@animalabs/agent-framework 0.11.0 → 0.13.0

package/dist/src/mcpl/push-handler.js

@@ -6,6 +6,7 @@
  *
  * Spec reference: Section 9 (Push Events).
  */
+import { INLINE_WITHHELD_TEXT, isInlineContradiction, referenceStubOrNull } from './references.js';
 import { McplFeatureSetError } from './feature-set-manager.js';
 import { expandCoreTags } from './tags.js';
 // ============================================================================
@@ -15,11 +16,21 @@ import { expandCoreTags } from './tags.js';
  * Convert a single MCPL wire-format content block to a membrane ContentBlock.
  * Same logic as hook-orchestrator.ts.
  */
-function convertBlock(block) {
+export function convertBlock(block) {
     switch (block.type) {
         case 'text':
             return { type: 'text', text: block.text };
         case 'image':
+            if (isInlineContradiction(block)) {
+                // RFC-005 vector 2: inline data claiming bulk disposition — fail
+                // closed, withhold the data (checked BEFORE the data branch).
+                return { type: 'text', text: INLINE_WITHHELD_TEXT };
+            }
+            if (block.uri && block.disposition) {
+                // RFC-005 uri-form media with a disposition claim: stub, do not
+                // hand the URI to the provider or inline it.
+                return { type: 'text', text: referenceStubOrNull(block, 'attachment on push event') ?? '[reference]' };
+            }
             if (block.data && block.mimeType) {
                 return {
                     type: 'image',
@@ -34,6 +45,16 @@ function convertBlock(block) {
             }
             return { type: 'text', text: '[Image: no data]' };
         case 'audio':
+            if (isInlineContradiction(block)) {
+                // RFC-005 vector 2: inline data claiming bulk disposition — fail
+                // closed, withhold the data (checked BEFORE the data branch).
+                return { type: 'text', text: INLINE_WITHHELD_TEXT };
+            }
+            if (block.uri && block.disposition) {
+                // RFC-005 uri-form media with a disposition claim: stub, do not
+                // hand the URI to the provider or inline it.
+                return { type: 'text', text: referenceStubOrNull(block, 'attachment on push event') ?? '[reference]' };
+            }
             if (block.data && block.mimeType) {
                 return {
                     type: 'audio',
@@ -42,7 +63,13 @@ function convertBlock(block) {
             }
             return { type: 'text', text: '[Audio: no data]' };
         case 'resource':
-            return { type: 'text', text: `[Resource: ${block.uri}]` };
+            // RFC-005: reference blocks become bounded stubs — never raw URIs
+            // (a signed URL is a bearer credential that looks like a location).
+            return { type: 'text', text: referenceStubOrNull(block, 'attachment on push event') ?? '[reference]' };
+        default:
+            // Unknown wire block types previously fell off the exhaustive switch
+            // and propagated `undefined` into ContentBlock[]. Fail visibly.
+            return { type: 'text', text: `[unrecognized content block: ${block.type ?? 'untyped'}]` };
     }
 }
 // ============================================================================

package/dist/src/mcpl/push-handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"push-handler.js","sourceRoot":"","sources":["../../../src/mcpl/push-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AA2B3C,+EAA+E;AAC/E,+DAA+D;AAC/D,+EAA+E;AAE/E;;;GAGG;AACH,SAAS,YAAY,CAAC,KAAuB;IAC3C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAE5C,KAAK,OAAO;YACV,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACjC,OAAO;oBACL,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE;iBACxD,CAAC;YACpB,CAAC;YACD,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;gBACd,OAAO;oBACL,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE;iBACxB,CAAC;YACpB,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;QAEpD,KAAK,OAAO;YACV,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACjC,OAAO;oBACL,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE;iBACxD,CAAC;YACpB,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;QAEpD,KAAK,UAAU;YACb,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,QAAQ;IACJ,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IACf,OAAO,CAAS;IAEjC,YAAY,UAAkB,IAAI;QAChC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,GAAW;QACrB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAYD,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E,MAAM,OAAO,WAAW;IACd,iBAAiB,CAAoB;IACrC,WAAW,CAAiC;IAC5C,WAAW,CAA4D;IACvE,sBAAsB,CAAmE;IACzF,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEnC,YACE,iBAAoC,EACpC,WAA2C,EAC3C,WAAsE,EACtE,sBAAwF;QAExF,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC3C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;IACvD,CAAC;IAED;;;;;;;;;;OAUG;IACH,eAAe,CACb,QAAgB,EAChB,MAAuB,EACvB,SAAqB;QAErB,qEAAqE;QACrE,wEAAwE;QACxE,mEAAmE;QACnE,sEAAsE;QACtE,mCAAmC;QACnC,IAAI,MAAM,CAAC,IAAI;YAAE,MAAM,CAAC,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3D,+DAA+D;QAC/D,oEAAoE;QACpE,sEAAsE;QACtE,sEAAsE;QACtE,uEAAuE;QACvE,sBAAsB;QACtB,IAAI,CAAC;YACH,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,mBAAmB;gBAC/C,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,+BAA+B,CAAC;YACpC,mEAAmE;YACnE,6DAA6D;YAC7D,OAAO,CAAC,KAAK,CAAC,gCAAgC,QAAQ,YAAY,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,CAAC,CAAC;YACrG,IAAI,GAAG,YAAY,mBAAmB,IAAI,SAAS,EAAE,YAAY,EAAE,CAAC;gBAClE,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YAC3E,CAAC;iBAAM,CAAC;gBACN,SAAS,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAClD,CAAC;YACD,OAAO;QACT,CAAC;QAED,4BAA4B;QAC5B,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,KAAK,CAAC,gCAAgC,QAAQ,YAAY,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;YACrG,SAAS,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,4BAA4B;QAC5B,MAAM,OAAO,GAAmB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAEzE,2CAA2C;QAC3C,IAAI,gBAAgB,GAAG,IAAI,CAAC;QAC5B,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAChC,MAAM,WAAW,GAAG,OAAO;iBACxB,MAAM,CAAC,CAAC,CAAC,EAAwC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;iBACtE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAClB,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,QAAQ,GAA4B;gBACxC,QAAQ;gBACR,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,SAAS,EAAE,iBAAiB;gBAC5B,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;gBACxB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9C,CAAC;YACF,gBAAgB,GAAG,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACxE,CAAC;QAED,0BAA0B;QAC1B,MAAM,WAAW,GAAG,GAAG,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAE3F,yBAAyB;QACzB,MAAM,SAAS,GAAkB;YAC/B,IAAI,EAAE,iBAAiB;YACvB,QAAQ;YACR,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO;YACP,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW;YACX,gBAAgB;SACjB,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAE5B,gBAAgB;QAChB,IAAI,CAAC,WAAW,CAAC;YACf,IAAI,EAAE,iBAAiB;YACvB,QAAQ;YACR,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;QAEH,aAAa;QACb,SAAS,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACtD,CAAC;CACF"}
+{"version":3,"file":"push-handler.js","sourceRoot":"","sources":["../../../src/mcpl/push-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAQnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AA2B3C,+EAA+E;AAC/E,+DAA+D;AAC/D,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAuB;IAClD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAE5C,KAAK,OAAO;YACV,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,iEAAiE;gBACjE,8DAA8D;gBAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;YACtD,CAAC;YACD,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACnC,gEAAgE;gBAChE,6CAA6C;gBAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,CAAC,KAAK,EAAE,0BAA0B,CAAC,IAAI,aAAa,EAAE,CAAC;YACzG,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACjC,OAAO;oBACL,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE;iBACxD,CAAC;YACpB,CAAC;YACD,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;gBACd,OAAO;oBACL,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE;iBACxB,CAAC;YACpB,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;QAEpD,KAAK,OAAO;YACV,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,iEAAiE;gBACjE,8DAA8D;gBAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;YACtD,CAAC;YACD,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACnC,gEAAgE;gBAChE,6CAA6C;gBAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,CAAC,KAAK,EAAE,0BAA0B,CAAC,IAAI,aAAa,EAAE,CAAC;YACzG,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACjC,OAAO;oBACL,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE;iBACxD,CAAC;YACpB,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;QAEpD,KAAK,UAAU;YACb,kEAAkE;YAClE,oEAAoE;YACpE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,CAAC,KAAK,EAAE,0BAA0B,CAAC,IAAI,aAAa,EAAE,CAAC;QAEzG;YACE,qEAAqE;YACrE,gEAAgE;YAChE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gCAAiC,KAA2B,CAAC,IAAI,IAAI,SAAS,GAAG,EAAE,CAAC;IACrH,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,QAAQ;IACJ,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IACf,OAAO,CAAS;IAEjC,YAAY,UAAkB,IAAI;QAChC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,GAAW;QACrB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAYD,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E,MAAM,OAAO,WAAW;IACd,iBAAiB,CAAoB;IACrC,WAAW,CAAiC;IAC5C,WAAW,CAA4D;IACvE,sBAAsB,CAAmE;IACzF,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEnC,YACE,iBAAoC,EACpC,WAA2C,EAC3C,WAAsE,EACtE,sBAAwF;QAExF,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC3C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;IACvD,CAAC;IAED;;;;;;;;;;OAUG;IACH,eAAe,CACb,QAAgB,EAChB,MAAuB,EACvB,SAAqB;QAErB,qEAAqE;QACrE,wEAAwE;QACxE,mEAAmE;QACnE,sEAAsE;QACtE,mCAAmC;QACnC,IAAI,MAAM,CAAC,IAAI;YAAE,MAAM,CAAC,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3D,+DAA+D;QAC/D,oEAAoE;QACpE,sEAAsE;QACtE,sEAAsE;QACtE,uEAAuE;QACvE,sBAAsB;QACtB,IAAI,CAAC;YACH,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,mBAAmB;gBAC/C,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,+BAA+B,CAAC;YACpC,mEAAmE;YACnE,6DAA6D;YAC7D,OAAO,CAAC,KAAK,CAAC,gCAAgC,QAAQ,YAAY,MAAM,CAAC,OAAO,WAAW,MAAM,EAAE,CAAC,CAAC;YACrG,IAAI,GAAG,YAAY,mBAAmB,IAAI,SAAS,EAAE,YAAY,EAAE,CAAC;gBAClE,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YAC3E,CAAC;iBAAM,CAAC;gBACN,SAAS,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAClD,CAAC;YACD,OAAO;QACT,CAAC;QAED,4BAA4B;QAC5B,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,KAAK,CAAC,gCAAgC,QAAQ,YAAY,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;YACrG,SAAS,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,4BAA4B;QAC5B,MAAM,OAAO,GAAmB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAEzE,2CAA2C;QAC3C,IAAI,gBAAgB,GAAG,IAAI,CAAC;QAC5B,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAChC,MAAM,WAAW,GAAG,OAAO;iBACxB,MAAM,CAAC,CAAC,CAAC,EAAwC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;iBACtE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAClB,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,QAAQ,GAA4B;gBACxC,QAAQ;gBACR,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,SAAS,EAAE,iBAAiB;gBAC5B,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;gBACxB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9C,CAAC;YACF,gBAAgB,GAAG,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACxE,CAAC;QAED,0BAA0B;QAC1B,MAAM,WAAW,GAAG,GAAG,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAE3F,yBAAyB;QACzB,MAAM,SAAS,GAAkB;YAC/B,IAAI,EAAE,iBAAiB;YACvB,QAAQ;YACR,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO;YACP,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW;YACX,gBAAgB;SACjB,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAE5B,gBAAgB;QAChB,IAAI,CAAC,WAAW,CAAC;YACf,IAAI,EAAE,iBAAiB;YACvB,QAAQ;YACR,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;QAEH,aAAa;QACb,SAAS,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACtD,CAAC;CACF"}

package/dist/src/mcpl/reference-fetcher.d.ts

@@ -0,0 +1,59 @@
+import type { ReferenceRecord } from './references.js';
+/** Per-fetch hard ceiling on actual bytes (overridable per server / call). */
+export declare const DEFAULT_FETCH_MAX_BYTES: number;
+/** Eager (autofetch) threshold: at most what could have shipped inline. */
+export declare const DEFAULT_EAGER_FETCH_MAX_BYTES: number;
+/** Cumulative per-server budget for this process. */
+export declare const DEFAULT_MAX_TOTAL_BYTES: number;
+declare const EAGER_FETCH_TIMEOUT_MS = 10000;
+export interface ResolvedServerBinding {
+    /** The url the connection was dialed to (ws/wss/http/https). */
+    url: string;
+    /** Connection credential, applied host-side as Authorization: Bearer. */
+    token?: string;
+    autofetch?: {
+        maxBytes?: number;
+        maxTotalBytes?: number;
+    };
+}
+export interface FetchOutcome {
+    ok: boolean;
+    /** Mount-prefixed workspace path of the saved payload (on success). */
+    path?: string;
+    bytes?: number;
+    mimeType?: string;
+    digestVerified?: boolean;
+    error?: string;
+}
+/** Magic-byte sniff for the formats this pipeline actually moves. The
+ *  header is testimony too (vector 13): sniffed type wins for the storage
+ *  extension and the record's verified type; header, then testimony, are
+ *  fallbacks for containers the sniffer doesn't know. */
+export declare function sniffMime(data: Buffer): string | null;
+/** ws→http / wss→https with default ports elided, for origin comparison. */
+export declare function normalizedOrigin(url: string): string | null;
+export declare class ReferenceFetcher {
+    private readonly resolveServer;
+    /** Persist the payload; returns a mount-prefixed path or null when no
+     *  writable workspace exists. File name is host-generated (§7.3). */
+    private readonly saveFile;
+    private totals;
+    private inFlight;
+    constructor(resolveServer: (serverId: string) => ResolvedServerBinding | undefined, 
+    /** Persist the payload; returns a mount-prefixed path or null when no
+     *  writable workspace exists. File name is host-generated (§7.3). */
+    saveFile: (fileName: string, data: Buffer, mimeType: string) => Promise<string | null>);
+    /** Would the eager (autofetch) default fetch this record? */
+    isEagerEligible(record: ReferenceRecord): boolean;
+    /** §6.1/§7.1 policy check; returns a refusal reason or null. */
+    private originCheck;
+    /** Fetch a reference to workspace storage. Idempotent per record; concurrent
+     *  callers share one in-flight fetch. */
+    fetch(record: ReferenceRecord, opts?: {
+        maxBytes?: number;
+        timeoutMs?: number;
+    }): Promise<FetchOutcome>;
+    private doFetch;
+}
+export { EAGER_FETCH_TIMEOUT_MS };
+//# sourceMappingURL=reference-fetcher.d.ts.map

package/dist/src/mcpl/reference-fetcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reference-fetcher.d.ts","sourceRoot":"","sources":["../../../src/mcpl/reference-fetcher.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGvD,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,QAAoB,CAAC;AACzD,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,QAAa,CAAC;AACxD,qDAAqD;AACrD,eAAO,MAAM,uBAAuB,QAAqB,CAAC;AAE1D,QAAA,MAAM,sBAAsB,QAAS,CAAC;AAEtC,MAAM,WAAW,qBAAqB;IACpC,gEAAgE;IAChE,GAAG,EAAE,MAAM,CAAC;IACZ,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3D;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,uEAAuE;IACvE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;yDAGyD;AACzD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAerD;AAUD,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAU3D;AAED,qBAAa,gBAAgB;IAKzB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B;yEACqE;IACrE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAP3B,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,QAAQ,CAA4C;gBAGzC,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,qBAAqB,GAAG,SAAS;IACvF;yEACqE;IACpD,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAGzG,6DAA6D;IAC7D,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO;IAUjD,gEAAgE;IAChE,OAAO,CAAC,WAAW;IAgBnB;6CACyC;IACzC,KAAK,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;YAYzF,OAAO;CAkFtB;AAED,OAAO,EAAE,sBAAsB,EAAE,CAAC"}

package/dist/src/mcpl/reference-fetcher.js

@@ -0,0 +1,240 @@
+/**
+ * RFC-005 host-mediated reference fetcher (§6, §7) — the only code that ever
+ * dereferences a reference, and it fails closed on every axis the RFC names:
+ *
+ *  - **origin binding (§6.1, revision 3):** authenticated fetches go only to
+ *    the origin the reference's server connection was dialed to. This v1 does
+ *    not fetch third-party origins at all (deferred with declared reference
+ *    origins); the connection credential is applied as an Authorization
+ *    header by this code alone and never surfaces to model, script, or URI.
+ *  - **scheme allowlist (§7.1, vector 11):** https; http only when the dialed
+ *    origin itself is plaintext (a ws:// server references its own origin).
+ *  - **no redirect traversal (§7.2, vector 12):** any 3xx refuses.
+ *  - **actual-byte ceiling (§7.3 list, vector 10):** streamed with abort the
+ *    moment real octets exceed the ceiling, regardless of claimed sizeBytes.
+ *    A claim already over the ceiling refuses without dialing (vector 4).
+ *  - **digest verification (§7.4 list, vector 5):** sha256 computed while
+ *    streaming; a mismatch is discarded, never presented.
+ *  - **expiry (§7.4, vector 16):** expired testimony refuses locally.
+ *  - **storage naming (§7.3):** the file name is host-generated from the
+ *    reference id + verified type; the server's `name` is display-only.
+ *
+ * Autofetch policy (host default, not protocol): eager only below
+ * DEFAULT_EAGER_FETCH_MAX_BYTES from the connection origin — anything under
+ * that threshold the server could legitimately have inlined, so eager
+ * materialization is never worse than the status quo. Everything larger is
+ * fetched on demand (the fetch_reference tool, or the code-execution result
+ * hook, where a script receiving a result is the strongest available signal
+ * that the bytes are wanted). Per-server budgets cap cumulative appetite.
+ */
+import { createHash } from 'node:crypto';
+import { isReferenceExpired } from './references.js';
+/** Per-fetch hard ceiling on actual bytes (overridable per server / call). */
+export const DEFAULT_FETCH_MAX_BYTES = 256 * 1024 * 1024;
+/** Eager (autofetch) threshold: at most what could have shipped inline. */
+export const DEFAULT_EAGER_FETCH_MAX_BYTES = 256 * 1024;
+/** Cumulative per-server budget for this process. */
+export const DEFAULT_MAX_TOTAL_BYTES = 1024 * 1024 * 1024;
+const FETCH_TIMEOUT_MS = 60_000;
+const EAGER_FETCH_TIMEOUT_MS = 10_000;
+/** Magic-byte sniff for the formats this pipeline actually moves. The
+ *  header is testimony too (vector 13): sniffed type wins for the storage
+ *  extension and the record's verified type; header, then testimony, are
+ *  fallbacks for containers the sniffer doesn't know. */
+export function sniffMime(data) {
+    if (data.length < 12)
+        return null;
+    if (data.subarray(0, 4).toString('latin1') === 'RIFF' && data.subarray(8, 12).toString('latin1') === 'WAVE')
+        return 'audio/wav';
+    if (data.subarray(0, 4).toString('latin1') === 'RIFF')
+        return 'audio/wav';
+    if (data.subarray(0, 4).toString('latin1') === 'fLaC')
+        return 'audio/flac';
+    if (data.subarray(0, 4).toString('latin1') === 'OggS')
+        return 'audio/ogg';
+    if (data.subarray(0, 4).toString('latin1') === 'MThd')
+        return 'audio/midi';
+    if (data.subarray(0, 3).toString('latin1') === 'ID3' || (data[0] === 0xff && (data[1] & 0xe0) === 0xe0))
+        return 'audio/mpeg';
+    if (data[0] === 0x89 && data.subarray(1, 4).toString('latin1') === 'PNG')
+        return 'image/png';
+    if (data[0] === 0xff && data[1] === 0xd8 && data[2] === 0xff)
+        return 'image/jpeg';
+    if (data.subarray(0, 6).toString('latin1') === 'GIF87a' || data.subarray(0, 6).toString('latin1') === 'GIF89a')
+        return 'image/gif';
+    if (data.subarray(4, 8).toString('latin1') === 'ftyp')
+        return 'video/mp4';
+    if (data.subarray(0, 5).toString('latin1') === '%PDF-')
+        return 'application/pdf';
+    if (data[0] === 0x50 && data[1] === 0x4b)
+        return 'application/zip';
+    return null;
+}
+const EXT_BY_MIME = {
+    'audio/wav': 'wav', 'audio/x-wav': 'wav', 'audio/mpeg': 'mp3', 'audio/mp4': 'm4a',
+    'audio/flac': 'flac', 'audio/midi': 'mid', 'audio/ogg': 'ogg',
+    'image/png': 'png', 'image/jpeg': 'jpg', 'image/gif': 'gif', 'image/webp': 'webp',
+    'video/mp4': 'mp4', 'application/json': 'json', 'text/plain': 'txt',
+    'application/pdf': 'pdf', 'application/zip': 'zip',
+};
+/** ws→http / wss→https with default ports elided, for origin comparison. */
+export function normalizedOrigin(url) {
+    try {
+        const u = new URL(url);
+        const scheme = u.protocol === 'ws:' ? 'http:' : u.protocol === 'wss:' ? 'https:' : u.protocol;
+        const defaultPort = scheme === 'https:' ? '443' : '80';
+        const port = u.port === '' || u.port === defaultPort ? '' : `:${u.port}`;
+        return `${scheme}//${u.hostname.toLowerCase()}${port}`;
+    }
+    catch {
+        return null;
+    }
+}
+export class ReferenceFetcher {
+    resolveServer;
+    saveFile;
+    totals = new Map();
+    inFlight = new Map();
+    constructor(resolveServer, 
+    /** Persist the payload; returns a mount-prefixed path or null when no
+     *  writable workspace exists. File name is host-generated (§7.3). */
+    saveFile) {
+        this.resolveServer = resolveServer;
+        this.saveFile = saveFile;
+    }
+    /** Would the eager (autofetch) default fetch this record? */
+    isEagerEligible(record) {
+        if (record.fetchedPath)
+            return false;
+        if (record.serverId === undefined)
+            return false;
+        const binding = this.resolveServer(record.serverId);
+        if (!binding)
+            return false;
+        const cap = binding.autofetch?.maxBytes ?? DEFAULT_EAGER_FETCH_MAX_BYTES;
+        if (record.testimony.sizeBytes === undefined || record.testimony.sizeBytes > cap)
+            return false;
+        return this.originCheck(record, binding) === null;
+    }
+    /** §6.1/§7.1 policy check; returns a refusal reason or null. */
+    originCheck(record, binding) {
+        const refOrigin = normalizedOrigin(record.testimony.uri);
+        const dialedOrigin = normalizedOrigin(binding.url);
+        if (!refOrigin)
+            return 'reference uri does not parse';
+        if (!dialedOrigin)
+            return 'server url does not parse';
+        const scheme = refOrigin.split('//')[0];
+        if (scheme !== 'https:' && scheme !== 'http:')
+            return `scheme not allowed: ${scheme}`;
+        if (refOrigin !== dialedOrigin) {
+            return `third-party origin (${refOrigin} != dialed ${dialedOrigin}); not fetched by this host`;
+        }
+        if (scheme === 'http:' && dialedOrigin.startsWith('https:')) {
+            return 'plaintext reference from a secure origin';
+        }
+        return null;
+    }
+    /** Fetch a reference to workspace storage. Idempotent per record; concurrent
+     *  callers share one in-flight fetch. */
+    fetch(record, opts) {
+        if (record.fetchedPath) {
+            return Promise.resolve({ ok: true, path: record.fetchedPath, bytes: record.verifiedBytes,
+                mimeType: record.verifiedMimeType, digestVerified: record.digestVerified });
+        }
+        const existing = this.inFlight.get(record.refId);
+        if (existing)
+            return existing;
+        const p = this.doFetch(record, opts).finally(() => this.inFlight.delete(record.refId));
+        this.inFlight.set(record.refId, p);
+        return p;
+    }
+    async doFetch(record, opts) {
+        const t = record.testimony;
+        if (record.serverId === undefined)
+            return { ok: false, error: 'reference has no server binding' };
+        const binding = this.resolveServer(record.serverId);
+        if (!binding)
+            return { ok: false, error: `unknown server: ${record.serverId}` };
+        const refusal = this.originCheck(record, binding);
+        if (refusal)
+            return { ok: false, error: refusal };
+        if (isReferenceExpired(t))
+            return { ok: false, error: 'reference expired (or unparseable expiry — fail closed)' };
+        const ceiling = opts?.maxBytes ?? DEFAULT_FETCH_MAX_BYTES;
+        // Vector 4: a claim already over the ceiling refuses without dialing.
+        if (t.sizeBytes !== undefined && t.sizeBytes > ceiling) {
+            return { ok: false, error: `claimed ${t.sizeBytes} bytes exceeds fetch ceiling ${ceiling}` };
+        }
+        const budget = binding.autofetch?.maxTotalBytes ?? DEFAULT_MAX_TOTAL_BYTES;
+        const used = this.totals.get(record.serverId) ?? 0;
+        if (used >= budget) {
+            return { ok: false, error: `per-server fetch budget exhausted (${used}/${budget} bytes)` };
+        }
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), opts?.timeoutMs ?? FETCH_TIMEOUT_MS);
+        try {
+            const headers = {};
+            if (binding.token)
+                headers.authorization = `Bearer ${binding.token}`;
+            const resp = await fetch(t.uri, { headers, redirect: 'manual', signal: controller.signal });
+            if (resp.status >= 300 && resp.status < 400) {
+                return { ok: false, error: `redirect refused (HTTP ${resp.status}) — no redirect traversal` };
+            }
+            if (!resp.ok)
+                return { ok: false, error: `HTTP ${resp.status}` };
+            if (!resp.body)
+                return { ok: false, error: 'no response body' };
+            const hash = createHash('sha256');
+            const chunks = [];
+            let received = 0;
+            const reader = resp.body.getReader();
+            for (;;) {
+                const { done, value } = await reader.read();
+                if (done)
+                    break;
+                received += value.byteLength;
+                if (received > ceiling || received > budget - used) {
+                    controller.abort();
+                    const which = received > ceiling ? 'ceiling' : 'per-server budget';
+                    return { ok: false, error: `aborted: actual bytes exceeded ${which} at ${received}` };
+                }
+                const buf = Buffer.from(value);
+                hash.update(buf);
+                chunks.push(buf);
+            }
+            const data = Buffer.concat(chunks);
+            let digestVerified;
+            if (t.digest) {
+                const got = 'sha256:' + hash.digest('base64url');
+                if (got !== t.digest) {
+                    // Vector 5: never presented as the described content.
+                    return { ok: false, error: `digest mismatch (claimed ${t.digest.slice(0, 20)}…, got ${got.slice(0, 20)}…)` };
+                }
+                digestVerified = true;
+            }
+            const headerMime = resp.headers.get('content-type')?.split(';')[0].trim() || null;
+            const observedMime = sniffMime(data) ?? headerMime ?? t.mimeType ?? 'application/octet-stream';
+            const ext = EXT_BY_MIME[observedMime] ?? EXT_BY_MIME[headerMime ?? ''] ?? EXT_BY_MIME[t.mimeType ?? ''] ?? 'bin';
+            // §7.3: host-generated storage name; the server's `name` is display-only.
+            const path = await this.saveFile(`${record.refId}.${ext}`, data, observedMime);
+            if (path === null)
+                return { ok: false, error: 'no writable workspace mount to store the payload' };
+            this.totals.set(record.serverId, used + data.length);
+            record.fetchedPath = path;
+            record.verifiedBytes = data.length;
+            record.verifiedMimeType = observedMime;
+            record.digestVerified = digestVerified;
+            return { ok: true, path, bytes: data.length, mimeType: observedMime, digestVerified };
+        }
+        catch (e) {
+            const msg = e.name === 'AbortError' ? 'fetch timed out or aborted' : e.message;
+            return { ok: false, error: msg };
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+}
+export { EAGER_FETCH_TIMEOUT_MS };
+//# sourceMappingURL=reference-fetcher.js.map

package/dist/src/mcpl/reference-fetcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reference-fetcher.js","sourceRoot":"","sources":["../../../src/mcpl/reference-fetcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACzD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,GAAG,IAAI,CAAC;AACxD,qDAAqD;AACrD,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1D,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAoBtC;;;yDAGyD;AACzD,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM;QAAE,OAAO,WAAW,CAAC;IAChI,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM;QAAE,OAAO,WAAW,CAAC;IAC1E,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC;IAC3E,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM;QAAE,OAAO,WAAW,CAAC;IAC1E,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC;IAC3E,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC;IAC7H,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK;QAAE,OAAO,WAAW,CAAC;IAC7F,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,YAAY,CAAC;IAClF,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC;IACnI,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM;QAAE,OAAO,WAAW,CAAC;IAC1E,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,OAAO;QAAE,OAAO,iBAAiB,CAAC;IACjF,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,iBAAiB,CAAC;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,WAAW,GAA2B;IAC1C,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK;IACjF,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK;IAC7D,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM;IACjF,WAAW,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK;IACnE,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK;CACnD,CAAC;AAEF,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC9F,MAAM,WAAW,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACvD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACzE,OAAO,GAAG,MAAM,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,OAAO,gBAAgB;IAKR;IAGA;IAPX,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnC,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;IAE5D,YACmB,aAAsE;IACvF;yEACqE;IACpD,QAAsF;QAHtF,kBAAa,GAAb,aAAa,CAAyD;QAGtE,aAAQ,GAAR,QAAQ,CAA8E;IACtG,CAAC;IAEJ,6DAA6D;IAC7D,eAAe,CAAC,MAAuB;QACrC,IAAI,MAAM,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACrC,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,QAAQ,IAAI,6BAA6B,CAAC;QACzE,IAAI,MAAM,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,SAAS,GAAG,GAAG;YAAE,OAAO,KAAK,CAAC;QAC/F,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACpD,CAAC;IAED,gEAAgE;IACxD,WAAW,CAAC,MAAuB,EAAE,OAA8B;QACzE,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,YAAY,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS;YAAE,OAAO,8BAA8B,CAAC;QACtD,IAAI,CAAC,YAAY;YAAE,OAAO,2BAA2B,CAAC;QACtD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,uBAAuB,MAAM,EAAE,CAAC;QACtF,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;YAC/B,OAAO,uBAAuB,SAAS,cAAc,YAAY,6BAA6B,CAAC;QACjG,CAAC;QACD,IAAI,MAAM,KAAK,OAAO,IAAI,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5D,OAAO,0CAA0C,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;6CACyC;IACzC,KAAK,CAAC,MAAuB,EAAE,IAAgD;QAC7E,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,aAAa;gBACtF,QAAQ,EAAE,MAAM,CAAC,gBAAgB,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACnC,OAAO,CAAC,CAAC;IACX,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,MAAuB,EAAE,IAAgD;QAC7F,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAC3B,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;QAClG,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAEhF,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClD,IAAI,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAClD,IAAI,kBAAkB,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yDAAyD,EAAE,CAAC;QAElH,MAAM,OAAO,GAAG,IAAI,EAAE,QAAQ,IAAI,uBAAuB,CAAC;QAC1D,sEAAsE;QACtE,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,GAAG,OAAO,EAAE,CAAC;YACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,SAAS,gCAAgC,OAAO,EAAE,EAAE,CAAC;QAC/F,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,aAAa,IAAI,uBAAuB,CAAC;QAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sCAAsC,IAAI,IAAI,MAAM,SAAS,EAAE,CAAC;QAC7F,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,IAAI,gBAAgB,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,IAAI,OAAO,CAAC,KAAK;gBAAE,OAAO,CAAC,aAAa,GAAG,UAAU,OAAO,CAAC,KAAK,EAAE,CAAC;YACrE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5F,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,IAAI,CAAC,MAAM,2BAA2B,EAAE,CAAC;YAChG,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACjE,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;YAEhE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;YAClC,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACrC,SAAS,CAAC;gBACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI;oBAAE,MAAM;gBAChB,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC;gBAC7B,IAAI,QAAQ,GAAG,OAAO,IAAI,QAAQ,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;oBACnD,UAAU,CAAC,KAAK,EAAE,CAAC;oBACnB,MAAM,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC;oBACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,KAAK,OAAO,QAAQ,EAAE,EAAE,CAAC;gBACxF,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC/B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAEnC,IAAI,cAAmC,CAAC;YACxC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBACjD,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;oBACrB,sDAAsD;oBACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;gBAC/G,CAAC;gBACD,cAAc,GAAG,IAAI,CAAC;YACxB,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;YAClF,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,UAAU,IAAI,CAAC,CAAC,QAAQ,IAAI,0BAA0B,CAAC;YAC/F,MAAM,GAAG,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,WAAW,CAAC,UAAU,IAAI,EAAE,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC;YACjH,0EAA0E;YAC1E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;YAC/E,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;YAEnG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YACrD,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;YAC1B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC;YACnC,MAAM,CAAC,gBAAgB,GAAG,YAAY,CAAC;YACvC,MAAM,CAAC,cAAc,GAAG,cAAc,CAAC;YACvC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;QACxF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAI,CAAW,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAE,CAAW,CAAC,OAAO,CAAC;YACrG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;CACF;AAED,OAAO,EAAE,sBAAsB,EAAE,CAAC"}

package/dist/src/mcpl/references.d.ts

@@ -0,0 +1,125 @@
+/**
+ * RFC-005 bulk content references — host treatment (agent-framework side).
+ *
+ * Mirrors the pure module in mcpl-core-ts `src/references.ts` (this framework
+ * deliberately does not depend on that package; hand-maintained MCPL types
+ * are the house convention — see types.ts header). Semantics are the RFC's,
+ * revision 3:
+ *
+ *  - every parsed field is server *testimony*, never a fact (§3);
+ *  - the one invalid-field rule (§8): a bad optional field is dropped while
+ *    the block and its subtractive `disposition` survive; a bad `uri`
+ *    rejects the block whole;
+ *  - `disposition:"never"` withholds payload AND uri from model context
+ *    unconditionally — enforced in code here, not by caller discipline (§5);
+ *  - stub size is independent of every server-supplied field length (§5);
+ *  - unparseable `expiresAt` fails closed (§7.4);
+ *  - unknown block types never propagate `undefined` (the pre-existing
+ *    convertBlock switches had no default — a latent corruption this module
+ *    retires).
+ *
+ * The ReferenceRegistry is the host-private reference record (§6.2): raw
+ * URIs and testimony live here and never in model-visible content. Fetching
+ * (§6/§7 origin binding, ceilings, redirects) is deliberately not here yet —
+ * the registry is what makes a future host-mediated fetcher and the
+ * code-execution materialization hook possible.
+ */
+export declare const REFERENCE_LIMITS: {
+    readonly uri: 4096;
+    readonly mimeType: 255;
+    readonly name: 255;
+    readonly expiresAt: 64;
+};
+export declare const DIGEST_PATTERN: RegExp;
+export type ReferenceDisposition = 'never' | 'ref';
+export interface ReferenceTestimony {
+    uri: string;
+    mimeType?: string;
+    sizeBytes?: number;
+    digest?: string;
+    expiresAt?: string;
+    name?: string;
+    disposition?: ReferenceDisposition;
+    rejectedFields: string[];
+    truncatedFields: string[];
+}
+export type BlockClassification = {
+    kind: 'text';
+} | {
+    kind: 'inline';
+    contradiction: boolean;
+} | {
+    kind: 'reference';
+    testimony: ReferenceTestimony;
+} | {
+    kind: 'invalid';
+    reason: string;
+};
+export declare function classifyBlock(block: unknown): BlockClassification;
+/** RFC-005 vector 2: an inline-data block claiming bulk disposition (or
+ *  smuggling a uri beside its data) is an emitter contradiction — the host
+ *  fails closed by withholding the inline data from context. Every lane that
+ *  handles inline media MUST consult this before its data branch. */
+export declare function isInlineContradiction(block: unknown): boolean;
+export declare const INLINE_WITHHELD_TEXT = "[inline content withheld: nonconformant bulk disposition on inline data]";
+export declare function isReferenceExpired(t: Pick<ReferenceTestimony, 'expiresAt'>, nowMs?: number): boolean;
+/** Strip C0/C1 controls plus bidi marks/overrides/isolates; bound length.
+ *  Labels are labels — storage naming is host-generated elsewhere (§7.3). */
+export declare function sanitizeLabel(s: string, maxChars: number): string;
+export declare function formatSizeBytes(n: number): string;
+export interface ReferenceRecord {
+    refId: string;
+    serverId?: string;
+    testimony: ReferenceTestimony;
+    receivedAt: number;
+    /** Set by the host-mediated fetcher after a successful, verified fetch. */
+    fetchedPath?: string;
+    verifiedBytes?: number;
+    verifiedMimeType?: string;
+    digestVerified?: boolean;
+}
+/**
+ * Host-private store of received references. Raw URIs live here and in stubs
+ * never (under `never`) or by policy only (`ref`/absent). Ids are stable and
+ * never reused within the process (vector 20); eviction is FIFO past
+ * MAX_RECORDS and a stale lookup returns undefined — a defined miss, never a
+ * different record.
+ *
+ * Process-wide singleton by design: ids are host-local *names*, not
+ * capabilities, and the record itself carries serverId for any future
+ * origin-bound fetcher.
+ */
+export declare class ReferenceRegistry {
+    private records;
+    /** uri → refId. The uri ALONE is the identity key: stub sites (the two
+     *  tool-result serializers and the three converters) are free functions
+     *  with no server context, while dispatch-time pre-registration carries a
+     *  serverId — keying on both split every reference into two records, the
+     *  model-visible one unbound (fetch_reference failed on it) and the bound
+     *  one invisible. One key, and a later registration that knows the server
+     *  UPGRADES the record's binding instead of forking it. If two servers ever
+     *  reference the same uri, the first binding wins (the record's serverId
+     *  feeds the origin check, which fails closed on a mismatch). */
+    private byKey;
+    private counter;
+    register(testimony: ReferenceTestimony, serverId?: string): ReferenceRecord;
+    get(refId: string): ReferenceRecord | undefined;
+    /** Find the record for a uri. */
+    findByUri(uri: string): ReferenceRecord | undefined;
+}
+export declare const referenceRegistry: ReferenceRegistry;
+/**
+ * Build the model-visible stub for a reference. Output length is bounded by
+ * host constants and independent of every server-supplied field length.
+ * Under `disposition:"never"` the uri is omitted unconditionally; under
+ * `ref`/absent it is omitted too — this host's default policy is the opaque
+ * id everywhere (the safe default of §5), with retrieval via the record.
+ */
+export declare function buildReferenceStub(t: ReferenceTestimony, provenance?: string, serverId?: string): string;
+/**
+ * RFC-005 treatment for one MCPL wire block, for the model-visible text
+ * lanes. Returns a replacement string, or null when the block should keep
+ * its existing (inline/text) handling.
+ */
+export declare function referenceStubOrNull(block: unknown, provenance?: string, serverId?: string): string | null;
+//# sourceMappingURL=references.d.ts.map

package/dist/src/mcpl/references.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"references.d.ts","sourceRoot":"","sources":["../../../src/mcpl/references.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,eAAO,MAAM,gBAAgB;;;;;CAAkE,CAAC;AAChG,eAAO,MAAM,cAAc,QAA+B,CAAC;AAI3D,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,KAAK,CAAC;AAEnD,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,oBAAoB,CAAC;IACnC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,kBAAkB,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAiBxC,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CA0BjE;AA8BD;;;qEAGqE;AACrE,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAG7D;AAED,eAAO,MAAM,oBAAoB,6EAC2C,CAAC;AAE7E,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,EAAE,KAAK,SAAa,GAAG,OAAO,CAIxG;AAED;6EAC6E;AAC7E,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQjE;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAKjD;AAMD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,kBAAkB,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAID;;;;;;;;;;GAUG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,OAAO,CAAsC;IACrD;;;;;;;;qEAQiE;IACjE,OAAO,CAAC,KAAK,CAA6B;IAC1C,OAAO,CAAC,OAAO,CAAK;IAEpB,QAAQ,CAAC,SAAS,EAAE,kBAAkB,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,eAAe;IA+B3E,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAI/C,iCAAiC;IACjC,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;CAIpD;AAED,eAAO,MAAM,iBAAiB,mBAA0B,CAAC;AAMzD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,kBAAkB,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAiBxG;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASzG"}