@superblocksteam/gateway 2.0.174 → 2.0.175-next.0

package/README.md

@@ -135,20 +135,20 @@ Restart the MCP host after `setup` and after every rebuild below.
 
 ### Rebuild after source changes
 
-Cursor MCP still goes through oclif `dist/index.js`. CLI esbuild inlines
-`@superblocksteam/gateway`, so a Gateway `tsc` alone does not update the
-process the host spawns.
+Cursor MCP goes through oclif `dist/index.js`, which loads
+`@superblocksteam/gateway` and `@superblocksteam/shared` from their own `dist/`.
+Rebuild the package you changed.
 
 | You changed                                                     | Rebuild                                        |
 | --------------------------------------------------------------- | ---------------------------------------------- |
 | `packages/shared` (types Gateway imports, e.g. SocketHeartbeat) | `pnpm --filter @superblocksteam/shared build`  |
 | `packages/gateway/src`                                          | `pnpm --filter @superblocksteam/gateway build` |
-| Gateway, CLI serve wiring, or anything oclif esbuild inlines    | `pnpm --filter @superblocksteam/cli build`     |
+| CLI serve wiring (`packages/cli/packages/cli/src`)              | `pnpm --filter @superblocksteam/cli build`     |
 
-A typical Gateway capture change is shared (if types moved), then Gateway,
-then CLI. Then restart Cursor.
+A typical Gateway capture change is shared (if types moved), then Gateway.
+Then restart Cursor.
 
-Proof the new bundle is live: Gateway stderr logs
+Proof the new build is live: Gateway stderr logs
 `gateway live canvas capture uses libraryBrowserContext (testingEnabled does not gate it)`
 at boot. A crash that `@superblocksteam/shared` does not export
 `SocketHeartbeat` means shared `dist/` is stale.
@@ -335,17 +335,42 @@ exports over OTLP through the authenticated Server `/api/v1/metrics` proxy
 (same path and policy as traces). `service.name=gateway` and
 `deployment.environment.name` ride on the SDK resource, not on each data point.
 
-| Metric                                        | Labels                                                                                                             |
-| --------------------------------------------- | ------------------------------------------------------------------------------------------------------------------ |
-| `gateway.identity.read.outcomes`              | `gateway.outcome`: `cached`, `resolved`, `refused`, `credential_error`, `breaker_open`, `caller_timeout`, `outage` |
-| `gateway.server.read_retry.outcomes`          | `gateway.server.read_retry.outcome`, `gateway.server.read_retry.cause`, `gateway.server.read_retry.operation`      |
-| `gateway.clark.facts_flag_bootstrap.outcomes` | `gateway.clark.facts_flag_bootstrap.outcome`: `enabled`, `disabled`, `invalid`                                     |
-| `gateway.integration_profile.resolutions`     | `gateway.profile.source`, `gateway.profile.reason`, `gateway.profile.scope`                                        |
-| `gateway.mcp.tool_calls`                      | `tool.name`, `tool.status`, `mcp.client.name`                                                                      |
-| `gateway.mcp.tool_call_duration_seconds`      | same as `gateway.mcp.tool_calls`                                                                                   |
-| `gateway.checkpoint.outcomes`                 | `gateway.checkpoint.outcome`                                                                                       |
-| `gateway.process.faults`                      | `gateway.fault.kind`, `gateway.fault.fatal`                                                                        |
-| `gateway.readiness.verdicts`                  | `gateway.readiness.probe`, `gateway.readiness.ready`, `gateway.readiness.dispatch`, `gateway.readiness.upstream`   |
+| Metric                                        | Labels                                                                                                                   |
+| --------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
+| `gateway.identity.read.outcomes`              | `gateway.outcome`: `cached`, `resolved`, `refused`, `credential_error`, `breaker_open`, `caller_timeout`, `outage`       |
+| `gateway.server.read_retry.outcomes`          | `gateway.server.read_retry.outcome`, `gateway.server.read_retry.cause`, `gateway.server.read_retry.operation`            |
+| `gateway.clark.facts_flag_bootstrap.outcomes` | `gateway.clark.facts_flag_bootstrap.outcome`: `enabled`, `disabled`, `invalid`                                           |
+| `gateway.integration_profile.resolutions`     | `gateway.profile.source`, `gateway.profile.reason`, `gateway.profile.scope`                                              |
+| `gateway.mcp.tool_calls`                      | `tool.name`, `tool.status`, `mcp.client.name`                                                                            |
+| `gateway.mcp.tool_call_duration_seconds`      | same as `gateway.mcp.tool_calls`                                                                                         |
+| `gateway.mcp.usage_delivery`                  | `gateway.mcp.usage_delivery.outcome`: `accepted`, `failed`; `gateway.mcp.usage_delivery.reason`: bounded delivery reason |
+| `gateway.mcp.usage_delivery.attempts`         | none; counted before dispatch, independently of delivery settlement                                                      |
+| `gateway.checkpoint.outcomes`                 | `gateway.checkpoint.outcome`                                                                                             |
+| `gateway.process.faults`                      | `gateway.fault.kind`, `gateway.fault.fatal`                                                                              |
+| `gateway.readiness.verdicts`                  | `gateway.readiness.probe`, `gateway.readiness.ready`, `gateway.readiness.dispatch`, `gateway.readiness.upstream`         |
+
+Usage delivery reasons are `none` for accepted events, or `authentication`,
+`http_error`, `invalid_request`, `network`, `rate_limited`, `server_error`,
+`timeout`, `unknown`, and `unsupported` for failures. Activity ingestion shares
+the Server's authenticated per-user API allowance of 120 requests per minute
+per process; each tool operation sends two events. A confirmed plan refusal
+has activity outcome `not_entitled` and is excluded from warehouse adoption.
+Started and finished events can arrive in either order; the warehouse pairs
+them by authenticated principal and operation ID.
+
+The attempts counter includes deliveries still in flight; compare it with the
+accepted and failed counts over the same interval in a long-lived process.
+All these counters require telemetry export. Abrupt process exit can lose
+both an activity event and its counters, so this is not an end-to-end loss
+rate or a durable delivery guarantee.
+
+Schema rejections use the Server's existing request warning with bounded
+`builder.mcp.validation.issues` field/code pairs. It inherits authenticated
+request context; rejected values and unknown field names are omitted. Each
+phase is sent once with no automatic retry, and the Server quota also applies
+to invalid activity. Deploy the Server schema before gateways that send new
+outcomes; the delivery counter classifies skew as `invalid_request` or
+`unsupported`.
 
 Locally, the Server forwards the proxy to the OTel collector on `:4318`. The
 workspace `just up` (any profile) starts the LGTM stack from

package/dist/agents/resolve-orchestrator-url.d.ts

@@ -56,3 +56,4 @@ export declare function orchestratorUrlDependsOnProfile(input: {
  * "No active agent found".
  */
 export declare function pickOrchestratorBaseUrl(input: PickOrchestratorBaseUrlInput): string;
+//# sourceMappingURL=resolve-orchestrator-url.d.ts.map

package/dist/agents/resolve-orchestrator-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-orchestrator-url.d.ts","sourceRoot":"","sources":["../../src/agents/resolve-orchestrator-url.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,0BAA0B,GAAG;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,0BAA0B,EAAE,CAAC;IACrC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAMF,+DAA+D;AAC/D,eAAO,MAAM,oBAAoB,IAAI,CAAC;AActC,wBAAgB,wCAAwC,CACtD,GAAG,EAAE,MAAM,GAAG,SAAS,GACtB,MAAM,GAAG,SAAS,CAoBpB;AA4CD;;;;;;;;;GASG;AACH,wBAAgB,+BAA+B,CAC7C,GAAG,EAAE,MAAM,EACX,SAAS,CAAC,EAAE,MAAM,GACjB,MAAM,CAqBR;AAED;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,GAAG,OAAO,CAQV;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,4BAA4B,GAClC,MAAM,CA6CR"}

package/dist/capabilities/integration-metadata.d.ts

@@ -29,3 +29,4 @@ export type GetIntegrationMetadataResult = {
 };
 export declare function getIntegrationMetadata(context: CapabilityContext, input: GetIntegrationMetadataInput): Promise<CapabilityResult<GetIntegrationMetadataResult>>;
 export {};
+//# sourceMappingURL=integration-metadata.d.ts.map

package/dist/capabilities/integration-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-metadata.d.ts","sourceRoot":"","sources":["../../src/capabilities/integration-metadata.ts"],"names":[],"mappings":"AAOA,OAAO,EAKL,KAAK,sBAAsB,EAC5B,MAAM,oCAAoC,CAAC;AAM5C,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAInD,MAAM,MAAM,2BAA2B,GAAG;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,KAAK,aAAa,GAAG;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,GAAG,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,OAAO,EAAE,sBAAsB,CAAC;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AA0DF,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,iBAAiB,EAC1B,KAAK,EAAE,2BAA2B,GACjC,OAAO,CAAC,gBAAgB,CAAC,4BAA4B,CAAC,CAAC,CAkKzD"}

package/dist/capabilities/lifecycle.d.ts

@@ -10,6 +10,7 @@ import type { LiveStateAttaches } from "./live-state-attaches.js";
 import type { CapabilityResult, CheckAppProgressInput, CheckAppProgressResult, CheckPublishProgressInput, EditAppInput, EditAppResult, AskUserInput, AskUserResult, GetAppInput, GetAppResult, PreviewAppInput, PreviewAppResult, PreviewStatusInput, PreviewStatusResult, Principal, ProgressEvent, PublishAppInput, PublishAppResult, ResolvedPrincipal, StartAppInput, StartAppResult, UploadArtifactInput, UploadArtifactResult } from "./types.js";
 export { IMPORT_ZIP_MAX_BYTES } from "./types.js";
 export type CapabilityContext = {
+    mcpClientName?: string;
     config: GatewayConfig;
     /** Injected so turn and stall thresholds are testable without real time. */
     now?: () => number;
@@ -124,3 +125,4 @@ export declare function publishApp(ctx: CapabilityContext, input: PublishAppInpu
  * changing clock so repeated calls remain useful without outliving the host.
  */
 export declare function checkPublishProgress(ctx: CapabilityContext, input: CheckPublishProgressInput): Promise<CapabilityResult<PublishAppResult>>;
+//# sourceMappingURL=lifecycle.d.ts.map

package/dist/capabilities/lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../src/capabilities/lifecycle.ts"],"names":[],"mappings":"AAWA,OAAO,EAKL,KAAK,gBAAgB,EACtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EACV,wBAAwB,EAEzB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAIlD,OAAO,EACL,KAAK,wBAAwB,EAE9B,MAAM,kCAAkC,CAAC;AAM1C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAML,KAAK,WAAW,EAIjB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAEV,uBAAuB,EACxB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAEV,aAAa,EACb,cAAc,EACd,eAAe,EAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EACV,iBAAiB,EAElB,MAAM,0BAA0B,CAAC;AAOlC,OAAO,KAAK,EAGV,gBAAgB,EAChB,qBAAqB,EACrB,sBAAsB,EACtB,yBAAyB,EAEzB,YAAY,EACZ,aAAa,EAEb,YAAY,EACZ,aAAa,EACb,WAAW,EACX,YAAY,EAEZ,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,SAAS,EACT,aAAa,EACb,eAAe,EACf,gBAAgB,EAEhB,iBAAiB,EAEjB,aAAa,EACb,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,aAAa,CAAC;IACtB,4EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;IAC5C,mBAAmB,CAAC,EAAE,CAAC,SAAS,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC7D,SAAS,EAAE,SAAS,CAAC;IACrB,uDAAuD;IACvD,QAAQ,EAAE,QAAQ,CAAC;IACnB,+EAA+E;IAC/E,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,wEAAwE;IACxE,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,UAAU,EAAE,cAAc,CAAC;IAC3B;;;;OAIG;IACH,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IACpD;;;OAGG;IACH,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IACpD;;;OAGG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,MAAM,EAAE,uBAAuB,CAAC;IAChC,WAAW,EAAE,WAAW,CAAC;IACzB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,WAAW,EAAE,eAAe,CAAC;CAC9B,CAAC;AA0YF;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC,CAgE9C;AA2HD,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,iBAAiB,EACtB,SAAS,EAAE,iBAAiB,EAC5B,aAAa,EAAE,MAAM,GAAG,SAAS;AACjC;;;;GAIG;AACH,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAO,GACtC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CA6BnC;AAihCD;;;;;;;;;;GAUG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,UAAU,IAAI,IAAI,CAAC;IACnB,SAAS,IAAI,IAAI,CAAC;CACnB,CAAC;AAgJF,wBAAsB,QAAQ,CAC5B,GAAG,EAAE,iBAAiB,EACtB,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC,CAoH3C;AAwQD,wBAAsB,cAAc,CAClC,GAAG,EAAE,iBAAiB,EACtB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,CAAC,CAiDjD;AAwQD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,iBAAiB,EACtB,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,CAAC,CAqInD;AAyGD,wBAAsB,OAAO,CAC3B,GAAG,EAAE,iBAAiB,EACtB,KAAK,EAAE,YAAY,EACnB,YAAY,CAAC,EAAE,MAAM,EACrB,kBAAkB,CAAC,EAAE,kBAAkB,GACtC,OAAO,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CA4B1C;AAqbD;;;;;;;;;;GAUG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,iBAAiB,EACtB,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,CAiN7C;AAED,+EAA+E;AAC/E,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,iBAAiB,EACtB,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAC,CA8EhD;AA2bD;;;;;;;GAOG;AACH,wBAAsB,OAAO,CAC3B,GAAG,EAAE,iBAAiB,EACtB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAsE1C;AAED;;GAEG;AACH,wBAAsB,MAAM,CAC1B,GAAG,EAAE,iBAAiB,EACtB,KAAK,EAAE,WAAW,GACjB,OAAO,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAyFzC;AA2GD,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,gBAAgB,CAAC,eAAe,CAAC,CAsBpC;AAED,wBAAsB,UAAU,CAC9B,GAAG,EAAE,iBAAiB,EACtB,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,CAsB7C;AAyED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,iBAAiB,EACtB,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,CA8N7C"}

package/dist/capabilities/lifecycle.js

@@ -766,6 +766,7 @@ function turnSummary(turn) {
 async function promptInput(ctx, input) {
     return {
         apiKey: ctx.principal.apiKey,
+        mcpClientName: ctx.mcpClientName,
         applicationId: input.applicationId,
         ...(input.attachments ? { attachments: input.attachments } : {}),
         ...(input.branch ? { branch: input.branch } : {}),
@@ -1544,19 +1545,22 @@ function tooLargeError(size) {
  * out, so it accepts anything attachments support rather than archives alone.
  * The other two routes are text channels and stay archive-shaped.
  */
-async function resolveImportArchive(input, searchDirs) {
+async function resolveImportArchive(input, config) {
     const hasFiles = Boolean(input.files?.length);
-    const hasPath = Boolean(input.filePath?.trim());
+    // Hosted, the disk is the microVM's own, never the user's files.
+    const hasPath = !config.hosted && Boolean(input.filePath?.trim());
     const hasBase64 = Boolean(input.zipBase64?.trim());
     if (Number(hasFiles) + Number(hasPath) + Number(hasBase64) !== 1) {
         return {
             kind: "error",
             code: "import_zip_required",
-            message: "Provide exactly one of files, filePath (a path or file name on the gateway host), or zipBase64.",
+            message: config.hosted
+                ? "Provide exactly one of files or zipBase64."
+                : "Provide exactly one of files, filePath (a path or file name on the gateway host), or zipBase64.",
         };
     }
     if (hasPath) {
-        return resolveFileByPath(input.filePath.trim(), searchDirs);
+        return resolveFileByPath(input.filePath.trim(), config.importSearchDirs);
     }
     let bytes;
     if (hasFiles) {
@@ -1565,7 +1569,7 @@ async function resolveImportArchive(input, searchDirs) {
             return {
                 kind: "error",
                 code: "import_files_invalid",
-                message: `"${binaryFile.path}" is not a text file, and files entries are archived as the text they contain: base64 in there uploads as base64 characters wearing a "${path.extname(binaryFile.path)}" name. Pass filePath with the file's name instead, so the gateway reads its real bytes.`,
+                message: `"${binaryFile.path}" is not a text file, and files entries are archived as the text they contain: base64 in there uploads as base64 characters wearing a "${path.extname(binaryFile.path)}" name. ${config.hosted ? "Put it in a ZIP and pass that as zipBase64 instead, so its real bytes are uploaded. A ZIP too large for zipBase64 cannot be uploaded on this connection yet." : "Pass filePath with the file's name instead, so the gateway reads its real bytes."}`,
             };
         }
         const archive = archiveSourceFiles(input.files);
@@ -1689,7 +1693,7 @@ export async function uploadArtifact(ctx, input) {
     if (principalResult.kind !== "ok") {
         return principalResult;
     }
-    const archiveResult = await resolveImportArchive(input, ctx.config.importSearchDirs);
+    const archiveResult = await resolveImportArchive(input, ctx.config);
     if (archiveResult.kind !== "ok") {
         return archiveResult;
     }