@noodleseed/one 0.8.0 → 0.10.0

package/dist/devtools-chat.d.ts

@@ -0,0 +1,76 @@
+/**
+ * The `noodle devtools` chat playground agent loop. Runs entirely inside the local preview server: it
+ * calls an OpenAI-compatible chat-completions endpoint, and whenever the model requests a tool it invokes
+ * the caller-supplied `callTool` (which the preview server wires to the loopback `dev` MCP endpoint through
+ * its `/rpc` forwarder). The OpenAI API key stays server-side — it is never sent to the browser or logged.
+ *
+ * This is an extension of `dev`'s local, loopback-only tool exercise, not a general MCP client (ADR 0043):
+ * the agent can only reach the tools of the local server the devtools session is already previewing.
+ */
+/** The default model — overridable per session via `--model` or `OPENAI_MODEL`. */
+export declare const DEFAULT_CHAT_MODEL = "gpt-5.5";
+/** An OpenAI chat-completions message (subset we produce/consume). */
+export interface ChatMessage {
+    readonly role: 'system' | 'user' | 'assistant' | 'tool';
+    readonly content?: string | null;
+    readonly tool_calls?: ReadonlyArray<{
+        readonly id: string;
+        readonly type: 'function';
+        readonly function: {
+            readonly name: string;
+            readonly arguments: string;
+        };
+    }>;
+    readonly tool_call_id?: string;
+}
+/** A tool the agent may call, projected from the MCP `tools/list` entry. */
+export interface ChatToolDef {
+    readonly name: string;
+    readonly description?: string;
+    readonly inputSchema?: Record<string, unknown>;
+    /** `ui://` resource URI when the tool renders a widget — carried through for inline rendering. */
+    readonly resourceUri?: string;
+}
+export interface OpenAiFunctionTool {
+    readonly type: 'function';
+    readonly function: {
+        readonly name: string;
+        readonly description?: string;
+        readonly parameters: Record<string, unknown>;
+    };
+}
+/** A tool the agent actually called this turn, with its inputs/outputs, for inline rendering. */
+export interface ChatToolInvocation {
+    readonly name: string;
+    readonly arguments: unknown;
+    readonly result: unknown;
+    readonly isError: boolean;
+    readonly resourceUri?: string;
+}
+export interface ChatTurnResult {
+    /** The full conversation including the new assistant/tool messages — the browser resends it next turn. */
+    readonly messages: ChatMessage[];
+    readonly toolCalls: ChatToolInvocation[];
+    readonly text: string;
+}
+/** Project MCP tool defs into OpenAI function-tool schema. */
+export declare function toOpenAiTools(tools: readonly ChatToolDef[]): OpenAiFunctionTool[];
+/**
+ * Run one playground turn: call the model, execute any tool calls it requests against `callTool`, feed the
+ * results back, and repeat until the model returns a plain answer (or the iteration cap is hit).
+ */
+export declare function runChatTurn(opts: {
+    readonly messages: readonly ChatMessage[];
+    readonly tools: readonly ChatToolDef[];
+    readonly apiKey: string;
+    readonly model: string;
+    readonly callTool: (name: string, args: unknown) => Promise<{
+        result: unknown;
+        isError: boolean;
+    }>;
+    readonly fetchImpl?: typeof fetch;
+    readonly baseUrl?: string;
+    readonly maxIterations?: number;
+    readonly timeoutMs?: number;
+}): Promise<ChatTurnResult>;
+//# sourceMappingURL=devtools-chat.d.ts.map

package/dist/devtools-chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"devtools-chat.d.ts","sourceRoot":"","sources":["../src/devtools-chat.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,mFAAmF;AACnF,eAAO,MAAM,kBAAkB,YAAY,CAAC;AAO5C,sEAAsE;AACtE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;QAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;QAC1B,QAAQ,CAAC,QAAQ,EAAE;YAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC;KAC1E,CAAC,CAAC;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,4EAA4E;AAC5E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,kGAAkG;IAClG,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC9C,CAAC;CACH;AAED,iGAAiG;AACjG,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,0GAA0G;IAC1G,QAAQ,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,kBAAkB,EAAE,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,8DAA8D;AAC9D,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,GAAG,kBAAkB,EAAE,CASjF;AAMD;;;GAGG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE;IACtC,QAAQ,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,CACjB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,KACV,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B,GAAG,OAAO,CAAC,cAAc,CAAC,CAkF1B"}

package/dist/devtools-chat.js

@@ -0,0 +1,114 @@
+/**
+ * The `noodle devtools` chat playground agent loop. Runs entirely inside the local preview server: it
+ * calls an OpenAI-compatible chat-completions endpoint, and whenever the model requests a tool it invokes
+ * the caller-supplied `callTool` (which the preview server wires to the loopback `dev` MCP endpoint through
+ * its `/rpc` forwarder). The OpenAI API key stays server-side — it is never sent to the browser or logged.
+ *
+ * This is an extension of `dev`'s local, loopback-only tool exercise, not a general MCP client (ADR 0043):
+ * the agent can only reach the tools of the local server the devtools session is already previewing.
+ */
+/** The default model — overridable per session via `--model` or `OPENAI_MODEL`. */
+export const DEFAULT_CHAT_MODEL = 'gpt-5.5';
+const OPENAI_DEFAULT_BASE = 'https://api.openai.com/v1';
+const DEFAULT_MAX_ITERATIONS = 8;
+/** Per-request timeout so a hung/slow OpenAI-compatible endpoint can't block the /chat route forever. */
+const DEFAULT_REQUEST_TIMEOUT_MS = 60_000;
+/** Project MCP tool defs into OpenAI function-tool schema. */
+export function toOpenAiTools(tools) {
+    return tools.map((t) => ({
+        type: 'function',
+        function: {
+            name: t.name,
+            ...(t.description ? { description: t.description } : {}),
+            parameters: t.inputSchema ?? { type: 'object', properties: {} },
+        },
+    }));
+}
+/**
+ * Run one playground turn: call the model, execute any tool calls it requests against `callTool`, feed the
+ * results back, and repeat until the model returns a plain answer (or the iteration cap is hit).
+ */
+export async function runChatTurn(opts) {
+    const doFetch = opts.fetchImpl ?? fetch;
+    const base = (opts.baseUrl ?? OPENAI_DEFAULT_BASE).replace(/\/+$/, '');
+    const openAiTools = toOpenAiTools(opts.tools);
+    const byName = new Map(opts.tools.map((t) => [t.name, t]));
+    const messages = [...opts.messages];
+    const toolCalls = [];
+    const maxIterations = opts.maxIterations ?? DEFAULT_MAX_ITERATIONS;
+    const timeoutMs = opts.timeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
+    for (let iteration = 0; iteration < maxIterations; iteration += 1) {
+        // Bound each request: a hung OpenAI-compatible endpoint (BYO baseUrl/key) must not block the /chat
+        // route forever. Abort after timeoutMs and surface it as a clear timeout error, not a raw AbortError.
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), timeoutMs);
+        let res;
+        try {
+            res = await doFetch(`${base}/chat/completions`, {
+                method: 'POST',
+                headers: { 'content-type': 'application/json', authorization: `Bearer ${opts.apiKey}` },
+                body: JSON.stringify({
+                    model: opts.model,
+                    messages,
+                    ...(openAiTools.length > 0 ? { tools: openAiTools, tool_choice: 'auto' } : {}),
+                }),
+                signal: controller.signal,
+            });
+        }
+        catch (error) {
+            if (controller.signal.aborted) {
+                throw new Error(`OpenAI request timed out after ${Math.round(timeoutMs / 1000)}s`);
+            }
+            throw error;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+        if (!res.ok) {
+            const detail = await res.text().catch(() => '');
+            throw new Error(`OpenAI request failed (${res.status}): ${detail.slice(0, 500)}`);
+        }
+        const data = (await res.json());
+        const message = data.choices?.[0]?.message;
+        if (!message)
+            throw new Error('OpenAI returned no message in the completion.');
+        messages.push(message);
+        const calls = message.tool_calls ?? [];
+        if (calls.length === 0) {
+            return {
+                messages,
+                toolCalls,
+                text: typeof message.content === 'string' ? message.content : '',
+            };
+        }
+        for (const call of calls) {
+            let args = {};
+            try {
+                args = call.function.arguments ? JSON.parse(call.function.arguments) : {};
+            }
+            catch {
+                args = {};
+            }
+            const def = byName.get(call.function.name);
+            const { result, isError } = await opts.callTool(call.function.name, args);
+            toolCalls.push({
+                name: call.function.name,
+                arguments: args,
+                result,
+                isError,
+                ...(def?.resourceUri ? { resourceUri: def.resourceUri } : {}),
+            });
+            messages.push({
+                role: 'tool',
+                tool_call_id: call.id,
+                content: typeof result === 'string' ? result : JSON.stringify(result ?? null),
+            });
+        }
+    }
+    return {
+        messages,
+        toolCalls,
+        text: 'Stopped after reaching the tool-call limit for this turn. Ask a follow-up to continue.',
+    };
+}
+//# sourceMappingURL=devtools-chat.js.map

package/dist/devtools-chat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"devtools-chat.js","sourceRoot":"","sources":["../src/devtools-chat.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,mFAAmF;AACnF,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAE5C,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AACxD,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,yGAAyG;AACzG,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAgD1C,8DAA8D;AAC9D,MAAM,UAAU,aAAa,CAAC,KAA6B;IACzD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvB,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,UAAU,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;SAChE;KACF,CAAC,CAAC,CAAC;AACN,CAAC;AAMD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAajC;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IACxC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,mBAAmB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAkB,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,sBAAsB,CAAC;IACnE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,0BAA0B,CAAC;IAE/D,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,aAAa,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC;QAClE,mGAAmG;QACnG,sGAAsG;QACtG,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,GAAwC,CAAC;QAC7C,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,mBAAmB,EAAE;gBAC9C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE;gBACvF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,QAAQ;oBACR,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC/E,CAAC;gBACF,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,MAAM,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2B,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;QAC3C,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC/E,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEvB,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,QAAQ;gBACR,SAAS;gBACT,IAAI,EAAE,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;aACjE,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,GAAY,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC1E,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;gBACxB,SAAS,EAAE,IAAI;gBACf,MAAM;gBACN,OAAO;gBACP,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,MAAM;gBACZ,YAAY,EAAE,IAAI,CAAC,EAAE;gBACrB,OAAO,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC;aAC9E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ;QACR,SAAS;QACT,IAAI,EAAE,wFAAwF;KAC/F,CAAC;AACJ,CAAC"}

package/dist/devtools-env.d.ts

@@ -0,0 +1,16 @@
+/** Parse dotenv-style `KEY=VALUE` text, tolerating comments, blank lines, `export`, and simple quotes. */
+export declare function parseDotenv(text: string): Record<string, string>;
+export interface LoadedDevtoolsEnv {
+    /** The env file the values came from (relative name), or undefined if none was found/applied. */
+    readonly file?: string;
+    /** The `OPENAI_*` key names applied to the environment (never the values). */
+    readonly keys: string[];
+}
+/**
+ * Read `.env.local` then `.env` from `dir` and apply any `OPENAI_*` keys to `env` (default `process.env`)
+ * without overriding values that are already set. Returns which file and keys were applied for logging.
+ */
+export declare function loadDevtoolsEnv(dir: string, opts?: {
+    env?: Record<string, string | undefined>;
+}): LoadedDevtoolsEnv;
+//# sourceMappingURL=devtools-env.d.ts.map

package/dist/devtools-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"devtools-env.d.ts","sourceRoot":"","sources":["../src/devtools-env.ts"],"names":[],"mappings":"AAkBA,0GAA0G;AAC1G,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAoBhE;AAED,MAAM,WAAW,iBAAiB;IAChC,iGAAiG;IACjG,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;CAAO,GACtD,iBAAiB,CAsBnB"}

package/dist/devtools-env.js

@@ -0,0 +1,71 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+/**
+ * Load the OpenAI playground credentials for `noodle devtools` from a git-ignored `.env.local` (or `.env`)
+ * in the project directory. This is developer-tooling config — NOT an app secret. It is intentionally kept
+ * out of the managed `.env.noodle` / `noodle secrets` store (which is brokered to the deployed app runtime).
+ *
+ * Safety rules:
+ *   - only `OPENAI_*` keys are read from the file, so a stray `.env` can never clobber `PATH` or other env;
+ *   - a value already present in the environment always wins (shell/flag precedence over the file);
+ *   - values are never logged — only key names and the file name are surfaced.
+ */
+const ENV_FILES = ['.env.local', '.env'];
+const KEY_PREFIX = 'OPENAI_';
+const LINE = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/;
+/** Parse dotenv-style `KEY=VALUE` text, tolerating comments, blank lines, `export`, and simple quotes. */
+export function parseDotenv(text) {
+    const out = {};
+    for (const raw of text.split(/\r?\n/)) {
+        const line = raw.trim();
+        if (line === '' || line.startsWith('#'))
+            continue;
+        const match = LINE.exec(line);
+        if (!match)
+            continue;
+        const key = match[1];
+        if (key === undefined)
+            continue;
+        let value = (match[2] ?? '').trim();
+        if (value.length >= 2 &&
+            ((value.startsWith('"') && value.endsWith('"')) ||
+                (value.startsWith("'") && value.endsWith("'")))) {
+            value = value.slice(1, -1);
+        }
+        out[key] = value;
+    }
+    return out;
+}
+/**
+ * Read `.env.local` then `.env` from `dir` and apply any `OPENAI_*` keys to `env` (default `process.env`)
+ * without overriding values that are already set. Returns which file and keys were applied for logging.
+ */
+export function loadDevtoolsEnv(dir, opts = {}) {
+    const env = opts.env ?? process.env;
+    const keys = [];
+    let file;
+    for (const name of ENV_FILES) {
+        const path = join(dir, name);
+        if (!existsSync(path))
+            continue;
+        let parsed;
+        try {
+            parsed = parseDotenv(readFileSync(path, 'utf8'));
+        }
+        catch {
+            continue;
+        }
+        for (const [key, value] of Object.entries(parsed)) {
+            if (!key.startsWith(KEY_PREFIX))
+                continue;
+            if (env[key] !== undefined && env[key] !== '')
+                continue;
+            env[key] = value;
+            keys.push(key);
+            if (file === undefined)
+                file = name;
+        }
+    }
+    return { keys, ...(file !== undefined ? { file } : {}) };
+}
+//# sourceMappingURL=devtools-env.js.map

package/dist/devtools-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"devtools-env.js","sourceRoot":"","sources":["../src/devtools-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;;;;;GASG;AAEH,MAAM,SAAS,GAAG,CAAC,YAAY,EAAE,MAAM,CAAU,CAAC;AAClD,MAAM,UAAU,GAAG,SAAS,CAAC;AAC7B,MAAM,IAAI,GAAG,wDAAwD,CAAC;AAEtE,0GAA0G;AAC1G,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChC,IAAI,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,IACE,KAAK,CAAC,MAAM,IAAI,CAAC;YACjB,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC7C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EACjD,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAW,EACX,OAAqD,EAAE;IAEvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,IAAwB,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,IAAI,MAA8B,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;gBAAE,SAAS;YAC1C,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE;gBAAE,SAAS;YACxD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACf,IAAI,IAAI,KAAK,SAAS;gBAAE,IAAI,GAAG,IAAI,CAAC;QACtC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC3D,CAAC"}

package/dist/devtools-harness.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The `noodle devtools` browser harness: the three-pane shell HTML/CSS, the client script, the
+ * `window.openai` shim injected into widget iframes, and small HTML helpers. Kept separate from the
+ * preview server (`devtools-preview.ts`) so each file owns one concern.
+ *
+ * The client script is plain (no template literals / no `${...}`) so it splices safely into the shell
+ * and so the shim's classic script runs before the widget's deferred bridge module.
+ */
+export type PreviewTheme = 'light' | 'dark' | 'both';
+export type PreviewDevice = 'desktop' | 'mobile' | 'both';
+/** Build the classic (non-module) `window.openai` shim injected ahead of the deferred widget bridge. */
+export declare function openAiShimScript(init: {
+    readonly toolInput?: unknown;
+    readonly toolOutput?: unknown;
+    readonly toolResponseMetadata?: unknown;
+    readonly theme?: 'light' | 'dark';
+}): string;
+/** Insert the reset + shim into the widget document so they run before the (deferred) bridge module script. */
+export declare function wrapWidgetHtml(html: string, shimScript: string): string;
+/** The three-pane harness shell. */
+export declare function harnessHtml(options: {
+    readonly mcpUrl: string;
+    readonly theme: PreviewTheme;
+    readonly device: PreviewDevice;
+    /** True when the server already has an OPENAI_API_KEY, so the chat key-entry gate can be skipped. */
+    readonly hasServerKey?: boolean;
+}): string;
+//# sourceMappingURL=devtools-harness.d.ts.map

package/dist/devtools-harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"devtools-harness.d.ts","sourceRoot":"","sources":["../src/devtools-harness.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AACrD,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;AAgB1D,wGAAwG;AACxG,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CACnC,GAAG,MAAM,CA4BT;AAUD,+GAA+G;AAC/G,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAcvE;AAcD,oCAAoC;AACpC,wBAAgB,WAAW,CAAC,OAAO,EAAE;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,qGAAqG;IACrG,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC,GAAG,MAAM,CA8ET"}