@agent-native/core 0.90.3 → 0.90.4

package/dist/cli/design-connect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"design-connect.d.ts","sourceRoot":"","sources":["../../src/cli/design-connect.ts"],"names":[],"mappings":"AAIA,OAAa,EAEX,KAAK,MAAM,EAEZ,MAAM,WAAW,CAAC;AAcnB,QAAA,MAAM,iBAAiB,YACrB,QAAQ,EACR,mBAAmB,EACnB,UAAU,EACV,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,WAAW,CACH,CAAC;AAEX,KAAK,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,kFAAkF;AAClF,QAAA,MAAM,qBAAqB;aACzB,SAAS;aACT,aAAa;aACb,cAAc;CACN,CAAC;AAEX,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;mFAG+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,cAAc,GAAG,MAAM,GAAG,QAAQ,CAAC;CAChD;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,6BAA6B,CAAC;IACtC,UAAU,EAAE,WAAW,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,KAAK,CAAC;QAClB,SAAS,EAAE,eAAe,CAAC;QAC3B,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,UAAU,CAAC;QAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH;;;;OAIG;IACH,oBAAoB,EAAE,OAAO,qBAAqB,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,qBAAqB,CAAC;IAChC;;kFAE8E;IAC9E,WAAW,EAAE,MAAM,CAAC;CACrB;AAyBD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAqExE;AAiED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,EAAE,CA+CvE;AAgFD,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,IAAI,CAAC,qBAAqB,EAAE,cAAc,GAAG,UAAU,CAAC,EACjE,SAAS,EAAE,IAAI,CAAC,qBAAqB,EAAE,cAAc,GAAG,UAAU,CAAC,GAClE,OAAO,CAaT;AA6CD,wBAAsB,4BAA4B,CAChD,OAAO,GAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3D,OAAO,CAAC,qBAAqB,CAAC,CA2ChC;AAoTD,MAAM,WAAW,aAAa;IAC5B,oFAAoF;IACpF,OAAO,EAAE,MAAM,CAAC;IAChB,mEAAmE;IACnE,QAAQ,EAAE,OAAO,CAAC;IAClB,qEAAqE;IACrE,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,EAAE,CAchE;AAgCD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,aAAa,EAAE,EACtB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,OAAO,GACb,OAAO,CAET;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;IAAE,SAAS,EAAE,aAAa,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1D,OAAO,CA4BT;AAqBD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;CACpB;AAuGD,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,qBAAqB,GAC9B,OAAO,CAAC,mBAAmB,CAAC,CAyU9B;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAmBnE;AAiBD;;;;;;;;;GASG;AACH,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,mBAAmB,EAC3B,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAsDf;AAuHD,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,mBAwD7C"}
+{"version":3,"file":"design-connect.d.ts","sourceRoot":"","sources":["../../src/cli/design-connect.ts"],"names":[],"mappings":"AAIA,OAAa,EAEX,KAAK,MAAM,EAEZ,MAAM,WAAW,CAAC;AAcnB,QAAA,MAAM,iBAAiB,YACrB,QAAQ,EACR,mBAAmB,EACnB,UAAU,EACV,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,WAAW,CACH,CAAC;AAEX,KAAK,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,kFAAkF;AAClF,QAAA,MAAM,qBAAqB;aACzB,SAAS;aACT,aAAa;aACb,cAAc;CACN,CAAC;AAEX,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;mFAG+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,cAAc,GAAG,MAAM,GAAG,QAAQ,CAAC;CAChD;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,6BAA6B,CAAC;IACtC,UAAU,EAAE,WAAW,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,KAAK,CAAC;QAClB,SAAS,EAAE,eAAe,CAAC;QAC3B,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,UAAU,CAAC;QAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH;;;;OAIG;IACH,oBAAoB,EAAE,OAAO,qBAAqB,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,qBAAqB,CAAC;IAChC;;kFAE8E;IAC9E,WAAW,EAAE,MAAM,CAAC;CACrB;AAyBD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAqExE;AAiED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,EAAE,CA+CvE;AAgFD,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,IAAI,CAAC,qBAAqB,EAAE,cAAc,GAAG,UAAU,CAAC,EACjE,SAAS,EAAE,IAAI,CAAC,qBAAqB,EAAE,cAAc,GAAG,UAAU,CAAC,GAClE,OAAO,CAaT;AA6CD,wBAAsB,4BAA4B,CAChD,OAAO,GAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3D,OAAO,CAAC,qBAAqB,CAAC,CA2ChC;AAubD,MAAM,WAAW,aAAa;IAC5B,oFAAoF;IACpF,OAAO,EAAE,MAAM,CAAC;IAChB,mEAAmE;IACnE,QAAQ,EAAE,OAAO,CAAC;IAClB,qEAAqE;IACrE,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,EAAE,CAchE;AAgCD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,aAAa,EAAE,EACtB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,OAAO,GACb,OAAO,CAET;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;IAAE,SAAS,EAAE,aAAa,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1D,OAAO,CA4BT;AAqBD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;CACpB;AAuGD,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,qBAAqB,GAC9B,OAAO,CAAC,mBAAmB,CAAC,CA8b9B;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAmBnE;AAiBD;;;;;;;;;GASG;AACH,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,mBAAmB,EAC3B,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAsDf;AAuHD,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,mBAwD7C"}

package/dist/cli/design-connect.js

@@ -414,6 +414,36 @@ function sendJson(res, statusCode, body) {
     });
     res.end(`${JSON.stringify(body, null, 2)}\n`);
 }
+function sendText(res, statusCode, body, contentType) {
+    res.writeHead(statusCode, {
+        "content-type": contentType,
+        "access-control-allow-origin": "*",
+        "access-control-allow-methods": "GET, POST, OPTIONS",
+        "access-control-allow-headers": "content-type, x-bridge-token",
+        "access-control-allow-private-network": "true",
+    });
+    res.end(body);
+}
+function sendBytes(res, statusCode, body, headers) {
+    const responseHeaders = {
+        "access-control-allow-origin": "*",
+        "access-control-allow-methods": "GET, HEAD, POST, OPTIONS",
+        "access-control-allow-headers": "content-type, x-bridge-token",
+        "access-control-allow-private-network": "true",
+    };
+    for (const name of [
+        "content-type",
+        "cache-control",
+        "etag",
+        "last-modified",
+    ]) {
+        const value = headers.get(name);
+        if (value)
+            responseHeaders[name] = value;
+    }
+    res.writeHead(statusCode, responseHeaders);
+    res.end(body);
+}
 function sameOrigin(a, b) {
     try {
         return new URL(a).origin === new URL(b).origin;
@@ -434,6 +464,16 @@ function resolvePreviewSnapshotUrl(devServerUrl, rawUrl) {
     }
     return parsed.toString();
 }
+function resolvePreviewProxyUrl(devServerUrl, requestUrl) {
+    const base = normalizeHttpUrl(devServerUrl);
+    const parsedRequest = new URL(requestUrl ?? "/", base);
+    const parsed = new URL(`${parsedRequest.pathname}${parsedRequest.search}`, `${base}/`);
+    parsed.hash = "";
+    if (!sameOrigin(parsed.toString(), base)) {
+        throw new Error("Proxy URL must stay on the connected dev server.");
+    }
+    return parsed.toString();
+}
 async function fetchPreviewSnapshot(devServerUrl, targetUrl, redirects = 0) {
     if (redirects > 5) {
         throw new Error("Too many redirects while fetching preview snapshot.");
@@ -469,6 +509,63 @@ async function fetchPreviewSnapshot(devServerUrl, targetUrl, redirects = 0) {
         clearTimeout(timeout);
     }
 }
+async function fetchPreviewProxyResource(devServerUrl, targetUrl, redirects = 0) {
+    if (redirects > 5) {
+        throw new Error("Too many redirects while proxying preview resource.");
+    }
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), 10_000);
+    try {
+        const response = await fetch(targetUrl, {
+            method: "GET",
+            redirect: "manual",
+            signal: controller.signal,
+        });
+        const location = response.headers.get("location");
+        if (location && response.status >= 300 && response.status < 400) {
+            const redirected = new URL(location, targetUrl);
+            redirected.hash = "";
+            if (!sameOrigin(redirected.toString(), devServerUrl)) {
+                throw new Error("Proxy redirect left the connected dev server.");
+            }
+            return fetchPreviewProxyResource(devServerUrl, redirected.toString(), redirects + 1);
+        }
+        return {
+            url: response.url || targetUrl,
+            status: response.status,
+            headers: response.headers,
+            body: Buffer.from(await response.arrayBuffer()),
+        };
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+function addLiveEditBaseHref(html, href) {
+    const escapedHref = href.replace(/&/g, "&amp;").replace(/"/g, "&quot;");
+    const baseTag = `<base href="${escapedHref}">`;
+    if (/<base\b/i.test(html))
+        return html;
+    if (/<head\b[^>]*>/i.test(html)) {
+        return html.replace(/<head\b[^>]*>/i, (match) => `${match}${baseTag}`);
+    }
+    if (/<html\b[^>]*>/i.test(html)) {
+        return html.replace(/<html\b[^>]*>/i, (match) => `${match}<head>${baseTag}</head>`);
+    }
+    return `<!DOCTYPE html><html><head>${baseTag}<meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"></head><body>${html}</body></html>`;
+}
+function injectLiveEditBridge(html, targetUrl, script) {
+    const withBase = addLiveEditBaseHref(html, targetUrl);
+    if (!script)
+        return withBase;
+    if (withBase.includes("</body>")) {
+        return withBase.replace("</body>", `${script}</body>`);
+    }
+    if (withBase.includes("</html>")) {
+        return withBase.replace("</html>", `${script}</html>`);
+    }
+    return `${withBase}${script}`;
+}
 /** Read the full request body as a UTF-8 string. */
 async function readRequestBody(req) {
     return new Promise((resolve, reject) => {
@@ -881,6 +978,7 @@ export async function startDesignConnectBridge(manifest) {
     // an unauthenticated caller cannot read it.  The server-side grant action
     // obtains it out-of-band (via the exported bridge reference).
     const bridgeToken = crypto.randomBytes(32).toString("hex");
+    let liveEditBridgeScript = "";
     const server = http.createServer((req, res) => {
         if (req.method === "OPTIONS") {
             sendJson(res, 204, {});
@@ -907,6 +1005,78 @@ export async function startDesignConnectBridge(manifest) {
             sendJson(res, 200, { ok: true, source: manifest.source });
             return;
         }
+        if (pathname === "/live-edit-bridge") {
+            if (req.method !== "POST") {
+                sendJson(res, 405, { ok: false, error: "method not allowed" });
+                return;
+            }
+            const tokenHeader = req.headers["x-bridge-token"];
+            const providedToken = typeof tokenHeader === "string" ? tokenHeader : "";
+            let tokenValid = false;
+            try {
+                tokenValid =
+                    providedToken.length === bridgeToken.length &&
+                        crypto.timingSafeEqual(Buffer.from(providedToken, "utf8"), Buffer.from(bridgeToken, "utf8"));
+            }
+            catch {
+                tokenValid = false;
+            }
+            if (!tokenValid) {
+                sendJson(res, 401, {
+                    ok: false,
+                    error: "invalid or missing bridge token",
+                });
+                return;
+            }
+            void (async () => {
+                try {
+                    const raw = await readRequestBody(req);
+                    const body = JSON.parse(raw);
+                    const script = typeof body["script"] === "string" ? body["script"] : "";
+                    if (!script.includes("agent-native:editor-chrome-ready")) {
+                        sendJson(res, 400, {
+                            ok: false,
+                            error: "script must install the Agent Native editor bridge",
+                        });
+                        return;
+                    }
+                    liveEditBridgeScript = script;
+                    sendJson(res, 200, { ok: true });
+                }
+                catch (err) {
+                    sendJson(res, 400, {
+                        ok: false,
+                        error: err instanceof Error ? err.message : String(err),
+                    });
+                }
+            })();
+            return;
+        }
+        if (pathname === "/live-edit") {
+            if (req.method !== "GET") {
+                sendJson(res, 405, { ok: false, error: "method not allowed" });
+                return;
+            }
+            void (async () => {
+                try {
+                    const requestUrl = new URL(req.url ?? "/", manifest.bridgeUrl);
+                    const targetUrl = resolvePreviewSnapshotUrl(manifest.devServerUrl, requestUrl.searchParams.get("url") ??
+                        requestUrl.searchParams.get("path"));
+                    const snapshot = await fetchPreviewSnapshot(manifest.devServerUrl, targetUrl);
+                    const html = injectLiveEditBridge(snapshot.html, new URL("/", manifest.bridgeUrl).toString(), liveEditBridgeScript);
+                    sendText(res, snapshot.status >= 400 ? snapshot.status : 200, html, snapshot.contentType.includes("html")
+                        ? snapshot.contentType
+                        : "text/html; charset=utf-8");
+                }
+                catch (err) {
+                    sendJson(res, 400, {
+                        ok: false,
+                        error: err instanceof Error ? err.message : String(err),
+                    });
+                }
+            })();
+            return;
+        }
         if (pathname === "/snapshot") {
             if (req.method !== "GET") {
                 sendJson(res, 405, { ok: false, error: "method not allowed" });
@@ -1148,6 +1318,22 @@ export async function startDesignConnectBridge(manifest) {
             })();
             return;
         }
+        if (req.method === "GET" || req.method === "HEAD") {
+            void (async () => {
+                try {
+                    const targetUrl = resolvePreviewProxyUrl(manifest.devServerUrl, req.url);
+                    const proxied = await fetchPreviewProxyResource(manifest.devServerUrl, targetUrl);
+                    sendBytes(res, proxied.status >= 400 ? proxied.status : 200, req.method === "HEAD" ? Buffer.alloc(0) : proxied.body, proxied.headers);
+                }
+                catch (err) {
+                    sendJson(res, 400, {
+                        ok: false,
+                        error: err instanceof Error ? err.message : String(err),
+                    });
+                }
+            })();
+            return;
+        }
         sendJson(res, 404, { ok: false, error: "not found" });
     });
     await new Promise((resolve, reject) => {