@mono-agent/web 0.19.0 → 0.20.0

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1E,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,aAAa,EACb,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,YAAY,EACV,2BAA2B,EAC3B,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,8BAA8B,EAC9B,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EACV,qBAAqB,EACrB,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,0BAA0B,EAC1B,oCAAoC,EACpC,sBAAsB,EACtB,8BAA8B,EAC9B,2BAA2B,EAC3B,sBAAsB,EACtB,+BAA+B,EAC/B,6BAA6B,EAC7B,wBAAwB,EACxB,UAAU,GACX,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,aAAa,EACb,YAAY,EACZ,kBAAkB,EAClB,QAAQ,EACR,YAAY,EACZ,mBAAmB,EACnB,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,0BAA0B,EAC1B,gBAAgB,EAChB,wBAAwB,EACxB,yBAAyB,EACzB,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,oBAAoB,EACpB,YAAY,EACZ,gBAAgB,EAChB,yBAAyB,EACzB,SAAS,EACT,eAAe,EACf,gBAAgB,EAChB,QAAQ,GACT,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1E,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,aAAa,EACb,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,YAAY,EACV,2BAA2B,EAC3B,6BAA6B,EAC7B,4BAA4B,EAC5B,qCAAqC,EACrC,iCAAiC,GAClC,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,8BAA8B,EAC9B,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EACV,qBAAqB,EACrB,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,0BAA0B,EAC1B,oCAAoC,EACpC,sBAAsB,EACtB,8BAA8B,EAC9B,2BAA2B,EAC3B,sBAAsB,EACtB,+BAA+B,EAC/B,6BAA6B,EAC7B,wBAAwB,EACxB,UAAU,GACX,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,aAAa,EACb,YAAY,EACZ,kBAAkB,EAClB,QAAQ,EACR,YAAY,EACZ,mBAAmB,EACnB,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,0BAA0B,EAC1B,gCAAgC,EAChC,gBAAgB,EAChB,wBAAwB,EACxB,yBAAyB,EACzB,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,oBAAoB,EACpB,YAAY,EACZ,gBAAgB,EAChB,yBAAyB,EACzB,SAAS,EACT,eAAe,EACf,gBAAgB,EAChB,QAAQ,GACT,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,GACf,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,aAAa,EACb,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAOlE,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,gBAAgB,CAAC;AAOxB,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAStD,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,0BAA0B,EAC1B,oCAAoC,EACpC,sBAAsB,EACtB,8BAA8B,EAC9B,2BAA2B,EAC3B,sBAAsB,EACtB,+BAA+B,EAC/B,6BAA6B,EAC7B,wBAAwB,EACxB,UAAU,GACX,MAAM,gBAAgB,CAAC;AAwCxB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,GACf,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,aAAa,EACb,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AASlE,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,gBAAgB,CAAC;AAOxB,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAStD,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,0BAA0B,EAC1B,oCAAoC,EACpC,sBAAsB,EACtB,8BAA8B,EAC9B,2BAA2B,EAC3B,sBAAsB,EACtB,+BAA+B,EAC/B,6BAA6B,EAC7B,wBAAwB,EACxB,UAAU,GACX,MAAM,gBAAgB,CAAC;AAyCxB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}

package/dist/mcp-app-document.d.ts

@@ -0,0 +1,15 @@
+export declare const MCP_APP_SECURED_HTML_MAX_BYTES: number;
+export interface McpAppDocumentCsp {
+    readonly connectDomains?: readonly string[];
+    readonly resourceDomains?: readonly string[];
+    readonly frameDomains?: readonly string[];
+    readonly baseUriDomains?: readonly string[];
+}
+export interface McpAppDocumentMetadata {
+    readonly csp?: McpAppDocumentCsp;
+}
+/** Build the inner document policy from already intersected host grants. */
+export declare const mcpAppContentSecurityPolicy: (metadata: McpAppDocumentMetadata) => string;
+/** Place the restrictive policy before any server-controlled markup executes. */
+export declare const secureMcpAppHtml: (html: string, metadata: McpAppDocumentMetadata) => string;
+//# sourceMappingURL=mcp-app-document.d.ts.map

package/dist/mcp-app-document.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-app-document.d.ts","sourceRoot":"","sources":["../src/mcp-app-document.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,8BAA8B,QAAkB,CAAC;AAE9D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,GAAG,CAAC,EAAE,iBAAiB,CAAC;CAClC;AAID,4EAA4E;AAC5E,eAAO,MAAM,2BAA2B,GAAI,UAAU,sBAAsB,KAAG,MAyB9E,CAAC;AAOF,iFAAiF;AACjF,eAAO,MAAM,gBAAgB,GAAI,MAAM,MAAM,EAAE,UAAU,sBAAsB,KAAG,MAOjF,CAAC"}

package/dist/mcp-app-document.js

@@ -0,0 +1,42 @@
+export const MCP_APP_SECURED_HTML_MAX_BYTES = 2 * 1024 * 1024;
+const byteSize = (value) => new TextEncoder().encode(value).byteLength;
+/** Build the inner document policy from already intersected host grants. */
+export const mcpAppContentSecurityPolicy = (metadata) => {
+    const resources = metadata.csp?.resourceDomains ?? [];
+    const connects = metadata.csp?.connectDomains ?? [];
+    const frames = metadata.csp?.frameDomains ?? [];
+    const bases = metadata.csp?.baseUriDomains ?? [];
+    const sources = (items, extras = []) => [...extras, ...items].join(" ") || "'none'";
+    return [
+        "default-src 'none'",
+        // Server-declared resource origins never become executable-script origins.
+        "script-src 'unsafe-inline'",
+        `style-src 'unsafe-inline'${resources.length > 0 ? ` ${resources.join(" ")}` : ""}`,
+        `img-src ${sources(resources, ["data:", "blob:"])}`,
+        `font-src ${sources(resources, ["data:"])}`,
+        `media-src ${sources(resources, ["blob:"])}`,
+        `connect-src ${sources(connects)}`,
+        `frame-src ${sources(frames)}`,
+        `base-uri ${sources(bases)}`,
+        "form-action 'none'",
+        "object-src 'none'",
+        "child-src 'none'",
+        "worker-src 'none'",
+        "manifest-src 'none'",
+        "navigate-to 'none'",
+    ].join("; ");
+};
+const htmlAttribute = (value) => value
+    .replaceAll("&", "&")
+    .replaceAll('"', """)
+    .replaceAll("<", "&lt;");
+/** Place the restrictive policy before any server-controlled markup executes. */
+export const secureMcpAppHtml = (html, metadata) => {
+    const csp = htmlAttribute(mcpAppContentSecurityPolicy(metadata));
+    const secured = `<!doctype html><head><meta http-equiv="Content-Security-Policy" content="${csp}"><meta name="referrer" content="no-referrer"></head>${html}`;
+    if (byteSize(secured) > MCP_APP_SECURED_HTML_MAX_BYTES) {
+        throw new Error("The MCP App resource is too large.");
+    }
+    return secured;
+};
+//# sourceMappingURL=mcp-app-document.js.map

package/dist/mcp-app-document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-app-document.js","sourceRoot":"","sources":["../src/mcp-app-document.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAa9D,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC;AAEvF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,QAAgC,EAAU,EAAE;IACtF,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,EAAE,eAAe,IAAI,EAAE,CAAC;IACtD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,EAAE,cAAc,IAAI,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,IAAI,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,cAAc,IAAI,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,CAAC,KAAwB,EAAE,SAA4B,EAAE,EAAE,EAAE,CAC3E,CAAC,GAAG,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC;IAC9C,OAAO;QACL,oBAAoB;QACpB,2EAA2E;QAC3E,4BAA4B;QAC5B,4BAA4B,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QACnF,WAAW,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE;QACnD,YAAY,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE;QAC3C,aAAa,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE;QAC5C,eAAe,OAAO,CAAC,QAAQ,CAAC,EAAE;QAClC,aAAa,OAAO,CAAC,MAAM,CAAC,EAAE;QAC9B,YAAY,OAAO,CAAC,KAAK,CAAC,EAAE;QAC5B,oBAAoB;QACpB,mBAAmB;QACnB,kBAAkB;QAClB,mBAAmB;QACnB,qBAAqB;QACrB,oBAAoB;KACrB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK;KACnD,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;KACxB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC;KACzB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAE3B,iFAAiF;AACjF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAE,QAAgC,EAAU,EAAE;IACzF,MAAM,GAAG,GAAG,aAAa,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,4EAA4E,GAAG,wDAAwD,IAAI,EAAE,CAAC;IAC9J,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,8BAA8B,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC"}

package/dist/mcp-app-proxy.d.ts

@@ -0,0 +1,20 @@
+export declare const MCP_APP_PROXY_PATH = "/api/v1/mcp-app-proxy";
+/**
+ * This policy applies only to the fixed, opaque-origin proxy document. The
+ * nested app srcdoc inherits it, so capability directives belong exclusively
+ * to the canonical inner meta policy. With no default-src, the fixed proxy's
+ * inline bootstrap and layout style still work while this envelope retains
+ * non-clipping containment.
+ */
+export declare const MCP_APP_PROXY_CONTENT_SECURITY_POLICY: string;
+/**
+ * Fixed trusted outer proxy for the MCP Apps double-iframe model.
+ *
+ * Invocation-specific values never enter this response or its URL. The direct
+ * parent supplies bounded configuration after load; the proxy derives the
+ * parent origin from the browser-authenticated MessageEvent, permanently binds
+ * the first valid identity tuple, and accepts only an exact repeated
+ * configuration to re-arm it. Host-ready remains a one-shot acknowledgement.
+ */
+export declare const MCP_APP_PROXY_DOCUMENT = "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<meta name=\"referrer\" content=\"no-referrer\">\n<meta name=\"color-scheme\" content=\"light\">\n<style>html,body,#root{width:100%;height:100%;margin:0;overflow:hidden}iframe{width:100%;height:100%;display:block;border:0}</style>\n</head>\n<body>\n<div id=\"root\" aria-live=\"polite\"></div>\n<script>\n(() => {\n  \"use strict\";\n  const parentWindow = window.parent;\n  const root = document.getElementById(\"root\");\n  if (parentWindow === window || root === null) return;\n  let config = null;\n  let hostReady = false;\n  let appFrame = null;\n  let appFrameGeneration = 0;\n  let readyAttempts = 0;\n  let readyTimer = null;\n  const byteLength = (value) => {\n    try { return new TextEncoder().encode(JSON.stringify(value)).byteLength; }\n    catch { return Number.POSITIVE_INFINITY; }\n  };\n  const isRecord = (value) => value !== null && typeof value === \"object\" && !Array.isArray(value);\n  const isBoundedIdentity = (value) => typeof value === \"string\"\n    && value.length > 0\n    && value.length <= 512\n    && !/[\\u0000-\\u001f\\u007f]/u.test(value);\n  const isHostOrigin = (value) => {\n    if (typeof value !== \"string\" || value === \"null\" || value.length > 2048) return false;\n    try {\n      const parsed = new URL(value);\n      return (parsed.protocol === \"http:\" || parsed.protocol === \"https:\") && parsed.origin === value;\n    } catch {\n      return false;\n    }\n  };\n  const isConfiguration = (value) => {\n    if (!isRecord(value) || byteLength(value) > 4096) return false;\n    const keys = Object.keys(value);\n    return keys.length === 5\n      && keys.every((key) => key === \"type\" || key === \"nonce\" || key === \"invocationId\"\n        || key === \"connectionId\" || key === \"clipboardWrite\")\n      && value.type === \"mono-agent:mcp-app-proxy-config\"\n      && isBoundedIdentity(value.nonce)\n      && isBoundedIdentity(value.invocationId)\n      && isBoundedIdentity(value.connectionId)\n      && typeof value.clipboardWrite === \"boolean\";\n  };\n  const isRpc = (value) => isRecord(value)\n    && value.jsonrpc === \"2.0\"\n    && (typeof value.method === \"string\" || \"id\" in value);\n  const identityMatches = (value) => config !== null\n    && isRecord(value)\n    && value.nonce === config.nonce\n    && value.invocationId === config.invocationId\n    && value.connectionId === config.connectionId;\n  const exactSources = (directive, name) => {\n    const prefix = name + \" \";\n    if (!directive.startsWith(prefix)) return null;\n    const value = directive.slice(prefix.length);\n    if (value.length === 0 || value.trim() !== value || /\\s{2,}/u.test(value)) return null;\n    return value.split(\" \");\n  };\n  const sameSources = (left, right) => left.length === right.length\n    && left.every((value, index) => value === right[index]);\n  const isSanitizedOrigin = (value) => {\n    if (typeof value !== \"string\" || value.length > 2048) return false;\n    try {\n      const parsed = new URL(value);\n      const localHttp = parsed.protocol === \"http:\"\n        && (parsed.hostname === \"localhost\" || parsed.hostname === \"127.0.0.1\" || parsed.hostname === \"[::1]\");\n      return (parsed.protocol === \"https:\" || localHttp)\n        && parsed.origin === value\n        && !parsed.username\n        && !parsed.password\n        && (parsed.pathname === \"/\" || parsed.pathname === \"\")\n        && !parsed.search\n        && !parsed.hash;\n    } catch {\n      return false;\n    }\n  };\n  const isOriginSources = (sources) => sources.length === 1 && sources[0] === \"'none'\"\n    || sources.length > 0\n      && sources.length <= 64\n      && new Set(sources).size === sources.length\n      && sources.every(isSanitizedOrigin);\n  const hasOnlyKeys = (value, required, optional = []) => {\n    if (!isRecord(value)) return false;\n    const keys = Object.keys(value);\n    return keys.length >= required.length\n      && keys.length <= required.length + optional.length\n      && required.every((key) => keys.includes(key))\n      && keys.every((key) => required.includes(key) || optional.includes(key));\n  };\n  const isOriginList = (value) => Array.isArray(value)\n    && value.length <= 64\n    && new Set(value).size === value.length\n    && value.every(isSanitizedOrigin);\n  const isSandboxCsp = (value) => hasOnlyKeys(value, [], [\n    \"connectDomains\", \"resourceDomains\", \"frameDomains\", \"baseUriDomains\",\n  ]) && Object.values(value).every(isOriginList);\n  const isSandboxPermissions = (value) => hasOnlyKeys(value, [], [\"clipboardWrite\"])\n    && (!(\"clipboardWrite\" in value)\n      || hasOnlyKeys(value.clipboardWrite, []));\n  const isCanonicalSecuredHtml = (html) => {\n    const start = '<!doctype html><head><meta http-equiv=\"Content-Security-Policy\" content=\"';\n    const end = '\"><meta name=\"referrer\" content=\"no-referrer\"></head>';\n    if (!html.startsWith(start)) return false;\n    const endIndex = html.indexOf(end, start.length);\n    if (endIndex < 0) return false;\n    const directives = html.slice(start.length, endIndex).split(\"; \");\n    if (directives.length !== 15\n      || directives[0] !== \"default-src 'none'\"\n      || directives[1] !== \"script-src 'unsafe-inline'\"\n      || directives[9] !== \"form-action 'none'\"\n      || directives[10] !== \"object-src 'none'\"\n      || directives[11] !== \"child-src 'none'\"\n      || directives[12] !== \"worker-src 'none'\"\n      || directives[13] !== \"manifest-src 'none'\"\n      || directives[14] !== \"navigate-to 'none'\") return false;\n    const styles = exactSources(directives[2], \"style-src\");\n    const images = exactSources(directives[3], \"img-src\");\n    const fonts = exactSources(directives[4], \"font-src\");\n    const media = exactSources(directives[5], \"media-src\");\n    const connects = exactSources(directives[6], \"connect-src\");\n    const frames = exactSources(directives[7], \"frame-src\");\n    const bases = exactSources(directives[8], \"base-uri\");\n    if (styles === null || images === null || fonts === null || media === null\n      || connects === null || frames === null || bases === null) return false;\n    const resources = styles[0] === \"'unsafe-inline'\" ? styles.slice(1) : null;\n    return resources !== null\n      && resources.length <= 64\n      && new Set(resources).size === resources.length\n      && resources.every(isSanitizedOrigin)\n      && sameSources(images, [\"data:\", \"blob:\", ...resources])\n      && sameSources(fonts, [\"data:\", ...resources])\n      && sameSources(media, [\"blob:\", ...resources])\n      && isOriginSources(connects)\n      && isOriginSources(frames)\n      && isOriginSources(bases);\n  };\n  const isSandboxResourceReady = (value) => {\n    if (!hasOnlyKeys(value, [\"jsonrpc\", \"method\", \"params\"])) return false;\n    const params = value.params;\n    if (value.jsonrpc !== \"2.0\"\n      || value.method !== \"ui/notifications/sandbox-resource-ready\"\n      || !hasOnlyKeys(params, [\"html\", \"sandbox\"], [\"csp\", \"permissions\"])\n      || typeof params.html !== \"string\"\n      || new TextEncoder().encode(params.html).byteLength > 2097152\n      || params.sandbox !== \"allow-scripts\"\n      || (\"csp\" in params && !isSandboxCsp(params.csp))\n      || (\"permissions\" in params && !isSandboxPermissions(params.permissions))) return false;\n    const clipboardDeclared = isRecord(params.permissions)\n      && \"clipboardWrite\" in params.permissions;\n    return config !== null\n      && clipboardDeclared === config.clipboardWrite\n      && isCanonicalSecuredHtml(params.html);\n  };\n  const sendHost = (value) => {\n    if (config === null) return;\n    try { parentWindow.postMessage(value, config.hostOrigin); }\n    catch { /* A detached or navigated parent fails closed. */ }\n  };\n  const stopReadyAnnouncements = () => {\n    if (readyTimer === null) return;\n    window.clearInterval(readyTimer);\n    readyTimer = null;\n  };\n  const announceReady = () => {\n    if (config === null || hostReady || readyAttempts++ >= 20) {\n      stopReadyAnnouncements();\n      return;\n    }\n    sendHost({\n      type: \"mono-agent:mcp-app-proxy-ready\",\n      nonce: config.nonce,\n      invocationId: config.invocationId,\n      connectionId: config.connectionId,\n    });\n  };\n  const armReadiness = () => {\n    stopReadyAnnouncements();\n    readyAttempts = 0;\n    readyTimer = window.setInterval(announceReady, 250);\n    announceReady();\n  };\n  const retireAppFrame = () => {\n    const retired = appFrame;\n    appFrame = null;\n    appFrameGeneration += 1;\n    retired?.remove();\n    root.textContent = \"\";\n  };\n  const configure = (event) => {\n    if (event.source !== parentWindow || !isHostOrigin(event.origin)) return;\n    let candidate;\n    try { candidate = event.data; }\n    catch { return; }\n    if (!isConfiguration(candidate)) return;\n    if (config === null) {\n      config = Object.freeze({\n        nonce: candidate.nonce,\n        invocationId: candidate.invocationId,\n        connectionId: candidate.connectionId,\n        clipboardWrite: candidate.clipboardWrite,\n        hostOrigin: event.origin,\n      });\n      armReadiness();\n      return;\n    }\n    if (event.origin !== config.hostOrigin || !identityMatches(candidate)\n      || candidate.clipboardWrite !== config.clipboardWrite || !hostReady) return;\n    // Configuration is the re-arm request. A delayed duplicate host-ready must\n    // never retire a live app whose host bridge has no remaining ready listener.\n    hostReady = false;\n    retireAppFrame();\n    armReadiness();\n  };\n  const mountResource = (message) => {\n    if (config === null || appFrame !== null) return;\n    if (!isSandboxResourceReady(message)) {\n      root.textContent = \"The app resource was rejected.\";\n      return;\n    }\n    const params = message.params;\n    const frame = document.createElement(\"iframe\");\n    frame.setAttribute(\"title\", \"MCP App content\");\n    frame.setAttribute(\"sandbox\", \"allow-scripts\");\n    if (config.clipboardWrite) frame.setAttribute(\"allow\", \"clipboard-write\");\n    frame.referrerPolicy = \"no-referrer\";\n    const generation = ++appFrameGeneration;\n    let frameLoads = 0;\n    frame.srcdoc = params.html;\n    frame.addEventListener(\"load\", () => {\n      if (appFrame !== frame || appFrameGeneration !== generation) return;\n      frameLoads += 1;\n      if (frameLoads <= 1) return;\n      appFrame = null;\n      appFrameGeneration += 1;\n      frame.remove();\n      root.textContent = \"App navigation was blocked.\";\n    });\n    appFrame = frame;\n    root.replaceChildren(frame);\n  };\n  window.addEventListener(\"message\", (event) => {\n    if (config === null) {\n      configure(event);\n      return;\n    }\n    if (event.source === parentWindow) {\n      if (event.origin !== config.hostOrigin) return;\n      if (event.data?.type === \"mono-agent:mcp-app-proxy-config\") {\n        configure(event);\n        return;\n      }\n      if (event.data?.type === \"mono-agent:mcp-app-host-ready\") {\n        // Host-ready acknowledges only the current configuration arm. Repeated\n        // or delayed copies are idempotently ignored while the app stays live.\n        if (!identityMatches(event.data) || byteLength(event.data) > 4096 || hostReady) return;\n        hostReady = true;\n        stopReadyAnnouncements();\n        sendHost({ jsonrpc: \"2.0\", method: \"ui/notifications/sandbox-proxy-ready\", params: {} });\n        return;\n      }\n      if (!hostReady || !isRpc(event.data)) return;\n      if (event.data.method === \"ui/notifications/sandbox-resource-ready\") {\n        // The secured HTML is already bounded by decoded UTF-8 bytes. Validate\n        // its small companion fields structurally so JSON escaping cannot make\n        // a producer-accepted document disappear behind a generic wire cap.\n        mountResource(event.data);\n        return;\n      }\n      if (byteLength(event.data) > 1114112) return;\n      appFrame?.contentWindow?.postMessage(event.data, \"*\");\n      return;\n    }\n    if (!hostReady || appFrame === null || event.source !== appFrame.contentWindow || event.origin !== \"null\") return;\n    if (!isRpc(event.data) || byteLength(event.data) > 1114112) return;\n    if (event.data.method === \"ui/notifications/sandbox-proxy-ready\"\n      || event.data.method === \"ui/notifications/sandbox-resource-ready\") return;\n    sendHost(event.data);\n  });\n})();\n</script>\n</body>\n</html>";
+//# sourceMappingURL=mcp-app-proxy.d.ts.map

package/dist/mcp-app-proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-app-proxy.d.ts","sourceRoot":"","sources":["../src/mcp-app-proxy.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,kBAAkB,0BAA0B,CAAC;AAI1D;;;;;;GAMG;AACH,eAAO,MAAM,qCAAqC,QAQtC,CAAC;AAEb;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,00YAmS3B,CAAC"}

package/dist/mcp-app-proxy.js

@@ -0,0 +1,321 @@
+import { MCP_APP_SECURED_HTML_MAX_BYTES } from "./mcp-app-document.js";
+export const MCP_APP_PROXY_PATH = "/api/v1/mcp-app-proxy";
+const BRIDGE_MESSAGE_MAX_BYTES = 1024 * 1024 + 64 * 1024;
+/**
+ * This policy applies only to the fixed, opaque-origin proxy document. The
+ * nested app srcdoc inherits it, so capability directives belong exclusively
+ * to the canonical inner meta policy. With no default-src, the fixed proxy's
+ * inline bootstrap and layout style still work while this envelope retains
+ * non-clipping containment.
+ */
+export const MCP_APP_PROXY_CONTENT_SECURITY_POLICY = [
+    "script-src 'unsafe-inline'",
+    "form-action 'none'",
+    "object-src 'none'",
+    "worker-src 'none'",
+    "manifest-src 'none'",
+    "navigate-to 'none'",
+    "frame-ancestors 'self'",
+].join("; ");
+/**
+ * Fixed trusted outer proxy for the MCP Apps double-iframe model.
+ *
+ * Invocation-specific values never enter this response or its URL. The direct
+ * parent supplies bounded configuration after load; the proxy derives the
+ * parent origin from the browser-authenticated MessageEvent, permanently binds
+ * the first valid identity tuple, and accepts only an exact repeated
+ * configuration to re-arm it. Host-ready remains a one-shot acknowledgement.
+ */
+export const MCP_APP_PROXY_DOCUMENT = `<!doctype html>
+<html>
+<head>
+<meta charset="utf-8">
+<meta name="referrer" content="no-referrer">
+<meta name="color-scheme" content="light">
+<style>html,body,#root{width:100%;height:100%;margin:0;overflow:hidden}iframe{width:100%;height:100%;display:block;border:0}</style>
+</head>
+<body>
+<div id="root" aria-live="polite"></div>
+<script>
+(() => {
+  "use strict";
+  const parentWindow = window.parent;
+  const root = document.getElementById("root");
+  if (parentWindow === window || root === null) return;
+  let config = null;
+  let hostReady = false;
+  let appFrame = null;
+  let appFrameGeneration = 0;
+  let readyAttempts = 0;
+  let readyTimer = null;
+  const byteLength = (value) => {
+    try { return new TextEncoder().encode(JSON.stringify(value)).byteLength; }
+    catch { return Number.POSITIVE_INFINITY; }
+  };
+  const isRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+  const isBoundedIdentity = (value) => typeof value === "string"
+    && value.length > 0
+    && value.length <= 512
+    && !/[\\u0000-\\u001f\\u007f]/u.test(value);
+  const isHostOrigin = (value) => {
+    if (typeof value !== "string" || value === "null" || value.length > 2048) return false;
+    try {
+      const parsed = new URL(value);
+      return (parsed.protocol === "http:" || parsed.protocol === "https:") && parsed.origin === value;
+    } catch {
+      return false;
+    }
+  };
+  const isConfiguration = (value) => {
+    if (!isRecord(value) || byteLength(value) > 4096) return false;
+    const keys = Object.keys(value);
+    return keys.length === 5
+      && keys.every((key) => key === "type" || key === "nonce" || key === "invocationId"
+        || key === "connectionId" || key === "clipboardWrite")
+      && value.type === "mono-agent:mcp-app-proxy-config"
+      && isBoundedIdentity(value.nonce)
+      && isBoundedIdentity(value.invocationId)
+      && isBoundedIdentity(value.connectionId)
+      && typeof value.clipboardWrite === "boolean";
+  };
+  const isRpc = (value) => isRecord(value)
+    && value.jsonrpc === "2.0"
+    && (typeof value.method === "string" || "id" in value);
+  const identityMatches = (value) => config !== null
+    && isRecord(value)
+    && value.nonce === config.nonce
+    && value.invocationId === config.invocationId
+    && value.connectionId === config.connectionId;
+  const exactSources = (directive, name) => {
+    const prefix = name + " ";
+    if (!directive.startsWith(prefix)) return null;
+    const value = directive.slice(prefix.length);
+    if (value.length === 0 || value.trim() !== value || /\\s{2,}/u.test(value)) return null;
+    return value.split(" ");
+  };
+  const sameSources = (left, right) => left.length === right.length
+    && left.every((value, index) => value === right[index]);
+  const isSanitizedOrigin = (value) => {
+    if (typeof value !== "string" || value.length > 2048) return false;
+    try {
+      const parsed = new URL(value);
+      const localHttp = parsed.protocol === "http:"
+        && (parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1" || parsed.hostname === "[::1]");
+      return (parsed.protocol === "https:" || localHttp)
+        && parsed.origin === value
+        && !parsed.username
+        && !parsed.password
+        && (parsed.pathname === "/" || parsed.pathname === "")
+        && !parsed.search
+        && !parsed.hash;
+    } catch {
+      return false;
+    }
+  };
+  const isOriginSources = (sources) => sources.length === 1 && sources[0] === "'none'"
+    || sources.length > 0
+      && sources.length <= 64
+      && new Set(sources).size === sources.length
+      && sources.every(isSanitizedOrigin);
+  const hasOnlyKeys = (value, required, optional = []) => {
+    if (!isRecord(value)) return false;
+    const keys = Object.keys(value);
+    return keys.length >= required.length
+      && keys.length <= required.length + optional.length
+      && required.every((key) => keys.includes(key))
+      && keys.every((key) => required.includes(key) || optional.includes(key));
+  };
+  const isOriginList = (value) => Array.isArray(value)
+    && value.length <= 64
+    && new Set(value).size === value.length
+    && value.every(isSanitizedOrigin);
+  const isSandboxCsp = (value) => hasOnlyKeys(value, [], [
+    "connectDomains", "resourceDomains", "frameDomains", "baseUriDomains",
+  ]) && Object.values(value).every(isOriginList);
+  const isSandboxPermissions = (value) => hasOnlyKeys(value, [], ["clipboardWrite"])
+    && (!("clipboardWrite" in value)
+      || hasOnlyKeys(value.clipboardWrite, []));
+  const isCanonicalSecuredHtml = (html) => {
+    const start = '<!doctype html><head><meta http-equiv="Content-Security-Policy" content="';
+    const end = '"><meta name="referrer" content="no-referrer"></head>';
+    if (!html.startsWith(start)) return false;
+    const endIndex = html.indexOf(end, start.length);
+    if (endIndex < 0) return false;
+    const directives = html.slice(start.length, endIndex).split("; ");
+    if (directives.length !== 15
+      || directives[0] !== "default-src 'none'"
+      || directives[1] !== "script-src 'unsafe-inline'"
+      || directives[9] !== "form-action 'none'"
+      || directives[10] !== "object-src 'none'"
+      || directives[11] !== "child-src 'none'"
+      || directives[12] !== "worker-src 'none'"
+      || directives[13] !== "manifest-src 'none'"
+      || directives[14] !== "navigate-to 'none'") return false;
+    const styles = exactSources(directives[2], "style-src");
+    const images = exactSources(directives[3], "img-src");
+    const fonts = exactSources(directives[4], "font-src");
+    const media = exactSources(directives[5], "media-src");
+    const connects = exactSources(directives[6], "connect-src");
+    const frames = exactSources(directives[7], "frame-src");
+    const bases = exactSources(directives[8], "base-uri");
+    if (styles === null || images === null || fonts === null || media === null
+      || connects === null || frames === null || bases === null) return false;
+    const resources = styles[0] === "'unsafe-inline'" ? styles.slice(1) : null;
+    return resources !== null
+      && resources.length <= 64
+      && new Set(resources).size === resources.length
+      && resources.every(isSanitizedOrigin)
+      && sameSources(images, ["data:", "blob:", ...resources])
+      && sameSources(fonts, ["data:", ...resources])
+      && sameSources(media, ["blob:", ...resources])
+      && isOriginSources(connects)
+      && isOriginSources(frames)
+      && isOriginSources(bases);
+  };
+  const isSandboxResourceReady = (value) => {
+    if (!hasOnlyKeys(value, ["jsonrpc", "method", "params"])) return false;
+    const params = value.params;
+    if (value.jsonrpc !== "2.0"
+      || value.method !== "ui/notifications/sandbox-resource-ready"
+      || !hasOnlyKeys(params, ["html", "sandbox"], ["csp", "permissions"])
+      || typeof params.html !== "string"
+      || new TextEncoder().encode(params.html).byteLength > ${MCP_APP_SECURED_HTML_MAX_BYTES}
+      || params.sandbox !== "allow-scripts"
+      || ("csp" in params && !isSandboxCsp(params.csp))
+      || ("permissions" in params && !isSandboxPermissions(params.permissions))) return false;
+    const clipboardDeclared = isRecord(params.permissions)
+      && "clipboardWrite" in params.permissions;
+    return config !== null
+      && clipboardDeclared === config.clipboardWrite
+      && isCanonicalSecuredHtml(params.html);
+  };
+  const sendHost = (value) => {
+    if (config === null) return;
+    try { parentWindow.postMessage(value, config.hostOrigin); }
+    catch { /* A detached or navigated parent fails closed. */ }
+  };
+  const stopReadyAnnouncements = () => {
+    if (readyTimer === null) return;
+    window.clearInterval(readyTimer);
+    readyTimer = null;
+  };
+  const announceReady = () => {
+    if (config === null || hostReady || readyAttempts++ >= 20) {
+      stopReadyAnnouncements();
+      return;
+    }
+    sendHost({
+      type: "mono-agent:mcp-app-proxy-ready",
+      nonce: config.nonce,
+      invocationId: config.invocationId,
+      connectionId: config.connectionId,
+    });
+  };
+  const armReadiness = () => {
+    stopReadyAnnouncements();
+    readyAttempts = 0;
+    readyTimer = window.setInterval(announceReady, 250);
+    announceReady();
+  };
+  const retireAppFrame = () => {
+    const retired = appFrame;
+    appFrame = null;
+    appFrameGeneration += 1;
+    retired?.remove();
+    root.textContent = "";
+  };
+  const configure = (event) => {
+    if (event.source !== parentWindow || !isHostOrigin(event.origin)) return;
+    let candidate;
+    try { candidate = event.data; }
+    catch { return; }
+    if (!isConfiguration(candidate)) return;
+    if (config === null) {
+      config = Object.freeze({
+        nonce: candidate.nonce,
+        invocationId: candidate.invocationId,
+        connectionId: candidate.connectionId,
+        clipboardWrite: candidate.clipboardWrite,
+        hostOrigin: event.origin,
+      });
+      armReadiness();
+      return;
+    }
+    if (event.origin !== config.hostOrigin || !identityMatches(candidate)
+      || candidate.clipboardWrite !== config.clipboardWrite || !hostReady) return;
+    // Configuration is the re-arm request. A delayed duplicate host-ready must
+    // never retire a live app whose host bridge has no remaining ready listener.
+    hostReady = false;
+    retireAppFrame();
+    armReadiness();
+  };
+  const mountResource = (message) => {
+    if (config === null || appFrame !== null) return;
+    if (!isSandboxResourceReady(message)) {
+      root.textContent = "The app resource was rejected.";
+      return;
+    }
+    const params = message.params;
+    const frame = document.createElement("iframe");
+    frame.setAttribute("title", "MCP App content");
+    frame.setAttribute("sandbox", "allow-scripts");
+    if (config.clipboardWrite) frame.setAttribute("allow", "clipboard-write");
+    frame.referrerPolicy = "no-referrer";
+    const generation = ++appFrameGeneration;
+    let frameLoads = 0;
+    frame.srcdoc = params.html;
+    frame.addEventListener("load", () => {
+      if (appFrame !== frame || appFrameGeneration !== generation) return;
+      frameLoads += 1;
+      if (frameLoads <= 1) return;
+      appFrame = null;
+      appFrameGeneration += 1;
+      frame.remove();
+      root.textContent = "App navigation was blocked.";
+    });
+    appFrame = frame;
+    root.replaceChildren(frame);
+  };
+  window.addEventListener("message", (event) => {
+    if (config === null) {
+      configure(event);
+      return;
+    }
+    if (event.source === parentWindow) {
+      if (event.origin !== config.hostOrigin) return;
+      if (event.data?.type === "mono-agent:mcp-app-proxy-config") {
+        configure(event);
+        return;
+      }
+      if (event.data?.type === "mono-agent:mcp-app-host-ready") {
+        // Host-ready acknowledges only the current configuration arm. Repeated
+        // or delayed copies are idempotently ignored while the app stays live.
+        if (!identityMatches(event.data) || byteLength(event.data) > 4096 || hostReady) return;
+        hostReady = true;
+        stopReadyAnnouncements();
+        sendHost({ jsonrpc: "2.0", method: "ui/notifications/sandbox-proxy-ready", params: {} });
+        return;
+      }
+      if (!hostReady || !isRpc(event.data)) return;
+      if (event.data.method === "ui/notifications/sandbox-resource-ready") {
+        // The secured HTML is already bounded by decoded UTF-8 bytes. Validate
+        // its small companion fields structurally so JSON escaping cannot make
+        // a producer-accepted document disappear behind a generic wire cap.
+        mountResource(event.data);
+        return;
+      }
+      if (byteLength(event.data) > ${BRIDGE_MESSAGE_MAX_BYTES}) return;
+      appFrame?.contentWindow?.postMessage(event.data, "*");
+      return;
+    }
+    if (!hostReady || appFrame === null || event.source !== appFrame.contentWindow || event.origin !== "null") return;
+    if (!isRpc(event.data) || byteLength(event.data) > ${BRIDGE_MESSAGE_MAX_BYTES}) return;
+    if (event.data.method === "ui/notifications/sandbox-proxy-ready"
+      || event.data.method === "ui/notifications/sandbox-resource-ready") return;
+    sendHost(event.data);
+  });
+})();
+</script>
+</body>
+</html>`;
+//# sourceMappingURL=mcp-app-proxy.js.map

package/dist/mcp-app-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-app-proxy.js","sourceRoot":"","sources":["../src/mcp-app-proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AAEvE,MAAM,CAAC,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;AAE1D,MAAM,wBAAwB,GAAG,IAAI,GAAG,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG;IACnD,4BAA4B;IAC5B,oBAAoB;IACpB,mBAAmB;IACnB,mBAAmB;IACnB,qBAAqB;IACrB,oBAAoB;IACpB,wBAAwB;CACzB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8DAyJwB,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qCA6HvD,wBAAwB;;;;;yDAKJ,wBAAwB;;;;;;;;QAQzE,CAAC"}

package/dist/notification-client.d.ts

@@ -1,18 +1,32 @@
-import type { WebNotificationTriggerKind } from "./contracts.js";
+import type { AgentReplyPart, ProcessJobProjection } from "@mono-agent/agent-contracts";
+import type { WebThreadNotificationTriggerKind } from "./contracts.js";
 import { type WebStatePathOptions } from "./state-paths.js";
-export interface DeliverWebNotificationInput {
+export interface DeliverWebThreadNotificationInput {
     readonly sourceId: string;
-    readonly triggerKind: WebNotificationTriggerKind;
+    readonly triggerKind: WebThreadNotificationTriggerKind;
     readonly deliveryKey: string;
     readonly text: string;
+    readonly jobId?: string;
+    readonly runId?: string;
 }
+export interface DeliverWebProcessJobNotificationInput {
+    readonly sourceId: string;
+    readonly triggerKind: "job";
+    readonly deliveryKey: string;
+    readonly threadId: string;
+    readonly processJob: ProcessJobProjection;
+    readonly text?: string;
+    readonly parts?: readonly AgentReplyPart[];
+}
+export type DeliverWebNotificationInput = DeliverWebThreadNotificationInput | DeliverWebProcessJobNotificationInput;
 export interface DeliverWebNotificationOptions extends WebStatePathOptions {
     readonly fetchImpl?: typeof fetch;
     readonly timeoutMs?: number;
 }
 export interface DeliverWebNotificationResult {
-    readonly threadId: string;
+    readonly threadId?: string;
     readonly duplicate: boolean;
+    readonly tombstoned?: true;
 }
 /** Deliver once to the active local web console. There is intentionally no retry or outbox. */
 export declare function deliverWebNotification(input: DeliverWebNotificationInput, options?: DeliverWebNotificationOptions): Promise<DeliverWebNotificationResult>;

package/dist/notification-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notification-client.d.ts","sourceRoot":"","sources":["../src/notification-client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAEjE,OAAO,EAAwB,KAAK,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAQlF,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,0BAA0B,CAAC;IACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,6BAA8B,SAAQ,mBAAmB;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAWD,+FAA+F;AAC/F,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,2BAA2B,EAClC,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,4BAA4B,CAAC,CA0CvC"}
+{"version":3,"file":"notification-client.d.ts","sourceRoot":"","sources":["../src/notification-client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAExF,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,gBAAgB,CAAC;AAEvE,OAAO,EAAwB,KAAK,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAQlF,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,gCAAgC,CAAC;IACvD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;CAC5C;AAED,MAAM,MAAM,2BAA2B,GACnC,iCAAiC,GACjC,qCAAqC,CAAC;AAE1C,MAAM,WAAW,6BAA8B,SAAQ,mBAAmB;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC;CAC5B;AAWD,+FAA+F;AAC/F,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,2BAA2B,EAClC,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,4BAA4B,CAAC,CAiDvC"}

package/dist/notification-client.js

@@ -40,16 +40,23 @@ export async function deliverWebNotification(input, options = {}) {
         throw new WebConsoleError("invalid_notification_response", "The web notification ingress returned invalid JSON.", 502);
     }
     const result = asRecord(parsed);
-    if (result === undefined || typeof result.threadId !== "string" || typeof result.duplicate !== "boolean") {
+    if (result === undefined
+        || (typeof result.threadId !== "string" && result.threadId !== null)
+        || typeof result.duplicate !== "boolean"
+        || (result.threadId === null && (result.duplicate !== true || result.tombstoned !== true))) {
         throw new WebConsoleError("invalid_notification_response", "The web notification ingress returned an invalid result.", 502);
     }
-    return { threadId: result.threadId, duplicate: result.duplicate };
+    return {
+        ...(typeof result.threadId === "string" ? { threadId: result.threadId } : {}),
+        duplicate: result.duplicate,
+        ...(result.tombstoned === true ? { tombstoned: true } : {}),
+    };
 }
 async function readIngressRecord(path) {
     const info = await lstat(path).catch(() => undefined);
     const currentUid = typeof process.getuid === "function" ? process.getuid() : undefined;
     if (info === undefined || !info.isFile() || info.isSymbolicLink()
-        || info.size <= 0 || info.size > MAX_INGRESS_RECORD_BYTES
+        || info.nlink !== 1 || info.size <= 0 || info.size > MAX_INGRESS_RECORD_BYTES
         || (currentUid !== undefined && info.uid !== currentUid)
         || (info.mode & 0o077) !== 0) {
         throw new WebConsoleError("notification_ingress_unavailable", "The owner-private web notification ingress record is unavailable.", 503);
@@ -58,7 +65,9 @@ async function readIngressRecord(path) {
     let contents;
     try {
         const opened = await handle.stat();
-        if (!opened.isFile() || opened.dev !== info.dev || opened.ino !== info.ino || opened.size !== info.size) {
+        if (!opened.isFile() || opened.dev !== info.dev || opened.ino !== info.ino || opened.size !== info.size
+            || opened.nlink !== 1 || (currentUid !== undefined && opened.uid !== currentUid)
+            || (opened.mode & 0o077) !== 0) {
             throw new WebConsoleError("notification_ingress_unavailable", "The web notification ingress record changed while opening.", 503);
         }
         contents = await handle.readFile("utf8");

package/dist/notification-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"notification-client.js","sourceRoot":"","sources":["../src/notification-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAG/C,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAA4B,MAAM,kBAAkB,CAAC;AAElF,MAAM,2BAA2B,GAAG,CAAC,CAAC;AACtC,MAAM,yBAAyB,GAAG,4BAA4B,CAAC;AAC/D,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AA4BjC,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAkC,EAClC,UAAyC,EAAE;IAE3C,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC,mBAAmB,CAAC;IAC/D,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;YACtC,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;YACpE,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE;gBACxC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CACvB,kCAAkC,EAClC,gDAAgD,YAAY,CAAC,KAAK,CAAC,IAAI,EACvE,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,eAAe,CACvB,8BAA8B,EAC9B,0CAA0C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,EACjI,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAY,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,+BAA+B,EAAE,qDAAqD,EAAE,GAAG,CAAC,CAAC;IACzH,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzG,MAAM,IAAI,eAAe,CAAC,+BAA+B,EAAE,0DAA0D,EAAE,GAAG,CAAC,CAAC;IAC9H,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;WAC5D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,wBAAwB;WACtD,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,UAAU,CAAC;WACrD,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,eAAe,CACvB,kCAAkC,EAClC,mEAAmE,EACnE,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,GAAG,CAAC,WAAW,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACxG,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,4DAA4D,EAAE,GAAG,CAAC,CAAC;QACnI,CAAC;QACD,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAY,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,iDAAiD,EAAE,GAAG,CAAC,CAAC;IACxH,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,MAAM,KAAK,SAAS;WACnB,MAAM,CAAC,MAAM,KAAK,2BAA2B;WAC7C,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,IAAK,MAAM,CAAC,GAAc,IAAI,CAAC;WAChE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG;WACzG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;WAC9B,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;WACzF,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,iDAAiD,EAAE,GAAG,CAAC,CAAC;IACxH,CAAC;IACD,uBAAuB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,MAA8C,CAAC;AACxD,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa;IAC5C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,8CAA8C,EAAE,GAAG,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;WACvB,GAAG,CAAC,QAAQ,KAAK,WAAW;WAC5B,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;WACrB,GAAG,CAAC,QAAQ,KAAK,yBAAyB;WAC1C,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;WACrB,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;WACnB,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;WACvB,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,kDAAkD,EAAE,GAAG,CAAC,CAAC;IACzH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,QAAkB;IACnD,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;YAC1B,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;gBAC/B,MAAM,IAAI,eAAe,CAAC,+BAA+B,EAAE,6CAA6C,EAAE,GAAG,CAAC,CAAC;YACjH,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAC,KAAgC;QAClC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}
+{"version":3,"file":"notification-client.js","sourceRoot":"","sources":["../src/notification-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAK/C,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAA4B,MAAM,kBAAkB,CAAC;AAElF,MAAM,2BAA2B,GAAG,CAAC,CAAC;AACtC,MAAM,yBAAyB,GAAG,4BAA4B,CAAC;AAC/D,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AA6CjC,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAkC,EAClC,UAAyC,EAAE;IAE3C,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC,mBAAmB,CAAC;IAC/D,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;YACtC,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;YACpE,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE;gBACxC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CACvB,kCAAkC,EAClC,gDAAgD,YAAY,CAAC,KAAK,CAAC,IAAI,EACvE,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,eAAe,CACvB,8BAA8B,EAC9B,0CAA0C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,EACjI,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAY,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,+BAA+B,EAAE,qDAAqD,EAAE,GAAG,CAAC,CAAC;IACzH,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,MAAM,KAAK,SAAS;WACnB,CAAC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC;WACjE,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS;WACrC,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,eAAe,CAAC,+BAA+B,EAAE,0DAA0D,EAAE,GAAG,CAAC,CAAC;IAC9H,CAAC;IACD,OAAO;QACL,GAAG,CAAC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;WAC5D,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,wBAAwB;WAC1E,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,UAAU,CAAC;WACrD,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,eAAe,CACvB,kCAAkC,EAClC,mEAAmE,EACnE,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,GAAG,CAAC,WAAW,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;eAClG,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,UAAU,CAAC;eAC7E,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,4DAA4D,EAAE,GAAG,CAAC,CAAC;QACnI,CAAC;QACD,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAY,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,iDAAiD,EAAE,GAAG,CAAC,CAAC;IACxH,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,MAAM,KAAK,SAAS;WACnB,MAAM,CAAC,MAAM,KAAK,2BAA2B;WAC7C,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,IAAK,MAAM,CAAC,GAAc,IAAI,CAAC;WAChE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG;WACzG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;WAC9B,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;WACzF,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,iDAAiD,EAAE,GAAG,CAAC,CAAC;IACxH,CAAC;IACD,uBAAuB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,MAA8C,CAAC;AACxD,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa;IAC5C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,8CAA8C,EAAE,GAAG,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;WACvB,GAAG,CAAC,QAAQ,KAAK,WAAW;WAC5B,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;WACrB,GAAG,CAAC,QAAQ,KAAK,yBAAyB;WAC1C,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;WACrB,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;WACnB,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;WACvB,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,kDAAkD,EAAE,GAAG,CAAC,CAAC;IACzH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,QAAkB;IACnD,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;YAC1B,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;gBAC/B,MAAM,IAAI,eAAe,CAAC,+BAA+B,EAAE,6CAA6C,EAAE,GAAG,CAAC,CAAC;YACjH,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAC,KAAgC;QAClC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/dist/notification-ingress.d.ts

@@ -1,3 +1,5 @@
+import { type AgentReplyPart, type ProcessJobProjection } from "@mono-agent/agent-contracts";
+import { type WebThreadNotificationTriggerKind } from "./contracts.js";
 import type { WebService, WebServiceLogger } from "./service.js";
 declare const INGRESS_SCHEMA = 1;
 export interface WebNotificationIngressRecord {
@@ -13,5 +15,22 @@ export interface WebNotificationIngressHandle {
     stop(): Promise<void>;
 }
 export declare function startWebNotificationIngress(service: WebService, logger?: WebServiceLogger): Promise<WebNotificationIngressHandle>;
+type ParsedNotificationRequest = {
+    readonly sourceId: string;
+    readonly triggerKind: WebThreadNotificationTriggerKind;
+    readonly deliveryKey: string;
+    readonly text: string;
+    readonly jobId?: string;
+    readonly runId?: string;
+} | {
+    readonly sourceId: string;
+    readonly triggerKind: "job";
+    readonly deliveryKey: string;
+    readonly threadId: string;
+    readonly processJob: ProcessJobProjection;
+    readonly text?: string;
+    readonly parts?: readonly AgentReplyPart[];
+};
+export declare function parseNotificationRequest(body: unknown): ParsedNotificationRequest;
 export {};
 //# sourceMappingURL=notification-ingress.d.ts.map

package/dist/notification-ingress.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notification-ingress.d.ts","sourceRoot":"","sources":["../src/notification-ingress.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEjE,QAAA,MAAM,cAAc,IAAI,CAAC;AAMzB,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,MAAM,EAAE,OAAO,cAAc,CAAC;IACvC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,UAAU,EACnB,MAAM,CAAC,EAAE,gBAAgB,GACxB,OAAO,CAAC,4BAA4B,CAAC,CAmGvC"}
+{"version":3,"file":"notification-ingress.d.ts","sourceRoot":"","sources":["../src/notification-ingress.ts"],"names":[],"mappings":"AAIA,OAAO,EAOL,KAAK,cAAc,EACnB,KAAK,oBAAoB,EAC1B,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAgC,KAAK,gCAAgC,EAAE,MAAM,gBAAgB,CAAC;AAErG,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEjE,QAAA,MAAM,cAAc,IAAI,CAAC;AAMzB,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,MAAM,EAAE,OAAO,cAAc,CAAC;IACvC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,UAAU,EACnB,MAAM,CAAC,EAAE,gBAAgB,GACxB,OAAO,CAAC,4BAA4B,CAAC,CAoGvC;AAED,KAAK,yBAAyB,GAAG;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,gCAAgC,CAAC;IACvD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG;IACF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;CAC5C,CAAC;AAEF,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,OAAO,GAAG,yBAAyB,CA+DjF"}