@miragon/pulse-widget-shell 0.0.0-stage → 0.22.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Miragon GmbH
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,165 @@
-# Temporary Holding Version
+# @miragon/pulse-widget-shell
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Shared widget plumbing for the [Pulse](../../../README.md) MCP App widgets. It is the common base
+both widget modules ([`camunda7-connector`](../../connectors/camunda/camunda7-connector), [`analytics-connector`](../../connectors/analytics/analytics-connector)) build on,
+so every widget gets the same data-loading, refresh and view-composition behaviour.
+
+Published to the public npm registry as `@miragon/pulse-widget-shell`, the foundation
+package customers build their own connectors and composed servers on (see the
+`composed-server` template).
+
+## What it provides
+
+- **`adaptDataWidget`** (`./ui`): wraps a presentational React component into a data-aware widget:
+  handles the initial structured-content payload, in-widget `callTool()` refresh via the `*_data`
+  feeds, and loading / error states. This is what keeps widgets rename-safe and refreshable.
+- **View builders** (`./server`): `buildSingleWidgetView`, `buildComposedView` and
+  `buildDataFeedResult` (the single implementation of the app-only `*_data` feed result), the
+  server-side helpers that assemble a widget tool's result: a summary for the model plus the
+  `structuredContent` layout its view renders. The view itself is declared on the tool by
+  `showToolBinding` (a `view` binding; mcp-use derives the `_meta.ui` keys from it).
+- **BPMN names** (`./server`): `readBpmnNames` / `parseBpmnNames`: the one rule every module
+  reads a model's names by, without a DOM (a process's own name, else its Modeler pool's;
+  character references such as `
` and `&` decoded, space folded), so two modules never
+  name the same process or activity differently.
+- **The `shell:*` catalogue** (`./server`): `shellDefinition` + `createShellPlugin` register the
+  always-on generic `shell:kpi-grid` / `shell:data-table` widgets, the standard
+  `render-view`/builder composition targets fed via `props.dataKey`, and the settings page.
+  `createShellPlugin({ profileStore, allowSave })` adds the settings triple: `shell_show_settings`
+  (the page: the language section, then every `<module>:settings` section the host bundles),
+  `shell_settings_data` (what `ProfileGate` reads the language from) and `shell_save_settings`
+  (pass `allowSave: frameworkWritesAllowed(boot)`). Hosts spread `shellWidgets` (`./widgets`)
+  into their registry. Apps own no domain UI, so the catalogue lives here.
+- **Shared UI primitives** (`./widgets`): what the kit adds on top of `@miragon/mcp-toolkit-ui`
+  (`WidgetShell`, tables, `ListTable` + `PagedRows`, the dual-mode data hooks, formatters,
+  hand-offs, the BPMN viewer, `useApplyTheme`, …), reused across both widget packages.
+  Inline in a chat a view is a card (#396): `HostDocument`'s measured fit (`InlineFitBox`,
+  `useInlineRows`) caps a paged list (`usePagedViewData`) and an unpaged `ListTable` to the
+  rows that fit the host's height budget, measured on the rendered view, with the count and
+  a way to the rest (fullscreen where the host offers it); the BPMN canvas stays at 320 px,
+  long text in `TEXT_BLOCK_FRAME`.
+  Layout, states and feedback: `ListTable` scrolls inside a named, keyboard-reachable region
+  (column priorities via `hideBelow`, the row actions pinned with `sticky`, the sorted
+  column marked with `sort`, heads over adjacent columns with `groups`), `IdCell`/`IdText`
+  show an id shortened in Geist Mono with a copy button, `NamedId` shows a process or an
+  element by its name with the id quiet in mono below, `countTone`/`severityTone` are the one
+  severity ladder for incident and job counts, `describeError` turns an engine or
+  transport failure into what happened and what you can do (the toolkit's `ErrorState` in
+  `ViewDataState`, `QueryFallback`, `useDetailView`, raw text under "Details", retry
+  required), `useActionFeedback` raises the toolkit's toasts after a write (an engine
+  refusal's own reason quoted, a write whose answer never came flagged), `ConfirmDialog`
+  asks before one, `TableEmptyState` has an `empty` and a `done` variant, `KometMark` /
+  `AppEmptyState` carry the Miragon signature on app-level surfaces only (hidden by a brand
+  that sets `--brand-mark-display: none`), and the BPMN canvas reads one token module
+  (`BPMN_TOKENS`, `BPMN_OVERLAY_CSS`) with its height from the diagram's size at the scale
+  bpmn-js draws it (`diagramHeight`, read from the XML's DI before the import). The
+  toolkit's own components and helpers (`KpiGrid`, `StatusBadge`/`LivePill`/`CountPill`,
+  `FilterBar`, `WidgetHeader`, `PagedListFooter`, `SectionHeading`, the `TONE_*` maps,
+  `resolveTone`, `MICRO_LABEL`, `cn`, `useDebouncedValue`, …) are imported from the toolkit:
+  the kit neither forks nor re-exports them. Status
+  is a tone (the toolkit's `TONE_*` maps over the `--<tone>`, `--<tone>-soft` and `--<tone>-ink` roles: a dot,
+  edge or icon next to black text, black text on a tint, never a coloured number), function
+  icons are Lucide via `Icon`, and numbers, percentages, periods and durations render in the
+  view's locale (`formatNumber`, `formatPercent`, `formatPercentPoints`, `formatPeriod`,
+  `formatDuration`).
+- **Brand gates** (`./testing`): the checks every widget package runs in its own tests:
+  `catalogTextFindings` (the voice rules over a message catalog), `scanTypeScale` (text on the
+  type scale's five steps, nothing below 13 px), `scanGlyphs` (no Unicode glyphs,
+  emoji, lone symbols or sparkle imports as icons), `scanColors` (role names only: no palette
+  classes, retired accents or raw colours, with a reasoned allow list), `stylesheetColorFindings`
+  (no raw colour or retired accent variable in a stylesheet's rules) and `contrastFindings` with
+  `toneContrastPairs()` / `ROLE_CONTRAST_PAIRS` (WCAG AA of every tone and role pair over
+  `toolkitThemeStylesheets()` (the toolkit's Miragon theme as installed) plus your overrides,
+  light and dark; `:root` and the dark scopes cascade in source order as on
+  `<html class="dark" data-theme="dark">`, so override a role under both). Node only;
+  `scanGlyphs` and `scanColors` need `typescript`.
+- **Theme:** none of its own. The widgets colour through the role variables of the toolkit's
+  Miragon theme (`@miragon/mcp-toolkit-ui/theme.css`: the vendored `--cd-*` corporate-design
+  tokens and the roles on top, light and dark). Your stylesheet imports it after `tailwindcss`,
+  `@source`s the toolkit's `src` (and this package's `dist`), and overrides ROLE variables only.
+  The widgets follow the host's theme (then the OS); there is no theme preference.
+- **Module composition** (`./server`): `composeModules` is the composition-root machinery every
+  server shares: `MCP_ACTIVE_MODULES` selection with `module:toolset` suffixes, the env-typo warner
+  and boot warnings. `resolveBoot(env, { authenticated })` resolves ONE concrete toolset per module
+  per boot and threads it into the module's `config.toolset`; pass `authenticated: true` only when
+  your server actually installed OAuth. `logEffectiveToolsets(boot)` prints the one boot line that
+  states each module's toolset and why, and `frameworkWritesAllowed(boot)` decides whether
+  framework writes no module toolset filters (the toolkit's dashboard builder) may be registered:
+  only with OAuth and no module on its read-only floor.
+- **Toolset vocabularies** (`./server`): a module declares its toolsets as
+  `toolsets: createToolsetVocabulary(module, names, floor, { authenticatedDefault })` on its
+  definition; a module without one has no toolsets (a suffix is ignored with a warning). The rule
+  is fail-closed: no suffix →
+  `floor` without OAuth, `authenticatedDefault` (default: `floor`) with it; an empty or unknown
+  suffix → `floor` with a warning; `resolve(undefined)` → `floor`. Nothing resolves to
+  "everything" (a module's widest toolset is reachable only by naming it), and
+  `allowsDurableWrites(toolset)` is true for every toolset above the floor.
+- **Server boot** (`./server`): `createComposedServer({ label, info, composition, bundle, setup,
+oauth? })` is the one boot sequence every composed server shares: env-typo warnings, the HTTP
+  edge policy, ONE `resolveBoot` (authenticated exactly when you pass the OAuth provider you
+  install; build it with `oauthFromEnv({ env, label })` from `MCP_OAUTH` and spread
+  `OAUTH_ENV_VARS` into your known vars; it is the only caller identity), the boot log, your
+  `setup(boot)` (plugins + persistence), `createFrameworkApp` with
+  `serverInfo`/`instructions`, request context (request logging is mcp-use's own:
+  `MCP_USE_LOG_LEVEL`, warned at boot above `info`), `/metrics` (optional
+  `MCP_METRICS_TOKEN`), the Host/Origin guard, `/health/*` and the font route
+  (`installFontAssets`: Geist + Geist Mono as woff2 under `/fonts/geist-<version>/`, cached
+  immutable, any origin, behind the guard). Every view-bound tool advertises `MCP_URL`'s origin
+  in its view CSP `resourceDomains` and the Apps SDK `openai/widgetCSP` (`fontAssetsCsp`, applied
+  to every plugin by `honorWidgetMetaDefaults`); without `MCP_URL` mcp-use appends the origin
+  the host read the view from. `HostDocument` declares the faces from that origin
+  (`declareServedFonts`, `font-display: swap`), so a host that blocks it shows its own font, then
+  the system's. `mcp-use dev` serves the returned
+  `app`; production calls `listen({ handleSignals: true })`: mcp-use's `toNodeHandler` behind a
+  request-body cap (`MCP_MAX_BODY_BYTES`, 413 before buffering), an in-flight body budget of 4×
+  the cap (503) and a 30 s request timeout, plus a graceful drain (stop accepting, in-flight
+  requests finish, readiness 503 `draining`, then your `runtime.shutdown()`). The guard is
+  DNS-rebinding protection: `Host` (and a POST's `Origin`) must be localhost-class, `MCP_URL`'s or
+  in `MCP_ALLOWED_HOSTS`/`MCP_ALLOWED_ORIGINS` (spread `HTTP_EDGE_ENV_VARS` into your known vars);
+  `/health*` and `/metrics` stay reachable by IP for probes and scrapers.
+- **Persistence** (`./server`): the user-profile store (in-memory / filesystem / Postgres) and the
+  Postgres `DashboardStore` for the toolkit's saved dashboards, plus the `createSql` client and the
+  `runMigrations` runner that applies each store's own `Migration[]` (`PROFILE_STORE_MIGRATIONS`,
+  `DASHBOARD_STORE_MIGRATIONS`) under an advisory lock. A composed server picks its backends from
+  its own env and injects them; it does not reimplement the stores. `postgres` is an **optional**
+  peer dependency: the driver is loaded through a dynamic import inside `createSql`, so servers
+  persisting to disk or memory never need it installed.
+
+## Exports
+
+| Subpath     | Contents                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
+| ----------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `./server`  | `buildSingleWidgetView` / `buildComposedView` / `buildDataFeedResult`, `shellDefinition`/`createShellPlugin`, `createBuilderTexts` (the view builder's en/de names from a module's catalogs), `composeModules` / `frameworkWritesAllowed` / `createToolsetVocabulary`, `createComposedServer` and its edge pieces (incl. `installFontAssets`, `fontAssetsCsp`, `honorWidgetMetaDefaults`), `oauthFromEnv`, caller identity (`resolveProfileKey`), the profile + dashboard stores and the Postgres client/migration runner |
+| `./ui`      | `adaptDataWidget`, the data-aware widget wrapper                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
+| `./widgets` | Shared widget UI primitives incl. the generic `shell:*` components and the host app shell (`AppShellProviders`: the language as explicit profile > host context > English, the theme as host context > OS)                                                                                                                                                                                                                                                                                                                |
+| `./testing` | The brand gates for your widget package's tests: `catalogTextFindings`, `missingDisplayTexts` + `displayTextCatalog` (every widget, step and top-level props field named for the view builder in en and de) + `displayTextsSentToModel` (none of those names reaches the model), `scanGlyphs`, `scanColors`, `stylesheetColorFindings`, `parseThemeVariables` + `contrastFindings` with `toneContrastPairs()` / `ROLE_CONTRAST_PAIRS` over `toolkitThemeStylesheets()`                                                    |
+
+The `@miragon/mcp-toolkit-*`, `react`/`react-dom`, `zod` and `@tanstack/react-query` deps are
+**peer dependencies**: they must resolve to a single instance across the host bundle (see the
+`dedupe` array in the server app's `vite.config.ts`), otherwise the React contexts diverge and
+in-widget queries hang. They are published as ranges (`react`/`react-dom` `^19.2.0`, `zod`
+`^4.4.0`, `@miragon/mcp-toolkit-*` `~2.8.1`, `lucide-react` `^0.562.0 || ^1.0.0`) so they dedupe
+against your app's copy; add `lucide-react` to your `dedupe` list too. **A host bundle that dedupes
+`lucide-react` needs 1.47.0 or newer** (the version `@miragon/mcp-toolkit-ui` 2.8 depends on): the
+toolkit's chrome imports `LucideProvider`, which 0.x does not export, so a deduped 0.x copy fails
+the bundle build with a missing export. The peer range still admits 0.562 only for this repo's own
+test graph; no package manager warns you about it.
+
+`mcp-use` is the exception: it is an **exactly pinned** peer dependency. Pin it to `mcp-use@2.7.3`
+in your app. A duplicate `mcp-use` instance breaks the React context and hangs every in-widget query
+on "Loading…".
+
+## Where it fits
+
+```
+camunda7-connector / analytics-connector widgets
+            │  use
+            ▼
+   @miragon/pulse-widget-shell   ──  adaptDataWidget · view builders · UI primitives
+            │  build on
+            ▼
+   @miragon/mcp-toolkit-ui (React + react-query)
+```
+
+See the architecture invariants in [`CLAUDE.md`](../../../CLAUDE.md) for the four-link widget
+registration chain.

package/dist/adapt-data-widget.d.ts

@@ -0,0 +1,7 @@
+/**
+ * The `@miragon/pulse-widget-shell/ui` entry: the toolkit's data-widget adapter
+ * (`@miragon/mcp-toolkit-ui/app`), which the module widget registries use to
+ * adapt single-data components.
+ */
+export { adaptDataWidget, type DescribeForModel } from "@miragon/mcp-toolkit-ui/app";
+//# sourceMappingURL=adapt-data-widget.d.ts.map

package/dist/adapt-data-widget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapt-data-widget.d.ts","sourceRoot":"","sources":["../src/adapt-data-widget.tsx"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,6BAA6B,CAAA"}

package/dist/adapt-data-widget.js

@@ -0,0 +1,7 @@
+/**
+ * The `@miragon/pulse-widget-shell/ui` entry: the toolkit's data-widget adapter
+ * (`@miragon/mcp-toolkit-ui/app`), which the module widget registries use to
+ * adapt single-data components.
+ */
+export { adaptDataWidget } from "@miragon/mcp-toolkit-ui/app";
+//# sourceMappingURL=adapt-data-widget.js.map

package/dist/adapt-data-widget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapt-data-widget.js","sourceRoot":"","sources":["../src/adapt-data-widget.tsx"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,eAAe,EAAyB,MAAM,6BAA6B,CAAA"}

package/dist/bpmn-names.d.ts

@@ -0,0 +1,42 @@
+/**
+ * THE rule every module names a BPMN process and its elements by (#322 U13):
+ * one reader for the server (no DOM) and the browser alike, so camunda7,
+ * analytics and the kit's heatmap never give the same process or activity two
+ * different names. The Camunda Modeler names the POOL of a collaboration and
+ * leaves the process unnamed, and it writes a line break, `&`, `"`, `<` or
+ * `>` in a name as a character reference (`&#10;`, `&#38;` …): a reader that
+ * knew only the process element or only the five named entities would show
+ * the key or the raw reference instead.
+ */
+/** The names one model gives one process: its own (or its pool's) and the elements that have one. */
+export interface BpmnNames {
+    /** The process's own name, else the name of the pool that holds it; null when neither has one. */
+    name: string | null;
+    /** Element id → name, only for elements that carry a name (no process, no pool). */
+    elements: Record<string, string>;
+}
+/** Every name one model gives, for a caller that does not yet know which process it asks about. */
+export interface BpmnModelNames {
+    /** Process id → its name by the {@link BpmnNames.name} rule (own name, else its pool's). */
+    processes: Record<string, string>;
+    /** Element id → name, only for elements that carry a name (no process, no pool). */
+    elements: Record<string, string>;
+}
+/**
+ * Every name in one BPMN 2.0 XML document, read without a DOM: each
+ * `<process id=… name=…>` (or, when the process has no name, the name of the
+ * pool — `<participant processRef=…>` — that holds it) and every other
+ * element with an `id` and a non-empty `name`. Comments and CDATA are
+ * skipped, any namespace prefix is accepted. A document that is not BPMN
+ * yields no names, never an error.
+ */
+export declare function readBpmnNames(xml: string): BpmnModelNames;
+/** The name {@link readBpmnNames} found for process `processDefinitionKey`, or null. */
+export declare function bpmnProcessNameOf(names: BpmnModelNames, processDefinitionKey: string): string | null;
+/**
+ * The names of process `processDefinitionKey` in one BPMN 2.0 XML document:
+ * its own name (else its pool's) and every named element
+ * ({@link readBpmnNames}).
+ */
+export declare function parseBpmnNames(xml: string, processDefinitionKey: string): BpmnNames;
+//# sourceMappingURL=bpmn-names.d.ts.map

package/dist/bpmn-names.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bpmn-names.d.ts","sourceRoot":"","sources":["../src/bpmn-names.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,qGAAqG;AACrG,MAAM,WAAW,SAAS;IACxB,kGAAkG;IAClG,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,oFAAoF;IACpF,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACjC;AAED,mGAAmG;AACnG,MAAM,WAAW,cAAc;IAC7B,4FAA4F;IAC5F,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,oFAAoF;IACpF,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACjC;AA+FD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAqBzD;AAED,wFAAwF;AACxF,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,cAAc,EACrB,oBAAoB,EAAE,MAAM,GAC3B,MAAM,GAAG,IAAI,CAIf;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAGnF"}

package/dist/bpmn-names.js

@@ -0,0 +1,151 @@
+/**
+ * THE rule every module names a BPMN process and its elements by (#322 U13):
+ * one reader for the server (no DOM) and the browser alike, so camunda7,
+ * analytics and the kit's heatmap never give the same process or activity two
+ * different names. The Camunda Modeler names the POOL of a collaboration and
+ * leaves the process unnamed, and it writes a line break, `&`, `"`, `<` or
+ * `>` in a name as a character reference (`&#10;`, `&#38;` …): a reader that
+ * knew only the process element or only the five named entities would show
+ * the key or the raw reference instead.
+ */
+/** A start tag: prefix, local name, and its attributes (a quoted value may hold `>`). */
+const START_TAG = /<(?:[A-Za-z_][\w.-]*:)?([A-Za-z_][\w.-]*)((?:\s+[A-Za-z_][\w:.-]*\s*=\s*(?:"[^"]*"|'[^']*'))*)\s*\/?>/g;
+const ENTITIES = { amp: "&", lt: "<", gt: ">", quot: '"', apos: "'" };
+/** A numeric character reference's character; one past Unicode stays as written. */
+const character = (code, written) => code <= 0x10ffff ? String.fromCodePoint(code) : written;
+/** An attribute value as text: entities decoded, line breaks and runs of space folded. */
+function attributeText(raw) {
+    return raw
+        .replace(/&(?:#x([0-9a-f]+)|#(\d+)|(amp|lt|gt|quot|apos));/gi, (match, hex, dec, named) => {
+        if (hex)
+            return character(Number.parseInt(hex, 16), match);
+        if (dec)
+            return character(Number.parseInt(dec, 10), match);
+        return ENTITIES[(named ?? "").toLowerCase()] ?? match;
+    })
+        .replace(/\s+/g, " ")
+        .trim();
+}
+const isSpace = (c) => c === " " || c === "\t" || c === "\n" || c === "\r";
+const NAME_CHAR = /[\w:.-]/;
+const NAME_START = /^[A-Za-z_]/;
+/**
+ * The `name="value"` / `name='value'` pairs of a start tag, read by a linear
+ * tokenizer: a global attribute regex rescans from every position of a run
+ * without `=` (CodeQL js/polynomial-redos), and the XML comes from an engine.
+ * Every step advances, so malformed input ends the loop too.
+ */
+function attributesOf(raw) {
+    const out = {};
+    let at = 0;
+    while (at < raw.length) {
+        while (isSpace(raw[at]))
+            at++;
+        const start = at;
+        while (at < raw.length && NAME_CHAR.test(raw[at]))
+            at++;
+        const name = raw.slice(start, at);
+        while (isSpace(raw[at]))
+            at++;
+        if (raw[at] !== "=") {
+            at = Math.max(at, start + 1);
+            continue;
+        }
+        at++;
+        while (isSpace(raw[at]))
+            at++;
+        const quote = raw[at];
+        if (quote !== '"' && quote !== "'")
+            continue;
+        const end = raw.indexOf(quote, at + 1);
+        if (end === -1)
+            break;
+        if (NAME_START.test(name))
+            out[name] = raw.slice(at + 1, end);
+        at = end + 1;
+    }
+    return out;
+}
+const SKIPPED_SECTIONS = [
+    { open: "<!--", close: "-->" },
+    { open: "<![CDATA[", close: "]]>" },
+];
+/**
+ * The document without its comments and CDATA sections, cut by a linear
+ * scan instead of a lazy regex (CodeQL js/polynomial-redos and
+ * js/incomplete-multi-character-sanitization: the XML comes from an engine).
+ * An unterminated section swallows the rest of the document, so no opener
+ * ever survives.
+ */
+function withoutCommentsAndCdata(xml) {
+    // Each opener's next position is searched again only once the scan has
+    // passed it, so the whole cut stays linear in the document's length.
+    const nextOpen = SKIPPED_SECTIONS.map((section) => xml.indexOf(section.open));
+    let out = "";
+    let at = 0;
+    for (;;) {
+        let pick = -1;
+        SKIPPED_SECTIONS.forEach((section, i) => {
+            if (nextOpen[i] !== -1 && nextOpen[i] < at)
+                nextOpen[i] = xml.indexOf(section.open, at);
+            if (nextOpen[i] !== -1 && (pick === -1 || nextOpen[i] < nextOpen[pick]))
+                pick = i;
+        });
+        if (pick === -1)
+            return out + xml.slice(at);
+        const { open, close } = SKIPPED_SECTIONS[pick];
+        out += xml.slice(at, nextOpen[pick]);
+        const end = xml.indexOf(close, nextOpen[pick] + open.length);
+        if (end === -1)
+            return out;
+        at = end + close.length;
+    }
+}
+/**
+ * Every name in one BPMN 2.0 XML document, read without a DOM: each
+ * `<process id=… name=…>` (or, when the process has no name, the name of the
+ * pool — `<participant processRef=…>` — that holds it) and every other
+ * element with an `id` and a non-empty `name`. Comments and CDATA are
+ * skipped, any namespace prefix is accepted. A document that is not BPMN
+ * yields no names, never an error.
+ */
+export function readBpmnNames(xml) {
+    const text = withoutCommentsAndCdata(xml);
+    const own = {};
+    const pools = {};
+    const elements = {};
+    for (const m of text.matchAll(START_TAG)) {
+        const local = m[1];
+        const attrs = attributesOf(m[2] ?? "");
+        const name = attrs.name === undefined ? "" : attributeText(attrs.name);
+        if (local === "participant") {
+            if (attrs.processRef && name)
+                pools[attrs.processRef] = name;
+            continue;
+        }
+        if (!attrs.id || !name)
+            continue;
+        if (local === "process") {
+            own[attrs.id] = name;
+            continue;
+        }
+        elements[attrs.id] = name;
+    }
+    return { processes: { ...pools, ...own }, elements };
+}
+/** The name {@link readBpmnNames} found for process `processDefinitionKey`, or null. */
+export function bpmnProcessNameOf(names, processDefinitionKey) {
+    return Object.hasOwn(names.processes, processDefinitionKey)
+        ? names.processes[processDefinitionKey]
+        : null;
+}
+/**
+ * The names of process `processDefinitionKey` in one BPMN 2.0 XML document:
+ * its own name (else its pool's) and every named element
+ * ({@link readBpmnNames}).
+ */
+export function parseBpmnNames(xml, processDefinitionKey) {
+    const names = readBpmnNames(xml);
+    return { name: bpmnProcessNameOf(names, processDefinitionKey), elements: names.elements };
+}
+//# sourceMappingURL=bpmn-names.js.map

package/dist/bpmn-names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bpmn-names.js","sourceRoot":"","sources":["../src/bpmn-names.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAkBH,yFAAyF;AACzF,MAAM,SAAS,GACb,wGAAwG,CAAA;AAE1G,MAAM,QAAQ,GAA2B,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;AAE7F,oFAAoF;AACpF,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE,CAClD,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;AAEzD,0FAA0F;AAC1F,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG;SACP,OAAO,CACN,oDAAoD,EACpD,CAAC,KAAa,EAAE,GAAY,EAAE,GAAY,EAAE,KAAc,EAAE,EAAE;QAC5D,IAAI,GAAG;YAAE,OAAO,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;QAC1D,IAAI,GAAG;YAAE,OAAO,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;QAC1D,OAAO,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,KAAK,CAAA;IACvD,CAAC,CACF;SACA,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAA;AACX,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,CAAqB,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAA;AAC9F,MAAM,SAAS,GAAG,SAAS,CAAA;AAC3B,MAAM,UAAU,GAAG,YAAY,CAAA;AAE/B;;;;;GAKG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,IAAI,EAAE,GAAG,CAAC,CAAA;IACV,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACvB,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAE,EAAE,EAAE,CAAA;QAC7B,MAAM,KAAK,GAAG,EAAE,CAAA;QAChB,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAE,EAAE,EAAE,CAAA;QACvD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAE,EAAE,EAAE,CAAA;QAC7B,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;YACpB,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;YAC5B,SAAQ;QACV,CAAC;QACD,EAAE,EAAE,CAAA;QACJ,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAE,EAAE,EAAE,CAAA;QAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC,CAAA;QACrB,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG;YAAE,SAAQ;QAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QACtC,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,MAAK;QACrB,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;QAC7D,EAAE,GAAG,GAAG,GAAG,CAAC,CAAA;IACd,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,gBAAgB,GAAG;IACvB,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE;IAC9B,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE;CAC3B,CAAA;AAEV;;;;;;GAMG;AACH,SAAS,uBAAuB,CAAC,GAAW;IAC1C,uEAAuE;IACvE,qEAAqE;IACrE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IAC7E,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,IAAI,EAAE,GAAG,CAAC,CAAA;IACV,SAAS,CAAC;QACR,IAAI,IAAI,GAAG,CAAC,CAAC,CAAA;QACb,gBAAgB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE;YACtC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE;gBAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;YACvF,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAAE,IAAI,GAAG,CAAC,CAAA;QACnF,CAAC,CAAC,CAAA;QACF,IAAI,IAAI,KAAK,CAAC,CAAC;YAAE,OAAO,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC3C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;QAC9C,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;QACpC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;QAC5D,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO,GAAG,CAAA;QAC1B,EAAE,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,CAAA;IACzB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,IAAI,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAA;IACzC,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,MAAM,KAAK,GAA2B,EAAE,CAAA;IACxC,MAAM,QAAQ,GAA2B,EAAE,CAAA;IAC3C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAClB,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACtE,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,UAAU,IAAI,IAAI;gBAAE,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,CAAA;YAC5D,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI;YAAE,SAAQ;QAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,CAAA;YACpB,SAAQ;QACV,CAAC;QACD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,CAAA;IAC3B,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAA;AACtD,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,iBAAiB,CAC/B,KAAqB,EACrB,oBAA4B;IAE5B,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,oBAAoB,CAAC;QACzD,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,oBAAoB,CAAC;QACvC,CAAC,CAAC,IAAI,CAAA;AACV,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,oBAA4B;IACtE,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;IAChC,OAAO,EAAE,IAAI,EAAE,iBAAiB,CAAC,KAAK,EAAE,oBAAoB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAA;AAC3F,CAAC"}

package/dist/bpmn-names.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=bpmn-names.test.d.ts.map

package/dist/bpmn-names.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bpmn-names.test.d.ts","sourceRoot":"","sources":["../src/bpmn-names.test.ts"],"names":[],"mappings":""}

package/dist/bpmn-names.test.js

@@ -0,0 +1,143 @@
+import { describe, expect, it } from "vitest";
+import { bpmnProcessNameOf, parseBpmnNames, readBpmnNames } from "./bpmn-names.js";
+/**
+ * The one naming rule for a BPMN model (#322 U13): camunda7, analytics and
+ * the heatmap read the same names from the same diagram.
+ */
+const LEASING = `<?xml version="1.0" encoding="UTF-8"?>
+<bpmn:definitions xmlns:bpmn="http://www.omg.org/spec/BPMN/20100524/MODEL" id="Defs_1">
+  <!-- <bpmn:userTask id="Task_Commented" name="Never shown" /> -->
+  <bpmn:process id="miraveloLeasing" name="Bike Leasing" isExecutable="true">
+    <bpmn:startEvent id="StartEvent_1" name="Application&#10;&#10; received" />
+    <bpmn:userTask id="Activity_Decide" name='Decide on "Leasing &amp; Co"'>
+      <bpmn:documentation><![CDATA[<bpmn:task id="Task_InCdata" name="Nope"/>]]></bpmn:documentation>
+    </bpmn:userTask>
+    <bpmn:exclusiveGateway id="Gateway_Amount" name="Amount &gt; 1000?" />
+    <bpmn:serviceTask id="Activity_Unnamed" />
+    <bpmn:serviceTask id="Activity_Blank" name="   " />
+    <bpmn:endEvent id="EndEvent_Done" name="Done &#x2713;"/>
+  </bpmn:process>
+</bpmn:definitions>`;
+/** What the Camunda Modeler writes: a named pool around an unnamed process, names with references. */
+const MODELER_COLLABORATION = `<?xml version="1.0" encoding="UTF-8"?>
+<bpmn:definitions xmlns:bpmn="http://www.omg.org/spec/BPMN/20100524/MODEL" id="Defs_2">
+  <bpmn:collaboration id="Collaboration_1">
+    <bpmn:participant id="Participant_Leasing" name="Miravelo - Bike Leasing" processRef="miraveloLeasing" />
+  </bpmn:collaboration>
+  <bpmn:process id="miraveloLeasing" isExecutable="true">
+    <bpmn:userTask id="Activity_Check" name="Rechnung&#10;prüfen" />
+    <bpmn:userTask id="Activity_Approve" name="Prüfen &#38; Freigeben" />
+    <bpmn:task id="Activity_Quote" name="&#34;Angebot&#34; &#60;neu&#62;" />
+  </bpmn:process>
+</bpmn:definitions>`;
+describe("parseBpmnNames", () => {
+    it("reads the process name and every named element, entities decoded, space folded", () => {
+        expect(parseBpmnNames(LEASING, "miraveloLeasing")).toEqual({
+            name: "Bike Leasing",
+            elements: {
+                StartEvent_1: "Application received",
+                Activity_Decide: 'Decide on "Leasing & Co"',
+                Gateway_Amount: "Amount > 1000?",
+                EndEvent_Done: "Done ✓",
+            },
+        });
+    });
+    it("names a Modeler collaboration's process by its pool, numeric references decoded", () => {
+        expect(parseBpmnNames(MODELER_COLLABORATION, "miraveloLeasing")).toEqual({
+            name: "Miravelo - Bike Leasing",
+            elements: {
+                Activity_Check: "Rechnung prüfen",
+                Activity_Approve: "Prüfen & Freigeben",
+                Activity_Quote: '"Angebot" <neu>',
+            },
+        });
+    });
+    it("takes the pool's name when the process has none, and the default namespace", () => {
+        const xml = `<definitions>
+      <collaboration id="Collab">
+        <participant id="Pool" name="Invoice handling" processRef="invoice"/>
+        <participant id="Pool_Other" name="Another pool" processRef="other"/>
+      </collaboration>
+      <process id="invoice"><task id="Task_A" name="Approve"/></process>
+      <process id="other" name="Other process"/>
+    </definitions>`;
+        // The pool is no element of the process: only the named task is. The
+        // pool of another process of the file never names this one.
+        expect(parseBpmnNames(xml, "invoice")).toEqual({
+            name: "Invoice handling",
+            elements: { Task_A: "Approve" },
+        });
+        // Another process of the same file keeps its own name.
+        expect(parseBpmnNames(xml, "other").name).toBe("Other process");
+    });
+    it("prefers the process's own name over its pool's, in either order", () => {
+        const poolFirst = `<definitions><participant processRef="p" name="Pool"/><process id="p" name="Own"/></definitions>`;
+        const processFirst = `<definitions><process id="p" name="Own"/><participant processRef="p" name="Pool"/></definitions>`;
+        expect(parseBpmnNames(poolFirst, "p").name).toBe("Own");
+        expect(parseBpmnNames(processFirst, "p").name).toBe("Own");
+        // A blank own name is no name: the pool names it.
+        const blank = `<definitions><participant processRef="p" name="Pool"/><process id="p" name=" &#10; "/></definitions>`;
+        expect(parseBpmnNames(blank, "p").name).toBe("Pool");
+    });
+    it("yields no names for a document that is not BPMN, never an error", () => {
+        expect(parseBpmnNames("not xml at all <<<", "x")).toEqual({ name: null, elements: {} });
+        expect(parseBpmnNames("", "x")).toEqual({ name: null, elements: {} });
+        // A character reference past Unicode stays as written instead of throwing.
+        const odd = `<process id="p"><task id="T" name="a &#99999999; b &#x110000; &bogus;"/></process>`;
+        expect(parseBpmnNames(odd, "p").elements.T).toBe("a &#99999999; b &#x110000; &bogus;");
+    });
+});
+describe("readBpmnNames — comments and CDATA are cut linearly (CodeQL js/polynomial-redos)", () => {
+    const doc = (inner) => `<definitions><process id="p" name="Rechnung">${inner}<task id="t" name="Prüfen"/></process></definitions>`;
+    it("skips comments and CDATA, also when they quote a tag", () => {
+        const names = readBpmnNames(doc('<!-- <task id="x" name="Kommentar"/> --><![CDATA[<task id="y" name="Daten"/>]]>'));
+        expect(names.elements).toEqual({ t: "Prüfen" });
+        expect(names.processes).toEqual({ p: "Rechnung" });
+    });
+    it("drops everything after an unterminated opener, so no opener survives", () => {
+        expect(readBpmnNames(doc("<!-- never closed")).elements).toEqual({});
+        expect(readBpmnNames(doc("<![CDATA[ never closed")).elements).toEqual({});
+    });
+    it("reads attributes with a linear tokenizer", () => {
+        const many = Array.from({ length: 20_000 }, (_, i) => `a${i}="${i}"`).join(" ");
+        const doc = (tag) => `<definitions><process id="p">${tag}</process></definitions>`;
+        const started = performance.now();
+        // A run without `=` makes the tag malformed: no names, and still fast.
+        expect(readBpmnNames(doc(`<task ${"A".repeat(100_000)} id="t" name="x"/>`)).elements).toEqual({});
+        expect(readBpmnNames(doc(`<task ${many} id="t" name='Prüfen' other = "x"/>`)).elements).toEqual({
+            t: "Prüfen",
+        });
+        expect(performance.now() - started).toBeLessThan(1000);
+    });
+    it("stays fast on many repeated openers", () => {
+        const started = performance.now();
+        expect(readBpmnNames(doc("<!--".repeat(100_000))).elements).toEqual({});
+        expect(readBpmnNames(doc("<!-- x -->".repeat(50_000))).elements).toEqual({ t: "Prüfen" });
+        expect(performance.now() - started).toBeLessThan(1000);
+    });
+});
+describe("readBpmnNames", () => {
+    it("names every process of the file by the same rule, for a caller without the key", () => {
+        const xml = `<definitions>
+      <collaboration id="Collab">
+        <participant id="Pool_A" name="Pool A" processRef="a"/>
+        <participant id="Pool_B" name="Pool B" processRef="b"/>
+        <participant id="Pool_Blank" name="" processRef="c"/>
+        <participant id="Pool_NoRef" name="Black box"/>
+      </collaboration>
+      <process id="a"><task id="Task_A" name="A task"/></process>
+      <process id="b" name="Process B"/>
+      <process id="c"/>
+    </definitions>`;
+        const names = readBpmnNames(xml);
+        expect(names).toEqual({
+            processes: { a: "Pool A", b: "Process B" },
+            elements: { Task_A: "A task" },
+        });
+        expect(bpmnProcessNameOf(names, "a")).toBe("Pool A");
+        expect(bpmnProcessNameOf(names, "c")).toBeNull();
+        // A key such as `constructor` is no inherited lookup.
+        expect(bpmnProcessNameOf(names, "constructor")).toBeNull();
+    });
+});
+//# sourceMappingURL=bpmn-names.test.js.map

package/dist/bpmn-names.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bpmn-names.test.js","sourceRoot":"","sources":["../src/bpmn-names.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAElF;;;GAGG;AAEH,MAAM,OAAO,GAAG;;;;;;;;;;;;;oBAaI,CAAA;AAEpB,sGAAsG;AACtG,MAAM,qBAAqB,GAAG;;;;;;;;;;oBAUV,CAAA;AAEpB,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC;YACzD,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE;gBACR,YAAY,EAAE,sBAAsB;gBACpC,eAAe,EAAE,0BAA0B;gBAC3C,cAAc,EAAE,gBAAgB;gBAChC,aAAa,EAAE,QAAQ;aACxB;SACF,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,CAAC,cAAc,CAAC,qBAAqB,EAAE,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC;YACvE,IAAI,EAAE,yBAAyB;YAC/B,QAAQ,EAAE;gBACR,cAAc,EAAE,iBAAiB;gBACjC,gBAAgB,EAAE,oBAAoB;gBACtC,cAAc,EAAE,iBAAiB;aAClC;SACF,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,GAAG,GAAG;;;;;;;mBAOG,CAAA;QACf,qEAAqE;QACrE,4DAA4D;QAC5D,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7C,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;SAChC,CAAC,CAAA;QACF,uDAAuD;QACvD,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,SAAS,GAAG,kGAAkG,CAAA;QACpH,MAAM,YAAY,GAAG,kGAAkG,CAAA;QACvH,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACvD,MAAM,CAAC,cAAc,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1D,kDAAkD;QAClD,MAAM,KAAK,GAAG,sGAAsG,CAAA;QACpH,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,cAAc,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAA;QACvF,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAA;QACrE,2EAA2E;QAC3E,MAAM,GAAG,GAAG,oFAAoF,CAAA;QAChG,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAA;IACxF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kFAAkF,EAAE,GAAG,EAAE;IAChG,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,EAAE,CAC5B,gDAAgD,KAAK,sDAAsD,CAAA;IAE7G,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,KAAK,GAAG,aAAa,CACzB,GAAG,CAAC,iFAAiF,CAAC,CACvF,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC/C,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACpE,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC3E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC/E,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,gCAAgC,GAAG,0BAA0B,CAAA;QAC1F,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAA;QACjC,uEAAuE;QACvE,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAC3F,EAAE,CACH,CAAA;QACD,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,IAAI,qCAAqC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAC7F;YACE,CAAC,EAAE,QAAQ;SACZ,CACF,CAAA;QACD,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAA;QACjC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACvE,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;QACzF,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,GAAG,GAAG;;;;;;;;;;mBAUG,CAAA;QACf,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;QAChC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACpB,SAAS,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE;YAC1C,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;SAC/B,CAAC,CAAA;QACF,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACpD,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QAChD,sDAAsD;QACtD,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC5D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/build-data-feed-result.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=build-data-feed-result.test.d.ts.map

package/dist/build-data-feed-result.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-data-feed-result.test.d.ts","sourceRoot":"","sources":["../src/build-data-feed-result.test.ts"],"names":[],"mappings":""}

package/dist/build-data-feed-result.test.js

@@ -0,0 +1,28 @@
+import { describe, expect, it } from "vitest";
+import { parseToolResult, parseViewToolResult } from "@miragon/mcp-toolkit-ui";
+import { buildDataFeedResult } from "./server.js";
+/**
+ * The app-only `*_data` feed result (architecture invariant 5): the payload
+ * ONCE, as compact JSON text, and deliberately no widget `_meta` — a result
+ * carrying `ui.resourceUri` would be rendered by the host instead of being
+ * returned to the in-widget `callTool()`, which is exactly the bug this single
+ * shared implementation exists to prevent.
+ */
+describe("buildDataFeedResult", () => {
+    const data = { rows: [{ id: "pi-1" }], total: 1 };
+    const result = buildDataFeedResult(data);
+    it("puts the payload on the text channel as compact JSON", () => {
+        expect(result.content).toEqual([{ type: "text", text: '{"rows":[{"id":"pi-1"}],"total":1}' }]);
+    });
+    it("is read back by the toolkit's parsers, which fall back to the JSON text", () => {
+        expect(parseToolResult(result)).toEqual(data);
+        expect(parseViewToolResult(result)).toEqual(data);
+    });
+    it("sends the payload once — no structuredContent copy, no widget _meta, no view binding", () => {
+        expect(Object.keys(result)).toEqual(["content"]);
+    });
+    it("stays a plain JSON envelope for an empty payload", () => {
+        expect(buildDataFeedResult({}).content).toEqual([{ type: "text", text: "{}" }]);
+    });
+});
+//# sourceMappingURL=build-data-feed-result.test.js.map