rivet-design 0.24.0 → 0.25.0

package/dist/agent-variants/WorktreeOrchestrator.d.ts

@@ -4,7 +4,7 @@ import type { VariantStartRequest, VariantStartResult } from './variant-start-ty
 import type { ChildProcess } from 'child_process';
 import { AgentVariantsError } from './errors';
 import { SessionStore, type ApprovedBriefSelection, type ApproveResult, type ProposeArgs, type ProposeResult, type ReportCompleteResult, type RequestWorkResult } from './SessionStore';
-import type { ActiveProjectContext, AdoptPastVariantArgs, BootstrapPastVariantSessionArgs, BootstrapPastVariantSessionResult, ActiveVariantSnapshot, Brief, ProjectContext, Stage, TerminalSummary, VariantContextBinding, HostVariantWorkItemSnapshot, VariantQaResult, VariantSessionArtifact, WorkItemStatus } from './contracts';
+import type { ActiveProjectContext, AdoptPastVariantArgs, BootstrapPastVariantSessionArgs, BootstrapPastVariantSessionResult, ActiveVariantSnapshot, Brief, ProjectContext, Stage, TerminalSummary, VariantContextBinding, HostVariantWorkItemSnapshot, VariantQaResult, WorkItemStatus } from './contracts';
 import type { VariantWorkItemInput } from './workItemInput';
 import { VariantHistoryService } from '../services/VariantHistoryService';
 import type { MCPVariantsTelemetryMetadata } from '../services/MCPVariantsTelemetry';
@@ -20,6 +20,7 @@ export type PreviewQaRunner = (args: {
 }) => Promise<VariantQaResult>;
 export type { DroppedRefinement } from './staticPreviewRefinements';
 export interface OrchestratorDeps {
+    getProjectPath: () => string;
     store: SessionStore;
     worktreeManager: WorktreeManagerLike;
     resolveProjectEnvironment: (sessionId: string) => Promise<ProjectEnvironment>;
@@ -58,12 +59,12 @@ export type ActiveSnapshot = {
     variants: ActiveVariantSnapshot[];
     projectContext: ActiveProjectContext;
     destinationPath?: string;
-    artifacts?: VariantSessionArtifact[];
     hostWork?: import('./contracts').HostVariantWorkItemSnapshot[];
     workerRuntime?: string;
     pendingVariantRequests?: number;
 };
 export declare class AgentVariantsOrchestrator {
+    private readonly getProjectPath;
     private readonly store;
     private readonly worktrees;
     private readonly resolveEnv;
@@ -165,8 +166,6 @@ export declare class AgentVariantsOrchestrator {
     resolveDevServerPortForPreview(sessionId: string, workItemId: string): number | undefined;
     getVariantWorkItemKind(sessionId: string, workItemId: string): string | undefined;
     getStaticPreviewHtml(sessionId: string, workItemId: string): string | undefined;
-    getDesignContextMarkdown(sessionId: string, artifactId: string): string | undefined;
-    getDesignContextViewerHtml(sessionId: string, artifactId: string): string | undefined;
     hasStaticPreviewAssets(sessionId: string, workItemId: string): boolean;
     resolveStaticPreviewAssetPath(sessionId: string, workItemId: string, requestedPath?: string): string | undefined;
     private getStaticPreviewByBriefId;

package/dist/agent-variants/WorktreeOrchestrator.js

@@ -29,7 +29,7 @@ const PreviewRuntime_1 = require("./PreviewRuntime");
 const diffQa_1 = require("./diffQa");
 const VariantHistoryService_1 = require("../services/VariantHistoryService");
 const variantContext_1 = require("./variantContext");
-const designContextArtifacts_1 = require("./designContextArtifacts");
+const designContext_1 = require("./designContext");
 const variantsTelemetry_1 = require("./variantsTelemetry");
 const variantWorkspaceFiles_1 = require("./variantWorkspaceFiles");
 const errnoCode_1 = require("../utils/errnoCode");
@@ -195,6 +195,7 @@ const isDesignCreationCodeGenInput = (input, prompt) => {
         DESIGN_CREATION_SURFACE_RE.test(text));
 };
 class AgentVariantsOrchestrator {
+    getProjectPath;
     store;
     worktrees;
     resolveEnv;
@@ -214,6 +215,7 @@ class AgentVariantsOrchestrator {
     activeSessionId = null;
     events = new events_1.EventEmitter();
     constructor(deps) {
+        this.getProjectPath = deps.getProjectPath;
         this.store = deps.store;
         this.worktrees = deps.worktreeManager;
         this.workspaceInventory = new WorkspaceInventory_1.WorkspaceInventory({
@@ -360,11 +362,10 @@ class AgentVariantsOrchestrator {
             : null;
         const variants = this.getVariants(sessionId);
         const sessionProjectContext = this.store.getProjectContext(sessionId);
-        const projectContext = (0, designContextArtifacts_1.toActiveProjectContext)(sessionProjectContext);
+        const projectContext = (0, designContext_1.toActiveProjectContext)(sessionProjectContext);
         const destinationPath = projectContext.kind === 'fresh'
             ? projectContext.workspacePath
             : undefined;
-        const artifacts = (0, designContextArtifacts_1.buildSessionArtifacts)(sessionId, sessionProjectContext);
         const hostWork = this.getHostWork(sessionId).map((item) => {
             if ('guidance' in item) {
                 const publicItem = { ...item };
@@ -390,7 +391,6 @@ class AgentVariantsOrchestrator {
             variants,
             projectContext,
             ...(destinationPath ? { destinationPath } : {}),
-            ...(artifacts.length > 0 ? { artifacts } : {}),
             ...(hostWork.length > 0 ? { hostWork } : {}),
             ...(workerRuntime ? { workerRuntime } : {}),
         };
@@ -778,10 +778,7 @@ class AgentVariantsOrchestrator {
         if (leasedWorkItemIds.length === 0)
             return;
         const leased = new Set(leasedWorkItemIds);
-        const projectContext = this.store.getProjectContext(sessionId);
-        const projectPath = projectContext.kind === 'fresh'
-            ? projectContext.workspaceRoot
-            : projectContext.projectPath;
+        const projectPath = this.getProjectPath();
         for (const item of this.getHostWork(sessionId)) {
             if (!leased.has(item.workId))
                 continue;
@@ -1076,7 +1073,7 @@ class AgentVariantsOrchestrator {
                 : 'Wait for a successful variant';
             return {
                 ...variant,
-                design: (0, designContextArtifacts_1.enrichDesignSource)(variant.design),
+                design: (0, designContext_1.enrichDesignSource)(variant.design),
                 ...(preview ? { preview } : {}),
                 port,
                 ...(changedFilesCount !== undefined ? { changedFilesCount } : {}),
@@ -1175,14 +1172,6 @@ class AgentVariantsOrchestrator {
             return undefined;
         }
     }
-    getDesignContextMarkdown(sessionId, artifactId) {
-        const artifact = (0, designContextArtifacts_1.findDesignContextArtifact)(this.store.getProjectContext(sessionId), artifactId);
-        return artifact?.content;
-    }
-    getDesignContextViewerHtml(sessionId, artifactId) {
-        const artifact = (0, designContextArtifacts_1.findDesignContextArtifact)(this.store.getProjectContext(sessionId), artifactId);
-        return artifact ? (0, designContextArtifacts_1.buildDesignContextViewerDocument)(artifact) : undefined;
-    }
     hasStaticPreviewAssets(sessionId, workItemId) {
         const record = this.workspaceInventory.getStaticPreview(sessionId, workItemId);
         return Boolean(record?.hasAssets);
@@ -2938,7 +2927,7 @@ class AgentVariantsOrchestrator {
             kinds: ['static_preview', 'code_gen'],
         });
         const sessionPrompt = this.store.getPrompt(args.sessionId);
-        const designArtifact = (0, designContextArtifacts_1.resolveDesignArtifact)(input.designContextEntry);
+        const designArtifact = (0, designContext_1.resolveDesignArtifact)(input.designContextEntry);
         const worktreeRecord = this.workspaceInventory.getWorktree(args.sessionId, args.workItemId);
         const staticPreview = this.workspaceInventory.getStaticPreview(args.sessionId, args.workItemId);
         let sourceDir = null;

package/dist/agent-variants/WorktreeOrchestrator.testHelpers.js

@@ -132,6 +132,7 @@ function buildOrchestrator(opts = {}) {
         switchPreviewPortCalls: [],
     };
     const orchestrator = new WorktreeOrchestrator_1.AgentVariantsOrchestrator({
+        getProjectPath: () => (opts.env ?? exports.ENV).projectPath,
         store,
         worktreeManager,
         resolveProjectEnvironment: opts.resolveProjectEnvironment ?? (async () => opts.env ?? exports.ENV),

package/dist/agent-variants/contracts.d.ts

@@ -8137,26 +8137,6 @@ export interface HostVariantPlanningWorkItemSnapshot extends HostVariantWorkItem
     outputSchema: unknown;
 }
 export type HostVariantWorkItemSnapshot = HostVariantImplementationWorkItemSnapshot | HostVariantPlanningWorkItemSnapshot;
-export declare const VARIANT_ARTIFACT_KINDS: readonly ["design_context", "source_context", "qa_report", "asset"];
-export type VariantArtifactKind = (typeof VARIANT_ARTIFACT_KINDS)[number];
-export type VariantArtifactStatus = 'ready' | 'warning' | 'failed';
-export type VariantArtifactSource = 'agent_browser' | 'cache' | 'static' | 'manual';
-export type VariantArtifactContentType = 'text/markdown' | 'application/json' | 'text/plain';
-export interface VariantSessionArtifact {
-    id: string;
-    kind: VariantArtifactKind;
-    label: string;
-    summary?: string;
-    usedByVariantCount?: number;
-    status?: VariantArtifactStatus;
-    source?: VariantArtifactSource;
-    contentType?: VariantArtifactContentType;
-    content?: string;
-    rawUrl?: string;
-    viewUrl?: string;
-    path?: string;
-    warnings?: string[];
-}
 export type VariantQaStatus = 'passed' | 'failed' | 'not_run';
 export type VariantQaIssueKind = 'asset_load_failed' | 'console_error' | 'preview_unavailable' | 'output_integrity' | 'verification_unavailable';
 export interface VariantQaIssue {

package/dist/agent-variants/contracts.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ERROR_CODES = exports.getVariantInput = exports.captureDesignEvidenceInput = exports.listPastVariantsInput = exports.variantHistoryStatusSchema = exports.startVariantsBriefContent = exports.cancelVariantsInput = exports.reportWorkItemInput = exports.reportVariantCompleteStatus = exports.continueVariantsInput = exports.continueVariantsAction = exports.commitVariantInput = exports.reportVariantBriefsInput = exports.proposeVariantsInput = exports.runLabelSchema = exports.DEFAULT_VARIANT_COUNT = exports.VARIANT_COUNT_MAX = exports.VARIANT_COUNT_MIN = exports.variantWorkItemContextSchema = exports.briefSchema = exports.targetSchema = exports.VARIANT_ARTIFACT_KINDS = exports.isWorkerFidelity = exports.VARIANT_EXECUTION_MODES = exports.projectContextInputSchema = exports.projectContextSchema = exports.projectContextFresh = exports.projectContextExisting = exports.variantContextBundleSchema = exports.executionCapabilityPlanSchema = exports.assetPlanEntrySchema = exports.executionConfidenceSchema = exports.executionModeSchema = exports.variantContextBindingSchema = exports.rivetMetadataSchema = exports.rivetContextActionSchema = exports.rivetContextActionKindSchema = exports.storedUserContextSourceRecordSchema = exports.stagedContextAssetSchema = exports.contextAssetInputSchema = exports.rawUserContextSourceSchema = exports.rawUserContextInputSchema = exports.sourceRoleSchema = exports.designContextEntrySchema = exports.CONTEXT_ASSET_MAX_ITEMS = exports.WORK_ITEM_STATUSES = exports.WORK_ITEM_KINDS = exports.TERMINAL_STAGES = exports.STAGES = void 0;
+exports.ERROR_CODES = exports.getVariantInput = exports.captureDesignEvidenceInput = exports.listPastVariantsInput = exports.variantHistoryStatusSchema = exports.startVariantsBriefContent = exports.cancelVariantsInput = exports.reportWorkItemInput = exports.reportVariantCompleteStatus = exports.continueVariantsInput = exports.continueVariantsAction = exports.commitVariantInput = exports.reportVariantBriefsInput = exports.proposeVariantsInput = exports.runLabelSchema = exports.DEFAULT_VARIANT_COUNT = exports.VARIANT_COUNT_MAX = exports.VARIANT_COUNT_MIN = exports.variantWorkItemContextSchema = exports.briefSchema = exports.targetSchema = exports.isWorkerFidelity = exports.VARIANT_EXECUTION_MODES = exports.projectContextInputSchema = exports.projectContextSchema = exports.projectContextFresh = exports.projectContextExisting = exports.variantContextBundleSchema = exports.executionCapabilityPlanSchema = exports.assetPlanEntrySchema = exports.executionConfidenceSchema = exports.executionModeSchema = exports.variantContextBindingSchema = exports.rivetMetadataSchema = exports.rivetContextActionSchema = exports.rivetContextActionKindSchema = exports.storedUserContextSourceRecordSchema = exports.stagedContextAssetSchema = exports.contextAssetInputSchema = exports.rawUserContextSourceSchema = exports.rawUserContextInputSchema = exports.sourceRoleSchema = exports.designContextEntrySchema = exports.CONTEXT_ASSET_MAX_ITEMS = exports.WORK_ITEM_STATUSES = exports.WORK_ITEM_KINDS = exports.TERMINAL_STAGES = exports.STAGES = void 0;
 const variant_reference_1 = require("../types/variant-reference");
 const v3_1 = require("zod/v3");
 const errors_1 = require("./errors");
@@ -355,12 +355,6 @@ exports.projectContextInputSchema = v3_1.z.discriminatedUnion('kind', [
 exports.VARIANT_EXECUTION_MODES = ['create', 'vary', 'refine'];
 const isWorkerFidelity = (value) => value === 'low' || value === 'medium' || value === 'high';
 exports.isWorkerFidelity = isWorkerFidelity;
-exports.VARIANT_ARTIFACT_KINDS = [
-    'design_context',
-    'source_context',
-    'qa_report',
-    'asset',
-];
 exports.targetSchema = v3_1.z.object({
     type: v3_1.z.enum(['element', 'file', 'route']),
     ref: v3_1.z.string().min(1),

package/dist/agent-variants/designContext.d.ts

@@ -0,0 +1,9 @@
+import type { ActiveProjectContext, ActiveVariantSnapshot, DesignContextEntry, ProjectContext } from './contracts';
+import type { VariantDesignSource } from '../services/VariantHistoryService';
+export declare const enrichDesignSource: (design: ActiveVariantSnapshot["design"]) => ActiveVariantSnapshot["design"];
+export declare const toActiveProjectContext: (projectContext: ProjectContext) => ActiveProjectContext;
+export declare const resolveDesignArtifact: (entry: DesignContextEntry | undefined) => {
+    markdown: string;
+    source: VariantDesignSource;
+} | null;
+//# sourceMappingURL=designContext.d.ts.map

package/dist/agent-variants/designContext.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveDesignArtifact = exports.toActiveProjectContext = exports.enrichDesignSource = void 0;
+const designCatalog_1 = require("../services/templates/designCatalog");
+const enrichDesignSource = (design) => {
+    if (!design || design.kind !== 'slug')
+        return design;
+    return {
+        ...design,
+        displayName: (0, designCatalog_1.getDesignSystemBySlug)(design.slug)?.name ?? design.slug,
+    };
+};
+exports.enrichDesignSource = enrichDesignSource;
+const toActiveProjectContext = (projectContext) => {
+    const sourceCount = projectContext.variantContext?.userContext.filter((source) => source.transport !== 'prompt').length ?? 0;
+    const hasSourceContextSummary = Boolean(sourceCount > 0 ||
+        (projectContext.variantContext?.rivetMetadata.length ?? 0) > 0);
+    const activeSourceContext = hasSourceContextSummary
+        ? {
+            sourceCount,
+            isSourceGrounded: Boolean(sourceCount > 0 ||
+                projectContext.designContext?.length ||
+                projectContext.variantContext?.rivetMetadata.length),
+        }
+        : undefined;
+    if (projectContext.kind === 'existing') {
+        return {
+            kind: 'existing',
+            designContext: projectContext.designContext?.map((entry) => entry.kind === 'slug'
+                ? { kind: 'slug', slug: entry.slug }
+                : { kind: 'markdown', label: entry.label }),
+            ...(activeSourceContext ? { sourceContext: activeSourceContext } : {}),
+        };
+    }
+    return {
+        kind: 'fresh',
+        workspacePath: projectContext.workspacePath,
+        workspaceRoot: projectContext.workspaceRoot,
+        framework: projectContext.framework,
+        designContext: projectContext.designContext?.map((entry) => entry.kind === 'slug'
+            ? { kind: 'slug', slug: entry.slug }
+            : { kind: 'markdown', label: entry.label }),
+        ...(activeSourceContext ? { sourceContext: activeSourceContext } : {}),
+        ...(projectContext.executionPlan
+            ? {
+                executionPlan: {
+                    mode: projectContext.executionPlan.mode,
+                    confidence: projectContext.executionPlan.confidence,
+                    reason: projectContext.executionPlan.reason,
+                    assetCount: projectContext.executionPlan.assetPlan?.length ?? 0,
+                    runtimeRequirementCount: projectContext.executionPlan.runtimeRequirements?.length ?? 0,
+                },
+            }
+            : {}),
+    };
+};
+exports.toActiveProjectContext = toActiveProjectContext;
+const resolveDesignArtifact = (entry) => {
+    if (!entry)
+        return null;
+    if (entry.kind === 'markdown') {
+        return {
+            markdown: entry.content,
+            source: { kind: 'markdown', label: entry.label },
+        };
+    }
+    const markdown = (0, designCatalog_1.loadDesignSystemMarkdown)(entry.slug);
+    if (!markdown)
+        return null;
+    const catalogEntry = (0, designCatalog_1.getDesignSystemBySlug)(entry.slug);
+    return {
+        markdown,
+        source: {
+            kind: 'slug',
+            slug: entry.slug,
+            label: catalogEntry?.name ?? entry.slug,
+        },
+    };
+};
+exports.resolveDesignArtifact = resolveDesignArtifact;
+//# sourceMappingURL=designContext.js.map

package/dist/cli/browser.d.ts

@@ -9,8 +9,10 @@ export type BrowserOpenResult = {
     action: 'launch_failed';
     reason: 'launcher_error';
 };
-export declare const requestBrowserOpen: ({ editorUrl, isBrowserDisabled, io, launch, }: {
-    editorUrl: string;
+export type BrowserUrlField = 'editorUrl' | 'authUrl';
+export declare const requestBrowserOpen: ({ url, urlField, isBrowserDisabled, io, launch, }: {
+    url: string;
+    urlField: BrowserUrlField;
     isBrowserDisabled: boolean;
     io: CliIO;
     launch?: (url: string) => Promise<unknown>;

package/dist/cli/browser.js

@@ -34,21 +34,21 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.requestBrowserOpen = void 0;
-const requestBrowserOpen = async ({ editorUrl, isBrowserDisabled, io, launch, }) => {
-    const publicUrl = new URL(editorUrl);
+const requestBrowserOpen = async ({ url, urlField, isBrowserDisabled, io, launch, }) => {
+    const publicUrl = new URL(url);
     publicUrl.hash = '';
     if (isBrowserDisabled) {
-        io.writeProgress(`Browser launch skipped (--no-browser). Open the editorUrl from the command result to authorize ${publicUrl}.`);
+        io.writeProgress(`Browser launch skipped (--no-browser). Open the ${urlField} from the command result to authorize ${publicUrl}.`);
         return { action: 'skipped', reason: 'no_browser_flag' };
     }
     try {
         const open = launch ?? (await Promise.resolve().then(() => __importStar(require('open')))).default;
-        await open(editorUrl);
+        await open(url);
         io.writeProgress(`Requested browser launch for ${publicUrl}`);
         return { action: 'launch_requested', reason: 'interactive_open' };
     }
     catch {
-        io.writeProgress(`Browser launch failed. Open the editorUrl from the command result to authorize ${publicUrl}.`);
+        io.writeProgress(`Browser launch failed. Open the ${urlField} from the command result to authorize ${publicUrl}.`);
         return { action: 'launch_failed', reason: 'launcher_error' };
     }
 };

package/dist/cli/browserSignIn.d.ts

@@ -0,0 +1,15 @@
+import { AuthService } from '../services/AuthService';
+import { type CliCommandResult } from './envelope';
+import type { CliIO } from './io';
+type BrowserSignInOptions = {
+    command: string;
+    io: CliIO;
+    isBrowserDisabled: boolean;
+    env: NodeJS.ProcessEnv;
+    editor?: string;
+    authService?: AuthService;
+    launch?: (url: string) => Promise<unknown>;
+};
+export declare const signInThroughBrowser: ({ command, io, isBrowserDisabled, env, editor, authService, launch, }: BrowserSignInOptions) => Promise<CliCommandResult | null>;
+export {};
+//# sourceMappingURL=browserSignIn.d.ts.map

package/dist/cli/browserSignIn.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.signInThroughBrowser = void 0;
+const AuthService_1 = require("../services/AuthService");
+const browser_1 = require("./browser");
+const envelope_1 = require("./envelope");
+const SIGN_IN_WAIT_ENV = 'RIVET_SIGN_IN_WAIT_MS';
+const DEFAULT_SIGN_IN_WAIT_MS = 45_000;
+const SIGN_IN_POLL_INTERVAL_MS = 2_000;
+const signInWaitMs = (env) => {
+    const parsed = Number.parseInt(env[SIGN_IN_WAIT_ENV] ?? '', 10);
+    return Number.isFinite(parsed) && parsed >= 0
+        ? parsed
+        : DEFAULT_SIGN_IN_WAIT_MS;
+};
+const signInRequired = ({ command, io, authUrl, browser, }) => {
+    const message = browser?.action === 'launch_requested'
+        ? `Rivet sign-in is open in the browser. Finish signing in there, then run \`rivet open\` again. If the browser did not open, use this link: ${authUrl}`
+        : `Sign in to Rivet in the browser with this link, then run \`rivet open\` again: ${authUrl}`;
+    io.writeProgress(message);
+    return (0, envelope_1.errorResult)(command, 'AUTH_REQUIRED', message, browser ? { browser } : undefined, (0, envelope_1.loginRecovery)(authUrl));
+};
+const signInThroughBrowser = async ({ command, io, isBrowserDisabled, env, editor, authService = new AuthService_1.AuthService(), launch, }) => {
+    const waitAttempts = isBrowserDisabled
+        ? 0
+        : Math.floor(signInWaitMs(env) / SIGN_IN_POLL_INTERVAL_MS);
+    const isSignedIn = async (attempts) => (await authService.resumePendingLogin(attempts))?.success === true;
+    if (await isSignedIn(waitAttempts + 1))
+        return null;
+    const pending = authService.peekPendingLogin();
+    if (pending?.authUrl) {
+        return signInRequired({ command, io, authUrl: pending.authUrl });
+    }
+    const begun = await authService.beginGoogleLogin({
+        source: 'cli',
+        editor,
+        noBrowser: true,
+    });
+    if (!begun.started) {
+        return (0, envelope_1.errorResult)(command, 'AUTH_REQUIRED', `Authentication required. Rivet could not start browser sign-in: ${begun.error} Have the user run \`rivet login\` to sign in.`);
+    }
+    const browser = await (0, browser_1.requestBrowserOpen)({
+        url: begun.authUrl,
+        urlField: 'authUrl',
+        isBrowserDisabled,
+        io,
+        launch,
+    });
+    if (browser.action === 'launch_requested' && (await isSignedIn(waitAttempts)))
+        return null;
+    return signInRequired({ command, io, authUrl: begun.authUrl, browser });
+};
+exports.signInThroughBrowser = signInThroughBrowser;
+//# sourceMappingURL=browserSignIn.js.map

package/dist/cli/client.js

@@ -109,7 +109,18 @@ const requestServer = async (attached, path, options = {}) => {
     if (options.expectedAccountId) {
         headers['X-Rivet-Account-Id'] = options.expectedAccountId;
     }
+    if ((0, editorAccess_1.isEditorApiPath)(path, options.method)) {
+        const token = (0, editorSession_1.readEditorAccessToken)({
+            pid: attached.handshake.pid,
+            port: attached.handshake.rivetPort,
+            projectPath: attached.handshake.projectPath,
+            startedAt: attached.handshake.startedAt,
+        });
+        if (token)
+            headers[editorAccess_1.EDITOR_ACCESS_TOKEN_HEADER] = token;
+    }
     const response = await fetch(`${attached.baseUrl}${path}`, {
+        redirect: 'error',
         method: options.method ?? 'GET',
         headers,
         ...(options.body === undefined

package/dist/cli/commands/evidence.js

@@ -60,7 +60,7 @@ const handleEvidenceCapture = async (args) => {
     }
     const { getConfigManager } = await Promise.resolve().then(() => __importStar(require('../../services/ConfigManager')));
     if (!getConfigManager().isAuthenticated()) {
-        return (0, envelope_1.errorResult)(COMMAND, 'AUTH_REQUIRED', 'Authentication required. Call the rivet_login MCP tool if this host has it; otherwise have the user run `rivet login` in a terminal.');
+        return (0, envelope_1.errorResult)(COMMAND, 'AUTH_REQUIRED', envelope_1.AUTH_REQUIRED_MESSAGE);
     }
     const { BrowserAgentClient } = await Promise.resolve().then(() => __importStar(require('../../services/BrowserAgentClient')));
     const client = new BrowserAgentClient();

package/dist/cli/commands/libraryOpen.d.ts

@@ -1,8 +1,10 @@
 import type { CliIO } from '../io';
 import { type CliCommandResult } from '../envelope';
+import type { AuthService } from '../../services/AuthService';
 interface LibraryOpenOptions {
     env?: NodeJS.ProcessEnv;
     openBrowser?: (url: string) => Promise<unknown>;
+    authService?: AuthService;
 }
 export declare const handleLibraryOpen: (args: string[], io: CliIO, options?: LibraryOpenOptions) => Promise<CliCommandResult>;
 export {};

package/dist/cli/commands/libraryOpen.js

@@ -17,6 +17,7 @@ const ProjectRegistry_1 = require("../../services/ProjectRegistry");
 const HubClient_1 = require("../../library/HubClient");
 const browserLaunch_1 = require("../../library/browserLaunch");
 const browser_1 = require("../browser");
+const browserSignIn_1 = require("../browserSignIn");
 const errorMessage_1 = require("../../utils/errorMessage");
 const GUIDANCE_TIMEOUT_MS = 5_000;
 const OPEN_FLAG_SPEC = {
@@ -32,7 +33,7 @@ const handleLibraryOpen = async (args, io, options = {}) => {
     if ((0, shared_1.isCommandResult)(context))
         return context;
     const root = (0, ProjectLibrary_1.currentLibraryRoot)(env);
-    const accountId = (0, ConfigManager_1.getConfigManager)().getUserId();
+    const isBrowserDisabled = context.flags.values['no-browser'] === true;
     const registry = await ProjectRegistry_1.ProjectRegistry.open(root);
     try {
         const hasProject = isProjectOpen({
@@ -41,10 +42,23 @@ const handleLibraryOpen = async (args, io, options = {}) => {
             isRegistered: Boolean(registry.findByPath(context.projectPath)),
         });
         if (hasProject) {
-            const validation = await (0, open_1.validateProjectOpen)({ context, io });
+            const validation = await (0, open_1.validateProjectOpen)({
+                context,
+                io,
+                signIn: () => (0, browserSignIn_1.signInThroughBrowser)({
+                    command: 'open',
+                    io,
+                    isBrowserDisabled,
+                    env,
+                    editor: context.handoff?.agent,
+                    authService: options.authService,
+                    launch: options.openBrowser,
+                }),
+            });
             if (validation)
                 return validation;
         }
+        const accountId = (0, ConfigManager_1.getConfigManager)().getUserId();
         const hub = await (0, HubClient_1.ensureHub)({
             root,
             env: {
@@ -76,13 +90,13 @@ const handleLibraryOpen = async (args, io, options = {}) => {
         const projectSuffix = projectId
             ? `/projects/${encodeURIComponent(projectId)}`
             : '';
-        const isBrowserDisabled = context.flags.values['no-browser'] === true;
         const editorUrl = await (0, browserLaunch_1.createLibraryLaunchUrl)({
             hub,
             path: `/rivet/library${projectSuffix}`,
         });
         const browser = await (0, browser_1.requestBrowserOpen)({
-            editorUrl,
+            url: editorUrl,
+            urlField: 'editorUrl',
             isBrowserDisabled,
             io,
             launch: options.openBrowser,

package/dist/cli/commands/open.d.ts

@@ -44,10 +44,11 @@ export type ProjectRuntimeDependencies = {
     isAuthenticated?: () => boolean;
     env?: NodeJS.ProcessEnv;
 };
-export declare const validateProjectOpen: ({ context, io, isAuthenticated: checkAuthentication, }: {
+export declare const validateProjectOpen: ({ context, io, isAuthenticated: checkAuthentication, signIn, }: {
     context: CommandContext;
     io: CliIO;
     isAuthenticated?: () => boolean;
+    signIn?: () => Promise<CliCommandResult | null>;
 }) => Promise<CliCommandResult | null>;
 export declare const ensureProjectRuntime: (context: CommandContext, io: CliIO, dependencies?: ProjectRuntimeDependencies) => Promise<CliCommandResult>;
 export {};

package/dist/cli/commands/open.js

@@ -192,7 +192,7 @@ const finishProjectOpen = (data, io) => {
     }
     return (0, envelope_1.okResult)(COMMAND, data);
 };
-const validateProjectOpen = async ({ context, io, isAuthenticated: checkAuthentication, }) => {
+const validateProjectOpen = async ({ context, io, isAuthenticated: checkAuthentication, signIn, }) => {
     const agentSelectionError = (0, runnerSelection_1.explicitRunnerSelectionError)((0, flags_1.stringFlag)(context.flags, 'agent'));
     if (agentSelectionError) {
         return (0, envelope_1.errorResult)(COMMAND, 'USAGE_ERROR', agentSelectionError);
@@ -202,11 +202,12 @@ const validateProjectOpen = async ({ context, io, isAuthenticated: checkAuthenti
         const { getConfigManager } = await Promise.resolve().then(() => __importStar(require('../../services/ConfigManager')));
         isAuthenticated = () => getConfigManager().isAuthenticated();
     }
-    if (!isAuthenticated()) {
-        io.writeProgress('Not signed in. Use the rivet_login MCP tool, or run `rivet login` in a terminal.');
-        return (0, envelope_1.errorResult)(COMMAND, 'AUTH_REQUIRED', 'Authentication required. Call the rivet_login MCP tool if this host has it; otherwise have the user run `rivet login` in a terminal.');
-    }
-    return null;
+    if (isAuthenticated())
+        return null;
+    if (signIn)
+        return signIn();
+    io.writeProgress(envelope_1.AUTH_REQUIRED_MESSAGE);
+    return (0, envelope_1.errorResult)(COMMAND, 'AUTH_REQUIRED', envelope_1.AUTH_REQUIRED_MESSAGE);
 };
 exports.validateProjectOpen = validateProjectOpen;
 const verifyRuntimeReadiness = async (attached, appHealthTimeoutMs) => {

package/dist/cli/commands/reference.js

@@ -120,7 +120,7 @@ const handleReferenceFetch = async (args) => {
     }
     const { getConfigManager } = await Promise.resolve().then(() => __importStar(require('../../services/ConfigManager')));
     if (!getConfigManager().isAuthenticated()) {
-        return (0, envelope_1.errorResult)(COMMAND, 'AUTH_REQUIRED', 'Authentication required. Call the rivet_login MCP tool if this host has it; otherwise have the user run `rivet login` in a terminal.', { provider });
+        return (0, envelope_1.errorResult)(COMMAND, 'AUTH_REQUIRED', envelope_1.AUTH_REQUIRED_MESSAGE, { provider });
     }
     const { IntegrationsClient } = await Promise.resolve().then(() => __importStar(require('../../services/IntegrationsClient')));
     const client = new IntegrationsClient();

package/dist/cli/envelope.d.ts

@@ -13,7 +13,9 @@ export type CliLoginAction = {
     action: 'login';
     command: 'rivet login';
     mcpTool: 'rivet_login';
+    authUrl?: string;
 };
+export declare const AUTH_REQUIRED_MESSAGE = "Authentication required. Run `rivet open` to open Rivet sign-in in the browser, or call the rivet_login MCP tool if this host has it. `rivet login` also works when the user runs it.";
 export type CliOpenProjectAction = {
     action: 'open_project';
     command: 'rivet open';
@@ -55,6 +57,7 @@ export type CliCommandResult = {
     exitCode: CliExitCode;
 };
 export declare const okResult: (command: string, data: unknown) => CliCommandResult;
+export declare const loginRecovery: (authUrl?: string) => CliErrorRecovery;
 export declare const errorResult: (command: string, code: CliErrorCode, message: string, details?: unknown, explicitRecovery?: CliErrorRecovery) => CliCommandResult;
 export declare const serializeEnvelope: (envelope: CliEnvelope) => string;
 //# sourceMappingURL=envelope.d.ts.map

package/dist/cli/envelope.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.serializeEnvelope = exports.errorResult = exports.okResult = exports.CLI_EXIT_CODES = exports.CLI_SCHEMA_VERSION = void 0;
+exports.serializeEnvelope = exports.errorResult = exports.loginRecovery = exports.okResult = exports.AUTH_REQUIRED_MESSAGE = exports.CLI_EXIT_CODES = exports.CLI_SCHEMA_VERSION = void 0;
 exports.CLI_SCHEMA_VERSION = 1;
 exports.CLI_EXIT_CODES = {
     ok: 0,
@@ -10,6 +10,7 @@ exports.CLI_EXIT_CODES = {
     serverUnavailable: 4,
     waitTimeout: 5,
 };
+exports.AUTH_REQUIRED_MESSAGE = 'Authentication required. Run `rivet open` to open Rivet sign-in in the browser, or call the rivet_login MCP tool if this host has it. `rivet login` also works when the user runs it.';
 const okResult = (command, data) => ({
     envelope: { schemaVersion: exports.CLI_SCHEMA_VERSION, ok: true, command, data },
     exitCode: exports.CLI_EXIT_CODES.ok,
@@ -25,18 +26,17 @@ const ERROR_EXIT_CODES = {
     WORK_ITEM_NOT_FOUND: exports.CLI_EXIT_CODES.operationFailed,
     MCP_REMOVED: exports.CLI_EXIT_CODES.usageError,
 };
-const recoveryForError = (code) => {
-    if (code !== 'AUTH_REQUIRED')
-        return undefined;
-    return {
-        isRecoverable: true,
-        nextAction: {
-            action: 'login',
-            command: 'rivet login',
-            mcpTool: 'rivet_login',
-        },
-    };
-};
+const loginRecovery = (authUrl) => ({
+    isRecoverable: true,
+    nextAction: {
+        action: 'login',
+        command: 'rivet login',
+        mcpTool: 'rivet_login',
+        ...(authUrl ? { authUrl } : {}),
+    },
+});
+exports.loginRecovery = loginRecovery;
+const recoveryForError = (code) => code === 'AUTH_REQUIRED' ? (0, exports.loginRecovery)() : undefined;
 const errorResult = (command, code, message, details, explicitRecovery) => {
     const recovery = explicitRecovery ?? recoveryForError(code);
     return {

package/dist/cli/telemetry.js

@@ -6,9 +6,11 @@ const recordOf = (value) => value !== null && typeof value === 'object'
     ? value
     : {};
 const browserMetadataForEnvelope = (envelope) => {
-    if (!envelope.ok || envelope.command !== 'open')
+    if (envelope.command !== 'open')
         return {};
-    const browser = recordOf(recordOf(envelope.data).browser);
+    const browser = recordOf(envelope.ok
+        ? recordOf(envelope.data).browser
+        : recordOf(envelope.error.details).browser);
     if ((browser.action === 'launch_requested' &&
         browser.reason === 'interactive_open') ||
         (browser.action === 'skipped' && browser.reason === 'no_browser_flag') ||

package/dist/config/flags.d.ts

@@ -35,9 +35,6 @@ export declare const FLAG_DEFINITIONS: {
     readonly refineMode: {
         readonly default: false;
     };
-    readonly designContextViewer: {
-        readonly default: false;
-    };
     readonly inspectorUndoRedo: {
         readonly default: false;
     };