npm - @kontourai/survey - Versions diffs - 1.0.0 → 1.1.1 - Mend

@kontourai/survey 1.0.0 → 1.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (17) hide show

package/dist/src/console/review-console-server.js CHANGED Viewed

@@ -175,7 +175,7 @@ function buildConsoleHtml(sessionPath) {
     // workbench.js lives at dist/src/review-workbench/review-workbench.js relative to distRoot
     const workbenchJsPath = "/dist/src/review-workbench/review-workbench.js";
     const workbenchCssPath = "/dist/src/review-workbench/review-workbench.css";
-    const tokensIndexPath = "/dist/src/review-workbench/vendor/console-kit/tokens/index.css";
+    const tokensIndexPath = "/dist/src/review-workbench/vendor/kontourai-ui/tokens/index.css";
     return `<!doctype html>
 <html lang="en" class="theme-survey">
 <head>
@@ -293,9 +293,11 @@ body {
 <body>
 <header class="console-topbar" role="banner">
   <div class="console-topbar-logo">
-    <svg width="14" height="14" viewBox="0 0 14 14" fill="none" xmlns="http://www.w3.org/2000/svg" aria-hidden="true">
-      <rect width="14" height="14" rx="3" fill="#5ce0c6" fill-opacity="0.15"/>
-      <path d="M3.5 7.2L5.9 9.8L10.5 4.5" stroke="#5ce0c6" stroke-width="1.6" stroke-linecap="round" stroke-linejoin="round"/>
+    <svg class="product-mark" width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="Survey product mark">
+      <circle cx="10" cy="10" r="5.5"/>
+      <path d="M14 14 19.5 19.5"/>
+      <path d="M7.6 9H12.4"/>
+      <path d="M7.6 11.2H11.2"/>
     </svg>
     Survey Review Console
   </div>

package/dist/src/index.d.ts CHANGED Viewed

@@ -7,8 +7,6 @@ export { reviewedCandidateResolution } from "./reviewed-candidate-resolution.js"
 export type { ReviewedCandidateResolutionInput } from "./reviewed-candidate-resolution.js";
 export { reviewedCurrentProposedResolution } from "./reviewed-current-proposed-resolution.js";
 export type { CurrentProposedCandidateRole, ReviewedCurrentProposedResolutionInput, } from "./reviewed-current-proposed-resolution.js";
-export { flowTrustArtifactFromReviewOutcome } from "./to-flow-artifact.js";
-export type { FlowTrustArtifact, FlowTrustArtifactOptions } from "./to-flow-artifact.js";
 export { buildSurveyTrustBundle } from "./to-surface.js";
 export type { BuildSurveyTrustBundleOptions } from "./to-surface.js";
 export { buildSurveyLearningProjections } from "./learning-projections.js";

package/dist/src/index.js CHANGED Viewed

@@ -2,7 +2,6 @@ export { reviewResourceApiVersion } from "./review-resource.js";
 export { candidateReviewRecord, SurveyInputBuilder } from "./builder.js";
 export { reviewedCandidateResolution } from "./reviewed-candidate-resolution.js";
 export { reviewedCurrentProposedResolution } from "./reviewed-current-proposed-resolution.js";
-export { flowTrustArtifactFromReviewOutcome } from "./to-flow-artifact.js";
 export { buildSurveyTrustBundle } from "./to-surface.js";
 export { buildSurveyLearningProjections } from "./learning-projections.js";
 export { buildCanonicalReviewProofPayload, buildReviewProofAnchor, canonicalReviewProofJson, hashCanonicalReviewProofPayload, REVIEW_PROOF_CONTRACT_VERSION, REVIEW_PROOF_PACKAGE_NAME, REVIEW_PROOF_SCHEMA, REVIEW_PROOF_SCHEMA_VERSION, } from "./review-proof.js";

package/dist/src/mcp/review-mcp.js CHANGED Viewed

@@ -14,6 +14,17 @@ import { createServerReviewSessionRecord, deriveServerReviewSessionApplyResult,
  */
 const PROTOCOL_VERSION = "2025-06-18";
 const SESSION_NAME = "mcp-review-session";
+// MCP Apps extension (SEP-1865). The review card is offered under both UI
+// conventions so one server renders across hosts: the existing mcp-ui.dev
+// embedded resource in tool results, AND a declared `ui://` resource that the
+// official Apps hosts (ChatGPT/Claude) and Station's SEP-1865 resolver read via
+// resources/read. The canonical pointer is the FLAT `_meta["ui/resourceUri"]`
+// key (what registerAppTool emits); the nested `_meta.ui.resourceUri` is the
+// convenience shape some hosts read — we emit both.
+const UI_RESOURCE_URI_META_KEY = "ui/resourceUri";
+const UI_CAPABILITY_EXTENSION = "io.modelcontextprotocol/ui";
+const QUEUE_PANEL_URI = "ui://survey/review-card/queue";
+const UI_RESOURCE_MIME = "text/html;profile=mcp-app";
 // MCP tool decision strings → ReviewWorkbenchDecision
 const MCP_DECISION_MAP = {
     accept: "accept-proposed",
@@ -420,6 +431,15 @@ function buildUiResource(item, snapshot, events, instance) {
         },
     };
 }
+// Render the SEP-1865 declared review card: load the configured session, replay
+// to current state, and render the active item's card HTML (the same HTML the
+// embedded `queue` resource carries — here served via resources/read).
+async function readQueuePanelHtml(options) {
+    const { snapshot, events } = await readSessionFile(options.sessionPath);
+    const current = events.length > 0 ? replayReviewSessionEvents(snapshot, events) : snapshot;
+    const activeItem = currentReviewItem(current);
+    return buildReviewCardHtml(activeItem, snapshot, events);
+}
 // ---- Domain error (maps to isError:true, not a JSON-RPC error) -----------
 class DomainError extends Error {
     isDomainError = true;
@@ -446,7 +466,14 @@ async function handleLine(line, options, serverVersion) {
                 id,
                 result: {
                     protocolVersion: PROTOCOL_VERSION,
-                    capabilities: { tools: { listChanged: false } },
+                    capabilities: {
+                        tools: { listChanged: false },
+                        // Resources back the SEP-1865 ui:// review card (unless --no-ui).
+                        ...(options.noUi ? {} : { resources: { listChanged: false } }),
+                        ...(options.noUi
+                            ? {}
+                            : { extensions: { [UI_CAPABILITY_EXTENSION]: {} } }),
+                    },
                     serverInfo: { name: "survey-review-mcp", title: "Survey Review MCP", version: serverVersion },
                     instructions: "Use survey_review_queue to inspect the queue, survey_review_item to drill into a single item, and survey_review_decide to record a decision. Decisions are persisted to the session file and are irreversible within this session.",
                 },
@@ -466,6 +493,15 @@ async function handleLine(line, options, serverVersion) {
                             title: "Review queue",
                             description: "Return a text summary and JSON of the current review queue: all items with their status (pending, in-review, resolved, rejected, escalated), the active item, resolved/total counts, and session summary totals.",
                             inputSchema: { type: "object", properties: {} },
+                            // SEP-1865 UI pointer (both flat canonical + nested), unless --no-ui.
+                            ...(options.noUi
+                                ? {}
+                                : {
+                                    _meta: {
+                                        [UI_RESOURCE_URI_META_KEY]: QUEUE_PANEL_URI,
+                                        ui: { resourceUri: QUEUE_PANEL_URI, visibility: ["model", "app"] },
+                                    },
+                                }),
                         },
                         {
                             name: "survey_review_item",
@@ -501,6 +537,37 @@ async function handleLine(line, options, serverVersion) {
                 },
             });
         }
+        else if (method === "resources/list") {
+            send({
+                jsonrpc: "2.0",
+                id,
+                result: {
+                    resources: options.noUi
+                        ? []
+                        : [
+                            {
+                                uri: QUEUE_PANEL_URI,
+                                name: "Survey review workbench",
+                                description: "Interactive review card for the active item in the configured review session (MCP Apps UI resource).",
+                                mimeType: UI_RESOURCE_MIME,
+                            },
+                        ],
+                },
+            });
+        }
+        else if (method === "resources/read") {
+            const uri = typeof params?.uri === "string" ? params.uri : "";
+            if (options.noUi || uri !== QUEUE_PANEL_URI) {
+                send({ jsonrpc: "2.0", id, error: { code: -32602, message: `Unknown resource: ${uri || "(missing uri)"}` } });
+                return;
+            }
+            const html = await readQueuePanelHtml(options);
+            send({
+                jsonrpc: "2.0",
+                id,
+                result: { contents: [{ uri: QUEUE_PANEL_URI, mimeType: UI_RESOURCE_MIME, text: html }] },
+            });
+        }
         else if (method === "tools/call") {
             const name = typeof params?.name === "string" ? params.name : "";
             const toolArgs = (params?.arguments ?? {});

package/dist/src/review-workbench/canonical.d.ts ADDED Viewed

@@ -0,0 +1,7 @@
+/**
+ * Normalize a value into a deterministic, order-independent form: object keys
+ * sorted, `undefined`-valued keys dropped, Dates rendered as ISO strings.
+ */
+export declare function canonicalize(value: unknown): unknown;
+/** Deterministic JSON string for hashing or structural comparison. */
+export declare function canonicalJson(value: unknown): string;

package/dist/src/review-workbench/canonical.js ADDED Viewed

@@ -0,0 +1,32 @@
+// Single canonical JSON serializer shared by the review-workbench structural
+// comparison (`structuralEqual`) and the server-side snapshot hashing, so the
+// same object always produces the same canonical string and hash.
+//
+// Previously two near-identical copies lived in review-workbench.ts and
+// server-review-session.ts and disagreed on Date handling — the workbench copy
+// turned a Date into `{}` (no own enumerable keys), while the server copy used
+// the ISO string. That desynced `structuralEqual` from snapshot freshness/replay
+// hashes for any object carrying a Date (audit 2026-06-28, ops#24).
+/**
+ * Normalize a value into a deterministic, order-independent form: object keys
+ * sorted, `undefined`-valued keys dropped, Dates rendered as ISO strings.
+ */
+export function canonicalize(value) {
+    if (value instanceof Date) {
+        return value.toISOString();
+    }
+    if (Array.isArray(value)) {
+        return value.map((entry) => canonicalize(entry));
+    }
+    if (value && typeof value === "object") {
+        const entries = Object.entries(value)
+            .filter(([, entryValue]) => entryValue !== undefined)
+            .sort(([left], [right]) => left.localeCompare(right));
+        return Object.fromEntries(entries.map(([key, entryValue]) => [key, canonicalize(entryValue)]));
+    }
+    return value;
+}
+/** Deterministic JSON string for hashing or structural comparison. */
+export function canonicalJson(value) {
+    return JSON.stringify(canonicalize(value));
+}

package/dist/src/review-workbench/review-presentation.js CHANGED Viewed

@@ -22,7 +22,7 @@ export function buildReviewCandidatePresentation(item, candidate, adapter = {},
         roleLabel: adapter.labelForCandidateRole?.(candidate.role, context) ?? defaultCandidateRoleLabel(candidate.role),
         valueLabel: targetLabel,
         valueText: adapter.summarizeValue?.(candidate.value, { ...context, value: candidate.value }) ?? formatValue(candidate.value),
-        sourceLabel: "Source",
+        sourceLabel: "Source Reference",
         sourceText: sourceLink?.label ?? sourceRef,
         sourceLink,
         traceRefs: traceRefsForCandidate(item, candidate, adapter),
@@ -78,7 +78,7 @@ function traceRefsForCandidate(item, candidate, adapter) {
             kind: "claim",
         },
         {
-            label: "Source ID",
+            label: "Raw Source ID",
             value: candidate.source.sourceId ?? candidate.source.sourceRef,
             kind: "source",
         },

package/dist/src/review-workbench/review-surface-preview.js CHANGED Viewed

@@ -92,7 +92,7 @@ function buildIntegrityPosture(item, candidate, projection) {
     };
 }
 function postureDisclaimer() {
-    return "Survey records source and review posture for projection; it does not validate real-world truth.";
+    return "Survey records Raw Source, Source Reference, and review posture for projection; it does not validate real-world truth.";
 }
 function sourceAuthorityFromProducer(value) {
     if (!isRecord(value)) {
@@ -115,7 +115,7 @@ function portableAuthorityTrace(value) {
     return {
         status: "empty",
         label: "Empty / not provided",
-        detail: "No portable authority trace is present. SourceAuthority metadata is shown as source evidence and is not promoted into authorityTrace.",
+        detail: "No portable authority trace is present. SourceAuthority metadata is shown with Raw Source and Source Reference posture and is not promoted into authorityTrace.",
     };
 }
 function isRecord(value) {

package/dist/src/review-workbench/review-workbench.js CHANGED Viewed

@@ -1,3 +1,4 @@
+import { canonicalJson } from "./canonical.js";
 import { candidateForDecision, buildReviewSessionEvent, buildReviewSessionEvents, buildReviewSessionResource, currentReviewItem, currentReviewWorkbenchState, defaultReviewSessionName, deriveQueueRowStatus, initialReviewQueueSessionState, nextUnresolvedItemName, replayReviewSessionEvents, reviewSessionSummary, reviewWorkbenchSessionStorageKey, selectedCandidateRole, workbenchDecisionDefinitions, } from "./review-queue-session.js";
 import { validateReviewSessionEventsForSnapshot, } from "./review-session-replay.js";
 import { buildSurfaceProjectionPreview, formatValue, } from "./review-surface-preview.js";
@@ -229,19 +230,7 @@ function matchingSelectedCandidate(item, result) {
         : undefined;
 }
 function structuralEqual(left, right) {
-    return JSON.stringify(canonicalJson(left)) === JSON.stringify(canonicalJson(right));
-}
-function canonicalJson(value) {
-    if (!value || typeof value !== "object") {
-        return value;
-    }
-    if (Array.isArray(value)) {
-        return value.map(canonicalJson);
-    }
-    return Object.fromEntries(Object.entries(value)
-        .filter(([, entry]) => entry !== undefined)
-        .sort(([left], [right]) => left.localeCompare(right))
-        .map(([key, entry]) => [key, canonicalJson(entry)]));
+    return canonicalJson(left) === canonicalJson(right);
 }
 export function buildReviewWorkbenchResultsFromSession(session) {
     return session.items.flatMap((item) => {
@@ -653,7 +642,7 @@ function renderReviewFocus(state, presentationAdapter) {
       </div>
       <dl class="focus-evidence">
         ${fieldItem("Target", presentation.targetLabel)}
-        ${fieldItem("Proposed source", proposed.source.sourceRef)}
+        ${fieldItem("Proposed Source Reference", proposed.source.sourceRef)}
         ${fieldItemClamped("Proposed excerpt", proposed.locator?.excerpt ?? "none", "excerpt")}
       </dl>
     </section>
@@ -745,7 +734,7 @@ function renderPendingSurfacePreview() {
         <span class="surface-summary-label">Surface preview</span>
         <span class="state-label">pending</span>
       </summary>
-      <p class="preview-disclaimer">Choose a review decision to preview the source and review posture that would project toward Surface.</p>
+      <p class="preview-disclaimer">Choose a review decision to preview the Raw Source, Source Reference, and review posture that would project toward Surface.</p>
     </details>
   `;
 }
@@ -852,12 +841,12 @@ function renderCandidateHistory(preview) {
 function renderSourceEvidence(preview) {
     // Excerpt uses a 3-line clamp wrapper with a toggle button.
     const clampedExcerptHtml = fieldItemClamped("Excerpt", preview.sourceEvidence.excerpt, "excerpt");
-    // Build source evidence section with clamped excerpt inline
+    // Build Raw Source section with clamped excerpt inline.
     return `
     <section class="preview-section" data-testid="surface-source-evidence">
-      <h3>${escapeHtml("Source evidence")}</h3>
+      <h3>${escapeHtml("Raw Source")}</h3>
       <dl class="field-stack compact">
-        ${fieldItem("Source URL", preview.sourceEvidence.sourceRef)}
+        ${fieldItem("Source Reference", preview.sourceEvidence.sourceRef)}
         ${clampedExcerptHtml}
         ${fieldItem("Extractor", preview.sourceEvidence.extractor)}
         ${fieldItem("Observed", preview.sourceEvidence.observedAt)}
@@ -868,7 +857,7 @@ function renderSourceEvidence(preview) {
     ].join("") : ""}
       </dl>
       ${renderReferenceDetails([
-        ["Source ID", preview.sourceEvidence.sourceId],
+        ["Raw Source ID", preview.sourceEvidence.sourceId],
         ["Extraction ID", preview.sourceEvidence.extractionId],
     ])}
     </section>
@@ -1194,7 +1183,7 @@ function renderCandidateCard(candidate, state, presentationAdapter) {
         <p class="field-value">${escapeHtml(presentation.valueText)}</p>
       </div>
       <dl class="field-stack">
-        ${fieldItem("Source URL", presentation.sourceText)}
+        ${fieldItem(presentation.sourceLabel, presentation.sourceText)}
         ${fieldItem("Locator", candidate.locator?.locator ?? candidate.locator?.scheme ?? "none")}
         ${fieldItemClamped("Excerpt", candidate.locator?.excerpt ?? "none", "excerpt")}
         ${fieldItem("Extraction confidence", confidence === undefined ? "unknown" : formatConfidence(confidence))}

package/dist/src/review-workbench/server-review-session.js CHANGED Viewed

@@ -1,6 +1,7 @@
 import { createHash } from "node:crypto";
 import { deriveReviewSessionApplyResultForSnapshot, } from "./review-workbench.js";
 import { validateReviewSessionEventsForSnapshot, } from "./review-session-replay.js";
+import { canonicalJson } from "./canonical.js";
 export class StaleServerReviewSessionError extends Error {
     name = "StaleServerReviewSessionError";
     issues;
@@ -107,24 +108,6 @@ function staleIssuesForComparison(comparison) {
     }
     return issues;
 }
-function canonicalJson(value) {
-    return JSON.stringify(canonicalize(value));
-}
-function canonicalize(value) {
-    if (value instanceof Date) {
-        return value.toISOString();
-    }
-    if (Array.isArray(value)) {
-        return value.map((entry) => canonicalize(entry));
-    }
-    if (value && typeof value === "object") {
-        const entries = Object.entries(value)
-            .filter(([, entryValue]) => entryValue !== undefined)
-            .sort(([left], [right]) => left.localeCompare(right));
-        return Object.fromEntries(entries.map(([key, entryValue]) => [key, canonicalize(entryValue)]));
-    }
-    return value;
-}
 function sha256(value) {
     return createHash("sha256").update(value).digest("hex");
 }

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@kontourai/survey",
-  "version": "1.0.0",
+  "version": "1.1.1",
   "description": "Producer-side source, extraction, candidate, and review contracts for projecting verified claims into Surface.",
   "license": "Apache-2.0",
   "type": "module",
@@ -80,7 +80,7 @@
   },
   "devDependencies": {
     "@anthropic-ai/sdk": "^0.54.0",
-    "@kontourai/console-kit": "^0.1.0",
+    "@kontourai/ui": "^1.1.0",
     "@playwright/test": "^1.60.0",
     "@types/node": "^25.6.0",
     "marked": "^16.4.2",

package/dist/src/to-flow-artifact.d.ts DELETED Viewed

@@ -1,41 +0,0 @@
-import type { ReviewOutcome, ReviewStatus } from "./types.js";
-/**
- * The neutral trust-artifact shape Kontour Flow consumes through
- * `flow attach-evidence --trust-artifact`. Flow evaluates only these fields
- * plus its own definition and project config; Survey stays the producer-side
- * authority for what the review actually decided.
- */
-export interface FlowTrustArtifact {
-    schema_version: "0.1";
-    artifact_type: "trust-report";
-    subject: string;
-    producer: string;
-    status: string;
-    issued_at: string;
-    authority_traces: string[];
-    claims: Array<{
-        type: string;
-        subject: string;
-        status: string;
-    }>;
-}
-export interface FlowTrustArtifactOptions {
-    /** Flow claim type the gate expects, e.g. "adversarial.review". */
-    claimType: string;
-    /** Flow claim subject the gate expects, e.g. "adversarial-pass.review". */
-    subject: string;
-    /** Producer identity recorded on the artifact, e.g. "survey/adversarial-workbench". */
-    producer: string;
-    /** Defaults to the review outcome's reviewedAt, then the current time. */
-    issuedAt?: string;
-    /** Defaults to ["survey:review-outcome/<outcome id>"]. */
-    authorityTraces?: string[];
-    /** Override the ReviewStatus -> artifact status projection per entry. */
-    statusMap?: Partial<Record<ReviewStatus, string>>;
-}
-/**
- * Projects a Survey ReviewOutcome into the neutral trust artifact Flow
- * consumes, so a per-round review (including an adversarial pass) can satisfy
- * or fail a Flow gate without Flow learning Survey vocabulary.
- */
-export declare function flowTrustArtifactFromReviewOutcome(outcome: ReviewOutcome, options: FlowTrustArtifactOptions): FlowTrustArtifact;

package/dist/src/to-flow-artifact.js DELETED Viewed

@@ -1,31 +0,0 @@
-const defaultStatusMap = {
-    verified: "trusted",
-    assumed: "assumed",
-    proposed: "proposed",
-    rejected: "rejected",
-};
-/**
- * Projects a Survey ReviewOutcome into the neutral trust artifact Flow
- * consumes, so a per-round review (including an adversarial pass) can satisfy
- * or fail a Flow gate without Flow learning Survey vocabulary.
- */
-export function flowTrustArtifactFromReviewOutcome(outcome, options) {
-    if (!outcome.id) {
-        throw new Error("flowTrustArtifactFromReviewOutcome requires a review outcome id");
-    }
-    const statusMap = { ...defaultStatusMap, ...options.statusMap };
-    const status = statusMap[outcome.status];
-    if (!status) {
-        throw new Error(`flowTrustArtifactFromReviewOutcome: unmapped review status '${outcome.status}'`);
-    }
-    return {
-        schema_version: "0.1",
-        artifact_type: "trust-report",
-        subject: options.subject,
-        producer: options.producer,
-        status,
-        issued_at: options.issuedAt ?? outcome.reviewedAt ?? new Date().toISOString(),
-        authority_traces: options.authorityTraces ?? [`survey:review-outcome/${outcome.id}`],
-        claims: [{ type: options.claimType, subject: options.subject, status }],
-    };
-}

/package/dist/src/review-workbench/vendor/{console-kit → kontourai-ui}/tokens/fonts.css RENAMED Viewed

File without changes

/package/dist/src/review-workbench/vendor/{console-kit → kontourai-ui}/tokens/index.css RENAMED Viewed

File without changes

/package/dist/src/review-workbench/vendor/{console-kit → kontourai-ui}/tokens/themes.css RENAMED Viewed

File without changes

/package/dist/src/review-workbench/vendor/{console-kit → kontourai-ui}/tokens/tokens.css RENAMED Viewed

File without changes