@burdenoff/fe-libs 2026.1021.12 → 2026.1021.13

package/dist/shared/assistant/pageContextKeys.d.ts

@@ -0,0 +1,46 @@
+/**
+ * The page-context keys the assistant sandbox actually reads, and the host-side
+ * filter that keeps every other key in the browser (G52, PR-AI-03 / BOFF-3908).
+ *
+ * The sandbox (`ai-assistant`) reads `pageContext` in exactly two places:
+ *
+ * - `src/context-loader.ts` `ALLOWED_CONTEXT_KEYS` — the keys `injectPageContext`
+ *   writes into the session for the model. Any other key is skipped there.
+ * - `src/context-redaction.ts` `CONTEXT_ID_KEYS` — the opaque ids whose values
+ *   are redacted from the assistant's replies. `organizationId` is on this list
+ *   but NOT the first, so it must still be forwarded: dropping it would stop the
+ *   sandbox from redacting an organisation id the model learnt from a tool call.
+ *
+ * Both lists are private Sets in that repo, and ai-assistant cannot import
+ * fe-libs, so they are mirrored here and pinned by a drift test against
+ * `__fixtures__/aiAssistantContextKeys.json`, which
+ * `scripts/assistant-context-keys/vendor.ts` cuts from an ai-assistant checkout
+ * (it records the commit and each source file's SHA-256). Re-vendor, then
+ * update these lists, whenever either Set changes.
+ *
+ * The filter is defence in depth: the sandbox already drops unknown keys before
+ * the model sees them, so this changes nothing the model receives. It stops the
+ * browser from sending data nobody reads (the user agent, a timestamp, anything
+ * a product adds by accident) through the gateway and the sandbox proxy.
+ */
+/** Mirror of ai-assistant `ALLOWED_CONTEXT_KEYS`: the keys the model is shown. */
+export declare const ASSISTANT_MODEL_CONTEXT_KEYS: readonly ["currentUrl", "currentPage", "entityType", "entityId", "entityName", "pageTitle", "pageType", "activeTab", "activeTool", "selectedText", "workspaceId", "workspaceName", "projectId", "projectName", "platform", "version", "viewportSize", "vibeId", "vibeName", "vibePath", "sessionId", "sessionName", "agentId", "agentName"];
+/** Mirror of ai-assistant `CONTEXT_ID_KEYS`: the ids redacted from replies. */
+export declare const ASSISTANT_REDACTED_CONTEXT_ID_KEYS: readonly ["workspaceId", "organizationId", "projectId", "entityId", "vibeId", "sessionId", "agentId"];
+export type AssistantPageContextKey = (typeof ASSISTANT_MODEL_CONTEXT_KEYS)[number] | (typeof ASSISTANT_REDACTED_CONTEXT_ID_KEYS)[number];
+/**
+ * Every key a host may send in `pageContext`: the union of the two server
+ * lists, in a stable order (model keys first, then the redaction-only ones).
+ */
+export declare const ASSISTANT_PAGE_CONTEXT_KEYS: readonly AssistantPageContextKey[];
+/** Whether the sandbox reads `key` from `pageContext`. */
+export declare function isAssistantPageContextKey(key: string): key is AssistantPageContextKey;
+/**
+ * The part of a host's page context that goes on the wire: only allow-listed
+ * keys, with their values untouched. `undefined` stays `undefined`, so a turn
+ * with no context still produces the body it always did; a context with no
+ * allow-listed key becomes `{}`, which the sandbox treats as "no context".
+ *
+ * Own enumerable keys only — an inherited or prototype key is never forwarded.
+ */
+export declare function filterAssistantPageContext(pageContext: Readonly<Record<string, unknown>> | undefined): Record<string, unknown> | undefined;

package/dist/shared/assistant/pageContextKeys.js

@@ -0,0 +1,46 @@
+//#region src/shared/assistant/pageContextKeys.ts
+var e = [
+	"currentUrl",
+	"currentPage",
+	"entityType",
+	"entityId",
+	"entityName",
+	"pageTitle",
+	"pageType",
+	"activeTab",
+	"activeTool",
+	"selectedText",
+	"workspaceId",
+	"workspaceName",
+	"projectId",
+	"projectName",
+	"platform",
+	"version",
+	"viewportSize",
+	"vibeId",
+	"vibeName",
+	"vibePath",
+	"sessionId",
+	"sessionName",
+	"agentId",
+	"agentName"
+], t = [
+	"workspaceId",
+	"organizationId",
+	"projectId",
+	"entityId",
+	"vibeId",
+	"sessionId",
+	"agentId"
+], n = Object.freeze(Array.from(new Set([...e, ...t]))), r = new Set(n);
+function i(e) {
+	return r.has(e);
+}
+function a(e) {
+	if (e === void 0) return;
+	let t = {};
+	for (let [n, i] of Object.entries(e)) r.has(n) && (t[n] = i);
+	return t;
+}
+//#endregion
+export { e as ASSISTANT_MODEL_CONTEXT_KEYS, n as ASSISTANT_PAGE_CONTEXT_KEYS, t as ASSISTANT_REDACTED_CONTEXT_ID_KEYS, a as filterAssistantPageContext, i as isAssistantPageContextKey };