@superblocksteam/gateway 2.0.155-next.0

package/dist/sabs/agent-facing-text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-facing-text.js","sourceRoot":"","sources":["../../src/sabs/agent-facing-text.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,uEAAuE;AACvE,MAAM,eAAe,GAAa;IAChC,oEAAoE;IACpE,+EAA+E;IAC/E,0CAA0C;IAC1C,2BAA2B;IAC3B,uBAAuB;IACvB,wCAAwC;IACxC,iDAAiD;IACjD,sFAAsF;IACtF,0CAA0C;IAC1C,qFAAqF;CACtF,CAAC;AAEF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,SAAS;IACT,QAAQ;IACR,eAAe;IACf,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,OAAO;CACR,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,mBAAmB;IACnB,eAAe;IACf,WAAW;IACX,WAAW;IACX,aAAa;IACb,aAAa;IACb,WAAW;IACX,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAC7C,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,IAAI,GAAG,EAAE,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,OAAO,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC/D,IAAI,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CACL,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACxC,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC/B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC5B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAC9B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CACvC,KAAgC,CACjC,EAAE,CAAC;YACF,MAAM,eAAe,GAAG,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,IAAI,IAAI,CAAC;YACpE,IAAI,CAAC,eAAe,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9C,GAAG,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/sabs/browser-context.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Builds the `browserContext` the ai-service needs before it will register
+ * Clark's Playwright tools.
+ *
+ * Opt-in: the sandbox launches Chromium, mocks `window.parent`, and
+ * replays `initData` / `bootstrapData` to the app shell as `sb-init` and
+ * `sb-bootstrap-response`. The gateway only supplies the same context the
+ * browser editor assembles from Redux. Gateway preview screenshots use
+ * laptop Chromium instead and do not call this.
+ */
+import type { BrowserContext } from "@superblocksteam/library-shared/types";
+/**
+ * An org profile as the Superblocks API returns it. `key` is what selects the
+ * profile; `id` and `displayName` round out the `Profile` shape the app shell
+ * types against.
+ */
+export type BrowserContextProfile = {
+    allowedInEditor?: boolean;
+    displayName?: string;
+    id?: string;
+    key: string;
+};
+export type BrowserContextInput = {
+    applicationId: string;
+    /**
+     * Personal API key sent as library `token` / `Authorization`. The
+     * orchestrator forwards that header to the code-bundle route, which
+     * checks `apps:view` and rejects the live-edit `apps:update` JWT.
+     */
+    apiKey?: string;
+    /** Sandbox origin from `connectLiveEdit`; the editor iframe's own base URL. */
+    liveEditUrl: string;
+    orchestratorUrl: string;
+    organizationId?: string;
+    /** Held-session peer id, so the app shell reuses this editor's socket. */
+    peerId: string;
+    /** Profile key already resolved for this session's orchestrator calls. */
+    profileKey?: string;
+    profiles?: BrowserContextProfile[];
+    /** Scoped `apps:update` JWT the live-edit session was opened with. */
+    sessionToken: string;
+    uiBaseUrl: string;
+    userEmail?: string;
+    userId: string;
+};
+/**
+ * Returns the context, or `undefined` when the sandbox URL is unusable.
+ *
+ * Undefined rather than a throw: browser testing is an enhancement to a turn,
+ * so a sandbox we cannot address should cost Clark its Playwright tools, not
+ * the whole prompt.
+ */
+export declare function buildBrowserContext(input: BrowserContextInput): BrowserContext | undefined;

package/dist/sabs/browser-context.js

@@ -0,0 +1,91 @@
+/**
+ * Builds the `browserContext` the ai-service needs before it will register
+ * Clark's Playwright tools.
+ *
+ * Opt-in: the sandbox launches Chromium, mocks `window.parent`, and
+ * replays `initData` / `bootstrapData` to the app shell as `sb-init` and
+ * `sb-bootstrap-response`. The gateway only supplies the same context the
+ * browser editor assembles from Redux. Gateway preview screenshots use
+ * laptop Chromium instead and do not call this.
+ */
+import { Profile, ProfileType } from "@superblocksteam/shared";
+function toProfile(row) {
+    return new Profile({
+        allowedInEditor: row.allowedInEditor,
+        description: "",
+        displayName: row.displayName ?? row.key,
+        id: row.id ?? row.key,
+        key: row.key,
+        type: ProfileType.RESERVED,
+    });
+}
+function selectProfiles(input) {
+    const rows = input.profiles ?? [];
+    if (rows.length === 0) {
+        return undefined;
+    }
+    const chosen = rows.find((row) => row.key === input.profileKey) ?? rows[0];
+    if (!chosen) {
+        return undefined;
+    }
+    const selected = toProfile(chosen);
+    return {
+        available: rows.map(toProfile),
+        default: selected,
+        selected,
+    };
+}
+/**
+ * Returns the context, or `undefined` when the sandbox URL is unusable.
+ *
+ * Undefined rather than a throw: browser testing is an enhancement to a turn,
+ * so a sandbox we cannot address should cost Clark its Playwright tools, not
+ * the whole prompt.
+ */
+export function buildBrowserContext(input) {
+    let iframeBaseUrl;
+    try {
+        iframeBaseUrl = new URL(input.liveEditUrl);
+    }
+    catch {
+        return undefined;
+    }
+    if (iframeBaseUrl.protocol !== "http:" &&
+        iframeBaseUrl.protocol !== "https:") {
+        return undefined;
+    }
+    // The editor's iframe carries this too. Without it the app shell boots in
+    // its viewer mode, where the editing affordances Clark's tests drive are
+    // absent.
+    iframeBaseUrl.searchParams.set("app_mode", "EDIT");
+    const profiles = selectProfiles(input);
+    return {
+        bootstrapData: {
+            accessToken: input.sessionToken,
+            agents: [],
+            agentUrls: [input.orchestratorUrl],
+            appId: input.applicationId,
+            featureFlags: {
+                "clark.sdk-api.enabled": true,
+            },
+            orgId: input.organizationId,
+            ...(profiles ? { profiles } : {}),
+            // Library fetch: Authorization = this token, x-superblocks-authorization
+            // = accessToken. The API key belongs on Authorization; the scoped JWT
+            // does not carry apps:view for the orchestrator's code-bundle fetch.
+            token: input.apiKey ?? input.sessionToken,
+            userEmail: input.userEmail,
+            userId: input.userId,
+            windowOriginUrl: input.uiBaseUrl,
+        },
+        iframeBaseUrl: iframeBaseUrl.toString(),
+        initData: {
+            appId: input.applicationId,
+            devServerAuthorization: `Bearer ${input.sessionToken}`,
+            peerId: input.peerId,
+            userId: input.userId,
+            windowOriginUrl: input.uiBaseUrl,
+        },
+    };
+}
+//# sourceMappingURL=browser-context.js.map

package/dist/sabs/browser-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-context.js","sourceRoot":"","sources":["../../src/sabs/browser-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA4C/D,SAAS,SAAS,CAAC,GAA0B;IAC3C,OAAO,IAAI,OAAO,CAAC;QACjB,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG;QACvC,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG;QACrB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,IAAI,EAAE,WAAW,CAAC,QAAQ;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CACrB,KAA0B;IAE1B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;IAClC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;QAC9B,OAAO,EAAE,QAAQ;QACjB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAA0B;IAE1B,IAAI,aAAkB,CAAC;IACvB,IAAI,CAAC;QACH,aAAa,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,aAAa,CAAC,QAAQ,KAAK,OAAO;QAClC,aAAa,CAAC,QAAQ,KAAK,QAAQ,EACnC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,0EAA0E;IAC1E,yEAAyE;IACzE,UAAU;IACV,aAAa,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAEnD,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO;QACL,aAAa,EAAE;YACb,WAAW,EAAE,KAAK,CAAC,YAAY;YAC/B,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC;YAClC,KAAK,EAAE,KAAK,CAAC,aAAa;YAC1B,YAAY,EAAE;gBACZ,uBAAuB,EAAE,IAAI;aAC9B;YACD,KAAK,EAAE,KAAK,CAAC,cAAc;YAC3B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,yEAAyE;YACzE,sEAAsE;YACtE,qEAAqE;YACrE,KAAK,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,YAAY;YACzC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,eAAe,EAAE,KAAK,CAAC,SAAS;SACjC;QACD,aAAa,EAAE,aAAa,CAAC,QAAQ,EAAE;QACvC,QAAQ,EAAE;YACR,KAAK,EAAE,KAAK,CAAC,aAAa;YAC1B,sBAAsB,EAAE,UAAU,KAAK,CAAC,YAAY,EAAE;YACtD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,eAAe,EAAE,KAAK,CAAC,SAAS;SACjC;KACF,CAAC;AACJ,CAAC"}

package/dist/sabs/editor-client-methods.d.ts

@@ -0,0 +1,147 @@
+import type { PromptContextIntegration, SdkApiExecutionResult } from "@superblocksteam/library-shared/types";
+import { type MethodHandlers, type RequestContextBase } from "@superblocksteam/shared";
+import type { OrchestratorClient } from "../orchestrator/client.js";
+import type { SuperblocksServerClient } from "../server/client.js";
+export type IntegrationExecuteResult = {
+    error?: string;
+    response?: string;
+};
+type IntegrationExecutePayload = {
+    integrationHint?: {
+        displayName?: string;
+        name: string;
+        type: string;
+    };
+    integrationId: string;
+    request: Record<string, unknown>;
+};
+/**
+ * The subset of library-shared's AiChatMessage the gateway reads. Test-run
+ * fields are flattened in here because Clark reports a whole test run through
+ * ordinary `aiPushMessage` pushes, distinguished only by `type`.
+ */
+export type ClarkMessage = {
+    choices?: Array<string | {
+        text: string;
+        subText?: string;
+    }>;
+    content?: string;
+    header?: string;
+    id?: string;
+    name?: string;
+    options?: Array<string | {
+        label?: string;
+        value?: string;
+    }>;
+    role?: string;
+    summary?: string;
+    testCaseId?: string;
+    testCaseStatus?: string;
+    testCases?: Array<{
+        id?: string;
+        name?: string;
+        status?: string;
+    }>;
+    testRunId?: string;
+    testStatus?: string;
+    title?: string;
+    type?: string;
+};
+export type ClarkPeerEvent = {
+    kind: "message";
+    message: ClarkMessage;
+} | {
+    kind: "change_info";
+    label: string;
+} | {
+    kind: "draft_state";
+    hasDraft: boolean;
+} | {
+    kind: "generation_state";
+    hasError?: boolean;
+    hasSuggestions?: boolean;
+    state: string;
+} | {
+    kind: "reload_iframe";
+} | {
+    kind: "sync_status";
+    status?: string;
+} | {
+    kind: "task_status";
+    label: string;
+};
+export type ClarkPeerListener = (event: ClarkPeerEvent) => void;
+/**
+ * Credentials and clients the held gateway peer needs to answer Clark's
+ * discovery and testApi RPCs without a browser tab.
+ */
+export type EditorSessionContext = {
+    apiKey: string;
+    applicationId: string;
+    branchName?: string;
+    organizationId: string;
+    orchestrator: OrchestratorClient;
+    profileKey: string;
+    server: SuperblocksServerClient;
+    sessionToken: string;
+    waitUntilFilesSynced: () => Promise<boolean>;
+};
+export type EditorClientMethodDeps = {
+    getContext: () => EditorSessionContext | undefined;
+    /**
+     * Records a mid-turn testApi / testIntegration outcome for MCP progress and
+     * needs_decision payloads.
+     */
+    onToolRun?: (run: {
+        detail?: unknown;
+        kind: "test_api" | "test_integration";
+        name: string;
+        success: boolean;
+    }) => void;
+    /**
+     * Forwards a tool-permission decision to the ai-service via
+     * `editor.aiRespondToToolPermission` on the held socket. Headless sessions
+     * auto-approve only the allowlisted Clark agent tools; other tools deny.
+     */
+    respondToToolPermission: (payload: {
+        approved: boolean;
+        messageId: string;
+        requestId?: string;
+    }) => Promise<void>;
+};
+/**
+ * Runs Clark's executeRequestToIntegration the same way the browser editor
+ * does: one inline V2 API step against the orchestrator. Username/password and
+ * other stored-credential integrations execute here; interactive IdP auth
+ * surfaces as an error asking the user to authenticate in the editor.
+ */
+export declare function executeRequestToIntegrationViaOrchestrator(context: EditorSessionContext, payload: IntegrationExecutePayload): Promise<IntegrationExecuteResult>;
+/**
+ * Prefills Clark's promptContext.integrations the same way the editor does.
+ */
+export declare function loadIntegrationsForPrompt(context: Pick<EditorSessionContext, "apiKey" | "applicationId" | "organizationId" | "server">): Promise<Omit<PromptContextIntegration, "metadata">[]>;
+export declare function mapSdkExecutionResponse(response: unknown): SdkApiExecutionResult;
+/**
+ * Server -> editor calls the dev server makes into the peer driving a turn,
+ * whether that peer negotiated protocol "editor" or "gateway".
+ *
+ * Leaving these unimplemented is not inert. ISocket answers an unknown method
+ * with `{ code: 2, message: "unknown method <name>" }`, and the dev server does
+ * not catch every one of those rejections — `resetScope` in particular escalates
+ * to `unhandledRejection`, which exits the sandbox with "Dev server fatal exit"
+ * and takes the in-flight Clark build down with it. A browser editor answers
+ * all of them, so a held gateway socket has to as well.
+ *
+ * Keyed on `EditorClientMethods` rather than a hand-kept list so that a method
+ * added to the protocol upstream fails this package's typecheck instead of
+ * reaching a sandbox and crashing it. Same handler surface as
+ * `createEditorHandlers` in vite-plugin-file-sync's dev-server-ws-smoke-client,
+ * the other non-browser peer that speaks this protocol; it is not imported from
+ * there because the gateway does not depend on the vite plugin.
+ *
+ * When a listener is provided, chat, generation-state, task/change, and
+ * preview-ready pushes are forwarded so the gateway can wait for Clark's turn
+ * and surface progress over MCP.
+ */
+export declare function createEditorClientMethods(getListener?: () => ClarkPeerListener | undefined, onInbound?: (method: string) => void, deps?: EditorClientMethodDeps): MethodHandlers<Record<string, never>, Record<string, never>, RequestContextBase>;
+export {};