@agent-native/core 0.22.18 → 0.22.19

package/dist/mcp/embed-app.js.map

@@ -1 +1 @@
-{"version":3,"file":"embed-app.js","sourceRoot":"","sources":["../../src/mcp/embed-app.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAE1E,MAAM,cAAc,GAClB,mEAAmE,CAAC;AAEtE,MAAM,CAAC,MAAM,iCAAiC,GAAG,gBAAgB,CAAC;AAClE,MAAM,6BAA6B,GAAG,EAAE,CAAC;AACzC,MAAM,CAAC,MAAM,+BAA+B,GAAG,GAAG,CAAC;AACnD,MAAM,CAAC,MAAM,4BAA4B,GACvC,+BAA+B,GAAG,6BAA6B,CAAC;AAalE,SAAS,IAAI,CAAC,KAAyB;IACrC,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,UAA2B,EAAE;IAE7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC;IAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,aAAa,CAAC;IACrD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,sBAAsB,CAAC;IACtE,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,KAAK,KAAK,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CACrB,GAAG,EACH,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,IAAI,4BAA4B,CAAC,CAC9D,CAAC;IACF,MAAM,cAAc,GAAG,MAAM,GAAG,6BAA6B,CAAC;IAE9D,OAAO;QACL,KAAK;QACL,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,IAAI,EAAE,GAAG,EAAE,CAAC;;;;;;;;;oDASoC,MAAM;;;;;;+CAMX,cAAc;oDACT,cAAc;iEACD,cAAc;sGACuB,cAAc;;;;;;;;oBAQhG,IAAI,CAAC,KAAK,CAAC;uBACR,IAAI,CAAC,WAAW,CAAC;qBACnB,IAAI,CAAC,SAAS,CAAC;qBACf,IAAI,CAAC,aAAa,CAAC;wBAChB,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;;;;4CAIN,IAAI,CAAC,KAAK,CAAC;;;mDAGJ,IAAI,CAAC,SAAS,CAAC;;;;;;;;;;;;;;;8BAepC,IAAI,CAAC,SAAS,CAAC,+BAA+B,CAAC;8BAC/C,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sCAggBE,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;QA2B5C;QACJ,GAAG,EAAE;YACH,cAAc,EAAE,CAAC,gBAAgB,CAAC;YAClC,eAAe,EAAE;gBACf,gBAAgB;gBAChB,iCAAiC;gBACjC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;aAChC;YACD,YAAY,EAAE;gBACZ,iCAAiC;gBACjC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;aAChC;SACF;QACD,aAAa,EAAE,KAAK;KACrB,CAAC;AACJ,CAAC","sourcesContent":["import type { ActionMcpAppResourceConfig } from \"../action.js\";\nimport { MCP_APP_CHAT_BRIDGE_QUERY_PARAM } from \"../shared/embed-auth.js\";\n\nconst MCP_APP_IMPORT =\n  \"https://esm.sh/@modelcontextprotocol/ext-apps@1.7.2/app-with-deps\";\n\nexport const MCP_APP_REQUEST_ORIGIN_CSP_SOURCE = \"$requestOrigin\";\nconst MCP_APP_WRAPPER_CHROME_HEIGHT = 44;\nexport const DEFAULT_MCP_APP_VIEWPORT_HEIGHT = 720;\nexport const DEFAULT_MCP_APP_SHELL_HEIGHT =\n  DEFAULT_MCP_APP_VIEWPORT_HEIGHT + MCP_APP_WRAPPER_CHROME_HEIGHT;\n\nexport interface EmbedAppOptions {\n  title?: string;\n  description?: string;\n  iframeTitle?: string;\n  openLabel?: string;\n  embedByDefault?: boolean;\n  startToolName?: string;\n  frameDomains?: string[];\n  height?: number;\n}\n\nfunction attr(value: string | undefined): string {\n  return String(value ?? \"\")\n    .replace(/&/g, \"&amp;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\");\n}\n\nexport function embedApp(\n  options: EmbedAppOptions = {},\n): ActionMcpAppResourceConfig {\n  const title = options.title ?? \"Open app\";\n  const iframeTitle = options.iframeTitle ?? \"Agent Native app\";\n  const openLabel = options.openLabel ?? \"Open in app\";\n  const startToolName = options.startToolName ?? \"create_embed_session\";\n  const embedByDefault = options.embedByDefault !== false;\n  const height = Math.max(\n    320,\n    Math.min(900, options.height ?? DEFAULT_MCP_APP_SHELL_HEIGHT),\n  );\n  const viewportHeight = height - MCP_APP_WRAPPER_CHROME_HEIGHT;\n\n  return {\n    title,\n    ...(options.description ? { description: options.description } : {}),\n    html: () => `<!doctype html>\n<html lang=\"en\">\n<head>\n  <meta charset=\"utf-8\">\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n  <style>\n    :root { color-scheme: light dark; font-family: ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif; background: Canvas; color: CanvasText; }\n    * { box-sizing: border-box; }\n    body { margin: 0; }\n    .shell { display: grid; gap: 8px; min-height: ${height}px; padding: 0; }\n    .bar { display: flex; align-items: center; justify-content: space-between; gap: 8px; min-height: 36px; padding: 6px 8px; border-bottom: 1px solid color-mix(in srgb, CanvasText 12%, Canvas); }\n    .title { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; font-size: 12px; font-weight: 700; color: color-mix(in srgb, CanvasText 72%, Canvas); }\n    .actions { display: flex; align-items: center; gap: 6px; }\n    button { min-height: 28px; border: 1px solid color-mix(in srgb, CanvasText 14%, Canvas); border-radius: 7px; background: Canvas; color: CanvasText; cursor: pointer; font: inherit; font-size: 12px; font-weight: 700; padding: 0 9px; }\n    button:disabled { opacity: .55; cursor: default; }\n    .stage { position: relative; min-height: ${viewportHeight}px; }\n    iframe { display: block; width: 100%; height: ${viewportHeight}px; border: 0; background: Canvas; }\n    .message { display: grid; place-items: center; min-height: ${viewportHeight}px; padding: 18px; color: color-mix(in srgb, CanvasText 62%, Canvas); font-size: 13px; line-height: 1.45; text-align: center; }\n    .fallback { display: grid; align-content: center; justify-items: center; gap: 12px; min-height: ${viewportHeight}px; padding: 24px; background: Canvas; color: CanvasText; text-align: center; }\n    .fallback-title { max-width: 440px; font-size: 14px; font-weight: 700; }\n    .fallback-copy { max-width: 520px; color: color-mix(in srgb, CanvasText 64%, Canvas); font-size: 13px; line-height: 1.45; }\n    .fallback-actions { display: flex; flex-wrap: wrap; align-items: center; justify-content: center; gap: 8px; }\n    .fallback-url { max-width: min(560px, 100%); overflow-wrap: anywhere; color: color-mix(in srgb, CanvasText 76%, Canvas); font-size: 12px; }\n  </style>\n</head>\n<body\n  data-app-title=\"${attr(title)}\"\n  data-iframe-title=\"${attr(iframeTitle)}\"\n  data-open-label=\"${attr(openLabel)}\"\n  data-start-tool=\"${attr(startToolName)}\"\n  data-embed-default=\"${embedByDefault ? \"1\" : \"0\"}\"\n>\n  <main class=\"shell\">\n    <div class=\"bar\">\n      <div class=\"title\" data-title-label>${attr(title)}</div>\n      <div class=\"actions\">\n        <button type=\"button\" data-display hidden disabled>Fullscreen</button>\n        <button type=\"button\" data-open disabled>${attr(openLabel)}</button>\n      </div>\n    </div>\n    <section class=\"stage\" data-stage>\n      <div class=\"message\">Preparing app</div>\n    </section>\n  </main>\n  <script type=\"module\">\n    const body = document.body;\n    const stage = document.querySelector(\"[data-stage]\");\n    const titleEl = document.querySelector(\"[data-title-label]\");\n    const openButton = document.querySelector(\"[data-open]\");\n    const displayButton = document.querySelector(\"[data-display]\");\n    const startTool = body.dataset.startTool || \"create_embed_session\";\n    const embedByDefault = body.dataset.embedDefault !== \"0\";\n    const chatBridgeParam = ${JSON.stringify(MCP_APP_CHAT_BRIDGE_QUERY_PARAM)};\n    const intrinsicHeight = ${height};\n    let app = null;\n    let openAiBridge = null;\n    let toolInput = {};\n    let openUrl = \"\";\n    let startedFor = \"\";\n    let appFrame = null;\n    let appFrameReady = false;\n    let appFrameReadyTimer = null;\n    let appFrameLoadTimer = null;\n    let lastFrameSrc = \"\";\n\n    function esc(value) {\n      return String(value ?? \"\")\n        .replace(/&/g, \"&amp;\")\n        .replace(/</g, \"&lt;\")\n        .replace(/>/g, \"&gt;\")\n        .replace(/\"/g, \"&quot;\");\n    }\n\n    function parseJson(value, fallback) {\n      if (value && typeof value === \"object\") return value;\n      if (typeof value !== \"string\" || !value.trim()) return fallback;\n      try { return JSON.parse(value); } catch { return fallback; }\n    }\n\n    function objectValue(value) {\n      return value && typeof value === \"object\" && !Array.isArray(value)\n        ? value\n        : {};\n    }\n\n    function parseToolResult(params) {\n      if (!params) return {};\n      if (params.result && typeof params.result === \"object\") {\n        return parseToolResult(params.result);\n      }\n      if (params.toolResult && typeof params.toolResult === \"object\") {\n        return parseToolResult(params.toolResult);\n      }\n      if (params.structuredContent && typeof params.structuredContent === \"object\") {\n        return params.structuredContent;\n      }\n      const parts = Array.isArray(params.content) ? params.content : [];\n      const textPart = parts.find((part) => part && part.type === \"text\" && typeof part.text === \"string\");\n      return parseJson(textPart ? textPart.text : \"\", {});\n    }\n\n    function openLinkFrom(params, data) {\n      const metaUrl = params && params._meta && params._meta[\"agent-native/openLink\"]\n        ? params._meta[\"agent-native/openLink\"].webUrl\n        : \"\";\n      return metaUrl || data.url || data.deepLink || data.openUrl || \"\";\n    }\n\n    function hostState() {\n      if (openAiBridge) {\n        return {\n          context: {\n            displayMode: openAiBridge.displayMode,\n            availableDisplayModes: typeof openAiBridge.requestDisplayMode === \"function\"\n              ? [\"inline\", \"fullscreen\", \"pip\"]\n              : [],\n            maxHeight: openAiBridge.maxHeight,\n            locale: openAiBridge.locale,\n            theme: openAiBridge.theme,\n            view: openAiBridge.view\n          },\n          capabilities: { openai: true },\n          version: openAiBridge.userAgent\n        };\n      }\n      return {\n        context: app && app.getHostContext ? app.getHostContext() : undefined,\n        capabilities: app && app.getHostCapabilities ? app.getHostCapabilities() : undefined,\n        version: app && app.getHostVersion ? app.getHostVersion() : undefined\n      };\n    }\n\n    function sendToAppFrame(message) {\n      if (!appFrame || !appFrame.contentWindow) return;\n      try { appFrame.contentWindow.postMessage(message, \"*\"); } catch {}\n    }\n\n    function sendHostContext() {\n      sendToAppFrame({ type: \"agentNative.mcpHostContext\", data: hostState() });\n    }\n\n    function sendFrameReadyMessages(frame) {\n      const originPayload = { type: \"agentNative.frameOrigin\", origin: window.location.origin };\n      [0, 200, 500, 1500].forEach((delay) => {\n        setTimeout(() => {\n          try { frame.contentWindow && frame.contentWindow.postMessage(originPayload, \"*\"); } catch {}\n          sendHostContext();\n        }, delay);\n      });\n    }\n\n    function withChatBridgeParam(value) {\n      if (typeof value !== \"string\" || !value) return value;\n      try {\n        const base = \"http://agent-native.invalid\";\n        const url = value.startsWith(\"/\") ? new URL(value, base) : new URL(value);\n        url.searchParams.set(chatBridgeParam, \"1\");\n        return value.startsWith(\"/\")\n          ? url.pathname + url.search + url.hash\n          : url.toString();\n      } catch {\n        return value;\n      }\n    }\n\n    function wantsEmbed() {\n      if (toolInput.embed === false || toolInput.embed === \"false\") return false;\n      if (embedByDefault) return true;\n      return toolInput.embed === true || toolInput.embed === \"true\";\n    }\n\n    function supportedDisplayMode(mode) {\n      if (openAiBridge && typeof openAiBridge.requestDisplayMode === \"function\") {\n        return mode === \"inline\" || mode === \"fullscreen\" || mode === \"pip\";\n      }\n      const modes = hostState().context && hostState().context.availableDisplayModes;\n      return Array.isArray(modes) && modes.includes(mode);\n    }\n\n    async function requestHostDisplayMode(mode) {\n      let result;\n      if (openAiBridge && typeof openAiBridge.requestDisplayMode === \"function\") {\n        result = await openAiBridge.requestDisplayMode({ mode });\n      } else {\n        if (!app || typeof app.requestDisplayMode !== \"function\") {\n          throw new Error(\"Display mode changes are not available in this host.\");\n        }\n        result = await app.requestDisplayMode({ mode });\n      }\n      updateDisplayButton();\n      sendHostContext();\n      return result;\n    }\n\n    function updateDisplayButton() {\n      const context = hostState().context || {};\n      const nextMode = context.displayMode === \"fullscreen\" ? \"inline\" : \"fullscreen\";\n      const supported = supportedDisplayMode(nextMode);\n      displayButton.hidden = !supported;\n      displayButton.disabled = !supported;\n      displayButton.textContent = nextMode === \"fullscreen\" ? \"Fullscreen\" : \"Inline\";\n      displayButton.onclick = () => {\n        if (!supportedDisplayMode(nextMode)) return;\n        void requestHostDisplayMode(nextMode).catch((err) => {\n          console.warn(\"[agent-native] MCP host rejected display mode request\", err);\n        });\n      };\n    }\n\n    function setMessage(message) {\n      stage.innerHTML = '<div class=\"message\">' + esc(message) + '</div>';\n    }\n\n    function clearFrameReadyTimer() {\n      if (!appFrameReadyTimer) return;\n      clearTimeout(appFrameReadyTimer);\n      appFrameReadyTimer = null;\n    }\n\n    function clearFrameLoadTimer() {\n      if (!appFrameLoadTimer) return;\n      clearTimeout(appFrameLoadTimer);\n      appFrameLoadTimer = null;\n    }\n\n    function startFrameReadyTimer(frame) {\n      clearFrameReadyTimer();\n      appFrameReadyTimer = setTimeout(() => {\n        if (!appFrameReady && appFrame === frame) renderFrameFallback();\n      }, 7000);\n    }\n\n    function renderFrameFallback() {\n      clearFrameReadyTimer();\n      clearFrameLoadTimer();\n      appFrame = null;\n      stage.innerHTML =\n        '<div class=\"fallback\">' +\n          '<div class=\"fallback-title\">Open this app in its own tab</div>' +\n          '<div class=\"fallback-copy\">This chat host did not allow the embedded app frame to load inline. You can still open the same app route through the host or use the URL below.</div>' +\n          '<div class=\"fallback-actions\">' +\n            '<button type=\"button\" data-fallback-open>Open app</button>' +\n            '<button type=\"button\" data-fallback-retry>Try inline again</button>' +\n          '</div>' +\n          (openUrl ? '<a class=\"fallback-url\" href=\"' + esc(openUrl) + '\" target=\"_blank\" rel=\"noreferrer\">' + esc(openUrl) + '</a>' : '') +\n        '</div>';\n      const fallbackOpen = stage.querySelector(\"[data-fallback-open]\");\n      const fallbackRetry = stage.querySelector(\"[data-fallback-retry]\");\n      if (fallbackOpen) {\n        fallbackOpen.disabled = !openUrl;\n        fallbackOpen.onclick = () => {\n          if (openUrl) void openFallbackExternal();\n        };\n      }\n      if (fallbackRetry) {\n        fallbackRetry.disabled = !lastFrameSrc;\n        fallbackRetry.onclick = () => {\n          if (lastFrameSrc) renderFrame(lastFrameSrc);\n        };\n      }\n    }\n\n    async function openFallbackExternal() {\n      let url = openUrl;\n      try {\n        const embedUrl = withChatBridgeParam(openUrl);\n        const result = await callEmbedSessionTool({\n          url: embedUrl,\n          chrome: typeof toolInput.chrome === \"string\" ? toolInput.chrome : \"full\"\n        });\n        const data = parseToolResult(result);\n        if (typeof data.startUrl === \"string\" && data.startUrl) {\n          url = data.startUrl;\n        }\n      } catch (err) {\n        console.warn(\"[agent-native] MCP fallback could not mint a fresh app session\", err);\n      }\n      await openHostLink({ url });\n    }\n\n    function renderFrame(src) {\n      clearFrameReadyTimer();\n      clearFrameLoadTimer();\n      const frame = document.createElement(\"iframe\");\n      frame.title = body.dataset.iframeTitle || \"Agent Native app\";\n      frame.src = src;\n      frame.allow = \"clipboard-read; clipboard-write\";\n      appFrame = frame;\n      appFrameReady = false;\n      lastFrameSrc = src;\n      frame.addEventListener(\"load\", () => {\n        if (appFrame !== frame) return;\n        clearFrameLoadTimer();\n        sendFrameReadyMessages(frame);\n        startFrameReadyTimer(frame);\n      });\n      stage.replaceChildren(frame);\n      notifyHostHeight();\n      appFrameLoadTimer = setTimeout(() => {\n        if (!appFrameReady && appFrame === frame) renderFrameFallback();\n      }, 30000);\n    }\n\n    async function updateHostModelContext(data) {\n      const params = {};\n      if (Array.isArray(data && data.content)) params.content = data.content;\n      if (data && data.structuredContent && typeof data.structuredContent === \"object\") {\n        params.structuredContent = data.structuredContent;\n      }\n      if (openAiBridge && typeof openAiBridge.setWidgetState === \"function\") {\n        openAiBridge.setWidgetState({\n          ...objectValue(openAiBridge.widgetState),\n          agentNativeModelContext: params\n        });\n        return { ok: true };\n      }\n      if (!app || typeof app.updateModelContext !== \"function\") return { ok: false };\n      await app.updateModelContext(params);\n      return { ok: true };\n    }\n\n    async function openHostLink(data) {\n      const url = typeof (data && data.url) === \"string\" ? data.url : \"\";\n      if (!url) return { isError: true };\n      if (openAiBridge && typeof openAiBridge.openExternal === \"function\") {\n        return await openAiBridge.openExternal({ href: url, redirectUrl: false });\n      }\n      if (app && typeof app.openLink === \"function\") {\n        return await app.openLink({ url });\n      }\n      window.open(url, \"_blank\", \"noopener,noreferrer\");\n      return { ok: true };\n    }\n\n    function notifyHostHeight() {\n      if (!openAiBridge || typeof openAiBridge.notifyIntrinsicHeight !== \"function\") {\n        return;\n      }\n      try {\n        openAiBridge.notifyIntrinsicHeight({ height: intrinsicHeight });\n      } catch (err) {\n        console.warn(\"[agent-native] ChatGPT rejected intrinsic height update\", err);\n      }\n    }\n\n    function respondToAppFrame(requestId, work) {\n      if (!requestId) return;\n      Promise.resolve(work)\n        .then((result) => {\n          sendToAppFrame({\n            type: \"agentNative.mcpHost.response\",\n            data: { requestId, ok: true, result }\n          });\n        })\n        .catch((err) => {\n          sendToAppFrame({\n            type: \"agentNative.mcpHost.response\",\n            data: {\n              requestId,\n              ok: false,\n              error: err && err.message ? err.message : String(err)\n            }\n          });\n        });\n    }\n\n    async function sendHostChat(chat) {\n      if (!chat || chat.submit === false) return;\n      const message = typeof chat.message === \"string\" ? chat.message : \"\";\n      if (!message.trim()) return;\n      const context = typeof chat.context === \"string\" ? chat.context : \"\";\n      if (context.trim()) {\n        try {\n          if (openAiBridge && typeof openAiBridge.setWidgetState === \"function\") {\n            openAiBridge.setWidgetState({\n              ...objectValue(openAiBridge.widgetState),\n              agentNativeChatContext: context\n            });\n          } else if (app && typeof app.updateModelContext === \"function\") {\n            await app.updateModelContext({\n              content: [{ type: \"text\", text: context }]\n            });\n          }\n        } catch (err) {\n          console.warn(\"[agent-native] MCP host rejected model context update\", err);\n        }\n      }\n      try {\n        if (openAiBridge && typeof openAiBridge.sendFollowUpMessage === \"function\") {\n          await openAiBridge.sendFollowUpMessage({\n            prompt: context.trim() ? context.trim() + \"\\\\n\\\\n\" + message : message,\n            scrollToBottom: true\n          });\n          return;\n        }\n        if (!app || typeof app.sendMessage !== \"function\") return;\n        const result = await app.sendMessage({\n          role: \"user\",\n          content: [{ type: \"text\", text: message }]\n        });\n        if (result && result.isError) {\n          console.warn(\"[agent-native] MCP host rejected chat message\", result);\n        }\n      } catch (err) {\n        console.warn(\"[agent-native] MCP host chat bridge failed\", err);\n      }\n    }\n\n    window.addEventListener(\"message\", (event) => {\n      if (!appFrame || event.source !== appFrame.contentWindow) return;\n      if (!event.data) return;\n      const data = event.data.data || {};\n      if (event.data.type === \"agentNative.embeddedAppReady\") {\n        appFrameReady = true;\n        clearFrameLoadTimer();\n        clearFrameReadyTimer();\n        return;\n      }\n      if (event.data.type === \"agentNative.submitChat\") {\n        void sendHostChat(data);\n        return;\n      }\n      if (event.data.type === \"agentNative.mcpHost.updateModelContext\") {\n        respondToAppFrame(data.requestId, updateHostModelContext(data));\n        return;\n      }\n      if (event.data.type === \"agentNative.mcpHost.openLink\") {\n        respondToAppFrame(data.requestId, openHostLink(data));\n        return;\n      }\n      if (event.data.type === \"agentNative.mcpHost.requestDisplayMode\") {\n        respondToAppFrame(data.requestId, requestHostDisplayMode(data.mode));\n      }\n    });\n\n    async function launchEmbed() {\n      if (!openUrl) {\n        setMessage(\"Open link was not available.\");\n        return;\n      }\n      if (!wantsEmbed()) {\n        setMessage(\"Ready to open.\");\n        return;\n      }\n      if (startedFor === openUrl) return;\n      startedFor = openUrl;\n      setMessage(\"Loading app\");\n      try {\n        const embedUrl = withChatBridgeParam(openUrl);\n        const result = await callEmbedSessionTool({\n          url: embedUrl,\n          chrome: typeof toolInput.chrome === \"string\" ? toolInput.chrome : \"full\"\n        });\n        const data = parseToolResult(result);\n        if (!data.startUrl) {\n          startedFor = \"\";\n          setMessage(data.error || \"This app can be opened, but not embedded from this MCP server.\");\n          return;\n        }\n        renderFrame(data.startUrl);\n      } catch (err) {\n        startedFor = \"\";\n        setMessage(err && err.message ? err.message : \"Could not launch embedded app.\");\n      }\n    }\n\n    async function callEmbedSessionTool(args) {\n      if (openAiBridge && typeof openAiBridge.callTool === \"function\") {\n        return await openAiBridge.callTool(startTool, args);\n      }\n      if (!app || typeof app.callServerTool !== \"function\") {\n        throw new Error(\"Host tool calls are not available.\");\n      }\n      return await app.callServerTool({ name: startTool, arguments: args });\n    }\n\n    function updateHostOpenInAppUrl() {\n      if (!openAiBridge || !openUrl || typeof openAiBridge.setOpenInAppUrl !== \"function\") {\n        return;\n      }\n      try {\n        openAiBridge.setOpenInAppUrl({ href: openUrl });\n      } catch (err) {\n        console.warn(\"[agent-native] ChatGPT rejected open-in-app URL\", err);\n      }\n    }\n\n    function updateOpenButton() {\n      openButton.disabled = !openUrl;\n      openButton.onclick = () => {\n        if (openUrl) void openHostLink({ url: openUrl });\n      };\n      updateHostOpenInAppUrl();\n    }\n\n    function updateTitle(data) {\n      const label = data.label || data.app || data.view || body.dataset.appTitle || \"App\";\n      titleEl.textContent = String(label);\n    }\n\n    function readOpenAiBridge() {\n      return window.openai && typeof window.openai === \"object\"\n        ? window.openai\n        : null;\n    }\n\n    function openAiToolResultParams(bridge) {\n      const params = {};\n      if (bridge && bridge.toolOutput !== undefined) {\n        if (bridge.toolOutput && typeof bridge.toolOutput === \"object\") {\n          params.structuredContent = bridge.toolOutput;\n        } else {\n          params.content = [{ type: \"text\", text: String(bridge.toolOutput) }];\n        }\n      }\n      if (bridge && bridge.toolResponseMetadata && typeof bridge.toolResponseMetadata === \"object\") {\n        params._meta = bridge.toolResponseMetadata;\n      }\n      return params;\n    }\n\n    function syncOpenAiBridge(bridge) {\n      if (!bridge) return false;\n      openAiBridge = bridge;\n      toolInput = objectValue(bridge.toolInput);\n      const params = openAiToolResultParams(bridge);\n      const data = parseToolResult(params);\n      openUrl = openLinkFrom(params, data);\n      updateTitle(data);\n      updateOpenButton();\n      updateDisplayButton();\n      notifyHostHeight();\n      sendHostContext();\n      if (openUrl) {\n        void launchEmbed();\n      } else if (!appFrame) {\n        setMessage(\"Waiting for app result\");\n      }\n      return true;\n    }\n\n    function waitForOpenAiBridge() {\n      const existing = readOpenAiBridge();\n      if (existing) return Promise.resolve(existing);\n      return new Promise((resolve) => {\n        let settled = false;\n        const finish = (bridge) => {\n          if (settled) return;\n          settled = true;\n          window.removeEventListener(\"openai:set_globals\", onGlobals);\n          clearTimeout(timer);\n          resolve(bridge || readOpenAiBridge());\n        };\n        const onGlobals = () => finish(readOpenAiBridge());\n        const timer = setTimeout(() => finish(null), 200);\n        window.addEventListener(\"openai:set_globals\", onGlobals, { passive: true });\n      });\n    }\n\n    window.addEventListener(\"openai:set_globals\", () => {\n      const bridge = readOpenAiBridge();\n      if (bridge && (!appFrame || openAiBridge)) syncOpenAiBridge(bridge);\n    }, { passive: true });\n\n    async function startMcpAppsBridge() {\n      const { App } = await import(\"${MCP_APP_IMPORT}\");\n      app = new App({ name: \"Agent Native Embed\", version: \"1.0.0\" }, {});\n      app.ontoolinput = (params) => {\n        toolInput = params.arguments || {};\n      };\n      app.ontoolresult = (params) => {\n        const data = parseToolResult(params);\n        openUrl = openLinkFrom(params, data);\n        updateTitle(data);\n        updateOpenButton();\n        void launchEmbed();\n      };\n      app.onhostcontextchanged = () => {\n        updateDisplayButton();\n        sendHostContext();\n      };\n      await app.connect();\n      updateDisplayButton();\n      sendHostContext();\n    }\n\n    const initialOpenAiBridge = await waitForOpenAiBridge();\n    if (!syncOpenAiBridge(initialOpenAiBridge)) {\n      await startMcpAppsBridge();\n    }\n  </script>\n</body>\n</html>`,\n    csp: {\n      connectDomains: [\"https://esm.sh\"],\n      resourceDomains: [\n        \"https://esm.sh\",\n        MCP_APP_REQUEST_ORIGIN_CSP_SOURCE,\n        ...(options.frameDomains ?? []),\n      ],\n      frameDomains: [\n        MCP_APP_REQUEST_ORIGIN_CSP_SOURCE,\n        ...(options.frameDomains ?? []),\n      ],\n    },\n    prefersBorder: false,\n  };\n}\n"]}
+{"version":3,"file":"embed-app.js","sourceRoot":"","sources":["../../src/mcp/embed-app.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAE1E,MAAM,cAAc,GAClB,mEAAmE,CAAC;AAEtE,MAAM,CAAC,MAAM,iCAAiC,GAAG,gBAAgB,CAAC;AAClE,MAAM,6BAA6B,GAAG,EAAE,CAAC;AACzC,MAAM,CAAC,MAAM,+BAA+B,GAAG,GAAG,CAAC;AACnD,MAAM,CAAC,MAAM,4BAA4B,GACvC,+BAA+B,GAAG,6BAA6B,CAAC;AAalE,SAAS,IAAI,CAAC,KAAyB;IACrC,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,UAA2B,EAAE;IAE7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC;IAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,aAAa,CAAC;IACrD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,sBAAsB,CAAC;IACtE,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,KAAK,KAAK,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CACrB,GAAG,EACH,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,IAAI,4BAA4B,CAAC,CAC9D,CAAC;IACF,MAAM,cAAc,GAAG,MAAM,GAAG,6BAA6B,CAAC;IAE9D,OAAO;QACL,KAAK;QACL,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,IAAI,EAAE,GAAG,EAAE,CAAC;;;;;;;;;oDASoC,MAAM;;;;;;+CAMX,cAAc;oDACT,cAAc;iEACD,cAAc;sGACuB,cAAc;;;;;;;;oBAQhG,IAAI,CAAC,KAAK,CAAC;uBACR,IAAI,CAAC,WAAW,CAAC;qBACnB,IAAI,CAAC,SAAS,CAAC;qBACf,IAAI,CAAC,aAAa,CAAC;wBAChB,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;;;;4CAIN,IAAI,CAAC,KAAK,CAAC;;;mDAGJ,IAAI,CAAC,SAAS,CAAC;;;;;;;;;;;;;;;8BAepC,IAAI,CAAC,SAAS,CAAC,+BAA+B,CAAC;8BAC/C,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sCA8hBE,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;QA2B5C;QACJ,GAAG,EAAE;YACH,cAAc,EAAE,CAAC,gBAAgB,CAAC;YAClC,eAAe,EAAE;gBACf,gBAAgB;gBAChB,iCAAiC;gBACjC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;aAChC;YACD,YAAY,EAAE;gBACZ,iCAAiC;gBACjC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;aAChC;SACF;QACD,aAAa,EAAE,KAAK;KACrB,CAAC;AACJ,CAAC","sourcesContent":["import type { ActionMcpAppResourceConfig } from \"../action.js\";\nimport { MCP_APP_CHAT_BRIDGE_QUERY_PARAM } from \"../shared/embed-auth.js\";\n\nconst MCP_APP_IMPORT =\n  \"https://esm.sh/@modelcontextprotocol/ext-apps@1.7.2/app-with-deps\";\n\nexport const MCP_APP_REQUEST_ORIGIN_CSP_SOURCE = \"$requestOrigin\";\nconst MCP_APP_WRAPPER_CHROME_HEIGHT = 44;\nexport const DEFAULT_MCP_APP_VIEWPORT_HEIGHT = 720;\nexport const DEFAULT_MCP_APP_SHELL_HEIGHT =\n  DEFAULT_MCP_APP_VIEWPORT_HEIGHT + MCP_APP_WRAPPER_CHROME_HEIGHT;\n\nexport interface EmbedAppOptions {\n  title?: string;\n  description?: string;\n  iframeTitle?: string;\n  openLabel?: string;\n  embedByDefault?: boolean;\n  startToolName?: string;\n  frameDomains?: string[];\n  height?: number;\n}\n\nfunction attr(value: string | undefined): string {\n  return String(value ?? \"\")\n    .replace(/&/g, \"&amp;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\");\n}\n\nexport function embedApp(\n  options: EmbedAppOptions = {},\n): ActionMcpAppResourceConfig {\n  const title = options.title ?? \"Open app\";\n  const iframeTitle = options.iframeTitle ?? \"Agent Native app\";\n  const openLabel = options.openLabel ?? \"Open in app\";\n  const startToolName = options.startToolName ?? \"create_embed_session\";\n  const embedByDefault = options.embedByDefault !== false;\n  const height = Math.max(\n    320,\n    Math.min(900, options.height ?? DEFAULT_MCP_APP_SHELL_HEIGHT),\n  );\n  const viewportHeight = height - MCP_APP_WRAPPER_CHROME_HEIGHT;\n\n  return {\n    title,\n    ...(options.description ? { description: options.description } : {}),\n    html: () => `<!doctype html>\n<html lang=\"en\">\n<head>\n  <meta charset=\"utf-8\">\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n  <style>\n    :root { color-scheme: light dark; font-family: ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif; background: Canvas; color: CanvasText; }\n    * { box-sizing: border-box; }\n    body { margin: 0; }\n    .shell { display: grid; gap: 8px; min-height: ${height}px; padding: 0; }\n    .bar { display: flex; align-items: center; justify-content: space-between; gap: 8px; min-height: 36px; padding: 6px 8px; border-bottom: 1px solid color-mix(in srgb, CanvasText 12%, Canvas); }\n    .title { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; font-size: 12px; font-weight: 700; color: color-mix(in srgb, CanvasText 72%, Canvas); }\n    .actions { display: flex; align-items: center; gap: 6px; }\n    button { min-height: 28px; border: 1px solid color-mix(in srgb, CanvasText 14%, Canvas); border-radius: 7px; background: Canvas; color: CanvasText; cursor: pointer; font: inherit; font-size: 12px; font-weight: 700; padding: 0 9px; }\n    button:disabled { opacity: .55; cursor: default; }\n    .stage { position: relative; min-height: ${viewportHeight}px; }\n    iframe { display: block; width: 100%; height: ${viewportHeight}px; border: 0; background: Canvas; }\n    .message { display: grid; place-items: center; min-height: ${viewportHeight}px; padding: 18px; color: color-mix(in srgb, CanvasText 62%, Canvas); font-size: 13px; line-height: 1.45; text-align: center; }\n    .fallback { display: grid; align-content: center; justify-items: center; gap: 12px; min-height: ${viewportHeight}px; padding: 24px; background: Canvas; color: CanvasText; text-align: center; }\n    .fallback-title { max-width: 440px; font-size: 14px; font-weight: 700; }\n    .fallback-copy { max-width: 520px; color: color-mix(in srgb, CanvasText 64%, Canvas); font-size: 13px; line-height: 1.45; }\n    .fallback-actions { display: flex; flex-wrap: wrap; align-items: center; justify-content: center; gap: 8px; }\n    .fallback-url { max-width: min(560px, 100%); overflow-wrap: anywhere; color: color-mix(in srgb, CanvasText 76%, Canvas); font-size: 12px; }\n  </style>\n</head>\n<body\n  data-app-title=\"${attr(title)}\"\n  data-iframe-title=\"${attr(iframeTitle)}\"\n  data-open-label=\"${attr(openLabel)}\"\n  data-start-tool=\"${attr(startToolName)}\"\n  data-embed-default=\"${embedByDefault ? \"1\" : \"0\"}\"\n>\n  <main class=\"shell\">\n    <div class=\"bar\">\n      <div class=\"title\" data-title-label>${attr(title)}</div>\n      <div class=\"actions\">\n        <button type=\"button\" data-display hidden disabled>Fullscreen</button>\n        <button type=\"button\" data-open disabled>${attr(openLabel)}</button>\n      </div>\n    </div>\n    <section class=\"stage\" data-stage>\n      <div class=\"message\">Preparing app</div>\n    </section>\n  </main>\n  <script type=\"module\">\n    const body = document.body;\n    const stage = document.querySelector(\"[data-stage]\");\n    const titleEl = document.querySelector(\"[data-title-label]\");\n    const openButton = document.querySelector(\"[data-open]\");\n    const displayButton = document.querySelector(\"[data-display]\");\n    const startTool = body.dataset.startTool || \"create_embed_session\";\n    const embedByDefault = body.dataset.embedDefault !== \"0\";\n    const chatBridgeParam = ${JSON.stringify(MCP_APP_CHAT_BRIDGE_QUERY_PARAM)};\n    const intrinsicHeight = ${height};\n    let app = null;\n    let openAiBridge = null;\n    let toolInput = {};\n    let openUrl = \"\";\n    let startedFor = \"\";\n    let appFrame = null;\n    let appFrameReady = false;\n    let appFrameReadyTimer = null;\n    let appFrameLoadTimer = null;\n    let lastFrameSrc = \"\";\n\n    function esc(value) {\n      return String(value ?? \"\")\n        .replace(/&/g, \"&amp;\")\n        .replace(/</g, \"&lt;\")\n        .replace(/>/g, \"&gt;\")\n        .replace(/\"/g, \"&quot;\");\n    }\n\n    function parseJson(value, fallback) {\n      if (value && typeof value === \"object\") return value;\n      if (typeof value !== \"string\" || !value.trim()) return fallback;\n      try { return JSON.parse(value); } catch { return fallback; }\n    }\n\n    function objectValue(value) {\n      return value && typeof value === \"object\" && !Array.isArray(value)\n        ? value\n        : {};\n    }\n\n    function parseToolResult(params) {\n      if (!params) return {};\n      if (params.result && typeof params.result === \"object\") {\n        return parseToolResult(params.result);\n      }\n      if (params.toolResult && typeof params.toolResult === \"object\") {\n        return parseToolResult(params.toolResult);\n      }\n      if (params.structuredContent && typeof params.structuredContent === \"object\") {\n        return params.structuredContent;\n      }\n      const parts = Array.isArray(params.content) ? params.content : [];\n      const textPart = parts.find((part) => part && part.type === \"text\" && typeof part.text === \"string\");\n      return parseJson(textPart ? textPart.text : \"\", {});\n    }\n\n    function openLinkFrom(params, data) {\n      const openLink = params && params._meta && params._meta[\"agent-native/openLink\"];\n      const metaUrl = openLink && typeof openLink === \"object\" && typeof openLink.webUrl === \"string\"\n        ? openLink.webUrl\n        : \"\";\n      return metaUrl || data.url || data.deepLink || data.openUrl || \"\";\n    }\n\n    function hostState() {\n      if (openAiBridge) {\n        return {\n          context: {\n            displayMode: openAiBridge.displayMode,\n            availableDisplayModes: typeof openAiBridge.requestDisplayMode === \"function\"\n              ? [\"inline\", \"fullscreen\", \"pip\"]\n              : [],\n            maxHeight: openAiBridge.maxHeight,\n            locale: openAiBridge.locale,\n            theme: openAiBridge.theme,\n            view: openAiBridge.view\n          },\n          capabilities: { openai: true },\n          version: openAiBridge.userAgent\n        };\n      }\n      return {\n        context: app && app.getHostContext ? app.getHostContext() : undefined,\n        capabilities: app && app.getHostCapabilities ? app.getHostCapabilities() : undefined,\n        version: app && app.getHostVersion ? app.getHostVersion() : undefined\n      };\n    }\n\n    function sendToAppFrame(message) {\n      if (!appFrame || !appFrame.contentWindow) return;\n      try { appFrame.contentWindow.postMessage(message, \"*\"); } catch {}\n    }\n\n    function sendHostContext() {\n      sendToAppFrame({ type: \"agentNative.mcpHostContext\", data: hostState() });\n    }\n\n    function sendFrameReadyMessages(frame) {\n      const originPayload = { type: \"agentNative.frameOrigin\", origin: window.location.origin };\n      [0, 200, 500, 1500].forEach((delay) => {\n        setTimeout(() => {\n          try { frame.contentWindow && frame.contentWindow.postMessage(originPayload, \"*\"); } catch {}\n          sendHostContext();\n        }, delay);\n      });\n    }\n\n    function withChatBridgeParam(value) {\n      if (typeof value !== \"string\" || !value) return value;\n      try {\n        const base = \"http://agent-native.invalid\";\n        const url = value.startsWith(\"/\") ? new URL(value, base) : new URL(value);\n        url.searchParams.set(chatBridgeParam, \"1\");\n        return value.startsWith(\"/\")\n          ? url.pathname + url.search + url.hash\n          : url.toString();\n      } catch {\n        return value;\n      }\n    }\n\n    function wantsEmbed() {\n      if (toolInput.embed === false || toolInput.embed === \"false\") return false;\n      if (embedByDefault) return true;\n      return toolInput.embed === true || toolInput.embed === \"true\";\n    }\n\n    function supportedDisplayMode(mode) {\n      if (openAiBridge && typeof openAiBridge.requestDisplayMode === \"function\") {\n        return mode === \"inline\" || mode === \"fullscreen\" || mode === \"pip\";\n      }\n      const modes = hostState().context && hostState().context.availableDisplayModes;\n      return Array.isArray(modes) && modes.includes(mode);\n    }\n\n    async function requestHostDisplayMode(mode) {\n      let result;\n      if (openAiBridge && typeof openAiBridge.requestDisplayMode === \"function\") {\n        result = await openAiBridge.requestDisplayMode({ mode });\n      } else {\n        if (!app || typeof app.requestDisplayMode !== \"function\") {\n          throw new Error(\"Display mode changes are not available in this host.\");\n        }\n        result = await app.requestDisplayMode({ mode });\n      }\n      updateDisplayButton();\n      sendHostContext();\n      return result;\n    }\n\n    function updateDisplayButton() {\n      const context = hostState().context || {};\n      const nextMode = context.displayMode === \"fullscreen\" ? \"inline\" : \"fullscreen\";\n      const supported = supportedDisplayMode(nextMode);\n      displayButton.hidden = !supported;\n      displayButton.disabled = !supported;\n      displayButton.textContent = nextMode === \"fullscreen\" ? \"Fullscreen\" : \"Inline\";\n      displayButton.onclick = () => {\n        if (!supportedDisplayMode(nextMode)) return;\n        void requestHostDisplayMode(nextMode).catch((err) => {\n          console.warn(\"[agent-native] MCP host rejected display mode request\", err);\n        });\n      };\n    }\n\n    function setMessage(message) {\n      stage.innerHTML = '<div class=\"message\">' + esc(message) + '</div>';\n    }\n\n    function clearFrameReadyTimer() {\n      if (!appFrameReadyTimer) return;\n      clearTimeout(appFrameReadyTimer);\n      appFrameReadyTimer = null;\n    }\n\n    function clearFrameLoadTimer() {\n      if (!appFrameLoadTimer) return;\n      clearTimeout(appFrameLoadTimer);\n      appFrameLoadTimer = null;\n    }\n\n    function startFrameReadyTimer(frame) {\n      clearFrameReadyTimer();\n      appFrameReadyTimer = setTimeout(() => {\n        if (!appFrameReady && appFrame === frame) renderFrameFallback();\n      }, 7000);\n    }\n\n    function renderFrameFallback() {\n      clearFrameReadyTimer();\n      clearFrameLoadTimer();\n      appFrame = null;\n      stage.innerHTML =\n        '<div class=\"fallback\">' +\n          '<div class=\"fallback-title\">Open this app in its own tab</div>' +\n          '<div class=\"fallback-copy\">This chat host did not allow the embedded app frame to load inline. You can still open the same app route through the host or use the URL below.</div>' +\n          '<div class=\"fallback-actions\">' +\n            '<button type=\"button\" data-fallback-open>Open app</button>' +\n            '<button type=\"button\" data-fallback-retry>Try inline again</button>' +\n          '</div>' +\n          (openUrl ? '<a class=\"fallback-url\" href=\"' + esc(openUrl) + '\" target=\"_blank\" rel=\"noreferrer\">' + esc(openUrl) + '</a>' : '') +\n        '</div>';\n      const fallbackOpen = stage.querySelector(\"[data-fallback-open]\");\n      const fallbackRetry = stage.querySelector(\"[data-fallback-retry]\");\n      if (fallbackOpen) {\n        fallbackOpen.disabled = !openUrl;\n        fallbackOpen.onclick = () => {\n          if (openUrl) void openFallbackExternal();\n        };\n      }\n      if (fallbackRetry) {\n        fallbackRetry.disabled = !lastFrameSrc;\n        fallbackRetry.onclick = () => {\n          if (lastFrameSrc) renderFrame(lastFrameSrc);\n        };\n      }\n    }\n\n    async function openFallbackExternal() {\n      let url = withChatBridgeParam(openUrl);\n      try {\n        const result = await callEmbedSessionTool({\n          url,\n          chrome: typeof toolInput.chrome === \"string\" ? toolInput.chrome : \"full\"\n        });\n        const data = parseToolResult(result);\n        if (typeof data.startUrl === \"string\" && data.startUrl) {\n          url = data.startUrl;\n        }\n      } catch (err) {\n        console.warn(\"[agent-native] MCP fallback could not mint a fresh app session\", err);\n      }\n      await openHostLink({ url });\n    }\n\n    function renderFrame(src) {\n      clearFrameReadyTimer();\n      clearFrameLoadTimer();\n      const frame = document.createElement(\"iframe\");\n      frame.title = body.dataset.iframeTitle || \"Agent Native app\";\n      frame.src = src;\n      frame.allow = \"clipboard-read; clipboard-write\";\n      appFrame = frame;\n      appFrameReady = false;\n      lastFrameSrc = src;\n      frame.addEventListener(\"load\", () => {\n        if (appFrame !== frame) return;\n        clearFrameLoadTimer();\n        sendFrameReadyMessages(frame);\n        startFrameReadyTimer(frame);\n      });\n      stage.replaceChildren(frame);\n      notifyHostHeight();\n      appFrameLoadTimer = setTimeout(() => {\n        if (!appFrameReady && appFrame === frame) renderFrameFallback();\n      }, 30000);\n    }\n\n    function shouldSelfNavigateToApp() {\n      const mode = typeof toolInput.embedMode === \"string\"\n        ? toolInput.embedMode\n        : typeof toolInput.renderMode === \"string\"\n          ? toolInput.renderMode\n          : \"\";\n      if (mode === \"iframe\" || mode === \"nested\") return false;\n      if (toolInput.nested === true || toolInput.frame === \"iframe\") return false;\n      return true;\n    }\n\n    function navigateToAppFrame(src) {\n      clearFrameReadyTimer();\n      clearFrameLoadTimer();\n      appFrame = null;\n      lastFrameSrc = src;\n      setMessage(\"Opening app\");\n      try {\n        window.location.replace(src);\n      } catch (err) {\n        console.warn(\"[agent-native] MCP app self-navigation failed\", err);\n        renderFrameFallback();\n      }\n    }\n\n    async function updateHostModelContext(data) {\n      const params = {};\n      if (Array.isArray(data && data.content)) params.content = data.content;\n      if (data && data.structuredContent && typeof data.structuredContent === \"object\") {\n        params.structuredContent = data.structuredContent;\n      }\n      if (openAiBridge && typeof openAiBridge.setWidgetState === \"function\") {\n        openAiBridge.setWidgetState({\n          ...objectValue(openAiBridge.widgetState),\n          agentNativeModelContext: params\n        });\n        return { ok: true };\n      }\n      if (!app || typeof app.updateModelContext !== \"function\") return { ok: false };\n      await app.updateModelContext(params);\n      return { ok: true };\n    }\n\n    async function openHostLink(data) {\n      const url = typeof (data && data.url) === \"string\" ? data.url : \"\";\n      if (!url) return { isError: true };\n      if (openAiBridge && typeof openAiBridge.openExternal === \"function\") {\n        return await openAiBridge.openExternal({ href: url, redirectUrl: false });\n      }\n      if (app && typeof app.openLink === \"function\") {\n        return await app.openLink({ url });\n      }\n      window.open(url, \"_blank\", \"noopener,noreferrer\");\n      return { ok: true };\n    }\n\n    function notifyHostHeight() {\n      if (!openAiBridge || typeof openAiBridge.notifyIntrinsicHeight !== \"function\") {\n        return;\n      }\n      try {\n        openAiBridge.notifyIntrinsicHeight({ height: intrinsicHeight });\n      } catch (err) {\n        console.warn(\"[agent-native] ChatGPT rejected intrinsic height update\", err);\n      }\n    }\n\n    function respondToAppFrame(requestId, work) {\n      if (!requestId) return;\n      Promise.resolve(work)\n        .then((result) => {\n          sendToAppFrame({\n            type: \"agentNative.mcpHost.response\",\n            data: { requestId, ok: true, result }\n          });\n        })\n        .catch((err) => {\n          sendToAppFrame({\n            type: \"agentNative.mcpHost.response\",\n            data: {\n              requestId,\n              ok: false,\n              error: err && err.message ? err.message : String(err)\n            }\n          });\n        });\n    }\n\n    async function sendHostChat(chat) {\n      if (!chat || chat.submit === false) return;\n      const message = typeof chat.message === \"string\" ? chat.message : \"\";\n      if (!message.trim()) return;\n      const context = typeof chat.context === \"string\" ? chat.context : \"\";\n      if (context.trim()) {\n        try {\n          if (openAiBridge && typeof openAiBridge.setWidgetState === \"function\") {\n            openAiBridge.setWidgetState({\n              ...objectValue(openAiBridge.widgetState),\n              agentNativeChatContext: context\n            });\n          } else if (app && typeof app.updateModelContext === \"function\") {\n            await app.updateModelContext({\n              content: [{ type: \"text\", text: context }]\n            });\n          }\n        } catch (err) {\n          console.warn(\"[agent-native] MCP host rejected model context update\", err);\n        }\n      }\n      try {\n        if (openAiBridge && typeof openAiBridge.sendFollowUpMessage === \"function\") {\n          await openAiBridge.sendFollowUpMessage({\n            prompt: context.trim() ? context.trim() + \"\\\\n\\\\n\" + message : message,\n            scrollToBottom: true\n          });\n          return;\n        }\n        if (!app || typeof app.sendMessage !== \"function\") return;\n        const result = await app.sendMessage({\n          role: \"user\",\n          content: [{ type: \"text\", text: message }]\n        });\n        if (result && result.isError) {\n          console.warn(\"[agent-native] MCP host rejected chat message\", result);\n        }\n      } catch (err) {\n        console.warn(\"[agent-native] MCP host chat bridge failed\", err);\n      }\n    }\n\n    window.addEventListener(\"message\", (event) => {\n      if (!appFrame || event.source !== appFrame.contentWindow) return;\n      if (!event.data) return;\n      const data = event.data.data || {};\n      if (event.data.type === \"agentNative.embeddedAppReady\") {\n        appFrameReady = true;\n        clearFrameLoadTimer();\n        clearFrameReadyTimer();\n        return;\n      }\n      if (event.data.type === \"agentNative.submitChat\") {\n        void sendHostChat(data);\n        return;\n      }\n      if (event.data.type === \"agentNative.mcpHost.updateModelContext\") {\n        respondToAppFrame(data.requestId, updateHostModelContext(data));\n        return;\n      }\n      if (event.data.type === \"agentNative.mcpHost.openLink\") {\n        respondToAppFrame(data.requestId, openHostLink(data));\n        return;\n      }\n      if (event.data.type === \"agentNative.mcpHost.requestDisplayMode\") {\n        respondToAppFrame(data.requestId, requestHostDisplayMode(data.mode));\n      }\n    });\n\n    async function launchEmbed() {\n      if (!openUrl) {\n        setMessage(\"Open link was not available.\");\n        return;\n      }\n      if (!wantsEmbed()) {\n        setMessage(\"Ready to open.\");\n        return;\n      }\n      if (startedFor === openUrl) return;\n      startedFor = openUrl;\n      setMessage(\"Loading app\");\n      try {\n        const selfNavigate = shouldSelfNavigateToApp();\n        const embedUrl = withChatBridgeParam(openUrl);\n        const result = await callEmbedSessionTool({\n          url: embedUrl,\n          chrome: typeof toolInput.chrome === \"string\" ? toolInput.chrome : \"full\"\n        });\n        const data = parseToolResult(result);\n        if (typeof data.startUrl !== \"string\" || !data.startUrl) {\n          startedFor = \"\";\n          setMessage(data.error || \"This app can be opened, but not embedded from this MCP server.\");\n          return;\n        }\n        if (selfNavigate) {\n          navigateToAppFrame(data.startUrl);\n        } else {\n          renderFrame(data.startUrl);\n        }\n      } catch (err) {\n        startedFor = \"\";\n        setMessage(err && err.message ? err.message : \"Could not launch embedded app.\");\n      }\n    }\n\n    async function callEmbedSessionTool(args) {\n      if (openAiBridge && typeof openAiBridge.callTool === \"function\") {\n        return await openAiBridge.callTool(startTool, args);\n      }\n      if (!app || typeof app.callServerTool !== \"function\") {\n        throw new Error(\"Host tool calls are not available.\");\n      }\n      return await app.callServerTool({ name: startTool, arguments: args });\n    }\n\n    function updateHostOpenInAppUrl() {\n      if (!openAiBridge || !openUrl || typeof openAiBridge.setOpenInAppUrl !== \"function\") {\n        return;\n      }\n      try {\n        openAiBridge.setOpenInAppUrl({ href: openUrl });\n      } catch (err) {\n        console.warn(\"[agent-native] ChatGPT rejected open-in-app URL\", err);\n      }\n    }\n\n    function updateOpenButton() {\n      openButton.disabled = !openUrl;\n      openButton.onclick = () => {\n        if (openUrl) void openHostLink({ url: openUrl });\n      };\n      updateHostOpenInAppUrl();\n    }\n\n    function updateTitle(data) {\n      const label = data.label || data.app || data.view || body.dataset.appTitle || \"App\";\n      titleEl.textContent = String(label);\n    }\n\n    function readOpenAiBridge() {\n      return window.openai && typeof window.openai === \"object\"\n        ? window.openai\n        : null;\n    }\n\n    function openAiToolResultParams(bridge) {\n      const params = {};\n      if (bridge && bridge.toolOutput !== undefined) {\n        if (bridge.toolOutput && typeof bridge.toolOutput === \"object\") {\n          params.structuredContent = bridge.toolOutput;\n        } else {\n          params.content = [{ type: \"text\", text: String(bridge.toolOutput) }];\n        }\n      }\n      if (bridge && bridge.toolResponseMetadata && typeof bridge.toolResponseMetadata === \"object\") {\n        params._meta = bridge.toolResponseMetadata;\n      }\n      return params;\n    }\n\n    function syncOpenAiBridge(bridge) {\n      if (!bridge) return false;\n      openAiBridge = bridge;\n      toolInput = objectValue(bridge.toolInput);\n      const params = openAiToolResultParams(bridge);\n      const data = parseToolResult(params);\n      openUrl = openLinkFrom(params, data);\n      updateTitle(data);\n      updateOpenButton();\n      updateDisplayButton();\n      notifyHostHeight();\n      sendHostContext();\n      if (openUrl) {\n        void launchEmbed();\n      } else if (!appFrame) {\n        setMessage(\"Waiting for app result\");\n      }\n      return true;\n    }\n\n    function waitForOpenAiBridge() {\n      const existing = readOpenAiBridge();\n      if (existing) return Promise.resolve(existing);\n      return new Promise((resolve) => {\n        let settled = false;\n        const finish = (bridge) => {\n          if (settled) return;\n          settled = true;\n          window.removeEventListener(\"openai:set_globals\", onGlobals);\n          clearTimeout(timer);\n          resolve(bridge || readOpenAiBridge());\n        };\n        const onGlobals = () => finish(readOpenAiBridge());\n        const timer = setTimeout(() => finish(null), 200);\n        window.addEventListener(\"openai:set_globals\", onGlobals, { passive: true });\n      });\n    }\n\n    window.addEventListener(\"openai:set_globals\", () => {\n      const bridge = readOpenAiBridge();\n      if (bridge && (!appFrame || openAiBridge)) syncOpenAiBridge(bridge);\n    }, { passive: true });\n\n    async function startMcpAppsBridge() {\n      const { App } = await import(\"${MCP_APP_IMPORT}\");\n      app = new App({ name: \"Agent Native Embed\", version: \"1.0.0\" }, {});\n      app.ontoolinput = (params) => {\n        toolInput = params.arguments || {};\n      };\n      app.ontoolresult = (params) => {\n        const data = parseToolResult(params);\n        openUrl = openLinkFrom(params, data);\n        updateTitle(data);\n        updateOpenButton();\n        void launchEmbed();\n      };\n      app.onhostcontextchanged = () => {\n        updateDisplayButton();\n        sendHostContext();\n      };\n      await app.connect();\n      updateDisplayButton();\n      sendHostContext();\n    }\n\n    const initialOpenAiBridge = await waitForOpenAiBridge();\n    if (!syncOpenAiBridge(initialOpenAiBridge)) {\n      await startMcpAppsBridge();\n    }\n  </script>\n</body>\n</html>`,\n    csp: {\n      connectDomains: [\"https://esm.sh\"],\n      resourceDomains: [\n        \"https://esm.sh\",\n        MCP_APP_REQUEST_ORIGIN_CSP_SOURCE,\n        ...(options.frameDomains ?? []),\n      ],\n      frameDomains: [\n        MCP_APP_REQUEST_ORIGIN_CSP_SOURCE,\n        ...(options.frameDomains ?? []),\n      ],\n    },\n    prefersBorder: false,\n  };\n}\n"]}

package/dist/server/open-route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"open-route.d.ts","sourceRoot":"","sources":["../../src/server/open-route.ts"],"names":[],"mappings":"AA0DA,MAAM,WAAW,gBAAgB;IAC/B;;yEAEqE;IACrE,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE;QACzB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAChC,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACjC;AA6DD,wBAAgB,sBAAsB,CAAC,OAAO,GAAE,gBAAqB,2FAgIpE"}
+{"version":3,"file":"open-route.d.ts","sourceRoot":"","sources":["../../src/server/open-route.ts"],"names":[],"mappings":"AA4DA,MAAM,WAAW,gBAAgB;IAC/B;;yEAEqE;IACrE,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE;QACzB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAChC,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACjC;AA6DD,wBAAgB,sBAAsB,CAAC,OAAO,GAAE,gBAAqB,2FAoIpE"}

package/dist/server/open-route.js

@@ -2,7 +2,7 @@ import { defineEventHandler, getMethod } from "h3";
 import { getSession, getConfiguredLoginHtml } from "./auth.js";
 import { appStatePut, appStateGet } from "../application-state/store.js";
 import { AGENT_SIDEBAR_QUERY_PARAM, withCollapsedAgentSidebarParam, } from "../shared/agent-sidebar-url.js";
-import { EMBED_MODE_QUERY_PARAM, EMBED_TOKEN_QUERY_PARAM, } from "../shared/embed-auth.js";
+import { EMBED_MODE_QUERY_PARAM, EMBED_TOKEN_QUERY_PARAM, MCP_APP_CHAT_BRIDGE_QUERY_PARAM, } from "../shared/embed-auth.js";
 import { getConfiguredAppBasePath } from "./app-base-path.js";
 /** Query keys that are route control, not navigation payload. */
 const RESERVED = new Set([
@@ -12,6 +12,7 @@ const RESERVED = new Set([
     "compose",
     EMBED_MODE_QUERY_PARAM,
     EMBED_TOKEN_QUERY_PARAM,
+    MCP_APP_CHAT_BRIDGE_QUERY_PARAM,
     AGENT_SIDEBAR_QUERY_PARAM,
 ]);
 // Control-char guard (NUL..US + DEL). Defined via codepoints so the source
@@ -196,7 +197,11 @@ export function createOpenRouteHandler(options = {}) {
         }
         target = appendSearchParams(target, filters);
         const embedParams = new URLSearchParams();
-        for (const key of [EMBED_MODE_QUERY_PARAM, EMBED_TOKEN_QUERY_PARAM]) {
+        for (const key of [
+            EMBED_MODE_QUERY_PARAM,
+            EMBED_TOKEN_QUERY_PARAM,
+            MCP_APP_CHAT_BRIDGE_QUERY_PARAM,
+        ]) {
             const value = search.get(key);
             if (value)
                 embedParams.set(key, value);

package/dist/server/open-route.js.map

@@ -1 +1 @@
-{"version":3,"file":"open-route.js","sourceRoot":"","sources":["../../src/server/open-route.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EACL,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,iEAAiE;AACjE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,KAAK;IACL,MAAM;IACN,IAAI;IACJ,SAAS;IACT,sBAAsB;IACtB,uBAAuB;IACvB,yBAAyB;CAC1B,CAAC,CAAC;AAEH,2EAA2E;AAC3E,0BAA0B;AAC1B,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,0BAA0B,CAAC,CAAC;AAE7D,yDAAyD;AACzD,2EAA2E;AAC3E,sEAAsE;AACtE,0CAA0C;AAC1C,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAa3C,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,eAAe,GAAI,KAAa,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACjE,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,EAAE,CAAC;QAC3D,OAAO,GAAG,eAAe,GAAI,KAAa,CAAC,GAAG,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;IACjE,CAAC;IACD,OAAQ,KAAa,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,IAAK,KAAa,CAAC,IAAI,IAAI,GAAG,CAAC;AACrE,CAAC;AAED,iFAAiF;AACjF,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,GAA8B;IACtD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB;IAChC,wEAAwE;IACxE,8CAA8C;IAC9C,OAAO,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc,EAAE,MAAuB;IACjE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;QAAE,OAAO,MAAM,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACjD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClE,OAAO,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,8BAA8B,CAAC,MAAc;IACpD,MAAM,IAAI,GAAG,wBAAwB,EAAE,CAAC;IACxC,IAAI,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACjD,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;YACjE,OAAO,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACnD,CAAC;QACD,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;QACtE,OAAO,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,UAA4B,EAAE;IACnE,OAAO,kBAAkB,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,EAAE;gBACnE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,MAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,YAAY,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC;QAEnD,0EAA0E;QAC1E,wEAAwE;QACxE,sBAAsB;QACtB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;oBACxB,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE;iBACxD,CAAC,CAAC;YACL,CAAC;YACD,sEAAsE;YACtE,gEAAgE;QAClE,CAAC;QAED,mEAAmE;QACnE,oEAAoE;QACpE,MAAM,SAAS,GAA2B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACtC,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC9B,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,MAAM,UAAU,GAA4B,EAAE,GAAG,SAAS,EAAE,CAAC;QAC7D,IAAI,IAAI;YAAE,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC;QAEjC,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE;oBACvD,aAAa,EAAE,WAAW;iBAC3B,CAAC,CAAC;gBACH,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,CAAC;wBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;wBACnD,iEAAiE;wBACjE,iEAAiE;wBACjE,gEAAgE;wBAChE,gDAAgD;wBAChD,IACE,KAAK;4BACL,OAAO,KAAK,KAAK,QAAQ;4BACzB,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;4BAC5B,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EACzB,CAAC;4BACD,MAAM,UAAU,GAAG,WAAW,KAAK,CAAC,EAAE,EAAE,CAAC;4BACzC,gEAAgE;4BAChE,8DAA8D;4BAC9D,+DAA+D;4BAC/D,gEAAgE;4BAChE,8DAA8D;4BAC9D,gEAAgE;4BAChE,gEAAgE;4BAChE,MAAM,UAAU,GACd,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;gCACzD,CAAC,CAAC,KAAK,CAAC,EAAE;gCACV,CAAC,CAAC,KAAK,CAAC,EAAE;gCACV,CAAC,CAAC,KAAK,CAAC,GAAG;gCACX,CAAC,CAAC,KAAK,CAAC,IAAI;gCACZ,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;4BAC1B,MAAM,QAAQ,GAAG,UAAU;gCACzB,CAAC,CAAC,IAAI;gCACN,CAAC,CAAC,MAAM,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;4BACjD,IAAI,UAAU,IAAI,CAAC,QAAQ,EAAE,CAAC;gCAC5B,MAAM,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE;oCAClD,aAAa,EAAE,WAAW;iCAC3B,CAAC,CAAC;4BACL,CAAC;wBACH,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,0DAA0D;oBAC5D,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;gBAChE,gDAAgD;YAClD,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,IAAI,MAAM,GACR,gBAAgB,CAAC,OAAO,CAAC;YACzB,gBAAgB,CACd,OAAO,CAAC,eAAe,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;gBACzD,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAC7B;YACD,GAAG,CAAC;QAEN,yEAAyE;QACzE,4DAA4D;QAC5D,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,EAAE,CAAC;YACpE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,KAAK;gBAAE,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACjD,MAAM,GAAG,8BAA8B,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,GAAG,8BAA8B,CAAC,MAAM,CAAC,CAAC;QAEhD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * `/_agent-native/open` — the stable deep-link route.\n *\n * An external coding agent (Claude Code / Cowork / Codex) surfaces an\n * \"Open in <app> →\" link (built by an action's `link` builder, see\n * `deep-link.ts`). When the user clicks it in any browser / inline webview,\n * this route:\n *   1. Resolves the *browser* session (NOT the agent token) — so the record\n *      always lands where the human is logged in.\n *   2. When unauthenticated, serves the same sign-in form the auth guard\n *      would, *at this same URL*. The login form's success handler reloads\n *      `window.location.href`, so the now-authenticated request re-enters\n *      this route and proceeds. No `?next=` plumbing needed.\n *   3. Writes the existing one-shot `navigate` application-state command (the\n *      exact key the UI already drains every 2s — we don't invent a new\n *      navigation mechanism, we bridge to it), plus an optional `compose-<id>`\n *      draft.\n *   4. 302-redirects to the rendered SPA view so the page loads immediately;\n *      the polled `navigate` command then applies record-level focus.\n *\n * The link itself is a pure pointer (view + record ids + filters) and carries\n * no privileged state.\n */\nimport type { H3Event } from \"h3\";\nimport { defineEventHandler, getMethod } from \"h3\";\nimport { getSession, getConfiguredLoginHtml } from \"./auth.js\";\nimport { appStatePut, appStateGet } from \"../application-state/store.js\";\nimport {\n  AGENT_SIDEBAR_QUERY_PARAM,\n  withCollapsedAgentSidebarParam,\n} from \"../shared/agent-sidebar-url.js\";\nimport {\n  EMBED_MODE_QUERY_PARAM,\n  EMBED_TOKEN_QUERY_PARAM,\n} from \"../shared/embed-auth.js\";\nimport { getConfiguredAppBasePath } from \"./app-base-path.js\";\n\n/** Query keys that are route control, not navigation payload. */\nconst RESERVED = new Set([\n  \"app\",\n  \"view\",\n  \"to\",\n  \"compose\",\n  EMBED_MODE_QUERY_PARAM,\n  EMBED_TOKEN_QUERY_PARAM,\n  AGENT_SIDEBAR_QUERY_PARAM,\n]);\n\n// Control-char guard (NUL..US + DEL). Defined via codepoints so the source\n// file stays plain ASCII.\nconst CONTROL_CHARS = new RegExp(\"[\\\\u0000-\\\\u001f\\\\u007f]\");\n\n// Compose-draft id charset. Mirrors `sanitizeDraftId` in\n// templates/mail/actions/manage-draft.ts so the id we concatenate into the\n// `compose-<id>` application-state key can't escape the key namespace\n// (path-traversal / key injection guard).\nconst COMPOSE_ID = /^[a-zA-Z0-9_-]{1,64}$/;\n\nexport interface OpenRouteOptions {\n  /** Per-template override that turns the parsed deep-link params into the\n   *  client-side SPA path to redirect to. Return `null` to use the default\n   *  (`/<view>`). Filter params (`f_*`) are appended automatically. */\n  resolveOpenPath?: (params: {\n    app?: string;\n    view?: string;\n    params: Record<string, string>;\n  }) => string | null | undefined;\n}\n\nfunction getRequestUrl(event: H3Event): string {\n  const mountedPathname = (event as any).context?._mountedPathname;\n  if (typeof mountedPathname === \"string\" && mountedPathname) {\n    return `${mountedPathname}${(event as any).url?.search ?? \"\"}`;\n  }\n  return (event as any).node?.req?.url ?? (event as any).path ?? \"/\";\n}\n\n/** Decode a base64url string to UTF-8 (Node Buffer; this route is Node-only). */\nfunction decodeBase64Url(input: string): string {\n  return Buffer.from(input, \"base64url\").toString(\"utf8\");\n}\n\n/**\n * Normalize a candidate redirect path to a safe, same-origin, leading-slash\n * relative path. Rejects absolute URLs, scheme-relative `//host`, and control\n * chars (open-redirect guard). Returns `null` when unsafe.\n */\nfunction safeRelativePath(raw: string | undefined | null): string | null {\n  if (!raw) return null;\n  if (CONTROL_CHARS.test(raw)) return null;\n  if (!raw.startsWith(\"/\")) return null;\n  if (raw.startsWith(\"//\") || raw.startsWith(\"/\\\\\")) return null;\n  if (/^\\/[a-z][a-z0-9+.-]*:/i.test(raw)) return null;\n  return raw;\n}\n\nfunction redirect(location: string): Response {\n  // Native web Response (not h3 v2's reworked sendRedirect) — matches the\n  // redirect pattern used elsewhere in auth.ts.\n  return new Response(\"\", { status: 302, headers: { Location: location } });\n}\n\nfunction appendSearchParams(target: string, params: URLSearchParams): string {\n  if (!params.toString()) return target;\n  try {\n    const url = new URL(target, \"http://an.invalid\");\n    for (const [k, v] of params.entries()) url.searchParams.set(k, v);\n    return `${url.pathname}${url.search}${url.hash}`;\n  } catch {\n    return target;\n  }\n}\n\nfunction withConfiguredRedirectBasePath(target: string): string {\n  const base = getConfiguredAppBasePath();\n  if (!base) return target;\n  try {\n    const url = new URL(target, \"http://an.invalid\");\n    if (url.pathname === base || url.pathname.startsWith(`${base}/`)) {\n      return `${url.pathname}${url.search}${url.hash}`;\n    }\n    url.pathname = url.pathname === \"/\" ? base : `${base}${url.pathname}`;\n    return `${url.pathname}${url.search}${url.hash}`;\n  } catch {\n    return target;\n  }\n}\n\nexport function createOpenRouteHandler(options: OpenRouteOptions = {}) {\n  return defineEventHandler(async (event: H3Event) => {\n    const method = getMethod(event);\n    if (method !== \"GET\" && method !== \"HEAD\") {\n      return new Response(JSON.stringify({ error: \"Method not allowed\" }), {\n        status: 405,\n        headers: { \"Content-Type\": \"application/json\" },\n      });\n    }\n\n    const rawUrl = getRequestUrl(event);\n    let search: URLSearchParams;\n    try {\n      search = new URL(rawUrl, \"http://an.invalid\").searchParams;\n    } catch {\n      search = new URLSearchParams();\n    }\n\n    const app = search.get(\"app\") ?? undefined;\n    const view = search.get(\"view\") ?? undefined;\n    const toParam = search.get(\"to\") ?? undefined;\n    const compose = search.get(\"compose\") ?? undefined;\n\n    // Resolve the BROWSER session. When unauthenticated, serve the same login\n    // form the guard would — at this URL — so the post-login reload returns\n    // here authenticated.\n    const session = await getSession(event);\n    if (!session?.email) {\n      const html = getConfiguredLoginHtml(event);\n      if (html) {\n        return new Response(html, {\n          status: 200,\n          headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n        });\n      }\n      // No auth guard configured (fully open app) — best effort: still send\n      // the user to the view; nothing to scope the navigate write to.\n    }\n\n    // Build the navigation payload from every non-reserved query param\n    // (record ids + filters: threadId, eventId, dashboardId, f_*, ...).\n    const navParams: Record<string, string> = {};\n    for (const [k, v] of search.entries()) {\n      if (RESERVED.has(k)) continue;\n      navParams[k] = v;\n    }\n    const navPayload: Record<string, unknown> = { ...navParams };\n    if (view) navPayload.view = view;\n\n    if (session?.email) {\n      try {\n        await appStatePut(session.email, \"navigate\", navPayload, {\n          requestSource: \"deep-link\",\n        });\n        if (compose) {\n          try {\n            const draft = JSON.parse(decodeBase64Url(compose));\n            // Validate the id before using it as a key segment. An unsafe id\n            // could escape the `compose-` namespace and clobber an unrelated\n            // application-state key; skip the write (the view still opens),\n            // mirroring the malformed-payload branch below.\n            if (\n              draft &&\n              typeof draft === \"object\" &&\n              typeof draft.id === \"string\" &&\n              COMPOSE_ID.test(draft.id)\n            ) {\n              const composeKey = `compose-${draft.id}`;\n              // A compact deep link may carry only `{ id, subject }` when the\n              // full draft was too large to inline in the URL. The complete\n              // draft is already persisted at `compose-<id>` by manage-draft\n              // on create/update. Never let the truncated stub overwrite that\n              // richer saved draft (would silently lose body / recipients /\n              // reply metadata). Only write when the payload actually carries\n              // content, or when nothing is saved yet (composer still opens).\n              const hasContent =\n                (typeof draft.body === \"string\" && draft.body.length > 0) ||\n                !!draft.to ||\n                !!draft.cc ||\n                !!draft.bcc ||\n                !!draft.html ||\n                !!draft.replyToThreadId;\n              const existing = hasContent\n                ? null\n                : await appStateGet(session.email, composeKey);\n              if (hasContent || !existing) {\n                await appStatePut(session.email, composeKey, draft, {\n                  requestSource: \"deep-link\",\n                });\n              }\n            }\n          } catch {\n            // Malformed compose payload — skip; the view still opens.\n          }\n        }\n      } catch {\n        // App-state write failure shouldn't 500 the click; the redirect\n        // below still lands the user on the right view.\n      }\n    }\n\n    // Resolve the SPA path to redirect to.\n    let target =\n      safeRelativePath(toParam) ??\n      safeRelativePath(\n        options.resolveOpenPath?.({ app, view, params: navParams }) ??\n          (view ? `/${view}` : null),\n      ) ??\n      \"/\";\n\n    // Forward filter params (f_*) onto the redirect so dashboards/lists open\n    // pre-filtered even before the navigate command is drained.\n    const filters = new URLSearchParams();\n    for (const [k, v] of search.entries()) {\n      if (k.startsWith(\"f_\")) filters.set(k, v);\n    }\n    target = appendSearchParams(target, filters);\n    const embedParams = new URLSearchParams();\n    for (const key of [EMBED_MODE_QUERY_PARAM, EMBED_TOKEN_QUERY_PARAM]) {\n      const value = search.get(key);\n      if (value) embedParams.set(key, value);\n    }\n    target = appendSearchParams(target, embedParams);\n    target = withCollapsedAgentSidebarParam(target);\n    target = withConfiguredRedirectBasePath(target);\n\n    return redirect(target);\n  });\n}\n"]}
+{"version":3,"file":"open-route.js","sourceRoot":"","sources":["../../src/server/open-route.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EACL,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,iEAAiE;AACjE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,KAAK;IACL,MAAM;IACN,IAAI;IACJ,SAAS;IACT,sBAAsB;IACtB,uBAAuB;IACvB,+BAA+B;IAC/B,yBAAyB;CAC1B,CAAC,CAAC;AAEH,2EAA2E;AAC3E,0BAA0B;AAC1B,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,0BAA0B,CAAC,CAAC;AAE7D,yDAAyD;AACzD,2EAA2E;AAC3E,sEAAsE;AACtE,0CAA0C;AAC1C,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAa3C,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,eAAe,GAAI,KAAa,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACjE,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,EAAE,CAAC;QAC3D,OAAO,GAAG,eAAe,GAAI,KAAa,CAAC,GAAG,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;IACjE,CAAC;IACD,OAAQ,KAAa,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,IAAK,KAAa,CAAC,IAAI,IAAI,GAAG,CAAC;AACrE,CAAC;AAED,iFAAiF;AACjF,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,GAA8B;IACtD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB;IAChC,wEAAwE;IACxE,8CAA8C;IAC9C,OAAO,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc,EAAE,MAAuB;IACjE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;QAAE,OAAO,MAAM,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACjD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClE,OAAO,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,8BAA8B,CAAC,MAAc;IACpD,MAAM,IAAI,GAAG,wBAAwB,EAAE,CAAC;IACxC,IAAI,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACjD,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;YACjE,OAAO,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACnD,CAAC;QACD,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;QACtE,OAAO,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,UAA4B,EAAE;IACnE,OAAO,kBAAkB,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,EAAE;gBACnE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,MAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,YAAY,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC;QAEnD,0EAA0E;QAC1E,wEAAwE;QACxE,sBAAsB;QACtB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;oBACxB,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE;iBACxD,CAAC,CAAC;YACL,CAAC;YACD,sEAAsE;YACtE,gEAAgE;QAClE,CAAC;QAED,mEAAmE;QACnE,oEAAoE;QACpE,MAAM,SAAS,GAA2B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACtC,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC9B,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,MAAM,UAAU,GAA4B,EAAE,GAAG,SAAS,EAAE,CAAC;QAC7D,IAAI,IAAI;YAAE,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC;QAEjC,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE;oBACvD,aAAa,EAAE,WAAW;iBAC3B,CAAC,CAAC;gBACH,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,CAAC;wBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;wBACnD,iEAAiE;wBACjE,iEAAiE;wBACjE,gEAAgE;wBAChE,gDAAgD;wBAChD,IACE,KAAK;4BACL,OAAO,KAAK,KAAK,QAAQ;4BACzB,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;4BAC5B,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EACzB,CAAC;4BACD,MAAM,UAAU,GAAG,WAAW,KAAK,CAAC,EAAE,EAAE,CAAC;4BACzC,gEAAgE;4BAChE,8DAA8D;4BAC9D,+DAA+D;4BAC/D,gEAAgE;4BAChE,8DAA8D;4BAC9D,gEAAgE;4BAChE,gEAAgE;4BAChE,MAAM,UAAU,GACd,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;gCACzD,CAAC,CAAC,KAAK,CAAC,EAAE;gCACV,CAAC,CAAC,KAAK,CAAC,EAAE;gCACV,CAAC,CAAC,KAAK,CAAC,GAAG;gCACX,CAAC,CAAC,KAAK,CAAC,IAAI;gCACZ,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;4BAC1B,MAAM,QAAQ,GAAG,UAAU;gCACzB,CAAC,CAAC,IAAI;gCACN,CAAC,CAAC,MAAM,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;4BACjD,IAAI,UAAU,IAAI,CAAC,QAAQ,EAAE,CAAC;gCAC5B,MAAM,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE;oCAClD,aAAa,EAAE,WAAW;iCAC3B,CAAC,CAAC;4BACL,CAAC;wBACH,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,0DAA0D;oBAC5D,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;gBAChE,gDAAgD;YAClD,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,IAAI,MAAM,GACR,gBAAgB,CAAC,OAAO,CAAC;YACzB,gBAAgB,CACd,OAAO,CAAC,eAAe,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;gBACzD,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAC7B;YACD,GAAG,CAAC;QAEN,yEAAyE;QACzE,4DAA4D;QAC5D,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI;YAChB,sBAAsB;YACtB,uBAAuB;YACvB,+BAA+B;SAChC,EAAE,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,KAAK;gBAAE,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACjD,MAAM,GAAG,8BAA8B,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,GAAG,8BAA8B,CAAC,MAAM,CAAC,CAAC;QAEhD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * `/_agent-native/open` — the stable deep-link route.\n *\n * An external coding agent (Claude Code / Cowork / Codex) surfaces an\n * \"Open in <app> →\" link (built by an action's `link` builder, see\n * `deep-link.ts`). When the user clicks it in any browser / inline webview,\n * this route:\n *   1. Resolves the *browser* session (NOT the agent token) — so the record\n *      always lands where the human is logged in.\n *   2. When unauthenticated, serves the same sign-in form the auth guard\n *      would, *at this same URL*. The login form's success handler reloads\n *      `window.location.href`, so the now-authenticated request re-enters\n *      this route and proceeds. No `?next=` plumbing needed.\n *   3. Writes the existing one-shot `navigate` application-state command (the\n *      exact key the UI already drains every 2s — we don't invent a new\n *      navigation mechanism, we bridge to it), plus an optional `compose-<id>`\n *      draft.\n *   4. 302-redirects to the rendered SPA view so the page loads immediately;\n *      the polled `navigate` command then applies record-level focus.\n *\n * The link itself is a pure pointer (view + record ids + filters) and carries\n * no privileged state.\n */\nimport type { H3Event } from \"h3\";\nimport { defineEventHandler, getMethod } from \"h3\";\nimport { getSession, getConfiguredLoginHtml } from \"./auth.js\";\nimport { appStatePut, appStateGet } from \"../application-state/store.js\";\nimport {\n  AGENT_SIDEBAR_QUERY_PARAM,\n  withCollapsedAgentSidebarParam,\n} from \"../shared/agent-sidebar-url.js\";\nimport {\n  EMBED_MODE_QUERY_PARAM,\n  EMBED_TOKEN_QUERY_PARAM,\n  MCP_APP_CHAT_BRIDGE_QUERY_PARAM,\n} from \"../shared/embed-auth.js\";\nimport { getConfiguredAppBasePath } from \"./app-base-path.js\";\n\n/** Query keys that are route control, not navigation payload. */\nconst RESERVED = new Set([\n  \"app\",\n  \"view\",\n  \"to\",\n  \"compose\",\n  EMBED_MODE_QUERY_PARAM,\n  EMBED_TOKEN_QUERY_PARAM,\n  MCP_APP_CHAT_BRIDGE_QUERY_PARAM,\n  AGENT_SIDEBAR_QUERY_PARAM,\n]);\n\n// Control-char guard (NUL..US + DEL). Defined via codepoints so the source\n// file stays plain ASCII.\nconst CONTROL_CHARS = new RegExp(\"[\\\\u0000-\\\\u001f\\\\u007f]\");\n\n// Compose-draft id charset. Mirrors `sanitizeDraftId` in\n// templates/mail/actions/manage-draft.ts so the id we concatenate into the\n// `compose-<id>` application-state key can't escape the key namespace\n// (path-traversal / key injection guard).\nconst COMPOSE_ID = /^[a-zA-Z0-9_-]{1,64}$/;\n\nexport interface OpenRouteOptions {\n  /** Per-template override that turns the parsed deep-link params into the\n   *  client-side SPA path to redirect to. Return `null` to use the default\n   *  (`/<view>`). Filter params (`f_*`) are appended automatically. */\n  resolveOpenPath?: (params: {\n    app?: string;\n    view?: string;\n    params: Record<string, string>;\n  }) => string | null | undefined;\n}\n\nfunction getRequestUrl(event: H3Event): string {\n  const mountedPathname = (event as any).context?._mountedPathname;\n  if (typeof mountedPathname === \"string\" && mountedPathname) {\n    return `${mountedPathname}${(event as any).url?.search ?? \"\"}`;\n  }\n  return (event as any).node?.req?.url ?? (event as any).path ?? \"/\";\n}\n\n/** Decode a base64url string to UTF-8 (Node Buffer; this route is Node-only). */\nfunction decodeBase64Url(input: string): string {\n  return Buffer.from(input, \"base64url\").toString(\"utf8\");\n}\n\n/**\n * Normalize a candidate redirect path to a safe, same-origin, leading-slash\n * relative path. Rejects absolute URLs, scheme-relative `//host`, and control\n * chars (open-redirect guard). Returns `null` when unsafe.\n */\nfunction safeRelativePath(raw: string | undefined | null): string | null {\n  if (!raw) return null;\n  if (CONTROL_CHARS.test(raw)) return null;\n  if (!raw.startsWith(\"/\")) return null;\n  if (raw.startsWith(\"//\") || raw.startsWith(\"/\\\\\")) return null;\n  if (/^\\/[a-z][a-z0-9+.-]*:/i.test(raw)) return null;\n  return raw;\n}\n\nfunction redirect(location: string): Response {\n  // Native web Response (not h3 v2's reworked sendRedirect) — matches the\n  // redirect pattern used elsewhere in auth.ts.\n  return new Response(\"\", { status: 302, headers: { Location: location } });\n}\n\nfunction appendSearchParams(target: string, params: URLSearchParams): string {\n  if (!params.toString()) return target;\n  try {\n    const url = new URL(target, \"http://an.invalid\");\n    for (const [k, v] of params.entries()) url.searchParams.set(k, v);\n    return `${url.pathname}${url.search}${url.hash}`;\n  } catch {\n    return target;\n  }\n}\n\nfunction withConfiguredRedirectBasePath(target: string): string {\n  const base = getConfiguredAppBasePath();\n  if (!base) return target;\n  try {\n    const url = new URL(target, \"http://an.invalid\");\n    if (url.pathname === base || url.pathname.startsWith(`${base}/`)) {\n      return `${url.pathname}${url.search}${url.hash}`;\n    }\n    url.pathname = url.pathname === \"/\" ? base : `${base}${url.pathname}`;\n    return `${url.pathname}${url.search}${url.hash}`;\n  } catch {\n    return target;\n  }\n}\n\nexport function createOpenRouteHandler(options: OpenRouteOptions = {}) {\n  return defineEventHandler(async (event: H3Event) => {\n    const method = getMethod(event);\n    if (method !== \"GET\" && method !== \"HEAD\") {\n      return new Response(JSON.stringify({ error: \"Method not allowed\" }), {\n        status: 405,\n        headers: { \"Content-Type\": \"application/json\" },\n      });\n    }\n\n    const rawUrl = getRequestUrl(event);\n    let search: URLSearchParams;\n    try {\n      search = new URL(rawUrl, \"http://an.invalid\").searchParams;\n    } catch {\n      search = new URLSearchParams();\n    }\n\n    const app = search.get(\"app\") ?? undefined;\n    const view = search.get(\"view\") ?? undefined;\n    const toParam = search.get(\"to\") ?? undefined;\n    const compose = search.get(\"compose\") ?? undefined;\n\n    // Resolve the BROWSER session. When unauthenticated, serve the same login\n    // form the guard would — at this URL — so the post-login reload returns\n    // here authenticated.\n    const session = await getSession(event);\n    if (!session?.email) {\n      const html = getConfiguredLoginHtml(event);\n      if (html) {\n        return new Response(html, {\n          status: 200,\n          headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n        });\n      }\n      // No auth guard configured (fully open app) — best effort: still send\n      // the user to the view; nothing to scope the navigate write to.\n    }\n\n    // Build the navigation payload from every non-reserved query param\n    // (record ids + filters: threadId, eventId, dashboardId, f_*, ...).\n    const navParams: Record<string, string> = {};\n    for (const [k, v] of search.entries()) {\n      if (RESERVED.has(k)) continue;\n      navParams[k] = v;\n    }\n    const navPayload: Record<string, unknown> = { ...navParams };\n    if (view) navPayload.view = view;\n\n    if (session?.email) {\n      try {\n        await appStatePut(session.email, \"navigate\", navPayload, {\n          requestSource: \"deep-link\",\n        });\n        if (compose) {\n          try {\n            const draft = JSON.parse(decodeBase64Url(compose));\n            // Validate the id before using it as a key segment. An unsafe id\n            // could escape the `compose-` namespace and clobber an unrelated\n            // application-state key; skip the write (the view still opens),\n            // mirroring the malformed-payload branch below.\n            if (\n              draft &&\n              typeof draft === \"object\" &&\n              typeof draft.id === \"string\" &&\n              COMPOSE_ID.test(draft.id)\n            ) {\n              const composeKey = `compose-${draft.id}`;\n              // A compact deep link may carry only `{ id, subject }` when the\n              // full draft was too large to inline in the URL. The complete\n              // draft is already persisted at `compose-<id>` by manage-draft\n              // on create/update. Never let the truncated stub overwrite that\n              // richer saved draft (would silently lose body / recipients /\n              // reply metadata). Only write when the payload actually carries\n              // content, or when nothing is saved yet (composer still opens).\n              const hasContent =\n                (typeof draft.body === \"string\" && draft.body.length > 0) ||\n                !!draft.to ||\n                !!draft.cc ||\n                !!draft.bcc ||\n                !!draft.html ||\n                !!draft.replyToThreadId;\n              const existing = hasContent\n                ? null\n                : await appStateGet(session.email, composeKey);\n              if (hasContent || !existing) {\n                await appStatePut(session.email, composeKey, draft, {\n                  requestSource: \"deep-link\",\n                });\n              }\n            }\n          } catch {\n            // Malformed compose payload — skip; the view still opens.\n          }\n        }\n      } catch {\n        // App-state write failure shouldn't 500 the click; the redirect\n        // below still lands the user on the right view.\n      }\n    }\n\n    // Resolve the SPA path to redirect to.\n    let target =\n      safeRelativePath(toParam) ??\n      safeRelativePath(\n        options.resolveOpenPath?.({ app, view, params: navParams }) ??\n          (view ? `/${view}` : null),\n      ) ??\n      \"/\";\n\n    // Forward filter params (f_*) onto the redirect so dashboards/lists open\n    // pre-filtered even before the navigate command is drained.\n    const filters = new URLSearchParams();\n    for (const [k, v] of search.entries()) {\n      if (k.startsWith(\"f_\")) filters.set(k, v);\n    }\n    target = appendSearchParams(target, filters);\n    const embedParams = new URLSearchParams();\n    for (const key of [\n      EMBED_MODE_QUERY_PARAM,\n      EMBED_TOKEN_QUERY_PARAM,\n      MCP_APP_CHAT_BRIDGE_QUERY_PARAM,\n    ]) {\n      const value = search.get(key);\n      if (value) embedParams.set(key, value);\n    }\n    target = appendSearchParams(target, embedParams);\n    target = withCollapsedAgentSidebarParam(target);\n    target = withConfiguredRedirectBasePath(target);\n\n    return redirect(target);\n  });\n}\n"]}

package/docs/content/client.md

@@ -75,8 +75,8 @@ Send a message to the agent chat via postMessage. Used to delegate AI tasks from
 
 When the app route is running inside an MCP App embed created with `embedApp()`,
 auto-submitted messages (`submit` omitted or `true`) are forwarded to the MCP
-App wrapper, which asks the containing host to add hidden context and send the
-visible user turn. `context` is sent as model context before the visible
+App host bridge, which asks the containing host to add hidden context and send
+the visible user turn. `context` is sent as model context before the visible
 message, so it stays model-visible without being posted as user-facing chat.
 `submit: false` keeps the local prefill/review behavior because MCP Apps do not
 define a standard draft-prefill API.
@@ -116,7 +116,10 @@ Routes embedded by `embedApp()` should be URL-first: load the current artifact
 from path/query params, render the real React route or a focused shared
 component, and use host bridge messages only for host-owned behavior.
 
-The wire contract is:
+Default direct route embeds use the standard MCP Apps `ui/*` JSON-RPC bridge.
+The exported helpers below send `ui/update-model-context`, `ui/open-link`, and
+`ui/request-display-mode` directly to the host. The explicit nested diagnostic
+mode still uses the wrapper relay:
 
 | Direction       | Message type                             | Purpose                                           |
 | --------------- | ---------------------------------------- | ------------------------------------------------- |

package/docs/content/external-agents.md

@@ -219,42 +219,38 @@ Claude Code and other CLI-first clients still receive the same resources and met
 
 MCP App embeds are route embeds, not separate mini-products. `embedApp()`
 starts from the action's `link` target, creates a short-lived embed session,
-and loads that URL in an iframe. Design embedded routes so a reload with the
-same URL reconstructs the same view.
-
-ChatGPT gets a dedicated compatibility path through `window.openai`: the
-wrapper reads `toolInput`, `toolOutput`, and `toolResponseMetadata` directly,
-then calls `create_embed_session` via `window.openai.callTool(...)`. Other MCP
-Apps hosts use the standard `ui/*` bridge. Keep the result shape identical for
-both paths: return a focused `link` and concise structured content.
-
-Some hosts support MCP Apps but still block nested iframes for a returned UI
-resource. `embedApp()` detects that case with a route-ready handshake and
-replaces the broken frame with an open-app fallback: the user can retry inline,
-open a freshly minted embed session through the host, or use the visible route
-URL. Keep the action's `link` target useful on its own because it is still the
-universal escape hatch.
-
-Do not try to make Claude render full app routes inline by redirecting the MCP
-App resource document to `/_agent-native/embed/start`. Claude first renders the
-`ui://` resource HTML on a `*.claudemcpcontent.com` sandbox origin; our app URL
-is only reached later by wrapper code. The `/embed/start` 302 works for the
-nested app iframe and for `ui/open-link` external opens, but it is not a
-portable substitute for the MCP resource document itself. True nested-frame-free
-Claude support would need a separate resource-shell mode that bootstraps the
-route inside the returned MCP App HTML document, with explicit asset/API CSP,
-CORS, and embed-session auth.
+and by default navigates the MCP App frame itself to that app route. That keeps
+Claude and ChatGPT on a single iframe instead of relying on a nested app iframe.
+Design embedded routes so a reload with the same URL reconstructs the same view.
+
+ChatGPT gets a dedicated compatibility path through `window.openai`: the launch
+document reads `toolInput`, `toolOutput`, and `toolResponseMetadata` directly,
+then calls `create_embed_session` via `window.openai.callTool(...)`. Standard
+MCP Apps hosts use the `ui/*` JSON-RPC bridge. After the direct navigation, the
+loaded app route can still call `ui/update-model-context`, `ui/message`,
+`ui/open-link`, and `ui/request-display-mode` through the host bridge helpers.
+Keep the result shape identical for both paths: return a focused `link` and
+concise structured content.
+
+An explicit nested iframe diagnostic path remains available with
+`embedMode: "iframe"`, `renderMode: "iframe"`, `nested: true`, or
+`frame: "iframe"`. Use it only when debugging host behavior. If that diagnostic
+iframe is blocked, `embedApp()` replaces it with an open-app fallback: the user
+can retry inline, open a freshly minted embed session through the host, or use
+the visible route URL. Keep the action's `link` target useful on its own because
+it is still the universal escape hatch.
 
 The host bridge is deliberately small:
 
-| Direction       | Message type                             | Use it for                               |
-| --------------- | ---------------------------------------- | ---------------------------------------- |
-| wrapper → route | `agentNative.mcpHostContext`             | Theme, locale, host platform, dimensions |
-| route → wrapper | `agentNative.embeddedAppReady`           | Confirm the nested route iframe loaded   |
-| route → wrapper | `agentNative.mcpHost.updateModelContext` | Hidden context for the host model        |
-| route → wrapper | `agentNative.mcpHost.openLink`           | Open an external or app URL via the host |
-| route → wrapper | `agentNative.mcpHost.requestDisplayMode` | Request `inline`, `fullscreen`, or `pip` |
-| wrapper → route | `agentNative.mcpHost.response`           | Correlate async request results          |
+| Mode              | Message type                          | Use it for                               |
+| ----------------- | ------------------------------------- | ---------------------------------------- |
+| direct            | `ui/update-model-context`             | Hidden context for the host model        |
+| direct            | `ui/message`                          | Post a visible user turn into the host   |
+| direct            | `ui/open-link`                        | Open an external or app URL via the host |
+| direct            | `ui/request-display-mode`             | Request `inline`, `fullscreen`, or `pip` |
+| nested diagnostic | `agentNative.mcpHostContext`          | Theme, locale, host platform, dimensions |
+| nested diagnostic | `agentNative.embeddedAppReady`        | Confirm the route iframe loaded          |
+| nested diagnostic | `agentNative.mcpHost.*` / `.response` | Wrapper relay for host requests          |
 
 Embedded routes can use `updateMcpAppModelContext()`,
 `openMcpAppHostLink()`, `requestMcpAppDisplayMode()`,
@@ -283,7 +279,7 @@ On top of the per-action tools the MCP server exposes a stable verb set, so an e
 
 For OAuth callers that request `mcp:apps`, the server intentionally advertises a compact `tools/list` catalog so app hosts do not ingest every internal action schema. The model sees app-facing builtins (`list_apps`, `open_app`, app-only `create_embed_session`) and actions with `mcpApp`. Stdio/static-token developer clients still get the full connected action surface, and `publicAgent.expose` remains the opt-in for safe read/ingest tools outside the compact app catalog. If a UI-capable host should be able to call a new action from an MCP App conversation, mark it with `mcpApp`; use `publicAgent` for non-UI read/ingest handoff tools.
 
-For fast ChatGPT/Claude handoffs, the ideal path is direct: call the action that creates or opens the artifact, then let the MCP App widget launch the iframe. A Mail request should call `manage_draft` and render the real compose route. A dashboard request should call `open_app({ path, embed: true })` or a dashboard action with `mcpApp` and render the full Analytics route. Calendar, Forms, Content, Slides, Design, and Clips should follow the same pattern with their draft/create/search actions. `list_apps` is useful when the model must choose among granted apps; broad `resources/list`, full-catalog discovery, or `ask_app` delegation should not be the normal route for an obvious UI handoff.
+For fast ChatGPT/Claude handoffs, the ideal path is direct: call the action that creates or opens the artifact, then let the MCP App launch the route. A Mail request should call `manage_draft` and render the real compose route. A dashboard request should call `open_app({ path, embed: true })` or a dashboard action with `mcpApp` and render the full Analytics route. Calendar, Forms, Content, Slides, Design, and Clips should follow the same pattern with their draft/create/search actions. `list_apps` is useful when the model must choose among granted apps; broad `resources/list`, full-catalog discovery, or `ask_app` delegation should not be the normal route for an obvious UI handoff.
 
 ### Per-app tour {#tour}
 
@@ -364,13 +360,11 @@ export default defineAction({
 
 The MCP server advertises extension `io.modelcontextprotocol/ui`, adds `_meta.ui.resourceUri` plus `_meta["ui/resourceUri"]` to `tools/list`, and also emits ChatGPT Apps SDK compatibility metadata (`openai/outputTemplate`, widget CSP/description/accessibility). It exposes the HTML through `resources/list`, `resources/templates/list`, and `resources/read` using MIME `text/html;profile=mcp-app`. The stdio proxy forwards those resource handlers from the live app, so desktop and CLI clients see the same resources as HTTP clients.
 
-Keep the existing `link` builder even when adding `mcpApp`. CLI-only clients, older hosts, and any host that does not render MCP Apps will ignore the UI metadata and still need the `"Open in … →"` link. `embedApp()` uses that link as its launch target, calls the app-only `create_embed_session` helper, exchanges a one-time SQL ticket at `/_agent-native/embed/start`, and loads the target route in an iframe with a short-lived browser session plus a bearer fallback for same-origin fetches. `open_app({ app, path, embed: true })` is the generic escape hatch for routes such as full dashboards, filtered inboxes, calendar draft views, analyses, and extension pages, and should be used liberally when the full app is the clearest review/edit surface.
+Keep the existing `link` builder even when adding `mcpApp`. CLI-only clients, older hosts, and any host that does not render MCP Apps will ignore the UI metadata and still need the `"Open in … →"` link. `embedApp()` uses that link as its launch target, calls the app-only `create_embed_session` helper, exchanges a one-time SQL ticket at `/_agent-native/embed/start`, and navigates the MCP App frame to the target route with a short-lived browser session plus a bearer fallback for same-origin fetches. `open_app({ app, path, embed: true })` is the generic escape hatch for routes such as full dashboards, filtered inboxes, calendar draft views, analyses, and extension pages, and should be used liberally when the full app is the clearest review/edit surface.
 
-Inside those `embedApp()` full-app iframes, `sendToAgentChat()` is host-aware:
-auto-submitted prompts are relayed to the wrapper, which uses the host's model
-context and message APIs for hidden context plus the visible user turn. Hosts
-without MCP Apps messaging support simply ignore the bridge, and
-`submit: false` remains a local review/prefill path.
+Inside those `embedApp()` routes, `sendToAgentChat()` is embed-aware.
+Auto-submitted prompts relay to the MCP host as `ui/update-model-context` plus
+`ui/message`; `submit: false` remains local prefill/review behavior.
 
 ### The `link` contract {#link-contract}
 

package/docs/content/mcp-protocol.md

@@ -78,13 +78,23 @@ If an action declares `mcpApp`, the server also advertises the official MCP Apps
 
 `embedApp()` is the low-level URL-first MCP App helper. It reads the action
 result's open link, asks the app-only `create_embed_session` tool to mint a
-route-scoped session, then loads the resulting route in an iframe. For normal
-action authoring, use `embedRoute()` when the action's `link` and `mcpApp`
-should come from the same pure route builder. The route itself should derive
-state from the URL and normal app data fetching.
-
-The bridge between the wrapper and the embedded route uses Agent-Native
-postMessage types:
+route-scoped session, then navigates the MCP App frame itself to the resulting
+app route. For normal action authoring, use `embedRoute()` when the action's
+`link` and `mcpApp` should come from the same pure route builder. The route
+itself should derive state from the URL and normal app data fetching.
+
+Default direct embeds talk to the MCP Apps host through standard `ui/*`
+JSON-RPC messages:
+
+| Type                      | Payload shape                      |
+| ------------------------- | ---------------------------------- |
+| `ui/update-model-context` | `{ content?, structuredContent? }` |
+| `ui/message`              | `{ role: "user", content }`        |
+| `ui/open-link`            | `{ url }`                          |
+| `ui/request-display-mode` | `{ mode }`                         |
+
+An explicit `embedMode: "iframe"` / `renderMode: "iframe"` diagnostic path
+keeps the old wrapper-to-route postMessage relay:
 
 | Direction       | Type                                     | Payload shape                                 |
 | --------------- | ---------------------------------------- | --------------------------------------------- |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.22.18",
+  "version": "0.22.19",
   "type": "module",
   "description": "Framework for agent-native application development — where AI agents and UI share state via files",
   "license": "MIT",