@heybox/hb-sdk 0.9.1-alpha.4 → 0.9.1-alpha.5

package/dist/workspace-card-build-sandbox-worker.mjs

@@ -0,0 +1,72 @@
+import { readFileSync } from 'node:fs';
+import { newQuickJSWASMModuleFromVariant } from 'quickjs-emscripten-core';
+
+function output(message) {
+  process.stdout.write(`${JSON.stringify(message)}\n`);
+}
+
+async function main() {
+  const input = readFileSync(0, 'utf8');
+  if (Buffer.byteLength(input, 'utf8') > 1_100_000) throw new Error('INPUT_TOO_LARGE');
+  const request = JSON.parse(input);
+  if (!request || typeof request.source !== 'string' || Buffer.byteLength(request.source, 'utf8') > 1_048_576) throw new Error('SOURCE_TOO_LARGE');
+  const source = request.source;
+  const quickjs = await newQuickJSWASMModuleFromVariant(import('@jitl/quickjs-wasmfile-release-sync'));
+  const deadline = Date.now() + 500;
+  const runtime = quickjs.newRuntime({ memoryLimitBytes: 64 * 1024 * 1024, maxStackSizeBytes: 512 * 1024, interruptHandler: () => Date.now() > deadline });
+  const context = runtime.newContext();
+  try {
+    const materializer = context.evalCode(`(() => {
+      const entries = Object.entries;
+      const hasOwn = Object.hasOwn;
+      const map = Array.prototype.map;
+      const apply = Reflect.apply;
+      const stringify = JSON.stringify;
+      return author => stringify({
+        networkOrigins: author.networkOrigins ?? [],
+        hasRefresh: typeof author.refresh === 'function',
+        cards: apply(map, apply(entries, Object, [author.cards]), [([id, card]) => ({
+          id, title: card.title, sizes: { allowed: card.sizes, default: card.defaultSize },
+          hasDocuments: hasOwn(card, 'documents'),
+          hasLoadingDocuments: hasOwn(card, 'loadingDocuments'),
+          hasErrorDocuments: hasOwn(card, 'errorDocuments'),
+          documents: card.documents,
+          loadingDocuments: card.loadingDocuments,
+          errorDocuments: card.errorDocuments,
+        })]),
+        actions: apply(map, apply(entries, Object, [author.actions ?? {}]), [([id, action]) => ({
+          id, kind: action.kind, inputSchema: action.input,
+        })]),
+      });
+    })()`);
+    if (materializer.error) {
+      materializer.error.dispose();
+      throw new Error('MATERIALIZER_FAILED');
+    }
+    const result = context.evalCode(source, 'workspace-card-author.mjs', { type: 'module' });
+    if (result.error) {
+      const error = context.dump(result.error);
+      result.error.dispose();
+      materializer.value.dispose();
+      throw new Error(error?.message === 'interrupted' ? 'CPU_INTERRUPTED' : 'GUEST_FAILED');
+    }
+    const exported = context.getProp(result.value, 'default');
+    const serialized = context.callFunction(materializer.value, context.undefined, exported);
+    materializer.value.dispose();
+    exported.dispose();
+    result.value.dispose();
+    if (serialized.error) {
+      serialized.error.dispose();
+      throw new Error('MATERIALIZATION_FAILED');
+    }
+    const json = context.dump(serialized.value);
+    serialized.value.dispose();
+    if (typeof json !== 'string' || Buffer.byteLength(json, 'utf8') > 256 * 1024) throw new Error('OUTPUT_TOO_LARGE');
+    output({ ok: true, json });
+  } finally {
+    context.dispose();
+    runtime.dispose();
+  }
+}
+
+main().catch(error => output({ ok: false, code: error instanceof Error ? error.message : 'SANDBOX_FAILED' }));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heybox/hb-sdk",
-  "version": "0.9.1-alpha.4",
+  "version": "0.9.1-alpha.5",
   "sideEffects": [
     "./src/index.ts",
     "./src/core/singleton.ts",
@@ -11,31 +11,38 @@
   "exports": {
     ".": {
       "types": "./types/index.d.ts",
-      "heybox": "./src/index.ts",
+      "heybox": "./dist/index.esm.js",
       "node": "./dist/index.cjs.js",
       "browser": "./dist/index.esm.js",
       "default": "./dist/index.esm.js"
     },
     "./protocol": {
       "types": "./types/protocol.d.ts",
-      "heybox": "./src/protocol.ts",
+      "heybox": "./dist/protocol.esm.js",
       "node": "./dist/protocol.cjs.js",
       "browser": "./dist/protocol.esm.js",
       "default": "./dist/protocol.esm.js"
     },
     "./miniapp-publish": {
       "types": "./types/miniapp-publish/index.d.ts",
-      "heybox": "./src/miniapp-publish/index.ts",
+      "heybox": "./dist/miniapp-publish.esm.js",
       "node": "./dist/miniapp-publish.cjs.js",
       "browser": "./dist/miniapp-publish.esm.js",
       "default": "./dist/miniapp-publish.esm.js"
     },
     "./vite": {
       "types": "./types/vite/index.d.ts",
-      "heybox": "./src/vite/index.ts",
+      "heybox": "./dist/vite.esm.js",
       "import": "./dist/vite.esm.js",
       "require": "./dist/vite.cjs.js",
       "default": "./dist/vite.esm.js"
+    },
+    "./card-controller": {
+      "types": "./types/card-controller.d.ts",
+      "heybox": "./dist/card-controller.esm.js",
+      "import": "./dist/card-controller.esm.js",
+      "require": "./dist/card-controller.cjs.js",
+      "default": "./dist/card-controller.esm.js"
     }
   },
   "bin": {
@@ -59,13 +66,16 @@
     "node": ">=22.20.0"
   },
   "dependencies": {
+    "@jitl/quickjs-wasmfile-release-sync": "0.31.0",
     "@msgpack/msgpack": "2.8.0",
     "parse5": "^7.3.0",
+    "quickjs-emscripten-core": "0.31.0",
     "skills": "1.5.23",
+    "typescript": "^5.9.3",
     "undici": "^7.28.0",
     "ws": "^8.18.0",
     "sharp": "^0.34.5",
-    "@heybox/hb-sdk-protocol": "0.9.1-alpha.4"
+    "@heybox/hb-sdk-protocol": "0.9.1-alpha.5"
   },
   "peerDependencies": {
     "vite": ">=5"
@@ -111,17 +121,18 @@
     "semver": "^7.8.0",
     "sass-embedded": "1.97.3",
     "splitpanes": "^4.1.0",
-    "typescript": "^5.9.3",
     "vue": "^3.5.22",
     "vue-tsc": "^3.3.7",
     "vite": "^8.0.12",
     "vitest": "^3.2.4",
+    "@ai-desktop/view-contract": "file:../hb-sdk-protocol/vendor/view-contract-2.2.2-6ac49bbf6410.tgz",
+    "rollup-plugin-dts": "6.4.0",
     "@heybox-domain/heybox-theme": "~0.1.0",
     "@heybox-domain/heybox-vue3-ui": "~0.1.0",
-    "@heybox/runtime": "~0.2.1",
+    "@heybox/hb-sdk-runtime": "~0.9.1-alpha.5",
     "@heybox/hb-api": "~1.28.14",
+    "@heybox/runtime": "~0.2.1",
     "@heybox/runtime-policy": "~0.2.1",
-    "@heybox/hb-sdk-runtime": "~0.9.1-alpha.4",
     "@heybox/runtime-transport-fetch": "~0.2.1"
   },
   "publishConfig": {
@@ -168,7 +179,7 @@
     "build:cli:bundle": "node scripts/check-workspace-builds.cjs && rollup -c rollup.config.ts --environment HB_SDK_BUILD:cli --configPlugin 'typescript={\"tsconfig\":\"tsconfig.build.json\"}' && pnpm run build:browser-dev-host",
     "build:browser-dev-host": "vite build --config vite.browser-dev-host.config.ts && node scripts/check-browser-dev-host-assets.cjs && node scripts/generate-browser-dev-host-notices.cjs",
     "build:templates": "node scripts/copy-cli-templates.cjs",
-    "build:types": "tsc -p tsconfig.dts.json",
+    "build:types": "tsc -p tsconfig.dts.json && node ../hb-sdk-protocol/scripts/bundle-declarations.mjs",
     "check:boundary": "node scripts/check-boundary.cjs",
     "check:docs-sync": "pnpm --filter @heybox-docs/docs-hb_sdk run check:reference && node scripts/skill/generate-manifest.mjs --check && node scripts/skill/validate-skill.mjs",
     "check:compatibility-evidence": "node scripts/validate-compatibility-evidence.mjs",
@@ -192,6 +203,9 @@
     "release:tag": "node scripts/release-tag.cjs",
     "release:family:dry-run": "node ../../ops/jobs/publish-changed-packages/publish.cjs --dry-run",
     "release:family:promote": "node ../../ops/jobs/publish-changed-packages/publish.cjs --family-action promote",
-    "release:family:rollback": "node ../../ops/jobs/publish-changed-packages/publish.cjs --family-action rollback"
+    "release:family:rollback": "node ../../ops/jobs/publish-changed-packages/publish.cjs --family-action rollback",
+    "check:bundled-contract": "node ../hb-sdk-protocol/scripts/check-bundled-contract.mjs",
+    "postbuild:package": "node ../hb-sdk-protocol/scripts/check-bundled-contract.mjs",
+    "test:bundled-contract": "node scripts/verify-bundled-consumer.mjs"
   }
 }

package/skill/skill.json

@@ -1,15 +1,15 @@
 {
   "name": "hb-sdk",
-  "skillVersion": "0.9.1-alpha.4+skill.aa24d6656331",
+  "skillVersion": "0.9.1-alpha.5+skill.aa24d6656331",
   "sdk": {
     "package": "@heybox/hb-sdk",
-    "version": "0.9.1-alpha.4",
-    "compatibility": "0.9.1-alpha.4"
+    "version": "0.9.1-alpha.5",
+    "compatibility": "0.9.1-alpha.5"
   },
   "distribution": {
     "type": "npm",
     "package": "@heybox/hb-sdk",
-    "version": "0.9.1-alpha.4",
+    "version": "0.9.1-alpha.5",
     "path": "skill"
   },
   "integrity": "sha256-aa24d6656331cbad8f6aae7735258a49d7f1a82f6e900415de53a1b93a30ddb8"