rivet-design 0.17.4 → 0.18.0

package/dist/agent-variants/previewQa.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"previewQa.d.ts","sourceRoot":"","sources":["../../src/agent-variants/previewQa.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,WAAW,gBAAgB;IAC/B,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC5B;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY,GACvB,OAAO,cAAc,KACpB,OAAO,CAAC,eAAe,CAuBzB,CAAC"}
+{"version":3,"file":"previewQa.d.ts","sourceRoot":"","sources":["../../src/agent-variants/previewQa.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC5B;AAED,eAAO,MAAM,YAAY,GACvB,OAAO,cAAc,KACpB,OAAO,CAAC,eAAe,CAuBzB,CAAC"}

package/dist/agent-variants/previewQa.js

@@ -1,11 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runPreviewQa = void 0;
-/**
- * Verifies that a worker produced a non-empty static preview artifact.
- * Project-native checks remain the worker's responsibility; Rivet does not
- * infer runtime validity by inspecting the artifact's implementation details.
- */
 const runPreviewQa = async (input) => {
     const source = input.options?.source;
     if (typeof input.html !== 'string' || input.html.trim().length === 0) {

package/dist/agent-variants/previewQa.js.map

@@ -1 +1 @@
-{"version":3,"file":"previewQa.js","sourceRoot":"","sources":["../../src/agent-variants/previewQa.ts"],"names":[],"mappings":";;;AAYA;;;;GAIG;AACI,MAAM,YAAY,GAAG,KAAK,EAC/B,KAAqB,EACK,EAAE;IAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;IACrC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrE,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN;oBACE,IAAI,EAAE,qBAAqB;oBAC3B,MAAM,EAAE,MAAM,IAAI,QAAQ;oBAC1B,OAAO,EAAE,wBAAwB;iBAClC;aACF;YACD,OAAO,EAAE,gDAAgD;YACzD,aAAa,EAAE,MAAM;SACtB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,2BAA2B;QACpC,aAAa,EAAE,MAAM;KACtB,CAAC;AACJ,CAAC,CAAC;AAzBW,QAAA,YAAY,gBAyBvB"}
+{"version":3,"file":"previewQa.js","sourceRoot":"","sources":["../../src/agent-variants/previewQa.ts"],"names":[],"mappings":";;;AAWO,MAAM,YAAY,GAAG,KAAK,EAC/B,KAAqB,EACK,EAAE;IAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;IACrC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrE,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN;oBACE,IAAI,EAAE,qBAAqB;oBAC3B,MAAM,EAAE,MAAM,IAAI,QAAQ;oBAC1B,OAAO,EAAE,wBAAwB;iBAClC;aACF;YACD,OAAO,EAAE,gDAAgD;YACzD,aAAa,EAAE,MAAM;SACtB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,2BAA2B;QACpC,aAAa,EAAE,MAAM;KACtB,CAAC;AACJ,CAAC,CAAC;AAzBW,QAAA,YAAY,gBAyBvB"}

package/dist/agent-variants/runLabel.d.ts

@@ -1,18 +1,3 @@
-/**
- * Derive a short run label from the prompt for human-direct starts. Every
- * variant in a run shares this label so the user can tell which prompt a
- * direction came from.
- *
- * Deterministic (no LLM): strip a leading command phrase ("make it", "add a",
- * …), truncate at the first conjunction so only the primary intent survives
- * ("brighter and more vibrant" → "brighter"), drop filler words, and
- * title-case the first 1–2 content words.
- *
- * Examples:
- *   "make it brighter and more vibrant" → "Brighter"
- *   "add a sticky header"               → "Sticky Header"
- *   "dark mode"                         → "Dark Mode"
- */
 export declare const RUN_LABEL_MAX_LENGTH = 24;
 export declare const RUN_LABEL_MAX_WORDS = 3;
 export declare function deriveRunLabel(prompt: string): string;

package/dist/agent-variants/runLabel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runLabel.d.ts","sourceRoot":"","sources":["../../src/agent-variants/runLabel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAmGH,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAerC,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CA2BrD"}
+{"version":3,"file":"runLabel.d.ts","sourceRoot":"","sources":["../../src/agent-variants/runLabel.ts"],"names":[],"mappings":"AA8FA,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAerC,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CA2BrD"}

package/dist/agent-variants/runLabel.js

@@ -1,24 +1,7 @@
 "use strict";
-/**
- * Derive a short run label from the prompt for human-direct starts. Every
- * variant in a run shares this label so the user can tell which prompt a
- * direction came from.
- *
- * Deterministic (no LLM): strip a leading command phrase ("make it", "add a",
- * …), truncate at the first conjunction so only the primary intent survives
- * ("brighter and more vibrant" → "brighter"), drop filler words, and
- * title-case the first 1–2 content words.
- *
- * Examples:
- *   "make it brighter and more vibrant" → "Brighter"
- *   "add a sticky header"               → "Sticky Header"
- *   "dark mode"                         → "Dark Mode"
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RUN_LABEL_MAX_WORDS = exports.RUN_LABEL_MAX_LENGTH = void 0;
 exports.deriveRunLabel = deriveRunLabel;
-// Leading imperative phrasing that carries no intent — stripped from the front.
-// Longest-first so "make it" wins over "make".
 const LEADING_COMMANDS = [
     'turn it into',
     'i would like',
@@ -67,7 +50,6 @@ const LEADING_COMMANDS = [
     'rework the',
     'rework',
 ];
-// Words that split the primary intent from secondary clauses — stop here.
 const CONJUNCTIONS = new Set([
     'and',
     'or',
@@ -78,7 +60,6 @@ const CONJUNCTIONS = new Set([
     'while',
     'so',
 ]);
-// Low-signal words dropped from the chosen tokens.
 const FILLER = new Set([
     'it',
     'its',

package/dist/agent-variants/runLabel.js.map

@@ -1 +1 @@
-{"version":3,"file":"runLabel.js","sourceRoot":"","sources":["../../src/agent-variants/runLabel.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAmHH,wCA2BC;AA5ID,gFAAgF;AAChF,+CAA+C;AAC/C,MAAM,gBAAgB,GAAG;IACvB,cAAc;IACd,cAAc;IACd,cAAc;IACd,SAAS;IACT,UAAU;IACV,MAAM;IACN,SAAS;IACT,UAAU;IACV,MAAM;IACN,SAAS;IACT,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,OAAO;IACP,MAAM;IACN,SAAS;IACT,UAAU;IACV,MAAM;IACN,OAAO;IACP,QAAQ;IACR,KAAK;IACL,UAAU;IACV,WAAW;IACX,QAAQ;IACR,SAAS;IACT,UAAU;IACV,OAAO;IACP,YAAY;IACZ,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,cAAc;IACd,UAAU;IACV,aAAa;IACb,SAAS;IACT,cAAc;IACd,UAAU;IACV,WAAW;IACX,OAAO;IACP,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,KAAK;IACL,YAAY;IACZ,QAAQ;CACT,CAAC;AAEF,0EAA0E;AAC1E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,KAAK;IACL,IAAI;IACJ,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,IAAI;CACL,CAAC,CAAC;AAEH,mDAAmD;AACnD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC;IACrB,IAAI;IACJ,KAAK;IACL,MAAM;IACN,KAAK;IACL,GAAG;IACH,IAAI;IACJ,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,KAAK;IACL,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,KAAK;IACL,SAAS;IACT,KAAK;CACN,CAAC,CAAC;AAEU,QAAA,oBAAoB,GAAG,EAAE,CAAC;AAC1B,QAAA,mBAAmB,GAAG,CAAC,CAAC;AAErC,MAAM,SAAS,GAAG,CAAC,KAAe,EAAU,EAAE;IAC5C,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACrC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACpD,CAAC;IACF,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE;QACnE,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,OAAO,SAAS,CAAC,MAAM,IAAI,4BAAoB;YAC7C,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC;YACrB,CAAC,CAAC,QAAQ,CAAC;IACf,CAAC,EAAE,EAAE,CAAC,CAAC;IACP,OAAO,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACxD,CAAC,CAAC;AAEF,SAAgB,cAAc,CAAC,MAAc;IAC3C,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,UAAU,CAAC;IAC5B,IAAI,IAAI,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAExD,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC;YAC/B,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACrC,MAAM;QACR,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,MAAM;QAC/B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC;IAC3C,CAAC;IACD,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"runLabel.js","sourceRoot":"","sources":["../../src/agent-variants/runLabel.ts"],"names":[],"mappings":";;;AA8GA,wCA2BC;AAxID,MAAM,gBAAgB,GAAG;IACvB,cAAc;IACd,cAAc;IACd,cAAc;IACd,SAAS;IACT,UAAU;IACV,MAAM;IACN,SAAS;IACT,UAAU;IACV,MAAM;IACN,SAAS;IACT,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,OAAO;IACP,MAAM;IACN,SAAS;IACT,UAAU;IACV,MAAM;IACN,OAAO;IACP,QAAQ;IACR,KAAK;IACL,UAAU;IACV,WAAW;IACX,QAAQ;IACR,SAAS;IACT,UAAU;IACV,OAAO;IACP,YAAY;IACZ,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,cAAc;IACd,UAAU;IACV,aAAa;IACb,SAAS;IACT,cAAc;IACd,UAAU;IACV,WAAW;IACX,OAAO;IACP,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,KAAK;IACL,YAAY;IACZ,QAAQ;CACT,CAAC;AAEF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,KAAK;IACL,IAAI;IACJ,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,IAAI;CACL,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC;IACrB,IAAI;IACJ,KAAK;IACL,MAAM;IACN,KAAK;IACL,GAAG;IACH,IAAI;IACJ,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,KAAK;IACL,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,KAAK;IACL,SAAS;IACT,KAAK;CACN,CAAC,CAAC;AAEU,QAAA,oBAAoB,GAAG,EAAE,CAAC;AAC1B,QAAA,mBAAmB,GAAG,CAAC,CAAC;AAErC,MAAM,SAAS,GAAG,CAAC,KAAe,EAAU,EAAE;IAC5C,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACrC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACpD,CAAC;IACF,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE;QACnE,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,OAAO,SAAS,CAAC,MAAM,IAAI,4BAAoB;YAC7C,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC;YACrB,CAAC,CAAC,QAAQ,CAAC;IACf,CAAC,EAAE,EAAE,CAAC,CAAC;IACP,OAAO,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACxD,CAAC,CAAC;AAEF,SAAgB,cAAc,CAAC,MAAc;IAC3C,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,UAAU,CAAC;IAC5B,IAAI,IAAI,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAExD,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC;YAC/B,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACrC,MAAM;QACR,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,MAAM;QAC/B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC;IAC3C,CAAC;IACD,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC"}

package/dist/agent-variants/runPlan.d.ts

@@ -1,42 +1,4 @@
-/**
- * VariantRunPlan — the single, canonical resolution of "what kind of run is
- * this" for an agent-variants session.
- *
- * Historically the lifecycle policy (work-item topology, how variants are
- * provisioned, how they're committed, how they preview) was re-derived
- * independently at every stage from `projectContext.kind`,
- * `executionPlan.mode`, and framework detection — `SessionStore.approve`,
- * `WorktreeOrchestrator` provisioning, the commit path, and the preview
- * wiring each made the same `kind === 'fresh'` / `mode === 'vite_app'`
- * decisions in their own way. That spread the same handful of facts across
- * dozens of call sites and let them drift.
- *
- * This module collapses those facts into a *closed* discriminated union. There
- * are exactly three legal run shapes:
- *
- *   1. existing project              — clone+diff against the user's tree
- *   2. generated project, static     — inline HTML/CSS/JS, no runtime
- *   3. generated project, app (vite) — scaffolded Vite app with a dev server
- *
- * Every other lifecycle policy (topology / provision / commit) is a pure
- * function of which of those three a session is — see `runPlanPolicy`. Callers
- * resolve the plan once (at `approve` time, the first point where every input
- * is known) and read policy off it, rather than re-deriving from raw context.
- *
- * Preview is deliberately *not* a fixed field of the plan. For generated
- * projects it's determined (static → static_artifact, app → dev_server), but
- * for existing projects it's only known at success time — a `framework:'static'`
- * existing project previews as a materialized static artifact, anything else
- * proxies a dev server. That one genuinely-late decision is exposed via
- * `existingPreviewKind` rather than baked into the plan at resolve time.
- */
 import type { ProjectContext } from './contracts';
-/**
- * The closed set of legal run shapes. Modelled as a discriminated union so the
- * compiler rejects impossible combinations (e.g. an existing project with a
- * `runtime`, or a generated project with no runtime) at construction time —
- * there is no way to hand-assemble an illegal plan.
- */
 export type VariantRunPlan = {
     source: 'existing';
 } | {
@@ -46,62 +8,19 @@ export type VariantRunPlan = {
     source: 'generated';
     runtime: 'app';
 };
-/** How the work items for a run are shaped at approve time. */
-export type RunTopology = 
-/** One `code_gen` item per variant, edited inside a git worktree. Used by
- *  existing projects and (with a `scaffold_base` dependency) generated apps. */
-'code_gen'
-/** One `static_preview` item per variant — inline HTML is the deliverable,
- *  no worktree, no scaffold. Generated-static only. */
- | 'static_preview';
-/** How each variant's working copy is provisioned. */
-export type RunProvision = 
-/** A git worktree cloned from the user's repo (existing projects). */
-'git_worktree'
-/** A scaffolded template worktree under `.rivet-variants` (generated apps). */
- | 'template_worktree'
-/** Nothing — the deliverable is inline HTML (generated-static). */
- | 'none';
-/** How the picked variant is landed when the user commits. */
-export type RunCommit = 
-/** Apply the captured diff to the user's working tree (existing projects). */
-'apply_diff'
-/** Write the static site (HTML + assets) to the destination
- *  (generated-static). */
- | 'write_static_site'
-/** Materialize / rename the whole scaffolded app to the destination
- *  (generated apps). */
- | 'materialize_project';
-/** Preview surface for a generated variant. Existing projects defer this to
- *  success time — see {@link existingPreviewKind}. */
+export type RunTopology = 'code_gen' | 'static_preview';
+export type RunProvision = 'git_worktree' | 'template_worktree' | 'none';
+export type RunCommit = 'apply_diff' | 'write_static_site' | 'materialize_project';
 export type RunPreview = 'static_artifact' | 'dev_server';
 export interface RunPlanPolicy {
     topology: RunTopology;
     provision: RunProvision;
     commit: RunCommit;
-    /** True when the run needs a `scaffold_base` work item gating its
-     *  `code_gen` items (generated Vite apps). */
     needsScaffoldBase: boolean;
-    /** Fixed preview surface when the source determines it; `undefined` for
-     *  existing projects, where it's resolved at success time. */
     preview?: RunPreview;
 }
-/**
- * Resolve the run plan from a project context. This is the single decision
- * point: `source` comes from `projectContext.kind`; for generated projects the
- * `runtime` comes from the agent's reported `executionPlan.mode`, defaulting to
- * `static` for source-less zero-to-one runs (which never report a plan).
- */
 export declare function resolveRunPlan(projectContext: ProjectContext): VariantRunPlan;
-/** Derive the lifecycle policy for a resolved plan. Total over the closed set. */
 export declare function runPlanPolicy(plan: VariantRunPlan): RunPlanPolicy;
-/** Convenience: resolve and derive policy in one step. */
 export declare function resolveRunPlanPolicy(projectContext: ProjectContext): RunPlanPolicy;
-/**
- * Preview surface for an existing-project variant, resolved at success time
- * from whether the variant materialized static files (framework `static`, no
- * dev command) or runs a dev server. Generated projects don't use this — their
- * preview is fixed by {@link runPlanPolicy}.
- */
 export declare function existingPreviewKind(hasStaticFiles: boolean): RunPreview;
 //# sourceMappingURL=runPlan.d.ts.map

package/dist/agent-variants/runPlan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runPlan.d.ts","sourceRoot":"","sources":["../../src/agent-variants/runPlan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,GACtB;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAA;CAAE,GAC1C;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,KAAK,CAAA;CAAE,CAAC;AAE5C,+DAA+D;AAC/D,MAAM,MAAM,WAAW;AACrB;gFACgF;AAC9E,UAAU;AACZ;uDACuD;GACrD,gBAAgB,CAAC;AAErB,sDAAsD;AACtD,MAAM,MAAM,YAAY;AACtB,sEAAsE;AACpE,cAAc;AAChB,+EAA+E;GAC7E,mBAAmB;AACrB,mEAAmE;GACjE,MAAM,CAAC;AAEX,8DAA8D;AAC9D,MAAM,MAAM,SAAS;AACnB,8EAA8E;AAC5E,YAAY;AACd;0BAC0B;GACxB,mBAAmB;AACrB;wBACwB;GACtB,qBAAqB,CAAC;AAE1B;sDACsD;AACtD,MAAM,MAAM,UAAU,GAAG,iBAAiB,GAAG,YAAY,CAAC;AAE1D,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,WAAW,CAAC;IACtB,SAAS,EAAE,YAAY,CAAC;IACxB,MAAM,EAAE,SAAS,CAAC;IAClB;kDAC8C;IAC9C,iBAAiB,EAAE,OAAO,CAAC;IAC3B;kEAC8D;IAC9D,OAAO,CAAC,EAAE,UAAU,CAAC;CACtB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,cAAc,EAAE,cAAc,GAAG,cAAc,CAU7E;AAED,kFAAkF;AAClF,wBAAgB,aAAa,CAAC,IAAI,EAAE,cAAc,GAAG,aAAa,CA2BjE;AAED,0DAA0D;AAC1D,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,cAAc,GAC7B,aAAa,CAEf;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,OAAO,GAAG,UAAU,CAEvE"}
+{"version":3,"file":"runPlan.d.ts","sourceRoot":"","sources":["../../src/agent-variants/runPlan.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,MAAM,cAAc,GACtB;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,GACtB;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAA;CAAE,GAC1C;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,KAAK,CAAA;CAAE,CAAC;AAE5C,MAAM,MAAM,WAAW,GACnB,UAAU,GACV,gBAAgB,CAAC;AAErB,MAAM,MAAM,YAAY,GACpB,cAAc,GACd,mBAAmB,GACnB,MAAM,CAAC;AAEX,MAAM,MAAM,SAAS,GACjB,YAAY,GACZ,mBAAmB,GACnB,qBAAqB,CAAC;AAE1B,MAAM,MAAM,UAAU,GAAG,iBAAiB,GAAG,YAAY,CAAC;AAE1D,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,WAAW,CAAC;IACtB,SAAS,EAAE,YAAY,CAAC;IACxB,MAAM,EAAE,SAAS,CAAC;IAClB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,OAAO,CAAC,EAAE,UAAU,CAAC;CACtB;AAED,wBAAgB,cAAc,CAAC,cAAc,EAAE,cAAc,GAAG,cAAc,CAO7E;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,cAAc,GAAG,aAAa,CAyBjE;AAED,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,cAAc,GAC7B,aAAa,CAEf;AAED,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,OAAO,GAAG,UAAU,CAEvE"}

package/dist/agent-variants/runPlan.js

@@ -1,58 +1,16 @@
 "use strict";
-/**
- * VariantRunPlan — the single, canonical resolution of "what kind of run is
- * this" for an agent-variants session.
- *
- * Historically the lifecycle policy (work-item topology, how variants are
- * provisioned, how they're committed, how they preview) was re-derived
- * independently at every stage from `projectContext.kind`,
- * `executionPlan.mode`, and framework detection — `SessionStore.approve`,
- * `WorktreeOrchestrator` provisioning, the commit path, and the preview
- * wiring each made the same `kind === 'fresh'` / `mode === 'vite_app'`
- * decisions in their own way. That spread the same handful of facts across
- * dozens of call sites and let them drift.
- *
- * This module collapses those facts into a *closed* discriminated union. There
- * are exactly three legal run shapes:
- *
- *   1. existing project              — clone+diff against the user's tree
- *   2. generated project, static     — inline HTML/CSS/JS, no runtime
- *   3. generated project, app (vite) — scaffolded Vite app with a dev server
- *
- * Every other lifecycle policy (topology / provision / commit) is a pure
- * function of which of those three a session is — see `runPlanPolicy`. Callers
- * resolve the plan once (at `approve` time, the first point where every input
- * is known) and read policy off it, rather than re-deriving from raw context.
- *
- * Preview is deliberately *not* a fixed field of the plan. For generated
- * projects it's determined (static → static_artifact, app → dev_server), but
- * for existing projects it's only known at success time — a `framework:'static'`
- * existing project previews as a materialized static artifact, anything else
- * proxies a dev server. That one genuinely-late decision is exposed via
- * `existingPreviewKind` rather than baked into the plan at resolve time.
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveRunPlan = resolveRunPlan;
 exports.runPlanPolicy = runPlanPolicy;
 exports.resolveRunPlanPolicy = resolveRunPlanPolicy;
 exports.existingPreviewKind = existingPreviewKind;
-/**
- * Resolve the run plan from a project context. This is the single decision
- * point: `source` comes from `projectContext.kind`; for generated projects the
- * `runtime` comes from the agent's reported `executionPlan.mode`, defaulting to
- * `static` for source-less zero-to-one runs (which never report a plan).
- */
 function resolveRunPlan(projectContext) {
     if (projectContext.kind === 'existing') {
         return { source: 'existing' };
     }
-    // Generated (fresh) project. `executionPlan` is present only for
-    // source-grounded runs (reported via `report_source_plan`); source-less
-    // zero-to-one runs default to a static preview.
     const runtime = projectContext.executionPlan?.mode === 'vite_app' ? 'app' : 'static';
     return { source: 'generated', runtime };
 }
-/** Derive the lifecycle policy for a resolved plan. Total over the closed set. */
 function runPlanPolicy(plan) {
     if (plan.source === 'existing') {
         return {
@@ -60,7 +18,6 @@ function runPlanPolicy(plan) {
             provision: 'git_worktree',
             commit: 'apply_diff',
             needsScaffoldBase: false,
-            // preview deferred to success time (static vs dev_server by framework).
         };
     }
     if (plan.runtime === 'static') {
@@ -72,7 +29,6 @@ function runPlanPolicy(plan) {
             preview: 'static_artifact',
         };
     }
-    // generated app (vite)
     return {
         topology: 'code_gen',
         provision: 'template_worktree',
@@ -81,16 +37,9 @@ function runPlanPolicy(plan) {
         preview: 'dev_server',
     };
 }
-/** Convenience: resolve and derive policy in one step. */
 function resolveRunPlanPolicy(projectContext) {
     return runPlanPolicy(resolveRunPlan(projectContext));
 }
-/**
- * Preview surface for an existing-project variant, resolved at success time
- * from whether the variant materialized static files (framework `static`, no
- * dev command) or runs a dev server. Generated projects don't use this — their
- * preview is fixed by {@link runPlanPolicy}.
- */
 function existingPreviewKind(hasStaticFiles) {
     return hasStaticFiles ? 'static_artifact' : 'dev_server';
 }

package/dist/agent-variants/runPlan.js.map

@@ -1 +1 @@
-{"version":3,"file":"runPlan.js","sourceRoot":"","sources":["../../src/agent-variants/runPlan.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;;AAkEH,wCAUC;AAGD,sCA2BC;AAGD,oDAIC;AAQD,kDAEC;AA/DD;;;;;GAKG;AACH,SAAgB,cAAc,CAAC,cAA8B;IAC3D,IAAI,cAAc,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACvC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAChC,CAAC;IACD,iEAAiE;IACjE,wEAAwE;IACxE,gDAAgD;IAChD,MAAM,OAAO,GACX,cAAc,CAAC,aAAa,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;IACvE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AAC1C,CAAC;AAED,kFAAkF;AAClF,SAAgB,aAAa,CAAC,IAAoB;IAChD,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO;YACL,QAAQ,EAAE,UAAU;YACpB,SAAS,EAAE,cAAc;YACzB,MAAM,EAAE,YAAY;YACpB,iBAAiB,EAAE,KAAK;YACxB,wEAAwE;SACzE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO;YACL,QAAQ,EAAE,gBAAgB;YAC1B,SAAS,EAAE,MAAM;YACjB,MAAM,EAAE,mBAAmB;YAC3B,iBAAiB,EAAE,KAAK;YACxB,OAAO,EAAE,iBAAiB;SAC3B,CAAC;IACJ,CAAC;IACD,uBAAuB;IACvB,OAAO;QACL,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,mBAAmB;QAC9B,MAAM,EAAE,qBAAqB;QAC7B,iBAAiB,EAAE,IAAI;QACvB,OAAO,EAAE,YAAY;KACtB,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC1D,SAAgB,oBAAoB,CAClC,cAA8B;IAE9B,OAAO,aAAa,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACH,SAAgB,mBAAmB,CAAC,cAAuB;IACzD,OAAO,cAAc,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY,CAAC;AAC3D,CAAC"}
+{"version":3,"file":"runPlan.js","sourceRoot":"","sources":["../../src/agent-variants/runPlan.ts"],"names":[],"mappings":";;AAgCA,wCAOC;AAED,sCAyBC;AAED,oDAIC;AAED,kDAEC;AA5CD,SAAgB,cAAc,CAAC,cAA8B;IAC3D,IAAI,cAAc,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACvC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAChC,CAAC;IACD,MAAM,OAAO,GACX,cAAc,CAAC,aAAa,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;IACvE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AAC1C,CAAC;AAED,SAAgB,aAAa,CAAC,IAAoB;IAChD,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO;YACL,QAAQ,EAAE,UAAU;YACpB,SAAS,EAAE,cAAc;YACzB,MAAM,EAAE,YAAY;YACpB,iBAAiB,EAAE,KAAK;SACzB,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO;YACL,QAAQ,EAAE,gBAAgB;YAC1B,SAAS,EAAE,MAAM;YACjB,MAAM,EAAE,mBAAmB;YAC3B,iBAAiB,EAAE,KAAK;YACxB,OAAO,EAAE,iBAAiB;SAC3B,CAAC;IACJ,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,mBAAmB;QAC9B,MAAM,EAAE,qBAAqB;QAC7B,iBAAiB,EAAE,IAAI;QACvB,OAAO,EAAE,YAAY;KACtB,CAAC;AACJ,CAAC;AAED,SAAgB,oBAAoB,CAClC,cAA8B;IAE9B,OAAO,aAAa,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAgB,mBAAmB,CAAC,cAAuB;IACzD,OAAO,cAAc,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY,CAAC;AAC3D,CAAC"}

package/dist/agent-variants/sourceContext.d.ts

@@ -1,14 +1,4 @@
-/**
- * Returns true for hostnames that are unambiguously local or private without
- * any DNS lookup. IPv4 / IPv6 literals get the private-range check; hostname
- * strings get the local-domain pattern check.
- */
 export declare const isLocalLiteralHostname: (hostname: string) => boolean;
-/**
- * Synchronous URL validator: enforces HTTP/HTTPS scheme and rejects literal
- * hostnames that match local/loopback/link-local patterns. Used as the SSRF
- * guard for visual reference URLs.
- */
 export declare const validateInspirationUrl: (rawUrl: string) => {
     ok: true;
     url: URL;

package/dist/agent-variants/sourceContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sourceContext.d.ts","sourceRoot":"","sources":["../../src/agent-variants/sourceContext.ts"],"names":[],"mappings":"AAkDA;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,GAAI,UAAU,MAAM,KAAG,OAOzD,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,GACjC,QAAQ,MAAM,KAEZ;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,GAAG,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CA6B9B,CAAC;AAEF,eAAO,MAAM,YAAY,GAAI,QAAQ,MAAM,KAAG,MAAM,GAAG,IA4BtD,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAAI,QAAQ,MAAM,KAAG,MAAM,EAYxD,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAC5B,QAAQ,MAAM,EACd,YAAW,MAAM,EAAO,KACvB,MAAM,EAYR,CAAC"}
+{"version":3,"file":"sourceContext.d.ts","sourceRoot":"","sources":["../../src/agent-variants/sourceContext.ts"],"names":[],"mappings":"AAkCA,eAAO,MAAM,sBAAsB,GAAI,UAAU,MAAM,KAAG,OAOzD,CAAC;AAEF,eAAO,MAAM,sBAAsB,GACjC,QAAQ,MAAM,KAEZ;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,GAAG,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CA6B9B,CAAC;AAEF,eAAO,MAAM,YAAY,GAAI,QAAQ,MAAM,KAAG,MAAM,GAAG,IAkBtD,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAAI,QAAQ,MAAM,KAAG,MAAM,EAYxD,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAC5B,QAAQ,MAAM,EACd,YAAW,MAAM,EAAO,KACvB,MAAM,EAYR,CAAC"}

package/dist/agent-variants/sourceContext.js

@@ -4,13 +4,6 @@ exports.resolveSourceUrls = exports.extractPromptUrls = exports.normalizeUrl = e
 const MAX_PROMPT_URLS = 6;
 const MAX_SOURCE_URLS = 24;
 const TRAILING_URL_PUNCTUATION = /[),.;:!?]+$/;
-// --- SSRF guards ------------------------------------------------------------
-// Synchronous literal-host checks for user-supplied URLs (inspiration
-// references, `userContext` url sources, prompt-extracted links). They run
-// before a URL reaches the `source_plan` work item / the agent's browser step,
-// so prompt-injected `http://169.254.169.254/...` or `http://localhost/...`
-// targets are rejected without IO. DNS-resolved checks are intentionally not
-// done here so these stay synchronous.
 const PRIVATE_IPV4_PATTERNS = [
     /^10\./,
     /^127\./,
@@ -18,18 +11,9 @@ const PRIVATE_IPV4_PATTERNS = [
     /^169\.254\./,
     /^172\.(1[6-9]|2\d|3[0-1])\./,
     /^0\./,
-    // RFC6598 shared address space (CGNAT): 100.64.0.0/10 -> 100.64..100.127.
     /^100\.(6[4-9]|[7-9]\d|1[01]\d|12[0-7])\./,
 ];
-// IPv6 private/reserved ranges: ::1 loopback, fe80::/10 link-local,
-// fc00::/7 unique-local (first byte fc OR fd). IPv4-mapped IPv6
-// (`::ffff:x.x.x.x`) is handled separately so the embedded v4 gets the full
-// v4 private-range check.
 const PRIVATE_IPV6_PATTERNS = [/^::1$/i, /^fe80:/i, /^f[cd][0-9a-f]{2}:/i];
-/**
- * Detect an IPv4-mapped IPv6 address (`::ffff:x.x.x.x`) whose embedded IPv4
- * portion falls in the v4 private/reserved ranges.
- */
 const isIpv4MappedPrivateIpv6 = (address) => {
     const match = /^::ffff:(\d+\.\d+\.\d+\.\d+)$/i.exec(address);
     if (!match)
@@ -45,11 +29,6 @@ const LOCAL_HOSTNAME_PATTERNS = [
     /\.lan$/i,
     /\.intranet$/i,
 ];
-/**
- * Returns true for hostnames that are unambiguously local or private without
- * any DNS lookup. IPv4 / IPv6 literals get the private-range check; hostname
- * strings get the local-domain pattern check.
- */
 const isLocalLiteralHostname = (hostname) => {
     const trimmed = hostname.replace(/^\[|\]$/g, '');
     if (PRIVATE_IPV4_PATTERNS.some((pattern) => pattern.test(trimmed)))
@@ -63,11 +42,6 @@ const isLocalLiteralHostname = (hostname) => {
     return false;
 };
 exports.isLocalLiteralHostname = isLocalLiteralHostname;
-/**
- * Synchronous URL validator: enforces HTTP/HTTPS scheme and rejects literal
- * hostnames that match local/loopback/link-local patterns. Used as the SSRF
- * guard for visual reference URLs.
- */
 const validateInspirationUrl = (rawUrl) => {
     const trimmed = rawUrl.trim();
     if (!trimmed) {
@@ -114,16 +88,6 @@ const normalizeUrl = (rawUrl) => {
     if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
         return null;
     }
-    // SSRF gate: reject literal localhost / loopback / link-local /
-    // RFC1918 / cloud-metadata hosts here, before the URL is handed to
-    // `source_plan` and the agent's browser extraction step. The
-    // server-side inspiration fetcher applies the same check (plus a
-    // resolved-DNS check) — without this, prompt-injected URLs like
-    // `http://169.254.169.254/...` or `http://localhost:.../` would
-    // sneak through `resolveSourceUrls` and drive the agent at internal
-    // services. The DNS-resolved layer is intentionally not run here
-    // because `normalizeUrl` must stay sync; the literal check covers
-    // every cheap-to-stuff target without needing IO.
     const hostname = parsed.hostname.toLowerCase();
     if (!hostname || (0, exports.isLocalLiteralHostname)(hostname)) {
         return null;

package/dist/agent-variants/sourceContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"sourceContext.js","sourceRoot":"","sources":["../../src/agent-variants/sourceContext.ts"],"names":[],"mappings":";;;AAAA,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,MAAM,wBAAwB,GAAG,aAAa,CAAC;AAE/C,+EAA+E;AAC/E,sEAAsE;AACtE,2EAA2E;AAC3E,+EAA+E;AAC/E,4EAA4E;AAC5E,6EAA6E;AAC7E,uCAAuC;AAEvC,MAAM,qBAAqB,GAAa;IACtC,OAAO;IACP,QAAQ;IACR,aAAa;IACb,aAAa;IACb,6BAA6B;IAC7B,MAAM;IACN,0EAA0E;IAC1E,0CAA0C;CAC3C,CAAC;AAEF,oEAAoE;AACpE,gEAAgE;AAChE,4EAA4E;AAC5E,0BAA0B;AAC1B,MAAM,qBAAqB,GAAa,CAAC,QAAQ,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;AAErF;;;GAGG;AACH,MAAM,uBAAuB,GAAG,CAAC,OAAe,EAAW,EAAE;IAC3D,MAAM,KAAK,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC,CAAC;AAEF,MAAM,uBAAuB,GAAa;IACxC,cAAc;IACd,eAAe;IACf,eAAe;IACf,WAAW;IACX,cAAc;IACd,SAAS;IACT,cAAc;CACf,CAAC;AAEF;;;;GAIG;AACI,MAAM,sBAAsB,GAAG,CAAC,QAAgB,EAAW,EAAE;IAClE,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,IAAI,uBAAuB,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClF,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAPW,QAAA,sBAAsB,0BAOjC;AAEF;;;;GAIG;AACI,MAAM,sBAAsB,GAAG,CACpC,MAAc,EAGkB,EAAE;IAClC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,OAAO,EAAE,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,6DAA6D,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK;SAC5G,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,IAAA,8BAAsB,EAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,iBAAiB,QAAQ,kDAAkD;SACpF,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IACjB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AAClE,CAAC,CAAC;AAjCW,QAAA,sBAAsB,0BAiCjC;AAEK,MAAM,YAAY,GAAG,CAAC,MAAc,EAAiB,EAAE;IAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,gEAAgE;IAChE,mEAAmE;IACnE,6DAA6D;IAC7D,iEAAiE;IACjE,gEAAgE;IAChE,gEAAgE;IAChE,oEAAoE;IACpE,iEAAiE;IACjE,kEAAkE;IAClE,kDAAkD;IAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC/C,IAAI,CAAC,QAAQ,IAAI,IAAA,8BAAsB,EAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IACjB,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC,CAAC;AA5BW,QAAA,YAAY,gBA4BvB;AAEK,MAAM,iBAAiB,GAAG,CAAC,MAAc,EAAY,EAAE;IAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,IAAA,oBAAY,EAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,SAAS;QAClD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzB,IAAI,OAAO,CAAC,MAAM,IAAI,eAAe;YAAE,MAAM;IAC/C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAZW,QAAA,iBAAiB,qBAY5B;AAEK,MAAM,iBAAiB,GAAG,CAC/B,MAAc,EACd,YAAsB,EAAE,EACd,EAAE;IACZ,MAAM,MAAM,GAAG,CAAC,GAAG,IAAA,yBAAiB,EAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,IAAA,oBAAY,EAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,SAAS;QAClD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzB,IAAI,OAAO,CAAC,MAAM,IAAI,eAAe;YAAE,MAAM;IAC/C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAfW,QAAA,iBAAiB,qBAe5B"}
+{"version":3,"file":"sourceContext.js","sourceRoot":"","sources":["../../src/agent-variants/sourceContext.ts"],"names":[],"mappings":";;;AAAA,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,MAAM,wBAAwB,GAAG,aAAa,CAAC;AAG/C,MAAM,qBAAqB,GAAa;IACtC,OAAO;IACP,QAAQ;IACR,aAAa;IACb,aAAa;IACb,6BAA6B;IAC7B,MAAM;IACN,0CAA0C;CAC3C,CAAC;AAEF,MAAM,qBAAqB,GAAa,CAAC,QAAQ,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;AAErF,MAAM,uBAAuB,GAAG,CAAC,OAAe,EAAW,EAAE;IAC3D,MAAM,KAAK,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC,CAAC;AAEF,MAAM,uBAAuB,GAAa;IACxC,cAAc;IACd,eAAe;IACf,eAAe;IACf,WAAW;IACX,cAAc;IACd,SAAS;IACT,cAAc;CACf,CAAC;AAEK,MAAM,sBAAsB,GAAG,CAAC,QAAgB,EAAW,EAAE;IAClE,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,IAAI,uBAAuB,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClF,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAPW,QAAA,sBAAsB,0BAOjC;AAEK,MAAM,sBAAsB,GAAG,CACpC,MAAc,EAGkB,EAAE;IAClC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,OAAO,EAAE,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,6DAA6D,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK;SAC5G,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,IAAA,8BAAsB,EAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,iBAAiB,QAAQ,kDAAkD;SACpF,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IACjB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AAClE,CAAC,CAAC;AAjCW,QAAA,sBAAsB,0BAiCjC;AAEK,MAAM,YAAY,GAAG,CAAC,MAAc,EAAiB,EAAE;IAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC/C,IAAI,CAAC,QAAQ,IAAI,IAAA,8BAAsB,EAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IACjB,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC,CAAC;AAlBW,QAAA,YAAY,gBAkBvB;AAEK,MAAM,iBAAiB,GAAG,CAAC,MAAc,EAAY,EAAE;IAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,IAAA,oBAAY,EAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,SAAS;QAClD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzB,IAAI,OAAO,CAAC,MAAM,IAAI,eAAe;YAAE,MAAM;IAC/C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAZW,QAAA,iBAAiB,qBAY5B;AAEK,MAAM,iBAAiB,GAAG,CAC/B,MAAc,EACd,YAAsB,EAAE,EACd,EAAE;IACZ,MAAM,MAAM,GAAG,CAAC,GAAG,IAAA,yBAAiB,EAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,IAAA,oBAAY,EAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,SAAS;QAClD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzB,IAAI,OAAO,CAAC,MAAM,IAAI,eAAe;YAAE,MAAM;IAC/C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAfW,QAAA,iBAAiB,qBAe5B"}

package/dist/agent-variants/variantContext.d.ts

@@ -1,4 +1,4 @@
-import { type RawUserContextInput, type ContextAssetInput, type StoredUserContextSourceRecord, type VariantContextBundle } from './contracts';
+import { type RawUserContextInput, type ContextAssetInput, type StoredUserContextSourceRecord, type VariantContextBundle, type VariantWorkItemContext } from './contracts';
 export declare const USER_CONTEXT_DIRECTORY = "user";
 type CreateVariantContextBundleArgs = {
     sessionId: string;
@@ -10,13 +10,12 @@ type CreateVariantContextBundleArgs = {
     allowedRoots?: string[];
     contextAssets?: ContextAssetInput[];
 };
-/**
- * Creates the read-only user context bundle for a variants session.
- */
 export declare const createVariantContextBundle: (args: CreateVariantContextBundleArgs) => VariantContextBundle;
-/**
- * Persists the durable context bundle manifest after planning metadata changes.
- */
 export declare const writeVariantContextBundle: (bundle: VariantContextBundle, storedUserContext?: StoredUserContextSourceRecord[]) => void;
+export declare const extendVariantContextBundle: (args: {
+    sessionId: string;
+    source?: VariantWorkItemContext;
+    additional: Pick<VariantWorkItemContext, "contextBundlePath" | "userContext" | "rivetMetadata">;
+}) => typeof args.additional;
 export {};
 //# sourceMappingURL=variantContext.d.ts.map

package/dist/agent-variants/variantContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"variantContext.d.ts","sourceRoot":"","sources":["../../src/agent-variants/variantContext.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,6BAA6B,EAClC,KAAK,oBAAoB,EAC1B,MAAM,aAAa,CAAC;AAKrB,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAe7C,KAAK,8BAA8B,GAAG;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,iBAAiB,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC1C,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,iBAAiB,EAAE,CAAC;CACrC,CAAC;AAkRF;;GAEG;AACH,eAAO,MAAM,0BAA0B,GACrC,MAAM,8BAA8B,KACnC,oBA4JF,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,yBAAyB,GACpC,QAAQ,oBAAoB,EAC5B,oBAAoB,6BAA6B,EAAE,KAClD,IAgBF,CAAC"}
+{"version":3,"file":"variantContext.d.ts","sourceRoot":"","sources":["../../src/agent-variants/variantContext.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,6BAA6B,EAClC,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAE5B,MAAM,aAAa,CAAC;AAKrB,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAe7C,KAAK,8BAA8B,GAAG;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,iBAAiB,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC1C,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,iBAAiB,EAAE,CAAC;CACrC,CAAC;AAkRF,eAAO,MAAM,0BAA0B,GACrC,MAAM,8BAA8B,KACnC,oBA6JF,CAAC;AAEF,eAAO,MAAM,yBAAyB,GACpC,QAAQ,oBAAoB,EAC5B,oBAAoB,6BAA6B,EAAE,KAClD,IAgBF,CAAC;AAEF,eAAO,MAAM,0BAA0B,GAAI,MAAM;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC,UAAU,EAAE,IAAI,CACd,sBAAsB,EACtB,mBAAmB,GAAG,aAAa,GAAG,eAAe,CACtD,CAAC;CACH,KAAG,OAAO,IAAI,CAAC,UAmFf,CAAC"}

package/dist/agent-variants/variantContext.js

@@ -3,11 +3,13 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.writeVariantContextBundle = exports.createVariantContextBundle = exports.USER_CONTEXT_DIRECTORY = void 0;
+exports.extendVariantContextBundle = exports.writeVariantContextBundle = exports.createVariantContextBundle = exports.USER_CONTEXT_DIRECTORY = void 0;
+const variant_reference_1 = require("../types/variant-reference");
 const crypto_1 = __importDefault(require("crypto"));
 const fs_1 = __importDefault(require("fs"));
 const os_1 = __importDefault(require("os"));
 const path_1 = __importDefault(require("path"));
+const contracts_1 = require("./contracts");
 const errors_1 = require("./errors");
 const sourceContext_1 = require("./sourceContext");
 const contextAssets_1 = require("./contextAssets");
@@ -167,6 +169,7 @@ const copyUploadSource = (args) => {
             transport: 'file',
             path: destination,
             mimeType: upload.mimeType,
+            references: (0, variant_reference_1.mergeVariantReferences)(args.input.references),
             ...(originalFilename ? { originalFilename } : {}),
             ...(args.input.label ? { label: args.input.label } : {}),
             ...(args.input.userIntent ? { userIntent: args.input.userIntent } : {}),
@@ -187,6 +190,7 @@ const createTextSource = (args) => {
             id: args.id,
             transport: 'text',
             path: textPath,
+            references: (0, variant_reference_1.mergeVariantReferences)(args.references),
             ...(args.label ? { label: args.label } : {}),
             ...(args.userIntent ? { userIntent: args.userIntent } : {}),
         },
@@ -196,9 +200,6 @@ const createTextSource = (args) => {
         },
     };
 };
-/**
- * Copies optional user-provided URL details onto the canonical source record.
- */
 const applyUrlSourceDetails = (record, details) => {
     if (record.source.transport !== 'url')
         return;
@@ -209,9 +210,6 @@ const applyUrlSourceDetails = (record, details) => {
         record.source.userIntent = details.userIntent;
     }
 };
-/**
- * Creates the read-only user context bundle for a variants session.
- */
 const createVariantContextBundle = (args) => {
     const contextBundlePath = path_1.default.join(args.dataDirectory ?? path_1.default.join(args.workspaceRoot, '.rivet'), 'variant-context', args.sessionId);
     const userDir = path_1.default.join(contextBundlePath, exports.USER_CONTEXT_DIRECTORY);
@@ -291,6 +289,7 @@ const createVariantContextBundle = (args) => {
                 label: input.label,
                 userIntent: input.userIntent,
                 content: input.content,
+                references: input.references,
                 fallbackName: `input-${extraIndex}`,
             }));
         }
@@ -345,9 +344,6 @@ const createVariantContextBundle = (args) => {
     return bundle;
 };
 exports.createVariantContextBundle = createVariantContextBundle;
-/**
- * Persists the durable context bundle manifest after planning metadata changes.
- */
 const writeVariantContextBundle = (bundle, storedUserContext) => {
     ensureDir(bundle.contextBundlePath);
     const manifest = {
@@ -361,4 +357,67 @@ const writeVariantContextBundle = (bundle, storedUserContext) => {
     fs_1.default.writeFileSync(path_1.default.join(bundle.contextBundlePath, CONTEXT_FILE), `${JSON.stringify(manifest, null, 2)}\n`, 'utf8');
 };
 exports.writeVariantContextBundle = writeVariantContextBundle;
+const extendVariantContextBundle = (args) => {
+    let inherited;
+    try {
+        inherited = args.source
+            ? contracts_1.variantContextBundleSchema.parse(JSON.parse(fs_1.default.readFileSync(path_1.default.join(args.source.contextBundlePath, CONTEXT_FILE), 'utf8')))
+            : undefined;
+    }
+    catch {
+        throw new errors_1.AgentVariantsError('SOURCE_CONTEXT_INVALID', 'Cannot read the source design context. Recreate the direction before varying it.');
+    }
+    const contextBundlePath = path_1.default.join(args.additional.contextBundlePath, crypto_1.default.randomUUID());
+    const records = [
+        ...(args.source
+            ? (readStoredUserContext(args.source.contextBundlePath) ?? [])
+            : []),
+        ...(readStoredUserContext(args.additional.contextBundlePath) ?? []),
+    ];
+    const imagePathsByHash = new Map();
+    const imagePaths = new Map();
+    for (const { source, storage } of records) {
+        if (source.transport !== 'file' ||
+            !source.mimeType?.startsWith('image/') ||
+            !storage?.sha256)
+            continue;
+        const imagePath = imagePathsByHash.get(storage.sha256) ?? source.path;
+        imagePathsByHash.set(storage.sha256, imagePath);
+        imagePaths.set(source.path, imagePath);
+    }
+    const additionalUserContext = args.additional.userContext.map((source) => source.transport === 'file' && imagePaths.has(source.path)
+        ? { ...source, path: imagePaths.get(source.path) ?? source.path }
+        : source);
+    const userContext = [
+        ...(args.source?.userContext ?? []),
+        ...additionalUserContext,
+    ];
+    (0, exports.writeVariantContextBundle)({
+        ...inherited,
+        version: 1,
+        sessionId: args.sessionId,
+        contextBundlePath,
+        userContext,
+        rivetActions: inherited?.rivetActions ?? [],
+        rivetMetadata: [
+            ...(args.source?.rivetMetadata ?? []),
+            ...args.additional.rivetMetadata,
+        ],
+        ...(args.source?.contextAssets
+            ? { contextAssets: args.source.contextAssets }
+            : {}),
+    }, userContext.map((source) => {
+        const record = records.find((entry) => entry.source.transport === source.transport &&
+            ('path' in source && 'path' in entry.source
+                ? source.path === entry.source.path
+                : entry.source.id === source.id));
+        return { ...record, source };
+    }));
+    return {
+        ...args.additional,
+        contextBundlePath,
+        userContext: additionalUserContext,
+    };
+};
+exports.extendVariantContextBundle = extendVariantContextBundle;
 //# sourceMappingURL=variantContext.js.map