@builder.io/ai-utils 0.76.4 → 0.79.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@builder.io/ai-utils",
-  "version": "0.76.4",
+  "version": "0.79.1",
   "description": "Builder.io AI utils",
   "files": [
     "src"

package/src/codegen.d.ts

@@ -837,6 +837,8 @@ export declare const ProposedConfigSchema: z.ZodObject<{
     createdAt: z.ZodNumber;
     updatedAt: z.ZodNumber;
     ownerId: z.ZodString;
+    userInitiated: z.ZodBoolean;
+    autoApply: z.ZodBoolean;
     state: z.ZodEnum<{
         "code-change-required": "code-change-required";
         "empty-project": "empty-project";
@@ -1211,7 +1213,6 @@ export declare const SpawnBranchToolInputSchema: z.ZodObject<{
     }>>;
     attachment_urls: z.ZodOptional<z.ZodArray<z.ZodString>>;
     git_base_branch: z.ZodOptional<z.ZodString>;
-    auto_archive_on_idle: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type SpawnBranchToolInput = z.infer<typeof SpawnBranchToolInputSchema>;
 export declare const CreateProjectToolInputSchema: z.ZodObject<{
@@ -1923,7 +1924,6 @@ export declare const CodeGenToolMapSchema: z.ZodObject<{
         }>>;
         attachment_urls: z.ZodOptional<z.ZodArray<z.ZodString>>;
         git_base_branch: z.ZodOptional<z.ZodString>;
-        auto_archive_on_idle: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>;
     CreateProject: z.ZodObject<{
         repo_url: z.ZodString;
@@ -2897,7 +2897,7 @@ export type CodeGenInputOptions = z.infer<typeof CodeGenInputOptionsSchema> & {
      */
     _mcpClientWrapperFactory?: (realClient: any) => any;
 };
-export type CodeGenErrorCodes = "credits-limit-daily" | "credits-limit-monthly" | "credits-limit-user" | "credits-limit-other" | "cli-genetic-error" | "git-update-error" | "prompt-too-long" | "context-too-long" | "abrupt-end" | "unknown" | "failed-recover-state" | "completion-expired" | "ask-to-continue" | "bad-initial-url" | "bad-smart-export-payload" | "invalid-last-message" | "corrupted-session" | "privacy-mode-key-required" | "privacy-mode-key-invalid" | "cli-network-error" | "invalid-credentials" | "model-restricted-too-large" | "org-no-models-enabled" | "assertion" | "rate-limit" | "unknown-design-system";
+export type CodeGenErrorCodes = "credits-limit-daily" | "credits-limit-monthly" | "credits-limit-user" | "credits-limit-other" | "cli-genetic-error" | "git-update-error" | "prompt-too-long" | "context-too-long" | "abrupt-end" | "unknown" | "failed-recover-state" | "completion-expired" | "ask-to-continue" | "bad-initial-url" | "bad-smart-export-payload" | "invalid-last-message" | "corrupted-session" | "privacy-mode-key-required" | "privacy-mode-key-invalid" | "privacy-mode-key-mismatch" | "cli-network-error" | "invalid-credentials" | "model-restricted-too-large" | "org-no-models-enabled" | "assertion" | "rate-limit" | "unknown-design-system";
 export interface CodegenUsage {
     total: number;
     fast: number;
@@ -3700,6 +3700,25 @@ export interface GetSessionTurnsResult {
     sessionMode?: SessionMode;
     hasPlanToApply?: boolean;
     metadata?: Record<string, any>;
+    /** SHA-256(JWK) of the key this session is encrypted with. Presence ⟹ private. */
+    encryptKeyHash?: string;
+    /** Org requires new sessions to be private; derived per-request, not stored. */
+    privacyModeRequired?: boolean;
+}
+/**
+ * Body for `POST /codegen/settings`. All context is optional; the server
+ * resolves settings for the narrowest scope it can, falling back to org.
+ */
+export declare const CodegenSettingsRequestSchema: z.ZodObject<{
+    sessionId: z.ZodOptional<z.ZodString>;
+    projectName: z.ZodOptional<z.ZodString>;
+    branchName: z.ZodOptional<z.ZodString>;
+    repoHash: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type CodegenSettingsRequest = z.infer<typeof CodegenSettingsRequestSchema>;
+/** Load-independent client settings. v1 carries only the privacy gate. */
+export interface CodegenSettingsResult {
+    privacyModeRequired?: boolean;
 }
 export interface CodegenFeedback {
     id: string;
@@ -3788,6 +3807,7 @@ export interface GenerateCodeEventUser {
     id: string;
     previousId: string | undefined;
     displayPrompt: string | undefined;
+    attachments?: Array<Attachment>;
     user: UserSource;
     compacting: boolean;
     sessionMode: SessionMode;
@@ -3974,6 +3994,12 @@ export interface WorkspaceFolder {
     name?: string;
     originalRepoUrl?: string;
     repoUrl?: string;
+    /**
+     * Read-only source to clone when bootstrapping the repo. When set, the CLI clones
+     * this instead of `repoUrl`, then sets origin to `repoUrl` (the real push remote).
+     * Optional, so older CLIs/configs that ignore it stay compatible.
+     */
+    templateRepoUrl?: string;
     repoName?: string;
     resetGit?: boolean;
     branchName?: string;
@@ -4001,6 +4027,8 @@ export interface GitRepoContext {
     repoUrl?: string;
     /** Clean repo URL without auth tokens, for stable storage and refs */
     originalRepoUrl?: string;
+    /** Read-only source to clone when bootstrapping (distinct from the push remote). */
+    templateRepoUrl?: string;
     /** Repo name (e.g., owner/repo) */
     repoName?: string;
     /**
@@ -4149,6 +4177,8 @@ export interface FusionConfig {
      */
     figmaDecodeJobId?: string;
     featureBranch?: string;
+    /** When set, init checks out this exact git commit after cloning featureBranch. */
+    checkoutCommit?: string;
     aiBranch?: string;
     /** Whether this is a fork PR - affects git operations (read-only, can't push) */
     isFork?: boolean;
@@ -4787,5 +4817,10 @@ export interface SessionData {
     numUserMessages: number;
     numNormalUserMessages: number;
     metadata?: Record<string, any>;
+    /**
+     * SHA-256(JWK) of the encryption key this session is encrypted with.
+     * Presence makes the session private (sticky — no downgrade to plaintext).
+     */
+    encryptKeyHash?: string;
 }
 export {};

package/src/codegen.js

@@ -1025,6 +1025,8 @@ export const ProposedConfigSchema = z
     createdAt: z.number(),
     updatedAt: z.number(),
     ownerId: z.string(),
+    userInitiated: z.boolean(),
+    autoApply: z.boolean(),
     state: ExitStateSchema.meta({
         description: "Configuration state from Exit tool",
     }),
@@ -1245,7 +1247,6 @@ export const SpawnBranchToolInputSchema = z
     model: z.enum(["auto", "opus", "sonnet", "haiku"]).optional(),
     attachment_urls: z.array(z.string()).optional(),
     git_base_branch: z.string().optional(),
-    auto_archive_on_idle: z.boolean().optional(),
 })
     .meta({ title: "SpawnBranchToolInput" });
 export const CreateProjectToolInputSchema = z
@@ -1976,6 +1977,18 @@ export const GenerateUserMessageSchema = z
     }),
 })
     .meta({ title: "GenerateUserMessage" });
+/**
+ * Body for `POST /codegen/settings`. All context is optional; the server
+ * resolves settings for the narrowest scope it can, falling back to org.
+ */
+export const CodegenSettingsRequestSchema = z
+    .object({
+    sessionId: z.string().optional(),
+    projectName: z.string().optional(),
+    branchName: z.string().optional(),
+    repoHash: z.string().optional(),
+})
+    .meta({ title: "CodegenSettingsRequest" });
 /**
  * Request for generating a commit message via LLM
  */

package/src/design-systems.d.ts

@@ -53,7 +53,7 @@ export interface GenerateDesignSystemErrorResponse {
 }
 export declare const GENERATE_DESIGN_SYSTEM_MAX_FILE_BYTES: number;
 export declare const GENERATE_DESIGN_SYSTEM_MAX_ATTACHMENTS = 50;
-export declare const GENERATE_DESIGN_SYSTEM_MIN_ATTACHMENTS = 1;
+export declare const GENERATE_DESIGN_SYSTEM_MIN_ATTACHMENTS = 0;
 export declare const generateDesignSystemBodySchema: z.ZodObject<{
     projectName: z.ZodOptional<z.ZodString>;
     devToolsVersion: z.ZodOptional<z.ZodString>;

package/src/design-systems.js

@@ -7,7 +7,7 @@ import { z } from "zod";
 export const GITHUB_REPO_URL_REGEX = /^https:\/\/github\.com\/[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+(?:\.git)?\/?$/;
 export const GENERATE_DESIGN_SYSTEM_MAX_FILE_BYTES = 2 * 1024 * 1024 * 1024;
 export const GENERATE_DESIGN_SYSTEM_MAX_ATTACHMENTS = 50;
-export const GENERATE_DESIGN_SYSTEM_MIN_ATTACHMENTS = 1;
+export const GENERATE_DESIGN_SYSTEM_MIN_ATTACHMENTS = 0;
 export const generateDesignSystemBodySchema = z.object({
     projectName: z.string().trim().min(1).max(200).optional(),
     devToolsVersion: z.string().trim().min(1).max(64).optional(),

package/src/events.d.ts

@@ -1219,6 +1219,18 @@ export declare const ClientDevtoolsToolResultV1: {
     eventName: "client.devtools.tool.result";
     version: "1";
 };
+export type ClientDevtoolsBuildMigratedV1 = FusionEventVariant<"client.devtools.build.migrated", {
+    deployId: string;
+    projectId: string;
+    migrationApplied?: boolean;
+}, {
+    projectId: string;
+    deployId: string;
+}, 1>;
+export declare const ClientDevtoolsBuildMigratedV1: {
+    eventName: "client.devtools.build.migrated";
+    version: "1";
+};
 export type ClientDevtoolsBuildCompletedV1 = FusionEventVariant<"client.devtools.build.completed", {
     deployId: string;
     projectId: string;
@@ -1233,6 +1245,16 @@ export declare const ClientDevtoolsBuildCompletedV1: {
 export type ClientDevtoolsBuildUploadedV1 = FusionEventVariant<"client.devtools.build.uploaded", {
     deployId: string;
     projectId: string;
+    /** Git commit SHA the deploy pod built (git rev-parse HEAD). */
+    gitCommit?: string;
+    /**
+     * Production env from the repo's `builder.config.json` (`hosting.environment.prod`).
+     * The file only exists on the deploy pod, so the pod transports it here for the
+     * service to merge with the Firestore prod env. These are committed plaintext
+     * values with no secret concept; Firestore prod env (which can be secret) is read
+     * directly in the handler and is not sent through the event.
+     */
+    prodEnvFromBuilderConfig?: Record<string, string>;
 }, {
     projectId: string;
     deployId: string;
@@ -1264,7 +1286,7 @@ export declare const McpPrototypePulledV1: {
     eventName: "mcp.prototype.pulled";
     version: "1";
 };
-export type FusionEvent = ClientDevtoolsSessionStartedEvent | ClientDevtoolsSessionIdleEventV1 | ClientDevtoolsToolCallRequestV1 | ClientDevtoolsToolCallV1 | ClientDevtoolsToolResultV1 | ClientDevtoolsBuildCompletedV1 | ClientDevtoolsBuildUploadedV1 | ClientDevtoolsBuildFailedV1 | FusionProjectCreatedV1 | SetupAgentCompletedV1 | GitPrMergedV1 | GitPrCreatedV1 | GitPrClosedV1 | ForceSetupAgentV1 | ClawMessageSentV1 | CodegenCompletionV1 | CodegenUserPromptV1 | GitWebhooksRegisterV1 | FusionProjectSettingsUpdatedV1 | VideoRecordingCompletedV1 | TimelineRecordingReadyV1 | FusionBranchCreatedV1 | FusionContainerStartedV1 | FusionContainerFailedV1 | FusionBranchFailedV1 | BotMentionGitHubExternalPrV1 | BotMentionGitHubInternalPrV1 | BotMentionGitLabPrV1 | BotMentionBitbucketPrV1 | BotMentionAzurePrV1 | ReviewSubmittedV1 | PrReviewRequestedV1 | FigmaDecodeJobV1 | ProjectSnapshotRefreshV1 | ProjectSnapshotCapturedV1 | ProjectSnapshotCreatedV1 | ProjectSnapshotFailedV1 | ProjectSnapshotReadyCheckV1 | ProjectSnapshotPodWatchV1 | McpPrototypePulledV1;
+export type FusionEvent = ClientDevtoolsSessionStartedEvent | ClientDevtoolsSessionIdleEventV1 | ClientDevtoolsToolCallRequestV1 | ClientDevtoolsToolCallV1 | ClientDevtoolsToolResultV1 | ClientDevtoolsBuildMigratedV1 | ClientDevtoolsBuildCompletedV1 | ClientDevtoolsBuildUploadedV1 | ClientDevtoolsBuildFailedV1 | FusionProjectCreatedV1 | SetupAgentCompletedV1 | GitPrMergedV1 | GitPrCreatedV1 | GitPrClosedV1 | ForceSetupAgentV1 | ClawMessageSentV1 | CodegenCompletionV1 | CodegenUserPromptV1 | GitWebhooksRegisterV1 | FusionProjectSettingsUpdatedV1 | VideoRecordingCompletedV1 | TimelineRecordingReadyV1 | FusionBranchCreatedV1 | FusionContainerStartedV1 | FusionContainerFailedV1 | FusionBranchFailedV1 | BotMentionGitHubExternalPrV1 | BotMentionGitHubInternalPrV1 | BotMentionGitLabPrV1 | BotMentionBitbucketPrV1 | BotMentionAzurePrV1 | ReviewSubmittedV1 | PrReviewRequestedV1 | FigmaDecodeJobV1 | ProjectSnapshotRefreshV1 | ProjectSnapshotCapturedV1 | ProjectSnapshotCreatedV1 | ProjectSnapshotFailedV1 | ProjectSnapshotReadyCheckV1 | ProjectSnapshotPodWatchV1 | McpPrototypePulledV1;
 export interface ModelPermissionRequiredEvent {
     type: "assistant.model.permission.required";
     data: {

package/src/events.js

@@ -142,6 +142,10 @@ export const ClientDevtoolsToolResultV1 = {
     eventName: "client.devtools.tool.result",
     version: "1",
 };
+export const ClientDevtoolsBuildMigratedV1 = {
+    eventName: "client.devtools.build.migrated",
+    version: "1",
+};
 export const ClientDevtoolsBuildCompletedV1 = {
     eventName: "client.devtools.build.completed",
     version: "1",

package/src/organization.d.ts

@@ -71,6 +71,8 @@ interface OrganizationSettings {
     enableOrgInsights?: boolean;
     enableBuilderHosting?: boolean;
     enableFusionHosting?: boolean;
+    netlifyAXPartnerAccountId?: string;
+    netlifyAXPartnerAccountSlug?: string;
     allowLegacyPlanSubscriptions?: boolean;
     enforceMaxUsers?: boolean;
     ssoRestrictedMode?: boolean;

package/src/projects.d.ts

@@ -229,6 +229,7 @@ export type GitConfigs = Record<string, GitConfig>;
 export declare const EXAMPLE_REPOS: string[];
 export declare const STARTER_REPO = "BuilderIO/fusion-starter";
 export declare const DSI_PREVIEW_REPO = "BuilderIO/dsi-starter";
+export declare const AGENT_NATIVE_STARTER_REPO = "BuilderIO/builder-agent-native-starter";
 export declare const EXAMPLE_OR_STARTER_REPOS: string[];
 export declare const EXAMPLE_OR_STARTER_REPOS_URLS: string[];
 export interface GitBackupUploadUrlResult {
@@ -394,9 +395,13 @@ export interface PartialBranchData {
     lastCommitHash?: GitSnapshot | null;
     lastCommitDate?: number | null;
     commitMode?: CommitMode;
+    /** @internal When false, merging this branch's PR does not archive it. Seeded from project.settings at creation. */
+    autoCloseBranchOnMerge?: boolean;
     useHomeDir?: boolean;
     agentType?: AgentType;
     checkoutBranch?: string | null;
+    /** When set, the deploy pod checks out this exact git commit after cloning checkoutBranch. */
+    checkoutCommit?: string | null;
     prNumber?: number;
     /** Whether this branch is for a fork PR - affects git operations (read-only, can't push) */
     isFork?: boolean | null;
@@ -548,12 +553,16 @@ export interface BranchSharedData {
     /** Public kube hostnames for this branch (no scheme), when more than one domain is available. */
     kubeHostnames?: string[] | null;
     checkoutBranch?: string | null;
+    /** When set, the deploy pod checks out this exact git commit after cloning checkoutBranch. */
+    checkoutCommit?: string | null;
     /** Whether this branch is for a fork PR - affects git operations (read-only, can't push) */
     isFork?: boolean | null;
     vscodeTunnelUrl?: string | null;
     vscodeTunnelName?: string | null;
     vscodeTunnelExpiresAt?: string | null;
     commitMode?: CommitMode;
+    /** @internal When false, merging this branch's PR does not archive it. Seeded from project.settings at creation. */
+    autoCloseBranchOnMerge?: boolean;
     /** Timestamp when an AI agent started activity on this branch, null when inactive (in milliseconds since epoch) */
     lastAgentActivityAt?: number | null;
     /** Timestamp of last activity on this branch - includes both agent and user activity (in milliseconds since epoch) */
@@ -754,6 +763,10 @@ export interface Project {
         customAgents?: CustomAgentDefinition[];
         /** How the AI commits changes: direct commits, draft PRs, or ready-for-review PRs. Default: "draft-prs". */
         commitMode?: CommitMode;
+        /** @internal Default for new branches' autoCloseBranchOnMerge. When false, merging a PR does not archive the branch. Read only at branch-creation time. Default: true. */
+        autoCloseBranchOnMerge?: boolean;
+        /** Whether merging the PR from the editor is enabled. */
+        enableMergePR?: boolean;
         /** Default visibility for new branches: shared (team-visible) or private. Default: "private". */
         defaultBranchType?: "shared" | "private";
         /** Custom container image path (e.g. ghcr.io/org/image:tag). Overrides nodeVersion when set. */
@@ -883,6 +896,8 @@ export interface Project {
     isFromUserTemplate?: boolean;
     /** ID of the template used to create this project, if any. */
     templateId?: string | null;
+    /** @internal Read-only source repo cloned to bootstrap the project. Immutable. Absent for non-template projects. Distinct from `repoUrl`, which is always the real push remote. */
+    templateRepoUrl?: string;
     /** Local filesystem path for desktop-app projects. */
     localPath?: string | null;
     /** The state of the project. Use `isProjectDeleted()` helper for backwards-compatible checks. */
@@ -995,6 +1010,29 @@ export declare const isBranchArchived: (branch: Branch) => boolean;
  * Check if a project is deleted, supporting both `state` and legacy `deleted` fields.
  */
 export declare const isProjectDeleted: (project: Project) => boolean;
+/**
+ * Canonical "is this project connected to a real remote" predicate. The single
+ * source of truth for "connected", replacing scattered repoFullName-truthiness checks.
+ */
+export declare const hasConnectedRepo: (project: Pick<Project, "repoUrl">) => boolean;
+/**
+ * Derived state: a template-derived project that has a clone source but no real
+ * remote yet. Eager creation (v0) keeps this false; it becomes meaningful under
+ * future lazy repo creation.
+ */
+export declare const isAwaitingRepoCreation: (project: Pick<Project, "templateRepoUrl" | "repoUrl">) => boolean;
+/**
+ * Derived state: the clone source is a separate template repo, so origin must be
+ * re-pointed to the real remote after cloning. Once the internal-host repo is
+ * seeded the template URL is wiped, so this flips to false and clones target the
+ * real remote directly.
+ */
+export declare const clonesFromTemplate: (project: Pick<Project, "templateRepoUrl" | "repoUrl">) => boolean;
+/**
+ * Fail-fast accessor for crash-tier call sites: returns the real remote or throws
+ * a clear error instead of letting `new URL(undefined)` blow up downstream.
+ */
+export declare const getRepoUrlOrThrow: (project: Pick<Project, "repoUrl">) => string;
 export interface ProjectWithBranches extends Project {
     branches: Record<string, Branch>;
 }
@@ -1030,7 +1068,43 @@ export interface CreateProjectOptions {
     useInternalHost?: boolean;
     /** Store branches in the standalone `branches` collection vs embedded in the project doc. */
     useBranchesCollection?: boolean;
+    /** @internal Read-only source repo cloned to bootstrap the project. Carried through to Firestore. */
+    templateRepoUrl?: string;
+    /** @internal First-class hosting config copied from the template. Carried through to Firestore. */
+    hosting?: ProjectHosting;
+    /** @internal When true, provision the internalHost repo eagerly at creation. Hardcoded true for v0. */
+    eagerRepoCreate?: boolean;
 }
+/**
+ * Source-agnostic description of where a new project comes from. A project can be
+ * created from a plain repo URL (connected) or from a template id; template is just
+ * one source kind. Consumed by the shared `createProjectFromSource` create path.
+ */
+export declare const ProjectSourceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"repo">;
+    repoUrl: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"template">;
+    templateId: z.ZodString;
+}, z.core.$strip>], "kind">;
+export type ProjectSource = z.infer<typeof ProjectSourceSchema>;
+/**
+ * Request body for `POST /projects/create`. Identity/credentials come from the
+ * authenticated request context, never the body.
+ */
+export declare const CreateProjectRequestSchema: z.ZodObject<{
+    source: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"repo">;
+        repoUrl: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"template">;
+        templateId: z.ZodString;
+    }, z.core.$strip>], "kind">;
+    name: z.ZodString;
+    initialMessage: z.ZodOptional<z.ZodString>;
+    designSystems: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type CreateProjectRequest = z.infer<typeof CreateProjectRequestSchema>;
 export interface BuilderMyContext {
     success: boolean;
     projectId: string;
@@ -1063,6 +1137,8 @@ export interface CreateBranchOptions {
     hidden?: boolean;
     featureFlags?: Record<string, boolean>;
     checkoutBranch?: string | null;
+    /** When set, the deploy pod checks out this exact git commit after cloning checkoutBranch. */
+    checkoutCommit?: string | null;
     canHandleTools?: (keyof CodeGenToolMap)[];
     skipPromptAnalysis?: boolean;
     useKube?: boolean;
@@ -1328,6 +1404,7 @@ export interface ShouldDeletePodResponse {
 /**
  * Deploy lifecycle status:
  * - queued     - inital state although we don't currently queue deploys per se
+ * - migrating  — deploy pod is preparing production database state before the build
  * - building   — deploy pod is running `npm run build`
  * - uploading  — build succeeded; artifacts being uploaded to GCS (transient,
  *                between `client.devtools.build.completed` and `client.devtools.build.uploaded`)
@@ -1344,12 +1421,13 @@ export declare const DeployStatusSchema: z.ZodEnum<{
     deploying: "deploying";
     failed: "failed";
     live: "live";
+    migrating: "migrating";
     queued: "queued";
     uploading: "uploading";
 }>;
 export type DeployStatus = z.infer<typeof DeployStatusSchema>;
 /** Deploy statuses that are terminal — never transitioned out of. */
-export declare const TERMINAL_DEPLOY_STATUSES: Set<"building" | "canceled" | "deploying" | "failed" | "live" | "queued" | "uploading">;
+export declare const TERMINAL_DEPLOY_STATUSES: Set<"building" | "canceled" | "deploying" | "failed" | "live" | "migrating" | "queued" | "uploading">;
 export declare const HostingPublishStatusSchema: z.ZodEnum<{
     published: "published";
     publishing: "publishing";
@@ -1405,14 +1483,21 @@ export declare const ProjectHostingSchema: z.ZodObject<{
         deploying: "deploying";
         failed: "failed";
         live: "live";
+        migrating: "migrating";
         queued: "queued";
         uploading: "uploading";
     }>>;
+    publishedCommit: z.ZodOptional<z.ZodString>;
     customDomain: z.ZodOptional<z.ZodString>;
     customDomainVerified: z.ZodOptional<z.ZodBoolean>;
     autoDeploy: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type ProjectHosting = z.infer<typeof ProjectHostingSchema>;
+/**
+ * Canonical "is this project hostable" predicate. Keys off the explicit
+ * `hosting.enabled` flag rather than inferring from build-config presence.
+ */
+export declare const isProjectHostable: (hosting: Pick<ProjectHosting, "enabled"> | undefined | null) => boolean;
 /**
  * A single deploy record, stored at `deploys/{deployId}`. The Deploy.id is the document key.
  */
@@ -1421,6 +1506,8 @@ export declare const DeploySchema: z.ZodObject<{
     projectId: z.ZodString;
     ownerId: z.ZodString;
     checkoutBranch: z.ZodOptional<z.ZodString>;
+    checkoutCommit: z.ZodOptional<z.ZodString>;
+    builtCommit: z.ZodOptional<z.ZodString>;
     deployBranchId: z.ZodOptional<z.ZodString>;
     deployBranchName: z.ZodOptional<z.ZodString>;
     devBranchId: z.ZodOptional<z.ZodString>;
@@ -1430,11 +1517,13 @@ export declare const DeploySchema: z.ZodObject<{
         deploying: "deploying";
         failed: "failed";
         live: "live";
+        migrating: "migrating";
         queued: "queued";
         uploading: "uploading";
     }>;
     netlifyDeployId: z.ZodOptional<z.ZodString>;
     url: z.ZodOptional<z.ZodString>;
+    migrationApplied: z.ZodOptional<z.ZodBoolean>;
     error: z.ZodOptional<z.ZodString>;
     createdAt: z.ZodNumber;
     completedAt: z.ZodOptional<z.ZodNumber>;
@@ -1490,12 +1579,16 @@ export type HostingLock = z.infer<typeof HostingLockSchema>;
  */
 export declare const DeployListItemSchema: z.ZodObject<{
     id: z.ZodString;
+    checkoutBranch: z.ZodOptional<z.ZodString>;
+    checkoutCommit: z.ZodOptional<z.ZodString>;
+    builtCommit: z.ZodOptional<z.ZodString>;
     status: z.ZodEnum<{
         building: "building";
         canceled: "canceled";
         deploying: "deploying";
         failed: "failed";
         live: "live";
+        migrating: "migrating";
         queued: "queued";
         uploading: "uploading";
     }>;
@@ -1561,6 +1654,7 @@ export type ReserveSlugResponse = z.infer<typeof ReserveSlugResponseSchema>;
 export declare const DeployRequestSchema: z.ZodObject<{
     projectId: z.ZodString;
     checkoutBranch: z.ZodOptional<z.ZodString>;
+    checkoutCommit: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type DeployRequest = z.infer<typeof DeployRequestSchema>;
 export declare const DeployResponseSchema: z.ZodObject<{
@@ -1571,6 +1665,7 @@ export declare const DeployResponseSchema: z.ZodObject<{
         deploying: "deploying";
         failed: "failed";
         live: "live";
+        migrating: "migrating";
         queued: "queued";
         uploading: "uploading";
     }>;
@@ -1592,12 +1687,16 @@ export type GetDeploysRequest = z.infer<typeof GetDeploysRequestSchema>;
 export declare const GetDeploysResponseSchema: z.ZodObject<{
     deploys: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
+        checkoutBranch: z.ZodOptional<z.ZodString>;
+        checkoutCommit: z.ZodOptional<z.ZodString>;
+        builtCommit: z.ZodOptional<z.ZodString>;
         status: z.ZodEnum<{
             building: "building";
             canceled: "canceled";
             deploying: "deploying";
             failed: "failed";
             live: "live";
+            migrating: "migrating";
             queued: "queued";
             uploading: "uploading";
         }>;

package/src/projects.js

@@ -36,10 +36,12 @@ export const EXAMPLE_REPOS = [
 ];
 export const STARTER_REPO = "BuilderIO/fusion-starter";
 export const DSI_PREVIEW_REPO = "BuilderIO/dsi-starter";
+export const AGENT_NATIVE_STARTER_REPO = "BuilderIO/builder-agent-native-starter";
 export const EXAMPLE_OR_STARTER_REPOS = [
     ...EXAMPLE_REPOS,
     STARTER_REPO,
     DSI_PREVIEW_REPO,
+    AGENT_NATIVE_STARTER_REPO,
 ];
 export const EXAMPLE_OR_STARTER_REPOS_URLS = EXAMPLE_OR_STARTER_REPOS.map((repo) => `https://github.com/${repo}`);
 export const checkIsNewBranch = (branch) => {
@@ -86,6 +88,61 @@ export const isBranchArchived = (branch) => {
 export const isProjectDeleted = (project) => {
     return getProjectState(project) === "deleted";
 };
+/**
+ * Canonical "is this project connected to a real remote" predicate. The single
+ * source of truth for "connected", replacing scattered repoFullName-truthiness checks.
+ */
+export const hasConnectedRepo = (project) => {
+    return !!project.repoUrl;
+};
+/**
+ * Derived state: a template-derived project that has a clone source but no real
+ * remote yet. Eager creation (v0) keeps this false; it becomes meaningful under
+ * future lazy repo creation.
+ */
+export const isAwaitingRepoCreation = (project) => {
+    return !!project.templateRepoUrl && !project.repoUrl;
+};
+/**
+ * Derived state: the clone source is a separate template repo, so origin must be
+ * re-pointed to the real remote after cloning. Once the internal-host repo is
+ * seeded the template URL is wiped, so this flips to false and clones target the
+ * real remote directly.
+ */
+export const clonesFromTemplate = (project) => {
+    return (!!project.templateRepoUrl && project.templateRepoUrl !== project.repoUrl);
+};
+/**
+ * Fail-fast accessor for crash-tier call sites: returns the real remote or throws
+ * a clear error instead of letting `new URL(undefined)` blow up downstream.
+ */
+export const getRepoUrlOrThrow = (project) => {
+    if (!project.repoUrl) {
+        throw new Error("Project repo has not been created yet");
+    }
+    return project.repoUrl;
+};
+/**
+ * Source-agnostic description of where a new project comes from. A project can be
+ * created from a plain repo URL (connected) or from a template id; template is just
+ * one source kind. Consumed by the shared `createProjectFromSource` create path.
+ */
+export const ProjectSourceSchema = z.discriminatedUnion("kind", [
+    z.object({ kind: z.literal("repo"), repoUrl: z.string().url() }),
+    z.object({ kind: z.literal("template"), templateId: z.string() }),
+]);
+/**
+ * Request body for `POST /projects/create`. Identity/credentials come from the
+ * authenticated request context, never the body.
+ */
+export const CreateProjectRequestSchema = z.object({
+    source: ProjectSourceSchema,
+    name: z.string(),
+    /** Optional first message to start the agent with after creation. Template source only (current constraint). */
+    initialMessage: z.string().optional(),
+    /** Design system ids to seed into project settings at creation. */
+    designSystems: z.array(z.string()).optional(),
+});
 export const MEMORY_PICKED_FIELDS = [
     "id",
     "updatedAt",
@@ -181,6 +238,7 @@ export function parseExitPlanMode(chunk) {
 /**
  * Deploy lifecycle status:
  * - queued     - inital state although we don't currently queue deploys per se
+ * - migrating  — deploy pod is preparing production database state before the build
  * - building   — deploy pod is running `npm run build`
  * - uploading  — build succeeded; artifacts being uploaded to GCS (transient,
  *                between `client.devtools.build.completed` and `client.devtools.build.uploaded`)
@@ -194,6 +252,7 @@ export function parseExitPlanMode(chunk) {
 export const DeployStatusSchema = z.enum([
     "queued",
     "building",
+    "migrating",
     "uploading",
     "deploying",
     "live",
@@ -261,6 +320,8 @@ export const ProjectHostingSchema = z.object({
     lastDeployId: z.string().optional(),
     lastDeployAt: z.number().optional(),
     lastDeployStatus: DeployStatusSchema.optional(),
+    /** Git commit currently live at the project's hosting URL (set on go-live). */
+    publishedCommit: z.string().optional(),
     customDomain: z.string().optional(),
     customDomainVerified: z.boolean().optional(),
     autoDeploy: z
@@ -268,6 +329,13 @@ export const ProjectHostingSchema = z.object({
         .optional()
         .meta({ description: "auto-deploy on push/merge" }),
 });
+/**
+ * Canonical "is this project hostable" predicate. Keys off the explicit
+ * `hosting.enabled` flag rather than inferring from build-config presence.
+ */
+export const isProjectHostable = (hosting) => {
+    return (hosting === null || hosting === void 0 ? void 0 : hosting.enabled) === true;
+};
 /**
  * A single deploy record, stored at `deploys/{deployId}`. The Deploy.id is the document key.
  */
@@ -283,6 +351,20 @@ export const DeploySchema = z.object({
             "for row 2 in v2). This is the value passed as `checkoutBranch` when the " +
             "deploy pod was created.",
     }),
+    checkoutCommit: z
+        .string()
+        .optional()
+        .meta({
+        description: "Exact git commit hash deployed. When set, the deploy pod pinned to this " +
+            "commit instead of the branch tip.",
+    }),
+    builtCommit: z
+        .string()
+        .optional()
+        .meta({
+        description: "Actual git commit hash built by the deploy pod (from git rev-parse HEAD " +
+            "after checkout). Set when build.uploaded fires.",
+    }),
     deployBranchId: z.string().optional().meta({
         description: 'Fusion branch id of the ephemeral hidden deploy branch (`type: "deploy"`) that ran the build.',
     }),
@@ -295,6 +377,9 @@ export const DeploySchema = z.object({
     status: DeployStatusSchema,
     netlifyDeployId: z.string().optional(),
     url: z.string().optional(),
+    migrationApplied: z.boolean().optional().meta({
+        description: "Whether Drizzle migrations were applied during this deploy. Absent when no migration ran.",
+    }),
     error: z.string().optional().meta({
         description: "Single human-readable line on failure; raw build logs not surfaced in v0",
     }),
@@ -361,6 +446,9 @@ export const DeployListItemSchema = DeploySchema.pick({
     createdAt: true,
     completedAt: true,
     error: true,
+    checkoutBranch: true,
+    checkoutCommit: true,
+    builtCommit: true,
 }).meta({ title: "DeployListItem" });
 /**
  * Shape of the `manifest.json` the deploy pod uploads to GCS alongside
@@ -486,9 +574,13 @@ export const ReserveSlugRequestSchema = z.object({
 export const ReserveSlugResponseSchema = z.object({
     slug: z.string(),
 });
+const gitCommitHashSchema = z
+    .string()
+    .regex(/^[0-9a-f]{7,40}$/i, "Must be a valid git commit hash (7–40 hex chars)");
 export const DeployRequestSchema = z.object({
     projectId: z.string(),
     checkoutBranch: z.string().optional(),
+    checkoutCommit: gitCommitHashSchema.optional(),
 });
 export const DeployResponseSchema = z.object({
     deployId: z.string(),