@oharness/engine 0.8.0 → 0.9.1

package/dist/mcp/ottoport-updates.js

@@ -0,0 +1,228 @@
+import { createHash } from "node:crypto";
+import { execFile } from "node:child_process";
+import { existsSync, readFileSync, readdirSync } from "node:fs";
+import { mkdir, mkdtemp, readdir, rename, rm, stat, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { promisify } from "node:util";
+/** Plain releases only: a pre-release is not something to hand a user unasked. */
+function parse(version) {
+    const match = /^(\d+)\.(\d+)\.(\d+)$/.exec(version);
+    return match ? [Number(match[1]), Number(match[2]), Number(match[3])] : undefined;
+}
+export function compareVersions(a, b) {
+    const left = parse(a) ?? [0, 0, 0];
+    const right = parse(b) ?? [0, 0, 0];
+    for (let i = 0; i < 3; i++)
+        if (left[i] !== right[i])
+            return left[i] - right[i];
+    return 0;
+}
+function sameMajor(a, b) {
+    const left = parse(a);
+    const right = parse(b);
+    return !!left && !!right && left[0] === right[0];
+}
+/** The version a package directory says it is, or nothing if it cannot say. */
+export function packageVersion(dir) {
+    try {
+        const version = JSON.parse(readFileSync(path.join(dir, "package.json"), "utf8")).version;
+        return typeof version === "string" ? version : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * The downloaded copies that are whole.
+ *
+ * A directory counts only when its entry exists and its manifest names the
+ * version the directory is called: anything else is a download that was
+ * interrupted or tampered with, and running it would fail in a way that looks
+ * like the gateway's fault.
+ */
+export function cachedCopies(root) {
+    let names;
+    try {
+        names = readdirSync(root);
+    }
+    catch {
+        return [];
+    }
+    const copies = [];
+    for (const version of names) {
+        if (!parse(version))
+            continue;
+        const dir = path.join(root, version, "package");
+        const entry = path.join(dir, "mcp", "server.mjs");
+        if (existsSync(entry) && packageVersion(dir) === version)
+            copies.push({ version, entry });
+    }
+    return copies.sort((a, b) => compareVersions(b.version, a.version));
+}
+/**
+ * Which copy to run: the newest cached one the bundled copy is compatible
+ * with, or the bundled copy itself.
+ *
+ * Without a bundled copy there is nothing to measure compatibility against,
+ * so nothing is run — the same outcome as an install that dropped the package.
+ */
+export function pickCopy(bundled, cached) {
+    if (!bundled)
+        return undefined;
+    let best = bundled;
+    for (const copy of cached) {
+        if (sameMajor(copy.version, bundled.version) && compareVersions(copy.version, best.version) > 0)
+            best = copy;
+    }
+    return best;
+}
+/**
+ * Whether to look for updates at all.
+ *
+ * A CI run or a test is not a user, and a network call from one is either
+ * noise or a flaky test — so both are off unless asked for by name.
+ */
+export function autoUpdateEnabled(env = process.env) {
+    const flag = env["OHARNESS_MEDIA_AUTO_UPDATE"];
+    if (flag === "0" || flag === "false")
+        return false;
+    if (flag === "1" || flag === "true")
+        return true;
+    return !env["CI"] && !env["NODE_TEST_CONTEXT"];
+}
+/** Enough time to ask; the registry answering slowly is no reason to wait on it. */
+const REGISTRY_TIMEOUT_MS = 5_000;
+/** The package is about a hundred kilobytes; a minute is generous for it. */
+const DOWNLOAD_TIMEOUT_MS = 60_000;
+/** The running version plus the one before it, in case the newest is bad. */
+const KEEP = 2;
+const run = promisify(execFile);
+/**
+ * `tar`, as the system ships it.
+ *
+ * macOS and Linux have always had it, and Windows has shipped bsdtar as
+ * `tar.exe` since 10 — which is everything the desktop app supports. A JS
+ * implementation would be a dependency for a job the OS already does.
+ */
+async function systemTar(archive, into) {
+    await run("tar", ["-xzf", archive, "-C", into]);
+}
+/**
+ * Whether these bytes are the ones the registry vouched for.
+ *
+ * Only sha512 is accepted. The registry has published it for every package
+ * for years, and an entry offering only something weaker is not one to run as
+ * a subprocess holding the user's key.
+ */
+export function matchesIntegrity(bytes, integrity) {
+    const digest = createHash("sha512").update(bytes).digest("base64");
+    const claimed = integrity
+        .split(/\s+/)
+        .filter((part) => part.startsWith("sha512-"))
+        .map((part) => part.slice("sha512-".length).split("?")[0]);
+    return claimed.length > 0 && claimed.includes(digest);
+}
+function timed(signal, ms) {
+    return signal ? AbortSignal.any([signal, AbortSignal.timeout(ms)]) : AbortSignal.timeout(ms);
+}
+/**
+ * Fetch the newest compatible release into the cache, if there is one.
+ *
+ * Resolves rather than throws in every case: the caller fires this and moves
+ * on, and a failure here must never be noticed as anything but the bundled
+ * server continuing to run.
+ */
+export async function updateOttoport(options) {
+    if (!options.force && !autoUpdateEnabled(options.env))
+        return { status: "disabled" };
+    const doFetch = options.fetch ?? fetch;
+    const registry = options.registry ?? "https://registry.npmjs.org";
+    let staging;
+    try {
+        const response = await doFetch(`${registry}/ottoport/latest`, {
+            signal: timed(options.signal, REGISTRY_TIMEOUT_MS),
+            headers: { accept: "application/json" },
+        });
+        if (!response.ok)
+            throw new Error(`registry answered HTTP ${response.status}`);
+        const latest = (await response.json());
+        const version = typeof latest.version === "string" ? latest.version : "";
+        // Also what makes the version safe to use as a directory name.
+        if (!parse(version))
+            throw new Error(`registry offered an unusable version: ${String(latest.version)}`);
+        if (compareVersions(version, options.current) <= 0)
+            return { status: "current", version };
+        if (!sameMajor(version, options.current))
+            return { status: "incompatible", version };
+        if (cachedCopies(options.root).some((copy) => copy.version === version))
+            return { status: "cached", version };
+        const tarball = latest.dist?.tarball;
+        const integrity = latest.dist?.integrity;
+        if (typeof tarball !== "string" || !/^https:\/\//.test(tarball))
+            throw new Error("registry entry has no https tarball");
+        if (typeof integrity !== "string")
+            throw new Error("registry entry has no integrity");
+        const download = await doFetch(tarball, { signal: timed(options.signal, DOWNLOAD_TIMEOUT_MS) });
+        if (!download.ok)
+            throw new Error(`tarball download answered HTTP ${download.status}`);
+        const bytes = Buffer.from(await download.arrayBuffer());
+        // Before a single byte is unpacked: a tarball that is not the one the
+        // registry published is not opened at all.
+        if (!matchesIntegrity(bytes, integrity))
+            throw new Error(`integrity mismatch for ottoport ${version}`);
+        await mkdir(options.root, { recursive: true });
+        // Inside the cache root, so the final rename never crosses a filesystem
+        // and a directory named for a version is only ever a complete one.
+        staging = await mkdtemp(path.join(options.root, ".staging-"));
+        const archive = path.join(staging, "package.tgz");
+        await writeFile(archive, bytes);
+        await (options.extract ?? systemTar)(archive, staging);
+        await rm(archive, { force: true });
+        const dir = path.join(staging, "package");
+        if (!existsSync(path.join(dir, "mcp", "server.mjs")))
+            throw new Error("the package has no mcp/server.mjs");
+        if (packageVersion(dir) !== version)
+            throw new Error("the package is not the version the registry named");
+        const target = path.join(options.root, version);
+        try {
+            await rename(staging, target);
+            staging = undefined;
+        }
+        catch (err) {
+            // Another session got there first, which is the same outcome.
+            if (cachedCopies(options.root).some((copy) => copy.version === version))
+                return { status: "cached", version };
+            throw err;
+        }
+        await prune(options.root);
+        return { status: "installed", version };
+    }
+    catch (err) {
+        return { status: "failed", error: err instanceof Error ? err.message : String(err) };
+    }
+    finally {
+        if (staging)
+            await rm(staging, { recursive: true, force: true }).catch(() => { });
+    }
+}
+/**
+ * Drop all but the newest few versions, and staging left by a crash.
+ *
+ * Staging is only cleared once it is an hour old, since a younger one may be
+ * another session's download still in progress.
+ */
+async function prune(root) {
+    const keep = new Set(cachedCopies(root).slice(0, KEEP).map((copy) => copy.version));
+    for (const name of await readdir(root).catch(() => [])) {
+        const full = path.join(root, name);
+        if (name.startsWith(".staging-")) {
+            const age = Date.now() - (await stat(full).then((s) => s.mtimeMs).catch(() => Date.now()));
+            if (age > 3_600_000)
+                await rm(full, { recursive: true, force: true }).catch(() => { });
+            continue;
+        }
+        if (parse(name) && !keep.has(name))
+            await rm(full, { recursive: true, force: true }).catch(() => { });
+    }
+}
+//# sourceMappingURL=ottoport-updates.js.map

package/dist/mcp/ottoport-updates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ottoport-updates.js","sourceRoot":"","sources":["../../src/mcp/ottoport-updates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AA6BtC,kFAAkF;AAClF,SAAS,KAAK,CAAC,OAAe;IAC5B,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,CAAE,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IAClF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,SAAS,CAAC,CAAS,EAAE,CAAS;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,MAAM,OAAO,GAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAA2B,CAAC,OAAO,CAAC;QACpH,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,SAAS;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QAClD,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAiC,EAAE,MAA+B;IACzF,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,IAAI,GAAG,OAAO,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,IAAI,GAAG,IAAI,CAAC;IAC/G,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,MAAM,IAAI,GAAG,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC/C,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;AACjD,CAAC;AAsBD,oFAAoF;AACpF,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC,6EAA6E;AAC7E,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,6EAA6E;AAC7E,MAAM,IAAI,GAAG,CAAC,CAAC;AAEf,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEhC;;;;;;GAMG;AACH,KAAK,UAAU,SAAS,CAAC,OAAe,EAAE,IAAY;IACpD,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,SAAiB;IAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,SAAS;SACtB,KAAK,CAAC,KAAK,CAAC;SACZ,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;SAC5C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,KAAK,CAAC,MAA+B,EAAE,EAAU;IACxD,OAAO,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAsB;IACzD,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACrF,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,4BAA4B,CAAC;IAClE,IAAI,OAA2B,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,QAAQ,kBAAkB,EAAE;YAC5D,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC;YAClD,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6E,CAAC;QACnH,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,+DAA+D;QAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxG,IAAI,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;QAC1F,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;QACrF,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAE9G,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC;QACrC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC;QACzC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACxH,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAEtF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAChG,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACvF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QACxD,sEAAsE;QACtE,2CAA2C;QAC3C,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,EAAE,CAAC,CAAC;QAEvG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,wEAAwE;QACxE,mEAAmE;QACnE,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAClD,MAAM,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC3G,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAE1G,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC9B,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,8DAA8D;YAC9D,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YAC9G,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACvF,CAAC;YAAS,CAAC;QACT,IAAI,OAAO;YAAE,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,KAAK,CAAC,IAAY;IAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACpF,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC3F,IAAI,GAAG,GAAG,SAAS;gBAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACtF,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvG,CAAC;AACH,CAAC"}

package/dist/runtime-plugins/builtin/studio.d.ts

@@ -1,33 +1,104 @@
+import type { MediaAccess } from "../../mcp/builtin.ts";
+import type { AuthManager } from "../../auth/manager.ts";
 import type { McpToolDefinition } from "../../mcp/protocol.ts";
 import type { Tool, ToolContext } from "../../tools/types.ts";
 import type { RuntimePlugin } from "../types.ts";
 export interface StudioPluginOptions {
-    /** The gateway credential, from the same sources completions resolve. */
-    secret(): Promise<string | undefined>;
+    /** Who calls are made as, and where they go. Asked before every call. */
+    access(): Promise<MediaAccess | undefined>;
 }
+/**
+ * The credential media calls go out on: the OHarness account, and nothing else.
+ *
+ * Media is billed only through our gateway, which charges the account (or the
+ * team it bills to) in OHarness credits the way it charges chat. A vendor key
+ * the user happens to hold for chat is deliberately not used here: two ways to
+ * pay for the same image would be two balances to explain, and a generation
+ * the user expected on their plan would land on a different bill.
+ *
+ * The team rides in the path because the server offers nowhere else: all a
+ * caller sets is a base URL and a key.
+ */
+export declare function mediaAccess(auth: AuthManager): Promise<MediaAccess | undefined>;
 export declare function createStudioPlugin(options: StudioPluginOptions): RuntimePlugin;
+/** What the model is told when media exists but the user is not signed in. */
+export declare const SIGN_IN_PROMPT: string;
+/** One upstream tool: what it is called here, and what it produces. */
+export interface FacadeEntry {
+    upstream: string;
+    name: string;
+    /**
+     * What generated files are named after; empty for a tool that only reads,
+     * which is also what makes it skip confirmation and download nothing.
+     */
+    kind: string;
+    note: string;
+}
 /**
- * What each upstream tool is called here, and what it produces.
+ * The tools this file knows by name, and what to say about each.
  *
- * The rename is the whole of the mapping. Parameters are not restated: the
- * schema comes from the server, so a model can send anything that server
+ * The rename and the note are the whole of it. Parameters are not restated:
+ * the schema comes from the server, so a model can send anything that server
  * accepts and a parameter added upstream works the day it ships. Writing them
  * out here would be a second, staler copy of somebody else's list — and the
  * failure mode is silent, since a parameter this file has not heard of would
  * simply never reach the gateway.
+ *
+ * A tool missing from here is still offered; see `facadeEntry`.
  */
-export declare const FACADE: Array<{
-    upstream: string;
-    name: string;
-    kind: string;
-    note: string;
-}>;
+export declare const FACADE: FacadeEntry[];
+/**
+ * The name a tool is offered under: the known one, or one derived from the
+ * upstream name with the vendor taken off — `ottoport_remove_background`
+ * becomes `RemoveBackground`.
+ */
+export declare function facadeName(upstream: string): string;
+/**
+ * How to present a tool, whether or not this file has heard of it.
+ *
+ * An unknown tool is assumed to spend money unless its name says it only
+ * looks something up. Guessing the other way would let a new paid tool skip
+ * confirmation, and the cost of that guess is a charge the user never agreed
+ * to; guessing this way costs one extra click on a lookup.
+ */
+export declare function facadeEntry(upstream: string): FacadeEntry;
+/**
+ * A server-written description, in this harness's words.
+ *
+ * The vendor's name is not part of the product, and the server's text is full
+ * of it — "through an OttoPort image model", "call ottoport_list_models".
+ * Left alone, the second is worse than cosmetic: it names a tool the model
+ * does not have, under the name it is offered as here. So tool references
+ * become the names they are offered under, the vendor's name is dropped, and
+ * a sentence about something withheld or refused is dropped with it.
+ */
+export declare function rebrand(text: string): string;
+/**
+ * The server's input schema, as this harness offers it: descriptions in its
+ * words at every depth, and without the parameters the gateway refuses.
+ */
+export declare function facadeSchema(inputSchema: unknown): {
+    properties?: Record<string, unknown>;
+    [k: string]: unknown;
+};
 /**
  * One upstream tool, wearing this harness's name and manners.
  *
- * `inputSchema` is the server's own, with `path` added. Nothing validates it
- * here: the server validates its own inputs, and a second opinion derived from
- * its JSON Schema would only be a less accurate one — the same reasoning the
- * MCP tool adapter states.
+ * `inputSchema` is the server's own, rebranded, with `path` added. Nothing
+ * validates it here: the server validates its own inputs, and a second
+ * opinion derived from its JSON Schema would only be a less accurate one —
+ * the same reasoning the MCP tool adapter states.
+ */
+export declare function facadeTool(entry: FacadeEntry, def: McpToolDefinition, call: (tool: string, args: Record<string, unknown>, ctx: ToolContext) => Promise<string>): Tool;
+/**
+ * Where one output goes: into a folder, or under a name.
+ *
+ * A model asked for "a kitten picture" passes `media/kitten.png` as often as
+ * `media/` — and treating every path as a folder saved that one as
+ * `media/kitten.png/image-….jpg`, a folder named like an image with the image
+ * inside it. A path whose last part has an extension is a file name. The
+ * extension kept is the one the bytes have, because renaming a JPEG to .png
+ * makes a file that some viewers refuse; the name asked for is kept. A second
+ * output of the same call is numbered beside the first.
  */
-export declare function facadeTool(entry: (typeof FACADE)[number], def: McpToolDefinition, call: (tool: string, args: Record<string, unknown>, ctx: ToolContext) => Promise<string>): Tool;
+export declare function destination(into: string | undefined, kind: string, index: number, extension: string): string;