rivet-design 0.10.0 → 0.10.1

package/dist/proxy-middleware/preview-bridge.js

@@ -0,0 +1,358 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isHtmlDocumentRequest = exports.injectPreviewBridge = exports.shouldInjectPreviewBridge = exports.allowPreviewBridgeNonceInCsp = exports.createPreviewBridgeScript = exports.PREVIEW_BRIDGE_CHANNEL = exports.PREVIEW_BRIDGE_SCRIPT_ID = void 0;
+exports.PREVIEW_BRIDGE_SCRIPT_ID = 'rivet-preview-bridge';
+exports.PREVIEW_BRIDGE_CHANNEL = 'rivet-preview-bridge';
+const MAX_SIBLING_CONTEXT_COUNT = 6;
+const TEXT_SNIPPET_MAX_LENGTH = 80;
+const buildBridgeScript = ({ expectedParentOrigin, } = {}) => `
+(() => {
+  const CHANNEL = '${exports.PREVIEW_BRIDGE_CHANNEL}';
+  const EXPECTED_PARENT_ORIGIN = ${JSON.stringify(expectedParentOrigin ?? null)} || window.location.origin;
+  const RIVET_ID_ATTR = 'data-rivet-id';
+  const MAX_SIBLING_CONTEXT_COUNT = ${MAX_SIBLING_CONTEXT_COUNT};
+  const TEXT_SNIPPET_MAX_LENGTH = ${TEXT_SNIPPET_MAX_LENGTH};
+  if (window.__RIVET_PREVIEW_BRIDGE_ACTIVE__) {
+    return;
+  }
+  window.__RIVET_PREVIEW_BRIDGE_ACTIVE__ = true;
+
+  const getClassName = (element) => {
+    try {
+      const value = element.className;
+      if (typeof value === 'string') {
+        return value;
+      }
+      if (value && typeof value === 'object' && 'baseVal' in value) {
+        return value.baseVal || '';
+      }
+    } catch {}
+    return '';
+  };
+
+  const getTextSnippet = (element) => {
+    const text = (element.textContent || '').replace(/\\s+/g, ' ').trim();
+    return text.slice(0, TEXT_SNIPPET_MAX_LENGTH);
+  };
+
+  const getXPath = (element) => {
+    if (element.id) {
+      return '//*[@id="' + element.id + '"]';
+    }
+    if (element === document.body) {
+      return '/html/body';
+    }
+    let index = 0;
+    const siblings = element.parentNode ? element.parentNode.childNodes : [];
+    for (let i = 0; i < siblings.length; i += 1) {
+      const sibling = siblings[i];
+      if (sibling === element) {
+        const parent = element.parentNode;
+        return parent
+          ? getXPath(parent) + '/' + element.tagName.toLowerCase() + '[' + (index + 1) + ']'
+          : '';
+      }
+      if (sibling.nodeType === 1 && sibling.tagName === element.tagName) {
+        index += 1;
+      }
+    }
+    return '';
+  };
+
+  const getElementByXPath = (xpath) => {
+    try {
+      const result = document.evaluate(
+        xpath,
+        document,
+        null,
+        XPathResult.FIRST_ORDERED_NODE_TYPE,
+        null,
+      );
+      return result.singleNodeValue || null;
+    } catch {
+      return null;
+    }
+  };
+
+  const ensureRivetId = (element) => {
+    const existing = element.getAttribute(RIVET_ID_ATTR);
+    if (existing && existing.trim()) {
+      return existing.trim();
+    }
+    const id =
+      globalThis.crypto && typeof globalThis.crypto.randomUUID === 'function'
+        ? globalThis.crypto.randomUUID()
+        : 'rivet-' + Math.random().toString(36).slice(2, 11);
+    element.setAttribute(RIVET_ID_ATTR, id);
+    return id;
+  };
+
+  const transformStyles = (styles) => {
+    const result = {};
+    for (let i = 0; i < styles.length; i += 1) {
+      const prop = styles[i];
+      result[prop] = styles.getPropertyValue(prop);
+    }
+    return result;
+  };
+
+  const getSiblingElements = (element) => {
+    const parent = element.parentElement;
+    if (!parent) {
+      return undefined;
+    }
+    const siblings = Array.from(parent.children);
+    const currentIndex = siblings.indexOf(element);
+    if (currentIndex === -1) {
+      return undefined;
+    }
+    const result = siblings
+      .map((sibling, index) => ({ sibling, index }))
+      .filter(({ sibling }) => sibling !== element)
+      .sort((a, b) => Math.abs(a.index - currentIndex) - Math.abs(b.index - currentIndex))
+      .slice(0, MAX_SIBLING_CONTEXT_COUNT)
+      .map(({ sibling, index }) => ({
+        tagName: sibling.tagName.toLowerCase(),
+        className: getClassName(sibling),
+        id: sibling.id || '',
+        textSnippet: getTextSnippet(sibling),
+        relativePosition: index < currentIndex ? 'previous' : 'next',
+      }));
+    return result.length > 0 ? result : undefined;
+  };
+
+  const getParentSummary = (element) => {
+    const parent = element.parentElement;
+    if (!parent) {
+      return undefined;
+    }
+    return {
+      tagName: parent.tagName.toLowerCase(),
+      className: getClassName(parent),
+      id: parent.id || '',
+      textSnippet: getTextSnippet(parent),
+    };
+  };
+
+  const extractElement = (element) => {
+    if (!element) {
+      return null;
+    }
+    const rect = element.getBoundingClientRect();
+    const computedStyles = window.getComputedStyle(element);
+    const attributes = {};
+    for (const attr of Array.from(element.attributes || [])) {
+      attributes[attr.name] = attr.value;
+    }
+    const rivetId = ensureRivetId(element);
+    return {
+      tagName: element.tagName.toLowerCase(),
+      className: getClassName(element),
+      id: element.id || '',
+      textContent: (element.textContent || '').trim().slice(0, 100),
+      innerHTML: (element.innerHTML || '').slice(0, 200),
+      attributes,
+      computedStyles: transformStyles(computedStyles),
+      boundingRect: {
+        x: rect.x,
+        y: rect.y,
+        width: rect.width,
+        height: rect.height,
+        top: rect.top,
+        left: rect.left,
+        right: rect.right,
+        bottom: rect.bottom,
+      },
+      xpath: getXPath(element),
+      rivetId,
+      siblingElements: getSiblingElements(element),
+      parentElementSummary: getParentSummary(element),
+    };
+  };
+
+  const elementFromIdentifier = (identifier) => {
+    if (!identifier || typeof identifier !== 'object') {
+      return null;
+    }
+    const rivetId = typeof identifier.rivetId === 'string' ? identifier.rivetId.trim() : '';
+    if (rivetId) {
+      try {
+        const element = document.querySelector('[' + RIVET_ID_ATTR + '="' + CSS.escape(rivetId) + '"]');
+        if (element) {
+          return element;
+        }
+      } catch {}
+    }
+    const xpath = typeof identifier.xpath === 'string' ? identifier.xpath : '';
+    return xpath ? getElementByXPath(xpath) : null;
+  };
+
+  const elementsInBox = (box) => {
+    const candidates = new Set();
+    const step = 32;
+    const xCount = Math.max(2, Math.min(24, Math.ceil((box.right - box.left) / step) + 1));
+    const yCount = Math.max(2, Math.min(24, Math.ceil((box.bottom - box.top) / step) + 1));
+    for (let xi = 0; xi < xCount; xi += 1) {
+      const x = box.left + ((box.right - box.left) * xi) / (xCount - 1);
+      for (let yi = 0; yi < yCount; yi += 1) {
+        const y = box.top + ((box.bottom - box.top) * yi) / (yCount - 1);
+        const elements =
+          typeof document.elementsFromPoint === 'function'
+            ? document.elementsFromPoint(x, y)
+            : [document.elementFromPoint(x, y)].filter(Boolean);
+        for (const element of elements) {
+          let current = element;
+          while (current) {
+            candidates.add(current);
+            current = current.parentElement;
+          }
+        }
+      }
+    }
+    return Array.from(candidates)
+      .filter((element) => {
+        const rect = element.getBoundingClientRect();
+        return (
+          rect.left < box.right &&
+          rect.right > box.left &&
+          rect.top < box.bottom &&
+          rect.bottom > box.top &&
+          rect.width > 0 &&
+          rect.height > 0
+        );
+      })
+      .map(extractElement)
+      .filter(Boolean);
+  };
+
+  const send = (source, id, responseNonce, payload) => {
+    source.postMessage(
+      {
+        channel: CHANNEL,
+        direction: 'response',
+        id,
+        responseNonce,
+        ...payload,
+      },
+      EXPECTED_PARENT_ORIGIN,
+    );
+  };
+
+  window.addEventListener('message', (event) => {
+    const message = event.data;
+    if (!message || message.channel !== CHANNEL || message.direction !== 'request') {
+      return;
+    }
+    if (event.origin !== EXPECTED_PARENT_ORIGIN) {
+      return;
+    }
+    event.stopImmediatePropagation();
+    const source = event.source;
+    if (!source || typeof source.postMessage !== 'function') {
+      return;
+    }
+    try {
+      let result = null;
+      if (message.action === 'elementAtPoint') {
+        result = extractElement(document.elementFromPoint(message.payload.x, message.payload.y));
+      } else if (message.action === 'elementsInBox') {
+        result = elementsInBox(message.payload);
+      } else if (message.action === 'resolveElement') {
+        result = extractElement(elementFromIdentifier(message.payload));
+      } else if (message.action === 'setCursor') {
+        const cursor = typeof message.payload.cursor === 'string' ? message.payload.cursor : '';
+        document.documentElement.style.cursor = cursor;
+        document.body.style.cursor = cursor;
+        result = true;
+      } else if (message.action === 'scrollBy') {
+        window.scrollBy(message.payload.deltaX || 0, message.payload.deltaY || 0);
+        result = true;
+      } else {
+        throw new Error('Unknown action');
+      }
+      send(source, message.id, message.responseNonce, { ok: true, result });
+    } catch (error) {
+      send(source, message.id, message.responseNonce, {
+        ok: false,
+        error: error instanceof Error ? error.message : String(error),
+      });
+    }
+  });
+})();
+`.trim();
+const createPreviewBridgeScript = (options = {}) => {
+    const nonceAttribute = options.scriptNonce
+        ? ` nonce="${options.scriptNonce}"`
+        : '';
+    return `<script id="${exports.PREVIEW_BRIDGE_SCRIPT_ID}"${nonceAttribute}>${buildBridgeScript(options)}</script>`;
+};
+exports.createPreviewBridgeScript = createPreviewBridgeScript;
+const SCRIPT_DIRECTIVES = new Set(['script-src', 'script-src-elem']);
+const splitCspDirective = (directive) => directive
+    .trim()
+    .split(/\s+/)
+    .filter((part) => part.length > 0);
+const allowPreviewBridgeNonceInCsp = (csp, { scriptNonce }) => {
+    const nonceSource = `'nonce-${scriptNonce}'`;
+    const directives = csp
+        .split(';')
+        .map((directive) => directive.trim())
+        .filter((directive) => directive.length > 0);
+    let hasScriptDirective = false;
+    const nextDirectives = directives.map((directive) => {
+        const parts = splitCspDirective(directive);
+        const name = parts[0]?.toLowerCase();
+        if (!SCRIPT_DIRECTIVES.has(name)) {
+            return directive;
+        }
+        hasScriptDirective = true;
+        return parts.includes(nonceSource)
+            ? directive
+            : [...parts, nonceSource].join(' ');
+    });
+    if (!hasScriptDirective) {
+        const defaultDirective = directives.find((directive) => splitCspDirective(directive)[0]?.toLowerCase() === 'default-src');
+        const defaultSources = defaultDirective
+            ? splitCspDirective(defaultDirective).slice(1)
+            : [];
+        nextDirectives.push(['script-src', ...defaultSources, nonceSource].join(' '));
+    }
+    return nextDirectives.join('; ');
+};
+exports.allowPreviewBridgeNonceInCsp = allowPreviewBridgeNonceInCsp;
+const firstHeaderValue = (value) => Array.isArray(value) ? (value[0] ?? '') : (value ?? '');
+/** Decides whether a proxied response should receive the isolated-preview bridge. */
+const shouldInjectPreviewBridge = ({ method, accept, contentType, }) => {
+    if (method != null && method !== 'GET') {
+        return false;
+    }
+    const normalizedAccept = firstHeaderValue(accept).toLowerCase();
+    const normalizedContentType = firstHeaderValue(contentType).toLowerCase();
+    return (normalizedAccept.includes('text/html') &&
+        normalizedContentType.includes('text/html'));
+};
+exports.shouldInjectPreviewBridge = shouldInjectPreviewBridge;
+/** Adds the isolated-preview bridge to a proxied HTML document. */
+const injectPreviewBridge = (html, options = {}) => {
+    if (html.includes(`id="${exports.PREVIEW_BRIDGE_SCRIPT_ID}"`)) {
+        return html;
+    }
+    const script = (0, exports.createPreviewBridgeScript)(options);
+    const headMatch = html.match(/<head[^>]*>/i);
+    if (headMatch?.index !== undefined) {
+        const insertAt = headMatch.index + headMatch[0].length;
+        return `${html.slice(0, insertAt)}${script}${html.slice(insertAt)}`;
+    }
+    if (html.includes('</head>')) {
+        return html.replace('</head>', `${script}</head>`);
+    }
+    if (html.includes('</body>')) {
+        return html.replace('</body>', `${script}</body>`);
+    }
+    return `${script}${html}`;
+};
+exports.injectPreviewBridge = injectPreviewBridge;
+const isHtmlDocumentRequest = (req) => req.method === 'GET' &&
+    firstHeaderValue(req.headers.accept).toLowerCase().includes('text/html');
+exports.isHtmlDocumentRequest = isHtmlDocumentRequest;
+//# sourceMappingURL=preview-bridge.js.map

package/dist/proxy-middleware/preview-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-bridge.js","sourceRoot":"","sources":["../../src/proxy-middleware/preview-bridge.ts"],"names":[],"mappings":";;;AAEa,QAAA,wBAAwB,GAAG,sBAAsB,CAAC;AAClD,QAAA,sBAAsB,GAAG,sBAAsB,CAAC;AAa7D,MAAM,yBAAyB,GAAG,CAAC,CAAC;AACpC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC,MAAM,iBAAiB,GAAG,CAAC,EACzB,oBAAoB,MACa,EAAE,EAAE,EAAE,CAAC;;qBAErB,8BAAsB;mCACR,IAAI,CAAC,SAAS,CAAC,oBAAoB,IAAI,IAAI,CAAC;;sCAEzC,yBAAyB;oCAC3B,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4Q1D,CAAC,IAAI,EAAE,CAAC;AAEF,MAAM,yBAAyB,GAAG,CACvC,UAAyC,EAAE,EACnC,EAAE;IACV,MAAM,cAAc,GAAG,OAAO,CAAC,WAAW;QACxC,CAAC,CAAC,WAAW,OAAO,CAAC,WAAW,GAAG;QACnC,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,eAAe,gCAAwB,IAAI,cAAc,IAAI,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC;AAC5G,CAAC,CAAC;AAPW,QAAA,yBAAyB,6BAOpC;AAMF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAErE,MAAM,iBAAiB,GAAG,CAAC,SAAiB,EAAY,EAAE,CACxD,SAAS;KACN,IAAI,EAAE;KACN,KAAK,CAAC,KAAK,CAAC;KACZ,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAEhC,MAAM,4BAA4B,GAAG,CAC1C,GAAW,EACX,EAAE,WAAW,EAA2B,EAChC,EAAE;IACV,MAAM,WAAW,GAAG,UAAU,WAAW,GAAG,CAAC;IAC7C,MAAM,UAAU,GAAG,GAAG;SACnB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;SACpC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/C,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAE/B,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAClD,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,kBAAkB,GAAG,IAAI,CAAC;QAC1B,OAAO,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;YAChC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,MAAM,gBAAgB,GAAG,UAAU,CAAC,IAAI,CACtC,CAAC,SAAS,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,aAAa,CAChF,CAAC;QACF,MAAM,cAAc,GAAG,gBAAgB;YACrC,CAAC,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9C,CAAC,CAAC,EAAE,CAAC;QACP,cAAc,CAAC,IAAI,CACjB,CAAC,YAAY,EAAE,GAAG,cAAc,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CACzD,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC,CAAC;AApCW,QAAA,4BAA4B,gCAoCvC;AAEF,MAAM,gBAAgB,GAAG,CAAC,KAAyB,EAAU,EAAE,CAC7D,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AAE1D,qFAAqF;AAC9E,MAAM,yBAAyB,GAAG,CAAC,EACxC,MAAM,EACN,MAAM,EACN,WAAW,GACiB,EAAW,EAAE;IACzC,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAChE,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1E,OAAO,CACL,gBAAgB,CAAC,QAAQ,CAAC,WAAW,CAAC;QACtC,qBAAqB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAC5C,CAAC;AACJ,CAAC,CAAC;AAfW,QAAA,yBAAyB,6BAepC;AAEF,mEAAmE;AAC5D,MAAM,mBAAmB,GAAG,CACjC,IAAY,EACZ,UAAyC,EAAE,EACnC,EAAE;IACV,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,gCAAwB,GAAG,CAAC,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,IAAA,iCAAyB,EAAC,OAAO,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC7C,IAAI,SAAS,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACvD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,MAAM,SAAS,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,MAAM,SAAS,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;AAC5B,CAAC,CAAC;AApBW,QAAA,mBAAmB,uBAoB9B;AAEK,MAAM,qBAAqB,GAAG,CAAC,GAAoB,EAAW,EAAE,CACrE,GAAG,CAAC,MAAM,KAAK,KAAK;IACpB,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAF9D,QAAA,qBAAqB,yBAEyC"}

package/dist/proxy-middleware/proxy-config.d.ts

@@ -1,5 +1,9 @@
 import type { IncomingMessage, ServerResponse } from 'http';
-export declare const createUserDevServerProxy: (userPort: number, userHost?: string) => {
+export declare const markPreviewBridgeDocumentUncacheable: (proxyRes: IncomingMessage) => void;
+export declare const createUserDevServerProxy: (userPort: number, userHost?: string, options?: {
+    isPreviewBridgeEnabled?: boolean;
+    expectedPreviewParentOrigin?: string;
+}) => {
     middleware: import("http-proxy-middleware").RequestHandler<IncomingMessage, ServerResponse<IncomingMessage>, (err?: any) => void>;
     setVariantTarget: (port: number | null) => void;
 };

package/dist/proxy-middleware/proxy-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy-config.d.ts","sourceRoot":"","sources":["../../src/proxy-middleware/proxy-config.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAiB,MAAM,MAAM,CAAC;AAiB3E,eAAO,MAAM,wBAAwB,GACnC,UAAU,MAAM,EAChB,WAAU,MAAoB;;6BA+BE,MAAM,GAAG,IAAI;CA4I9C,CAAC"}
+{"version":3,"file":"proxy-config.d.ts","sourceRoot":"","sources":["../../src/proxy-middleware/proxy-config.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAiB,MAAM,MAAM,CAAC;AAwB3E,eAAO,MAAM,oCAAoC,GAC/C,UAAU,eAAe,KACxB,IAEF,CAAC;AAEF,eAAO,MAAM,wBAAwB,GACnC,UAAU,MAAM,EAChB,WAAU,MAAoB,EAC9B,UAAS;IACP,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,2BAA2B,CAAC,EAAE,MAAM,CAAC;CACjC;;6BAgC0B,MAAM,GAAG,IAAI;CAkM9C,CAAC"}

package/dist/proxy-middleware/proxy-config.js

@@ -1,8 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createUserDevServerProxy = void 0;
+exports.createUserDevServerProxy = exports.markPreviewBridgeDocumentUncacheable = void 0;
 const http_proxy_middleware_1 = require("http-proxy-middleware");
+const crypto_1 = require("crypto");
 const logger_1 = require("../utils/logger");
+const preview_bridge_1 = require("./preview-bridge");
 const log = (0, logger_1.createLogger)('ProxyConfig');
 /**
  * Satisfies http-proxy-middleware's required `target` option; real routing is
@@ -11,9 +13,14 @@ const log = (0, logger_1.createLogger)('ProxyConfig');
  */
 const PROXY_LIBRARY_PLACEHOLDER_TARGET = 'http://127.0.0.1:9';
 const hasValidUserDevPort = (userPort) => Number.isInteger(userPort) && userPort > 0;
-const createUserDevServerProxy = (userPort, userHost = 'localhost') => {
+const markPreviewBridgeDocumentUncacheable = (proxyRes) => {
+    proxyRes.headers['cache-control'] = 'no-cache, no-store';
+};
+exports.markPreviewBridgeDocumentUncacheable = markPreviewBridgeDocumentUncacheable;
+const createUserDevServerProxy = (userPort, userHost = 'localhost', options = {}) => {
     let variantTarget = null;
     const hasDefaultUpstream = hasValidUserDevPort(userPort);
+    const isPreviewBridgeEnabled = options.isPreviewBridgeEnabled ?? false;
     const defaultTarget = hasDefaultUpstream
         ? `http://${userHost}:${userPort}`
         : null;
@@ -45,25 +52,58 @@ const createUserDevServerProxy = (userPort, userHost = 'localhost') => {
         const nextLabel = next ?? defaultTarget ?? '(none)';
         log.info(`setVariantTarget: ${prior} → ${nextLabel}`);
     };
-    const proxyOptions = {
+    const prepareProxyResponseHeaders = (proxyRes) => {
+        // Allow iframe embedding by removing restrictive security headers
+        delete proxyRes.headers['x-frame-options'];
+        delete proxyRes.headers['content-security-policy-report-only'];
+        // Update Content-Security-Policy to allow iframe embedding
+        if (proxyRes.headers['content-security-policy']) {
+            const csp = proxyRes.headers['content-security-policy'];
+            if (typeof csp === 'string') {
+                // Remove frame-ancestors to allow embedding anywhere during development
+                proxyRes.headers['content-security-policy'] = csp.replace(/frame-ancestors[^;]*;?/, '');
+            }
+        }
+    };
+    const allowBridgeScriptInCsp = (proxyRes, scriptNonce) => {
+        const csp = proxyRes.headers['content-security-policy'];
+        if (typeof csp === 'string') {
+            proxyRes.headers['content-security-policy'] = (0, preview_bridge_1.allowPreviewBridgeNonceInCsp)(csp, { scriptNonce });
+            return;
+        }
+        if (Array.isArray(csp)) {
+            proxyRes.headers['content-security-policy'] = csp.map((value) => (0, preview_bridge_1.allowPreviewBridgeNonceInCsp)(value, { scriptNonce }));
+        }
+    };
+    const createProxyOptions = (isHtmlTransformProxy) => ({
         target: defaultTarget ?? PROXY_LIBRARY_PLACEHOLDER_TARGET,
         router: () => getRouterTargetForLibrary(),
         changeOrigin: true,
+        selfHandleResponse: isHtmlTransformProxy,
         // No path rewriting needed when proxying all routes by default
         on: {
-            proxyRes: (proxyRes, _req, _res) => {
-                // Allow iframe embedding by removing restrictive security headers
-                delete proxyRes.headers['x-frame-options'];
-                delete proxyRes.headers['content-security-policy-report-only'];
-                // Update Content-Security-Policy to allow iframe embedding
-                if (proxyRes.headers['content-security-policy']) {
-                    const csp = proxyRes.headers['content-security-policy'];
-                    if (typeof csp === 'string') {
-                        // Remove frame-ancestors to allow embedding anywhere during development
-                        proxyRes.headers['content-security-policy'] = csp.replace(/frame-ancestors[^;]*;?/, '');
+            proxyRes: isHtmlTransformProxy
+                ? (0, http_proxy_middleware_1.responseInterceptor)(async (responseBuffer, proxyRes, req, _res) => {
+                    prepareProxyResponseHeaders(proxyRes);
+                    const contentType = proxyRes.headers['content-type'];
+                    if (!(0, preview_bridge_1.shouldInjectPreviewBridge)({
+                        method: req.method,
+                        accept: req.headers.accept,
+                        contentType,
+                    })) {
+                        return responseBuffer;
                     }
-                }
-            },
+                    const scriptNonce = (0, crypto_1.randomBytes)(16).toString('base64');
+                    allowBridgeScriptInCsp(proxyRes, scriptNonce);
+                    (0, exports.markPreviewBridgeDocumentUncacheable)(proxyRes);
+                    return (0, preview_bridge_1.injectPreviewBridge)(responseBuffer.toString('utf8'), {
+                        expectedParentOrigin: options.expectedPreviewParentOrigin,
+                        scriptNonce,
+                    });
+                })
+                : (proxyRes, _req, _res) => {
+                    prepareProxyResponseHeaders(proxyRes);
+                },
             proxyReq: (proxyReq, req, _res) => {
                 // Preserve the original host for Next.js Server Actions
                 // Next.js checks that x-forwarded-host matches the origin header
@@ -94,8 +134,9 @@ const createUserDevServerProxy = (userPort, userHost = 'localhost') => {
         // Timeout configurations
         proxyTimeout: 30_000, // In MS
         timeout: 30_000, // In MS
-    };
-    const proxyMiddlewareInstance = (0, http_proxy_middleware_1.createProxyMiddleware)(proxyOptions);
+    });
+    const proxyMiddlewareInstance = (0, http_proxy_middleware_1.createProxyMiddleware)(createProxyOptions(false));
+    const htmlTransformProxyMiddlewareInstance = (0, http_proxy_middleware_1.createProxyMiddleware)(createProxyOptions(true));
     const gatedHttp = (req, res, next) => {
         const upstream = getActiveUpstream();
         if (upstream === null) {
@@ -109,7 +150,10 @@ const createUserDevServerProxy = (userPort, userHost = 'localhost') => {
             }
             return;
         }
-        void proxyMiddlewareInstance(req, res, next);
+        const middleware = isPreviewBridgeEnabled && (0, preview_bridge_1.isHtmlDocumentRequest)(req)
+            ? htmlTransformProxyMiddlewareInstance
+            : proxyMiddlewareInstance;
+        void middleware(req, res, next);
     };
     const gated = gatedHttp;
     gated.upgrade = (req, socket, head) => {

package/dist/proxy-middleware/proxy-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"proxy-config.js","sourceRoot":"","sources":["../../src/proxy-middleware/proxy-config.ts"],"names":[],"mappings":";;;AAAA,iEAG+B;AAG/B,4CAA+C;AAG/C,MAAM,GAAG,GAAG,IAAA,qBAAY,EAAC,aAAa,CAAC,CAAC;AAExC;;;;GAIG;AACH,MAAM,gCAAgC,GAAG,oBAAoB,CAAC;AAE9D,MAAM,mBAAmB,GAAG,CAAC,QAAgB,EAAW,EAAE,CACxD,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC;AAEtC,MAAM,wBAAwB,GAAG,CACtC,QAAgB,EAChB,WAAmB,WAAW,EAC9B,EAAE;IACF,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,kBAAkB;QACtC,CAAC,CAAC,UAAU,QAAQ,IAAI,QAAQ,EAAE;QAClC,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,iBAAiB,GAAG,GAAkB,EAAE,CAC5C,aAAa,IAAI,aAAa,IAAI,IAAI,CAAC;IAEzC,MAAM,yBAAyB,GAAG,GAAW,EAAE,CAC7C,iBAAiB,EAAE,IAAI,gCAAgC,CAAC;IAE1D,MAAM,mBAAmB,GAAG,GAAoB,EAAE;QAChD,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;gBACnD,OAAO,UAAU,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;QACD,OAAO,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC;IACpD,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,CAAC,IAAmB,EAAE,EAAE;QAC/C,MAAM,KAAK,GAAG,aAAa,IAAI,aAAa,IAAI,QAAQ,CAAC;QACzD,MAAM,IAAI,GACR,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC;YACjD,CAAC,CAAC,oBAAoB,IAAI,EAAE;YAC5B,CAAC,CAAC,IAAI,CAAC;QACX,aAAa,GAAG,IAAI,CAAC;QACrB,MAAM,SAAS,GAAG,IAAI,IAAI,aAAa,IAAI,QAAQ,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,qBAAqB,KAAK,MAAM,SAAS,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC;IAEF,MAAM,YAAY,GAAY;QAC5B,MAAM,EAAE,aAAa,IAAI,gCAAgC;QACzD,MAAM,EAAE,GAAG,EAAE,CAAC,yBAAyB,EAAE;QACzC,YAAY,EAAE,IAAI;QAClB,+DAA+D;QAC/D,EAAE,EAAE;YACF,QAAQ,EAAE,CACR,QAAyB,EACzB,IAAqB,EACrB,IAAoB,EACpB,EAAE;gBACF,kEAAkE;gBAClE,OAAO,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;gBAC3C,OAAO,QAAQ,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;gBAE/D,2DAA2D;gBAC3D,IAAI,QAAQ,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,CAAC;oBAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;oBACxD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;wBAC5B,wEAAwE;wBACxE,QAAQ,CAAC,OAAO,CAAC,yBAAyB,CAAC,GAAG,GAAG,CAAC,OAAO,CACvD,wBAAwB,EACxB,EAAE,CACH,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YACD,QAAQ,EAAE,CACR,QAAuB,EACvB,GAAoB,EACpB,IAAoB,EACpB,EAAE;gBACF,wDAAwD;gBACxD,iEAAiE;gBACjE,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;oBACrB,QAAQ,CAAC,SAAS,CAAC,kBAAkB,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC3D,CAAC;gBAED,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC;gBAC7B,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC;gBAClC,GAAG,CAAC,KAAK,CACP,YAAY,GAAG,CAAC,MAAM,IAAI,YAAY,OAAO,WAAW,OAAO,yBAAyB,EAAE,EAAE,CAC7F,CAAC;YACJ,CAAC;YACD,KAAK,EAAE,CACL,GAAU,EACV,GAAoB,EACpB,GAA6C,EAC7C,EAAE;gBACF,GAAG,CAAC,IAAI,CAAC,mBAAmB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBACnE,wDAAwD;gBACxD,IAAI,GAAG,IAAI,WAAW,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBAClD,6EAA6E;oBAC7E,sFAAsF;oBACtF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,aAAa;wBACpB,OAAO,EAAE,mDAAmD,mBAAmB,EAAE,EAAE;wBACnF,OAAO,EAAE,GAAG,CAAC,OAAO;qBACrB,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;SACF;QACD,2DAA2D;QAC3D,EAAE,EAAE,IAAI;QACR,yBAAyB;QACzB,YAAY,EAAE,MAAM,EAAE,QAAQ;QAC9B,OAAO,EAAE,MAAM,EAAE,QAAQ;KAC1B,CAAC;IAEF,MAAM,uBAAuB,GAAG,IAAA,6CAAqB,EAAC,YAAY,CAAC,CAAC;IAGpE,MAAM,SAAS,GAAG,CAChB,GAAoB,EACpB,GAAmB,EACnB,IAAkB,EACZ,EAAE;QACR,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;QACrC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,WAAW,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC3C,GAAG,CAAC,KAAK,CACP,6DAA6D,QAAQ,IAAI,CAC1E,CAAC;gBACF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,qBAAqB;oBAC5B,OAAO,EACL,+FAA+F;iBAClG,CAAC,CACH,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,SAAwC,CAAC;IACvD,KAAK,CAAC,OAAO,GAAG,CACd,GAAoB,EACpB,MAAc,EACd,IAAY,EACN,EAAE;QACR,IAAI,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC;YACjC,GAAG,CAAC,KAAK,CACP,uDAAuD,QAAQ,IAAI,CACpE,CAAC;YACF,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,uBAAuB,CAAC,OAAO,EAAE,CAAC;YACpC,uBAAuB,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QACD,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC;IAEF,IAAI,kBAAkB,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,sCAAsC,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CACN,wDAAwD,QAAQ,sCAAsC,CACvG,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;AACjD,CAAC,CAAC;AA7KW,QAAA,wBAAwB,4BA6KnC"}
+{"version":3,"file":"proxy-config.js","sourceRoot":"","sources":["../../src/proxy-middleware/proxy-config.ts"],"names":[],"mappings":";;;AAAA,iEAI+B;AAG/B,mCAAqC;AACrC,4CAA+C;AAE/C,qDAK0B;AAE1B,MAAM,GAAG,GAAG,IAAA,qBAAY,EAAC,aAAa,CAAC,CAAC;AAExC;;;;GAIG;AACH,MAAM,gCAAgC,GAAG,oBAAoB,CAAC;AAE9D,MAAM,mBAAmB,GAAG,CAAC,QAAgB,EAAW,EAAE,CACxD,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC;AAEtC,MAAM,oCAAoC,GAAG,CAClD,QAAyB,EACnB,EAAE;IACR,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,oBAAoB,CAAC;AAC3D,CAAC,CAAC;AAJW,QAAA,oCAAoC,wCAI/C;AAEK,MAAM,wBAAwB,GAAG,CACtC,QAAgB,EAChB,WAAmB,WAAW,EAC9B,UAGI,EAAE,EACN,EAAE;IACF,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,IAAI,KAAK,CAAC;IACvE,MAAM,aAAa,GAAG,kBAAkB;QACtC,CAAC,CAAC,UAAU,QAAQ,IAAI,QAAQ,EAAE;QAClC,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,iBAAiB,GAAG,GAAkB,EAAE,CAC5C,aAAa,IAAI,aAAa,IAAI,IAAI,CAAC;IAEzC,MAAM,yBAAyB,GAAG,GAAW,EAAE,CAC7C,iBAAiB,EAAE,IAAI,gCAAgC,CAAC;IAE1D,MAAM,mBAAmB,GAAG,GAAoB,EAAE;QAChD,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;gBACnD,OAAO,UAAU,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;QACD,OAAO,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC;IACpD,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,CAAC,IAAmB,EAAE,EAAE;QAC/C,MAAM,KAAK,GAAG,aAAa,IAAI,aAAa,IAAI,QAAQ,CAAC;QACzD,MAAM,IAAI,GACR,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC;YACjD,CAAC,CAAC,oBAAoB,IAAI,EAAE;YAC5B,CAAC,CAAC,IAAI,CAAC;QACX,aAAa,GAAG,IAAI,CAAC;QACrB,MAAM,SAAS,GAAG,IAAI,IAAI,aAAa,IAAI,QAAQ,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,qBAAqB,KAAK,MAAM,SAAS,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC;IAEF,MAAM,2BAA2B,GAAG,CAAC,QAAyB,EAAE,EAAE;QAChE,kEAAkE;QAClE,OAAO,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC3C,OAAO,QAAQ,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;QAE/D,2DAA2D;QAC3D,IAAI,QAAQ,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;YACxD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,wEAAwE;gBACxE,QAAQ,CAAC,OAAO,CAAC,yBAAyB,CAAC,GAAG,GAAG,CAAC,OAAO,CACvD,wBAAwB,EACxB,EAAE,CACH,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,sBAAsB,GAAG,CAC7B,QAAyB,EACzB,WAAmB,EACnB,EAAE;QACF,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;QACxD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,QAAQ,CAAC,OAAO,CAAC,yBAAyB,CAAC,GAAG,IAAA,6CAA4B,EACxE,GAAG,EACH,EAAE,WAAW,EAAE,CAChB,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,QAAQ,CAAC,OAAO,CAAC,yBAAyB,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9D,IAAA,6CAA4B,EAAC,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,CACrD,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,CAAC,oBAA6B,EAAW,EAAE,CAAC,CAAC;QACtE,MAAM,EAAE,aAAa,IAAI,gCAAgC;QACzD,MAAM,EAAE,GAAG,EAAE,CAAC,yBAAyB,EAAE;QACzC,YAAY,EAAE,IAAI;QAClB,kBAAkB,EAAE,oBAAoB;QACxC,+DAA+D;QAC/D,EAAE,EAAE;YACF,QAAQ,EAAE,oBAAoB;gBAC5B,CAAC,CAAC,IAAA,2CAAmB,EAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;oBAChE,2BAA2B,CAAC,QAAQ,CAAC,CAAC;oBACtC,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;oBACrD,IACE,CAAC,IAAA,0CAAyB,EAAC;wBACzB,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;wBAC1B,WAAW;qBACZ,CAAC,EACF,CAAC;wBACD,OAAO,cAAc,CAAC;oBACxB,CAAC;oBACD,MAAM,WAAW,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACvD,sBAAsB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;oBAC9C,IAAA,4CAAoC,EAAC,QAAQ,CAAC,CAAC;oBAC/C,OAAO,IAAA,oCAAmB,EAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;wBAC1D,oBAAoB,EAAE,OAAO,CAAC,2BAA2B;wBACzD,WAAW;qBACZ,CAAC,CAAC;gBACL,CAAC,CAAC;gBACJ,CAAC,CAAC,CACE,QAAyB,EACzB,IAAqB,EACrB,IAAoB,EACpB,EAAE;oBACF,2BAA2B,CAAC,QAAQ,CAAC,CAAC;gBACxC,CAAC;YACL,QAAQ,EAAE,CACR,QAAuB,EACvB,GAAoB,EACpB,IAAoB,EACpB,EAAE;gBACF,wDAAwD;gBACxD,iEAAiE;gBACjE,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;oBACrB,QAAQ,CAAC,SAAS,CAAC,kBAAkB,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC3D,CAAC;gBAED,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC;gBAC7B,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC;gBAClC,GAAG,CAAC,KAAK,CACP,YAAY,GAAG,CAAC,MAAM,IAAI,YAAY,OAAO,WAAW,OAAO,yBAAyB,EAAE,EAAE,CAC7F,CAAC;YACJ,CAAC;YACD,KAAK,EAAE,CACL,GAAU,EACV,GAAoB,EACpB,GAA6C,EAC7C,EAAE;gBACF,GAAG,CAAC,IAAI,CAAC,mBAAmB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBACnE,wDAAwD;gBACxD,IAAI,GAAG,IAAI,WAAW,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBAClD,6EAA6E;oBAC7E,sFAAsF;oBACtF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,aAAa;wBACpB,OAAO,EAAE,mDAAmD,mBAAmB,EAAE,EAAE;wBACnF,OAAO,EAAE,GAAG,CAAC,OAAO;qBACrB,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;SACF;QACD,2DAA2D;QAC3D,EAAE,EAAE,IAAI;QACR,yBAAyB;QACzB,YAAY,EAAE,MAAM,EAAE,QAAQ;QAC9B,OAAO,EAAE,MAAM,EAAE,QAAQ;KAC1B,CAAC,CAAC;IAEH,MAAM,uBAAuB,GAAG,IAAA,6CAAqB,EACnD,kBAAkB,CAAC,KAAK,CAAC,CAC1B,CAAC;IACF,MAAM,oCAAoC,GAAG,IAAA,6CAAqB,EAChE,kBAAkB,CAAC,IAAI,CAAC,CACzB,CAAC;IAGF,MAAM,SAAS,GAAG,CAChB,GAAoB,EACpB,GAAmB,EACnB,IAAkB,EACZ,EAAE;QACR,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;QACrC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,WAAW,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC3C,GAAG,CAAC,KAAK,CACP,6DAA6D,QAAQ,IAAI,CAC1E,CAAC;gBACF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,qBAAqB;oBAC5B,OAAO,EACL,+FAA+F;iBAClG,CAAC,CACH,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,UAAU,GACd,sBAAsB,IAAI,IAAA,sCAAqB,EAAC,GAAG,CAAC;YAClD,CAAC,CAAC,oCAAoC;YACtC,CAAC,CAAC,uBAAuB,CAAC;QAC9B,KAAK,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,SAAwC,CAAC;IACvD,KAAK,CAAC,OAAO,GAAG,CACd,GAAoB,EACpB,MAAc,EACd,IAAY,EACN,EAAE;QACR,IAAI,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC;YACjC,GAAG,CAAC,KAAK,CACP,uDAAuD,QAAQ,IAAI,CACpE,CAAC;YACF,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,uBAAuB,CAAC,OAAO,EAAE,CAAC;YACpC,uBAAuB,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QACD,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC;IAEF,IAAI,kBAAkB,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,sCAAsC,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CACN,wDAAwD,QAAQ,sCAAsC,CACvG,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;AACjD,CAAC,CAAC;AAxOW,QAAA,wBAAwB,4BAwOnC"}

package/dist/routes/mcp.d.ts

@@ -11,5 +11,7 @@ import type { AgentVariantsOrchestrator } from '../mcp/agent-variants';
  * provided, the intake rejects new variant-request batches while a variants
  * session is already active for the current project.
  */
-export declare const createMCPRouter: (bridge: SessionBridgeService, telemetry?: TelemetryService, agentVariantsOrchestrator?: AgentVariantsOrchestrator) => Router;
+export declare const createMCPRouter: (bridge: SessionBridgeService, telemetry?: TelemetryService, agentVariantsOrchestrator?: AgentVariantsOrchestrator, options?: {
+    queueAccessToken?: string;
+}) => Router;
 //# sourceMappingURL=mcp.d.ts.map

package/dist/routes/mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/routes/mcp.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAOrE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAyQvE;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,GAC1B,QAAQ,oBAAoB,EAC5B,YAAY,gBAAgB,EAC5B,4BAA4B,yBAAyB,KACpD,MA8PF,CAAC"}
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/routes/mcp.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAOrE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AA+RvE;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,GAC1B,QAAQ,oBAAoB,EAC5B,YAAY,gBAAgB,EAC5B,4BAA4B,yBAAyB,EACrD,UAAS;IAAE,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAO,KAC1C,MA2QF,CAAC"}

package/dist/routes/mcp.js

@@ -40,8 +40,10 @@ const path = __importStar(require("path"));
 const express_1 = require("express");
 const v3_1 = require("zod/v3");
 const index_core_1 = require("../index-core");
+const elementFileHintSignals_1 = require("../utils/elementFileHintSignals");
 const contracts_1 = require("../mcp/agent-variants/contracts");
 const changeBatchClassification_1 = require("../mcp/changeBatchClassification");
+const queueAccess_1 = require("../utils/queueAccess");
 const log = (0, index_core_1.createLogger)('MCPRoutes');
 const MAX_FILE_MATCHES_PER_ELEMENT = 6;
 const elementRefSchema = v3_1.z.object({
@@ -51,6 +53,22 @@ const elementRefSchema = v3_1.z.object({
     id: v3_1.z.string(),
     filePaths: v3_1.z.array(v3_1.z.string()),
     rivetId: v3_1.z.string().optional(),
+    textContent: v3_1.z.string().optional(),
+    attributes: v3_1.z.record(v3_1.z.string()).optional(),
+    componentTree: v3_1.z
+        .array(v3_1.z.object({
+        name: v3_1.z.string(),
+        type: v3_1.z.string().optional(),
+        depth: v3_1.z.number().optional(),
+    }))
+        .optional(),
+    parentElementSummary: v3_1.z
+        .object({
+        tagName: v3_1.z.string(),
+        className: v3_1.z.string(),
+        textSnippet: v3_1.z.string(),
+    })
+        .optional(),
 });
 const variantRequestSchema = v3_1.z.object({
     count: v3_1.z
@@ -134,11 +152,13 @@ async function enrichChangeRequest(request, projectPath) {
     const refsToEnrich = [];
     for (const item of request.changes) {
         if ('element' in item && item.element.filePaths.length === 0) {
-            refsToEnrich.push(item.element);
+            if ((0, elementFileHintSignals_1.shouldSearchElementFileHints)(item.element)) {
+                refsToEnrich.push(item.element);
+            }
         }
         if ('elements' in item && item.elements) {
             for (const el of item.elements) {
-                if (el.filePaths.length === 0) {
+                if (el.filePaths.length === 0 && (0, elementFileHintSignals_1.shouldSearchElementFileHints)(el)) {
                     refsToEnrich.push(el);
                 }
             }
@@ -258,7 +278,7 @@ function resolveCommentReference(ref, orchestrator, projectPath) {
  * provided, the intake rejects new variant-request batches while a variants
  * session is already active for the current project.
  */
-const createMCPRouter = (bridge, telemetry, agentVariantsOrchestrator) => {
+const createMCPRouter = (bridge, telemetry, agentVariantsOrchestrator, options = {}) => {
     const router = (0, express_1.Router)();
     /**
      * Queue a ChangeRequest from the Rivet UI for retrieval by the MCP client.
@@ -269,6 +289,16 @@ const createMCPRouter = (bridge, telemetry, agentVariantsOrchestrator) => {
             res.status(400).json({ error: 'No active MCP session' });
             return;
         }
+        if (!(0, queueAccess_1.isQueueAccessAuthorized)({
+            queueAccessToken: options.queueAccessToken,
+            getHeader: (name) => req.header(name),
+        })) {
+            res.status(403).json({
+                error: 'Queue access denied',
+                reason: 'queue_token_required',
+            });
+            return;
+        }
         const parsed = changeRequestSchema.safeParse(req.body);
         if (!parsed.success) {
             res.status(400).json({