@mulmoclaude/mulmoscript-plugin 4.3.0 → 4.5.0

package/dist/plugin-C5JC2lNR.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-C5JC2lNR.cjs","names":["isRecord"],"sources":["../src/core/definition.ts","../../../common/dist/index.js","../src/core/paths.ts","../src/core/validate.ts","../src/core/plugin.ts"],"sourcesContent":["import type { ToolDefinition } from \"gui-chat-protocol\";\n\nexport const TOOL_NAME = \"presentMulmoScript\";\n\n// Single source of truth for the presentMulmoScript tool schema, shared by\n// MulmoClaude (host built-in shim re-exports this) and MulmoTerminal.\n// (Extracted byte-identical from the host definition; evolves here with the\n// package version.)\nexport const TOOL_DEFINITION: ToolDefinition = {\n  type: \"function\",\n  name: TOOL_NAME,\n  description: `Save and present a MulmoScript story or presentation as a visual storyboard in the canvas.\n\nProvide EXACTLY ONE of \\`script\\` or \\`filePath\\`:\n\n1. **Create new** — pass \\`script\\` (full MulmoScript JSON). Server saves it to disk and presents it.\n2. **Re-display existing** — pass \\`filePath\\` (the \\`filePath\\` returned by a previous call, e.g. \"stories/my-story-1700000000000.json\"; it is resolved against the workspace's \\`artifacts/\\` directory, NOT the workspace root). Much cheaper than re-sending the full script. Use whenever the user wants to revisit a presentation that was already created in this workspace.\n3. **Edit one beat** — pass \\`filePath\\` PLUS \\`beatIndex\\` and \\`beat\\`. Replaces that one beat and presents the result. **Use this whenever the user asks to change part of an existing presentation** — re-sending the whole script instead wastes tokens and overwrites anything edited in the canvas meanwhile.\n\nOptional \\`autoGenerateMovie: true\\` kicks off movie generation in the background, so the final video is ready by the time the user opens the canvas. Movie generation is expensive (multiple image + audio API calls + video encoding) — only set this when the user has explicitly asked for the movie. Default \\`false\\`.\n\nProvider rules for new scripts:\n- \\`speechParams.speakers.<name>.provider\\`: \\`\"gemini\"\\` — pairs with Gemini voices like \\`\"Kore\"\\`, \\`\"Aoede\"\\`, \\`\"Puck\"\\`. Do NOT use \\`\"google\"\\` here — that routes to Google Cloud TTS, where Gemini-class voices fail with \"This voice requires a model name to be specified.\" unless an explicit \\`model\\` is set.\n- \\`imageParams.provider\\`: \\`\"google\"\\`\n- \\`movieParams.provider\\`: \\`\"google\"\\`\n- Do NOT add a top-level \\`provider\\` field to \\`speechParams\\` — provider belongs per-speaker only.\n\nRequired structure:\n\n{\n  \"$mulmocast\": { \"version\": \"1.1\" },\n  \"title\": \"The Life of a Star\",\n  \"description\": \"A short educational explainer about stellar evolution\",\n  \"lang\": \"en\",\n  \"speechParams\": {\n    \"speakers\": {\n      \"Presenter\": {\n        \"provider\": \"gemini\",\n        \"voiceId\": \"Kore\",\n        \"displayName\": { \"en\": \"Presenter\" }\n      }\n    }\n  },\n  \"imageParams\": { \"provider\": \"google\", \"model\": \"gemini-3.1-flash-image-preview\" },\n  \"movieParams\": { \"provider\": \"google\", \"model\": \"veo-3.1-generate\" },\n  \"beats\": [\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Narration spoken aloud for this beat.\",\n      \"imagePrompt\": \"Detailed description — AI generates the image\"\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Bullet point beat.\",\n      \"image\": { \"type\": \"textSlide\", \"slide\": { \"title\": \"Slide Title\", \"bullets\": [\"Point one\", \"Point two\"] } }\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Markdown beat.\",\n      \"image\": { \"type\": \"markdown\", \"markdown\": \"## Heading\\\\n\\\\nBody text here.\" }\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Chart beat — use for data, comparisons, trends.\",\n      \"image\": { \"type\": \"chart\", \"title\": \"Chart Title\", \"chartData\": { \"type\": \"bar\", \"data\": { \"labels\": [\"A\", \"B\", \"C\"], \"datasets\": [{ \"label\": \"Series\", \"data\": [10, 20, 30] }] } } }\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Diagram beat — use for flows, architectures, relationships.\",\n      \"image\": { \"type\": \"mermaid\", \"title\": \"Diagram Title\", \"code\": { \"kind\": \"text\", \"text\": \"graph TD\\\\n  A[Start] --> B[Process] --> C[End]\" } }\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Rich interactive beat — use for custom layouts, animations, or anything that benefits from HTML/CSS.\",\n      \"image\": { \"type\": \"html_tailwind\", \"html\": \"<div class=\\\\\"flex items-center justify-center h-full text-4xl font-bold text-blue-600\\\\\">Hello World</div>\" }\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"AI video beat.\",\n      \"moviePrompt\": \"Detailed description — AI generates the video clip\"\n    }\n  ]\n}\n\nBeat visual options (choose one per beat):\n- \"imagePrompt\": \"...\"  → top-level string field — AI generates an image from the prompt\n- \"moviePrompt\": \"...\"  → top-level string field — AI generates a video clip from the prompt\n- \"image\": { \"type\": \"textSlide\", \"slide\": { \"title\", \"subtitle\"?, \"bullets\"? } }\n- \"image\": { \"type\": \"markdown\", \"markdown\": \"...\" }\n- \"image\": { \"type\": \"chart\", \"title\": \"...\", \"chartData\": { \"type\": \"bar\"|\"line\"|\"pie\"|..., \"data\": { \"labels\": [...], \"datasets\": [...] } } }  ← PREFER for data/numbers/comparisons. chartData is a full Chart.js config: labels/datasets go under \"data\", not at the top level.\n- \"image\": { \"type\": \"mermaid\", \"title\": \"...\", \"code\": { \"kind\": \"text\", \"text\": \"...\" } }  ← PREFER for flows/diagrams/relationships\n- \"image\": { \"type\": \"html_tailwind\", \"html\": \"...\", \"script\"?: \"...\" }  ← PREFER for rich layouts, animations, custom visuals\n\nIMPORTANT: \"imagePrompt\" and \"moviePrompt\" are plain string fields on the beat, NOT nested under \"image\".`,\n  parameters: {\n    type: \"object\",\n    properties: {\n      script: {\n        type: \"object\",\n        description:\n          \"Complete MulmoScript JSON for a NEW presentation. Must include $mulmocast, speechParams, imageParams, movieParams, and beats array. Always populate the top-level 'description' field with a concise 1–2 sentence summary of the presentation. Do NOT pass alongside `filePath`.\",\n        additionalProperties: true,\n      },\n      filename: {\n        type: \"string\",\n        description:\n          \"Optional filename without extension. Defaults to a slug of the script title. Only meaningful with `script`; ignored when `filePath` is given.\",\n      },\n      filePath: {\n        type: \"string\",\n        description:\n          \"Path of an EXISTING MulmoScript JSON file, as returned by a previous call (e.g. 'stories/my-story-1700000000000.json'). Resolved against the workspace's `artifacts/` directory, not the workspace root ('artifacts/stories/…' is also accepted). Use this to re-display a script previously saved in this workspace, instead of resending the full JSON. Do NOT pass alongside `script`.\",\n      },\n      beatIndex: {\n        type: \"number\",\n        description: \"0-based index of the beat to replace. Requires `filePath` and `beat`. Omit to re-display the script unchanged.\",\n      },\n      beat: {\n        type: \"object\",\n        description: \"The replacement beat, complete (it overwrites the old one — it is not merged). Requires `filePath` and `beatIndex`.\",\n        additionalProperties: true,\n      },\n      autoGenerateMovie: {\n        type: \"boolean\",\n        description:\n          \"When true, the server starts movie generation in the background after save/load. The user does NOT need to open the canvas — progress streams via the existing session channel. Default false. Only set true when the user has explicitly asked for the movie; generation is expensive.\",\n      },\n    },\n    required: [],\n  },\n};\n","// General-purpose runtime type guards, shared across the MulmoClaude host,\n// bridges, and plugins. This is a leaf package — pure and dependency-free — so\n// any tier can import it without creating an uphill edge.\n//\n// These originated as `server/utils/types.ts` (#504), which centralised 40+\n// hand-written inline `typeof x === \"object\"` checks. They are promoted here so\n// the same guards stop being re-hand-written in every bridge and plugin too.\n/** Narrow `unknown` to a plain object (not null, not array). */\nexport function isRecord(value) {\n    return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n/** Narrow `unknown` to any object (not null, arrays allowed).\n *  Use `isRecord` when you need to access string keys. */\nexport function isObj(value) {\n    return typeof value === \"object\" && value !== null;\n}\n/** Non-empty string after trimming whitespace. */\nexport function isNonEmptyString(value) {\n    return typeof value === \"string\" && value.trim().length > 0;\n}\n/** Record whose values are all strings. */\nexport function isStringRecord(value) {\n    if (!isRecord(value))\n        return false;\n    return Object.values(value).every((val) => typeof val === \"string\");\n}\n/** String array (every element is a string). */\nexport function isStringArray(value) {\n    return Array.isArray(value) && value.every((val) => typeof val === \"string\");\n}\n/** An array of unknowns. Prefer this over a bare `Array.isArray` in typed code:\n *  `Array.isArray(x: unknown)` narrows to `any[]`, silently reintroducing\n *  `any`, whereas this keeps the element type `unknown`. */\nexport function isUnknownArray(value) {\n    return Array.isArray(value);\n}\n/** Error-like object with a `code` property (e.g. Node.js fs errors). */\nexport function isErrorWithCode(value) {\n    return isRecord(value) && typeof value.code === \"string\";\n}\n/** Check that a record has a specific key with a string value. */\nexport function hasStringProp(value, key) {\n    return isRecord(value) && typeof value[key] === \"string\";\n}\n/** Check that a record has a specific key with a number value. */\nexport function hasNumberProp(value, key) {\n    return isRecord(value) && typeof value[key] === \"number\";\n}\n/** Split a comma-separated env value into trimmed, non-empty entries.\n *  `lowercase` folds case for identifiers compared case-insensitively\n *  (JIDs, email addresses, hex pubkeys). Absent/empty input → empty list. */\nexport function parseCsvList(raw, opts) {\n    return (raw ?? \"\")\n        .split(\",\")\n        .map((entry) => (opts?.lowercase ? entry.trim().toLowerCase() : entry.trim()))\n        .filter(Boolean);\n}\n/** A comma-separated env value as a Set — the canonical allowlist shape,\n *  where an empty set is the \"allow all\" sentinel (`set.size === 0`). */\nexport function parseCsvSet(raw, opts) {\n    return new Set(parseCsvList(raw, opts));\n}\n/** Normalise an unknown thrown value into a human-readable string. Isomorphic\n *  (host, bridges, plugins, Vue) — this is the single home for the helper that\n *  #2217 could only consolidate for server code, since `@mulmoclaude/core/utils`\n *  is server-only.\n *\n *  A non-Error object with a non-empty string `details` (gRPC convention) or\n *  `message` field surfaces that field — `details` wins — instead of the\n *  `[object Object]` a bare `String(err)` would print; an empty-string field\n *  falls through. `fallback` covers the error-boundary idiom where a thrown\n *  non-Error should read as a descriptive message rather than `String(err)`\n *  noise; omit it in logging contexts where `String(err)` is fine. */\nexport function errorMessage(err, fallback) {\n    if (err instanceof Error)\n        return err.message;\n    if (hasStringProp(err, \"details\") && err.details)\n        return err.details;\n    if (hasStringProp(err, \"message\") && err.message)\n        return err.message;\n    if (fallback !== undefined)\n        return fallback;\n    return String(err);\n}\n/** `Date` → `YYYY-MM-DD` in UTC — for dates that must not shift with the\n *  host's local timezone (tool-trace search dirs, API date keys). Isomorphic\n *  single source (#2480): the host re-exports it from `server/utils/date.ts`,\n *  x-plugin imports it directly. The `@receptron/task-scheduler` copy stays\n *  local on purpose — that leaf package is published independently and kept\n *  dependency-free. Wall-clock questions use the host's `toLocalIsoDate`. */\nexport function toUtcIsoDate(timestamp) {\n    const year = timestamp.getUTCFullYear();\n    const month = String(timestamp.getUTCMonth() + 1).padStart(2, \"0\");\n    const day = String(timestamp.getUTCDate()).padStart(2, \"0\");\n    return `${year}-${month}-${day}`;\n}\n// A Map, not an object literal: `{}[char]` reads through the prototype chain,\n// so a future caller widening the regex would silently get `[object Object]`\n// for keys like `constructor`.\nconst HTML_ESCAPES = new Map([\n    [\"&\", \"&amp;\"],\n    [\"<\", \"&lt;\"],\n    [\">\", \"&gt;\"],\n    ['\"', \"&quot;\"],\n    [\"'\", \"&#39;\"],\n]);\n/** HTML-escape text destined for markup or an attribute value — the fixed\n *  five-character map, nothing more. Lives here rather than in\n *  `@mulmoclaude/core/wiki` (#2483) because `@mulmoclaude/markdown-utils` is a\n *  leaf that core depends on and so cannot import back up; core/wiki\n *  re-exports this, keeping its consumers' import path unchanged.\n *\n *  Escaping `&` first is what makes a single pass safe — the entities this\n *  introduces contain none of the other four characters, so nothing is\n *  double-escaped. Not a sanitiser: it neither strips tags nor validates URLs. */\nexport function escapeHtml(value) {\n    return value.replace(/[&<>\"']/g, (char) => HTML_ESCAPES.get(char) ?? char);\n}\n/** Split a JWS compact serialization into its three segments, or `null` when the\n *  token isn't well-formed. Pure string work, so the Node bridges and the\n *  Cloudflare Workers relay — which decode the segments differently (`Buffer` vs\n *  `atob`) — can still share this one guard.\n *\n *  A JWS compact serialization is EXACTLY three segments. Both a short token and\n *  a longer one (a five-segment JWE, or an attacker appending `.junk`) are\n *  rejected outright — never parsed from their first three segments, which would\n *  let the signed input disagree with the token. */\nexport function splitJwtSegments(token) {\n    const [headerSegment, payloadSegment, signatureSegment, ...extraSegments] = token.split(\".\");\n    if (headerSegment === undefined || payloadSegment === undefined || signatureSegment === undefined)\n        return null;\n    if (extraSegments.length > 0)\n        return null;\n    return { headerSegment, payloadSegment, signatureSegment };\n}\nexport { scanEnvOptions, snakeToLowerCamel } from \"./envScan.js\";\n","// Path helpers for MulmoScript story artifacts. The generic build primitives\n// (slug + the `\"\"`/`.`/`..` traversal guard) live in the shared, browser-safe\n// `@mulmoclaude/core/artifacts` (#2405); only the story-specific wire-path\n// rules stay here.\n//\n// Path model: the stories directory lives at `<workspace>/artifacts/stories`\n// and the FileOps scope root is `<workspace>/artifacts`, so the\n// FileOps-relative path and the historical `stories/<name>.json` wire form\n// (which every mulmoScript endpoint keys on) are the SAME string. Stories are\n// NOT `YYYY/MM`-partitioned, so `storyFilePath` opts out of partitioning.\n\nimport { ARTIFACTS_ROOT, buildArtifactRelPath, hasUnsafePathSegment, slugifyArtifact } from \"@mulmoclaude/core/artifacts\";\n\n/**\n * The slice of `node:path` this rule needs.\n *\n * Injected with no default, and this module imports no `node:*` builtin: it is\n * reached from the browser entry through `core/plugin`, so a `node:path`\n * import here lands in the Vue bundle (Codex on #3017). The server passes its\n * own `path`; tests pass `path.win32` to reach the case below.\n */\nexport interface PathRules {\n  relative: (from: string, to: string) => string;\n  isAbsolute: (p: string) => boolean;\n  sep: string;\n}\n\n/**\n * The wire ref for an absolute path inside a stories root, or `null` when it\n * is not inside one.\n *\n * Pure, and taking its path rules as an argument, because the case that\n * matters is unreachable on the machine this is written on. `path.relative`\n * says \"not under the base\" in TWO ways and only one looks like an escape:\n * `../…` is the familiar one, and across Windows DRIVES there is no relative\n * path at all, so `relative(\"C:\\\\base\", \"D:\\\\x\")` answers `\"D:\\\\x\"` —\n * absolute, with no `..` for the escape check to catch. That minted\n * `stories/D:/anything`, a wire ref that reads back as a DIFFERENT file, which\n * is the substitution this function exists to refuse. Only Windows CI caught\n * it; here there is one root and always a relative route (#3015 post-merge).\n */\n/**\n * The path INSIDE a stories root that a wire path names, or null when it does\n * not name one.\n *\n * The default root's FileOps is rooted one level up, at `<workspace>/artifacts`,\n * so there the wire path and the FileOps path are the SAME string and nothing\n * is stripped. A named root's FileOps is rooted at the stories directory\n * itself — which is what a host naturally writes, having registered exactly\n * that directory in `extraRoots` — so the `stories/` prefix has to come off,\n * or the write lands in `<root>/stories/<rel>` while the read looks in\n * `<root>/<rel>` and the two are different files (#3020 review H1).\n */\nexport function storiesRelativePath(wirePath: string): string | null {\n  const normalized = normalizeStoryPath(wirePath);\n  if (normalized === null) return null;\n  return normalized.slice(`${STORIES_DIR}/`.length);\n}\n\nexport function storyRefWithin(base: string, absolutePath: string, rules: PathRules): string | null {\n  const relative = rules.relative(base, absolutePath);\n  if (rules.isAbsolute(relative)) return null;\n  const rel = relative.split(rules.sep).join(\"/\");\n  if (rel === \"..\" || rel.startsWith(\"../\")) return null;\n  return rel ? `${STORIES_DIR}/${rel}` : STORIES_DIR;\n}\n\nconst STORIES_DIR = \"stories\";\nconst STORY_FALLBACK_SLUG = \"story\";\n\n/** Lowercase-hyphen slug, capped, leading/trailing hyphens stripped; falls back\n *  to `fallback` for empty/undefined/non-ASCII input. */\nexport function slugify(title: string | undefined, fallback = STORY_FALLBACK_SLUG): string {\n  return slugifyArtifact(title, fallback);\n}\n\n/** Build a fresh, collision-safe story path for a new script —\n *  `stories/<slug>-<epoch-ms>.json`, valid as both the FileOps-relative\n *  write path and the wire `filePath`. */\nexport function storyFilePath(slugSource: string, now: Date = new Date()): string {\n  return buildArtifactRelPath({ dir: STORIES_DIR, title: slugSource, ext: \".json\", fallback: STORY_FALLBACK_SLUG, now, partitioned: false });\n}\n\n/**\n * Normalize a caller-supplied wire path to the canonical\n * `stories/<rel>` form, or null when it can't be trusted. Accepts the\n * canonical `stories/foo.json` convention, bare `foo.json` (the host route\n * historically allowed either), and the workspace-relative spelling\n * `artifacts/stories/foo.json` — the tool description called `filePath`\n * \"workspace-relative\" for a long time, so agents legitimately send it.\n * A leading `artifacts` segment is dropped only when `stories` follows;\n * a bare `artifacts/foo.json` keeps its historical meaning (a file named\n * `artifacts/foo.json` under the stories dir). Rejects absolute paths,\n * backslashes, and any empty / `.` / `..` segment — the lexical guard\n * before every `files.artifacts` read/write (FileOps re-checks\n * containment as defence-in-depth).\n */\nexport function normalizeStoryPath(filePath: string): string | null {\n  if (filePath.length === 0 || filePath.includes(\"\\\\\")) return null;\n  // Absolute POSIX path or Windows drive prefix.\n  if (filePath.startsWith(\"/\") || /^[A-Za-z]:/.test(filePath)) return null;\n  if (hasUnsafePathSegment(filePath)) return null;\n  const segments = filePath.split(\"/\");\n  const trimmed = segments[0] === ARTIFACTS_ROOT && segments[1] === STORIES_DIR ? segments.slice(1) : segments;\n  const rest = trimmed[0] === STORIES_DIR ? trimmed.slice(1) : trimmed;\n  if (rest.length === 0) return null;\n  return [STORIES_DIR, ...rest].join(\"/\");\n}\n","// Body validators for the mulmoScript update endpoints, moved verbatim from\n// the host's `server/api/routes/mulmoScriptValidate.ts` so MulmoClaude and\n// MulmoTerminal share one definition of a \"valid script\" / \"valid beat\".\n//\n// The `@mulmocast/types` package exports zod schemas that mirror the\n// canonical MulmoScript / MulmoBeat shapes. The same schemas back client-side\n// edit-time validation in the presentMulmoScript View.\n\nimport { mulmoBeatSchema, mulmoScriptSchema } from \"@mulmocast/types\";\n\nexport type ValidationResult<T> = { ok: true; value: T } | { ok: false; error: string };\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction formatZodIssues(\n  // Zod's `$ZodIssue.path` is `PropertyKey[]` (includes `symbol`).\n  // Accept the wider type so callers can pass `safeParse().error.issues`\n  // directly; stringify any non-string/number segments at format time.\n  issues: readonly { message: string; path: readonly PropertyKey[] }[],\n): string {\n  if (issues.length === 0) return \"invalid shape\";\n  const head = issues\n    .slice(0, 3)\n    .map((i) => {\n      const pathStr = i.path.length > 0 ? i.path.map((seg) => String(seg)).join(\".\") : \"<root>\";\n      return `${pathStr}: ${i.message}`;\n    })\n    .join(\"; \");\n  return issues.length > 3 ? `${head} (+${issues.length - 3} more)` : head;\n}\n\n/** Shared prelude: require an object body carrying a non-empty\n *  `filePath`. On success returns the narrowed record + filePath so the\n *  caller reads the remaining fields without re-narrowing. */\nfunction validateFilePathBody(body: unknown): ValidationResult<{ record: Record<string, unknown>; filePath: string }> {\n  if (!isRecord(body)) {\n    return { ok: false, error: \"body must be an object\" };\n  }\n  if (typeof body.filePath !== \"string\" || body.filePath === \"\") {\n    return { ok: false, error: \"filePath must be a non-empty string\" };\n  }\n  return { ok: true, value: { record: body, filePath: body.filePath } };\n}\n\n/**\n * Validate the `update-script` request body. Returns the parsed,\n * schema-conformant script on success, or a human-readable error\n * suitable for sending back as a 400 response.\n */\nexport function validateUpdateScriptBody(body: unknown): ValidationResult<{\n  filePath: string;\n  script: unknown;\n}> {\n  const base = validateFilePathBody(body);\n  if (!base.ok) return base;\n  const { record, filePath } = base.value;\n  if (record.script === undefined) {\n    return { ok: false, error: \"script is required\" };\n  }\n  const parsed = mulmoScriptSchema.safeParse(record.script);\n  if (!parsed.success) {\n    return {\n      ok: false,\n      error: `invalid script: ${formatZodIssues(parsed.error.issues)}`,\n    };\n  }\n  return {\n    ok: true,\n    value: { filePath, script: parsed.data },\n  };\n}\n\n/**\n * Validate the `update-beat` request body. `beatIndex` is allowed\n * to be any non-negative integer; the handler still bounds-checks\n * against the actual script length after reading the file.\n */\nexport function validateUpdateBeatBody(body: unknown): ValidationResult<{\n  filePath: string;\n  beatIndex: number;\n  beat: unknown;\n}> {\n  const base = validateFilePathBody(body);\n  if (!base.ok) return base;\n  const { record, filePath } = base.value;\n  const beatIndex = record.beatIndex;\n  if (typeof beatIndex !== \"number\" || !Number.isInteger(beatIndex) || beatIndex < 0) {\n    return { ok: false, error: \"beatIndex must be a non-negative integer\" };\n  }\n  if (record.beat === undefined) {\n    return { ok: false, error: \"beat is required\" };\n  }\n  const parsed = mulmoBeatSchema.safeParse(record.beat);\n  if (!parsed.success) {\n    return {\n      ok: false,\n      error: `invalid beat: ${formatZodIssues(parsed.error.issues)}`,\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      filePath,\n      beatIndex,\n      beat: parsed.data,\n    },\n  };\n}\n","import type { ToolPluginCore, ToolResult } from \"gui-chat-protocol\";\nimport { mulmoScriptSchema } from \"@mulmocast/types\";\nimport { errorMessage } from \"@mulmoclaude/common\";\nimport { TOOL_DEFINITION } from \"./definition\";\nimport { normalizeStoryPath, storyFilePath } from \"./paths\";\nimport { validateUpdateBeatBody, validateUpdateScriptBody } from \"./validate\";\nimport type { MulmoScriptData, MulmoScriptExecuteContext, SaveMulmoScriptArgs } from \"./types\";\n\n/** Failure half of every outcome below. `code` preserves the hosts'\n *  HTTP contract (bad_request → 400, not_found → 404) without the package\n *  knowing anything about HTTP. */\nexport interface MulmoScriptFailure {\n  ok: false;\n  code: \"bad_request\" | \"not_found\";\n  error: string;\n}\n\nexport type SaveMulmoScriptOutcome = ({ ok: true; message: string } & MulmoScriptData) | MulmoScriptFailure;\n\nexport type UpdateMulmoScriptOutcome = { ok: true } | MulmoScriptFailure;\n\nfunction badRequest(error: string): MulmoScriptFailure {\n  return { ok: false, code: \"bad_request\", error };\n}\n\nfunction notFound(error: string): MulmoScriptFailure {\n  return { ok: false, code: \"not_found\", error };\n}\n\nfunction stringifyScript(script: unknown): string {\n  // 2-space indent matches the hosts' writeJsonAtomic convention so a\n  // package-written script diffs cleanly against host-written ones.\n  return JSON.stringify(script, null, 2);\n}\n\n/** Persist a new, schema-validated script under a fresh `stories/…` path. */\nasync function saveNewScript(context: MulmoScriptExecuteContext, script: unknown, filename: string | undefined, now: Date): Promise<SaveMulmoScriptOutcome> {\n  const validation = mulmoScriptSchema.safeParse(script);\n  if (!validation.success) {\n    return badRequest(\"script is not a valid MulmoScript\");\n  }\n  const validatedScript = validation.data;\n  // slugify drops `/`, `\\`, and `..`, so a hostile `filename` like\n  // \"../../etc/passwd\" can never escape the stories dir — defense in\n  // depth on top of FileOps' own containment check.\n  const slugSource = filename ? filename.replace(/\\.json$/i, \"\") : validatedScript.title || \"untitled\";\n  const filePath = storyFilePath(slugSource, now);\n  await context.files.artifacts.write(filePath, stringifyScript(validatedScript));\n  return { ok: true, script: validatedScript, filePath, message: `Saved MulmoScript to ${filePath}` };\n}\n\n/** Re-open an existing script: containment guard, existence, JSON parse,\n *  schema validation — same acceptance rules as the save path so a script\n *  this package saved can never be one it later refuses to load. */\nasync function loadExistingScript(context: MulmoScriptExecuteContext, filePath: string): Promise<SaveMulmoScriptOutcome> {\n  if (!filePath.toLowerCase().endsWith(\".json\")) {\n    return badRequest(\"filePath must point to a .json file\");\n  }\n  const storyPath = normalizeStoryPath(filePath);\n  if (!storyPath) {\n    return badRequest(\"Invalid filePath\");\n  }\n  if (!(await context.files.artifacts.exists(storyPath))) {\n    return notFound(`File not found: ${filePath}`);\n  }\n  const raw = await context.files.artifacts.read(storyPath);\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch (err) {\n    return badRequest(`Invalid JSON: ${errorMessage(err)}`);\n  }\n  const validation = mulmoScriptSchema.safeParse(parsed);\n  if (!validation.success) {\n    return badRequest(\"File is not a valid MulmoScript\");\n  }\n  return { ok: true, script: validation.data, filePath: storyPath, message: `Loaded MulmoScript from ${storyPath}` };\n}\n\n/**\n * Unified save-or-reopen for the presentMulmoScript tool call. `script`\n * (create new) and `filePath` (existing) are mutually exclusive. Never\n * throws on bad input — validation failures come back as discriminated\n * failures so host routes stay thin adapters. `autoGenerateMovie` is NOT\n * handled here: movie generation needs host backends (mulmocast/ffmpeg),\n * so hosts that support it trigger it from the returned `filePath`.\n */\nexport async function executeMulmoScriptSave(\n  context: MulmoScriptExecuteContext,\n  args: SaveMulmoScriptArgs,\n  now: Date = new Date(),\n): Promise<SaveMulmoScriptOutcome> {\n  const { script, filename, filePath, beatIndex, beat } = args ?? {};\n  const hasScript = script !== undefined && script !== null;\n  const hasFilePath = typeof filePath === \"string\" && filePath !== \"\";\n  if (hasScript === hasFilePath) {\n    return badRequest(\n      hasScript ? \"Provide either `script` or `filePath`, not both.\" : \"Provide either `script` (new presentation) or `filePath` (existing presentation).\",\n    );\n  }\n  if (!hasFilePath) return saveNewScript(context, script, typeof filename === \"string\" ? filename : undefined, now);\n\n  // `filePath` + `beatIndex` + `beat` replaces one beat before displaying, so revising a single\n  // slide does not mean re-sending a whole deck. Both halves are required together: an index\n  // with no replacement, or a replacement with no index, is a caller mistake worth reporting\n  // rather than silently ignoring — it would look like a successful edit that changed nothing.\n  const wantsBeatEdit = beatIndex !== undefined || beat !== undefined;\n  if (wantsBeatEdit) {\n    if (beatIndex === undefined || beat === undefined) {\n      return badRequest(\"`beatIndex` and `beat` go together — pass both to replace one beat, or neither to re-display.\");\n    }\n    const updated = await executeUpdateBeat(context, { filePath, beatIndex, beat });\n    if (!updated.ok) return updated;\n  }\n  return loadExistingScript(context, filePath);\n}\n\n/** Resolve + guard a wire path for the update endpoints. */\nasync function resolveExistingStory(context: MulmoScriptExecuteContext, filePath: string): Promise<{ storyPath: string } | MulmoScriptFailure> {\n  const storyPath = normalizeStoryPath(filePath);\n  if (!storyPath) return badRequest(\"Invalid filePath\");\n  if (!(await context.files.artifacts.exists(storyPath))) {\n    return notFound(`File not found: ${filePath}`);\n  }\n  return { storyPath };\n}\n\n/** Overwrite one beat of an existing script (the View's per-beat source\n *  editor). Validates the body shape + beat schema, bounds-checks the index\n *  against the script on disk, and writes the whole file back. */\nexport async function executeUpdateBeat(context: MulmoScriptExecuteContext, body: unknown): Promise<UpdateMulmoScriptOutcome> {\n  const validation = validateUpdateBeatBody(body);\n  if (!validation.ok) return badRequest(validation.error);\n  const { filePath, beatIndex, beat } = validation.value;\n\n  const resolved = await resolveExistingStory(context, filePath);\n  if (\"ok\" in resolved) return resolved;\n\n  let script: { beats?: unknown[] };\n  try {\n    script = JSON.parse(await context.files.artifacts.read(resolved.storyPath));\n  } catch (err) {\n    return badRequest(`Invalid JSON: ${errorMessage(err)}`);\n  }\n  if (!Array.isArray(script.beats) || beatIndex >= script.beats.length) {\n    return badRequest(\"Invalid beatIndex\");\n  }\n  script.beats[beatIndex] = beat;\n  await context.files.artifacts.write(resolved.storyPath, stringifyScript(script));\n  return { ok: true };\n}\n\n/** Overwrite the whole script (the View's full-source editor / deck-editor\n *  auto-save). The body's `script` is schema-validated by\n *  `validateUpdateScriptBody` before the write. */\nexport async function executeUpdateScript(context: MulmoScriptExecuteContext, body: unknown): Promise<UpdateMulmoScriptOutcome> {\n  const validation = validateUpdateScriptBody(body);\n  if (!validation.ok) return badRequest(validation.error);\n  const { filePath, script } = validation.value;\n\n  const resolved = await resolveExistingStory(context, filePath);\n  if (\"ok\" in resolved) return resolved;\n\n  await context.files.artifacts.write(resolved.storyPath, stringifyScript(script));\n  return { ok: true };\n}\n\n/** ToolResult-shaped wrapper over `executeMulmoScriptSave` for runtime hosts\n *  (e.g. MulmoTerminal's package loader), where the tool call resolves to a\n *  ToolResult rather than an HTTP response. Failures are narrate-only\n *  (message, no data) so the agent can self-correct. */\nexport async function executeMulmoScript(context: MulmoScriptExecuteContext, args: SaveMulmoScriptArgs): Promise<ToolResult<MulmoScriptData>> {\n  const outcome = await executeMulmoScriptSave(context, args);\n  if (!outcome.ok) {\n    return {\n      message: outcome.error,\n      instructions: \"Acknowledge the error and retry with a valid `script` (new) or an existing `filePath`.\",\n    };\n  }\n  // The tool schema advertises `autoGenerateMovie`, but movie generation\n  // needs host backends (mulmocast/ffmpeg) this generic execute path\n  // doesn't have — MulmoClaude honours the flag in its own save route.\n  // Say so in the result rather than silently dropping the option, so the\n  // agent doesn't tell the user a movie is on its way.\n  const ignoredMovieNote = args.autoGenerateMovie === true ? \" (autoGenerateMovie is not supported by this host and was ignored)\" : \"\";\n  return {\n    message: `${outcome.message}${ignoredMovieNote}`,\n    data: { script: outcome.script, filePath: outcome.filePath },\n    instructions: \"Display the storyboard to the user.\",\n  };\n}\n\n/** Non-Vue plugin core for runtime hosts that register the package directly.\n *  MulmoClaude consumes only TOOL_DEFINITION + the execute functions in its\n *  own routes, so it doesn't use this. */\nexport const pluginCore: ToolPluginCore<MulmoScriptData, MulmoScriptData, SaveMulmoScriptArgs> = {\n  toolDefinition: TOOL_DEFINITION,\n  execute: executeMulmoScript as unknown as ToolPluginCore<MulmoScriptData, MulmoScriptData, SaveMulmoScriptArgs>[\"execute\"],\n  generatingMessage: \"Generating MulmoScript storyboard…\",\n  isEnabled: () => true,\n};\n"],"mappings":";;;AAEA,IAAa,YAAY;AAMzB,IAAa,kBAAkC;CAC7C,MAAM;CACN,MAAM;CACN,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmFb,YAAY;EACV,MAAM;EACN,YAAY;GACV,QAAQ;IACN,MAAM;IACN,aACE;IACF,sBAAsB;GACxB;GACA,UAAU;IACR,MAAM;IACN,aACE;GACJ;GACA,UAAU;IACR,MAAM;IACN,aACE;GACJ;GACA,WAAW;IACT,MAAM;IACN,aAAa;GACf;GACA,MAAM;IACJ,MAAM;IACN,aAAa;IACb,sBAAsB;GACxB;GACA,mBAAmB;IACjB,MAAM;IACN,aACE;GACJ;EACF;EACA,UAAU,CAAC;CACb;AACF;;;;AC1HA,SAAgBA,WAAS,OAAO;CAC5B,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC9E;;AA+BA,SAAgB,cAAc,OAAO,KAAK;CACtC,OAAOA,WAAS,KAAK,KAAK,OAAO,MAAM,SAAS;AACpD;;;;;;;;;;;;AA8BA,SAAgB,aAAa,KAAK,UAAU;CACxC,IAAI,eAAe,OACf,OAAO,IAAI;CACf,IAAI,cAAc,KAAK,SAAS,KAAK,IAAI,SACrC,OAAO,IAAI;CACf,IAAI,cAAc,KAAK,SAAS,KAAK,IAAI,SACrC,OAAO,IAAI;CACf,IAAI,aAAa,KAAA,GACb,OAAO;CACX,OAAO,OAAO,GAAG;AACrB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC9BA,SAAgB,oBAAoB,UAAiC;CACnE,MAAM,aAAa,mBAAmB,QAAQ;CAC9C,IAAI,eAAe,MAAM,OAAO;CAChC,OAAO,WAAW,MAAM,GAAG,YAAY,GAAG,MAAM;AAClD;AAEA,SAAgB,eAAe,MAAc,cAAsB,OAAiC;CAClG,MAAM,WAAW,MAAM,SAAS,MAAM,YAAY;CAClD,IAAI,MAAM,WAAW,QAAQ,GAAG,OAAO;CACvC,MAAM,MAAM,SAAS,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG;CAC9C,IAAI,QAAQ,QAAQ,IAAI,WAAW,KAAK,GAAG,OAAO;CAClD,OAAO,MAAM,GAAG,YAAY,GAAG,QAAQ;AACzC;AAEA,IAAM,cAAc;AACpB,IAAM,sBAAsB;;;AAI5B,SAAgB,QAAQ,OAA2B,WAAW,qBAA6B;CACzF,QAAA,GAAO,4BAAA,gBAAA,CAAgB,OAAO,QAAQ;AACxC;;;;AAKA,SAAgB,cAAc,YAAoB,sBAAY,IAAI,KAAK,GAAW;CAChF,QAAA,GAAO,4BAAA,qBAAA,CAAqB;EAAE,KAAK;EAAa,OAAO;EAAY,KAAK;EAAS,UAAU;EAAqB;EAAK,aAAa;CAAM,CAAC;AAC3I;;;;;;;;;;;;;;;AAgBA,SAAgB,mBAAmB,UAAiC;CAClE,IAAI,SAAS,WAAW,KAAK,SAAS,SAAS,IAAI,GAAG,OAAO;CAE7D,IAAI,SAAS,WAAW,GAAG,KAAK,aAAa,KAAK,QAAQ,GAAG,OAAO;CACpE,KAAA,GAAI,4BAAA,qBAAA,CAAqB,QAAQ,GAAG,OAAO;CAC3C,MAAM,WAAW,SAAS,MAAM,GAAG;CACnC,MAAM,UAAU,SAAS,OAAO,4BAAA,kBAAkB,SAAS,OAAO,cAAc,SAAS,MAAM,CAAC,IAAI;CACpG,MAAM,OAAO,QAAQ,OAAO,cAAc,QAAQ,MAAM,CAAC,IAAI;CAC7D,IAAI,KAAK,WAAW,GAAG,OAAO;CAC9B,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG;AACxC;;;AC/FA,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,gBAIP,QACQ;CACR,IAAI,OAAO,WAAW,GAAG,OAAO;CAChC,MAAM,OAAO,OACV,MAAM,GAAG,CAAC,CAAC,CACX,KAAK,MAAM;EAEV,OAAO,GADS,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,KAAK,QAAQ,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,SAC/D,IAAI,EAAE;CAC1B,CAAC,CAAC,CACD,KAAK,IAAI;CACZ,OAAO,OAAO,SAAS,IAAI,GAAG,KAAK,KAAK,OAAO,SAAS,EAAE,UAAU;AACtE;;;;AAKA,SAAS,qBAAqB,MAAwF;CACpH,IAAI,CAAC,SAAS,IAAI,GAChB,OAAO;EAAE,IAAI;EAAO,OAAO;CAAyB;CAEtD,IAAI,OAAO,KAAK,aAAa,YAAY,KAAK,aAAa,IACzD,OAAO;EAAE,IAAI;EAAO,OAAO;CAAsC;CAEnE,OAAO;EAAE,IAAI;EAAM,OAAO;GAAE,QAAQ;GAAM,UAAU,KAAK;EAAS;CAAE;AACtE;;;;;;AAOA,SAAgB,yBAAyB,MAGtC;CACD,MAAM,OAAO,qBAAqB,IAAI;CACtC,IAAI,CAAC,KAAK,IAAI,OAAO;CACrB,MAAM,EAAE,QAAQ,aAAa,KAAK;CAClC,IAAI,OAAO,WAAW,KAAA,GACpB,OAAO;EAAE,IAAI;EAAO,OAAO;CAAqB;CAElD,MAAM,SAAS,iBAAA,kBAAkB,UAAU,OAAO,MAAM;CACxD,IAAI,CAAC,OAAO,SACV,OAAO;EACL,IAAI;EACJ,OAAO,mBAAmB,gBAAgB,OAAO,MAAM,MAAM;CAC/D;CAEF,OAAO;EACL,IAAI;EACJ,OAAO;GAAE;GAAU,QAAQ,OAAO;EAAK;CACzC;AACF;;;;;;AAOA,SAAgB,uBAAuB,MAIpC;CACD,MAAM,OAAO,qBAAqB,IAAI;CACtC,IAAI,CAAC,KAAK,IAAI,OAAO;CACrB,MAAM,EAAE,QAAQ,aAAa,KAAK;CAClC,MAAM,YAAY,OAAO;CACzB,IAAI,OAAO,cAAc,YAAY,CAAC,OAAO,UAAU,SAAS,KAAK,YAAY,GAC/E,OAAO;EAAE,IAAI;EAAO,OAAO;CAA2C;CAExE,IAAI,OAAO,SAAS,KAAA,GAClB,OAAO;EAAE,IAAI;EAAO,OAAO;CAAmB;CAEhD,MAAM,SAAS,iBAAA,gBAAgB,UAAU,OAAO,IAAI;CACpD,IAAI,CAAC,OAAO,SACV,OAAO;EACL,IAAI;EACJ,OAAO,iBAAiB,gBAAgB,OAAO,MAAM,MAAM;CAC7D;CAEF,OAAO;EACL,IAAI;EACJ,OAAO;GACL;GACA;GACA,MAAM,OAAO;EACf;CACF;AACF;;;ACxFA,SAAS,WAAW,OAAmC;CACrD,OAAO;EAAE,IAAI;EAAO,MAAM;EAAe;CAAM;AACjD;AAEA,SAAS,SAAS,OAAmC;CACnD,OAAO;EAAE,IAAI;EAAO,MAAM;EAAa;CAAM;AAC/C;AAEA,SAAS,gBAAgB,QAAyB;CAGhD,OAAO,KAAK,UAAU,QAAQ,MAAM,CAAC;AACvC;;AAGA,eAAe,cAAc,SAAoC,QAAiB,UAA8B,KAA4C;CAC1J,MAAM,aAAa,iBAAA,kBAAkB,UAAU,MAAM;CACrD,IAAI,CAAC,WAAW,SACd,OAAO,WAAW,mCAAmC;CAEvD,MAAM,kBAAkB,WAAW;CAKnC,MAAM,WAAW,cADE,WAAW,SAAS,QAAQ,YAAY,EAAE,IAAI,gBAAgB,SAAS,YAC/C,GAAG;CAC9C,MAAM,QAAQ,MAAM,UAAU,MAAM,UAAU,gBAAgB,eAAe,CAAC;CAC9E,OAAO;EAAE,IAAI;EAAM,QAAQ;EAAiB;EAAU,SAAS,wBAAwB;CAAW;AACpG;;;;AAKA,eAAe,mBAAmB,SAAoC,UAAmD;CACvH,IAAI,CAAC,SAAS,YAAY,CAAC,CAAC,SAAS,OAAO,GAC1C,OAAO,WAAW,qCAAqC;CAEzD,MAAM,YAAY,mBAAmB,QAAQ;CAC7C,IAAI,CAAC,WACH,OAAO,WAAW,kBAAkB;CAEtC,IAAI,CAAE,MAAM,QAAQ,MAAM,UAAU,OAAO,SAAS,GAClD,OAAO,SAAS,mBAAmB,UAAU;CAE/C,MAAM,MAAM,MAAM,QAAQ,MAAM,UAAU,KAAK,SAAS;CACxD,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,GAAG;CACzB,SAAS,KAAK;EACZ,OAAO,WAAW,iBAAiB,aAAa,GAAG,GAAG;CACxD;CACA,MAAM,aAAa,iBAAA,kBAAkB,UAAU,MAAM;CACrD,IAAI,CAAC,WAAW,SACd,OAAO,WAAW,iCAAiC;CAErD,OAAO;EAAE,IAAI;EAAM,QAAQ,WAAW;EAAM,UAAU;EAAW,SAAS,2BAA2B;CAAY;AACnH;;;;;;;;;AAUA,eAAsB,uBACpB,SACA,MACA,sBAAY,IAAI,KAAK,GACY;CACjC,MAAM,EAAE,QAAQ,UAAU,UAAU,WAAW,SAAS,QAAQ,CAAC;CACjE,MAAM,YAAY,WAAW,KAAA,KAAa,WAAW;CACrD,MAAM,cAAc,OAAO,aAAa,YAAY,aAAa;CACjE,IAAI,cAAc,aAChB,OAAO,WACL,YAAY,qDAAqD,mFACnE;CAEF,IAAI,CAAC,aAAa,OAAO,cAAc,SAAS,QAAQ,OAAO,aAAa,WAAW,WAAW,KAAA,GAAW,GAAG;CAOhH,IADsB,cAAc,KAAA,KAAa,SAAS,KAAA,GACvC;EACjB,IAAI,cAAc,KAAA,KAAa,SAAS,KAAA,GACtC,OAAO,WAAW,+FAA+F;EAEnH,MAAM,UAAU,MAAM,kBAAkB,SAAS;GAAE;GAAU;GAAW;EAAK,CAAC;EAC9E,IAAI,CAAC,QAAQ,IAAI,OAAO;CAC1B;CACA,OAAO,mBAAmB,SAAS,QAAQ;AAC7C;;AAGA,eAAe,qBAAqB,SAAoC,UAAuE;CAC7I,MAAM,YAAY,mBAAmB,QAAQ;CAC7C,IAAI,CAAC,WAAW,OAAO,WAAW,kBAAkB;CACpD,IAAI,CAAE,MAAM,QAAQ,MAAM,UAAU,OAAO,SAAS,GAClD,OAAO,SAAS,mBAAmB,UAAU;CAE/C,OAAO,EAAE,UAAU;AACrB;;;;AAKA,eAAsB,kBAAkB,SAAoC,MAAkD;CAC5H,MAAM,aAAa,uBAAuB,IAAI;CAC9C,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,WAAW,KAAK;CACtD,MAAM,EAAE,UAAU,WAAW,SAAS,WAAW;CAEjD,MAAM,WAAW,MAAM,qBAAqB,SAAS,QAAQ;CAC7D,IAAI,QAAQ,UAAU,OAAO;CAE7B,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,MAAM,QAAQ,MAAM,UAAU,KAAK,SAAS,SAAS,CAAC;CAC5E,SAAS,KAAK;EACZ,OAAO,WAAW,iBAAiB,aAAa,GAAG,GAAG;CACxD;CACA,IAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,KAAK,aAAa,OAAO,MAAM,QAC5D,OAAO,WAAW,mBAAmB;CAEvC,OAAO,MAAM,aAAa;CAC1B,MAAM,QAAQ,MAAM,UAAU,MAAM,SAAS,WAAW,gBAAgB,MAAM,CAAC;CAC/E,OAAO,EAAE,IAAI,KAAK;AACpB;;;;AAKA,eAAsB,oBAAoB,SAAoC,MAAkD;CAC9H,MAAM,aAAa,yBAAyB,IAAI;CAChD,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,WAAW,KAAK;CACtD,MAAM,EAAE,UAAU,WAAW,WAAW;CAExC,MAAM,WAAW,MAAM,qBAAqB,SAAS,QAAQ;CAC7D,IAAI,QAAQ,UAAU,OAAO;CAE7B,MAAM,QAAQ,MAAM,UAAU,MAAM,SAAS,WAAW,gBAAgB,MAAM,CAAC;CAC/E,OAAO,EAAE,IAAI,KAAK;AACpB;;;;;AAMA,eAAsB,mBAAmB,SAAoC,MAAiE;CAC5I,MAAM,UAAU,MAAM,uBAAuB,SAAS,IAAI;CAC1D,IAAI,CAAC,QAAQ,IACX,OAAO;EACL,SAAS,QAAQ;EACjB,cAAc;CAChB;CAOF,MAAM,mBAAmB,KAAK,sBAAsB,OAAO,uEAAuE;CAClI,OAAO;EACL,SAAS,GAAG,QAAQ,UAAU;EAC9B,MAAM;GAAE,QAAQ,QAAQ;GAAQ,UAAU,QAAQ;EAAS;EAC3D,cAAc;CAChB;AACF;;;;AAKA,IAAa,aAAoF;CAC/F,gBAAgB;CAChB,SAAS;CACT,mBAAmB;CACnB,iBAAiB;AACnB"}

package/dist/{plugin-CAhxJ5WM.js → plugin-Jo8iGv4K.js}

@@ -151,6 +151,44 @@ function errorMessage(err, fallback) {
 }
 //#endregion
 //#region src/core/paths.ts
+/**
+* The wire ref for an absolute path inside a stories root, or `null` when it
+* is not inside one.
+*
+* Pure, and taking its path rules as an argument, because the case that
+* matters is unreachable on the machine this is written on. `path.relative`
+* says "not under the base" in TWO ways and only one looks like an escape:
+* `../…` is the familiar one, and across Windows DRIVES there is no relative
+* path at all, so `relative("C:\\base", "D:\\x")` answers `"D:\\x"` —
+* absolute, with no `..` for the escape check to catch. That minted
+* `stories/D:/anything`, a wire ref that reads back as a DIFFERENT file, which
+* is the substitution this function exists to refuse. Only Windows CI caught
+* it; here there is one root and always a relative route (#3015 post-merge).
+*/
+/**
+* The path INSIDE a stories root that a wire path names, or null when it does
+* not name one.
+*
+* The default root's FileOps is rooted one level up, at `<workspace>/artifacts`,
+* so there the wire path and the FileOps path are the SAME string and nothing
+* is stripped. A named root's FileOps is rooted at the stories directory
+* itself — which is what a host naturally writes, having registered exactly
+* that directory in `extraRoots` — so the `stories/` prefix has to come off,
+* or the write lands in `<root>/stories/<rel>` while the read looks in
+* `<root>/<rel>` and the two are different files (#3020 review H1).
+*/
+function storiesRelativePath(wirePath) {
+	const normalized = normalizeStoryPath(wirePath);
+	if (normalized === null) return null;
+	return normalized.slice(`${STORIES_DIR}/`.length);
+}
+function storyRefWithin(base, absolutePath, rules) {
+	const relative = rules.relative(base, absolutePath);
+	if (rules.isAbsolute(relative)) return null;
+	const rel = relative.split(rules.sep).join("/");
+	if (rel === ".." || rel.startsWith("../")) return null;
+	return rel ? `${STORIES_DIR}/${rel}` : STORIES_DIR;
+}
 var STORIES_DIR = "stories";
 var STORY_FALLBACK_SLUG = "story";
 /** Lowercase-hyphen slug, capped, leading/trailing hyphens stripped; falls back
@@ -436,6 +474,6 @@ var pluginCore = {
 	isEnabled: () => true
 };
 //#endregion
-export { pluginCore as a, normalizeStoryPath as c, errorMessage as d, TOOL_DEFINITION as f, executeUpdateScript as i, slugify as l, executeMulmoScriptSave as n, validateUpdateBeatBody as o, TOOL_NAME as p, executeUpdateBeat as r, validateUpdateScriptBody as s, executeMulmoScript as t, storyFilePath as u };
+export { pluginCore as a, normalizeStoryPath as c, storyFilePath as d, storyRefWithin as f, TOOL_NAME as h, executeUpdateScript as i, slugify as l, TOOL_DEFINITION as m, executeMulmoScriptSave as n, validateUpdateBeatBody as o, errorMessage as p, executeUpdateBeat as r, validateUpdateScriptBody as s, executeMulmoScript as t, storiesRelativePath as u };
 
-//# sourceMappingURL=plugin-CAhxJ5WM.js.map
+//# sourceMappingURL=plugin-Jo8iGv4K.js.map

package/dist/plugin-Jo8iGv4K.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-Jo8iGv4K.js","names":["isRecord"],"sources":["../src/core/definition.ts","../../../common/dist/index.js","../src/core/paths.ts","../src/core/validate.ts","../src/core/plugin.ts"],"sourcesContent":["import type { ToolDefinition } from \"gui-chat-protocol\";\n\nexport const TOOL_NAME = \"presentMulmoScript\";\n\n// Single source of truth for the presentMulmoScript tool schema, shared by\n// MulmoClaude (host built-in shim re-exports this) and MulmoTerminal.\n// (Extracted byte-identical from the host definition; evolves here with the\n// package version.)\nexport const TOOL_DEFINITION: ToolDefinition = {\n  type: \"function\",\n  name: TOOL_NAME,\n  description: `Save and present a MulmoScript story or presentation as a visual storyboard in the canvas.\n\nProvide EXACTLY ONE of \\`script\\` or \\`filePath\\`:\n\n1. **Create new** — pass \\`script\\` (full MulmoScript JSON). Server saves it to disk and presents it.\n2. **Re-display existing** — pass \\`filePath\\` (the \\`filePath\\` returned by a previous call, e.g. \"stories/my-story-1700000000000.json\"; it is resolved against the workspace's \\`artifacts/\\` directory, NOT the workspace root). Much cheaper than re-sending the full script. Use whenever the user wants to revisit a presentation that was already created in this workspace.\n3. **Edit one beat** — pass \\`filePath\\` PLUS \\`beatIndex\\` and \\`beat\\`. Replaces that one beat and presents the result. **Use this whenever the user asks to change part of an existing presentation** — re-sending the whole script instead wastes tokens and overwrites anything edited in the canvas meanwhile.\n\nOptional \\`autoGenerateMovie: true\\` kicks off movie generation in the background, so the final video is ready by the time the user opens the canvas. Movie generation is expensive (multiple image + audio API calls + video encoding) — only set this when the user has explicitly asked for the movie. Default \\`false\\`.\n\nProvider rules for new scripts:\n- \\`speechParams.speakers.<name>.provider\\`: \\`\"gemini\"\\` — pairs with Gemini voices like \\`\"Kore\"\\`, \\`\"Aoede\"\\`, \\`\"Puck\"\\`. Do NOT use \\`\"google\"\\` here — that routes to Google Cloud TTS, where Gemini-class voices fail with \"This voice requires a model name to be specified.\" unless an explicit \\`model\\` is set.\n- \\`imageParams.provider\\`: \\`\"google\"\\`\n- \\`movieParams.provider\\`: \\`\"google\"\\`\n- Do NOT add a top-level \\`provider\\` field to \\`speechParams\\` — provider belongs per-speaker only.\n\nRequired structure:\n\n{\n  \"$mulmocast\": { \"version\": \"1.1\" },\n  \"title\": \"The Life of a Star\",\n  \"description\": \"A short educational explainer about stellar evolution\",\n  \"lang\": \"en\",\n  \"speechParams\": {\n    \"speakers\": {\n      \"Presenter\": {\n        \"provider\": \"gemini\",\n        \"voiceId\": \"Kore\",\n        \"displayName\": { \"en\": \"Presenter\" }\n      }\n    }\n  },\n  \"imageParams\": { \"provider\": \"google\", \"model\": \"gemini-3.1-flash-image-preview\" },\n  \"movieParams\": { \"provider\": \"google\", \"model\": \"veo-3.1-generate\" },\n  \"beats\": [\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Narration spoken aloud for this beat.\",\n      \"imagePrompt\": \"Detailed description — AI generates the image\"\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Bullet point beat.\",\n      \"image\": { \"type\": \"textSlide\", \"slide\": { \"title\": \"Slide Title\", \"bullets\": [\"Point one\", \"Point two\"] } }\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Markdown beat.\",\n      \"image\": { \"type\": \"markdown\", \"markdown\": \"## Heading\\\\n\\\\nBody text here.\" }\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Chart beat — use for data, comparisons, trends.\",\n      \"image\": { \"type\": \"chart\", \"title\": \"Chart Title\", \"chartData\": { \"type\": \"bar\", \"data\": { \"labels\": [\"A\", \"B\", \"C\"], \"datasets\": [{ \"label\": \"Series\", \"data\": [10, 20, 30] }] } } }\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Diagram beat — use for flows, architectures, relationships.\",\n      \"image\": { \"type\": \"mermaid\", \"title\": \"Diagram Title\", \"code\": { \"kind\": \"text\", \"text\": \"graph TD\\\\n  A[Start] --> B[Process] --> C[End]\" } }\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"Rich interactive beat — use for custom layouts, animations, or anything that benefits from HTML/CSS.\",\n      \"image\": { \"type\": \"html_tailwind\", \"html\": \"<div class=\\\\\"flex items-center justify-center h-full text-4xl font-bold text-blue-600\\\\\">Hello World</div>\" }\n    },\n    {\n      \"speaker\": \"Presenter\",\n      \"text\": \"AI video beat.\",\n      \"moviePrompt\": \"Detailed description — AI generates the video clip\"\n    }\n  ]\n}\n\nBeat visual options (choose one per beat):\n- \"imagePrompt\": \"...\"  → top-level string field — AI generates an image from the prompt\n- \"moviePrompt\": \"...\"  → top-level string field — AI generates a video clip from the prompt\n- \"image\": { \"type\": \"textSlide\", \"slide\": { \"title\", \"subtitle\"?, \"bullets\"? } }\n- \"image\": { \"type\": \"markdown\", \"markdown\": \"...\" }\n- \"image\": { \"type\": \"chart\", \"title\": \"...\", \"chartData\": { \"type\": \"bar\"|\"line\"|\"pie\"|..., \"data\": { \"labels\": [...], \"datasets\": [...] } } }  ← PREFER for data/numbers/comparisons. chartData is a full Chart.js config: labels/datasets go under \"data\", not at the top level.\n- \"image\": { \"type\": \"mermaid\", \"title\": \"...\", \"code\": { \"kind\": \"text\", \"text\": \"...\" } }  ← PREFER for flows/diagrams/relationships\n- \"image\": { \"type\": \"html_tailwind\", \"html\": \"...\", \"script\"?: \"...\" }  ← PREFER for rich layouts, animations, custom visuals\n\nIMPORTANT: \"imagePrompt\" and \"moviePrompt\" are plain string fields on the beat, NOT nested under \"image\".`,\n  parameters: {\n    type: \"object\",\n    properties: {\n      script: {\n        type: \"object\",\n        description:\n          \"Complete MulmoScript JSON for a NEW presentation. Must include $mulmocast, speechParams, imageParams, movieParams, and beats array. Always populate the top-level 'description' field with a concise 1–2 sentence summary of the presentation. Do NOT pass alongside `filePath`.\",\n        additionalProperties: true,\n      },\n      filename: {\n        type: \"string\",\n        description:\n          \"Optional filename without extension. Defaults to a slug of the script title. Only meaningful with `script`; ignored when `filePath` is given.\",\n      },\n      filePath: {\n        type: \"string\",\n        description:\n          \"Path of an EXISTING MulmoScript JSON file, as returned by a previous call (e.g. 'stories/my-story-1700000000000.json'). Resolved against the workspace's `artifacts/` directory, not the workspace root ('artifacts/stories/…' is also accepted). Use this to re-display a script previously saved in this workspace, instead of resending the full JSON. Do NOT pass alongside `script`.\",\n      },\n      beatIndex: {\n        type: \"number\",\n        description: \"0-based index of the beat to replace. Requires `filePath` and `beat`. Omit to re-display the script unchanged.\",\n      },\n      beat: {\n        type: \"object\",\n        description: \"The replacement beat, complete (it overwrites the old one — it is not merged). Requires `filePath` and `beatIndex`.\",\n        additionalProperties: true,\n      },\n      autoGenerateMovie: {\n        type: \"boolean\",\n        description:\n          \"When true, the server starts movie generation in the background after save/load. The user does NOT need to open the canvas — progress streams via the existing session channel. Default false. Only set true when the user has explicitly asked for the movie; generation is expensive.\",\n      },\n    },\n    required: [],\n  },\n};\n","// General-purpose runtime type guards, shared across the MulmoClaude host,\n// bridges, and plugins. This is a leaf package — pure and dependency-free — so\n// any tier can import it without creating an uphill edge.\n//\n// These originated as `server/utils/types.ts` (#504), which centralised 40+\n// hand-written inline `typeof x === \"object\"` checks. They are promoted here so\n// the same guards stop being re-hand-written in every bridge and plugin too.\n/** Narrow `unknown` to a plain object (not null, not array). */\nexport function isRecord(value) {\n    return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n/** Narrow `unknown` to any object (not null, arrays allowed).\n *  Use `isRecord` when you need to access string keys. */\nexport function isObj(value) {\n    return typeof value === \"object\" && value !== null;\n}\n/** Non-empty string after trimming whitespace. */\nexport function isNonEmptyString(value) {\n    return typeof value === \"string\" && value.trim().length > 0;\n}\n/** Record whose values are all strings. */\nexport function isStringRecord(value) {\n    if (!isRecord(value))\n        return false;\n    return Object.values(value).every((val) => typeof val === \"string\");\n}\n/** String array (every element is a string). */\nexport function isStringArray(value) {\n    return Array.isArray(value) && value.every((val) => typeof val === \"string\");\n}\n/** An array of unknowns. Prefer this over a bare `Array.isArray` in typed code:\n *  `Array.isArray(x: unknown)` narrows to `any[]`, silently reintroducing\n *  `any`, whereas this keeps the element type `unknown`. */\nexport function isUnknownArray(value) {\n    return Array.isArray(value);\n}\n/** Error-like object with a `code` property (e.g. Node.js fs errors). */\nexport function isErrorWithCode(value) {\n    return isRecord(value) && typeof value.code === \"string\";\n}\n/** Check that a record has a specific key with a string value. */\nexport function hasStringProp(value, key) {\n    return isRecord(value) && typeof value[key] === \"string\";\n}\n/** Check that a record has a specific key with a number value. */\nexport function hasNumberProp(value, key) {\n    return isRecord(value) && typeof value[key] === \"number\";\n}\n/** Split a comma-separated env value into trimmed, non-empty entries.\n *  `lowercase` folds case for identifiers compared case-insensitively\n *  (JIDs, email addresses, hex pubkeys). Absent/empty input → empty list. */\nexport function parseCsvList(raw, opts) {\n    return (raw ?? \"\")\n        .split(\",\")\n        .map((entry) => (opts?.lowercase ? entry.trim().toLowerCase() : entry.trim()))\n        .filter(Boolean);\n}\n/** A comma-separated env value as a Set — the canonical allowlist shape,\n *  where an empty set is the \"allow all\" sentinel (`set.size === 0`). */\nexport function parseCsvSet(raw, opts) {\n    return new Set(parseCsvList(raw, opts));\n}\n/** Normalise an unknown thrown value into a human-readable string. Isomorphic\n *  (host, bridges, plugins, Vue) — this is the single home for the helper that\n *  #2217 could only consolidate for server code, since `@mulmoclaude/core/utils`\n *  is server-only.\n *\n *  A non-Error object with a non-empty string `details` (gRPC convention) or\n *  `message` field surfaces that field — `details` wins — instead of the\n *  `[object Object]` a bare `String(err)` would print; an empty-string field\n *  falls through. `fallback` covers the error-boundary idiom where a thrown\n *  non-Error should read as a descriptive message rather than `String(err)`\n *  noise; omit it in logging contexts where `String(err)` is fine. */\nexport function errorMessage(err, fallback) {\n    if (err instanceof Error)\n        return err.message;\n    if (hasStringProp(err, \"details\") && err.details)\n        return err.details;\n    if (hasStringProp(err, \"message\") && err.message)\n        return err.message;\n    if (fallback !== undefined)\n        return fallback;\n    return String(err);\n}\n/** `Date` → `YYYY-MM-DD` in UTC — for dates that must not shift with the\n *  host's local timezone (tool-trace search dirs, API date keys). Isomorphic\n *  single source (#2480): the host re-exports it from `server/utils/date.ts`,\n *  x-plugin imports it directly. The `@receptron/task-scheduler` copy stays\n *  local on purpose — that leaf package is published independently and kept\n *  dependency-free. Wall-clock questions use the host's `toLocalIsoDate`. */\nexport function toUtcIsoDate(timestamp) {\n    const year = timestamp.getUTCFullYear();\n    const month = String(timestamp.getUTCMonth() + 1).padStart(2, \"0\");\n    const day = String(timestamp.getUTCDate()).padStart(2, \"0\");\n    return `${year}-${month}-${day}`;\n}\n// A Map, not an object literal: `{}[char]` reads through the prototype chain,\n// so a future caller widening the regex would silently get `[object Object]`\n// for keys like `constructor`.\nconst HTML_ESCAPES = new Map([\n    [\"&\", \"&amp;\"],\n    [\"<\", \"&lt;\"],\n    [\">\", \"&gt;\"],\n    ['\"', \"&quot;\"],\n    [\"'\", \"&#39;\"],\n]);\n/** HTML-escape text destined for markup or an attribute value — the fixed\n *  five-character map, nothing more. Lives here rather than in\n *  `@mulmoclaude/core/wiki` (#2483) because `@mulmoclaude/markdown-utils` is a\n *  leaf that core depends on and so cannot import back up; core/wiki\n *  re-exports this, keeping its consumers' import path unchanged.\n *\n *  Escaping `&` first is what makes a single pass safe — the entities this\n *  introduces contain none of the other four characters, so nothing is\n *  double-escaped. Not a sanitiser: it neither strips tags nor validates URLs. */\nexport function escapeHtml(value) {\n    return value.replace(/[&<>\"']/g, (char) => HTML_ESCAPES.get(char) ?? char);\n}\n/** Split a JWS compact serialization into its three segments, or `null` when the\n *  token isn't well-formed. Pure string work, so the Node bridges and the\n *  Cloudflare Workers relay — which decode the segments differently (`Buffer` vs\n *  `atob`) — can still share this one guard.\n *\n *  A JWS compact serialization is EXACTLY three segments. Both a short token and\n *  a longer one (a five-segment JWE, or an attacker appending `.junk`) are\n *  rejected outright — never parsed from their first three segments, which would\n *  let the signed input disagree with the token. */\nexport function splitJwtSegments(token) {\n    const [headerSegment, payloadSegment, signatureSegment, ...extraSegments] = token.split(\".\");\n    if (headerSegment === undefined || payloadSegment === undefined || signatureSegment === undefined)\n        return null;\n    if (extraSegments.length > 0)\n        return null;\n    return { headerSegment, payloadSegment, signatureSegment };\n}\nexport { scanEnvOptions, snakeToLowerCamel } from \"./envScan.js\";\n","// Path helpers for MulmoScript story artifacts. The generic build primitives\n// (slug + the `\"\"`/`.`/`..` traversal guard) live in the shared, browser-safe\n// `@mulmoclaude/core/artifacts` (#2405); only the story-specific wire-path\n// rules stay here.\n//\n// Path model: the stories directory lives at `<workspace>/artifacts/stories`\n// and the FileOps scope root is `<workspace>/artifacts`, so the\n// FileOps-relative path and the historical `stories/<name>.json` wire form\n// (which every mulmoScript endpoint keys on) are the SAME string. Stories are\n// NOT `YYYY/MM`-partitioned, so `storyFilePath` opts out of partitioning.\n\nimport { ARTIFACTS_ROOT, buildArtifactRelPath, hasUnsafePathSegment, slugifyArtifact } from \"@mulmoclaude/core/artifacts\";\n\n/**\n * The slice of `node:path` this rule needs.\n *\n * Injected with no default, and this module imports no `node:*` builtin: it is\n * reached from the browser entry through `core/plugin`, so a `node:path`\n * import here lands in the Vue bundle (Codex on #3017). The server passes its\n * own `path`; tests pass `path.win32` to reach the case below.\n */\nexport interface PathRules {\n  relative: (from: string, to: string) => string;\n  isAbsolute: (p: string) => boolean;\n  sep: string;\n}\n\n/**\n * The wire ref for an absolute path inside a stories root, or `null` when it\n * is not inside one.\n *\n * Pure, and taking its path rules as an argument, because the case that\n * matters is unreachable on the machine this is written on. `path.relative`\n * says \"not under the base\" in TWO ways and only one looks like an escape:\n * `../…` is the familiar one, and across Windows DRIVES there is no relative\n * path at all, so `relative(\"C:\\\\base\", \"D:\\\\x\")` answers `\"D:\\\\x\"` —\n * absolute, with no `..` for the escape check to catch. That minted\n * `stories/D:/anything`, a wire ref that reads back as a DIFFERENT file, which\n * is the substitution this function exists to refuse. Only Windows CI caught\n * it; here there is one root and always a relative route (#3015 post-merge).\n */\n/**\n * The path INSIDE a stories root that a wire path names, or null when it does\n * not name one.\n *\n * The default root's FileOps is rooted one level up, at `<workspace>/artifacts`,\n * so there the wire path and the FileOps path are the SAME string and nothing\n * is stripped. A named root's FileOps is rooted at the stories directory\n * itself — which is what a host naturally writes, having registered exactly\n * that directory in `extraRoots` — so the `stories/` prefix has to come off,\n * or the write lands in `<root>/stories/<rel>` while the read looks in\n * `<root>/<rel>` and the two are different files (#3020 review H1).\n */\nexport function storiesRelativePath(wirePath: string): string | null {\n  const normalized = normalizeStoryPath(wirePath);\n  if (normalized === null) return null;\n  return normalized.slice(`${STORIES_DIR}/`.length);\n}\n\nexport function storyRefWithin(base: string, absolutePath: string, rules: PathRules): string | null {\n  const relative = rules.relative(base, absolutePath);\n  if (rules.isAbsolute(relative)) return null;\n  const rel = relative.split(rules.sep).join(\"/\");\n  if (rel === \"..\" || rel.startsWith(\"../\")) return null;\n  return rel ? `${STORIES_DIR}/${rel}` : STORIES_DIR;\n}\n\nconst STORIES_DIR = \"stories\";\nconst STORY_FALLBACK_SLUG = \"story\";\n\n/** Lowercase-hyphen slug, capped, leading/trailing hyphens stripped; falls back\n *  to `fallback` for empty/undefined/non-ASCII input. */\nexport function slugify(title: string | undefined, fallback = STORY_FALLBACK_SLUG): string {\n  return slugifyArtifact(title, fallback);\n}\n\n/** Build a fresh, collision-safe story path for a new script —\n *  `stories/<slug>-<epoch-ms>.json`, valid as both the FileOps-relative\n *  write path and the wire `filePath`. */\nexport function storyFilePath(slugSource: string, now: Date = new Date()): string {\n  return buildArtifactRelPath({ dir: STORIES_DIR, title: slugSource, ext: \".json\", fallback: STORY_FALLBACK_SLUG, now, partitioned: false });\n}\n\n/**\n * Normalize a caller-supplied wire path to the canonical\n * `stories/<rel>` form, or null when it can't be trusted. Accepts the\n * canonical `stories/foo.json` convention, bare `foo.json` (the host route\n * historically allowed either), and the workspace-relative spelling\n * `artifacts/stories/foo.json` — the tool description called `filePath`\n * \"workspace-relative\" for a long time, so agents legitimately send it.\n * A leading `artifacts` segment is dropped only when `stories` follows;\n * a bare `artifacts/foo.json` keeps its historical meaning (a file named\n * `artifacts/foo.json` under the stories dir). Rejects absolute paths,\n * backslashes, and any empty / `.` / `..` segment — the lexical guard\n * before every `files.artifacts` read/write (FileOps re-checks\n * containment as defence-in-depth).\n */\nexport function normalizeStoryPath(filePath: string): string | null {\n  if (filePath.length === 0 || filePath.includes(\"\\\\\")) return null;\n  // Absolute POSIX path or Windows drive prefix.\n  if (filePath.startsWith(\"/\") || /^[A-Za-z]:/.test(filePath)) return null;\n  if (hasUnsafePathSegment(filePath)) return null;\n  const segments = filePath.split(\"/\");\n  const trimmed = segments[0] === ARTIFACTS_ROOT && segments[1] === STORIES_DIR ? segments.slice(1) : segments;\n  const rest = trimmed[0] === STORIES_DIR ? trimmed.slice(1) : trimmed;\n  if (rest.length === 0) return null;\n  return [STORIES_DIR, ...rest].join(\"/\");\n}\n","// Body validators for the mulmoScript update endpoints, moved verbatim from\n// the host's `server/api/routes/mulmoScriptValidate.ts` so MulmoClaude and\n// MulmoTerminal share one definition of a \"valid script\" / \"valid beat\".\n//\n// The `@mulmocast/types` package exports zod schemas that mirror the\n// canonical MulmoScript / MulmoBeat shapes. The same schemas back client-side\n// edit-time validation in the presentMulmoScript View.\n\nimport { mulmoBeatSchema, mulmoScriptSchema } from \"@mulmocast/types\";\n\nexport type ValidationResult<T> = { ok: true; value: T } | { ok: false; error: string };\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction formatZodIssues(\n  // Zod's `$ZodIssue.path` is `PropertyKey[]` (includes `symbol`).\n  // Accept the wider type so callers can pass `safeParse().error.issues`\n  // directly; stringify any non-string/number segments at format time.\n  issues: readonly { message: string; path: readonly PropertyKey[] }[],\n): string {\n  if (issues.length === 0) return \"invalid shape\";\n  const head = issues\n    .slice(0, 3)\n    .map((i) => {\n      const pathStr = i.path.length > 0 ? i.path.map((seg) => String(seg)).join(\".\") : \"<root>\";\n      return `${pathStr}: ${i.message}`;\n    })\n    .join(\"; \");\n  return issues.length > 3 ? `${head} (+${issues.length - 3} more)` : head;\n}\n\n/** Shared prelude: require an object body carrying a non-empty\n *  `filePath`. On success returns the narrowed record + filePath so the\n *  caller reads the remaining fields without re-narrowing. */\nfunction validateFilePathBody(body: unknown): ValidationResult<{ record: Record<string, unknown>; filePath: string }> {\n  if (!isRecord(body)) {\n    return { ok: false, error: \"body must be an object\" };\n  }\n  if (typeof body.filePath !== \"string\" || body.filePath === \"\") {\n    return { ok: false, error: \"filePath must be a non-empty string\" };\n  }\n  return { ok: true, value: { record: body, filePath: body.filePath } };\n}\n\n/**\n * Validate the `update-script` request body. Returns the parsed,\n * schema-conformant script on success, or a human-readable error\n * suitable for sending back as a 400 response.\n */\nexport function validateUpdateScriptBody(body: unknown): ValidationResult<{\n  filePath: string;\n  script: unknown;\n}> {\n  const base = validateFilePathBody(body);\n  if (!base.ok) return base;\n  const { record, filePath } = base.value;\n  if (record.script === undefined) {\n    return { ok: false, error: \"script is required\" };\n  }\n  const parsed = mulmoScriptSchema.safeParse(record.script);\n  if (!parsed.success) {\n    return {\n      ok: false,\n      error: `invalid script: ${formatZodIssues(parsed.error.issues)}`,\n    };\n  }\n  return {\n    ok: true,\n    value: { filePath, script: parsed.data },\n  };\n}\n\n/**\n * Validate the `update-beat` request body. `beatIndex` is allowed\n * to be any non-negative integer; the handler still bounds-checks\n * against the actual script length after reading the file.\n */\nexport function validateUpdateBeatBody(body: unknown): ValidationResult<{\n  filePath: string;\n  beatIndex: number;\n  beat: unknown;\n}> {\n  const base = validateFilePathBody(body);\n  if (!base.ok) return base;\n  const { record, filePath } = base.value;\n  const beatIndex = record.beatIndex;\n  if (typeof beatIndex !== \"number\" || !Number.isInteger(beatIndex) || beatIndex < 0) {\n    return { ok: false, error: \"beatIndex must be a non-negative integer\" };\n  }\n  if (record.beat === undefined) {\n    return { ok: false, error: \"beat is required\" };\n  }\n  const parsed = mulmoBeatSchema.safeParse(record.beat);\n  if (!parsed.success) {\n    return {\n      ok: false,\n      error: `invalid beat: ${formatZodIssues(parsed.error.issues)}`,\n    };\n  }\n  return {\n    ok: true,\n    value: {\n      filePath,\n      beatIndex,\n      beat: parsed.data,\n    },\n  };\n}\n","import type { ToolPluginCore, ToolResult } from \"gui-chat-protocol\";\nimport { mulmoScriptSchema } from \"@mulmocast/types\";\nimport { errorMessage } from \"@mulmoclaude/common\";\nimport { TOOL_DEFINITION } from \"./definition\";\nimport { normalizeStoryPath, storyFilePath } from \"./paths\";\nimport { validateUpdateBeatBody, validateUpdateScriptBody } from \"./validate\";\nimport type { MulmoScriptData, MulmoScriptExecuteContext, SaveMulmoScriptArgs } from \"./types\";\n\n/** Failure half of every outcome below. `code` preserves the hosts'\n *  HTTP contract (bad_request → 400, not_found → 404) without the package\n *  knowing anything about HTTP. */\nexport interface MulmoScriptFailure {\n  ok: false;\n  code: \"bad_request\" | \"not_found\";\n  error: string;\n}\n\nexport type SaveMulmoScriptOutcome = ({ ok: true; message: string } & MulmoScriptData) | MulmoScriptFailure;\n\nexport type UpdateMulmoScriptOutcome = { ok: true } | MulmoScriptFailure;\n\nfunction badRequest(error: string): MulmoScriptFailure {\n  return { ok: false, code: \"bad_request\", error };\n}\n\nfunction notFound(error: string): MulmoScriptFailure {\n  return { ok: false, code: \"not_found\", error };\n}\n\nfunction stringifyScript(script: unknown): string {\n  // 2-space indent matches the hosts' writeJsonAtomic convention so a\n  // package-written script diffs cleanly against host-written ones.\n  return JSON.stringify(script, null, 2);\n}\n\n/** Persist a new, schema-validated script under a fresh `stories/…` path. */\nasync function saveNewScript(context: MulmoScriptExecuteContext, script: unknown, filename: string | undefined, now: Date): Promise<SaveMulmoScriptOutcome> {\n  const validation = mulmoScriptSchema.safeParse(script);\n  if (!validation.success) {\n    return badRequest(\"script is not a valid MulmoScript\");\n  }\n  const validatedScript = validation.data;\n  // slugify drops `/`, `\\`, and `..`, so a hostile `filename` like\n  // \"../../etc/passwd\" can never escape the stories dir — defense in\n  // depth on top of FileOps' own containment check.\n  const slugSource = filename ? filename.replace(/\\.json$/i, \"\") : validatedScript.title || \"untitled\";\n  const filePath = storyFilePath(slugSource, now);\n  await context.files.artifacts.write(filePath, stringifyScript(validatedScript));\n  return { ok: true, script: validatedScript, filePath, message: `Saved MulmoScript to ${filePath}` };\n}\n\n/** Re-open an existing script: containment guard, existence, JSON parse,\n *  schema validation — same acceptance rules as the save path so a script\n *  this package saved can never be one it later refuses to load. */\nasync function loadExistingScript(context: MulmoScriptExecuteContext, filePath: string): Promise<SaveMulmoScriptOutcome> {\n  if (!filePath.toLowerCase().endsWith(\".json\")) {\n    return badRequest(\"filePath must point to a .json file\");\n  }\n  const storyPath = normalizeStoryPath(filePath);\n  if (!storyPath) {\n    return badRequest(\"Invalid filePath\");\n  }\n  if (!(await context.files.artifacts.exists(storyPath))) {\n    return notFound(`File not found: ${filePath}`);\n  }\n  const raw = await context.files.artifacts.read(storyPath);\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch (err) {\n    return badRequest(`Invalid JSON: ${errorMessage(err)}`);\n  }\n  const validation = mulmoScriptSchema.safeParse(parsed);\n  if (!validation.success) {\n    return badRequest(\"File is not a valid MulmoScript\");\n  }\n  return { ok: true, script: validation.data, filePath: storyPath, message: `Loaded MulmoScript from ${storyPath}` };\n}\n\n/**\n * Unified save-or-reopen for the presentMulmoScript tool call. `script`\n * (create new) and `filePath` (existing) are mutually exclusive. Never\n * throws on bad input — validation failures come back as discriminated\n * failures so host routes stay thin adapters. `autoGenerateMovie` is NOT\n * handled here: movie generation needs host backends (mulmocast/ffmpeg),\n * so hosts that support it trigger it from the returned `filePath`.\n */\nexport async function executeMulmoScriptSave(\n  context: MulmoScriptExecuteContext,\n  args: SaveMulmoScriptArgs,\n  now: Date = new Date(),\n): Promise<SaveMulmoScriptOutcome> {\n  const { script, filename, filePath, beatIndex, beat } = args ?? {};\n  const hasScript = script !== undefined && script !== null;\n  const hasFilePath = typeof filePath === \"string\" && filePath !== \"\";\n  if (hasScript === hasFilePath) {\n    return badRequest(\n      hasScript ? \"Provide either `script` or `filePath`, not both.\" : \"Provide either `script` (new presentation) or `filePath` (existing presentation).\",\n    );\n  }\n  if (!hasFilePath) return saveNewScript(context, script, typeof filename === \"string\" ? filename : undefined, now);\n\n  // `filePath` + `beatIndex` + `beat` replaces one beat before displaying, so revising a single\n  // slide does not mean re-sending a whole deck. Both halves are required together: an index\n  // with no replacement, or a replacement with no index, is a caller mistake worth reporting\n  // rather than silently ignoring — it would look like a successful edit that changed nothing.\n  const wantsBeatEdit = beatIndex !== undefined || beat !== undefined;\n  if (wantsBeatEdit) {\n    if (beatIndex === undefined || beat === undefined) {\n      return badRequest(\"`beatIndex` and `beat` go together — pass both to replace one beat, or neither to re-display.\");\n    }\n    const updated = await executeUpdateBeat(context, { filePath, beatIndex, beat });\n    if (!updated.ok) return updated;\n  }\n  return loadExistingScript(context, filePath);\n}\n\n/** Resolve + guard a wire path for the update endpoints. */\nasync function resolveExistingStory(context: MulmoScriptExecuteContext, filePath: string): Promise<{ storyPath: string } | MulmoScriptFailure> {\n  const storyPath = normalizeStoryPath(filePath);\n  if (!storyPath) return badRequest(\"Invalid filePath\");\n  if (!(await context.files.artifacts.exists(storyPath))) {\n    return notFound(`File not found: ${filePath}`);\n  }\n  return { storyPath };\n}\n\n/** Overwrite one beat of an existing script (the View's per-beat source\n *  editor). Validates the body shape + beat schema, bounds-checks the index\n *  against the script on disk, and writes the whole file back. */\nexport async function executeUpdateBeat(context: MulmoScriptExecuteContext, body: unknown): Promise<UpdateMulmoScriptOutcome> {\n  const validation = validateUpdateBeatBody(body);\n  if (!validation.ok) return badRequest(validation.error);\n  const { filePath, beatIndex, beat } = validation.value;\n\n  const resolved = await resolveExistingStory(context, filePath);\n  if (\"ok\" in resolved) return resolved;\n\n  let script: { beats?: unknown[] };\n  try {\n    script = JSON.parse(await context.files.artifacts.read(resolved.storyPath));\n  } catch (err) {\n    return badRequest(`Invalid JSON: ${errorMessage(err)}`);\n  }\n  if (!Array.isArray(script.beats) || beatIndex >= script.beats.length) {\n    return badRequest(\"Invalid beatIndex\");\n  }\n  script.beats[beatIndex] = beat;\n  await context.files.artifacts.write(resolved.storyPath, stringifyScript(script));\n  return { ok: true };\n}\n\n/** Overwrite the whole script (the View's full-source editor / deck-editor\n *  auto-save). The body's `script` is schema-validated by\n *  `validateUpdateScriptBody` before the write. */\nexport async function executeUpdateScript(context: MulmoScriptExecuteContext, body: unknown): Promise<UpdateMulmoScriptOutcome> {\n  const validation = validateUpdateScriptBody(body);\n  if (!validation.ok) return badRequest(validation.error);\n  const { filePath, script } = validation.value;\n\n  const resolved = await resolveExistingStory(context, filePath);\n  if (\"ok\" in resolved) return resolved;\n\n  await context.files.artifacts.write(resolved.storyPath, stringifyScript(script));\n  return { ok: true };\n}\n\n/** ToolResult-shaped wrapper over `executeMulmoScriptSave` for runtime hosts\n *  (e.g. MulmoTerminal's package loader), where the tool call resolves to a\n *  ToolResult rather than an HTTP response. Failures are narrate-only\n *  (message, no data) so the agent can self-correct. */\nexport async function executeMulmoScript(context: MulmoScriptExecuteContext, args: SaveMulmoScriptArgs): Promise<ToolResult<MulmoScriptData>> {\n  const outcome = await executeMulmoScriptSave(context, args);\n  if (!outcome.ok) {\n    return {\n      message: outcome.error,\n      instructions: \"Acknowledge the error and retry with a valid `script` (new) or an existing `filePath`.\",\n    };\n  }\n  // The tool schema advertises `autoGenerateMovie`, but movie generation\n  // needs host backends (mulmocast/ffmpeg) this generic execute path\n  // doesn't have — MulmoClaude honours the flag in its own save route.\n  // Say so in the result rather than silently dropping the option, so the\n  // agent doesn't tell the user a movie is on its way.\n  const ignoredMovieNote = args.autoGenerateMovie === true ? \" (autoGenerateMovie is not supported by this host and was ignored)\" : \"\";\n  return {\n    message: `${outcome.message}${ignoredMovieNote}`,\n    data: { script: outcome.script, filePath: outcome.filePath },\n    instructions: \"Display the storyboard to the user.\",\n  };\n}\n\n/** Non-Vue plugin core for runtime hosts that register the package directly.\n *  MulmoClaude consumes only TOOL_DEFINITION + the execute functions in its\n *  own routes, so it doesn't use this. */\nexport const pluginCore: ToolPluginCore<MulmoScriptData, MulmoScriptData, SaveMulmoScriptArgs> = {\n  toolDefinition: TOOL_DEFINITION,\n  execute: executeMulmoScript as unknown as ToolPluginCore<MulmoScriptData, MulmoScriptData, SaveMulmoScriptArgs>[\"execute\"],\n  generatingMessage: \"Generating MulmoScript storyboard…\",\n  isEnabled: () => true,\n};\n"],"mappings":";;;AAEA,IAAa,YAAY;AAMzB,IAAa,kBAAkC;CAC7C,MAAM;CACN,MAAM;CACN,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmFb,YAAY;EACV,MAAM;EACN,YAAY;GACV,QAAQ;IACN,MAAM;IACN,aACE;IACF,sBAAsB;GACxB;GACA,UAAU;IACR,MAAM;IACN,aACE;GACJ;GACA,UAAU;IACR,MAAM;IACN,aACE;GACJ;GACA,WAAW;IACT,MAAM;IACN,aAAa;GACf;GACA,MAAM;IACJ,MAAM;IACN,aAAa;IACb,sBAAsB;GACxB;GACA,mBAAmB;IACjB,MAAM;IACN,aACE;GACJ;EACF;EACA,UAAU,CAAC;CACb;AACF;;;;AC1HA,SAAgBA,WAAS,OAAO;CAC5B,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC9E;;AA+BA,SAAgB,cAAc,OAAO,KAAK;CACtC,OAAOA,WAAS,KAAK,KAAK,OAAO,MAAM,SAAS;AACpD;;;;;;;;;;;;AA8BA,SAAgB,aAAa,KAAK,UAAU;CACxC,IAAI,eAAe,OACf,OAAO,IAAI;CACf,IAAI,cAAc,KAAK,SAAS,KAAK,IAAI,SACrC,OAAO,IAAI;CACf,IAAI,cAAc,KAAK,SAAS,KAAK,IAAI,SACrC,OAAO,IAAI;CACf,IAAI,aAAa,KAAA,GACb,OAAO;CACX,OAAO,OAAO,GAAG;AACrB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC9BA,SAAgB,oBAAoB,UAAiC;CACnE,MAAM,aAAa,mBAAmB,QAAQ;CAC9C,IAAI,eAAe,MAAM,OAAO;CAChC,OAAO,WAAW,MAAM,GAAG,YAAY,GAAG,MAAM;AAClD;AAEA,SAAgB,eAAe,MAAc,cAAsB,OAAiC;CAClG,MAAM,WAAW,MAAM,SAAS,MAAM,YAAY;CAClD,IAAI,MAAM,WAAW,QAAQ,GAAG,OAAO;CACvC,MAAM,MAAM,SAAS,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG;CAC9C,IAAI,QAAQ,QAAQ,IAAI,WAAW,KAAK,GAAG,OAAO;CAClD,OAAO,MAAM,GAAG,YAAY,GAAG,QAAQ;AACzC;AAEA,IAAM,cAAc;AACpB,IAAM,sBAAsB;;;AAI5B,SAAgB,QAAQ,OAA2B,WAAW,qBAA6B;CACzF,OAAO,gBAAgB,OAAO,QAAQ;AACxC;;;;AAKA,SAAgB,cAAc,YAAoB,sBAAY,IAAI,KAAK,GAAW;CAChF,OAAO,qBAAqB;EAAE,KAAK;EAAa,OAAO;EAAY,KAAK;EAAS,UAAU;EAAqB;EAAK,aAAa;CAAM,CAAC;AAC3I;;;;;;;;;;;;;;;AAgBA,SAAgB,mBAAmB,UAAiC;CAClE,IAAI,SAAS,WAAW,KAAK,SAAS,SAAS,IAAI,GAAG,OAAO;CAE7D,IAAI,SAAS,WAAW,GAAG,KAAK,aAAa,KAAK,QAAQ,GAAG,OAAO;CACpE,IAAI,qBAAqB,QAAQ,GAAG,OAAO;CAC3C,MAAM,WAAW,SAAS,MAAM,GAAG;CACnC,MAAM,UAAU,SAAS,OAAO,kBAAkB,SAAS,OAAO,cAAc,SAAS,MAAM,CAAC,IAAI;CACpG,MAAM,OAAO,QAAQ,OAAO,cAAc,QAAQ,MAAM,CAAC,IAAI;CAC7D,IAAI,KAAK,WAAW,GAAG,OAAO;CAC9B,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG;AACxC;;;AC/FA,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,gBAIP,QACQ;CACR,IAAI,OAAO,WAAW,GAAG,OAAO;CAChC,MAAM,OAAO,OACV,MAAM,GAAG,CAAC,CAAC,CACX,KAAK,MAAM;EAEV,OAAO,GADS,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,KAAK,QAAQ,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,SAC/D,IAAI,EAAE;CAC1B,CAAC,CAAC,CACD,KAAK,IAAI;CACZ,OAAO,OAAO,SAAS,IAAI,GAAG,KAAK,KAAK,OAAO,SAAS,EAAE,UAAU;AACtE;;;;AAKA,SAAS,qBAAqB,MAAwF;CACpH,IAAI,CAAC,SAAS,IAAI,GAChB,OAAO;EAAE,IAAI;EAAO,OAAO;CAAyB;CAEtD,IAAI,OAAO,KAAK,aAAa,YAAY,KAAK,aAAa,IACzD,OAAO;EAAE,IAAI;EAAO,OAAO;CAAsC;CAEnE,OAAO;EAAE,IAAI;EAAM,OAAO;GAAE,QAAQ;GAAM,UAAU,KAAK;EAAS;CAAE;AACtE;;;;;;AAOA,SAAgB,yBAAyB,MAGtC;CACD,MAAM,OAAO,qBAAqB,IAAI;CACtC,IAAI,CAAC,KAAK,IAAI,OAAO;CACrB,MAAM,EAAE,QAAQ,aAAa,KAAK;CAClC,IAAI,OAAO,WAAW,KAAA,GACpB,OAAO;EAAE,IAAI;EAAO,OAAO;CAAqB;CAElD,MAAM,SAAS,kBAAkB,UAAU,OAAO,MAAM;CACxD,IAAI,CAAC,OAAO,SACV,OAAO;EACL,IAAI;EACJ,OAAO,mBAAmB,gBAAgB,OAAO,MAAM,MAAM;CAC/D;CAEF,OAAO;EACL,IAAI;EACJ,OAAO;GAAE;GAAU,QAAQ,OAAO;EAAK;CACzC;AACF;;;;;;AAOA,SAAgB,uBAAuB,MAIpC;CACD,MAAM,OAAO,qBAAqB,IAAI;CACtC,IAAI,CAAC,KAAK,IAAI,OAAO;CACrB,MAAM,EAAE,QAAQ,aAAa,KAAK;CAClC,MAAM,YAAY,OAAO;CACzB,IAAI,OAAO,cAAc,YAAY,CAAC,OAAO,UAAU,SAAS,KAAK,YAAY,GAC/E,OAAO;EAAE,IAAI;EAAO,OAAO;CAA2C;CAExE,IAAI,OAAO,SAAS,KAAA,GAClB,OAAO;EAAE,IAAI;EAAO,OAAO;CAAmB;CAEhD,MAAM,SAAS,gBAAgB,UAAU,OAAO,IAAI;CACpD,IAAI,CAAC,OAAO,SACV,OAAO;EACL,IAAI;EACJ,OAAO,iBAAiB,gBAAgB,OAAO,MAAM,MAAM;CAC7D;CAEF,OAAO;EACL,IAAI;EACJ,OAAO;GACL;GACA;GACA,MAAM,OAAO;EACf;CACF;AACF;;;ACxFA,SAAS,WAAW,OAAmC;CACrD,OAAO;EAAE,IAAI;EAAO,MAAM;EAAe;CAAM;AACjD;AAEA,SAAS,SAAS,OAAmC;CACnD,OAAO;EAAE,IAAI;EAAO,MAAM;EAAa;CAAM;AAC/C;AAEA,SAAS,gBAAgB,QAAyB;CAGhD,OAAO,KAAK,UAAU,QAAQ,MAAM,CAAC;AACvC;;AAGA,eAAe,cAAc,SAAoC,QAAiB,UAA8B,KAA4C;CAC1J,MAAM,aAAa,kBAAkB,UAAU,MAAM;CACrD,IAAI,CAAC,WAAW,SACd,OAAO,WAAW,mCAAmC;CAEvD,MAAM,kBAAkB,WAAW;CAKnC,MAAM,WAAW,cADE,WAAW,SAAS,QAAQ,YAAY,EAAE,IAAI,gBAAgB,SAAS,YAC/C,GAAG;CAC9C,MAAM,QAAQ,MAAM,UAAU,MAAM,UAAU,gBAAgB,eAAe,CAAC;CAC9E,OAAO;EAAE,IAAI;EAAM,QAAQ;EAAiB;EAAU,SAAS,wBAAwB;CAAW;AACpG;;;;AAKA,eAAe,mBAAmB,SAAoC,UAAmD;CACvH,IAAI,CAAC,SAAS,YAAY,CAAC,CAAC,SAAS,OAAO,GAC1C,OAAO,WAAW,qCAAqC;CAEzD,MAAM,YAAY,mBAAmB,QAAQ;CAC7C,IAAI,CAAC,WACH,OAAO,WAAW,kBAAkB;CAEtC,IAAI,CAAE,MAAM,QAAQ,MAAM,UAAU,OAAO,SAAS,GAClD,OAAO,SAAS,mBAAmB,UAAU;CAE/C,MAAM,MAAM,MAAM,QAAQ,MAAM,UAAU,KAAK,SAAS;CACxD,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,GAAG;CACzB,SAAS,KAAK;EACZ,OAAO,WAAW,iBAAiB,aAAa,GAAG,GAAG;CACxD;CACA,MAAM,aAAa,kBAAkB,UAAU,MAAM;CACrD,IAAI,CAAC,WAAW,SACd,OAAO,WAAW,iCAAiC;CAErD,OAAO;EAAE,IAAI;EAAM,QAAQ,WAAW;EAAM,UAAU;EAAW,SAAS,2BAA2B;CAAY;AACnH;;;;;;;;;AAUA,eAAsB,uBACpB,SACA,MACA,sBAAY,IAAI,KAAK,GACY;CACjC,MAAM,EAAE,QAAQ,UAAU,UAAU,WAAW,SAAS,QAAQ,CAAC;CACjE,MAAM,YAAY,WAAW,KAAA,KAAa,WAAW;CACrD,MAAM,cAAc,OAAO,aAAa,YAAY,aAAa;CACjE,IAAI,cAAc,aAChB,OAAO,WACL,YAAY,qDAAqD,mFACnE;CAEF,IAAI,CAAC,aAAa,OAAO,cAAc,SAAS,QAAQ,OAAO,aAAa,WAAW,WAAW,KAAA,GAAW,GAAG;CAOhH,IADsB,cAAc,KAAA,KAAa,SAAS,KAAA,GACvC;EACjB,IAAI,cAAc,KAAA,KAAa,SAAS,KAAA,GACtC,OAAO,WAAW,+FAA+F;EAEnH,MAAM,UAAU,MAAM,kBAAkB,SAAS;GAAE;GAAU;GAAW;EAAK,CAAC;EAC9E,IAAI,CAAC,QAAQ,IAAI,OAAO;CAC1B;CACA,OAAO,mBAAmB,SAAS,QAAQ;AAC7C;;AAGA,eAAe,qBAAqB,SAAoC,UAAuE;CAC7I,MAAM,YAAY,mBAAmB,QAAQ;CAC7C,IAAI,CAAC,WAAW,OAAO,WAAW,kBAAkB;CACpD,IAAI,CAAE,MAAM,QAAQ,MAAM,UAAU,OAAO,SAAS,GAClD,OAAO,SAAS,mBAAmB,UAAU;CAE/C,OAAO,EAAE,UAAU;AACrB;;;;AAKA,eAAsB,kBAAkB,SAAoC,MAAkD;CAC5H,MAAM,aAAa,uBAAuB,IAAI;CAC9C,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,WAAW,KAAK;CACtD,MAAM,EAAE,UAAU,WAAW,SAAS,WAAW;CAEjD,MAAM,WAAW,MAAM,qBAAqB,SAAS,QAAQ;CAC7D,IAAI,QAAQ,UAAU,OAAO;CAE7B,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,MAAM,QAAQ,MAAM,UAAU,KAAK,SAAS,SAAS,CAAC;CAC5E,SAAS,KAAK;EACZ,OAAO,WAAW,iBAAiB,aAAa,GAAG,GAAG;CACxD;CACA,IAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,KAAK,aAAa,OAAO,MAAM,QAC5D,OAAO,WAAW,mBAAmB;CAEvC,OAAO,MAAM,aAAa;CAC1B,MAAM,QAAQ,MAAM,UAAU,MAAM,SAAS,WAAW,gBAAgB,MAAM,CAAC;CAC/E,OAAO,EAAE,IAAI,KAAK;AACpB;;;;AAKA,eAAsB,oBAAoB,SAAoC,MAAkD;CAC9H,MAAM,aAAa,yBAAyB,IAAI;CAChD,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,WAAW,KAAK;CACtD,MAAM,EAAE,UAAU,WAAW,WAAW;CAExC,MAAM,WAAW,MAAM,qBAAqB,SAAS,QAAQ;CAC7D,IAAI,QAAQ,UAAU,OAAO;CAE7B,MAAM,QAAQ,MAAM,UAAU,MAAM,SAAS,WAAW,gBAAgB,MAAM,CAAC;CAC/E,OAAO,EAAE,IAAI,KAAK;AACpB;;;;;AAMA,eAAsB,mBAAmB,SAAoC,MAAiE;CAC5I,MAAM,UAAU,MAAM,uBAAuB,SAAS,IAAI;CAC1D,IAAI,CAAC,QAAQ,IACX,OAAO;EACL,SAAS,QAAQ;EACjB,cAAc;CAChB;CAOF,MAAM,mBAAmB,KAAK,sBAAsB,OAAO,uEAAuE;CAClI,OAAO;EACL,SAAS,GAAG,QAAQ,UAAU;EAC9B,MAAM;GAAE,QAAQ,QAAQ;GAAQ,UAAU,QAAQ;EAAS;EAC3D,cAAc;CAChB;AACF;;;;AAKA,IAAa,aAAoF;CAC/F,gBAAgB;CAChB,SAAS;CACT,mBAAmB;CACnB,iBAAiB;AACnB"}

package/dist/server/dispatch.d.ts

@@ -1,10 +1,4 @@
 import type { MulmoScriptServerOps } from "./ops";
 export type MulmoScriptDispatchHandler = (args: Record<string, unknown>) => Promise<unknown>;
-/**
- * Build the kind router over an ops instance. The save / reopen / update
- * kinds run the phase-1 core executes against the backend's artifacts
- * FileOps, guarded by the instance's realpath containment
- * (`guardStoryWirePath`) — the core's own guard is lexical.
- */
 export declare function createMulmoScriptDispatchHandler(ops: MulmoScriptServerOps): MulmoScriptDispatchHandler;
 //# sourceMappingURL=dispatch.d.ts.map

package/dist/server/dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../src/server/dispatch.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,OAAO,CAAC;AAqElD,MAAM,MAAM,0BAA0B,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAE7F;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,oBAAoB,GAAG,0BAA0B,CA2FtG"}
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../src/server/dispatch.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,OAAO,CAAC;AAsElD,MAAM,MAAM,0BAA0B,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AA8B7F,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,oBAAoB,GAAG,0BAA0B,CAwJtG"}

package/dist/server/ops.d.ts

@@ -1,3 +1,4 @@
+import type { FileOps } from "gui-chat-protocol";
 import type { MulmoBeat, MulmoStudioContext } from "@mulmocast/types";
 import type { MulmoScriptGenerationEvent } from "../core/contract";
 import type { GenerateOpArgsWith, MovieGenerationResult, MovieProgressEvent, MulmoScriptServerBackend, OpFailure, OpResult, PdfGenerationResult } from "./types";
@@ -7,7 +8,7 @@ export declare const PDF_SIZE: "a4";
 export declare function buildContext(absoluteFilePath: string, force?: boolean): Promise<MulmoStudioContext | null | undefined>;
 export type StoryContext = NonNullable<Awaited<ReturnType<typeof buildContext>>>;
 export interface RunStoryOpDeps {
-    resolveStory?: (filePath: string) => {
+    resolveStory?: (filePath: string, root?: string) => {
         ok: true;
         absolutePath: string;
     } | OpFailure;
@@ -15,6 +16,9 @@ export interface RunStoryOpDeps {
 }
 export interface RunStoryOpOptions<T> {
     force?: boolean | undefined;
+    /** Which registered stories root `filePath` is relative to (#3014).
+     *  Absent = the host's default root, i.e. exactly the pre-roots path. */
+    root?: string | undefined;
     /**
      * Op-specific tag included in the failure log so dashboards can
      * distinguish which op is failing (e.g. `"generate-beat-audio"`).
@@ -38,36 +42,43 @@ export declare function buildBeatIdIndex(beats: MulmoBeat[]): Map<string, number
  */
 export declare function createMulmoScriptServerOps(backend: MulmoScriptServerBackend): {
     backend: MulmoScriptServerBackend;
-    toStoryRef: (absolutePath: string) => string;
-    resolveStory: (filePath: string) => {
+    toStoryRef: (absolutePath: string, root?: string) => string | null;
+    resolveStory: (filePath: string, root?: string) => {
         ok: true;
         absolutePath: string;
     } | OpFailure;
-    guardStoryWirePath: (filePath: unknown) => OpFailure | null;
+    guardStoryWirePath: (filePath: unknown, root?: string) => OpFailure | null;
+    guardStoryRootRegistered: (root: string | undefined) => OpFailure | null;
+    guardStoryWriteRoot: (root: string | undefined) => OpFailure | null;
+    artifactsForRoot: (root: string | undefined) => FileOps | null;
+    guardStoryGenerationRoot: (root: string | undefined) => OpFailure | null;
     ffmpegGuard: () => OpFailure | null;
     runStoryOp: <T>(filePath: string, options: RunStoryOpOptions<T>, handler: (ctx: {
         absoluteFilePath: string;
         context: StoryContext;
     }) => Promise<OpResult<T>>, deps?: RunStoryOpDeps) => Promise<OpResult<T>>;
-    publishGeneration: (chatSessionId: string | undefined, kind: GenerationKind, filePath: string, key: string, finished: boolean, error?: string) => void;
-    publishScriptChanged: (filePath: string, origin?: string) => void;
-    pendingGenerations: (filePath: string) => MulmoScriptGenerationEvent[];
-    beatImageOp: (filePath: string, beatIndex: number) => Promise<OpResult<{
+    publishGeneration: (chatSessionId: string | undefined, kind: GenerationKind, filePath: string, key: string, finished: boolean, opts?: {
+        error?: string | undefined;
+        root?: string | undefined;
+    }) => void;
+    publishScriptChanged: (filePath: string, origin?: string, root?: string) => void;
+    pendingGenerations: (filePath: string, root?: string) => MulmoScriptGenerationEvent[];
+    beatImageOp: (filePath: string, beatIndex: number, root?: string) => Promise<OpResult<{
         image: string | null;
     }>>;
-    beatAudioOp: (filePath: string, beatIndex: number) => Promise<OpResult<{
+    beatAudioOp: (filePath: string, beatIndex: number, root?: string) => Promise<OpResult<{
         audio: string | null;
     }>>;
-    beatMovieOp: (filePath: string, beatIndex: number) => Promise<OpResult<{
+    beatMovieOp: (filePath: string, beatIndex: number, root?: string) => Promise<OpResult<{
         moviePath: string | null;
     }>>;
-    characterImageOp: (filePath: string, key: string) => Promise<OpResult<{
+    characterImageOp: (filePath: string, key: string, root?: string) => Promise<OpResult<{
         image: string | null;
     }>>;
-    movieStatusOp: (filePath: string) => Promise<OpResult<{
+    movieStatusOp: (filePath: string, root?: string) => Promise<OpResult<{
         moviePath: string | null;
     }>>;
-    pdfStatusOp: (filePath: string) => Promise<OpResult<{
+    pdfStatusOp: (filePath: string, root?: string) => Promise<OpResult<{
         pdfPath: string | null;
     }>>;
     renderBeatOp: (args: GenerateOpArgsWith<"filePath" | "beatIndex">) => Promise<OpResult<{
@@ -79,23 +90,23 @@ export declare function createMulmoScriptServerOps(backend: MulmoScriptServerBac
     renderCharacterOp: (args: GenerateOpArgsWith<"filePath" | "key">) => Promise<OpResult<{
         image: string;
     }>>;
-    uploadBeatImageOp: (filePath: string, beatIndex: number, imageData: string) => Promise<OpResult<{
+    uploadBeatImageOp: (filePath: string, beatIndex: number, imageData: string, root?: string) => Promise<OpResult<{
         image: string;
     }>>;
-    uploadCharacterImageOp: (filePath: string, key: string, imageData: string) => Promise<OpResult<{
+    uploadCharacterImageOp: (filePath: string, key: string, imageData: string, root?: string) => Promise<OpResult<{
         image: string;
     }>>;
     inFlightMovies: Set<string>;
     inFlightPdfs: Set<string>;
     runMovieGeneration: (absoluteFilePath: string, onProgressEvent: (event: MovieProgressEvent) => void) => Promise<MovieGenerationResult>;
     runPdfGeneration: (context: StoryContext, onImageBeatDone: (beatIndex: number) => void) => Promise<PdfGenerationResult>;
-    generateMovieOp: (filePath: string, chatSessionId: string | undefined) => Promise<OpResult<{
+    generateMovieOp: (filePath: string, chatSessionId: string | undefined, root?: string) => Promise<OpResult<{
         moviePath: string;
     }>>;
-    generatePdfOp: (filePath: string, chatSessionId: string | undefined) => Promise<OpResult<{
+    generatePdfOp: (filePath: string, chatSessionId: string | undefined, root?: string) => Promise<OpResult<{
         pdfPath: string;
     }>>;
-    triggerAutoBackgroundMovie: (absoluteFilePath: string, wireFilePath: string, chatSessionId: string | undefined) => void;
+    triggerAutoBackgroundMovie: (absoluteFilePath: string, wireFilePath: string, chatSessionId: string | undefined, root?: string) => void;
 };
 export type MulmoScriptServerOps = ReturnType<typeof createMulmoScriptServerOps>;
 export {};

package/dist/server/ops.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ops.d.ts","sourceRoot":"","sources":["../../src/server/ops.ts"],"names":[],"mappings":"AA0CA,OAAO,KAAK,EAAE,SAAS,EAAyB,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC7F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAMnE,OAAO,KAAK,EACV,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,wBAAwB,EAExB,SAAS,EACT,QAAQ,EACR,mBAAmB,EACpB,MAAM,SAAS,CAAC;AAEjB,KAAK,cAAc,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;AAKzD,eAAO,MAAM,QAAQ,EAAG,OAAgB,CAAC;AACzC,eAAO,MAAM,QAAQ,EAAG,IAAa,CAAC;AAmBtC,wBAAsB,YAAY,CAAC,gBAAgB,EAAE,MAAM,EAAE,KAAK,UAAQ,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,GAAG,SAAS,CAAC,CAa1H;AAGD,MAAM,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;AAEjF,MAAM,WAAW,cAAc;IAC7B,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACpF,YAAY,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;CACjG;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;CACtC;AAMD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxE;AAsCD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,wBAAwB;;+BAcxC,MAAM,KAAG,MAAM;6BAiCjB,MAAM,KAAG;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS;mCA2DjD,OAAO,KAAG,SAAS,GAAG,IAAI;uBAWxC,SAAS,GAAG,IAAI;iBAiFd,CAAC,YACf,MAAM,WACP,iBAAiB,CAAC,CAAC,CAAC,WACpB,CAAC,GAAG,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,YAAY,CAAA;KAAE,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SACrF,cAAc,KACnB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;uCAtDmB,MAAM,GAAG,SAAS,QAAQ,cAAc,YAAY,MAAM,OAAO,MAAM,YAAY,OAAO,UAAU,MAAM,KAAG,IAAI;qCA4BnH,MAAM,WAAW,MAAM,KAAG,IAAI;mCAMhC,MAAM,KAAG,0BAA0B,EAAE;4BAiDtC,MAAM,aAAa,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;4BAWvE,MAAM,aAAa,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;4BAqBvE,MAAM,aAAa,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;iCAStE,MAAM,OAAO,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;8BAmBpE,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;4BAQ1D,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;yBASzD,kBAAkB,CAAC,UAAU,GAAG,WAAW,CAAC,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;gCA4B5E,kBAAkB,CAAC,UAAU,GAAG,WAAW,CAAC,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;8BAyCrF,kBAAkB,CAAC,UAAU,GAAG,KAAK,CAAC,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;kCAuCzE,MAAM,aAAa,MAAM,aAAa,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;uCAW9E,MAAM,OAAO,MAAM,aAAa,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;;;2CA6BzE,MAAM,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,KAAG,OAAO,CAAC,qBAAqB,CAAC;gCA0JxG,YAAY,mBAAmB,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,KAAG,OAAO,CAAC,mBAAmB,CAAC;gCAnHzF,MAAM,iBAAiB,MAAM,GAAG,SAAS,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;8BA0ItF,MAAM,iBAAiB,MAAM,GAAG,SAAS,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;mDAzGnE,MAAM,gBAAgB,MAAM,iBAAiB,MAAM,GAAG,SAAS,KAAG,IAAI;EA2K7H;AAED,MAAM,MAAM,oBAAoB,GAAG,UAAU,CAAC,OAAO,0BAA0B,CAAC,CAAC"}
+{"version":3,"file":"ops.d.ts","sourceRoot":"","sources":["../../src/server/ops.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAsBjD,OAAO,KAAK,EAAE,SAAS,EAAyB,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE7F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAMnE,OAAO,KAAK,EACV,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,wBAAwB,EAExB,SAAS,EACT,QAAQ,EACR,mBAAmB,EACpB,MAAM,SAAS,CAAC;AAEjB,KAAK,cAAc,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;AAKzD,eAAO,MAAM,QAAQ,EAAG,OAAgB,CAAC;AACzC,eAAO,MAAM,QAAQ,EAAG,IAAa,CAAC;AAmBtC,wBAAsB,YAAY,CAAC,gBAAgB,EAAE,MAAM,EAAE,KAAK,UAAQ,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,GAAG,SAAS,CAAC,CAa1H;AAGD,MAAM,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;AAEjF,MAAM,WAAW,cAAc;IAC7B,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACnG,YAAY,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;CACjG;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5B;6EACyE;IACzE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;CACtC;AAMD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxE;AA8CD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,wBAAwB;;+BAmExC,MAAM,SAAS,MAAM,KAAG,MAAM,GAAG,IAAI;6BA0DvC,MAAM,SAAS,MAAM,KAAG;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS;mCA+EhE,OAAO,SAAS,MAAM,KAAG,SAAS,GAAG,IAAI;qCAhBvC,MAAM,GAAG,SAAS,KAAG,SAAS,GAAG,IAAI;gCA+E1C,MAAM,GAAG,SAAS,KAAG,SAAS,GAAG,IAAI;6BAexC,MAAM,GAAG,SAAS,KAAG,OAAO,GAAG,IAAI;qCAtD3B,MAAM,GAAG,SAAS,KAAG,SAAS,GAAG,IAAI;uBA6GrD,SAAS,GAAG,IAAI;iBAqId,CAAC,YACf,MAAM,WACP,iBAAiB,CAAC,CAAC,CAAC,WACpB,CAAC,GAAG,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,YAAY,CAAA;KAAE,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SACrF,cAAc,KACnB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;uCApFN,MAAM,GAAG,SAAS,QAC3B,cAAc,YACV,MAAM,OACX,MAAM,YACD,OAAO,SACX;QAAE,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,KAC9D,IAAI;qCAwCiC,MAAM,WAAW,MAAM,SAAS,MAAM,KAAG,IAAI;mCAiB/C,MAAM,SAAS,MAAM,KAAG,0BAA0B,EAAE;4BAkDrD,MAAM,aAAa,MAAM,SAAS,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;4BAWtF,MAAM,aAAa,MAAM,SAAS,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;4BAqBtF,MAAM,aAAa,MAAM,SAAS,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;iCASrF,MAAM,OAAO,MAAM,SAAS,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;8BAmBnF,MAAM,SAAS,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;4BAQzE,MAAM,SAAS,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;yBAaxE,kBAAkB,CAAC,UAAU,GAAG,WAAW,CAAC,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;gCA8B5E,kBAAkB,CAAC,UAAU,GAAG,WAAW,CAAC,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;8BA2CrF,kBAAkB,CAAC,UAAU,GAAG,KAAK,CAAC,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;kCAyCzE,MAAM,aAAa,MAAM,aAAa,MAAM,SAAS,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;uCAgB7F,MAAM,OAAO,MAAM,aAAa,MAAM,SAAS,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;;;2CAkCxF,MAAM,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,KAAG,OAAO,CAAC,qBAAqB,CAAC;gCAwKxG,YAAY,mBAAmB,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,KAAG,OAAO,CAAC,mBAAmB,CAAC;gCAjIzF,MAAM,iBAAiB,MAAM,GAAG,SAAS,SAAS,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;8BAwJrG,MAAM,iBAAiB,MAAM,GAAG,SAAS,SAAS,MAAM,KAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;mDAnHlF,MAAM,gBAAgB,MAAM,iBAAiB,MAAM,GAAG,SAAS,SAAS,MAAM,KAAG,IAAI;EA6L5I;AAED,MAAM,MAAM,oBAAoB,GAAG,UAAU,CAAC,OAAO,0BAA0B,CAAC,CAAC"}

package/dist/server/types.d.ts

@@ -17,6 +17,9 @@ export interface GenerateOpArgs {
     key?: string | undefined;
     force?: boolean | undefined;
     chatSessionId?: string | undefined;
+    /** Which registered stories root `filePath` is relative to (#3014).
+     *  Absent = the host's default root. */
+    root?: string | undefined;
 }
 /** `GenerateOpArgs` with `K` promoted to genuinely required. `Required<Pick<…>>`
  *  does NOT work here: under `exactOptionalPropertyTypes` the `-?` modifier drops
@@ -52,12 +55,71 @@ export type MulmoScriptServerLog = MinimalLogger;
  * containment, and generation-state tracking are all in-package.
  */
 export interface MulmoScriptServerBackend {
-    /** Absolute path of the stories directory (`<workspace>/artifacts/stories`).
-     *  May not exist yet — the ops lazily create + realpath it. */
+    /** Absolute path of the DEFAULT stories directory
+     *  (`<workspace>/artifacts/stories`). May not exist yet — the ops lazily
+     *  create + realpath it. A wire path with no `root` resolves here, which
+     *  is what makes every pre-`root` caller keep its exact behaviour. */
     storiesDir: string;
+    /**
+     * Additional stories roots, keyed by the id the wire `root` names
+     * (#3014). Absent or empty = the single-root world this package shipped
+     * with, byte for byte.
+     *
+     * The KEY IS OPAQUE TO THIS PACKAGE. It is looked up here and never
+     * parsed, so the host owns what a root id means — a declared name, a
+     * hash of the directory, an assigned handle. That decision is persisted
+     * in the host's cards, so it belongs to whoever has to keep it stable,
+     * and pinning it here would freeze it for every host at once.
+     *
+     * Registration is the containment boundary. `filePath` is a field the
+     * MODEL fills (`core/definition.ts`), so the agent must never be able to
+     * name a root: it may only address what the host already registered. The
+     * tool definition is unchanged for exactly this reason — a host adds a
+     * root, an agent cannot.
+     */
+    extraRoots?: Record<string, string>;
+    /**
+     * Whether this host can keep pending generations apart by root.
+     *
+     * Generation in a named root was refused outright (#3015) because
+     * MulmoClaude's session store keys pending work by `(kind, filePath, key)` —
+     * `generationKey` in `@mulmobridge/protocol` — so two roots generating the
+     * same beat in one session collapse to one entry and either completion
+     * clears the other root's indicator.
+     *
+     * That hazard is the HOST's, not this package's, and not every host has it:
+     * MulmoTerminal ignores `chatSessionId` and publishes straight to a pubsub
+     * channel the View filters by the pair, so it was being refused for a
+     * collision it cannot have (#3019). The question was never "is this root the
+     * default" but "can this host tell two roots' generations apart".
+     *
+     * Default `false` — absent means the refusal stays exactly as it shipped, so
+     * a host that has not thought about this is not quietly opened up. A host
+     * sets it only once its own pending-generation state carries the root (or it
+     * keeps none at all).
+     */
+    rootScopedGenerationState?: boolean;
     /** Shared artifacts FileOps (rooted at `<workspace>/artifacts`) for the
      *  save / reopen / update dispatch kinds (phase-1 core executes). */
     artifacts: FileOps;
+    /**
+     * The FileOps for a named root's artifacts area, or null when the host does
+     * not serve that root.
+     *
+     * `artifacts` above is ONE FileOps bound to the default root, and the
+     * save / update executors run against it. So a write naming another root
+     * rewrote the DEFAULT root's identically-named script and then announced the
+     * other one as changed — which is why those kinds were refused outright
+     * (#3015 review G1). Reads and uploads never had the problem: they go
+     * through `resolveStory` and take the absolute path it returns.
+     *
+     * A resolver rather than a map, because the host already has one: it knows
+     * which directory an opaque root id names, and building a FileOps for it is
+     * a closure per root (MulmoTerminal's `createFileOps(rootFor, label)` takes
+     * a root getter for exactly this). Absent means named-root writes stay
+     * refused, so a host that has not wired it keeps the shipped behaviour.
+     */
+    artifactsFor?: (root: string) => FileOps | null;
     /** Atomic file write (tmp alongside destination + rename; parent dirs
      *  created). Hosts inject their hardened implementation. */
     writeFileAtomic: (absolutePath: string, data: string | Uint8Array) => Promise<void>;

package/dist/server/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/server/types.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAE5F,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,KAAK,CAAC;IACV;6CACyC;IACzC,IAAI,EAAE,aAAa,GAAG,WAAW,GAAG,cAAc,GAAG,aAAa,CAAC;IACnE,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,QAAQ,CAAC,CAAC,IAAI,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC;AAEzD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED;;;;uEAIuE;AACvE,MAAM,MAAM,kBAAkB,CAAC,CAAC,SAAS,MAAM,cAAc,IAAI;KAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC;CAAE,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;AAEjJ,MAAM,MAAM,qBAAqB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AACpG,MAAM,MAAM,mBAAmB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAElG,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,mIAAmI;AACnI,MAAM,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAEjD;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC;mEAC+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB;yEACqE;IACrE,SAAS,EAAE,OAAO,CAAC;IACnB;gEAC4D;IAC5D,eAAe,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpF;;8DAE0D;IAC1D,iBAAiB,CAAC,EAAE,MAAM,OAAO,GAAG,SAAS,CAAC;IAC9C;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,0BAA0B,KAAK,IAAI,CAAC;IACnG;;;OAGG;IACH,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,CAAC;IAC3D,GAAG,CAAC,EAAE,oBAAoB,CAAC;CAC5B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/server/types.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAE5F,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,KAAK,CAAC;IACV;6CACyC;IACzC,IAAI,EAAE,aAAa,GAAG,WAAW,GAAG,cAAc,GAAG,aAAa,CAAC;IACnE,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,QAAQ,CAAC,CAAC,IAAI,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC;AAEzD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC;4CACwC;IACxC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AAED;;;;uEAIuE;AACvE,MAAM,MAAM,kBAAkB,CAAC,CAAC,SAAS,MAAM,cAAc,IAAI;KAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC;CAAE,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;AAEjJ,MAAM,MAAM,qBAAqB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AACpG,MAAM,MAAM,mBAAmB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAElG,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,mIAAmI;AACnI,MAAM,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAEjD;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;0EAGsE;IACtE,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;;;;;;OAgBG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC;yEACqE;IACrE,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;;;;;;OAgBG;IACH,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI,CAAC;IAChD;gEAC4D;IAC5D,eAAe,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpF;;8DAE0D;IAC1D,iBAAiB,CAAC,EAAE,MAAM,OAAO,GAAG,SAAS,CAAC;IAC9C;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,0BAA0B,KAAK,IAAI,CAAC;IACnG;;;OAGG;IACH,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,CAAC;IAC3D,GAAG,CAAC,EAAE,oBAAoB,CAAC;CAC5B"}