Function createHttpShellHost

packages/react/src/api/shell-host.ts:116–243

(options?: {
  readonly fetch?: typeof globalThis.fetch;
})

 * bearer (a desktop connection carries no auth and sends none).
 */
export const createHttpShellHost = (options?: {
  readonly fetch?: typeof globalThis.fetch;
}): HttpShellHost => {
  const doFetch = options?.fetch ?? globalThis.fetch.bind(globalThis);

  /**
   * Every request this host makes, headed the same way as the typed API client
   * (`api/client.tsx`'s `transformClient`): bearer when the connection carries
   * one, plus the active org selector.
   *
   * The selector is what an org-scoped host (cloud) scopes the request by, and
   * it fails CLOSED — a session request that omits it is rejected outright
   * rather than falling back to the session's stored org. Without it here every
   * artifact tool call 403'd with `no_organization`. Resolved per request, not
   * captured at construction: the host is memoized for the page's lifetime,
   * while the scope authority is set during render, so a captured value could
   * outlive the org it named.
   *
   * Hosts without org scoping (local, desktop, self-host) produce no slug and
   * so send no header, which is the same convention the neighboring clients
   * follow.
   */
  const requestHeaders = (): Record<string, string> => {
    const headers: Record<string, string> = {
      "content-type": "application/json",
      ...getExecutorOrganizationHeaders(),
    };
    const authorization = getExecutorServerAuthorizationHeader();
    if (authorization) headers.authorization = authorization;
    return headers;
  };

  const post = async (path: string, payload: Record<string, unknown>): Promise<unknown> => {
    const response = await doFetch(`${getExecutorApiBaseUrl()}${path}`, {
      method: "POST",
      headers: requestHeaders(),
      body: JSON.stringify(payload),
    });
    if (!response.ok) {
      const text = await response.text();
      // An approval that outlived its window is an ordinary outcome, not a
      // fault: nothing ran, and the fix is to trigger the action again. Say that
      // instead of surfacing the transport's error body, which reached the user
      // as a raw `ExecutionNotFoundError` inside a JSON-RPC envelope.
      if (response.status === APPROVAL_EXPIRED_STATUS) {
        // oxlint-disable-next-line executor/no-try-catch-or-throw, executor/no-error-constructor -- boundary: the shell's tool proxy is Promise-based and surfaces rejections as component errors
        throw new Error(APPROVAL_EXPIRED_MESSAGE);
      }
      // oxlint-disable-next-line executor/no-try-catch-or-throw, executor/no-error-constructor -- boundary: the shell's tool proxy is Promise-based and surfaces rejections as component errors
      throw new Error(text || `Executor API request failed with ${response.status}`);
    }
    return response.json();
  };

  return {
    getHostContext: () => ({ theme: prefersDark() ? "dark" : "light" }),

    /**