crewx 0.9.0-rc.136 → 0.9.0-rc.137

package/dist-server/domain/app-dev/app-dev.service.js

@@ -33,6 +33,8 @@ const SESSION_FILE_NAME = 'session.json';
 const DEV_DB_FILE_NAME = 'ui-instances.db';
 const DEV_DB_FILE_PATTERN = /^ui-instances(?:-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})?\.db$/;
 const SESSION_CALL_LIMIT = 50;
+// A dev session that nobody has touched for this long gives its workspace snapshot back.
+const APP_DEV_IDLE_RELEASE_MS = 10 * 60 * 1000;
 const REGISTERED_APP_ENTRY_PATH = 'ui/index.html';
 const APP_DEV_AGENT_ACTOR_ID = 'network:runtime:app-dev';
 const APP_DEV_APPROVAL_REASON = 'Workspace-source App code only; no conversation data; same power as the agent shell.';
@@ -42,6 +44,8 @@ let AppDevService = class AppDevService {
     workspaceAssetCatalogResolver;
     appServices = new Map();
     locks = new Map();
+    latestDevCaptures = new Map();
+    idleReleases = new Map();
     contentChannel;
     constructor(projectRepository, workspaceEventBus, contentChannel, workspaceAssetCatalogResolver = mcp_app_workspace_asset_catalog_resolver_js_1.mcpAppWorkspaceAssetCatalogResolver) {
         this.projectRepository = projectRepository;
@@ -66,7 +70,7 @@ let AppDevService = class AppDevService {
                 ?? this.newSession(workspace, appId);
             document.workspaceSlug = workspace.slug;
             const context = this.contextFor(paths, workspace, document);
-            const capture = await context.service.captureWorkspaceSnapshot(workspace.path, { definitionPolicy: 'latest-dev' });
+            const capture = await this.captureLatestDev(context);
             const registration = this.requireWorkspaceSourceApp(context, capture, true);
             if (registration !== null) {
                 await this.prepareApp(context, capture);
@@ -83,9 +87,9 @@ let AppDevService = class AppDevService {
     }
     async getApp(workspace, appId) {
         const context = await this.requireSession(workspace, appId);
-        return this.withLock(context.appDirectory, async () => {
+        return this.withLock(context.appDirectory, async (arrivedAt) => {
             const current = await this.requireSession(workspace, appId);
-            const prepared = await this.prepareApp(current);
+            const prepared = await this.prepareApp(current, undefined, undefined, arrivedAt);
             return {
                 appId,
                 sessionId: current.document.sessionId,
@@ -102,9 +106,9 @@ let AppDevService = class AppDevService {
     }
     async putContent(workspace, appId, actionId, requestId, mediaType, bytes) {
         const context = await this.requireSession(workspace, appId);
-        return this.withLock(context.appDirectory, async () => {
+        return this.withLock(context.appDirectory, async (arrivedAt) => {
             const current = await this.requireSession(workspace, appId);
-            const prepared = await this.prepareApp(current);
+            const prepared = await this.prepareApp(current, undefined, undefined, arrivedAt);
             const actions = prepared.contentActions;
             if (!actions || !(0, sdk_1.contentActionsMatch)(actions, prepared.instanceId, prepared.resolved.instance.projection.descriptor.definition)
                 || actions.actions.find((action) => action.actionId === actionId)?.in?.mediaType !== mediaType) {
@@ -123,9 +127,9 @@ let AppDevService = class AppDevService {
     }
     async getContent(workspace, appId, requestId) {
         const context = await this.requireSession(workspace, appId);
-        return this.withLock(context.appDirectory, async () => {
+        return this.withLock(context.appDirectory, async (arrivedAt) => {
             const current = await this.requireSession(workspace, appId);
-            const prepared = await this.prepareApp(current);
+            const prepared = await this.prepareApp(current, undefined, undefined, arrivedAt);
             const store = new sdk_1.UiInstanceStore(current.databasePath);
             let receipt;
             try {
@@ -160,9 +164,9 @@ let AppDevService = class AppDevService {
     }
     async getResource(workspace, appId) {
         const context = await this.requireSession(workspace, appId);
-        return this.withLock(context.appDirectory, async () => {
+        return this.withLock(context.appDirectory, async (arrivedAt) => {
             const current = await this.requireSession(workspace, appId);
-            const prepared = await this.prepareApp(current);
+            const prepared = await this.prepareApp(current, undefined, undefined, arrivedAt);
             const resource = prepared.service.getInstanceResourceForSnapshot(current.workspace.id, devThreadId(current.document.sessionId), prepared.instanceId, prepared.capture);
             if (!resource)
                 throw new common_1.NotFoundException({ code: 'MCP_APP_RESOURCE_NOT_FOUND' });
@@ -268,9 +272,9 @@ let AppDevService = class AppDevService {
     }
     async getState(workspace, appId) {
         const context = await this.requireSession(workspace, appId);
-        return this.withLock(context.appDirectory, async () => {
+        return this.withLock(context.appDirectory, async (arrivedAt) => {
             const current = await this.requireSession(workspace, appId);
-            const prepared = await this.prepareApp(current);
+            const prepared = await this.prepareApp(current, undefined, undefined, arrivedAt);
             const projections = await prepared.service.buildAgentContextProjectionsForSnapshot(current.workspace.id, devThreadId(current.document.sessionId), prepared.instanceId, prepared.capture);
             const projection = projections?.find((candidate) => candidate.instanceId === prepared.instanceId);
             if (!projection)
@@ -298,9 +302,9 @@ let AppDevService = class AppDevService {
     }
     async getDebug(workspace, appId, probe, after) {
         const context = await this.requireSession(workspace, appId);
-        return this.withLock(context.appDirectory, async () => {
+        return this.withLock(context.appDirectory, async (arrivedAt) => {
             const current = await this.requireSession(workspace, appId);
-            const prepared = await this.prepareApp(current);
+            const prepared = await this.prepareApp(current, undefined, undefined, arrivedAt);
             const logPath = (0, app_debug_log_js_1.appDebugLogPath)(current.workspacePath, appId);
             if (logPath === null)
                 throw new common_1.NotFoundException({ code: 'DEBUG_UNAVAILABLE' });
@@ -368,7 +372,7 @@ let AppDevService = class AppDevService {
         const context = await this.requireSession(workspace, appId);
         return this.withLock(context.appDirectory, async () => {
             const current = await this.requireSession(workspace, appId);
-            const capture = await current.service.captureWorkspaceSnapshot(current.workspacePath, { definitionPolicy: 'latest-dev' });
+            const capture = await this.captureLatestDev(current);
             const registration = this.requireWorkspaceSourceApp(current, capture, true);
             const items = [];
             const diagnostic = this.findDiagnostic(capture, appId);
@@ -444,7 +448,7 @@ let AppDevService = class AppDevService {
         const context = await this.requireSession(workspace, appId);
         return this.withLock(context.appDirectory, async () => {
             const current = await this.requireSession(workspace, appId);
-            const capture = await current.service.captureWorkspaceSnapshot(current.workspacePath, { definitionPolicy: 'latest-dev' });
+            const capture = await this.captureLatestDev(current);
             this.requireWorkspaceSourceApp(current, capture, false);
             this.closeAppService(current.databasePath);
             assertSafeAppDirectoryForDeletion(current.devRoot, current.appDirectory);
@@ -471,13 +475,33 @@ let AppDevService = class AppDevService {
         });
     }
     onModuleDestroy() {
+        for (const { timer } of this.idleReleases.values())
+            clearTimeout(timer);
+        this.idleReleases.clear();
+        this.latestDevCaptures.clear();
         for (const service of this.appServices.values())
             service.onModuleDestroy();
         this.appServices.clear();
     }
-    async prepareApp(context, suppliedCapture, captureOptions = { definitionPolicy: 'latest-dev' }) {
+    /**
+     * Takes the latest-dev capture for a session. A request that queued behind
+     * others reuses a capture that began after it arrived: that capture already
+     * saw every edit made before the request, so a burst of polls costs one scan.
+     */
+    async captureLatestDev(context, arrivedAt) {
+        const shared = this.latestDevCaptures.get(context.databasePath);
+        if (arrivedAt !== undefined && shared !== undefined && shared.startedAt >= arrivedAt)
+            return shared.capture;
+        const startedAt = process.hrtime.bigint();
+        const capture = await context.service.captureWorkspaceSnapshot(context.workspacePath, { definitionPolicy: 'latest-dev' });
+        this.latestDevCaptures.set(context.databasePath, { startedAt, capture });
+        return capture;
+    }
+    async prepareApp(context, suppliedCapture, captureOptions, arrivedAt) {
         const capture = suppliedCapture
-            ?? await context.service.captureWorkspaceSnapshot(context.workspacePath, captureOptions);
+            ?? (captureOptions === undefined
+                ? await this.captureLatestDev(context, arrivedAt)
+                : await context.service.captureWorkspaceSnapshot(context.workspacePath, captureOptions));
         const registration = this.requireWorkspaceSourceApp(context, capture, false);
         if (registration === null || !registration.definition)
             throw new common_1.HttpException({ code: 'APP_INVALID' }, 409);
@@ -651,8 +675,33 @@ let AppDevService = class AppDevService {
             service.markBootReceiptsRecovered();
             this.appServices.set(databasePath, service);
         }
+        this.armIdleRelease(paths.appDirectory, databasePath);
         return { ...paths, databasePath, workspace, document, service };
     }
+    /**
+     * Nothing tells the server that a dev tab or an agent is done with a session,
+     * so a session left alone gives back its workspace snapshot (the bulk of its
+     * memory). The next request rebuilds it the way a restarted server would.
+     */
+    armIdleRelease(appDirectory, databasePath) {
+        const previous = this.idleReleases.get(appDirectory);
+        if (previous)
+            clearTimeout(previous.timer);
+        const timer = setTimeout(() => this.releaseIdleSession(appDirectory), APP_DEV_IDLE_RELEASE_MS);
+        timer.unref();
+        this.idleReleases.set(appDirectory, { timer, databasePath });
+    }
+    releaseIdleSession(appDirectory) {
+        const entry = this.idleReleases.get(appDirectory);
+        if (!entry)
+            return;
+        if (this.locks.has(appDirectory)) {
+            this.armIdleRelease(appDirectory, entry.databasePath);
+            return;
+        }
+        this.idleReleases.delete(appDirectory);
+        this.closeAppService(entry.databasePath);
+    }
     newSession(workspace, appId) {
         return {
             schemaVersion: 1,
@@ -715,15 +764,17 @@ let AppDevService = class AppDevService {
     closeAppService(databasePath) {
         this.appServices.get(databasePath)?.onModuleDestroy();
         this.appServices.delete(databasePath);
+        this.latestDevCaptures.delete(databasePath);
     }
     async withLock(key, operation) {
+        const arrivedAt = process.hrtime.bigint();
         const previous = this.locks.get(key) ?? Promise.resolve();
         let release;
         const current = new Promise((resolveLock) => { release = resolveLock; });
         this.locks.set(key, current);
         await previous;
         try {
-            return await operation();
+            return await operation(arrivedAt);
         }
         finally {
             release();

package/dist-server/domain/mcp/mcp-apps.js

@@ -19,6 +19,7 @@ exports.resolveSnapshotDispatchCapabilities = resolveSnapshotDispatchCapabilitie
 exports.isUserLaunchableRegistration = isUserLaunchableRegistration;
 exports.isMcpAppLauncherLaunchable = isMcpAppLauncherLaunchable;
 exports.getLaunchableMcpAppIds = getLaunchableMcpAppIds;
+exports.actionInputSchemasFromTools = actionInputSchemasFromTools;
 exports.defaultAppButtons = defaultAppButtons;
 exports.createCrewxMcpAppCatalog = createCrewxMcpAppCatalog;
 exports.createCrewxMcpAppRegistry = createCrewxMcpAppRegistry;
@@ -259,6 +260,10 @@ function createBundleAwareMcpAppRegistry(coreRegistry) {
         },
     };
 }
+/** Agent-facing App description: single line, bounded. */
+function promptAppDescription(description) {
+    return description.replace(/\s+/g, ' ').trim().slice(0, 300);
+}
 function hasNoRequestedCspOrigins(csp) {
     return csp.connectDomains.length === 0
         && csp.resourceDomains.length === 0
@@ -466,12 +471,33 @@ function actionLabel(actionId) {
         .replace(/[_-]+/g, ' ')
         .replace(/\b\w/g, (letter) => letter.toUpperCase());
 }
-function defaultAppButtons(definition) {
+/**
+ * Per-action input schemas carried by a registration's tools. Dispatcher tools
+ * (several action ids behind one wrapper schema) name no single action and are
+ * skipped, so their actions keep the keys-only fallback in `defaultAppButtons`.
+ */
+function actionInputSchemasFromTools(tools) {
+    const schemas = new Map();
+    for (const tool of tools) {
+        if (tool.kind !== 'action' || typeof tool.actionId !== 'string')
+            continue;
+        if (tool.actionIds !== undefined && (tool.actionIds.length !== 1 || tool.actionIds[0] !== tool.actionId))
+            continue;
+        schemas.set(tool.actionId, tool.inputSchema);
+    }
+    return schemas;
+}
+/**
+ * Buttons derived from the definition's actions. `inputSchemas` supplies each
+ * action's real schema (types, enum, required, bounds); an action without one
+ * falls back to the keys-only string schema this function always produced.
+ */
+function defaultAppButtons(definition, inputSchemas) {
     return Object.entries(definition.actions).map(([id, action]) => ({
         id,
         label: actionLabel(id),
         enabled: true,
-        inputSchema: {
+        inputSchema: inputSchemas?.get(id) ?? {
             type: 'object',
             properties: Object.fromEntries((action.inputKeys ?? []).map((key) => [key, { type: 'string' }])),
             additionalProperties: false,
@@ -767,7 +793,13 @@ let McpAppWorkspaceService = class McpAppWorkspaceService {
         const registeredProductBundle = await this.ensureBundleCatalog(workspaceRoot);
         const skillBackend = this.workspaceSkillBackendForCapture(workspaceRoot, options.onSkillBackendInspection, productBundle);
         const current = this.snapshotHolders.get(key);
-        if (!current || options.definitionPolicy === 'latest-dev') {
+        // latest-dev still sees every edit: reconfirm re-stats the scanned files and
+        // returns a new generation when any fingerprint moved, but hands back the
+        // held snapshot untouched otherwise. Only an inspecting capture must be
+        // rebuilt, because the skill backend port is baked into the snapshot.
+        const needsFreshDiscovery = options.definitionPolicy === 'latest-dev'
+            && options.onSkillBackendInspection !== undefined;
+        if (!current || needsFreshDiscovery) {
             const [snapshot] = await Promise.all([
                 (0, sdk_1.discoverWorkspaceAppSnapshot)(workspaceRoot, {
                     builtins: this.catalog.coreRegistry,
@@ -966,6 +998,10 @@ let McpAppWorkspaceService = class McpAppWorkspaceService {
                 content: candidate.definition.actions[actionId]?.content,
                 backend: candidate.normalized.manifest.actions.find((action) => action.actionId === actionId)?.backend,
             }, [], verifiedBundle) === 'allowed'));
+            const bundleInputSchemas = new Map(candidate.normalized.manifest.actions.map((action) => [
+                action.actionId,
+                action.inputSchema,
+            ]));
             const canOpen = candidate.definition.usage !== 'card'
                 && (candidate.initialState !== undefined || candidate.normalized.manifest.actions.length > 0);
             // Publish the descriptor only after every server-side action adapter is ready.
@@ -982,7 +1018,7 @@ let McpAppWorkspaceService = class McpAppWorkspaceService {
                 } : {}),
                 actions,
                 modelActions,
-                buttons: () => defaultAppButtons(candidate.definition),
+                buttons: () => defaultAppButtons(candidate.definition, bundleInputSchemas),
                 summaryAllow: candidate.definition.summaryProjection?.allow ?? [],
                 ...(candidate.definition.usage === 'card' ? { openPolicy: 'anchored_only' } : {}),
             });
@@ -1332,6 +1368,44 @@ let McpAppWorkspaceService = class McpAppWorkspaceService {
             return null;
         return registration;
     }
+    /**
+     * Effective agent class of one App in this snapshot, folded from the same
+     * per-action decision the action path applies (`getTaskAgentAccess`):
+     * `direct` when any action runs without human approval, `approval` when
+     * agent-callable actions exist but all need approval, else `none`.
+     */
+    classifyAppAgentClassForSnapshot(appId, capture) {
+        const definition = capture.snapshot.registry.getRegistration(appId)?.definition
+            ?? this.getServerRegistrationForSnapshot(appId, capture)?.descriptor.definition;
+        if (!definition)
+            return 'none';
+        let approval = false;
+        for (const actionId of Object.keys(definition.actions)) {
+            const access = this.getTaskAgentAccess(appId, actionId, capture);
+            if (access === 'allowed')
+                return 'direct';
+            if (access === 'approval_required')
+                approval = true;
+        }
+        return approval ? 'approval' : 'none';
+    }
+    /**
+     * Every launchable App of the snapshot (the `MCP.APP.LIST` set) with its
+     * effective agent class. Read-only: it reuses the caller's capture and never
+     * captures a second snapshot.
+     */
+    listAvailableAppsForSnapshot(capture) {
+        return this.listLaunchersForSnapshot(capture).flatMap((launcher) => {
+            if (!launcher.definition)
+                return [];
+            return [{
+                    id: launcher.appId,
+                    name: launcher.name,
+                    description: promptAppDescription(launcher.description),
+                    agent: this.classifyAppAgentClassForSnapshot(launcher.appId, capture),
+                }];
+        });
+    }
     getTaskAgentActions(appId, capture) {
         const bundleCandidate = capture
             ? this.bundleCandidateForSnapshot(appId, capture)
@@ -2141,7 +2215,8 @@ let McpAppWorkspaceService = class McpAppWorkspaceService {
                     source: 'server',
                     instance,
                     definition,
-                    buttons: registration.buttons?.(instance.state) ?? defaultAppButtons(definition),
+                    buttons: registration.buttons?.(instance.state)
+                        ?? defaultAppButtons(definition, actionInputSchemasFromTools(registration.descriptor.tools)),
                 });
             return {
                 kind: 'app',
@@ -2243,6 +2318,41 @@ let McpAppWorkspaceService = class McpAppWorkspaceService {
         const capture = await this.captureWorkspaceSnapshot((0, workspace_context_store_js_1.getWorkspacePath)());
         return this.buildAgentContextProjectionsForSnapshot(workspaceId, threadId, focusedUiInstanceId, capture);
     }
+    /**
+     * The open-App projections and the launchable-App list for one MSG.SEND, both
+     * read from a single workspace snapshot capture.
+     */
+    async buildAgentContext(workspaceId, threadId, focusedUiInstanceId) {
+        if (!isMcpAppsEnabled())
+            return { projections: undefined, available: [] };
+        assertWorkspaceThreadScope(workspaceId, threadId);
+        const capture = await this.captureWorkspaceSnapshot((0, workspace_context_store_js_1.getWorkspacePath)());
+        const projections = await this.buildAgentContextProjectionsForSnapshot(workspaceId, threadId, focusedUiInstanceId, capture);
+        let available = [];
+        try {
+            available = this.listAvailableAppsForSnapshot(capture);
+        }
+        catch (error) {
+            // The list is additive prompt context; a failure must not drop the open-App projections.
+            mcpAppsLogger.warn(`Available App list skipped [thread=${threadId}]: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        return { projections, available };
+    }
+    /**
+     * Agent-context view of a descriptor: the App identity plus, for each button,
+     * the effective agent access the action path applies (`getTaskAgentAccess`,
+     * the same value `crewx app state` reports).
+     */
+    withAgentPromptData(descriptor, app, capture) {
+        return {
+            ...descriptor,
+            app: { id: app.appId, name: app.name, description: promptAppDescription(app.description) },
+            buttons: descriptor.buttons.map((button) => ({
+                ...button,
+                agentAccess: this.getTaskAgentAccess(app.appId, button.id, capture),
+            })),
+        };
+    }
     async buildAgentContextProjectionsForSnapshot(workspaceId, threadId, focusedUiInstanceId, capture) {
         if (!isMcpAppsEnabled())
             return undefined;
@@ -2268,11 +2378,15 @@ let McpAppWorkspaceService = class McpAppWorkspaceService {
                     if (!resolved)
                         continue;
                     const projections = resolved.appProjection;
+                    const workflowApp = this.catalog.serverApps.get(exports.MCP_APP_WORKFLOW_ID);
+                    const aiDescriptor = workflowApp
+                        ? this.withAgentPromptData(projections.ai.descriptor, workflowApp.descriptor, capture)
+                        : projections.ai.descriptor;
                     if (focusedUiInstanceId !== undefined && focusedUiInstanceId === instance.id) {
-                        output.push(projections.ai.descriptor);
+                        output.push(aiDescriptor);
                     }
                     else {
-                        output.push(summarizeDescriptor(projections.ai.descriptor, this.catalog.serverApps.get(exports.MCP_APP_WORKFLOW_ID)?.summaryAllow ?? []));
+                        output.push(summarizeDescriptor(aiDescriptor, workflowApp?.summaryAllow ?? []));
                     }
                 }
                 catch {
@@ -2289,14 +2403,15 @@ let McpAppWorkspaceService = class McpAppWorkspaceService {
                 const projections = await this.projectSnapshotInstance(instance, registration, capture, context);
                 if (!projections)
                     continue;
+                const aiDescriptor = this.withAgentPromptData(projections.ai.descriptor, registration, capture);
                 if (focusedUiInstanceId !== undefined && focusedUiInstanceId === instance.id) {
-                    output.push(projections.ai.descriptor);
+                    output.push(aiDescriptor);
                 }
                 else {
                     const allow = registration.resourceBinding.kind === 'mcp'
                         ? this.catalog.serverApps.get(registration.appId)?.summaryAllow ?? []
                         : registration.definition?.summaryProjection?.allow ?? [];
-                    output.push(summarizeDescriptor(projections.ai.descriptor, allow));
+                    output.push(summarizeDescriptor(aiDescriptor, allow));
                 }
             }
             catch {
@@ -2418,7 +2533,7 @@ let McpAppWorkspaceService = class McpAppWorkspaceService {
             source: 'server',
             instance,
             definition,
-            buttons: defaultAppButtons(definition),
+            buttons: defaultAppButtons(definition, actionInputSchemasFromTools(registration.tools)),
         });
     }
     readThreadInstances(workspaceId, threadId, capture, previousDefinition) {
@@ -2590,7 +2705,8 @@ let McpAppWorkspaceService = class McpAppWorkspaceService {
                 source: 'server',
                 instance,
                 definition,
-                buttons: registration.buttons?.(instance.state) ?? defaultAppButtons(definition),
+                buttons: registration.buttons?.(instance.state)
+                    ?? defaultAppButtons(definition, actionInputSchemasFromTools(registration.descriptor.tools)),
             });
         }
         return await registration.projectionFactory({

package/dist-server/domain/message/message.service.js

@@ -389,7 +389,7 @@ let MessageService = MessageService_1 = class MessageService {
             // MSG.SEND owns the server-side context boundary for normal agent input.
             // The UI never supplies this projection: resolveMcpApp rereads the current
             // instance, workflow run, definition, and anchor before returning it.
-            const mcpAppProjections = await this.resolveMcpAppProjections(threadId, ensureWorkspaceId, focusedUiInstanceId);
+            const { projections: mcpAppProjections, available: mcpAppAvailable } = await this.resolveMcpAppContext(threadId, ensureWorkspaceId, focusedUiInstanceId);
             const frontAppModelContext = focusedUiInstanceId
                 && mcpAppProjections?.some((descriptor) => (descriptor.instanceId === focusedUiInstanceId && descriptor.status === 'active'))
                 ? this.mcpAppWorkspaceService?.getModelContext(ensureWorkspaceId, threadId, focusedUiInstanceId)
@@ -475,6 +475,7 @@ let MessageService = MessageService_1 = class MessageService {
                 metadata,
                 cwd: workspaceRoot,
                 ...(mcpAppProjections ? { mcpAppProjections } : {}),
+                ...(mcpAppAvailable.length > 0 ? { mcpAppAvailable } : {}),
                 ...(frontAppModelContext ? { mcpAppModelContext: frontAppModelContext } : {}),
                 ...(model ? { model } : {}),
                 ...(effort !== undefined ? { effort } : {}),
@@ -524,19 +525,22 @@ let MessageService = MessageService_1 = class MessageService {
         }
     }
     /**
-     * Resolve server-owned MCP App projections for this thread. The normal Nest
-     * path reads the SDK ledger; the task-metadata branch only preserves behavior
-     * for older direct MessageService hosts that do not provide the adapter.
+     * Resolve server-owned MCP App context for this thread: the open-App
+     * projections and the launchable-App list, from one workspace snapshot. The
+     * normal Nest path reads the SDK ledger; the task-metadata branch only
+     * preserves behavior for older direct MessageService hosts that do not
+     * provide the adapter (and have no App list to offer).
      */
-    async resolveMcpAppProjections(threadId, workspaceId, focusedUiInstanceId) {
+    async resolveMcpAppContext(threadId, workspaceId, focusedUiInstanceId) {
+        const none = { projections: undefined, available: [] };
         if (!(0, mcp_apps_js_1.isMcpAppsEnabled)())
-            return undefined;
+            return none;
         try {
             if (this.mcpAppWorkspaceService) {
-                return await this.mcpAppWorkspaceService.buildAgentContextProjections(workspaceId, threadId, focusedUiInstanceId);
+                return await this.mcpAppWorkspaceService.buildAgentContext(workspaceId, threadId, focusedUiInstanceId);
             }
             if (!this.workflowApprovalBroker)
-                return undefined;
+                return none;
             const candidates = this.threadRepo
                 .findAllTasks(threadId, workspaceId)
                 .map(parseWorkflowUiInstanceTaskCandidate)
@@ -557,7 +561,7 @@ let MessageService = MessageService_1 = class MessageService {
                     actor: { kind: 'authenticated', id: 'network:session' },
                 });
                 if (resolved)
-                    return [resolved.appProjection.ai.descriptor];
+                    return { projections: [resolved.appProjection.ai.descriptor], available: [] };
             }
         }
         catch (error) {
@@ -565,7 +569,7 @@ let MessageService = MessageService_1 = class MessageService {
             // send fail. The legacy prompt remains the safe fallback.
             this.logger.warn(`MCP App projection skipped [thread=${threadId}]: ${error.message}`);
         }
-        return undefined;
+        return none;
     }
     saveImages(threadId, images, preparedImages) {
         return this.savePreparedImages(threadId, preparedImages ?? this.prepareImages(threadId, images));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "crewx",
-  "version": "0.9.0-rc.136",
+  "version": "0.9.0-rc.137",
   "description": "CrewX — AI agent team dashboard with Electron UI and CLI (Web + Electron + Global CLI)",
   "main": "server.js",
   "bin": {
@@ -109,20 +109,22 @@
     "ws": "8.20.0",
     "yargs": "17.7.0",
     "zod": "3.25.76",
-    "@crewx/chromex": "0.1.0-rc.169",
-    "@crewx/cron": "0.1.10-rc.171",
-    "@crewx/cli": "0.9.0-rc.136",
-    "@crewx/doc": "0.1.9-rc.129",
-    "@crewx/dreaming": "0.1.0-rc.162",
-    "@crewx/knowledge-core": "0.1.17-rc.146",
-    "@crewx/memory": "0.1.23-rc.153",
-    "@crewx/search": "0.1.10-rc.132",
-    "@crewx/skill": "0.1.20-rc.30",
-    "@crewx/sdk": "0.9.0-rc.136",
-    "@crewx/shared": "0.0.6-rc.51",
-    "@crewx/wi": "0.1.10-rc.156",
-    "@crewx/wbs": "0.1.10-rc.162",
-    "@crewx/workflow": "0.3.22-rc.182"
+    "@crewx/app": "0.1.0-rc.18",
+    "@crewx/chromex": "0.1.0-rc.170",
+    "@crewx/cli": "0.9.0-rc.137",
+    "@crewx/cron": "0.1.10-rc.172",
+    "@crewx/doc": "0.1.9-rc.130",
+    "@crewx/dreaming": "0.1.0-rc.163",
+    "@crewx/knowledge-core": "0.1.17-rc.147",
+    "@crewx/sdk": "0.9.0-rc.137",
+    "@crewx/memory": "0.1.23-rc.154",
+    "@crewx/skill": "0.1.20-rc.31",
+    "@crewx/notify": "0.1.0-rc.108",
+    "@crewx/wbs": "0.1.10-rc.163",
+    "@crewx/workflow": "0.3.22-rc.183",
+    "@crewx/search": "0.1.10-rc.133",
+    "@crewx/wi": "0.1.10-rc.157",
+    "@crewx/shared": "0.0.6-rc.52"
   },
   "devDependencies": {
     "@anthropic-ai/claude-agent-sdk": "0.2.132",
@@ -390,6 +392,8 @@
     "test:grok-poc": "node --test scripts/grok-poc/capture.test.mjs scripts/grok-poc/resume-proof.test.mjs",
     "test:server": "vitest run --config vitest.server.config.ts",
     "test:bundled-apps": "node --test scripts/build-bundled-apps.spec.mjs",
+    "test:app-build": "node --test scripts/check-sdk-app-imports.test.mjs scripts/build-app.test.mjs",
+    "check:sdk-app-imports": "node scripts/check-sdk-app-imports.mjs",
     "type-check": "tsc --noEmit",
     "build:manual": "node scripts/build-manual.mjs"
   }

package/packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crewx/cli",
-  "version": "0.9.0-rc.136",
+  "version": "0.9.0-rc.137",
   "license": "UNLICENSED",
   "engines": {
     "node": ">=20.19.0"