C,IAAI,0BAA0B,GAAG,CAAC,CAAC;AAEnC,SAAS,oBAAoB;IAC3B,IAAI,OAAO,QAAQ,KAAK,WAAW;QAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,eAAe,CAAC;IACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,OAAO,IAAI,CAAC,IAAI,CACd,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CACnE,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB;IAC1B,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO;IACtE,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;IACtC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,0BAA0B,CAAC,GAAG,CAAC;QAAE,OAAO;IACzE,0BAA0B,GAAG,MAAM,CAAC;IACpC,WAAW,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,2BAA2B;IAClC,IAAI,8BAA8B,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC5E,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO;IACrC,8BAA8B,GAAG,IAAI,CAAC;IACtC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,IAAI,SAAS;YAAE,OAAO;QACtB,SAAS,GAAG,IAAI,CAAC;QACjB,MAAM,CAAC,qBAAqB,CAAC,GAAG,EAAE;YAChC,SAAS,GAAG,KAAK,CAAC;YAClB,mBAAmB,EAAE,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,QAAQ,EAAE,CAAC;IACX,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC;QAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,QAAQ,CAAC,eAAe;YAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QACzE,IAAI,QAAQ,CAAC,IAAI;YAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,gDAAgD;AAChD,+DAA+D;AAC/D,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;IAClC,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,KAAmB,EAAE,EAAE;QACzD,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,WAAW,IAAI,aAAa,CAAC;QAC5C,IACE,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,yBAAyB;YAC9C,MAAM;YACN,CAAC,CAAC,aAAa,IAAI,aAAa,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC;YACjE,CAAC,YAAY;YACb,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAC9B,CAAC;YACD,YAAY,GAAG,MAAM,CAAC;YACtB,MAAM,CAAC,MAAM,CAAC,WAAW,CACvB,EAAE,IAAI,EAAE,8BAA8B,EAAE,EACxC,+BAA+B,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAC5D,CAAC;YACF,2BAA2B,EAAE,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,YAAY,KAAK,IAAI,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,IAAI,CAAC;AAC7D,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,aAAa,GACjB,OAAO,IAGR,CAAC,GAAG,CAAC;IACN,IAAI,aAAa,EAAE,CAAC,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;IACpE,OAAO,OAAO,OAAO,KAAK,WAAW;QACnC,CAAC,CAAE,OAAO,CAAC,GAA0C,EAAE,CAAC,IAAI,CAAC;QAC7D,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB;IAC3B,MAAM,GAAG,GACP,eAAe,CAAC,6BAA6B,CAAC;QAC9C,eAAe,CAAC,wBAAwB,CAAC;QACzC,eAAe,CAAC,cAAc,CAAC;QAC/B,eAAe,CAAC,SAAS,CAAC;QAC1B,eAAe,CAAC,sBAAsB,CAAC;QACvC,eAAe,CAAC,iBAAiB,CAAC;QAClC,eAAe,CAAC,4BAA4B,CAAC;QAC7C,eAAe,CAAC,uBAAuB,CAAC,CAAC;IAC3C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CAAC,IAAY;IACnD,OAAO,CACL,OAAO,CAAC,6BAA6B,CAAC;QACtC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC;QAClC,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,YAAoB;IACnD,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC;QAC7C,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,+BAA+B,CAAC,UAAU,CAAC;QACtD,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,WAAW,GAAG,+BAA+B,CAAC,UAAU,CAAC;QAC7D,CAAC,CAAC,oBAAoB,EAAE;QACxB,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,MAAM,GAAG,WAAW,IAAI,iBAAiB,EAAE,CAAC;IAClD,OAAO,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;AAC5B,CAAC;AAWD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,SAAS,GAAG,IAAI;IAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9D,OAAO,CAAC,EAAE,CAAC,CAAC;YACZ,OAAO;QACT,CAAC;QAED,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBAC/C,OAAO,CAAC,EAAE,CAAC,CAAC;YACd,CAAC;QACH,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,SAAS,OAAO,CAAC,KAAmB;YAClC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,sBAAsB;gBAAE,OAAO;YACtE,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;gBAAE,OAAO;YAC3C,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;YACrC,IAAI,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;gBAAE,OAAO;YACxD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;YAC9C,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,SAAS,EAAE,KAAK,EAAE,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,WAAW,CACvB,EAAE,IAAI,EAAE,yBAAyB,EAAE,EACnC,+BAA+B,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAC5D,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,WAAW,CAAC,+BAA+B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,WAAW,CAAC,8BAA8B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,WAAW,CAAC,+BAA+B,CAAC,CAAC;AAC/C,CAAC","sourcesContent":["import { agentNativePath } from \"./api-path.js\";\n\n/**\n * Frame Communication (browser)\n *\n * Utilities for communicating with the parent frame via postMessage.\n * Provides typed request/response patterns and message sending.\n */\n\n// ---------------------------------------------------------------------------\n// Low-level parent messaging\n// ---------------------------------------------------------------------------\n\n/**\n * Send a typed message to the parent frame.\n * No-op if running at top level (no parent frame).\n */\nexport function sendToFrame(type: string, data?: any): void {\n  if (typeof window === \"undefined\") return;\n  const target = window.parent !== window ? window.parent : window;\n  const targetOrigin =\n    getFramePostMessageTargetOrigin() || window.location.origin;\n  target.postMessage({ type, data }, targetOrigin);\n}\n\n/**\n * Listen for a specific message type from the parent frame.\n * Returns a cleanup function.\n */\nexport function onFrameMessage(\n  type: string,\n  handler: (data: any) => void,\n): () => void {\n  if (typeof window === \"undefined\") return () => {};\n\n  const listener = (event: MessageEvent) => {\n    if (!isTrustedFrameMessage(event)) return;\n    if (event.data?.type === type) {\n      handler(event.data.data ?? event.data.detail ?? event.data);\n    }\n  };\n  window.addEventListener(\"message\", listener);\n  return () => window.removeEventListener(\"message\", listener);\n}\n\n// ---------------------------------------------------------------------------\n// Frame Origin\n// ---------------------------------------------------------------------------\n\nlet _frameOrigin: string | null = null;\n\nfunction normalizeOrigin(value: unknown): string | null {\n  if (typeof value !== \"string\") return null;\n  if (value === \"null\") return \"null\";\n  try {\n    return new URL(value).origin;\n  } catch {\n    return null;\n  }\n}\n\nexport function getFramePostMessageTargetOrigin(): string | null {\n  const origin = getFrameOrigin();\n  return origin === \"null\" ? \"*\" : origin;\n}\n\nexport function isTrustedFrameMessage(event: MessageEvent): boolean {\n  if (typeof window === \"undefined\") return false;\n\n  const ownOrigin = window.location.origin;\n  if (event.origin === ownOrigin) return true;\n\n  const frameOrigin = getFrameOrigin();\n  if (!frameOrigin) return false;\n  if (frameOrigin === \"null\") {\n    return (\n      event.origin === \"null\" &&\n      (event.source === window.parent || event.source === window)\n    );\n  }\n  if (event.origin !== frameOrigin) return false;\n\n  return event.source === window.parent || event.source === window;\n}\n\n// ---------------------------------------------------------------------------\n// Content-height reporting (for MCP App embeds)\n// ---------------------------------------------------------------------------\n//\n// The embed shell renders this app in a cross-origin iframe and can't measure\n// its content, so we post the real content height for the shell to size to.\n// Only shrinks when the document flows to its natural height — embed layouts\n// must not force `100vh`/`h-screen` on the root, or scrollHeight just equals\n// the iframe height.\nlet _contentHeightReportingStarted = false;\nlet _lastReportedContentHeight = 0;\n\nfunction measureContentHeight(): number {\n  if (typeof document === \"undefined\") return 0;\n  const doc = document.documentElement;\n  const body = document.body;\n  return Math.ceil(\n    Math.max(doc ? doc.scrollHeight : 0, body ? body.scrollHeight : 0),\n  );\n}\n\nfunction reportContentHeight(): void {\n  if (typeof window === \"undefined\" || window.parent === window) return;\n  const height = measureContentHeight();\n  if (!height || Math.abs(height - _lastReportedContentHeight) < 2) return;\n  _lastReportedContentHeight = height;\n  sendToFrame(\"agentNative.contentHeight\", { height });\n}\n\nfunction startContentHeightReporting(): void {\n  if (_contentHeightReportingStarted || typeof window === \"undefined\") return;\n  if (window.parent === window) return;\n  _contentHeightReportingStarted = true;\n  let scheduled = false;\n  const schedule = () => {\n    if (scheduled) return;\n    scheduled = true;\n    window.requestAnimationFrame(() => {\n      scheduled = false;\n      reportContentHeight();\n    });\n  };\n  schedule();\n  for (const delay of [100, 300, 800, 1500]) window.setTimeout(schedule, delay);\n  try {\n    const observer = new ResizeObserver(schedule);\n    if (document.documentElement) observer.observe(document.documentElement);\n    if (document.body) observer.observe(document.body);\n  } catch {\n    window.addEventListener(\"resize\", schedule, { passive: true });\n  }\n  window.addEventListener(\"load\", schedule, { passive: true });\n}\n\n// Listen for frame origin message and cache it.\n// Only accept from the direct parent frame, and only set once.\nif (typeof window !== \"undefined\") {\n  window.addEventListener(\"message\", (event: MessageEvent) => {\n    const eventOrigin = normalizeOrigin(event.origin);\n    const payloadOrigin = normalizeOrigin(event.data?.origin);\n    const origin = eventOrigin ?? payloadOrigin;\n    if (\n      event.data?.type === \"agentNative.frameOrigin\" &&\n      origin &&\n      (!payloadOrigin || payloadOrigin === origin || origin === \"null\") &&\n      !_frameOrigin &&\n      event.source === window.parent\n    ) {\n      _frameOrigin = origin;\n      window.parent.postMessage(\n        { type: \"agentNative.embeddedAppReady\" },\n        getFramePostMessageTargetOrigin() ?? window.location.origin,\n      );\n      startContentHeightReporting();\n    }\n  });\n}\n\n/**\n * Get the frame origin (e.g. \"http://localhost:3334\").\n * Returns null if not running inside a frame iframe.\n */\nexport function getFrameOrigin(): string | null {\n  return _frameOrigin;\n}\n\n/**\n * Returns true if the app is running inside a frame iframe\n * (local dev frame, Builder.io, or any compatible frame).\n */\nexport function isInFrame(): boolean {\n  return _frameOrigin !== null;\n}\n\n/**\n * Get the origin for OAuth callbacks.\n * Always uses the app's own origin (window.location.origin), NOT the frame\n * origin. The redirect URI registered in Google Cloud Console (or any OAuth\n * provider) must match the template app's direct URL, not the dev frame's\n * proxy URL, so this must be consistent regardless of how the app is accessed.\n */\nexport function getCallbackOrigin(): string {\n  return typeof window !== \"undefined\" ? window.location.origin : \"\";\n}\n\nfunction envFlag(name: string): boolean {\n  const value = runtimeEnvValue(name);\n  return value === \"1\" || value === \"true\" || value === true;\n}\n\nfunction runtimeEnvValue(name: string): string | boolean | undefined {\n  const importMetaEnv = (\n    import.meta as unknown as {\n      env?: Record<string, string | boolean | undefined>;\n    }\n  ).env;\n  if (importMetaEnv?.[name] !== undefined) return importMetaEnv[name];\n  return typeof process !== \"undefined\"\n    ? (process.env as Record<string, string | undefined>)?.[name]\n    : undefined;\n}\n\nfunction workspaceOAuthOrigin(): string | null {\n  const raw =\n    runtimeEnvValue(\"VITE_WORKSPACE_OAUTH_ORIGIN\") ||\n    runtimeEnvValue(\"WORKSPACE_OAUTH_ORIGIN\") ||\n    runtimeEnvValue(\"VITE_APP_URL\") ||\n    runtimeEnvValue(\"APP_URL\") ||\n    runtimeEnvValue(\"VITE_BETTER_AUTH_URL\") ||\n    runtimeEnvValue(\"BETTER_AUTH_URL\") ||\n    runtimeEnvValue(\"VITE_WORKSPACE_GATEWAY_URL\") ||\n    runtimeEnvValue(\"WORKSPACE_GATEWAY_URL\");\n  if (typeof raw !== \"string\" || !raw) return null;\n  try {\n    return new URL(raw).origin;\n  } catch {\n    return null;\n  }\n}\n\nfunction shouldUseWorkspaceCallbackRelay(path: string): boolean {\n  return (\n    envFlag(\"VITE_AGENT_NATIVE_WORKSPACE\") &&\n    path.startsWith(\"/_agent-native/\") &&\n    (path.endsWith(\"/callback\") || path.includes(\"/callback/\"))\n  );\n}\n\n/**\n * Build an OAuth redirect URI for a framework callback route.\n *\n * Workspace deploys use one provider-registered root callback URL and then\n * relay to the app-specific callback based on OAuth state. Standalone apps\n * keep using their mounted app callback path.\n */\nexport function oauthRedirectUri(callbackPath: string): string {\n  const normalized = callbackPath.startsWith(\"/\")\n    ? callbackPath\n    : `/${callbackPath}`;\n  const path = shouldUseWorkspaceCallbackRelay(normalized)\n    ? normalized\n    : agentNativePath(normalized);\n  const oauthOrigin = shouldUseWorkspaceCallbackRelay(normalized)\n    ? workspaceOAuthOrigin()\n    : null;\n  const origin = oauthOrigin ?? getCallbackOrigin();\n  return `${origin}${path}`;\n}\n\n// ---------------------------------------------------------------------------\n// User Info\n// ---------------------------------------------------------------------------\n\nexport interface UserInfo {\n  name?: string;\n  email?: string;\n}\n\n/**\n * Request user info (name + email) from the parent frame.\n * Falls back to empty object if frame doesn't respond within timeout.\n */\nexport function requestUserInfo(timeoutMs = 1500): Promise<UserInfo> {\n  return new Promise((resolve) => {\n    if (typeof window === \"undefined\" || window.parent === window) {\n      resolve({});\n      return;\n    }\n\n    let settled = false;\n\n    const timer = setTimeout(() => {\n      if (!settled) {\n        settled = true;\n        window.removeEventListener(\"message\", handler);\n        resolve({});\n      }\n    }, timeoutMs);\n\n    function handler(event: MessageEvent) {\n      if (!event.data || event.data.type !== \"agentNative.userInfo\") return;\n      if (event.source !== window.parent) return;\n      const frameOrigin = getFrameOrigin();\n      if (frameOrigin && event.origin !== frameOrigin) return;\n      if (settled) return;\n      settled = true;\n      clearTimeout(timer);\n      window.removeEventListener(\"message\", handler);\n      const { name, email } = event.data.data ?? {};\n      resolve({ name: name || undefined, email: email || undefined });\n    }\n\n    window.addEventListener(\"message\", handler);\n    window.parent.postMessage(\n      { type: \"agentNative.getUserInfo\" },\n      getFramePostMessageTargetOrigin() ?? window.location.origin,\n    );\n  });\n}\n\n// ---------------------------------------------------------------------------\n// Selection Mode (visual editing)\n// ---------------------------------------------------------------------------\n\n/**\n * Enter visual editing selection mode for a specific element.\n */\nexport function enterStyleEditing(selector: string): void {\n  sendToFrame(\"agentNative.enterStyleEditing\", { selector });\n}\n\n/**\n * Enter text editing mode for a specific element.\n */\nexport function enterTextEditing(selector: string): void {\n  sendToFrame(\"agentNative.enterTextEditing\", { selector });\n}\n\n/**\n * Exit selection mode.\n */\nexport function exitSelectionMode(): void {\n  sendToFrame(\"agentNative.exitSelectionMode\");\n}\n"]}

package/dist/collab/routes.d.ts

@@ -26,8 +26,8 @@ export declare const getCollabState: import("h3").EventHandlerWithFetch<import("
  * Body: { update: string (base64), requestSource?: string }
  */
 export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/file-upload/builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"builder.d.ts","sourceRoot":"","sources":["../../src/file-upload/builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAGnB,MAAM,YAAY,CAAC;AAuJpB;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,EAAE,kBA4DvC,CAAC"}
+{"version":3,"file":"builder.d.ts","sourceRoot":"","sources":["../../src/file-upload/builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAKnB,MAAM,YAAY,CAAC;AA4LpB;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,EAAE,kBAuLvC,CAAC"}

package/dist/file-upload/builder.js

@@ -25,28 +25,12 @@ async function assertOk(res, label) {
     }
 }
 async function uploadLargeFileViaSignedUrl(input, privateKey, bareMimeType, bytes) {
-    const host = builderUploadHost();
-    const authHeader = { Authorization: `Bearer ${privateKey}` };
     const name = input.filename ?? "upload";
     const mb = (bytes.byteLength / (1024 * 1024)).toFixed(1);
     console.log(`[builder-upload] large-file path: ${name} ${mb}MB ${bareMimeType}`);
     // Step 1 — request a signed URL.
     console.log(`[builder-upload] step 1: requesting signed URL`);
-    const step1Res = await fetchWithTimeout(new URL("/api/v1/upload/signed-url", host).toString(), {
-        method: "POST",
-        headers: { ...authHeader, "Content-Type": "application/json" },
-        body: JSON.stringify({
-            fileName: name,
-            contentType: bareMimeType,
-            size: bytes.byteLength,
-        }),
-    });
-    await assertOk(step1Res, "Builder.io signed-URL request failed");
-    const step1Json = (await step1Res.json());
-    const { uploadUrl, assetId, requiredHeaders } = step1Json;
-    if (!uploadUrl || !assetId || !requiredHeaders) {
-        throw new Error(`Builder.io signed-URL response missing required fields: ${JSON.stringify(Object.keys(step1Json))}`);
-    }
+    const { uploadUrl, assetId, requiredHeaders } = await requestBuilderSignedUrl(privateKey, name, bareMimeType, bytes.byteLength);
     console.log(`[builder-upload] step 1 ok: assetId=${assetId}`);
     // Step 2 — PUT bytes directly to GCS. Only requiredHeaders; no Authorization
     // (signed URL carries its own auth — extra signed headers break the signature).
@@ -60,17 +44,52 @@ async function uploadLargeFileViaSignedUrl(input, privateKey, bareMimeType, byte
     console.log(`[builder-upload] step 2 ok [${assetId}]: GCS ${step2Res.status} etag=${step2Res.headers.get("etag") ?? "none"}`);
     // Step 3 — register the asset and get the CDN URL.
     console.log(`[builder-upload] step 3: registering asset - ${assetId}, ${input.filename}`);
-    const step3Res = await fetchWithTimeout(new URL("/api/v1/upload/complete", host).toString(), {
+    const { url, id } = await completeBuilderUpload(privateKey, assetId, input.filename);
+    console.log(`[builder-upload] done [${assetId}]: ${url}`);
+    return { url, id, provider: "builder" };
+}
+async function requestBuilderSignedUrl(privateKey, filename, mimeType, size, resumable = false) {
+    const host = builderUploadHost();
+    const url = new URL("/api/v1/upload/signed-url", host);
+    const res = await fetchWithTimeout(url.toString(), {
         method: "POST",
-        headers: { ...authHeader, "Content-Type": "application/json" },
-        body: JSON.stringify({ assetId, name: input.filename }),
+        headers: {
+            Authorization: `Bearer ${privateKey}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({
+            fileName: filename,
+            contentType: mimeType,
+            size,
+            resumable,
+        }),
+    });
+    await assertOk(res, "Builder.io signed-URL request failed");
+    const json = (await res.json());
+    if (!json.uploadUrl || !json.assetId || !json.requiredHeaders) {
+        throw new Error(`Builder.io signed-URL response missing required fields: ${JSON.stringify(Object.keys(json))}`);
+    }
+    return {
+        uploadUrl: json.uploadUrl,
+        assetId: json.assetId,
+        requiredHeaders: json.requiredHeaders,
+    };
+}
+async function completeBuilderUpload(privateKey, assetId, filename) {
+    const host = builderUploadHost();
+    const res = await fetchWithTimeout(new URL("/api/v1/upload/complete", host).toString(), {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${privateKey}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({ assetId, name: filename }),
     });
-    await assertOk(step3Res, "Builder.io upload complete failed");
-    const { url, id } = (await step3Res.json());
-    if (!url)
+    await assertOk(res, "Builder.io upload complete failed");
+    const json = (await res.json());
+    if (!json.url)
         throw new Error("Builder.io upload/complete returned no URL");
-    console.log(`[builder-upload] done [${assetId}]: ${url}`);
-    return { url, id, provider: "builder" };
+    return { url: json.url, id: json.id };
 }
 // Retry transient 5xx once with backoff. Builder.io's upload service
 // occasionally returns a bodyless 500 ("Internal Error") on the first
@@ -151,5 +170,98 @@ export const builderFileUploadProvider = {
         console.log(`[builder-upload] done: ${json.url}`);
         return { url: json.url, id: json.id, provider: "builder" };
     },
+    resumable: {
+        async startSession(filename, mimeType, maxBytes) {
+            const { resolveBuilderPrivateKey } = await import("../server/credential-provider.js");
+            const privateKey = await resolveBuilderPrivateKey();
+            if (!privateKey)
+                throw new Error("BUILDER_PRIVATE_KEY is not set");
+            console.log(`[builder-resumable] starting session: ${filename} ${mimeType} ${maxBytes} bytes`);
+            const { uploadUrl, assetId, requiredHeaders } = await requestBuilderSignedUrl(privateKey, filename, mimeType, maxBytes, true);
+            console.log(`[builder-resumable] session step 1 ok: assetId=${assetId}`);
+            const initHeaders = {
+                "Content-Type": mimeType,
+                "x-goog-resumable": "start",
+            };
+            const contentLengthRange = requiredHeaders?.["x-goog-content-length-range"];
+            if (contentLengthRange)
+                initHeaders["x-goog-content-length-range"] = contentLengthRange;
+            console.log(`[builder-resumable] session step 2: initiating GCS session`);
+            const initRes = await fetchWithTimeout(uploadUrl, {
+                method: "POST",
+                headers: initHeaders,
+                body: new Uint8Array(0),
+            });
+            if (!initRes.ok) {
+                const body = await initRes.text().catch(() => "");
+                throw new Error(`GCS resumable session initiation failed (${initRes.status}): ${body}`);
+            }
+            const sessionUri = initRes.headers.get("location");
+            if (!sessionUri)
+                throw new Error("GCS did not return a Location header for the resumable session");
+            console.log(`[builder-resumable] session ready: assetId=${assetId}`);
+            return {
+                sessionId: sessionUri,
+                meta: { assetId, filename, mimeType },
+            };
+        },
+        async relayChunk(session, contentRange, bytes, options) {
+            const sessionUri = session.sessionId;
+            const MAX_ATTEMPTS = 4;
+            const RETRYABLE = new Set([408, 429, 500, 502, 503, 504]);
+            const delayMs = (attempt) => Math.min(2000, 300 * 2 ** (attempt - 1));
+            let lastError = null;
+            for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {
+                try {
+                    const headers = {
+                        "Content-Range": contentRange,
+                    };
+                    if (options?.mimeType)
+                        headers["Content-Type"] = options.mimeType;
+                    const res = await fetch(sessionUri, {
+                        method: "PUT",
+                        headers,
+                        body: bytes,
+                    });
+                    if (res.status === 308 || res.ok)
+                        return {
+                            ok: true,
+                            status: res.status,
+                        };
+                    if (RETRYABLE.has(res.status) && attempt < MAX_ATTEMPTS) {
+                        await res.text().catch(() => "");
+                        console.warn(`[builder-resumable] transient ${res.status} on attempt ${attempt}, retrying`);
+                        await new Promise((r) => setTimeout(r, delayMs(attempt)));
+                        continue;
+                    }
+                    return {
+                        ok: false,
+                        status: res.status,
+                    };
+                }
+                catch (err) {
+                    lastError = err;
+                    if (attempt >= MAX_ATTEMPTS)
+                        break;
+                    console.warn(`[builder-resumable] network error on attempt ${attempt}:`, err instanceof Error ? err.message : String(err));
+                    await new Promise((r) => setTimeout(r, delayMs(attempt)));
+                }
+            }
+            throw lastError instanceof Error
+                ? lastError
+                : new Error("GCS PUT failed after retries");
+        },
+        async completeSession(session, filename) {
+            const { resolveBuilderPrivateKey } = await import("../server/credential-provider.js");
+            const privateKey = await resolveBuilderPrivateKey();
+            if (!privateKey)
+                throw new Error("BUILDER_PRIVATE_KEY is not set");
+            const assetId = session.meta.assetId;
+            console.log(`[builder-resumable] completing upload: assetId=${assetId}`);
+            const { url } = await completeBuilderUpload(privateKey, assetId, filename);
+            console.log(`[builder-resumable] upload complete: ${url}`);
+            return url;
+        },
+    },
 };
 //# sourceMappingURL=builder.js.map

package/dist/file-upload/builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"builder.js","sourceRoot":"","sources":["../../src/file-upload/builder.ts"],"names":[],"mappings":"AAMA,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AAEtD,yEAAyE;AACzE,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACpD,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,0BAA0B,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAE/C,SAAS,iBAAiB;IACxB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC5B,OAAO,CAAC,GAAG,CAAC,uBAAuB;QACnC,wBAAwB,CACzB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAiB,EAAE,QAAgB;IACnD,OAAO,OAAO,IAAI,KAAK,WAAW;QAChC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAA4B,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC9D,CAAC,CAAE,KAA6B,CAAC;AACrC,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,IAAiB;IACtD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CACrE,YAAY,CAAC,KAAK,CAAC,CACpB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAa,EAAE,KAAa;IAClD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,GAAG,CAAC,MAAM,MAAM,IAAI,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,KAAsB,EACtB,UAAkB,EAClB,YAAoB,EACpB,KAAiB;IAEjB,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IACjC,MAAM,UAAU,GAAG,EAAE,aAAa,EAAE,UAAU,UAAU,EAAE,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC;IACxC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAEzD,OAAO,CAAC,GAAG,CACT,qCAAqC,IAAI,IAAI,EAAE,MAAM,YAAY,EAAE,CACpE,CAAC;IAEF,iCAAiC;IACjC,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,IAAI,GAAG,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,EACrD;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,GAAG,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC9D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,YAAY;YACzB,IAAI,EAAE,KAAK,CAAC,UAAU;SACvB,CAAC;KACH,CACF,CAAC;IACF,MAAM,QAAQ,CAAC,QAAQ,EAAE,sCAAsC,CAAC,CAAC;IAEjE,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAKvC,CAAC;IACF,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,SAAS,CAAC;IAC1D,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC,eAAe,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,2DAA2D,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CACpG,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,uCAAuC,OAAO,EAAE,CAAC,CAAC;IAE9D,6EAA6E;IAC7E,gFAAgF;IAChF,OAAO,CAAC,GAAG,CAAC,4BAA4B,OAAO,UAAU,EAAE,WAAW,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE;QACjD,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,eAAe;QACxB,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CACT,+BAA+B,OAAO,UAAU,QAAQ,CAAC,MAAM,SAAS,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,EAAE,CACjH,CAAC;IAEF,mDAAmD;IACnD,OAAO,CAAC,GAAG,CACT,gDAAgD,OAAO,KAAK,KAAK,CAAC,QAAQ,EAAE,CAC7E,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,IAAI,GAAG,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,EACnD;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,GAAG,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC9D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;KACxD,CACF,CAAC;IACF,MAAM,QAAQ,CAAC,QAAQ,EAAE,mCAAmC,CAAC,CAAC;IAE9D,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAkC,CAAC;IAC7E,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAExE,OAAO,CAAC,GAAG,CAAC,0BAA0B,OAAO,MAAM,GAAG,EAAE,CAAC,CAAC;IAC1D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAC1C,CAAC;AAED,qEAAqE;AACrE,sEAAsE;AACtE,6DAA6D;AAC7D,KAAK,UAAU,eAAe,CAAC,GAAQ,EAAE,IAAiB;IACxD,IAAI,QAAQ,GAAoB,IAAI,CAAC;IACrC,IAAI,aAAa,GAAG,EAAE,CAAC;IAEvB,KACE,IAAI,OAAO,GAAG,CAAC,EACf,OAAO,IAAI,0BAA0B,CAAC,MAAM,EAC5C,OAAO,EAAE,EACT,CAAC;QACD,MAAM,UAAU,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B;QACpF,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,UAAU;gBAAE,MAAM,GAAG,CAAC;YAC3B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;YACpD,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAC;QACjC,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;QACtE,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU;YAAE,MAAM;QACvC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,QAAQ,EAAE,UAAU,IAAI,aAAa,CAAC;IACzD,MAAM,IAAI,KAAK,CACb,6BAA6B,MAAM,MAAM,aAAa,IAAI,UAAU,EAAE,CACvE,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAuB;IAC3D,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,YAAY;IAClB,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB;IACrD,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAmB,EAAE,EAAE;QAC9D,MAAM,EAAE,wBAAwB,EAAE,GAChC,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,wBAAwB,EAAE,CAAC;QACpD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,iEAAiE;QACjE,qEAAqE;QACrE,qEAAqE;QACrE,sEAAsE;QACtE,iEAAiE;QACjE,oBAAoB;QACpB,MAAM,YAAY,GAAG,CAAC,QAAQ,IAAI,0BAA0B,CAAC;aAC1D,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACb,IAAI,EAAE,CAAC;QAEV,MAAM,KAAK,GACT,IAAI,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAW,CAAC,CAAC;QAClE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAEzD,IAAI,KAAK,CAAC,UAAU,GAAG,0BAA0B,EAAE,CAAC;YAClD,OAAO,2BAA2B,CAChC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAC5B,UAAU,EACV,YAAY,EACZ,KAAK,CACN,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,CACT,qCAAqC,QAAQ,IAAI,QAAQ,IAAI,EAAE,MAAM,YAAY,EAAE,CACpF,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC3D,IAAI,QAAQ;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAErD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE;YAC1C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,UAAU,EAAE;gBACrC,cAAc,EAAE,YAAY;aAC7B;YACD,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;SACpC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAGpD,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAEpE,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAClD,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7D,CAAC;CACF,CAAC","sourcesContent":["import type {\n  FileUploadProvider,\n  FileUploadInput,\n  FileUploadResult,\n} from \"./types.js\";\n\nconst DEFAULT_BUILDER_APP_HOST = \"https://builder.io\";\n\n/** Files larger than this are routed through the GCS signed-URL flow. */\nconst LARGE_FILE_THRESHOLD_BYTES = 30 * 1024 * 1024;\nconst UPLOAD_TIMEOUT_MS = 120_000;\nconst SMALL_FILE_RETRY_DELAYS_MS = [600, 1800];\n\nfunction builderUploadHost(): string {\n  return (\n    process.env.BUILDER_APP_HOST ||\n    process.env.BUILDER_PUBLIC_APP_HOST ||\n    DEFAULT_BUILDER_APP_HOST\n  );\n}\n\nfunction makeBody(bytes: Uint8Array, mimeType: string): BodyInit {\n  return typeof Blob !== \"undefined\"\n    ? new Blob([bytes as unknown as BlobPart], { type: mimeType })\n    : (bytes as unknown as BodyInit);\n}\n\nfunction fetchWithTimeout(url: string, init: RequestInit): Promise<Response> {\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), UPLOAD_TIMEOUT_MS);\n  return fetch(url, { ...init, signal: controller.signal }).finally(() =>\n    clearTimeout(timer),\n  );\n}\n\nasync function assertOk(res: Response, label: string): Promise<void> {\n  if (!res.ok) {\n    const body = await res.text().catch(() => \"\");\n    throw new Error(`${label} (${res.status}): ${body || res.statusText}`);\n  }\n}\n\nasync function uploadLargeFileViaSignedUrl(\n  input: FileUploadInput,\n  privateKey: string,\n  bareMimeType: string,\n  bytes: Uint8Array,\n): Promise<FileUploadResult> {\n  const host = builderUploadHost();\n  const authHeader = { Authorization: `Bearer ${privateKey}` };\n  const name = input.filename ?? \"upload\";\n  const mb = (bytes.byteLength / (1024 * 1024)).toFixed(1);\n\n  console.log(\n    `[builder-upload] large-file path: ${name} ${mb}MB ${bareMimeType}`,\n  );\n\n  // Step 1 — request a signed URL.\n  console.log(`[builder-upload] step 1: requesting signed URL`);\n  const step1Res = await fetchWithTimeout(\n    new URL(\"/api/v1/upload/signed-url\", host).toString(),\n    {\n      method: \"POST\",\n      headers: { ...authHeader, \"Content-Type\": \"application/json\" },\n      body: JSON.stringify({\n        fileName: name,\n        contentType: bareMimeType,\n        size: bytes.byteLength,\n      }),\n    },\n  );\n  await assertOk(step1Res, \"Builder.io signed-URL request failed\");\n\n  const step1Json = (await step1Res.json()) as {\n    uploadUrl?: string;\n    assetId?: string;\n    expiresAt?: string;\n    requiredHeaders?: Record<string, string>;\n  };\n  const { uploadUrl, assetId, requiredHeaders } = step1Json;\n  if (!uploadUrl || !assetId || !requiredHeaders) {\n    throw new Error(\n      `Builder.io signed-URL response missing required fields: ${JSON.stringify(Object.keys(step1Json))}`,\n    );\n  }\n  console.log(`[builder-upload] step 1 ok: assetId=${assetId}`);\n\n  // Step 2 — PUT bytes directly to GCS. Only requiredHeaders; no Authorization\n  // (signed URL carries its own auth — extra signed headers break the signature).\n  console.log(`[builder-upload] step 2 [${assetId}]: PUT ${mb}MB to GCS`);\n  const step2Res = await fetchWithTimeout(uploadUrl, {\n    method: \"PUT\",\n    headers: requiredHeaders,\n    body: makeBody(bytes, bareMimeType),\n  });\n  await assertOk(step2Res, \"GCS upload failed\");\n  console.log(\n    `[builder-upload] step 2 ok [${assetId}]: GCS ${step2Res.status} etag=${step2Res.headers.get(\"etag\") ?? \"none\"}`,\n  );\n\n  // Step 3 — register the asset and get the CDN URL.\n  console.log(\n    `[builder-upload] step 3: registering asset - ${assetId}, ${input.filename}`,\n  );\n  const step3Res = await fetchWithTimeout(\n    new URL(\"/api/v1/upload/complete\", host).toString(),\n    {\n      method: \"POST\",\n      headers: { ...authHeader, \"Content-Type\": \"application/json\" },\n      body: JSON.stringify({ assetId, name: input.filename }),\n    },\n  );\n  await assertOk(step3Res, \"Builder.io upload complete failed\");\n\n  const { url, id } = (await step3Res.json()) as { url?: string; id?: string };\n  if (!url) throw new Error(\"Builder.io upload/complete returned no URL\");\n\n  console.log(`[builder-upload] done [${assetId}]: ${url}`);\n  return { url, id, provider: \"builder\" };\n}\n\n// Retry transient 5xx once with backoff. Builder.io's upload service\n// occasionally returns a bodyless 500 (\"Internal Error\") on the first\n// attempt — usually GCS write hiccups that succeed on retry.\nasync function uploadSmallFile(url: URL, init: RequestInit): Promise<Response> {\n  let response: Response | null = null;\n  let lastErrorBody = \"\";\n\n  for (\n    let attempt = 0;\n    attempt <= SMALL_FILE_RETRY_DELAYS_MS.length;\n    attempt++\n  ) {\n    const retryDelay = SMALL_FILE_RETRY_DELAYS_MS[attempt]; // undefined on last attempt\n    try {\n      response = await fetchWithTimeout(url.toString(), init);\n    } catch (err) {\n      if (!retryDelay) throw err;\n      await new Promise((r) => setTimeout(r, retryDelay));\n      continue;\n    }\n    if (response.ok) return response;\n    lastErrorBody = await response.text().catch(() => \"\");\n    const isTransient = response.status >= 500 && response.status !== 501;\n    if (!isTransient || !retryDelay) break;\n    await new Promise((r) => setTimeout(r, retryDelay));\n  }\n\n  const status = response?.status ?? 0;\n  const statusText = response?.statusText ?? \"no response\";\n  throw new Error(\n    `Builder.io upload failed (${status}): ${lastErrorBody || statusText}`,\n  );\n}\n\n/**\n * Built-in Builder.io file upload provider.\n * Uses the same BUILDER_PRIVATE_KEY as the browser/background-agent flows,\n * so connecting Builder once (via the sidebar \"Connect Builder\" action)\n * automatically enables file uploads.\n *\n * Upload API: https://www.builder.io/c/docs/upload-api\n */\nexport const builderFileUploadProvider: FileUploadProvider = {\n  id: \"builder\",\n  name: \"Builder.io\",\n  isConfigured: () => !!process.env.BUILDER_PRIVATE_KEY,\n  upload: async ({ data, filename, mimeType }: FileUploadInput) => {\n    const { resolveBuilderPrivateKey } =\n      await import(\"../server/credential-provider.js\");\n    const privateKey = await resolveBuilderPrivateKey();\n    if (!privateKey) {\n      throw new Error(\"BUILDER_PRIVATE_KEY is not set\");\n    }\n\n    // Strip any media-type parameters (e.g. `;codecs=avc1,opus` from\n    // MediaRecorder blobs) — Builder's upload API parses the body as raw\n    // binary only when Content-Type is a bare MIME type. A parameterized\n    // Content-Type falls through to the multipart/base64 paths which look\n    // for an `image` field, and returns \"No image specified\" when it\n    // doesn't find one.\n    const bareMimeType = (mimeType || \"application/octet-stream\")\n      .split(\";\")[0]\n      .trim();\n\n    const bytes =\n      data instanceof Uint8Array ? data : new Uint8Array(data as any);\n    const mb = (bytes.byteLength / (1024 * 1024)).toFixed(1);\n\n    if (bytes.byteLength > LARGE_FILE_THRESHOLD_BYTES) {\n      return uploadLargeFileViaSignedUrl(\n        { data, filename, mimeType },\n        privateKey,\n        bareMimeType,\n        bytes,\n      );\n    }\n\n    console.log(\n      `[builder-upload] small-file path: ${filename ?? \"upload\"} ${mb}MB ${bareMimeType}`,\n    );\n\n    const url = new URL(\"/api/v1/upload\", builderUploadHost());\n    if (filename) url.searchParams.set(\"name\", filename);\n\n    const response = await uploadSmallFile(url, {\n      method: \"POST\",\n      headers: {\n        Authorization: `Bearer ${privateKey}`,\n        \"Content-Type\": bareMimeType,\n      },\n      body: makeBody(bytes, bareMimeType),\n    });\n\n    const json = (await response.json().catch(() => ({}))) as {\n      url?: string;\n      id?: string;\n    };\n    if (!json.url) throw new Error(\"Builder.io upload returned no URL\");\n\n    console.log(`[builder-upload] done: ${json.url}`);\n    return { url: json.url, id: json.id, provider: \"builder\" };\n  },\n};\n"]}
+{"version":3,"file":"builder.js","sourceRoot":"","sources":["../../src/file-upload/builder.ts"],"names":[],"mappings":"AAQA,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AAEtD,yEAAyE;AACzE,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACpD,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,0BAA0B,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAE/C,SAAS,iBAAiB;IACxB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC5B,OAAO,CAAC,GAAG,CAAC,uBAAuB;QACnC,wBAAwB,CACzB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAiB,EAAE,QAAgB;IACnD,OAAO,OAAO,IAAI,KAAK,WAAW;QAChC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAA4B,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC9D,CAAC,CAAE,KAA6B,CAAC;AACrC,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,IAAiB;IACtD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CACrE,YAAY,CAAC,KAAK,CAAC,CACpB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAa,EAAE,KAAa;IAClD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,GAAG,CAAC,MAAM,MAAM,IAAI,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,KAAsB,EACtB,UAAkB,EAClB,YAAoB,EACpB,KAAiB;IAEjB,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC;IACxC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAEzD,OAAO,CAAC,GAAG,CACT,qCAAqC,IAAI,IAAI,EAAE,MAAM,YAAY,EAAE,CACpE,CAAC;IAEF,iCAAiC;IACjC,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;IAC9D,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,MAAM,uBAAuB,CAC3E,UAAU,EACV,IAAI,EACJ,YAAY,EACZ,KAAK,CAAC,UAAU,CACjB,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,uCAAuC,OAAO,EAAE,CAAC,CAAC;IAE9D,6EAA6E;IAC7E,gFAAgF;IAChF,OAAO,CAAC,GAAG,CAAC,4BAA4B,OAAO,UAAU,EAAE,WAAW,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE;QACjD,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,eAAe;QACxB,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CACT,+BAA+B,OAAO,UAAU,QAAQ,CAAC,MAAM,SAAS,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,EAAE,CACjH,CAAC;IAEF,mDAAmD;IACnD,OAAO,CAAC,GAAG,CACT,gDAAgD,OAAO,KAAK,KAAK,CAAC,QAAQ,EAAE,CAC7E,CAAC;IACF,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,MAAM,qBAAqB,CAC7C,UAAU,EACV,OAAO,EACP,KAAK,CAAC,QAAQ,CACf,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,0BAA0B,OAAO,MAAM,GAAG,EAAE,CAAC,CAAC;IAC1D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,UAAkB,EAClB,QAAgB,EAChB,QAAgB,EAChB,IAAY,EACZ,SAAS,GAAG,KAAK;IAMjB,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACjD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,UAAU,EAAE;YACrC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,QAAQ;YACrB,IAAI;YACJ,SAAS;SACV,CAAC;KACH,CAAC,CAAC;IACH,MAAM,QAAQ,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CACb,2DAA2D,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAC/F,CAAC;IACJ,CAAC;IACD,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,eAAe,EAAE,IAAI,CAAC,eAAe;KACtC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,UAAkB,EAClB,OAAe,EACf,QAA4B;IAE5B,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAChC,IAAI,GAAG,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,EACnD;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,UAAU,EAAE;YACrC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;KAClD,CACF,CAAC;IACF,MAAM,QAAQ,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkC,CAAC;IACjE,IAAI,CAAC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC7E,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;AACxC,CAAC;AAED,qEAAqE;AACrE,sEAAsE;AACtE,6DAA6D;AAC7D,KAAK,UAAU,eAAe,CAAC,GAAQ,EAAE,IAAiB;IACxD,IAAI,QAAQ,GAAoB,IAAI,CAAC;IACrC,IAAI,aAAa,GAAG,EAAE,CAAC;IAEvB,KACE,IAAI,OAAO,GAAG,CAAC,EACf,OAAO,IAAI,0BAA0B,CAAC,MAAM,EAC5C,OAAO,EAAE,EACT,CAAC;QACD,MAAM,UAAU,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B;QACpF,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,UAAU;gBAAE,MAAM,GAAG,CAAC;YAC3B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;YACpD,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAC;QACjC,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;QACtE,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU;YAAE,MAAM;QACvC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,QAAQ,EAAE,UAAU,IAAI,aAAa,CAAC;IACzD,MAAM,IAAI,KAAK,CACb,6BAA6B,MAAM,MAAM,aAAa,IAAI,UAAU,EAAE,CACvE,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAuB;IAC3D,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,YAAY;IAClB,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB;IACrD,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAmB,EAAE,EAAE;QAC9D,MAAM,EAAE,wBAAwB,EAAE,GAChC,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,wBAAwB,EAAE,CAAC;QACpD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,iEAAiE;QACjE,qEAAqE;QACrE,qEAAqE;QACrE,sEAAsE;QACtE,iEAAiE;QACjE,oBAAoB;QACpB,MAAM,YAAY,GAAG,CAAC,QAAQ,IAAI,0BAA0B,CAAC;aAC1D,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACb,IAAI,EAAE,CAAC;QAEV,MAAM,KAAK,GACT,IAAI,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAW,CAAC,CAAC;QAClE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAEzD,IAAI,KAAK,CAAC,UAAU,GAAG,0BAA0B,EAAE,CAAC;YAClD,OAAO,2BAA2B,CAChC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAC5B,UAAU,EACV,YAAY,EACZ,KAAK,CACN,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,CACT,qCAAqC,QAAQ,IAAI,QAAQ,IAAI,EAAE,MAAM,YAAY,EAAE,CACpF,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC3D,IAAI,QAAQ;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAErD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE;YAC1C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,UAAU,EAAE;gBACrC,cAAc,EAAE,YAAY;aAC7B;YACD,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;SACpC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAGpD,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAEpE,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAClD,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7D,CAAC;IAED,SAAS,EAAE;QACT,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ;YAC7C,MAAM,EAAE,wBAAwB,EAAE,GAChC,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,MAAM,wBAAwB,EAAE,CAAC;YACpD,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAEnE,OAAO,CAAC,GAAG,CACT,yCAAyC,QAAQ,IAAI,QAAQ,IAAI,QAAQ,QAAQ,CAClF,CAAC;YACF,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,GAC3C,MAAM,uBAAuB,CAC3B,UAAU,EACV,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,IAAI,CACL,CAAC;YACJ,OAAO,CAAC,GAAG,CAAC,kDAAkD,OAAO,EAAE,CAAC,CAAC;YAEzE,MAAM,WAAW,GAA2B;gBAC1C,cAAc,EAAE,QAAQ;gBACxB,kBAAkB,EAAE,OAAO;aAC5B,CAAC;YACF,MAAM,kBAAkB,GACtB,eAAe,EAAE,CAAC,6BAA6B,CAAC,CAAC;YACnD,IAAI,kBAAkB;gBACpB,WAAW,CAAC,6BAA6B,CAAC,GAAG,kBAAkB,CAAC;YAElE,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;YAC1E,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE;gBAChD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC;aACxB,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAClD,MAAM,IAAI,KAAK,CACb,4CAA4C,OAAO,CAAC,MAAM,MAAM,IAAI,EAAE,CACvE,CAAC;YACJ,CAAC;YACD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACnD,IAAI,CAAC,UAAU;gBACb,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;YAEJ,OAAO,CAAC,GAAG,CAAC,8CAA8C,OAAO,EAAE,CAAC,CAAC;YACrE,OAAO;gBACL,SAAS,EAAE,UAAU;gBACrB,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE;aACL,CAAC;QACrC,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO;YACpD,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;YACrC,MAAM,YAAY,GAAG,CAAC,CAAC;YACvB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,EAAE,CAClC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;YAE3C,IAAI,SAAS,GAAY,IAAI,CAAC;YAC9B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;gBACzD,IAAI,CAAC;oBACH,MAAM,OAAO,GAA2B;wBACtC,eAAe,EAAE,YAAY;qBAC9B,CAAC;oBACF,IAAI,OAAO,EAAE,QAAQ;wBAAE,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;oBAClE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;wBAClC,MAAM,EAAE,KAAK;wBACb,OAAO;wBACP,IAAI,EAAE,KAA4B;qBACnC,CAAC,CAAC;oBACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,EAAE;wBAC9B,OAAO;4BACL,EAAE,EAAE,IAAI;4BACR,MAAM,EAAE,GAAG,CAAC,MAAM;yBACY,CAAC;oBACnC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,GAAG,YAAY,EAAE,CAAC;wBACxD,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;wBACjC,OAAO,CAAC,IAAI,CACV,iCAAiC,GAAG,CAAC,MAAM,eAAe,OAAO,YAAY,CAC9E,CAAC;wBACF,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;wBAC1D,SAAS;oBACX,CAAC;oBACD,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,MAAM,EAAE,GAAG,CAAC,MAAM;qBACY,CAAC;gBACnC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,SAAS,GAAG,GAAG,CAAC;oBAChB,IAAI,OAAO,IAAI,YAAY;wBAAE,MAAM;oBACnC,OAAO,CAAC,IAAI,CACV,gDAAgD,OAAO,GAAG,EAC1D,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;oBACF,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC;YACD,MAAM,SAAS,YAAY,KAAK;gBAC9B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAChD,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ;YACrC,MAAM,EAAE,wBAAwB,EAAE,GAChC,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,MAAM,wBAAwB,EAAE,CAAC;YACpD,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAEnE,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,OAAiB,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,kDAAkD,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,qBAAqB,CACzC,UAAU,EACV,OAAO,EACP,QAAQ,CACT,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,wCAAwC,GAAG,EAAE,CAAC,CAAC;YAC3D,OAAO,GAAG,CAAC;QACb,CAAC;KACF;CACF,CAAC","sourcesContent":["import type {\n  FileUploadProvider,\n  FileUploadInput,\n  FileUploadResult,\n  ResumableUploadSession,\n  ResumableChunkResult,\n} from \"./types.js\";\n\nconst DEFAULT_BUILDER_APP_HOST = \"https://builder.io\";\n\n/** Files larger than this are routed through the GCS signed-URL flow. */\nconst LARGE_FILE_THRESHOLD_BYTES = 30 * 1024 * 1024;\nconst UPLOAD_TIMEOUT_MS = 120_000;\nconst SMALL_FILE_RETRY_DELAYS_MS = [600, 1800];\n\nfunction builderUploadHost(): string {\n  return (\n    process.env.BUILDER_APP_HOST ||\n    process.env.BUILDER_PUBLIC_APP_HOST ||\n    DEFAULT_BUILDER_APP_HOST\n  );\n}\n\nfunction makeBody(bytes: Uint8Array, mimeType: string): BodyInit {\n  return typeof Blob !== \"undefined\"\n    ? new Blob([bytes as unknown as BlobPart], { type: mimeType })\n    : (bytes as unknown as BodyInit);\n}\n\nfunction fetchWithTimeout(url: string, init: RequestInit): Promise<Response> {\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), UPLOAD_TIMEOUT_MS);\n  return fetch(url, { ...init, signal: controller.signal }).finally(() =>\n    clearTimeout(timer),\n  );\n}\n\nasync function assertOk(res: Response, label: string): Promise<void> {\n  if (!res.ok) {\n    const body = await res.text().catch(() => \"\");\n    throw new Error(`${label} (${res.status}): ${body || res.statusText}`);\n  }\n}\n\nasync function uploadLargeFileViaSignedUrl(\n  input: FileUploadInput,\n  privateKey: string,\n  bareMimeType: string,\n  bytes: Uint8Array,\n): Promise<FileUploadResult> {\n  const name = input.filename ?? \"upload\";\n  const mb = (bytes.byteLength / (1024 * 1024)).toFixed(1);\n\n  console.log(\n    `[builder-upload] large-file path: ${name} ${mb}MB ${bareMimeType}`,\n  );\n\n  // Step 1 — request a signed URL.\n  console.log(`[builder-upload] step 1: requesting signed URL`);\n  const { uploadUrl, assetId, requiredHeaders } = await requestBuilderSignedUrl(\n    privateKey,\n    name,\n    bareMimeType,\n    bytes.byteLength,\n  );\n  console.log(`[builder-upload] step 1 ok: assetId=${assetId}`);\n\n  // Step 2 — PUT bytes directly to GCS. Only requiredHeaders; no Authorization\n  // (signed URL carries its own auth — extra signed headers break the signature).\n  console.log(`[builder-upload] step 2 [${assetId}]: PUT ${mb}MB to GCS`);\n  const step2Res = await fetchWithTimeout(uploadUrl, {\n    method: \"PUT\",\n    headers: requiredHeaders,\n    body: makeBody(bytes, bareMimeType),\n  });\n  await assertOk(step2Res, \"GCS upload failed\");\n  console.log(\n    `[builder-upload] step 2 ok [${assetId}]: GCS ${step2Res.status} etag=${step2Res.headers.get(\"etag\") ?? \"none\"}`,\n  );\n\n  // Step 3 — register the asset and get the CDN URL.\n  console.log(\n    `[builder-upload] step 3: registering asset - ${assetId}, ${input.filename}`,\n  );\n  const { url, id } = await completeBuilderUpload(\n    privateKey,\n    assetId,\n    input.filename,\n  );\n  console.log(`[builder-upload] done [${assetId}]: ${url}`);\n  return { url, id, provider: \"builder\" };\n}\n\nasync function requestBuilderSignedUrl(\n  privateKey: string,\n  filename: string,\n  mimeType: string,\n  size: number,\n  resumable = false,\n): Promise<{\n  uploadUrl: string;\n  assetId: string;\n  requiredHeaders: Record<string, string>;\n}> {\n  const host = builderUploadHost();\n  const url = new URL(\"/api/v1/upload/signed-url\", host);\n  const res = await fetchWithTimeout(url.toString(), {\n    method: \"POST\",\n    headers: {\n      Authorization: `Bearer ${privateKey}`,\n      \"Content-Type\": \"application/json\",\n    },\n    body: JSON.stringify({\n      fileName: filename,\n      contentType: mimeType,\n      size,\n      resumable,\n    }),\n  });\n  await assertOk(res, \"Builder.io signed-URL request failed\");\n  const json = (await res.json()) as {\n    uploadUrl?: string;\n    assetId?: string;\n    requiredHeaders?: Record<string, string>;\n  };\n  if (!json.uploadUrl || !json.assetId || !json.requiredHeaders) {\n    throw new Error(\n      `Builder.io signed-URL response missing required fields: ${JSON.stringify(Object.keys(json))}`,\n    );\n  }\n  return {\n    uploadUrl: json.uploadUrl,\n    assetId: json.assetId,\n    requiredHeaders: json.requiredHeaders,\n  };\n}\n\nasync function completeBuilderUpload(\n  privateKey: string,\n  assetId: string,\n  filename: string | undefined,\n): Promise<{ url: string; id?: string }> {\n  const host = builderUploadHost();\n  const res = await fetchWithTimeout(\n    new URL(\"/api/v1/upload/complete\", host).toString(),\n    {\n      method: \"POST\",\n      headers: {\n        Authorization: `Bearer ${privateKey}`,\n        \"Content-Type\": \"application/json\",\n      },\n      body: JSON.stringify({ assetId, name: filename }),\n    },\n  );\n  await assertOk(res, \"Builder.io upload complete failed\");\n  const json = (await res.json()) as { url?: string; id?: string };\n  if (!json.url) throw new Error(\"Builder.io upload/complete returned no URL\");\n  return { url: json.url, id: json.id };\n}\n\n// Retry transient 5xx once with backoff. Builder.io's upload service\n// occasionally returns a bodyless 500 (\"Internal Error\") on the first\n// attempt — usually GCS write hiccups that succeed on retry.\nasync function uploadSmallFile(url: URL, init: RequestInit): Promise<Response> {\n  let response: Response | null = null;\n  let lastErrorBody = \"\";\n\n  for (\n    let attempt = 0;\n    attempt <= SMALL_FILE_RETRY_DELAYS_MS.length;\n    attempt++\n  ) {\n    const retryDelay = SMALL_FILE_RETRY_DELAYS_MS[attempt]; // undefined on last attempt\n    try {\n      response = await fetchWithTimeout(url.toString(), init);\n    } catch (err) {\n      if (!retryDelay) throw err;\n      await new Promise((r) => setTimeout(r, retryDelay));\n      continue;\n    }\n    if (response.ok) return response;\n    lastErrorBody = await response.text().catch(() => \"\");\n    const isTransient = response.status >= 500 && response.status !== 501;\n    if (!isTransient || !retryDelay) break;\n    await new Promise((r) => setTimeout(r, retryDelay));\n  }\n\n  const status = response?.status ?? 0;\n  const statusText = response?.statusText ?? \"no response\";\n  throw new Error(\n    `Builder.io upload failed (${status}): ${lastErrorBody || statusText}`,\n  );\n}\n\n/**\n * Built-in Builder.io file upload provider.\n * Uses the same BUILDER_PRIVATE_KEY as the browser/background-agent flows,\n * so connecting Builder once (via the sidebar \"Connect Builder\" action)\n * automatically enables file uploads.\n *\n * Upload API: https://www.builder.io/c/docs/upload-api\n */\nexport const builderFileUploadProvider: FileUploadProvider = {\n  id: \"builder\",\n  name: \"Builder.io\",\n  isConfigured: () => !!process.env.BUILDER_PRIVATE_KEY,\n  upload: async ({ data, filename, mimeType }: FileUploadInput) => {\n    const { resolveBuilderPrivateKey } =\n      await import(\"../server/credential-provider.js\");\n    const privateKey = await resolveBuilderPrivateKey();\n    if (!privateKey) {\n      throw new Error(\"BUILDER_PRIVATE_KEY is not set\");\n    }\n\n    // Strip any media-type parameters (e.g. `;codecs=avc1,opus` from\n    // MediaRecorder blobs) — Builder's upload API parses the body as raw\n    // binary only when Content-Type is a bare MIME type. A parameterized\n    // Content-Type falls through to the multipart/base64 paths which look\n    // for an `image` field, and returns \"No image specified\" when it\n    // doesn't find one.\n    const bareMimeType = (mimeType || \"application/octet-stream\")\n      .split(\";\")[0]\n      .trim();\n\n    const bytes =\n      data instanceof Uint8Array ? data : new Uint8Array(data as any);\n    const mb = (bytes.byteLength / (1024 * 1024)).toFixed(1);\n\n    if (bytes.byteLength > LARGE_FILE_THRESHOLD_BYTES) {\n      return uploadLargeFileViaSignedUrl(\n        { data, filename, mimeType },\n        privateKey,\n        bareMimeType,\n        bytes,\n      );\n    }\n\n    console.log(\n      `[builder-upload] small-file path: ${filename ?? \"upload\"} ${mb}MB ${bareMimeType}`,\n    );\n\n    const url = new URL(\"/api/v1/upload\", builderUploadHost());\n    if (filename) url.searchParams.set(\"name\", filename);\n\n    const response = await uploadSmallFile(url, {\n      method: \"POST\",\n      headers: {\n        Authorization: `Bearer ${privateKey}`,\n        \"Content-Type\": bareMimeType,\n      },\n      body: makeBody(bytes, bareMimeType),\n    });\n\n    const json = (await response.json().catch(() => ({}))) as {\n      url?: string;\n      id?: string;\n    };\n    if (!json.url) throw new Error(\"Builder.io upload returned no URL\");\n\n    console.log(`[builder-upload] done: ${json.url}`);\n    return { url: json.url, id: json.id, provider: \"builder\" };\n  },\n\n  resumable: {\n    async startSession(filename, mimeType, maxBytes) {\n      const { resolveBuilderPrivateKey } =\n        await import(\"../server/credential-provider.js\");\n      const privateKey = await resolveBuilderPrivateKey();\n      if (!privateKey) throw new Error(\"BUILDER_PRIVATE_KEY is not set\");\n\n      console.log(\n        `[builder-resumable] starting session: ${filename} ${mimeType} ${maxBytes} bytes`,\n      );\n      const { uploadUrl, assetId, requiredHeaders } =\n        await requestBuilderSignedUrl(\n          privateKey,\n          filename,\n          mimeType,\n          maxBytes,\n          true,\n        );\n      console.log(`[builder-resumable] session step 1 ok: assetId=${assetId}`);\n\n      const initHeaders: Record<string, string> = {\n        \"Content-Type\": mimeType,\n        \"x-goog-resumable\": \"start\",\n      };\n      const contentLengthRange =\n        requiredHeaders?.[\"x-goog-content-length-range\"];\n      if (contentLengthRange)\n        initHeaders[\"x-goog-content-length-range\"] = contentLengthRange;\n\n      console.log(`[builder-resumable] session step 2: initiating GCS session`);\n      const initRes = await fetchWithTimeout(uploadUrl, {\n        method: \"POST\",\n        headers: initHeaders,\n        body: new Uint8Array(0),\n      });\n      if (!initRes.ok) {\n        const body = await initRes.text().catch(() => \"\");\n        throw new Error(\n          `GCS resumable session initiation failed (${initRes.status}): ${body}`,\n        );\n      }\n      const sessionUri = initRes.headers.get(\"location\");\n      if (!sessionUri)\n        throw new Error(\n          \"GCS did not return a Location header for the resumable session\",\n        );\n\n      console.log(`[builder-resumable] session ready: assetId=${assetId}`);\n      return {\n        sessionId: sessionUri,\n        meta: { assetId, filename, mimeType },\n      } satisfies ResumableUploadSession;\n    },\n\n    async relayChunk(session, contentRange, bytes, options) {\n      const sessionUri = session.sessionId;\n      const MAX_ATTEMPTS = 4;\n      const RETRYABLE = new Set([408, 429, 500, 502, 503, 504]);\n      const delayMs = (attempt: number) =>\n        Math.min(2000, 300 * 2 ** (attempt - 1));\n\n      let lastError: unknown = null;\n      for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {\n        try {\n          const headers: Record<string, string> = {\n            \"Content-Range\": contentRange,\n          };\n          if (options?.mimeType) headers[\"Content-Type\"] = options.mimeType;\n          const res = await fetch(sessionUri, {\n            method: \"PUT\",\n            headers,\n            body: bytes as unknown as BodyInit,\n          });\n          if (res.status === 308 || res.ok)\n            return {\n              ok: true,\n              status: res.status,\n            } satisfies ResumableChunkResult;\n          if (RETRYABLE.has(res.status) && attempt < MAX_ATTEMPTS) {\n            await res.text().catch(() => \"\");\n            console.warn(\n              `[builder-resumable] transient ${res.status} on attempt ${attempt}, retrying`,\n            );\n            await new Promise((r) => setTimeout(r, delayMs(attempt)));\n            continue;\n          }\n          return {\n            ok: false,\n            status: res.status,\n          } satisfies ResumableChunkResult;\n        } catch (err) {\n          lastError = err;\n          if (attempt >= MAX_ATTEMPTS) break;\n          console.warn(\n            `[builder-resumable] network error on attempt ${attempt}:`,\n            err instanceof Error ? err.message : String(err),\n          );\n          await new Promise((r) => setTimeout(r, delayMs(attempt)));\n        }\n      }\n      throw lastError instanceof Error\n        ? lastError\n        : new Error(\"GCS PUT failed after retries\");\n    },\n\n    async completeSession(session, filename) {\n      const { resolveBuilderPrivateKey } =\n        await import(\"../server/credential-provider.js\");\n      const privateKey = await resolveBuilderPrivateKey();\n      if (!privateKey) throw new Error(\"BUILDER_PRIVATE_KEY is not set\");\n\n      const assetId = session.meta.assetId as string;\n      console.log(`[builder-resumable] completing upload: assetId=${assetId}`);\n      const { url } = await completeBuilderUpload(\n        privateKey,\n        assetId,\n        filename,\n      );\n      console.log(`[builder-resumable] upload complete: ${url}`);\n      return url;\n    },\n  },\n};\n"]}

package/dist/file-upload/index.d.ts

@@ -1,4 +1,4 @@
-export type { FileUploadInput, FileUploadProvider, FileUploadResult, } from "./types.js";
+export type { FileUploadInput, FileUploadProvider, FileUploadResult, ResumableUploadSession, ResumableChunkResult, } from "./types.js";
 export { registerFileUploadProvider, unregisterFileUploadProvider, listFileUploadProviders, getActiveFileUploadProvider, getActiveFileUploadProviderForRequest, uploadFile, } from "./registry.js";
 export { builderFileUploadProvider } from "./builder.js";
 export { preUploadImageAttachments, preUploadAttachments, isFileUploadProviderConfigured, type PreUploadAttachmentsResult, type PreUploadedImageAttachment, type PreUploadedFileAttachment, } from "./pre-upload-attachments.js";

package/dist/file-upload/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/file-upload/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,uBAAuB,EACvB,2BAA2B,EAC3B,qCAAqC,EACrC,UAAU,GACX,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,8BAA8B,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,GAC/B,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/file-upload/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,uBAAuB,EACvB,2BAA2B,EAC3B,qCAAqC,EACrC,UAAU,GACX,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,8BAA8B,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,GAC/B,MAAM,6BAA6B,CAAC"}

package/dist/file-upload/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/file-upload/index.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,uBAAuB,EACvB,2BAA2B,EAC3B,qCAAqC,EACrC,UAAU,GACX,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,8BAA8B,GAI/B,MAAM,6BAA6B,CAAC","sourcesContent":["export type {\n  FileUploadInput,\n  FileUploadProvider,\n  FileUploadResult,\n} from \"./types.js\";\nexport {\n  registerFileUploadProvider,\n  unregisterFileUploadProvider,\n  listFileUploadProviders,\n  getActiveFileUploadProvider,\n  getActiveFileUploadProviderForRequest,\n  uploadFile,\n} from \"./registry.js\";\nexport { builderFileUploadProvider } from \"./builder.js\";\nexport {\n  preUploadImageAttachments,\n  preUploadAttachments,\n  isFileUploadProviderConfigured,\n  type PreUploadAttachmentsResult,\n  type PreUploadedImageAttachment,\n  type PreUploadedFileAttachment,\n} from \"./pre-upload-attachments.js\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/file-upload/index.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,uBAAuB,EACvB,2BAA2B,EAC3B,qCAAqC,EACrC,UAAU,GACX,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,8BAA8B,GAI/B,MAAM,6BAA6B,CAAC","sourcesContent":["export type {\n  FileUploadInput,\n  FileUploadProvider,\n  FileUploadResult,\n  ResumableUploadSession,\n  ResumableChunkResult,\n} from \"./types.js\";\nexport {\n  registerFileUploadProvider,\n  unregisterFileUploadProvider,\n  listFileUploadProviders,\n  getActiveFileUploadProvider,\n  getActiveFileUploadProviderForRequest,\n  uploadFile,\n} from \"./registry.js\";\nexport { builderFileUploadProvider } from \"./builder.js\";\nexport {\n  preUploadImageAttachments,\n  preUploadAttachments,\n  isFileUploadProviderConfigured,\n  type PreUploadAttachmentsResult,\n  type PreUploadedImageAttachment,\n  type PreUploadedFileAttachment,\n} from \"./pre-upload-attachments.js\";\n"]}

package/dist/file-upload/types.d.ts

@@ -24,6 +24,20 @@ export interface FileUploadResult {
     /** The provider that handled the upload. */
     provider: string;
 }
+/** Opaque session handle returned by {@link FileUploadProvider.resumable.startSession}.
+ * `sessionId` is provider-specific (GCS Location URI, S3 UploadId, etc.).
+ * `meta` holds any provider state needed for subsequent relay and complete calls. */
+export interface ResumableUploadSession {
+    sessionId: string;
+    meta: Record<string, unknown>;
+}
+export interface ResumableChunkResult {
+    ok: boolean;
+    status: number;
+    /** Providers that need per-chunk state (e.g. S3 ETags) return updated meta
+     * here; the chunk route merges it back into the stored session. */
+    updatedMeta?: Record<string, unknown>;
+}
 export interface FileUploadProvider {
     /** Unique id, e.g. "builder", "s3". */
     id: string;
@@ -38,5 +52,17 @@ export interface FileUploadProvider {
     isConfiguredForRequest?: () => Promise<boolean>;
     /** Upload a file and return a URL. Throw on failure. */
     upload: (input: FileUploadInput) => Promise<FileUploadResult>;
+    /**
+     * Optional resumable/streaming upload capability.
+     * When present, create-recording will initialise a session and stream chunks
+     * during recording instead of assembling the full blob after stop().
+     */
+    resumable?: {
+        startSession(filename: string, mimeType: string, maxBytes: number): Promise<ResumableUploadSession>;
+        relayChunk(session: ResumableUploadSession, contentRange: string, bytes: Uint8Array, options?: {
+            mimeType?: string;
+        }): Promise<ResumableChunkResult>;
+        completeSession(session: ResumableUploadSession, filename: string): Promise<string>;
+    };
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/file-upload/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/file-upload/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,eAAe;IAC9B,qBAAqB;IACrB,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC;IAC1B,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,gDAAgD;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,0EAA0E;IAC1E,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,YAAY,EAAE,MAAM,OAAO,CAAC;IAC5B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,wDAAwD;IACxD,MAAM,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC/D"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/file-upload/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,eAAe;IAC9B,qBAAqB;IACrB,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC;IAC1B,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,gDAAgD;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,0EAA0E;IAC1E,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;qFAEqF;AACrF,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf;uEACmE;IACnE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,kBAAkB;IACjC,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,YAAY,EAAE,MAAM,OAAO,CAAC;IAC5B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,wDAAwD;IACxD,MAAM,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9D;;;;OAIG;IACH,SAAS,CAAC,EAAE;QACV,YAAY,CACV,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,sBAAsB,CAAC,CAAC;QACnC,UAAU,CACR,OAAO,EAAE,sBAAsB,EAC/B,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,UAAU,EACjB,OAAO,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;SAAE,GAC9B,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACjC,eAAe,CACb,OAAO,EAAE,sBAAsB,EAC/B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,CAAC;KACpB,CAAC;CACH"}

package/dist/file-upload/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/file-upload/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG","sourcesContent":["/**\n * File upload framework primitive.\n *\n * Templates call `uploadFile()` to upload a file and get back a URL.\n * The framework dispatches to whichever provider is registered (Builder.io\n * built-in, or a user-supplied one). If no provider is active, it falls back\n * to the SQL resources store — fine for dev, not recommended for production.\n */\n\nexport interface FileUploadInput {\n  /** File contents. */\n  data: Uint8Array | Buffer;\n  /** Original filename, used for extension/display. */\n  filename?: string;\n  /** MIME type, e.g. \"image/png\". */\n  mimeType?: string;\n  /** Optional owner email for per-user scoping in fallback storage. */\n  ownerEmail?: string;\n}\n\nexport interface FileUploadResult {\n  /** Public URL where the file can be fetched. */\n  url: string;\n  /** Optional provider-specific id (e.g. resource id, Builder asset id). */\n  id?: string;\n  /** The provider that handled the upload. */\n  provider: string;\n}\n\nexport interface FileUploadProvider {\n  /** Unique id, e.g. \"builder\", \"s3\". */\n  id: string;\n  /** Human-readable name. */\n  name: string;\n  /** Returns true if this provider is configured from synchronous runtime state. */\n  isConfigured: () => boolean;\n  /**\n   * Returns true if this provider is configured for the active request.\n   * Use for DB-backed user/org/workspace secrets that require request context.\n   */\n  isConfiguredForRequest?: () => Promise<boolean>;\n  /** Upload a file and return a URL. Throw on failure. */\n  upload: (input: FileUploadInput) => Promise<FileUploadResult>;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/file-upload/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG","sourcesContent":["/**\n * File upload framework primitive.\n *\n * Templates call `uploadFile()` to upload a file and get back a URL.\n * The framework dispatches to whichever provider is registered (Builder.io\n * built-in, or a user-supplied one). If no provider is active, it falls back\n * to the SQL resources store — fine for dev, not recommended for production.\n */\n\nexport interface FileUploadInput {\n  /** File contents. */\n  data: Uint8Array | Buffer;\n  /** Original filename, used for extension/display. */\n  filename?: string;\n  /** MIME type, e.g. \"image/png\". */\n  mimeType?: string;\n  /** Optional owner email for per-user scoping in fallback storage. */\n  ownerEmail?: string;\n}\n\nexport interface FileUploadResult {\n  /** Public URL where the file can be fetched. */\n  url: string;\n  /** Optional provider-specific id (e.g. resource id, Builder asset id). */\n  id?: string;\n  /** The provider that handled the upload. */\n  provider: string;\n}\n\n/** Opaque session handle returned by {@link FileUploadProvider.resumable.startSession}.\n * `sessionId` is provider-specific (GCS Location URI, S3 UploadId, etc.).\n * `meta` holds any provider state needed for subsequent relay and complete calls. */\nexport interface ResumableUploadSession {\n  sessionId: string;\n  meta: Record<string, unknown>;\n}\n\nexport interface ResumableChunkResult {\n  ok: boolean;\n  status: number;\n  /** Providers that need per-chunk state (e.g. S3 ETags) return updated meta\n   * here; the chunk route merges it back into the stored session. */\n  updatedMeta?: Record<string, unknown>;\n}\n\nexport interface FileUploadProvider {\n  /** Unique id, e.g. \"builder\", \"s3\". */\n  id: string;\n  /** Human-readable name. */\n  name: string;\n  /** Returns true if this provider is configured from synchronous runtime state. */\n  isConfigured: () => boolean;\n  /**\n   * Returns true if this provider is configured for the active request.\n   * Use for DB-backed user/org/workspace secrets that require request context.\n   */\n  isConfiguredForRequest?: () => Promise<boolean>;\n  /** Upload a file and return a URL. Throw on failure. */\n  upload: (input: FileUploadInput) => Promise<FileUploadResult>;\n  /**\n   * Optional resumable/streaming upload capability.\n   * When present, create-recording will initialise a session and stream chunks\n   * during recording instead of assembling the full blob after stop().\n   */\n  resumable?: {\n    startSession(\n      filename: string,\n      mimeType: string,\n      maxBytes: number,\n    ): Promise<ResumableUploadSession>;\n    relayChunk(\n      session: ResumableUploadSession,\n      contentRange: string,\n      bytes: Uint8Array,\n      options?: { mimeType?: string },\n    ): Promise<ResumableChunkResult>;\n    completeSession(\n      session: ResumableUploadSession,\n      filename: string,\n    ): Promise<string>;\n  };\n}\n"]}

package/dist/mcp/build-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build-server.d.ts","sourceRoot":"","sources":["../../src/mcp/build-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AASH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAgChE,MAAM,WAAW,SAAS;IACxB,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sBAAsB;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,KAAK,CAAC,EAAE,KAAK,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;KAC1B,CAAC,CAAC;IACH,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrC;;;;;;;;;;;OAWG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChD,qEAAqE;IACrE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,gEAAgE;IAChE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uEAAuE;IACvE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;kEAGkE;AAClE,MAAM,WAAW,cAAc;IAC7B,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;IAC5C;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,iBAAiB,GAAG,SAAS,GACtC,OAAO,CAgBT;AA8YD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,cAAc,GAAG,SAAS,GAC/B;IACD,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,CA2BA;AA+hBD;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,SAAS,EACjB,QAAQ,EAAE,iBAAiB,GAAG,SAAS,EACvC,WAAW,CAAC,EAAE,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAse7B;AAOD,wBAAgB,eAAe,IAAI,MAAM,EAAE,CAc1C;AAyCD,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,MAAM,GAAG,SAAS,CAIpB;AA+FD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,gBAAgB,CAAC,EAAE,MAAM,EACzB,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;CAAO,GACxE,OAAO,CAAC;IACT,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC,CA4ID;AAED,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAS7B;AAED,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,iBAAiB,GAAG,SAAS,GACtC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAc7B"}
+{"version":3,"file":"build-server.d.ts","sourceRoot":"","sources":["../../src/mcp/build-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AASH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAgChE,MAAM,WAAW,SAAS;IACxB,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sBAAsB;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,KAAK,CAAC,EAAE,KAAK,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;KAC1B,CAAC,CAAC;IACH,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrC;;;;;;;;;;;OAWG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChD,qEAAqE;IACrE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,gEAAgE;IAChE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uEAAuE;IACvE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;kEAGkE;AAClE,MAAM,WAAW,cAAc;IAC7B,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;IAC5C;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,iBAAiB,GAAG,SAAS,GACtC,OAAO,CAgBT;AA0ZD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,cAAc,GAAG,SAAS,GAC/B;IACD,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,CA2BA;AA+hBD;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,SAAS,EACjB,QAAQ,EAAE,iBAAiB,GAAG,SAAS,EACvC,WAAW,CAAC,EAAE,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAof7B;AAOD,wBAAgB,eAAe,IAAI,MAAM,EAAE,CAc1C;AAyCD,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,MAAM,GAAG,SAAS,CAIpB;AA+FD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,gBAAgB,CAAC,EAAE,MAAM,EACzB,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;CAAO,GACxE,OAAO,CAAC;IACT,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC,CA4ID;AAED,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAS7B;AAED,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,iBAAiB,GAAG,SAAS,GACtC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAc7B"}

package/dist/mcp/build-server.js

@@ -239,6 +239,21 @@ function purgeEmbedStartUrls(value, depth = 0) {
     }
     return value;
 }
+// True when a tool result carries SOME content. An errored/no-plan result comes
+// back empty (`{}` / null) and would render an empty embed box. We gate on "has
+// content", not "has a URL" — valid embeds often carry data but no URL (the
+// shell mints the embed-start itself).
+function mcpResultHasContent(result) {
+    if (result == null)
+        return false;
+    if (typeof result === "string")
+        return result.trim().length > 0;
+    if (Array.isArray(result))
+        return result.length > 0;
+    if (typeof result === "object")
+        return Object.keys(result).length > 0;
+    return Boolean(result);
+}
 function mcpAppEmbedOpenLinkMeta(result, resource, meta) {
     const out = metadataObject(result);
     const embedStartUrl = typeof out.embedStartUrl === "string"
@@ -494,7 +509,7 @@ function safeUiSegment(value, fallback) {
 }
 // ChatGPT and Claude cache MCP App resource HTML by `ui://` URI. Bump this
 // when the shared shell changes in a way that must invalidate host caches.
-const MCP_APP_RESOURCE_SHELL_VERSION = "shell-v54";
+const MCP_APP_RESOURCE_SHELL_VERSION = "shell-v64";
 function legacyDefaultMcpAppUri(config, actionName) {
     const app = safeUiSegment(config.appId ?? config.name, "agent-native");
     const action = safeUiSegment(actionName, "tool");
@@ -1133,12 +1148,22 @@ export async function createMCPServerForRequest(config, identity, requestMeta) {
                 // branch below degrades to the plain deep-link artifacts the tool would
                 // otherwise return — no `openai/outputTemplate`, no minted embed-start,
                 // no embed structuredContent — so the host shows a link, not an iframe.
-                const mcpAppResource = requestMeta?.inlineMcpApps
+                const mcpAppResourceCandidate = requestMeta?.inlineMcpApps
                     ? await resolveMcpAppResourceSafely(config, name, entry, requestMeta)
                     : null;
-                const rawResultForClient = mcpAppResource
+                const rawResultForClient = mcpAppResourceCandidate
                     ? await withServerMintedMcpAppEmbedStart(rawResult, requestMeta)
                     : rawResult;
+                // Only attach the embed widget for a non-error result that has content.
+                const embedHasContent = mcpResultHasContent(rawResultForClient);
+                const mcpAppResource = mcpAppResourceCandidate && !mcpResultIsError && embedHasContent
+                    ? mcpAppResourceCandidate
+                    : null;
+                // `openai/outputTemplate` is declared at the tool level, so the host
+                // renders a widget for every call regardless of result _meta. The only
+                // per-result signal it honors is `isError` (shows error text, no widget),
+                // so treat an embed tool that produced nothing as an error.
+                const embedProducedNothing = !!mcpAppResourceCandidate && !mcpResultIsError && !embedHasContent;
                 const { block, _meta } = buildLinkArtifacts(entry, args ?? {}, rawResultForClient, requestMeta);
                 const responseMeta = {
                     ...(_meta ?? {}),
@@ -1168,7 +1193,9 @@ export async function createMCPServerForRequest(config, identity, requestMeta) {
                     content.push(block);
                 return {
                     content,
-                    ...(mcpResultIsError ? { isError: true } : {}),
+                    ...(mcpResultIsError || embedProducedNothing
+                        ? { isError: true }
+                        : {}),
                     ...(structuredContent ? { structuredContent } : {}),
                     ...(Object.keys(responseMeta).length > 0
                         ? { _meta: responseMeta }