@crewx/sdk 0.9.0-rc.130 → 0.9.0-rc.132

package/dist/mcp-app/dev-checks.d.ts

@@ -16,6 +16,7 @@ export interface ExternalResourceFinding {
 export interface InspectSkillBackendOutputOptions {
     readonly actionId: string;
     readonly dataPaths?: readonly string[];
+    readonly resultProjectionAllow?: readonly string[];
     readonly durationMs?: number;
     readonly timedOut?: boolean;
     readonly contentFramed?: boolean;

package/dist/mcp-app/discovery.d.ts

@@ -1,6 +1,7 @@
 import type { UiDefinitionLineageEntry } from '../ui-instance/lineage.js';
 import type { JsonObject, UiDefinition } from '../ui-instance/types.js';
 import type { UiPluginHandlerMetadata, UiPluginManifestV2, UiPluginNormalizedManifestV2 } from '../ui-plugin/types.js';
+import { createWorkspaceAppScanCache, type WorkspaceAppScanCache, type WorkspaceAppScanRootIdentity } from './workspace-app-scan-cache.js';
 import { AppDiscoveryFsError, NodeAppDiscoveryFs, NodeAppDiscoveryFsAdapter, defaultAppDiscoveryFs, defaultNodeAppDiscoveryFs, type AppDiscoveryFsErrorCode } from './node-app-discovery-fs.js';
 import type { McpAppRegistry } from './types.js';
 import type { ProductAppBundleFileHash, ProductAppBundleInput, ProductAppBundleProvenance as LoadedProductAppBundleProvenance } from './product-bundle-loader.js';
@@ -17,7 +18,7 @@ export interface ProductAppBundleProvenance extends LoadedProductAppBundleProven
     readonly files: readonly ProductAppBundleFileHash[];
 }
 export type WorkspaceAppDiscoveryIncompleteReason = 'time_limit';
-export type WorkspaceAppDiagnosticCode = 'MANIFEST_MISSING' | 'MANIFEST_INVALID' | 'ENTRY_INVALID' | 'INITIAL_STATE_INVALID' | 'DUPLICATE_ID' | 'RESERVED_ID' | 'BUNDLE_INTEGRITY' | 'LINEAGE_INVALID' | 'LINEAGE_STALE' | 'PATH_ESCAPED' | 'LIMIT_EXCEEDED' | 'ASSET_CATALOG_INVALID' | 'EXEC_DENIED';
+export type WorkspaceAppDiagnosticCode = 'MANIFEST_MISSING' | 'MANIFEST_INVALID' | 'ENTRY_INVALID' | 'INITIAL_STATE_INVALID' | 'DUPLICATE_ID' | 'RESERVED_ID' | 'BUNDLE_INTEGRITY' | 'LINEAGE_INVALID' | 'LINEAGE_STALE' | 'PATH_ESCAPED' | 'LIMIT_EXCEEDED' | 'DISCOVERY_TIME_LIMIT' | 'ASSET_CATALOG_INVALID' | 'EXEC_DENIED';
 export interface WorkspaceAppDiagnostic {
     readonly code: WorkspaceAppDiagnosticCode;
     readonly pluginId?: string;
@@ -26,6 +27,7 @@ export interface WorkspaceAppDiagnostic {
 }
 export interface ProductAppBundleSnapshotMetadata {
     readonly indexHash?: string;
+    readonly candidates?: readonly WorkspaceAppCandidate[];
     readonly diagnostics: readonly WorkspaceAppDiagnostic[];
     readonly reservedAppIds: readonly string[];
     readonly reservedDefinitionIds: readonly string[];
@@ -37,6 +39,16 @@ export interface AppDiscoveryDirectoryEntry {
     readonly name: string;
     readonly kind: AppDiscoveryDirectoryEntryKind;
 }
+export interface AppDiscoveryFileFingerprint {
+    readonly dev: bigint;
+    readonly ino: bigint;
+    readonly size: bigint;
+    readonly mtimeNs: bigint;
+    readonly ctimeNs: bigint;
+    readonly candidateRealPath: string;
+}
+export interface AppDiscoveryRootIdentity extends WorkspaceAppScanRootIdentity {
+}
 export type AppDiscoveryDirectoryListing = readonly AppDiscoveryDirectoryEntry[] | readonly string[];
 export type AppDiscoveryBytes = Uint8Array | ArrayBuffer | readonly number[];
 export type AppDiscoveryMaybePromise<T> = T | PromiseLike<T>;
@@ -46,6 +58,8 @@ export interface AppDiscoveryFileSystem {
     readonly readdir?: (root: string, relativePath: string) => AppDiscoveryMaybePromise<AppDiscoveryDirectoryListing>;
     readonly readVerifiedFile?: (root: string, relativePath: string, byteLimit: number) => AppDiscoveryMaybePromise<AppDiscoveryBytes>;
     readonly readFileVerified?: (root: string, relativePath: string, byteLimit: number) => AppDiscoveryMaybePromise<AppDiscoveryBytes>;
+    readonly fingerprintVerifiedFile?: (root: string, relativePath: string, byteLimit: number) => AppDiscoveryMaybePromise<AppDiscoveryFileFingerprint>;
+    readonly getRootIdentity?: (root: string) => AppDiscoveryMaybePromise<AppDiscoveryRootIdentity>;
 }
 export interface WorkspaceAppReservedCatalog {
     readonly appIds?: Iterable<string>;
@@ -66,6 +80,7 @@ export interface WorkspaceAppDiscoveryOptions {
     readonly reservedDefinitionIds?: Iterable<string>;
     readonly reservedToolNames?: Iterable<string>;
     readonly productBundle?: ProductAppBundleInput;
+    readonly scanCache?: WorkspaceAppScanCache;
 }
 export interface WorkspaceAppToolNames {
     readonly read: string;
@@ -135,5 +150,5 @@ export declare function discoverWorkspaceApps(workspaceRoot: string, fs?: AppDis
 export declare function discoverWorkspaceApps(workspaceRoot: string, options?: WorkspaceAppDiscoveryOptions): Promise<WorkspaceAppDiscoveryResult>;
 export declare const discoverWorkspaceAppCandidates: typeof discoverWorkspaceApps;
 export declare const scanWorkspaceApps: typeof discoverWorkspaceApps;
-export { AppDiscoveryFsError, NodeAppDiscoveryFs, NodeAppDiscoveryFsAdapter, defaultAppDiscoveryFs, defaultNodeAppDiscoveryFs, };
-export type { AppDiscoveryFsErrorCode };
+export { AppDiscoveryFsError, NodeAppDiscoveryFs, NodeAppDiscoveryFsAdapter, defaultAppDiscoveryFs, defaultNodeAppDiscoveryFs, createWorkspaceAppScanCache, };
+export type { AppDiscoveryFsErrorCode, WorkspaceAppScanCache, };

package/dist/mcp-app/index.d.ts

@@ -3,11 +3,11 @@ export { McpAppContractError } from './errors.js';
 export { INSTALLED_APP_ENTRY, InstalledAppRefError, buildInstalledAppRef, validateInstalledAppRef, } from './installed-app-ref.js';
 export type { BuildInstalledAppRefInput, InstalledAppPackageFile, InstalledAppRef, InstalledAppRefErrorCode, } from './installed-app-ref.js';
 export { MAX_HTML_LENGTH, createMcpAppRegistry, createBuiltinMcpAppRegistry, buildMcpAppLocalRegistration, createMcpAppLocalRegistration, registerLocalMcpApp, createMcpAppWorkspaceRegistry, createWorkspaceAppRegistry, createWorkspaceMcpAppRegistry, registerMcpApp, resolveMcpAppResource, resolveLocalMcpAppResource, requireMcpAppResource, toMcpAppToolRegistration, makeUiUri, buildMcpAppBundleRegistrationInput, buildMcpAppBundleAgentActionDescriptors, planProductBundleLegacyToolNames, resolveMcpAppFixedResultCall, } from './registry.js';
-export { AppDiscoveryFsError, NodeAppDiscoveryFs, NodeAppDiscoveryFsAdapter, defaultAppDiscoveryFs, defaultNodeAppDiscoveryFs, deriveWorkspaceAppToolName, deriveWorkspaceAppToolNames, discoverWorkspaceAppCandidates, discoverWorkspaceApps, LOCAL_APP_TOOL_PREFIX, MCP_APP_WORKSPACE_TOOL_PREFIX, productAppBundleReservations, scanWorkspaceApps, WORKSPACE_APP_TOOL_PREFIX, } from './discovery.js';
+export { AppDiscoveryFsError, NodeAppDiscoveryFs, NodeAppDiscoveryFsAdapter, defaultAppDiscoveryFs, defaultNodeAppDiscoveryFs, createWorkspaceAppScanCache, deriveWorkspaceAppToolName, deriveWorkspaceAppToolNames, discoverWorkspaceAppCandidates, discoverWorkspaceApps, LOCAL_APP_TOOL_PREFIX, MCP_APP_WORKSPACE_TOOL_PREFIX, productAppBundleReservations, scanWorkspaceApps, WORKSPACE_APP_TOOL_PREFIX, } from './discovery.js';
 export { loadProductAppBundleAssets } from './product-bundle-assets.js';
 export type { ProductAppBundleAsset, ProductAppBundleAssetCatalog, ProductAppBundleAssetLoadOptions, } from './product-bundle-assets.js';
 export type { WorkspaceAppAsset, WorkspaceAppAssetCatalog, WorkspaceAppAssetDescriptorV1, WorkspaceAppAssetLocator, } from './workspace-app-assets.js';
-export type { AppDiscoveryBytes, AppDiscoveryDiagnostic, AppDiscoveryDirectoryEntry, AppDiscoveryDirectoryEntryKind, AppDiscoveryDirectoryListing, AppDiscoveryFileSystem, AppDiscoveryFsErrorCode, AppDiscoveryMaybePromise, WorkspaceAppDiscoveryOptions as AppDiscoveryOptions, McpAppDiscoveryDiagnostic, WorkspaceAppBuiltinCatalog, WorkspaceAppCandidate, WorkspaceAppDiscoveryIncompleteReason, WorkspaceAppDiscoveryOptions, WorkspaceAppDiscoveryResult, WorkspaceAppDiagnostic, WorkspaceAppDiagnosticCode, WorkspaceAppDiscoverySource, WorkspaceAppResourceSnapshot, WorkspaceAppReservedCatalog, WorkspaceAppSource, WorkspaceAppToolNames, ProductAppBundleDefinitionIdentity, ProductAppBundleFileHash, ProductAppBundleIndex, ProductAppBundleInput, ProductAppBundlePackageIndex, ProductAppBundleReservations, ProductAppBundleProvenance, ProductAppBundleSnapshotMetadata, } from './discovery.js';
+export type { AppDiscoveryBytes, AppDiscoveryDiagnostic, AppDiscoveryDirectoryEntry, AppDiscoveryDirectoryEntryKind, AppDiscoveryDirectoryListing, AppDiscoveryFileSystem, AppDiscoveryFileFingerprint, AppDiscoveryFsErrorCode, AppDiscoveryMaybePromise, AppDiscoveryRootIdentity, WorkspaceAppDiscoveryOptions as AppDiscoveryOptions, McpAppDiscoveryDiagnostic, WorkspaceAppBuiltinCatalog, WorkspaceAppCandidate, WorkspaceAppDiscoveryIncompleteReason, WorkspaceAppDiscoveryOptions, WorkspaceAppDiscoveryResult, WorkspaceAppDiagnostic, WorkspaceAppDiagnosticCode, WorkspaceAppDiscoverySource, WorkspaceAppResourceSnapshot, WorkspaceAppScanCache, WorkspaceAppReservedCatalog, WorkspaceAppSource, WorkspaceAppToolNames, ProductAppBundleDefinitionIdentity, ProductAppBundleFileHash, ProductAppBundleIndex, ProductAppBundleInput, ProductAppBundlePackageIndex, ProductAppBundleReservations, ProductAppBundleProvenance, ProductAppBundleSnapshotMetadata, } from './discovery.js';
 export { createWorkspaceAppCatalog, discoverWorkspaceAppCatalog, hashAppDefinition, hashCrewxAppDefinition, listWorkspaceApps, } from './catalog.js';
 export type { CrewxAppBuiltinCatalog, CrewxAppCapability, CrewxAppCatalogOptions, CrewxAppCatalogResult, CrewxAppDefinitionHashInput, CrewxAppDefinitionSummary, CrewxAppDiagnostic, CrewxAppDiagnosticCode, CrewxAppDiagnosticSource, CrewxAppInstalledProjection, CrewxAppLocalDefinitionRef, CrewxAppOrigin, CrewxAppOwnership, CrewxAppShareability, CrewxAppSharingAvailability, CrewxAppSummary, } from './types.js';
 export { MCP_APP_PROJECTION_MAX_BYTES, buildMcpAppStateDescriptor, buildMcpAppStateProjections, createMcpAppToolResult, projectMcpAppSummaryState, serializeMcpAppStateJson, serializeMcpAppStateXml, } from './projection.js';

package/dist/mcp-app/model-context.d.ts

@@ -3,6 +3,7 @@ export declare const MCP_APP_MODEL_CONTEXT_MAX_BYTES: number;
 export declare const MCP_APP_MODEL_CONTEXT_MAX_STRING_LENGTH = 2048;
 export declare const MCP_APP_MODEL_CONTEXT_MAX_ARRAY_LENGTH = 200;
 export declare const MCP_APP_MODEL_CONTEXT_MAX_DEPTH = 8;
+export declare const MCP_APP_ACTION_RESULT_MAX_BYTES: number;
 export interface McpAppModelContextInput {
     readonly instanceId: string;
     readonly definitionHash: string;
@@ -20,6 +21,8 @@ export interface McpAppModelContext {
     }[];
     readonly structuredContent?: JsonObject;
 }
+export declare function sanitizeMcpAppActionResult(value: unknown): JsonObject;
+export declare function prepareMcpAppActionResult(value: unknown, selectedAllow: readonly string[]): JsonObject;
 export declare function sanitizeMcpAppModelContext(value: unknown): McpAppModelContext;
 export declare function serializeMcpAppModelContextXml(context: McpAppModelContext, options?: {
     readonly stale?: boolean;

package/dist/mcp-app/node-app-discovery-fs.d.ts

@@ -1,3 +1,4 @@
+import type { AppDiscoveryFileFingerprint, AppDiscoveryRootIdentity } from './discovery.js';
 export type AppDiscoveryFsErrorCode = 'NOT_FOUND' | 'READ_DENIED' | 'LIMIT_EXCEEDED' | 'PATH_ESCAPED' | 'IDENTITY_CHANGED' | 'TOCTOU' | 'UNSUPPORTED';
 export declare class AppDiscoveryFsError extends Error {
     readonly code: AppDiscoveryFsErrorCode;
@@ -9,10 +10,12 @@ export interface NodeAppDiscoveryDirectoryEntry {
     readonly kind: 'file' | 'directory' | 'symlink' | 'other';
 }
 export declare class NodeAppDiscoveryFs {
+    getRootIdentity(root: string): Promise<AppDiscoveryRootIdentity>;
     listDirectory(root: string, relativePath: string): Promise<readonly NodeAppDiscoveryDirectoryEntry[]>;
     readdir(root: string, relativePath: string): Promise<readonly NodeAppDiscoveryDirectoryEntry[]>;
     readDirectory(root: string, relativePath: string): Promise<readonly NodeAppDiscoveryDirectoryEntry[]>;
     readVerifiedFile(root: string, relativePath: string, byteLimit: number): Promise<Uint8Array>;
+    fingerprintVerifiedFile(root: string, relativePath: string, byteLimit: number): Promise<AppDiscoveryFileFingerprint>;
     readFileVerified(root: string, relativePath: string, byteLimit: number): Promise<Uint8Array>;
 }
 export declare const defaultAppDiscoveryFs: NodeAppDiscoveryFs;

package/dist/mcp-app/projection.d.ts

@@ -2,6 +2,7 @@ import type { JsonObject, UiDefinition } from '../ui-instance/types.js';
 import type { McpAppServerStateInput, McpAppStateDescriptor, McpAppStateProjections, McpAppToolDescriptor, McpAppToolResult } from './types.js';
 export declare const MCP_APP_PROJECTION_MAX_BYTES: number;
 export declare const SENSITIVE_KEY: RegExp;
+export declare function projectMcpAppActionResult(result: unknown, selectedAllow: readonly string[]): JsonObject;
 export declare function projectMcpAppSummaryState(state: unknown, definition: UiDefinition): JsonObject;
 export declare function buildMcpAppStateDescriptor(input: McpAppServerStateInput): McpAppStateDescriptor;
 export declare function serializeMcpAppStateJson(descriptor: McpAppStateDescriptor, dataPaths?: readonly string[]): string;

package/dist/mcp-app/types.d.ts

@@ -426,7 +426,7 @@ export interface CrewxAppSummary {
     readonly definitionHash: string;
     readonly provenance?: ProductAppBundleProvenance;
 }
-export type CrewxAppDiagnosticCode = 'MANIFEST_MISSING' | 'MANIFEST_INVALID' | 'ENTRY_INVALID' | 'INITIAL_STATE_INVALID' | 'DUPLICATE_ID' | 'RESERVED_ID' | 'BUNDLE_INTEGRITY' | 'LINEAGE_INVALID' | 'LINEAGE_STALE' | 'PATH_ESCAPED' | 'LIMIT_EXCEEDED' | 'ASSET_CATALOG_INVALID' | 'EXEC_DENIED' | 'SKILL_INVALID' | 'SKILL_READ_FAILED' | 'INSTALLED_MISSING' | 'INSTALLED_CONTENT_ID_MISSING' | 'INSTALLED_IDENTITY_MISMATCH' | 'BUILTIN_INVALID';
+export type CrewxAppDiagnosticCode = 'MANIFEST_MISSING' | 'MANIFEST_INVALID' | 'ENTRY_INVALID' | 'INITIAL_STATE_INVALID' | 'DUPLICATE_ID' | 'RESERVED_ID' | 'BUNDLE_INTEGRITY' | 'LINEAGE_INVALID' | 'LINEAGE_STALE' | 'PATH_ESCAPED' | 'LIMIT_EXCEEDED' | 'DISCOVERY_TIME_LIMIT' | 'ASSET_CATALOG_INVALID' | 'EXEC_DENIED' | 'SKILL_INVALID' | 'SKILL_READ_FAILED' | 'INSTALLED_MISSING' | 'INSTALLED_CONTENT_ID_MISSING' | 'INSTALLED_IDENTITY_MISMATCH' | 'BUILTIN_INVALID';
 export type CrewxAppDiagnosticSource = 'apps' | 'skills' | 'bundled' | 'node_modules' | 'builtin' | 'installed';
 export interface CrewxAppDiagnostic {
     readonly code: CrewxAppDiagnosticCode;

package/dist/mcp-app/workspace-app-assets.d.ts

@@ -1,4 +1,5 @@
 import type { AppDiscoveryFileSystem, WorkspaceAppCandidate, WorkspaceAppDiagnostic, WorkspaceAppSource } from './discovery.js';
+import { type WorkspaceAppScanCache } from './workspace-app-scan-cache.js';
 import { type ProductAppBundleAsset } from './product-bundle-assets.js';
 export interface WorkspaceAppAssetLocator {
     readonly role: string;
@@ -34,5 +35,8 @@ export interface WorkspaceAppAssetCatalogLoadResult {
     readonly catalogs: readonly WorkspaceAppAssetCatalogDraft[];
     readonly diagnostics: readonly WorkspaceAppDiagnostic[];
 }
-export declare function loadWorkspaceAppAssetCatalogs(workspaceRoot: string, candidates: readonly WorkspaceAppCandidate[], filesystem?: AppDiscoveryFileSystem): Promise<WorkspaceAppAssetCatalogLoadResult>;
+export declare function loadWorkspaceAppAssetCatalogs(workspaceRoot: string, candidates: readonly WorkspaceAppCandidate[], filesystem?: AppDiscoveryFileSystem, options?: {
+    readonly scanCache?: WorkspaceAppScanCache;
+    readonly candidateScanWasUnchanged?: boolean;
+}): Promise<WorkspaceAppAssetCatalogLoadResult>;
 export declare function sealWorkspaceAppAssetCatalog(draft: WorkspaceAppAssetCatalogDraft, snapshotHash: string): WorkspaceAppAssetCatalog;

package/dist/mcp-app/workspace-app-scan-cache.d.ts

@@ -0,0 +1,24 @@
+export interface WorkspaceAppScanRootIdentity {
+    readonly dev: bigint;
+    readonly ino: bigint;
+    readonly realPath: string;
+}
+interface WorkspaceAppScanCacheState {
+    rootIdentity?: WorkspaceAppScanRootIdentity;
+    lastCandidateScanUnchanged?: boolean;
+    lastCandidateKeys?: readonly string[];
+    scanStartedAtNs?: bigint;
+    lastAssetCatalogsUnchanged?: boolean;
+    lastSnapshot?: unknown;
+    lastSnapshotBuildInputs?: readonly unknown[];
+    readonly candidates: Map<string, unknown>;
+    readonly assetCatalogs: Map<string, unknown>;
+}
+declare const CACHE_STATE: unique symbol;
+export interface WorkspaceAppScanCache {
+    readonly [CACHE_STATE]: WorkspaceAppScanCacheState;
+}
+export declare function createWorkspaceAppScanCache(): WorkspaceAppScanCache;
+export declare function workspaceAppScanCacheState(cache: WorkspaceAppScanCache): WorkspaceAppScanCacheState;
+export declare function resetWorkspaceAppScanCacheForRoot(cache: WorkspaceAppScanCache, identity: WorkspaceAppScanRootIdentity): WorkspaceAppScanCacheState;
+export {};