@agent-native/core 0.22.18 → 0.22.20

package/dist/client/mcp-apps/McpAppRenderer.js

@@ -1,16 +1,18 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { useEffect, useMemo, useRef, useState } from "react";
+import { useCallback, useEffect, useMemo, useRef, useState, } from "react";
 import { AppBridge, PostMessageTransport, buildAllowAttribute, } from "@modelcontextprotocol/ext-apps/app-bridge";
 import { IconAlertTriangle, IconLoader2 } from "@tabler/icons-react";
 import { agentNativePath } from "../api-path.js";
 import { cn } from "../utils.js";
-const DEFAULT_IFRAME_HEIGHT = 360;
-const MAX_IFRAME_HEIGHT = 900;
+export const DEFAULT_MCP_APP_IFRAME_HEIGHT = 650;
+const MIN_IFRAME_HEIGHT = 220;
+const VIEWPORT_MARGIN = 16;
 const SANDBOX_FLAGS = "allow-scripts allow-forms allow-popups";
 export function McpAppRenderer({ app, className }) {
     const iframeRef = useRef(null);
+    const desiredHeightRef = useRef(DEFAULT_MCP_APP_IFRAME_HEIGHT);
     const [loadedSrcDoc, setLoadedSrcDoc] = useState(null);
-    const [height, setHeight] = useState(DEFAULT_IFRAME_HEIGHT);
+    const [height, setHeight] = useState(DEFAULT_MCP_APP_IFRAME_HEIGHT);
     const [error, setError] = useState(null);
     const [ready, setReady] = useState(false);
     const resourceHtml = app.resource ? htmlFromResource(app.resource) : "";
@@ -19,10 +21,52 @@ export function McpAppRenderer({ app, className }) {
     const csp = buildMcpAppCsp(uiMeta.csp);
     const srcDoc = useMemo(() => (resourceHtml ? injectCsp(resourceHtml, csp) : ""), [resourceHtml, csp]);
     useEffect(() => {
+        desiredHeightRef.current = DEFAULT_MCP_APP_IFRAME_HEIGHT;
+        setHeight(clampMcpAppHeight(DEFAULT_MCP_APP_IFRAME_HEIGHT, availableMcpAppHeight(iframeRef.current)));
         setLoadedSrcDoc(null);
         setReady(false);
         setError(null);
     }, [srcDoc]);
+    const applyHeight = useCallback((desiredHeight) => {
+        if (typeof desiredHeight === "number" &&
+            Number.isFinite(desiredHeight) &&
+            desiredHeight > 0) {
+            desiredHeightRef.current = desiredHeight;
+        }
+        setHeight(clampMcpAppHeight(desiredHeightRef.current, availableMcpAppHeight(iframeRef.current)));
+    }, []);
+    useEffect(() => {
+        let frame = 0;
+        const update = () => {
+            if (frame)
+                cancelAnimationFrame(frame);
+            frame = requestAnimationFrame(() => {
+                frame = 0;
+                applyHeight();
+            });
+        };
+        update();
+        window.addEventListener("resize", update, { passive: true });
+        window.visualViewport?.addEventListener("resize", update, {
+            passive: true,
+        });
+        document.addEventListener("scroll", update, true);
+        const observer = typeof ResizeObserver !== "undefined" ? new ResizeObserver(update) : null;
+        if (observer) {
+            observer.observe(document.documentElement);
+            const parent = iframeRef.current?.parentElement;
+            if (parent)
+                observer.observe(parent);
+        }
+        return () => {
+            if (frame)
+                cancelAnimationFrame(frame);
+            window.removeEventListener("resize", update);
+            window.visualViewport?.removeEventListener("resize", update);
+            document.removeEventListener("scroll", update, true);
+            observer?.disconnect();
+        };
+    }, [applyHeight, srcDoc]);
     useEffect(() => {
         const iframe = iframeRef.current;
         if (!iframe?.contentWindow || !srcDoc || loadedSrcDoc !== srcDoc)
@@ -38,13 +82,13 @@ export function McpAppRenderer({ app, className }) {
                 csp: uiMeta.csp ?? {},
             },
         }, {
-            hostContext: buildHostContext(app),
+            hostContext: buildHostContext(app, availableMcpAppHeight(iframe)),
         });
         bridge.addEventListener("sizechange", ({ height: nextHeight }) => {
             if (typeof nextHeight !== "number" || !Number.isFinite(nextHeight)) {
                 return;
             }
-            setHeight(Math.min(MAX_IFRAME_HEIGHT, Math.max(220, Math.ceil(nextHeight))));
+            applyHeight(nextHeight);
         });
         bridge.addEventListener("initialized", () => {
             if (closed)
@@ -107,7 +151,14 @@ export function McpAppRenderer({ app, className }) {
                 void bridge.close?.().catch?.(() => undefined);
             });
         };
-    }, [app, loadedSrcDoc, srcDoc, supportedPermissions, uiMeta.csp]);
+    }, [
+        app,
+        applyHeight,
+        loadedSrcDoc,
+        srcDoc,
+        supportedPermissions,
+        uiMeta.csp,
+    ]);
     if (!resourceHtml) {
         return (_jsxs("div", { className: cn("agent-mcp-app agent-mcp-app--error", className), children: [_jsx(IconAlertTriangle, { size: 15 }), _jsx("span", { children: "MCP App resource was not available." })] }));
     }
@@ -205,7 +256,7 @@ function escapeAttribute(value) {
         .replace(/"/g, """)
         .replace(/</g, "&lt;");
 }
-function buildHostContext(app) {
+function buildHostContext(app, maxHeight) {
     const root = typeof window !== "undefined"
         ? getComputedStyle(document.documentElement)
         : null;
@@ -237,7 +288,7 @@ function buildHostContext(app) {
         locale: typeof navigator !== "undefined" ? navigator.language : undefined,
         timeZone: Intl.DateTimeFormat().resolvedOptions().timeZone,
         containerDimensions: {
-            maxHeight: MAX_IFRAME_HEIGHT,
+            maxHeight,
             maxWidth: typeof window !== "undefined" ? window.innerWidth : undefined,
         },
         styles: {
@@ -294,6 +345,32 @@ function errorToolResult(message) {
         isError: true,
     };
 }
+function finitePositiveNumber(value) {
+    return typeof value === "number" && Number.isFinite(value) && value > 0
+        ? value
+        : null;
+}
+export function availableMcpAppHeight(element) {
+    if (typeof window === "undefined")
+        return DEFAULT_MCP_APP_IFRAME_HEIGHT;
+    const viewportHeight = finitePositiveNumber(window.visualViewport?.height) ??
+        finitePositiveNumber(window.innerHeight) ??
+        DEFAULT_MCP_APP_IFRAME_HEIGHT;
+    if (!element) {
+        return Math.max(1, Math.floor(viewportHeight - VIEWPORT_MARGIN * 2));
+    }
+    const rect = element.getBoundingClientRect();
+    const top = Number.isFinite(rect.top)
+        ? Math.max(VIEWPORT_MARGIN, rect.top)
+        : VIEWPORT_MARGIN;
+    return Math.max(1, Math.floor(viewportHeight - top - VIEWPORT_MARGIN));
+}
+export function clampMcpAppHeight(desiredHeight, maxVisibleHeight) {
+    const maxHeight = finitePositiveNumber(maxVisibleHeight) ?? DEFAULT_MCP_APP_IFRAME_HEIGHT;
+    const desired = finitePositiveNumber(desiredHeight) ?? DEFAULT_MCP_APP_IFRAME_HEIGHT;
+    const minimum = Math.min(MIN_IFRAME_HEIGHT, maxHeight);
+    return Math.max(minimum, Math.min(maxHeight, Math.ceil(desired)));
+}
 function isSafeExternalUrl(value) {
     try {
         const url = new URL(value);

package/dist/client/mcp-apps/McpAppRenderer.js.map

@@ -1 +1 @@
-{"version":3,"file":"McpAppRenderer.js","sourceRoot":"","sources":["../../../src/client/mcp-apps/McpAppRenderer.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACpE,OAAO,EACL,SAAS,EACT,oBAAoB,EACpB,mBAAmB,GAGpB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAErE,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEjC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,aAAa,GAAG,wCAAwC,CAAC;AAa/D,MAAM,UAAU,cAAc,CAAC,EAAE,GAAG,EAAE,SAAS,EAAuB;IACpE,MAAM,SAAS,GAAG,MAAM,CAA2B,IAAI,CAAC,CAAC;IACzD,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IAC5D,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,MAAM,oBAAoB,GAAG,OAAO,CAClC,GAAG,EAAE,CAAC,0BAA0B,CAAC,MAAM,CAAC,WAAW,CAAC,EACpD,CAAC,MAAM,CAAC,WAAW,CAAC,CACrB,CAAC;IACF,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,CACpB,GAAG,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EACxD,CAAC,YAAY,EAAE,GAAG,CAAC,CACpB,CAAC;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChB,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC,MAAM,EAAE,aAAa,IAAI,CAAC,MAAM,IAAI,YAAY,KAAK,MAAM;YAAE,OAAO;QAEzE,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,IAAI,EACJ,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,EAC1C;YACE,SAAS,EAAE,EAAE;YACb,WAAW,EAAE,EAAE;YACf,eAAe,EAAE,EAAE;YACnB,OAAO,EAAE,EAAE;YACX,OAAO,EAAE;gBACP,WAAW,EAAE,oBAAoB;gBACjC,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,EAAE;aACtB;SACF,EACD;YACE,WAAW,EAAE,gBAAgB,CAAC,GAAG,CAAQ;SAC1C,CACF,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;YAC/D,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnE,OAAO;YACT,CAAC;YACD,SAAS,CACP,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAClE,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE;YAC1C,IAAI,MAAM;gBAAE,OAAO;YACnB,QAAQ,CAAC,IAAI,CAAC,CAAC;YACf,KAAK,MAAM,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;YACxD,KAAK,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,UAA4B,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;YAC5D,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;gBACnE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,UAAU,GAAG,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACpC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC;YAClD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,CAAC,UAAU,GAAG,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,EAAE;YAC/D,MAAM,QAAQ,GAAG,2BAA2B,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACjE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,eAAe,CAAC,8CAA8C,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,kBAAkB,CAAiB,WAAW,EAAE;oBAC3D,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,QAAQ;oBACR,SAAS,EACP,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ;wBAChD,CAAC,CAAC,aAAa;wBACf,CAAC,CAAC,EAAE;iBACT,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO,eAAe,CAAC,GAAG,EAAE,OAAO,IAAI,2BAA2B,CAAC,CAAC;YACtE,CAAC;QACH,CAAC,CAAC;QACD,MAAc,CAAC,WAAW,GAAG,KAAK,IAAI,EAAE,CACvC,kBAAkB,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,cAAc,GAAG,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CACxC,kBAAkB,CAAC,eAAe,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,eAAe,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QACzD,MAAM,CAAC,uBAAuB,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,cAAc,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,SAAS,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,CAAC,oBAAoB,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAE/C,MAAM,SAAS,GAAG,IAAI,oBAAoB,CACxC,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,aAAa,CACrB,CAAC;QACF,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,GAAQ,EAAE,EAAE;YAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CAAC,GAAG,EAAE,OAAO,IAAI,+BAA+B,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,GAAG,EAAE;YACV,MAAM,GAAG,IAAI,CAAC;YACd,QAAQ,CAAC,KAAK,CAAC,CAAC;YAChB,KAAK,MAAM;iBACR,gBAAgB,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;iBACtC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;iBACtB,OAAO,CAAC,GAAG,EAAE;gBACZ,KAAM,MAAc,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1D,CAAC,CAAC,CAAC;QACP,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAElE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,CACL,eAAK,SAAS,EAAE,EAAE,CAAC,oCAAoC,EAAE,SAAS,CAAC,aACjE,KAAC,iBAAiB,IAAC,IAAI,EAAE,EAAE,GAAI,EAC/B,iEAAgD,IAC5C,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eACE,SAAS,EAAE,EAAE,CACX,eAAe,EACf,MAAM,CAAC,aAAa,KAAK,KAAK,IAAI,sBAAsB,EACxD,SAAS,CACV,aAEA,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,CACnB,eAAK,SAAS,EAAC,wBAAwB,aACrC,KAAC,WAAW,IAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAC,yBAAyB,GAAG,EAC7D,6CAA4B,IACxB,CACP,EACA,KAAK,IAAI,CACR,eAAK,SAAS,EAAC,sBAAsB,aACnC,KAAC,iBAAiB,IAAC,IAAI,EAAE,EAAE,GAAI,EAC/B,yBAAO,KAAK,GAAQ,IAChB,CACP,EACD,iBACE,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,GAAG,CAAC,gBAAgB,EAC9C,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,mBAAmB,CAAC,oBAAoB,CAAC,EAChD,KAAK,EAAE,EAAE,MAAM,EAAE,EACjB,MAAM,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,GACrC,IACE,CACP,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAuB;IAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC;IACjC,MAAM,EAAE,GACN,IAAI,EAAE,EAAE,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChE,CAAC,CAAE,IAAI,CAAC,EAAqB;QAC7B,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAqD;IAErD,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC;IAC5D,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACjD,IAAI,CAAC;QACH,IAAI,OAAO,IAAI,KAAK,UAAU;YAAE,OAAO,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,WAAiD;IAEjD,OAAO,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAiC;IAC9D,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACrD,OAAO;QACL,oBAAoB;QACpB,YAAY,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACrD,oBAAoB;QACpB,eAAe,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC9D,sBAAsB,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QACzE,wBAAwB,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3E,iBAAiB,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QACpE,4BAA4B,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/E,6BAA6B,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QAChF,aAAa,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC3D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA4B;IACtD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACzE,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IACvC,IAAI,mDAAmD,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACrE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,uCAAuC,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC;QACjD,IACE,GAAG,CAAC,QAAQ,KAAK,OAAO;YACxB,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EACxD,CAAC;YACD,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,GAAW;IAC1C,MAAM,IAAI,GAAG,uDAAuD,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;IAC7F,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,OAAO,CACjB,gBAAgB,EAChB,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,SAAS,IAAI,SAAS,CAC9C,CAAC;IACJ,CAAC;IACD,OAAO,8BAA8B,IAAI,gBAAgB,IAAI,gBAAgB,CAAC;AAChF,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAuB;IAC/C,MAAM,IAAI,GACR,OAAO,MAAM,KAAK,WAAW;QAC3B,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,eAAe,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3E,MAAM,KAAK,GACT,OAAO,QAAQ,KAAK,WAAW;QAC/B,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;YAClD,MAAM,CAAC,UAAU,EAAE,CAAC,8BAA8B,CAAC,CAAC,OAAO,CAAC;QAC5D,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,OAAO,CAAC;IACd,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,IAAI;YAChB,CAAC,CAAC;gBACE,IAAI,EAAE;oBACJ,IAAI,EAAE,GAAG,CAAC,gBAAgB;oBAC1B,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW;oBACjC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI;wBACnC,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE,EAAE;qBACf;oBACD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrD;aACF;YACH,CAAC,CAAC,SAAS;QACb,KAAK;QACL,WAAW,EAAE,QAAQ;QACrB,qBAAqB,EAAE,CAAC,QAAQ,CAAC;QACjC,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,cAAc;QACzB,MAAM,EAAE,OAAO,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACzE,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,QAAQ;QAC1D,mBAAmB,EAAE;YACnB,SAAS,EAAE,iBAAiB;YAC5B,QAAQ,EAAE,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;SACxE;QACD,MAAM,EAAE;YACN,SAAS,EAAE;gBACT,4BAA4B,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBAC5D,8BAA8B,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACzD,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBACtD,wBAAwB,EAAE,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBAC9D,wBAAwB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACpD,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI,0BAA0B;gBAClE,aAAa,EACX,MAAM,CAAC,aAAa,CAAC;oBACrB,gDAAgD;gBAClD,oBAAoB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK;aAClD;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC;AAED,SAAS,2BAA2B,CAClC,QAAgB,EAChB,OAAe;IAEf,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,MAAM,GAAG,QAAQ,QAAQ,IAAI,CAAC;IACpC,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,QAAsD,EACtD,IAA6B;IAE7B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,eAAe,CAAC,2BAA2B,QAAQ,EAAE,CAAC,EACtD;QACE,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,aAAa;QAC1B,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,OAAO,GAAG,2BAA2B,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ;gBAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;AACtC,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;QACtD,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC","sourcesContent":["import React, { useEffect, useMemo, useRef, useState } from \"react\";\nimport {\n  AppBridge,\n  PostMessageTransport,\n  buildAllowAttribute,\n  type McpUiResourceCsp,\n  type McpUiResourcePermissions,\n} from \"@modelcontextprotocol/ext-apps/app-bridge\";\nimport type { CallToolResult } from \"@modelcontextprotocol/sdk/types.js\";\nimport { IconAlertTriangle, IconLoader2 } from \"@tabler/icons-react\";\nimport type { AgentMcpAppPayload } from \"../../mcp-client/app-result.js\";\nimport { agentNativePath } from \"../api-path.js\";\nimport { cn } from \"../utils.js\";\n\nconst DEFAULT_IFRAME_HEIGHT = 360;\nconst MAX_IFRAME_HEIGHT = 900;\nconst SANDBOX_FLAGS = \"allow-scripts allow-forms allow-popups\";\n\nexport interface McpAppRendererProps {\n  app: AgentMcpAppPayload;\n  className?: string;\n}\n\ntype ResourceUiMeta = {\n  csp?: McpUiResourceCsp;\n  permissions?: McpUiResourcePermissions;\n  prefersBorder?: boolean;\n};\n\nexport function McpAppRenderer({ app, className }: McpAppRendererProps) {\n  const iframeRef = useRef<HTMLIFrameElement | null>(null);\n  const [loadedSrcDoc, setLoadedSrcDoc] = useState<string | null>(null);\n  const [height, setHeight] = useState(DEFAULT_IFRAME_HEIGHT);\n  const [error, setError] = useState<string | null>(null);\n  const [ready, setReady] = useState(false);\n  const resourceHtml = app.resource ? htmlFromResource(app.resource) : \"\";\n  const uiMeta = useMemo(() => resourceUiMeta(app), [app]);\n  const supportedPermissions = useMemo(\n    () => supportedMcpAppPermissions(uiMeta.permissions),\n    [uiMeta.permissions],\n  );\n  const csp = buildMcpAppCsp(uiMeta.csp);\n  const srcDoc = useMemo(\n    () => (resourceHtml ? injectCsp(resourceHtml, csp) : \"\"),\n    [resourceHtml, csp],\n  );\n\n  useEffect(() => {\n    setLoadedSrcDoc(null);\n    setReady(false);\n    setError(null);\n  }, [srcDoc]);\n\n  useEffect(() => {\n    const iframe = iframeRef.current;\n    if (!iframe?.contentWindow || !srcDoc || loadedSrcDoc !== srcDoc) return;\n\n    let closed = false;\n    const bridge = new AppBridge(\n      null,\n      { name: \"Agent Native\", version: \"1.0.0\" },\n      {\n        openLinks: {},\n        serverTools: {},\n        serverResources: {},\n        logging: {},\n        sandbox: {\n          permissions: supportedPermissions,\n          csp: uiMeta.csp ?? {},\n        },\n      },\n      {\n        hostContext: buildHostContext(app) as any,\n      },\n    );\n\n    bridge.addEventListener(\"sizechange\", ({ height: nextHeight }) => {\n      if (typeof nextHeight !== \"number\" || !Number.isFinite(nextHeight)) {\n        return;\n      }\n      setHeight(\n        Math.min(MAX_IFRAME_HEIGHT, Math.max(220, Math.ceil(nextHeight))),\n      );\n    });\n    bridge.addEventListener(\"initialized\", () => {\n      if (closed) return;\n      setReady(true);\n      void bridge.sendToolInput({ arguments: app.toolInput });\n      void bridge.sendToolResult(app.toolResult as CallToolResult);\n    });\n    bridge.addEventListener(\"loggingmessage\", ({ level, data }) => {\n      if (level === \"error\" || level === \"critical\" || level === \"alert\") {\n        console.warn(\"[mcp-app]\", data);\n      }\n    });\n    bridge.onopenlink = async ({ url }) => {\n      if (!isSafeExternalUrl(url)) return { isError: true };\n      window.open(url, \"_blank\", \"noopener,noreferrer\");\n      return {};\n    };\n    bridge.oncalltool = async ({ name, arguments: toolArguments }) => {\n      const toolName = normalizeSameServerToolName(app.serverId, name);\n      if (!toolName) {\n        return errorToolResult(\"Cross-server MCP App tool calls are blocked.\");\n      }\n      try {\n        return await postMcpAppEndpoint<CallToolResult>(\"call-tool\", {\n          serverId: app.serverId,\n          toolName,\n          arguments:\n            toolArguments && typeof toolArguments === \"object\"\n              ? toolArguments\n              : {},\n        });\n      } catch (err: any) {\n        return errorToolResult(err?.message ?? \"MCP App tool call failed.\");\n      }\n    };\n    (bridge as any).onlisttools = async () =>\n      postMcpAppEndpoint(\"list-tools\", { serverId: app.serverId });\n    bridge.onreadresource = async ({ uri }) =>\n      postMcpAppEndpoint(\"read-resource\", { serverId: app.serverId, uri });\n    bridge.onlistresources = async () => ({ resources: [] });\n    bridge.onlistresourcetemplates = async () => ({ resourceTemplates: [] });\n    bridge.ondownloadfile = async () => ({ isError: true });\n    bridge.onmessage = async () => ({ isError: true });\n    bridge.onupdatemodelcontext = async () => ({});\n\n    const transport = new PostMessageTransport(\n      iframe.contentWindow,\n      iframe.contentWindow,\n    );\n    setReady(false);\n    setError(null);\n    bridge.connect(transport).catch((err: any) => {\n      if (!closed) {\n        setError(err?.message ?? \"Failed to initialize MCP App.\");\n      }\n    });\n\n    return () => {\n      closed = true;\n      setReady(false);\n      void bridge\n        .teardownResource({}, { timeout: 500 })\n        .catch(() => undefined)\n        .finally(() => {\n          void (bridge as any).close?.().catch?.(() => undefined);\n        });\n    };\n  }, [app, loadedSrcDoc, srcDoc, supportedPermissions, uiMeta.csp]);\n\n  if (!resourceHtml) {\n    return (\n      <div className={cn(\"agent-mcp-app agent-mcp-app--error\", className)}>\n        <IconAlertTriangle size={15} />\n        <span>MCP App resource was not available.</span>\n      </div>\n    );\n  }\n\n  return (\n    <div\n      className={cn(\n        \"agent-mcp-app\",\n        uiMeta.prefersBorder === false && \"agent-mcp-app--flush\",\n        className,\n      )}\n    >\n      {!ready && !error && (\n        <div className=\"agent-mcp-app__loading\">\n          <IconLoader2 size={14} className=\"agent-conversation-spin\" />\n          <span>Loading MCP App</span>\n        </div>\n      )}\n      {error && (\n        <div className=\"agent-mcp-app__error\">\n          <IconAlertTriangle size={15} />\n          <span>{error}</span>\n        </div>\n      )}\n      <iframe\n        ref={iframeRef}\n        title={app.tool?.title ?? app.originalToolName}\n        srcDoc={srcDoc}\n        sandbox={SANDBOX_FLAGS}\n        allow={buildAllowAttribute(supportedPermissions)}\n        style={{ height }}\n        onLoad={() => setLoadedSrcDoc(srcDoc)}\n      />\n    </div>\n  );\n}\n\nfunction resourceUiMeta(app: AgentMcpAppPayload): ResourceUiMeta {\n  const meta = app.resource?._meta;\n  const ui =\n    meta?.ui && typeof meta.ui === \"object\" && !Array.isArray(meta.ui)\n      ? (meta.ui as ResourceUiMeta)\n      : {};\n  return ui;\n}\n\nfunction htmlFromResource(\n  resource: NonNullable<AgentMcpAppPayload[\"resource\"]>,\n): string {\n  if (typeof resource.text === \"string\") return resource.text;\n  if (typeof resource.blob !== \"string\") return \"\";\n  try {\n    if (typeof atob !== \"function\") return \"\";\n    return atob(resource.blob);\n  } catch {\n    return \"\";\n  }\n}\n\nexport function supportedMcpAppPermissions(\n  permissions: McpUiResourcePermissions | undefined,\n): McpUiResourcePermissions {\n  return permissions?.clipboardWrite ? { clipboardWrite: {} } : {};\n}\n\nexport function buildMcpAppCsp(csp: McpUiResourceCsp | undefined): string {\n  const connect = sanitizeCspSources(csp?.connectDomains);\n  const resources = sanitizeCspSources(csp?.resourceDomains);\n  const frames = sanitizeCspSources(csp?.frameDomains);\n  const base = sanitizeCspSources(csp?.baseUriDomains);\n  return [\n    \"default-src 'none'\",\n    `base-uri ${base.length ? base.join(\" \") : \"'none'\"}`,\n    \"form-action 'none'\",\n    `connect-src ${connect.length ? connect.join(\" \") : \"'none'\"}`,\n    `img-src data: blob:${resources.length ? ` ${resources.join(\" \")}` : \"\"}`,\n    `media-src data: blob:${resources.length ? ` ${resources.join(\" \")}` : \"\"}`,\n    `font-src data:${resources.length ? ` ${resources.join(\" \")}` : \"\"}`,\n    `style-src 'unsafe-inline'${resources.length ? ` ${resources.join(\" \")}` : \"\"}`,\n    `script-src 'unsafe-inline'${resources.length ? ` ${resources.join(\" \")}` : \"\"}`,\n    `frame-src ${frames.length ? frames.join(\" \") : \"'none'\"}`,\n  ].join(\"; \");\n}\n\nfunction sanitizeCspSources(values: string[] | undefined): string[] {\n  const out: string[] = [];\n  for (const value of values ?? []) {\n    const source = sanitizeCspSource(value);\n    if (source) out.push(source);\n  }\n  return [...new Set(out)];\n}\n\nfunction sanitizeCspSource(value: string): string | null {\n  const source = value.trim();\n  if (!source || source.includes(\"'\") || /[\\s;]/.test(source)) return null;\n  if (source === \"https:\") return source;\n  if (/^http:\\/\\/(?:localhost|127\\.0\\.0\\.1|\\[::1\\]):\\*$/i.test(source)) {\n    return source;\n  }\n  if (/^https:\\/\\/\\*\\.[a-z0-9.-]+(?::\\d+)?$/i.test(source)) return source;\n  try {\n    const url = new URL(source);\n    if (url.protocol === \"https:\") return url.origin;\n    if (\n      url.protocol === \"http:\" &&\n      [\"localhost\", \"127.0.0.1\", \"::1\"].includes(url.hostname)\n    ) {\n      return url.origin;\n    }\n  } catch {\n    return null;\n  }\n  return null;\n}\n\nfunction injectCsp(html: string, csp: string): string {\n  const meta = `<meta http-equiv=\"Content-Security-Policy\" content=\"${escapeAttribute(csp)}\">`;\n  if (/<head\\b[^>]*>/i.test(html)) {\n    return html.replace(/<head\\b[^>]*>/i, (head) => `${head}${meta}`);\n  }\n  if (/<html\\b[^>]*>/i.test(html)) {\n    return html.replace(\n      /<html\\b[^>]*>/i,\n      (htmlTag) => `${htmlTag}<head>${meta}</head>`,\n    );\n  }\n  return `<!doctype html><html><head>${meta}</head><body>${html}</body></html>`;\n}\n\nfunction escapeAttribute(value: string): string {\n  return value\n    .replace(/&/g, \"&amp;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/</g, \"&lt;\");\n}\n\nfunction buildHostContext(app: AgentMcpAppPayload) {\n  const root =\n    typeof window !== \"undefined\"\n      ? getComputedStyle(document.documentElement)\n      : null;\n  const cssVar = (name: string) => root?.getPropertyValue(name).trim() || \"\";\n  const theme =\n    typeof document !== \"undefined\" &&\n    (document.documentElement.classList.contains(\"dark\") ||\n      window.matchMedia?.(\"(prefers-color-scheme: dark)\").matches)\n      ? \"dark\"\n      : \"light\";\n  return {\n    toolInfo: app.tool\n      ? {\n          tool: {\n            name: app.originalToolName,\n            description: app.tool.description,\n            inputSchema: app.tool.inputSchema ?? {\n              type: \"object\",\n              properties: {},\n            },\n            ...(app.tool._meta ? { _meta: app.tool._meta } : {}),\n          },\n        }\n      : undefined,\n    theme,\n    displayMode: \"inline\",\n    availableDisplayModes: [\"inline\"],\n    platform: \"web\",\n    userAgent: \"agent-native\",\n    locale: typeof navigator !== \"undefined\" ? navigator.language : undefined,\n    timeZone: Intl.DateTimeFormat().resolvedOptions().timeZone,\n    containerDimensions: {\n      maxHeight: MAX_IFRAME_HEIGHT,\n      maxWidth: typeof window !== \"undefined\" ? window.innerWidth : undefined,\n    },\n    styles: {\n      variables: {\n        \"--color-background-primary\": hslVar(cssVar(\"--background\")),\n        \"--color-background-secondary\": hslVar(cssVar(\"--muted\")),\n        \"--color-text-primary\": hslVar(cssVar(\"--foreground\")),\n        \"--color-text-secondary\": hslVar(cssVar(\"--muted-foreground\")),\n        \"--color-border-primary\": hslVar(cssVar(\"--border\")),\n        \"--font-sans\": cssVar(\"--font-sans\") || \"ui-sans-serif, system-ui\",\n        \"--font-mono\":\n          cssVar(\"--font-mono\") ||\n          \"ui-monospace, SFMono-Regular, Menlo, monospace\",\n        \"--border-radius-md\": cssVar(\"--radius\") || \"8px\",\n      },\n    },\n  };\n}\n\nfunction hslVar(value: string): string | undefined {\n  return value ? `hsl(${value})` : undefined;\n}\n\nfunction normalizeSameServerToolName(\n  serverId: string,\n  rawName: string,\n): string | null {\n  if (!rawName.trim()) return null;\n  const prefix = `mcp__${serverId}__`;\n  if (rawName.startsWith(\"mcp__\")) {\n    return rawName.startsWith(prefix) ? rawName.slice(prefix.length) : null;\n  }\n  return rawName;\n}\n\nasync function postMcpAppEndpoint<T>(\n  endpoint: \"call-tool\" | \"list-tools\" | \"read-resource\",\n  body: Record<string, unknown>,\n): Promise<T> {\n  const response = await fetch(\n    agentNativePath(`/_agent-native/mcp/apps/${endpoint}`),\n    {\n      method: \"POST\",\n      credentials: \"same-origin\",\n      headers: { \"Content-Type\": \"application/json\" },\n      body: JSON.stringify(body),\n    },\n  );\n  if (!response.ok) {\n    let message = `MCP App request failed (${response.status})`;\n    try {\n      const json = await response.json();\n      if (typeof json?.error === \"string\") message = json.error;\n    } catch {\n      // ignore\n    }\n    throw new Error(message);\n  }\n  return (await response.json()) as T;\n}\n\nfunction errorToolResult(message: string): CallToolResult {\n  return {\n    content: [{ type: \"text\", text: `Error: ${message}` }],\n    isError: true,\n  };\n}\n\nfunction isSafeExternalUrl(value: string): boolean {\n  try {\n    const url = new URL(value);\n    return url.protocol === \"http:\" || url.protocol === \"https:\";\n  } catch {\n    return false;\n  }\n}\n"]}
+{"version":3,"file":"McpAppRenderer.js","sourceRoot":"","sources":["../../../src/client/mcp-apps/McpAppRenderer.tsx"],"names":[],"mappings":";AAAA,OAAc,EACZ,WAAW,EACX,SAAS,EACT,OAAO,EACP,MAAM,EACN,QAAQ,GACT,MAAM,OAAO,CAAC;AACf,OAAO,EACL,SAAS,EACT,oBAAoB,EACpB,mBAAmB,GAGpB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAErE,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEjC,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AACjD,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,aAAa,GAAG,wCAAwC,CAAC;AAa/D,MAAM,UAAU,cAAc,CAAC,EAAE,GAAG,EAAE,SAAS,EAAuB;IACpE,MAAM,SAAS,GAAG,MAAM,CAA2B,IAAI,CAAC,CAAC;IACzD,MAAM,gBAAgB,GAAG,MAAM,CAAC,6BAA6B,CAAC,CAAC;IAC/D,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,6BAA6B,CAAC,CAAC;IACpE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,MAAM,oBAAoB,GAAG,OAAO,CAClC,GAAG,EAAE,CAAC,0BAA0B,CAAC,MAAM,CAAC,WAAW,CAAC,EACpD,CAAC,MAAM,CAAC,WAAW,CAAC,CACrB,CAAC;IACF,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,CACpB,GAAG,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EACxD,CAAC,YAAY,EAAE,GAAG,CAAC,CACpB,CAAC;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,gBAAgB,CAAC,OAAO,GAAG,6BAA6B,CAAC;QACzD,SAAS,CACP,iBAAiB,CACf,6BAA6B,EAC7B,qBAAqB,CAAC,SAAS,CAAC,OAAO,CAAC,CACzC,CACF,CAAC;QACF,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChB,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,aAAsB,EAAE,EAAE;QACzD,IACE,OAAO,aAAa,KAAK,QAAQ;YACjC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC9B,aAAa,GAAG,CAAC,EACjB,CAAC;YACD,gBAAgB,CAAC,OAAO,GAAG,aAAa,CAAC;QAC3C,CAAC;QACD,SAAS,CACP,iBAAiB,CACf,gBAAgB,CAAC,OAAO,EACxB,qBAAqB,CAAC,SAAS,CAAC,OAAO,CAAC,CACzC,CACF,CAAC;IACJ,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,IAAI,KAAK;gBAAE,oBAAoB,CAAC,KAAK,CAAC,CAAC;YACvC,KAAK,GAAG,qBAAqB,CAAC,GAAG,EAAE;gBACjC,KAAK,GAAG,CAAC,CAAC;gBACV,WAAW,EAAE,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,EAAE,CAAC;QACT,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE;YACxD,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAElD,MAAM,QAAQ,GACZ,OAAO,cAAc,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5E,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC;YAChD,IAAI,MAAM;gBAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,GAAG,EAAE;YACV,IAAI,KAAK;gBAAE,oBAAoB,CAAC,KAAK,CAAC,CAAC;YACvC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC7C,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC7D,QAAQ,CAAC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACrD,QAAQ,EAAE,UAAU,EAAE,CAAC;QACzB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IAE1B,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC,MAAM,EAAE,aAAa,IAAI,CAAC,MAAM,IAAI,YAAY,KAAK,MAAM;YAAE,OAAO;QAEzE,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,IAAI,EACJ,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,EAC1C;YACE,SAAS,EAAE,EAAE;YACb,WAAW,EAAE,EAAE;YACf,eAAe,EAAE,EAAE;YACnB,OAAO,EAAE,EAAE;YACX,OAAO,EAAE;gBACP,WAAW,EAAE,oBAAoB;gBACjC,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,EAAE;aACtB;SACF,EACD;YACE,WAAW,EAAE,gBAAgB,CAC3B,GAAG,EACH,qBAAqB,CAAC,MAAM,CAAC,CACvB;SACT,CACF,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;YAC/D,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnE,OAAO;YACT,CAAC;YACD,WAAW,CAAC,UAAU,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE;YAC1C,IAAI,MAAM;gBAAE,OAAO;YACnB,QAAQ,CAAC,IAAI,CAAC,CAAC;YACf,KAAK,MAAM,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;YACxD,KAAK,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,UAA4B,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;YAC5D,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;gBACnE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,UAAU,GAAG,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACpC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC;YAClD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,CAAC,UAAU,GAAG,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,EAAE;YAC/D,MAAM,QAAQ,GAAG,2BAA2B,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACjE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,eAAe,CAAC,8CAA8C,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,kBAAkB,CAAiB,WAAW,EAAE;oBAC3D,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,QAAQ;oBACR,SAAS,EACP,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ;wBAChD,CAAC,CAAC,aAAa;wBACf,CAAC,CAAC,EAAE;iBACT,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO,eAAe,CAAC,GAAG,EAAE,OAAO,IAAI,2BAA2B,CAAC,CAAC;YACtE,CAAC;QACH,CAAC,CAAC;QACD,MAAc,CAAC,WAAW,GAAG,KAAK,IAAI,EAAE,CACvC,kBAAkB,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,cAAc,GAAG,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CACxC,kBAAkB,CAAC,eAAe,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,eAAe,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QACzD,MAAM,CAAC,uBAAuB,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,cAAc,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,SAAS,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,CAAC,oBAAoB,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAE/C,MAAM,SAAS,GAAG,IAAI,oBAAoB,CACxC,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,aAAa,CACrB,CAAC;QACF,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,GAAQ,EAAE,EAAE;YAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CAAC,GAAG,EAAE,OAAO,IAAI,+BAA+B,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,GAAG,EAAE;YACV,MAAM,GAAG,IAAI,CAAC;YACd,QAAQ,CAAC,KAAK,CAAC,CAAC;YAChB,KAAK,MAAM;iBACR,gBAAgB,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;iBACtC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;iBACtB,OAAO,CAAC,GAAG,EAAE;gBACZ,KAAM,MAAc,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1D,CAAC,CAAC,CAAC;QACP,CAAC,CAAC;IACJ,CAAC,EAAE;QACD,GAAG;QACH,WAAW;QACX,YAAY;QACZ,MAAM;QACN,oBAAoB;QACpB,MAAM,CAAC,GAAG;KACX,CAAC,CAAC;IAEH,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,CACL,eAAK,SAAS,EAAE,EAAE,CAAC,oCAAoC,EAAE,SAAS,CAAC,aACjE,KAAC,iBAAiB,IAAC,IAAI,EAAE,EAAE,GAAI,EAC/B,iEAAgD,IAC5C,CACP,CAAC;IACJ,CAAC;IAED,OAAO,CACL,eACE,SAAS,EAAE,EAAE,CACX,eAAe,EACf,MAAM,CAAC,aAAa,KAAK,KAAK,IAAI,sBAAsB,EACxD,SAAS,CACV,aAEA,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,CACnB,eAAK,SAAS,EAAC,wBAAwB,aACrC,KAAC,WAAW,IAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAC,yBAAyB,GAAG,EAC7D,6CAA4B,IACxB,CACP,EACA,KAAK,IAAI,CACR,eAAK,SAAS,EAAC,sBAAsB,aACnC,KAAC,iBAAiB,IAAC,IAAI,EAAE,EAAE,GAAI,EAC/B,yBAAO,KAAK,GAAQ,IAChB,CACP,EACD,iBACE,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,GAAG,CAAC,gBAAgB,EAC9C,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,mBAAmB,CAAC,oBAAoB,CAAC,EAChD,KAAK,EAAE,EAAE,MAAM,EAAE,EACjB,MAAM,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,GACrC,IACE,CACP,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAuB;IAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC;IACjC,MAAM,EAAE,GACN,IAAI,EAAE,EAAE,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChE,CAAC,CAAE,IAAI,CAAC,EAAqB;QAC7B,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAqD;IAErD,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC;IAC5D,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACjD,IAAI,CAAC;QACH,IAAI,OAAO,IAAI,KAAK,UAAU;YAAE,OAAO,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,WAAiD;IAEjD,OAAO,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAiC;IAC9D,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACrD,OAAO;QACL,oBAAoB;QACpB,YAAY,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACrD,oBAAoB;QACpB,eAAe,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC9D,sBAAsB,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QACzE,wBAAwB,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3E,iBAAiB,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QACpE,4BAA4B,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/E,6BAA6B,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QAChF,aAAa,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC3D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA4B;IACtD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACzE,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IACvC,IAAI,mDAAmD,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACrE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,uCAAuC,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC;QACjD,IACE,GAAG,CAAC,QAAQ,KAAK,OAAO;YACxB,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EACxD,CAAC;YACD,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,GAAW;IAC1C,MAAM,IAAI,GAAG,uDAAuD,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;IAC7F,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,OAAO,CACjB,gBAAgB,EAChB,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,SAAS,IAAI,SAAS,CAC9C,CAAC;IACJ,CAAC;IACD,OAAO,8BAA8B,IAAI,gBAAgB,IAAI,gBAAgB,CAAC;AAChF,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAuB,EAAE,SAAiB;IAClE,MAAM,IAAI,GACR,OAAO,MAAM,KAAK,WAAW;QAC3B,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,eAAe,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3E,MAAM,KAAK,GACT,OAAO,QAAQ,KAAK,WAAW;QAC/B,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;YAClD,MAAM,CAAC,UAAU,EAAE,CAAC,8BAA8B,CAAC,CAAC,OAAO,CAAC;QAC5D,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,OAAO,CAAC;IACd,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,IAAI;YAChB,CAAC,CAAC;gBACE,IAAI,EAAE;oBACJ,IAAI,EAAE,GAAG,CAAC,gBAAgB;oBAC1B,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW;oBACjC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI;wBACnC,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE,EAAE;qBACf;oBACD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrD;aACF;YACH,CAAC,CAAC,SAAS;QACb,KAAK;QACL,WAAW,EAAE,QAAQ;QACrB,qBAAqB,EAAE,CAAC,QAAQ,CAAC;QACjC,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,cAAc;QACzB,MAAM,EAAE,OAAO,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACzE,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,QAAQ;QAC1D,mBAAmB,EAAE;YACnB,SAAS;YACT,QAAQ,EAAE,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;SACxE;QACD,MAAM,EAAE;YACN,SAAS,EAAE;gBACT,4BAA4B,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBAC5D,8BAA8B,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACzD,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBACtD,wBAAwB,EAAE,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBAC9D,wBAAwB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACpD,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI,0BAA0B;gBAClE,aAAa,EACX,MAAM,CAAC,aAAa,CAAC;oBACrB,gDAAgD;gBAClD,oBAAoB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK;aAClD;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC;AAED,SAAS,2BAA2B,CAClC,QAAgB,EAChB,OAAe;IAEf,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,MAAM,GAAG,QAAQ,QAAQ,IAAI,CAAC;IACpC,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,QAAsD,EACtD,IAA6B;IAE7B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,eAAe,CAAC,2BAA2B,QAAQ,EAAE,CAAC,EACtD;QACE,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,aAAa;QAC1B,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,OAAO,GAAG,2BAA2B,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ;gBAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;AACtC,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;QACtD,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QACrE,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAuC;IAEvC,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,6BAA6B,CAAC;IAExE,MAAM,cAAc,GAClB,oBAAoB,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC;QACnD,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC;QACxC,6BAA6B,CAAC;IAEhC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QACnC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC;QACrC,CAAC,CAAC,eAAe,CAAC;IACpB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,aAAqB,EACrB,gBAAwB;IAExB,MAAM,SAAS,GACb,oBAAoB,CAAC,gBAAgB,CAAC,IAAI,6BAA6B,CAAC;IAC1E,MAAM,OAAO,GACX,oBAAoB,CAAC,aAAa,CAAC,IAAI,6BAA6B,CAAC;IACvE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC","sourcesContent":["import React, {\n  useCallback,\n  useEffect,\n  useMemo,\n  useRef,\n  useState,\n} from \"react\";\nimport {\n  AppBridge,\n  PostMessageTransport,\n  buildAllowAttribute,\n  type McpUiResourceCsp,\n  type McpUiResourcePermissions,\n} from \"@modelcontextprotocol/ext-apps/app-bridge\";\nimport type { CallToolResult } from \"@modelcontextprotocol/sdk/types.js\";\nimport { IconAlertTriangle, IconLoader2 } from \"@tabler/icons-react\";\nimport type { AgentMcpAppPayload } from \"../../mcp-client/app-result.js\";\nimport { agentNativePath } from \"../api-path.js\";\nimport { cn } from \"../utils.js\";\n\nexport const DEFAULT_MCP_APP_IFRAME_HEIGHT = 650;\nconst MIN_IFRAME_HEIGHT = 220;\nconst VIEWPORT_MARGIN = 16;\nconst SANDBOX_FLAGS = \"allow-scripts allow-forms allow-popups\";\n\nexport interface McpAppRendererProps {\n  app: AgentMcpAppPayload;\n  className?: string;\n}\n\ntype ResourceUiMeta = {\n  csp?: McpUiResourceCsp;\n  permissions?: McpUiResourcePermissions;\n  prefersBorder?: boolean;\n};\n\nexport function McpAppRenderer({ app, className }: McpAppRendererProps) {\n  const iframeRef = useRef<HTMLIFrameElement | null>(null);\n  const desiredHeightRef = useRef(DEFAULT_MCP_APP_IFRAME_HEIGHT);\n  const [loadedSrcDoc, setLoadedSrcDoc] = useState<string | null>(null);\n  const [height, setHeight] = useState(DEFAULT_MCP_APP_IFRAME_HEIGHT);\n  const [error, setError] = useState<string | null>(null);\n  const [ready, setReady] = useState(false);\n  const resourceHtml = app.resource ? htmlFromResource(app.resource) : \"\";\n  const uiMeta = useMemo(() => resourceUiMeta(app), [app]);\n  const supportedPermissions = useMemo(\n    () => supportedMcpAppPermissions(uiMeta.permissions),\n    [uiMeta.permissions],\n  );\n  const csp = buildMcpAppCsp(uiMeta.csp);\n  const srcDoc = useMemo(\n    () => (resourceHtml ? injectCsp(resourceHtml, csp) : \"\"),\n    [resourceHtml, csp],\n  );\n\n  useEffect(() => {\n    desiredHeightRef.current = DEFAULT_MCP_APP_IFRAME_HEIGHT;\n    setHeight(\n      clampMcpAppHeight(\n        DEFAULT_MCP_APP_IFRAME_HEIGHT,\n        availableMcpAppHeight(iframeRef.current),\n      ),\n    );\n    setLoadedSrcDoc(null);\n    setReady(false);\n    setError(null);\n  }, [srcDoc]);\n\n  const applyHeight = useCallback((desiredHeight?: number) => {\n    if (\n      typeof desiredHeight === \"number\" &&\n      Number.isFinite(desiredHeight) &&\n      desiredHeight > 0\n    ) {\n      desiredHeightRef.current = desiredHeight;\n    }\n    setHeight(\n      clampMcpAppHeight(\n        desiredHeightRef.current,\n        availableMcpAppHeight(iframeRef.current),\n      ),\n    );\n  }, []);\n\n  useEffect(() => {\n    let frame = 0;\n    const update = () => {\n      if (frame) cancelAnimationFrame(frame);\n      frame = requestAnimationFrame(() => {\n        frame = 0;\n        applyHeight();\n      });\n    };\n\n    update();\n    window.addEventListener(\"resize\", update, { passive: true });\n    window.visualViewport?.addEventListener(\"resize\", update, {\n      passive: true,\n    });\n    document.addEventListener(\"scroll\", update, true);\n\n    const observer =\n      typeof ResizeObserver !== \"undefined\" ? new ResizeObserver(update) : null;\n    if (observer) {\n      observer.observe(document.documentElement);\n      const parent = iframeRef.current?.parentElement;\n      if (parent) observer.observe(parent);\n    }\n\n    return () => {\n      if (frame) cancelAnimationFrame(frame);\n      window.removeEventListener(\"resize\", update);\n      window.visualViewport?.removeEventListener(\"resize\", update);\n      document.removeEventListener(\"scroll\", update, true);\n      observer?.disconnect();\n    };\n  }, [applyHeight, srcDoc]);\n\n  useEffect(() => {\n    const iframe = iframeRef.current;\n    if (!iframe?.contentWindow || !srcDoc || loadedSrcDoc !== srcDoc) return;\n\n    let closed = false;\n    const bridge = new AppBridge(\n      null,\n      { name: \"Agent Native\", version: \"1.0.0\" },\n      {\n        openLinks: {},\n        serverTools: {},\n        serverResources: {},\n        logging: {},\n        sandbox: {\n          permissions: supportedPermissions,\n          csp: uiMeta.csp ?? {},\n        },\n      },\n      {\n        hostContext: buildHostContext(\n          app,\n          availableMcpAppHeight(iframe),\n        ) as any,\n      },\n    );\n\n    bridge.addEventListener(\"sizechange\", ({ height: nextHeight }) => {\n      if (typeof nextHeight !== \"number\" || !Number.isFinite(nextHeight)) {\n        return;\n      }\n      applyHeight(nextHeight);\n    });\n    bridge.addEventListener(\"initialized\", () => {\n      if (closed) return;\n      setReady(true);\n      void bridge.sendToolInput({ arguments: app.toolInput });\n      void bridge.sendToolResult(app.toolResult as CallToolResult);\n    });\n    bridge.addEventListener(\"loggingmessage\", ({ level, data }) => {\n      if (level === \"error\" || level === \"critical\" || level === \"alert\") {\n        console.warn(\"[mcp-app]\", data);\n      }\n    });\n    bridge.onopenlink = async ({ url }) => {\n      if (!isSafeExternalUrl(url)) return { isError: true };\n      window.open(url, \"_blank\", \"noopener,noreferrer\");\n      return {};\n    };\n    bridge.oncalltool = async ({ name, arguments: toolArguments }) => {\n      const toolName = normalizeSameServerToolName(app.serverId, name);\n      if (!toolName) {\n        return errorToolResult(\"Cross-server MCP App tool calls are blocked.\");\n      }\n      try {\n        return await postMcpAppEndpoint<CallToolResult>(\"call-tool\", {\n          serverId: app.serverId,\n          toolName,\n          arguments:\n            toolArguments && typeof toolArguments === \"object\"\n              ? toolArguments\n              : {},\n        });\n      } catch (err: any) {\n        return errorToolResult(err?.message ?? \"MCP App tool call failed.\");\n      }\n    };\n    (bridge as any).onlisttools = async () =>\n      postMcpAppEndpoint(\"list-tools\", { serverId: app.serverId });\n    bridge.onreadresource = async ({ uri }) =>\n      postMcpAppEndpoint(\"read-resource\", { serverId: app.serverId, uri });\n    bridge.onlistresources = async () => ({ resources: [] });\n    bridge.onlistresourcetemplates = async () => ({ resourceTemplates: [] });\n    bridge.ondownloadfile = async () => ({ isError: true });\n    bridge.onmessage = async () => ({ isError: true });\n    bridge.onupdatemodelcontext = async () => ({});\n\n    const transport = new PostMessageTransport(\n      iframe.contentWindow,\n      iframe.contentWindow,\n    );\n    setReady(false);\n    setError(null);\n    bridge.connect(transport).catch((err: any) => {\n      if (!closed) {\n        setError(err?.message ?? \"Failed to initialize MCP App.\");\n      }\n    });\n\n    return () => {\n      closed = true;\n      setReady(false);\n      void bridge\n        .teardownResource({}, { timeout: 500 })\n        .catch(() => undefined)\n        .finally(() => {\n          void (bridge as any).close?.().catch?.(() => undefined);\n        });\n    };\n  }, [\n    app,\n    applyHeight,\n    loadedSrcDoc,\n    srcDoc,\n    supportedPermissions,\n    uiMeta.csp,\n  ]);\n\n  if (!resourceHtml) {\n    return (\n      <div className={cn(\"agent-mcp-app agent-mcp-app--error\", className)}>\n        <IconAlertTriangle size={15} />\n        <span>MCP App resource was not available.</span>\n      </div>\n    );\n  }\n\n  return (\n    <div\n      className={cn(\n        \"agent-mcp-app\",\n        uiMeta.prefersBorder === false && \"agent-mcp-app--flush\",\n        className,\n      )}\n    >\n      {!ready && !error && (\n        <div className=\"agent-mcp-app__loading\">\n          <IconLoader2 size={14} className=\"agent-conversation-spin\" />\n          <span>Loading MCP App</span>\n        </div>\n      )}\n      {error && (\n        <div className=\"agent-mcp-app__error\">\n          <IconAlertTriangle size={15} />\n          <span>{error}</span>\n        </div>\n      )}\n      <iframe\n        ref={iframeRef}\n        title={app.tool?.title ?? app.originalToolName}\n        srcDoc={srcDoc}\n        sandbox={SANDBOX_FLAGS}\n        allow={buildAllowAttribute(supportedPermissions)}\n        style={{ height }}\n        onLoad={() => setLoadedSrcDoc(srcDoc)}\n      />\n    </div>\n  );\n}\n\nfunction resourceUiMeta(app: AgentMcpAppPayload): ResourceUiMeta {\n  const meta = app.resource?._meta;\n  const ui =\n    meta?.ui && typeof meta.ui === \"object\" && !Array.isArray(meta.ui)\n      ? (meta.ui as ResourceUiMeta)\n      : {};\n  return ui;\n}\n\nfunction htmlFromResource(\n  resource: NonNullable<AgentMcpAppPayload[\"resource\"]>,\n): string {\n  if (typeof resource.text === \"string\") return resource.text;\n  if (typeof resource.blob !== \"string\") return \"\";\n  try {\n    if (typeof atob !== \"function\") return \"\";\n    return atob(resource.blob);\n  } catch {\n    return \"\";\n  }\n}\n\nexport function supportedMcpAppPermissions(\n  permissions: McpUiResourcePermissions | undefined,\n): McpUiResourcePermissions {\n  return permissions?.clipboardWrite ? { clipboardWrite: {} } : {};\n}\n\nexport function buildMcpAppCsp(csp: McpUiResourceCsp | undefined): string {\n  const connect = sanitizeCspSources(csp?.connectDomains);\n  const resources = sanitizeCspSources(csp?.resourceDomains);\n  const frames = sanitizeCspSources(csp?.frameDomains);\n  const base = sanitizeCspSources(csp?.baseUriDomains);\n  return [\n    \"default-src 'none'\",\n    `base-uri ${base.length ? base.join(\" \") : \"'none'\"}`,\n    \"form-action 'none'\",\n    `connect-src ${connect.length ? connect.join(\" \") : \"'none'\"}`,\n    `img-src data: blob:${resources.length ? ` ${resources.join(\" \")}` : \"\"}`,\n    `media-src data: blob:${resources.length ? ` ${resources.join(\" \")}` : \"\"}`,\n    `font-src data:${resources.length ? ` ${resources.join(\" \")}` : \"\"}`,\n    `style-src 'unsafe-inline'${resources.length ? ` ${resources.join(\" \")}` : \"\"}`,\n    `script-src 'unsafe-inline'${resources.length ? ` ${resources.join(\" \")}` : \"\"}`,\n    `frame-src ${frames.length ? frames.join(\" \") : \"'none'\"}`,\n  ].join(\"; \");\n}\n\nfunction sanitizeCspSources(values: string[] | undefined): string[] {\n  const out: string[] = [];\n  for (const value of values ?? []) {\n    const source = sanitizeCspSource(value);\n    if (source) out.push(source);\n  }\n  return [...new Set(out)];\n}\n\nfunction sanitizeCspSource(value: string): string | null {\n  const source = value.trim();\n  if (!source || source.includes(\"'\") || /[\\s;]/.test(source)) return null;\n  if (source === \"https:\") return source;\n  if (/^http:\\/\\/(?:localhost|127\\.0\\.0\\.1|\\[::1\\]):\\*$/i.test(source)) {\n    return source;\n  }\n  if (/^https:\\/\\/\\*\\.[a-z0-9.-]+(?::\\d+)?$/i.test(source)) return source;\n  try {\n    const url = new URL(source);\n    if (url.protocol === \"https:\") return url.origin;\n    if (\n      url.protocol === \"http:\" &&\n      [\"localhost\", \"127.0.0.1\", \"::1\"].includes(url.hostname)\n    ) {\n      return url.origin;\n    }\n  } catch {\n    return null;\n  }\n  return null;\n}\n\nfunction injectCsp(html: string, csp: string): string {\n  const meta = `<meta http-equiv=\"Content-Security-Policy\" content=\"${escapeAttribute(csp)}\">`;\n  if (/<head\\b[^>]*>/i.test(html)) {\n    return html.replace(/<head\\b[^>]*>/i, (head) => `${head}${meta}`);\n  }\n  if (/<html\\b[^>]*>/i.test(html)) {\n    return html.replace(\n      /<html\\b[^>]*>/i,\n      (htmlTag) => `${htmlTag}<head>${meta}</head>`,\n    );\n  }\n  return `<!doctype html><html><head>${meta}</head><body>${html}</body></html>`;\n}\n\nfunction escapeAttribute(value: string): string {\n  return value\n    .replace(/&/g, \"&amp;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/</g, \"&lt;\");\n}\n\nfunction buildHostContext(app: AgentMcpAppPayload, maxHeight: number) {\n  const root =\n    typeof window !== \"undefined\"\n      ? getComputedStyle(document.documentElement)\n      : null;\n  const cssVar = (name: string) => root?.getPropertyValue(name).trim() || \"\";\n  const theme =\n    typeof document !== \"undefined\" &&\n    (document.documentElement.classList.contains(\"dark\") ||\n      window.matchMedia?.(\"(prefers-color-scheme: dark)\").matches)\n      ? \"dark\"\n      : \"light\";\n  return {\n    toolInfo: app.tool\n      ? {\n          tool: {\n            name: app.originalToolName,\n            description: app.tool.description,\n            inputSchema: app.tool.inputSchema ?? {\n              type: \"object\",\n              properties: {},\n            },\n            ...(app.tool._meta ? { _meta: app.tool._meta } : {}),\n          },\n        }\n      : undefined,\n    theme,\n    displayMode: \"inline\",\n    availableDisplayModes: [\"inline\"],\n    platform: \"web\",\n    userAgent: \"agent-native\",\n    locale: typeof navigator !== \"undefined\" ? navigator.language : undefined,\n    timeZone: Intl.DateTimeFormat().resolvedOptions().timeZone,\n    containerDimensions: {\n      maxHeight,\n      maxWidth: typeof window !== \"undefined\" ? window.innerWidth : undefined,\n    },\n    styles: {\n      variables: {\n        \"--color-background-primary\": hslVar(cssVar(\"--background\")),\n        \"--color-background-secondary\": hslVar(cssVar(\"--muted\")),\n        \"--color-text-primary\": hslVar(cssVar(\"--foreground\")),\n        \"--color-text-secondary\": hslVar(cssVar(\"--muted-foreground\")),\n        \"--color-border-primary\": hslVar(cssVar(\"--border\")),\n        \"--font-sans\": cssVar(\"--font-sans\") || \"ui-sans-serif, system-ui\",\n        \"--font-mono\":\n          cssVar(\"--font-mono\") ||\n          \"ui-monospace, SFMono-Regular, Menlo, monospace\",\n        \"--border-radius-md\": cssVar(\"--radius\") || \"8px\",\n      },\n    },\n  };\n}\n\nfunction hslVar(value: string): string | undefined {\n  return value ? `hsl(${value})` : undefined;\n}\n\nfunction normalizeSameServerToolName(\n  serverId: string,\n  rawName: string,\n): string | null {\n  if (!rawName.trim()) return null;\n  const prefix = `mcp__${serverId}__`;\n  if (rawName.startsWith(\"mcp__\")) {\n    return rawName.startsWith(prefix) ? rawName.slice(prefix.length) : null;\n  }\n  return rawName;\n}\n\nasync function postMcpAppEndpoint<T>(\n  endpoint: \"call-tool\" | \"list-tools\" | \"read-resource\",\n  body: Record<string, unknown>,\n): Promise<T> {\n  const response = await fetch(\n    agentNativePath(`/_agent-native/mcp/apps/${endpoint}`),\n    {\n      method: \"POST\",\n      credentials: \"same-origin\",\n      headers: { \"Content-Type\": \"application/json\" },\n      body: JSON.stringify(body),\n    },\n  );\n  if (!response.ok) {\n    let message = `MCP App request failed (${response.status})`;\n    try {\n      const json = await response.json();\n      if (typeof json?.error === \"string\") message = json.error;\n    } catch {\n      // ignore\n    }\n    throw new Error(message);\n  }\n  return (await response.json()) as T;\n}\n\nfunction errorToolResult(message: string): CallToolResult {\n  return {\n    content: [{ type: \"text\", text: `Error: ${message}` }],\n    isError: true,\n  };\n}\n\nfunction finitePositiveNumber(value: unknown): number | null {\n  return typeof value === \"number\" && Number.isFinite(value) && value > 0\n    ? value\n    : null;\n}\n\nexport function availableMcpAppHeight(\n  element: HTMLElement | null | undefined,\n): number {\n  if (typeof window === \"undefined\") return DEFAULT_MCP_APP_IFRAME_HEIGHT;\n\n  const viewportHeight =\n    finitePositiveNumber(window.visualViewport?.height) ??\n    finitePositiveNumber(window.innerHeight) ??\n    DEFAULT_MCP_APP_IFRAME_HEIGHT;\n\n  if (!element) {\n    return Math.max(1, Math.floor(viewportHeight - VIEWPORT_MARGIN * 2));\n  }\n\n  const rect = element.getBoundingClientRect();\n  const top = Number.isFinite(rect.top)\n    ? Math.max(VIEWPORT_MARGIN, rect.top)\n    : VIEWPORT_MARGIN;\n  return Math.max(1, Math.floor(viewportHeight - top - VIEWPORT_MARGIN));\n}\n\nexport function clampMcpAppHeight(\n  desiredHeight: number,\n  maxVisibleHeight: number,\n): number {\n  const maxHeight =\n    finitePositiveNumber(maxVisibleHeight) ?? DEFAULT_MCP_APP_IFRAME_HEIGHT;\n  const desired =\n    finitePositiveNumber(desiredHeight) ?? DEFAULT_MCP_APP_IFRAME_HEIGHT;\n  const minimum = Math.min(MIN_IFRAME_HEIGHT, maxHeight);\n  return Math.max(minimum, Math.min(maxHeight, Math.ceil(desired)));\n}\n\nfunction isSafeExternalUrl(value: string): boolean {\n  try {\n    const url = new URL(value);\n    return url.protocol === \"http:\" || url.protocol === \"https:\";\n  } catch {\n    return false;\n  }\n}\n"]}

package/dist/client/theme.js

@@ -8,7 +8,7 @@ function normalizeDefaultTheme(theme) {
 export function getThemeInitScript(defaultTheme = "system", enableSystem = true) {
     const safeDefaultTheme = normalizeDefaultTheme(defaultTheme);
     const systemEnabled = enableSystem ? "true" : "false";
-    const themeScript = `(function(){try{var defaultTheme=${JSON.stringify(safeDefaultTheme)};var enableSystem=${systemEnabled};var stored=window.localStorage.getItem('theme');var valid=stored==='light'||stored==='dark'||stored==='system'||stored==='auto';var mode=valid?stored:defaultTheme;if(mode==='auto')mode='system';if(!enableSystem&&mode==='system')mode=defaultTheme==='system'?'light':defaultTheme;if(!valid){window.localStorage.removeItem('theme')}else if(stored!==mode){window.localStorage.setItem('theme',mode)}var prefersDark=enableSystem&&mode==='system'&&window.matchMedia&&window.matchMedia('(prefers-color-scheme: dark)').matches;var resolved=mode==='system'?(prefersDark?'dark':'light'):mode;var root=document.documentElement;root.classList.remove('light','dark');root.classList.add(resolved);root.setAttribute('data-theme',resolved);root.style.colorScheme=resolved;var appearance=window.localStorage.getItem('appearance');var appearanceValid=appearance==='warm'||appearance==='ocean'||appearance==='forest'||appearance==='rose'||appearance==='slate';if(appearanceValid){root.setAttribute('data-appearance',appearance)}else{root.removeAttribute('data-appearance');if(appearance!==null)window.localStorage.removeItem('appearance')}}catch(e){}})();`;
+    const themeScript = `(function(){function m(){var d={};return{get length(){return Object.keys(d).length},key:function(i){return Object.keys(d)[i]||null},getItem:function(k){k=String(k);return Object.prototype.hasOwnProperty.call(d,k)?d[k]:null},setItem:function(k,v){d[String(k)]=String(v)},removeItem:function(k){delete d[String(k)]},clear:function(){d={}}}}function s(n){try{var x=window[n],p='__an_storage_probe__';x.setItem(p,'1');x.removeItem(p)}catch(e){try{Object.defineProperty(window,n,{configurable:true,value:m()})}catch(_){}}}s('localStorage');s('sessionStorage');try{var defaultTheme=${JSON.stringify(safeDefaultTheme)};var enableSystem=${systemEnabled};var stored=window.localStorage.getItem('theme');var valid=stored==='light'||stored==='dark'||stored==='system'||stored==='auto';var mode=valid?stored:defaultTheme;if(mode==='auto')mode='system';if(!enableSystem&&mode==='system')mode=defaultTheme==='system'?'light':defaultTheme;if(!valid){window.localStorage.removeItem('theme')}else if(stored!==mode){window.localStorage.setItem('theme',mode)}var prefersDark=enableSystem&&mode==='system'&&window.matchMedia&&window.matchMedia('(prefers-color-scheme: dark)').matches;var resolved=mode==='system'?(prefersDark?'dark':'light'):mode;var root=document.documentElement;root.classList.remove('light','dark');root.classList.add(resolved);root.setAttribute('data-theme',resolved);root.style.colorScheme=resolved;var appearance=window.localStorage.getItem('appearance');var appearanceValid=appearance==='warm'||appearance==='ocean'||appearance==='forest'||appearance==='rose'||appearance==='slate';if(appearanceValid){root.setAttribute('data-appearance',appearance)}else{root.removeAttribute('data-appearance');if(appearance!==null)window.localStorage.removeItem('appearance')}}catch(e){}})();`;
     if (!shouldInlineViteDevRecoveryScript())
         return themeScript;
     return `${themeScript}\n${getViteDevRecoveryScript()}`;

package/dist/client/theme.js.map

@@ -1 +1 @@
-{"version":3,"file":"theme.js","sourceRoot":"","sources":["../../src/client/theme.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,iCAAiC,GAClC,MAAM,+BAA+B,CAAC;AAIvC,SAAS,qBAAqB,CAAC,KAAsB;IACnD,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,eAAgC,QAAQ,EACxC,YAAY,GAAG,IAAI;IAEnB,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;IAC7D,MAAM,aAAa,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAEtD,MAAM,WAAW,GAAG,oCAAoC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,qBAAqB,aAAa,knCAAknC,CAAC;IAC7uC,IAAI,CAAC,iCAAiC,EAAE;QAAE,OAAO,WAAW,CAAC;IAC7D,OAAO,GAAG,WAAW,KAAK,wBAAwB,EAAE,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,kBAAkB,EAAE,CAAC","sourcesContent":["import {\n  getViteDevRecoveryScript,\n  shouldInlineViteDevRecoveryScript,\n} from \"./vite-dev-recovery-script.js\";\n\nexport type ThemePreference = \"light\" | \"dark\" | \"system\";\n\nfunction normalizeDefaultTheme(theme: ThemePreference): ThemePreference {\n  if (theme === \"light\" || theme === \"dark\" || theme === \"system\") {\n    return theme;\n  }\n  return \"system\";\n}\n\nexport function getThemeInitScript(\n  defaultTheme: ThemePreference = \"system\",\n  enableSystem = true,\n) {\n  const safeDefaultTheme = normalizeDefaultTheme(defaultTheme);\n  const systemEnabled = enableSystem ? \"true\" : \"false\";\n\n  const themeScript = `(function(){try{var defaultTheme=${JSON.stringify(safeDefaultTheme)};var enableSystem=${systemEnabled};var stored=window.localStorage.getItem('theme');var valid=stored==='light'||stored==='dark'||stored==='system'||stored==='auto';var mode=valid?stored:defaultTheme;if(mode==='auto')mode='system';if(!enableSystem&&mode==='system')mode=defaultTheme==='system'?'light':defaultTheme;if(!valid){window.localStorage.removeItem('theme')}else if(stored!==mode){window.localStorage.setItem('theme',mode)}var prefersDark=enableSystem&&mode==='system'&&window.matchMedia&&window.matchMedia('(prefers-color-scheme: dark)').matches;var resolved=mode==='system'?(prefersDark?'dark':'light'):mode;var root=document.documentElement;root.classList.remove('light','dark');root.classList.add(resolved);root.setAttribute('data-theme',resolved);root.style.colorScheme=resolved;var appearance=window.localStorage.getItem('appearance');var appearanceValid=appearance==='warm'||appearance==='ocean'||appearance==='forest'||appearance==='rose'||appearance==='slate';if(appearanceValid){root.setAttribute('data-appearance',appearance)}else{root.removeAttribute('data-appearance');if(appearance!==null)window.localStorage.removeItem('appearance')}}catch(e){}})();`;\n  if (!shouldInlineViteDevRecoveryScript()) return themeScript;\n  return `${themeScript}\\n${getViteDevRecoveryScript()}`;\n}\n\nexport const themeInitScript = getThemeInitScript();\n"]}
+{"version":3,"file":"theme.js","sourceRoot":"","sources":["../../src/client/theme.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,iCAAiC,GAClC,MAAM,+BAA+B,CAAC;AAIvC,SAAS,qBAAqB,CAAC,KAAsB;IACnD,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,eAAgC,QAAQ,EACxC,YAAY,GAAG,IAAI;IAEnB,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;IAC7D,MAAM,aAAa,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAEtD,MAAM,WAAW,GAAG,mkBAAmkB,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,qBAAqB,aAAa,knCAAknC,CAAC;IAC5wD,IAAI,CAAC,iCAAiC,EAAE;QAAE,OAAO,WAAW,CAAC;IAC7D,OAAO,GAAG,WAAW,KAAK,wBAAwB,EAAE,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,kBAAkB,EAAE,CAAC","sourcesContent":["import {\n  getViteDevRecoveryScript,\n  shouldInlineViteDevRecoveryScript,\n} from \"./vite-dev-recovery-script.js\";\n\nexport type ThemePreference = \"light\" | \"dark\" | \"system\";\n\nfunction normalizeDefaultTheme(theme: ThemePreference): ThemePreference {\n  if (theme === \"light\" || theme === \"dark\" || theme === \"system\") {\n    return theme;\n  }\n  return \"system\";\n}\n\nexport function getThemeInitScript(\n  defaultTheme: ThemePreference = \"system\",\n  enableSystem = true,\n) {\n  const safeDefaultTheme = normalizeDefaultTheme(defaultTheme);\n  const systemEnabled = enableSystem ? \"true\" : \"false\";\n\n  const themeScript = `(function(){function m(){var d={};return{get length(){return Object.keys(d).length},key:function(i){return Object.keys(d)[i]||null},getItem:function(k){k=String(k);return Object.prototype.hasOwnProperty.call(d,k)?d[k]:null},setItem:function(k,v){d[String(k)]=String(v)},removeItem:function(k){delete d[String(k)]},clear:function(){d={}}}}function s(n){try{var x=window[n],p='__an_storage_probe__';x.setItem(p,'1');x.removeItem(p)}catch(e){try{Object.defineProperty(window,n,{configurable:true,value:m()})}catch(_){}}}s('localStorage');s('sessionStorage');try{var defaultTheme=${JSON.stringify(safeDefaultTheme)};var enableSystem=${systemEnabled};var stored=window.localStorage.getItem('theme');var valid=stored==='light'||stored==='dark'||stored==='system'||stored==='auto';var mode=valid?stored:defaultTheme;if(mode==='auto')mode='system';if(!enableSystem&&mode==='system')mode=defaultTheme==='system'?'light':defaultTheme;if(!valid){window.localStorage.removeItem('theme')}else if(stored!==mode){window.localStorage.setItem('theme',mode)}var prefersDark=enableSystem&&mode==='system'&&window.matchMedia&&window.matchMedia('(prefers-color-scheme: dark)').matches;var resolved=mode==='system'?(prefersDark?'dark':'light'):mode;var root=document.documentElement;root.classList.remove('light','dark');root.classList.add(resolved);root.setAttribute('data-theme',resolved);root.style.colorScheme=resolved;var appearance=window.localStorage.getItem('appearance');var appearanceValid=appearance==='warm'||appearance==='ocean'||appearance==='forest'||appearance==='rose'||appearance==='slate';if(appearanceValid){root.setAttribute('data-appearance',appearance)}else{root.removeAttribute('data-appearance');if(appearance!==null)window.localStorage.removeItem('appearance')}}catch(e){}})();`;\n  if (!shouldInlineViteDevRecoveryScript()) return themeScript;\n  return `${themeScript}\\n${getViteDevRecoveryScript()}`;\n}\n\nexport const themeInitScript = getThemeInitScript();\n"]}

package/dist/client/vite-dev-recovery-script.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vite-dev-recovery-script.d.ts","sourceRoot":"","sources":["../../src/client/vite-dev-recovery-script.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CA2LjD;AAED,wBAAgB,iCAAiC,IAAI,OAAO,CAe3D"}
+{"version":3,"file":"vite-dev-recovery-script.d.ts","sourceRoot":"","sources":["../../src/client/vite-dev-recovery-script.ts"],"names":[],"mappings":"AAKA;;;;;;GAMG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CAoMjD;AAED,wBAAgB,iCAAiC,IAAI,OAAO,CAe3D"}

package/dist/client/vite-dev-recovery-script.js

@@ -1,3 +1,4 @@
+import { EMBED_MODE_QUERY_PARAM, EMBED_TOKEN_QUERY_PARAM, } from "../shared/embed-auth.js";
 /**
  * Synchronous dev-only browser recovery for Vite optimized-dependency races.
  *
@@ -6,8 +7,16 @@
  * `head-prepend` for HTML that does pass through transformIndexHtml.
  */
 export function getViteDevRecoveryScript() {
+    const embedModeParam = JSON.stringify(EMBED_MODE_QUERY_PARAM);
+    const embedTokenParam = JSON.stringify(EMBED_TOKEN_QUERY_PARAM);
     return `
 (function() {
+  try {
+    var params = new URLSearchParams(window.location.search || "");
+    var embedded = params.get(${embedModeParam});
+    if (params.has(${embedTokenParam}) || embedded === "1" || embedded === "true") return;
+  } catch (e) {}
+
   var RELOAD_KEY = "__an_optimize_reload";
   var MAX_RELOADS = 3;
   var RESET_AFTER_MS = 8000;

package/dist/client/vite-dev-recovery-script.js.map

@@ -1 +1 @@
-{"version":3,"file":"vite-dev-recovery-script.js","sourceRoot":"","sources":["../../src/client/vite-dev-recovery-script.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAyLH,CAAC;AACP,CAAC;AAED,MAAM,UAAU,iCAAiC;IAC/C,MAAM,OAAO,GACX,MAAM,CAAC,IAGR,CAAC,GAAG,CAAC;IACN,IACE,OAAO,OAAO,KAAK,WAAW;QAC9B,OAAO,CAAC,GAAG,EAAE,QAAQ,KAAK,YAAY,EACtC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,EAAE,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,OAAO,EAAE,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["/**\n * Synchronous dev-only browser recovery for Vite optimized-dependency races.\n *\n * Keep this script dependency-free and non-module-safe: React Router SSR roots\n * inline it before `<Scripts />`, and the Vite plugin injects it at\n * `head-prepend` for HTML that does pass through transformIndexHtml.\n */\nexport function getViteDevRecoveryScript(): string {\n  return `\n(function() {\n  var RELOAD_KEY = \"__an_optimize_reload\";\n  var MAX_RELOADS = 3;\n  var RESET_AFTER_MS = 8000;\n\n  var reloadTimer = null;\n  var overlayShown = false;\n\n  // Track recent reloads in sessionStorage. If we reload too many times\n  // in a short window, stop and show a manual-refresh message instead of\n  // looping forever.\n  function readReloadHistory() {\n    try {\n      var raw = sessionStorage.getItem(RELOAD_KEY);\n      if (!raw) return [];\n      var arr = JSON.parse(raw);\n      var cutoff = Date.now() - 30000;\n      return Array.isArray(arr) ? arr.filter(function(t) { return t > cutoff; }) : [];\n    } catch (e) { return []; }\n  }\n  function recordReload() {\n    try {\n      var history = readReloadHistory();\n      history.push(Date.now());\n      sessionStorage.setItem(RELOAD_KEY, JSON.stringify(history));\n    } catch (e) {}\n  }\n  // Reset the counter after a stable period (page didn't fail again).\n  setTimeout(function() {\n    try { sessionStorage.removeItem(RELOAD_KEY); } catch (e) {}\n  }, RESET_AFTER_MS);\n\n  function showOverlay(title, subtitle) {\n    if (overlayShown) return;\n    overlayShown = true;\n    var mount = function() {\n      if (!document.body) { setTimeout(mount, 16); return; }\n      var el = document.createElement(\"div\");\n      el.id = \"__an-reload-overlay\";\n      el.style.cssText = [\n        \"position:fixed\",\"inset:0\",\"z-index:2147483647\",\n        \"display:flex\",\"align-items:center\",\"justify-content:center\",\n        \"background:rgba(0,0,0,0.6)\",\"backdrop-filter:blur(8px)\",\n        \"-webkit-backdrop-filter:blur(8px)\",\n        \"font-family:-apple-system,BlinkMacSystemFont,system-ui,sans-serif\",\n        \"color:#fff\",\"font-size:14px\"\n      ].join(\";\");\n      el.innerHTML =\n        '<div style=\"background:#171717;padding:20px 24px;border-radius:12px;' +\n        'border:1px solid rgba(255,255,255,0.1);max-width:340px;text-align:center;' +\n        'box-shadow:0 20px 60px rgba(0,0,0,0.5)\">' +\n        '<div style=\"font-weight:600;margin-bottom:6px\">' + title + '</div>' +\n        '<div style=\"font-size:12px;opacity:0.7\">' + subtitle + '</div>' +\n        '</div>';\n      document.body.appendChild(el);\n    };\n    mount();\n  }\n\n  function scheduleReload(reason) {\n    if (reloadTimer) return;\n    var history = readReloadHistory();\n    if (history.length >= MAX_RELOADS) {\n      console.warn(\"[agent-native] Dev server keeps re-bundling. Manual refresh needed.\", reason);\n      showOverlay(\n        \"Dev server out of sync\",\n        \"Auto-reload gave up after \" + MAX_RELOADS + \" tries. Refresh the page (\\\\u2318R / Ctrl+R).\"\n      );\n      return;\n    }\n    console.log(\"[agent-native] Vite re-bundled deps (\" + reason + \"), reloading\\\\u2026\");\n    recordReload();\n    // First reload is silent. One refresh almost always fixes it and the\n    // overlay flash is more disruptive than the reload itself. Only show\n    // the overlay starting on the second attempt, when something is clearly\n    // taking longer than expected.\n    if (history.length >= 1) {\n      showOverlay(\"Updating dev server\\\\u2026\", \"Reloading the page\");\n    }\n    reloadTimer = setTimeout(function() { window.location.reload(); }, 300);\n  }\n\n  function looksLikeViteFailureMessage(message) {\n    if (!message) return false;\n    return message.indexOf(\"Failed to fetch dynamically imported module\") !== -1\n        || message.indexOf(\"error loading dynamically imported module\") !== -1\n        || message.indexOf(\"Importing a module script failed\") !== -1\n        || message.indexOf(\"Outdated Optimize Dep\") !== -1\n        || message.indexOf(\"Optimize Deps Processing Error\") !== -1\n        || (message.indexOf(\"504\") !== -1 && (\n          message.indexOf(\".vite/deps\") !== -1 ||\n          message.indexOf(\"/node_modules/.vite/deps/\") !== -1\n        ));\n  }\n\n  function looksLikeViteDep(url) {\n    if (!url) return false;\n    // Only treat same-origin URLs as Vite deps. Do not reload the page\n    // because some third-party CDN script 404'd.\n    try {\n      var u = new URL(url, window.location.href);\n      if (u.origin !== window.location.origin) return false;\n    } catch (e) { return false; }\n    return url.indexOf(\"/node_modules/.vite/deps/\") !== -1\n        || url.indexOf(\"/@fs/\") !== -1\n        || url.indexOf(\"/@id/\") !== -1\n        || url.indexOf(\"?v=\") !== -1\n        || url.indexOf(\"?import\") !== -1\n        || /\\\\.(m?js|ts|tsx|jsx)(\\\\?|$)/.test(url);\n  }\n\n  // 1) <script type=\"module\"> / <link> 504. These fire on the element, not\n  //    window, so use capture phase to catch resource load errors.\n  window.addEventListener(\"error\", function(e) {\n    var t = e.target;\n    if (!t || t === window) {\n      var message = String(e.message || \"\");\n      if (looksLikeViteFailureMessage(message)) {\n        scheduleReload(\"window error\");\n      }\n      return;\n    }\n    var tag = t.tagName;\n    if (tag !== \"SCRIPT\" && tag !== \"LINK\") return;\n    var url = t.src || t.href || \"\";\n    if (looksLikeViteDep(url)) {\n      var name = url.split(\"/\").pop();\n      scheduleReload(\"script 504: \" + name);\n    }\n  }, true);\n\n  // Vite's documented hook for failed dynamic-import preloads. This mostly\n  // targets production chunk skew, but it also fires for some dev optimizer\n  // races, so wire it into the same guarded reload path.\n  window.addEventListener(\"vite:preloadError\", function(e) {\n    var payload = e && e.payload;\n    var msg = String((payload && (payload.message || payload)) || \"\");\n    if (!msg || looksLikeViteFailureMessage(msg)) {\n      if (e.preventDefault) e.preventDefault();\n      scheduleReload(\"preload error\");\n    }\n  });\n\n  // 2) Dynamic import failures (React Router code splitting, lazy components).\n  window.addEventListener(\"unhandledrejection\", function(e) {\n    var msg = String((e.reason && (e.reason.message || e.reason)) || \"\");\n    if (looksLikeViteFailureMessage(msg)) {\n      scheduleReload(\"dynamic import\");\n    }\n  });\n\n  // Static module-graph fetch failures for child imports don't always surface\n  // as element errors or rejections. Chrome exposes the HTTP status via\n  // Resource Timing; when available, use it as a final safety net.\n  var seenResources = {};\n  function checkResourceEntry(entry) {\n    var url = entry && entry.name;\n    if (!url || seenResources[url]) return;\n    seenResources[url] = true;\n    if (!looksLikeViteDep(url)) return;\n    if (entry.responseStatus === 504) {\n      var name = url.split(\"/\").pop();\n      scheduleReload(\"resource 504: \" + name);\n    }\n  }\n  function checkExistingResources() {\n    try {\n      var entries = performance.getEntriesByType(\"resource\") || [];\n      for (var i = 0; i < entries.length; i++) checkResourceEntry(entries[i]);\n    } catch (e) {}\n  }\n  if (window.PerformanceObserver) {\n    try {\n      var observer = new PerformanceObserver(function(list) {\n        var entries = list.getEntries();\n        for (var i = 0; i < entries.length; i++) checkResourceEntry(entries[i]);\n      });\n      observer.observe({ type: \"resource\", buffered: true });\n    } catch (e) {\n      setTimeout(checkExistingResources, 0);\n    }\n  } else {\n    setTimeout(checkExistingResources, 0);\n  }\n})();`;\n}\n\nexport function shouldInlineViteDevRecoveryScript(): boolean {\n  const viteEnv = (\n    import.meta as ImportMeta & {\n      env?: { DEV?: boolean; PROD?: boolean };\n    }\n  ).env;\n  if (\n    typeof process !== \"undefined\" &&\n    process.env?.NODE_ENV === \"production\"\n  ) {\n    return false;\n  }\n  if (viteEnv?.PROD === true) return false;\n  if (viteEnv?.DEV === true) return true;\n  return true;\n}\n"]}
+{"version":3,"file":"vite-dev-recovery-script.js","sourceRoot":"","sources":["../../src/client/vite-dev-recovery-script.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAEjC;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;IAC9D,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAEhE,OAAO;;;;gCAIuB,cAAc;qBACzB,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA0L9B,CAAC;AACP,CAAC;AAED,MAAM,UAAU,iCAAiC;IAC/C,MAAM,OAAO,GACX,MAAM,CAAC,IAGR,CAAC,GAAG,CAAC;IACN,IACE,OAAO,OAAO,KAAK,WAAW;QAC9B,OAAO,CAAC,GAAG,EAAE,QAAQ,KAAK,YAAY,EACtC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,EAAE,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,OAAO,EAAE,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import {\n  EMBED_MODE_QUERY_PARAM,\n  EMBED_TOKEN_QUERY_PARAM,\n} from \"../shared/embed-auth.js\";\n\n/**\n * Synchronous dev-only browser recovery for Vite optimized-dependency races.\n *\n * Keep this script dependency-free and non-module-safe: React Router SSR roots\n * inline it before `<Scripts />`, and the Vite plugin injects it at\n * `head-prepend` for HTML that does pass through transformIndexHtml.\n */\nexport function getViteDevRecoveryScript(): string {\n  const embedModeParam = JSON.stringify(EMBED_MODE_QUERY_PARAM);\n  const embedTokenParam = JSON.stringify(EMBED_TOKEN_QUERY_PARAM);\n\n  return `\n(function() {\n  try {\n    var params = new URLSearchParams(window.location.search || \"\");\n    var embedded = params.get(${embedModeParam});\n    if (params.has(${embedTokenParam}) || embedded === \"1\" || embedded === \"true\") return;\n  } catch (e) {}\n\n  var RELOAD_KEY = \"__an_optimize_reload\";\n  var MAX_RELOADS = 3;\n  var RESET_AFTER_MS = 8000;\n\n  var reloadTimer = null;\n  var overlayShown = false;\n\n  // Track recent reloads in sessionStorage. If we reload too many times\n  // in a short window, stop and show a manual-refresh message instead of\n  // looping forever.\n  function readReloadHistory() {\n    try {\n      var raw = sessionStorage.getItem(RELOAD_KEY);\n      if (!raw) return [];\n      var arr = JSON.parse(raw);\n      var cutoff = Date.now() - 30000;\n      return Array.isArray(arr) ? arr.filter(function(t) { return t > cutoff; }) : [];\n    } catch (e) { return []; }\n  }\n  function recordReload() {\n    try {\n      var history = readReloadHistory();\n      history.push(Date.now());\n      sessionStorage.setItem(RELOAD_KEY, JSON.stringify(history));\n    } catch (e) {}\n  }\n  // Reset the counter after a stable period (page didn't fail again).\n  setTimeout(function() {\n    try { sessionStorage.removeItem(RELOAD_KEY); } catch (e) {}\n  }, RESET_AFTER_MS);\n\n  function showOverlay(title, subtitle) {\n    if (overlayShown) return;\n    overlayShown = true;\n    var mount = function() {\n      if (!document.body) { setTimeout(mount, 16); return; }\n      var el = document.createElement(\"div\");\n      el.id = \"__an-reload-overlay\";\n      el.style.cssText = [\n        \"position:fixed\",\"inset:0\",\"z-index:2147483647\",\n        \"display:flex\",\"align-items:center\",\"justify-content:center\",\n        \"background:rgba(0,0,0,0.6)\",\"backdrop-filter:blur(8px)\",\n        \"-webkit-backdrop-filter:blur(8px)\",\n        \"font-family:-apple-system,BlinkMacSystemFont,system-ui,sans-serif\",\n        \"color:#fff\",\"font-size:14px\"\n      ].join(\";\");\n      el.innerHTML =\n        '<div style=\"background:#171717;padding:20px 24px;border-radius:12px;' +\n        'border:1px solid rgba(255,255,255,0.1);max-width:340px;text-align:center;' +\n        'box-shadow:0 20px 60px rgba(0,0,0,0.5)\">' +\n        '<div style=\"font-weight:600;margin-bottom:6px\">' + title + '</div>' +\n        '<div style=\"font-size:12px;opacity:0.7\">' + subtitle + '</div>' +\n        '</div>';\n      document.body.appendChild(el);\n    };\n    mount();\n  }\n\n  function scheduleReload(reason) {\n    if (reloadTimer) return;\n    var history = readReloadHistory();\n    if (history.length >= MAX_RELOADS) {\n      console.warn(\"[agent-native] Dev server keeps re-bundling. Manual refresh needed.\", reason);\n      showOverlay(\n        \"Dev server out of sync\",\n        \"Auto-reload gave up after \" + MAX_RELOADS + \" tries. Refresh the page (\\\\u2318R / Ctrl+R).\"\n      );\n      return;\n    }\n    console.log(\"[agent-native] Vite re-bundled deps (\" + reason + \"), reloading\\\\u2026\");\n    recordReload();\n    // First reload is silent. One refresh almost always fixes it and the\n    // overlay flash is more disruptive than the reload itself. Only show\n    // the overlay starting on the second attempt, when something is clearly\n    // taking longer than expected.\n    if (history.length >= 1) {\n      showOverlay(\"Updating dev server\\\\u2026\", \"Reloading the page\");\n    }\n    reloadTimer = setTimeout(function() { window.location.reload(); }, 300);\n  }\n\n  function looksLikeViteFailureMessage(message) {\n    if (!message) return false;\n    return message.indexOf(\"Failed to fetch dynamically imported module\") !== -1\n        || message.indexOf(\"error loading dynamically imported module\") !== -1\n        || message.indexOf(\"Importing a module script failed\") !== -1\n        || message.indexOf(\"Outdated Optimize Dep\") !== -1\n        || message.indexOf(\"Optimize Deps Processing Error\") !== -1\n        || (message.indexOf(\"504\") !== -1 && (\n          message.indexOf(\".vite/deps\") !== -1 ||\n          message.indexOf(\"/node_modules/.vite/deps/\") !== -1\n        ));\n  }\n\n  function looksLikeViteDep(url) {\n    if (!url) return false;\n    // Only treat same-origin URLs as Vite deps. Do not reload the page\n    // because some third-party CDN script 404'd.\n    try {\n      var u = new URL(url, window.location.href);\n      if (u.origin !== window.location.origin) return false;\n    } catch (e) { return false; }\n    return url.indexOf(\"/node_modules/.vite/deps/\") !== -1\n        || url.indexOf(\"/@fs/\") !== -1\n        || url.indexOf(\"/@id/\") !== -1\n        || url.indexOf(\"?v=\") !== -1\n        || url.indexOf(\"?import\") !== -1\n        || /\\\\.(m?js|ts|tsx|jsx)(\\\\?|$)/.test(url);\n  }\n\n  // 1) <script type=\"module\"> / <link> 504. These fire on the element, not\n  //    window, so use capture phase to catch resource load errors.\n  window.addEventListener(\"error\", function(e) {\n    var t = e.target;\n    if (!t || t === window) {\n      var message = String(e.message || \"\");\n      if (looksLikeViteFailureMessage(message)) {\n        scheduleReload(\"window error\");\n      }\n      return;\n    }\n    var tag = t.tagName;\n    if (tag !== \"SCRIPT\" && tag !== \"LINK\") return;\n    var url = t.src || t.href || \"\";\n    if (looksLikeViteDep(url)) {\n      var name = url.split(\"/\").pop();\n      scheduleReload(\"script 504: \" + name);\n    }\n  }, true);\n\n  // Vite's documented hook for failed dynamic-import preloads. This mostly\n  // targets production chunk skew, but it also fires for some dev optimizer\n  // races, so wire it into the same guarded reload path.\n  window.addEventListener(\"vite:preloadError\", function(e) {\n    var payload = e && e.payload;\n    var msg = String((payload && (payload.message || payload)) || \"\");\n    if (!msg || looksLikeViteFailureMessage(msg)) {\n      if (e.preventDefault) e.preventDefault();\n      scheduleReload(\"preload error\");\n    }\n  });\n\n  // 2) Dynamic import failures (React Router code splitting, lazy components).\n  window.addEventListener(\"unhandledrejection\", function(e) {\n    var msg = String((e.reason && (e.reason.message || e.reason)) || \"\");\n    if (looksLikeViteFailureMessage(msg)) {\n      scheduleReload(\"dynamic import\");\n    }\n  });\n\n  // Static module-graph fetch failures for child imports don't always surface\n  // as element errors or rejections. Chrome exposes the HTTP status via\n  // Resource Timing; when available, use it as a final safety net.\n  var seenResources = {};\n  function checkResourceEntry(entry) {\n    var url = entry && entry.name;\n    if (!url || seenResources[url]) return;\n    seenResources[url] = true;\n    if (!looksLikeViteDep(url)) return;\n    if (entry.responseStatus === 504) {\n      var name = url.split(\"/\").pop();\n      scheduleReload(\"resource 504: \" + name);\n    }\n  }\n  function checkExistingResources() {\n    try {\n      var entries = performance.getEntriesByType(\"resource\") || [];\n      for (var i = 0; i < entries.length; i++) checkResourceEntry(entries[i]);\n    } catch (e) {}\n  }\n  if (window.PerformanceObserver) {\n    try {\n      var observer = new PerformanceObserver(function(list) {\n        var entries = list.getEntries();\n        for (var i = 0; i < entries.length; i++) checkResourceEntry(entries[i]);\n      });\n      observer.observe({ type: \"resource\", buffered: true });\n    } catch (e) {\n      setTimeout(checkExistingResources, 0);\n    }\n  } else {\n    setTimeout(checkExistingResources, 0);\n  }\n})();`;\n}\n\nexport function shouldInlineViteDevRecoveryScript(): boolean {\n  const viteEnv = (\n    import.meta as ImportMeta & {\n      env?: { DEV?: boolean; PROD?: boolean };\n    }\n  ).env;\n  if (\n    typeof process !== \"undefined\" &&\n    process.env?.NODE_ENV === \"production\"\n  ) {\n    return false;\n  }\n  if (viteEnv?.PROD === true) return false;\n  if (viteEnv?.DEV === true) return true;\n  return true;\n}\n"]}

package/dist/deploy/build.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/deploy/build.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;GAYG;AAOH,OAAO,EAML,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,qBAAqB,CAAC;AA8B7B;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,eAAe,EAAE,EACzB,WAAW,EAAE,MAAM,EAAE,EACrB,kBAAkB,GAAE,MAAM,EAAO,EACjC,OAAO,GAAE,gBAAgB,EAAO,EAChC,aAAa,GAAE,oBAAoB,GAAG,IAAW,GAChD,MAAM,CAyYR;AA0VD,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAE9C;AAmVD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,gBAAgB,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,UAAU,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,GAAG,CAAC;IACX,KAAK,EAAE,eAAe,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAiBf"}
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/deploy/build.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;GAYG;AAOH,OAAO,EAML,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,qBAAqB,CAAC;AAuC7B;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,eAAe,EAAE,EACzB,WAAW,EAAE,MAAM,EAAE,EACrB,kBAAkB,GAAE,MAAM,EAAO,EACjC,OAAO,GAAE,gBAAgB,EAAO,EAChC,aAAa,GAAE,oBAAoB,GAAG,IAAW,GAChD,MAAM,CAwcR;AA0VD,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAE9C;AAmVD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,gBAAgB,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,UAAU,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,GAAG,CAAC;IACX,KAAK,EAAE,eAAe,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAiBf"}

package/dist/deploy/build.js

@@ -20,8 +20,12 @@ import { fileURLToPath } from "url";
 import { discoverApiRoutes, discoverPlugins, discoverActionFiles, getMissingDefaultPlugins, DEFAULT_PLUGIN_REGISTRY, } from "./route-discovery.js";
 import { getWorkspaceCoreExports, } from "./workspace-core.js";
 import { generateActionRegistryForProject } from "../vite/action-types-plugin.js";
+import { mcpEmbedStaticAssetRouteRules } from "../shared/mcp-embed-headers.js";
+import { EMBED_SESSION_COOKIE, EMBED_TOKEN_QUERY_PARAM, } from "../shared/embed-auth.js";
 const cwd = process.cwd();
 const preset = process.env.NITRO_PRESET || "node";
+const DEFAULT_SSR_CACHE_CONTROL = "public, max-age=5, stale-while-revalidate=604800, stale-if-error=3600";
+const AUTHENTICATED_SSR_CACHE_CONTROL = "private, max-age=5, stale-while-revalidate=604800, stale-if-error=3600";
 function normalizeConfiguredAppBasePath() {
     const raw = process.env.VITE_APP_BASE_PATH || process.env.APP_BASE_PATH;
     if (!raw || raw === "/")
@@ -259,16 +263,77 @@ function injectHeadScript(html, script) {
   return html.slice(0, headCloseIdx) + script + html.slice(headCloseIdx);
 }
 
-async function rewriteMountedResponse(response, basePath) {
-  const sentryClientConfigScript = getSentryClientConfigScript();
-  if (!basePath && !sentryClientConfigScript) return response;
+const DEFAULT_SSR_CACHE_CONTROL = ${JSON.stringify(DEFAULT_SSR_CACHE_CONTROL)};
+const AUTHENTICATED_SSR_CACHE_CONTROL = ${JSON.stringify(AUTHENTICATED_SSR_CACHE_CONTROL)};
+const EMBED_SESSION_COOKIE = ${JSON.stringify(EMBED_SESSION_COOKIE)};
+const EMBED_TOKEN_QUERY_PARAM = ${JSON.stringify(EMBED_TOKEN_QUERY_PARAM)};
+const ANONYMOUS_SESSION_COOKIE_NAMES = new Set(["an_docs_session"]);
+const BETTER_AUTH_SESSION_COOKIE_RE = /\\.session_(?:token|data)$/;
+
+function isAuthenticatedCookieName(name) {
+  if (ANONYMOUS_SESSION_COOKIE_NAMES.has(name)) return false;
+  const bareName = String(name || "").replace(/^__(?:Secure|Host)-/, "");
+  return (
+    bareName === EMBED_SESSION_COOKIE ||
+    bareName === "an_session" ||
+    bareName === "an_session_workspace" ||
+    bareName.startsWith("an_session_") ||
+    bareName === "an.session_token" ||
+    bareName === "an.session_data" ||
+    BETTER_AUTH_SESSION_COOKIE_RE.test(bareName)
+  );
+}
+
+function requestHasAuthenticatedCookie(cookieHeader) {
+  if (!cookieHeader) return false;
+  return String(cookieHeader)
+    .split(";")
+    .map((cookie) => cookie.trim().split("=", 1)[0]?.trim())
+    .filter(Boolean)
+    .some(isAuthenticatedCookieName);
+}
+
+function requestHasAuthSignal(request) {
+  const url = new URL(request.url);
+  return Boolean(
+    request.headers.get("authorization") ||
+    requestHasAuthenticatedCookie(request.headers.get("cookie")) ||
+    url.searchParams.has(EMBED_TOKEN_QUERY_PARAM) ||
+    url.searchParams.has("_session")
+  );
+}
+
+function applyDefaultSsrCacheHeader(headers, status, hasAuthSignal) {
+  if (headers.has("cache-control")) return;
+  if (status < 200 || status >= 400) return;
+
+  const contentType = (headers.get("content-type") || "").toLowerCase();
+  if (!contentType.includes("text/html")) return;
 
+  headers.set(
+    "cache-control",
+    hasAuthSignal ? AUTHENTICATED_SSR_CACHE_CONTROL : DEFAULT_SSR_CACHE_CONTROL,
+  );
+}
+
+async function rewriteMountedResponse(response, basePath, hasAuthSignal) {
+  const sentryClientConfigScript = getSentryClientConfigScript();
   const headers = new Headers(response.headers);
+  applyDefaultSsrCacheHeader(headers, response.status, hasAuthSignal);
+
   const location = headers.get("location");
   if (location?.startsWith("/") && !location.startsWith("//")) {
     headers.set("location", prefixMountedPath(location, basePath));
   }
 
+  if (!basePath && !sentryClientConfigScript) {
+    return new Response(response.body, {
+      status: response.status,
+      statusText: response.statusText,
+      headers,
+    });
+  }
+
   const contentType = headers.get("content-type") || "";
   if (!contentType.toLowerCase().includes("text/html") || !response.body) {
     return new Response(response.body, {
@@ -338,7 +403,7 @@ async function getHandler() {
         headers: {
           "Access-Control-Allow-Origin": "*",
           "Access-Control-Allow-Methods": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS",
-          "Access-Control-Allow-Headers": "Content-Type,Authorization,X-Requested-With,X-Request-Source",
+          "Access-Control-Allow-Headers": "Content-Type,Authorization,X-Requested-With,X-Request-Source,X-Agent-Native-CSRF,X-Agent-Native-Embed-Target",
         },
       });
     }
@@ -370,6 +435,7 @@ ${actionRegistrations.join("\n")}
       return new Response(null, { status: 404 });
     }
     const request = requestWithPathname(event.req, p);
+    const hasAuthSignal = requestHasAuthSignal(event.req);
     if (event.req.method === "HEAD") {
       const getRequest = requestWithMethod(request, "GET");
       const response = await rrHandler(getRequest);
@@ -380,9 +446,10 @@ ${actionRegistrations.join("\n")}
           headers: response.headers,
         }),
         basePath,
+        hasAuthSignal,
       );
     }
-    return rewriteMountedResponse(await rrHandler(request), basePath);
+    return rewriteMountedResponse(await rrHandler(request), basePath, hasAuthSignal);
   }));
 
   _handler = app.fetch.bind(app);
@@ -1102,6 +1169,7 @@ export default bundle;
         virtual: {
             "virtual:agents-bundle": agentsBundleModuleSource,
         },
+        routeRules: mcpEmbedStaticAssetRouteRules(appBasePath),
         // For edge presets (cloudflare, deno), bundle all deps — node_modules
         // aren't available at runtime. Netlify/Vercel/Node have node_modules.
         ...(preset.startsWith("cloudflare") || preset.startsWith("deno")