@pascal-app/mcp 1.0.6 → 1.0.7

package/dist/lib/safe-fetch.js

@@ -1,13 +1,14 @@
 import { lookup as dnsLookup } from 'node:dns/promises';
-import { request as httpRequest } from 'node:http';
+import { request as httpRequest, STATUS_CODES } from 'node:http';
 import { request as httpsRequest } from 'node:https';
 import { isIP } from 'node:net';
 import { ProtocolError, ProtocolErrorCode } from '@modelcontextprotocol/server';
+import { ALLOWED_ORIGINS_ENV, allowedOriginsFrom } from '@pascal-app/core/schema';
 /**
  * SSRF-safe fetch for user-supplied URLs (image URLs in vision tools).
  *
  * Every hop (the initial URL and each redirect target) is checked the same way:
- * - only http(s) schemes
+ * - only http(s) schemes, on ports 80/443 unless the origin is allowlisted
  * - well-known local hostnames are refused outright
  * - the host is resolved once and *every* resolved address must be public;
  *   IPv6 forms that embed an IPv4 address (mapped, compatible, 6to4) are
@@ -15,6 +16,8 @@ import { ProtocolError, ProtocolErrorCode } from '@modelcontextprotocol/server';
  * - the socket connects only to the addresses that were checked, so a DNS
  *   answer that changes between check and connect cannot reach a private host
  * - optional origin allowlist via `PASCAL_ALLOWED_ASSET_ORIGINS` (comma-separated)
+ *   - listed origins skip the port limit: an allowlisted origin may name any port
+ *   - parsed by core's `allowedOriginsFrom`, the same reading as scene asset URLs
  * - max body size (default 20 MB) and request timeout (default 10 s)
  *
  * Used by photo_to_scene / analyze_floorplan_image / analyze_room_photo.
@@ -22,6 +25,8 @@ import { ProtocolError, ProtocolErrorCode } from '@modelcontextprotocol/server';
 const DEFAULT_MAX_BYTES = 20 * 1024 * 1024; // 20 MB
 const DEFAULT_TIMEOUT_MS = 10_000;
 const MAX_REDIRECTS = 3;
+/** `URL.port` is '' when the URL uses its scheme's default port. */
+const ALLOWED_PORTS = new Set(['', '80', '443']);
 function parseIPv4(addr) {
     const parts = addr.split('.');
     if (parts.length !== 4 || parts.some((p) => !/^\d{1,3}$/.test(p)))
@@ -64,7 +69,11 @@ function parseIPv6(addr) {
         return null;
     return [...head, ...new Array(8 - explicit).fill(0), ...rest, ...tail];
 }
-function isBlockedV4([a, b]) {
+/**
+ * Ranges from the IANA IPv4 special-purpose registry that are not globally
+ * reachable, plus multicast. Globally reachable entries (AS112, AMT) stay allowed.
+ */
+function isBlockedV4([a, b, c]) {
     if (a === 0)
         return true; // 0.0.0.0/8 "this network"
     if (a === 10)
@@ -77,12 +86,20 @@ function isBlockedV4([a, b]) {
         return true; // 169.254.0.0/16 link-local (cloud metadata)
     if (a === 172 && b >= 16 && b <= 31)
         return true; // 172.16.0.0/12 private
-    if (a === 192 && b === 0)
+    if (a === 192 && b === 0 && c === 0)
         return true; // 192.0.0.0/24 IETF protocol assignments
+    if (a === 192 && b === 0 && c === 2)
+        return true; // 192.0.2.0/24 TEST-NET-1
+    if (a === 192 && b === 88 && c === 99)
+        return true; // 192.88.99.0/24 deprecated 6to4 relay anycast
     if (a === 192 && b === 168)
         return true; // 192.168.0.0/16 private
     if (a === 198 && (b === 18 || b === 19))
         return true; // 198.18.0.0/15 benchmarking
+    if (a === 198 && b === 51 && c === 100)
+        return true; // 198.51.100.0/24 TEST-NET-2
+    if (a === 203 && b === 0 && c === 113)
+        return true; // 203.0.113.0/24 TEST-NET-3
     if (a >= 224)
         return true; // multicast, reserved, broadcast
     return false;
@@ -100,12 +117,30 @@ function isBlockedV6(g) {
     }
     if (g0 === 0x64 && g1 === 0xff9b)
         return true; // 64:ff9b::/96 and 64:ff9b:1::/48 NAT64
-    if (g0 === 0x100 && g1 === 0 && g2 === 0 && g3 === 0)
-        return true; // 100::/64 discard
-    if (g0 === 0x2001 && g1 === 0)
-        return true; // 2001::/32 Teredo
+    if (g0 === 0x100 && g1 === 0 && g2 === 0 && (g3 === 0 || g3 === 1))
+        return true; // 100::/64 discard, 100:0:0:1::/64 dummy
+    // 2001::/23 IETF protocol assignments (incl. Teredo, benchmarking, ORCHID),
+    // except the entries IANA lists as globally reachable.
+    if (g0 === 0x2001 && g1 < 0x200) {
+        const anycast = g1 === 1 && g2 === 0 && g3 === 0 && g4 === 0 && g5 === 0 && g6 === 0;
+        if (anycast && g7 >= 1 && g7 <= 3)
+            return false; // 2001:1::1-3 PCP, TURN, DNS-SD SRP anycast
+        if (g1 === 3)
+            return false; // 2001:3::/32 AMT
+        if (g1 === 4 && g2 === 0x112)
+            return false; // 2001:4:112::/48 AS112-v6
+        if (g1 >= 0x20 && g1 <= 0x3f)
+            return false; // 2001:20::/28 ORCHIDv2, 2001:30::/28 drone remote ID
+        return true;
+    }
+    if (g0 === 0x2001 && g1 === 0xdb8)
+        return true; // 2001:db8::/32 documentation
     if (g0 === 0x2002)
         return isBlockedV4(embeddedV4(g1, g2)); // 2002::/16 6to4
+    if (g0 === 0x3fff && (g1 & 0xf000) === 0)
+        return true; // 3fff::/20 documentation
+    if (g0 === 0x5f00)
+        return true; // 5f00::/16 SRv6 SIDs
     if ((g0 & 0xfe00) === 0xfc00)
         return true; // fc00::/7 ULA (incl. fd00:ec2::254 metadata)
     if ((g0 & 0xffc0) === 0xfe80)
@@ -139,40 +174,82 @@ function isLocalHostname(hostname) {
         lower.endsWith('.internal') ||
         lower.endsWith('.corp'));
 }
-function blocked(reason, details, log = {}) {
-    console.error(`[pascal-mcp] safe_fetch_blocked ${JSON.stringify({ reason, ...details, ...log })}`);
-    return protocolError(reason, details);
+const MAX_LOGGED_PATH = 128;
+/**
+ * Scheme, host and a truncated path only: query strings can carry presigned
+ * tokens, userinfo carries credentials. Non-http(s) URLs (`data:`,
+ * `javascript:`) carry their payload in the path, so they log scheme and host.
+ */
+export function loggableUrl(url) {
+    if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+        return url.host ? `${url.protocol}//${url.host}` : url.protocol;
+    }
+    const path = url.pathname.length > MAX_LOGGED_PATH
+        ? `${url.pathname.slice(0, MAX_LOGGED_PATH)}…`
+        : url.pathname;
+    return `${url.protocol}//${url.host}${path}`;
+}
+function blocked(reason, url, details = {}, log = {}) {
+    console.error(`[pascal-mcp] safe_fetch_blocked ${JSON.stringify({ reason, url: loggableUrl(url), ...details, ...log })}`);
+    return protocolError(reason, { url: loggableUrl(url), ...details });
 }
 function protocolError(reason, details) {
     throw new ProtocolError(ProtocolErrorCode.InvalidParams, reason, details);
 }
+/** A system error's code (`ENOTFOUND`, `ECONNRESET`), never its message, which can quote the URL. */
+function errorCode(err) {
+    const code = err?.code;
+    return typeof code === 'string' && /^[A-Z0-9_]{1,64}$/.test(code) ? code : 'unknown';
+}
 function assertAllowedUrl(url) {
     let parsed;
     try {
         parsed = new URL(url);
     }
     catch {
-        return protocolError('invalid_url', { url });
+        return protocolError('invalid_url', {});
     }
     if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:') {
-        blocked('url_scheme_not_allowed', { url, protocol: parsed.protocol });
+        blocked('url_scheme_not_allowed', parsed, { protocol: parsed.protocol });
     }
-    const allowEnv = process.env.PASCAL_ALLOWED_ASSET_ORIGINS;
-    if (allowEnv) {
-        const origins = allowEnv
-            .split(',')
-            .map((s) => s.trim())
-            .filter(Boolean);
-        if (!origins.includes(parsed.origin)) {
-            blocked('url_origin_not_allowlisted', { url, origin: parsed.origin });
+    // Node would send `user:pass@` as a Basic `Authorization` header.
+    if (parsed.username || parsed.password)
+        blocked('url_credentials_not_allowed', parsed);
+    const allowlist = allowedOriginsFrom(process.env[ALLOWED_ORIGINS_ENV]);
+    if (allowlist) {
+        if (!allowlist.has(parsed.origin)) {
+            blocked('url_origin_not_allowlisted', parsed, { origin: parsed.origin });
         }
     }
+    else if (!ALLOWED_PORTS.has(parsed.port)) {
+        // An operator-allowlisted origin may name any port; otherwise only web ports,
+        // so a public host cannot be used to probe its other services.
+        blocked('url_port_not_allowed', parsed, { port: parsed.port });
+    }
     return parsed;
 }
-/** Resolves `url`'s host and returns its addresses only if every one of them is public. */
-async function resolveCheckedAddresses(url, resolve) {
+/** Settles with `promise`, or rejects with the abort reason as soon as `signal` aborts. */
+function untilAborted(promise, signal) {
+    if (signal.aborted)
+        return Promise.reject(signal.reason);
+    return new Promise((resolve, reject) => {
+        const onAbort = () => reject(signal.reason);
+        signal.addEventListener('abort', onAbort, { once: true });
+        const settle = (done) => (arg) => {
+            signal.removeEventListener('abort', onAbort);
+            done(arg);
+        };
+        promise.then(settle(resolve), settle(reject));
+    });
+}
+/**
+ * Resolves `url`'s host and returns its addresses only if every one of them is
+ * public. The lookup races `signal`: `dns.lookup` cannot be cancelled, so a
+ * hung resolver must not hold the fetch past its timeout.
+ */
+async function resolveCheckedAddresses(url, resolve, signal) {
     const host = url.hostname.replace(/^\[|\]$/g, '');
-    const details = { url: url.toString(), hostname: url.hostname };
+    const details = { hostname: url.hostname };
     const literalFamily = isIP(host);
     let addresses;
     if (literalFamily) {
@@ -180,22 +257,25 @@ async function resolveCheckedAddresses(url, resolve) {
     }
     else {
         if (isLocalHostname(host))
-            blocked('url_host_blocked', details);
+            blocked('url_host_blocked', url, details);
         try {
-            addresses = await resolve(host);
+            addresses = await untilAborted(resolve(host), signal);
         }
         catch (err) {
+            if (signal.aborted)
+                throw err;
             return protocolError('dns_lookup_failed', {
+                url: loggableUrl(url),
                 ...details,
-                message: err instanceof Error ? err.message : String(err),
+                code: errorCode(err),
             });
         }
     }
     if (addresses.length === 0)
-        protocolError('dns_lookup_failed', details);
+        protocolError('dns_lookup_failed', { url: loggableUrl(url), ...details, code: 'no_addresses' });
     const unsafe = addresses.find((a) => isBlockedAddress(a.address));
     if (unsafe)
-        blocked('url_host_blocked', details, { address: unsafe.address });
+        blocked('url_host_blocked', url, details, { address: unsafe.address });
     return addresses;
 }
 /** A socket `lookup` that only ever answers with the given, already-checked addresses. */
@@ -247,40 +327,45 @@ export async function safeFetch(urlStr, opts = {}, deps = defaultDeps) {
     const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
     const hops = [];
     let current = urlStr;
+    let inFlight;
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), timeoutMs);
     try {
         for (let i = 0; i <= MAX_REDIRECTS; i++) {
             const parsed = assertAllowedUrl(current);
+            inFlight = parsed;
             hops.push(parsed.toString());
-            const addresses = await resolveCheckedAddresses(parsed, deps.resolve);
+            const addresses = await resolveCheckedAddresses(parsed, deps.resolve, controller.signal);
             const res = await deps.request(parsed, {
                 headers: opts.accept ? { Accept: opts.accept } : {},
                 lookup: pinnedLookup(addresses),
                 signal: controller.signal,
             });
             const status = res.statusCode ?? 0;
+            // Redirect and error bodies are never read: destroying the response
+            // (no keep-alive, `agent: false`) bounds them at zero bytes.
             if (status >= 300 && status < 400) {
-                res.resume();
+                res.destroy();
                 const location = header(res, 'location');
                 if (!location) {
-                    protocolError('redirect_without_location', { url: parsed.toString(), status });
+                    protocolError('redirect_without_location', { url: loggableUrl(parsed), status });
                 }
                 current = new URL(location, parsed).toString();
                 continue;
             }
             if (status < 200 || status >= 300) {
-                res.resume();
+                res.destroy();
                 protocolError('fetch_failed', {
-                    url: parsed.toString(),
+                    url: loggableUrl(parsed),
                     status,
-                    statusText: res.statusMessage ?? '',
+                    // The standard text, never the server's reason phrase, which can echo the URL.
+                    statusText: STATUS_CODES[status] ?? '',
                 });
             }
             const declared = Number(header(res, 'content-length') ?? Number.NaN);
             if (Number.isFinite(declared) && declared > maxBytes) {
                 res.destroy();
-                protocolError('response_too_large', { url: parsed.toString(), declared, maxBytes });
+                protocolError('response_too_large', { url: loggableUrl(parsed), declared, maxBytes });
             }
             // Running cap so servers that lie about length still get bounded.
             const chunks = [];
@@ -290,7 +375,11 @@ export async function safeFetch(urlStr, opts = {}, deps = defaultDeps) {
                 total += buf.byteLength;
                 if (total > maxBytes) {
                     res.destroy();
-                    protocolError('response_too_large', { url: parsed.toString(), received: total, maxBytes });
+                    protocolError('response_too_large', {
+                        url: loggableUrl(parsed),
+                        received: total,
+                        maxBytes,
+                    });
                 }
                 chunks.push(buf);
             }
@@ -301,17 +390,22 @@ export async function safeFetch(urlStr, opts = {}, deps = defaultDeps) {
                 hops,
             };
         }
-        return protocolError('too_many_redirects', { hops: hops.slice(0, MAX_REDIRECTS + 1) });
+        return protocolError('too_many_redirects', {
+            hops: hops.slice(0, MAX_REDIRECTS + 1).map((hop) => loggableUrl(new URL(hop))),
+        });
     }
     catch (err) {
         if (err instanceof ProtocolError)
             throw err;
         if (controller.signal.aborted || err.name === 'AbortError') {
-            return protocolError('fetch_timeout', { url: urlStr, timeoutMs });
+            return protocolError('fetch_timeout', {
+                ...(inFlight ? { url: loggableUrl(inFlight) } : {}),
+                timeoutMs,
+            });
         }
         return protocolError('fetch_error', {
-            url: urlStr,
-            message: err instanceof Error ? err.message : String(err),
+            ...(inFlight ? { url: loggableUrl(inFlight) } : {}),
+            code: errorCode(err),
         });
     }
     finally {

package/dist/operations/scene-operations.d.ts

@@ -91,6 +91,13 @@ export interface SceneOperations {
     };
     clearHistory(): void;
     runAsSingleHistoryStep<T>(run: () => T): T;
+    /**
+     * Runs `run` synchronously in the scene's scope: its ids, history environment and disposal guard
+     * (`SceneBridge` over a runtime). Optional: an implementation without it runs `run` as is, which
+     * is right for a scene with random ids. One that computes on a detached scene must provide it,
+     * or the ids its tools mint are not the scene's.
+     */
+    runInScene?<T>(run: () => T): T;
     createProject(options: ProjectCreateOptions): Promise<ProjectStatus>;
     getProjectStatus(id: string): Promise<ProjectStatus | null>;
     saveScene(options: SceneSaveOptions): Promise<SceneMeta>;

package/dist/operations/scene-operations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scene-operations.d.ts","sourceRoot":"","sources":["../../src/operations/scene-operations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAC3E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAA;AACpE,OAAO,KAAK,EACV,OAAO,EACP,SAAS,EACT,WAAW,EACX,UAAU,EACV,YAAY,EACZ,aAAa,EACb,eAAe,EAChB,MAAM,yBAAyB,CAAA;AAChC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAA;AAClC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACnG,OAAO,KAAK,EACV,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EACjB,UAAU,EACV,uBAAuB,EACvB,qBAAqB,EACrB,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EAClB,gBAAgB,EAChB,UAAU,EACV,cAAc,EACf,MAAM,kBAAkB,CAAA;AAEzB,MAAM,MAAM,4BAA4B,GAAG;IACzC,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;CACpC,CAAA;AAED,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAA;IAChC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAA;IACtC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAA;IACpC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAA;IAClC,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAA;IACrC,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,IAAI,CAAA;IACnD,mGAAmG;IACnG,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAA;IACpC;;;OAGG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAA;IAC1C,wEAAwE;IACxE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;IAE5C,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAAA;IAC3C,cAAc,IAAI,eAAe,GAAG,IAAI,CAAA;IACxC,gBAAgB,IAAI,IAAI,CAAA;IACxB,WAAW,IAAI,IAAI,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,IAAI,CAAA;IAC3E,UAAU,IAAI,UAAU,GAAG;QAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAA;IACnE,gBAAgB,IAAI,UAAU,CAAA;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAAA;IACzC,OAAO,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,GAAG,IAAI,CAAA;IACtC,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IACtC,cAAc,IAAI,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;IAClD,YAAY,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC,CAAA;IACjE,sEAAsE;IACtE,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,GAAG,IAAI,CAAA;IACnE,cAAc,IAAI,SAAS,EAAE,CAAA;IAC7B,WAAW,CAAC,QAAQ,EAAE,SAAS,GAAG,OAAO,EAAE,CAAA;IAC3C,WAAW,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,EAAE,CAAA;IACrC,SAAS,CAAC,MAAM,EAAE;QAChB,IAAI,CAAC,EAAE,WAAW,CAAA;QAClB,QAAQ,CAAC,EAAE,SAAS,GAAG,IAAI,CAAA;QAC3B,OAAO,CAAC,EAAE,SAAS,CAAA;KACpB,GAAG,OAAO,EAAE,CAAA;IACb,cAAc,CAAC,EAAE,EAAE,SAAS,GAAG,SAAS,GAAG,IAAI,CAAA;IAC/C,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;IAC1D,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAA;IACvD,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,EAAE,CAAA;IACtD,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG;QAC5B,UAAU,EAAE,MAAM,CAAA;QAClB,UAAU,EAAE,SAAS,EAAE,CAAA;QACvB,UAAU,EAAE,SAAS,EAAE,CAAA;KACxB,CAAA;IACD;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,gBAAgB,CAAA;IACxF;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,GAAG,SAAS,CAAA;IAC3D,eAAe,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,GAAG;QAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QAAC,UAAU,EAAE,SAAS,EAAE,CAAA;KAAE,CAAA;IAC7F,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAC5B,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAC5B,aAAa,IAAI,gBAAgB,CAAA;IACjC,UAAU,IAAI,MAAM,EAAE,CAAA;IACtB,UAAU,IAAI;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;IACxD,YAAY,IAAI,IAAI,CAAA;IACpB,sBAAsB,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;IAE1C,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IACpE,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAA;IAC3D,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxD,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAA;IAC3D,UAAU,CAAC,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAC5D,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACvF,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAChG,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IAC9E,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;CACpF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,4BAA4B,GAAG,eAAe,CAE5F"}
+{"version":3,"file":"scene-operations.d.ts","sourceRoot":"","sources":["../../src/operations/scene-operations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAC3E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAA;AACpE,OAAO,KAAK,EACV,OAAO,EACP,SAAS,EACT,WAAW,EACX,UAAU,EACV,YAAY,EACZ,aAAa,EACb,eAAe,EAChB,MAAM,yBAAyB,CAAA;AAChC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAA;AAClC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACnG,OAAO,KAAK,EACV,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EACjB,UAAU,EACV,uBAAuB,EACvB,qBAAqB,EACrB,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EAClB,gBAAgB,EAChB,UAAU,EACV,cAAc,EACf,MAAM,kBAAkB,CAAA;AAEzB,MAAM,MAAM,4BAA4B,GAAG;IACzC,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;CACpC,CAAA;AAED,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAA;IAChC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAA;IACtC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAA;IACpC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAA;IAClC,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAA;IACrC,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,IAAI,CAAA;IACnD,mGAAmG;IACnG,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAA;IACpC;;;OAGG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAA;IAC1C,wEAAwE;IACxE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;IAE5C,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAAA;IAC3C,cAAc,IAAI,eAAe,GAAG,IAAI,CAAA;IACxC,gBAAgB,IAAI,IAAI,CAAA;IACxB,WAAW,IAAI,IAAI,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,IAAI,CAAA;IAC3E,UAAU,IAAI,UAAU,GAAG;QAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAA;IACnE,gBAAgB,IAAI,UAAU,CAAA;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAAA;IACzC,OAAO,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,GAAG,IAAI,CAAA;IACtC,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IACtC,cAAc,IAAI,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;IAClD,YAAY,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC,CAAA;IACjE,sEAAsE;IACtE,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,GAAG,IAAI,CAAA;IACnE,cAAc,IAAI,SAAS,EAAE,CAAA;IAC7B,WAAW,CAAC,QAAQ,EAAE,SAAS,GAAG,OAAO,EAAE,CAAA;IAC3C,WAAW,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,EAAE,CAAA;IACrC,SAAS,CAAC,MAAM,EAAE;QAChB,IAAI,CAAC,EAAE,WAAW,CAAA;QAClB,QAAQ,CAAC,EAAE,SAAS,GAAG,IAAI,CAAA;QAC3B,OAAO,CAAC,EAAE,SAAS,CAAA;KACpB,GAAG,OAAO,EAAE,CAAA;IACb,cAAc,CAAC,EAAE,EAAE,SAAS,GAAG,SAAS,GAAG,IAAI,CAAA;IAC/C,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;IAC1D,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAA;IACvD,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,EAAE,CAAA;IACtD,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG;QAC5B,UAAU,EAAE,MAAM,CAAA;QAClB,UAAU,EAAE,SAAS,EAAE,CAAA;QACvB,UAAU,EAAE,SAAS,EAAE,CAAA;KACxB,CAAA;IACD;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,gBAAgB,CAAA;IACxF;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,GAAG,SAAS,CAAA;IAC3D,eAAe,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,GAAG;QAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QAAC,UAAU,EAAE,SAAS,EAAE,CAAA;KAAE,CAAA;IAC7F,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAC5B,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAC5B,aAAa,IAAI,gBAAgB,CAAA;IACjC,UAAU,IAAI,MAAM,EAAE,CAAA;IACtB,UAAU,IAAI;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;IACxD,YAAY,IAAI,IAAI,CAAA;IACpB,sBAAsB,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;IAC1C;;;;;OAKG;IACH,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;IAE/B,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IACpE,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAA;IAC3D,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxD,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAA;IAC3D,UAAU,CAAC,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAC5D,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACvF,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAChG,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IAC9E,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;CACpF;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,4BAA4B,GAAG,eAAe,CAE5F"}

package/dist/operations/scene-operations.js

@@ -155,6 +155,10 @@ class SceneOperationsFacade {
     runAsSingleHistoryStep(run) {
         return this.requireBridge().runAsSingleHistoryStep(run);
     }
+    runInScene(run) {
+        // Store-only operations have no scene to scope: their tools (list_scenes) run as they are.
+        return this.#bridge ? this.#bridge.runInScene(run) : run();
+    }
     async createProject(options) {
         const store = this.requireStore();
         if (!store.createProject) {

package/dist/prompts/from-brief.js

@@ -15,7 +15,7 @@ const PREAMBLE = [
     '  - Floor items live under a Level; wall/ceiling-attached items live under their target Wall or Ceiling. Do not place items directly under the Site node.',
     'Use realistic dimensions in meters. Keep wall thickness small (0.1–0.3 m) and ceiling height 2.4–3.0 m unless the brief dictates otherwise.',
     SCENE_DESIGN_GUIDANCE,
-    'Respond ONLY with tool calls. Do not produce verbose narrative or prose; keep any explanations in short tool-call arguments.',
+    'When the work is done, report what `verify_scene` and `get_project_status` confirmed and the project `editorUrl`.',
 ].join('\n');
 /**
  * Build the user-facing prompt text for `from_brief`. Pure function for testability.

package/dist/prompts/iterate-on-feedback.js

@@ -11,7 +11,7 @@ const PREAMBLE = [
     '  - Bundle related mutations into a single `apply_patch` call so they share one undo step.',
     '  - For multi-room changes, call verify_scene after the mutation and fix reported issues.',
     SCENE_DESIGN_GUIDANCE,
-    '  - Respond ONLY with tool calls. No prose.',
+    "  - When the work is done, report what you checked (`verify_scene` reports the scene's issues) and the project `editorUrl`, which `get_project_status` returns.",
 ].join('\n');
 /**
  * Build the user-facing prompt text for `iterate_on_feedback`.

package/dist/prompts/renovation-from-photos.js

@@ -10,7 +10,7 @@ const PREAMBLE = [
     'Rules:',
     '  - Do not invent dimensions. Pull them from the analysis tool results.',
     '  - Do not modify nodes that are unrelated to the goals.',
-    '  - Respond ONLY with tool calls. No prose.',
+    "  - When the work is done, report what you checked (`verify_scene` reports the scene's issues) and the project `editorUrl`, which `get_project_status` returns.",
 ].join('\n');
 function isDataUrl(s) {
     return s.startsWith('data:');

package/dist/prompts/scene-guidance.js

@@ -3,14 +3,14 @@ export const SCENE_DESIGN_GUIDANCE = [
     '  - Use meters. X/Z are horizontal floor-plan axes; Y is vertical.',
     '  - Read `pascal://agent/guide` when you need construction rules; do not inspect repository code for ordinary scene editing.',
     '  - Door default: 0.9m wide by 2.1m high, floor-mounted.',
-    '  - Window default: 1.5m wide by 1.5m high with a 0.9m sill height.',
+    '  - Window default: 1.5m wide by 1.5m high, centred vertically on its wall unless sillHeight is given.',
     '  - For clear concrete requests, act instead of asking for clarification.',
     '  - Defaults are for technical values (thicknesses, clearances, heights).',
     '  - What a request states (sizes, counts, rooms, style, references, "catalog only", a single room) binds the work exactly: a request for one bedroom is one bedroom.',
     '  - What it leaves open is design left to the agent: the size and number of storeys, the massing and roofscape, the site and outdoor spaces, the furniture and decor, and the floor, wall and ceiling finishes and materials. An open brief is room for a building with presence (composed volumes, interesting wings, roofs at different heights, good proportions, a considered site, rooms furnished and finished with intent) that stays credible and buildable, rather than a standard catalogue plan.',
     '  - When a choice would change the project, the person can be asked.',
     "  - The sources to build a scene from stand side by side: the catalog (search_assets, place_items, furnish_room), procedural designs (place_design, validate_design), authored objects of the agent's own (add_object), native materials (paint). The catalog holds a limited set that varies by server: what a search returns is what exists.",
-    '  - design_brief records the request read axis by axis (action, size, pieces, openings, style, materials, source, dressing: each bounded by the person’s own words or open with a design statement) and where the objects come from; place_items, furnish_room, place_in_room, add_object and place_design follow it, run_batch included (search_assets and view_assets do not). Source open opens the made pieces and the catalog pieces named in asIs; catalog, brand and existing open the catalog.',
+    '  - design_brief records the request read axis by axis (action, size, form, facade, pieces, openings, style, materials, source, dressing: each bounded by the person’s own words or open with a design statement) and where the objects come from; place_items, furnish_room, place_in_room, add_object and place_design follow it, run_batch included (search_assets and view_assets do not). Source open opens the made pieces and places technical equipment and plants from the catalog; catalog, brand and existing open the catalog.',
     '  - Naming a piece (a double bed) states its function; its form, size within reason and finish are design unless the request fixes them.',
     '  - For full homes/apartments, include realistic support spaces: kitchen, living/dining, bathrooms, hallway/entry, storage/laundry where appropriate.',
     '  - For multi-story buildings, create separate level-owned story shells. Do not stretch first-floor exterior walls to cover upper floors.',

package/dist/resources/agent-guide.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-guide.d.ts","sourceRoot":"","sources":["../../src/resources/agent-guide.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAEpD,eAAO,MAAM,WAAW,QAwFZ,CAAA;AAEZ,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI,CAwCpF"}
+{"version":3,"file":"agent-guide.d.ts","sourceRoot":"","sources":["../../src/resources/agent-guide.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAEpD,eAAO,MAAM,WAAW,QA6FZ,CAAA;AAEZ,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI,CAwCpF"}

package/dist/resources/agent-guide.js

@@ -8,7 +8,7 @@ export const AGENT_GUIDE = [
     '## Projects, Saving and Output',
     '',
     '- `create_project` makes a browser-visible project and binds it to the session; `save_scene` without an id saves to the bound project. `get_project_status` is the authoritative status of a project: `editorUrl`, `browserVisibleVersion`, `latestVersion`, `publishedVersion`, `nodeCount` and `graphHash`.',
-    '- `create_house_from_brief` chooses a starter house from a brief, creates, saves and publishes it, and returns the editor URL. `create_story_shell`, `create_room`, `add_door`, `add_window`, `furnish_room`, `create_roof` and `place_items` each make one part of a building with the numbers the call gives.',
+    '- `create_house_from_brief` replaces the scene with a starter template picked from its bedroom count, rooms and landscaping (not from the brief’s words), saves it as an unpublished draft and returns the editor URL. `create_story_shell`, `create_room`, `add_door`, `add_window`, `furnish_room`, `create_roof` and `place_items` each make one part of a building with the numbers the call gives.',
     '- Semantic tools update the browser-visible draft as they run. `save_scene` with `saveMode: "draft"` saves the draft, autosave-style; `saveMode: "checkpoint"` records a version, a meaningful milestone.',
     '- `verify_scene` reports a scene’s issues (`hasIssues`) and inventory; `get_project_status.nodeCount` is above 0 for a non-empty design.',
     '- `editorUrl` is the link that opens the project in the browser editor, and the one the person is handed: it comes from tool output, and a route inferred from the project id is not a substitute.',
@@ -36,6 +36,10 @@ export const AGENT_GUIDE = [
     '## Scene Facts and Tools',
     '',
     '- `get_site` gives the lot, the buildable area inside its setbacks with its centre and its frontage and depth on the street, the footprint a house usually covers, the ground and whether the lot is only the new-project placeholder, in the level coordinates you draw in. `place_building` takes the outline of the plan about to be drawn, in the coordinates it will be drawn in (and the yards a site plan gives), so the house rises inside the lot, centred. `create_room` and `add_wall` take your coordinates as given and say when they cross the lot line; `verify_scene` reports a house past it.',
+    '- `get_walls.wallTypes` lists assembly preset and project type ids and labels. `add_wall.type` copies the assembly and its total thickness; `set_wall_type({ wallIds, type })` changes existing standard walls (null clears the assembly, keeping thickness). Unknown ids refuse `unknown_wall_type`. Each wall reads its known type as `{ id, label }`, or null.',
+    '- `add_column` with role post makes a framing post: postSize 4x4, 6x6 (default), or 8x8; postBase none (default), post-base (steel), or pier (concrete). Height in metres defaults to the beam above or ceiling plane, as the Post tile does.',
+    '- `add_wall.wallType` is standard (default) or railing. A railing defaults to the Build panel post-and-rail guard, height 0.9144 m, with style-specific members. railing accepts style, postSpacing, postSize (sets thickness), infillSize, infillGap, bottomClearance (metres) and cap. It takes no assembly or foundation. Windows refuse railing_window; skirting refuses railing_wall; doors are gaps. `get_walls` reports wallType.',
+    '- `get_zones` reports roomType room (when absent), porch, deck or patio; floor.drop in metres (0 when absent; explicit floor.elevation wins); porchFraming auto, postSize, postSpacing in metres, beamSize, postCount and beamCount of generated parts still present (null with no outdoor/framing intent); and decking boardSize, gap in metres, direction, including deck defaults. Covered porches frame by default; decks/patios only with auto true. auto false leaves framing to hand edits. `set_zone_intent.patch` uses the same names and units.',
     '- A semantic tool performs the editor’s own operation for what it makes; `apply_patch` writes graph nodes as given, so it carries none of that.',
     "- A call whose arguments a tool's schema rejects is refused with the code `invalid_input` before anything runs and its message names the arguments. A level you write without a `height` is given the height the editor would derive from what it holds (an empty level 2.5 m), and `apply_patch` says so in `notes`.",
     '- `apply_patch` takes create/update/delete ops in one call, applied in order so later ops can reference ids created earlier. A single call is atomic (all or nothing).',
@@ -50,6 +54,7 @@ export const AGENT_GUIDE = [
     '- Adjacent rooms can share one wall (or have openings that line up). A door keeps about 0.65 m clear on both sides; furniture footprints do not overlap.',
     '- A complete home is an exterior shell, interior rooms, openings, a roof, furniture and landscaping.',
     '- On doors and windows, `t` or `position` runs from 0 to 1 along the wall unless a tool explicitly says otherwise.',
+    '- `move_node` moves one node re-seated on its host, as the editor’s move tool does: a door, window or wall item slides along its wall (plan target projected onto the wall, clamped, overlap refused unless force), a ceiling item in plan under its ceiling, a floor node in level plan, a roof piece in its segment-local plan, a wall by translation only. `duplicate_node` copies nodes with their hosted children onto fresh ids, on the same hosts or another level for level-parented roots.',
     '- X/Z are floor-plan axes and Y is vertical; dimensions are meters.',
     "- `create_roof` roofs the storeys and exterior walls standing when it runs. A building's roof goes on its roof level, the level directly above the top storey (named Roof, made when there is none), so exploded and solo level views lift it off the plan; a roof level is not an occupied story. `add_level` puts a new storey under it. A storey takes one roof: `roof_exists` names the one there. A project built before the roof level holds its roof on the storey (`verify_scene`'s `roof_mixed_in_storey`): `move_roofs_to_roof_level` moves it there as it stands, without a delete and rebuild.",
     '- Glazed roof construction supports gable, straight shed and barrel roofs. For barrel, depth is the span and barrelRise is the arch rise, at most half the span. glazing configures frame, glass, grids and panels. Paint glazing-frame, glazing-glass or glazing-solid; without a role, frame and solid panels are painted while glass keeps its finish.',
@@ -62,7 +67,7 @@ export const AGENT_GUIDE = [
     '',
     '## Looking and Starting Over',
     '',
-    "- `view_scene` renders what was built, every storey and the roof, from a viewpoint you pick (a compass side, a side as a front photo names it, from the street the site records or else the house's own front, a height, a street-level eye, an orthographic face, a photo's own camera, in the photo's light). It is a picture to compare against a reference, not a measurement. `interior: { zoneId }` stands inside a room at eye height, a step in from a corner and looking across it. `interior: { levelId }` shows the rooms of one floor: the other floors, its roof and its ceilings are left out of the picture and everything on it, walls, openings and furniture alike, is cut at 0.65 of the storey's height. On a hosted server the person's open editor tab renders it, and a refusal says what is wrong: `editor_tab_required` (no tab has the project open: it carries the editor link, and the person's \"Agents may open the editor for me\" setting decides what you may do about it, in the refusal's own words), `editor_tab_hidden` (a tab is in the background: ask the person to bring it to the front, then call again) and `editor_tab_busy` (a tab is open but slow or still loading: it carries no link; wait a few seconds and call again, and tell the person only if it is still busy after about a minute; never ask them to open anything).",
+    "- `view_scene` renders what was built, every storey and the roof, from a viewpoint you pick (a compass side, a side as a front photo names it, from the street the site records or else the house's own front, a height, a street-level eye, an orthographic face, a photo's own camera, in the photo's light). It is a picture to compare against a reference, not a measurement. `interior: { zoneId }` stands inside a room at eye height, a step in from a corner and looking across it. `interior: { levelId }` shows the rooms of one floor: the other floors, its roof and its ceilings are left out of the picture and everything on it, walls, openings and furniture alike, is cut at 0.65 of the storey's height. The server has no renderer of its own: the host renders the view, through an editor tab open on the project or a renderer of its own. When nothing can render it, the call is refused with its reason (`view_unavailable` on a server with no rendering; a hosted server may answer with its own codes, such as `editor_tab_required`, `editor_tab_hidden` or `editor_tab_busy`, each saying what to do next): follow the refusal's own words, and take sizes and counts from the tools.",
     '- `clear_scene` empties the project on purpose, for when the person asked to start over, keeping the site, the building and one level. Any other write that would leave the project empty is refused as `scene_wipe_blocked`, and nothing changes.',
     '',
     '## Custom Designs',
@@ -81,7 +86,7 @@ export const AGENT_GUIDE = [
     '',
     '- What a request states (sizes, counts, rooms, style, references, "catalog only", a single room) binds the work exactly: a request for one bedroom is one bedroom. What it leaves open is design left to the agent: the size and number of storeys, the massing and roofscape, the site and outdoor spaces, the furniture and decor, and the floor, wall and ceiling finishes and materials. Defaults are for technical values (thicknesses, clearances, heights). An open brief is room for a building with presence (composed volumes, interesting wings, roofs at different heights, good proportions, a considered site, rooms furnished and finished with intent) that stays credible and buildable, rather than a standard catalogue plan. When a choice would change the project, the person can be asked.',
     '- The sources to build a scene from stand side by side: the catalog (`search_assets`, `place_items`, `furnish_room`), procedural designs (`place_design`, `validate_design`), authored objects of the agent’s own (`add_object`), native materials (`paint`). The catalog holds a limited set that varies by server: what a search returns is what exists.',
-    '- Naming a piece (a double bed) states its function; its form, size within reason and finish are design unless the request fixes them. `design_brief` records the request as a brief, read axis by axis (action, size, pieces, openings, style, materials, source, dressing: each bounded by the person’s own words or open with a design statement; the source is `open`, `catalog`, `brand` or `existing`) and furnishings are placed or made after it, inside `run_batch` too: `search_assets` and `view_assets` read the catalog at any time. Source `open` opens `add_object` and `place_design`, and places unchanged technical equipment only when the brief names it in `asIs` with a reason after `view_assets` showed it in this session; `furnish_room` stays closed. The other sources open `place_items`, `furnish_room` and `place_in_room`, with creation for what the catalog lacks. A non-open source quotes the request in `sourceQuote`. `beyond` records eight dressing layers; an open `dressing` axis names pieces in at least six, and the result returns them as `dressing`. The brief is the session’s: a scene load starts another, and the next `design_brief` replaces it.',
+    '- Naming a piece (a double bed) states its function; its form, size within reason and finish are design unless the request fixes them. `design_brief` records the request as a brief, read axis by axis (action, size, form, facade, pieces, openings, style, materials, source, dressing: each bounded by the person’s own words or open with a design statement; the source is `open`, `catalog`, `brand` or `existing`) and furnishings are placed or made after it, inside `run_batch` too: `search_assets` and `view_assets` read the catalog at any time. Source `open` opens `add_object` and `place_design`, and places technical equipment and plants from the catalog (the catalog’s function tags tell them from furniture); every other catalog piece is made, and `furnish_room` stays closed. The other sources open `place_items`, `furnish_room` and `place_in_room`, with creation for what the catalog lacks. A non-open source quotes the request in `sourceQuote`. `beyond` records eight dressing layers; an open `dressing` axis names pieces in at least six, and the result returns them as `dressing`. The brief is the session’s: a scene load starts another, and the next `design_brief` replaces it.',
     '',
     '## Output Contract',
     '',

package/dist/resources/catalog-items.d.ts

@@ -1,9 +1,12 @@
 import type { McpServer } from '@modelcontextprotocol/server';
 import type { SceneOperations } from '../operations/index.js';
 import { type AssetCatalog } from '../tools/asset-catalog.js';
+/** The items the resource lists of a library searched where it is kept; search_assets finds the rest. */
+export declare const CATALOG_RESOURCE_LIMIT = 100;
 /**
  * `pascal://catalog/items` — the items place_items draws from: the host's library when it passes
- * one, else a dependency-free built-in subset, so headless agents can still place furniture.
+ * one, else a dependency-free built-in subset, so headless agents can still place furniture. A
+ * library kept elsewhere is listed by its first items and its size, never whole.
  */
 export declare function registerCatalogItems(server: McpServer, _bridge: SceneOperations, catalog?: AssetCatalog): void;
 //# sourceMappingURL=catalog-items.d.ts.map

package/dist/resources/catalog-items.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"catalog-items.d.ts","sourceRoot":"","sources":["../../src/resources/catalog-items.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACpD,OAAO,EAAE,KAAK,YAAY,EAAkB,MAAM,wBAAwB,CAAA;AAE1E;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,eAAe,EACxB,OAAO,GAAE,YAA6B,GACrC,IAAI,CA0BN"}
+{"version":3,"file":"catalog-items.d.ts","sourceRoot":"","sources":["../../src/resources/catalog-items.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAE7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACpD,OAAO,EAAE,KAAK,YAAY,EAAkB,MAAM,wBAAwB,CAAA;AAE1E,yGAAyG;AACzG,eAAO,MAAM,sBAAsB,MAAM,CAAA;AAKzC;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,eAAe,EACxB,OAAO,GAAE,YAA6B,GACrC,IAAI,CA6BN"}

package/dist/resources/catalog-items.js

@@ -1,7 +1,12 @@
+import { isAssetCatalogSource } from '@pascal-app/core/agent-operations';
 import { builtInCatalog } from '../tools/asset-catalog.js';
+/** The items the resource lists of a library searched where it is kept; search_assets finds the rest. */
+export const CATALOG_RESOURCE_LIMIT = 100;
+const NOTE = 'A fixture this catalog lacks (a wall light, a house number) is built as a design: place_design.';
 /**
  * `pascal://catalog/items` — the items place_items draws from: the host's library when it passes
- * one, else a dependency-free built-in subset, so headless agents can still place furniture.
+ * one, else a dependency-free built-in subset, so headless agents can still place furniture. A
+ * library kept elsewhere is listed by its first items and its size, never whole.
  */
 export function registerCatalogItems(server, _bridge, catalog = builtInCatalog) {
     server.registerResource('catalog-items', 'pascal://catalog/items', {
@@ -9,11 +14,14 @@ export function registerCatalogItems(server, _bridge, catalog = builtInCatalog)
         description: "Placeable items: the host's library when it has one, else a built-in subset.",
         mimeType: 'application/json',
     }, async (uri) => {
-        const payload = {
-            status: 'ok',
-            items: await catalog(),
-            note: 'A fixture this catalog lacks (a wall light, a house number) is built as a design: place_design.',
-        };
+        const payload = isAssetCatalogSource(catalog)
+            ? await catalog.search({ limit: CATALOG_RESOURCE_LIMIT }).then(({ items, total }) => ({
+                status: 'ok',
+                items,
+                total,
+                note: `${items.length < total ? `The library holds ${total} items; these are the first ${items.length}, and search_assets finds any of them. ` : ''}${NOTE}`,
+            }))
+            : { status: 'ok', items: catalog, note: NOTE };
         return {
             contents: [
                 {

package/dist/server.d.ts

@@ -1,10 +1,10 @@
 import { McpServer } from '@modelcontextprotocol/server';
-import { type HostedServiceExecutor, type ProjectFileToolExecutor } from '@pascal-app/core/agent-operations';
+import { type HostedServiceExecutor, type ProjectFileReader, type ProjectFileToolExecutor } from '@pascal-app/core/agent-operations';
 import type { SceneBridge } from './bridge/scene-bridge.js';
 import { type SceneOperations } from './operations/index.js';
 import type { SceneStore } from './storage/types.js';
-import type { GeometryScriptHost } from './tools/add-object.js';
-import { type AssetCatalog } from './tools/asset-catalog.js';
+import type { GeometryScriptHost, ObjectMakerHost } from './tools/add-object.js';
+import type { AssetCatalog } from './tools/asset-catalog.js';
 import type { PlanReadingHosts } from './tools/shared-tools.js';
 import type { SceneViewHost } from './tools/view-scene.js';
 export type PascalMcpToolExecutor = <Result>(input: {
@@ -28,16 +28,20 @@ export type CreatePascalMcpServerOptions = {
      */
     executeTool?: PascalMcpToolExecutor;
     /**
-     * The items search_assets, place_items and furnish_room draw from, read once per server. The
-     * hosted app passes its published library; without it, a small built-in list.
+     * The items search_assets, place_items and furnish_room draw from: a list, or a source each call
+     * reads what it needs of (the hosted app's published library); without it, a small built-in list.
      */
     catalog?: AssetCatalog;
     /** Runs and stores `add_object` modules; without it the tool answers `scripts_unavailable`. */
     geometryScripts?: GeometryScriptHost;
+    /** Makes `add_object`'s pieces from words with the host's models; without it they are refused. */
+    objectMakers?: ObjectMakerHost;
     /** Optional authenticated hosted services; local scene tools remain usable without them. */
     services?: HostedServiceExecutor;
     /** Authenticated project file catalog; absent for a local scene without hosted files. */
     files?: ProjectFileToolExecutor;
+    /** Reads a project file's bytes (author_scene's payloadFile); absent without hosted files. */
+    readFile?: ProjectFileReader;
     /** Asks an editor open on the project for a picture (`view_scene`); without it, refused. */
     sceneViews?: SceneViewHost;
     /** Reads catalog items' pictures and surfaces before view_assets and paint. */

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EAKV,MAAM,8BAA8B,CAAA;AACrC,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAG7B,MAAM,mCAAmC,CAAA;AAC1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,cAAc,CAAA;AAG1E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAEjD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAC5D,OAAO,EAAE,KAAK,YAAY,EAAiB,MAAM,uBAAuB,CAAA;AAKxE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAIvD,MAAM,MAAM,qBAAqB,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE;IAClD,IAAI,EAAE,MAAM,CAAA;IACZ,wEAAwE;IACxE,SAAS,EAAE,OAAO,CAAA;IAClB,MAAM,EAAE,WAAW,CAAA;IACnB,OAAO,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;CAC/B,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;AAErB,MAAM,MAAM,4BAA4B,GAAG;IACzC,MAAM,EAAE,WAAW,CAAA;IACnB,UAAU,CAAC,EAAE,eAAe,CAAA;IAC5B,mFAAmF;IACnF,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,WAAW,CAAC,EAAE,qBAAqB,CAAA;IACnC;;;OAGG;IACH,OAAO,CAAC,EAAE,YAAY,CAAA;IACtB,+FAA+F;IAC/F,eAAe,CAAC,EAAE,kBAAkB,CAAA;IACpC,4FAA4F;IAC5F,QAAQ,CAAC,EAAE,qBAAqB,CAAA;IAChC,yFAAyF;IACzF,KAAK,CAAC,EAAE,uBAAuB,CAAA;IAC/B,4FAA4F;IAC5F,UAAU,CAAC,EAAE,aAAa,CAAA;IAC1B,+EAA+E;IAC/E,UAAU,CAAC,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAA;IAC3C,yFAAyF;IACzF,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,4BAA4B,GAAG,SAAS,CA4BnF"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EAKV,MAAM,8BAA8B,CAAA;AACrC,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAG7B,MAAM,mCAAmC,CAAA;AAE1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,cAAc,CAAA;AAG1E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAEjD,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAC7E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAKzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAIvD,MAAM,MAAM,qBAAqB,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE;IAClD,IAAI,EAAE,MAAM,CAAA;IACZ,wEAAwE;IACxE,SAAS,EAAE,OAAO,CAAA;IAClB,MAAM,EAAE,WAAW,CAAA;IACnB,OAAO,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;CAC/B,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;AAErB,MAAM,MAAM,4BAA4B,GAAG;IACzC,MAAM,EAAE,WAAW,CAAA;IACnB,UAAU,CAAC,EAAE,eAAe,CAAA;IAC5B,mFAAmF;IACnF,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,WAAW,CAAC,EAAE,qBAAqB,CAAA;IACnC;;;OAGG;IACH,OAAO,CAAC,EAAE,YAAY,CAAA;IACtB,+FAA+F;IAC/F,eAAe,CAAC,EAAE,kBAAkB,CAAA;IACpC,kGAAkG;IAClG,YAAY,CAAC,EAAE,eAAe,CAAA;IAC9B,4FAA4F;IAC5F,QAAQ,CAAC,EAAE,qBAAqB,CAAA;IAChC,yFAAyF;IACzF,KAAK,CAAC,EAAE,uBAAuB,CAAA;IAC/B,8FAA8F;IAC9F,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IAC5B,4FAA4F;IAC5F,UAAU,CAAC,EAAE,aAAa,CAAA;IAC1B,+EAA+E;IAC/E,UAAU,CAAC,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAA;IAC3C,yFAAyF;IACzF,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,4BAA4B,GAAG,SAAS,CA8BnF"}