@builder.io/ai-utils 0.26.0 → 0.26.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@builder.io/ai-utils",
-  "version": "0.26.0",
+  "version": "0.26.2",
   "description": "Builder.io AI utils",
   "type": "module",
   "main": "src/index.js",

package/src/codegen.d.ts

@@ -293,7 +293,7 @@ export interface UpdateSetupValueToolInput {
     };
     reason: string;
 }
-export type ExitState = "verified" | "more-disk" | "more-memory" | "user-question" | "other" | "started";
+export type ExitState = "verified" | "no-frontend" | "empty-project" | "user-question" | "other" | "started";
 export interface ExitToolInput {
     state: ExitState;
     summary: string;
@@ -353,6 +353,7 @@ export interface ProposedConfig {
         devServer: {
             value: string | undefined;
             verified: boolean;
+            elapsed?: number;
         };
         validateCommand: {
             value: string | undefined;
@@ -442,7 +443,7 @@ export interface VerifyDevServerToolInput {
     appOrigin: string;
     defaultOrigin?: string;
 }
-export interface VerifyValidationScriptToolInput {
+export interface VerifyValidateCommandToolInput {
     command: string;
     timeout?: number;
 }
@@ -555,7 +556,7 @@ export interface CodeGenToolMap {
     VerifySetupCommand: VerifySetupCommandToolInput;
     VerifyDevCommand: VerifyDevCommandToolInput;
     VerifyDevServer: VerifyDevServerToolInput;
-    VerifyValidationScript: VerifyValidationScriptToolInput;
+    VerifyValidateCommand: VerifyValidateCommandToolInput;
     VerifyRuntimeDependency: VerifyRuntimeDependencyToolInput;
     SetEnvVariable: SetEnvVariableToolInput;
 }
@@ -629,6 +630,12 @@ export interface CodeGenInputOptions {
      * vs cloud/container mode. Used to determine git auto-commit behavior.
      */
     isLocal?: boolean;
+    /**
+     * Optional factory function to wrap the MCP client with custom behavior
+     * Used by Editor AI to add permission checks for model operations
+     * @internal
+     */
+    _mcpClientWrapperFactory?: (realClient: any) => any;
     maxAgentLoops?: number;
     maxAgentTiming?: number;
     /**
@@ -1313,7 +1320,24 @@ export interface GenerateCodeEventMCPAuthRequired {
     servers: Array<MCPAuthRequiredServer>;
     message: string;
 }
-export type GenerateCodeEvent = ActionItem | GenerateCodeEventDone | GenerateCodeEventContinue | GenerateCodeEventPagination | GenerateCodeEventDelta | GenerateCodeEventError | GenerateCodeEventPing | GenerateCodeEventMCPStatus | GenerateCodeEventMCPAuthRequired | GenerateCodeEventUser;
+export interface GenerateCodeEventModelPermissionRequired {
+    type: "model-permission-required";
+    id: string;
+    operation: "create_model" | "update_model";
+    toolName: string;
+    toolInput: Record<string, any>;
+    modelName: string;
+    details: {
+        modelType?: string;
+        fields?: Array<{
+            name: string;
+            type: string;
+            required?: boolean;
+        }>;
+        changes?: string[];
+    };
+}
+export type GenerateCodeEvent = ActionItem | GenerateCodeEventDone | GenerateCodeEventContinue | GenerateCodeEventPagination | GenerateCodeEventDelta | GenerateCodeEventError | GenerateCodeEventPing | GenerateCodeEventMCPStatus | GenerateCodeEventMCPAuthRequired | GenerateCodeEventModelPermissionRequired | GenerateCodeEventUser;
 export type CommitMode = "commits" | "draft-prs" | "prs";
 export interface GitBackupDownloadUrlResult {
     signedUrl: string;
@@ -1644,6 +1668,11 @@ export interface FusionConfig {
      * Read from project settings, with fallback to organization/space settings.
      */
     maxAgentCompletions?: number;
+    /**
+     * If true, skip all command security policy validation (e.g. allow curl, npx, etc without restrictions).
+     * This is a dangerous setting that removes safety guardrails - equivalent to full shell access.
+     */
+    skipCommandSecurity?: boolean;
     /** @deprecated use devCommand */
     command?: string;
 }

package/src/events.d.ts

@@ -3,7 +3,7 @@ import type { AssistantMessage, AssistantMessageAction } from "./messages.js";
 import type { AssistantSettings } from "./settings.js";
 import type { ExitState } from "./codegen.js";
 export type BuilderAssistantEventHandler = (ev: BuilderAssistantEvent) => void;
-export type BuilderAssistantEvent = AssistantCompletionResultEvent | AssistantErrorEvent | AssistantStreamErrorEvent | AppCloseEvent | AppMessagesClickEvent | AppMessagesGenerationEvent | AppMessageEditCustomInstructionsEvent | AppPromptAbortEvent | AppPromptFocusEvent | AppPromptSubmitEvent | AppReadyEvent | AppSettingsSetEvent | AppThreadNewEvent | AssistantStatsEvent | AssistantThemeEvent | BuilderEditorAuthEvent | BuilderEditorStateEvent | ContentUpdateEvent | ContentApplySnapshotEvent | ModelUndoEvent | ModelRedoEvent | ResultEvent | ThreadCreatedEvent | ThreadMessageCompletedEvent | ThreadMessageCreatedEvent | ThreadMessageDeltaEvent | ThreadMessageFeedbackEvent | ThreadRunStepCreatedEvent | ThreadRunStepDeltaEvent | AppAcceptChangeEvent | AppAcceptRejectEvent | AssistantTrackEvent | AssistantEditorAuthMessage | AppAttachmentTemplateEvent | AppPasteSmartExportEvent | ThreadMessageRetryEvent | AppFigmaImportEvent | AppWebImportEvent | AppMcpServersEvent | AssistantContentInitialEvent | ThreadMessageSummaryEvent | ThreadMessageSummaryCodegenDeltaEvent | ThreadMessageThinkingDeltaEvent | AssistantHeartbeatEvent | ShowUpgradeDialogEvent | AssistantFusionSuggestionEvent | AppNavigateToFusionEvent;
+export type BuilderAssistantEvent = AssistantCompletionResultEvent | AssistantErrorEvent | AssistantStreamErrorEvent | AppCloseEvent | AppMessagesClickEvent | AppMessagesGenerationEvent | AppMessageEditCustomInstructionsEvent | AppPromptAbortEvent | AppPromptFocusEvent | AppPromptSubmitEvent | AppReadyEvent | AppSettingsSetEvent | AppThreadNewEvent | AssistantStatsEvent | AssistantThemeEvent | BuilderEditorAuthEvent | BuilderEditorStateEvent | ContentUpdateEvent | ContentApplySnapshotEvent | ModelUndoEvent | ModelRedoEvent | ResultEvent | ThreadCreatedEvent | ThreadMessageCompletedEvent | ThreadMessageCreatedEvent | ThreadMessageDeltaEvent | ThreadMessageFeedbackEvent | ThreadRunStepCreatedEvent | ThreadRunStepDeltaEvent | AppAcceptChangeEvent | AppAcceptRejectEvent | AssistantTrackEvent | AssistantEditorAuthMessage | AppAttachmentTemplateEvent | AppPasteSmartExportEvent | ThreadMessageRetryEvent | AppFigmaImportEvent | AppWebImportEvent | AppMcpServersEvent | AssistantContentInitialEvent | ThreadMessageSummaryEvent | ThreadMessageSummaryCodegenDeltaEvent | ThreadMessageThinkingDeltaEvent | AssistantHeartbeatEvent | ShowUpgradeDialogEvent | AssistantFusionSuggestionEvent | AppNavigateToFusionEvent | ModelPermissionRequiredEvent | ModelPermissionResponseEvent;
 export interface AssistantCompletionResultEvent {
     type: "assistant.result";
     data: {
@@ -481,7 +481,11 @@ export declare const GitPrCreatedEvent: {
     version: "1";
 };
 export type ClientDevtoolsSessionStartedEvent = FusionEventVariant<"client.devtools.session.started", {
+    sessionId?: string;
     sessionType?: string;
+    projectId?: string;
+    branchName?: string;
+    branchId?: string;
     platform?: string;
 }, {}, 1>;
 export declare const ClientDevtoolsSessionStartedEvent: {
@@ -509,4 +513,30 @@ export declare const SetupAgentCompletedV1: {
     version: "1";
 };
 export type FusionEvent = AiTaskCompletedEvent | AiTaskFailedEvent | GitPrCreatedEvent | ClientDevtoolsSessionStartedEvent | FusionProjectCreatedV1 | SetupAgentCompletedV1;
+export interface ModelPermissionRequiredEvent {
+    type: "assistant.model.permission.required";
+    data: {
+        id: string;
+        sessionId: string;
+        operation: "create_model" | "update_model";
+        modelName: string;
+        details: {
+            modelType?: string;
+            fields?: Array<{
+                name: string;
+                type: string;
+                required?: boolean;
+            }>;
+            changes?: string[];
+        };
+    };
+}
+export interface ModelPermissionResponseEvent extends AwaitResultEvent {
+    type: "assistant.model.permission.response";
+    data: {
+        id: string;
+        approved: boolean;
+        reason?: string;
+    };
+}
 export {};

package/src/projects.d.ts

@@ -152,7 +152,7 @@ export type GitAuthErrorCode = "git-auth-failed" | "git-auth-failed-root-repo" |
 /**
  * Git provider types for diagnostics.
  */
-export type GitDiagnosticsProvider = "github" | "bitbucket" | "gitlab" | "azure" | "unknown";
+export type GitDiagnosticsProvider = "github" | "selfHostedGithub" | "bitbucket" | "gitlab" | "azure" | "unknown";
 /**
  * Detect git provider from a repository URL (HTTPS or SSH).
  * Used by both error diagnostics and connectivity checks for consistent provider labeling.
@@ -213,9 +213,10 @@ export interface CleanupCompletedMessage extends BaseMessage {
  * Messages sent by the container orchestrator.
  */
 export type ProjectsChunkMessage = InitializingMessage | FetchingGithubTokenMessage | FetchingFusionKeyMessage | CheckingAppMessage | CleaningUpAppMessage | CreatingAppMessage | CheckingIPMessage | AllocatingIPMessage | CheckingMachineMessage | CheckingVolumeMessage | ForkingVolumeMessage | RetryingWithNewRegionMessage | WaitingBeforePollingMessage | PollingMachineStatusMessage | WarningStateMessage | PingMessage | DebugMessage | ErrorMessage | InfoMessage | WarningMessage | MachineStatusMessage | LogsMessage | ConfigStatusMessage | AppCreatedMessage | MachineCreatedMessage | IpAllocatedMessage | VolumeForkedMessage | ReadyMessage | ErrorStateMessage | CleanupCompletedMessage;
+export type GitProvider = "github" | "selfHostedGithub" | "bitbucket" | "gitlab" | "azure";
 export interface GitConfig {
     url: string;
-    provider: "github" | "bitbucket" | "gitlab" | "azure" | "unknown";
+    provider: GitProvider | "unknown";
     token: string | undefined;
 }
 export type GitConfigs = Record<string, GitConfig>;
@@ -629,6 +630,7 @@ export interface Project {
         postMergeMemories?: boolean;
         commitInstructions?: string;
         maxAgentCompletions?: number;
+        skipCommandSecurity?: boolean;
         httpsServerKeyPath?: string;
         httpsServerCertPath?: string;
         httpsServerCaPath?: string;
@@ -666,6 +668,8 @@ export interface Project {
      * Defaults to false for backwards compatibility with existing projects.
      */
     useBranchesCollection?: boolean;
+    /** When true, the project is in code-only mode */
+    codeOnlyMode?: boolean;
 }
 /**
  * Get the state of a branch, checking `state` first and falling back to `deleted` for backwards compatibility.

package/src/projects.js

@@ -14,6 +14,8 @@ export function getGitProviderFromUrl(url) {
             return "bitbucket";
         if (lower.includes("dev.azure.com"))
             return "azure";
+        if (lower.includes("github"))
+            return "selfHostedGithub";
         return "unknown";
     }
     catch (_a) {