wizards 0.1.11 → 0.2.1

package/README.md

@@ -177,6 +177,9 @@ More settings: [.env.example](.env.example).
 Development server, checks, how it is built, the managed mode:
 [docs/development.md](docs/development.md).
 
+Plugins add tools for steps, routes with their own tables and pages in the studio, without
+changing the runtime: [docs/plugins.md](docs/plugins.md).
+
 ## License
 
 [FSL-1.1-MIT](LICENSE): use it for yourself and your company, run it, change it — just don't

package/apps/runtime/dist/agents/architect.js

@@ -3,20 +3,22 @@ import { isTextMime } from "@engenty-wizards/shared/workspace";
 import { Agent } from "@mastra/core/agent";
 import { createTool } from "@mastra/core/tools";
 import { z } from "zod";
-import { connectorsLine, exampleWizard, mcpServersLine, PRINCIPLES, SCHEMA_DOC, WIDGET_GUIDE, } from "../authoring/guide.js";
+import { connectorsLine, exampleWizard, mcpServersLine, PRINCIPLES, pluginToolsLine, SCHEMA_DOC, WIDGET_GUIDE, } from "../authoring/guide.js";
 import { wizardOpSchema } from "../authoring/ops.js";
 import { importFromRegistry, listConnectors, searchRegistry } from "../connectors/external.js";
 import { attachTools, costOf, gatewayTools, textModel } from "../models.js";
+import { pluginToolsOf } from "../plugins/registry.js";
 import { htmlToMarkdown } from "../render/convert.js";
 import { ServiceError } from "../services/errors.js";
 import { deleteFile, listFiles, readFileText, writeFile } from "../services/files.js";
 import { checkDraftWidget } from "../services/widgets.js";
 import { editWizard, ownedWizard, writeDraft } from "../services/wizards.js";
+import { currentTenant } from "../tenants/tenant.js";
 import { assertPublicUrl, safeFetch } from "../tools/net-guard.js";
 import { runScript } from "../widgets/script.js";
 import { thoughtLine } from "./thought.js";
 const MAX_STEPS = 45;
-function systemPrompt(mcp, connectors) {
+function systemPrompt(mcp, connectors, pluginTools) {
     return `You design wizards for "engenty wizards": a page-by-page flow an end user walks through, where AI steps research, write, draw images, render video, build documents, dashboards and interactive widgets, or write into other systems.
 
 You talk to the ADMIN who builds the wizard. Answer in the admin's language, briefly and warmly. Never mention JSON, ids, schemas, files or templates to them — talk about pages, questions, steps, the widget and results.
@@ -27,7 +29,7 @@ ${WIDGET_GUIDE}
 
 ${mcpServersLine(mcp)}
 
-${connectorsLine(connectors)}
+${connectorsLine(connectors)}${pluginToolsLine(pluginTools)}
 
 Example of a complete wizard:
 \`\`\`json
@@ -341,7 +343,7 @@ export async function runArchitect(input) {
         // The system prompt is long and identical on every turn: cache it.
         instructions: {
             role: "system",
-            content: systemPrompt(input.mcpServers, input.connectors),
+            content: systemPrompt(input.mcpServers, input.connectors, await pluginToolsOf(currentTenant())),
             providerOptions: { anthropic: { cacheControl: { type: "ephemeral" } } },
         },
         model: resolved.model,

package/apps/runtime/dist/app.js

@@ -18,9 +18,11 @@ import { PLUGIN_NAME, pluginArchive, pluginMarketplace } from "./plugin.js";
 import { apiRoutes } from "./routes/api.js";
 import { internalRoutes } from "./routes/internal.js";
 import { marketplaceStudio } from "./routes/marketplace.js";
+import { pluginRoutes } from "./routes/plugins.js";
 import { connectCallback, publicRoutes, runRoutes, shareRoutes } from "./routes/runs.js";
 import { studio } from "./routes/studio.js";
 import { wizardStream } from "./routes/wizard-stream.js";
+import { runTicketValid } from "./secrets/signing.js";
 import { ServiceError } from "./services/errors.js";
 import { tenantOfLink, tenantStatus } from "./tenants/control.js";
 const app = new Hono();
@@ -44,14 +46,45 @@ app.onError((err, c) => {
 const ownHosts = new Set([new URL(env.appUrl).host, ...env.allowedHosts]);
 const loopback = /^(localhost|127\.0\.0\.1|\[::1\])(:\d+)?$/;
 const hostAllowed = (host) => ownHosts.has(host) || loopback.test(host);
+/**
+ * The widget an AI app shows (MCP Apps) runs on the host's origin and reaches one run with its
+ * run ticket: those requests may come from anywhere, the ticket is what lets them in.
+ */
+const ticketedRun = /^\/api\/runs\/([^/]+)(\/|$)/;
 app.use("*", async (c, next) => {
-    if (managed) {
-        return next();
-    }
-    if (!hostAllowed(c.req.header("host") ?? new URL(c.req.url).host)) {
+    if (!managed && !hostAllowed(c.req.header("host") ?? new URL(c.req.url).host)) {
         return c.text("Forbidden host", 403);
     }
     const origin = c.req.header("origin");
+    const path = c.req.path.startsWith(`${basePath}/`)
+        ? c.req.path.slice(basePath.length)
+        : c.req.path;
+    const runId = ticketedRun.exec(path)?.[1];
+    if (origin && runId && runTicketValid(runId, c.req.query("rt"))) {
+        const cors = {
+            "access-control-allow-origin": origin,
+            "access-control-allow-credentials": "true",
+            vary: "Origin",
+        };
+        if (c.req.method === "OPTIONS") {
+            return c.body(null, 204, {
+                ...cors,
+                "access-control-allow-methods": "GET, POST, PUT, PATCH, DELETE",
+                "access-control-allow-headers": "content-type",
+                // A page on the internet asking a runtime on this computer (Private Network Access).
+                "access-control-allow-private-network": "true",
+                "access-control-max-age": "600",
+            });
+        }
+        await next();
+        for (const [name, value] of Object.entries(cors)) {
+            c.res.headers.set(name, value);
+        }
+        return;
+    }
+    if (managed) {
+        return next();
+    }
     const safe = c.req.method === "GET" || c.req.method === "HEAD" || c.req.method === "OPTIONS";
     // MCP clients and scripts send no Origin; a browser always does on a cross-origin write.
     if (!safe && origin && !hostAllowed(new URL(origin).host)) {
@@ -99,6 +132,7 @@ app.on(["GET", "POST", "DELETE"], "/api/mcp", (c) => mcp(c.req.raw));
 app.on(["GET", "POST", "DELETE"], "/api/mcp/bridge/:token", (c) => bridgeRequest(c.req.param("token"), c.req.raw));
 app.route("/api/studio/wizards", wizardStream);
 app.route("/api/studio/marketplace", marketplaceStudio);
+app.route("/api/studio/plugins", pluginRoutes);
 app.route("/api/studio", studio);
 app.route("/api/v1", apiRoutes);
 app.route("/api/internal", internalRoutes);

package/apps/runtime/dist/auth/local-ticket.js

@@ -5,19 +5,22 @@ import { createHmac, timingSafeEqual } from "node:crypto";
  * nothing new — it lets the command line and the desktop app enter a runtime that already runs.
  */
 const TTL_MS = 60_000;
-const sign = (secret, expires) => createHmac("sha256", secret).update(`local-enter.${expires}`).digest("hex");
-export function mintLocalTicket(secret, now = Date.now()) {
+/** The header `wizards mcp` signs its requests with, and the one naming its client. */
+export const LOCAL_MCP_HEADER = "x-engenty-local";
+export const LOCAL_CLIENT_HEADER = "x-engenty-client";
+const sign = (secret, expires, purpose) => createHmac("sha256", secret).update(`${purpose}.${expires}`).digest("hex");
+export function mintLocalTicket(secret, now = Date.now(), purpose = "local-enter") {
     const expires = now + TTL_MS;
-    return `${expires}.${sign(secret, expires)}`;
+    return `${expires}.${sign(secret, expires, purpose)}`;
 }
 /** When a ticket runs out, or null when it is not one of ours or already ran out. */
-export function localTicketExpiry(secret, ticket, now = Date.now()) {
+export function localTicketExpiry(secret, ticket, now = Date.now(), purpose = "local-enter") {
     const [head, signature] = ticket.split(".");
     const expires = Number(head);
     if (!signature || !Number.isSafeInteger(expires) || expires <= now || expires > now + TTL_MS) {
         return null;
     }
     const given = Buffer.from(signature);
-    const expected = Buffer.from(sign(secret, expires));
+    const expected = Buffer.from(sign(secret, expires, purpose));
     return given.length === expected.length && timingSafeEqual(given, expected) ? expires : null;
 }

package/apps/runtime/dist/authoring/guide.js

@@ -218,6 +218,14 @@ export function connectorsLine(connectors) {
     });
     return `Connectors a wizard of this project can use (built in, or imported from the integrations registry; find more with find_connectors + import_connector):\n${lines.join("\n")}`;
 }
+/** The tools this app's plugins add; nothing where there are none. */
+export function pluginToolsLine(tools) {
+    if (!tools.length) {
+        return "";
+    }
+    const lines = tools.map((t) => `- ${t.id} — ${t.description}`);
+    return `\n\nTools of this app's plugins. An agent step lists one in "tools" by its full id, next to the built-in ones; a wizard that uses one runs only where that plugin is installed:\n${lines.join("\n")}`;
+}
 export function mcpServersLine(mcp) {
     return `Project MCP servers available to agent steps: ${mcp.length ? mcp.map((m) => `${m.id} (${m.name})`).join(", ") : "none — if the admin wants to write into an external system that needs one, build the step with http or browser, and tell them they can connect a server in the project settings"}.`;
 }
@@ -225,7 +233,7 @@ export function exampleWizard() {
     return JSON.stringify(EXAMPLE_WIZARD, null, 2);
 }
 /** The guide an MCP client reads before it writes a wizard. */
-export function authoringGuide(mcp, connectors = []) {
+export function authoringGuide(mcp, connectors = [], pluginTools = []) {
     return `engenty wizards: a wizard is a page-by-page flow an end user walks through on a shared link. Pages ask questions; AI steps research, write, draw images, render video, build documents and dashboards, or write into other systems. You author the wizard as JSON; the person who asked you is the ADMIN, the people who later open the link are END USERS.
 
 ${SCHEMA_DOC}
@@ -234,7 +242,7 @@ ${WIDGET_GUIDE}
 
 ${mcpServersLine(mcp)}
 
-${connectorsLine(connectors)}
+${connectorsLine(connectors)}${pluginToolsLine(pluginTools)}
 
 Models: a step names the KIND of model it needs, never a model. Pick the cheapest class that does the job:
 - "classifier": routing, yes/no, picking from options, pulling a few values out of text.