@superblocksteam/library 2.0.131 → 2.0.132

package/dist/jsx-dev-runtime/index.js

@@ -1,4 +1,4 @@
-import { _ as root_store_default, t as makeWrappedComponent, x as tracker } from "../jsx-wrapper-BpJeKbJA.js";
+import { S as tracker, t as makeWrappedComponent, v as root_store_default } from "../jsx-wrapper-wJs8wFGh.js";
 import { SOURCE_ID_ATTRIBUTE } from "@superblocksteam/library-shared";
 import * as ReactJsxDevRuntime from "react/jsx-dev-runtime";
 //#region src/jsx-dev-runtime/jsx-dev-runtime.ts

package/dist/{jsx-wrapper-BpJeKbJA.js → jsx-wrapper-wJs8wFGh.js}

@@ -1867,7 +1867,7 @@ function getTraceContextHeadersFromSpan(span) {
 //#endregion
 //#region src/lib/internal-details/lib/features/api-utils.ts
 async function executeV2Api(params) {
-	const { body, apiName, controlFlowOnlyFiles, notifyOnSystemError, eventType, onMessage, processStreamEvents, responseType, abortController, baseUrl, viewMode, accessToken, token, traceHeaders } = params;
+	const { body, apiName, controlFlowOnlyFiles, notifyOnSystemError, eventType, onMessage, processStreamEvents, responseType, abortController, baseUrl, viewMode, accessToken, token, maxResponseBytes, traceHeaders } = params;
 	let parentContext = context.active();
 	if (traceHeaders) parentContext = getContextFromTraceHeaders(traceHeaders);
 	let applicationId = "unknown";
@@ -1908,17 +1908,31 @@ async function executeV2Api(params) {
 			fullUrl: baseUrl,
 			timeoutId: setTimeout(() => {}, 1e3),
 			onMessage,
-			processStreamEvents
+			processStreamEvents,
+			maxResponseBytes
 		}) : await fetchServer({
 			augmentedInit: init,
 			fullUrl: baseUrl,
-			timeoutId: setTimeout(() => {}, 1e3)
+			timeoutId: setTimeout(() => {}, 1e3),
+			maxResponseBytes
 		});
 	} catch (err) {
 		const message = `Failed to execute ${apiName || "API"}. ${err}`;
 		const suppressError = viewMode !== ViewMode.EDITOR && err?.code === 20;
 		if (notifyOnSystemError && !suppressError) console.log(`[internal] [executeV2Api] ${message}`);
-		const statusCode = err instanceof HttpError ? err.code : void 0;
+		if (err instanceof ResponseSizeLimitError) {
+			span.recordException(err);
+			span.setAttributes({
+				"response_size_limit.exceeded": true,
+				"response_size_limit.limit_bytes": err.limitBytes
+			});
+			console.warn("[internal] [executeV2Api] orchestrator /execute response size limit exceeded", {
+				apiName: apiName ?? "unknown",
+				applicationId,
+				limitBytes: err.limitBytes
+			});
+		}
+		const statusCode = err instanceof HttpError ? err.code : err instanceof ResponseSizeLimitError ? 413 : void 0;
 		let errorType = "GENERAL";
 		const errorMessage = err instanceof Error ? err.message : String(err);
 		const errorConstructorName = err?.constructor?.name;
@@ -1942,7 +1956,11 @@ const HttpMethod = {
 	Patch: "PATCH",
 	Delete: "DELETE"
 };
-const stream = async ({ url, headers, body, onMessage, onComplete, onError, defaultError, method, baseUrl = "/api/", signal, init: overrideInit }) => {
+const cancelReaderBestEffort = async (reader) => {
+	await reader.cancel().catch(() => void 0);
+};
+const isResponseSizeLimitEnabled = (maxResponseBytes) => maxResponseBytes !== void 0 && Number.isFinite(maxResponseBytes) && maxResponseBytes > 0;
+const stream = async ({ url, headers, body, onMessage, onComplete, onError, defaultError, method, baseUrl = "/api/", signal, init: overrideInit, maxResponseBytes }) => {
 	const init = overrideInit ?? {
 		body: JSON.stringify(body),
 		headers,
@@ -1951,20 +1969,28 @@ const stream = async ({ url, headers, body, onMessage, onComplete, onError, defa
 	try {
 		const response = await fetch(`${baseUrl}${url}`, init);
 		if (!response.ok) try {
-			const parsed = await response.json();
+			const parsed = await readJsonResponseWithLimit(response, maxResponseBytes);
 			throw new HttpError(response.status, !response.status || response.status >= 500, parsed?.error?.message ?? parsed?.responseMeta?.error?.message ?? defaultError);
 		} catch (e) {
-			if (e instanceof HttpError) throw e;
+			if (e instanceof HttpError || e instanceof ResponseSizeLimitError) throw e;
 			throw new HttpError(response.status, !response.status || response.status >= 500, response.statusText);
 		}
 		if (!response.body) return;
 		const reader = response.body.getReader();
 		const decoder = new TextDecoder();
 		let done = false;
+		let totalBytes = 0;
 		let lastChunk = "";
 		while (!done) {
 			if (signal && signal.aborted) return;
 			const { value, done: readerDone } = await reader.read();
+			if (value) {
+				totalBytes += value.byteLength;
+				if (isResponseSizeLimitEnabled(maxResponseBytes) && totalBytes > maxResponseBytes) {
+					await cancelReaderBestEffort(reader);
+					throw new ResponseSizeLimitError(maxResponseBytes);
+				}
+			}
 			const chunk = lastChunk + decoder.decode(value);
 			const messages = chunk.split("\n");
 			let jsonValues = [];
@@ -1986,12 +2012,13 @@ const stream = async ({ url, headers, body, onMessage, onComplete, onError, defa
 		}
 	} catch (e) {
 		if (e.name === "AbortError") console.log("[internal] [stream] Fetch was cancelled");
+		else if (e instanceof ResponseSizeLimitError) throw e;
 		else onError(e.message ?? defaultError, e.code);
 	} finally {
 		onComplete();
 	}
 };
-const fetchServerStream = async ({ augmentedInit, fullUrl, timeoutId, onMessage, processStreamEvents }) => {
+const fetchServerStream = async ({ augmentedInit, fullUrl, timeoutId, onMessage, processStreamEvents, maxResponseBytes }) => {
 	const handleMessage = (message) => {
 		if (message?.result?.event?.data) onMessage && onMessage(message.result.event.data);
 		else if (message?.result?.event?.start || message?.result?.event?.end) processStreamEvents && processStreamEvents(message);
@@ -2010,7 +2037,8 @@ const fetchServerStream = async ({ augmentedInit, fullUrl, timeoutId, onMessage,
 		onComplete,
 		onError,
 		baseUrl: "",
-		signal: augmentedInit?.signal ?? void 0
+		signal: augmentedInit?.signal ?? void 0,
+		maxResponseBytes
 	});
 };
 const getErrorMessageFromObject = (message) => {
@@ -2018,11 +2046,11 @@ const getErrorMessageFromObject = (message) => {
 	const match = /"message"\s*:\s*"([^"]*)"/.exec(messageJSONString);
 	return match ? match[1] : messageJSONString;
 };
-const fetchServer = ({ augmentedInit, fullUrl, timeoutId }) => {
+const fetchServer = ({ augmentedInit, fullUrl, timeoutId, maxResponseBytes }) => {
 	return fetch(fullUrl, augmentedInit).then(async (response) => {
 		try {
 			if (response.status === 204) return null;
-			const json = await response.json();
+			const json = await readJsonResponseWithLimit(response, maxResponseBytes);
 			if (response.ok && json) {
 				if (json.data == null) return json;
 				return json.data;
@@ -2032,7 +2060,7 @@ const fetchServer = ({ augmentedInit, fullUrl, timeoutId }) => {
 				throw new HttpError(response.status, !response.status || response.status >= 500, message);
 			}
 		} catch (e) {
-			if (e instanceof HttpError) throw e;
+			if (e instanceof HttpError || e instanceof ResponseSizeLimitError) throw e;
 			throw new HttpError(response.status, !response.status || response.status >= 500, response.statusText);
 		}
 	}).finally(() => clearTimeout(timeoutId));
@@ -2046,6 +2074,49 @@ var HttpError = class extends Error {
 		this.critical = critical;
 	}
 };
+var ResponseSizeLimitError = class extends Error {
+	constructor(limitBytes) {
+		super(`Response blocked: exceeded orchestrator /execute response limit of ${limitBytes} bytes.`);
+		this.limitBytes = limitBytes;
+		this.name = "ResponseSizeLimitError";
+	}
+};
+const readTextResponseWithLimit = async (response, maxResponseBytes) => {
+	if (!response.body) {
+		const text = await response.text();
+		if (isResponseSizeLimitEnabled(maxResponseBytes) && new TextEncoder().encode(text).byteLength > maxResponseBytes) throw new ResponseSizeLimitError(maxResponseBytes);
+		return text;
+	}
+	const reader = response.body.getReader();
+	const chunks = [];
+	let totalBytes = 0;
+	while (true) {
+		const { value, done } = await reader.read();
+		if (done) break;
+		if (!value) continue;
+		totalBytes += value.byteLength;
+		if (isResponseSizeLimitEnabled(maxResponseBytes) && totalBytes > maxResponseBytes) {
+			await cancelReaderBestEffort(reader);
+			throw new ResponseSizeLimitError(maxResponseBytes);
+		}
+		chunks.push(value);
+	}
+	const body = new Uint8Array(totalBytes);
+	let offset = 0;
+	for (const chunk of chunks) {
+		body.set(chunk, offset);
+		offset += chunk.byteLength;
+	}
+	return new TextDecoder().decode(body);
+};
+const isLegacyJsonOnlyResponseMock = (response) => {
+	const maybeResponse = response;
+	return !maybeResponse.body && typeof maybeResponse.text !== "function" && typeof maybeResponse.json === "function";
+};
+const readJsonResponseWithLimit = async (response, maxResponseBytes) => {
+	if (isLegacyJsonOnlyResponseMock(response)) return response.json();
+	return JSON.parse(await readTextResponseWithLimit(response, maxResponseBytes));
+};
 const parseStreamResult = (streamResult, options) => {
 	if (!streamResult || !Array.isArray(streamResult) || !streamResult.length) return;
 	const execution = streamResult[0].result.execution;
@@ -2533,6 +2604,7 @@ var ApiManager = class {
 			viewMode: editMode ? ViewMode.EDITOR : ViewMode.DEPLOYED,
 			accessToken: this.accessToken ?? "",
 			token: this.token ?? "",
+			maxResponseBytes: this.rootStore.orchestratorExecuteResponseSizeLimitBytes,
 			traceHeaders,
 			abortController,
 			onMessage: (message) => {
@@ -2543,7 +2615,8 @@ var ApiManager = class {
 				editorBridge.sendStreamedApiEvent(event, apiName);
 			}
 		});
-		const parsedResult = (isStream ? parseStreamResult(events, { includeFinalOutput: true }) ?? syncResponse : syncResponse) ?? void 0;
+		const hasSystemError = syncResponse != null && typeof syncResponse === "object" && "systemError" in syncResponse;
+		const parsedResult = (isStream ? hasSystemError ? syncResponse : parseStreamResult(events, { includeFinalOutput: true }) ?? syncResponse : syncResponse) ?? void 0;
 		if (parsedResult) decodeBytestringsInV2ExecutionResponse(parsedResult);
 		this.runningApiControllers[apiName]?.delete(abortController);
 		const error = this.findError(parsedResult ?? void 0);
@@ -2775,8 +2848,8 @@ var ApiManager = class {
 				signal: abortController.signal
 			});
 			if (!response.ok) {
-				const text = await response.text();
 				networkMs = Math.round(performance.now() - fetchPerfT0);
+				const text = await readTextResponseWithLimit(response, this.rootStore.orchestratorExecuteResponseSizeLimitBytes);
 				let message;
 				try {
 					const json = JSON.parse(text);
@@ -2799,8 +2872,8 @@ var ApiManager = class {
 					timingBreakdown: buildTimingBreakdown()
 				};
 			}
-			const result = await response.json();
 			networkMs = Math.round(performance.now() - fetchPerfT0);
+			const result = await readJsonResponseWithLimit(response, this.rootStore.orchestratorExecuteResponseSizeLimitBytes);
 			const eventPerf = result.events?.find((e) => e.end?.performance != null);
 			const perfObj = result.performance ?? (eventPerf?.end)?.performance;
 			const executionStartMs = perfObj?.start != null && Number.isFinite(Number(perfObj.start)) ? Number(perfObj.start) : void 0;
@@ -2828,6 +2901,21 @@ var ApiManager = class {
 				timingBreakdown
 			};
 		} catch (error) {
+			if (error instanceof ResponseSizeLimitError) {
+				console.warn("[api-store] orchestrator /execute response size limit exceeded", {
+					apiName,
+					applicationId,
+					limitBytes: error.limitBytes
+				});
+				return {
+					success: false,
+					error: {
+						code: "SYSTEM_ERROR",
+						message: error.message
+					},
+					timingBreakdown: buildTimingBreakdown()
+				};
+			}
 			if (error instanceof Error && error.name === "AbortError") return {
 				success: false,
 				error: {
@@ -3360,6 +3448,7 @@ var ComponentRegistry = class {
 };
 //#endregion
 //#region src/lib/internal-details/lib/root-store.ts
+const ORCHESTRATOR_EXECUTE_RESPONSE_SIZE_LIMIT_FLAG = "orchestrator.execute.response-size-limit.bytes";
 /**
 * Default user object for when no user info is available.
 */
@@ -3395,6 +3484,7 @@ var RootStore = class {
 	* Passed to the library via the ui.data-plane-gateway.enabled bootstrap flag.
 	*/
 	dataPlaneGatewayEnabled = false;
+	orchestratorExecuteResponseSizeLimitBytes;
 	/** Selected integration profile for orchestrator API calls */
 	profile;
 	/** Current git branch name for editor-mode API execution */
@@ -3441,6 +3531,8 @@ var RootStore = class {
 			setSdkApiEnabled: action,
 			dataPlaneGatewayEnabled: observable,
 			setDataPlaneGatewayEnabled: action,
+			orchestratorExecuteResponseSizeLimitBytes: observable,
+			setOrchestratorExecuteResponseSizeLimitBytes: action,
 			profile: observable.ref,
 			setProfile: action,
 			branchName: observable,
@@ -3477,6 +3569,10 @@ var RootStore = class {
 	setDataPlaneGatewayEnabled(enabled) {
 		this.dataPlaneGatewayEnabled = enabled;
 	}
+	setOrchestratorExecuteResponseSizeLimitBytes(value) {
+		const parsedValue = typeof value === "number" ? value : typeof value === "string" && value.trim() !== "" ? Number(value.trim()) : void 0;
+		this.orchestratorExecuteResponseSizeLimitBytes = typeof parsedValue === "number" && Number.isFinite(parsedValue) && parsedValue > 0 ? Math.floor(parsedValue) : void 0;
+	}
 	setProfile(profile) {
 		this.profile = profile;
 	}
@@ -4186,6 +4282,6 @@ const useJSXContext = () => {
 	return React.useContext(JSXContext);
 };
 //#endregion
-export { useSuperblocksProfiles as A, sendMessageImmediately as B, rejectById as C, useSuperblocksContext as D, getAppMode as E, colors as F, Section as G, createManagedPropsList as H, editorBridge as I, createPropertiesPanelDefinition as K, getParentOrigin as L, embedStore as M, generateId as N, useSuperblocksDataTags as O, sendNotification as P, iframeMessageHandler as R, addNewPromise as S, SuperblocksContextProvider as T, Prop as U, isEditMode as V, PropsCategory as W, root_store_default as _, FixWithClarkButton as a, getContextFromTraceHeaders as b, ErrorContent as c, ErrorMessage as d, ErrorStack as f, StyledClarkIcon as g, SecondaryButton as h, getWidgetRectAnchorName as i, useSuperblocksUser as j, useSuperblocksGroups as k, ErrorDetails as l, ErrorTitle as m, useJSXContext as n, ActionsContainer as o, ErrorSummary as p, getEditStore as q, getWidgetAnchorName as r, ErrorContainer as s, makeWrappedComponent as t, ErrorIconContainer as u, startEditorSync as v, resolveById as w, tracker as x, createIframeSpan as y, isEmbeddedBySuperblocksFirstParty as z };
+export { useSuperblocksGroups as A, isEmbeddedBySuperblocksFirstParty as B, addNewPromise as C, getAppMode as D, SuperblocksContextProvider as E, sendNotification as F, PropsCategory as G, isEditMode as H, colors as I, getEditStore as J, Section as K, editorBridge as L, useSuperblocksUser as M, embedStore as N, useSuperblocksContext as O, generateId as P, getParentOrigin as R, tracker as S, resolveById as T, createManagedPropsList as U, sendMessageImmediately as V, Prop as W, ORCHESTRATOR_EXECUTE_RESPONSE_SIZE_LIMIT_FLAG as _, FixWithClarkButton as a, createIframeSpan as b, ErrorContent as c, ErrorMessage as d, ErrorStack as f, StyledClarkIcon as g, SecondaryButton as h, getWidgetRectAnchorName as i, useSuperblocksProfiles as j, useSuperblocksDataTags as k, ErrorDetails as l, ErrorTitle as m, useJSXContext as n, ActionsContainer as o, ErrorSummary as p, createPropertiesPanelDefinition as q, getWidgetAnchorName as r, ErrorContainer as s, makeWrappedComponent as t, ErrorIconContainer as u, root_store_default as v, rejectById as w, getContextFromTraceHeaders as x, startEditorSync as y, iframeMessageHandler as z };
 
-//# sourceMappingURL=jsx-wrapper-BpJeKbJA.js.map
+//# sourceMappingURL=jsx-wrapper-wJs8wFGh.js.map