@agimon-ai/doompi-core 0.0.1-alpha.100

package/dist/src/server/mcpBundleLoader.cjs

@@ -0,0 +1,115 @@
+const require_runtime = require("../../_virtual/_rolldown/runtime.cjs");
+const require_mcpBundle = require("../schemas/mcpBundle.cjs");
+let node_crypto = require("node:crypto");
+node_crypto = require_runtime.__toESM(node_crypto, 1);
+let node_fs = require("node:fs");
+node_fs = require_runtime.__toESM(node_fs, 1);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path, 1);
+let node_url = require("node:url");
+//#region src/server/mcpBundleLoader.ts
+function containedFile(directory, relativeFile) {
+	const resolved = node_fs.default.realpathSync(node_path.default.resolve(directory, relativeFile));
+	const relative = node_path.default.relative(directory, resolved);
+	if (relative === ".." || relative.startsWith(`..${node_path.default.sep}`) || node_path.default.isAbsolute(relative)) throw new Error(`MCP bundle file escapes its generation: ${relativeFile}`);
+	return resolved;
+}
+function isMcpPlugin(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const candidate = value;
+	return typeof candidate.name === "string" && (typeof candidate.session === "function" || typeof candidate.session === "object");
+}
+/** Imports only modules named by an admitted MCP descriptor. */
+async function loadMcpBundle(options) {
+	const directory = node_fs.default.realpathSync(options.directory);
+	const descriptorBytes = node_fs.default.readFileSync(containedFile(directory, require_mcpBundle.DOOM_MCP_BUNDLE_FILE));
+	if (node_crypto.default.createHash("sha256").update(descriptorBytes).digest("hex") !== options.descriptorSha256) throw new Error("MCP descriptor hash does not match the admitted descriptor");
+	const descriptor = require_mcpBundle.parseDoomMcpBundle(JSON.parse(descriptorBytes.toString("utf8")));
+	if (descriptor.generation !== options.generation || descriptor.fingerprint !== options.fingerprint) throw new Error("MCP bundle does not match the admitted generation");
+	let resource;
+	if (descriptor.ui) {
+		const html = node_fs.default.readFileSync(containedFile(directory, descriptor.ui.file), "utf8");
+		if (node_crypto.default.createHash("sha256").update(html).digest("hex") !== descriptor.ui.sha256) throw new Error("MCP UI hash does not match the admitted descriptor");
+		resource = {
+			uri: `ui://doompi/tools/${descriptor.ui.sha256}/index.html`,
+			name: "doompi-tool-widgets",
+			description: "Package-owned tool widgets composed by doompi sync.",
+			mimeType: "text/html;profile=mcp-app",
+			_meta: {
+				ui: {
+					csp: {
+						connectDomains: [],
+						resourceDomains: []
+					},
+					prefersBorder: true
+				},
+				"openai/widgetPrefersBorder": true,
+				"openai/widgetCSP": {
+					connect_domains: [],
+					resource_domains: []
+				}
+			},
+			read: () => html
+		};
+	}
+	const plugins = [];
+	for (const declaration of descriptor.entries) {
+		const eligible = declaration.owners.some((owner) => owner.majorMode === options.majorMode && (owner.layer === "default" || options.activeLayers.includes(owner.layer)));
+		if (!eligible && options.retainCandidates !== true) continue;
+		try {
+			const file = containedFile(directory, declaration.module);
+			if (node_crypto.default.createHash("sha256").update(node_fs.default.readFileSync(file)).digest("hex") !== declaration.sha256) throw new Error("module hash does not match the admitted descriptor");
+			const imported = await import((0, node_url.pathToFileURL)(file).href);
+			if (!isMcpPlugin(imported.default)) throw new Error("default export is not an MCP plugin");
+			const original = imported.default;
+			const ui = resource;
+			const allowedWidgets = new Set(declaration.widgets ?? []);
+			const plugin = ui === void 0 || allowedWidgets.size === 0 ? original : {
+				...original,
+				async session(context) {
+					const { tools: contributedTools, uiResources: contributedResources, ...rest } = typeof original.session === "function" ? await original.session(context) : original.session;
+					let usesWidget = false;
+					const tools = contributedTools?.map((tool) => {
+						const widget = tool._meta?.["doompi/widget"];
+						if (widget === void 0) return tool;
+						if (typeof widget !== "string" || !allowedWidgets.has(widget)) throw new Error(`MCP tool '${tool.name}' references a widget not owned by its package`);
+						usesWidget = true;
+						return {
+							...tool,
+							_meta: {
+								...tool._meta,
+								ui: {
+									...tool._meta?.ui,
+									resourceUri: ui.uri,
+									visibility: tool._meta?.ui?.visibility ?? ["model"]
+								},
+								"openai/outputTemplate": ui.uri
+							}
+						};
+					});
+					return {
+						...rest,
+						...tools === void 0 ? {} : { tools },
+						uiResources: [...contributedResources ?? [], ...usesWidget ? [ui] : []]
+					};
+				}
+			};
+			plugins.push({
+				declaration,
+				plugin
+			});
+		} catch (error) {
+			const message = `MCP plugin '${declaration.packageName}' could not load (${error instanceof Error ? error.message : String(error)})`;
+			if (eligible) throw new Error(message, { cause: error });
+			options.onNotice?.(message);
+		}
+	}
+	return {
+		descriptor,
+		plugins
+	};
+}
+//#endregion
+exports.loadMcpBundle = loadMcpBundle;
+
+//# sourceMappingURL=mcpBundleLoader.cjs.map

package/dist/src/server/mcpBundleLoader.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpBundleLoader.cjs","names":["fs","path","DOOM_MCP_BUNDLE_FILE","crypto","parseDoomMcpBundle","pathToFileURL"],"sources":["../../../src/server/mcpBundleLoader.ts"],"sourcesContent":["import crypto from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { pathToFileURL } from 'node:url';\n\nimport {\n  DOOM_MCP_BUNDLE_FILE,\n  type DoomMcpBundle,\n  type DoomMcpBundleEntry,\n  parseDoomMcpBundle,\n} from '../schemas/mcpBundle';\nimport type { DoomMcpPluginDefinition, DoomMcpUiResource } from '../schemas/mcpFacet';\n\nexport interface LoadMcpBundleOptions {\n  readonly directory: string;\n  readonly generation: string;\n  readonly fingerprint: string;\n  /** SHA-256 of the descriptor bytes admitted by sync registration. */\n  readonly descriptorSha256: string;\n  readonly majorMode: string;\n  readonly activeLayers: readonly string[];\n  readonly onNotice?: (message: string) => void;\n  /** Retain admitted candidates so a live session can follow selection changes. */\n  readonly retainCandidates?: boolean;\n}\n\nexport interface LoadedMcpPlugin {\n  readonly declaration: DoomMcpBundleEntry;\n  readonly plugin: DoomMcpPluginDefinition;\n}\n\nexport interface LoadedMcpBundle {\n  readonly descriptor: DoomMcpBundle;\n  readonly plugins: readonly LoadedMcpPlugin[];\n}\n\nfunction containedFile(directory: string, relativeFile: string): string {\n  const resolved = fs.realpathSync(path.resolve(directory, relativeFile));\n  const relative = path.relative(directory, resolved);\n  if (relative === '..' || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative))\n    throw new Error(`MCP bundle file escapes its generation: ${relativeFile}`);\n  return resolved;\n}\n\nfunction isMcpPlugin(value: unknown): value is DoomMcpPluginDefinition {\n  if (typeof value !== 'object' || value === null) return false;\n  const candidate = value as Partial<DoomMcpPluginDefinition>;\n  return (\n    typeof candidate.name === 'string' &&\n    (typeof candidate.session === 'function' || typeof candidate.session === 'object')\n  );\n}\n\n/** Imports only modules named by an admitted MCP descriptor. */\nexport async function loadMcpBundle(options: LoadMcpBundleOptions): Promise<LoadedMcpBundle> {\n  const directory = fs.realpathSync(options.directory);\n  const descriptorBytes = fs.readFileSync(containedFile(directory, DOOM_MCP_BUNDLE_FILE));\n  const descriptorSha256 = crypto.createHash('sha256').update(descriptorBytes).digest('hex');\n  if (descriptorSha256 !== options.descriptorSha256)\n    throw new Error('MCP descriptor hash does not match the admitted descriptor');\n  const descriptor = parseDoomMcpBundle(JSON.parse(descriptorBytes.toString('utf8')));\n  if (descriptor.generation !== options.generation || descriptor.fingerprint !== options.fingerprint)\n    throw new Error('MCP bundle does not match the admitted generation');\n  let resource: DoomMcpUiResource | undefined;\n  if (descriptor.ui) {\n    const html = fs.readFileSync(containedFile(directory, descriptor.ui.file), 'utf8');\n    if (crypto.createHash('sha256').update(html).digest('hex') !== descriptor.ui.sha256)\n      throw new Error('MCP UI hash does not match the admitted descriptor');\n    resource = {\n      uri: `ui://doompi/tools/${descriptor.ui.sha256}/index.html`,\n      name: 'doompi-tool-widgets',\n      description: 'Package-owned tool widgets composed by doompi sync.',\n      mimeType: 'text/html;profile=mcp-app',\n      _meta: {\n        ui: { csp: { connectDomains: [], resourceDomains: [] }, prefersBorder: true },\n        'openai/widgetPrefersBorder': true,\n        'openai/widgetCSP': { connect_domains: [], resource_domains: [] },\n      },\n      read: () => html,\n    };\n  }\n  const plugins: LoadedMcpPlugin[] = [];\n  for (const declaration of descriptor.entries) {\n    const eligible = declaration.owners.some(\n      (owner) =>\n        owner.majorMode === options.majorMode &&\n        (owner.layer === 'default' || options.activeLayers.includes(owner.layer)),\n    );\n    if (!eligible && options.retainCandidates !== true) continue;\n    try {\n      const file = containedFile(directory, declaration.module);\n      const sha256 = crypto.createHash('sha256').update(fs.readFileSync(file)).digest('hex');\n      if (sha256 !== declaration.sha256) throw new Error('module hash does not match the admitted descriptor');\n      const imported = (await import(pathToFileURL(file).href)) as { default?: unknown };\n      if (!isMcpPlugin(imported.default)) throw new Error('default export is not an MCP plugin');\n      const original = imported.default;\n      const ui = resource;\n      const allowedWidgets = new Set(declaration.widgets ?? []);\n      const plugin: DoomMcpPluginDefinition =\n        ui === undefined || allowedWidgets.size === 0\n          ? original\n          : {\n              ...original,\n              async session(context) {\n                const scope =\n                  typeof original.session === 'function' ? await original.session(context) : original.session;\n                const { tools: contributedTools, uiResources: contributedResources, ...rest } = scope;\n                let usesWidget = false;\n                const tools = contributedTools?.map((tool) => {\n                  const widget = tool._meta?.['doompi/widget'];\n                  if (widget === undefined) return tool;\n                  if (typeof widget !== 'string' || !allowedWidgets.has(widget))\n                    throw new Error(`MCP tool '${tool.name}' references a widget not owned by its package`);\n                  usesWidget = true;\n                  return {\n                    ...tool,\n                    _meta: {\n                      ...tool._meta,\n                      ui: {\n                        ...tool._meta?.ui,\n                        resourceUri: ui.uri,\n                        visibility: tool._meta?.ui?.visibility ?? ['model'],\n                      },\n                      'openai/outputTemplate': ui.uri,\n                    },\n                  };\n                });\n                return {\n                  ...rest,\n                  ...(tools === undefined ? {} : { tools }),\n                  uiResources: [...(contributedResources ?? []), ...(usesWidget ? [ui] : [])],\n                };\n              },\n            };\n      plugins.push({ declaration, plugin });\n    } catch (error) {\n      const message = `MCP plugin '${declaration.packageName}' could not load (${error instanceof Error ? error.message : String(error)})`;\n      if (eligible) throw new Error(message, { cause: error });\n      options.onNotice?.(message);\n    }\n  }\n  return { descriptor, plugins };\n}\n"],"mappings":";;;;;;;;;;AAoCA,SAAS,cAAc,WAAmB,cAA8B;CACtE,MAAM,WAAWA,QAAAA,QAAG,aAAaC,UAAAA,QAAK,QAAQ,WAAW,YAAY,CAAC;CACtE,MAAM,WAAWA,UAAAA,QAAK,SAAS,WAAW,QAAQ;CAClD,IAAI,aAAa,QAAQ,SAAS,WAAW,KAAKA,UAAAA,QAAK,KAAK,KAAKA,UAAAA,QAAK,WAAW,QAAQ,GACvF,MAAM,IAAI,MAAM,2CAA2C,cAAc;CAC3E,OAAO;AACT;AAEA,SAAS,YAAY,OAAkD;CACrE,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,MAAM,YAAY;CAClB,OACE,OAAO,UAAU,SAAS,aACzB,OAAO,UAAU,YAAY,cAAc,OAAO,UAAU,YAAY;AAE7E;;AAGA,eAAsB,cAAc,SAAyD;CAC3F,MAAM,YAAYD,QAAAA,QAAG,aAAa,QAAQ,SAAS;CACnD,MAAM,kBAAkBA,QAAAA,QAAG,aAAa,cAAc,WAAWE,kBAAAA,oBAAoB,CAAC;CAEtF,IADyBC,YAAAA,QAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,eAAe,CAAC,CAAC,OAAO,KACjE,MAAM,QAAQ,kBAC/B,MAAM,IAAI,MAAM,4DAA4D;CAC9E,MAAM,aAAaC,kBAAAA,mBAAmB,KAAK,MAAM,gBAAgB,SAAS,MAAM,CAAC,CAAC;CAClF,IAAI,WAAW,eAAe,QAAQ,cAAc,WAAW,gBAAgB,QAAQ,aACrF,MAAM,IAAI,MAAM,mDAAmD;CACrE,IAAI;CACJ,IAAI,WAAW,IAAI;EACjB,MAAM,OAAOJ,QAAAA,QAAG,aAAa,cAAc,WAAW,WAAW,GAAG,IAAI,GAAG,MAAM;EACjF,IAAIG,YAAAA,QAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,WAAW,GAAG,QAC3E,MAAM,IAAI,MAAM,oDAAoD;EACtE,WAAW;GACT,KAAK,qBAAqB,WAAW,GAAG,OAAO;GAC/C,MAAM;GACN,aAAa;GACb,UAAU;GACV,OAAO;IACL,IAAI;KAAE,KAAK;MAAE,gBAAgB,CAAC;MAAG,iBAAiB,CAAC;KAAE;KAAG,eAAe;IAAK;IAC5E,8BAA8B;IAC9B,oBAAoB;KAAE,iBAAiB,CAAC;KAAG,kBAAkB,CAAC;IAAE;GAClE;GACA,YAAY;EACd;CACF;CACA,MAAM,UAA6B,CAAC;CACpC,KAAK,MAAM,eAAe,WAAW,SAAS;EAC5C,MAAM,WAAW,YAAY,OAAO,MACjC,UACC,MAAM,cAAc,QAAQ,cAC3B,MAAM,UAAU,aAAa,QAAQ,aAAa,SAAS,MAAM,KAAK,EAC3E;EACA,IAAI,CAAC,YAAY,QAAQ,qBAAqB,MAAM;EACpD,IAAI;GACF,MAAM,OAAO,cAAc,WAAW,YAAY,MAAM;GAExD,IADeA,YAAAA,QAAO,WAAW,QAAQ,CAAC,CAAC,OAAOH,QAAAA,QAAG,aAAa,IAAI,CAAC,CAAC,CAAC,OAAO,KACvE,MAAM,YAAY,QAAQ,MAAM,IAAI,MAAM,oDAAoD;GACvG,MAAM,WAAY,MAAM,QAAA,GAAOK,SAAAA,cAAAA,CAAc,IAAI,CAAC,CAAC;GACnD,IAAI,CAAC,YAAY,SAAS,OAAO,GAAG,MAAM,IAAI,MAAM,qCAAqC;GACzF,MAAM,WAAW,SAAS;GAC1B,MAAM,KAAK;GACX,MAAM,iBAAiB,IAAI,IAAI,YAAY,WAAW,CAAC,CAAC;GACxD,MAAM,SACJ,OAAO,KAAA,KAAa,eAAe,SAAS,IACxC,WACA;IACE,GAAG;IACH,MAAM,QAAQ,SAAS;KAGrB,MAAM,EAAE,OAAO,kBAAkB,aAAa,sBAAsB,GAAG,SADrE,OAAO,SAAS,YAAY,aAAa,MAAM,SAAS,QAAQ,OAAO,IAAI,SAAS;KAEtF,IAAI,aAAa;KACjB,MAAM,QAAQ,kBAAkB,KAAK,SAAS;MAC5C,MAAM,SAAS,KAAK,QAAQ;MAC5B,IAAI,WAAW,KAAA,GAAW,OAAO;MACjC,IAAI,OAAO,WAAW,YAAY,CAAC,eAAe,IAAI,MAAM,GAC1D,MAAM,IAAI,MAAM,aAAa,KAAK,KAAK,+CAA+C;MACxF,aAAa;MACb,OAAO;OACL,GAAG;OACH,OAAO;QACL,GAAG,KAAK;QACR,IAAI;SACF,GAAG,KAAK,OAAO;SACf,aAAa,GAAG;SAChB,YAAY,KAAK,OAAO,IAAI,cAAc,CAAC,OAAO;QACpD;QACA,yBAAyB,GAAG;OAC9B;MACF;KACF,CAAC;KACD,OAAO;MACL,GAAG;MACH,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;MACvC,aAAa,CAAC,GAAI,wBAAwB,CAAC,GAAI,GAAI,aAAa,CAAC,EAAE,IAAI,CAAC,CAAE;KAC5E;IACF;GACF;GACN,QAAQ,KAAK;IAAE;IAAa;GAAO,CAAC;EACtC,SAAS,OAAO;GACd,MAAM,UAAU,eAAe,YAAY,YAAY,oBAAoB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;GAClI,IAAI,UAAU,MAAM,IAAI,MAAM,SAAS,EAAE,OAAO,MAAM,CAAC;GACvD,QAAQ,WAAW,OAAO;EAC5B;CACF;CACA,OAAO;EAAE;EAAY;CAAQ;AAC/B"}

package/dist/src/server/mcpBundleLoader.d.mts

@@ -0,0 +1,27 @@
+import { DoomMcpPluginDefinition } from "../schemas/mcpFacet.mjs";
+import { DoomMcpBundle, DoomMcpBundleEntry } from "../schemas/mcpBundle.mjs";
+//#region src/server/mcpBundleLoader.d.ts
+export interface LoadMcpBundleOptions {
+  readonly directory: string;
+  readonly generation: string;
+  readonly fingerprint: string;
+  /** SHA-256 of the descriptor bytes admitted by sync registration. */
+  readonly descriptorSha256: string;
+  readonly majorMode: string;
+  readonly activeLayers: readonly string[];
+  readonly onNotice?: (message: string) => void;
+  /** Retain admitted candidates so a live session can follow selection changes. */
+  readonly retainCandidates?: boolean;
+}
+export interface LoadedMcpPlugin {
+  readonly declaration: DoomMcpBundleEntry;
+  readonly plugin: DoomMcpPluginDefinition;
+}
+export interface LoadedMcpBundle {
+  readonly descriptor: DoomMcpBundle;
+  readonly plugins: readonly LoadedMcpPlugin[];
+}
+/** Imports only modules named by an admitted MCP descriptor. */
+export declare function loadMcpBundle(options: LoadMcpBundleOptions): Promise<LoadedMcpBundle>;
+//#endregion
+//# sourceMappingURL=mcpBundleLoader.d.mts.map

package/dist/src/server/mcpBundleLoader.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpBundleLoader.d.mts","names":[],"sources":["../../../src/server/mcpBundleLoader.ts"],"mappings":";;;iBAaiB;WACN;WACA;WACA;;WAEA;WACA;WACA;WACA,YAAY;;WAEZ;;iBAGM;WACN,aAAa;WACb,QAAQ;;iBAGF;WACN,YAAY;WACZ,kBAAkB;;;wBAqBP,cAAc,SAAS,uBAAuB,QAAQ"}

package/dist/src/server/mcpBundleLoader.mjs

@@ -0,0 +1,111 @@
+import { DOOM_MCP_BUNDLE_FILE, parseDoomMcpBundle } from "../schemas/mcpBundle.mjs";
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { pathToFileURL } from "node:url";
+//#region src/server/mcpBundleLoader.ts
+function containedFile(directory, relativeFile) {
+	const resolved = fs.realpathSync(path.resolve(directory, relativeFile));
+	const relative = path.relative(directory, resolved);
+	if (relative === ".." || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative)) throw new Error(`MCP bundle file escapes its generation: ${relativeFile}`);
+	return resolved;
+}
+function isMcpPlugin(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const candidate = value;
+	return typeof candidate.name === "string" && (typeof candidate.session === "function" || typeof candidate.session === "object");
+}
+/** Imports only modules named by an admitted MCP descriptor. */
+async function loadMcpBundle(options) {
+	const directory = fs.realpathSync(options.directory);
+	const descriptorBytes = fs.readFileSync(containedFile(directory, DOOM_MCP_BUNDLE_FILE));
+	if (crypto.createHash("sha256").update(descriptorBytes).digest("hex") !== options.descriptorSha256) throw new Error("MCP descriptor hash does not match the admitted descriptor");
+	const descriptor = parseDoomMcpBundle(JSON.parse(descriptorBytes.toString("utf8")));
+	if (descriptor.generation !== options.generation || descriptor.fingerprint !== options.fingerprint) throw new Error("MCP bundle does not match the admitted generation");
+	let resource;
+	if (descriptor.ui) {
+		const html = fs.readFileSync(containedFile(directory, descriptor.ui.file), "utf8");
+		if (crypto.createHash("sha256").update(html).digest("hex") !== descriptor.ui.sha256) throw new Error("MCP UI hash does not match the admitted descriptor");
+		resource = {
+			uri: `ui://doompi/tools/${descriptor.ui.sha256}/index.html`,
+			name: "doompi-tool-widgets",
+			description: "Package-owned tool widgets composed by doompi sync.",
+			mimeType: "text/html;profile=mcp-app",
+			_meta: {
+				ui: {
+					csp: {
+						connectDomains: [],
+						resourceDomains: []
+					},
+					prefersBorder: true
+				},
+				"openai/widgetPrefersBorder": true,
+				"openai/widgetCSP": {
+					connect_domains: [],
+					resource_domains: []
+				}
+			},
+			read: () => html
+		};
+	}
+	const plugins = [];
+	for (const declaration of descriptor.entries) {
+		const eligible = declaration.owners.some((owner) => owner.majorMode === options.majorMode && (owner.layer === "default" || options.activeLayers.includes(owner.layer)));
+		if (!eligible && options.retainCandidates !== true) continue;
+		try {
+			const file = containedFile(directory, declaration.module);
+			if (crypto.createHash("sha256").update(fs.readFileSync(file)).digest("hex") !== declaration.sha256) throw new Error("module hash does not match the admitted descriptor");
+			const imported = await import(pathToFileURL(file).href);
+			if (!isMcpPlugin(imported.default)) throw new Error("default export is not an MCP plugin");
+			const original = imported.default;
+			const ui = resource;
+			const allowedWidgets = new Set(declaration.widgets ?? []);
+			const plugin = ui === void 0 || allowedWidgets.size === 0 ? original : {
+				...original,
+				async session(context) {
+					const { tools: contributedTools, uiResources: contributedResources, ...rest } = typeof original.session === "function" ? await original.session(context) : original.session;
+					let usesWidget = false;
+					const tools = contributedTools?.map((tool) => {
+						const widget = tool._meta?.["doompi/widget"];
+						if (widget === void 0) return tool;
+						if (typeof widget !== "string" || !allowedWidgets.has(widget)) throw new Error(`MCP tool '${tool.name}' references a widget not owned by its package`);
+						usesWidget = true;
+						return {
+							...tool,
+							_meta: {
+								...tool._meta,
+								ui: {
+									...tool._meta?.ui,
+									resourceUri: ui.uri,
+									visibility: tool._meta?.ui?.visibility ?? ["model"]
+								},
+								"openai/outputTemplate": ui.uri
+							}
+						};
+					});
+					return {
+						...rest,
+						...tools === void 0 ? {} : { tools },
+						uiResources: [...contributedResources ?? [], ...usesWidget ? [ui] : []]
+					};
+				}
+			};
+			plugins.push({
+				declaration,
+				plugin
+			});
+		} catch (error) {
+			const message = `MCP plugin '${declaration.packageName}' could not load (${error instanceof Error ? error.message : String(error)})`;
+			if (eligible) throw new Error(message, { cause: error });
+			options.onNotice?.(message);
+		}
+	}
+	return {
+		descriptor,
+		plugins
+	};
+}
+//#endregion
+export { loadMcpBundle };
+
+//# sourceMappingURL=mcpBundleLoader.mjs.map

package/dist/src/server/mcpBundleLoader.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpBundleLoader.mjs","names":[],"sources":["../../../src/server/mcpBundleLoader.ts"],"sourcesContent":["import crypto from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { pathToFileURL } from 'node:url';\n\nimport {\n  DOOM_MCP_BUNDLE_FILE,\n  type DoomMcpBundle,\n  type DoomMcpBundleEntry,\n  parseDoomMcpBundle,\n} from '../schemas/mcpBundle';\nimport type { DoomMcpPluginDefinition, DoomMcpUiResource } from '../schemas/mcpFacet';\n\nexport interface LoadMcpBundleOptions {\n  readonly directory: string;\n  readonly generation: string;\n  readonly fingerprint: string;\n  /** SHA-256 of the descriptor bytes admitted by sync registration. */\n  readonly descriptorSha256: string;\n  readonly majorMode: string;\n  readonly activeLayers: readonly string[];\n  readonly onNotice?: (message: string) => void;\n  /** Retain admitted candidates so a live session can follow selection changes. */\n  readonly retainCandidates?: boolean;\n}\n\nexport interface LoadedMcpPlugin {\n  readonly declaration: DoomMcpBundleEntry;\n  readonly plugin: DoomMcpPluginDefinition;\n}\n\nexport interface LoadedMcpBundle {\n  readonly descriptor: DoomMcpBundle;\n  readonly plugins: readonly LoadedMcpPlugin[];\n}\n\nfunction containedFile(directory: string, relativeFile: string): string {\n  const resolved = fs.realpathSync(path.resolve(directory, relativeFile));\n  const relative = path.relative(directory, resolved);\n  if (relative === '..' || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative))\n    throw new Error(`MCP bundle file escapes its generation: ${relativeFile}`);\n  return resolved;\n}\n\nfunction isMcpPlugin(value: unknown): value is DoomMcpPluginDefinition {\n  if (typeof value !== 'object' || value === null) return false;\n  const candidate = value as Partial<DoomMcpPluginDefinition>;\n  return (\n    typeof candidate.name === 'string' &&\n    (typeof candidate.session === 'function' || typeof candidate.session === 'object')\n  );\n}\n\n/** Imports only modules named by an admitted MCP descriptor. */\nexport async function loadMcpBundle(options: LoadMcpBundleOptions): Promise<LoadedMcpBundle> {\n  const directory = fs.realpathSync(options.directory);\n  const descriptorBytes = fs.readFileSync(containedFile(directory, DOOM_MCP_BUNDLE_FILE));\n  const descriptorSha256 = crypto.createHash('sha256').update(descriptorBytes).digest('hex');\n  if (descriptorSha256 !== options.descriptorSha256)\n    throw new Error('MCP descriptor hash does not match the admitted descriptor');\n  const descriptor = parseDoomMcpBundle(JSON.parse(descriptorBytes.toString('utf8')));\n  if (descriptor.generation !== options.generation || descriptor.fingerprint !== options.fingerprint)\n    throw new Error('MCP bundle does not match the admitted generation');\n  let resource: DoomMcpUiResource | undefined;\n  if (descriptor.ui) {\n    const html = fs.readFileSync(containedFile(directory, descriptor.ui.file), 'utf8');\n    if (crypto.createHash('sha256').update(html).digest('hex') !== descriptor.ui.sha256)\n      throw new Error('MCP UI hash does not match the admitted descriptor');\n    resource = {\n      uri: `ui://doompi/tools/${descriptor.ui.sha256}/index.html`,\n      name: 'doompi-tool-widgets',\n      description: 'Package-owned tool widgets composed by doompi sync.',\n      mimeType: 'text/html;profile=mcp-app',\n      _meta: {\n        ui: { csp: { connectDomains: [], resourceDomains: [] }, prefersBorder: true },\n        'openai/widgetPrefersBorder': true,\n        'openai/widgetCSP': { connect_domains: [], resource_domains: [] },\n      },\n      read: () => html,\n    };\n  }\n  const plugins: LoadedMcpPlugin[] = [];\n  for (const declaration of descriptor.entries) {\n    const eligible = declaration.owners.some(\n      (owner) =>\n        owner.majorMode === options.majorMode &&\n        (owner.layer === 'default' || options.activeLayers.includes(owner.layer)),\n    );\n    if (!eligible && options.retainCandidates !== true) continue;\n    try {\n      const file = containedFile(directory, declaration.module);\n      const sha256 = crypto.createHash('sha256').update(fs.readFileSync(file)).digest('hex');\n      if (sha256 !== declaration.sha256) throw new Error('module hash does not match the admitted descriptor');\n      const imported = (await import(pathToFileURL(file).href)) as { default?: unknown };\n      if (!isMcpPlugin(imported.default)) throw new Error('default export is not an MCP plugin');\n      const original = imported.default;\n      const ui = resource;\n      const allowedWidgets = new Set(declaration.widgets ?? []);\n      const plugin: DoomMcpPluginDefinition =\n        ui === undefined || allowedWidgets.size === 0\n          ? original\n          : {\n              ...original,\n              async session(context) {\n                const scope =\n                  typeof original.session === 'function' ? await original.session(context) : original.session;\n                const { tools: contributedTools, uiResources: contributedResources, ...rest } = scope;\n                let usesWidget = false;\n                const tools = contributedTools?.map((tool) => {\n                  const widget = tool._meta?.['doompi/widget'];\n                  if (widget === undefined) return tool;\n                  if (typeof widget !== 'string' || !allowedWidgets.has(widget))\n                    throw new Error(`MCP tool '${tool.name}' references a widget not owned by its package`);\n                  usesWidget = true;\n                  return {\n                    ...tool,\n                    _meta: {\n                      ...tool._meta,\n                      ui: {\n                        ...tool._meta?.ui,\n                        resourceUri: ui.uri,\n                        visibility: tool._meta?.ui?.visibility ?? ['model'],\n                      },\n                      'openai/outputTemplate': ui.uri,\n                    },\n                  };\n                });\n                return {\n                  ...rest,\n                  ...(tools === undefined ? {} : { tools }),\n                  uiResources: [...(contributedResources ?? []), ...(usesWidget ? [ui] : [])],\n                };\n              },\n            };\n      plugins.push({ declaration, plugin });\n    } catch (error) {\n      const message = `MCP plugin '${declaration.packageName}' could not load (${error instanceof Error ? error.message : String(error)})`;\n      if (eligible) throw new Error(message, { cause: error });\n      options.onNotice?.(message);\n    }\n  }\n  return { descriptor, plugins };\n}\n"],"mappings":";;;;;;AAoCA,SAAS,cAAc,WAAmB,cAA8B;CACtE,MAAM,WAAW,GAAG,aAAa,KAAK,QAAQ,WAAW,YAAY,CAAC;CACtE,MAAM,WAAW,KAAK,SAAS,WAAW,QAAQ;CAClD,IAAI,aAAa,QAAQ,SAAS,WAAW,KAAK,KAAK,KAAK,KAAK,KAAK,WAAW,QAAQ,GACvF,MAAM,IAAI,MAAM,2CAA2C,cAAc;CAC3E,OAAO;AACT;AAEA,SAAS,YAAY,OAAkD;CACrE,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,MAAM,YAAY;CAClB,OACE,OAAO,UAAU,SAAS,aACzB,OAAO,UAAU,YAAY,cAAc,OAAO,UAAU,YAAY;AAE7E;;AAGA,eAAsB,cAAc,SAAyD;CAC3F,MAAM,YAAY,GAAG,aAAa,QAAQ,SAAS;CACnD,MAAM,kBAAkB,GAAG,aAAa,cAAc,WAAW,oBAAoB,CAAC;CAEtF,IADyB,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,eAAe,CAAC,CAAC,OAAO,KACjE,MAAM,QAAQ,kBAC/B,MAAM,IAAI,MAAM,4DAA4D;CAC9E,MAAM,aAAa,mBAAmB,KAAK,MAAM,gBAAgB,SAAS,MAAM,CAAC,CAAC;CAClF,IAAI,WAAW,eAAe,QAAQ,cAAc,WAAW,gBAAgB,QAAQ,aACrF,MAAM,IAAI,MAAM,mDAAmD;CACrE,IAAI;CACJ,IAAI,WAAW,IAAI;EACjB,MAAM,OAAO,GAAG,aAAa,cAAc,WAAW,WAAW,GAAG,IAAI,GAAG,MAAM;EACjF,IAAI,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,WAAW,GAAG,QAC3E,MAAM,IAAI,MAAM,oDAAoD;EACtE,WAAW;GACT,KAAK,qBAAqB,WAAW,GAAG,OAAO;GAC/C,MAAM;GACN,aAAa;GACb,UAAU;GACV,OAAO;IACL,IAAI;KAAE,KAAK;MAAE,gBAAgB,CAAC;MAAG,iBAAiB,CAAC;KAAE;KAAG,eAAe;IAAK;IAC5E,8BAA8B;IAC9B,oBAAoB;KAAE,iBAAiB,CAAC;KAAG,kBAAkB,CAAC;IAAE;GAClE;GACA,YAAY;EACd;CACF;CACA,MAAM,UAA6B,CAAC;CACpC,KAAK,MAAM,eAAe,WAAW,SAAS;EAC5C,MAAM,WAAW,YAAY,OAAO,MACjC,UACC,MAAM,cAAc,QAAQ,cAC3B,MAAM,UAAU,aAAa,QAAQ,aAAa,SAAS,MAAM,KAAK,EAC3E;EACA,IAAI,CAAC,YAAY,QAAQ,qBAAqB,MAAM;EACpD,IAAI;GACF,MAAM,OAAO,cAAc,WAAW,YAAY,MAAM;GAExD,IADe,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,GAAG,aAAa,IAAI,CAAC,CAAC,CAAC,OAAO,KACvE,MAAM,YAAY,QAAQ,MAAM,IAAI,MAAM,oDAAoD;GACvG,MAAM,WAAY,MAAM,OAAO,cAAc,IAAI,CAAC,CAAC;GACnD,IAAI,CAAC,YAAY,SAAS,OAAO,GAAG,MAAM,IAAI,MAAM,qCAAqC;GACzF,MAAM,WAAW,SAAS;GAC1B,MAAM,KAAK;GACX,MAAM,iBAAiB,IAAI,IAAI,YAAY,WAAW,CAAC,CAAC;GACxD,MAAM,SACJ,OAAO,KAAA,KAAa,eAAe,SAAS,IACxC,WACA;IACE,GAAG;IACH,MAAM,QAAQ,SAAS;KAGrB,MAAM,EAAE,OAAO,kBAAkB,aAAa,sBAAsB,GAAG,SADrE,OAAO,SAAS,YAAY,aAAa,MAAM,SAAS,QAAQ,OAAO,IAAI,SAAS;KAEtF,IAAI,aAAa;KACjB,MAAM,QAAQ,kBAAkB,KAAK,SAAS;MAC5C,MAAM,SAAS,KAAK,QAAQ;MAC5B,IAAI,WAAW,KAAA,GAAW,OAAO;MACjC,IAAI,OAAO,WAAW,YAAY,CAAC,eAAe,IAAI,MAAM,GAC1D,MAAM,IAAI,MAAM,aAAa,KAAK,KAAK,+CAA+C;MACxF,aAAa;MACb,OAAO;OACL,GAAG;OACH,OAAO;QACL,GAAG,KAAK;QACR,IAAI;SACF,GAAG,KAAK,OAAO;SACf,aAAa,GAAG;SAChB,YAAY,KAAK,OAAO,IAAI,cAAc,CAAC,OAAO;QACpD;QACA,yBAAyB,GAAG;OAC9B;MACF;KACF,CAAC;KACD,OAAO;MACL,GAAG;MACH,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;MACvC,aAAa,CAAC,GAAI,wBAAwB,CAAC,GAAI,GAAI,aAAa,CAAC,EAAE,IAAI,CAAC,CAAE;KAC5E;IACF;GACF;GACN,QAAQ,KAAK;IAAE;IAAa;GAAO,CAAC;EACtC,SAAS,OAAO;GACd,MAAM,UAAU,eAAe,YAAY,YAAY,oBAAoB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;GAClI,IAAI,UAAU,MAAM,IAAI,MAAM,SAAS,EAAE,OAAO,MAAM,CAAC;GACvD,QAAQ,WAAW,OAAO;EAC5B;CACF;CACA,OAAO;EAAE;EAAY;CAAQ;AAC/B"}

package/dist/src/server/nativeChildTranscriptReader.cjs

@@ -0,0 +1,20 @@
+const require_runtime = require("../../_virtual/_rolldown/runtime.cjs");
+const require_index = require("../services/sqliteTranscriptReader/index.cjs");
+const require_nativeChildRuntimes = require("../systems/child/adapters/nativeChildRuntimes.cjs");
+const require_jsonlTranscriptReader = require("./jsonlTranscriptReader.cjs");
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path, 1);
+let _earendil_works_pi_agent_core_harness_context = require("@earendil-works/pi-agent-core/harness/context");
+//#region src/server/nativeChildTranscriptReader.ts
+/** Dispatches an already-authorized child journal to its live runtime or completed read-only backend. */
+async function readNativeChildTranscript(file, request, signal) {
+	signal?.throwIfAborted();
+	const runtime = require_nativeChildRuntimes.nativeChildRuntime(file);
+	const page = runtime ? await runtime.readTranscriptPage(request, _earendil_works_pi_agent_core_harness_context.BACKGROUND_CONTEXT) : node_path.default.extname(file) === ".sqlite" ? await require_index.readSqliteTranscript(file, request, _earendil_works_pi_agent_core_harness_context.BACKGROUND_CONTEXT) : node_path.default.extname(file) === ".jsonl" ? await require_jsonlTranscriptReader.readJsonlTranscript(file, request) : await Promise.reject(/* @__PURE__ */ new Error("Unsupported child transcript format"));
+	signal?.throwIfAborted();
+	return page;
+}
+//#endregion
+exports.readNativeChildTranscript = readNativeChildTranscript;
+
+//# sourceMappingURL=nativeChildTranscriptReader.cjs.map

package/dist/src/server/nativeChildTranscriptReader.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"nativeChildTranscriptReader.cjs","names":["nativeChildRuntime","BACKGROUND_CONTEXT","path","readSqliteTranscript","readJsonlTranscript"],"sources":["../../../src/server/nativeChildTranscriptReader.ts"],"sourcesContent":["import path from 'node:path';\n\nimport { BACKGROUND_CONTEXT } from '@earendil-works/pi-agent-core/harness/context';\n\nimport type { TranscriptPage, TranscriptPageRequest } from '../exports/sessionProtocol';\nimport { readSqliteTranscript } from '../services/sqliteTranscriptReader';\nimport { nativeChildRuntime } from '../systems/child/adapters/nativeChildRuntimes';\nimport { readJsonlTranscript } from './jsonlTranscriptReader';\n\n/** Dispatches an already-authorized child journal to its live runtime or completed read-only backend. */\nexport async function readNativeChildTranscript(\n  file: string,\n  request: Omit<TranscriptPageRequest, 'threadId'>,\n  signal?: AbortSignal,\n): Promise<TranscriptPage> {\n  signal?.throwIfAborted();\n  const runtime = nativeChildRuntime(file);\n  const page = runtime\n    ? await runtime.readTranscriptPage(request, BACKGROUND_CONTEXT)\n    : path.extname(file) === '.sqlite'\n      ? await readSqliteTranscript(file, request, BACKGROUND_CONTEXT)\n      : path.extname(file) === '.jsonl'\n        ? await readJsonlTranscript(file, request)\n        : await Promise.reject(new Error('Unsupported child transcript format'));\n  signal?.throwIfAborted();\n  return page;\n}\n"],"mappings":";;;;;;;;;AAUA,eAAsB,0BACpB,MACA,SACA,QACyB;CACzB,QAAQ,eAAe;CACvB,MAAM,UAAUA,4BAAAA,mBAAmB,IAAI;CACvC,MAAM,OAAO,UACT,MAAM,QAAQ,mBAAmB,SAASC,8CAAAA,kBAAkB,IAC5DC,UAAAA,QAAK,QAAQ,IAAI,MAAM,YACrB,MAAMC,cAAAA,qBAAqB,MAAM,SAASF,8CAAAA,kBAAkB,IAC5DC,UAAAA,QAAK,QAAQ,IAAI,MAAM,WACrB,MAAME,8BAAAA,oBAAoB,MAAM,OAAO,IACvC,MAAM,QAAQ,uBAAO,IAAI,MAAM,qCAAqC,CAAC;CAC7E,QAAQ,eAAe;CACvB,OAAO;AACT"}

package/dist/src/server/nativeChildTranscriptReader.mjs

@@ -0,0 +1,18 @@
+import { readSqliteTranscript } from "../services/sqliteTranscriptReader/index.mjs";
+import { nativeChildRuntime } from "../systems/child/adapters/nativeChildRuntimes.mjs";
+import { readJsonlTranscript } from "./jsonlTranscriptReader.mjs";
+import path from "node:path";
+import { BACKGROUND_CONTEXT } from "@earendil-works/pi-agent-core/harness/context";
+//#region src/server/nativeChildTranscriptReader.ts
+/** Dispatches an already-authorized child journal to its live runtime or completed read-only backend. */
+async function readNativeChildTranscript(file, request, signal) {
+	signal?.throwIfAborted();
+	const runtime = nativeChildRuntime(file);
+	const page = runtime ? await runtime.readTranscriptPage(request, BACKGROUND_CONTEXT) : path.extname(file) === ".sqlite" ? await readSqliteTranscript(file, request, BACKGROUND_CONTEXT) : path.extname(file) === ".jsonl" ? await readJsonlTranscript(file, request) : await Promise.reject(/* @__PURE__ */ new Error("Unsupported child transcript format"));
+	signal?.throwIfAborted();
+	return page;
+}
+//#endregion
+export { readNativeChildTranscript };
+
+//# sourceMappingURL=nativeChildTranscriptReader.mjs.map

package/dist/src/server/nativeChildTranscriptReader.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"nativeChildTranscriptReader.mjs","names":[],"sources":["../../../src/server/nativeChildTranscriptReader.ts"],"sourcesContent":["import path from 'node:path';\n\nimport { BACKGROUND_CONTEXT } from '@earendil-works/pi-agent-core/harness/context';\n\nimport type { TranscriptPage, TranscriptPageRequest } from '../exports/sessionProtocol';\nimport { readSqliteTranscript } from '../services/sqliteTranscriptReader';\nimport { nativeChildRuntime } from '../systems/child/adapters/nativeChildRuntimes';\nimport { readJsonlTranscript } from './jsonlTranscriptReader';\n\n/** Dispatches an already-authorized child journal to its live runtime or completed read-only backend. */\nexport async function readNativeChildTranscript(\n  file: string,\n  request: Omit<TranscriptPageRequest, 'threadId'>,\n  signal?: AbortSignal,\n): Promise<TranscriptPage> {\n  signal?.throwIfAborted();\n  const runtime = nativeChildRuntime(file);\n  const page = runtime\n    ? await runtime.readTranscriptPage(request, BACKGROUND_CONTEXT)\n    : path.extname(file) === '.sqlite'\n      ? await readSqliteTranscript(file, request, BACKGROUND_CONTEXT)\n      : path.extname(file) === '.jsonl'\n        ? await readJsonlTranscript(file, request)\n        : await Promise.reject(new Error('Unsupported child transcript format'));\n  signal?.throwIfAborted();\n  return page;\n}\n"],"mappings":";;;;;;;AAUA,eAAsB,0BACpB,MACA,SACA,QACyB;CACzB,QAAQ,eAAe;CACvB,MAAM,UAAU,mBAAmB,IAAI;CACvC,MAAM,OAAO,UACT,MAAM,QAAQ,mBAAmB,SAAS,kBAAkB,IAC5D,KAAK,QAAQ,IAAI,MAAM,YACrB,MAAM,qBAAqB,MAAM,SAAS,kBAAkB,IAC5D,KAAK,QAAQ,IAAI,MAAM,WACrB,MAAM,oBAAoB,MAAM,OAAO,IACvC,MAAM,QAAQ,uBAAO,IAAI,MAAM,qCAAqC,CAAC;CAC7E,QAAQ,eAAe;CACvB,OAAO;AACT"}