@moxxy/plugin-channel-web 0.27.0

package/dist/index.d.ts

@@ -0,0 +1,53 @@
+import { type Plugin, type TunnelProviderDef } from '@moxxy/sdk';
+import { type WebSurfaceControls } from './channel.js';
+export { WebChannel, type WebChannelOptions, type WebStartOpts, type WebSurfaceControls } from './channel.js';
+export { EventProjector } from './projector.js';
+export { readTunnelSetting, writeTunnelSetting, normalizeTunnelName } from './tunnel-settings.js';
+export { actionPrompt, type ServerFrame, type ClientFrame } from './protocol.js';
+/** Live access to the session's tunnel registry (injected by the CLI builder). */
+export interface TunnelControls {
+    list(): string[];
+    active(): string | null;
+    setActive(name: string): void;
+    isAvailable(name: string): Promise<boolean>;
+}
+export interface BuildWebChannelOptions {
+    readonly getTunnel?: () => TunnelProviderDef | null;
+    readonly publishSurface?: (surface: {
+        url: string;
+        nextViewId: () => string;
+    } | null) => void;
+    readonly publishControls?: (controls: WebSurfaceControls | null) => void;
+    /** Read the live surface controls (for live tunnel switching from the tool). */
+    readonly getControls?: () => WebSurfaceControls | null;
+    /** Live tunnel registry access for the web_set_tunnel / web_tunnel_status tools. */
+    readonly tunnels?: TunnelControls;
+    /** Static default tunnel (from config.channels.web.tunnel) when no persisted setting. */
+    readonly defaultTunnel?: string;
+    /** Override the persisted settings file path (tests). Defaults to ~/.moxxy/web.json. */
+    readonly settingsFile?: string;
+}
+/**
+ * Build the web channel plugin. The CLI passes closures over the concrete
+ * Session (mirroring the Telegram plugin's vault injection). Contributes:
+ *  - the `web` channel (surface + action round-trip),
+ *  - the self-hosted `proxy` tunnel provider (registered; `localhost` is the
+ *    core-seeded default),
+ *  - `web_set_tunnel` / `web_tunnel_status` tools so the user/agent can switch
+ *    the tunnel at runtime — persisted to ~/.moxxy/web.json,
+ *  - an onInit hook that applies the persisted (or configured) tunnel on boot.
+ */
+export declare function buildWebChannelPlugin(opts?: BuildWebChannelOptions): Plugin;
+/**
+ * Discovery-loadable default export. Resolves the tunnel registry
+ * (`'tunnelProviders'`), the shared web-surface ref (`'viewSurface'`, read by the
+ * view plugin) + web-controls ref (`'webControls'`) and the configured default
+ * tunnel (`'webDefaultTunnel'`) from the inter-plugin service registry in
+ * `onInit`, instead of the host `{ getTunnel, publishSurface, … }` closure. A
+ * lazy `tunnels` object keeps the `web_set_tunnel`/`web_tunnel_status` tools +
+ * the boot tunnel-apply hook present (built before onInit), deferring every
+ * registry call to the resolved instance.
+ */
+export declare const webChannelPlugin: Plugin;
+export default webChannelPlugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8C,KAAK,MAAM,EAAE,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE7G,OAAO,EAAc,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGnE,OAAO,EAAE,UAAU,EAAE,KAAK,iBAAiB,EAAE,KAAK,YAAY,EAAE,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC9G,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAClG,OAAO,EAAE,YAAY,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjF,kFAAkF;AAClF,MAAM,WAAW,cAAc;IAC7B,IAAI,IAAI,MAAM,EAAE,CAAC;IACjB,MAAM,IAAI,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,iBAAiB,GAAG,IAAI,CAAC;IACpD,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,MAAM,CAAA;KAAE,GAAG,IAAI,KAAK,IAAI,CAAC;IAC9F,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,KAAK,IAAI,CAAC;IACzE,gFAAgF;IAChF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,kBAAkB,GAAG,IAAI,CAAC;IACvD,oFAAoF;IACpF,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;IAClC,yFAAyF;IACzF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,wFAAwF;IACxF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,GAAE,sBAA2B,GAAG,MAAM,CA8F/E;AAcD;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAiD3B,CAAC;AAEL,eAAe,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,171 @@
+import { defineChannel, definePlugin, defineTool, z } from '@moxxy/sdk';
+import { proxyTunnel } from '@moxxy/plugin-tunnel-proxy';
+import { WebChannel } from './channel.js';
+import { normalizeTunnelName, readTunnelSetting, writeTunnelSetting } from './tunnel-settings.js';
+export { WebChannel } from './channel.js';
+export { EventProjector } from './projector.js';
+export { readTunnelSetting, writeTunnelSetting, normalizeTunnelName } from './tunnel-settings.js';
+export { actionPrompt } from './protocol.js';
+/**
+ * Build the web channel plugin. The CLI passes closures over the concrete
+ * Session (mirroring the Telegram plugin's vault injection). Contributes:
+ *  - the `web` channel (surface + action round-trip),
+ *  - the self-hosted `proxy` tunnel provider (registered; `localhost` is the
+ *    core-seeded default),
+ *  - `web_set_tunnel` / `web_tunnel_status` tools so the user/agent can switch
+ *    the tunnel at runtime — persisted to ~/.moxxy/web.json,
+ *  - an onInit hook that applies the persisted (or configured) tunnel on boot.
+ */
+export function buildWebChannelPlugin(opts = {}) {
+    const def = defineChannel({
+        name: 'web',
+        description: 'Browser surface that renders agent-authored view-spec UIs over a WebSocket and routes form/button actions back into the session. Exposes itself via the self-hosted proxy relay so users on other channels can open it.',
+        create: (deps) => {
+            const o = deps.options ?? {};
+            return new WebChannel({
+                ...(typeof o.port === 'number' ? { port: o.port } : {}),
+                ...(typeof o.host === 'string' ? { host: o.host } : {}),
+                ...(typeof o.authToken === 'string'
+                    ? { authToken: o.authToken }
+                    : process.env.MOXXY_WEB_TOKEN
+                        ? { authToken: process.env.MOXXY_WEB_TOKEN }
+                        : {}),
+                ...(Array.isArray(o.allowedTools) ? { allowedTools: o.allowedTools } : {}),
+                ...(opts.getTunnel ? { getTunnel: opts.getTunnel } : {}),
+                ...(opts.publishSurface ? { publishSurface: opts.publishSurface } : {}),
+                ...(opts.publishControls ? { publishControls: opts.publishControls } : {}),
+                logger: deps.logger,
+            });
+        },
+    });
+    const tunnels = opts.tunnels;
+    const tools = tunnels
+        ? [
+            defineTool({
+                name: 'web_set_tunnel',
+                description: 'Choose how the web app surface is exposed: "proxy" (public URL via the self-hosted relay, for remote channels like Telegram) or "none"/"localhost" (loopback only). Persisted to ~/.moxxy/web.json and applied immediately if a surface is live. Use when the user asks to change or disable the tunnel.',
+                inputSchema: z.object({ provider: z.string().min(1) }),
+                permission: { action: 'prompt' },
+                // Persists the choice, then (re)establishes the tunnel through the
+                // live surface controls — the relay host is config-dependent, so
+                // the net surface is genuinely dynamic.
+                isolation: {
+                    capabilities: {
+                        fs: {
+                            read: [opts.settingsFile ?? '~/.moxxy/web.json'],
+                            write: [opts.settingsFile ?? '~/.moxxy/web.json'],
+                        },
+                        net: { mode: 'any' },
+                        timeMs: 60_000,
+                    },
+                },
+                handler: async ({ provider }) => {
+                    const name = normalizeTunnelName(provider);
+                    if (!tunnels.list().includes(name)) {
+                        return { ok: false, error: `unknown tunnel "${provider}"`, available: ['none', ...tunnels.list()] };
+                    }
+                    const available = await tunnels.isAvailable(name);
+                    if (!available) {
+                        return { ok: false, error: `${name} is not available` };
+                    }
+                    tunnels.setActive(name);
+                    await writeTunnelSetting(name, opts.settingsFile);
+                    const url = (await opts.getControls?.()?.retunnel()) ?? null;
+                    return { ok: true, active: name, ...(url ? { url } : { note: 'applies when the web surface (re)starts' }) };
+                },
+            }),
+            defineTool({
+                name: 'web_tunnel_status',
+                description: 'Report the active web tunnel provider and the available options.',
+                inputSchema: z.object({}),
+                // Pure registry view — no fs / net / subprocess.
+                isolation: { capabilities: { net: { mode: 'none' }, timeMs: 10_000 } },
+                handler: () => ({ active: tunnels.active(), available: ['none', ...tunnels.list()] }),
+            }),
+        ]
+        : [];
+    return definePlugin({
+        name: '@moxxy/plugin-channel-web',
+        version: '0.0.0',
+        channels: [def],
+        tunnelProviders: [proxyTunnel],
+        tools,
+        hooks: tunnels
+            ? {
+                onInit: () => {
+                    // Apply the persisted choice (or the configured default) on boot.
+                    const chosen = readTunnelSetting(opts.settingsFile) ?? (opts.defaultTunnel ? normalizeTunnelName(opts.defaultTunnel) : undefined);
+                    if (chosen && tunnels.list().includes(chosen)) {
+                        try {
+                            tunnels.setActive(chosen);
+                        }
+                        catch {
+                            /* keep the seeded default */
+                        }
+                    }
+                },
+            }
+            : {},
+    });
+}
+/**
+ * Discovery-loadable default export. Resolves the tunnel registry
+ * (`'tunnelProviders'`), the shared web-surface ref (`'viewSurface'`, read by the
+ * view plugin) + web-controls ref (`'webControls'`) and the configured default
+ * tunnel (`'webDefaultTunnel'`) from the inter-plugin service registry in
+ * `onInit`, instead of the host `{ getTunnel, publishSurface, … }` closure. A
+ * lazy `tunnels` object keeps the `web_set_tunnel`/`web_tunnel_status` tools +
+ * the boot tunnel-apply hook present (built before onInit), deferring every
+ * registry call to the resolved instance.
+ */
+export const webChannelPlugin = (() => {
+    let tp = null;
+    let surfaceRef = null;
+    let controlsRef = null;
+    let defaultTunnel;
+    const tunnels = {
+        list: () => tp?.list().map((p) => p.name) ?? [],
+        active: () => tp?.getActive()?.name ?? null,
+        setActive: (n) => {
+            tp?.setActive(n);
+        },
+        isAvailable: async (n) => {
+            const p = tp?.list().find((x) => x.name === n);
+            return p?.isAvailable ? p.isAvailable() : true;
+        },
+    };
+    const opts = {
+        getTunnel: () => tp?.getActive() ?? null,
+        publishSurface: (s) => {
+            if (surfaceRef)
+                surfaceRef.current = s;
+        },
+        publishControls: (c) => {
+            if (controlsRef)
+                controlsRef.current = c;
+        },
+        getControls: () => controlsRef?.current ?? null,
+        tunnels,
+        get defaultTunnel() {
+            return defaultTunnel;
+        },
+    };
+    const plugin = buildWebChannelPlugin(opts);
+    const innerOnInit = plugin.hooks?.onInit;
+    return definePlugin({
+        ...plugin,
+        hooks: {
+            ...plugin.hooks,
+            onInit: (ctx) => {
+                tp = ctx.services.get('tunnelProviders') ?? null;
+                surfaceRef = ctx.services.get('viewSurface') ?? null;
+                controlsRef = ctx.services.get('webControls') ?? null;
+                defaultTunnel = ctx.services.get('webDefaultTunnel') ?? undefined;
+                // Now the refs are resolved → apply the persisted/default tunnel on boot.
+                return innerOnInit?.(ctx);
+            },
+        },
+    });
+})();
+export default webChannelPlugin;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,EAAuC,MAAM,YAAY,CAAC;AAC7G,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,UAAU,EAA2B,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAElG,OAAO,EAAE,UAAU,EAAsE,MAAM,cAAc,CAAC;AAC9G,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAClG,OAAO,EAAE,YAAY,EAAsC,MAAM,eAAe,CAAC;AAwBjF;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAA+B,EAAE;IACrE,MAAM,GAAG,GAAG,aAAa,CAAC;QACxB,IAAI,EAAE,KAAK;QACX,WAAW,EACT,yNAAyN;QAC3N,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACf,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;YAC7B,OAAO,IAAI,UAAU,CAAC;gBACpB,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;oBACjC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE;oBAC5B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe;wBAC3B,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE;wBAC5C,CAAC,CAAC,EAAE,CAAC;gBACT,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,MAAM,EAAE,IAAI,CAAC,MAAe;aAC7B,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,MAAM,KAAK,GAAG,OAAO;QACnB,CAAC,CAAC;YACE,UAAU,CAAC;gBACT,IAAI,EAAE,gBAAgB;gBACtB,WAAW,EACT,0SAA0S;gBAC5S,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;gBAChC,mEAAmE;gBACnE,iEAAiE;gBACjE,wCAAwC;gBACxC,SAAS,EAAE;oBACT,YAAY,EAAE;wBACZ,EAAE,EAAE;4BACF,IAAI,EAAE,CAAC,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC;4BAChD,KAAK,EAAE,CAAC,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC;yBAClD;wBACD,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;wBACpB,MAAM,EAAE,MAAM;qBACf;iBACF;gBACD,OAAO,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;oBAC9B,MAAM,IAAI,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;oBAC3C,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;wBACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,QAAQ,GAAG,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;oBACtG,CAAC;oBACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;oBAClD,IAAI,CAAC,SAAS,EAAE,CAAC;wBACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,mBAAmB,EAAE,CAAC;oBAC1D,CAAC;oBACD,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;oBACxB,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;oBAClD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,IAAI,CAAC;oBAC7D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,yCAAyC,EAAE,CAAC,EAAE,CAAC;gBAC9G,CAAC;aACF,CAAC;YACF,UAAU,CAAC;gBACT,IAAI,EAAE,mBAAmB;gBACzB,WAAW,EAAE,kEAAkE;gBAC/E,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzB,iDAAiD;gBACjD,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;gBACtE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;aACtF,CAAC;SACH;QACH,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO,YAAY,CAAC;QAClB,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE,CAAC,GAAG,CAAC;QACf,eAAe,EAAE,CAAC,WAAW,CAAC;QAC9B,KAAK;QACL,KAAK,EAAE,OAAO;YACZ,CAAC,CAAC;gBACE,MAAM,EAAE,GAAG,EAAE;oBACX,kEAAkE;oBAClE,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;oBAClI,IAAI,MAAM,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC9C,IAAI,CAAC;4BACH,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;wBAC5B,CAAC;wBAAC,MAAM,CAAC;4BACP,6BAA6B;wBAC/B,CAAC;oBACH,CAAC;gBACH,CAAC;aACF;YACH,CAAC,CAAC,EAAE;KACP,CAAC,CAAC;AACL,CAAC;AAcD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAW,CAAC,GAAG,EAAE;IAC5C,IAAI,EAAE,GAA8B,IAAI,CAAC;IACzC,IAAI,UAAU,GAAsB,IAAI,CAAC;IACzC,IAAI,WAAW,GAAuB,IAAI,CAAC;IAC3C,IAAI,aAAiC,CAAC;IAEtC,MAAM,OAAO,GAAmB;QAC9B,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;QAC/C,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,IAAI,IAAI;QAC3C,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;YACf,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACvB,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;YAC/C,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACjD,CAAC;KACF,CAAC;IACF,MAAM,IAAI,GAA2B;QACnC,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI;QACxC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE;YACpB,IAAI,UAAU;gBAAE,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC;QACzC,CAAC;QACD,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE;YACrB,IAAI,WAAW;gBAAE,WAAW,CAAC,OAAO,GAAG,CAAC,CAAC;QAC3C,CAAC;QACD,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,OAAO,IAAI,IAAI;QAC/C,OAAO;QACP,IAAI,aAAa;YACf,OAAO,aAAa,CAAC;QACvB,CAAC;KACF,CAAC;IAEF,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;IAEzC,OAAO,YAAY,CAAC;QAClB,GAAG,MAAM;QACT,KAAK,EAAE;YACL,GAAG,MAAM,CAAC,KAAK;YACf,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;gBACd,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAqB,iBAAiB,CAAC,IAAI,IAAI,CAAC;gBACrE,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAa,aAAa,CAAC,IAAI,IAAI,CAAC;gBACjE,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAc,aAAa,CAAC,IAAI,IAAI,CAAC;gBACnE,aAAa,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAS,kBAAkB,CAAC,IAAI,SAAS,CAAC;gBAC1E,0EAA0E;gBAC1E,OAAO,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;SACF;KACF,CAAC,CAAC;AACL,CAAC,CAAC,EAAE,CAAC;AAEL,eAAe,gBAAgB,CAAC"}

package/dist/projector.d.ts

@@ -0,0 +1,17 @@
+import { type MoxxyEvent } from '@moxxy/sdk';
+import type { ServerFrame } from './protocol.js';
+/**
+ * Folds the session's event stream into {@link ServerFrame}s for the browser.
+ * Stateful: it correlates a `present_view` `tool_call_requested` with its
+ * `tool_result` (to read the validated AST) and tracks the last view id so each
+ * new view `replaces` the prior one. One projector per channel (single-user
+ * surface); it renders ANY turn on the shared log, including ones the surface
+ * didn't initiate — that is what gives mirror-to-both for free.
+ */
+export declare class EventProjector {
+    private readonly presentCalls;
+    private lastViewId;
+    private viewSeq;
+    project(event: MoxxyEvent): ServerFrame[];
+}
+//# sourceMappingURL=projector.d.ts.map

package/dist/projector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projector.d.ts","sourceRoot":"","sources":["../src/projector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,UAAU,EAAgB,MAAM,YAAY,CAAC;AAC9E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAUjD;;;;;;;GAOG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgD;IAC7E,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,OAAO,CAAK;IAEpB,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,EAAE;CAsE1C"}

package/dist/projector.js

@@ -0,0 +1,96 @@
+import { isFileDiffDisplay } from '@moxxy/sdk';
+/**
+ * Cap on in-flight present_view calls awaiting their tool_result. A normal turn
+ * has at most a handful; entries only linger when a turn is aborted/errors before
+ * the tool resolves (no matching tool_result ever arrives). Bound it so an
+ * accumulation of aborts over a very long session can't leak unboundedly.
+ */
+const MAX_PENDING_CALLS = 64;
+/**
+ * Folds the session's event stream into {@link ServerFrame}s for the browser.
+ * Stateful: it correlates a `present_view` `tool_call_requested` with its
+ * `tool_result` (to read the validated AST) and tracks the last view id so each
+ * new view `replaces` the prior one. One projector per channel (single-user
+ * surface); it renders ANY turn on the shared log, including ones the surface
+ * didn't initiate — that is what gives mirror-to-both for free.
+ */
+export class EventProjector {
+    presentCalls = new Map();
+    lastViewId = null;
+    viewSeq = 0;
+    project(event) {
+        switch (event.type) {
+            case 'user_prompt': {
+                // Hide the synthesized ui-action turns; show real user prompts.
+                if (!event.text.trim() || event.text.startsWith('[ui-action]'))
+                    return [];
+                return [{ kind: 'message', turnId: String(event.turnId), role: 'user', text: event.text }];
+            }
+            case 'tool_call_requested': {
+                if (event.name === 'present_view') {
+                    const input = event.input;
+                    this.presentCalls.set(String(event.callId), { fallbackText: input?.fallbackText });
+                    // Evict the oldest pending call(s) if a long run of aborted/errored
+                    // turns left their tool_result-less entries stranded.
+                    while (this.presentCalls.size > MAX_PENDING_CALLS) {
+                        const oldest = this.presentCalls.keys().next().value;
+                        if (oldest === undefined)
+                            break;
+                        this.presentCalls.delete(oldest);
+                    }
+                    return [];
+                }
+                return [{ kind: 'status', turnId: String(event.turnId), phase: 'tool', text: `${event.name}…` }];
+            }
+            case 'tool_result': {
+                // Rich tool results (Write/Edit) carry a structured `display`; render
+                // the diff in the chat stream, independent of present_view correlation.
+                const display = event.output?.display;
+                if (event.ok && isFileDiffDisplay(display)) {
+                    return [{ kind: 'file-diff', turnId: String(event.turnId), display }];
+                }
+                const pending = this.presentCalls.get(String(event.callId));
+                if (!pending)
+                    return [];
+                this.presentCalls.delete(String(event.callId));
+                if (!event.ok) {
+                    return [{ kind: 'status', turnId: String(event.turnId), phase: 'error', text: 'view failed to render' }];
+                }
+                const doc = event.output?.ast;
+                if (!doc)
+                    return [];
+                const viewId = `v_${String(event.turnId)}_${++this.viewSeq}`;
+                const replaces = this.lastViewId;
+                this.lastViewId = viewId;
+                const name = doc.root.kind === 'element' && typeof doc.root.props.name === 'string' ? doc.root.props.name : undefined;
+                return [
+                    {
+                        kind: 'view',
+                        viewId,
+                        turnId: String(event.turnId),
+                        replaces,
+                        ...(name ? { name } : {}),
+                        doc,
+                        ...(pending.fallbackText ? { fallbackText: pending.fallbackText } : {}),
+                    },
+                ];
+            }
+            case 'assistant_message': {
+                const frames = [];
+                if (event.content.trim()) {
+                    frames.push({ kind: 'message', turnId: String(event.turnId), role: 'assistant', text: event.content });
+                }
+                if (event.stopReason !== 'tool_use') {
+                    frames.push({ kind: 'status', turnId: String(event.turnId), phase: 'done', text: '' });
+                }
+                return frames;
+            }
+            case 'error': {
+                return [{ kind: 'status', turnId: String(event.turnId), phase: 'error', text: event.message }];
+            }
+            default:
+                return [];
+        }
+    }
+}
+//# sourceMappingURL=projector.js.map

package/dist/projector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projector.js","sourceRoot":"","sources":["../src/projector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAiC,MAAM,YAAY,CAAC;AAG9E;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B;;;;;;;GAOG;AACH,MAAM,OAAO,cAAc;IACR,YAAY,GAAG,IAAI,GAAG,EAAqC,CAAC;IACrE,UAAU,GAAkB,IAAI,CAAC;IACjC,OAAO,GAAG,CAAC,CAAC;IAEpB,OAAO,CAAC,KAAiB;QACvB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,gEAAgE;gBAChE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;oBAAE,OAAO,EAAE,CAAC;gBAC1E,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD,KAAK,qBAAqB,CAAC,CAAC,CAAC;gBAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBAClC,MAAM,KAAK,GAAG,KAAK,CAAC,KAA8C,CAAC;oBACnE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;oBACnF,oEAAoE;oBACpE,sDAAsD;oBACtD,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,iBAAiB,EAAE,CAAC;wBAClD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;wBACrD,IAAI,MAAM,KAAK,SAAS;4BAAE,MAAM;wBAChC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBACnC,CAAC;oBACD,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;YACnG,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,sEAAsE;gBACtE,wEAAwE;gBACxE,MAAM,OAAO,GAAI,KAAK,CAAC,MAA4C,EAAE,OAAO,CAAC;gBAC7E,IAAI,KAAK,CAAC,EAAE,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC3C,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;gBACxE,CAAC;gBACD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5D,IAAI,CAAC,OAAO;oBAAE,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC/C,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;oBACd,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBAC3G,CAAC;gBACD,MAAM,GAAG,GAAI,KAAK,CAAC,MAAwC,EAAE,GAAG,CAAC;gBACjE,IAAI,CAAC,GAAG;oBAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,MAAM,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC;gBACjC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;gBACzB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;gBACtH,OAAO;oBACL;wBACE,IAAI,EAAE,MAAM;wBACZ,MAAM;wBACN,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;wBAC5B,QAAQ;wBACR,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACzB,GAAG;wBACH,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACxE;iBACF,CAAC;YACJ,CAAC;YACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;gBACzB,MAAM,MAAM,GAAkB,EAAE,CAAC;gBACjC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;oBACzB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzG,CAAC;gBACD,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;oBACpC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;gBACzF,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACjG,CAAC;YACD;gBACE,OAAO,EAAE,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/protocol.d.ts

@@ -0,0 +1,145 @@
+import { z } from 'zod';
+import type { FileDiffDisplay, ViewDoc } from '@moxxy/sdk';
+/**
+ * Wire protocol between the web surface server and the browser. Plain JSON over
+ * a WebSocket. Shared by the channel (Node) and the frontend (browser); keep it
+ * DOM-free so esbuild can bundle it for the browser. (The frontend imports
+ * ONLY types from this module, so the zod runtime never reaches the browser
+ * bundle.)
+ */
+/** Server → browser. */
+export type ServerFrame = {
+    readonly kind: 'hello';
+    readonly sessionId?: string;
+}
+/**
+ * A new view to render.
+ *
+ * INVARIANT: the in-place-vs-push decision is driven SOLELY by the logical
+ * `name` (a re-render of the screen already on top updates in place; a
+ * different name pushes a history entry — see `applyView`). `replaces`
+ * carries the prior `viewId` purely as provenance/diagnostic context (the
+ * single-user projector emits the id of the view this one supersedes); it
+ * is NOT a navigation directive and the frontend reducer does not branch on
+ * it. Do not reintroduce `replaces`-based in-place logic without reconciling
+ * it with the name-keyed history/back model in view-store.ts.
+ */
+ | {
+    readonly kind: 'view';
+    readonly viewId: string;
+    readonly turnId: string;
+    readonly replaces: string | null;
+    /** Logical screen name (from `<view name>`), for client-side navigation/caching. */
+    readonly name?: string;
+    readonly doc: ViewDoc;
+    readonly fallbackText?: string;
+}
+/** Lightweight turn status (thinking / running a tool / done / error). */
+ | {
+    readonly kind: 'status';
+    readonly turnId: string;
+    readonly phase: 'thinking' | 'tool' | 'done' | 'error';
+    readonly text: string;
+}
+/** Assistant or user prose, mirrored into the transcript. */
+ | {
+    readonly kind: 'message';
+    readonly turnId: string;
+    readonly role: 'assistant' | 'user';
+    readonly text: string;
+}
+/** A structured file diff (from a Write/Edit tool result), rendered in the chat stream. */
+ | {
+    readonly kind: 'file-diff';
+    readonly turnId: string;
+    readonly display: FileDiffDisplay;
+}
+/** Acknowledge an inbound action. */
+ | {
+    readonly kind: 'ack';
+    readonly actionId: string;
+    readonly accepted: boolean;
+    readonly reason?: string;
+};
+/** Browser → server. */
+export type ClientFrame = 
+/** Free-text prompt typed into the surface's input box. */
+{
+    readonly kind: 'prompt';
+    readonly text: string;
+}
+/** A form submission / button click from a rendered view. */
+ | {
+    readonly kind: 'action';
+    readonly actionId: string;
+    readonly viewId: string | null;
+    readonly action: {
+        readonly name: string;
+        readonly params?: Record<string, unknown>;
+    };
+    readonly formValues: Record<string, string>;
+};
+/**
+ * Runtime validator for browser → server frames. The WS endpoint is
+ * internet-exposed via tunnels, so every inbound frame MUST be validated
+ * before any field access — a cast after JSON.parse let `{"kind":"prompt"}`
+ * throw inside the ws 'message' listener and take the whole process down.
+ * Mirrors {@link ClientFrame}; the drift guard below keeps them in sync.
+ */
+export declare const clientFrameSchema: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+    kind: z.ZodLiteral<"prompt">;
+    text: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    kind: "prompt";
+    text: string;
+}, {
+    kind: "prompt";
+    text: string;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"action">;
+    actionId: z.ZodString;
+    viewId: z.ZodNullable<z.ZodString>;
+    action: z.ZodObject<{
+        name: z.ZodString;
+        params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        params?: Record<string, unknown> | undefined;
+    }, {
+        name: string;
+        params?: Record<string, unknown> | undefined;
+    }>;
+    formValues: z.ZodRecord<z.ZodString, z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    action: {
+        name: string;
+        params?: Record<string, unknown> | undefined;
+    };
+    kind: "action";
+    actionId: string;
+    viewId: string | null;
+    formValues: Record<string, string>;
+}, {
+    action: {
+        name: string;
+        params?: Record<string, unknown> | undefined;
+    };
+    kind: "action";
+    actionId: string;
+    viewId: string | null;
+    formValues: Record<string, string>;
+}>]>;
+/** Compile-time drift guard: schema output and ClientFrame must stay mutually assignable. */
+type AssertTrue<T extends true> = T;
+export type _ClientFrameSchemaInSync = AssertTrue<z.infer<typeof clientFrameSchema> extends ClientFrame ? ClientFrame extends z.infer<typeof clientFrameSchema> ? true : false : false>;
+/**
+ * Synthesize the user-turn prompt for a view action. The agent is taught (via
+ * the build-view skill) to read `[ui-action]` blocks and respond by calling
+ * present_view again. Kept here so the channel and any test share one format.
+ */
+export declare function actionPrompt(action: {
+    name: string;
+    params?: Record<string, unknown>;
+}, formValues: Record<string, string>): string;
+export {};
+//# sourceMappingURL=protocol.d.ts.map

package/dist/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE3D;;;;;;GAMG;AAEH,wBAAwB;AACxB,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE;AACzD;;;;;;;;;;;GAWG;GACD;IACE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,oFAAoF;IACpF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AACH,0EAA0E;GACxE;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AACH,6DAA6D;GAC3D;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACnH,2FAA2F;GACzF;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;CAAE;AAC5F,qCAAqC;GACnC;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9G,wBAAwB;AACxB,MAAM,MAAM,WAAW;AACrB,2DAA2D;AACzD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACpD,6DAA6D;GAC3D;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IACtF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7C,CAAC;AAEN;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAS5B,CAAC;AAEH,6FAA6F;AAC7F,KAAK,UAAU,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;AACpC,MAAM,MAAM,wBAAwB,GAAG,UAAU,CAC/C,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,SAAS,WAAW,GACjD,WAAW,SAAS,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,GACnD,IAAI,GACJ,KAAK,GACP,KAAK,CACV,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAQnI"}

package/dist/protocol.js

@@ -0,0 +1,33 @@
+import { z } from 'zod';
+/**
+ * Runtime validator for browser → server frames. The WS endpoint is
+ * internet-exposed via tunnels, so every inbound frame MUST be validated
+ * before any field access — a cast after JSON.parse let `{"kind":"prompt"}`
+ * throw inside the ws 'message' listener and take the whole process down.
+ * Mirrors {@link ClientFrame}; the drift guard below keeps them in sync.
+ */
+export const clientFrameSchema = z.discriminatedUnion('kind', [
+    z.object({ kind: z.literal('prompt'), text: z.string() }),
+    z.object({
+        kind: z.literal('action'),
+        actionId: z.string(),
+        viewId: z.string().nullable(),
+        action: z.object({ name: z.string(), params: z.record(z.unknown()).optional() }),
+        formValues: z.record(z.string()),
+    }),
+]);
+/**
+ * Synthesize the user-turn prompt for a view action. The agent is taught (via
+ * the build-view skill) to read `[ui-action]` blocks and respond by calling
+ * present_view again. Kept here so the channel and any test share one format.
+ */
+export function actionPrompt(action, formValues) {
+    const payload = JSON.stringify({ action: action.name, ...(action.params ? { params: action.params } : {}), values: formValues });
+    return [
+        '[ui-action] The user interacted with the presented view.',
+        '```json',
+        payload,
+        '```',
+    ].join('\n');
+}
+//# sourceMappingURL=protocol.js.map

package/dist/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA+DxB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC5D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACzD,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QAChF,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACjC,CAAC;CACH,CAAC,CAAC;AAYH;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,MAA0D,EAAE,UAAkC;IACzH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACjI,OAAO;QACL,0DAA0D;QAC1D,SAAS;QACT,OAAO;QACP,KAAK;KACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}