rivet-design 0.23.1 → 0.25.0

package/dist/routes/agentVariants.js

@@ -6,6 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.createAgentVariantsRouter = exports.stampWatcherLiveness = exports.nestedFreshSessionWorkdirs = void 0;
 const variantRequestSchema_1 = require("./variantRequestSchema");
 const generationGuidance_1 = require("../services/generationGuidance");
+const workerRuntime_1 = require("../agent-variants/workerRuntime");
 const RuntimeAdmission_1 = require("../services/RuntimeAdmission");
 const telemetry_1 = require("../config/telemetry");
 const runtimeAdmission_1 = require("./runtimeAdmission");
@@ -32,6 +33,7 @@ const HistoryReplayService_1 = require("../services/HistoryReplayService");
 const runLabel_1 = require("../agent-variants/runLabel");
 const evaluateFlags_1 = require("../config/evaluateFlags");
 const featureFlagUserKey_1 = require("../config/featureFlagUserKey");
+const shareAvailability_1 = require("./shareAvailability");
 const variantSessionStart_1 = require("../utils/variantSessionStart");
 const inlineStartTracker_1 = require("./inlineStartTracker");
 const loopback_1 = require("../utils/loopback");
@@ -102,16 +104,6 @@ const inlineStaticPreviewTargetSchema = v3_1.z.object({
     sessionId: v3_1.z.string().min(1),
     variantId: v3_1.z.string().min(1),
 });
-const inlineInitiatorSchema = v3_1.z
-    .discriminatedUnion('kind', [
-    v3_1.z.object({ kind: v3_1.z.literal('human') }),
-    v3_1.z.object({
-        kind: v3_1.z.literal('agent'),
-        agent: v3_1.z.enum(['claude', 'codex', 'cursor', 'unknown']),
-        model: v3_1.z.string().max(200).optional(),
-    }),
-])
-    .optional();
 const inlineVariantBody = v3_1.z.object({
     changes: v3_1.z
         .array(v3_1.z
@@ -137,13 +129,8 @@ const inlineVariantBody = v3_1.z.object({
         .optional(),
     traceId: v3_1.z.string().optional(),
     agentRunId: v3_1.z.string().optional(),
-    initiator: inlineInitiatorSchema,
-    workerSelection: v3_1.z
-        .object({
-        provider: v3_1.z.enum(['claude', 'codex', 'cursor']).optional(),
-        model: v3_1.z.string().min(1).max(200).optional(),
-    })
-        .optional(),
+    initiator: variantRequestSchema_1.variantInitiatorSchema.optional(),
+    workerSelection: variantRequestSchema_1.workerSelectionSchema.optional(),
 });
 const hostVariantCompleteBody = v3_1.z.object({
     status: v3_1.z.enum(['succeeded', 'failed', 'cancelled']).default('succeeded'),
@@ -731,6 +718,10 @@ const createAgentVariantsRouter = (orchestrator, bridge, telemetry, variantHisto
         };
         let trackedStart = false;
         try {
+            (0, workerRuntime_1.assertNativeWorkerSelection)({
+                initiator: request.initiator,
+                selection: request.workerSelection,
+            });
             (0, generationGuidance_1.assertGenerationGuidance)(request);
             bridge?.updateTelemetryContext(request.telemetryContext);
             if ((0, changeBatchClassification_1.isMixedVariantBatch)(request) ||
@@ -1648,73 +1639,6 @@ const createAgentVariantsRouter = (orchestrator, bridge, telemetry, variantHisto
             sendError(res, err);
         }
     });
-    router.get('/variants/:sessionId/design-md/:artifactId', async (req, res) => {
-        if (rejectNonLocalRequest(req, res))
-            return;
-        const flags = await (0, evaluateFlags_1.getFeatureFlags)({
-            userKey: (0, featureFlagUserKey_1.getConfigFeatureFlagUserKey)({ headers: req.headers }),
-        });
-        if (!flags.designContextViewer.isEnabled) {
-            res.status(403).json({
-                errorCode: 'FEATURE_DISABLED',
-                message: 'Design context viewer is not enabled.',
-            });
-            return;
-        }
-        const { sessionId, artifactId } = req.params;
-        try {
-            const markdown = orchestrator.getDesignContextMarkdown(sessionId, artifactId);
-            if (!markdown) {
-                res.status(404).json({
-                    errorCode: 'WORK_ITEM_NOT_FOUND',
-                    message: 'DesignMD artifact not found',
-                });
-                return;
-            }
-            res
-                .status(200)
-                .type('text/markdown')
-                .set('Cache-Control', 'no-store')
-                .send(markdown);
-        }
-        catch (err) {
-            sendError(res, err);
-        }
-    });
-    router.get('/variants/:sessionId/design-md/:artifactId/view', async (req, res) => {
-        if (rejectNonLocalRequest(req, res))
-            return;
-        const flags = await (0, evaluateFlags_1.getFeatureFlags)({
-            userKey: (0, featureFlagUserKey_1.getConfigFeatureFlagUserKey)({ headers: req.headers }),
-        });
-        if (!flags.designContextViewer.isEnabled) {
-            res.status(403).json({
-                errorCode: 'FEATURE_DISABLED',
-                message: 'Design context viewer is not enabled.',
-            });
-            return;
-        }
-        const { sessionId, artifactId } = req.params;
-        try {
-            const html = orchestrator.getDesignContextViewerHtml(sessionId, artifactId);
-            if (!html) {
-                res.status(404).json({
-                    errorCode: 'WORK_ITEM_NOT_FOUND',
-                    message: 'DesignMD artifact not found',
-                });
-                return;
-            }
-            res
-                .status(200)
-                .type('html')
-                .set('Cache-Control', 'no-store')
-                .set('Content-Security-Policy', "default-src 'none'; style-src 'unsafe-inline'; img-src 'self'")
-                .send(html);
-        }
-        catch (err) {
-            sendError(res, err);
-        }
-    });
     router.get('/variants/:sessionId/static/:variantId/{*assetPath}', async (req, res) => {
         if (rejectNonLocalRequest(req, res))
             return;
@@ -1848,13 +1772,8 @@ const createAgentVariantsRouter = (orchestrator, bridge, telemetry, variantHisto
         const flags = await (0, evaluateFlags_1.getFeatureFlags)({
             userKey: (0, featureFlagUserKey_1.getConfigFeatureFlagUserKey)({ headers: req.headers }),
         });
-        if (!flags.deployPrototype.isEnabled) {
-            res.status(403).json({
-                errorCode: 'FEATURE_DISABLED',
-                message: 'Prototype deploy is not enabled.',
-            });
+        if ((0, shareAvailability_1.rejectDisabledShare)({ flags, res, isCanvas: false }))
             return;
-        }
         const parsed = deployBody.safeParse(req.body);
         if (!parsed.success) {
             res.status(400).json({
@@ -1920,20 +1839,8 @@ const createAgentVariantsRouter = (orchestrator, bridge, telemetry, variantHisto
         const flags = await (0, evaluateFlags_1.getFeatureFlags)({
             userKey: (0, featureFlagUserKey_1.getConfigFeatureFlagUserKey)({ headers: req.headers }),
         });
-        if (!flags.deployPrototype.isEnabled) {
-            res.status(403).json({
-                errorCode: 'FEATURE_DISABLED',
-                message: 'Prototype deploy is not enabled.',
-            });
-            return;
-        }
-        if (!flags.canvasShare.isEnabled) {
-            res.status(403).json({
-                errorCode: 'FEATURE_DISABLED',
-                message: 'Canvas share is not enabled.',
-            });
+        if ((0, shareAvailability_1.rejectDisabledShare)({ flags, res, isCanvas: true }))
             return;
-        }
         const parsed = canvasDeployBody.safeParse(req.body);
         if (!parsed.success) {
             res.status(400).json({

package/dist/routes/editorAccess.d.ts

@@ -0,0 +1,4 @@
+import type { RequestHandler } from 'express';
+export declare const authenticateEditor: (token: string) => RequestHandler;
+export declare const authenticateEditorApi: (token: string) => RequestHandler;
+//# sourceMappingURL=editorAccess.d.ts.map

package/dist/routes/editorAccess.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authenticateEditorApi = exports.authenticateEditor = void 0;
+const crypto_1 = require("crypto");
+const loopback_1 = require("../utils/loopback");
+const editorAccess_1 = require("../utils/editorAccess");
+const authenticateEditor = (token) => (req, res, next) => {
+    const host = `127.0.0.1:${req.socket.localPort}`;
+    if (!(0, loopback_1.isLoopbackAddress)(req.socket.remoteAddress) ||
+        req.headers.host !== host ||
+        (req.headers.origin !== undefined &&
+            req.headers.origin !== `http://${host}`)) {
+        res
+            .status(403)
+            .json({ error: 'Editor access requires the local editor origin.' });
+        return;
+    }
+    const supplied = req.get(editorAccess_1.EDITOR_ACCESS_TOKEN_HEADER);
+    if (!token ||
+        !supplied ||
+        Buffer.byteLength(supplied) !== Buffer.byteLength(token) ||
+        !(0, crypto_1.timingSafeEqual)(Buffer.from(supplied), Buffer.from(token))) {
+        res.status(401).json({
+            error: 'Open Rivet from its local launch link to access this editor.',
+        });
+        return;
+    }
+    next();
+};
+exports.authenticateEditor = authenticateEditor;
+const authenticateEditorApi = (token) => {
+    const authenticate = (0, exports.authenticateEditor)(token);
+    return (req, res, next) => {
+        if ((0, editorAccess_1.isEditorApiPath)(req.path, req.method)) {
+            authenticate(req, res, next);
+            return;
+        }
+        next();
+    };
+};
+exports.authenticateEditorApi = authenticateEditorApi;
+//# sourceMappingURL=editorAccess.js.map

package/dist/routes/library/app.js

@@ -5,6 +5,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createLibraryApp = void 0;
 const express_1 = __importDefault(require("express"));
+const telemetry_1 = require("../telemetry");
 const index_1 = require("./index");
 const middleware_1 = require("./middleware");
 const account_1 = require("../account");
@@ -13,6 +14,7 @@ const integrations_1 = require("../integrations");
 const support_1 = require("../support");
 const createLibraryApp = ({ uiDirectory, ...services }) => {
     const app = (0, express_1.default)();
+    app.use('/api/telemetry', (0, telemetry_1.createTelemetryRouter)(services.telemetry));
     app.use('/api/library', (0, index_1.createLibraryRouter)(services));
     app.use('/api', (0, installRef_1.createInstallRefRouter)());
     app.use('/api', (0, middleware_1.authenticateLibrary)(services.token, services.browserSessions), express_1.default.json(), (req, res, next) => {

package/dist/routes/library/index.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createLibraryRouter = void 0;
+const telemetryPolicy_1 = require("../../config/telemetryPolicy");
 const design_profile_1 = require("../../types/design-profile");
 const express_1 = require("express");
 const installationChannel_1 = require("../../install/installationChannel");
@@ -44,6 +45,7 @@ const createLibraryRouter = (options) => {
         channel: (0, installationChannel_1.installationChannel)(),
         rivetVersion: telemetry_1.RIVET_VERSION,
         pluginName: (0, pluginContext_1.getPluginName)(),
+        telemetryMode: (0, telemetryPolicy_1.getTelemetryMode)(),
     }));
     router.use((0, middleware_1.authenticateLibrary)(options.token, options.browserSessions));
     router.post('/profile/preparations', (0, express_1.json)({ limit: design_profile_1.PROFILE_PREPARATION_BODY_BYTES }));

package/dist/routes/shareAvailability.d.ts

@@ -0,0 +1,8 @@
+import type { Response } from 'express';
+import type { FeatureFlags } from '../config/flags';
+export declare const rejectDisabledShare: (args: {
+    flags: FeatureFlags;
+    res: Response;
+    isCanvas: boolean;
+}) => boolean;
+//# sourceMappingURL=shareAvailability.d.ts.map

package/dist/routes/shareAvailability.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rejectDisabledShare = void 0;
+const rejectDisabledShare = (args) => {
+    const disabledFeature = [
+        { isEnabled: args.flags.share.isEnabled, name: 'Share' },
+        {
+            isEnabled: args.flags.deployPrototype.isEnabled,
+            name: 'Prototype deploy',
+        },
+        {
+            isEnabled: !args.isCanvas || args.flags.canvasShare.isEnabled,
+            name: 'Canvas share',
+        },
+    ].find((feature) => !feature.isEnabled);
+    if (!disabledFeature)
+        return false;
+    args.res.status(403).json({
+        errorCode: 'FEATURE_DISABLED',
+        message: `${disabledFeature.name} is not enabled.`,
+    });
+    return true;
+};
+exports.rejectDisabledShare = rejectDisabledShare;
+//# sourceMappingURL=shareAvailability.js.map

package/dist/routes/telemetry.d.ts

@@ -0,0 +1,4 @@
+import { Router } from 'express';
+import type { TelemetryService } from '../services/TelemetryService';
+export declare const createTelemetryRouter: (telemetry?: Pick<TelemetryService, "track">) => Router;
+//# sourceMappingURL=telemetry.d.ts.map

package/dist/routes/telemetry.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createTelemetryRouter = void 0;
+const express_1 = require("express");
+const zod_1 = require("zod");
+const pluginMetrics_1 = require("../config/pluginMetrics");
+const middleware_1 = require("./library/middleware");
+const telemetryPolicy_1 = require("../config/telemetryPolicy");
+const ConfigManager_1 = require("../services/ConfigManager");
+const metricBody = zod_1.z.object({
+    event: zod_1.z.string(),
+    properties: zod_1.z.record(zod_1.z.unknown()),
+});
+const createTelemetryRouter = (telemetry) => {
+    const router = (0, express_1.Router)();
+    router.get('/', (_req, res) => {
+        const mode = (0, telemetryPolicy_1.getTelemetryMode)();
+        res.setHeader('Cache-Control', 'no-store');
+        res.json({
+            mode,
+            ...(mode === 'metrics'
+                ? { distinctId: (0, ConfigManager_1.getConfigManager)().getPluginTelemetryId() }
+                : {}),
+        });
+    });
+    router.post('/events', (0, express_1.json)({ limit: '8kb' }), (req, res) => {
+        if (!(0, middleware_1.isLocalBrowserRequest)(req))
+            return res.sendStatus(403);
+        if ((0, telemetryPolicy_1.getTelemetryMode)() !== 'metrics')
+            return res.sendStatus(204);
+        const body = metricBody.safeParse(req.body);
+        if (!body.success)
+            return res.sendStatus(400);
+        const properties = (0, pluginMetrics_1.pluginMetricProperties)(body.data.event, body.data.properties);
+        if (!properties)
+            return res.sendStatus(400);
+        telemetry?.track(body.data.event, {
+            ...properties,
+            source: 'visual_editor',
+        });
+        return res.sendStatus(204);
+    });
+    const rejectInvalidBody = (error, _req, res, next) => {
+        if (typeof error === 'object' && error !== null && 'type' in error) {
+            if (error.type === 'entity.too.large') {
+                res.sendStatus(413);
+                return;
+            }
+            if (error.type === 'entity.parse.failed') {
+                res.sendStatus(400);
+                return;
+            }
+        }
+        next(error);
+    };
+    router.use(rejectInvalidBody);
+    return router;
+};
+exports.createTelemetryRouter = createTelemetryRouter;
+//# sourceMappingURL=telemetry.js.map

package/dist/routes/variantRequestSchema.d.ts

@@ -1,4 +1,33 @@
 import { z } from 'zod/v3';
+export declare const variantInitiatorSchema: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+    kind: z.ZodLiteral<"human">;
+}, "strip", z.ZodTypeAny, {
+    kind: "human";
+}, {
+    kind: "human";
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"agent">;
+    agent: z.ZodEnum<["claude", "codex", "cursor", "unknown"]>;
+    model: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    kind: "agent";
+    agent: "claude" | "codex" | "cursor" | "unknown";
+    model?: string | undefined;
+}, {
+    kind: "agent";
+    agent: "claude" | "codex" | "cursor" | "unknown";
+    model?: string | undefined;
+}>]>;
+export declare const workerSelectionSchema: z.ZodObject<{
+    provider: z.ZodOptional<z.ZodEnum<["claude", "codex", "cursor"]>>;
+    model: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    provider?: "claude" | "codex" | "cursor" | undefined;
+    model?: string | undefined;
+}, {
+    provider?: "claude" | "codex" | "cursor" | undefined;
+    model?: string | undefined;
+}>;
 export declare const inlineVariantRequestSchema: z.ZodEffects<z.ZodObject<{
     guidanceSelection: z.ZodOptional<z.ZodEffects<z.ZodUnknown, {
         mode: "off" | "auto";
@@ -68,7 +97,7 @@ export declare const inlineVariantRequestSchema: z.ZodEffects<z.ZodObject<{
     }>, "many">>;
 }, "strip", z.ZodTypeAny, {
     count: number;
-    mode?: "existing" | "zero_to_one" | undefined;
+    mode?: "zero_to_one" | "existing" | undefined;
     contextAssets?: {
         path: string;
         label?: string | undefined;
@@ -96,7 +125,7 @@ export declare const inlineVariantRequestSchema: z.ZodEffects<z.ZodObject<{
     }[] | undefined;
 }, {
     count: number;
-    mode?: "existing" | "zero_to_one" | undefined;
+    mode?: "zero_to_one" | "existing" | undefined;
     contextAssets?: {
         path: string;
         label?: string | undefined;
@@ -121,7 +150,7 @@ export declare const inlineVariantRequestSchema: z.ZodEffects<z.ZodObject<{
     }[] | undefined;
 }>, {
     count: number;
-    mode?: "existing" | "zero_to_one" | undefined;
+    mode?: "zero_to_one" | "existing" | undefined;
     contextAssets?: {
         path: string;
         label?: string | undefined;
@@ -149,7 +178,7 @@ export declare const inlineVariantRequestSchema: z.ZodEffects<z.ZodObject<{
     }[] | undefined;
 }, {
     count: number;
-    mode?: "existing" | "zero_to_one" | undefined;
+    mode?: "zero_to_one" | "existing" | undefined;
     contextAssets?: {
         path: string;
         label?: string | undefined;

package/dist/routes/variantRequestSchema.js

@@ -1,11 +1,23 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.inlineVariantRequestSchema = void 0;
+exports.inlineVariantRequestSchema = exports.workerSelectionSchema = exports.variantInitiatorSchema = void 0;
 const v3_1 = require("zod/v3");
 const contracts_1 = require("../agent-variants/contracts");
 const guidance_1 = require("../types/guidance");
 const DIRECTION_TITLE_MAX_WORDS = 5;
 const DIRECTION_SUBTITLE_MAX_WORDS = 10;
+exports.variantInitiatorSchema = v3_1.z.discriminatedUnion('kind', [
+    v3_1.z.object({ kind: v3_1.z.literal('human') }),
+    v3_1.z.object({
+        kind: v3_1.z.literal('agent'),
+        agent: v3_1.z.enum(['claude', 'codex', 'cursor', 'unknown']),
+        model: v3_1.z.string().max(200).optional(),
+    }),
+]);
+exports.workerSelectionSchema = v3_1.z.object({
+    provider: v3_1.z.enum(['claude', 'codex', 'cursor']).optional(),
+    model: v3_1.z.string().min(1).max(200).optional(),
+});
 const inlineVariantBriefSchema = contracts_1.startVariantsBriefContent.superRefine((brief, context) => {
     const titleWordCount = brief.label.trim().split(/\s+/).length;
     const subtitleWordCount = brief.body.trim().split(/\s+/).length;

package/dist/server.d.ts

@@ -24,7 +24,7 @@ type InactiveVariantsEventResponse = {
     write: (chunk: string) => unknown;
 };
 export declare const sendInactiveVariantsEventStream: (req: InactiveVariantsEventRequest, res: InactiveVariantsEventResponse) => void;
-export declare const resolveRivetListenHost: (agentApplyMode?: "embedded" | "external" | null) => string | undefined;
+export declare const resolveRivetListenHost: (_agentApplyMode?: "embedded" | "external" | null) => string;
 export declare const resolveEmbeddedAgentUiOrigin: (port: number) => string;
 export declare const isEmbeddedAgentUiHost: (hostname: string, agentApplyMode?: "embedded" | "external" | null) => boolean;
 export declare const isRivetUiStaticAssetPath: (requestPath: string) => boolean;
@@ -56,12 +56,12 @@ export type ServerOptions = Omit<CLIOptions, 'help' | 'version' | 'debug'> & {
     rivetPort?: number;
     previewPort?: number;
     userHost?: string;
-    isGitEnabled?: boolean;
     beforeShutdown?: () => Promise<void>;
     resolveLibraryOrigin?: () => string | undefined;
     createLibraryViewUrl?: (view: 'projects' | 'references') => Promise<string | null>;
 };
 export type ServerHandle = {
+    editorUrl: string;
     close: () => Promise<void>;
 };
 export declare const runServerShutdownTasks: (options: {