@crewx/sdk 0.9.0-rc.14 → 0.9.0-rc.141

package/dist/mcp-app/content-declarations.d.ts

@@ -0,0 +1,31 @@
+import { UI_CONTENT_MEDIA_TYPES } from '../app/content-media-types.js';
+import type { UiContentMediaType } from '../app/content-media-types.js';
+import type { UiDefinition, UiDefinitionRef } from '../ui-instance/types.js';
+export { UI_CONTENT_MEDIA_TYPES };
+export type { UiContentMediaType };
+export interface McpAppContentActionDeclaration {
+    readonly actionId: string;
+    readonly in?: {
+        readonly mediaType: UiContentMediaType;
+        readonly required: boolean;
+    };
+    readonly out?: {
+        readonly mediaType: UiContentMediaType;
+        readonly range: boolean;
+    };
+}
+export interface McpAppContentActions {
+    readonly schemaVersion: 1;
+    readonly instanceId: string;
+    readonly definition: {
+        readonly id: string;
+        readonly version: number;
+        readonly hash: string;
+    };
+    readonly actions: readonly McpAppContentActionDeclaration[];
+}
+export declare function isUiContentMediaType(value: unknown): value is UiContentMediaType;
+export declare function isValidUiAppInstanceId(value: unknown): value is string;
+export declare function buildMcpAppContentActions(instanceId: string, definition: UiDefinition): McpAppContentActions | undefined;
+export declare function isMcpAppContentActions(value: unknown): value is McpAppContentActions;
+export declare function contentActionsMatch(value: unknown, instanceId: string, definitionRef: UiDefinitionRef): boolean;

package/dist/mcp-app/dev-checks.d.ts

@@ -0,0 +1,29 @@
+export type AppDevCheckItem = {
+    readonly rule: 'manifest' | 'external_resource' | 'output_unsafe_string' | 'output_invalid' | 'output_size' | 'call_duration';
+    readonly severity: 'error' | 'warning' | 'ok';
+    readonly code: string;
+    readonly where: string;
+    readonly detail?: Record<string, string | number>;
+};
+export type ExternalResourceKind = 'script' | 'style' | 'image' | 'font' | 'media' | 'frame' | 'object' | 'form' | 'navigation' | 'css' | 'script_network';
+export interface ExternalResourceFinding {
+    readonly line: number;
+    readonly column: number;
+    readonly url: string;
+    readonly directive: string;
+    readonly kind: ExternalResourceKind;
+}
+export interface InspectSkillBackendOutputOptions {
+    readonly actionId: string;
+    readonly dataPaths?: readonly string[];
+    readonly resultProjectionAllow?: readonly string[];
+    readonly durationMs?: number;
+    readonly timedOut?: boolean;
+    readonly contentFramed?: boolean;
+}
+export interface ScanExternalResourcesOptions {
+    readonly csp: string;
+}
+export declare function inspectSkillBackendOutput(stdoutText: string, options: InspectSkillBackendOutputOptions): AppDevCheckItem[];
+export declare function scanExternalResources(html: string, options: ScanExternalResourcesOptions): ExternalResourceFinding[];
+export declare function externalResourceCheckItems(entryRelativePath: string, findings: readonly ExternalResourceFinding[]): AppDevCheckItem[];

package/dist/mcp-app/diagnostic-reason.d.ts

@@ -0,0 +1,3 @@
+import type { AppManifestFileName, AppManifestReason } from '../ui-plugin/app-manifest.js';
+export declare function projectAppManifestReason(value: unknown): AppManifestReason | undefined;
+export declare function projectAppManifestFiles(value: unknown): readonly AppManifestFileName[] | undefined;

package/dist/mcp-app/discovery.d.ts

@@ -0,0 +1,160 @@
+import type { UiDefinitionLineageEntry } from '../ui-instance/lineage.js';
+import type { JsonObject, JsonValue, UiDefinition } from '../ui-instance/types.js';
+import type { AppManifestFileName, AppManifestReason } from '../ui-plugin/index.js';
+import type { UiPluginHandlerMetadata, UiPluginManifestV2, UiPluginNormalizedManifestV2 } from '../ui-plugin/types.js';
+import { createWorkspaceAppScanCache, type WorkspaceAppScanCache, type WorkspaceAppScanRootIdentity } from './workspace-app-scan-cache.js';
+import { AppDiscoveryFsError, NodeAppDiscoveryFs, NodeAppDiscoveryFsAdapter, defaultAppDiscoveryFs, defaultNodeAppDiscoveryFs, type AppDiscoveryFsErrorCode } from './node-app-discovery-fs.js';
+import type { McpAppRegistry } from './types.js';
+import type { ProductAppBundleFileHash, ProductAppBundleInput, ProductAppBundleProvenance as LoadedProductAppBundleProvenance } from './product-bundle-loader.js';
+export type { ProductAppBundleDefinitionIdentity, ProductAppBundleFileHash, ProductAppBundleIndex, ProductAppBundleInput, ProductAppBundlePackageIndex, ProductAppBundleReservations, } from './product-bundle-loader.js';
+export { productAppBundleReservations } from './product-bundle-loader.js';
+export type WorkspaceAppSource = 'apps' | 'skills';
+export declare function isWorkspacePackage(source: WorkspaceAppSource, relativePath: string): boolean;
+export type WorkspaceAppDiscoverySource = WorkspaceAppSource | 'bundled';
+export interface ProductAppBundleProvenance extends LoadedProductAppBundleProvenance {
+    readonly appId: string;
+    readonly definitionId: string;
+    readonly version: number;
+    readonly definitionHash: string;
+    readonly files: readonly ProductAppBundleFileHash[];
+}
+export type WorkspaceAppDiscoveryIncompleteReason = 'time_limit';
+export type WorkspaceAppDiagnosticCode = 'MANIFEST_MISSING' | 'MANIFEST_INVALID' | 'MANIFEST_DUAL_MISMATCH' | 'ENTRY_INVALID' | 'INITIAL_STATE_INVALID' | 'DUPLICATE_ID' | 'RESERVED_ID' | 'BUNDLE_INTEGRITY' | 'LINEAGE_INVALID' | 'LINEAGE_STALE' | 'PATH_ESCAPED' | 'LIMIT_EXCEEDED' | 'DISCOVERY_TIME_LIMIT' | 'ASSET_CATALOG_INVALID' | 'EXEC_DENIED';
+export interface WorkspaceAppDiagnostic {
+    readonly code: WorkspaceAppDiagnosticCode;
+    readonly pluginId?: string;
+    readonly source: WorkspaceAppDiscoverySource;
+    readonly relativePath: string;
+    readonly reason?: AppManifestReason;
+    readonly files?: readonly AppManifestFileName[];
+}
+export interface ProductAppBundleSnapshotMetadata {
+    readonly indexHash?: string;
+    readonly candidates?: readonly WorkspaceAppCandidate[];
+    readonly diagnostics: readonly WorkspaceAppDiagnostic[];
+    readonly reservedAppIds: readonly string[];
+    readonly reservedDefinitionIds: readonly string[];
+}
+export type McpAppDiscoveryDiagnostic = WorkspaceAppDiagnostic;
+export type AppDiscoveryDiagnostic = WorkspaceAppDiagnostic;
+export type AppDiscoveryDirectoryEntryKind = 'file' | 'directory' | 'symlink' | 'other';
+export interface AppDiscoveryDirectoryEntry {
+    readonly name: string;
+    readonly kind: AppDiscoveryDirectoryEntryKind;
+}
+export interface AppDiscoveryFileFingerprint {
+    readonly dev: bigint;
+    readonly ino: bigint;
+    readonly size: bigint;
+    readonly mtimeNs: bigint;
+    readonly ctimeNs: bigint;
+    readonly candidateRealPath: string;
+}
+export interface AppDiscoveryRootIdentity extends WorkspaceAppScanRootIdentity {
+}
+export type AppDiscoveryDirectoryListing = readonly AppDiscoveryDirectoryEntry[] | readonly string[];
+export type AppDiscoveryBytes = Uint8Array | ArrayBuffer | readonly number[];
+export type AppDiscoveryMaybePromise<T> = T | PromiseLike<T>;
+export interface AppDiscoveryFileSystem {
+    readonly listDirectory?: (root: string, relativePath: string) => AppDiscoveryMaybePromise<AppDiscoveryDirectoryListing>;
+    readonly readDirectory?: (root: string, relativePath: string) => AppDiscoveryMaybePromise<AppDiscoveryDirectoryListing>;
+    readonly readdir?: (root: string, relativePath: string) => AppDiscoveryMaybePromise<AppDiscoveryDirectoryListing>;
+    readonly readVerifiedFile?: (root: string, relativePath: string, byteLimit: number) => AppDiscoveryMaybePromise<AppDiscoveryBytes>;
+    readonly readFileVerified?: (root: string, relativePath: string, byteLimit: number) => AppDiscoveryMaybePromise<AppDiscoveryBytes>;
+    readonly fingerprintVerifiedFile?: (root: string, relativePath: string, byteLimit: number) => AppDiscoveryMaybePromise<AppDiscoveryFileFingerprint>;
+    readonly getRootIdentity?: (root: string) => AppDiscoveryMaybePromise<AppDiscoveryRootIdentity>;
+}
+export interface WorkspaceAppReservedCatalog {
+    readonly appIds?: Iterable<string>;
+    readonly definitionIds?: Iterable<string>;
+    readonly toolNames?: Iterable<string>;
+}
+export type WorkspaceAppBuiltinCatalog = Pick<McpAppRegistry, 'listMcpApps' | 'listMcpAppTools'>;
+export interface WorkspaceAppDiscoveryOptions {
+    readonly filesystem?: AppDiscoveryFileSystem;
+    readonly fileSystem?: AppDiscoveryFileSystem;
+    readonly fs?: AppDiscoveryFileSystem;
+    readonly clock?: () => number;
+    readonly reserved?: WorkspaceAppReservedCatalog;
+    readonly builtin?: WorkspaceAppReservedCatalog;
+    readonly builtins?: WorkspaceAppReservedCatalog | WorkspaceAppBuiltinCatalog;
+    readonly builtinCatalog?: WorkspaceAppBuiltinCatalog;
+    readonly reservedAppIds?: Iterable<string>;
+    readonly reservedDefinitionIds?: Iterable<string>;
+    readonly reservedToolNames?: Iterable<string>;
+    readonly productBundle?: ProductAppBundleInput;
+    readonly scanCache?: WorkspaceAppScanCache;
+}
+export interface WorkspaceAppToolNames {
+    readonly read: string;
+    readonly action?: string;
+}
+export interface WorkspaceAppResourceSnapshot {
+    readonly provenance?: ProductAppBundleProvenance;
+    readonly entry: {
+        readonly path: 'ui/index.html';
+        readonly hash: string;
+        readonly bytes: readonly number[];
+    };
+    readonly initialState?: {
+        readonly path: 'ui/state.json';
+        readonly hash: string;
+        readonly bytes: readonly number[];
+    };
+}
+interface WorkspaceAppCandidateBase {
+    readonly appId: string;
+    readonly pluginId: string;
+    readonly definitionId: string;
+    readonly version: number;
+    readonly releaseVersion?: string;
+    readonly manifestFile?: AppManifestFileName;
+    readonly mcpb?: Readonly<Record<string, JsonValue>>;
+    readonly relativePath: string;
+    readonly manifest: UiPluginManifestV2;
+    readonly normalized: UiPluginNormalizedManifestV2;
+    readonly name: string;
+    readonly description: string;
+    readonly icon?: string;
+    readonly tone?: UiPluginManifestV2['tone'];
+    readonly definition: UiDefinition;
+    readonly handlers: Readonly<Record<string, UiPluginHandlerMetadata>>;
+    readonly resources: WorkspaceAppResourceSnapshot;
+    readonly html: string;
+    readonly entryBytes: readonly number[];
+    readonly entryHash: string;
+    readonly initialState: JsonObject;
+    readonly initialStateBytes?: readonly number[];
+    readonly initialStateHash?: string;
+    readonly sourceHash: string;
+    readonly toolNames: WorkspaceAppToolNames;
+}
+export type WorkspaceAppCandidate = WorkspaceAppCandidateBase & ({
+    readonly source: WorkspaceAppSource;
+    readonly provenance?: never;
+    readonly lineage?: never;
+} | {
+    readonly source?: never;
+    readonly provenance: ProductAppBundleProvenance;
+    readonly lineage: readonly UiDefinitionLineageEntry[];
+});
+export interface WorkspaceAppDiscoveryResult {
+    readonly apps: readonly WorkspaceAppCandidate[];
+    readonly diagnostics: readonly WorkspaceAppDiagnostic[];
+    readonly complete: boolean;
+    readonly incompleteReason?: WorkspaceAppDiscoveryIncompleteReason;
+    readonly productBundleIndexHash?: string;
+    readonly productBundleSnapshotMetadata?: ProductAppBundleSnapshotMetadata;
+    readonly candidates?: readonly WorkspaceAppCandidate[];
+}
+export declare const WORKSPACE_APP_TOOL_PREFIX = "crewx_local_app_";
+export declare const LOCAL_APP_TOOL_PREFIX = "crewx_local_app_";
+export declare const MCP_APP_WORKSPACE_TOOL_PREFIX = "crewx_local_app_";
+export declare function deriveWorkspaceAppToolNames(pluginId: string): WorkspaceAppToolNames;
+export declare function deriveWorkspaceAppToolName(pluginId: string, kind?: 'read' | 'action'): string;
+export declare function discoverWorkspaceApps(workspaceRoot: string, fs?: AppDiscoveryFileSystem, options?: WorkspaceAppDiscoveryOptions): Promise<WorkspaceAppDiscoveryResult>;
+export declare function discoverWorkspaceApps(workspaceRoot: string, options?: WorkspaceAppDiscoveryOptions): Promise<WorkspaceAppDiscoveryResult>;
+export declare const discoverWorkspaceAppCandidates: typeof discoverWorkspaceApps;
+export declare const scanWorkspaceApps: typeof discoverWorkspaceApps;
+export { AppDiscoveryFsError, NodeAppDiscoveryFs, NodeAppDiscoveryFsAdapter, defaultAppDiscoveryFs, defaultNodeAppDiscoveryFs, createWorkspaceAppScanCache, };
+export type { AppDiscoveryFsErrorCode, WorkspaceAppScanCache, };

package/dist/mcp-app/errors.d.ts

@@ -0,0 +1,7 @@
+export type McpAppContractErrorCode = 'APP_ID_INVALID' | 'APP_ID_CONFLICT' | 'TOOL_ID_INVALID' | 'TOOL_ID_CONFLICT' | 'RESOURCE_URI_INVALID' | 'RESOURCE_NOT_FOUND' | 'HTML_INVALID' | 'TOOL_INVALID' | 'STATE_INVALID' | 'STATE_PROJECTION_INVALID' | 'BUTTON_INVALID' | 'SERIALIZATION_INVALID';
+export declare class McpAppContractError extends Error {
+    readonly code: McpAppContractErrorCode;
+    readonly name = "McpAppContractError";
+    constructor(code: McpAppContractErrorCode, message?: string);
+}
+export declare function rejectMcpApp(code: McpAppContractErrorCode, message?: string): never;

package/dist/mcp-app/index.d.ts

@@ -0,0 +1,33 @@
+export type { McpAppContractErrorCode } from './errors.js';
+export { McpAppContractError } from './errors.js';
+export { INSTALLED_APP_ENTRY, InstalledAppRefError, buildInstalledAppRef, validateInstalledAppRef, } from './installed-app-ref.js';
+export type { BuildInstalledAppRefInput, InstalledAppPackageFile, InstalledAppRef, InstalledAppRefErrorCode, } from './installed-app-ref.js';
+export { MAX_HTML_LENGTH, createMcpAppRegistry, createBuiltinMcpAppRegistry, buildMcpAppLocalRegistration, createMcpAppLocalRegistration, registerLocalMcpApp, createMcpAppWorkspaceRegistry, createWorkspaceAppRegistry, createWorkspaceMcpAppRegistry, registerMcpApp, resolveMcpAppResource, resolveLocalMcpAppResource, requireMcpAppResource, toMcpAppToolRegistration, makeUiUri, buildMcpAppBundleRegistrationInput, buildMcpAppBundleAgentActionDescriptors, planProductBundleLegacyToolNames, resolveMcpAppFixedResultCall, } from './registry.js';
+export { AppDiscoveryFsError, NodeAppDiscoveryFs, NodeAppDiscoveryFsAdapter, defaultAppDiscoveryFs, defaultNodeAppDiscoveryFs, createWorkspaceAppScanCache, deriveWorkspaceAppToolName, deriveWorkspaceAppToolNames, discoverWorkspaceAppCandidates, discoverWorkspaceApps, LOCAL_APP_TOOL_PREFIX, MCP_APP_WORKSPACE_TOOL_PREFIX, productAppBundleReservations, scanWorkspaceApps, WORKSPACE_APP_TOOL_PREFIX, } from './discovery.js';
+export { loadProductAppBundleAssets } from './product-bundle-assets.js';
+export type { ProductAppBundleAsset, ProductAppBundleAssetCatalog, ProductAppBundleAssetLoadOptions, } from './product-bundle-assets.js';
+export type { WorkspaceAppAsset, WorkspaceAppAssetCatalog, WorkspaceAppAssetDescriptorV1, WorkspaceAppAssetLocator, } from './workspace-app-assets.js';
+export type { AppDiscoveryBytes, AppDiscoveryDiagnostic, AppDiscoveryDirectoryEntry, AppDiscoveryDirectoryEntryKind, AppDiscoveryDirectoryListing, AppDiscoveryFileSystem, AppDiscoveryFileFingerprint, AppDiscoveryFsErrorCode, AppDiscoveryMaybePromise, AppDiscoveryRootIdentity, WorkspaceAppDiscoveryOptions as AppDiscoveryOptions, McpAppDiscoveryDiagnostic, WorkspaceAppBuiltinCatalog, WorkspaceAppCandidate, WorkspaceAppDiscoveryIncompleteReason, WorkspaceAppDiscoveryOptions, WorkspaceAppDiscoveryResult, WorkspaceAppDiagnostic, WorkspaceAppDiagnosticCode, WorkspaceAppDiscoverySource, WorkspaceAppResourceSnapshot, WorkspaceAppScanCache, WorkspaceAppReservedCatalog, WorkspaceAppSource, WorkspaceAppToolNames, ProductAppBundleDefinitionIdentity, ProductAppBundleFileHash, ProductAppBundleIndex, ProductAppBundleInput, ProductAppBundlePackageIndex, ProductAppBundleReservations, ProductAppBundleProvenance, ProductAppBundleSnapshotMetadata, } from './discovery.js';
+export { createWorkspaceAppCatalog, discoverWorkspaceAppCatalog, hashAppDefinition, hashCrewxAppDefinition, listWorkspaceApps, } from './catalog.js';
+export type { CrewxAppBuiltinCatalog, CrewxAppCapability, CrewxAppCatalogOptions, CrewxAppCatalogResult, CrewxAppDefinitionHashInput, CrewxAppDefinitionSummary, CrewxAppDiagnostic, CrewxAppDiagnosticCode, CrewxAppDiagnosticSource, CrewxAppInstalledProjection, CrewxAppLocalDefinitionRef, CrewxAppOrigin, CrewxAppOwnership, CrewxAppShareability, CrewxAppSharingAvailability, CrewxAppSummary, } from './types.js';
+export { MCP_APP_PROJECTION_MAX_BYTES, buildMcpAppStateDescriptor, buildMcpAppStateProjections, createMcpAppToolResult, projectMcpAppSummaryState, serializeMcpAppStateJson, serializeMcpAppStateXml, } from './projection.js';
+export { attachAvailableApps, buildMcpAppsContext } from './apps-context.js';
+export type { McpAppsContext, McpAppsContextOptions } from './apps-context.js';
+export { UI_CONTENT_ERROR_CODES, UI_CONTENT_MAX_BYTES, UI_CONTENT_MAX_LINES, UI_CONTENT_MAX_MEMORY_BYTES, UI_CONTENT_MEDIA_TYPES, UI_CONTENT_OUTPUT_TTL_MS, UI_CONTENT_TICKET_TTL_MS, UiContentChannelError, contentBindingMatches, countContentLines, decodeContentUtf8, isUiContentDeclaration, isUiContentMediaType, isUiContentRangeRequest, isValidUiAppInstanceId, isValidUiThreadIdentity, sha256Content, validateContentBytes, validateContentFrame, } from './content-channel.js';
+export type { ContentFrame, UiActionContentDeclaration, UiContentBinding, UiContentChannelPort, UiContentErrorCode, UiContentInputDeclaration, UiContentInputTicket, UiContentMediaType, UiContentOutputDeclaration, UiContentRange, UiContentRangeRequest, ValidateContentFrameOptions, } from './content-channel.js';
+export { buildMcpAppContentActions, contentActionsMatch, isMcpAppContentActions, } from './content-declarations.js';
+export type { McpAppContentActionDeclaration, McpAppContentActions, } from './content-declarations.js';
+export { MCP_APP_MODEL_CONTEXT_MAX_ARRAY_LENGTH, MCP_APP_MODEL_CONTEXT_MAX_BYTES, MCP_APP_MODEL_CONTEXT_MAX_DEPTH, MCP_APP_MODEL_CONTEXT_MAX_STRING_LENGTH, sanitizeMcpAppModelContext, serializeMcpAppModelContextXml, } from './model-context.js';
+export type { McpAppModelContext, McpAppModelContextInput } from './model-context.js';
+export { resolveAgentAccess, listMcpAppAgentActions } from './agent-access.js';
+export type { McpAppAgentAccess, McpAppAgentAccessAction, McpAppVerifiedBundleAccessContext } from './agent-access.js';
+export { buildStateSetHandler, createStateSetHandler, } from './state-set.js';
+export type { StateSetHandlerBuildInput } from './state-set.js';
+export { SKILL_BACKEND_DEFAULT_TIMEOUT_MS, SKILL_BACKEND_INHERITED_ENV_ALLOWLIST, SKILL_BACKEND_CONTENT_SCHEMA_VERSION, SKILL_BACKEND_MAX_INPUT_BYTES, SKILL_BACKEND_MAX_OUTPUT_BYTES, SKILL_BACKEND_SCHEMA_VERSION, buildSkillBackendChildEnvironment, buildSkillBackendHandler, buildVerifiedBundleSkillBackendHandler, } from './skill-backend.js';
+export type { SkillBackendChildEnvironment, SkillBackendExecutionPort, SkillBackendExecutionRequest, SkillBackendExecutionResponse, SkillBackendHandlerBuildInput, SkillBackendInfrastructureErrorCode, SkillBackendPayload, VerifiedBundleSkillBackendBuildInput, VerifiedBundleSkillRunnerPort, VerifiedBundleSkillSpawnRequest, SkillBackendPayloadV1, SkillBackendPayloadV2, SkillBackendContentInputHeader, SkillBackendContentOutputHeader, } from './skill-backend.js';
+export { externalResourceCheckItems, inspectSkillBackendOutput, scanExternalResources, } from './dev-checks.js';
+export type { AppDevCheckItem, ExternalResourceFinding, ExternalResourceKind, InspectSkillBackendOutputOptions, ScanExternalResourcesOptions, } from './dev-checks.js';
+export { MCP_APP_HOST_TOOL_ALLOWLIST, MCP_CORE_TOOL_NAMES, MCP_APP_LOCAL_RESOURCE_MIME_TYPE, MCP_APP_RESOURCE_MIME_TYPE, MCP_APP_RESOURCE_URI_PREFIX, } from './types.js';
+export type { McpAppActionDispatcherToolInput, McpAppActionToolDescriptor, McpAppActionToolInput, McpAppButtonDescriptor, McpAppButtonInput, McpAppDescriptor, McpAppDescriptorInput, McpAppInputSchema, McpAppTone, McpUiResourceCsp, McpAppRegistry, McpAppResource, McpAppServerStateInput, McpAppStateDescriptor, McpAppStateProjections, McpAppHostToolInput, McpAppHostToolName, McpCoreToolName, McpAppReadToolInput, McpAppSingleActionToolInput, McpAppToolCommonInput, McpAppToolDescriptor, McpAppFixedResult, McpAppFixedResultCall, McpAppFixedResultInvalidParams, McpAppFixedResultResolution, McpAppFixedResultUnavailable, McpAppToolInput, McpAppToolMetadata, McpAppToolRegistration, McpAppToolResult, McpAppToolVisibility, McpAppInstanceResourceBinding, McpAppMcpResourceBinding, McpAppResourceBinding, McpAppLocalResource, McpAppLocalRegistrationInput, McpAppLocalReadToolDescriptor, McpAppLocalActionToolDescriptor, McpAppLocalSingleActionToolDescriptor, McpAppLocalHostToolDescriptor, McpAppLocalToolDiagnostic, McpAppLocalToolDescriptor, McpAppLocalRegistration, McpAppBuiltinRegistration, McpAppResolvedRegistration, McpAppLocalLauncher, McpAppBuiltinLauncher, McpAppLauncher, WorkspaceAppLauncher, WorkspaceAppResolvedRegistration, McpAppWorkspaceRegistry, WorkspaceAppRegistry, McpAppWorkspaceRegistryInput, McpAppRegistryOptions, McpAppBundleHostToolTemplate, McpAppBundleAgentActionDescriptor, } from './types.js';
+export { buildWorkspaceAppSnapshot, discoverWorkspaceAppSnapshot, reconfirmWorkspaceAppSnapshot, } from './workspace-snapshot.js';
+export type { WorkspaceAppSnapshot, WorkspaceAppSnapshotBuildOptions, WorkspaceAppSnapshotOptions, WorkspaceAppSnapshotReconfirmResult, WorkspaceAppSnapshotResource, WorkspaceAppSnapshotInitialState, WorkspaceAppInitialState, } from './workspace-snapshot.js';

package/dist/mcp-app/installed-app-ref.d.ts

@@ -0,0 +1,25 @@
+import type { UiDefinition, UiDefinitionRef } from '../ui-instance/types.js';
+export declare const INSTALLED_APP_ENTRY: "ui/index.html";
+export type InstalledAppRefErrorCode = 'APP_ID_INVALID' | 'DEFINITION_REF_INVALID' | 'ENTRY_DUPLICATE' | 'ENTRY_PATH_INVALID' | 'ENTRY_MISSING' | 'ENTRY_HASH_INVALID' | 'INSTALLED_APP_REF_INVALID';
+export declare class InstalledAppRefError extends Error {
+    readonly code: InstalledAppRefErrorCode;
+    readonly name = "InstalledAppRefError";
+    constructor(code: InstalledAppRefErrorCode, message?: string);
+}
+export interface InstalledAppRef {
+    readonly appId: string;
+    readonly definition: UiDefinitionRef;
+    readonly entry: typeof INSTALLED_APP_ENTRY;
+    readonly entryHash: string;
+}
+export interface InstalledAppPackageFile {
+    readonly path: string;
+    readonly sha256: string;
+}
+export interface BuildInstalledAppRefInput {
+    readonly appId: string;
+    readonly definition: UiDefinition;
+    readonly packageFiles: readonly InstalledAppPackageFile[];
+}
+export declare function validateInstalledAppRef(value: unknown): InstalledAppRef;
+export declare function buildInstalledAppRef(input: BuildInstalledAppRefInput): InstalledAppRef;

package/dist/mcp-app/model-context.d.ts

@@ -0,0 +1,29 @@
+import type { JsonObject } from '../ui-instance/types.js';
+export declare const MCP_APP_MODEL_CONTEXT_MAX_BYTES: number;
+export declare const MCP_APP_MODEL_CONTEXT_MAX_STRING_LENGTH = 2048;
+export declare const MCP_APP_MODEL_CONTEXT_MAX_ARRAY_LENGTH = 200;
+export declare const MCP_APP_MODEL_CONTEXT_MAX_DEPTH = 8;
+export declare const MCP_APP_ACTION_RESULT_MAX_BYTES: number;
+export interface McpAppModelContextInput {
+    readonly instanceId: string;
+    readonly definitionHash: string;
+    readonly revision: number;
+    readonly content?: unknown;
+    readonly structuredContent?: unknown;
+}
+export interface McpAppModelContext {
+    readonly instanceId: string;
+    readonly definitionHash: string;
+    readonly revision: number;
+    readonly content?: readonly {
+        readonly type: 'text';
+        readonly text: string;
+    }[];
+    readonly structuredContent?: JsonObject;
+}
+export declare function sanitizeMcpAppActionResult(value: unknown): JsonObject;
+export declare function prepareMcpAppActionResult(value: unknown, selectedAllow: readonly string[]): JsonObject;
+export declare function sanitizeMcpAppModelContext(value: unknown): McpAppModelContext;
+export declare function serializeMcpAppModelContextXml(context: McpAppModelContext, options?: {
+    readonly stale?: boolean;
+}): string;

package/dist/mcp-app/node-app-discovery-fs.d.ts

@@ -0,0 +1,23 @@
+import type { AppDiscoveryFileFingerprint, AppDiscoveryRootIdentity } from './discovery.js';
+export type AppDiscoveryFsErrorCode = 'NOT_FOUND' | 'READ_DENIED' | 'LIMIT_EXCEEDED' | 'PATH_ESCAPED' | 'IDENTITY_CHANGED' | 'TOCTOU' | 'UNSUPPORTED';
+export declare class AppDiscoveryFsError extends Error {
+    readonly code: AppDiscoveryFsErrorCode;
+    readonly name = "AppDiscoveryFsError";
+    constructor(code: AppDiscoveryFsErrorCode);
+}
+export interface NodeAppDiscoveryDirectoryEntry {
+    readonly name: string;
+    readonly kind: 'file' | 'directory' | 'symlink' | 'other';
+}
+export declare class NodeAppDiscoveryFs {
+    getRootIdentity(root: string): Promise<AppDiscoveryRootIdentity>;
+    listDirectory(root: string, relativePath: string): Promise<readonly NodeAppDiscoveryDirectoryEntry[]>;
+    readdir(root: string, relativePath: string): Promise<readonly NodeAppDiscoveryDirectoryEntry[]>;
+    readDirectory(root: string, relativePath: string): Promise<readonly NodeAppDiscoveryDirectoryEntry[]>;
+    readVerifiedFile(root: string, relativePath: string, byteLimit: number): Promise<Uint8Array>;
+    fingerprintVerifiedFile(root: string, relativePath: string, byteLimit: number): Promise<AppDiscoveryFileFingerprint>;
+    readFileVerified(root: string, relativePath: string, byteLimit: number): Promise<Uint8Array>;
+}
+export declare const defaultAppDiscoveryFs: NodeAppDiscoveryFs;
+export declare const defaultNodeAppDiscoveryFs: NodeAppDiscoveryFs;
+export declare const NodeAppDiscoveryFsAdapter: typeof NodeAppDiscoveryFs;

package/dist/mcp-app/product-bundle-assets.d.ts

@@ -0,0 +1,27 @@
+import type { ProductAppBundleInput } from './product-bundle-loader.js';
+import type { AppDiscoveryFileSystem, WorkspaceAppDiagnostic } from './discovery.js';
+import type { ProductAppBundleProvenance } from './product-bundle-loader.js';
+export declare const MCP_APP_ASSET_MAX_FILE_BYTES: number;
+export declare const MCP_APP_ASSET_MAX_TOTAL_BYTES: number;
+export declare const MCP_APP_ASSET_MAX_LOCATORS = 128;
+export declare function isCanonicalMcpAppAssetFilename(filename: string): boolean;
+export declare function mcpAppAssetContentType(filename: string): string | undefined;
+export interface ProductAppBundleAsset {
+    readonly sha256: string;
+    readonly filename: string;
+    readonly contentType: string;
+    readonly byteLength: number;
+    readonly provenance: ProductAppBundleProvenance;
+    bytes(): Uint8Array;
+}
+export interface ProductAppBundleAssetCatalog {
+    readonly indexHash?: string;
+    readonly complete: boolean;
+    readonly diagnostics: readonly WorkspaceAppDiagnostic[];
+    get(sha256: string, filename: string): ProductAppBundleAsset | undefined;
+}
+export interface ProductAppBundleAssetLoadOptions {
+    readonly filesystem?: AppDiscoveryFileSystem;
+    readonly clock?: () => number;
+}
+export declare function loadProductAppBundleAssets(input: ProductAppBundleInput, options?: ProductAppBundleAssetLoadOptions): Promise<ProductAppBundleAssetCatalog>;

package/dist/mcp-app/product-bundle-loader.d.ts

@@ -0,0 +1,53 @@
+import type { UiDefinitionLineageEntry } from '../ui-instance/lineage.js';
+import type { AppDiscoveryFileSystem, WorkspaceAppDiagnostic, WorkspaceAppDiagnosticCode } from './discovery.js';
+export interface ProductAppBundleReservations {
+    readonly appIds: readonly string[];
+    readonly definitionIds: readonly string[];
+}
+export interface ProductAppBundleInput {
+    readonly root: string | null;
+    readonly expectedIndexHash: string;
+    readonly reservedIds: ProductAppBundleReservations;
+}
+export interface ProductAppBundleProvenance {
+    readonly kind: 'bundled';
+    readonly launcher: boolean;
+    readonly indexHash: string;
+    readonly packageDir: string;
+}
+export interface ProductAppBundleFileHash {
+    readonly path: string;
+    readonly sha256: string;
+}
+export interface ProductAppBundleDefinitionIdentity {
+    readonly id: string;
+    readonly version: number;
+    readonly hash: string;
+}
+export interface ProductAppBundlePackageIndex {
+    readonly packageDir: string;
+    readonly launcher?: false;
+    readonly appId: string;
+    readonly definition: ProductAppBundleDefinitionIdentity;
+    readonly lineage: readonly UiDefinitionLineageEntry[];
+    readonly files: readonly ProductAppBundleFileHash[];
+}
+export interface ProductAppBundleIndex {
+    readonly version: 1;
+    readonly packages: readonly ProductAppBundlePackageIndex[];
+}
+export interface LoadedProductBundlePackage {
+    readonly indexEntry: ProductAppBundlePackageIndex;
+    readonly lineage?: readonly UiDefinitionLineageEntry[];
+    readonly files?: ReadonlyMap<string, Uint8Array>;
+    readonly failureCode?: WorkspaceAppDiagnosticCode;
+}
+export interface LoadedProductBundle {
+    readonly indexHash?: string;
+    readonly packages: readonly LoadedProductBundlePackage[];
+    readonly diagnostics: readonly WorkspaceAppDiagnostic[];
+    readonly incomplete: boolean;
+    readonly reservedIds: ProductAppBundleReservations;
+}
+export declare function productAppBundleReservations(packages: readonly ProductAppBundlePackageIndex[]): ProductAppBundleReservations;
+export declare function loadProductBundle(input: ProductAppBundleInput | undefined, fs: AppDiscoveryFileSystem, startedAt: number, clock: () => number): Promise<LoadedProductBundle>;

package/dist/mcp-app/projection.d.ts

@@ -0,0 +1,14 @@
+import type { JsonObject, UiDefinition } from '../ui-instance/types.js';
+import type { McpAppServerStateInput, McpAppStateDescriptor, McpAppStateProjections, McpAppToolDescriptor, McpAppToolResult } from './types.js';
+export declare const MCP_APP_PROJECTION_MAX_BYTES: number;
+export declare const SENSITIVE_KEY: RegExp;
+export declare function projectMcpAppActionResult(result: unknown, selectedAllow: readonly string[]): JsonObject;
+export declare function projectMcpAppSummaryState(state: unknown, definition: UiDefinition): JsonObject;
+export declare function buildMcpAppStateDescriptor(input: McpAppServerStateInput): McpAppStateDescriptor;
+export declare function serializeMcpAppStateJson(descriptor: McpAppStateDescriptor, dataPaths?: readonly string[]): string;
+export declare function serializeMcpAppStateXml(descriptor: McpAppStateDescriptor): string;
+export declare function buildMcpAppStateProjections(input: McpAppServerStateInput): McpAppStateProjections;
+export declare function createMcpAppToolResult(tool: Pick<McpAppToolDescriptor, 'textFallback'>, options?: {
+    structuredContent?: JsonObject;
+    meta?: JsonObject;
+}): McpAppToolResult;

package/dist/mcp-app/registry.d.ts

@@ -0,0 +1,28 @@
+import type { WorkspaceAppCandidate } from './discovery.js';
+import type { ProductAppBundlePackageIndex } from './discovery.js';
+import { type McpAppDescriptor, type McpAppDescriptorInput, type McpAppInputSchema, type McpAppLocalRegistration, type McpAppLocalRegistrationInput, type McpAppLocalResource, type McpAppRegistry, type McpAppResource, type McpAppWorkspaceRegistry, type McpAppWorkspaceRegistryInput, type McpAppToolDescriptor, type McpAppToolRegistration, type McpAppRegistryOptions, type McpAppBundleHostToolTemplate, type McpAppFixedResultResolution, type McpAppBundleAgentActionDescriptor } from './types.js';
+export declare const MAX_HTML_LENGTH: number;
+export declare function resolveMcpAppFixedResultCall(tool: McpAppToolDescriptor, args: unknown): McpAppFixedResultResolution;
+export declare function buildMcpAppBundleRegistrationInput(candidate: WorkspaceAppCandidate, options?: {
+    readonly hostTools?: readonly McpAppBundleHostToolTemplate[];
+}): McpAppDescriptorInput;
+export declare function buildMcpAppBundleAgentActionDescriptors(candidate: WorkspaceAppCandidate): readonly McpAppBundleAgentActionDescriptor[];
+export declare function planProductBundleLegacyToolNames(apps: readonly ProductAppBundlePackageIndex[]): Readonly<Record<string, string>>;
+export declare function makeUiUri(appId: string, entry: string | Uint8Array | readonly number[]): string;
+export declare function createMcpAppRegistry(options?: McpAppRegistryOptions): McpAppRegistry;
+export declare function createBuiltinMcpAppRegistry(): McpAppRegistry;
+export declare function registerMcpApp(registry: McpAppRegistry, input: McpAppDescriptorInput): McpAppDescriptor;
+export declare function resolveMcpAppResource(registry: McpAppRegistry, uri: string): McpAppResource | null;
+export declare function requireMcpAppResource(registry: McpAppRegistry, uri: string): McpAppResource;
+export declare function toMcpAppToolRegistration(tool: McpAppToolDescriptor): McpAppToolRegistration;
+export declare function buildMcpAppLocalRegistration(input: McpAppLocalRegistrationInput): McpAppLocalRegistration;
+export declare const createMcpAppLocalRegistration: typeof buildMcpAppLocalRegistration;
+export declare const registerLocalMcpApp: typeof buildMcpAppLocalRegistration;
+export declare function createMcpAppWorkspaceRegistry(input?: McpAppWorkspaceRegistryInput): McpAppWorkspaceRegistry;
+export declare const createWorkspaceAppRegistry: typeof createMcpAppWorkspaceRegistry;
+export declare const createWorkspaceMcpAppRegistry: typeof createMcpAppWorkspaceRegistry;
+export declare function createMcpAppLocalActionInputSchema(actions: readonly {
+    readonly actionId: string;
+    readonly inputSchema: McpAppInputSchema;
+}[]): McpAppInputSchema;
+export declare function resolveLocalMcpAppResource(registry: McpAppWorkspaceRegistry, appId: string, definitionHash?: string): McpAppLocalResource | null;

package/dist/mcp-app/skill-backend.d.ts

@@ -0,0 +1,132 @@
+import { SKILL_BACKEND_CONTENT_SCHEMA_VERSION, SKILL_BACKEND_MAX_INPUT_BYTES, SKILL_BACKEND_MAX_OUTPUT_BYTES } from '../app/protocol.js';
+import type { ContentFrame, UiContentMediaType, UiContentRangeRequest } from './content-channel.js';
+import type { JsonObject, UiExternalActionHandlerRegistration, UiSkillBackendEnvironmentKey } from '../ui-instance/types.js';
+import type { UiPluginNormalizedManifestV2 } from '../ui-plugin/types.js';
+import type { ProductAppBundleProvenance, WorkspaceAppCandidate, WorkspaceAppSource } from './discovery.js';
+export declare const SKILL_BACKEND_SCHEMA_VERSION: 1;
+export { SKILL_BACKEND_CONTENT_SCHEMA_VERSION, SKILL_BACKEND_MAX_INPUT_BYTES, SKILL_BACKEND_MAX_OUTPUT_BYTES, };
+export declare const SKILL_BACKEND_DEFAULT_TIMEOUT_MS = 15000;
+export declare const SKILL_BACKEND_INHERITED_ENV_ALLOWLIST: readonly ["CREWX_HOME", "CREWX_DB", "XDG_CONFIG_HOME"];
+export type SkillBackendInfrastructureErrorCode = 'EXEC_DENIED' | 'EXEC_TIMEOUT' | 'EXEC_OUTPUT_INVALID' | 'EXECUTION_FAILED' | 'ACTION_IN_FLIGHT' | 'INPUT_INVALID';
+export interface SkillBackendPayloadV1 {
+    readonly schemaVersion: typeof SKILL_BACKEND_SCHEMA_VERSION;
+    readonly actionId: string;
+    readonly input: JsonObject;
+    readonly state: JsonObject;
+}
+export interface SkillBackendContentInputHeader {
+    readonly mediaType: UiContentMediaType;
+    readonly bytes: number;
+    readonly sha256: string;
+    readonly lines: number;
+}
+export interface SkillBackendContentOutputHeader {
+    readonly mediaType: UiContentMediaType;
+    readonly range: UiContentRangeRequest | null;
+}
+export interface SkillBackendPayloadV2 {
+    readonly schemaVersion: typeof SKILL_BACKEND_CONTENT_SCHEMA_VERSION;
+    readonly actionId: string;
+    readonly input: JsonObject;
+    readonly state: JsonObject;
+    readonly content: {
+        readonly in: SkillBackendContentInputHeader | null;
+        readonly out: SkillBackendContentOutputHeader | null;
+    };
+}
+export type SkillBackendPayload = SkillBackendPayloadV1 | SkillBackendPayloadV2;
+export type SkillBackendExecutionResponse = {
+    readonly state?: JsonObject;
+    readonly result?: JsonObject;
+    readonly content?: ContentFrame;
+} | {
+    readonly outcome: 'rejected' | 'failed';
+    readonly errorCode: string;
+    readonly state?: JsonObject;
+    readonly result?: JsonObject;
+    readonly content?: ContentFrame;
+};
+interface SkillBackendExecutionRequestBase {
+    readonly requestId?: string;
+    readonly reservationNowMs?: number;
+    readonly actorKind?: 'user' | 'agent';
+    readonly instanceId: string;
+    readonly appId: string;
+    readonly definitionId: string;
+    readonly definitionVersion: number;
+    readonly definitionHash: string;
+    readonly actionId: string;
+    readonly relativePath: string;
+    readonly command: readonly string[];
+    readonly entry?: string;
+    readonly payload: SkillBackendPayload;
+    readonly content?: {
+        readonly in?: ContentFrame;
+        readonly out?: {
+            readonly mediaType: UiContentMediaType;
+            readonly range?: UiContentRangeRequest;
+        };
+    };
+    readonly environment?: Readonly<Partial<Record<UiSkillBackendEnvironmentKey, string>>>;
+}
+export type SkillBackendExecutionRequest = SkillBackendExecutionRequestBase & ({
+    readonly source: 'bundled';
+    readonly provenance: ProductAppBundleProvenance;
+} | {
+    readonly source: WorkspaceAppSource;
+    readonly provenance?: never;
+});
+export interface SkillBackendExecutionPort {
+    execute(request: SkillBackendExecutionRequest): PromiseLike<SkillBackendExecutionResponse>;
+}
+export interface SkillBackendChildEnvironment {
+    readonly CREWX_APP_REQUEST_ID: string;
+    readonly CREWX_APP_NOW_MS: string;
+    readonly CREWX_APP_ACTOR_KIND: 'user' | 'agent';
+}
+export declare function buildSkillBackendChildEnvironment(request: Pick<SkillBackendExecutionRequest, 'requestId' | 'reservationNowMs' | 'actorKind'>): SkillBackendChildEnvironment;
+export interface VerifiedBundleSkillSpawnRequest {
+    readonly appId: string;
+    readonly packageDir: string;
+    readonly packageCwd: string;
+    readonly executableRelativePath: string;
+    readonly command: readonly string[];
+    readonly payload: SkillBackendPayload;
+    readonly childEnvironment: SkillBackendChildEnvironment;
+    readonly inheritedEnvAllowlist: typeof SKILL_BACKEND_INHERITED_ENV_ALLOWLIST;
+    readonly requestId: string;
+}
+export interface VerifiedBundleSkillRunnerPort {
+    hashExecutable(input: {
+        readonly packageCwd: string;
+        readonly executableRelativePath: string;
+    }): PromiseLike<string>;
+    spawn(input: VerifiedBundleSkillSpawnRequest): PromiseLike<SkillBackendExecutionResponse>;
+}
+export interface VerifiedBundleSkillBackendBuildInput {
+    readonly normalized: UiPluginNormalizedManifestV2;
+    readonly actionId: string;
+    readonly candidate: WorkspaceAppCandidate;
+    readonly packageCwd: string;
+    readonly executableRelativePath: string;
+    readonly runner: VerifiedBundleSkillRunnerPort;
+}
+interface SkillBackendHandlerBuildInputBase {
+    readonly normalized: UiPluginNormalizedManifestV2;
+    readonly actionId: string;
+    readonly relativePath: string;
+    readonly execute: SkillBackendExecutionPort;
+    readonly definitionHash?: string;
+}
+export type SkillBackendHandlerBuildInput = SkillBackendHandlerBuildInputBase & ({
+    readonly source: 'bundled';
+    readonly provenance: ProductAppBundleProvenance;
+    readonly candidate: WorkspaceAppCandidate;
+} | {
+    readonly source: WorkspaceAppSource;
+    readonly provenance?: never;
+    readonly candidate?: never;
+});
+export declare function buildSkillBackendHandler(normalized: UiPluginNormalizedManifestV2, actionId: string, source: WorkspaceAppSource, relativePath: string, execute: SkillBackendExecutionPort): UiExternalActionHandlerRegistration | undefined;
+export declare function buildSkillBackendHandler(input: SkillBackendHandlerBuildInput): UiExternalActionHandlerRegistration | undefined;
+export declare function buildVerifiedBundleSkillBackendHandler(input: VerifiedBundleSkillBackendBuildInput): UiExternalActionHandlerRegistration | undefined;

package/dist/mcp-app/state-set.d.ts

@@ -0,0 +1,9 @@
+import type { UiStateActionHandlerRegistration } from '../ui-instance/types.js';
+import type { UiPluginNormalizedManifestV2 } from '../ui-plugin/types.js';
+export interface StateSetHandlerBuildInput {
+    readonly normalized: UiPluginNormalizedManifestV2;
+    readonly actionId: string;
+}
+export declare function buildStateSetHandler(normalized: UiPluginNormalizedManifestV2, actionId: string): UiStateActionHandlerRegistration | undefined;
+export declare function buildStateSetHandler(input: StateSetHandlerBuildInput): UiStateActionHandlerRegistration | undefined;
+export declare const createStateSetHandler: typeof buildStateSetHandler;