@bevel-software/platform-core-backend 0.25.2 → 0.27.0

package/dist/modules/embed/embed.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embed.service.js","sourceRoot":"","sources":["../../../src/modules/embed/embed.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,GAAG,MAAM,cAAc,CAAC;AAE/B,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAGpE,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAelG,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,sBAAsB,EACtB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAGjG,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;AAE5B;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,CAAC;AAqC/C,MAAM,OAAO,YAAY;IAWJ;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IAOA;IAEA;IA3BnB;;;;;;OAMG;IACc,UAAU,CAAS;IAEpC,YACmB,MAAmB,EACnB,EAAa,EACb,gBAAoC,EACpC,aAA6B,EAC7B,WAA0B,EAC1B,eAAiC,EACjC,UAAuB,EACvB,YAAiC,EACjC,OAA2B;IAC5C;;;;;OAKG;IACc,aAA6B;IAC9C,wFAAwF;IACvE,gBAA4C,IAAI;QAjBhD,WAAM,GAAN,MAAM,CAAa;QACnB,OAAE,GAAF,EAAE,CAAW;QACb,qBAAgB,GAAhB,gBAAgB,CAAoB;QACpC,kBAAa,GAAb,aAAa,CAAgB;QAC7B,gBAAW,GAAX,WAAW,CAAe;QAC1B,oBAAe,GAAf,eAAe,CAAkB;QACjC,eAAU,GAAV,UAAU,CAAa;QACvB,iBAAY,GAAZ,YAAY,CAAqB;QACjC,YAAO,GAAP,OAAO,CAAoB;QAO3B,kBAAa,GAAb,aAAa,CAAgB;QAE7B,kBAAa,GAAb,aAAa,CAAmC;QAEjE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC;aACrD,MAAM,CAAC,sBAAsB,CAAC;aAC9B,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAED,8EAA8E;IAE9E,sBAAsB;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC;IAClD,CAAC;IAED,kBAAkB,CAAC,MAA0B;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAC/C,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACvC,2EAA2E;QAC3E,OAAO,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAA4C;QAC5D,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAIf;QACC,IAAI,CAAC,KAAK,CAAC,SAAS;YAAE,MAAM,IAAI,gBAAgB,CAAC,8BAA8B,CAAC,CAAC;QACjF,0EAA0E;QAC1E,yEAAyE;QACzE,2EAA2E;QAC3E,gEAAgE;QAChE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,gBAAgB,CAAC,yDAAyD,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACvF,CAAC;IAED;;;;;;;;;;OAUG;IACK,KAAK,CAAC,IAAI,CAAC,OAAqB,EAAE,SAAiB;QACzD,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,YAAoB,CAAC;QACzB,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;YACpB,sEAAsE;YACtE,mEAAmE;YACnE,oEAAoE;YACpE,sCAAsC;YACtC,IAAI,2BAA2B,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBACnF,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,mEAAmE;gBACnE,sEAAsE;gBACtE,wCAAwC;gBACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAClF,IAAI,CAAC,QAAQ;oBAAE,MAAM,IAAI,kBAAkB,CAAC,6BAA6B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;gBACxF,YAAY,GAAG,QAAQ,CAAC;YAC1B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;QAClC,CAAC;QACD,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,gEAAgE;QAChE,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QACtC,MAAM,MAAM,GAAgB;YAC1B,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,GAAG,EAAE,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS;YACjE,YAAY;YACZ,IAAI,EAAE,GAAG,CAAC,IAAI;SACf,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACxF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;IACtD,CAAC;IAED,+CAA+C;IAC/C,WAAW,CAAC,KAAa;QACvB,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,gBAAgB,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;IACrF,CAAC;IAED,oEAAoE;IACpE,SAAS,CAAC,YAAoB,EAAE,IAAa;QAC3C,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;aAC/D,GAAG,CAAC,kBAAkB,CAAC;aACvB,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,cAAc,MAAM,IAAI,MAAM,GAAG,MAAM,EAAE,CAAC;IACnF,CAAC;IAED,8EAA8E;IAE9E,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAE3D,MAAM,IAAI,GAAkB;YAC1B,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC;YAC1C,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC;YAClD,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,aAAa;YAC7B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC;YACxD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,OAAO,EAAE,EAAE;YACX,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,MAAM;YACN,OAAO;YACP,QAAQ;YACR,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,qBAAqB,kBAAkB,CAAC,KAAK,CAAC,EAAE;SAC1F,CAAC;QAEF,uEAAuE;QACvE,wEAAwE;QACxE,uEAAuE;QACvE,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QACrC,yEAAyE;QACzE,uEAAuE;QACvE,6DAA6D;QAC7D,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAC7D,yEAAyE;QACzE,yEAAyE;QACzE,sEAAsE;QACtE,2EAA2E;QAC3E,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,IAAI,MAAM,EAAE,CAAC;IACnF,CAAC;IAED;;;;OAIG;IACH,wFAAwF;IAChF,OAAO,CAAC,YAAoB;QAClC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,YAAY,IAAI,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5F,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,YAAoB;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,MAAM,IAAI,gBAAgB,CAAC,mCAAmC,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;QACvF,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;YAAE,MAAM,IAAI,gBAAgB,CAAC,mCAAmC,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,IAAa;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,gBAAgB,CAAC,uCAAuC,CAAC,CAAC;QAC1F,wEAAwE;QACxE,yEAAyE;QACzE,uEAAuE;QACvE,8CAA8C;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;QACrF,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM,IAAI,gBAAgB,CAAC,6CAA6C,CAAC,CAAC;QAC/F,0EAA0E;QAC1E,sEAAsE;QACtE,oEAAoE;QACpE,sEAAsE;QACtE,IAAI,MAAM,KAAK,MAAM,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,gBAAgB,CAAC,yDAAyD,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC9C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,gBAAgB,CAAC,sCAAsC,MAAM,IAAI,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnE,CAAC;IAED,8EAA8E;IAE9E,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,CACnD,IAAI,CAAC,kBAAkB,EAAE,EACzB,IAAI,CAAC,EAAE,CAAC,aAAa,EACrB,MAAM,EACN,IAAI,CACL,CAAC;QACF,OAAO,MAAM,CAAC,QAAQ;YACpB,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;YACpB,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,uCAAuC;QAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACnD,uEAAuE;QACvE,yEAAyE;QACzE,qEAAqE;QACrE,uEAAuE;QACvE,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACjG,MAAM,IAAI,gBAAgB,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7F,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,MAAM,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAC5C,IAAI,CAAC,kBAAkB,EAAE,EACzB,IAAI,CAAC,EAAE,CAAC,aAAa,EACrB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,EACnC,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,OAAe;QACvC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACnD,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC9C,0EAA0E;QAC1E,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,gEAAgE;QAChE,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACpE,oEAAoE;YACpE,oEAAoE;YACpE,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,eAAe;iBACvB,mBAAmB,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC;iBACrE,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE;gBACpB,0DAA0D;gBAC1D,wDAAwD;gBACxD,GAAG,CAAC,KAAK,CACP,iDAAiD;oBAC/C,cAAc,WAAW,SAAS,MAAM,SAAS,IAAI,CAAC,EAAE,GAAG,EAC7D,UAAU,CACX,CAAC;gBACF,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC,CAAC;YACL,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,OAAe;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,gBAAgB,CAAC,uCAAuC,CAAC,CAAC;QAC/E,sEAAsE;QACtE,0EAA0E;QAC1E,kDAAkD;QAClD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,gBAAgB,CAAC,sCAAsC,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;QACxG,sEAAsE;QACtE,sEAAsE;QACtE,+DAA+D;QAC/D,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACnD,yEAAyE;QACzE,uEAAuE;QACvE,8DAA8D;QAC9D,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,GAAG,0BAA0B,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC;QAC5F,yEAAyE;QACzE,wEAAwE;QACxE,uEAAuE;QACvE,kEAAkE;QAClE,qEAAqE;QACrE,yEAAyE;QACzE,wEAAwE;QACxE,iEAAiE;QACjE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,CAAC,eAAe;iBACvB,YAAY,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC;iBACtE,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACtB,IAAI,GAAG,YAAY,KAAK,IAAI,8CAA8C,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;oBAAE,OAAO;gBACrG,MAAM,GAAG,CAAC;YACZ,CAAC,CAAC,CAAC;QACP,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC3E,oEAAoE;QACpE,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,qEAAqE;QACrE,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACrE,wEAAwE;YACxE,sEAAsE;YACtE,uEAAuE;YACvE,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CACtC,SAAS,CAAC,EAAE,EACZ,IAAI,EACJ,sBAAsB,MAAM,CAAC,YAAY,EAAE,EAC3C,CAAC,MAAM,CAAC,CACT,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE;gBAC/E,YAAY,EAAE,MAAM;gBACpB,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,aAAa;gBACnC,KAAK,EAAE,gBAAgB,IAAI,CAAC,IAAI,aAAa;aAC9C,CAAC,CAAC;YACH,OAAO;gBACL,MAAM;gBACN,GAAG,CAAC,OAAO,OAAO,EAAE,MAAM,KAAK,QAAQ;oBACrC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;oBACxE,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,uEAAuE;YACvE,wEAAwE;YACxE,oCAAoC;YACpC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAC7C,IAAI,QAAQ,KAAK,IAAI;gBAAE,MAAM,GAAG,CAAC;YACjC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,8EAA8E;IAE9E,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,MAAc;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACvC,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAChC,MAAM,IAAI,gBAAgB,CAAC,gCAAgC,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;YACxC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE;SACjC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,SAAiB;QACnD,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACrD,CAAC;IAED,8EAA8E;IAE9E;;;;OAIG;IACK,KAAK,CAAC,eAAe,CAAC,WAAmB,EAAE,MAAc,EAAE,IAAc;QAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAChF,IAAI,OAAO,EAAE,CAAC;YACZ,qEAAqE;YACrE,uCAAuC;YACvC,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,EAAE,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc;gBAAE,OAAO;YAChF,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACxF,IAAI,CAAC,KAAK,CAAC,QAAQ;YAAE,MAAM,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzE,CAAC;IAEO,kBAAkB;QACxB,OAAO,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;IACrD,CAAC;IAEO,SAAS,CAAC,YAAoB;QACpC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,YAAY,EAAE,CAAC;IACpD,CAAC;IAED;;;;OAIG;IACK,gBAAgB,CAAC,MAAc;QACrC,OAAO,iBAAiB,CAAC,MAAM,EAAE,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7F,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,aAAa,CACzB,KAAa;QAEb,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,CAAC,CAAC;QACnE,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,gBAAgB,EAAE,CAAC;QAC5C,MAAM,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;QACxE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;IACvE,CAAC;IAED,oEAAoE;IAC5D,KAAK,CAAC,eAAe,CAAC,MAAmB;QAC/C,MAAM,UAAU,GAAqB,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACpG,MAAM,MAAM,GACV,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtF,IAAI,CAAC,MAAM;YAAE,OAAO,UAAU,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI;YAAE,OAAO,UAAU,CAAC;QAC7B,qEAAqE;QACrE,yEAAyE;QACzE,gDAAgD;QAChD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,CAAC,CAAC;QACxG,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAC/F,yEAAyE;QACzE,4DAA4D;QAC5D,MAAM,QAAQ,GACZ,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QAC/F,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACnD,CAAC;IAED,qFAAqF;IAC7E,KAAK,CAAC,UAAU,CAAC,YAAoB;QAC3C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,sBAAsB;gBAAE,OAAO,KAAK,CAAC;YACxD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,uFAAuF;IAC/E,KAAK,CAAC,YAAY,CAAC,YAAoB;QAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC9C,MAAM,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;QACxE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,sBAAsB,CAAC,GAAG,YAAY,qBAAqB,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,YAAoB;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC9C,MAAM,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;QACxE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC;YACnG,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mEAAmE;YACnE,sEAAsE;YACtE,oEAAoE;YACpE,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;YAClD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjE,MAAM,IAAI,sBAAsB,CAC9B,GAAG,YAAY,qBAAqB,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAC5D,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,KAAa;QAC/B,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,eAAe,EAAE,CAAC;QAC9B,CAAC;QACD,MAAM,CAAC,GAAG,OAAyD,CAAC;QACpE,IAAI,CAAC,EAAE,KAAK,KAAK,OAAO,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;YAClF,MAAM,IAAI,eAAe,EAAE,CAAC;QAC9B,CAAC;QACD,yEAAyE;QACzE,oFAAoF;QACpF,yEAAyE;QACzE,4DAA4D;QAC5D,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;YACnD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7G,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;YACzF,MAAM,IAAI,eAAe,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClG,CAAC;CACF;AAED,0DAA0D;AAC1D,SAAS,WAAW,CAAC,YAAoB;IACvC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,YAAY,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAY;IACtD,4CAA4C;IAC5C,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,CAAC;QACH,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,sEAAsE;IACtE,4CAA4C;IAC5C,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACxB,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG;YAAE,SAAS;QACxC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,4DAA4D;YAC5D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpC,KAAK,CAAC,GAAG,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,GAAY;IAC1C,MAAM,MAAM,GAAI,GAAmF,IAAI,IAAI,CAAC;IAC5G,MAAM,SAAS,GAAG,MAAM,EAAE,OAAO,EAAE,cAAc,IAAI,MAAM,EAAE,cAAc,CAAC;IAC5E,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,qEAAqE;QACrE,uEAAuE;QACvE,+CAA+C;QAC/C,MAAM,KAAK,GAAG,2CAA2C,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5E,IAAI,KAAK;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/modules/embed/embed.tools.d.ts

@@ -0,0 +1,51 @@
+import type { Router, RequestHandler } from 'express';
+import type { IToolRegistry } from '../tool-registry/tool.contract.js';
+import type { ToolHandlerFactory } from '../tool-helpers/tool-handler.js';
+import type { KbContext } from '../../shared/kb-context.js';
+import type { ReadForTool } from '../workspace/workspace.tools.js';
+import type { IEmbedService } from './embed.interface.js';
+import { type ToolDescriptionNotes } from '../workspace/agent-access.gate.js';
+/** The tool name, in one place: the app manifest keys its view by it. */
+export declare const OPEN_PAGE_TOOL = "open_page";
+/** What `open_page` answers when the deployment cannot be framed. */
+export declare const HTTP_DEPLOYMENT_NOTE: string;
+/** What a path outside the knowledge base is told. */
+export declare const OUTSIDE_REPO: (kbDirName: string) => string;
+export interface EmbedToolsDeps {
+    embedService: IEmbedService;
+    kb: KbContext;
+    /** `read_file`'s own read — see {@link ReadForTool}. */
+    readForTool: ReadForTool;
+    /** Whether a chat host's sandbox can load from this deployment's public address at all (https). */
+    canBeReached: () => boolean;
+    /** The file's address in the app, for the answer and for the view's fallback link. */
+    appUrlFor: (repoRelative: string, slug?: string) => string;
+    /** The notes a deployment registers for the gated tools — `read_file`'s, and so this tool's. */
+    notes: ToolDescriptionNotes;
+}
+/**
+ * `open_page`: the knowledge-base page, in the chat.
+ *
+ * The tool answers the file's TEXT exactly as `read_file` does — the same
+ * read hook, the same access gate, the same refusals — and adds the address
+ * of an embedded view that renders the page with the app's own renderer, so a
+ * host that supports MCP Apps shows it inline and lets the reader edit it or
+ * propose a change. A host that does not support them shows the text and the
+ * app address, and nothing errors: the answer stands on its own.
+ *
+ * `read_file` is deliberately untouched (Decision 2). Carrying a view on it
+ * would mint a token and render an iframe on every read an agent makes, for
+ * every file it reads while thinking.
+ *
+ * No `branch` argument, by decision: the embedded view is editable, and an
+ * editable embed targets the default branch only. The branch it rendered
+ * comes back in the answer so nothing is implied.
+ */
+export declare function registerEmbedTools(registry: IToolRegistry, router: Router, toolAuth: RequestHandler, toolHandler: ToolHandlerFactory, deps: EmbedToolsDeps): void;
+/**
+ * `path` as a repo-relative path, or null when it names nothing inside the
+ * knowledge base. Accepts it with or without the `<kbDir>/` prefix and with
+ * or without a leading slash, which is what `read_file` documents.
+ */
+export declare function toRepoRelative(path: string, kbDirName: string): string | null;
+//# sourceMappingURL=embed.tools.d.ts.map

package/dist/modules/embed/embed.tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"embed.tools.d.ts","sourceRoot":"","sources":["../../../src/modules/embed/embed.tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAGvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAE1E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,OAAO,EAAoB,KAAK,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAGhG,yEAAyE;AACzE,eAAO,MAAM,cAAc,cAAc,CAAC;AAE1C,qEAAqE;AACrE,eAAO,MAAM,oBAAoB,QAGP,CAAC;AAE3B,sDAAsD;AACtD,eAAO,MAAM,YAAY,GAAI,WAAW,MAAM,KAAG,MACiD,CAAC;AAEnG,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,aAAa,CAAC;IAC5B,EAAE,EAAE,SAAS,CAAC;IACd,wDAAwD;IACxD,WAAW,EAAE,WAAW,CAAC;IACzB,mGAAmG;IACnG,YAAY,EAAE,MAAM,OAAO,CAAC;IAC5B,sFAAsF;IACtF,SAAS,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAC3D,gGAAgG;IAChG,KAAK,EAAE,oBAAoB,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,cAAc,EACxB,WAAW,EAAE,kBAAkB,EAC/B,IAAI,EAAE,cAAc,GACnB,IAAI,CAwHN;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAe7E"}

package/dist/modules/embed/embed.tools.js

@@ -0,0 +1,170 @@
+import { ToolError } from '../tool-helpers/tool.contract.js';
+import { toolDef } from '../tool-helpers/tool-def.js';
+import { requireExternalSource } from '../tool-auth/tool-auth.middleware.js';
+import { SESSION_ID_INPUT } from '../workspace/agent-access.gate.js';
+import { sessionIdInputOf } from '../workspace/workspace.tools.js';
+/** The tool name, in one place: the app manifest keys its view by it. */
+export const OPEN_PAGE_TOOL = 'open_page';
+/** What `open_page` answers when the deployment cannot be framed. */
+export const HTTP_DEPLOYMENT_NOTE = 'This deployment is reached over plain http, so no chat host can show the page inline — ' +
+    'an embedded view needs an https deployment. The page is above, and its address in the app ' +
+    'opens the whole thing.';
+/** What a path outside the knowledge base is told. */
+export const OUTSIDE_REPO = (kbDirName) => `open_page shows a knowledge-base page, so \`path\` has to name a file under \`${kbDirName}/\`.`;
+/**
+ * `open_page`: the knowledge-base page, in the chat.
+ *
+ * The tool answers the file's TEXT exactly as `read_file` does — the same
+ * read hook, the same access gate, the same refusals — and adds the address
+ * of an embedded view that renders the page with the app's own renderer, so a
+ * host that supports MCP Apps shows it inline and lets the reader edit it or
+ * propose a change. A host that does not support them shows the text and the
+ * app address, and nothing errors: the answer stands on its own.
+ *
+ * `read_file` is deliberately untouched (Decision 2). Carrying a view on it
+ * would mint a token and render an iframe on every read an agent makes, for
+ * every file it reads while thinking.
+ *
+ * No `branch` argument, by decision: the embedded view is editable, and an
+ * editable embed targets the default branch only. The branch it rendered
+ * comes back in the answer so nothing is implied.
+ */
+export function registerEmbedTools(registry, router, toolAuth, toolHandler, deps) {
+    const { kbDirName } = deps.kb;
+    const DESCRIPTION = 'Show a knowledge-base page to the person you are talking to, rendered inside this chat. ' +
+        'Returns the same `{ path, content }` `read_file` returns — the page as text, for you to read — ' +
+        'plus `embedUrl` (the view the chat renders), `appUrl` (the page in the app), and `branch` ' +
+        "(always the default branch). The rendered view uses the app's own renderer for the file's type, " +
+        'and offers the reader Edit when they may write the page and Propose changes when they may not, ' +
+        'as that same person — not as you. Use it when somebody wants to SEE or FIX a page; use `read_file` ' +
+        'when you only need to read one yourself. A chat host that cannot render a view shows the text, ' +
+        'so calling this is never worse than reading.';
+    const def = toolDef({
+        name: OPEN_PAGE_TOOL,
+        description: DESCRIPTION + deps.notes.gatedToolNote(),
+        path: `/api/agent/tools/${OPEN_PAGE_TOOL}`,
+        inputs: {
+            type: 'object',
+            properties: {
+                path: {
+                    type: 'string',
+                    minLength: 1,
+                    description: `Path of the page to show, under \`${kbDirName}/\` (e.g. \`${kbDirName}/KnowledgeBase/Foo.md\`), ` +
+                        'with or without a leading slash — a path without that prefix is placed under ' +
+                        `\`${kbDirName}/\`. The page is always shown from the default branch.`,
+                },
+                heading: {
+                    type: 'string',
+                    description: 'Optional: the anchor slug of one heading (e.g. `problem-statement`) the view should open at. ' +
+                        'The whole page is shown either way — this only says where to start reading.',
+                },
+                // As `read_file` takes it: the read is `read_file`'s own, and a
+                // deployment whose read hook wants the session must be able to get it.
+                sessionId: SESSION_ID_INPUT,
+            },
+            required: ['path'],
+            additionalProperties: false,
+        },
+        outputs: {
+            type: 'object',
+            properties: {
+                path: { type: 'string', description: 'The path that was shown (echoes the input).' },
+                content: { type: 'string', description: "The page's text, exactly as `read_file` answers it." },
+                embedUrl: {
+                    type: 'string',
+                    description: 'The address of the view the chat renders. Absent when this deployment cannot be framed — ' +
+                        'see `note`.',
+                },
+                appUrl: { type: 'string', description: "The page's address in the app." },
+                branch: { type: 'string', description: 'The branch the page was rendered from — the default branch.' },
+                note: {
+                    type: 'string',
+                    description: 'Present only when there is no `embedUrl`: why there is no embedded view.',
+                },
+            },
+            required: ['path', 'content', 'appUrl', 'branch'],
+        },
+        tags: ['workspace'],
+    });
+    // EXTERNAL only. The view exists for a chat somewhere else; the in-app
+    // agent's reader is already looking at the app, where every page is a
+    // click away — handing it an iframe of the page it is standing on would be
+    // a tool that cannot help.
+    registry.registerExternalTool(def);
+    // The read is `read_file`'s own, so what the agent reads about it is too:
+    // the note a deployment registers for the gated tools, and the `sessionId`
+    // description with its note — applied now and on every later registration,
+    // exactly as the file tools apply them (`sessionIdInputOf` is theirs).
+    const redescribe = () => {
+        def.description = DESCRIPTION + deps.notes.gatedToolNote();
+        const sessionId = sessionIdInputOf(def);
+        if (sessionId)
+            sessionId.description = deps.notes.sessionIdDescription();
+    };
+    redescribe();
+    deps.notes.onChange(redescribe);
+    router.post(`/agent/tools/${OPEN_PAGE_TOOL}`, toolAuth, 
+    // Registered external-only above; the route holds the same line, so an
+    // in-process agent that guessed the endpoint is refused here too.
+    requireExternalSource, toolHandler(async (args, ctx) => {
+        const raw = typeof args.path === 'string' ? args.path.trim() : '';
+        if (!raw)
+            throw new ToolError('`path` is required.', 400);
+        const heading = typeof args.heading === 'string' && args.heading.trim() ? args.heading.trim() : undefined;
+        const repoRelative = toRepoRelative(raw, kbDirName);
+        if (repoRelative === null)
+            throw new ToolError(OUTSIDE_REPO(kbDirName), 400);
+        const branch = deps.kb.defaultBranch;
+        const wsPath = `${kbDirName}/${repoRelative}`;
+        // The read comes FIRST, and it is `read_file`'s own: a path the caller
+        // may not read, or one that is not there, is refused here in the words
+        // `read_file` refuses it — and no token is minted, because the mint is
+        // below this line.
+        const result = await deps.readForTool(branch, wsPath, ctx);
+        const content = result.kind === 'text' ? result.text : result.kind === 'image' ? result.note : result.message;
+        const appUrl = deps.appUrlFor(repoRelative, heading);
+        // No view on a plain-http deployment (Decision 8): a host's https
+        // sandbox cannot load from it. The text and the app address are still
+        // the answer, and the tool says why there is no view rather than
+        // handing back an address no host can open.
+        if (!deps.canBeReached()) {
+            return { path: raw, content, appUrl, branch, note: HTTP_DEPLOYMENT_NOTE };
+        }
+        // Minted for the identity THIS MCP session authenticated — the
+        // signed-in user, or the owner of the connection key the agent carries.
+        // Whoever is in the chat therefore sees and may change exactly what
+        // that person may, and the audit log attributes it to them.
+        const { embedUrl } = await deps.embedService.mintForUser({
+            userId: ctx.user.id,
+            reference: heading ? `${repoRelative}#${heading}` : repoRelative,
+        });
+        return { path: raw, content, embedUrl, appUrl, branch };
+    }));
+}
+/**
+ * `path` as a repo-relative path, or null when it names nothing inside the
+ * knowledge base. Accepts it with or without the `<kbDir>/` prefix and with
+ * or without a leading slash, which is what `read_file` documents.
+ */
+export function toRepoRelative(path, kbDirName) {
+    // A backslash is refused, not read as a separator — `read_file`'s contract,
+    // and a token must never name a file other than the one the caller wrote.
+    if (path.includes('\\'))
+        return null;
+    const norm = path.replace(/^\.?\/+/, '').replace(/\/+$/, '');
+    if (!norm)
+        return null;
+    const rel = norm === kbDirName ? '' : norm.startsWith(`${kbDirName}/`) ? norm.slice(kbDirName.length + 1) : norm;
+    if (!rel)
+        return null;
+    // Traversal and the odd segment are refused HERE rather than deeper: the
+    // path is about to become part of a signed token, and a token is the one
+    // place a bad path would outlive the request that sent it.
+    // eslint-disable-next-line no-control-regex
+    if (/[\x00-\x1f\x7f]/.test(rel))
+        return null;
+    if (!rel.split('/').every((seg) => seg !== '' && seg !== '.' && seg !== '..'))
+        return null;
+    return rel;
+}
+//# sourceMappingURL=embed.tools.js.map

package/dist/modules/embed/embed.tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embed.tools.js","sourceRoot":"","sources":["../../../src/modules/embed/embed.tools.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAMtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAA6B,MAAM,mCAAmC,CAAC;AAChG,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAEnE,yEAAyE;AACzE,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAC;AAE1C,qEAAqE;AACrE,MAAM,CAAC,MAAM,oBAAoB,GAC/B,yFAAyF;IACzF,4FAA4F;IAC5F,wBAAwB,CAAC;AAE3B,sDAAsD;AACtD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,SAAiB,EAAU,EAAE,CACxD,iFAAiF,SAAS,MAAM,CAAC;AAenG;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAuB,EACvB,MAAc,EACd,QAAwB,EACxB,WAA+B,EAC/B,IAAoB;IAEpB,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IAC9B,MAAM,WAAW,GACf,0FAA0F;QAC1F,iGAAiG;QACjG,4FAA4F;QAC5F,kGAAkG;QAClG,iGAAiG;QACjG,qGAAqG;QACrG,iGAAiG;QACjG,8CAA8C,CAAC;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC;QAClB,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE;QACrD,IAAI,EAAE,oBAAoB,cAAc,EAAE;QAC1C,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,SAAS,EAAE,CAAC;oBACZ,WAAW,EACT,qCAAqC,SAAS,eAAe,SAAS,4BAA4B;wBAClG,+EAA+E;wBAC/E,KAAK,SAAS,wDAAwD;iBACzE;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,+FAA+F;wBAC/F,6EAA6E;iBAChF;gBACD,gEAAgE;gBAChE,uEAAuE;gBACvE,SAAS,EAAE,gBAAgB;aAC5B;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6CAA6C,EAAE;gBACpF,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qDAAqD,EAAE;gBAC/F,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,2FAA2F;wBAC3F,aAAa;iBAChB;gBACD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;gBACzE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6DAA6D,EAAE;gBACtG,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,0EAA0E;iBACxF;aACF;YACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC;SAClD;QACD,IAAI,EAAE,CAAC,WAAW,CAAC;KACpB,CAAC,CAAC;IACH,uEAAuE;IACvE,sEAAsE;IACtE,2EAA2E;IAC3E,2BAA2B;IAC3B,QAAQ,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACnC,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,UAAU,GAAG,GAAS,EAAE;QAC5B,GAAG,CAAC,WAAW,GAAG,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAC3D,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,SAAS;YAAE,SAAS,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC;IAC3E,CAAC,CAAC;IACF,UAAU,EAAE,CAAC;IACb,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAEhC,MAAM,CAAC,IAAI,CACT,gBAAgB,cAAc,EAAE,EAChC,QAAQ;IACR,uEAAuE;IACvE,kEAAkE;IAClE,qBAAqB,EACrB,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,GAAgB,EAAE,EAAE;QAC3C,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1G,MAAM,YAAY,GAAG,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACpD,IAAI,YAAY,KAAK,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC;QACrC,MAAM,MAAM,GAAG,GAAG,SAAS,IAAI,YAAY,EAAE,CAAC;QAE9C,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,mBAAmB;QACnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3D,MAAM,OAAO,GACX,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QAEhG,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACrD,kEAAkE;QAClE,sEAAsE;QACtE,iEAAiE;QACjE,4CAA4C;QAC5C,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YACzB,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;QAC5E,CAAC;QACD,+DAA+D;QAC/D,wEAAwE;QACxE,oEAAoE;QACpE,4DAA4D;QAC5D,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;YACvD,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YACnB,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,YAAY,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,YAAY;SACjE,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC1D,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,SAAiB;IAC5D,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,GAAG,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjH,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,yEAAyE;IACzE,yEAAyE;IACzE,2DAA2D;IAC3D,4CAA4C;IAC5C,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3F,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/modules/embed/mcp-app.d.ts

@@ -0,0 +1,64 @@
+import { type McpAppManifest, type McpAppResource } from '@bevel-software/platform-mcp-core';
+/**
+ * The `ui://` URI of the one view this deployment serves, NAMED BY ITS
+ * CONTENT: `ui://hexis/page-<hash>.html`, the hash being the view's own
+ * bytes.
+ *
+ * A host caches a view by its URI, and a changed view under an unchanged
+ * URI is served stale until the host happens to refetch — which is what
+ * Claude did after the view was rewritten (#391): it kept rendering the
+ * view it had cached, the one that goes blank. With the content in the
+ * name, every change to the view is a new URI, so no host can keep serving
+ * the old one. The prefix is stable so a reader can still tell what the
+ * resource is.
+ */
+export declare const OPEN_PAGE_VIEW_URI_PREFIX = "ui://hexis/page-";
+/** The URI the view with these bytes is served under. */
+export declare function openPageViewUri(text: string): string;
+/** The MCP App views a deployment serves — the port the MCP endpoint, the manifest route and the catalog revision consume. */
+export interface IMcpAppService {
+    /** The manifest: which tools carry a view, and the views themselves. */
+    manifest(): Promise<McpAppManifest>;
+    /** One view by its `ui://` address, or null when this deployment serves none at it. */
+    resource(uri: string): Promise<McpAppResource | null>;
+}
+/**
+ * The deployment's MCP Apps, built once per process: which tools carry a
+ * view, and the views themselves with the sandbox metadata the host needs.
+ *
+ * Read once and cached — the file ships with the package and cannot change
+ * under a running process, and `resources/read` is on the handshake path of
+ * every connection that renders a page.
+ */
+export declare class McpAppService implements IMcpAppService {
+    private readonly config;
+    private cached;
+    constructor(config: {
+        /** The deployment's public frontend address — the ONE origin the view may reach. */
+        readonly publicFrontendUrl: string;
+        /** Where the view's file lives. The packaged `mcp-app/` folder unless a test says otherwise. */
+        readonly viewDir?: string;
+    });
+    /** Every app this deployment serves. Empty only if the packaged view is unreadable. */
+    manifest(): Promise<McpAppManifest>;
+    /** One view by URI, or null when this deployment serves none under it. */
+    resource(uri: string): Promise<McpAppResource | null>;
+    private build;
+}
+/**
+ * `url`'s origin, or null when it does not parse. Only the origin: a
+ * `connectDomains` / `resourceDomains` entry is an origin, and a path or a
+ * credential in one is either ignored or rejected by the host.
+ */
+export declare function originOf(url: string): string | null;
+/**
+ * Whether a public address can be reached from inside a host's sandbox at all.
+ *
+ * Hosts run an MCP App's view in a sandboxed, https iframe, and no browser
+ * will let an https document load scripts from, or fetch from, a plain-http
+ * origin. So a deployment reached over http has no embedded view —
+ * `open_page` still answers the page's text and its address in the app, and
+ * says why there is nothing rendered (see Decision 8).
+ */
+export declare function isSandboxReachableOrigin(url: string): boolean;
+//# sourceMappingURL=mcp-app.d.ts.map

package/dist/modules/embed/mcp-app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-app.d.ts","sourceRoot":"","sources":["../../../src/modules/embed/mcp-app.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,cAAc,EACpB,MAAM,mCAAmC,CAAC;AAO3C;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,yBAAyB,qBAAqB,CAAC;AAE5D,yDAAyD;AACzD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD;AAKD,8HAA8H;AAC9H,MAAM,WAAW,cAAc;IAC7B,wEAAwE;IACxE,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IACpC,uFAAuF;IACvF,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;CACvD;AAED;;;;;;;GAOG;AACH,qBAAa,aAAc,YAAW,cAAc;IAIhD,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHzB,OAAO,CAAC,MAAM,CAAwC;gBAGnC,MAAM,EAAE;QACvB,oFAAoF;QACpF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;QACnC,gGAAgG;QAChG,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B;IAGH,uFAAuF;IACvF,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC;IAInC,0EAA0E;IACpE,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;YAK7C,KAAK;CA+DpB;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASnD;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAM7D"}

package/dist/modules/embed/mcp-app.js

@@ -0,0 +1,147 @@
+import { createHash } from 'node:crypto';
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { MCP_APP_MIME_TYPE, } from '@bevel-software/platform-mcp-core';
+import { mcpAppDir } from '../../assets.js';
+import { logger } from '../../shared/logging.js';
+import { OPEN_PAGE_TOOL } from './embed.tools.js';
+const log = logger('embed');
+/**
+ * The `ui://` URI of the one view this deployment serves, NAMED BY ITS
+ * CONTENT: `ui://hexis/page-<hash>.html`, the hash being the view's own
+ * bytes.
+ *
+ * A host caches a view by its URI, and a changed view under an unchanged
+ * URI is served stale until the host happens to refetch — which is what
+ * Claude did after the view was rewritten (#391): it kept rendering the
+ * view it had cached, the one that goes blank. With the content in the
+ * name, every change to the view is a new URI, so no host can keep serving
+ * the old one. The prefix is stable so a reader can still tell what the
+ * resource is.
+ */
+export const OPEN_PAGE_VIEW_URI_PREFIX = 'ui://hexis/page-';
+/** The URI the view with these bytes is served under. */
+export function openPageViewUri(text) {
+    return `${OPEN_PAGE_VIEW_URI_PREFIX}${createHash('sha256').update(text).digest('hex').slice(0, 12)}.html`;
+}
+/** The view's file inside the packaged `mcp-app/` folder. */
+const OPEN_PAGE_VIEW_FILE = 'page.html';
+/**
+ * The deployment's MCP Apps, built once per process: which tools carry a
+ * view, and the views themselves with the sandbox metadata the host needs.
+ *
+ * Read once and cached — the file ships with the package and cannot change
+ * under a running process, and `resources/read` is on the handshake path of
+ * every connection that renders a page.
+ */
+export class McpAppService {
+    config;
+    cached = null;
+    constructor(config) {
+        this.config = config;
+    }
+    /** Every app this deployment serves. Empty only if the packaged view is unreadable. */
+    manifest() {
+        return (this.cached ??= this.build());
+    }
+    /** One view by URI, or null when this deployment serves none under it. */
+    async resource(uri) {
+        const { resources } = await this.manifest();
+        return resources.find((r) => r.uri === uri) ?? null;
+    }
+    async build() {
+        const file = path.join(this.config.viewDir ?? mcpAppDir(), OPEN_PAGE_VIEW_FILE);
+        let text;
+        try {
+            text = await readFile(file, 'utf8');
+        }
+        catch (err) {
+            // No view, no app. Advertising a `resourceUri` whose resource cannot be
+            // read would have a host preload a failure and show an empty frame
+            // where the tool's text used to be; with no manifest `open_page` is an
+            // ordinary tool answering ordinary text, which is the graceful shape.
+            log.error(`could not read the MCP App view at ${file}; ` +
+                `open_page will carry no view: ${err instanceof Error ? err.message : String(err)}`);
+            return { tools: {}, resources: [] };
+        }
+        const origin = originOf(this.config.publicFrontendUrl);
+        const uri = openPageViewUri(text);
+        return {
+            tools: { [OPEN_PAGE_TOOL]: { resourceUri: uri } },
+            resources: [
+                {
+                    uri,
+                    name: 'knowledge-base-page',
+                    title: 'Knowledge base page',
+                    description: "The knowledge-base page an agent opened, rendered by the app's own renderer for its type, " +
+                        'with Edit for a writer and Propose changes for everybody else.',
+                    mimeType: MCP_APP_MIME_TYPE,
+                    text,
+                    ui: {
+                        // EXACTLY this deployment's own public origin, and nothing else,
+                        // for the two things the view asks of the host's sandbox:
+                        // FETCHING the build manifest and the token-only embed API
+                        // (`connectDomains`), and LOADING the embed bundle's scripts and
+                        // stylesheets and the bytes the renderers draw
+                        // (`resourceDomains`). No `frameDomains`: the view frames
+                        // nothing. Claude's host drops that field and pins the sandbox's
+                        // `frame-src` to `'self'`, which turned a framed `/embed` into a
+                        // blank box — so the view loads the deployment's embed bundle
+                        // into its own document instead. A knowledge-base HTML page
+                        // still renders through the renderer's `srcdoc` sandbox, which
+                        // that policy allows.
+                        csp: {
+                            connectDomains: origin ? [origin] : [],
+                            resourceDomains: origin ? [origin] : [],
+                        },
+                        // Deliberately NO `domain`. The field asks the host for a
+                        // dedicated sandbox origin, and the specification leaves its
+                        // format and validation to each host ("servers MUST consult
+                        // host-specific documentation") — a value one host accepts,
+                        // another may reject, and a rejected resource is a view that
+                        // never renders. This view keeps no storage and has no OAuth
+                        // callback, so it needs no stable origin of its own; the host's
+                        // default sandbox is the right one.
+                        // The framed page draws its own surface; a second border around
+                        // it reads as a box inside a box.
+                        prefersBorder: false,
+                    },
+                },
+            ],
+        };
+    }
+}
+/**
+ * `url`'s origin, or null when it does not parse. Only the origin: a
+ * `connectDomains` / `resourceDomains` entry is an origin, and a path or a
+ * credential in one is either ignored or rejected by the host.
+ */
+export function originOf(url) {
+    try {
+        const origin = new URL(url).origin;
+        // An address that parses but has no web origin (`file:`, `data:`) is
+        // serialised as the literal "null" — not an origin a host's CSP can name.
+        return origin === 'null' ? null : origin;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Whether a public address can be reached from inside a host's sandbox at all.
+ *
+ * Hosts run an MCP App's view in a sandboxed, https iframe, and no browser
+ * will let an https document load scripts from, or fetch from, a plain-http
+ * origin. So a deployment reached over http has no embedded view —
+ * `open_page` still answers the page's text and its address in the app, and
+ * says why there is nothing rendered (see Decision 8).
+ */
+export function isSandboxReachableOrigin(url) {
+    try {
+        return new URL(url).protocol === 'https:';
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=mcp-app.js.map

package/dist/modules/embed/mcp-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-app.js","sourceRoot":"","sources":["../../../src/modules/embed/mcp-app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,iBAAiB,GAGlB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;AAE5B;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,kBAAkB,CAAC;AAE5D,yDAAyD;AACzD,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,GAAG,yBAAyB,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC;AAC5G,CAAC;AAED,6DAA6D;AAC7D,MAAM,mBAAmB,GAAG,WAAW,CAAC;AAUxC;;;;;;;GAOG;AACH,MAAM,OAAO,aAAa;IAIL;IAHX,MAAM,GAAmC,IAAI,CAAC;IAEtD,YACmB,MAKhB;QALgB,WAAM,GAAN,MAAM,CAKtB;IACA,CAAC;IAEJ,uFAAuF;IACvF,QAAQ;QACN,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,SAAS,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAChF,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wEAAwE;YACxE,mEAAmE;YACnE,uEAAuE;YACvE,sEAAsE;YACtE,GAAG,CAAC,KAAK,CACP,sCAAsC,IAAI,IAAI;gBAC5C,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACtF,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QACtC,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO;YACL,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE;YACjD,SAAS,EAAE;gBACT;oBACE,GAAG;oBACH,IAAI,EAAE,qBAAqB;oBAC3B,KAAK,EAAE,qBAAqB;oBAC5B,WAAW,EACT,4FAA4F;wBAC5F,gEAAgE;oBAClE,QAAQ,EAAE,iBAAiB;oBAC3B,IAAI;oBACJ,EAAE,EAAE;wBACF,iEAAiE;wBACjE,0DAA0D;wBAC1D,2DAA2D;wBAC3D,iEAAiE;wBACjE,+CAA+C;wBAC/C,0DAA0D;wBAC1D,iEAAiE;wBACjE,iEAAiE;wBACjE,8DAA8D;wBAC9D,4DAA4D;wBAC5D,+DAA+D;wBAC/D,sBAAsB;wBACtB,GAAG,EAAE;4BACH,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;4BACtC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;yBACxC;wBACD,0DAA0D;wBAC1D,6DAA6D;wBAC7D,4DAA4D;wBAC5D,4DAA4D;wBAC5D,6DAA6D;wBAC7D,6DAA6D;wBAC7D,gEAAgE;wBAChE,oCAAoC;wBACpC,gEAAgE;wBAChE,kCAAkC;wBAClC,aAAa,EAAE,KAAK;qBACrB;iBACF;aACF;SACF,CAAC;IACJ,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACnC,qEAAqE;QACrE,0EAA0E;QAC1E,OAAO,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAW;IAClD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/modules/embed/mcp-app.routes.d.ts

@@ -0,0 +1,21 @@
+import express, { type RequestHandler } from 'express';
+import type { McpAppManifest } from '@bevel-software/platform-mcp-core';
+/**
+ * The deployment's MCP Apps over REST, for the LOCAL MCP server.
+ *
+ * `hexis-mcp` bridges a host to this deployment over HTTP: it discovers the
+ * tools as a UTCP manual, which has nowhere to carry a view, and it serves
+ * `resources/read` itself. So it needs the manifest — which tools carry a
+ * view, and the view's HTML and sandbox metadata — as data. One route, one
+ * answer, so the local server advertises the same apps the hosted endpoint
+ * does without knowing what any of them render.
+ *
+ * `manualAuth` for the same reason `all-tools` and `catalog-revision` use it:
+ * this is the agent surface, reached with a connection key or an exchanged
+ * grant. Nothing here is per-caller — every connection gets the same view —
+ * so the credential is a door, not a filter.
+ */
+export declare function createMcpAppRoutes(apps: {
+    manifest(): Promise<McpAppManifest>;
+}, manualAuth: RequestHandler): express.Router;
+//# sourceMappingURL=mcp-app.routes.d.ts.map

package/dist/modules/embed/mcp-app.routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-app.routes.d.ts","sourceRoot":"","sources":["../../../src/modules/embed/mcp-app.routes.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAAE,KAAK,cAAc,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAExE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE;IAAE,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC,CAAA;CAAE,EAC7C,UAAU,EAAE,cAAc,GACzB,OAAO,CAAC,MAAM,CAmBhB"}

package/dist/modules/embed/mcp-app.routes.js

@@ -0,0 +1,36 @@
+import express from 'express';
+/**
+ * The deployment's MCP Apps over REST, for the LOCAL MCP server.
+ *
+ * `hexis-mcp` bridges a host to this deployment over HTTP: it discovers the
+ * tools as a UTCP manual, which has nowhere to carry a view, and it serves
+ * `resources/read` itself. So it needs the manifest — which tools carry a
+ * view, and the view's HTML and sandbox metadata — as data. One route, one
+ * answer, so the local server advertises the same apps the hosted endpoint
+ * does without knowing what any of them render.
+ *
+ * `manualAuth` for the same reason `all-tools` and `catalog-revision` use it:
+ * this is the agent surface, reached with a connection key or an exchanged
+ * grant. Nothing here is per-caller — every connection gets the same view —
+ * so the credential is a door, not a filter.
+ */
+export function createMcpAppRoutes(apps, manualAuth) {
+    const router = express.Router();
+    router.get('/agent/mcp-app', manualAuth, async (_req, res) => {
+        try {
+            const manifest = await apps.manifest();
+            // The view's HTML rides the manifest rather than sitting behind a
+            // second round trip per resource: it is one small static file, the
+            // local server needs all of it before it can declare the capability at
+            // all, and a second fetch is a second thing that can half-fail.
+            res.setHeader('Cache-Control', 'no-store');
+            res.json(manifest);
+        }
+        catch (err) {
+            console.error('[embed] could not build the MCP App manifest:', err);
+            res.status(500).json({ error: 'Something went wrong.' });
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=mcp-app.routes.js.map

package/dist/modules/embed/mcp-app.routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-app.routes.js","sourceRoot":"","sources":["../../../src/modules/embed/mcp-app.routes.ts"],"names":[],"mappings":"AAAA,OAAO,OAAgC,MAAM,SAAS,CAAC;AAGvD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAA6C,EAC7C,UAA0B;IAE1B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvC,kEAAkE;YAClE,mEAAmE;YACnE,uEAAuE;YACvE,gEAAgE;YAChE,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,+CAA+C,EAAE,GAAG,CAAC,CAAC;YACpE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/modules/github-app/github-app.connection.d.ts

@@ -44,6 +44,13 @@ export declare class GitHubAppConnection implements GitHubAppRepository {
     private renewing;
     /** The last renewal failed: how many in a row have, and until when GitHub is not asked again. */
     private failed;
+    /**
+     * The settings that were empty the last time no token could be asked for,
+     * so the log says so ONCE per state and not before every git call. A
+     * deployment in this state used to run for hours with every push failing
+     * and nothing in the log naming the cause.
+     */
+    private saidUnaskable;
     constructor(opts: GitHubAppConnectionOptions);
     /** The app the deployment acts as, or null while any part of it is missing. */
     credentials(read?: SettingReader): GitHubAppCredentials | null;
@@ -80,9 +87,17 @@ export declare class GitHubAppConnection implements GitHubAppRepository {
      * `asked` is for an admin waiting on the answer itself (the setup screen
      * listing repositories, proving a connection): GitHub is asked whatever
      * is remembered, and the failure is thrown.
+     *
+     * `refused` is the git runner reporting that the host threw out the token
+     * in hand. However much time the clock gives it, that token is dead: it is
+     * dropped first, so nothing presents it again, and GitHub is asked for
+     * another the way `asked` asks — now, and with the failure thrown. A
+     * renewal that fails leaves NO token, which is what tells the runner not
+     * to run the command again with the one the host just refused.
      */
     prepare(opts?: {
         asked?: boolean;
+        refused?: boolean;
     }): Promise<void>;
     /**
      * The repositories the deployment may be pointed at: those the

package/dist/modules/github-app/github-app.connection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"github-app.connection.d.ts","sourceRoot":"","sources":["../../../src/modules/github-app/github-app.connection.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAC3F,OAAO,EACL,eAAe,EACf,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC5B,MAAM,wBAAwB,CAAC;AAQhC,+FAA+F;AAC/F,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAE7D;AAED,MAAM,WAAW,0BAA0B;IACzC,wDAAwD;IACxD,IAAI,EAAE,aAAa,CAAC;IACpB,6GAA6G;IAC7G,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC;IAClD,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,mBAAoB,YAAW,mBAAmB;IAWjD,OAAO,CAAC,QAAQ,CAAC,IAAI;IAVjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA8B;IAClD,kGAAkG;IAClG,OAAO,CAAC,IAAI,CAAkE;IAC9E,8EAA8E;IAC9E,OAAO,CAAC,QAAQ,CAA8B;IAC9C,iGAAiG;IACjG,OAAO,CAAC,MAAM,CAAiD;gBAElC,IAAI,EAAE,0BAA0B;IAK7D,+EAA+E;IAC/E,WAAW,CAAC,IAAI,GAAE,aAA8B,GAAG,oBAAoB,GAAG,IAAI;IAW9E,uGAAuG;IACvG,YAAY,IAAI,aAAa,GAAG,OAAO,GAAG,IAAI;IAK9C,cAAc,CAAC,IAAI,GAAE,aAA8B,GAAG,MAAM;IAI5D,GAAG,CAAC,IAAI,GAAE,aAA8B,GAAG,MAAM;IAKjD,QAAQ,CAAC,IAAI,GAAE,aAA8B,GAAG,OAAO;IAIvD;;;;;;;;OAQG;IACH,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,GAAE,aAA8B,GAAG,OAAO;IAU1E,KAAK,IAAI,MAAM,GAAG,IAAI;IAMtB;;;;;;;;;;;;;;;;;OAiBG;IACG,OAAO,CAAC,IAAI,GAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAoB5D;;;;;OAKG;IACG,YAAY,IAAI,OAAO,CAAC;QAAE,YAAY,EAAE,sBAAsB,EAAE,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IAQxF,yFAAyF;IACzF,MAAM,IAAI,IAAI;YAKA,KAAK;IAmBnB,OAAO,CAAC,MAAM;CAGf"}
+{"version":3,"file":"github-app.connection.d.ts","sourceRoot":"","sources":["../../../src/modules/github-app/github-app.connection.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAC3F,OAAO,EACL,eAAe,EACf,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC5B,MAAM,wBAAwB,CAAC;AAQhC,+FAA+F;AAC/F,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAE7D;AAED,MAAM,WAAW,0BAA0B;IACzC,wDAAwD;IACxD,IAAI,EAAE,aAAa,CAAC;IACpB,6GAA6G;IAC7G,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC;IAClD,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,mBAAoB,YAAW,mBAAmB;IAkBjD,OAAO,CAAC,QAAQ,CAAC,IAAI;IAjBjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA8B;IAClD,kGAAkG;IAClG,OAAO,CAAC,IAAI,CAAkE;IAC9E,8EAA8E;IAC9E,OAAO,CAAC,QAAQ,CAA8B;IAC9C,iGAAiG;IACjG,OAAO,CAAC,MAAM,CAAiD;IAC/D;;;;;OAKG;IACH,OAAO,CAAC,aAAa,CAAuB;gBAEf,IAAI,EAAE,0BAA0B;IAK7D,+EAA+E;IAC/E,WAAW,CAAC,IAAI,GAAE,aAA8B,GAAG,oBAAoB,GAAG,IAAI;IAW9E,uGAAuG;IACvG,YAAY,IAAI,aAAa,GAAG,OAAO,GAAG,IAAI;IAK9C,cAAc,CAAC,IAAI,GAAE,aAA8B,GAAG,MAAM;IAI5D,GAAG,CAAC,IAAI,GAAE,aAA8B,GAAG,MAAM;IAKjD,QAAQ,CAAC,IAAI,GAAE,aAA8B,GAAG,OAAO;IAIvD;;;;;;;;OAQG;IACH,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,GAAE,aAA8B,GAAG,OAAO;IAU1E,KAAK,IAAI,MAAM,GAAG,IAAI;IAMtB;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,OAAO,CAAC,IAAI,GAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAwC/E;;;;;OAKG;IACG,YAAY,IAAI,OAAO,CAAC;QAAE,YAAY,EAAE,sBAAsB,EAAE,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IAQxF,yFAAyF;IACzF,MAAM,IAAI,IAAI;YAKA,KAAK;IAmBnB,OAAO,CAAC,MAAM;CAGf"}