@mulmoclaude/core 1.14.0 → 1.14.1

package/dist/files/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../src/files/json.ts","../../src/files/safe.ts","../../src/files/byPath.ts","../../src/files/htmlFileRequest.ts"],"sourcesContent":["import { writeFileAtomic, type WriteAtomicOptions } from \"./atomic.js\";\n\nconst JSON_INDENT = 2;\n\n/** Atomic JSON write (2-space indent) — serialize then write through the atomic\n *  tmp-file + rename seam so a reader never sees a half-written document. */\nexport async function writeJsonAtomic(filePath: string, data: unknown, opts: WriteAtomicOptions = {}): Promise<void> {\n  await writeFileAtomic(filePath, JSON.stringify(data, null, JSON_INDENT), opts);\n}\n","import { realpathSync } from \"node:fs\";\nimport path from \"node:path\";\n\n/** True for a `not found` filesystem error (ENOENT) — lets callers treat a\n *  missing file as an empty/default result instead of a thrown error. */\nexport function isEnoent(err: unknown): boolean {\n  return typeof err === \"object\" && err !== null && \"code\" in err && err.code === \"ENOENT\";\n}\n\n/** Realpath-based read-time containment: resolve `relPath` against the root's\n *  realpath and require the target's realpath to stay inside it. Returns null\n *  on ENOENT or traversal (symlink escapes included). `rootReal` MUST already\n *  be a realpath. The one implementation for host and plugins (#2461) — this\n *  security-critical primitive must not drift per consumer. */\nexport function resolveWithinRoot(rootReal: string, relPath: string): string | null {\n  const normalized = path.normalize(relPath || \"\");\n  const resolved = path.resolve(rootReal, normalized);\n  const resolvedReal = realpathOrNull(resolved);\n  if (resolvedReal === null) return null;\n  if (resolvedReal !== rootReal && !resolvedReal.startsWith(rootReal + path.sep)) {\n    return null;\n  }\n  return resolvedReal;\n}\n\nfunction realpathOrNull(absPath: string): string | null {\n  try {\n    return realpathSync(absPath);\n  } catch {\n    return null;\n  }\n}\n","// Read / overwrite files the TOOL CALL named, rather than files the app minted.\n// `presentDocument(path)` / `presentHtml(path)` open a document that already\n// exists — a repo's `README.md`, `docs/report.html`, an absolute path — and the\n// user's edits in the view overwrite it in place.\n//\n// Shared by both hosts (MulmoClaude's `server/utils/files/by-path.ts` and\n// MulmoTerminal's backend bind their own workspace root to it), because the\n// judgement of what a `path` argument may reach is exactly the thing that must\n// not drift between them: a host that accepts what the other refuses turns one\n// tool call into two different behaviours.\n//\n// The rules:\n//   - `classifyFilePath` (also what the plugins' `path` gate calls) decides the\n//     shape: right extension, no NUL, no `.` / `..` / empty segment. That\n//     lexical guard is what stops a vetted path from being re-pointed later.\n//   - relative paths resolve against the injected root; absolute paths are taken\n//     as given. There is deliberately NO containment check — opening a file\n//     outside the workspace is the documented purpose of the `path` form. The\n//     agent can already read and write those files directly; what is new is that\n//     the view can too.\n//   - a value that is absolute only under ANOTHER platform's rules is refused:\n//     `classifyFilePath` recognises `C:\\proj\\x.md` everywhere (the value may\n//     come from a remote host), but on POSIX `path.resolve(\"C:/proj/x.md\")`\n//     lands under the process cwd — a file nobody named.\n//   - reads and writes require a REGULAR FILE, judged through `realpath` so a\n//     symlink is assessed by what it points at and a directory named `x.md`\n//     cannot masquerade as a document.\n//   - `write` overwrites only. Neither tool creates a file at a caller-supplied\n//     path, so a write to a path that does not exist means the view is stale or\n//     the path was wrong — refusing keeps a typo from scattering files.\n//   - `readDir` and `unlink` are refused outright: this capability exists to\n//     read and re-save ONE named document, not to browse or delete.\n\nimport { readFile, realpath, stat as fsStat } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { classifyFilePath } from \"../artifacts/paths.js\";\nimport { writeFileAtomic } from \"./atomic.js\";\n\nexport const MARKDOWN_EXTENSIONS = [\".md\"] as const;\nexport const HTML_EXTENSIONS = [\".html\", \".htm\"] as const;\n\n/** Minimal structural echo of gui-chat-protocol's `FileOps`. Declared here\n *  rather than imported so core keeps no dependency on the protocol package;\n *  a host assigns the result straight to a `FileOps`-typed capability. */\nexport interface ByPathFileOps {\n  read: (rel: string) => Promise<string>;\n  readBytes: (rel: string) => Promise<Uint8Array>;\n  write: (rel: string, content: string | Uint8Array) => Promise<void>;\n  readDir: (rel: string) => Promise<string[]>;\n  stat: (rel: string) => Promise<{ mtimeMs: number; size: number }>;\n  exists: (rel: string) => Promise<boolean>;\n  unlink: (rel: string) => Promise<void>;\n}\n\n/** Absolute on-disk path for a caller-supplied path with one of `extensions`,\n *  or null when the value is not usable on this platform. */\nexport function resolveByPath(root: string, value: string, extensions: readonly string[]): string | null {\n  const kind = classifyFilePath(value, extensions);\n  if (kind === null) return null;\n  if (kind === \"relative\") return path.resolve(root, value);\n  return path.isAbsolute(value) ? path.resolve(value) : null;\n}\n\n/** True when the path names an existing regular file. */\nexport async function existsAsFile(root: string, value: string, extensions: readonly string[]): Promise<boolean> {\n  const absPath = resolveByPath(root, value, extensions);\n  return absPath === null ? false : (await regularFileTarget(absPath)) !== null;\n}\n\nexport interface ByPathOptions {\n  /** The root relative values resolve against, read PER CALL — hosts inject the\n   *  workspace after these ops are already bound into plugin closures. */\n  rootFor: () => string;\n  extensions: readonly string[];\n}\n\nfunction resolveOrThrow({ rootFor, extensions }: ByPathOptions, value: string): string {\n  const absPath = resolveByPath(rootFor(), value, extensions);\n  if (absPath === null) throw new Error(`invalid path: ${value}`);\n  return absPath;\n}\n\n/** The canonical REGULAR FILE a path names, or null when it is missing, is a\n *  directory, or is anything else (a FIFO would block a read forever).\n *  Resolved through `realpath` so a symlink is judged — and later written — by\n *  what it points at: `writeFileAtomic` renames a temp file into place, which\n *  through a link would replace the link itself and leave the real document\n *  untouched. */\nasync function regularFileTarget(absPath: string): Promise<string | null> {\n  try {\n    const target = await realpath(absPath);\n    return (await fsStat(target)).isFile() ? target : null;\n  } catch {\n    return null;\n  }\n}\n\n/** The file to read or overwrite. Throws rather than creating: neither tool\n *  ever writes to a path that does not already hold a document. */\nasync function existingFileFor(options: ByPathOptions, rel: string): Promise<string> {\n  const target = await regularFileTarget(resolveOrThrow(options, rel));\n  if (target === null) throw new Error(`no file exists at ${rel}`);\n  return target;\n}\n\n/** Browsing and deleting are NOT part of this capability: it exists so a view\n *  can read and re-save the ONE document the tool call named, not to enumerate\n *  a directory it was never pointed at or remove a file. */\nfunction unsupported(operation: string): () => Promise<never> {\n  return () => Promise.reject(new Error(`byPath FileOps does not support ${operation}`));\n}\n\n/** FileOps over caller-supplied paths — what a host injects as `files.byPath`\n *  for plugins whose `path` argument may leave their artifact directory. Every\n *  method takes the same value the tool call carried, not a scope-relative one. */\nexport function createByPathFileOps(options: ByPathOptions): ByPathFileOps {\n  return {\n    read: async (rel) => readFile(await existingFileFor(options, rel), \"utf-8\"),\n    readBytes: async (rel) => {\n      const buf = await readFile(await existingFileFor(options, rel));\n      return new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength);\n    },\n    write: async (rel, content) => writeFileAtomic(await existingFileFor(options, rel), content),\n    readDir: unsupported(\"readDir\"),\n    stat: async (rel) => {\n      const { mtimeMs, size } = await fsStat(resolveOrThrow(options, rel));\n      return { mtimeMs, size };\n    },\n    exists: (rel) => existsAsFile(options.rootFor(), rel, options.extensions),\n    unlink: unsupported(\"unlink\"),\n  };\n}\n","// Server half of the `/htmlfile` scheme (client half: `src/config/htmlFileUrl.ts`).\n// Turns a request path into the absolute file to serve, or null.\n//\n// Shared by both hosts so the URL the View asks for and the file a host resolves\n// cannot drift apart.\n//\n// This mount is deliberately NOT contained to a root: presentHtml's `path` form\n// may name any HTML page on disk, and serving it is the point. What still holds:\n//\n//   - only `ws` (workspace-relative) and `abs` (absolute) scopes exist; anything\n//     else 404s, so a bare `/htmlfile/etc/passwd` is not a path at all.\n//   - no `.` / `..` / empty segment survives, so a vetted URL cannot be\n//     re-pointed by traversal, and no dotfile segment is reachable (same policy\n//     as `resolveArtifactRequestPath`, which the artifact mounts share).\n//   - extension allowlist, realpath and regular-file checks stay with the host's\n//     mount, which is also where the CSP header and rate limit are applied.\n//\n// The trust boundary is whatever the host applies to its `/artifacts/html`\n// mount — in MulmoClaude, the loopback-only listener plus `requireSameOrigin`\n// (bearer auth does not apply outside `/api`, and an iframe `src` request cannot\n// carry an Authorization header anyway).\n\nimport path from \"node:path\";\n// The scope constants are re-declared rather than imported: core must not\n// depend on a plugin (dependencies flow the other way). `html-plugin`'s\n// `htmlFileUrl` builds the URLs these parse, and the round-trip test in the host\n// is what keeps the two halves honest.\nconst HTML_FILE_SCOPE_WORKSPACE = \"ws\";\nconst HTML_FILE_SCOPE_ABSOLUTE = \"abs\";\n\nconst WINDOWS_DRIVE_ONLY_RE = /^[a-zA-Z]:$/;\n\nfunction decodeSegments(reqPath: string): string[] | null {\n  let decoded: string[];\n  try {\n    decoded = reqPath\n      .replace(/^\\//, \"\")\n      .split(\"/\")\n      .map((segment) => decodeURIComponent(segment));\n  } catch {\n    // Malformed escape (`%ZZ`) — fail closed rather than bubbling a URIError.\n    return null;\n  }\n  // Segmentation happens on the ENCODED path, so a `%2F` (or `%5C`) becomes a\n  // separator only after this decode — `a%2F..%2F..%2Ftmp%2Fx.html` would arrive\n  // as one segment that the `..` check below never sees, and then split apart\n  // inside `path.resolve`. A decoded segment that still contains a separator is\n  // never legitimate here, so refuse it.\n  return decoded.some((segment) => segment.includes(\"/\") || segment.includes(\"\\\\\")) ? null : decoded;\n}\n\n/** Absolute path for a `/htmlfile/<scope>/<segments…>` request, or null when\n *  the URL is malformed, uses an unknown scope, or touches a `.` / `..` /\n *  dotfile segment. `workspaceRoot` should already be a realpath. */\nexport function resolveHtmlFileRequestPath(workspaceRoot: string, reqPath: string): string | null {\n  const decoded = decodeSegments(reqPath);\n  if (decoded === null || decoded.length < 2) return null;\n  const [scope, ...rest] = decoded;\n  if (scope !== HTML_FILE_SCOPE_WORKSPACE && scope !== HTML_FILE_SCOPE_ABSOLUTE) return null;\n  if (rest.length === 0) return null;\n  if (rest.some((segment) => segment === \"\" || segment === \".\" || segment === \"..\" || segment.startsWith(\".\") || segment.includes(\"\\0\"))) {\n    return null;\n  }\n  if (scope === HTML_FILE_SCOPE_WORKSPACE) return path.resolve(workspaceRoot, ...rest);\n  // `abs/C:/proj/page.html` — the drive letter arrives as its own segment, so\n  // rejoin it before resolving; everything else is rooted at `/`.\n  const candidate = WINDOWS_DRIVE_ONLY_RE.test(rest[0]) ? rest.join(\"/\") : `/${rest.join(\"/\")}`;\n  // Only THIS platform's `path` can say whether that is really absolute: on\n  // POSIX, `path.resolve(\"C:/proj/page.html\")` would land under the process cwd\n  // rather than at any drive, silently serving the wrong file. Refuse instead.\n  return path.isAbsolute(candidate) ? path.resolve(candidate) : null;\n}\n"],"mappings":";;;;;;;AAEA,IAAM,cAAc;;;AAIpB,eAAsB,gBAAgB,UAAkB,MAAe,OAA2B,CAAC,GAAkB;CACnH,MAAM,gBAAgB,UAAU,KAAK,UAAU,MAAM,MAAM,WAAW,GAAG,IAAI;AAC/E;;;;;ACHA,SAAgB,SAAS,KAAuB;CAC9C,OAAO,OAAO,QAAQ,YAAY,QAAQ,QAAQ,UAAU,OAAO,IAAI,SAAS;AAClF;;;;;;AAOA,SAAgB,kBAAkB,UAAkB,SAAgC;CAClF,MAAM,aAAa,KAAK,UAAU,WAAW,EAAE;CAE/C,MAAM,eAAe,eADJ,KAAK,QAAQ,UAAU,UACJ,CAAQ;CAC5C,IAAI,iBAAiB,MAAM,OAAO;CAClC,IAAI,iBAAiB,YAAY,CAAC,aAAa,WAAW,WAAW,KAAK,GAAG,GAC3E,OAAO;CAET,OAAO;AACT;AAEA,SAAS,eAAe,SAAgC;CACtD,IAAI;EACF,OAAO,aAAa,OAAO;CAC7B,QAAQ;EACN,OAAO;CACT;AACF;;;ACOA,IAAa,sBAAsB,CAAC,KAAK;AACzC,IAAa,kBAAkB,CAAC,SAAS,MAAM;;;AAiB/C,SAAgB,cAAc,MAAc,OAAe,YAA8C;CACvG,MAAM,OAAO,iBAAiB,OAAO,UAAU;CAC/C,IAAI,SAAS,MAAM,OAAO;CAC1B,IAAI,SAAS,YAAY,OAAO,KAAK,QAAQ,MAAM,KAAK;CACxD,OAAO,KAAK,WAAW,KAAK,IAAI,KAAK,QAAQ,KAAK,IAAI;AACxD;;AAGA,eAAsB,aAAa,MAAc,OAAe,YAAiD;CAC/G,MAAM,UAAU,cAAc,MAAM,OAAO,UAAU;CACrD,OAAO,YAAY,OAAO,QAAS,MAAM,kBAAkB,OAAO,MAAO;AAC3E;AASA,SAAS,eAAe,EAAE,SAAS,cAA6B,OAAuB;CACrF,MAAM,UAAU,cAAc,QAAQ,GAAG,OAAO,UAAU;CAC1D,IAAI,YAAY,MAAM,MAAM,IAAI,MAAM,iBAAiB,OAAO;CAC9D,OAAO;AACT;;;;;;;AAQA,eAAe,kBAAkB,SAAyC;CACxE,IAAI;EACF,MAAM,SAAS,MAAM,SAAS,OAAO;EACrC,QAAQ,MAAM,KAAO,MAAM,EAAA,CAAG,OAAO,IAAI,SAAS;CACpD,QAAQ;EACN,OAAO;CACT;AACF;;;AAIA,eAAe,gBAAgB,SAAwB,KAA8B;CACnF,MAAM,SAAS,MAAM,kBAAkB,eAAe,SAAS,GAAG,CAAC;CACnE,IAAI,WAAW,MAAM,MAAM,IAAI,MAAM,qBAAqB,KAAK;CAC/D,OAAO;AACT;;;;AAKA,SAAS,YAAY,WAAyC;CAC5D,aAAa,QAAQ,uBAAO,IAAI,MAAM,mCAAmC,WAAW,CAAC;AACvF;;;;AAKA,SAAgB,oBAAoB,SAAuC;CACzE,OAAO;EACL,MAAM,OAAO,QAAQ,SAAS,MAAM,gBAAgB,SAAS,GAAG,GAAG,OAAO;EAC1E,WAAW,OAAO,QAAQ;GACxB,MAAM,MAAM,MAAM,SAAS,MAAM,gBAAgB,SAAS,GAAG,CAAC;GAC9D,OAAO,IAAI,WAAW,IAAI,QAAQ,IAAI,YAAY,IAAI,UAAU;EAClE;EACA,OAAO,OAAO,KAAK,YAAY,gBAAgB,MAAM,gBAAgB,SAAS,GAAG,GAAG,OAAO;EAC3F,SAAS,YAAY,SAAS;EAC9B,MAAM,OAAO,QAAQ;GACnB,MAAM,EAAE,SAAS,SAAS,MAAM,KAAO,eAAe,SAAS,GAAG,CAAC;GACnE,OAAO;IAAE;IAAS;GAAK;EACzB;EACA,SAAS,QAAQ,aAAa,QAAQ,QAAQ,GAAG,KAAK,QAAQ,UAAU;EACxE,QAAQ,YAAY,QAAQ;CAC9B;AACF;;;ACxGA,IAAM,4BAA4B;AAClC,IAAM,2BAA2B;AAEjC,IAAM,wBAAwB;AAE9B,SAAS,eAAe,SAAkC;CACxD,IAAI;CACJ,IAAI;EACF,UAAU,QACP,QAAQ,OAAO,EAAE,CAAC,CAClB,MAAM,GAAG,CAAC,CACV,KAAK,YAAY,mBAAmB,OAAO,CAAC;CACjD,QAAQ;EAEN,OAAO;CACT;CAMA,OAAO,QAAQ,MAAM,YAAY,QAAQ,SAAS,GAAG,KAAK,QAAQ,SAAS,IAAI,CAAC,IAAI,OAAO;AAC7F;;;;AAKA,SAAgB,2BAA2B,eAAuB,SAAgC;CAChG,MAAM,UAAU,eAAe,OAAO;CACtC,IAAI,YAAY,QAAQ,QAAQ,SAAS,GAAG,OAAO;CACnD,MAAM,CAAC,OAAO,GAAG,QAAQ;CACzB,IAAI,UAAU,6BAA6B,UAAU,0BAA0B,OAAO;CACtF,IAAI,KAAK,WAAW,GAAG,OAAO;CAC9B,IAAI,KAAK,MAAM,YAAY,YAAY,MAAM,YAAY,OAAO,YAAY,QAAQ,QAAQ,WAAW,GAAG,KAAK,QAAQ,SAAS,IAAI,CAAC,GACnI,OAAO;CAET,IAAI,UAAU,2BAA2B,OAAO,KAAK,QAAQ,eAAe,GAAG,IAAI;CAGnF,MAAM,YAAY,sBAAsB,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,GAAG,IAAI,IAAI,KAAK,KAAK,GAAG;CAI1F,OAAO,KAAK,WAAW,SAAS,IAAI,KAAK,QAAQ,SAAS,IAAI;AAChE"}
+{"version":3,"file":"index.js","names":[],"sources":["../../src/files/json.ts","../../src/files/safe.ts","../../src/files/byPath.ts","../../src/files/htmlFileRequest.ts"],"sourcesContent":["import { writeFileAtomic, type WriteAtomicOptions } from \"./atomic.js\";\n\nconst JSON_INDENT = 2;\n\n/** Atomic JSON write (2-space indent) — serialize then write through the atomic\n *  tmp-file + rename seam so a reader never sees a half-written document. */\nexport async function writeJsonAtomic(filePath: string, data: unknown, opts: WriteAtomicOptions = {}): Promise<void> {\n  await writeFileAtomic(filePath, JSON.stringify(data, null, JSON_INDENT), opts);\n}\n","import { realpathSync } from \"node:fs\";\nimport path from \"node:path\";\n\n/** True for a `not found` filesystem error (ENOENT) — lets callers treat a\n *  missing file as an empty/default result instead of a thrown error. */\nexport function isEnoent(err: unknown): boolean {\n  return typeof err === \"object\" && err !== null && \"code\" in err && err.code === \"ENOENT\";\n}\n\n/** Realpath-based read-time containment: resolve `relPath` against the root's\n *  realpath and require the target's realpath to stay inside it. Returns null\n *  on ENOENT or traversal (symlink escapes included). `rootReal` MUST already\n *  be a realpath. The one implementation for host and plugins (#2461) — this\n *  security-critical primitive must not drift per consumer. */\nexport function resolveWithinRoot(rootReal: string, relPath: string): string | null {\n  const normalized = path.normalize(relPath || \"\");\n  const resolved = path.resolve(rootReal, normalized);\n  const resolvedReal = realpathOrNull(resolved);\n  if (resolvedReal === null) return null;\n  if (resolvedReal !== rootReal && !resolvedReal.startsWith(rootReal + path.sep)) {\n    return null;\n  }\n  return resolvedReal;\n}\n\nfunction realpathOrNull(absPath: string): string | null {\n  try {\n    return realpathSync(absPath);\n  } catch {\n    return null;\n  }\n}\n","// Read / overwrite files the TOOL CALL named, rather than files the app minted.\n// `presentDocument(path)` / `presentHtml(path)` open a document that already\n// exists — a repo's `README.md`, `docs/report.html`, an absolute path — and the\n// user's edits in the view overwrite it in place.\n//\n// Shared by both hosts (MulmoClaude's `server/utils/files/by-path.ts` and\n// MulmoTerminal's backend bind their own workspace root to it), because the\n// judgement of what a `path` argument may reach is exactly the thing that must\n// not drift between them: a host that accepts what the other refuses turns one\n// tool call into two different behaviours.\n//\n// The rules:\n//   - `classifyFilePath` (also what the plugins' `path` gate calls) decides the\n//     shape: right extension, no NUL, no `.` / `..` / empty segment. That\n//     lexical guard is what stops a vetted path from being re-pointed later.\n//   - relative paths resolve against the injected root; absolute paths are taken\n//     as given. There is deliberately NO containment check — opening a file\n//     outside the workspace is the documented purpose of the `path` form. The\n//     agent can already read and write those files directly; what is new is that\n//     the view can too.\n//   - a value that is absolute only under ANOTHER platform's rules is refused:\n//     `classifyFilePath` recognises `C:\\proj\\x.md` everywhere (the value may\n//     come from a remote host), but on POSIX `path.resolve(\"C:/proj/x.md\")`\n//     lands under the process cwd — a file nobody named.\n//   - reads and writes require a REGULAR FILE, judged through `realpath` so a\n//     symlink is assessed by what it points at and a directory named `x.md`\n//     cannot masquerade as a document.\n//   - `write` overwrites only. Neither tool creates a file at a caller-supplied\n//     path, so a write to a path that does not exist means the view is stale or\n//     the path was wrong — refusing keeps a typo from scattering files.\n//   - `readDir` and `unlink` are refused outright: this capability exists to\n//     read and re-save ONE named document, not to browse or delete.\n\nimport { readFile, realpath, stat as fsStat } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { classifyFilePath } from \"../artifacts/paths.js\";\nimport { writeFileAtomic } from \"./atomic.js\";\n\nexport const MARKDOWN_EXTENSIONS = [\".md\"] as const;\nexport const HTML_EXTENSIONS = [\".html\", \".htm\"] as const;\n\n/** Minimal structural echo of gui-chat-protocol's `FileOps`. Declared here\n *  rather than imported so core keeps no dependency on the protocol package;\n *  a host assigns the result straight to a `FileOps`-typed capability. */\nexport interface ByPathFileOps {\n  read: (rel: string) => Promise<string>;\n  readBytes: (rel: string) => Promise<Uint8Array>;\n  write: (rel: string, content: string | Uint8Array) => Promise<void>;\n  readDir: (rel: string) => Promise<string[]>;\n  stat: (rel: string) => Promise<{ mtimeMs: number; size: number }>;\n  exists: (rel: string) => Promise<boolean>;\n  unlink: (rel: string) => Promise<void>;\n}\n\n/** Absolute on-disk path for a caller-supplied path with one of `extensions`,\n *  or null when the value is not usable on this platform. */\nexport function resolveByPath(root: string, value: string, extensions: readonly string[]): string | null {\n  const kind = classifyFilePath(value, extensions);\n  if (kind === null) return null;\n  if (kind === \"relative\") return path.resolve(root, value);\n  return path.isAbsolute(value) ? path.resolve(value) : null;\n}\n\n/** True when the path names an existing regular file. */\nexport async function existsAsFile(root: string, value: string, extensions: readonly string[]): Promise<boolean> {\n  const absPath = resolveByPath(root, value, extensions);\n  return absPath === null ? false : (await regularFileTarget(absPath)) !== null;\n}\n\nexport interface ByPathOptions {\n  /** The root relative values resolve against, read PER CALL — hosts inject the\n   *  workspace after these ops are already bound into plugin closures. */\n  rootFor: () => string;\n  extensions: readonly string[];\n}\n\nfunction resolveOrThrow({ rootFor, extensions }: ByPathOptions, value: string): string {\n  const absPath = resolveByPath(rootFor(), value, extensions);\n  if (absPath === null) throw new Error(`invalid path: ${value}`);\n  return absPath;\n}\n\n/** The canonical REGULAR FILE a path names, or null when it is missing, is a\n *  directory, or is anything else (a FIFO would block a read forever).\n *  Resolved through `realpath` so a symlink is judged — and later written — by\n *  what it points at: `writeFileAtomic` renames a temp file into place, which\n *  through a link would replace the link itself and leave the real document\n *  untouched. */\nasync function regularFileTarget(absPath: string): Promise<string | null> {\n  try {\n    const target = await realpath(absPath);\n    return (await fsStat(target)).isFile() ? target : null;\n  } catch {\n    return null;\n  }\n}\n\n/** The file to read or overwrite. Throws rather than creating: neither tool\n *  ever writes to a path that does not already hold a document. */\nasync function existingFileFor(options: ByPathOptions, rel: string): Promise<string> {\n  const target = await regularFileTarget(resolveOrThrow(options, rel));\n  if (target === null) throw new Error(`no file exists at ${rel}`);\n  return target;\n}\n\n/** Browsing and deleting are NOT part of this capability: it exists so a view\n *  can read and re-save the ONE document the tool call named, not to enumerate\n *  a directory it was never pointed at or remove a file. */\nfunction unsupported(operation: string): () => Promise<never> {\n  return () => Promise.reject(new Error(`byPath FileOps does not support ${operation}`));\n}\n\n/** FileOps over caller-supplied paths — what a host injects as `files.byPath`\n *  for plugins whose `path` argument may leave their artifact directory. Every\n *  method takes the same value the tool call carried, not a scope-relative one. */\nexport function createByPathFileOps(options: ByPathOptions): ByPathFileOps {\n  return {\n    read: async (rel) => readFile(await existingFileFor(options, rel), \"utf-8\"),\n    readBytes: async (rel) => {\n      const buf = await readFile(await existingFileFor(options, rel));\n      return new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength);\n    },\n    write: async (rel, content) => writeFileAtomic(await existingFileFor(options, rel), content),\n    readDir: unsupported(\"readDir\"),\n    stat: async (rel) => {\n      const { mtimeMs, size } = await fsStat(resolveOrThrow(options, rel));\n      return { mtimeMs, size };\n    },\n    exists: (rel) => existsAsFile(options.rootFor(), rel, options.extensions),\n    unlink: unsupported(\"unlink\"),\n  };\n}\n","// Server half of the `/htmlfile` scheme (client half: `src/config/htmlFileUrl.ts`).\n// Turns a request path into the absolute file to serve, or null.\n//\n// Shared by both hosts so the URL the View asks for and the file a host resolves\n// cannot drift apart.\n//\n// This mount is deliberately NOT contained to a root: presentHtml's `path` form\n// may name any HTML page on disk, and serving it is the point. What still holds:\n//\n//   - only `ws` (workspace-relative) and `abs` (absolute) scopes exist; anything\n//     else 404s, so a bare `/htmlfile/etc/passwd` is not a path at all.\n//   - no `.` / `..` / empty segment survives, so a vetted URL cannot be\n//     re-pointed by traversal, and no dotfile segment is reachable (same policy\n//     as `resolveArtifactRequestPath`, which the artifact mounts share).\n//   - extension allowlist, realpath and regular-file checks stay with the host's\n//     mount, which is also where the CSP header and rate limit are applied.\n//\n// The trust boundary is whatever the host applies to its `/artifacts/html`\n// mount — in MulmoClaude, the loopback-only listener plus `requireSameOrigin`\n// (bearer auth does not apply outside `/api`, and an iframe `src` request cannot\n// carry an Authorization header anyway).\n\nimport path from \"node:path\";\n// The scope constants are re-declared rather than imported: core must not\n// depend on a plugin (dependencies flow the other way). `html-plugin`'s\n// `htmlFileUrl` builds the URLs these parse, and the round-trip test in the host\n// is what keeps the two halves honest.\nconst HTML_FILE_SCOPE_WORKSPACE = \"ws\";\nconst HTML_FILE_SCOPE_ABSOLUTE = \"abs\";\n\nconst WINDOWS_DRIVE_ONLY_RE = /^[a-zA-Z]:$/;\n\nfunction decodeSegments(reqPath: string): string[] | null {\n  let decoded: string[];\n  try {\n    decoded = reqPath\n      .replace(/^\\//, \"\")\n      .split(\"/\")\n      .map((segment) => decodeURIComponent(segment));\n  } catch {\n    // Malformed escape (`%ZZ`) — fail closed rather than bubbling a URIError.\n    return null;\n  }\n  // Segmentation happens on the ENCODED path, so a `%2F` (or `%5C`) becomes a\n  // separator only after this decode — `a%2F..%2F..%2Ftmp%2Fx.html` would arrive\n  // as one segment that the `..` check below never sees, and then split apart\n  // inside `path.resolve`. A decoded segment that still contains a separator is\n  // never legitimate here, so refuse it.\n  return decoded.some((segment) => segment.includes(\"/\") || segment.includes(\"\\\\\")) ? null : decoded;\n}\n\n/** Absolute path for a `/htmlfile/<scope>/<segments…>` request, or null when\n *  the URL is malformed, uses an unknown scope, or touches a `.` / `..` /\n *  dotfile segment. `workspaceRoot` should already be a realpath. */\nexport function resolveHtmlFileRequestPath(workspaceRoot: string, reqPath: string): string | null {\n  const decoded = decodeSegments(reqPath);\n  if (decoded === null || decoded.length < 2) return null;\n  const [scope, ...rest] = decoded;\n  if (scope !== HTML_FILE_SCOPE_WORKSPACE && scope !== HTML_FILE_SCOPE_ABSOLUTE) return null;\n  const [firstRest] = rest;\n  if (firstRest === undefined) return null;\n  if (rest.some((segment) => segment === \"\" || segment === \".\" || segment === \"..\" || segment.startsWith(\".\") || segment.includes(\"\\0\"))) {\n    return null;\n  }\n  if (scope === HTML_FILE_SCOPE_WORKSPACE) return path.resolve(workspaceRoot, ...rest);\n  // `abs/C:/proj/page.html` — the drive letter arrives as its own segment, so\n  // rejoin it before resolving; everything else is rooted at `/`.\n  const candidate = WINDOWS_DRIVE_ONLY_RE.test(firstRest) ? rest.join(\"/\") : `/${rest.join(\"/\")}`;\n  // Only THIS platform's `path` can say whether that is really absolute: on\n  // POSIX, `path.resolve(\"C:/proj/page.html\")` would land under the process cwd\n  // rather than at any drive, silently serving the wrong file. Refuse instead.\n  return path.isAbsolute(candidate) ? path.resolve(candidate) : null;\n}\n"],"mappings":";;;;;;;AAEA,IAAM,cAAc;;;AAIpB,eAAsB,gBAAgB,UAAkB,MAAe,OAA2B,CAAC,GAAkB;CACnH,MAAM,gBAAgB,UAAU,KAAK,UAAU,MAAM,MAAM,WAAW,GAAG,IAAI;AAC/E;;;;;ACHA,SAAgB,SAAS,KAAuB;CAC9C,OAAO,OAAO,QAAQ,YAAY,QAAQ,QAAQ,UAAU,OAAO,IAAI,SAAS;AAClF;;;;;;AAOA,SAAgB,kBAAkB,UAAkB,SAAgC;CAClF,MAAM,aAAa,KAAK,UAAU,WAAW,EAAE;CAE/C,MAAM,eAAe,eADJ,KAAK,QAAQ,UAAU,UACJ,CAAQ;CAC5C,IAAI,iBAAiB,MAAM,OAAO;CAClC,IAAI,iBAAiB,YAAY,CAAC,aAAa,WAAW,WAAW,KAAK,GAAG,GAC3E,OAAO;CAET,OAAO;AACT;AAEA,SAAS,eAAe,SAAgC;CACtD,IAAI;EACF,OAAO,aAAa,OAAO;CAC7B,QAAQ;EACN,OAAO;CACT;AACF;;;ACOA,IAAa,sBAAsB,CAAC,KAAK;AACzC,IAAa,kBAAkB,CAAC,SAAS,MAAM;;;AAiB/C,SAAgB,cAAc,MAAc,OAAe,YAA8C;CACvG,MAAM,OAAO,iBAAiB,OAAO,UAAU;CAC/C,IAAI,SAAS,MAAM,OAAO;CAC1B,IAAI,SAAS,YAAY,OAAO,KAAK,QAAQ,MAAM,KAAK;CACxD,OAAO,KAAK,WAAW,KAAK,IAAI,KAAK,QAAQ,KAAK,IAAI;AACxD;;AAGA,eAAsB,aAAa,MAAc,OAAe,YAAiD;CAC/G,MAAM,UAAU,cAAc,MAAM,OAAO,UAAU;CACrD,OAAO,YAAY,OAAO,QAAS,MAAM,kBAAkB,OAAO,MAAO;AAC3E;AASA,SAAS,eAAe,EAAE,SAAS,cAA6B,OAAuB;CACrF,MAAM,UAAU,cAAc,QAAQ,GAAG,OAAO,UAAU;CAC1D,IAAI,YAAY,MAAM,MAAM,IAAI,MAAM,iBAAiB,OAAO;CAC9D,OAAO;AACT;;;;;;;AAQA,eAAe,kBAAkB,SAAyC;CACxE,IAAI;EACF,MAAM,SAAS,MAAM,SAAS,OAAO;EACrC,QAAQ,MAAM,KAAO,MAAM,EAAA,CAAG,OAAO,IAAI,SAAS;CACpD,QAAQ;EACN,OAAO;CACT;AACF;;;AAIA,eAAe,gBAAgB,SAAwB,KAA8B;CACnF,MAAM,SAAS,MAAM,kBAAkB,eAAe,SAAS,GAAG,CAAC;CACnE,IAAI,WAAW,MAAM,MAAM,IAAI,MAAM,qBAAqB,KAAK;CAC/D,OAAO;AACT;;;;AAKA,SAAS,YAAY,WAAyC;CAC5D,aAAa,QAAQ,uBAAO,IAAI,MAAM,mCAAmC,WAAW,CAAC;AACvF;;;;AAKA,SAAgB,oBAAoB,SAAuC;CACzE,OAAO;EACL,MAAM,OAAO,QAAQ,SAAS,MAAM,gBAAgB,SAAS,GAAG,GAAG,OAAO;EAC1E,WAAW,OAAO,QAAQ;GACxB,MAAM,MAAM,MAAM,SAAS,MAAM,gBAAgB,SAAS,GAAG,CAAC;GAC9D,OAAO,IAAI,WAAW,IAAI,QAAQ,IAAI,YAAY,IAAI,UAAU;EAClE;EACA,OAAO,OAAO,KAAK,YAAY,gBAAgB,MAAM,gBAAgB,SAAS,GAAG,GAAG,OAAO;EAC3F,SAAS,YAAY,SAAS;EAC9B,MAAM,OAAO,QAAQ;GACnB,MAAM,EAAE,SAAS,SAAS,MAAM,KAAO,eAAe,SAAS,GAAG,CAAC;GACnE,OAAO;IAAE;IAAS;GAAK;EACzB;EACA,SAAS,QAAQ,aAAa,QAAQ,QAAQ,GAAG,KAAK,QAAQ,UAAU;EACxE,QAAQ,YAAY,QAAQ;CAC9B;AACF;;;ACxGA,IAAM,4BAA4B;AAClC,IAAM,2BAA2B;AAEjC,IAAM,wBAAwB;AAE9B,SAAS,eAAe,SAAkC;CACxD,IAAI;CACJ,IAAI;EACF,UAAU,QACP,QAAQ,OAAO,EAAE,CAAC,CAClB,MAAM,GAAG,CAAC,CACV,KAAK,YAAY,mBAAmB,OAAO,CAAC;CACjD,QAAQ;EAEN,OAAO;CACT;CAMA,OAAO,QAAQ,MAAM,YAAY,QAAQ,SAAS,GAAG,KAAK,QAAQ,SAAS,IAAI,CAAC,IAAI,OAAO;AAC7F;;;;AAKA,SAAgB,2BAA2B,eAAuB,SAAgC;CAChG,MAAM,UAAU,eAAe,OAAO;CACtC,IAAI,YAAY,QAAQ,QAAQ,SAAS,GAAG,OAAO;CACnD,MAAM,CAAC,OAAO,GAAG,QAAQ;CACzB,IAAI,UAAU,6BAA6B,UAAU,0BAA0B,OAAO;CACtF,MAAM,CAAC,aAAa;CACpB,IAAI,cAAc,KAAA,GAAW,OAAO;CACpC,IAAI,KAAK,MAAM,YAAY,YAAY,MAAM,YAAY,OAAO,YAAY,QAAQ,QAAQ,WAAW,GAAG,KAAK,QAAQ,SAAS,IAAI,CAAC,GACnI,OAAO;CAET,IAAI,UAAU,2BAA2B,OAAO,KAAK,QAAQ,eAAe,GAAG,IAAI;CAGnF,MAAM,YAAY,sBAAsB,KAAK,SAAS,IAAI,KAAK,KAAK,GAAG,IAAI,IAAI,KAAK,KAAK,GAAG;CAI5F,OAAO,KAAK,WAAW,SAAS,IAAI,KAAK,QAAQ,SAAS,IAAI;AAChE"}

package/dist/google/calendar.d.ts

@@ -39,47 +39,47 @@ export type CalendarEventSpan = {
 };
 export type CalendarEventInput = {
     summary: string;
-    description?: string;
-    location?: string;
+    description?: string | undefined;
+    location?: string | undefined;
     /** Calendar to create the event on; defaults to the user's primary. */
-    calendarId?: string;
+    calendarId?: string | undefined;
     /** Event colour (Google event palette id "1".."11"); omit to inherit the calendar's colour. */
-    colorId?: string;
+    colorId?: string | undefined;
     /** Caller-chosen event id. Google requires base32hex (`0-9a-v`), 5-1024 chars,
      *  and answers 409 when it is already taken. A collection push sets this so a
      *  locally-created record keeps its own record id as the event id, instead of
      *  being re-keyed to Google's after the fact — a re-key that is missed leaves
      *  a duplicate record on the next pull. */
-    eventId?: string;
+    eventId?: string | undefined;
 } & CalendarEventSpan;
 export interface UpdateCalendarEventInput {
     eventId: string;
-    summary?: string;
-    startDateTime?: string;
-    endDateTime?: string;
+    summary?: string | undefined;
+    startDateTime?: string | undefined;
+    endDateTime?: string | undefined;
     /** Structured span; wins over the flat pair when both are present. */
-    start?: CalendarEventTime;
-    end?: CalendarEventTime;
+    start?: CalendarEventTime | undefined;
+    end?: CalendarEventTime | undefined;
     /** `""` clears the description; omit to leave it untouched. */
-    description?: string;
+    description?: string | undefined;
     /** `""` clears the location; omit to leave it untouched. */
-    location?: string;
-    calendarId?: string;
-    colorId?: string;
+    location?: string | undefined;
+    calendarId?: string | undefined;
+    colorId?: string | undefined;
     /** Etag of the version this edit was computed against. Sent as `If-Match`, so
      *  Google answers 412 rather than letting the PATCH clobber a change that
      *  landed after the caller read the event. Omit for an unconditional write. */
-    ifMatch?: string;
+    ifMatch?: string | undefined;
 }
 export interface DeleteCalendarEventInput {
     eventId: string;
-    calendarId?: string;
+    calendarId?: string | undefined;
 }
 export interface ListEventsInput {
-    timeMin?: string;
-    maxResults?: number;
+    timeMin?: string | undefined;
+    maxResults?: number | undefined;
     /** Calendar to read; defaults to the user's primary. */
-    calendarId?: string;
+    calendarId?: string | undefined;
 }
 export interface CalendarEventSummary {
     id: string;
@@ -160,18 +160,18 @@ export declare function deleteCalendarEvent(accessToken: string, input: DeleteCa
 export declare function listCalendarEvents(accessToken: string, input?: ListEventsInput): Promise<CalendarEventSummary[]>;
 export interface SyncEventsInput {
     /** Calendar to sync; defaults to the user's primary. */
-    calendarId?: string;
+    calendarId?: string | undefined;
     /** Token from the previous sync. Omit for a full sync. */
-    syncToken?: string;
+    syncToken?: string | undefined;
     /** Page size for the underlying list calls. */
-    maxResults?: number;
+    maxResults?: number | undefined;
 }
 export interface CalendarSyncResult {
     /** Changed events since `syncToken` (all of them on a full sync). Deletions
      *  arrive here too, as `status: "cancelled"`. */
     events: CalendarEventSummary[];
     /** Token to pass to the NEXT sync. Absent only if Google omitted it. */
-    nextSyncToken?: string;
+    nextSyncToken?: string | undefined;
     /** The stored token had expired (410) — the caller must drop it and re-sync
      *  from scratch; no events are returned in that case. */
     fullResyncRequired: boolean;
@@ -189,7 +189,7 @@ export interface CalendarSyncResult {
 export declare function syncCalendarEvents(accessToken: string, input?: SyncEventsInput): Promise<CalendarSyncResult>;
 export interface CalendarListPage {
     items: unknown[];
-    nextPageToken?: string;
+    nextPageToken?: string | undefined;
 }
 /** Pagination loop for CalendarList.list, extracted so it can be tested without
  *  network. Stops at the last page (no token) or the runaway page cap. */

package/dist/google/collectionSync.d.ts

@@ -194,8 +194,8 @@ export declare function groupByCalendar(collections: readonly LoadedCollection[]
  *  Structural so the rule can be exercised without building a LoadedCollection. */
 export interface CalendarDeclaring {
     googleCalendar?: {
-        calendarId?: string;
-    };
+        calendarId?: string | undefined;
+    } | undefined;
 }
 /** The canonical calendar whose sync token nothing needs any more, or null.
  *

package/dist/google/index.cjs

@@ -4,9 +4,9 @@ const require_dist = require("../dist-CsgSfWwR.cjs");
 const require_text = require("../text-CaAh9ZSO.cjs");
 const require_atomic = require("../atomic-C_7YpMiM.cjs");
 const require_utils_fetch = require("../utils/fetch.cjs");
-const require_calendarGrid = require("../calendarGrid-BQYqOCnF.cjs");
+const require_calendarGrid = require("../calendarGrid-p8K-7cuB.cjs");
 const require_project = require("../project-C1ep9pvo.cjs");
-const require_discovery = require("../discovery-CRDx6TS4.cjs");
+const require_discovery = require("../discovery-DSLgRQhN.cjs");
 let node_fs = require("node:fs");
 let node_path = require("node:path");
 node_path = require_rolldown_runtime.__toESM(node_path, 1);
@@ -305,7 +305,7 @@ var EXPIRY_MARGIN_MS = ONE_MINUTE_MS;
 var createClient = (secret, redirectUri) => new google_auth_library.OAuth2Client({
 	clientId: secret.client_id,
 	clientSecret: secret.client_secret,
-	redirectUri
+	...redirectUri !== void 0 ? { redirectUri } : {}
 });
 var persistRotatedTokens = (client, home) => {
 	client.on("tokens", (tokens) => {