@happyvertical/smrt-mcp-openai 0.51.38 → 0.52.0

package/FILES.md

@@ -0,0 +1,77 @@
+# Optional native files
+
+Import browser APIs from `@happyvertical/smrt-mcp-openai/files` and server
+annotation from `@happyvertical/smrt-mcp-openai/files/server`. Neither is loaded
+by ordinary tools. This is a bounded small-file adapter, not a filesystem.
+
+`withOpenAiFileEntrypoint(existingWorkflow, ['.txt'])` adds the pinned file
+entrypoint and validates `{file:{name,resourceUri}}`. The existing read workflow
+must resolve the reference through its provider and current trusted principal,
+owner and active tenant. A handle, filename or `_meta["openai/resource"].path`
+is never authority. Remote servers must never read a host path as their own disk.
+
+After the portable bridge connects, create `OpenAiFileSession` with its initial
+file input, an existing `authorityTool`, a `fallbackTool`, `maxBytes` (1–16384)
+and explicit MIME allowlist. The authority tool receives `{file,operation}` and
+must reject anonymous, other-owner, other-tenant, guessed, revoked and stale grants
+using the application's existing policy/provider APIs. Successful empty tool
+results mean the application authorized that operation; the adapter does not
+supply a second grant database. No browser-supplied identity is accepted.
+
+The host independently enforces the opaque grant. Reads request the selected
+text/blob representation and validate exact URI, MIME and decoded byte count.
+Each operation checks application authority; reads recheck after the host result.
+Writes require a fresh read with `writable:true` and a nonempty ETag, always send
+`ifMatch`, reject parallel writes and never retry. Every outcome, including saved,
+conflict, too-large or unknown upstream failure, requires another authorized read.
+A host ETag is a compare/write guard, not an idempotency token.
+
+One bounded subscription refreshes only the initial URI and rechecks authority.
+Refreshes coalesce, revocation disposes the session, and stale/disposed results
+cannot update content. Dispose on UI unmount. Reconnect or a new file needs a new
+session; no handle migration is attempted. Unsubscribe is best effort during
+teardown, while local callbacks and authority end immediately.
+
+Absent/unknown resource capability uses the ordinary `fallbackTool` workflow
+for read/import/open/download or editor launch. It receives `{file,operation}`;
+it must return usable text/links/UI through the same application policy. The
+fallback does not silently replay a proposed native write. The user completes
+editing through the ordinary application workflow.
+
+`openOpenAiFile` requires explicit application confirmation, an existing provider
+tool resolving the selected object, and an exact trusted `allowedPaths` list. The
+host open request uses only the authorized provider's returned path. It never
+accepts a caller's raw path or reads that path on the server. Without native file
+opening, the provider tool's ordinary open/download result is returned. A remote
+provider should return a normal authorized download workflow, not desktop paths.
+
+## Protocol and evidence
+
+Pinned OpenAI source revision `e314720a0daac326217d1f123fcf51647868fa9f`:
+`docs/spec.md`, `typescript/src/shared/file-entrypoint.ts`,
+`typescript/src/app/resources.ts`, `typescript/src/app/files.ts`, and
+`typescript/src/shared/resources.ts`. Full Zod unions define wire fields.
+Native browser capability keys are `experimental["openai/resource"]` and
+`experimental["openai/files"]`, each `{}`; neither has a version field. The
+adapter uses the existing portable bridge's origin/source/lifecycle enforcement.
+There is no SDK-v1 helper, second server, or fabricated server subscription.
+Host resources are intercepted by the browser host; server SDK-v2 HTTP carries
+ordinary principal-authorized entrypoint tools and fallbacks (2026-07-28).
+
+Run build, typecheck, test, test:e2e, test:files:e2e, verify:pack and
+verify:files:pack with `pnpm --filter @happyvertical/smrt-mcp-openai` after normal
+install and dependency builds. FILES-TEST-DESIGN.md maps adversarial coverage.
+Synthetic HTTP/browser fixtures use no real files or user data. Actual OpenAI
+product/build/platform access is unavailable here; these tests do not establish
+live OpenAI host compatibility or permit advertising observed host support.
+
+Subscription lifecycle regression (#3214 review round 1): notifications during a
+pending write coalesce into a fresh authorized read after the write settles.
+Superseded refreshes retry a read without disposing the session; authority and
+validation failures still terminate it. Disposal dispatches best-effort host
+unsubscribe and releases local registration synchronously, allowing immediate
+replacement even when the host never replies. Deterministic session tests cover
+delayed read/write completion, the refreshed ETag, revocation, and replacement
+while unsubscribe is withheld.
+
+Resource URIs are preserved verbatim and reject Windows drive prefixes as well as URLs and filesystem paths. Matching resource-update notifications invalidate in-flight reads before callbacks publish content; refresh retries still obtain fresh authority. A session invalidated by the bridge's initial synchronous snapshot immediately releases its lifecycle listener.

package/FORMS-TEST-DESIGN.md

@@ -0,0 +1,42 @@
+# M6d form and resource-selection validation contract
+
+Refs #3216. Risk: high — asynchronous authorization and approval integrity.
+Source of wire truth: OpenAI mcp-extensions e314720a0daac326217d1f123fcf51647868fa9f,
+full server/forms/{schema,fields,file-picker,elicitation}.ts. No generated JSON schema artifact.
+
+| Behavior / reachable trigger | Positive | Negative / failure | Actor/context | Executor/transaction | Runtime/dialect | External edge | Test level / command |
+| --- | --- | --- | --- | --- | --- | --- | --- |
+| Form declaration before suspension | Primitive, select, array, resource variants | Unknown/oversized/accessor/prototype/schema injection, invalid defaults | Server-owned declaration | N/A: pure validation | Node/browser | Pinned complete schema unions, explicitly narrowed safety profile | Unit / pnpm --filter @happyvertical/smrt-mcp-openai test |
+| Form reply before use | Exact accept content, cancel, decline | Missing/unknown fields, wrong type/options/resource, oversized content | Untrusted host/app reply | N/A: validation precedes authoritative handler | Node/browser | Exact reply union | Unit / same |
+| Durable form continuation | Owner+tenant+record/revision/input key survive restart | Wrong owner/tenant/request/revision, duplicate/concurrent/cancelled reply | Verified application actor, active tenant | Existing McpTaskStore job row and CAS; no new store | SQLite/PostgreSQL | Existing M5 continuation | Integration / same with SMRT_TEST_POSTGRES_URL for PostgreSQL |
+| Live authority and application apply | Fresh authorization at start/resume/apply | Revocation before/after reply, callback failure, unknown external outcome | Verified actor × ownership × tenant | Existing TaskRunner, maxAttempts=1, owning handler transaction | SQLite/PostgreSQL | M5 authority callback; form answer never approval | Integration / same |
+| Capability/native transport decision | Explicit usable application form fallback | Absent/unknown capability, unsupported SDK path, upstream failure | Synthetic SDK client | Same authoritative workflow | SDK v2 HTTP | openai/elicitation create/MRTR support checked explicitly | Integration / same |
+| Functional form presentation | Keyboard usable accept/cancel/decline, escaped options | Inert injected text, invalid values | Synthetic browser user | Submit to owning application workflow; no browser authority | Chromium | Application form fallback, no host certification | Browser / pnpm --filter @happyvertical/smrt-mcp-openai test:forms:e2e |
+| Package boundaries | Packed forms browser and server entries load | SDK v1/server imports in browser | Package consumer | N/A: static bundle/load | Node/browser | Published explicit subpaths | Pack / pnpm --filter @happyvertical/smrt-mcp-openai verify:forms:pack |
+
+Full root gates and final independent review are coordinator-owned after #3205 repair.
+Actual OpenAI host verification remains M8; synthetic tests cannot satisfy it.
+
+Accepted review regression: for both multi-select and free-text arrays, untouched
+optional fields without defaults are omitted; editing then clearing submits an
+explicit empty array, accepted at minItems=0 and rejected at minItems=1. Untouched
+required arrays still undergo minItems validation. Browser fixtures cover each
+case; the two optional-omission cases fail against the pre-fix renderer.
+
+## PR3283 accepted round-3 corrections
+
+| Invariant | Reachable trigger | Positive | Negative/failure | Actor/context and executor | Runtime/contract edge | Level and command |
+|---|---|---|---|---|---|---|
+| Inert shared JSON | form schema/reply and shared native/context/message/mention/settings/file parsers | ordinary nested JSON; validation returns void | array getter/iterator/custom prototype, hidden getter/toJSON, inherited toJSON: zero callbacks; sparse/custom/symbol fields rejected | untrusted caller; no domain executor | Node and browser; pinned bounded JSON schema, unknown non-JSON rejected | full `test`, installed forms/shared-boundary probes |
+| Reversible string arrays | free array form editor defaults and edited values | newline item, empty item, >4096 total with bounded items | invalid JSON, non-string/oversized item, minItems empty | local form input; submission spy/HTTP fixture only, no domain approval | Chromium; existing 64-item/4096-item/65536-byte profile | `test:forms:e2e`, installed validator |
+| Optional empty choice | enum/oneOf selection/default | defined empty choice survives | untouched optional text omitted | local form; authenticated route still owns execution | Chromium select placeholder vs explicit empty option | `test:forms:e2e` |
+| Real date-time | reply/default string validation | leap day, fractional second, offsets crossing date boundary | February31/nonleapFebruary29/April31, hour24, minute/second60, offset overflow | untrusted input; no persistence mutation | Node/public installed API; existing RFC3339-style profile | `test`, installed forms probe |
+
+Baseline production48bc with test-only overlays: descriptor/date unit regressions
+and actual Chromium round-trip/choice regressions fail before fixes; overlay hashes
+and exact logs are retained externally in round-3-pr-feedback. Shared `json()`
+callers were audited in validation, index, client, settings, context, messages,
+mentions, file-contracts, files and forms-server: all call the boundary before
+interpreting wire values; stricter descriptor rejection has full owning-package
+unit/browser/installed coverage. SQL/PG/root-wide replay is N/A for these parser
+and presentation-only corrections; existing durable authority remains unchanged.

package/FORMS.md

@@ -0,0 +1,112 @@
+# Optional extended forms and resource selection
+
+`@happyvertical/smrt-mcp-openai/forms` validates the bounded OpenAI wire profile.
+`/forms/view` renders a functional application form without host capabilities.
+`/forms/server` composes that input with the existing durable MCP workflow.
+No form answer supplies identity, file permission, or domain approval.
+
+## Pinned contract and native limitation
+
+Wire source: OpenAI mcp-extensions
+[e314720a0daac326217d1f123fcf51647868fa9f](https://github.com/openai/mcp-extensions/tree/e314720a0daac326217d1f123fcf51647868fa9f/typescript/src/server/forms):
+full `fields.ts`, `file-picker.ts`, `schema.ts`, and `elicitation.ts` were inspected.
+The repository supplies TypeScript/Zod source, not a generated JSON schema artifact.
+Official [MCP guidance](https://developers.openai.com/plugins/build/mcp-server)
+requires server-side authorization and says elicitation collects information,
+not credentials or authentication bypasses.
+
+The pinned extension advertises `extensions['openai/elicitation'].form` and calls
+`openai/elicitation/create`. SMRT's scoped `@modelcontextprotocol/server` 2.0.0,
+protocol 2026-07-28, has a public `InputRequest` union of `CreateMessageRequest |
+ListRootsRequest | ElicitRequest`. `inputRequired.elicit` emits only
+`elicitation/create`; `ServerContext.mcpReq.elicitInput` explicitly throws on
+2026-07-28. The public MRTR union does not include the OpenAI method. The upstream
+helper uses monolithic SDK v1 and is not an acceptable substitute. Therefore
+`openAiFormSupport` returns `native:false` even with a present host capability,
+with `sdk-mrtr-unsupported`. Absent and unknown capabilities also select the
+functional application-form fallback. No OpenAI extension capability is
+advertised, no callback is kept alive, and the stateless mount is unchanged.
+Actual OpenAI host support is unverified and remains the M8 acceptance gate.
+
+## Bounded wire profile
+
+Supported fields cover boolean, number/integer, string, titled/legacy single
+select, titled/untitled multi-select, string arrays, suggestions, thumbnail/preview
+metadata, and file/resource picker strings or arrays. Replies are exactly
+`{action:'accept',content:{...}}`, `{action:'cancel'}`, or `{action:'decline'}`.
+The parser rejects unknown fields instead of stripping semantic instructions.
+Limits: 64 fields/options/selections, 4096-character values, 256-character resource
+names, 2048-character URIs, 65536-byte inert JSON budget, depth 16. Numeric bounds
+must be finite; integer answers must be safe integers. Required/enum/default and
+resource-selection rules are checked without coercion or inserted defaults.
+
+Deliberate stricter safety profile: arbitrary regex `pattern` is rejected rather
+than evaluated; prototype-sensitive names and accessors are rejected; images
+must be HTTPS without credentials or bounded raster data URIs. The fallback
+renderer does not fetch images. Resources must use opaque absolute URIs;
+`file:`, `data:`, and `javascript:` are rejected, and a remote application cannot
+interpret a desktop path. The owning grant provider must authorize every selected
+URI, including offered options and implicit/user-supplied selections. Selection
+is input only. Unknown resource metadata does not become permission.
+
+## Durable application integration
+
+Inside the existing task runner, call `continueOpenAiForm` with a server-owned
+`McpWorkflowContinuation` (`recordId`, immutable `revision`, unique `inputKey`,
+HTTPS or loopback `reviewUrl`), schema, fresh `authorizeApply`, and `applyInput`.
+Forms containing pickers also require `authorizeResource`. The task must already
+have the exact same continuation binding. M5 persists its owner and active tenant,
+checks live task authority at start/resume, and uses one job row for suspension,
+first-response CAS, cancellation, and execution. No new approval store exists.
+
+The authenticated application form reads the descriptor through
+`createMcpContinuationTool` or its actor/tenant-bound `McpTaskStore`, renders it
+with `renderOpenAiForm`, then calls `submitOpenAiForm` on its server. Supply that
+verified actor's tenant-bound store and a policy callback which resolves fresh
+application authority. Never derive either from submitted form values. Submit
+validates the stored schema, a canonical SHA-256 schema fingerprint, and exact binding before persisting a bound reply;
+the worker validates again, checks selected resource grants, then reauthorizes both application access and active task ownership after asynchronous checks
+before `applyInput`. Direct `tasks/update` cannot bypass worker validation.
+
+A submitted reply is not a completed operation. Concurrent replies use the
+existing store's first-response-wins CAS; stale/cancelled/consumed requests fail
+closed. Poll the task for its authoritative result. Worker restart replays the
+handler, so all code before suspension must be read-only or use the existing
+owning action/runOnce idempotency API. Remote jobs use `maxAttempts:1`; unknown
+external outcomes fail for manual reconciliation, not automatic replay.
+`applyInput` must enforce domain review and immutable revision in its owning
+transaction, and external access must recheck applicable authority at its own
+boundary. Iolaus retains its dedicated human review page and no employer
+transmission occurs in fixtures. Accepting a form does not approve an application.
+
+Run package build, typecheck, test, test:forms:e2e and verify:forms:pack. See
+[FORMS-TEST-DESIGN.md](FORMS-TEST-DESIGN.md) for the evidence contract. Tests use
+synthetic data only; PostgreSQL authority tests use `SMRT_TEST_POSTGRES_URL`.
+
+In the application form, an untouched optional array without a default is
+omitted from the reply. Editing then clearing an array submits an explicit
+empty array, which must satisfy `minItems`. Required arrays and declared
+defaults always remain subject to the schema's normal reply validation.
+
+### Inert inputs and reversible fallback values
+
+Form schemas and replies are interpreted and serialized from a detached snapshot
+of own enumerable data descriptors. Accessors, sparse/custom-prototype arrays,
+custom array properties/iterators, hidden fields and serialization hooks are
+rejected without invoking supplied callbacks. The shared JSON validator retains
+its validation-only return contract and existing depth/node/byte bounds; ordinary
+JSON data remains supported. Native, context, messages, mentions, settings, file
+and continuation callers share this boundary. Host callbacks/functions belong in
+adapter options, never in wire JSON.
+
+The free string-array fallback uses an explicitly labeled JSON array editor:
+`["first", "second"]`, `["a\nb"]`, `[""]` and `[]` remain distinct. Each item and
+the complete reply retain their existing limits; the editor allows up to 65,536
+characters and wire validation enforces the byte limit. Invalid JSON remains
+editable and does not submit. Untouched optional arrays/text remain omitted;
+intentional empty choices and empty defaults are retained. A blank array editor
+means an intentional empty list after interaction, preserving minItems checks.
+
+Date-time replies require a real calendar date, hours 00–23, minutes/seconds
+00–59 and offset hours/minutes 00–23/00–59, in the existing `T` and `Z`/offset
+profile. Invalid dates normalized by JavaScript's Date parser are rejected.

package/dist/file-contracts.d.ts

@@ -0,0 +1,34 @@
+export interface OpenAiFileInput {
+    file: {
+        name: string;
+        resourceUri: string;
+    };
+}
+export type FileContent = {
+    text: string;
+    blob?: never;
+} | {
+    blob: string;
+    text?: never;
+};
+export type FileWriteResult = {
+    outcome: 'saved' | 'conflict';
+    etag: string;
+} | {
+    outcome: 'too-large';
+    maxBytes: number;
+};
+export interface FileRead {
+    uri: string;
+    mimeType: string;
+    content: FileContent;
+    writable: boolean;
+    etag?: string;
+}
+/** The URI is retained verbatim and is never decoded into a filesystem path. */
+export declare function validateFileInput(value: unknown): OpenAiFileInput;
+export declare function fileExtensions(value: readonly string[]): string[];
+export declare function fileContent(value: unknown, maxBytes: number): FileContent;
+export declare function fileRead(value: unknown, uri: string, maxBytes: number, mimeTypes: readonly string[]): FileRead;
+export declare function fileWriteResult(value: unknown): FileWriteResult;
+//# sourceMappingURL=file-contracts.d.ts.map

package/dist/file-contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-contracts.d.ts","sourceRoot":"","sources":["../src/file-contracts.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7C;AACD,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,KAAK,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC;AACnC,MAAM,MAAM,eAAe,GACvB;IAAE,OAAO,EAAE,OAAO,GAAG,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAC/C,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AACD,gFAAgF;AAChF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CA0BjE;AACD,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAiBjE;AACD,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,WAAW,CAwBzE;AACD,wBAAgB,QAAQ,CACtB,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,QAAQ,CA8BV;AACD,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAY/D"}

package/dist/file-contracts.js

@@ -0,0 +1,98 @@
+import { json, keys, record, text } from './validation.js';
+/** The URI is retained verbatim and is never decoded into a filesystem path. */
+export function validateFileInput(value) {
+    json(value);
+    const root = record(value);
+    keys(root, ['file']);
+    const file = record(root.file);
+    keys(file, ['name', 'resourceUri']);
+    const name = text(file.name, 255);
+    if (/[\\/]/.test(name) ||
+        [...name].some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127) ||
+        name === '.' ||
+        name === '..')
+        throw new TypeError('Expected filename without path');
+    const uri = text(file.resourceUri, 2048);
+    // Conservative local policy: opaque host/provider URI, never a URL or file path.
+    if (!/^[a-z][a-z0-9+.-]*:/i.test(uri) ||
+        /^(file|https?|data|javascript):/i.test(uri) ||
+        /^[a-z]:/i.test(uri) ||
+        /[\s\\]/.test(uri))
+        throw new TypeError('Expected opaque resource URI');
+    return { file: { name, resourceUri: uri } };
+}
+export function fileExtensions(value) {
+    if (!Array.isArray(value) ||
+        !value.length ||
+        value.length > 32 ||
+        new Set(value.map((extension) => typeof extension === 'string' ? extension.toLowerCase() : extension)).size !== value.length)
+        throw new TypeError('Expected bounded unique file extensions');
+    return value.map((extension) => {
+        if (!/^\.[a-z0-9][a-z0-9._-]{0,31}$/i.test(extension))
+            throw new TypeError('Expected file extension');
+        return extension.toLowerCase();
+    });
+}
+export function fileContent(value, maxBytes) {
+    json(value);
+    const content = record(value);
+    keys(content, ['text', 'blob']);
+    let bytes;
+    if (typeof content.text === 'string' && !Object.hasOwn(content, 'blob')) {
+        bytes = new TextEncoder().encode(content.text).length;
+    }
+    else if (typeof content.blob === 'string' &&
+        !Object.hasOwn(content, 'text')) {
+        const blob = content.blob;
+        if (!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(blob))
+            throw new TypeError('Expected base64 content');
+        bytes =
+            (blob.length / 4) * 3 -
+                (blob.endsWith('==') ? 2 : blob.endsWith('=') ? 1 : 0);
+    }
+    else
+        throw new TypeError('Expected exactly one representation');
+    if (bytes > maxBytes)
+        throw new TypeError('File exceeds byte limit');
+    return structuredClone(content);
+}
+export function fileRead(value, uri, maxBytes, mimeTypes) {
+    const root = record(value);
+    if (!Array.isArray(root.contents) || root.contents.length !== 1)
+        throw new TypeError('Expected one granted resource');
+    const item = record(root.contents[0]);
+    if (item.uri !== uri)
+        throw new TypeError('Resource URI mismatch');
+    const mimeType = text(item.mimeType, 128);
+    if (!mimeTypes.includes(mimeType))
+        throw new TypeError('File MIME denied');
+    const content = fileContent({
+        ...(Object.hasOwn(item, 'text') ? { text: item.text } : {}),
+        ...(Object.hasOwn(item, 'blob') ? { blob: item.blob } : {}),
+    }, maxBytes);
+    const metadata = item._meta === undefined
+        ? {}
+        : record(record(item._meta)['openai/resource'] ?? {});
+    if (metadata.writable !== undefined && typeof metadata.writable !== 'boolean')
+        throw new TypeError('Invalid writable metadata');
+    const etag = metadata.etag === undefined ? undefined : text(metadata.etag, 1024);
+    return {
+        uri,
+        mimeType,
+        content,
+        writable: metadata.writable === true,
+        ...(etag ? { etag } : {}),
+    };
+}
+export function fileWriteResult(value) {
+    json(value);
+    const result = record(value);
+    if (result.outcome === 'saved' || result.outcome === 'conflict')
+        return { outcome: result.outcome, etag: text(result.etag, 1024) };
+    if (result.outcome === 'too-large' &&
+        Number.isSafeInteger(result.maxBytes) &&
+        Number(result.maxBytes) >= 0)
+        return { outcome: 'too-large', maxBytes: Number(result.maxBytes) };
+    throw new TypeError('Invalid file write result');
+}
+//# sourceMappingURL=file-contracts.js.map

package/dist/file-contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-contracts.js","sourceRoot":"","sources":["../src/file-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAkB3D,gFAAgF;AAChF,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,KAAK,CAAC,CAAC;IACZ,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACrB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClC,IACE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAClB,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CACZ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAChE;QACD,IAAI,KAAK,GAAG;QACZ,IAAI,KAAK,IAAI;QAEb,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACzC,iFAAiF;IACjF,IACE,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC;QACjC,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC5C,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QAElB,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACtD,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,CAAC;AAC9C,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,KAAwB;IACrD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,CAAC,KAAK,CAAC,MAAM;QACb,KAAK,CAAC,MAAM,GAAG,EAAE;QACjB,IAAI,GAAG,CACL,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CACtB,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CACpE,CACF,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QAEvB,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACjE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAC7B,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,SAAS,CAAC;YACnD,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACjD,OAAO,SAAS,CAAC,WAAW,EAAE,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,KAAc,EAAE,QAAgB;IAC1D,IAAI,CAAC,KAAK,CAAC,CAAC;IACZ,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChC,IAAI,KAAa,CAAC;IAClB,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QACxE,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACxD,CAAC;SAAM,IACL,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAChC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,EAC/B,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,IACE,CAAC,kEAAkE,CAAC,IAAI,CACtE,IAAI,CACL;YAED,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACjD,KAAK;YACH,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC;gBACrB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;;QAAM,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;IAClE,IAAI,KAAK,GAAG,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;IACrE,OAAO,eAAe,CAAC,OAAO,CAAgB,CAAC;AACjD,CAAC;AACD,MAAM,UAAU,QAAQ,CACtB,KAAc,EACd,GAAW,EACX,QAAgB,EAChB,SAA4B;IAE5B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC7D,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG;QAAE,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,kBAAkB,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,WAAW,CACzB;QACE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,EACD,QAAQ,CACT,CAAC;IACF,MAAM,QAAQ,GACZ,IAAI,CAAC,KAAK,KAAK,SAAS;QACtB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,SAAS;QAC3E,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;IACnD,MAAM,IAAI,GACR,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtE,OAAO;QACL,GAAG;QACH,QAAQ;QACR,OAAO;QACP,QAAQ,EAAE,QAAQ,CAAC,QAAQ,KAAK,IAAI;QACpC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1B,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,CAAC,KAAK,CAAC,CAAC;IACZ,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU;QAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;IACpE,IACE,MAAM,CAAC,OAAO,KAAK,WAAW;QAC9B,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAE5B,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;IACrE,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;AACnD,CAAC"}

package/dist/files-server.d.ts

@@ -0,0 +1,6 @@
+import { type McpWorkflowToolDefinition } from '@happyvertical/smrt-app-mcp';
+export type { OpenAiFileInput } from './file-contracts.js';
+export { validateFileInput } from './file-contracts.js';
+/** Wrap an existing authorized provider/view workflow. Input is a reference, never a grant. */
+export declare function withOpenAiFileEntrypoint(definition: McpWorkflowToolDefinition, extensions: readonly string[]): McpWorkflowToolDefinition;
+//# sourceMappingURL=files-server.d.ts.map

package/dist/files-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files-server.d.ts","sourceRoot":"","sources":["../src/files-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,6BAA6B,CAAC;AAGrC,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,+FAA+F;AAC/F,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,yBAAyB,EACrC,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,yBAAyB,CA6C3B"}

package/dist/files-server.js

@@ -0,0 +1,45 @@
+import { createMcpWorkflowTool, } from '@happyvertical/smrt-app-mcp';
+import { fileExtensions, validateFileInput } from './file-contracts.js';
+export { validateFileInput } from './file-contracts.js';
+/** Wrap an existing authorized provider/view workflow. Input is a reference, never a grant. */
+export function withOpenAiFileEntrypoint(definition, extensions) {
+    createMcpWorkflowTool(definition);
+    const allowed = fileExtensions(extensions);
+    if (!definition.ui?.resourceUri ||
+        definition.effect !== 'read' ||
+        !definition.idempotent)
+        throw new TypeError('File entrypoint requires idempotent read UI workflow');
+    if (definition.metadata && Object.hasOwn(definition.metadata, 'openai/ui'))
+        throw new TypeError('File entrypoint metadata already declared');
+    return {
+        ...definition,
+        inputSchema: {
+            type: 'object',
+            properties: {
+                file: {
+                    type: 'object',
+                    properties: {
+                        name: { type: 'string' },
+                        resourceUri: { type: 'string' },
+                    },
+                    required: ['name', 'resourceUri'],
+                    additionalProperties: false,
+                },
+            },
+            required: ['file'],
+            additionalProperties: false,
+        },
+        metadata: {
+            ...structuredClone(definition.metadata ?? {}),
+            'openai/ui': { entrypoints: [{ type: 'file', extensions: allowed }] },
+        },
+        execute(context) {
+            const input = validateFileInput(context.arguments);
+            if (!allowed.some((extension) => input.file.name.toLowerCase().endsWith(extension)))
+                throw new TypeError('File extension denied');
+            // Existing handler must resolve ownership/tenant from context.principal, never metadata.
+            return definition.execute({ ...context, arguments: { ...input } });
+        },
+    };
+}
+//# sourceMappingURL=files-server.js.map

package/dist/files-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files-server.js","sourceRoot":"","sources":["../src/files-server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,GAEtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,+FAA+F;AAC/F,MAAM,UAAU,wBAAwB,CACtC,UAAqC,EACrC,UAA6B;IAE7B,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC3C,IACE,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW;QAC3B,UAAU,CAAC,MAAM,KAAK,MAAM;QAC5B,CAAC,UAAU,CAAC,UAAU;QAEtB,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IAC9E,IAAI,UAAU,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC;QACxE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACnE,OAAO;QACL,GAAG,UAAU;QACb,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACxB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAChC;oBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC;oBACjC,oBAAoB,EAAE,KAAK;iBAC5B;aACF;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,oBAAoB,EAAE,KAAK;SAC5B;QACD,QAAQ,EAAE;YACR,GAAG,eAAe,CAAC,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC;YAC7C,WAAW,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE;SACtE;QACD,OAAO,CAAC,OAAO;YACb,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACnD,IACE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAC1B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAClD;gBAED,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAC;YAC/C,yFAAyF;YACzF,OAAO,UAAU,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;QACrE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/files.d.ts

@@ -0,0 +1,38 @@
+import type { McpAppBridge, ToolResult } from '@happyvertical/smrt-mcp-apps';
+import { type FileContent, type FileRead, type FileWriteResult, type OpenAiFileInput } from './file-contracts.js';
+export type { FileContent, FileRead, FileWriteResult, OpenAiFileInput, } from './file-contracts.js';
+export { validateFileInput } from './file-contracts.js';
+export type FileOperation = 'read' | 'write' | 'subscribe' | 'open';
+export interface OpenAiFileOptions {
+    bridge: McpAppBridge;
+    input: OpenAiFileInput;
+    /** Existing app workflow: fresh principal/owner/tenant/grant check on every call. */
+    authorityTool: string;
+    /** Ordinary import/open/download workflow, used when native capability is absent. */
+    fallbackTool: string;
+    /** Application policy, capped below the portable bridge's JSON envelope limit. */
+    maxBytes: number;
+    mimeTypes: readonly string[];
+}
+/** One initial tool-input grant, one lifetime; create a new session after reconnect/input change. */
+export declare class OpenAiFileSession {
+    #private;
+    constructor(options: OpenAiFileOptions);
+    get native(): boolean;
+    get signal(): AbortSignal;
+    fallback(operation: FileOperation): Promise<ToolResult>;
+    read(representation?: 'text' | 'blob'): Promise<FileRead | ToolResult>;
+    write(content: FileContent): Promise<FileWriteResult | ToolResult>;
+    subscribe(onRead: (file: FileRead) => void, onError: (error: unknown) => void): Promise<void>;
+    dispose(): void;
+}
+/** User action calls this after the existing provider selects and authorizes an exact path. */
+export declare function openOpenAiFile(options: {
+    bridge: McpAppBridge;
+    resolveTool: string;
+    arguments: Record<string, unknown>;
+    allowedPaths: readonly string[];
+    /** Explicit application confirmation UI; false cancels without resolving or opening. */
+    confirm(): Promise<boolean>;
+}): Promise<ToolResult | undefined>;
+//# sourceMappingURL=files.d.ts.map

package/dist/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../src/files.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,eAAe,EAIpB,KAAK,eAAe,EAErB,MAAM,qBAAqB,CAAC;AAG7B,YAAY,EACV,WAAW,EACX,QAAQ,EACR,eAAe,EACf,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAKxD,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,GAAG,WAAW,GAAG,MAAM,CAAC;AACpE,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,eAAe,CAAC;IACvB,qFAAqF;IACrF,aAAa,EAAE,MAAM,CAAC;IACtB,qFAAqF;IACrF,YAAY,EAAE,MAAM,CAAC;IACrB,kFAAkF;IAClF,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B;AAeD,qGAAqG;AACrG,qBAAa,iBAAiB;;gBAYhB,OAAO,EAAE,iBAAiB;IAkDtC,IAAI,MAAM,IAAI,OAAO,CAEpB;IACD,IAAI,MAAM,IAAI,WAAW,CAExB;IAkBK,QAAQ,CAAC,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC;IAWvD,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,UAAU,CAAC;IAiCtE,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,GAAG,UAAU,CAAC;IAkClE,SAAS,CACb,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,IAAI,EAChC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAChC,OAAO,CAAC,IAAI,CAAC;IAwEhB,OAAO,IAAI,IAAI;CAsBhB;AAED,+FAA+F;AAC/F,wBAAsB,cAAc,CAAC,OAAO,EAAE;IAC5C,MAAM,EAAE,YAAY,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,wFAAwF;IACxF,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7B,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CA6BlC"}