@superblocksteam/vite-plugin-file-sync 1.99.99-next.3 → 2.0.0-SNAPSHOT.2143e2e95d0107ab

package/dist/ai-service/util/llm-config-utils.js

@@ -0,0 +1,140 @@
+import { buildThinkingProviderOptions, isExtendedThinkingModel, upstreamStallTimeoutMsFor, usesAdaptiveEffort, } from "@superblocksteam/clark";
+import { MAX_OUTPUT_TOKENS, MODEL_CAPABILITIES, } from "@superblocksteam/library-shared/types";
+import { getLogger } from "../../util/logger.js";
+import { resolveContextOptionsV2 } from "../llm/context-v2/config.js";
+import { ContextManagementConfig } from "../llm/context-v2/context-management.js";
+export { buildThinkingProviderOptions, isExtendedThinkingModel, upstreamStallTimeoutMsFor, };
+/** Thinking budget applied when the config does not specify one. */
+export const DEFAULT_THINKING_BUDGET_TOKENS = 5000;
+/**
+ * Processes LLM config and returns the configuration options for AI SDK calls.
+ *
+ * Builds provider options including thinking configuration, server-side context
+ * management (clear_tool_uses + compact edits), and request-level automatic
+ * prompt caching via `cacheControl`. Bedrock server-side context management
+ * omits that request-level cache marker because Bedrock does not support
+ * Anthropic's automatic caching shape; ContextV2 block-level cache breakpoints
+ * remain enabled separately.
+ *
+ * Protected tool names are added later in `LLMClient.streamText` after the
+ * context is loaded and protected tools can be read from history.
+ *
+ * @param llmConfig - The LLM provider configuration
+ * @param defaultBudgetTokens - Default thinking budget if not specified (default: 5000)
+ * @param logContext - Optional context string for logging
+ * @param contextManagementOptions - Options for server-side context management edits
+ */
+export function processLLMConfig(llmConfig, defaultBudgetTokens = DEFAULT_THINKING_BUDGET_TOKENS, logContext, contextManagementOptions) {
+    const logger = getLogger();
+    const thinkingEnabled = llmConfig?.thinkingEnabled ?? true;
+    let thinkingBudgetTokens = llmConfig?.thinkingBudgetTokens
+        ? parseInt(llmConfig.thinkingBudgetTokens)
+        : defaultBudgetTokens;
+    const interleavedThinking = llmConfig?.interleavedThinking ?? true;
+    const maxOutputTokens = MAX_OUTPUT_TOKENS;
+    const coreModel = llmConfig?.coreModel;
+    // Budget validation is only meaningful for the legacy enabled+budgetTokens
+    // path. Adaptive-effort models ignore budgetTokens entirely.
+    if (thinkingEnabled && !usesAdaptiveEffort(coreModel)) {
+        const modelKey = coreModel ?? "claude-sonnet-4-5";
+        const modelCaps = MODEL_CAPABILITIES[modelKey];
+        const modelMaxOutput = modelCaps?.maxOutputTokens ?? 64_000;
+        const total = maxOutputTokens + thinkingBudgetTokens;
+        if (total > modelMaxOutput) {
+            const adjustedThinkingBudget = modelMaxOutput - maxOutputTokens;
+            logger.warn(`maxOutputTokens (${maxOutputTokens}) + thinkingBudget (${thinkingBudgetTokens}) = ${total} ` +
+                `exceeds model max (${modelMaxOutput}). Reducing thinkingBudget to ${adjustedThinkingBudget}.`);
+            thinkingBudgetTokens = Math.max(0, adjustedThinkingBudget);
+        }
+    }
+    if (logContext) {
+        getLogger().info(`${logContext} LLM Provider Config: provider=${llmConfig?.provider || "bedrock (default)"}, ` +
+            `coreModel=${coreModel ?? "unset"}, thinking=${thinkingEnabled}, ` +
+            `budget=${thinkingBudgetTokens}, interleaved=${interleavedThinking}`);
+    }
+    const thinkingOptions = buildThinkingProviderOptions(coreModel, {
+        thinkingEnabled,
+        thinkingBudgetTokens,
+        interleavedThinking,
+    });
+    // Context management (compact + clear_tool_uses) is only built when the
+    // caller explicitly opts into server-side context management. One-shot
+    // operations (explain, summarize) pass no options and skip this entirely.
+    //
+    // Bedrock Converse options only include thinking config, since the
+    // Converse API does not support the compact beta.
+    let contextManagement;
+    if (contextManagementOptions?.type === "server") {
+        contextManagement = ContextManagementConfig.build({
+            excludeTools: contextManagementOptions.excludeTools,
+            thresholds: contextManagementOptions.thresholds ??
+                llmConfig?.serverContextManagement,
+        });
+    }
+    const shouldDisableAutomaticPromptCache = contextManagement !== undefined && llmConfig?.provider === "bedrock";
+    const providerOptions = {
+        anthropic: {
+            ...(thinkingOptions.anthropic ?? {}),
+            ...(contextManagement && { contextManagement }),
+            ...(!shouldDisableAutomaticPromptCache && {
+                cacheControl: { type: "ephemeral" },
+            }),
+        },
+        bedrock: (thinkingOptions.bedrock ?? {}),
+    };
+    return {
+        thinkingEnabled,
+        thinkingBudgetTokens,
+        interleavedThinking,
+        maxOutputTokens,
+        providerOptions,
+        headers: thinkingOptions.headers,
+    };
+}
+/**
+ * Snapshot the effective model settings for a request so GAU cost analysis can
+ * tell a config change apart from a change in user behavior.
+ *
+ * Reports what the request is configured to send, not what the model does with
+ * it. A model that ignores its thinking budget then shows up as a "budgeted"
+ * mode beside zero reasoning tokens, which is the discrepancy worth surfacing
+ * rather than one to bury behind a capability table.
+ *
+ * Lives beside {@link processLLMConfig} because it mirrors that function's
+ * defaulting and {@link selectContextManagementStrategy}'s opt-in polarity;
+ * keeping them adjacent makes any drift visible in one file.
+ */
+export function buildModelConfigAttributes(llmConfig) {
+    const context = resolveContextOptionsV2(llmConfig?.contextOptionsV2);
+    return {
+        context_limit: context.contextLimit,
+        max_output_tokens: context.maxOutputTokens,
+        context_buffer_tokens: context.contextBufferTokens,
+        // Only an explicit `true` opts in to server-side compaction; `false`,
+        // `undefined`, and a missing flag payload all stay on the client path.
+        context_management: llmConfig?.serverContextManagement?.enabled === true
+            ? "server"
+            : "client",
+        ...buildThinkingAttributes(llmConfig),
+    };
+}
+function buildThinkingAttributes(llmConfig) {
+    // Adaptive-effort models take an effort level instead of a budget, so a
+    // budget here would describe a knob the request never sent.
+    if (usesAdaptiveEffort(llmConfig?.coreModel)) {
+        return { thinking_mode: "adaptive" };
+    }
+    if (!(llmConfig?.thinkingEnabled ?? true)) {
+        return { thinking_mode: "off" };
+    }
+    const configured = llmConfig?.thinkingBudgetTokens;
+    const budget = configured
+        ? parseInt(configured)
+        : DEFAULT_THINKING_BUDGET_TOKENS;
+    // An unparseable flag value reaches the provider as NaN. Report no budget
+    // rather than a default the request never asked for.
+    return Number.isFinite(budget)
+        ? { thinking_mode: "budgeted", thinking_budget_tokens: budget }
+        : { thinking_mode: "budgeted" };
+}
+//# sourceMappingURL=llm-config-utils.js.map

package/dist/ai-service/util/llm-config-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-config-utils.js","sourceRoot":"","sources":["../../../src/ai-service/util/llm-config-utils.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,4BAA4B,EAC5B,uBAAuB,EACvB,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,uCAAuC,CAAC;AAM/C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAMlF,OAAO,EACL,4BAA4B,EAC5B,uBAAuB,EACvB,yBAAyB,GAC1B,CAAC;AAEF,oEAAoE;AACpE,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC;AAcnD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,gBAAgB,CAC9B,SAAwC,EACxC,sBAA8B,8BAA8B,EAC5D,UAAmB,EACnB,wBAAmD;IAEnD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,MAAM,eAAe,GAAG,SAAS,EAAE,eAAe,IAAI,IAAI,CAAC;IAC3D,IAAI,oBAAoB,GAAG,SAAS,EAAE,oBAAoB;QACxD,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,oBAAoB,CAAC;QAC1C,CAAC,CAAC,mBAAmB,CAAC;IACxB,MAAM,mBAAmB,GAAG,SAAS,EAAE,mBAAmB,IAAI,IAAI,CAAC;IACnE,MAAM,eAAe,GAAG,iBAAiB,CAAC;IAC1C,MAAM,SAAS,GAAG,SAAS,EAAE,SAAS,CAAC;IAEvC,2EAA2E;IAC3E,6DAA6D;IAC7D,IAAI,eAAe,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,SAAS,IAAI,mBAAmB,CAAC;QAClD,MAAM,SAAS,GACb,kBAAkB,CAAC,QAA2C,CAAC,CAAC;QAClE,MAAM,cAAc,GAAG,SAAS,EAAE,eAAe,IAAI,MAAM,CAAC;QAC5D,MAAM,KAAK,GAAG,eAAe,GAAG,oBAAoB,CAAC;QAErD,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;YAC3B,MAAM,sBAAsB,GAAG,cAAc,GAAG,eAAe,CAAC;YAChE,MAAM,CAAC,IAAI,CACT,oBAAoB,eAAe,uBAAuB,oBAAoB,OAAO,KAAK,GAAG;gBAC3F,sBAAsB,cAAc,iCAAiC,sBAAsB,GAAG,CACjG,CAAC;YACF,oBAAoB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,IAAI,UAAU,EAAE,CAAC;QACf,SAAS,EAAE,CAAC,IAAI,CACd,GAAG,UAAU,kCAAkC,SAAS,EAAE,QAAQ,IAAI,mBAAmB,IAAI;YAC3F,aAAa,SAAS,IAAI,OAAO,cAAc,eAAe,IAAI;YAClE,UAAU,oBAAoB,iBAAiB,mBAAmB,EAAE,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,4BAA4B,CAAC,SAAS,EAAE;QAC9D,eAAe;QACf,oBAAoB;QACpB,mBAAmB;KACpB,CAAC,CAAC;IAEH,wEAAwE;IACxE,uEAAuE;IACvE,0EAA0E;IAC1E,EAAE;IACF,mEAAmE;IACnE,kDAAkD;IAClD,IAAI,iBAAsD,CAAC;IAC3D,IAAI,wBAAwB,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAChD,iBAAiB,GAAG,uBAAuB,CAAC,KAAK,CAAC;YAChD,YAAY,EAAE,wBAAwB,CAAC,YAAY;YACnD,UAAU,EACR,wBAAwB,CAAC,UAAU;gBACnC,SAAS,EAAE,uBAAuB;SACrC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,iCAAiC,GACrC,iBAAiB,KAAK,SAAS,IAAI,SAAS,EAAE,QAAQ,KAAK,SAAS,CAAC;IAEvE,MAAM,eAAe,GAAmD;QACtE,SAAS,EAAE;YACT,GAAG,CAAC,eAAe,CAAC,SAAS,IAAI,EAAE,CAAC;YACpC,GAAG,CAAC,iBAAiB,IAAI,EAAE,iBAAiB,EAAE,CAAC;YAC/C,GAAG,CAAC,CAAC,iCAAiC,IAAI;gBACxC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;aACpC,CAAC;SACW;QACf,OAAO,EAAE,CAAC,eAAe,CAAC,OAAO,IAAI,EAAE,CAAe;KACvD,CAAC;IAEF,OAAO;QACL,eAAe;QACf,oBAAoB;QACpB,mBAAmB;QACnB,eAAe;QACf,eAAe;QACf,OAAO,EAAE,eAAe,CAAC,OAAO;KACjC,CAAC;AACJ,CAAC;AAaD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,0BAA0B,CACxC,SAAwC;IAExC,MAAM,OAAO,GAAG,uBAAuB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACrE,OAAO;QACL,aAAa,EAAE,OAAO,CAAC,YAAY;QACnC,iBAAiB,EAAE,OAAO,CAAC,eAAe;QAC1C,qBAAqB,EAAE,OAAO,CAAC,mBAAmB;QAClD,sEAAsE;QACtE,uEAAuE;QACvE,kBAAkB,EAChB,SAAS,EAAE,uBAAuB,EAAE,OAAO,KAAK,IAAI;YAClD,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,QAAQ;QACd,GAAG,uBAAuB,CAAC,SAAS,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,SAAwC;IAExC,wEAAwE;IACxE,4DAA4D;IAC5D,IAAI,kBAAkB,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,EAAE,eAAe,IAAI,IAAI,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IAClC,CAAC;IACD,MAAM,UAAU,GAAG,SAAS,EAAE,oBAAoB,CAAC;IACnD,MAAM,MAAM,GAAG,UAAU;QACvB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QACtB,CAAC,CAAC,8BAA8B,CAAC;IACnC,0EAA0E;IAC1E,qDAAqD;IACrD,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC5B,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,EAAE;QAC/D,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;AACpC,CAAC"}

package/dist/ai-service/util/mode-message.d.ts

@@ -0,0 +1,7 @@
+import { AiMode } from "@superblocksteam/library-shared/types";
+/**
+ * Builds the <current_mode> XML tag that tells Clark which mode it's in.
+ * Used in the initial user message and re-injected after phase 2 compaction.
+ */
+export declare function buildModeMessage(mode: AiMode, planApproved?: boolean): string;
+//# sourceMappingURL=mode-message.d.ts.map

package/dist/ai-service/util/mode-message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mode-message.d.ts","sourceRoot":"","sources":["../../../src/ai-service/util/mode-message.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,uCAAuC,CAAC;AAE/D;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,OAAO,GAAG,MAAM,CAU7E"}

package/dist/ai-service/util/mode-message.js

@@ -0,0 +1,15 @@
+import { AiMode } from "@superblocksteam/library-shared/types";
+/**
+ * Builds the <current_mode> XML tag that tells Clark which mode it's in.
+ * Used in the initial user message and re-injected after phase 2 compaction.
+ */
+export function buildModeMessage(mode, planApproved) {
+    let text = `You are currently in ${mode === AiMode.PLAN ? "Plan" : "Build"} mode.`;
+    if (mode === AiMode.PLAN && planApproved !== undefined) {
+        text += ` Plan approval status: ${planApproved
+            ? "User has approved your plan - you have access to all tools to execute it"
+            : "No plan approved - you can only use read-only tools"}.`;
+    }
+    return `<current_mode>${text}</current_mode>`;
+}
+//# sourceMappingURL=mode-message.js.map

package/dist/ai-service/util/mode-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mode-message.js","sourceRoot":"","sources":["../../../src/ai-service/util/mode-message.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,uCAAuC,CAAC;AAE/D;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,YAAsB;IACnE,IAAI,IAAI,GAAG,wBAAwB,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC;IACnF,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QACvD,IAAI,IAAI,0BACN,YAAY;YACV,CAAC,CAAC,0EAA0E;YAC5E,CAAC,CAAC,qDACN,GAAG,CAAC;IACN,CAAC;IACD,OAAO,iBAAiB,IAAI,iBAAiB,CAAC;AAChD,CAAC"}

package/dist/ai-service/util/parse-jwt.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Parses a JWT token and extracts orgId, orgName, userId, and userEmail if present.
+ * @param jwt - The JWT token string.
+ * @returns An object containing the extracted fields.
+ */
+export declare function parseJwt(jwt: string | undefined): {
+    orgId?: string;
+    orgName?: string;
+    userId?: string;
+    userEmail?: string;
+};
+//# sourceMappingURL=parse-jwt.d.ts.map

package/dist/ai-service/util/parse-jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-jwt.d.ts","sourceRoot":"","sources":["../../../src/ai-service/util/parse-jwt.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAoBA"}

package/dist/ai-service/util/parse-jwt.js

@@ -0,0 +1,30 @@
+/**
+ * Parses a JWT token and extracts orgId, orgName, userId, and userEmail if present.
+ * @param jwt - The JWT token string.
+ * @returns An object containing the extracted fields.
+ */
+export function parseJwt(jwt) {
+    const result = {};
+    if (!jwt) {
+        return result;
+    }
+    try {
+        const parts = jwt.split(".");
+        if (parts.length === 3 && parts[1]) {
+            const payload = JSON.parse(Buffer.from(parts[1], "base64").toString());
+            if (payload.org_id)
+                result.orgId = payload.org_id;
+            if (payload.org_name)
+                result.orgName = payload.org_name;
+            if (payload.user_id)
+                result.userId = payload.user_id;
+            if (payload.user_email)
+                result.userEmail = payload.user_email;
+        }
+    }
+    catch {
+        // Silently handle JWT parsing errors
+    }
+    return result;
+}
+//# sourceMappingURL=parse-jwt.js.map

package/dist/ai-service/util/parse-jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-jwt.js","sourceRoot":"","sources":["../../../src/ai-service/util/parse-jwt.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAuB;IAM9C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAEvE,IAAI,OAAO,CAAC,MAAM;gBAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;YAClD,IAAI,OAAO,CAAC,QAAQ;gBAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;YACxD,IAAI,OAAO,CAAC,OAAO;gBAAE,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YACrD,IAAI,OAAO,CAAC,UAAU;gBAAE,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;QAChE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/ai-service/util/peer-liveness.d.ts

@@ -0,0 +1,23 @@
+export declare const PEER_STALE_AFTER_MS: number;
+export interface PeerLivenessObservation {
+    readonly activityVersion: number;
+    readonly available: boolean;
+    readonly generation: number;
+}
+export declare class PeerConnectionLiveness {
+    readonly generation: number;
+    private activityVersion;
+    private closed;
+    private lastInboundAt;
+    private silentActivityVersion;
+    constructor(generation: number);
+    observe(): PeerLivenessObservation;
+    markInbound(): void;
+    close(): void;
+    reportTimeout(observation: PeerLivenessObservation): void;
+}
+export declare class PeerLiveness {
+    private static nextGeneration;
+    bindConnection(): PeerConnectionLiveness;
+}
+//# sourceMappingURL=peer-liveness.d.ts.map

package/dist/ai-service/util/peer-liveness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer-liveness.d.ts","sourceRoot":"","sources":["../../../src/ai-service/util/peer-liveness.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,QAAgB,CAAC;AAEjD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,qBAAa,sBAAsB;aAML,UAAU,EAAE,MAAM;IAL9C,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,aAAa,CAAc;IACnC,OAAO,CAAC,qBAAqB,CAAqB;gBAEtB,UAAU,EAAE,MAAM;IAE9C,OAAO,IAAI,uBAAuB;IAWlC,WAAW,IAAI,IAAI;IAKnB,KAAK,IAAI,IAAI;IAIb,aAAa,CAAC,WAAW,EAAE,uBAAuB,GAAG,IAAI;CAQ1D;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAC,cAAc,CAAK;IAElC,cAAc,IAAI,sBAAsB;CAKzC"}

package/dist/ai-service/util/peer-liveness.js

@@ -0,0 +1,42 @@
+export const PEER_STALE_AFTER_MS = 2 * 60 * 1000;
+export class PeerConnectionLiveness {
+    generation;
+    activityVersion = 0;
+    closed = false;
+    lastInboundAt = Date.now();
+    silentActivityVersion;
+    constructor(generation) {
+        this.generation = generation;
+    }
+    observe() {
+        return {
+            activityVersion: this.activityVersion,
+            available: !this.closed &&
+                this.silentActivityVersion !== this.activityVersion &&
+                Date.now() - this.lastInboundAt < PEER_STALE_AFTER_MS,
+            generation: this.generation,
+        };
+    }
+    markInbound() {
+        this.activityVersion += 1;
+        this.lastInboundAt = Date.now();
+    }
+    close() {
+        this.closed = true;
+    }
+    reportTimeout(observation) {
+        if (observation.generation === this.generation &&
+            observation.activityVersion === this.activityVersion) {
+            this.silentActivityVersion = this.activityVersion;
+        }
+    }
+}
+export class PeerLiveness {
+    static nextGeneration = 1;
+    bindConnection() {
+        const connection = new PeerConnectionLiveness(PeerLiveness.nextGeneration);
+        PeerLiveness.nextGeneration += 1;
+        return connection;
+    }
+}
+//# sourceMappingURL=peer-liveness.js.map

package/dist/ai-service/util/peer-liveness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer-liveness.js","sourceRoot":"","sources":["../../../src/ai-service/util/peer-liveness.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAQjD,MAAM,OAAO,sBAAsB;IAML;IALpB,eAAe,GAAG,CAAC,CAAC;IACpB,MAAM,GAAG,KAAK,CAAC;IACf,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,qBAAqB,CAAqB;IAElD,YAA4B,UAAkB;QAAlB,eAAU,GAAV,UAAU,CAAQ;IAAG,CAAC;IAElD,OAAO;QACL,OAAO;YACL,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,SAAS,EACP,CAAC,IAAI,CAAC,MAAM;gBACZ,IAAI,CAAC,qBAAqB,KAAK,IAAI,CAAC,eAAe;gBACnD,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,GAAG,mBAAmB;YACvD,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC;IAED,WAAW;QACT,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAClC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,aAAa,CAAC,WAAoC;QAChD,IACE,WAAW,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU;YAC1C,WAAW,CAAC,eAAe,KAAK,IAAI,CAAC,eAAe,EACpD,CAAC;YACD,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,eAAe,CAAC;QACpD,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,YAAY;IACf,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC;IAElC,cAAc;QACZ,MAAM,UAAU,GAAG,IAAI,sBAAsB,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;QAC3E,YAAY,CAAC,cAAc,IAAI,CAAC,CAAC;QACjC,OAAO,UAAU,CAAC;IACpB,CAAC"}

package/dist/ai-service/util/rpc-timeout.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Wraps a promise with a timeout. If the promise doesn't resolve within the
+ * specified timeout, it rejects with a TimeoutError.
+ *
+ * This is particularly useful for browser RPC calls which can hang indefinitely
+ * if the browser tab becomes unresponsive or disconnects.
+ */
+export declare class RpcTimeoutError extends Error {
+    readonly operationName: string;
+    readonly timeoutMs: number;
+    constructor(operationName: string, timeoutMs: number);
+}
+/**
+ * Default timeout for browser RPC calls (60 seconds).
+ * This is generous enough for slow operations but will catch hung calls.
+ */
+export declare const DEFAULT_RPC_TIMEOUT_MS = 60000;
+/**
+ * Timeout for the `aiGetIntegrations` browser RPC call (3 seconds).
+ *
+ * This is deliberately shorter than {@link DEFAULT_RPC_TIMEOUT_MS} because
+ * integration fetching sits on the critical path between the user pressing
+ * "Send" and the first visible Clark response.  This call only fetches
+ * integration headers from the editor — metadata is fetched asynchronously
+ * — so if the browser takes longer than a few seconds something is likely
+ * wrong.  Reduced from 15 s (APPS-4613) to 3 s (APPS-4651).
+ */
+export declare const FETCH_INTEGRATIONS_TIMEOUT_MS = 3000;
+/**
+ * Deadline for the `aiCaptureScreenshot` browser RPC call (60 seconds).
+ *
+ * A legitimate capture can take ~35s end to end (up to 15s editor readiness
+ * wait + 20s editor capture timeout; prod traces show successes at ~37s), so
+ * this must stay comfortably above that. It exists to catch the case where the
+ * editor's own timeout errors can never arrive because the websocket died
+ * mid-call (APPS-4719) — without it the await hangs until the session
+ * re-attaches.
+ */
+export declare const CAPTURE_SCREENSHOT_RPC_TIMEOUT_MS = 60000;
+/**
+ * Deadline for browser peer RPCs that invoke orchestrator-backed work (5 minutes).
+ *
+ * Used by `aiExecuteRequestToIntegration`, `aiTestIntegrationConnection`,
+ * `aiSaveIntegration`, and `aiDeleteIntegration`. Integration work can legitimately run longer than
+ * {@link DEFAULT_RPC_TIMEOUT_MS} while the orchestrator waits on external APIs.
+ * Match the editor peer socket's `noResponseTimeoutInSeconds` (5 minutes) so Clark
+ * does not false-timeout healthy long operations while still bounding hangs when
+ * the websocket dies mid-call (APPS-4829).
+ */
+export declare const ORCHESTRATOR_PEER_RPC_TIMEOUT_MS: number;
+/**
+ * Deadline for delivering the tool-permission dialog to the browser (10 seconds).
+ *
+ * This bounds the delivery ACK only — the user's approve/deny decision is not
+ * awaited here (it resumes the turn later via `aiRespondToToolPermission`).
+ * Healthy tabs ack in milliseconds; 10s tolerates GC pauses and vite-compile
+ * jank on busy tabs. Deliberately far below the 60s tool-execution timeout so
+ * an unresponsive tab surfaces as a delivery failure with an actionable
+ * message instead of a misleading tool timeout.
+ */
+export declare const PERMISSION_PROMPT_DELIVERY_TIMEOUT_MS = 10000;
+/**
+ * Grace period after a tool-permission delivery miss (60 seconds).
+ *
+ * This begins after the bounded delivery attempt returns, and it must run
+ * outside the tool execution clock so a parked prompt cannot consume that
+ * tool's 60-second budget.
+ */
+export declare const PERMISSION_PROMPT_REPLAY_GRACE_MS = 60000;
+/**
+ * Wraps a promise with a timeout.
+ *
+ * @param promise - The promise to wrap
+ * @param timeoutMs - Timeout in milliseconds (default: 30000)
+ * @param operationName - Name of the operation for error messages
+ * @returns The result of the promise if it resolves within the timeout
+ * @throws RpcTimeoutError if the promise doesn't resolve within the timeout
+ *
+ * @example
+ * ```ts
+ * const metadata = await withRpcTimeout(
+ *   fetchMetadata(),
+ *   30000,
+ *   "fetchMetadata",
+ * );
+ * ```
+ */
+export declare function withRpcTimeout<T>(promise: Promise<T>, timeoutMs?: number, operationName?: string): Promise<T>;
+//# sourceMappingURL=rpc-timeout.d.ts.map

package/dist/ai-service/util/rpc-timeout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-timeout.d.ts","sourceRoot":"","sources":["../../../src/ai-service/util/rpc-timeout.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,qBAAa,eAAgB,SAAQ,KAAK;aAEtB,aAAa,EAAE,MAAM;aACrB,SAAS,EAAE,MAAM;gBADjB,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM;CAOpC;AAED;;;GAGG;AACH,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAE7C;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B,OAAQ,CAAC;AAEnD;;;;;;;;;GASG;AACH,eAAO,MAAM,iCAAiC,QAAS,CAAC;AAExD;;;;;;;;;GASG;AACH,eAAO,MAAM,gCAAgC,QAAgB,CAAC;AAE9D;;;;;;;;;GASG;AACH,eAAO,MAAM,qCAAqC,QAAS,CAAC;AAE5D;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC,QAAS,CAAC;AAExD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,cAAc,CAAC,CAAC,EACpC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EACnB,SAAS,GAAE,MAA+B,EAC1C,aAAa,GAAE,MAAmB,GACjC,OAAO,CAAC,CAAC,CAAC,CAqBZ"}

package/dist/ai-service/util/rpc-timeout.js

@@ -0,0 +1,112 @@
+/**
+ * Wraps a promise with a timeout. If the promise doesn't resolve within the
+ * specified timeout, it rejects with a TimeoutError.
+ *
+ * This is particularly useful for browser RPC calls which can hang indefinitely
+ * if the browser tab becomes unresponsive or disconnects.
+ */
+import { getLogger } from "../../util/logger.js";
+export class RpcTimeoutError extends Error {
+    operationName;
+    timeoutMs;
+    constructor(operationName, timeoutMs) {
+        super(`${operationName} timed out after ${timeoutMs}ms - browser may be unresponsive`);
+        this.operationName = operationName;
+        this.timeoutMs = timeoutMs;
+        this.name = "RpcTimeoutError";
+    }
+}
+/**
+ * Default timeout for browser RPC calls (60 seconds).
+ * This is generous enough for slow operations but will catch hung calls.
+ */
+export const DEFAULT_RPC_TIMEOUT_MS = 60_000;
+/**
+ * Timeout for the `aiGetIntegrations` browser RPC call (3 seconds).
+ *
+ * This is deliberately shorter than {@link DEFAULT_RPC_TIMEOUT_MS} because
+ * integration fetching sits on the critical path between the user pressing
+ * "Send" and the first visible Clark response.  This call only fetches
+ * integration headers from the editor — metadata is fetched asynchronously
+ * — so if the browser takes longer than a few seconds something is likely
+ * wrong.  Reduced from 15 s (APPS-4613) to 3 s (APPS-4651).
+ */
+export const FETCH_INTEGRATIONS_TIMEOUT_MS = 3_000;
+/**
+ * Deadline for the `aiCaptureScreenshot` browser RPC call (60 seconds).
+ *
+ * A legitimate capture can take ~35s end to end (up to 15s editor readiness
+ * wait + 20s editor capture timeout; prod traces show successes at ~37s), so
+ * this must stay comfortably above that. It exists to catch the case where the
+ * editor's own timeout errors can never arrive because the websocket died
+ * mid-call (APPS-4719) — without it the await hangs until the session
+ * re-attaches.
+ */
+export const CAPTURE_SCREENSHOT_RPC_TIMEOUT_MS = 60_000;
+/**
+ * Deadline for browser peer RPCs that invoke orchestrator-backed work (5 minutes).
+ *
+ * Used by `aiExecuteRequestToIntegration`, `aiTestIntegrationConnection`,
+ * `aiSaveIntegration`, and `aiDeleteIntegration`. Integration work can legitimately run longer than
+ * {@link DEFAULT_RPC_TIMEOUT_MS} while the orchestrator waits on external APIs.
+ * Match the editor peer socket's `noResponseTimeoutInSeconds` (5 minutes) so Clark
+ * does not false-timeout healthy long operations while still bounding hangs when
+ * the websocket dies mid-call (APPS-4829).
+ */
+export const ORCHESTRATOR_PEER_RPC_TIMEOUT_MS = 5 * 60 * 1000;
+/**
+ * Deadline for delivering the tool-permission dialog to the browser (10 seconds).
+ *
+ * This bounds the delivery ACK only — the user's approve/deny decision is not
+ * awaited here (it resumes the turn later via `aiRespondToToolPermission`).
+ * Healthy tabs ack in milliseconds; 10s tolerates GC pauses and vite-compile
+ * jank on busy tabs. Deliberately far below the 60s tool-execution timeout so
+ * an unresponsive tab surfaces as a delivery failure with an actionable
+ * message instead of a misleading tool timeout.
+ */
+export const PERMISSION_PROMPT_DELIVERY_TIMEOUT_MS = 10_000;
+/**
+ * Grace period after a tool-permission delivery miss (60 seconds).
+ *
+ * This begins after the bounded delivery attempt returns, and it must run
+ * outside the tool execution clock so a parked prompt cannot consume that
+ * tool's 60-second budget.
+ */
+export const PERMISSION_PROMPT_REPLAY_GRACE_MS = 60_000;
+/**
+ * Wraps a promise with a timeout.
+ *
+ * @param promise - The promise to wrap
+ * @param timeoutMs - Timeout in milliseconds (default: 30000)
+ * @param operationName - Name of the operation for error messages
+ * @returns The result of the promise if it resolves within the timeout
+ * @throws RpcTimeoutError if the promise doesn't resolve within the timeout
+ *
+ * @example
+ * ```ts
+ * const metadata = await withRpcTimeout(
+ *   fetchMetadata(),
+ *   30000,
+ *   "fetchMetadata",
+ * );
+ * ```
+ */
+export async function withRpcTimeout(promise, timeoutMs = DEFAULT_RPC_TIMEOUT_MS, operationName = "RPC call") {
+    let timeoutId;
+    const timeoutPromise = new Promise((_, reject) => {
+        timeoutId = setTimeout(() => {
+            getLogger().warn(`[ai-service] RPC timed out: ${operationName} after ${timeoutMs}ms`, { operationName, timeoutMs });
+            reject(new RpcTimeoutError(operationName, timeoutMs));
+        }, timeoutMs);
+    });
+    try {
+        const result = await Promise.race([promise, timeoutPromise]);
+        clearTimeout(timeoutId);
+        return result;
+    }
+    catch (error) {
+        clearTimeout(timeoutId);
+        throw error;
+    }
+}
+//# sourceMappingURL=rpc-timeout.js.map

package/dist/ai-service/util/rpc-timeout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-timeout.js","sourceRoot":"","sources":["../../../src/ai-service/util/rpc-timeout.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAEtB;IACA;IAFlB,YACkB,aAAqB,EACrB,SAAiB;QAEjC,KAAK,CACH,GAAG,aAAa,oBAAoB,SAAS,kCAAkC,CAChF,CAAC;QALc,kBAAa,GAAb,aAAa,CAAQ;QACrB,cAAS,GAAT,SAAS,CAAQ;QAKjC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAE7C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,KAAK,CAAC;AAEnD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,MAAM,CAAC;AAExD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9D;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,MAAM,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,MAAM,CAAC;AAExD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAmB,EACnB,YAAoB,sBAAsB,EAC1C,gBAAwB,UAAU;IAElC,IAAI,SAAwC,CAAC;IAE7C,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QACtD,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,SAAS,EAAE,CAAC,IAAI,CACd,+BAA+B,aAAa,UAAU,SAAS,IAAI,EACnE,EAAE,aAAa,EAAE,SAAS,EAAE,CAC7B,CAAC;YACF,MAAM,CAAC,IAAI,eAAe,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;QACxD,CAAC,EAAE,SAAS,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;QAC7D,YAAY,CAAC,SAAU,CAAC,CAAC;QACzB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,YAAY,CAAC,SAAU,CAAC,CAAC;QACzB,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/ai-service/util/scoped-token-utils.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Gets a scoped token with apps:update scope
+ * Uses both a token cache (for reuse) and a promise cache (to prevent concurrent requests)
+ *
+ * @param applicationId - The application ID
+ * @param superblocksBaseUrl - The Superblocks base URL
+ * @param jwt - The JWT token for authentication
+ * @returns A promise that resolves to the scoped token
+ */
+export declare function getScopedToken({ applicationId, superblocksBaseUrl, jwt, }: {
+    applicationId: string;
+    superblocksBaseUrl: string;
+    jwt: string;
+}): Promise<string>;
+//# sourceMappingURL=scoped-token-utils.d.ts.map

package/dist/ai-service/util/scoped-token-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoped-token-utils.d.ts","sourceRoot":"","sources":["../../../src/ai-service/util/scoped-token-utils.ts"],"names":[],"mappings":"AA+EA;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,EACnC,aAAa,EACb,kBAAkB,EAClB,GAAG,GACJ,EAAE;IACD,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,GAAG,EAAE,MAAM,CAAC;CACb,GAAG,OAAO,CAAC,MAAM,CAAC,CA+ElB"}