@replohq/sandbox-runtime 1.7.1 → 1.7.3

package/ClientErrorBoundary.d.ts

@@ -1,6 +1,6 @@
 import * as React from "react";
 /**
- * NOTE (Max, 2026-06-10): Client-side error boundary. On a caught render error it
+ * Client-side error boundary. On a caught render error it
  * (1) reports the error to the parent editor via postMessage (so it can get reported to Sentry)
  * and (2) renders a neutral cover instead of going blank, so the preview never flashes the broken
  * page while the agent fixes it. The editor decides what to show on top (loading

package/ClientErrorBoundary.js

@@ -34,10 +34,6 @@ function ClientErrorBoundary({ children }) {
       const errorObj = error instanceof Error ? error : new Error(String(error));
       window.parent.postMessage(
         {
-          // TODO (Max, 2026-06-11, REPL-27851): When adding Sentry to miniapps, I'll ensure we listen to this message
-          // and send it to Sentry. I'm not a fan of having 2 separate post messages for reporting errors (the 'error' post message in NextErrorReporter, and this one).
-          // But there's no way for the NextErrorReporter to get the actual error object, so we'll
-          // need a separate postMessage (this one, with an updated name).
           type: "replo-editor:client-error",
           payload: {
             pageRoute: window.location.pathname,
@@ -58,4 +54,3 @@ function ClientErrorBoundary({ children }) {
 export {
   ClientErrorBoundary
 };
-//# sourceMappingURL=ClientErrorBoundary.js.map

package/DocumentReadyBeacon.js

@@ -6,4 +6,3 @@ function DocumentReadyBeacon() {
 export {
   DocumentReadyBeacon
 };
-//# sourceMappingURL=DocumentReadyBeacon.js.map

package/LinkInterceptor.js

@@ -169,4 +169,3 @@ function LinkInterceptor() {
 export {
   LinkInterceptor as default
 };
-//# sourceMappingURL=LinkInterceptor.js.map

package/NavigationReceiver.js

@@ -22,4 +22,3 @@ function NavigationReceiver() {
 export {
   NavigationReceiver
 };
-//# sourceMappingURL=NavigationReceiver.js.map

package/NextErrorReporter.js

@@ -129,4 +129,3 @@ function NextErrorReporter() {
 export {
   NextErrorReporter
 };
-//# sourceMappingURL=NextErrorReporter.js.map

package/README.md

@@ -0,0 +1,48 @@
+# `@replohq/sandbox-runtime`
+
+The Replo sandbox runtime connects a Next.js development preview to Replo while
+preserving normal application behavior in production. It provides preview
+readiness, navigation, error reporting, selection, annotations, and design
+library preview support through one root component.
+
+## Installation
+
+```sh
+pnpm add @replohq/sandbox-runtime @replohq/sdk @opennextjs/cloudflare @tanstack/react-query
+```
+
+The package requires Next.js 15 or newer and React 19 or newer. React, React
+DOM, and their type packages are peer dependencies and are normally already
+present in a Next.js application.
+
+## Usage
+
+Compose `SandboxRuntime` inside the SDK's `ReploProvider` in the root layout:
+
+```tsx
+// app/layout.tsx
+import { SandboxRuntime } from "@replohq/sandbox-runtime";
+import { ReploProvider } from "@replohq/sdk/providers/replo-provider";
+
+export default function RootLayout({ children }: React.PropsWithChildren) {
+  return (
+    <html lang="en">
+      <body>
+        <ReploProvider>
+          <SandboxRuntime>{children}</SandboxRuntime>
+        </ReploProvider>
+      </body>
+    </html>
+  );
+}
+```
+
+`SandboxRuntime` is a Client Component. In a development server it enables the
+Replo preview integration. In a production build it renders `children`
+unchanged, so the same composition can remain in the root layout for every
+environment.
+
+## License
+
+This package is proprietary software. See [LICENSE](./LICENSE)
+(`SEE LICENSE IN LICENSE`) and the [Replo Terms of Service](https://replo.app/terms).

package/_vendor/replo-utils/lib/crypto.d.ts

@@ -12,14 +12,8 @@ export declare function randomBase64Url(byteLength: number): string;
  * `crypto.getRandomValues`, which carries no such restriction.
  */
 export declare function randomUUID(): string;
-/**
- * Returns the SHA-256 of `input` as a 64-char lowercase hex string.
- *
- * Used for storing opaque secrets (e.g. public API tokens) where we want
- * constant-length hex output suitable for a `VARCHAR(64)` column with a
- * unique index.
- */
-export declare function sha256Hex(input: string): Promise<string>;
+/** Strings use UTF-8; binary inputs are hashed unchanged. */
+export declare function sha256Hex(input: string | Parameters<typeof crypto.subtle.digest>[1]): Promise<string>;
 export declare function constantTimeEqual({ left, right, }: {
     left: Uint8Array;
     right: Uint8Array;

package/_vendor/replo-utils/lib/fonts.d.ts

@@ -1,3 +1,11 @@
+/** Known symbol assets are not text typefaces; unknown families stay eligible. */
+export declare function isKnownSymbolFontFamily(family: string): boolean;
+export declare function getTypographyFonts<FontType extends {
+    family: string;
+    faces: {
+        cssFamily: string;
+    }[];
+}>(fonts: FontType[]): FontType[];
 /**
  * Slugified family name, matching how `fontNameToCssVariable` derives a CSS var
  * (e.g. "DM Sans" → "dm-sans"), so a `--font-<slug>` var round-trips back to a

package/_vendor/replo-utils/lib/fonts.mjs

@@ -1,7 +1,6 @@
 import { isArray_default } from '../../../chunk-TESFJQID.mjs';
 import { Symbol_default, isObjectLike_default, baseGetTag_default } from '../../../chunk-G3S6ZNPF.mjs';
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/_arrayMap.js
 function arrayMap(array, iteratee) {
   var index = -1, length = array == null ? 0 : array.length, result = Array(length);
   while (++index < length) {
@@ -11,7 +10,6 @@ function arrayMap(array, iteratee) {
 }
 var arrayMap_default = arrayMap;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/isSymbol.js
 var symbolTag = "[object Symbol]";
 function isSymbol(value) {
   return typeof value == "symbol" || isObjectLike_default(value) && baseGetTag_default(value) == symbolTag;
@@ -34,13 +32,11 @@ function baseToString(value) {
 }
 var baseToString_default = baseToString;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/toString.js
 function toString(value) {
   return value == null ? "" : baseToString_default(value);
 }
 var toString_default = toString;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/_baseSlice.js
 function baseSlice(array, start, end) {
   var index = -1, length = array.length;
   if (start < 0) {
@@ -60,7 +56,6 @@ function baseSlice(array, start, end) {
 }
 var baseSlice_default = baseSlice;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/_castSlice.js
 function castSlice(array, start, end) {
   var length = array.length;
   end = end === void 0 ? length : end;
@@ -68,7 +63,6 @@ function castSlice(array, start, end) {
 }
 var castSlice_default = castSlice;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/_hasUnicode.js
 var rsAstralRange = "\\ud800-\\udfff";
 var rsComboMarksRange = "\\u0300-\\u036f";
 var reComboHalfMarksRange = "\\ufe20-\\ufe2f";
@@ -82,13 +76,11 @@ function hasUnicode(string) {
 }
 var hasUnicode_default = hasUnicode;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/_asciiToArray.js
 function asciiToArray(string) {
   return string.split("");
 }
 var asciiToArray_default = asciiToArray;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/_unicodeToArray.js
 var rsAstralRange2 = "\\ud800-\\udfff";
 var rsComboMarksRange2 = "\\u0300-\\u036f";
 var reComboHalfMarksRange2 = "\\ufe20-\\ufe2f";
@@ -114,13 +106,11 @@ function unicodeToArray(string) {
 }
 var unicodeToArray_default = unicodeToArray;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/_stringToArray.js
 function stringToArray(string) {
   return hasUnicode_default(string) ? unicodeToArray_default(string) : asciiToArray_default(string);
 }
 var stringToArray_default = stringToArray;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/_createCaseFirst.js
 function createCaseFirst(methodName) {
   return function(string) {
     string = toString_default(string);
@@ -132,17 +122,25 @@ function createCaseFirst(methodName) {
 }
 var createCaseFirst_default = createCaseFirst;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/upperFirst.js
 var upperFirst = createCaseFirst_default("toUpperCase");
 var upperFirst_default = upperFirst;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/capitalize.js
 function capitalize(string) {
   return upperFirst_default(toString_default(string).toLowerCase());
 }
 var capitalize_default = capitalize;
 
-// ../replo-utils/lib/fonts.ts
+function isKnownSymbolFontFamily(family) {
+  const normalized = family.trim().replace(/^["']|["']$/gu, "");
+  return /(?:^|[\s_-])(?:icons?|symbols?)(?:$|[\s_-])/iu.test(normalized) || /^(?:webrupee|fontawesome(?:[0-9]+)?(?:free|pro|brands|duotone|sharp)?|icomoon|glyphicons|wingdings|webdings|materialicons)$/iu.test(
+    normalized.replace(/[\s_-]/gu, "")
+  );
+}
+function getTypographyFonts(fonts) {
+  return fonts.filter((font) => {
+    return !isKnownSymbolFontFamily(font.family) && (font.faces.length === 0 || font.faces.some((face) => !isKnownSymbolFontFamily(face.cssFamily)));
+  });
+}
 function slugifyFontFamily(family) {
   return family.replace(/([a-z])([A-Z])/g, "$1-$2").split(/[\s_-]+/u).map((word) => word.toLowerCase()).join("-");
 }
@@ -219,4 +217,4 @@ var escapeFontFamilyName = (fontFamily) => {
   return fontFamily.replace(/"/g, '\\"').replace(/'/g, "\\'");
 };
 
-export { buildFontFaceCss, buildGoogleFontsCssUrl, describeFontFile, escapeFontFamilyName, fontFormatFromExtension, fontFormatFromMimeType, fontNameToCssVariable, fontNameToVariableName, quoteFontFamily, slugifyFontFamily };
+export { buildFontFaceCss, buildGoogleFontsCssUrl, describeFontFile, escapeFontFamilyName, fontFormatFromExtension, fontFormatFromMimeType, fontNameToCssVariable, fontNameToVariableName, getTypographyFonts, isKnownSymbolFontFamily, quoteFontFamily, slugifyFontFamily };

package/_vendor/replo-utils/lib/geometry.mjs

@@ -1,4 +1,3 @@
-// ../replo-utils/lib/geometry.ts
 function isIntersecting(targetRect, destinationRect, { tolerance = 0 } = {}) {
   return targetRect.left <= destinationRect.right + tolerance && targetRect.right >= destinationRect.left - tolerance && targetRect.top <= destinationRect.bottom + tolerance && targetRect.bottom >= destinationRect.top - tolerance;
 }

package/_vendor/replo-utils/lib/math.d.ts

@@ -40,8 +40,6 @@ export declare function randomBigString(): string;
 /**
  * Given a current value and a previous value, calculate the percentage change
  * from the previous value to the current value.
- *
- * @author Max 2025-04-01
  */
 export declare function calculatePercentageChange(current: number, previous: number): number | null;
 /**
@@ -54,7 +52,5 @@ export declare function calculatePercentageChange(current: number, previous: num
  * formatBytes(1536) // "1.50 KB"
  * formatBytes(1048576) // "1.00 MB"
  * formatBytes("1073741824") // "1.00 GB"
- *
- * @author Max 2024-08-28
  */
 export declare function formatBytes(bytes: number | string): string;

package/_vendor/replo-utils/lib/math.mjs

@@ -2,7 +2,6 @@ import { randomUUID } from '../../../chunk-SGKQ5HGT.mjs';
 import { isNumber_default } from '../../../chunk-FLYEIRFK.mjs';
 import '../../../chunk-G3S6ZNPF.mjs';
 
-// ../replo-utils/lib/math.ts
 var EPSILON = 0.03;
 function isCloseTo(number, comparator, epsilon = EPSILON) {
   return Math.abs(number - comparator) < epsilon;

package/_vendor/replo-utils/lib/posthogReplay.mjs

@@ -1,4 +1,3 @@
-// ../replo-utils/lib/posthogReplay.ts
 var POSTHOG_REPLAY_SNAPSHOT_REQUEST = "posthog:replay:request-full-snapshot";
 var POSTHOG_REPLAY_READY_POLL_INTERVAL_MS = 100;
 var POSTHOG_REPLAY_READY_POLL_TIMEOUT_MS = 1e4;

package/_vendor/replo-utils/react/use-iframe-rpc-channel.mjs

@@ -1,6 +1,5 @@
 import * as React from 'react';
 
-// ../replo-utils/react/use-iframe-rpc-channel.ts
 function useIframeRpcChannel(channel) {
   React.useEffect(() => {
     if (!channel) {

package/_vendor/replo-utils/react/use-viewport-snapshot-responder.mjs

@@ -1,7 +1,6 @@
 import { startViewportSnapshotResponder } from '../../../chunk-3YA3QXUQ.mjs';
 import { useEffect } from 'react';
 
-// ../../node_modules/.pnpm/rrweb-snapshot@2.1.1/node_modules/rrweb-snapshot/dist/rrweb-snapshot.js
 var __defProp = Object.defineProperty;
 var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
 var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
@@ -44,7 +43,7 @@ function getUntaintedPrototype(key) {
   const defaultPrototype = defaultObj.prototype;
   const accessorNames = key in testableAccessors ? testableAccessors[key] : void 0;
   const isUntaintedAccessors = Boolean(
-    accessorNames && // @ts-expect-error 2345
+    accessorNames &&
     accessorNames.every(
       (accessor) => {
         var _a, _b;
@@ -57,7 +56,6 @@ function getUntaintedPrototype(key) {
   const methodNames = key in testableMethods ? testableMethods[key] : void 0;
   const isUntaintedMethods = Boolean(
     methodNames && methodNames.every(
-      // @ts-expect-error 2345
       (method) => {
         var _a;
         return typeof defaultPrototype[method] === "function" && ((_a = defaultPrototype[method]) == null ? void 0 : _a.toString().includes("[native code]"));
@@ -219,8 +217,6 @@ function isElement(n) {
 }
 function isShadowRoot(n) {
   const hostEl = (
-    // anchor and textarea elements also have a `host` property
-    // but only shadow roots have a `mode` property
     n && "host" in n && "mode" in n && index.host(n) || null
   );
   return Boolean(
@@ -279,9 +275,8 @@ function stringifyRule(rule2, sheetHref) {
   if (isCSSImportRule(rule2)) {
     let importStringified;
     try {
-      importStringified = // for same-origin stylesheets,
-      // we can access the imported stylesheet rules directly
-      stringifyStylesheet(rule2.styleSheet) || // work around browser issues with the raw string `@import url(...)` statement
+      importStringified =
+      stringifyStylesheet(rule2.styleSheet) ||
       escapeImportStatement(rule2);
     } catch (error) {
       importStringified = rule2.cssText;
@@ -331,8 +326,6 @@ var Mirror = class {
   getMeta(n) {
     return this.nodeMetaMap.get(n) || null;
   }
-  // removes the node from idNodeMap
-  // doesn't remove the node from nodeMetaMap
   removeNodeFromMap(n) {
     const id = this.getId(n);
     this.idNodeMap.delete(id);
@@ -398,7 +391,6 @@ function is2DCanvasBlank(canvas) {
       const getImageData = ctx.getImageData;
       const originalGetImageData = ORIGINAL_ATTRIBUTE_NAME in getImageData ? getImageData[ORIGINAL_ATTRIBUTE_NAME] : getImageData;
       const pixelBuffer = new Uint32Array(
-        // eslint-disable-next-line @typescript-eslint/no-unsafe-argument, @typescript-eslint/no-unsafe-member-access
         originalGetImageData.call(
           ctx,
           x,
@@ -415,7 +407,6 @@ function is2DCanvasBlank(canvas) {
 function getInputType(element) {
   const type = element.type;
   return element.hasAttribute("data-rr-is-password") ? "password" : type ? (
-    // eslint-disable-next-line @typescript-eslint/no-unnecessary-type-assertion
     toLowerCase(type)
   ) : null;
 }
@@ -504,8 +495,7 @@ function splitCssText(cssText, style, _testNoPxNorm = false) {
         let j = 3;
         for (; j < textContentNorm.length; j++) {
           if (
-            // keep consuming css identifiers (to get a decent chunk more quickly)
-            textContentNorm[j].match(/[a-zA-Z0-9]/) || // substring needs to be unique to this section
+            textContentNorm[j].match(/[a-zA-Z0-9]/) ||
             textContentNorm.indexOf(textContentNorm.substring(0, j), 1) !== -1
           ) {
             continue;
@@ -854,7 +844,6 @@ function serializeNode(n, options) {
           type: NodeType.Document,
           childNodes: [],
           compatMode: n.compatMode
-          // probably "BackCompat"
         };
       } else {
         return {
@@ -1147,8 +1136,6 @@ function slimDOMDefaults(_slimDOMOptions) {
       headMetaRobots: true,
       headMetaHttpEquiv: true,
       headMetaVerification: true,
-      // the following are off for slimDOMOptions === true,
-      // as they destroy some (hidden) info:
       headMetaAuthorship: _slimDOMOptions === "all",
       headMetaDescKeywords: _slimDOMOptions === "all",
       headTitleMutations: _slimDOMOptions === "all"
@@ -1162,9 +1149,9 @@ function slimDOMExcluded(sn, slimDOMOptions) {
   if (slimDOMOptions.comment && sn.type === NodeType.Comment) {
     return true;
   } else if (sn.type === NodeType.Element) {
-    if (slimDOMOptions.script && // script tag
-    (sn.tagName === "script" || // (module)preload link
-    sn.tagName === "link" && (sn.attributes.rel === "preload" && sn.attributes.as === "script" || sn.attributes.rel === "modulepreload") || // prefetch link
+    if (slimDOMOptions.script &&
+    (sn.tagName === "script" ||
+    sn.tagName === "link" && (sn.attributes.rel === "preload" && sn.attributes.as === "script" || sn.attributes.rel === "modulepreload") ||
     sn.tagName === "link" && sn.attributes.rel === "prefetch" && typeof sn.attributes.href === "string" && extractFileExtension(sn.attributes.href) === "js")) {
       return true;
     } else if (slimDOMOptions.headFavicon && (sn.tagName === "link" && sn.attributes.rel === "shortcut icon" || sn.tagName === "meta" && (lowerIfExists(sn.attributes.name).match(
@@ -1174,7 +1161,7 @@ function slimDOMExcluded(sn, slimDOMOptions) {
     } else if (sn.tagName === "meta") {
       if (slimDOMOptions.headMetaDescKeywords && lowerIfExists(sn.attributes.name).match(/^description|keywords$/)) {
         return true;
-      } else if (slimDOMOptions.headMetaSocial && (lowerIfExists(sn.attributes.property).match(/^(og|twitter|fb):/) || // og = opengraph (facebook)
+      } else if (slimDOMOptions.headMetaSocial && (lowerIfExists(sn.attributes.property).match(/^(og|twitter|fb):/) ||
       lowerIfExists(sn.attributes.name).match(/^(og|twitter):/) || lowerIfExists(sn.attributes.name) === "pinterest")) {
         return true;
       } else if (slimDOMOptions.headMetaRobots && (lowerIfExists(sn.attributes.name) === "robots" || lowerIfExists(sn.attributes.name) === "googlebot" || lowerIfExists(sn.attributes.name) === "bingbot")) {
@@ -2067,7 +2054,7 @@ function requireNode() {
         set(node2, prop, value) {
           if (node2[prop] === value) return true;
           node2[prop] = value;
-          if (prop === "prop" || prop === "value" || prop === "name" || prop === "params" || prop === "important" || /* c8 ignore next */
+          if (prop === "prop" || prop === "value" || prop === "name" || prop === "params" || prop === "important" || 
           prop === "text") {
             node2.markDirty();
           }
@@ -4158,7 +4145,6 @@ function requireParser() {
         }
       }
     }
-    // Helpers
     getPosition(offset) {
       let pos = this.input.fromOffset(offset);
       return {
@@ -4317,7 +4303,6 @@ function requireParser() {
       }
       return spaces;
     }
-    // Errors
     spacesAndCommentsFromStart(tokens) {
       let next;
       let spaces = "";
@@ -5235,7 +5220,6 @@ postcss.Rule;
 postcss.Root;
 postcss.Node;
 
-// ../replo-utils/react/use-viewport-snapshot-responder.tsx
 function measureViewportFrameRect(frameIndex) {
   const element = document.querySelectorAll("iframe")[frameIndex];
   if (!element) {

package/_vendor/schemas/componentPreview.mjs

@@ -1,6 +1,5 @@
 import { z } from 'zod';
 
-// ../schemas/componentPreview.ts
 var DATA_LOADER_KEYS = {
   SHOPIFY_PRODUCT: "shopify_storefront.product",
   SHOPIFY_COLLECTION: "shopify_storefront.collection",
@@ -29,7 +28,6 @@ var DATA_LOADER_KEYS = {
 };
 z.enum(Object.values(DATA_LOADER_KEYS));
 
-// ../schemas/componentPreview.ts
 var MAX_COMPONENT_PREVIEW_PROPS_BYTES = 16 * 1024;
 var componentPreviewPropNameSchema = z.string().min(1).max(80).regex(/^[A-Za-z_$][\w$]*$/u).refine((name) => {
   return !["__proto__", "constructor", "dangerouslySetInnerHTML"].includes(
@@ -49,8 +47,6 @@ var websiteBuilderToComponentPreviewMethodConfig = {
       props: componentPreviewPropsSchema,
       sourceRevision: z.string().min(1)
     }),
-    // How the frame applied the update: in place via the client prop store,
-    // via an in-frame server navigation, or not at all (already current).
     outputSchema: z.object({
       mode: z.enum(["client", "navigation", "unchanged"])
     }),

package/_vendor/schemas/designLibrary.mjs

@@ -1,6 +1,5 @@
 import { z } from 'zod';
 
-// ../schemas/designLibrary.ts
 var colorTypeSchema = z.enum([
   "basic",
   "foregroundPrimary",
@@ -55,7 +54,6 @@ z.discriminatedUnion("type", [
   savedStyleTextAttributesSchema
 ]).describe("SavedStyleAttributes");
 
-// ../schemas/designLibrary.ts
 var savedColorStyleSchema = z.object({
   type: z.literal("color"),
   name: z.string(),

package/_vendor/schemas/errors.d.ts

@@ -186,9 +186,6 @@ export type ErrorDetails = {
  * Map of error keys to custom user-facing details. Should ONLY be used
  * in cases where we want to override the default behavior of ErrorUserFacingDetails
  * from the backend.
- *
- * TODO (Noah, 2024-01-15): Clean up these custom configs, all of them
- * are only used by Django (and 'base' can be moved directly into the reducer function)
  */
 export declare const CUSTOM_ERROR_KEY_TO_PROPS: {
     "shopifyArticle.failedToPublish": () => {

package/_vendor/schemas/generated/selectModeIframeRpc.d.ts

@@ -61,7 +61,7 @@ export type SelectModeParentMessage = {
 };
 export type SelectModeIframeMessage = {
     method: "iframeReady";
-    data?: IframeRuntimeBuildMetadata;
+    data: IframeRuntimeBuildMetadata;
 } | {
     method: "elementSelected";
     data: {

package/_vendor/schemas/iframeRpcChannel.d.ts

@@ -16,7 +16,7 @@ export type IframeRpcChannelHandlerMeta<OutgoingMethods extends IframeRpcChannel
     channel: IframeRpcChannelRemote<OutgoingMethods>;
 };
 export type IframeRpcChannelHandlers<IncomingMethods extends IframeRpcChannelMethodConfig, OutgoingMethods extends IframeRpcChannelMethodConfig = IframeRpcChannelMethodConfig> = {
-    [Method in keyof IncomingMethods]: (input: z.output<IncomingMethods[Method]["inputSchema"]>, meta: IframeRpcChannelHandlerMeta<OutgoingMethods>) => IsVoidMethod<IncomingMethods, Method> extends true ? void : // Valued handlers stay `unknown` so callers can return domain/generated
+    [Method in keyof IncomingMethods]: (input: z.output<IncomingMethods[Method]["inputSchema"]>, meta: IframeRpcChannelHandlerMeta<OutgoingMethods>) => IsVoidMethod<IncomingMethods, Method> extends true ? void :
     unknown | Promise<unknown>;
 };
 export type IframeRpcChannelInputHandlers<IncomingMethods extends IframeRpcChannelMethodConfig> = {

package/_vendor/schemas/iframeRpcChannel.mjs

@@ -5,7 +5,6 @@ import '../../chunk-TESFJQID.mjs';
 import '../../chunk-G3S6ZNPF.mjs';
 import { z } from 'zod';
 
-// ../replo-utils/lib/log.ts
 var defaultLogger = {
   info: console.log,
   debug: console.debug,
@@ -39,7 +38,6 @@ var errorUserFacingDetailsMessageSchema = z.object({
     "billing.addPublishedElements",
     "billing.addShopifyThemeProject",
     "billing.addReploSite",
-    // Agent Billing ONLY
     "agentBilling.shopifyThemeBuilder.publishedElements.exceeded",
     "agentBilling.shopifyThemeBuilder.projects.exceeded",
     "agentBilling.sites.exceeded",
@@ -48,14 +46,8 @@ var errorUserFacingDetailsMessageSchema = z.object({
   ]),
   message: z.string(),
   isRecoverable: z.boolean().optional(),
-  // NOTE (Matt 2024-03-22): We support detail being an array of strings
-  // in FullPageModal only.
   detail: z.array(z.string()).or(z.string()).optional(),
   key: z.string(),
-  // Structured data for API callers next to the human message, e.g. the
-  // current draft version on a project-context 409 or the offending paths on
-  // a 422. The worker error handler serializes userFacingDetails as-is, so
-  // this is the one place such data can travel without a second envelope.
   details: z.record(z.string(), z.unknown()).optional(),
   usage: z.object({
     current: z.number(),
@@ -101,15 +93,7 @@ var errorUserFacingDetailsMessageSchema = z.object({
   ]).optional()
 }).describe("ErrorUserFacingDetailsWithMessage");
 z.discriminatedUnion("type", [
-  /**
-   * Normal errors, show error UI depending on the type
-   */
   errorUserFacingDetailsMessageSchema,
-  /**
-   * Errors which should be ignored by the frontend. This is uncommon, usually
-   * you want to show an error in the UI, and if you don't want to then you catch
-   * the error in your route.
-   */
   z.object({
     type: z.literal("uncommon_none"),
     key: z.string(),
@@ -171,7 +155,6 @@ var IframeRpcChannelInvalidInputError = class extends IframeRpcChannelError {
   }
 };
 
-// ../schemas/iframeRpcChannel.ts
 var iframeRpcCallResultSchema = z.discriminatedUnion("type", [
   z.object({
     type: z.literal("success"),
@@ -308,7 +291,6 @@ function createIframeRpcChannel(options) {
     }
     try {
       const handler = handlers[
-        // eslint-disable-next-line replo/no-as-cast -- NOTE (Noah, 2026-07-25): The method existence check above narrows this dynamic wire string to the configured handler keys.
         message.method
       ];
       const result = await handler(parsedInput.data, handlerMeta);
@@ -350,7 +332,6 @@ function createIframeRpcChannel(options) {
       return;
     }
     const handler = handlers[
-      // eslint-disable-next-line replo/no-as-cast -- NOTE (Noah, 2026-08-07): Method existence check narrows this wire string to configured handler keys.
       message.method
     ];
     handler(parsedInput.data, handlerMeta);
@@ -493,9 +474,6 @@ function createIframeRpcChannel(options) {
         }, timeoutMs);
         pendingRequests.set(id, {
           method,
-          // PendingRequest is shared across methods, so resolve is typed as
-          // unknown; handleResponse already validated against this method's
-          // outputSchema before calling it.
           resolve: (value) => {
             resolve(value);
           },

package/_vendor/schemas/pageAnnotations.mjs

@@ -1,6 +1,5 @@
 import { z } from 'zod';
 
-// ../schemas/pageAnnotations.ts
 var PAGE_ANNOTATIONS_PROTOCOL_VERSION = 1;
 var pageAnnotationColorSchema = z.enum(["red", "purple", "amber"]).describe("PageAnnotationColor");
 var pageAnnotationPlacementSchema = z.enum(["element", "pageTop"]).describe("PageAnnotationPlacement");
@@ -9,8 +8,6 @@ var pageAnnotationMarkerSchema = z.object({
   number: z.number().int().min(1).max(99),
   color: pageAnnotationColorSchema,
   selector: z.string().min(1).max(2e3),
-  // "pageTop" markers ignore the selector and stack near the top of the
-  // page (page-wide findings); "element" markers pin to their selector.
   placement: pageAnnotationPlacementSchema.default("element")
 }).describe("PageAnnotationMarker");
 var pageAnnotationViewportRectSchema = z.object({

package/_vendor/schemas/selectMode.d.ts

@@ -312,8 +312,6 @@ export declare const selectModeFormatCommandSchema: z.ZodEnum<{
  *     are pinned to this enum via `Extract<SelectModeSelectionType, …>`
  *
  * Renaming or adding a variant here is a TS error in all three.
- *
- * @author Kevin O'Connell 2026-04-20
  */
 export declare const selectModeSelectionTypeSchema: z.ZodEnum<{
     element: "element";
@@ -337,8 +335,6 @@ export declare const selectModeSelectionTypeSchema: z.ZodEnum<{
  * Distinct from the SDK-internal `SelectModeInteractionSession`, which
  * holds live DOM `Element` refs and live pointer/scroll geometry. This
  * type holds only the message-passable, serialized projection.
- *
- * @author Kevin O'Connell 2026-04-23
  */
 export declare const selectModeSelectionSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     type: z.ZodLiteral<"none">;

package/_vendor/schemas/selectModeIframeRpc.d.ts

@@ -356,13 +356,13 @@ export declare const canopyToWebsiteBuilderMethodConfig: {
         timeoutMs: number;
     };
     iframeReady: {
-        inputSchema: z.ZodOptional<z.ZodObject<{
+        inputSchema: z.ZodObject<{
             packageName: z.ZodString;
             version: z.ZodString;
             branch: z.ZodNullable<z.ZodString>;
             commit: z.ZodNullable<z.ZodString>;
             builtAt: z.ZodNullable<z.ZodString>;
-        }, z.core.$strip>>;
+        }, z.core.$strip>;
         outputSchema: z.ZodVoid;
     };
     elementSelected: {
@@ -776,13 +776,13 @@ export declare const selectModeParentMessageSchema: z.ZodDiscriminatedUnion<[z.Z
 }, z.core.$strip>], "method">;
 export declare const selectModeIframeMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     method: z.ZodLiteral<"iframeReady">;
-    data: z.ZodOptional<z.ZodObject<{
+    data: z.ZodObject<{
         packageName: z.ZodString;
         version: z.ZodString;
         branch: z.ZodNullable<z.ZodString>;
         commit: z.ZodNullable<z.ZodString>;
         builtAt: z.ZodNullable<z.ZodString>;
-    }, z.core.$strip>>;
+    }, z.core.$strip>;
 }, z.core.$strip>, z.ZodObject<{
     method: z.ZodLiteral<"elementSelected">;
     data: z.ZodObject<{