@derive-to/artifacts 0.0.0-stage → 0.6.0

package/dist/server/http/app.js

@@ -0,0 +1,82 @@
+import { Hono } from "hono";
+import { HTTPException } from "hono/http-exception";
+import { ArtifactError, notFound } from "../core/errors.js";
+import { createCore } from "../core/index.js";
+import { broadcasts } from "../kit/broadcasts.js";
+import { createEvents } from "../kit/events.js";
+import { observeRoutes, safely } from "../kit/observe.js";
+import { invokeTool } from "../kit/tool.js";
+import { featuresOf, wireBackend } from "../kit/wire.js";
+import { artifactTools } from "../mcp/tools.js";
+import { starterKit } from "../plugins/index.js";
+import { artifactRoutes } from "./routes/artifacts.js";
+import { eventRoutes } from "./routes/events.js";
+import { mcpRoutes } from "./routes/mcp.js";
+const AGENT_GUIDE = "Artifacts are HTML pages people view, comment on, and use together. Read before you publish, and pass the version you read as `expected`.";
+/** The artifact API as a Hono app. Mount it anywhere: `app.route("/api", server)`. */
+export const createArtifactServer = (options) => createArtifactKit(options).app;
+export const createArtifactKit = (options) => {
+    const { host, assets, sandboxOrigin, plugins = starterKit(), onError, observe, renderSource, assetPolicy, live = true, ...storage } = options;
+    const watch = safely(observe);
+    const ids = plugins.map((plugin) => plugin.id);
+    const duplicate = ids.find((id, index) => ids.indexOf(id) !== index);
+    if (duplicate)
+        throw new Error(`The plugin "${duplicate}" is installed twice.`);
+    const backend = wireBackend(storage, live, plugins);
+    const events = createEvents(onError);
+    const core = createCore(backend, host, {
+        runtime: assets.runtime,
+        assetOrigin: sandboxOrigin,
+        scripts: plugins.flatMap((plugin) => plugin.sandbox ?? []),
+        transforms: plugins.flatMap((plugin) => (plugin.servePage ? [plugin.servePage] : [])),
+        features: featuresOf(live, plugins),
+        renderSource,
+        assetPolicy,
+    }, events);
+    const parts = plugins.map((plugin) => plugin.setup?.(core) ?? {});
+    events.use([broadcasts(backend.bus), ...parts]);
+    const tools = [...artifactTools(core), ...parts.flatMap((part) => part.tools ?? [])];
+    const app = new Hono();
+    app.use("*", async (c, next) => {
+        c.header("Cache-Control", "no-store");
+        await next();
+    });
+    if (observe)
+        app.use("*", observeRoutes(watch));
+    app.route("/", artifactRoutes(core));
+    if (live)
+        app.route("/", eventRoutes(core));
+    for (const part of parts)
+        if (part.routes)
+            app.route("/", part.routes);
+    app.route("/", mcpRoutes(core, {
+        tools,
+        instructions: [AGENT_GUIDE, ...plugins.flatMap((plugin) => plugin.instructions ?? [])].join("\n\n"),
+        viewer: { viewer: assets.viewer, sandboxOrigin },
+        observe: watch,
+    }));
+    app.onError((error, c) => {
+        if (error instanceof ArtifactError)
+            return c.json({ error: error.message, code: error.code }, error.status);
+        if (error instanceof HTTPException) {
+            return c.json({
+                error: error.status === 413
+                    ? `Assets must be at most ${core.assets.maxBytes / (1024 * 1024)} MB.`
+                    : error.message,
+            }, error.status);
+        }
+        throw error;
+    });
+    const call = (name, args, who) => {
+        const def = tools.find((tool) => tool.name === name);
+        if (!def)
+            throw notFound(`No tool named ${name}.`);
+        return invokeTool(def, args, {
+            access: core.access,
+            who: { actor: who.actor, link: who.link ?? null },
+            space: who.space ?? "",
+        });
+    };
+    return { app, kit: core, call };
+};
+//# sourceMappingURL=app.js.map

package/dist/server/http/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../../src/server/http/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAGnD,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC3D,OAAO,EAAa,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAExD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAC/C,OAAO,EAAgB,aAAa,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAEvE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAIhD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3C,MAAM,WAAW,GACf,2IAA2I,CAAA;AAyB7I,sFAAsF;AACtF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,OAA8B,EAAa,EAAE,CAChF,iBAAiB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAA;AAehC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAA8B,EAAe,EAAE;IAC/E,MAAM,EACJ,IAAI,EACJ,MAAM,EACN,aAAa,EACb,OAAO,GAAG,UAAU,EAAE,EACtB,OAAO,EACP,OAAO,EACP,YAAY,EACZ,WAAW,EACX,IAAI,GAAG,IAAI,EACX,GAAG,OAAO,EACX,GAAG,OAAO,CAAA;IACX,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC9C,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC,CAAA;IACpE,IAAI,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,SAAS,uBAAuB,CAAC,CAAA;IAE/E,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IAEnD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IACpC,MAAM,IAAI,GAAG,UAAU,CACrB,OAAO,EACP,IAAI,EACJ;QACE,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,aAAa;QAC1B,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;QAC1D,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrF,QAAQ,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC;QACnC,YAAY;QACZ,WAAW;KACZ,EACD,MAAM,CACP,CAAA;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IACjE,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAA;IAE/C,MAAM,KAAK,GAAG,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAA;IACpF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAO,CAAA;IAC3B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC7B,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAA;QACrC,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;IACF,IAAI,OAAO;QAAE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAA;IAC/C,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAA;IACpC,IAAI,IAAI;QAAE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAA;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,IAAI,IAAI,CAAC,MAAM;YAAE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;IACtE,GAAG,CAAC,KAAK,CACP,GAAG,EACH,SAAS,CAAC,IAAI,EAAE;QACd,KAAK;QACL,YAAY,EAAE,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CACzF,MAAM,CACP;QACD,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE;QAChD,OAAO,EAAE,KAAK;KACf,CAAC,CACH,CAAA;IACD,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACvB,IAAI,KAAK,YAAY,aAAa;YAChC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;QACzE,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;YACnC,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EACH,KAAK,CAAC,MAAM,KAAK,GAAG;oBAClB,CAAC,CAAC,0BAA0B,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM;oBACtE,CAAC,CAAC,KAAK,CAAC,OAAO;aACpB,EACD,KAAK,CAAC,MAAM,CACb,CAAA;QACH,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,CACX,IAAY,EACZ,IAA6B,EAC7B,GAAkE,EAClE,EAAE;QACF,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;QACpD,IAAI,CAAC,GAAG;YAAE,MAAM,QAAQ,CAAC,iBAAiB,IAAI,GAAG,CAAC,CAAA;QAClD,OAAO,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE;YACjD,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE;SACvB,CAAC,CAAA;IACJ,CAAC,CAAA;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACjC,CAAC,CAAA"}

package/dist/server/http/body.d.ts

@@ -0,0 +1,5 @@
+import type { Context } from "hono";
+import type * as z from "zod/mini";
+/** Parse and validate a JSON body, answering 400 with the first problem when it is wrong. */
+export declare const readJson: <S extends z.ZodMiniType>(c: Context, schema: S) => Promise<z.infer<S>>;
+//# sourceMappingURL=body.d.ts.map

package/dist/server/http/body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.d.ts","sourceRoot":"","sources":["../../../src/server/http/body.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,KAAK,CAAC,MAAM,UAAU,CAAA;AAGlC,6FAA6F;AAC7F,eAAO,MAAM,QAAQ,GAAU,CAAC,SAAS,CAAC,CAAC,WAAW,KACjD,OAAO,UACF,CAAC,KACR,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAKpB,CAAA"}

package/dist/server/http/body.js

@@ -0,0 +1,9 @@
+import { badRequest, parseInput } from "../core/errors.js";
+/** Parse and validate a JSON body, answering 400 with the first problem when it is wrong. */
+export const readJson = async (c, schema) => {
+    const raw = await c.req.json().catch(() => {
+        throw badRequest("The request body must be JSON.");
+    });
+    return parseInput(schema, raw, "body");
+};
+//# sourceMappingURL=body.js.map

package/dist/server/http/body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.js","sourceRoot":"","sources":["../../../src/server/http/body.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE1D,6FAA6F;AAC7F,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,EAC3B,CAAU,EACV,MAAS,EACY,EAAE;IACvB,MAAM,GAAG,GAAY,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;QACjD,MAAM,UAAU,CAAC,gCAAgC,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IACF,OAAO,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;AACxC,CAAC,CAAA"}

package/dist/server/http/gates.d.ts

@@ -0,0 +1,26 @@
+import type { Context, MiddlewareHandler } from "hono";
+import type { Actor, Principal, Verb } from "../../protocol/index.js";
+import type { Access } from "../core/access.js";
+import type { ArtifactHost, ArtifactRow } from "../ports.js";
+export interface Env {
+    Variables: {
+        actor: Actor | null;
+        /** Who the request runs as: the actor and the share link it arrived by. */
+        principal: Principal;
+        /** The request's tenant, from `host.space`; "" when the host has none. */
+        space: string;
+        artifact: ArtifactRow;
+    };
+}
+/** Route-level gates. Every route declares exactly one (enforced by `pnpm lint:authz`). */
+export declare const httpGates: (core: {
+    host: ArtifactHost;
+    access: Access;
+}) => {
+    guard: (verb: Verb) => MiddlewareHandler<Env>;
+    signedIn: () => MiddlewareHandler<Env>;
+    anyone: () => MiddlewareHandler<Env>;
+};
+/** The actor on a route behind `signedIn()` or a non-view `guard()`. */
+export declare const actorOf: (c: Context<Env>) => Actor;
+//# sourceMappingURL=gates.d.ts.map

package/dist/server/http/gates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gates.d.ts","sourceRoot":"","sources":["../../../src/server/http/gates.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AAEtD,OAAO,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAA;AACrE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE5D,MAAM,WAAW,GAAG;IAClB,SAAS,EAAE;QACT,KAAK,EAAE,KAAK,GAAG,IAAI,CAAA;QACnB,2EAA2E;QAC3E,SAAS,EAAE,SAAS,CAAA;QACpB,0EAA0E;QAC1E,KAAK,EAAE,MAAM,CAAA;QACb,QAAQ,EAAE,WAAW,CAAA;KACtB,CAAA;CACF;AAED,2FAA2F;AAC3F,eAAO,MAAM,SAAS,SAAU;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;kBAc/C,IAAI,KAAG,iBAAiB,CAAC,GAAG,CAAC;oBAS7B,iBAAiB,CAAC,GAAG,CAAC;kBAOxB,iBAAiB,CAAC,GAAG,CAAC;CAO1C,CAAA;AAED,wEAAwE;AACxE,eAAO,MAAM,OAAO,MAAO,OAAO,CAAC,GAAG,CAAC,KAAG,KAIzC,CAAA"}

package/dist/server/http/gates.js

@@ -0,0 +1,43 @@
+import { createMiddleware } from "hono/factory";
+import { signInRequired } from "../core/errors.js";
+/** Route-level gates. Every route declares exactly one (enforced by `pnpm lint:authz`). */
+export const httpGates = (core) => {
+    const resolveActor = async (c) => {
+        const [actor, link, space] = await Promise.all([
+            core.host.actor(c),
+            core.host.link?.(c) ?? null,
+            core.host.space?.(c) ?? "",
+        ]);
+        c.set("actor", actor);
+        c.set("principal", { actor, link });
+        c.set("space", space);
+        return actor;
+    };
+    /** Load `:id` and require `verb` on it through the core's single gate. */
+    const guard = (verb) => createMiddleware(async (c, next) => {
+        await resolveActor(c);
+        const id = c.req.param("id") ?? "";
+        c.set("artifact", await core.access.require(c.get("principal"), verb, id, c.get("space")));
+        await next();
+    });
+    /** Require a signed-in actor (create, list). */
+    const signedIn = () => createMiddleware(async (c, next) => {
+        if (!(await resolveActor(c)))
+            throw signInRequired("Sign in first.");
+        await next();
+    });
+    /** Deliberately public: resolves the actor when there is one. */
+    const anyone = () => createMiddleware(async (c, next) => {
+        await resolveActor(c);
+        await next();
+    });
+    return { guard, signedIn, anyone };
+};
+/** The actor on a route behind `signedIn()` or a non-view `guard()`. */
+export const actorOf = (c) => {
+    const actor = c.get("actor");
+    if (!actor)
+        throw signInRequired("Sign in to do that.");
+    return actor;
+};
+//# sourceMappingURL=gates.js.map

package/dist/server/http/gates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gates.js","sourceRoot":"","sources":["../../../src/server/http/gates.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAG/C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAclD,2FAA2F;AAC3F,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAA4C,EAAE,EAAE;IACxE,MAAM,YAAY,GAAG,KAAK,EAAE,CAAe,EAAE,EAAE;QAC7C,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI;YAC3B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;SAC3B,CAAC,CAAA;QACF,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QACrB,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACnC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QACrB,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;IAED,0EAA0E;IAC1E,MAAM,KAAK,GAAG,CAAC,IAAU,EAA0B,EAAE,CACnD,gBAAgB,CAAM,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACtC,MAAM,YAAY,CAAC,CAAC,CAAC,CAAA;QACrB,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QAClC,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QAC1F,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;IAEJ,gDAAgD;IAChD,MAAM,QAAQ,GAAG,GAA2B,EAAE,CAC5C,gBAAgB,CAAM,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACtC,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;YAAE,MAAM,cAAc,CAAC,gBAAgB,CAAC,CAAA;QACpE,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;IAEJ,iEAAiE;IACjE,MAAM,MAAM,GAAG,GAA2B,EAAE,CAC1C,gBAAgB,CAAM,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACtC,MAAM,YAAY,CAAC,CAAC,CAAC,CAAA;QACrB,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;IAEJ,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;AACpC,CAAC,CAAA;AAED,wEAAwE;AACxE,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAe,EAAS,EAAE;IAChD,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAC5B,IAAI,CAAC,KAAK;QAAE,MAAM,cAAc,CAAC,qBAAqB,CAAC,CAAA;IACvD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA"}

package/dist/server/http/routes/artifacts.d.ts

@@ -0,0 +1,5 @@
+import { Hono } from "hono";
+import type { Core } from "../../core/index.js";
+import { type Env } from "../gates.js";
+export declare const artifactRoutes: (core: Core) => Hono<Env, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=artifacts.d.ts.map

package/dist/server/http/routes/artifacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../../../../src/server/http/routes/artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAU3B,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAA;AAE/C,OAAO,EAAW,KAAK,GAAG,EAAE,MAAM,aAAa,CAAA;AAoB/C,eAAO,MAAM,cAAc,SAAU,IAAI,qDAiFxC,CAAA"}

package/dist/server/http/routes/artifacts.js

@@ -0,0 +1,75 @@
+import { Hono } from "hono";
+import { bodyLimit } from "hono/body-limit";
+import { createInput, listInput, publishInput, renameInput, versionParamInput, } from "../../../protocol/index.js";
+import { parseInput } from "../../core/errors.js";
+import { readJson } from "../body.js";
+import { actorOf } from "../gates.js";
+const versionOf = (raw) => parseInput(versionParamInput, raw, "version");
+/** Rename needs edit; delete needs manage and takes versions and comments with it. */
+const lifecycleRoutes = (app, core) => {
+    const { guard } = core.gates;
+    app.patch("/artifacts/:id", guard("edit"), async (c) => {
+        const { title } = await readJson(c, renameInput);
+        return c.json({
+            artifact: await core.artifacts.rename(c.get("principal"), c.get("artifact"), title),
+        });
+    });
+    app.delete("/artifacts/:id", guard("manage"), async (c) => {
+        await core.artifacts.remove(c.get("artifact"));
+        return c.body(null, 204);
+    });
+};
+export const artifactRoutes = (core) => {
+    const { guard, signedIn, anyone } = core.gates;
+    const { artifacts, access } = core;
+    const app = new Hono();
+    app.get("/me", anyone(), (c) => c.json({ actor: c.get("actor") }));
+    app.get("/artifacts", signedIn(), async (c) => {
+        const query = parseInput(listInput, c.req.query(), "query");
+        return c.json(await artifacts.list(c.get("principal"), { ...query, space: c.get("space") }));
+    });
+    // Liveness for load balancers: the server is up and answering. Deliberately public.
+    app.get("/health", anyone(), (c) => c.json({ ok: true }));
+    app.post("/artifacts", signedIn(), async (c) => {
+        const actor = await access.requireCreate(c.get("principal"), c.get("space"));
+        const input = { ...(await readJson(c, createInput)), space: c.get("space") };
+        const artifact = await artifacts.create(actor, input);
+        return c.json({ artifact }, 201);
+    });
+    app.get("/artifacts/:id", guard("view"), async (c) => c.json({ artifact: await artifacts.view(c.get("artifact"), c.get("principal")) }));
+    lifecycleRoutes(app, core);
+    app.get("/artifacts/:id/versions", guard("view"), async (c) => c.json({ versions: await artifacts.versions(c.get("artifact")) }));
+    app.post("/artifacts/:id/versions", guard("edit"), async (c) => {
+        const body = await readJson(c, publishInput);
+        const version = await artifacts.publish(actorOf(c), c.get("artifact"), body);
+        return c.json({ version }, 201);
+    });
+    app.post("/artifacts/:id/versions/:n/restore", guard("edit"), async (c) => {
+        const n = versionOf(c.req.param("n"));
+        const version = await artifacts.restore(actorOf(c), c.get("artifact"), n);
+        return c.json({ version }, 201);
+    });
+    // Raw bytes in, `{ url }` out: embed it in artifact HTML as <img src="{url}">.
+    app.post("/artifacts/:id/assets", guard("edit"), bodyLimit({ maxSize: core.assets.maxBytes }), async (c) => {
+        const bytes = new Uint8Array(await c.req.arrayBuffer());
+        const asset = await core.assets.upload(c.get("artifact"), bytes, c.req.header("content-type") ?? "");
+        return c.json({ asset }, 201);
+    });
+    app.get("/artifacts/:id/versions/:n/content", guard("view"), async (c) => {
+        const content = await artifacts.content(c.get("artifact"), versionOf(c.req.param("n")));
+        await access.require(c.get("principal"), "view", c.get("artifact").id, c.get("space"));
+        return c.json(content);
+    });
+    app.get("/artifacts/:id/versions/:n/export", guard("view"), async (c) => {
+        const n = versionOf(c.req.param("n"));
+        const file = await artifacts.exportHtml(c.get("principal"), c.get("artifact"), n);
+        const filename = encodeURIComponent(file.filename).replace(/[!'()*]/g, (char) => `%${char.charCodeAt(0).toString(16).toUpperCase()}`);
+        return c.body(file.bytes, 200, {
+            "Content-Type": file.type,
+            "Content-Disposition": `attachment; filename="artifact-v${n}.html"; filename*=UTF-8''${filename}`,
+            "X-Content-Type-Options": "nosniff",
+        });
+    });
+    return app;
+};
+//# sourceMappingURL=artifacts.js.map

package/dist/server/http/routes/artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../../../../src/server/http/routes/artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EACL,WAAW,EACX,SAAS,EACT,YAAY,EACZ,WAAW,EACX,iBAAiB,GAClB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAEjD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,EAAE,OAAO,EAAY,MAAM,aAAa,CAAA;AAE/C,MAAM,SAAS,GAAG,CAAC,GAAuB,EAAE,EAAE,CAAC,UAAU,CAAC,iBAAiB,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;AAE5F,sFAAsF;AACtF,MAAM,eAAe,GAAG,CAAC,GAAc,EAAE,IAAU,EAAE,EAAE;IACrD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAA;IAC5B,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAChD,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC;SACpF,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxD,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAA;QAC9C,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAU,EAAE,EAAE;IAC3C,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAA;IAC9C,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;IAClC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAO,CAAA;IAE3B,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;IAElE,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5C,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAA;QAC3D,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;IAC9F,CAAC,CAAC,CAAA;IAEF,oFAAoF;IACpF,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAEzD,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;QAC5E,MAAM,KAAK,GAAG,EAAE,GAAG,CAAC,MAAM,QAAQ,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAA;QAC5E,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QACrD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CACnD,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAClF,CAAA;IAED,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAE1B,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAC5D,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAClE,CAAA;IAED,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;QAC5C,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAA;QAC5E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxE,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;QACrC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;QACzE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,+EAA+E;IAC/E,GAAG,CAAC,IAAI,CACN,uBAAuB,EACvB,KAAK,CAAC,MAAM,CAAC,EACb,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAC5C,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAA;QACvD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CACpC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EACjB,KAAK,EACL,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CACnC,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAA;IAC/B,CAAC,CACF,CAAA;IAED,GAAG,CAAC,GAAG,CAAC,oCAAoC,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACvF,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;QACtF,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,mCAAmC,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtE,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;QACrC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;QACjF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CACxD,UAAU,EACV,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAC9D,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE;YAC7B,cAAc,EAAE,IAAI,CAAC,IAAI;YACzB,qBAAqB,EAAE,mCAAmC,CAAC,4BAA4B,QAAQ,EAAE;YACjG,wBAAwB,EAAE,SAAS;SACpC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA"}

package/dist/server/http/routes/events.d.ts

@@ -0,0 +1,5 @@
+import { Hono } from "hono";
+import type { Core } from "../../core/index.js";
+import type { Env } from "../gates.js";
+export declare const eventRoutes: (core: Core) => Hono<Env, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=events.d.ts.map

package/dist/server/http/routes/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../../src/server/http/routes/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAItC,eAAO,MAAM,WAAW,SAAU,IAAI,qDAuBrC,CAAA"}

package/dist/server/http/routes/events.js

@@ -0,0 +1,26 @@
+import { Hono } from "hono";
+import { streamSSE } from "hono/streaming";
+const HEARTBEAT_MS = 25_000;
+export const eventRoutes = (core) => {
+    const { guard } = core.gates;
+    const { live } = core;
+    const app = new Hono();
+    app.get("/artifacts/:id/events", guard("view"), (c) => {
+        const artifact = c.get("artifact");
+        const viewer = c.get("principal");
+        return streamSSE(c, async (stream) => {
+            const stop = live.watch(artifact, viewer, (event) => {
+                void stream.writeSSE({ data: JSON.stringify(event) });
+            });
+            stream.onAbort(stop);
+            while (!stream.aborted) {
+                // oxlint-disable-next-line no-await-in-loop -- the heartbeat loop is the connection
+                await stream.writeSSE({ event: "ping", data: "" });
+                // oxlint-disable-next-line no-await-in-loop -- see above
+                await stream.sleep(HEARTBEAT_MS);
+            }
+        });
+    });
+    return app;
+};
+//# sourceMappingURL=events.js.map

package/dist/server/http/routes/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../../src/server/http/routes/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAI1C,MAAM,YAAY,GAAG,MAAM,CAAA;AAE3B,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAU,EAAE,EAAE;IACxC,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAA;IAC5B,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAA;IACrB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAO,CAAA;IAE3B,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;QACpD,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAClC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACjC,OAAO,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBAClD,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YACvD,CAAC,CAAC,CAAA;YACF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YACpB,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACvB,oFAAoF;gBACpF,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;gBAClD,yDAAyD;gBACzD,MAAM,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;YAClC,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA"}

package/dist/server/http/routes/mcp.d.ts

@@ -0,0 +1,17 @@
+import { Hono } from "hono";
+import type { Core } from "../../core/index.js";
+import type { Observe } from "../../kit/observe.js";
+import { type ToolDef } from "../../kit/tool.js";
+import { type ViewerOptions } from "../../mcp/viewer.js";
+import type { Env } from "../gates.js";
+export interface McpOptions {
+    tools: readonly ToolDef[];
+    instructions: string;
+    viewer: ViewerOptions;
+    observe: Observe;
+}
+/** The same core as an MCP server, for agents and for MCP Apps hosts. Stateless (MCP
+ *  2026-07-28): each request gets a fresh server bound to that request's actor, so tools
+ *  authorize exactly as the REST API does. */
+export declare const mcpRoutes: (core: Core, options: McpOptions) => Hono<Env, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=mcp.d.ts.map

package/dist/server/http/routes/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../../../src/server/http/routes/mcp.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,EAAiB,KAAK,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAC/D,OAAO,EAAkB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACxE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAItC,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,SAAS,OAAO,EAAE,CAAA;IACzB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,aAAa,CAAA;IACrB,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;8CAE8C;AAC9C,eAAO,MAAM,SAAS,SAAU,IAAI,WAAW,UAAU,qDA4BxD,CAAA"}

package/dist/server/http/routes/mcp.js

@@ -0,0 +1,37 @@
+import { createMcpHandler, McpServer } from "@modelcontextprotocol/server";
+import { Hono } from "hono";
+import { anonymous, EXTENSION_VERSION } from "../../../protocol/index.js";
+import { registerTools } from "../../kit/tool.js";
+import { registerViewer } from "../../mcp/viewer.js";
+const SERVER_INFO = { name: "@derive-to/artifacts", version: EXTENSION_VERSION };
+/** The same core as an MCP server, for agents and for MCP Apps hosts. Stateless (MCP
+ *  2026-07-28): each request gets a fresh server bound to that request's actor, so tools
+ *  authorize exactly as the REST API does. */
+export const mcpRoutes = (core, options) => {
+    const handler = createMcpHandler((ctx) => {
+        // Set by this file's own route below from the gate's principal; nothing else writes it.
+        const who = (ctx.authInfo?.extra?.["principal"] ?? anonymous);
+        const space = String(ctx.authInfo?.extra?.["space"] ?? "");
+        const server = new McpServer(SERVER_INFO, { instructions: options.instructions });
+        registerTools(server, options.tools, {
+            access: core.access,
+            who,
+            space,
+            observe: options.observe,
+        });
+        registerViewer(server, core, { who, space }, options.viewer);
+        return server;
+    });
+    const app = new Hono();
+    // Deliberately public at the route: every tool declares its own access, checked by the kit.
+    app.all("/mcp", core.gates.anyone(), (c) => handler.fetch(c.req.raw, {
+        authInfo: {
+            token: "",
+            clientId: "@derive-to/artifacts",
+            scopes: [],
+            extra: { principal: c.get("principal"), space: c.get("space") },
+        },
+    }));
+    return app;
+};
+//# sourceMappingURL=mcp.js.map

package/dist/server/http/routes/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../../../src/server/http/routes/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAkB,MAAM,4BAA4B,CAAA;AAGzF,OAAO,EAAE,aAAa,EAAgB,MAAM,mBAAmB,CAAA;AAC/D,OAAO,EAAE,cAAc,EAAsB,MAAM,qBAAqB,CAAA;AAGxE,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAA;AAShF;;8CAE8C;AAC9C,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAU,EAAE,OAAmB,EAAE,EAAE;IAC3D,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,GAAG,EAAE,EAAE;QACvC,wFAAwF;QACxF,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,IAAI,SAAS,CAAc,CAAA;QAC1E,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;QAC1D,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;QACjF,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE;YACnC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG;YACH,KAAK;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAA;QACF,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QAC5D,OAAO,MAAM,CAAA;IACf,CAAC,CAAC,CAAA;IACF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAO,CAAA;IAC3B,4FAA4F;IAC5F,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CACzC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;QACvB,QAAQ,EAAE;YACR,KAAK,EAAE,EAAE;YACT,QAAQ,EAAE,sBAAsB;YAChC,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;SAChE;KACF,CAAC,CACH,CAAA;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA"}

package/dist/server/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./kit.js";
+export { loadKitAssets } from "./sandbox/assets.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAEA,cAAc,UAAU,CAAA;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA"}

package/dist/server/index.js

@@ -0,0 +1,5 @@
+// Node hosts can load the shipped browser bundles from disk.
+// Fetch runtimes import the portable kit entry and supply their bundled assets.
+export * from "./kit.js";
+export { loadKitAssets } from "./sandbox/assets.js";
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,gFAAgF;AAChF,cAAc,UAAU,CAAA;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA"}

package/dist/server/kit/broadcasts.d.ts

@@ -0,0 +1,5 @@
+import type { Bus } from "../ports.js";
+import type { PluginParts } from "./plugin.js";
+/** A committed write stays successful when its live notification fails. */
+export declare const broadcasts: (bus: Bus) => PluginParts;
+//# sourceMappingURL=broadcasts.d.ts.map

package/dist/server/kit/broadcasts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"broadcasts.d.ts","sourceRoot":"","sources":["../../../src/server/kit/broadcasts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE9C,2EAA2E;AAC3E,eAAO,MAAM,UAAU,QAAS,GAAG,KAAG,WAWpC,CAAA"}

package/dist/server/kit/broadcasts.js

@@ -0,0 +1,10 @@
+/** A committed write stays successful when its live notification fails. */
+export const broadcasts = (bus) => ({
+    after: {
+        "version.published": ({ artifact, version }) => bus.publish({ type: "version.published", artifactId: artifact.id, n: version.n }),
+        "state.changed": ({ artifact, key, stateVersion }) => bus.publish({ type: "state.changed", artifactId: artifact.id, key, version: stateVersion }),
+        "comment.created": ({ artifact, thread }) => bus.publish({ type: "thread.changed", artifactId: artifact.id, threadId: thread.id }),
+        "thread.updated": ({ artifact, thread }) => bus.publish({ type: "thread.changed", artifactId: artifact.id, threadId: thread.id }),
+    },
+});
+//# sourceMappingURL=broadcasts.js.map

package/dist/server/kit/broadcasts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broadcasts.js","sourceRoot":"","sources":["../../../src/server/kit/broadcasts.ts"],"names":[],"mappings":"AAGA,2EAA2E;AAC3E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,GAAQ,EAAe,EAAE,CAAC,CAAC;IACpD,KAAK,EAAE;QACL,mBAAmB,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAC7C,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;QACnF,eAAe,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,CACnD,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;QAC7F,iBAAiB,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAC1C,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;QACvF,gBAAgB,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CACzC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;KACxF;CACF,CAAC,CAAA"}

package/dist/server/kit/events.d.ts

@@ -0,0 +1,97 @@
+import type { Actor, Comment, Mutation, Thread, Version } from "../../protocol/index.js";
+import type { SourceContent } from "../core/source.js";
+import type { ArtifactRow } from "../ports.js";
+/** What just happened. Plugins react in `after` hooks: notify, record, index. Add your own
+ *  with declaration merging:
+ *
+ *  declare module "../index.js" {
+ *    interface KitEvents { "mention.created": { ... } }
+ *  }
+ */
+export interface KitEvents {
+    "artifact.created": {
+        artifact: ArtifactRow;
+        actor: Actor;
+    };
+    /** `addresses`: threads this version answers, as the publisher said. */
+    "version.published": {
+        artifact: ArtifactRow;
+        version: Version;
+        actor: Actor;
+        addresses: readonly string[];
+    };
+    "comment.created": {
+        artifact: ArtifactRow;
+        thread: Thread;
+        comment: Comment;
+        actor: Actor;
+    };
+    "thread.updated": {
+        artifact: ArtifactRow;
+        thread: Thread;
+        actor: Actor;
+    };
+    "state.changed": {
+        artifact: ArtifactRow;
+        key: string;
+        mutation: Mutation;
+        actor: Actor;
+        stateVersion: number;
+        itemId: string;
+    };
+}
+/** What is about to happen. A `before` hook refuses by throwing (an `ArtifactError` carries its
+ *  message to the person); returning lets it through. */
+export interface KitChecks {
+    "source.publish": {
+        artifact: ArtifactRow | null;
+        source: SourceContent;
+        actor: Actor;
+    };
+    /** Hosts can refuse an export that needs live data or a connected component. */
+    "version.export": {
+        artifact: ArtifactRow;
+        html: string;
+        actor: Actor | null;
+        version: number;
+    };
+    "version.publish": {
+        artifact: ArtifactRow | null;
+        html: string;
+        actor: Actor;
+    };
+    "comment.create": {
+        artifact: ArtifactRow;
+        body: string;
+        actor: Actor;
+    };
+    "state.mutate": {
+        artifact: ArtifactRow;
+        key: string;
+        mutation: Mutation;
+        actor: Actor;
+    };
+}
+type Handler<P> = (payload: P) => void | Promise<void>;
+export type AfterHooks = {
+    [K in keyof KitEvents]?: Handler<KitEvents[K]>;
+};
+export type BeforeHooks = {
+    [K in keyof KitChecks]?: Handler<KitChecks[K]>;
+};
+interface Hooks {
+    before?: BeforeHooks | undefined;
+    after?: AfterHooks | undefined;
+}
+/** The hook bus. `before` runs in plugin order and stops at the first refusal. `after` runs
+ *  every hook, never fails the action that already happened, and reports failures. */
+export interface Events {
+    use(hooks: Hooks[]): void;
+    before<K extends keyof KitChecks>(name: K, payload: KitChecks[K]): Promise<void>;
+    after<K extends keyof KitEvents>(name: K, payload: KitEvents[K]): Promise<void>;
+    /** Hand an error that has no caller to answer to the host's `onError`. */
+    report(error: unknown): Promise<void>;
+}
+export declare const createEvents: (onError?: (error: unknown) => void | Promise<void>) => Events;
+export {};
+//# sourceMappingURL=events.d.ts.map

package/dist/server/kit/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../src/server/kit/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACxF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE9C;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB,kBAAkB,EAAE;QAAE,QAAQ,EAAE,WAAW,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,CAAA;IAC3D,wEAAwE;IACxE,mBAAmB,EAAE;QACnB,QAAQ,EAAE,WAAW,CAAA;QACrB,OAAO,EAAE,OAAO,CAAA;QAChB,KAAK,EAAE,KAAK,CAAA;QACZ,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;KAC7B,CAAA;IACD,iBAAiB,EAAE;QAAE,QAAQ,EAAE,WAAW,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,CAAA;IAC5F,gBAAgB,EAAE;QAAE,QAAQ,EAAE,WAAW,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,CAAA;IACzE,eAAe,EAAE;QACf,QAAQ,EAAE,WAAW,CAAA;QACrB,GAAG,EAAE,MAAM,CAAA;QACX,QAAQ,EAAE,QAAQ,CAAA;QAClB,KAAK,EAAE,KAAK,CAAA;QACZ,YAAY,EAAE,MAAM,CAAA;QACpB,MAAM,EAAE,MAAM,CAAA;KACf,CAAA;CACF;AAED;yDACyD;AACzD,MAAM,WAAW,SAAS;IACxB,gBAAgB,EAAE;QAAE,QAAQ,EAAE,WAAW,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,aAAa,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,CAAA;IACvF,gFAAgF;IAChF,gBAAgB,EAAE;QAAE,QAAQ,EAAE,WAAW,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IAC/F,iBAAiB,EAAE;QAAE,QAAQ,EAAE,WAAW,GAAG,IAAI,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,CAAA;IAC/E,gBAAgB,EAAE;QAAE,QAAQ,EAAE,WAAW,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,CAAA;IACvE,cAAc,EAAE;QAAE,QAAQ,EAAE,WAAW,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,QAAQ,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,CAAA;CACzF;AAED,KAAK,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AACtD,MAAM,MAAM,UAAU,GAAG;KAAG,CAAC,IAAI,MAAM,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;CAAE,CAAA;AAC3E,MAAM,MAAM,WAAW,GAAG;KAAG,CAAC,IAAI,MAAM,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;CAAE,CAAA;AAE5E,UAAU,KAAK;IACb,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;IAChC,KAAK,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;CAC/B;AAED;sFACsF;AACtF,MAAM,WAAW,MAAM;IACrB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;IACzB,MAAM,CAAC,CAAC,SAAS,MAAM,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChF,KAAK,CAAC,CAAC,SAAS,MAAM,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/E,0EAA0E;IAC1E,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACtC;AAED,eAAO,MAAM,YAAY,aACd,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAChD,MA8BF,CAAA"}

package/dist/server/kit/events.js

@@ -0,0 +1,28 @@
+export const createEvents = (onError = () => { }) => {
+    let hooks = [];
+    const report = async (error) => {
+        try {
+            await onError(error);
+        }
+        catch {
+            // A failed error reporter cannot change the outcome of a committed action.
+        }
+    };
+    return {
+        report,
+        use: (next) => {
+            hooks = next;
+        },
+        before: (name, payload) => hooks.reduce(async (previous, each) => {
+            await previous;
+            await each.before?.[name]?.(payload);
+        }, Promise.resolve()),
+        after: async (name, payload) => {
+            const results = await Promise.allSettled(hooks.map(async (each) => each.after?.[name]?.(payload)));
+            await Promise.all(results
+                .filter((result) => result.status === "rejected")
+                .map((result) => report(result.reason)));
+        },
+    };
+};
+//# sourceMappingURL=events.js.map

package/dist/server/kit/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/server/kit/events.ts"],"names":[],"mappings":"AA8DA,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,OAAO,GAA6C,GAAG,EAAE,GAAE,CAAC,EACpD,EAAE;IACV,IAAI,KAAK,GAAY,EAAE,CAAA;IACvB,MAAM,MAAM,GAAG,KAAK,EAAE,KAAc,EAAiB,EAAE;QACrD,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,KAAK,CAAC,CAAA;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,2EAA2E;QAC7E,CAAC;IACH,CAAC,CAAA;IACD,OAAO;QACL,MAAM;QACN,GAAG,EAAE,CAAC,IAAa,EAAE,EAAE;YACrB,KAAK,GAAG,IAAI,CAAA;QACd,CAAC;QACD,MAAM,EAAE,CAA4B,IAAO,EAAE,OAAqB,EAAiB,EAAE,CACnF,KAAK,CAAC,MAAM,CAAgB,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;YACnD,MAAM,QAAQ,CAAA;YACd,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;QACtC,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACvB,KAAK,EAAE,KAAK,EAA6B,IAAO,EAAE,OAAqB,EAAiB,EAAE;YACxF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CACzD,CAAA;YACD,MAAM,OAAO,CAAC,GAAG,CACf,OAAO;iBACJ,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC;iBAChD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAC1C,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC,CAAA"}

package/dist/server/kit/observe.d.ts

@@ -0,0 +1,20 @@
+import type { MiddlewareHandler } from "hono";
+import type { Env } from "../http/gates.js";
+/** One finished request or tool call, for metrics and tracing. */
+export interface Observation {
+    kind: "route" | "tool";
+    /** "GET /artifacts/:id/threads", or a tool name like "artifact_publish". */
+    name: string;
+    ms: number;
+    ok: boolean;
+    /** The HTTP status, for routes. */
+    status?: number;
+    /** Who asked, when anyone was signed in. */
+    actor: string | null;
+}
+export type Observe = (observation: Observation) => void;
+/** Never let a broken observer break a request. */
+export declare const safely: (observe: Observe | undefined) => Observe;
+/** Time every route, named by its pattern so metrics group sensibly. */
+export declare const observeRoutes: (observe: Observe) => MiddlewareHandler<Env>;
+//# sourceMappingURL=observe.d.ts.map

package/dist/server/kit/observe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observe.d.ts","sourceRoot":"","sources":["../../../src/server/kit/observe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AAE7C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AAE3C,kEAAkE;AAClE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,OAAO,GAAG,MAAM,CAAA;IACtB,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,EAAE,EAAE,OAAO,CAAA;IACX,mCAAmC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,4CAA4C;IAC5C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED,MAAM,MAAM,OAAO,GAAG,CAAC,WAAW,EAAE,WAAW,KAAK,IAAI,CAAA;AAExD,mDAAmD;AACnD,eAAO,MAAM,MAAM,YACP,OAAO,GAAG,SAAS,KAAG,OAO/B,CAAA;AAEH,wEAAwE;AACxE,eAAO,MAAM,aAAa,YACd,OAAO,KAAG,iBAAiB,CAAC,GAAG,CAYxC,CAAA"}