@builder.io/ai-utils 0.99.0 → 0.100.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@builder.io/ai-utils",
-  "version": "0.99.0",
+  "version": "0.100.1",
   "description": "Builder.io AI utils",
   "files": [
     "src"

package/src/codegen.d.ts

@@ -385,8 +385,21 @@ export declare const GetScreenshotToolInputSchema: z.ZodObject<{
     height: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
 export type GetScreenshotToolInput = z.infer<typeof GetScreenshotToolInputSchema>;
+/**
+ * `projectId` and `routedBy` are telemetry only and never reach the model or
+ * the classification path — they exist so an audit of real traffic
+ * (`scripts/judge-safety-audit.ts`) can say which project a verdict belonged
+ * to and whether the legacy ACL would have blocked the command. Both are
+ * optional because a pod running an older dev-tools build won't send them.
+ */
 export declare const JudgeCommandSafetyInputSchema: z.ZodObject<{
     command: z.ZodString;
+    projectId: z.ZodOptional<z.ZodString>;
+    routedBy: z.ZodOptional<z.ZodEnum<{
+        "allowlist-miss": "allowlist-miss";
+        "network-client": "network-client";
+        tier2: "tier2";
+    }>>;
 }, z.core.$strip>;
 export type JudgeCommandSafetyInput = z.infer<typeof JudgeCommandSafetyInputSchema>;
 export declare const JudgeCommandSafetyResultSchema: z.ZodObject<{
@@ -2168,6 +2181,18 @@ export declare const CodeGenPositionSchema: z.ZodUnion<readonly [z.ZodEnum<{
     unknown: "unknown";
 }>, z.ZodTemplateLiteral<"browser-testing-agent" | "builder-code-agent" | "builder-code-panel-agent" | "builder-publish-integration-agent" | "cli-agent" | "code-review-orchestrator-agent" | "create-app-firebase-agent" | "create-app-lovable-agent" | "design-system-indexer-agent" | "dsi-mcp-agent" | "editor-ai-agent" | "fusion-agent" | "org-agent-agent" | "org-worker-agent" | "project-configuration-agent" | "projects-scheduler-memory-extraction-agent" | "publish-agent-agent" | "repo-indexing-agent" | "setup-project-agent" | "unknown-agent">]>;
 export type CodeGenPosition = z.infer<typeof CodeGenPositionSchema>;
+export declare const SystemReminderObjSchema: z.ZodObject<{
+    text: z.ZodString;
+    tag: z.ZodOptional<z.ZodString>;
+    ephemeral: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export type SystemReminderObj = z.infer<typeof SystemReminderObjSchema>;
+export declare const SystemReminderSchema: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+    text: z.ZodString;
+    tag: z.ZodOptional<z.ZodString>;
+    ephemeral: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>]>;
+export type SystemReminder = z.infer<typeof SystemReminderSchema>;
 export declare const PublishAgentMessageRequestSchema: z.ZodObject<{
     message: z.ZodOptional<z.ZodString>;
     sessionId: z.ZodOptional<z.ZodString>;
@@ -2182,6 +2207,38 @@ export declare const PublishAgentMessageRequestSchema: z.ZodObject<{
         none: "none";
         xhigh: "xhigh";
     }>>;
+    attachments: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"upload">;
+        contentType: z.ZodEnum<{
+            "application/json": "application/json";
+            "application/pdf": "application/pdf";
+            "image/gif": "image/gif";
+            "image/jpeg": "image/jpeg";
+            "image/png": "image/png";
+            "image/webp": "image/webp";
+            "text/plain": "text/plain";
+        }>;
+        name: z.ZodString;
+        dataUrl: z.ZodString;
+        text: z.ZodOptional<z.ZodString>;
+        size: z.ZodNumber;
+        id: z.ZodString;
+        originalUrl: z.ZodOptional<z.ZodString>;
+        ephemeral: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"template">;
+        name: z.ZodString;
+        id: z.ZodNumber;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"url">;
+        value: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"builder">;
+        html: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"figma">;
+        html: z.ZodString;
+    }, z.core.$strip>], "type">>>;
     toolResults: z.ZodOptional<z.ZodArray<z.ZodObject<{
         type: z.ZodLiteral<"tool_result">;
         tool_use_id: z.ZodString;
@@ -2255,13 +2312,12 @@ export declare const PublishAgentMessageRequestSchema: z.ZodObject<{
         ephemeral: z.ZodOptional<z.ZodBoolean>;
         structured_result: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
     }, z.core.$strip>>>;
-    confirmation: z.ZodOptional<z.ZodObject<{
-        actionId: z.ZodString;
-        decision: z.ZodEnum<{
-            approve: "approve";
-            reject: "reject";
-        }>;
-    }, z.core.$strip>>;
+    systemReminders: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        text: z.ZodString;
+        tag: z.ZodOptional<z.ZodString>;
+        ephemeral: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>]>>>;
+    skippedMCPs: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strip>;
 export type PublishAgentMessageRequest = z.infer<typeof PublishAgentMessageRequestSchema>;
 export declare const RepoIndexingConfigSchema: z.ZodObject<{
@@ -2504,18 +2560,6 @@ export declare const AclPolicySchema: z.ZodObject<{
     denyDescription: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type AclPolicy = z.infer<typeof AclPolicySchema>;
-export declare const SystemReminderObjSchema: z.ZodObject<{
-    text: z.ZodString;
-    tag: z.ZodOptional<z.ZodString>;
-    ephemeral: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$strip>;
-export type SystemReminderObj = z.infer<typeof SystemReminderObjSchema>;
-export declare const SystemReminderSchema: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-    text: z.ZodString;
-    tag: z.ZodOptional<z.ZodString>;
-    ephemeral: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$strip>]>;
-export type SystemReminder = z.infer<typeof SystemReminderSchema>;
 export declare const CodeGenInputOptionsSchema: z.ZodObject<{
     position: z.ZodUnion<readonly [z.ZodEnum<{
         "browser-testing": "browser-testing";
@@ -2994,10 +3038,9 @@ export type CodeGenInputOptions = z.infer<typeof CodeGenInputOptionsSchema> & {
     /** @internal Derived from BuilderEditorState.components for editor AI. */
     _fieldShapeChecks?: FieldShapeCheck[];
     /**
-     * Optional factory function to wrap the MCP client with custom behavior
-     * Used by Editor AI to add permission checks for model operations
      * Optional factory function to wrap the MCP client with custom behavior.
-     * Used by Editor AI to add permission checks for model operations.
+     * Used by Editor AI (model permission prompts) and the Publish Agent
+     * (the confirmation gate); the caller closes over its own event stream.
      * @internal
      */
     _mcpClientWrapperFactory?: (realClient: any) => any;
@@ -5108,6 +5151,12 @@ export declare const CommitMessageResponseSchema: z.ZodObject<{
     body: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type CommitMessageResponse = z.infer<typeof CommitMessageResponseSchema>;
+/** Where a permission gate is installed. Selects the pub/sub channel an approval is published to. */
+export declare const PermissionAwarePositionSchema: z.ZodEnum<{
+    "editor-ai": "editor-ai";
+    "publish-agent": "publish-agent";
+}>;
+export type PermissionAwarePosition = z.infer<typeof PermissionAwarePositionSchema>;
 /**
  * Request body for `POST /codegen/model-permission-response`. Sent by the
  * frontend to approve or deny a model permission prompt.
@@ -5117,6 +5166,10 @@ export declare const ModelPermissionResponseRequestSchema: z.ZodObject<{
     toolId: z.ZodString;
     approved: z.ZodBoolean;
     reason: z.ZodOptional<z.ZodString>;
+    position: z.ZodOptional<z.ZodEnum<{
+        "editor-ai": "editor-ai";
+        "publish-agent": "publish-agent";
+    }>>;
 }, z.core.$strip>;
 export type ModelPermissionResponseRequest = z.infer<typeof ModelPermissionResponseRequestSchema>;
 export interface TodoItem {

package/src/codegen.js

@@ -583,6 +583,13 @@ export const GetScreenshotToolInputSchema = z
     height: z.number().optional(),
 })
     .meta({ title: "GetScreenshotToolInput" });
+/**
+ * `projectId` and `routedBy` are telemetry only and never reach the model or
+ * the classification path — they exist so an audit of real traffic
+ * (`scripts/judge-safety-audit.ts`) can say which project a verdict belonged
+ * to and whether the legacy ACL would have blocked the command. Both are
+ * optional because a pod running an older dev-tools build won't send them.
+ */
 export const JudgeCommandSafetyInputSchema = z
     .object({
     // Bounded so a caller can't force multi-megabyte payloads through this
@@ -591,6 +598,18 @@ export const JudgeCommandSafetyInputSchema = z
     command: z.string().max(20000).meta({
         description: "The shell command to classify.",
     }),
+    projectId: z.string().max(200).optional().meta({
+        description: "Diagnostic only: the Fusion project the command was run in. Never used in classification.",
+    }),
+    // Reported as a single value with the client's own precedence — a command
+    // can trip more than one of these, and only the first two mean the legacy
+    // ACL would have denied it.
+    routedBy: z
+        .enum(["tier2", "allowlist-miss", "network-client"])
+        .optional()
+        .meta({
+        description: "Diagnostic only: why the sandbox sent this command to the judge. Never used in classification.",
+    }),
 })
     .meta({ title: "JudgeCommandSafetyInput" });
 export const JudgeCommandSafetyResultSchema = z
@@ -1780,19 +1799,28 @@ export const CodeGenPositionSchema = z
     z.templateLiteral([BaseCodeGenPositionSchema, "-agent"]),
 ])
     .meta({ title: "CodeGenPosition" });
+export const SystemReminderObjSchema = z
+    .object({
+    text: z.string(),
+    tag: z.string().optional(),
+    ephemeral: z.boolean().optional(),
+})
+    .meta({ title: "SystemReminderObj" });
+export const SystemReminderSchema = z
+    .union([z.string(), SystemReminderObjSchema])
+    .meta({ title: "SystemReminder" });
 export const PublishAgentMessageRequestSchema = z
     .object({
     message: z.string().max(100000).optional(),
     sessionId: z.string().min(1).max(256).optional(),
     modelOverride: z.string().min(1).max(256).optional(),
     reasoning: ReasoningEffortSchema.optional(),
+    attachments: z.array(AttachmentSchema).optional(),
     toolResults: z.array(ContentMessageItemToolResultSchema).optional(),
-    confirmation: z
-        .object({
-        actionId: z.string().min(1).max(256),
-        decision: z.enum(["approve", "reject"]),
-    })
-        .optional(),
+    systemReminders: z.array(SystemReminderSchema).optional(),
+    skippedMCPs: z.array(z.string()).optional().meta({
+        description: "Per-message denylist of MCP server ids to skip, e.g. a 'disable for this session' UI toggle.",
+    }),
 })
     .refine(({ message, toolResults }) => Boolean(message) || Boolean(toolResults === null || toolResults === void 0 ? void 0 : toolResults.length), {
     path: ["message"],
@@ -1943,16 +1971,6 @@ export const AclPolicySchema = z
     }),
 })
     .meta({ title: "AclPolicy" });
-export const SystemReminderObjSchema = z
-    .object({
-    text: z.string(),
-    tag: z.string().optional(),
-    ephemeral: z.boolean().optional(),
-})
-    .meta({ title: "SystemReminderObj" });
-export const SystemReminderSchema = z
-    .union([z.string(), SystemReminderObjSchema])
-    .meta({ title: "SystemReminder" });
 // Schema for CodeGenInputOptions. This is `z.looseObject` so unknown / forward-compat
 // fields pass through. Fields marked `@internal` (function values, middleware-set
 // markers) are excluded from the schema and added back via TypeScript intersection
@@ -2277,6 +2295,11 @@ export const CommitMessageResponseSchema = z
         .meta({ description: "Optional extended description" }),
 })
     .meta({ title: "CommitMessageResponse" });
+/** Where a permission gate is installed. Selects the pub/sub channel an approval is published to. */
+export const PermissionAwarePositionSchema = z.enum([
+    "editor-ai",
+    "publish-agent",
+]);
 /**
  * Request body for `POST /codegen/model-permission-response`. Sent by the
  * frontend to approve or deny a model permission prompt.
@@ -2287,5 +2310,8 @@ export const ModelPermissionResponseRequestSchema = z
     toolId: z.string(),
     approved: z.boolean(),
     reason: z.string().optional(),
+    position: PermissionAwarePositionSchema.optional().meta({
+        description: "Which gate is awaiting this response. Defaults to editor-ai.",
+    }),
 })
     .meta({ title: "ModelPermissionResponseRequest" });

package/src/events.d.ts

@@ -4,7 +4,7 @@ import type { AssistantSettings } from "./settings.js";
 import type { ExitState, UserSource, CodeGenPosition, ReviewSeverity, ReviewVerdict, AskUserQuestion } from "./codegen.js";
 import type { FileUpload } from "./messages.js";
 import type { BuilderConfigRealtime } from "./builder-config.js";
-import type { DeployFailureReport } from "./projects.js";
+import type { DeployFailureReport, ShapeQuestionDecision } from "./projects.js";
 export type BuilderAssistantEventHandler = (ev: BuilderAssistantEvent) => void;
 export type BuilderAssistantEvent = AssistantCompletionResultEvent | AssistantErrorEvent | AssistantStreamErrorEvent | AppCloseEvent | AppMessagesClickEvent | AppMessagesGenerationEvent | AppMessageEditCustomInstructionsEvent | AppPromptAbortEvent | AppPromptFocusEvent | AppPromptSubmitEvent | AppReadyEvent | AppSettingsSetEvent | AppThreadNewEvent | AssistantStatsEvent | AssistantThemeEvent | BuilderEditorAuthEvent | BuilderEditorStateEvent | ContentUpdateEvent | ContentApplySnapshotEvent | ModelUndoEvent | ModelRedoEvent | ResultEvent | ThreadCreatedEvent | ThreadMessageCompletedEvent | ThreadMessageCreatedEvent | ThreadMessageDeltaEvent | ThreadMessageFeedbackEvent | ThreadRunStepCreatedEvent | ThreadRunStepDeltaEvent | AppAcceptChangeEvent | AppAcceptRejectEvent | AssistantTrackEvent | AssistantEditorAuthMessage | AppAttachmentTemplateEvent | AppPasteSmartExportEvent | ThreadMessageRetryEvent | AppFigmaImportEvent | AppWebImportEvent | AppMcpServersEvent | AssistantContentInitialEvent | ThreadMessageSummaryEvent | ThreadMessageSummaryCodegenDeltaEvent | ThreadMessageThinkingDeltaEvent | AssistantHeartbeatEvent | ShowUpgradeDialogEvent | AssistantFusionSuggestionEvent | AppNavigateToFusionEvent | ModelPermissionRequiredEvent | ModelPermissionResponseEvent | AssistantQuestionRequiredEvent;
 export interface AssistantCompletionResultEvent {
@@ -742,6 +742,62 @@ export declare const FusionProjectCreatedV1: {
     eventName: "fusion.project.created";
     version: "1";
 };
+export type FusionShapeIssuedV1 = FusionEventVariant<"fusion.shape.issued", {
+    projectId: string;
+    questionnaireId: string;
+    initialPromptId: string;
+    catalogVersion: string;
+    issuedAt: string;
+}, {}, 1>;
+export declare const FusionShapeIssuedV1: {
+    eventName: "fusion.shape.issued";
+    version: "1";
+};
+export type FusionShapeAssembledV1 = FusionEventVariant<"fusion.shape.assembled", {
+    projectId: string;
+    questionnaireId: string;
+    catalogVersion: string;
+    durationMs: number;
+    selection: "llm" | "fallback";
+    selectedQuestionIds: string[];
+    decisions: ShapeQuestionDecision[];
+    assembledAt: string;
+}, {}, 1>;
+export declare const FusionShapeAssembledV1: {
+    eventName: "fusion.shape.assembled";
+    version: "1";
+};
+export type FusionShapeResolvedV1 = FusionEventVariant<"fusion.shape.resolved", {
+    projectId: string;
+    questionnaireId: string;
+    catalogVersion: string;
+    resolvedAt: string;
+}, {}, 1>;
+export declare const FusionShapeResolvedV1: {
+    eventName: "fusion.shape.resolved";
+    version: "1";
+};
+type FusionShapeQuestionEventData = {
+    projectId: string;
+    questionnaireId: string;
+    catalogVersion: string;
+    questionId: string;
+    chosenOptionId: string;
+    skipped: boolean;
+    delegated: boolean;
+    llmOptionId?: string;
+    guessOptionId?: string;
+};
+export type FusionShapeQuestionAnsweredV1 = FusionEventVariant<"fusion.shape.question.answered", FusionShapeQuestionEventData, {}, 1>;
+export declare const FusionShapeQuestionAnsweredV1: {
+    eventName: "fusion.shape.question.answered";
+    version: "1";
+};
+export type FusionShapeQuestionSkippedV1 = FusionEventVariant<"fusion.shape.question.skipped", FusionShapeQuestionEventData, {}, 1>;
+export declare const FusionShapeQuestionSkippedV1: {
+    eventName: "fusion.shape.question.skipped";
+    version: "1";
+};
 export type SetupAgentCompletedV1 = FusionEventVariant<"fusion.setup.completed", {
     proposedConfigId: string;
     projectId: string;
@@ -1373,7 +1429,7 @@ export declare const HostingCustomDomainDelegationCheckV1: {
     eventName: "hosting.custom-domain.delegation-check";
     version: "1";
 };
-export type FusionEvent = ClientDevtoolsSessionStartedEvent | ClientDevtoolsSessionIdleEventV1 | ClientDevtoolsToolCallRequestV1 | ClientDevtoolsToolCallV1 | ClientDevtoolsToolResultV1 | ClientDevtoolsBuildMigratedV1 | ClientDevtoolsBuildCompletedV1 | ClientDevtoolsBuildUploadedV1 | ClientDevtoolsBuildFailedV1 | FusionProjectCreatedV1 | SetupAgentCompletedV1 | GitPrMergedV1 | GitPrCreatedV1 | GitPrClosedV1 | ForceSetupAgentV1 | ClawMessageSentV1 | CodegenCompletionV1 | CodegenUserPromptV1 | GitWebhooksRegisterV1 | FusionProjectSettingsUpdatedV1 | VideoRecordingCompletedV1 | TimelineRecordingReadyV1 | FusionBranchCreatedV1 | FusionContainerStartedV1 | FusionContainerFailedV1 | FusionBranchFailedV1 | BotMentionGitHubExternalPrV1 | BotMentionGitHubInternalPrV1 | BotMentionGitLabPrV1 | BotMentionBitbucketPrV1 | BotMentionAzurePrV1 | ReviewSubmittedV1 | PrReviewRequestedV1 | FigmaDecodeJobV1 | ProjectSnapshotRefreshV1 | ProjectSnapshotCapturedV1 | ProjectSnapshotCreatedV1 | ProjectSnapshotFailedV1 | ProjectSnapshotReadyCheckV1 | ProjectSnapshotPodWatchV1 | McpPrototypePulledV1 | HostingCustomDomainCertCheckV1 | HostingCustomDomainServingCheckV1 | HostingCustomDomainDelegationCheckV1;
+export type FusionEvent = ClientDevtoolsSessionStartedEvent | ClientDevtoolsSessionIdleEventV1 | ClientDevtoolsToolCallRequestV1 | ClientDevtoolsToolCallV1 | ClientDevtoolsToolResultV1 | ClientDevtoolsBuildMigratedV1 | ClientDevtoolsBuildCompletedV1 | ClientDevtoolsBuildUploadedV1 | ClientDevtoolsBuildFailedV1 | FusionProjectCreatedV1 | FusionShapeIssuedV1 | FusionShapeAssembledV1 | FusionShapeResolvedV1 | FusionShapeQuestionAnsweredV1 | FusionShapeQuestionSkippedV1 | SetupAgentCompletedV1 | GitPrMergedV1 | GitPrCreatedV1 | GitPrClosedV1 | ForceSetupAgentV1 | ClawMessageSentV1 | CodegenCompletionV1 | CodegenUserPromptV1 | GitWebhooksRegisterV1 | FusionProjectSettingsUpdatedV1 | VideoRecordingCompletedV1 | TimelineRecordingReadyV1 | FusionBranchCreatedV1 | FusionContainerStartedV1 | FusionContainerFailedV1 | FusionBranchFailedV1 | BotMentionGitHubExternalPrV1 | BotMentionGitHubInternalPrV1 | BotMentionGitLabPrV1 | BotMentionBitbucketPrV1 | BotMentionAzurePrV1 | ReviewSubmittedV1 | PrReviewRequestedV1 | FigmaDecodeJobV1 | ProjectSnapshotRefreshV1 | ProjectSnapshotCapturedV1 | ProjectSnapshotCreatedV1 | ProjectSnapshotFailedV1 | ProjectSnapshotReadyCheckV1 | ProjectSnapshotPodWatchV1 | McpPrototypePulledV1 | HostingCustomDomainCertCheckV1 | HostingCustomDomainServingCheckV1 | HostingCustomDomainDelegationCheckV1;
 export interface ModelPermissionRequiredEvent {
     type: "assistant.model.permission.required";
     data: {

package/src/events.js

@@ -46,6 +46,26 @@ export const FusionProjectCreatedV1 = {
     eventName: "fusion.project.created",
     version: "1",
 };
+export const FusionShapeIssuedV1 = {
+    eventName: "fusion.shape.issued",
+    version: "1",
+};
+export const FusionShapeAssembledV1 = {
+    eventName: "fusion.shape.assembled",
+    version: "1",
+};
+export const FusionShapeResolvedV1 = {
+    eventName: "fusion.shape.resolved",
+    version: "1",
+};
+export const FusionShapeQuestionAnsweredV1 = {
+    eventName: "fusion.shape.question.answered",
+    version: "1",
+};
+export const FusionShapeQuestionSkippedV1 = {
+    eventName: "fusion.shape.question.skipped",
+    version: "1",
+};
 export const SetupAgentCompletedV1 = {
     eventName: "fusion.setup.completed",
     version: "1",