@miragon/mcp-toolkit-core 0.10.1

package/dist/framework/dashboard-store.d.ts

@@ -0,0 +1,136 @@
+import type { PipelineStepRef } from "../types/pipeline.js";
+import type { LayoutConfig } from "./layout-types.js";
+/**
+ * Current on-disk schema version stamped onto every saved record. Bump this
+ * whenever the persisted shape changes in a way a loader would need to
+ * migrate. Records persisted before versioning carry no `schemaVersion`
+ * (treated as the implicit version 0).
+ */
+export declare const DASHBOARD_SCHEMA_VERSION = 1;
+/**
+ * Persisted dashboard = full `render-view` input plus identity and
+ * ownership metadata. The server generates `id`, `createdAt`, `updatedAt`;
+ * `userId` is copied from `ctx.auth.user.userId` on save when present.
+ */
+export interface DashboardRecord {
+    id: string;
+    name: string;
+    description?: string;
+    /** Owner; omitted when the host boots without OAuth (global scope). */
+    userId?: string;
+    keys?: Record<string, unknown>;
+    steps?: PipelineStepRef[];
+    layout: LayoutConfig;
+    title?: string;
+    /**
+     * On-disk schema version, set to {@link DASHBOARD_SCHEMA_VERSION} on every
+     * save. Optional so records written before versioning still type-check;
+     * loaders treat its absence as version 0.
+     */
+    schemaVersion?: number;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface DashboardSaveInput {
+    id?: string;
+    name: string;
+    description?: string;
+    userId?: string;
+    keys?: Record<string, unknown>;
+    steps?: PipelineStepRef[];
+    layout: LayoutConfig;
+    title?: string;
+}
+export interface DashboardListFilter {
+    userId?: string;
+}
+/** Summary view returned by `list` — full layout body deliberately omitted. */
+export interface DashboardSummary {
+    id: string;
+    name: string;
+    description?: string;
+    title?: string;
+    updatedAt: string;
+}
+/**
+ * Persistence backing for dashboards. The framework is indifferent to how
+ * records are stored — consumers inject whichever implementation fits
+ * their deployment (in-memory for tests, filesystem for local dev, a DB-
+ * backed one for production).
+ *
+ * All methods accept an optional `userId` filter so implementations can
+ * enforce ownership. Implementations that don't need ownership (global
+ * scope) should simply ignore the filter.
+ *
+ * `save` carries the acting user as `input.userId`: updating an existing
+ * record owned by a different user is rejected with
+ * {@link DashboardOwnershipError}, and `input.userId` can never reassign an
+ * existing record's owner. Records persisted without a `userId` (global
+ * scope) stay writable by anyone, matching the read/delete convention.
+ */
+export interface DashboardStore {
+    save(input: DashboardSaveInput): Promise<DashboardRecord>;
+    list(filter: DashboardListFilter): Promise<DashboardSummary[]>;
+    get(id: string, filter: DashboardListFilter): Promise<DashboardRecord | undefined>;
+    delete(id: string, filter: DashboardListFilter): Promise<boolean>;
+}
+/**
+ * Validate a value read back from persistence into a {@link DashboardRecord},
+ * or `undefined` when it isn't one this version can safely use.
+ *
+ * Untrusted disk state is otherwise cast straight to `DashboardRecord`, so a
+ * corrupt or partial file (e.g. a missing `updatedAt`) slips through and later
+ * crashes `list` (its `updatedAt.localeCompare` sort) or feeds garbage into
+ * `render-view`. This is the single fail-soft gate: a record that fails the
+ * schema — or carries a `schemaVersion` newer than this build understands — is
+ * rejected here so callers skip it instead of trusting it.
+ *
+ * Exported for unit testing.
+ */
+export declare function parseDashboardRecord(raw: unknown): DashboardRecord | undefined;
+/**
+ * Error thrown by `save()` when an update would touch a record the caller
+ * doesn't own, or would change a record's owner. Distinct from the
+ * fail-soft "not found" of `get`/`delete` (which return `undefined`/`false`)
+ * because `save` has no nullable return — a write that violates ownership is
+ * an explicit denial, not a silent no-op.
+ */
+export declare class DashboardOwnershipError extends Error {
+    constructor(message: string);
+}
+/**
+ * Resolve the record to persist for a `save`, enforcing ownership on updates.
+ *
+ * - New record (no `existing`): returns `null`, signalling the caller to
+ *   create from `input`.
+ * - Update (`existing` present): throws {@link DashboardOwnershipError} when
+ *   `input.userId` doesn't own `existing`, otherwise returns the merged
+ *   record with `id`, `createdAt`, and — critically — `existing.userId`
+ *   preserved so `input.userId` can never reassign the owner.
+ *
+ * Records without a `userId` (global scope, e.g. a host booted without OAuth)
+ * are deliberately writable by anyone — same convention `ownedBy` uses for
+ * read/delete — so single-user and OAuth-less deployments keep working.
+ *
+ * Exported for unit testing; the store factories below are the public API.
+ */
+export declare function resolveSavedRecord(existing: DashboardRecord | undefined, input: DashboardSaveInput, now: string): DashboardRecord | null;
+/**
+ * Process-local in-memory store. Fine for tests and throwaway demos; loses
+ * everything on restart. Default when `createFrameworkApp` is called
+ * without an explicit `dashboardStore`.
+ */
+export declare function createInMemoryDashboardStore(): DashboardStore;
+export interface FileSystemDashboardStoreOptions {
+    /** Directory where `<id>.json` files are written. Created on first save. */
+    dir: string;
+}
+/**
+ * Dashboards stored as one JSON file per record under `dir`. Suitable for
+ * single-node deployments that need survival across restarts. Locking is
+ * advisory: concurrent writes of the same id can race — fine for the v1
+ * "single user clicking Save" workflow, not fine for multi-writer
+ * production.
+ */
+export declare function createFileSystemDashboardStore(options: FileSystemDashboardStoreOptions): DashboardStore;
+//# sourceMappingURL=dashboard-store.d.ts.map

package/dist/framework/dashboard-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-store.d.ts","sourceRoot":"","sources":["../../src/framework/dashboard-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAGrD;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,IAAI,CAAA;AAEzC;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,KAAK,CAAC,EAAE,eAAe,EAAE,CAAA;IACzB,MAAM,EAAE,YAAY,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,KAAK,CAAC,EAAE,eAAe,EAAE,CAAA;IACzB,MAAM,EAAE,YAAY,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,+EAA+E;AAC/E,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACzD,IAAI,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAA;IAC9D,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAAA;IAClF,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAClE;AA2BD;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,eAAe,GAAG,SAAS,CAO9E;AAYD;;;;;;GAMG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,eAAe,GAAG,SAAS,EACrC,KAAK,EAAE,kBAAkB,EACzB,GAAG,EAAE,MAAM,GACV,eAAe,GAAG,IAAI,CAgBxB;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,IAAI,cAAc,CAuD7D;AAED,MAAM,WAAW,+BAA+B;IAC9C,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAA;CACZ;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,+BAA+B,GACvC,cAAc,CA0GhB"}

package/dist/framework/dashboard-store.js

@@ -0,0 +1,301 @@
+import fs from "node:fs/promises";
+import path from "node:path";
+import { randomUUID } from "node:crypto";
+import { z } from "zod";
+import { layoutSchema } from "./layout-schemas.js";
+/**
+ * Current on-disk schema version stamped onto every saved record. Bump this
+ * whenever the persisted shape changes in a way a loader would need to
+ * migrate. Records persisted before versioning carry no `schemaVersion`
+ * (treated as the implicit version 0).
+ */
+export const DASHBOARD_SCHEMA_VERSION = 1;
+const stepRefSchema = z.object({
+    id: z.string(),
+    step: z.string(),
+    optional: z.boolean().optional(),
+});
+/**
+ * Runtime shape of a persisted dashboard. Kept in sync with
+ * {@link DashboardRecord}; `layout` reuses {@link layoutSchema} so a stored
+ * record and a fresh `render-view` layout validate against the same contract.
+ */
+const dashboardRecordSchema = z.object({
+    id: z.string(),
+    name: z.string(),
+    description: z.string().optional(),
+    userId: z.string().optional(),
+    keys: z.record(z.string(), z.unknown()).optional(),
+    steps: z.array(stepRefSchema).optional(),
+    layout: layoutSchema,
+    title: z.string().optional(),
+    schemaVersion: z.number().optional(),
+    createdAt: z.string(),
+    updatedAt: z.string(),
+});
+/**
+ * Validate a value read back from persistence into a {@link DashboardRecord},
+ * or `undefined` when it isn't one this version can safely use.
+ *
+ * Untrusted disk state is otherwise cast straight to `DashboardRecord`, so a
+ * corrupt or partial file (e.g. a missing `updatedAt`) slips through and later
+ * crashes `list` (its `updatedAt.localeCompare` sort) or feeds garbage into
+ * `render-view`. This is the single fail-soft gate: a record that fails the
+ * schema — or carries a `schemaVersion` newer than this build understands — is
+ * rejected here so callers skip it instead of trusting it.
+ *
+ * Exported for unit testing.
+ */
+export function parseDashboardRecord(raw) {
+    const result = dashboardRecordSchema.safeParse(raw);
+    if (!result.success)
+        return undefined;
+    // A record written by a newer build may use fields/semantics this version
+    // can't honour — refuse it rather than silently mis-reading it.
+    if ((result.data.schemaVersion ?? 0) > DASHBOARD_SCHEMA_VERSION)
+        return undefined;
+    return result.data;
+}
+function nowIso() {
+    return new Date().toISOString();
+}
+function ownedBy(record, userId) {
+    if (!userId)
+        return true;
+    if (!record.userId)
+        return true;
+    return record.userId === userId;
+}
+/**
+ * Error thrown by `save()` when an update would touch a record the caller
+ * doesn't own, or would change a record's owner. Distinct from the
+ * fail-soft "not found" of `get`/`delete` (which return `undefined`/`false`)
+ * because `save` has no nullable return — a write that violates ownership is
+ * an explicit denial, not a silent no-op.
+ */
+export class DashboardOwnershipError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "DashboardOwnershipError";
+    }
+}
+/**
+ * Resolve the record to persist for a `save`, enforcing ownership on updates.
+ *
+ * - New record (no `existing`): returns `null`, signalling the caller to
+ *   create from `input`.
+ * - Update (`existing` present): throws {@link DashboardOwnershipError} when
+ *   `input.userId` doesn't own `existing`, otherwise returns the merged
+ *   record with `id`, `createdAt`, and — critically — `existing.userId`
+ *   preserved so `input.userId` can never reassign the owner.
+ *
+ * Records without a `userId` (global scope, e.g. a host booted without OAuth)
+ * are deliberately writable by anyone — same convention `ownedBy` uses for
+ * read/delete — so single-user and OAuth-less deployments keep working.
+ *
+ * Exported for unit testing; the store factories below are the public API.
+ */
+export function resolveSavedRecord(existing, input, now) {
+    if (!existing)
+        return null;
+    if (!ownedBy(existing, input.userId)) {
+        throw new DashboardOwnershipError(`Access denied: dashboard "${existing.id}" is owned by another user.`);
+    }
+    return {
+        ...existing,
+        ...stripUndefined(input),
+        id: existing.id,
+        userId: existing.userId,
+        schemaVersion: DASHBOARD_SCHEMA_VERSION,
+        createdAt: existing.createdAt,
+        updatedAt: now,
+    };
+}
+/**
+ * Process-local in-memory store. Fine for tests and throwaway demos; loses
+ * everything on restart. Default when `createFrameworkApp` is called
+ * without an explicit `dashboardStore`.
+ */
+export function createInMemoryDashboardStore() {
+    const byId = new Map();
+    return {
+        save(input) {
+            // Resolve-then-compute so a synchronous ownership violation surfaces as
+            // a rejected promise (matching the `Promise<DashboardRecord>` contract
+            // and the filesystem store), not a throw escaping the call site.
+            return Promise.resolve().then(() => {
+                const now = nowIso();
+                const existing = input.id ? byId.get(input.id) : undefined;
+                const record = resolveSavedRecord(existing, input, now) ?? {
+                    id: input.id ?? randomUUID(),
+                    name: input.name,
+                    description: input.description,
+                    userId: input.userId,
+                    keys: input.keys,
+                    steps: input.steps,
+                    layout: input.layout,
+                    title: input.title,
+                    schemaVersion: DASHBOARD_SCHEMA_VERSION,
+                    createdAt: now,
+                    updatedAt: now,
+                };
+                byId.set(record.id, record);
+                return record;
+            });
+        },
+        list(filter) {
+            const all = [...byId.values()].filter((r) => ownedBy(r, filter.userId));
+            all.sort((a, b) => b.updatedAt.localeCompare(a.updatedAt));
+            return Promise.resolve(all.map((r) => ({
+                id: r.id,
+                name: r.name,
+                description: r.description,
+                title: r.title,
+                updatedAt: r.updatedAt,
+            })));
+        },
+        get(id, filter) {
+            const record = byId.get(id);
+            if (!record)
+                return Promise.resolve(undefined);
+            if (!ownedBy(record, filter.userId))
+                return Promise.resolve(undefined);
+            return Promise.resolve(record);
+        },
+        delete(id, filter) {
+            const record = byId.get(id);
+            if (!record)
+                return Promise.resolve(false);
+            if (!ownedBy(record, filter.userId))
+                return Promise.resolve(false);
+            byId.delete(id);
+            return Promise.resolve(true);
+        },
+    };
+}
+/**
+ * Dashboards stored as one JSON file per record under `dir`. Suitable for
+ * single-node deployments that need survival across restarts. Locking is
+ * advisory: concurrent writes of the same id can race — fine for the v1
+ * "single user clicking Save" workflow, not fine for multi-writer
+ * production.
+ */
+export function createFileSystemDashboardStore(options) {
+    const { dir } = options;
+    const ensureDir = async () => {
+        await fs.mkdir(dir, { recursive: true });
+    };
+    const fileFor = (id) => path.join(dir, `${encodeURIComponent(id)}.json`);
+    const readRecord = async (id) => {
+        let raw;
+        try {
+            raw = await fs.readFile(fileFor(id), "utf-8");
+        }
+        catch (err) {
+            if (err.code === "ENOENT")
+                return undefined;
+            throw err;
+        }
+        // Corrupt/incompatible content is treated as "not present" (fail-soft) so a
+        // single bad file can't crash `get`/`save`; a real fs error above still
+        // throws.
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch {
+            console.warn(`[dashboard-store] Ignoring dashboard "${id}": file is not valid JSON.`);
+            return undefined;
+        }
+        const record = parseDashboardRecord(parsed);
+        if (!record) {
+            console.warn(`[dashboard-store] Ignoring dashboard "${id}": does not match the current record schema.`);
+        }
+        return record;
+    };
+    const writeRecord = async (record) => {
+        await ensureDir();
+        await fs.writeFile(fileFor(record.id), JSON.stringify(record, null, 2), "utf-8");
+    };
+    return {
+        async save(input) {
+            const now = nowIso();
+            const existing = input.id ? await readRecord(input.id) : undefined;
+            const record = resolveSavedRecord(existing, input, now) ?? {
+                id: input.id ?? randomUUID(),
+                name: input.name,
+                description: input.description,
+                userId: input.userId,
+                keys: input.keys,
+                steps: input.steps,
+                layout: input.layout,
+                title: input.title,
+                schemaVersion: DASHBOARD_SCHEMA_VERSION,
+                createdAt: now,
+                updatedAt: now,
+            };
+            await writeRecord(record);
+            return record;
+        },
+        async list(filter) {
+            await ensureDir();
+            const entries = await fs.readdir(dir);
+            const records = [];
+            for (const name of entries) {
+                if (!name.endsWith(".json"))
+                    continue;
+                let parsed;
+                try {
+                    parsed = JSON.parse(await fs.readFile(path.join(dir, name), "utf-8"));
+                }
+                catch {
+                    // Not valid JSON — not one of our records. Skip.
+                    continue;
+                }
+                // Validate before trusting: a partial record (e.g. missing `updatedAt`)
+                // would otherwise crash the sort below and take the whole listing down.
+                const record = parseDashboardRecord(parsed);
+                if (!record) {
+                    console.warn(`[dashboard-store] Skipping "${name}": does not match the record schema.`);
+                    continue;
+                }
+                if (ownedBy(record, filter.userId))
+                    records.push(record);
+            }
+            records.sort((a, b) => b.updatedAt.localeCompare(a.updatedAt));
+            return records.map((r) => ({
+                id: r.id,
+                name: r.name,
+                description: r.description,
+                title: r.title,
+                updatedAt: r.updatedAt,
+            }));
+        },
+        async get(id, filter) {
+            const record = await readRecord(id);
+            if (!record)
+                return undefined;
+            if (!ownedBy(record, filter.userId))
+                return undefined;
+            return record;
+        },
+        async delete(id, filter) {
+            const record = await readRecord(id);
+            if (!record)
+                return false;
+            if (!ownedBy(record, filter.userId))
+                return false;
+            await fs.rm(fileFor(id), { force: true });
+            return true;
+        },
+    };
+}
+function stripUndefined(obj) {
+    const out = {};
+    for (const [k, v] of Object.entries(obj)) {
+        if (v !== undefined)
+            out[k] = v;
+    }
+    return out;
+}
+//# sourceMappingURL=dashboard-store.js.map

package/dist/framework/dashboard-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-store.js","sourceRoot":"","sources":["../../src/framework/dashboard-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACjC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAElD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAA;AA0EzC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;IACxC,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAA;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IACnD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,SAAS,CAAA;IACrC,0EAA0E;IAC1E,gEAAgE;IAChE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,wBAAwB;QAAE,OAAO,SAAS,CAAA;IACjF,OAAO,MAAM,CAAC,IAAI,CAAA;AACpB,CAAC;AAED,SAAS,MAAM;IACb,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;AACjC,CAAC;AAED,SAAS,OAAO,CAAC,MAAuB,EAAE,MAA0B;IAClE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACxB,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAC/B,OAAO,MAAM,CAAC,MAAM,KAAK,MAAM,CAAA;AACjC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAA;IACvC,CAAC;CACF;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAqC,EACrC,KAAyB,EACzB,GAAW;IAEX,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1B,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,uBAAuB,CAC/B,6BAA6B,QAAQ,CAAC,EAAE,6BAA6B,CACtE,CAAA;IACH,CAAC;IACD,OAAO;QACL,GAAG,QAAQ;QACX,GAAG,cAAc,CAAC,KAAK,CAAC;QACxB,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,aAAa,EAAE,wBAAwB;QACvC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,SAAS,EAAE,GAAG;KACf,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAA2B,CAAA;IAE/C,OAAO;QACL,IAAI,CAAC,KAAK;YACR,wEAAwE;YACxE,uEAAuE;YACvE,iEAAiE;YACjE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;gBACpB,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;gBAC1D,MAAM,MAAM,GAAoB,kBAAkB,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI;oBAC1E,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,UAAU,EAAE;oBAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,aAAa,EAAE,wBAAwB;oBACvC,SAAS,EAAE,GAAG;oBACd,SAAS,EAAE,GAAG;iBACf,CAAA;gBACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;gBAC3B,OAAO,MAAM,CAAA;YACf,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,CAAC,MAAM;YACT,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;YACvE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;YAC1D,OAAO,OAAO,CAAC,OAAO,CACpB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACd,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC,CAAC,CACJ,CAAA;QACH,CAAC;QACD,GAAG,CAAC,EAAE,EAAE,MAAM;YACZ,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC3B,IAAI,CAAC,MAAM;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YAC9C,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YACtE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAChC,CAAC;QACD,MAAM,CAAC,EAAE,EAAE,MAAM;YACf,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC3B,IAAI,CAAC,MAAM;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YAC1C,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YAClE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACf,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC9B,CAAC;KACF,CAAA;AACH,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAAwC;IAExC,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAA;IAEvB,MAAM,SAAS,GAAG,KAAK,IAAI,EAAE;QAC3B,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1C,CAAC,CAAA;IAED,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;IAEhF,MAAM,UAAU,GAAG,KAAK,EAAE,EAAU,EAAwC,EAAE;QAC5E,IAAI,GAAW,CAAA;QACf,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAA;YACtE,MAAM,GAAG,CAAA;QACX,CAAC;QACD,4EAA4E;QAC5E,wEAAwE;QACxE,UAAU;QACV,IAAI,MAAe,CAAA;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,yCAAyC,EAAE,4BAA4B,CAAC,CAAA;YACrF,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAA;QAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CACV,yCAAyC,EAAE,8CAA8C,CAC1F,CAAA;QACH,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IAED,MAAM,WAAW,GAAG,KAAK,EAAE,MAAuB,EAAE,EAAE;QACpD,MAAM,SAAS,EAAE,CAAA;QACjB,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;IAClF,CAAC,CAAA;IAED,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,KAAK;YACd,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;YACpB,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YAClE,MAAM,MAAM,GAAoB,kBAAkB,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI;gBAC1E,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,UAAU,EAAE;gBAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,aAAa,EAAE,wBAAwB;gBACvC,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACf,CAAA;YACD,MAAM,WAAW,CAAC,MAAM,CAAC,CAAA;YACzB,OAAO,MAAM,CAAA;QACf,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM;YACf,MAAM,SAAS,EAAE,CAAA;YACjB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YACrC,MAAM,OAAO,GAAsB,EAAE,CAAA;YACrC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,SAAQ;gBACrC,IAAI,MAAe,CAAA;gBACnB,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;gBACvE,CAAC;gBAAC,MAAM,CAAC;oBACP,iDAAiD;oBACjD,SAAQ;gBACV,CAAC;gBACD,wEAAwE;gBACxE,wEAAwE;gBACxE,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAA;gBAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,CAAC,IAAI,CAAC,+BAA+B,IAAI,sCAAsC,CAAC,CAAA;oBACvF,SAAQ;gBACV,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;oBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAC1D,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;YAC9D,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC,CAAC,CAAA;QACL,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM;YAClB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,CAAA;YACnC,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAA;YAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBAAE,OAAO,SAAS,CAAA;YACrD,OAAO,MAAM,CAAA;QACf,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM;YACrB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,CAAA;YACnC,IAAI,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAA;YACzB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAA;YACjD,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACzC,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CAAmB,GAAM;IAC9C,MAAM,GAAG,GAAe,EAAE,CAAA;IAC1B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,SAAS;YAAG,GAA+B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IAC9D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/framework/layout-schemas.d.ts

@@ -0,0 +1,106 @@
+import { z } from "zod";
+/**
+ * Zod schemas for the layout shape passed to `render-view` / `refresh-view`.
+ *
+ * Kept next to the `LayoutConfig` TypeScript types (see `./layout-types.ts`) so
+ * the runtime validation and the static type of `LayoutConfig` stay in sync.
+ * The framework-tool registrar (`../tools/register-framework-tools.ts`) plugs
+ * these schemas into the mcp-use tool definitions.
+ */
+export declare const rowSchema: z.ZodObject<{
+    row: z.ZodArray<z.ZodObject<{
+        widget: z.ZodString;
+        span: z.ZodOptional<z.ZodNumber>;
+        props: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const layoutSchema: z.ZodUnion<readonly [z.ZodArray<z.ZodObject<{
+    row: z.ZodArray<z.ZodObject<{
+        widget: z.ZodString;
+        span: z.ZodOptional<z.ZodNumber>;
+        props: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>>, z.ZodObject<{
+    rows: z.ZodArray<z.ZodObject<{
+        row: z.ZodArray<z.ZodObject<{
+            widget: z.ZodString;
+            span: z.ZodOptional<z.ZodNumber>;
+            props: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>, z.ZodObject<{
+    tabs: z.ZodArray<z.ZodObject<{
+        label: z.ZodString;
+        rows: z.ZodArray<z.ZodObject<{
+            row: z.ZodArray<z.ZodObject<{
+                widget: z.ZodString;
+                span: z.ZodOptional<z.ZodNumber>;
+                props: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>]>;
+/**
+ * Tool-input variant of {@link layoutSchema} for `render-view` /
+ * `refresh-view`: the three layout forms plus a JSON-string branch.
+ *
+ * Why: as a union, `layout` surfaces on the wire as a top-level `anyOf`
+ * WITHOUT its own `type` field. Some MCP hosts (observed with claude.ai)
+ * react to such properties by sending the argument as a JSON-encoded STRING —
+ * which the plain union rejects, failing the whole call. The string branch
+ * parses that form and pipes it through {@link layoutSchema}, so stringified
+ * calls validate exactly like the object form. The three object branches are
+ * reused from {@link layoutSchema} unchanged.
+ */
+export declare const layoutInputSchema: z.ZodUnion<readonly [z.ZodArray<z.ZodObject<{
+    row: z.ZodArray<z.ZodObject<{
+        widget: z.ZodString;
+        span: z.ZodOptional<z.ZodNumber>;
+        props: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>>, z.ZodObject<{
+    rows: z.ZodArray<z.ZodObject<{
+        row: z.ZodArray<z.ZodObject<{
+            widget: z.ZodString;
+            span: z.ZodOptional<z.ZodNumber>;
+            props: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>, z.ZodObject<{
+    tabs: z.ZodArray<z.ZodObject<{
+        label: z.ZodString;
+        rows: z.ZodArray<z.ZodObject<{
+            row: z.ZodArray<z.ZodObject<{
+                widget: z.ZodString;
+                span: z.ZodOptional<z.ZodNumber>;
+                props: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>, z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<unknown, string>>, z.ZodUnion<readonly [z.ZodArray<z.ZodObject<{
+    row: z.ZodArray<z.ZodObject<{
+        widget: z.ZodString;
+        span: z.ZodOptional<z.ZodNumber>;
+        props: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>>, z.ZodObject<{
+    rows: z.ZodArray<z.ZodObject<{
+        row: z.ZodArray<z.ZodObject<{
+            widget: z.ZodString;
+            span: z.ZodOptional<z.ZodNumber>;
+            props: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>, z.ZodObject<{
+    tabs: z.ZodArray<z.ZodObject<{
+        label: z.ZodString;
+        rows: z.ZodArray<z.ZodObject<{
+            row: z.ZodArray<z.ZodObject<{
+                widget: z.ZodString;
+                span: z.ZodOptional<z.ZodNumber>;
+                props: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>]>>]>;
+//# sourceMappingURL=layout-schemas.d.ts.map

package/dist/framework/layout-schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"layout-schemas.d.ts","sourceRoot":"","sources":["../../src/framework/layout-schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;;;;GAOG;AAEH,eAAO,MAAM,SAAS;;;;;;iBAapB,CAAA;AAEF,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;mBAeqC,CAAA;AAE9D;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAuB3B,CAAA"}

package/dist/framework/layout-schemas.js

@@ -0,0 +1,67 @@
+import { z } from "zod";
+/**
+ * Zod schemas for the layout shape passed to `render-view` / `refresh-view`.
+ *
+ * Kept next to the `LayoutConfig` TypeScript types (see `./layout-types.ts`) so
+ * the runtime validation and the static type of `LayoutConfig` stay in sync.
+ * The framework-tool registrar (`../tools/register-framework-tools.ts`) plugs
+ * these schemas into the mcp-use tool definitions.
+ */
+export const rowSchema = z.object({
+    row: z.array(z.object({
+        widget: z.string().describe("Widget ID from the framework manifest. Must be registered."),
+        span: z.number().optional().describe("Grid columns (1-12)"),
+        props: z
+            .record(z.string(), z.unknown())
+            .optional()
+            .describe("Optional per-instance props passed to the widget at render time. Lets the same widget appear multiple times in one view with different scoping (e.g. `{ processDefinitionKey: 'miraveloLeasing' }` for a per-process dashboard tab)."),
+    })),
+});
+export const layoutSchema = z
+    .union([
+    z.array(rowSchema).describe("Flat rows (legacy form)"),
+    z.object({ rows: z.array(rowSchema) }).describe("Explicit rows wrapper"),
+    z
+        .object({
+        tabs: z.array(z.object({
+            label: z.string().describe("Tab label"),
+            rows: z.array(rowSchema),
+        })),
+    })
+        .describe("Tabs — widgets grouped in tabs"),
+])
+    .describe("Widget layout: flat rows, { rows }, or { tabs }");
+/**
+ * Tool-input variant of {@link layoutSchema} for `render-view` /
+ * `refresh-view`: the three layout forms plus a JSON-string branch.
+ *
+ * Why: as a union, `layout` surfaces on the wire as a top-level `anyOf`
+ * WITHOUT its own `type` field. Some MCP hosts (observed with claude.ai)
+ * react to such properties by sending the argument as a JSON-encoded STRING —
+ * which the plain union rejects, failing the whole call. The string branch
+ * parses that form and pipes it through {@link layoutSchema}, so stringified
+ * calls validate exactly like the object form. The three object branches are
+ * reused from {@link layoutSchema} unchanged.
+ */
+export const layoutInputSchema = z
+    .union([
+    ...layoutSchema.def.options,
+    z
+        .string()
+        .transform((value, ctx) => {
+        try {
+            return JSON.parse(value);
+        }
+        catch {
+            ctx.addIssue({
+                code: "custom",
+                message: "layout was sent as a string but is not valid JSON",
+            });
+            return z.NEVER;
+        }
+    })
+        .pipe(layoutSchema)
+        .describe("Layout as a JSON-encoded string (some hosts serialize complex parameters this way); parsed and validated like the object form."),
+])
+    .describe("Widget layout: flat rows, { rows }, or { tabs } — or the same as a JSON-encoded string");
+//# sourceMappingURL=layout-schemas.js.map

package/dist/framework/layout-schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"layout-schemas.js","sourceRoot":"","sources":["../../src/framework/layout-schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,GAAG,EAAE,CAAC,CAAC,KAAK,CACV,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;QACzF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QAC3D,KAAK,EAAE,CAAC;aACL,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/B,QAAQ,EAAE;aACV,QAAQ,CACP,sOAAsO,CACvO;KACJ,CAAC,CACH;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,KAAK,CAAC;IACL,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IACtD,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACxE,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,KAAK,CACX,CAAC,CAAC,MAAM,CAAC;YACP,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;YACvC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;SACzB,CAAC,CACH;KACF,CAAC;SACD,QAAQ,CAAC,gCAAgC,CAAC;CAC9C,CAAC;KACD,QAAQ,CAAC,iDAAiD,CAAC,CAAA;AAE9D;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,KAAK,CAAC;IACL,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO;IAC3B,CAAC;SACE,MAAM,EAAE;SACR,SAAS,CAAC,CAAC,KAAK,EAAE,GAAG,EAAW,EAAE;QACjC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,mDAAmD;aAC7D,CAAC,CAAA;YACF,OAAO,CAAC,CAAC,KAAK,CAAA;QAChB,CAAC;IACH,CAAC,CAAC;SACD,IAAI,CAAC,YAAY,CAAC;SAClB,QAAQ,CACP,gIAAgI,CACjI;CACJ,CAAC;KACD,QAAQ,CACP,wFAAwF,CACzF,CAAA"}

package/dist/framework/layout-types.d.ts

@@ -0,0 +1,25 @@
+export interface RowDef {
+    row: {
+        widget: string;
+        span?: number;
+        props?: Record<string, unknown>;
+    }[];
+}
+export type LayoutConfig = RowDef[] | {
+    rows: RowDef[];
+} | {
+    tabs: {
+        label: string;
+        rows: RowDef[];
+    }[];
+};
+/** Normalizes any layout format to the canonical union type (rows or tabs object). */
+export declare function normalizeLayout(layout: LayoutConfig): {
+    rows: RowDef[];
+} | {
+    tabs: {
+        label: string;
+        rows: RowDef[];
+    }[];
+};
+//# sourceMappingURL=layout-types.d.ts.map

package/dist/framework/layout-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"layout-types.d.ts","sourceRoot":"","sources":["../../src/framework/layout-types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,MAAM;IACrB,GAAG,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,EAAE,CAAA;CAC1E;AAED,MAAM,MAAM,YAAY,GACpB,MAAM,EAAE,GACR;IAAE,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAA;CAAE,CAAA;AAEjD,sFAAsF;AACtF,wBAAgB,eAAe,CAC7B,MAAM,EAAE,YAAY,GACnB;IAAE,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAA;CAAE,CAGpE"}