@happyvertical/smrt-mcp-openai 0.51.38 → 0.52.0

package/dist/files.js

@@ -0,0 +1,288 @@
+import { fileContent, fileRead, fileWriteResult, validateFileInput, } from './file-contracts.js';
+import { json, record, text, toolName } from './validation.js';
+export { validateFileInput } from './file-contracts.js';
+class SupersededFileRead extends Error {
+}
+function capability(bridge, key) {
+    try {
+        const raw = record(bridge.snapshot.rawHostCapabilities.experimental);
+        record(raw[key]);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function emptyResult(result) {
+    json(result);
+    const value = record(result);
+    if (value.isError === true)
+        throw new Error('Host denied file operation');
+}
+/** One initial tool-input grant, one lifetime; create a new session after reconnect/input change. */
+export class OpenAiFileSession {
+    #options;
+    #input;
+    #extension;
+    #lifetime = new AbortController();
+    #latest;
+    #writing = false;
+    #resumeRefresh;
+    #subscribed = false;
+    #stop;
+    #generation = 0;
+    #unsubscribeLifecycle;
+    constructor(options) {
+        this.#input = validateFileInput(options.input);
+        toolName(options.authorityTool);
+        toolName(options.fallbackTool);
+        if (!Number.isSafeInteger(options.maxBytes) ||
+            options.maxBytes < 1 ||
+            options.maxBytes > 16384)
+            throw new TypeError('Expected file byte bound from 1 to 16384');
+        if (!options.mimeTypes.length ||
+            options.mimeTypes.length > 16 ||
+            options.mimeTypes.some((mime) => !/^[\w.+-]+\/[\w.+-]+$/.test(mime)))
+            throw new TypeError('Expected explicit MIME allowlist');
+        this.#options = { ...options, mimeTypes: [...options.mimeTypes] };
+        if (options.bridge.snapshot.state !== 'ready')
+            throw new Error('Bridge is not ready');
+        if (capability(options.bridge, 'openai/resource')) {
+            this.#extension = options.bridge.registerExtension({
+                id: 'openai.files.resources',
+                capability: { path: ['experimental', 'openai/resource'] },
+                methods: [
+                    'resources/read',
+                    'resources/subscribe',
+                    'resources/unsubscribe',
+                    'openai/resources/write',
+                ],
+                notifications: ['notifications/resources/updated'],
+            });
+        }
+        this.#unsubscribeLifecycle = options.bridge.subscribe((snapshot) => {
+            if (snapshot.state === 'disposed' || snapshot.cancelled)
+                this.dispose();
+            if (snapshot.toolInput !== undefined) {
+                try {
+                    const input = validateFileInput(snapshot.toolInput);
+                    if (input.file.resourceUri !== this.#input.file.resourceUri ||
+                        input.file.name !== this.#input.file.name)
+                        this.dispose();
+                }
+                catch {
+                    this.dispose();
+                }
+            }
+        });
+        // subscribe delivers the current snapshot before returning its cleanup.
+        if (this.signal.aborted)
+            this.#unsubscribeLifecycle();
+    }
+    get native() {
+        return Boolean(this.#extension);
+    }
+    get signal() {
+        return this.#lifetime.signal;
+    }
+    #active() {
+        if (this.signal.aborted || this.#options.bridge.signal.aborted)
+            throw new Error('File session disposed');
+    }
+    async #authorize(operation) {
+        this.#active();
+        const result = await this.#options.bridge.callTool(this.#options.authorityTool, { ...this.#input, operation }, this.signal);
+        this.#active();
+        if (result.isError) {
+            this.#latest = undefined;
+            throw new Error('File authority denied');
+        }
+    }
+    async fallback(operation) {
+        await this.#authorize(operation);
+        const result = await this.#options.bridge.callTool(this.#options.fallbackTool, { ...this.#input, operation }, this.signal);
+        this.#active();
+        if (result.isError)
+            throw new Error('File workflow denied');
+        return result;
+    }
+    async read(representation) {
+        if (representation !== undefined &&
+            representation !== 'text' &&
+            representation !== 'blob')
+            throw new TypeError('Invalid representation');
+        if (!this.#extension)
+            return this.fallback('read');
+        const generation = ++this.#generation;
+        this.#latest = undefined;
+        await this.#authorize('read');
+        const result = await this.#extension.request('resources/read', {
+            uri: this.#input.file.resourceUri,
+            ...(representation
+                ? { _meta: { 'openai/resource': { representation } } }
+                : {}),
+        }, this.signal);
+        const file = fileRead(result, this.#input.file.resourceUri, this.#options.maxBytes, this.#options.mimeTypes);
+        await this.#authorize('read');
+        if (generation !== this.#generation)
+            throw new SupersededFileRead('Stale file read');
+        this.#latest = file;
+        return structuredClone(file);
+    }
+    async write(content) {
+        this.#active();
+        if (!this.#extension)
+            return this.fallback('write');
+        if (this.#writing)
+            throw new Error('File write already pending');
+        const previous = this.#latest;
+        if (!previous?.writable || !previous.etag)
+            throw new Error('Fresh writable ETag required');
+        const bounded = fileContent(content, this.#options.maxBytes);
+        this.#writing = true;
+        this.#latest = undefined;
+        ++this.#generation;
+        try {
+            await this.#authorize('write');
+            const result = fileWriteResult(await this.#extension.request('openai/resources/write', {
+                uri: this.#input.file.resourceUri,
+                ifMatch: previous.etag,
+                ...bounded,
+            }, this.signal));
+            this.#active();
+            // All outcomes require a new authorized read; unknown failures are never retried.
+            return result;
+        }
+        finally {
+            this.#writing = false;
+            this.#latest = undefined;
+            ++this.#generation;
+            this.#resumeRefresh?.();
+        }
+    }
+    async subscribe(onRead, onError) {
+        this.#active();
+        if (!this.#extension) {
+            await this.fallback('subscribe');
+            return;
+        }
+        if (this.#subscribed)
+            throw new Error('Already subscribed');
+        this.#subscribed = true;
+        let refreshing = false;
+        let dirty = false;
+        const refresh = async () => {
+            if (refreshing || this.#writing) {
+                dirty = true;
+                return;
+            }
+            refreshing = true;
+            try {
+                do {
+                    dirty = false;
+                    if (this.#writing) {
+                        dirty = true;
+                        break;
+                    }
+                    try {
+                        const result = await this.read();
+                        if (!this.signal.aborted && this.#subscribed)
+                            onRead(result);
+                    }
+                    catch (error) {
+                        if (!(error instanceof SupersededFileRead))
+                            throw error;
+                        dirty = true;
+                    }
+                } while (dirty && !this.signal.aborted && this.#subscribed);
+            }
+            catch (error) {
+                if (!this.signal.aborted) {
+                    try {
+                        onError(error);
+                    }
+                    finally {
+                        this.dispose();
+                    }
+                }
+            }
+            finally {
+                refreshing = false;
+            }
+        };
+        this.#resumeRefresh = () => {
+            if (dirty && !this.signal.aborted && this.#subscribed)
+                void refresh();
+        };
+        try {
+            await this.#authorize('subscribe');
+            this.#stop = this.#extension.subscribe((method, params) => {
+                if (method !== 'notifications/resources/updated' || this.signal.aborted)
+                    return;
+                if (params.uri !== this.#input.file.resourceUri)
+                    return;
+                this.#latest = undefined;
+                ++this.#generation;
+                void refresh();
+            });
+            emptyResult(await this.#extension.request('resources/subscribe', { uri: this.#input.file.resourceUri }, this.signal));
+            this.#active();
+        }
+        catch (error) {
+            this.#stop?.();
+            this.#stop = undefined;
+            this.#subscribed = false;
+            throw error;
+        }
+    }
+    dispose() {
+        if (this.signal.aborted)
+            return;
+        this.#latest = undefined;
+        ++this.#generation;
+        this.#stop?.();
+        this.#resumeRefresh = undefined;
+        this.#unsubscribeLifecycle?.();
+        if (this.#subscribed &&
+            this.#extension &&
+            !this.#options.bridge.signal.aborted) {
+            // Host cleanup is best effort. Local authority and callbacks end immediately.
+            void this.#extension
+                .request('resources/unsubscribe', { uri: this.#input.file.resourceUri })
+                .catch(() => { });
+        }
+        // Dispatch cleanup first, then release local registration without waiting for the host.
+        this.#extension?.dispose();
+        this.#subscribed = false;
+        this.#lifetime.abort();
+    }
+}
+/** User action calls this after the existing provider selects and authorizes an exact path. */
+export async function openOpenAiFile(options) {
+    if (!(await options.confirm()))
+        return;
+    const result = await options.bridge.callTool(toolName(options.resolveTool), options.arguments);
+    if (result.isError)
+        throw new Error('File opening denied');
+    if (!capability(options.bridge, 'openai/files'))
+        return result;
+    const path = text(record(result.structuredContent).path, 2048);
+    if (!options.allowedPaths.includes(path) ||
+        !/^(\/[^/]|[A-Za-z]:\\)/.test(path) ||
+        [...path].some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127) ||
+        path.split(/[\\/]/).some((part) => part === '.' || part === '..'))
+        throw new TypeError('File opening path denied');
+    const extension = options.bridge.registerExtension({
+        id: 'openai.files.open',
+        capability: { path: ['experimental', 'openai/files'] },
+        methods: ['openai/files/open'],
+        notifications: [],
+    });
+    try {
+        emptyResult(await extension.request('openai/files/open', { path }));
+    }
+    finally {
+        extension.dispose();
+    }
+}
+//# sourceMappingURL=files.js.map

package/dist/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../src/files.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,WAAW,EACX,QAAQ,EACR,eAAe,EAEf,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAQ/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,kBAAmB,SAAQ,KAAK;CAAG;AAezC,SAAS,UAAU,CAAC,MAAoB,EAAE,GAAW;IACnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AACD,SAAS,WAAW,CAAC,MAAe;IAClC,IAAI,CAAC,MAAM,CAAC,CAAC;IACb,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;AAC5E,CAAC;AACD,qGAAqG;AACrG,MAAM,OAAO,iBAAiB;IACnB,QAAQ,CAAoB;IAC5B,MAAM,CAAkB;IACxB,UAAU,CAAa;IACvB,SAAS,GAAG,IAAI,eAAe,EAAE,CAAC;IAC3C,OAAO,CAAY;IACnB,QAAQ,GAAG,KAAK,CAAC;IACjB,cAAc,CAAc;IAC5B,WAAW,GAAG,KAAK,CAAC;IACpB,KAAK,CAAc;IACnB,WAAW,GAAG,CAAC,CAAC;IAChB,qBAAqB,CAAa;IAClC,YAAY,OAA0B;QACpC,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/C,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAChC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC/B,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;YACvC,OAAO,CAAC,QAAQ,GAAG,CAAC;YACpB,OAAO,CAAC,QAAQ,GAAG,KAAK;YAExB,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;QAClE,IACE,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM;YACzB,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE;YAC7B,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEpE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAClE,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,KAAK,OAAO;YAC3C,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC;gBACjD,EAAE,EAAE,wBAAwB;gBAC5B,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE,iBAAiB,CAAC,EAAE;gBACzD,OAAO,EAAE;oBACP,gBAAgB;oBAChB,qBAAqB;oBACrB,uBAAuB;oBACvB,wBAAwB;iBACzB;gBACD,aAAa,EAAE,CAAC,iCAAiC,CAAC;aACnD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE;YACjE,IAAI,QAAQ,CAAC,KAAK,KAAK,UAAU,IAAI,QAAQ,CAAC,SAAS;gBAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YACxE,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACrC,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;oBACpD,IACE,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW;wBACvD,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI;wBAEzC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACnB,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QACH,wEAAwE;QACxE,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,qBAAqB,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,MAAM;QACR,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;IAC/B,CAAC;IACD,OAAO;QACL,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;YAC5D,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC7C,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,SAAwB;QACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAChD,IAAI,CAAC,QAAQ,CAAC,aAAa,EAC3B,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAC7B,IAAI,CAAC,MAAM,CACZ,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,SAAwB;QACrC,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAChD,IAAI,CAAC,QAAQ,CAAC,YAAY,EAC1B,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAC7B,IAAI,CAAC,MAAM,CACZ,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,cAAgC;QACzC,IACE,cAAc,KAAK,SAAS;YAC5B,cAAc,KAAK,MAAM;YACzB,cAAc,KAAK,MAAM;YAEzB,MAAM,IAAI,SAAS,CAAC,wBAAwB,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC;QACtC,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAC1C,gBAAgB,EAChB;YACE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW;YACjC,GAAG,CAAC,cAAc;gBAChB,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE;gBACtD,CAAC,CAAC,EAAE,CAAC;SACR,EACD,IAAI,CAAC,MAAM,CACZ,CAAC;QACF,MAAM,IAAI,GAAG,QAAQ,CACnB,MAAM,EACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAC5B,IAAI,CAAC,QAAQ,CAAC,QAAQ,EACtB,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;QACF,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,UAAU,KAAK,IAAI,CAAC,WAAW;YACjC,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,OAAoB;QAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI;YACvC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,EAAE,IAAI,CAAC,WAAW,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC/B,MAAM,MAAM,GAAG,eAAe,CAC5B,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAC3B,wBAAwB,EACxB;gBACE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW;gBACjC,OAAO,EAAE,QAAQ,CAAC,IAAI;gBACtB,GAAG,OAAO;aACX,EACD,IAAI,CAAC,MAAM,CACZ,CACF,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,kFAAkF;YAClF,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;YACtB,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;YACzB,EAAE,IAAI,CAAC,WAAW,CAAC;YACnB,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,KAAK,CAAC,SAAS,CACb,MAAgC,EAChC,OAAiC;QAEjC,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC5D,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;YACzB,IAAI,UAAU,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAChC,KAAK,GAAG,IAAI,CAAC;gBACb,OAAO;YACT,CAAC;YACD,UAAU,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC;gBACH,GAAG,CAAC;oBACF,KAAK,GAAG,KAAK,CAAC;oBACd,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;wBAClB,KAAK,GAAG,IAAI,CAAC;wBACb,MAAM;oBACR,CAAC;oBACD,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;wBACjC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,WAAW;4BAC1C,MAAM,CAAC,MAAkB,CAAC,CAAC;oBAC/B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,CAAC,CAAC,KAAK,YAAY,kBAAkB,CAAC;4BAAE,MAAM,KAAK,CAAC;wBACxD,KAAK,GAAG,IAAI,CAAC;oBACf,CAAC;gBACH,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE;YAC9D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACzB,IAAI,CAAC;wBACH,OAAO,CAAC,KAAK,CAAC,CAAC;oBACjB,CAAC;4BAAS,CAAC;wBACT,IAAI,CAAC,OAAO,EAAE,CAAC;oBACjB,CAAC;gBACH,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,UAAU,GAAG,KAAK,CAAC;YACrB,CAAC;QACH,CAAC,CAAC;QACF,IAAI,CAAC,cAAc,GAAG,GAAG,EAAE;YACzB,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,WAAW;gBAAE,KAAK,OAAO,EAAE,CAAC;QACxE,CAAC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YACnC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;gBACxD,IAAI,MAAM,KAAK,iCAAiC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO;oBACrE,OAAO;gBACT,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW;oBAAE,OAAO;gBACxD,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;gBACzB,EAAE,IAAI,CAAC,WAAW,CAAC;gBACnB,KAAK,OAAO,EAAE,CAAC;YACjB,CAAC,CAAC,CAAC;YACH,WAAW,CACT,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAC3B,qBAAqB,EACrB,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,EACrC,IAAI,CAAC,MAAM,CACZ,CACF,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;YACvB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;YACzB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO;QACL,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAChC,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,EAAE,IAAI,CAAC,WAAW,CAAC;QACnB,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QACf,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAChC,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;QAC/B,IACE,IAAI,CAAC,WAAW;YAChB,IAAI,CAAC,UAAU;YACf,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EACpC,CAAC;YACD,8EAA8E;YAC9E,KAAK,IAAI,CAAC,UAAU;iBACjB,OAAO,CAAC,uBAAuB,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;iBACvE,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,wFAAwF;QACxF,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;CACF;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAOpC;IACC,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO;IACvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAC1C,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAC7B,OAAO,CAAC,SAAS,CAClB,CAAC;IACF,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC3D,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC;QAAE,OAAO,MAAM,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/D,IACE,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpC,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;QACnC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CACZ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAChE;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;QAEjE,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACjD,EAAE,EAAE,mBAAmB;QACvB,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC,EAAE;QACtD,OAAO,EAAE,CAAC,mBAAmB,CAAC;QAC9B,aAAa,EAAE,EAAE;KAClB,CAAC,CAAC;IACH,IAAI,CAAC;QACH,WAAW,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/forms-server.d.ts

@@ -0,0 +1,53 @@
+/** Server-only adapter: persistence/authority remain in the existing M5 workflow. */
+import { type McpWorkflowContinuation } from '@happyvertical/smrt-app-mcp';
+import { type OpenAiFormReply } from './forms.js';
+export type FormBinding = Pick<McpWorkflowContinuation, 'recordId' | 'revision' | 'inputKey'>;
+export interface BoundFormReply {
+    binding: FormBinding;
+    schemaDigest: string;
+    reply: OpenAiFormReply;
+}
+/** Bind the reply to the exact server-provided continuation; this is not authority. */
+export declare function bindOpenAiFormReply(expected: FormBinding, schema: unknown, value: unknown): BoundFormReply;
+/**
+ * Suspend/replay the existing durable task. All pre-suspension work must be
+ * read-only or use the application's existing idempotency API. `applyInput`
+ * must retain immutable review/revision and domain approval checks in its own
+ * transaction. A form reply must never authorize an external action.
+ */
+export declare function continueOpenAiForm<T>(options: {
+    binding: McpWorkflowContinuation;
+    schema: unknown;
+    /** Re-resolve current application authority after all asynchronous selection checks. */
+    authorizeApply: (binding: Readonly<FormBinding>) => Promise<boolean>;
+    /** Required when a form contains resource pickers; resolve opaque grants server-side. */
+    authorizeResource?: (uri: string, binding: Readonly<FormBinding>) => Promise<boolean>;
+    applyInput: (content: Record<string, string | number | boolean | string[]>, binding: Readonly<FormBinding>) => Promise<T>;
+}): Promise<{
+    action: 'accept';
+    value: T;
+} | {
+    action: 'cancel' | 'decline';
+}>;
+/** Structural public store port; a principal/tenant-bound McpTaskStore implements it. */
+export interface FormContinuationStore {
+    getContinuation(taskId: string): Promise<{
+        binding: FormBinding;
+        inputRequests: Record<string, unknown>;
+    } | null>;
+    updateTask(taskId: string, inputResponses: Record<string, unknown>): Promise<void>;
+}
+/**
+ * Application-form submit path. The deployment supplies its verified actor's
+ * tenant-bound existing store and a fresh policy callback. CAS in that store
+ * accepts at most one reply; submission is not proof of completion or approval.
+ * Worker-side validation remains mandatory even if another caller uses tasks/update.
+ */
+export declare function submitOpenAiForm(options: {
+    store: FormContinuationStore;
+    taskId: string;
+    binding: FormBinding;
+    reply: unknown;
+    authorize: () => Promise<boolean>;
+}): Promise<void>;
+//# sourceMappingURL=forms-server.d.ts.map

package/dist/forms-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forms-server.d.ts","sourceRoot":"","sources":["../src/forms-server.ts"],"names":[],"mappings":"AACA,qFAAqF;AACrF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,6BAA6B,CAAC;AAKrC,OAAO,EAEL,KAAK,eAAe,EAGrB,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,WAAW,GAAG,IAAI,CAC5B,uBAAuB,EACvB,UAAU,GAAG,UAAU,GAAG,UAAU,CACrC,CAAC;AACF,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,WAAW,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,eAAe,CAAC;CACxB;AAkCD,uFAAuF;AACvF,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,WAAW,EACrB,MAAM,EAAE,OAAO,EACf,KAAK,EAAE,OAAO,GACb,cAAc,CAMhB;AACD;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EAAE,OAAO,EAAE;IACnD,OAAO,EAAE,uBAAuB,CAAC;IACjC,MAAM,EAAE,OAAO,CAAC;IAChB,wFAAwF;IACxF,cAAc,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,yFAAyF;IACzF,iBAAiB,CAAC,EAAE,CAClB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,KAC3B,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,UAAU,EAAE,CACV,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC,EAC7D,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,KAC3B,OAAO,CAAC,CAAC,CAAC,CAAC;CACjB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAA;CAAE,CAAC,CA2C7E;AACD,yFAAyF;AACzF,MAAM,WAAW,qBAAqB;IACpC,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QACvC,OAAO,EAAE,WAAW,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACxC,GAAG,IAAI,CAAC,CAAC;IACV,UAAU,CACR,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACtC,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AACD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE;IAC9C,KAAK,EAAE,qBAAqB,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,WAAW,CAAC;IACrB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CACnC,GAAG,OAAO,CAAC,IAAI,CAAC,CAahB"}

package/dist/forms-server.js

@@ -0,0 +1,115 @@
+import { createHash } from 'node:crypto';
+/** Server-only adapter: persistence/authority remain in the existing M5 workflow. */
+import { continueMcpWorkflow, } from '@happyvertical/smrt-app-mcp';
+import { getActiveJobExecutionContext, isRunnerExecutionContext, } from '@happyvertical/smrt-jobs';
+import { formResourceSelections, validateOpenAiForm, validateOpenAiFormReply, } from './forms.js';
+import { json, keys, record, text } from './validation.js';
+function binding(value) {
+    json(value);
+    const b = record(value);
+    keys(b, ['recordId', 'revision', 'inputKey']);
+    return {
+        recordId: text(b.recordId, 256),
+        revision: text(b.revision, 256),
+        inputKey: text(b.inputKey, 256),
+    };
+}
+function canonical(value) {
+    if (Array.isArray(value))
+        return value.map(canonical);
+    if (value && typeof value === 'object')
+        return Object.fromEntries(Object.entries(value)
+            .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))
+            .map(([key, item]) => [key, canonical(item)]));
+    return value;
+}
+function schemaDigest(schema) {
+    return createHash('sha256')
+        .update(JSON.stringify(canonical(validateOpenAiForm(schema))))
+        .digest('hex');
+}
+function equal(a, b) {
+    if (a.recordId !== b.recordId ||
+        a.revision !== b.revision ||
+        a.inputKey !== b.inputKey)
+        throw new Error('Form continuation binding mismatch');
+}
+/** Bind the reply to the exact server-provided continuation; this is not authority. */
+export function bindOpenAiFormReply(expected, schema, value) {
+    return {
+        binding: binding(expected),
+        schemaDigest: schemaDigest(schema),
+        reply: validateOpenAiFormReply(schema, value),
+    };
+}
+/**
+ * Suspend/replay the existing durable task. All pre-suspension work must be
+ * read-only or use the application's existing idempotency API. `applyInput`
+ * must retain immutable review/revision and domain approval checks in its own
+ * transaction. A form reply must never authorize an external action.
+ */
+export async function continueOpenAiForm(options) {
+    const context = getActiveJobExecutionContext();
+    if (!context || !isRunnerExecutionContext(context) || !context.task)
+        throw new Error('Durable form requires an active MCP task');
+    const task = context.task;
+    const form = validateOpenAiForm(options.schema);
+    const expected = Object.freeze(binding({
+        recordId: options.binding.recordId,
+        revision: options.binding.revision,
+        inputKey: options.binding.inputKey,
+    }));
+    if (Object.values(form.properties).some((f) => 'x-openai-input' in f) &&
+        !options.authorizeResource)
+        throw new TypeError('Resource pickers require live grant authorization');
+    return continueMcpWorkflow({
+        binding: options.binding,
+        inputSchema: form,
+        applyReviewed: async (raw, current) => {
+            json(raw);
+            const envelope = record(raw);
+            keys(envelope, ['binding', 'schemaDigest', 'reply']);
+            if (envelope.schemaDigest !== schemaDigest(form))
+                throw new Error('Form schema revision mismatch');
+            equal(expected, binding(envelope.binding));
+            equal(expected, current);
+            const reply = validateOpenAiFormReply(form, envelope.reply);
+            for (const uri of formResourceSelections(form, reply))
+                if (!(await options.authorizeResource?.(uri, expected)))
+                    throw new Error('Resource access denied');
+            if (!(await options.authorizeApply(expected)))
+                throw new Error('Form access denied');
+            await task.assertAuthorized();
+            if (reply.action !== 'accept')
+                return reply;
+            return {
+                action: 'accept',
+                value: await options.applyInput(reply.content, expected),
+            };
+        },
+    });
+}
+/**
+ * Application-form submit path. The deployment supplies its verified actor's
+ * tenant-bound existing store and a fresh policy callback. CAS in that store
+ * accepts at most one reply; submission is not proof of completion or approval.
+ * Worker-side validation remains mandatory even if another caller uses tasks/update.
+ */
+export async function submitOpenAiForm(options) {
+    text(options.taskId, 256);
+    const expected = binding(options.binding);
+    if (!(await options.authorize()))
+        throw new Error('Form access denied');
+    const current = await options.store.getContinuation(options.taskId);
+    if (!current)
+        throw new Error('Form is not awaiting input');
+    equal(expected, current.binding);
+    const request = record(current.inputRequests[expected.inputKey]);
+    const answer = bindOpenAiFormReply(expected, request.schema, options.reply);
+    if (!(await options.authorize()))
+        throw new Error('Form access denied');
+    await options.store.updateTask(options.taskId, {
+        [expected.inputKey]: answer,
+    });
+}
+//# sourceMappingURL=forms-server.js.map

package/dist/forms-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forms-server.js","sourceRoot":"","sources":["../src/forms-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,qFAAqF;AACrF,OAAO,EACL,mBAAmB,GAEpB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,sBAAsB,EAEtB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAU3D,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,CAAC,KAAK,CAAC,CAAC;IACZ,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;IAC9C,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC;QAC/B,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC;QAC/B,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC;KAChC,CAAC;AACJ,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QACpC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aAClB,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAChD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAChD,CAAC;IACJ,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,YAAY,CAAC,MAAe;IACnC,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;SAC7D,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AACD,SAAS,KAAK,CAAC,CAAc,EAAE,CAAc;IAC3C,IACE,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;QACzB,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;QACzB,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;QAEzB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;AAC1D,CAAC;AACD,uFAAuF;AACvF,MAAM,UAAU,mBAAmB,CACjC,QAAqB,EACrB,MAAe,EACf,KAAc;IAEd,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC;QAC1B,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC;QAClC,KAAK,EAAE,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC;KAC9C,CAAC;AACJ,CAAC;AACD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAI,OAc3C;IACC,MAAM,OAAO,GAAG,4BAA4B,EAAE,CAAC;IAC/C,IAAI,CAAC,OAAO,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;QACjE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAC5B,OAAO,CAAC;QACN,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;QAClC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;QAClC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;KACnC,CAAC,CACH,CAAC;IACF,IACE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,IAAI,CAAC,CAAC;QACjE,CAAC,OAAO,CAAC,iBAAiB;QAE1B,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;IAC3E,OAAO,mBAAmB,CAAC;QACzB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,WAAW,EAAE,IAA0C;QACvD,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;YACpC,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;YACrD,IAAI,QAAQ,CAAC,YAAY,KAAK,YAAY,CAAC,IAAI,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3C,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACzB,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC5D,KAAK,MAAM,GAAG,IAAI,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAC;gBACnD,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;oBACrD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC9C,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAC3C,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACxC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC5C,OAAO;gBACL,MAAM,EAAE,QAAiB;gBACzB,KAAK,EAAE,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC;aACzD,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAYD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAMtC;IACC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5D,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5E,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxE,MAAM,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE;QAC7C,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM;KAC5B,CAAC,CAAC;AACL,CAAC"}

package/dist/forms-view.d.ts

@@ -0,0 +1,14 @@
+import { type OpenAiFormReply } from './forms.js';
+/**
+ * Functional application-form fallback. Text is rendered inertly; no remote
+ * thumbnails are loaded and no credentials/native file paths are requested.
+ * Submit must call the authenticated owning application route, which persists
+ * the bound reply through submitOpenAiForm. This renderer confers no authority.
+ */
+export declare function renderOpenAiForm(container: HTMLElement, options: {
+    schema: unknown;
+    submit: (reply: OpenAiFormReply) => Promise<void>;
+}): {
+    dispose: () => void;
+};
+//# sourceMappingURL=forms-view.d.ts.map

package/dist/forms-view.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forms-view.d.ts","sourceRoot":"","sources":["../src/forms-view.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,eAAe,EAGrB,MAAM,YAAY,CAAC;AACpB;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,WAAW,EACtB,OAAO,EAAE;IACP,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD,GACA;IAAE,OAAO,EAAE,MAAM,IAAI,CAAA;CAAE,CA6KzB"}