@frockbot/plugin-shell 0.1.4 → 0.2.1

package/src/client/package-iframe-host-message.test.ts

@@ -0,0 +1,41 @@
+import { describe, expect, test } from "bun:test";
+import type { PackageIframeHostMessageV1 } from "@frockbot/kernel-contracts";
+import { postPackageIframeHostMessage } from "./package-iframe-host-message.js";
+
+describe("Package iframe host messages", () => {
+  test("posts unchanged state once and posts changed state again", () => {
+    const posted: PackageIframeHostMessageV1[] = [];
+    const target = {
+      postMessage(message: PackageIframeHostMessageV1): void {
+        posted.push(message);
+      },
+    } as Pick<Window, "postMessage">;
+    const lastStateWireByName = new Map<string, string>();
+
+    const postSettings = (value: unknown): void =>
+      postPackageIframeHostMessage(
+        target,
+        { schemaVersion: 1, type: "state", name: "settings", value },
+        lastStateWireByName,
+      );
+
+    postSettings({ temperatureUnit: "celsius" });
+    postSettings({ temperatureUnit: "celsius" });
+    postSettings({ temperatureUnit: "fahrenheit" });
+
+    expect(posted).toEqual([
+      {
+        schemaVersion: 1,
+        type: "state",
+        name: "settings",
+        value: { temperatureUnit: "celsius" },
+      },
+      {
+        schemaVersion: 1,
+        type: "state",
+        name: "settings",
+        value: { temperatureUnit: "fahrenheit" },
+      },
+    ]);
+  });
+});

package/src/client/package-iframe-host-message.ts

@@ -0,0 +1,27 @@
+import type { PackageIframeHostMessageV1 } from "@frockbot/kernel-contracts";
+
+type MessageTarget = Pick<Window, "postMessage">;
+
+export function postPackageIframeHostMessage(
+  target: MessageTarget,
+  message: PackageIframeHostMessageV1,
+  lastStateWireByName: Map<string, string>,
+): void {
+  const wire = JSON.stringify(message);
+  if (new TextEncoder().encode(wire).byteLength > 64 * 1024) {
+    throw new Error("Package page state exceeds the bridge limit");
+  }
+  if (
+    message.type === "state" &&
+    lastStateWireByName.get(message.name) === wire
+  ) {
+    return;
+  }
+
+  // Vue settings values may be reactive proxies, which structured clone
+  // rejects. JSON is also the bridge's declared value domain.
+  target.postMessage(JSON.parse(wire) as PackageIframeHostMessageV1, "*");
+  if (message.type === "state") {
+    lastStateWireByName.set(message.name, wire);
+  }
+}

package/src/composition-views.ts

@@ -9,6 +9,11 @@ import {
   type CompositionMemberViewV1,
   type CompositionProvenanceViewV1,
 } from "@frockbot/configuration-core";
+import type { PackageIframeCompositionV1 } from "@frockbot/kernel-contracts";
+import {
+  isClientIframeContribution,
+  type FrockBotManifest,
+} from "@frockbot/kernel-composition";
 import type {
   CompositionFailureV1,
   CompositionQuarantineV1,
@@ -29,11 +34,57 @@ export type CompositionMemberSourceReaderV1 = (
   member: CompositionMemberV1,
 ) => Promise<string | undefined>;
 
+/** One decoded manifest lookup shared by isolate mount and hosted UI views. */
+export type CompositionMemberManifestReaderV1 = (
+  member: CompositionMemberV1,
+) => Promise<FrockBotManifest | undefined>;
+
+/** Project iframe Contributions from either Bot or Catalog provenance. */
+export async function projectPackageIframeCompositionV1(input: {
+  botId: string;
+  generation: CompositionGenerationV1;
+  readMemberManifest: CompositionMemberManifestReaderV1;
+}): Promise<PackageIframeCompositionV1> {
+  const contributions: PackageIframeCompositionV1["contributions"] = [];
+  for (const member of input.generation.members) {
+    if (member.provenance.kind === "first-party") continue;
+    const manifest = await input.readMemberManifest(member);
+    if (!manifest) continue;
+    const client = manifest.contributions.client;
+    if (!client || !isClientIframeContribution(client)) continue;
+    contributions.push({
+      packageId: member.packageId,
+      displayName: manifest.displayName,
+      provenance:
+        member.provenance.kind === "bot" ? "Bot-authored" : "User-installed",
+      artifact: { ...client.artifact },
+      mounts: client.mounts.map((mount) => ({ ...mount })),
+      declaredTools: (manifest.tools ?? []).map((tool) => tool.name),
+    });
+  }
+  contributions.sort((left, right) =>
+    left.packageId.localeCompare(right.packageId),
+  );
+  return {
+    schemaVersion: 1,
+    botId: input.botId,
+    generationId: input.generation.generationId,
+    contributions,
+  };
+}
+
 function provenanceView(
   member: CompositionMemberV1,
 ): CompositionProvenanceViewV1 {
   const provenance = member.provenance;
   if (provenance.kind === "first-party") return { kind: "first-party" };
+  if (provenance.kind === "catalog") {
+    return {
+      kind: "catalog",
+      catalogId: provenance.catalogId,
+      catalogGeneration: provenance.catalogGeneration,
+    };
+  }
   if (provenance.kind === "user") {
     return {
       kind: "user",
@@ -102,6 +153,9 @@ export async function projectCompositionGenerationV1(
     isCurrent: input.generation.generationId === input.currentGenerationId,
     members,
     failures,
+    ...(input.generation.summary === undefined
+      ? {}
+      : { summary: input.generation.summary }),
     ...(input.quarantine === undefined
       ? {}
       : {

package/src/shared.ts

@@ -14,6 +14,8 @@ import type {
   CatalogIndexEntryV1,
 } from "@frockbot/catalog-core";
 import type {
+  PackageIframeCatalogV1,
+  PackageIframeContributionViewV1,
   SendToUserPayloadV1,
   SkillRefV1,
 } from "@frockbot/kernel-contracts";
@@ -187,6 +189,8 @@ export interface FrockBotWebData {
    * without the run's own events being rewritten.
    */
   tasks: TaskViewV1[];
+  /** Sandboxed pages in the selected Bot's active fail-closed Composition. */
+  packageUi?: PackageIframeCatalogV1;
   /**
    * The User's MCP servers: state, tool count, last handshake, instructions,
    * failure, and the durable refusal ledger. Absent until it is loaded, and
@@ -240,6 +244,12 @@ export interface FrockBotWebData {
   loadApprovals(): Promise<void>;
   /** Refreshes {@link FrockBotWebData.tasks} for the active Bot. */
   loadTasks(): Promise<void>;
+  loadPackageUi(): Promise<void>;
+  callPackageUiTool(
+    contribution: PackageIframeContributionViewV1,
+    name: string,
+    input: unknown,
+  ): Promise<unknown>;
   /**
    * Cancels one subagent, explicitly and with the User's authentication. The
    * backend is the authority: the task this replaces in the list is the record