@replohq/sandbox-runtime 1.6.4 → 1.6.6

package/_vendor/replo-utils/lib/viewportSnapshot.d.ts

@@ -0,0 +1,86 @@
+export declare const VIEWPORT_SNAPSHOT_REQUEST = "replo:viewport-snapshot:request";
+export declare const VIEWPORT_SNAPSHOT_RESPONSE = "replo:viewport-snapshot:response";
+/**
+ * Levels of iframe nesting a capture request fans out to below the requester.
+ * 2 covers the deepest product surface: agent-ui → miniapp → builder preview.
+ */
+export declare const VIEWPORT_SNAPSHOT_MAX_DEPTH = 2;
+export interface ViewportSnapshotRequestMessage {
+    type: typeof VIEWPORT_SNAPSHOT_REQUEST;
+    requestId: string;
+    frameIndex: number;
+    remainingDepth: number;
+}
+export interface ViewportFrameRect {
+    x: number;
+    y: number;
+    width: number;
+    height: number;
+}
+/** One frame's serialized DOM plus its own captured child frames, recursively. */
+export interface ViewportFrameCapture {
+    snapshot: unknown;
+    childFrames: ViewportChildFrame[];
+}
+export interface ViewportChildFrame {
+    frameIndex: number;
+    rect: ViewportFrameRect;
+    capture: ViewportFrameCapture;
+}
+export interface ViewportSnapshotResponseMessage {
+    type: typeof VIEWPORT_SNAPSHOT_RESPONSE;
+    requestId: string;
+    frameIndex: number;
+    capture: ViewportFrameCapture | null;
+}
+interface RelayMessageListener {
+    (event: {
+        data: unknown;
+        source: unknown;
+        origin?: string;
+    }): void;
+}
+interface RelayWindow {
+    readonly parent: unknown;
+    readonly frames: ArrayLike<{
+        postMessage: (message: unknown, targetOrigin: string) => void;
+    }>;
+    addEventListener(type: "message", listener: RelayMessageListener): void;
+    removeEventListener(type: "message", listener: RelayMessageListener): void;
+    setTimeout(listener: () => void, timeout: number): number;
+    clearTimeout(timeoutId: number): void;
+}
+/**
+ * Default trust check for who may request this frame's DOM: Replo app origins
+ * plus local dev hosts. Runtimes embedded in arbitrary third-party pages
+ * (published sites) silently ignore requests from anything else.
+ */
+export declare function isTrustedViewportSnapshotRequester(origin: string): boolean;
+/**
+ * Ask every direct child frame for its capture (each child cascades to its own
+ * children while `remainingDepth` allows) and collect the responses. Resolves
+ * at the timeout with whatever arrived — a frame running an older runtime
+ * simply never answers and is omitted.
+ */
+export declare function requestChildViewportSnapshots({ targetWindow, requestId, timeoutMs, remainingDepth, }: {
+    targetWindow: RelayWindow;
+    requestId: string;
+    timeoutMs: number;
+    remainingDepth?: number;
+}): Promise<{
+    frameIndex: number;
+    capture: ViewportFrameCapture;
+}[]>;
+/**
+ * Child-side responder: on a trusted parent request, serialize this frame's
+ * DOM, cascade the request to this frame's own children while depth allows,
+ * and post the combined capture back to the requesting origin only.
+ */
+export declare function startViewportSnapshotResponder({ targetWindow, takeSnapshot, measureFrameRect, isTrustedRequester, cascadeTimeoutMs, }: {
+    targetWindow: RelayWindow;
+    takeSnapshot: () => unknown;
+    measureFrameRect: (frameIndex: number) => ViewportFrameRect | null;
+    isTrustedRequester?: (origin: string) => boolean;
+    cascadeTimeoutMs?: number;
+}): () => void;
+export {};

package/_vendor/replo-utils/lib/viewportSnapshot.mjs

@@ -0,0 +1 @@
+export { VIEWPORT_SNAPSHOT_MAX_DEPTH, VIEWPORT_SNAPSHOT_REQUEST, VIEWPORT_SNAPSHOT_RESPONSE, isTrustedViewportSnapshotRequester, requestChildViewportSnapshots, startViewportSnapshotResponder } from '../../../chunk-RXYLMSNM.mjs';

package/_vendor/replo-utils/react/use-viewport-snapshot-responder.d.ts

@@ -0,0 +1,9 @@
+import type { ViewportFrameRect } from "../lib/viewportSnapshot";
+/** Relay frameIndex → on-screen rect; window.frames order is iframe document order. */
+export declare function measureViewportFrameRect(frameIndex: number): ViewportFrameRect | null;
+/**
+ * Answers a trusted parent frame's turn-end viewport-capture requests with an
+ * rrweb serialization of this frame's DOM, cascading into this frame's own
+ * iframes. Passive until asked; see docs/agent-session-viewport-filmstrip-prd.md.
+ */
+export declare function useViewportSnapshotResponder(): void;