@crewx/sdk 0.9.0-rc.120 → 0.9.0-rc.121

package/dist/mcp-app/agent-access.d.ts

@@ -0,0 +1,14 @@
+import type { UiActionConfirmation } from '../ui-instance/types.js';
+export type McpAppAgentAccess = 'allowed' | 'approval_required' | 'denied';
+export interface McpAppAgentAccessAction {
+    readonly actionId: string;
+    readonly confirmation: UiActionConfirmation | undefined;
+    readonly backend?: {
+        readonly type: 'core';
+        readonly handler: string;
+    } | {
+        readonly type: 'skill';
+        readonly command?: readonly string[];
+    };
+}
+export declare function resolveAgentAccess(action: McpAppAgentAccessAction, modelActions?: readonly string[]): McpAppAgentAccess;

package/dist/mcp-app/apps-context.d.ts

@@ -1,5 +1,6 @@
 import type { McpAppStateDescriptor } from './types.js';
+import type { McpAppModelContext } from './model-context.js';
 export interface McpAppsContext {
     readonly rendered: string;
 }
-export declare function buildMcpAppsContext(descriptors: readonly McpAppStateDescriptor[] | undefined): McpAppsContext | undefined;
+export declare function buildMcpAppsContext(descriptors: readonly McpAppStateDescriptor[] | undefined, modelContext?: McpAppModelContext): McpAppsContext | undefined;

package/dist/mcp-app/index.d.ts

@@ -10,11 +10,15 @@ export type { CrewxAppBuiltinCatalog, CrewxAppCapability, CrewxAppCatalogOptions
 export { MCP_APP_PROJECTION_MAX_BYTES, buildMcpAppStateDescriptor, buildMcpAppStateProjections, buildTerminalMcpAppStateDescriptor, buildTerminalMcpAppStateProjections, createMcpAppToolResult, serializeMcpAppStateJson, serializeMcpAppStateXml, } from './projection.js';
 export { buildMcpAppsContext } from './apps-context.js';
 export type { McpAppsContext } from './apps-context.js';
+export { MCP_APP_MODEL_CONTEXT_MAX_ARRAY_LENGTH, MCP_APP_MODEL_CONTEXT_MAX_BYTES, MCP_APP_MODEL_CONTEXT_MAX_DEPTH, MCP_APP_MODEL_CONTEXT_MAX_STRING_LENGTH, sanitizeMcpAppModelContext, serializeMcpAppModelContextXml, } from './model-context.js';
+export type { McpAppModelContext, McpAppModelContextInput } from './model-context.js';
+export { resolveAgentAccess } from './agent-access.js';
+export type { McpAppAgentAccess, McpAppAgentAccessAction } from './agent-access.js';
 export { buildStateSetHandler, createStateSetHandler, } from './state-set.js';
 export type { StateSetHandlerBuildInput } from './state-set.js';
 export { SKILL_BACKEND_DEFAULT_TIMEOUT_MS, SKILL_BACKEND_MAX_INPUT_BYTES, SKILL_BACKEND_MAX_OUTPUT_BYTES, SKILL_BACKEND_SCHEMA_VERSION, buildSkillBackendHandler, } from './skill-backend.js';
 export type { SkillBackendExecutionPort, SkillBackendExecutionRequest, SkillBackendExecutionResponse, SkillBackendHandlerBuildInput, SkillBackendInfrastructureErrorCode, SkillBackendPayload, } from './skill-backend.js';
 export { MCP_APP_HOST_TOOL_ALLOWLIST, MCP_APP_LOCAL_RESOURCE_MIME_TYPE, MCP_APP_RESOURCE_MIME_TYPE, MCP_APP_RESOURCE_URI_PREFIX, } from './types.js';
-export type { McpAppActionDispatcherToolInput, McpAppActionToolDescriptor, McpAppActionToolInput, McpAppButtonDescriptor, McpAppButtonInput, McpAppDescriptor, McpAppDescriptorInput, McpAppInputSchema, McpAppTone, McpUiResourceCsp, McpAppRegistry, McpAppResource, McpAppServerStateInput, McpAppStateDescriptor, McpAppStateProjections, McpAppHostToolInput, McpAppHostToolName, McpAppReadToolInput, McpAppSingleActionToolInput, McpAppToolCommonInput, McpAppToolDescriptor, McpAppToolInput, McpAppToolMetadata, McpAppToolRegistration, McpAppToolResult, McpAppToolVisibility, McpAppInstanceResourceBinding, McpAppMcpResourceBinding, McpAppResourceBinding, McpAppLocalResource, McpAppLocalRegistrationInput, McpAppLocalReadToolDescriptor, McpAppLocalActionToolDescriptor, McpAppLocalToolDescriptor, McpAppLocalRegistration, McpAppBuiltinRegistration, McpAppResolvedRegistration, McpAppLocalLauncher, McpAppBuiltinLauncher, McpAppLauncher, WorkspaceAppLauncher, WorkspaceAppResolvedRegistration, McpAppWorkspaceRegistry, WorkspaceAppRegistry, McpAppWorkspaceRegistryInput, } from './types.js';
+export type { McpAppActionDispatcherToolInput, McpAppActionToolDescriptor, McpAppActionToolInput, McpAppButtonDescriptor, McpAppButtonInput, McpAppDescriptor, McpAppDescriptorInput, McpAppInputSchema, McpAppTone, McpUiResourceCsp, McpAppRegistry, McpAppResource, McpAppServerStateInput, McpAppStateDescriptor, McpAppStateProjections, McpAppHostToolInput, McpAppHostToolName, McpAppReadToolInput, McpAppSingleActionToolInput, McpAppToolCommonInput, McpAppToolDescriptor, McpAppToolInput, McpAppToolMetadata, McpAppToolRegistration, McpAppToolResult, McpAppToolVisibility, McpAppInstanceResourceBinding, McpAppMcpResourceBinding, McpAppResourceBinding, McpAppLocalResource, McpAppLocalRegistrationInput, McpAppLocalReadToolDescriptor, McpAppLocalActionToolDescriptor, McpAppLocalSingleActionToolDescriptor, McpAppLocalToolDiagnostic, McpAppLocalToolDescriptor, McpAppLocalRegistration, McpAppBuiltinRegistration, McpAppResolvedRegistration, McpAppLocalLauncher, McpAppBuiltinLauncher, McpAppLauncher, WorkspaceAppLauncher, WorkspaceAppResolvedRegistration, McpAppWorkspaceRegistry, WorkspaceAppRegistry, McpAppWorkspaceRegistryInput, } from './types.js';
 export { buildWorkspaceAppSnapshot, discoverWorkspaceAppSnapshot, reconfirmWorkspaceAppSnapshot, } from './workspace-snapshot.js';
 export type { WorkspaceAppSnapshot, WorkspaceAppSnapshotBuildOptions, WorkspaceAppSnapshotOptions, WorkspaceAppSnapshotReconfirmResult, WorkspaceAppSnapshotResource, WorkspaceAppSnapshotInitialState, WorkspaceAppInitialState, } from './workspace-snapshot.js';

package/dist/mcp-app/model-context.d.ts

@@ -0,0 +1,26 @@
+import type { JsonObject } from '../ui-instance/types.js';
+export declare const MCP_APP_MODEL_CONTEXT_MAX_BYTES: number;
+export declare const MCP_APP_MODEL_CONTEXT_MAX_STRING_LENGTH = 2048;
+export declare const MCP_APP_MODEL_CONTEXT_MAX_ARRAY_LENGTH = 200;
+export declare const MCP_APP_MODEL_CONTEXT_MAX_DEPTH = 8;
+export interface McpAppModelContextInput {
+    readonly instanceId: string;
+    readonly definitionHash: string;
+    readonly revision: number;
+    readonly content?: unknown;
+    readonly structuredContent?: unknown;
+}
+export interface McpAppModelContext {
+    readonly instanceId: string;
+    readonly definitionHash: string;
+    readonly revision: number;
+    readonly content?: readonly {
+        readonly type: 'text';
+        readonly text: string;
+    }[];
+    readonly structuredContent?: JsonObject;
+}
+export declare function sanitizeMcpAppModelContext(value: unknown): McpAppModelContext;
+export declare function serializeMcpAppModelContextXml(context: McpAppModelContext, options?: {
+    readonly stale?: boolean;
+}): string;

package/dist/mcp-app/projection.d.ts

@@ -1,10 +1,11 @@
 import type { JsonObject } from '../ui-instance/types.js';
 import type { McpAppServerStateInput, McpAppStateDescriptor, McpAppStateProjections, McpAppToolDescriptor, McpAppToolResult } from './types.js';
 export declare const MCP_APP_PROJECTION_MAX_BYTES: number;
+export declare const SENSITIVE_KEY: RegExp;
 export declare function buildMcpAppStateDescriptor(input: McpAppServerStateInput): McpAppStateDescriptor;
 export declare function buildTerminalMcpAppStateDescriptor(input: McpAppServerStateInput): McpAppStateDescriptor;
 export declare function serializeMcpAppStateJson(descriptor: McpAppStateDescriptor, dataPaths?: readonly string[]): string;
-export declare function serializeMcpAppStateXml(descriptor: McpAppStateDescriptor, focusedAiDataPaths?: readonly string[]): string;
+export declare function serializeMcpAppStateXml(descriptor: McpAppStateDescriptor): string;
 export declare function buildMcpAppStateProjections(input: McpAppServerStateInput): McpAppStateProjections;
 export declare function buildTerminalMcpAppStateProjections(input: McpAppServerStateInput): McpAppStateProjections;
 export declare function createMcpAppToolResult(tool: Pick<McpAppToolDescriptor, 'textFallback'>, options?: {

package/dist/mcp-app/types.d.ts

@@ -108,9 +108,17 @@ export interface McpAppLocalRegistrationInput {
     readonly initialStateBytes?: readonly number[];
     readonly readToolName: string;
     readonly actionToolName?: string;
+    readonly modelActions?: readonly string[];
     readonly actions: readonly {
         readonly actionId: string;
         readonly inputSchema: McpAppInputSchema;
+        readonly backend?: {
+            readonly type: 'core';
+            readonly handler: string;
+        } | {
+            readonly type: 'skill';
+            readonly command?: readonly string[];
+        };
     }[];
 }
 export interface McpAppLocalReadToolDescriptor extends McpAppToolCommonInput {
@@ -123,7 +131,23 @@ export interface McpAppLocalActionToolDescriptor extends McpAppToolCommonInput {
     readonly resourceBinding: McpAppInstanceResourceBinding;
     readonly actionIds: readonly string[];
 }
-export type McpAppLocalToolDescriptor = McpAppLocalReadToolDescriptor | McpAppLocalActionToolDescriptor;
+export interface McpAppLocalSingleActionToolDescriptor extends McpAppToolCommonInput {
+    readonly kind: 'action';
+    readonly resourceBinding: McpAppInstanceResourceBinding;
+    readonly actionId: string;
+    readonly actionIds: readonly [string];
+    readonly _meta: {
+        readonly ui: {
+            readonly visibility: readonly McpAppToolVisibility[];
+        };
+    };
+}
+export interface McpAppLocalToolDiagnostic {
+    readonly toolName: string;
+    readonly actionId: string;
+    readonly reason: 'name_too_long' | 'name_collision';
+}
+export type McpAppLocalToolDescriptor = McpAppLocalReadToolDescriptor | McpAppLocalActionToolDescriptor | McpAppLocalSingleActionToolDescriptor;
 export interface McpAppLocalRegistration {
     readonly appId: string;
     readonly name: string;
@@ -135,6 +159,7 @@ export interface McpAppLocalRegistration {
     readonly resourceBinding: McpAppInstanceResourceBinding;
     readonly resource: McpAppLocalResource;
     readonly tools: readonly McpAppLocalToolDescriptor[];
+    readonly toolDiagnostics: readonly McpAppLocalToolDiagnostic[];
 }
 export interface McpAppBuiltinRegistration {
     readonly appId: string;
@@ -273,7 +298,6 @@ export interface McpAppStateDescriptor {
     readonly status: UiInstanceStatus;
     readonly state: JsonObject;
     readonly buttons: readonly McpAppButtonDescriptor[];
-    readonly focusedAiDataPaths?: readonly string[];
 }
 export interface McpAppStateProjections {
     readonly descriptor: McpAppStateDescriptor;

package/dist/migrations/0033_thread_creator_boundary_guard.sql

@@ -0,0 +1,38 @@
+CREATE TABLE IF NOT EXISTS `thread_creator_unverified` (
+	`thread_id` text NOT NULL,
+	`created_by_task_id` text NOT NULL,
+	PRIMARY KEY(`thread_id`, `created_by_task_id`)
+);
+--> statement-breakpoint
+INSERT OR IGNORE INTO `thread_creator_unverified` (`thread_id`, `created_by_task_id`)
+SELECT `id`, `created_by_task_id`
+FROM `threads`
+WHERE `created_by_task_id` IS NOT NULL
+	AND NOT EXISTS (
+		SELECT 1
+		FROM `sqlite_master`
+		WHERE `type` = 'trigger'
+			AND `name` = 'trg_threads_creator_late_fill_guard'
+	);
+--> statement-breakpoint
+CREATE TRIGGER IF NOT EXISTS `trg_threads_creator_late_fill_guard`
+AFTER UPDATE OF `created_by_task_id` ON `threads`
+WHEN OLD.`created_by_task_id` IS NULL
+	AND NEW.`created_by_task_id` IS NOT NULL
+	AND (
+		OLD.`message_count` <> 0
+		OR EXISTS (
+			SELECT 1
+			FROM `tasks`
+			WHERE `thread_id` = OLD.`id`
+				AND `id` <> NEW.`created_by_task_id`
+		)
+	)
+BEGIN
+	UPDATE `threads`
+	SET `created_by_task_id` = NULL
+	WHERE `id` = NEW.`id`;
+END;
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS `idx_tasks_thread_creator`
+	ON `tasks` (`id`, `thread_id`, `actor_kind`, `actor_id`);

package/dist/migrations/meta/_journal.json

@@ -232,6 +232,13 @@
       "when": 1790121600000,
       "tag": "0032_ui_instance_opened_by",
       "breakpoints": true
+    },
+    {
+      "idx": 33,
+      "version": "6",
+      "when": 1790219126942,
+      "tag": "0033_thread_creator_boundary_guard",
+      "breakpoints": true
     }
   ]
 }

package/dist/node/index.d.ts

@@ -0,0 +1 @@
+export { getLocalActorId, normalizeLocalActorId } from '../utils/local-identity.js';

package/dist/node/index.js

@@ -0,0 +1,2 @@
+'use strict';var crypto=require('crypto'),i=require('fs'),p=require('os'),a=require('path');function _interopNamespace(e){if(e&&e.__esModule)return e;var n=Object.create(null);if(e){Object.keys(e).forEach(function(k){if(k!=='default'){var d=Object.getOwnPropertyDescriptor(e,k);Object.defineProperty(n,k,d.get?d:{enumerable:true,get:function(){return e[k]}});}})}n.default=e;return Object.freeze(n)}var i__namespace=/*#__PURE__*/_interopNamespace(i);var p__namespace=/*#__PURE__*/_interopNamespace(p);var a__namespace=/*#__PURE__*/_interopNamespace(a);function w(){if(process.env.CREWX_HOME){let n=a__namespace.resolve(process.env.CREWX_HOME);try{return i__namespace.realpathSync(n)}catch(t){if(t instanceof Error&&"code"in t&&t.code==="ENOENT")return n;throw t}}return process.platform!=="win32"&&process.env.XDG_CONFIG_HOME?a__namespace.join(process.env.XDG_CONFIG_HOME,"crewx"):a__namespace.join(p__namespace.homedir(),".crewx")}var x="identity.json",_=/^[a-z0-9._-]+@[a-z0-9._-]+$/,T=new Set(["system","local-service","network-service"]),d=new Map;function S(n){return n.trim().toLowerCase().replace(/[^a-z0-9._-]/g,"-").replace(/-+/g,"-").replace(/^-+|-+$/g,"")}function v(n,t){let e=n.trim();if(!e||e.endsWith("$"))return null;let r=S(e),o=t.trim().split(".",1)[0]??"",l=S(o);return !r||!l||T.has(r)?null:`${r}@${l}`}function C(n){return typeof n=="string"&&_.test(n)}function f(n){let t;try{t=i__namespace.readFileSync(n,"utf8");}catch(e){return e!==null&&typeof e=="object"&&"code"in e&&e.code==="ENOENT"?{kind:"missing"}:{kind:"failed"}}try{let e=JSON.parse(t);if(e!==null&&typeof e=="object"&&"id"in e&&C(e.id))return {kind:"valid",id:e.id}}catch{}return {kind:"invalid"}}function b(){let n=new Int32Array(new SharedArrayBuffer(Int32Array.BYTES_PER_ELEMENT));Atomics.wait(n,0,0,20);}function u(n){let t=f(n);if(t.kind==="valid")return t.id;if(t.kind==="failed")return null;b();let e=f(n);return e.kind==="valid"?e.id:null}function A(n,t){let e,r=false;try{e=i__namespace.openSync(n,"wx",384),i__namespace.writeFileSync(e,t,"utf8"),r=!0;}catch{r=false;}if(e!==void 0)try{i__namespace.closeSync(e);}catch{r=false;}return r}function O(n,t){let e;try{e=i__namespace.openSync(n,"wx",384),i__namespace.writeFileSync(e,t,"utf8");}catch(r){if(e!==void 0)try{i__namespace.closeSync(e);}catch{}return r!==null&&typeof r=="object"&&"code"in r&&r.code==="EEXIST"?"exists":"failed"}try{i__namespace.closeSync(e);}catch{return "failed"}return "created"}function R(n,t){return n!==null&&typeof n=="object"&&"code"in n&&n.code===t}function F(){if((process.env.NODE_ENV==="test"||process.env.VITEST!==void 0)&&!process.env.CREWX_HOME)return null;let n;try{n=w();}catch{return null}let t=d.get(n);if(t)return t;let e=a.join(n,x),r=f(e);if(r.kind==="valid")return d.set(n,r.id),r.id;if(r.kind==="failed")return null;if(r.kind==="invalid"){let s=u(e);return s&&d.set(n,s),s}let o;try{o=v(p__namespace.userInfo().username,p__namespace.hostname());}catch{return null}if(!o)return null;let l=`${JSON.stringify({id:o})}
+`,m=a.join(n,`.identity-${process.pid}-${crypto.randomUUID()}.tmp`);try{if(i__namespace.mkdirSync(n,{recursive:!0,mode:448}),!A(m,l))return null;let s=f(e);if(s.kind==="valid")return d.set(n,s.id),s.id;if(s.kind==="invalid"){let c=u(e);return c&&d.set(n,c),c}if(s.kind==="failed")return null;try{return i__namespace.linkSync(m,e),d.set(n,o),o}catch(c){if(R(c,"EEXIST")){let y=u(e);return y&&d.set(n,y),y}}let E=O(e,l);if(E==="created")return d.set(n,o),o;if(E==="exists"){let c=u(e);return c&&d.set(n,c),c}return null}catch{return null}finally{try{i__namespace.unlinkSync(m);}catch{}}}exports.getLocalActorId=F;exports.normalizeLocalActorId=v;