@antelopejs/dms-ai 0.3.0 → 0.4.1

package/package.json

@@ -1,6 +1,20 @@
 {
   "name": "@antelopejs/dms-ai",
-  "version": "0.3.0",
+  "version": "0.4.1",
+  "description": "AI development assistant for the AntelopeJS DMS: a chat panel next to every page and a coding agent that edits the project in reviewable, undoable change sets.",
+  "keywords": [
+    "ai",
+    "antelopejs",
+    "assistant",
+    "claude-code",
+    "codex",
+    "dms",
+    "dms-module"
+  ],
+  "homepage": "https://dms.antelopejs.com/docs/modules/ai",
+  "bugs": {
+    "url": "https://github.com/AntelopeJS/dms-ai/issues"
+  },
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -29,7 +43,7 @@
   },
   "scripts": {
     "build": "rimraf dist && tsc",
-    "build:sidecar": "cd sidecar && pnpm install && pnpm run build",
+    "build:sidecar": "pnpm --dir sidecar run build",
     "prepack": "pnpm run build && pnpm run build:sidecar",
     "frontend:dev": "cd playground && pnpm frontend:dev",
     "dev": "cd playground && pnpm dev",
@@ -46,15 +60,15 @@
     "test:sidecar-lifecycle": "node --test tests/sidecar-lifecycle.test.cjs",
     "test:build-id": "node --test tests/build-id.test.cjs",
     "test:e2e": "cd sidecar && pnpm test:e2e",
-    "release": "pnpm --dir frontend-vue install --frozen-lockfile && pnpm --dir sidecar install --frozen-lockfile && release-it",
+    "release": "pnpm install --frozen-lockfile && release-it",
     "format": "oxfmt --disable-nested-config . && cd frontend-vue && pnpm format",
     "knip": "knip --dependencies",
     "knip:all": "knip"
   },
   "dependencies": {
-    "@antelopejs/interface-api": ">=0.0.14 <1.0.0",
-    "@antelopejs/interface-core": ">=0.1.1 <1.0.0",
-    "@antelopejs/interface-dms": ">=0.7.0 <1.0.0",
+    "@antelopejs/interface-api": ">=0.0.15 <1.0.0",
+    "@antelopejs/interface-core": ">=0.2.4 <1.0.0",
+    "@antelopejs/interface-dms": ">=0.7.2 <1.0.0",
     "@anthropic-ai/claude-agent-sdk": "^0.2.131",
     "@anthropic-ai/claude-code": "^2.1.131",
     "@modelcontextprotocol/sdk": "1.29.0",
@@ -62,7 +76,7 @@
     "zod": "^4.0.0"
   },
   "devDependencies": {
-    "@antelopejs/tooling-configs": ">=0.0.7 <1.0.0",
+    "@antelopejs/tooling-configs": ">=0.0.9 <1.0.0",
     "@types/node": "^24.0.0",
     "@types/ws": "^8.5.12",
     "knip": "^6.34.0",
@@ -83,7 +97,7 @@
     }
   },
   "optionalDependencies": {
-    "@antelopejs/interface-dms-builder": ">=0.1.3 <1.0.0"
+    "@antelopejs/interface-dms-builder": ">=0.2.1 <1.0.0"
   },
   "packageManager": "pnpm@10.2.0",
   "antelopeJs": {

package/sidecar/dist/constants/mcp.js

@@ -1,6 +1,7 @@
 import { BUILDER_TOOL_NAMES } from "./builder.js";
 import { QUERY_LOGS_TOOL_NAME } from "./logs.js";
 import { FIND_PAGES_TOOL_NAME, LIST_PAGES_TOOL_NAME } from "./pages.js";
+import { PREVIEW_BLOCKS_TOOL_NAME } from "./preview.js";
 import { REQUEST_TIMEOUT_MINUTES } from "../state/settings-types.js";
 import { QUESTION_TIMEOUT_MS } from "./questions.js";
 import { MS_PER_MINUTE } from "./settings.js";
@@ -35,6 +36,7 @@ export const FIRST_PARTY_AUTO_ALLOW_TOOL_NAMES = new Set([
     FIND_PAGES_TOOL_NAME,
     LIST_PAGES_TOOL_NAME,
     ASK_USER_TOOL_NAME,
+    PREVIEW_BLOCKS_TOOL_NAME,
     TYPECHECK_TOOL_NAME,
     QUERY_LOGS_TOOL_NAME,
     ...BUILDER_TOOL_NAMES,

package/sidecar/dist/constants/mcp.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/constants/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC;AAC5C,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAC1C,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAC;AACvC,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAc,CAAC;AAGlD,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAQ,cAAc,IAAI,CAAC;AAE/D,MAAM,CAAC,MAAM,0BAA0B,GAAG,gBAAgB,CAAC;AAC3D,MAAM,CAAC,MAAM,iCAAiC,GAC5C,mHAAmH,CAAC;AAEtH,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AACnD,MAAM,CAAC,MAAM,yBAAyB,GACpC,8LAA8L,CAAC;AACjM,MAAM,CAAC,MAAM,sBAAsB,GAAG,0BAA0B,CAAC;AACjE,MAAM,CAAC,MAAM,gCAAgC,GAAG,cAAc,CAAC;AAC/D,MAAM,CAAC,MAAM,8BAA8B,GACzC,uCAAuC,CAAC;AAG1C,MAAM,CAAC,MAAM,6BAA6B,GAAG,2BAA2B,CAAC;AAIzE,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAC;AAClE,MAAM,CAAC,MAAM,6BAA6B,GACxC,yDAAyD,CAAC;AAC5D,MAAM,CAAC,MAAM,2BAA2B,GACtC,0DAA0D,CAAC;AAE7D,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAE5C,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAC5C,MAAM,CAAC,MAAM,yBAAyB,GACpC,4UAA4U,CAAC;AAC/U,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;AACvD,MAAM,CAAC,MAAM,uBAAuB,GAClC,qDAAqD,CAAC;AACxD,MAAM,CAAC,MAAM,yBAAyB,GACpC,oEAAoE,CAAC;AAMvE,MAAM,CAAC,MAAM,mCAAmC,GAAG,iBAAiB,CAAC;AACrE,MAAM,CAAC,MAAM,kCAAkC,GAAG,kDAAkD,oBAAoB,GAAG,kBAAkB,0DAA0D,CAAC;AAQxM,MAAM,CAAC,MAAM,iCAAiC,GAAwB,IAAI,GAAG,CAC3E;IACE,0BAA0B;IAC1B,kBAAkB;IAClB,oBAAoB;IACpB,oBAAoB;IACpB,kBAAkB;IAClB,mBAAmB;IACnB,oBAAoB;IACpB,GAAG,kBAAkB;CACtB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,oBAAoB,GAAG,IAAI,EAAE,CAAC,CAClD,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AAEpC,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,aAAa,EAAE,CAAC;AAC/E,MAAM,CAAC,MAAM,mBAAmB,GAAG,QAAQ,CAAC;AAC5C,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe,CAAC;AACxD,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAAC;AAG3C,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,WAAW;IACX,WAAW;IACX,KAAK;IACL,OAAO;CACR,CAAC;AAEF,MAAM,aAAa,GAAG,KAAK,CAAC;AAI5B,MAAM,oBAAoB,GAAG,IAAI,CAAC,GAAG,CACnC,mBAAmB,EACnB,IAAI,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC,GAAG,aAAa,CACrD,CAAC;AAIF,MAAM,yBAAyB,GAAG,CAAC,GAAG,aAAa,CAAC;AAMpD,MAAM,CAAC,MAAM,mBAAmB,GAC9B,oBAAoB,GAAG,yBAAyB,CAAC;AACnD,MAAM,CAAC,MAAM,oBAAoB,GAAG,mBAAmB,GAAG,aAAa,CAAC"}
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/constants/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC;AAC5C,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAC1C,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAC;AACvC,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAc,CAAC;AAGlD,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAQ,cAAc,IAAI,CAAC;AAE/D,MAAM,CAAC,MAAM,0BAA0B,GAAG,gBAAgB,CAAC;AAC3D,MAAM,CAAC,MAAM,iCAAiC,GAC5C,mHAAmH,CAAC;AAEtH,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AACnD,MAAM,CAAC,MAAM,yBAAyB,GACpC,8LAA8L,CAAC;AACjM,MAAM,CAAC,MAAM,sBAAsB,GAAG,0BAA0B,CAAC;AACjE,MAAM,CAAC,MAAM,gCAAgC,GAAG,cAAc,CAAC;AAC/D,MAAM,CAAC,MAAM,8BAA8B,GACzC,uCAAuC,CAAC;AAG1C,MAAM,CAAC,MAAM,6BAA6B,GAAG,2BAA2B,CAAC;AAIzE,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAC;AAClE,MAAM,CAAC,MAAM,6BAA6B,GACxC,yDAAyD,CAAC;AAC5D,MAAM,CAAC,MAAM,2BAA2B,GACtC,0DAA0D,CAAC;AAE7D,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAE5C,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAC5C,MAAM,CAAC,MAAM,yBAAyB,GACpC,4UAA4U,CAAC;AAC/U,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;AACvD,MAAM,CAAC,MAAM,uBAAuB,GAClC,qDAAqD,CAAC;AACxD,MAAM,CAAC,MAAM,yBAAyB,GACpC,oEAAoE,CAAC;AAMvE,MAAM,CAAC,MAAM,mCAAmC,GAAG,iBAAiB,CAAC;AACrE,MAAM,CAAC,MAAM,kCAAkC,GAAG,kDAAkD,oBAAoB,GAAG,kBAAkB,0DAA0D,CAAC;AAQxM,MAAM,CAAC,MAAM,iCAAiC,GAAwB,IAAI,GAAG,CAC3E;IACE,0BAA0B;IAC1B,kBAAkB;IAClB,oBAAoB;IACpB,oBAAoB;IACpB,kBAAkB;IAClB,wBAAwB;IACxB,mBAAmB;IACnB,oBAAoB;IACpB,GAAG,kBAAkB;CACtB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,oBAAoB,GAAG,IAAI,EAAE,CAAC,CAClD,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AAEpC,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,aAAa,EAAE,CAAC;AAC/E,MAAM,CAAC,MAAM,mBAAmB,GAAG,QAAQ,CAAC;AAC5C,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe,CAAC;AACxD,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAAC;AAG3C,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,WAAW;IACX,WAAW;IACX,KAAK;IACL,OAAO;CACR,CAAC;AAEF,MAAM,aAAa,GAAG,KAAK,CAAC;AAI5B,MAAM,oBAAoB,GAAG,IAAI,CAAC,GAAG,CACnC,mBAAmB,EACnB,IAAI,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC,GAAG,aAAa,CACrD,CAAC;AAIF,MAAM,yBAAyB,GAAG,CAAC,GAAG,aAAa,CAAC;AAMpD,MAAM,CAAC,MAAM,mBAAmB,GAC9B,oBAAoB,GAAG,yBAAyB,CAAC;AACnD,MAAM,CAAC,MAAM,oBAAoB,GAAG,mBAAmB,GAAG,aAAa,CAAC"}

package/sidecar/dist/constants/preview.d.ts

@@ -0,0 +1,39 @@
+export declare const PREVIEW_BLOCKS_TOOL_NAME = "PreviewBlocks";
+export declare const PREVIEW_BLOCKS_TOOL_DESCRIPTION = "Shows the user a live preview of DMS blocks as an attachment in the chat: a card they open to see the real blocks rendered, next to their own mockup when you pass it as `reference`, with one tab per variant. A view may carry a `sketch` instead of (or beside) its `tree`: static HTML and CSS of a custom component you propose, drawn in a sandbox and labelled as not a DMS block, so the user compares it with the DMS option before any code is written. Use it to settle a visual choice before building (DMS block as is versus custom, or between layouts), then ask the decision with AskUser. It returns at once with the preview id; it does not wait for the user and changes nothing in the project.";
+export declare const PREVIEW_MAX_DEPTH = 8;
+export declare const PREVIEW_MAX_NODES = 200;
+export declare const PREVIEW_MAX_VARIANTS = 4;
+export declare const PREVIEW_MAX_ROOTS = 12;
+export declare const PREVIEW_MAX_TITLE_CHARS = 120;
+export declare const PREVIEW_MAX_LABEL_CHARS = 60;
+export declare const PREVIEW_MAX_DESCRIPTION_CHARS = 2000;
+export declare const PREVIEW_MAX_CAPTION_CHARS = 200;
+export declare const PREVIEW_MAX_URL_CHARS = 2048;
+export declare const PREVIEW_MAX_JSON_BYTES: number;
+export declare const PREVIEW_SKETCH_MIN_HEIGHT_PX = 80;
+export declare const PREVIEW_SKETCH_DEFAULT_HEIGHT_PX = 320;
+export declare const PREVIEW_SKETCH_MAX_HEIGHT_PX = 1200;
+export declare const PREVIEW_LATEST_ATTACHMENT_ID = "latest";
+export declare const PREVIEW_SAME_ORIGIN_PATH: RegExp;
+export declare const PREVIEW_REMOTE_URL: RegExp;
+export declare const PREVIEW_IMAGE_MIME_PREFIX = "image/";
+export declare const PREVIEW_URL_OPTION_KEY: RegExp;
+export declare const PREVIEW_ERROR_CODES: {
+    readonly INVALID_TREE: "invalid_tree";
+    readonly TOO_LARGE: "too_large";
+    readonly UNKNOWN_ATTACHMENT: "unknown_attachment";
+    readonly INVALID_URL: "invalid_url";
+    readonly INVALID_SKETCH: "invalid_sketch";
+};
+export declare const PREVIEW_SKETCH_FORBIDDEN: ReadonlyArray<readonly [RegExp, string]>;
+export declare const PREVIEW_RESULT_SHOWN = "Preview shown to the user as an attachment. If it settles a choice, ask it now with AskUser.";
+export declare const PREVIEW_ERROR_NO_TYPE = "Every node needs a `type` (a block type from BuilderCatalog) or a `componentName`.";
+export declare const PREVIEW_ERROR_DEPTH = "The tree is nested deeper than 8 levels.";
+export declare const PREVIEW_ERROR_NODES = "The preview has more than 200 nodes in all; show a smaller part of the page.";
+export declare const PREVIEW_ERROR_BYTES = "The preview's trees and sketches are larger than 65536 bytes of JSON; show a smaller part of the page.";
+export declare const PREVIEW_ERROR_NO_ATTACHMENTS = "The user attached no image in this conversation; leave `reference.attachmentId` out.";
+export declare const PREVIEW_ERROR_UNKNOWN_ATTACHMENT = "No image of that name was attached in this conversation. Attached images: ";
+export declare const PREVIEW_ERROR_OPTION_URL = "Options ending in `Url` (and `location`) must be same-origin paths such as `/api/orders`, or the preview refuses the block. Offending option: ";
+export declare const PREVIEW_ERROR_EMPTY_VIEW = "Every view (the preview and each variant) needs a `tree`, a `sketch`, or both.";
+export declare const PREVIEW_ERROR_SKETCH = "A sketch is static HTML and CSS: inline images and fonts as data: URLs, and use no script, event handler, external resource or embedded frame. Refused: ";
+export declare const PREVIEW_ERROR_URL = "`reference.url` must be a same-origin path (`/media/...`) or an http(s) URL.";

package/sidecar/dist/constants/preview.js

@@ -0,0 +1,55 @@
+export const PREVIEW_BLOCKS_TOOL_NAME = "PreviewBlocks";
+export const PREVIEW_BLOCKS_TOOL_DESCRIPTION = "Shows the user a live preview of DMS blocks as an attachment in the chat: a card they open to see the real blocks rendered, next to their own mockup when you pass it as `reference`, with one tab per variant. A view may carry a `sketch` instead of (or beside) its `tree`: static HTML and CSS of a custom component you propose, drawn in a sandbox and labelled as not a DMS block, so the user compares it with the DMS option before any code is written. Use it to settle a visual choice before building (DMS block as is versus custom, or between layouts), then ask the decision with AskUser. It returns at once with the preview id; it does not wait for the user and changes nothing in the project.";
+export const PREVIEW_MAX_DEPTH = 8;
+export const PREVIEW_MAX_NODES = 200;
+export const PREVIEW_MAX_VARIANTS = 4;
+export const PREVIEW_MAX_ROOTS = 12;
+export const PREVIEW_MAX_TITLE_CHARS = 120;
+export const PREVIEW_MAX_LABEL_CHARS = 60;
+export const PREVIEW_MAX_DESCRIPTION_CHARS = 2_000;
+export const PREVIEW_MAX_CAPTION_CHARS = 200;
+export const PREVIEW_MAX_URL_CHARS = 2_048;
+export const PREVIEW_MAX_JSON_BYTES = 64 * 1024;
+export const PREVIEW_SKETCH_MIN_HEIGHT_PX = 80;
+export const PREVIEW_SKETCH_DEFAULT_HEIGHT_PX = 320;
+export const PREVIEW_SKETCH_MAX_HEIGHT_PX = 1_200;
+export const PREVIEW_LATEST_ATTACHMENT_ID = "latest";
+export const PREVIEW_SAME_ORIGIN_PATH = /^\/(?![/\\])/;
+export const PREVIEW_REMOTE_URL = /^https?:\/\//i;
+export const PREVIEW_IMAGE_MIME_PREFIX = "image/";
+export const PREVIEW_URL_OPTION_KEY = /(?:Url|^location)$/;
+export const PREVIEW_ERROR_CODES = {
+    INVALID_TREE: "invalid_tree",
+    TOO_LARGE: "too_large",
+    UNKNOWN_ATTACHMENT: "unknown_attachment",
+    INVALID_URL: "invalid_url",
+    INVALID_SKETCH: "invalid_sketch",
+};
+export const PREVIEW_SKETCH_FORBIDDEN = [
+    [/<\s*script\b/i, "a <script> element"],
+    [
+        /<\s*(?:iframe|frame|frameset|object|embed|applet|portal|link|base)\b/i,
+        "an embedding or linking element (iframe, object, embed, link, base)",
+    ],
+    [/<\s*meta\b[^>]*http-equiv/i, "a <meta http-equiv>"],
+    [/<[^>]*[\s/"']on[a-z]+\s*=/i, "an on* event handler attribute"],
+    [/(?:java|vb)script\s*:/i, "a javascript: URL"],
+    [/@import\b/i, "a CSS @import"],
+    [/url\(\s*(?!['"]?\s*data:)/i, "a url() that is not a data: URL"],
+    [
+        /<[^>]*\s(?:src|srcset|href|xlink:href|poster|action|formaction|background|data|ping)\s*=\s*(?!['"]?\s*(?:data:|#))/i,
+        "a src, href or similar attribute that is not a data: URL or an #anchor",
+    ],
+];
+export const PREVIEW_RESULT_SHOWN = "Preview shown to the user as an attachment. If it settles a choice, ask it now with AskUser.";
+export const PREVIEW_ERROR_NO_TYPE = "Every node needs a `type` (a block type from BuilderCatalog) or a `componentName`.";
+export const PREVIEW_ERROR_DEPTH = `The tree is nested deeper than ${PREVIEW_MAX_DEPTH} levels.`;
+export const PREVIEW_ERROR_NODES = `The preview has more than ${PREVIEW_MAX_NODES} nodes in all; show a smaller part of the page.`;
+export const PREVIEW_ERROR_BYTES = `The preview's trees and sketches are larger than ${PREVIEW_MAX_JSON_BYTES} bytes of JSON; show a smaller part of the page.`;
+export const PREVIEW_ERROR_NO_ATTACHMENTS = "The user attached no image in this conversation; leave `reference.attachmentId` out.";
+export const PREVIEW_ERROR_UNKNOWN_ATTACHMENT = "No image of that name was attached in this conversation. Attached images: ";
+export const PREVIEW_ERROR_OPTION_URL = "Options ending in `Url` (and `location`) must be same-origin paths such as `/api/orders`, or the preview refuses the block. Offending option: ";
+export const PREVIEW_ERROR_EMPTY_VIEW = "Every view (the preview and each variant) needs a `tree`, a `sketch`, or both.";
+export const PREVIEW_ERROR_SKETCH = "A sketch is static HTML and CSS: inline images and fonts as data: URLs, and use no script, event handler, external resource or embedded frame. Refused: ";
+export const PREVIEW_ERROR_URL = "`reference.url` must be a same-origin path (`/media/...`) or an http(s) URL.";
+//# sourceMappingURL=preview.js.map

package/sidecar/dist/constants/preview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview.js","sourceRoot":"","sources":["../../src/constants/preview.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe,CAAC;AACxD,MAAM,CAAC,MAAM,+BAA+B,GAC1C,urBAAurB,CAAC;AAG1rB,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AACrC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AACtC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAC3C,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAC1C,MAAM,CAAC,MAAM,6BAA6B,GAAG,KAAK,CAAC;AACnD,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAC7C,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAC3C,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAC;AAChD,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,CAAC;AAC/C,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AACpD,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAGlD,MAAM,CAAC,MAAM,4BAA4B,GAAG,QAAQ,CAAC;AAGrD,MAAM,CAAC,MAAM,wBAAwB,GAAG,cAAc,CAAC;AACvD,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAElD,MAAM,CAAC,MAAM,yBAAyB,GAAG,QAAQ,CAAC;AAGlD,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE3D,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,YAAY,EAAE,cAAc;IAC5B,SAAS,EAAE,WAAW;IACtB,kBAAkB,EAAE,oBAAoB;IACxC,WAAW,EAAE,aAAa;IAC1B,cAAc,EAAE,gBAAgB;CACxB,CAAC;AAOX,MAAM,CAAC,MAAM,wBAAwB,GAEjC;IACF,CAAC,eAAe,EAAE,oBAAoB,CAAC;IACvC;QACE,uEAAuE;QACvE,qEAAqE;KACtE;IACD,CAAC,4BAA4B,EAAE,qBAAqB,CAAC;IACrD,CAAC,4BAA4B,EAAE,gCAAgC,CAAC;IAChE,CAAC,wBAAwB,EAAE,mBAAmB,CAAC;IAC/C,CAAC,YAAY,EAAE,eAAe,CAAC;IAC/B,CAAC,4BAA4B,EAAE,iCAAiC,CAAC;IACjE;QACE,qHAAqH;QACrH,wEAAwE;KACzE;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAC/B,8FAA8F,CAAC;AACjG,MAAM,CAAC,MAAM,qBAAqB,GAChC,oFAAoF,CAAC;AACvF,MAAM,CAAC,MAAM,mBAAmB,GAAG,kCAAkC,iBAAiB,UAAU,CAAC;AACjG,MAAM,CAAC,MAAM,mBAAmB,GAAG,6BAA6B,iBAAiB,iDAAiD,CAAC;AACnI,MAAM,CAAC,MAAM,mBAAmB,GAAG,oDAAoD,sBAAsB,kDAAkD,CAAC;AAChK,MAAM,CAAC,MAAM,4BAA4B,GACvC,sFAAsF,CAAC;AACzF,MAAM,CAAC,MAAM,gCAAgC,GAC3C,4EAA4E,CAAC;AAC/E,MAAM,CAAC,MAAM,wBAAwB,GACnC,gJAAgJ,CAAC;AACnJ,MAAM,CAAC,MAAM,wBAAwB,GACnC,gFAAgF,CAAC;AACnF,MAAM,CAAC,MAAM,oBAAoB,GAC/B,0JAA0J,CAAC;AAC7J,MAAM,CAAC,MAAM,iBAAiB,GAC5B,8EAA8E,CAAC"}

package/sidecar/dist/constants/tool-kinds.js

@@ -2,6 +2,7 @@ import { BUILDER_TOOL_NAMES } from "./builder.js";
 import { QUERY_LOGS_TOOL_NAME } from "./logs.js";
 import { ASK_USER_TOOL_NAME, GET_CURRENT_PAGE_TOOL_NAME, NAVIGATE_TOOL_NAME, } from "./mcp.js";
 import { FIND_PAGES_TOOL_NAME, LIST_PAGES_TOOL_NAME } from "./pages.js";
+import { PREVIEW_BLOCKS_TOOL_NAME } from "./preview.js";
 import { TYPECHECK_TOOL_NAME } from "./typecheck.js";
 export const EDIT_TOOL_NAMES = [
     "Edit",
@@ -53,6 +54,7 @@ export const PROJECT_READ_TOOL_NAMES = [
 ];
 export const ASSISTANT_TOOL_NAMES = [
     ASK_USER_TOOL_NAME,
+    PREVIEW_BLOCKS_TOOL_NAME,
     "TodoWrite",
     "Skill",
     "Task",

package/sidecar/dist/constants/tool-kinds.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-kinds.js","sourceRoot":"","sources":["../../src/constants/tool-kinds.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EACL,kBAAkB,EAClB,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAGrD,MAAM,CAAC,MAAM,eAAe,GAAsB;IAChD,MAAM;IACN,OAAO;IACP,WAAW;IACX,cAAc;CACf,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAsB,CAAC,MAAM,CAAC,CAAC;AAE9D,MAAM,CAAC,MAAM,cAAc,GAAsB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AAG3E,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,MAAM;IACN,IAAI;IACJ,MAAM;IACN,MAAM;IACN,cAAc;IACd,WAAW;IACX,OAAO;IACP,MAAM;IACN,cAAc;CACf,CAAC;AAGF,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,gBAAgB;IAChB,kBAAkB;IAClB,sBAAsB;IACtB,sBAAsB;IACtB,0BAA0B;IAC1B,uBAAuB;IACvB,gBAAgB;CACjB,CAAC;AAGF,MAAM,CAAC,MAAM,8BAA8B,GAAsB;IAC/D,mBAAmB;IACnB,uBAAuB;IACvB,oBAAoB;IACpB,uBAAuB;IACvB,oBAAoB;CACrB,CAAC;AAGF,MAAM,CAAC,MAAM,gCAAgC,GAAsB;IACjE,oBAAoB;IACpB,kBAAkB;CACnB,CAAC;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAAG,uBAAuB,CAAC;AAGzE,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,0BAA0B;IAC1B,kBAAkB;IAClB,oBAAoB;IACpB,oBAAoB;IACpB,mBAAmB;IACnB,oBAAoB;CACrB,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,kBAAkB;IAClB,WAAW;IACX,OAAO;IACP,MAAM;IACN,cAAc;CACf,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GACtC,kBAAkB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAE/E,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC,MAAM,CAAC,MAAM,mBAAmB,GAAsB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,eAAe,GAAG,UAAU,CAAC"}
+{"version":3,"file":"tool-kinds.js","sourceRoot":"","sources":["../../src/constants/tool-kinds.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EACL,kBAAkB,EAClB,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAGrD,MAAM,CAAC,MAAM,eAAe,GAAsB;IAChD,MAAM;IACN,OAAO;IACP,WAAW;IACX,cAAc;CACf,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAsB,CAAC,MAAM,CAAC,CAAC;AAE9D,MAAM,CAAC,MAAM,cAAc,GAAsB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AAG3E,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,MAAM;IACN,IAAI;IACJ,MAAM;IACN,MAAM;IACN,cAAc;IACd,WAAW;IACX,OAAO;IACP,MAAM;IACN,cAAc;CACf,CAAC;AAGF,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,gBAAgB;IAChB,kBAAkB;IAClB,sBAAsB;IACtB,sBAAsB;IACtB,0BAA0B;IAC1B,uBAAuB;IACvB,gBAAgB;CACjB,CAAC;AAGF,MAAM,CAAC,MAAM,8BAA8B,GAAsB;IAC/D,mBAAmB;IACnB,uBAAuB;IACvB,oBAAoB;IACpB,uBAAuB;IACvB,oBAAoB;CACrB,CAAC;AAGF,MAAM,CAAC,MAAM,gCAAgC,GAAsB;IACjE,oBAAoB;IACpB,kBAAkB;CACnB,CAAC;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAAG,uBAAuB,CAAC;AAGzE,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,0BAA0B;IAC1B,kBAAkB;IAClB,oBAAoB;IACpB,oBAAoB;IACpB,mBAAmB;IACnB,oBAAoB;CACrB,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,kBAAkB;IAClB,wBAAwB;IACxB,WAAW;IACX,OAAO;IACP,MAAM;IACN,cAAc;CACf,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GACtC,kBAAkB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAE/E,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC,MAAM,CAAC,MAAM,mBAAmB,GAAsB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,eAAe,GAAG,UAAU,CAAC"}

package/sidecar/dist/mcp/tool-definitions.js

@@ -4,6 +4,7 @@ import { buildFindPagesUsingTool } from "./tools/find-pages-using.js";
 import { buildGetCurrentPageTool } from "./tools/get-current-page.js";
 import { buildListPagesTool } from "./tools/list-pages.js";
 import { buildNavigateToPageTool } from "./tools/navigate-to-page.js";
+import { buildPreviewBlocksTool } from "./tools/preview-blocks.js";
 import { buildQueryLogsTool } from "./tools/query-logs.js";
 import { buildTypecheckTool } from "./tools/typecheck.js";
 export function buildToolDefinitions(deps) {
@@ -33,6 +34,10 @@ export function buildToolDefinitions(deps) {
             conversationId: deps.conversationId,
             requestQuestion: deps.requestQuestion,
         }),
+        buildPreviewBlocksTool({
+            showPreview: deps.showPreview,
+            listAttachedImages: deps.listAttachedImages,
+        }),
         buildTypecheckTool({
             hostProjectRoot: deps.hostProjectRoot,
             moduleRoots: deps.moduleRoots,

package/sidecar/dist/mcp/tool-definitions.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-definitions.js","sourceRoot":"","sources":["../../src/mcp/tool-definitions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D,MAAM,UAAU,oBAAoB,CAClC,IAAqB;IAErB,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc;QACtC,CAAC,CAAC,iBAAiB,CAAC;YAChB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,IAAI,EAAE,IAAI,CAAC,aAAa;SACzB,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,GAAG,YAAY;QACf,uBAAuB,CAAC,IAAI,CAAC,cAAc,CAAC;QAC5C,uBAAuB,CAAC;YACtB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC;QACF,kBAAkB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/C,uBAAuB,CAAC;YACtB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC;QACF,gBAAgB,CAAC;YACf,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC;QACF,kBAAkB,CAAC;YACjB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SAC1C,CAAC;QACF,kBAAkB,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;KACpD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"tool-definitions.js","sourceRoot":"","sources":["../../src/mcp/tool-definitions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D,MAAM,UAAU,oBAAoB,CAClC,IAAqB;IAErB,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc;QACtC,CAAC,CAAC,iBAAiB,CAAC;YAChB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,IAAI,EAAE,IAAI,CAAC,aAAa;SACzB,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,GAAG,YAAY;QACf,uBAAuB,CAAC,IAAI,CAAC,cAAc,CAAC;QAC5C,uBAAuB,CAAC;YACtB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC;QACF,kBAAkB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/C,uBAAuB,CAAC;YACtB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC;QACF,gBAAgB,CAAC;YACf,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC;QACF,sBAAsB,CAAC;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC5C,CAAC;QACF,kBAAkB,CAAC;YACjB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SAC1C,CAAC;QACF,kBAAkB,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;KACpD,CAAC;AACJ,CAAC"}

package/sidecar/dist/mcp/tools/preview-blocks.d.ts

@@ -0,0 +1,65 @@
+import { z } from "zod";
+import { type BlockPreviewType } from "../../protocol/preview.js";
+export interface PreviewBlocksDeps {
+    showPreview: (preview: BlockPreviewType) => void;
+    listAttachedImages: () => string[];
+}
+export declare function buildPreviewBlocksTool(deps: PreviewBlocksDeps): import("../define-tool.js").McpToolDefinition<{
+    readonly title: z.ZodString;
+    readonly description: z.ZodOptional<z.ZodString>;
+    readonly label: z.ZodOptional<z.ZodString>;
+    readonly tree: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+        type: z.ZodOptional<z.ZodString>;
+        componentName: z.ZodOptional<z.ZodString>;
+        options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        id: z.ZodOptional<z.ZodString>;
+        slot: z.ZodOptional<z.ZodString>;
+        colSpan: z.ZodOptional<z.ZodNumber>;
+        children: z.ZodOptional<z.ZodArray<z.ZodObject<any, z.core.$strip>>>;
+    }, z.core.$strip>, z.ZodArray<z.ZodObject<{
+        type: z.ZodOptional<z.ZodString>;
+        componentName: z.ZodOptional<z.ZodString>;
+        options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        id: z.ZodOptional<z.ZodString>;
+        slot: z.ZodOptional<z.ZodString>;
+        colSpan: z.ZodOptional<z.ZodNumber>;
+        children: z.ZodOptional<z.ZodArray<z.ZodObject<any, z.core.$strip>>>;
+    }, z.core.$strip>>]>>;
+    readonly sketch: z.ZodOptional<z.ZodObject<{
+        html: z.ZodString;
+        css: z.ZodOptional<z.ZodString>;
+        caption: z.ZodOptional<z.ZodString>;
+        height: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    readonly reference: z.ZodOptional<z.ZodObject<{
+        attachmentId: z.ZodOptional<z.ZodString>;
+        url: z.ZodOptional<z.ZodString>;
+        caption: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    readonly variants: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        label: z.ZodString;
+        tree: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+            type: z.ZodOptional<z.ZodString>;
+            componentName: z.ZodOptional<z.ZodString>;
+            options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            id: z.ZodOptional<z.ZodString>;
+            slot: z.ZodOptional<z.ZodString>;
+            colSpan: z.ZodOptional<z.ZodNumber>;
+            children: z.ZodOptional<z.ZodArray<z.ZodObject<any, z.core.$strip>>>;
+        }, z.core.$strip>, z.ZodArray<z.ZodObject<{
+            type: z.ZodOptional<z.ZodString>;
+            componentName: z.ZodOptional<z.ZodString>;
+            options: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            id: z.ZodOptional<z.ZodString>;
+            slot: z.ZodOptional<z.ZodString>;
+            colSpan: z.ZodOptional<z.ZodNumber>;
+            children: z.ZodOptional<z.ZodArray<z.ZodObject<any, z.core.$strip>>>;
+        }, z.core.$strip>>]>>;
+        sketch: z.ZodOptional<z.ZodObject<{
+            html: z.ZodString;
+            css: z.ZodOptional<z.ZodString>;
+            caption: z.ZodOptional<z.ZodString>;
+            height: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>>;
+}>;

package/sidecar/dist/mcp/tools/preview-blocks.js

@@ -0,0 +1,176 @@
+import { randomUUID } from "node:crypto";
+import { z } from "zod";
+import { PREVIEW_BLOCKS_TOOL_DESCRIPTION, PREVIEW_BLOCKS_TOOL_NAME, PREVIEW_ERROR_BYTES, PREVIEW_ERROR_CODES, PREVIEW_ERROR_DEPTH, PREVIEW_ERROR_EMPTY_VIEW, PREVIEW_ERROR_NO_ATTACHMENTS, PREVIEW_ERROR_NO_TYPE, PREVIEW_ERROR_NODES, PREVIEW_ERROR_OPTION_URL, PREVIEW_ERROR_SKETCH, PREVIEW_ERROR_UNKNOWN_ATTACHMENT, PREVIEW_ERROR_URL, PREVIEW_LATEST_ATTACHMENT_ID, PREVIEW_MAX_CAPTION_CHARS, PREVIEW_MAX_DEPTH, PREVIEW_MAX_DESCRIPTION_CHARS, PREVIEW_MAX_JSON_BYTES, PREVIEW_MAX_LABEL_CHARS, PREVIEW_MAX_NODES, PREVIEW_MAX_TITLE_CHARS, PREVIEW_MAX_URL_CHARS, PREVIEW_MAX_VARIANTS, PREVIEW_REMOTE_URL, PREVIEW_RESULT_SHOWN, PREVIEW_SAME_ORIGIN_PATH, PREVIEW_SKETCH_FORBIDDEN, PREVIEW_URL_OPTION_KEY, } from "../../constants/preview.js";
+import { PreviewSketchSchema, PreviewTreeSchema, PreviewVariantSchema, } from "../../protocol/preview.js";
+import { defineTool } from "../define-tool.js";
+const ReferenceInputSchema = z
+    .object({
+    attachmentId: z
+        .string()
+        .optional()
+        .describe(`File name of an image the user attached in this conversation, or \`${PREVIEW_LATEST_ATTACHMENT_ID}\` for the last one.`),
+    url: z
+        .string()
+        .max(PREVIEW_MAX_URL_CHARS)
+        .optional()
+        .describe("Same-origin path of an image (e.g. a media URL). An external URL is only shown as a link."),
+    caption: z
+        .string()
+        .max(PREVIEW_MAX_CAPTION_CHARS)
+        .optional()
+        .describe("What the reference shows, e.g. `Your mockup`."),
+})
+    .describe("The user's mockup to show side by side with the blocks.");
+const INPUT_SCHEMA = {
+    title: z
+        .string()
+        .min(1)
+        .max(PREVIEW_MAX_TITLE_CHARS)
+        .describe("Attachment title, e.g. `Revenue card: DMS KpiCard`."),
+    description: z
+        .string()
+        .max(PREVIEW_MAX_DESCRIPTION_CHARS)
+        .optional()
+        .describe("What to look at: the visible differences from the mockup."),
+    label: z
+        .string()
+        .min(1)
+        .max(PREVIEW_MAX_LABEL_CHARS)
+        .optional()
+        .describe("Tab label of the main view when there are variants, e.g. `DMS KpiCard`."),
+    tree: PreviewTreeSchema.optional(),
+    sketch: PreviewSketchSchema.optional(),
+    reference: ReferenceInputSchema.optional(),
+    variants: z
+        .array(PreviewVariantSchema)
+        .max(PREVIEW_MAX_VARIANTS)
+        .optional()
+        .describe("Alternatives shown as tabs after the main view, e.g. the same block with other options, or a custom `sketch`."),
+};
+class PreviewInputError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
+}
+function rootsOf(tree) {
+    return Array.isArray(tree) ? tree : [tree];
+}
+function checkOptionUrls(node) {
+    const offending = Object.entries(node.options ?? {}).find(([key, value]) => PREVIEW_URL_OPTION_KEY.test(key) &&
+        typeof value === "string" &&
+        !PREVIEW_SAME_ORIGIN_PATH.test(value));
+    if (offending === undefined)
+        return;
+    throw new PreviewInputError(PREVIEW_ERROR_CODES.INVALID_TREE, `${PREVIEW_ERROR_OPTION_URL}${offending[0]}`);
+}
+function checkNode(node, depth, stats) {
+    if (depth > PREVIEW_MAX_DEPTH)
+        throw new PreviewInputError(PREVIEW_ERROR_CODES.INVALID_TREE, PREVIEW_ERROR_DEPTH);
+    if (node.type === undefined && node.componentName === undefined)
+        throw new PreviewInputError(PREVIEW_ERROR_CODES.INVALID_TREE, PREVIEW_ERROR_NO_TYPE);
+    checkOptionUrls(node);
+    stats.nodes += 1;
+    if (stats.nodes > PREVIEW_MAX_NODES)
+        throw new PreviewInputError(PREVIEW_ERROR_CODES.TOO_LARGE, PREVIEW_ERROR_NODES);
+    for (const child of node.children ?? [])
+        checkNode(child, depth + 1, stats);
+}
+function checkSketch(sketch) {
+    const markup = `${sketch.html}\n${sketch.css ?? ""}`;
+    const refused = PREVIEW_SKETCH_FORBIDDEN.find(([pattern]) => pattern.test(markup));
+    if (refused === undefined)
+        return;
+    throw new PreviewInputError(PREVIEW_ERROR_CODES.INVALID_SKETCH, `${PREVIEW_ERROR_SKETCH}${refused[1]}.`);
+}
+function checkView(view, stats) {
+    if (view.tree === undefined && view.sketch === undefined)
+        throw new PreviewInputError(PREVIEW_ERROR_CODES.INVALID_TREE, PREVIEW_ERROR_EMPTY_VIEW);
+    for (const root of view.tree === undefined ? [] : rootsOf(view.tree))
+        checkNode(root, 1, stats);
+    if (view.sketch !== undefined)
+        checkSketch(view.sketch);
+}
+function checkViews(input) {
+    const views = [input, ...(input.variants ?? [])];
+    const stats = { nodes: 0 };
+    for (const view of views)
+        checkView(view, stats);
+    const content = views.map(({ tree, sketch }) => ({ tree, sketch }));
+    const bytes = Buffer.byteLength(JSON.stringify(content));
+    if (bytes > PREVIEW_MAX_JSON_BYTES)
+        throw new PreviewInputError(PREVIEW_ERROR_CODES.TOO_LARGE, PREVIEW_ERROR_BYTES);
+}
+function resolveAttachment(requested, attached) {
+    if (attached.length === 0)
+        throw new PreviewInputError(PREVIEW_ERROR_CODES.UNKNOWN_ATTACHMENT, PREVIEW_ERROR_NO_ATTACHMENTS);
+    if (requested === PREVIEW_LATEST_ATTACHMENT_ID)
+        return attached.at(-1) ?? requested;
+    if (attached.includes(requested))
+        return requested;
+    throw new PreviewInputError(PREVIEW_ERROR_CODES.UNKNOWN_ATTACHMENT, `${PREVIEW_ERROR_UNKNOWN_ATTACHMENT}${attached.join(", ")}`);
+}
+function checkUrl(url) {
+    if (PREVIEW_SAME_ORIGIN_PATH.test(url) || PREVIEW_REMOTE_URL.test(url))
+        return url;
+    throw new PreviewInputError(PREVIEW_ERROR_CODES.INVALID_URL, PREVIEW_ERROR_URL);
+}
+function resolveReference(reference, attached) {
+    if (reference === undefined)
+        return undefined;
+    const { attachmentId, url, caption } = reference;
+    return {
+        attachmentName: attachmentId === undefined
+            ? undefined
+            : resolveAttachment(attachmentId, attached()),
+        url: url === undefined ? undefined : checkUrl(url),
+        caption,
+    };
+}
+function buildPreview(input, deps) {
+    checkViews(input);
+    return {
+        id: randomUUID(),
+        title: input.title,
+        description: input.description,
+        label: input.label,
+        tree: input.tree,
+        sketch: input.sketch,
+        reference: resolveReference(input.reference, deps.listAttachedImages),
+        variants: input.variants,
+        timestampMs: Date.now(),
+    };
+}
+function jsonContent(payload) {
+    return { content: [{ type: "text", text: JSON.stringify(payload) }] };
+}
+function errorContent(error) {
+    if (!(error instanceof PreviewInputError))
+        throw error;
+    return {
+        ...jsonContent({
+            ok: false,
+            error: { code: error.code },
+            message: error.message,
+        }),
+        isError: true,
+    };
+}
+export function buildPreviewBlocksTool(deps) {
+    return defineTool(PREVIEW_BLOCKS_TOOL_NAME, PREVIEW_BLOCKS_TOOL_DESCRIPTION, INPUT_SCHEMA, async (input) => {
+        try {
+            const preview = buildPreview(input, deps);
+            deps.showPreview(preview);
+            return jsonContent({
+                ok: true,
+                data: { previewId: preview.id },
+                message: PREVIEW_RESULT_SHOWN,
+            });
+        }
+        catch (error) {
+            return errorContent(error);
+        }
+    });
+}
+//# sourceMappingURL=preview-blocks.js.map

package/sidecar/dist/mcp/tools/preview-blocks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-blocks.js","sourceRoot":"","sources":["../../../src/mcp/tools/preview-blocks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,+BAA+B,EAC/B,wBAAwB,EACxB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,wBAAwB,EACxB,4BAA4B,EAC5B,qBAAqB,EACrB,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,gCAAgC,EAChC,iBAAiB,EACjB,4BAA4B,EAC5B,yBAAyB,EACzB,iBAAiB,EACjB,6BAA6B,EAC7B,sBAAsB,EACtB,uBAAuB,EACvB,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAML,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,UAAU,EAAsB,MAAM,mBAAmB,CAAC;AAQnE,MAAM,oBAAoB,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,sEAAsE,4BAA4B,sBAAsB,CACzH;IACH,GAAG,EAAE,CAAC;SACH,MAAM,EAAE;SACR,GAAG,CAAC,qBAAqB,CAAC;SAC1B,QAAQ,EAAE;SACV,QAAQ,CACP,2FAA2F,CAC5F;IACH,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,yBAAyB,CAAC;SAC9B,QAAQ,EAAE;SACV,QAAQ,CAAC,+CAA+C,CAAC;CAC7D,CAAC;KACD,QAAQ,CAAC,yDAAyD,CAAC,CAAC;AAEvE,MAAM,YAAY,GAAG;IACnB,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,uBAAuB,CAAC;SAC5B,QAAQ,CAAC,qDAAqD,CAAC;IAClE,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,6BAA6B,CAAC;SAClC,QAAQ,EAAE;SACV,QAAQ,CAAC,2DAA2D,CAAC;IACxE,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,uBAAuB,CAAC;SAC5B,QAAQ,EAAE;SACV,QAAQ,CACP,yEAAyE,CAC1E;IACH,IAAI,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IACtC,SAAS,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC1C,QAAQ,EAAE,CAAC;SACR,KAAK,CAAC,oBAAoB,CAAC;SAC3B,GAAG,CAAC,oBAAoB,CAAC;SACzB,QAAQ,EAAE;SACV,QAAQ,CACP,+GAA+G,CAChH;CACK,CAAC;AAkBX,MAAM,iBAAkB,SAAQ,KAAK;IAExB;IADX,YACW,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAQ;IAIvB,CAAC;CACF;AAMD,SAAS,OAAO,CAAC,IAAqB;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,eAAe,CAAC,IAAqB;IAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CACvD,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACf,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC;QAChC,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CACxC,CAAC;IACF,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO;IACpC,MAAM,IAAI,iBAAiB,CACzB,mBAAmB,CAAC,YAAY,EAChC,GAAG,wBAAwB,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,CAC7C,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAqB,EAAE,KAAa,EAAE,KAAgB;IACvE,IAAI,KAAK,GAAG,iBAAiB;QAC3B,MAAM,IAAI,iBAAiB,CACzB,mBAAmB,CAAC,YAAY,EAChC,mBAAmB,CACpB,CAAC;IACJ,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;QAC7D,MAAM,IAAI,iBAAiB,CACzB,mBAAmB,CAAC,YAAY,EAChC,qBAAqB,CACtB,CAAC;IACJ,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;IACjB,IAAI,KAAK,CAAC,KAAK,GAAG,iBAAiB;QACjC,MAAM,IAAI,iBAAiB,CACzB,mBAAmB,CAAC,SAAS,EAC7B,mBAAmB,CACpB,CAAC;IACJ,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE;QAAE,SAAS,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,MAAyB;IAC5C,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC;IACrD,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAC1D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CACrB,CAAC;IACF,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO;IAClC,MAAM,IAAI,iBAAiB,CACzB,mBAAmB,CAAC,cAAc,EAClC,GAAG,oBAAoB,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CACxC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAiB,EAAE,KAAgB;IACpD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QACtD,MAAM,IAAI,iBAAiB,CACzB,mBAAmB,CAAC,YAAY,EAChC,wBAAwB,CACzB,CAAC;IACJ,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAClE,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,UAAU,CAAC,KAAmB;IACrC,MAAM,KAAK,GAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IAChE,MAAM,KAAK,GAAc,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,IAAI,KAAK,GAAG,sBAAsB;QAChC,MAAM,IAAI,iBAAiB,CACzB,mBAAmB,CAAC,SAAS,EAC7B,mBAAmB,CACpB,CAAC;AACN,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB,EAAE,QAAkB;IAC9D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QACvB,MAAM,IAAI,iBAAiB,CACzB,mBAAmB,CAAC,kBAAkB,EACtC,4BAA4B,CAC7B,CAAC;IACJ,IAAI,SAAS,KAAK,4BAA4B;QAC5C,OAAO,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;IACtC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,IAAI,iBAAiB,CACzB,mBAAmB,CAAC,kBAAkB,EACtC,GAAG,gCAAgC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5D,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;QACpE,OAAO,GAAG,CAAC;IACb,MAAM,IAAI,iBAAiB,CACzB,mBAAmB,CAAC,WAAW,EAC/B,iBAAiB,CAClB,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,SAAqC,EACrC,QAAwB;IAExB,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC;IACjD,OAAO;QACL,cAAc,EACZ,YAAY,KAAK,SAAS;YACxB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,iBAAiB,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC;QACjD,GAAG,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAClD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,KAAmB,EACnB,IAAuB;IAEvB,UAAU,CAAC,KAAK,CAAC,CAAC;IAClB,OAAO;QACL,EAAE,EAAE,UAAU,EAAE;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,kBAAkB,CAAC;QACrE,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB;IACnC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,CAAC,KAAK,YAAY,iBAAiB,CAAC;QAAE,MAAM,KAAK,CAAC;IACvD,OAAO;QACL,GAAG,WAAW,CAAC;YACb,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;YAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;QACF,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAuB;IAC5D,OAAO,UAAU,CACf,wBAAwB,EACxB,+BAA+B,EAC/B,YAAY,EACZ,KAAK,EAAE,KAAmB,EAAE,EAAE;QAC5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAC1B,OAAO,WAAW,CAAC;gBACjB,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE;gBAC/B,OAAO,EAAE,oBAAoB;aAC9B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/sidecar/dist/mcp/types.d.ts

@@ -6,6 +6,7 @@ import type { LogsClient } from "../logs/logs-client.js";
 import type { ImportsScanner } from "../pages/imports-scanner.js";
 import type { RegistryClient } from "../pages/registry-client.js";
 import type { AnyServerEventType } from "../protocol/events.js";
+import type { BlockPreviewType } from "../protocol/preview.js";
 import type { NavigationCompleter } from "../server/navigation-completer.js";
 import type { CurrentPage } from "../state/host-state.js";
 export interface AiMcpServerStaticDeps {
@@ -24,6 +25,8 @@ export interface AiMcpServerDeps extends AiMcpServerStaticDeps {
     sendToHost: (event: AnyServerEventType) => void;
     requestQuestion: (req: QuestionRequest) => Promise<QuestionAnswers>;
     getLastEditedFile: () => string | undefined;
+    showPreview: (preview: BlockPreviewType) => void;
+    listAttachedImages: () => string[];
     gateBuilderOp?: BuilderGate;
 }
 export interface AiMcpServer {

package/sidecar/dist/prompts/agent.d.ts

@@ -1 +1 @@
-export declare const SYSTEM_PROMPT_TEMPLATE = "You are the development assistant for an Antelope project.\n\nProject: {{name}}\nWorking directory: {{hostProjectRoot}}\nAntelope modules present: {{antelopeModules}}\n\nFollow the conventions documented in the project's CLAUDE.md.\n\nWhen you need a decision or clarification from the user, call AskUser with multiple-choice options and wait for their answer instead of asking in prose \u2014 the user answers it with interactive buttons in the chat.\n\nYou are running inside a live browser overlay: the user is viewing a DMS page while chatting with you. Each of your turns begins with a <host-context> block reporting live session state \u2014 the page their browser is displaying right now and your active generation mode. The page is its route, its title, and its source file as resolved from the pages registry; the title or the file reads \"unknown\" when it could not be determined, so then look the file up yourself instead of guessing. That block is the single source of truth for both: it refreshes every turn and reflects navigation by either you or the user and any mode change, so trust it over your memory. GetCurrentPage returns the live page on demand. Use your host tools to keep what the user sees in sync with the changes you make.\n\nEditing pages \u2014 follow this loop whatever your mode, whenever a change affects a rendered page (skip it only for changes that touch no rendered page, e.g. backend-only or config edits):\n1. Determine which page(s) the change affects and work ONE page at a time.\n2. Before changing a page, make sure the host is displaying it: call NavigateToPage to it (it reports whether navigation completed and echoes the page the host landed on). Prefer the page the user is already on \u2014 <host-context> tells you where that is \u2014 if it is impacted. For a BRAND-NEW page, create the empty page first, then NavigateToPage to it immediately \u2014 before adding any blocks or content \u2014 so the user watches it fill in. Never build a page out to completion in the background and navigate only at the end.\n3. Make the change through your mode's mechanism (below) while the host is on the page; it hot-reloads and highlights the freshly-rendered nodes.\n4. Verify before moving on: if the page still looks wrong after the reload, call QueryLogs. Then repeat from step 2 for the next impacted page.\n\nGeneration modes \u2014 you work through exactly one, and the active one is reported each turn in <host-context>:\n- CODE: full code access \u2014 you may write and edit any files to build or reshape pages, including custom components and logic beyond the Builder's blocks. The Builder (\"Builder\u2026\") MCP tools are available when they fit, but you are not restricted to them. Making a change: first call FindPagesUsing for each file you intend to edit to map it to the pages that render it, and group your edits by page; after editing a module's source, run Typecheck on that module and fix every reported error before the page is done \u2014 a non-compiling edit makes the host reload fail and the page 404.\n- SAFE: you act ONLY through the Builder (\"Builder\u2026\") MCP tools; raw file edits (Write/Edit/Bash) are blocked. Follow the dms-builder-safe skill, which carries the workflow and the vocabulary; the tools' own descriptions carry their arguments. Every op is atomic and typecheck-gated: on typecheck_failed nothing was written \u2014 read the diagnostics, fix the config, retry.\n  Reach for the right mechanism:\n  - a page's layout and content \u2014 the block tools, after BuilderCatalog;\n  - the data layer a table or form needs \u2014 the resource tools (they emit a Database Table + a DataAPI at /api/<name>);\n  - showing that resource on a page \u2014 BuilderAddBlock a controller-leading block (catalog `controllerArg: true`, e.g. TableView) with `controller` set to the resource ref;\n  - a computed number rather than rows, e.g. a KpiCard's count or sum \u2014 the DataAPI cannot serve it: add a query (BuilderQueryTemplates, then BuilderAddQuery) and pass the `route` it returns as the card's `fetchUrl`;\n  - naming a generated resource class inside config \u2014 a `$ref` value, which is validated and allowed here, never `$expr`.\n  The boundary: safe mode cannot construct a nested component value, so a config field the catalog marks `x-component` (a chart card's `chart`, say) is out of reach \u2014 treat it like opaque_target rather than guessing a shape. On opaque_target, unsupported, or an `x-component` field, explain the limitation and ask permission to switch to Code mode for that step; never attempt a raw edit.\n\nResolving a page's URL: routes are computed by the backend (category chain + slug, with a /modules prefix for module pages), so you CANNOT derive a page's URL from its filename. Always call ListPages to look up a page's real route (its `path`) before navigating, and pass that exact path to NavigateToPage. The moment you create a NEW page \u2014 before adding any blocks or content to it \u2014 call ListPages with refresh:true so the freshly-registered page appears, then NavigateToPage to its `path` so the user watches it build live; do not keep populating a page in the background and navigate only once it is finished.\nNever guess or construct a URL.\n";
+export declare const SYSTEM_PROMPT_TEMPLATE = "You are the development assistant for an Antelope project.\n\nProject: {{name}}\nWorking directory: {{hostProjectRoot}}\nAntelope modules present: {{antelopeModules}}\n\nFollow the conventions documented in the project's CLAUDE.md.\n\nWhen you need a decision or clarification from the user, call AskUser with multiple-choice options and wait for their answer instead of asking in prose \u2014 the user answers it with interactive buttons in the chat. When the choice is visual (how a block will look, a DMS block versus a custom one), show the candidates with PreviewBlocks first, then ask.\n\nYou are running inside a live browser overlay: the user is viewing a DMS page while chatting with you. Each of your turns begins with a <host-context> block reporting live session state \u2014 the page their browser is displaying right now and your active generation mode. The page is its route, its title, and its source file as resolved from the pages registry; the title or the file reads \"unknown\" when it could not be determined, so then look the file up yourself instead of guessing. That block is the single source of truth for both: it refreshes every turn and reflects navigation by either you or the user and any mode change, so trust it over your memory. GetCurrentPage returns the live page on demand. Use your host tools to keep what the user sees in sync with the changes you make.\n\nEditing pages \u2014 follow this loop whatever your mode, whenever a change affects a rendered page (skip it only for changes that touch no rendered page, e.g. backend-only or config edits):\n1. Determine which page(s) the change affects and work ONE page at a time. Before you create or change the first page, load the dms-best-practices skill and your mode's skill (dms-ai-code-mode in CODE, dms-builder-safe in SAFE).\n2. Before changing a page, make sure the host is displaying it: call NavigateToPage to it (it reports whether navigation completed and echoes the page the host landed on). Prefer the page the user is already on \u2014 <host-context> tells you where that is \u2014 if it is impacted. For a BRAND-NEW page, create the empty page first, then NavigateToPage to it immediately \u2014 before adding any blocks or content \u2014 so the user watches it fill in. Never build a page out to completion in the background and navigate only at the end.\n3. Make the change through your mode's mechanism (below) while the host is on the page; it hot-reloads and highlights the freshly-rendered nodes.\n4. Verify before moving on: if the page still looks wrong after the reload, call QueryLogs. Then repeat from step 2 for the next impacted page.\n\nGeneration modes \u2014 you work through exactly one, and the active one is reported each turn in <host-context>:\n- CODE: full code access \u2014 you may write and edit any files to build or reshape pages, including custom components and logic beyond the Builder's blocks. The Builder (\"Builder\u2026\") MCP tools are available when they fit, but you are not restricted to them. Making a change: first call FindPagesUsing for each file you intend to edit to map it to the pages that render it, and group your edits by page; after editing a module's source, run Typecheck on that module and fix every reported error before the page is done \u2014 a non-compiling edit makes the host reload fail and the page 404.\n- SAFE: you act ONLY through the Builder (\"Builder\u2026\") MCP tools; raw file edits (Write/Edit/Bash) are blocked. Follow the dms-builder-safe skill, which carries the workflow and the vocabulary; the tools' own descriptions carry their arguments. Every op is atomic and typecheck-gated: on typecheck_failed nothing was written \u2014 read the diagnostics, fix the config, retry.\n  Reach for the right mechanism:\n  - a page's layout and content \u2014 the block tools, after BuilderCatalog;\n  - the data layer a table or form needs \u2014 the resource tools (they emit a Database Table + a DataAPI at /api/<name>);\n  - showing that resource on a page \u2014 BuilderAddBlock a controller-leading block (catalog `controllerArg: true`, e.g. TableView) with `controller` set to the resource ref;\n  - a computed number rather than rows, e.g. a KpiCard's count or sum \u2014 the DataAPI cannot serve it: add a query (BuilderQueryTemplates, then BuilderAddQuery) and pass the `route` it returns as the card's `fetchUrl`;\n  - naming a generated resource class inside config \u2014 a `$ref` value, which is validated and allowed here, never `$expr`.\n  The boundary: safe mode cannot construct a nested component value, so a config field the catalog marks `x-component` (a chart card's `chart`, say) is out of reach \u2014 treat it like opaque_target rather than guessing a shape. On opaque_target, unsupported, or an `x-component` field, explain the limitation and ask permission to switch to Code mode for that step; never attempt a raw edit.\n\nResolving a page's URL: routes are computed by the backend (category chain + slug, with a /modules prefix for module pages), so you CANNOT derive a page's URL from its filename. Always call ListPages to look up a page's real route (its `path`) before navigating, and pass that exact path to NavigateToPage. The moment you create a NEW page \u2014 before adding any blocks or content to it \u2014 call ListPages with refresh:true so the freshly-registered page appears, then NavigateToPage to its `path` so the user watches it build live; do not keep populating a page in the background and navigate only once it is finished.\nNever guess or construct a URL.\n";

package/sidecar/dist/prompts/agent.js

@@ -1,6 +1,7 @@
 import { HOST_CONTEXT_OPEN, SYSTEM_PROMPT_TOKEN_HOST_ROOT, SYSTEM_PROMPT_TOKEN_MODULES, SYSTEM_PROMPT_TOKEN_NAME, } from "../constants/agent.js";
 import { QUERY_LOGS_TOOL_NAME } from "../constants/logs.js";
 import { ASK_USER_TOOL_NAME, GET_CURRENT_PAGE_TOOL_NAME, NAVIGATE_TOOL_NAME, } from "../constants/mcp.js";
+import { PREVIEW_BLOCKS_TOOL_NAME } from "../constants/preview.js";
 import { FIND_PAGES_TOOL_NAME, LIST_PAGES_TOOL_NAME, } from "../constants/pages.js";
 import { TYPECHECK_TOOL_NAME } from "../constants/typecheck.js";
 const CODE_MODE_DESCRIPTION = `full code access — you may write and edit any files to build or reshape pages, including custom components and logic beyond the Builder's blocks. The Builder ("Builder…") MCP tools are available when they fit, but you are not restricted to them. Making a change: first call ${FIND_PAGES_TOOL_NAME} for each file you intend to edit to map it to the pages that render it, and group your edits by page; after editing a module's source, run ${TYPECHECK_TOOL_NAME} on that module and fix every reported error before the page is done — a non-compiling edit makes the host reload fail and the page 404.`;
@@ -20,12 +21,12 @@ Antelope modules present: ${SYSTEM_PROMPT_TOKEN_MODULES}
 
 Follow the conventions documented in the project's CLAUDE.md.
 
-When you need a decision or clarification from the user, call ${ASK_USER_TOOL_NAME} with multiple-choice options and wait for their answer instead of asking in prose — the user answers it with interactive buttons in the chat.
+When you need a decision or clarification from the user, call ${ASK_USER_TOOL_NAME} with multiple-choice options and wait for their answer instead of asking in prose — the user answers it with interactive buttons in the chat. When the choice is visual (how a block will look, a DMS block versus a custom one), show the candidates with ${PREVIEW_BLOCKS_TOOL_NAME} first, then ask.
 
 You are running inside a live browser overlay: the user is viewing a DMS page while chatting with you. Each of your turns begins with a ${HOST_CONTEXT_OPEN} block reporting live session state — the page their browser is displaying right now and your active generation mode. The page is its route, its title, and its source file as resolved from the pages registry; the title or the file reads "unknown" when it could not be determined, so then look the file up yourself instead of guessing. That block is the single source of truth for both: it refreshes every turn and reflects navigation by either you or the user and any mode change, so trust it over your memory. ${GET_CURRENT_PAGE_TOOL_NAME} returns the live page on demand. Use your host tools to keep what the user sees in sync with the changes you make.
 
 Editing pages — follow this loop whatever your mode, whenever a change affects a rendered page (skip it only for changes that touch no rendered page, e.g. backend-only or config edits):
-1. Determine which page(s) the change affects and work ONE page at a time.
+1. Determine which page(s) the change affects and work ONE page at a time. Before you create or change the first page, load the dms-best-practices skill and your mode's skill (dms-ai-code-mode in CODE, dms-builder-safe in SAFE).
 2. Before changing a page, make sure the host is displaying it: call ${NAVIGATE_TOOL_NAME} to it (it reports whether navigation completed and echoes the page the host landed on). Prefer the page the user is already on — ${HOST_CONTEXT_OPEN} tells you where that is — if it is impacted. For a BRAND-NEW page, create the empty page first, then ${NAVIGATE_TOOL_NAME} to it immediately — before adding any blocks or content — so the user watches it fill in. Never build a page out to completion in the background and navigate only at the end.
 3. Make the change through your mode's mechanism (below) while the host is on the page; it hot-reloads and highlights the freshly-rendered nodes.
 4. Verify before moving on: if the page still looks wrong after the reload, call ${QUERY_LOGS_TOOL_NAME}. Then repeat from step 2 for the next impacted page.

package/sidecar/dist/prompts/agent.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/prompts/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,6BAA6B,EAC7B,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EACL,kBAAkB,EAClB,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAgBhE,MAAM,qBAAqB,GAAG,qRAAqR,oBAAoB,+IAA+I,mBAAmB,0IAA0I,CAAC;AAEpnB,MAAM,qBAAqB,GAAG;;;;;;;2YAO6W,CAAC;AAE5Y,MAAM,CAAC,MAAM,sBAAsB,GAAG;;WAE3B,wBAAwB;qBACd,6BAA6B;4BACtB,2BAA2B;;;;gEAIS,kBAAkB;;0IAEwD,iBAAiB,kgBAAkgB,0BAA0B;;;;uEAIhnB,kBAAkB,qIAAqI,iBAAiB,yGAAyG,kBAAkB;;mFAEvR,oBAAoB;;+FAER,iBAAiB;UACtG,qBAAqB;UACrB,qBAAqB;;gMAEiK,oBAAoB,iGAAiG,kBAAkB,yFAAyF,oBAAoB,mEAAmE,kBAAkB;;CAExgB,CAAC"}
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/prompts/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,6BAA6B,EAC7B,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EACL,kBAAkB,EAClB,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EACL,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAgBhE,MAAM,qBAAqB,GAAG,qRAAqR,oBAAoB,+IAA+I,mBAAmB,0IAA0I,CAAC;AAEpnB,MAAM,qBAAqB,GAAG;;;;;;;2YAO6W,CAAC;AAE5Y,MAAM,CAAC,MAAM,sBAAsB,GAAG;;WAE3B,wBAAwB;qBACd,6BAA6B;4BACtB,2BAA2B;;;;gEAIS,kBAAkB,+PAA+P,wBAAwB;;0IAE/N,iBAAiB,kgBAAkgB,0BAA0B;;;;uEAIhnB,kBAAkB,qIAAqI,iBAAiB,yGAAyG,kBAAkB;;mFAEvR,oBAAoB;;+FAER,iBAAiB;UACtG,qBAAqB;UACrB,qBAAqB;;gMAEiK,oBAAoB,iGAAiG,kBAAkB,yFAAyF,oBAAoB,mEAAmE,kBAAkB;;CAExgB,CAAC"}