@miragon/pulse-widget-shell 0.0.0-bootstrap.0 → 0.21.0

package/dist/toolsets.d.ts

@@ -0,0 +1,76 @@
+/**
+ * The shared skeleton of every module's toolset vocabulary: a declared name
+ * list, a typed guard, and the ONE fail-closed rule for the
+ * `MCP_ACTIVE_MODULES=<module>:<toolset>` suffix:
+ *
+ * - no suffix → the auth-dependent DEFAULT: the module's most restrictive
+ *   toolset (the fallback) on an unauthenticated boot, its standard non-admin
+ *   toolset (`authenticatedDefault`) when the root installed OAuth;
+ * - an empty or unknown suffix → warns and degrades to the fallback: a suffix
+ *   always meant to restrict, so restricting harder is the only safe reading;
+ * - a known name → itself.
+ *
+ * Nothing ever resolves to "everything": a module's widest toolset (e.g.
+ * camunda7's `admin`) is reachable only by naming it.
+ *
+ * The vocabulary itself (which names exist, what each one filters) stays
+ * module-owned: peers own their names, only the semantics are shared. A module
+ * builds its filter/durable-write decisions on top of `resolve` — never on an
+ * ad-hoc `toolset === "read-only"` compare, which fails open for every other
+ * name without the warning.
+ */
+export interface ToolsetVocabulary<T extends string> {
+    /** The owning module's name — the prefix of every warning. */
+    module: string;
+    names: readonly T[];
+    /**
+     * The most restrictive toolset — the module's READ-ONLY FLOOR: it permits no
+     * durable write. Empty/unknown suffixes, unauthenticated boots and direct
+     * callers that pass no toolset all land here.
+     */
+    fallback: T;
+    /** The no-suffix default under OAuth — the module's standard non-admin toolset. */
+    authenticatedDefault: T;
+    isKnown(value: string): value is T;
+    /**
+     * Normalize a configured toolset on the MODULE side: a known name resolves to
+     * itself, an unknown one warns and resolves to the fallback, and a missing one
+     * resolves to the fallback silently. The composition root hands every module
+     * a concrete name ({@link ToolsetVocabulary.effective}), so a missing toolset
+     * only reaches here from a direct `createPlugin` caller — which therefore
+     * gets the floor, never everything.
+     */
+    resolve(toolset: string | undefined): T;
+    /**
+     * The COMPOSITION side: the toolset a module runs with, given its
+     * `module:toolset` suffix (`undefined` = no suffix, `""` = present but empty)
+     * and whether the root installed OAuth. Warns on an empty or unknown suffix.
+     */
+    effective(suffix: string | undefined, options: {
+        authenticated: boolean;
+    }): EffectiveSelection<T>;
+    /** Whether the toolset permits durable writes — every toolset above the read-only floor. */
+    allowsDurableWrites(toolset: T): boolean;
+}
+/** Where an effective toolset came from — the reason the boot log names. */
+export type ToolsetSource = "suffix" | "default" | "fallback";
+export interface EffectiveSelection<T extends string> {
+    toolset: T;
+    source: ToolsetSource;
+}
+export declare function createToolsetVocabulary<T extends string>(moduleName: string, names: readonly T[], 
+/**
+ * The module's most restrictive toolset — the read-only floor (no durable
+ * writes). A `<module>:<toolset>` suffix is always an attempt to restrict, so
+ * a typo must never grant more than the strictest set it could have meant,
+ * and an unauthenticated boot without a suffix gets exactly this.
+ */
+fallback: NoInfer<T>, options?: {
+    /**
+     * The no-suffix default when the root installed OAuth — the module's
+     * standard non-admin toolset. Omitted = the fallback (a module whose only
+     * toolset is its floor).
+     */
+    authenticatedDefault?: NoInfer<T>;
+}): ToolsetVocabulary<T>;
+//# sourceMappingURL=toolsets.d.ts.map

package/dist/toolsets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolsets.d.ts","sourceRoot":"","sources":["../src/toolsets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,iBAAiB,CAAC,CAAC,SAAS,MAAM;IACjD,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,SAAS,CAAC,EAAE,CAAA;IACnB;;;;OAIG;IACH,QAAQ,EAAE,CAAC,CAAA;IACX,mFAAmF;IACnF,oBAAoB,EAAE,CAAC,CAAA;IACvB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,CAAC,CAAA;IAClC;;;;;;;OAOG;IACH,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,CAAC,CAAA;IACvC;;;;OAIG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE;QAAE,aAAa,EAAE,OAAO,CAAA;KAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAA;IACjG,4FAA4F;IAC5F,mBAAmB,CAAC,OAAO,EAAE,CAAC,GAAG,OAAO,CAAA;CACzC;AAED,4EAA4E;AAC5E,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAA;AAE7D,MAAM,WAAW,kBAAkB,CAAC,CAAC,SAAS,MAAM;IAClD,OAAO,EAAE,CAAC,CAAA;IACV,MAAM,EAAE,aAAa,CAAA;CACtB;AAED,wBAAgB,uBAAuB,CAAC,CAAC,SAAS,MAAM,EACtD,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,SAAS,CAAC,EAAE;AACnB;;;;;GAKG;AACH,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EACpB,OAAO,GAAE;IACP;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;CAC7B,GACL,iBAAiB,CAAC,CAAC,CAAC,CAgCtB"}

package/dist/toolsets.js

@@ -0,0 +1,41 @@
+export function createToolsetVocabulary(moduleName, names, 
+/**
+ * The module's most restrictive toolset — the read-only floor (no durable
+ * writes). A `<module>:<toolset>` suffix is always an attempt to restrict, so
+ * a typo must never grant more than the strictest set it could have meant,
+ * and an unauthenticated boot without a suffix gets exactly this.
+ */
+fallback, options = {}) {
+    const { authenticatedDefault = fallback } = options;
+    const isKnown = (value) => names.includes(value);
+    const degrade = (reason) => {
+        console.warn(`[${moduleName}] ${reason} — falling back to "${fallback}". Known toolsets: ${names.join(", ")}`);
+        return fallback;
+    };
+    return {
+        module: moduleName,
+        names,
+        fallback,
+        authenticatedDefault,
+        isKnown,
+        resolve(toolset) {
+            if (toolset === undefined)
+                return fallback;
+            return isKnown(toolset) ? toolset : degrade(`Unknown toolset "${toolset}"`);
+        },
+        effective(suffix, { authenticated }) {
+            if (suffix === undefined) {
+                return { toolset: authenticated ? authenticatedDefault : fallback, source: "default" };
+            }
+            const name = suffix.trim();
+            if (isKnown(name))
+                return { toolset: name, source: "suffix" };
+            const reason = name === "" ? "Empty toolset suffix" : `Unknown toolset "${name}"`;
+            return { toolset: degrade(reason), source: "fallback" };
+        },
+        allowsDurableWrites(toolset) {
+            return toolset !== fallback;
+        },
+    };
+}
+//# sourceMappingURL=toolsets.js.map

package/dist/toolsets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolsets.js","sourceRoot":"","sources":["../src/toolsets.ts"],"names":[],"mappings":"AA6DA,MAAM,UAAU,uBAAuB,CACrC,UAAkB,EAClB,KAAmB;AACnB;;;;;GAKG;AACH,QAAoB,EACpB,UAOI,EAAE;IAEN,MAAM,EAAE,oBAAoB,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAA;IACnD,MAAM,OAAO,GAAG,CAAC,KAAa,EAAc,EAAE,CAAE,KAA2B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC3F,MAAM,OAAO,GAAG,CAAC,MAAc,EAAK,EAAE;QACpC,OAAO,CAAC,IAAI,CACV,IAAI,UAAU,KAAK,MAAM,uBAAuB,QAAQ,sBAAsB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjG,CAAA;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC,CAAA;IACD,OAAO;QACL,MAAM,EAAE,UAAU;QAClB,KAAK;QACL,QAAQ;QACR,oBAAoB;QACpB,OAAO;QACP,OAAO,CAAC,OAAO;YACb,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,QAAQ,CAAA;YAC1C,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,OAAO,GAAG,CAAC,CAAA;QAC7E,CAAC;QACD,SAAS,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE;YACjC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;YACxF,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;YAC1B,IAAI,OAAO,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;YAC7D,MAAM,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,oBAAoB,IAAI,GAAG,CAAA;YACjF,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;QACzD,CAAC;QACD,mBAAmB,CAAC,OAAO;YACzB,OAAO,OAAO,KAAK,QAAQ,CAAA;QAC7B,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/toolsets.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=toolsets.test.d.ts.map

package/dist/toolsets.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolsets.test.d.ts","sourceRoot":"","sources":["../src/toolsets.test.ts"],"names":[],"mappings":""}

package/dist/toolsets.test.js

@@ -0,0 +1,86 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { createToolsetVocabulary } from "./toolsets.js";
+const NAMES = ["read-only", "operations", "admin"];
+const vocab = () => createToolsetVocabulary("mymodule", NAMES, "read-only", { authenticatedDefault: "operations" });
+afterEach(() => {
+    vi.restoreAllMocks();
+});
+describe("createToolsetVocabulary", () => {
+    it("recognizes declared names and exposes the policy", () => {
+        const v = vocab();
+        expect(v.module).toBe("mymodule");
+        expect(v.names).toEqual(NAMES);
+        expect(v.fallback).toBe("read-only");
+        expect(v.authenticatedDefault).toBe("operations");
+        expect(v.isKnown("read-only")).toBe(true);
+        expect(v.isKnown("nope")).toBe(false);
+        expect(v.resolve("operations")).toBe("operations");
+    });
+    it("defaults the authenticated default to the fallback", () => {
+        const v = createToolsetVocabulary("solo", ["read-only"], "read-only");
+        expect(v.authenticatedDefault).toBe("read-only");
+        expect(v.effective(undefined, { authenticated: true })).toEqual({
+            toolset: "read-only",
+            source: "default",
+        });
+    });
+    describe("resolve (module side)", () => {
+        it("resolves a missing toolset to the floor, silently — never to everything", () => {
+            const warn = vi.spyOn(console, "warn").mockImplementation(() => { });
+            expect(vocab().resolve(undefined)).toBe("read-only");
+            expect(warn).not.toHaveBeenCalled();
+        });
+        it("fails CLOSED on unknown names — degrades to the fallback toolset, loudly", () => {
+            const warn = vi.spyOn(console, "warn").mockImplementation(() => { });
+            expect(vocab().resolve("does-not-exist")).toBe("read-only");
+            expect(warn).toHaveBeenCalledTimes(1);
+            expect(warn).toHaveBeenCalledWith('[mymodule] Unknown toolset "does-not-exist" — falling back to "read-only". ' +
+                "Known toolsets: read-only, operations, admin");
+        });
+    });
+    describe("effective (composition side)", () => {
+        it("applies the auth-dependent default when there is no suffix — never admin", () => {
+            const warn = vi.spyOn(console, "warn").mockImplementation(() => { });
+            expect(vocab().effective(undefined, { authenticated: false })).toEqual({
+                toolset: "read-only",
+                source: "default",
+            });
+            expect(vocab().effective(undefined, { authenticated: true })).toEqual({
+                toolset: "operations",
+                source: "default",
+            });
+            expect(warn).not.toHaveBeenCalled();
+        });
+        it("honors a known suffix (trimmed) in both auth modes", () => {
+            for (const authenticated of [false, true]) {
+                expect(vocab().effective(" admin ", { authenticated })).toEqual({
+                    toolset: "admin",
+                    source: "suffix",
+                });
+            }
+        });
+        it.each([
+            ["", "Empty toolset suffix"],
+            ["   ", "Empty toolset suffix"],
+            ["typo", 'Unknown toolset "typo"'],
+            ["admin:read-only", 'Unknown toolset "admin:read-only"'],
+        ])("fails closed on suffix %j — the floor even under OAuth, with one warning", (suffix, why) => {
+            const warn = vi.spyOn(console, "warn").mockImplementation(() => { });
+            for (const authenticated of [false, true]) {
+                expect(vocab().effective(suffix, { authenticated })).toEqual({
+                    toolset: "read-only",
+                    source: "fallback",
+                });
+            }
+            expect(warn).toHaveBeenCalledTimes(2);
+            expect(warn).toHaveBeenCalledWith(`[mymodule] ${why} — falling back to "read-only". Known toolsets: read-only, operations, admin`);
+        });
+    });
+    it("permits durable writes on every toolset above the read-only floor", () => {
+        const v = vocab();
+        expect(v.allowsDurableWrites("read-only")).toBe(false);
+        expect(v.allowsDurableWrites("operations")).toBe(true);
+        expect(v.allowsDurableWrites("admin")).toBe(true);
+    });
+});
+//# sourceMappingURL=toolsets.test.js.map

package/dist/toolsets.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolsets.test.js","sourceRoot":"","sources":["../src/toolsets.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAEvD,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,CAAU,CAAA;AAE3D,MAAM,KAAK,GAAG,GAAG,EAAE,CACjB,uBAAuB,CAAC,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,oBAAoB,EAAE,YAAY,EAAE,CAAC,CAAA;AAEjG,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,eAAe,EAAE,CAAA;AACtB,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,GAAG,KAAK,EAAE,CAAA;QACjB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACjC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAC9B,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACpC,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACjD,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,GAAG,uBAAuB,CAAC,MAAM,EAAE,CAAC,WAAW,CAAU,EAAE,WAAW,CAAC,CAAA;QAC9E,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAChD,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9D,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,SAAS;SAClB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;YACjF,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACnE,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;YACpD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QACrC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;YAClF,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACnE,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;YAC3D,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YACrC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAC/B,6EAA6E;gBAC3E,8CAA8C,CACjD,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC5C,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;YAClF,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACnE,MAAM,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;gBACrE,OAAO,EAAE,WAAW;gBACpB,MAAM,EAAE,SAAS;aAClB,CAAC,CAAA;YACF,MAAM,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;gBACpE,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,SAAS;aAClB,CAAC,CAAA;YACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QACrC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC5D,KAAK,MAAM,aAAa,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC1C,MAAM,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;oBAC9D,OAAO,EAAE,OAAO;oBAChB,MAAM,EAAE,QAAQ;iBACjB,CAAC,CAAA;YACJ,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,IAAI,CAAC;YACN,CAAC,EAAE,EAAE,sBAAsB,CAAC;YAC5B,CAAC,KAAK,EAAE,sBAAsB,CAAC;YAC/B,CAAC,MAAM,EAAE,wBAAwB,CAAC;YAClC,CAAC,iBAAiB,EAAE,mCAAmC,CAAC;SACzD,CAAC,CACA,0EAA0E,EAC1E,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;YACd,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACnE,KAAK,MAAM,aAAa,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC1C,MAAM,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;oBAC3D,OAAO,EAAE,WAAW;oBACpB,MAAM,EAAE,UAAU;iBACnB,CAAC,CAAA;YACJ,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YACrC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAC/B,cAAc,GAAG,8EAA8E,CAChG,CAAA;QACH,CAAC,CACF,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,GAAG,KAAK,EAAE,CAAA;QACjB,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtD,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtD,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/ui/action-feedback.d.ts

@@ -0,0 +1,33 @@
+/** What a write says when it is done — the toolkit's toasts, never a silent row change. */
+export interface ActionFeedback {
+    /**
+     * The write worked: a success toast whose title names the object
+     * ("Job für LEA-2026-00424 neu eingeplant", "Einstellungen gespeichert").
+     */
+    succeeded: (title: string, description?: string) => void;
+    /**
+     * The write failed: a danger toast (5 s) whose title names the object
+     * ("Job für LEA-2026-00424 konnte nicht neu eingeplant werden") and whose
+     * second line says why and what you can do ({@link failureLine}).
+     */
+    failed: (title: string, error: unknown) => void;
+}
+/**
+ * The toast's second line for a failed write: what happened in words
+ * ({@link describeError}), then the next step. A toast has no "Details", so
+ * the line carries what an `ErrorState` keeps there: an engine refusal quotes
+ * the engine's own reason, without its status code ("Die Engine prod meldet
+ * einen Fehler (HTTP 500): „Cannot resolve incident“."), and a write whose
+ * answer never came says it may have gone through, so you check before you
+ * retry instead of applying it twice.
+ */
+export declare function failureLine(error: unknown, locale: string | undefined): string;
+/**
+ * Feedback for a write (CI §9: success and failure each a toast, never only
+ * a console line). The toasts are the toolkit's (`McpAppView` mounts their
+ * provider, a polite live region bottom centre): announced to screen readers,
+ * held while hovered or focused. Outside a provider (a bare fixture) the
+ * calls are no-ops.
+ */
+export declare function useActionFeedback(): ActionFeedback;
+//# sourceMappingURL=action-feedback.d.ts.map

package/dist/ui/action-feedback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-feedback.d.ts","sourceRoot":"","sources":["../../src/ui/action-feedback.ts"],"names":[],"mappings":"AAMA,2FAA2F;AAC3F,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;IACxD;;;;OAIG;IACH,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;CAChD;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAU9E;AAOD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,CAclD"}

package/dist/ui/action-feedback.js

@@ -0,0 +1,51 @@
+import { useMemo } from "react";
+import { useLocale, useToast } from "@miragon/mcp-toolkit-ui";
+import { classifyError, describeError } from "./describe-error.js";
+import { ERROR_LABELS } from "./error-labels.js";
+import { supportedLanguage } from "./host-context.js";
+/**
+ * The toast's second line for a failed write: what happened in words
+ * ({@link describeError}), then the next step. A toast has no "Details", so
+ * the line carries what an `ErrorState` keeps there: an engine refusal quotes
+ * the engine's own reason, without its status code ("Die Engine prod meldet
+ * einen Fehler (HTTP 500): „Cannot resolve incident“."), and a write whose
+ * answer never came says it may have gone through, so you check before you
+ * retry instead of applying it twice.
+ */
+export function failureLine(error, locale) {
+    const described = describeError(error, locale);
+    const facts = classifyError(error);
+    const toast = ERROR_LABELS[supportedLanguage(locale) ?? "en"].toast;
+    const happened = described.kind === "unknown" ? "" : `${described.title}. `;
+    if (facts.mayHaveApplied)
+        return `${happened}${toast.mayHaveApplied()}`;
+    if (described.kind !== "failed")
+        return `${happened}${described.hint}`;
+    if (!facts.reason)
+        return `${happened}${toast.failedHint()}`;
+    const reason = clip(facts.reason);
+    return `${toast.reason({ title: described.title, reason })} ${toast.failedHint()}`;
+}
+/** A toast line stays readable: a long engine text (a stack trace's head) is cut. */
+const MAX_TOAST_REASON = 200;
+const clip = (text) => text.length > MAX_TOAST_REASON ? `${text.slice(0, MAX_TOAST_REASON).trimEnd()}…` : text;
+/**
+ * Feedback for a write (CI §9: success and failure each a toast, never only
+ * a console line). The toasts are the toolkit's (`McpAppView` mounts their
+ * provider, a polite live region bottom centre): announced to screen readers,
+ * held while hovered or focused. Outside a provider (a bare fixture) the
+ * calls are no-ops.
+ */
+export function useActionFeedback() {
+    const toast = useToast();
+    const locale = useLocale();
+    return useMemo(() => ({
+        succeeded: (title, description) => {
+            toast.show({ tone: "success", title, ...(description ? { description } : {}) });
+        },
+        failed: (title, error) => {
+            toast.show({ tone: "danger", title, description: failureLine(error, locale) });
+        },
+    }), [toast, locale]);
+}
+//# sourceMappingURL=action-feedback.js.map

package/dist/ui/action-feedback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-feedback.js","sourceRoot":"","sources":["../../src/ui/action-feedback.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAA;AAC/B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AAC7D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAiBrD;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,KAAc,EAAE,MAA0B;IACpE,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAC9C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;IAClC,MAAM,KAAK,GAAG,YAAY,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAA;IACnE,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,IAAI,CAAA;IAC3E,IAAI,KAAK,CAAC,cAAc;QAAE,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAC,cAAc,EAAE,EAAE,CAAA;IACvE,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,CAAA;IACtE,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAC,UAAU,EAAE,EAAE,CAAA;IAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACjC,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,IAAI,KAAK,CAAC,UAAU,EAAE,EAAE,CAAA;AACpF,CAAC;AAED,qFAAqF;AACrF,MAAM,gBAAgB,GAAG,GAAG,CAAA;AAC5B,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAC5B,IAAI,CAAC,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;AAEzF;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAA;IACxB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;IAC1B,OAAO,OAAO,CACZ,GAAG,EAAE,CAAC,CAAC;QACL,SAAS,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE;YAChC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QACjF,CAAC;QACD,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACvB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;QAChF,CAAC;KACF,CAAC,EACF,CAAC,KAAK,EAAE,MAAM,CAAC,CAChB,CAAA;AACH,CAAC"}

package/dist/ui/action-feedback.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=action-feedback.test.d.ts.map

package/dist/ui/action-feedback.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-feedback.test.d.ts","sourceRoot":"","sources":["../../src/ui/action-feedback.test.tsx"],"names":[],"mappings":""}

package/dist/ui/action-feedback.test.js

@@ -0,0 +1,77 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+// @vitest-environment happy-dom
+import { afterEach, describe, expect, it } from "vitest";
+import { act, cleanup, renderHook, screen } from "@testing-library/react";
+import { LocaleProvider, ToastProvider } from "@miragon/mcp-toolkit-ui";
+import { failureLine, useActionFeedback } from "./action-feedback.js";
+afterEach(cleanup);
+/** The hook under a locale and a toast stack; the toasts render into the document. */
+function renderIn(locale) {
+    const wrapper = ({ children }) => (_jsx(LocaleProvider, { locale: locale, children: _jsx(ToastProvider, { children: children }) }));
+    return renderHook(() => useActionFeedback(), { wrapper }).result.current;
+}
+const toastOf = (text) => screen.getByText(text).closest('[data-slot="toast"]');
+describe("useActionFeedback (U9: a write is never silent)", () => {
+    it("confirms a success with a success toast naming the object", () => {
+        const feedback = renderIn("de");
+        act(() => feedback.succeeded("Job für LEA-2026-00424 neu eingeplant"));
+        expect(toastOf("Job für LEA-2026-00424 neu eingeplant")?.getAttribute("data-tone")).toBe("success");
+    });
+    it("passes a success's second line on", () => {
+        const feedback = renderIn("en");
+        act(() => feedback.succeeded("Settings saved", "They apply to every view."));
+        expect(screen.getByText("They apply to every view.")).toBeTruthy();
+    });
+    it("reports a failure as a danger toast: the object, then why and what to do — not the raw text", () => {
+        const feedback = renderIn("de");
+        act(() => feedback.failed("Job für LEA-2026-00424 konnte nicht neu eingeplant werden", new Error("[503 ProcessEngineException] down (engine prod)")));
+        const toast = toastOf("Job für LEA-2026-00424 konnte nicht neu eingeplant werden");
+        expect(toast?.getAttribute("data-tone")).toBe("danger");
+        expect(toast?.textContent).toContain("Die Engine prod ist nicht erreichbar (HTTP 503). Prüf, ob die Engine läuft, oder wähl eine andere Engine.");
+        expect(toast?.textContent).not.toContain("ProcessEngineException");
+    });
+    it("carries an engine refusal's reason in the toast itself (U9: no Details there)", () => {
+        const feedback = renderIn("en");
+        act(() => feedback.failed("Couldn't retry the job for LEA-1", new Error("[500 ProcessEngineException] Job is already finished (engine prod)")));
+        const toast = toastOf("Couldn't retry the job for LEA-1");
+        expect(toast?.textContent).toContain("“Job is already finished”");
+        expect(toast?.textContent).not.toContain("Details");
+    });
+    it("announces through the toolkit's polite live region", () => {
+        const feedback = renderIn("en");
+        act(() => feedback.succeeded("Saved"));
+        const viewport = document.querySelector('[data-slot="toast-viewport"]');
+        expect(viewport?.getAttribute("aria-live")).toBe("polite");
+        expect(viewport?.textContent).toContain("Saved");
+    });
+    it("is a no-op outside a toast provider (a bare fixture never crashes)", () => {
+        const { result } = renderHook(() => useActionFeedback());
+        expect(() => result.current.succeeded("x")).not.toThrow();
+        expect(() => result.current.failed("x", new Error("y"))).not.toThrow();
+    });
+});
+describe("failureLine", () => {
+    it("is the reason and the next step for a known kind, the next step alone otherwise", () => {
+        expect(failureLine(new Error("engine p unreachable (ECONNREFUSED)"), "en")).toBe("Engine p is unreachable. Check that the engine is running, or pick another engine.");
+        expect(failureLine(new Error("odd"), "en")).toBe("Try again. If it fails again, ask in the chat.");
+    });
+    it("quotes an engine refusal's own reason — a toast has no Details to point to", () => {
+        const de = failureLine(new Error("[500 ProcessEngineException] Cannot resolve incident (engine prod)"), "de");
+        expect(de).toBe("Die Engine prod meldet einen Fehler (HTTP 500): „Cannot resolve incident“. Versuch es noch mal oder frag im Chat nach.");
+        const en = failureLine(new Error("[400 InvalidRequestException] Cannot complete task t-1: variable amount is missing. (engine prod)"), "en");
+        expect(en).toBe("Engine prod reported an error (HTTP 400): “Cannot complete task t-1: variable amount is missing”. Try again, or ask in the chat.");
+        for (const line of [de, en])
+            expect(line).not.toMatch(/Details|ProcessEngineException|\[/);
+    });
+    it("keeps the next step when the refusal carries no words, and cuts a long one", () => {
+        expect(failureLine(new Error("[500] (engine prod)"), "en")).toBe("Engine prod reported an error (HTTP 500). Try again, or ask in the chat.");
+        const long = failureLine(new Error(`[500 X] ${"word ".repeat(80)}`), "en");
+        expect(long).toContain("…”.");
+        expect(long.length).toBeLessThan(300);
+    });
+    it("says a write whose answer never came may have gone through — no blind retry", () => {
+        expect(failureLine(new Error("engine prod did not respond within 30000 ms (timeout) — the POST may still have been applied; check the current state before retrying"), "de")).toBe("Die Engine prod antwortet nicht rechtzeitig. Vielleicht hat es trotzdem geklappt. Prüf den aktuellen Stand, bevor du es noch mal versuchst.");
+        expect(failureLine(new Error("connection to engine prod failed (UND_ERR_SOCKET) — the PUT may still have been applied; check the current state before retrying"), "en")).toBe("Engine prod is unreachable. It may have worked anyway. Check the current state before you try again.");
+    });
+});
+//# sourceMappingURL=action-feedback.test.js.map

package/dist/ui/action-feedback.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-feedback.test.js","sourceRoot":"","sources":["../../src/ui/action-feedback.test.tsx"],"names":[],"mappings":";AAAA,gCAAgC;AAChC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACxD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAEzE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAuB,MAAM,sBAAsB,CAAA;AAE1F,SAAS,CAAC,OAAO,CAAC,CAAA;AAElB,sFAAsF;AACtF,SAAS,QAAQ,CAAC,MAAc;IAC9B,MAAM,OAAO,GAAG,CAAC,EAAE,QAAQ,EAA2B,EAAE,EAAE,CAAC,CACzD,KAAC,cAAc,IAAC,MAAM,EAAE,MAAM,YAC5B,KAAC,aAAa,cAAE,QAAQ,GAAiB,GAC1B,CAClB,CAAA;IACD,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,iBAAiB,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAA;AAC1E,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAA;AAEvF,QAAQ,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC/D,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC/B,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC,CAAA;QACtE,MAAM,CAAC,OAAO,CAAC,uCAAuC,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CACtF,SAAS,CACV,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC/B,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,gBAAgB,EAAE,2BAA2B,CAAC,CAAC,CAAA;QAC5E,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6FAA6F,EAAE,GAAG,EAAE;QACrG,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC/B,GAAG,CAAC,GAAG,EAAE,CACP,QAAQ,CAAC,MAAM,CACb,2DAA2D,EAC3D,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAC7D,CACF,CAAA;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,2DAA2D,CAAC,CAAA;QAClF,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACvD,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,SAAS,CAClC,2GAA2G,CAC5G,CAAA;QACD,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC/B,GAAG,CAAC,GAAG,EAAE,CACP,QAAQ,CAAC,MAAM,CACb,kCAAkC,EAClC,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAChF,CACF,CAAA;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAA;QACzD,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAA;QACjE,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC/B,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;QACtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,aAAa,CAAC,8BAA8B,CAAC,CAAA;QACvE,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC1D,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAA;QACxD,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;QACzD,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IACxE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAC9E,oFAAoF,CACrF,CAAA;QACD,MAAM,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAC9C,gDAAgD,CACjD,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,EAAE,GAAG,WAAW,CACpB,IAAI,KAAK,CAAC,oEAAoE,CAAC,EAC/E,IAAI,CACL,CAAA;QACD,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CACb,wHAAwH,CACzH,CAAA;QACD,MAAM,EAAE,GAAG,WAAW,CACpB,IAAI,KAAK,CACP,mGAAmG,CACpG,EACD,IAAI,CACL,CAAA;QACD,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CACb,kIAAkI,CACnI,CAAA;QACD,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAA;IAC5F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAC9D,0EAA0E,CAC3E,CAAA;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,KAAK,CAAC,WAAW,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;QAC1E,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC7B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,CACJ,WAAW,CACT,IAAI,KAAK,CACP,uIAAuI,CACxI,EACD,IAAI,CACL,CACF,CAAC,IAAI,CACJ,6IAA6I,CAC9I,CAAA;QACD,MAAM,CACJ,WAAW,CACT,IAAI,KAAK,CACP,kIAAkI,CACnI,EACD,IAAI,CACL,CACF,CAAC,IAAI,CACJ,sGAAsG,CACvG,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/ui/app-shell-providers.d.ts

@@ -0,0 +1,18 @@
+import type { ReactNode } from "react";
+import { type WidgetComponent } from "@miragon/mcp-toolkit-ui/app";
+export interface AppShellProvidersProps {
+    /** The host bundle map — also provided to composed views via HostWidgetsProvider. */
+    widgets: Record<string, WidgetComponent>;
+    children: ReactNode;
+}
+/**
+ * The provider stack every composed-server host mounts under `bootstrapView`:
+ * host context (+ display mode) → host document (style variables, fonts,
+ * layout) → host bridge → profile gate (the effective language from
+ * profile > host > en, the theme from host > OS) → host widget registry. Order is load-bearing (the
+ * bridge reads mcp-use's view-scoped hooks, the document layer and the gate
+ * read the host context it provides, the gate needs the host bridge) — hosts
+ * compose their app-specific layers (e.g. a standalone drill-in shell) inside.
+ */
+export declare function AppShellProviders({ widgets, children }: AppShellProvidersProps): import("react").JSX.Element;
+//# sourceMappingURL=app-shell-providers.d.ts.map

package/dist/ui/app-shell-providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-shell-providers.d.ts","sourceRoot":"","sources":["../../src/ui/app-shell-providers.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AACtC,OAAO,EAA4B,KAAK,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAM5F,MAAM,WAAW,sBAAsB;IACrC,qFAAqF;IACrF,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IACxC,QAAQ,EAAE,SAAS,CAAA;CACpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,sBAAsB,+BAY9E"}

package/dist/ui/app-shell-providers.js

@@ -0,0 +1,19 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { McpUseHostBridgeProvider } from "@miragon/mcp-toolkit-ui/app";
+import { HostDocument } from "./host-document.js";
+import { HostWidgetsProvider } from "./host-widgets.js";
+import { ProfileGate } from "./profile-gate.js";
+import { ViewHostBridge } from "./shell-host.js";
+/**
+ * The provider stack every composed-server host mounts under `bootstrapView`:
+ * host context (+ display mode) → host document (style variables, fonts,
+ * layout) → host bridge → profile gate (the effective language from
+ * profile > host > en, the theme from host > OS) → host widget registry. Order is load-bearing (the
+ * bridge reads mcp-use's view-scoped hooks, the document layer and the gate
+ * read the host context it provides, the gate needs the host bridge) — hosts
+ * compose their app-specific layers (e.g. a standalone drill-in shell) inside.
+ */
+export function AppShellProviders({ widgets, children }) {
+    return (_jsx(ViewHostBridge, { children: _jsx(HostDocument, { children: _jsx(McpUseHostBridgeProvider, { children: _jsx(ProfileGate, { children: _jsx(HostWidgetsProvider, { widgets: widgets, children: children }) }) }) }) }));
+}
+//# sourceMappingURL=app-shell-providers.js.map

package/dist/ui/app-shell-providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-shell-providers.js","sourceRoot":"","sources":["../../src/ui/app-shell-providers.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,wBAAwB,EAAwB,MAAM,6BAA6B,CAAA;AAC5F,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAQhD;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAA0B;IAC7E,OAAO,CACL,KAAC,cAAc,cACb,KAAC,YAAY,cACX,KAAC,wBAAwB,cACvB,KAAC,WAAW,cACV,KAAC,mBAAmB,IAAC,OAAO,EAAE,OAAO,YAAG,QAAQ,GAAuB,GAC3D,GACW,GACd,GACA,CAClB,CAAA;AACH,CAAC"}

package/dist/ui/app-shell-providers.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=app-shell-providers.test.d.ts.map

package/dist/ui/app-shell-providers.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-shell-providers.test.d.ts","sourceRoot":"","sources":["../../src/ui/app-shell-providers.test.tsx"],"names":[],"mappings":""}