@agimon-ai/po-core 0.0.0-alpha.0

package/dist/src/server/mcpBundleLoader.cjs

@@ -0,0 +1,108 @@
+const require_liveImport = require("./liveImport.cjs");
+//#region src/server/mcpBundleLoader.ts
+function isMcpPlugin(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const candidate = value;
+	return typeof candidate.name === "string" && (typeof candidate.session === "function" || typeof candidate.session === "object");
+}
+/** Points a package's widget-tagged tools at the composed UI resource and serves it with them. */
+function withPackageWidgets(original, widgets, ui) {
+	const allowedWidgets = new Set(widgets ?? []);
+	if (ui === void 0 || allowedWidgets.size === 0) return original;
+	return {
+		...original,
+		async session(context) {
+			const { tools: contributedTools, uiResources: contributedResources, ...rest } = typeof original.session === "function" ? await original.session(context) : original.session;
+			let usesWidget = false;
+			const tools = contributedTools?.map((tool) => {
+				const widget = tool._meta?.["po/widget"];
+				if (widget === void 0) return tool;
+				if (typeof widget !== "string" || !allowedWidgets.has(widget)) throw new Error(`MCP tool '${tool.name}' references a widget not owned by its package`);
+				usesWidget = true;
+				return {
+					...tool,
+					_meta: {
+						...tool._meta,
+						ui: {
+							...tool._meta?.ui,
+							resourceUri: ui.uri,
+							visibility: tool._meta?.ui?.visibility ?? ["model"]
+						},
+						"openai/outputTemplate": ui.uri
+					}
+				};
+			});
+			return {
+				...rest,
+				...tools === void 0 ? {} : { tools },
+				uiResources: [...contributedResources ?? [], ...usesWidget ? [ui] : []]
+			};
+		}
+	};
+}
+/** The served MCP App resource for composed package widget HTML. */
+function mcpUiResource(html, sha256) {
+	return {
+		uri: `ui://po/tools/${sha256}/index.html`,
+		name: "po-tool-widgets",
+		description: "Package-owned tool widgets composed by po.",
+		mimeType: "text/html;profile=mcp-app",
+		_meta: {
+			ui: {
+				csp: {
+					connectDomains: [],
+					resourceDomains: []
+				},
+				prefersBorder: true
+			},
+			"openai/widgetPrefersBorder": true,
+			"openai/widgetCSP": {
+				connect_domains: [],
+				resource_domains: []
+			}
+		},
+		read: () => html
+	};
+}
+/**
+* Live reader: imports each package's built MCP entry from its content-addressed URL.
+*
+* Same eligibility rules as `loadMcpBundle`: an ineligible candidate is kept only with
+* `retainCandidates`, and a failure is fatal only for an eligible plugin. Package widgets
+* resolve to `uiResource`, which the po server builds per content key. Each import
+* is bounded and poisoned on failure (see `guardedImport`), and each `session` factory call
+* is bounded by `factoryTimeoutMs`.
+*/
+async function loadMcpPlugins(options) {
+	const importer = options.importer ?? ((url) => import(url));
+	const factoryTimeoutMs = options.factoryTimeoutMs ?? 1e4;
+	const plugins = [];
+	for (const { url, ...declaration } of options.entries) {
+		const eligible = declaration.owners.some((owner) => owner.majorMode === options.majorMode && (owner.layer === "default" || options.activeLayers.includes(owner.layer)));
+		if (!eligible && options.retainCandidates !== true) continue;
+		try {
+			const imported = await require_liveImport.guardedImport(url, importer, options);
+			if (!isMcpPlugin(imported?.default)) throw new Error("default export is not an MCP plugin");
+			const original = withPackageWidgets(imported.default, declaration.widgets, options.uiResource);
+			const session = original.session;
+			const label = `MCP plugin '${declaration.packageName}' session`;
+			plugins.push({
+				declaration,
+				plugin: typeof session === "function" ? {
+					...original,
+					session: (context) => require_liveImport.withTimeout(Promise.resolve().then(() => session.call(original, context)), factoryTimeoutMs, label)
+				} : original
+			});
+		} catch (error) {
+			const message = `MCP plugin '${declaration.packageName}' could not load (${error instanceof Error ? error.message : String(error)})`;
+			if (eligible) throw new Error(message, { cause: error });
+			options.onNotice?.(message);
+		}
+	}
+	return { plugins };
+}
+//#endregion
+exports.loadMcpPlugins = loadMcpPlugins;
+exports.mcpUiResource = mcpUiResource;
+
+//# sourceMappingURL=mcpBundleLoader.cjs.map

package/dist/src/server/mcpBundleLoader.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpBundleLoader.cjs","names":["guardedImport","withTimeout"],"sources":["../../../src/server/mcpBundleLoader.ts"],"sourcesContent":["import type { DoomMcpBundleEntry } from '../schemas/mcpBundle';\nimport type { DoomMcpPluginDefinition, DoomMcpUiResource } from '../schemas/mcpFacet';\nimport { guardedImport, LIVE_FACTORY_TIMEOUT_MS, type LiveImportGuard, withTimeout } from './liveImport';\n/** The parts of an MCP declaration a live session host reads. */\nexport type McpPluginDeclaration = Omit<DoomMcpBundleEntry, 'sha256'> & { readonly sha256?: string };\n\nexport interface LoadedMcpPlugin {\n  readonly declaration: McpPluginDeclaration;\n  readonly plugin: DoomMcpPluginDefinition;\n}\n\nfunction isMcpPlugin(value: unknown): value is DoomMcpPluginDefinition {\n  if (typeof value !== 'object' || value === null) return false;\n  const candidate = value as Partial<DoomMcpPluginDefinition>;\n  return (\n    typeof candidate.name === 'string' &&\n    (typeof candidate.session === 'function' || typeof candidate.session === 'object')\n  );\n}\n\n/** Points a package's widget-tagged tools at the composed UI resource and serves it with them. */\nfunction withPackageWidgets(\n  original: DoomMcpPluginDefinition,\n  widgets: readonly string[] | undefined,\n  ui: DoomMcpUiResource | undefined,\n): DoomMcpPluginDefinition {\n  const allowedWidgets = new Set(widgets ?? []);\n  if (ui === undefined || allowedWidgets.size === 0) return original;\n  return {\n    ...original,\n    async session(context) {\n      const scope = typeof original.session === 'function' ? await original.session(context) : original.session;\n      const { tools: contributedTools, uiResources: contributedResources, ...rest } = scope;\n      let usesWidget = false;\n      const tools = contributedTools?.map((tool) => {\n        const widget = tool._meta?.['po/widget'];\n        if (widget === undefined) return tool;\n        if (typeof widget !== 'string' || !allowedWidgets.has(widget))\n          throw new Error(`MCP tool '${tool.name}' references a widget not owned by its package`);\n        usesWidget = true;\n        return {\n          ...tool,\n          _meta: {\n            ...tool._meta,\n            ui: { ...tool._meta?.ui, resourceUri: ui.uri, visibility: tool._meta?.ui?.visibility ?? ['model'] },\n            'openai/outputTemplate': ui.uri,\n          },\n        };\n      });\n      return {\n        ...rest,\n        ...(tools === undefined ? {} : { tools }),\n        uiResources: [...(contributedResources ?? []), ...(usesWidget ? [ui] : [])],\n      };\n    },\n  };\n}\n\n/** The served MCP App resource for composed package widget HTML. */\nexport function mcpUiResource(html: string, sha256: string): DoomMcpUiResource {\n  return {\n    uri: `ui://po/tools/${sha256}/index.html`,\n    name: 'po-tool-widgets',\n    description: 'Package-owned tool widgets composed by po.',\n    mimeType: 'text/html;profile=mcp-app',\n    _meta: {\n      ui: { csp: { connectDomains: [], resourceDomains: [] }, prefersBorder: true },\n      'openai/widgetPrefersBorder': true,\n      'openai/widgetCSP': { connect_domains: [], resource_domains: [] },\n    },\n    read: () => html,\n  };\n}\n\n/** One live MCP plugin: its declaration plus the URL its package module imports from. */\nexport interface LiveMcpPluginEntry extends McpPluginDeclaration {\n  /** Content-addressed import URL for `module`, see the po server's `packageUrl`. */\n  readonly url: string;\n}\n\nexport interface LoadMcpPluginsOptions extends LiveImportGuard {\n  readonly entries: readonly LiveMcpPluginEntry[];\n  readonly majorMode: string;\n  readonly activeLayers: readonly string[];\n  readonly onNotice?: (message: string) => void;\n  /** Retain admitted candidates so a live session can follow selection changes. */\n  readonly retainCandidates?: boolean;\n  /** Composed package widget UI, served by tools whose package owns the widget. */\n  readonly uiResource?: DoomMcpUiResource;\n  /** Test seam; defaults to native `import()`. */\n  readonly importer?: (url: string) => Promise<unknown>;\n}\n\nexport interface LoadedMcpPlugins {\n  readonly plugins: readonly LoadedMcpPlugin[];\n}\n\n/**\n * Live reader: imports each package's built MCP entry from its content-addressed URL.\n *\n * Same eligibility rules as `loadMcpBundle`: an ineligible candidate is kept only with\n * `retainCandidates`, and a failure is fatal only for an eligible plugin. Package widgets\n * resolve to `uiResource`, which the po server builds per content key. Each import\n * is bounded and poisoned on failure (see `guardedImport`), and each `session` factory call\n * is bounded by `factoryTimeoutMs`.\n */\nexport async function loadMcpPlugins(options: LoadMcpPluginsOptions): Promise<LoadedMcpPlugins> {\n  const importer = options.importer ?? ((url: string) => import(url));\n  const factoryTimeoutMs = options.factoryTimeoutMs ?? LIVE_FACTORY_TIMEOUT_MS;\n  const plugins: LoadedMcpPlugin[] = [];\n  for (const { url, ...declaration } of options.entries) {\n    const eligible = declaration.owners.some(\n      (owner) =>\n        owner.majorMode === options.majorMode &&\n        (owner.layer === 'default' || options.activeLayers.includes(owner.layer)),\n    );\n    if (!eligible && options.retainCandidates !== true) continue;\n    try {\n      const imported = (await guardedImport(url, importer, options)) as { default?: unknown } | undefined;\n      if (!isMcpPlugin(imported?.default)) throw new Error('default export is not an MCP plugin');\n      const original = withPackageWidgets(imported.default, declaration.widgets, options.uiResource);\n      const session = original.session;\n      const label = `MCP plugin '${declaration.packageName}' session`;\n      plugins.push({\n        declaration,\n        plugin:\n          typeof session === 'function'\n            ? {\n                ...original,\n                session: (context) =>\n                  withTimeout(\n                    Promise.resolve().then(() => session.call(original, context)),\n                    factoryTimeoutMs,\n                    label,\n                  ),\n              }\n            : original,\n      });\n    } catch (error) {\n      const message = `MCP plugin '${declaration.packageName}' could not load (${error instanceof Error ? error.message : String(error)})`;\n      if (eligible) throw new Error(message, { cause: error });\n      options.onNotice?.(message);\n    }\n  }\n  return { plugins };\n}\n"],"mappings":";;AAWA,SAAS,YAAY,OAAkD;CACrE,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,MAAM,YAAY;CAClB,OACE,OAAO,UAAU,SAAS,aACzB,OAAO,UAAU,YAAY,cAAc,OAAO,UAAU,YAAY;AAE7E;;AAGA,SAAS,mBACP,UACA,SACA,IACyB;CACzB,MAAM,iBAAiB,IAAI,IAAI,WAAW,CAAC,CAAC;CAC5C,IAAI,OAAO,KAAA,KAAa,eAAe,SAAS,GAAG,OAAO;CAC1D,OAAO;EACL,GAAG;EACH,MAAM,QAAQ,SAAS;GAErB,MAAM,EAAE,OAAO,kBAAkB,aAAa,sBAAsB,GAAG,SADzD,OAAO,SAAS,YAAY,aAAa,MAAM,SAAS,QAAQ,OAAO,IAAI,SAAS;GAElG,IAAI,aAAa;GACjB,MAAM,QAAQ,kBAAkB,KAAK,SAAS;IAC5C,MAAM,SAAS,KAAK,QAAQ;IAC5B,IAAI,WAAW,KAAA,GAAW,OAAO;IACjC,IAAI,OAAO,WAAW,YAAY,CAAC,eAAe,IAAI,MAAM,GAC1D,MAAM,IAAI,MAAM,aAAa,KAAK,KAAK,+CAA+C;IACxF,aAAa;IACb,OAAO;KACL,GAAG;KACH,OAAO;MACL,GAAG,KAAK;MACR,IAAI;OAAE,GAAG,KAAK,OAAO;OAAI,aAAa,GAAG;OAAK,YAAY,KAAK,OAAO,IAAI,cAAc,CAAC,OAAO;MAAE;MAClG,yBAAyB,GAAG;KAC9B;IACF;GACF,CAAC;GACD,OAAO;IACL,GAAG;IACH,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;IACvC,aAAa,CAAC,GAAI,wBAAwB,CAAC,GAAI,GAAI,aAAa,CAAC,EAAE,IAAI,CAAC,CAAE;GAC5E;EACF;CACF;AACF;;AAGA,SAAgB,cAAc,MAAc,QAAmC;CAC7E,OAAO;EACL,KAAK,iBAAiB,OAAO;EAC7B,MAAM;EACN,aAAa;EACb,UAAU;EACV,OAAO;GACL,IAAI;IAAE,KAAK;KAAE,gBAAgB,CAAC;KAAG,iBAAiB,CAAC;IAAE;IAAG,eAAe;GAAK;GAC5E,8BAA8B;GAC9B,oBAAoB;IAAE,iBAAiB,CAAC;IAAG,kBAAkB,CAAC;GAAE;EAClE;EACA,YAAY;CACd;AACF;;;;;;;;;;AAkCA,eAAsB,eAAe,SAA2D;CAC9F,MAAM,WAAW,QAAQ,cAAc,QAAgB,OAAO;CAC9D,MAAM,mBAAmB,QAAQ,oBAAA;CACjC,MAAM,UAA6B,CAAC;CACpC,KAAK,MAAM,EAAE,KAAK,GAAG,iBAAiB,QAAQ,SAAS;EACrD,MAAM,WAAW,YAAY,OAAO,MACjC,UACC,MAAM,cAAc,QAAQ,cAC3B,MAAM,UAAU,aAAa,QAAQ,aAAa,SAAS,MAAM,KAAK,EAC3E;EACA,IAAI,CAAC,YAAY,QAAQ,qBAAqB,MAAM;EACpD,IAAI;GACF,MAAM,WAAY,MAAMA,mBAAAA,cAAc,KAAK,UAAU,OAAO;GAC5D,IAAI,CAAC,YAAY,UAAU,OAAO,GAAG,MAAM,IAAI,MAAM,qCAAqC;GAC1F,MAAM,WAAW,mBAAmB,SAAS,SAAS,YAAY,SAAS,QAAQ,UAAU;GAC7F,MAAM,UAAU,SAAS;GACzB,MAAM,QAAQ,eAAe,YAAY,YAAY;GACrD,QAAQ,KAAK;IACX;IACA,QACE,OAAO,YAAY,aACf;KACE,GAAG;KACH,UAAU,YACRC,mBAAAA,YACE,QAAQ,QAAQ,CAAC,CAAC,WAAW,QAAQ,KAAK,UAAU,OAAO,CAAC,GAC5D,kBACA,KACF;IACJ,IACA;GACR,CAAC;EACH,SAAS,OAAO;GACd,MAAM,UAAU,eAAe,YAAY,YAAY,oBAAoB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;GAClI,IAAI,UAAU,MAAM,IAAI,MAAM,SAAS,EAAE,OAAO,MAAM,CAAC;GACvD,QAAQ,WAAW,OAAO;EAC5B;CACF;CACA,OAAO,EAAE,QAAQ;AACnB"}

package/dist/src/server/mcpBundleLoader.d.mts

@@ -0,0 +1,46 @@
+import { DoomMcpPluginDefinition, DoomMcpUiResource } from "../schemas/mcpFacet.mjs";
+import { LiveImportGuard } from "./liveImport.mjs";
+import { DoomMcpBundleEntry } from "../schemas/mcpBundle.mjs";
+//#region src/server/mcpBundleLoader.d.ts
+/** The parts of an MCP declaration a live session host reads. */
+export type McpPluginDeclaration = Omit<DoomMcpBundleEntry, 'sha256'> & {
+  readonly sha256?: string;
+};
+export interface LoadedMcpPlugin {
+  readonly declaration: McpPluginDeclaration;
+  readonly plugin: DoomMcpPluginDefinition;
+}
+/** The served MCP App resource for composed package widget HTML. */
+export declare function mcpUiResource(html: string, sha256: string): DoomMcpUiResource;
+/** One live MCP plugin: its declaration plus the URL its package module imports from. */
+export interface LiveMcpPluginEntry extends McpPluginDeclaration {
+  /** Content-addressed import URL for `module`, see the po server's `packageUrl`. */
+  readonly url: string;
+}
+export interface LoadMcpPluginsOptions extends LiveImportGuard {
+  readonly entries: readonly LiveMcpPluginEntry[];
+  readonly majorMode: string;
+  readonly activeLayers: readonly string[];
+  readonly onNotice?: (message: string) => void;
+  /** Retain admitted candidates so a live session can follow selection changes. */
+  readonly retainCandidates?: boolean;
+  /** Composed package widget UI, served by tools whose package owns the widget. */
+  readonly uiResource?: DoomMcpUiResource;
+  /** Test seam; defaults to native `import()`. */
+  readonly importer?: (url: string) => Promise<unknown>;
+}
+export interface LoadedMcpPlugins {
+  readonly plugins: readonly LoadedMcpPlugin[];
+}
+/**
+ * Live reader: imports each package's built MCP entry from its content-addressed URL.
+ *
+ * Same eligibility rules as `loadMcpBundle`: an ineligible candidate is kept only with
+ * `retainCandidates`, and a failure is fatal only for an eligible plugin. Package widgets
+ * resolve to `uiResource`, which the po server builds per content key. Each import
+ * is bounded and poisoned on failure (see `guardedImport`), and each `session` factory call
+ * is bounded by `factoryTimeoutMs`.
+ */
+export declare function loadMcpPlugins(options: LoadMcpPluginsOptions): Promise<LoadedMcpPlugins>;
+//#endregion
+//# sourceMappingURL=mcpBundleLoader.d.mts.map

package/dist/src/server/mcpBundleLoader.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpBundleLoader.d.mts","names":[],"sources":["../../../src/server/mcpBundleLoader.ts"],"mappings":";;;;;YAIY,uBAAuB,KAAK;WAA2C;;iBAElE;WACN,aAAa;WACb,QAAQ;;;wBAmDH,cAAc,cAAc,iBAAiB;;iBAgB5C,2BAA2B;;WAEjC;;iBAGM,8BAA8B;WACpC,kBAAkB;WAClB;WACA;WACA,YAAY;;WAEZ;;WAEA,aAAa;;WAEb,YAAY,gBAAgB;;iBAGtB;WACN,kBAAkB;;;;;;;;;;;wBAYP,eAAe,SAAS,wBAAwB,QAAQ"}

package/dist/src/server/mcpBundleLoader.mjs

@@ -0,0 +1,107 @@
+import { guardedImport, withTimeout } from "./liveImport.mjs";
+//#region src/server/mcpBundleLoader.ts
+function isMcpPlugin(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const candidate = value;
+	return typeof candidate.name === "string" && (typeof candidate.session === "function" || typeof candidate.session === "object");
+}
+/** Points a package's widget-tagged tools at the composed UI resource and serves it with them. */
+function withPackageWidgets(original, widgets, ui) {
+	const allowedWidgets = new Set(widgets ?? []);
+	if (ui === void 0 || allowedWidgets.size === 0) return original;
+	return {
+		...original,
+		async session(context) {
+			const { tools: contributedTools, uiResources: contributedResources, ...rest } = typeof original.session === "function" ? await original.session(context) : original.session;
+			let usesWidget = false;
+			const tools = contributedTools?.map((tool) => {
+				const widget = tool._meta?.["po/widget"];
+				if (widget === void 0) return tool;
+				if (typeof widget !== "string" || !allowedWidgets.has(widget)) throw new Error(`MCP tool '${tool.name}' references a widget not owned by its package`);
+				usesWidget = true;
+				return {
+					...tool,
+					_meta: {
+						...tool._meta,
+						ui: {
+							...tool._meta?.ui,
+							resourceUri: ui.uri,
+							visibility: tool._meta?.ui?.visibility ?? ["model"]
+						},
+						"openai/outputTemplate": ui.uri
+					}
+				};
+			});
+			return {
+				...rest,
+				...tools === void 0 ? {} : { tools },
+				uiResources: [...contributedResources ?? [], ...usesWidget ? [ui] : []]
+			};
+		}
+	};
+}
+/** The served MCP App resource for composed package widget HTML. */
+function mcpUiResource(html, sha256) {
+	return {
+		uri: `ui://po/tools/${sha256}/index.html`,
+		name: "po-tool-widgets",
+		description: "Package-owned tool widgets composed by po.",
+		mimeType: "text/html;profile=mcp-app",
+		_meta: {
+			ui: {
+				csp: {
+					connectDomains: [],
+					resourceDomains: []
+				},
+				prefersBorder: true
+			},
+			"openai/widgetPrefersBorder": true,
+			"openai/widgetCSP": {
+				connect_domains: [],
+				resource_domains: []
+			}
+		},
+		read: () => html
+	};
+}
+/**
+* Live reader: imports each package's built MCP entry from its content-addressed URL.
+*
+* Same eligibility rules as `loadMcpBundle`: an ineligible candidate is kept only with
+* `retainCandidates`, and a failure is fatal only for an eligible plugin. Package widgets
+* resolve to `uiResource`, which the po server builds per content key. Each import
+* is bounded and poisoned on failure (see `guardedImport`), and each `session` factory call
+* is bounded by `factoryTimeoutMs`.
+*/
+async function loadMcpPlugins(options) {
+	const importer = options.importer ?? ((url) => import(url));
+	const factoryTimeoutMs = options.factoryTimeoutMs ?? 1e4;
+	const plugins = [];
+	for (const { url, ...declaration } of options.entries) {
+		const eligible = declaration.owners.some((owner) => owner.majorMode === options.majorMode && (owner.layer === "default" || options.activeLayers.includes(owner.layer)));
+		if (!eligible && options.retainCandidates !== true) continue;
+		try {
+			const imported = await guardedImport(url, importer, options);
+			if (!isMcpPlugin(imported?.default)) throw new Error("default export is not an MCP plugin");
+			const original = withPackageWidgets(imported.default, declaration.widgets, options.uiResource);
+			const session = original.session;
+			const label = `MCP plugin '${declaration.packageName}' session`;
+			plugins.push({
+				declaration,
+				plugin: typeof session === "function" ? {
+					...original,
+					session: (context) => withTimeout(Promise.resolve().then(() => session.call(original, context)), factoryTimeoutMs, label)
+				} : original
+			});
+		} catch (error) {
+			const message = `MCP plugin '${declaration.packageName}' could not load (${error instanceof Error ? error.message : String(error)})`;
+			if (eligible) throw new Error(message, { cause: error });
+			options.onNotice?.(message);
+		}
+	}
+	return { plugins };
+}
+//#endregion
+export { loadMcpPlugins, mcpUiResource };
+
+//# sourceMappingURL=mcpBundleLoader.mjs.map

package/dist/src/server/mcpBundleLoader.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpBundleLoader.mjs","names":[],"sources":["../../../src/server/mcpBundleLoader.ts"],"sourcesContent":["import type { DoomMcpBundleEntry } from '../schemas/mcpBundle';\nimport type { DoomMcpPluginDefinition, DoomMcpUiResource } from '../schemas/mcpFacet';\nimport { guardedImport, LIVE_FACTORY_TIMEOUT_MS, type LiveImportGuard, withTimeout } from './liveImport';\n/** The parts of an MCP declaration a live session host reads. */\nexport type McpPluginDeclaration = Omit<DoomMcpBundleEntry, 'sha256'> & { readonly sha256?: string };\n\nexport interface LoadedMcpPlugin {\n  readonly declaration: McpPluginDeclaration;\n  readonly plugin: DoomMcpPluginDefinition;\n}\n\nfunction isMcpPlugin(value: unknown): value is DoomMcpPluginDefinition {\n  if (typeof value !== 'object' || value === null) return false;\n  const candidate = value as Partial<DoomMcpPluginDefinition>;\n  return (\n    typeof candidate.name === 'string' &&\n    (typeof candidate.session === 'function' || typeof candidate.session === 'object')\n  );\n}\n\n/** Points a package's widget-tagged tools at the composed UI resource and serves it with them. */\nfunction withPackageWidgets(\n  original: DoomMcpPluginDefinition,\n  widgets: readonly string[] | undefined,\n  ui: DoomMcpUiResource | undefined,\n): DoomMcpPluginDefinition {\n  const allowedWidgets = new Set(widgets ?? []);\n  if (ui === undefined || allowedWidgets.size === 0) return original;\n  return {\n    ...original,\n    async session(context) {\n      const scope = typeof original.session === 'function' ? await original.session(context) : original.session;\n      const { tools: contributedTools, uiResources: contributedResources, ...rest } = scope;\n      let usesWidget = false;\n      const tools = contributedTools?.map((tool) => {\n        const widget = tool._meta?.['po/widget'];\n        if (widget === undefined) return tool;\n        if (typeof widget !== 'string' || !allowedWidgets.has(widget))\n          throw new Error(`MCP tool '${tool.name}' references a widget not owned by its package`);\n        usesWidget = true;\n        return {\n          ...tool,\n          _meta: {\n            ...tool._meta,\n            ui: { ...tool._meta?.ui, resourceUri: ui.uri, visibility: tool._meta?.ui?.visibility ?? ['model'] },\n            'openai/outputTemplate': ui.uri,\n          },\n        };\n      });\n      return {\n        ...rest,\n        ...(tools === undefined ? {} : { tools }),\n        uiResources: [...(contributedResources ?? []), ...(usesWidget ? [ui] : [])],\n      };\n    },\n  };\n}\n\n/** The served MCP App resource for composed package widget HTML. */\nexport function mcpUiResource(html: string, sha256: string): DoomMcpUiResource {\n  return {\n    uri: `ui://po/tools/${sha256}/index.html`,\n    name: 'po-tool-widgets',\n    description: 'Package-owned tool widgets composed by po.',\n    mimeType: 'text/html;profile=mcp-app',\n    _meta: {\n      ui: { csp: { connectDomains: [], resourceDomains: [] }, prefersBorder: true },\n      'openai/widgetPrefersBorder': true,\n      'openai/widgetCSP': { connect_domains: [], resource_domains: [] },\n    },\n    read: () => html,\n  };\n}\n\n/** One live MCP plugin: its declaration plus the URL its package module imports from. */\nexport interface LiveMcpPluginEntry extends McpPluginDeclaration {\n  /** Content-addressed import URL for `module`, see the po server's `packageUrl`. */\n  readonly url: string;\n}\n\nexport interface LoadMcpPluginsOptions extends LiveImportGuard {\n  readonly entries: readonly LiveMcpPluginEntry[];\n  readonly majorMode: string;\n  readonly activeLayers: readonly string[];\n  readonly onNotice?: (message: string) => void;\n  /** Retain admitted candidates so a live session can follow selection changes. */\n  readonly retainCandidates?: boolean;\n  /** Composed package widget UI, served by tools whose package owns the widget. */\n  readonly uiResource?: DoomMcpUiResource;\n  /** Test seam; defaults to native `import()`. */\n  readonly importer?: (url: string) => Promise<unknown>;\n}\n\nexport interface LoadedMcpPlugins {\n  readonly plugins: readonly LoadedMcpPlugin[];\n}\n\n/**\n * Live reader: imports each package's built MCP entry from its content-addressed URL.\n *\n * Same eligibility rules as `loadMcpBundle`: an ineligible candidate is kept only with\n * `retainCandidates`, and a failure is fatal only for an eligible plugin. Package widgets\n * resolve to `uiResource`, which the po server builds per content key. Each import\n * is bounded and poisoned on failure (see `guardedImport`), and each `session` factory call\n * is bounded by `factoryTimeoutMs`.\n */\nexport async function loadMcpPlugins(options: LoadMcpPluginsOptions): Promise<LoadedMcpPlugins> {\n  const importer = options.importer ?? ((url: string) => import(url));\n  const factoryTimeoutMs = options.factoryTimeoutMs ?? LIVE_FACTORY_TIMEOUT_MS;\n  const plugins: LoadedMcpPlugin[] = [];\n  for (const { url, ...declaration } of options.entries) {\n    const eligible = declaration.owners.some(\n      (owner) =>\n        owner.majorMode === options.majorMode &&\n        (owner.layer === 'default' || options.activeLayers.includes(owner.layer)),\n    );\n    if (!eligible && options.retainCandidates !== true) continue;\n    try {\n      const imported = (await guardedImport(url, importer, options)) as { default?: unknown } | undefined;\n      if (!isMcpPlugin(imported?.default)) throw new Error('default export is not an MCP plugin');\n      const original = withPackageWidgets(imported.default, declaration.widgets, options.uiResource);\n      const session = original.session;\n      const label = `MCP plugin '${declaration.packageName}' session`;\n      plugins.push({\n        declaration,\n        plugin:\n          typeof session === 'function'\n            ? {\n                ...original,\n                session: (context) =>\n                  withTimeout(\n                    Promise.resolve().then(() => session.call(original, context)),\n                    factoryTimeoutMs,\n                    label,\n                  ),\n              }\n            : original,\n      });\n    } catch (error) {\n      const message = `MCP plugin '${declaration.packageName}' could not load (${error instanceof Error ? error.message : String(error)})`;\n      if (eligible) throw new Error(message, { cause: error });\n      options.onNotice?.(message);\n    }\n  }\n  return { plugins };\n}\n"],"mappings":";;AAWA,SAAS,YAAY,OAAkD;CACrE,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,MAAM,YAAY;CAClB,OACE,OAAO,UAAU,SAAS,aACzB,OAAO,UAAU,YAAY,cAAc,OAAO,UAAU,YAAY;AAE7E;;AAGA,SAAS,mBACP,UACA,SACA,IACyB;CACzB,MAAM,iBAAiB,IAAI,IAAI,WAAW,CAAC,CAAC;CAC5C,IAAI,OAAO,KAAA,KAAa,eAAe,SAAS,GAAG,OAAO;CAC1D,OAAO;EACL,GAAG;EACH,MAAM,QAAQ,SAAS;GAErB,MAAM,EAAE,OAAO,kBAAkB,aAAa,sBAAsB,GAAG,SADzD,OAAO,SAAS,YAAY,aAAa,MAAM,SAAS,QAAQ,OAAO,IAAI,SAAS;GAElG,IAAI,aAAa;GACjB,MAAM,QAAQ,kBAAkB,KAAK,SAAS;IAC5C,MAAM,SAAS,KAAK,QAAQ;IAC5B,IAAI,WAAW,KAAA,GAAW,OAAO;IACjC,IAAI,OAAO,WAAW,YAAY,CAAC,eAAe,IAAI,MAAM,GAC1D,MAAM,IAAI,MAAM,aAAa,KAAK,KAAK,+CAA+C;IACxF,aAAa;IACb,OAAO;KACL,GAAG;KACH,OAAO;MACL,GAAG,KAAK;MACR,IAAI;OAAE,GAAG,KAAK,OAAO;OAAI,aAAa,GAAG;OAAK,YAAY,KAAK,OAAO,IAAI,cAAc,CAAC,OAAO;MAAE;MAClG,yBAAyB,GAAG;KAC9B;IACF;GACF,CAAC;GACD,OAAO;IACL,GAAG;IACH,GAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM;IACvC,aAAa,CAAC,GAAI,wBAAwB,CAAC,GAAI,GAAI,aAAa,CAAC,EAAE,IAAI,CAAC,CAAE;GAC5E;EACF;CACF;AACF;;AAGA,SAAgB,cAAc,MAAc,QAAmC;CAC7E,OAAO;EACL,KAAK,iBAAiB,OAAO;EAC7B,MAAM;EACN,aAAa;EACb,UAAU;EACV,OAAO;GACL,IAAI;IAAE,KAAK;KAAE,gBAAgB,CAAC;KAAG,iBAAiB,CAAC;IAAE;IAAG,eAAe;GAAK;GAC5E,8BAA8B;GAC9B,oBAAoB;IAAE,iBAAiB,CAAC;IAAG,kBAAkB,CAAC;GAAE;EAClE;EACA,YAAY;CACd;AACF;;;;;;;;;;AAkCA,eAAsB,eAAe,SAA2D;CAC9F,MAAM,WAAW,QAAQ,cAAc,QAAgB,OAAO;CAC9D,MAAM,mBAAmB,QAAQ,oBAAA;CACjC,MAAM,UAA6B,CAAC;CACpC,KAAK,MAAM,EAAE,KAAK,GAAG,iBAAiB,QAAQ,SAAS;EACrD,MAAM,WAAW,YAAY,OAAO,MACjC,UACC,MAAM,cAAc,QAAQ,cAC3B,MAAM,UAAU,aAAa,QAAQ,aAAa,SAAS,MAAM,KAAK,EAC3E;EACA,IAAI,CAAC,YAAY,QAAQ,qBAAqB,MAAM;EACpD,IAAI;GACF,MAAM,WAAY,MAAM,cAAc,KAAK,UAAU,OAAO;GAC5D,IAAI,CAAC,YAAY,UAAU,OAAO,GAAG,MAAM,IAAI,MAAM,qCAAqC;GAC1F,MAAM,WAAW,mBAAmB,SAAS,SAAS,YAAY,SAAS,QAAQ,UAAU;GAC7F,MAAM,UAAU,SAAS;GACzB,MAAM,QAAQ,eAAe,YAAY,YAAY;GACrD,QAAQ,KAAK;IACX;IACA,QACE,OAAO,YAAY,aACf;KACE,GAAG;KACH,UAAU,YACR,YACE,QAAQ,QAAQ,CAAC,CAAC,WAAW,QAAQ,KAAK,UAAU,OAAO,CAAC,GAC5D,kBACA,KACF;IACJ,IACA;GACR,CAAC;EACH,SAAS,OAAO;GACd,MAAM,UAAU,eAAe,YAAY,YAAY,oBAAoB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;GAClI,IAAI,UAAU,MAAM,IAAI,MAAM,SAAS,EAAE,OAAO,MAAM,CAAC;GACvD,QAAQ,WAAW,OAAO;EAC5B;CACF;CACA,OAAO,EAAE,QAAQ;AACnB"}

package/dist/src/server/nativeChildTranscriptReader.cjs

@@ -0,0 +1,20 @@
+const require_runtime = require("../../_virtual/_rolldown/runtime.cjs");
+const require_sqliteSessionStorage = require("../../sqliteSessionStorage.cjs");
+const require_index = require("../services/sqliteTranscriptReader/index.cjs");
+const require_nativeChildRuntimes = require("../systems/child/adapters/nativeChildRuntimes.cjs");
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path, 1);
+//#region src/server/nativeChildTranscriptReader.ts
+/** Dispatches an already-authorized child journal to its live runtime or completed read-only backend. */
+async function readNativeChildTranscript(file, request, signal) {
+	signal?.throwIfAborted();
+	if (node_path.default.extname(file) !== ".sqlite" || node_path.default.basename(node_path.default.dirname(file)) !== "durable-v1") throw new Error("Legacy child transcripts are unsupported by fresh durable storage");
+	const runtime = require_nativeChildRuntimes.nativeChildRuntime(file);
+	const page = runtime ? await runtime.readTranscriptPage(request, require_sqliteSessionStorage.DURABLE_BACKGROUND_CONTEXT) : await require_index.readSqliteTranscript(file, request, require_sqliteSessionStorage.DURABLE_BACKGROUND_CONTEXT);
+	signal?.throwIfAborted();
+	return page;
+}
+//#endregion
+exports.readNativeChildTranscript = readNativeChildTranscript;
+
+//# sourceMappingURL=nativeChildTranscriptReader.cjs.map

package/dist/src/server/nativeChildTranscriptReader.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"nativeChildTranscriptReader.cjs","names":["path","nativeChildRuntime","BACKGROUND_CONTEXT","readSqliteTranscript"],"sources":["../../../src/server/nativeChildTranscriptReader.ts"],"sourcesContent":["import path from 'node:path';\n\nimport type { TranscriptPage, TranscriptPageRequest } from '../exports/sessionProtocol';\nimport { DURABLE_BACKGROUND_CONTEXT as BACKGROUND_CONTEXT, DURABLE_DIRECTORY } from '../services/sqliteSessionStorage';\nimport { readSqliteTranscript } from '../services/sqliteTranscriptReader';\nimport { nativeChildRuntime } from '../systems/child/adapters/nativeChildRuntimes';\n\n/** Dispatches an already-authorized child journal to its live runtime or completed read-only backend. */\nexport async function readNativeChildTranscript(\n  file: string,\n  request: Omit<TranscriptPageRequest, 'threadId'>,\n  signal?: AbortSignal,\n): Promise<TranscriptPage> {\n  signal?.throwIfAborted();\n  if (path.extname(file) !== '.sqlite' || path.basename(path.dirname(file)) !== DURABLE_DIRECTORY)\n    throw new Error('Legacy child transcripts are unsupported by fresh durable storage');\n  const runtime = nativeChildRuntime(file);\n  const page = runtime\n    ? await runtime.readTranscriptPage(request, BACKGROUND_CONTEXT)\n    : await readSqliteTranscript(file, request, BACKGROUND_CONTEXT);\n  signal?.throwIfAborted();\n  return page;\n}\n"],"mappings":";;;;;;;;AAQA,eAAsB,0BACpB,MACA,SACA,QACyB;CACzB,QAAQ,eAAe;CACvB,IAAIA,UAAAA,QAAK,QAAQ,IAAI,MAAM,aAAaA,UAAAA,QAAK,SAASA,UAAAA,QAAK,QAAQ,IAAI,CAAC,MAAA,cACtE,MAAM,IAAI,MAAM,mEAAmE;CACrF,MAAM,UAAUC,4BAAAA,mBAAmB,IAAI;CACvC,MAAM,OAAO,UACT,MAAM,QAAQ,mBAAmB,SAASC,6BAAAA,0BAAkB,IAC5D,MAAMC,cAAAA,qBAAqB,MAAM,SAASD,6BAAAA,0BAAkB;CAChE,QAAQ,eAAe;CACvB,OAAO;AACT"}

package/dist/src/server/nativeChildTranscriptReader.mjs

@@ -0,0 +1,18 @@
+import { DURABLE_BACKGROUND_CONTEXT } from "../../sqliteSessionStorage.mjs";
+import { readSqliteTranscript } from "../services/sqliteTranscriptReader/index.mjs";
+import { nativeChildRuntime } from "../systems/child/adapters/nativeChildRuntimes.mjs";
+import path from "node:path";
+//#region src/server/nativeChildTranscriptReader.ts
+/** Dispatches an already-authorized child journal to its live runtime or completed read-only backend. */
+async function readNativeChildTranscript(file, request, signal) {
+	signal?.throwIfAborted();
+	if (path.extname(file) !== ".sqlite" || path.basename(path.dirname(file)) !== "durable-v1") throw new Error("Legacy child transcripts are unsupported by fresh durable storage");
+	const runtime = nativeChildRuntime(file);
+	const page = runtime ? await runtime.readTranscriptPage(request, DURABLE_BACKGROUND_CONTEXT) : await readSqliteTranscript(file, request, DURABLE_BACKGROUND_CONTEXT);
+	signal?.throwIfAborted();
+	return page;
+}
+//#endregion
+export { readNativeChildTranscript };
+
+//# sourceMappingURL=nativeChildTranscriptReader.mjs.map

package/dist/src/server/nativeChildTranscriptReader.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"nativeChildTranscriptReader.mjs","names":["BACKGROUND_CONTEXT"],"sources":["../../../src/server/nativeChildTranscriptReader.ts"],"sourcesContent":["import path from 'node:path';\n\nimport type { TranscriptPage, TranscriptPageRequest } from '../exports/sessionProtocol';\nimport { DURABLE_BACKGROUND_CONTEXT as BACKGROUND_CONTEXT, DURABLE_DIRECTORY } from '../services/sqliteSessionStorage';\nimport { readSqliteTranscript } from '../services/sqliteTranscriptReader';\nimport { nativeChildRuntime } from '../systems/child/adapters/nativeChildRuntimes';\n\n/** Dispatches an already-authorized child journal to its live runtime or completed read-only backend. */\nexport async function readNativeChildTranscript(\n  file: string,\n  request: Omit<TranscriptPageRequest, 'threadId'>,\n  signal?: AbortSignal,\n): Promise<TranscriptPage> {\n  signal?.throwIfAborted();\n  if (path.extname(file) !== '.sqlite' || path.basename(path.dirname(file)) !== DURABLE_DIRECTORY)\n    throw new Error('Legacy child transcripts are unsupported by fresh durable storage');\n  const runtime = nativeChildRuntime(file);\n  const page = runtime\n    ? await runtime.readTranscriptPage(request, BACKGROUND_CONTEXT)\n    : await readSqliteTranscript(file, request, BACKGROUND_CONTEXT);\n  signal?.throwIfAborted();\n  return page;\n}\n"],"mappings":";;;;;;AAQA,eAAsB,0BACpB,MACA,SACA,QACyB;CACzB,QAAQ,eAAe;CACvB,IAAI,KAAK,QAAQ,IAAI,MAAM,aAAa,KAAK,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAA,cACtE,MAAM,IAAI,MAAM,mEAAmE;CACrF,MAAM,UAAU,mBAAmB,IAAI;CACvC,MAAM,OAAO,UACT,MAAM,QAAQ,mBAAmB,SAASA,0BAAkB,IAC5D,MAAM,qBAAqB,MAAM,SAASA,0BAAkB;CAChE,QAAQ,eAAe;CACvB,OAAO;AACT"}