callman-core 1.21.0 → 1.22.0

package/dist/ai/index.d.ts

@@ -0,0 +1,13 @@
+export * from "./types.js";
+export { extractJsonPayload } from "./jsonRepair.js";
+export { DIAGRAM_OUTPUT_SCHEMA, SCENARIO_OUTPUT_SCHEMA, UNIFIED_OUTPUT_SCHEMA, } from "./outputSchemas.js";
+export { CONTRACT_RULES_SPEC, STAGE_DESCRIPTIONS, truncateForPrompt, } from "./prompts/fragments.js";
+export { buildUnifiedSystemPrompt, buildUnifiedUserPrompt } from "./prompts/unified.js";
+export { buildDiagramSystemPrompt, buildDiagramUserPrompt } from "./prompts/diagram.js";
+export { buildScenarioSystemPrompt, buildScenarioUserPrompt, SCENARIO_AI_REFERENCE_TYPES, type BuildScenarioSystemPromptOptions, } from "./prompts/scenario.js";
+export { defaultScenarioNodeConfig, SCENARIO_NODE_DEFAULT_CONFIGS, } from "./prompts/scenarioNodeDefaults.js";
+export { isRecord as isAiRecord, parseEnvelope, scriptHasSyntaxError } from "./parse/shared.js";
+export { parseAiUnifiedOutput, type ParseAiUnifiedOptions } from "./parse/unified.js";
+export { parseAiDiagramOutput } from "./parse/diagram.js";
+export { parseAiScenarioOutput } from "./parse/scenario.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/ai/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ai/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACxF,OAAO,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACxF,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,2BAA2B,EAC3B,KAAK,gCAAgC,GACtC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAChG,OAAO,EAAE,oBAAoB,EAAE,KAAK,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACtF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/ai/index.js

@@ -0,0 +1,19 @@
+// Central AI surface: every shared assistant prompt, parser, output schema and
+// wire-level type lives here — one source consumed by the backend (hosted
+// generation) and the desktop (local-CLI generation). CSP-safe throughout: no
+// zod, no ajv, no unguarded `new Function` (this code runs in the Electron
+// renderer). Prompts must stay self-contained prose that survives being
+// PREPENDED to the user prompt (Codex/Cursor CLIs have no system flag).
+export * from "./types.js";
+export { extractJsonPayload } from "./jsonRepair.js";
+export { DIAGRAM_OUTPUT_SCHEMA, SCENARIO_OUTPUT_SCHEMA, UNIFIED_OUTPUT_SCHEMA, } from "./outputSchemas.js";
+export { CONTRACT_RULES_SPEC, STAGE_DESCRIPTIONS, truncateForPrompt, } from "./prompts/fragments.js";
+export { buildUnifiedSystemPrompt, buildUnifiedUserPrompt } from "./prompts/unified.js";
+export { buildDiagramSystemPrompt, buildDiagramUserPrompt } from "./prompts/diagram.js";
+export { buildScenarioSystemPrompt, buildScenarioUserPrompt, SCENARIO_AI_REFERENCE_TYPES, } from "./prompts/scenario.js";
+export { defaultScenarioNodeConfig, SCENARIO_NODE_DEFAULT_CONFIGS, } from "./prompts/scenarioNodeDefaults.js";
+export { isRecord as isAiRecord, parseEnvelope, scriptHasSyntaxError } from "./parse/shared.js";
+export { parseAiUnifiedOutput } from "./parse/unified.js";
+export { parseAiDiagramOutput } from "./parse/diagram.js";
+export { parseAiScenarioOutput } from "./parse/scenario.js";
+//# sourceMappingURL=index.js.map

package/dist/ai/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ai/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,0EAA0E;AAC1E,8EAA8E;AAC9E,2EAA2E;AAC3E,wEAAwE;AACxE,wEAAwE;AAExE,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACxF,OAAO,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACxF,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,2BAA2B,GAE5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAChG,OAAO,EAAE,oBAAoB,EAA8B,MAAM,oBAAoB,CAAC;AACtF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/ai/outputSchemas.d.ts

@@ -0,0 +1,43 @@
+export declare const UNIFIED_OUTPUT_SCHEMA: {
+    readonly type: "object";
+    readonly properties: {
+        readonly reply: {
+            readonly type: "string";
+        };
+        readonly contract: {
+            readonly type: readonly ["object", "null"];
+        };
+        readonly scripts: {
+            readonly type: "array";
+        };
+    };
+    readonly required: readonly ["reply"];
+    readonly additionalProperties: true;
+};
+export declare const DIAGRAM_OUTPUT_SCHEMA: {
+    readonly type: "object";
+    readonly properties: {
+        readonly reply: {
+            readonly type: "string";
+        };
+        readonly diagram: {
+            readonly type: readonly ["object", "null"];
+        };
+    };
+    readonly required: readonly ["reply"];
+    readonly additionalProperties: true;
+};
+export declare const SCENARIO_OUTPUT_SCHEMA: {
+    readonly type: "object";
+    readonly properties: {
+        readonly reply: {
+            readonly type: "string";
+        };
+        readonly scenario: {
+            readonly type: readonly ["object", "null"];
+        };
+    };
+    readonly required: readonly ["reply"];
+    readonly additionalProperties: true;
+};
+//# sourceMappingURL=outputSchemas.d.ts.map

package/dist/ai/outputSchemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outputSchemas.d.ts","sourceRoot":"","sources":["../../src/ai/outputSchemas.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;CASxB,CAAC;AAEX,eAAO,MAAM,qBAAqB;;;;;;;;;;;;CAQxB,CAAC;AAEX,eAAO,MAAM,sBAAsB;;;;;;;;;;;;CAQzB,CAAC"}

package/dist/ai/outputSchemas.js

@@ -0,0 +1,38 @@
+// JSON Schemas describing each AI feature's expected output envelope. These are
+// passed to runLocalAi/runLocalAiStream and used ONLY by providers whose spec
+// supports structured output (currently Codex, via --output-schema) — other
+// providers ignore them and rely on the prompt + the jsonRepair fallback.
+//
+// Deliberately PERMISSIVE: only the top-level envelope is pinned (so the model
+// wraps its answer in { reply, <payload> }); the nested contract/diagram/scenario
+// bodies stay open (additionalProperties) because they are validated downstream
+// by the feature parsers, not here. Tighten later if a model needs more steering.
+export const UNIFIED_OUTPUT_SCHEMA = {
+    type: "object",
+    properties: {
+        reply: { type: "string" },
+        contract: { type: ["object", "null"] },
+        scripts: { type: "array" },
+    },
+    required: ["reply"],
+    additionalProperties: true,
+};
+export const DIAGRAM_OUTPUT_SCHEMA = {
+    type: "object",
+    properties: {
+        reply: { type: "string" },
+        diagram: { type: ["object", "null"] },
+    },
+    required: ["reply"],
+    additionalProperties: true,
+};
+export const SCENARIO_OUTPUT_SCHEMA = {
+    type: "object",
+    properties: {
+        reply: { type: "string" },
+        scenario: { type: ["object", "null"] },
+    },
+    required: ["reply"],
+    additionalProperties: true,
+};
+//# sourceMappingURL=outputSchemas.js.map

package/dist/ai/outputSchemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outputSchemas.js","sourceRoot":"","sources":["../../src/ai/outputSchemas.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,8EAA8E;AAC9E,4EAA4E;AAC5E,0EAA0E;AAC1E,EAAE;AACF,+EAA+E;AAC/E,kFAAkF;AAClF,gFAAgF;AAChF,kFAAkF;AAElF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE;QACtC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;KAC3B;IACD,QAAQ,EAAE,CAAC,OAAO,CAAC;IACnB,oBAAoB,EAAE,IAAI;CAClB,CAAC;AAEX,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE;KACtC;IACD,QAAQ,EAAE,CAAC,OAAO,CAAC;IACnB,oBAAoB,EAAE,IAAI;CAClB,CAAC;AAEX,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE;KACvC;IACD,QAAQ,EAAE,CAAC,OAAO,CAAC;IACnB,oBAAoB,EAAE,IAAI;CAClB,CAAC"}

package/dist/ai/parse/diagram.d.ts

@@ -0,0 +1,3 @@
+import type { AiDiagramOutput } from "../types.js";
+export declare const parseAiDiagramOutput: (raw: string) => AiDiagramOutput;
+//# sourceMappingURL=diagram.d.ts.map

package/dist/ai/parse/diagram.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagram.d.ts","sourceRoot":"","sources":["../../../src/ai/parse/diagram.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGnD,eAAO,MAAM,oBAAoB,GAAI,KAAK,MAAM,KAAG,eAiBlD,CAAC"}

package/dist/ai/parse/diagram.js

@@ -0,0 +1,24 @@
+// Parser for the diagram assistant's envelope. Only a light structural gate
+// here (a diagram must carry node + edge arrays); anything else degrades to
+// reply-only so a chatty response never throws. The authoritative validation
+// (types, edge terminals, component keys) runs in the desktop via
+// safeParseDiagramDocument before anything touches the canvas.
+import { envelopeReply, isRecord, parseEnvelope } from "./shared.js";
+export const parseAiDiagramOutput = (raw) => {
+    const json = parseEnvelope(raw);
+    const reply = envelopeReply(json);
+    const diagram = json.diagram == null ? null : json.diagram;
+    if (isRecord(diagram)) {
+        const { nodes, edges } = diagram;
+        if (!Array.isArray(nodes) || !Array.isArray(edges)) {
+            // Not a usable diagram payload → treat as a plain reply.
+            return { reply, diagram: null };
+        }
+    }
+    else if (diagram !== null) {
+        // A non-object, non-null diagram value is not usable.
+        return { reply, diagram: null };
+    }
+    return { reply, diagram };
+};
+//# sourceMappingURL=diagram.js.map

package/dist/ai/parse/diagram.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagram.js","sourceRoot":"","sources":["../../../src/ai/parse/diagram.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,kEAAkE;AAClE,+DAA+D;AAG/D,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAErE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,GAAW,EAAmB,EAAE;IACnE,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IAE3D,IAAI,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACtB,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,yDAAyD;YACzD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC5B,sDAAsD;QACtD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClC,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC,CAAC"}

package/dist/ai/parse/scenario.d.ts

@@ -0,0 +1,3 @@
+import type { AiScenarioOutput } from "../types.js";
+export declare const parseAiScenarioOutput: (raw: string) => AiScenarioOutput;
+//# sourceMappingURL=scenario.d.ts.map

package/dist/ai/parse/scenario.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scenario.d.ts","sourceRoot":"","sources":["../../../src/ai/parse/scenario.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAGpD,eAAO,MAAM,qBAAqB,GAAI,KAAK,MAAM,KAAG,gBAgBnD,CAAC"}

package/dist/ai/parse/scenario.js

@@ -0,0 +1,23 @@
+// Parser for the scenario assistant's envelope. Only a light structural gate
+// here (a scenario must carry node + edge arrays); anything else degrades to
+// reply-only so a chatty response never throws. The authoritative validation
+// (node configs, graph rules) runs downstream — desktop sanitizeScenario +
+// buildScenarioValidationSnapshot; backend zod on save. Mirrors the diagram
+// parser.
+import { envelopeReply, isRecord, parseEnvelope } from "./shared.js";
+export const parseAiScenarioOutput = (raw) => {
+    const json = parseEnvelope(raw);
+    const reply = envelopeReply(json);
+    const scenario = json.scenario == null ? null : json.scenario;
+    if (isRecord(scenario)) {
+        const { nodes, edges } = scenario;
+        if (!Array.isArray(nodes) || !Array.isArray(edges)) {
+            // Not a usable scenario payload → treat as a plain reply.
+            return { reply, scenario: null };
+        }
+        return { reply, scenario };
+    }
+    // A non-object, non-null scenario value is not usable.
+    return { reply, scenario: null };
+};
+//# sourceMappingURL=scenario.js.map

package/dist/ai/parse/scenario.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scenario.js","sourceRoot":"","sources":["../../../src/ai/parse/scenario.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,4EAA4E;AAC5E,UAAU;AAGV,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAErE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAW,EAAoB,EAAE;IACrE,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;IAE9D,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvB,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,0DAA0D;YAC1D,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACnC,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC7B,CAAC;IAED,uDAAuD;IACvD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC,CAAC"}

package/dist/ai/parse/shared.d.ts

@@ -0,0 +1,5 @@
+export declare const isRecord: (value: unknown) => value is Record<string, unknown>;
+export declare const parseEnvelope: (raw: string) => Record<string, unknown>;
+export declare const envelopeReply: (envelope: Record<string, unknown>) => string;
+export declare const scriptHasSyntaxError: (code: string) => boolean;
+//# sourceMappingURL=shared.d.ts.map

package/dist/ai/parse/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../src/ai/parse/shared.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,QAAQ,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CACH,CAAC;AAKvE,eAAO,MAAM,aAAa,GAAI,KAAK,MAAM,KAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAWjE,CAAC;AAEF,eAAO,MAAM,aAAa,GAAI,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MACD,CAAC;AAgBlE,eAAO,MAAM,oBAAoB,GAAI,MAAM,MAAM,KAAG,OAQnD,CAAC"}

package/dist/ai/parse/shared.js

@@ -0,0 +1,49 @@
+// Shared parse helpers for the AI assistants' JSON envelopes. CSP-safe by
+// design: no zod, no ajv, no unguarded `new Function` — these run in the
+// Electron renderer (local-CLI generation) AND in the backend (hosted
+// generation). Hosts add their own stricter gates at their own boundaries.
+import { extractJsonPayload } from "../jsonRepair.js";
+export const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+// Parse the raw model text into the { reply, ... } envelope record. Throws a
+// plain Error (hosts map it: backend → AppError 502 AI_BAD_OUTPUT, desktop →
+// toast) when the text is not JSON even after repair, or not an object.
+export const parseEnvelope = (raw) => {
+    let json;
+    try {
+        json = JSON.parse(extractJsonPayload(raw));
+    }
+    catch {
+        throw new Error("The AI model returned malformed JSON.");
+    }
+    if (!isRecord(json)) {
+        throw new Error("The AI model output did not match the expected shape.");
+    }
+    return json;
+};
+export const envelopeReply = (envelope) => typeof envelope.reply === "string" ? envelope.reply.trim() : "";
+// Compile-only syntax check for generated scripts. `new Function` PARSES
+// without EXECUTING, so a SyntaxError is thrown at construction for bad code.
+// Some Electron renderers block `eval`/`new Function` via CSP — in that case
+// the check is unavailable, so we skip it (never falsely drop a valid script).
+// Detected once.
+const syntaxCheckAvailable = (() => {
+    try {
+        new Function("return (async () => {});");
+        return true;
+    }
+    catch {
+        return false;
+    }
+})();
+export const scriptHasSyntaxError = (code) => {
+    if (!syntaxCheckAvailable)
+        return false;
+    try {
+        new Function(`return (async () => {\n${code}\n});`);
+        return false;
+    }
+    catch {
+        return true;
+    }
+};
+//# sourceMappingURL=shared.js.map

package/dist/ai/parse/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../../src/ai/parse/shared.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,yEAAyE;AACzE,sEAAsE;AACtE,2EAA2E;AAE3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CAC3E,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEvE,6EAA6E;AAC7E,6EAA6E;AAC7E,wEAAwE;AACxE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAW,EAA2B,EAAE;IACpE,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,QAAiC,EAAU,EAAE,CACzE,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAElE,yEAAyE;AACzE,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,iBAAiB;AACjB,MAAM,oBAAoB,GAAG,CAAC,GAAY,EAAE;IAC1C,IAAI,CAAC;QACH,IAAI,QAAQ,CAAC,0BAA0B,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAEL,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,IAAY,EAAW,EAAE;IAC5D,IAAI,CAAC,oBAAoB;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,CAAC;QACH,IAAI,QAAQ,CAAC,0BAA0B,IAAI,OAAO,CAAC,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC"}

package/dist/ai/parse/unified.d.ts

@@ -0,0 +1,10 @@
+import type { AiScriptStage, AiUnifiedOutput } from "../types.js";
+export interface ParseAiUnifiedOptions {
+    /** Host hook: reject a contract rule (e.g. backend's zod operator gate). */
+    validateRule?: (rule: {
+        path: string;
+        rules: Record<string, unknown>;
+    }) => boolean;
+}
+export declare const parseAiUnifiedOutput: (raw: string, allowedPaths: string[], existingPaths: string[], allowedStages: AiScriptStage[], options?: ParseAiUnifiedOptions) => AiUnifiedOutput;
+//# sourceMappingURL=unified.d.ts.map

package/dist/ai/parse/unified.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unified.d.ts","sourceRoot":"","sources":["../../../src/ai/parse/unified.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAwC,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AA6FxG,MAAM,WAAW,qBAAqB;IACpC,4EAA4E;IAC5E,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,KAAK,OAAO,CAAC;CACpF;AAED,eAAO,MAAM,oBAAoB,GAC/B,KAAK,MAAM,EACX,cAAc,MAAM,EAAE,EACtB,eAAe,MAAM,EAAE,EACvB,eAAe,aAAa,EAAE,EAC9B,UAAS,qBAA0B,KAClC,eAeF,CAAC"}

package/dist/ai/parse/unified.js

@@ -0,0 +1,105 @@
+// Parser for the unified request-chat envelope. Canonical implementation —
+// merges the previously-duplicated backend (zod-gated) and desktop (CSP-safe)
+// parsers: splits the single JSON envelope, restricts contract `add` paths to
+// the discovered schema (index-tolerant), restricts `remove` to existing
+// paths, filters scripts to the allowed stages, syntax-checks each script
+// (where CSP allows), and de-duplicates — the guardrails that make the raw
+// model JSON safe to apply.
+//
+// Operator-level rule validation is host-pluggable (`validateRule`): the
+// backend passes its zod-backed check so hallucinated operators are still
+// rejected server-side; the desktop passes nothing (its apply path guards).
+import { envelopeReply, isRecord, parseEnvelope, scriptHasSyntaxError } from "./shared.js";
+// Collapse concrete array indices to the wildcard form so `scores[2]` matches
+// the `scores[]` the schema discovered.
+const normalizeArrayIndices = (path) => path.replace(/\[\d+\]/g, "[]");
+const parseScripts = (raw, allowedStages) => {
+    if (!Array.isArray(raw))
+        return { scripts: [], note: "" };
+    const allowed = new Set(allowedStages);
+    const byStage = new Map();
+    const dropped = [];
+    for (const entry of raw) {
+        if (!isRecord(entry) || typeof entry.stage !== "string" || typeof entry.code !== "string") {
+            continue;
+        }
+        const stage = entry.stage;
+        if (!allowed.has(stage)) {
+            dropped.push(`${entry.stage} (not a targeted stage)`);
+            continue;
+        }
+        if (scriptHasSyntaxError(entry.code)) {
+            dropped.push(`${stage} (syntax error)`);
+            continue;
+        }
+        // Last write wins per stage.
+        byStage.set(stage, entry.code);
+    }
+    // Preserve the order the stages were targeted in.
+    const scripts = allowedStages
+        .filter((stage) => byStage.has(stage))
+        .map((stage) => ({ stage, code: byStage.get(stage) }));
+    const note = dropped.length ? `Skipped: ${dropped.join(", ")}.` : "";
+    return { scripts, note };
+};
+const parseContract = (raw, allowedPaths, existingPaths, validateRule) => {
+    if (!isRecord(raw))
+        return null;
+    const addRaw = Array.isArray(raw.add) ? raw.add : [];
+    // Tolerate the model using the legacy `rules` key alongside `add`.
+    const rulesRaw = Array.isArray(raw.rules) ? raw.rules : [];
+    const removeRaw = Array.isArray(raw.remove) ? raw.remove : [];
+    const allowedNormalized = new Set(allowedPaths.map(normalizeArrayIndices));
+    const seenAdd = new Set();
+    const add = [];
+    for (const candidate of [...addRaw, ...rulesRaw]) {
+        if (!isRecord(candidate))
+            continue;
+        const { path, rules } = candidate;
+        if (typeof path !== "string" || path.trim().length === 0)
+            continue;
+        if (!isRecord(rules))
+            continue;
+        // Restrict to discovered schema paths (index-tolerant) when a schema was
+        // provided, so fully hallucinated paths are dropped.
+        if (allowedNormalized.size > 0 && !allowedNormalized.has(normalizeArrayIndices(path))) {
+            continue;
+        }
+        if (validateRule && !validateRule({ path, rules }))
+            continue;
+        if (seenAdd.has(path))
+            continue;
+        seenAdd.add(path);
+        add.push({ path, rules });
+    }
+    // Removals must reference a rule that actually exists for this request.
+    const existing = new Set(existingPaths);
+    const seenRemove = new Set();
+    const remove = [];
+    for (const path of removeRaw) {
+        if (typeof path !== "string")
+            continue;
+        if (existing.size > 0 && !existing.has(path))
+            continue;
+        if (seenRemove.has(path))
+            continue;
+        seenRemove.add(path);
+        remove.push(path);
+    }
+    if (add.length === 0 && remove.length === 0)
+        return null;
+    return { add, remove };
+};
+export const parseAiUnifiedOutput = (raw, allowedPaths, existingPaths, allowedStages, options = {}) => {
+    const json = parseEnvelope(raw);
+    let reply = envelopeReply(json);
+    const contract = json.contract == null
+        ? null
+        : parseContract(json.contract, allowedPaths, existingPaths, options.validateRule);
+    const { scripts, note } = parseScripts(json.scripts, allowedStages);
+    if (note) {
+        reply = reply ? `${reply}\n\n${note}` : note;
+    }
+    return { reply, contract, scripts };
+};
+//# sourceMappingURL=unified.js.map

package/dist/ai/parse/unified.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unified.js","sourceRoot":"","sources":["../../../src/ai/parse/unified.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,8EAA8E;AAC9E,8EAA8E;AAC9E,yEAAyE;AACzE,0EAA0E;AAC1E,2EAA2E;AAC3E,4BAA4B;AAC5B,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,4EAA4E;AAG5E,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAE3F,8EAA8E;AAC9E,wCAAwC;AACxC,MAAM,qBAAqB,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AAEvF,MAAM,YAAY,GAAG,CACnB,GAAY,EACZ,aAA8B,EACiB,EAAE;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAE1D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,aAAa,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1F,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAsB,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,yBAAyB,CAAC,CAAC;YACtD,SAAS;QACX,CAAC;QACD,IAAI,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAC;YACxC,SAAS;QACX,CAAC;QACD,6BAA6B;QAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,kDAAkD;IAClD,MAAM,OAAO,GAAG,aAAa;SAC1B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;SACrC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAW,EAAE,CAAC,CAAC,CAAC;IAEnE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CACpB,GAAY,EACZ,YAAsB,EACtB,aAAuB,EACvB,YAAkF,EACvD,EAAE;IAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,mEAAmE;IACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAE9D,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,GAAG,GAA8B,EAAE,CAAC;IAE1C,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,SAAS;QACnC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;QAClC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACnE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS;QAC/B,yEAAyE;QACzE,qDAAqD;QACrD,IAAI,iBAAiB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACtF,SAAS;QACX,CAAC;QACD,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YAAE,SAAS;QAC7D,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED,wEAAwE;IACxE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QACvC,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACvD,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACzB,CAAC,CAAC;AAOF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,GAAW,EACX,YAAsB,EACtB,aAAuB,EACvB,aAA8B,EAC9B,UAAiC,EAAE,EAClB,EAAE;IACnB,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAEhC,MAAM,QAAQ,GACZ,IAAI,CAAC,QAAQ,IAAI,IAAI;QACnB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAEtF,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACpE,IAAI,IAAI,EAAE,CAAC;QACT,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC,CAAC"}

package/dist/ai/prompts/diagram.d.ts

@@ -0,0 +1,4 @@
+import type { DiagramPromptInput } from "../types.js";
+export declare const buildDiagramSystemPrompt: () => string;
+export declare const buildDiagramUserPrompt: ({ instruction, mode, document, components, selection, canvas, }: DiagramPromptInput) => string;
+//# sourceMappingURL=diagram.d.ts.map

package/dist/ai/prompts/diagram.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagram.d.ts","sourceRoot":"","sources":["../../../src/ai/prompts/diagram.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,eAAO,MAAM,wBAAwB,QAAO,MAkG9B,CAAC;AAEf,eAAO,MAAM,sBAAsB,GAAI,iEAOpC,kBAAkB,KAAG,MA6BvB,CAAC"}

package/dist/ai/prompts/diagram.js

@@ -0,0 +1,132 @@
+// Prompt builders for the diagram-studio assistant. Mirrors the unified prompt
+// pattern (system = rules + output shape, user = context + instruction) but the
+// model produces a whole DiagramDocument instead of contract/script changes.
+//
+// The DiagramDocument schema itself lives in the desktop app
+// (features/diagram-studio/model/schema.ts) — it is described here in prose so
+// the model emits the right shape; the client runs the authoritative validator
+// (safeParseDiagramDocument) before applying anything to the canvas.
+export const buildDiagramSystemPrompt = () => [
+    "You are a STAFF-level software/systems architect and domain expert embedded in a visual",
+    "diagram studio. You have deep, practical knowledge of real production systems across",
+    "domains (fintech/investing, e-commerce, payments, streaming, IoT, ML, SaaS, etc.). From",
+    "the user's instruction plus the CONTEXT below, YOU produce a diagram. Respond with ONE",
+    "JSON object ONLY (no markdown, no prose outside JSON), shaped:",
+    "",
+    '{"reply": string, "diagram": <DiagramDocument> | null}',
+    "",
+    "DiagramDocument shape:",
+    "{",
+    '  "schemaVersion": 1,',
+    '  "id": string,                       // keep the existing id on edits; a short id when creating',
+    '  "meta": {"title": string},          // a concise diagram title',
+    '  "nodes": [{',
+    '    "id": string,                     // stable + unique; REUSE existing ids on edits',
+    '    "type": string,                   // MUST be one of AVAILABLE COMPONENT TYPES below',
+    '    "position": {"x": number, "y": number},',
+    '    "size": {"width": number, "height": number},',
+    '    "label": string,                  // short, clear',
+    '    "rotation": number,               // optional; degrees clockwise 0-359 (omit or 0 = upright)',
+    '    "style": {                        // ALL fields optional',
+    '      "fill": {"raw":"#RRGGBB"}, "stroke": {"raw":"#RRGGBB"}, "textColor": {"raw":"#RRGGBB"},',
+    '      "strokeWidth": number, "radius": number, "dashed": boolean, "opacity": number,          // opacity 0-100',
+    '      "fontSize": number, "fontFamily": string, "fontStyle": number,                          // fontStyle BITMASK: bold=1|italic=2|underline=4',
+    '      "align": "left"|"center"|"right", "verticalAlign": "top"|"middle"|"bottom", "shadow": boolean',
+    "    },",
+    '    "parentId": string                // optional: id of a container/group/pool node',
+    "  }],",
+    '  "edges": [{',
+    '    "id": string,',
+    '    "source": string,                 // an existing node id',
+    '    "target": string,                 // an existing node id',
+    '    "label": string,                  // optional edge label',
+    '    "routing": "orthogonal"|"straight"|"curved",  // optional (default orthogonal)',
+    '    "markerEnd": "classicThin"|"classic"|"none"    // optional arrowhead',
+    "  }]",
+    "}",
+    "",
+    "RULES:",
+    "- Use ONLY `type` values from AVAILABLE COMPONENT TYPES. When unsure, fall back to a",
+    "  generic shape: `rect`, `flow.process`, `flow.decision`, `flow.terminator`, `cylinder`.",
+    "- Every node needs a short, meaningful `label` and a sensible `size` (e.g. 140x64).",
+    '- COLORS in `style` MUST be objects: `{"raw": "#ff0000"}` (a hex string wrapped in',
+    '  `{"raw": ...}`), NEVER a bare string like `"#ff0000"`. Applies to fill/stroke/textColor.',
+    "- STYLING (all `style` fields optional; use TASTEFULLY — clarity over decoration): you may set",
+    "  strokeWidth, radius (rounded corners), dashed, opacity (0-100), fontSize, fontFamily,",
+    "  fontStyle, align, verticalAlign, and shadow to emphasize structure. `fontStyle` is a BITMASK:",
+    "  bold=1, italic=2, underline=4 — combine by ADDING (bold+italic = 3). A node's `rotation` is",
+    "  degrees clockwise; only rotate when it genuinely helps (a rotated label/arrow) — keep primary",
+    "  shapes upright. Default to NO extra styling unless it improves readability.",
+    "- Every edge's `source` and `target` MUST reference a node `id` that exists in `nodes`.",
+    "- Positions need not be exact — the app auto-lays-out the result — but still give rough,",
+    "  non-overlapping coordinates (step nodes down/right so nothing stacks at 0,0).",
+    "- CREATE mode: build the whole diagram from scratch.",
+    "- EDIT mode: return the COMPLETE updated document. REUSE the ids of existing nodes/edges",
+    "  and KEEP their `position` unless the user asked to move them; only add, remove, or",
+    "  change what the instruction implies. Never drop unrelated nodes/edges.",
+    "- EDIT mode — EDGES: copy every UNCHANGED edge VERBATIM. Keep its id, source, target AND",
+    "  every field already on it (including routing, waypoints, sourceAnchor, targetAnchor)",
+    "  EXACTLY as given — do NOT re-route, re-point, reorder, or strip routing fields. Only touch",
+    "  the specific edge(s) the instruction is about, and add new edges only for genuinely new",
+    "  connections. This preserves the existing tidy layout instead of scrambling every edge.",
+    "- If the message is a question or implies no change → `diagram` null, `reply` only.",
+    "- `reply` is ALWAYS a short, natural sentence: what you built or changed (or the answer).",
+    "",
+    "DEPTH & DOMAIN EXPERTISE (this is what separates a good diagram from a toy one):",
+    "- Before emitting, THINK like a senior engineer designing this system for real. Enumerate",
+    "  the components a production-grade version of THIS specific domain actually needs — the",
+    "  end-to-end flows, the supporting services, the data stores, and the cross-cutting concerns",
+    "  (auth/identity, caching, queues/streaming, observability, external/third-party integrations).",
+    "- Be COMPREHENSIVE, not minimal. A vague ask like \"design an X platform\" should yield a",
+    "  realistic architecture (typically ~10-20 nodes), NOT 4-5 generic boxes. Cover the whole",
+    "  lifecycle, not just the happy path.",
+    "- Example of the expected depth — \"design an event-driven investment platform\" should include",
+    "  things a real one has: client apps, API gateway, auth/identity (OAuth/OIDC), user",
+    "  onboarding/KYC, account & funding/payments, an order/trade service, an execution/broker",
+    "  integration (e.g. a third-party like DriveWealth), a market-data / real-time price feed,",
+    "  portfolio & positions, a ledger, a notification service, an event bus / streaming (Kafka),",
+    "  primary DB(s), a cache (Redis), and observability. Apply the SAME rigor to any domain.",
+    "- Prefer SPECIFIC catalog components over generic rectangles when they fit (e.g. an API",
+    "  gateway, message queue/Kafka, Redis cache, a concrete database like Postgres/MongoDB, an",
+    "  auth provider) — pick the closest matching `type` from AVAILABLE COMPONENT TYPES.",
+    "- Organize for readability: group related components under a container/frame or pool",
+    "  (`frame`, `pool.horizontal`/`pool.vertical`) via `parentId`, and give edges meaningful",
+    "  labels for the real interaction (e.g. \"Place order\", \"Stream quotes\", \"Publish event\").",
+    "- Only trim when the user explicitly asks for something simple/high-level.",
+    "",
+    "GROUPS / CONTAINERS (how nesting works here):",
+    "- To group nodes, add ONE container node (`type` = `frame`, `pool.horizontal`, or",
+    "  `pool.vertical`) with a title `label`, then set each member node's `parentId` to that",
+    "  container's `id`. The container must appear in `nodes` too.",
+    "- The app AUTO-LAYS-OUT children INSIDE the container and AUTO-SIZES the container to fit",
+    "  them — so you do NOT need exact child positions or a correct container size. Just declare",
+    "  the parentId relationships and give each child a normal node `size` (e.g. 150x60). Do not",
+    "  try to hand-pack children into a box; let the layout do it.",
+    "- Edges may connect a child to a node outside its container, or to the container itself.",
+].join("\n");
+export const buildDiagramUserPrompt = ({ instruction, mode, document, components = [], selection = [], canvas, }) => {
+    const componentLines = components.length
+        ? components.map((c) => `${c.type} — ${c.label} (${c.category})`).join("\n")
+        : "(none provided — use generic shapes)";
+    const documentBlock = mode === "edit" && document ? JSON.stringify(document) : "(none — creating a new diagram)";
+    const canvasLine = canvas && (canvas.width || canvas.height)
+        ? `CANVAS SIZE: ${Math.round(canvas.width ?? 0)} x ${Math.round(canvas.height ?? 0)}`
+        : null;
+    return [
+        `MODE: ${mode}`,
+        canvasLine,
+        "",
+        "AVAILABLE COMPONENT TYPES (type — label (category)):",
+        componentLines,
+        "",
+        "CURRENT DIAGRAM (edit mode; full document JSON):",
+        documentBlock,
+        "",
+        `SELECTED CELL IDS: ${selection.length ? selection.join(", ") : "(none)"}`,
+        "",
+        `INSTRUCTION: ${instruction}`,
+    ]
+        .filter((line) => line !== null)
+        .join("\n");
+};
+//# sourceMappingURL=diagram.js.map

package/dist/ai/prompts/diagram.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagram.js","sourceRoot":"","sources":["../../../src/ai/prompts/diagram.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,gFAAgF;AAChF,6EAA6E;AAC7E,EAAE;AACF,6DAA6D;AAC7D,+EAA+E;AAC/E,+EAA+E;AAC/E,qEAAqE;AAIrE,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAW,EAAE,CACnD;IACE,yFAAyF;IACzF,sFAAsF;IACtF,yFAAyF;IACzF,wFAAwF;IACxF,gEAAgE;IAChE,EAAE;IACF,wDAAwD;IACxD,EAAE;IACF,wBAAwB;IACxB,GAAG;IACH,uBAAuB;IACvB,kGAAkG;IAClG,kEAAkE;IAClE,eAAe;IACf,uFAAuF;IACvF,yFAAyF;IACzF,6CAA6C;IAC7C,kDAAkD;IAClD,uDAAuD;IACvD,kGAAkG;IAClG,8DAA8D;IAC9D,+FAA+F;IAC/F,gHAAgH;IAChH,iJAAiJ;IACjJ,qGAAqG;IACrG,QAAQ;IACR,sFAAsF;IACtF,OAAO;IACP,eAAe;IACf,mBAAmB;IACnB,8DAA8D;IAC9D,8DAA8D;IAC9D,8DAA8D;IAC9D,oFAAoF;IACpF,0EAA0E;IAC1E,MAAM;IACN,GAAG;IACH,EAAE;IACF,QAAQ;IACR,sFAAsF;IACtF,0FAA0F;IAC1F,qFAAqF;IACrF,oFAAoF;IACpF,4FAA4F;IAC5F,gGAAgG;IAChG,yFAAyF;IACzF,iGAAiG;IACjG,+FAA+F;IAC/F,iGAAiG;IACjG,+EAA+E;IAC/E,yFAAyF;IACzF,0FAA0F;IAC1F,iFAAiF;IACjF,sDAAsD;IACtD,0FAA0F;IAC1F,sFAAsF;IACtF,0EAA0E;IAC1E,0FAA0F;IAC1F,wFAAwF;IACxF,8FAA8F;IAC9F,2FAA2F;IAC3F,0FAA0F;IAC1F,qFAAqF;IACrF,2FAA2F;IAC3F,EAAE;IACF,kFAAkF;IAClF,2FAA2F;IAC3F,0FAA0F;IAC1F,8FAA8F;IAC9F,iGAAiG;IACjG,2FAA2F;IAC3F,2FAA2F;IAC3F,uCAAuC;IACvC,iGAAiG;IACjG,qFAAqF;IACrF,2FAA2F;IAC3F,4FAA4F;IAC5F,8FAA8F;IAC9F,0FAA0F;IAC1F,yFAAyF;IACzF,4FAA4F;IAC5F,qFAAqF;IACrF,sFAAsF;IACtF,0FAA0F;IAC1F,iGAAiG;IACjG,4EAA4E;IAC5E,EAAE;IACF,+CAA+C;IAC/C,mFAAmF;IACnF,yFAAyF;IACzF,+DAA+D;IAC/D,2FAA2F;IAC3F,6FAA6F;IAC7F,6FAA6F;IAC7F,+DAA+D;IAC/D,0FAA0F;CAC3F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEf,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,EACrC,WAAW,EACX,IAAI,EACJ,QAAQ,EACR,UAAU,GAAG,EAAE,EACf,SAAS,GAAG,EAAE,EACd,MAAM,GACa,EAAU,EAAE;IAC/B,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM;QACtC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5E,CAAC,CAAC,sCAAsC,CAAC;IAE3C,MAAM,aAAa,GACjB,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,iCAAiC,CAAC;IAE7F,MAAM,UAAU,GACd,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC;QACvC,CAAC,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE;QACrF,CAAC,CAAC,IAAI,CAAC;IAEX,OAAO;QACL,SAAS,IAAI,EAAE;QACf,UAAU;QACV,EAAE;QACF,sDAAsD;QACtD,cAAc;QACd,EAAE;QACF,kDAAkD;QAClD,aAAa;QACb,EAAE;QACF,sBAAsB,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC1E,EAAE;QACF,gBAAgB,WAAW,EAAE;KAC9B;SACE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC;SAC/B,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC,CAAC"}

package/dist/ai/prompts/fragments.d.ts

@@ -0,0 +1,5 @@
+import type { AiScriptStage } from "../types.js";
+export declare const CONTRACT_RULES_SPEC: string;
+export declare const STAGE_DESCRIPTIONS: Record<AiScriptStage, string>;
+export declare const truncateForPrompt: (value: string, max?: number) => string;
+//# sourceMappingURL=fragments.d.ts.map

package/dist/ai/prompts/fragments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fragments.d.ts","sourceRoot":"","sources":["../../../src/ai/prompts/fragments.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAKjD,eAAO,MAAM,mBAAmB,QAQpB,CAAC;AAIb,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAS5D,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAAI,OAAO,MAAM,EAAE,YAAQ,KAAG,MACJ,CAAC"}

package/dist/ai/prompts/fragments.js

@@ -0,0 +1,27 @@
+// Shared prompt fragments consumed by more than one assistant prompt (and by
+// the backend's legacy contract-only prompt). Single source — the backend and
+// desktop copies of these constants were duplicated and had already drifted
+// before centralization.
+import { SCENARIO_CONTRACT_FORMATS } from "../../contract/formats.js";
+// Terse operator vocabulary the model must stick to. Kept compact on purpose —
+// it's the bulk of the system prompt and we pay tokens for every word. Mirrors
+// ContractRuleRules so the output maps 1:1 onto a rule.
+export const CONTRACT_RULES_SPEC = [
+    "Each rule's `rules` object may use ONLY these keys (omit the rest):",
+    "- common: required(bool), type(string|number|boolean|object|array|null), equals(string|number|bool), notEmpty(bool)",
+    "- number: min,max,greaterThan,lessThan(number); integer,positive,negative,nonZero(bool)",
+    "- string: minLength,maxLength(int); pattern,contains,notContains,startsWith,endsWith(string); caseSensitive(bool); enumValues(array); format(enum)",
+    "- array: minItems,maxItems(int); sorted({order:asc|desc,field?}); unique({mode:whole|byField,fields?})",
+    "- object: requiredKeys,forbiddenKeys(string[]); minProperties,maxProperties(int); strictSchema(bool)",
+    `- format values: ${SCENARIO_CONTRACT_FORMATS.join(", ")}`,
+].join("\n");
+// What each request-script slot means + which pm.* surface it exposes. Fed to
+// the model so it knows, e.g., that pm.response does not exist pre-request.
+export const STAGE_DESCRIPTIONS = {
+    "pre-request": "Runs BEFORE the HTTP call. `pm.response` does NOT exist. `pm.request` mutations (setHeader/setQueryParam/setRawBody/setUrl) take effect. Use for setup: auth tokens, computed headers/body, seeding env/DB/Redis.",
+    "post-response": "Runs immediately AFTER the response. `pm.response` is available; `pm.request` mutations have no effect. Use to capture values from the response into variables.",
+    tests: "Runs after the response and any declared DB/Redis steps. `pm.response`, `pm.db.post`, `pm.redis.results.post` are available. Put assertions inside `pm.test(...)`.",
+    kafka: "Runs when a Kafka event is matched (post-response/tests context). `pm.response` and `pm.kafka.event()` / `pm.kafka.messages()` are available. Put assertions inside `pm.test(...)`.",
+};
+export const truncateForPrompt = (value, max = 80) => value.length > max ? `${value.slice(0, max)}…` : value;
+//# sourceMappingURL=fragments.js.map

package/dist/ai/prompts/fragments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fragments.js","sourceRoot":"","sources":["../../../src/ai/prompts/fragments.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,8EAA8E;AAC9E,4EAA4E;AAC5E,yBAAyB;AAEzB,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAGtE,+EAA+E;AAC/E,+EAA+E;AAC/E,wDAAwD;AACxD,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,qEAAqE;IACrE,qHAAqH;IACrH,yFAAyF;IACzF,oJAAoJ;IACpJ,wGAAwG;IACxG,sGAAsG;IACtG,oBAAoB,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;CAC3D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,8EAA8E;AAC9E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,kBAAkB,GAAkC;IAC/D,aAAa,EACX,mNAAmN;IACrN,eAAe,EACb,iKAAiK;IACnK,KAAK,EACH,oKAAoK;IACtK,KAAK,EACH,qLAAqL;CACxL,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAE,GAAG,GAAG,EAAE,EAAU,EAAE,CACnE,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC"}

package/dist/ai/prompts/scenario.d.ts

@@ -0,0 +1,12 @@
+import type { ScenarioPromptInput } from "../types.js";
+export declare const SCENARIO_AI_REFERENCE_TYPES: readonly ["request", "db", "redis", "kafka", "condition", "assertion", "script", "set-vars", "poll", "foreach", "websocket", "ai", "wait", "notification", "aggregator", "end"];
+export interface BuildScenarioSystemPromptOptions {
+    /**
+     * Canonical default config per node type shown in the reference. Hosts with
+     * a real node factory (desktop) inject it; default = core's static map.
+     */
+    defaultConfigFor?: (type: string) => unknown;
+}
+export declare const buildScenarioSystemPrompt: (options?: BuildScenarioSystemPromptOptions) => string;
+export declare const buildScenarioUserPrompt: (input: ScenarioPromptInput) => string;
+//# sourceMappingURL=scenario.d.ts.map