@nuwax-ai/openui-mcp 0.1.11 → 0.2.0

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## 0.2.0
+
+- Persist OpenUI artifacts as `data/{artifactId}.openui.json`.
+- Support atomic updates by reusing `artifactId`.
+- Return lightweight `nuwax.openui-ref/v1` results.
+- Replace the localhost page server with a frozen postMessage Runtime bundle.
+- Remove Artifact TTL, sidecar page URLs, and HTTP server configuration.
+
+## 0.1.12
+
+- Treat sidecar `structuredContent.page.url` as an internal local Runtime
+  locator and explicitly prohibit Agents from showing it to users.
+- Return only the Artifact ID in the sidecar tool text result. The Nuwax Host
+  derives the authenticated user-facing proxy URL from conversation context.
+
 ## 0.1.11
 
 - Fix dashboard authoring guidance for reactive filters: empty input/select

package/README.md

@@ -1,179 +1,65 @@
 # Nuwax OpenUI MCP
 
-OpenUI over MCP for Nuwax Agent sessions. One MCP tool publishes a validated,
-versioned OpenUI artifact that a host can present in either of two places:
-
-- **inline** — rendered directly by the host Renderer by default, with an
-  optional OpenUI Runtime iframe mode;
-- **sidecar** — the same Runtime page opened in the preview area or a full page.
-
-The project intentionally does not replace the host's chat transport, session
-model, permission system, or tool status UI.
-
-## Status
-
-This repository contains the first executable foundation:
-
-- `nuwax_render_openui` MCP tool;
-- `nuwax.openui/v1` input and structured-result contract;
-- stdio and Streamable HTTP transports;
-- direct Renderer and page Runtime options for inline artifacts;
-- one OpenUI React page Runtime shared by iframe-inline and sidecar artifacts;
-- relative-path and desktop-query transports for proxied Runtime pages;
-- `OPENUI_READY` / `OPENUI_RESIZE` page messages for iframe auto-sizing;
-- localized required validation, including date and date-range values;
-- isolated Runtime styles, independent from the Nuwax host reset stylesheet;
-- source policy, artifact TTL, Host validation, CSP, and tests.
-
-The default artifact store is in-memory. Production deployments should provide
-a durable, tenant-aware `ArtifactStore` and authentication at the edge.
+`@nuwax-ai/openui-mcp` provides OpenUI authoring guidance, schema resources,
+validation, and durable artifact generation for Nuwax Agent sessions.
 
 ## Architecture
 
-```text
-Agent
-  └─ MCP call: nuwax_render_openui
-       └─ validate + persist artifact
-            ├─ structuredContent → host discovers the artifact
-            ├─ inline → host Renderer (default)
-            └─ shared Runtime page
-                 ├─ inline iframe (optional)
-                 └─ sidecar preview / full page
-```
-
-`presentation.mode` controls where the host presents the Artifact; it does not
-force an inline rendering technology. PC hosts should default inline Artifacts
-to the direct Renderer and may explicitly select the iframe Runtime for stronger
-style isolation or cross-client page reuse. `GET /openui/pages/:id` is available
-for both inline and sidecar artifacts. For backward compatibility, only sidecar
-structured results currently contain `artifact.page.url`; an iframe-inline host
-builds its trusted page URL from its configured proxy route and `artifactId`.
-
-OpenUI runtime queries and mutations are intentionally not proxied in the first
-release. They must be added behind a host-controlled MCP proxy with tenant,
-conversation, artifact, allowlist, permission, and audit checks.
-
-## Requirements
-
-- Node.js 20+
-- pnpm 10+
-
-## Install and verify
-
-```bash
-pnpm install
-pnpm verify
-```
-
-Install the published package in a host project:
-
-```bash
-npm install @nuwax-ai/openui-mcp
-```
-
-## Run over stdio
+The MCP server does not host pages. It writes OpenUI data into the active
+project and returns a lightweight reference:
 
-```bash
-pnpm build
-pnpm dev:stdio
+```text
+nuwax_render_openui
+  -> validate OpenUI Lang
+  -> data/{artifactId}.openui.json
+  -> nuwax.openui-ref/v1
 ```
 
-Example MCP client configuration:
+Nuwax PC Web loads the data file and renders it with the frozen static runtime
+at `/openui-runtime/index.html`. Inline, sidecar, and file preview all use that
+same runtime.
 
-```json
-{
-  "mcpServers": {
-    "nuwax-openui": {
-      "command": "node",
-      "args": ["/absolute/path/to/nuwax-openui-mcp/dist/server/stdio.js"],
-      "env": {
-        "NUWAX_OPENUI_BASE_URL": "http://127.0.0.1:8787"
-      }
-    }
-  }
-}
-```
-
-The stdio process starts the sidecar HTTP server by default and both transports
-share the same in-memory artifact store. Set
-`NUWAX_OPENUI_SIDECAR_SERVER_ENABLED=false` only when another process owns the
-page Runtime service. Page-based inline rendering also needs this service.
+## Installation
 
-For NuwaClaw, configure this server as persistent so all Agent sessions share
-one process and one sidecar port:
+Configure the server as a session-scoped stdio MCP so it inherits the current
+project directory:
 
 ```json
 {
   "mcpServers": {
     "nuwax-openui": {
       "command": "npx",
-      "args": ["-y", "@nuwax-ai/openui-mcp@0.1.11"],
-      "env": {
-        "NUWAX_OPENUI_HOST": "127.0.0.1",
-        "NUWAX_OPENUI_PORT": "8787",
-        "NUWAX_OPENUI_BASE_URL": "http://127.0.0.1:8787",
-        "NUWAX_OPENUI_ALLOWED_HOSTS": "127.0.0.1,localhost"
-      },
-      "enabled": true,
-      "persistent": true
+      "args": ["-y", "@nuwax-ai/openui-mcp@0.2.0"]
     }
   }
 }
 ```
 
-> **Note:** The package exposes `openui-mcp` as the default bin (matching the
-> unscoped package name) so `npx @nuwax-ai/openui-mcp` resolves to the stdio
-> entry. Aliases: `nuwax-openui-mcp` (stdio), `nuwax-openui-mcp-http` (HTTP).
-
-## Run over Streamable HTTP
-
-```bash
-cp .env.example .env
-pnpm build
-pnpm start
-```
-
-Endpoints:
-
-| Endpoint                    | Purpose                            |
-| --------------------------- | ---------------------------------- |
-| `POST /mcp`                 | MCP Streamable HTTP                |
-| `GET /healthz`              | Health check                       |
-| `GET /openui/artifacts/:id` | Artifact document for the renderer |
-| `GET /openui/pages/:id`     | Shared inline/sidecar Runtime page |
-| `GET /openui/assets/*`      | Runtime JavaScript and CSS         |
-
-### Proxied page transports
-
-The default page uses relative path assets and Artifact lookup:
+Do not configure it as a persistent/global MCP. If the host cannot provide the
+project as the process working directory or an MCP Root, set
+`NUWAX_OPENUI_PROJECT_ROOT` explicitly.
 
-```text
-GET /openui/pages/{artifactId}
-  ├─ ../assets/sidecar.css
-  ├─ ../assets/sidecar.js
-  └─ ../artifacts/{artifactId}
-```
+The file repository is initialized lazily on the first render call. This avoids
+creating a `data/` directory when a client starts the server only to discover
+its tool list.
 
-For the Nuwax PC desktop/file proxy, request the page with
-`?transport=desktop-query`. The generated page keeps all subsequent requests on
-the same conversation-scoped URL and changes only the query:
+## Tools and resources
 
-```text
-?openui=css
-?openui=js
-?openui=artifact&artifactId={artifactId}
-```
+- `nuwax_render_openui`: creates or updates an Artifact file.
+- `nuwax_get_openui_reference`: returns the authoring guide or schema.
+- `nuwax://openui/schema/v0.5`: renderer-generated component schema.
+- `nuwax://openui/authoring-guide/v0.5`: syntax and examples.
+- `nuwax_openui_authoring`: reusable authoring prompt.
 
-The query transport is a page transport convention, not a general-purpose
-proxy. The Nuwax host must derive the conversation and target service from its
-authenticated context and must not accept an arbitrary upstream URL.
+Call `nuwax_get_openui_reference` before producing complex forms, charts, or
+dashboards.
 
-## Tool contract
+## Creating an Artifact
 
 ```json
 {
   "schemaVersion": "nuwax.openui/v1",
-  "title": "Release status",
+  "title": "Deployment status",
   "presentation": {
     "mode": "inline",
     "autoOpen": false
@@ -181,164 +67,55 @@ authenticated context and must not accept an arbitrary upstream URL.
   "document": {
     "language": "openui-lang",
     "specVersion": "0.5",
-    "source": "root = Stack([title])\ntitle = TextContent(\"Release is ready\", \"large-heavy\")"
-  },
-  "bindings": {
-    "tools": []
+    "source": "root = Stack([title])\ntitle = TextContent(\"Ready\", \"large-heavy\")"
   },
-  "fallback": {
-    "markdown": "Release is ready."
-  }
+  "bindings": { "tools": [] },
+  "fallback": { "markdown": "Deployment is ready." }
 }
 ```
 
-The MCP response always contains a text fallback plus machine-readable
-`structuredContent`. Hosts must identify OpenUI results by all three fields:
+The response is a `nuwax.openui-ref/v1` pointing to:
 
 ```text
-tool name      = nuwax_render_openui
-type           = nuwax.openui
-schemaVersion  = nuwax.openui/v1
-```
-
-Do not infer UI from arbitrary MCP tool results.
-
-## Agent authoring guidance
-
-The server publishes the DSL contract through multiple MCP capabilities so an
-Agent does not need to guess syntax or inspect installed package files:
-
-| Capability | Name / URI                            | Purpose                                                                      |
-| ---------- | ------------------------------------- | ---------------------------------------------------------------------------- |
-| Tool       | `nuwax_get_openui_reference`          | Returns the generated authoring guide or complete DSL JSON Schema            |
-| Prompt     | `nuwax_openui_authoring`              | Starts an authoring flow with a `basic`, `dashboard`, `form`, or `all` focus |
-| Resource   | `nuwax://openui/schema/v0.5`          | Complete JSON Schema generated from the renderer's current component library |
-| Resource   | `nuwax://openui/authoring-guide/v0.5` | Complete generated OpenUI Lang authoring guide                               |
-
-`nuwax_render_openui` also includes trigger guidance and a minimal valid example
-in its tool description and input schema. Agents should use it when the user
-asks for a visual card, dashboard, chart, table, report, form, status panel, or
-other structured interface even if the user does not explicitly mention
-OpenUI.
-
-For a complex interface, call `nuwax_get_openui_reference` with `format=guide`
-and the closest profile before rendering. Clients that only expose MCP tools
-can also retrieve the complete DSL schema with `format=schema`. OpenUI Lang is
-assignment-based and is not XML, HTML, or JSX:
-
-```text
-root = Stack([title, status])
-title = TextContent("Deployment", "large-heavy")
-status = Callout("success", "Ready", "Deployment completed successfully.")
-```
-
-The JSON Schema and guide are generated from the exact OpenUI renderer library
-used by this package, preventing the authoring contract from drifting away from
-runtime behavior.
-
-## Host integration
-
-PC Web inline supports two rendering strategies. The direct Renderer is the
-default because it has no local Runtime/network dependency and integrates with
-the existing conversation lifecycle:
-
-```tsx
-<Renderer
-  library={openuiLibrary}
-  response={artifact.document.source}
-  isStreaming={false}
-/>
-```
-
-The host may explicitly select iframe mode for isolation or page-runtime
-testing:
-
-```tsx
-<ToolProcessShell header={existingToolBar}>
-  <iframe
-    src={resolveTrustedOpenUiPageUrl(artifact.artifactId)}
-    sandbox="allow-scripts"
-    title={artifact.title}
-  />
-</ToolProcessShell>
+data/{artifactId}.openui.json
 ```
 
-For sidecar mode, `artifact.page.url` can be used only after the host validates
-its origin and artifact context. Use a dedicated restrictive iframe sandbox;
-do not reuse a broad legacy sandbox profile.
-
-### Page bridge and automatic height
+Pass the same `artifactId` on a later call to atomically replace the Artifact.
+The original `createdAt` is retained while `updatedAt` and the document digest
+are refreshed.
 
-After an Artifact is loaded, the Runtime sends these messages to its parent:
+## File contract
 
-```ts
-type OpenUiRuntimeMessage =
-  | {
-      type: 'OPENUI_READY';
-      protocolVersion: 'nuwax.openui-page/v1';
-      artifactId: string;
-    }
-  | {
-      type: 'OPENUI_RESIZE';
-      protocolVersion: 'nuwax.openui-page/v1';
-      artifactId: string;
-      height: number;
-    };
+```json
+{
+  "type": "nuwax.openui-file",
+  "schemaVersion": "nuwax.openui-file/v1",
+  "artifactId": "550e8400-e29b-41d4-a716-446655440000",
+  "title": "Deployment status",
+  "presentation": { "mode": "inline", "autoOpen": false },
+  "document": {
+    "language": "openui-lang",
+    "specVersion": "0.5",
+    "source": "root = Stack([])",
+    "digest": "sha256:..."
+  },
+  "bindings": { "tools": [] },
+  "fallback": { "markdown": "" },
+  "createdAt": "2026-07-22T00:00:00.000Z",
+  "updatedAt": "2026-07-22T00:00:00.000Z"
+}
 ```
 
-The current Runtime uses `ResizeObserver` on its rendered root, so form
-validation messages, date selection, expanding content, and responsive wrapping
-can update the iframe height. The host must validate `event.source`, the trusted
-Runtime origin, `protocolVersion`, and `artifactId` before applying the height.
-It should also clamp the height and provide an expand/scroll fallback for large
-documents.
-
-The v1 bridge currently reports readiness and size only. Host context, actions,
-nonce/sequence replay protection, and native/mobile WebView bridges are planned
-extensions and must not be assumed by clients yet.
-
-### Runtime styles, validation, and locale
-
-The page Runtime imports the official `@openuidev/react-ui` stylesheet inside
-its own document. This prevents host rules such as `button { color: inherit }`
-from overriding iframe-rendered OpenUI button colors. A direct Renderer shares
-the host document and must load the official layered stylesheet plus scoped,
-unlayered compatibility overrides for host reset rules.
-
-The page Runtime replaces the built-in `required` validator to correctly accept
-`Date`, date-range objects, wrapped values, and selected checkbox maps. Required
-messages follow `navigator.language` for English, Simplified Chinese,
-Traditional Chinese, and Japanese. Unknown locales fall back to English. A host
-using the direct Renderer must install the equivalent validator integration in
-its own JavaScript context; Nuwax PC Web does this through its i18n runtime.
-
-## Security model
-
-- OpenUI document size and line count are bounded.
-- Script-like source patterns are rejected before persistence.
-- Sidecar URLs are generated by this service, never accepted from the model.
-- The HTTP server validates `Host` to reduce DNS rebinding exposure.
-- Sidecar responses use CSP and no-store caching. Set
-  `NUWAX_OPENUI_FRAME_ANCESTORS` to the exact Nuwax origins that may embed the
-  page; the default permits only same-origin framing.
-- Runtime MCP bindings are explicit and cannot contain wildcards.
-- Mutations are data only in this contract; execution requires a separate,
-  permission-aware host proxy.
-
-This foundation is not a substitute for authentication. A production Nuwax
-deployment must bind every artifact to user, tenant, conversation, message, and
-tool-call context.
+Artifacts have no TTL. Their lifetime follows the project files and they can be
+reviewed and versioned with Git.
 
 ## Development
 
 ```bash
-pnpm format
-pnpm lint
-pnpm typecheck
-pnpm test
-pnpm build
+pnpm install
+pnpm verify
 ```
 
-## License
-
-Apache License 2.0. See [LICENSE](LICENSE).
+The web build produces `dist/web/runtime.js` and `dist/web/runtime.css`. In the
+Nuwax repository, `scripts/sync-openui-runtime.sh` copies those assets into
+`public/openui-runtime/`.

package/dist/server/artifact-store.d.ts

@@ -1,13 +1,21 @@
-import type { OpenUiArtifact } from './contracts.js';
+import { type OpenUiFile } from './contracts.js';
 export interface ArtifactStore {
-    get(artifactId: string): Promise<OpenUiArtifact | undefined>;
-    put(artifact: OpenUiArtifact): Promise<void>;
+    initialize(): Promise<void>;
+    get(artifactId: string): Promise<OpenUiFile | undefined>;
+    put(artifact: OpenUiFile): Promise<'created' | 'updated'>;
     delete(artifactId: string): Promise<boolean>;
 }
-export declare class InMemoryArtifactStore implements ArtifactStore {
+export type ProjectRootResolver = () => Promise<string>;
+export declare class FileArtifactStore implements ArtifactStore {
+    private readonly resolveProjectRoot;
     private readonly artifacts;
-    get(artifactId: string): Promise<OpenUiArtifact | undefined>;
-    put(artifact: OpenUiArtifact): Promise<void>;
+    private initialization;
+    constructor(resolveProjectRoot: ProjectRootResolver);
+    initialize(): Promise<void>;
+    get(artifactId: string): Promise<OpenUiFile | undefined>;
+    put(artifact: OpenUiFile): Promise<'created' | 'updated'>;
     delete(artifactId: string): Promise<boolean>;
+    private getDataDir;
+    private getArtifactPath;
 }
 //# sourceMappingURL=artifact-store.d.ts.map

package/dist/server/artifact-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-store.d.ts","sourceRoot":"","sources":["../../src/artifact-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAC7D,GAAG,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC9C;AAED,qBAAa,qBAAsB,YAAW,aAAa;IACzD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqC;IAEzD,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;IAY5D,GAAG,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5C,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAGnD"}
+{"version":3,"file":"artifact-store.d.ts","sourceRoot":"","sources":["../../src/artifact-store.ts"],"names":[],"mappings":"AAWA,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEnE,MAAM,WAAW,aAAa;IAC5B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IACzD,GAAG,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IAC1D,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC9C;AAED,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;AAIxD,qBAAa,iBAAkB,YAAW,aAAa;IAIzC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAH/C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiC;IAC3D,OAAO,CAAC,cAAc,CAA4B;gBAErB,kBAAkB,EAAE,mBAAmB;IAE9D,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IA2B3B,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAkBxD,GAAG,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAmBzD,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YAOpC,UAAU;YAIV,eAAe;CAI9B"}

package/dist/server/artifact-store.js

@@ -1,20 +1,84 @@
-export class InMemoryArtifactStore {
+import { mkdir, readdir, readFile, rename, rm, writeFile, } from 'node:fs/promises';
+import { randomUUID } from 'node:crypto';
+import path from 'node:path';
+import { openUiFileSchema } from './contracts.js';
+const ARTIFACT_FILE_PATTERN = /^([0-9a-f-]{36})\.openui\.json$/;
+export class FileArtifactStore {
+    resolveProjectRoot;
     artifacts = new Map();
+    initialization;
+    constructor(resolveProjectRoot) {
+        this.resolveProjectRoot = resolveProjectRoot;
+    }
+    async initialize() {
+        this.initialization ??= (async () => {
+            const dataDir = await this.getDataDir();
+            await mkdir(dataDir, { recursive: true });
+            const files = await readdir(dataDir, { withFileTypes: true });
+            await Promise.all(files.map(async (entry) => {
+                if (!entry.isFile() || !ARTIFACT_FILE_PATTERN.test(entry.name))
+                    return;
+                try {
+                    const value = JSON.parse(await readFile(path.join(dataDir, entry.name), 'utf8'));
+                    const artifact = openUiFileSchema.parse(value);
+                    if (entry.name !== `${artifact.artifactId}.openui.json`)
+                        return;
+                    this.artifacts.set(artifact.artifactId, artifact);
+                }
+                catch (error) {
+                    process.stderr.write(`[nuwax-openui] Skipping invalid artifact ${entry.name}: ${error instanceof Error ? error.message : String(error)}\n`);
+                }
+            }));
+        })();
+        return this.initialization;
+    }
     async get(artifactId) {
-        const artifact = this.artifacts.get(artifactId);
-        if (!artifact)
-            return undefined;
-        if (Date.parse(artifact.expiresAt) <= Date.now()) {
-            this.artifacts.delete(artifactId);
-            return undefined;
+        await this.initialize();
+        const cached = this.artifacts.get(artifactId);
+        if (cached)
+            return structuredClone(cached);
+        try {
+            const raw = await readFile(await this.getArtifactPath(artifactId), 'utf8');
+            const artifact = openUiFileSchema.parse(JSON.parse(raw));
+            this.artifacts.set(artifactId, artifact);
+            return structuredClone(artifact);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return undefined;
+            throw error;
         }
-        return structuredClone(artifact);
     }
     async put(artifact) {
+        await this.initialize();
+        const validated = openUiFileSchema.parse(artifact);
+        const destination = await this.getArtifactPath(validated.artifactId);
+        const existed = Boolean(await this.get(validated.artifactId));
+        const temporary = `${destination}.${process.pid}.${randomUUID()}.tmp`;
+        await mkdir(path.dirname(destination), { recursive: true });
+        await writeFile(temporary, `${JSON.stringify(validated, null, 2)}\n`, {
+            encoding: 'utf8',
+            flag: 'wx',
+        });
+        await rename(temporary, destination).catch(async (error) => {
+            await rm(temporary, { force: true });
+            throw error;
+        });
         this.artifacts.set(artifact.artifactId, structuredClone(artifact));
+        return existed ? 'updated' : 'created';
     }
     async delete(artifactId) {
-        return this.artifacts.delete(artifactId);
+        await this.initialize();
+        const existed = this.artifacts.delete(artifactId);
+        await rm(await this.getArtifactPath(artifactId), { force: true });
+        return existed;
+    }
+    async getDataDir() {
+        return path.join(await this.resolveProjectRoot(), 'data');
+    }
+    async getArtifactPath(artifactId) {
+        const parsedId = openUiFileSchema.shape.artifactId.parse(artifactId);
+        return path.join(await this.getDataDir(), `${parsedId}.openui.json`);
     }
 }
 //# sourceMappingURL=artifact-store.js.map

package/dist/server/artifact-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-store.js","sourceRoot":"","sources":["../../src/artifact-store.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,qBAAqB;IACf,SAAS,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE/D,KAAK,CAAC,GAAG,CAAC,UAAkB;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAEhC,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACjD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAClC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,QAAwB;QAChC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;CACF"}
+{"version":3,"file":"artifact-store.js","sourceRoot":"","sources":["../../src/artifact-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EACL,OAAO,EACP,QAAQ,EACR,MAAM,EACN,EAAE,EACF,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,gBAAgB,EAAmB,MAAM,gBAAgB,CAAC;AAWnE,MAAM,qBAAqB,GAAG,iCAAiC,CAAC;AAEhE,MAAM,OAAO,iBAAiB;IAIC;IAHZ,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAC;IACnD,cAAc,CAA4B;IAElD,YAA6B,kBAAuC;QAAvC,uBAAkB,GAAlB,kBAAkB,CAAqB;IAAG,CAAC;IAExE,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,cAAc,KAAK,CAAC,KAAK,IAAI,EAAE;YAClC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9D,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBACxB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;oBAC5D,OAAO;gBACT,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CACtB,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CACvD,CAAC;oBACF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,QAAQ,CAAC,UAAU,cAAc;wBAAE,OAAO;oBAChE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBACpD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,4CAA4C,KAAK,CAAC,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CACtH,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAkB;QAC1B,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,MAAM;YAAE,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,EACtC,MAAM,CACP,CAAC;YACF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACzD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YACzC,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YACzE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,QAAoB;QAC5B,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,GAAG,WAAW,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;QACtE,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YACpE,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACzD,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACrC,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnE,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAClD,MAAM,EAAE,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,kBAAkB,EAAE,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,UAAkB;QAC9C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,QAAQ,cAAc,CAAC,CAAC;IACvE,CAAC;CACF"}

package/dist/server/contracts.d.ts

@@ -1,5 +1,7 @@
 import { z } from 'zod';
 export declare const OPENUI_SCHEMA_VERSION: "nuwax.openui/v1";
+export declare const OPENUI_FILE_SCHEMA_VERSION: "nuwax.openui-file/v1";
+export declare const OPENUI_REF_SCHEMA_VERSION: "nuwax.openui-ref/v1";
 export declare const OPENUI_LANG_VERSION: "0.5";
 export declare const OPENUI_TOOL_NAME: "nuwax_render_openui";
 export declare const OPENUI_REFERENCE_TOOL_NAME: "nuwax_get_openui_reference";
@@ -27,6 +29,7 @@ declare const bindingSchema: z.ZodObject<{
     }>;
 }, z.core.$strip>;
 export declare const renderOpenUiInputSchema: z.ZodObject<{
+    artifactId: z.ZodOptional<z.ZodString>;
     schemaVersion: z.ZodLiteral<"nuwax.openui/v1">;
     title: z.ZodString;
     presentation: z.ZodObject<{
@@ -104,9 +107,74 @@ export declare const openUiArtifactSchema: z.ZodObject<{
     createdAt: z.ZodString;
     expiresAt: z.ZodString;
 }, z.core.$strip>;
+export declare const openUiFileSchema: z.ZodObject<{
+    type: z.ZodLiteral<"nuwax.openui-file">;
+    schemaVersion: z.ZodLiteral<"nuwax.openui-file/v1">;
+    artifactId: z.ZodString;
+    title: z.ZodString;
+    presentation: z.ZodObject<{
+        mode: z.ZodEnum<{
+            inline: "inline";
+            sidecar: "sidecar";
+        }>;
+        autoOpen: z.ZodBoolean;
+        preferredWidth: z.ZodOptional<z.ZodEnum<{
+            compact: "compact";
+            normal: "normal";
+            wide: "wide";
+        }>>;
+    }, z.core.$strip>;
+    document: z.ZodObject<{
+        language: z.ZodLiteral<"openui-lang">;
+        specVersion: z.ZodLiteral<"0.5">;
+        source: z.ZodString;
+        digest: z.ZodString;
+    }, z.core.$strip>;
+    bindings: z.ZodObject<{
+        tools: z.ZodArray<z.ZodObject<{
+            serverId: z.ZodString;
+            toolName: z.ZodString;
+            access: z.ZodEnum<{
+                query: "query";
+                mutation: "mutation";
+            }>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    fallback: z.ZodObject<{
+        markdown: z.ZodString;
+    }, z.core.$strip>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+export declare const openUiArtifactRefSchema: z.ZodObject<{
+    type: z.ZodLiteral<"nuwax.openui-ref">;
+    schemaVersion: z.ZodLiteral<"nuwax.openui-ref/v1">;
+    artifactId: z.ZodString;
+    path: z.ZodString;
+    title: z.ZodString;
+    presentation: z.ZodObject<{
+        mode: z.ZodEnum<{
+            inline: "inline";
+            sidecar: "sidecar";
+        }>;
+        autoOpen: z.ZodBoolean;
+        preferredWidth: z.ZodOptional<z.ZodEnum<{
+            compact: "compact";
+            normal: "normal";
+            wide: "wide";
+        }>>;
+    }, z.core.$strip>;
+    digest: z.ZodString;
+    operation: z.ZodEnum<{
+        created: "created";
+        updated: "updated";
+    }>;
+}, z.core.$strip>;
 export type RenderOpenUiInput = z.infer<typeof renderOpenUiInputSchema>;
 export type OpenUiReferenceInput = z.infer<typeof openUiReferenceInputSchema>;
 export type OpenUiArtifact = z.infer<typeof openUiArtifactSchema>;
+export type OpenUiFile = z.infer<typeof openUiFileSchema>;
+export type OpenUiArtifactRef = z.infer<typeof openUiArtifactRefSchema>;
 export type OpenUiBinding = z.infer<typeof bindingSchema>;
 export {};
 //# sourceMappingURL=contracts.d.ts.map