@ethisyscore/extension-runtime 1.123.0 → 1.125.0

package/dist/{bridge-client-D0fogVGd.d.cts → bridge-client-D9EYFq1l.d.cts}

@@ -1,4 +1,4 @@
-import { d as BridgePushThemeEnvelope, c as BridgePushLocaleEnvelope, b as BridgePushDensityEnvelope, a as BridgePushA11yEnvelope, B as BridgeNavPushEnvelope, e as BridgeSessionTokenPushEnvelope } from './bridge-envelopes-DAuew-fU.cjs';
+import { d as BridgePushThemeEnvelope, c as BridgePushLocaleEnvelope, b as BridgePushDensityEnvelope, a as BridgePushA11yEnvelope, B as BridgeNavPushEnvelope, e as BridgeSessionTokenPushEnvelope } from './bridge-envelopes-M5a42rAy.cjs';
 
 /**
  * Plugin-side bridge client for the host ↔ plugin platform contract

package/dist/{bridge-client-tIK_iYT9.d.ts → bridge-client-RJOl8WlU.d.ts}

@@ -1,4 +1,4 @@
-import { d as BridgePushThemeEnvelope, c as BridgePushLocaleEnvelope, b as BridgePushDensityEnvelope, a as BridgePushA11yEnvelope, B as BridgeNavPushEnvelope, e as BridgeSessionTokenPushEnvelope } from './bridge-envelopes-DAuew-fU.js';
+import { d as BridgePushThemeEnvelope, c as BridgePushLocaleEnvelope, b as BridgePushDensityEnvelope, a as BridgePushA11yEnvelope, B as BridgeNavPushEnvelope, e as BridgeSessionTokenPushEnvelope } from './bridge-envelopes-M5a42rAy.js';
 
 /**
  * Plugin-side bridge client for the host ↔ plugin platform contract

package/dist/{bridge-envelopes-DAuew-fU.d.cts → bridge-envelopes-M5a42rAy.d.cts}

@@ -59,8 +59,31 @@ interface McpTransport {
      *   DEFAULT provider rather than dead metadata, which is what makes every
      *   conversion a no-op until an operator chooses something.
      * @param args Canonical field values, keyed by canonical name.
+     * @param fallbackArgs Arguments for the FALLBACK rung only, used verbatim in
+     *   place of `args` when `fallbackToolName` answers. Omit it and the fallback
+     *   receives `args`, which is what every call did before this parameter
+     *   existed.
+     *
+     *   This is the browser twin of `ModuleFallback`'s second argument on the
+     *   backend: `InvokeOrFallbackAsync(catalogue, key, new ModuleFallback(tool,
+     *   new { employeeIds = ordered }), canonicalArgs, ct)`. It exists because an
+     *   in-house fallback tool does not have to take canonical field names -
+     *   `hr:get-employee-absences` wants `employeeIds` where the canonical
+     *   operation says `personIds`, and `finance:get-generated-reports` wants
+     *   `relatedEntityId`/`type` where the operation says `projectId`/`reportType`.
+     *   Without this, a converted surface sends canonical names to a tool that
+     *   declares none of them, and since no organisation has chosen a provider
+     *   the fallback rung is the production path for every call.
+     *
+     *   It carries no authority and cannot change which tool runs: the tool NAME
+     *   is still `fallbackToolName`, still checked against the calling
+     *   extension's installed manifest by the host before the rung runs.
+     *
+     *   It trails `signal` so that a transport written against the earlier
+     *   signature stays assignable and a host that predates it simply drops the
+     *   value, leaving the fallback with the canonical arguments it had before.
      */
-    invokeOperation?<TReq, TRes>(moduleKey: string, operationKey: string, fallbackToolName: string, args: TReq, signal?: AbortSignal): Promise<TRes>;
+    invokeOperation?<TReq, TRes>(moduleKey: string, operationKey: string, fallbackToolName: string, args: TReq, signal?: AbortSignal, fallbackArgs?: unknown): Promise<TRes>;
     /**
      * Upload a binary document to CORE storage via the host shell and resolve
      * the resulting {@link UploadDocumentResult} (a `StoredDocumentId` plus the

package/dist/{bridge-envelopes-DAuew-fU.d.ts → bridge-envelopes-M5a42rAy.d.ts}

@@ -59,8 +59,31 @@ interface McpTransport {
      *   DEFAULT provider rather than dead metadata, which is what makes every
      *   conversion a no-op until an operator chooses something.
      * @param args Canonical field values, keyed by canonical name.
+     * @param fallbackArgs Arguments for the FALLBACK rung only, used verbatim in
+     *   place of `args` when `fallbackToolName` answers. Omit it and the fallback
+     *   receives `args`, which is what every call did before this parameter
+     *   existed.
+     *
+     *   This is the browser twin of `ModuleFallback`'s second argument on the
+     *   backend: `InvokeOrFallbackAsync(catalogue, key, new ModuleFallback(tool,
+     *   new { employeeIds = ordered }), canonicalArgs, ct)`. It exists because an
+     *   in-house fallback tool does not have to take canonical field names -
+     *   `hr:get-employee-absences` wants `employeeIds` where the canonical
+     *   operation says `personIds`, and `finance:get-generated-reports` wants
+     *   `relatedEntityId`/`type` where the operation says `projectId`/`reportType`.
+     *   Without this, a converted surface sends canonical names to a tool that
+     *   declares none of them, and since no organisation has chosen a provider
+     *   the fallback rung is the production path for every call.
+     *
+     *   It carries no authority and cannot change which tool runs: the tool NAME
+     *   is still `fallbackToolName`, still checked against the calling
+     *   extension's installed manifest by the host before the rung runs.
+     *
+     *   It trails `signal` so that a transport written against the earlier
+     *   signature stays assignable and a host that predates it simply drops the
+     *   value, leaving the fallback with the canonical arguments it had before.
      */
-    invokeOperation?<TReq, TRes>(moduleKey: string, operationKey: string, fallbackToolName: string, args: TReq, signal?: AbortSignal): Promise<TRes>;
+    invokeOperation?<TReq, TRes>(moduleKey: string, operationKey: string, fallbackToolName: string, args: TReq, signal?: AbortSignal, fallbackArgs?: unknown): Promise<TRes>;
     /**
      * Upload a binary document to CORE storage via the host shell and resolve
      * the resulting {@link UploadDocumentResult} (a `StoredDocumentId` plus the

package/dist/host/index.cjs

@@ -810,6 +810,7 @@ var WorkerRemoteDomTransport = class {
         operationKey: message.operationKey,
         fallbackToolName: message.fallbackToolName,
         args: message.args,
+        fallbackArgs: message.fallbackArgs,
         capabilityToken: token,
         signal: this.requestSignal(message.id)
       });
@@ -938,7 +939,11 @@ var WorkerRemoteDomTransport = class {
 var IFRAME_BRIDGE_PROTOCOL = "ethisys.iframe.bridge.v1";
 var InboundEnvelope = zod.z.discriminatedUnion("type", [
   zod.z.object({ type: zod.z.literal("ethisys:mcp:invokeTool"), id: zod.z.string().min(1), name: zod.z.string().min(1), args: zod.z.unknown(), nonce: zod.z.string() }),
-  zod.z.object({ type: zod.z.literal("ethisys:mcp:invokeOperation"), id: zod.z.string().min(1), moduleKey: zod.z.string().min(1), operationKey: zod.z.string().min(1), fallbackToolName: zod.z.string().min(1), args: zod.z.unknown(), nonce: zod.z.string() }),
+  // `fallbackArgs` is declared, not merely tolerated: a zod object STRIPS keys it does not
+  // declare, so leaving it out would drop the field silently and the fallback tool would keep
+  // receiving canonical names it does not declare - the exact defect this field closes, made
+  // invisible. Optional, so a plugin built against an earlier SDK still validates.
+  zod.z.object({ type: zod.z.literal("ethisys:mcp:invokeOperation"), id: zod.z.string().min(1), moduleKey: zod.z.string().min(1), operationKey: zod.z.string().min(1), fallbackToolName: zod.z.string().min(1), args: zod.z.unknown(), fallbackArgs: zod.z.unknown().optional(), nonce: zod.z.string() }),
   zod.z.object({ type: zod.z.literal("ethisys:mcp:getResource"), id: zod.z.string().min(1), uri: zod.z.string().min(1), nonce: zod.z.string() }),
   zod.z.object({ type: zod.z.literal("ethisys:event"), name: zod.z.string().min(1), payload: zod.z.unknown(), nonce: zod.z.string() })
 ]);
@@ -1142,6 +1147,7 @@ var IframeBridgeTransport = class {
         operationKey: message.operationKey,
         fallbackToolName: message.fallbackToolName,
         args: message.args,
+        fallbackArgs: message.fallbackArgs,
         capabilityToken: token,
         signal: this.abortController.signal
       });