@blotout/qinto-cli 0.1.20 → 0.1.22

package/dist/worker-artifact/app-runtime/index.js

@@ -4,6 +4,10 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// ../../../libs/app-manifest/src/app-roles.ts
+var DECLARABLE_APP_ROLES = ["owner", "admin", "manager", "editor", "member", "viewer"];
+var APP_ROLES = ["full", ...DECLARABLE_APP_ROLES];
+
 // ../../../libs/app-manifest/src/cron.ts
 var MAX_CRON_LENGTH = 128;
 var MINUTE_LITERAL = /^([0-9]|[1-5][0-9])$/;
@@ -18947,6 +18951,10 @@ var VARIABLE_NAME = /^[A-Z][A-Z0-9_]*$/;
 var APP_SLUG_PATTERN = /^[a-z][a-z0-9-]{2,29}$/;
 var FUNCTION_NAME = /^[a-zA-Z_$][a-zA-Z0-9_$]*$/;
 var identifierField = external_exports.string().min(1).max(64).regex(IDENTIFIER);
+var RENDERABLE_TEXT = /^[^\u0000-\u0009\u000B-\u001F\u007F\u200B-\u200F\u202A-\u202E\u2066-\u2069\uFEFF]*$/;
+var renderableText = (min, max) => {
+  return external_exports.string().min(min).max(max).regex(RENDERABLE_TEXT, "must not carry control or bidirectional-override characters");
+};
 var httpsUrl = (field2) => {
   return external_exports.url().max(2048).refine((value) => value.startsWith("https://"), `${field2} must be an HTTPS URL`);
 };
@@ -19082,6 +19090,35 @@ var validateOauth = (input2, ctx) => {
   }
 };
 
+// ../../../libs/app-manifest/src/roles.ts
+var MAX_APP_ROLE_DESCRIPTION = 200;
+var roleSchema = external_exports.object({
+  key: external_exports.enum(DECLARABLE_APP_ROLES, {
+    error: (issue2) => {
+      return issue2.input === "full" ? "full access is always available and is not declared" : void 0;
+    }
+  }),
+  description: renderableText(1, MAX_APP_ROLE_DESCRIPTION).optional()
+}).strict();
+var rolesSchema = external_exports.array(roleSchema).max(DECLARABLE_APP_ROLES.length).superRefine((roles, ctx) => {
+  uniqueOrIssue(
+    ctx,
+    roles.map((role) => role.key),
+    [],
+    "role"
+  );
+}).transform((roles) => {
+  return [...roles].sort((a, b) => APP_ROLES.indexOf(a.key) - APP_ROLES.indexOf(b.key));
+});
+var validateRoles = (manifest, ctx) => {
+  const declared = /* @__PURE__ */ new Set(["full", ...(manifest.roles ?? []).map((role) => role.key)]);
+  for (const [index, tool] of manifest.tools.entries()) {
+    if (tool.role !== void 0 && !declared.has(tool.role)) {
+      ctx.addIssue({ code: "custom", path: ["tools", index, "role"], message: `Tool role ${tool.role} is not declared in roles` });
+    }
+  }
+};
+
 // ../../../libs/app-manifest/src/route.ts
 var ENDPOINT_PATH_PATTERN = /^\/(?:(?::[a-zA-Z][a-zA-Z0-9_]*|[a-zA-Z0-9_-]+)(?:\/(?::[a-zA-Z][a-zA-Z0-9_]*|[a-zA-Z0-9_-]+))*)?$/;
 var isParam = (segment) => {
@@ -19115,10 +19152,6 @@ var MAX_MANIFEST_TOOLS_BYTES = 150 * 1024;
 var TOOL_PROPERTY_NAME = /^[a-zA-Z][a-zA-Z0-9_]*$/;
 var RESERVED_TOOL_ARGUMENTS = ["teamId", "siteId", "installId"];
 var TOOL_STRING_FORMATS = ["uuid", "date", "date-time", "email", "uri"];
-var RENDERABLE_TEXT = /^[^\u0000-\u0009\u000B-\u001F\u007F\u200B-\u200F\u202A-\u202E\u2066-\u2069\uFEFF]*$/;
-var renderableText = (min, max) => {
-  return external_exports.string().min(min).max(max).regex(RENDERABLE_TEXT, "must not carry control or bidirectional-override characters");
-};
 var propertyName = external_exports.string().min(1).max(48).regex(TOOL_PROPERTY_NAME);
 var FORMAT_SCHEMAS = {
   uuid: external_exports.uuid(),
@@ -19214,7 +19247,8 @@ var toolSchema = external_exports.object({
   title: renderableText(1, MAX_APP_TOOL_TITLE_LENGTH),
   description: renderableText(MIN_APP_TOOL_DESCRIPTION, MAX_APP_TOOL_DESCRIPTION),
   inputSchema: toolInputSchema,
-  annotations: toolAnnotationsSchema
+  annotations: toolAnnotationsSchema,
+  role: external_exports.enum(APP_ROLES).optional()
 }).strict();
 var nodeChildren = (value) => {
   const properties = value["properties"];
@@ -19618,6 +19652,9 @@ var baseSchema = external_exports.object({
     description: "The push topics this app broadcasts to every app on the site. Requires the `sharedContext` data capability; a topic left out reaches only this app\u2019s own browser code."
   }),
   endpoints: external_exports.array(endpointSchema).max(16).default([]).meta({ description: "The HTTP routes served at https://<site>/app/<slug><path>." }),
+  roles: rolesSchema.optional().meta({
+    description: "The app roles this app uses, from the fixed list owner, admin, manager, editor, member, viewer. Full access is always available and is not declared. A team member is given one app role per app."
+  }),
   tools: toolsSchema.meta({
     description: "The MCP tools this app serves to AI assistants, published as `<slug>_<name>`. Each one a site manager accepts becomes callable on their behalf by an assistant."
   }),
@@ -19974,6 +20011,7 @@ var appManifestSchema = baseSchema.superRefine((manifest, ctx) => {
   validateOauth(manifest, ctx);
   validateServer(manifest, ctx);
   validateTools(manifest.tools, ctx);
+  validateRoles(manifest, ctx);
 });
 
 // ../../../libs/app-manifest/src/oauth-flow.ts
@@ -20026,9 +20064,10 @@ var effectGroupSchema = external_exports.object({
   context: external_exports.array(contextWriteSchema).optional()
 }).strict();
 var captureValueSchema = external_exports.object({ value: external_exports.string().max(512), createdAt: external_exports.number().int(), updatedAt: external_exports.number().int(), type: external_exports.enum(CAPTURE_TYPES) }).strict();
+var pageSchema = external_exports.object({ url: external_exports.string().min(1).max(4096), referrer: external_exports.string().min(1).max(4096).optional() }).strict();
 var actionContextFields = {
   occurredAt: external_exports.number().int().nonnegative().safe(),
-  page: external_exports.object({ url: external_exports.string().min(1).max(4096), referrer: external_exports.string().min(1).max(4096).optional() }).strict().optional(),
+  page: pageSchema.optional(),
   network: external_exports.object({
     ip: external_exports.string().min(1).max(64).optional(),
     userAgent: external_exports.string().min(1).max(512).optional(),
@@ -20056,6 +20095,8 @@ var envelopeRequestSchema = external_exports.object({
   }).strict().optional(),
   consent: external_exports.object({ enabled: external_exports.boolean(), categories: external_exports.record(external_exports.string(), external_exports.boolean()), apps: external_exports.record(external_exports.string(), external_exports.boolean()) }).strict().optional(),
   geo: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
+  // Connect envelopes only: the page the visitor's socket opened from.
+  page: pageSchema.optional(),
   // Only what this app captured or wrote for this visitor; `updatedAt` is when the current value
   // was first seen, which is the click time a CAPI `fbc` is built from.
   captures: external_exports.record(external_exports.string().max(64), captureValueSchema).optional(),
@@ -20185,7 +20226,12 @@ var toolSchema2 = external_exports.object({
   name: external_exports.string().min(1).max(MAX_APP_TOOL_NAME_LENGTH).regex(APP_TOOL_NAME_PATTERN),
   // Who asked, and what they may do on this site. Derived from the bearer by the portal, never
   // from the model's arguments.
-  viewer: external_exports.object({ userId: external_exports.string().min(1).max(64), access: external_exports.enum(["read", "write"]) }).strict(),
+  viewer: external_exports.object({
+    userId: external_exports.string().min(1).max(64),
+    access: external_exports.enum(["read", "write"]),
+    // Optional only while a site worker or app runtime that predates it can still receive this envelope; absent means `full`.
+    appRole: external_exports.enum(APP_ROLES).optional()
+  }).strict(),
   // Already validated against the tool's declared inputSchema, with the reserved routing names
   // stripped. Every declared input schema has an object root, so this is an object too — and a
   // call that names no arguments normalizes to `{}` rather than reaching the handler as undefined.
@@ -20413,7 +20459,12 @@ var appUiAnalyticsQueryPath = (domainId, appSlug2, resourceIdentifier) => {
 var uiInstallSchema = external_exports.object({ id: external_exports.string().min(1).max(64), ord: external_exports.number().int().min(1), label: external_exports.string().max(100), enabled: external_exports.boolean() }).strict();
 var uiContextSchema = external_exports.object({
   version: external_exports.string().min(1).max(32),
-  viewer: external_exports.object({ userId: external_exports.string().min(1).max(64), access: external_exports.enum(["read", "write"]) }).strict(),
+  viewer: external_exports.object({
+    userId: external_exports.string().min(1).max(64),
+    access: external_exports.enum(["read", "write"]),
+    // Optional only while a site worker that predates it can still send this header; absent means `full`.
+    appRole: external_exports.enum(APP_ROLES).optional()
+  }).strict(),
   install: uiInstallSchema,
   installs: external_exports.array(uiInstallSchema).min(1).max(MAX_INSTALLS_PER_APP),
   writeTicket: external_exports.string().min(1).max(2048).optional()
@@ -21938,7 +21989,8 @@ var buildContext2 = (envelope, env) => {
     env,
     site,
     install: { id: install.id, label: install.label },
-    viewer: envelope.tool.viewer,
+    // An envelope from a portal that predates the role, or one carrying `full`, has no `appRole`.
+    viewer: { ...envelope.tool.viewer, appRole: envelope.tool.viewer.appRole ?? "full" },
     callId: envelope.tool.callId,
     startWorkflow: buildStartWorkflow({ ord: install.ord, installId: install.id, installLabel: install.label, anonId: null }),
     oauth: buildOauth(env, install.ord),
@@ -22621,7 +22673,8 @@ var dispatchUi = async ({ request, env, versions }) => {
     secrets,
     appVariables,
     appSecrets,
-    viewer: context.viewer,
+    // A site worker that predates app roles sends none, and every member had full access then.
+    viewer: { ...context.viewer, appRole: context.viewer.appRole ?? "full" },
     observability: buildObservability(context.install.ord),
     identity: buildIdentity(env),
     apps: buildAppsClient(env, { depth: 0 })
@@ -22889,7 +22942,7 @@ var dispatch = async (envelope, versions, env) => {
       if (handler === void 0) {
         return jsonError(200, "missing handler: onConnect");
       }
-      return runInstalls(envelope, env, (ctx) => handler(ctx));
+      return runInstalls(envelope, env, (ctx) => handler({ ...ctx, ...envelope.page === void 0 ? {} : { page: envelope.page } }));
     }
     case "transform": {
       return dispatchTransform(envelope, bundle, env);