@superblocksteam/gateway 2.0.0-SNAPSHOT.1d4c72c0ab174c21

package/package.json

@@ -0,0 +1,78 @@
+{
+  "name": "@superblocksteam/gateway",
+  "version": "2.0.0-SNAPSHOT.1d4c72c0ab174c21",
+  "description": "Gateway v0 — MCP entry for app start/edit/publish",
+  "license": "Superblocks Community Software License",
+  "bin": {
+    "superblocks-gateway": "./dist/main.js"
+  },
+  "files": [
+    "dist",
+    "skills"
+  ],
+  "type": "module",
+  "main": "dist/index.js",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json",
+    "./skills/superblocks-import/SKILL.md": "./skills/superblocks-import/SKILL.md"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/ext-apps": "^1.7.5",
+    "@modelcontextprotocol/sdk": "^1.30.0",
+    "@opentelemetry/api": "^1.9.1",
+    "@superblocksteam/library-shared": "2.0.0-SNAPSHOT.d9fcdf9b23406881",
+    "@superblocksteam/mcp-server": "2.0.0-SNAPSHOT.fd602514676ebf5e",
+    "@superblocksteam/shared": "2.0.0-SNAPSHOT.4dc7555b8c722398",
+    "@superblocksteam/telemetry": "2.0.0-SNAPSHOT.faa40614b0614040",
+    "fflate": "^0.8.3",
+    "libpg-query": "^17.7.4",
+    "playwright": "1.56.0",
+    "ws": "8.21.0",
+    "zod": "^4.3.6"
+  },
+  "devDependencies": {
+    "@eslint/js": "^9.39.2",
+    "@types/express": "^4.17.21",
+    "@types/node": "^24",
+    "@types/ws": "^8.18.1",
+    "eslint": "^9.39.2",
+    "eslint-config-prettier": "^10.1.8",
+    "eslint-config-turbo": "^2.9.16",
+    "eslint-plugin-import": "^2.32.0",
+    "eslint-plugin-unicorn": "^62.0.0",
+    "eslint-plugin-unused-imports": "^4.3.0",
+    "express": "^4.21.1",
+    "globals": "^17.3.0",
+    "tsx": "^4.20.3",
+    "typescript": "^6.0.3",
+    "typescript-eslint": "^8.59.2",
+    "vitest": "^4.0.17"
+  },
+  "engines": {
+    "node": ">=24",
+    "npm": ">=10.x"
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org"
+  },
+  "scripts": {
+    "build": "tsc --build tsconfig.build.json",
+    "check": "pnpm run lint && pnpm run typecheck",
+    "clean": "rm -rf dist *.tsbuildinfo",
+    "dev": "node --import tsx src/main.ts",
+    "dev:local": "node --import tsx src/main.ts",
+    "lint": "eslint --max-warnings 0 --concurrency=2",
+    "lint:fix": "eslint --fix --concurrency=2",
+    "playwright:install": "playwright install chromium",
+    "publish-package": "pnpm publish",
+    "start": "node dist/main.js",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit"
+  }
+}

package/skills/superblocks-build/SKILL.md

@@ -0,0 +1,59 @@
+---
+name: superblocks-build
+description: >
+  Use when the user asks to build, create, change, update, edit, or modify an
+  app, dashboard, internal tool, admin panel, form, or CRUD UI - including one
+  they might otherwise make as a local file or artifact. Most requests never
+  say which location they mean. An existing or named app is still ambiguous
+  unless this conversation already established its location. Ask where it
+  should live before creating or editing anything and before using any tool;
+  do not list apps to infer the answer.
+---
+
+# Where does this app get built?
+
+Two places can build what the user just asked for:
+
+- **Superblocks** — a real application. Org datasources, server-side APIs,
+  platform auth and permissions, a deploy story, other people can use it.
+- **Here** — a local file or artifact in this chat. Fast and private, but it
+  reaches no company data and nobody else can run it.
+
+Most requests name neither. Choosing silently is wrong about half the time, and
+the user only finds out once the work already exists in the wrong place.
+
+## Ask first
+
+Before creating or editing anything, ask one short question naming both options,
+then wait for the answer:
+
+> Do you want this built in Superblocks, or as a local artifact here?
+
+If the location is ambiguous, your first action must be the two-option question
+above. Do not call any Superblocks tool, including `list_applications`, or
+create or edit a local artifact until the user answers.
+
+Ask once per request. Do not build a local version "to show them" while waiting.
+Building it is the choice.
+
+## Do not ask when they already answered
+
+- Said Superblocks, or explicitly named a Superblocks app already established in
+  this conversation -> build there.
+- Said local, artifact, file, HTML, "just show me", "quick mockup" -> build here.
+- Answered this question for this same request -> honor it, stay silent.
+- Not an app at all (a script, a chart, an analysis, a document, a snippet)
+  -> just do the work.
+
+## Editing counts too
+
+The same question applies to changing an app, dashboard, or artifact the user
+names, including one already imported into Superblocks. When you cannot tell
+which copy they mean, ask that instead.
+
+## Once they pick Superblocks
+
+- Something new -> `start_app`.
+- Existing source to port -> use the `superblocks-import` skill.
+- An app already in Superblocks -> `list_applications` to find it, then
+  `edit_app`.

package/skills/superblocks-import/SKILL.md

@@ -0,0 +1,88 @@
+---
+name: superblocks-import
+description: >
+  Import, migrate, or port an existing app (React, Replit, Lovable, v0, Streamlit,
+  a zip on disk, or files in the conversation) into Superblocks. Use when the
+  user has existing source and wants it as a Superblocks application — not when
+  they are only editing an app that already exists in Superblocks.
+---
+
+# Superblocks import (host director)
+
+You plan and slice. **Superblocks writes** the application through Builder MCP
+(`start_app` / `edit_app`). Do not invent Superblocks `client/` or `server/`
+files on the laptop. Superblocks already has its own in-sandbox migration
+skillset; your job is to ask for the right slices.
+
+## Choose the source path
+
+When source files are already visible in this conversation, call
+`upload_artifact` with `files: [{ path, content }]`. Keep their original
+relative paths; do not write or zip them first. Pass the returned `artifact` to
+`start_app` in `artifacts` and ask Superblocks to migrate the attached source.
+
+When the source is a readable tree on disk, inventory it locally, then use
+`start_app` and `edit_app`. Do **not** zip or upload it; send focused prompts
+grounded in the files you read.
+
+For a zip when there is **no readable tree**, call `upload_artifact` with
+`filePath` (never `zipBase64`), then pass its `artifact` to `start_app` in
+`artifacts`. Archives over 50 MB are rejected.
+
+Keep the returned artifact and application IDs. To resume, reuse the same
+artifact ID with `edit_app` and the same application ID. Do not upload the
+source again, and do not call `start_app` again.
+
+Replit / Lovable / v0: clone or export onto this machine first. Do not ask
+the live-edit environment to fetch those clouds.
+
+## Slice order
+
+1. Inventory locally (routes, env keys, ORMs, `fetch`/`axios`, tests). Keep
+   the source app running if you can. Map secrets from `.env.example` — never
+   paste production `.env` into `edit_app`.
+2. `list_integrations`. Reuse an existing datasource (`find_apps_by_integration`)
+   before `create_integration`.
+3. `start_app` a short fullstack scaffold with named integrations. For an
+   uploaded source, include the artifact and ask Superblocks to migrate it.
+   `start_app` defaults to Plan mode. Pass `mode: "BUILD"` only if the user
+   asks for build mode explicitly (e.g. "use build mode" or "skip the plan").
+   Otherwise, call
+   `ask_user` to put the first plan to them and wait for their answer. Only if
+   they approve, call `edit_app` with `planAction: "approve"` instead of
+   planning it again. Do not run a second “migrate everything” plan.
+   Mode is per call and never sticks: every `edit_app` below plans unless it
+   passes `mode: "BUILD"`, so send it on each slice.
+4. One backend operation per `edit_app`, then `check_app_progress` until
+   `testApi` activity exists. There is no MCP SQL tool.
+5. One UI route per `edit_app`, wired to APIs that already passed.
+6. Auth, jobs, leftovers last.
+7. After each slice, `get_application_structure` (and `get_app` URLs). Ground
+   the next prompt in what Superblocks actually wrote. `list_knowledge` /
+   `get_knowledge` for org playbooks.
+
+`list_applications` if `start_app` errors: the app may already exist.
+
+## Primitive map (not Next.js)
+
+- Backend operations are **named APIs** in a registry, not URL routes.
+- Each UI page is a Superblocks page using `useApi` / `useApiData` /
+  `executeApi` from the fullstack template — not Next App Router, not the
+  source app’s QueryClient.
+- Datasources are **org integrations** (UUIDs). Credentials live there, not
+  `process.env` in generated code. Auth is platform user context; drop the
+  source login stack unless Superblocks asks otherwise.
+
+## `edit_app` prompt shape
+
+Ask Superblocks to implement **this slice** as fullstack (APIs vs pages vs
+integrations). Tell it to follow its third-party migration skillset. Cite
+paths you already read and quote only the small source excerpt a slice needs.
+
+## Do not
+
+- Open `/code-mode/applications/edit/:id` during a Gateway turn (steals the
+  editor peer).
+- `browser_evaluate` JWTs; `browser_close` / Playwright `--isolated` between
+  IdP and retry.
+- Dump `.env` or production data into prompts.