@superblocksteam/gateway 2.0.155-next.0

package/dist/capture/library-parent-script.js

@@ -0,0 +1,82 @@
+/**
+ * Page source that makes a top-level pitcherURL visit look like the Code Mode
+ * iframe: mock `window.parent`, answer `sb-ready` / bootstrap / API auth in
+ * page JS so the host driver never sees the scoped JWT.
+ *
+ * Source text rather than a function handed to `addInitScript` because
+ * Playwright serializes functions and can drag bundler helpers (`__name`)
+ * into the page. Same rule as `buildEmbedHandshakeScript`.
+ */
+export function buildLibraryParentScript(payload) {
+    return `(function () {
+    if (window.parent !== window) return;
+    var payload = ${JSON.stringify(payload)};
+    var init = payload.initData;
+    var bootstrap = payload.bootstrapData;
+    window.__sbGatewayCaptureEvents = [];
+    function record(message) {
+      if (message && typeof message.type === "string") {
+        window.__sbGatewayCaptureEvents.push({ type: message.type });
+      }
+    }
+    function send(message) {
+      window.postMessage(message, window.location.origin);
+    }
+    var mockParent = {
+      postMessage: function (message) {
+        record(message);
+        if (message && message.type === "sb-ready" && init) {
+        send({
+          payload: {
+            appId: init.appId,
+            devServerAuthorization: init.devServerAuthorization,
+            peerId: init.peerId,
+            userId: init.userId,
+            windowOriginUrl: init.windowOriginUrl,
+          },
+          startTime: Date.now(),
+          type: "sb-init",
+        });
+      }
+      if (message && message.type === "sb-editor-request-bootstrap" && bootstrap) {
+        send({
+          payload: bootstrap,
+          startTime: Date.now(),
+          type: "sb-bootstrap-response",
+        });
+        if (bootstrap.profiles) {
+          send({
+            payload: { global: { profiles: bootstrap.profiles } },
+            startTime: Date.now(),
+            type: "sb-global-sync",
+          });
+        }
+      }
+      if (message && message.type === "authenticate-api-request") {
+        var callbackId = message.payload && message.payload.callbackId;
+        if (callbackId) {
+          send({
+            callbackId: callbackId,
+            payload: {
+              tokens: {
+                accessToken: bootstrap.accessToken,
+                token: bootstrap.token,
+              },
+            },
+            type: "resolve-promise",
+          });
+        }
+      }
+    },
+    document: document,
+    location: window.location,
+    window: window,
+  };
+  Object.defineProperty(window, "parent", {
+    configurable: true,
+    value: mockParent,
+    writable: false,
+  });
+})();`;
+}
+//# sourceMappingURL=library-parent-script.js.map

package/dist/capture/library-parent-script.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"library-parent-script.js","sourceRoot":"","sources":["../../src/capture/library-parent-script.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA6BH,MAAM,UAAU,wBAAwB,CACtC,OAA6B;IAE7B,OAAO;;oBAEW,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAmErC,CAAC;AACP,CAAC"}

package/dist/capture/mode.d.ts

@@ -0,0 +1,22 @@
+/**
+ * How this Gateway can (or cannot) capture a live canvas or complete IdP.
+ *
+ * `host_mcp_configured` is a setup-time scan of the MCP client config. That
+ * file can lie: the listed server may fail to start or miss PATH. Tool results
+ * therefore keep hostBrowserTools as "unknown" rather than claiming this turn
+ * has Playwright.
+ */
+export declare const CAPTURE_MODES: readonly ["gateway_chromium", "host_mcp_configured", "urls_only"];
+export type CaptureMode = (typeof CAPTURE_MODES)[number];
+export declare function resolveCaptureMode(input: {
+    gatewayChromium: boolean;
+    hostMcpConfigured: boolean;
+}): CaptureMode;
+/**
+ * Human + machine summary for `gateway setup` stderr. Info goes to stderr so
+ * a redirected stdout report stays clean.
+ */
+export declare function formatCaptureModeSummary(input: {
+    isolated: boolean;
+    mode: CaptureMode;
+}): string;

package/dist/capture/mode.js

@@ -0,0 +1,45 @@
+/**
+ * How this Gateway can (or cannot) capture a live canvas or complete IdP.
+ *
+ * `host_mcp_configured` is a setup-time scan of the MCP client config. That
+ * file can lie: the listed server may fail to start or miss PATH. Tool results
+ * therefore keep hostBrowserTools as "unknown" rather than claiming this turn
+ * has Playwright.
+ */
+export const CAPTURE_MODES = [
+    "gateway_chromium",
+    "host_mcp_configured",
+    "urls_only",
+];
+export function resolveCaptureMode(input) {
+    if (input.hostMcpConfigured) {
+        return "host_mcp_configured";
+    }
+    if (input.gatewayChromium) {
+        return "gateway_chromium";
+    }
+    return "urls_only";
+}
+/**
+ * Human + machine summary for `gateway setup` stderr. Info goes to stderr so
+ * a redirected stdout report stays clean.
+ */
+export function formatCaptureModeSummary(input) {
+    const lines = [`capture.mode: ${input.mode}`];
+    switch (input.mode) {
+        case "host_mcp_configured":
+            lines.push("A host browser MCP is listed in this client config. Config on disk can lie if that server fails to start or misses PATH.");
+            break;
+        case "gateway_chromium":
+            lines.push("Gateway Playwright Chromium is present for preview screenshots. No host browser MCP was found. Config on disk can lie if a listed server fails to start. IdP step-up still returns needs_browser_driver until a host browser MCP (@playwright/mcp) is configured. Gateway Chromium cannot complete IdP.");
+            break;
+        case "urls_only":
+            lines.push("URLs only: no host browser MCP and no Gateway Chromium. Config on disk can lie if a listed server fails to start. Live-canvas capture will return needs_browser_driver; superblocks gateway setup --with-screenshots may help live-canvas capture and does not clear IdP. Add @playwright/mcp for IdP step-up.");
+            break;
+    }
+    if (input.isolated) {
+        lines.push("Warning: a scanned browser MCP includes --isolated. IdP cookies will not survive browser_close.");
+    }
+    return lines.join("\n");
+}
+//# sourceMappingURL=mode.js.map

package/dist/capture/mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mode.js","sourceRoot":"","sources":["../../src/capture/mode.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,kBAAkB;IAClB,qBAAqB;IACrB,WAAW;CACH,CAAC;AAIX,MAAM,UAAU,kBAAkB,CAAC,KAGlC;IACC,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC5B,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1B,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAGxC;IACC,MAAM,KAAK,GAAG,CAAC,iBAAiB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,qBAAqB;YACxB,KAAK,CAAC,IAAI,CACR,0HAA0H,CAC3H,CAAC;YACF,MAAM;QACR,KAAK,kBAAkB;YACrB,KAAK,CAAC,IAAI,CACR,ySAAyS,CAC1S,CAAC;YACF,MAAM;QACR,KAAK,WAAW;YACd,KAAK,CAAC,IAAI,CACR,gTAAgT,CACjT,CAAC;YACF,MAAM;IACV,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CACR,iGAAiG,CAClG,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,141 @@
+export type GatewayConfig = {
+    deploymentEnvironmentName: string;
+    /** Cloud-Prem laptop agent: single-user process on a corp machine. */
+    localAgentMode: boolean;
+    /**
+     * Cloud-Prem Admin laptop agent: register Admin tools (integrations, apps,
+     * users, deploy_application, ...) only, and skip the Builder surface
+     * (start_app, edit_app, ...) that needs Playwright Chromium for preview
+     * screenshots and a live-edit session it never opens on this machine.
+     */
+    adminToolsOnly: boolean;
+    /**
+     * Where `import_app` looks for an archive it was handed the name of.
+     *
+     * A file attached to a chat lives in the model's own sandbox, so the path the
+     * model can quote is unreadable here even though the user downloaded the file
+     * to this machine. Only the file name is taken from that path, and only these
+     * directories are searched, so a caller cannot walk the filesystem with it.
+     */
+    importSearchDirs: string[];
+    /**
+     * How long the held socket's liveness beat must stay lost before the turn
+     * running on it is given up on. Exposed because this is the one knob that can
+     * end a turn the sandbox might still have finished: raising it far past the
+     * turn budget disables the behavior without a deploy.
+     */
+    beatLostGraceMs: number;
+    /**
+     * How long to hold an editor websocket after the last prompt before
+     * releasing it. Headless MCP needs the socket kept open so the sandbox
+     * startup watchdog does not tear the session down.
+     */
+    heldSessionIdleMs: number;
+    /**
+     * Grace period between a Clark turn settling and the held editor socket
+     * being dropped. Keeping it short leaves the user's own editor tab as the
+     * sandbox's only editor peer, which is the peer Clark's API calls run on.
+     */
+    heldSessionReleaseAfterTurnMs: number;
+    /**
+     * How long `start_app` / `edit_app` wait for Clark's generation turn after
+     * the prompt is acknowledged.
+     */
+    clarkTurnTimeoutMs: number;
+    /**
+     * Quiet window after Clark emits completed/idle before treating the job as
+     * done, so an acknowledgment that resumes generating is coalesced.
+     */
+    clarkSettleMs: number;
+    /**
+     * After Clark's job settles, how long to wait for the dev server to flush
+     * Clark's files before giving up on checkpointing them.
+     */
+    clarkReadyWaitMs: number;
+    /**
+     * Opt-in: hands Clark a browser context so its Playwright test tools are
+     * registered on headless turns. Off by default because that launches
+     * Chromium inside the live-edit pod (3Gi), which OOMKills generation.
+     * Gateway preview screenshots use laptop Chromium and ignore this flag.
+     * Set GATEWAY_CLARK_TESTING_ENABLED=true only when the sandbox has
+     * Chromium headroom and you want Clark to drive browser_* tools.
+     */
+    clarkTestingEnabled: boolean;
+    /**
+     * How long a single `check_app_progress` call waits for new Clark activity
+     * before answering with what it has. Sized to stay inside a client's tool
+     * timeout so the caller can poll again rather than lose the turn.
+     */
+    clarkProgressWaitMs: number;
+    /**
+     * How long to wait between `check_app_progress` polls once a plan is
+     * approved and the app is being built. Longer than
+     * {@link GatewayConfig.clarkProgressWaitMs} so a multi-minute build does not
+     * burn through a host's tool-call budget; the plan phase still uses the
+     * shorter progress wait so a decision surfaces quickly.
+     */
+    clarkBuildPollAfterMs: number;
+    /**
+     * How long a build may run without saying anything before a poll warns that
+     * it has gone quiet. Nonterminal and well under
+     * {@link GatewayConfig.clarkTurnTimeoutMs}, so the caller hears about the
+     * silence long before the turn is given up on.
+     */
+    clarkStallHintAfterMs: number;
+    /**
+     * Ceiling on any single host-facing call, whatever it is waiting for.
+     *
+     * Hosts abandon a tool call after their own timeout, and a host that
+     * advertises progress notifications is under no obligation to act on them —
+     * so a call cannot be allowed to run past this on the strength of having
+     * sent progress. Anything still unfinished here returns pacing and a cursor
+     * instead of holding the request open.
+     */
+    hostCallCeilingMs: number;
+    /**
+     * How long `publish_app` polls a queued deploy before giving up.
+     */
+    publishWaitTimeoutMs: number;
+    /**
+     * Interval between deploy-status polls while waiting for a queued publish.
+     */
+    publishPollIntervalMs: number;
+    /**
+     * Preferred integration profile key. When unset or `default`, Gateway
+     * picks a real org profile (staging → dev → production → first).
+     */
+    profileKey: string;
+    serverUrl: string;
+    turnTtlMs: number;
+    uiBaseUrl: string;
+    /**
+     * Base URL of the deployed-app shell / CDN used for JWT preview links.
+     * Local default is the csb-mock CDN. May include `__SB_APP_ID`.
+     */
+    deployedShellBaseUrl: string | undefined;
+    /**
+     * Optional https front door for the deployed shell (viewer/CDN tunnel).
+     * When set, Claude Desktop can openLink preview URLs. Stdio Gateway does
+     * not bind HTTP, so this is never a gateway origin.
+     */
+    publicViewerBaseUrl: string | undefined;
+    /**
+     * When true, always attempt a headless screenshot even if previewUrl is
+     * already https (demo / debugging).
+     */
+    forcePreviewScreenshot: boolean;
+    /**
+     * Setup-time scan: a host browser MCP (@playwright/mcp, chrome-devtools,
+     * puppeteer, agent-browser) was listed in the client config. Config on disk
+     * can lie; tool results keep hostBrowserTools as "unknown".
+     */
+    captureHostMcp: boolean;
+    /** Scanned host browser MCP args included --isolated (IdP cookies die). */
+    captureHostIsolated: boolean;
+    /**
+     * Test override for whether Playwright Chromium is on disk. Unset in
+     * production: capabilities probe without installing.
+     */
+    gatewayChromiumPresent?: boolean;
+};
+export declare function loadConfig(env?: NodeJS.ProcessEnv): GatewayConfig;

package/dist/config.js

@@ -0,0 +1,109 @@
+import { homedir } from "node:os";
+import path from "node:path";
+import { DEFAULT_TURN_TTL_MS } from "./resume/types.js";
+/**
+ * Reads an env var, treating blank as absent.
+ *
+ * Every optional var the Tilt profile passes is written as
+ * `os.getenv(name, '')`, and `FOO= cmd` sets an empty string too. Without this,
+ * `??` happily accepts `""` and it reaches config as a real value — a zero
+ * turn TTL, an empty UI URL that then fails URL construction.
+ */
+function readEnv(env, name) {
+    return env[name]?.trim() || undefined;
+}
+function required(env, name, fallback) {
+    const value = readEnv(env, name) ?? fallback;
+    if (!value) {
+        throw new Error(`Missing required env var: ${name}`);
+    }
+    return value;
+}
+function explicitEnvironmentName(env) {
+    return (readEnv(env, "DEPLOYMENT_ENVIRONMENT_NAME") ?? readEnv(env, "NODE_ENV"));
+}
+/**
+ * Where a file the user just got hold of actually sits: the browser's download
+ * folder, the desktop, or a temp directory, which is where Claude's own
+ * downloads land. `/tmp` and `/private/tmp` cover the macOS `/tmp` symlink both
+ * ways; `/private/var/folders` covers Claude's realpath'd temp dirs without
+ * opening the rest of `/private`. Anything outside these is refused, so an
+ * operator who needs more sets the env var.
+ */
+function resolveImportSearchDirs(env) {
+    const configured = readEnv(env, "GATEWAY_IMPORT_SEARCH_DIRS");
+    if (configured) {
+        return configured
+            .split(",")
+            .map((dir) => dir.trim())
+            .filter(Boolean);
+    }
+    const home = homedir();
+    return [
+        path.join(home, "Downloads"),
+        path.join(home, "Desktop"),
+        "/tmp",
+        "/private/tmp",
+        "/private/var/folders",
+    ];
+}
+function isTruthyFlag(value) {
+    if (!value) {
+        return false;
+    }
+    const normalized = value.toLowerCase();
+    return normalized === "1" || normalized === "true" || normalized === "yes";
+}
+export function loadConfig(env = process.env) {
+    const explicitEnvironment = explicitEnvironmentName(env);
+    const localAgentMode = isTruthyFlag(readEnv(env, "GATEWAY_LOCAL_AGENT"));
+    const adminToolsOnly = isTruthyFlag(readEnv(env, "GATEWAY_ADMIN_TOOLS_ONLY"));
+    // Never default the label to "local". A deployment that forgot to set the
+    // variable is not local, and anything reading the label would otherwise
+    // relax itself on the strength of a default.
+    const deploymentEnvironmentName = explicitEnvironment ?? "unknown";
+    // One origin standing in for both the server and the UI, for environments
+    // that serve them together - an ee deployment, a shared dev box. The local
+    // stack splits them across ports and sets each explicitly, and those still
+    // win: this is only the fallback beneath them.
+    const baseUrl = readEnv(env, "GATEWAY_BASE_URL");
+    return {
+        deploymentEnvironmentName,
+        localAgentMode,
+        adminToolsOnly,
+        importSearchDirs: resolveImportSearchDirs(env),
+        beatLostGraceMs: Number(readEnv(env, "GATEWAY_BEAT_LOST_GRACE_MS") ?? String(60_000)),
+        heldSessionIdleMs: Number(readEnv(env, "GATEWAY_HELD_SESSION_IDLE_MS") ?? String(30 * 60 * 1000)),
+        heldSessionReleaseAfterTurnMs: Number(readEnv(env, "GATEWAY_HELD_SESSION_RELEASE_AFTER_TURN_MS") ??
+            String(30_000)),
+        clarkTurnTimeoutMs: Number(readEnv(env, "GATEWAY_CLARK_TURN_TIMEOUT_MS") ?? String(10 * 60 * 1000)),
+        clarkSettleMs: Number(readEnv(env, "GATEWAY_CLARK_SETTLE_MS") ?? String(12_000)),
+        clarkReadyWaitMs: Number(readEnv(env, "GATEWAY_CLARK_READY_WAIT_MS") ?? String(30_000)),
+        clarkTestingEnabled: readEnv(env, "GATEWAY_CLARK_TESTING_ENABLED") === "true" ||
+            readEnv(env, "GATEWAY_CLARK_TESTING_ENABLED") === "1",
+        // Ceiling on one progress poll, not a floor: a poll returns the moment
+        // Clark says anything. Keep this around 10s so the plan phase stays
+        // responsive; the post-approve build cadence is clarkBuildPollAfterMs.
+        clarkProgressWaitMs: Number(readEnv(env, "GATEWAY_CLARK_PROGRESS_WAIT_MS") ?? String(10_000)),
+        // Suggested gap between polls once a plan is approved. ~30s keeps a
+        // 2-4 minute build inside Claude Desktop's tool-call budget.
+        clarkBuildPollAfterMs: Number(readEnv(env, "GATEWAY_CLARK_BUILD_POLL_AFTER_MS") ?? String(30_000)),
+        clarkStallHintAfterMs: Number(readEnv(env, "GATEWAY_CLARK_STALL_HINT_AFTER_MS") ?? String(120_000)),
+        // Under the 60s most MCP hosts allow a tool call, with room for the
+        // response to be written and read.
+        hostCallCeilingMs: Number(readEnv(env, "GATEWAY_HOST_CALL_CEILING_MS") ?? String(50_000)),
+        publishWaitTimeoutMs: Number(readEnv(env, "GATEWAY_PUBLISH_WAIT_TIMEOUT_MS") ?? String(2 * 60 * 1000)),
+        publishPollIntervalMs: Number(readEnv(env, "GATEWAY_PUBLISH_POLL_INTERVAL_MS") ?? "2000"),
+        profileKey: required(env, "GATEWAY_PROFILE_KEY", "default"),
+        serverUrl: required(env, "SUPERBLOCKS_SERVER_URL", readEnv(env, "GATEWAY_SERVER_URL") ?? baseUrl ?? "http://localhost:8080"),
+        turnTtlMs: Number(readEnv(env, "GATEWAY_TURN_TTL_MS") ?? DEFAULT_TURN_TTL_MS),
+        uiBaseUrl: required(env, "GATEWAY_UI_BASE_URL", baseUrl ?? "http://localhost:3000"),
+        deployedShellBaseUrl: readEnv(env, "GATEWAY_DEPLOYED_SHELL_BASE_URL"),
+        publicViewerBaseUrl: readEnv(env, "GATEWAY_PUBLIC_VIEWER_BASE_URL"),
+        forcePreviewScreenshot: readEnv(env, "GATEWAY_FORCE_PREVIEW_SCREENSHOT") === "true" ||
+            readEnv(env, "GATEWAY_FORCE_PREVIEW_SCREENSHOT") === "1",
+        captureHostMcp: isTruthyFlag(readEnv(env, "GATEWAY_CAPTURE_HOST_MCP")),
+        captureHostIsolated: isTruthyFlag(readEnv(env, "GATEWAY_CAPTURE_HOST_ISOLATED")),
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AA+IxD;;;;;;;GAOG;AACH,SAAS,OAAO,CAAC,GAAsB,EAAE,IAAY;IACnD,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AACxC,CAAC;AAED,SAAS,QAAQ,CACf,GAAsB,EACtB,IAAY,EACZ,QAAiB;IAEjB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC;IAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAsB;IACrD,OAAO,CACL,OAAO,CAAC,GAAG,EAAE,6BAA6B,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CACxE,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,uBAAuB,CAAC,GAAsB;IACrD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IAC9D,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,UAAU;aACd,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;aACxB,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QAC1B,MAAM;QACN,cAAc;QACd,sBAAsB;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACvC,OAAO,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,KAAK,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,cAAc,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACzE,MAAM,cAAc,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAC9E,0EAA0E;IAC1E,wEAAwE;IACxE,6CAA6C;IAC7C,MAAM,yBAAyB,GAAG,mBAAmB,IAAI,SAAS,CAAC;IACnE,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,+CAA+C;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACjD,OAAO;QACL,yBAAyB;QACzB,cAAc;QACd,cAAc;QACd,gBAAgB,EAAE,uBAAuB,CAAC,GAAG,CAAC;QAC9C,eAAe,EAAE,MAAM,CACrB,OAAO,CAAC,GAAG,EAAE,4BAA4B,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAC7D;QACD,iBAAiB,EAAE,MAAM,CACvB,OAAO,CAAC,GAAG,EAAE,8BAA8B,CAAC,IAAI,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CACvE;QACD,6BAA6B,EAAE,MAAM,CACnC,OAAO,CAAC,GAAG,EAAE,4CAA4C,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,CACjB;QACD,kBAAkB,EAAE,MAAM,CACxB,OAAO,CAAC,GAAG,EAAE,+BAA+B,CAAC,IAAI,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CACxE;QACD,aAAa,EAAE,MAAM,CACnB,OAAO,CAAC,GAAG,EAAE,yBAAyB,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAC1D;QACD,gBAAgB,EAAE,MAAM,CACtB,OAAO,CAAC,GAAG,EAAE,6BAA6B,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAC9D;QACD,mBAAmB,EACjB,OAAO,CAAC,GAAG,EAAE,+BAA+B,CAAC,KAAK,MAAM;YACxD,OAAO,CAAC,GAAG,EAAE,+BAA+B,CAAC,KAAK,GAAG;QACvD,uEAAuE;QACvE,oEAAoE;QACpE,uEAAuE;QACvE,mBAAmB,EAAE,MAAM,CACzB,OAAO,CAAC,GAAG,EAAE,gCAAgC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CACjE;QACD,oEAAoE;QACpE,6DAA6D;QAC7D,qBAAqB,EAAE,MAAM,CAC3B,OAAO,CAAC,GAAG,EAAE,mCAAmC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CACpE;QACD,qBAAqB,EAAE,MAAM,CAC3B,OAAO,CAAC,GAAG,EAAE,mCAAmC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CACrE;QACD,oEAAoE;QACpE,mCAAmC;QACnC,iBAAiB,EAAE,MAAM,CACvB,OAAO,CAAC,GAAG,EAAE,8BAA8B,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAC/D;QACD,oBAAoB,EAAE,MAAM,CAC1B,OAAO,CAAC,GAAG,EAAE,iCAAiC,CAAC,IAAI,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CACzE;QACD,qBAAqB,EAAE,MAAM,CAC3B,OAAO,CAAC,GAAG,EAAE,kCAAkC,CAAC,IAAI,MAAM,CAC3D;QACD,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,qBAAqB,EAAE,SAAS,CAAC;QAC3D,SAAS,EAAE,QAAQ,CACjB,GAAG,EACH,wBAAwB,EACxB,OAAO,CAAC,GAAG,EAAE,oBAAoB,CAAC,IAAI,OAAO,IAAI,uBAAuB,CACzE;QACD,SAAS,EAAE,MAAM,CACf,OAAO,CAAC,GAAG,EAAE,qBAAqB,CAAC,IAAI,mBAAmB,CAC3D;QACD,SAAS,EAAE,QAAQ,CACjB,GAAG,EACH,qBAAqB,EACrB,OAAO,IAAI,uBAAuB,CACnC;QACD,oBAAoB,EAAE,OAAO,CAAC,GAAG,EAAE,iCAAiC,CAAC;QACrE,mBAAmB,EAAE,OAAO,CAAC,GAAG,EAAE,gCAAgC,CAAC;QACnE,sBAAsB,EACpB,OAAO,CAAC,GAAG,EAAE,kCAAkC,CAAC,KAAK,MAAM;YAC3D,OAAO,CAAC,GAAG,EAAE,kCAAkC,CAAC,KAAK,GAAG;QAC1D,cAAc,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACtE,mBAAmB,EAAE,YAAY,CAC/B,OAAO,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAC9C;KACF,CAAC;AACJ,CAAC"}

package/dist/debug.d.ts

@@ -0,0 +1,2 @@
+export declare const gatewayDebug: import("util").DebugLogger;
+export declare function gatewayDebugStack(message: string, attributes?: Record<string, unknown>): void;

package/dist/debug.js

@@ -0,0 +1,9 @@
+import { debuglog } from "node:util";
+export const gatewayDebug = debuglog("gateway");
+export function gatewayDebugStack(message, attributes = {}) {
+    if (!gatewayDebug.enabled) {
+        return;
+    }
+    gatewayDebug(message, { ...attributes, stack: new Error().stack });
+}
+//# sourceMappingURL=debug.js.map

package/dist/debug.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"debug.js","sourceRoot":"","sources":["../src/debug.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;AAEhD,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,aAAsC,EAAE;IAExC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IACD,YAAY,CAAC,OAAO,EAAE,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,IAAI,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;AACrE,CAAC"}

package/dist/deps.d.ts

@@ -0,0 +1,36 @@
+import type { GatewayConfig } from "./config.js";
+import type { EventStore } from "./events/types.js";
+import type { ProgressStore, RecentAppStore, TurnStore } from "./resume/types.js";
+import type { SessionPeer } from "./sabs/session-peer.js";
+import type { SuperblocksServerClient } from "./server/client.js";
+/**
+ * Runtime collaborators for one Gateway process. Stdio MCP is the only
+ * production transport; tests build the same bag and connect an in-memory
+ * client.
+ */
+export type AppDeps = {
+    config: GatewayConfig;
+    /**
+     * Personal API key of the already-logged-in Superblocks CLI user.
+     * Gateway tools call the control plane as this identity.
+     */
+    cliApiKey: string;
+    /**
+     * Superblocks user already resolved for this CLI session. When present,
+     * capabilities skip `/users/me` (ENG-5806). When absent, the first tool
+     * call resolves it through the guarded identity read.
+     */
+    cliIdentity?: {
+        email?: string;
+        organizationId: string;
+        userId: string;
+    };
+    /** Durable, bounded history of what happened in each live-edit session. */
+    events: EventStore;
+    /** Each caller's place in a build's event stream, kept between calls. */
+    progressCursors: ProgressStore;
+    recentApps: RecentAppStore;
+    server: SuperblocksServerClient;
+    sessionPeer: SessionPeer;
+    turns: TurnStore;
+};

package/dist/deps.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=deps.js.map

package/dist/deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps.js","sourceRoot":"","sources":["../src/deps.ts"],"names":[],"mappings":""}

package/dist/events/cursor.d.ts

@@ -0,0 +1,43 @@
+import { type EventProducer, type LiveEditEvent } from "./types.js";
+export declare const EVENT_CURSOR_VERSION = 1;
+/**
+ * How far one caller has read a live edit's history.
+ *
+ * There is deliberately no single number here. SABS and the dev server mint
+ * their own sequence counters and cannot see each other's, so a global
+ * position would either have to be invented by the gateway — making it a
+ * third counter that two producers can race — or would have to pretend one
+ * producer's 7 is comparable with the other's. Naming each producer's own
+ * position is the smallest contract that stays true to how the events are
+ * produced, and it degrades gracefully: a producer this cursor has never
+ * heard from simply reads from the start of its stream.
+ *
+ * Keys are the wire producer names (lowercase snake_case) and the field name
+ * is lowerCamelCase, so the cursor survives a round trip through a tool
+ * result unchanged.
+ */
+export type EventCursor = {
+    streams: Partial<Record<EventProducer, number>>;
+    version: typeof EVENT_CURSOR_VERSION;
+};
+export declare const EMPTY_EVENT_CURSOR: EventCursor;
+/** Last sequence this cursor consumed from a producer; 0 when never read. */
+export declare function cursorPosition(cursor: EventCursor | undefined, producer: EventProducer): number;
+/**
+ * Moves a cursor past the given events.
+ *
+ * Only ever forwards. Events arrive out of order between producers, and a
+ * re-read of an older event must not rewind a caller that has already gone
+ * further — that is the loop where a caller replays the same events forever.
+ */
+export declare function advanceEventCursor(cursor: EventCursor | undefined, events: readonly LiveEditEvent[]): EventCursor;
+/**
+ * Reads a cursor a caller handed back.
+ *
+ * Anything unrecognized reads as "no cursor" rather than as an error: a caller
+ * resuming with a cursor from an older contract should re-read the retained
+ * history, not be refused. Positions are clamped to safe non-negative
+ * integers, so a hand-edited cursor cannot skip a stream to infinity or wind
+ * one backwards into a replay loop.
+ */
+export declare function parseEventCursor(raw: unknown): EventCursor | undefined;

package/dist/events/cursor.js

@@ -0,0 +1,78 @@
+import { EVENT_PRODUCERS, } from "./types.js";
+export const EVENT_CURSOR_VERSION = 1;
+export const EMPTY_EVENT_CURSOR = {
+    streams: {},
+    version: EVENT_CURSOR_VERSION,
+};
+/** Last sequence this cursor consumed from a producer; 0 when never read. */
+export function cursorPosition(cursor, producer) {
+    return cursor?.streams[producer] ?? 0;
+}
+/**
+ * Moves a cursor past the given events.
+ *
+ * Only ever forwards. Events arrive out of order between producers, and a
+ * re-read of an older event must not rewind a caller that has already gone
+ * further — that is the loop where a caller replays the same events forever.
+ */
+export function advanceEventCursor(cursor, events) {
+    const streams = {
+        ...(cursor?.streams ?? {}),
+    };
+    for (const event of events) {
+        const seen = streams[event.producer] ?? 0;
+        if (event.sequence > seen) {
+            streams[event.producer] = event.sequence;
+        }
+    }
+    return { streams: sortStreams(streams), version: EVENT_CURSOR_VERSION };
+}
+/**
+ * Producer keys in a fixed order, so two cursors holding the same positions
+ * serialize to the same bytes. A cursor travels through JSON in a tool result
+ * and back again; an unstable key order would make two equal cursors compare
+ * unequal wherever they are compared as text.
+ */
+function sortStreams(streams) {
+    const sorted = {};
+    for (const producer of [...EVENT_PRODUCERS].sort()) {
+        const position = streams[producer];
+        if (position !== undefined) {
+            sorted[producer] = position;
+        }
+    }
+    return sorted;
+}
+/**
+ * Reads a cursor a caller handed back.
+ *
+ * Anything unrecognized reads as "no cursor" rather than as an error: a caller
+ * resuming with a cursor from an older contract should re-read the retained
+ * history, not be refused. Positions are clamped to safe non-negative
+ * integers, so a hand-edited cursor cannot skip a stream to infinity or wind
+ * one backwards into a replay loop.
+ */
+export function parseEventCursor(raw) {
+    if (typeof raw !== "object" || raw === null) {
+        return undefined;
+    }
+    const candidate = raw;
+    if (candidate.version !== EVENT_CURSOR_VERSION) {
+        return undefined;
+    }
+    if (typeof candidate.streams !== "object" || candidate.streams === null) {
+        return undefined;
+    }
+    const source = candidate.streams;
+    const streams = {};
+    for (const producer of EVENT_PRODUCERS) {
+        const position = source[producer];
+        if (typeof position === "number" &&
+            Number.isSafeInteger(position) &&
+            position >= 0) {
+            streams[producer] = position;
+        }
+    }
+    return { streams: sortStreams(streams), version: EVENT_CURSOR_VERSION };
+}
+//# sourceMappingURL=cursor.js.map

package/dist/events/cursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor.js","sourceRoot":"","sources":["../../src/events/cursor.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,GAGhB,MAAM,YAAY,CAAC;AAEpB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAuBtC,MAAM,CAAC,MAAM,kBAAkB,GAAgB;IAC7C,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,oBAAoB;CAC9B,CAAC;AAEF,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAC5B,MAA+B,EAC/B,QAAuB;IAEvB,OAAO,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA+B,EAC/B,MAAgC;IAEhC,MAAM,OAAO,GAA2C;QACtD,GAAG,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;KAC3B,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;AAC1E,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAClB,OAA+C;IAE/C,MAAM,MAAM,GAA2C,EAAE,CAAC;IAC1D,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,GAA+C,CAAC;IAClE,IAAI,SAAS,CAAC,OAAO,KAAK,oBAAoB,EAAE,CAAC;QAC/C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,IAAI,SAAS,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QACxE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAkC,CAAC;IAC5D,MAAM,OAAO,GAA2C,EAAE,CAAC;IAC3D,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClC,IACE,OAAO,QAAQ,KAAK,QAAQ;YAC5B,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC;YAC9B,QAAQ,IAAI,CAAC,EACb,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;AAC1E,CAAC"}

package/dist/events/memory-event-store.d.ts

@@ -0,0 +1,34 @@
+import type { EventCursor } from "./cursor.js";
+import { type AppendOutcome, type EventProducer, type EventScope, type EventSnapshot, type EventStore, type LiveEditEvent } from "./types.js";
+/**
+ * Local-only fallback for a laptop stack with no Redis, matching the same
+ * fallback the turn store makes. It is not a second source of truth: a
+ * multi-replica deployment would need an external store, because two
+ * processes with private maps cannot agree on what was already delivered.
+ *
+ * A shared test suite runs both implementations against the same behaviour, so
+ * "works locally, breaks on Redis" shows up here rather than in production.
+ */
+export declare class MemoryEventStore implements EventStore {
+    private readonly streams;
+    append(event: LiveEditEvent): Promise<AppendOutcome>;
+    list(input: EventScope & {
+        afterSequence?: number;
+        limit?: number;
+        producer?: EventProducer;
+    }): Promise<LiveEditEvent[]>;
+    snapshot(input: EventScope & {
+        cursor?: EventCursor;
+        limit?: number;
+    }): Promise<EventSnapshot>;
+    /** One producer's retained stream in sequence order, as Redis reads it. */
+    private ordered;
+    private streamFor;
+    /**
+     * Drops the lowest-sequence events past the bound, which takes their
+     * de-duplication records with them: keeping every id forever would make the
+     * bound on events pointless.
+     */
+    private trim;
+    private evictExpired;
+}