@guuey/threads 0.2.3 → 0.3.1

package/dist/fold-rows.d.ts

@@ -13,7 +13,13 @@ export interface RowCtx {
     at: string;
     clientMessageId: string;
 }
-/** Plain-text projection of an AgMessage — concatenated text blocks. */
+/**
+ * Plain-text projection of an AgMessage. Distinct text blocks are distinct
+ * paragraphs, so they join with a paragraph break — the same block-boundary
+ * contract as `@guuey/agent-client`'s live flat-text fold (guuey#98); raw
+ * concatenation jammed "…instead.Here's your packing…". Empty blocks
+ * contribute nothing (no stacked separators).
+ */
 export declare function messageText(msg: AgMessage): string;
 export declare function agMessageToRow(msg: AgMessage, ctx: RowCtx & {
     turnRecord?: AgTurnRecord;

package/dist/fold-rows.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fold-rows.d.ts","sourceRoot":"","sources":["../src/fold-rows.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EACV,SAAS,EACT,UAAU,EACV,YAAY,EAEZ,cAAc,EACd,OAAO,EACP,cAAc,EACd,SAAS,EACV,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,gBAAgB,EAAwC,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE3G,MAAM,WAAW,MAAM;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,CAAC;CACzB;AASD,wEAAwE;AACxE,wBAAgB,WAAW,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAMlD;AAED,wBAAgB,cAAc,CAC5B,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,MAAM,GAAG;IAAE,UAAU,CAAC,EAAE,YAAY,CAAA;CAAE,GAC1C,gBAAgB,CAelB;AAgDD,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,UAAU,EAAE,CAqB/E;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAYlF;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,gBAAgB,GAAG,SAAS,CAY/D;AAED,gFAAgF;AAChF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,GAAG,UAAU,GAAG,SAAS,CAMjF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,gBAAgB,EAAE,EACxB,QAAQ,EAAE,iBAAiB,GAAG,SAAS,GACtC,cAAc,CA2BhB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,SAAS,GAAG,SAAS,EACjC,iBAAiB,EAAE,cAAc,EAAE,GAClC,OAAO,EAAE,CAmBX"}
+{"version":3,"file":"fold-rows.d.ts","sourceRoot":"","sources":["../src/fold-rows.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EACV,SAAS,EACT,UAAU,EACV,YAAY,EAEZ,cAAc,EACd,OAAO,EACP,cAAc,EACd,SAAS,EACV,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,gBAAgB,EAAwC,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAG3G,MAAM,WAAW,MAAM;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,CAAC;CACzB;AASD;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAMlD;AAED,wBAAgB,cAAc,CAC5B,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,MAAM,GAAG;IAAE,UAAU,CAAC,EAAE,YAAY,CAAA;CAAE,GAC1C,gBAAgB,CAyBlB;AAkDD,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,UAAU,EAAE,CA2B/E;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAqBlF;AAOD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,gBAAgB,GAAG,SAAS,CAY/D;AAED,gFAAgF;AAChF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,GAAG,UAAU,GAAG,SAAS,CAMjF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,gBAAgB,EAAE,EACxB,QAAQ,EAAE,iBAAiB,GAAG,SAAS,GACtC,cAAc,CA2BhB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,SAAS,GAAG,SAAS,EACjC,iBAAiB,EAAE,cAAc,EAAE,GAClC,OAAO,EAAE,CAmBX"}

package/dist/fold-rows.js

@@ -1,4 +1,5 @@
 import { AgMessage as AgMessageSchema } from "@silverprotocol/core";
+import { asUiResource, scanProviderRawForUiResource, uiLocator } from "@guuey/mcp-apps-host/narrowing";
 /** AgRole → the row's coarse authorRole projection (secondary; role of record lives in content). */
 function roleToAuthor(role) {
     if (role === "user")
@@ -7,14 +8,20 @@ function roleToAuthor(role) {
         return "system";
     return "agent"; // assistant | tool
 }
-/** Plain-text projection of an AgMessage — concatenated text blocks. */
+/**
+ * Plain-text projection of an AgMessage. Distinct text blocks are distinct
+ * paragraphs, so they join with a paragraph break — the same block-boundary
+ * contract as `@guuey/agent-client`'s live flat-text fold (guuey#98); raw
+ * concatenation jammed "…instead.Here's your packing…". Empty blocks
+ * contribute nothing (no stacked separators).
+ */
 export function messageText(msg) {
-    let out = "";
+    const parts = [];
     for (const block of msg.content) {
-        if (block.type === "text")
-            out += block.text;
+        if (block.type === "text" && block.text)
+            parts.push(block.text);
     }
-    return out;
+    return parts.join("\n\n");
 }
 export function agMessageToRow(msg, ctx) {
     const text = messageText(msg);
@@ -28,56 +35,66 @@ export function agMessageToRow(msg, ctx) {
         kind,
         authorRole: roleToAuthor(msg.role),
         ...(text ? { text } : {}),
-        content: msg,
+        // guuey#122: the ONE deliberate byte-identity exception — tool-result
+        // `_meta` (live-turn mount material, incl. short-TTL credentials) is
+        // stripped before persistence, on the message row exactly as on the
+        // card projection.
+        content: messageWithoutToolResultMeta(msg),
+        // SANCTIONED EXCEPTION to the #122 no-short-TTL rule (explicit decision,
+        // 2026-08-08): the turnRecord persists verbatim, INCLUDING paused-outcome
+        // asks[].token/expiresAt — reassembleFold round-trips turns into the
+        // reducer seed, so stripping could orphan a paused turn's resume after a
+        // reload, and the token authorizes the thread owner's OWN resume (not a
+        // cross-trust credential like a render wsToken). Revisit on guuey#122.
         ...(ctx.turnRecord ? { aiContext: ctx.turnRecord } : {}),
     };
 }
+/** Strip every tool-result block's `_meta` (guuey#122); identity when none carried one. */
+function messageWithoutToolResultMeta(msg) {
+    let changed = false;
+    const content = msg.content.map((block) => {
+        if (block.type !== "tool-result")
+            return block;
+        const stripped = withoutToolResultMeta(block);
+        if (stripped !== block)
+            changed = true;
+        return stripped;
+    });
+    return changed ? { ...msg, content } : msg;
+}
 /**
  * MCP-App cards ride `tool-result` blocks' UI channels inside AgMessages —
  * the Claude facet emits NO `artifact.*` events, so `fold.artifacts` alone
  * misses every generative-UI card and nothing ever wrote a `kind:'card'`
  * row for them (guuey#86: cards never rehydrated after a reload). Project
  * UI-carrying tool-result blocks into synthetic AgArtifacts so the
- * EXISTING card-row lane persists them; the client's `cardCardMount`
+ * EXISTING card-row lane persists them; the client's `snapshotViewMount`
  * mounts `{ parts: [block] }` through its inline arm unchanged. Facets
  * that DO emit artifact events don't stamp `uiData` on tool-results, so
  * the two sources don't double-write for one card.
  *
- * The narrowing MIRRORS `@guuey/agent-client`'s `toolResultUiResource`
- * (@guuey/agent-client's block-ui.ts — keep the two in sync):
+ * The narrowing is IMPORTED from `@guuey/mcp-apps-host` (the SEP-1865 Host
+ * package) — one implementation, no mirror to keep in sync:
  *   1. `uiData` carrying an MCP resource payload (`{uri, text|blob}`,
  *      inlined directly or wrapped as `{ resource: {...} }`) — the explicit
  *      surface channel, no `ui://` gate on purpose;
  *   2. a `ui://` resource degraded into a `provider-raw` content part —
  *      gated on the scheme, because provider-raw is a lossy catch-all.
  */
-function isJsonObject(v) {
-    return typeof v === "object" && v !== null && !Array.isArray(v);
-}
-function isResourcePayload(v) {
-    if (!isJsonObject(v))
-        return false;
-    if (typeof v.uri !== "string")
-        return false;
-    return typeof v.text === "string" || typeof v.blob === "string";
-}
-function resourceUri(v) {
-    if (!isJsonObject(v))
-        return undefined;
-    return typeof v.uri === "string" ? v.uri : undefined;
-}
-function uiDataCarriesResource(uiData) {
-    if (!isJsonObject(uiData))
-        return false;
-    return isResourcePayload(uiData) || isResourcePayload(uiData.resource);
-}
-function providerRawCarriesUiResource(raw) {
-    if (!isJsonObject(raw))
-        return false;
-    const candidate = raw.resource !== undefined ? raw.resource : raw;
-    if (!isResourcePayload(candidate))
-        return false;
-    return resourceUri(candidate)?.startsWith("ui://") === true;
+/**
+ * Persistence boundary rule (guuey#122): a tool-result block's `_meta` is
+ * live-turn MOUNT/TRANSPORT material — vendor slices there routinely carry
+ * short-TTL credentials (ggui's render bootstrap `wsToken` is the concrete
+ * case) and are dead on arrival when replayed, so `_meta` NEVER persists.
+ * Durable identity belongs in `uiData`/`content`, which survive untouched.
+ * Deliberately vendor-agnostic: no `_meta` key list to maintain, and the
+ * next vendor's expiring credential is unpersistable by construction.
+ */
+function withoutToolResultMeta(block) {
+    if (block._meta === undefined)
+        return block;
+    const { _meta: _dropped, ...rest } = block;
+    return rest;
 }
 export function uiCardArtifactsFromMessages(messages) {
     const artifacts = [];
@@ -86,21 +103,33 @@ export function uiCardArtifactsFromMessages(messages) {
             const block = msg.content[i];
             if (block.type !== "tool-result")
                 continue;
-            const carriesUi = uiDataCarriesResource(block.uiData) ||
-                block.content.some((part) => part.type === "provider-raw" && providerRawCarriesUiResource(part.raw));
+            // guuey#122: a ui:// locator (uiData.resourceUri — ggui renders are
+            // one producer) persists as a PLACEHOLDER row: the locator without
+            // mount material (mount = re-fetch of the resourceUri). Before this,
+            // locator-only results persisted nothing and vanished from history.
+            const carriesUi = asUiResource(block.uiData) !== undefined ||
+                uiLocator(block.uiData) !== undefined ||
+                block.content.some((part) => part.type === "provider-raw" && scanProviderRawForUiResource(part.raw) !== undefined);
             if (!carriesUi)
                 continue;
             artifacts.push({
                 artifactId: `${msg.id}#ui#${i}`,
                 turnId: msg.turnId ?? "",
                 threadId: msg.threadId ?? "",
-                parts: [block],
+                parts: [withoutToolResultMeta(block)],
             });
         }
     }
     return artifacts;
 }
 export function agArtifactToCardRow(art, ctx) {
+    // guuey#122: the projection lane strips tool-result _meta upstream, but
+    // REAL artifact.* events land here verbatim — apply the same persistence
+    // boundary to any tool-result-typed part (and the artifact-level _meta),
+    // so no lane can persist a short-TTL credential.
+    const parts = art.parts.map((part) => isJsonObjectLike(part) && part.type === "tool-result" ? withoutToolResultMeta(part) : part);
+    const { _meta: _artifactMeta, ...artRest } = art;
+    const snapshot = { ...artRest, parts };
     return {
         threadId: ctx.threadId,
         seq: ctx.seq,
@@ -110,9 +139,13 @@ export function agArtifactToCardRow(art, ctx) {
         kind: "card",
         authorRole: "agent",
         content: { producedInTurnId: art.turnId },
-        cardSnapshot: art,
+        cardSnapshot: snapshot,
     };
 }
+/** Local structural check (narrow enough for the strip dispatch above). */
+function isJsonObjectLike(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
 /**
  * Reconstruct an AgMessage from a row. Agent-fold rows store the verbatim
  * AgMessage in `content`; user/system rows (persisted up-front) store plain

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guuey/threads",
-  "version": "0.2.3",
+  "version": "0.3.1",
   "description": "Universal session/thread persistence for AgJSON agents — the ThreadStore contract (append-fold, history, snapshots), the fold↔row mapping, and an in-memory binding. Guuey's hosted runtime is one binding; implement the port against your own store and run the exported contract suite for the same guarantees.",
   "license": "MIT",
   "type": "module",
@@ -22,7 +22,8 @@
     }
   },
   "dependencies": {
-    "@silverprotocol/core": "0.4.1"
+    "@silverprotocol/core": "0.4.1",
+    "@guuey/mcp-apps-host": "0.3.1"
   },
   "devDependencies": {
     "@types/node": "^24.0.0",