@plitzi/sdk-mcp 0.38.4 → 0.38.6

package/dist/modules/mcp/apps/render/styles.js

@@ -2,53 +2,22 @@ import { require } from "../shared/resolve.js";
 import path from "node:path";
 import { readFileSync } from "node:fs";
 //#region src/modules/mcp/apps/render/styles.ts
-/** The SDK stylesheet, split in two.
+/** The SDK's stylesheets, as a widget gets them.
 *
 *  Everything the page shell inlines is paid for by EVERY widget: the host loads the ui:// page into a fresh
-*  sandboxed iframe and parses it whole before anything paints, which is the "Rendering…" the user waits through.
-*  Three of those @font-face blocks are Font Awesome shipped as base64 woff2 — ~330 KB, close to a fifth of the
-*  page — and only a widget that authored a `fontAwesome` element has any use for them.
-*
-*  So the shell takes the base, and the fonts travel in the tool result of the renders that actually draw an icon
-*  (see tools/render.ts). A widget without icons never downloads a glyph; one with icons looks exactly the same as
-*  before. */
-/** Where the closing brace of the block opened at `open` is, so a nested one cannot end it early. Returns the
-*  string's length when the CSS is truncated mid-block, which drops that tail rather than mixing it into the base. */
-var blockEnd = (css, open) => {
-	let depth = 0;
-	for (let at = open; at < css.length; at++) if (css[at] === "{") depth++;
-	else if (css[at] === "}") {
-		depth--;
-		if (depth === 0) return at + 1;
-	}
-	return css.length;
-};
-/** Lifts every @font-face block out of a stylesheet. Brace counting rather than a CSS parser: a @font-face body is
-*  plain declarations, and base64 payloads and url() values carry no braces of their own. */
-var splitFontFaces = (css) => {
-	const base = [];
-	const fonts = [];
-	let cursor = 0;
-	for (let at = css.indexOf("@font-face", cursor); at !== -1; at = css.indexOf("@font-face", cursor)) {
-		const open = css.indexOf("{", at);
-		if (open === -1) break;
-		const end = blockEnd(css, open);
-		base.push(css.slice(cursor, at));
-		fonts.push(css.slice(at, end));
-		cursor = end;
-	}
-	base.push(css.slice(cursor));
-	return {
-		base: base.join(""),
-		fonts: fonts.join("")
-	};
-};
-var stylesheet = () => readFileSync(path.join(path.dirname(require.resolve("@plitzi/plitzi-sdk")), "plitzi-sdk.css"), "utf-8");
-var split;
-var sdkStyles = () => split ??= splitFontFaces(stylesheet());
-/** What the page shell inlines: the SDK stylesheet without the icon fonts. */
-var widgetCss = () => sdkStyles().base;
-/** The icon fonts, for the renders that draw one. */
-var iconFontCss = () => sdkStyles().fonts;
+*  sandboxed iframe and parses it whole before anything paints, which is the "Rendering…" the user waits through. So
+*  the shell takes only `plitzi-sdk.css`, and Font Awesome — its rules in `plitzi-sdk-icons.css`, its fonts files
+*  beside it — travels in the tool result of the renders that actually draw an icon (see tools/render.ts). A widget
+*  without icons never downloads a glyph. */
+var sdkDist = () => path.dirname(require.resolve("@plitzi/plitzi-sdk"));
+var FONT_URL = /url\((webfonts\/[\w.-]+\.woff2)\)/g;
+/** The icon sheet with each font it names inlined: the widget's sandbox reaches no origin to fetch one from. */
+var inlineIconFonts = (css, readFont) => css.replace(FONT_URL, (_match, file) => `url(data:font/woff2;base64,${readFont(file).toString("base64")})`);
+var base;
+var icons;
+/** What the page shell inlines. */
+var widgetCss = () => base ??= readFileSync(path.join(sdkDist(), "plitzi-sdk.css"), "utf-8");
+/** Font Awesome, fonts and all, for the renders that draw an icon. */
+var iconFontCss = () => icons ??= inlineIconFonts(readFileSync(path.join(sdkDist(), "plitzi-sdk-icons.css"), "utf-8"), (file) => readFileSync(path.join(sdkDist(), file)));
 //#endregion
-export { iconFontCss, splitFontFaces, widgetCss };
+export { iconFontCss, inlineIconFonts, widgetCss };

package/dist/modules/mcp/apps/render/view/index.tsx

@@ -34,7 +34,7 @@ const ErrorPanel = ({ title, details }: { title: string; details: string }) => (
  *  wholesale when the result lands. A host that streams nothing paints none of this and keeps the static text. */
 const SKELETON_BAR_WIDTHS = ['92%', '78%', '85%', '64%', '88%', '72%'];
 
-// The deployment's own switch (mcpAi.renderStreaming), handed over by the page. Absent means on: a page built
+// The deployment's own switch (McpOptions.renderStreaming), handed over by the page. Absent means on: a page built
 // before the setting existed carries none, and a host that streams no arguments paints the same either way.
 const streamingEnabled =
   (globalThis as { __PLITZI_VIEW__?: { streaming?: boolean } }).__PLITZI_VIEW__?.streaming !== false;

package/dist/modules/mcp/catalogs/index.js

@@ -1,4 +1,4 @@
 import { buildDataSourceCatalog, buildInteractionCatalog, observedDataSources, observedInteractionActions } from "./observed.js";
 import { buildTypeRegistry } from "./registry.js";
-import { BUILTIN_ELEMENT_CALLBACKS as BUILTIN_ELEMENT_CALLBACKS$1, BUILTIN_GLOBAL_CALLBACKS as BUILTIN_GLOBAL_CALLBACKS$1, BUILTIN_UTILITIES as BUILTIN_UTILITIES$1, applyBuiltinCallback, applyElementCallback, applyUtility, cssProperties as cssProperties$1, cssShorthands, elementCatalog as elementCatalog$1, elementTypeNames, expandShorthand, expandShorthandPatch, getElementCallback, getGlobalCallback, getUtility, hiddenParams, isCssProperty, reconcileParams, suggestCssProperty } from "@plitzi/sdk-authoring";
-export { BUILTIN_ELEMENT_CALLBACKS$1 as BUILTIN_ELEMENT_CALLBACKS, BUILTIN_GLOBAL_CALLBACKS$1 as BUILTIN_GLOBAL_CALLBACKS, BUILTIN_UTILITIES$1 as BUILTIN_UTILITIES, applyBuiltinCallback, applyElementCallback, applyUtility, buildDataSourceCatalog, buildInteractionCatalog, buildTypeRegistry, cssProperties$1 as cssProperties, cssShorthands, elementCatalog$1 as elementCatalog, elementTypeNames, expandShorthand, expandShorthandPatch, getElementCallback, getGlobalCallback, getUtility, hiddenParams, isCssProperty, observedDataSources, observedInteractionActions, reconcileParams, suggestCssProperty };
+import { applyBuiltinCallback, applyElementCallback, applyUtility, cssProperties as cssProperties$1, cssShorthands, elementCatalog as elementCatalog$1, elementTypeNames, expandShorthand, expandShorthandPatch, getElementCallback, getGlobalCallback, getUtility, hiddenParams, isCssProperty, reconcileParams, suggestCssProperty } from "@plitzi/sdk-authoring";
+export { applyBuiltinCallback, applyElementCallback, applyUtility, buildDataSourceCatalog, buildInteractionCatalog, buildTypeRegistry, cssProperties$1 as cssProperties, cssShorthands, elementCatalog$1 as elementCatalog, elementTypeNames, expandShorthand, expandShorthandPatch, getElementCallback, getGlobalCallback, getUtility, hiddenParams, isCssProperty, observedDataSources, observedInteractionActions, reconcileParams, suggestCssProperty };

package/dist/modules/mcp/catalogs/pluginCatalog.js

@@ -10,8 +10,8 @@
 *
 * The BUILT-IN types are not here: their structural half (attributes, style selectors, default styles) comes from
 * `@plitzi/sdk-elements`, which this package deliberately does not depend on — a React element library is the
-* heaviest possible import for a server that renders nothing. Deployments merge those in themselves; the curated
-* semantics for them live in `builtinComponents.ts`.
+* heaviest possible import for a server that renders nothing. Deployments merge those in themselves; what each one is
+* for is `elementCatalog`, read off the declarations by `@plitzi/sdk-authoring`.
 */
 var MANIFEST_TTL_MS = 6e5;
 var manifestCache = /* @__PURE__ */ new Map();

package/dist/modules/mcp/e2e/mcpEndpoint.d.ts

@@ -18,7 +18,8 @@ export interface McpEndpointOptions {
     /** Attach a space to the connection, the way an authorized connector's token does — the server then offers its
      *  editing surface. Omitted, the endpoint is the guest one: no space, so only what works without one. */
     spaceId?: number;
-    /** The deployment switch a consumer sets as `mcpAi.renderStreaming`. Omitted, the server's own default stands. */
+    /** The deployment switch a consumer sets as `McpOptions.renderStreaming`. Omitted, the server's own default
+     *  stands. */
     renderStreaming?: boolean;
 }
 /** Start the endpoint and connect a real MCP client to it, as a remote connector does. */

package/dist/modules/mcp/handler.d.ts

@@ -10,9 +10,9 @@ export type McpRequestOptions = {
     preview?: PreviewClient;
     screenshot?: ScreenshotClient;
     logger?: ServerLogger;
-    /** Deployment switch for the plitzi_render view (see `mcpAi.renderStreaming`). Defaults to true. */
+    /** Deployment switch for the plitzi_render view (see `McpOptions.renderStreaming`). Defaults to true. */
     renderStreaming?: boolean;
-    /** Where a rendered widget loads everything external from (see `mcpAi.proxy`). Absent → the URLs an agent
+    /** Where a rendered widget loads everything external from (see `McpOptions.proxy`). Absent → the URLs an agent
      *  authored travel to the host exactly as written. */
     proxy?: ResourceProxy;
 };

package/dist/modules/mcp/helpers/callToolResult.d.ts

@@ -0,0 +1,2 @@
+import { CallToolResult } from '@modelcontextprotocol/sdk/types.js';
+export declare const isCallToolResult: (result: unknown) => result is CallToolResult;

package/dist/modules/mcp/helpers/callToolResult.js

@@ -0,0 +1,4 @@
+//#region src/modules/mcp/helpers/callToolResult.ts
+var isCallToolResult = (result) => typeof result === "object" && result !== null && Array.isArray(result.content);
+//#endregion
+export { isCallToolResult };

package/dist/modules/mcp/helpers/guide.js

@@ -61,7 +61,8 @@ computed for you). Node types: \`callback\` (an element's own callback — \`ele
 (category/key/value/revertOnFinish) ≠ global \`setState\` (source \`state\`, key/type/value). To turn a step off use
 \`patchInteractionNode {enabled:false}\` — \`deleteInteraction\` removes it (destructive; confirm first). Any param
 **value** can be a binding token \`{{ source }}\` (e.g. notification \`content: "{{ list_<name>.item.name }}"\`).
-Steps read the page as it is when they run; a refiring trigger is ignored unless \`whileRunning: "queue"\`; keyboard
+Steps read the page as it is when they run; a refiring trigger is ignored unless \`whileRunning: "queue"\` (or
+\`"latest"\`: the newest firing stops the running one); keyboard
 shortcuts are the \`onKey\` trigger (\`keys: "shift+f, escape"\`).
 
 **CMS / API integrations** (\`upsertConnector\`): a **connector** is a manifest declaring a provider's base URL,
@@ -178,6 +179,8 @@ Never download a whole tree you do not need.
   action may be built from.
 - \`plitzi://functions/{env}\` — the space's **functions**, its own server code: which files, and the tasks, routes and
   hosts they declare. \`plitzi://functions/{env}/{+path}\` reads one file whole. See *Functions* below.
+- \`plitzi://data/{env}\` — the space's **data**: JSON files its server providers read, never served.
+  \`plitzi://data/{env}/{+path}\` reads one, parsed. See *Data* below.
 - \`plitzi://changes/{env}\` — the space's **change history**, read-only and newest first: who made each change (a
   person in the builder, an agent, the autofix), when, and every element, class, token or font it touched, whole, before
   and after. \`/{id}\` for the history of one of them — how you find what changed an element you are asked about, or
@@ -249,6 +252,11 @@ space already had is not repeated on every batch — and none of them blocks any
   \`states\`/\`ancestors\`, the SDK (reduced motion, the theme toggle's icons) or the space's notification look says.
 - \`heavy-animation\` — keyframes that animate a size, a position, a blur, a shadow, or a colour in a loop: they stutter
   while the page loads. Lighter, not shorter — see **Motion — good practices**.
+- \`unused-class\`, \`unused-token\`, \`unused-component\` — declared and read by nothing: remove it
+  (\`deleteDefinition\`, \`deleteStyleVariable\`, \`deleteComponent\`), or use it where it was meant to go. Said
+  when a batch leaves one behind.
+- \`literal-colour\` — a class painted from the palette typing out a token's light value: \`var(--token)\` when it
+  should follow the scheme; a token of one value when it must stay the same in both.
 \`plitzi://explain/<code>\` explains each. Take one unless the copies are about to diverge; one left on purpose is
 quieted on an element it names — \`quiet: ["repeated-shape"]\` on \`upsertElement\`/\`patchElement\` (\`null\` removes it)
 — and is not offered again, here, in the builder or in authoring. Suggestions' codes only.
@@ -424,7 +432,8 @@ fixed shape under *Connectors* — \`.records\` or \`.record\`, \`.pageInfo\`,
 response: \`.data\` (the parsed body — an API answering \`{ "items": [...] }\` is read as
 \`apiContainer_<name>.data.items\`) and \`.status\` (the HTTP status) — and a \`"server"\` provider with only a
 \`query\` (a JSON file the deployment serves) answers in that same shape, so moving it to the server changes no
-binding. Both add \`.isLoading\`, \`.isEmpty\`,
+binding. Fed by a server **action**, it is the action's output at the root (\`apiContainer_<name>.items\`, never
+\`.data.items\`). All add \`.isLoading\` (true while asked again too), \`.isEmpty\`,
 \`.hasError\` and \`.errorMessage\`.
 
 **Source scope — a source is visible to the provider's DESCENDANTS only.** An element source named
@@ -471,7 +480,8 @@ you — never wire them by hand. Each step also has an \`enabled\` flag (see dis
 **Each step reads the page as it is when it runs**: a \`when\` or a \`{{ state.x }}\` after a \`setState\` sees the new
 value, and one after a \`delay\` sees what changed meanwhile. To act on the value from BEFORE a write, put the reading
 step first. **A trigger fired again while its flow runs is ignored** (no double submit); set \`"whileRunning": "queue"\`
-on the trigger node for a stream of events that must each run in order (\`"parallel"\` runs them at once).
+on the trigger node for a stream of events that must each run in order (\`"parallel"\` runs them at once,
+\`"latest"\` stops the running flow — its server action or request too — for a search as you type).
 **Keyboard shortcuts** are a trigger every element has: \`onKey\` with param \`keys\` — \`"f"\`, \`"shift+f"\`,
 \`"mod+k"\` (⌘ on a Mac, Ctrl elsewhere), \`"plus, ="\`, \`"escape"\`. Heard on the whole page while the element is
 mounted, ignored while someone types in a field; the flow reads the key pressed as \`{{ <trigger id>.key }}\`.
@@ -673,7 +683,7 @@ returns **no records** rather than the whole collection — a URL that addressed
 **Paging** is the \`pagination\` prop: \`"none"\`, \`"url"\` (the page number rides the query string, so pages are
 shareable and indexable — prefer it) or \`"append"\` (a "load more" list). Give each list on a page its own
 \`pageParam\` so two lists page independently. The provider also offers the \`loadMore\` and \`goToPage\` callbacks to
-interaction flows, and \`performQuery\` to refetch.
+interaction flows, \`performQuery\` to refetch, and \`cancelQuery\` to drop a request in flight (a STOP).
 
 **Writing back** (a form, a "delete" button): declare the endpoint under \`endpoints.write\`, then call the provider's
 **\`writeRecord\`** callback from an interaction flow — nodeType \`callback\`, \`elementId\` the apiContainer's ref,
@@ -732,6 +742,19 @@ any other (\`<namespace>.<action>\`), listed in \`plitzi://actions/{env}/tasks\`
   The live site runs what the space was last published with, never the draft. Running functions is part of the paid
   plans: on another plan they save, and a run answers why it did not start — tell the user rather than work around it.
 
+## Data
+JSON the space's pages read on the server and never serve — a catalog, prices, a menu: what a page needs whole and
+nobody edits element by element.
+
+- **Read** it as a provider does: \`apiContainer\` with \`runtime: "server"\` and \`query: "/data/products.json"\` reads
+  \`products.json\` of \`plitzi://data/{env}\`, and the page arrives with it. A browser provider reading \`/data/…\` is
+  refused — the data is the server's.
+- **Write** it with \`upsertDataFile { path, content }\` (the whole file, as JSON text; \`deleteDataFile { path }\`
+  removes one): a path of plain segments ending in \`.json\`. Saved whole, with the batch: a newer copy (somebody saved
+  since you read it) refuses it — read it again.
+- **What a provider reads is in the page it renders**: data a page must not carry belongs in a server action, which
+  answers only what is shown. The live site reads what the space was last published with, never the draft.
+
 ## Realtime channels
 Pages that see each other — cursors, presence, a shared board, a game. Three parts, all needed:
 

package/dist/modules/mcp/helpers/index.d.ts

@@ -1,4 +1,4 @@
-export * from './agentPrompt';
+export * from './callToolResult';
 export * from './components';
 export * from './computeVersion';
 export * from './space';

package/dist/modules/mcp/helpers/space.d.ts

@@ -1,5 +1,5 @@
 import { AIElementDetail } from '../types';
-import { ActionEntry, ActionTaskDescriptor, ComponentCatalog, ConnectorEntry, Element, FunctionsDraft, PageFolder, Schema, Style } from '@plitzi/sdk-shared';
+import { ActionEntry, ActionTaskDescriptor, ComponentCatalog, ConnectorEntry, DataDraft, Element, FunctionsDraft, PageFolder, Schema, Style } from '@plitzi/sdk-shared';
 /** The working view the tools read and mutate: the two Plitzi schemas (elements + style), which the platform
  *  stores and persists as separate documents (Space model / Style model), plus the space's `connectors` — a third
  *  store (one row per connector) that a provider element points into by identifier. `catalog` is read-only
@@ -16,6 +16,9 @@ export interface Space {
     /** The space's own functions — their source files, which copy of them this is, and what they declare. Absent when
      *  the deployment offers no functions: then there is nothing to read and every function op is refused. */
     functions?: FunctionsDraft;
+    /** The space's own data — JSON its server providers read (`/data/<file>`), never served — and which copy of it this
+     *  is. Absent when the deployment offers no data: then there is nothing to read and every data op is refused. */
+    data?: DataDraft;
     catalog?: ComponentCatalog;
     /**
      * The whole document, when `schema` is a view of one tree of it — a component's, which an op addressed to a

package/dist/modules/mcp/helpers/space.js

@@ -6,6 +6,7 @@ var cloneSpace = (space) => ({
 	connectors: structuredClone(space.connectors),
 	actions: structuredClone(space.actions),
 	...space.functions ? { functions: structuredClone(space.functions) } : {},
+	...space.data ? { data: structuredClone(space.data) } : {},
 	...space.actionTasks ? { actionTasks: space.actionTasks } : {},
 	...space.catalog ? { catalog: space.catalog } : {}
 });

package/dist/modules/mcp/helpers/uris.d.ts

@@ -28,6 +28,8 @@ export declare const actionUri: (env: Env, ref: string) => string;
 export declare const actionTasksUri: (env: Env) => string;
 export declare const functionsUri: (env: Env) => string;
 export declare const functionFileUri: (env: Env, path: string) => string;
+export declare const dataUri: (env: Env) => string;
+export declare const dataFileUri: (env: Env, path: string) => string;
 export declare const foldersUri: (env: Env) => string;
 export declare const folderUri: (env: Env, ref: string) => string;
 export declare const defsUri: (env: Env) => string;

package/dist/modules/mcp/helpers/uris.js

@@ -28,6 +28,8 @@ var actionUri = (env, ref) => `plitzi://actions/${env}/${ref}`;
 var actionTasksUri = (env) => `plitzi://actions/${env}/tasks`;
 var functionsUri = (env) => `plitzi://functions/${env}`;
 var functionFileUri = (env, path) => `plitzi://functions/${env}/${path}`;
+var dataUri = (env) => `plitzi://data/${env}`;
+var dataFileUri = (env, path) => `plitzi://data/${env}/${path}`;
 var foldersUri = (env) => `plitzi://folders/${env}`;
 var folderUri = (env, ref) => `plitzi://folders/${env}/${ref}`;
 var defsUri = (env) => `plitzi://definitions/${env}`;
@@ -62,4 +64,4 @@ var itemTemplates = (env) => [
 *  family and extracts its ref in one step, without repeating the prefix string for both the startsWith and slice. */
 var afterPrefix = (uri, prefix) => uri.startsWith(prefix) ? uri.slice(prefix.length) : void 0;
 //#endregion
-export { actionTasksUri, actionUri, actionsUri, afterPrefix, aliasedRoots, changesUri, componentsUri, connectorPresetsUri, connectorUri, connectorsUri, cssPropertiesUri, dataSourcesUri, defUri, defsUri, elementUri, flagsUri, folderUri, foldersUri, fontUri, fontsUri, functionFileUri, functionsUri, globalUri, globalsUri, guideUri, idUri, idsUri, interactionsUri, itemTemplates, layoutsUri, pageUri, pagesUri, primerUri, schemaVarsUri, settingsUri, styleVarUri, styleVarsUri, typesUri };
+export { actionTasksUri, actionUri, actionsUri, afterPrefix, aliasedRoots, changesUri, componentsUri, connectorPresetsUri, connectorUri, connectorsUri, cssPropertiesUri, dataFileUri, dataSourcesUri, dataUri, defUri, defsUri, elementUri, flagsUri, folderUri, foldersUri, fontUri, fontsUri, functionFileUri, functionsUri, globalUri, globalsUri, guideUri, idUri, idsUri, interactionsUri, itemTemplates, layoutsUri, pageUri, pagesUri, primerUri, schemaVarsUri, settingsUri, styleVarUri, styleVarsUri, typesUri };

package/dist/modules/mcp/index.d.ts

@@ -1,7 +1,7 @@
 export { createMcpServer, handleMcp, serveMcp, readMcpBody } from './handler';
 export { readResource, resourceVersion, registerResources, buildTypeRegistry, cssProperties } from './resources';
 export { apply, validate, search, read, validateOperations, operation, tools } from './tools';
-export { computeVersion, buildAgentGuide } from './helpers';
+export { computeVersion } from './helpers';
 export { createHttpPreviewClient } from './previewClient';
 export { createLocalScreenshotClient, resolveLocalBrowser } from './localScreenshotClient';
 export { createHttpScreenshotClient } from './screenshotClient';

package/dist/modules/mcp/resources/connectors.d.ts

@@ -10,7 +10,7 @@ export declare const connectorSummaries: (space: Space) => {
         operators: string[];
         pagination: import('@plitzi/sdk-shared').ConnectorPagination | undefined;
         credential: string | undefined;
-        fields: Record<string, "number" | "file" | "text" | "color" | "switch" | "email" | "date" | "richText" | "image" | "multiImage" | "video" | "link" | "phone" | "option"> | undefined;
+        fields: Record<string, "number" | "file" | "text" | "color" | "image" | "switch" | "email" | "date" | "richText" | "multiImage" | "video" | "link" | "phone" | "option"> | undefined;
     }[];
 };
 /** Connector reads: the space's connector listing and one full manifest. Undefined when the URI belongs to

package/dist/modules/mcp/resources/core.js

@@ -1,7 +1,7 @@
-import { buildTypeRegistry } from "../catalogs/registry.js";
-import { cssProperties, cssShorthands } from "../catalogs/index.js";
 import "../helpers/uris.js";
 import { guideText } from "../helpers/guide.js";
+import { buildTypeRegistry } from "../catalogs/registry.js";
+import { cssProperties, cssShorthands } from "../catalogs/index.js";
 import { envelope } from "./envelope.js";
 //#region src/modules/mcp/resources/core.ts
 /** Space-independent singletons: the usage guide, the observed type registry and the CSS property catalog.

package/dist/modules/mcp/resources/data.d.ts

@@ -0,0 +1,8 @@
+import { Space } from '../helpers';
+import { Env, ResourceEnvelope } from '../types';
+/**
+ * The space's own data: JSON its server providers read (`query: '/data/<file>'`, `runtime: 'server'`), never served.
+ * The listing says which files there are, so an agent reads the one it needs; a file reads whole — parsed, so its
+ * shape is what a binding onto it reads.
+ */
+export declare const readDataResource: (space: Space, env: Env, uri: string) => ResourceEnvelope<unknown> | null | undefined;

package/dist/modules/mcp/resources/data.js

@@ -0,0 +1,46 @@
+import { afterPrefix, dataFileUri, dataUri } from "../helpers/uris.js";
+import { envelope } from "./envelope.js";
+//#region src/modules/mcp/resources/data.ts
+/**
+* The space's own data: JSON its server providers read (`query: '/data/<file>'`, `runtime: 'server'`), never served.
+* The listing says which files there are, so an agent reads the one it needs; a file reads whole — parsed, so its
+* shape is what a binding onto it reads.
+*/
+var readDataResource = (space, env, uri) => {
+	if (uri === dataUri(env)) {
+		if (!space.data) return envelope({
+			available: false,
+			reason: "This deployment keeps no space data"
+		});
+		const { files, version } = space.data;
+		return envelope({
+			available: true,
+			version,
+			files: Object.entries(files).map(([path, content]) => ({
+				path,
+				query: `/data/${path}`,
+				bytes: content.length
+			}))
+		});
+	}
+	const path = afterPrefix(uri, dataFileUri(env, ""));
+	if (path === void 0) return;
+	const content = space.data && Object.hasOwn(space.data.files, path) ? space.data.files[path] : void 0;
+	if (content === void 0) return null;
+	try {
+		return envelope({
+			path,
+			query: `/data/${path}`,
+			content: JSON.parse(content)
+		});
+	} catch {
+		return envelope({
+			path,
+			query: `/data/${path}`,
+			text: content,
+			problem: "It is not JSON"
+		});
+	}
+};
+//#endregion
+export { readDataResource };

package/dist/modules/mcp/resources/primer.js

@@ -1,9 +1,9 @@
-import { buildDataSourceCatalog, buildInteractionCatalog } from "../catalogs/observed.js";
-import { buildTypeRegistry } from "../catalogs/registry.js";
-import { cssProperties, cssShorthands } from "../catalogs/index.js";
 import { componentSummariesToAI } from "../helpers/components.js";
 import { componentsUri, connectorsUri, dataSourcesUri, defsUri, flagsUri, foldersUri, fontsUri, interactionsUri, layoutsUri, pagesUri, primerUri, schemaVarsUri, settingsUri, styleVarsUri, typesUri } from "../helpers/uris.js";
 import { guideQuickstart } from "../helpers/guide.js";
+import { buildDataSourceCatalog, buildInteractionCatalog } from "../catalogs/observed.js";
+import { buildTypeRegistry } from "../catalogs/registry.js";
+import { cssProperties, cssShorthands } from "../catalogs/index.js";
 import { envelope } from "./envelope.js";
 import { connectorSummaries } from "./connectors.js";
 import { definitionRefs, fontsToAI, styleVariablesToAI } from "../tools/operations/style/translator.js";

package/dist/modules/mcp/resources/register.js

@@ -1,6 +1,6 @@
-import { cssProperties, cssShorthands } from "../catalogs/index.js";
 import { changesUri } from "../helpers/uris.js";
 import { guideText } from "../helpers/guide.js";
+import { cssProperties, cssShorthands } from "../catalogs/index.js";
 import { envelope, jsonContents } from "./envelope.js";
 import { resourceErrorMessage } from "./canonical.js";
 import { registerRenderResources } from "./renderGuide.js";
@@ -36,7 +36,7 @@ var registerResources = (server, getSpace, env, log, hasSpace, readChanges) => {
 		return result;
 	};
 	server.registerResource("Guide", "plitzi://guide", {
-		description: "How to read and write this space with mcp-ai",
+		description: "How to read and write this space through this server",
 		mimeType: "text/markdown"
 	}, () => emitStatic("plitzi://guide", () => ({ contents: [{
 		uri: "plitzi://guide",
@@ -157,6 +157,11 @@ var registerResources = (server, getSpace, env, log, hasSpace, readChanges) => {
 			`plitzi://functions/${env}`,
 			"The space’s own server code: which files it is, and the tasks, routes and hosts it declares — its tasks are steps like any server task"
 		],
+		[
+			"Data",
+			`plitzi://data/${env}`,
+			"The space’s own data: JSON files its server providers read as `/data/<file>`, never served — which files there are"
+		],
 		[
 			"Style definitions (schema alias)",
 			`plitzi://schema/${env}/definitions`,
@@ -237,6 +242,11 @@ var registerResources = (server, getSpace, env, log, hasSpace, readChanges) => {
 			`plitzi://functions/${env}/{+path}`,
 			"One file of the space’s functions, whole"
 		],
+		[
+			"Data file",
+			`plitzi://data/${env}/{+path}`,
+			"One file of the space’s data, parsed"
+		],
 		[
 			"Style definition",
 			`plitzi://definitions/${env}/{ref}`,

package/dist/modules/mcp/resources/renderGuide.js

@@ -197,9 +197,9 @@ and \`patchDefinition\` still changes only some CSS of one class.
 
 ## Fit the panel — go wide, stay short
 
-The widget renders in a **side panel** (Claude Desktop, ChatGPT, the Plitzi builder), so it gets a usable width but
-very little height: everything past the first screenful costs the user a scroll. Height is the scarce resource —
-spend width instead.
+The widget renders in a **side panel** (Claude Desktop, ChatGPT), so it gets a usable width but very little
+height: everything past the first screenful costs the user a scroll. Height is the scarce resource — spend width
+instead.
 
 Plain containers are blocks, so doing nothing stacks children **vertically** and produces exactly the tall,
 half-empty widget to avoid. Choose the axis every time:
@@ -228,9 +228,9 @@ it — and reach for \`max-width\` only to stop one lone card from stretching ac
 
 ## Match the host theme — never hardcode a light palette
 
-The widget is embedded in the host's own UI (Claude Desktop, ChatGPT, the builder), and that UI **may be in dark
-mode**. A widget painted with fixed light colours is the most common way to ship something unusable: a white card
-in a dark chat glares, and — worse — text left at a dark default disappears against the host's dark background.
+The widget is embedded in the host's own UI (Claude Desktop, ChatGPT), and that UI **may be in dark mode**. A
+widget painted with fixed light colours is the most common way to ship something unusable: a white card in a dark
+chat glares, and — worse — text left at a dark default disappears against the host's dark background.
 
 The host publishes its palette as CSS variables on the page, so use them for every colour, with a
 \`light-dark(<light>, <dark>)\` fallback for hosts that send none:

package/dist/modules/mcp/resources/router.js

@@ -4,6 +4,7 @@ import { readActionResource } from "./actions.js";
 import { canonicalUri } from "./canonical.js";
 import { readConnectorResource } from "./connectors.js";
 import { readCoreResource } from "./core.js";
+import { readDataResource } from "./data.js";
 import { readFunctionsResource } from "./functions.js";
 import { readPrimerResource } from "./primer.js";
 import { readRenderResource } from "./renderGuide.js";
@@ -18,7 +19,8 @@ var resolvers = [
 	readStyleResource,
 	readConnectorResource,
 	readActionResource,
-	readFunctionsResource
+	readFunctionsResource,
+	readDataResource
 ];
 /** Resolve a resource URI to its versioned envelope, or null if unknown / not found. */
 var readResource = (space, env, rawUri) => {

package/dist/modules/mcp/resources/schema.js

@@ -1,7 +1,7 @@
-import { buildDataSourceCatalog, buildInteractionCatalog } from "../catalogs/observed.js";
 import { componentSummariesToAI, componentView, findComponentByRef } from "../helpers/components.js";
 import { findElementByRef, findRootByRef } from "../helpers/space.js";
 import { afterPrefix, componentsUri, dataSourcesUri, elementUri, flagsUri, folderUri, foldersUri, interactionsUri, layoutsUri, pageUri, pagesUri, schemaVarsUri, settingsUri } from "../helpers/uris.js";
+import { buildDataSourceCatalog, buildInteractionCatalog } from "../catalogs/observed.js";
 import { envelope } from "./envelope.js";
 import { elementView, folderRefToAI, foldersToAI, layoutSummariesToAI, pageSkeletonToAI, pageStylesToAI, pageSummariesToAI, schemaVariablesToAI, settingsToAI } from "../tools/operations/schema/translator.js";
 import { treeOf } from "@plitzi/sdk-schema/helpers/components";

package/dist/modules/mcp/server.d.ts

@@ -20,10 +20,10 @@ export interface McpServerContext {
     /** Structured request-log sink. When set, every tool call and resource read emits an McpLogEvent to it (the
      *  consumer renders them); otherwise logging falls back to the console when MCP_DEBUG=1. */
     logger?: ServerLogger;
-    /** May the plitzi_render view paint from tool arguments the host is still streaming (see `mcpAi.renderStreaming`)?
-     *  Defaults to true. */
+    /** May the plitzi_render view paint from tool arguments the host is still streaming (see
+     *  `McpOptions.renderStreaming`)? Defaults to true. */
     renderStreaming?: boolean;
-    /** Where a rendered widget loads everything external from (see `mcpAi.proxy`). It reaches two places: the render
+    /** Where a rendered widget loads everything external from (see `McpOptions.proxy`). It reaches two places: the render
      *  tool, which rewrites the URLs the agent authored, and the App's CSP, which declares the origin those URLs
      *  point at. Absent → neither happens, and a widget's resources load only where the host allows their origin. */
     proxy?: ResourceProxy;

package/dist/modules/mcp/server.js

@@ -1,11 +1,11 @@
 import { registerApps } from "./apps/index.js";
+import { isCallToolResult } from "./helpers/callToolResult.js";
 import { NoSpaceError, ReadOnlyGrantError, emptySpace, emptySpaceMessage, noSpaceErrorCode, readOnlyGrantErrorCode } from "./helpers/space.js";
 import { serverInstructions, widgetsOnlyInstructions } from "./helpers/guide.js";
 import { createMcpLog } from "./helpers/log.js";
 import { proxyForTool } from "./proxy/config.js";
 import { registerResources } from "./resources/register.js";
 import { tools } from "./tools/index.js";
-import { isCallToolResult } from "../ai/toolkit.js";
 import { randomUUID } from "node:crypto";
 import { registerAppTool } from "@modelcontextprotocol/ext-apps/server";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -31,14 +31,15 @@ var createMcpServer = async ({ adapters, getGrant, preview, screenshot, logger,
 	};
 	const loadSpace = async () => {
 		const id = requireSpaceId();
-		const [schema, style, catalog, connectors, actions, actionTasks, functions] = await Promise.all([
+		const [schema, style, catalog, connectors, actions, actionTasks, functions, data] = await Promise.all([
 			adapters.getSchema?.(id, MCP_ENV),
 			adapters.getStyle?.(id, MCP_ENV),
 			adapters.getComponentCatalog?.(id, MCP_ENV).catch(() => void 0),
 			adapters.getConnectors?.(id).catch(() => void 0),
 			adapters.getActions?.(id).catch(() => void 0),
 			adapters.getActionTasks?.(id).catch(() => void 0),
-			adapters.getFunctions?.(id).catch(() => void 0)
+			adapters.getFunctions?.(id).catch(() => void 0),
+			adapters.getData?.(id).catch(() => void 0)
 		]);
 		if (!schema || !style) throw new Error(emptySpaceMessage);
 		return {
@@ -48,10 +49,11 @@ var createMcpServer = async ({ adapters, getGrant, preview, screenshot, logger,
 			connectors: connectors ?? [],
 			actions: actions ?? [],
 			actionTasks,
-			...functions ? { functions } : {}
+			...functions ? { functions } : {},
+			...data ? { data } : {}
 		};
 	};
-	const { saveSchema, saveStyle, saveConnector, deleteConnector, saveAction, deleteAction, saveFunctions, tryFunction } = adapters;
+	const { saveSchema, saveStyle, saveConnector, deleteConnector, saveAction, deleteAction, saveFunctions, tryFunction, saveData } = adapters;
 	const write = {
 		userId: grant?.userId,
 		batch: randomUUID()
@@ -63,13 +65,14 @@ var createMcpServer = async ({ adapters, getGrant, preview, screenshot, logger,
 		deleteConnector: deleteConnector ? (id) => deleteConnector(requireWritableSpaceId(), id) : void 0,
 		saveAction: saveAction ? (entry) => saveAction(requireWritableSpaceId(), entry) : void 0,
 		deleteAction: deleteAction ? (id) => deleteAction(requireWritableSpaceId(), id) : void 0,
-		saveFunctions: saveFunctions ? (files, base) => saveFunctions(requireWritableSpaceId(), files, base, write) : void 0
+		saveFunctions: saveFunctions ? (files, base) => saveFunctions(requireWritableSpaceId(), files, base, write) : void 0,
+		saveData: saveData ? (files, base) => saveData(requireWritableSpaceId(), files, base, write) : void 0
 	};
 	let spacePromise;
 	const getSpace = () => spacePromise ??= loadSpace();
 	const server = new McpServer({
 		name: "plitzi-mcp",
-		version: "0.38.4"
+		version: "0.38.6"
 	}, { instructions: hasSpace ? serverInstructions : widgetsOnlyInstructions });
 	const { getChanges } = adapters;
 	registerResources(server, getSpace, MCP_ENV, log, hasSpace, getChanges ? (query) => getChanges(requireSpaceId(), MCP_ENV, query) : void 0);
@@ -126,7 +129,8 @@ var createMcpServer = async ({ adapters, getGrant, preview, screenshot, logger,
 		const config = {
 			title: tool.title,
 			description: tool.description,
-			inputSchema: tool.inputShape
+			inputSchema: tool.inputShape,
+			annotations: { readOnlyHint: tool.access === "read" }
 		};
 		if (tool.ui) {
 			registerAppTool(server, tool.name, {

package/dist/modules/mcp/tools/apply/dispatch.js

@@ -7,6 +7,7 @@ import { upsertAction } from "../operations/actions/upsertAction.js";
 import { deleteConnector } from "../operations/connectors/deleteConnector.js";
 import { patchConnector } from "../operations/connectors/patchConnector.js";
 import { upsertConnector } from "../operations/connectors/upsertConnector.js";
+import { deleteDataFile, upsertDataFile } from "../operations/data/index.js";
 import { deleteFunctionFile, upsertFunctionFile } from "../operations/functions/index.js";
 import { deleteBinding } from "../operations/schema/bindings/deleteBinding.js";
 import { patchBinding } from "../operations/schema/bindings/patchBinding.js";
@@ -113,6 +114,8 @@ var executeOp = (space, env, op) => {
 		case "deleteAction": return deleteAction(space, env, op);
 		case "upsertFunctionFile": return upsertFunctionFile(space, env, op);
 		case "deleteFunctionFile": return deleteFunctionFile(space, env, op);
+		case "upsertDataFile": return upsertDataFile(space, env, op);
+		case "deleteDataFile": return deleteDataFile(space, env, op);
 		default: return fail("type", `Unknown operation "${op.type}"`, "See the Operation union");
 	}
 };
@@ -132,7 +135,8 @@ var applyOperations = (space, env, ops) => {
 		deletedConnectors: [],
 		changedActions: [],
 		deletedActions: [],
-		changedFunctions: false
+		changedFunctions: false,
+		changedData: false
 	};
 	const stale = /* @__PURE__ */ new Set();
 	const elements = /* @__PURE__ */ new Set();
@@ -173,6 +177,10 @@ var applyOperations = (space, env, ops) => {
 			case "deleteFunctionFile":
 				outcome.changedFunctions = true;
 				break;
+			case "upsertDataFile":
+			case "deleteDataFile":
+				outcome.changedData = true;
+				break;
 			default: if (isStyleOp(op.type)) outcome.changedStyle = true;
 			else outcome.changedSchema = true;
 		}