@crewx/sdk 0.9.0-rc.124 → 0.9.0-rc.126

package/dist/mcp-app/agent-access.d.ts

@@ -1,4 +1,6 @@
 import type { UiActionConfirmation } from '../ui-instance/types.js';
+import type { UiDefinition } from '../ui-instance/types.js';
+import type { ProductAppBundleProvenance } from './discovery.js';
 export type McpAppAgentAccess = 'allowed' | 'approval_required' | 'denied';
 export interface McpAppAgentAccessAction {
     readonly actionId: string;
@@ -11,4 +13,13 @@ export interface McpAppAgentAccessAction {
         readonly command?: readonly string[];
     };
 }
-export declare function resolveAgentAccess(action: McpAppAgentAccessAction, modelActions?: readonly string[]): McpAppAgentAccess;
+export interface McpAppVerifiedBundleAccessContext {
+    readonly appId: string;
+    readonly definition: UiDefinition;
+    readonly provenance: ProductAppBundleProvenance;
+}
+export declare function resolveAgentAccess(action: McpAppAgentAccessAction, modelActions?: readonly string[], bundle?: McpAppVerifiedBundleAccessContext): McpAppAgentAccess;
+export declare function listMcpAppAgentActions(actions: readonly McpAppAgentAccessAction[], modelActions?: readonly string[], bundle?: McpAppVerifiedBundleAccessContext): readonly {
+    readonly actionId: string;
+    readonly access: McpAppAgentAccess;
+}[];

package/dist/mcp-app/bundle-provenance.d.ts

@@ -0,0 +1,2 @@
+export declare function markVerifiedProductAppBundleProvenance<T extends object>(value: T): T;
+export declare function isVerifiedProductAppBundleProvenance(value: unknown): value is object;

package/dist/mcp-app/dev-checks.d.ts

@@ -0,0 +1,27 @@
+export type AppDevCheckItem = {
+    readonly rule: 'manifest' | 'external_resource' | 'output_unsafe_string' | 'output_invalid' | 'output_size' | 'call_duration';
+    readonly severity: 'error' | 'warning' | 'ok';
+    readonly code: string;
+    readonly where: string;
+    readonly detail?: Record<string, string | number>;
+};
+export type ExternalResourceKind = 'script' | 'style' | 'image' | 'font' | 'media' | 'frame' | 'object' | 'form' | 'navigation' | 'css' | 'script_network';
+export interface ExternalResourceFinding {
+    readonly line: number;
+    readonly column: number;
+    readonly url: string;
+    readonly directive: string;
+    readonly kind: ExternalResourceKind;
+}
+export interface InspectSkillBackendOutputOptions {
+    readonly actionId: string;
+    readonly dataPaths?: readonly string[];
+    readonly durationMs?: number;
+    readonly timedOut?: boolean;
+}
+export interface ScanExternalResourcesOptions {
+    readonly csp: string;
+}
+export declare function inspectSkillBackendOutput(stdoutText: string, options: InspectSkillBackendOutputOptions): AppDevCheckItem[];
+export declare function scanExternalResources(html: string, options: ScanExternalResourcesOptions): ExternalResourceFinding[];
+export declare function externalResourceCheckItems(entryRelativePath: string, findings: readonly ExternalResourceFinding[]): AppDevCheckItem[];

package/dist/mcp-app/discovery.d.ts

@@ -1,14 +1,50 @@
+import type { UiDefinitionLineageEntry } from '../ui-instance/lineage.js';
 import type { JsonObject, UiDefinition } from '../ui-instance/types.js';
 import type { UiPluginHandlerMetadata, UiPluginManifestV2, UiPluginNormalizedManifestV2 } from '../ui-plugin/types.js';
 import { AppDiscoveryFsError, NodeAppDiscoveryFs, NodeAppDiscoveryFsAdapter, defaultAppDiscoveryFs, defaultNodeAppDiscoveryFs, type AppDiscoveryFsErrorCode } from './node-app-discovery-fs.js';
 import type { McpAppRegistry } from './types.js';
 export type WorkspaceAppSource = 'apps' | 'skills';
+export type WorkspaceAppDiscoverySource = WorkspaceAppSource | 'bundled';
+export interface ProductAppBundleInput {
+    readonly root: string;
+    readonly expectedIndexHash: string;
+}
+export interface ProductAppBundleProvenance {
+    readonly kind: 'bundled';
+    readonly indexHash: string;
+    readonly packageDir: string;
+    readonly appId: string;
+    readonly definitionId: string;
+    readonly version: number;
+    readonly definitionHash: string;
+    readonly files: readonly ProductAppBundleFileHash[];
+}
+export interface ProductAppBundleFileHash {
+    readonly path: string;
+    readonly sha256: string;
+}
+export interface ProductAppBundleDefinitionIdentity {
+    readonly id: string;
+    readonly version: number;
+    readonly hash: string;
+}
+export interface ProductAppBundlePackageIndex {
+    readonly packageDir: string;
+    readonly appId: string;
+    readonly definition: ProductAppBundleDefinitionIdentity;
+    readonly lineage: readonly UiDefinitionLineageEntry[];
+    readonly files: readonly ProductAppBundleFileHash[];
+}
+export interface ProductAppBundleIndex {
+    readonly version: 1;
+    readonly packages: readonly ProductAppBundlePackageIndex[];
+}
 export type WorkspaceAppDiscoveryIncompleteReason = 'time_limit';
-export type WorkspaceAppDiagnosticCode = 'MANIFEST_MISSING' | 'MANIFEST_INVALID' | 'ENTRY_INVALID' | 'INITIAL_STATE_INVALID' | 'DUPLICATE_ID' | 'RESERVED_ID' | 'PATH_ESCAPED' | 'LIMIT_EXCEEDED' | 'EXEC_DENIED';
+export type WorkspaceAppDiagnosticCode = 'MANIFEST_MISSING' | 'MANIFEST_INVALID' | 'ENTRY_INVALID' | 'INITIAL_STATE_INVALID' | 'DUPLICATE_ID' | 'RESERVED_ID' | 'BUNDLE_INTEGRITY' | 'LINEAGE_INVALID' | 'LINEAGE_STALE' | 'PATH_ESCAPED' | 'LIMIT_EXCEEDED' | 'EXEC_DENIED';
 export interface WorkspaceAppDiagnostic {
     readonly code: WorkspaceAppDiagnosticCode;
     readonly pluginId?: string;
-    readonly source: WorkspaceAppSource;
+    readonly source: WorkspaceAppDiscoverySource;
     readonly relativePath: string;
 }
 export type McpAppDiscoveryDiagnostic = WorkspaceAppDiagnostic;
@@ -46,12 +82,14 @@ export interface WorkspaceAppDiscoveryOptions {
     readonly reservedAppIds?: Iterable<string>;
     readonly reservedDefinitionIds?: Iterable<string>;
     readonly reservedToolNames?: Iterable<string>;
+    readonly productBundle?: ProductAppBundleInput;
 }
 export interface WorkspaceAppToolNames {
     readonly read: string;
     readonly action?: string;
 }
 export interface WorkspaceAppResourceSnapshot {
+    readonly provenance?: ProductAppBundleProvenance;
     readonly entry: {
         readonly path: 'ui/index.html';
         readonly hash: string;
@@ -63,12 +101,11 @@ export interface WorkspaceAppResourceSnapshot {
         readonly bytes: readonly number[];
     };
 }
-export interface WorkspaceAppCandidate {
+interface WorkspaceAppCandidateBase {
     readonly appId: string;
     readonly pluginId: string;
     readonly definitionId: string;
     readonly version: number;
-    readonly source: WorkspaceAppSource;
     readonly relativePath: string;
     readonly manifest: UiPluginManifestV2;
     readonly normalized: UiPluginNormalizedManifestV2;
@@ -88,11 +125,21 @@ export interface WorkspaceAppCandidate {
     readonly sourceHash: string;
     readonly toolNames: WorkspaceAppToolNames;
 }
+export type WorkspaceAppCandidate = WorkspaceAppCandidateBase & ({
+    readonly source: WorkspaceAppSource;
+    readonly provenance?: never;
+    readonly lineage?: never;
+} | {
+    readonly source?: never;
+    readonly provenance: ProductAppBundleProvenance;
+    readonly lineage: readonly UiDefinitionLineageEntry[];
+});
 export interface WorkspaceAppDiscoveryResult {
     readonly apps: readonly WorkspaceAppCandidate[];
     readonly diagnostics: readonly WorkspaceAppDiagnostic[];
     readonly complete: boolean;
     readonly incompleteReason?: WorkspaceAppDiscoveryIncompleteReason;
+    readonly productBundleIndexHash?: string;
     readonly candidates?: readonly WorkspaceAppCandidate[];
 }
 export declare const WORKSPACE_APP_TOOL_PREFIX = "crewx_local_app_";

package/dist/mcp-app/index.d.ts

@@ -2,23 +2,25 @@ export type { McpAppContractErrorCode } from './errors.js';
 export { McpAppContractError } from './errors.js';
 export { INSTALLED_APP_ENTRY, InstalledAppRefError, buildInstalledAppRef, validateInstalledAppRef, } from './installed-app-ref.js';
 export type { BuildInstalledAppRefInput, InstalledAppPackageFile, InstalledAppRef, InstalledAppRefErrorCode, } from './installed-app-ref.js';
-export { MAX_HTML_LENGTH, createMcpAppRegistry, createBuiltinMcpAppRegistry, buildMcpAppLocalRegistration, createMcpAppLocalRegistration, registerLocalMcpApp, createMcpAppWorkspaceRegistry, createWorkspaceAppRegistry, createWorkspaceMcpAppRegistry, registerMcpApp, resolveMcpAppResource, resolveLocalMcpAppResource, requireMcpAppResource, toMcpAppToolRegistration, } from './registry.js';
+export { MAX_HTML_LENGTH, createMcpAppRegistry, createBuiltinMcpAppRegistry, buildMcpAppLocalRegistration, createMcpAppLocalRegistration, registerLocalMcpApp, createMcpAppWorkspaceRegistry, createWorkspaceAppRegistry, createWorkspaceMcpAppRegistry, registerMcpApp, resolveMcpAppResource, resolveLocalMcpAppResource, requireMcpAppResource, toMcpAppToolRegistration, makeUiUri, buildMcpAppBundleRegistrationInput, buildMcpAppBundleAgentActionDescriptors, resolveMcpAppFixedResultCall, } from './registry.js';
 export { AppDiscoveryFsError, NodeAppDiscoveryFs, NodeAppDiscoveryFsAdapter, defaultAppDiscoveryFs, defaultNodeAppDiscoveryFs, deriveWorkspaceAppToolName, deriveWorkspaceAppToolNames, discoverWorkspaceAppCandidates, discoverWorkspaceApps, LOCAL_APP_TOOL_PREFIX, MCP_APP_WORKSPACE_TOOL_PREFIX, scanWorkspaceApps, WORKSPACE_APP_TOOL_PREFIX, } from './discovery.js';
-export type { AppDiscoveryBytes, AppDiscoveryDiagnostic, AppDiscoveryDirectoryEntry, AppDiscoveryDirectoryEntryKind, AppDiscoveryDirectoryListing, AppDiscoveryFileSystem, AppDiscoveryFsErrorCode, AppDiscoveryMaybePromise, WorkspaceAppDiscoveryOptions as AppDiscoveryOptions, McpAppDiscoveryDiagnostic, WorkspaceAppBuiltinCatalog, WorkspaceAppCandidate, WorkspaceAppDiscoveryIncompleteReason, WorkspaceAppDiscoveryOptions, WorkspaceAppDiscoveryResult, WorkspaceAppDiagnostic, WorkspaceAppDiagnosticCode, WorkspaceAppResourceSnapshot, WorkspaceAppReservedCatalog, WorkspaceAppSource, WorkspaceAppToolNames, } from './discovery.js';
+export type { AppDiscoveryBytes, AppDiscoveryDiagnostic, AppDiscoveryDirectoryEntry, AppDiscoveryDirectoryEntryKind, AppDiscoveryDirectoryListing, AppDiscoveryFileSystem, AppDiscoveryFsErrorCode, AppDiscoveryMaybePromise, WorkspaceAppDiscoveryOptions as AppDiscoveryOptions, McpAppDiscoveryDiagnostic, WorkspaceAppBuiltinCatalog, WorkspaceAppCandidate, WorkspaceAppDiscoveryIncompleteReason, WorkspaceAppDiscoveryOptions, WorkspaceAppDiscoveryResult, WorkspaceAppDiagnostic, WorkspaceAppDiagnosticCode, WorkspaceAppDiscoverySource, WorkspaceAppResourceSnapshot, WorkspaceAppReservedCatalog, WorkspaceAppSource, WorkspaceAppToolNames, ProductAppBundleDefinitionIdentity, ProductAppBundleFileHash, ProductAppBundleIndex, ProductAppBundleInput, ProductAppBundlePackageIndex, ProductAppBundleProvenance, } from './discovery.js';
 export { createWorkspaceAppCatalog, discoverWorkspaceAppCatalog, hashAppDefinition, hashCrewxAppDefinition, listWorkspaceApps, } from './catalog.js';
 export type { CrewxAppBuiltinCatalog, CrewxAppCapability, CrewxAppCatalogOptions, CrewxAppCatalogResult, CrewxAppDefinitionHashInput, CrewxAppDefinitionSummary, CrewxAppDiagnostic, CrewxAppDiagnosticCode, CrewxAppDiagnosticSource, CrewxAppInstalledProjection, CrewxAppLocalDefinitionRef, CrewxAppOrigin, CrewxAppOwnership, CrewxAppShareability, CrewxAppSharingAvailability, CrewxAppSummary, } from './types.js';
-export { MCP_APP_PROJECTION_MAX_BYTES, buildMcpAppStateDescriptor, buildMcpAppStateProjections, buildTerminalMcpAppStateDescriptor, buildTerminalMcpAppStateProjections, createMcpAppToolResult, serializeMcpAppStateJson, serializeMcpAppStateXml, } from './projection.js';
+export { MCP_APP_PROJECTION_MAX_BYTES, buildMcpAppStateDescriptor, buildMcpAppStateProjections, buildTerminalMcpAppStateDescriptor, buildTerminalMcpAppStateProjections, createMcpAppToolResult, projectMcpAppSummaryState, serializeMcpAppStateJson, serializeMcpAppStateXml, } from './projection.js';
 export { buildMcpAppsContext } from './apps-context.js';
 export type { McpAppsContext } from './apps-context.js';
 export { MCP_APP_MODEL_CONTEXT_MAX_ARRAY_LENGTH, MCP_APP_MODEL_CONTEXT_MAX_BYTES, MCP_APP_MODEL_CONTEXT_MAX_DEPTH, MCP_APP_MODEL_CONTEXT_MAX_STRING_LENGTH, sanitizeMcpAppModelContext, serializeMcpAppModelContextXml, } from './model-context.js';
 export type { McpAppModelContext, McpAppModelContextInput } from './model-context.js';
-export { resolveAgentAccess } from './agent-access.js';
-export type { McpAppAgentAccess, McpAppAgentAccessAction } from './agent-access.js';
+export { resolveAgentAccess, listMcpAppAgentActions } from './agent-access.js';
+export type { McpAppAgentAccess, McpAppAgentAccessAction, McpAppVerifiedBundleAccessContext } from './agent-access.js';
 export { buildStateSetHandler, createStateSetHandler, } from './state-set.js';
 export type { StateSetHandlerBuildInput } from './state-set.js';
-export { SKILL_BACKEND_DEFAULT_TIMEOUT_MS, SKILL_BACKEND_MAX_INPUT_BYTES, SKILL_BACKEND_MAX_OUTPUT_BYTES, SKILL_BACKEND_SCHEMA_VERSION, buildSkillBackendHandler, } from './skill-backend.js';
-export type { SkillBackendExecutionPort, SkillBackendExecutionRequest, SkillBackendExecutionResponse, SkillBackendHandlerBuildInput, SkillBackendInfrastructureErrorCode, SkillBackendPayload, } from './skill-backend.js';
+export { SKILL_BACKEND_DEFAULT_TIMEOUT_MS, SKILL_BACKEND_INHERITED_ENV_ALLOWLIST, SKILL_BACKEND_MAX_INPUT_BYTES, SKILL_BACKEND_MAX_OUTPUT_BYTES, SKILL_BACKEND_SCHEMA_VERSION, buildSkillBackendChildEnvironment, buildSkillBackendHandler, buildVerifiedBundleSkillBackendHandler, } from './skill-backend.js';
+export type { SkillBackendChildEnvironment, SkillBackendExecutionPort, SkillBackendExecutionRequest, SkillBackendExecutionResponse, SkillBackendHandlerBuildInput, SkillBackendInfrastructureErrorCode, SkillBackendPayload, VerifiedBundleSkillBackendBuildInput, VerifiedBundleSkillRunnerPort, VerifiedBundleSkillSpawnRequest, } from './skill-backend.js';
+export { externalResourceCheckItems, inspectSkillBackendOutput, scanExternalResources, } from './dev-checks.js';
+export type { AppDevCheckItem, ExternalResourceFinding, ExternalResourceKind, InspectSkillBackendOutputOptions, ScanExternalResourcesOptions, } from './dev-checks.js';
 export { MCP_APP_HOST_TOOL_ALLOWLIST, MCP_APP_LOCAL_RESOURCE_MIME_TYPE, MCP_APP_RESOURCE_MIME_TYPE, MCP_APP_RESOURCE_URI_PREFIX, } from './types.js';
-export type { McpAppActionDispatcherToolInput, McpAppActionToolDescriptor, McpAppActionToolInput, McpAppButtonDescriptor, McpAppButtonInput, McpAppDescriptor, McpAppDescriptorInput, McpAppInputSchema, McpAppTone, McpUiResourceCsp, McpAppRegistry, McpAppResource, McpAppServerStateInput, McpAppStateDescriptor, McpAppStateProjections, McpAppHostToolInput, McpAppHostToolName, McpAppReadToolInput, McpAppSingleActionToolInput, McpAppToolCommonInput, McpAppToolDescriptor, McpAppToolInput, McpAppToolMetadata, McpAppToolRegistration, McpAppToolResult, McpAppToolVisibility, McpAppInstanceResourceBinding, McpAppMcpResourceBinding, McpAppResourceBinding, McpAppLocalResource, McpAppLocalRegistrationInput, McpAppLocalReadToolDescriptor, McpAppLocalActionToolDescriptor, McpAppLocalSingleActionToolDescriptor, McpAppLocalToolDiagnostic, McpAppLocalToolDescriptor, McpAppLocalRegistration, McpAppBuiltinRegistration, McpAppResolvedRegistration, McpAppLocalLauncher, McpAppBuiltinLauncher, McpAppLauncher, WorkspaceAppLauncher, WorkspaceAppResolvedRegistration, McpAppWorkspaceRegistry, WorkspaceAppRegistry, McpAppWorkspaceRegistryInput, } from './types.js';
+export type { McpAppActionDispatcherToolInput, McpAppActionToolDescriptor, McpAppActionToolInput, McpAppButtonDescriptor, McpAppButtonInput, McpAppDescriptor, McpAppDescriptorInput, McpAppInputSchema, McpAppTone, McpUiResourceCsp, McpAppRegistry, McpAppResource, McpAppServerStateInput, McpAppStateDescriptor, McpAppStateProjections, McpAppHostToolInput, McpAppHostToolName, McpAppReadToolInput, McpAppSingleActionToolInput, McpAppToolCommonInput, McpAppToolDescriptor, McpAppFixedResult, McpAppFixedResultCall, McpAppFixedResultInvalidParams, McpAppFixedResultResolution, McpAppFixedResultUnavailable, McpAppToolInput, McpAppToolMetadata, McpAppToolRegistration, McpAppToolResult, McpAppToolVisibility, McpAppInstanceResourceBinding, McpAppMcpResourceBinding, McpAppResourceBinding, McpAppLocalResource, McpAppLocalRegistrationInput, McpAppLocalReadToolDescriptor, McpAppLocalActionToolDescriptor, McpAppLocalSingleActionToolDescriptor, McpAppLocalToolDiagnostic, McpAppLocalToolDescriptor, McpAppLocalRegistration, McpAppBuiltinRegistration, McpAppResolvedRegistration, McpAppLocalLauncher, McpAppBuiltinLauncher, McpAppLauncher, WorkspaceAppLauncher, WorkspaceAppResolvedRegistration, McpAppWorkspaceRegistry, WorkspaceAppRegistry, McpAppWorkspaceRegistryInput, McpAppRegistryOptions, McpAppBundleHostToolTemplate, McpAppBundleAgentActionDescriptor, } from './types.js';
 export { buildWorkspaceAppSnapshot, discoverWorkspaceAppSnapshot, reconfirmWorkspaceAppSnapshot, } from './workspace-snapshot.js';
 export type { WorkspaceAppSnapshot, WorkspaceAppSnapshotBuildOptions, WorkspaceAppSnapshotOptions, WorkspaceAppSnapshotReconfirmResult, WorkspaceAppSnapshotResource, WorkspaceAppSnapshotInitialState, WorkspaceAppInitialState, } from './workspace-snapshot.js';

package/dist/mcp-app/projection.d.ts

@@ -1,7 +1,8 @@
-import type { JsonObject } from '../ui-instance/types.js';
+import type { JsonObject, UiDefinition } from '../ui-instance/types.js';
 import type { McpAppServerStateInput, McpAppStateDescriptor, McpAppStateProjections, McpAppToolDescriptor, McpAppToolResult } from './types.js';
 export declare const MCP_APP_PROJECTION_MAX_BYTES: number;
 export declare const SENSITIVE_KEY: RegExp;
+export declare function projectMcpAppSummaryState(state: unknown, definition: UiDefinition): JsonObject;
 export declare function buildMcpAppStateDescriptor(input: McpAppServerStateInput): McpAppStateDescriptor;
 export declare function buildTerminalMcpAppStateDescriptor(input: McpAppServerStateInput): McpAppStateDescriptor;
 export declare function serializeMcpAppStateJson(descriptor: McpAppStateDescriptor, dataPaths?: readonly string[]): string;

package/dist/mcp-app/registry.d.ts

@@ -1,6 +1,13 @@
-import { type McpAppDescriptor, type McpAppDescriptorInput, type McpAppInputSchema, type McpAppLocalRegistration, type McpAppLocalRegistrationInput, type McpAppLocalResource, type McpAppRegistry, type McpAppResource, type McpAppWorkspaceRegistry, type McpAppWorkspaceRegistryInput, type McpAppToolDescriptor, type McpAppToolRegistration } from './types.js';
+import type { WorkspaceAppCandidate } from './discovery.js';
+import { type McpAppDescriptor, type McpAppDescriptorInput, type McpAppInputSchema, type McpAppLocalRegistration, type McpAppLocalRegistrationInput, type McpAppLocalResource, type McpAppRegistry, type McpAppResource, type McpAppWorkspaceRegistry, type McpAppWorkspaceRegistryInput, type McpAppToolDescriptor, type McpAppToolRegistration, type McpAppRegistryOptions, type McpAppBundleHostToolTemplate, type McpAppFixedResultResolution, type McpAppBundleAgentActionDescriptor } from './types.js';
 export declare const MAX_HTML_LENGTH: number;
-export declare function createMcpAppRegistry(): McpAppRegistry;
+export declare function resolveMcpAppFixedResultCall(tool: McpAppToolDescriptor, args: unknown): McpAppFixedResultResolution;
+export declare function buildMcpAppBundleRegistrationInput(candidate: WorkspaceAppCandidate, options?: {
+    readonly hostTools?: readonly McpAppBundleHostToolTemplate[];
+}): McpAppDescriptorInput;
+export declare function buildMcpAppBundleAgentActionDescriptors(candidate: WorkspaceAppCandidate): readonly McpAppBundleAgentActionDescriptor[];
+export declare function makeUiUri(appId: string, entry: string | Uint8Array | readonly number[]): string;
+export declare function createMcpAppRegistry(options?: McpAppRegistryOptions): McpAppRegistry;
 export declare function createBuiltinMcpAppRegistry(): McpAppRegistry;
 export declare function registerMcpApp(registry: McpAppRegistry, input: McpAppDescriptorInput): McpAppDescriptor;
 export declare function resolveMcpAppResource(registry: McpAppRegistry, uri: string): McpAppResource | null;

package/dist/mcp-app/skill-backend.d.ts

@@ -1,10 +1,11 @@
 import type { JsonObject, UiExternalActionHandlerRegistration } from '../ui-instance/types.js';
 import type { UiPluginNormalizedManifestV2 } from '../ui-plugin/types.js';
-import type { WorkspaceAppSource } from './discovery.js';
+import type { WorkspaceAppCandidate, WorkspaceAppSource } from './discovery.js';
 export declare const SKILL_BACKEND_SCHEMA_VERSION: 1;
-export declare const SKILL_BACKEND_MAX_INPUT_BYTES: number;
-export declare const SKILL_BACKEND_MAX_OUTPUT_BYTES: number;
+export declare const SKILL_BACKEND_MAX_INPUT_BYTES = 524288;
+export declare const SKILL_BACKEND_MAX_OUTPUT_BYTES = 524288;
 export declare const SKILL_BACKEND_DEFAULT_TIMEOUT_MS = 15000;
+export declare const SKILL_BACKEND_INHERITED_ENV_ALLOWLIST: readonly ["CREWX_HOME", "CREWX_DB", "XDG_CONFIG_HOME"];
 export type SkillBackendInfrastructureErrorCode = 'EXEC_DENIED' | 'EXEC_TIMEOUT' | 'EXEC_OUTPUT_INVALID' | 'EXECUTION_FAILED' | 'ACTION_IN_FLIGHT' | 'INPUT_INVALID';
 export interface SkillBackendPayload {
     readonly schemaVersion: typeof SKILL_BACKEND_SCHEMA_VERSION;
@@ -22,6 +23,9 @@ export type SkillBackendExecutionResponse = {
     readonly result?: JsonObject;
 };
 export interface SkillBackendExecutionRequest {
+    readonly requestId?: string;
+    readonly reservationNowMs?: number;
+    readonly actorKind?: 'user' | 'agent';
     readonly instanceId: string;
     readonly appId: string;
     readonly definitionId: string;
@@ -36,6 +40,38 @@ export interface SkillBackendExecutionRequest {
 export interface SkillBackendExecutionPort {
     execute(request: SkillBackendExecutionRequest): PromiseLike<SkillBackendExecutionResponse>;
 }
+export interface SkillBackendChildEnvironment {
+    readonly CREWX_APP_REQUEST_ID: string;
+    readonly CREWX_APP_NOW_MS: string;
+    readonly CREWX_APP_ACTOR_KIND: 'user' | 'agent';
+}
+export declare function buildSkillBackendChildEnvironment(request: Pick<SkillBackendExecutionRequest, 'requestId' | 'reservationNowMs' | 'actorKind'>): SkillBackendChildEnvironment;
+export interface VerifiedBundleSkillSpawnRequest {
+    readonly appId: string;
+    readonly packageDir: string;
+    readonly packageCwd: string;
+    readonly executableRelativePath: string;
+    readonly command: readonly string[];
+    readonly payload: SkillBackendPayload;
+    readonly childEnvironment: SkillBackendChildEnvironment;
+    readonly inheritedEnvAllowlist: typeof SKILL_BACKEND_INHERITED_ENV_ALLOWLIST;
+    readonly requestId: string;
+}
+export interface VerifiedBundleSkillRunnerPort {
+    hashExecutable(input: {
+        readonly packageCwd: string;
+        readonly executableRelativePath: string;
+    }): PromiseLike<string>;
+    spawn(input: VerifiedBundleSkillSpawnRequest): PromiseLike<SkillBackendExecutionResponse>;
+}
+export interface VerifiedBundleSkillBackendBuildInput {
+    readonly normalized: UiPluginNormalizedManifestV2;
+    readonly actionId: string;
+    readonly candidate: WorkspaceAppCandidate;
+    readonly packageCwd: string;
+    readonly executableRelativePath: string;
+    readonly runner: VerifiedBundleSkillRunnerPort;
+}
 export interface SkillBackendHandlerBuildInput {
     readonly normalized: UiPluginNormalizedManifestV2;
     readonly actionId: string;
@@ -46,3 +82,4 @@ export interface SkillBackendHandlerBuildInput {
 }
 export declare function buildSkillBackendHandler(normalized: UiPluginNormalizedManifestV2, actionId: string, source: WorkspaceAppSource, relativePath: string, execute: SkillBackendExecutionPort): UiExternalActionHandlerRegistration | undefined;
 export declare function buildSkillBackendHandler(input: SkillBackendHandlerBuildInput): UiExternalActionHandlerRegistration | undefined;
+export declare function buildVerifiedBundleSkillBackendHandler(input: VerifiedBundleSkillBackendBuildInput): UiExternalActionHandlerRegistration | undefined;

package/dist/mcp-app/types.d.ts

@@ -1,5 +1,5 @@
 import type { JsonObject, UiDefinition, UiDefinitionRef, UiDefinitionDisplayMode, UiDefinitionUsage, UiInstance, UiInstanceStatus, UiActionConfirmation, UiActionHandlerRegistration } from '../ui-instance/types.js';
-import type { AppDiscoveryFileSystem } from './discovery.js';
+import type { AppDiscoveryFileSystem, ProductAppBundleInput, ProductAppBundleProvenance } from './discovery.js';
 export declare const MCP_APP_RESOURCE_MIME_TYPE: "text/html;profile=mcp-app";
 export declare const MCP_APP_RESOURCE_URI_PREFIX = "ui://crewx/";
 export type McpAppToolVisibility = 'model' | 'app';
@@ -23,6 +23,11 @@ export interface McpAppToolCommonInput {
 export interface McpAppReadToolInput extends McpAppToolCommonInput {
     readonly kind: 'read';
     readonly actionId?: never;
+    readonly fixedResult?: McpAppFixedResult;
+}
+export interface McpAppFixedResult {
+    readonly structuredContent: JsonObject;
+    readonly argsPolicy: 'empty-only' | 'ignore';
 }
 export interface McpAppSingleActionToolInput extends McpAppToolCommonInput {
     readonly kind: 'action';
@@ -41,6 +46,8 @@ export type McpAppActionToolDescriptor = (Omit<McpAppSingleActionToolInput, 'act
     readonly actionIds: readonly string[];
 });
 type McpAppToolDescriptorMetadata = {
+    readonly appId?: string;
+    readonly provenance?: ProductAppBundleProvenance;
     readonly resourceUri: string;
     readonly _meta: McpAppToolMetadata;
 };
@@ -62,6 +69,8 @@ export interface McpAppDescriptorInput {
     readonly csp?: McpUiResourceCsp;
     readonly tools: readonly McpAppToolInput[];
     readonly definition?: UiDefinition;
+    readonly provenance?: ProductAppBundleProvenance;
+    readonly entryBytes?: Uint8Array | readonly number[];
 }
 export interface McpAppResource {
     readonly uri: string;
@@ -184,6 +193,7 @@ export interface McpAppLocalLauncher {
     readonly tone?: McpAppTone;
     readonly builtinOnly: false;
     readonly definition: UiDefinitionRef;
+    readonly provenance?: ProductAppBundleProvenance;
     readonly entryHash: string;
     readonly resourceBinding: McpAppInstanceResourceBinding;
     readonly tools: readonly McpAppLocalToolDescriptor[];
@@ -255,8 +265,22 @@ export interface McpAppDescriptor {
     readonly uiUri: string;
     readonly html: string;
     readonly definition?: UiDefinition;
+    readonly provenance?: ProductAppBundleProvenance;
     readonly tools: readonly McpAppToolDescriptor[];
 }
+export interface McpAppFixedResultCall {
+    readonly kind: 'result';
+    readonly result: McpAppToolResult;
+}
+export interface McpAppFixedResultInvalidParams {
+    readonly kind: 'invalid_params';
+    readonly code: 'INVALID_PARAMS';
+    readonly message: string;
+}
+export interface McpAppFixedResultUnavailable {
+    readonly kind: 'unavailable';
+}
+export type McpAppFixedResultResolution = McpAppFixedResultCall | McpAppFixedResultInvalidParams | McpAppFixedResultUnavailable;
 export interface McpAppToolResult {
     readonly content: readonly [{
         readonly type: 'text';
@@ -328,6 +352,29 @@ export interface McpAppRegistry {
     resolveMcpAppResource(uri: string): McpAppResource | null;
     requireMcpAppResource(uri: string): McpAppResource;
 }
+export interface McpAppRegistryOptions {
+    readonly reservedToolNames?: Iterable<string>;
+}
+export interface McpAppBundleHostToolTemplate {
+    readonly capability: string;
+    readonly description: string;
+    readonly inputSchema: McpAppInputSchema;
+    readonly textFallback: string;
+}
+export interface McpAppBundleAgentActionDescriptor {
+    readonly appId: string;
+    readonly provenance: ProductAppBundleProvenance;
+    readonly name: string;
+    readonly description: string;
+    readonly inputSchema: McpAppInputSchema;
+    readonly textFallback: string;
+    readonly kind: 'action';
+    readonly actionId: string;
+    readonly access: 'allowed' | 'approval_required' | 'denied';
+    readonly visibility: readonly McpAppToolVisibility[];
+    readonly resourceUri: string;
+    readonly _meta: McpAppToolMetadata;
+}
 export type CrewxAppCapability = 'screen' | 'skill';
 export type CrewxAppOrigin = 'local' | 'installed' | 'builtin';
 export type CrewxAppOwnership = 'mine' | 'external' | 'unknown';
@@ -363,9 +410,10 @@ export interface CrewxAppSummary {
     readonly marketplaceContentId?: string;
     readonly slug?: string;
     readonly definitionHash: string;
+    readonly provenance?: ProductAppBundleProvenance;
 }
-export type CrewxAppDiagnosticCode = 'MANIFEST_MISSING' | 'MANIFEST_INVALID' | 'ENTRY_INVALID' | 'INITIAL_STATE_INVALID' | 'DUPLICATE_ID' | 'RESERVED_ID' | 'PATH_ESCAPED' | 'LIMIT_EXCEEDED' | 'EXEC_DENIED' | 'SKILL_INVALID' | 'SKILL_READ_FAILED' | 'INSTALLED_MISSING' | 'INSTALLED_CONTENT_ID_MISSING' | 'INSTALLED_IDENTITY_MISMATCH' | 'BUILTIN_INVALID';
-export type CrewxAppDiagnosticSource = 'apps' | 'skills' | 'node_modules' | 'builtin' | 'installed';
+export type CrewxAppDiagnosticCode = 'MANIFEST_MISSING' | 'MANIFEST_INVALID' | 'ENTRY_INVALID' | 'INITIAL_STATE_INVALID' | 'DUPLICATE_ID' | 'RESERVED_ID' | 'BUNDLE_INTEGRITY' | 'LINEAGE_INVALID' | 'LINEAGE_STALE' | 'PATH_ESCAPED' | 'LIMIT_EXCEEDED' | 'EXEC_DENIED' | 'SKILL_INVALID' | 'SKILL_READ_FAILED' | 'INSTALLED_MISSING' | 'INSTALLED_CONTENT_ID_MISSING' | 'INSTALLED_IDENTITY_MISMATCH' | 'BUILTIN_INVALID';
+export type CrewxAppDiagnosticSource = 'apps' | 'skills' | 'bundled' | 'node_modules' | 'builtin' | 'installed';
 export interface CrewxAppDiagnostic {
     readonly code: CrewxAppDiagnosticCode;
     readonly source: CrewxAppDiagnosticSource;
@@ -384,6 +432,7 @@ export interface CrewxAppInstalledProjection {
 export type CrewxAppBuiltinCatalog = Pick<McpAppRegistry, 'listMcpApps' | 'listMcpAppTools'>;
 export interface CrewxAppCatalogOptions {
     readonly filesystem?: AppDiscoveryFileSystem;
+    readonly productBundle?: ProductAppBundleInput;
     readonly builtinCatalog?: CrewxAppBuiltinCatalog;
     readonly installed?: readonly CrewxAppInstalledProjection[];
 }

package/dist/mcp-app/workspace-snapshot.d.ts

@@ -1,11 +1,12 @@
-import { type AppDiscoveryFileSystem, type WorkspaceAppDiscoveryIncompleteReason, type WorkspaceAppDiagnostic, type WorkspaceAppDiscoveryOptions, type WorkspaceAppDiscoveryResult, type WorkspaceAppSource } from './discovery.js';
+import { type AppDiscoveryFileSystem, type WorkspaceAppDiscoveryIncompleteReason, type WorkspaceAppDiagnostic, type WorkspaceAppDiscoveryOptions, type WorkspaceAppDiscoveryResult, type WorkspaceAppSource, type ProductAppBundleProvenance } from './discovery.js';
 import { type SkillBackendExecutionPort } from './skill-backend.js';
 import type { JsonObject, UiActionHandlerRegistration, UiDefinition, UiDefinitionRef } from '../ui-instance/types.js';
 import type { McpAppLauncher, McpAppLocalResource, McpAppRegistry, McpAppWorkspaceRegistry } from './types.js';
 export interface WorkspaceAppSnapshotResource extends McpAppLocalResource {
     readonly appId: string;
     readonly definition: UiDefinitionRef;
-    readonly source: WorkspaceAppSource;
+    readonly source?: WorkspaceAppSource;
+    readonly provenance?: ProductAppBundleProvenance;
 }
 export interface WorkspaceAppSnapshotInitialState {
     readonly appId: string;

package/dist/migrations/0034_keen_fallen_one.sql

@@ -0,0 +1,36 @@
+CREATE TABLE IF NOT EXISTS `ui_instance_repins` (
+	`instance_id` text NOT NULL,
+	`from_version` integer NOT NULL,
+	`from_hash` text NOT NULL,
+	`to_version` integer NOT NULL,
+	`to_hash` text NOT NULL,
+	`from_revision` integer NOT NULL,
+	`to_revision` integer,
+	`status` text NOT NULL,
+	`code` text,
+	`attempts` integer DEFAULT 1 NOT NULL,
+	`first_at` integer NOT NULL,
+	`last_at` integer NOT NULL,
+	PRIMARY KEY(`instance_id`, `to_hash`),
+	CONSTRAINT "ui_instance_repins_instance_id_ck" CHECK(length("ui_instance_repins"."instance_id") BETWEEN 5 AND 128 AND "ui_instance_repins"."instance_id" GLOB 'uic_*'),
+	CONSTRAINT "ui_instance_repins_from_version_ck" CHECK("ui_instance_repins"."from_version" >= 1),
+	CONSTRAINT "ui_instance_repins_to_version_ck" CHECK("ui_instance_repins"."to_version" >= 1),
+	CONSTRAINT "ui_instance_repins_from_hash_ck" CHECK(length("ui_instance_repins"."from_hash") = 64 AND "ui_instance_repins"."from_hash" NOT GLOB '*[^0-9a-f]*'),
+	CONSTRAINT "ui_instance_repins_to_hash_ck" CHECK(length("ui_instance_repins"."to_hash") = 64 AND "ui_instance_repins"."to_hash" NOT GLOB '*[^0-9a-f]*'),
+	CONSTRAINT "ui_instance_repins_from_revision_ck" CHECK("ui_instance_repins"."from_revision" >= 0),
+	CONSTRAINT "ui_instance_repins_to_revision_ck" CHECK("ui_instance_repins"."to_revision" IS NULL OR "ui_instance_repins"."to_revision" >= 0),
+	CONSTRAINT "ui_instance_repins_status_ck" CHECK("ui_instance_repins"."status" IN ('applied', 'deferred', 'failed')),
+	CONSTRAINT "ui_instance_repins_attempts_ck" CHECK("ui_instance_repins"."attempts" >= 1),
+	CONSTRAINT "ui_instance_repins_dates_ck" CHECK("ui_instance_repins"."first_at" >= 0 AND "ui_instance_repins"."last_at" >= "ui_instance_repins"."first_at"),
+	CONSTRAINT "ui_instance_repins_result_ck" CHECK((
+        ("ui_instance_repins"."status" = 'applied' AND "ui_instance_repins"."code" IS NULL
+          AND "ui_instance_repins"."to_revision" = "ui_instance_repins"."from_revision" + 1)
+        OR
+        ("ui_instance_repins"."status" IN ('deferred', 'failed') AND "ui_instance_repins"."code" IS NOT NULL
+          AND "ui_instance_repins"."to_revision" IS NULL)
+      ))
+);
+--> statement-breakpoint
+ALTER TABLE `ui_action_receipts` ADD `definition_id` text;--> statement-breakpoint
+ALTER TABLE `ui_action_receipts` ADD `definition_version` integer;--> statement-breakpoint
+ALTER TABLE `ui_action_receipts` ADD `definition_hash` text;