@assistant-ui/react 0.14.7 → 0.14.8

package/dist/mcp-apps/bridge.js

@@ -1,303 +1,255 @@
-import { MCP_APP_PROTOCOL_VERSION, } from "./types.js";
+import "./types.js";
+//#region src/mcp-apps/bridge.ts
 const VALID_DISPLAY_MODES = [
-    "inline",
-    "fullscreen",
-    "pip",
+	"inline",
+	"fullscreen",
+	"pip"
 ];
 const DEFAULT_HOST_INFO = {
-    name: "assistant-ui",
-    version: "0.1",
+	name: "assistant-ui",
+	version: "0.1"
 };
-// Accept both the legacy method names and the MCP-UI 2026-01-26 names that
-// `ui/*` capable widgets (e.g. xmcp's host-bridge) emit. Normalize on input
-// so downstream switch statements only need to know the legacy names.
 const METHOD_ALIASES = {
-    "ui/notifications/initialized": "notifications/initialized",
-    "ui/notifications/size-changed": "notifications/size_changed",
-    "ui/request-display-mode": "requestDisplayMode",
-    "ui/open-link": "openLink",
-    "ui/update-model-context": "updateModelContext",
-    "ui/message": "sendMessage",
-    "notifications/message": "notifications/log",
+	"ui/notifications/initialized": "notifications/initialized",
+	"ui/notifications/size-changed": "notifications/size_changed",
+	"ui/request-display-mode": "requestDisplayMode",
+	"ui/open-link": "openLink",
+	"ui/update-model-context": "updateModelContext",
+	"ui/message": "sendMessage",
+	"notifications/message": "notifications/log"
 };
 const normalizeMethod = (method) => METHOD_ALIASES[method] ?? method;
 const JSONRPC_ERROR = {
-    parseError: -32700,
-    invalidRequest: -32600,
-    methodNotFound: -32601,
-    invalidParams: -32602,
-    internalError: -32603,
+	parseError: -32700,
+	invalidRequest: -32600,
+	methodNotFound: -32601,
+	invalidParams: -32602,
+	internalError: -32603
 };
 function isJsonRpcMessage(value) {
-    if (!value || typeof value !== "object")
-        return false;
-    const v = value;
-    return v.jsonrpc === "2.0" && typeof v.method === "string";
+	if (!value || typeof value !== "object") return false;
+	const v = value;
+	return v.jsonrpc === "2.0" && typeof v.method === "string";
 }
 function isRequest(msg) {
-    return "id" in msg;
+	return "id" in msg;
 }
 function isNotification(msg) {
-    return !("id" in msg);
+	return !("id" in msg);
 }
-export function createMcpAppBridge(opts) {
-    const { frame, handlers = {}, hostInfo = DEFAULT_HOST_INFO, hostContext = {}, targetWindow = typeof window !== "undefined" ? window : undefined, } = opts;
-    if (!targetWindow) {
-        throw new Error("createMcpAppBridge requires a window context");
-    }
-    const post = (msg) => {
-        frame.sendMessage(msg);
-    };
-    const respond = (id, payload) => {
-        const res = {
-            jsonrpc: "2.0",
-            id,
-            ...payload,
-        };
-        post(res);
-    };
-    const errorResponse = (id, code, message, data) => {
-        respond(id, {
-            error: {
-                code,
-                message,
-                ...(data !== undefined ? { data } : {}),
-            },
-        });
-    };
-    const handleRequest = async (req) => {
-        try {
-            const params = req.params;
-            switch (normalizeMethod(req.method)) {
-                case "ui/initialize": {
-                    respond(req.id, {
-                        result: {
-                            protocolVersion: MCP_APP_PROTOCOL_VERSION,
-                            host: hostInfo,
-                            hostContext,
-                            capabilities: {
-                                tools: handlers.callTool ? {} : undefined,
-                                resources: handlers.readResource || handlers.listResources
-                                    ? {}
-                                    : undefined,
-                                ui: {
-                                    sendMessage: !!handlers.sendMessage,
-                                    openLink: !!handlers.openLink,
-                                    requestDisplayMode: !!handlers.requestDisplayMode,
-                                    updateModelContext: !!handlers.updateModelContext,
-                                },
-                            },
-                        },
-                    });
-                    return;
-                }
-                case "tools/call": {
-                    if (!handlers.callTool) {
-                        errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "tools/call is not supported by this host");
-                        return;
-                    }
-                    const callParams = (params ?? {});
-                    if (typeof callParams.name !== "string") {
-                        errorResponse(req.id, JSONRPC_ERROR.invalidParams, "tools/call requires a string 'name'");
-                        return;
-                    }
-                    if (handlers.allowedTools &&
-                        !handlers.allowedTools.includes(callParams.name)) {
-                        errorResponse(req.id, JSONRPC_ERROR.invalidParams, `tool '${callParams.name}' is not allowed for this app`);
-                        return;
-                    }
-                    let callArgs;
-                    if (callParams.arguments !== undefined) {
-                        if (callParams.arguments === null ||
-                            typeof callParams.arguments !== "object" ||
-                            Array.isArray(callParams.arguments)) {
-                            errorResponse(req.id, JSONRPC_ERROR.invalidParams, "tools/call 'arguments' must be an object");
-                            return;
-                        }
-                        callArgs = callParams.arguments;
-                    }
-                    const result = await handlers.callTool({
-                        name: callParams.name,
-                        ...(callArgs !== undefined ? { arguments: callArgs } : {}),
-                    });
-                    respond(req.id, { result });
-                    return;
-                }
-                case "resources/read": {
-                    if (!handlers.readResource) {
-                        errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "resources/read is not supported by this host");
-                        return;
-                    }
-                    const readParams = (params ?? {});
-                    if (typeof readParams.uri !== "string") {
-                        errorResponse(req.id, JSONRPC_ERROR.invalidParams, "resources/read requires a string 'uri'");
-                        return;
-                    }
-                    respond(req.id, {
-                        result: await handlers.readResource({ uri: readParams.uri }),
-                    });
-                    return;
-                }
-                case "resources/list": {
-                    if (!handlers.listResources) {
-                        errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "resources/list is not supported by this host");
-                        return;
-                    }
-                    respond(req.id, {
-                        result: (await handlers.listResources(params)) ?? null,
-                    });
-                    return;
-                }
-                case "openLink": {
-                    if (!handlers.openLink) {
-                        errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "openLink is not supported by this host");
-                        return;
-                    }
-                    const linkParams = (params ?? {});
-                    if (typeof linkParams.url !== "string") {
-                        errorResponse(req.id, JSONRPC_ERROR.invalidParams, "openLink requires a string 'url'");
-                        return;
-                    }
-                    let linkProtocol;
-                    try {
-                        linkProtocol = new URL(linkParams.url).protocol;
-                    }
-                    catch {
-                        errorResponse(req.id, JSONRPC_ERROR.invalidParams, "openLink requires a valid URL");
-                        return;
-                    }
-                    if (linkProtocol !== "https:" && linkProtocol !== "http:") {
-                        errorResponse(req.id, JSONRPC_ERROR.invalidParams, "openLink only accepts http(s) URLs");
-                        return;
-                    }
-                    respond(req.id, {
-                        result: await handlers.openLink({ url: linkParams.url }),
-                    });
-                    return;
-                }
-                case "sendMessage": {
-                    if (!handlers.sendMessage) {
-                        errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "sendMessage is not supported by this host");
-                        return;
-                    }
-                    respond(req.id, {
-                        result: (await handlers.sendMessage(params)) ?? null,
-                    });
-                    return;
-                }
-                case "updateModelContext": {
-                    if (!handlers.updateModelContext) {
-                        errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "updateModelContext is not supported by this host");
-                        return;
-                    }
-                    respond(req.id, {
-                        result: (await handlers.updateModelContext(params)) ?? null,
-                    });
-                    return;
-                }
-                case "requestDisplayMode": {
-                    if (!handlers.requestDisplayMode) {
-                        errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "requestDisplayMode is not supported by this host");
-                        return;
-                    }
-                    const modeParams = (params ?? {});
-                    if (typeof modeParams.mode !== "string" ||
-                        !VALID_DISPLAY_MODES.includes(modeParams.mode)) {
-                        errorResponse(req.id, JSONRPC_ERROR.invalidParams, "requestDisplayMode requires a valid 'mode'");
-                        return;
-                    }
-                    respond(req.id, {
-                        result: await handlers.requestDisplayMode({
-                            mode: modeParams.mode,
-                        }),
-                    });
-                    return;
-                }
-                default: {
-                    errorResponse(req.id, JSONRPC_ERROR.methodNotFound, `Unknown method: ${req.method}`);
-                }
-            }
-        }
-        catch (err) {
-            const error = err instanceof Error ? err : new Error(String(err));
-            handlers.onError?.(error);
-            errorResponse(req.id, JSONRPC_ERROR.internalError, error.message);
-        }
-    };
-    const handleNotification = (note) => {
-        switch (normalizeMethod(note.method)) {
-            case "notifications/initialized": {
-                handlers.onInitialized?.();
-                return;
-            }
-            case "notifications/size_changed": {
-                const p = (note.params ?? {});
-                handlers.onSizeChange?.({
-                    ...(typeof p.width === "number" ? { width: p.width } : {}),
-                    ...(typeof p.height === "number" ? { height: p.height } : {}),
-                });
-                return;
-            }
-            case "notifications/log": {
-                handlers.onLog?.(note.params);
-                return;
-            }
-            case "notifications/request_teardown": {
-                handlers.onRequestTeardown?.(note.params);
-                return;
-            }
-            case "notifications/error": {
-                const p = (note.params ?? {});
-                handlers.onError?.(new Error(typeof p.message === "string" ? p.message : "Widget error"));
-                return;
-            }
-            default:
-                return;
-        }
-    };
-    // Cross-origin guard: ignore any postMessage not originating from this
-    // app's iframe contentWindow at the SafeContentFrame-issued origin.
-    const onMessage = (event) => {
-        if (event.source !== frame.iframe.contentWindow)
-            return;
-        if (event.origin !== frame.origin)
-            return;
-        if (!isJsonRpcMessage(event.data))
-            return;
-        const msg = event.data;
-        if (isRequest(msg)) {
-            void handleRequest(msg);
-        }
-        else if (isNotification(msg)) {
-            handleNotification(msg);
-        }
-    };
-    targetWindow.addEventListener("message", onMessage);
-    return {
-        dispose: () => {
-            targetWindow.removeEventListener("message", onMessage);
-        },
-        notifyToolInput: (input) => {
-            post({
-                jsonrpc: "2.0",
-                method: "notifications/tools/call/input",
-                params: { input },
-            });
-        },
-        notifyToolResult: (result) => {
-            post({
-                jsonrpc: "2.0",
-                method: "notifications/tools/call/result",
-                params: { result },
-            });
-        },
-        notifyHostContextChanged: (ctx) => {
-            post({
-                jsonrpc: "2.0",
-                method: "notifications/host_context/changed",
-                params: ctx,
-            });
-        },
-    };
+function createMcpAppBridge(opts) {
+	const { frame, handlers = {}, hostInfo = DEFAULT_HOST_INFO, hostContext = {}, targetWindow = typeof window !== "undefined" ? window : void 0 } = opts;
+	if (!targetWindow) throw new Error("createMcpAppBridge requires a window context");
+	const post = (msg) => {
+		frame.sendMessage(msg);
+	};
+	const respond = (id, payload) => {
+		post({
+			jsonrpc: "2.0",
+			id,
+			...payload
+		});
+	};
+	const errorResponse = (id, code, message, data) => {
+		respond(id, { error: {
+			code,
+			message,
+			...data !== void 0 ? { data } : {}
+		} });
+	};
+	const handleRequest = async (req) => {
+		try {
+			const params = req.params;
+			switch (normalizeMethod(req.method)) {
+				case "ui/initialize":
+					respond(req.id, { result: {
+						protocolVersion: "0.1",
+						host: hostInfo,
+						hostContext,
+						capabilities: {
+							tools: handlers.callTool ? {} : void 0,
+							resources: handlers.readResource || handlers.listResources ? {} : void 0,
+							ui: {
+								sendMessage: !!handlers.sendMessage,
+								openLink: !!handlers.openLink,
+								requestDisplayMode: !!handlers.requestDisplayMode,
+								updateModelContext: !!handlers.updateModelContext
+							}
+						}
+					} });
+					return;
+				case "tools/call": {
+					if (!handlers.callTool) {
+						errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "tools/call is not supported by this host");
+						return;
+					}
+					const callParams = params ?? {};
+					if (typeof callParams.name !== "string") {
+						errorResponse(req.id, JSONRPC_ERROR.invalidParams, "tools/call requires a string 'name'");
+						return;
+					}
+					if (handlers.allowedTools && !handlers.allowedTools.includes(callParams.name)) {
+						errorResponse(req.id, JSONRPC_ERROR.invalidParams, `tool '${callParams.name}' is not allowed for this app`);
+						return;
+					}
+					let callArgs;
+					if (callParams.arguments !== void 0) {
+						if (callParams.arguments === null || typeof callParams.arguments !== "object" || Array.isArray(callParams.arguments)) {
+							errorResponse(req.id, JSONRPC_ERROR.invalidParams, "tools/call 'arguments' must be an object");
+							return;
+						}
+						callArgs = callParams.arguments;
+					}
+					const result = await handlers.callTool({
+						name: callParams.name,
+						...callArgs !== void 0 ? { arguments: callArgs } : {}
+					});
+					respond(req.id, { result });
+					return;
+				}
+				case "resources/read": {
+					if (!handlers.readResource) {
+						errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "resources/read is not supported by this host");
+						return;
+					}
+					const readParams = params ?? {};
+					if (typeof readParams.uri !== "string") {
+						errorResponse(req.id, JSONRPC_ERROR.invalidParams, "resources/read requires a string 'uri'");
+						return;
+					}
+					respond(req.id, { result: await handlers.readResource({ uri: readParams.uri }) });
+					return;
+				}
+				case "resources/list":
+					if (!handlers.listResources) {
+						errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "resources/list is not supported by this host");
+						return;
+					}
+					respond(req.id, { result: await handlers.listResources(params) ?? null });
+					return;
+				case "openLink": {
+					if (!handlers.openLink) {
+						errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "openLink is not supported by this host");
+						return;
+					}
+					const linkParams = params ?? {};
+					if (typeof linkParams.url !== "string") {
+						errorResponse(req.id, JSONRPC_ERROR.invalidParams, "openLink requires a string 'url'");
+						return;
+					}
+					let linkProtocol;
+					try {
+						linkProtocol = new URL(linkParams.url).protocol;
+					} catch {
+						errorResponse(req.id, JSONRPC_ERROR.invalidParams, "openLink requires a valid URL");
+						return;
+					}
+					if (linkProtocol !== "https:" && linkProtocol !== "http:") {
+						errorResponse(req.id, JSONRPC_ERROR.invalidParams, "openLink only accepts http(s) URLs");
+						return;
+					}
+					respond(req.id, { result: await handlers.openLink({ url: linkParams.url }) });
+					return;
+				}
+				case "sendMessage":
+					if (!handlers.sendMessage) {
+						errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "sendMessage is not supported by this host");
+						return;
+					}
+					respond(req.id, { result: await handlers.sendMessage(params) ?? null });
+					return;
+				case "updateModelContext":
+					if (!handlers.updateModelContext) {
+						errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "updateModelContext is not supported by this host");
+						return;
+					}
+					respond(req.id, { result: await handlers.updateModelContext(params) ?? null });
+					return;
+				case "requestDisplayMode": {
+					if (!handlers.requestDisplayMode) {
+						errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "requestDisplayMode is not supported by this host");
+						return;
+					}
+					const modeParams = params ?? {};
+					if (typeof modeParams.mode !== "string" || !VALID_DISPLAY_MODES.includes(modeParams.mode)) {
+						errorResponse(req.id, JSONRPC_ERROR.invalidParams, "requestDisplayMode requires a valid 'mode'");
+						return;
+					}
+					respond(req.id, { result: await handlers.requestDisplayMode({ mode: modeParams.mode }) });
+					return;
+				}
+				default: errorResponse(req.id, JSONRPC_ERROR.methodNotFound, `Unknown method: ${req.method}`);
+			}
+		} catch (err) {
+			const error = err instanceof Error ? err : new Error(String(err));
+			handlers.onError?.(error);
+			errorResponse(req.id, JSONRPC_ERROR.internalError, error.message);
+		}
+	};
+	const handleNotification = (note) => {
+		switch (normalizeMethod(note.method)) {
+			case "notifications/initialized":
+				handlers.onInitialized?.();
+				return;
+			case "notifications/size_changed": {
+				const p = note.params ?? {};
+				handlers.onSizeChange?.({
+					...typeof p.width === "number" ? { width: p.width } : {},
+					...typeof p.height === "number" ? { height: p.height } : {}
+				});
+				return;
+			}
+			case "notifications/log":
+				handlers.onLog?.(note.params);
+				return;
+			case "notifications/request_teardown":
+				handlers.onRequestTeardown?.(note.params);
+				return;
+			case "notifications/error": {
+				const p = note.params ?? {};
+				handlers.onError?.(new Error(typeof p.message === "string" ? p.message : "Widget error"));
+				return;
+			}
+			default: return;
+		}
+	};
+	const onMessage = (event) => {
+		if (event.source !== frame.iframe.contentWindow) return;
+		if (event.origin !== frame.origin) return;
+		if (!isJsonRpcMessage(event.data)) return;
+		const msg = event.data;
+		if (isRequest(msg)) handleRequest(msg);
+		else if (isNotification(msg)) handleNotification(msg);
+	};
+	targetWindow.addEventListener("message", onMessage);
+	return {
+		dispose: () => {
+			targetWindow.removeEventListener("message", onMessage);
+		},
+		notifyToolInput: (input) => {
+			post({
+				jsonrpc: "2.0",
+				method: "notifications/tools/call/input",
+				params: { input }
+			});
+		},
+		notifyToolResult: (result) => {
+			post({
+				jsonrpc: "2.0",
+				method: "notifications/tools/call/result",
+				params: { result }
+			});
+		},
+		notifyHostContextChanged: (ctx) => {
+			post({
+				jsonrpc: "2.0",
+				method: "notifications/host_context/changed",
+				params: ctx
+			});
+		}
+	};
 }
+//#endregion
+export { createMcpAppBridge };
+
 //# sourceMappingURL=bridge.js.map

package/dist/mcp-apps/bridge.js.map

@@ -1 +1 @@
-{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../src/mcp-apps/bridge.ts"],"names":[],"mappings":"AACA,OAAO,EACL,wBAAwB,GASzB,mBAAgB;AAEjB,MAAM,mBAAmB,GAAG;IAC1B,QAAQ;IACR,YAAY;IACZ,KAAK;CAC0C,CAAC;AAsBlD,MAAM,iBAAiB,GAAmB;IACxC,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,KAAK;CACf,CAAC;AAEF,2EAA2E;AAC3E,4EAA4E;AAC5E,sEAAsE;AACtE,MAAM,cAAc,GAA2B;IAC7C,8BAA8B,EAAE,2BAA2B;IAC3D,+BAA+B,EAAE,4BAA4B;IAC7D,yBAAyB,EAAE,oBAAoB;IAC/C,cAAc,EAAE,UAAU;IAC1B,yBAAyB,EAAE,oBAAoB;IAC/C,YAAY,EAAE,aAAa;IAC3B,uBAAuB,EAAE,mBAAmB;CAC7C,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,MAAc,EAAU,EAAE,CACjD,cAAc,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC;AAEnC,MAAM,aAAa,GAAG;IACpB,UAAU,EAAE,CAAC,KAAK;IAClB,cAAc,EAAE,CAAC,KAAK;IACtB,cAAc,EAAE,CAAC,KAAK;IACtB,aAAa,EAAE,CAAC,KAAK;IACrB,aAAa,EAAE,CAAC,KAAK;CACb,CAAC;AAEX,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CAAC,CAAC,OAAO,KAAK,KAAK,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;AAC7D,CAAC;AAED,SAAS,SAAS,CAAC,GAAyB;IAC1C,OAAO,IAAI,IAAI,GAAG,CAAC;AACrB,CAAC;AAED,SAAS,cAAc,CACrB,GAAyB;IAEzB,OAAO,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,IAA+B;IAE/B,MAAM,EACJ,KAAK,EACL,QAAQ,GAAG,EAAE,EACb,QAAQ,GAAG,iBAAiB,EAC5B,WAAW,GAAG,EAAE,EAChB,YAAY,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,GAClE,GAAG,IAAI,CAAC;IAET,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,GAAyB,EAAE,EAAE;QACzC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CACd,EAA8B,EAC9B,OAEgE,EAChE,EAAE;QACF,MAAM,GAAG,GAA0B;YACjC,OAAO,EAAE,KAAK;YACd,EAAE;YACF,GAAG,OAAO;SACX,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,CACpB,EAA8B,EAC9B,IAAY,EACZ,OAAe,EACf,IAAc,EACd,EAAE;QACF,OAAO,CAAC,EAAE,EAAE;YACV,KAAK,EAAE;gBACL,IAAI;gBACJ,OAAO;gBACP,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxC;SACF,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,EAAE,GAAyB,EAAE,EAAE;QACxD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YAE1B,QAAQ,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpC,KAAK,eAAe,CAAC,CAAC,CAAC;oBACrB,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;wBACd,MAAM,EAAE;4BACN,eAAe,EAAE,wBAAwB;4BACzC,IAAI,EAAE,QAAQ;4BACd,WAAW;4BACX,YAAY,EAAE;gCACZ,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;gCACzC,SAAS,EACP,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,aAAa;oCAC7C,CAAC,CAAC,EAAE;oCACJ,CAAC,CAAC,SAAS;gCACf,EAAE,EAAE;oCACF,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW;oCACnC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ;oCAC7B,kBAAkB,EAAE,CAAC,CAAC,QAAQ,CAAC,kBAAkB;oCACjD,kBAAkB,EAAE,CAAC,CAAC,QAAQ,CAAC,kBAAkB;iCAClD;6BACF;yBACF;qBACF,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;wBACvB,aAAa,CACX,GAAG,CAAC,EAAE,EACN,aAAa,CAAC,cAAc,EAC5B,0CAA0C,CAC3C,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,EAAE,CAG/B,CAAC;oBACF,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACxC,aAAa,CACX,GAAG,CAAC,EAAE,EACN,aAAa,CAAC,aAAa,EAC3B,qCAAqC,CACtC,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,IACE,QAAQ,CAAC,YAAY;wBACrB,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAChD,CAAC;wBACD,aAAa,CACX,GAAG,CAAC,EAAE,EACN,aAAa,CAAC,aAAa,EAC3B,SAAS,UAAU,CAAC,IAAI,+BAA+B,CACxD,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,IAAI,QAA6C,CAAC;oBAClD,IAAI,UAAU,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;wBACvC,IACE,UAAU,CAAC,SAAS,KAAK,IAAI;4BAC7B,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ;4BACxC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EACnC,CAAC;4BACD,aAAa,CACX,GAAG,CAAC,EAAE,EACN,aAAa,CAAC,aAAa,EAC3B,0CAA0C,CAC3C,CAAC;4BACF,OAAO;wBACT,CAAC;wBACD,QAAQ,GAAG,UAAU,CAAC,SAAoC,CAAC;oBAC7D,CAAC;oBACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC;wBACrC,IAAI,EAAE,UAAU,CAAC,IAAI;wBACrB,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC3D,CAAC,CAAC;oBACH,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC5B,OAAO;gBACT,CAAC;gBAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;oBACtB,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;wBAC3B,aAAa,CACX,GAAG,CAAC,EAAE,EACN,aAAa,CAAC,cAAc,EAC5B,8CAA8C,CAC/C,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,EAAE,CAAsB,CAAC;oBACvD,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;wBACvC,aAAa,CACX,GAAG,CAAC,EAAE,EACN,aAAa,CAAC,aAAa,EAC3B,wCAAwC,CACzC,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;wBACd,MAAM,EAAE,MAAM,QAAQ,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC;qBAC7D,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;oBACtB,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;wBAC5B,aAAa,CACX,GAAG,CAAC,EAAE,EACN,aAAa,CAAC,cAAc,EAC5B,8CAA8C,CAC/C,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;wBACd,MAAM,EAAE,CAAC,MAAM,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI;qBACvD,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,KAAK,UAAU,CAAC,CAAC,CAAC;oBAChB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;wBACvB,aAAa,CACX,GAAG,CAAC,EAAE,EACN,aAAa,CAAC,cAAc,EAC5B,wCAAwC,CACzC,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,EAAE,CAAsB,CAAC;oBACvD,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;wBACvC,aAAa,CACX,GAAG,CAAC,EAAE,EACN,aAAa,CAAC,aAAa,EAC3B,kCAAkC,CACnC,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,IAAI,YAAoB,CAAC;oBACzB,IAAI,CAAC;wBACH,YAAY,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;oBAClD,CAAC;oBAAC,MAAM,CAAC;wBACP,aAAa,CACX,GAAG,CAAC,EAAE,EACN,aAAa,CAAC,aAAa,EAC3B,+BAA+B,CAChC,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,IAAI,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;wBAC1D,aAAa,CACX,GAAG,CAAC,EAAE,EACN,aAAa,CAAC,aAAa,EAC3B,oCAAoC,CACrC,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;wBACd,MAAM,EAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC;qBACzD,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;wBAC1B,aAAa,CACX,GAAG,CAAC,EAAE,EACN,aAAa,CAAC,cAAc,EAC5B,2CAA2C,CAC5C,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;wBACd,MAAM,EAAE,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI;qBACrD,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,KAAK,oBAAoB,CAAC,CAAC,CAAC;oBAC1B,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;wBACjC,aAAa,CACX,GAAG,CAAC,EAAE,EACN,aAAa,CAAC,cAAc,EAC5B,kDAAkD,CACnD,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;wBACd,MAAM,EAAE,CAAC,MAAM,QAAQ,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI;qBAC5D,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,KAAK,oBAAoB,CAAC,CAAC,CAAC;oBAC1B,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;wBACjC,aAAa,CACX,GAAG,CAAC,EAAE,EACN,aAAa,CAAC,cAAc,EAC5B,kDAAkD,CACnD,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,EAAE,CAAuB,CAAC;oBACxD,IACE,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ;wBACnC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAyB,CAAC,EACnE,CAAC;wBACD,aAAa,CACX,GAAG,CAAC,EAAE,EACN,aAAa,CAAC,aAAa,EAC3B,4CAA4C,CAC7C,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;wBACd,MAAM,EAAE,MAAM,QAAQ,CAAC,kBAAkB,CAAC;4BACxC,IAAI,EAAE,UAAU,CAAC,IAAyB;yBAC3C,CAAC;qBACH,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,OAAO,CAAC,CAAC,CAAC;oBACR,aAAa,CACX,GAAG,CAAC,EAAE,EACN,aAAa,CAAC,cAAc,EAC5B,mBAAmB,GAAG,CAAC,MAAM,EAAE,CAChC,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAClE,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YAC1B,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACpE,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,CAAC,IAA+B,EAAE,EAAE;QAC7D,QAAQ,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,KAAK,2BAA2B,CAAC,CAAC,CAAC;gBACjC,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC;gBAC3B,OAAO;YACT,CAAC;YACD,KAAK,4BAA4B,CAAC,CAAC,CAAC;gBAClC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAwC,CAAC;gBACrE,QAAQ,CAAC,YAAY,EAAE,CAAC;oBACtB,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1D,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9D,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;gBACzB,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;YACD,KAAK,gCAAgC,CAAC,CAAC,CAAC;gBACtC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YACD,KAAK,qBAAqB,CAAC,CAAC,CAAC;gBAC3B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAyB,CAAC;gBACtD,QAAQ,CAAC,OAAO,EAAE,CAChB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CACtE,CAAC;gBACF,OAAO;YACT,CAAC;YACD;gBACE,OAAO;QACX,CAAC;IACH,CAAC,CAAC;IAEF,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,SAAS,GAAG,CAAC,KAAmB,EAAE,EAAE;QACxC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,aAAa;YAAE,OAAO;QACxD,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,OAAO;QAC1C,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO;QAE1C,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC;QACvB,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACnB,KAAK,aAAa,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC;IAEF,YAAY,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAEpD,OAAO;QACL,OAAO,EAAE,GAAG,EAAE;YACZ,YAAY,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACzD,CAAC;QACD,eAAe,EAAE,CAAC,KAAc,EAAE,EAAE;YAClC,IAAI,CAAC;gBACH,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,gCAAgC;gBACxC,MAAM,EAAE,EAAE,KAAK,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;QACD,gBAAgB,EAAE,CAAC,MAAe,EAAE,EAAE;YACpC,IAAI,CAAC;gBACH,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,iCAAiC;gBACzC,MAAM,EAAE,EAAE,MAAM,EAAE;aACnB,CAAC,CAAC;QACL,CAAC;QACD,wBAAwB,EAAE,CAAC,GAAsB,EAAE,EAAE;YACnD,IAAI,CAAC;gBACH,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,oCAAoC;gBAC5C,MAAM,EAAE,GAAG;aACZ,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"bridge.js","names":[],"sources":["../../src/mcp-apps/bridge.ts"],"sourcesContent":["import type { RenderedFrame } from \"safe-content-frame\";\nimport {\n  MCP_APP_PROTOCOL_VERSION,\n  type McpAppBridgeHandlers,\n  type McpAppDisplayMode,\n  type McpAppHostContext,\n  type McpAppHostInfo,\n  type McpAppJsonRpcMessage,\n  type McpAppJsonRpcNotification,\n  type McpAppJsonRpcRequest,\n  type McpAppJsonRpcResponse,\n} from \"./types\";\n\nconst VALID_DISPLAY_MODES = [\n  \"inline\",\n  \"fullscreen\",\n  \"pip\",\n] as const satisfies readonly McpAppDisplayMode[];\n\nexport type McpAppBridgeFrame = Pick<\n  RenderedFrame,\n  \"iframe\" | \"origin\" | \"sendMessage\"\n>;\n\nexport type CreateMcpAppBridgeOptions = {\n  frame: McpAppBridgeFrame;\n  handlers?: McpAppBridgeHandlers | undefined;\n  hostInfo?: McpAppHostInfo | undefined;\n  hostContext?: McpAppHostContext | undefined;\n  targetWindow?: Window | undefined;\n};\n\nexport type McpAppBridge = {\n  dispose: () => void;\n  notifyToolInput: (input: unknown) => void;\n  notifyToolResult: (result: unknown) => void;\n  notifyHostContextChanged: (hostContext: McpAppHostContext) => void;\n};\n\nconst DEFAULT_HOST_INFO: McpAppHostInfo = {\n  name: \"assistant-ui\",\n  version: \"0.1\",\n};\n\n// Accept both the legacy method names and the MCP-UI 2026-01-26 names that\n// `ui/*` capable widgets (e.g. xmcp's host-bridge) emit. Normalize on input\n// so downstream switch statements only need to know the legacy names.\nconst METHOD_ALIASES: Record<string, string> = {\n  \"ui/notifications/initialized\": \"notifications/initialized\",\n  \"ui/notifications/size-changed\": \"notifications/size_changed\",\n  \"ui/request-display-mode\": \"requestDisplayMode\",\n  \"ui/open-link\": \"openLink\",\n  \"ui/update-model-context\": \"updateModelContext\",\n  \"ui/message\": \"sendMessage\",\n  \"notifications/message\": \"notifications/log\",\n};\n\nconst normalizeMethod = (method: string): string =>\n  METHOD_ALIASES[method] ?? method;\n\nconst JSONRPC_ERROR = {\n  parseError: -32700,\n  invalidRequest: -32600,\n  methodNotFound: -32601,\n  invalidParams: -32602,\n  internalError: -32603,\n} as const;\n\nfunction isJsonRpcMessage(value: unknown): value is McpAppJsonRpcMessage {\n  if (!value || typeof value !== \"object\") return false;\n  const v = value as Record<string, unknown>;\n  return v.jsonrpc === \"2.0\" && typeof v.method === \"string\";\n}\n\nfunction isRequest(msg: McpAppJsonRpcMessage): msg is McpAppJsonRpcRequest {\n  return \"id\" in msg;\n}\n\nfunction isNotification(\n  msg: McpAppJsonRpcMessage,\n): msg is McpAppJsonRpcNotification {\n  return !(\"id\" in msg);\n}\n\nexport function createMcpAppBridge(\n  opts: CreateMcpAppBridgeOptions,\n): McpAppBridge {\n  const {\n    frame,\n    handlers = {},\n    hostInfo = DEFAULT_HOST_INFO,\n    hostContext = {},\n    targetWindow = typeof window !== \"undefined\" ? window : undefined,\n  } = opts;\n\n  if (!targetWindow) {\n    throw new Error(\"createMcpAppBridge requires a window context\");\n  }\n\n  const post = (msg: McpAppJsonRpcMessage) => {\n    frame.sendMessage(msg);\n  };\n\n  const respond = (\n    id: McpAppJsonRpcRequest[\"id\"],\n    payload:\n      | { result: unknown }\n      | { error: { code: number; message: string; data?: unknown } },\n  ) => {\n    const res: McpAppJsonRpcResponse = {\n      jsonrpc: \"2.0\",\n      id,\n      ...payload,\n    };\n    post(res);\n  };\n\n  const errorResponse = (\n    id: McpAppJsonRpcRequest[\"id\"],\n    code: number,\n    message: string,\n    data?: unknown,\n  ) => {\n    respond(id, {\n      error: {\n        code,\n        message,\n        ...(data !== undefined ? { data } : {}),\n      },\n    });\n  };\n\n  const handleRequest = async (req: McpAppJsonRpcRequest) => {\n    try {\n      const params = req.params;\n\n      switch (normalizeMethod(req.method)) {\n        case \"ui/initialize\": {\n          respond(req.id, {\n            result: {\n              protocolVersion: MCP_APP_PROTOCOL_VERSION,\n              host: hostInfo,\n              hostContext,\n              capabilities: {\n                tools: handlers.callTool ? {} : undefined,\n                resources:\n                  handlers.readResource || handlers.listResources\n                    ? {}\n                    : undefined,\n                ui: {\n                  sendMessage: !!handlers.sendMessage,\n                  openLink: !!handlers.openLink,\n                  requestDisplayMode: !!handlers.requestDisplayMode,\n                  updateModelContext: !!handlers.updateModelContext,\n                },\n              },\n            },\n          });\n          return;\n        }\n\n        case \"tools/call\": {\n          if (!handlers.callTool) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"tools/call is not supported by this host\",\n            );\n            return;\n          }\n          const callParams = (params ?? {}) as {\n            name?: unknown;\n            arguments?: unknown;\n          };\n          if (typeof callParams.name !== \"string\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"tools/call requires a string 'name'\",\n            );\n            return;\n          }\n          if (\n            handlers.allowedTools &&\n            !handlers.allowedTools.includes(callParams.name)\n          ) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              `tool '${callParams.name}' is not allowed for this app`,\n            );\n            return;\n          }\n          let callArgs: Record<string, unknown> | undefined;\n          if (callParams.arguments !== undefined) {\n            if (\n              callParams.arguments === null ||\n              typeof callParams.arguments !== \"object\" ||\n              Array.isArray(callParams.arguments)\n            ) {\n              errorResponse(\n                req.id,\n                JSONRPC_ERROR.invalidParams,\n                \"tools/call 'arguments' must be an object\",\n              );\n              return;\n            }\n            callArgs = callParams.arguments as Record<string, unknown>;\n          }\n          const result = await handlers.callTool({\n            name: callParams.name,\n            ...(callArgs !== undefined ? { arguments: callArgs } : {}),\n          });\n          respond(req.id, { result });\n          return;\n        }\n\n        case \"resources/read\": {\n          if (!handlers.readResource) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"resources/read is not supported by this host\",\n            );\n            return;\n          }\n          const readParams = (params ?? {}) as { uri?: unknown };\n          if (typeof readParams.uri !== \"string\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"resources/read requires a string 'uri'\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: await handlers.readResource({ uri: readParams.uri }),\n          });\n          return;\n        }\n\n        case \"resources/list\": {\n          if (!handlers.listResources) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"resources/list is not supported by this host\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: (await handlers.listResources(params)) ?? null,\n          });\n          return;\n        }\n\n        case \"openLink\": {\n          if (!handlers.openLink) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"openLink is not supported by this host\",\n            );\n            return;\n          }\n          const linkParams = (params ?? {}) as { url?: unknown };\n          if (typeof linkParams.url !== \"string\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"openLink requires a string 'url'\",\n            );\n            return;\n          }\n          let linkProtocol: string;\n          try {\n            linkProtocol = new URL(linkParams.url).protocol;\n          } catch {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"openLink requires a valid URL\",\n            );\n            return;\n          }\n          if (linkProtocol !== \"https:\" && linkProtocol !== \"http:\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"openLink only accepts http(s) URLs\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: await handlers.openLink({ url: linkParams.url }),\n          });\n          return;\n        }\n\n        case \"sendMessage\": {\n          if (!handlers.sendMessage) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"sendMessage is not supported by this host\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: (await handlers.sendMessage(params)) ?? null,\n          });\n          return;\n        }\n\n        case \"updateModelContext\": {\n          if (!handlers.updateModelContext) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"updateModelContext is not supported by this host\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: (await handlers.updateModelContext(params)) ?? null,\n          });\n          return;\n        }\n\n        case \"requestDisplayMode\": {\n          if (!handlers.requestDisplayMode) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"requestDisplayMode is not supported by this host\",\n            );\n            return;\n          }\n          const modeParams = (params ?? {}) as { mode?: unknown };\n          if (\n            typeof modeParams.mode !== \"string\" ||\n            !VALID_DISPLAY_MODES.includes(modeParams.mode as McpAppDisplayMode)\n          ) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"requestDisplayMode requires a valid 'mode'\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: await handlers.requestDisplayMode({\n              mode: modeParams.mode as McpAppDisplayMode,\n            }),\n          });\n          return;\n        }\n\n        default: {\n          errorResponse(\n            req.id,\n            JSONRPC_ERROR.methodNotFound,\n            `Unknown method: ${req.method}`,\n          );\n        }\n      }\n    } catch (err) {\n      const error = err instanceof Error ? err : new Error(String(err));\n      handlers.onError?.(error);\n      errorResponse(req.id, JSONRPC_ERROR.internalError, error.message);\n    }\n  };\n\n  const handleNotification = (note: McpAppJsonRpcNotification) => {\n    switch (normalizeMethod(note.method)) {\n      case \"notifications/initialized\": {\n        handlers.onInitialized?.();\n        return;\n      }\n      case \"notifications/size_changed\": {\n        const p = (note.params ?? {}) as { width?: number; height?: number };\n        handlers.onSizeChange?.({\n          ...(typeof p.width === \"number\" ? { width: p.width } : {}),\n          ...(typeof p.height === \"number\" ? { height: p.height } : {}),\n        });\n        return;\n      }\n      case \"notifications/log\": {\n        handlers.onLog?.(note.params);\n        return;\n      }\n      case \"notifications/request_teardown\": {\n        handlers.onRequestTeardown?.(note.params);\n        return;\n      }\n      case \"notifications/error\": {\n        const p = (note.params ?? {}) as { message?: string };\n        handlers.onError?.(\n          new Error(typeof p.message === \"string\" ? p.message : \"Widget error\"),\n        );\n        return;\n      }\n      default:\n        return;\n    }\n  };\n\n  // Cross-origin guard: ignore any postMessage not originating from this\n  // app's iframe contentWindow at the SafeContentFrame-issued origin.\n  const onMessage = (event: MessageEvent) => {\n    if (event.source !== frame.iframe.contentWindow) return;\n    if (event.origin !== frame.origin) return;\n    if (!isJsonRpcMessage(event.data)) return;\n\n    const msg = event.data;\n    if (isRequest(msg)) {\n      void handleRequest(msg);\n    } else if (isNotification(msg)) {\n      handleNotification(msg);\n    }\n  };\n\n  targetWindow.addEventListener(\"message\", onMessage);\n\n  return {\n    dispose: () => {\n      targetWindow.removeEventListener(\"message\", onMessage);\n    },\n    notifyToolInput: (input: unknown) => {\n      post({\n        jsonrpc: \"2.0\",\n        method: \"notifications/tools/call/input\",\n        params: { input },\n      });\n    },\n    notifyToolResult: (result: unknown) => {\n      post({\n        jsonrpc: \"2.0\",\n        method: \"notifications/tools/call/result\",\n        params: { result },\n      });\n    },\n    notifyHostContextChanged: (ctx: McpAppHostContext) => {\n      post({\n        jsonrpc: \"2.0\",\n        method: \"notifications/host_context/changed\",\n        params: ctx,\n      });\n    },\n  };\n}\n"],"mappings":";;AAaA,MAAM,sBAAsB;CAC1B;CACA;CACA;AACF;AAsBA,MAAM,oBAAoC;CACxC,MAAM;CACN,SAAS;AACX;AAKA,MAAM,iBAAyC;CAC7C,gCAAgC;CAChC,iCAAiC;CACjC,2BAA2B;CAC3B,gBAAgB;CAChB,2BAA2B;CAC3B,cAAc;CACd,yBAAyB;AAC3B;AAEA,MAAM,mBAAmB,WACvB,eAAe,WAAW;AAE5B,MAAM,gBAAgB;CACpB,YAAY;CACZ,gBAAgB;CAChB,gBAAgB;CAChB,eAAe;CACf,eAAe;AACjB;AAEA,SAAS,iBAAiB,OAA+C;CACvE,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,IAAI;CACV,OAAO,EAAE,YAAY,SAAS,OAAO,EAAE,WAAW;AACpD;AAEA,SAAS,UAAU,KAAwD;CACzE,OAAO,QAAQ;AACjB;AAEA,SAAS,eACP,KACkC;CAClC,OAAO,EAAE,QAAQ;AACnB;AAEA,SAAgB,mBACd,MACc;CACd,MAAM,EACJ,OACA,WAAW,CAAC,GACZ,WAAW,mBACX,cAAc,CAAC,GACf,eAAe,OAAO,WAAW,cAAc,SAAS,KAAA,MACtD;CAEJ,IAAI,CAAC,cACH,MAAM,IAAI,MAAM,8CAA8C;CAGhE,MAAM,QAAQ,QAA8B;EAC1C,MAAM,YAAY,GAAG;CACvB;CAEA,MAAM,WACJ,IACA,YAGG;EAMH,KAAK;GAJH,SAAS;GACT;GACA,GAAG;EAEE,CAAC;CACV;CAEA,MAAM,iBACJ,IACA,MACA,SACA,SACG;EACH,QAAQ,IAAI,EACV,OAAO;GACL;GACA;GACA,GAAI,SAAS,KAAA,IAAY,EAAE,KAAK,IAAI,CAAC;EACvC,EACF,CAAC;CACH;CAEA,MAAM,gBAAgB,OAAO,QAA8B;EACzD,IAAI;GACF,MAAM,SAAS,IAAI;GAEnB,QAAQ,gBAAgB,IAAI,MAAM,GAAlC;IACE,KAAK;KACH,QAAQ,IAAI,IAAI,EACd,QAAQ;MACN,iBAAA;MACA,MAAM;MACN;MACA,cAAc;OACZ,OAAO,SAAS,WAAW,CAAC,IAAI,KAAA;OAChC,WACE,SAAS,gBAAgB,SAAS,gBAC9B,CAAC,IACD,KAAA;OACN,IAAI;QACF,aAAa,CAAC,CAAC,SAAS;QACxB,UAAU,CAAC,CAAC,SAAS;QACrB,oBAAoB,CAAC,CAAC,SAAS;QAC/B,oBAAoB,CAAC,CAAC,SAAS;OACjC;MACF;KACF,EACF,CAAC;KACD;IAGF,KAAK,cAAc;KACjB,IAAI,CAAC,SAAS,UAAU;MACtB,cACE,IAAI,IACJ,cAAc,gBACd,0CACF;MACA;KACF;KACA,MAAM,aAAc,UAAU,CAAC;KAI/B,IAAI,OAAO,WAAW,SAAS,UAAU;MACvC,cACE,IAAI,IACJ,cAAc,eACd,qCACF;MACA;KACF;KACA,IACE,SAAS,gBACT,CAAC,SAAS,aAAa,SAAS,WAAW,IAAI,GAC/C;MACA,cACE,IAAI,IACJ,cAAc,eACd,SAAS,WAAW,KAAK,8BAC3B;MACA;KACF;KACA,IAAI;KACJ,IAAI,WAAW,cAAc,KAAA,GAAW;MACtC,IACE,WAAW,cAAc,QACzB,OAAO,WAAW,cAAc,YAChC,MAAM,QAAQ,WAAW,SAAS,GAClC;OACA,cACE,IAAI,IACJ,cAAc,eACd,0CACF;OACA;MACF;MACA,WAAW,WAAW;KACxB;KACA,MAAM,SAAS,MAAM,SAAS,SAAS;MACrC,MAAM,WAAW;MACjB,GAAI,aAAa,KAAA,IAAY,EAAE,WAAW,SAAS,IAAI,CAAC;KAC1D,CAAC;KACD,QAAQ,IAAI,IAAI,EAAE,OAAO,CAAC;KAC1B;IACF;IAEA,KAAK,kBAAkB;KACrB,IAAI,CAAC,SAAS,cAAc;MAC1B,cACE,IAAI,IACJ,cAAc,gBACd,8CACF;MACA;KACF;KACA,MAAM,aAAc,UAAU,CAAC;KAC/B,IAAI,OAAO,WAAW,QAAQ,UAAU;MACtC,cACE,IAAI,IACJ,cAAc,eACd,wCACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAQ,MAAM,SAAS,aAAa,EAAE,KAAK,WAAW,IAAI,CAAC,EAC7D,CAAC;KACD;IACF;IAEA,KAAK;KACH,IAAI,CAAC,SAAS,eAAe;MAC3B,cACE,IAAI,IACJ,cAAc,gBACd,8CACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAS,MAAM,SAAS,cAAc,MAAM,KAAM,KACpD,CAAC;KACD;IAGF,KAAK,YAAY;KACf,IAAI,CAAC,SAAS,UAAU;MACtB,cACE,IAAI,IACJ,cAAc,gBACd,wCACF;MACA;KACF;KACA,MAAM,aAAc,UAAU,CAAC;KAC/B,IAAI,OAAO,WAAW,QAAQ,UAAU;MACtC,cACE,IAAI,IACJ,cAAc,eACd,kCACF;MACA;KACF;KACA,IAAI;KACJ,IAAI;MACF,eAAe,IAAI,IAAI,WAAW,GAAG,EAAE;KACzC,QAAQ;MACN,cACE,IAAI,IACJ,cAAc,eACd,+BACF;MACA;KACF;KACA,IAAI,iBAAiB,YAAY,iBAAiB,SAAS;MACzD,cACE,IAAI,IACJ,cAAc,eACd,oCACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAQ,MAAM,SAAS,SAAS,EAAE,KAAK,WAAW,IAAI,CAAC,EACzD,CAAC;KACD;IACF;IAEA,KAAK;KACH,IAAI,CAAC,SAAS,aAAa;MACzB,cACE,IAAI,IACJ,cAAc,gBACd,2CACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAS,MAAM,SAAS,YAAY,MAAM,KAAM,KAClD,CAAC;KACD;IAGF,KAAK;KACH,IAAI,CAAC,SAAS,oBAAoB;MAChC,cACE,IAAI,IACJ,cAAc,gBACd,kDACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAS,MAAM,SAAS,mBAAmB,MAAM,KAAM,KACzD,CAAC;KACD;IAGF,KAAK,sBAAsB;KACzB,IAAI,CAAC,SAAS,oBAAoB;MAChC,cACE,IAAI,IACJ,cAAc,gBACd,kDACF;MACA;KACF;KACA,MAAM,aAAc,UAAU,CAAC;KAC/B,IACE,OAAO,WAAW,SAAS,YAC3B,CAAC,oBAAoB,SAAS,WAAW,IAAyB,GAClE;MACA,cACE,IAAI,IACJ,cAAc,eACd,4CACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAQ,MAAM,SAAS,mBAAmB,EACxC,MAAM,WAAW,KACnB,CAAC,EACH,CAAC;KACD;IACF;IAEA,SACE,cACE,IAAI,IACJ,cAAc,gBACd,mBAAmB,IAAI,QACzB;GAEJ;EACF,SAAS,KAAK;GACZ,MAAM,QAAQ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;GAChE,SAAS,UAAU,KAAK;GACxB,cAAc,IAAI,IAAI,cAAc,eAAe,MAAM,OAAO;EAClE;CACF;CAEA,MAAM,sBAAsB,SAAoC;EAC9D,QAAQ,gBAAgB,KAAK,MAAM,GAAnC;GACE,KAAK;IACH,SAAS,gBAAgB;IACzB;GAEF,KAAK,8BAA8B;IACjC,MAAM,IAAK,KAAK,UAAU,CAAC;IAC3B,SAAS,eAAe;KACtB,GAAI,OAAO,EAAE,UAAU,WAAW,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;KACxD,GAAI,OAAO,EAAE,WAAW,WAAW,EAAE,QAAQ,EAAE,OAAO,IAAI,CAAC;IAC7D,CAAC;IACD;GACF;GACA,KAAK;IACH,SAAS,QAAQ,KAAK,MAAM;IAC5B;GAEF,KAAK;IACH,SAAS,oBAAoB,KAAK,MAAM;IACxC;GAEF,KAAK,uBAAuB;IAC1B,MAAM,IAAK,KAAK,UAAU,CAAC;IAC3B,SAAS,UACP,IAAI,MAAM,OAAO,EAAE,YAAY,WAAW,EAAE,UAAU,cAAc,CACtE;IACA;GACF;GACA,SACE;EACJ;CACF;CAIA,MAAM,aAAa,UAAwB;EACzC,IAAI,MAAM,WAAW,MAAM,OAAO,eAAe;EACjD,IAAI,MAAM,WAAW,MAAM,QAAQ;EACnC,IAAI,CAAC,iBAAiB,MAAM,IAAI,GAAG;EAEnC,MAAM,MAAM,MAAM;EAClB,IAAI,UAAU,GAAG,GACf,cAAmB,GAAG;OACjB,IAAI,eAAe,GAAG,GAC3B,mBAAmB,GAAG;CAE1B;CAEA,aAAa,iBAAiB,WAAW,SAAS;CAElD,OAAO;EACL,eAAe;GACb,aAAa,oBAAoB,WAAW,SAAS;EACvD;EACA,kBAAkB,UAAmB;GACnC,KAAK;IACH,SAAS;IACT,QAAQ;IACR,QAAQ,EAAE,MAAM;GAClB,CAAC;EACH;EACA,mBAAmB,WAAoB;GACrC,KAAK;IACH,SAAS;IACT,QAAQ;IACR,QAAQ,EAAE,OAAO;GACnB,CAAC;EACH;EACA,2BAA2B,QAA2B;GACpD,KAAK;IACH,SAAS;IACT,QAAQ;IACR,QAAQ;GACV,CAAC;EACH;CACF;AACF"}

package/dist/mcp-apps/index.d.ts

@@ -1,5 +1,5 @@
-export { McpAppRenderer, type McpAppRendererOptions } from "./McpAppRenderer.js";
-export { McpAppsRemoteHost } from "./McpAppsRemoteHost.js";
-export { getMcpAppFromToolPart } from "./utils.js";
-export type { McpAppMetadata, McpAppResource, McpAppResourceMeta, McpAppResourceCSP, McpAppSandboxConfig, McpAppHostInfo, McpAppHostContext, McpAppDisplayMode, McpAppsHost, McpAppsRemoteHostOptions, McpAppToolCallParams, ToolCallMessagePartMcpMetadata, } from "./types.js";
-//# sourceMappingURL=index.d.ts.map
+import { McpAppDisplayMode, McpAppHostContext, McpAppHostInfo, McpAppMetadata, McpAppResource, McpAppResourceCSP, McpAppResourceMeta, McpAppSandboxConfig, McpAppToolCallParams, McpAppsHost, McpAppsRemoteHostOptions, ToolCallMessagePartMcpMetadata } from "./types.js";
+import { McpAppRenderer, McpAppRendererOptions } from "./McpAppRenderer.js";
+import { McpAppsRemoteHost } from "./McpAppsRemoteHost.js";
+import { getMcpAppFromToolPart } from "./utils.js";
+export { type McpAppDisplayMode, type McpAppHostContext, type McpAppHostInfo, type McpAppMetadata, McpAppRenderer, type McpAppRendererOptions, type McpAppResource, type McpAppResourceCSP, type McpAppResourceMeta, type McpAppSandboxConfig, type McpAppToolCallParams, type McpAppsHost, McpAppsRemoteHost, type McpAppsRemoteHostOptions, type ToolCallMessagePartMcpMetadata, getMcpAppFromToolPart };