@assistant-ui/react 0.14.14 → 0.14.15

package/dist/mcp-apps/McpAppRenderer.js.map

@@ -1 +1 @@
-{"version":3,"file":"McpAppRenderer.js","names":[],"sources":["../../src/mcp-apps/McpAppRenderer.tsx"],"sourcesContent":["\"use client\";\n\nimport {\n  useEffect,\n  useMemo,\n  useRef,\n  useState,\n  type MutableRefObject,\n  type ReactNode,\n} from \"react\";\nimport type { McpAppMetadata } from \"@assistant-ui/core\";\nimport type {\n  ToolCallMessagePartComponent,\n  ToolCallMessagePartProps,\n} from \"@assistant-ui/core/react\";\nimport { useAui } from \"@assistant-ui/store\";\nimport {\n  resource,\n  tapConst,\n  tapRef,\n  tapResource,\n  type ResourceElement,\n} from \"@assistant-ui/tap\";\nimport { McpAppFrame } from \"./app-frame\";\nimport type {\n  McpAppBridgeHandlers,\n  McpAppHostContext,\n  McpAppHostInfo,\n  McpAppResource,\n  McpAppSandboxConfig,\n  McpAppsHost,\n} from \"./types\";\nimport { getMcpAppFromToolPart } from \"./utils\";\n\nexport type McpAppRendererOptions = {\n  /**\n   * Provides the data-plane operations the widget can request\n   * (`loadResource`, `callTool`, `readResource`, `listResources`). Use\n   * `McpAppsRemoteHost({ url })` for the default HTTP-route convention.\n   */\n  host: ResourceElement<McpAppsHost>;\n  /** Sandbox + container styling. Passes through to SafeContentFrame. */\n  sandbox?: McpAppSandboxConfig;\n  /**\n   * Upper bound (in pixels) applied to the widget-driven auto-resize height.\n   * Defaults to 800.\n   */\n  maxHeight?: number;\n  /** Identifies the host to the widget in the `ui/initialize` response. */\n  hostInfo?: McpAppHostInfo;\n  /** Delivered to the widget on initialize and pushed via `notifications/host_context/changed` on change. */\n  hostContext?: McpAppHostContext;\n  /** Rendered when no MCP app is on the part, or while load is in flight / failed (unless overridden). */\n  fallback?: ReactNode;\n  /** Rendered while the resource is loading. Defaults to `fallback`. */\n  loadingFallback?: ReactNode;\n  /** Rendered when the resource load rejects. Defaults to `fallback`. */\n  errorFallback?: ReactNode | ((error: Error) => ReactNode);\n};\n\ntype LoadedResourceState = {\n  resourceUri: string;\n  resource?: McpAppResource;\n  error?: Error;\n};\n\nfunction getInput(part: {\n  status: { type: string };\n  argsText: string;\n  args: unknown;\n}): unknown {\n  if (\n    part.status.type === \"running\" &&\n    (part.argsText === \"\" || part.argsText === \"{}\")\n  ) {\n    return undefined;\n  }\n  return part.args;\n}\n\nconst defaultOpenLink = ({ url }: { url: string }) => {\n  window.open(url, \"_blank\", \"noopener,noreferrer\");\n};\n\nfunction extractSendMessageText(params: unknown): string | undefined {\n  if (typeof params === \"string\") return params;\n  if (!params || typeof params !== \"object\") return undefined;\n  const obj = params as Record<string, unknown>;\n  if (typeof obj[\"prompt\"] === \"string\") return obj[\"prompt\"];\n  if (typeof obj[\"text\"] === \"string\") return obj[\"text\"];\n  if (typeof obj[\"message\"] === \"string\") return obj[\"message\"];\n  return undefined;\n}\n\nfunction InlineRenderer({\n  part,\n  internalsRef,\n  optionsRef,\n}: {\n  part: ToolCallMessagePartProps;\n  internalsRef: MutableRefObject<{ host: McpAppsHost }>;\n  optionsRef: MutableRefObject<McpAppRendererOptions>;\n}) {\n  const opts = optionsRef.current;\n  const aui = useAui();\n  const app = getMcpAppFromToolPart(part);\n  const cachedAppRef = useRef<McpAppMetadata | undefined>(undefined);\n  if (app != null && cachedAppRef.current?.resourceUri !== app.resourceUri) {\n    cachedAppRef.current = app;\n  }\n  const appForRender = app ?? cachedAppRef.current;\n\n  const [loadedResource, setLoadedResource] = useState<LoadedResourceState>();\n\n  const resourceUri = appForRender?.resourceUri;\n  useEffect(() => {\n    if (appForRender == null || resourceUri == null) return;\n    let cancelled = false;\n    const targetUri = resourceUri;\n\n    internalsRef.current.host\n      .loadResource({ uri: targetUri })\n      .then((res) => {\n        if (!cancelled)\n          setLoadedResource({ resourceUri: targetUri, resource: res });\n      })\n      .catch((error: unknown) => {\n        if (!cancelled) {\n          setLoadedResource({\n            resourceUri: targetUri,\n            error: error instanceof Error ? error : new Error(String(error)),\n          });\n        }\n      });\n\n    return () => {\n      cancelled = true;\n    };\n    // oxlint-disable-next-line tap-hooks/exhaustive-deps -- re-fetch only when URI changes; appForRender identity is unstable and internalsRef is a stable ref\n  }, [resourceUri]);\n\n  const bridgeHandlers = useMemo<McpAppBridgeHandlers>(\n    () => ({\n      openLink: defaultOpenLink,\n      sendMessage: (params) => {\n        const text = extractSendMessageText(params);\n        if (!text) return { ok: false, reason: \"unrecognised params shape\" };\n        aui.thread().append({ content: [{ type: \"text\", text }] });\n        return { ok: true };\n      },\n      callTool: (params) => internalsRef.current.host.callTool(params),\n      readResource: (params) => internalsRef.current.host.readResource(params),\n      listResources: (params) =>\n        internalsRef.current.host.listResources(params),\n    }),\n    [aui, internalsRef],\n  );\n\n  const loadedResourceForApp =\n    loadedResource?.resourceUri === appForRender?.resourceUri\n      ? loadedResource\n      : undefined;\n  const appResource = loadedResourceForApp?.resource;\n  const error = loadedResourceForApp?.error;\n\n  const fallback = opts.fallback ?? null;\n  if (appForRender == null) {\n    return <>{fallback}</>;\n  }\n  if (error != null) {\n    const errorFallback = opts.errorFallback;\n    if (errorFallback === undefined) return <>{fallback}</>;\n    if (typeof errorFallback === \"function\") return <>{errorFallback(error)}</>;\n    return <>{errorFallback}</>;\n  }\n  if (appResource == null) {\n    return <>{opts.loadingFallback ?? fallback}</>;\n  }\n\n  return (\n    <McpAppFrame\n      app={appForRender}\n      resource={appResource}\n      input={getInput(part)}\n      output={part.result}\n      sandbox={opts.sandbox}\n      handlers={bridgeHandlers}\n      hostInfo={opts.hostInfo}\n      hostContext={opts.hostContext}\n      maxHeight={opts.maxHeight}\n    />\n  );\n}\n\n/**\n * Creates a tool-call renderer for MCP Apps embedded in assistant messages.\n *\n * Compose this into the `Tools` resource through its `mcpApp` option. When a\n * tool-call part carries `mcp.app` metadata for a `ui://` resource, the\n * renderer loads that resource from the configured host and displays it in a\n * sandboxed frame.\n */\nexport const McpAppRenderer = resource(\n  (\n    options: McpAppRendererOptions,\n  ): { readonly render: ToolCallMessagePartComponent } => {\n    const host = tapResource(options.host);\n\n    const optionsRef = tapRef<McpAppRendererOptions>(options);\n    optionsRef.current = options;\n\n    const internalsRef = tapRef<{ host: McpAppsHost }>({ host });\n    internalsRef.current = { host };\n\n    const render = tapConst((): ToolCallMessagePartComponent => {\n      const Render: ToolCallMessagePartComponent = (props) => (\n        <InlineRenderer\n          part={props}\n          internalsRef={internalsRef}\n          optionsRef={optionsRef}\n        />\n      );\n      Render.displayName = \"McpAppRenderer\";\n      return Render;\n    }, []);\n\n    return { render };\n  },\n);\n"],"mappings":";;;;;;;;AAkEA,SAAS,SAAS,MAIN;CACV,IACE,KAAK,OAAO,SAAS,cACpB,KAAK,aAAa,MAAM,KAAK,aAAa,OAE3C;CAEF,OAAO,KAAK;AACd;AAEA,MAAM,mBAAmB,EAAE,UAA2B;CACpD,OAAO,KAAK,KAAK,UAAU,qBAAqB;AAClD;AAEA,SAAS,uBAAuB,QAAqC;CACnE,IAAI,OAAO,WAAW,UAAU,OAAO;CACvC,IAAI,CAAC,UAAU,OAAO,WAAW,UAAU,OAAO,KAAA;CAClD,MAAM,MAAM;CACZ,IAAI,OAAO,IAAI,cAAc,UAAU,OAAO,IAAI;CAClD,IAAI,OAAO,IAAI,YAAY,UAAU,OAAO,IAAI;CAChD,IAAI,OAAO,IAAI,eAAe,UAAU,OAAO,IAAI;AAErD;AAEA,SAAS,eAAe,EACtB,MACA,cACA,cAKC;CACD,MAAM,OAAO,WAAW;CACxB,MAAM,MAAM,OAAO;CACnB,MAAM,MAAM,sBAAsB,IAAI;CACtC,MAAM,eAAe,OAAmC,KAAA,CAAS;CACjE,IAAI,OAAO,QAAQ,aAAa,SAAS,gBAAgB,IAAI,aAC3D,aAAa,UAAU;CAEzB,MAAM,eAAe,OAAO,aAAa;CAEzC,MAAM,CAAC,gBAAgB,qBAAqB,SAA8B;CAE1E,MAAM,cAAc,cAAc;CAClC,gBAAgB;EACd,IAAI,gBAAgB,QAAQ,eAAe,MAAM;EACjD,IAAI,YAAY;EAChB,MAAM,YAAY;EAElB,aAAa,QAAQ,KAClB,aAAa,EAAE,KAAK,UAAU,CAAC,EAC/B,MAAM,QAAQ;GACb,IAAI,CAAC,WACH,kBAAkB;IAAE,aAAa;IAAW,UAAU;GAAI,CAAC;EAC/D,CAAC,EACA,OAAO,UAAmB;GACzB,IAAI,CAAC,WACH,kBAAkB;IAChB,aAAa;IACb,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;GACjE,CAAC;EAEL,CAAC;EAEH,aAAa;GACX,YAAY;EACd;CAEF,GAAG,CAAC,WAAW,CAAC;CAEhB,MAAM,iBAAiB,eACd;EACL,UAAU;EACV,cAAc,WAAW;GACvB,MAAM,OAAO,uBAAuB,MAAM;GAC1C,IAAI,CAAC,MAAM,OAAO;IAAE,IAAI;IAAO,QAAQ;GAA4B;GACnE,IAAI,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC;IAAE,MAAM;IAAQ;GAAK,CAAC,EAAE,CAAC;GACzD,OAAO,EAAE,IAAI,KAAK;EACpB;EACA,WAAW,WAAW,aAAa,QAAQ,KAAK,SAAS,MAAM;EAC/D,eAAe,WAAW,aAAa,QAAQ,KAAK,aAAa,MAAM;EACvE,gBAAgB,WACd,aAAa,QAAQ,KAAK,cAAc,MAAM;CAClD,IACA,CAAC,KAAK,YAAY,CACpB;CAEA,MAAM,uBACJ,gBAAgB,gBAAgB,cAAc,cAC1C,iBACA,KAAA;CACN,MAAM,cAAc,sBAAsB;CAC1C,MAAM,QAAQ,sBAAsB;CAEpC,MAAM,WAAW,KAAK,YAAY;CAClC,IAAI,gBAAgB,MAClB,OAAO,oBAAA,UAAA,EAAA,UAAG,SAAW,CAAA;CAEvB,IAAI,SAAS,MAAM;EACjB,MAAM,gBAAgB,KAAK;EAC3B,IAAI,kBAAkB,KAAA,GAAW,OAAO,oBAAA,UAAA,EAAA,UAAG,SAAW,CAAA;EACtD,IAAI,OAAO,kBAAkB,YAAY,OAAO,oBAAA,UAAA,EAAA,UAAG,cAAc,KAAK,EAAI,CAAA;EAC1E,OAAO,oBAAA,UAAA,EAAA,UAAG,cAAgB,CAAA;CAC5B;CACA,IAAI,eAAe,MACjB,OAAO,oBAAA,UAAA,EAAA,UAAG,KAAK,mBAAmB,SAAW,CAAA;CAG/C,OACE,oBAAC,aAAD;EACE,KAAK;EACL,UAAU;EACV,OAAO,SAAS,IAAI;EACpB,QAAQ,KAAK;EACb,SAAS,KAAK;EACd,UAAU;EACV,UAAU,KAAK;EACf,aAAa,KAAK;EAClB,WAAW,KAAK;CACjB,CAAA;AAEL;;;;;;;;;AAUA,MAAa,iBAAiB,UAE1B,YACsD;CACtD,MAAM,OAAO,YAAY,QAAQ,IAAI;CAErC,MAAM,aAAa,OAA8B,OAAO;CACxD,WAAW,UAAU;CAErB,MAAM,eAAe,OAA8B,EAAE,KAAK,CAAC;CAC3D,aAAa,UAAU,EAAE,KAAK;CAc9B,OAAO,EAAE,QAZM,eAA6C;EAC1D,MAAM,UAAwC,UAC5C,oBAAC,gBAAD;GACE,MAAM;GACQ;GACF;EACb,CAAA;EAEH,OAAO,cAAc;EACrB,OAAO;CACT,GAAG,CAAC,CAEU,EAAE;AAClB,CACF"}
+{"version":3,"file":"McpAppRenderer.js","names":[],"sources":["../../src/mcp-apps/McpAppRenderer.tsx"],"sourcesContent":["\"use client\";\n\nimport {\n  useEffect,\n  useMemo,\n  useRef,\n  useState,\n  type MutableRefObject,\n  type ReactNode,\n} from \"react\";\nimport type { McpAppMetadata } from \"@assistant-ui/core\";\nimport type {\n  ToolCallMessagePartComponent,\n  ToolCallMessagePartProps,\n} from \"@assistant-ui/core/react\";\nimport { useAui } from \"@assistant-ui/store\";\n\nimport { useResource, resource, type ResourceElement } from \"@assistant-ui/tap\";\nimport { McpAppFrame } from \"./app-frame\";\nimport type {\n  McpAppBridgeHandlers,\n  McpAppHostContext,\n  McpAppHostInfo,\n  McpAppResource,\n  McpAppSandboxConfig,\n  McpAppsHost,\n} from \"./types\";\nimport { getMcpAppFromToolPart } from \"./utils\";\n\nexport type McpAppRendererOptions = {\n  /**\n   * Provides the data-plane operations the widget can request\n   * (`loadResource`, `callTool`, `readResource`, `listResources`). Use\n   * `McpAppsRemoteHost({ url })` for the default HTTP-route convention.\n   */\n  host: ResourceElement<McpAppsHost>;\n  /** Sandbox + container styling. Passes through to SafeContentFrame. */\n  sandbox?: McpAppSandboxConfig;\n  /**\n   * Upper bound (in pixels) applied to the widget-driven auto-resize height.\n   * Defaults to 800.\n   */\n  maxHeight?: number;\n  /** Identifies the host to the widget in the `ui/initialize` response. */\n  hostInfo?: McpAppHostInfo;\n  /** Delivered to the widget on initialize and pushed via `notifications/host_context/changed` on change. */\n  hostContext?: McpAppHostContext;\n  /** Rendered when no MCP app is on the part, or while load is in flight / failed (unless overridden). */\n  fallback?: ReactNode;\n  /** Rendered while the resource is loading. Defaults to `fallback`. */\n  loadingFallback?: ReactNode;\n  /** Rendered when the resource load rejects. Defaults to `fallback`. */\n  errorFallback?: ReactNode | ((error: Error) => ReactNode);\n};\n\ntype LoadedResourceState = {\n  resourceUri: string;\n  resource?: McpAppResource;\n  error?: Error;\n};\n\nfunction getInput(part: {\n  status: { type: string };\n  argsText: string;\n  args: unknown;\n}): unknown {\n  if (\n    part.status.type === \"running\" &&\n    (part.argsText === \"\" || part.argsText === \"{}\")\n  ) {\n    return undefined;\n  }\n  return part.args;\n}\n\nconst defaultOpenLink = ({ url }: { url: string }) => {\n  window.open(url, \"_blank\", \"noopener,noreferrer\");\n};\n\nfunction extractSendMessageText(params: unknown): string | undefined {\n  if (typeof params === \"string\") return params;\n  if (!params || typeof params !== \"object\") return undefined;\n  const obj = params as Record<string, unknown>;\n  if (typeof obj[\"prompt\"] === \"string\") return obj[\"prompt\"];\n  if (typeof obj[\"text\"] === \"string\") return obj[\"text\"];\n  if (typeof obj[\"message\"] === \"string\") return obj[\"message\"];\n  return undefined;\n}\n\nfunction InlineRenderer({\n  part,\n  internalsRef,\n  optionsRef,\n}: {\n  part: ToolCallMessagePartProps;\n  internalsRef: MutableRefObject<{ host: McpAppsHost }>;\n  optionsRef: MutableRefObject<McpAppRendererOptions>;\n}) {\n  const opts = optionsRef.current;\n  const aui = useAui();\n  const app = getMcpAppFromToolPart(part);\n  const cachedAppRef = useRef<McpAppMetadata | undefined>(undefined);\n  if (app != null && cachedAppRef.current?.resourceUri !== app.resourceUri) {\n    cachedAppRef.current = app;\n  }\n  const appForRender = app ?? cachedAppRef.current;\n\n  const [loadedResource, setLoadedResource] = useState<LoadedResourceState>();\n\n  const resourceUri = appForRender?.resourceUri;\n  useEffect(() => {\n    if (appForRender == null || resourceUri == null) return;\n    let cancelled = false;\n    const targetUri = resourceUri;\n\n    internalsRef.current.host\n      .loadResource({ uri: targetUri })\n      .then((res) => {\n        if (!cancelled)\n          setLoadedResource({ resourceUri: targetUri, resource: res });\n      })\n      .catch((error: unknown) => {\n        if (!cancelled) {\n          setLoadedResource({\n            resourceUri: targetUri,\n            error: error instanceof Error ? error : new Error(String(error)),\n          });\n        }\n      });\n\n    return () => {\n      cancelled = true;\n    };\n    // oxlint-disable-next-line react/exhaustive-deps -- re-fetch only when URI changes; appForRender identity is unstable and internalsRef is a stable ref\n  }, [resourceUri]);\n\n  const bridgeHandlers = useMemo<McpAppBridgeHandlers>(\n    () => ({\n      openLink: defaultOpenLink,\n      sendMessage: (params) => {\n        const text = extractSendMessageText(params);\n        if (!text) return { ok: false, reason: \"unrecognised params shape\" };\n        aui.thread().append({ content: [{ type: \"text\", text }] });\n        return { ok: true };\n      },\n      callTool: (params) => internalsRef.current.host.callTool(params),\n      readResource: (params) => internalsRef.current.host.readResource(params),\n      listResources: (params) =>\n        internalsRef.current.host.listResources(params),\n    }),\n    [aui, internalsRef],\n  );\n\n  const loadedResourceForApp =\n    loadedResource?.resourceUri === appForRender?.resourceUri\n      ? loadedResource\n      : undefined;\n  const appResource = loadedResourceForApp?.resource;\n  const error = loadedResourceForApp?.error;\n\n  const fallback = opts.fallback ?? null;\n  if (appForRender == null) {\n    return <>{fallback}</>;\n  }\n  if (error != null) {\n    const errorFallback = opts.errorFallback;\n    if (errorFallback === undefined) return <>{fallback}</>;\n    if (typeof errorFallback === \"function\") return <>{errorFallback(error)}</>;\n    return <>{errorFallback}</>;\n  }\n  if (appResource == null) {\n    return <>{opts.loadingFallback ?? fallback}</>;\n  }\n\n  return (\n    <McpAppFrame\n      app={appForRender}\n      resource={appResource}\n      input={getInput(part)}\n      output={part.result}\n      sandbox={opts.sandbox}\n      handlers={bridgeHandlers}\n      hostInfo={opts.hostInfo}\n      hostContext={opts.hostContext}\n      maxHeight={opts.maxHeight}\n    />\n  );\n}\n\n/**\n * Creates a tool-call renderer for MCP Apps embedded in assistant messages.\n *\n * Compose this into the `Tools` resource through its `mcpApp` option. When a\n * tool-call part carries `mcp.app` metadata for a `ui://` resource, the\n * renderer loads that resource from the configured host and displays it in a\n * sandboxed frame.\n */\nexport const McpAppRenderer = resource(function McpAppRenderer(\n  options: McpAppRendererOptions,\n): { readonly render: ToolCallMessagePartComponent } {\n  const host = useResource(options.host);\n\n  const optionsRef = useRef<McpAppRendererOptions>(options);\n  optionsRef.current = options;\n\n  const internalsRef = useRef<{ host: McpAppsHost }>({ host });\n  internalsRef.current = { host };\n\n  const render = useMemo((): ToolCallMessagePartComponent => {\n    const Render: ToolCallMessagePartComponent = (props) => (\n      <InlineRenderer\n        part={props}\n        internalsRef={internalsRef}\n        optionsRef={optionsRef}\n      />\n    );\n    Render.displayName = \"McpAppRenderer\";\n    return Render;\n  }, []);\n\n  return { render };\n});\n"],"mappings":";;;;;;;;AA6DA,SAAS,SAAS,MAIN;CACV,IACE,KAAK,OAAO,SAAS,cACpB,KAAK,aAAa,MAAM,KAAK,aAAa,OAE3C;CAEF,OAAO,KAAK;AACd;AAEA,MAAM,mBAAmB,EAAE,UAA2B;CACpD,OAAO,KAAK,KAAK,UAAU,qBAAqB;AAClD;AAEA,SAAS,uBAAuB,QAAqC;CACnE,IAAI,OAAO,WAAW,UAAU,OAAO;CACvC,IAAI,CAAC,UAAU,OAAO,WAAW,UAAU,OAAO,KAAA;CAClD,MAAM,MAAM;CACZ,IAAI,OAAO,IAAI,cAAc,UAAU,OAAO,IAAI;CAClD,IAAI,OAAO,IAAI,YAAY,UAAU,OAAO,IAAI;CAChD,IAAI,OAAO,IAAI,eAAe,UAAU,OAAO,IAAI;AAErD;AAEA,SAAS,eAAe,EACtB,MACA,cACA,cAKC;CACD,MAAM,OAAO,WAAW;CACxB,MAAM,MAAM,OAAO;CACnB,MAAM,MAAM,sBAAsB,IAAI;CACtC,MAAM,eAAe,OAAmC,KAAA,CAAS;CACjE,IAAI,OAAO,QAAQ,aAAa,SAAS,gBAAgB,IAAI,aAC3D,aAAa,UAAU;CAEzB,MAAM,eAAe,OAAO,aAAa;CAEzC,MAAM,CAAC,gBAAgB,qBAAqB,SAA8B;CAE1E,MAAM,cAAc,cAAc;CAClC,gBAAgB;EACd,IAAI,gBAAgB,QAAQ,eAAe,MAAM;EACjD,IAAI,YAAY;EAChB,MAAM,YAAY;EAElB,aAAa,QAAQ,KAClB,aAAa,EAAE,KAAK,UAAU,CAAC,CAAC,CAChC,MAAM,QAAQ;GACb,IAAI,CAAC,WACH,kBAAkB;IAAE,aAAa;IAAW,UAAU;GAAI,CAAC;EAC/D,CAAC,CAAC,CACD,OAAO,UAAmB;GACzB,IAAI,CAAC,WACH,kBAAkB;IAChB,aAAa;IACb,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;GACjE,CAAC;EAEL,CAAC;EAEH,aAAa;GACX,YAAY;EACd;CAEF,GAAG,CAAC,WAAW,CAAC;CAEhB,MAAM,iBAAiB,eACd;EACL,UAAU;EACV,cAAc,WAAW;GACvB,MAAM,OAAO,uBAAuB,MAAM;GAC1C,IAAI,CAAC,MAAM,OAAO;IAAE,IAAI;IAAO,QAAQ;GAA4B;GACnE,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC;IAAE,MAAM;IAAQ;GAAK,CAAC,EAAE,CAAC;GACzD,OAAO,EAAE,IAAI,KAAK;EACpB;EACA,WAAW,WAAW,aAAa,QAAQ,KAAK,SAAS,MAAM;EAC/D,eAAe,WAAW,aAAa,QAAQ,KAAK,aAAa,MAAM;EACvE,gBAAgB,WACd,aAAa,QAAQ,KAAK,cAAc,MAAM;CAClD,IACA,CAAC,KAAK,YAAY,CACpB;CAEA,MAAM,uBACJ,gBAAgB,gBAAgB,cAAc,cAC1C,iBACA,KAAA;CACN,MAAM,cAAc,sBAAsB;CAC1C,MAAM,QAAQ,sBAAsB;CAEpC,MAAM,WAAW,KAAK,YAAY;CAClC,IAAI,gBAAgB,MAClB,OAAO,oBAAA,UAAA,EAAA,UAAG,SAAW,CAAA;CAEvB,IAAI,SAAS,MAAM;EACjB,MAAM,gBAAgB,KAAK;EAC3B,IAAI,kBAAkB,KAAA,GAAW,OAAO,oBAAA,UAAA,EAAA,UAAG,SAAW,CAAA;EACtD,IAAI,OAAO,kBAAkB,YAAY,OAAO,oBAAA,UAAA,EAAA,UAAG,cAAc,KAAK,EAAI,CAAA;EAC1E,OAAO,oBAAA,UAAA,EAAA,UAAG,cAAgB,CAAA;CAC5B;CACA,IAAI,eAAe,MACjB,OAAO,oBAAA,UAAA,EAAA,UAAG,KAAK,mBAAmB,SAAW,CAAA;CAG/C,OACE,oBAAC,aAAD;EACE,KAAK;EACL,UAAU;EACV,OAAO,SAAS,IAAI;EACpB,QAAQ,KAAK;EACb,SAAS,KAAK;EACd,UAAU;EACV,UAAU,KAAK;EACf,aAAa,KAAK;EAClB,WAAW,KAAK;CACjB,CAAA;AAEL;;;;;;;;;AAUA,MAAa,iBAAiB,SAAS,SAAS,eAC9C,SACmD;CACnD,MAAM,OAAO,YAAY,QAAQ,IAAI;CAErC,MAAM,aAAa,OAA8B,OAAO;CACxD,WAAW,UAAU;CAErB,MAAM,eAAe,OAA8B,EAAE,KAAK,CAAC;CAC3D,aAAa,UAAU,EAAE,KAAK;CAc9B,OAAO,EAAE,QAZM,cAA4C;EACzD,MAAM,UAAwC,UAC5C,oBAAC,gBAAD;GACE,MAAM;GACQ;GACF;EACb,CAAA;EAEH,OAAO,cAAc;EACrB,OAAO;CACT,GAAG,CAAC,CAEU,EAAE;AAClB,CAAC"}

package/dist/mcp-apps/McpAppsRemoteHost.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"McpAppsRemoteHost.d.ts","names":[],"sources":["../../src/mcp-apps/McpAppsRemoteHost.ts"],"mappings":";;;;;AAmCA;;;;;cAAa,iBAAA,GAAiB,KAAA,EAAA,wBAAA,iCAAA,eAAA,CAAA,WAAA,EAAA,wBAAA"}
+{"version":3,"file":"McpAppsRemoteHost.d.ts","names":[],"sources":["../../src/mcp-apps/McpAppsRemoteHost.ts"],"mappings":";;;;;AAoCA;;;;;cAAa,iBAAA,GAAiB,KAAA,EAAA,wBAAA,iCAAA,eAAA,CAAA,WAAA,EAAA,wBAAA"}

package/dist/mcp-apps/McpAppsRemoteHost.js

@@ -1,4 +1,5 @@
-import { resource, tapConst, tapRef } from "@assistant-ui/tap";
+import { useMemo, useRef } from "@assistant-ui/tap/react-shim";
+import { resource } from "@assistant-ui/tap";
 //#region src/mcp-apps/McpAppsRemoteHost.ts
 async function postToHost(options, method, params) {
 	const doFetch = options.fetch ?? fetch;
@@ -24,10 +25,10 @@ async function postToHost(options, method, params) {
 * params }`, using the method names expected by the assistant-ui MCP Apps
 * guide.
 */
-const McpAppsRemoteHost = resource((options) => {
-	const optionsRef = tapRef(options);
+const McpAppsRemoteHost = resource(function McpAppsRemoteHost(options) {
+	const optionsRef = useRef(options);
 	optionsRef.current = options;
-	return tapConst(() => ({
+	return useMemo(() => ({
 		loadResource: (params) => postToHost(optionsRef.current, "mcp-apps/read-resource", params),
 		callTool: (params) => postToHost(optionsRef.current, "tools/call", params),
 		readResource: (params) => postToHost(optionsRef.current, "resources/read", params),

package/dist/mcp-apps/McpAppsRemoteHost.js.map

@@ -1 +1 @@
-{"version":3,"file":"McpAppsRemoteHost.js","names":[],"sources":["../../src/mcp-apps/McpAppsRemoteHost.ts"],"sourcesContent":["import { resource, tapConst, tapRef } from \"@assistant-ui/tap\";\nimport type {\n  McpAppResource,\n  McpAppsHost,\n  McpAppsRemoteHostOptions,\n} from \"./types\";\n\nasync function postToHost(\n  options: McpAppsRemoteHostOptions,\n  method: string,\n  params: unknown,\n): Promise<unknown> {\n  const doFetch = options.fetch ?? fetch;\n  const extraHeaders =\n    typeof options.headers === \"function\"\n      ? await options.headers()\n      : (options.headers ?? {});\n  const res = await doFetch(options.url, {\n    method: \"POST\",\n    headers: { \"content-type\": \"application/json\", ...extraHeaders },\n    body: JSON.stringify({ method, params }),\n  });\n  if (!res.ok) {\n    throw new Error(`MCP App host request failed: ${res.status}`);\n  }\n  return res.json();\n}\n\n/**\n * Creates the default HTTP host for MCP App widgets.\n *\n * The host POSTs widget requests to the configured route as `{ method,\n * params }`, using the method names expected by the assistant-ui MCP Apps\n * guide.\n */\nexport const McpAppsRemoteHost = resource(\n  (options: McpAppsRemoteHostOptions): McpAppsHost => {\n    const optionsRef = tapRef(options);\n    optionsRef.current = options;\n\n    return tapConst(\n      (): McpAppsHost => ({\n        loadResource: (params) =>\n          postToHost(\n            optionsRef.current,\n            \"mcp-apps/read-resource\",\n            params,\n          ) as Promise<McpAppResource>,\n        callTool: (params) =>\n          postToHost(optionsRef.current, \"tools/call\", params),\n        readResource: (params) =>\n          postToHost(optionsRef.current, \"resources/read\", params),\n        listResources: (params) =>\n          postToHost(optionsRef.current, \"resources/list\", params),\n      }),\n      [],\n    );\n  },\n);\n"],"mappings":";;AAOA,eAAe,WACb,SACA,QACA,QACkB;CAClB,MAAM,UAAU,QAAQ,SAAS;CACjC,MAAM,eACJ,OAAO,QAAQ,YAAY,aACvB,MAAM,QAAQ,QAAQ,IACrB,QAAQ,WAAW,CAAC;CAC3B,MAAM,MAAM,MAAM,QAAQ,QAAQ,KAAK;EACrC,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG;EAAa;EAC/D,MAAM,KAAK,UAAU;GAAE;GAAQ;EAAO,CAAC;CACzC,CAAC;CACD,IAAI,CAAC,IAAI,IACP,MAAM,IAAI,MAAM,gCAAgC,IAAI,QAAQ;CAE9D,OAAO,IAAI,KAAK;AAClB;;;;;;;;AASA,MAAa,oBAAoB,UAC9B,YAAmD;CAClD,MAAM,aAAa,OAAO,OAAO;CACjC,WAAW,UAAU;CAErB,OAAO,gBACe;EAClB,eAAe,WACb,WACE,WAAW,SACX,0BACA,MACF;EACF,WAAW,WACT,WAAW,WAAW,SAAS,cAAc,MAAM;EACrD,eAAe,WACb,WAAW,WAAW,SAAS,kBAAkB,MAAM;EACzD,gBAAgB,WACd,WAAW,WAAW,SAAS,kBAAkB,MAAM;CAC3D,IACA,CAAC,CACH;AACF,CACF"}
+{"version":3,"file":"McpAppsRemoteHost.js","names":[],"sources":["../../src/mcp-apps/McpAppsRemoteHost.ts"],"sourcesContent":["import { useMemo, useRef } from \"react\";\nimport { resource } from \"@assistant-ui/tap\";\nimport type {\n  McpAppResource,\n  McpAppsHost,\n  McpAppsRemoteHostOptions,\n} from \"./types\";\n\nasync function postToHost(\n  options: McpAppsRemoteHostOptions,\n  method: string,\n  params: unknown,\n): Promise<unknown> {\n  const doFetch = options.fetch ?? fetch;\n  const extraHeaders =\n    typeof options.headers === \"function\"\n      ? await options.headers()\n      : (options.headers ?? {});\n  const res = await doFetch(options.url, {\n    method: \"POST\",\n    headers: { \"content-type\": \"application/json\", ...extraHeaders },\n    body: JSON.stringify({ method, params }),\n  });\n  if (!res.ok) {\n    throw new Error(`MCP App host request failed: ${res.status}`);\n  }\n  return res.json();\n}\n\n/**\n * Creates the default HTTP host for MCP App widgets.\n *\n * The host POSTs widget requests to the configured route as `{ method,\n * params }`, using the method names expected by the assistant-ui MCP Apps\n * guide.\n */\nexport const McpAppsRemoteHost = resource(function McpAppsRemoteHost(\n  options: McpAppsRemoteHostOptions,\n): McpAppsHost {\n  const optionsRef = useRef(options);\n  optionsRef.current = options;\n\n  return useMemo(\n    (): McpAppsHost => ({\n      loadResource: (params) =>\n        postToHost(\n          optionsRef.current,\n          \"mcp-apps/read-resource\",\n          params,\n        ) as Promise<McpAppResource>,\n      callTool: (params) =>\n        postToHost(optionsRef.current, \"tools/call\", params),\n      readResource: (params) =>\n        postToHost(optionsRef.current, \"resources/read\", params),\n      listResources: (params) =>\n        postToHost(optionsRef.current, \"resources/list\", params),\n    }),\n    [],\n  );\n});\n"],"mappings":";;;AAQA,eAAe,WACb,SACA,QACA,QACkB;CAClB,MAAM,UAAU,QAAQ,SAAS;CACjC,MAAM,eACJ,OAAO,QAAQ,YAAY,aACvB,MAAM,QAAQ,QAAQ,IACrB,QAAQ,WAAW,CAAC;CAC3B,MAAM,MAAM,MAAM,QAAQ,QAAQ,KAAK;EACrC,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG;EAAa;EAC/D,MAAM,KAAK,UAAU;GAAE;GAAQ;EAAO,CAAC;CACzC,CAAC;CACD,IAAI,CAAC,IAAI,IACP,MAAM,IAAI,MAAM,gCAAgC,IAAI,QAAQ;CAE9D,OAAO,IAAI,KAAK;AAClB;;;;;;;;AASA,MAAa,oBAAoB,SAAS,SAAS,kBACjD,SACa;CACb,MAAM,aAAa,OAAO,OAAO;CACjC,WAAW,UAAU;CAErB,OAAO,eACe;EAClB,eAAe,WACb,WACE,WAAW,SACX,0BACA,MACF;EACF,WAAW,WACT,WAAW,WAAW,SAAS,cAAc,MAAM;EACrD,eAAe,WACb,WAAW,WAAW,SAAS,kBAAkB,MAAM;EACzD,gBAAgB,WACd,WAAW,WAAW,SAAS,kBAAkB,MAAM;CAC3D,IACA,CAAC,CACH;AACF,CAAC"}

package/dist/mcp-apps/app-frame.d.ts

@@ -11,7 +11,7 @@ declare function McpAppFrame({
   hostInfo,
   hostContext,
   maxHeight
-}: McpAppFrameProps): import("react/jsx-runtime").JSX.Element;
+}: McpAppFrameProps): import("react").JSX.Element;
 //#endregion
 export { McpAppFrame };
 //# sourceMappingURL=app-frame.d.ts.map

package/dist/mcp-apps/app-frame.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-frame.d.ts","names":[],"sources":["../../src/mcp-apps/app-frame.tsx"],"mappings":";;;iBA2FgB,WAAA;EACd,GAAA;EACA,QAAA;EACA,KAAA;EACA,MAAA;EACA,OAAA;EACA,QAAA;EACA,QAAA;EACA,WAAA;EACA;AAAA,GACC,gBAAA,+BAAgB,GAAA,CAAA,OAAA"}
+{"version":3,"file":"app-frame.d.ts","names":[],"sources":["../../src/mcp-apps/app-frame.tsx"],"mappings":";;;iBAgGgB,WAAA;EACd,GAAA;EACA,QAAA;EACA,KAAA;EACA,MAAA;EACA,OAAA;EACA,QAAA;EACA,QAAA;EACA,WAAA;EACA;AAAA,GACC,gBAAA,mBAAgB,GAAA,CAAA,OAAA"}

package/dist/mcp-apps/app-frame.js

@@ -1,8 +1,8 @@
 "use client";
 import { createMcpAppBridge } from "./bridge.js";
-import { useEffect, useRef, useState } from "react";
+import { SandboxHost } from "../sandbox-host/SandboxHost.js";
+import { useEffect, useRef } from "@assistant-ui/tap/react-shim";
 import { jsx } from "react/jsx-runtime";
-import { SafeContentFrame } from "safe-content-frame";
 //#region src/mcp-apps/app-frame.tsx
 const DEFAULT_PRODUCT = "assistant-ui-mcp-app";
 const INIT_TIMEOUT_MS = 5e3;
@@ -49,8 +49,6 @@ function buildLiveHandlers(initial, liveRef) {
 	return out;
 }
 function McpAppFrame({ app, resource, input, output, sandbox, handlers, hostInfo, hostContext, maxHeight = DEFAULT_MAX_HEIGHT }) {
-	const containerRef = useRef(null);
-	const [contentHeight, setContentHeight] = useState(void 0);
 	const bridgeRef = useRef(null);
 	const lastSentInputRef = useRef(void 0);
 	const lastSentOutputRef = useRef(void 0);
@@ -67,116 +65,96 @@ function McpAppFrame({ app, resource, input, output, sandbox, handlers, hostInfo
 		input,
 		output
 	};
-	const resourceUri = resource.uri;
-	useEffect(() => {
-		const container = containerRef.current;
-		if (!container) return;
-		let cancelled = false;
+	const createBridge = (frame, host) => {
+		const current = liveRef.current;
 		let initTimeoutId = null;
-		let frame = null;
-		const sb = sandbox;
-		const html = resource.html;
-		const scf = new SafeContentFrame(sb?.product ?? DEFAULT_PRODUCT, {
-			...sb?.sandbox !== void 0 && { sandbox: sb.sandbox },
-			...sb?.useShadowDom !== void 0 && { useShadowDom: sb.useShadowDom },
-			...sb?.enableBrowserCaching !== void 0 && { enableBrowserCaching: sb.enableBrowserCaching },
-			...sb?.salt !== void 0 && { salt: sb.salt }
-		});
-		const renderOpts = sb?.unsafeDocumentWrite !== void 0 ? { unsafeDocumentWrite: sb.unsafeDocumentWrite } : void 0;
-		scf.renderHtml(html, container, renderOpts).then((rendered) => {
-			if (cancelled) {
-				rendered.dispose();
-				return;
+		const flushPending = () => {
+			if (widgetReadyRef.current) return;
+			widgetReadyRef.current = true;
+			const b = bridgeRef.current;
+			if (!b) return;
+			if (pendingInputRef.current !== void 0) {
+				b.notifyToolInput(pendingInputRef.current);
+				lastSentInputRef.current = pendingInputRef.current;
+				pendingInputRef.current = void 0;
 			}
-			frame = rendered;
-			const current = liveRef.current;
-			const liveHandlers = buildLiveHandlers(current.handlers, liveRef);
-			const liveOnInitialized = liveHandlers.onInitialized;
-			const flushPending = () => {
-				if (widgetReadyRef.current) return;
-				widgetReadyRef.current = true;
-				const b = bridgeRef.current;
-				if (!b) return;
-				if (pendingInputRef.current !== void 0) {
-					b.notifyToolInput(pendingInputRef.current);
-					lastSentInputRef.current = pendingInputRef.current;
-					pendingInputRef.current = void 0;
-				}
-				if (pendingOutputRef.current !== void 0) {
-					b.notifyToolResult(pendingOutputRef.current);
-					lastSentOutputRef.current = pendingOutputRef.current;
-					pendingOutputRef.current = void 0;
-				}
-				if (pendingHostContextRef.current !== void 0) {
-					b.notifyHostContextChanged(pendingHostContextRef.current);
-					lastSentHostContextRef.current = pendingHostContextRef.current;
-					pendingHostContextRef.current = void 0;
-				}
-			};
-			const wrappedHandlers = {
-				...liveHandlers,
-				onInitialized: () => {
-					if (initTimeoutId !== null) {
-						clearTimeout(initTimeoutId);
-						initTimeoutId = null;
-					}
-					flushPending();
-					liveOnInitialized?.();
-				},
-				onSizeChange: (p) => {
-					if (typeof p.height === "number" && Number.isFinite(p.height) && p.height > 0) setContentHeight(p.height);
-					liveHandlers.onSizeChange?.(p);
+			if (pendingOutputRef.current !== void 0) {
+				b.notifyToolResult(pendingOutputRef.current);
+				lastSentOutputRef.current = pendingOutputRef.current;
+				pendingOutputRef.current = void 0;
+			}
+			if (pendingHostContextRef.current !== void 0) {
+				b.notifyHostContextChanged(pendingHostContextRef.current);
+				lastSentHostContextRef.current = pendingHostContextRef.current;
+				pendingHostContextRef.current = void 0;
+			}
+		};
+		const liveHandlers = buildLiveHandlers(current.handlers, liveRef);
+		const liveOnInitialized = liveHandlers.onInitialized;
+		const wrappedHandlers = {
+			...liveHandlers,
+			onInitialized: () => {
+				if (initTimeoutId !== null) {
+					clearTimeout(initTimeoutId);
+					initTimeoutId = null;
 				}
-			};
-			initTimeoutId = setTimeout(() => {
-				initTimeoutId = null;
 				flushPending();
-			}, INIT_TIMEOUT_MS);
-			bridgeRef.current = createMcpAppBridge({
-				frame: rendered,
-				handlers: wrappedHandlers,
-				hostInfo: current.hostInfo,
-				hostContext: current.hostContext
-			});
-			if (current.input !== void 0) pendingInputRef.current = current.input;
-			if (current.output !== void 0) pendingOutputRef.current = current.output;
-		}).catch((err) => {
-			liveRef.current.handlers?.onError?.(err instanceof Error ? err : new Error(String(err)));
+				liveOnInitialized?.();
+			},
+			onSizeChange: (p) => {
+				if (p.height != null) host.setHeight(p.height);
+				liveHandlers.onSizeChange?.(p);
+			}
+		};
+		initTimeoutId = setTimeout(() => {
+			initTimeoutId = null;
+			flushPending();
+		}, INIT_TIMEOUT_MS);
+		const bridge = createMcpAppBridge({
+			frame,
+			handlers: wrappedHandlers,
+			hostInfo: current.hostInfo,
+			hostContext: current.hostContext
 		});
-		return () => {
-			cancelled = true;
-			if (initTimeoutId !== null) {
-				clearTimeout(initTimeoutId);
-				initTimeoutId = null;
+		bridgeRef.current = bridge;
+		if (current.input !== void 0) pendingInputRef.current = current.input;
+		if (current.output !== void 0) pendingOutputRef.current = current.output;
+		return {
+			onMessage: bridge.onMessage,
+			dispose: () => {
+				if (initTimeoutId !== null) {
+					clearTimeout(initTimeoutId);
+					initTimeoutId = null;
+				}
+				bridge.dispose();
+				bridgeRef.current = null;
+				lastSentInputRef.current = void 0;
+				lastSentOutputRef.current = void 0;
+				lastSentHostContextRef.current = void 0;
+				widgetReadyRef.current = false;
+				pendingInputRef.current = void 0;
+				pendingOutputRef.current = void 0;
+				pendingHostContextRef.current = void 0;
 			}
-			bridgeRef.current?.dispose();
-			bridgeRef.current = null;
-			frame?.dispose();
-			frame = null;
-			lastSentInputRef.current = void 0;
-			lastSentOutputRef.current = void 0;
-			lastSentHostContextRef.current = void 0;
-			widgetReadyRef.current = false;
-			pendingInputRef.current = void 0;
-			pendingOutputRef.current = void 0;
-			pendingHostContextRef.current = void 0;
-			setContentHeight(void 0);
 		};
-	}, [resourceUri]);
+	};
 	useBridgeNotify(input, bridgeRef, widgetReadyRef, pendingInputRef, lastSentInputRef, (b, v) => b.notifyToolInput(v));
 	useBridgeNotify(output, bridgeRef, widgetReadyRef, pendingOutputRef, lastSentOutputRef, (b, v) => b.notifyToolResult(v));
 	useBridgeNotify(hostContext, bridgeRef, widgetReadyRef, pendingHostContextRef, lastSentHostContextRef, (b, v) => b.notifyHostContextChanged(v));
-	const resolvedHeight = contentHeight != null ? Math.min(contentHeight, maxHeight) : void 0;
-	const mergedStyle = resolvedHeight != null ? {
-		...sandbox?.style,
-		height: resolvedHeight
-	} : sandbox?.style;
-	return /* @__PURE__ */ jsx("div", {
-		ref: containerRef,
-		className: sandbox?.className,
-		style: mergedStyle,
-		"data-mcp-app-resource": app.resourceUri,
-		"data-mcp-app-prefers-border": resource.meta?.prefersBorder ? "" : void 0
+	return /* @__PURE__ */ jsx(SandboxHost, {
+		content: { html: resource.html },
+		contentKey: resource.uri,
+		sandbox: {
+			...sandbox,
+			product: sandbox?.product ?? DEFAULT_PRODUCT
+		},
+		maxHeight,
+		createBridge,
+		onError: (err) => liveRef.current.handlers?.onError?.(err),
+		containerProps: {
+			"data-mcp-app-resource": app.resourceUri,
+			"data-mcp-app-prefers-border": resource.meta?.prefersBorder ? "" : void 0
+		}
 	});
 }
 //#endregion

package/dist/mcp-apps/app-frame.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-frame.js","names":[],"sources":["../../src/mcp-apps/app-frame.tsx"],"sourcesContent":["\"use client\";\n\nimport { type MutableRefObject, useEffect, useRef, useState } from \"react\";\nimport { type RenderedFrame, SafeContentFrame } from \"safe-content-frame\";\nimport { type McpAppBridge, createMcpAppBridge } from \"./bridge\";\nimport type {\n  McpAppBridgeHandlers,\n  McpAppFrameProps,\n  McpAppHostContext,\n} from \"./types\";\n\nconst DEFAULT_PRODUCT = \"assistant-ui-mcp-app\";\nconst INIT_TIMEOUT_MS = 5000;\nconst DEFAULT_MAX_HEIGHT = 800;\n\nfunction useBridgeNotify<T>(\n  value: T | undefined,\n  bridgeRef: MutableRefObject<McpAppBridge | null>,\n  widgetReadyRef: MutableRefObject<boolean>,\n  pendingRef: MutableRefObject<T | undefined>,\n  lastSentRef: MutableRefObject<T | undefined>,\n  notify: (bridge: McpAppBridge, v: T) => void,\n) {\n  useEffect(() => {\n    if (!bridgeRef.current) return;\n    if (value === undefined) return;\n    if (lastSentRef.current === value) return;\n    if (!widgetReadyRef.current) {\n      pendingRef.current = value;\n      return;\n    }\n    notify(bridgeRef.current, value);\n    lastSentRef.current = value;\n    // oxlint-disable-next-line tap-hooks/exhaustive-deps -- refs are stable; notify is assumed stable; re-run only when value changes\n  }, [value]);\n}\n\ntype LiveSnapshot = {\n  handlers: McpAppBridgeHandlers | undefined;\n  hostInfo: McpAppFrameProps[\"hostInfo\"];\n  hostContext: McpAppFrameProps[\"hostContext\"];\n  input: unknown;\n  output: unknown;\n};\n\n// Proxy each per-call handler through liveRef so the bridge always dispatches\n// to the latest handler reference (e.g. inline callbacks closing over state).\n// Capability presence is snapshot at mount: a handler added later requires a\n// remount (keyed on resource URI) to expose the capability to the widget.\nfunction buildLiveHandlers(\n  initial: McpAppBridgeHandlers | undefined,\n  liveRef: { readonly current: LiveSnapshot },\n): McpAppBridgeHandlers {\n  const live = () => liveRef.current.handlers;\n  const has = <K extends keyof McpAppBridgeHandlers>(key: K) =>\n    initial?.[key] !== undefined;\n  const out: McpAppBridgeHandlers = {};\n  if (has(\"allowedTools\")) {\n    Object.defineProperty(out, \"allowedTools\", {\n      get: () => live()?.allowedTools,\n      enumerable: true,\n      configurable: true,\n    });\n  }\n  const liveCall = <K extends keyof McpAppBridgeHandlers>(\n    key: K,\n  ): NonNullable<McpAppBridgeHandlers[K]> =>\n    ((p: unknown) => {\n      const fn = live()?.[key] as ((p: unknown) => unknown) | undefined;\n      if (!fn) {\n        throw new Error(`${key} handler is no longer available`);\n      }\n      return fn(p);\n    }) as NonNullable<McpAppBridgeHandlers[K]>;\n  if (has(\"callTool\")) out.callTool = liveCall(\"callTool\");\n  if (has(\"readResource\")) out.readResource = liveCall(\"readResource\");\n  if (has(\"listResources\")) out.listResources = liveCall(\"listResources\");\n  if (has(\"openLink\")) out.openLink = liveCall(\"openLink\");\n  if (has(\"sendMessage\")) out.sendMessage = liveCall(\"sendMessage\");\n  if (has(\"updateModelContext\"))\n    out.updateModelContext = liveCall(\"updateModelContext\");\n  if (has(\"requestDisplayMode\"))\n    out.requestDisplayMode = liveCall(\"requestDisplayMode\");\n  out.onSizeChange = (p) => live()?.onSizeChange?.(p);\n  out.onInitialized = () => live()?.onInitialized?.();\n  out.onRequestTeardown = (p) => live()?.onRequestTeardown?.(p);\n  out.onLog = (p) => live()?.onLog?.(p);\n  out.onError = (e) => live()?.onError?.(e);\n  return out;\n}\n\nexport function McpAppFrame({\n  app,\n  resource,\n  input,\n  output,\n  sandbox,\n  handlers,\n  hostInfo,\n  hostContext,\n  maxHeight = DEFAULT_MAX_HEIGHT,\n}: McpAppFrameProps) {\n  const containerRef = useRef<HTMLDivElement>(null);\n  const [contentHeight, setContentHeight] = useState<number | undefined>(\n    undefined,\n  );\n  const bridgeRef = useRef<McpAppBridge | null>(null);\n  const lastSentInputRef = useRef<unknown>(undefined);\n  const lastSentOutputRef = useRef<unknown>(undefined);\n  const lastSentHostContextRef = useRef<McpAppHostContext | undefined>(\n    undefined,\n  );\n  // Per MCP Apps spec, the host should defer notifications until the widget\n  // signals readiness via `notifications/initialized`. Until then, we record\n  // pending values and flush them on init.\n  const widgetReadyRef = useRef(false);\n  const pendingInputRef = useRef<unknown>(undefined);\n  const pendingOutputRef = useRef<unknown>(undefined);\n  const pendingHostContextRef = useRef<McpAppHostContext | undefined>(\n    undefined,\n  );\n\n  const liveRef = useRef<LiveSnapshot>(null!);\n  liveRef.current = {\n    handlers,\n    hostInfo,\n    hostContext,\n    input,\n    output,\n  };\n\n  const resourceUri = resource.uri;\n\n  useEffect(() => {\n    const container = containerRef.current;\n    if (!container) return;\n\n    let cancelled = false;\n    let initTimeoutId: ReturnType<typeof setTimeout> | null = null;\n    let frame: RenderedFrame | null = null;\n    const sb = sandbox;\n    const html = resource.html;\n\n    const scf = new SafeContentFrame(sb?.product ?? DEFAULT_PRODUCT, {\n      ...(sb?.sandbox !== undefined && { sandbox: sb.sandbox }),\n      ...(sb?.useShadowDom !== undefined && { useShadowDom: sb.useShadowDom }),\n      ...(sb?.enableBrowserCaching !== undefined && {\n        enableBrowserCaching: sb.enableBrowserCaching,\n      }),\n      ...(sb?.salt !== undefined && { salt: sb.salt }),\n    });\n\n    const renderOpts =\n      sb?.unsafeDocumentWrite !== undefined\n        ? { unsafeDocumentWrite: sb.unsafeDocumentWrite }\n        : undefined;\n\n    scf\n      .renderHtml(html, container, renderOpts)\n      .then((rendered) => {\n        if (cancelled) {\n          rendered.dispose();\n          return;\n        }\n        frame = rendered;\n        const current = liveRef.current;\n        const liveHandlers = buildLiveHandlers(current.handlers, liveRef);\n        const liveOnInitialized = liveHandlers.onInitialized;\n        const flushPending = () => {\n          if (widgetReadyRef.current) return;\n          widgetReadyRef.current = true;\n          const b = bridgeRef.current;\n          if (!b) return;\n          if (pendingInputRef.current !== undefined) {\n            b.notifyToolInput(pendingInputRef.current);\n            lastSentInputRef.current = pendingInputRef.current;\n            pendingInputRef.current = undefined;\n          }\n          if (pendingOutputRef.current !== undefined) {\n            b.notifyToolResult(pendingOutputRef.current);\n            lastSentOutputRef.current = pendingOutputRef.current;\n            pendingOutputRef.current = undefined;\n          }\n          if (pendingHostContextRef.current !== undefined) {\n            b.notifyHostContextChanged(pendingHostContextRef.current);\n            lastSentHostContextRef.current = pendingHostContextRef.current;\n            pendingHostContextRef.current = undefined;\n          }\n        };\n        const wrappedHandlers: McpAppBridgeHandlers = {\n          ...liveHandlers,\n          onInitialized: () => {\n            if (initTimeoutId !== null) {\n              clearTimeout(initTimeoutId);\n              initTimeoutId = null;\n            }\n            flushPending();\n            liveOnInitialized?.();\n          },\n          onSizeChange: (p) => {\n            if (\n              typeof p.height === \"number\" &&\n              Number.isFinite(p.height) &&\n              p.height > 0\n            ) {\n              setContentHeight(p.height);\n            }\n            liveHandlers.onSizeChange?.(p);\n          },\n        };\n        // Safety net: if the widget never sends notifications/initialized\n        // (broken or non-spec-compliant), flush the queue anyway so the host\n        // doesn't appear hung.\n        initTimeoutId = setTimeout(() => {\n          initTimeoutId = null;\n          flushPending();\n        }, INIT_TIMEOUT_MS);\n        bridgeRef.current = createMcpAppBridge({\n          frame: rendered,\n          handlers: wrappedHandlers,\n          hostInfo: current.hostInfo,\n          hostContext: current.hostContext,\n        });\n\n        if (current.input !== undefined)\n          pendingInputRef.current = current.input;\n        if (current.output !== undefined)\n          pendingOutputRef.current = current.output;\n        // hostContext is delivered inside the ui/initialize response; subsequent\n        // changes flow through useBridgeNotify's pending path.\n      })\n      .catch((err) => {\n        liveRef.current.handlers?.onError?.(\n          err instanceof Error ? err : new Error(String(err)),\n        );\n      });\n\n    return () => {\n      cancelled = true;\n      if (initTimeoutId !== null) {\n        clearTimeout(initTimeoutId);\n        initTimeoutId = null;\n      }\n      bridgeRef.current?.dispose();\n      bridgeRef.current = null;\n      frame?.dispose();\n      frame = null;\n      lastSentInputRef.current = undefined;\n      lastSentOutputRef.current = undefined;\n      lastSentHostContextRef.current = undefined;\n      widgetReadyRef.current = false;\n      pendingInputRef.current = undefined;\n      pendingOutputRef.current = undefined;\n      pendingHostContextRef.current = undefined;\n      setContentHeight(undefined);\n    };\n    // oxlint-disable-next-line tap-hooks/exhaustive-deps -- re-mount only on resource URI change; live values flow through liveRef\n  }, [resourceUri]);\n\n  useBridgeNotify(\n    input,\n    bridgeRef,\n    widgetReadyRef,\n    pendingInputRef,\n    lastSentInputRef,\n    (b, v) => b.notifyToolInput(v),\n  );\n  useBridgeNotify(\n    output,\n    bridgeRef,\n    widgetReadyRef,\n    pendingOutputRef,\n    lastSentOutputRef,\n    (b, v) => b.notifyToolResult(v),\n  );\n  useBridgeNotify(\n    hostContext,\n    bridgeRef,\n    widgetReadyRef,\n    pendingHostContextRef,\n    lastSentHostContextRef,\n    (b, v) => b.notifyHostContextChanged(v),\n  );\n\n  const resolvedHeight =\n    contentHeight != null ? Math.min(contentHeight, maxHeight) : undefined;\n  const mergedStyle =\n    resolvedHeight != null\n      ? { ...sandbox?.style, height: resolvedHeight }\n      : sandbox?.style;\n\n  return (\n    <div\n      ref={containerRef}\n      className={sandbox?.className}\n      style={mergedStyle}\n      data-mcp-app-resource={app.resourceUri}\n      data-mcp-app-prefers-border={\n        resource.meta?.prefersBorder ? \"\" : undefined\n      }\n    />\n  );\n}\n"],"mappings":";;;;;;AAWA,MAAM,kBAAkB;AACxB,MAAM,kBAAkB;AACxB,MAAM,qBAAqB;AAE3B,SAAS,gBACP,OACA,WACA,gBACA,YACA,aACA,QACA;CACA,gBAAgB;EACd,IAAI,CAAC,UAAU,SAAS;EACxB,IAAI,UAAU,KAAA,GAAW;EACzB,IAAI,YAAY,YAAY,OAAO;EACnC,IAAI,CAAC,eAAe,SAAS;GAC3B,WAAW,UAAU;GACrB;EACF;EACA,OAAO,UAAU,SAAS,KAAK;EAC/B,YAAY,UAAU;CAExB,GAAG,CAAC,KAAK,CAAC;AACZ;AAcA,SAAS,kBACP,SACA,SACsB;CACtB,MAAM,aAAa,QAAQ,QAAQ;CACnC,MAAM,OAA6C,QACjD,UAAU,SAAS,KAAA;CACrB,MAAM,MAA4B,CAAC;CACnC,IAAI,IAAI,cAAc,GACpB,OAAO,eAAe,KAAK,gBAAgB;EACzC,WAAW,KAAK,GAAG;EACnB,YAAY;EACZ,cAAc;CAChB,CAAC;CAEH,MAAM,YACJ,UAEE,MAAe;EACf,MAAM,KAAK,KAAK,IAAI;EACpB,IAAI,CAAC,IACH,MAAM,IAAI,MAAM,GAAG,IAAI,gCAAgC;EAEzD,OAAO,GAAG,CAAC;CACb;CACF,IAAI,IAAI,UAAU,GAAG,IAAI,WAAW,SAAS,UAAU;CACvD,IAAI,IAAI,cAAc,GAAG,IAAI,eAAe,SAAS,cAAc;CACnE,IAAI,IAAI,eAAe,GAAG,IAAI,gBAAgB,SAAS,eAAe;CACtE,IAAI,IAAI,UAAU,GAAG,IAAI,WAAW,SAAS,UAAU;CACvD,IAAI,IAAI,aAAa,GAAG,IAAI,cAAc,SAAS,aAAa;CAChE,IAAI,IAAI,oBAAoB,GAC1B,IAAI,qBAAqB,SAAS,oBAAoB;CACxD,IAAI,IAAI,oBAAoB,GAC1B,IAAI,qBAAqB,SAAS,oBAAoB;CACxD,IAAI,gBAAgB,MAAM,KAAK,GAAG,eAAe,CAAC;CAClD,IAAI,sBAAsB,KAAK,GAAG,gBAAgB;CAClD,IAAI,qBAAqB,MAAM,KAAK,GAAG,oBAAoB,CAAC;CAC5D,IAAI,SAAS,MAAM,KAAK,GAAG,QAAQ,CAAC;CACpC,IAAI,WAAW,MAAM,KAAK,GAAG,UAAU,CAAC;CACxC,OAAO;AACT;AAEA,SAAgB,YAAY,EAC1B,KACA,UACA,OACA,QACA,SACA,UACA,UACA,aACA,YAAY,sBACO;CACnB,MAAM,eAAe,OAAuB,IAAI;CAChD,MAAM,CAAC,eAAe,oBAAoB,SACxC,KAAA,CACF;CACA,MAAM,YAAY,OAA4B,IAAI;CAClD,MAAM,mBAAmB,OAAgB,KAAA,CAAS;CAClD,MAAM,oBAAoB,OAAgB,KAAA,CAAS;CACnD,MAAM,yBAAyB,OAC7B,KAAA,CACF;CAIA,MAAM,iBAAiB,OAAO,KAAK;CACnC,MAAM,kBAAkB,OAAgB,KAAA,CAAS;CACjD,MAAM,mBAAmB,OAAgB,KAAA,CAAS;CAClD,MAAM,wBAAwB,OAC5B,KAAA,CACF;CAEA,MAAM,UAAU,OAAqB,IAAK;CAC1C,QAAQ,UAAU;EAChB;EACA;EACA;EACA;EACA;CACF;CAEA,MAAM,cAAc,SAAS;CAE7B,gBAAgB;EACd,MAAM,YAAY,aAAa;EAC/B,IAAI,CAAC,WAAW;EAEhB,IAAI,YAAY;EAChB,IAAI,gBAAsD;EAC1D,IAAI,QAA8B;EAClC,MAAM,KAAK;EACX,MAAM,OAAO,SAAS;EAEtB,MAAM,MAAM,IAAI,iBAAiB,IAAI,WAAW,iBAAiB;GAC/D,GAAI,IAAI,YAAY,KAAA,KAAa,EAAE,SAAS,GAAG,QAAQ;GACvD,GAAI,IAAI,iBAAiB,KAAA,KAAa,EAAE,cAAc,GAAG,aAAa;GACtE,GAAI,IAAI,yBAAyB,KAAA,KAAa,EAC5C,sBAAsB,GAAG,qBAC3B;GACA,GAAI,IAAI,SAAS,KAAA,KAAa,EAAE,MAAM,GAAG,KAAK;EAChD,CAAC;EAED,MAAM,aACJ,IAAI,wBAAwB,KAAA,IACxB,EAAE,qBAAqB,GAAG,oBAAoB,IAC9C,KAAA;EAEN,IACG,WAAW,MAAM,WAAW,UAAU,EACtC,MAAM,aAAa;GAClB,IAAI,WAAW;IACb,SAAS,QAAQ;IACjB;GACF;GACA,QAAQ;GACR,MAAM,UAAU,QAAQ;GACxB,MAAM,eAAe,kBAAkB,QAAQ,UAAU,OAAO;GAChE,MAAM,oBAAoB,aAAa;GACvC,MAAM,qBAAqB;IACzB,IAAI,eAAe,SAAS;IAC5B,eAAe,UAAU;IACzB,MAAM,IAAI,UAAU;IACpB,IAAI,CAAC,GAAG;IACR,IAAI,gBAAgB,YAAY,KAAA,GAAW;KACzC,EAAE,gBAAgB,gBAAgB,OAAO;KACzC,iBAAiB,UAAU,gBAAgB;KAC3C,gBAAgB,UAAU,KAAA;IAC5B;IACA,IAAI,iBAAiB,YAAY,KAAA,GAAW;KAC1C,EAAE,iBAAiB,iBAAiB,OAAO;KAC3C,kBAAkB,UAAU,iBAAiB;KAC7C,iBAAiB,UAAU,KAAA;IAC7B;IACA,IAAI,sBAAsB,YAAY,KAAA,GAAW;KAC/C,EAAE,yBAAyB,sBAAsB,OAAO;KACxD,uBAAuB,UAAU,sBAAsB;KACvD,sBAAsB,UAAU,KAAA;IAClC;GACF;GACA,MAAM,kBAAwC;IAC5C,GAAG;IACH,qBAAqB;KACnB,IAAI,kBAAkB,MAAM;MAC1B,aAAa,aAAa;MAC1B,gBAAgB;KAClB;KACA,aAAa;KACb,oBAAoB;IACtB;IACA,eAAe,MAAM;KACnB,IACE,OAAO,EAAE,WAAW,YACpB,OAAO,SAAS,EAAE,MAAM,KACxB,EAAE,SAAS,GAEX,iBAAiB,EAAE,MAAM;KAE3B,aAAa,eAAe,CAAC;IAC/B;GACF;GAIA,gBAAgB,iBAAiB;IAC/B,gBAAgB;IAChB,aAAa;GACf,GAAG,eAAe;GAClB,UAAU,UAAU,mBAAmB;IACrC,OAAO;IACP,UAAU;IACV,UAAU,QAAQ;IAClB,aAAa,QAAQ;GACvB,CAAC;GAED,IAAI,QAAQ,UAAU,KAAA,GACpB,gBAAgB,UAAU,QAAQ;GACpC,IAAI,QAAQ,WAAW,KAAA,GACrB,iBAAiB,UAAU,QAAQ;EAGvC,CAAC,EACA,OAAO,QAAQ;GACd,QAAQ,QAAQ,UAAU,UACxB,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC,CACpD;EACF,CAAC;EAEH,aAAa;GACX,YAAY;GACZ,IAAI,kBAAkB,MAAM;IAC1B,aAAa,aAAa;IAC1B,gBAAgB;GAClB;GACA,UAAU,SAAS,QAAQ;GAC3B,UAAU,UAAU;GACpB,OAAO,QAAQ;GACf,QAAQ;GACR,iBAAiB,UAAU,KAAA;GAC3B,kBAAkB,UAAU,KAAA;GAC5B,uBAAuB,UAAU,KAAA;GACjC,eAAe,UAAU;GACzB,gBAAgB,UAAU,KAAA;GAC1B,iBAAiB,UAAU,KAAA;GAC3B,sBAAsB,UAAU,KAAA;GAChC,iBAAiB,KAAA,CAAS;EAC5B;CAEF,GAAG,CAAC,WAAW,CAAC;CAEhB,gBACE,OACA,WACA,gBACA,iBACA,mBACC,GAAG,MAAM,EAAE,gBAAgB,CAAC,CAC/B;CACA,gBACE,QACA,WACA,gBACA,kBACA,oBACC,GAAG,MAAM,EAAE,iBAAiB,CAAC,CAChC;CACA,gBACE,aACA,WACA,gBACA,uBACA,yBACC,GAAG,MAAM,EAAE,yBAAyB,CAAC,CACxC;CAEA,MAAM,iBACJ,iBAAiB,OAAO,KAAK,IAAI,eAAe,SAAS,IAAI,KAAA;CAC/D,MAAM,cACJ,kBAAkB,OACd;EAAE,GAAG,SAAS;EAAO,QAAQ;CAAe,IAC5C,SAAS;CAEf,OACE,oBAAC,OAAD;EACE,KAAK;EACL,WAAW,SAAS;EACpB,OAAO;EACP,yBAAuB,IAAI;EAC3B,+BACE,SAAS,MAAM,gBAAgB,KAAK,KAAA;CAEvC,CAAA;AAEL"}
+{"version":3,"file":"app-frame.js","names":[],"sources":["../../src/mcp-apps/app-frame.tsx"],"sourcesContent":["\"use client\";\n\nimport { type MutableRefObject, useEffect, useRef } from \"react\";\nimport { type McpAppBridge, createMcpAppBridge } from \"./bridge\";\nimport {\n  SandboxHost,\n  type SandboxBridge,\n  type SandboxHostApi,\n  type SandboxHostFrame,\n} from \"../sandbox-host/SandboxHost\";\nimport type {\n  McpAppBridgeHandlers,\n  McpAppFrameProps,\n  McpAppHostContext,\n} from \"./types\";\n\nconst DEFAULT_PRODUCT = \"assistant-ui-mcp-app\";\nconst INIT_TIMEOUT_MS = 5000;\nconst DEFAULT_MAX_HEIGHT = 800;\n\nfunction useBridgeNotify<T>(\n  value: T | undefined,\n  bridgeRef: MutableRefObject<McpAppBridge | null>,\n  widgetReadyRef: MutableRefObject<boolean>,\n  pendingRef: MutableRefObject<T | undefined>,\n  lastSentRef: MutableRefObject<T | undefined>,\n  notify: (bridge: McpAppBridge, v: T) => void,\n) {\n  useEffect(() => {\n    if (!bridgeRef.current) return;\n    if (value === undefined) return;\n    if (lastSentRef.current === value) return;\n    if (!widgetReadyRef.current) {\n      pendingRef.current = value;\n      return;\n    }\n    notify(bridgeRef.current, value);\n    lastSentRef.current = value;\n    // oxlint-disable-next-line react/exhaustive-deps -- refs are stable; notify is assumed stable; re-run only when value changes\n  }, [value]);\n}\n\ntype LiveSnapshot = {\n  handlers: McpAppBridgeHandlers | undefined;\n  hostInfo: McpAppFrameProps[\"hostInfo\"];\n  hostContext: McpAppFrameProps[\"hostContext\"];\n  input: unknown;\n  output: unknown;\n};\n\n// Proxy each per-call handler through liveRef so the bridge always dispatches\n// to the latest handler reference (e.g. inline callbacks closing over state).\n// Capability presence is snapshot at mount: a handler added later requires a\n// remount (keyed on resource URI) to expose the capability to the widget.\nfunction buildLiveHandlers(\n  initial: McpAppBridgeHandlers | undefined,\n  liveRef: { readonly current: LiveSnapshot },\n): McpAppBridgeHandlers {\n  const live = () => liveRef.current.handlers;\n  const has = <K extends keyof McpAppBridgeHandlers>(key: K) =>\n    initial?.[key] !== undefined;\n  const out: McpAppBridgeHandlers = {};\n  if (has(\"allowedTools\")) {\n    Object.defineProperty(out, \"allowedTools\", {\n      get: () => live()?.allowedTools,\n      enumerable: true,\n      configurable: true,\n    });\n  }\n  const liveCall = <K extends keyof McpAppBridgeHandlers>(\n    key: K,\n  ): NonNullable<McpAppBridgeHandlers[K]> =>\n    ((p: unknown) => {\n      const fn = live()?.[key] as ((p: unknown) => unknown) | undefined;\n      if (!fn) {\n        throw new Error(`${key} handler is no longer available`);\n      }\n      return fn(p);\n    }) as NonNullable<McpAppBridgeHandlers[K]>;\n  if (has(\"callTool\")) out.callTool = liveCall(\"callTool\");\n  if (has(\"readResource\")) out.readResource = liveCall(\"readResource\");\n  if (has(\"listResources\")) out.listResources = liveCall(\"listResources\");\n  if (has(\"openLink\")) out.openLink = liveCall(\"openLink\");\n  if (has(\"sendMessage\")) out.sendMessage = liveCall(\"sendMessage\");\n  if (has(\"updateModelContext\"))\n    out.updateModelContext = liveCall(\"updateModelContext\");\n  if (has(\"requestDisplayMode\"))\n    out.requestDisplayMode = liveCall(\"requestDisplayMode\");\n  out.onSizeChange = (p) => live()?.onSizeChange?.(p);\n  out.onInitialized = () => live()?.onInitialized?.();\n  out.onRequestTeardown = (p) => live()?.onRequestTeardown?.(p);\n  out.onLog = (p) => live()?.onLog?.(p);\n  out.onError = (e) => live()?.onError?.(e);\n  return out;\n}\n\nexport function McpAppFrame({\n  app,\n  resource,\n  input,\n  output,\n  sandbox,\n  handlers,\n  hostInfo,\n  hostContext,\n  maxHeight = DEFAULT_MAX_HEIGHT,\n}: McpAppFrameProps) {\n  const bridgeRef = useRef<McpAppBridge | null>(null);\n  const lastSentInputRef = useRef<unknown>(undefined);\n  const lastSentOutputRef = useRef<unknown>(undefined);\n  const lastSentHostContextRef = useRef<McpAppHostContext | undefined>(\n    undefined,\n  );\n  // Per MCP Apps spec, the host should defer notifications until the widget\n  // signals readiness via `notifications/initialized`. Until then, we record\n  // pending values and flush them on init.\n  const widgetReadyRef = useRef(false);\n  const pendingInputRef = useRef<unknown>(undefined);\n  const pendingOutputRef = useRef<unknown>(undefined);\n  const pendingHostContextRef = useRef<McpAppHostContext | undefined>(\n    undefined,\n  );\n\n  const liveRef = useRef<LiveSnapshot>(null!);\n  liveRef.current = {\n    handlers,\n    hostInfo,\n    hostContext,\n    input,\n    output,\n  };\n\n  const createBridge = (\n    frame: SandboxHostFrame,\n    host: SandboxHostApi,\n  ): SandboxBridge => {\n    const current = liveRef.current;\n    let initTimeoutId: ReturnType<typeof setTimeout> | null = null;\n\n    const flushPending = () => {\n      if (widgetReadyRef.current) return;\n      widgetReadyRef.current = true;\n      const b = bridgeRef.current;\n      if (!b) return;\n      if (pendingInputRef.current !== undefined) {\n        b.notifyToolInput(pendingInputRef.current);\n        lastSentInputRef.current = pendingInputRef.current;\n        pendingInputRef.current = undefined;\n      }\n      if (pendingOutputRef.current !== undefined) {\n        b.notifyToolResult(pendingOutputRef.current);\n        lastSentOutputRef.current = pendingOutputRef.current;\n        pendingOutputRef.current = undefined;\n      }\n      if (pendingHostContextRef.current !== undefined) {\n        b.notifyHostContextChanged(pendingHostContextRef.current);\n        lastSentHostContextRef.current = pendingHostContextRef.current;\n        pendingHostContextRef.current = undefined;\n      }\n    };\n\n    const liveHandlers = buildLiveHandlers(current.handlers, liveRef);\n    const liveOnInitialized = liveHandlers.onInitialized;\n    const wrappedHandlers: McpAppBridgeHandlers = {\n      ...liveHandlers,\n      onInitialized: () => {\n        if (initTimeoutId !== null) {\n          clearTimeout(initTimeoutId);\n          initTimeoutId = null;\n        }\n        flushPending();\n        liveOnInitialized?.();\n      },\n      onSizeChange: (p) => {\n        if (p.height != null) host.setHeight(p.height);\n        liveHandlers.onSizeChange?.(p);\n      },\n    };\n\n    // Safety net: if the widget never sends notifications/initialized (broken\n    // or non-spec-compliant), flush the queue anyway so the host doesn't\n    // appear hung.\n    initTimeoutId = setTimeout(() => {\n      initTimeoutId = null;\n      flushPending();\n    }, INIT_TIMEOUT_MS);\n\n    const bridge = createMcpAppBridge({\n      frame,\n      handlers: wrappedHandlers,\n      hostInfo: current.hostInfo,\n      hostContext: current.hostContext,\n    });\n    bridgeRef.current = bridge;\n\n    if (current.input !== undefined) pendingInputRef.current = current.input;\n    if (current.output !== undefined) pendingOutputRef.current = current.output;\n    // hostContext is delivered inside the ui/initialize response; subsequent\n    // changes flow through useBridgeNotify's pending path.\n\n    return {\n      onMessage: bridge.onMessage,\n      dispose: () => {\n        if (initTimeoutId !== null) {\n          clearTimeout(initTimeoutId);\n          initTimeoutId = null;\n        }\n        bridge.dispose();\n        bridgeRef.current = null;\n        lastSentInputRef.current = undefined;\n        lastSentOutputRef.current = undefined;\n        lastSentHostContextRef.current = undefined;\n        widgetReadyRef.current = false;\n        pendingInputRef.current = undefined;\n        pendingOutputRef.current = undefined;\n        pendingHostContextRef.current = undefined;\n      },\n    };\n  };\n\n  useBridgeNotify(\n    input,\n    bridgeRef,\n    widgetReadyRef,\n    pendingInputRef,\n    lastSentInputRef,\n    (b, v) => b.notifyToolInput(v),\n  );\n  useBridgeNotify(\n    output,\n    bridgeRef,\n    widgetReadyRef,\n    pendingOutputRef,\n    lastSentOutputRef,\n    (b, v) => b.notifyToolResult(v),\n  );\n  useBridgeNotify(\n    hostContext,\n    bridgeRef,\n    widgetReadyRef,\n    pendingHostContextRef,\n    lastSentHostContextRef,\n    (b, v) => b.notifyHostContextChanged(v),\n  );\n\n  return (\n    <SandboxHost\n      content={{ html: resource.html }}\n      contentKey={resource.uri}\n      sandbox={{ ...sandbox, product: sandbox?.product ?? DEFAULT_PRODUCT }}\n      maxHeight={maxHeight}\n      createBridge={createBridge}\n      onError={(err) => liveRef.current.handlers?.onError?.(err)}\n      containerProps={{\n        \"data-mcp-app-resource\": app.resourceUri,\n        \"data-mcp-app-prefers-border\": resource.meta?.prefersBorder\n          ? \"\"\n          : undefined,\n      }}\n    />\n  );\n}\n"],"mappings":";;;;;;AAgBA,MAAM,kBAAkB;AACxB,MAAM,kBAAkB;AACxB,MAAM,qBAAqB;AAE3B,SAAS,gBACP,OACA,WACA,gBACA,YACA,aACA,QACA;CACA,gBAAgB;EACd,IAAI,CAAC,UAAU,SAAS;EACxB,IAAI,UAAU,KAAA,GAAW;EACzB,IAAI,YAAY,YAAY,OAAO;EACnC,IAAI,CAAC,eAAe,SAAS;GAC3B,WAAW,UAAU;GACrB;EACF;EACA,OAAO,UAAU,SAAS,KAAK;EAC/B,YAAY,UAAU;CAExB,GAAG,CAAC,KAAK,CAAC;AACZ;AAcA,SAAS,kBACP,SACA,SACsB;CACtB,MAAM,aAAa,QAAQ,QAAQ;CACnC,MAAM,OAA6C,QACjD,UAAU,SAAS,KAAA;CACrB,MAAM,MAA4B,CAAC;CACnC,IAAI,IAAI,cAAc,GACpB,OAAO,eAAe,KAAK,gBAAgB;EACzC,WAAW,KAAK,CAAC,EAAE;EACnB,YAAY;EACZ,cAAc;CAChB,CAAC;CAEH,MAAM,YACJ,UAEE,MAAe;EACf,MAAM,KAAK,KAAK,CAAC,GAAG;EACpB,IAAI,CAAC,IACH,MAAM,IAAI,MAAM,GAAG,IAAI,gCAAgC;EAEzD,OAAO,GAAG,CAAC;CACb;CACF,IAAI,IAAI,UAAU,GAAG,IAAI,WAAW,SAAS,UAAU;CACvD,IAAI,IAAI,cAAc,GAAG,IAAI,eAAe,SAAS,cAAc;CACnE,IAAI,IAAI,eAAe,GAAG,IAAI,gBAAgB,SAAS,eAAe;CACtE,IAAI,IAAI,UAAU,GAAG,IAAI,WAAW,SAAS,UAAU;CACvD,IAAI,IAAI,aAAa,GAAG,IAAI,cAAc,SAAS,aAAa;CAChE,IAAI,IAAI,oBAAoB,GAC1B,IAAI,qBAAqB,SAAS,oBAAoB;CACxD,IAAI,IAAI,oBAAoB,GAC1B,IAAI,qBAAqB,SAAS,oBAAoB;CACxD,IAAI,gBAAgB,MAAM,KAAK,CAAC,EAAE,eAAe,CAAC;CAClD,IAAI,sBAAsB,KAAK,CAAC,EAAE,gBAAgB;CAClD,IAAI,qBAAqB,MAAM,KAAK,CAAC,EAAE,oBAAoB,CAAC;CAC5D,IAAI,SAAS,MAAM,KAAK,CAAC,EAAE,QAAQ,CAAC;CACpC,IAAI,WAAW,MAAM,KAAK,CAAC,EAAE,UAAU,CAAC;CACxC,OAAO;AACT;AAEA,SAAgB,YAAY,EAC1B,KACA,UACA,OACA,QACA,SACA,UACA,UACA,aACA,YAAY,sBACO;CACnB,MAAM,YAAY,OAA4B,IAAI;CAClD,MAAM,mBAAmB,OAAgB,KAAA,CAAS;CAClD,MAAM,oBAAoB,OAAgB,KAAA,CAAS;CACnD,MAAM,yBAAyB,OAC7B,KAAA,CACF;CAIA,MAAM,iBAAiB,OAAO,KAAK;CACnC,MAAM,kBAAkB,OAAgB,KAAA,CAAS;CACjD,MAAM,mBAAmB,OAAgB,KAAA,CAAS;CAClD,MAAM,wBAAwB,OAC5B,KAAA,CACF;CAEA,MAAM,UAAU,OAAqB,IAAK;CAC1C,QAAQ,UAAU;EAChB;EACA;EACA;EACA;EACA;CACF;CAEA,MAAM,gBACJ,OACA,SACkB;EAClB,MAAM,UAAU,QAAQ;EACxB,IAAI,gBAAsD;EAE1D,MAAM,qBAAqB;GACzB,IAAI,eAAe,SAAS;GAC5B,eAAe,UAAU;GACzB,MAAM,IAAI,UAAU;GACpB,IAAI,CAAC,GAAG;GACR,IAAI,gBAAgB,YAAY,KAAA,GAAW;IACzC,EAAE,gBAAgB,gBAAgB,OAAO;IACzC,iBAAiB,UAAU,gBAAgB;IAC3C,gBAAgB,UAAU,KAAA;GAC5B;GACA,IAAI,iBAAiB,YAAY,KAAA,GAAW;IAC1C,EAAE,iBAAiB,iBAAiB,OAAO;IAC3C,kBAAkB,UAAU,iBAAiB;IAC7C,iBAAiB,UAAU,KAAA;GAC7B;GACA,IAAI,sBAAsB,YAAY,KAAA,GAAW;IAC/C,EAAE,yBAAyB,sBAAsB,OAAO;IACxD,uBAAuB,UAAU,sBAAsB;IACvD,sBAAsB,UAAU,KAAA;GAClC;EACF;EAEA,MAAM,eAAe,kBAAkB,QAAQ,UAAU,OAAO;EAChE,MAAM,oBAAoB,aAAa;EACvC,MAAM,kBAAwC;GAC5C,GAAG;GACH,qBAAqB;IACnB,IAAI,kBAAkB,MAAM;KAC1B,aAAa,aAAa;KAC1B,gBAAgB;IAClB;IACA,aAAa;IACb,oBAAoB;GACtB;GACA,eAAe,MAAM;IACnB,IAAI,EAAE,UAAU,MAAM,KAAK,UAAU,EAAE,MAAM;IAC7C,aAAa,eAAe,CAAC;GAC/B;EACF;EAKA,gBAAgB,iBAAiB;GAC/B,gBAAgB;GAChB,aAAa;EACf,GAAG,eAAe;EAElB,MAAM,SAAS,mBAAmB;GAChC;GACA,UAAU;GACV,UAAU,QAAQ;GAClB,aAAa,QAAQ;EACvB,CAAC;EACD,UAAU,UAAU;EAEpB,IAAI,QAAQ,UAAU,KAAA,GAAW,gBAAgB,UAAU,QAAQ;EACnE,IAAI,QAAQ,WAAW,KAAA,GAAW,iBAAiB,UAAU,QAAQ;EAIrE,OAAO;GACL,WAAW,OAAO;GAClB,eAAe;IACb,IAAI,kBAAkB,MAAM;KAC1B,aAAa,aAAa;KAC1B,gBAAgB;IAClB;IACA,OAAO,QAAQ;IACf,UAAU,UAAU;IACpB,iBAAiB,UAAU,KAAA;IAC3B,kBAAkB,UAAU,KAAA;IAC5B,uBAAuB,UAAU,KAAA;IACjC,eAAe,UAAU;IACzB,gBAAgB,UAAU,KAAA;IAC1B,iBAAiB,UAAU,KAAA;IAC3B,sBAAsB,UAAU,KAAA;GAClC;EACF;CACF;CAEA,gBACE,OACA,WACA,gBACA,iBACA,mBACC,GAAG,MAAM,EAAE,gBAAgB,CAAC,CAC/B;CACA,gBACE,QACA,WACA,gBACA,kBACA,oBACC,GAAG,MAAM,EAAE,iBAAiB,CAAC,CAChC;CACA,gBACE,aACA,WACA,gBACA,uBACA,yBACC,GAAG,MAAM,EAAE,yBAAyB,CAAC,CACxC;CAEA,OACE,oBAAC,aAAD;EACE,SAAS,EAAE,MAAM,SAAS,KAAK;EAC/B,YAAY,SAAS;EACrB,SAAS;GAAE,GAAG;GAAS,SAAS,SAAS,WAAW;EAAgB;EACzD;EACG;EACd,UAAU,QAAQ,QAAQ,QAAQ,UAAU,UAAU,GAAG;EACzD,gBAAgB;GACd,yBAAyB,IAAI;GAC7B,+BAA+B,SAAS,MAAM,gBAC1C,KACA,KAAA;EACN;CACD,CAAA;AAEL"}

package/dist/mcp-apps/bridge.d.ts

@@ -1,16 +1,16 @@
+import { SandboxHostFrame } from "../sandbox-host/SandboxHost.js";
 import { McpAppBridgeHandlers, McpAppHostContext, McpAppHostInfo } from "./types.js";
-import { RenderedFrame } from "safe-content-frame";
 
 //#region src/mcp-apps/bridge.d.ts
-type McpAppBridgeFrame = Pick<RenderedFrame, "iframe" | "origin" | "sendMessage">;
+type McpAppBridgeFrame = SandboxHostFrame;
 type CreateMcpAppBridgeOptions = {
   frame: McpAppBridgeFrame;
   handlers?: McpAppBridgeHandlers | undefined;
   hostInfo?: McpAppHostInfo | undefined;
   hostContext?: McpAppHostContext | undefined;
-  targetWindow?: Window | undefined;
 };
 type McpAppBridge = {
+  onMessage: (event: MessageEvent) => void;
   dispose: () => void;
   notifyToolInput: (input: unknown) => void;
   notifyToolResult: (result: unknown) => void;

package/dist/mcp-apps/bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bridge.d.ts","names":[],"sources":["../../src/mcp-apps/bridge.ts"],"mappings":";;;;KAmBY,iBAAA,GAAoB,IAAI,CAClC,aAAA;AAAA,KAIU,yBAAA;EACV,KAAA,EAAO,iBAAA;EACP,QAAA,GAAW,oBAAA;EACX,QAAA,GAAW,cAAA;EACX,WAAA,GAAc,iBAAA;EACd,YAAA,GAAe,MAAA;AAAA;AAAA,KAGL,YAAA;EACV,OAAA;EACA,eAAA,GAAkB,KAAA;EAClB,gBAAA,GAAmB,MAAA;EACnB,wBAAA,GAA2B,WAAA,EAAa,iBAAiB;AAAA;AAAA,iBAgD3C,kBAAA,CACd,IAAA,EAAM,yBAAA,GACL,YAAY"}
+{"version":3,"file":"bridge.d.ts","names":[],"sources":["../../src/mcp-apps/bridge.ts"],"mappings":";;;;KAoBY,iBAAA,GAAoB,gBAAgB;AAAA,KAEpC,yBAAA;EACV,KAAA,EAAO,iBAAA;EACP,QAAA,GAAW,oBAAA;EACX,QAAA,GAAW,cAAA;EACX,WAAA,GAAc,iBAAA;AAAA;AAAA,KAGJ,YAAA;EACV,SAAA,GAAY,KAAA,EAAO,YAAA;EACnB,OAAA;EACA,eAAA,GAAkB,KAAA;EAClB,gBAAA,GAAmB,MAAA;EACnB,wBAAA,GAA2B,WAAA,EAAa,iBAAiB;AAAA;AAAA,iBAgD3C,kBAAA,CACd,IAAA,EAAM,yBAAA,GACL,YAAY"}

package/dist/mcp-apps/bridge.js

@@ -1,4 +1,5 @@
 import "./types.js";
+import { isRecord } from "../utils/json/is-json.js";
 //#region src/mcp-apps/bridge.ts
 const VALID_DISPLAY_MODES = [
 	"inline",
@@ -38,8 +39,7 @@ function isNotification(msg) {
 	return !("id" in msg);
 }
 function createMcpAppBridge(opts) {
-	const { frame, handlers = {}, hostInfo = DEFAULT_HOST_INFO, hostContext = {}, targetWindow = typeof window !== "undefined" ? window : void 0 } = opts;
-	if (!targetWindow) throw new Error("createMcpAppBridge requires a window context");
+	const { frame, handlers = {}, hostInfo = DEFAULT_HOST_INFO, hostContext = {} } = opts;
 	const post = (msg) => {
 		frame.sendMessage(msg);
 	};
@@ -61,10 +61,12 @@ function createMcpAppBridge(opts) {
 		try {
 			const params = req.params;
 			switch (normalizeMethod(req.method)) {
-				case "ui/initialize":
+				case "ui/initialize": {
+					const requestedProtocolVersion = isRecord(params) && typeof params.protocolVersion === "string" ? params.protocolVersion : "0.1";
 					respond(req.id, { result: {
-						protocolVersion: "0.1",
+						protocolVersion: requestedProtocolVersion,
 						host: hostInfo,
+						hostInfo,
 						hostContext,
 						capabilities: {
 							tools: handlers.callTool ? {} : void 0,
@@ -75,9 +77,18 @@ function createMcpAppBridge(opts) {
 								requestDisplayMode: !!handlers.requestDisplayMode,
 								updateModelContext: !!handlers.updateModelContext
 							}
+						},
+						hostCapabilities: {
+							...handlers.openLink ? { openLinks: {} } : {},
+							...handlers.callTool ? { serverTools: {} } : {},
+							...handlers.readResource || handlers.listResources ? { serverResources: {} } : {},
+							...handlers.updateModelContext ? { updateModelContext: { text: {} } } : {},
+							...handlers.sendMessage ? { message: { text: {} } } : {},
+							...handlers.onLog ? { logging: {} } : {}
 						}
 					} });
 					return;
+				}
 				case "tools/call": {
 					if (!handlers.callTool) {
 						errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "tools/call is not supported by this host");
@@ -214,24 +225,25 @@ function createMcpAppBridge(opts) {
 		}
 	};
 	const onMessage = (event) => {
-		if (event.source !== frame.iframe.contentWindow) return;
-		if (event.origin !== frame.origin) return;
 		if (!isJsonRpcMessage(event.data)) return;
 		const msg = event.data;
 		if (isRequest(msg)) handleRequest(msg);
 		else if (isNotification(msg)) handleNotification(msg);
 	};
-	targetWindow.addEventListener("message", onMessage);
 	return {
-		dispose: () => {
-			targetWindow.removeEventListener("message", onMessage);
-		},
+		onMessage,
+		dispose: () => {},
 		notifyToolInput: (input) => {
 			post({
 				jsonrpc: "2.0",
 				method: "notifications/tools/call/input",
 				params: { input }
 			});
+			post({
+				jsonrpc: "2.0",
+				method: "ui/notifications/tool-input",
+				params: isRecord(input) ? { arguments: input } : {}
+			});
 		},
 		notifyToolResult: (result) => {
 			post({
@@ -239,6 +251,14 @@ function createMcpAppBridge(opts) {
 				method: "notifications/tools/call/result",
 				params: { result }
 			});
+			post({
+				jsonrpc: "2.0",
+				method: "ui/notifications/tool-result",
+				params: isRecord(result) ? result : { content: [{
+					type: "text",
+					text: String(result)
+				}] }
+			});
 		},
 		notifyHostContextChanged: (ctx) => {
 			post({
@@ -246,6 +266,11 @@ function createMcpAppBridge(opts) {
 				method: "notifications/host_context/changed",
 				params: ctx
 			});
+			post({
+				jsonrpc: "2.0",
+				method: "ui/notifications/host-context-changed",
+				params: ctx
+			});
 		}
 	};
 }

package/dist/mcp-apps/bridge.js.map

@@ -1 +1 @@
-{"version":3,"file":"bridge.js","names":[],"sources":["../../src/mcp-apps/bridge.ts"],"sourcesContent":["import type { RenderedFrame } from \"safe-content-frame\";\nimport {\n  MCP_APP_PROTOCOL_VERSION,\n  type McpAppBridgeHandlers,\n  type McpAppDisplayMode,\n  type McpAppHostContext,\n  type McpAppHostInfo,\n  type McpAppJsonRpcMessage,\n  type McpAppJsonRpcNotification,\n  type McpAppJsonRpcRequest,\n  type McpAppJsonRpcResponse,\n} from \"./types\";\n\nconst VALID_DISPLAY_MODES = [\n  \"inline\",\n  \"fullscreen\",\n  \"pip\",\n] as const satisfies readonly McpAppDisplayMode[];\n\nexport type McpAppBridgeFrame = Pick<\n  RenderedFrame,\n  \"iframe\" | \"origin\" | \"sendMessage\"\n>;\n\nexport type CreateMcpAppBridgeOptions = {\n  frame: McpAppBridgeFrame;\n  handlers?: McpAppBridgeHandlers | undefined;\n  hostInfo?: McpAppHostInfo | undefined;\n  hostContext?: McpAppHostContext | undefined;\n  targetWindow?: Window | undefined;\n};\n\nexport type McpAppBridge = {\n  dispose: () => void;\n  notifyToolInput: (input: unknown) => void;\n  notifyToolResult: (result: unknown) => void;\n  notifyHostContextChanged: (hostContext: McpAppHostContext) => void;\n};\n\nconst DEFAULT_HOST_INFO: McpAppHostInfo = {\n  name: \"assistant-ui\",\n  version: \"0.1\",\n};\n\n// Accept both the legacy method names and the MCP-UI 2026-01-26 names that\n// `ui/*` capable widgets (e.g. xmcp's host-bridge) emit. Normalize on input\n// so downstream switch statements only need to know the legacy names.\nconst METHOD_ALIASES: Record<string, string> = {\n  \"ui/notifications/initialized\": \"notifications/initialized\",\n  \"ui/notifications/size-changed\": \"notifications/size_changed\",\n  \"ui/request-display-mode\": \"requestDisplayMode\",\n  \"ui/open-link\": \"openLink\",\n  \"ui/update-model-context\": \"updateModelContext\",\n  \"ui/message\": \"sendMessage\",\n  \"notifications/message\": \"notifications/log\",\n};\n\nconst normalizeMethod = (method: string): string =>\n  METHOD_ALIASES[method] ?? method;\n\nconst JSONRPC_ERROR = {\n  parseError: -32700,\n  invalidRequest: -32600,\n  methodNotFound: -32601,\n  invalidParams: -32602,\n  internalError: -32603,\n} as const;\n\nfunction isJsonRpcMessage(value: unknown): value is McpAppJsonRpcMessage {\n  if (!value || typeof value !== \"object\") return false;\n  const v = value as Record<string, unknown>;\n  return v.jsonrpc === \"2.0\" && typeof v.method === \"string\";\n}\n\nfunction isRequest(msg: McpAppJsonRpcMessage): msg is McpAppJsonRpcRequest {\n  return \"id\" in msg;\n}\n\nfunction isNotification(\n  msg: McpAppJsonRpcMessage,\n): msg is McpAppJsonRpcNotification {\n  return !(\"id\" in msg);\n}\n\nexport function createMcpAppBridge(\n  opts: CreateMcpAppBridgeOptions,\n): McpAppBridge {\n  const {\n    frame,\n    handlers = {},\n    hostInfo = DEFAULT_HOST_INFO,\n    hostContext = {},\n    targetWindow = typeof window !== \"undefined\" ? window : undefined,\n  } = opts;\n\n  if (!targetWindow) {\n    throw new Error(\"createMcpAppBridge requires a window context\");\n  }\n\n  const post = (msg: McpAppJsonRpcMessage) => {\n    frame.sendMessage(msg);\n  };\n\n  const respond = (\n    id: McpAppJsonRpcRequest[\"id\"],\n    payload:\n      | { result: unknown }\n      | { error: { code: number; message: string; data?: unknown } },\n  ) => {\n    const res: McpAppJsonRpcResponse = {\n      jsonrpc: \"2.0\",\n      id,\n      ...payload,\n    };\n    post(res);\n  };\n\n  const errorResponse = (\n    id: McpAppJsonRpcRequest[\"id\"],\n    code: number,\n    message: string,\n    data?: unknown,\n  ) => {\n    respond(id, {\n      error: {\n        code,\n        message,\n        ...(data !== undefined ? { data } : {}),\n      },\n    });\n  };\n\n  const handleRequest = async (req: McpAppJsonRpcRequest) => {\n    try {\n      const params = req.params;\n\n      switch (normalizeMethod(req.method)) {\n        case \"ui/initialize\": {\n          respond(req.id, {\n            result: {\n              protocolVersion: MCP_APP_PROTOCOL_VERSION,\n              host: hostInfo,\n              hostContext,\n              capabilities: {\n                tools: handlers.callTool ? {} : undefined,\n                resources:\n                  handlers.readResource || handlers.listResources\n                    ? {}\n                    : undefined,\n                ui: {\n                  sendMessage: !!handlers.sendMessage,\n                  openLink: !!handlers.openLink,\n                  requestDisplayMode: !!handlers.requestDisplayMode,\n                  updateModelContext: !!handlers.updateModelContext,\n                },\n              },\n            },\n          });\n          return;\n        }\n\n        case \"tools/call\": {\n          if (!handlers.callTool) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"tools/call is not supported by this host\",\n            );\n            return;\n          }\n          const callParams = (params ?? {}) as {\n            name?: unknown;\n            arguments?: unknown;\n          };\n          if (typeof callParams.name !== \"string\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"tools/call requires a string 'name'\",\n            );\n            return;\n          }\n          if (\n            handlers.allowedTools &&\n            !handlers.allowedTools.includes(callParams.name)\n          ) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              `tool '${callParams.name}' is not allowed for this app`,\n            );\n            return;\n          }\n          let callArgs: Record<string, unknown> | undefined;\n          if (callParams.arguments !== undefined) {\n            if (\n              callParams.arguments === null ||\n              typeof callParams.arguments !== \"object\" ||\n              Array.isArray(callParams.arguments)\n            ) {\n              errorResponse(\n                req.id,\n                JSONRPC_ERROR.invalidParams,\n                \"tools/call 'arguments' must be an object\",\n              );\n              return;\n            }\n            callArgs = callParams.arguments as Record<string, unknown>;\n          }\n          const result = await handlers.callTool({\n            name: callParams.name,\n            ...(callArgs !== undefined ? { arguments: callArgs } : {}),\n          });\n          respond(req.id, { result });\n          return;\n        }\n\n        case \"resources/read\": {\n          if (!handlers.readResource) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"resources/read is not supported by this host\",\n            );\n            return;\n          }\n          const readParams = (params ?? {}) as { uri?: unknown };\n          if (typeof readParams.uri !== \"string\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"resources/read requires a string 'uri'\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: await handlers.readResource({ uri: readParams.uri }),\n          });\n          return;\n        }\n\n        case \"resources/list\": {\n          if (!handlers.listResources) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"resources/list is not supported by this host\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: (await handlers.listResources(params)) ?? null,\n          });\n          return;\n        }\n\n        case \"openLink\": {\n          if (!handlers.openLink) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"openLink is not supported by this host\",\n            );\n            return;\n          }\n          const linkParams = (params ?? {}) as { url?: unknown };\n          if (typeof linkParams.url !== \"string\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"openLink requires a string 'url'\",\n            );\n            return;\n          }\n          let linkProtocol: string;\n          try {\n            linkProtocol = new URL(linkParams.url).protocol;\n          } catch {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"openLink requires a valid URL\",\n            );\n            return;\n          }\n          if (linkProtocol !== \"https:\" && linkProtocol !== \"http:\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"openLink only accepts http(s) URLs\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: await handlers.openLink({ url: linkParams.url }),\n          });\n          return;\n        }\n\n        case \"sendMessage\": {\n          if (!handlers.sendMessage) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"sendMessage is not supported by this host\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: (await handlers.sendMessage(params)) ?? null,\n          });\n          return;\n        }\n\n        case \"updateModelContext\": {\n          if (!handlers.updateModelContext) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"updateModelContext is not supported by this host\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: (await handlers.updateModelContext(params)) ?? null,\n          });\n          return;\n        }\n\n        case \"requestDisplayMode\": {\n          if (!handlers.requestDisplayMode) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"requestDisplayMode is not supported by this host\",\n            );\n            return;\n          }\n          const modeParams = (params ?? {}) as { mode?: unknown };\n          if (\n            typeof modeParams.mode !== \"string\" ||\n            !VALID_DISPLAY_MODES.includes(modeParams.mode as McpAppDisplayMode)\n          ) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"requestDisplayMode requires a valid 'mode'\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: await handlers.requestDisplayMode({\n              mode: modeParams.mode as McpAppDisplayMode,\n            }),\n          });\n          return;\n        }\n\n        default: {\n          errorResponse(\n            req.id,\n            JSONRPC_ERROR.methodNotFound,\n            `Unknown method: ${req.method}`,\n          );\n        }\n      }\n    } catch (err) {\n      const error = err instanceof Error ? err : new Error(String(err));\n      handlers.onError?.(error);\n      errorResponse(req.id, JSONRPC_ERROR.internalError, error.message);\n    }\n  };\n\n  const handleNotification = (note: McpAppJsonRpcNotification) => {\n    switch (normalizeMethod(note.method)) {\n      case \"notifications/initialized\": {\n        handlers.onInitialized?.();\n        return;\n      }\n      case \"notifications/size_changed\": {\n        const p = (note.params ?? {}) as { width?: number; height?: number };\n        handlers.onSizeChange?.({\n          ...(typeof p.width === \"number\" ? { width: p.width } : {}),\n          ...(typeof p.height === \"number\" ? { height: p.height } : {}),\n        });\n        return;\n      }\n      case \"notifications/log\": {\n        handlers.onLog?.(note.params);\n        return;\n      }\n      case \"notifications/request_teardown\": {\n        handlers.onRequestTeardown?.(note.params);\n        return;\n      }\n      case \"notifications/error\": {\n        const p = (note.params ?? {}) as { message?: string };\n        handlers.onError?.(\n          new Error(typeof p.message === \"string\" ? p.message : \"Widget error\"),\n        );\n        return;\n      }\n      default:\n        return;\n    }\n  };\n\n  // Cross-origin guard: ignore any postMessage not originating from this\n  // app's iframe contentWindow at the SafeContentFrame-issued origin.\n  const onMessage = (event: MessageEvent) => {\n    if (event.source !== frame.iframe.contentWindow) return;\n    if (event.origin !== frame.origin) return;\n    if (!isJsonRpcMessage(event.data)) return;\n\n    const msg = event.data;\n    if (isRequest(msg)) {\n      void handleRequest(msg);\n    } else if (isNotification(msg)) {\n      handleNotification(msg);\n    }\n  };\n\n  targetWindow.addEventListener(\"message\", onMessage);\n\n  return {\n    dispose: () => {\n      targetWindow.removeEventListener(\"message\", onMessage);\n    },\n    notifyToolInput: (input: unknown) => {\n      post({\n        jsonrpc: \"2.0\",\n        method: \"notifications/tools/call/input\",\n        params: { input },\n      });\n    },\n    notifyToolResult: (result: unknown) => {\n      post({\n        jsonrpc: \"2.0\",\n        method: \"notifications/tools/call/result\",\n        params: { result },\n      });\n    },\n    notifyHostContextChanged: (ctx: McpAppHostContext) => {\n      post({\n        jsonrpc: \"2.0\",\n        method: \"notifications/host_context/changed\",\n        params: ctx,\n      });\n    },\n  };\n}\n"],"mappings":";;AAaA,MAAM,sBAAsB;CAC1B;CACA;CACA;AACF;AAsBA,MAAM,oBAAoC;CACxC,MAAM;CACN,SAAS;AACX;AAKA,MAAM,iBAAyC;CAC7C,gCAAgC;CAChC,iCAAiC;CACjC,2BAA2B;CAC3B,gBAAgB;CAChB,2BAA2B;CAC3B,cAAc;CACd,yBAAyB;AAC3B;AAEA,MAAM,mBAAmB,WACvB,eAAe,WAAW;AAE5B,MAAM,gBAAgB;CACpB,YAAY;CACZ,gBAAgB;CAChB,gBAAgB;CAChB,eAAe;CACf,eAAe;AACjB;AAEA,SAAS,iBAAiB,OAA+C;CACvE,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,IAAI;CACV,OAAO,EAAE,YAAY,SAAS,OAAO,EAAE,WAAW;AACpD;AAEA,SAAS,UAAU,KAAwD;CACzE,OAAO,QAAQ;AACjB;AAEA,SAAS,eACP,KACkC;CAClC,OAAO,EAAE,QAAQ;AACnB;AAEA,SAAgB,mBACd,MACc;CACd,MAAM,EACJ,OACA,WAAW,CAAC,GACZ,WAAW,mBACX,cAAc,CAAC,GACf,eAAe,OAAO,WAAW,cAAc,SAAS,KAAA,MACtD;CAEJ,IAAI,CAAC,cACH,MAAM,IAAI,MAAM,8CAA8C;CAGhE,MAAM,QAAQ,QAA8B;EAC1C,MAAM,YAAY,GAAG;CACvB;CAEA,MAAM,WACJ,IACA,YAGG;EAMH,KAAK;GAJH,SAAS;GACT;GACA,GAAG;EAEE,CAAC;CACV;CAEA,MAAM,iBACJ,IACA,MACA,SACA,SACG;EACH,QAAQ,IAAI,EACV,OAAO;GACL;GACA;GACA,GAAI,SAAS,KAAA,IAAY,EAAE,KAAK,IAAI,CAAC;EACvC,EACF,CAAC;CACH;CAEA,MAAM,gBAAgB,OAAO,QAA8B;EACzD,IAAI;GACF,MAAM,SAAS,IAAI;GAEnB,QAAQ,gBAAgB,IAAI,MAAM,GAAlC;IACE,KAAK;KACH,QAAQ,IAAI,IAAI,EACd,QAAQ;MACN,iBAAA;MACA,MAAM;MACN;MACA,cAAc;OACZ,OAAO,SAAS,WAAW,CAAC,IAAI,KAAA;OAChC,WACE,SAAS,gBAAgB,SAAS,gBAC9B,CAAC,IACD,KAAA;OACN,IAAI;QACF,aAAa,CAAC,CAAC,SAAS;QACxB,UAAU,CAAC,CAAC,SAAS;QACrB,oBAAoB,CAAC,CAAC,SAAS;QAC/B,oBAAoB,CAAC,CAAC,SAAS;OACjC;MACF;KACF,EACF,CAAC;KACD;IAGF,KAAK,cAAc;KACjB,IAAI,CAAC,SAAS,UAAU;MACtB,cACE,IAAI,IACJ,cAAc,gBACd,0CACF;MACA;KACF;KACA,MAAM,aAAc,UAAU,CAAC;KAI/B,IAAI,OAAO,WAAW,SAAS,UAAU;MACvC,cACE,IAAI,IACJ,cAAc,eACd,qCACF;MACA;KACF;KACA,IACE,SAAS,gBACT,CAAC,SAAS,aAAa,SAAS,WAAW,IAAI,GAC/C;MACA,cACE,IAAI,IACJ,cAAc,eACd,SAAS,WAAW,KAAK,8BAC3B;MACA;KACF;KACA,IAAI;KACJ,IAAI,WAAW,cAAc,KAAA,GAAW;MACtC,IACE,WAAW,cAAc,QACzB,OAAO,WAAW,cAAc,YAChC,MAAM,QAAQ,WAAW,SAAS,GAClC;OACA,cACE,IAAI,IACJ,cAAc,eACd,0CACF;OACA;MACF;MACA,WAAW,WAAW;KACxB;KACA,MAAM,SAAS,MAAM,SAAS,SAAS;MACrC,MAAM,WAAW;MACjB,GAAI,aAAa,KAAA,IAAY,EAAE,WAAW,SAAS,IAAI,CAAC;KAC1D,CAAC;KACD,QAAQ,IAAI,IAAI,EAAE,OAAO,CAAC;KAC1B;IACF;IAEA,KAAK,kBAAkB;KACrB,IAAI,CAAC,SAAS,cAAc;MAC1B,cACE,IAAI,IACJ,cAAc,gBACd,8CACF;MACA;KACF;KACA,MAAM,aAAc,UAAU,CAAC;KAC/B,IAAI,OAAO,WAAW,QAAQ,UAAU;MACtC,cACE,IAAI,IACJ,cAAc,eACd,wCACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAQ,MAAM,SAAS,aAAa,EAAE,KAAK,WAAW,IAAI,CAAC,EAC7D,CAAC;KACD;IACF;IAEA,KAAK;KACH,IAAI,CAAC,SAAS,eAAe;MAC3B,cACE,IAAI,IACJ,cAAc,gBACd,8CACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAS,MAAM,SAAS,cAAc,MAAM,KAAM,KACpD,CAAC;KACD;IAGF,KAAK,YAAY;KACf,IAAI,CAAC,SAAS,UAAU;MACtB,cACE,IAAI,IACJ,cAAc,gBACd,wCACF;MACA;KACF;KACA,MAAM,aAAc,UAAU,CAAC;KAC/B,IAAI,OAAO,WAAW,QAAQ,UAAU;MACtC,cACE,IAAI,IACJ,cAAc,eACd,kCACF;MACA;KACF;KACA,IAAI;KACJ,IAAI;MACF,eAAe,IAAI,IAAI,WAAW,GAAG,EAAE;KACzC,QAAQ;MACN,cACE,IAAI,IACJ,cAAc,eACd,+BACF;MACA;KACF;KACA,IAAI,iBAAiB,YAAY,iBAAiB,SAAS;MACzD,cACE,IAAI,IACJ,cAAc,eACd,oCACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAQ,MAAM,SAAS,SAAS,EAAE,KAAK,WAAW,IAAI,CAAC,EACzD,CAAC;KACD;IACF;IAEA,KAAK;KACH,IAAI,CAAC,SAAS,aAAa;MACzB,cACE,IAAI,IACJ,cAAc,gBACd,2CACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAS,MAAM,SAAS,YAAY,MAAM,KAAM,KAClD,CAAC;KACD;IAGF,KAAK;KACH,IAAI,CAAC,SAAS,oBAAoB;MAChC,cACE,IAAI,IACJ,cAAc,gBACd,kDACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAS,MAAM,SAAS,mBAAmB,MAAM,KAAM,KACzD,CAAC;KACD;IAGF,KAAK,sBAAsB;KACzB,IAAI,CAAC,SAAS,oBAAoB;MAChC,cACE,IAAI,IACJ,cAAc,gBACd,kDACF;MACA;KACF;KACA,MAAM,aAAc,UAAU,CAAC;KAC/B,IACE,OAAO,WAAW,SAAS,YAC3B,CAAC,oBAAoB,SAAS,WAAW,IAAyB,GAClE;MACA,cACE,IAAI,IACJ,cAAc,eACd,4CACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAQ,MAAM,SAAS,mBAAmB,EACxC,MAAM,WAAW,KACnB,CAAC,EACH,CAAC;KACD;IACF;IAEA,SACE,cACE,IAAI,IACJ,cAAc,gBACd,mBAAmB,IAAI,QACzB;GAEJ;EACF,SAAS,KAAK;GACZ,MAAM,QAAQ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;GAChE,SAAS,UAAU,KAAK;GACxB,cAAc,IAAI,IAAI,cAAc,eAAe,MAAM,OAAO;EAClE;CACF;CAEA,MAAM,sBAAsB,SAAoC;EAC9D,QAAQ,gBAAgB,KAAK,MAAM,GAAnC;GACE,KAAK;IACH,SAAS,gBAAgB;IACzB;GAEF,KAAK,8BAA8B;IACjC,MAAM,IAAK,KAAK,UAAU,CAAC;IAC3B,SAAS,eAAe;KACtB,GAAI,OAAO,EAAE,UAAU,WAAW,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;KACxD,GAAI,OAAO,EAAE,WAAW,WAAW,EAAE,QAAQ,EAAE,OAAO,IAAI,CAAC;IAC7D,CAAC;IACD;GACF;GACA,KAAK;IACH,SAAS,QAAQ,KAAK,MAAM;IAC5B;GAEF,KAAK;IACH,SAAS,oBAAoB,KAAK,MAAM;IACxC;GAEF,KAAK,uBAAuB;IAC1B,MAAM,IAAK,KAAK,UAAU,CAAC;IAC3B,SAAS,UACP,IAAI,MAAM,OAAO,EAAE,YAAY,WAAW,EAAE,UAAU,cAAc,CACtE;IACA;GACF;GACA,SACE;EACJ;CACF;CAIA,MAAM,aAAa,UAAwB;EACzC,IAAI,MAAM,WAAW,MAAM,OAAO,eAAe;EACjD,IAAI,MAAM,WAAW,MAAM,QAAQ;EACnC,IAAI,CAAC,iBAAiB,MAAM,IAAI,GAAG;EAEnC,MAAM,MAAM,MAAM;EAClB,IAAI,UAAU,GAAG,GACf,cAAmB,GAAG;OACjB,IAAI,eAAe,GAAG,GAC3B,mBAAmB,GAAG;CAE1B;CAEA,aAAa,iBAAiB,WAAW,SAAS;CAElD,OAAO;EACL,eAAe;GACb,aAAa,oBAAoB,WAAW,SAAS;EACvD;EACA,kBAAkB,UAAmB;GACnC,KAAK;IACH,SAAS;IACT,QAAQ;IACR,QAAQ,EAAE,MAAM;GAClB,CAAC;EACH;EACA,mBAAmB,WAAoB;GACrC,KAAK;IACH,SAAS;IACT,QAAQ;IACR,QAAQ,EAAE,OAAO;GACnB,CAAC;EACH;EACA,2BAA2B,QAA2B;GACpD,KAAK;IACH,SAAS;IACT,QAAQ;IACR,QAAQ;GACV,CAAC;EACH;CACF;AACF"}
+{"version":3,"file":"bridge.js","names":[],"sources":["../../src/mcp-apps/bridge.ts"],"sourcesContent":["import type { SandboxHostFrame } from \"../sandbox-host/SandboxHost\";\nimport {\n  MCP_APP_PROTOCOL_VERSION,\n  type McpAppBridgeHandlers,\n  type McpAppDisplayMode,\n  type McpAppHostContext,\n  type McpAppHostInfo,\n  type McpAppJsonRpcMessage,\n  type McpAppJsonRpcNotification,\n  type McpAppJsonRpcRequest,\n  type McpAppJsonRpcResponse,\n} from \"./types\";\nimport { isRecord } from \"../utils/json/is-json\";\n\nconst VALID_DISPLAY_MODES = [\n  \"inline\",\n  \"fullscreen\",\n  \"pip\",\n] as const satisfies readonly McpAppDisplayMode[];\n\nexport type McpAppBridgeFrame = SandboxHostFrame;\n\nexport type CreateMcpAppBridgeOptions = {\n  frame: McpAppBridgeFrame;\n  handlers?: McpAppBridgeHandlers | undefined;\n  hostInfo?: McpAppHostInfo | undefined;\n  hostContext?: McpAppHostContext | undefined;\n};\n\nexport type McpAppBridge = {\n  onMessage: (event: MessageEvent) => void;\n  dispose: () => void;\n  notifyToolInput: (input: unknown) => void;\n  notifyToolResult: (result: unknown) => void;\n  notifyHostContextChanged: (hostContext: McpAppHostContext) => void;\n};\n\nconst DEFAULT_HOST_INFO: McpAppHostInfo = {\n  name: \"assistant-ui\",\n  version: \"0.1\",\n};\n\n// Accept both the legacy method names and the MCP-UI 2026-01-26 names that\n// `ui/*` capable widgets (e.g. xmcp's host-bridge) emit. Normalize on input\n// so downstream switch statements only need to know the legacy names.\nconst METHOD_ALIASES: Record<string, string> = {\n  \"ui/notifications/initialized\": \"notifications/initialized\",\n  \"ui/notifications/size-changed\": \"notifications/size_changed\",\n  \"ui/request-display-mode\": \"requestDisplayMode\",\n  \"ui/open-link\": \"openLink\",\n  \"ui/update-model-context\": \"updateModelContext\",\n  \"ui/message\": \"sendMessage\",\n  \"notifications/message\": \"notifications/log\",\n};\n\nconst normalizeMethod = (method: string): string =>\n  METHOD_ALIASES[method] ?? method;\n\nconst JSONRPC_ERROR = {\n  parseError: -32700,\n  invalidRequest: -32600,\n  methodNotFound: -32601,\n  invalidParams: -32602,\n  internalError: -32603,\n} as const;\n\nfunction isJsonRpcMessage(value: unknown): value is McpAppJsonRpcMessage {\n  if (!value || typeof value !== \"object\") return false;\n  const v = value as Record<string, unknown>;\n  return v.jsonrpc === \"2.0\" && typeof v.method === \"string\";\n}\n\nfunction isRequest(msg: McpAppJsonRpcMessage): msg is McpAppJsonRpcRequest {\n  return \"id\" in msg;\n}\n\nfunction isNotification(\n  msg: McpAppJsonRpcMessage,\n): msg is McpAppJsonRpcNotification {\n  return !(\"id\" in msg);\n}\n\nexport function createMcpAppBridge(\n  opts: CreateMcpAppBridgeOptions,\n): McpAppBridge {\n  const {\n    frame,\n    handlers = {},\n    hostInfo = DEFAULT_HOST_INFO,\n    hostContext = {},\n  } = opts;\n\n  const post = (msg: McpAppJsonRpcMessage) => {\n    frame.sendMessage(msg);\n  };\n\n  const respond = (\n    id: McpAppJsonRpcRequest[\"id\"],\n    payload:\n      | { result: unknown }\n      | { error: { code: number; message: string; data?: unknown } },\n  ) => {\n    const res: McpAppJsonRpcResponse = {\n      jsonrpc: \"2.0\",\n      id,\n      ...payload,\n    };\n    post(res);\n  };\n\n  const errorResponse = (\n    id: McpAppJsonRpcRequest[\"id\"],\n    code: number,\n    message: string,\n    data?: unknown,\n  ) => {\n    respond(id, {\n      error: {\n        code,\n        message,\n        ...(data !== undefined ? { data } : {}),\n      },\n    });\n  };\n\n  const handleRequest = async (req: McpAppJsonRpcRequest) => {\n    try {\n      const params = req.params;\n\n      switch (normalizeMethod(req.method)) {\n        case \"ui/initialize\": {\n          const requestedProtocolVersion =\n            isRecord(params) && typeof params.protocolVersion === \"string\"\n              ? params.protocolVersion\n              : MCP_APP_PROTOCOL_VERSION;\n          respond(req.id, {\n            result: {\n              protocolVersion: requestedProtocolVersion,\n              host: hostInfo,\n              hostInfo,\n              hostContext,\n              capabilities: {\n                tools: handlers.callTool ? {} : undefined,\n                resources:\n                  handlers.readResource || handlers.listResources\n                    ? {}\n                    : undefined,\n                ui: {\n                  sendMessage: !!handlers.sendMessage,\n                  openLink: !!handlers.openLink,\n                  requestDisplayMode: !!handlers.requestDisplayMode,\n                  updateModelContext: !!handlers.updateModelContext,\n                },\n              },\n              hostCapabilities: {\n                ...(handlers.openLink ? { openLinks: {} } : {}),\n                ...(handlers.callTool ? { serverTools: {} } : {}),\n                ...(handlers.readResource || handlers.listResources\n                  ? { serverResources: {} }\n                  : {}),\n                ...(handlers.updateModelContext\n                  ? { updateModelContext: { text: {} } }\n                  : {}),\n                ...(handlers.sendMessage ? { message: { text: {} } } : {}),\n                ...(handlers.onLog ? { logging: {} } : {}),\n              },\n            },\n          });\n          return;\n        }\n\n        case \"tools/call\": {\n          if (!handlers.callTool) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"tools/call is not supported by this host\",\n            );\n            return;\n          }\n          const callParams = (params ?? {}) as {\n            name?: unknown;\n            arguments?: unknown;\n          };\n          if (typeof callParams.name !== \"string\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"tools/call requires a string 'name'\",\n            );\n            return;\n          }\n          if (\n            handlers.allowedTools &&\n            !handlers.allowedTools.includes(callParams.name)\n          ) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              `tool '${callParams.name}' is not allowed for this app`,\n            );\n            return;\n          }\n          let callArgs: Record<string, unknown> | undefined;\n          if (callParams.arguments !== undefined) {\n            if (\n              callParams.arguments === null ||\n              typeof callParams.arguments !== \"object\" ||\n              Array.isArray(callParams.arguments)\n            ) {\n              errorResponse(\n                req.id,\n                JSONRPC_ERROR.invalidParams,\n                \"tools/call 'arguments' must be an object\",\n              );\n              return;\n            }\n            callArgs = callParams.arguments as Record<string, unknown>;\n          }\n          const result = await handlers.callTool({\n            name: callParams.name,\n            ...(callArgs !== undefined ? { arguments: callArgs } : {}),\n          });\n          respond(req.id, { result });\n          return;\n        }\n\n        case \"resources/read\": {\n          if (!handlers.readResource) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"resources/read is not supported by this host\",\n            );\n            return;\n          }\n          const readParams = (params ?? {}) as { uri?: unknown };\n          if (typeof readParams.uri !== \"string\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"resources/read requires a string 'uri'\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: await handlers.readResource({ uri: readParams.uri }),\n          });\n          return;\n        }\n\n        case \"resources/list\": {\n          if (!handlers.listResources) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"resources/list is not supported by this host\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: (await handlers.listResources(params)) ?? null,\n          });\n          return;\n        }\n\n        case \"openLink\": {\n          if (!handlers.openLink) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"openLink is not supported by this host\",\n            );\n            return;\n          }\n          const linkParams = (params ?? {}) as { url?: unknown };\n          if (typeof linkParams.url !== \"string\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"openLink requires a string 'url'\",\n            );\n            return;\n          }\n          let linkProtocol: string;\n          try {\n            linkProtocol = new URL(linkParams.url).protocol;\n          } catch {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"openLink requires a valid URL\",\n            );\n            return;\n          }\n          if (linkProtocol !== \"https:\" && linkProtocol !== \"http:\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"openLink only accepts http(s) URLs\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: await handlers.openLink({ url: linkParams.url }),\n          });\n          return;\n        }\n\n        case \"sendMessage\": {\n          if (!handlers.sendMessage) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"sendMessage is not supported by this host\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: (await handlers.sendMessage(params)) ?? null,\n          });\n          return;\n        }\n\n        case \"updateModelContext\": {\n          if (!handlers.updateModelContext) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"updateModelContext is not supported by this host\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: (await handlers.updateModelContext(params)) ?? null,\n          });\n          return;\n        }\n\n        case \"requestDisplayMode\": {\n          if (!handlers.requestDisplayMode) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"requestDisplayMode is not supported by this host\",\n            );\n            return;\n          }\n          const modeParams = (params ?? {}) as { mode?: unknown };\n          if (\n            typeof modeParams.mode !== \"string\" ||\n            !VALID_DISPLAY_MODES.includes(modeParams.mode as McpAppDisplayMode)\n          ) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"requestDisplayMode requires a valid 'mode'\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: await handlers.requestDisplayMode({\n              mode: modeParams.mode as McpAppDisplayMode,\n            }),\n          });\n          return;\n        }\n\n        default: {\n          errorResponse(\n            req.id,\n            JSONRPC_ERROR.methodNotFound,\n            `Unknown method: ${req.method}`,\n          );\n        }\n      }\n    } catch (err) {\n      const error = err instanceof Error ? err : new Error(String(err));\n      handlers.onError?.(error);\n      errorResponse(req.id, JSONRPC_ERROR.internalError, error.message);\n    }\n  };\n\n  const handleNotification = (note: McpAppJsonRpcNotification) => {\n    switch (normalizeMethod(note.method)) {\n      case \"notifications/initialized\": {\n        handlers.onInitialized?.();\n        return;\n      }\n      case \"notifications/size_changed\": {\n        const p = (note.params ?? {}) as { width?: number; height?: number };\n        handlers.onSizeChange?.({\n          ...(typeof p.width === \"number\" ? { width: p.width } : {}),\n          ...(typeof p.height === \"number\" ? { height: p.height } : {}),\n        });\n        return;\n      }\n      case \"notifications/log\": {\n        handlers.onLog?.(note.params);\n        return;\n      }\n      case \"notifications/request_teardown\": {\n        handlers.onRequestTeardown?.(note.params);\n        return;\n      }\n      case \"notifications/error\": {\n        const p = (note.params ?? {}) as { message?: string };\n        handlers.onError?.(\n          new Error(typeof p.message === \"string\" ? p.message : \"Widget error\"),\n        );\n        return;\n      }\n      default:\n        return;\n    }\n  };\n\n  // The host applies the cross-origin guard before delegating; this only\n  // validates the JSON-RPC envelope.\n  const onMessage = (event: MessageEvent) => {\n    if (!isJsonRpcMessage(event.data)) return;\n\n    const msg = event.data;\n    if (isRequest(msg)) {\n      void handleRequest(msg);\n    } else if (isNotification(msg)) {\n      handleNotification(msg);\n    }\n  };\n\n  return {\n    onMessage,\n    dispose: () => {},\n    notifyToolInput: (input: unknown) => {\n      post({\n        jsonrpc: \"2.0\",\n        method: \"notifications/tools/call/input\",\n        params: { input },\n      });\n      post({\n        jsonrpc: \"2.0\",\n        method: \"ui/notifications/tool-input\",\n        params: isRecord(input) ? { arguments: input } : {},\n      });\n    },\n    notifyToolResult: (result: unknown) => {\n      post({\n        jsonrpc: \"2.0\",\n        method: \"notifications/tools/call/result\",\n        params: { result },\n      });\n      post({\n        jsonrpc: \"2.0\",\n        method: \"ui/notifications/tool-result\",\n        params: isRecord(result)\n          ? result\n          : { content: [{ type: \"text\", text: String(result) }] },\n      });\n    },\n    notifyHostContextChanged: (ctx: McpAppHostContext) => {\n      post({\n        jsonrpc: \"2.0\",\n        method: \"notifications/host_context/changed\",\n        params: ctx,\n      });\n      post({\n        jsonrpc: \"2.0\",\n        method: \"ui/notifications/host-context-changed\",\n        params: ctx,\n      });\n    },\n  };\n}\n"],"mappings":";;;AAcA,MAAM,sBAAsB;CAC1B;CACA;CACA;AACF;AAmBA,MAAM,oBAAoC;CACxC,MAAM;CACN,SAAS;AACX;AAKA,MAAM,iBAAyC;CAC7C,gCAAgC;CAChC,iCAAiC;CACjC,2BAA2B;CAC3B,gBAAgB;CAChB,2BAA2B;CAC3B,cAAc;CACd,yBAAyB;AAC3B;AAEA,MAAM,mBAAmB,WACvB,eAAe,WAAW;AAE5B,MAAM,gBAAgB;CACpB,YAAY;CACZ,gBAAgB;CAChB,gBAAgB;CAChB,eAAe;CACf,eAAe;AACjB;AAEA,SAAS,iBAAiB,OAA+C;CACvE,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,IAAI;CACV,OAAO,EAAE,YAAY,SAAS,OAAO,EAAE,WAAW;AACpD;AAEA,SAAS,UAAU,KAAwD;CACzE,OAAO,QAAQ;AACjB;AAEA,SAAS,eACP,KACkC;CAClC,OAAO,EAAE,QAAQ;AACnB;AAEA,SAAgB,mBACd,MACc;CACd,MAAM,EACJ,OACA,WAAW,CAAC,GACZ,WAAW,mBACX,cAAc,CAAC,MACb;CAEJ,MAAM,QAAQ,QAA8B;EAC1C,MAAM,YAAY,GAAG;CACvB;CAEA,MAAM,WACJ,IACA,YAGG;EAMH,KAAK;GAJH,SAAS;GACT;GACA,GAAG;EAEE,CAAC;CACV;CAEA,MAAM,iBACJ,IACA,MACA,SACA,SACG;EACH,QAAQ,IAAI,EACV,OAAO;GACL;GACA;GACA,GAAI,SAAS,KAAA,IAAY,EAAE,KAAK,IAAI,CAAC;EACvC,EACF,CAAC;CACH;CAEA,MAAM,gBAAgB,OAAO,QAA8B;EACzD,IAAI;GACF,MAAM,SAAS,IAAI;GAEnB,QAAQ,gBAAgB,IAAI,MAAM,GAAlC;IACE,KAAK,iBAAiB;KACpB,MAAM,2BACJ,SAAS,MAAM,KAAK,OAAO,OAAO,oBAAoB,WAClD,OAAO,kBAAA;KAEb,QAAQ,IAAI,IAAI,EACd,QAAQ;MACN,iBAAiB;MACjB,MAAM;MACN;MACA;MACA,cAAc;OACZ,OAAO,SAAS,WAAW,CAAC,IAAI,KAAA;OAChC,WACE,SAAS,gBAAgB,SAAS,gBAC9B,CAAC,IACD,KAAA;OACN,IAAI;QACF,aAAa,CAAC,CAAC,SAAS;QACxB,UAAU,CAAC,CAAC,SAAS;QACrB,oBAAoB,CAAC,CAAC,SAAS;QAC/B,oBAAoB,CAAC,CAAC,SAAS;OACjC;MACF;MACA,kBAAkB;OAChB,GAAI,SAAS,WAAW,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC;OAC7C,GAAI,SAAS,WAAW,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC;OAC/C,GAAI,SAAS,gBAAgB,SAAS,gBAClC,EAAE,iBAAiB,CAAC,EAAE,IACtB,CAAC;OACL,GAAI,SAAS,qBACT,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,EAAE,IACnC,CAAC;OACL,GAAI,SAAS,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC;OACxD,GAAI,SAAS,QAAQ,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC;MAC1C;KACF,EACF,CAAC;KACD;IACF;IAEA,KAAK,cAAc;KACjB,IAAI,CAAC,SAAS,UAAU;MACtB,cACE,IAAI,IACJ,cAAc,gBACd,0CACF;MACA;KACF;KACA,MAAM,aAAc,UAAU,CAAC;KAI/B,IAAI,OAAO,WAAW,SAAS,UAAU;MACvC,cACE,IAAI,IACJ,cAAc,eACd,qCACF;MACA;KACF;KACA,IACE,SAAS,gBACT,CAAC,SAAS,aAAa,SAAS,WAAW,IAAI,GAC/C;MACA,cACE,IAAI,IACJ,cAAc,eACd,SAAS,WAAW,KAAK,8BAC3B;MACA;KACF;KACA,IAAI;KACJ,IAAI,WAAW,cAAc,KAAA,GAAW;MACtC,IACE,WAAW,cAAc,QACzB,OAAO,WAAW,cAAc,YAChC,MAAM,QAAQ,WAAW,SAAS,GAClC;OACA,cACE,IAAI,IACJ,cAAc,eACd,0CACF;OACA;MACF;MACA,WAAW,WAAW;KACxB;KACA,MAAM,SAAS,MAAM,SAAS,SAAS;MACrC,MAAM,WAAW;MACjB,GAAI,aAAa,KAAA,IAAY,EAAE,WAAW,SAAS,IAAI,CAAC;KAC1D,CAAC;KACD,QAAQ,IAAI,IAAI,EAAE,OAAO,CAAC;KAC1B;IACF;IAEA,KAAK,kBAAkB;KACrB,IAAI,CAAC,SAAS,cAAc;MAC1B,cACE,IAAI,IACJ,cAAc,gBACd,8CACF;MACA;KACF;KACA,MAAM,aAAc,UAAU,CAAC;KAC/B,IAAI,OAAO,WAAW,QAAQ,UAAU;MACtC,cACE,IAAI,IACJ,cAAc,eACd,wCACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAQ,MAAM,SAAS,aAAa,EAAE,KAAK,WAAW,IAAI,CAAC,EAC7D,CAAC;KACD;IACF;IAEA,KAAK;KACH,IAAI,CAAC,SAAS,eAAe;MAC3B,cACE,IAAI,IACJ,cAAc,gBACd,8CACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAS,MAAM,SAAS,cAAc,MAAM,KAAM,KACpD,CAAC;KACD;IAGF,KAAK,YAAY;KACf,IAAI,CAAC,SAAS,UAAU;MACtB,cACE,IAAI,IACJ,cAAc,gBACd,wCACF;MACA;KACF;KACA,MAAM,aAAc,UAAU,CAAC;KAC/B,IAAI,OAAO,WAAW,QAAQ,UAAU;MACtC,cACE,IAAI,IACJ,cAAc,eACd,kCACF;MACA;KACF;KACA,IAAI;KACJ,IAAI;MACF,eAAe,IAAI,IAAI,WAAW,GAAG,CAAC,CAAC;KACzC,QAAQ;MACN,cACE,IAAI,IACJ,cAAc,eACd,+BACF;MACA;KACF;KACA,IAAI,iBAAiB,YAAY,iBAAiB,SAAS;MACzD,cACE,IAAI,IACJ,cAAc,eACd,oCACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAQ,MAAM,SAAS,SAAS,EAAE,KAAK,WAAW,IAAI,CAAC,EACzD,CAAC;KACD;IACF;IAEA,KAAK;KACH,IAAI,CAAC,SAAS,aAAa;MACzB,cACE,IAAI,IACJ,cAAc,gBACd,2CACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAS,MAAM,SAAS,YAAY,MAAM,KAAM,KAClD,CAAC;KACD;IAGF,KAAK;KACH,IAAI,CAAC,SAAS,oBAAoB;MAChC,cACE,IAAI,IACJ,cAAc,gBACd,kDACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAS,MAAM,SAAS,mBAAmB,MAAM,KAAM,KACzD,CAAC;KACD;IAGF,KAAK,sBAAsB;KACzB,IAAI,CAAC,SAAS,oBAAoB;MAChC,cACE,IAAI,IACJ,cAAc,gBACd,kDACF;MACA;KACF;KACA,MAAM,aAAc,UAAU,CAAC;KAC/B,IACE,OAAO,WAAW,SAAS,YAC3B,CAAC,oBAAoB,SAAS,WAAW,IAAyB,GAClE;MACA,cACE,IAAI,IACJ,cAAc,eACd,4CACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAQ,MAAM,SAAS,mBAAmB,EACxC,MAAM,WAAW,KACnB,CAAC,EACH,CAAC;KACD;IACF;IAEA,SACE,cACE,IAAI,IACJ,cAAc,gBACd,mBAAmB,IAAI,QACzB;GAEJ;EACF,SAAS,KAAK;GACZ,MAAM,QAAQ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;GAChE,SAAS,UAAU,KAAK;GACxB,cAAc,IAAI,IAAI,cAAc,eAAe,MAAM,OAAO;EAClE;CACF;CAEA,MAAM,sBAAsB,SAAoC;EAC9D,QAAQ,gBAAgB,KAAK,MAAM,GAAnC;GACE,KAAK;IACH,SAAS,gBAAgB;IACzB;GAEF,KAAK,8BAA8B;IACjC,MAAM,IAAK,KAAK,UAAU,CAAC;IAC3B,SAAS,eAAe;KACtB,GAAI,OAAO,EAAE,UAAU,WAAW,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;KACxD,GAAI,OAAO,EAAE,WAAW,WAAW,EAAE,QAAQ,EAAE,OAAO,IAAI,CAAC;IAC7D,CAAC;IACD;GACF;GACA,KAAK;IACH,SAAS,QAAQ,KAAK,MAAM;IAC5B;GAEF,KAAK;IACH,SAAS,oBAAoB,KAAK,MAAM;IACxC;GAEF,KAAK,uBAAuB;IAC1B,MAAM,IAAK,KAAK,UAAU,CAAC;IAC3B,SAAS,UACP,IAAI,MAAM,OAAO,EAAE,YAAY,WAAW,EAAE,UAAU,cAAc,CACtE;IACA;GACF;GACA,SACE;EACJ;CACF;CAIA,MAAM,aAAa,UAAwB;EACzC,IAAI,CAAC,iBAAiB,MAAM,IAAI,GAAG;EAEnC,MAAM,MAAM,MAAM;EAClB,IAAI,UAAU,GAAG,GACf,cAAmB,GAAG;OACjB,IAAI,eAAe,GAAG,GAC3B,mBAAmB,GAAG;CAE1B;CAEA,OAAO;EACL;EACA,eAAe,CAAC;EAChB,kBAAkB,UAAmB;GACnC,KAAK;IACH,SAAS;IACT,QAAQ;IACR,QAAQ,EAAE,MAAM;GAClB,CAAC;GACD,KAAK;IACH,SAAS;IACT,QAAQ;IACR,QAAQ,SAAS,KAAK,IAAI,EAAE,WAAW,MAAM,IAAI,CAAC;GACpD,CAAC;EACH;EACA,mBAAmB,WAAoB;GACrC,KAAK;IACH,SAAS;IACT,QAAQ;IACR,QAAQ,EAAE,OAAO;GACnB,CAAC;GACD,KAAK;IACH,SAAS;IACT,QAAQ;IACR,QAAQ,SAAS,MAAM,IACnB,SACA,EAAE,SAAS,CAAC;KAAE,MAAM;KAAQ,MAAM,OAAO,MAAM;IAAE,CAAC,EAAE;GAC1D,CAAC;EACH;EACA,2BAA2B,QAA2B;GACpD,KAAK;IACH,SAAS;IACT,QAAQ;IACR,QAAQ;GACV,CAAC;GACD,KAAK;IACH,SAAS;IACT,QAAQ;IACR,QAAQ;GACV,CAAC;EACH;CACF;AACF"}