acrylblends 1.1.0 → 1.3.0

package/lib/cordis/door.d.ts

@@ -1,5 +1,5 @@
-import { f as UiActionResult, y as UiSnapshot } from "../protocol-a2aqrp2X.js";
-import { i as UiChannel, r as PageStream, t as AuditLog } from "../audit-BFpULBCj.js";
+import { f as UiActionResult, y as UiSnapshot } from "../protocol-BeIYCgTo.js";
+import { i as UiChannel, r as PageStream, t as AuditLog } from "../audit-Bok_UNCn.js";
 import { Context } from "@deepseek-ai/cordis";
 import z from "@deepseek-ai/schemastery";
 
@@ -84,7 +84,7 @@ declare class ShellChannel {
 }
 //#endregion
 //#region ../../plugins/acryl-door/src/host/door.d.ts
-type DoorErrorCode = 'invalid' | 'unknown-verb' | 'unavailable' | 'not-exposed' | 'outside-app' | 'failed' | ShellErrorCode;
+type DoorErrorCode = 'invalid' | 'unknown-verb' | 'unavailable' | 'not-exposed' | 'outside-app' | 'failed' | 'refused' | ShellErrorCode;
 declare class DoorError extends Error {
   readonly code: DoorErrorCode;
   constructor(code: DoorErrorCode, message: string);
@@ -96,13 +96,51 @@ interface ExtensionsPort {
   reload(): Promise<unknown>;
   list(): readonly unknown[];
 }
+/** The slice of acrylblends' `pluginShare` service the pull verb uses. */
+interface PluginSharePort {
+  pull(source: string): Promise<{
+    readonly ok: boolean;
+    readonly action?: string;
+    readonly reason?: string;
+    readonly next?: string;
+  }>;
+  planPublish(name: string, options?: PublishOptionsView): Promise<PublishPlanView | {
+    readonly ok: false;
+    readonly reason: string;
+    readonly next: string;
+  }>;
+  publish(name: string, confirmed: PublishPlanView, options?: PublishOptionsView): Promise<{
+    readonly ok: boolean;
+    readonly reason?: string;
+  }>;
+}
+/** Who a plan publishes as, and under which license; the service's defaults when absent. */
+interface PublishOptionsView {
+  readonly owner?: string;
+  readonly license?: string;
+}
+/** A plan as the door shows it. The service owns it; the door passes it back unchanged. */
+interface PublishPlanView {
+  readonly owner: string;
+  readonly repo: string;
+  readonly version: string;
+  readonly visibility: string;
+  readonly license: string;
+  readonly createsRepository: boolean;
+  readonly files: readonly string[];
+  readonly digest: string;
+  readonly pullLine: string;
+}
 /** The slice of acrylblends' `tools` registry (the `agent` plugin's) the tool verbs use, and where the built-in chat finds the verbs. */
 interface ToolsPort {
   /** @returns the function that removes the tool. @throws when the name is taken. */
   register(name: string, tool: {
     readonly description: string;
     readonly parameters?: Readonly<Record<string, unknown>>;
-    run(input: unknown): unknown;
+    run(input: unknown, options?: {
+      signal?: AbortSignal;
+      page?: string;
+    }): unknown;
   }): () => void;
   list(): ReadonlyArray<{
     readonly name: string;
@@ -121,8 +159,12 @@ interface DoorDeps {
     readonly root: string;
     readonly url?: string | undefined;
   };
+  /** The prefix the app's pages answer under (the frame's canvas, `/app`); absent on the app's own server, at the root. */
+  readonly appBase?: string | undefined;
   /** Read at each call: the services may come and go while the door runs. */
   readonly extensions: () => ExtensionsPort | undefined;
+  /** Read at each call, as `extensions` is; absent where the app has no plugin-share row. */
+  readonly pluginShare?: () => PluginSharePort | undefined;
   readonly tools: () => ToolsPort | undefined;
   /** The app tools the door offers; anything else is refused before it reaches the registry. */
   readonly expose: readonly string[];
@@ -131,6 +173,10 @@ interface DoorDeps {
   /** How long a reload or a move may take before the new page has connected again (tests shorten it). Default 15 s. */
   readonly pageBackMs?: number;
 }
+/** Who a verb runs for: `page`, the door's id of the page a run was asked from; its look and act go to that page alone (followed into its tab), never to another one. */
+interface VerbScope {
+  readonly page?: string;
+}
 /** What one verb answered: the value for `--json` and programs, the text for an agent reading a terminal. */
 interface VerbAnswer {
   readonly value: unknown;
@@ -142,10 +188,10 @@ declare class Door {
   /** A run asked for from the panel of this page is going: its verbs that name no window are for that page. @returns the function to call when the run ends. */
   driveFor(windowId: string): () => void;
   /** Run one verb. @throws DoorError or UiControlError. */
-  run(verb: string, args: unknown, signal: AbortSignal): Promise<VerbAnswer>;
+  run(verb: string, args: unknown, signal: AbortSignal, scope?: VerbScope): Promise<VerbAnswer>;
   brief(): VerbAnswer;
-  look(input: Record<string, unknown>, signal: AbortSignal): Promise<UiSnapshot>;
-  act(input: Record<string, unknown>, signal: AbortSignal): Promise<UiActionResult>;
+  look(input: Record<string, unknown>, signal: AbortSignal, scope?: VerbScope): Promise<UiSnapshot>;
+  act(input: Record<string, unknown>, signal: AbortSignal, scope?: VerbScope): Promise<UiActionResult>;
   /**
    * What the app answers at a path the page was sent to, so an agent that mistyped one is told ("404 at /nope") and not left to find out from a page it did not expect.
    * A second GET of the same path (a page is read-only); nothing when the app has no address or does not answer in time.
@@ -162,6 +208,12 @@ declare class Door {
   /** Run one call on the page and record it. The audit holds which control was touched and how it ended, never what was typed. */
   private callPage;
   private plugin;
+  private share;
+  /** Only a plan: no argument of any verb can publish, so an agent never says yes for a person. */
+  private planPublish;
+  /** The person's yes, from their own terminal. Not a verb: MCP and the chat do not have it. */
+  publishConfirmed(name: string, confirmed: PublishPlanView, options: PublishOptionsView): Promise<unknown>;
+  private pull;
   /** A folder named by an agent, resolved from the app folder; it must be inside the app. */
   private insideApp;
   private offeredTools;
@@ -174,7 +226,9 @@ declare class Door {
  * MCP (`tools/list`) and the built-in chat (the `tools` registry). A verb added here is in all three, or the comparison test fails.
  */
 /** Every verb, in the order `brief` lists them. */
-declare const VERBS: readonly ["brief", "look", "act", "plugin-list", "plugin-add", "plugin-remove", "plugin-reload", "tool-list", "tool-call", "window-list", "window-open", "window-focus", "window-close", "window-resize", "menu-list", "menu-click"];
+/** The verbs that only use the page: what a page-only door (a production assistant) offers. */
+declare const PAGE_VERBS: readonly ["look", "act"];
+declare const VERBS: readonly ["brief", "look", "act", "plugin-list", "plugin-add", "plugin-pull", "plugin-publish", "plugin-remove", "plugin-reload", "tool-list", "tool-call", "window-list", "window-open", "window-focus", "window-close", "window-resize", "menu-list", "menu-click"];
 type Verb = (typeof VERBS)[number];
 /** The JSON Schema of a verb's arguments, as MCP lists it. */
 interface ArgumentsSchema {
@@ -229,6 +283,12 @@ interface DoorFile {
 declare function doorFilePath(appRoot: string): string;
 /** The connection file as written, or undefined when there is none or it does not parse. */
 declare function readDoorFile(appRoot: string): DoorFile | undefined;
+/**
+ * Write this run's connection file, replacing a stale one.
+ * @throws when another live process already serves this folder's door: two apps from one folder would race for one file.
+ */
+/** @throws when another live process already serves this folder's door: two apps from one folder would race for one file. */
+declare function assertDoorIsFree(appRoot: string): void;
 //#endregion
 //#region ../../plugins/acryl-door/src/host/operator-routes.d.ts
 type CallResponse = {
@@ -259,12 +319,30 @@ interface Config {
    * run it in production (a packaged desktop app whose user drives it with an agent) says so here; `ACRYL_DOOR=off` still wins.
    */
   allowInProduction?: boolean;
+  /**
+   * Page only, for a production assistant: the page channel and two chat tools, `door_look` and `door_act`, and nothing else - no operator routes, no MCP, no desktop
+   * shell channel, no `.acryl/` file, no plugin, tool or window verbs. The app's agent can then use the page for a visitor and cannot change the app. Runs in production
+   * without `allowInProduction`; `ACRYL_DOOR=off` still wins.
+   */
+  pageOnly?: boolean;
   /** Reload the open pages after a live plugin change, so an agent that built a feature sees it on the page it has open. Default: true. */
   reloadOnChange?: boolean;
+  /**
+   * Put the page script in the host's own index page (DSH's web UI) too, so an agent can drive that UI. Default: true. A host whose index is a frame
+   * around the app (the ACRYL Blends frame, whose centre shows the app's page) turns it off: the door then drives the app's page in the canvas, and an
+   * agent's `act navigate` or a reload after a plugin change never takes the person's tab out of the frame.
+   */
+  hostIndex?: boolean;
+  /**
+   * The host prefix the app's pages are served under (the frame's canvas, `/app`); absent on the app's own server, where they are at the root. The
+   * door puts it on every page as `<meta name="acryl-app-base">`, and `act navigate` with an app path goes under it: a page the app serves at
+   * `/board` is reached at `/app/board` in the frame and at `/board` in production, and the same verb works in both.
+   */
+  appBase?: string;
 }
 declare const Config: z<Config>;
 /** The page of a path the app does not serve, development only: what is missing, a way back, and the door's script. */
 declare function notFoundPage(path: string, scriptTag: string): string;
 declare function apply(ctx: Context, rawConfig?: Config): void;
 //#endregion
-export { type CallResponse, Config, DOOR_PREFIX, Door, DoorError, type DoorFile, STATE_DIR, VERBS, VERB_SPECS, type Verb, type VerbAnswer, type VerbSpec, apply, chatToolName, doorFilePath, inject, mcpTools, name, notFoundPage, readDoorFile };
+export { type CallResponse, Config, DOOR_PREFIX, Door, DoorError, type DoorFile, PAGE_VERBS, STATE_DIR, VERBS, VERB_SPECS, type Verb, type VerbAnswer, type VerbSpec, apply, assertDoorIsFree, chatToolName, doorFilePath, inject, mcpTools, name, notFoundPage, readDoorFile };