@ashx-j/lunr 0.1.0

package/dist/builtin-extensions/pi-mcp-adapter/errors.js

@@ -0,0 +1,167 @@
+// @ts-nocheck
+/**
+ * Custom error types for MCP UI operations.
+ * Provides structured errors with context and recovery hints.
+ */
+/**
+ * Base error class for MCP UI errors.
+ */
+export class McpUiError extends Error {
+    code;
+    context;
+    recoveryHint;
+    cause;
+    constructor(message, options) {
+        super(message);
+        this.name = "McpUiError";
+        this.code = options.code;
+        this.context = options.context ?? {};
+        this.recoveryHint = options.recoveryHint;
+        this.cause = options.cause;
+        // Maintain proper stack trace
+        if (Error.captureStackTrace) {
+            Error.captureStackTrace(this, this.constructor);
+        }
+    }
+    toJSON() {
+        return {
+            name: this.name,
+            code: this.code,
+            message: this.message,
+            context: this.context,
+            recoveryHint: this.recoveryHint,
+            stack: this.stack,
+        };
+    }
+}
+/**
+ * Error fetching a UI resource from the MCP server.
+ */
+export class ResourceFetchError extends McpUiError {
+    constructor(uri, reason, options) {
+        super(`Failed to fetch UI resource "${uri}": ${reason}`, {
+            code: "RESOURCE_FETCH_ERROR",
+            context: { uri, server: options?.server },
+            recoveryHint: "Check that the MCP server is connected and the resource URI is valid.",
+            cause: options?.cause,
+        });
+        this.name = "ResourceFetchError";
+    }
+}
+/**
+ * Error parsing or validating UI resource content.
+ */
+export class ResourceParseError extends McpUiError {
+    constructor(uri, reason, options) {
+        super(`Invalid UI resource "${uri}": ${reason}`, {
+            code: "RESOURCE_PARSE_ERROR",
+            context: { uri, server: options?.server, mimeType: options?.mimeType },
+            recoveryHint: "Ensure the resource returns valid HTML with the correct MIME type.",
+        });
+        this.name = "ResourceParseError";
+    }
+}
+/**
+ * Error connecting to the AppBridge.
+ */
+export class BridgeConnectionError extends McpUiError {
+    constructor(reason, options) {
+        super(`AppBridge connection failed: ${reason}`, {
+            code: "BRIDGE_CONNECTION_ERROR",
+            context: { session: options?.session },
+            recoveryHint: "Check browser console for detailed errors. The iframe may have failed to load.",
+            cause: options?.cause,
+        });
+        this.name = "BridgeConnectionError";
+    }
+}
+/**
+ * Error related to user consent for tool calls.
+ */
+export class ConsentError extends McpUiError {
+    denied;
+    constructor(server, options) {
+        const message = options.denied
+            ? `Tool calls for "${server}" were denied for this session`
+            : `Tool call approval required for "${server}"`;
+        super(message, {
+            code: options.denied ? "CONSENT_DENIED" : "CONSENT_REQUIRED",
+            context: { server },
+            recoveryHint: options.denied
+                ? "The user denied tool access. Start a new session to try again."
+                : "Prompt the user for consent before calling tools.",
+        });
+        this.name = "ConsentError";
+        this.denied = options.denied ?? false;
+    }
+}
+/**
+ * Error with UI server session management.
+ */
+export class SessionError extends McpUiError {
+    constructor(reason, options) {
+        super(`Session error: ${reason}`, {
+            code: "SESSION_ERROR",
+            context: { session: options?.session },
+            recoveryHint: "The session may have expired or been closed. Try opening the UI again.",
+            cause: options?.cause,
+        });
+        this.name = "SessionError";
+    }
+}
+/**
+ * Error starting or operating the UI server.
+ */
+export class ServerError extends McpUiError {
+    constructor(reason, options) {
+        super(`UI server error: ${reason}`, {
+            code: "SERVER_ERROR",
+            context: { port: options?.port },
+            recoveryHint: "Check if the port is available. Another process may be using it.",
+            cause: options?.cause,
+        });
+        this.name = "ServerError";
+    }
+}
+/**
+ * Error communicating with the MCP server.
+ */
+export class McpServerError extends McpUiError {
+    constructor(server, reason, options) {
+        super(`MCP server "${server}" error: ${reason}`, {
+            code: "MCP_SERVER_ERROR",
+            context: { server, tool: options?.tool },
+            recoveryHint: "Check that the MCP server is running and responsive.",
+            cause: options?.cause,
+        });
+        this.name = "McpServerError";
+    }
+}
+/**
+ * Wrap an unknown error into an McpUiError.
+ */
+export function wrapError(error, context) {
+    if (error instanceof McpUiError) {
+        // Merge contexts
+        return new McpUiError(error.message, {
+            code: error.code,
+            context: { ...error.context, ...context },
+            recoveryHint: error.recoveryHint,
+            cause: error.cause,
+        });
+    }
+    const cause = error instanceof Error ? error : undefined;
+    const message = error instanceof Error ? error.message : String(error);
+    return new McpUiError(message, {
+        code: "UNKNOWN_ERROR",
+        context,
+        cause,
+    });
+}
+/**
+ * Check if an error is a specific MCP UI error type.
+ */
+export function isErrorCode(error, code) {
+    return error instanceof McpUiError && error.code === code;
+}
+//# sourceMappingURL=errors.js.map

package/dist/builtin-extensions/pi-mcp-adapter/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/builtin-extensions/pi-mcp-adapter/errors.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;GAGG;AAUH;;GAEG;AACH,MAAM,OAAO,UAAW,SAAQ,KAAK;IAC1B,IAAI,CAAS;IACb,OAAO,CAAoB;IAC3B,YAAY,CAAU;IACtB,KAAK,CAAS;IAEvB,YACE,OAAe,EACf,OAKC,EACD;QACA,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAE3B,8BAA8B;QAC9B,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAClD,CAAC;IAAA,CACF;IAED,MAAM,GAA4B;QAChC,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC;IAAA,CACH;CACF;AAED;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,UAAU;IAChD,YACE,GAAW,EACX,MAAc,EACd,OAA4C,EAC5C;QACA,KAAK,CAAC,gCAAgC,GAAG,MAAM,MAAM,EAAE,EAAE;YACvD,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;YACzC,YAAY,EAAE,uEAAuE;YACrF,KAAK,EAAE,OAAO,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IAAA,CAClC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,UAAU;IAChD,YACE,GAAW,EACX,MAAc,EACd,OAAgD,EAChD;QACA,KAAK,CAAC,wBAAwB,GAAG,MAAM,MAAM,EAAE,EAAE;YAC/C,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE;YACtE,YAAY,EAAE,oEAAoE;SACnF,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IAAA,CAClC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,qBAAsB,SAAQ,UAAU;IACnD,YAAY,MAAc,EAAE,OAA6C,EAAE;QACzE,KAAK,CAAC,gCAAgC,MAAM,EAAE,EAAE;YAC9C,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE;YACtC,YAAY,EAAE,gFAAgF;YAC9F,KAAK,EAAE,OAAO,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IAAA,CACrC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,UAAU;IACjC,MAAM,CAAU;IAEzB,YACE,MAAc,EACd,OAAyD,EACzD;QACA,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM;YAC5B,CAAC,CAAC,mBAAmB,MAAM,gCAAgC;YAC3D,CAAC,CAAC,oCAAoC,MAAM,GAAG,CAAC;QAElD,KAAK,CAAC,OAAO,EAAE;YACb,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,kBAAkB;YAC5D,OAAO,EAAE,EAAE,MAAM,EAAE;YACnB,YAAY,EAAE,OAAO,CAAC,MAAM;gBAC1B,CAAC,CAAC,gEAAgE;gBAClE,CAAC,CAAC,mDAAmD;SACxD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;IAAA,CACvC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,UAAU;IAC1C,YACE,MAAc,EACd,OAA6C,EAC7C;QACA,KAAK,CAAC,kBAAkB,MAAM,EAAE,EAAE;YAChC,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE;YACtC,YAAY,EAAE,wEAAwE;YACtF,KAAK,EAAE,OAAO,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAAA,CAC5B;CACF;AAED;;GAEG;AACH,MAAM,OAAO,WAAY,SAAQ,UAAU;IACzC,YACE,MAAc,EACd,OAA0C,EAC1C;QACA,KAAK,CAAC,oBAAoB,MAAM,EAAE,EAAE;YAClC,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;YAChC,YAAY,EAAE,kEAAkE;YAChF,KAAK,EAAE,OAAO,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAAA,CAC3B;CACF;AAED;;GAEG;AACH,MAAM,OAAO,cAAe,SAAQ,UAAU;IAC5C,YACE,MAAc,EACd,MAAc,EACd,OAA0C,EAC1C;QACA,KAAK,CAAC,eAAe,MAAM,YAAY,MAAM,EAAE,EAAE;YAC/C,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;YACxC,YAAY,EAAE,sDAAsD;YACpE,KAAK,EAAE,OAAO,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAAA,CAC9B;CACF;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,KAAc,EAAE,OAA2B,EAAc;IACjF,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QAChC,iBAAiB;QACjB,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE;YACnC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE;YACzC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEvE,OAAO,IAAI,UAAU,CAAC,OAAO,EAAE;QAC7B,IAAI,EAAE,eAAe;QACrB,OAAO;QACP,KAAK;KACN,CAAC,CAAC;AAAA,CACJ;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,KAAc,EAAE,IAAY,EAAW;IACjE,OAAO,KAAK,YAAY,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;AAAA,CAC3D","sourcesContent":["// @ts-nocheck\n/**\n * Custom error types for MCP UI operations.\n * Provides structured errors with context and recovery hints.\n */\n\nexport interface McpUiErrorContext {\n  server?: string;\n  tool?: string;\n  uri?: string;\n  session?: string;\n  [key: string]: unknown;\n}\n\n/**\n * Base error class for MCP UI errors.\n */\nexport class McpUiError extends Error {\n  readonly code: string;\n  readonly context: McpUiErrorContext;\n  readonly recoveryHint?: string;\n  readonly cause?: Error;\n\n  constructor(\n    message: string,\n    options: {\n      code: string;\n      context?: McpUiErrorContext;\n      recoveryHint?: string;\n      cause?: Error;\n    }\n  ) {\n    super(message);\n    this.name = \"McpUiError\";\n    this.code = options.code;\n    this.context = options.context ?? {};\n    this.recoveryHint = options.recoveryHint;\n    this.cause = options.cause;\n\n    // Maintain proper stack trace\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, this.constructor);\n    }\n  }\n\n  toJSON(): Record<string, unknown> {\n    return {\n      name: this.name,\n      code: this.code,\n      message: this.message,\n      context: this.context,\n      recoveryHint: this.recoveryHint,\n      stack: this.stack,\n    };\n  }\n}\n\n/**\n * Error fetching a UI resource from the MCP server.\n */\nexport class ResourceFetchError extends McpUiError {\n  constructor(\n    uri: string,\n    reason: string,\n    options?: { server?: string; cause?: Error }\n  ) {\n    super(`Failed to fetch UI resource \"${uri}\": ${reason}`, {\n      code: \"RESOURCE_FETCH_ERROR\",\n      context: { uri, server: options?.server },\n      recoveryHint: \"Check that the MCP server is connected and the resource URI is valid.\",\n      cause: options?.cause,\n    });\n    this.name = \"ResourceFetchError\";\n  }\n}\n\n/**\n * Error parsing or validating UI resource content.\n */\nexport class ResourceParseError extends McpUiError {\n  constructor(\n    uri: string,\n    reason: string,\n    options?: { server?: string; mimeType?: string }\n  ) {\n    super(`Invalid UI resource \"${uri}\": ${reason}`, {\n      code: \"RESOURCE_PARSE_ERROR\",\n      context: { uri, server: options?.server, mimeType: options?.mimeType },\n      recoveryHint: \"Ensure the resource returns valid HTML with the correct MIME type.\",\n    });\n    this.name = \"ResourceParseError\";\n  }\n}\n\n/**\n * Error connecting to the AppBridge.\n */\nexport class BridgeConnectionError extends McpUiError {\n  constructor(reason: string, options?: { session?: string; cause?: Error }) {\n    super(`AppBridge connection failed: ${reason}`, {\n      code: \"BRIDGE_CONNECTION_ERROR\",\n      context: { session: options?.session },\n      recoveryHint: \"Check browser console for detailed errors. The iframe may have failed to load.\",\n      cause: options?.cause,\n    });\n    this.name = \"BridgeConnectionError\";\n  }\n}\n\n/**\n * Error related to user consent for tool calls.\n */\nexport class ConsentError extends McpUiError {\n  readonly denied: boolean;\n\n  constructor(\n    server: string,\n    options: { denied?: boolean; requiresApproval?: boolean }\n  ) {\n    const message = options.denied\n      ? `Tool calls for \"${server}\" were denied for this session`\n      : `Tool call approval required for \"${server}\"`;\n\n    super(message, {\n      code: options.denied ? \"CONSENT_DENIED\" : \"CONSENT_REQUIRED\",\n      context: { server },\n      recoveryHint: options.denied\n        ? \"The user denied tool access. Start a new session to try again.\"\n        : \"Prompt the user for consent before calling tools.\",\n    });\n    this.name = \"ConsentError\";\n    this.denied = options.denied ?? false;\n  }\n}\n\n/**\n * Error with UI server session management.\n */\nexport class SessionError extends McpUiError {\n  constructor(\n    reason: string,\n    options?: { session?: string; cause?: Error }\n  ) {\n    super(`Session error: ${reason}`, {\n      code: \"SESSION_ERROR\",\n      context: { session: options?.session },\n      recoveryHint: \"The session may have expired or been closed. Try opening the UI again.\",\n      cause: options?.cause,\n    });\n    this.name = \"SessionError\";\n  }\n}\n\n/**\n * Error starting or operating the UI server.\n */\nexport class ServerError extends McpUiError {\n  constructor(\n    reason: string,\n    options?: { port?: number; cause?: Error }\n  ) {\n    super(`UI server error: ${reason}`, {\n      code: \"SERVER_ERROR\",\n      context: { port: options?.port },\n      recoveryHint: \"Check if the port is available. Another process may be using it.\",\n      cause: options?.cause,\n    });\n    this.name = \"ServerError\";\n  }\n}\n\n/**\n * Error communicating with the MCP server.\n */\nexport class McpServerError extends McpUiError {\n  constructor(\n    server: string,\n    reason: string,\n    options?: { tool?: string; cause?: Error }\n  ) {\n    super(`MCP server \"${server}\" error: ${reason}`, {\n      code: \"MCP_SERVER_ERROR\",\n      context: { server, tool: options?.tool },\n      recoveryHint: \"Check that the MCP server is running and responsive.\",\n      cause: options?.cause,\n    });\n    this.name = \"McpServerError\";\n  }\n}\n\n/**\n * Wrap an unknown error into an McpUiError.\n */\nexport function wrapError(error: unknown, context?: McpUiErrorContext): McpUiError {\n  if (error instanceof McpUiError) {\n    // Merge contexts\n    return new McpUiError(error.message, {\n      code: error.code,\n      context: { ...error.context, ...context },\n      recoveryHint: error.recoveryHint,\n      cause: error.cause,\n    });\n  }\n\n  const cause = error instanceof Error ? error : undefined;\n  const message = error instanceof Error ? error.message : String(error);\n\n  return new McpUiError(message, {\n    code: \"UNKNOWN_ERROR\",\n    context,\n    cause,\n  });\n}\n\n/**\n * Check if an error is a specific MCP UI error type.\n */\nexport function isErrorCode(error: unknown, code: string): boolean {\n  return error instanceof McpUiError && error.code === code;\n}\n"]}

package/dist/builtin-extensions/pi-mcp-adapter/glimpse-ui.d.ts

@@ -0,0 +1,10 @@
+export declare function isGlimpseAvailable(): boolean;
+export declare function openGlimpseWindow(html: string, options: {
+    title: string;
+    width?: number;
+    height?: number;
+    onClosed: () => void;
+}): Promise<{
+    close: () => void;
+}>;
+//# sourceMappingURL=glimpse-ui.d.ts.map

package/dist/builtin-extensions/pi-mcp-adapter/glimpse-ui.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"glimpse-ui.d.ts","sourceRoot":"","sources":["../../../src/builtin-extensions/pi-mcp-adapter/glimpse-ui.ts"],"names":[],"mappings":"AAUA,wBAAgB,kBAAkB,IAAI,OAAO,CAW5C;AAyBD,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;IACP,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,IAAI,CAAC;CACtB;;GA2BF","sourcesContent":["// @ts-nocheck\nimport { existsSync } from \"node:fs\";\nimport { execFileSync } from \"node:child_process\";\nimport { join, dirname } from \"node:path\";\nimport { platform } from \"node:os\";\nimport { createRequire } from \"node:module\";\n\nlet glimpseAvailable: boolean | null = null;\nlet resolvedBinaryPath: string | null = null;\n\nexport function isGlimpseAvailable(): boolean {\n  if (glimpseAvailable !== null) return glimpseAvailable;\n\n  if (platform() !== \"darwin\") {\n    glimpseAvailable = false;\n    return false;\n  }\n\n  resolvedBinaryPath = getGlimpseBinaryPath();\n  glimpseAvailable = resolvedBinaryPath !== null;\n  return glimpseAvailable;\n}\n\nfunction getGlimpseBinaryPath(): string | null {\n  if (process.env.GLIMPSE_BINARY && existsSync(process.env.GLIMPSE_BINARY)) {\n    return process.env.GLIMPSE_BINARY;\n  }\n\n  // Local node_modules\n  try {\n    const require = createRequire(import.meta.url);\n    const glimpseuiPath = require.resolve(\"glimpseui\");\n    const binaryPath = join(dirname(glimpseuiPath), \"glimpse\");\n    if (existsSync(binaryPath)) return binaryPath;\n  } catch {}\n\n  // Global npm install\n  try {\n    const globalRoot = execFileSync(\"npm\", [\"root\", \"-g\"], { encoding: \"utf-8\" }).trim();\n    const binaryPath = join(globalRoot, \"glimpseui\", \"src\", \"glimpse\");\n    if (existsSync(binaryPath)) return binaryPath;\n  } catch {}\n\n  return null;\n}\n\nexport async function openGlimpseWindow(\n  html: string,\n  options: {\n    title: string;\n    width?: number;\n    height?: number;\n    onClosed: () => void;\n  },\n) {\n  const modulePath = resolvedBinaryPath\n    ? join(dirname(resolvedBinaryPath), \"glimpse.mjs\")\n    : \"glimpseui\";\n  const glimpse = await import(modulePath);\n\n  let active = true;\n  const win = glimpse.open(html, {\n    width: options.width ?? 900,\n    height: options.height ?? 700,\n    title: options.title,\n  });\n\n  win.on(\"closed\", () => {\n    if (!active) return;\n    active = false;\n    options.onClosed();\n  });\n\n  return {\n    close: () => {\n      if (!active) return;\n      active = false;\n      win.close();\n    },\n  };\n}\n"]}

package/dist/builtin-extensions/pi-mcp-adapter/glimpse-ui.js

@@ -0,0 +1,77 @@
+var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
+    if (typeof path === "string" && /^\.\.?\//.test(path)) {
+        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
+            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
+        });
+    }
+    return path;
+};
+// @ts-nocheck
+import { existsSync } from "node:fs";
+import { execFileSync } from "node:child_process";
+import { join, dirname } from "node:path";
+import { platform } from "node:os";
+import { createRequire } from "node:module";
+let glimpseAvailable = null;
+let resolvedBinaryPath = null;
+export function isGlimpseAvailable() {
+    if (glimpseAvailable !== null)
+        return glimpseAvailable;
+    if (platform() !== "darwin") {
+        glimpseAvailable = false;
+        return false;
+    }
+    resolvedBinaryPath = getGlimpseBinaryPath();
+    glimpseAvailable = resolvedBinaryPath !== null;
+    return glimpseAvailable;
+}
+function getGlimpseBinaryPath() {
+    if (process.env.GLIMPSE_BINARY && existsSync(process.env.GLIMPSE_BINARY)) {
+        return process.env.GLIMPSE_BINARY;
+    }
+    // Local node_modules
+    try {
+        const require = createRequire(import.meta.url);
+        const glimpseuiPath = require.resolve("glimpseui");
+        const binaryPath = join(dirname(glimpseuiPath), "glimpse");
+        if (existsSync(binaryPath))
+            return binaryPath;
+    }
+    catch { }
+    // Global npm install
+    try {
+        const globalRoot = execFileSync("npm", ["root", "-g"], { encoding: "utf-8" }).trim();
+        const binaryPath = join(globalRoot, "glimpseui", "src", "glimpse");
+        if (existsSync(binaryPath))
+            return binaryPath;
+    }
+    catch { }
+    return null;
+}
+export async function openGlimpseWindow(html, options) {
+    const modulePath = resolvedBinaryPath
+        ? join(dirname(resolvedBinaryPath), "glimpse.mjs")
+        : "glimpseui";
+    const glimpse = await import(__rewriteRelativeImportExtension(modulePath));
+    let active = true;
+    const win = glimpse.open(html, {
+        width: options.width ?? 900,
+        height: options.height ?? 700,
+        title: options.title,
+    });
+    win.on("closed", () => {
+        if (!active)
+            return;
+        active = false;
+        options.onClosed();
+    });
+    return {
+        close: () => {
+            if (!active)
+                return;
+            active = false;
+            win.close();
+        },
+    };
+}
+//# sourceMappingURL=glimpse-ui.js.map

package/dist/builtin-extensions/pi-mcp-adapter/glimpse-ui.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"glimpse-ui.js","sourceRoot":"","sources":["../../../src/builtin-extensions/pi-mcp-adapter/glimpse-ui.ts"],"names":[],"mappings":";;;;;;;;AAAA,cAAc;AACd,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,IAAI,gBAAgB,GAAmB,IAAI,CAAC;AAC5C,IAAI,kBAAkB,GAAkB,IAAI,CAAC;AAE7C,MAAM,UAAU,kBAAkB,GAAY;IAC5C,IAAI,gBAAgB,KAAK,IAAI;QAAE,OAAO,gBAAgB,CAAC;IAEvD,IAAI,QAAQ,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC5B,gBAAgB,GAAG,KAAK,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,kBAAkB,GAAG,oBAAoB,EAAE,CAAC;IAC5C,gBAAgB,GAAG,kBAAkB,KAAK,IAAI,CAAC;IAC/C,OAAO,gBAAgB,CAAC;AAAA,CACzB;AAED,SAAS,oBAAoB,GAAkB;IAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACzE,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACpC,CAAC;IAED,qBAAqB;IACrB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,SAAS,CAAC,CAAC;QAC3D,IAAI,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,UAAU,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,qBAAqB;IACrB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QACnE,IAAI,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,UAAU,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,OAAO,IAAI,CAAC;AAAA,CACb;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,OAKC,EACD;IACA,MAAM,UAAU,GAAG,kBAAkB;QACnC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,aAAa,CAAC;QAClD,CAAC,CAAC,WAAW,CAAC;IAChB,MAAM,OAAO,GAAG,MAAM,MAAM,kCAAC,UAAU,EAAC,CAAC;IAEzC,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;QAC7B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG;QAC3B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,GAAG;QAC7B,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,GAAG,KAAK,CAAC;QACf,OAAO,CAAC,QAAQ,EAAE,CAAC;IAAA,CACpB,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,EAAE,GAAG,EAAE,CAAC;YACX,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,MAAM,GAAG,KAAK,CAAC;YACf,GAAG,CAAC,KAAK,EAAE,CAAC;QAAA,CACb;KACF,CAAC;AAAA,CACH","sourcesContent":["// @ts-nocheck\nimport { existsSync } from \"node:fs\";\nimport { execFileSync } from \"node:child_process\";\nimport { join, dirname } from \"node:path\";\nimport { platform } from \"node:os\";\nimport { createRequire } from \"node:module\";\n\nlet glimpseAvailable: boolean | null = null;\nlet resolvedBinaryPath: string | null = null;\n\nexport function isGlimpseAvailable(): boolean {\n  if (glimpseAvailable !== null) return glimpseAvailable;\n\n  if (platform() !== \"darwin\") {\n    glimpseAvailable = false;\n    return false;\n  }\n\n  resolvedBinaryPath = getGlimpseBinaryPath();\n  glimpseAvailable = resolvedBinaryPath !== null;\n  return glimpseAvailable;\n}\n\nfunction getGlimpseBinaryPath(): string | null {\n  if (process.env.GLIMPSE_BINARY && existsSync(process.env.GLIMPSE_BINARY)) {\n    return process.env.GLIMPSE_BINARY;\n  }\n\n  // Local node_modules\n  try {\n    const require = createRequire(import.meta.url);\n    const glimpseuiPath = require.resolve(\"glimpseui\");\n    const binaryPath = join(dirname(glimpseuiPath), \"glimpse\");\n    if (existsSync(binaryPath)) return binaryPath;\n  } catch {}\n\n  // Global npm install\n  try {\n    const globalRoot = execFileSync(\"npm\", [\"root\", \"-g\"], { encoding: \"utf-8\" }).trim();\n    const binaryPath = join(globalRoot, \"glimpseui\", \"src\", \"glimpse\");\n    if (existsSync(binaryPath)) return binaryPath;\n  } catch {}\n\n  return null;\n}\n\nexport async function openGlimpseWindow(\n  html: string,\n  options: {\n    title: string;\n    width?: number;\n    height?: number;\n    onClosed: () => void;\n  },\n) {\n  const modulePath = resolvedBinaryPath\n    ? join(dirname(resolvedBinaryPath), \"glimpse.mjs\")\n    : \"glimpseui\";\n  const glimpse = await import(modulePath);\n\n  let active = true;\n  const win = glimpse.open(html, {\n    width: options.width ?? 900,\n    height: options.height ?? 700,\n    title: options.title,\n  });\n\n  win.on(\"closed\", () => {\n    if (!active) return;\n    active = false;\n    options.onClosed();\n  });\n\n  return {\n    close: () => {\n      if (!active) return;\n      active = false;\n      win.close();\n    },\n  };\n}\n"]}

package/dist/builtin-extensions/pi-mcp-adapter/host-html-template.d.ts

@@ -0,0 +1,17 @@
+import type { UiHostContext, UiResourceContent, UiResourceCsp } from "./types.ts";
+export interface HostHtmlTemplateInput {
+    sessionToken: string;
+    serverName: string;
+    toolName: string;
+    toolArgs: Record<string, unknown>;
+    resource: UiResourceContent;
+    allowAttribute: string;
+    requireToolConsent: boolean;
+    cacheToolConsent: boolean;
+    hostContext?: UiHostContext;
+    appBridgeModuleUrl?: string;
+}
+export declare function buildHostHtmlTemplate(input: HostHtmlTemplateInput): string;
+export declare function buildCspMetaContent(csp: UiResourceCsp | undefined): string | undefined;
+export declare function applyCspMeta(html: string, cspContent: string | undefined): string;
+//# sourceMappingURL=host-html-template.d.ts.map

package/dist/builtin-extensions/pi-mcp-adapter/host-html-template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-html-template.d.ts","sourceRoot":"","sources":["../../../src/builtin-extensions/pi-mcp-adapter/host-html-template.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAKlF,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAkV1E;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CA2BtF;AAOD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAQjF","sourcesContent":["// @ts-nocheck\nimport type { UiHostContext, UiResourceContent, UiResourceCsp } from \"./types.ts\";\n\n// Use locally bundled AppBridge to avoid CDN Zod bundling issues\nconst DEFAULT_APP_BRIDGE_MODULE_URL = \"/app-bridge.bundle.js\";\n\nexport interface HostHtmlTemplateInput {\n  sessionToken: string;\n  serverName: string;\n  toolName: string;\n  toolArgs: Record<string, unknown>;\n  resource: UiResourceContent;\n  allowAttribute: string;\n  requireToolConsent: boolean;\n  cacheToolConsent: boolean;\n  hostContext?: UiHostContext;\n  appBridgeModuleUrl?: string;\n}\n\nexport function buildHostHtmlTemplate(input: HostHtmlTemplateInput): string {\n  const cspContent = buildCspMetaContent(input.resource.meta.csp);\n  const resourceHtml = applyCspMeta(input.resource.html, cspContent);\n  const hostContext = input.hostContext ?? {};\n\n  const sessionToken = safeInlineJSON(input.sessionToken);\n  const toolArgs = safeInlineJSON(input.toolArgs);\n  const uiHtml = safeInlineJSON(resourceHtml);\n  const serverName = safeInlineJSON(input.serverName);\n  const toolName = safeInlineJSON(input.toolName);\n  const hostContextJson = safeInlineJSON(hostContext);\n  const allowAttribute = safeInlineJSON(input.allowAttribute);\n  const requireToolConsent = safeInlineJSON(input.requireToolConsent);\n  const cacheToolConsent = safeInlineJSON(input.cacheToolConsent);\n  const moduleUrl = safeInlineJSON(input.appBridgeModuleUrl ?? DEFAULT_APP_BRIDGE_MODULE_URL);\n\n  return `<!doctype html>\n<html lang=\"en\">\n<head>\n  <meta charset=\"utf-8\" />\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n  <title>MCP UI - ${escapeHtml(input.serverName)} / ${escapeHtml(input.toolName)}</title>\n  <style>\n    :root {\n      color-scheme: light dark;\n      --bg: #0f1115;\n      --surface: #181c22;\n      --text: #ecf0f5;\n      --muted: #a9b2bf;\n      --accent: #43c0ff;\n      --border: rgba(255, 255, 255, 0.12);\n      --good: #34d399;\n      --warn: #fbbf24;\n      --bad: #f87171;\n    }\n    @media (prefers-color-scheme: light) {\n      :root {\n        --bg: #f6f7fb;\n        --surface: #ffffff;\n        --text: #1d2939;\n        --muted: #667085;\n        --accent: #0ea5e9;\n        --border: rgba(15, 23, 42, 0.14);\n        --good: #059669;\n        --warn: #b45309;\n        --bad: #b91c1c;\n      }\n    }\n    * { box-sizing: border-box; }\n    html, body { margin: 0; padding: 0; height: 100%; font-family: ui-sans-serif, -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif; background: var(--bg); color: var(--text); }\n    body { display: flex; flex-direction: column; min-height: 100vh; }\n    header { background: var(--surface); border-bottom: 1px solid var(--border); padding: 10px 14px; display: flex; align-items: center; justify-content: space-between; gap: 10px; }\n    .title { display: flex; gap: 8px; align-items: baseline; min-width: 0; }\n    .server { font-size: 12px; color: var(--muted); text-transform: uppercase; letter-spacing: 0.08em; white-space: nowrap; }\n    .tool { font-size: 14px; font-weight: 600; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }\n    .badge { border: 1px solid var(--border); border-radius: 999px; padding: 2px 8px; font-size: 11px; color: var(--muted); white-space: nowrap; }\n    .controls { display: flex; gap: 8px; align-items: center; }\n    .status { font-size: 12px; color: var(--muted); white-space: nowrap; }\n    button { border: 1px solid var(--border); background: transparent; color: var(--text); border-radius: 8px; padding: 6px 10px; cursor: pointer; font-size: 12px; }\n    button.primary { border-color: color-mix(in srgb, var(--good) 40%, var(--border) 60%); color: var(--good); }\n    button.danger { border-color: color-mix(in srgb, var(--bad) 40%, var(--border) 60%); color: var(--bad); }\n    button:hover { background: color-mix(in srgb, var(--surface) 75%, var(--accent) 25%); }\n    main { flex: 1; min-height: 0; padding: 10px; display: flex; }\n    iframe { width: 100%; height: 100%; border: 1px solid var(--border); border-radius: 10px; background: white; }\n    .overlay { position: fixed; inset: 0; background: color-mix(in srgb, var(--bg) 90%, black 10%); display: none; align-items: center; justify-content: center; z-index: 2; }\n    .overlay.visible { display: flex; }\n    .panel { width: min(680px, calc(100vw - 40px)); background: var(--surface); border: 1px solid var(--border); border-radius: 12px; padding: 18px; }\n    .panel h2 { margin: 0 0 8px; font-size: 16px; }\n    .panel p { margin: 0; color: var(--muted); line-height: 1.4; font-size: 14px; white-space: pre-wrap; }\n  </style>\n</head>\n<body>\n  <header>\n    <div class=\"title\">\n      <span class=\"server\">MCP · <span id=\"server-name\"></span></span>\n      <span class=\"tool\" id=\"tool-name\"></span>\n      <span class=\"badge\">Sandboxed</span>\n    </div>\n    <div class=\"controls\">\n      <span class=\"status\" id=\"status\">Loading UI...</span>\n      <button class=\"primary\" id=\"done-btn\" title=\"Cmd/Ctrl+Enter\">Done</button>\n      <button class=\"danger\" id=\"cancel-btn\" title=\"Escape\">Cancel</button>\n    </div>\n  </header>\n  <main>\n    <iframe id=\"mcp-app\" referrerpolicy=\"no-referrer\"></iframe>\n  </main>\n  <div class=\"overlay\" id=\"error-overlay\">\n    <div class=\"panel\">\n      <h2>UI Error</h2>\n      <p id=\"error-message\"></p>\n    </div>\n  </div>\n  <script type=\"module\">\n    import { AppBridge, PostMessageTransport } from ${moduleUrl};\n\n    const SESSION_TOKEN = ${sessionToken};\n    const SERVER_NAME = ${serverName};\n    const TOOL_NAME = ${toolName};\n    const TOOL_ARGS = ${toolArgs};\n    const HOST_CONTEXT = ${hostContextJson};\n    const ALLOW_ATTRIBUTE = ${allowAttribute};\n    const REQUIRE_TOOL_CONSENT = ${requireToolConsent};\n    const CACHE_TOOL_CONSENT = ${cacheToolConsent};\n    const STREAM_CONTEXT_KEY = \"pi-mcp-adapter/stream\";\n    const STREAM_PATCH_METHOD = \"notifications/pi-mcp-adapter/ui-result-patch\";\n\n    const iframe = document.getElementById(\"mcp-app\");\n    const statusNode = document.getElementById(\"status\");\n    const doneBtn = document.getElementById(\"done-btn\");\n    const cancelBtn = document.getElementById(\"cancel-btn\");\n    const errorOverlay = document.getElementById(\"error-overlay\");\n    const errorMessage = document.getElementById(\"error-message\");\n\n    document.getElementById(\"server-name\").textContent = SERVER_NAME;\n    document.getElementById(\"tool-name\").textContent = TOOL_NAME;\n\n    const setStatus = (text, isError = false) => {\n      statusNode.textContent = text;\n      statusNode.style.color = isError ? \"var(--bad)\" : \"var(--muted)\";\n    };\n\n    const showError = (message) => {\n      errorMessage.textContent = message;\n      errorOverlay.classList.add(\"visible\");\n      setStatus(\"Error\", true);\n    };\n\n    const post = async (endpoint, params) => {\n      const response = await fetch(endpoint, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify({ token: SESSION_TOKEN, params }),\n      });\n\n      const body = await response.json().catch(() => ({ ok: false, error: \"Invalid JSON response\" }));\n      if (!response.ok || !body.ok) {\n        const message = body.error || (\"HTTP \" + response.status);\n        throw new Error(message);\n      }\n      return body.result ?? {};\n    };\n\n    let consentGranted = !REQUIRE_TOOL_CONSENT;\n    const initialStreamContext = HOST_CONTEXT?.[STREAM_CONTEXT_KEY];\n    const streamMode = initialStreamContext?.mode === \"stream-first\" ? \"stream-first\" : \"eager\";\n\n    const bridge = new AppBridge(\n      null,\n      { name: \"pi\", version: \"1.0.0\" },\n      { serverTools: {}, openLinks: {}, logging: {}, updateModelContext: {}, message: {} },\n      { hostContext: HOST_CONTEXT }\n    );\n\n    bridge.oncalltool = async (params) => {\n      if (!consentGranted) {\n        const accepted = window.confirm(\"Allow this UI to call server tools for this session?\");\n        if (!accepted) {\n          await post(\"/proxy/ui/consent\", { approved: false }).catch(() => {});\n          return {\n            isError: true,\n            content: [{ type: \"text\", text: \"Tool call denied by user.\" }],\n          };\n        }\n        await post(\"/proxy/ui/consent\", { approved: true });\n        if (CACHE_TOOL_CONSENT) {\n          consentGranted = true;\n        }\n      }\n      const result = await post(\"/proxy/tools/call\", params);\n      // Notify agent about the tool call\n      await post(\"/proxy/ui/message\", {\n        type: \"intent\",\n        intent: \"call_tool\",\n        params: { tool: params.name, arguments: params.arguments, isError: result.isError }\n      }).catch(() => {});\n      return result;\n    };\n\n    bridge.onmessage = async (params) => post(\"/proxy/ui/message\", params);\n    bridge.onupdatemodelcontext = async (params) => post(\"/proxy/ui/context\", params);\n    \n    // Also listen for raw postMessage events with custom types (notify, prompt, intent, etc.)\n    // These bypass the AppBridge protocol but are used by some MCP UI implementations\n    window.addEventListener(\"message\", async (event) => {\n      const data = event.data;\n      if (!data || typeof data !== \"object\") return;\n      \n      // Skip AppBridge protocol messages (handled by bridge)\n      if (data.jsonrpc || (typeof data.method === \"string\" && (data.method.startsWith(\"app/\") || data.method.startsWith(\"host/\")))) return;\n      \n      // Handle raw UI action messages\n      const msgType = data.type;\n      if (typeof msgType !== \"string\") return;\n      \n      if (msgType === \"notify\" || msgType === \"prompt\" || msgType === \"intent\" || msgType === \"message\") {\n        // Standard MCP-UI types - preserve their semantics\n        // Support both { type, payload: {...} } and { type, field: value } formats\n        const { type: _, payload, ...directFields } = data;\n        await post(\"/proxy/ui/message\", { type: msgType, ...directFields, ...(payload || {}) }).catch(() => {});\n      } else if (!msgType.startsWith(\"ui-lifecycle-\") && !msgType.startsWith(\"ui-message-\")) {\n        // Any other custom type - forward as intent with type as intent name\n        // (Skip internal lifecycle/ack messages)\n        const payload = data.payload || {};\n        await post(\"/proxy/ui/message\", {\n          type: \"intent\",\n          intent: msgType,\n          params: payload,\n        }).catch(() => {});\n      }\n    });\n    bridge.ondownloadfile = async (params) => post(\"/proxy/ui/download-file\", params);\n    bridge.onrequestdisplaymode = async (params) => post(\"/proxy/ui/request-display-mode\", params);\n    bridge.onopenlink = async (params) => {\n      const result = await post(\"/proxy/ui/open-link\", params);\n      if (!result.isError) {\n        window.open(params.url, \"_blank\", \"noopener,noreferrer\");\n        // Notify agent about the link open\n        await post(\"/proxy/ui/message\", {\n          type: \"intent\",\n          intent: \"open_link\",\n          params: { url: params.url }\n        }).catch(() => {});\n      }\n      return result;\n    };\n\n    bridge.oninitialized = () => {\n      if (streamMode !== \"stream-first\") {\n        bridge.sendToolInput({ arguments: TOOL_ARGS });\n      }\n      setStatus(streamMode === \"stream-first\" ? \"Streaming…\" : \"Connected\");\n    };\n\n    bridge.onsizechange = ({ width, height }) => {\n      if (typeof width === \"number\" && width > 0) {\n        iframe.style.minWidth = Math.min(width, window.innerWidth - 24) + \"px\";\n      }\n      if (typeof height === \"number\" && height > 0) {\n        iframe.style.height = Math.max(height, 320) + \"px\";\n      }\n    };\n\n    if (ALLOW_ATTRIBUTE) {\n      iframe.setAttribute(\"allow\", ALLOW_ATTRIBUTE);\n    }\n\n    // Connect bridge BEFORE loading iframe to ensure we're listening when the app sends ui/initialize\n    try {\n      const transport = new PostMessageTransport(iframe.contentWindow, null);\n      await bridge.connect(transport);\n    } catch (error) {\n      console.error(\"[host] Bridge connection failed:\", error);\n      showError(\"Failed to initialize AppBridge: \" + String(error));\n    }\n\n    const iframeLoaded = new Promise((resolve) => {\n      iframe.onload = resolve;\n    });\n    iframe.src = \"/ui-app?session=\" + encodeURIComponent(SESSION_TOKEN);\n    await iframeLoaded;\n\n    const eventSource = new EventSource(\"/events?session=\" + encodeURIComponent(SESSION_TOKEN));\n    eventSource.addEventListener(\"tool-input\", (event) => {\n      try {\n        bridge.sendToolInput(JSON.parse(event.data));\n      } catch (error) {\n        showError(\"Failed to forward tool input: \" + String(error));\n      }\n    });\n    eventSource.addEventListener(\"tool-result\", (event) => {\n      try {\n        bridge.sendToolResult(JSON.parse(event.data));\n      } catch (error) {\n        showError(\"Failed to forward tool result: \" + String(error));\n      }\n    });\n    eventSource.addEventListener(\"tool-cancelled\", (event) => {\n      try {\n        bridge.sendToolCancelled(JSON.parse(event.data));\n      } catch (error) {\n        showError(\"Failed to forward cancellation: \" + String(error));\n      }\n    });\n    eventSource.addEventListener(\"result-patch\", async (event) => {\n      try {\n        await bridge.notification({\n          method: STREAM_PATCH_METHOD,\n          params: JSON.parse(event.data),\n        });\n      } catch (error) {\n        showError(\"Failed to forward stream patch: \" + String(error));\n      }\n    });\n    eventSource.addEventListener(\"host-context\", (event) => {\n      try {\n        bridge.setHostContext(JSON.parse(event.data));\n      } catch {}\n    });\n    eventSource.addEventListener(\"session-complete\", async () => {\n      await bridge.teardownResource({}).catch(() => {});\n      eventSource.close();\n      window.close();\n    });\n    eventSource.onerror = () => {\n      setStatus(\"Connection lost\", true);\n    };\n\n    const heartbeat = setInterval(() => {\n      post(\"/proxy/ui/heartbeat\", {}).catch(() => {});\n    }, 10000);\n\n    const complete = async (reason) => {\n      try {\n        await post(\"/proxy/ui/complete\", { reason });\n      } catch {}\n      try {\n        await bridge.teardownResource({});\n      } catch {}\n      clearInterval(heartbeat);\n      eventSource.close();\n      window.close();\n    };\n\n    doneBtn.addEventListener(\"click\", () => complete(\"done\"));\n    cancelBtn.addEventListener(\"click\", () => complete(\"cancel\"));\n    window.addEventListener(\"keydown\", (event) => {\n      if (event.key === \"Escape\") {\n        event.preventDefault();\n        complete(\"cancel\");\n      } else if ((event.metaKey || event.ctrlKey) && event.key === \"Enter\") {\n        event.preventDefault();\n        complete(\"done\");\n      }\n    });\n  </script>\n</body>\n</html>`;\n}\n\nexport function buildCspMetaContent(csp: UiResourceCsp | undefined): string | undefined {\n  if (!csp) return undefined;\n\n  const directives: string[] = [];\n  directives.push(\"default-src 'none'\");\n\n  const scriptSrc = toDirective(\"script-src\", csp.scriptDomains);\n  const styleSrc = toDirective(\"style-src\", csp.styleDomains);\n  const fontSrc = toDirective(\"font-src\", csp.fontDomains);\n  const imgSrc = toDirective(\"img-src\", csp.imgDomains);\n  const mediaSrc = toDirective(\"media-src\", csp.mediaDomains);\n  const connectSrc = toDirective(\"connect-src\", csp.connectDomains);\n  const frameSrc = toDirective(\"frame-src\", csp.frameDomains);\n  const workerSrc = toDirective(\"worker-src\", csp.workerDomains);\n  const baseUri = toDirective(\"base-uri\", csp.baseUriDomains);\n\n  if (scriptSrc) directives.push(scriptSrc);\n  if (styleSrc) directives.push(styleSrc);\n  if (fontSrc) directives.push(fontSrc);\n  if (imgSrc) directives.push(imgSrc);\n  if (mediaSrc) directives.push(mediaSrc);\n  if (connectSrc) directives.push(connectSrc);\n  if (frameSrc) directives.push(frameSrc);\n  if (workerSrc) directives.push(workerSrc);\n  if (baseUri) directives.push(baseUri);\n\n  return directives.join(\"; \");\n}\n\nfunction toDirective(name: string, domains: string[] | undefined): string | null {\n  if (!domains || domains.length === 0) return null;\n  return `${name} ${domains.join(\" \")}`;\n}\n\nexport function applyCspMeta(html: string, cspContent: string | undefined): string {\n  if (!cspContent) return html;\n  if (/http-equiv=[\"']Content-Security-Policy[\"']/i.test(html)) return html;\n  const metaTag = `<meta http-equiv=\"Content-Security-Policy\" content=\"${escapeHtmlAttribute(cspContent)}\">`;\n  if (/<head[^>]*>/i.test(html)) {\n    return html.replace(/<head[^>]*>/i, (match) => `${match}\\n${metaTag}`);\n  }\n  return `${metaTag}\\n${html}`;\n}\n\nfunction safeInlineJSON(value: unknown): string {\n  return JSON.stringify(value)\n    .replace(/</g, \"\\\\u003c\")\n    .replace(/>/g, \"\\\\u003e\")\n    .replace(/&/g, \"\\\\u0026\")\n    .replace(/\\u2028/g, \"\\\\u2028\")\n    .replace(/\\u2029/g, \"\\\\u2029\");\n}\n\nfunction escapeHtml(value: string): string {\n  return value\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&#39;\");\n}\n\nfunction escapeHtmlAttribute(value: string): string {\n  return value\n    .replace(/&/g, \"&amp;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\");\n}\n"]}