@tangle-network/agent-app 0.18.0 → 0.20.0

package/dist/{mcp-eZCmkgCF.d.ts → auth-BlS9GWfL.d.ts}

@@ -59,54 +59,4 @@ declare function authenticateToolRequest(request: Request, opts: AuthenticateOpt
  *  aliases (`args` / `arguments`) or a bare body. Returns null on non-JSON. */
 declare function readToolArgs<T>(request: Request): Promise<T | null>;
 
-/** Default route path each app tool is served at. A product mounts its routes
- *  at these paths (or supplies its own via {@link BuildMcpServerOptions.paths}). */
-declare const DEFAULT_APP_TOOL_PATHS: Record<AppToolName, string>;
-/** The portable MCP server entry the sandbox SDK accepts (transport + url +
- *  headers). Matches `AgentProfileMcpServer` structurally without importing the
- *  sandbox SDK — products spread it into their profile's `mcp` map. */
-interface AppToolMcpServer {
-    transport: 'http';
-    url: string;
-    headers: Record<string, string>;
-    enabled: true;
-    metadata: {
-        description: string;
-    };
-}
-interface BuildHttpMcpServerOptions {
-    /** Route path on the app the sandbox POSTs to (e.g. `/api/tools/propose`). */
-    path: string;
-    /** App base URL the sandbox reaches back to (no trailing slash required). */
-    baseUrl: string;
-    /** Per-user capability token, baked into the Authorization header. */
-    token: string;
-    ctx: AppToolContext;
-    /** Tool description the model sees. */
-    description: string;
-    headerNames?: ToolHeaderNames;
-}
-/**
- * Build ONE HTTP MCP server entry — the generic agent→app bridge. The
- * capability token + the user/workspace/thread ids ride in server-set headers
- * (never tool args), so the model can't forge identity or target another
- * workspace. Workspace/thread headers are omitted when their `ctx` value is
- * empty/null (e.g. an integration-invoke bridge that's user-scoped only). Used
- * directly for non-app-tool bridges (integration_invoke) and via
- * {@link buildAppToolMcpServer} for the four app tools.
- */
-declare function buildHttpMcpServer(opts: BuildHttpMcpServerOptions): AppToolMcpServer;
-interface BuildMcpServerOptions {
-    tool: AppToolName;
-    baseUrl: string;
-    token: string;
-    ctx: AppToolContext;
-    description: string;
-    headerNames?: ToolHeaderNames;
-    paths?: Partial<Record<AppToolName, string>>;
-}
-/** Build one of the four app-tool MCP servers — a thin wrapper over
- *  {@link buildHttpMcpServer} that maps the tool name to its route path. */
-declare function buildAppToolMcpServer(opts: BuildMcpServerOptions): AppToolMcpServer;
-
-export { APP_TOOL_NAMES as A, type BuildHttpMcpServerOptions as B, DEFAULT_APP_TOOL_PATHS as D, type OpenAIFunctionTool as O, type ToolAuthResult as T, type AppToolMcpServer as a, type AppToolName as b, type AuthenticateOptions as c, type BuildMcpServerOptions as d, DEFAULT_HEADER_NAMES as e, type ToolHeaderNames as f, authenticateToolRequest as g, buildAppToolMcpServer as h, buildAppToolOpenAITools as i, buildHttpMcpServer as j, isAppToolName as k, readToolArgs as r };
+export { APP_TOOL_NAMES as A, DEFAULT_HEADER_NAMES as D, type OpenAIFunctionTool as O, type ToolAuthResult as T, type AppToolName as a, type AuthenticateOptions as b, type ToolHeaderNames as c, authenticateToolRequest as d, buildAppToolOpenAITools as e, isAppToolName as i, readToolArgs as r };

package/dist/chunk-KOG473C4.js

@@ -0,0 +1,132 @@
+// src/skills/index.ts
+function inlineResource(name, content) {
+  return { kind: "inline", name, content };
+}
+function skillMountPath(id) {
+  return `~/.claude/skills/${id}/SKILL.md`;
+}
+function normalizeKey(key, anchor) {
+  const marker = `${anchor}/`;
+  const at = key.lastIndexOf(marker);
+  if (at >= 0) return key.slice(at);
+  return key.startsWith("./") ? key.slice(2) : key;
+}
+function toCorpusId(normalizedKey, anchor) {
+  const nested = normalizedKey.match(new RegExp(`${anchor}/([^/]+)/SKILL\\.md$`));
+  if (nested) return nested[1];
+  const flat = normalizedKey.match(new RegExp(`${anchor}/(.+)\\.md$`));
+  if (flat) return flat[1];
+  return normalizedKey;
+}
+function nodeBuiltins() {
+  const getBuiltin = globalThis.process?.getBuiltinModule;
+  if (typeof getBuiltin !== "function") return void 0;
+  return {
+    fs: getBuiltin("node:fs"),
+    path: getBuiltin("node:path"),
+    url: getBuiltin("node:url")
+  };
+}
+function fsWalkFlat(builtins, root) {
+  const { fs, path } = builtins;
+  const out = {};
+  if (!fs.existsSync(root)) return out;
+  const walk = (dir) => {
+    let entries;
+    try {
+      entries = fs.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      if (entry.name.startsWith(".")) continue;
+      const full = path.join(dir, entry.name);
+      if (entry.isDirectory()) walk(full);
+      else if (entry.isFile() && entry.name.endsWith(".md")) out[full] = fs.readFileSync(full, "utf8");
+    }
+  };
+  walk(root);
+  return out;
+}
+function fsWalkNested(builtins, root) {
+  const { fs, path } = builtins;
+  const out = {};
+  if (!fs.existsSync(root)) return out;
+  let entries;
+  try {
+    entries = fs.readdirSync(root, { withFileTypes: true });
+  } catch {
+    return out;
+  }
+  for (const entry of entries) {
+    if (!entry.isDirectory()) continue;
+    const skillFile = path.join(root, entry.name, "SKILL.md");
+    if (!fs.existsSync(skillFile)) continue;
+    out[skillFile] = fs.readFileSync(skillFile, "utf8");
+  }
+  return out;
+}
+function resolveFsBase(builtins, fsBaseDir, importMetaUrl) {
+  const { path, url } = builtins;
+  if (path.isAbsolute(fsBaseDir)) return fsBaseDir;
+  const here = importMetaUrl ? path.dirname(url.fileURLToPath(importMetaUrl)) : process.cwd();
+  return path.join(here, fsBaseDir);
+}
+function loadMarkdownCorpus(options, importMetaUrl) {
+  const { anchor, globModules, fsBaseDir, fsLayout = "flat", skip } = options;
+  let modules;
+  let source;
+  if (globModules && Object.keys(globModules).length > 0) {
+    modules = globModules;
+    source = "vite";
+  } else {
+    const builtins = nodeBuiltins();
+    if (builtins && fsBaseDir) {
+      const root = resolveFsBase(builtins, fsBaseDir, importMetaUrl);
+      modules = fsLayout === "nested" ? fsWalkNested(builtins, root) : fsWalkFlat(builtins, root);
+      source = Object.keys(modules).length > 0 ? "fs" : "empty";
+    } else {
+      modules = {};
+      source = "empty";
+    }
+  }
+  const entries = [];
+  for (const [rawKey, content] of Object.entries(modules)) {
+    if (typeof content !== "string") continue;
+    const key = normalizeKey(rawKey, anchor);
+    if (skip && skip(key)) continue;
+    entries.push({ id: toCorpusId(key, anchor), key, content });
+  }
+  entries.sort((a, b) => a.id.localeCompare(b.id));
+  return { source, entries };
+}
+function corpusSkills(corpus, anchor) {
+  return corpus.map(
+    (entry) => ({
+      path: `${anchor}/${entry.id}.md`,
+      resource: inlineResource(`${anchor}-${entry.id}`, entry.content)
+    })
+  ).sort((a, b) => a.path.localeCompare(b.path));
+}
+function registrySkills(registry, tier = "free") {
+  return registry.filter((s) => s.tier === tier).map(
+    (s) => ({
+      path: skillMountPath(s.id),
+      resource: inlineResource(s.id, s.skillMd)
+    })
+  ).sort((a, b) => a.path.localeCompare(b.path));
+}
+function composeShellResources(input) {
+  const { skills = [], knowledge = [], evolvable = [], registry = [], predicate } = input;
+  const composed = [...skills, ...knowledge, ...evolvable, ...registry];
+  return predicate ? composed.filter(predicate) : composed;
+}
+
+export {
+  skillMountPath,
+  loadMarkdownCorpus,
+  corpusSkills,
+  registrySkills,
+  composeShellResources
+};
+//# sourceMappingURL=chunk-KOG473C4.js.map

package/dist/chunk-KOG473C4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/skills/index.ts"],"sourcesContent":["/**\n * Unified skill + corpus mounter for agent products.\n *\n * Every agent product hand-rolls the same two file-mount systems and then\n * drifts on the seams between them. (1) An ALWAYS-MOUNTED markdown corpus —\n * (`skills/<slug>/SKILL.md`, `doctrine` and `knowledge` markdown trees) — discovered\n * by a Vite `?raw` glob in the Worker bundle and by Node `fs` under the eval\n * CLI, then projected into `resources.files`. (2) A TIER-GATED installable\n * registry — a hand-authored array of `SkillEntry` whose free tier mounts at\n * the harness skill-discovery path and whose paid tier is installed on demand.\n * Both ride the same `resources.files` channel but use different provenance\n * (file-backed vs inline), different mount paths (relative corpus path vs\n * `~/.claude/skills/<id>/SKILL.md`), and different selection rules. This module\n * makes both DATA: a corpus loader that accepts a Vite glob-result map (or an\n * fs fallback), a registry adapter that tier-gates, and a single\n * `composeShellResources` that projects either onto the SDK file-mount shape.\n *\n * Substrate-free over storage, exact over the SDK boundary: the only inbound\n * seam is the glob-result map the consumer passes in (its call site keeps the\n * literal `import.meta.glob` Vite must static-analyze); the only outbound seam\n * is `@tangle-network/sandbox`'s `AgentProfileFileMount[]`, the exact shape the\n * agent profile's `resources.files` consumes. Node builtins are resolved lazily\n * via `process.getBuiltinModule` so a static `node:*` import never reaches the\n * Vite SSR bundle.\n */\n\nimport type { AgentProfileFileMount, AgentProfileResourceRef } from '@tangle-network/sandbox'\n\n/** Construct the inline arm of the SDK's `AgentProfileResourceRef`. Inlined here\n *  so this leaf subpath stays type-only over `@tangle-network/sandbox` — it\n *  carries no runtime dependency on the SDK, just its file-mount type contract. */\nfunction inlineResource(name: string, content: string): AgentProfileResourceRef {\n  return { kind: 'inline', name, content }\n}\n\n/** A Vite eager `?raw` glob result: glob key -> raw file body. The consumer\n *  produces this by calling `import.meta.glob('<lit>', { eager: true, query:\n *  '?raw', import: 'default' })` at its own call site — the literal must stay\n *  literal so Vite can static-analyze it; passing the result here keeps that\n *  constraint at the edge and the loader substrate-free. */\nexport type GlobModules = Record<string, string>\n\n/** One markdown document discovered from the corpus. */\nexport interface CorpusEntry {\n  /** Slug derived from the glob key (folder slug for `SKILL.md` layouts, or the\n   *  normalized relative path for flat `*.md` layouts). */\n  id: string\n  /** Glob/fs key the entry was loaded from, normalized to a stable relative\n   *  form (leading `./` and absolute prefixes stripped). */\n  key: string\n  /** Raw markdown body (including any frontmatter). */\n  content: string\n}\n\n/** A hand-authored, tier-gated installable skill. Mirrors the per-product\n *  registry entry (gtm/insurance `SkillEntry`); the runtime's certified `skill`\n *  artifact kind is unrelated. `skillMd` is the inline body — file provenance\n *  does not apply to the registry. */\nexport interface SkillEntry {\n  id: string\n  name: string\n  description: string\n  author?: { name: string; url?: string }\n  source?: string\n  category?: string\n  tags?: string[]\n  /** Gate keyword. `composeShellResources`/`registrySkills` treat `free` as\n   *  always-mounted; everything else is install-on-demand. */\n  tier: string\n  skillMd: string\n}\n\n/** Harness skill-discovery path the Claude Code / OpenCode backend reads\n *  natively. The registry mounts here; the corpus mounts at its relative path. */\nexport function skillMountPath(id: string): string {\n  return `~/.claude/skills/${id}/SKILL.md`\n}\n\n/** Strip a glob/fs key down to a stable relative form: drop a leading `./`,\n *  and for an absolute fs path keep only the tail from the last anchor segment\n *  the pattern implies. We normalize on the trailing `<dir>/.../*.md` so the\n *  Vite key (`./skills/x/SKILL.md`) and the fs key (`/abs/.../skills/x/SKILL.md`)\n *  collapse to the same value. */\nfunction normalizeKey(key: string, anchor: string): string {\n  const marker = `${anchor}/`\n  const at = key.lastIndexOf(marker)\n  if (at >= 0) return key.slice(at)\n  return key.startsWith('./') ? key.slice(2) : key\n}\n\n/** Folder-slug for a `<anchor>/<slug>/SKILL.md` layout; falls back to the\n *  normalized key (sans `<anchor>/` prefix, sans `.md`) for flat layouts. */\nfunction toCorpusId(normalizedKey: string, anchor: string): string {\n  const nested = normalizedKey.match(new RegExp(`${anchor}/([^/]+)/SKILL\\\\.md$`))\n  if (nested) return nested[1]!\n  const flat = normalizedKey.match(new RegExp(`${anchor}/(.+)\\\\.md$`))\n  if (flat) return flat[1]!\n  return normalizedKey\n}\n\n/** Resolve Node builtins lazily. `process.getBuiltinModule` (Node 22+) is\n *  absent in workerd, so this returns undefined there and the fs path is never\n *  taken — Workers always reach the loader through the Vite glob map. A static\n *  `import 'node:fs'` would break Vite SSR bundling in the consumer apps, so it\n *  is deliberately avoided. */\nfunction nodeBuiltins():\n  | { fs: typeof import('node:fs'); path: typeof import('node:path'); url: typeof import('node:url') }\n  | undefined {\n  const getBuiltin = (globalThis as { process?: { getBuiltinModule?: (id: string) => unknown } })\n    .process?.getBuiltinModule\n  if (typeof getBuiltin !== 'function') return undefined\n  return {\n    fs: getBuiltin('node:fs') as typeof import('node:fs'),\n    path: getBuiltin('node:path') as typeof import('node:path'),\n    url: getBuiltin('node:url') as typeof import('node:url'),\n  }\n}\n\n/** Options for {@link loadMarkdownCorpus}. */\nexport interface LoadCorpusOptions {\n  /** The anchor folder name that appears in both glob keys and fs paths\n   *  (`skills`, `doctrine`, `knowledge`). Used to normalize keys + derive ids. */\n  anchor: string\n  /** Vite glob-result map. When present and non-empty it is authoritative and\n   *  the fs path is skipped. Omit it (or pass an empty map) only outside Vite. */\n  globModules?: GlobModules\n  /** Absolute or `import.meta.url`-relative base dir the fs fallback walks when\n   *  `globModules` is empty. Required for the fs path to run; without it the fs\n   *  fallback returns no entries (Workers never need it). */\n  fsBaseDir?: string\n  /** Walk strategy for the fs fallback. `nested` finds `<dir>/<slug>/SKILL.md`\n   *  one level deep; `flat` recurses for every `*.md`. Default: `flat`. */\n  fsLayout?: 'nested' | 'flat'\n  /** Drop an entry by its normalized key after load. Covers the per-product\n   *  skip lists (corpus index/log files, scaffold templates, allow-lists). */\n  skip?: (normalizedKey: string) => boolean\n}\n\n/** Outcome of {@link loadMarkdownCorpus}: the entries plus which path produced\n *  them, so a caller can fail loud when both are empty rather than silently\n *  mounting nothing. */\nexport interface CorpusLoadResult {\n  source: 'vite' | 'fs' | 'empty'\n  entries: CorpusEntry[]\n}\n\nfunction fsWalkFlat(\n  builtins: NonNullable<ReturnType<typeof nodeBuiltins>>,\n  root: string,\n): GlobModules {\n  const { fs, path } = builtins\n  const out: GlobModules = {}\n  if (!fs.existsSync(root)) return out\n  const walk = (dir: string) => {\n    let entries: import('node:fs').Dirent[]\n    try {\n      entries = fs.readdirSync(dir, { withFileTypes: true })\n    } catch {\n      return\n    }\n    for (const entry of entries) {\n      if (entry.name.startsWith('.')) continue\n      const full = path.join(dir, entry.name)\n      if (entry.isDirectory()) walk(full)\n      else if (entry.isFile() && entry.name.endsWith('.md')) out[full] = fs.readFileSync(full, 'utf8')\n    }\n  }\n  walk(root)\n  return out\n}\n\nfunction fsWalkNested(\n  builtins: NonNullable<ReturnType<typeof nodeBuiltins>>,\n  root: string,\n): GlobModules {\n  const { fs, path } = builtins\n  const out: GlobModules = {}\n  if (!fs.existsSync(root)) return out\n  let entries: import('node:fs').Dirent[]\n  try {\n    entries = fs.readdirSync(root, { withFileTypes: true })\n  } catch {\n    return out\n  }\n  for (const entry of entries) {\n    if (!entry.isDirectory()) continue\n    const skillFile = path.join(root, entry.name, 'SKILL.md')\n    if (!fs.existsSync(skillFile)) continue\n    out[skillFile] = fs.readFileSync(skillFile, 'utf8')\n  }\n  return out\n}\n\n/** Resolve `fsBaseDir` against `import.meta.url` when relative-looking, so a\n *  consumer can pass a bare folder name (`'skills'`) and have it land beside\n *  the calling module. Absolute paths pass through. */\nfunction resolveFsBase(\n  builtins: NonNullable<ReturnType<typeof nodeBuiltins>>,\n  fsBaseDir: string,\n  importMetaUrl?: string,\n): string {\n  const { path, url } = builtins\n  if (path.isAbsolute(fsBaseDir)) return fsBaseDir\n  const here = importMetaUrl\n    ? path.dirname(url.fileURLToPath(importMetaUrl))\n    : process.cwd()\n  return path.join(here, fsBaseDir)\n}\n\n/**\n * Load a markdown corpus, preferring a Vite glob-result map and falling back to\n * a Node fs walk. Selection is by non-empty glob result — never an env flag.\n * Entries are normalized, optionally skip-filtered, and sorted by id for\n * determinism. The `import.meta.glob` literal stays at the CONSUMER call site\n * (passed in as `globModules`); this loader never constructs a glob.\n */\nexport function loadMarkdownCorpus(\n  options: LoadCorpusOptions,\n  importMetaUrl?: string,\n): CorpusLoadResult {\n  const { anchor, globModules, fsBaseDir, fsLayout = 'flat', skip } = options\n\n  let modules: GlobModules\n  let source: CorpusLoadResult['source']\n  if (globModules && Object.keys(globModules).length > 0) {\n    modules = globModules\n    source = 'vite'\n  } else {\n    const builtins = nodeBuiltins()\n    if (builtins && fsBaseDir) {\n      const root = resolveFsBase(builtins, fsBaseDir, importMetaUrl)\n      modules = fsLayout === 'nested' ? fsWalkNested(builtins, root) : fsWalkFlat(builtins, root)\n      source = Object.keys(modules).length > 0 ? 'fs' : 'empty'\n    } else {\n      modules = {}\n      source = 'empty'\n    }\n  }\n\n  const entries: CorpusEntry[] = []\n  for (const [rawKey, content] of Object.entries(modules)) {\n    if (typeof content !== 'string') continue\n    const key = normalizeKey(rawKey, anchor)\n    if (skip && skip(key)) continue\n    entries.push({ id: toCorpusId(key, anchor), key, content })\n  }\n  entries.sort((a, b) => a.id.localeCompare(b.id))\n  return { source, entries }\n}\n\n/** Project corpus entries onto SDK file mounts at a relative path under\n *  `<anchor>/`. Always-mounted: the corpus is the agent's baseline knowledge. */\nexport function corpusSkills(corpus: CorpusEntry[], anchor: string): AgentProfileFileMount[] {\n  return corpus\n    .map(\n      (entry) =>\n        ({\n          path: `${anchor}/${entry.id}.md`,\n          resource: inlineResource(`${anchor}-${entry.id}`, entry.content),\n        }) satisfies AgentProfileFileMount,\n    )\n    .sort((a, b) => a.path.localeCompare(b.path))\n}\n\n/** Project the registry's free-tier (or `tier`-matched) entries onto SDK file\n *  mounts at the harness skill-discovery path. Tier-gating is the registry's\n *  only selection rule — paid skills are installed on demand, not at boot. */\nexport function registrySkills(\n  registry: SkillEntry[],\n  tier: string = 'free',\n): AgentProfileFileMount[] {\n  return registry\n    .filter((s) => s.tier === tier)\n    .map(\n      (s) =>\n        ({\n          path: skillMountPath(s.id),\n          resource: inlineResource(s.id, s.skillMd),\n        }) satisfies AgentProfileFileMount,\n    )\n    .sort((a, b) => a.path.localeCompare(b.path))\n}\n\n/** Inputs to {@link composeShellResources}. Each channel is optional so a\n *  product mounts only the systems it has — corpus-only, registry-only, or\n *  both — without conflating them. */\nexport interface ComposeShellResourcesInput {\n  /** Corpus mounts (always-mounted baseline). Pass the result of\n   *  {@link corpusSkills}, or a hand-built mount list. */\n  skills?: AgentProfileFileMount[]\n  /** Knowledge-corpus mounts (a second always-mounted corpus, e.g. a domain\n   *  knowledge pack distinct from the skills corpus). */\n  knowledge?: AgentProfileFileMount[]\n  /** Evolvable / learned-guidance mounts (single-file corpora). */\n  evolvable?: AgentProfileFileMount[]\n  /** Registry mounts (tier-gated). Pass the result of {@link registrySkills}. */\n  registry?: AgentProfileFileMount[]\n  /** Final skip filter applied to the composed mount list by mount `path`. */\n  predicate?: (mount: AgentProfileFileMount) => boolean\n}\n\n/**\n * Compose every mount channel into one `resources.files`-ready array. Corpus\n * channels come first (baseline), the tier-gated registry last (so a registry\n * entry can override a corpus entry that mounts at the same path). The result\n * is exactly `AgentProfileFileMount[]` — assign it straight into\n * `profile.resources.files` with no cast.\n */\nexport function composeShellResources(input: ComposeShellResourcesInput): AgentProfileFileMount[] {\n  const { skills = [], knowledge = [], evolvable = [], registry = [], predicate } = input\n  const composed = [...skills, ...knowledge, ...evolvable, ...registry]\n  return predicate ? composed.filter(predicate) : composed\n}\n"],"mappings":";AA+BA,SAAS,eAAe,MAAc,SAA0C;AAC9E,SAAO,EAAE,MAAM,UAAU,MAAM,QAAQ;AACzC;AAyCO,SAAS,eAAe,IAAoB;AACjD,SAAO,oBAAoB,EAAE;AAC/B;AAOA,SAAS,aAAa,KAAa,QAAwB;AACzD,QAAM,SAAS,GAAG,MAAM;AACxB,QAAM,KAAK,IAAI,YAAY,MAAM;AACjC,MAAI,MAAM,EAAG,QAAO,IAAI,MAAM,EAAE;AAChC,SAAO,IAAI,WAAW,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI;AAC/C;AAIA,SAAS,WAAW,eAAuB,QAAwB;AACjE,QAAM,SAAS,cAAc,MAAM,IAAI,OAAO,GAAG,MAAM,sBAAsB,CAAC;AAC9E,MAAI,OAAQ,QAAO,OAAO,CAAC;AAC3B,QAAM,OAAO,cAAc,MAAM,IAAI,OAAO,GAAG,MAAM,aAAa,CAAC;AACnE,MAAI,KAAM,QAAO,KAAK,CAAC;AACvB,SAAO;AACT;AAOA,SAAS,eAEK;AACZ,QAAM,aAAc,WACjB,SAAS;AACZ,MAAI,OAAO,eAAe,WAAY,QAAO;AAC7C,SAAO;AAAA,IACL,IAAI,WAAW,SAAS;AAAA,IACxB,MAAM,WAAW,WAAW;AAAA,IAC5B,KAAK,WAAW,UAAU;AAAA,EAC5B;AACF;AA8BA,SAAS,WACP,UACA,MACa;AACb,QAAM,EAAE,IAAI,KAAK,IAAI;AACrB,QAAM,MAAmB,CAAC;AAC1B,MAAI,CAAC,GAAG,WAAW,IAAI,EAAG,QAAO;AACjC,QAAM,OAAO,CAAC,QAAgB;AAC5B,QAAI;AACJ,QAAI;AACF,gBAAU,GAAG,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IACvD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,SAAS,SAAS;AAC3B,UAAI,MAAM,KAAK,WAAW,GAAG,EAAG;AAChC,YAAM,OAAO,KAAK,KAAK,KAAK,MAAM,IAAI;AACtC,UAAI,MAAM,YAAY,EAAG,MAAK,IAAI;AAAA,eACzB,MAAM,OAAO,KAAK,MAAM,KAAK,SAAS,KAAK,EAAG,KAAI,IAAI,IAAI,GAAG,aAAa,MAAM,MAAM;AAAA,IACjG;AAAA,EACF;AACA,OAAK,IAAI;AACT,SAAO;AACT;AAEA,SAAS,aACP,UACA,MACa;AACb,QAAM,EAAE,IAAI,KAAK,IAAI;AACrB,QAAM,MAAmB,CAAC;AAC1B,MAAI,CAAC,GAAG,WAAW,IAAI,EAAG,QAAO;AACjC,MAAI;AACJ,MAAI;AACF,cAAU,GAAG,YAAY,MAAM,EAAE,eAAe,KAAK,CAAC;AAAA,EACxD,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,EAAG;AAC1B,UAAM,YAAY,KAAK,KAAK,MAAM,MAAM,MAAM,UAAU;AACxD,QAAI,CAAC,GAAG,WAAW,SAAS,EAAG;AAC/B,QAAI,SAAS,IAAI,GAAG,aAAa,WAAW,MAAM;AAAA,EACpD;AACA,SAAO;AACT;AAKA,SAAS,cACP,UACA,WACA,eACQ;AACR,QAAM,EAAE,MAAM,IAAI,IAAI;AACtB,MAAI,KAAK,WAAW,SAAS,EAAG,QAAO;AACvC,QAAM,OAAO,gBACT,KAAK,QAAQ,IAAI,cAAc,aAAa,CAAC,IAC7C,QAAQ,IAAI;AAChB,SAAO,KAAK,KAAK,MAAM,SAAS;AAClC;AASO,SAAS,mBACd,SACA,eACkB;AAClB,QAAM,EAAE,QAAQ,aAAa,WAAW,WAAW,QAAQ,KAAK,IAAI;AAEpE,MAAI;AACJ,MAAI;AACJ,MAAI,eAAe,OAAO,KAAK,WAAW,EAAE,SAAS,GAAG;AACtD,cAAU;AACV,aAAS;AAAA,EACX,OAAO;AACL,UAAM,WAAW,aAAa;AAC9B,QAAI,YAAY,WAAW;AACzB,YAAM,OAAO,cAAc,UAAU,WAAW,aAAa;AAC7D,gBAAU,aAAa,WAAW,aAAa,UAAU,IAAI,IAAI,WAAW,UAAU,IAAI;AAC1F,eAAS,OAAO,KAAK,OAAO,EAAE,SAAS,IAAI,OAAO;AAAA,IACpD,OAAO;AACL,gBAAU,CAAC;AACX,eAAS;AAAA,IACX;AAAA,EACF;AAEA,QAAM,UAAyB,CAAC;AAChC,aAAW,CAAC,QAAQ,OAAO,KAAK,OAAO,QAAQ,OAAO,GAAG;AACvD,QAAI,OAAO,YAAY,SAAU;AACjC,UAAM,MAAM,aAAa,QAAQ,MAAM;AACvC,QAAI,QAAQ,KAAK,GAAG,EAAG;AACvB,YAAQ,KAAK,EAAE,IAAI,WAAW,KAAK,MAAM,GAAG,KAAK,QAAQ,CAAC;AAAA,EAC5D;AACA,UAAQ,KAAK,CAAC,GAAG,MAAM,EAAE,GAAG,cAAc,EAAE,EAAE,CAAC;AAC/C,SAAO,EAAE,QAAQ,QAAQ;AAC3B;AAIO,SAAS,aAAa,QAAuB,QAAyC;AAC3F,SAAO,OACJ;AAAA,IACC,CAAC,WACE;AAAA,MACC,MAAM,GAAG,MAAM,IAAI,MAAM,EAAE;AAAA,MAC3B,UAAU,eAAe,GAAG,MAAM,IAAI,MAAM,EAAE,IAAI,MAAM,OAAO;AAAA,IACjE;AAAA,EACJ,EACC,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAChD;AAKO,SAAS,eACd,UACA,OAAe,QACU;AACzB,SAAO,SACJ,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,EAC7B;AAAA,IACC,CAAC,OACE;AAAA,MACC,MAAM,eAAe,EAAE,EAAE;AAAA,MACzB,UAAU,eAAe,EAAE,IAAI,EAAE,OAAO;AAAA,IAC1C;AAAA,EACJ,EACC,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAChD;AA2BO,SAAS,sBAAsB,OAA4D;AAChG,QAAM,EAAE,SAAS,CAAC,GAAG,YAAY,CAAC,GAAG,YAAY,CAAC,GAAG,WAAW,CAAC,GAAG,UAAU,IAAI;AAClF,QAAM,WAAW,CAAC,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,GAAG,QAAQ;AACpE,SAAO,YAAY,SAAS,OAAO,SAAS,IAAI;AAClD;","names":[]}

package/dist/design-canvas/index.d.ts

@@ -5,7 +5,8 @@ export { A as AddElementOperation, a as AddPageOperation, b as ApplyDataOperatio
 import { d as SceneStore, N as NewSceneDecision, a as SceneDocumentRecord } from '../store-CUStmtdH.js';
 export { S as SceneDecision, b as SceneExportFormat, c as SceneExportRecord, e as SceneStoreScope } from '../store-CUStmtdH.js';
 import { c as McpToolDefinition } from '../mcp-rpc-DLw_r9PQ.js';
-import { f as ToolHeaderNames, a as AppToolMcpServer } from '../mcp-eZCmkgCF.js';
+import { c as ToolHeaderNames } from '../auth-BlS9GWfL.js';
+import { A as AppToolMcpServer } from '../mcp-BShTlESm.js';
 import { b as AppToolContext } from '../types-2rOJo8Hc.js';
 
 /**

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 export { AppToolRuntimeExecutor, CapabilityTokenOptions, DispatchOptions, ExpiringCapabilityTokenOptions, HandleToolRequestOptions, ResolveToolCapabilitiesOptions, ResolvedToolCapabilities, RuntimeExecutorOptions, ToolCapability, ToolInputError, createAppToolRuntimeExecutor, createCapabilityToken, createExpiringCapabilityToken, dispatchAppTool, handleAppToolRequest, outcomeStatus, resolveToolCapabilities, restrictTaxonomy, verifyCapabilityToken, verifyExpiringCapabilityToken } from './tools/index.js';
-export { A as APP_TOOL_NAMES, a as AppToolMcpServer, b as AppToolName, c as AuthenticateOptions, B as BuildHttpMcpServerOptions, d as BuildMcpServerOptions, D as DEFAULT_APP_TOOL_PATHS, e as DEFAULT_HEADER_NAMES, O as OpenAIFunctionTool, T as ToolAuthResult, f as ToolHeaderNames, g as authenticateToolRequest, h as buildAppToolMcpServer, i as buildAppToolOpenAITools, j as buildHttpMcpServer, k as isAppToolName, r as readToolArgs } from './mcp-eZCmkgCF.js';
+export { A as APP_TOOL_NAMES, a as AppToolName, b as AuthenticateOptions, D as DEFAULT_HEADER_NAMES, O as OpenAIFunctionTool, T as ToolAuthResult, c as ToolHeaderNames, d as authenticateToolRequest, e as buildAppToolOpenAITools, i as isAppToolName, r as readToolArgs } from './auth-BlS9GWfL.js';
+export { A as AppToolMcpServer, B as BuildHttpMcpServerOptions, a as BuildMcpServerOptions, D as DEFAULT_APP_TOOL_PATHS, b as buildAppToolMcpServer, c as buildHttpMcpServer } from './mcp-BShTlESm.js';
 export { C as CreateMcpToolHandlerOptions, M as MCP_PROTOCOL_VERSIONS, a as McpProtocolVersion, b as McpServerInfo, c as McpToolDefinition, d as createMcpToolHandler } from './mcp-rpc-DLw_r9PQ.js';
 export { A as AddCitationArgs, a as AddCitationResult, b as AppToolContext, c as AppToolHandlers, d as AppToolOutcome, e as AppToolProducedEvent, f as AppToolTaxonomy, R as RenderUiArgs, g as RenderUiResult, S as ScheduleFollowupArgs, h as ScheduleFollowupResult, i as SubmitProposalArgs, j as SubmitProposalResult } from './types-2rOJo8Hc.js';
 export { BuildDelegationOptions, DELEGATION_MCP_SERVER_KEY, DELEGATION_TOOLS, DelegationMcpServer, buildDelegationMcpServer, delegationMcpForConfig } from './delegation/index.js';

package/dist/index.js

@@ -1,58 +1,3 @@
-import {
-  ApprovalEventSchema,
-  BrandTokensSchema,
-  ConversionMetricsSchema,
-  CopyContentSchema,
-  EmailContentSchema,
-  ImageContentSchema,
-  VideoContentSchema,
-  parseAssetSpec,
-  safeParseAssetSpec
-} from "./chunk-5PTGEJZL.js";
-import {
-  DEFAULT_SEQUENCES_MCP_DESCRIPTION,
-  MAX_CAPTION_BATCH,
-  SEQUENCES_MCP_PROTOCOL_VERSIONS,
-  SEQUENCE_EXPORT_FORMATS,
-  SEQUENCE_MCP_TOOLS,
-  SEQUENCE_MEDIA_KINDS,
-  SEQUENCE_OPERATION_TYPES,
-  SEQUENCE_TRACK_KINDS,
-  applySequenceOperation,
-  applySequenceOperations,
-  assertSequenceMediaUrl,
-  buildCaptionChunks,
-  buildContactSheetManifest,
-  buildEdl,
-  buildOtio,
-  buildSequencesMcpServerEntry,
-  buildSrt,
-  buildVtt,
-  captionCoverage,
-  captionTrackNameForLanguage,
-  createSequencesMcpHandler,
-  findSequenceMcpTool,
-  lastClipEndFrame,
-  normalizeLanguageTag,
-  parseSequenceOperations,
-  planLanguageFanout,
-  resolveCaptionPlacement,
-  resolveCaptionTarget,
-  resolvePlaceClipTrack,
-  validateAddCaption,
-  validateCreateTrack,
-  validateDeleteClip,
-  validateExtendSequence,
-  validateMoveClip,
-  validatePlaceClip,
-  validateQueueExport,
-  validateSequenceOperation,
-  validateSequenceOperations,
-  validateSetClipDisabled,
-  validateSetClipText,
-  validateSplitClip,
-  validateTrimClip
-} from "./chunk-6UOE5CTA.js";
 import {
   CANVAS_ELEMENT_KINDS,
   CANVAS_MCP_TOOLS,
@@ -101,57 +46,6 @@ import {
   validateSceneOperations,
   validateSlotValue
 } from "./chunk-JZAJE3JL.js";
-import {
-  MIN_SEQUENCE_CLIP_FRAMES,
-  assertClipFitsSequence,
-  chooseCaptionPlacement,
-  clampClipDuration,
-  clampClipStart,
-  formatSeconds,
-  formatTimecode,
-  framesToSeconds,
-  secondsToFrames,
-  snapshotFrame,
-  trackIntervals
-} from "./chunk-ZYBWGSAZ.js";
-import {
-  HubExecClient,
-  invokeIntegrationHub,
-  resolveIntegrationAction
-} from "./chunk-L2TG5DBW.js";
-import {
-  DEFAULT_MISSION_STEP_KINDS,
-  MISSION_CONTROL_CHANNEL_ID,
-  MissionConcurrencyError,
-  RetryableStepError,
-  applyMissionEvent,
-  asMissionStreamEvent,
-  budgetGateProposalId,
-  buildAgentMissionPlan,
-  createInMemoryMissionStore,
-  createMissionEngine,
-  createMissionService,
-  isMissionStopRequested,
-  isMissionTerminal,
-  mergeMissionState,
-  noopEventSink,
-  parseMissionBlocks,
-  parseSessionStreamEnvelope,
-  reduceMissionEvents,
-  stepAgentActivity,
-  stepGateProposalId,
-  volumeGateProposalId
-} from "./chunk-UDXMR3AD.js";
-import {
-  addSecurityHeaders,
-  checkRateLimit,
-  clearCookieHeader,
-  extractRequestContext,
-  parseJsonObjectBody,
-  readCookieValue,
-  requireString,
-  serializeCookie
-} from "./chunk-SCG5JJ4C.js";
 import {
   DEFAULT_REDACTION_PATTERNS,
   buildRedactedDocument,
@@ -177,17 +71,73 @@ import {
   stepActivityFlowTrace
 } from "./chunk-AFDROJ64.js";
 import {
-  createKnowledgeLoop,
-  createReviewerDecider,
-  reviewCandidate
-} from "./chunk-EEPJGZJW.js";
+  ApprovalEventSchema,
+  BrandTokensSchema,
+  ConversionMetricsSchema,
+  CopyContentSchema,
+  EmailContentSchema,
+  ImageContentSchema,
+  VideoContentSchema,
+  parseAssetSpec,
+  safeParseAssetSpec
+} from "./chunk-5PTGEJZL.js";
 import {
-  DEFAULT_HARNESS,
-  KNOWN_HARNESSES,
-  coerceHarness,
-  isHarness,
-  resolveSessionHarness
-} from "./chunk-SD2H4FWY.js";
+  DEFAULT_SEQUENCES_MCP_DESCRIPTION,
+  MAX_CAPTION_BATCH,
+  SEQUENCES_MCP_PROTOCOL_VERSIONS,
+  SEQUENCE_EXPORT_FORMATS,
+  SEQUENCE_MCP_TOOLS,
+  SEQUENCE_MEDIA_KINDS,
+  SEQUENCE_OPERATION_TYPES,
+  SEQUENCE_TRACK_KINDS,
+  applySequenceOperation,
+  applySequenceOperations,
+  assertSequenceMediaUrl,
+  buildCaptionChunks,
+  buildContactSheetManifest,
+  buildEdl,
+  buildOtio,
+  buildSequencesMcpServerEntry,
+  buildSrt,
+  buildVtt,
+  captionCoverage,
+  captionTrackNameForLanguage,
+  createSequencesMcpHandler,
+  findSequenceMcpTool,
+  lastClipEndFrame,
+  normalizeLanguageTag,
+  parseSequenceOperations,
+  planLanguageFanout,
+  resolveCaptionPlacement,
+  resolveCaptionTarget,
+  resolvePlaceClipTrack,
+  validateAddCaption,
+  validateCreateTrack,
+  validateDeleteClip,
+  validateExtendSequence,
+  validateMoveClip,
+  validatePlaceClip,
+  validateQueueExport,
+  validateSequenceOperation,
+  validateSequenceOperations,
+  validateSetClipDisabled,
+  validateSetClipText,
+  validateSplitClip,
+  validateTrimClip
+} from "./chunk-6UOE5CTA.js";
+import {
+  MIN_SEQUENCE_CLIP_FRAMES,
+  assertClipFitsSequence,
+  chooseCaptionPlacement,
+  clampClipDuration,
+  clampClipStart,
+  formatSeconds,
+  formatTimecode,
+  framesToSeconds,
+  secondsToFrames,
+  snapshotFrame,
+  trackIntervals
+} from "./chunk-ZYBWGSAZ.js";
 import {
   agentAppConfigJsonSchema,
   defineAgentApp
@@ -241,6 +191,56 @@ import {
   resolveToolId,
   resolveToolName
 } from "./chunk-CPI3RILI.js";
+import {
+  HubExecClient,
+  invokeIntegrationHub,
+  resolveIntegrationAction
+} from "./chunk-L2TG5DBW.js";
+import {
+  DEFAULT_MISSION_STEP_KINDS,
+  MISSION_CONTROL_CHANNEL_ID,
+  MissionConcurrencyError,
+  RetryableStepError,
+  applyMissionEvent,
+  asMissionStreamEvent,
+  budgetGateProposalId,
+  buildAgentMissionPlan,
+  createInMemoryMissionStore,
+  createMissionEngine,
+  createMissionService,
+  isMissionStopRequested,
+  isMissionTerminal,
+  mergeMissionState,
+  noopEventSink,
+  parseMissionBlocks,
+  parseSessionStreamEnvelope,
+  reduceMissionEvents,
+  stepAgentActivity,
+  stepGateProposalId,
+  volumeGateProposalId
+} from "./chunk-UDXMR3AD.js";
+import {
+  addSecurityHeaders,
+  checkRateLimit,
+  clearCookieHeader,
+  extractRequestContext,
+  parseJsonObjectBody,
+  readCookieValue,
+  requireString,
+  serializeCookie
+} from "./chunk-SCG5JJ4C.js";
+import {
+  createKnowledgeLoop,
+  createReviewerDecider,
+  reviewCandidate
+} from "./chunk-EEPJGZJW.js";
+import {
+  DEFAULT_HARNESS,
+  KNOWN_HARNESSES,
+  coerceHarness,
+  isHarness,
+  resolveSessionHarness
+} from "./chunk-SD2H4FWY.js";
 import {
   createCapabilityToken,
   createExpiringCapabilityToken,

package/dist/mcp-BShTlESm.d.ts

@@ -0,0 +1,54 @@
+import { b as AppToolContext } from './types-2rOJo8Hc.js';
+import { c as ToolHeaderNames, a as AppToolName } from './auth-BlS9GWfL.js';
+
+/** Default route path each app tool is served at. A product mounts its routes
+ *  at these paths (or supplies its own via {@link BuildMcpServerOptions.paths}). */
+declare const DEFAULT_APP_TOOL_PATHS: Record<AppToolName, string>;
+/** The portable MCP server entry the sandbox SDK accepts (transport + url +
+ *  headers). Matches `AgentProfileMcpServer` structurally without importing the
+ *  sandbox SDK — products spread it into their profile's `mcp` map. */
+interface AppToolMcpServer {
+    transport: 'http';
+    url: string;
+    headers: Record<string, string>;
+    enabled: true;
+    metadata: {
+        description: string;
+    };
+}
+interface BuildHttpMcpServerOptions {
+    /** Route path on the app the sandbox POSTs to (e.g. `/api/tools/propose`). */
+    path: string;
+    /** App base URL the sandbox reaches back to (no trailing slash required). */
+    baseUrl: string;
+    /** Per-user capability token, baked into the Authorization header. */
+    token: string;
+    ctx: AppToolContext;
+    /** Tool description the model sees. */
+    description: string;
+    headerNames?: ToolHeaderNames;
+}
+/**
+ * Build ONE HTTP MCP server entry — the generic agent→app bridge. The
+ * capability token + the user/workspace/thread ids ride in server-set headers
+ * (never tool args), so the model can't forge identity or target another
+ * workspace. Workspace/thread headers are omitted when their `ctx` value is
+ * empty/null (e.g. an integration-invoke bridge that's user-scoped only). Used
+ * directly for non-app-tool bridges (integration_invoke) and via
+ * {@link buildAppToolMcpServer} for the four app tools.
+ */
+declare function buildHttpMcpServer(opts: BuildHttpMcpServerOptions): AppToolMcpServer;
+interface BuildMcpServerOptions {
+    tool: AppToolName;
+    baseUrl: string;
+    token: string;
+    ctx: AppToolContext;
+    description: string;
+    headerNames?: ToolHeaderNames;
+    paths?: Partial<Record<AppToolName, string>>;
+}
+/** Build one of the four app-tool MCP servers — a thin wrapper over
+ *  {@link buildHttpMcpServer} that maps the tool name to its route path. */
+declare function buildAppToolMcpServer(opts: BuildMcpServerOptions): AppToolMcpServer;
+
+export { type AppToolMcpServer as A, type BuildHttpMcpServerOptions as B, DEFAULT_APP_TOOL_PATHS as D, type BuildMcpServerOptions as a, buildAppToolMcpServer as b, buildHttpMcpServer as c };

package/dist/model-resolution/index.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Canonical chat-model resolution — identical across every agent app.
+ *
+ * The ONLY per-app inputs are DATA, never logic: the default model, the
+ * allowlist, the env value the deployment set, and the catalog-fetch loader.
+ * The logic is one precedence ladder + one fail-closed validator that every
+ * product uses the same way — there is no per-product variant, no env-var name
+ * baked in, and no backend dimension (router-vs-sandbox is the harness/dispatch
+ * concern, not model resolution; a sandbox's provider default lives in the
+ * sandbox subpath).
+ *
+ * - resolveChatModel: request > workspace > env > default. The product reads its
+ *   own deploy env var and passes the VALUE as `envModel`; the shell knows no
+ *   env-var names. Source is canonical: 'request' | 'workspace' | 'env' | 'default'.
+ * - validateChatModelId: fail-closed. Admit an id that is in the allowlist, or
+ *   equals the operator-set env model, or is served by the live router catalog
+ *   (exact, or a bare id resolved to its canonical id when the suffix is unique).
+ */
+/** The router /v1/models entry shape this module reads. Minimal on purpose. */
+interface ModelInfo {
+    id: string;
+    name?: string;
+    _provider?: string;
+    provider?: string;
+}
+type ChatModelSource = 'request' | 'workspace' | 'env' | 'default';
+interface ResolvedChatModel {
+    model: string;
+    source: ChatModelSource;
+}
+interface ChatModelValidationSuccess {
+    succeeded: true;
+    value: string;
+}
+interface ChatModelValidationFailure {
+    succeeded: false;
+    error: string;
+}
+type ChatModelValidationResult = ChatModelValidationSuccess | ChatModelValidationFailure;
+/** The catalog-fetch boundary: maps a router base URL to the raw model list. */
+type LoadModels = (routerBaseUrl: string) => Promise<ModelInfo[]>;
+interface ResolveChatModelInput {
+    /** Per-request override (highest precedence). */
+    requestModel?: string;
+    /** Persisted workspace-pinned model. */
+    workspaceModel?: string;
+    /** The value the deployment's model env var holds (the product reads its own
+     *  var name and passes the value — the shell stays env-var-name agnostic). */
+    envModel?: string;
+    /** Final fallback (the product's default, typically profile.model.default). */
+    defaultModel: string;
+}
+/** Resolve the chat-turn model by the one canonical precedence. Blank values are
+ *  treated as absent. */
+declare function resolveChatModel(input: ResolveChatModelInput): ResolvedChatModel;
+interface ValidateChatModelIdInput {
+    /** Ids accepted without a catalog round-trip (defaults + operator-trusted). */
+    allowlist?: Iterable<string>;
+    /** The operator-set env model value — always admitted (operator-trusted). */
+    envModel?: string;
+    /** Catalog loader; required to reach the catalog path. */
+    loadModels?: LoadModels;
+    /** Catalog endpoint base; required to reach the catalog path. */
+    routerBaseUrl?: string;
+}
+/**
+ * Fail-closed model-id validation. Accepts an id only when it is well-formed AND
+ * (in the allowlist, or equals the operator-set env model, or served by the live
+ * catalog). A bare id (no provider prefix) resolves to its canonical id only when
+ * the suffix is unique across the catalog — an ambiguous suffix is rejected
+ * rather than silently assigned a provider.
+ */
+declare function validateChatModelId(modelId: unknown, input: ValidateChatModelIdInput): Promise<ChatModelValidationResult>;
+declare function cleanModelId(value: unknown): string | undefined;
+declare function isWellFormedModelId(modelId: string): boolean;
+declare function catalogIdsForModel(model: ModelInfo): string[];
+
+export { type ChatModelSource, type ChatModelValidationFailure, type ChatModelValidationResult, type ChatModelValidationSuccess, type LoadModels, type ModelInfo, type ResolveChatModelInput, type ResolvedChatModel, type ValidateChatModelIdInput, catalogIdsForModel, cleanModelId, isWellFormedModelId, resolveChatModel, validateChatModelId };