@crewx/sdk 0.9.0-rc.127 → 0.9.0-rc.129

package/dist/mcp-app/agent-access.d.ts

@@ -5,6 +5,7 @@ export type McpAppAgentAccess = 'allowed' | 'approval_required' | 'denied';
 export interface McpAppAgentAccessAction {
     readonly actionId: string;
     readonly confirmation: UiActionConfirmation | undefined;
+    readonly content?: unknown;
     readonly backend?: {
         readonly type: 'core';
         readonly handler: string;

package/dist/mcp-app/bundle-provenance.d.ts

@@ -1,2 +1,3 @@
-export declare function markVerifiedProductAppBundleProvenance<T extends object>(value: T): T;
+export declare function markVerifiedProductAppBundleProvenance<T extends object>(value: T, executableRelativePath?: string): T;
 export declare function isVerifiedProductAppBundleProvenance(value: unknown): value is object;
+export declare function getVerifiedProductAppBundleExecutable(value: unknown): string | undefined;

package/dist/mcp-app/content-channel.d.ts

@@ -0,0 +1,89 @@
+import { UI_CONTENT_MEDIA_TYPES, isUiContentMediaType, isValidUiAppInstanceId } from './content-declarations.js';
+import type { UiContentMediaType } from './content-declarations.js';
+export { UI_CONTENT_MEDIA_TYPES, isUiContentMediaType, isValidUiAppInstanceId };
+export type { UiContentMediaType };
+export declare const UI_CONTENT_MAX_BYTES: number;
+export declare const UI_CONTENT_MAX_LINES = 20000;
+export declare const UI_CONTENT_TICKET_TTL_MS = 120000;
+export declare const UI_CONTENT_OUTPUT_TTL_MS = 120000;
+export declare const UI_CONTENT_MAX_MEMORY_BYTES: number;
+export declare const UI_CONTENT_ERROR_CODES: readonly ["CONTENT_SOURCE_UNSUPPORTED", "CONTENT_REQUIRED", "CONTENT_EXPIRED", "CONTENT_BINDING_MISMATCH", "CONTENT_DIGEST_MISMATCH", "CONTENT_TOO_LARGE", "CONTENT_ENCODING_INVALID", "CONTENT_BUSY", "IDENTITY_UNAVAILABLE", "EXEC_OUTPUT_INVALID"];
+export type UiContentErrorCode = (typeof UI_CONTENT_ERROR_CODES)[number];
+export interface UiContentInputDeclaration {
+    readonly mediaType: UiContentMediaType;
+    readonly required?: boolean;
+}
+export interface UiContentOutputDeclaration {
+    readonly mediaType: UiContentMediaType;
+    readonly range?: boolean;
+}
+export interface UiActionContentDeclaration {
+    readonly in?: UiContentInputDeclaration;
+    readonly out?: UiContentOutputDeclaration;
+}
+export interface UiContentRangeRequest {
+    readonly startLine: number;
+    readonly lineCount: number;
+}
+export interface UiContentRange extends UiContentRangeRequest {
+    readonly totalLines: number;
+}
+export interface ContentFrame {
+    readonly bytes: Uint8Array;
+    readonly sha256: string;
+    readonly lines: number;
+    readonly mediaType: UiContentMediaType;
+    readonly range?: UiContentRange;
+    readonly complete?: boolean;
+}
+export interface UiContentBinding {
+    readonly workspaceId: string;
+    readonly threadId: string;
+    readonly instanceId: string;
+    readonly actionId: string;
+    readonly requestId: string;
+}
+export interface UiContentInputTicket {
+    readonly ticket: string;
+    readonly binding: UiContentBinding;
+    readonly sha256: string;
+    readonly bytes: number;
+    readonly lines: number;
+    readonly mediaType: UiContentMediaType;
+    readonly expiresAt: number;
+}
+export interface UiContentChannelPort {
+    putInput(ticket: UiContentInputTicket, frame: ContentFrame): void;
+    lookupInput(ticket: string, now: number): UiContentInputTicket | null;
+    consumeInput(ticket: string, now: number): ContentFrame | null;
+    reserveOutput(binding: UiContentBinding, now: number): boolean;
+    releaseOutput(binding: UiContentBinding): void;
+    putOutput(binding: UiContentBinding, frame: ContentFrame, now: number): void;
+    readOutput(binding: UiContentBinding, now: number): ContentFrame | null;
+}
+export declare class UiContentChannelError extends Error {
+    readonly code: UiContentErrorCode;
+    readonly name = "UiContentChannelError";
+    constructor(code: UiContentErrorCode);
+}
+export declare function sha256Content(bytes: Uint8Array): string;
+export declare function countContentLines(bytes: Uint8Array): number;
+export declare function decodeContentUtf8(bytes: Uint8Array): string;
+export declare function validateContentBytes(value: unknown, mediaType: unknown): {
+    readonly bytes: Uint8Array;
+    readonly sha256: string;
+    readonly lines: number;
+};
+export interface ValidateContentFrameOptions {
+    readonly direction: 'in' | 'out';
+    readonly mediaType: UiContentMediaType;
+    readonly expectedSha256?: string;
+    readonly expectedBytes?: number;
+    readonly expectedLines?: number;
+    readonly requestedRange?: UiContentRangeRequest;
+}
+export declare function validateContentFrame(value: unknown, options: ValidateContentFrameOptions): ContentFrame;
+export declare function isUiContentDeclaration(value: unknown): value is UiActionContentDeclaration;
+export declare function isUiContentRangeRequest(value: unknown): value is UiContentRangeRequest;
+export declare function contentBindingMatches(left: UiContentBinding, right: UiContentBinding): boolean;
+export declare function isValidUiThreadIdentity(value: unknown): value is string;

package/dist/mcp-app/content-declarations.d.ts

@@ -0,0 +1,29 @@
+import type { UiDefinition, UiDefinitionRef } from '../ui-instance/types.js';
+export declare const UI_CONTENT_MEDIA_TYPES: readonly ["text/plain", "application/json"];
+export type UiContentMediaType = (typeof UI_CONTENT_MEDIA_TYPES)[number];
+export interface McpAppContentActionDeclaration {
+    readonly actionId: string;
+    readonly in?: {
+        readonly mediaType: UiContentMediaType;
+        readonly required: boolean;
+    };
+    readonly out?: {
+        readonly mediaType: UiContentMediaType;
+        readonly range: boolean;
+    };
+}
+export interface McpAppContentActions {
+    readonly schemaVersion: 1;
+    readonly instanceId: string;
+    readonly definition: {
+        readonly id: string;
+        readonly version: number;
+        readonly hash: string;
+    };
+    readonly actions: readonly McpAppContentActionDeclaration[];
+}
+export declare function isUiContentMediaType(value: unknown): value is UiContentMediaType;
+export declare function isValidUiAppInstanceId(value: unknown): value is string;
+export declare function buildMcpAppContentActions(instanceId: string, definition: UiDefinition): McpAppContentActions | undefined;
+export declare function isMcpAppContentActions(value: unknown): value is McpAppContentActions;
+export declare function contentActionsMatch(value: unknown, instanceId: string, definitionRef: UiDefinitionRef): boolean;

package/dist/mcp-app/dev-checks.d.ts

@@ -18,6 +18,7 @@ export interface InspectSkillBackendOutputOptions {
     readonly dataPaths?: readonly string[];
     readonly durationMs?: number;
     readonly timedOut?: boolean;
+    readonly contentFramed?: boolean;
 }
 export interface ScanExternalResourcesOptions {
     readonly csp: string;

package/dist/mcp-app/discovery.d.ts

@@ -3,42 +3,18 @@ import type { JsonObject, UiDefinition } from '../ui-instance/types.js';
 import type { UiPluginHandlerMetadata, UiPluginManifestV2, UiPluginNormalizedManifestV2 } from '../ui-plugin/types.js';
 import { AppDiscoveryFsError, NodeAppDiscoveryFs, NodeAppDiscoveryFsAdapter, defaultAppDiscoveryFs, defaultNodeAppDiscoveryFs, type AppDiscoveryFsErrorCode } from './node-app-discovery-fs.js';
 import type { McpAppRegistry } from './types.js';
+import type { ProductAppBundleFileHash, ProductAppBundleInput, ProductAppBundleProvenance as LoadedProductAppBundleProvenance } from './product-bundle-loader.js';
+export type { ProductAppBundleDefinitionIdentity, ProductAppBundleFileHash, ProductAppBundleIndex, ProductAppBundleInput, ProductAppBundlePackageIndex, ProductAppBundleReservations, } from './product-bundle-loader.js';
+export { productAppBundleReservations } from './product-bundle-loader.js';
 export type WorkspaceAppSource = 'apps' | 'skills';
 export type WorkspaceAppDiscoverySource = WorkspaceAppSource | 'bundled';
-export interface ProductAppBundleInput {
-    readonly root: string;
-    readonly expectedIndexHash: string;
-}
-export interface ProductAppBundleProvenance {
-    readonly kind: 'bundled';
-    readonly indexHash: string;
-    readonly packageDir: string;
+export interface ProductAppBundleProvenance extends LoadedProductAppBundleProvenance {
     readonly appId: string;
     readonly definitionId: string;
     readonly version: number;
     readonly definitionHash: string;
     readonly files: readonly ProductAppBundleFileHash[];
 }
-export interface ProductAppBundleFileHash {
-    readonly path: string;
-    readonly sha256: string;
-}
-export interface ProductAppBundleDefinitionIdentity {
-    readonly id: string;
-    readonly version: number;
-    readonly hash: string;
-}
-export interface ProductAppBundlePackageIndex {
-    readonly packageDir: string;
-    readonly appId: string;
-    readonly definition: ProductAppBundleDefinitionIdentity;
-    readonly lineage: readonly UiDefinitionLineageEntry[];
-    readonly files: readonly ProductAppBundleFileHash[];
-}
-export interface ProductAppBundleIndex {
-    readonly version: 1;
-    readonly packages: readonly ProductAppBundlePackageIndex[];
-}
 export type WorkspaceAppDiscoveryIncompleteReason = 'time_limit';
 export type WorkspaceAppDiagnosticCode = 'MANIFEST_MISSING' | 'MANIFEST_INVALID' | 'ENTRY_INVALID' | 'INITIAL_STATE_INVALID' | 'DUPLICATE_ID' | 'RESERVED_ID' | 'BUNDLE_INTEGRITY' | 'LINEAGE_INVALID' | 'LINEAGE_STALE' | 'PATH_ESCAPED' | 'LIMIT_EXCEEDED' | 'EXEC_DENIED';
 export interface WorkspaceAppDiagnostic {
@@ -47,6 +23,12 @@ export interface WorkspaceAppDiagnostic {
     readonly source: WorkspaceAppDiscoverySource;
     readonly relativePath: string;
 }
+export interface ProductAppBundleSnapshotMetadata {
+    readonly indexHash?: string;
+    readonly diagnostics: readonly WorkspaceAppDiagnostic[];
+    readonly reservedAppIds: readonly string[];
+    readonly reservedDefinitionIds: readonly string[];
+}
 export type McpAppDiscoveryDiagnostic = WorkspaceAppDiagnostic;
 export type AppDiscoveryDiagnostic = WorkspaceAppDiagnostic;
 export type AppDiscoveryDirectoryEntryKind = 'file' | 'directory' | 'symlink' | 'other';
@@ -140,6 +122,7 @@ export interface WorkspaceAppDiscoveryResult {
     readonly complete: boolean;
     readonly incompleteReason?: WorkspaceAppDiscoveryIncompleteReason;
     readonly productBundleIndexHash?: string;
+    readonly productBundleSnapshotMetadata?: ProductAppBundleSnapshotMetadata;
     readonly candidates?: readonly WorkspaceAppCandidate[];
 }
 export declare const WORKSPACE_APP_TOOL_PREFIX = "crewx_local_app_";

package/dist/mcp-app/index.d.ts

@@ -3,21 +3,27 @@ export { McpAppContractError } from './errors.js';
 export { INSTALLED_APP_ENTRY, InstalledAppRefError, buildInstalledAppRef, validateInstalledAppRef, } from './installed-app-ref.js';
 export type { BuildInstalledAppRefInput, InstalledAppPackageFile, InstalledAppRef, InstalledAppRefErrorCode, } from './installed-app-ref.js';
 export { MAX_HTML_LENGTH, createMcpAppRegistry, createBuiltinMcpAppRegistry, buildMcpAppLocalRegistration, createMcpAppLocalRegistration, registerLocalMcpApp, createMcpAppWorkspaceRegistry, createWorkspaceAppRegistry, createWorkspaceMcpAppRegistry, registerMcpApp, resolveMcpAppResource, resolveLocalMcpAppResource, requireMcpAppResource, toMcpAppToolRegistration, makeUiUri, buildMcpAppBundleRegistrationInput, buildMcpAppBundleAgentActionDescriptors, planProductBundleLegacyToolNames, resolveMcpAppFixedResultCall, } from './registry.js';
-export { AppDiscoveryFsError, NodeAppDiscoveryFs, NodeAppDiscoveryFsAdapter, defaultAppDiscoveryFs, defaultNodeAppDiscoveryFs, deriveWorkspaceAppToolName, deriveWorkspaceAppToolNames, discoverWorkspaceAppCandidates, discoverWorkspaceApps, LOCAL_APP_TOOL_PREFIX, MCP_APP_WORKSPACE_TOOL_PREFIX, scanWorkspaceApps, WORKSPACE_APP_TOOL_PREFIX, } from './discovery.js';
-export type { AppDiscoveryBytes, AppDiscoveryDiagnostic, AppDiscoveryDirectoryEntry, AppDiscoveryDirectoryEntryKind, AppDiscoveryDirectoryListing, AppDiscoveryFileSystem, AppDiscoveryFsErrorCode, AppDiscoveryMaybePromise, WorkspaceAppDiscoveryOptions as AppDiscoveryOptions, McpAppDiscoveryDiagnostic, WorkspaceAppBuiltinCatalog, WorkspaceAppCandidate, WorkspaceAppDiscoveryIncompleteReason, WorkspaceAppDiscoveryOptions, WorkspaceAppDiscoveryResult, WorkspaceAppDiagnostic, WorkspaceAppDiagnosticCode, WorkspaceAppDiscoverySource, WorkspaceAppResourceSnapshot, WorkspaceAppReservedCatalog, WorkspaceAppSource, WorkspaceAppToolNames, ProductAppBundleDefinitionIdentity, ProductAppBundleFileHash, ProductAppBundleIndex, ProductAppBundleInput, ProductAppBundlePackageIndex, ProductAppBundleProvenance, } from './discovery.js';
+export { AppDiscoveryFsError, NodeAppDiscoveryFs, NodeAppDiscoveryFsAdapter, defaultAppDiscoveryFs, defaultNodeAppDiscoveryFs, deriveWorkspaceAppToolName, deriveWorkspaceAppToolNames, discoverWorkspaceAppCandidates, discoverWorkspaceApps, LOCAL_APP_TOOL_PREFIX, MCP_APP_WORKSPACE_TOOL_PREFIX, productAppBundleReservations, scanWorkspaceApps, WORKSPACE_APP_TOOL_PREFIX, } from './discovery.js';
+export { loadProductAppBundleAssets } from './product-bundle-assets.js';
+export type { ProductAppBundleAsset, ProductAppBundleAssetCatalog, ProductAppBundleAssetLoadOptions, } from './product-bundle-assets.js';
+export type { AppDiscoveryBytes, AppDiscoveryDiagnostic, AppDiscoveryDirectoryEntry, AppDiscoveryDirectoryEntryKind, AppDiscoveryDirectoryListing, AppDiscoveryFileSystem, AppDiscoveryFsErrorCode, AppDiscoveryMaybePromise, WorkspaceAppDiscoveryOptions as AppDiscoveryOptions, McpAppDiscoveryDiagnostic, WorkspaceAppBuiltinCatalog, WorkspaceAppCandidate, WorkspaceAppDiscoveryIncompleteReason, WorkspaceAppDiscoveryOptions, WorkspaceAppDiscoveryResult, WorkspaceAppDiagnostic, WorkspaceAppDiagnosticCode, WorkspaceAppDiscoverySource, WorkspaceAppResourceSnapshot, WorkspaceAppReservedCatalog, WorkspaceAppSource, WorkspaceAppToolNames, ProductAppBundleDefinitionIdentity, ProductAppBundleFileHash, ProductAppBundleIndex, ProductAppBundleInput, ProductAppBundlePackageIndex, ProductAppBundleReservations, ProductAppBundleProvenance, ProductAppBundleSnapshotMetadata, } from './discovery.js';
 export { createWorkspaceAppCatalog, discoverWorkspaceAppCatalog, hashAppDefinition, hashCrewxAppDefinition, listWorkspaceApps, } from './catalog.js';
 export type { CrewxAppBuiltinCatalog, CrewxAppCapability, CrewxAppCatalogOptions, CrewxAppCatalogResult, CrewxAppDefinitionHashInput, CrewxAppDefinitionSummary, CrewxAppDiagnostic, CrewxAppDiagnosticCode, CrewxAppDiagnosticSource, CrewxAppInstalledProjection, CrewxAppLocalDefinitionRef, CrewxAppOrigin, CrewxAppOwnership, CrewxAppShareability, CrewxAppSharingAvailability, CrewxAppSummary, } from './types.js';
 export { MCP_APP_PROJECTION_MAX_BYTES, buildMcpAppStateDescriptor, buildMcpAppStateProjections, buildTerminalMcpAppStateDescriptor, buildTerminalMcpAppStateProjections, createMcpAppToolResult, projectMcpAppSummaryState, serializeMcpAppStateJson, serializeMcpAppStateXml, } from './projection.js';
 export { buildMcpAppsContext } from './apps-context.js';
 export type { McpAppsContext } from './apps-context.js';
+export { UI_CONTENT_ERROR_CODES, UI_CONTENT_MAX_BYTES, UI_CONTENT_MAX_LINES, UI_CONTENT_MAX_MEMORY_BYTES, UI_CONTENT_MEDIA_TYPES, UI_CONTENT_OUTPUT_TTL_MS, UI_CONTENT_TICKET_TTL_MS, UiContentChannelError, contentBindingMatches, countContentLines, decodeContentUtf8, isUiContentDeclaration, isUiContentMediaType, isUiContentRangeRequest, isValidUiAppInstanceId, isValidUiThreadIdentity, sha256Content, validateContentBytes, validateContentFrame, } from './content-channel.js';
+export type { ContentFrame, UiActionContentDeclaration, UiContentBinding, UiContentChannelPort, UiContentErrorCode, UiContentInputDeclaration, UiContentInputTicket, UiContentMediaType, UiContentOutputDeclaration, UiContentRange, UiContentRangeRequest, ValidateContentFrameOptions, } from './content-channel.js';
+export { buildMcpAppContentActions, contentActionsMatch, isMcpAppContentActions, } from './content-declarations.js';
+export type { McpAppContentActionDeclaration, McpAppContentActions, } from './content-declarations.js';
 export { MCP_APP_MODEL_CONTEXT_MAX_ARRAY_LENGTH, MCP_APP_MODEL_CONTEXT_MAX_BYTES, MCP_APP_MODEL_CONTEXT_MAX_DEPTH, MCP_APP_MODEL_CONTEXT_MAX_STRING_LENGTH, sanitizeMcpAppModelContext, serializeMcpAppModelContextXml, } from './model-context.js';
 export type { McpAppModelContext, McpAppModelContextInput } from './model-context.js';
 export { resolveAgentAccess, listMcpAppAgentActions } from './agent-access.js';
 export type { McpAppAgentAccess, McpAppAgentAccessAction, McpAppVerifiedBundleAccessContext } from './agent-access.js';
 export { buildStateSetHandler, createStateSetHandler, } from './state-set.js';
 export type { StateSetHandlerBuildInput } from './state-set.js';
-export { SKILL_BACKEND_DEFAULT_TIMEOUT_MS, SKILL_BACKEND_INHERITED_ENV_ALLOWLIST, SKILL_BACKEND_MAX_INPUT_BYTES, SKILL_BACKEND_MAX_OUTPUT_BYTES, SKILL_BACKEND_SCHEMA_VERSION, buildSkillBackendChildEnvironment, buildSkillBackendHandler, buildVerifiedBundleSkillBackendHandler, } from './skill-backend.js';
-export type { SkillBackendChildEnvironment, SkillBackendExecutionPort, SkillBackendExecutionRequest, SkillBackendExecutionResponse, SkillBackendHandlerBuildInput, SkillBackendInfrastructureErrorCode, SkillBackendPayload, VerifiedBundleSkillBackendBuildInput, VerifiedBundleSkillRunnerPort, VerifiedBundleSkillSpawnRequest, } from './skill-backend.js';
+export { SKILL_BACKEND_DEFAULT_TIMEOUT_MS, SKILL_BACKEND_INHERITED_ENV_ALLOWLIST, SKILL_BACKEND_CONTENT_SCHEMA_VERSION, SKILL_BACKEND_MAX_INPUT_BYTES, SKILL_BACKEND_MAX_OUTPUT_BYTES, SKILL_BACKEND_SCHEMA_VERSION, buildSkillBackendChildEnvironment, buildSkillBackendHandler, buildVerifiedBundleSkillBackendHandler, } from './skill-backend.js';
+export type { SkillBackendChildEnvironment, SkillBackendExecutionPort, SkillBackendExecutionRequest, SkillBackendExecutionResponse, SkillBackendHandlerBuildInput, SkillBackendInfrastructureErrorCode, SkillBackendPayload, VerifiedBundleSkillBackendBuildInput, VerifiedBundleSkillRunnerPort, VerifiedBundleSkillSpawnRequest, SkillBackendPayloadV1, SkillBackendPayloadV2, SkillBackendContentInputHeader, SkillBackendContentOutputHeader, } from './skill-backend.js';
 export { externalResourceCheckItems, inspectSkillBackendOutput, scanExternalResources, } from './dev-checks.js';
 export type { AppDevCheckItem, ExternalResourceFinding, ExternalResourceKind, InspectSkillBackendOutputOptions, ScanExternalResourcesOptions, } from './dev-checks.js';
 export { MCP_APP_HOST_TOOL_ALLOWLIST, MCP_CORE_TOOL_NAMES, MCP_APP_LOCAL_RESOURCE_MIME_TYPE, MCP_APP_RESOURCE_MIME_TYPE, MCP_APP_RESOURCE_URI_PREFIX, } from './types.js';

package/dist/mcp-app/product-bundle-assets.d.ts

@@ -0,0 +1,22 @@
+import type { ProductAppBundleInput } from './product-bundle-loader.js';
+import type { AppDiscoveryFileSystem, WorkspaceAppDiagnostic } from './discovery.js';
+import type { ProductAppBundleProvenance } from './product-bundle-loader.js';
+export interface ProductAppBundleAsset {
+    readonly sha256: string;
+    readonly filename: string;
+    readonly contentType: string;
+    readonly byteLength: number;
+    readonly provenance: ProductAppBundleProvenance;
+    bytes(): Uint8Array;
+}
+export interface ProductAppBundleAssetCatalog {
+    readonly indexHash?: string;
+    readonly complete: boolean;
+    readonly diagnostics: readonly WorkspaceAppDiagnostic[];
+    get(sha256: string, filename: string): ProductAppBundleAsset | undefined;
+}
+export interface ProductAppBundleAssetLoadOptions {
+    readonly filesystem?: AppDiscoveryFileSystem;
+    readonly clock?: () => number;
+}
+export declare function loadProductAppBundleAssets(input: ProductAppBundleInput, options?: ProductAppBundleAssetLoadOptions): Promise<ProductAppBundleAssetCatalog>;

package/dist/mcp-app/product-bundle-loader.d.ts

@@ -0,0 +1,53 @@
+import type { UiDefinitionLineageEntry } from '../ui-instance/lineage.js';
+import type { AppDiscoveryFileSystem, WorkspaceAppDiagnostic, WorkspaceAppDiagnosticCode } from './discovery.js';
+export interface ProductAppBundleReservations {
+    readonly appIds: readonly string[];
+    readonly definitionIds: readonly string[];
+}
+export interface ProductAppBundleInput {
+    readonly root: string | null;
+    readonly expectedIndexHash: string;
+    readonly reservedIds: ProductAppBundleReservations;
+}
+export interface ProductAppBundleProvenance {
+    readonly kind: 'bundled';
+    readonly launcher: boolean;
+    readonly indexHash: string;
+    readonly packageDir: string;
+}
+export interface ProductAppBundleFileHash {
+    readonly path: string;
+    readonly sha256: string;
+}
+export interface ProductAppBundleDefinitionIdentity {
+    readonly id: string;
+    readonly version: number;
+    readonly hash: string;
+}
+export interface ProductAppBundlePackageIndex {
+    readonly packageDir: string;
+    readonly launcher?: false;
+    readonly appId: string;
+    readonly definition: ProductAppBundleDefinitionIdentity;
+    readonly lineage: readonly UiDefinitionLineageEntry[];
+    readonly files: readonly ProductAppBundleFileHash[];
+}
+export interface ProductAppBundleIndex {
+    readonly version: 1;
+    readonly packages: readonly ProductAppBundlePackageIndex[];
+}
+export interface LoadedProductBundlePackage {
+    readonly indexEntry: ProductAppBundlePackageIndex;
+    readonly lineage?: readonly UiDefinitionLineageEntry[];
+    readonly files?: ReadonlyMap<string, Uint8Array>;
+    readonly failureCode?: WorkspaceAppDiagnosticCode;
+}
+export interface LoadedProductBundle {
+    readonly indexHash?: string;
+    readonly packages: readonly LoadedProductBundlePackage[];
+    readonly diagnostics: readonly WorkspaceAppDiagnostic[];
+    readonly incomplete: boolean;
+    readonly reservedIds: ProductAppBundleReservations;
+}
+export declare function productAppBundleReservations(packages: readonly ProductAppBundlePackageIndex[]): ProductAppBundleReservations;
+export declare function loadProductBundle(input: ProductAppBundleInput | undefined, fs: AppDiscoveryFileSystem, startedAt: number, clock: () => number): Promise<LoadedProductBundle>;

package/dist/mcp-app/skill-backend.d.ts

@@ -1,28 +1,53 @@
-import type { JsonObject, UiExternalActionHandlerRegistration } from '../ui-instance/types.js';
+import type { ContentFrame, UiContentMediaType, UiContentRangeRequest } from './content-channel.js';
+import type { JsonObject, UiExternalActionHandlerRegistration, UiSkillBackendEnvironmentKey } from '../ui-instance/types.js';
 import type { UiPluginNormalizedManifestV2 } from '../ui-plugin/types.js';
-import type { WorkspaceAppCandidate, WorkspaceAppSource } from './discovery.js';
+import type { ProductAppBundleProvenance, WorkspaceAppCandidate, WorkspaceAppSource } from './discovery.js';
 export declare const SKILL_BACKEND_SCHEMA_VERSION: 1;
+export declare const SKILL_BACKEND_CONTENT_SCHEMA_VERSION: 2;
 export declare const SKILL_BACKEND_MAX_INPUT_BYTES = 524288;
 export declare const SKILL_BACKEND_MAX_OUTPUT_BYTES = 524288;
 export declare const SKILL_BACKEND_DEFAULT_TIMEOUT_MS = 15000;
 export declare const SKILL_BACKEND_INHERITED_ENV_ALLOWLIST: readonly ["CREWX_HOME", "CREWX_DB", "XDG_CONFIG_HOME"];
 export type SkillBackendInfrastructureErrorCode = 'EXEC_DENIED' | 'EXEC_TIMEOUT' | 'EXEC_OUTPUT_INVALID' | 'EXECUTION_FAILED' | 'ACTION_IN_FLIGHT' | 'INPUT_INVALID';
-export interface SkillBackendPayload {
+export interface SkillBackendPayloadV1 {
     readonly schemaVersion: typeof SKILL_BACKEND_SCHEMA_VERSION;
     readonly actionId: string;
     readonly input: JsonObject;
     readonly state: JsonObject;
 }
+export interface SkillBackendContentInputHeader {
+    readonly mediaType: UiContentMediaType;
+    readonly bytes: number;
+    readonly sha256: string;
+    readonly lines: number;
+}
+export interface SkillBackendContentOutputHeader {
+    readonly mediaType: UiContentMediaType;
+    readonly range: UiContentRangeRequest | null;
+}
+export interface SkillBackendPayloadV2 {
+    readonly schemaVersion: typeof SKILL_BACKEND_CONTENT_SCHEMA_VERSION;
+    readonly actionId: string;
+    readonly input: JsonObject;
+    readonly state: JsonObject;
+    readonly content: {
+        readonly in: SkillBackendContentInputHeader | null;
+        readonly out: SkillBackendContentOutputHeader | null;
+    };
+}
+export type SkillBackendPayload = SkillBackendPayloadV1 | SkillBackendPayloadV2;
 export type SkillBackendExecutionResponse = {
     readonly state?: JsonObject;
     readonly result?: JsonObject;
+    readonly content?: ContentFrame;
 } | {
     readonly outcome: 'rejected' | 'failed';
     readonly errorCode: string;
     readonly state?: JsonObject;
     readonly result?: JsonObject;
+    readonly content?: ContentFrame;
 };
-export interface SkillBackendExecutionRequest {
+interface SkillBackendExecutionRequestBase {
     readonly requestId?: string;
     readonly reservationNowMs?: number;
     readonly actorKind?: 'user' | 'agent';
@@ -32,11 +57,25 @@ export interface SkillBackendExecutionRequest {
     readonly definitionVersion: number;
     readonly definitionHash: string;
     readonly actionId: string;
-    readonly source: WorkspaceAppSource;
     readonly relativePath: string;
     readonly command: readonly string[];
     readonly payload: SkillBackendPayload;
+    readonly content?: {
+        readonly in?: ContentFrame;
+        readonly out?: {
+            readonly mediaType: UiContentMediaType;
+            readonly range?: UiContentRangeRequest;
+        };
+    };
+    readonly environment?: Readonly<Partial<Record<UiSkillBackendEnvironmentKey, string>>>;
 }
+export type SkillBackendExecutionRequest = SkillBackendExecutionRequestBase & ({
+    readonly source: 'bundled';
+    readonly provenance: ProductAppBundleProvenance;
+} | {
+    readonly source: WorkspaceAppSource;
+    readonly provenance?: never;
+});
 export interface SkillBackendExecutionPort {
     execute(request: SkillBackendExecutionRequest): PromiseLike<SkillBackendExecutionResponse>;
 }
@@ -72,14 +111,23 @@ export interface VerifiedBundleSkillBackendBuildInput {
     readonly executableRelativePath: string;
     readonly runner: VerifiedBundleSkillRunnerPort;
 }
-export interface SkillBackendHandlerBuildInput {
+interface SkillBackendHandlerBuildInputBase {
     readonly normalized: UiPluginNormalizedManifestV2;
     readonly actionId: string;
-    readonly source: WorkspaceAppSource;
     readonly relativePath: string;
     readonly execute: SkillBackendExecutionPort;
     readonly definitionHash?: string;
 }
+export type SkillBackendHandlerBuildInput = SkillBackendHandlerBuildInputBase & ({
+    readonly source: 'bundled';
+    readonly provenance: ProductAppBundleProvenance;
+    readonly candidate: WorkspaceAppCandidate;
+} | {
+    readonly source: WorkspaceAppSource;
+    readonly provenance?: never;
+    readonly candidate?: never;
+});
 export declare function buildSkillBackendHandler(normalized: UiPluginNormalizedManifestV2, actionId: string, source: WorkspaceAppSource, relativePath: string, execute: SkillBackendExecutionPort): UiExternalActionHandlerRegistration | undefined;
 export declare function buildSkillBackendHandler(input: SkillBackendHandlerBuildInput): UiExternalActionHandlerRegistration | undefined;
 export declare function buildVerifiedBundleSkillBackendHandler(input: VerifiedBundleSkillBackendBuildInput): UiExternalActionHandlerRegistration | undefined;
+export {};

package/dist/mcp-app/types.d.ts

@@ -1,5 +1,5 @@
 import type { JsonObject, UiDefinition, UiDefinitionRef, UiDefinitionDisplayMode, UiDefinitionUsage, UiProjectionPolicy, UiInstance, UiInstanceStatus, UiActionConfirmation, UiActionHandlerRegistration } from '../ui-instance/types.js';
-import type { AppDiscoveryFileSystem, ProductAppBundleInput, ProductAppBundleProvenance } from './discovery.js';
+import type { AppDiscoveryFileSystem, ProductAppBundleInput, ProductAppBundleProvenance, ProductAppBundleSnapshotMetadata } from './discovery.js';
 export declare const MCP_APP_RESOURCE_MIME_TYPE: "text/html;profile=mcp-app";
 export declare const MCP_APP_RESOURCE_URI_PREFIX = "ui://crewx/";
 export type McpAppToolVisibility = 'model' | 'app';
@@ -167,6 +167,7 @@ export interface McpAppLocalRegistration {
     readonly tone?: McpAppTone;
     readonly builtinOnly: false;
     readonly definition: UiDefinition;
+    readonly provenance?: ProductAppBundleProvenance;
     readonly resourceBinding: McpAppInstanceResourceBinding;
     readonly resource: McpAppLocalResource;
     readonly tools: readonly McpAppLocalToolDescriptor[];
@@ -436,6 +437,7 @@ export type CrewxAppBuiltinCatalog = Pick<McpAppRegistry, 'listMcpApps' | 'listM
 export interface CrewxAppCatalogOptions {
     readonly filesystem?: AppDiscoveryFileSystem;
     readonly productBundle?: ProductAppBundleInput;
+    readonly registeredProductBundle?: ProductAppBundleSnapshotMetadata;
     readonly builtinCatalog?: CrewxAppBuiltinCatalog;
     readonly installed?: readonly CrewxAppInstalledProjection[];
 }

package/dist/mcp-app/workspace-snapshot.d.ts

@@ -1,10 +1,12 @@
-import { type AppDiscoveryFileSystem, type WorkspaceAppDiscoveryIncompleteReason, type WorkspaceAppDiagnostic, type WorkspaceAppDiscoveryOptions, type WorkspaceAppDiscoveryResult, type WorkspaceAppSource, type ProductAppBundleProvenance } from './discovery.js';
+import { type AppDiscoveryFileSystem, type WorkspaceAppDiscoveryIncompleteReason, type WorkspaceAppDiagnostic, type WorkspaceAppDiscoveryOptions, type WorkspaceAppDiscoveryResult, type WorkspaceAppSource, type ProductAppBundleProvenance, type ProductAppBundleSnapshotMetadata } from './discovery.js';
 import { type SkillBackendExecutionPort } from './skill-backend.js';
 import type { JsonObject, UiActionHandlerRegistration, UiDefinition, UiDefinitionRef } from '../ui-instance/types.js';
+import type { UiPluginManifestV2 } from '../ui-plugin/types.js';
 import type { McpAppLauncher, McpAppLocalResource, McpAppRegistry, McpAppWorkspaceRegistry } from './types.js';
 export interface WorkspaceAppSnapshotResource extends McpAppLocalResource {
     readonly appId: string;
     readonly definition: UiDefinitionRef;
+    readonly runtime?: NonNullable<UiPluginManifestV2['runtime']>;
     readonly source?: WorkspaceAppSource;
     readonly provenance?: ProductAppBundleProvenance;
 }
@@ -20,6 +22,7 @@ export interface WorkspaceAppSnapshotBuildOptions {
     readonly builtins?: McpAppRegistry;
     readonly builtin?: McpAppRegistry;
     readonly registry?: McpAppRegistry;
+    readonly registeredProductBundle?: ProductAppBundleSnapshotMetadata;
     readonly skillBackend?: SkillBackendExecutionPort;
 }
 export type WorkspaceAppSnapshotOptions = WorkspaceAppDiscoveryOptions & WorkspaceAppSnapshotBuildOptions;