@agentshouse/mdruntime 0.1.0-c3903a68dcbbf → 0.1.0-c3a5b012b4a8c

package/dist/wire.js

@@ -1,69 +1,81 @@
-export const RUNTIME_WIRE_PROTOCOL = 8;
-export const PROTOCOL_MISMATCH = {
-    reason: 'client-host-protocol-mismatch',
-    reauthorizationOffered: false,
-    refusal: null,
+import { UNCERTAIN } from './outcome.js';
+const MEMBERS = {
+    rooms: { reach: 'within', effect: 'read' },
+    query: { reach: 'within', effect: 'read' },
+    search: { reach: 'within', effect: 'read' },
+    types: { reach: 'within', effect: 'read' },
+    save: { reach: 'within', effect: 'write' },
+    saveParts: { reach: 'within', effect: 'write' },
+    history: { reach: 'within', effect: 'read' },
+    resolve: { reach: 'within', effect: 'read' },
+    'binaryFile.read': { reach: 'within', effect: 'read' },
+    'binaryFile.link': { reach: 'within', effect: 'read' },
+    'binaryFile.show': { reach: 'within', effect: 'read' },
+    'binaryFile.attach': { reach: 'within', effect: 'action' },
+    'binaryFile.part': { reach: 'within', effect: 'read' },
+    call: { reach: 'actions', effect: 'action' },
+    reached: { reach: 'within', effect: 'read' },
+    log: { reach: 'whole', effect: 'read' },
+    cleanUp: { reach: 'whole', effect: 'write' },
+    unsent: { reach: 'whole', effect: 'read' },
+    reset: { reach: 'whole', effect: 'write' },
+    persistence: { reach: 'runtime', effect: 'read' },
+    retry: { reach: 'runtime', effect: 'write' },
+    reauthorize: { reach: 'runtime', effect: 'write' },
+    'roomDraft.list': { reach: 'within', effect: 'read' },
+    'roomDraft.read': { reach: 'within', effect: 'read' },
+    'roomDraft.write': { reach: 'within', effect: 'write' },
+    'roomDraft.discard': { reach: 'within', effect: 'write' },
+    'presentation.read': { reach: 'app', effect: 'read' },
+    'presentation.write': { reach: 'app', effect: 'write' },
+    'presentation.edit': { reach: 'app', effect: 'write' },
+    'conversation.list': { reach: 'within', effect: 'read' },
+    'conversation.read': { reach: 'within', effect: 'read' },
+    'conversation.create': { reach: 'within', effect: 'action' },
+    'conversation.send': { reach: 'within', effect: 'action' },
+    'conversation.answer': { reach: 'within', effect: 'action' },
+    'conversation.interrupt': { reach: 'within', effect: 'action' },
+    'conversation.kill': { reach: 'within', effect: 'action' },
+    'conversation.delete': { reach: 'within', effect: 'action' },
+    'chatDraft.write': { reach: 'within', effect: 'write' },
+    'chatDraft.prepend': { reach: 'within', effect: 'write' },
+    'chatDraft.discard': { reach: 'within', effect: 'write' },
 };
-const MEMBERS = [
-    'rooms',
-    'slots',
-    'query',
-    'search',
-    'types',
-    'syncStatus',
-    'serviceMode',
-    'save',
-    'outcome',
-    'history',
-    'call',
-    'reached',
-    'log',
-    'storageLoss',
-    'persistence',
-    'deploymentFacts',
-    'reauthorize',
-    'roomDraft.list',
-    'roomDraft.read',
-    'roomDraft.write',
-    'roomDraft.discard',
-    'presentation.read',
-    'presentation.write',
-    'conversation.list',
-    'conversation.read',
-    'conversation.create',
-    'conversation.send',
-    'conversation.answer',
-    'conversation.interrupt',
-    'conversation.kill',
-    'conversation.cancel',
-    'conversation.delete',
-    'chatDraft.write',
-    'chatDraft.discard',
-];
-const TOPICS = [
-    'rooms',
-    'connection-refusal',
-    'storage-loss',
-    'deployment-facts',
-    'sync-status',
-    'service-mode',
-    'query',
-    'queue',
-    'room-drafts',
-    'presentation',
-    'conversation',
-];
-export const AUTHORIZATION_ENDED = 'the host authorization ended';
-export const PORT_CLOSED = 'the port closed';
-export function envelope(message) {
-    return { mdRuntime: RUNTIME_WIRE_PROTOCOL, message };
-}
-export function carried(data) {
-    if (typeof data !== 'object' || data === null || !('mdRuntime' in data))
+const TOPICS = {
+    rooms: 'within',
+    readiness: 'within',
+    'connection-refusal': 'runtime',
+    'storage-loss': 'runtime',
+    'deployment-facts': 'runtime',
+    'sync-status': 'within',
+    'service-mode': 'runtime',
+    member: 'runtime',
+    'authority-changes': 'runtime',
+    query: 'within',
+    queue: 'within',
+    'room-drafts': 'within',
+    presentation: 'app',
+    conversation: 'within',
+    conversations: 'within',
+    agents: 'within',
+};
+export const WIRE = { members: MEMBERS, topics: TOPICS };
+export function unanswered(call) {
+    const { effect } = MEMBERS[call.member];
+    if (effect === 'read')
         return null;
-    const record = data;
-    return { matching: record.mdRuntime === RUNTIME_WIRE_PROTOCOL, message: record.message };
+    if (effect === 'action')
+        return { kind: 'result', id: call.id, value: UNCERTAIN };
+    return {
+        kind: 'failure',
+        id: call.id,
+        message: UNCERTAIN.code,
+        code: UNCERTAIN.code,
+        retryable: UNCERTAIN.retryable,
+    };
 }
+export const AUTHORIZATION_ENDED = 'the host authorization ended';
+export const PORT_CLOSED = 'the port closed';
 function body(message) {
     if (typeof message !== 'object' || message === null)
         return null;
@@ -83,7 +95,9 @@ export function request(message) {
         return { kind: 'stop', id: shape.id };
     if (!Array.isArray(record.input))
         return null;
-    if (shape.kind === 'call' && MEMBERS.includes(record.member)) {
+    if (shape.kind === 'call' &&
+        typeof record.member === 'string' &&
+        Object.hasOwn(MEMBERS, record.member)) {
         return {
             kind: 'call',
             id: shape.id,
@@ -91,7 +105,9 @@ export function request(message) {
             input: record.input,
         };
     }
-    if (shape.kind === 'observe' && TOPICS.includes(record.topic)) {
+    if (shape.kind === 'observe' &&
+        typeof record.topic === 'string' &&
+        Object.hasOwn(TOPICS, record.topic)) {
         return {
             kind: 'observe',
             id: shape.id,
@@ -117,8 +133,17 @@ export function answer(message) {
         return { kind: 'result', id: shape.id, value: record.value };
     if (shape.kind === 'event')
         return { kind: 'event', id: shape.id, value: record.value };
-    if (shape.kind === 'failure' && typeof record.message === 'string') {
-        return { kind: 'failure', id: shape.id, message: record.message };
+    if (shape.kind === 'failure' &&
+        typeof record.message === 'string' &&
+        typeof record.code === 'string' &&
+        typeof record.retryable === 'boolean') {
+        return {
+            kind: 'failure',
+            id: shape.id,
+            message: record.message,
+            code: record.code,
+            retryable: record.retryable,
+        };
     }
     return null;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentshouse/mdruntime",
-  "version": "0.1.0-c3903a68dcbbf",
+  "version": "0.1.0-c3a5b012b4a8c",
   "description": "The headless core of MD App",
   "license": "MIT",
   "type": "module",
@@ -9,36 +9,59 @@
     "access": "public"
   },
   "engines": {
-    "node": ">=24.21.0"
+    "node": ">=24.22.1"
   },
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
+      "default": "./dist/index.js"
     },
     "./host": {
       "types": "./dist/host.d.ts",
-      "import": "./dist/host.js"
+      "default": "./dist/host.js"
     },
     "./client": {
       "types": "./dist/client.d.ts",
-      "import": "./dist/client.js"
+      "default": "./dist/client.js"
+    },
+    "./entry": {
+      "types": "./dist/entry.d.ts",
+      "default": "./dist/entry.js"
     },
     "./memory": {
       "types": "./dist/memory.d.ts",
-      "import": "./dist/memory.js"
+      "default": "./dist/memory.js"
+    },
+    "./tables": {
+      "types": "./dist/tables.d.ts",
+      "default": "./dist/tables.js"
+    },
+    "./react": {
+      "types": "./dist/react.d.ts",
+      "default": "./dist/react.js"
+    },
+    "./digest": {
+      "types": "./dist/digest.d.ts",
+      "default": "./dist/digest.js"
     },
     "./package.json": "./package.json"
   },
   "files": [
     "dist",
-    "AGENTS.md",
+    "!dist/chat.*",
+    "!dist/chat/",
     "README.md",
     "LICENSE"
   ],
   "dependencies": {
-    "@agentshouse/mdmodel": "0.1.0-cf72583e19192",
-    "@tanstack/db": "0.9.2",
-    "minisearch": "7.2.0"
+    "@agentshouse/mdmodel": "0.1.0-cae8e240cefab"
+  },
+  "peerDependencies": {
+    "react": ">=18"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/agentshouse/core.git",
+    "directory": "mdruntime/packages/mdruntime"
   }
 }

package/AGENTS.md

@@ -1,210 +0,0 @@
-# Instructions for the App Creator's agent
-
-These instructions address an agent in an environment with Git. Obtain the
-App Repository, change it, build, and push. They are documentation, not
-enforcement.
-
-## The MD Runtime API
-
-App code reaches the MD Runtime through the remote client. The surfaces are
-Rooms, Slots, Query, Search, Observe, Types, Room Draft, Save, History, Call, Reached, Log,
-storage loss, the reported persistence answer, deployment facts, Sync Status, the Service Mode,
-reauthorization, conversation, the chat draft, and Presentation State.
-
-Every `observe` resolves, once its first value has arrived, to a handle:
-`current()` is the latest complete value, `subscribe(listener)` hears each later
-value whole and returns its unsubscribe, and `close()` ends the observation.
-Closing the port ends every handle and rejects every pending call and
-observation; a client that reconnects observes again.
-
-Each conversation a Provider card names is held complete in the browser.
-Observe one with `observe('conversation', id, { limit })`: the view
-holds its latest `limit` messages, or all of them, oldest first, its chat
-draft, and what the Provider streams for it whether or not anything views it:
-the growing text and plan of the running turn, the open questions, the process
-state, the CLI's commands and options, and the latest `workingNote`. These live
-only in memory: the turn's accepted message replaces its growing text and plan,
-a working note is never part of a message, and none of them is stored or
-searchable.
-`chatDraft.write` and `chatDraft.discard` keep what the App Creator composes;
-sending it is a Provider Action that needs the Provider reachable and is never
-queued.
-
-Slots answers each Slot the Provider declares, in its order, with its entries
-in order, each a Room and its segment; a Room two Slots list is the same Room.
-
-Each Room in Rooms lists its `attachments`, the files the Provider holds for it
-that its Documents link by the Provider's reference, ordered by `reference`,
-each with `name`, `byteLength`, `mediaType` and the Provider's own entry as
-`entry`. They are as the Provider last declared them and hold no bytes;
-open one through the Provider Action that serves it.
-
-Rooms, Slots, Query, Search, Observe, Types, Room Draft, Save, and Reached never
-touch the network.
-History and Call go to the Provider through the Adapter. A Call result whose
-effect the Provider places in a Room carries `at`, that Room and Room Version;
-`reached(room, roomVersion)` answers whether the Room's confirmed state has
-reached it, and the MD Runtime keeps refreshing that Room until it has;
-`reached(room, roomVersion, path)` answers whether the held confirmed copy of
-that document was written at a later Room Version. Each History revision
-names its author, `{ kind: 'user', id }` or `{ kind: 'site', id, name }`. Every
-member of the
-client is asynchronous. Results are detached snapshots. Nothing in this
-surface returns the authorization, performs a request the App's code
-composes, or exposes the browser store.
-
-Read deployment facts with `deploymentFacts()` and observe replacements with
-`observe('deployment-facts')`. Interpret the opaque value using the
-host's contract.
-
-The in-memory Adapter at `@agentshouse/mdruntime/memory` is for tests and
-ships in no bundle.
-
-## Local Query rules
-
-`query(q)` answers once from local state; `observe('query', q)` holds the whole
-result and hears it again only when it changes, keeping every unchanged Document
-the same object, so a component can tell what changed by identity. A query is
-data:
-
-- **Filter.** `rooms` names Room locators and defaults to every Room. `types`
-  names MD Types, and `any` names untyped Markdown Documents. `pathPrefix` is a
-  directory: `notes` keeps `notes/a.md` and not `notes2/a.md`.
-- **Fields.** `where` names frontmatter fields, ANDs them, and nests `$and` and
-  `$or`. A bare value is equality; the operators are `$eq`, `$ne`, `$in`, `$nin`,
-  `$gt`, `$gte`, `$lt`, `$lte`, `$all`, `$size` and `$exists`. Equality on a list
-  asks whether it contains the value. Missing, null and empty differ:
-  `$exists: false` keeps a missing field, `null` an explicit null, `''` empty
-  text and `$size: 0` an empty list. A date compares in calendar order and never
-  with a date-time. A reference compares by the Room Path it resolves to.
-  Untyped frontmatter is plain values. There is no text containment or regular
-  expression.
-- **Relations.** `hop: { field, types, where, pathPrefix }` keeps Documents whose
-  reference `field` points to a matching Document of the same Room.
-  `backlinks: { field, types, where, pathPrefix }` keeps Documents that a
-  matching Document of the same Room references. Each keeps a Document once.
-- **Parts.** A Document query must `select`: `'all'`, or `fields`, `sections`,
-  `preamble`, `markdown`, `backlinks` and `change`, where `fields` and `sections`
-  are `'all'` or a list of names. Room and Path always return; a Markdown
-  Document also returns its MD Type. A non-Markdown Document or binary link
-  target returns only Room and Path. An unselected part is absent. Select only
-  what a screen shows: a list that selects the Markdown hears every edit of it.
-- **Change.** `change` is `{ author, time }` of the Document's head revision as
-  the Provider last delivered it: `author` is `{ kind: 'user' | 'site', id, name }`
-  or `null` for a write the Provider made itself, and `time` is the Provider's
-  ISO 8601 change time. It is `null` where the Provider delivered no time, as at
-  a Site. An unsent edit or move keeps it, an unsent creation has none, and a
-  saved write takes the Provider's own once it is Accepted and refreshed. A
-  Room's last change is its Document with the latest `time`.
-- **Order and groups.** `orderBy` sorts by `room`, `path`, `type` or `{ field }`
-  with TanStack DB's own options, and ties end with Room, then Path. `groupBy` by
-  `room`, `type` or `{ field }` answers `{ groups: [{ key, count }] }`, counted
-  over every match and ordered by `count` or a key. `limit` bounds the Documents
-  or the groups.
-- **Results and errors.** A result carries no Room Version: read freshness from
-  Rooms and Sync Status. An invalid query fails with `invalid-query`,
-  `unknown-type`, `unknown-field` or `wrong-kind`, naming where, and never
-  answers an empty result in its place.
-
-## Local Search rules
-
-`search({ text, documents, conversations, limit })` answers once, by words, from
-local state, with MiniSearch at its default configuration. There is no observed
-search.
-
-- **What is found.** A Document by its field values, its sections' headings and
-  text, its preamble and its Path; a message by its text. Frontmatter keys, Room
-  Drafts, chat drafts and growing text are never found. There are no phrases,
-  word forms, typo tolerance or prefix matching.
-- **Narrowing.** `documents` is a Local Query filter: `rooms`, `types`, `where`,
-  `pathPrefix`, `hop` and `backlinks`. `conversations` names conversations. Both
-  apply before `limit`, which bounds each list; without it every hit returns.
-- **Results.** `{ documents, messages }`, each ranked by `score`, which compares
-  hits of one list of one search. A Document hit names its `room`, `path` and
-  `type`, a message hit its `conversation` and `identity`, and `matches` maps each
-  matched word to the parts it matched in: `fields`, `sections`, `preamble` or
-  `path`, or `text`. A hit carries no position; mark the words in the text you
-  show. An invalid filter fails with its Local Query error.
-
-## Room Draft, Save, and outcome rules
-
-The MD Runtime owns one Room Draft per Room and Path, shared by every App and
-tab. It is durable: it survives reload and navigation. A Room that Discovery
-stops listing takes its Room Drafts, its queue and their outcomes with it.
-Write a Room Draft with `roomDraft.write(room, path, revision, parts)`, naming
-the revision you read, or `null` when there was none, and every part it should
-now change: fields, sections and the preamble, or the whole Markdown, a
-creation, a move, or a removal. A part new to the Room Draft names its base,
-the value you showed when it was opened; the MD Runtime keeps a part's first
-base. A binary link target has a Room Draft too, for a move or a removal, with
-`null` as its base. A write or a discard from an older revision is refused as `stale` with
-the current Room Draft; read it and write again.
-
-Save takes one Room and the Room Drafts of it to save, each with its revision,
-validates locally, and on success appends one Change Batch to that Room's
-queue and removes those Room Drafts. It is refused as `stale`, as
-`changed-underneath` naming each part whose base no longer matches the visible
-state, or by a local validation rule, and then creates nothing and leaves every
-Room Draft in place. A directory move or removal is a move or removal part on
-each Document and binary link target beneath it, saved together.
-
-Outcomes follow the Provider's answer. An Accepted Change Batch stays in the
-queue, drawn over the confirmed layer, until the confirmed layer reaches the
-Room Version it was accepted at, and then leaves it. Conflicted and Rejected, an expired outcome record, and a change that no
-longer applies over the Room each leave the queue and return as Room Drafts on
-the Documents they changed, marked with why: the Provider's structured refusal
-code and fields as returned, not known to have applied, or withdrawn locally.
-The rest of the queue keeps synchronizing, and Sync Status requires attention
-until each returned Room Draft is saved again or discarded. `outcome` answers
-the saved Change Batch's outcome, and `null` while it is Pending. Transport
-failure and Provider unavailability keep work Pending and do not infer a
-rejection. A refusal the Provider marks retryable stays Pending until the reset
-it names; the MD Runtime retries the same Change Batch identity and payload and
-never infers an outcome from transport uncertainty. The MD Runtime never
-combines, reorders, or rebases.
-
-`serviceMode()` and `observe('service-mode')` answer the Provider's Service
-Mode, `open` or `write-halted`. While writes are halted, Save still succeeds,
-its Change Batch waits unsent, and the queue is submitted in order once the
-Provider reopens writes. An Action is never held: a write the Provider refuses
-for the halt returns that refusal to its caller. Show the Provider as read-only
-instead of retrying.
-
-## The neutrality rule
-
-No module outside an Adapter package imports, names, or special-cases a
-Provider. MD UI and every App reach data only through the client entry.
-
-## Content-safety rules
-
-The Provider authorization belongs to the Runtime host and is never readable
-by the App's code. The App's code reaches the network only at the external
-origins its manifest declares, empty by default, and the Provider enforces
-that set. Every request to the Provider itself goes through the MD Runtime.
-Rendered Markdown never executes scripts, renders raw HTML only for the
-details and summary elements, and loads images and other resources only from
-origins the Provider's policy allows.
-
-## Launch promises MD UI keeps
-
-MD UI uses semantic HTML, is fully operable from a keyboard with visible
-focus and labelled controls, and lays out from a 360 pixel wide viewport to
-a desktop. Its strings are English only, dates and numbers follow the
-browser locale, and content is never translated. Light and dark themes come
-from CSS custom properties with the browser's preference as the default and
-an App's override respected. What an App Creator's agent adds carries none
-of these promises by itself. Reading, querying and searching never wait for
-the network. Data lives only in the App Creator's browser and with the Provider.
-
-## App code imports only the client entry and never constructs a Runtime
-
-App code imports only `@agentshouse/mdruntime/client` and calls
-`connectMdRuntime` on the port the host hands it. It never constructs a
-Runtime. It does not import the package main, the host entry, or the Adapter
-package, and it does not call `createMdRuntime` or `serveMdRuntime`. Hosts
-and tests use those entries; the served App does not.
-
-## What an agent must never do
-
-An agent must never read the authorization, load code from a Room, call the
-Provider directly, or rebase a refused Change Batch.

package/dist/attachment.d.ts

@@ -1,3 +0,0 @@
-import type { RoomAttachment } from './adapter.js';
-export declare function declaredAttachments(pages: readonly (readonly RoomAttachment[])[]): readonly RoomAttachment[];
-//# sourceMappingURL=attachment.d.ts.map

package/dist/attachment.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"attachment.d.ts","sourceRoot":"","sources":["../src/attachment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,SAAS,CAAC,SAAS,cAAc,EAAE,CAAC,EAAE,GAC5C,SAAS,cAAc,EAAE,CAQ3B"}

package/dist/attachment.js

@@ -1,8 +0,0 @@
-export function declaredAttachments(pages) {
-    const byReference = new Map();
-    for (const page of pages) {
-        for (const attachment of page)
-            byReference.set(attachment.reference, attachment);
-    }
-    return [...byReference.values()].sort((left, right) => left.reference < right.reference ? -1 : left.reference > right.reference ? 1 : 0);
-}

package/dist/read-side.d.ts

@@ -1,14 +0,0 @@
-import type { ChangeSet } from './change-set.js';
-import { type KeyedResult, type QueryChange } from './observation.js';
-import type { Plan, QueryResult } from './query.js';
-import type { SearchedDocument } from './search.js';
-export type ReadSide = {
-    apply(set: ChangeSet): void;
-    query(plan: Plan): Promise<QueryResult>;
-    watch(plan: Plan, identity: string, deliver: (message: KeyedResult | QueryChange) => void): () => void;
-    documents(): readonly SearchedDocument[];
-    document(room: string, path: string): SearchedDocument | null;
-    close(): void;
-};
-export declare function createReadSide(): ReadSide;
-//# sourceMappingURL=read-side.d.ts.map

package/dist/read-side.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"read-side.d.ts","sourceRoot":"","sources":["../src/read-side.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAU,KAAK,WAAW,EAAE,KAAK,WAAW,EAAe,MAAM,kBAAkB,CAAC;AAC3F,OAAO,KAAK,EAOV,IAAI,EAGJ,WAAW,EAIZ,MAAM,YAAY,CAAC;AAEpB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAqDpD,MAAM,MAAM,QAAQ,GAAG;IACrB,KAAK,CAAC,GAAG,EAAE,SAAS,GAAG,IAAI,CAAC;IAC5B,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACxC,KAAK,CACH,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,GAAG,WAAW,KAAK,IAAI,GACpD,MAAM,IAAI,CAAC;IACd,SAAS,IAAI,SAAS,gBAAgB,EAAE,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAAC;IAC9D,KAAK,IAAI,IAAI,CAAC;CACf,CAAC;AAySF,wBAAgB,cAAc,IAAI,QAAQ,CA4HzC"}