rivet-design 0.24.0 → 0.26.0

package/dist/cli/commands/libraryOpen.d.ts

@@ -1,8 +1,10 @@
 import type { CliIO } from '../io';
 import { type CliCommandResult } from '../envelope';
+import type { AuthService } from '../../services/AuthService';
 interface LibraryOpenOptions {
     env?: NodeJS.ProcessEnv;
     openBrowser?: (url: string) => Promise<unknown>;
+    authService?: AuthService;
 }
 export declare const handleLibraryOpen: (args: string[], io: CliIO, options?: LibraryOpenOptions) => Promise<CliCommandResult>;
 export {};

package/dist/cli/commands/libraryOpen.js

@@ -17,6 +17,7 @@ const ProjectRegistry_1 = require("../../services/ProjectRegistry");
 const HubClient_1 = require("../../library/HubClient");
 const browserLaunch_1 = require("../../library/browserLaunch");
 const browser_1 = require("../browser");
+const browserSignIn_1 = require("../browserSignIn");
 const errorMessage_1 = require("../../utils/errorMessage");
 const GUIDANCE_TIMEOUT_MS = 5_000;
 const OPEN_FLAG_SPEC = {
@@ -32,7 +33,7 @@ const handleLibraryOpen = async (args, io, options = {}) => {
     if ((0, shared_1.isCommandResult)(context))
         return context;
     const root = (0, ProjectLibrary_1.currentLibraryRoot)(env);
-    const accountId = (0, ConfigManager_1.getConfigManager)().getUserId();
+    const isBrowserDisabled = context.flags.values['no-browser'] === true;
     const registry = await ProjectRegistry_1.ProjectRegistry.open(root);
     try {
         const hasProject = isProjectOpen({
@@ -41,10 +42,23 @@ const handleLibraryOpen = async (args, io, options = {}) => {
             isRegistered: Boolean(registry.findByPath(context.projectPath)),
         });
         if (hasProject) {
-            const validation = await (0, open_1.validateProjectOpen)({ context, io });
+            const validation = await (0, open_1.validateProjectOpen)({
+                context,
+                io,
+                signIn: () => (0, browserSignIn_1.signInThroughBrowser)({
+                    command: 'open',
+                    io,
+                    isBrowserDisabled,
+                    env,
+                    editor: context.handoff?.agent,
+                    authService: options.authService,
+                    launch: options.openBrowser,
+                }),
+            });
             if (validation)
                 return validation;
         }
+        const accountId = (0, ConfigManager_1.getConfigManager)().getUserId();
         const hub = await (0, HubClient_1.ensureHub)({
             root,
             env: {
@@ -76,13 +90,13 @@ const handleLibraryOpen = async (args, io, options = {}) => {
         const projectSuffix = projectId
             ? `/projects/${encodeURIComponent(projectId)}`
             : '';
-        const isBrowserDisabled = context.flags.values['no-browser'] === true;
         const editorUrl = await (0, browserLaunch_1.createLibraryLaunchUrl)({
             hub,
             path: `/rivet/library${projectSuffix}`,
         });
         const browser = await (0, browser_1.requestBrowserOpen)({
-            editorUrl,
+            url: editorUrl,
+            urlField: 'editorUrl',
             isBrowserDisabled,
             io,
             launch: options.openBrowser,

package/dist/cli/commands/mcpServe.d.ts

@@ -5,12 +5,12 @@ type McpServeOptions = {
     projectPath?: string;
     handoffArgs?: string[];
     noTelemetry?: boolean;
-    telemetry?: Pick<TelemetryService, 'track' | 'trackCliCommandCompleted' | 'trackMCPToolExecuted' | 'trackMCPToolFailed' | 'shutdown'>;
+    telemetry?: Pick<TelemetryService, 'track' | 'trackCliCommandCompleted' | 'trackMCPToolExecuted' | 'trackMCPToolFailed' | 'reportInstallRefActivations' | 'shutdown'>;
 };
 export declare const isStaleAttachError: (envelope: CliEnvelope) => boolean;
 export declare const buildMcpServer: (options?: McpServeOptions) => Promise<{
     mcp: import("@modelcontextprotocol/sdk/server/mcp.js").McpServer;
-    telemetry: Pick<TelemetryService, "track" | "trackCliCommandCompleted" | "trackMCPToolExecuted" | "trackMCPToolFailed" | "shutdown"> | null;
+    telemetry: Pick<TelemetryService, "reportInstallRefActivations" | "track" | "trackCliCommandCompleted" | "trackMCPToolExecuted" | "trackMCPToolFailed" | "shutdown"> | null;
 }>;
 export declare const handleMcpServe: (rest: string[], io: CliIO) => Promise<CliCommandResult>;
 export {};

package/dist/cli/commands/mcpServe.js

@@ -238,6 +238,7 @@ const buildMcpServer = async (options = {}) => {
                     isRecoverable: args.envelope.error.isRecoverable,
                 });
             }
+            telemetry?.reportInstallRefActivations();
         }
         catch { }
         return toToolResult(args.envelope, args.progress);

package/dist/cli/commands/open.d.ts

@@ -44,10 +44,11 @@ export type ProjectRuntimeDependencies = {
     isAuthenticated?: () => boolean;
     env?: NodeJS.ProcessEnv;
 };
-export declare const validateProjectOpen: ({ context, io, isAuthenticated: checkAuthentication, }: {
+export declare const validateProjectOpen: ({ context, io, isAuthenticated: checkAuthentication, signIn, }: {
     context: CommandContext;
     io: CliIO;
     isAuthenticated?: () => boolean;
+    signIn?: () => Promise<CliCommandResult | null>;
 }) => Promise<CliCommandResult | null>;
 export declare const ensureProjectRuntime: (context: CommandContext, io: CliIO, dependencies?: ProjectRuntimeDependencies) => Promise<CliCommandResult>;
 export {};

package/dist/cli/commands/open.js

@@ -192,7 +192,7 @@ const finishProjectOpen = (data, io) => {
     }
     return (0, envelope_1.okResult)(COMMAND, data);
 };
-const validateProjectOpen = async ({ context, io, isAuthenticated: checkAuthentication, }) => {
+const validateProjectOpen = async ({ context, io, isAuthenticated: checkAuthentication, signIn, }) => {
     const agentSelectionError = (0, runnerSelection_1.explicitRunnerSelectionError)((0, flags_1.stringFlag)(context.flags, 'agent'));
     if (agentSelectionError) {
         return (0, envelope_1.errorResult)(COMMAND, 'USAGE_ERROR', agentSelectionError);
@@ -202,11 +202,12 @@ const validateProjectOpen = async ({ context, io, isAuthenticated: checkAuthenti
         const { getConfigManager } = await Promise.resolve().then(() => __importStar(require('../../services/ConfigManager')));
         isAuthenticated = () => getConfigManager().isAuthenticated();
     }
-    if (!isAuthenticated()) {
-        io.writeProgress('Not signed in. Use the rivet_login MCP tool, or run `rivet login` in a terminal.');
-        return (0, envelope_1.errorResult)(COMMAND, 'AUTH_REQUIRED', 'Authentication required. Call the rivet_login MCP tool if this host has it; otherwise have the user run `rivet login` in a terminal.');
-    }
-    return null;
+    if (isAuthenticated())
+        return null;
+    if (signIn)
+        return signIn();
+    io.writeProgress(envelope_1.AUTH_REQUIRED_MESSAGE);
+    return (0, envelope_1.errorResult)(COMMAND, 'AUTH_REQUIRED', envelope_1.AUTH_REQUIRED_MESSAGE);
 };
 exports.validateProjectOpen = validateProjectOpen;
 const verifyRuntimeReadiness = async (attached, appHealthTimeoutMs) => {

package/dist/cli/commands/reference.js

@@ -120,7 +120,7 @@ const handleReferenceFetch = async (args) => {
     }
     const { getConfigManager } = await Promise.resolve().then(() => __importStar(require('../../services/ConfigManager')));
     if (!getConfigManager().isAuthenticated()) {
-        return (0, envelope_1.errorResult)(COMMAND, 'AUTH_REQUIRED', 'Authentication required. Call the rivet_login MCP tool if this host has it; otherwise have the user run `rivet login` in a terminal.', { provider });
+        return (0, envelope_1.errorResult)(COMMAND, 'AUTH_REQUIRED', envelope_1.AUTH_REQUIRED_MESSAGE, { provider });
     }
     const { IntegrationsClient } = await Promise.resolve().then(() => __importStar(require('../../services/IntegrationsClient')));
     const client = new IntegrationsClient();

package/dist/cli/commands/variants.js

@@ -58,7 +58,6 @@ const errorMessage_1 = require("../../utils/errorMessage");
 const START_COMMAND = 'variants.start';
 const STATUS_COMMAND = 'variants.status';
 const CANCEL_COMMAND = 'variants.cancel';
-const COMMIT_COMMAND = 'variants.commit';
 const COMPLETE_COMMAND = 'variants.complete';
 const GET_COMMAND = 'variants.get';
 const LIST_COMMAND = 'variants.list';
@@ -102,9 +101,6 @@ const CONTEXT_IMAGE_MIME_BY_EXTENSION = new Map([
 const MAX_REFERENCE_PAGES = 3;
 const MAX_REFERENCE_VIDEOS = 2;
 const REFERENCE_VIDEO_EXTENSIONS = new Set(['.mp4', '.mov', '.webm', '.m4v']);
-const COMMIT_FLAG_SPEC = {
-    session: { takesValue: true },
-};
 const COMPLETE_FLAG_SPEC = {
     session: { takesValue: true },
     status: { takesValue: true },
@@ -698,44 +694,10 @@ const handleVariantsCancel = async (args) => {
 };
 const resolveActiveSessionId = async (attached) => {
     const response = await (0, client_1.requestServer)(attached, '/api/variants/active');
-    if (response.status !== 200 || response.body.active !== true) {
+    if (response.status !== 200 || response.body.active !== true)
         return null;
-    }
     return response.body.sessionId ?? null;
 };
-const handleVariantsCommit = async (args) => {
-    const context = (0, shared_1.parseCommandContext)(COMMIT_COMMAND, args, COMMIT_FLAG_SPEC);
-    if ((0, shared_1.isCommandResult)(context)) {
-        return context;
-    }
-    const variantId = context.flags.positionals[0];
-    if (!variantId) {
-        return (0, envelope_1.errorResult)(COMMIT_COMMAND, 'USAGE_ERROR', 'Usage: rivet variants commit <variantId> [--session <sessionId>]');
-    }
-    const attached = await (0, shared_1.attachOrUnavailable)(COMMIT_COMMAND, context.projectPath);
-    if (!(0, shared_1.isAttached)(attached)) {
-        return attached;
-    }
-    try {
-        const sessionId = (0, flags_1.stringFlag)(context.flags, 'session') ??
-            (await resolveActiveSessionId(attached));
-        if (!sessionId) {
-            return (0, envelope_1.errorResult)(COMMIT_COMMAND, 'OPERATION_FAILED', 'No active variants session. Pass --session <sessionId> for a past session.');
-        }
-        const response = await (0, client_1.requestServer)(attached, `/api/variants/${encodeURIComponent(sessionId)}/commit`, { method: 'POST', body: { variantId } });
-        if (response.status !== 200) {
-            return (0, shared_1.serverErrorResult)(COMMIT_COMMAND, response.status, response.body);
-        }
-        return (0, envelope_1.okResult)(COMMIT_COMMAND, {
-            sessionId,
-            variantId,
-            result: response.body,
-        });
-    }
-    catch (error) {
-        return (0, shared_1.transportErrorResult)(COMMIT_COMMAND, error);
-    }
-};
 const handleVariantsComplete = async (args) => {
     const context = (0, shared_1.parseCommandContext)(COMPLETE_COMMAND, args, COMPLETE_FLAG_SPEC);
     if ((0, shared_1.isCommandResult)(context)) {
@@ -939,9 +901,6 @@ const handleVariants = async (args, options = {}) => {
     if (action === 'cancel') {
         return handleVariantsCancel(rest);
     }
-    if (action === 'commit') {
-        return handleVariantsCommit(rest);
-    }
     if (action === 'complete') {
         return handleVariantsComplete(rest);
     }
@@ -951,7 +910,7 @@ const handleVariants = async (args, options = {}) => {
     if (action === 'list') {
         return handleVariantsList(rest);
     }
-    return (0, envelope_1.errorResult)('variants', 'USAGE_ERROR', 'Usage: rivet variants <start|status|cancel|commit|complete|get|list> [options]');
+    return (0, envelope_1.errorResult)('variants', 'USAGE_ERROR', 'Usage: rivet variants <start|status|cancel|complete|get|list> [options]');
 };
 exports.handleVariants = handleVariants;
 //# sourceMappingURL=variants.js.map

package/dist/cli/envelope.d.ts

@@ -13,7 +13,9 @@ export type CliLoginAction = {
     action: 'login';
     command: 'rivet login';
     mcpTool: 'rivet_login';
+    authUrl?: string;
 };
+export declare const AUTH_REQUIRED_MESSAGE = "Authentication required. Run `rivet open` to open Rivet sign-in in the browser, or call the rivet_login MCP tool if this host has it. `rivet login` also works when the user runs it.";
 export type CliOpenProjectAction = {
     action: 'open_project';
     command: 'rivet open';
@@ -55,6 +57,7 @@ export type CliCommandResult = {
     exitCode: CliExitCode;
 };
 export declare const okResult: (command: string, data: unknown) => CliCommandResult;
+export declare const loginRecovery: (authUrl?: string) => CliErrorRecovery;
 export declare const errorResult: (command: string, code: CliErrorCode, message: string, details?: unknown, explicitRecovery?: CliErrorRecovery) => CliCommandResult;
 export declare const serializeEnvelope: (envelope: CliEnvelope) => string;
 //# sourceMappingURL=envelope.d.ts.map

package/dist/cli/envelope.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.serializeEnvelope = exports.errorResult = exports.okResult = exports.CLI_EXIT_CODES = exports.CLI_SCHEMA_VERSION = void 0;
+exports.serializeEnvelope = exports.errorResult = exports.loginRecovery = exports.okResult = exports.AUTH_REQUIRED_MESSAGE = exports.CLI_EXIT_CODES = exports.CLI_SCHEMA_VERSION = void 0;
 exports.CLI_SCHEMA_VERSION = 1;
 exports.CLI_EXIT_CODES = {
     ok: 0,
@@ -10,6 +10,7 @@ exports.CLI_EXIT_CODES = {
     serverUnavailable: 4,
     waitTimeout: 5,
 };
+exports.AUTH_REQUIRED_MESSAGE = 'Authentication required. Run `rivet open` to open Rivet sign-in in the browser, or call the rivet_login MCP tool if this host has it. `rivet login` also works when the user runs it.';
 const okResult = (command, data) => ({
     envelope: { schemaVersion: exports.CLI_SCHEMA_VERSION, ok: true, command, data },
     exitCode: exports.CLI_EXIT_CODES.ok,
@@ -25,18 +26,17 @@ const ERROR_EXIT_CODES = {
     WORK_ITEM_NOT_FOUND: exports.CLI_EXIT_CODES.operationFailed,
     MCP_REMOVED: exports.CLI_EXIT_CODES.usageError,
 };
-const recoveryForError = (code) => {
-    if (code !== 'AUTH_REQUIRED')
-        return undefined;
-    return {
-        isRecoverable: true,
-        nextAction: {
-            action: 'login',
-            command: 'rivet login',
-            mcpTool: 'rivet_login',
-        },
-    };
-};
+const loginRecovery = (authUrl) => ({
+    isRecoverable: true,
+    nextAction: {
+        action: 'login',
+        command: 'rivet login',
+        mcpTool: 'rivet_login',
+        ...(authUrl ? { authUrl } : {}),
+    },
+});
+exports.loginRecovery = loginRecovery;
+const recoveryForError = (code) => code === 'AUTH_REQUIRED' ? (0, exports.loginRecovery)() : undefined;
 const errorResult = (command, code, message, details, explicitRecovery) => {
     const recovery = explicitRecovery ?? recoveryForError(code);
     return {

package/dist/cli/router.js

@@ -79,8 +79,8 @@ const COMMAND_USAGE = {
         'Block until a work id settles; exits 5 on timeout.',
     ],
     variants: [
-        'rivet variants <start|status|cancel|commit|complete|get|list> [options]',
-        'start: --instruction <text> [--count N] [--element <selector>] [--fresh] [--target <sessionId>:<variantId>] [--worker-provider claude|codex|cursor] [--worker-model <id>] · get <projectId>/<sessionId>:<variantId> [--detail] · cancel <sessionId> · commit <variantId> [--session <id>] · list [--history]',
+        'rivet variants <start|status|cancel|complete|get|list> [options]',
+        'start: --instruction <text> [--count N] [--element <selector>] [--fresh] [--target <sessionId>:<variantId>] [--worker-provider claude|codex|cursor] [--worker-model <id>] · get <projectId>/<sessionId>:<variantId> [--detail] · cancel <sessionId> · list [--history]',
     ],
     evidence: [
         'rivet evidence capture --url <url> [--screenshot] [--width N --height N]',
@@ -311,6 +311,7 @@ const runCliControlCommand = async (args, io = io_1.processCliIO) => {
                 ...(0, telemetry_1.browserMetadataForEnvelope)(result.envelope),
                 ...(0, handoff_1.callerTelemetryFieldsFromArgs)(rest),
             });
+            telemetry.reportInstallRefActivations();
             await telemetry.shutdown(result.envelope.command === 'variants.get'
                 ? VARIANT_LOOKUP_TELEMETRY_TIMEOUT_MS
                 : undefined);

package/dist/cli/telemetry.js

@@ -6,9 +6,11 @@ const recordOf = (value) => value !== null && typeof value === 'object'
     ? value
     : {};
 const browserMetadataForEnvelope = (envelope) => {
-    if (!envelope.ok || envelope.command !== 'open')
+    if (envelope.command !== 'open')
         return {};
-    const browser = recordOf(recordOf(envelope.data).browser);
+    const browser = recordOf(envelope.ok
+        ? recordOf(envelope.data).browser
+        : recordOf(envelope.error.details).browser);
     if ((browser.action === 'launch_requested' &&
         browser.reason === 'interactive_open') ||
         (browser.action === 'skipped' && browser.reason === 'no_browser_flag') ||

package/dist/config/flags.d.ts

@@ -26,18 +26,12 @@ export declare const FLAG_DEFINITIONS: {
     readonly canvasShare: {
         readonly default: false;
     };
-    readonly variantSend: {
-        readonly default: false;
-    };
     readonly generativeControls: {
         readonly default: false;
     };
     readonly refineMode: {
         readonly default: false;
     };
-    readonly designContextViewer: {
-        readonly default: false;
-    };
     readonly inspectorUndoRedo: {
         readonly default: false;
     };

package/dist/config/flags.js

@@ -11,10 +11,8 @@ exports.FLAG_DEFINITIONS = {
     share: { default: false },
     deployPrototype: { default: false },
     canvasShare: { default: false },
-    variantSend: { default: false },
     generativeControls: { default: false },
     refineMode: { default: false },
-    designContextViewer: { default: false },
     inspectorUndoRedo: { default: false },
 };
 exports.DEFAULT_FEATURE_FLAGS = Object.fromEntries(Object.entries(exports.FLAG_DEFINITIONS).map(([key, def]) => [

package/dist/config/pluginMetrics.js

@@ -16,7 +16,6 @@ const metricProperties = zod_1.z.object({
         'variants.get',
         'variants.list',
         'variants.complete',
-        'variants.commit',
         'variants.cancel',
         'reference.fetch',
         'evidence.capture',
@@ -27,7 +26,6 @@ const metricProperties = zod_1.z.object({
         'rivet_login',
         'rivet_explore_designs',
         'rivet_get_exploration',
-        'rivet_apply_design',
         'rivet_cancel_exploration',
         'rivet_complete_variant_work',
         'rivet_get_design_context',
@@ -216,8 +214,6 @@ const PRODUCT_EVENTS = new Set([
     'agent_variants.preview_started',
     'agent_variants.preview_ready',
     'agent_variants.preview_failed',
-    'agent_variants.committed',
-    'agent_variants.commit_failed',
 ]);
 const pluginMetricProperties = (event, properties) => {
     if (!PRODUCT_EVENTS.has(event))

package/dist/index.d.ts

@@ -73,7 +73,7 @@ export declare const authCommandOptionsForArgs: (args: string[]) => {
     noBrowser: boolean;
     noTelemetry: boolean;
 };
-export declare const rememberInstallRef: (args: string[]) => string[];
+export declare const rememberInstallRef: (args: string[], downloadType?: string) => string[];
 export declare const authFailureReasonForError: (error: string | undefined) => "oauth_failed" | "timeout";
 export declare const main: (args?: string[]) => Promise<void>;
 export declare const parseArgs: (args: string[]) => CLIOptions;

package/dist/index.js

@@ -238,14 +238,19 @@ const authCommandOptionsForArgs = (args) => ({
     noTelemetry: args.includes('--no-telemetry'),
 });
 exports.authCommandOptionsForArgs = authCommandOptionsForArgs;
-const rememberInstallRef = (args) => {
+const rememberInstallRef = (args, downloadType) => {
     const { installRef, remainingArgs } = (0, installRef_1.extractInstallRef)(args);
     if (installRef) {
-        (0, ConfigManager_1.getConfigManager)().setInstallRef(installRef);
+        (0, ConfigManager_1.getConfigManager)().setInstallRef(installRef, downloadType);
     }
     return remainingArgs;
 };
 exports.rememberInstallRef = rememberInstallRef;
+const reportInstallRefActivations = async () => {
+    const telemetry = new TelemetryService_1.TelemetryService({ source: 'cli' });
+    telemetry.reportInstallRefActivations();
+    await telemetry.shutdown();
+};
 const discardInstallRefForValidatedSession = () => {
     const configManager = (0, ConfigManager_1.getConfigManager)();
     const installRef = configManager.getInstallRef();
@@ -781,7 +786,7 @@ const promptPostInstall = async () => {
         ? 'npx -y rivet-design@latest login'
         : 'rivet login';
     if (!process.stdin.isTTY || process.env.CI === 'true') {
-        console.log(`\nOne more step: run \`${loginCommand}\` to sign in (or create an account) and start using Rivet.\n`);
+        console.log(`\nNext: open your agent and say "Open Rivet". The first time, Rivet opens sign-in in your browser so you can sign in or create an account (\`${loginCommand}\` also works).\n`);
         return;
     }
     if (await new AuthService_1.AuthService().ensureAuthenticated()) {
@@ -799,11 +804,12 @@ const promptPostInstall = async () => {
         });
     }
     else {
-        console.log(`\nNo problem — run \`${loginCommand}\` whenever you're ready.\n`);
+        console.log(`\nNo problem — Rivet opens sign-in in your browser the first time you say "Open Rivet" (or run \`${loginCommand}\` whenever you're ready).\n`);
     }
 };
 const handleInstall = async (installArgs) => {
-    const parsed = (0, flags_1.parseFlags)((0, installRef_1.extractInstallRef)(installArgs).remainingArgs, {
+    const { installRef, remainingArgs } = (0, installRef_1.extractInstallRef)(installArgs);
+    const parsed = (0, flags_1.parseFlags)(remainingArgs, {
         mcp: { takesValue: false },
         'no-mcp': { takesValue: false },
         'no-telemetry': { takesValue: false },
@@ -852,7 +858,9 @@ const handleInstall = async (installArgs) => {
         (0, harnesses_1.reportInstallConfirmation)(selection, installArgs);
         return;
     }
-    (0, exports.rememberInstallRef)(installArgs);
+    (0, exports.rememberInstallRef)(installArgs, selection.targetIds.join(','));
+    if (installRef)
+        await reportInstallRefActivations();
     const bootstrap = (0, globalBootstrap_1.bootstrapGlobalInstall)(installArgs);
     if (bootstrap.action === 'reexeced') {
         process.exit(bootstrap.exitCode);
@@ -877,6 +885,10 @@ const handleLogin = async (options = {}) => {
         enabled: !options.noTelemetry,
         source: 'cli',
     });
+    const finishTelemetry = async () => {
+        telemetry.reportInstallRefActivations();
+        await telemetry.shutdown();
+    };
     let authAttemptId = '';
     let authStartedAt = 0;
     const startAuthAttempt = () => {
@@ -906,7 +918,7 @@ const handleLogin = async (options = {}) => {
                     outcome: 'already_authenticated',
                     durationMs: Date.now() - authStartedAt,
                 });
-                await telemetry.shutdown();
+                await finishTelemetry();
                 console.log(`✅ Already signed in as ${configManager.getEmail()}`);
                 console.log(`\n${nextStepHint}`);
                 return;
@@ -934,7 +946,7 @@ const handleLogin = async (options = {}) => {
                     outcome: 'authenticated',
                     durationMs: Date.now() - authStartedAt,
                 });
-                await telemetry.shutdown();
+                await finishTelemetry();
                 console.log(`✅ Logged in as ${resumed.user.email}`);
                 console.log(`\n${nextStepHint}`);
                 return;
@@ -983,7 +995,7 @@ const handleLogin = async (options = {}) => {
             outcome: 'authenticated',
             durationMs: Date.now() - authStartedAt,
         });
-        await telemetry.shutdown();
+        await finishTelemetry();
         console.log(`✅ Logged in as ${loginResult.user?.email}`);
         console.log(`\n${nextStepHint}`);
         return;
@@ -996,7 +1008,7 @@ const handleLogin = async (options = {}) => {
         failureReason: (0, exports.authFailureReasonForError)(loginResult.error),
         durationMs: Date.now() - authStartedAt,
     });
-    await telemetry.shutdown();
+    await finishTelemetry();
     console.log(`❌ Login failed: ${loginResult.error || loginResult.message}`);
     if (options.exitOnFailure ?? true) {
         process.exit(1);

package/dist/install/mcpRegistration.js

@@ -88,6 +88,7 @@ const verifyMcpServeInvocation = (spawnSync = childProcess.spawnSync) => {
         env: {
             ...(0, subprocessEnvironment_1.subprocessEnvironment)('rivetRuntime'),
             RIVET_LOG_LEVEL: 'SILENT',
+            RIVET_AUTO_UPDATE_DISABLED: '1',
         },
         input: `${input}\n`,
         timeout: MCP_SERVE_VERIFICATION_TIMEOUT_MS,

package/dist/mcp/explorationTools.js

@@ -56,23 +56,6 @@ const registerExplorationTools = (dependencies) => {
         callerAgent: dependencies.callerAgent,
         callerModel: (0, callerModel_1.callerModelArgsFromToolMeta)(extra._meta)[1],
     }));
-    (0, intentTool_1.registerIntentTool)(dependencies, {
-        name: 'rivet_apply_design',
-        title: 'Apply chosen design',
-        description: 'Apply the explicitly selected direction to the project working tree. Writes or replaces project files; generated applications may install dependencies and start a dev server, executing local code and contacting package registries. Only use after the user selects this result. Does not generate a different design.',
-        shape: {
-            project: intentTool_1.requiredText,
-            sessionId: intentTool_1.requiredText,
-            variantId: intentTool_1.requiredText,
-        },
-        annotations: intentTool_1.externalChange,
-    }, async (input) => runCommand('variants', [
-        'commit',
-        input.variantId,
-        '--session',
-        input.sessionId,
-        ...projectArgs(input.project),
-    ]));
     (0, intentTool_1.registerIntentTool)(dependencies, {
         name: 'rivet_cancel_exploration',
         title: 'Cancel exploration',

package/dist/prototype-host.js

@@ -29,6 +29,7 @@ const envSchema = zod_1.z.object({
 });
 const MALFORMED_REQUEST_STATUS = 400;
 const OVERSIZED_REQUEST_STATUS = 413;
+const UNSUPPORTED_ENCODING_STATUS = 415;
 const REQUEST_FAILURE_STATUS = 500;
 const handleRequestError = (error, _req, res, _next) => {
     log.warn('Prototype request failed', error);
@@ -51,6 +52,12 @@ const handleRequestError = (error, _req, res, _next) => {
             .json({ error: 'Request body too large' });
         return;
     }
+    if (errorType === 'encoding.unsupported') {
+        res
+            .status(UNSUPPORTED_ENCODING_STATUS)
+            .json({ error: 'Unsupported request body encoding' });
+        return;
+    }
     res.status(REQUEST_FAILURE_STATUS).json({ error: 'Request failed' });
 };
 const main = async () => {

package/dist/proxy-middleware/preview-bridge.d.ts

@@ -1,6 +1,5 @@
 import type { IncomingMessage } from 'http';
 export declare const PREVIEW_BRIDGE_SCRIPT_ID = "rivet-preview-bridge";
-export declare const PREVIEW_BRIDGE_CHANNEL = "rivet-preview-bridge";
 type PreviewBridgeInjectionInput = {
     method?: string;
     accept?: string | string[];

package/dist/proxy-middleware/preview-bridge.js

@@ -1,23 +1,51 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isHtmlDocumentRequest = exports.injectPreviewBridge = exports.shouldInjectPreviewBridge = exports.allowPreviewBridgeNonceInCsp = exports.createPreviewBridgeScript = exports.PREVIEW_BRIDGE_CHANNEL = exports.PREVIEW_BRIDGE_SCRIPT_ID = void 0;
+exports.isHtmlDocumentRequest = exports.injectPreviewBridge = exports.shouldInjectPreviewBridge = exports.allowPreviewBridgeNonceInCsp = exports.createPreviewBridgeScript = exports.PREVIEW_BRIDGE_SCRIPT_ID = void 0;
 const htmlDocument_1 = require("../utils/htmlDocument");
+const preview_bridge_1 = require("../types/preview-bridge");
 exports.PREVIEW_BRIDGE_SCRIPT_ID = 'rivet-preview-bridge';
-exports.PREVIEW_BRIDGE_CHANNEL = 'rivet-preview-bridge';
 const MAX_SIBLING_CONTEXT_COUNT = 6;
 const TEXT_SNIPPET_MAX_LENGTH = 80;
 const buildBridgeScript = ({ expectedParentOrigin, } = {}) => `
 (() => {
-  const CHANNEL = '${exports.PREVIEW_BRIDGE_CHANNEL}';
+  const CHANNEL = '${preview_bridge_1.PREVIEW_BRIDGE_CHANNEL}';
   const EXPECTED_PARENT_ORIGIN = ${JSON.stringify(expectedParentOrigin ?? null)} || window.location.origin;
   const RIVET_ID_ATTR = 'data-rivet-id';
   const MAX_SIBLING_CONTEXT_COUNT = ${MAX_SIBLING_CONTEXT_COUNT};
   const TEXT_SNIPPET_MAX_LENGTH = ${TEXT_SNIPPET_MAX_LENGTH};
+  const FORWARDED_KEYS = new Set(${JSON.stringify(preview_bridge_1.PREVIEW_BRIDGE_FORWARDED_KEYS)});
+  const TEXT_ENTRY_TAG_NAMES = new Set(['INPUT', 'TEXTAREA', 'SELECT']);
   if (window.__RIVET_PREVIEW_BRIDGE_ACTIVE__) {
     return;
   }
   window.__RIVET_PREVIEW_BRIDGE_ACTIVE__ = true;
 
+  const isTextEntryTarget = (target) =>
+    Boolean(target) &&
+    (target.isContentEditable === true ||
+      (typeof target.tagName === 'string' &&
+        TEXT_ENTRY_TAG_NAMES.has(target.tagName.toUpperCase())));
+
+  window.addEventListener('keydown', (event) => {
+    if (
+      window.parent === window ||
+      !event.isTrusted ||
+      event.defaultPrevented ||
+      event.altKey ||
+      event.ctrlKey ||
+      event.metaKey ||
+      event.shiftKey ||
+      !FORWARDED_KEYS.has(event.key) ||
+      isTextEntryTarget(event.target)
+    ) {
+      return;
+    }
+    window.parent.postMessage(
+      { channel: CHANNEL, direction: 'event', type: 'keydown', key: event.key },
+      EXPECTED_PARENT_ORIGIN,
+    );
+  });
+
   const getClassName = (element) => {
     try {
       const value = element.className;

package/dist/routes/account.js

@@ -27,8 +27,9 @@ const createAccountRouter = (telemetry) => {
             const config = (0, ConfigManager_1.getConfigManager)();
             config.setAuth(token, email, refreshToken, userId);
             const carriedInstallRef = (0, installRef_1.parseInstallRef)(installRef);
-            if (carriedInstallRef)
-                config.clearInstallRef(carriedInstallRef);
+            if (carriedInstallRef) {
+                config.completeInstallRefSignIn(carriedInstallRef, config.getUserId());
+            }
         }
         catch {
             return res
@@ -36,6 +37,7 @@ const createAccountRouter = (telemetry) => {
                 .json({ error: 'Failed to store auth credentials' });
         }
         telemetry?.identifyUser();
+        telemetry?.reportInstallRefActivations();
         log.info(`Stored auth for ${email} via browser OAuth`);
         res.json({ success: true });
     });