@mulmoclaude/mulmoscript-plugin 0.2.0 → 0.2.1

package/dist/core/paths.d.ts

@@ -10,12 +10,17 @@ export declare function slugify(title: string | undefined, fallback?: string): s
 export declare function storyFilePath(slugSource: string, now?: Date): string;
 /**
  * Normalize a caller-supplied wire path to the canonical
- * `stories/<rel>` form, or null when it can't be trusted. Accepts both the
- * canonical `stories/foo.json` convention and bare `foo.json` (the host route
- * historically allowed either). Rejects absolute paths, backslashes, and any
- * empty / `.` / `..` segment — the lexical guard before every
- * `files.artifacts` read/write (FileOps re-checks containment as
- * defence-in-depth).
+ * `stories/<rel>` form, or null when it can't be trusted. Accepts the
+ * canonical `stories/foo.json` convention, bare `foo.json` (the host route
+ * historically allowed either), and the workspace-relative spelling
+ * `artifacts/stories/foo.json` — the tool description called `filePath`
+ * "workspace-relative" for a long time, so agents legitimately send it.
+ * A leading `artifacts` segment is dropped only when `stories` follows;
+ * a bare `artifacts/foo.json` keeps its historical meaning (a file named
+ * `artifacts/foo.json` under the stories dir). Rejects absolute paths,
+ * backslashes, and any empty / `.` / `..` segment — the lexical guard
+ * before every `files.artifacts` read/write (FileOps re-checks
+ * containment as defence-in-depth).
  */
 export declare function normalizeStoryPath(filePath: string): string | null;
 //# sourceMappingURL=paths.d.ts.map

package/dist/core/paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/core/paths.ts"],"names":[],"mappings":"AAaA;;;;sEAIsE;AACtE,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,SAAU,GAAG,MAAM,CAW7E;AAED;;0CAE0C;AAC1C,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,GAAE,IAAiB,GAAG,MAAM,CAEhF;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASlE"}
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/core/paths.ts"],"names":[],"mappings":"AAcA;;;;sEAIsE;AACtE,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,SAAU,GAAG,MAAM,CAW7E;AAED;;0CAE0C;AAC1C,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,GAAE,IAAiB,GAAG,MAAM,CAEhF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUlE"}

package/dist/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_plugin = require("./plugin-CtKUt8DX.cjs");
+const require_plugin = require("./plugin-Bi986Wga.cjs");
 exports.TOOL_DEFINITION = require_plugin.TOOL_DEFINITION;
 exports.TOOL_NAME = require_plugin.TOOL_NAME;
 exports.executeMulmoScript = require_plugin.executeMulmoScript;

package/dist/index.js

@@ -1,2 +1,2 @@
-import { a as pluginCore, c as normalizeStoryPath, d as TOOL_DEFINITION, f as TOOL_NAME, i as executeUpdateScript, l as slugify, n as executeMulmoScriptSave, o as validateUpdateBeatBody, r as executeUpdateBeat, s as validateUpdateScriptBody, t as executeMulmoScript, u as storyFilePath } from "./plugin-W1ppnyhR.js";
+import { a as pluginCore, c as normalizeStoryPath, d as TOOL_DEFINITION, f as TOOL_NAME, i as executeUpdateScript, l as slugify, n as executeMulmoScriptSave, o as validateUpdateBeatBody, r as executeUpdateBeat, s as validateUpdateScriptBody, t as executeMulmoScript, u as storyFilePath } from "./plugin-BQyzxkui.js";
 export { TOOL_DEFINITION, TOOL_NAME, executeMulmoScript, executeMulmoScriptSave, executeUpdateBeat, executeUpdateScript, normalizeStoryPath, pluginCore, slugify, storyFilePath, validateUpdateBeatBody, validateUpdateScriptBody };

package/dist/{plugin-W1ppnyhR.js → plugin-BQyzxkui.js}

@@ -9,7 +9,7 @@ var TOOL_DEFINITION = {
 Two modes — provide EXACTLY ONE of \`script\` or \`filePath\`:
 
 1. **Create new** — pass \`script\` (full MulmoScript JSON). Server saves it to disk and presents it.
-2. **Re-display existing** — pass \`filePath\` (workspace-relative path returned by a previous call, e.g. "stories/my-story-1700000000000.json"). Much cheaper than re-sending the full script. Use whenever the user wants to revisit a presentation that was already created in this workspace.
+2. **Re-display existing** — pass \`filePath\` (the \`filePath\` returned by a previous call, e.g. "stories/my-story-1700000000000.json"; it is resolved against the workspace's \`artifacts/\` directory, NOT the workspace root). Much cheaper than re-sending the full script. Use whenever the user wants to revisit a presentation that was already created in this workspace.
 
 Optional \`autoGenerateMovie: true\` kicks off movie generation in the background, so the final video is ready by the time the user opens the canvas. Movie generation is expensive (multiple image + audio API calls + video encoding) — only set this when the user has explicitly asked for the movie. Default \`false\`.
 
@@ -100,7 +100,7 @@ IMPORTANT: "imagePrompt" and "moviePrompt" are plain string fields on the beat,
 			},
 			filePath: {
 				type: "string",
-				description: "Workspace-relative path to an EXISTING MulmoScript JSON file (e.g. 'stories/my-story-1700000000000.json'). Use this to re-display a script previously saved in this workspace, instead of resending the full JSON. Do NOT pass alongside `script`."
+				description: "Path of an EXISTING MulmoScript JSON file, as returned by a previous call (e.g. 'stories/my-story-1700000000000.json'). Resolved against the workspace's `artifacts/` directory, not the workspace root ('artifacts/stories/…' is also accepted). Use this to re-display a script previously saved in this workspace, instead of resending the full JSON. Do NOT pass alongside `script`."
 			},
 			autoGenerateMovie: {
 				type: "boolean",
@@ -113,6 +113,7 @@ IMPORTANT: "imagePrompt" and "moviePrompt" are plain string fields on the beat,
 //#endregion
 //#region src/core/paths.ts
 var STORIES_DIR = "stories";
+var ARTIFACTS_DIR = "artifacts";
 var MAX_SLUG_LEN = 120;
 /** Lowercase-hyphen slug, capped at MAX_SLUG_LEN, with leading/trailing
 *  hyphens stripped. Falls back to `fallback` for empty/undefined/non-ASCII
@@ -136,19 +137,25 @@ function storyFilePath(slugSource, now = /* @__PURE__ */ new Date()) {
 }
 /**
 * Normalize a caller-supplied wire path to the canonical
-* `stories/<rel>` form, or null when it can't be trusted. Accepts both the
-* canonical `stories/foo.json` convention and bare `foo.json` (the host route
-* historically allowed either). Rejects absolute paths, backslashes, and any
-* empty / `.` / `..` segment — the lexical guard before every
-* `files.artifacts` read/write (FileOps re-checks containment as
-* defence-in-depth).
+* `stories/<rel>` form, or null when it can't be trusted. Accepts the
+* canonical `stories/foo.json` convention, bare `foo.json` (the host route
+* historically allowed either), and the workspace-relative spelling
+* `artifacts/stories/foo.json` — the tool description called `filePath`
+* "workspace-relative" for a long time, so agents legitimately send it.
+* A leading `artifacts` segment is dropped only when `stories` follows;
+* a bare `artifacts/foo.json` keeps its historical meaning (a file named
+* `artifacts/foo.json` under the stories dir). Rejects absolute paths,
+* backslashes, and any empty / `.` / `..` segment — the lexical guard
+* before every `files.artifacts` read/write (FileOps re-checks
+* containment as defence-in-depth).
 */
 function normalizeStoryPath(filePath) {
 	if (filePath.length === 0 || filePath.includes("\\")) return null;
 	if (filePath.startsWith("/") || /^[A-Za-z]:/.test(filePath)) return null;
 	const segments = filePath.split("/");
 	if (segments.some((seg) => seg === "" || seg === "." || seg === "..")) return null;
-	const rest = segments[0] === STORIES_DIR ? segments.slice(1) : segments;
+	const trimmed = segments[0] === ARTIFACTS_DIR && segments[1] === STORIES_DIR ? segments.slice(1) : segments;
+	const rest = trimmed[0] === STORIES_DIR ? trimmed.slice(1) : trimmed;
 	if (rest.length === 0) return null;
 	return [STORIES_DIR, ...rest].join("/");
 }
@@ -377,4 +384,4 @@ var pluginCore = {
 //#endregion
 export { pluginCore as a, normalizeStoryPath as c, TOOL_DEFINITION as d, TOOL_NAME as f, executeUpdateScript as i, slugify as l, executeMulmoScriptSave as n, validateUpdateBeatBody as o, executeUpdateBeat as r, validateUpdateScriptBody as s, executeMulmoScript as t, storyFilePath as u };
 
-//# sourceMappingURL=plugin-W1ppnyhR.js.map
+//# sourceMappingURL=plugin-BQyzxkui.js.map

package/dist/plugin-BQyzxkui.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-BQyzxkui.js","names":[],"sources":["../src/core/definition.ts","../src/core/paths.ts","../src/core/validate.ts","../src/core/plugin.ts"],"sourcesContent":["import type { ToolDefinition } from \"gui-chat-protocol\";\n\nexport const TOOL_NAME = \"presentMulmoScript\";\n\n// Single source of truth for the presentMulmoScript tool schema, shared by\n// MulmoClaude (host built-in shim re-exports this) and MulmoTerminal.\n// (Extracted byte-identical from the host definition; evolves here with the\n// package version.)\nexport const TOOL_DEFINITION: ToolDefinition = {\n  type: \"function\",\n  name: TOOL_NAME,\n  description: `Save and present a MulmoScript story or presentation as a visual storyboard in the canvas.\n\nTwo modes — provide EXACTLY ONE of \\`script\\` or \\`filePath\\`:\n\n1. **Create new** — pass \\`script\\` (full MulmoScript JSON). Server saves it to disk and presents it.\n2. **Re-display existing** — pass \\`filePath\\` (the \\`filePath\\` returned by a previous call, e.g. \"stories/my-story-1700000000000.json\"; it is resolved against the workspace's \\`artifacts/\\` directory, NOT the workspace root). Much cheaper than re-sending the full script. Use whenever the user wants to revisit a presentation that was already created in this workspace.\n\nOptional \\`autoGenerateMovie: true\\` kicks off movie generation in the background, so the final video is ready by the time the user opens the canvas. Movie generation is expensive (multiple image + audio API calls + video encoding) — only set this when the user has explicitly asked for the movie. Default \\`false\\`.\n\nProvider rules for new scripts:\n- \\`speechParams.speakers.<name>.provider\\`: \\`\"gemini\"\\` — pairs with Gemini voices like \\`\"Kore\"\\`, \\`\"Aoede\"\\`, \\`\"Puck\"\\`. Do NOT use \\`\"google\"\\` here — that routes to Google Cloud TTS, where Gemini-class voices fail with \"This voice requires a model name to be specified.\" unless an explicit \\`model\\` is set.\n- \\`imageParams.provider\\`: \\`\"google\"\\`\n- \\`movieParams.provider\\`: \\`\"google\"\\`\n- Do NOT add a top-level \\`provider\\` field to \\`speechParams\\` — provider belongs per-speaker only.\n\nRequired structure:\n\n{\n  \"$mulmocast\": { \"version\": \"1.1\" },\n  \"title\": \"The Life of a Star\",\n  \"description\": \"A short educational explainer about stellar evolution\",\n  \"lang\": \"en\",\n  \"speechParams\": {\n    \"speakers\": {\n      \"Presenter\": {\n        \"provider\": \"gemini\",\n        \"voiceId\": \"Kore\",\n        \"displayName\": { \"en\": \"Presenter\" }\n      }\n    }\n  },\n  \"imageParams\": { \"provider\": \"google\", \"model\": \"gemini-3.1-flash-image-preview\" },\n  \"movieParams\": { \"provider\": \"google\", \"model\": \"veo-3.1-generate\" },\n  \"beats\": [\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Narration spoken aloud for this beat.\",\n      \"imagePrompt\": \"Detailed description — AI generates the image\"\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Bullet point beat.\",\n      \"image\": { \"type\": \"textSlide\", \"slide\": { \"title\": \"Slide Title\", \"bullets\": [\"Point one\", \"Point two\"] } }\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Markdown beat.\",\n      \"image\": { \"type\": \"markdown\", \"markdown\": \"## Heading\\\\n\\\\nBody text here.\" }\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Chart beat — use for data, comparisons, trends.\",\n      \"image\": { \"type\": \"chart\", \"title\": \"Chart Title\", \"chartData\": { \"type\": \"bar\", \"data\": { \"labels\": [\"A\", \"B\", \"C\"], \"datasets\": [{ \"label\": \"Series\", \"data\": [10, 20, 30] }] } } }\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Diagram beat — use for flows, architectures, relationships.\",\n      \"image\": { \"type\": \"mermaid\", \"title\": \"Diagram Title\", \"code\": { \"kind\": \"text\", \"text\": \"graph TD\\\\n  A[Start] --> B[Process] --> C[End]\" } }\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Rich interactive beat — use for custom layouts, animations, or anything that benefits from HTML/CSS.\",\n      \"image\": { \"type\": \"html_tailwind\", \"html\": \"<div class=\\\\\"flex items-center justify-center h-full text-4xl font-bold text-blue-600\\\\\">Hello World</div>\" }\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"AI video beat.\",\n      \"moviePrompt\": \"Detailed description — AI generates the video clip\"\n    }\n  ]\n}\n\nBeat visual options (choose one per beat):\n- \"imagePrompt\": \"...\"  → top-level string field — AI generates an image from the prompt\n- \"moviePrompt\": \"...\"  → top-level string field — AI generates a video clip from the prompt\n- \"image\": { \"type\": \"textSlide\", \"slide\": { \"title\", \"subtitle\"?, \"bullets\"? } }\n- \"image\": { \"type\": \"markdown\", \"markdown\": \"...\" }\n- \"image\": { \"type\": \"chart\", \"title\": \"...\", \"chartData\": { \"type\": \"bar\"|\"line\"|\"pie\"|..., \"data\": { \"labels\": [...], \"datasets\": [...] } } }  ← PREFER for data/numbers/comparisons. chartData is a full Chart.js config: labels/datasets go under \"data\", not at the top level.\n- \"image\": { \"type\": \"mermaid\", \"title\": \"...\", \"code\": { \"kind\": \"text\", \"text\": \"...\" } }  ← PREFER for flows/diagrams/relationships\n- \"image\": { \"type\": \"html_tailwind\", \"html\": \"...\", \"script\"?: \"...\" }  ← PREFER for rich layouts, animations, custom visuals\n\nIMPORTANT: \"imagePrompt\" and \"moviePrompt\" are plain string fields on the beat, NOT nested under \"image\".`,\n  parameters: {\n    type: \"object\",\n    properties: {\n      script: {\n        type: \"object\",\n        description:\n          \"Complete MulmoScript JSON for a NEW presentation. Must include $mulmocast, speechParams, imageParams, movieParams, and beats array. Always populate the top-level 'description' field with a concise 1–2 sentence summary of the presentation. Do NOT pass alongside `filePath`.\",\n        additionalProperties: true,\n      },\n      filename: {\n        type: \"string\",\n        description:\n          \"Optional filename without extension. Defaults to a slug of the script title. Only meaningful with `script`; ignored when `filePath` is given.\",\n      },\n      filePath: {\n        type: \"string\",\n        description:\n          \"Path of an EXISTING MulmoScript JSON file, as returned by a previous call (e.g. 'stories/my-story-1700000000000.json'). Resolved against the workspace's `artifacts/` directory, not the workspace root ('artifacts/stories/…' is also accepted). Use this to re-display a script previously saved in this workspace, instead of resending the full JSON. Do NOT pass alongside `script`.\",\n      },\n      autoGenerateMovie: {\n        type: \"boolean\",\n        description:\n          \"When true, the server starts movie generation in the background after save/load. The user does NOT need to open the canvas — progress streams via the existing session channel. Default false. Only set true when the user has explicitly asked for the movie; generation is expensive.\",\n      },\n    },\n    required: [],\n  },\n};\n","// Pure path helpers for MulmoScript story artifacts. No Node built-ins so the\n// package stays bundler-agnostic (chart/html precedent); all filesystem access\n// happens through the host's generic `files.artifacts` FileOps.\n//\n// Path model: the stories directory lives at `<workspace>/artifacts/stories`\n// and the FileOps scope root is `<workspace>/artifacts`, so the\n// FileOps-relative path and the historical `stories/<name>.json` wire form\n// (which every mulmoScript endpoint keys on) are the SAME string. Helpers\n// below therefore return one path used for both purposes.\n\nconst STORIES_DIR = \"stories\";\nconst ARTIFACTS_DIR = \"artifacts\";\nconst MAX_SLUG_LEN = 120;\n\n/** Lowercase-hyphen slug, capped at MAX_SLUG_LEN, with leading/trailing\n *  hyphens stripped. Falls back to `fallback` for empty/undefined/non-ASCII\n *  input. Mirrors html-plugin's in-package slugify — deliberately simpler\n *  than the host's hash-fallback variant; the timestamp suffix appended by\n *  `storyFilePath` keeps these throwaway filenames collision-free. */\nexport function slugify(title: string | undefined, fallback = \"story\"): string {\n  if (!title) return fallback;\n  const collapsed = title\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, \"-\")\n    .slice(0, MAX_SLUG_LEN);\n  let start = 0;\n  let end = collapsed.length;\n  while (start < end && collapsed[start] === \"-\") start += 1;\n  while (end > start && collapsed[end - 1] === \"-\") end -= 1;\n  return collapsed.slice(start, end) || fallback;\n}\n\n/** Build a fresh, collision-safe story path for a new script —\n *  `stories/<slug>-<epoch-ms>.json`, valid as both the FileOps-relative\n *  write path and the wire `filePath`. */\nexport function storyFilePath(slugSource: string, now: Date = new Date()): string {\n  return `${STORIES_DIR}/${slugify(slugSource)}-${now.getTime()}.json`;\n}\n\n/**\n * Normalize a caller-supplied wire path to the canonical\n * `stories/<rel>` form, or null when it can't be trusted. Accepts the\n * canonical `stories/foo.json` convention, bare `foo.json` (the host route\n * historically allowed either), and the workspace-relative spelling\n * `artifacts/stories/foo.json` — the tool description called `filePath`\n * \"workspace-relative\" for a long time, so agents legitimately send it.\n * A leading `artifacts` segment is dropped only when `stories` follows;\n * a bare `artifacts/foo.json` keeps its historical meaning (a file named\n * `artifacts/foo.json` under the stories dir). Rejects absolute paths,\n * backslashes, and any empty / `.` / `..` segment — the lexical guard\n * before every `files.artifacts` read/write (FileOps re-checks\n * containment as defence-in-depth).\n */\nexport function normalizeStoryPath(filePath: string): string | null {\n  if (filePath.length === 0 || filePath.includes(\"\\\\\")) return null;\n  // Absolute POSIX path or Windows drive prefix.\n  if (filePath.startsWith(\"/\") || /^[A-Za-z]:/.test(filePath)) return null;\n  const segments = filePath.split(\"/\");\n  if (segments.some((seg) => seg === \"\" || seg === \".\" || seg === \"..\")) return null;\n  const trimmed = segments[0] === ARTIFACTS_DIR && segments[1] === STORIES_DIR ? segments.slice(1) : segments;\n  const rest = trimmed[0] === STORIES_DIR ? trimmed.slice(1) : trimmed;\n  if (rest.length === 0) return null;\n  return [STORIES_DIR, ...rest].join(\"/\");\n}\n","// Body validators for the mulmoScript update endpoints, moved verbatim from\n// the host's `server/api/routes/mulmoScriptValidate.ts` so MulmoClaude and\n// MulmoTerminal share one definition of a \"valid script\" / \"valid beat\".\n//\n// The `@mulmocast/types` package exports zod schemas that mirror the\n// canonical MulmoScript / MulmoBeat shapes. The same schemas back client-side\n// edit-time validation in the presentMulmoScript View.\n\nimport { mulmoBeatSchema, mulmoScriptSchema } from \"@mulmocast/types\";\n\nexport type ValidationResult<T> = { ok: true; value: T } | { ok: false; error: string };\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction formatZodIssues(\n  // Zod's `$ZodIssue.path` is `PropertyKey[]` (includes `symbol`).\n  // Accept the wider type so callers can pass `safeParse().error.issues`\n  // directly; stringify any non-string/number segments at format time.\n  issues: readonly { message: string; path: readonly PropertyKey[] }[],\n): string {\n  if (issues.length === 0) return \"invalid shape\";\n  const head = issues\n    .slice(0, 3)\n    .map((i) => {\n      const pathStr = i.path.length > 0 ? i.path.map((seg) => String(seg)).join(\".\") : \"<root>\";\n      return `${pathStr}: ${i.message}`;\n    })\n    .join(\"; \");\n  return issues.length > 3 ? `${head} (+${issues.length - 3} more)` : head;\n}\n\n/**\n * Validate the `update-script` request body. Returns the parsed,\n * schema-conformant script on success, or a human-readable error\n * suitable for sending back as a 400 response.\n */\nexport function validateUpdateScriptBody(body: unknown): ValidationResult<{\n  filePath: string;\n  script: unknown;\n}> {\n  if (!isRecord(body)) {\n    return { ok: false, error: \"body must be an object\" };\n  }\n  if (typeof body.filePath !== \"string\" || body.filePath === \"\") {\n    return { ok: false, error: \"filePath must be a non-empty string\" };\n  }\n  if (body.script === undefined) {\n    return { ok: false, error: \"script is required\" };\n  }\n  const parsed = mulmoScriptSchema.safeParse(body.script);\n  if (!parsed.success) {\n    return {\n      ok: false,\n      error: `invalid script: ${formatZodIssues(parsed.error.issues)}`,\n    };\n  }\n  return {\n    ok: true,\n    value: { filePath: body.filePath as string, script: parsed.data },\n  };\n}\n\n/**\n * Validate the `update-beat` request body. `beatIndex` is allowed\n * to be any non-negative integer; the handler still bounds-checks\n * against the actual script length after reading the file.\n */\nexport function validateUpdateBeatBody(body: unknown): ValidationResult<{\n  filePath: string;\n  beatIndex: number;\n  beat: unknown;\n}> {\n  if (!isRecord(body)) {\n    return { ok: false, error: \"body must be an object\" };\n  }\n  if (typeof body.filePath !== \"string\" || body.filePath === \"\") {\n    return { ok: false, error: \"filePath must be a non-empty string\" };\n  }\n  if (typeof body.beatIndex !== \"number\" || !Number.isInteger(body.beatIndex) || body.beatIndex < 0) {\n    return { ok: false, error: \"beatIndex must be a non-negative integer\" };\n  }\n  if (body.beat === undefined) {\n    return { ok: false, error: \"beat is required\" };\n  }\n  const parsed = mulmoBeatSchema.safeParse(body.beat);\n  if (!parsed.success) {\n    return {\n      ok: false,\n      error: `invalid beat: ${formatZodIssues(parsed.error.issues)}`,\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      filePath: body.filePath as string,\n      beatIndex: body.beatIndex as number,\n      beat: parsed.data,\n    },\n  };\n}\n","import type { ToolPluginCore, ToolResult } from \"gui-chat-protocol\";\nimport { mulmoScriptSchema } from \"@mulmocast/types\";\nimport { TOOL_DEFINITION } from \"./definition\";\nimport { normalizeStoryPath, storyFilePath } from \"./paths\";\nimport { validateUpdateBeatBody, validateUpdateScriptBody } from \"./validate\";\nimport type { MulmoScriptData, MulmoScriptExecuteContext, SaveMulmoScriptArgs } from \"./types\";\n\n/** Failure half of every outcome below. `code` preserves the hosts'\n *  HTTP contract (bad_request → 400, not_found → 404) without the package\n *  knowing anything about HTTP. */\nexport interface MulmoScriptFailure {\n  ok: false;\n  code: \"bad_request\" | \"not_found\";\n  error: string;\n}\n\nexport type SaveMulmoScriptOutcome = ({ ok: true; message: string } & MulmoScriptData) | MulmoScriptFailure;\n\nexport type UpdateMulmoScriptOutcome = { ok: true } | MulmoScriptFailure;\n\nfunction badRequest(error: string): MulmoScriptFailure {\n  return { ok: false, code: \"bad_request\", error };\n}\n\nfunction notFound(error: string): MulmoScriptFailure {\n  return { ok: false, code: \"not_found\", error };\n}\n\nfunction errorText(err: unknown): string {\n  return err instanceof Error ? err.message : String(err);\n}\n\nfunction stringifyScript(script: unknown): string {\n  // 2-space indent matches the hosts' writeJsonAtomic convention so a\n  // package-written script diffs cleanly against host-written ones.\n  return JSON.stringify(script, null, 2);\n}\n\n/** Persist a new, schema-validated script under a fresh `stories/…` path. */\nasync function saveNewScript(context: MulmoScriptExecuteContext, script: unknown, filename: string | undefined, now: Date): Promise<SaveMulmoScriptOutcome> {\n  const validation = mulmoScriptSchema.safeParse(script);\n  if (!validation.success) {\n    return badRequest(\"script is not a valid MulmoScript\");\n  }\n  const validatedScript = validation.data;\n  // slugify drops `/`, `\\`, and `..`, so a hostile `filename` like\n  // \"../../etc/passwd\" can never escape the stories dir — defense in\n  // depth on top of FileOps' own containment check.\n  const slugSource = filename ? filename.replace(/\\.json$/i, \"\") : validatedScript.title || \"untitled\";\n  const filePath = storyFilePath(slugSource, now);\n  await context.files.artifacts.write(filePath, stringifyScript(validatedScript));\n  return { ok: true, script: validatedScript, filePath, message: `Saved MulmoScript to ${filePath}` };\n}\n\n/** Re-open an existing script: containment guard, existence, JSON parse,\n *  schema validation — same acceptance rules as the save path so a script\n *  this package saved can never be one it later refuses to load. */\nasync function loadExistingScript(context: MulmoScriptExecuteContext, filePath: string): Promise<SaveMulmoScriptOutcome> {\n  if (!filePath.toLowerCase().endsWith(\".json\")) {\n    return badRequest(\"filePath must point to a .json file\");\n  }\n  const storyPath = normalizeStoryPath(filePath);\n  if (!storyPath) {\n    return badRequest(\"Invalid filePath\");\n  }\n  if (!(await context.files.artifacts.exists(storyPath))) {\n    return notFound(`File not found: ${filePath}`);\n  }\n  const raw = await context.files.artifacts.read(storyPath);\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch (err) {\n    return badRequest(`Invalid JSON: ${errorText(err)}`);\n  }\n  const validation = mulmoScriptSchema.safeParse(parsed);\n  if (!validation.success) {\n    return badRequest(\"File is not a valid MulmoScript\");\n  }\n  return { ok: true, script: validation.data, filePath: storyPath, message: `Loaded MulmoScript from ${storyPath}` };\n}\n\n/**\n * Unified save-or-reopen for the presentMulmoScript tool call. `script`\n * (create new) and `filePath` (existing) are mutually exclusive. Never\n * throws on bad input — validation failures come back as discriminated\n * failures so host routes stay thin adapters. `autoGenerateMovie` is NOT\n * handled here: movie generation needs host backends (mulmocast/ffmpeg),\n * so hosts that support it trigger it from the returned `filePath`.\n */\nexport async function executeMulmoScriptSave(\n  context: MulmoScriptExecuteContext,\n  args: SaveMulmoScriptArgs,\n  now: Date = new Date(),\n): Promise<SaveMulmoScriptOutcome> {\n  const { script, filename, filePath } = args ?? {};\n  const hasScript = script !== undefined && script !== null;\n  const hasFilePath = typeof filePath === \"string\" && filePath !== \"\";\n  if (hasScript === hasFilePath) {\n    return badRequest(\n      hasScript ? \"Provide either `script` or `filePath`, not both.\" : \"Provide either `script` (new presentation) or `filePath` (existing presentation).\",\n    );\n  }\n  return hasFilePath\n    ? loadExistingScript(context, filePath as string)\n    : saveNewScript(context, script, typeof filename === \"string\" ? filename : undefined, now);\n}\n\n/** Resolve + guard a wire path for the update endpoints. */\nasync function resolveExistingStory(context: MulmoScriptExecuteContext, filePath: string): Promise<{ storyPath: string } | MulmoScriptFailure> {\n  const storyPath = normalizeStoryPath(filePath);\n  if (!storyPath) return badRequest(\"Invalid filePath\");\n  if (!(await context.files.artifacts.exists(storyPath))) {\n    return notFound(`File not found: ${filePath}`);\n  }\n  return { storyPath };\n}\n\n/** Overwrite one beat of an existing script (the View's per-beat source\n *  editor). Validates the body shape + beat schema, bounds-checks the index\n *  against the script on disk, and writes the whole file back. */\nexport async function executeUpdateBeat(context: MulmoScriptExecuteContext, body: unknown): Promise<UpdateMulmoScriptOutcome> {\n  const validation = validateUpdateBeatBody(body);\n  if (!validation.ok) return badRequest(validation.error);\n  const { filePath, beatIndex, beat } = validation.value;\n\n  const resolved = await resolveExistingStory(context, filePath);\n  if (\"ok\" in resolved) return resolved;\n\n  let script: { beats?: unknown[] };\n  try {\n    script = JSON.parse(await context.files.artifacts.read(resolved.storyPath));\n  } catch (err) {\n    return badRequest(`Invalid JSON: ${errorText(err)}`);\n  }\n  if (!Array.isArray(script.beats) || beatIndex >= script.beats.length) {\n    return badRequest(\"Invalid beatIndex\");\n  }\n  script.beats[beatIndex] = beat;\n  await context.files.artifacts.write(resolved.storyPath, stringifyScript(script));\n  return { ok: true };\n}\n\n/** Overwrite the whole script (the View's full-source editor / deck-editor\n *  auto-save). The body's `script` is schema-validated by\n *  `validateUpdateScriptBody` before the write. */\nexport async function executeUpdateScript(context: MulmoScriptExecuteContext, body: unknown): Promise<UpdateMulmoScriptOutcome> {\n  const validation = validateUpdateScriptBody(body);\n  if (!validation.ok) return badRequest(validation.error);\n  const { filePath, script } = validation.value;\n\n  const resolved = await resolveExistingStory(context, filePath);\n  if (\"ok\" in resolved) return resolved;\n\n  await context.files.artifacts.write(resolved.storyPath, stringifyScript(script));\n  return { ok: true };\n}\n\n/** ToolResult-shaped wrapper over `executeMulmoScriptSave` for runtime hosts\n *  (e.g. MulmoTerminal's package loader), where the tool call resolves to a\n *  ToolResult rather than an HTTP response. Failures are narrate-only\n *  (message, no data) so the agent can self-correct. */\nexport async function executeMulmoScript(context: MulmoScriptExecuteContext, args: SaveMulmoScriptArgs): Promise<ToolResult<MulmoScriptData>> {\n  const outcome = await executeMulmoScriptSave(context, args);\n  if (!outcome.ok) {\n    return {\n      message: outcome.error,\n      instructions: \"Acknowledge the error and retry with a valid `script` (new) or an existing `filePath`.\",\n    };\n  }\n  // The tool schema advertises `autoGenerateMovie`, but movie generation\n  // needs host backends (mulmocast/ffmpeg) this generic execute path\n  // doesn't have — MulmoClaude honours the flag in its own save route.\n  // Say so in the result rather than silently dropping the option, so the\n  // agent doesn't tell the user a movie is on its way.\n  const ignoredMovieNote = args.autoGenerateMovie === true ? \" (autoGenerateMovie is not supported by this host and was ignored)\" : \"\";\n  return {\n    message: `${outcome.message}${ignoredMovieNote}`,\n    data: { script: outcome.script, filePath: outcome.filePath },\n    instructions: \"Display the storyboard to the user.\",\n  };\n}\n\n/** Non-Vue plugin core for runtime hosts that register the package directly.\n *  MulmoClaude consumes only TOOL_DEFINITION + the execute functions in its\n *  own routes, so it doesn't use this. */\nexport const pluginCore: ToolPluginCore<MulmoScriptData, MulmoScriptData, SaveMulmoScriptArgs> = {\n  toolDefinition: TOOL_DEFINITION,\n  execute: executeMulmoScript as unknown as ToolPluginCore<MulmoScriptData, MulmoScriptData, SaveMulmoScriptArgs>[\"execute\"],\n  generatingMessage: \"Generating MulmoScript storyboard…\",\n  isEnabled: () => true,\n};\n"],"mappings":";;AAEA,IAAa,YAAY;AAMzB,IAAa,kBAAkC;CAC7C,MAAM;CACN,MAAM;CACN,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkFb,YAAY;EACV,MAAM;EACN,YAAY;GACV,QAAQ;IACN,MAAM;IACN,aACE;IACF,sBAAsB;GACxB;GACA,UAAU;IACR,MAAM;IACN,aACE;GACJ;GACA,UAAU;IACR,MAAM;IACN,aACE;GACJ;GACA,mBAAmB;IACjB,MAAM;IACN,aACE;GACJ;EACF;EACA,UAAU,CAAC;CACb;AACF;;;AC9GA,IAAM,cAAc;AACpB,IAAM,gBAAgB;AACtB,IAAM,eAAe;;;;;;AAOrB,SAAgB,QAAQ,OAA2B,WAAW,SAAiB;CAC7E,IAAI,CAAC,OAAO,OAAO;CACnB,MAAM,YAAY,MACf,YAAY,CAAC,CACb,QAAQ,eAAe,GAAG,CAAC,CAC3B,MAAM,GAAG,YAAY;CACxB,IAAI,QAAQ;CACZ,IAAI,MAAM,UAAU;CACpB,OAAO,QAAQ,OAAO,UAAU,WAAW,KAAK,SAAS;CACzD,OAAO,MAAM,SAAS,UAAU,MAAM,OAAO,KAAK,OAAO;CACzD,OAAO,UAAU,MAAM,OAAO,GAAG,KAAK;AACxC;;;;AAKA,SAAgB,cAAc,YAAoB,sBAAY,IAAI,KAAK,GAAW;CAChF,OAAO,GAAG,YAAY,GAAG,QAAQ,UAAU,EAAE,GAAG,IAAI,QAAQ,EAAE;AAChE;;;;;;;;;;;;;;;AAgBA,SAAgB,mBAAmB,UAAiC;CAClE,IAAI,SAAS,WAAW,KAAK,SAAS,SAAS,IAAI,GAAG,OAAO;CAE7D,IAAI,SAAS,WAAW,GAAG,KAAK,aAAa,KAAK,QAAQ,GAAG,OAAO;CACpE,MAAM,WAAW,SAAS,MAAM,GAAG;CACnC,IAAI,SAAS,MAAM,QAAQ,QAAQ,MAAM,QAAQ,OAAO,QAAQ,IAAI,GAAG,OAAO;CAC9E,MAAM,UAAU,SAAS,OAAO,iBAAiB,SAAS,OAAO,cAAc,SAAS,MAAM,CAAC,IAAI;CACnG,MAAM,OAAO,QAAQ,OAAO,cAAc,QAAQ,MAAM,CAAC,IAAI;CAC7D,IAAI,KAAK,WAAW,GAAG,OAAO;CAC9B,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG;AACxC;;;ACnDA,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,gBAIP,QACQ;CACR,IAAI,OAAO,WAAW,GAAG,OAAO;CAChC,MAAM,OAAO,OACV,MAAM,GAAG,CAAC,CAAC,CACX,KAAK,MAAM;EAEV,OAAO,GADS,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,KAAK,QAAQ,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,SAC/D,IAAI,EAAE;CAC1B,CAAC,CAAC,CACD,KAAK,IAAI;CACZ,OAAO,OAAO,SAAS,IAAI,GAAG,KAAK,KAAK,OAAO,SAAS,EAAE,UAAU;AACtE;;;;;;AAOA,SAAgB,yBAAyB,MAGtC;CACD,IAAI,CAAC,SAAS,IAAI,GAChB,OAAO;EAAE,IAAI;EAAO,OAAO;CAAyB;CAEtD,IAAI,OAAO,KAAK,aAAa,YAAY,KAAK,aAAa,IACzD,OAAO;EAAE,IAAI;EAAO,OAAO;CAAsC;CAEnE,IAAI,KAAK,WAAW,KAAA,GAClB,OAAO;EAAE,IAAI;EAAO,OAAO;CAAqB;CAElD,MAAM,SAAS,kBAAkB,UAAU,KAAK,MAAM;CACtD,IAAI,CAAC,OAAO,SACV,OAAO;EACL,IAAI;EACJ,OAAO,mBAAmB,gBAAgB,OAAO,MAAM,MAAM;CAC/D;CAEF,OAAO;EACL,IAAI;EACJ,OAAO;GAAE,UAAU,KAAK;GAAoB,QAAQ,OAAO;EAAK;CAClE;AACF;;;;;;AAOA,SAAgB,uBAAuB,MAIpC;CACD,IAAI,CAAC,SAAS,IAAI,GAChB,OAAO;EAAE,IAAI;EAAO,OAAO;CAAyB;CAEtD,IAAI,OAAO,KAAK,aAAa,YAAY,KAAK,aAAa,IACzD,OAAO;EAAE,IAAI;EAAO,OAAO;CAAsC;CAEnE,IAAI,OAAO,KAAK,cAAc,YAAY,CAAC,OAAO,UAAU,KAAK,SAAS,KAAK,KAAK,YAAY,GAC9F,OAAO;EAAE,IAAI;EAAO,OAAO;CAA2C;CAExE,IAAI,KAAK,SAAS,KAAA,GAChB,OAAO;EAAE,IAAI;EAAO,OAAO;CAAmB;CAEhD,MAAM,SAAS,gBAAgB,UAAU,KAAK,IAAI;CAClD,IAAI,CAAC,OAAO,SACV,OAAO;EACL,IAAI;EACJ,OAAO,iBAAiB,gBAAgB,OAAO,MAAM,MAAM;CAC7D;CAEF,OAAO;EACL,IAAI;EACJ,OAAO;GACL,UAAU,KAAK;GACf,WAAW,KAAK;GAChB,MAAM,OAAO;EACf;CACF;AACF;;;ACjFA,SAAS,WAAW,OAAmC;CACrD,OAAO;EAAE,IAAI;EAAO,MAAM;EAAe;CAAM;AACjD;AAEA,SAAS,SAAS,OAAmC;CACnD,OAAO;EAAE,IAAI;EAAO,MAAM;EAAa;CAAM;AAC/C;AAEA,SAAS,UAAU,KAAsB;CACvC,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACxD;AAEA,SAAS,gBAAgB,QAAyB;CAGhD,OAAO,KAAK,UAAU,QAAQ,MAAM,CAAC;AACvC;;AAGA,eAAe,cAAc,SAAoC,QAAiB,UAA8B,KAA4C;CAC1J,MAAM,aAAa,kBAAkB,UAAU,MAAM;CACrD,IAAI,CAAC,WAAW,SACd,OAAO,WAAW,mCAAmC;CAEvD,MAAM,kBAAkB,WAAW;CAKnC,MAAM,WAAW,cADE,WAAW,SAAS,QAAQ,YAAY,EAAE,IAAI,gBAAgB,SAAS,YAC/C,GAAG;CAC9C,MAAM,QAAQ,MAAM,UAAU,MAAM,UAAU,gBAAgB,eAAe,CAAC;CAC9E,OAAO;EAAE,IAAI;EAAM,QAAQ;EAAiB;EAAU,SAAS,wBAAwB;CAAW;AACpG;;;;AAKA,eAAe,mBAAmB,SAAoC,UAAmD;CACvH,IAAI,CAAC,SAAS,YAAY,CAAC,CAAC,SAAS,OAAO,GAC1C,OAAO,WAAW,qCAAqC;CAEzD,MAAM,YAAY,mBAAmB,QAAQ;CAC7C,IAAI,CAAC,WACH,OAAO,WAAW,kBAAkB;CAEtC,IAAI,CAAE,MAAM,QAAQ,MAAM,UAAU,OAAO,SAAS,GAClD,OAAO,SAAS,mBAAmB,UAAU;CAE/C,MAAM,MAAM,MAAM,QAAQ,MAAM,UAAU,KAAK,SAAS;CACxD,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,GAAG;CACzB,SAAS,KAAK;EACZ,OAAO,WAAW,iBAAiB,UAAU,GAAG,GAAG;CACrD;CACA,MAAM,aAAa,kBAAkB,UAAU,MAAM;CACrD,IAAI,CAAC,WAAW,SACd,OAAO,WAAW,iCAAiC;CAErD,OAAO;EAAE,IAAI;EAAM,QAAQ,WAAW;EAAM,UAAU;EAAW,SAAS,2BAA2B;CAAY;AACnH;;;;;;;;;AAUA,eAAsB,uBACpB,SACA,MACA,sBAAY,IAAI,KAAK,GACY;CACjC,MAAM,EAAE,QAAQ,UAAU,aAAa,QAAQ,CAAC;CAChD,MAAM,YAAY,WAAW,KAAA,KAAa,WAAW;CACrD,MAAM,cAAc,OAAO,aAAa,YAAY,aAAa;CACjE,IAAI,cAAc,aAChB,OAAO,WACL,YAAY,qDAAqD,mFACnE;CAEF,OAAO,cACH,mBAAmB,SAAS,QAAkB,IAC9C,cAAc,SAAS,QAAQ,OAAO,aAAa,WAAW,WAAW,KAAA,GAAW,GAAG;AAC7F;;AAGA,eAAe,qBAAqB,SAAoC,UAAuE;CAC7I,MAAM,YAAY,mBAAmB,QAAQ;CAC7C,IAAI,CAAC,WAAW,OAAO,WAAW,kBAAkB;CACpD,IAAI,CAAE,MAAM,QAAQ,MAAM,UAAU,OAAO,SAAS,GAClD,OAAO,SAAS,mBAAmB,UAAU;CAE/C,OAAO,EAAE,UAAU;AACrB;;;;AAKA,eAAsB,kBAAkB,SAAoC,MAAkD;CAC5H,MAAM,aAAa,uBAAuB,IAAI;CAC9C,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,WAAW,KAAK;CACtD,MAAM,EAAE,UAAU,WAAW,SAAS,WAAW;CAEjD,MAAM,WAAW,MAAM,qBAAqB,SAAS,QAAQ;CAC7D,IAAI,QAAQ,UAAU,OAAO;CAE7B,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,MAAM,QAAQ,MAAM,UAAU,KAAK,SAAS,SAAS,CAAC;CAC5E,SAAS,KAAK;EACZ,OAAO,WAAW,iBAAiB,UAAU,GAAG,GAAG;CACrD;CACA,IAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,KAAK,aAAa,OAAO,MAAM,QAC5D,OAAO,WAAW,mBAAmB;CAEvC,OAAO,MAAM,aAAa;CAC1B,MAAM,QAAQ,MAAM,UAAU,MAAM,SAAS,WAAW,gBAAgB,MAAM,CAAC;CAC/E,OAAO,EAAE,IAAI,KAAK;AACpB;;;;AAKA,eAAsB,oBAAoB,SAAoC,MAAkD;CAC9H,MAAM,aAAa,yBAAyB,IAAI;CAChD,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,WAAW,KAAK;CACtD,MAAM,EAAE,UAAU,WAAW,WAAW;CAExC,MAAM,WAAW,MAAM,qBAAqB,SAAS,QAAQ;CAC7D,IAAI,QAAQ,UAAU,OAAO;CAE7B,MAAM,QAAQ,MAAM,UAAU,MAAM,SAAS,WAAW,gBAAgB,MAAM,CAAC;CAC/E,OAAO,EAAE,IAAI,KAAK;AACpB;;;;;AAMA,eAAsB,mBAAmB,SAAoC,MAAiE;CAC5I,MAAM,UAAU,MAAM,uBAAuB,SAAS,IAAI;CAC1D,IAAI,CAAC,QAAQ,IACX,OAAO;EACL,SAAS,QAAQ;EACjB,cAAc;CAChB;CAOF,MAAM,mBAAmB,KAAK,sBAAsB,OAAO,uEAAuE;CAClI,OAAO;EACL,SAAS,GAAG,QAAQ,UAAU;EAC9B,MAAM;GAAE,QAAQ,QAAQ;GAAQ,UAAU,QAAQ;EAAS;EAC3D,cAAc;CAChB;AACF;;;;AAKA,IAAa,aAAoF;CAC/F,gBAAgB;CAChB,SAAS;CACT,mBAAmB;CACnB,iBAAiB;AACnB"}

package/dist/{plugin-CtKUt8DX.cjs → plugin-Bi986Wga.cjs}

@@ -9,7 +9,7 @@ var TOOL_DEFINITION = {
 Two modes — provide EXACTLY ONE of \`script\` or \`filePath\`:
 
 1. **Create new** — pass \`script\` (full MulmoScript JSON). Server saves it to disk and presents it.
-2. **Re-display existing** — pass \`filePath\` (workspace-relative path returned by a previous call, e.g. "stories/my-story-1700000000000.json"). Much cheaper than re-sending the full script. Use whenever the user wants to revisit a presentation that was already created in this workspace.
+2. **Re-display existing** — pass \`filePath\` (the \`filePath\` returned by a previous call, e.g. "stories/my-story-1700000000000.json"; it is resolved against the workspace's \`artifacts/\` directory, NOT the workspace root). Much cheaper than re-sending the full script. Use whenever the user wants to revisit a presentation that was already created in this workspace.
 
 Optional \`autoGenerateMovie: true\` kicks off movie generation in the background, so the final video is ready by the time the user opens the canvas. Movie generation is expensive (multiple image + audio API calls + video encoding) — only set this when the user has explicitly asked for the movie. Default \`false\`.
 
@@ -100,7 +100,7 @@ IMPORTANT: "imagePrompt" and "moviePrompt" are plain string fields on the beat,
 			},
 			filePath: {
 				type: "string",
-				description: "Workspace-relative path to an EXISTING MulmoScript JSON file (e.g. 'stories/my-story-1700000000000.json'). Use this to re-display a script previously saved in this workspace, instead of resending the full JSON. Do NOT pass alongside `script`."
+				description: "Path of an EXISTING MulmoScript JSON file, as returned by a previous call (e.g. 'stories/my-story-1700000000000.json'). Resolved against the workspace's `artifacts/` directory, not the workspace root ('artifacts/stories/…' is also accepted). Use this to re-display a script previously saved in this workspace, instead of resending the full JSON. Do NOT pass alongside `script`."
 			},
 			autoGenerateMovie: {
 				type: "boolean",
@@ -113,6 +113,7 @@ IMPORTANT: "imagePrompt" and "moviePrompt" are plain string fields on the beat,
 //#endregion
 //#region src/core/paths.ts
 var STORIES_DIR = "stories";
+var ARTIFACTS_DIR = "artifacts";
 var MAX_SLUG_LEN = 120;
 /** Lowercase-hyphen slug, capped at MAX_SLUG_LEN, with leading/trailing
 *  hyphens stripped. Falls back to `fallback` for empty/undefined/non-ASCII
@@ -136,19 +137,25 @@ function storyFilePath(slugSource, now = /* @__PURE__ */ new Date()) {
 }
 /**
 * Normalize a caller-supplied wire path to the canonical
-* `stories/<rel>` form, or null when it can't be trusted. Accepts both the
-* canonical `stories/foo.json` convention and bare `foo.json` (the host route
-* historically allowed either). Rejects absolute paths, backslashes, and any
-* empty / `.` / `..` segment — the lexical guard before every
-* `files.artifacts` read/write (FileOps re-checks containment as
-* defence-in-depth).
+* `stories/<rel>` form, or null when it can't be trusted. Accepts the
+* canonical `stories/foo.json` convention, bare `foo.json` (the host route
+* historically allowed either), and the workspace-relative spelling
+* `artifacts/stories/foo.json` — the tool description called `filePath`
+* "workspace-relative" for a long time, so agents legitimately send it.
+* A leading `artifacts` segment is dropped only when `stories` follows;
+* a bare `artifacts/foo.json` keeps its historical meaning (a file named
+* `artifacts/foo.json` under the stories dir). Rejects absolute paths,
+* backslashes, and any empty / `.` / `..` segment — the lexical guard
+* before every `files.artifacts` read/write (FileOps re-checks
+* containment as defence-in-depth).
 */
 function normalizeStoryPath(filePath) {
 	if (filePath.length === 0 || filePath.includes("\\")) return null;
 	if (filePath.startsWith("/") || /^[A-Za-z]:/.test(filePath)) return null;
 	const segments = filePath.split("/");
 	if (segments.some((seg) => seg === "" || seg === "." || seg === "..")) return null;
-	const rest = segments[0] === STORIES_DIR ? segments.slice(1) : segments;
+	const trimmed = segments[0] === ARTIFACTS_DIR && segments[1] === STORIES_DIR ? segments.slice(1) : segments;
+	const rest = trimmed[0] === STORIES_DIR ? trimmed.slice(1) : trimmed;
 	if (rest.length === 0) return null;
 	return [STORIES_DIR, ...rest].join("/");
 }
@@ -448,4 +455,4 @@ Object.defineProperty(exports, "validateUpdateScriptBody", {
 	}
 });
 
-//# sourceMappingURL=plugin-CtKUt8DX.cjs.map
+//# sourceMappingURL=plugin-Bi986Wga.cjs.map

package/dist/plugin-Bi986Wga.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-Bi986Wga.cjs","names":[],"sources":["../src/core/definition.ts","../src/core/paths.ts","../src/core/validate.ts","../src/core/plugin.ts"],"sourcesContent":["import type { ToolDefinition } from \"gui-chat-protocol\";\n\nexport const TOOL_NAME = \"presentMulmoScript\";\n\n// Single source of truth for the presentMulmoScript tool schema, shared by\n// MulmoClaude (host built-in shim re-exports this) and MulmoTerminal.\n// (Extracted byte-identical from the host definition; evolves here with the\n// package version.)\nexport const TOOL_DEFINITION: ToolDefinition = {\n  type: \"function\",\n  name: TOOL_NAME,\n  description: `Save and present a MulmoScript story or presentation as a visual storyboard in the canvas.\n\nTwo modes — provide EXACTLY ONE of \\`script\\` or \\`filePath\\`:\n\n1. **Create new** — pass \\`script\\` (full MulmoScript JSON). Server saves it to disk and presents it.\n2. **Re-display existing** — pass \\`filePath\\` (the \\`filePath\\` returned by a previous call, e.g. \"stories/my-story-1700000000000.json\"; it is resolved against the workspace's \\`artifacts/\\` directory, NOT the workspace root). Much cheaper than re-sending the full script. Use whenever the user wants to revisit a presentation that was already created in this workspace.\n\nOptional \\`autoGenerateMovie: true\\` kicks off movie generation in the background, so the final video is ready by the time the user opens the canvas. Movie generation is expensive (multiple image + audio API calls + video encoding) — only set this when the user has explicitly asked for the movie. Default \\`false\\`.\n\nProvider rules for new scripts:\n- \\`speechParams.speakers.<name>.provider\\`: \\`\"gemini\"\\` — pairs with Gemini voices like \\`\"Kore\"\\`, \\`\"Aoede\"\\`, \\`\"Puck\"\\`. Do NOT use \\`\"google\"\\` here — that routes to Google Cloud TTS, where Gemini-class voices fail with \"This voice requires a model name to be specified.\" unless an explicit \\`model\\` is set.\n- \\`imageParams.provider\\`: \\`\"google\"\\`\n- \\`movieParams.provider\\`: \\`\"google\"\\`\n- Do NOT add a top-level \\`provider\\` field to \\`speechParams\\` — provider belongs per-speaker only.\n\nRequired structure:\n\n{\n  \"$mulmocast\": { \"version\": \"1.1\" },\n  \"title\": \"The Life of a Star\",\n  \"description\": \"A short educational explainer about stellar evolution\",\n  \"lang\": \"en\",\n  \"speechParams\": {\n    \"speakers\": {\n      \"Presenter\": {\n        \"provider\": \"gemini\",\n        \"voiceId\": \"Kore\",\n        \"displayName\": { \"en\": \"Presenter\" }\n      }\n    }\n  },\n  \"imageParams\": { \"provider\": \"google\", \"model\": \"gemini-3.1-flash-image-preview\" },\n  \"movieParams\": { \"provider\": \"google\", \"model\": \"veo-3.1-generate\" },\n  \"beats\": [\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Narration spoken aloud for this beat.\",\n      \"imagePrompt\": \"Detailed description — AI generates the image\"\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Bullet point beat.\",\n      \"image\": { \"type\": \"textSlide\", \"slide\": { \"title\": \"Slide Title\", \"bullets\": [\"Point one\", \"Point two\"] } }\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Markdown beat.\",\n      \"image\": { \"type\": \"markdown\", \"markdown\": \"## Heading\\\\n\\\\nBody text here.\" }\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Chart beat — use for data, comparisons, trends.\",\n      \"image\": { \"type\": \"chart\", \"title\": \"Chart Title\", \"chartData\": { \"type\": \"bar\", \"data\": { \"labels\": [\"A\", \"B\", \"C\"], \"datasets\": [{ \"label\": \"Series\", \"data\": [10, 20, 30] }] } } }\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Diagram beat — use for flows, architectures, relationships.\",\n      \"image\": { \"type\": \"mermaid\", \"title\": \"Diagram Title\", \"code\": { \"kind\": \"text\", \"text\": \"graph TD\\\\n  A[Start] --> B[Process] --> C[End]\" } }\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Rich interactive beat — use for custom layouts, animations, or anything that benefits from HTML/CSS.\",\n      \"image\": { \"type\": \"html_tailwind\", \"html\": \"<div class=\\\\\"flex items-center justify-center h-full text-4xl font-bold text-blue-600\\\\\">Hello World</div>\" }\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"AI video beat.\",\n      \"moviePrompt\": \"Detailed description — AI generates the video clip\"\n    }\n  ]\n}\n\nBeat visual options (choose one per beat):\n- \"imagePrompt\": \"...\"  → top-level string field — AI generates an image from the prompt\n- \"moviePrompt\": \"...\"  → top-level string field — AI generates a video clip from the prompt\n- \"image\": { \"type\": \"textSlide\", \"slide\": { \"title\", \"subtitle\"?, \"bullets\"? } }\n- \"image\": { \"type\": \"markdown\", \"markdown\": \"...\" }\n- \"image\": { \"type\": \"chart\", \"title\": \"...\", \"chartData\": { \"type\": \"bar\"|\"line\"|\"pie\"|..., \"data\": { \"labels\": [...], \"datasets\": [...] } } }  ← PREFER for data/numbers/comparisons. chartData is a full Chart.js config: labels/datasets go under \"data\", not at the top level.\n- \"image\": { \"type\": \"mermaid\", \"title\": \"...\", \"code\": { \"kind\": \"text\", \"text\": \"...\" } }  ← PREFER for flows/diagrams/relationships\n- \"image\": { \"type\": \"html_tailwind\", \"html\": \"...\", \"script\"?: \"...\" }  ← PREFER for rich layouts, animations, custom visuals\n\nIMPORTANT: \"imagePrompt\" and \"moviePrompt\" are plain string fields on the beat, NOT nested under \"image\".`,\n  parameters: {\n    type: \"object\",\n    properties: {\n      script: {\n        type: \"object\",\n        description:\n          \"Complete MulmoScript JSON for a NEW presentation. Must include $mulmocast, speechParams, imageParams, movieParams, and beats array. Always populate the top-level 'description' field with a concise 1–2 sentence summary of the presentation. Do NOT pass alongside `filePath`.\",\n        additionalProperties: true,\n      },\n      filename: {\n        type: \"string\",\n        description:\n          \"Optional filename without extension. Defaults to a slug of the script title. Only meaningful with `script`; ignored when `filePath` is given.\",\n      },\n      filePath: {\n        type: \"string\",\n        description:\n          \"Path of an EXISTING MulmoScript JSON file, as returned by a previous call (e.g. 'stories/my-story-1700000000000.json'). Resolved against the workspace's `artifacts/` directory, not the workspace root ('artifacts/stories/…' is also accepted). Use this to re-display a script previously saved in this workspace, instead of resending the full JSON. Do NOT pass alongside `script`.\",\n      },\n      autoGenerateMovie: {\n        type: \"boolean\",\n        description:\n          \"When true, the server starts movie generation in the background after save/load. The user does NOT need to open the canvas — progress streams via the existing session channel. Default false. Only set true when the user has explicitly asked for the movie; generation is expensive.\",\n      },\n    },\n    required: [],\n  },\n};\n","// Pure path helpers for MulmoScript story artifacts. No Node built-ins so the\n// package stays bundler-agnostic (chart/html precedent); all filesystem access\n// happens through the host's generic `files.artifacts` FileOps.\n//\n// Path model: the stories directory lives at `<workspace>/artifacts/stories`\n// and the FileOps scope root is `<workspace>/artifacts`, so the\n// FileOps-relative path and the historical `stories/<name>.json` wire form\n// (which every mulmoScript endpoint keys on) are the SAME string. Helpers\n// below therefore return one path used for both purposes.\n\nconst STORIES_DIR = \"stories\";\nconst ARTIFACTS_DIR = \"artifacts\";\nconst MAX_SLUG_LEN = 120;\n\n/** Lowercase-hyphen slug, capped at MAX_SLUG_LEN, with leading/trailing\n *  hyphens stripped. Falls back to `fallback` for empty/undefined/non-ASCII\n *  input. Mirrors html-plugin's in-package slugify — deliberately simpler\n *  than the host's hash-fallback variant; the timestamp suffix appended by\n *  `storyFilePath` keeps these throwaway filenames collision-free. */\nexport function slugify(title: string | undefined, fallback = \"story\"): string {\n  if (!title) return fallback;\n  const collapsed = title\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, \"-\")\n    .slice(0, MAX_SLUG_LEN);\n  let start = 0;\n  let end = collapsed.length;\n  while (start < end && collapsed[start] === \"-\") start += 1;\n  while (end > start && collapsed[end - 1] === \"-\") end -= 1;\n  return collapsed.slice(start, end) || fallback;\n}\n\n/** Build a fresh, collision-safe story path for a new script —\n *  `stories/<slug>-<epoch-ms>.json`, valid as both the FileOps-relative\n *  write path and the wire `filePath`. */\nexport function storyFilePath(slugSource: string, now: Date = new Date()): string {\n  return `${STORIES_DIR}/${slugify(slugSource)}-${now.getTime()}.json`;\n}\n\n/**\n * Normalize a caller-supplied wire path to the canonical\n * `stories/<rel>` form, or null when it can't be trusted. Accepts the\n * canonical `stories/foo.json` convention, bare `foo.json` (the host route\n * historically allowed either), and the workspace-relative spelling\n * `artifacts/stories/foo.json` — the tool description called `filePath`\n * \"workspace-relative\" for a long time, so agents legitimately send it.\n * A leading `artifacts` segment is dropped only when `stories` follows;\n * a bare `artifacts/foo.json` keeps its historical meaning (a file named\n * `artifacts/foo.json` under the stories dir). Rejects absolute paths,\n * backslashes, and any empty / `.` / `..` segment — the lexical guard\n * before every `files.artifacts` read/write (FileOps re-checks\n * containment as defence-in-depth).\n */\nexport function normalizeStoryPath(filePath: string): string | null {\n  if (filePath.length === 0 || filePath.includes(\"\\\\\")) return null;\n  // Absolute POSIX path or Windows drive prefix.\n  if (filePath.startsWith(\"/\") || /^[A-Za-z]:/.test(filePath)) return null;\n  const segments = filePath.split(\"/\");\n  if (segments.some((seg) => seg === \"\" || seg === \".\" || seg === \"..\")) return null;\n  const trimmed = segments[0] === ARTIFACTS_DIR && segments[1] === STORIES_DIR ? segments.slice(1) : segments;\n  const rest = trimmed[0] === STORIES_DIR ? trimmed.slice(1) : trimmed;\n  if (rest.length === 0) return null;\n  return [STORIES_DIR, ...rest].join(\"/\");\n}\n","// Body validators for the mulmoScript update endpoints, moved verbatim from\n// the host's `server/api/routes/mulmoScriptValidate.ts` so MulmoClaude and\n// MulmoTerminal share one definition of a \"valid script\" / \"valid beat\".\n//\n// The `@mulmocast/types` package exports zod schemas that mirror the\n// canonical MulmoScript / MulmoBeat shapes. The same schemas back client-side\n// edit-time validation in the presentMulmoScript View.\n\nimport { mulmoBeatSchema, mulmoScriptSchema } from \"@mulmocast/types\";\n\nexport type ValidationResult<T> = { ok: true; value: T } | { ok: false; error: string };\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction formatZodIssues(\n  // Zod's `$ZodIssue.path` is `PropertyKey[]` (includes `symbol`).\n  // Accept the wider type so callers can pass `safeParse().error.issues`\n  // directly; stringify any non-string/number segments at format time.\n  issues: readonly { message: string; path: readonly PropertyKey[] }[],\n): string {\n  if (issues.length === 0) return \"invalid shape\";\n  const head = issues\n    .slice(0, 3)\n    .map((i) => {\n      const pathStr = i.path.length > 0 ? i.path.map((seg) => String(seg)).join(\".\") : \"<root>\";\n      return `${pathStr}: ${i.message}`;\n    })\n    .join(\"; \");\n  return issues.length > 3 ? `${head} (+${issues.length - 3} more)` : head;\n}\n\n/**\n * Validate the `update-script` request body. Returns the parsed,\n * schema-conformant script on success, or a human-readable error\n * suitable for sending back as a 400 response.\n */\nexport function validateUpdateScriptBody(body: unknown): ValidationResult<{\n  filePath: string;\n  script: unknown;\n}> {\n  if (!isRecord(body)) {\n    return { ok: false, error: \"body must be an object\" };\n  }\n  if (typeof body.filePath !== \"string\" || body.filePath === \"\") {\n    return { ok: false, error: \"filePath must be a non-empty string\" };\n  }\n  if (body.script === undefined) {\n    return { ok: false, error: \"script is required\" };\n  }\n  const parsed = mulmoScriptSchema.safeParse(body.script);\n  if (!parsed.success) {\n    return {\n      ok: false,\n      error: `invalid script: ${formatZodIssues(parsed.error.issues)}`,\n    };\n  }\n  return {\n    ok: true,\n    value: { filePath: body.filePath as string, script: parsed.data },\n  };\n}\n\n/**\n * Validate the `update-beat` request body. `beatIndex` is allowed\n * to be any non-negative integer; the handler still bounds-checks\n * against the actual script length after reading the file.\n */\nexport function validateUpdateBeatBody(body: unknown): ValidationResult<{\n  filePath: string;\n  beatIndex: number;\n  beat: unknown;\n}> {\n  if (!isRecord(body)) {\n    return { ok: false, error: \"body must be an object\" };\n  }\n  if (typeof body.filePath !== \"string\" || body.filePath === \"\") {\n    return { ok: false, error: \"filePath must be a non-empty string\" };\n  }\n  if (typeof body.beatIndex !== \"number\" || !Number.isInteger(body.beatIndex) || body.beatIndex < 0) {\n    return { ok: false, error: \"beatIndex must be a non-negative integer\" };\n  }\n  if (body.beat === undefined) {\n    return { ok: false, error: \"beat is required\" };\n  }\n  const parsed = mulmoBeatSchema.safeParse(body.beat);\n  if (!parsed.success) {\n    return {\n      ok: false,\n      error: `invalid beat: ${formatZodIssues(parsed.error.issues)}`,\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      filePath: body.filePath as string,\n      beatIndex: body.beatIndex as number,\n      beat: parsed.data,\n    },\n  };\n}\n","import type { ToolPluginCore, ToolResult } from \"gui-chat-protocol\";\nimport { mulmoScriptSchema } from \"@mulmocast/types\";\nimport { TOOL_DEFINITION } from \"./definition\";\nimport { normalizeStoryPath, storyFilePath } from \"./paths\";\nimport { validateUpdateBeatBody, validateUpdateScriptBody } from \"./validate\";\nimport type { MulmoScriptData, MulmoScriptExecuteContext, SaveMulmoScriptArgs } from \"./types\";\n\n/** Failure half of every outcome below. `code` preserves the hosts'\n *  HTTP contract (bad_request → 400, not_found → 404) without the package\n *  knowing anything about HTTP. */\nexport interface MulmoScriptFailure {\n  ok: false;\n  code: \"bad_request\" | \"not_found\";\n  error: string;\n}\n\nexport type SaveMulmoScriptOutcome = ({ ok: true; message: string } & MulmoScriptData) | MulmoScriptFailure;\n\nexport type UpdateMulmoScriptOutcome = { ok: true } | MulmoScriptFailure;\n\nfunction badRequest(error: string): MulmoScriptFailure {\n  return { ok: false, code: \"bad_request\", error };\n}\n\nfunction notFound(error: string): MulmoScriptFailure {\n  return { ok: false, code: \"not_found\", error };\n}\n\nfunction errorText(err: unknown): string {\n  return err instanceof Error ? err.message : String(err);\n}\n\nfunction stringifyScript(script: unknown): string {\n  // 2-space indent matches the hosts' writeJsonAtomic convention so a\n  // package-written script diffs cleanly against host-written ones.\n  return JSON.stringify(script, null, 2);\n}\n\n/** Persist a new, schema-validated script under a fresh `stories/…` path. */\nasync function saveNewScript(context: MulmoScriptExecuteContext, script: unknown, filename: string | undefined, now: Date): Promise<SaveMulmoScriptOutcome> {\n  const validation = mulmoScriptSchema.safeParse(script);\n  if (!validation.success) {\n    return badRequest(\"script is not a valid MulmoScript\");\n  }\n  const validatedScript = validation.data;\n  // slugify drops `/`, `\\`, and `..`, so a hostile `filename` like\n  // \"../../etc/passwd\" can never escape the stories dir — defense in\n  // depth on top of FileOps' own containment check.\n  const slugSource = filename ? filename.replace(/\\.json$/i, \"\") : validatedScript.title || \"untitled\";\n  const filePath = storyFilePath(slugSource, now);\n  await context.files.artifacts.write(filePath, stringifyScript(validatedScript));\n  return { ok: true, script: validatedScript, filePath, message: `Saved MulmoScript to ${filePath}` };\n}\n\n/** Re-open an existing script: containment guard, existence, JSON parse,\n *  schema validation — same acceptance rules as the save path so a script\n *  this package saved can never be one it later refuses to load. */\nasync function loadExistingScript(context: MulmoScriptExecuteContext, filePath: string): Promise<SaveMulmoScriptOutcome> {\n  if (!filePath.toLowerCase().endsWith(\".json\")) {\n    return badRequest(\"filePath must point to a .json file\");\n  }\n  const storyPath = normalizeStoryPath(filePath);\n  if (!storyPath) {\n    return badRequest(\"Invalid filePath\");\n  }\n  if (!(await context.files.artifacts.exists(storyPath))) {\n    return notFound(`File not found: ${filePath}`);\n  }\n  const raw = await context.files.artifacts.read(storyPath);\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch (err) {\n    return badRequest(`Invalid JSON: ${errorText(err)}`);\n  }\n  const validation = mulmoScriptSchema.safeParse(parsed);\n  if (!validation.success) {\n    return badRequest(\"File is not a valid MulmoScript\");\n  }\n  return { ok: true, script: validation.data, filePath: storyPath, message: `Loaded MulmoScript from ${storyPath}` };\n}\n\n/**\n * Unified save-or-reopen for the presentMulmoScript tool call. `script`\n * (create new) and `filePath` (existing) are mutually exclusive. Never\n * throws on bad input — validation failures come back as discriminated\n * failures so host routes stay thin adapters. `autoGenerateMovie` is NOT\n * handled here: movie generation needs host backends (mulmocast/ffmpeg),\n * so hosts that support it trigger it from the returned `filePath`.\n */\nexport async function executeMulmoScriptSave(\n  context: MulmoScriptExecuteContext,\n  args: SaveMulmoScriptArgs,\n  now: Date = new Date(),\n): Promise<SaveMulmoScriptOutcome> {\n  const { script, filename, filePath } = args ?? {};\n  const hasScript = script !== undefined && script !== null;\n  const hasFilePath = typeof filePath === \"string\" && filePath !== \"\";\n  if (hasScript === hasFilePath) {\n    return badRequest(\n      hasScript ? \"Provide either `script` or `filePath`, not both.\" : \"Provide either `script` (new presentation) or `filePath` (existing presentation).\",\n    );\n  }\n  return hasFilePath\n    ? loadExistingScript(context, filePath as string)\n    : saveNewScript(context, script, typeof filename === \"string\" ? filename : undefined, now);\n}\n\n/** Resolve + guard a wire path for the update endpoints. */\nasync function resolveExistingStory(context: MulmoScriptExecuteContext, filePath: string): Promise<{ storyPath: string } | MulmoScriptFailure> {\n  const storyPath = normalizeStoryPath(filePath);\n  if (!storyPath) return badRequest(\"Invalid filePath\");\n  if (!(await context.files.artifacts.exists(storyPath))) {\n    return notFound(`File not found: ${filePath}`);\n  }\n  return { storyPath };\n}\n\n/** Overwrite one beat of an existing script (the View's per-beat source\n *  editor). Validates the body shape + beat schema, bounds-checks the index\n *  against the script on disk, and writes the whole file back. */\nexport async function executeUpdateBeat(context: MulmoScriptExecuteContext, body: unknown): Promise<UpdateMulmoScriptOutcome> {\n  const validation = validateUpdateBeatBody(body);\n  if (!validation.ok) return badRequest(validation.error);\n  const { filePath, beatIndex, beat } = validation.value;\n\n  const resolved = await resolveExistingStory(context, filePath);\n  if (\"ok\" in resolved) return resolved;\n\n  let script: { beats?: unknown[] };\n  try {\n    script = JSON.parse(await context.files.artifacts.read(resolved.storyPath));\n  } catch (err) {\n    return badRequest(`Invalid JSON: ${errorText(err)}`);\n  }\n  if (!Array.isArray(script.beats) || beatIndex >= script.beats.length) {\n    return badRequest(\"Invalid beatIndex\");\n  }\n  script.beats[beatIndex] = beat;\n  await context.files.artifacts.write(resolved.storyPath, stringifyScript(script));\n  return { ok: true };\n}\n\n/** Overwrite the whole script (the View's full-source editor / deck-editor\n *  auto-save). The body's `script` is schema-validated by\n *  `validateUpdateScriptBody` before the write. */\nexport async function executeUpdateScript(context: MulmoScriptExecuteContext, body: unknown): Promise<UpdateMulmoScriptOutcome> {\n  const validation = validateUpdateScriptBody(body);\n  if (!validation.ok) return badRequest(validation.error);\n  const { filePath, script } = validation.value;\n\n  const resolved = await resolveExistingStory(context, filePath);\n  if (\"ok\" in resolved) return resolved;\n\n  await context.files.artifacts.write(resolved.storyPath, stringifyScript(script));\n  return { ok: true };\n}\n\n/** ToolResult-shaped wrapper over `executeMulmoScriptSave` for runtime hosts\n *  (e.g. MulmoTerminal's package loader), where the tool call resolves to a\n *  ToolResult rather than an HTTP response. Failures are narrate-only\n *  (message, no data) so the agent can self-correct. */\nexport async function executeMulmoScript(context: MulmoScriptExecuteContext, args: SaveMulmoScriptArgs): Promise<ToolResult<MulmoScriptData>> {\n  const outcome = await executeMulmoScriptSave(context, args);\n  if (!outcome.ok) {\n    return {\n      message: outcome.error,\n      instructions: \"Acknowledge the error and retry with a valid `script` (new) or an existing `filePath`.\",\n    };\n  }\n  // The tool schema advertises `autoGenerateMovie`, but movie generation\n  // needs host backends (mulmocast/ffmpeg) this generic execute path\n  // doesn't have — MulmoClaude honours the flag in its own save route.\n  // Say so in the result rather than silently dropping the option, so the\n  // agent doesn't tell the user a movie is on its way.\n  const ignoredMovieNote = args.autoGenerateMovie === true ? \" (autoGenerateMovie is not supported by this host and was ignored)\" : \"\";\n  return {\n    message: `${outcome.message}${ignoredMovieNote}`,\n    data: { script: outcome.script, filePath: outcome.filePath },\n    instructions: \"Display the storyboard to the user.\",\n  };\n}\n\n/** Non-Vue plugin core for runtime hosts that register the package directly.\n *  MulmoClaude consumes only TOOL_DEFINITION + the execute functions in its\n *  own routes, so it doesn't use this. */\nexport const pluginCore: ToolPluginCore<MulmoScriptData, MulmoScriptData, SaveMulmoScriptArgs> = {\n  toolDefinition: TOOL_DEFINITION,\n  execute: executeMulmoScript as unknown as ToolPluginCore<MulmoScriptData, MulmoScriptData, SaveMulmoScriptArgs>[\"execute\"],\n  generatingMessage: \"Generating MulmoScript storyboard…\",\n  isEnabled: () => true,\n};\n"],"mappings":";;AAEA,IAAa,YAAY;AAMzB,IAAa,kBAAkC;CAC7C,MAAM;CACN,MAAM;CACN,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkFb,YAAY;EACV,MAAM;EACN,YAAY;GACV,QAAQ;IACN,MAAM;IACN,aACE;IACF,sBAAsB;GACxB;GACA,UAAU;IACR,MAAM;IACN,aACE;GACJ;GACA,UAAU;IACR,MAAM;IACN,aACE;GACJ;GACA,mBAAmB;IACjB,MAAM;IACN,aACE;GACJ;EACF;EACA,UAAU,CAAC;CACb;AACF;;;AC9GA,IAAM,cAAc;AACpB,IAAM,gBAAgB;AACtB,IAAM,eAAe;;;;;;AAOrB,SAAgB,QAAQ,OAA2B,WAAW,SAAiB;CAC7E,IAAI,CAAC,OAAO,OAAO;CACnB,MAAM,YAAY,MACf,YAAY,CAAC,CACb,QAAQ,eAAe,GAAG,CAAC,CAC3B,MAAM,GAAG,YAAY;CACxB,IAAI,QAAQ;CACZ,IAAI,MAAM,UAAU;CACpB,OAAO,QAAQ,OAAO,UAAU,WAAW,KAAK,SAAS;CACzD,OAAO,MAAM,SAAS,UAAU,MAAM,OAAO,KAAK,OAAO;CACzD,OAAO,UAAU,MAAM,OAAO,GAAG,KAAK;AACxC;;;;AAKA,SAAgB,cAAc,YAAoB,sBAAY,IAAI,KAAK,GAAW;CAChF,OAAO,GAAG,YAAY,GAAG,QAAQ,UAAU,EAAE,GAAG,IAAI,QAAQ,EAAE;AAChE;;;;;;;;;;;;;;;AAgBA,SAAgB,mBAAmB,UAAiC;CAClE,IAAI,SAAS,WAAW,KAAK,SAAS,SAAS,IAAI,GAAG,OAAO;CAE7D,IAAI,SAAS,WAAW,GAAG,KAAK,aAAa,KAAK,QAAQ,GAAG,OAAO;CACpE,MAAM,WAAW,SAAS,MAAM,GAAG;CACnC,IAAI,SAAS,MAAM,QAAQ,QAAQ,MAAM,QAAQ,OAAO,QAAQ,IAAI,GAAG,OAAO;CAC9E,MAAM,UAAU,SAAS,OAAO,iBAAiB,SAAS,OAAO,cAAc,SAAS,MAAM,CAAC,IAAI;CACnG,MAAM,OAAO,QAAQ,OAAO,cAAc,QAAQ,MAAM,CAAC,IAAI;CAC7D,IAAI,KAAK,WAAW,GAAG,OAAO;CAC9B,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG;AACxC;;;ACnDA,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,gBAIP,QACQ;CACR,IAAI,OAAO,WAAW,GAAG,OAAO;CAChC,MAAM,OAAO,OACV,MAAM,GAAG,CAAC,CAAC,CACX,KAAK,MAAM;EAEV,OAAO,GADS,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,KAAK,QAAQ,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,SAC/D,IAAI,EAAE;CAC1B,CAAC,CAAC,CACD,KAAK,IAAI;CACZ,OAAO,OAAO,SAAS,IAAI,GAAG,KAAK,KAAK,OAAO,SAAS,EAAE,UAAU;AACtE;;;;;;AAOA,SAAgB,yBAAyB,MAGtC;CACD,IAAI,CAAC,SAAS,IAAI,GAChB,OAAO;EAAE,IAAI;EAAO,OAAO;CAAyB;CAEtD,IAAI,OAAO,KAAK,aAAa,YAAY,KAAK,aAAa,IACzD,OAAO;EAAE,IAAI;EAAO,OAAO;CAAsC;CAEnE,IAAI,KAAK,WAAW,KAAA,GAClB,OAAO;EAAE,IAAI;EAAO,OAAO;CAAqB;CAElD,MAAM,SAAS,iBAAA,kBAAkB,UAAU,KAAK,MAAM;CACtD,IAAI,CAAC,OAAO,SACV,OAAO;EACL,IAAI;EACJ,OAAO,mBAAmB,gBAAgB,OAAO,MAAM,MAAM;CAC/D;CAEF,OAAO;EACL,IAAI;EACJ,OAAO;GAAE,UAAU,KAAK;GAAoB,QAAQ,OAAO;EAAK;CAClE;AACF;;;;;;AAOA,SAAgB,uBAAuB,MAIpC;CACD,IAAI,CAAC,SAAS,IAAI,GAChB,OAAO;EAAE,IAAI;EAAO,OAAO;CAAyB;CAEtD,IAAI,OAAO,KAAK,aAAa,YAAY,KAAK,aAAa,IACzD,OAAO;EAAE,IAAI;EAAO,OAAO;CAAsC;CAEnE,IAAI,OAAO,KAAK,cAAc,YAAY,CAAC,OAAO,UAAU,KAAK,SAAS,KAAK,KAAK,YAAY,GAC9F,OAAO;EAAE,IAAI;EAAO,OAAO;CAA2C;CAExE,IAAI,KAAK,SAAS,KAAA,GAChB,OAAO;EAAE,IAAI;EAAO,OAAO;CAAmB;CAEhD,MAAM,SAAS,iBAAA,gBAAgB,UAAU,KAAK,IAAI;CAClD,IAAI,CAAC,OAAO,SACV,OAAO;EACL,IAAI;EACJ,OAAO,iBAAiB,gBAAgB,OAAO,MAAM,MAAM;CAC7D;CAEF,OAAO;EACL,IAAI;EACJ,OAAO;GACL,UAAU,KAAK;GACf,WAAW,KAAK;GAChB,MAAM,OAAO;EACf;CACF;AACF;;;ACjFA,SAAS,WAAW,OAAmC;CACrD,OAAO;EAAE,IAAI;EAAO,MAAM;EAAe;CAAM;AACjD;AAEA,SAAS,SAAS,OAAmC;CACnD,OAAO;EAAE,IAAI;EAAO,MAAM;EAAa;CAAM;AAC/C;AAEA,SAAS,UAAU,KAAsB;CACvC,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACxD;AAEA,SAAS,gBAAgB,QAAyB;CAGhD,OAAO,KAAK,UAAU,QAAQ,MAAM,CAAC;AACvC;;AAGA,eAAe,cAAc,SAAoC,QAAiB,UAA8B,KAA4C;CAC1J,MAAM,aAAa,iBAAA,kBAAkB,UAAU,MAAM;CACrD,IAAI,CAAC,WAAW,SACd,OAAO,WAAW,mCAAmC;CAEvD,MAAM,kBAAkB,WAAW;CAKnC,MAAM,WAAW,cADE,WAAW,SAAS,QAAQ,YAAY,EAAE,IAAI,gBAAgB,SAAS,YAC/C,GAAG;CAC9C,MAAM,QAAQ,MAAM,UAAU,MAAM,UAAU,gBAAgB,eAAe,CAAC;CAC9E,OAAO;EAAE,IAAI;EAAM,QAAQ;EAAiB;EAAU,SAAS,wBAAwB;CAAW;AACpG;;;;AAKA,eAAe,mBAAmB,SAAoC,UAAmD;CACvH,IAAI,CAAC,SAAS,YAAY,CAAC,CAAC,SAAS,OAAO,GAC1C,OAAO,WAAW,qCAAqC;CAEzD,MAAM,YAAY,mBAAmB,QAAQ;CAC7C,IAAI,CAAC,WACH,OAAO,WAAW,kBAAkB;CAEtC,IAAI,CAAE,MAAM,QAAQ,MAAM,UAAU,OAAO,SAAS,GAClD,OAAO,SAAS,mBAAmB,UAAU;CAE/C,MAAM,MAAM,MAAM,QAAQ,MAAM,UAAU,KAAK,SAAS;CACxD,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,GAAG;CACzB,SAAS,KAAK;EACZ,OAAO,WAAW,iBAAiB,UAAU,GAAG,GAAG;CACrD;CACA,MAAM,aAAa,iBAAA,kBAAkB,UAAU,MAAM;CACrD,IAAI,CAAC,WAAW,SACd,OAAO,WAAW,iCAAiC;CAErD,OAAO;EAAE,IAAI;EAAM,QAAQ,WAAW;EAAM,UAAU;EAAW,SAAS,2BAA2B;CAAY;AACnH;;;;;;;;;AAUA,eAAsB,uBACpB,SACA,MACA,sBAAY,IAAI,KAAK,GACY;CACjC,MAAM,EAAE,QAAQ,UAAU,aAAa,QAAQ,CAAC;CAChD,MAAM,YAAY,WAAW,KAAA,KAAa,WAAW;CACrD,MAAM,cAAc,OAAO,aAAa,YAAY,aAAa;CACjE,IAAI,cAAc,aAChB,OAAO,WACL,YAAY,qDAAqD,mFACnE;CAEF,OAAO,cACH,mBAAmB,SAAS,QAAkB,IAC9C,cAAc,SAAS,QAAQ,OAAO,aAAa,WAAW,WAAW,KAAA,GAAW,GAAG;AAC7F;;AAGA,eAAe,qBAAqB,SAAoC,UAAuE;CAC7I,MAAM,YAAY,mBAAmB,QAAQ;CAC7C,IAAI,CAAC,WAAW,OAAO,WAAW,kBAAkB;CACpD,IAAI,CAAE,MAAM,QAAQ,MAAM,UAAU,OAAO,SAAS,GAClD,OAAO,SAAS,mBAAmB,UAAU;CAE/C,OAAO,EAAE,UAAU;AACrB;;;;AAKA,eAAsB,kBAAkB,SAAoC,MAAkD;CAC5H,MAAM,aAAa,uBAAuB,IAAI;CAC9C,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,WAAW,KAAK;CACtD,MAAM,EAAE,UAAU,WAAW,SAAS,WAAW;CAEjD,MAAM,WAAW,MAAM,qBAAqB,SAAS,QAAQ;CAC7D,IAAI,QAAQ,UAAU,OAAO;CAE7B,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,MAAM,QAAQ,MAAM,UAAU,KAAK,SAAS,SAAS,CAAC;CAC5E,SAAS,KAAK;EACZ,OAAO,WAAW,iBAAiB,UAAU,GAAG,GAAG;CACrD;CACA,IAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,KAAK,aAAa,OAAO,MAAM,QAC5D,OAAO,WAAW,mBAAmB;CAEvC,OAAO,MAAM,aAAa;CAC1B,MAAM,QAAQ,MAAM,UAAU,MAAM,SAAS,WAAW,gBAAgB,MAAM,CAAC;CAC/E,OAAO,EAAE,IAAI,KAAK;AACpB;;;;AAKA,eAAsB,oBAAoB,SAAoC,MAAkD;CAC9H,MAAM,aAAa,yBAAyB,IAAI;CAChD,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,WAAW,KAAK;CACtD,MAAM,EAAE,UAAU,WAAW,WAAW;CAExC,MAAM,WAAW,MAAM,qBAAqB,SAAS,QAAQ;CAC7D,IAAI,QAAQ,UAAU,OAAO;CAE7B,MAAM,QAAQ,MAAM,UAAU,MAAM,SAAS,WAAW,gBAAgB,MAAM,CAAC;CAC/E,OAAO,EAAE,IAAI,KAAK;AACpB;;;;;AAMA,eAAsB,mBAAmB,SAAoC,MAAiE;CAC5I,MAAM,UAAU,MAAM,uBAAuB,SAAS,IAAI;CAC1D,IAAI,CAAC,QAAQ,IACX,OAAO;EACL,SAAS,QAAQ;EACjB,cAAc;CAChB;CAOF,MAAM,mBAAmB,KAAK,sBAAsB,OAAO,uEAAuE;CAClI,OAAO;EACL,SAAS,GAAG,QAAQ,UAAU;EAC9B,MAAM;GAAE,QAAQ,QAAQ;GAAQ,UAAU,QAAQ;EAAS;EAC3D,cAAc;CAChB;AACF;;;;AAKA,IAAa,aAAoF;CAC/F,gBAAgB;CAChB,SAAS;CACT,mBAAmB;CACnB,iBAAiB;AACnB"}

package/dist/server/ops.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ops.d.ts","sourceRoot":"","sources":["../../src/server/ops.ts"],"names":[],"mappings":"AA0CA,OAAO,KAAK,EAAE,SAAS,EAAyB,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC7F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAGnE,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,wBAAwB,EAExB,SAAS,EACT,QAAQ,EACR,mBAAmB,EACpB,MAAM,SAAS,CAAC;AAEjB,KAAK,cAAc,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;AAKzD,eAAO,MAAM,QAAQ,EAAG,OAAgB,CAAC;AACzC,eAAO,MAAM,QAAQ,EAAG,IAAa,CAAC;AAmBtC,wBAAsB,YAAY,CAAC,gBAAgB,EAAE,MAAM,EAAE,KAAK,UAAQ,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,GAAG,SAAS,CAAC,CAa1H;AAGD,MAAM,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;AAEjF,MAAM,WAAW,cAAc;IAC7B,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACpF,YAAY,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;CACjG;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;CACtC;AAMD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxE;AAQD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,wBAAwB;;+BAcxC,MAAM,KAAG,MAAM;6BAiCjB,MAAM,KAAG;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS;mCA8CjD,OAAO,KAAG,SAAS,GAAG,IAAI;uBAWxC,SAAS,GAAG,IAAI;iBAwDd,CAAC,YACf,MAAM,WACP,iBAAiB,CAAC,CAAC,CAAC,WACpB,CAAC,GAAG,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,YAAY,CAAA;KAAE,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SACrF,cAAc,KACnB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;uCAvCmB,MAAM,GAAG,SAAS,QAAQ,cAAc,YAAY,MAAM,OAAO,MAAM,YAAY,OAAO,UAAU,MAAM,KAAG,IAAI;mCAsBrH,MAAM,KAAG,0BAA0B,EAAE;4BA8CtC,MAAM,aAAa,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;4BAWvE,MAAM,aAAa,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;4BAkBvE,MAAM,aAAa,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;iCAStE,MAAM,OAAO,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;8BAmBpE,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;4BAQ1D,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;yBASzD,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,WAAW,CAAC,CAAC,GAAG,cAAc,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;gCA4BzG,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,WAAW,CAAC,CAAC,GAAG,cAAc,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;8BAqClH,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,KAAK,CAAC,CAAC,GAAG,cAAc,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;kCAuCtG,MAAM,aAAa,MAAM,aAAa,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;uCAW9E,MAAM,OAAO,MAAM,aAAa,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;;;2CA6BzE,MAAM,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,KAAG,OAAO,CAAC,qBAAqB,CAAC;gCA0KxG,YAAY,mBAAmB,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,KAAG,OAAO,CAAC,mBAAmB,CAAC;gCAnHzF,MAAM,iBAAiB,MAAM,GAAG,SAAS,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;8BA8ItF,MAAM,iBAAiB,MAAM,GAAG,SAAS,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;mDA7GnE,MAAM,gBAAgB,MAAM,iBAAiB,MAAM,GAAG,SAAS,KAAG,IAAI;EA8K7H;AAED,MAAM,MAAM,oBAAoB,GAAG,UAAU,CAAC,OAAO,0BAA0B,CAAC,CAAC"}
+{"version":3,"file":"ops.d.ts","sourceRoot":"","sources":["../../src/server/ops.ts"],"names":[],"mappings":"AA0CA,OAAO,KAAK,EAAE,SAAS,EAAyB,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC7F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAInE,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,wBAAwB,EAExB,SAAS,EACT,QAAQ,EACR,mBAAmB,EACpB,MAAM,SAAS,CAAC;AAEjB,KAAK,cAAc,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;AAKzD,eAAO,MAAM,QAAQ,EAAG,OAAgB,CAAC;AACzC,eAAO,MAAM,QAAQ,EAAG,IAAa,CAAC;AAmBtC,wBAAsB,YAAY,CAAC,gBAAgB,EAAE,MAAM,EAAE,KAAK,UAAQ,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,GAAG,SAAS,CAAC,CAa1H;AAGD,MAAM,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;AAEjF,MAAM,WAAW,cAAc;IAC7B,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACpF,YAAY,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;CACjG;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;CACtC;AAMD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxE;AAQD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,wBAAwB;;+BAcxC,MAAM,KAAG,MAAM;6BAiCjB,MAAM,KAAG;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS;mCA2DjD,OAAO,KAAG,SAAS,GAAG,IAAI;uBAWxC,SAAS,GAAG,IAAI;iBAsEd,CAAC,YACf,MAAM,WACP,iBAAiB,CAAC,CAAC,CAAC,WACpB,CAAC,GAAG,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,YAAY,CAAA;KAAE,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SACrF,cAAc,KACnB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;uCA3CmB,MAAM,GAAG,SAAS,QAAQ,cAAc,YAAY,MAAM,OAAO,MAAM,YAAY,OAAO,UAAU,MAAM,KAAG,IAAI;mCAuBrH,MAAM,KAAG,0BAA0B,EAAE;4BAiDtC,MAAM,aAAa,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;4BAWvE,MAAM,aAAa,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;4BAkBvE,MAAM,aAAa,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;iCAStE,MAAM,OAAO,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;8BAmBpE,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;4BAQ1D,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;yBASzD,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,WAAW,CAAC,CAAC,GAAG,cAAc,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;gCA4BzG,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,WAAW,CAAC,CAAC,GAAG,cAAc,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;8BAqClH,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,KAAK,CAAC,CAAC,GAAG,cAAc,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;kCAuCtG,MAAM,aAAa,MAAM,aAAa,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;uCAW9E,MAAM,OAAO,MAAM,aAAa,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;;;2CA6BzE,MAAM,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,KAAG,OAAO,CAAC,qBAAqB,CAAC;gCA0KxG,YAAY,mBAAmB,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,KAAG,OAAO,CAAC,mBAAmB,CAAC;gCAnHzF,MAAM,iBAAiB,MAAM,GAAG,SAAS,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;8BA8ItF,MAAM,iBAAiB,MAAM,GAAG,SAAS,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;mDA7GnE,MAAM,gBAAgB,MAAM,iBAAiB,MAAM,GAAG,SAAS,KAAG,IAAI;EA8K7H;AAED,MAAM,MAAM,oBAAoB,GAAG,UAAU,CAAC,OAAO,0BAA0B,CAAC,CAAC"}

package/dist/server.cjs

@@ -21,7 +21,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_plugin = require("./plugin-CtKUt8DX.cjs");
+const require_plugin = require("./plugin-Bi986Wga.cjs");
 const require_contract = require("./contract-DxKVCRQk.cjs");
 let fs = require("fs");
 let path = require("path");
@@ -233,7 +233,7 @@ function createMulmoScriptServerOps(backend) {
 	* Resolve and validate a stories wire path to its absolute realpath.
 	*
 	* Uses the realpath-based resolveWithinRoot helper to defeat
-	* symlink-based escapes. Callers pass workspace-relative paths like
+	* symlink-based escapes. Callers pass wire paths like
 	* "stories/foo.json" or "stories/__movies__/bar.mp4". We strip the
 	* leading "stories/" segment and resolve the remainder against the
 	* realpath of the stories directory itself — this works whether
@@ -244,8 +244,11 @@ function createMulmoScriptServerOps(backend) {
 		const storiesReal = ensureStoriesReal();
 		if (!storiesReal) return opServerError("stories directory not available");
 		if (path.default.isAbsolute(filePath)) return opBadRequest("Invalid filePath");
+		const ARTIFACTS_STORIES = "artifacts/stories";
+		const wirePath = filePath === ARTIFACTS_STORIES || filePath.startsWith(`${ARTIFACTS_STORIES}/`) ? filePath.slice(10) : filePath;
 		const STORIES_PREFIX = `stories${path.default.sep}`;
-		const relFromStories = filePath === "stories" ? "" : filePath.startsWith(STORIES_PREFIX) || filePath.startsWith("stories/") ? filePath.slice(8) : filePath;
+		const relFromStories = wirePath === "stories" ? "" : wirePath.startsWith(STORIES_PREFIX) || wirePath.startsWith("stories/") ? wirePath.slice(8) : wirePath;
+		if (relFromStories === "") return opBadRequest("Invalid filePath");
 		const resolved = resolveWithinRoot(storiesReal, relFromStories);
 		if (!resolved) {
 			const candidate = path.default.resolve(storiesReal, relFromStories);
@@ -283,8 +286,18 @@ function createMulmoScriptServerOps(backend) {
 		return null;
 	}
 	const inFlightGenerations = /* @__PURE__ */ new Map();
+	/** Tracker state and events key on the canonical `stories/<rel>` wire
+	*  form: subscribers (the View's pubsub filter, `pendingGenerations`
+	*  callers) match by exact string, so the accepted alias spellings
+	*  (`artifacts/stories/<rel>`, bare `<rel>`) must collapse to the same
+	*  key as the canonical one (Codex P2 on #2139). Untrusted spellings
+	*  pass through unchanged — they never resolve, so they can't collide. */
+	function canonicalWirePath(filePath) {
+		return require_plugin.normalizeStoryPath(filePath) ?? filePath;
+	}
 	function publishGeneration(chatSessionId, kind, filePath, key, finished, error) {
-		const mapKey = generationMapKey(kind, filePath, key);
+		const wirePath = canonicalWirePath(filePath);
+		const mapKey = generationMapKey(kind, wirePath, key);
 		const existing = inFlightGenerations.get(mapKey);
 		if (finished) {
 			if (existing && existing.count > 1) {
@@ -299,14 +312,14 @@ function createMulmoScriptServerOps(backend) {
 			}
 			inFlightGenerations.set(mapKey, {
 				kind,
-				filePath,
+				filePath: wirePath,
 				key,
 				count: 1
 			});
 		}
 		const event = {
 			kind,
-			filePath,
+			filePath: wirePath,
 			key,
 			done: finished,
 			...error ? { error } : {}
@@ -316,9 +329,10 @@ function createMulmoScriptServerOps(backend) {
 	/** Snapshot of generations currently in flight for one script — the
 	*  View's mount-time catch-up, filtered to its wire `filePath`. */
 	function pendingGenerations(filePath) {
-		return [...inFlightGenerations.values()].filter((entry) => entry.filePath === filePath).map(({ kind, key }) => ({
+		const wirePath = canonicalWirePath(filePath);
+		return [...inFlightGenerations.values()].filter((entry) => entry.filePath === wirePath).map(({ kind, key }) => ({
 			kind,
-			filePath,
+			filePath: wirePath,
 			key,
 			done: false
 		}));