@agent-native/core 0.22.35 → 0.22.36

package/dist/mcp/embed-app.js.map

@@ -1 +1 @@
-{"version":3,"file":"embed-app.js","sourceRoot":"","sources":["../../src/mcp/embed-app.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAE1E,MAAM,cAAc,GAClB,mEAAmE,CAAC;AAEtE,MAAM,CAAC,MAAM,iCAAiC,GAAG,gBAAgB,CAAC;AAClE,MAAM,6BAA6B,GAAG,EAAE,CAAC;AACzC,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAChD,MAAM,CAAC,MAAM,+BAA+B,GAC1C,4BAA4B,GAAG,6BAA6B,CAAC;AAa/D,SAAS,IAAI,CAAC,KAAyB;IACrC,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,UAA2B,EAAE;IAE7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC;IAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,aAAa,CAAC;IACrD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,sBAAsB,CAAC;IACtE,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,KAAK,KAAK,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CACrB,GAAG,EACH,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,IAAI,4BAA4B,CAAC,CAC9D,CAAC;IACF,MAAM,cAAc,GAAG,MAAM,GAAG,6BAA6B,CAAC;IAC9D,MAAM,YAAY,GAAG;QACnB,iCAAiC;QACjC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;KAChC,CAAC;IAEF,OAAO;QACL,KAAK;QACL,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,IAAI,EAAE,GAAG,EAAE,CAAC;;;;;;8MAM8L,MAAM,uCAAuC,cAAc;;;;;;;;;;;;;;;;;;;;oBAoBrP,IAAI,CAAC,KAAK,CAAC;uBACR,IAAI,CAAC,WAAW,CAAC;qBACnB,IAAI,CAAC,SAAS,CAAC;qBACf,IAAI,CAAC,aAAa,CAAC;wBAChB,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;;;;4CAIN,IAAI,CAAC,KAAK,CAAC;;;mDAGJ,IAAI,CAAC,SAAS,CAAC;;;;;;;;;;;;;;;8BAepC,IAAI,CAAC,SAAS,CAAC,+BAA+B,CAAC;qCACxC,MAAM;2BAChB,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sCA0+BlB,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAkC5C;QACJ,GAAG,EAAE;YACH,cAAc,EAAE;gBACd,gBAAgB;gBAChB,iCAAiC;gBACjC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;aAChC;YACD,eAAe,EAAE;gBACf,gBAAgB;gBAChB,iCAAiC;gBACjC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;aAChC;YACD,cAAc,EAAE,CAAC,iCAAiC,CAAC;YACnD,YAAY;SACb;QACD,aAAa,EAAE,KAAK;KACrB,CAAC;AACJ,CAAC","sourcesContent":["import type { ActionMcpAppResourceConfig } from \"../action.js\";\nimport { MCP_APP_CHAT_BRIDGE_QUERY_PARAM } from \"../shared/embed-auth.js\";\n\nconst MCP_APP_IMPORT =\n  \"https://esm.sh/@modelcontextprotocol/ext-apps@1.7.2/app-with-deps\";\n\nexport const MCP_APP_REQUEST_ORIGIN_CSP_SOURCE = \"$requestOrigin\";\nconst MCP_APP_WRAPPER_CHROME_HEIGHT = 44;\nexport const DEFAULT_MCP_APP_SHELL_HEIGHT = 560;\nexport const DEFAULT_MCP_APP_VIEWPORT_HEIGHT =\n  DEFAULT_MCP_APP_SHELL_HEIGHT - MCP_APP_WRAPPER_CHROME_HEIGHT;\n\nexport interface EmbedAppOptions {\n  title?: string;\n  description?: string;\n  iframeTitle?: string;\n  openLabel?: string;\n  embedByDefault?: boolean;\n  startToolName?: string;\n  frameDomains?: string[];\n  height?: number;\n}\n\nfunction attr(value: string | undefined): string {\n  return String(value ?? \"\")\n    .replace(/&/g, \"&amp;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\");\n}\n\nexport function embedApp(\n  options: EmbedAppOptions = {},\n): ActionMcpAppResourceConfig {\n  const title = options.title ?? \"Open app\";\n  const iframeTitle = options.iframeTitle ?? \"Agent Native app\";\n  const openLabel = options.openLabel ?? \"Open in app\";\n  const startToolName = options.startToolName ?? \"create_embed_session\";\n  const embedByDefault = options.embedByDefault !== false;\n  const height = Math.max(\n    320,\n    Math.min(900, options.height ?? DEFAULT_MCP_APP_SHELL_HEIGHT),\n  );\n  const viewportHeight = height - MCP_APP_WRAPPER_CHROME_HEIGHT;\n  const frameDomains = [\n    MCP_APP_REQUEST_ORIGIN_CSP_SOURCE,\n    ...(options.frameDomains ?? []),\n  ];\n\n  return {\n    title,\n    ...(options.description ? { description: options.description } : {}),\n    html: () => `<!doctype html>\n<html lang=\"en\">\n<head>\n  <meta charset=\"utf-8\">\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n  <style>\n    :root { color-scheme: light dark; font-family: ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif; background: Canvas; color: CanvasText; --agent-native-shell-height: ${height}px; --agent-native-viewport-height: ${viewportHeight}px; }\n    * { box-sizing: border-box; }\n    body { margin: 0; }\n    .shell { display: grid; gap: 8px; min-height: var(--agent-native-shell-height); padding: 0; }\n    .bar { display: flex; align-items: center; justify-content: space-between; gap: 8px; min-height: 36px; padding: 6px 8px; border-bottom: 1px solid color-mix(in srgb, CanvasText 12%, Canvas); }\n    .title { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; font-size: 12px; font-weight: 700; color: color-mix(in srgb, CanvasText 72%, Canvas); }\n    .actions { display: flex; align-items: center; gap: 6px; }\n    button { min-height: 28px; border: 1px solid color-mix(in srgb, CanvasText 14%, Canvas); border-radius: 7px; background: Canvas; color: CanvasText; cursor: pointer; font: inherit; font-size: 12px; font-weight: 700; padding: 0 9px; }\n    button:disabled { opacity: .55; cursor: default; }\n    .stage { position: relative; min-height: var(--agent-native-viewport-height); }\n    iframe { display: block; width: 100%; height: var(--agent-native-viewport-height); border: 0; background: Canvas; }\n    .message { display: grid; place-items: center; min-height: var(--agent-native-viewport-height); padding: 18px; color: color-mix(in srgb, CanvasText 62%, Canvas); font-size: 13px; line-height: 1.45; text-align: center; }\n    .fallback { display: grid; align-content: center; justify-items: center; gap: 12px; min-height: var(--agent-native-viewport-height); padding: 24px; background: Canvas; color: CanvasText; text-align: center; }\n    .fallback-title { max-width: 440px; font-size: 14px; font-weight: 700; }\n    .fallback-copy { max-width: 520px; color: color-mix(in srgb, CanvasText 64%, Canvas); font-size: 13px; line-height: 1.45; }\n    .fallback-actions { display: flex; flex-wrap: wrap; align-items: center; justify-content: center; gap: 8px; }\n    .fallback-url { max-width: min(560px, 100%); overflow-wrap: anywhere; color: color-mix(in srgb, CanvasText 76%, Canvas); font-size: 12px; }\n  </style>\n</head>\n<body\n  data-app-title=\"${attr(title)}\"\n  data-iframe-title=\"${attr(iframeTitle)}\"\n  data-open-label=\"${attr(openLabel)}\"\n  data-start-tool=\"${attr(startToolName)}\"\n  data-embed-default=\"${embedByDefault ? \"1\" : \"0\"}\"\n>\n  <main class=\"shell\">\n    <div class=\"bar\">\n      <div class=\"title\" data-title-label>${attr(title)}</div>\n      <div class=\"actions\">\n        <button type=\"button\" data-display hidden disabled>Fullscreen</button>\n        <button type=\"button\" data-open disabled>${attr(openLabel)}</button>\n      </div>\n    </div>\n    <section class=\"stage\" data-stage>\n      <div class=\"message\">Preparing app</div>\n    </section>\n  </main>\n  <script type=\"module\">\n    const body = document.body;\n    const stage = document.querySelector(\"[data-stage]\");\n    const titleEl = document.querySelector(\"[data-title-label]\");\n    const openButton = document.querySelector(\"[data-open]\");\n    const displayButton = document.querySelector(\"[data-display]\");\n    const startTool = body.dataset.startTool || \"create_embed_session\";\n    const embedByDefault = body.dataset.embedDefault !== \"0\";\n    const chatBridgeParam = ${JSON.stringify(MCP_APP_CHAT_BRIDGE_QUERY_PARAM)};\n    const defaultIntrinsicHeight = ${height};\n    const chromeHeight = ${MCP_APP_WRAPPER_CHROME_HEIGHT};\n    const frameReadyMessageDelays = [0, 200, 500, 1500, 3000, 7000, 15000, 30000];\n    const frameReadyTimeoutMs = 45000;\n    const frameLoadTimeoutMs = 45000;\n    let app = null;\n    let openAiBridge = null;\n    let toolInput = {};\n    let openUrl = \"\";\n    let openStartUrl = \"\";\n    let startedFor = \"\";\n    let appFrame = null;\n    let appFrameReady = false;\n    let appFrameReadyTimer = null;\n    let appFrameLoadTimer = null;\n    let lastFrameSrc = \"\";\n\n    function esc(value) {\n      return String(value ?? \"\")\n        .replace(/&/g, \"&amp;\")\n        .replace(/</g, \"&lt;\")\n        .replace(/>/g, \"&gt;\")\n        .replace(/\"/g, \"&quot;\");\n    }\n\n    function parseJson(value, fallback) {\n      if (value && typeof value === \"object\") return value;\n      if (typeof value !== \"string\" || !value.trim()) return fallback;\n      try { return JSON.parse(value); } catch { return fallback; }\n    }\n\n    function objectValue(value) {\n      return value && typeof value === \"object\" && !Array.isArray(value)\n        ? value\n        : {};\n    }\n\n    function finiteNumber(value) {\n      return typeof value === \"number\" && Number.isFinite(value) && value > 0\n        ? value\n        : null;\n    }\n\n    function contextMaxHeight(context) {\n      if (!context || typeof context !== \"object\") return null;\n      return finiteNumber(context.maxHeight) ||\n        finiteNumber(context.containerDimensions && context.containerDimensions.maxHeight);\n    }\n\n    function visibleIntrinsicHeight() {\n      const context = hostState().context || {};\n      const hostMaxHeight = contextMaxHeight(context);\n      if (hostMaxHeight) return Math.floor(hostMaxHeight);\n      const viewportHeight = finiteNumber(window.visualViewport && window.visualViewport.height) ||\n        finiteNumber(window.innerHeight);\n      return Math.floor(viewportHeight || defaultIntrinsicHeight);\n    }\n\n    function applyIntrinsicHeight(nextHeight) {\n      const boundedHeight = Math.min(\n        defaultIntrinsicHeight,\n        Math.floor(nextHeight || defaultIntrinsicHeight)\n      );\n      const height = Math.max(320, boundedHeight);\n      const viewportHeight = Math.max(0, height - chromeHeight);\n      document.documentElement.style.setProperty(\"--agent-native-shell-height\", height + \"px\");\n      document.documentElement.style.setProperty(\"--agent-native-viewport-height\", viewportHeight + \"px\");\n      if (appFrame) appFrame.style.height = viewportHeight + \"px\";\n      return height;\n    }\n\n    function parseToolResult(params) {\n      if (!params) return {};\n      if (params.result && typeof params.result === \"object\") {\n        return parseToolResult(params.result);\n      }\n      if (params.toolResult && typeof params.toolResult === \"object\") {\n        return parseToolResult(params.toolResult);\n      }\n      if (params.structuredContent && typeof params.structuredContent === \"object\") {\n        return params.structuredContent;\n      }\n      const parts = Array.isArray(params.content) ? params.content : [];\n      const textPart = parts.find((part) => part && part.type === \"text\" && typeof part.text === \"string\");\n      const text = textPart ? textPart.text : \"\";\n      if (params.isError && typeof text === \"string\" && text.trim()) {\n        return { error: text.trim() };\n      }\n      return parseJson(text, {});\n    }\n\n    function openLinkRecordFrom(value) {\n      return value && typeof value === \"object\" && !Array.isArray(value)\n        ? value\n        : {};\n    }\n\n    function openLinkWebUrlFrom(value) {\n      const record = openLinkRecordFrom(value);\n      return typeof record.webUrl === \"string\" ? record.webUrl : \"\";\n    }\n\n    function firstNonEmbedStartUrl(values) {\n      for (const value of values) {\n        if (typeof value === \"string\" && value && !isEmbedStartUrl(value)) return value;\n      }\n      return \"\";\n    }\n\n    function firstEmbedStartUrl(values) {\n      for (const value of values) {\n        if (typeof value === \"string\" && value && isEmbedStartUrl(value)) {\n          return withChatBridgeParam(value);\n        }\n      }\n      return \"\";\n    }\n\n    function openLinkFrom(params, data) {\n      const openLink = params && params._meta && params._meta[\"agent-native/openLink\"];\n      const metaUrl = openLinkWebUrlFrom(openLink);\n      const record = data && typeof data === \"object\" ? data : {};\n      const structuredOpenLinkUrl = openLinkWebUrlFrom(record.openLink);\n      return firstNonEmbedStartUrl([\n        record.embedTargetPath,\n        record.deepLinkUrl,\n        record.deepLink,\n        record.openUrl,\n        record.url,\n        structuredOpenLinkUrl,\n        metaUrl\n      ]);\n    }\n\n    function embedStartUrlFrom(params, data) {\n      const openLink = params && params._meta && params._meta[\"agent-native/openLink\"];\n      const metaUrl = openLinkWebUrlFrom(openLink);\n      const record = data && typeof data === \"object\" ? data : {};\n      return firstEmbedStartUrl([\n        record.embedStartUrl,\n        record.startUrl,\n        record.url,\n        openLinkWebUrlFrom(record.openLink),\n        metaUrl\n      ]);\n    }\n\n    function hostState() {\n      if (openAiBridge) {\n        return {\n          context: {\n            displayMode: openAiBridge.displayMode,\n            availableDisplayModes: typeof openAiBridge.requestDisplayMode === \"function\"\n              ? [\"inline\", \"fullscreen\", \"pip\"]\n              : [],\n            maxHeight: openAiBridge.maxHeight,\n            locale: openAiBridge.locale,\n            theme: openAiBridge.theme,\n            view: openAiBridge.view\n          },\n          capabilities: { openai: true },\n          version: openAiBridge.userAgent\n        };\n      }\n      return {\n        context: app && app.getHostContext ? app.getHostContext() : undefined,\n        capabilities: app && app.getHostCapabilities ? app.getHostCapabilities() : undefined,\n        version: app && app.getHostVersion ? app.getHostVersion() : undefined\n      };\n    }\n\n    function sendToAppFrame(message) {\n      if (!appFrame || !appFrame.contentWindow) return;\n      try { appFrame.contentWindow.postMessage(message, \"*\"); } catch {}\n    }\n\n    function sendHostContext() {\n      sendToAppFrame({ type: \"agentNative.mcpHostContext\", data: hostState() });\n    }\n\n    function sendFrameReadyMessages(frame) {\n      const originPayload = { type: \"agentNative.frameOrigin\", origin: window.location.origin };\n      frameReadyMessageDelays.forEach((delay) => {\n        setTimeout(() => {\n          try { frame.contentWindow && frame.contentWindow.postMessage(originPayload, \"*\"); } catch {}\n          sendHostContext();\n        }, delay);\n      });\n    }\n\n    function withChatBridgeParam(value) {\n      if (typeof value !== \"string\" || !value) return value;\n      try {\n        const base = \"http://agent-native.invalid\";\n        const url = value.startsWith(\"/\") ? new URL(value, base) : new URL(value);\n        url.searchParams.set(chatBridgeParam, \"1\");\n        return value.startsWith(\"/\")\n          ? url.pathname + url.search + url.hash\n          : url.toString();\n      } catch {\n        return value;\n      }\n    }\n\n    function embedSessionArgsFor(value) {\n      const chrome = typeof toolInput.chrome === \"string\" ? toolInput.chrome : \"full\";\n      return typeof value === \"string\" && value.startsWith(\"/\")\n        ? { path: value, chrome }\n        : { url: value, chrome };\n    }\n\n    function isEmbedStartUrl(value) {\n      if (typeof value !== \"string\" || !value) return false;\n      try {\n        const url = new URL(value, window.location.href);\n        return url.pathname.endsWith(\"/_agent-native/embed/start\");\n      } catch {\n        return false;\n      }\n    }\n\n    function localPathFromUrl(url, includeToken) {\n      const next = new URL(url.href);\n      if (!includeToken) next.searchParams.delete(\"__an_embed_token\");\n      return next.pathname + next.search + next.hash;\n    }\n\n    function rewriteRootRelativeHtmlUrls(html, appOrigin) {\n      return String(html).replace(\n        /\\\\b(src|href|poster|action)\\\\s*=\\\\s*([\"'])\\\\/(?!\\\\/)/gi,\n        (_match, name, quote) => String(name) + \"=\" + quote + appOrigin + \"/\"\n      );\n    }\n\n    function removeHtmlCspMeta(html) {\n      return String(html).replace(\n        /<meta\\\\s+[^>]*http-equiv\\\\s*=\\\\s*([\"'])?content-security-policy\\\\1?[^>]*>/gi,\n        \"\"\n      );\n    }\n\n    function embedConfigForAppUrl(appUrl) {\n      const sanitizedTarget = localPathFromUrl(appUrl, false);\n      return {\n        origin: appUrl.origin,\n        href: appUrl.href,\n        baseHref: appUrl.origin + appUrl.pathname,\n        target: sanitizedTarget,\n        token: appUrl.searchParams.get(\"__an_embed_token\") || \"\",\n        chatBridgeActive: appUrl.searchParams.get(chatBridgeParam) === \"1\",\n        chatBridgeParam,\n        embedTokenParam: \"__an_embed_token\",\n        embedTargetHeader: \"x-agent-native-embed-target\"\n      };\n    }\n\n    function installExternalEmbedRuntime(config) {\n      window.__AGENT_NATIVE_EXTERNAL_EMBED = config;\n      try {\n        if (config.target) {\n          window.history.replaceState(window.history.state, \"\", config.target);\n        }\n      } catch (_err) {}\n      try {\n        if (config.token) {\n          sessionStorage.setItem(\"agent-native:embed-auth-token\", config.token);\n        }\n        if (config.chatBridgeActive && config.token) {\n          sessionStorage.setItem(\"agent-native:mcp-chat-bridge\", config.token);\n        }\n      } catch (_err) {}\n      if (window.__agentNativeExternalEmbedRuntimeInstalled) return;\n      window.__agentNativeExternalEmbedRuntimeInstalled = true;\n      function appOrigin() {\n        try {\n          return new URL(config.origin).origin;\n        } catch (_err) {\n          return \"\";\n        }\n      }\n      function targetPath() {\n        return config.target || location.pathname + location.search;\n      }\n      function rewrittenUrl(value, appendToken) {\n        const origin = appOrigin();\n        if (!origin) return null;\n        let url;\n        try {\n          url = new URL(value, location.href);\n        } catch (_err) {\n          return null;\n        }\n        if (url.origin !== location.origin && url.origin !== origin) return null;\n        if (url.origin !== origin) {\n          const app = new URL(origin);\n          url.protocol = app.protocol;\n          url.host = app.host;\n        }\n        if (appendToken && config.token && url.pathname === \"/_agent-native/events\") {\n          url.searchParams.set(config.embedTokenParam, config.token);\n        }\n        return url.toString();\n      }\n      function authHeaders(input, init) {\n        const headers = new Headers(\n          init && init.headers ? init.headers : input instanceof Request ? input.headers : undefined\n        );\n        if (config.token && !headers.has(\"Authorization\")) {\n          headers.set(\"Authorization\", \"Bearer \" + config.token);\n        }\n        if (!headers.has(config.embedTargetHeader)) {\n          headers.set(config.embedTargetHeader, targetPath());\n        }\n        return headers;\n      }\n      if (typeof fetch === \"function\") {\n        const originalFetch = fetch.bind(window);\n        window.fetch = function(input, init) {\n          const raw = input instanceof Request ? input.url : String(input);\n          const url = rewrittenUrl(raw, false);\n          if (!url) return originalFetch(input, init);\n          const nextInit = Object.assign({}, init || {}, {\n            headers: authHeaders(input, init),\n            credentials: \"omit\"\n          });\n          if (input instanceof Request) {\n            return originalFetch(new Request(url, input), nextInit);\n          }\n          return originalFetch(url, nextInit);\n        };\n      }\n      if (typeof XMLHttpRequest !== \"undefined\") {\n        const originalOpen = XMLHttpRequest.prototype.open;\n        const originalSend = XMLHttpRequest.prototype.send;\n        XMLHttpRequest.prototype.open = function(method, url) {\n          const rewritten = rewrittenUrl(url, false);\n          this.__agentNativeExternalEmbed = !!rewritten;\n          return originalOpen.call(\n            this,\n            method,\n            rewritten || url,\n            arguments.length > 2 ? arguments[2] : true,\n            arguments[3],\n            arguments[4]\n          );\n        };\n        XMLHttpRequest.prototype.send = function(body) {\n          if (this.__agentNativeExternalEmbed) {\n            try {\n              if (config.token) this.setRequestHeader(\"Authorization\", \"Bearer \" + config.token);\n              this.setRequestHeader(config.embedTargetHeader, targetPath());\n            } catch (_err) {}\n          }\n          return originalSend.call(this, body);\n        };\n      }\n      if (typeof EventSource !== \"undefined\") {\n        const OriginalEventSource = EventSource;\n        window.EventSource = function(url, options) {\n          return new OriginalEventSource(rewrittenUrl(url, true) || url, options);\n        };\n        window.EventSource.prototype = OriginalEventSource.prototype;\n      }\n    }\n\n    function copyDocumentElementAttributes(source) {\n      const target = document.documentElement;\n      for (const attr of Array.from(target.attributes)) {\n        target.removeAttribute(attr.name);\n      }\n      for (const attr of Array.from(source.attributes)) {\n        target.setAttribute(attr.name, attr.value);\n      }\n    }\n\n    function importChildren(source, target) {\n      target.replaceChildren(\n        ...Array.from(source.childNodes).map((node) => document.importNode(node, true))\n      );\n    }\n\n    function isModuleScript(script) {\n      return (script.getAttribute(\"type\") || \"\").trim().toLowerCase() === \"module\";\n    }\n\n    function isRunnableClassicScript(script) {\n      const type = (script.getAttribute(\"type\") || \"\").trim().toLowerCase();\n      return !type || type === \"text/javascript\" || type === \"application/javascript\";\n    }\n\n    function runClassicScript(script) {\n      const next = document.createElement(\"script\");\n      for (const attr of Array.from(script.attributes)) {\n        if (attr.name === \"type\") continue;\n        next.setAttribute(attr.name, attr.value);\n      }\n      if (script.src) {\n        next.src = script.src;\n      } else {\n        next.textContent = script.textContent || \"\";\n      }\n      document.body.appendChild(next);\n      next.remove();\n    }\n\n    function rootRelativeSpecifiersToAbsolute(code, appOrigin) {\n      return String(code).replace(/([\"'])\\\\/(?!\\\\/)/g, \"$1\" + appOrigin + \"/\");\n    }\n\n    function moduleCodeToClassicAsync(code, appOrigin) {\n      return rootRelativeSpecifiersToAbsolute(code, appOrigin)\n        .replace(\n          /\\\\bimport\\\\s+\\\\*\\\\s+as\\\\s+([A-Za-z_$][\\\\w$]*)\\\\s+from\\\\s+([\"'][^\"']+[\"'])\\\\s*;?/g,\n          \"const $1 = await import($2);\"\n        )\n        .replace(/\\\\bimport\\\\s+([\"'][^\"']+[\"'])\\\\s*;?/g, \"await import($1);\")\n        .replace(/\\\\bimport\\\\(([\"'][^\"']+[\"'])\\\\)\\\\s*;?/g, \"await import($1);\");\n    }\n\n    function runModuleScriptAsClassic(script, appOrigin) {\n      const code = moduleCodeToClassicAsync(script.textContent || \"\", appOrigin);\n      const runner = document.createElement(\"script\");\n      runner.textContent =\n        \"(async()=>{\" +\n        code +\n        \"})().catch((err)=>{console.error('[agent-native] transplanted app module failed',err);document.body.setAttribute('data-agent-native-hydration-error',String(err&&err.message||err));});\";\n      document.body.appendChild(runner);\n      runner.remove();\n    }\n\n    function mountTransplantedHtml(html, appUrl) {\n      const config = embedConfigForAppUrl(appUrl);\n      installExternalEmbedRuntime(config);\n      const parsed = new DOMParser().parseFromString(\n        rewriteRootRelativeHtmlUrls(removeHtmlCspMeta(html), appUrl.origin),\n        \"text/html\"\n      );\n      const scripts = Array.from(parsed.querySelectorAll(\"script\"));\n      copyDocumentElementAttributes(parsed.documentElement);\n      importChildren(parsed.head, document.head);\n      const base = document.createElement(\"base\");\n      base.href = config.baseHref;\n      document.head.prepend(base);\n      importChildren(parsed.body, document.body);\n      for (const script of scripts) {\n        if (isRunnableClassicScript(script)) runClassicScript(script);\n      }\n      for (const script of scripts) {\n        if (isModuleScript(script)) runModuleScriptAsClassic(script, appUrl.origin);\n      }\n    }\n\n    async function transplantAppDocument(src) {\n      clearFrameReadyTimer();\n      clearFrameLoadTimer();\n      appFrame = null;\n      lastFrameSrc = src;\n      setMessage(\"Loading app\");\n      const response = await fetch(src, {\n        credentials: \"omit\",\n        redirect: \"follow\",\n        headers: { Accept: \"text/html\" }\n      });\n      if (!response.ok) {\n        throw new Error(\"Embedded app returned HTTP \" + response.status + \".\");\n      }\n      const html = await response.text();\n      const appUrl = new URL(response.url || src);\n      try {\n        window.history.replaceState(window.history.state, \"\", localPathFromUrl(appUrl, false));\n      } catch {}\n      mountTransplantedHtml(html, appUrl);\n      notifyHostHeightRepeatedly();\n    }\n\n    function wantsEmbed() {\n      if (toolInput.embed === false || toolInput.embed === \"false\") return false;\n      if (embedByDefault) return true;\n      return toolInput.embed === true || toolInput.embed === \"true\";\n    }\n\n    function supportedDisplayMode(mode) {\n      if (openAiBridge && typeof openAiBridge.requestDisplayMode === \"function\") {\n        return mode === \"inline\" || mode === \"fullscreen\" || mode === \"pip\";\n      }\n      const modes = hostState().context && hostState().context.availableDisplayModes;\n      return Array.isArray(modes) && modes.includes(mode);\n    }\n\n    async function requestHostDisplayMode(mode) {\n      let result;\n      if (openAiBridge && typeof openAiBridge.requestDisplayMode === \"function\") {\n        result = await openAiBridge.requestDisplayMode({ mode });\n      } else {\n        if (!app || typeof app.requestDisplayMode !== \"function\") {\n          throw new Error(\"Display mode changes are not available in this host.\");\n        }\n        result = await app.requestDisplayMode({ mode });\n      }\n      updateDisplayButton();\n      sendHostContext();\n      return result;\n    }\n\n    function updateDisplayButton() {\n      const context = hostState().context || {};\n      const nextMode = context.displayMode === \"fullscreen\" ? \"inline\" : \"fullscreen\";\n      const supported = supportedDisplayMode(nextMode);\n      displayButton.hidden = !supported;\n      displayButton.disabled = !supported;\n      displayButton.textContent = nextMode === \"fullscreen\" ? \"Fullscreen\" : \"Inline\";\n      displayButton.onclick = () => {\n        if (!supportedDisplayMode(nextMode)) return;\n        void requestHostDisplayMode(nextMode).catch((err) => {\n          console.warn(\"[agent-native] MCP host rejected display mode request\", err);\n        });\n      };\n    }\n\n    function setMessage(message) {\n      stage.innerHTML = '<div class=\"message\">' + esc(message) + '</div>';\n    }\n\n    function clearFrameReadyTimer() {\n      if (!appFrameReadyTimer) return;\n      clearTimeout(appFrameReadyTimer);\n      appFrameReadyTimer = null;\n    }\n\n    function clearFrameLoadTimer() {\n      if (!appFrameLoadTimer) return;\n      clearTimeout(appFrameLoadTimer);\n      appFrameLoadTimer = null;\n    }\n\n    function startFrameReadyTimer(frame) {\n      clearFrameReadyTimer();\n      appFrameReadyTimer = setTimeout(() => {\n        if (!appFrameReady && appFrame === frame) renderFrameFallback();\n      }, frameReadyTimeoutMs);\n    }\n\n    function renderFrameFallback() {\n      clearFrameReadyTimer();\n      clearFrameLoadTimer();\n      appFrame = null;\n      stage.innerHTML =\n        '<div class=\"fallback\">' +\n          '<div class=\"fallback-title\">Open this app in its own tab</div>' +\n          '<div class=\"fallback-copy\">This chat host did not allow the embedded app frame to load inline. You can still open the same app route through the host or use the URL below.</div>' +\n          '<div class=\"fallback-actions\">' +\n            '<button type=\"button\" data-fallback-open>Open app</button>' +\n            '<button type=\"button\" data-fallback-retry>Try inline again</button>' +\n          '</div>' +\n          (openUrl || openStartUrl ? '<a class=\"fallback-url\" href=\"' + esc(openUrl || openStartUrl) + '\" target=\"_blank\" rel=\"noreferrer\">' + esc(openUrl || openStartUrl) + '</a>' : '') +\n        '</div>';\n      const fallbackOpen = stage.querySelector(\"[data-fallback-open]\");\n      const fallbackRetry = stage.querySelector(\"[data-fallback-retry]\");\n      if (fallbackOpen) {\n        fallbackOpen.disabled = !(openUrl || openStartUrl);\n        fallbackOpen.onclick = () => {\n          if (openUrl || openStartUrl) void openFallbackExternal();\n        };\n      }\n      if (fallbackRetry) {\n        fallbackRetry.disabled = !lastFrameSrc;\n        fallbackRetry.onclick = () => {\n          if (lastFrameSrc) renderFrame(lastFrameSrc);\n        };\n      }\n    }\n\n    async function openFallbackExternal() {\n      let url = withChatBridgeParam(openUrl);\n      try {\n        if (url) {\n          const result = await callEmbedSessionTool(embedSessionArgsFor(url));\n          const data = parseToolResult(result);\n          if (typeof data.startUrl === \"string\" && data.startUrl) {\n            url = withChatBridgeParam(data.startUrl);\n          }\n        }\n      } catch (err) {\n        console.warn(\"[agent-native] MCP fallback could not mint a fresh app session\", err);\n      }\n      if (!url) url = withChatBridgeParam(openStartUrl);\n      await openHostLink({ url });\n    }\n\n    function renderFrame(src) {\n      clearFrameReadyTimer();\n      clearFrameLoadTimer();\n      const frame = document.createElement(\"iframe\");\n      frame.title = body.dataset.iframeTitle || \"Agent Native app\";\n      frame.src = src;\n      frame.allow = \"clipboard-read; clipboard-write\";\n      appFrame = frame;\n      appFrameReady = false;\n      lastFrameSrc = src;\n      frame.addEventListener(\"load\", () => {\n        if (appFrame !== frame) return;\n        clearFrameLoadTimer();\n        sendFrameReadyMessages(frame);\n        startFrameReadyTimer(frame);\n      });\n      stage.replaceChildren(frame);\n      notifyHostHeight();\n      appFrameLoadTimer = setTimeout(() => {\n        if (!appFrameReady && appFrame === frame) renderFrameFallback();\n      }, frameLoadTimeoutMs);\n    }\n\n    function refreshExpiredEmbedSession() {\n      clearFrameReadyTimer();\n      clearFrameLoadTimer();\n      appFrameReady = false;\n      if (!openUrl) {\n        renderFrameFallback();\n        return;\n      }\n      openStartUrl = \"\";\n      startedFor = \"\";\n      lastFrameSrc = \"\";\n      setMessage(\"Refreshing app session\");\n      void launchEmbed();\n    }\n\n    function shouldSelfNavigateToApp() {\n      const mode = typeof toolInput.embedMode === \"string\"\n        ? toolInput.embedMode\n        : typeof toolInput.renderMode === \"string\"\n          ? toolInput.renderMode\n          : \"\";\n      if (mode === \"iframe\" || mode === \"nested\") return false;\n      if (toolInput.nested === true || toolInput.frame === \"iframe\") return false;\n      return true;\n    }\n\n    function shouldTransplantAppDocument() {\n      const mode = typeof toolInput.embedMode === \"string\"\n        ? toolInput.embedMode\n        : typeof toolInput.renderMode === \"string\"\n          ? toolInput.renderMode\n          : \"\";\n      return (\n        mode === \"transplant\" ||\n        toolInput.frame === \"transplant\" ||\n        isClaudeMcpContentHost()\n      );\n    }\n\n    function isClaudeMcpContentHost() {\n      try {\n        return /(^|\\\\.)claudemcpcontent\\\\.com$/i.test(window.location.hostname || \"\");\n      } catch {\n        return false;\n      }\n    }\n\n    function isChatGptSandboxHost() {\n      try {\n        const host = window.location.hostname || \"\";\n        const appParam = new URL(window.location.href).searchParams.get(\"app\");\n        return /(^|\\\\.)oaiusercontent\\\\.com$/i.test(host) || appParam === \"chatgpt\";\n      } catch {\n        return false;\n      }\n    }\n\n    function shouldRenderControlledAppFrame() {\n      return !!openAiBridge || isChatGptSandboxHost();\n    }\n\n    function navigateToAppFrame(src) {\n      clearFrameReadyTimer();\n      clearFrameLoadTimer();\n      appFrame = null;\n      lastFrameSrc = src;\n      setMessage(\"Opening app\");\n      try {\n        window.location.replace(src);\n      } catch (err) {\n        console.warn(\"[agent-native] MCP app self-navigation failed\", err);\n        renderFrameFallback();\n      }\n    }\n\n    async function updateHostModelContext(data) {\n      const params = {};\n      if (Array.isArray(data && data.content)) params.content = data.content;\n      if (data && data.structuredContent && typeof data.structuredContent === \"object\") {\n        params.structuredContent = data.structuredContent;\n      }\n      if (openAiBridge && typeof openAiBridge.setWidgetState === \"function\") {\n        openAiBridge.setWidgetState({\n          ...objectValue(openAiBridge.widgetState),\n          agentNativeModelContext: params\n        });\n        return { ok: true };\n      }\n      if (!app || typeof app.updateModelContext !== \"function\") return { ok: false };\n      await app.updateModelContext(params);\n      return { ok: true };\n    }\n\n    async function openHostLink(data) {\n      const url = typeof (data && data.url) === \"string\" ? data.url : \"\";\n      if (!url) return { isError: true };\n      if (openAiBridge && typeof openAiBridge.openExternal === \"function\") {\n        return await openAiBridge.openExternal({ href: url, redirectUrl: false });\n      }\n      if (app && typeof app.openLink === \"function\") {\n        return await app.openLink({ url });\n      }\n      window.open(url, \"_blank\", \"noopener,noreferrer\");\n      return { ok: true };\n    }\n\n    function notifyHostHeight() {\n      const height = applyIntrinsicHeight(visibleIntrinsicHeight());\n      if (!openAiBridge || typeof openAiBridge.notifyIntrinsicHeight !== \"function\") {\n        if (app && typeof app.sendSizeChanged === \"function\") {\n          try {\n            app.sendSizeChanged({ height });\n          } catch (err) {\n            console.warn(\"[agent-native] MCP host rejected size update\", err);\n          }\n        }\n        return;\n      }\n      try {\n        openAiBridge.notifyIntrinsicHeight({ height });\n      } catch (err) {\n        console.warn(\"[agent-native] ChatGPT rejected intrinsic height update\", err);\n      }\n    }\n\n    function respondToAppFrame(requestId, work) {\n      if (!requestId) return;\n      Promise.resolve(work)\n        .then((result) => {\n          sendToAppFrame({\n            type: \"agentNative.mcpHost.response\",\n            data: { requestId, ok: true, result }\n          });\n        })\n        .catch((err) => {\n          sendToAppFrame({\n            type: \"agentNative.mcpHost.response\",\n            data: {\n              requestId,\n              ok: false,\n              error: err && err.message ? err.message : String(err)\n            }\n          });\n        });\n    }\n\n    async function sendHostChat(chat) {\n      if (!chat || chat.submit === false) return;\n      const message = typeof chat.message === \"string\" ? chat.message : \"\";\n      if (!message.trim()) return;\n      const context = typeof chat.context === \"string\" ? chat.context : \"\";\n      if (context.trim()) {\n        try {\n          if (openAiBridge && typeof openAiBridge.setWidgetState === \"function\") {\n            openAiBridge.setWidgetState({\n              ...objectValue(openAiBridge.widgetState),\n              agentNativeChatContext: context\n            });\n          } else if (app && typeof app.updateModelContext === \"function\") {\n            await app.updateModelContext({\n              content: [{ type: \"text\", text: context }]\n            });\n          }\n        } catch (err) {\n          console.warn(\"[agent-native] MCP host rejected model context update\", err);\n        }\n      }\n      try {\n        if (openAiBridge && typeof openAiBridge.sendFollowUpMessage === \"function\") {\n          await openAiBridge.sendFollowUpMessage({\n            prompt: context.trim() ? context.trim() + \"\\\\n\\\\n\" + message : message,\n            scrollToBottom: true\n          });\n          return;\n        }\n        if (!app || typeof app.sendMessage !== \"function\") return;\n        const result = await app.sendMessage({\n          role: \"user\",\n          content: [{ type: \"text\", text: message }]\n        });\n        if (result && result.isError) {\n          console.warn(\"[agent-native] MCP host rejected chat message\", result);\n        }\n      } catch (err) {\n        console.warn(\"[agent-native] MCP host chat bridge failed\", err);\n      }\n    }\n\n    window.addEventListener(\"message\", (event) => {\n      if (!appFrame || event.source !== appFrame.contentWindow) return;\n      if (!event.data) return;\n      const data = event.data.data || {};\n      if (event.data.type === \"agentNative.embeddedAppReady\") {\n        appFrameReady = true;\n        clearFrameLoadTimer();\n        clearFrameReadyTimer();\n        return;\n      }\n      if (event.data.type === \"agentNative.embedSessionExpired\") {\n        refreshExpiredEmbedSession();\n        return;\n      }\n      if (event.data.type === \"agentNative.submitChat\") {\n        void sendHostChat(data);\n        return;\n      }\n      if (event.data.type === \"agentNative.mcpHost.updateModelContext\") {\n        respondToAppFrame(data.requestId, updateHostModelContext(data));\n        return;\n      }\n      if (event.data.type === \"agentNative.mcpHost.openLink\") {\n        respondToAppFrame(data.requestId, openHostLink(data));\n        return;\n      }\n      if (event.data.type === \"agentNative.mcpHost.requestDisplayMode\") {\n        respondToAppFrame(data.requestId, requestHostDisplayMode(data.mode));\n      }\n    });\n\n    function notifyHostHeightSoon() {\n      requestAnimationFrame(() => notifyHostHeight());\n    }\n\n    function notifyHostHeightRepeatedly() {\n      notifyHostHeight();\n      [0, 250, 1000, 2500].forEach((delay) => {\n        setTimeout(() => notifyHostHeight(), delay);\n      });\n    }\n\n    window.addEventListener(\"resize\", notifyHostHeightSoon, { passive: true });\n    if (window.visualViewport) {\n      window.visualViewport.addEventListener(\"resize\", notifyHostHeightSoon, { passive: true });\n    }\n\n    async function launchEmbed() {\n      const launchUrl = openStartUrl || openUrl;\n      if (!launchUrl) {\n        setMessage(\"Open link was not available.\");\n        return;\n      }\n      if (!wantsEmbed()) {\n        setMessage(\"Ready to open.\");\n        return;\n      }\n      if (startedFor === launchUrl) return;\n      startedFor = launchUrl;\n      setMessage(\"Loading app\");\n      try {\n        const selfNavigate = shouldSelfNavigateToApp();\n        const embedUrl = withChatBridgeParam(launchUrl);\n        if (selfNavigate && isEmbedStartUrl(embedUrl)) {\n          if (isClaudeMcpContentHost() && shouldTransplantAppDocument()) {\n            await transplantAppDocument(embedUrl);\n          } else if (shouldRenderControlledAppFrame()) {\n            renderFrame(embedUrl);\n          } else {\n            navigateToAppFrame(embedUrl);\n          }\n          return;\n        }\n        if (!selfNavigate && isEmbedStartUrl(embedUrl)) {\n          renderFrame(embedUrl);\n          return;\n        }\n        const result = await callEmbedSessionTool(embedSessionArgsFor(embedUrl));\n        const data = parseToolResult(result);\n        if (typeof data.startUrl !== \"string\" || !data.startUrl) {\n          startedFor = \"\";\n          setMessage(data.error || \"This app can be opened, but not embedded from this MCP server.\");\n          return;\n        }\n        const startUrl = withChatBridgeParam(data.startUrl);\n        if (selfNavigate) {\n          if (isClaudeMcpContentHost() && shouldTransplantAppDocument()) {\n            await transplantAppDocument(startUrl);\n          } else if (shouldRenderControlledAppFrame()) {\n            renderFrame(startUrl);\n          } else {\n            navigateToAppFrame(startUrl);\n          }\n        } else {\n          renderFrame(startUrl);\n        }\n      } catch (err) {\n        startedFor = \"\";\n        setMessage(err && err.message ? err.message : \"Could not launch embedded app.\");\n      }\n    }\n\n    async function callEmbedSessionTool(args) {\n      if (openAiBridge && typeof openAiBridge.callTool === \"function\") {\n        return await openAiBridge.callTool(startTool, args);\n      }\n      if (!app || typeof app.callServerTool !== \"function\") {\n        throw new Error(\"Host tool calls are not available.\");\n      }\n      return await app.callServerTool({ name: startTool, arguments: args });\n    }\n\n    function updateHostOpenInAppUrl() {\n      if (!openAiBridge || !openUrl || typeof openAiBridge.setOpenInAppUrl !== \"function\") {\n        return;\n      }\n      try {\n        openAiBridge.setOpenInAppUrl({ href: openUrl });\n      } catch (err) {\n        console.warn(\"[agent-native] ChatGPT rejected open-in-app URL\", err);\n      }\n    }\n\n    function updateOpenButton() {\n      const buttonUrl = openUrl || openStartUrl;\n      openButton.disabled = !buttonUrl;\n      openButton.onclick = () => {\n        if (buttonUrl) void openHostLink({ url: buttonUrl });\n      };\n      updateHostOpenInAppUrl();\n    }\n\n    function updateTitle(data) {\n      const label = data.label || data.app || data.view || body.dataset.appTitle || \"App\";\n      titleEl.textContent = String(label);\n    }\n\n    function readOpenAiBridge() {\n      return window.openai && typeof window.openai === \"object\"\n        ? window.openai\n        : null;\n    }\n\n    function openAiToolResultParams(bridge) {\n      const params = {};\n      if (bridge && bridge.toolOutput !== undefined) {\n        if (bridge.toolOutput && typeof bridge.toolOutput === \"object\") {\n          params.structuredContent = bridge.toolOutput;\n        } else {\n          params.content = [{ type: \"text\", text: String(bridge.toolOutput) }];\n        }\n      }\n      if (bridge && bridge.toolResponseMetadata && typeof bridge.toolResponseMetadata === \"object\") {\n        params._meta = bridge.toolResponseMetadata;\n      }\n      return params;\n    }\n\n    function syncOpenAiBridge(bridge) {\n      if (!bridge) return false;\n      openAiBridge = bridge;\n      toolInput = objectValue(bridge.toolInput);\n      const params = openAiToolResultParams(bridge);\n      const data = parseToolResult(params);\n      openUrl = openLinkFrom(params, data);\n      openStartUrl = embedStartUrlFrom(params, data);\n      updateTitle(data);\n      updateOpenButton();\n      updateDisplayButton();\n      notifyHostHeight();\n      sendHostContext();\n      if (openUrl || openStartUrl) {\n        void launchEmbed();\n      } else if (!appFrame) {\n        setMessage(\"Waiting for app result\");\n      }\n      return true;\n    }\n\n    function waitForOpenAiBridge() {\n      const existing = readOpenAiBridge();\n      if (existing) return Promise.resolve(existing);\n      return new Promise((resolve) => {\n        let settled = false;\n        const finish = (bridge) => {\n          if (settled) return;\n          settled = true;\n          window.removeEventListener(\"openai:set_globals\", onGlobals);\n          clearTimeout(timer);\n          resolve(bridge || readOpenAiBridge());\n        };\n        const onGlobals = () => finish(readOpenAiBridge());\n        const timer = setTimeout(() => finish(null), 200);\n        window.addEventListener(\"openai:set_globals\", onGlobals, { passive: true });\n      });\n    }\n\n    window.addEventListener(\"openai:set_globals\", () => {\n      const bridge = readOpenAiBridge();\n      if (bridge && (!appFrame || openAiBridge)) syncOpenAiBridge(bridge);\n    }, { passive: true });\n\n    async function startMcpAppsBridge() {\n      const { App } = await import(\"${MCP_APP_IMPORT}\");\n      app = new App(\n        { name: \"Agent Native Embed\", version: \"1.0.0\" },\n        {},\n        { autoResize: false }\n      );\n      app.ontoolinput = (params) => {\n        toolInput = params.arguments || {};\n      };\n      app.ontoolresult = (params) => {\n        const data = parseToolResult(params);\n        openUrl = openLinkFrom(params, data);\n        openStartUrl = embedStartUrlFrom(params, data);\n        updateTitle(data);\n        updateOpenButton();\n        void launchEmbed();\n      };\n      app.onhostcontextchanged = () => {\n        updateDisplayButton();\n        notifyHostHeight();\n        sendHostContext();\n      };\n      await app.connect();\n      updateDisplayButton();\n      notifyHostHeight();\n      sendHostContext();\n    }\n\n    const initialOpenAiBridge = await waitForOpenAiBridge();\n    if (!syncOpenAiBridge(initialOpenAiBridge)) {\n      await startMcpAppsBridge();\n    }\n  </script>\n</body>\n</html>`,\n    csp: {\n      connectDomains: [\n        \"https://esm.sh\",\n        MCP_APP_REQUEST_ORIGIN_CSP_SOURCE,\n        ...(options.frameDomains ?? []),\n      ],\n      resourceDomains: [\n        \"https://esm.sh\",\n        MCP_APP_REQUEST_ORIGIN_CSP_SOURCE,\n        ...(options.frameDomains ?? []),\n      ],\n      baseUriDomains: [MCP_APP_REQUEST_ORIGIN_CSP_SOURCE],\n      frameDomains,\n    },\n    prefersBorder: false,\n  };\n}\n"]}
+{"version":3,"file":"embed-app.js","sourceRoot":"","sources":["../../src/mcp/embed-app.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAE1E,MAAM,cAAc,GAClB,mEAAmE,CAAC;AAEtE,MAAM,CAAC,MAAM,iCAAiC,GAAG,gBAAgB,CAAC;AAClE,MAAM,6BAA6B,GAAG,EAAE,CAAC;AACzC,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAChD,MAAM,CAAC,MAAM,+BAA+B,GAC1C,4BAA4B,GAAG,6BAA6B,CAAC;AAa/D,SAAS,IAAI,CAAC,KAAyB;IACrC,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,UAA2B,EAAE;IAE7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC;IAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,aAAa,CAAC;IACrD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,sBAAsB,CAAC;IACtE,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,KAAK,KAAK,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CACrB,GAAG,EACH,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,IAAI,4BAA4B,CAAC,CAC9D,CAAC;IACF,MAAM,cAAc,GAAG,MAAM,GAAG,6BAA6B,CAAC;IAC9D,MAAM,YAAY,GAAG;QACnB,iCAAiC;QACjC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;KAChC,CAAC;IAEF,OAAO;QACL,KAAK;QACL,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,IAAI,EAAE,GAAG,EAAE,CAAC;;;;;;8MAM8L,MAAM,uCAAuC,cAAc;;;;;;;;;;;;;;;;;;;;oBAoBrP,IAAI,CAAC,KAAK,CAAC;uBACR,IAAI,CAAC,WAAW,CAAC;qBACnB,IAAI,CAAC,SAAS,CAAC;qBACf,IAAI,CAAC,aAAa,CAAC;wBAChB,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;;;;4CAIN,IAAI,CAAC,KAAK,CAAC;;;mDAGJ,IAAI,CAAC,SAAS,CAAC;;;;;;;;;;;;;;;8BAepC,IAAI,CAAC,SAAS,CAAC,+BAA+B,CAAC;qCACxC,MAAM;2BAChB,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sCA++BlB,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAkC5C;QACJ,GAAG,EAAE;YACH,cAAc,EAAE;gBACd,gBAAgB;gBAChB,iCAAiC;gBACjC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;aAChC;YACD,eAAe,EAAE;gBACf,gBAAgB;gBAChB,iCAAiC;gBACjC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;aAChC;YACD,cAAc,EAAE,CAAC,iCAAiC,CAAC;YACnD,YAAY;SACb;QACD,aAAa,EAAE,KAAK;KACrB,CAAC;AACJ,CAAC","sourcesContent":["import type { ActionMcpAppResourceConfig } from \"../action.js\";\nimport { MCP_APP_CHAT_BRIDGE_QUERY_PARAM } from \"../shared/embed-auth.js\";\n\nconst MCP_APP_IMPORT =\n  \"https://esm.sh/@modelcontextprotocol/ext-apps@1.7.2/app-with-deps\";\n\nexport const MCP_APP_REQUEST_ORIGIN_CSP_SOURCE = \"$requestOrigin\";\nconst MCP_APP_WRAPPER_CHROME_HEIGHT = 44;\nexport const DEFAULT_MCP_APP_SHELL_HEIGHT = 560;\nexport const DEFAULT_MCP_APP_VIEWPORT_HEIGHT =\n  DEFAULT_MCP_APP_SHELL_HEIGHT - MCP_APP_WRAPPER_CHROME_HEIGHT;\n\nexport interface EmbedAppOptions {\n  title?: string;\n  description?: string;\n  iframeTitle?: string;\n  openLabel?: string;\n  embedByDefault?: boolean;\n  startToolName?: string;\n  frameDomains?: string[];\n  height?: number;\n}\n\nfunction attr(value: string | undefined): string {\n  return String(value ?? \"\")\n    .replace(/&/g, \"&amp;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\");\n}\n\nexport function embedApp(\n  options: EmbedAppOptions = {},\n): ActionMcpAppResourceConfig {\n  const title = options.title ?? \"Open app\";\n  const iframeTitle = options.iframeTitle ?? \"Agent Native app\";\n  const openLabel = options.openLabel ?? \"Open in app\";\n  const startToolName = options.startToolName ?? \"create_embed_session\";\n  const embedByDefault = options.embedByDefault !== false;\n  const height = Math.max(\n    320,\n    Math.min(900, options.height ?? DEFAULT_MCP_APP_SHELL_HEIGHT),\n  );\n  const viewportHeight = height - MCP_APP_WRAPPER_CHROME_HEIGHT;\n  const frameDomains = [\n    MCP_APP_REQUEST_ORIGIN_CSP_SOURCE,\n    ...(options.frameDomains ?? []),\n  ];\n\n  return {\n    title,\n    ...(options.description ? { description: options.description } : {}),\n    html: () => `<!doctype html>\n<html lang=\"en\">\n<head>\n  <meta charset=\"utf-8\">\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n  <style>\n    :root { color-scheme: light dark; font-family: ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif; background: Canvas; color: CanvasText; --agent-native-shell-height: ${height}px; --agent-native-viewport-height: ${viewportHeight}px; }\n    * { box-sizing: border-box; }\n    body { margin: 0; }\n    .shell { display: grid; gap: 8px; min-height: var(--agent-native-shell-height); padding: 0; }\n    .bar { display: flex; align-items: center; justify-content: space-between; gap: 8px; min-height: 36px; padding: 6px 8px; border-bottom: 1px solid color-mix(in srgb, CanvasText 12%, Canvas); }\n    .title { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; font-size: 12px; font-weight: 700; color: color-mix(in srgb, CanvasText 72%, Canvas); }\n    .actions { display: flex; align-items: center; gap: 6px; }\n    button { min-height: 28px; border: 1px solid color-mix(in srgb, CanvasText 14%, Canvas); border-radius: 7px; background: Canvas; color: CanvasText; cursor: pointer; font: inherit; font-size: 12px; font-weight: 700; padding: 0 9px; }\n    button:disabled { opacity: .55; cursor: default; }\n    .stage { position: relative; min-height: var(--agent-native-viewport-height); }\n    iframe { display: block; width: 100%; height: var(--agent-native-viewport-height); border: 0; background: Canvas; }\n    .message { display: grid; place-items: center; min-height: var(--agent-native-viewport-height); padding: 18px; color: color-mix(in srgb, CanvasText 62%, Canvas); font-size: 13px; line-height: 1.45; text-align: center; }\n    .fallback { display: grid; align-content: center; justify-items: center; gap: 12px; min-height: var(--agent-native-viewport-height); padding: 24px; background: Canvas; color: CanvasText; text-align: center; }\n    .fallback-title { max-width: 440px; font-size: 14px; font-weight: 700; }\n    .fallback-copy { max-width: 520px; color: color-mix(in srgb, CanvasText 64%, Canvas); font-size: 13px; line-height: 1.45; }\n    .fallback-actions { display: flex; flex-wrap: wrap; align-items: center; justify-content: center; gap: 8px; }\n    .fallback-url { max-width: min(560px, 100%); overflow-wrap: anywhere; color: color-mix(in srgb, CanvasText 76%, Canvas); font-size: 12px; }\n  </style>\n</head>\n<body\n  data-app-title=\"${attr(title)}\"\n  data-iframe-title=\"${attr(iframeTitle)}\"\n  data-open-label=\"${attr(openLabel)}\"\n  data-start-tool=\"${attr(startToolName)}\"\n  data-embed-default=\"${embedByDefault ? \"1\" : \"0\"}\"\n>\n  <main class=\"shell\">\n    <div class=\"bar\">\n      <div class=\"title\" data-title-label>${attr(title)}</div>\n      <div class=\"actions\">\n        <button type=\"button\" data-display hidden disabled>Fullscreen</button>\n        <button type=\"button\" data-open disabled>${attr(openLabel)}</button>\n      </div>\n    </div>\n    <section class=\"stage\" data-stage>\n      <div class=\"message\">Preparing app</div>\n    </section>\n  </main>\n  <script type=\"module\">\n    const body = document.body;\n    const stage = document.querySelector(\"[data-stage]\");\n    const titleEl = document.querySelector(\"[data-title-label]\");\n    const openButton = document.querySelector(\"[data-open]\");\n    const displayButton = document.querySelector(\"[data-display]\");\n    const startTool = body.dataset.startTool || \"create_embed_session\";\n    const embedByDefault = body.dataset.embedDefault !== \"0\";\n    const chatBridgeParam = ${JSON.stringify(MCP_APP_CHAT_BRIDGE_QUERY_PARAM)};\n    const defaultIntrinsicHeight = ${height};\n    const chromeHeight = ${MCP_APP_WRAPPER_CHROME_HEIGHT};\n    const frameReadyMessageDelays = [0, 200, 500, 1500, 3000, 7000, 15000, 30000];\n    const frameReadyTimeoutMs = 45000;\n    const frameLoadTimeoutMs = 45000;\n    let app = null;\n    let openAiBridge = null;\n    let toolInput = {};\n    let openUrl = \"\";\n    let openStartUrl = \"\";\n    let startedFor = \"\";\n    let appFrame = null;\n    let appFrameReady = false;\n    let appFrameReadyTimer = null;\n    let appFrameLoadTimer = null;\n    let lastFrameSrc = \"\";\n\n    function esc(value) {\n      return String(value ?? \"\")\n        .replace(/&/g, \"&amp;\")\n        .replace(/</g, \"&lt;\")\n        .replace(/>/g, \"&gt;\")\n        .replace(/\"/g, \"&quot;\");\n    }\n\n    function parseJson(value, fallback) {\n      if (value && typeof value === \"object\") return value;\n      if (typeof value !== \"string\" || !value.trim()) return fallback;\n      try { return JSON.parse(value); } catch { return fallback; }\n    }\n\n    function objectValue(value) {\n      return value && typeof value === \"object\" && !Array.isArray(value)\n        ? value\n        : {};\n    }\n\n    function finiteNumber(value) {\n      return typeof value === \"number\" && Number.isFinite(value) && value > 0\n        ? value\n        : null;\n    }\n\n    function contextMaxHeight(context) {\n      if (!context || typeof context !== \"object\") return null;\n      return finiteNumber(context.maxHeight) ||\n        finiteNumber(context.containerDimensions && context.containerDimensions.maxHeight);\n    }\n\n    function visibleIntrinsicHeight() {\n      const context = hostState().context || {};\n      const hostMaxHeight = contextMaxHeight(context);\n      if (hostMaxHeight) return Math.floor(hostMaxHeight);\n      const viewportHeight = finiteNumber(window.visualViewport && window.visualViewport.height) ||\n        finiteNumber(window.innerHeight);\n      return Math.floor(viewportHeight || defaultIntrinsicHeight);\n    }\n\n    function applyIntrinsicHeight(nextHeight) {\n      const boundedHeight = Math.min(\n        defaultIntrinsicHeight,\n        Math.floor(nextHeight || defaultIntrinsicHeight)\n      );\n      const height = Math.max(320, boundedHeight);\n      const viewportHeight = Math.max(0, height - chromeHeight);\n      document.documentElement.style.setProperty(\"--agent-native-shell-height\", height + \"px\");\n      document.documentElement.style.setProperty(\"--agent-native-viewport-height\", viewportHeight + \"px\");\n      if (appFrame) appFrame.style.height = viewportHeight + \"px\";\n      return height;\n    }\n\n    function parseToolResult(params) {\n      if (!params) return {};\n      if (params.result && typeof params.result === \"object\") {\n        return parseToolResult(params.result);\n      }\n      if (params.toolResult && typeof params.toolResult === \"object\") {\n        return parseToolResult(params.toolResult);\n      }\n      if (params.structuredContent && typeof params.structuredContent === \"object\") {\n        return params.structuredContent;\n      }\n      const parts = Array.isArray(params.content) ? params.content : [];\n      const textPart = parts.find((part) => part && part.type === \"text\" && typeof part.text === \"string\");\n      const text = textPart ? textPart.text : \"\";\n      if (params.isError && typeof text === \"string\" && text.trim()) {\n        return { error: text.trim() };\n      }\n      return parseJson(text, {});\n    }\n\n    function openLinkRecordFrom(value) {\n      return value && typeof value === \"object\" && !Array.isArray(value)\n        ? value\n        : {};\n    }\n\n    function openLinkWebUrlFrom(value) {\n      const record = openLinkRecordFrom(value);\n      return typeof record.webUrl === \"string\" ? record.webUrl : \"\";\n    }\n\n    function firstNonEmbedStartUrl(values) {\n      for (const value of values) {\n        if (typeof value === \"string\" && value && !isEmbedStartUrl(value)) return value;\n      }\n      return \"\";\n    }\n\n    function firstEmbedStartUrl(values) {\n      for (const value of values) {\n        if (typeof value === \"string\" && value && isEmbedStartUrl(value)) {\n          return withChatBridgeParam(value);\n        }\n      }\n      return \"\";\n    }\n\n    function openLinkFrom(params, data) {\n      const openLink = params && params._meta && params._meta[\"agent-native/openLink\"];\n      const metaUrl = openLinkWebUrlFrom(openLink);\n      const record = data && typeof data === \"object\" ? data : {};\n      const structuredOpenLinkUrl = openLinkWebUrlFrom(record.openLink);\n      return firstNonEmbedStartUrl([\n        record.embedTargetPath,\n        record.deepLinkUrl,\n        record.deepLink,\n        record.openUrl,\n        record.url,\n        structuredOpenLinkUrl,\n        metaUrl\n      ]);\n    }\n\n    function embedStartUrlFrom(params, data) {\n      const embedStart =\n        params && params._meta && params._meta[\"agent-native/embedStart\"];\n      const embedStartRecord =\n        embedStart && typeof embedStart === \"object\" && !Array.isArray(embedStart)\n          ? embedStart\n          : {};\n      const openLink = params && params._meta && params._meta[\"agent-native/openLink\"];\n      const metaUrl = openLinkWebUrlFrom(openLink);\n      const record = data && typeof data === \"object\" ? data : {};\n      return firstEmbedStartUrl([\n        embedStartRecord.startUrl,\n        record.embedStartUrl,\n        record.startUrl,\n        record.url,\n        openLinkWebUrlFrom(record.openLink),\n        metaUrl\n      ]);\n    }\n\n    function hostState() {\n      if (openAiBridge) {\n        return {\n          context: {\n            displayMode: openAiBridge.displayMode,\n            availableDisplayModes: typeof openAiBridge.requestDisplayMode === \"function\"\n              ? [\"inline\", \"fullscreen\", \"pip\"]\n              : [],\n            maxHeight: openAiBridge.maxHeight,\n            locale: openAiBridge.locale,\n            theme: openAiBridge.theme,\n            view: openAiBridge.view\n          },\n          capabilities: { openai: true },\n          version: openAiBridge.userAgent\n        };\n      }\n      return {\n        context: app && app.getHostContext ? app.getHostContext() : undefined,\n        capabilities: app && app.getHostCapabilities ? app.getHostCapabilities() : undefined,\n        version: app && app.getHostVersion ? app.getHostVersion() : undefined\n      };\n    }\n\n    function sendToAppFrame(message) {\n      if (!appFrame || !appFrame.contentWindow) return;\n      try { appFrame.contentWindow.postMessage(message, \"*\"); } catch {}\n    }\n\n    function sendHostContext() {\n      sendToAppFrame({ type: \"agentNative.mcpHostContext\", data: hostState() });\n    }\n\n    function sendFrameReadyMessages(frame) {\n      const originPayload = { type: \"agentNative.frameOrigin\", origin: window.location.origin };\n      frameReadyMessageDelays.forEach((delay) => {\n        setTimeout(() => {\n          try { frame.contentWindow && frame.contentWindow.postMessage(originPayload, \"*\"); } catch {}\n          sendHostContext();\n        }, delay);\n      });\n    }\n\n    function withChatBridgeParam(value) {\n      if (typeof value !== \"string\" || !value) return value;\n      try {\n        const base = \"http://agent-native.invalid\";\n        const url = value.startsWith(\"/\") ? new URL(value, base) : new URL(value);\n        url.searchParams.set(chatBridgeParam, \"1\");\n        return value.startsWith(\"/\")\n          ? url.pathname + url.search + url.hash\n          : url.toString();\n      } catch {\n        return value;\n      }\n    }\n\n    function embedSessionArgsFor(value) {\n      const chrome = typeof toolInput.chrome === \"string\" ? toolInput.chrome : \"full\";\n      return typeof value === \"string\" && value.startsWith(\"/\")\n        ? { path: value, chrome }\n        : { url: value, chrome };\n    }\n\n    function isEmbedStartUrl(value) {\n      if (typeof value !== \"string\" || !value) return false;\n      try {\n        const url = new URL(value, window.location.href);\n        return url.pathname.endsWith(\"/_agent-native/embed/start\");\n      } catch {\n        return false;\n      }\n    }\n\n    function localPathFromUrl(url, includeToken) {\n      const next = new URL(url.href);\n      if (!includeToken) next.searchParams.delete(\"__an_embed_token\");\n      return next.pathname + next.search + next.hash;\n    }\n\n    function rewriteRootRelativeHtmlUrls(html, appOrigin) {\n      return String(html).replace(\n        /\\\\b(src|href|poster|action)\\\\s*=\\\\s*([\"'])\\\\/(?!\\\\/)/gi,\n        (_match, name, quote) => String(name) + \"=\" + quote + appOrigin + \"/\"\n      );\n    }\n\n    function removeHtmlCspMeta(html) {\n      return String(html).replace(\n        /<meta\\\\s+[^>]*http-equiv\\\\s*=\\\\s*([\"'])?content-security-policy\\\\1?[^>]*>/gi,\n        \"\"\n      );\n    }\n\n    function embedConfigForAppUrl(appUrl) {\n      const sanitizedTarget = localPathFromUrl(appUrl, false);\n      return {\n        origin: appUrl.origin,\n        href: appUrl.href,\n        baseHref: appUrl.origin + appUrl.pathname,\n        target: sanitizedTarget,\n        token: appUrl.searchParams.get(\"__an_embed_token\") || \"\",\n        chatBridgeActive: appUrl.searchParams.get(chatBridgeParam) === \"1\",\n        chatBridgeParam,\n        embedTokenParam: \"__an_embed_token\",\n        embedTargetHeader: \"x-agent-native-embed-target\"\n      };\n    }\n\n    function installExternalEmbedRuntime(config) {\n      window.__AGENT_NATIVE_EXTERNAL_EMBED = config;\n      try {\n        if (config.target) {\n          window.history.replaceState(window.history.state, \"\", config.target);\n        }\n      } catch (_err) {}\n      try {\n        if (config.token) {\n          sessionStorage.setItem(\"agent-native:embed-auth-token\", config.token);\n        }\n        if (config.chatBridgeActive && config.token) {\n          sessionStorage.setItem(\"agent-native:mcp-chat-bridge\", config.token);\n        }\n      } catch (_err) {}\n      if (window.__agentNativeExternalEmbedRuntimeInstalled) return;\n      window.__agentNativeExternalEmbedRuntimeInstalled = true;\n      function appOrigin() {\n        try {\n          return new URL(config.origin).origin;\n        } catch (_err) {\n          return \"\";\n        }\n      }\n      function targetPath() {\n        return config.target || location.pathname + location.search;\n      }\n      function rewrittenUrl(value, appendToken) {\n        const origin = appOrigin();\n        if (!origin) return null;\n        let url;\n        try {\n          url = new URL(value, location.href);\n        } catch (_err) {\n          return null;\n        }\n        if (url.origin !== location.origin && url.origin !== origin) return null;\n        if (url.origin !== origin) {\n          const app = new URL(origin);\n          url.protocol = app.protocol;\n          url.host = app.host;\n        }\n        if (appendToken && config.token && url.pathname === \"/_agent-native/events\") {\n          url.searchParams.set(config.embedTokenParam, config.token);\n        }\n        return url.toString();\n      }\n      function authHeaders(input, init) {\n        const headers = new Headers(\n          init && init.headers ? init.headers : input instanceof Request ? input.headers : undefined\n        );\n        if (config.token && !headers.has(\"Authorization\")) {\n          headers.set(\"Authorization\", \"Bearer \" + config.token);\n        }\n        if (!headers.has(config.embedTargetHeader)) {\n          headers.set(config.embedTargetHeader, targetPath());\n        }\n        return headers;\n      }\n      if (typeof fetch === \"function\") {\n        const originalFetch = fetch.bind(window);\n        window.fetch = function(input, init) {\n          const raw = input instanceof Request ? input.url : String(input);\n          const url = rewrittenUrl(raw, false);\n          if (!url) return originalFetch(input, init);\n          const nextInit = Object.assign({}, init || {}, {\n            headers: authHeaders(input, init),\n            credentials: \"omit\"\n          });\n          if (input instanceof Request) {\n            return originalFetch(new Request(url, input), nextInit);\n          }\n          return originalFetch(url, nextInit);\n        };\n      }\n      if (typeof XMLHttpRequest !== \"undefined\") {\n        const originalOpen = XMLHttpRequest.prototype.open;\n        const originalSend = XMLHttpRequest.prototype.send;\n        XMLHttpRequest.prototype.open = function(method, url) {\n          const rewritten = rewrittenUrl(url, false);\n          this.__agentNativeExternalEmbed = !!rewritten;\n          return originalOpen.call(\n            this,\n            method,\n            rewritten || url,\n            arguments.length > 2 ? arguments[2] : true,\n            arguments[3],\n            arguments[4]\n          );\n        };\n        XMLHttpRequest.prototype.send = function(body) {\n          if (this.__agentNativeExternalEmbed) {\n            try {\n              if (config.token) this.setRequestHeader(\"Authorization\", \"Bearer \" + config.token);\n              this.setRequestHeader(config.embedTargetHeader, targetPath());\n            } catch (_err) {}\n          }\n          return originalSend.call(this, body);\n        };\n      }\n      if (typeof EventSource !== \"undefined\") {\n        const OriginalEventSource = EventSource;\n        window.EventSource = function(url, options) {\n          return new OriginalEventSource(rewrittenUrl(url, true) || url, options);\n        };\n        window.EventSource.prototype = OriginalEventSource.prototype;\n      }\n    }\n\n    function copyDocumentElementAttributes(source) {\n      const target = document.documentElement;\n      for (const attr of Array.from(target.attributes)) {\n        target.removeAttribute(attr.name);\n      }\n      for (const attr of Array.from(source.attributes)) {\n        target.setAttribute(attr.name, attr.value);\n      }\n    }\n\n    function importChildren(source, target) {\n      target.replaceChildren(\n        ...Array.from(source.childNodes).map((node) => document.importNode(node, true))\n      );\n    }\n\n    function isModuleScript(script) {\n      return (script.getAttribute(\"type\") || \"\").trim().toLowerCase() === \"module\";\n    }\n\n    function isRunnableClassicScript(script) {\n      const type = (script.getAttribute(\"type\") || \"\").trim().toLowerCase();\n      return !type || type === \"text/javascript\" || type === \"application/javascript\";\n    }\n\n    function runClassicScript(script) {\n      const next = document.createElement(\"script\");\n      for (const attr of Array.from(script.attributes)) {\n        if (attr.name === \"type\") continue;\n        next.setAttribute(attr.name, attr.value);\n      }\n      if (script.src) {\n        next.src = script.src;\n      } else {\n        next.textContent = script.textContent || \"\";\n      }\n      document.body.appendChild(next);\n      next.remove();\n    }\n\n    function rootRelativeSpecifiersToAbsolute(code, appOrigin) {\n      return String(code).replace(/([\"'])\\\\/(?!\\\\/)/g, \"$1\" + appOrigin + \"/\");\n    }\n\n    function moduleCodeToClassicAsync(code, appOrigin) {\n      return rootRelativeSpecifiersToAbsolute(code, appOrigin)\n        .replace(\n          /\\\\bimport\\\\s+\\\\*\\\\s+as\\\\s+([A-Za-z_$][\\\\w$]*)\\\\s+from\\\\s+([\"'][^\"']+[\"'])\\\\s*;?/g,\n          \"const $1 = await import($2);\"\n        )\n        .replace(/\\\\bimport\\\\s+([\"'][^\"']+[\"'])\\\\s*;?/g, \"await import($1);\")\n        .replace(/\\\\bimport\\\\(([\"'][^\"']+[\"'])\\\\)\\\\s*;?/g, \"await import($1);\");\n    }\n\n    function runModuleScriptAsClassic(script, appOrigin) {\n      const code = moduleCodeToClassicAsync(script.textContent || \"\", appOrigin);\n      const runner = document.createElement(\"script\");\n      runner.textContent =\n        \"(async()=>{\" +\n        code +\n        \"})().catch((err)=>{console.error('[agent-native] transplanted app module failed',err);document.body.setAttribute('data-agent-native-hydration-error',String(err&&err.message||err));});\";\n      document.body.appendChild(runner);\n      runner.remove();\n    }\n\n    function mountTransplantedHtml(html, appUrl) {\n      const config = embedConfigForAppUrl(appUrl);\n      installExternalEmbedRuntime(config);\n      const parsed = new DOMParser().parseFromString(\n        rewriteRootRelativeHtmlUrls(removeHtmlCspMeta(html), appUrl.origin),\n        \"text/html\"\n      );\n      const scripts = Array.from(parsed.querySelectorAll(\"script\"));\n      copyDocumentElementAttributes(parsed.documentElement);\n      importChildren(parsed.head, document.head);\n      const base = document.createElement(\"base\");\n      base.href = config.baseHref;\n      document.head.prepend(base);\n      importChildren(parsed.body, document.body);\n      for (const script of scripts) {\n        if (isRunnableClassicScript(script)) runClassicScript(script);\n      }\n      for (const script of scripts) {\n        if (isModuleScript(script)) runModuleScriptAsClassic(script, appUrl.origin);\n      }\n    }\n\n    async function transplantAppDocument(src) {\n      clearFrameReadyTimer();\n      clearFrameLoadTimer();\n      appFrame = null;\n      lastFrameSrc = src;\n      setMessage(\"Loading app\");\n      const response = await fetch(src, {\n        credentials: \"omit\",\n        redirect: \"follow\",\n        headers: { Accept: \"text/html\" }\n      });\n      if (!response.ok) {\n        throw new Error(\"Embedded app returned HTTP \" + response.status + \".\");\n      }\n      const html = await response.text();\n      const appUrl = new URL(response.url || src);\n      try {\n        window.history.replaceState(window.history.state, \"\", localPathFromUrl(appUrl, false));\n      } catch {}\n      mountTransplantedHtml(html, appUrl);\n      notifyHostHeightRepeatedly();\n    }\n\n    function wantsEmbed() {\n      if (toolInput.embed === false || toolInput.embed === \"false\") return false;\n      if (embedByDefault) return true;\n      return toolInput.embed === true || toolInput.embed === \"true\";\n    }\n\n    function supportedDisplayMode(mode) {\n      if (openAiBridge && typeof openAiBridge.requestDisplayMode === \"function\") {\n        return mode === \"inline\" || mode === \"fullscreen\" || mode === \"pip\";\n      }\n      const modes = hostState().context && hostState().context.availableDisplayModes;\n      return Array.isArray(modes) && modes.includes(mode);\n    }\n\n    async function requestHostDisplayMode(mode) {\n      let result;\n      if (openAiBridge && typeof openAiBridge.requestDisplayMode === \"function\") {\n        result = await openAiBridge.requestDisplayMode({ mode });\n      } else {\n        if (!app || typeof app.requestDisplayMode !== \"function\") {\n          throw new Error(\"Display mode changes are not available in this host.\");\n        }\n        result = await app.requestDisplayMode({ mode });\n      }\n      updateDisplayButton();\n      sendHostContext();\n      return result;\n    }\n\n    function updateDisplayButton() {\n      const context = hostState().context || {};\n      const nextMode = context.displayMode === \"fullscreen\" ? \"inline\" : \"fullscreen\";\n      const supported = supportedDisplayMode(nextMode);\n      displayButton.hidden = !supported;\n      displayButton.disabled = !supported;\n      displayButton.textContent = nextMode === \"fullscreen\" ? \"Fullscreen\" : \"Inline\";\n      displayButton.onclick = () => {\n        if (!supportedDisplayMode(nextMode)) return;\n        void requestHostDisplayMode(nextMode).catch((err) => {\n          console.warn(\"[agent-native] MCP host rejected display mode request\", err);\n        });\n      };\n    }\n\n    function setMessage(message) {\n      stage.innerHTML = '<div class=\"message\">' + esc(message) + '</div>';\n    }\n\n    function clearFrameReadyTimer() {\n      if (!appFrameReadyTimer) return;\n      clearTimeout(appFrameReadyTimer);\n      appFrameReadyTimer = null;\n    }\n\n    function clearFrameLoadTimer() {\n      if (!appFrameLoadTimer) return;\n      clearTimeout(appFrameLoadTimer);\n      appFrameLoadTimer = null;\n    }\n\n    function startFrameReadyTimer(frame) {\n      clearFrameReadyTimer();\n      appFrameReadyTimer = setTimeout(() => {\n        if (!appFrameReady && appFrame === frame) renderFrameFallback();\n      }, frameReadyTimeoutMs);\n    }\n\n    function renderFrameFallback() {\n      clearFrameReadyTimer();\n      clearFrameLoadTimer();\n      appFrame = null;\n      stage.innerHTML =\n        '<div class=\"fallback\">' +\n          '<div class=\"fallback-title\">Open this app in its own tab</div>' +\n          '<div class=\"fallback-copy\">This chat host did not allow the embedded app frame to load inline. You can still open the same app route through the host or use the URL below.</div>' +\n          '<div class=\"fallback-actions\">' +\n            '<button type=\"button\" data-fallback-open>Open app</button>' +\n            '<button type=\"button\" data-fallback-retry>Try inline again</button>' +\n          '</div>' +\n          (openUrl || openStartUrl ? '<a class=\"fallback-url\" href=\"' + esc(openUrl || openStartUrl) + '\" target=\"_blank\" rel=\"noreferrer\">' + esc(openUrl || openStartUrl) + '</a>' : '') +\n        '</div>';\n      const fallbackOpen = stage.querySelector(\"[data-fallback-open]\");\n      const fallbackRetry = stage.querySelector(\"[data-fallback-retry]\");\n      if (fallbackOpen) {\n        fallbackOpen.disabled = !(openUrl || openStartUrl);\n        fallbackOpen.onclick = () => {\n          if (openUrl || openStartUrl) void openFallbackExternal();\n        };\n      }\n      if (fallbackRetry) {\n        fallbackRetry.disabled = !lastFrameSrc;\n        fallbackRetry.onclick = () => {\n          if (lastFrameSrc) renderFrame(lastFrameSrc);\n        };\n      }\n    }\n\n    async function openFallbackExternal() {\n      let url = withChatBridgeParam(openUrl);\n      try {\n        if (url) {\n          const result = await callEmbedSessionTool(embedSessionArgsFor(url));\n          const data = parseToolResult(result);\n          if (typeof data.startUrl === \"string\" && data.startUrl) {\n            url = withChatBridgeParam(data.startUrl);\n          }\n        }\n      } catch (err) {\n        console.warn(\"[agent-native] MCP fallback could not mint a fresh app session\", err);\n      }\n      if (!url) url = withChatBridgeParam(openStartUrl);\n      await openHostLink({ url });\n    }\n\n    function renderFrame(src) {\n      clearFrameReadyTimer();\n      clearFrameLoadTimer();\n      const frame = document.createElement(\"iframe\");\n      frame.title = body.dataset.iframeTitle || \"Agent Native app\";\n      frame.src = src;\n      frame.allow = \"clipboard-read; clipboard-write\";\n      appFrame = frame;\n      appFrameReady = false;\n      lastFrameSrc = src;\n      frame.addEventListener(\"load\", () => {\n        if (appFrame !== frame) return;\n        clearFrameLoadTimer();\n        sendFrameReadyMessages(frame);\n        startFrameReadyTimer(frame);\n      });\n      stage.replaceChildren(frame);\n      notifyHostHeight();\n      appFrameLoadTimer = setTimeout(() => {\n        if (!appFrameReady && appFrame === frame) renderFrameFallback();\n      }, frameLoadTimeoutMs);\n    }\n\n    function refreshExpiredEmbedSession() {\n      clearFrameReadyTimer();\n      clearFrameLoadTimer();\n      appFrameReady = false;\n      if (!openUrl) {\n        renderFrameFallback();\n        return;\n      }\n      openStartUrl = \"\";\n      startedFor = \"\";\n      lastFrameSrc = \"\";\n      setMessage(\"Refreshing app session\");\n      void launchEmbed();\n    }\n\n    function shouldSelfNavigateToApp() {\n      const mode = typeof toolInput.embedMode === \"string\"\n        ? toolInput.embedMode\n        : typeof toolInput.renderMode === \"string\"\n          ? toolInput.renderMode\n          : \"\";\n      if (mode === \"iframe\" || mode === \"nested\") return false;\n      if (toolInput.nested === true || toolInput.frame === \"iframe\") return false;\n      return true;\n    }\n\n    function shouldTransplantAppDocument() {\n      const mode = typeof toolInput.embedMode === \"string\"\n        ? toolInput.embedMode\n        : typeof toolInput.renderMode === \"string\"\n          ? toolInput.renderMode\n          : \"\";\n      return (\n        mode === \"transplant\" ||\n        toolInput.frame === \"transplant\" ||\n        isClaudeMcpContentHost()\n      );\n    }\n\n    function isClaudeMcpContentHost() {\n      try {\n        return /(^|\\\\.)claudemcpcontent\\\\.com$/i.test(window.location.hostname || \"\");\n      } catch {\n        return false;\n      }\n    }\n\n    function isChatGptSandboxHost() {\n      try {\n        const host = window.location.hostname || \"\";\n        const appParam = new URL(window.location.href).searchParams.get(\"app\");\n        return /(^|\\\\.)oaiusercontent\\\\.com$/i.test(host) || appParam === \"chatgpt\";\n      } catch {\n        return false;\n      }\n    }\n\n    function shouldRenderControlledAppFrame() {\n      return !!openAiBridge || isChatGptSandboxHost();\n    }\n\n    function navigateToAppFrame(src) {\n      clearFrameReadyTimer();\n      clearFrameLoadTimer();\n      appFrame = null;\n      lastFrameSrc = src;\n      setMessage(\"Opening app\");\n      try {\n        window.location.replace(src);\n      } catch (err) {\n        console.warn(\"[agent-native] MCP app self-navigation failed\", err);\n        renderFrameFallback();\n      }\n    }\n\n    async function updateHostModelContext(data) {\n      const params = {};\n      if (Array.isArray(data && data.content)) params.content = data.content;\n      if (data && data.structuredContent && typeof data.structuredContent === \"object\") {\n        params.structuredContent = data.structuredContent;\n      }\n      if (openAiBridge && typeof openAiBridge.setWidgetState === \"function\") {\n        openAiBridge.setWidgetState({\n          ...objectValue(openAiBridge.widgetState),\n          agentNativeModelContext: params\n        });\n        return { ok: true };\n      }\n      if (!app || typeof app.updateModelContext !== \"function\") return { ok: false };\n      await app.updateModelContext(params);\n      return { ok: true };\n    }\n\n    async function openHostLink(data) {\n      const url = typeof (data && data.url) === \"string\" ? data.url : \"\";\n      if (!url) return { isError: true };\n      if (openAiBridge && typeof openAiBridge.openExternal === \"function\") {\n        return await openAiBridge.openExternal({ href: url, redirectUrl: false });\n      }\n      if (app && typeof app.openLink === \"function\") {\n        return await app.openLink({ url });\n      }\n      window.open(url, \"_blank\", \"noopener,noreferrer\");\n      return { ok: true };\n    }\n\n    function notifyHostHeight() {\n      const height = applyIntrinsicHeight(visibleIntrinsicHeight());\n      if (!openAiBridge || typeof openAiBridge.notifyIntrinsicHeight !== \"function\") {\n        if (app && typeof app.sendSizeChanged === \"function\") {\n          try {\n            app.sendSizeChanged({ height });\n          } catch (err) {\n            console.warn(\"[agent-native] MCP host rejected size update\", err);\n          }\n        }\n        return;\n      }\n      try {\n        openAiBridge.notifyIntrinsicHeight({ height });\n      } catch (err) {\n        console.warn(\"[agent-native] ChatGPT rejected intrinsic height update\", err);\n      }\n    }\n\n    function respondToAppFrame(requestId, work) {\n      if (!requestId) return;\n      Promise.resolve(work)\n        .then((result) => {\n          sendToAppFrame({\n            type: \"agentNative.mcpHost.response\",\n            data: { requestId, ok: true, result }\n          });\n        })\n        .catch((err) => {\n          sendToAppFrame({\n            type: \"agentNative.mcpHost.response\",\n            data: {\n              requestId,\n              ok: false,\n              error: err && err.message ? err.message : String(err)\n            }\n          });\n        });\n    }\n\n    async function sendHostChat(chat) {\n      if (!chat || chat.submit === false) return;\n      const message = typeof chat.message === \"string\" ? chat.message : \"\";\n      if (!message.trim()) return;\n      const context = typeof chat.context === \"string\" ? chat.context.trim() : \"\";\n      try {\n        if (openAiBridge && typeof openAiBridge.setWidgetState === \"function\") {\n          openAiBridge.setWidgetState({\n            ...objectValue(openAiBridge.widgetState),\n            agentNativeChatContext: context || null\n          });\n        } else if (app && typeof app.updateModelContext === \"function\") {\n          await app.updateModelContext({\n            content: context ? [{ type: \"text\", text: context }] : []\n          });\n        }\n      } catch (err) {\n        console.warn(\"[agent-native] MCP host rejected model context update\", err);\n      }\n      try {\n        if (openAiBridge && typeof openAiBridge.sendFollowUpMessage === \"function\") {\n          await openAiBridge.sendFollowUpMessage({\n            prompt: message,\n            scrollToBottom: true\n          });\n          return;\n        }\n        if (!app || typeof app.sendMessage !== \"function\") return;\n        const result = await app.sendMessage({\n          role: \"user\",\n          content: [{ type: \"text\", text: message }]\n        });\n        if (result && result.isError) {\n          console.warn(\"[agent-native] MCP host rejected chat message\", result);\n        }\n      } catch (err) {\n        console.warn(\"[agent-native] MCP host chat bridge failed\", err);\n      }\n    }\n\n    window.addEventListener(\"message\", (event) => {\n      if (!appFrame || event.source !== appFrame.contentWindow) return;\n      if (!event.data) return;\n      const data = event.data.data || {};\n      if (event.data.type === \"agentNative.embeddedAppReady\") {\n        appFrameReady = true;\n        clearFrameLoadTimer();\n        clearFrameReadyTimer();\n        return;\n      }\n      if (event.data.type === \"agentNative.embedSessionExpired\") {\n        refreshExpiredEmbedSession();\n        return;\n      }\n      if (event.data.type === \"agentNative.submitChat\") {\n        void sendHostChat(data);\n        return;\n      }\n      if (event.data.type === \"agentNative.mcpHost.updateModelContext\") {\n        respondToAppFrame(data.requestId, updateHostModelContext(data));\n        return;\n      }\n      if (event.data.type === \"agentNative.mcpHost.openLink\") {\n        respondToAppFrame(data.requestId, openHostLink(data));\n        return;\n      }\n      if (event.data.type === \"agentNative.mcpHost.requestDisplayMode\") {\n        respondToAppFrame(data.requestId, requestHostDisplayMode(data.mode));\n      }\n    });\n\n    function notifyHostHeightSoon() {\n      requestAnimationFrame(() => notifyHostHeight());\n    }\n\n    function notifyHostHeightRepeatedly() {\n      notifyHostHeight();\n      [0, 250, 1000, 2500].forEach((delay) => {\n        setTimeout(() => notifyHostHeight(), delay);\n      });\n    }\n\n    window.addEventListener(\"resize\", notifyHostHeightSoon, { passive: true });\n    if (window.visualViewport) {\n      window.visualViewport.addEventListener(\"resize\", notifyHostHeightSoon, { passive: true });\n    }\n\n    async function launchEmbed() {\n      const launchUrl = openStartUrl || openUrl;\n      if (!launchUrl) {\n        setMessage(\"Open link was not available.\");\n        return;\n      }\n      if (!wantsEmbed()) {\n        setMessage(\"Ready to open.\");\n        return;\n      }\n      if (startedFor === launchUrl) return;\n      startedFor = launchUrl;\n      setMessage(\"Loading app\");\n      try {\n        const selfNavigate = shouldSelfNavigateToApp();\n        const embedUrl = withChatBridgeParam(launchUrl);\n        if (selfNavigate && isEmbedStartUrl(embedUrl)) {\n          if (isClaudeMcpContentHost() && shouldTransplantAppDocument()) {\n            await transplantAppDocument(embedUrl);\n          } else if (shouldRenderControlledAppFrame()) {\n            renderFrame(embedUrl);\n          } else {\n            navigateToAppFrame(embedUrl);\n          }\n          return;\n        }\n        if (!selfNavigate && isEmbedStartUrl(embedUrl)) {\n          renderFrame(embedUrl);\n          return;\n        }\n        const result = await callEmbedSessionTool(embedSessionArgsFor(embedUrl));\n        const data = parseToolResult(result);\n        if (typeof data.startUrl !== \"string\" || !data.startUrl) {\n          startedFor = \"\";\n          setMessage(data.error || \"This app can be opened, but not embedded from this MCP server.\");\n          return;\n        }\n        const startUrl = withChatBridgeParam(data.startUrl);\n        if (selfNavigate) {\n          if (isClaudeMcpContentHost() && shouldTransplantAppDocument()) {\n            await transplantAppDocument(startUrl);\n          } else if (shouldRenderControlledAppFrame()) {\n            renderFrame(startUrl);\n          } else {\n            navigateToAppFrame(startUrl);\n          }\n        } else {\n          renderFrame(startUrl);\n        }\n      } catch (err) {\n        startedFor = \"\";\n        setMessage(err && err.message ? err.message : \"Could not launch embedded app.\");\n      }\n    }\n\n    async function callEmbedSessionTool(args) {\n      if (openAiBridge && typeof openAiBridge.callTool === \"function\") {\n        return await openAiBridge.callTool(startTool, args);\n      }\n      if (!app || typeof app.callServerTool !== \"function\") {\n        throw new Error(\"Host tool calls are not available.\");\n      }\n      return await app.callServerTool({ name: startTool, arguments: args });\n    }\n\n    function updateHostOpenInAppUrl() {\n      if (!openAiBridge || !openUrl || typeof openAiBridge.setOpenInAppUrl !== \"function\") {\n        return;\n      }\n      try {\n        openAiBridge.setOpenInAppUrl({ href: openUrl });\n      } catch (err) {\n        console.warn(\"[agent-native] ChatGPT rejected open-in-app URL\", err);\n      }\n    }\n\n    function updateOpenButton() {\n      const buttonUrl = openUrl || openStartUrl;\n      openButton.disabled = !buttonUrl;\n      openButton.onclick = () => {\n        if (buttonUrl) void openHostLink({ url: buttonUrl });\n      };\n      updateHostOpenInAppUrl();\n    }\n\n    function updateTitle(data) {\n      const label = data.label || data.app || data.view || body.dataset.appTitle || \"App\";\n      titleEl.textContent = String(label);\n    }\n\n    function readOpenAiBridge() {\n      return window.openai && typeof window.openai === \"object\"\n        ? window.openai\n        : null;\n    }\n\n    function openAiToolResultParams(bridge) {\n      const params = {};\n      if (bridge && bridge.toolOutput !== undefined) {\n        if (bridge.toolOutput && typeof bridge.toolOutput === \"object\") {\n          params.structuredContent = bridge.toolOutput;\n        } else {\n          params.content = [{ type: \"text\", text: String(bridge.toolOutput) }];\n        }\n      }\n      if (bridge && bridge.toolResponseMetadata && typeof bridge.toolResponseMetadata === \"object\") {\n        params._meta = bridge.toolResponseMetadata;\n      }\n      return params;\n    }\n\n    function syncOpenAiBridge(bridge) {\n      if (!bridge) return false;\n      openAiBridge = bridge;\n      toolInput = objectValue(bridge.toolInput);\n      const params = openAiToolResultParams(bridge);\n      const data = parseToolResult(params);\n      openUrl = openLinkFrom(params, data);\n      openStartUrl = embedStartUrlFrom(params, data);\n      updateTitle(data);\n      updateOpenButton();\n      updateDisplayButton();\n      notifyHostHeight();\n      sendHostContext();\n      if (openUrl || openStartUrl) {\n        void launchEmbed();\n      } else if (!appFrame) {\n        setMessage(\"Waiting for app result\");\n      }\n      return true;\n    }\n\n    function waitForOpenAiBridge() {\n      const existing = readOpenAiBridge();\n      if (existing) return Promise.resolve(existing);\n      return new Promise((resolve) => {\n        let settled = false;\n        const finish = (bridge) => {\n          if (settled) return;\n          settled = true;\n          window.removeEventListener(\"openai:set_globals\", onGlobals);\n          clearTimeout(timer);\n          resolve(bridge || readOpenAiBridge());\n        };\n        const onGlobals = () => finish(readOpenAiBridge());\n        const timer = setTimeout(() => finish(null), 200);\n        window.addEventListener(\"openai:set_globals\", onGlobals, { passive: true });\n      });\n    }\n\n    window.addEventListener(\"openai:set_globals\", () => {\n      const bridge = readOpenAiBridge();\n      if (bridge && (!appFrame || openAiBridge)) syncOpenAiBridge(bridge);\n    }, { passive: true });\n\n    async function startMcpAppsBridge() {\n      const { App } = await import(\"${MCP_APP_IMPORT}\");\n      app = new App(\n        { name: \"Agent Native Embed\", version: \"1.0.0\" },\n        {},\n        { autoResize: false }\n      );\n      app.ontoolinput = (params) => {\n        toolInput = params.arguments || {};\n      };\n      app.ontoolresult = (params) => {\n        const data = parseToolResult(params);\n        openUrl = openLinkFrom(params, data);\n        openStartUrl = embedStartUrlFrom(params, data);\n        updateTitle(data);\n        updateOpenButton();\n        void launchEmbed();\n      };\n      app.onhostcontextchanged = () => {\n        updateDisplayButton();\n        notifyHostHeight();\n        sendHostContext();\n      };\n      await app.connect();\n      updateDisplayButton();\n      notifyHostHeight();\n      sendHostContext();\n    }\n\n    const initialOpenAiBridge = await waitForOpenAiBridge();\n    if (!syncOpenAiBridge(initialOpenAiBridge)) {\n      await startMcpAppsBridge();\n    }\n  </script>\n</body>\n</html>`,\n    csp: {\n      connectDomains: [\n        \"https://esm.sh\",\n        MCP_APP_REQUEST_ORIGIN_CSP_SOURCE,\n        ...(options.frameDomains ?? []),\n      ],\n      resourceDomains: [\n        \"https://esm.sh\",\n        MCP_APP_REQUEST_ORIGIN_CSP_SOURCE,\n        ...(options.frameDomains ?? []),\n      ],\n      baseUriDomains: [MCP_APP_REQUEST_ORIGIN_CSP_SOURCE],\n      frameDomains,\n    },\n    prefersBorder: false,\n  };\n}\n"]}

package/dist/mcp/server.js

@@ -42,9 +42,8 @@ function deriveRequestMeta(event) {
         targetHeader === "browser"
         ? targetHeader
         : undefined;
-    const clientName = getRequestHeader(event, "x-agent-native-mcp-client")?.trim() ||
-        getRequestHeader(event, "user-agent")?.trim() ||
-        undefined;
+    const clientName = getRequestHeader(event, "user-agent")?.trim() || undefined;
+    const clientHint = getRequestHeader(event, "x-agent-native-mcp-client")?.trim() || undefined;
     const fullCatalogHeader = getRequestHeader(event, "x-agent-native-mcp-full-catalog")?.toLowerCase();
     const fullCatalog = fullCatalogHeader === "1" ||
         fullCatalogHeader === "true" ||
@@ -53,6 +52,7 @@ function deriveRequestMeta(event) {
         origin,
         target,
         clientName,
+        clientHint,
         ...(fullCatalog ? { fullCatalog } : {}),
     };
 }

package/dist/mcp/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,wCAAwC,CAAC;AAClE,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,SAAS,EACT,gBAAgB,GACjB,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EACL,yBAAyB,EACzB,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,kBAAkB,GAInB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAE/E,6EAA6E;AAC7E,4EAA4E;AAC5E,yDAAyD;AACzD,OAAO,EACL,yBAAyB,EACzB,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,kBAAkB,GACnB,CAAC;AAGF,8EAA8E;AAC9E,+DAA+D;AAC/D,8EAA8E;AAE9E;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,KAAc;IAInC,MAAM,CAAC,GAAG,KAAY,CAAC;IACvB,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC;IACzD,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC;IACzD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,cAAc,GAAG,gBAAgB,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,KAAK,GACT,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;QACrC,CAAC,IAAI,IAAI,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,MAAM,YAAY,GAAG,gBAAgB,CACnC,KAAK,EACL,4BAA4B,CAC7B,EAAE,WAAW,EAAE,CAAC;IACjB,MAAM,MAAM,GACV,YAAY,KAAK,SAAS;QAC1B,YAAY,KAAK,UAAU;QAC3B,YAAY,KAAK,SAAS;QACxB,CAAC,CAAE,YAAyC;QAC5C,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,UAAU,GACd,gBAAgB,CAAC,KAAK,EAAE,2BAA2B,CAAC,EAAE,IAAI,EAAE;QAC5D,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE;QAC7C,SAAS,CAAC;IACZ,MAAM,iBAAiB,GAAG,gBAAgB,CACxC,KAAK,EACL,iCAAiC,CAClC,EAAE,WAAW,EAAE,CAAC;IACjB,MAAM,WAAW,GACf,iBAAiB,KAAK,GAAG;QACzB,iBAAiB,KAAK,MAAM;QAC5B,iBAAiB,KAAK,KAAK,CAAC;IAC9B,OAAO;QACL,MAAM;QACN,MAAM;QACN,UAAU;QACV,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA0B;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;QAC1C,OAAO,CACL,QAAQ,KAAK,WAAW;YACxB,QAAQ,KAAK,WAAW;YACxB,QAAQ,KAAK,KAAK;YAClB,QAAQ,KAAK,OAAO;YACpB,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAC5B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,eAAe,CAAC,KAAc,EAAE,MAAc;IACrD,MAAM,GAAG,GAAI,KAAa,CAAC,GAA0B,CAAC;IAEtD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,IAAI,GAAG,EAAE,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QAC9D,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,GAAI,KAAa,CAAC,IAAI,EAAE,GAAG,EAAE,OAEhC,CAAC;QACd,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtD,IAAI,KAAK,IAAI,IAAI;oBAAE,SAAS;gBAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,wEAAwE;IACxE,qEAAqE;IACrE,iEAAiE;IAEjE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC;IAChD,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACxD,MAAM,KAAK,GACT,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;QACrC,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnE,IAAI,GAAG,GAAG,GAAG,KAAK,MAAM,IAAI,oBAAoB,CAAC;IACjD,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,GAAG;YAAE,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;IAED,qEAAqE;IACrE,yEAAyE;IACzE,oDAAoD;IACpD,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,8EAA8E;AAC9E,0DAA0D;AAC1D,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAc,EACd,MAAiB;IAEjB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,GAAG,CAAC;IAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjE,IAAI,OAAO,EAAE,CAAC;QACZ,yEAAyE;QACzE,uEAAuE;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAEhC,2EAA2E;IAC3E,uDAAuD;IACvD,+DAA+D;IAC/D,4EAA4E;IAC5E,iDAAiD;IACjD,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC5D,MAAM,gBAAgB,GAAG,gBAAgB,CACvC,KAAK,EACL,4BAA4B,CAC7B,CAAC;IACF,oEAAoE;IACpE,4DAA4D;IAC5D,uEAAuE;IACvE,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,gBAAgB,EAAE;QAChE,YAAY,EACV,iBAAiB,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC;QAClE,WAAW,EAAE,mBAAmB,CAAC,KAAK,CAAC;KACxC,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QACvB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,EAAE,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5E,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACnC,CAAC;IAED,0CAA0C;IAC1C,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACzC,CAAC;IAED,0EAA0E;IAC1E,sEAAsE;IACtE,kCAAkC;IAClC,MAAM,IAAI,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEnE,yEAAyE;IACzE,qEAAqE;IACrE,qEAAqE;IACrE,gEAAgE;IAChE,wEAAwE;IACxE,4EAA4E;IAC5E,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE;QAC1E,GAAG,WAAW;QACd,WAAW,EAAE,UAAU,CAAC,WAAW,KAAK,IAAI;KAC7C,CAAC,CAAC;IAEH,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAElD,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;QACvB,4EAA4E;QAC5E,MAAM,EAAE,6BAA6B,EAAE,GACrC,MAAM,MAAM,CAAC,oDAAoD,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;YAClD,kBAAkB,EAAE,SAAS,EAAE,YAAY;SAC5C,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,uEAAuE;YACvE,iEAAiE;YACjE,MAAM,SAAS,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,wEAAwE;YACxE,mEAAmE;YACnE,sEAAsE;YACtE,uEAAuE;YACvE,qEAAqE;YACrE,6DAA6D;YAC7D,IAAI,GAAG,EAAE,IAAI,KAAK,4BAA4B;gBAAE,MAAM,GAAG,CAAC;YAC1D,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK;gBACnB,OAAO,CAAC,GAAG,CACT,2EAA2E,CAC5E,CAAC;QACN,CAAC;QACD,8CAA8C;QAC7C,KAAa,CAAC,QAAQ,GAAG,IAAI,CAAC;QAC/B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,uEAAuE;IACvE,6EAA6E;IAC7E,EAAE;IACF,qEAAqE;IACrE,uEAAuE;IACvE,wEAAwE;IACxE,2EAA2E;IAC3E,yEAAyE;IACzE,4EAA4E;IAC5E,qEAAqE;IACrE,uEAAuE;IACvE,qBAAqB;IACrB,MAAM,EAAE,wCAAwC,EAAE,GAChD,MAAM,MAAM,CAAC,+DAA+D,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,IAAI,wCAAwC,CAAC;QAC7D,kBAAkB,EAAE,SAAS,EAAE,oCAAoC;KACpE,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAClD,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,aAAa,CAC5C,UAAU,EACV,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CACrD,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,+DAA+D;AAC/D,8EAA8E;AAE9E;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,QAAQ,CACtB,QAAa,EACb,MAAiB,EACjB,WAAW,GAAG,gBAAgB;IAE9B,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,CACpB,GAAG,WAAW,MAAM,EACpB,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACjC,OAAO,gBAAgB,CAAC,KAAgB,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC,CAAC,CACH,CAAC;IAEF,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK;QACnB,OAAO,CAAC,GAAG,CACT,+BAA+B,WAAW,SAAS,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,SAAS,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,GAAG,CACvI,CAAC;AACN,CAAC","sourcesContent":["import type { H3Event } from \"h3\";\nimport { getH3App } from \"../server/framework-request-handler.js\";\nimport {\n  defineEventHandler,\n  setResponseStatus,\n  setResponseHeader,\n  getMethod,\n  getRequestHeader,\n} from \"h3\";\nimport { readBody } from \"../server/h3-helpers.js\";\nimport { isLoopbackRequest } from \"../server/auth.js\";\nimport {\n  createMCPServerForRequest,\n  verifyAuth,\n  getAccessTokens,\n  resolveOrgIdFromDomain,\n  buildLinkArtifacts,\n  type MCPConfig,\n  type MCPCallerIdentity,\n  type MCPRequestMeta,\n} from \"./build-server.js\";\nimport { buildMcpOAuthChallenge, getMcpOAuthResource } from \"./oauth-route.js\";\n\n// Re-export the shared MCP server builder + types so the stdio transport and\n// any (future) external importer of `@agent-native/core/mcp` keep resolving\n// against `./server.js` exactly as before this refactor.\nexport {\n  createMCPServerForRequest,\n  verifyAuth,\n  getAccessTokens,\n  resolveOrgIdFromDomain,\n  buildLinkArtifacts,\n};\nexport type { MCPConfig, MCPCallerIdentity, MCPRequestMeta };\n\n// ---------------------------------------------------------------------------\n// Runtime detection — Node fast-path vs. web-standard fallback\n// ---------------------------------------------------------------------------\n\n/**\n * Resolve the underlying Node `http` req/res pair if (and only if) we're\n * running on a real Node HTTP server (local dev, `node` Nitro preset). On the\n * web-standard runtime (Nitro 3 / Netlify web runtime, Cloudflare, Deno, Bun)\n * BOTH of these are undefined — that's the signal to take the web fallback\n * instead of returning 501.\n */\nfunction getNodeReqRes(event: H3Event): {\n  nodeReq: any | undefined;\n  nodeRes: any | undefined;\n} {\n  const e = event as any;\n  const nodeReq = e.node?.req ?? e.req?.runtime?.node?.req;\n  const nodeRes = e.node?.res ?? e.req?.runtime?.node?.res;\n  return { nodeReq, nodeRes };\n}\n\n/**\n * Derive the request origin + the markdown deep-link target from the inbound\n * headers. Identical logic for both the Node and web paths so the absolute\n * deep-link URLs in tool results are computed the same way regardless of\n * runtime.\n */\nfunction deriveRequestMeta(event: H3Event): MCPRequestMeta {\n  const forwardedProto = getRequestHeader(event, \"x-forwarded-proto\");\n  const host = getRequestHeader(event, \"host\");\n  const proto =\n    forwardedProto?.split(\",\")[0]?.trim() ||\n    (host && /^(localhost|127\\.0\\.0\\.1)(:|$)/.test(host) ? \"http\" : \"https\");\n  const origin = host ? `${proto}://${host}` : undefined;\n  const targetHeader = getRequestHeader(\n    event,\n    \"x-agent-native-open-target\",\n  )?.toLowerCase();\n  const target =\n    targetHeader === \"desktop\" ||\n    targetHeader === \"terminal\" ||\n    targetHeader === \"browser\"\n      ? (targetHeader as MCPRequestMeta[\"target\"])\n      : undefined;\n  const clientName =\n    getRequestHeader(event, \"x-agent-native-mcp-client\")?.trim() ||\n    getRequestHeader(event, \"user-agent\")?.trim() ||\n    undefined;\n  const fullCatalogHeader = getRequestHeader(\n    event,\n    \"x-agent-native-mcp-full-catalog\",\n  )?.toLowerCase();\n  const fullCatalog =\n    fullCatalogHeader === \"1\" ||\n    fullCatalogHeader === \"true\" ||\n    fullCatalogHeader === \"yes\";\n  return {\n    origin,\n    target,\n    clientName,\n    ...(fullCatalog ? { fullCatalog } : {}),\n  };\n}\n\nfunction isLoopbackOrigin(origin: string | undefined): boolean {\n  if (!origin) return false;\n  try {\n    const hostname = new URL(origin).hostname;\n    return (\n      hostname === \"localhost\" ||\n      hostname === \"127.0.0.1\" ||\n      hostname === \"::1\" ||\n      hostname === \"[::1]\" ||\n      hostname.startsWith(\"127.\")\n    );\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Reconstruct a Web Standard `Request` for the web-standard MCP transport.\n *\n * On the web runtime h3 v2 exposes the real web `Request` as `event.req`; we\n * prefer it (its `method` / `headers` are exactly what the client sent). But\n * the framework middleware rewrites `event.req.url` when it strips a mount\n * prefix, and the transport reads `req.method` + `req.headers` (never the\n * body — we pass that via `parsedBody`), so we always synthesize a clean\n * `Request` with the verified method + a fresh `Headers` copy. The URL is\n * cosmetic for the SDK (it only does `new URL(req.url)` for `requestInfo`),\n * so a best-effort absolute URL derived from the inbound host is sufficient\n * and never throws.\n */\nfunction buildWebRequest(event: H3Event, method: string): Request {\n  const src = (event as any).req as Request | undefined;\n\n  const headers = new Headers();\n  if (src?.headers && typeof src.headers.forEach === \"function\") {\n    src.headers.forEach((value, key) => headers.set(key, value));\n  } else {\n    const rawHeaders = (event as any).node?.req?.headers as\n      | Record<string, string | string[] | undefined>\n      | undefined;\n    if (rawHeaders) {\n      for (const [key, value] of Object.entries(rawHeaders)) {\n        if (value == null) continue;\n        headers.set(key, Array.isArray(value) ? value.join(\", \") : value);\n      }\n    }\n  }\n\n  // The SDK requires Accept + Content-Type to advertise both JSON and SSE on\n  // a POST. Real MCP clients (Claude Code, `agent-native connect`) always\n  // send these; we never inject/alter them — if they're absent the SDK\n  // returns its spec-mandated 406/415, identical to the Node path.\n\n  const host = headers.get(\"host\") || \"localhost\";\n  const forwardedProto = headers.get(\"x-forwarded-proto\");\n  const proto =\n    forwardedProto?.split(\",\")[0]?.trim() ||\n    (/^(localhost|127\\.0\\.0\\.1)(:|$)/.test(host) ? \"http\" : \"https\");\n  let url = `${proto}://${host}/_agent-native/mcp`;\n  try {\n    if (src?.url) url = new URL(src.url).href;\n  } catch {\n    // keep the synthesized URL\n  }\n\n  // No body here on purpose: the JSON-RPC payload is forwarded via the\n  // transport's `parsedBody` option (the same mechanism the Node transport\n  // uses), so the request stream is never read twice.\n  return new Request(url, { method, headers });\n}\n\n// ---------------------------------------------------------------------------\n// handleMcpRequest — runtime-agnostic MCP request handler\n// ---------------------------------------------------------------------------\n\n/**\n * Handle a single `{routePrefix}/mcp` request on either runtime.\n *\n * - **Node fast-path** (real Node HTTP server): unchanged — delegate to the\n *   SDK's `StreamableHTTPServerTransport.handleRequest(nodeReq, nodeRes,\n *   body)`, which writes directly to the Node response (full protocol incl.\n *   SSE).\n * - **Web-standard fallback** (Nitro 3 / Netlify web runtime, Cloudflare,\n *   Deno, Bun — where there is no Node req/res): build the SAME MCP `Server`\n *   from the SAME config + identity, drive it through the SDK's\n *   `WebStandardStreamableHTTPServerTransport` (which the Node transport is\n *   itself just a thin wrapper around), and return the resulting Web\n *   `Response` as a normal h3 return value.\n *\n * Auth, the `runWithRequestContext` identity wrap, the deep-link `_meta` /\n * markdown append, `requestMeta` origin/target derivation and the stateless\n * semantics are IDENTICAL on both paths because both build the same server\n * via `createMCPServerForRequest` and both transports funnel into the same\n * `WebStandardStreamableHTTPServerTransport.handleRequest(webRequest, {\n * parsedBody })` with the same options.\n *\n * Returns:\n *   - `undefined` when the request targets a sub-route (so management/status\n *     routes mounted under `/_agent-native/mcp/*` handle it themselves) — the\n *     h3 mount falls through to the next handler.\n *   - a Web `Response` (web fallback) or a string/object (Node path /\n *     auth-error path) otherwise. The Node path also sets `_handled` so h3\n *     doesn't double-write.\n */\nexport async function handleMcpRequest(\n  event: H3Event,\n  config: MCPConfig,\n): Promise<Response | string | { error: string } | undefined> {\n  const pathname = event.url?.pathname || \"/\";\n  const subpath = pathname.replace(/^\\/+/, \"\").replace(/\\/+$/, \"\");\n  if (subpath) {\n    // Let management/status routes mounted under /_agent-native/mcp/* handle\n    // their own requests instead of treating them as MCP protocol traffic.\n    return undefined;\n  }\n\n  const method = getMethod(event);\n\n  // Auth check — extracts the caller's identity from the JWT (`sub`), or, on\n  // the static-token / dev-open path, from the forwarded\n  // `X-Agent-Native-Owner-Email` hint the stdio proxy sends (the\n  // `agent-native mcp install` flow). Without this the install flow would run\n  // every tool unscoped (userEmail === undefined).\n  const authHeader = getRequestHeader(event, \"authorization\");\n  const ownerEmailHeader = getRequestHeader(\n    event,\n    \"x-agent-native-owner-email\",\n  );\n  // Gate header-only dev-open on the REAL socket peer, never a parsed\n  // `Host` header (client-controlled — an attacker could send\n  // `Host: localhost`). A deployed app missing A2A_SECRET / ACCESS_TOKEN\n  // must fail closed rather than trust a spoofable owner-email header that\n  // `fullSurface` would otherwise escalate to the full mutating surface.\n  const requestMeta = deriveRequestMeta(event);\n  const authResult = await verifyAuth(authHeader, ownerEmailHeader, {\n    allowDevOpen:\n      isLoopbackRequest(event) && isLoopbackOrigin(requestMeta.origin),\n    resourceUrl: getMcpOAuthResource(event),\n  });\n  if (!authResult.authed) {\n    setResponseStatus(event, 401);\n    setResponseHeader(event, \"WWW-Authenticate\", buildMcpOAuthChallenge(event));\n    return { error: \"Unauthorized\" };\n  }\n\n  // Stateless mode: only POST is meaningful\n  if (method === \"DELETE\") {\n    setResponseStatus(event, 204);\n    return \"\";\n  }\n\n  if (method !== \"POST\" && method !== \"GET\") {\n    setResponseStatus(event, 405);\n    return { error: \"Method not allowed\" };\n  }\n\n  // Read body for POST (GET has no body). Read it via the h3 helper exactly\n  // once; both transports accept it as a pre-parsed body so the request\n  // stream is never consumed twice.\n  const body = method === \"POST\" ? await readBody(event) : undefined;\n\n  // Per-request stateless transport + server. Both runtimes build the SAME\n  // server from the SAME config + verified identity + request meta, so\n  // tools/list, tools/call, and the deep-link `_meta` are identical. A\n  // connected real caller (connect-minted token / `mcp install` /\n  // ACCESS_TOKEN / production) gets the full action surface even in local\n  // dev; unauthenticated dev probes stay sparse. See `external-agents` skill.\n  const server = await createMCPServerForRequest(config, authResult.identity, {\n    ...requestMeta,\n    fullSurface: authResult.fullSurface === true,\n  });\n\n  const { nodeReq, nodeRes } = getNodeReqRes(event);\n\n  if (nodeReq && nodeRes) {\n    // ---- Node fast-path (UNCHANGED behavior) --------------------------------\n    const { StreamableHTTPServerTransport } =\n      await import(\"@modelcontextprotocol/sdk/server/streamableHttp.js\");\n    const transport = new StreamableHTTPServerTransport({\n      sessionIdGenerator: undefined, // stateless\n    });\n    await server.connect(transport);\n    try {\n      // The SDK transport writes directly to the Node response. Node-only by\n      // construction; we only reach here when real Node req/res exist.\n      await transport.handleRequest(nodeReq, nodeRes, body);\n    } catch (err: any) {\n      // The SDK transport writes directly to the Node response. If the socket\n      // is already closed/ended (client disconnected, or the host stream\n      // layer also flushed), Node throws ERR_STREAM_WRITE_AFTER_END *after*\n      // the MCP payload was already delivered correctly. Swallow that benign\n      // post-flush write so an external agent disconnecting mid-stream can\n      // never take down the server process; rethrow anything else.\n      if (err?.code !== \"ERR_STREAM_WRITE_AFTER_END\") throw err;\n      if (process.env.DEBUG)\n        console.log(\n          \"[mcp] ignored post-flush ERR_STREAM_WRITE_AFTER_END (client disconnected)\",\n        );\n    }\n    // Prevent H3 from double-writing the response\n    (event as any)._handled = true;\n    return undefined;\n  }\n\n  // ---- Web-standard fallback (Nitro 3 / Netlify web runtime, CF, Deno,\n  // Bun) ---------------------------------------------------------------------\n  //\n  // `StreamableHTTPServerTransport` is itself just a thin wrapper that\n  // converts the Node req/res to a web Request/Response and delegates to\n  // `WebStandardStreamableHTTPServerTransport.handleRequest(webRequest, {\n  // parsedBody })`. Using the web transport directly with the SAME options +\n  // the same pre-read `parsedBody` produces byte-identical protocol output\n  // (including the deep-link `_meta` built inside createMCPServerForRequest),\n  // and works on every web runtime because it returns a Web `Response`\n  // (JSON for request/response, or an SSE `ReadableStream` body which h3\n  // streams natively).\n  const { WebStandardStreamableHTTPServerTransport } =\n    await import(\"@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js\");\n  const transport = new WebStandardStreamableHTTPServerTransport({\n    sessionIdGenerator: undefined, // stateless — same as the Node path\n  });\n  await server.connect(transport);\n  const webRequest = buildWebRequest(event, method);\n  // `parsedBody: undefined` would make the SDK try to read `req.json()`; our\n  // synthesized request has no body, so only pass the option for POST (where\n  // we actually have a parsed body). For GET the transport reads no body.\n  const response = await transport.handleRequest(\n    webRequest,\n    method === \"POST\" ? { parsedBody: body } : undefined,\n  );\n  return response;\n}\n\n// ---------------------------------------------------------------------------\n// mountMCP — register MCP Streamable HTTP endpoint on H3/Nitro\n// ---------------------------------------------------------------------------\n\n/**\n * Mount an MCP remote server on an H3/Nitro app.\n *\n * Endpoint: `{routePrefix}/mcp` (default `/_agent-native/mcp`)\n *\n * Uses stateless Streamable HTTP transport — no in-memory sessions,\n * compatible with serverless deployments. Runtime-agnostic: a real Node\n * server uses the SDK's Node transport; the web-standard runtime (Nitro 3 /\n * Netlify web runtime, Cloudflare, Deno, Bun) uses the SDK's web-standard\n * transport. Both build the same server and produce identical JSON-RPC\n * output.\n *\n * Auth: Bearer token matching ACCESS_TOKEN/ACCESS_TOKENS or JWT via A2A_SECRET.\n * No auth required when neither is configured (dev mode).\n */\nexport function mountMCP(\n  nitroApp: any,\n  config: MCPConfig,\n  routePrefix = \"/_agent-native\",\n): void {\n  getH3App(nitroApp).use(\n    `${routePrefix}/mcp`,\n    defineEventHandler(async (event) => {\n      return handleMcpRequest(event as H3Event, config);\n    }),\n  );\n\n  if (process.env.DEBUG)\n    console.log(\n      `[mcp] Mounted MCP server at ${routePrefix}/mcp (${Object.keys(config.actions).length} tools${config.askAgent ? \" + ask-agent\" : \"\"})`,\n    );\n}\n"]}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,wCAAwC,CAAC;AAClE,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,SAAS,EACT,gBAAgB,GACjB,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EACL,yBAAyB,EACzB,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,kBAAkB,GAInB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAE/E,6EAA6E;AAC7E,4EAA4E;AAC5E,yDAAyD;AACzD,OAAO,EACL,yBAAyB,EACzB,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,kBAAkB,GACnB,CAAC;AAGF,8EAA8E;AAC9E,+DAA+D;AAC/D,8EAA8E;AAE9E;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,KAAc;IAInC,MAAM,CAAC,GAAG,KAAY,CAAC;IACvB,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC;IACzD,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC;IACzD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,cAAc,GAAG,gBAAgB,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,KAAK,GACT,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;QACrC,CAAC,IAAI,IAAI,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,MAAM,YAAY,GAAG,gBAAgB,CACnC,KAAK,EACL,4BAA4B,CAC7B,EAAE,WAAW,EAAE,CAAC;IACjB,MAAM,MAAM,GACV,YAAY,KAAK,SAAS;QAC1B,YAAY,KAAK,UAAU;QAC3B,YAAY,KAAK,SAAS;QACxB,CAAC,CAAE,YAAyC;QAC5C,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC9E,MAAM,UAAU,GACd,gBAAgB,CAAC,KAAK,EAAE,2BAA2B,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC5E,MAAM,iBAAiB,GAAG,gBAAgB,CACxC,KAAK,EACL,iCAAiC,CAClC,EAAE,WAAW,EAAE,CAAC;IACjB,MAAM,WAAW,GACf,iBAAiB,KAAK,GAAG;QACzB,iBAAiB,KAAK,MAAM;QAC5B,iBAAiB,KAAK,KAAK,CAAC;IAC9B,OAAO;QACL,MAAM;QACN,MAAM;QACN,UAAU;QACV,UAAU;QACV,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA0B;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;QAC1C,OAAO,CACL,QAAQ,KAAK,WAAW;YACxB,QAAQ,KAAK,WAAW;YACxB,QAAQ,KAAK,KAAK;YAClB,QAAQ,KAAK,OAAO;YACpB,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAC5B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,eAAe,CAAC,KAAc,EAAE,MAAc;IACrD,MAAM,GAAG,GAAI,KAAa,CAAC,GAA0B,CAAC;IAEtD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,IAAI,GAAG,EAAE,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QAC9D,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,GAAI,KAAa,CAAC,IAAI,EAAE,GAAG,EAAE,OAEhC,CAAC;QACd,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtD,IAAI,KAAK,IAAI,IAAI;oBAAE,SAAS;gBAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,wEAAwE;IACxE,qEAAqE;IACrE,iEAAiE;IAEjE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC;IAChD,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACxD,MAAM,KAAK,GACT,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;QACrC,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnE,IAAI,GAAG,GAAG,GAAG,KAAK,MAAM,IAAI,oBAAoB,CAAC;IACjD,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,GAAG;YAAE,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;IAED,qEAAqE;IACrE,yEAAyE;IACzE,oDAAoD;IACpD,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,8EAA8E;AAC9E,0DAA0D;AAC1D,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAc,EACd,MAAiB;IAEjB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,GAAG,CAAC;IAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjE,IAAI,OAAO,EAAE,CAAC;QACZ,yEAAyE;QACzE,uEAAuE;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAEhC,2EAA2E;IAC3E,uDAAuD;IACvD,+DAA+D;IAC/D,4EAA4E;IAC5E,iDAAiD;IACjD,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC5D,MAAM,gBAAgB,GAAG,gBAAgB,CACvC,KAAK,EACL,4BAA4B,CAC7B,CAAC;IACF,oEAAoE;IACpE,4DAA4D;IAC5D,uEAAuE;IACvE,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,gBAAgB,EAAE;QAChE,YAAY,EACV,iBAAiB,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC;QAClE,WAAW,EAAE,mBAAmB,CAAC,KAAK,CAAC;KACxC,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QACvB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,EAAE,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5E,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACnC,CAAC;IAED,0CAA0C;IAC1C,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACzC,CAAC;IAED,0EAA0E;IAC1E,sEAAsE;IACtE,kCAAkC;IAClC,MAAM,IAAI,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEnE,yEAAyE;IACzE,qEAAqE;IACrE,qEAAqE;IACrE,gEAAgE;IAChE,wEAAwE;IACxE,4EAA4E;IAC5E,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE;QAC1E,GAAG,WAAW;QACd,WAAW,EAAE,UAAU,CAAC,WAAW,KAAK,IAAI;KAC7C,CAAC,CAAC;IAEH,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAElD,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;QACvB,4EAA4E;QAC5E,MAAM,EAAE,6BAA6B,EAAE,GACrC,MAAM,MAAM,CAAC,oDAAoD,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;YAClD,kBAAkB,EAAE,SAAS,EAAE,YAAY;SAC5C,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,uEAAuE;YACvE,iEAAiE;YACjE,MAAM,SAAS,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,wEAAwE;YACxE,mEAAmE;YACnE,sEAAsE;YACtE,uEAAuE;YACvE,qEAAqE;YACrE,6DAA6D;YAC7D,IAAI,GAAG,EAAE,IAAI,KAAK,4BAA4B;gBAAE,MAAM,GAAG,CAAC;YAC1D,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK;gBACnB,OAAO,CAAC,GAAG,CACT,2EAA2E,CAC5E,CAAC;QACN,CAAC;QACD,8CAA8C;QAC7C,KAAa,CAAC,QAAQ,GAAG,IAAI,CAAC;QAC/B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,uEAAuE;IACvE,6EAA6E;IAC7E,EAAE;IACF,qEAAqE;IACrE,uEAAuE;IACvE,wEAAwE;IACxE,2EAA2E;IAC3E,yEAAyE;IACzE,4EAA4E;IAC5E,qEAAqE;IACrE,uEAAuE;IACvE,qBAAqB;IACrB,MAAM,EAAE,wCAAwC,EAAE,GAChD,MAAM,MAAM,CAAC,+DAA+D,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,IAAI,wCAAwC,CAAC;QAC7D,kBAAkB,EAAE,SAAS,EAAE,oCAAoC;KACpE,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAClD,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,aAAa,CAC5C,UAAU,EACV,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CACrD,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,+DAA+D;AAC/D,8EAA8E;AAE9E;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,QAAQ,CACtB,QAAa,EACb,MAAiB,EACjB,WAAW,GAAG,gBAAgB;IAE9B,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,CACpB,GAAG,WAAW,MAAM,EACpB,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACjC,OAAO,gBAAgB,CAAC,KAAgB,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC,CAAC,CACH,CAAC;IAEF,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK;QACnB,OAAO,CAAC,GAAG,CACT,+BAA+B,WAAW,SAAS,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,SAAS,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,GAAG,CACvI,CAAC;AACN,CAAC","sourcesContent":["import type { H3Event } from \"h3\";\nimport { getH3App } from \"../server/framework-request-handler.js\";\nimport {\n  defineEventHandler,\n  setResponseStatus,\n  setResponseHeader,\n  getMethod,\n  getRequestHeader,\n} from \"h3\";\nimport { readBody } from \"../server/h3-helpers.js\";\nimport { isLoopbackRequest } from \"../server/auth.js\";\nimport {\n  createMCPServerForRequest,\n  verifyAuth,\n  getAccessTokens,\n  resolveOrgIdFromDomain,\n  buildLinkArtifacts,\n  type MCPConfig,\n  type MCPCallerIdentity,\n  type MCPRequestMeta,\n} from \"./build-server.js\";\nimport { buildMcpOAuthChallenge, getMcpOAuthResource } from \"./oauth-route.js\";\n\n// Re-export the shared MCP server builder + types so the stdio transport and\n// any (future) external importer of `@agent-native/core/mcp` keep resolving\n// against `./server.js` exactly as before this refactor.\nexport {\n  createMCPServerForRequest,\n  verifyAuth,\n  getAccessTokens,\n  resolveOrgIdFromDomain,\n  buildLinkArtifacts,\n};\nexport type { MCPConfig, MCPCallerIdentity, MCPRequestMeta };\n\n// ---------------------------------------------------------------------------\n// Runtime detection — Node fast-path vs. web-standard fallback\n// ---------------------------------------------------------------------------\n\n/**\n * Resolve the underlying Node `http` req/res pair if (and only if) we're\n * running on a real Node HTTP server (local dev, `node` Nitro preset). On the\n * web-standard runtime (Nitro 3 / Netlify web runtime, Cloudflare, Deno, Bun)\n * BOTH of these are undefined — that's the signal to take the web fallback\n * instead of returning 501.\n */\nfunction getNodeReqRes(event: H3Event): {\n  nodeReq: any | undefined;\n  nodeRes: any | undefined;\n} {\n  const e = event as any;\n  const nodeReq = e.node?.req ?? e.req?.runtime?.node?.req;\n  const nodeRes = e.node?.res ?? e.req?.runtime?.node?.res;\n  return { nodeReq, nodeRes };\n}\n\n/**\n * Derive the request origin + the markdown deep-link target from the inbound\n * headers. Identical logic for both the Node and web paths so the absolute\n * deep-link URLs in tool results are computed the same way regardless of\n * runtime.\n */\nfunction deriveRequestMeta(event: H3Event): MCPRequestMeta {\n  const forwardedProto = getRequestHeader(event, \"x-forwarded-proto\");\n  const host = getRequestHeader(event, \"host\");\n  const proto =\n    forwardedProto?.split(\",\")[0]?.trim() ||\n    (host && /^(localhost|127\\.0\\.0\\.1)(:|$)/.test(host) ? \"http\" : \"https\");\n  const origin = host ? `${proto}://${host}` : undefined;\n  const targetHeader = getRequestHeader(\n    event,\n    \"x-agent-native-open-target\",\n  )?.toLowerCase();\n  const target =\n    targetHeader === \"desktop\" ||\n    targetHeader === \"terminal\" ||\n    targetHeader === \"browser\"\n      ? (targetHeader as MCPRequestMeta[\"target\"])\n      : undefined;\n  const clientName = getRequestHeader(event, \"user-agent\")?.trim() || undefined;\n  const clientHint =\n    getRequestHeader(event, \"x-agent-native-mcp-client\")?.trim() || undefined;\n  const fullCatalogHeader = getRequestHeader(\n    event,\n    \"x-agent-native-mcp-full-catalog\",\n  )?.toLowerCase();\n  const fullCatalog =\n    fullCatalogHeader === \"1\" ||\n    fullCatalogHeader === \"true\" ||\n    fullCatalogHeader === \"yes\";\n  return {\n    origin,\n    target,\n    clientName,\n    clientHint,\n    ...(fullCatalog ? { fullCatalog } : {}),\n  };\n}\n\nfunction isLoopbackOrigin(origin: string | undefined): boolean {\n  if (!origin) return false;\n  try {\n    const hostname = new URL(origin).hostname;\n    return (\n      hostname === \"localhost\" ||\n      hostname === \"127.0.0.1\" ||\n      hostname === \"::1\" ||\n      hostname === \"[::1]\" ||\n      hostname.startsWith(\"127.\")\n    );\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Reconstruct a Web Standard `Request` for the web-standard MCP transport.\n *\n * On the web runtime h3 v2 exposes the real web `Request` as `event.req`; we\n * prefer it (its `method` / `headers` are exactly what the client sent). But\n * the framework middleware rewrites `event.req.url` when it strips a mount\n * prefix, and the transport reads `req.method` + `req.headers` (never the\n * body — we pass that via `parsedBody`), so we always synthesize a clean\n * `Request` with the verified method + a fresh `Headers` copy. The URL is\n * cosmetic for the SDK (it only does `new URL(req.url)` for `requestInfo`),\n * so a best-effort absolute URL derived from the inbound host is sufficient\n * and never throws.\n */\nfunction buildWebRequest(event: H3Event, method: string): Request {\n  const src = (event as any).req as Request | undefined;\n\n  const headers = new Headers();\n  if (src?.headers && typeof src.headers.forEach === \"function\") {\n    src.headers.forEach((value, key) => headers.set(key, value));\n  } else {\n    const rawHeaders = (event as any).node?.req?.headers as\n      | Record<string, string | string[] | undefined>\n      | undefined;\n    if (rawHeaders) {\n      for (const [key, value] of Object.entries(rawHeaders)) {\n        if (value == null) continue;\n        headers.set(key, Array.isArray(value) ? value.join(\", \") : value);\n      }\n    }\n  }\n\n  // The SDK requires Accept + Content-Type to advertise both JSON and SSE on\n  // a POST. Real MCP clients (Claude Code, `agent-native connect`) always\n  // send these; we never inject/alter them — if they're absent the SDK\n  // returns its spec-mandated 406/415, identical to the Node path.\n\n  const host = headers.get(\"host\") || \"localhost\";\n  const forwardedProto = headers.get(\"x-forwarded-proto\");\n  const proto =\n    forwardedProto?.split(\",\")[0]?.trim() ||\n    (/^(localhost|127\\.0\\.0\\.1)(:|$)/.test(host) ? \"http\" : \"https\");\n  let url = `${proto}://${host}/_agent-native/mcp`;\n  try {\n    if (src?.url) url = new URL(src.url).href;\n  } catch {\n    // keep the synthesized URL\n  }\n\n  // No body here on purpose: the JSON-RPC payload is forwarded via the\n  // transport's `parsedBody` option (the same mechanism the Node transport\n  // uses), so the request stream is never read twice.\n  return new Request(url, { method, headers });\n}\n\n// ---------------------------------------------------------------------------\n// handleMcpRequest — runtime-agnostic MCP request handler\n// ---------------------------------------------------------------------------\n\n/**\n * Handle a single `{routePrefix}/mcp` request on either runtime.\n *\n * - **Node fast-path** (real Node HTTP server): unchanged — delegate to the\n *   SDK's `StreamableHTTPServerTransport.handleRequest(nodeReq, nodeRes,\n *   body)`, which writes directly to the Node response (full protocol incl.\n *   SSE).\n * - **Web-standard fallback** (Nitro 3 / Netlify web runtime, Cloudflare,\n *   Deno, Bun — where there is no Node req/res): build the SAME MCP `Server`\n *   from the SAME config + identity, drive it through the SDK's\n *   `WebStandardStreamableHTTPServerTransport` (which the Node transport is\n *   itself just a thin wrapper around), and return the resulting Web\n *   `Response` as a normal h3 return value.\n *\n * Auth, the `runWithRequestContext` identity wrap, the deep-link `_meta` /\n * markdown append, `requestMeta` origin/target derivation and the stateless\n * semantics are IDENTICAL on both paths because both build the same server\n * via `createMCPServerForRequest` and both transports funnel into the same\n * `WebStandardStreamableHTTPServerTransport.handleRequest(webRequest, {\n * parsedBody })` with the same options.\n *\n * Returns:\n *   - `undefined` when the request targets a sub-route (so management/status\n *     routes mounted under `/_agent-native/mcp/*` handle it themselves) — the\n *     h3 mount falls through to the next handler.\n *   - a Web `Response` (web fallback) or a string/object (Node path /\n *     auth-error path) otherwise. The Node path also sets `_handled` so h3\n *     doesn't double-write.\n */\nexport async function handleMcpRequest(\n  event: H3Event,\n  config: MCPConfig,\n): Promise<Response | string | { error: string } | undefined> {\n  const pathname = event.url?.pathname || \"/\";\n  const subpath = pathname.replace(/^\\/+/, \"\").replace(/\\/+$/, \"\");\n  if (subpath) {\n    // Let management/status routes mounted under /_agent-native/mcp/* handle\n    // their own requests instead of treating them as MCP protocol traffic.\n    return undefined;\n  }\n\n  const method = getMethod(event);\n\n  // Auth check — extracts the caller's identity from the JWT (`sub`), or, on\n  // the static-token / dev-open path, from the forwarded\n  // `X-Agent-Native-Owner-Email` hint the stdio proxy sends (the\n  // `agent-native mcp install` flow). Without this the install flow would run\n  // every tool unscoped (userEmail === undefined).\n  const authHeader = getRequestHeader(event, \"authorization\");\n  const ownerEmailHeader = getRequestHeader(\n    event,\n    \"x-agent-native-owner-email\",\n  );\n  // Gate header-only dev-open on the REAL socket peer, never a parsed\n  // `Host` header (client-controlled — an attacker could send\n  // `Host: localhost`). A deployed app missing A2A_SECRET / ACCESS_TOKEN\n  // must fail closed rather than trust a spoofable owner-email header that\n  // `fullSurface` would otherwise escalate to the full mutating surface.\n  const requestMeta = deriveRequestMeta(event);\n  const authResult = await verifyAuth(authHeader, ownerEmailHeader, {\n    allowDevOpen:\n      isLoopbackRequest(event) && isLoopbackOrigin(requestMeta.origin),\n    resourceUrl: getMcpOAuthResource(event),\n  });\n  if (!authResult.authed) {\n    setResponseStatus(event, 401);\n    setResponseHeader(event, \"WWW-Authenticate\", buildMcpOAuthChallenge(event));\n    return { error: \"Unauthorized\" };\n  }\n\n  // Stateless mode: only POST is meaningful\n  if (method === \"DELETE\") {\n    setResponseStatus(event, 204);\n    return \"\";\n  }\n\n  if (method !== \"POST\" && method !== \"GET\") {\n    setResponseStatus(event, 405);\n    return { error: \"Method not allowed\" };\n  }\n\n  // Read body for POST (GET has no body). Read it via the h3 helper exactly\n  // once; both transports accept it as a pre-parsed body so the request\n  // stream is never consumed twice.\n  const body = method === \"POST\" ? await readBody(event) : undefined;\n\n  // Per-request stateless transport + server. Both runtimes build the SAME\n  // server from the SAME config + verified identity + request meta, so\n  // tools/list, tools/call, and the deep-link `_meta` are identical. A\n  // connected real caller (connect-minted token / `mcp install` /\n  // ACCESS_TOKEN / production) gets the full action surface even in local\n  // dev; unauthenticated dev probes stay sparse. See `external-agents` skill.\n  const server = await createMCPServerForRequest(config, authResult.identity, {\n    ...requestMeta,\n    fullSurface: authResult.fullSurface === true,\n  });\n\n  const { nodeReq, nodeRes } = getNodeReqRes(event);\n\n  if (nodeReq && nodeRes) {\n    // ---- Node fast-path (UNCHANGED behavior) --------------------------------\n    const { StreamableHTTPServerTransport } =\n      await import(\"@modelcontextprotocol/sdk/server/streamableHttp.js\");\n    const transport = new StreamableHTTPServerTransport({\n      sessionIdGenerator: undefined, // stateless\n    });\n    await server.connect(transport);\n    try {\n      // The SDK transport writes directly to the Node response. Node-only by\n      // construction; we only reach here when real Node req/res exist.\n      await transport.handleRequest(nodeReq, nodeRes, body);\n    } catch (err: any) {\n      // The SDK transport writes directly to the Node response. If the socket\n      // is already closed/ended (client disconnected, or the host stream\n      // layer also flushed), Node throws ERR_STREAM_WRITE_AFTER_END *after*\n      // the MCP payload was already delivered correctly. Swallow that benign\n      // post-flush write so an external agent disconnecting mid-stream can\n      // never take down the server process; rethrow anything else.\n      if (err?.code !== \"ERR_STREAM_WRITE_AFTER_END\") throw err;\n      if (process.env.DEBUG)\n        console.log(\n          \"[mcp] ignored post-flush ERR_STREAM_WRITE_AFTER_END (client disconnected)\",\n        );\n    }\n    // Prevent H3 from double-writing the response\n    (event as any)._handled = true;\n    return undefined;\n  }\n\n  // ---- Web-standard fallback (Nitro 3 / Netlify web runtime, CF, Deno,\n  // Bun) ---------------------------------------------------------------------\n  //\n  // `StreamableHTTPServerTransport` is itself just a thin wrapper that\n  // converts the Node req/res to a web Request/Response and delegates to\n  // `WebStandardStreamableHTTPServerTransport.handleRequest(webRequest, {\n  // parsedBody })`. Using the web transport directly with the SAME options +\n  // the same pre-read `parsedBody` produces byte-identical protocol output\n  // (including the deep-link `_meta` built inside createMCPServerForRequest),\n  // and works on every web runtime because it returns a Web `Response`\n  // (JSON for request/response, or an SSE `ReadableStream` body which h3\n  // streams natively).\n  const { WebStandardStreamableHTTPServerTransport } =\n    await import(\"@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js\");\n  const transport = new WebStandardStreamableHTTPServerTransport({\n    sessionIdGenerator: undefined, // stateless — same as the Node path\n  });\n  await server.connect(transport);\n  const webRequest = buildWebRequest(event, method);\n  // `parsedBody: undefined` would make the SDK try to read `req.json()`; our\n  // synthesized request has no body, so only pass the option for POST (where\n  // we actually have a parsed body). For GET the transport reads no body.\n  const response = await transport.handleRequest(\n    webRequest,\n    method === \"POST\" ? { parsedBody: body } : undefined,\n  );\n  return response;\n}\n\n// ---------------------------------------------------------------------------\n// mountMCP — register MCP Streamable HTTP endpoint on H3/Nitro\n// ---------------------------------------------------------------------------\n\n/**\n * Mount an MCP remote server on an H3/Nitro app.\n *\n * Endpoint: `{routePrefix}/mcp` (default `/_agent-native/mcp`)\n *\n * Uses stateless Streamable HTTP transport — no in-memory sessions,\n * compatible with serverless deployments. Runtime-agnostic: a real Node\n * server uses the SDK's Node transport; the web-standard runtime (Nitro 3 /\n * Netlify web runtime, Cloudflare, Deno, Bun) uses the SDK's web-standard\n * transport. Both build the same server and produce identical JSON-RPC\n * output.\n *\n * Auth: Bearer token matching ACCESS_TOKEN/ACCESS_TOKENS or JWT via A2A_SECRET.\n * No auth required when neither is configured (dev mode).\n */\nexport function mountMCP(\n  nitroApp: any,\n  config: MCPConfig,\n  routePrefix = \"/_agent-native\",\n): void {\n  getH3App(nitroApp).use(\n    `${routePrefix}/mcp`,\n    defineEventHandler(async (event) => {\n      return handleMcpRequest(event as H3Event, config);\n    }),\n  );\n\n  if (process.env.DEBUG)\n    console.log(\n      `[mcp] Mounted MCP server at ${routePrefix}/mcp (${Object.keys(config.actions).length} tools${config.askAgent ? \" + ask-agent\" : \"\"})`,\n    );\n}\n"]}

package/dist/org/handlers.d.ts

@@ -36,6 +36,8 @@ export declare const listMembersHandler: import("h3").EventHandlerWithFetch<impo
         role: OrgRole;
         joinedAt: number;
     }[];
+    hasMore: boolean;
+    nextOffset: number;
 }>>;
 interface SingleInviteResult {
     id: string;

package/dist/org/handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/org/handlers.ts"],"names":[],"mappings":"AA+CA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AA2B1C,2FAA2F;AAC3F,eAAO,MAAM,eAAe;;;;;;;cAaA,OAAO;;;;;;;;;;eAIC,MAAM;iBAAW,MAAM;;;;GA0EzD,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB;;;;GAe3B,CAAC;AAEH,wDAAwD;AACxD,eAAO,MAAM,kBAAkB;;;cAWH,OAAO;;;GAIjC,CAAC;AAMH,UAAU,kBAAkB;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;IACzB,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,mBAAmB;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAsED,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB;;;;GAuEnC,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,sBAAsB;;;;;;;;;GAyBlC,CAAC;AAEF,4EAA4E;AAC5E,eAAO,MAAM,uBAAuB;;;UAoD8B,OAAO;GAkBxE,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,mBAAmB;;GA2D/B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB;;;GAqEnC,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,gBAAgB;;;GA4B3B,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,gBAAgB;;;UAkCC,OAAO;GAEnC,CAAC;AAEH,mGAAmG;AACnG,eAAO,MAAM,mBAAmB;;;UAqDR,OAAO;GAG9B,CAAC;AAEF,+FAA+F;AAC/F,eAAO,MAAM,gBAAgB;;GAsE3B,CAAC;AAEH,oGAAoG;AACpG,eAAO,MAAM,mBAAmB;;;GA0C/B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,oBAAoB;;;;;YA2DvB,MAAM;cACJ,MAAM;aACP,MAAM;YACP,OAAO;iBACF,MAAM;gBACP,MAAM;;GAyDnB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB;;;GAgGnC,CAAC"}
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/org/handlers.ts"],"names":[],"mappings":"AA+CA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AA2B1C,2FAA2F;AAC3F,eAAO,MAAM,eAAe;;;;;;;cAaA,OAAO;;;;;;;;;;eAIC,MAAM;iBAAW,MAAM;;;;GA0EzD,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB;;;;GAe3B,CAAC;AAEH,wDAAwD;AACxD,eAAO,MAAM,kBAAkB;;;cA2CH,OAAO;;;;;GAQjC,CAAC;AAqBH,UAAU,kBAAkB;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;IACzB,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,mBAAmB;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAsED,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB;;;;GAuEnC,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,sBAAsB;;;;;;;;;GAyBlC,CAAC;AAEF,4EAA4E;AAC5E,eAAO,MAAM,uBAAuB;;;UAoD8B,OAAO;GAkBxE,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,mBAAmB;;GA2D/B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB;;;GAqEnC,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,gBAAgB;;;GA4B3B,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,gBAAgB;;;UAkCC,OAAO;GAEnC,CAAC;AAEH,mGAAmG;AACnG,eAAO,MAAM,mBAAmB;;;UAqDR,OAAO;GAG9B,CAAC;AAEF,+FAA+F;AAC/F,eAAO,MAAM,gBAAgB;;GAsE3B,CAAC;AAEH,oGAAoG;AACpG,eAAO,MAAM,mBAAmB;;;GA0C/B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,oBAAoB;;;;;YA2DvB,MAAM;cACJ,MAAM;aACP,MAAM;YACP,OAAO;iBACF,MAAM;gBACP,MAAM;;GAyDnB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB;;;GAgGnC,CAAC"}

package/dist/org/handlers.js

@@ -165,19 +165,60 @@ export const createOrgHandler = defineEventHandler(async (event) => {
 export const listMembersHandler = defineEventHandler(async (event) => {
     const ctx = await getOrgContext(event);
     if (!ctx.orgId)
-        return { members: [] };
+        return { members: [], hasMore: false, nextOffset: null };
+    const url = getRequestURL(event);
+    const search = (url.searchParams.get("search") ??
+        url.searchParams.get("q") ??
+        "")
+        .trim()
+        .toLowerCase();
+    const hasLimit = url.searchParams.has("limit");
+    const hasOffset = url.searchParams.has("offset");
+    const shouldPaginate = hasLimit || hasOffset || search.length > 0;
+    const limit = shouldPaginate
+        ? clampInteger(url.searchParams.get("limit"), 25, 1, 100)
+        : null;
+    const offset = shouldPaginate
+        ? clampInteger(url.searchParams.get("offset"), 0, 0, 100_000)
+        : 0;
     const e = await exec();
+    const args = [ctx.orgId];
+    let sql = `SELECT email, role, joined_at AS "joinedAt" FROM org_members WHERE org_id = ?`;
+    if (search) {
+        sql += ` AND LOWER(email) LIKE ? ESCAPE '\\'`;
+        args.push(`%${escapeLike(search)}%`);
+    }
+    sql += ` ORDER BY LOWER(email) ASC`;
+    if (limit !== null) {
+        sql += ` LIMIT ? OFFSET ?`;
+        args.push(limit + 1, offset);
+    }
     const { rows } = await e.execute({
-        sql: `SELECT email, role, joined_at AS "joinedAt" FROM org_members WHERE org_id = ?`,
-        args: [ctx.orgId],
+        sql,
+        args,
     });
-    const members = rows.map((r) => ({
+    const pageRows = limit !== null ? rows.slice(0, limit) : rows;
+    const hasMore = limit !== null && rows.length > limit;
+    const members = pageRows.map((r) => ({
         email: String(r.email),
         role: String(r.role),
         joinedAt: Number(r.joinedAt ?? r.joined_at),
     }));
-    return { members };
+    return {
+        members,
+        hasMore,
+        nextOffset: hasMore ? offset + members.length : null,
+    };
 });
+function clampInteger(input, fallback, min, max) {
+    const value = input === null ? fallback : Number.parseInt(input, 10);
+    if (!Number.isFinite(value))
+        return fallback;
+    return Math.min(max, Math.max(min, value));
+}
+function escapeLike(value) {
+    return value.replace(/[\\%_]/g, (match) => `\\${match}`);
+}
 function normalizeInviteRole(input) {
     return input === "admin" ? "admin" : "member";
 }