@happyvertical/smrt-mcp-openai 0.0.0-stage → 0.51.38

package/AGENTS.md

@@ -0,0 +1,11 @@
+# Optional OpenAI navigation adapter
+
+`src/index.ts` composes existing principal-authorized app-MCP workflows. Settings
+persistence, atomic assignment and tenant checks stay in the owning application
+handler. The adapter validates wire contracts; it never authenticates or retries
+writes. `src/client.ts` uses only the portable browser bridge and bounded inert
+host context. No SDK v1 helper, second server, or OpenAI types in portable APIs.
+
+Pinned contract, fallbacks, package gates and external-host evidence limitations
+are in README.md; behavior/threat rows are in TEST-DESIGN.md. Run build, typecheck,
+test, test:e2e and verify:pack. Synthetic hosts do not prove OpenAI host support.

package/CLAUDE.md

@@ -0,0 +1 @@
+@AGENTS.md

package/LICENSE

@@ -0,0 +1,7 @@
+Copyright <2025> <Happy Vertical Corporation>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -1,3 +1,176 @@
-# Temporary Holding Version
+# @happyvertical/smrt-mcp-openai
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Optional navigation, settings, context, messages and mentions for s-m-r-t MCP Apps. Ordinary s-m-r-t apps do not
+import this package. The `./client` entry is browser-only and depends on the
+portable `@happyvertical/smrt-mcp-apps` bridge; the root entry composes existing
+app-MCP workflows without creating another server or authorization policy.
+
+## Contract and scope
+
+This package implements the navigation/settings and context/messages/mentions children of [#3202](https://github.com/happyvertical/smrt/issues/3202)
+under the [M0 integration standard](../../docs/content/architecture/mcp-apps-integration.md):
+
+- Global and thread entrypoint metadata on idempotent read UI tools accepting `{}`.
+- Structured primitive settings and permission-filtered layout actions; modern
+  discovery advertises `capabilities.extensions['openai/settings']` only when
+  both settings tools are in the request's authorized catalog.
+- Resource display-mode metadata and portable display requests with inline fallback.
+- Validated native/web app links and observed host deep links resolved through an
+  existing domain-authorized read tool.
+- Manifest onboarding declaration; packaged skill/assets verification belongs to M7.
+
+Exact baseline: [OpenAI extension spec e314720](https://github.com/openai/mcp-extensions/blob/e314720a0daac326217d1f123fcf51647868fa9f/docs/spec.md),
+revalidated as upstream main on 2026-09-30 UTC, and the [official extension guide](https://developers.openai.com/plugins/build/extensions)
+and [UI guide](https://developers.openai.com/plugins/build/chatgpt-ui). The SDK v1
+OpenAI helper is deliberately not a dependency. Server transport uses native
+scoped MCP SDK 2.0.0 / protocol `2026-07-28`; browser Apps uses `2026-01-26`.
+
+Only implemented features are declared. Files/forms remain separate planned M6 children. Settings support booleans, strings/enums/length bounds,
+numbers/integers/range/multiple bounds. Arbitrary regex patterns are explicitly
+rejected to avoid running unbounded patterns; applications can use an enum or
+an existing domain validator. No silent schema downgrade occurs. Metadata is
+bounded to 64 KiB, depth 16; settings to 64 fields, strings to 4096 characters,
+routes to 2048 characters. Unknown fields/types fail closed.
+
+## Server composition
+
+Use `withOpenAiEntrypoints(existingReadWorkflow, ['global', 'thread'])` and pass
+the result to the existing `createMcpAppServer({ workflowTools })`. It retains the
+handler and portable `_meta.ui.resourceUri`. Initial tool results still render
+without duplicate entrypoint calls. Give thread views distinct descriptive titles.
+
+`bindOpenAiSettings({ schema, read, update, server: () => appServer })` wraps two
+existing workflow definitions. Add its `workflows` to that server, then mount it
+with `extensions: ({ tools }) => settings.extensions(tools)`. The callback runs
+on `server/discover` with the same verified principal and filtered catalog used
+for tool discovery. Neither annotations nor extension metadata grant permission.
+
+Read handlers return `structuredContent: { schema, values, layout? }`, with a
+value for every property. Update handlers receive `{ set: { changedField: value } }`
+and return `structuredContent: { values }`. Updates are absolute-value assignments,
+not toggles or increments. The binding verifies their declared read/write effects,
+requires idempotent assignment, validates inputs/outputs, and never retries.
+
+**Owning handlers must authorize resource ownership, recheck active tenant and
+membership, and persist patches atomically using their existing executor and
+revision policy.** The adapter does not provide persistence, transaction guards,
+or domain approval. The host wire contract has no revision parameter; do not add
+an invented field. Workflows requiring a human review/revision token should keep
+that flow in the application, rather than force it into native settings. Tests
+exercise an owning SQLite transaction, guarded update, rollback and retries.
+
+Pass `openAiDisplayMetadata({ availableDisplayModes: ['inline', 'fullscreen'],
+preferredDisplayMode: 'fullscreen' })` as a declared resource's `metadata`.
+Resource security metadata and digest remain owned by app-MCP. `pip` is not part
+of this pinned OpenAI display contract. Omitted fields preserve upstream defaults;
+preferences remain hints.
+
+`openAiOnboardingDeclaration('./skills/setup/SKILL.md')` returns only
+`{ extensions: { 'com.openai': { onboardingSkill: ... } } }`. Merge that into the
+plugin manifest; it does not install or execute the skill.
+
+## Browser navigation and fallbacks
+
+Import `./client`, pass the existing `McpAppBridge` to
+`observeOpenAiNavigation({ bridge, resolveTool, onResult, onFallback })`, and call
+the returned disposer when unmounting. It consumes bounded `rawHostContext` from
+the bridge's validated origin/source and lifecycle, recognizes only
+`openai/deepLink: { url }`, and calls the designated server tool with `{ url }`.
+The domain tool must reject guessed or cross-tenant objects. Server applications
+can use `resolveOpenAiNavigationTarget` to dispatch only an authorized read tool.
+
+Repeated identical routes do not duplicate calls; new routes cancel old requests
+and ignore stale replies. URLs are app-relative, fragment-free, traversal-free,
+and reject protocol-relative, double-encoded and control-character forms. Treat
+query parameters as untrusted input, never as identity or approval. The literal
+query delimiter is separated before pathname decoding, so encoded question marks
+cannot hide traversal segments. Traversal-like text in query values remains legal.
+
+Only a rejected tool call or an `isError` result selects the `denied` fallback.
+Consumer callback exceptions are not authorization failures and never retry a
+fallback. Callbacks should handle their own rendering errors; uncaught exceptions
+in asynchronous result/fallback callbacks surface as unhandled promise rejections.
+
+`createOpenAiAppLink` emits pinned desktop (`codex`), mobile (`chatgpt`) or web
+formats with separately encoded plugin/tool/path components. `openAiNavigationLink`
+requires explicit `'present'` support to choose a native link; `'absent'`, unknown
+or malformed support uses a configured HTTPS application URL. This support input
+is a deployment/observed-host decision, **not an invented MCP capability field**.
+Entrypoints/onboarding similarly have no client advertisement in the pinned spec;
+keep ordinary tool/setup navigation available. Native structured settings are
+optional: the same settings tools and application settings page remain usable.
+
+`requestOpenAiDisplayMode` uses negotiated portable modes; missing/unknown modes
+or a rejected request return `'inline'`. The UI must actually retain its inline
+layout and render an ordinary link when navigation cannot be resolved.
+
+## Context, messages and composer mentions
+
+Browser consumers import `updateOpenAiModelContext` from `./context` and
+`sendOpenAiMessage` from `./messages`. Server consumers import
+`withOpenAiMentionSearch` and `resolveOpenAiMentionSelection` from `./mentions`.
+These subpaths share the existing portable bridge and authorized app-MCP server.
+
+`updateOpenAiModelContext({ bridge, value, native })` replaces context with
+`{ text: { text, title?, thumbnail? }, structuredContent? }`. Text is nonempty and
+at most 16384 characters; titles are limited to 512. Set `background: true` on the text value to emit assistant-only audience
+metadata; background is a presentation
+hint, **not a privacy boundary**: the model/provider still receives the context.
+Only send data authorized for that recipient. Negotiated `openai/modelContext`
+uses the supplied native callback. Missing support or native failure falls back
+to portable text and structured content, without native metadata. Abort/disposal
+prevents a late fallback.
+
+`sendOpenAiMessage({ bridge, value, native })` accepts text and `target: 'active'`
+(the default) or `'new'`. Active conversations can use portable text messages.
+New conversations require negotiated `openai/message` and a native callback;
+missing or malformed support rejects before any message reaches the active
+conversation. Unknown targets/modalities fail closed and sends are not retried.
+
+`withOpenAiMentionSearch(existingReadWorkflow)` declares app-only composer search
+metadata and a `{ query }` input (at most 256 characters, including empty search).
+Its owning handler returns `structuredContent: { items }`, with at most 25
+`{ type: 'resource', resourceUri, title, subtitle?, icons? }` entries. Handles
+are nonempty opaque strings of at most 2048 characters; titles/subtitles are
+nonempty and bounded to 512. Each of at most eight icons requires `src` (2048),
+with optional `mimeType` (128), up to eight nonempty `sizes` strings (32 each),
+and `theme: 'light' | 'dark'`. Unknown fields and malformed values reject.
+The published output schema describes these same closed objects and limits.
+
+Search results are discovery hints, never authorization grants. Pass the exact
+returned `resourceUri` as the existing selection workflow's argument through
+`resolveOpenAiMentionSelection({ server, tool, arguments, principal })`. The
+application supplies the trusted, freshly resolved principal; app-MCP policy
+rechecks actor, active tenant, scopes and membership on every call, and the
+owning workflow rechecks handle ownership. Never derive identity from a handle,
+browser metadata or search-time permission. Guesses, cross-tenant calls and
+revocation after search must not select private data. This helper adds no
+selection handler, identity provider, persistence or authorization policy.
+
+## Validation and evidence
+
+Run `pnpm install`, then the documented dependency build and package gates:
+
+```sh
+pnpm exec turbo build --filter=@happyvertical/smrt-mcp-openai...
+pnpm --filter @happyvertical/smrt-mcp-openai typecheck
+pnpm --filter @happyvertical/smrt-mcp-openai test
+pnpm --filter @happyvertical/smrt-mcp-openai test:e2e
+pnpm --filter @happyvertical/smrt-mcp-openai verify:pack
+```
+
+The behavior/threat matrix is in [TEST-DESIGN.md](TEST-DESIGN.md). Protocol tests
+use the actual SDK client and HTTP mount, including real loopback JWKS/MCP sockets
+through the public M2 auth gateway with token, actor, tenant and revocation denials; the browser suite uses a real Chromium
+sandboxed iframe with no-network CSP and built browser output. Packed exports
+are checked for declaration and browser/server boundaries. Existing app-MCP full
+suite/typecheck/pack and portable bridge gates also apply to integration changes.
+The coordinator schedules all root gates and independent review.
+
+**No actual OpenAI host compatibility is claimed.** The synthetic host does not
+prove desktop, Work web, iOS, Android or account rollout support. No configured
+OpenAI host connection or deployable registered synthetic plugin was provided;
+record exact host/build/platform, auth profile, asset revision and observed
+navigation/settings outcomes before claiming supported-host acceptance. The
+upstream support matrix is expected support only; web refers to Work, excluding
+classic ChatGPT. Actual host acceptance remains open for M8.

package/dist/client.d.ts

@@ -0,0 +1,27 @@
+import type { McpAppBridge, ToolResult } from '@happyvertical/smrt-mcp-apps';
+import { type OpenAiDisplayMode } from './validation.js';
+export { appRelativeUrl, OPENAI_EXTENSIONS_REVISION } from './validation.js';
+export type CapabilityState = 'present' | 'absent' | 'unknown';
+/** Deployment/host-observation input, not an invented MCP wire capability. */
+export declare function capabilityState(value: unknown): CapabilityState;
+export interface OpenAiAppLink {
+    pluginId: string;
+    toolName: string;
+    path?: string;
+    marketplace?: string;
+    platform: 'desktop' | 'mobile' | 'web';
+}
+export declare function createOpenAiAppLink(options: OpenAiAppLink): string;
+/** No host-brand inference: absent/unverified support yields an ordinary application link. */
+export declare function openAiNavigationLink(capability: unknown, link: OpenAiAppLink, fallbackUrl: string): string;
+/** Display negotiation remains portable; unknown modes and host failures retain inline UI. */
+export declare function requestOpenAiDisplayMode(bridge: McpAppBridge, requested: unknown): Promise<OpenAiDisplayMode>;
+export declare function readOpenAiDeepLink(rawHostContext: unknown): string | undefined;
+/** Observe inert host context, then request a domain-authorized read; never route to arbitrary URLs. */
+export declare function observeOpenAiNavigation(options: {
+    bridge: McpAppBridge;
+    resolveTool: string;
+    onResult(result: ToolResult, url: string): void;
+    onFallback(reason: 'unavailable' | 'invalid' | 'denied'): void;
+}): () => void;
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAKL,KAAK,iBAAiB,EAIvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC7E,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAC/D,8EAA8E;AAC9E,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAE/D;AACD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,SAAS,GAAG,QAAQ,GAAG,KAAK,CAAC;CACxC;AACD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAwBlE;AAOD,8FAA8F;AAC9F,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,OAAO,EACnB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,MAAM,GAClB,MAAM,CAKR;AACD,8FAA8F;AAC9F,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,OAAO,GACjB,OAAO,CAAC,iBAAiB,CAAC,CAkB5B;AACD,wBAAgB,kBAAkB,CAChC,cAAc,EAAE,OAAO,GACtB,MAAM,GAAG,SAAS,CAOpB;AACD,wGAAwG;AACxG,wBAAgB,uBAAuB,CAAC,OAAO,EAAE;IAC/C,MAAM,EAAE,YAAY,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAChD,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;CAChE,GAAG,MAAM,IAAI,CAkDb"}

package/dist/client.js

@@ -0,0 +1,125 @@
+import { appRelativeUrl, displayMode, json, keys, record, text, toolName, } from './validation.js';
+export { appRelativeUrl, OPENAI_EXTENSIONS_REVISION } from './validation.js';
+/** Deployment/host-observation input, not an invented MCP wire capability. */
+export function capabilityState(value) {
+    return value === 'present' || value === 'absent' ? value : 'unknown';
+}
+export function createOpenAiAppLink(options) {
+    json(options);
+    keys(record(options), [
+        'pluginId',
+        'toolName',
+        'path',
+        'marketplace',
+        'platform',
+    ]);
+    const plugin = encodeURIComponent(text(options.pluginId, 256));
+    const tool = encodeURIComponent(text(options.toolName, 128));
+    const path = appRelativeUrl(options.path ?? '/');
+    const marketplace = options.marketplace === undefined
+        ? ''
+        : `@${encodeURIComponent(text(options.marketplace, 128))}`;
+    if (options.platform === 'web') {
+        if (marketplace)
+            throw new TypeError('Web links require a published ChatGPT plugin');
+        return `https://chatgpt.com/plugins/${plugin}/app/${tool}?path=${encodeURIComponent(path)}`;
+    }
+    if (options.platform !== 'desktop' && options.platform !== 'mobile')
+        throw new TypeError('Unsupported link platform');
+    return `${options.platform === 'desktop' ? 'codex' : 'chatgpt'}://plugins/${plugin}${marketplace}/app/${tool}?path=${encodeURIComponent(path)}`;
+}
+function appUrl(value) {
+    const parsed = new URL(text(value, 2048));
+    if (parsed.protocol !== 'https:' || parsed.username || parsed.password)
+        throw new TypeError('Expected credential-free HTTPS application URL');
+    return parsed.href;
+}
+/** No host-brand inference: absent/unverified support yields an ordinary application link. */
+export function openAiNavigationLink(capability, link, fallbackUrl) {
+    const fallback = appUrl(fallbackUrl);
+    return capabilityState(capability) === 'present'
+        ? createOpenAiAppLink(link)
+        : fallback;
+}
+/** Display negotiation remains portable; unknown modes and host failures retain inline UI. */
+export async function requestOpenAiDisplayMode(bridge, requested) {
+    let mode;
+    try {
+        mode = displayMode(requested);
+    }
+    catch {
+        return 'inline';
+    }
+    const snapshot = bridge.snapshot;
+    if (snapshot.state !== 'ready' ||
+        !(snapshot.hostContext.availableDisplayModes ?? ['inline']).includes(mode))
+        return 'inline';
+    try {
+        return displayMode(await bridge.requestDisplayMode(mode));
+    }
+    catch {
+        return 'inline';
+    }
+}
+export function readOpenAiDeepLink(rawHostContext) {
+    json(rawHostContext);
+    const context = record(rawHostContext);
+    if (context['openai/deepLink'] === undefined)
+        return undefined;
+    const link = record(context['openai/deepLink']);
+    keys(link, ['url']);
+    return appRelativeUrl(link.url);
+}
+/** Observe inert host context, then request a domain-authorized read; never route to arbitrary URLs. */
+export function observeOpenAiNavigation(options) {
+    const name = toolName(options.resolveTool);
+    let last;
+    let generation = 0;
+    let disposed = false;
+    let pending;
+    const unsubscribe = options.bridge.subscribe((snapshot) => {
+        if (disposed || snapshot.state !== 'ready')
+            return;
+        let url;
+        try {
+            url = readOpenAiDeepLink(snapshot.rawHostContext);
+        }
+        catch {
+            last = undefined;
+            generation++;
+            pending?.abort();
+            options.onFallback('invalid');
+            return;
+        }
+        if (url === undefined || url === last)
+            return;
+        last = url;
+        const current = ++generation;
+        pending?.abort();
+        if (!snapshot.hostCapabilities.serverTools) {
+            options.onFallback('unavailable');
+            return;
+        }
+        pending = new AbortController();
+        void options.bridge.callTool(name, { url }, pending.signal).then((result) => {
+            if (disposed || current !== generation || options.bridge.signal.aborted)
+                return;
+            if (result.isError)
+                options.onFallback('denied');
+            else
+                options.onResult(result, url);
+        }, () => {
+            if (!disposed &&
+                current === generation &&
+                !options.bridge.signal.aborted)
+                options.onFallback('denied');
+        });
+    });
+    return () => {
+        disposed = true;
+        generation++;
+        pending?.abort();
+        unsubscribe();
+    };
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,WAAW,EACX,IAAI,EACJ,IAAI,EAEJ,MAAM,EACN,IAAI,EACJ,QAAQ,GACT,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAE7E,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAQD,MAAM,UAAU,mBAAmB,CAAC,OAAsB;IACxD,IAAI,CAAC,OAAO,CAAC,CAAC;IACd,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QACpB,UAAU;QACV,UAAU;QACV,MAAM;QACN,aAAa;QACb,UAAU;KACX,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;IACjD,MAAM,WAAW,GACf,OAAO,CAAC,WAAW,KAAK,SAAS;QAC/B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;IAC/D,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC/B,IAAI,WAAW;YACb,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;QACtE,OAAO,+BAA+B,MAAM,QAAQ,IAAI,SAAS,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;IAC9F,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QACjE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;IACnD,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,cAAc,MAAM,GAAG,WAAW,QAAQ,IAAI,SAAS,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AAClJ,CAAC;AACD,SAAS,MAAM,CAAC,KAAc;IAC5B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ;QACpE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AACD,8FAA8F;AAC9F,MAAM,UAAU,oBAAoB,CAClC,UAAmB,EACnB,IAAmB,EACnB,WAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACrC,OAAO,eAAe,CAAC,UAAU,CAAC,KAAK,SAAS;QAC9C,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC;QAC3B,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC;AACD,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAoB,EACpB,SAAkB;IAElB,IAAI,IAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,IACE,QAAQ,CAAC,KAAK,KAAK,OAAO;QAC1B,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,qBAAqB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAE1E,OAAO,QAAQ,CAAC;IAClB,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AACD,MAAM,UAAU,kBAAkB,CAChC,cAAuB;IAEvB,IAAI,CAAC,cAAc,CAAC,CAAC;IACrB,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,iBAAiB,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACpB,OAAO,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClC,CAAC;AACD,wGAAwG;AACxG,MAAM,UAAU,uBAAuB,CAAC,OAKvC;IACC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,IAAwB,CAAC;IAC7B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAoC,CAAC;IACzC,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE;QACxD,IAAI,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO;YAAE,OAAO;QACnD,IAAI,GAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,SAAS,CAAC;YACjB,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO;QAC9C,IAAI,GAAG,GAAG,CAAC;QACX,MAAM,OAAO,GAAG,EAAE,UAAU,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC;YAC3C,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;QAChC,KAAK,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAC9D,CAAC,MAAM,EAAE,EAAE;YACT,IAAI,QAAQ,IAAI,OAAO,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;gBACrE,OAAO;YACT,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;;gBAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACrC,CAAC,EACD,GAAG,EAAE;YACH,IACE,CAAC,QAAQ;gBACT,OAAO,KAAK,UAAU;gBACtB,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;gBAE9B,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,EAAE;QACV,QAAQ,GAAG,IAAI,CAAC;QAChB,UAAU,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,CAAC;QACjB,WAAW,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC"}

package/dist/context.d.ts

@@ -0,0 +1,47 @@
+import type { McpAppBridge } from '@happyvertical/smrt-mcp-apps';
+export declare const OPENAI_MODEL_CONTEXT_CAPABILITY = "openai/modelContext";
+export interface OpenAiIcon {
+    src: string;
+    mimeType?: string;
+    sizes?: string[];
+    theme?: 'light' | 'dark';
+}
+export interface OpenAiContextText {
+    text: string;
+    title?: string;
+    thumbnail?: OpenAiIcon;
+    /** Hidden from the person, never hidden from the model or provider. */
+    background?: boolean;
+}
+export interface OpenAiModelContextUpdate {
+    content?: Array<Record<string, unknown>>;
+    structuredContent?: Record<string, unknown>;
+}
+/**
+ * Builds only the pinned OpenAI extension fields. `_meta` crosses the provider
+ * boundary, so `background` is a visibility choice and never a privacy grant.
+ */
+export declare function openAiContextText(value: OpenAiContextText): Record<string, unknown>;
+/** Validates a bounded, idempotent replacement for this app instance's context. */
+export declare function openAiModelContextUpdate(value: {
+    text?: OpenAiContextText;
+    structuredContent?: Record<string, unknown>;
+}): OpenAiModelContextUpdate;
+/** Capability detection is explicit; unknown/malformed data cannot enable native metadata. */
+export declare function hasOpenAiModelContext(rawCapabilities: unknown): boolean;
+/**
+ * Sends a portable text/structured fallback through the existing bridge when
+ * native support was not negotiated. Native callers receive the exact wire
+ * payload and may transport title/thumbnail/background without leaking them
+ * into portable public types.
+ */
+export declare function updateOpenAiModelContext(options: {
+    bridge: McpAppBridge;
+    value: {
+        text?: OpenAiContextText;
+        structuredContent?: Record<string, unknown>;
+    };
+    native?(params: OpenAiModelContextUpdate, signal?: AbortSignal): Promise<void>;
+    signal?: AbortSignal;
+}): Promise<'native' | 'portable'>;
+//# sourceMappingURL=context.d.ts.map

package/dist/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAGjE,eAAO,MAAM,+BAA+B,wBAAwB,CAAC;AAErE,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,UAAU,CAAC;IACvB,uEAAuE;IACvE,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACzC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAqBD;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,iBAAiB,GACvB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmBzB;AAED,mFAAmF;AACnF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C,GAAG,wBAAwB,CAc3B;AAED,8FAA8F;AAC9F,wBAAgB,qBAAqB,CAAC,eAAe,EAAE,OAAO,GAAG,OAAO,CAcvE;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,EAAE;IACtD,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE;QACL,IAAI,CAAC,EAAE,iBAAiB,CAAC;QACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC7C,CAAC;IACF,MAAM,CAAC,CACL,MAAM,EAAE,wBAAwB,EAChC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,QAAQ,GAAG,UAAU,CAAC,CA0BjC"}

package/dist/context.js

@@ -0,0 +1,110 @@
+import { json, keys, record, text } from './validation.js';
+export const OPENAI_MODEL_CONTEXT_CAPABILITY = 'openai/modelContext';
+function icon(value) {
+    json(value);
+    const input = record(value);
+    keys(input, ['src', 'mimeType', 'sizes', 'theme']);
+    const result = { src: text(input.src, 2048) };
+    if (input.mimeType !== undefined)
+        result.mimeType = text(input.mimeType, 128);
+    if (input.sizes !== undefined) {
+        if (!Array.isArray(input.sizes) || input.sizes.length > 8)
+            throw new TypeError('Invalid icon sizes');
+        result.sizes = input.sizes.map((size) => text(size, 32));
+    }
+    if (input.theme !== undefined) {
+        if (input.theme !== 'light' && input.theme !== 'dark')
+            throw new TypeError('Invalid icon theme');
+        result.theme = input.theme;
+    }
+    return result;
+}
+/**
+ * Builds only the pinned OpenAI extension fields. `_meta` crosses the provider
+ * boundary, so `background` is a visibility choice and never a privacy grant.
+ */
+export function openAiContextText(value) {
+    json(value);
+    const input = record(value);
+    keys(input, ['text', 'title', 'thumbnail', 'background']);
+    const result = {
+        type: 'text',
+        text: text(input.text, 16384),
+    };
+    const meta = {};
+    if (input.title !== undefined)
+        meta['openai/title'] = text(input.title, 512);
+    if (input.thumbnail !== undefined)
+        meta['openai/thumbnail'] = icon(input.thumbnail);
+    if (Object.keys(meta).length)
+        result._meta = meta;
+    if (input.background !== undefined) {
+        if (typeof input.background !== 'boolean')
+            throw new TypeError('Expected background boolean');
+        if (input.background)
+            result.annotations = { audience: ['assistant'] };
+    }
+    return result;
+}
+/** Validates a bounded, idempotent replacement for this app instance's context. */
+export function openAiModelContextUpdate(value) {
+    json(value);
+    const input = record(value);
+    keys(input, ['text', 'structuredContent']);
+    if (input.text === undefined && input.structuredContent === undefined)
+        throw new TypeError('Model context requires content or structuredContent');
+    return {
+        ...(input.text === undefined
+            ? {}
+            : { content: [openAiContextText(input.text)] }),
+        ...(input.structuredContent === undefined
+            ? {}
+            : { structuredContent: record(input.structuredContent) }),
+    };
+}
+/** Capability detection is explicit; unknown/malformed data cannot enable native metadata. */
+export function hasOpenAiModelContext(rawCapabilities) {
+    try {
+        json(rawCapabilities);
+        const capabilities = record(rawCapabilities);
+        const experimental = capabilities.experimental;
+        return (experimental !== undefined &&
+            record(experimental)[OPENAI_MODEL_CONTEXT_CAPABILITY] !== undefined &&
+            record(record(experimental)[OPENAI_MODEL_CONTEXT_CAPABILITY]) !==
+                undefined);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Sends a portable text/structured fallback through the existing bridge when
+ * native support was not negotiated. Native callers receive the exact wire
+ * payload and may transport title/thumbnail/background without leaking them
+ * into portable public types.
+ */
+export async function updateOpenAiModelContext(options) {
+    const params = openAiModelContextUpdate(options.value);
+    if (options.native &&
+        hasOpenAiModelContext(options.bridge.snapshot.rawHostCapabilities)) {
+        try {
+            await options.native(params, options.signal);
+            return 'native';
+        }
+        catch (error) {
+            // An aborted or disposed request must not be revived on the portable path.
+            if (options.signal?.aborted)
+                throw error;
+        }
+    }
+    await options.bridge.updateModelContext({
+        ...(options.value.text === undefined
+            ? {}
+            : { text: options.value.text.text }),
+        ...(params.structuredContent === undefined
+            ? {}
+            : { structuredContent: params.structuredContent }),
+    }, options.signal);
+    return 'portable';
+}
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAE3D,MAAM,CAAC,MAAM,+BAA+B,GAAG,qBAAqB,CAAC;AAsBrE,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,CAAC,KAAK,CAAC,CAAC;IACZ,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,MAAM,MAAM,GAAe,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;IAC1D,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YACvD,MAAM,IAAI,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM;YACnD,MAAM,IAAI,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAwB;IAExB,IAAI,CAAC,KAAK,CAAC,CAAC;IACZ,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IAC1D,MAAM,MAAM,GAA4B;QACtC,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;KAC9B,CAAC;IACF,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC7E,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAC/B,IAAI,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM;QAAE,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;IAClD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,SAAS;YACvC,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,UAAU;YAAE,MAAM,CAAC,WAAW,GAAG,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,wBAAwB,CAAC,KAGxC;IACC,IAAI,CAAC,KAAK,CAAC,CAAC;IACZ,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS;QACnE,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;IAC7E,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;YAC1B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAyB,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,qBAAqB,CAAC,eAAwB;IAC5D,IAAI,CAAC;QACH,IAAI,CAAC,eAAe,CAAC,CAAC;QACtB,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;QAC7C,MAAM,YAAY,GAAG,YAAY,CAAC,YAAY,CAAC;QAC/C,OAAO,CACL,YAAY,KAAK,SAAS;YAC1B,MAAM,CAAC,YAAY,CAAC,CAAC,+BAA+B,CAAC,KAAK,SAAS;YACnE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,+BAA+B,CAAC,CAAC;gBAC3D,SAAS,CACZ,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAW9C;IACC,MAAM,MAAM,GAAG,wBAAwB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvD,IACE,OAAO,CAAC,MAAM;QACd,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAClE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC7C,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,2EAA2E;YAC3E,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,KAAK,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,MAAM,OAAO,CAAC,MAAM,CAAC,kBAAkB,CACrC;QACE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACtC,GAAG,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS;YACxC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC;KACrD,EACD,OAAO,CAAC,MAAM,CACf,CAAC;IACF,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,47 @@
+import { type McpAppPrincipal, type McpAppServer, type McpWorkflowToolDefinition } from '@happyvertical/smrt-app-mcp';
+import type { MCPTool, ToolJsonSchema } from '@happyvertical/smrt-core/generators/mcp';
+import { type SettingsSchema } from './settings.js';
+import { type OpenAiDisplayMode } from './validation.js';
+export type { SettingSchema, SettingsGroup, SettingsReadResult, SettingsSchema, } from './settings.js';
+export { validateSettingsRead, validateSettingsSchema, validateSettingsValues, } from './settings.js';
+export type { OpenAiDisplayMode } from './validation.js';
+export { appRelativeUrl, OPENAI_EXTENSIONS_REVISION } from './validation.js';
+export declare const EMPTY_ARGUMENTS_SCHEMA: ToolJsonSchema;
+/** Annotate an existing authorized read workflow; no alternative dispatch path. */
+export declare function withOpenAiEntrypoints(definition: McpWorkflowToolDefinition, entrypoints: readonly ('global' | 'thread')[]): McpWorkflowToolDefinition;
+/** Resource content metadata (not tool metadata). Omitted fields preserve upstream defaults. */
+export declare function openAiDisplayMetadata(options?: {
+    availableDisplayModes?: OpenAiDisplayMode[];
+    preferredDisplayMode?: OpenAiDisplayMode;
+}): Record<string, unknown>;
+/** Manifest declaration only. M7 validates the referenced packaged asset. */
+export declare function openAiOnboardingDeclaration(skill: string): {
+    extensions: {
+        'com.openai': {
+            onboardingSkill: string;
+        };
+    };
+};
+export interface OpenAiSettingsBinding {
+    readTool: string;
+    updateTool: string;
+    workflows: [McpWorkflowToolDefinition, McpWorkflowToolDefinition];
+    /** Pass to the app-MCP protocol extension callback; input must be its authorized catalog. */
+    extensions(tools: readonly MCPTool[]): Record<string, Record<string, unknown>>;
+}
+/** Wrap existing read/atomic-assignment workflows. Their execution and authorization remain app-owned. */
+export declare function bindOpenAiSettings(options: {
+    schema: SettingsSchema;
+    read: McpWorkflowToolDefinition;
+    update: McpWorkflowToolDefinition;
+    /** Resolve the same server after composition, for authorized layout tool references. */
+    server: () => McpAppServer;
+}): OpenAiSettingsBinding;
+/** Resolve untrusted route data through the existing server policy and domain read handler. */
+export declare function resolveOpenAiNavigationTarget(options: {
+    server: McpAppServer;
+    tool: string;
+    url: string;
+    principal: McpAppPrincipal | null;
+}): Promise<import("@happyvertical/smrt-core").MCPResponse>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,yBAAyB,EAC/B,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EACV,OAAO,EACP,cAAc,EACf,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,KAAK,cAAc,EAIpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAKL,KAAK,iBAAiB,EAIvB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC7E,eAAO,MAAM,sBAAsB,EAAE,cAIpC,CAAC;AAyBF,mFAAmF;AACnF,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,yBAAyB,EACrC,WAAW,EAAE,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC,EAAE,GAC5C,yBAAyB,CA0B3B;AACD,gGAAgG;AAChG,wBAAgB,qBAAqB,CACnC,OAAO,GAAE;IACP,qBAAqB,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC5C,oBAAoB,CAAC,EAAE,iBAAiB,CAAC;CACrC,GACL,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsBzB;AACD,6EAA6E;AAC7E,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG;IAC1D,UAAU,EAAE;QAAE,YAAY,EAAE;YAAE,eAAe,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CAC3D,CAKA;AACD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,CAAC,yBAAyB,EAAE,yBAAyB,CAAC,CAAC;IAClE,6FAA6F;IAC7F,UAAU,CACR,KAAK,EAAE,SAAS,OAAO,EAAE,GACxB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC5C;AACD,0GAA0G;AAC1G,wBAAgB,kBAAkB,CAAC,OAAO,EAAE;IAC1C,MAAM,EAAE,cAAc,CAAC;IACvB,IAAI,EAAE,yBAAyB,CAAC;IAChC,MAAM,EAAE,yBAAyB,CAAC;IAClC,wFAAwF;IACxF,MAAM,EAAE,MAAM,YAAY,CAAC;CAC5B,GAAG,qBAAqB,CAqGxB;AACD,+FAA+F;AAC/F,wBAAsB,6BAA6B,CAAC,OAAO,EAAE;IAC3D,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,eAAe,GAAG,IAAI,CAAC;CACnC,2DAcA"}