rivet-design 0.9.10 → 0.10.0

package/dist/routes/prototypeHost.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prototypeHost.js","sourceRoot":"","sources":["../../src/routes/prototypeHost.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAC5B,gDAAwB;AACxB,qCAA8D;AAC9D,+BAA2B;AAC3B,4CAA+C;AAI/C,MAAM,GAAG,GAAG,IAAA,qBAAY,EAAC,qBAAqB,CAAC,CAAC;AAEhD;8EAC8E;AAC9E,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAE3C,MAAM,IAAI,GAA2B;IACnC,OAAO,EAAE,0BAA0B;IACnC,MAAM,EAAE,0BAA0B;IAClC,MAAM,EAAE,yBAAyB;IACjC,KAAK,EAAE,uCAAuC;IAC9C,MAAM,EAAE,uCAAuC;IAC/C,OAAO,EAAE,iCAAiC;IAC1C,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,mBAAmB;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,MAAM,EAAE,2BAA2B;IACnC,MAAM,EAAE,iCAAiC;IACzC,OAAO,EAAE,kBAAkB;CAC5B,CAAC;AAEF,MAAM,gBAAgB,GAAG,MAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,MAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,MAAC,CAAC,MAAM,CAAC;IACjC,KAAK,EAAE,MAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACxC,CAAC,CAAC;AAWH;;;;;GAKG;AACH,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,QAAgB,EAAU,EAAE;IAChE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,GAAG,GAAG,eAAe,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC;IAChE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC7C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACxD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACpD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9D,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,GAAG,IAAI,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,GAAY,EAAiB,EAAE;IACpD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACrD,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAC5D,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,IAAI,CAAC;AACX,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,GAAY,EAAU,EAAE;IAClD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAEK,MAAM,yBAAyB,GAAG,CAAC,IAAuB,EAAU,EAAE;IAC3E,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IACxB,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IAC/D,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAE7D,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAClC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACzC,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,SAAS,EAAE,eAAe;gBAC1B,OAAO,EAAE,iDAAiD;aAC3D,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,SAAS,EAAE,cAAc;gBACzB,OAAO,EAAE,yDAAyD;aACnE,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,SAAS,EAAE,0BAA0B;gBACrC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;aAC9B,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAiB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAC9C,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAC7B,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EACvD,CAAC,CACF,CAAC;QACF,IAAI,UAAU,GAAG,cAAc,EAAE,CAAC;YAChC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,SAAS,EAAE,kBAAkB;gBAC7B,OAAO,EAAE,gCAAgC,IAAI,CAAC,KAAK,CACjD,cAAc,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAC/B,WAAW;aACb,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,SAAS,EAAE,sBAAsB;gBACjC,OAAO,EAAE,gDAAgD;aAC1D,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,gBAAM,CAAC,UAAU,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,2BAA2B,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,SAAS,EAAE,gBAAgB;gBAC3B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB;aACxE,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,aAAa,MAAM,QAAQ,GAAG,CAAC;QACnD,GAAG,CAAC,IAAI,CAAC,uBAAuB,QAAQ,aAAa,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAChE,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,KAAK,EACjB,GAAY,EACZ,GAAa,EACb,QAAgB,EAChB,SAAiB,EACF,EAAE;QACjB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,6DAA6D;QAC7D,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAE3C,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,SAAS,KAAK,EAAE,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,QAAQ,GAAG,CAAC;QAEnC,MAAM,UAAU,GAAG,KAAK,IAAmB,EAAE;YAC3C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAClC,OAAO;YACT,CAAC;YACD,GAAG;iBACA,MAAM,CAAC,GAAG,CAAC;iBACX,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;iBACxC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3D,CAAC,CAAC;QAEF,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,UAAU,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,oEAAoE;YACpE,0DAA0D;YAC1D,MAAM,UAAU,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QAChD,GAAG;aACA,MAAM,CAAC,GAAG,CAAC;aACX,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;aAClE,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACzD,MAAM,KAAK,CACT,GAAG,EACH,GAAG,EACH,GAAG,CAAC,MAAM,CAAC,QAAQ,EACnB,kBAAkB,CAAE,GAAG,CAAC,MAAkC,CAAC,SAAS,CAAC,CACtE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAlJW,QAAA,yBAAyB,6BAkJpC"}

package/dist/services/BundleStore.d.ts

@@ -0,0 +1,36 @@
+/** One file in a prototype bundle. `path` is POSIX-relative to the bundle root
+ *  (e.g. `assets/index-abc.js`); `content` is base64-encoded bytes. This is the
+ *  wire shape the client uploads and the host stores — kept dependency-free so
+ *  no tar/zip library is needed on either side. */
+export interface BundleFile {
+    path: string;
+    content: string;
+}
+export interface BundleStore {
+    /** Write a bundle's files under `deployId`. Overwrites any prior content. */
+    put(deployId: string, files: BundleFile[]): Promise<void>;
+    /** Read a single asset (already validated/normalized by the caller's router).
+     *  Returns null when the bundle or asset doesn't exist. */
+    read(deployId: string, assetPath: string): Promise<Buffer | null>;
+    /** True when a bundle directory exists for `deployId`. */
+    has(deployId: string): Promise<boolean>;
+    /** Absolute on-disk root for a bundle (used by the static-serving worker). */
+    rootFor(deployId: string): string;
+}
+/**
+ * Filesystem-backed bundle store. Extracts each uploaded file under
+ * `<root>/<deployId>/`. Single-instance only (a Render persistent disk is not
+ * shared across instances) — fine for the MVP; swap for object storage later
+ * behind this same interface.
+ */
+export declare class DiskBundleStore implements BundleStore {
+    private readonly root;
+    constructor(root: string);
+    rootFor(deployId: string): string;
+    put(deployId: string, files: BundleFile[]): Promise<void>;
+    has(deployId: string): Promise<boolean>;
+    read(deployId: string, assetPath: string): Promise<Buffer | null>;
+}
+/** Best-effort check that the configured bundle root is writable at boot. */
+export declare const ensureBundleRoot: (root: string) => Promise<void>;
+//# sourceMappingURL=BundleStore.d.ts.map

package/dist/services/BundleStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BundleStore.d.ts","sourceRoot":"","sources":["../../src/services/BundleStore.ts"],"names":[],"mappings":"AAOA;;;mDAGmD;AACnD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAeD,MAAM,WAAW,WAAW;IAC1B,6EAA6E;IAC7E,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D;+DAC2D;IAC3D,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAClE,0DAA0D;IAC1D,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,8EAA8E;IAC9E,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;CACnC;AAED;;;;;GAKG;AACH,qBAAa,eAAgB,YAAW,WAAW;IACrC,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,MAAM;IAEzC,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAI3B,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BzD,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IASvC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAgBxE;AAED,6EAA6E;AAC7E,eAAO,MAAM,gBAAgB,GAAU,MAAM,MAAM,KAAG,OAAO,CAAC,IAAI,CAKjE,CAAC"}

package/dist/services/BundleStore.js

@@ -0,0 +1,102 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ensureBundleRoot = exports.DiskBundleStore = void 0;
+const fs_1 = __importDefault(require("fs"));
+const promises_1 = __importDefault(require("fs/promises"));
+const path_1 = __importDefault(require("path"));
+const logger_1 = require("../utils/logger");
+const log = (0, logger_1.createLogger)('BundleStore');
+/** Reject paths that try to escape the bundle root. Mirrors the lexical
+ *  containment + traversal checks used in VariantHistoryService. */
+const assertSafeBundlePath = (relPath) => {
+    if (relPath.length === 0 ||
+        relPath.includes('\0') ||
+        path_1.default.isAbsolute(relPath) ||
+        relPath.split(/[\\/]+/).some((part) => part === '..')) {
+        throw new Error(`BundleStore: invalid bundle path '${relPath}'`);
+    }
+};
+/**
+ * Filesystem-backed bundle store. Extracts each uploaded file under
+ * `<root>/<deployId>/`. Single-instance only (a Render persistent disk is not
+ * shared across instances) — fine for the MVP; swap for object storage later
+ * behind this same interface.
+ */
+class DiskBundleStore {
+    root;
+    constructor(root) {
+        this.root = root;
+    }
+    rootFor(deployId) {
+        return path_1.default.join(this.root, deployId);
+    }
+    async put(deployId, files) {
+        const bundleRoot = this.rootFor(deployId);
+        // Stage then atomically swap so a partially written bundle is never served.
+        const stagingRoot = `${bundleRoot}.tmp-${process.pid}-${Date.now()}`;
+        await promises_1.default.rm(stagingRoot, { recursive: true, force: true });
+        await promises_1.default.mkdir(stagingRoot, { recursive: true });
+        try {
+            for (const file of files) {
+                assertSafeBundlePath(file.path);
+                const target = path_1.default.join(stagingRoot, file.path);
+                // Defense in depth: ensure the resolved path is still inside staging.
+                const rel = path_1.default.relative(stagingRoot, target);
+                if (rel.startsWith('..') || path_1.default.isAbsolute(rel)) {
+                    throw new Error(`BundleStore: path escapes bundle root '${file.path}'`);
+                }
+                await promises_1.default.mkdir(path_1.default.dirname(target), { recursive: true });
+                await promises_1.default.writeFile(target, Buffer.from(file.content, 'base64'));
+            }
+            await promises_1.default.rm(bundleRoot, { recursive: true, force: true });
+            await promises_1.default.rename(stagingRoot, bundleRoot);
+            log.info(`Stored bundle ${deployId} (${files.length} files)`);
+        }
+        catch (err) {
+            await promises_1.default.rm(stagingRoot, { recursive: true, force: true });
+            throw err;
+        }
+    }
+    async has(deployId) {
+        try {
+            const stat = await promises_1.default.stat(this.rootFor(deployId));
+            return stat.isDirectory();
+        }
+        catch {
+            return false;
+        }
+    }
+    async read(deployId, assetPath) {
+        assertSafeBundlePath(assetPath);
+        const bundleRoot = this.rootFor(deployId);
+        const target = path_1.default.join(bundleRoot, assetPath);
+        const rel = path_1.default.relative(bundleRoot, target);
+        if (rel.startsWith('..') || path_1.default.isAbsolute(rel))
+            return null;
+        try {
+            const stat = await promises_1.default.stat(target);
+            if (!stat.isFile())
+                return null;
+            return await promises_1.default.readFile(target);
+        }
+        catch (err) {
+            const code = err.code;
+            if (code !== 'ENOENT')
+                log.warn(`read failed for ${deployId}/${assetPath}`, err);
+            return null;
+        }
+    }
+}
+exports.DiskBundleStore = DiskBundleStore;
+/** Best-effort check that the configured bundle root is writable at boot. */
+const ensureBundleRoot = async (root) => {
+    await promises_1.default.mkdir(root, { recursive: true });
+    if (!fs_1.default.existsSync(root)) {
+        throw new Error(`BundleStore: bundle root '${root}' could not be created`);
+    }
+};
+exports.ensureBundleRoot = ensureBundleRoot;
+//# sourceMappingURL=BundleStore.js.map

package/dist/services/BundleStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BundleStore.js","sourceRoot":"","sources":["../../src/services/BundleStore.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAoB;AACpB,2DAAqC;AACrC,gDAAwB;AACxB,4CAA+C;AAE/C,MAAM,GAAG,GAAG,IAAA,qBAAY,EAAC,aAAa,CAAC,CAAC;AAWxC;oEACoE;AACpE,MAAM,oBAAoB,GAAG,CAAC,OAAe,EAAQ,EAAE;IACrD,IACE,OAAO,CAAC,MAAM,KAAK,CAAC;QACpB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,cAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,EACrD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,OAAO,GAAG,CAAC,CAAC;IACnE,CAAC;AACH,CAAC,CAAC;AAcF;;;;;GAKG;AACH,MAAa,eAAe;IACG;IAA7B,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAE7C,OAAO,CAAC,QAAgB;QACtB,OAAO,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,QAAgB,EAAE,KAAmB;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1C,4EAA4E;QAC5E,MAAM,WAAW,GAAG,GAAG,UAAU,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACrE,MAAM,kBAAU,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,kBAAU,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChC,MAAM,MAAM,GAAG,cAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjD,sEAAsE;gBACtE,MAAM,GAAG,GAAG,cAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;gBAC/C,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,cAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjD,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;gBAC1E,CAAC;gBACD,MAAM,kBAAU,CAAC,KAAK,CAAC,cAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClE,MAAM,kBAAU,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,kBAAU,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,MAAM,kBAAU,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YACjD,GAAG,CAAC,IAAI,CAAC,iBAAiB,QAAQ,KAAK,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,kBAAU,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,QAAgB;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,kBAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,SAAiB;QAC5C,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,cAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,cAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,kBAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,OAAO,IAAI,CAAC;YAChC,OAAO,MAAM,kBAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,IAAI,IAAI,KAAK,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,mBAAmB,QAAQ,IAAI,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;YACjF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF;AA3DD,0CA2DC;AAED,6EAA6E;AACtE,MAAM,gBAAgB,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;IACpE,MAAM,kBAAU,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,wBAAwB,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC,CAAC;AALW,QAAA,gBAAgB,oBAK3B"}

package/dist/services/PrototypeBuildService.d.ts

@@ -0,0 +1,38 @@
+import type { BundleFile } from './BundleStore';
+export declare class PrototypeBuildError extends Error {
+    /** Tail of the failing step's stderr, for surfacing in the UI toast. */
+    readonly detail?: string | undefined;
+    constructor(message: string, 
+    /** Tail of the failing step's stderr, for surfacing in the UI toast. */
+    detail?: string | undefined);
+}
+export interface BuildResult {
+    files: BundleFile[];
+    /** Total decoded byte size of the bundle (pre-base64). */
+    totalBytes: number;
+}
+/**
+ * Builds a fresh-project (Vite) variant into a static bundle ready to upload to
+ * the Prototype Preview Host.
+ *
+ * The variant snapshot under `.rivet/variants/.../files/` is treated as
+ * immutable, so we copy it to an OS temp scratch dir and build there. We run
+ * `vite build --base=./` directly (not `npm run build`) so a `tsc` type error
+ * in agent-generated code doesn't block a purely visual deploy, and so asset
+ * URLs are relative (the host serves under `/p/<deployId>/` and injects a
+ * matching `<base href>`).
+ */
+export declare class PrototypeBuildService {
+    /** Build `filesDir` (the variant's `files/`) and return the packed bundle. */
+    build(filesDir: string): Promise<BuildResult>;
+    /**
+     * Pack an already-built static bundle (a variant's `files/` dir) for upload
+     * without a build step. Used for history static-preview variants, which are
+     * already servable static sites — there's nothing to compile.
+     */
+    packStatic(filesDir: string): Promise<BuildResult>;
+    /** Walk a directory and return every file base64-encoded. */
+    private packDir;
+    private runStep;
+}
+//# sourceMappingURL=PrototypeBuildService.d.ts.map

package/dist/services/PrototypeBuildService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PrototypeBuildService.d.ts","sourceRoot":"","sources":["../../src/services/PrototypeBuildService.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAiBhD,qBAAa,mBAAoB,SAAQ,KAAK;IAG1C,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;gBAFxB,OAAO,EAAE,MAAM;IACf,wEAAwE;IAC/D,MAAM,CAAC,EAAE,MAAM,YAAA;CAK3B;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,0DAA0D;IAC1D,UAAU,EAAE,MAAM,CAAC;CACpB;AAKD;;;;;;;;;;GAUG;AACH,qBAAa,qBAAqB;IAChC,8EAA8E;IACxE,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAkDnD;;;;OAIG;IACG,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IASxD,6DAA6D;YAC/C,OAAO;IAsBrB,OAAO,CAAC,OAAO;CAqEhB"}

package/dist/services/PrototypeBuildService.js

@@ -0,0 +1,165 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PrototypeBuildService = exports.PrototypeBuildError = void 0;
+const child_process_1 = require("child_process");
+const fs_1 = __importDefault(require("fs"));
+const promises_1 = __importDefault(require("fs/promises"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const logger_1 = require("../utils/logger");
+const log = (0, logger_1.createLogger)('PrototypeBuildService');
+/** Dirs never copied into the build scratch — they're either huge, regenerated,
+ *  or history/VCS noise. Mirrors VariantHistoryService.COPY_EXCLUDE. */
+const COPY_EXCLUDE = new Set([
+    'node_modules',
+    '.git',
+    '.vite',
+    '.rivet',
+    'dist',
+    'build',
+    '.next',
+    '.cache',
+]);
+class PrototypeBuildError extends Error {
+    detail;
+    constructor(message, 
+    /** Tail of the failing step's stderr, for surfacing in the UI toast. */
+    detail) {
+        super(message);
+        this.detail = detail;
+        this.name = 'PrototypeBuildError';
+    }
+}
+exports.PrototypeBuildError = PrototypeBuildError;
+const INSTALL_TIMEOUT_MS = 180_000;
+const BUILD_TIMEOUT_MS = 120_000;
+/**
+ * Builds a fresh-project (Vite) variant into a static bundle ready to upload to
+ * the Prototype Preview Host.
+ *
+ * The variant snapshot under `.rivet/variants/.../files/` is treated as
+ * immutable, so we copy it to an OS temp scratch dir and build there. We run
+ * `vite build --base=./` directly (not `npm run build`) so a `tsc` type error
+ * in agent-generated code doesn't block a purely visual deploy, and so asset
+ * URLs are relative (the host serves under `/p/<deployId>/` and injects a
+ * matching `<base href>`).
+ */
+class PrototypeBuildService {
+    /** Build `filesDir` (the variant's `files/`) and return the packed bundle. */
+    async build(filesDir) {
+        const pkgJson = path_1.default.join(filesDir, 'package.json');
+        if (!fs_1.default.existsSync(pkgJson)) {
+            throw new PrototypeBuildError('This prototype has no package.json — only fresh Vite app prototypes can be deployed.');
+        }
+        const scratch = await promises_1.default.mkdtemp(path_1.default.join(os_1.default.tmpdir(), 'rivet-deploy-'));
+        try {
+            const projectDir = path_1.default.join(scratch, 'app');
+            await promises_1.default.cp(filesDir, projectDir, {
+                recursive: true,
+                filter: (src) => !COPY_EXCLUDE.has(path_1.default.basename(src)),
+            });
+            const hasLockfile = fs_1.default.existsSync(path_1.default.join(projectDir, 'package-lock.json'));
+            await this.runStep('npm', hasLockfile ? ['ci'] : ['install', '--no-audit', '--no-fund'], projectDir, INSTALL_TIMEOUT_MS, 'install dependencies');
+            await this.runStep('npx', ['vite', 'build', '--base=./'], projectDir, BUILD_TIMEOUT_MS, 'build the prototype');
+            const distDir = path_1.default.join(projectDir, 'dist');
+            if (!fs_1.default.existsSync(path_1.default.join(distDir, 'index.html'))) {
+                throw new PrototypeBuildError('Build completed but produced no dist/index.html — unable to deploy.');
+            }
+            return await this.packDir(distDir);
+        }
+        finally {
+            await promises_1.default.rm(scratch, { recursive: true, force: true });
+        }
+    }
+    /**
+     * Pack an already-built static bundle (a variant's `files/` dir) for upload
+     * without a build step. Used for history static-preview variants, which are
+     * already servable static sites — there's nothing to compile.
+     */
+    async packStatic(filesDir) {
+        if (!fs_1.default.existsSync(path_1.default.join(filesDir, 'index.html'))) {
+            throw new PrototypeBuildError('This prototype has no index.html to deploy.');
+        }
+        return this.packDir(filesDir);
+    }
+    /** Walk a directory and return every file base64-encoded. */
+    async packDir(distDir) {
+        const files = [];
+        let totalBytes = 0;
+        const walk = async (dir, prefix) => {
+            const entries = await promises_1.default.readdir(dir, { withFileTypes: true });
+            for (const entry of entries) {
+                if (COPY_EXCLUDE.has(entry.name))
+                    continue;
+                const abs = path_1.default.join(dir, entry.name);
+                const rel = prefix ? `${prefix}/${entry.name}` : entry.name;
+                if (entry.isDirectory()) {
+                    await walk(abs, rel);
+                }
+                else if (entry.isFile()) {
+                    const body = await promises_1.default.readFile(abs);
+                    totalBytes += body.length;
+                    files.push({ path: rel, content: body.toString('base64') });
+                }
+            }
+        };
+        await walk(distDir, '');
+        return { files, totalBytes };
+    }
+    runStep(cmd, args, cwd, timeoutMs, label) {
+        return new Promise((resolve, reject) => {
+            const proc = (0, child_process_1.spawn)(cmd, args, {
+                cwd,
+                env: { ...process.env },
+                stdio: ['ignore', 'pipe', 'pipe'],
+                detached: false,
+            });
+            // Keep only the tail of stderr — enough to explain a failure without
+            // holding megabytes of npm/vite chatter in memory.
+            let stderrTail = '';
+            const appendTail = (data) => {
+                stderrTail = (stderrTail + data.toString()).slice(-4_000);
+            };
+            // Drain stdout too: with `stdio: 'pipe'` and no consumer the OS pipe
+            // buffer fills and the child blocks (same hazard as the dev-server spawn).
+            proc.stdout?.on('data', (d) => {
+                log.debug(`[deploy-build] ${d.toString().trim()}`);
+            });
+            proc.stderr?.on('data', (d) => {
+                appendTail(d);
+                log.debug(`[deploy-build] ${d.toString().trim()}`);
+            });
+            const timer = setTimeout(() => {
+                try {
+                    proc.kill('SIGTERM');
+                }
+                catch { /* ignore */ }
+                setTimeout(() => {
+                    try {
+                        proc.kill('SIGKILL');
+                    }
+                    catch { /* ignore */ }
+                }, 5_000).unref();
+                reject(new PrototypeBuildError(`Timed out trying to ${label} (after ${Math.round(timeoutMs / 1000)}s).`, stderrTail.trim()));
+            }, timeoutMs);
+            proc.on('error', (err) => {
+                clearTimeout(timer);
+                reject(new PrototypeBuildError(`Failed to ${label}: ${err.message}`, stderrTail.trim()));
+            });
+            proc.on('close', (code) => {
+                clearTimeout(timer);
+                if (code === 0) {
+                    resolve();
+                }
+                else {
+                    reject(new PrototypeBuildError(`Failed to ${label} (exit ${code}).`, stderrTail.trim()));
+                }
+            });
+        });
+    }
+}
+exports.PrototypeBuildService = PrototypeBuildService;
+//# sourceMappingURL=PrototypeBuildService.js.map

package/dist/services/PrototypeBuildService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PrototypeBuildService.js","sourceRoot":"","sources":["../../src/services/PrototypeBuildService.ts"],"names":[],"mappings":";;;;;;AAAA,iDAAsC;AACtC,4CAAoB;AACpB,2DAAqC;AACrC,4CAAoB;AACpB,gDAAwB;AACxB,4CAA+C;AAG/C,MAAM,GAAG,GAAG,IAAA,qBAAY,EAAC,uBAAuB,CAAC,CAAC;AAElD;wEACwE;AACxE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,cAAc;IACd,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;IACN,OAAO;IACP,OAAO;IACP,QAAQ;CACT,CAAC,CAAC;AAEH,MAAa,mBAAoB,SAAQ,KAAK;IAIjC;IAHX,YACE,OAAe;IACf,wEAAwE;IAC/D,MAAe;QAExB,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,WAAM,GAAN,MAAM,CAAS;QAGxB,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AATD,kDASC;AAQD,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAEjC;;;;;;;;;;GAUG;AACH,MAAa,qBAAqB;IAChC,8EAA8E;IAC9E,KAAK,CAAC,KAAK,CAAC,QAAgB;QAC1B,MAAM,OAAO,GAAG,cAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACpD,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,mBAAmB,CAC3B,sFAAsF,CACvF,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,kBAAU,CAAC,OAAO,CACtC,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CACxC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC7C,MAAM,kBAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE;gBACxC,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,cAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;aACvD,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,YAAE,CAAC,UAAU,CAC/B,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAC3C,CAAC;YACF,MAAM,IAAI,CAAC,OAAO,CAChB,KAAK,EACL,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,WAAW,CAAC,EAC7D,UAAU,EACV,kBAAkB,EAClB,sBAAsB,CACvB,CAAC;YAEF,MAAM,IAAI,CAAC,OAAO,CAChB,KAAK,EACL,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,EAC9B,UAAU,EACV,gBAAgB,EAChB,qBAAqB,CACtB,CAAC;YAEF,MAAM,OAAO,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,mBAAmB,CAC3B,qEAAqE,CACtE,CAAC;YACJ,CAAC;YAED,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;gBAAS,CAAC;YACT,MAAM,kBAAU,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CAAC,QAAgB;QAC/B,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,cAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,mBAAmB,CAC3B,6CAA6C,CAC9C,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,6DAA6D;IACrD,KAAK,CAAC,OAAO,CAAC,OAAe;QACnC,MAAM,KAAK,GAAiB,EAAE,CAAC;QAC/B,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAE,MAAc,EAAiB,EAAE;YAChE,MAAM,OAAO,GAAG,MAAM,kBAAU,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAC3C,MAAM,GAAG,GAAG,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACvC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC5D,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;oBACxB,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACvB,CAAC;qBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;oBAC1B,MAAM,IAAI,GAAG,MAAM,kBAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAC5C,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;oBAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACxB,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC/B,CAAC;IAEO,OAAO,CACb,GAAW,EACX,IAAc,EACd,GAAW,EACX,SAAiB,EACjB,KAAa;QAEb,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,IAAI,GAAG,IAAA,qBAAK,EAAC,GAAG,EAAE,IAAI,EAAE;gBAC5B,GAAG;gBACH,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;gBACvB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBACjC,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAC;YACH,qEAAqE;YACrE,mDAAmD;YACnD,IAAI,UAAU,GAAG,EAAE,CAAC;YACpB,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE;gBAClC,UAAU,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;YAC5D,CAAC,CAAC;YACF,qEAAqE;YACrE,2EAA2E;YAC3E,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;gBACpC,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACrD,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;gBACpC,UAAU,CAAC,CAAC,CAAC,CAAC;gBACd,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACrD,CAAC,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC;oBAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBACpD,UAAU,CAAC,GAAG,EAAE;oBACd,IAAI,CAAC;wBAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBACtD,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;gBAClB,MAAM,CACJ,IAAI,mBAAmB,CACrB,uBAAuB,KAAK,WAAW,IAAI,CAAC,KAAK,CAC/C,SAAS,GAAG,IAAI,CACjB,KAAK,EACN,UAAU,CAAC,IAAI,EAAE,CAClB,CACF,CAAC;YACJ,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACvB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CACJ,IAAI,mBAAmB,CACrB,aAAa,KAAK,KAAK,GAAG,CAAC,OAAO,EAAE,EACpC,UAAU,CAAC,IAAI,EAAE,CAClB,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,OAAO,EAAE,CAAC;gBACZ,CAAC;qBAAM,CAAC;oBACN,MAAM,CACJ,IAAI,mBAAmB,CACrB,aAAa,KAAK,UAAU,IAAI,IAAI,EACpC,UAAU,CAAC,IAAI,EAAE,CAClB,CACF,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AA9JD,sDA8JC"}

package/dist/services/PrototypeDeployService.d.ts

@@ -0,0 +1,34 @@
+import { PrototypeBuildService } from './PrototypeBuildService';
+export interface DeployResult {
+    deployId: string;
+    shareUrl: string;
+}
+/**
+ * Orchestrates deploying a fresh-project variant to the Prototype Preview Host:
+ * build locally → gzip the file-list → upload with the user's Rivet JWT.
+ *
+ * Auth mirrors `GatewayClient`: attach `Authorization: Bearer <jwt>` from
+ * `ConfigManager.getAuthToken()`, and on a 401 refresh the token via the proxy
+ * and retry once. The host holds all hosting credentials — the client only ever
+ * sends its own token.
+ */
+export declare class PrototypeDeployService {
+    private buildService;
+    private hostUrl;
+    private proxyUrl;
+    private configManager;
+    constructor(buildService?: PrototypeBuildService, hostUrl?: string, proxyUrl?: string);
+    /** Build the variant's `files/` dir (Vite app) and publish it. */
+    deploy(filesDir: string): Promise<DeployResult>;
+    /**
+     * Publish an already-built static bundle (the variant's `files/` dir) with no
+     * build step. Used for history static-preview variants, which are already
+     * servable static sites.
+     */
+    deployStatic(filesDir: string): Promise<DeployResult>;
+    private publishFiles;
+    private publish;
+    /** Refresh the access token using the stored refresh token. Mirrors GatewayClient. */
+    private refreshAccessToken;
+}
+//# sourceMappingURL=PrototypeDeployService.d.ts.map

package/dist/services/PrototypeDeployService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PrototypeDeployService.d.ts","sourceRoot":"","sources":["../../src/services/PrototypeDeployService.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAIhE,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,qBAAa,sBAAsB;IAI/B,OAAO,CAAC,YAAY;IACpB,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,QAAQ;IALlB,OAAO,CAAC,aAAa,CAAsB;gBAGjC,YAAY,GAAE,qBAAmD,EACjE,OAAO,GAAE,MAA2B,EACpC,QAAQ,GAAE,MAAkB;IAGtC,kEAAkE;IAC5D,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAKrD;;;;OAIG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;YAK7C,YAAY;YAcZ,OAAO;IAkDrB,sFAAsF;YACxE,kBAAkB;CAyBjC"}

package/dist/services/PrototypeDeployService.js

@@ -0,0 +1,115 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PrototypeDeployService = void 0;
+const zlib_1 = require("zlib");
+const logger_1 = require("../utils/logger");
+const ConfigManager_1 = require("./ConfigManager");
+const proxy_1 = require("../config/proxy");
+const PrototypeBuildService_1 = require("./PrototypeBuildService");
+const log = (0, logger_1.createLogger)('PrototypeDeployService');
+/**
+ * Orchestrates deploying a fresh-project variant to the Prototype Preview Host:
+ * build locally → gzip the file-list → upload with the user's Rivet JWT.
+ *
+ * Auth mirrors `GatewayClient`: attach `Authorization: Bearer <jwt>` from
+ * `ConfigManager.getAuthToken()`, and on a 401 refresh the token via the proxy
+ * and retry once. The host holds all hosting credentials — the client only ever
+ * sends its own token.
+ */
+class PrototypeDeployService {
+    buildService;
+    hostUrl;
+    proxyUrl;
+    configManager = (0, ConfigManager_1.getConfigManager)();
+    constructor(buildService = new PrototypeBuildService_1.PrototypeBuildService(), hostUrl = proxy_1.PROTOTYPE_HOST_URL, proxyUrl = proxy_1.PROXY_URL) {
+        this.buildService = buildService;
+        this.hostUrl = hostUrl;
+        this.proxyUrl = proxyUrl;
+    }
+    /** Build the variant's `files/` dir (Vite app) and publish it. */
+    async deploy(filesDir) {
+        const { files, totalBytes } = await this.buildService.build(filesDir);
+        return this.publishFiles(files, totalBytes, 'Built');
+    }
+    /**
+     * Publish an already-built static bundle (the variant's `files/` dir) with no
+     * build step. Used for history static-preview variants, which are already
+     * servable static sites.
+     */
+    async deployStatic(filesDir) {
+        const { files, totalBytes } = await this.buildService.packStatic(filesDir);
+        return this.publishFiles(files, totalBytes, 'Packed');
+    }
+    async publishFiles(files, totalBytes, verb) {
+        log.info(`${verb} prototype bundle: ${files.length} files, ${Math.round(totalBytes / 1024)}KB`);
+        const payload = (0, zlib_1.gzipSync)(Buffer.from(JSON.stringify({ files })));
+        return this.publish(payload, 0);
+    }
+    async publish(payload, retryCount) {
+        const authToken = this.configManager.getAuthToken();
+        if (!authToken) {
+            throw new Error('Not authenticated. Please run `rivet login` to deploy a prototype.');
+        }
+        const response = await fetch(`${this.hostUrl}/publish`, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${authToken}`,
+                'Content-Type': 'application/json',
+                'Content-Encoding': 'gzip',
+            },
+            // Node's fetch accepts a Buffer at runtime; the DOM BodyInit type doesn't
+            // list it, so cast. (GatewayClient only ever sends strings, so it never
+            // needed this.)
+            body: payload,
+        });
+        if (response.status === 401 && retryCount === 0) {
+            log.warn('Token expired, attempting to refresh...');
+            const refreshed = await this.refreshAccessToken();
+            if (refreshed) {
+                return this.publish(payload, retryCount + 1);
+            }
+            throw new Error('Authentication expired. Please run `rivet logout` and `rivet login` to re-authenticate.');
+        }
+        if (!response.ok) {
+            const body = await response.json().catch(() => ({}));
+            const message = body.message ??
+                `Deploy failed (${response.status}).`;
+            throw new Error(message);
+        }
+        const result = (await response.json());
+        if (!result.deployId || !result.shareUrl) {
+            throw new Error('Deploy host returned an unexpected response.');
+        }
+        return { deployId: result.deployId, shareUrl: result.shareUrl };
+    }
+    /** Refresh the access token using the stored refresh token. Mirrors GatewayClient. */
+    async refreshAccessToken() {
+        const refreshToken = this.configManager.getRefreshToken();
+        if (!refreshToken) {
+            log.warn('No refresh token available');
+            return false;
+        }
+        try {
+            const response = await fetch(`${this.proxyUrl}/api/auth/refresh`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ refreshToken }),
+            });
+            if (!response.ok)
+                return false;
+            const result = await response.json();
+            if (result.success && result.token) {
+                const email = this.configManager.getEmail() || '';
+                this.configManager.setAuth(result.token, email, result.refreshToken);
+                return true;
+            }
+            return false;
+        }
+        catch (err) {
+            log.warn('Error refreshing token:', err);
+            return false;
+        }
+    }
+}
+exports.PrototypeDeployService = PrototypeDeployService;
+//# sourceMappingURL=PrototypeDeployService.js.map

package/dist/services/PrototypeDeployService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PrototypeDeployService.js","sourceRoot":"","sources":["../../src/services/PrototypeDeployService.ts"],"names":[],"mappings":";;;AAAA,+BAAgC;AAChC,4CAA+C;AAC/C,mDAAmD;AACnD,2CAAgE;AAChE,mEAAgE;AAEhE,MAAM,GAAG,GAAG,IAAA,qBAAY,EAAC,wBAAwB,CAAC,CAAC;AAOnD;;;;;;;;GAQG;AACH,MAAa,sBAAsB;IAIvB;IACA;IACA;IALF,aAAa,GAAG,IAAA,gCAAgB,GAAE,CAAC;IAE3C,YACU,eAAsC,IAAI,6CAAqB,EAAE,EACjE,UAAkB,0BAAkB,EACpC,WAAmB,iBAAS;QAF5B,iBAAY,GAAZ,YAAY,CAAqD;QACjE,YAAO,GAAP,OAAO,CAA6B;QACpC,aAAQ,GAAR,QAAQ,CAAoB;IACnC,CAAC;IAEJ,kEAAkE;IAClE,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,KAA0C,EAC1C,UAAkB,EAClB,IAAY;QAEZ,GAAG,CAAC,IAAI,CACN,GAAG,IAAI,sBAAsB,KAAK,CAAC,MAAM,WAAW,IAAI,CAAC,KAAK,CAC5D,UAAU,GAAG,IAAI,CAClB,IAAI,CACN,CAAC;QACF,MAAM,OAAO,GAAG,IAAA,eAAQ,EAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAClC,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,OAAe,EACf,UAAkB;QAElB,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;QACpD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,UAAU,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,SAAS,EAAE;gBACpC,cAAc,EAAE,kBAAkB;gBAClC,kBAAkB,EAAE,MAAM;aAC3B;YACD,0EAA0E;YAC1E,wEAAwE;YACxE,gBAAgB;YAChB,IAAI,EAAE,OAA8B;SACrC,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;YACpD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAClD,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACrD,MAAM,OAAO,GACV,IAA6B,CAAC,OAAO;gBACtC,kBAAkB,QAAQ,CAAC,MAAM,IAAI,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;IAClE,CAAC;IAED,sFAAsF;IAC9E,KAAK,CAAC,kBAAkB;QAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC;QAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YACvC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,mBAAmB,EAAE;gBAChE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;aACvC,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,KAAK,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;gBAClD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;gBACrE,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;YACzC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAnHD,wDAmHC"}

package/dist/services/SupabaseAuthService.d.ts

@@ -0,0 +1,25 @@
+export interface VerifiedUser {
+    id: string;
+    email?: string;
+}
+/**
+ * Minimal, dependency-free verifier for Rivet (Supabase) JWTs.
+ *
+ * The proxy (`src/proxy`) verifies tokens with `@supabase/supabase-js`, but that
+ * package and the whole `src/proxy` tree are excluded from the main `tsc` build.
+ * The Prototype Preview Host is part of the main build, so it can't reuse that
+ * service. Instead we hit Supabase's GoTrue REST endpoint directly with `fetch`
+ * — exactly what `supabase.auth.getUser(token)` does under the hood — using the
+ * same `SUPABASE_URL` / `SUPABASE_ANON_KEY` the proxy already holds.
+ */
+export declare class SupabaseAuthService {
+    private readonly url;
+    private readonly anonKey;
+    constructor(opts?: {
+        url?: string;
+        anonKey?: string;
+    });
+    /** Returns the user for a valid JWT, or null when the token is missing/invalid. */
+    verifyToken(token: string): Promise<VerifiedUser | null>;
+}
+//# sourceMappingURL=SupabaseAuthService.d.ts.map

package/dist/services/SupabaseAuthService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SupabaseAuthService.d.ts","sourceRoot":"","sources":["../../src/services/SupabaseAuthService.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;GASG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE;IAYrD,mFAAmF;IAC7E,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;CAsB/D"}

package/dist/services/SupabaseAuthService.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SupabaseAuthService = void 0;
+const logger_1 = require("../utils/logger");
+const log = (0, logger_1.createLogger)('SupabaseAuthService');
+/**
+ * Minimal, dependency-free verifier for Rivet (Supabase) JWTs.
+ *
+ * The proxy (`src/proxy`) verifies tokens with `@supabase/supabase-js`, but that
+ * package and the whole `src/proxy` tree are excluded from the main `tsc` build.
+ * The Prototype Preview Host is part of the main build, so it can't reuse that
+ * service. Instead we hit Supabase's GoTrue REST endpoint directly with `fetch`
+ * — exactly what `supabase.auth.getUser(token)` does under the hood — using the
+ * same `SUPABASE_URL` / `SUPABASE_ANON_KEY` the proxy already holds.
+ */
+class SupabaseAuthService {
+    url;
+    anonKey;
+    constructor(opts) {
+        const url = opts?.url ?? process.env.SUPABASE_URL;
+        const anonKey = opts?.anonKey ?? process.env.SUPABASE_ANON_KEY;
+        if (!url || !anonKey) {
+            throw new Error('SUPABASE_URL and SUPABASE_ANON_KEY must be set to verify auth tokens');
+        }
+        this.url = url.replace(/\/+$/, '');
+        this.anonKey = anonKey;
+    }
+    /** Returns the user for a valid JWT, or null when the token is missing/invalid. */
+    async verifyToken(token) {
+        if (!token)
+            return null;
+        try {
+            const res = await fetch(`${this.url}/auth/v1/user`, {
+                headers: {
+                    apikey: this.anonKey,
+                    Authorization: `Bearer ${token}`,
+                },
+                signal: AbortSignal.timeout(10_000),
+            });
+            if (!res.ok) {
+                log.debug(`Token verification failed (${res.status})`);
+                return null;
+            }
+            const user = (await res.json());
+            if (!user?.id)
+                return null;
+            return { id: user.id, email: user.email };
+        }
+        catch (err) {
+            log.warn('Error verifying token', err);
+            return null;
+        }
+    }
+}
+exports.SupabaseAuthService = SupabaseAuthService;
+//# sourceMappingURL=SupabaseAuthService.js.map

package/dist/services/SupabaseAuthService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SupabaseAuthService.js","sourceRoot":"","sources":["../../src/services/SupabaseAuthService.ts"],"names":[],"mappings":";;;AAAA,4CAA+C;AAE/C,MAAM,GAAG,GAAG,IAAA,qBAAY,EAAC,qBAAqB,CAAC,CAAC;AAOhD;;;;;;;;;GASG;AACH,MAAa,mBAAmB;IACb,GAAG,CAAS;IACZ,OAAO,CAAS;IAEjC,YAAY,IAAyC;QACnD,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC/D,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,eAAe,EAAE;gBAClD,OAAO,EAAE;oBACP,MAAM,EAAE,IAAI,CAAC,OAAO;oBACpB,aAAa,EAAE,UAAU,KAAK,EAAE;iBACjC;gBACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,GAAG,CAAC,KAAK,CAAC,8BAA8B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;gBACvD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAoC,CAAC;YACnE,IAAI,CAAC,IAAI,EAAE,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC3B,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAvCD,kDAuCC"}