@agimon-ai/po-mcp 0.0.0-alpha.0

package/dist/extensions/web.mjs

@@ -0,0 +1,2200 @@
+import { apiResponse, createApiClient, defineApiRoutes, defineFill, defineRepositorySettingsPanel, defineSessionStore, defineToolRenderer, defineWebLifecycle, defineWebPlugin, sessionApiAddress } from "@agimon-ai/po-core/web";
+import { Button, ChevronRightIcon, Dialog, DialogBody, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogTitle, ExternalLinkIcon, Input, MessageItem, MessageItemBody, MessageItemHeader, MessageItemStatus, SettingsActions, SettingsCard, SettingsNote, SettingsRow, SettingsRowDescription, SettingsRowText, SettingsRowTitle, SettingsSection, SettingsSectionHeader, SettingsSectionTitle, SyntaxText, toolTone } from "@agimon-ai/po-web-components";
+import { useStore } from "@tanstack/react-store";
+import { useCallback, useEffect, useRef, useState } from "react";
+import { Store } from "@tanstack/store";
+import { sealedTransport } from "@agimon-ai/po-web-security/browser";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+import { AppBridge, PostMessageTransport } from "@modelcontextprotocol/ext-apps/app-bridge";
+const ANSI_ESCAPE_PATTERN = new RegExp(`${String.fromCharCode(27)}\\[[0-?]*[ -/]*[@-~]`, "gu");
+const MAX_SESSION_AUTH_SERVERS = 128;
+const MAX_AUTHORIZATION_URL_LENGTH = 8192;
+const MAX_SERVER_TOOLS = 512;
+const MAX_TOOL_NAME_LENGTH = 256;
+const SESSION_AUTH_STATES = [
+	"not-connected",
+	"connecting",
+	"connected",
+	"degraded",
+	"needs-auth",
+	"failed",
+	"closed",
+	"disabled"
+];
+function isSessionAuthState(value) {
+	return SESSION_AUTH_STATES.some((state) => state === value);
+}
+/** Session route for one reachable tool's description and schema. */
+const MCP_SESSION_TOOL_API_PATH = "/tool";
+const MCP_SESSION_TOOL_SERVER_QUERY = "server";
+const MCP_SESSION_TOOL_NAME_QUERY = "tool";
+/** Reads the live-session status defensively. Empty is the browser's active-session clear value. */
+function parseMcpSessionAuthStatus(raw) {
+	if (raw === void 0 || raw.trim() === "") return void 0;
+	try {
+		const value = JSON.parse(raw.replace(ANSI_ESCAPE_PATTERN, ""));
+		if (!Array.isArray(value) || value.length === 0 || value.length > MAX_SESSION_AUTH_SERVERS) return void 0;
+		const names = /* @__PURE__ */ new Set();
+		for (const item of value) {
+			if (!isSessionAuthStatusItem(item) || names.has(item.name)) return void 0;
+			names.add(item.name);
+		}
+		return value;
+	} catch {
+		return;
+	}
+}
+function hasControlCharacter(value) {
+	for (const character of value) {
+		const codePoint = character.codePointAt(0);
+		if (codePoint !== void 0 && (codePoint < 32 || codePoint >= 127 && codePoint <= 159)) return true;
+	}
+	return false;
+}
+function isAuthorizationUrl(value) {
+	if (typeof value !== "string" || value.length > MAX_AUTHORIZATION_URL_LENGTH || hasControlCharacter(value)) return false;
+	try {
+		const url = new URL(value);
+		return (url.protocol === "http:" || url.protocol === "https:") && url.username === "" && url.password === "";
+	} catch {
+		return false;
+	}
+}
+function isToolName(value) {
+	return typeof value === "string" && value.trim() !== "" && value.length <= MAX_TOOL_NAME_LENGTH && !hasControlCharacter(value);
+}
+function isTokenCount(value) {
+	return typeof value === "number" && Number.isInteger(value) && value >= 0;
+}
+function isReachableTool(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+	const record = value;
+	return Object.keys(record).every((key) => key === "name" || key === "piName" || key === "tokens") && isToolName(record.name) && (!("piName" in record) || isToolName(record.piName)) && (!("tokens" in record) || isTokenCount(record.tokens));
+}
+function isSessionAuthStatusItem(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+	const record = value;
+	return Object.keys(record).every((key) => key === "name" || key === "state" || key === "authorizationUrl" || key === "tools") && (!("authorizationUrl" in record) || isAuthorizationUrl(record.authorizationUrl)) && (!("tools" in record) || Array.isArray(record.tools) && record.tools.length <= MAX_SERVER_TOOLS && record.tools.every(isReachableTool)) && typeof record.name === "string" && record.name.trim() !== "" && !hasControlCharacter(record.name) && isSessionAuthState(record.state);
+}
+/** Hub API paths for repository-scoped MCP management. */
+const MCP_REPOSITORY_API_PATH = "/repository";
+const MCP_DISCOVERY_API_PATH = "/repository/discover";
+const MCP_AUTHORIZATION_API_PATH = "/repository/authorize";
+/** The repository every route is asked about, and the flow segment the two flow routes carry. */
+const MCP_REPOSITORY_ID_QUERY = "repositoryId";
+const MCP_FLOW_ID_PARAM = "flowId";
+//#endregion
+//#region src/types/apiRoutes.ts
+/** One authorization flow, addressed by id below the flow collection. */
+const AUTHORIZATION_FLOW_PATH = `${MCP_AUTHORIZATION_API_PATH}/:${MCP_FLOW_ID_PARAM}`;
+/**
+* This package's routes, as data.
+*
+* No scope and no base path. The build reads both off
+* `src/extensions/(backend)/api/mcp/`, so the mount is stated once, by the
+* folder that creates it. The sub-paths come from `webMcp`, which already owned
+* them, so this table names where a route sits and nothing else.
+*
+* This is the one file the hub handler and the settings panel both read, so a
+* path cannot move on one side alone. The handler matches on these strings
+* rather than parsing its own copies of them.
+*
+* `:flowId` is the client's parameter syntax; the handler reads the segment off
+* the same path, so the two cannot disagree about where the id sits.
+*/
+var apiRoutes_default = defineApiRoutes({
+	catalog: {
+		method: "GET",
+		path: MCP_REPOSITORY_API_PATH,
+		query: [MCP_REPOSITORY_ID_QUERY],
+		response: apiResponse()
+	},
+	discover: {
+		method: "POST",
+		path: MCP_DISCOVERY_API_PATH,
+		response: apiResponse()
+	},
+	authorize: {
+		method: "POST",
+		path: MCP_AUTHORIZATION_API_PATH,
+		response: apiResponse()
+	},
+	readAuthorization: {
+		method: "GET",
+		path: AUTHORIZATION_FLOW_PATH,
+		query: [MCP_REPOSITORY_ID_QUERY],
+		response: apiResponse()
+	},
+	/** The same path as `readAuthorization`; the method is the whole of the difference. */
+	cancelAuthorization: {
+		method: "DELETE",
+		path: AUTHORIZATION_FLOW_PATH,
+		query: [MCP_REPOSITORY_ID_QUERY],
+		response: apiResponse()
+	},
+	/** Session scope: one available tool's registered name, description and schema. */
+	sessionTool: {
+		method: "GET",
+		path: MCP_SESSION_TOOL_API_PATH,
+		query: [MCP_SESSION_TOOL_SERVER_QUERY, MCP_SESSION_TOOL_NAME_QUERY],
+		response: apiResponse()
+	}
+});
+const mcp = createApiClient(apiRoutes_default, {
+	scopes: [
+		"global",
+		"workspace",
+		"session"
+	],
+	basePath: "mcp",
+	transport: (input, init) => sealedTransport.fetch(input, init),
+	sessionAddress: sessionApiAddress
+});
+const mcpSession = createApiClient(apiRoutes_default, {
+	scopes: ["session"],
+	basePath: "mcp-session",
+	transport: (input, init) => sealedTransport.fetch(input, init),
+	sessionAddress: sessionApiAddress
+});
+//#endregion
+//#region src/extensions/workspaces/(frontend)/repository-settings-panel/_lib/mcpSettingsApi.ts
+/**
+* The panel's half of this package's repository API.
+*
+* The generated client owns every URL, addressed at the workspace scope the
+* repository names, so nothing here spells a mount. The workspace prefix, the
+* plugins segment and the base path used to be concatenated at the top of this
+* file, the only copy of that shape outside the host, and it agreed with the
+* route by inspection alone.
+*
+* The transport stays injected, which is the one way this package differs from
+* its siblings. Every write here is step-up gated: the panel passes the
+* elevated request for discovery, authorization and cancellation and the plain
+* one for reads, and that choice belongs to the caller. So the client is asked
+* for the URL and the method, and the caller's own request issues them.
+*/
+const JSON_HEADERS = { "content-type": "application/json" };
+function isRecord$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+async function resultOf(response, fallback) {
+	let body;
+	try {
+		body = await response.json();
+	} catch {
+		body = void 0;
+	}
+	if (!response.ok) return { error: isRecord$1(body) && typeof body.error === "string" ? body.error : fallback };
+	return { value: body };
+}
+async function readMcpCatalog(request, repositoryId) {
+	const route = mcp.workspace(repositoryId).catalog;
+	return await resultOf(await request(route.url({ query: { [MCP_REPOSITORY_ID_QUERY]: repositoryId } })), "The synced MCP catalog could not be read.");
+}
+async function discoverMcpCatalog(requestWithStepUp, repositoryId) {
+	const route = mcp.workspace(repositoryId).discover;
+	return await resultOf(await requestWithStepUp(route.url(), {
+		method: route.spec.method,
+		headers: JSON_HEADERS,
+		body: JSON.stringify({ repositoryId })
+	}), "MCP discovery could not be completed.");
+}
+async function startMcpAuthorization(requestWithStepUp, repositoryId, serverName) {
+	const route = mcp.workspace(repositoryId).authorize;
+	return await resultOf(await requestWithStepUp(route.url(), {
+		method: route.spec.method,
+		headers: JSON_HEADERS,
+		body: JSON.stringify({
+			repositoryId,
+			serverName
+		})
+	}), "MCP authorization could not be started.");
+}
+async function readMcpAuthorization(request, repositoryId, flowId) {
+	const route = mcp.workspace(repositoryId).readAuthorization;
+	return await resultOf(await request(route.url({
+		params: { [MCP_FLOW_ID_PARAM]: flowId },
+		query: { [MCP_REPOSITORY_ID_QUERY]: repositoryId }
+	})), "The authorization state could not be read.");
+}
+async function cancelMcpAuthorization(requestWithStepUp, repositoryId, flowId) {
+	const route = mcp.workspace(repositoryId).cancelAuthorization;
+	return await resultOf(await requestWithStepUp(route.url({
+		params: { [MCP_FLOW_ID_PARAM]: flowId },
+		query: { [MCP_REPOSITORY_ID_QUERY]: repositoryId }
+	}), { method: route.spec.method }), "The authorization flow could not be cancelled.");
+}
+//#endregion
+//#region src/extensions/workspaces/(frontend)/repository-settings-panel/_lib/mcpSettingsStore.ts
+const mcpSettings = new Store({
+	repositoryId: void 0,
+	catalog: void 0,
+	authorization: void 0,
+	busy: void 0,
+	error: void 0
+});
+function selectRepository(repositoryId) {
+	if (mcpSettings.state.repositoryId === repositoryId) return;
+	mcpSettings.setState(() => ({
+		repositoryId,
+		catalog: void 0,
+		authorization: void 0,
+		busy: void 0,
+		error: void 0
+	}));
+}
+function applyFor(repositoryId, update) {
+	if (mcpSettings.state.repositoryId !== repositoryId) return;
+	mcpSettings.setState(update);
+}
+async function loadMcpSettings(request, repositoryId) {
+	selectRepository(repositoryId);
+	mcpSettings.setState((current) => ({
+		...current,
+		busy: "loading",
+		error: void 0
+	}));
+	try {
+		const result = await readMcpCatalog(request, repositoryId);
+		applyFor(repositoryId, (current) => "error" in result ? {
+			...current,
+			busy: void 0,
+			error: result.error
+		} : {
+			...current,
+			busy: void 0,
+			catalog: result.value,
+			error: void 0
+		});
+	} catch {
+		applyFor(repositoryId, (current) => ({
+			...current,
+			busy: void 0,
+			error: "The cockpit hub is unreachable."
+		}));
+	}
+}
+async function discoverMcpSettings(requestWithStepUp, repositoryId) {
+	selectRepository(repositoryId);
+	mcpSettings.setState((current) => ({
+		...current,
+		busy: "discovering",
+		error: void 0
+	}));
+	try {
+		const result = await discoverMcpCatalog(requestWithStepUp, repositoryId);
+		applyFor(repositoryId, (current) => "error" in result ? {
+			...current,
+			busy: void 0,
+			error: result.error
+		} : {
+			...current,
+			busy: void 0,
+			catalog: result.value,
+			error: void 0
+		});
+	} catch {
+		applyFor(repositoryId, (current) => ({
+			...current,
+			busy: void 0,
+			error: "The cockpit hub is unreachable."
+		}));
+	}
+}
+async function authorizeMcpServer(requestWithStepUp, repositoryId, serverName) {
+	selectRepository(repositoryId);
+	mcpSettings.setState((current) => ({
+		...current,
+		busy: "authorizing",
+		error: void 0
+	}));
+	try {
+		const result = await startMcpAuthorization(requestWithStepUp, repositoryId, serverName);
+		applyFor(repositoryId, (current) => "error" in result ? {
+			...current,
+			busy: void 0,
+			error: result.error
+		} : {
+			...current,
+			busy: void 0,
+			authorization: result.value,
+			error: void 0
+		});
+	} catch {
+		applyFor(repositoryId, (current) => ({
+			...current,
+			busy: void 0,
+			error: "The cockpit hub is unreachable."
+		}));
+	}
+}
+function followMcpAuthorization(request, repositoryId, flowId, onCompleted) {
+	let stopped = false;
+	let timer;
+	const poll = async () => {
+		if (stopped) return;
+		try {
+			const result = await readMcpAuthorization(request, repositoryId, flowId);
+			if (stopped) return;
+			if ("error" in result) {
+				applyFor(repositoryId, (current) => ({
+					...current,
+					error: result.error
+				}));
+				return;
+			}
+			applyFor(repositoryId, (current) => ({
+				...current,
+				authorization: result.value,
+				error: void 0
+			}));
+			if (result.value.status === "completed") {
+				onCompleted();
+				return;
+			}
+			if ([
+				"failed",
+				"cancelled",
+				"expired"
+			].includes(result.value.status)) return;
+			timer = setTimeout(() => void poll(), 1e3);
+		} catch {
+			applyFor(repositoryId, (current) => ({
+				...current,
+				error: "The authorization status could not be refreshed."
+			}));
+		}
+	};
+	poll();
+	return () => {
+		stopped = true;
+		if (timer) clearTimeout(timer);
+	};
+}
+async function cancelMcpFlow(requestWithStepUp, repositoryId, flowId) {
+	mcpSettings.setState((current) => ({
+		...current,
+		busy: "cancelling",
+		error: void 0
+	}));
+	try {
+		const result = await cancelMcpAuthorization(requestWithStepUp, repositoryId, flowId);
+		applyFor(repositoryId, (current) => "error" in result ? {
+			...current,
+			busy: void 0,
+			error: result.error
+		} : {
+			...current,
+			busy: void 0,
+			authorization: result.value,
+			error: void 0
+		});
+	} catch {
+		applyFor(repositoryId, (current) => ({
+			...current,
+			busy: void 0,
+			error: "The cockpit hub is unreachable."
+		}));
+	}
+}
+//#endregion
+//#region src/extensions/workspaces/(frontend)/repository-settings-panel/_components/McpRepositorySettingsPanel.tsx
+const TERMINAL_AUTHORIZATION = /* @__PURE__ */ new Set([
+	"completed",
+	"failed",
+	"cancelled",
+	"expired"
+]);
+const SYNC_REASON = {
+	"never-synced": "this repository has never been synced",
+	"configuration-changed": "the configuration changed since the last sync",
+	"cockpit-bundle-missing": "the cockpit bundle is missing",
+	"package-apis-missing": "package APIs are missing"
+};
+const SERVER_STATE = {
+	"not-connected": "Not connected",
+	connecting: "Connecting",
+	connected: "Connected",
+	degraded: "Degraded",
+	"needs-auth": "Needs sign-in",
+	failed: "Failed",
+	closed: "Closed"
+};
+const AUTHORIZATION_STATUS = {
+	starting: "Starting sign-in.",
+	waiting: "Waiting for you to finish signing in.",
+	completed: "Signed in.",
+	failed: "Sign-in didn't finish.",
+	cancelled: "Sign-in was cancelled.",
+	expired: "Sign-in expired before it finished."
+};
+function syncReasons(reasons) {
+	return `${reasons.map((reason) => SYNC_REASON[reason] ?? reason).join(", ") || "the last sync is out of date"}. Run po sync, then refresh.`;
+}
+/** One server: its state and credential on the left, Authorize on the right, cached tools folded underneath. */
+function ServerRow({ server, busy, canAct, confirming, onAuthorize, onConfirm, onCancel }) {
+	const toolCount = server.tools.length;
+	return /* @__PURE__ */ jsx(SettingsRow, {
+		asChild: true,
+		className: "items-start",
+		children: /* @__PURE__ */ jsxs("li", {
+			"data-testid": `mcp-server-${server.name}`,
+			children: [
+				/* @__PURE__ */ jsxs(SettingsRowText, { children: [
+					/* @__PURE__ */ jsx(SettingsRowTitle, {
+						className: "font-mono first-letter:normal-case",
+						children: server.name
+					}),
+					/* @__PURE__ */ jsxs(SettingsRowDescription, { children: [
+						SERVER_STATE[server.state],
+						". ",
+						server.credentialPresent ? "Credential saved." : "No credential saved."
+					] }),
+					server.error === void 0 ? null : /* @__PURE__ */ jsx(SettingsRowDescription, {
+						className: "text-doom-red",
+						children: server.error
+					})
+				] }),
+				confirming ? null : /* @__PURE__ */ jsx(Button, {
+					variant: "outline",
+					size: "sm",
+					disabled: busy || !canAct,
+					onClick: onAuthorize,
+					children: "Authorize"
+				}),
+				confirming ? /* @__PURE__ */ jsxs("div", {
+					className: "flex basis-full flex-wrap items-center gap-x-4 gap-y-2 rounded-md bg-doom-bg px-4 py-3",
+					children: [/* @__PURE__ */ jsxs("span", {
+						className: "min-w-0 flex-1 text-base leading-relaxed text-doom-text",
+						children: [
+							"Start a short OAuth sign-in for ",
+							server.name,
+							"? A passkey may be required."
+						]
+					}), /* @__PURE__ */ jsxs(SettingsActions, { children: [/* @__PURE__ */ jsx(Button, {
+						variant: "primary",
+						size: "sm",
+						disabled: busy,
+						onClick: onConfirm,
+						children: "Continue"
+					}), /* @__PURE__ */ jsx(Button, {
+						variant: "ghost",
+						size: "sm",
+						onClick: onCancel,
+						children: "Cancel"
+					})] })]
+				}) : null,
+				/* @__PURE__ */ jsxs("details", {
+					className: "group basis-full",
+					children: [/* @__PURE__ */ jsxs("summary", {
+						className: "flex w-fit cursor-pointer list-none items-center gap-1 text-base font-medium text-doom-text hover:text-doom-hi [&::-webkit-details-marker]:hidden",
+						children: [
+							/* @__PURE__ */ jsx(ChevronRightIcon, {
+								"aria-hidden": true,
+								className: "size-3.5 transition-transform group-open:rotate-90"
+							}),
+							toolCount === 1 ? "1 tool" : `${String(toolCount)} tools`,
+							", ",
+							server.source
+						]
+					}), /* @__PURE__ */ jsx("ul", {
+						className: "mt-3 flex flex-col gap-1.5 border-l border-doom-border-soft pl-4",
+						children: toolCount === 0 ? /* @__PURE__ */ jsx("li", {
+							className: "text-sm text-doom-dim",
+							children: "Run discovery to see what this server offers."
+						}) : server.tools.map((tool) => /* @__PURE__ */ jsxs("li", {
+							className: "flex min-w-0 items-baseline gap-3 text-base",
+							children: [/* @__PURE__ */ jsx("code", {
+								title: tool.piName,
+								className: "min-w-0 shrink-0 truncate font-mono text-doom-hi",
+								children: tool.piName
+							}), /* @__PURE__ */ jsx("span", {
+								className: "min-w-0 truncate text-doom-dim",
+								children: tool.description ?? ""
+							})]
+						}, tool.piName))
+					})]
+				})
+			]
+		})
+	});
+}
+function McpRepositorySettingsPanel({ repository, request, requestWithStepUp }) {
+	const state = useStore(mcpSettings);
+	const [confirmDiscovery, setConfirmDiscovery] = useState(false);
+	const [confirmAuthorization, setConfirmAuthorization] = useState();
+	const repositoryId = repository?.id;
+	useEffect(() => {
+		setConfirmDiscovery(false);
+		setConfirmAuthorization(void 0);
+		if (repositoryId) loadMcpSettings(request, repositoryId);
+	}, [repositoryId, request]);
+	const authorization = state.repositoryId === repositoryId ? state.authorization : void 0;
+	const authorizationId = authorization?.id;
+	const authorizationStatus = authorization?.status;
+	useEffect(() => {
+		if (!repositoryId || authorizationId === void 0) return;
+		if (authorizationStatus !== void 0 && TERMINAL_AUTHORIZATION.has(authorizationStatus)) return;
+		return followMcpAuthorization(request, repositoryId, authorizationId, () => {
+			loadMcpSettings(request, repositoryId);
+		});
+	}, [
+		authorizationId,
+		authorizationStatus,
+		repositoryId,
+		request
+	]);
+	if (!repository) return /* @__PURE__ */ jsx(SettingsCard, {
+		"data-testid": "mcp-repository-settings",
+		children: /* @__PURE__ */ jsx(SettingsRow, { children: /* @__PURE__ */ jsxs(SettingsRowText, { children: [/* @__PURE__ */ jsx(SettingsRowTitle, { children: "No repository picked" }), /* @__PURE__ */ jsx(SettingsRowDescription, { children: "Pick a repository above to see its MCP servers." })] }) })
+	});
+	const catalog = state.repositoryId === repository.id ? state.catalog : void 0;
+	const busy = state.repositoryId === repository.id ? state.busy : void 0;
+	const error = state.repositoryId === repository.id ? state.error : void 0;
+	const fresh = catalog?.sync.fresh === true;
+	const servers = catalog?.servers ?? [];
+	const dropped = catalog?.droppedServers ?? [];
+	return /* @__PURE__ */ jsxs("div", {
+		className: "flex min-w-0 flex-col gap-10",
+		"data-testid": "mcp-repository-settings",
+		children: [
+			/* @__PURE__ */ jsxs(SettingsSection, { children: [/* @__PURE__ */ jsx(SettingsSectionHeader, { children: /* @__PURE__ */ jsx(SettingsSectionTitle, { children: "Catalog" }) }), /* @__PURE__ */ jsxs(SettingsCard, { children: [
+				/* @__PURE__ */ jsxs(SettingsRow, { children: [/* @__PURE__ */ jsxs(SettingsRowText, { children: [/* @__PURE__ */ jsx(SettingsRowTitle, { children: fresh ? "Up to date" : catalog ? "Needs a sync" : "Reading the catalog" }), /* @__PURE__ */ jsx(SettingsRowDescription, { children: fresh ? "Po reads the cached catalog on this machine. Discovery contacts each configured server." : catalog ? syncReasons(catalog.sync.reasons) : "Reading what the last sync recorded." })] }), /* @__PURE__ */ jsxs(SettingsActions, { children: [/* @__PURE__ */ jsx(Button, {
+					variant: "outline",
+					size: "sm",
+					loading: busy === "loading",
+					disabled: busy !== void 0,
+					onClick: () => void loadMcpSettings(request, repository.id),
+					children: "Refresh"
+				}), /* @__PURE__ */ jsx(Button, {
+					variant: "outline",
+					size: "sm",
+					loading: busy === "discovering",
+					disabled: busy !== void 0 || !fresh || confirmDiscovery,
+					onClick: () => setConfirmDiscovery(true),
+					children: "Discover servers"
+				})] })] }),
+				confirmDiscovery ? /* @__PURE__ */ jsxs(SettingsRow, { children: [/* @__PURE__ */ jsxs(SettingsRowText, { children: [/* @__PURE__ */ jsx(SettingsRowTitle, { children: "Discover servers now?" }), /* @__PURE__ */ jsx(SettingsRowDescription, { children: "Discovery starts the configured processes and contacts remote MCP servers." })] }), /* @__PURE__ */ jsxs(SettingsActions, { children: [/* @__PURE__ */ jsx(Button, {
+					variant: "primary",
+					size: "sm",
+					disabled: busy !== void 0,
+					onClick: () => {
+						setConfirmDiscovery(false);
+						discoverMcpSettings(requestWithStepUp, repository.id);
+					},
+					children: "Discover"
+				}), /* @__PURE__ */ jsx(Button, {
+					variant: "ghost",
+					size: "sm",
+					onClick: () => setConfirmDiscovery(false),
+					children: "Cancel"
+				})] })] }) : null,
+				error === void 0 ? null : /* @__PURE__ */ jsxs(SettingsRow, {
+					role: "alert",
+					children: [/* @__PURE__ */ jsxs(SettingsRowText, { children: [/* @__PURE__ */ jsx(SettingsRowTitle, { children: "Po couldn't finish that just now" }), /* @__PURE__ */ jsx(SettingsRowDescription, { children: error })] }), /* @__PURE__ */ jsx(Button, {
+						variant: "outline",
+						size: "sm",
+						disabled: busy !== void 0,
+						onClick: () => void loadMcpSettings(request, repository.id),
+						children: "Try again"
+					})]
+				})
+			] })] }),
+			authorization ? /* @__PURE__ */ jsxs(SettingsSection, { children: [/* @__PURE__ */ jsx(SettingsSectionHeader, { children: /* @__PURE__ */ jsx(SettingsSectionTitle, { children: "Sign-in" }) }), /* @__PURE__ */ jsx(SettingsCard, { children: /* @__PURE__ */ jsxs(SettingsRow, { children: [/* @__PURE__ */ jsxs(SettingsRowText, { children: [
+				/* @__PURE__ */ jsx(SettingsRowTitle, {
+					className: "font-mono first-letter:normal-case",
+					children: authorization.serverName
+				}),
+				/* @__PURE__ */ jsx(SettingsRowDescription, { children: AUTHORIZATION_STATUS[authorization.status] }),
+				authorization.error ? /* @__PURE__ */ jsx(SettingsRowDescription, {
+					className: "text-doom-red",
+					children: authorization.error
+				}) : null
+			] }), /* @__PURE__ */ jsxs(SettingsActions, { children: [authorization.authorizationUrl ? /* @__PURE__ */ jsx(Button, {
+				variant: "primary",
+				size: "sm",
+				asChild: true,
+				children: /* @__PURE__ */ jsxs("a", {
+					href: authorization.authorizationUrl,
+					target: "_blank",
+					rel: "noreferrer noopener",
+					children: ["Open sign-in page", /* @__PURE__ */ jsx(ExternalLinkIcon, {
+						"aria-hidden": true,
+						className: "size-3.5"
+					})]
+				})
+			}) : null, TERMINAL_AUTHORIZATION.has(authorization.status) ? null : /* @__PURE__ */ jsx(Button, {
+				variant: "ghost",
+				size: "sm",
+				loading: busy === "cancelling",
+				disabled: busy !== void 0,
+				onClick: () => void cancelMcpFlow(requestWithStepUp, repository.id, authorization.id),
+				children: "Cancel"
+			})] })] }) })] }) : null,
+			/* @__PURE__ */ jsxs(SettingsSection, { children: [
+				/* @__PURE__ */ jsxs(SettingsSectionHeader, { children: [/* @__PURE__ */ jsx(SettingsSectionTitle, { children: "Servers" }), servers.length === 0 ? null : /* @__PURE__ */ jsx("span", {
+					className: "text-sm text-doom-dim",
+					children: servers.length === 1 ? "1 server" : `${String(servers.length)} servers`
+				})] }),
+				/* @__PURE__ */ jsx(SettingsCard, {
+					asChild: true,
+					children: /* @__PURE__ */ jsx("ul", { children: servers.length === 0 ? /* @__PURE__ */ jsx(SettingsRow, {
+						asChild: true,
+						children: /* @__PURE__ */ jsx("li", { children: /* @__PURE__ */ jsxs(SettingsRowText, { children: [/* @__PURE__ */ jsx(SettingsRowTitle, { children: busy === "loading" ? "Reading the catalog" : "No servers yet" }), /* @__PURE__ */ jsx(SettingsRowDescription, { children: busy === "loading" ? "This takes a moment." : "None are enabled in this repository's last sync." })] }) })
+					}) : servers.map((server) => /* @__PURE__ */ jsx(ServerRow, {
+						server,
+						busy: busy !== void 0,
+						canAct: fresh,
+						confirming: confirmAuthorization === server.name,
+						onAuthorize: () => setConfirmAuthorization(server.name),
+						onConfirm: () => {
+							setConfirmAuthorization(void 0);
+							authorizeMcpServer(requestWithStepUp, repository.id, server.name);
+						},
+						onCancel: () => setConfirmAuthorization(void 0)
+					}, server.name)) })
+				}),
+				dropped.length === 0 ? null : /* @__PURE__ */ jsx(SettingsNote, { children: `Left out by policy: ${dropped.join(", ")}.` }),
+				catalog?.diagnostics.map((diagnostic) => /* @__PURE__ */ jsx(SettingsNote, {
+					className: "text-doom-red",
+					children: diagnostic
+				}, diagnostic))
+			] })
+		]
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/(frontend)/repository-settings-panel/mcp.web.tsx
+var mcp_web_default$1 = defineRepositorySettingsPanel({
+	label: "MCP servers",
+	detail: "The MCP servers this repository's sessions can use, what each one offers, and where to sign in.",
+	order: 100,
+	component: McpRepositorySettingsPanel
+});
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/fill/_lib/mcpSessionToolApi.ts
+/** One available session tool: its registered name, description, schema and token estimate. */
+async function fetchSessionTool(sessionId, server, tool) {
+	const result = await mcpSession.session(sessionId).sessionTool({ query: {
+		[MCP_SESSION_TOOL_SERVER_QUERY]: server,
+		[MCP_SESSION_TOOL_NAME_QUERY]: tool
+	} });
+	if (!result.ok) {
+		if (result.status === 0) return {
+			ok: false,
+			error: "The session is unreachable."
+		};
+		return {
+			ok: false,
+			error: result.error === "" ? `The session answered ${result.status}.` : result.error
+		};
+	}
+	return {
+		ok: true,
+		detail: result.data
+	};
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/fill/_components/McpToolDetailDialog.tsx
+function keyOf(target) {
+	return `${target.sessionId}\u0000${target.server}\u0000${target.tool}`;
+}
+/** One MCP declaration's description, complete input schema and estimated context cost. */
+function McpToolDetailDialog({ target, onClose }) {
+	const [loaded, setLoaded] = useState(null);
+	useEffect(() => {
+		if (target === null) return;
+		let live = true;
+		const key = keyOf(target);
+		fetchSessionTool(target.sessionId, target.server, target.tool).then((result) => {
+			if (!live) return;
+			setLoaded(result.ok ? {
+				key,
+				detail: result.detail
+			} : {
+				key,
+				error: result.error
+			});
+		});
+		return () => {
+			live = false;
+		};
+	}, [target]);
+	const current = target !== null && loaded?.key === keyOf(target) ? loaded : null;
+	const detail = current?.detail;
+	return /* @__PURE__ */ jsx(Dialog, {
+		open: target !== null,
+		onOpenChange: (open) => {
+			if (!open) onClose();
+		},
+		children: /* @__PURE__ */ jsxs(DialogContent, {
+			"data-testid": "mcp-tool-detail-dialog",
+			children: [/* @__PURE__ */ jsx(DialogHeader, {
+				className: "items-start px-4 py-4 sm:px-5",
+				children: /* @__PURE__ */ jsxs("div", {
+					className: "flex min-w-0 flex-1 flex-col gap-1.5",
+					children: [/* @__PURE__ */ jsx(DialogTitle, {
+						className: "break-words leading-snug",
+						children: detail?.piName ?? target?.piName ?? (target === null ? "" : `${target.server} · ${target.tool}`)
+					}), /* @__PURE__ */ jsxs(DialogDescription, { children: [
+						target === null ? "" : `${target.server} / ${target.tool}. `,
+						target?.inContext === false ? "Not in the model context. " : "",
+						detail === void 0 ? "Description and complete input schema." : `Estimated schema cost: ~${detail.tokens.toLocaleString()} tokens.`
+					] })]
+				})
+			}), /* @__PURE__ */ jsxs(DialogBody, {
+				className: "flex flex-col gap-3 px-4 py-4 sm:px-5 sm:py-5",
+				children: [
+					current === null ? /* @__PURE__ */ jsx("output", {
+						className: "text-sm text-doom-dim",
+						children: "Loading the tool..."
+					}) : null,
+					current?.error === void 0 ? null : /* @__PURE__ */ jsx("output", {
+						className: "text-sm text-doom-dim",
+						children: current.error
+					}),
+					detail === void 0 ? null : /* @__PURE__ */ jsxs(Fragment, { children: [
+						/* @__PURE__ */ jsxs("section", {
+							className: "flex flex-col gap-1",
+							children: [/* @__PURE__ */ jsx("p", {
+								className: "text-sm font-semibold text-doom-dim",
+								children: "description"
+							}), /* @__PURE__ */ jsx("p", {
+								className: "whitespace-pre-wrap text-base text-doom-text",
+								children: detail.description ?? "No description."
+							})]
+						}),
+						detail.warnings?.length ? /* @__PURE__ */ jsx("section", {
+							"aria-label": "Tool warnings",
+							className: "flex flex-col gap-1 text-base text-doom-yellow",
+							children: detail.warnings.map((warning) => /* @__PURE__ */ jsxs("p", { children: [
+								warning.source,
+								" ",
+								warning.path,
+								": ",
+								warning.message
+							] }, `${warning.source}:${warning.path}:${warning.message}`))
+						}) : null,
+						/* @__PURE__ */ jsxs("section", {
+							className: "flex min-h-0 flex-col gap-1",
+							children: [/* @__PURE__ */ jsx("p", {
+								className: "text-sm font-semibold text-doom-dim",
+								children: "input schema"
+							}), /* @__PURE__ */ jsx("pre", {
+								"data-testid": "mcp-tool-detail-schema",
+								className: "max-h-96 overflow-auto rounded border border-doom-border-soft p-2 font-mono text-sm text-doom-text",
+								children: JSON.stringify(detail.inputSchema, null, 2)
+							})]
+						})
+					] })
+				]
+			})]
+		})
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/fill/_components/McpSessionAuthSection.tsx
+/** Requests authorization through Pi's command frame, never through a shell. */
+function requestMcpSessionAuthorization(sendSessionFrame, sessionId, serverName) {
+	sendSessionFrame(sessionId, {
+		type: "prompt",
+		message: `/mcp auth ${serverName}`
+	});
+}
+function tokenEstimate(value) {
+	return value === null ? "-" : `~${value.toLocaleString()}`;
+}
+/** Keep configured servers actionable even before they have discovered any tools. */
+function McpSessionAuthSection({ sessionId, statuses, sendSessionFrame, contextInventory = [] }) {
+	const servers = parseMcpSessionAuthStatus(statuses["doom-mcp-session-auth"]) ?? [];
+	const [target, setTarget] = useState(null);
+	const [copyFeedback, setCopyFeedback] = useState("");
+	const [popupBlocked, setPopupBlocked] = useState(false);
+	const [toolTarget, setToolTarget] = useState(null);
+	const pendingTab = useRef(null);
+	const selected = target?.sessionId === sessionId ? target : null;
+	const server = servers.find((item) => item.name === selected?.name);
+	const authorizationUrl = server?.authorizationUrl;
+	const closePendingTab = () => {
+		pendingTab.current?.close();
+		pendingTab.current = null;
+	};
+	useEffect(() => {
+		const tab = pendingTab.current;
+		if (!selected || !authorizationUrl || !tab || tab.closed) return;
+		tab.location.replace(authorizationUrl);
+		pendingTab.current = null;
+	}, [selected, authorizationUrl]);
+	useEffect(() => () => {
+		pendingTab.current?.close();
+		pendingTab.current = null;
+	}, [sessionId]);
+	const authorize = (name) => {
+		if (sessionId === null) return;
+		const current = servers.find((item) => item.name === name);
+		closePendingTab();
+		setTarget({
+			sessionId,
+			name
+		});
+		setCopyFeedback("");
+		const tab = window.open("about:blank", "_blank");
+		setPopupBlocked(tab === null);
+		if (tab) {
+			tab.opener = null;
+			if (current?.authorizationUrl) tab.location.replace(current.authorizationUrl);
+			else {
+				tab.document.title = "MCP authorization";
+				tab.document.body.textContent = "Preparing authorization. Return to Po for progress or manual sign-in.";
+				pendingTab.current = tab;
+			}
+		}
+		if (!current?.authorizationUrl && current?.state !== "connecting") requestMcpSessionAuthorization(sendSessionFrame, sessionId, name);
+	};
+	const copyLink = async () => {
+		if (!authorizationUrl) return;
+		try {
+			await navigator.clipboard.writeText(authorizationUrl);
+			setCopyFeedback("Link copied.");
+		} catch {
+			setCopyFeedback("Clipboard unavailable. Select the link above and copy it manually.");
+		}
+	};
+	return /* @__PURE__ */ jsxs(Fragment, { children: [
+		servers.length === 0 ? null : /* @__PURE__ */ jsxs("section", {
+			"data-testid": "context-mcp-auth",
+			className: "flex flex-col gap-2 border-b border-doom-border px-3 py-3",
+			children: [/* @__PURE__ */ jsxs("div", {
+				className: "flex flex-col gap-0.5",
+				children: [/* @__PURE__ */ jsx("p", {
+					className: "text-sm font-semibold text-doom-dim",
+					children: "MCP servers"
+				}), /* @__PURE__ */ jsx("p", {
+					className: "text-sm leading-relaxed text-doom-dim",
+					children: "Open sign-in in a new tab, or copy the link from the authorization dialog."
+				})]
+			}), /* @__PURE__ */ jsx("ul", {
+				"aria-label": "MCP servers",
+				className: "flex flex-col gap-2",
+				children: servers.map((item) => {
+					const tools = contextInventory.filter((inventoryItem) => inventoryItem.source === "mcp" && inventoryItem.owner === item.name);
+					const reachable = item.tools ?? [];
+					return /* @__PURE__ */ jsxs("li", {
+						className: "flex min-w-0 flex-col gap-1 px-1 py-0.5",
+						children: [/* @__PURE__ */ jsxs("div", {
+							className: "flex min-w-0 items-center gap-2",
+							children: [
+								/* @__PURE__ */ jsx("span", {
+									className: "min-w-0 flex-1 truncate text-base font-semibold text-doom-hi",
+									children: item.name
+								}),
+								/* @__PURE__ */ jsx("span", {
+									className: "text-sm font-semibold text-doom-dim",
+									children: item.state.replace(/-/g, " ")
+								}),
+								/* @__PURE__ */ jsx(Button, {
+									variant: "subtle",
+									size: "xs",
+									"data-testid": `context-mcp-auth-${item.name}`,
+									"aria-label": `${item.state === "connected" ? "Manage" : "Authorize"} ${item.name}`,
+									disabled: sessionId === null || item.state === "disabled",
+									onClick: () => {
+										if (item.state !== "connected") authorize(item.name);
+										else if (sessionId !== null) {
+											closePendingTab();
+											setCopyFeedback("");
+											setPopupBlocked(false);
+											setTarget({
+												sessionId,
+												name: item.name
+											});
+										}
+									},
+									className: "shrink-0 ",
+									children: item.state === "connected" ? "manage" : "authorize"
+								})
+							]
+						}), tools.length > 0 ? /* @__PURE__ */ jsx("ul", {
+							"aria-label": `${item.name} tools and skills`,
+							className: "flex flex-col",
+							children: tools.map((tool) => {
+								const identity = reachable.find((candidate) => candidate.piName === tool.name);
+								return /* @__PURE__ */ jsxs("li", {
+									"data-active": tool.active,
+									className: "flex min-w-0 items-center gap-2 py-px pl-3",
+									children: [
+										/* @__PURE__ */ jsx("abbr", {
+											title: tool.itemKind,
+											className: `w-3 shrink-0 text-2xs font-semibold no-underline ${tool.active ? "text-doom-violet" : "text-doom-dim"}`,
+											children: tool.itemKind === "skill" ? "S" : "T"
+										}),
+										tool.itemKind === "tool" ? /* @__PURE__ */ jsx(Button, {
+											variant: "ghost",
+											size: "card",
+											"aria-label": `Open schema for ${tool.name}`,
+											"data-testid": `context-mcp-tool-${tool.name}`,
+											disabled: sessionId === null || identity === void 0,
+											onClick: () => {
+												if (sessionId !== null && identity !== void 0) setToolTarget({
+													sessionId,
+													server: item.name,
+													tool: identity.name,
+													piName: identity.piName,
+													inContext: tool.active
+												});
+											},
+											className: `min-w-0 flex-1 truncate rounded-none py-0 text-left text-base ${tool.active ? "text-doom-hi" : "text-doom-dim"}`,
+											children: tool.name
+										}) : /* @__PURE__ */ jsx("span", {
+											className: "min-w-0 flex-1 truncate text-base text-doom-dim",
+											children: tool.name
+										}),
+										/* @__PURE__ */ jsx("span", {
+											className: `w-14 shrink-0 text-right text-sm ${tool.active ? "text-doom-text" : "text-doom-dim"}`,
+											children: tool.active ? tokenEstimate(tool.tokens) : `(${tokenEstimate(tool.tokens)})`
+										})
+									]
+								}, `${tool.itemKind}:${tool.name}`);
+							})
+						}) : reachable.length > 0 ? /* @__PURE__ */ jsxs("div", {
+							className: "flex flex-col",
+							children: [/* @__PURE__ */ jsx("p", {
+								className: "pl-3 text-sm text-doom-dim",
+								children: `${reachable.length} available ${reachable.length === 1 ? "tool" : "tools"}, not in context`
+							}), /* @__PURE__ */ jsx("ul", {
+								"aria-label": `${item.name} reachable tools`,
+								className: "flex flex-col",
+								children: reachable.map((tool) => /* @__PURE__ */ jsx("li", {
+									className: "flex min-w-0",
+									children: /* @__PURE__ */ jsxs(Button, {
+										variant: "ghost",
+										size: "card",
+										"data-testid": `context-mcp-reachable-${item.name}-${tool.name}`,
+										title: "open the tool's description and schema",
+										disabled: sessionId === null,
+										onClick: () => {
+											if (sessionId !== null) setToolTarget({
+												sessionId,
+												server: item.name,
+												tool: tool.name,
+												piName: tool.piName,
+												inContext: false
+											});
+										},
+										className: "min-w-0 flex-1 flex-row items-center gap-2 rounded-none py-px pr-0 pl-3",
+										children: [
+											/* @__PURE__ */ jsx("abbr", {
+												title: "tool",
+												className: "w-3 shrink-0 text-2xs font-semibold text-doom-violet no-underline",
+												children: "T"
+											}),
+											/* @__PURE__ */ jsx("span", {
+												className: "min-w-0 flex-1 truncate text-left text-base text-doom-text",
+												children: tool.piName ?? tool.name
+											}),
+											/* @__PURE__ */ jsx("span", {
+												title: "what the schema would cost if added to context directly",
+												className: "w-14 shrink-0 text-right text-sm text-doom-dim",
+												children: tool.tokens === void 0 ? "(-)" : `(~${tool.tokens.toLocaleString()})`
+											})
+										]
+									})
+								}, tool.name))
+							})]
+						}) : /* @__PURE__ */ jsx("p", {
+							className: "pl-3 text-sm text-doom-dim",
+							children: "no tools or skills reported"
+						})]
+					}, item.name);
+				})
+			})]
+		}),
+		/* @__PURE__ */ jsx(McpToolDetailDialog, {
+			target: toolTarget,
+			onClose: () => setToolTarget(null)
+		}),
+		/* @__PURE__ */ jsx(Dialog, {
+			open: selected !== null,
+			onOpenChange: (open) => {
+				if (!open) {
+					closePendingTab();
+					setTarget(null);
+				}
+			},
+			children: /* @__PURE__ */ jsxs(DialogContent, {
+				"data-testid": "mcp-authorization-dialog",
+				onInteractOutside: (event) => event.preventDefault(),
+				children: [
+					/* @__PURE__ */ jsx(DialogHeader, {
+						className: "items-start px-4 py-4 sm:px-5",
+						children: /* @__PURE__ */ jsxs("div", {
+							className: "flex min-w-0 flex-1 flex-col gap-1.5",
+							children: [/* @__PURE__ */ jsxs(DialogTitle, {
+								className: "break-words leading-snug",
+								children: [
+									server?.state === "connected" ? "Manage" : "Authorize",
+									" ",
+									selected?.name
+								]
+							}), /* @__PURE__ */ jsx(DialogDescription, {
+								className: "max-w-2xl",
+								children: server?.state === "connected" ? "Disconnect this session without deleting saved credentials, or reauthorize to sign in again." : "Complete sign-in in the provider's tab. You can also open or copy the link below."
+							})]
+						})
+					}),
+					/* @__PURE__ */ jsxs(DialogBody, {
+						className: "px-4 py-4 sm:px-5 sm:py-5",
+						children: [
+							/* @__PURE__ */ jsx("output", {
+								className: "text-sm text-doom-dim",
+								children: server?.state === "connected" ? "Authorization complete. This server is connected." : server?.state === "closed" ? "Disconnected from this session. Saved credentials were kept." : authorizationUrl ? "Waiting for you to complete authorization." : server?.state === "failed" ? "Connection failed. Retry authorization; details are in the session transcript." : server ? "Preparing the authorization link..." : "This server is no longer available in the session."
+							}),
+							popupBlocked ? /* @__PURE__ */ jsx("p", {
+								className: "text-sm text-doom-dim",
+								children: "The browser blocked the new tab. Open the link below when it is ready."
+							}) : null,
+							authorizationUrl ? /* @__PURE__ */ jsxs("div", {
+								className: "flex flex-col gap-2",
+								children: [
+									/* @__PURE__ */ jsx(Input, {
+										"aria-label": "OAuth authorization URL",
+										readOnly: true,
+										value: authorizationUrl,
+										onFocus: (event) => event.currentTarget.select()
+									}),
+									/* @__PURE__ */ jsx("a", {
+										href: authorizationUrl,
+										target: "_blank",
+										rel: "noopener noreferrer",
+										className: "text-base font-medium text-doom-blue underline underline-offset-2",
+										children: "open authorization page"
+									}),
+									/* @__PURE__ */ jsx(Button, {
+										variant: "outline",
+										size: "xs",
+										onClick: () => void copyLink(),
+										children: "copy link"
+									})
+								]
+							}) : null,
+							copyFeedback ? /* @__PURE__ */ jsx("output", {
+								className: "text-sm text-doom-dim",
+								children: copyFeedback
+							}) : null
+						]
+					}),
+					/* @__PURE__ */ jsxs(DialogFooter, {
+						className: "flex-wrap justify-end border-t border-doom-border-soft px-4 py-3 sm:px-5",
+						children: [
+							server?.state === "connected" && selected ? /* @__PURE__ */ jsx(Button, {
+								variant: "outline",
+								size: "md",
+								onClick: () => {
+									closePendingTab();
+									setCopyFeedback("");
+									setPopupBlocked(false);
+									sendSessionFrame(selected.sessionId, {
+										type: "prompt",
+										message: `/mcp disconnect ${selected.name}`
+									});
+								},
+								children: "disconnect"
+							}) : null,
+							(server?.state === "failed" || server?.state === "connected" || server?.state === "closed") && selected ? /* @__PURE__ */ jsx(Button, {
+								size: "md",
+								onClick: () => authorize(selected.name),
+								children: server.state === "failed" ? "retry authorization" : "reauthorize"
+							}) : null,
+							/* @__PURE__ */ jsx(Button, {
+								variant: "ghost",
+								size: "md",
+								onClick: () => {
+									closePendingTab();
+									setTarget(null);
+								},
+								children: "close"
+							})
+						]
+					})
+				]
+			})
+		})
+	] });
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/fill/McpAuth.context.web.tsx
+var McpAuth_context_web_default = defineFill({ component: McpSessionAuthSection });
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/tool/_lib/mcpAppRuntime.ts
+const mcpAppRuntime = defineSessionStore({ runtime: null });
+/** Session mount lifecycle owns the authenticated RPC capability and drops it on unload. */
+function startMcpAppRuntime(runtime) {
+	const mount = runtime.mount;
+	if (mount?.scope !== "session") throw new Error("MCP Apps require a session runtime mount");
+	mcpAppRuntime.update(mount.sessionId, () => ({ runtime }));
+	return () => {
+		if (mcpAppRuntime.select(mcpAppRuntime.store.state, mount.sessionId).runtime === runtime) mcpAppRuntime.drop(mount.sessionId);
+	};
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/lifecycle/start.web.ts
+var start_web_default = defineWebLifecycle(startMcpAppRuntime);
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/tool/_lib/mcpToolMatch.ts
+/**
+* Pure view logic for MCP tool cards. MCP tools are registered under `<server>_<tool>`,
+* so the plugin recognises a call by the server names the session publishes.
+*/
+/**
+* The footer status the session half publishes (src/constants/piMcp.ts
+* MCP_STATUS_KEY). Duplicated because the browser half may import only
+* src/types and src/constants; a test keeps the two literals equal.
+*/
+const MCP_STATUS_KEY = "doom-mcp";
+const SERVER_SEPARATOR = ",";
+const PI_NAME_SEPARATOR = "_";
+const MAX_ARGUMENTS = 3;
+/** Text lines kept in the collapsed result, before the card is expanded. */
+const COLLAPSED_RESULT_LINES = 12;
+/** The server names the session reports, in the order it listed them. */
+function mcpServers(statuses) {
+	const raw = statuses[MCP_STATUS_KEY];
+	if (raw === void 0) return [];
+	return raw.split(SERVER_SEPARATOR).map((name) => name.trim()).filter((name) => name.length > 0);
+}
+/**
+* Splits a Pi tool name into its MCP server and tool. The longest server
+* prefix wins so `github_enterprise_search` belongs to `github_enterprise`
+* when both it and `github` are configured.
+*/
+function matchMcpTool(toolName, statuses) {
+	let best = null;
+	for (const server of mcpServers(statuses)) {
+		const prefix = `${server}${PI_NAME_SEPARATOR}`;
+		if (!toolName.startsWith(prefix) || toolName.length === prefix.length) continue;
+		if (best === null || server.length > best.server.length) best = {
+			server,
+			tool: toolName.slice(prefix.length)
+		};
+	}
+	return best;
+}
+/** The identity the result details carry, which the tool wrote itself and is exact. */
+function mcpIdentityFromDetails(details) {
+	if (typeof details !== "object" || details === null) return null;
+	const record = details;
+	if (typeof record.server !== "string" || typeof record.tool !== "string") return null;
+	return {
+		server: record.server,
+		tool: record.tool
+	};
+}
+function argumentValue(value) {
+	if (typeof value === "string") return value;
+	if (typeof value === "number" || typeof value === "boolean") return String(value);
+	if (value === null) return "null";
+	if (Array.isArray(value)) return `[${value.length}]`;
+	return "{…}";
+}
+/** The first few arguments as `key=value`, with a count for the rest. */
+function mcpArgumentSummary(params) {
+	const entries = Object.entries(params);
+	const shown = entries.slice(0, MAX_ARGUMENTS).map(([key, value]) => `${key}=${argumentValue(value)}`);
+	if (entries.length > shown.length) shown.push(`+${entries.length - shown.length}`);
+	return shown.join(" · ");
+}
+/** The result body as renderMcpResult lays it out: text lines, then one status line. */
+function mcpResultView(input) {
+	const all = input.output.split("\n");
+	while (all.length > 0 && all.at(-1)?.trim() === "") all.pop();
+	const lines = input.expanded ? all : all.slice(0, COLLAPSED_RESULT_LINES);
+	if (input.isPartial) return {
+		lines,
+		status: {
+			glyph: "◐",
+			tone: "running",
+			text: "running"
+		}
+	};
+	if (input.isError) return {
+		lines,
+		status: {
+			glyph: "✗",
+			tone: "error",
+			text: "failed"
+		}
+	};
+	if (!input.expanded && all.length > lines.length) return {
+		lines,
+		status: {
+			glyph: "…",
+			tone: "hint",
+			text: `${all.length - lines.length} more line(s)`
+		}
+	};
+	if (lines.length === 0) return {
+		lines,
+		status: {
+			glyph: "✓",
+			tone: "ok",
+			text: "done"
+		}
+	};
+	return {
+		lines,
+		status: null
+	};
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** One block of the result's details, kept only when its required fields are the strings the adapter wrote. */
+function mcpResultBlock(entry) {
+	if (!isRecord(entry)) return null;
+	const text = (key) => typeof entry[key] === "string" ? entry[key] : void 0;
+	switch (entry.type) {
+		case "audio": {
+			const data = text("data");
+			const mimeType = text("mimeType");
+			return data !== void 0 && mimeType !== void 0 ? {
+				type: "audio",
+				data,
+				mimeType
+			} : null;
+		}
+		case "resource_link": {
+			const uri = text("uri");
+			const name = text("name");
+			if (uri === void 0 || name === void 0) return null;
+			const title = text("title");
+			const description = text("description");
+			const mimeType = text("mimeType");
+			return {
+				type: "resource_link",
+				uri,
+				name,
+				...title === void 0 ? {} : { title },
+				...description === void 0 ? {} : { description },
+				...mimeType === void 0 ? {} : { mimeType }
+			};
+		}
+		case "resource": {
+			const uri = text("uri");
+			if (uri === void 0) return null;
+			const mimeType = text("mimeType");
+			const content = text("text");
+			const blob = text("blob");
+			return {
+				type: "resource",
+				uri,
+				...mimeType === void 0 ? {} : { mimeType },
+				...content === void 0 ? {} : { text: content },
+				...blob === void 0 ? {} : { blob }
+			};
+		}
+		case "structured": return isRecord(entry.value) ? {
+			type: "structured",
+			value: entry.value
+		} : null;
+		default: return null;
+	}
+}
+/** The blocks beyond text the adapter attached to the result's details; malformed entries are dropped. */
+function mcpResultBlocks(details) {
+	if (!isRecord(details) || !Array.isArray(details.blocks)) return [];
+	return details.blocks.flatMap((entry) => {
+		const block = mcpResultBlock(entry);
+		return block === null ? [] : [block];
+	});
+}
+/** The image blocks of a result's content, which Pi carries beside the text. */
+function mcpImageBlocks(content) {
+	return content.flatMap((block) => {
+		if (!isRecord(block) || block.type !== "image") return [];
+		return typeof block.data === "string" && typeof block.mimeType === "string" ? [{
+			data: block.data,
+			mimeType: block.mimeType
+		}] : [];
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/tool/_lib/mcpAppSandbox.ts
+const MAX_CSP_DOMAINS = 64;
+const MAX_DOMAIN_LENGTH = 2048;
+function record(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+/** Accept origins only, never CSP tokens, URL paths, credentials, or the host origin. */
+function origins(value, hostOrigin) {
+	if (value === void 0) return [];
+	if (!Array.isArray(value) || value.length > MAX_CSP_DOMAINS) throw new Error("Invalid widget CSP domains");
+	return value.map((domain) => {
+		if (typeof domain !== "string" || domain.length > MAX_DOMAIN_LENGTH) throw new Error("Invalid widget CSP domain");
+		const parsed = new URL(domain);
+		const wildcard = parsed.hostname.startsWith("*.");
+		const host = new URL(hostOrigin);
+		const includesHost = parsed.hostname === host.hostname || wildcard && host.hostname.endsWith(parsed.hostname.slice(1));
+		if (!["https:", "wss:"].includes(parsed.protocol) || parsed.username || parsed.password || parsed.pathname !== "/" || parsed.search || parsed.hash || includesHost || parsed.hostname === "localhost" || /^(127\.|0\.|\[?::1\]?)/u.test(parsed.hostname) || /[\s;'"<>]/u.test(domain)) throw new Error("Unsafe widget CSP domain");
+		return parsed.origin;
+	});
+}
+function mcpAppCsp(metadata, hostOrigin) {
+	const meta = record(metadata);
+	const ui = record(meta?.ui);
+	if (meta?.ui !== void 0 && ui === void 0) throw new Error("Invalid widget UI metadata");
+	const standard = ui !== void 0 && "csp" in ui;
+	const raw = standard ? ui.csp : meta?.["openai/widgetCSP"];
+	const csp = raw === void 0 ? {} : record(raw);
+	if (csp === void 0) throw new Error("Invalid widget CSP");
+	const resource = origins(csp[standard ? "resourceDomains" : "resource_domains"], hostOrigin).join(" ");
+	const connect = origins(csp[standard ? "connectDomains" : "connect_domains"], hostOrigin).join(" ");
+	return [
+		"default-src 'none'",
+		`script-src 'unsafe-inline' ${resource}`,
+		`style-src 'unsafe-inline' ${resource}`,
+		`img-src data: blob: ${resource}`,
+		`font-src data: ${resource}`,
+		`media-src blob: ${resource}`,
+		`connect-src ${connect || "'none'"}`,
+		"frame-src 'none'",
+		"child-src 'none'",
+		"worker-src 'none'",
+		"object-src 'none'",
+		"base-uri 'none'",
+		"form-action 'none'"
+	].join("; ");
+}
+function escapeAttribute(value) {
+	return value.replaceAll("&", "&amp;").replaceAll("\"", "&quot;").replaceAll("<", "&lt;");
+}
+/** The theme a host message carries, from either bridge. Serialized into frames, so it stays self-contained. */
+function mcpAppHostTheme(data) {
+	const message = data;
+	const theme = message?.channel === "po.openai" ? message.globals?.theme : message?.jsonrpc === "2.0" && message.method === "ui/notifications/host-context-changed" ? message.params?.theme : void 0;
+	return theme === "light" || theme === "dark" ? theme : void 0;
+}
+/**
+* Bundled trusted code, runs inside the App document. Waits for the App's own
+* <html> attributes, which the parser merges only where the root has none, so
+* an App-chosen class or data-theme wins until the host theme changes.
+*/
+function widgetThemeBootstrap(hostTheme, initial) {
+	const root = document.documentElement;
+	let theme = initial;
+	let changed = false;
+	const settle = () => {
+		if (!root.classList.contains("light") && !root.classList.contains("dark")) root.classList.add(theme);
+		if (root.getAttribute("data-theme") === null) root.setAttribute("data-theme", theme);
+	};
+	const follow = () => {
+		root.classList.remove("light", "dark");
+		root.classList.add(theme);
+		const current = root.getAttribute("data-theme");
+		if (current === null || current === "light" || current === "dark") root.setAttribute("data-theme", theme);
+		root.style.colorScheme = theme;
+	};
+	window.addEventListener("message", (event) => {
+		const next = event.source === parent ? hostTheme(event.data) : void 0;
+		if (next === void 0) return;
+		theme = next;
+		changed = true;
+		if (document.readyState !== "loading") follow();
+	});
+	if (document.readyState !== "loading") settle();
+	else document.addEventListener("readystatechange", () => {
+		if (document.readyState === "interactive") {
+			if (changed) follow();
+			else settle();
+		}
+	});
+}
+/** Bundled trusted code, runs in an opaque relay separate from the untrusted App. */
+function relayBootstrap(hostTheme) {
+	let configured = false;
+	const follow = (data) => {
+		const theme = hostTheme(data);
+		if (theme !== void 0) document.documentElement.style.colorScheme = theme;
+	};
+	window.addEventListener("message", (event) => {
+		if (event.source !== parent || configured || event.ports.length !== 1) return;
+		const config = event.data;
+		if (typeof config?.html !== "string" || typeof config.policy !== "string") return;
+		configured = true;
+		const port = event.ports[0];
+		const inner = document.createElement("iframe");
+		inner.title = "MCP App content";
+		inner.setAttribute("sandbox", "allow-scripts");
+		inner.setAttribute("csp", config.policy);
+		inner.setAttribute("allow", "camera 'none'; microphone 'none'; geolocation 'none'; clipboard-read 'none'; clipboard-write 'none'");
+		inner.style.cssText = "width:100%;height:100%;border:0;display:block";
+		let loaded = false;
+		let revoked = false;
+		const revoke = () => {
+			if (revoked) return;
+			revoked = true;
+			inner.remove();
+			port.postMessage({ type: "revoked" });
+			port.close();
+		};
+		inner.addEventListener("load", () => {
+			if (loaded) revoke();
+			loaded = true;
+		});
+		let messageWindow = Date.now();
+		let messageCount = 0;
+		window.addEventListener("message", (childEvent) => {
+			if (revoked || childEvent.source !== inner.contentWindow) return;
+			try {
+				const encoded = JSON.stringify(childEvent.data);
+				if (encoded === void 0 || new TextEncoder().encode(encoded).byteLength > 65536) return revoke();
+				const now = Date.now();
+				if (now - messageWindow >= 1e3) {
+					messageWindow = now;
+					messageCount = 0;
+				}
+				if (++messageCount > 128) return revoke();
+			} catch {
+				return revoke();
+			}
+			const openai = childEvent.data?.channel === "po.openai";
+			if (config.protocol === "mcp" && !openai) parent.postMessage(childEvent.data, "*");
+			else port.postMessage({
+				type: "legacy",
+				data: childEvent.data
+			});
+		});
+		port.onmessage = (hostEvent) => {
+			if (revoked) return;
+			follow(hostEvent.data);
+			inner.contentWindow?.postMessage(hostEvent.data, "*");
+		};
+		window.addEventListener("message", (hostEvent) => {
+			if (!revoked && hostEvent.source === parent && config.protocol === "mcp") {
+				const data = hostEvent.data;
+				if (data?.jsonrpc !== "2.0") return;
+				follow(data);
+				inner.contentWindow?.postMessage(data, "*");
+			}
+		});
+		port.start();
+		inner.srcdoc = config.html;
+		document.body.append(inner);
+		port.postMessage({ type: "ready" });
+	});
+}
+function mcpAppRelayHtml(policy, theme = "light") {
+	return `<!doctype html><html style="color-scheme:${theme}"><meta http-equiv="Content-Security-Policy" content="${escapeAttribute(policy.replace("frame-src 'none'", "frame-src about:").replace("child-src 'none'", "child-src about:"))}"><style>html,body{margin:0;height:100%;overflow:hidden}</style><script>(${relayBootstrap.toString()})(${mcpAppHostTheme.toString()})<\/script>`;
+}
+/** No host <html> is injected, so the App's own root attributes survive parsing. */
+function mcpAppDocument(html, policy, bootstrap = "", theme = "light") {
+	const themeScript = `<script>(${widgetThemeBootstrap.toString()})(${mcpAppHostTheme.toString()}, ${JSON.stringify(theme)})<\/script>`;
+	return `<!doctype html><meta http-equiv="Content-Security-Policy" content="${escapeAttribute(policy)}"><meta name="color-scheme" content="${theme}">${themeScript}${bootstrap}${html}`;
+}
+/** Required CSP enforcement must survive self-navigation, not only initial srcdoc. */
+function supportsMcpAppSandbox() {
+	return typeof HTMLIFrameElement !== "undefined" && "csp" in HTMLIFrameElement.prototype;
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/tool/_lib/mcpOpenAiBootstrap.ts
+function bootstrap(initial) {
+	const channel = "po.openai";
+	const requestTimeout = 6e4;
+	const pending = /* @__PURE__ */ new Map();
+	let sequence = 0;
+	let globals = initial;
+	const update = (patch) => {
+		globals = {
+			...globals,
+			...patch
+		};
+		window.dispatchEvent(new CustomEvent("openai:set_globals", { detail: { globals: patch } }));
+	};
+	const request = (method, input) => {
+		if (pending.size >= 32) return Promise.reject(/* @__PURE__ */ new Error("Too many pending widget requests"));
+		const id = ++sequence;
+		return new Promise((resolve, reject) => {
+			const timer = window.setTimeout(() => {
+				pending.delete(id);
+				reject(/* @__PURE__ */ new Error("Widget request timed out"));
+			}, requestTimeout);
+			pending.set(id, {
+				resolve,
+				reject,
+				timer
+			});
+			parent.postMessage({
+				channel,
+				id,
+				method,
+				input
+			}, "*");
+		});
+	};
+	Object.defineProperty(window, "openai", {
+		value: Object.freeze({
+			get toolInput() {
+				return globals.toolInput;
+			},
+			get toolOutput() {
+				return globals.toolOutput;
+			},
+			get toolResponseMetadata() {
+				return globals.toolResponseMetadata;
+			},
+			get widgetState() {
+				return globals.widgetState;
+			},
+			get theme() {
+				return globals.theme;
+			},
+			get locale() {
+				return globals.locale;
+			},
+			get displayMode() {
+				return globals.displayMode;
+			},
+			get maxHeight() {
+				return globals.maxHeight;
+			},
+			get safeArea() {
+				return globals.safeArea;
+			},
+			get userAgent() {
+				return globals.userAgent;
+			},
+			callTool: (name, args = {}) => request("callTool", {
+				name,
+				arguments: args
+			}),
+			setWidgetState: (state) => {
+				update({ widgetState: state });
+				return request("setState", { state });
+			},
+			sendFollowUpMessage: (input) => request("followUp", input),
+			requestDisplayMode: () => Promise.resolve({ mode: "inline" }),
+			openExternal: (input) => request("openLink", { url: input.href }),
+			requestClose: () => request("close", {}),
+			notifyIntrinsicHeight: (height) => request("height", { height })
+		}),
+		configurable: false,
+		writable: false
+	});
+	window.addEventListener("message", (event) => {
+		if (event.source !== parent) return;
+		const message = event.data;
+		if (message?.channel !== channel) return;
+		if (message.globals !== void 0) update(message.globals);
+		if (message.id === void 0) return;
+		const callback = pending.get(message.id);
+		if (callback === void 0) return;
+		pending.delete(message.id);
+		clearTimeout(callback.timer);
+		if (typeof message.error === "string") callback.reject(new Error(message.error));
+		else callback.resolve(message.result);
+	});
+	parent.postMessage({
+		channel,
+		method: "initialized",
+		input: {}
+	}, "*");
+	document.addEventListener("DOMContentLoaded", () => {
+		update(globals);
+		const observer = new ResizeObserver(() => {
+			const height = Math.max(document.body.scrollHeight, document.documentElement.scrollHeight);
+			parent.postMessage({
+				channel,
+				method: "height",
+				input: { height }
+			}, "*");
+		});
+		observer.observe(document.body);
+		window.addEventListener("pagehide", () => observer.disconnect(), { once: true });
+	}, { once: true });
+}
+function mcpOpenAiScript(globals) {
+	const encoded = JSON.stringify(globals).replaceAll("<", "\\u003c").replaceAll("\u2028", "\\u2028").replaceAll("\u2029", "\\u2029");
+	return `<script>(${bootstrap.toString()})(${encoded})<\/script>`;
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/tool/_components/McpInlineApp.tsx
+const DEFAULT_HEIGHT = 320;
+const MAX_HEIGHT = 1200;
+const MIN_HEIGHT = 80;
+const OPEN_TIMEOUT = 15e3;
+const LEGACY_CHANNEL = "po.openai";
+function currentTheme() {
+	const scheme = document.documentElement.style.colorScheme;
+	if (scheme === "light" || scheme === "dark") return scheme;
+	return window.matchMedia("(prefers-color-scheme: dark)").matches ? "dark" : "light";
+}
+function errorText(error) {
+	return error instanceof Error ? error.message : "The MCP App could not complete this request";
+}
+function object(value) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error("Invalid App request");
+	return value;
+}
+function invoke(runtime, sessionId, method, input) {
+	return runtime.invokeServerMethod({
+		mount: {
+			scope: "session",
+			sessionId
+		},
+		service: "mcp.apps",
+		method,
+		input
+	});
+}
+async function openLink(value) {
+	if (typeof value !== "string") throw new Error("Invalid external link");
+	const url = new URL(value);
+	if (url.protocol !== "https:" || url.username || url.password) throw new Error("Only HTTPS external links are supported");
+	if (!window.confirm(`Open this external link?\n${url.href}`)) throw new Error("Opening the link was declined");
+	const opened = window.open(url.href, "_blank", "noopener,noreferrer");
+	if (opened !== null) opened.opener = null;
+	return {};
+}
+function AppFrame({ runtime, sessionId, toolCallId, data, savedState, saveState, onClose }) {
+	const frameRef = useRef(null);
+	const [height, setHeight] = useState(DEFAULT_HEIGHT);
+	const [failure, setFailure] = useState(null);
+	const [ready, setReady] = useState(false);
+	const [initialState] = useState(() => savedState);
+	useEffect(() => {
+		const frame = frameRef.current;
+		if (frame === null || frame.contentWindow === null) return;
+		let live = true;
+		let bridge;
+		const channels = new MessageChannel();
+		const request = (method, input) => {
+			if (!live) return Promise.reject(/* @__PURE__ */ new Error("MCP App is closed"));
+			return invoke(runtime, sessionId, method, {
+				...input,
+				leaseId: data.leaseId
+			});
+		};
+		const resize = (value) => {
+			if (typeof value === "number" && Number.isFinite(value)) setHeight(Math.min(MAX_HEIGHT, Math.max(MIN_HEIGHT, Math.ceil(value))));
+		};
+		const fail = (error) => {
+			if (!live) return;
+			setFailure(errorText(error));
+			live = false;
+			frame.srcdoc = "";
+			requestCloseLease().catch((closeError) => {
+				setFailure(`${errorText(error)}. Closing the App lease failed: ${errorText(closeError)}`);
+			});
+		};
+		const requestCloseLease = () => invoke(runtime, sessionId, "close", { leaseId: data.leaseId });
+		const timeout = window.setTimeout(() => fail(/* @__PURE__ */ new Error("MCP App initialization timed out")), OPEN_TIMEOUT);
+		const markReady = () => {
+			if (!live) return;
+			clearTimeout(timeout);
+			setReady(true);
+		};
+		const callTool = async (name, args) => {
+			if (data.readOnly) throw new Error("Enable interactions in the conversation before calling tools");
+			if (typeof name !== "string") throw new Error("Invalid App tool name");
+			return await request("callTool", {
+				name,
+				arguments: object(args ?? {})
+			});
+		};
+		const persist = async (state) => {
+			await request("setState", { state });
+			saveState(state);
+			return {};
+		};
+		const followUp = async (prompt) => {
+			if (data.readOnly) throw new Error("Enable interactions in the conversation before sending a follow-up");
+			if (typeof prompt !== "string") throw new Error("Invalid App follow-up");
+			await request("followUp", { prompt });
+			return {};
+		};
+		const close = async () => {
+			await request("close", {});
+			onClose();
+			return {};
+		};
+		const theme = currentTheme();
+		const globals = {
+			toolInput: data.args,
+			toolOutput: data.result.structuredContent ?? null,
+			toolResponseMetadata: data.result._meta ?? {},
+			widgetState: initialState,
+			theme,
+			locale: navigator.language,
+			displayMode: "inline",
+			maxHeight: MAX_HEIGHT,
+			safeArea: { insets: {
+				top: 0,
+				right: 0,
+				bottom: 0,
+				left: 0
+			} },
+			userAgent: {
+				device: { type: window.matchMedia("(pointer: coarse)").matches ? "mobile" : "desktop" },
+				capabilities: {
+					hover: window.matchMedia("(hover: hover)").matches,
+					touch: navigator.maxTouchPoints > 0
+				}
+			}
+		};
+		try {
+			const policy = mcpAppCsp(data.resourceMeta, location.origin);
+			if (data.protocol === "mcp") {
+				bridge = new AppBridge(null, {
+					name: "Po",
+					version: "1"
+				}, {
+					...data.readOnly ? {} : {
+						serverTools: {},
+						message: { text: {} }
+					},
+					openLinks: {}
+				}, { hostContext: {
+					theme,
+					locale: navigator.language,
+					displayMode: "inline",
+					availableDisplayModes: ["inline"],
+					toolInfo: {
+						id: toolCallId,
+						tool: data.tool
+					}
+				} });
+				bridge.oncalltool = ({ name, arguments: args }) => callTool(name, args);
+				bridge.onmessage = async ({ content }) => {
+					if (content.some((block) => block.type !== "text")) throw new Error("Only text follow-ups are supported");
+					return followUp(content.map((block) => block.type === "text" ? block.text : "").join("\n"));
+				};
+				bridge.onopenlink = ({ url }) => openLink(url);
+				bridge.onsizechange = ({ height: next }) => resize(next);
+				bridge.onrequestdisplaymode = async () => ({ mode: "inline" });
+				bridge.onrequestteardown = () => {
+					close().catch(fail);
+				};
+				bridge.oninitialized = () => {
+					(async () => {
+						await bridge.sendToolInput({ arguments: data.args });
+						await bridge.sendToolResult(data.result);
+						markReady();
+					})().catch(fail);
+				};
+				bridge.connect(new PostMessageTransport(frame.contentWindow, frame.contentWindow)).catch(fail);
+			}
+			channels.port1.onmessage = (event) => {
+				if (!live) return;
+				const message = event.data;
+				if (message?.type === "revoked") {
+					fail(/* @__PURE__ */ new Error("MCP App navigation was blocked; reopen it to continue"));
+					return;
+				}
+				if (message?.type !== "legacy") return;
+				const legacy = message.data;
+				if (legacy?.channel !== LEGACY_CHANNEL) return;
+				(async () => {
+					const input = object(legacy.input ?? {});
+					switch (legacy.method) {
+						case "initialized": {
+							markReady();
+							const loadedTheme = currentTheme();
+							if (loadedTheme !== theme) channels.port1.postMessage({
+								channel: LEGACY_CHANNEL,
+								globals: { theme: loadedTheme }
+							});
+							return {};
+						}
+						case "height":
+							resize(input.height);
+							return {};
+						case "callTool": return callTool(input.name, input.arguments);
+						case "setState": return persist(input.state);
+						case "followUp": return followUp(input.prompt);
+						case "openLink": return openLink(input.url);
+						case "close": return close();
+						default: throw new Error("Unsupported ChatGPT widget method");
+					}
+				})().then((result) => {
+					if (!live || legacy.id === void 0) return;
+					const returned = legacy.method === "callTool" && data.protocol === "openai" ? result : void 0;
+					channels.port1.postMessage({
+						channel: LEGACY_CHANNEL,
+						id: legacy.id,
+						result,
+						...returned === void 0 ? {} : { globals: {
+							toolOutput: returned.structuredContent ?? null,
+							toolResponseMetadata: returned._meta ?? {}
+						} }
+					});
+				}, (error) => {
+					if (!live || legacy.id === void 0) return;
+					channels.port1.postMessage({
+						channel: LEGACY_CHANNEL,
+						id: legacy.id,
+						error: errorText(error)
+					});
+				});
+			};
+			channels.port1.start();
+			const load = () => {
+				frame.contentWindow?.postMessage({
+					html: mcpAppDocument(data.html, policy, mcpOpenAiScript(globals), theme),
+					policy,
+					protocol: data.protocol
+				}, "*", [channels.port2]);
+			};
+			frame.addEventListener("load", load, { once: true });
+			frame.srcdoc = mcpAppRelayHtml(policy, theme);
+			const observer = new MutationObserver(() => {
+				const nextTheme = currentTheme();
+				bridge?.setHostContext({ theme: nextTheme });
+				channels.port1.postMessage({
+					channel: LEGACY_CHANNEL,
+					globals: { theme: nextTheme }
+				});
+			});
+			observer.observe(document.documentElement, {
+				attributes: true,
+				attributeFilter: [
+					"class",
+					"data-theme",
+					"style"
+				]
+			});
+			return () => {
+				live = false;
+				clearTimeout(timeout);
+				observer.disconnect();
+				frame.removeEventListener("load", load);
+				channels.port1.close();
+				channels.port2.close();
+				if (bridge !== void 0) bridge.close().catch((error) => setFailure(errorText(error)));
+				frame.srcdoc = "";
+			};
+		} catch (error) {
+			fail(error);
+			return () => {
+				clearTimeout(timeout);
+				channels.port1.close();
+				channels.port2.close();
+			};
+		}
+	}, [
+		runtime,
+		sessionId,
+		toolCallId,
+		data,
+		initialState,
+		saveState,
+		onClose
+	]);
+	return /* @__PURE__ */ jsxs("div", {
+		className: "overflow-hidden rounded border border-doom-border-soft",
+		"data-testid": "mcp-inline-app",
+		children: [
+			failure !== null ? /* @__PURE__ */ jsx("p", {
+				role: "alert",
+				className: "p-3 text-doom-dim",
+				children: failure
+			}) : null,
+			!ready && failure === null ? /* @__PURE__ */ jsx("output", {
+				className: "p-3 text-doom-faint",
+				children: "Loading MCP App…"
+			}) : null,
+			/* @__PURE__ */ jsx("iframe", {
+				ref: frameRef,
+				title: `${data.tool.name} MCP App`,
+				sandbox: "allow-scripts",
+				referrerPolicy: "no-referrer",
+				allow: "camera 'none'; microphone 'none'; geolocation 'none'; clipboard-read 'none'; clipboard-write 'none'",
+				className: failure !== null ? "hidden" : "block w-full border-0",
+				style: { height }
+			})
+		]
+	});
+}
+function McpInlineApp({ sessionId, toolCallId }) {
+	const runtime = useStore(mcpAppRuntime.store, (state) => mcpAppRuntime.select(state, sessionId).runtime);
+	const [data, setData] = useState(null);
+	const [failure, setFailure] = useState(null);
+	const [activating, setActivating] = useState(false);
+	const [actionFailure, setActionFailure] = useState(null);
+	const [closed, setClosed] = useState(false);
+	const [widgetState, setWidgetState] = useState(null);
+	const saveState = useCallback((value) => setWidgetState(value), []);
+	const close = useCallback(() => setClosed(true), []);
+	useEffect(() => {
+		if (runtime === null || sessionId === null || !supportsMcpAppSandbox()) return;
+		let mounted = true;
+		let leaseId;
+		invoke(runtime, sessionId, "open", { toolCallId }).then((response) => {
+			const opened = response;
+			leaseId = opened.leaseId;
+			if (!mounted) return invoke(runtime, sessionId, "close", { leaseId });
+			setWidgetState(opened.state);
+			setData(opened);
+		}).catch((error) => {
+			if (mounted) setFailure(errorText(error));
+		});
+		return () => {
+			mounted = false;
+			if (leaseId !== void 0) invoke(runtime, sessionId, "close", { leaseId }).catch((error) => setFailure(errorText(error)));
+		};
+	}, [
+		runtime,
+		sessionId,
+		toolCallId
+	]);
+	if (closed) return /* @__PURE__ */ jsx("p", {
+		className: "text-doom-faint",
+		children: "MCP App closed. Expand the card to view the tool result."
+	});
+	if (!supportsMcpAppSandbox()) return /* @__PURE__ */ jsx("p", {
+		className: "text-doom-faint",
+		children: "This browser cannot securely display MCP Apps. Expand the card to view the tool result."
+	});
+	if (failure !== null) return /* @__PURE__ */ jsxs("p", {
+		role: "alert",
+		className: "text-doom-dim",
+		children: ["MCP App unavailable: ", failure]
+	});
+	if (runtime === null || sessionId === null) return /* @__PURE__ */ jsx("p", {
+		className: "text-doom-faint",
+		children: "The interactive MCP App is unavailable in this view. Expand the card to view the tool result."
+	});
+	if (data === null) return /* @__PURE__ */ jsx("output", {
+		className: "text-doom-faint",
+		children: "Loading MCP App…"
+	});
+	const activate = () => {
+		setActivating(true);
+		setActionFailure(null);
+		invoke(runtime, sessionId, "activate", { leaseId: data.leaseId }).then(() => {
+			setData({
+				...data,
+				readOnly: false
+			});
+		}).catch((error) => setActionFailure(errorText(error))).finally(() => setActivating(false));
+	};
+	return /* @__PURE__ */ jsxs("div", {
+		className: "flex flex-col gap-2",
+		children: [
+			/* @__PURE__ */ jsxs("div", {
+				className: "flex items-center justify-between gap-2 text-doom-faint",
+				children: [/* @__PURE__ */ jsx("span", { children: data.readOnly ? "Read-only MCP App" : "MCP App interactions enabled" }), data.readOnly ? /* @__PURE__ */ jsx("button", {
+					type: "button",
+					disabled: activating,
+					onClick: activate,
+					className: "rounded border border-doom-border-soft px-2 py-1 text-doom-blue disabled:opacity-50",
+					children: activating ? "Enabling…" : "Enable interactions"
+				}) : null]
+			}),
+			actionFailure !== null ? /* @__PURE__ */ jsx("p", {
+				role: "alert",
+				className: "text-doom-dim",
+				children: actionFailure
+			}) : null,
+			/* @__PURE__ */ jsx(AppFrame, {
+				runtime,
+				sessionId,
+				toolCallId,
+				data,
+				savedState: widgetState,
+				saveState,
+				onClose: close
+			}, `${data.leaseId}-${String(data.readOnly)}`)
+		]
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/tool/_components/McpToolMessage.tsx
+const STATUS_TONE = {
+	running: "running",
+	ok: "ok",
+	error: "error",
+	hint: "neutral"
+};
+/** The Pi name split on its first underscore, for a call whose server the session has not named. */
+function fallbackIdentity(toolName) {
+	const separator = toolName.indexOf("_");
+	if (separator <= 0) return {
+		server: toolName,
+		tool: ""
+	};
+	return {
+		server: toolName.slice(0, separator),
+		tool: toolName.slice(separator + 1)
+	};
+}
+/** One block beyond text the result carried: a link, an embedded resource, structured content, or audio. */
+function McpBlock({ block }) {
+	switch (block.type) {
+		case "resource_link": return /* @__PURE__ */ jsx("a", {
+			href: block.uri,
+			target: "_blank",
+			rel: "noreferrer",
+			"data-testid": "tool-result-mcp-link",
+			className: "truncate text-doom-blue hover:underline",
+			title: block.description ?? block.uri,
+			children: block.title ?? block.name
+		});
+		case "resource": return block.text !== void 0 ? /* @__PURE__ */ jsx(SyntaxText, {
+			"data-testid": "tool-result-mcp-resource",
+			className: "text-doom-dim",
+			text: block.text
+		}) : /* @__PURE__ */ jsxs("span", {
+			"data-testid": "tool-result-mcp-resource",
+			className: "truncate text-doom-dim",
+			children: [
+				"binary ",
+				block.mimeType ?? "resource",
+				" · ",
+				block.uri
+			]
+		});
+		case "structured": return /* @__PURE__ */ jsx(SyntaxText, {
+			"data-testid": "tool-result-mcp-structured",
+			className: "text-doom-dim",
+			grammar: "json",
+			text: JSON.stringify(block.value, null, 2)
+		});
+		case "audio": return /* @__PURE__ */ jsxs("span", {
+			"data-testid": "tool-result-mcp-audio",
+			className: "text-doom-dim",
+			children: ["audio · ", block.mimeType]
+		});
+	}
+}
+/**
+* The MCP tool's timeline item, the web half of renderMcpCall and
+* renderMcpResult: `mcp | server / tool · k=v` in the header; the text lines,
+* collapsed to twelve, then the images Pi carries beside the text, the
+* blocks the adapter put in the details, and one status line in the body.
+* A call that rendered an MCP App keeps its result behind the toggle, unless it failed.
+*/
+function McpToolMessage({ sessionId, toolCallId, toolName, args, result, output, running, isError, statuses }) {
+	const identity = mcpIdentityFromDetails(result?.details) ?? matchMcpTool(toolName, statuses) ?? fallbackIdentity(toolName);
+	const summary = mcpArgumentSummary(args);
+	const collapsed = mcpResultView({
+		output,
+		expanded: false,
+		isPartial: running,
+		isError
+	});
+	const images = mcpImageBlocks(result?.content ?? []);
+	const blocks = mcpResultBlocks(result?.details);
+	const details = result?.details;
+	const app = !running && details !== null && typeof details === "object" && "app" in details ? details.app : void 0;
+	const hasApp = app !== null && typeof app === "object" && "version" in app && app.version === 1 && "resourceUri" in app && typeof app.resourceUri === "string";
+	const resultFirst = !hasApp || isError;
+	return /* @__PURE__ */ jsx(MessageItem, {
+		tone: toolTone({
+			running,
+			isError
+		}),
+		expandable: !resultFirst || collapsed.status?.tone === "hint",
+		children: ({ expanded }) => {
+			const view = expanded ? mcpResultView({
+				output,
+				expanded: true,
+				isPartial: running,
+				isError
+			}) : collapsed;
+			const hint = view.status?.tone === "hint";
+			const showResult = resultFirst || expanded;
+			return /* @__PURE__ */ jsxs(Fragment, { children: [
+				/* @__PURE__ */ jsx(MessageItemHeader, {
+					title: "mcp",
+					children: /* @__PURE__ */ jsxs("span", {
+						"data-testid": "tool-call-mcp",
+						className: "flex min-w-0 flex-1 items-center gap-1.5",
+						children: [
+							/* @__PURE__ */ jsx("span", {
+								className: "shrink-0 text-doom-dim",
+								children: identity.server
+							}),
+							/* @__PURE__ */ jsx("span", {
+								className: "shrink-0 text-doom-faint",
+								children: "/"
+							}),
+							/* @__PURE__ */ jsx("span", {
+								className: "shrink-0 text-doom-blue",
+								children: identity.tool
+							}),
+							summary ? /* @__PURE__ */ jsxs("span", {
+								className: "min-w-0 flex-1 truncate text-doom-dim",
+								children: ["· ", summary]
+							}) : null
+						]
+					})
+				}),
+				hasApp ? /* @__PURE__ */ jsx(MessageItemBody, { children: /* @__PURE__ */ jsx(McpInlineApp, {
+					sessionId,
+					toolCallId
+				}, `${sessionId}:${toolCallId}`) }) : null,
+				showResult && (view.lines.length > 0 || view.status !== null || images.length > 0 || blocks.length > 0) ? /* @__PURE__ */ jsxs(MessageItemBody, {
+					"data-testid": "tool-result-mcp",
+					"data-mcp-server": identity.server,
+					className: "flex flex-col gap-1",
+					children: [
+						view.lines.length > 0 ? /* @__PURE__ */ jsx("pre", {
+							className: "whitespace-pre-wrap break-words font-mono text-doom-dim",
+							children: view.lines.join("\n")
+						}) : null,
+						images.map((image, index) => /* @__PURE__ */ jsx("img", {
+							"data-testid": "tool-result-mcp-image",
+							src: `data:${image.mimeType};base64,${image.data}`,
+							alt: `${identity.tool} result ${String(index + 1)}`,
+							className: "max-h-60 max-w-full self-start rounded border border-doom-border-soft"
+						}, `${String(index)}-${image.mimeType}`)),
+						blocks.map((block, index) => /* @__PURE__ */ jsx(McpBlock, { block }, `${String(index)}-${block.type}`)),
+						view.status ? /* @__PURE__ */ jsx(MessageItemStatus, {
+							"data-testid": "tool-result-mcp-status",
+							tone: STATUS_TONE[view.status.tone],
+							glyph: view.status.glyph,
+							expands: hint,
+							children: view.status.text
+						}) : null
+					]
+				}) : null
+			] });
+		}
+	});
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/tool/mcp.web.tsx
+var mcp_web_default = defineToolRenderer({
+	tools: [],
+	matches: (toolName, statuses, details) => mcpIdentityFromDetails(details) !== null || matchMcpTool(toolName, statuses) !== null,
+	message: McpToolMessage
+});
+//#endregion
+//#region generated/web.ts
+const via = (identity, value) => value === void 0 ? void 0 : {
+	...identity,
+	...value
+};
+const webPlugin = defineWebPlugin({
+	id: "mcp",
+	workspace: { get repositorySettingsPanel() {
+		return mcp_web_default$1;
+	} },
+	session: {
+		get fills() {
+			return [via({
+				slot: "context",
+				id: "mcp-auth"
+			}, McpAuth_context_web_default)];
+		},
+		get start() {
+			return start_web_default;
+		},
+		get toolRenderers() {
+			return [via({ tools: ["mcp"] }, mcp_web_default)];
+		}
+	}
+});
+//#endregion
+export { webPlugin };
+
+//# sourceMappingURL=web.mjs.map