@derive-to/artifacts 0.0.0-stage → 0.6.0

package/dist/server/plugins/state/service.js

@@ -0,0 +1,65 @@
+import { createCollectionRules, DEFAULT_COLLECTION_DIALECT, } from "../../../protocol/collection.js";
+import { STATE_LIMITS, } from "../../../protocol/index.js";
+import { commitArtifactState } from "../../collection-storage.js";
+import { badRequest, fail, forbidden } from "../../core/errors.js";
+import { newId } from "../../core/ids.js";
+/** Both host adapters use one compare-and-swap engine. */
+const mutateState = async (store, input, collection) => {
+    const result = await commitArtifactState(store, {
+        artifactId: input.artifactId,
+        key: input.key,
+        actor: input.actor,
+        rules: collection,
+        mutation: input.mutation,
+        initial: input.initial ?? [],
+        mintId: () => newId("item"),
+        itemId: newId("item"),
+    });
+    if ("error" in result) {
+        if (result.code === "race")
+            throw fail("STATE_RACE", result.error);
+        if (result.code === "stored")
+            throw fail("STORED_DATA_INVALID", result.error);
+        throw badRequest(result.error);
+    }
+    return result;
+};
+/** Shared state for one artifact, as one viewer sees it. */
+export const stateService = ({ store }, access, events, dialect = DEFAULT_COLLECTION_DIALECT) => {
+    const collection = createCollectionRules(dialect);
+    return {
+        read: async (actor, artifact, key) => {
+            const row = await store.getState(artifact.id, key);
+            return collection.snapshot(row?.items ?? null, row?.version ?? 0, actor?.id ?? null);
+        },
+        /** `interact` covers adding, your own values, and ±1 counters. Rewriting arbitrary fields
+         *  is authorship, so it needs `edit`: hiding a control in the HTML is not authorization. */
+        mutate: async (who, artifact, input) => {
+            const { actor } = who;
+            if (!collection.withinInteract(input.mutation) && !(await access.can(who, "edit", artifact)))
+                throw forbidden("Only editors can rewrite shared items.");
+            await events.before("state.mutate", {
+                artifact,
+                key: input.key,
+                mutation: input.mutation,
+                actor,
+            });
+            const result = await mutateState(store, { ...input, artifactId: artifact.id, actor }, collection);
+            if (result.changed)
+                await events.after("state.changed", {
+                    artifact,
+                    key: input.key,
+                    mutation: input.mutation,
+                    actor,
+                    stateVersion: result.version,
+                    itemId: result.itemId,
+                });
+            return {
+                ...collection.snapshot(result.items, result.version, actor.id),
+                ...(result.changed ? { itemId: result.itemId } : {}),
+            };
+        },
+        activity: async (artifact, key) => (await store.listActivity(artifact.id, key, STATE_LIMITS.activity)).map(({ action, itemId, version, actor, at }) => ({ action, itemId, version, actor, at })),
+    };
+};
+//# sourceMappingURL=service.js.map

package/dist/server/plugins/state/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../../src/server/plugins/state/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,iCAAiC,CAAA;AACxC,OAAO,EAKL,YAAY,GACb,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAwB,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AAEvF,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAClE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAYzC,0DAA0D;AAC1D,MAAM,WAAW,GAAG,KAAK,EACvB,KAAoB,EACpB,KAAkB,EAClB,UAA2B,EACD,EAAE;IAC5B,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE;QAC9C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;QAC5B,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;QAC3B,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;KACtB,CAAC,CAAA;IACF,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QACtB,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;YAAE,MAAM,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;QAClE,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,CAAC,qBAAqB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;QAC7E,MAAM,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAChC,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,4DAA4D;AAC5D,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,EAAE,KAAK,EAAW,EAClB,MAAc,EACd,MAAc,EACd,OAAO,GAAgC,0BAA0B,EACjE,EAAE;IACF,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAA;IACjD,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,KAAmB,EAAE,QAAqB,EAAE,GAAW,EAAqB,EAAE;YACzF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;YAClD,OAAO,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,IAAI,IAAI,EAAE,GAAG,EAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,IAAI,CAAC,CAAA;QACtF,CAAC;QACD;oGAC4F;QAC5F,MAAM,EAAE,KAAK,EACX,GAA0C,EAC1C,QAAqB,EACrB,KAA2F,EACxE,EAAE;YACrB,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAA;YACrB,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAC1F,MAAM,SAAS,CAAC,wCAAwC,CAAC,CAAA;YAC3D,MAAM,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE;gBAClC,QAAQ;gBACR,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK;aACN,CAAC,CAAA;YACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,KAAK,EACL,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,EAC5C,UAAU,CACX,CAAA;YACD,IAAI,MAAM,CAAC,OAAO;gBAChB,MAAM,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE;oBAClC,QAAQ;oBACR,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK;oBACL,YAAY,EAAE,MAAM,CAAC,OAAO;oBAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;iBACtB,CAAC,CAAA;YACJ,OAAO;gBACL,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC9D,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrD,CAAA;QACH,CAAC;QACD,QAAQ,EAAE,KAAK,EAAE,QAAqB,EAAE,GAAW,EAAuB,EAAE,CAC1E,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CACrE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CACrF;KACJ,CAAA;AACH,CAAC,CAAA"}

package/dist/server/plugins/webhook.d.ts

@@ -0,0 +1,17 @@
+import type { KitEvents } from "../kit/events.js";
+type EventName = keyof KitEvents;
+export interface WebhookOptions {
+    url: string;
+    /** Signs each body: `x-open-artifact-signature: sha256=<hex HMAC of the body>`. */
+    secret: string;
+    /** Which events to send. Defaults to all of them. */
+    events?: readonly EventName[];
+    /** For tests and custom runtimes. Defaults to the global fetch. */
+    fetch?: typeof fetch;
+}
+/** Send events to any URL, signed, for apps outside JavaScript: a Slack bridge, a metrics
+ *  pipeline, an audit log. A failed delivery is reported to `onError` and never fails the
+ *  action that already happened. */
+export declare const webhook: (options: WebhookOptions) => import("../kit/plugin.js").ArtifactPlugin;
+export {};
+//# sourceMappingURL=webhook.d.ts.map

package/dist/server/plugins/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../../src/server/plugins/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAc,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAG7D,KAAK,SAAS,GAAG,MAAM,SAAS,CAAA;AAEhC,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAA;IACX,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAA;IACd,qDAAqD;IACrD,MAAM,CAAC,EAAE,SAAS,SAAS,EAAE,CAAA;IAC7B,mEAAmE;IACnE,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;CACrB;AA8BD;;oCAEoC;AACpC,eAAO,MAAM,OAAO,YAAa,cAAc,8CA+B9C,CAAA"}

package/dist/server/plugins/webhook.js

@@ -0,0 +1,54 @@
+import { definePlugin } from "../kit/plugin.js";
+const ALL = [
+    "artifact.created",
+    "version.published",
+    "comment.created",
+    "thread.updated",
+    "state.changed",
+];
+/** What leaves the server: ids, people, and short fields, never page HTML. */
+const summarize = (name, event) => {
+    const base = {
+        type: name,
+        at: new Date().toISOString(),
+        artifact: { id: event.artifact.id, title: event.artifact.title },
+        actor: event.actor,
+    };
+    if ("comment" in event)
+        return { ...base, thread: { id: event.thread.id }, comment: event.comment };
+    if ("thread" in event)
+        return { ...base, thread: { id: event.thread.id, state: event.thread.state } };
+    if ("version" in event)
+        return { ...base, version: event.version };
+    if ("key" in event)
+        return { ...base, key: event.key, op: event.mutation.op };
+    return base;
+};
+const hex = (bytes) => [...new Uint8Array(bytes)].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+/** Send events to any URL, signed, for apps outside JavaScript: a Slack bridge, a metrics
+ *  pipeline, an audit log. A failed delivery is reported to `onError` and never fails the
+ *  action that already happened. */
+export const webhook = (options) => {
+    const send = options.fetch ?? globalThis.fetch.bind(globalThis);
+    const key = crypto.subtle.importKey("raw", new TextEncoder().encode(options.secret), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+    const deliver = async (name, event) => {
+        const body = JSON.stringify(summarize(name, event));
+        const signature = hex(await crypto.subtle.sign("HMAC", await key, new TextEncoder().encode(body)));
+        const response = await send(options.url, {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                "x-open-artifact-signature": `sha256=${signature}`,
+            },
+            body,
+        });
+        if (!response.ok)
+            throw new Error(`Webhook ${options.url} answered ${response.status}.`);
+    };
+    const after = Object.fromEntries((options.events ?? ALL).map((name) => [
+        name,
+        (event) => deliver(name, event),
+    ]));
+    return definePlugin({ id: "webhook", setup: () => ({ after }) });
+};
+//# sourceMappingURL=webhook.js.map

package/dist/server/plugins/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../../src/server/plugins/webhook.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAc/C,MAAM,GAAG,GAAyB;IAChC,kBAAkB;IAClB,mBAAmB;IACnB,iBAAiB;IACjB,gBAAgB;IAChB,eAAe;CAChB,CAAA;AAED,8EAA8E;AAC9E,MAAM,SAAS,GAAG,CAAsB,IAAO,EAAE,KAAmB,EAAE,EAAE;IACtE,MAAM,IAAI,GAAG;QACX,IAAI,EAAE,IAAI;QACV,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5B,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE;QAChE,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAA;IACD,IAAI,SAAS,IAAI,KAAK;QACpB,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;IAC7E,IAAI,QAAQ,IAAI,KAAK;QACnB,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAA;IAChF,IAAI,SAAS,IAAI,KAAK;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;IAClE,IAAI,KAAK,IAAI,KAAK;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAA;IAC7E,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED,MAAM,GAAG,GAAG,CAAC,KAAkB,EAAE,EAAE,CACjC,CAAC,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAEvF;;oCAEoC;AACpC,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,OAAuB,EAAE,EAAE;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CACjC,KAAK,EACL,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EACxC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAA;IACD,MAAM,OAAO,GAAG,KAAK,EAAE,IAAe,EAAE,KAA2B,EAAE,EAAE;QACrE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;QACnD,MAAM,SAAS,GAAG,GAAG,CACnB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAC5E,CAAA;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YACvC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,2BAA2B,EAAE,UAAU,SAAS,EAAE;aACnD;YACD,IAAI;SACL,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,OAAO,CAAC,GAAG,aAAa,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAA;IAC1F,CAAC,CAAA;IACD,MAAM,KAAK,GAAe,MAAM,CAAC,WAAW,CAC1C,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACpC,IAAI;QACJ,CAAC,KAA2B,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;KACtD,CAAC,CACH,CAAA;IACD,OAAO,YAAY,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;AAClE,CAAC,CAAA"}

package/dist/server/ports.d.ts

@@ -0,0 +1,214 @@
+import type { Context } from "hono";
+import * as z from "zod/mini";
+import { type Actor, type ArtifactKind, type Csp, type Principal, type Quote, type StoredItem, type ThreadState, type Verb } from "../protocol/index.js";
+export type { StoredItem };
+export interface ArtifactRow {
+    id: string;
+    /** The tenant it belongs to (an org, a workspace): from `host.space`, "" when unused. An
+     *  artifact is invisible outside its space, whatever `can` says. */
+    space: string;
+    title: string;
+    currentVersion: number;
+    createdAt: string;
+    updatedAt: string;
+    createdBy: Actor;
+    /** Plain text from the current version: its meta description, else its first paragraph.
+     *  Lists show it under the title. */
+    summary: string;
+    /** "page" or "slides", from the current version's <meta name="artifact-kind">. */
+    kind: ArtifactKind;
+    /** Who published the current version. */
+    updatedBy: Actor;
+}
+/** What the kit reads from a version's HTML and keeps on the artifact for lists. */
+export interface ContentFacts {
+    summary: string;
+    kind: ArtifactKind;
+    /** The page's <title>, when it has one. A new version with a title renames the artifact. */
+    title?: string | undefined;
+}
+/** Comment activity on one artifact, for lists. `people` are the latest distinct commenters,
+ *  newest first, at most five. */
+export interface ThreadActivity {
+    artifactId: string;
+    open: number;
+    total: number;
+    people: Actor[];
+}
+/** A version's original source format and host publication metadata. */
+export interface SourceInfo {
+    contentType: string;
+    metadata?: Record<string, string | null> | undefined;
+}
+/** Original bytes live in the blob store under `contentHash`. */
+export interface VersionRow {
+    artifactId: string;
+    n: number;
+    contentHash: string;
+    size: number;
+    csp: Csp;
+    createdAt: string;
+    createdBy: Actor;
+    source?: SourceInfo | undefined;
+}
+export interface ThreadRow {
+    id: string;
+    artifactId: string;
+    state: ThreadState;
+}
+export interface CommentRow {
+    id: string;
+    artifactId: string;
+    threadId: string;
+    version: number;
+    quote: Quote | null;
+    body: string;
+    author: Actor;
+    createdAt: string;
+}
+export interface StateRow {
+    artifactId: string;
+    key: string;
+    items: StoredItem[];
+    version: number;
+    /** Host adapters can retain their existing authenticated write attribution. */
+    updatedBy?: Actor | undefined;
+    updatedAt?: string | undefined;
+}
+export interface ActivityRow {
+    artifactId: string;
+    key: string;
+    action: "add" | "update" | "setMine";
+    itemId: string;
+    version: number;
+    actor: Actor;
+    at: string;
+}
+/** Rows. Implement it over your own database, then prove the implementation with
+ *  `storeContract` from `@derive-to/artifacts/server/testing`. */
+/** A keyset page of artifacts: stable under concurrent writes, cheap at any depth. */
+export interface ArtifactPage {
+    space: string;
+    limit: number;
+    /** Filter before pagination. Search matches title and summary as literal text. */
+    search?: string | undefined;
+    createdBy?: string | undefined;
+    after?: {
+        updatedAt: string;
+        id: string;
+    } | undefined;
+}
+export interface ArtifactStore {
+    createArtifact(artifact: ArtifactRow, first: VersionRow): Promise<void>;
+    getArtifact(id: string): Promise<ArtifactRow | null>;
+    /** Newest first (by `updatedAt`, then `id`), at most `limit`, strictly after `after`. */
+    listArtifacts(page: ArtifactPage): Promise<ArtifactRow[]>;
+    /** Append version `expected + 1`, and set the artifact's facts and `updatedBy` from it.
+     *  Null when another publish already moved the artifact. */
+    addVersion(version: VersionRow, expected: number, facts: ContentFacts): Promise<VersionRow | null>;
+    /** Unconditional append uses the host adapter's native atomic reservation. */
+    appendVersion?(version: VersionRow, facts: ContentFacts): Promise<VersionRow>;
+    /** Attended edits may replace only the current version with this exact source hash. */
+    replaceVersion?(version: VersionRow, expectedHash: string, facts: ContentFacts): Promise<VersionRow | null>;
+    getVersion(artifactId: string, n: number): Promise<VersionRow | null>;
+    listVersions(artifactId: string): Promise<VersionRow[]>;
+    /** Set the title. Leaves the version and `updatedAt` alone. False when it is gone. */
+    renameArtifact(id: string, title: string): Promise<boolean>;
+    /** Remove the artifact with its versions, threads, state and activity. Content blobs stay:
+     *  they are shared by hash. False when it is already gone. */
+    deleteArtifact(id: string): Promise<boolean>;
+    createThread(thread: ThreadRow, first: CommentRow): Promise<void>;
+    addComment(comment: CommentRow): Promise<void>;
+    setThreadState(artifactId: string, threadId: string, state: ThreadState): Promise<boolean>;
+    listThreads(artifactId: string): Promise<{
+        threads: ThreadRow[];
+        comments: CommentRow[];
+    }>;
+    /** Activity for each of these artifacts that has threads. One call per page of a list. */
+    threadActivity(artifactIds: readonly string[]): Promise<ThreadActivity[]>;
+    getState(artifactId: string, key: string): Promise<StateRow | null>;
+    countStateKeys(artifactId: string): Promise<number>;
+    /** Write when the stored version equals `expected` (0 inserts). False on a lost race. */
+    putState(row: StateRow, expected: number): Promise<boolean>;
+    /** Record one change and keep only the newest `keep` for that key. */
+    appendActivity(activity: ActivityRow, keep: number): Promise<void>;
+    listActivity(artifactId: string, key: string, limit: number): Promise<ActivityRow[]>;
+}
+export interface Blob {
+    /** ArrayBuffer-backed, so it can go straight into a fetch body or a Response. */
+    bytes: Uint8Array<ArrayBuffer>;
+    type: string;
+}
+/** Immutable bytes by key. The kit only writes content-addressed keys (SHA-256), so `put`
+ *  is idempotent and nothing is ever updated or deleted in place. */
+export interface BlobStore {
+    put(key: string, blob: Blob): Promise<void>;
+    get(key: string): Promise<Blob | null>;
+}
+/** A live event as it crosses the bus: a small envelope. Each subscriber reads the details
+ *  it needs, so envelopes stay far below transport limits (Postgres NOTIFY allows 8 KB). The
+ *  schema is the one definition: a bus that carries text across processes parses with it. */
+export declare const busEventSchema: z.ZodMiniDiscriminatedUnion<[z.ZodMiniObject<{
+    type: z.ZodMiniLiteral<"version.published">;
+    artifactId: z.ZodMiniString<string>;
+    n: z.ZodMiniInt;
+}, z.core.$strip>, z.ZodMiniObject<{
+    type: z.ZodMiniLiteral<"thread.changed">;
+    artifactId: z.ZodMiniString<string>;
+    threadId: z.ZodMiniString<string>;
+}, z.core.$strip>, z.ZodMiniObject<{
+    type: z.ZodMiniLiteral<"state.changed">;
+    artifactId: z.ZodMiniString<string>;
+    key: z.ZodMiniString<string>;
+    version: z.ZodMiniInt;
+}, z.core.$strip>, z.ZodMiniObject<{
+    type: z.ZodMiniLiteral<"presence">;
+    artifactId: z.ZodMiniString<string>;
+    actor: z.ZodMiniObject<{
+        id: z.ZodMiniString<string>;
+        name: z.ZodMiniString<string>;
+        avatarUrl: z.ZodMiniOptional<z.ZodMiniURL>;
+    }, z.core.$strip>;
+    cursor: z.ZodMiniNullable<z.ZodMiniObject<{
+        x: z.ZodMiniNumber<number>;
+        y: z.ZodMiniNumber<number>;
+    }, z.core.$strip>>;
+}, z.core.$strip>], "type">;
+export type BusEvent = z.infer<typeof busEventSchema>;
+/** Fan-out of live events. In-process by default; Postgres LISTEN/NOTIFY (or anything else)
+ *  when you run more than one instance and want each to see the others' changes at once. */
+export interface Bus {
+    publish(event: BusEvent): Promise<void>;
+    subscribe(artifactId: string, listener: (event: BusEvent) => void): () => void;
+}
+/** Where artifacts live. Adapters return all three; mix them as you like. The bus is
+ *  optional: without one, live updates fan out in this process only. */
+export interface Backend {
+    store: ArtifactStore;
+    blobs: BlobStore;
+    bus?: Bus;
+}
+/** A backend with its bus decided, as the kernel and plugins see it. */
+export type WiredBackend = Required<Backend>;
+/** Your application's answers. The kit has no users or roles of its own; install
+ *  `@derive-to/artifacts/server/sharing` for grants and share links, or answer `can` yourself. */
+export interface ArtifactHost {
+    /** The signed-in actor for this request, or null for an anonymous viewer. */
+    actor(c: Context): Actor | null | Promise<Actor | null>;
+    /** The share link this request arrived by, if any (a token from the URL or a cookie). */
+    link?(c: Context): string | null | Promise<string | null>;
+    /** May this principal perform `verb` on this artifact? Asked for each verb on its own; the
+     *  kit holds the answers to the ladder, so a verb above a refused one is never held. */
+    can(who: Principal, verb: Verb, artifact: ArtifactRow): boolean | Promise<boolean>;
+    /** Batch permission decisions for a page. Missing ids deny every verb. */
+    permissions?(who: Principal, artifacts: readonly ArtifactRow[]): Promise<ReadonlyMap<string, readonly Verb[]>>;
+    /** May this actor create artifacts in this space? Required: creating is access too, and
+     *  the kit grants nothing by default. */
+    canCreate(actor: Actor, space: string): boolean | Promise<boolean>;
+    /** Called after an artifact is deleted, to drop what the host keeps for it (grants, links). */
+    onDelete?(artifact: ArtifactRow): void | Promise<void>;
+    /** The tenant this request acts in: an org or workspace id. Artifacts are created in it
+     *  and only found in it. Omit it for a single-tenant app. */
+    space?(c: Context): string | Promise<string>;
+}
+//# sourceMappingURL=ports.d.ts.map

package/dist/server/ports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.d.ts","sourceRoot":"","sources":["../../src/server/ports.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,CAAC,MAAM,UAAU,CAAA;AAC7B,OAAO,EACL,KAAK,KAAK,EACV,KAAK,YAAY,EAEjB,KAAK,GAAG,EACR,KAAK,SAAS,EAEd,KAAK,KAAK,EACV,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,IAAI,EACV,MAAM,sBAAsB,CAAA;AAE7B,YAAY,EAAE,UAAU,EAAE,CAAA;AAE1B,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV;wEACoE;IACpE,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,KAAK,CAAA;IAChB;yCACqC;IACrC,OAAO,EAAE,MAAM,CAAA;IACf,kFAAkF;IAClF,IAAI,EAAE,YAAY,CAAA;IAClB,yCAAyC;IACzC,SAAS,EAAE,KAAK,CAAA;CACjB;AAED,oFAAoF;AACpF,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,YAAY,CAAA;IAClB,4FAA4F;IAC5F,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC3B;AAED;kCACkC;AAClC,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,KAAK,EAAE,CAAA;CAChB;AAED,wEAAwE;AACxE,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,GAAG,SAAS,CAAA;CACrD;AAED,iEAAiE;AACjE,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,CAAC,EAAE,MAAM,CAAA;IACT,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,GAAG,CAAA;IACR,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,KAAK,CAAA;IAChB,MAAM,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;CAChC;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,WAAW,CAAA;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,KAAK,GAAG,IAAI,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,KAAK,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,UAAU,EAAE,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,+EAA+E;IAC/E,SAAS,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,SAAS,CAAA;IACpC,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,KAAK,CAAA;IACZ,EAAE,EAAE,MAAM,CAAA;CACX;AAED;kEACkE;AAClE,sFAAsF;AACtF,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,KAAK,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAA;CACtD;AAED,MAAM,WAAW,aAAa;IAC5B,cAAc,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvE,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;IACpD,yFAAyF;IACzF,aAAa,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IACzD;gEAC4D;IAC5D,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IAClG,8EAA8E;IAC9E,aAAa,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IAC7E,uFAAuF;IACvF,cAAc,CAAC,CACb,OAAO,EAAE,UAAU,EACnB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IAC7B,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IACrE,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IACvD,sFAAsF;IACtF,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC3D;kEAC8D;IAC9D,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5C,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjE,UAAU,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC1F,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAAC,QAAQ,EAAE,UAAU,EAAE,CAAA;KAAE,CAAC,CAAA;IAC1F,0FAA0F;IAC1F,cAAc,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;IACzE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;IACnE,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACnD,yFAAyF;IACzF,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC3D,sEAAsE;IACtE,cAAc,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClE,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;CACrF;AAED,MAAM,WAAW,IAAI;IACnB,iFAAiF;IACjF,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,CAAA;IAC9B,IAAI,EAAE,MAAM,CAAA;CACb;AAED;qEACqE;AACrE,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;CACvC;AAED;;6FAE6F;AAC7F,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;2BAezB,CAAA;AACF,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA;AAErD;4FAC4F;AAC5F,MAAM,WAAW,GAAG;IAClB,OAAO,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvC,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;CAC/E;AAED;wEACwE;AACxE,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,aAAa,CAAA;IACpB,KAAK,EAAE,SAAS,CAAA;IAChB,GAAG,CAAC,EAAE,GAAG,CAAA;CACV;AAED,wEAAwE;AACxE,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAA;AAE5C;kGACkG;AAClG,MAAM,WAAW,YAAY;IAC3B,6EAA6E;IAC7E,KAAK,CAAC,CAAC,EAAE,OAAO,GAAG,KAAK,GAAG,IAAI,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAA;IACvD,yFAAyF;IACzF,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACzD;4FACwF;IACxF,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAClF,0EAA0E;IAC1E,WAAW,CAAC,CACV,GAAG,EAAE,SAAS,EACd,SAAS,EAAE,SAAS,WAAW,EAAE,GAChC,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,CAAA;IAChD;6CACyC;IACzC,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAClE,+FAA+F;IAC/F,QAAQ,CAAC,CAAC,QAAQ,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtD;iEAC6D;IAC7D,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CAC7C"}

package/dist/server/ports.js

@@ -0,0 +1,22 @@
+import * as z from "zod/mini";
+import { actorSchema, pointSchema, } from "../protocol/index.js";
+/** A live event as it crosses the bus: a small envelope. Each subscriber reads the details
+ *  it needs, so envelopes stay far below transport limits (Postgres NOTIFY allows 8 KB). The
+ *  schema is the one definition: a bus that carries text across processes parses with it. */
+export const busEventSchema = z.discriminatedUnion("type", [
+    z.object({ type: z.literal("version.published"), artifactId: z.string(), n: z.int() }),
+    z.object({ type: z.literal("thread.changed"), artifactId: z.string(), threadId: z.string() }),
+    z.object({
+        type: z.literal("state.changed"),
+        artifactId: z.string(),
+        key: z.string(),
+        version: z.int(),
+    }),
+    z.object({
+        type: z.literal("presence"),
+        artifactId: z.string(),
+        actor: actorSchema,
+        cursor: z.nullable(pointSchema),
+    }),
+]);
+//# sourceMappingURL=ports.js.map

package/dist/server/ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.js","sourceRoot":"","sources":["../../src/server/ports.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAA;AAC7B,OAAO,EAGL,WAAW,EAGX,WAAW,GAKZ,MAAM,sBAAsB,CAAA;AA8J7B;;6FAE6F;AAC7F,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACzD,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;IACtF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC7F,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;QAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;QACf,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE;KACjB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;KAChC,CAAC;CACH,CAAC,CAAA"}

package/dist/server/sandbox/assets.d.ts

@@ -0,0 +1,13 @@
+export interface KitAssets {
+    /** The frame runtime, inlined into artifact HTML by the server. */
+    runtime: string;
+    /** The sandbox relay, served on the sandbox origin. */
+    relay: string;
+    /** The generic viewer that renders any artifact in a plain MCP Apps host. */
+    viewer: string;
+}
+/** The browser bundles that ship with the runtime package, as strings. An import, not a file
+ *  read: bundlers rewrite resolved paths (Turbopack turns require.resolve into a module id),
+ *  but they always include an imported module. */
+export declare const loadKitAssets: () => Promise<KitAssets>;
+//# sourceMappingURL=assets.d.ts.map

package/dist/server/sandbox/assets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../../src/server/sandbox/assets.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACxB,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAA;IACf,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAA;IACb,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;kDAEkD;AAClD,eAAO,MAAM,aAAa,QAAa,OAAO,CAAC,SAAS,CAGvD,CAAA"}

package/dist/server/sandbox/assets.js

@@ -0,0 +1,8 @@
+/** The browser bundles that ship with the runtime package, as strings. An import, not a file
+ *  read: bundlers rewrite resolved paths (Turbopack turns require.resolve into a module id),
+ *  but they always include an imported module. */
+export const loadKitAssets = async () => {
+    const { runtime, relay, viewer } = await import("@derive-to/artifacts/runtime/assets");
+    return { runtime, relay, viewer };
+};
+//# sourceMappingURL=assets.js.map

package/dist/server/sandbox/assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.js","sourceRoot":"","sources":["../../../src/server/sandbox/assets.ts"],"names":[],"mappings":"AASA;;kDAEkD;AAClD,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,IAAwB,EAAE;IAC1D,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAA;IACtF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;AACnC,CAAC,CAAA"}

package/dist/server/sandbox/csp.d.ts

@@ -0,0 +1,5 @@
+import { type Csp } from "../../protocol/index.js";
+/** The sandbox CSP, matching the MCP Apps reference host: inline code runs, and the network
+ *  is closed except for the domains the artifact declared. Undeclared means unreachable. */
+export declare const buildCsp: (csp: Csp, frameAncestors: string[]) => string;
+//# sourceMappingURL=csp.d.ts.map

package/dist/server/sandbox/csp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csp.d.ts","sourceRoot":"","sources":["../../../src/server/sandbox/csp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,GAAG,EAAkB,MAAM,yBAAyB,CAAA;AAWlE;4FAC4F;AAC5F,eAAO,MAAM,QAAQ,QAAS,GAAG,kBAAkB,MAAM,EAAE,KAAG,MAkB7D,CAAA"}

package/dist/server/sandbox/csp.js

@@ -0,0 +1,29 @@
+import { cspDomainInput } from "../../protocol/index.js";
+/** Only entries that are origins the input schema accepts. New versions are refused at the
+ *  boundary when they declare anything else; versions stored before that check may hold a
+ *  `*` or a bare scheme, and serving them narrows those to nothing rather than opening the
+ *  network. This can only remove access, never add it. */
+const sanitize = (domains) => (domains ?? []).filter((domain) => cspDomainInput.safeParse(domain).success).join(" ");
+const directive = (name, sources) => `${name} ${sources}`.trim();
+/** The sandbox CSP, matching the MCP Apps reference host: inline code runs, and the network
+ *  is closed except for the domains the artifact declared. Undeclared means unreachable. */
+export const buildCsp = (csp, frameAncestors) => {
+    const resources = sanitize(csp.resourceDomains);
+    const frames = sanitize(csp.frameDomains);
+    const base = sanitize(csp.baseUriDomains);
+    return [
+        "default-src 'self' 'unsafe-inline'",
+        directive("script-src", `'self' 'unsafe-inline' 'unsafe-eval' blob: data: ${resources}`),
+        directive("style-src", `'self' 'unsafe-inline' blob: data: ${resources}`),
+        directive("img-src", `'self' data: blob: ${resources}`),
+        directive("font-src", `'self' data: blob: ${resources}`),
+        directive("media-src", `'self' data: blob: ${resources}`),
+        directive("connect-src", `'self' ${sanitize(csp.connectDomains)}`),
+        directive("worker-src", `'self' blob: ${resources}`),
+        frames ? `frame-src ${frames}` : "frame-src 'none'",
+        "object-src 'none'",
+        base ? `base-uri ${base}` : "base-uri 'none'",
+        directive("frame-ancestors", sanitize(frameAncestors) || "'none'"),
+    ].join("; ");
+};
+//# sourceMappingURL=csp.js.map

package/dist/server/sandbox/csp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csp.js","sourceRoot":"","sources":["../../../src/server/sandbox/csp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAElE;;;0DAG0D;AAC1D,MAAM,QAAQ,GAAG,CAAC,OAA6B,EAAU,EAAE,CACzD,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAExF,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,OAAe,EAAU,EAAE,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC,IAAI,EAAE,CAAA;AAExF;4FAC4F;AAC5F,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAQ,EAAE,cAAwB,EAAU,EAAE;IACrE,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;IACzC,OAAO;QACL,oCAAoC;QACpC,SAAS,CAAC,YAAY,EAAE,oDAAoD,SAAS,EAAE,CAAC;QACxF,SAAS,CAAC,WAAW,EAAE,sCAAsC,SAAS,EAAE,CAAC;QACzE,SAAS,CAAC,SAAS,EAAE,sBAAsB,SAAS,EAAE,CAAC;QACvD,SAAS,CAAC,UAAU,EAAE,sBAAsB,SAAS,EAAE,CAAC;QACxD,SAAS,CAAC,WAAW,EAAE,sBAAsB,SAAS,EAAE,CAAC;QACzD,SAAS,CAAC,aAAa,EAAE,UAAU,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QAClE,SAAS,CAAC,YAAY,EAAE,gBAAgB,SAAS,EAAE,CAAC;QACpD,MAAM,CAAC,CAAC,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC,CAAC,kBAAkB;QACnD,mBAAmB;QACnB,IAAI,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,iBAAiB;QAC7C,SAAS,CAAC,iBAAiB,EAAE,QAAQ,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC;KACnE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC,CAAA"}

package/dist/server/sandbox/inject.d.ts

@@ -0,0 +1,9 @@
+import { prependArtifactHead } from "../../protocol/source.js";
+/** Insert `tags` first thing in <head>, else in <html>, else at the start. */
+export declare const prependToHead: typeof prependArtifactHead;
+export interface Identity {
+    id: string;
+    version: number;
+}
+export declare const injectRuntime: (html: string, runtime: string, identity?: Identity, scripts?: readonly string[]) => string;
+//# sourceMappingURL=inject.d.ts.map

package/dist/server/sandbox/inject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inject.d.ts","sourceRoot":"","sources":["../../../src/server/sandbox/inject.ts"],"names":[],"mappings":"AACA,OAAO,EAAW,mBAAmB,EAAgB,MAAM,0BAA0B,CAAA;AA6BrF,8EAA8E;AAC9E,eAAO,MAAM,aAAa,4BAAsB,CAAA;AAEhD,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;CAChB;AAKD,eAAO,MAAM,aAAa,SAClB,MAAM,WACH,MAAM,aACJ,QAAQ,YACV,SAAS,MAAM,EAAE,KACzB,MAWF,CAAA"}

package/dist/server/sandbox/inject.js

@@ -0,0 +1,42 @@
+import { IDENTITY_META } from "../../protocol/index.js";
+import { hasAttr, prependArtifactHead, walkHtmlTags } from "../../protocol/source.js";
+/** Inline the frame runtime into artifact HTML so the page can use shared state and comments
+ *  with no setup, and stamp the artifact's identity so the runtime knows which artifact's
+ *  tools to call. A page that bundles the runtime itself keeps its own; the identity is
+ *  always written. */
+const RUNTIME_MARKER = "data-open-artifact-runtime";
+const runtimeIsPresent = (html) => {
+    const templates = new Set();
+    for (const tag of walkHtmlTags(html)) {
+        for (const start of tag.closedOpenStarts)
+            templates.delete(start);
+        if (tag.closing)
+            continue;
+        if (tag.name === "template")
+            templates.add(tag.start);
+        if (!templates.size &&
+            tag.namespace === "html" &&
+            tag.name === "script" &&
+            hasAttr(tag.attrs, RUNTIME_MARKER))
+            return true;
+    }
+    return false;
+};
+const escapeScript = (code) => code.replace(/<\/(script)/gi, "<\\/$1");
+const escapeAttribute = (value) => value.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;");
+/** Insert `tags` first thing in <head>, else in <html>, else at the start. */
+export const prependToHead = prependArtifactHead;
+/** Plugin scripts run after the runtime, in plugin order. */
+const PLUGIN_MARKER = "data-open-artifact-plugin";
+export const injectRuntime = (html, runtime, identity, scripts = []) => {
+    const meta = identity
+        ? `<meta name="${IDENTITY_META}" content="${escapeAttribute(`${identity.id}@${identity.version}`)}">`
+        : "";
+    const script = runtime && !runtimeIsPresent(html)
+        ? `<script ${RUNTIME_MARKER}>${escapeScript(runtime)}</script>`
+        : "";
+    const plugins = scripts.map((code) => `<script ${PLUGIN_MARKER}>${escapeScript(code)}</script>`);
+    const tags = meta + script + plugins.join("");
+    return tags ? prependToHead(html, tags) : html;
+};
+//# sourceMappingURL=inject.js.map

package/dist/server/sandbox/inject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inject.js","sourceRoot":"","sources":["../../../src/server/sandbox/inject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAErF;;;sBAGsB;AACtB,MAAM,cAAc,GAAG,4BAA4B,CAAA;AAEnD,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAW,EAAE;IACjD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;IACnC,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,gBAAgB;YAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACjE,IAAI,GAAG,CAAC,OAAO;YAAE,SAAQ;QACzB,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;YAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACrD,IACE,CAAC,SAAS,CAAC,IAAI;YACf,GAAG,CAAC,SAAS,KAAK,MAAM;YACxB,GAAG,CAAC,IAAI,KAAK,QAAQ;YACrB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC;YAElC,OAAO,IAAI,CAAA;IACf,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,MAAM,YAAY,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAA;AACtF,MAAM,eAAe,GAAG,CAAC,KAAa,EAAU,EAAE,CAChD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;AAE5E,8EAA8E;AAC9E,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAA;AAOhD,6DAA6D;AAC7D,MAAM,aAAa,GAAG,2BAA2B,CAAA;AAEjD,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,IAAY,EACZ,OAAe,EACf,QAAmB,EACnB,OAAO,GAAsB,EAAE,EACvB,EAAE;IACV,MAAM,IAAI,GAAG,QAAQ;QACnB,CAAC,CAAC,eAAe,aAAa,cAAc,eAAe,CAAC,GAAG,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI;QACrG,CAAC,CAAC,EAAE,CAAA;IACN,MAAM,MAAM,GACV,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;QAChC,CAAC,CAAC,WAAW,cAAc,IAAI,YAAY,CAAC,OAAO,CAAC,WAAW;QAC/D,CAAC,CAAC,EAAE,CAAA;IACR,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,aAAa,IAAI,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAChG,MAAM,IAAI,GAAG,IAAI,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC7C,OAAO,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAChD,CAAC,CAAA"}

package/dist/server/sandbox/server.d.ts

@@ -0,0 +1,17 @@
+import { Hono } from "hono";
+import type { BlobStore } from "../ports.js";
+export interface SandboxOptions {
+    /** Origins allowed to embed the sandbox, e.g. `https://app.example.com`. */
+    hostOrigins: string[];
+    /** The sandbox relay script (see `loadKitAssets`). */
+    relayScript: string;
+    /** Blob store for an explicitly public asset endpoint. Rendered versions inline assets. */
+    blobs?: BlobStore;
+    /** Public bearer URLs cannot follow artifact grants. Defaults to false. */
+    publicAssets?: boolean;
+}
+/** The MCP Apps sandbox proxy page, plus the artifact assets it serves. Run it on its own
+ *  origin (a different registrable domain in production): artifact code runs there, never on
+ *  your app's origin. */
+export declare const createSandboxServer: (options: SandboxOptions) => Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=server.d.ts.map

package/dist/server/sandbox/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/server/sandbox/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAG5C,MAAM,WAAW,cAAc;IAC7B,4EAA4E;IAC5E,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,sDAAsD;IACtD,WAAW,EAAE,MAAM,CAAA;IACnB,2FAA2F;IAC3F,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;AA4BD;;yBAEyB;AACzB,eAAO,MAAM,mBAAmB,YAAa,cAAc,+EAkC1D,CAAA"}