@tappify/extension-sdk 2.1.0-beta.2 → 2.1.0

package/dist/vite.d.cts

@@ -30,12 +30,6 @@ declare const SCOPES: readonly [{
     readonly description: "Review text, ratings and replies";
     readonly requiresSecurityReview: false;
     readonly requiresJustification: false;
-}, {
-    readonly key: "review.threads:read";
-    readonly label: "Read Review threads";
-    readonly description: "Review threads, comments, screenshot descriptors, build context and safe device context";
-    readonly requiresSecurityReview: false;
-    readonly requiresJustification: false;
 }, {
     readonly key: "crashes:read";
     readonly label: "Read crash data";
@@ -99,7 +93,7 @@ declare const SCOPES: readonly [{
 }, {
     readonly key: "work:sync";
     readonly label: "Sync work items";
-    readonly description: "Sync comments and status on created work items";
+    readonly description: "Two-way comments and status on created work items";
     readonly requiresSecurityReview: false;
     readonly requiresJustification: true;
 }, {
@@ -263,7 +257,6 @@ interface CredentialField {
     options?: string[];
     help?: string;
 }
-type OAuthTokenRequestEncoding = 'form' | 'json';
 interface ConnectorAuth {
     method: 'none' | 'api_key' | 'oauth';
     fields?: CredentialField[];
@@ -271,8 +264,6 @@ interface ConnectorAuth {
         authorizationUrl: string;
         tokenUrl: string;
         scopes: string[];
-        /** The token request body encoding. When omitted, uses form encoding. */
-        tokenRequestEncoding?: OAuthTokenRequestEncoding;
     };
 }
 interface DimensionDeclaration {
@@ -354,53 +345,26 @@ interface AiContribution {
     prompts?: PromptDeclaration[];
     context?: ContextDeclaration[];
 }
-type WorkDirection = 'none' | 'to_provider' | 'from_provider' | 'two-way';
-type WorkAuth = {
-    method: 'oauth';
-    provider: string;
-    scopes: string[];
-} | {
-    method: 'api_key';
-    fields: CredentialField[];
-};
 interface WorkContribution {
     kind: 'tracker' | 'docs' | 'chat';
-    creates: ('issue' | 'page' | 'message')[];
-    identity: 'install' | 'user';
-    comments: 'two-way' | 'none' | {
-        direction: WorkDirection;
-        supportsEdits: false;
-        supportsDeletes: false;
-    };
-    status?: {
-        direction: WorkDirection;
-        webhook?: string;
-        map?: Record<'open' | 'in_progress' | 'done', string[]>;
-    };
-    attachments: ('image' | 'link')[];
-    auth: WorkAuth;
-    /** @deprecated resolved dynamically by describe_container */
-    container?: {
+    container: {
         label: string;
         list: string;
     };
-    /** @deprecated resolved dynamically by describe_container */
-    fields?: {
+    creates: ('issue' | 'page' | 'message')[];
+    fields: {
         priority?: string[];
         labels?: boolean;
         assignee?: boolean;
         required: string[];
     };
-}
-/** @deprecated Migrate to WorkContribution during the SDK v2 compatibility window. */
-interface LegacyWorkContribution extends Omit<WorkContribution, 'auth' | 'container' | 'fields' | 'comments' | 'status'> {
-    container: NonNullable<WorkContribution['container']>;
-    fields: NonNullable<WorkContribution['fields']>;
+    attachments: ('image' | 'link')[];
     comments: 'two-way' | 'none';
     status?: {
         webhook: string;
         map: Record<'open' | 'in_progress' | 'done', string[]>;
     };
+    identity: 'user' | 'install';
 }
 interface ExtensionListing {
     longDescription?: string;
@@ -433,7 +397,7 @@ interface ExtensionManifest {
         connector?: ConnectorContribution;
         webhooks?: WebhookContribution[];
         ai?: AiContribution;
-        work?: WorkContribution | LegacyWorkContribution;
+        work?: WorkContribution;
     };
     server?: {
         baseUrl: string;

package/dist/vite.d.ts

@@ -30,12 +30,6 @@ declare const SCOPES: readonly [{
     readonly description: "Review text, ratings and replies";
     readonly requiresSecurityReview: false;
     readonly requiresJustification: false;
-}, {
-    readonly key: "review.threads:read";
-    readonly label: "Read Review threads";
-    readonly description: "Review threads, comments, screenshot descriptors, build context and safe device context";
-    readonly requiresSecurityReview: false;
-    readonly requiresJustification: false;
 }, {
     readonly key: "crashes:read";
     readonly label: "Read crash data";
@@ -99,7 +93,7 @@ declare const SCOPES: readonly [{
 }, {
     readonly key: "work:sync";
     readonly label: "Sync work items";
-    readonly description: "Sync comments and status on created work items";
+    readonly description: "Two-way comments and status on created work items";
     readonly requiresSecurityReview: false;
     readonly requiresJustification: true;
 }, {
@@ -263,7 +257,6 @@ interface CredentialField {
     options?: string[];
     help?: string;
 }
-type OAuthTokenRequestEncoding = 'form' | 'json';
 interface ConnectorAuth {
     method: 'none' | 'api_key' | 'oauth';
     fields?: CredentialField[];
@@ -271,8 +264,6 @@ interface ConnectorAuth {
         authorizationUrl: string;
         tokenUrl: string;
         scopes: string[];
-        /** The token request body encoding. When omitted, uses form encoding. */
-        tokenRequestEncoding?: OAuthTokenRequestEncoding;
     };
 }
 interface DimensionDeclaration {
@@ -354,53 +345,26 @@ interface AiContribution {
     prompts?: PromptDeclaration[];
     context?: ContextDeclaration[];
 }
-type WorkDirection = 'none' | 'to_provider' | 'from_provider' | 'two-way';
-type WorkAuth = {
-    method: 'oauth';
-    provider: string;
-    scopes: string[];
-} | {
-    method: 'api_key';
-    fields: CredentialField[];
-};
 interface WorkContribution {
     kind: 'tracker' | 'docs' | 'chat';
-    creates: ('issue' | 'page' | 'message')[];
-    identity: 'install' | 'user';
-    comments: 'two-way' | 'none' | {
-        direction: WorkDirection;
-        supportsEdits: false;
-        supportsDeletes: false;
-    };
-    status?: {
-        direction: WorkDirection;
-        webhook?: string;
-        map?: Record<'open' | 'in_progress' | 'done', string[]>;
-    };
-    attachments: ('image' | 'link')[];
-    auth: WorkAuth;
-    /** @deprecated resolved dynamically by describe_container */
-    container?: {
+    container: {
         label: string;
         list: string;
     };
-    /** @deprecated resolved dynamically by describe_container */
-    fields?: {
+    creates: ('issue' | 'page' | 'message')[];
+    fields: {
         priority?: string[];
         labels?: boolean;
         assignee?: boolean;
         required: string[];
     };
-}
-/** @deprecated Migrate to WorkContribution during the SDK v2 compatibility window. */
-interface LegacyWorkContribution extends Omit<WorkContribution, 'auth' | 'container' | 'fields' | 'comments' | 'status'> {
-    container: NonNullable<WorkContribution['container']>;
-    fields: NonNullable<WorkContribution['fields']>;
+    attachments: ('image' | 'link')[];
     comments: 'two-way' | 'none';
     status?: {
         webhook: string;
         map: Record<'open' | 'in_progress' | 'done', string[]>;
     };
+    identity: 'user' | 'install';
 }
 interface ExtensionListing {
     longDescription?: string;
@@ -433,7 +397,7 @@ interface ExtensionManifest {
         connector?: ConnectorContribution;
         webhooks?: WebhookContribution[];
         ai?: AiContribution;
-        work?: WorkContribution | LegacyWorkContribution;
+        work?: WorkContribution;
     };
     server?: {
         baseUrl: string;

package/dist/vite.mjs

@@ -1,7 +1,7 @@
 // src/vite/plugin.ts
 import { federation } from "@module-federation/vite";
 import { readFileSync as readFileSync2 } from "fs";
-import { resolve as resolve3, sep as sep2 } from "path";
+import { resolve as resolve2, sep as sep2 } from "path";
 
 // src/client/errors.ts
 var TAP_ERROR_CODES = [
@@ -143,13 +143,6 @@ var SCOPES = [
     requiresSecurityReview: false,
     requiresJustification: false
   },
-  {
-    key: "review.threads:read",
-    label: "Read Review threads",
-    description: "Review threads, comments, screenshot descriptors, build context and safe device context",
-    requiresSecurityReview: false,
-    requiresJustification: false
-  },
   {
     key: "crashes:read",
     label: "Read crash data",
@@ -223,7 +216,7 @@ var SCOPES = [
   {
     key: "work:sync",
     label: "Sync work items",
-    description: "Sync comments and status on created work items",
+    description: "Two-way comments and status on created work items",
     requiresSecurityReview: false,
     requiresJustification: true
   },
@@ -527,10 +520,7 @@ var connectorContribution = z.object({
       ),
       scopes: z.array(z.string()).describe(
         "The scopes asked of the outside service. These are that service's scopes, not Tappify's."
-      ),
-      tokenRequestEncoding: z.enum(["form", "json"]).describe(
-        "The request body encoding for authorization-code and refresh token exchanges. When omitted, uses form encoding (application/x-www-form-urlencoded); json uses application/json."
-      ).optional()
+      )
     }).strict().describe('The endpoints, for `method: "oauth"`.').optional()
   }).strict().describe("How owners authenticate this connector.").optional(),
   sync: z.enum(["5m", "15m", "1h", "6h", "24h"]).describe("How often Tappify asks your server to sync.").optional(),
@@ -674,7 +664,7 @@ var aiContribution = z.object({
   ).optional()
 }).strict();
 var statusNames = (stage) => z.array(z.string()).describe(`Your own status names that mean ${stage}.`);
-var legacyWorkContribution = z.object({
+var workContribution = z.object({
   kind: z.enum(["tracker", "docs", "chat"]).describe("What kind of destination this is."),
   container: z.object({
     label: z.string().min(1).max(60).describe(
@@ -709,55 +699,6 @@ var legacyWorkContribution = z.object({
     "Whether items are created as the owner who asked (`user`) or as the install itself."
   )
 }).strict();
-var workDirection = z.enum([
-  "none",
-  "to_provider",
-  "from_provider",
-  "two-way"
-]);
-var workAuth = z.discriminatedUnion("method", [
-  z.object({
-    method: z.literal("oauth"),
-    provider: z.string().min(1).describe("The OAuth provider identifier."),
-    scopes: z.array(z.string()).describe("The scopes requested from the provider.")
-  }).strict(),
-  z.object({
-    method: z.literal("api_key"),
-    fields: z.array(credentialField).max(20)
-  }).strict()
-]);
-var currentWorkContribution = legacyWorkContribution.extend({
-  container: legacyWorkContribution.shape.container.describe(
-    "Deprecated. Resolve containers dynamically with describe_container."
-  ).optional(),
-  fields: legacyWorkContribution.shape.fields.describe("Deprecated. Resolve fields dynamically with describe_container.").optional(),
-  comments: z.union([
-    z.enum(["two-way", "none"]).describe("Deprecated. Declare a comments capability object."),
-    z.object({
-      direction: workDirection,
-      supportsEdits: z.literal(false),
-      supportsDeletes: z.literal(false)
-    }).strict()
-  ]),
-  status: z.object({
-    direction: workDirection,
-    webhook: z.string().regex(DOMAIN_EVENT).optional(),
-    map: z.object({
-      open: statusNames("not started"),
-      in_progress: statusNames("under way"),
-      done: statusNames("finished")
-    }).strict().describe(
-      "Deprecated. Resolve statuses dynamically with describe_container."
-    ).optional()
-  }).strict().optional(),
-  auth: workAuth.describe("How owners authenticate the work destination.")
-});
-var workContribution = z.union([
-  currentWorkContribution,
-  legacyWorkContribution.describe(
-    "Deprecated SDK v2 work declaration. Migrate to work capabilities and auth."
-  )
-]);
 var listing = z.object({
   longDescription: z.string().min(1).max(5e3).describe("The body of your listing page, in markdown.").optional(),
   screenshots: z.array(z.string().min(1)).min(1, "A listing shows 1 to 6 screenshots.").max(6, "A listing shows 1 to 6 screenshots.").describe(
@@ -849,7 +790,7 @@ var manifestObject = z.object({
       "What this extension offers the assistant: tools, mentions, actions, knowledge, skills, prompts and context providers."
     ).optional(),
     work: workContribution.describe(
-      "The work destination this extension creates issues, pages or messages in. Needs `review.threads:read` and `work:create`; active comment or status sync also needs `work:sync`."
+      "The work destination this extension creates issues, pages or messages in. Needs the `work:create` and `work:sync` scopes."
     ).optional()
   }).strict().describe(
     "What this extension adds to the host. At most 20 UI contributions in total, and a page, tab, widget, row action, marker or settings panel needs the `ui:render` scope."
@@ -1070,36 +1011,16 @@ var manifestSchema = manifestObject.superRefine((manifest, ctx) => {
     }
   }
   if (contributes.work) {
-    const work = contributes.work;
-    const legacy = isLegacyWork(work);
-    if (!legacy || !granted.has("reviews:read")) {
-      requireScope(
-        "review.threads:read",
-        ["scopes"],
-        "the work destination reads Review threads."
-      );
-    }
     requireScope(
       "work:create",
       ["scopes"],
       "the work destination creates items."
     );
-    const comments = typeof work.comments === "string" ? work.comments : work.comments.direction;
-    const status = work.status ? "direction" in work.status ? work.status.direction : "from_provider" : "none";
-    if (comments !== "none" || status !== "none") {
-      requireScope(
-        "work:sync",
-        ["scopes"],
-        "the work destination syncs comments or status."
-      );
-    }
-    if (work.identity === "user") {
-      ctx.addIssue({
-        code: "custom",
-        path: ["contributes", "work", "identity"],
-        message: 'Per-user work identity is not supported. Set identity to "install".'
-      });
-    }
+    requireScope(
+      "work:sync",
+      ["scopes"],
+      "the work destination syncs comments and status."
+    );
   }
   const needsServer = contributes.connector !== void 0 || (contributes.webhooks?.length ?? 0) > 0 || ai !== void 0 || contributes.work !== void 0 || manifest.server?.procedures !== void 0;
   if (needsServer && !manifest.server?.baseUrl) {
@@ -1174,14 +1095,8 @@ function validateManifest(value) {
   }));
   return { ok: false, issues };
 }
-function isLegacyWork(work) {
-  return !("auth" in work);
-}
 
 // src/vite/preview/plugin.ts
-import { randomUUID } from "crypto";
-import { isAbsolute, relative, resolve } from "path";
-import { normalizePath } from "vite";
 var PREVIEW_CLIENT_ID = "virtual:tappify-preview/client";
 var PREVIEW_MANIFEST_ID = "virtual:tappify-preview/manifest";
 var PREVIEW_REMOTE_ID = "virtual:tappify-preview/remote";
@@ -1232,13 +1147,11 @@ function previewDocument(manifest, remote) {
   }
   if (!remote.ok)
     return messageDocument("Preview remote was refused", [remote.message]);
-  const icon = manifest.manifest.icon.replace(/^\.\//, "");
   return `<!doctype html>
 <html lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <link rel="icon" href="/${escapeHtml(icon)}" />
     <title>${escapeHtml(manifest.manifest.name)} \xB7 Tappify local preview</title>
   </head>
   <body>
@@ -1248,37 +1161,11 @@ function previewDocument(manifest, remote) {
 </html>`;
 }
 var moduleSource = (value) => `export default ${JSON.stringify(value)};`;
-function optimizedReactUrl(root, cacheDir, cacheGeneration) {
-  const depsCacheDir = normalizePath(resolve(cacheDir, "deps"));
-  const relativeCacheDir = normalizePath(relative(root, depsCacheDir));
-  const prefix = isAbsolute(relativeCacheDir) || relativeCacheDir.startsWith("../") ? `/@fs/${depsCacheDir.replace(/^\/+/, "")}` : `/${relativeCacheDir}`;
-  return `${prefix}/react.js?tappify=${encodeURIComponent(cacheGeneration)}`;
-}
 function createPreviewPlugins(options) {
   const remote = previewRemote(options.remote, options.port);
-  const cacheGeneration = randomUUID();
-  let reactUrl = optimizedReactUrl(
-    resolve(options.manifestFile, ".."),
-    resolve(options.manifestFile, "../node_modules/.vite"),
-    cacheGeneration
-  );
   const preview = {
     name: "tappify:preview",
     apply: "serve",
-    config() {
-      return {
-        optimizeDeps: {
-          exclude: ["@tappify/extension-sdk/vite/preview/bootstrap"]
-        }
-      };
-    },
-    configResolved(config) {
-      reactUrl = optimizedReactUrl(
-        config.root,
-        config.cacheDir,
-        cacheGeneration
-      );
-    },
     resolveId(id) {
       if (VIRTUAL_IDS.has(id)) return `\0${id}`;
       if (id.startsWith("\0") && VIRTUAL_IDS.has(id.slice(1))) return id;
@@ -1291,11 +1178,11 @@ function createPreviewPlugins(options) {
       if (id === `\0${PREVIEW_REMOTE_ID}`) return moduleSource(remote);
       if (id !== `\0${PREVIEW_CLIENT_ID}`) return null;
       return [
-        `import { startLocalPreview } from '@tappify/extension-sdk/vite/preview/bootstrap';`,
+        `import { mountLocalPreview } from '@tappify/extension-sdk/vite/preview';`,
         `import manifest from '${PREVIEW_MANIFEST_ID}';`,
         `import remote from '${PREVIEW_REMOTE_ID}';`,
         `const mount = document.getElementById('tappify-preview-root');`,
-        `if (mount && manifest.ok && remote.ok) void startLocalPreview({ manifest: manifest.manifest, remote: remote.url, reactUrl: ${JSON.stringify(reactUrl)}, mount });`
+        `if (mount && manifest.ok && remote.ok) mountLocalPreview({ manifest: manifest.manifest, remote: remote.url, mount });`
       ].join("\n");
     },
     configureServer(server) {
@@ -1343,7 +1230,7 @@ function createPreviewPlugins(options) {
 
 // src/vite/styles.ts
 import { existsSync, readFileSync } from "fs";
-import { dirname, extname, resolve as resolve2, sep } from "path";
+import { dirname, extname, resolve, sep } from "path";
 var IMPORT_PATTERN = /(?:^|\n)\s*(?:import|export)(?:[^'"]*?from\s*)?\s*['"]([^'"]+)['"]/g;
 var IMPORT_SPECIFIER_PATTERN = /((?:^|\n)\s*(?:import|export)(?:[^'"]*?from\s*)?\s*['"])([^'"]+)(['"])/g;
 var BLOCK_COMMENT_PATTERN = /\/\*[\s\S]*?\*\//g;
@@ -1356,14 +1243,14 @@ function isPlainStylesheet(specifier) {
   return specifier.endsWith(".css") && !specifier.endsWith(".module.css");
 }
 function resolveSource(specifier, importer) {
-  const base = resolve2(dirname(importer), specifier);
+  const base = resolve(dirname(importer), specifier);
   if (extname(base) !== "" && existsSync(base)) return base;
   for (const extension of SOURCE_EXTENSIONS) {
     const candidate = `${base}${extension}`;
     if (existsSync(candidate)) return candidate;
   }
   for (const extension of SOURCE_EXTENSIONS) {
-    const candidate = resolve2(base, `index${extension}`);
+    const candidate = resolve(base, `index${extension}`);
     if (existsSync(candidate)) return candidate;
   }
   return null;
@@ -1385,7 +1272,7 @@ function collectEntryStyles(entryAbsolutePath, root) {
     while (match !== null) {
       const specifier = match[1];
       if (specifier.endsWith(".css")) {
-        const value = specifier.startsWith(".") ? resolve2(dirname(file), specifier) : specifier;
+        const value = specifier.startsWith(".") ? resolve(dirname(file), specifier) : specifier;
         if (!seenStyles.has(value)) {
           seenStyles.add(value);
           styles.push(value);
@@ -1418,7 +1305,7 @@ var DEFAULT_PORT = 5273;
 var SOURCE_FILE = /\.(?:[cm]?[jt]sx?)$/;
 var federationOptionsByPlugins = /* @__PURE__ */ new WeakMap();
 function manifestFile(options) {
-  return options.manifestPath ?? resolve3(options.root ?? process.cwd(), "tappify.extension.json");
+  return options.manifestPath ?? resolve2(options.root ?? process.cwd(), "tappify.extension.json");
 }
 function loadManifest(options) {
   let raw;
@@ -1458,7 +1345,7 @@ function tappifyExtension(options = {}) {
   const exposes = {};
   for (const contribution of contributions) {
     const key = contribution.expose.slice("./".length);
-    entryByKey.set(key, resolve3(root, contribution.entry));
+    entryByKey.set(key, resolve2(root, contribution.entry));
     exposes[contribution.expose] = `${VIRTUAL_PREFIX}${key}`;
   }
   const singleton = { singleton: true, requiredVersion: false };