@assistant-ui/react 0.15.25 → 0.15.27

package/dist/mcp-apps/bridge.js

@@ -6,6 +6,29 @@ const VALID_DISPLAY_MODES = [
 	"fullscreen",
 	"pip"
 ];
+function isMcpAppDisplayMode(value) {
+	return VALID_DISPLAY_MODES.some((mode) => mode === value);
+}
+function isAppInfo(value) {
+	return isRecord(value) && typeof value.name === "string" && typeof value.version === "string";
+}
+function getAppCapabilities(value) {
+	if (!isRecord(value)) return void 0;
+	const { availableDisplayModes, ...rest } = value;
+	return {
+		...rest,
+		...Array.isArray(availableDisplayModes) ? { availableDisplayModes: Object.values(availableDisplayModes).filter(isMcpAppDisplayMode) } : {}
+	};
+}
+function getInitializeParams(params) {
+	if (!isRecord(params)) return {};
+	const appCapabilities = getAppCapabilities(params.appCapabilities);
+	return {
+		...isAppInfo(params.appInfo) ? { appInfo: params.appInfo } : {},
+		...appCapabilities ? { appCapabilities } : {},
+		...typeof params.protocolVersion === "string" ? { protocolVersion: params.protocolVersion } : {}
+	};
+}
 const DEFAULT_HOST_INFO = {
 	name: "assistant-ui",
 	version: "0.1"
@@ -41,6 +64,7 @@ function isNotification(msg) {
 function createMcpAppBridge(opts) {
 	const { frame, handlers = {}, hostInfo = DEFAULT_HOST_INFO, hostContext = {} } = opts;
 	let disposed = false;
+	let initializeParams = {};
 	const post = (msg) => {
 		if (disposed) return;
 		frame.sendMessage(msg);
@@ -69,7 +93,8 @@ function createMcpAppBridge(opts) {
 			const params = req.params;
 			switch (normalizeMethod(req.method)) {
 				case "ui/initialize": {
-					const requestedProtocolVersion = isRecord(params) && typeof params.protocolVersion === "string" ? params.protocolVersion : "0.1";
+					initializeParams = getInitializeParams(params);
+					const requestedProtocolVersion = initializeParams.protocolVersion ?? "0.1";
 					respond(req.id, { result: {
 						protocolVersion: requestedProtocolVersion,
 						host: hostInfo,
@@ -189,7 +214,7 @@ function createMcpAppBridge(opts) {
 						return;
 					}
 					const modeParams = params ?? {};
-					if (typeof modeParams.mode !== "string" || !VALID_DISPLAY_MODES.includes(modeParams.mode)) {
+					if (!isMcpAppDisplayMode(modeParams.mode)) {
 						errorResponse(req.id, JSONRPC_ERROR.invalidParams, "requestDisplayMode requires a valid 'mode'");
 						return;
 					}
@@ -208,7 +233,7 @@ function createMcpAppBridge(opts) {
 		try {
 			switch (normalizeMethod(note.method)) {
 				case "notifications/initialized":
-					handlers.onInitialized?.();
+					handlers.onInitialized?.(initializeParams);
 					return;
 				case "notifications/size_changed": {
 					const p = note.params ?? {};

package/dist/mcp-apps/bridge.js.map

@@ -1 +1 @@
-{"version":3,"file":"bridge.js","names":["SandboxHostFrame","invokeUserCallback","MCP_APP_PROTOCOL_VERSION","McpAppBridgeHandlers","McpAppDisplayMode","McpAppHostContext","McpAppHostInfo","McpAppJsonRpcMessage","McpAppJsonRpcNotification","McpAppJsonRpcRequest","McpAppJsonRpcResponse","isRecord","VALID_DISPLAY_MODES","const","McpAppBridgeFrame","CreateMcpAppBridgeOptions","frame","handlers","hostInfo","hostContext","McpAppBridge","onMessage","event","MessageEvent","dispose","notifyToolInput","input","notifyToolResult","result","notifyHostContextChanged","DEFAULT_HOST_INFO","name","version","METHOD_ALIASES","Record","normalizeMethod","method","JSONRPC_ERROR","parseError","invalidRequest","methodNotFound","invalidParams","internalError","isJsonRpcMessage","value","v","jsonrpc","isRequest","msg","isNotification","createMcpAppBridge","opts","disposed","post","sendMessage","respond","id","payload","error","code","message","data","res","errorResponse","undefined","reportError","Error","onError","bind","handleRequest","req","params","requestedProtocolVersion","protocolVersion","host","capabilities","tools","callTool","resources","readResource","listResources","ui","openLink","requestDisplayMode","updateModelContext","hostCapabilities","openLinks","serverTools","serverResources","text","onLog","logging","callParams","arguments","allowedTools","includes","callArgs","Array","isArray","readParams","uri","linkParams","url","linkProtocol","URL","protocol","modeParams","mode","err","String","handleNotification","note","onInitialized","p","width","height","onSizeChange","onRequestTeardown","content","type","ctx"],"sources":["../../src/mcp-apps/bridge.ts"],"sourcesContent":["import type { SandboxHostFrame } from \"../sandbox-host/SandboxHost\";\nimport { invokeUserCallback } from \"@assistant-ui/core/internal\";\nimport {\n  MCP_APP_PROTOCOL_VERSION,\n  type McpAppBridgeHandlers,\n  type McpAppDisplayMode,\n  type McpAppHostContext,\n  type McpAppHostInfo,\n  type McpAppJsonRpcMessage,\n  type McpAppJsonRpcNotification,\n  type McpAppJsonRpcRequest,\n  type McpAppJsonRpcResponse,\n} from \"./types\";\nimport { isRecord } from \"@assistant-ui/core/internal\";\n\nconst VALID_DISPLAY_MODES = [\n  \"inline\",\n  \"fullscreen\",\n  \"pip\",\n] as const satisfies readonly McpAppDisplayMode[];\n\nexport type McpAppBridgeFrame = SandboxHostFrame;\n\nexport type CreateMcpAppBridgeOptions = {\n  frame: McpAppBridgeFrame;\n  handlers?: McpAppBridgeHandlers | undefined;\n  hostInfo?: McpAppHostInfo | undefined;\n  hostContext?: McpAppHostContext | undefined;\n};\n\nexport type McpAppBridge = {\n  onMessage: (event: MessageEvent) => void;\n  dispose: () => void;\n  notifyToolInput: (input: unknown) => void;\n  notifyToolResult: (result: unknown) => void;\n  notifyHostContextChanged: (hostContext: McpAppHostContext) => void;\n};\n\nconst DEFAULT_HOST_INFO: McpAppHostInfo = {\n  name: \"assistant-ui\",\n  version: \"0.1\",\n};\n\n// Accept both the legacy method names and the MCP-UI 2026-01-26 names that\n// `ui/*` capable widgets (e.g. xmcp's host-bridge) emit. Normalize on input\n// so downstream switch statements only need to know the legacy names.\nconst METHOD_ALIASES: Record<string, string> = {\n  \"ui/notifications/initialized\": \"notifications/initialized\",\n  \"ui/notifications/size-changed\": \"notifications/size_changed\",\n  \"ui/request-display-mode\": \"requestDisplayMode\",\n  \"ui/open-link\": \"openLink\",\n  \"ui/update-model-context\": \"updateModelContext\",\n  \"ui/message\": \"sendMessage\",\n  \"notifications/message\": \"notifications/log\",\n};\n\nconst normalizeMethod = (method: string): string =>\n  METHOD_ALIASES[method] ?? method;\n\nconst JSONRPC_ERROR = {\n  parseError: -32700,\n  invalidRequest: -32600,\n  methodNotFound: -32601,\n  invalidParams: -32602,\n  internalError: -32603,\n} as const;\n\nfunction isJsonRpcMessage(value: unknown): value is McpAppJsonRpcMessage {\n  if (!value || typeof value !== \"object\") return false;\n  const v = value as Record<string, unknown>;\n  return v.jsonrpc === \"2.0\" && typeof v.method === \"string\";\n}\n\nfunction isRequest(msg: McpAppJsonRpcMessage): msg is McpAppJsonRpcRequest {\n  return \"id\" in msg;\n}\n\nfunction isNotification(\n  msg: McpAppJsonRpcMessage,\n): msg is McpAppJsonRpcNotification {\n  return !(\"id\" in msg);\n}\n\nexport function createMcpAppBridge(\n  opts: CreateMcpAppBridgeOptions,\n): McpAppBridge {\n  const {\n    frame,\n    handlers = {},\n    hostInfo = DEFAULT_HOST_INFO,\n    hostContext = {},\n  } = opts;\n  let disposed = false;\n\n  const post = (msg: McpAppJsonRpcMessage) => {\n    if (disposed) return;\n    frame.sendMessage(msg);\n  };\n\n  const respond = (\n    id: McpAppJsonRpcRequest[\"id\"],\n    payload:\n      | { result: unknown }\n      | { error: { code: number; message: string; data?: unknown } },\n  ) => {\n    const res: McpAppJsonRpcResponse = {\n      jsonrpc: \"2.0\",\n      id,\n      ...payload,\n    };\n    post(res);\n  };\n\n  const errorResponse = (\n    id: McpAppJsonRpcRequest[\"id\"],\n    code: number,\n    message: string,\n    data?: unknown,\n  ) => {\n    respond(id, {\n      error: {\n        code,\n        message,\n        ...(data !== undefined ? { data } : {}),\n      },\n    });\n  };\n\n  const reportError = (error: Error) => {\n    if (disposed) return;\n    invokeUserCallback(\n      \"assistant-ui\",\n      \"MCP App onError\",\n      handlers.onError?.bind(handlers),\n      error,\n    );\n  };\n\n  const handleRequest = async (req: McpAppJsonRpcRequest) => {\n    try {\n      const params = req.params;\n\n      switch (normalizeMethod(req.method)) {\n        case \"ui/initialize\": {\n          const requestedProtocolVersion =\n            isRecord(params) && typeof params.protocolVersion === \"string\"\n              ? params.protocolVersion\n              : MCP_APP_PROTOCOL_VERSION;\n          respond(req.id, {\n            result: {\n              protocolVersion: requestedProtocolVersion,\n              host: hostInfo,\n              hostInfo,\n              hostContext,\n              capabilities: {\n                tools: handlers.callTool ? {} : undefined,\n                resources:\n                  handlers.readResource || handlers.listResources\n                    ? {}\n                    : undefined,\n                ui: {\n                  sendMessage: !!handlers.sendMessage,\n                  openLink: !!handlers.openLink,\n                  requestDisplayMode: !!handlers.requestDisplayMode,\n                  updateModelContext: !!handlers.updateModelContext,\n                },\n              },\n              hostCapabilities: {\n                ...(handlers.openLink ? { openLinks: {} } : {}),\n                ...(handlers.callTool ? { serverTools: {} } : {}),\n                ...(handlers.readResource || handlers.listResources\n                  ? { serverResources: {} }\n                  : {}),\n                ...(handlers.updateModelContext\n                  ? { updateModelContext: { text: {} } }\n                  : {}),\n                ...(handlers.sendMessage ? { message: { text: {} } } : {}),\n                ...(handlers.onLog ? { logging: {} } : {}),\n              },\n            },\n          });\n          return;\n        }\n\n        case \"tools/call\": {\n          if (!handlers.callTool) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"tools/call is not supported by this host\",\n            );\n            return;\n          }\n          const callParams = (params ?? {}) as {\n            name?: unknown;\n            arguments?: unknown;\n          };\n          if (typeof callParams.name !== \"string\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"tools/call requires a string 'name'\",\n            );\n            return;\n          }\n          if (\n            handlers.allowedTools &&\n            !handlers.allowedTools.includes(callParams.name)\n          ) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              `tool '${callParams.name}' is not allowed for this app`,\n            );\n            return;\n          }\n          let callArgs: Record<string, unknown> | undefined;\n          if (callParams.arguments !== undefined) {\n            if (\n              callParams.arguments === null ||\n              typeof callParams.arguments !== \"object\" ||\n              Array.isArray(callParams.arguments)\n            ) {\n              errorResponse(\n                req.id,\n                JSONRPC_ERROR.invalidParams,\n                \"tools/call 'arguments' must be an object\",\n              );\n              return;\n            }\n            callArgs = callParams.arguments as Record<string, unknown>;\n          }\n          const result = await handlers.callTool({\n            name: callParams.name,\n            ...(callArgs !== undefined ? { arguments: callArgs } : {}),\n          });\n          respond(req.id, { result });\n          return;\n        }\n\n        case \"resources/read\": {\n          if (!handlers.readResource) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"resources/read is not supported by this host\",\n            );\n            return;\n          }\n          const readParams = (params ?? {}) as { uri?: unknown };\n          if (typeof readParams.uri !== \"string\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"resources/read requires a string 'uri'\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: await handlers.readResource({ uri: readParams.uri }),\n          });\n          return;\n        }\n\n        case \"resources/list\": {\n          if (!handlers.listResources) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"resources/list is not supported by this host\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: (await handlers.listResources(params)) ?? null,\n          });\n          return;\n        }\n\n        case \"openLink\": {\n          if (!handlers.openLink) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"openLink is not supported by this host\",\n            );\n            return;\n          }\n          const linkParams = (params ?? {}) as { url?: unknown };\n          if (typeof linkParams.url !== \"string\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"openLink requires a string 'url'\",\n            );\n            return;\n          }\n          let linkProtocol: string;\n          try {\n            linkProtocol = new URL(linkParams.url).protocol;\n          } catch {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"openLink requires a valid URL\",\n            );\n            return;\n          }\n          if (linkProtocol !== \"https:\" && linkProtocol !== \"http:\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"openLink only accepts http(s) URLs\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: await handlers.openLink({ url: linkParams.url }),\n          });\n          return;\n        }\n\n        case \"sendMessage\": {\n          if (!handlers.sendMessage) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"sendMessage is not supported by this host\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: (await handlers.sendMessage(params)) ?? null,\n          });\n          return;\n        }\n\n        case \"updateModelContext\": {\n          if (!handlers.updateModelContext) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"updateModelContext is not supported by this host\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: (await handlers.updateModelContext(params)) ?? null,\n          });\n          return;\n        }\n\n        case \"requestDisplayMode\": {\n          if (!handlers.requestDisplayMode) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"requestDisplayMode is not supported by this host\",\n            );\n            return;\n          }\n          const modeParams = (params ?? {}) as { mode?: unknown };\n          if (\n            typeof modeParams.mode !== \"string\" ||\n            !VALID_DISPLAY_MODES.includes(modeParams.mode as McpAppDisplayMode)\n          ) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"requestDisplayMode requires a valid 'mode'\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: await handlers.requestDisplayMode({\n              mode: modeParams.mode as McpAppDisplayMode,\n            }),\n          });\n          return;\n        }\n\n        default: {\n          errorResponse(\n            req.id,\n            JSONRPC_ERROR.methodNotFound,\n            `Unknown method: ${req.method}`,\n          );\n        }\n      }\n    } catch (err) {\n      const error = err instanceof Error ? err : new Error(String(err));\n      reportError(error);\n      errorResponse(req.id, JSONRPC_ERROR.internalError, error.message);\n    }\n  };\n\n  const handleNotification = (note: McpAppJsonRpcNotification) => {\n    try {\n      switch (normalizeMethod(note.method)) {\n        case \"notifications/initialized\": {\n          handlers.onInitialized?.();\n          return;\n        }\n        case \"notifications/size_changed\": {\n          const p = (note.params ?? {}) as { width?: number; height?: number };\n          handlers.onSizeChange?.({\n            ...(typeof p.width === \"number\" ? { width: p.width } : {}),\n            ...(typeof p.height === \"number\" ? { height: p.height } : {}),\n          });\n          return;\n        }\n        case \"notifications/log\": {\n          handlers.onLog?.(note.params);\n          return;\n        }\n        case \"notifications/request_teardown\": {\n          handlers.onRequestTeardown?.(note.params);\n          return;\n        }\n        case \"notifications/error\": {\n          const p = (note.params ?? {}) as { message?: string };\n          reportError(\n            new Error(\n              typeof p.message === \"string\" ? p.message : \"Widget error\",\n            ),\n          );\n          return;\n        }\n        default:\n          return;\n      }\n    } catch (err) {\n      const error = err instanceof Error ? err : new Error(String(err));\n      reportError(error);\n    }\n  };\n\n  // The host applies the cross-origin guard before delegating; this only\n  // validates the JSON-RPC envelope.\n  const onMessage = (event: MessageEvent) => {\n    if (disposed) return;\n    if (!isJsonRpcMessage(event.data)) return;\n\n    const msg = event.data;\n    if (isRequest(msg)) {\n      void handleRequest(msg);\n    } else if (isNotification(msg)) {\n      handleNotification(msg);\n    }\n  };\n\n  return {\n    onMessage,\n    dispose: () => {\n      disposed = true;\n    },\n    notifyToolInput: (input: unknown) => {\n      post({\n        jsonrpc: \"2.0\",\n        method: \"notifications/tools/call/input\",\n        params: { input },\n      });\n      post({\n        jsonrpc: \"2.0\",\n        method: \"ui/notifications/tool-input\",\n        params: isRecord(input) ? { arguments: input } : {},\n      });\n    },\n    notifyToolResult: (result: unknown) => {\n      post({\n        jsonrpc: \"2.0\",\n        method: \"notifications/tools/call/result\",\n        params: { result },\n      });\n      post({\n        jsonrpc: \"2.0\",\n        method: \"ui/notifications/tool-result\",\n        params: isRecord(result)\n          ? result\n          : { content: [{ type: \"text\", text: String(result) }] },\n      });\n    },\n    notifyHostContextChanged: (ctx: McpAppHostContext) => {\n      post({\n        jsonrpc: \"2.0\",\n        method: \"notifications/host_context/changed\",\n        params: ctx,\n      });\n      post({\n        jsonrpc: \"2.0\",\n        method: \"ui/notifications/host-context-changed\",\n        params: ctx,\n      });\n    },\n  };\n}\n"],"mappings":";;;AAeA,MAAMY,sBAAsB;CAC1B;CACA;CACA;AAAK;AAoBP,MAAMkB,oBAAoC;CACxCC,MAAM;CACNC,SAAS;AACX;AAKA,MAAMC,iBAAyC;CAC7C,gCAAgC;CAChC,iCAAiC;CACjC,2BAA2B;CAC3B,gBAAgB;CAChB,2BAA2B;CAC3B,cAAc;CACd,yBAAyB;AAC3B;AAEA,MAAME,mBAAmBC,WACvBH,eAAeG,WAAWA;AAE5B,MAAMC,gBAAgB;CACpBC,YAAY;CACZC,gBAAgB;CAChBC,gBAAgB;CAChBC,eAAe;CACfC,eAAe;AACjB;AAEA,SAASC,iBAAiBC,OAA+C;CACvE,IAAI,CAACA,SAAS,OAAOA,UAAU,UAAU,OAAO;CAChD,MAAMC,IAAID;CACV,OAAOC,EAAEC,YAAY,SAAS,OAAOD,EAAET,WAAW;AACpD;AAEA,SAASW,UAAUC,KAAwD;CACzE,OAAO,QAAQA;AACjB;AAEA,SAASC,eACPD,KACkC;CAClC,OAAO,EAAE,QAAQA;AACnB;AAEA,SAAgBE,mBACdC,MACc;CACd,MAAM,EACJnC,OACAC,WAAW,CAAC,GACZC,WAAWY,mBACXX,cAAc,CAAC,MACbgC;CACJ,IAAIC,WAAW;CAEf,MAAMC,QAAQL,QAA8B;EAC1C,IAAII,UAAU;EACdpC,MAAMsC,YAAYN,GAAG;CACvB;CAEA,MAAMO,WACJC,IACAC,YAGG;EACH,MAAMK,MAA6B;GACjChB,SAAS;GACTU;GACA,GAAGC;EACL;EACAJ,KAAKS,GAAG;CACV;CAEA,MAAMC,iBACJP,IACAG,MACAC,SACAC,SACG;EACHN,QAAQC,IAAI,EACVE,OAAO;GACLC;GACAC;GACA,GAAIC,SAASG,KAAAA,IAAY,EAAEH,KAAK,IAAI,CAAC;EACvC,EACF,CAAC;CACH;CAEA,MAAMI,eAAeP,UAAiB;EACpC,IAAIN,UAAU;EACdnD,mBACE,gBACA,mBACAgB,SAASkD,SAASC,KAAKnD,QAAQ,GAC/ByC,KACF;CACF;CAEA,MAAMW,gBAAgB,OAAOC,QAA8B;EACzD,IAAI;GACF,MAAMC,SAASD,IAAIC;GAEnB,QAAQpC,gBAAgBmC,IAAIlC,MAAM,GAAlC;IACE,KAAK,iBAAiB;KACpB,MAAMoC,2BACJ7D,SAAS4D,MAAM,KAAK,OAAOA,OAAOE,oBAAoB,WAClDF,OAAOE,kBAAAA;KAEblB,QAAQe,IAAId,IAAI,EACd5B,QAAQ;MACN6C,iBAAiBD;MACjBE,MAAMxD;MACNA;MACAC;MACAwD,cAAc;OACZC,OAAO3D,SAAS4D,WAAW,CAAC,IAAIb,KAAAA;OAChCc,WACE7D,SAAS8D,gBAAgB9D,SAAS+D,gBAC9B,CAAC,IACDhB,KAAAA;OACNiB,IAAI;QACF3B,aAAa,CAAC,CAACrC,SAASqC;QACxB4B,UAAU,CAAC,CAACjE,SAASiE;QACrBC,oBAAoB,CAAC,CAAClE,SAASkE;QAC/BC,oBAAoB,CAAC,CAACnE,SAASmE;OACjC;MACF;MACAC,kBAAkB;OAChB,GAAIpE,SAASiE,WAAW,EAAEI,WAAW,CAAC,EAAE,IAAI,CAAC;OAC7C,GAAIrE,SAAS4D,WAAW,EAAEU,aAAa,CAAC,EAAE,IAAI,CAAC;OAC/C,GAAItE,SAAS8D,gBAAgB9D,SAAS+D,gBAClC,EAAEQ,iBAAiB,CAAC,EAAE,IACtB,CAAC;OACL,GAAIvE,SAASmE,qBACT,EAAEA,oBAAoB,EAAEK,MAAM,CAAC,EAAE,EAAE,IACnC,CAAC;OACL,GAAIxE,SAASqC,cAAc,EAAEM,SAAS,EAAE6B,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC;OACxD,GAAIxE,SAASyE,QAAQ,EAAEC,SAAS,CAAC,EAAE,IAAI,CAAC;MAC1C;KACF,EACF,CAAC;KACD;IACF;IAEA,KAAK,cAAc;KACjB,IAAI,CAAC1E,SAAS4D,UAAU;MACtBd,cACEO,IAAId,IACJnB,cAAcG,gBACd,0CACF;MACA;KACF;KACA,MAAMoD,aAAcrB,UAAU,CAAC;KAI/B,IAAI,OAAOqB,WAAW7D,SAAS,UAAU;MACvCgC,cACEO,IAAId,IACJnB,cAAcI,eACd,qCACF;MACA;KACF;KACA,IACExB,SAAS6E,gBACT,CAAC7E,SAAS6E,aAAaC,SAASH,WAAW7D,IAAI,GAC/C;MACAgC,cACEO,IAAId,IACJnB,cAAcI,eACd,SAASmD,WAAW7D,KAAI,8BAC1B;MACA;KACF;KACA,IAAIiE;KACJ,IAAIJ,WAAWC,cAAc7B,KAAAA,GAAW;MACtC,IACE4B,WAAWC,cAAc,QACzB,OAAOD,WAAWC,cAAc,YAChCI,MAAMC,QAAQN,WAAWC,SAAS,GAClC;OACA9B,cACEO,IAAId,IACJnB,cAAcI,eACd,0CACF;OACA;MACF;MACAuD,WAAWJ,WAAWC;KACxB;KACA,MAAMjE,SAAS,MAAMX,SAAS4D,SAAS;MACrC9C,MAAM6D,WAAW7D;MACjB,GAAIiE,aAAahC,KAAAA,IAAY,EAAE6B,WAAWG,SAAS,IAAI,CAAC;KAC1D,CAAC;KACDzC,QAAQe,IAAId,IAAI,EAAE5B,OAAO,CAAC;KAC1B;IACF;IAEA,KAAK,kBAAkB;KACrB,IAAI,CAACX,SAAS8D,cAAc;MAC1BhB,cACEO,IAAId,IACJnB,cAAcG,gBACd,8CACF;MACA;KACF;KACA,MAAM2D,aAAc5B,UAAU,CAAC;KAC/B,IAAI,OAAO4B,WAAWC,QAAQ,UAAU;MACtCrC,cACEO,IAAId,IACJnB,cAAcI,eACd,wCACF;MACA;KACF;KACAc,QAAQe,IAAId,IAAI,EACd5B,QAAQ,MAAMX,SAAS8D,aAAa,EAAEqB,KAAKD,WAAWC,IAAI,CAAC,EAC7D,CAAC;KACD;IACF;IAEA,KAAK;KACH,IAAI,CAACnF,SAAS+D,eAAe;MAC3BjB,cACEO,IAAId,IACJnB,cAAcG,gBACd,8CACF;MACA;KACF;KACAe,QAAQe,IAAId,IAAI,EACd5B,QAAS,MAAMX,SAAS+D,cAAcT,MAAM,KAAM,KACpD,CAAC;KACD;IAGF,KAAK,YAAY;KACf,IAAI,CAACtD,SAASiE,UAAU;MACtBnB,cACEO,IAAId,IACJnB,cAAcG,gBACd,wCACF;MACA;KACF;KACA,MAAM6D,aAAc9B,UAAU,CAAC;KAC/B,IAAI,OAAO8B,WAAWC,QAAQ,UAAU;MACtCvC,cACEO,IAAId,IACJnB,cAAcI,eACd,kCACF;MACA;KACF;KACA,IAAI8D;KACJ,IAAI;MACFA,eAAe,IAAIC,IAAIH,WAAWC,GAAG,CAAC,CAACG;KACzC,QAAQ;MACN1C,cACEO,IAAId,IACJnB,cAAcI,eACd,+BACF;MACA;KACF;KACA,IAAI8D,iBAAiB,YAAYA,iBAAiB,SAAS;MACzDxC,cACEO,IAAId,IACJnB,cAAcI,eACd,oCACF;MACA;KACF;KACAc,QAAQe,IAAId,IAAI,EACd5B,QAAQ,MAAMX,SAASiE,SAAS,EAAEoB,KAAKD,WAAWC,IAAI,CAAC,EACzD,CAAC;KACD;IACF;IAEA,KAAK;KACH,IAAI,CAACrF,SAASqC,aAAa;MACzBS,cACEO,IAAId,IACJnB,cAAcG,gBACd,2CACF;MACA;KACF;KACAe,QAAQe,IAAId,IAAI,EACd5B,QAAS,MAAMX,SAASqC,YAAYiB,MAAM,KAAM,KAClD,CAAC;KACD;IAGF,KAAK;KACH,IAAI,CAACtD,SAASmE,oBAAoB;MAChCrB,cACEO,IAAId,IACJnB,cAAcG,gBACd,kDACF;MACA;KACF;KACAe,QAAQe,IAAId,IAAI,EACd5B,QAAS,MAAMX,SAASmE,mBAAmBb,MAAM,KAAM,KACzD,CAAC;KACD;IAGF,KAAK,sBAAsB;KACzB,IAAI,CAACtD,SAASkE,oBAAoB;MAChCpB,cACEO,IAAId,IACJnB,cAAcG,gBACd,kDACF;MACA;KACF;KACA,MAAMkE,aAAcnC,UAAU,CAAC;KAC/B,IACE,OAAOmC,WAAWC,SAAS,YAC3B,CAAC/F,oBAAoBmF,SAASW,WAAWC,IAAyB,GAClE;MACA5C,cACEO,IAAId,IACJnB,cAAcI,eACd,4CACF;MACA;KACF;KACAc,QAAQe,IAAId,IAAI,EACd5B,QAAQ,MAAMX,SAASkE,mBAAmB,EACxCwB,MAAMD,WAAWC,KACnB,CAAC,EACH,CAAC;KACD;IACF;IAEA,SACE5C,cACEO,IAAId,IACJnB,cAAcG,gBACd,mBAAmB8B,IAAIlC,QACzB;GAEJ;EACF,SAASwE,KAAK;GACZ,MAAMlD,QAAQkD,eAAe1C,QAAQ0C,MAAM,IAAI1C,MAAM2C,OAAOD,GAAG,CAAC;GAChE3C,YAAYP,KAAK;GACjBK,cAAcO,IAAId,IAAInB,cAAcK,eAAegB,MAAME,OAAO;EAClE;CACF;CAEA,MAAMkD,sBAAsBC,SAAoC;EAC9D,IAAI;GACF,QAAQ5E,gBAAgB4E,KAAK3E,MAAM,GAAnC;IACE,KAAK;KACHnB,SAAS+F,gBAAgB;KACzB;IAEF,KAAK,8BAA8B;KACjC,MAAMC,IAAKF,KAAKxC,UAAU,CAAC;KAC3BtD,SAASmG,eAAe;MACtB,GAAI,OAAOH,EAAEC,UAAU,WAAW,EAAEA,OAAOD,EAAEC,MAAM,IAAI,CAAC;MACxD,GAAI,OAAOD,EAAEE,WAAW,WAAW,EAAEA,QAAQF,EAAEE,OAAO,IAAI,CAAC;KAC7D,CAAC;KACD;IACF;IACA,KAAK;KACHlG,SAASyE,QAAQqB,KAAKxC,MAAM;KAC5B;IAEF,KAAK;KACHtD,SAASoG,oBAAoBN,KAAKxC,MAAM;KACxC;IAEF,KAAK,uBAAuB;KAC1B,MAAM0C,IAAKF,KAAKxC,UAAU,CAAC;KAC3BN,YACE,IAAIC,MACF,OAAO+C,EAAErD,YAAY,WAAWqD,EAAErD,UAAU,cAC9C,CACF;KACA;IACF;IACA,SACE;GACJ;EACF,SAASgD,KAAK;GACZ,MAAMlD,QAAQkD,eAAe1C,QAAQ0C,MAAM,IAAI1C,MAAM2C,OAAOD,GAAG,CAAC;GAChE3C,YAAYP,KAAK;EACnB;CACF;CAIA,MAAMrC,aAAaC,UAAwB;EACzC,IAAI8B,UAAU;EACd,IAAI,CAACT,iBAAiBrB,MAAMuC,IAAI,GAAG;EAEnC,MAAMb,MAAM1B,MAAMuC;EAClB,IAAId,UAAUC,GAAG,GACf,cAAmBA,GAAG;OACjB,IAAIC,eAAeD,GAAG,GAC3B8D,mBAAmB9D,GAAG;CAE1B;CAEA,OAAO;EACL3B;EACAG,eAAe;GACb4B,WAAW;EACb;EACA3B,kBAAkBC,UAAmB;GACnC2B,KAAK;IACHP,SAAS;IACTV,QAAQ;IACRmC,QAAQ,EAAE7C,MAAM;GAClB,CAAC;GACD2B,KAAK;IACHP,SAAS;IACTV,QAAQ;IACRmC,QAAQ5D,SAASe,KAAK,IAAI,EAAEmE,WAAWnE,MAAM,IAAI,CAAC;GACpD,CAAC;EACH;EACAC,mBAAmBC,WAAoB;GACrCyB,KAAK;IACHP,SAAS;IACTV,QAAQ;IACRmC,QAAQ,EAAE3C,OAAO;GACnB,CAAC;GACDyB,KAAK;IACHP,SAAS;IACTV,QAAQ;IACRmC,QAAQ5D,SAASiB,MAAM,IACnBA,SACA,EAAE0F,SAAS,CAAC;KAAEC,MAAM;KAAQ9B,MAAMoB,OAAOjF,MAAM;IAAE,CAAC,EAAE;GAC1D,CAAC;EACH;EACAC,2BAA2B2F,QAA2B;GACpDnE,KAAK;IACHP,SAAS;IACTV,QAAQ;IACRmC,QAAQiD;GACV,CAAC;GACDnE,KAAK;IACHP,SAAS;IACTV,QAAQ;IACRmC,QAAQiD;GACV,CAAC;EACH;CACF;AACF"}
+{"version":3,"file":"bridge.js","names":["SandboxHostFrame","invokeUserCallback","MCP_APP_PROTOCOL_VERSION","McpAppBridgeHandlers","McpAppDisplayMode","McpAppHostContext","McpAppHostInfo","McpAppInitializeParams","McpAppJsonRpcMessage","McpAppJsonRpcNotification","McpAppJsonRpcRequest","McpAppJsonRpcResponse","isRecord","VALID_DISPLAY_MODES","const","isMcpAppDisplayMode","value","some","mode","isAppInfo","NonNullable","name","version","getAppCapabilities","undefined","availableDisplayModes","rest","Array","isArray","Object","values","filter","getInitializeParams","params","appCapabilities","appInfo","protocolVersion","McpAppBridgeFrame","CreateMcpAppBridgeOptions","frame","handlers","hostInfo","hostContext","McpAppBridge","onMessage","event","MessageEvent","dispose","notifyToolInput","input","notifyToolResult","result","notifyHostContextChanged","DEFAULT_HOST_INFO","METHOD_ALIASES","Record","normalizeMethod","method","JSONRPC_ERROR","parseError","invalidRequest","methodNotFound","invalidParams","internalError","isJsonRpcMessage","v","jsonrpc","isRequest","msg","isNotification","createMcpAppBridge","opts","disposed","initializeParams","post","sendMessage","respond","id","payload","error","code","message","data","res","errorResponse","reportError","Error","onError","bind","handleRequest","req","requestedProtocolVersion","host","capabilities","tools","callTool","resources","readResource","listResources","ui","openLink","requestDisplayMode","updateModelContext","hostCapabilities","openLinks","serverTools","serverResources","text","onLog","logging","callParams","arguments","allowedTools","includes","callArgs","readParams","uri","linkParams","url","linkProtocol","URL","protocol","modeParams","err","String","handleNotification","note","onInitialized","p","width","height","onSizeChange","onRequestTeardown","content","type","ctx"],"sources":["../../src/mcp-apps/bridge.ts"],"sourcesContent":["import type { SandboxHostFrame } from \"../sandbox-host/SandboxHost\";\nimport { invokeUserCallback } from \"@assistant-ui/core/internal\";\nimport {\n  MCP_APP_PROTOCOL_VERSION,\n  type McpAppBridgeHandlers,\n  type McpAppDisplayMode,\n  type McpAppHostContext,\n  type McpAppHostInfo,\n  type McpAppInitializeParams,\n  type McpAppJsonRpcMessage,\n  type McpAppJsonRpcNotification,\n  type McpAppJsonRpcRequest,\n  type McpAppJsonRpcResponse,\n} from \"./types\";\nimport { isRecord } from \"@assistant-ui/core/internal\";\n\nconst VALID_DISPLAY_MODES = [\n  \"inline\",\n  \"fullscreen\",\n  \"pip\",\n] as const satisfies readonly McpAppDisplayMode[];\n\nfunction isMcpAppDisplayMode(value: unknown): value is McpAppDisplayMode {\n  return VALID_DISPLAY_MODES.some((mode) => mode === value);\n}\n\nfunction isAppInfo(\n  value: unknown,\n): value is NonNullable<McpAppInitializeParams[\"appInfo\"]> {\n  return (\n    isRecord(value) &&\n    typeof value.name === \"string\" &&\n    typeof value.version === \"string\"\n  );\n}\n\nfunction getAppCapabilities(\n  value: unknown,\n): McpAppInitializeParams[\"appCapabilities\"] {\n  if (!isRecord(value)) return undefined;\n  const { availableDisplayModes, ...rest } = value;\n  return {\n    ...rest,\n    // Object.values reads only the entries present, so a sparse list claiming a huge length stays cheap, and the list's own methods are never called.\n    ...(Array.isArray(availableDisplayModes)\n      ? {\n          availableDisplayModes: Object.values(availableDisplayModes).filter(\n            isMcpAppDisplayMode,\n          ),\n        }\n      : {}),\n  };\n}\n\nfunction getInitializeParams(params: unknown): McpAppInitializeParams {\n  if (!isRecord(params)) return {};\n  const appCapabilities = getAppCapabilities(params.appCapabilities);\n  return {\n    ...(isAppInfo(params.appInfo) ? { appInfo: params.appInfo } : {}),\n    ...(appCapabilities ? { appCapabilities } : {}),\n    ...(typeof params.protocolVersion === \"string\"\n      ? { protocolVersion: params.protocolVersion }\n      : {}),\n  };\n}\n\nexport type McpAppBridgeFrame = SandboxHostFrame;\n\nexport type CreateMcpAppBridgeOptions = {\n  frame: McpAppBridgeFrame;\n  handlers?: McpAppBridgeHandlers | undefined;\n  hostInfo?: McpAppHostInfo | undefined;\n  hostContext?: McpAppHostContext | undefined;\n};\n\nexport type McpAppBridge = {\n  onMessage: (event: MessageEvent) => void;\n  dispose: () => void;\n  notifyToolInput: (input: unknown) => void;\n  notifyToolResult: (result: unknown) => void;\n  notifyHostContextChanged: (hostContext: McpAppHostContext) => void;\n};\n\nconst DEFAULT_HOST_INFO: McpAppHostInfo = {\n  name: \"assistant-ui\",\n  version: \"0.1\",\n};\n\n// Accept both the legacy method names and the MCP-UI 2026-01-26 names that\n// `ui/*` capable widgets (e.g. xmcp's host-bridge) emit. Normalize on input\n// so downstream switch statements only need to know the legacy names.\nconst METHOD_ALIASES: Record<string, string> = {\n  \"ui/notifications/initialized\": \"notifications/initialized\",\n  \"ui/notifications/size-changed\": \"notifications/size_changed\",\n  \"ui/request-display-mode\": \"requestDisplayMode\",\n  \"ui/open-link\": \"openLink\",\n  \"ui/update-model-context\": \"updateModelContext\",\n  \"ui/message\": \"sendMessage\",\n  \"notifications/message\": \"notifications/log\",\n};\n\nconst normalizeMethod = (method: string): string =>\n  METHOD_ALIASES[method] ?? method;\n\nconst JSONRPC_ERROR = {\n  parseError: -32700,\n  invalidRequest: -32600,\n  methodNotFound: -32601,\n  invalidParams: -32602,\n  internalError: -32603,\n} as const;\n\nfunction isJsonRpcMessage(value: unknown): value is McpAppJsonRpcMessage {\n  if (!value || typeof value !== \"object\") return false;\n  const v = value as Record<string, unknown>;\n  return v.jsonrpc === \"2.0\" && typeof v.method === \"string\";\n}\n\nfunction isRequest(msg: McpAppJsonRpcMessage): msg is McpAppJsonRpcRequest {\n  return \"id\" in msg;\n}\n\nfunction isNotification(\n  msg: McpAppJsonRpcMessage,\n): msg is McpAppJsonRpcNotification {\n  return !(\"id\" in msg);\n}\n\nexport function createMcpAppBridge(\n  opts: CreateMcpAppBridgeOptions,\n): McpAppBridge {\n  const {\n    frame,\n    handlers = {},\n    hostInfo = DEFAULT_HOST_INFO,\n    hostContext = {},\n  } = opts;\n  let disposed = false;\n  let initializeParams: McpAppInitializeParams = {};\n\n  const post = (msg: McpAppJsonRpcMessage) => {\n    if (disposed) return;\n    frame.sendMessage(msg);\n  };\n\n  const respond = (\n    id: McpAppJsonRpcRequest[\"id\"],\n    payload:\n      | { result: unknown }\n      | { error: { code: number; message: string; data?: unknown } },\n  ) => {\n    const res: McpAppJsonRpcResponse = {\n      jsonrpc: \"2.0\",\n      id,\n      ...payload,\n    };\n    post(res);\n  };\n\n  const errorResponse = (\n    id: McpAppJsonRpcRequest[\"id\"],\n    code: number,\n    message: string,\n    data?: unknown,\n  ) => {\n    respond(id, {\n      error: {\n        code,\n        message,\n        ...(data !== undefined ? { data } : {}),\n      },\n    });\n  };\n\n  const reportError = (error: Error) => {\n    if (disposed) return;\n    invokeUserCallback(\n      \"assistant-ui\",\n      \"MCP App onError\",\n      handlers.onError?.bind(handlers),\n      error,\n    );\n  };\n\n  const handleRequest = async (req: McpAppJsonRpcRequest) => {\n    try {\n      const params = req.params;\n\n      switch (normalizeMethod(req.method)) {\n        case \"ui/initialize\": {\n          initializeParams = getInitializeParams(params);\n          const requestedProtocolVersion =\n            initializeParams.protocolVersion ?? MCP_APP_PROTOCOL_VERSION;\n          respond(req.id, {\n            result: {\n              protocolVersion: requestedProtocolVersion,\n              host: hostInfo,\n              hostInfo,\n              hostContext,\n              capabilities: {\n                tools: handlers.callTool ? {} : undefined,\n                resources:\n                  handlers.readResource || handlers.listResources\n                    ? {}\n                    : undefined,\n                ui: {\n                  sendMessage: !!handlers.sendMessage,\n                  openLink: !!handlers.openLink,\n                  requestDisplayMode: !!handlers.requestDisplayMode,\n                  updateModelContext: !!handlers.updateModelContext,\n                },\n              },\n              hostCapabilities: {\n                ...(handlers.openLink ? { openLinks: {} } : {}),\n                ...(handlers.callTool ? { serverTools: {} } : {}),\n                ...(handlers.readResource || handlers.listResources\n                  ? { serverResources: {} }\n                  : {}),\n                ...(handlers.updateModelContext\n                  ? { updateModelContext: { text: {} } }\n                  : {}),\n                ...(handlers.sendMessage ? { message: { text: {} } } : {}),\n                ...(handlers.onLog ? { logging: {} } : {}),\n              },\n            },\n          });\n          return;\n        }\n\n        case \"tools/call\": {\n          if (!handlers.callTool) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"tools/call is not supported by this host\",\n            );\n            return;\n          }\n          const callParams = (params ?? {}) as {\n            name?: unknown;\n            arguments?: unknown;\n          };\n          if (typeof callParams.name !== \"string\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"tools/call requires a string 'name'\",\n            );\n            return;\n          }\n          if (\n            handlers.allowedTools &&\n            !handlers.allowedTools.includes(callParams.name)\n          ) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              `tool '${callParams.name}' is not allowed for this app`,\n            );\n            return;\n          }\n          let callArgs: Record<string, unknown> | undefined;\n          if (callParams.arguments !== undefined) {\n            if (\n              callParams.arguments === null ||\n              typeof callParams.arguments !== \"object\" ||\n              Array.isArray(callParams.arguments)\n            ) {\n              errorResponse(\n                req.id,\n                JSONRPC_ERROR.invalidParams,\n                \"tools/call 'arguments' must be an object\",\n              );\n              return;\n            }\n            callArgs = callParams.arguments as Record<string, unknown>;\n          }\n          const result = await handlers.callTool({\n            name: callParams.name,\n            ...(callArgs !== undefined ? { arguments: callArgs } : {}),\n          });\n          respond(req.id, { result });\n          return;\n        }\n\n        case \"resources/read\": {\n          if (!handlers.readResource) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"resources/read is not supported by this host\",\n            );\n            return;\n          }\n          const readParams = (params ?? {}) as { uri?: unknown };\n          if (typeof readParams.uri !== \"string\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"resources/read requires a string 'uri'\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: await handlers.readResource({ uri: readParams.uri }),\n          });\n          return;\n        }\n\n        case \"resources/list\": {\n          if (!handlers.listResources) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"resources/list is not supported by this host\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: (await handlers.listResources(params)) ?? null,\n          });\n          return;\n        }\n\n        case \"openLink\": {\n          if (!handlers.openLink) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"openLink is not supported by this host\",\n            );\n            return;\n          }\n          const linkParams = (params ?? {}) as { url?: unknown };\n          if (typeof linkParams.url !== \"string\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"openLink requires a string 'url'\",\n            );\n            return;\n          }\n          let linkProtocol: string;\n          try {\n            linkProtocol = new URL(linkParams.url).protocol;\n          } catch {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"openLink requires a valid URL\",\n            );\n            return;\n          }\n          if (linkProtocol !== \"https:\" && linkProtocol !== \"http:\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"openLink only accepts http(s) URLs\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: await handlers.openLink({ url: linkParams.url }),\n          });\n          return;\n        }\n\n        case \"sendMessage\": {\n          if (!handlers.sendMessage) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"sendMessage is not supported by this host\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: (await handlers.sendMessage(params)) ?? null,\n          });\n          return;\n        }\n\n        case \"updateModelContext\": {\n          if (!handlers.updateModelContext) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"updateModelContext is not supported by this host\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: (await handlers.updateModelContext(params)) ?? null,\n          });\n          return;\n        }\n\n        case \"requestDisplayMode\": {\n          if (!handlers.requestDisplayMode) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"requestDisplayMode is not supported by this host\",\n            );\n            return;\n          }\n          const modeParams = (params ?? {}) as { mode?: unknown };\n          if (!isMcpAppDisplayMode(modeParams.mode)) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"requestDisplayMode requires a valid 'mode'\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: await handlers.requestDisplayMode({\n              mode: modeParams.mode,\n            }),\n          });\n          return;\n        }\n\n        default: {\n          errorResponse(\n            req.id,\n            JSONRPC_ERROR.methodNotFound,\n            `Unknown method: ${req.method}`,\n          );\n        }\n      }\n    } catch (err) {\n      const error = err instanceof Error ? err : new Error(String(err));\n      reportError(error);\n      errorResponse(req.id, JSONRPC_ERROR.internalError, error.message);\n    }\n  };\n\n  const handleNotification = (note: McpAppJsonRpcNotification) => {\n    try {\n      switch (normalizeMethod(note.method)) {\n        case \"notifications/initialized\": {\n          handlers.onInitialized?.(initializeParams);\n          return;\n        }\n        case \"notifications/size_changed\": {\n          const p = (note.params ?? {}) as { width?: number; height?: number };\n          handlers.onSizeChange?.({\n            ...(typeof p.width === \"number\" ? { width: p.width } : {}),\n            ...(typeof p.height === \"number\" ? { height: p.height } : {}),\n          });\n          return;\n        }\n        case \"notifications/log\": {\n          handlers.onLog?.(note.params);\n          return;\n        }\n        case \"notifications/request_teardown\": {\n          handlers.onRequestTeardown?.(note.params);\n          return;\n        }\n        case \"notifications/error\": {\n          const p = (note.params ?? {}) as { message?: string };\n          reportError(\n            new Error(\n              typeof p.message === \"string\" ? p.message : \"Widget error\",\n            ),\n          );\n          return;\n        }\n        default:\n          return;\n      }\n    } catch (err) {\n      const error = err instanceof Error ? err : new Error(String(err));\n      reportError(error);\n    }\n  };\n\n  // The host applies the cross-origin guard before delegating; this only\n  // validates the JSON-RPC envelope.\n  const onMessage = (event: MessageEvent) => {\n    if (disposed) return;\n    if (!isJsonRpcMessage(event.data)) return;\n\n    const msg = event.data;\n    if (isRequest(msg)) {\n      void handleRequest(msg);\n    } else if (isNotification(msg)) {\n      handleNotification(msg);\n    }\n  };\n\n  return {\n    onMessage,\n    dispose: () => {\n      disposed = true;\n    },\n    notifyToolInput: (input: unknown) => {\n      post({\n        jsonrpc: \"2.0\",\n        method: \"notifications/tools/call/input\",\n        params: { input },\n      });\n      post({\n        jsonrpc: \"2.0\",\n        method: \"ui/notifications/tool-input\",\n        params: isRecord(input) ? { arguments: input } : {},\n      });\n    },\n    notifyToolResult: (result: unknown) => {\n      post({\n        jsonrpc: \"2.0\",\n        method: \"notifications/tools/call/result\",\n        params: { result },\n      });\n      post({\n        jsonrpc: \"2.0\",\n        method: \"ui/notifications/tool-result\",\n        params: isRecord(result)\n          ? result\n          : { content: [{ type: \"text\", text: String(result) }] },\n      });\n    },\n    notifyHostContextChanged: (ctx: McpAppHostContext) => {\n      post({\n        jsonrpc: \"2.0\",\n        method: \"notifications/host_context/changed\",\n        params: ctx,\n      });\n      post({\n        jsonrpc: \"2.0\",\n        method: \"ui/notifications/host-context-changed\",\n        params: ctx,\n      });\n    },\n  };\n}\n"],"mappings":";;;AAgBA,MAAMa,sBAAsB;CAC1B;CACA;CACA;AAAK;AAGP,SAASE,oBAAoBC,OAA4C;CACvE,OAAOH,oBAAoBI,MAAMC,SAASA,SAASF,KAAK;AAC1D;AAEA,SAASG,UACPH,OACyD;CACzD,OACEJ,SAASI,KAAK,KACd,OAAOA,MAAMK,SAAS,YACtB,OAAOL,MAAMM,YAAY;AAE7B;AAEA,SAASC,mBACPP,OAC2C;CAC3C,IAAI,CAACJ,SAASI,KAAK,GAAG,OAAOQ,KAAAA;CAC7B,MAAM,EAAEC,uBAAuB,GAAGC,SAASV;CAC3C,OAAO;EACL,GAAGU;EAEH,GAAIC,MAAMC,QAAQH,qBAAqB,IACnC,EACEA,uBAAuBI,OAAOC,OAAOL,qBAAqB,CAAC,CAACM,OAC1DhB,mBACF,EACF,IACA,CAAC;CACP;AACF;AAEA,SAASiB,oBAAoBC,QAAyC;CACpE,IAAI,CAACrB,SAASqB,MAAM,GAAG,OAAO,CAAC;CAC/B,MAAMC,kBAAkBX,mBAAmBU,OAAOC,eAAe;CACjE,OAAO;EACL,GAAIf,UAAUc,OAAOE,OAAO,IAAI,EAAEA,SAASF,OAAOE,QAAQ,IAAI,CAAC;EAC/D,GAAID,kBAAkB,EAAEA,gBAAgB,IAAI,CAAC;EAC7C,GAAI,OAAOD,OAAOG,oBAAoB,WAClC,EAAEA,iBAAiBH,OAAOG,gBAAgB,IAC1C,CAAC;CACP;AACF;AAmBA,MAAMiB,oBAAoC;CACxChC,MAAM;CACNC,SAAS;AACX;AAKA,MAAMgC,iBAAyC;CAC7C,gCAAgC;CAChC,iCAAiC;CACjC,2BAA2B;CAC3B,gBAAgB;CAChB,2BAA2B;CAC3B,cAAc;CACd,yBAAyB;AAC3B;AAEA,MAAME,mBAAmBC,WACvBH,eAAeG,WAAWA;AAE5B,MAAMC,gBAAgB;CACpBC,YAAY;CACZC,gBAAgB;CAChBC,gBAAgB;CAChBC,eAAe;CACfC,eAAe;AACjB;AAEA,SAASC,iBAAiBhD,OAA+C;CACvE,IAAI,CAACA,SAAS,OAAOA,UAAU,UAAU,OAAO;CAChD,MAAMiD,IAAIjD;CACV,OAAOiD,EAAEC,YAAY,SAAS,OAAOD,EAAER,WAAW;AACpD;AAEA,SAASU,UAAUC,KAAwD;CACzE,OAAO,QAAQA;AACjB;AAEA,SAASC,eACPD,KACkC;CAClC,OAAO,EAAE,QAAQA;AACnB;AAEA,SAAgBE,mBACdC,MACc;CACd,MAAM,EACJhC,OACAC,WAAW,CAAC,GACZC,WAAWY,mBACXX,cAAc,CAAC,MACb6B;CACJ,IAAIC,WAAW;CACf,IAAIC,mBAA2C,CAAC;CAEhD,MAAMC,QAAQN,QAA8B;EAC1C,IAAII,UAAU;EACdjC,MAAMoC,YAAYP,GAAG;CACvB;CAEA,MAAMQ,WACJC,IACAC,YAGG;EACH,MAAMK,MAA6B;GACjCjB,SAAS;GACTW;GACA,GAAGC;EACL;EACAJ,KAAKS,GAAG;CACV;CAEA,MAAMC,iBACJP,IACAG,MACAC,SACAC,SACG;EACHN,QAAQC,IAAI,EACVE,OAAO;GACLC;GACAC;GACA,GAAIC,SAAS1D,KAAAA,IAAY,EAAE0D,KAAK,IAAI,CAAC;EACvC,EACF,CAAC;CACH;CAEA,MAAMG,eAAeN,UAAiB;EACpC,IAAIP,UAAU;EACdvE,mBACE,gBACA,mBACAuC,SAAS+C,SAASC,KAAKhD,QAAQ,GAC/BuC,KACF;CACF;CAEA,MAAMU,gBAAgB,OAAOC,QAA8B;EACzD,IAAI;GACF,MAAMzD,SAASyD,IAAIzD;GAEnB,QAAQuB,gBAAgBkC,IAAIjC,MAAM,GAAlC;IACE,KAAK,iBAAiB;KACpBgB,mBAAmBzC,oBAAoBC,MAAM;KAC7C,MAAM0D,2BACJlB,iBAAiBrC,mBAAAA;KACnBwC,QAAQc,IAAIb,IAAI,EACd1B,QAAQ;MACNf,iBAAiBuD;MACjBC,MAAMnD;MACNA;MACAC;MACAmD,cAAc;OACZC,OAAOtD,SAASuD,WAAW,CAAC,IAAIvE,KAAAA;OAChCwE,WACExD,SAASyD,gBAAgBzD,SAAS0D,gBAC9B,CAAC,IACD1E,KAAAA;OACN2E,IAAI;QACFxB,aAAa,CAAC,CAACnC,SAASmC;QACxByB,UAAU,CAAC,CAAC5D,SAAS4D;QACrBC,oBAAoB,CAAC,CAAC7D,SAAS6D;QAC/BC,oBAAoB,CAAC,CAAC9D,SAAS8D;OACjC;MACF;MACAC,kBAAkB;OAChB,GAAI/D,SAAS4D,WAAW,EAAEI,WAAW,CAAC,EAAE,IAAI,CAAC;OAC7C,GAAIhE,SAASuD,WAAW,EAAEU,aAAa,CAAC,EAAE,IAAI,CAAC;OAC/C,GAAIjE,SAASyD,gBAAgBzD,SAAS0D,gBAClC,EAAEQ,iBAAiB,CAAC,EAAE,IACtB,CAAC;OACL,GAAIlE,SAAS8D,qBACT,EAAEA,oBAAoB,EAAEK,MAAM,CAAC,EAAE,EAAE,IACnC,CAAC;OACL,GAAInE,SAASmC,cAAc,EAAEM,SAAS,EAAE0B,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC;OACxD,GAAInE,SAASoE,QAAQ,EAAEC,SAAS,CAAC,EAAE,IAAI,CAAC;MAC1C;KACF,EACF,CAAC;KACD;IACF;IAEA,KAAK,cAAc;KACjB,IAAI,CAACrE,SAASuD,UAAU;MACtBX,cACEM,IAAIb,IACJnB,cAAcG,gBACd,0CACF;MACA;KACF;KACA,MAAMiD,aAAc7E,UAAU,CAAC;KAI/B,IAAI,OAAO6E,WAAWzF,SAAS,UAAU;MACvC+D,cACEM,IAAIb,IACJnB,cAAcI,eACd,qCACF;MACA;KACF;KACA,IACEtB,SAASwE,gBACT,CAACxE,SAASwE,aAAaC,SAASH,WAAWzF,IAAI,GAC/C;MACA+D,cACEM,IAAIb,IACJnB,cAAcI,eACd,SAASgD,WAAWzF,KAAI,8BAC1B;MACA;KACF;KACA,IAAI6F;KACJ,IAAIJ,WAAWC,cAAcvF,KAAAA,GAAW;MACtC,IACEsF,WAAWC,cAAc,QACzB,OAAOD,WAAWC,cAAc,YAChCpF,MAAMC,QAAQkF,WAAWC,SAAS,GAClC;OACA3B,cACEM,IAAIb,IACJnB,cAAcI,eACd,0CACF;OACA;MACF;MACAoD,WAAWJ,WAAWC;KACxB;KACA,MAAM5D,SAAS,MAAMX,SAASuD,SAAS;MACrC1E,MAAMyF,WAAWzF;MACjB,GAAI6F,aAAa1F,KAAAA,IAAY,EAAEuF,WAAWG,SAAS,IAAI,CAAC;KAC1D,CAAC;KACDtC,QAAQc,IAAIb,IAAI,EAAE1B,OAAO,CAAC;KAC1B;IACF;IAEA,KAAK,kBAAkB;KACrB,IAAI,CAACX,SAASyD,cAAc;MAC1Bb,cACEM,IAAIb,IACJnB,cAAcG,gBACd,8CACF;MACA;KACF;KACA,MAAMsD,aAAclF,UAAU,CAAC;KAC/B,IAAI,OAAOkF,WAAWC,QAAQ,UAAU;MACtChC,cACEM,IAAIb,IACJnB,cAAcI,eACd,wCACF;MACA;KACF;KACAc,QAAQc,IAAIb,IAAI,EACd1B,QAAQ,MAAMX,SAASyD,aAAa,EAAEmB,KAAKD,WAAWC,IAAI,CAAC,EAC7D,CAAC;KACD;IACF;IAEA,KAAK;KACH,IAAI,CAAC5E,SAAS0D,eAAe;MAC3Bd,cACEM,IAAIb,IACJnB,cAAcG,gBACd,8CACF;MACA;KACF;KACAe,QAAQc,IAAIb,IAAI,EACd1B,QAAS,MAAMX,SAAS0D,cAAcjE,MAAM,KAAM,KACpD,CAAC;KACD;IAGF,KAAK,YAAY;KACf,IAAI,CAACO,SAAS4D,UAAU;MACtBhB,cACEM,IAAIb,IACJnB,cAAcG,gBACd,wCACF;MACA;KACF;KACA,MAAMwD,aAAcpF,UAAU,CAAC;KAC/B,IAAI,OAAOoF,WAAWC,QAAQ,UAAU;MACtClC,cACEM,IAAIb,IACJnB,cAAcI,eACd,kCACF;MACA;KACF;KACA,IAAIyD;KACJ,IAAI;MACFA,eAAe,IAAIC,IAAIH,WAAWC,GAAG,CAAC,CAACG;KACzC,QAAQ;MACNrC,cACEM,IAAIb,IACJnB,cAAcI,eACd,+BACF;MACA;KACF;KACA,IAAIyD,iBAAiB,YAAYA,iBAAiB,SAAS;MACzDnC,cACEM,IAAIb,IACJnB,cAAcI,eACd,oCACF;MACA;KACF;KACAc,QAAQc,IAAIb,IAAI,EACd1B,QAAQ,MAAMX,SAAS4D,SAAS,EAAEkB,KAAKD,WAAWC,IAAI,CAAC,EACzD,CAAC;KACD;IACF;IAEA,KAAK;KACH,IAAI,CAAC9E,SAASmC,aAAa;MACzBS,cACEM,IAAIb,IACJnB,cAAcG,gBACd,2CACF;MACA;KACF;KACAe,QAAQc,IAAIb,IAAI,EACd1B,QAAS,MAAMX,SAASmC,YAAY1C,MAAM,KAAM,KAClD,CAAC;KACD;IAGF,KAAK;KACH,IAAI,CAACO,SAAS8D,oBAAoB;MAChClB,cACEM,IAAIb,IACJnB,cAAcG,gBACd,kDACF;MACA;KACF;KACAe,QAAQc,IAAIb,IAAI,EACd1B,QAAS,MAAMX,SAAS8D,mBAAmBrE,MAAM,KAAM,KACzD,CAAC;KACD;IAGF,KAAK,sBAAsB;KACzB,IAAI,CAACO,SAAS6D,oBAAoB;MAChCjB,cACEM,IAAIb,IACJnB,cAAcG,gBACd,kDACF;MACA;KACF;KACA,MAAM6D,aAAczF,UAAU,CAAC;KAC/B,IAAI,CAAClB,oBAAoB2G,WAAWxG,IAAI,GAAG;MACzCkE,cACEM,IAAIb,IACJnB,cAAcI,eACd,4CACF;MACA;KACF;KACAc,QAAQc,IAAIb,IAAI,EACd1B,QAAQ,MAAMX,SAAS6D,mBAAmB,EACxCnF,MAAMwG,WAAWxG,KACnB,CAAC,EACH,CAAC;KACD;IACF;IAEA,SACEkE,cACEM,IAAIb,IACJnB,cAAcG,gBACd,mBAAmB6B,IAAIjC,QACzB;GAEJ;EACF,SAASkE,KAAK;GACZ,MAAM5C,QAAQ4C,eAAerC,QAAQqC,MAAM,IAAIrC,MAAMsC,OAAOD,GAAG,CAAC;GAChEtC,YAAYN,KAAK;GACjBK,cAAcM,IAAIb,IAAInB,cAAcK,eAAegB,MAAME,OAAO;EAClE;CACF;CAEA,MAAM4C,sBAAsBC,SAAoC;EAC9D,IAAI;GACF,QAAQtE,gBAAgBsE,KAAKrE,MAAM,GAAnC;IACE,KAAK;KACHjB,SAASuF,gBAAgBtD,gBAAgB;KACzC;IAEF,KAAK,8BAA8B;KACjC,MAAMuD,IAAKF,KAAK7F,UAAU,CAAC;KAC3BO,SAAS2F,eAAe;MACtB,GAAI,OAAOH,EAAEC,UAAU,WAAW,EAAEA,OAAOD,EAAEC,MAAM,IAAI,CAAC;MACxD,GAAI,OAAOD,EAAEE,WAAW,WAAW,EAAEA,QAAQF,EAAEE,OAAO,IAAI,CAAC;KAC7D,CAAC;KACD;IACF;IACA,KAAK;KACH1F,SAASoE,QAAQkB,KAAK7F,MAAM;KAC5B;IAEF,KAAK;KACHO,SAAS4F,oBAAoBN,KAAK7F,MAAM;KACxC;IAEF,KAAK,uBAAuB;KAC1B,MAAM+F,IAAKF,KAAK7F,UAAU,CAAC;KAC3BoD,YACE,IAAIC,MACF,OAAO0C,EAAE/C,YAAY,WAAW+C,EAAE/C,UAAU,cAC9C,CACF;KACA;IACF;IACA,SACE;GACJ;EACF,SAAS0C,KAAK;GACZ,MAAM5C,QAAQ4C,eAAerC,QAAQqC,MAAM,IAAIrC,MAAMsC,OAAOD,GAAG,CAAC;GAChEtC,YAAYN,KAAK;EACnB;CACF;CAIA,MAAMnC,aAAaC,UAAwB;EACzC,IAAI2B,UAAU;EACd,IAAI,CAACR,iBAAiBnB,MAAMqC,IAAI,GAAG;EAEnC,MAAMd,MAAMvB,MAAMqC;EAClB,IAAIf,UAAUC,GAAG,GACf,cAAmBA,GAAG;OACjB,IAAIC,eAAeD,GAAG,GAC3ByD,mBAAmBzD,GAAG;CAE1B;CAEA,OAAO;EACLxB;EACAG,eAAe;GACbyB,WAAW;EACb;EACAxB,kBAAkBC,UAAmB;GACnCyB,KAAK;IACHR,SAAS;IACTT,QAAQ;IACRxB,QAAQ,EAAEgB,MAAM;GAClB,CAAC;GACDyB,KAAK;IACHR,SAAS;IACTT,QAAQ;IACRxB,QAAQrB,SAASqC,KAAK,IAAI,EAAE8D,WAAW9D,MAAM,IAAI,CAAC;GACpD,CAAC;EACH;EACAC,mBAAmBC,WAAoB;GACrCuB,KAAK;IACHR,SAAS;IACTT,QAAQ;IACRxB,QAAQ,EAAEkB,OAAO;GACnB,CAAC;GACDuB,KAAK;IACHR,SAAS;IACTT,QAAQ;IACRxB,QAAQrB,SAASuC,MAAM,IACnBA,SACA,EAAEkF,SAAS,CAAC;KAAEC,MAAM;KAAQ3B,MAAMiB,OAAOzE,MAAM;IAAE,CAAC,EAAE;GAC1D,CAAC;EACH;EACAC,2BAA2BmF,QAA2B;GACpD7D,KAAK;IACHR,SAAS;IACTT,QAAQ;IACRxB,QAAQsG;GACV,CAAC;GACD7D,KAAK;IACHR,SAAS;IACTT,QAAQ;IACRxB,QAAQsG;GACV,CAAC;EACH;CACF;AACF"}

package/dist/mcp-apps/csp.d.ts

@@ -0,0 +1,4 @@
+import type { McpAppResourceCSP } from "./types.js";
+export declare const buildMcpAppCsp: (csp?: McpAppResourceCSP) => string;
+export declare const applyMcpAppCsp: (html: string, csp?: McpAppResourceCSP) => string;
+//# sourceMappingURL=csp.d.ts.map

package/dist/mcp-apps/csp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csp.d.ts","sourceRoot":"","sources":["../../src/mcp-apps/csp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,mBAAgB;AAyCjD,eAAO,MAAM,cAAc,GAAI,MAAM,iBAAiB,KAAG,MAyBxD,CAAC;AAiDF,eAAO,MAAM,cAAc,GACzB,MAAM,MAAM,EACZ,MAAM,iBAAiB,KACtB,MAKF,CAAC"}

package/dist/mcp-apps/csp.js

@@ -0,0 +1,93 @@
+//#region src/mcp-apps/csp.ts
+const isAllowedOrigin = (value, allowWebSocket) => {
+	if (!(allowWebSocket ? /^(?:https?|wss?):\/\//i : /^https?:\/\//i).test(value) || /[\s;'"`,]/.test(value)) return false;
+	try {
+		const url = new URL(value.replace("://*.", "://wildcard."));
+		return url.username === "" && url.password === "" && url.pathname === "/" && url.search === "" && url.hash === "";
+	} catch {
+		return false;
+	}
+};
+const getAllowedOrigins = (values, allowWebSocket = false) => Array.isArray(values) ? [...new Set(values.filter((value) => typeof value === "string" && isAllowedOrigin(value, allowWebSocket)))] : [];
+const directive = (name, values) => `${name} ${values.join(" ")}`;
+const buildMcpAppCsp = (csp) => {
+	const connectDomains = getAllowedOrigins(csp?.connectDomains, true);
+	const resourceDomains = getAllowedOrigins(csp?.resourceDomains);
+	const frameDomains = getAllowedOrigins(csp?.frameDomains);
+	const baseUriDomains = getAllowedOrigins(csp?.baseUriDomains);
+	return [
+		"default-src 'none'",
+		directive("script-src", [
+			"'self'",
+			"'unsafe-inline'",
+			...resourceDomains
+		]),
+		directive("style-src", [
+			"'self'",
+			"'unsafe-inline'",
+			...resourceDomains
+		]),
+		directive("connect-src", connectDomains.length > 0 ? ["'self'", ...connectDomains] : ["'none'"]),
+		directive("img-src", [
+			"'self'",
+			"data:",
+			...resourceDomains
+		]),
+		directive("font-src", ["'self'", ...resourceDomains]),
+		directive("media-src", [
+			"'self'",
+			"data:",
+			...resourceDomains
+		]),
+		directive("frame-src", frameDomains.length > 0 ? frameDomains : ["'none'"]),
+		directive("base-uri", baseUriDomains.length > 0 ? baseUriDomains : ["'self'"]),
+		"object-src 'none'",
+		"form-action 'none'"
+	].join("; ");
+};
+const findDoctypeEnd = (html) => {
+	let offset = 0;
+	while (offset < html.length) {
+		const whitespace = html.slice(offset).match(/^[\t\n\f\r ]+/)?.[0];
+		if (whitespace) {
+			offset += whitespace.length;
+			continue;
+		}
+		if (html.startsWith("<!--", offset)) {
+			if (html.startsWith("<!-->", offset)) {
+				offset += 5;
+				continue;
+			}
+			if (html.startsWith("<!--->", offset)) {
+				offset += 6;
+				continue;
+			}
+			const commentEnd = html.indexOf("-->", offset + 4);
+			const bangCommentEnd = html.indexOf("--!>", offset + 4);
+			if (commentEnd === -1 && bangCommentEnd === -1) return 0;
+			offset = bangCommentEnd !== -1 && (commentEnd === -1 || bangCommentEnd < commentEnd) ? bangCommentEnd + 4 : commentEnd + 3;
+			continue;
+		}
+		if (html.slice(offset, offset + 9).toLowerCase() === "<!doctype") break;
+		if (html.startsWith("<?", offset) || html.startsWith("<!", offset)) {
+			const bogusCommentEnd = html.indexOf(">", offset + 2);
+			if (bogusCommentEnd === -1) return 0;
+			offset = bogusCommentEnd + 1;
+			continue;
+		}
+		break;
+	}
+	if (html.slice(offset, offset + 9).toLowerCase() !== "<!doctype") return offset;
+	const end = html.indexOf(">", offset + 9);
+	return end === -1 ? 0 : end + 1;
+};
+const applyMcpAppCsp = (html, csp) => {
+	const normalizedHtml = html.charCodeAt(0) === 65279 ? html.slice(1) : html;
+	const meta = `<meta http-equiv="Content-Security-Policy" content="${buildMcpAppCsp(csp)}">`;
+	const insertionPoint = findDoctypeEnd(normalizedHtml);
+	return `${normalizedHtml.slice(0, insertionPoint)}${meta}${normalizedHtml.slice(insertionPoint)}`;
+};
+//#endregion
+export { applyMcpAppCsp, buildMcpAppCsp };
+
+//# sourceMappingURL=csp.js.map

package/dist/mcp-apps/csp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csp.js","names":["McpAppResourceCSP","isAllowedOrigin","value","allowWebSocket","scheme","test","url","URL","replace","username","password","pathname","search","hash","getAllowedOrigins","values","Array","isArray","Set","filter","directive","name","join","buildMcpAppCsp","csp","connectDomains","resourceDomains","frameDomains","baseUriDomains","length","findDoctypeEnd","html","offset","whitespace","slice","match","startsWith","commentEnd","indexOf","bangCommentEnd","toLowerCase","bogusCommentEnd","end","applyMcpAppCsp","normalizedHtml","charCodeAt","meta","insertionPoint"],"sources":["../../src/mcp-apps/csp.ts"],"sourcesContent":["import type { McpAppResourceCSP } from \"./types\";\n\nconst isAllowedOrigin = (value: string, allowWebSocket: boolean): boolean => {\n  const scheme = allowWebSocket ? /^(?:https?|wss?):\\/\\//i : /^https?:\\/\\//i;\n  if (!scheme.test(value) || /[\\s;'\"`,]/.test(value)) {\n    return false;\n  }\n\n  try {\n    const url = new URL(value.replace(\"://*.\", \"://wildcard.\"));\n    return (\n      url.username === \"\" &&\n      url.password === \"\" &&\n      url.pathname === \"/\" &&\n      url.search === \"\" &&\n      url.hash === \"\"\n    );\n  } catch {\n    return false;\n  }\n};\n\nconst getAllowedOrigins = (\n  values: unknown,\n  allowWebSocket = false,\n): string[] =>\n  Array.isArray(values)\n    ? [\n        ...new Set(\n          values.filter(\n            (value): value is string =>\n              typeof value === \"string\" &&\n              isAllowedOrigin(value, allowWebSocket),\n          ),\n        ),\n      ]\n    : [];\n\nconst directive = (name: string, values: readonly string[]) =>\n  `${name} ${values.join(\" \")}`;\n\nexport const buildMcpAppCsp = (csp?: McpAppResourceCSP): string => {\n  const connectDomains = getAllowedOrigins(csp?.connectDomains, true);\n  const resourceDomains = getAllowedOrigins(csp?.resourceDomains);\n  const frameDomains = getAllowedOrigins(csp?.frameDomains);\n  const baseUriDomains = getAllowedOrigins(csp?.baseUriDomains);\n\n  return [\n    \"default-src 'none'\",\n    directive(\"script-src\", [\"'self'\", \"'unsafe-inline'\", ...resourceDomains]),\n    directive(\"style-src\", [\"'self'\", \"'unsafe-inline'\", ...resourceDomains]),\n    directive(\n      \"connect-src\",\n      connectDomains.length > 0 ? [\"'self'\", ...connectDomains] : [\"'none'\"],\n    ),\n    directive(\"img-src\", [\"'self'\", \"data:\", ...resourceDomains]),\n    directive(\"font-src\", [\"'self'\", ...resourceDomains]),\n    directive(\"media-src\", [\"'self'\", \"data:\", ...resourceDomains]),\n    directive(\"frame-src\", frameDomains.length > 0 ? frameDomains : [\"'none'\"]),\n    directive(\n      \"base-uri\",\n      baseUriDomains.length > 0 ? baseUriDomains : [\"'self'\"],\n    ),\n    \"object-src 'none'\",\n    \"form-action 'none'\",\n  ].join(\"; \");\n};\n\nconst findDoctypeEnd = (html: string): number => {\n  let offset = 0;\n\n  while (offset < html.length) {\n    const whitespace = html.slice(offset).match(/^[\\t\\n\\f\\r ]+/)?.[0];\n    if (whitespace) {\n      offset += whitespace.length;\n      continue;\n    }\n    if (html.startsWith(\"<!--\", offset)) {\n      if (html.startsWith(\"<!-->\", offset)) {\n        offset += 5;\n        continue;\n      }\n      if (html.startsWith(\"<!--->\", offset)) {\n        offset += 6;\n        continue;\n      }\n      const commentEnd = html.indexOf(\"-->\", offset + 4);\n      const bangCommentEnd = html.indexOf(\"--!>\", offset + 4);\n      if (commentEnd === -1 && bangCommentEnd === -1) return 0;\n      offset =\n        bangCommentEnd !== -1 &&\n        (commentEnd === -1 || bangCommentEnd < commentEnd)\n          ? bangCommentEnd + 4\n          : commentEnd + 3;\n      continue;\n    }\n    if (html.slice(offset, offset + 9).toLowerCase() === \"<!doctype\") {\n      break;\n    }\n    if (html.startsWith(\"<?\", offset) || html.startsWith(\"<!\", offset)) {\n      const bogusCommentEnd = html.indexOf(\">\", offset + 2);\n      if (bogusCommentEnd === -1) return 0;\n      offset = bogusCommentEnd + 1;\n      continue;\n    }\n    break;\n  }\n\n  if (html.slice(offset, offset + 9).toLowerCase() !== \"<!doctype\") {\n    return offset;\n  }\n  const end = html.indexOf(\">\", offset + 9);\n  return end === -1 ? 0 : end + 1;\n};\n\nexport const applyMcpAppCsp = (\n  html: string,\n  csp?: McpAppResourceCSP,\n): string => {\n  const normalizedHtml = html.charCodeAt(0) === 0xfeff ? html.slice(1) : html;\n  const meta = `<meta http-equiv=\"Content-Security-Policy\" content=\"${buildMcpAppCsp(csp)}\">`;\n  const insertionPoint = findDoctypeEnd(normalizedHtml);\n  return `${normalizedHtml.slice(0, insertionPoint)}${meta}${normalizedHtml.slice(insertionPoint)}`;\n};\n"],"mappings":";AAEA,MAAMC,mBAAmBC,OAAeC,mBAAqC;CAE3E,IAAI,EADWA,iBAAiB,2BAA2B,gBAAA,CAC/CE,KAAKH,KAAK,KAAK,YAAYG,KAAKH,KAAK,GAC/C,OAAO;CAGT,IAAI;EACF,MAAMI,MAAM,IAAIC,IAAIL,MAAMM,QAAQ,SAAS,cAAc,CAAC;EAC1D,OACEF,IAAIG,aAAa,MACjBH,IAAII,aAAa,MACjBJ,IAAIK,aAAa,OACjBL,IAAIM,WAAW,MACfN,IAAIO,SAAS;CAEjB,QAAQ;EACN,OAAO;CACT;AACF;AAEA,MAAMC,qBACJC,QACAZ,iBAAiB,UAEjBa,MAAMC,QAAQF,MAAM,IAChB,CACE,GAAG,IAAIG,IACLH,OAAOI,QACJjB,UACC,OAAOA,UAAU,YACjBD,gBAAgBC,OAAOC,cAAc,CACzC,CACF,CAAC,IAEH,CAAA;AAEN,MAAMiB,aAAaC,MAAcN,WAC/B,GAAGM,KAAI,GAAIN,OAAOO,KAAK,GAAG;AAE5B,MAAaC,kBAAkBC,QAAoC;CACjE,MAAMC,iBAAiBX,kBAAkBU,KAAKC,gBAAgB,IAAI;CAClE,MAAMC,kBAAkBZ,kBAAkBU,KAAKE,eAAe;CAC9D,MAAMC,eAAeb,kBAAkBU,KAAKG,YAAY;CACxD,MAAMC,iBAAiBd,kBAAkBU,KAAKI,cAAc;CAE5D,OAAO;EACL;EACAR,UAAU,cAAc;GAAC;GAAU;GAAmB,GAAGM;EAAe,CAAC;EACzEN,UAAU,aAAa;GAAC;GAAU;GAAmB,GAAGM;EAAe,CAAC;EACxEN,UACE,eACAK,eAAeI,SAAS,IAAI,CAAC,UAAU,GAAGJ,cAAc,IAAI,CAAC,QAAQ,CACvE;EACAL,UAAU,WAAW;GAAC;GAAU;GAAS,GAAGM;EAAe,CAAC;EAC5DN,UAAU,YAAY,CAAC,UAAU,GAAGM,eAAe,CAAC;EACpDN,UAAU,aAAa;GAAC;GAAU;GAAS,GAAGM;EAAe,CAAC;EAC9DN,UAAU,aAAaO,aAAaE,SAAS,IAAIF,eAAe,CAAC,QAAQ,CAAC;EAC1EP,UACE,YACAQ,eAAeC,SAAS,IAAID,iBAAiB,CAAC,QAAQ,CACxD;EACA;EACA;CAAoB,CACrB,CAACN,KAAK,IAAI;AACb;AAEA,MAAMQ,kBAAkBC,SAAyB;CAC/C,IAAIC,SAAS;CAEb,OAAOA,SAASD,KAAKF,QAAQ;EAC3B,MAAMI,aAAaF,KAAKG,MAAMF,MAAM,CAAC,CAACG,MAAM,eAAe,CAAC,GAAG;EAC/D,IAAIF,YAAY;GACdD,UAAUC,WAAWJ;GACrB;EACF;EACA,IAAIE,KAAKK,WAAW,QAAQJ,MAAM,GAAG;GACnC,IAAID,KAAKK,WAAW,SAASJ,MAAM,GAAG;IACpCA,UAAU;IACV;GACF;GACA,IAAID,KAAKK,WAAW,UAAUJ,MAAM,GAAG;IACrCA,UAAU;IACV;GACF;GACA,MAAMK,aAAaN,KAAKO,QAAQ,OAAON,SAAS,CAAC;GACjD,MAAMO,iBAAiBR,KAAKO,QAAQ,QAAQN,SAAS,CAAC;GACtD,IAAIK,eAAe,MAAME,mBAAmB,IAAI,OAAO;GACvDP,SACEO,mBAAmB,OAClBF,eAAe,MAAME,iBAAiBF,cACnCE,iBAAiB,IACjBF,aAAa;GACnB;EACF;EACA,IAAIN,KAAKG,MAAMF,QAAQA,SAAS,CAAC,CAAC,CAACQ,YAAY,MAAM,aACnD;EAEF,IAAIT,KAAKK,WAAW,MAAMJ,MAAM,KAAKD,KAAKK,WAAW,MAAMJ,MAAM,GAAG;GAClE,MAAMS,kBAAkBV,KAAKO,QAAQ,KAAKN,SAAS,CAAC;GACpD,IAAIS,oBAAoB,IAAI,OAAO;GACnCT,SAASS,kBAAkB;GAC3B;EACF;EACA;CACF;CAEA,IAAIV,KAAKG,MAAMF,QAAQA,SAAS,CAAC,CAAC,CAACQ,YAAY,MAAM,aACnD,OAAOR;CAET,MAAMU,MAAMX,KAAKO,QAAQ,KAAKN,SAAS,CAAC;CACxC,OAAOU,QAAQ,KAAK,IAAIA,MAAM;AAChC;AAEA,MAAaC,kBACXZ,MACAP,QACW;CACX,MAAMoB,iBAAiBb,KAAKc,WAAW,CAAC,MAAM,QAASd,KAAKG,MAAM,CAAC,IAAIH;CACvE,MAAMe,OAAO,uDAAuDvB,eAAeC,GAAG,EAAC;CACvF,MAAMuB,iBAAiBjB,eAAec,cAAc;CACpD,OAAO,GAAGA,eAAeV,MAAM,GAAGa,cAAc,IAAID,OAAOF,eAAeV,MAAMa,cAAc;AAChG"}

package/dist/mcp-apps/index.d.ts

@@ -1,5 +1,5 @@
 export { McpAppRenderer, type McpAppPartOptions, type McpAppRendererOptions, } from "./McpAppRenderer.js";
 export { McpAppsRemoteHost } from "./McpAppsRemoteHost.js";
 export { getMcpAppFromToolPart } from "./utils.js";
-export type { McpAppMetadata, McpAppResource, McpAppResourceMeta, McpAppResourceCSP, McpAppSandboxConfig, McpAppHostInfo, McpAppHostContext, McpAppDisplayMode, McpAppsHost, McpAppsRemoteHostOptions, McpAppToolCallParams, McpAppBridgeHandlers, ToolCallMessagePartMcpMetadata, } from "./types.js";
+export type { McpAppMetadata, McpAppResource, McpAppResourceMeta, McpAppResourceCSP, McpAppSandboxConfig, McpAppHostInfo, McpAppHostContext, McpAppDisplayMode, McpAppsHost, McpAppsRemoteHostOptions, McpAppToolCallParams, McpAppInitializeParams, McpAppBridgeHandlers, ToolCallMessagePartMcpMetadata, } from "./types.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/mcp-apps/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp-apps/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,GAC3B,4BAAyB;AAC1B,OAAO,EAAE,iBAAiB,EAAE,+BAA4B;AACxD,OAAO,EAAE,qBAAqB,EAAE,mBAAgB;AAChD,YAAY,EACV,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,EACX,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,8BAA8B,GAC/B,mBAAgB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp-apps/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,GAC3B,4BAAyB;AAC1B,OAAO,EAAE,iBAAiB,EAAE,+BAA4B;AACxD,OAAO,EAAE,qBAAqB,EAAE,mBAAgB;AAChD,YAAY,EACV,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,EACX,wBAAwB,EACxB,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,EACpB,8BAA8B,GAC/B,mBAAgB"}

package/dist/mcp-apps/types.d.ts

@@ -7,6 +7,7 @@ export type McpAppResourceCSP = {
     connectDomains?: string[];
     resourceDomains?: string[];
     frameDomains?: string[];
+    baseUriDomains?: string[];
     [k: string]: unknown;
 };
 export type McpAppResourceMeta = {
@@ -68,6 +69,23 @@ export type McpAppToolCallParams = {
     name: string;
     arguments?: Record<string, unknown>;
 };
+/**
+ * The params of the app's `ui/initialize` request, as `onInitialized`
+ * receives them. A field that fails validation is omitted, and
+ * `availableDisplayModes` keeps only the modes the bridge recognizes.
+ */
+export type McpAppInitializeParams = {
+    appInfo?: {
+        name: string;
+        version: string;
+        [k: string]: unknown;
+    };
+    appCapabilities?: {
+        availableDisplayModes?: McpAppDisplayMode[];
+        [k: string]: unknown;
+    };
+    protocolVersion?: string;
+};
 export type McpAppBridgeHandlers = {
     allowedTools?: readonly string[];
     callTool?: (params: McpAppToolCallParams) => Promise<unknown> | unknown;
@@ -91,7 +109,7 @@ export type McpAppBridgeHandlers = {
         width?: number;
         height?: number;
     }) => void;
-    onInitialized?: () => void;
+    onInitialized?: (params: McpAppInitializeParams) => void;
     onRequestTeardown?: (params: unknown) => void;
     onLog?: (params: unknown) => void;
     onError?: (error: Error) => void;

package/dist/mcp-apps/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/mcp-apps/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,8BAA8B,EAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,uCAAoC;AAErE,YAAY,EAAE,cAAc,EAAE,8BAA8B,EAAE,CAAC;AAE/D,eAAO,MAAM,iBAAiB,EAAG,2BAAoC,CAAC;AAEtE,eAAO,MAAM,wBAAwB,EAAG,KAAc,CAAC;AAEvD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,GAAG,CAAC,EAAE,iBAAiB,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,OAAO,iBAAiB,CAAC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,kBAAkB,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,YAAY,GAAG,KAAK,CAAC;AAEhE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,qBAAqB,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC5C,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,YAAY,EAAE,CAAC,MAAM,EAAE;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9B,QAAQ,EAAE,CACR,MAAM,EAAE,oBAAoB,GAAG;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,KACjD,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,YAAY,EAAE,CAAC,MAAM,EAAE;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvB,aAAa,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACvD,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,OAAO,CAAC,EACJ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACtB,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;CACtE,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACxE,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACvE,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACjE,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACnE,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAC9D,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACrE,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE;QAC5B,IAAI,EAAE,iBAAiB,CAAC;KACzB,KAAK,OAAO,CAAC;QAAE,IAAI,EAAE,iBAAiB,CAAA;KAAE,CAAC,GAAG;QAAE,IAAI,EAAE,iBAAiB,CAAA;KAAE,CAAC;IACzE,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACrE,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;IAC3B,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IAC9C,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IAClC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAEpD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,cAAc,CAAC;IACpB,QAAQ,EAAE,cAAc,CAAC;IACzB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IACtC,WAAW,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC5C;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,OAAO,EAAE,KAAK,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC7B;IACE,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,GACD;IACE,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,KAAK,CAAC;IACf,KAAK,EAAE,kBAAkB,CAAC;CAC3B,CAAC;AAEN,MAAM,MAAM,oBAAoB,GAC5B,oBAAoB,GACpB,yBAAyB,GACzB,qBAAqB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/mcp-apps/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,8BAA8B,EAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,uCAAoC;AAErE,YAAY,EAAE,cAAc,EAAE,8BAA8B,EAAE,CAAC;AAE/D,eAAO,MAAM,iBAAiB,EAAG,2BAAoC,CAAC;AAEtE,eAAO,MAAM,wBAAwB,EAAG,KAAc,CAAC;AAEvD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,GAAG,CAAC,EAAE,iBAAiB,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,OAAO,iBAAiB,CAAC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,kBAAkB,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,YAAY,GAAG,KAAK,CAAC;AAEhE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,qBAAqB,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC5C,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,YAAY,EAAE,CAAC,MAAM,EAAE;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9B,QAAQ,EAAE,CACR,MAAM,EAAE,oBAAoB,GAAG;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,KACjD,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,YAAY,EAAE,CAAC,MAAM,EAAE;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvB,aAAa,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACvD,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,OAAO,CAAC,EACJ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACtB,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;CACtE,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAClE,eAAe,CAAC,EAAE;QAChB,qBAAqB,CAAC,EAAE,iBAAiB,EAAE,CAAC;QAC5C,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;KACtB,CAAC;IACF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACxE,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACvE,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACjE,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACnE,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAC9D,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACrE,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE;QAC5B,IAAI,EAAE,iBAAiB,CAAC;KACzB,KAAK,OAAO,CAAC;QAAE,IAAI,EAAE,iBAAiB,CAAA;KAAE,CAAC,GAAG;QAAE,IAAI,EAAE,iBAAiB,CAAA;KAAE,CAAC;IACzE,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACrE,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,IAAI,CAAC;IACzD,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IAC9C,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IAClC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAEpD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,cAAc,CAAC;IACpB,QAAQ,EAAE,cAAc,CAAC;IACzB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IACtC,WAAW,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC5C;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,OAAO,EAAE,KAAK,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC7B;IACE,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,GACD;IACE,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,KAAK,CAAC;IACf,KAAK,EAAE,kBAAkB,CAAC;CAC3B,CAAC;AAEN,MAAM,MAAM,oBAAoB,GAC5B,oBAAoB,GACpB,yBAAyB,GACzB,qBAAqB,CAAC"}

package/dist/mcp-apps/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","names":["McpAppMetadata","ToolCallMessagePartMcpMetadata","SandboxHostConfig","MCP_APP_MIME_TYPE","const","MCP_APP_PROTOCOL_VERSION","McpAppResourceCSP","connectDomains","resourceDomains","frameDomains","k","McpAppResourceMeta","prefersBorder","csp","permissions","Record","McpAppResource","uri","mimeType","html","meta","McpAppDisplayMode","McpAppHostContext","theme","displayMode","availableDisplayModes","McpAppHostInfo","name","version","McpAppsHost","loadResource","params","serverId","Promise","callTool","McpAppToolCallParams","readResource","listResources","McpAppsRemoteHostOptions","url","fetch","headers","arguments","McpAppBridgeHandlers","allowedTools","openLink","sendMessage","updateModelContext","requestDisplayMode","mode","onSizeChange","width","height","onInitialized","onRequestTeardown","onLog","onError","error","Error","McpAppSandboxConfig","McpAppFrameProps","app","resource","input","output","sandbox","handlers","hostInfo","hostContext","maxHeight","McpAppJsonRpcRequest","jsonrpc","id","method","McpAppJsonRpcNotification","McpAppJsonRpcError","code","message","data","McpAppJsonRpcResponse","result","McpAppJsonRpcMessage"],"sources":["../../src/mcp-apps/types.ts"],"sourcesContent":["import type {\n  McpAppMetadata,\n  ToolCallMessagePartMcpMetadata,\n} from \"@assistant-ui/core\";\nimport type { SandboxHostConfig } from \"../sandbox-host/SandboxHost\";\n\nexport type { McpAppMetadata, ToolCallMessagePartMcpMetadata };\n\nexport const MCP_APP_MIME_TYPE = \"text/html;profile=mcp-app\" as const;\n\nexport const MCP_APP_PROTOCOL_VERSION = \"0.1\" as const;\n\nexport type McpAppResourceCSP = {\n  connectDomains?: string[];\n  resourceDomains?: string[];\n  frameDomains?: string[];\n  [k: string]: unknown;\n};\n\nexport type McpAppResourceMeta = {\n  prefersBorder?: boolean;\n  csp?: McpAppResourceCSP;\n  permissions?: Record<string, unknown>;\n  [k: string]: unknown;\n};\n\nexport type McpAppResource = {\n  uri: string;\n  mimeType: typeof MCP_APP_MIME_TYPE;\n  html: string;\n  meta?: McpAppResourceMeta;\n};\n\nexport type McpAppDisplayMode = \"inline\" | \"fullscreen\" | \"pip\";\n\nexport type McpAppHostContext = {\n  theme?: \"light\" | \"dark\";\n  displayMode?: McpAppDisplayMode;\n  availableDisplayModes?: McpAppDisplayMode[];\n  [k: string]: unknown;\n};\n\nexport type McpAppHostInfo = {\n  name: string;\n  version: string;\n};\n\n/**\n * What `McpAppRenderer` needs from its host — the data-plane operations\n * the widget can request. Provided by a host resource like\n * `McpAppsRemoteHost`.\n */\nexport type McpAppsHost = {\n  loadResource: (params: {\n    uri: string;\n    serverId?: string;\n  }) => Promise<McpAppResource>;\n  callTool: (\n    params: McpAppToolCallParams & { serverId?: string },\n  ) => Promise<unknown>;\n  readResource: (params: {\n    uri: string;\n    serverId?: string;\n  }) => Promise<unknown>;\n  listResources: (params?: unknown) => Promise<unknown>;\n};\n\n/**\n * Options for `McpAppsRemoteHost`. The host POSTs `{ method, params }` to\n * `url` and expects JSON responses. Params may carry `serverId` for host-side routing. Method names sent:\n * - `mcp-apps/read-resource` (`{ uri, serverId? }`) → `McpAppResource`\n * - `tools/call` (`{ name, arguments?, serverId? }`) → tool result\n * - `resources/read` (`{ uri, serverId? }`) → resource read result\n * - `resources/list` (`{ serverId?, ...params }?`) → list result\n */\nexport type McpAppsRemoteHostOptions = {\n  url: string;\n  fetch?: typeof fetch;\n  headers?:\n    | Record<string, string>\n    | (() => Record<string, string> | Promise<Record<string, string>>);\n};\n\nexport type McpAppToolCallParams = {\n  name: string;\n  arguments?: Record<string, unknown>;\n};\n\nexport type McpAppBridgeHandlers = {\n  allowedTools?: readonly string[];\n  callTool?: (params: McpAppToolCallParams) => Promise<unknown> | unknown;\n  readResource?: (params: { uri: string }) => Promise<unknown> | unknown;\n  listResources?: (params?: unknown) => Promise<unknown> | unknown;\n  openLink?: (params: { url: string }) => Promise<unknown> | unknown;\n  sendMessage?: (params: unknown) => Promise<unknown> | unknown;\n  updateModelContext?: (params: unknown) => Promise<unknown> | unknown;\n  requestDisplayMode?: (params: {\n    mode: McpAppDisplayMode;\n  }) => Promise<{ mode: McpAppDisplayMode }> | { mode: McpAppDisplayMode };\n  onSizeChange?: (params: { width?: number; height?: number }) => void;\n  onInitialized?: () => void;\n  onRequestTeardown?: (params: unknown) => void;\n  onLog?: (params: unknown) => void;\n  onError?: (error: Error) => void;\n};\n\nexport type McpAppSandboxConfig = SandboxHostConfig;\n\nexport type McpAppFrameProps = {\n  app: McpAppMetadata;\n  resource: McpAppResource;\n  input?: unknown;\n  output?: unknown;\n  sandbox?: McpAppSandboxConfig | undefined;\n  handlers?: McpAppBridgeHandlers | undefined;\n  hostInfo?: McpAppHostInfo | undefined;\n  hostContext?: McpAppHostContext | undefined;\n  /**\n   * Upper bound (in pixels) for the auto-resize height driven by the widget's\n   * `notifications/size_changed`. Defaults to 800.\n   */\n  maxHeight?: number | undefined;\n};\n\nexport type McpAppJsonRpcRequest = {\n  jsonrpc: \"2.0\";\n  id: string | number;\n  method: string;\n  params?: unknown;\n};\n\nexport type McpAppJsonRpcNotification = {\n  jsonrpc: \"2.0\";\n  method: string;\n  params?: unknown;\n};\n\nexport type McpAppJsonRpcError = {\n  code: number;\n  message: string;\n  data?: unknown;\n};\n\nexport type McpAppJsonRpcResponse =\n  | {\n      jsonrpc: \"2.0\";\n      id: string | number;\n      result: unknown;\n      error?: never;\n    }\n  | {\n      jsonrpc: \"2.0\";\n      id: string | number;\n      result?: never;\n      error: McpAppJsonRpcError;\n    };\n\nexport type McpAppJsonRpcMessage =\n  | McpAppJsonRpcRequest\n  | McpAppJsonRpcNotification\n  | McpAppJsonRpcResponse;\n"],"mappings":";AAQA,MAAaG,oBAAoB;AAEjC,MAAaE,2BAA2B"}
+{"version":3,"file":"types.js","names":["McpAppMetadata","ToolCallMessagePartMcpMetadata","SandboxHostConfig","MCP_APP_MIME_TYPE","const","MCP_APP_PROTOCOL_VERSION","McpAppResourceCSP","connectDomains","resourceDomains","frameDomains","baseUriDomains","k","McpAppResourceMeta","prefersBorder","csp","permissions","Record","McpAppResource","uri","mimeType","html","meta","McpAppDisplayMode","McpAppHostContext","theme","displayMode","availableDisplayModes","McpAppHostInfo","name","version","McpAppsHost","loadResource","params","serverId","Promise","callTool","McpAppToolCallParams","readResource","listResources","McpAppsRemoteHostOptions","url","fetch","headers","arguments","McpAppInitializeParams","appInfo","appCapabilities","protocolVersion","McpAppBridgeHandlers","allowedTools","openLink","sendMessage","updateModelContext","requestDisplayMode","mode","onSizeChange","width","height","onInitialized","onRequestTeardown","onLog","onError","error","Error","McpAppSandboxConfig","McpAppFrameProps","app","resource","input","output","sandbox","handlers","hostInfo","hostContext","maxHeight","McpAppJsonRpcRequest","jsonrpc","id","method","McpAppJsonRpcNotification","McpAppJsonRpcError","code","message","data","McpAppJsonRpcResponse","result","McpAppJsonRpcMessage"],"sources":["../../src/mcp-apps/types.ts"],"sourcesContent":["import type {\n  McpAppMetadata,\n  ToolCallMessagePartMcpMetadata,\n} from \"@assistant-ui/core\";\nimport type { SandboxHostConfig } from \"../sandbox-host/SandboxHost\";\n\nexport type { McpAppMetadata, ToolCallMessagePartMcpMetadata };\n\nexport const MCP_APP_MIME_TYPE = \"text/html;profile=mcp-app\" as const;\n\nexport const MCP_APP_PROTOCOL_VERSION = \"0.1\" as const;\n\nexport type McpAppResourceCSP = {\n  connectDomains?: string[];\n  resourceDomains?: string[];\n  frameDomains?: string[];\n  baseUriDomains?: string[];\n  [k: string]: unknown;\n};\n\nexport type McpAppResourceMeta = {\n  prefersBorder?: boolean;\n  csp?: McpAppResourceCSP;\n  permissions?: Record<string, unknown>;\n  [k: string]: unknown;\n};\n\nexport type McpAppResource = {\n  uri: string;\n  mimeType: typeof MCP_APP_MIME_TYPE;\n  html: string;\n  meta?: McpAppResourceMeta;\n};\n\nexport type McpAppDisplayMode = \"inline\" | \"fullscreen\" | \"pip\";\n\nexport type McpAppHostContext = {\n  theme?: \"light\" | \"dark\";\n  displayMode?: McpAppDisplayMode;\n  availableDisplayModes?: McpAppDisplayMode[];\n  [k: string]: unknown;\n};\n\nexport type McpAppHostInfo = {\n  name: string;\n  version: string;\n};\n\n/**\n * What `McpAppRenderer` needs from its host — the data-plane operations\n * the widget can request. Provided by a host resource like\n * `McpAppsRemoteHost`.\n */\nexport type McpAppsHost = {\n  loadResource: (params: {\n    uri: string;\n    serverId?: string;\n  }) => Promise<McpAppResource>;\n  callTool: (\n    params: McpAppToolCallParams & { serverId?: string },\n  ) => Promise<unknown>;\n  readResource: (params: {\n    uri: string;\n    serverId?: string;\n  }) => Promise<unknown>;\n  listResources: (params?: unknown) => Promise<unknown>;\n};\n\n/**\n * Options for `McpAppsRemoteHost`. The host POSTs `{ method, params }` to\n * `url` and expects JSON responses. Params may carry `serverId` for host-side routing. Method names sent:\n * - `mcp-apps/read-resource` (`{ uri, serverId? }`) → `McpAppResource`\n * - `tools/call` (`{ name, arguments?, serverId? }`) → tool result\n * - `resources/read` (`{ uri, serverId? }`) → resource read result\n * - `resources/list` (`{ serverId?, ...params }?`) → list result\n */\nexport type McpAppsRemoteHostOptions = {\n  url: string;\n  fetch?: typeof fetch;\n  headers?:\n    | Record<string, string>\n    | (() => Record<string, string> | Promise<Record<string, string>>);\n};\n\nexport type McpAppToolCallParams = {\n  name: string;\n  arguments?: Record<string, unknown>;\n};\n\n/**\n * The params of the app's `ui/initialize` request, as `onInitialized`\n * receives them. A field that fails validation is omitted, and\n * `availableDisplayModes` keeps only the modes the bridge recognizes.\n */\nexport type McpAppInitializeParams = {\n  appInfo?: { name: string; version: string; [k: string]: unknown };\n  appCapabilities?: {\n    availableDisplayModes?: McpAppDisplayMode[];\n    [k: string]: unknown;\n  };\n  protocolVersion?: string;\n};\n\nexport type McpAppBridgeHandlers = {\n  allowedTools?: readonly string[];\n  callTool?: (params: McpAppToolCallParams) => Promise<unknown> | unknown;\n  readResource?: (params: { uri: string }) => Promise<unknown> | unknown;\n  listResources?: (params?: unknown) => Promise<unknown> | unknown;\n  openLink?: (params: { url: string }) => Promise<unknown> | unknown;\n  sendMessage?: (params: unknown) => Promise<unknown> | unknown;\n  updateModelContext?: (params: unknown) => Promise<unknown> | unknown;\n  requestDisplayMode?: (params: {\n    mode: McpAppDisplayMode;\n  }) => Promise<{ mode: McpAppDisplayMode }> | { mode: McpAppDisplayMode };\n  onSizeChange?: (params: { width?: number; height?: number }) => void;\n  onInitialized?: (params: McpAppInitializeParams) => void;\n  onRequestTeardown?: (params: unknown) => void;\n  onLog?: (params: unknown) => void;\n  onError?: (error: Error) => void;\n};\n\nexport type McpAppSandboxConfig = SandboxHostConfig;\n\nexport type McpAppFrameProps = {\n  app: McpAppMetadata;\n  resource: McpAppResource;\n  input?: unknown;\n  output?: unknown;\n  sandbox?: McpAppSandboxConfig | undefined;\n  handlers?: McpAppBridgeHandlers | undefined;\n  hostInfo?: McpAppHostInfo | undefined;\n  hostContext?: McpAppHostContext | undefined;\n  /**\n   * Upper bound (in pixels) for the auto-resize height driven by the widget's\n   * `notifications/size_changed`. Defaults to 800.\n   */\n  maxHeight?: number | undefined;\n};\n\nexport type McpAppJsonRpcRequest = {\n  jsonrpc: \"2.0\";\n  id: string | number;\n  method: string;\n  params?: unknown;\n};\n\nexport type McpAppJsonRpcNotification = {\n  jsonrpc: \"2.0\";\n  method: string;\n  params?: unknown;\n};\n\nexport type McpAppJsonRpcError = {\n  code: number;\n  message: string;\n  data?: unknown;\n};\n\nexport type McpAppJsonRpcResponse =\n  | {\n      jsonrpc: \"2.0\";\n      id: string | number;\n      result: unknown;\n      error?: never;\n    }\n  | {\n      jsonrpc: \"2.0\";\n      id: string | number;\n      result?: never;\n      error: McpAppJsonRpcError;\n    };\n\nexport type McpAppJsonRpcMessage =\n  | McpAppJsonRpcRequest\n  | McpAppJsonRpcNotification\n  | McpAppJsonRpcResponse;\n"],"mappings":";AAQA,MAAaG,oBAAoB;AAEjC,MAAaE,2BAA2B"}

package/dist/primitives/assistantModal/AssistantModalRoot.d.ts

@@ -2,6 +2,7 @@ import { type FC } from "react";
 import { Popover as PopoverPrimitive } from "radix-ui";
 export declare namespace AssistantModalPrimitiveRoot {
     type Props = PopoverPrimitive.PopoverProps & {
+        /** @deprecated Experimental since 2024-10-12. Not scheduled for removal; the API may change in any release. */
         unstable_openOnRunStart?: boolean | undefined;
     };
 }

package/dist/primitives/assistantModal/AssistantModalRoot.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AssistantModalRoot.d.ts","sourceRoot":"","sources":["../../../src/primitives/assistantModal/AssistantModalRoot.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,EAAE,EAAY,MAAM,OAAO,CAAC;AAC1C,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAIvD,yBAAiB,2BAA2B,CAAC;IAC3C,KAAY,KAAK,GAAG,gBAAgB,CAAC,YAAY,GAAG;QAClD,uBAAuB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;KAC/C,CAAC;CACH;AAED,eAAO,MAAM,2BAA2B,EAAE,EAAE,CAC1C,2BAA2B,CAAC,KAAK,CA+BlC,CAAC"}
+{"version":3,"file":"AssistantModalRoot.d.ts","sourceRoot":"","sources":["../../../src/primitives/assistantModal/AssistantModalRoot.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,EAAE,EAAY,MAAM,OAAO,CAAC;AAC1C,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAIvD,yBAAiB,2BAA2B,CAAC;IAC3C,KAAY,KAAK,GAAG,gBAAgB,CAAC,YAAY,GAAG;QAClD,+GAA+G;QAC/G,uBAAuB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;KAC/C,CAAC;CACH;AAED,eAAO,MAAM,2BAA2B,EAAE,EAAE,CAC1C,2BAA2B,CAAC,KAAK,CA+BlC,CAAC"}

package/dist/primitives/assistantModal/AssistantModalRoot.js.map

@@ -1 +1 @@
-{"version":3,"file":"AssistantModalRoot.js","names":["c","_c","FC","useState","Popover","PopoverPrimitive","ScopedProps","usePopoverScope","useAuiEvent","AssistantModalPrimitiveRoot","Props","PopoverProps","unstable_openOnRunStart","t0","$","__scopeAssistantModal","onOpenChange","open","rest","t1","t2","defaultOpen","undefined","scope","modalOpen","setOpen","isOpen","t3","open_0","openChangeHandler","t4","t5","displayName","_c","PopoverPrimitive"],"sources":["../../../src/primitives/assistantModal/AssistantModalRoot.tsx"],"sourcesContent":["\"use client\";\n\nimport { type FC, useState } from \"react\";\nimport { Popover as PopoverPrimitive } from \"radix-ui\";\nimport { type ScopedProps, usePopoverScope } from \"./scope\";\nimport { useAuiEvent } from \"@assistant-ui/store\";\n\nexport namespace AssistantModalPrimitiveRoot {\n  export type Props = PopoverPrimitive.PopoverProps & {\n    unstable_openOnRunStart?: boolean | undefined;\n  };\n}\n\nexport const AssistantModalPrimitiveRoot: FC<\n  AssistantModalPrimitiveRoot.Props\n> = ({\n  __scopeAssistantModal,\n  defaultOpen = false,\n  unstable_openOnRunStart = true,\n  open,\n  onOpenChange,\n  ...rest\n}: ScopedProps<AssistantModalPrimitiveRoot.Props>) => {\n  const scope = usePopoverScope(__scopeAssistantModal);\n\n  const [modalOpen, setOpen] = useState(defaultOpen);\n  const isOpen = open ?? modalOpen;\n\n  const openChangeHandler = (open: boolean) => {\n    onOpenChange?.(open);\n    setOpen(open);\n  };\n\n  useAuiEvent(\"thread.runStart\", () => {\n    if (unstable_openOnRunStart && !isOpen) openChangeHandler(true);\n  });\n\n  return (\n    <PopoverPrimitive.Root\n      {...scope}\n      open={isOpen}\n      onOpenChange={openChangeHandler}\n      {...rest}\n    />\n  );\n};\n\nAssistantModalPrimitiveRoot.displayName = \"AssistantModalPrimitive.Root\";\n"],"mappings":";;;;;;;;AAaA,MAAaS,+BAETI,OAAA;CAAA,MAAAC,IAAAb,EAAA,EAAA;CAAA,IAAAc;CAAA,IAAAC;CAAA,IAAAC;CAAA,IAAAC;CAAA,IAAAC;CAAA,IAAAC;CAAA,IAAAN,EAAA,OAAAD,IAAA;EAAC,CAAA,CAAAE,uBAAAM,aAAAF,IAAAP,yBAAAQ,IAAAH,MAAAD,cAAA,GAAAE,QAAAL;EAO4CC,EAAA,KAAAD;EAAAC,EAAA,KAAAC;EAAAD,EAAA,KAAAE;EAAAF,EAAA,KAAAG;EAAAH,EAAA,KAAAI;EAAAJ,EAAA,KAAAK;EAAAL,EAAA,KAAAM;CAAA,OAAA;EAAAL,wBAAAD,EAAA;EAAAE,eAAAF,EAAA;EAAAG,OAAAH,EAAA;EAAAI,OAAAJ,EAAA;EAAAK,KAAAL,EAAA;EAAAM,KAAAN,EAAA;CAAA;CAL/C,MAAAO,cAAAF,OAAAG,KAAAA,IAAA,QAAAH;CACA,MAAAP,0BAAAQ,OAAAE,KAAAA,IAAA,OAAAF;CAKA,MAAAG,QAAchB,gBAAgBQ,qBAAqB;CAEnD,MAAA,CAAAS,WAAAC,WAA6BtB,SAASkB,WAAW;CACjD,MAAAK,SAAeT,QAAAO;CAAkB,IAAAG;CAAA,IAAAb,EAAA,OAAAE,cAAA;EAEPW,MAAAC,WAAA;GACxBZ,eAAeC,MAAI;GACnBQ,QAAQR,MAAI;EAAC;EACdH,EAAA,KAAAE;EAAAF,EAAA,KAAAa;CAAA,OAAAA,KAAAb,EAAA;CAHD,MAAAe,oBAA0BF;CAGxB,IAAAG;CAAA,IAAAhB,EAAA,OAAAY,UAAAZ,EAAA,QAAAe,qBAAAf,EAAA,QAAAF,yBAAA;EAE6BkB,WAAA;GAC7B,IAAIlB,2BAAA,CAA4Bc,QAAQG,kBAAkB,IAAI;EAAE;EACjEf,EAAA,KAAAY;EAAAZ,EAAA,MAAAe;EAAAf,EAAA,MAAAF;EAAAE,EAAA,MAAAgB;CAAA,OAAAA,KAAAhB,EAAA;CAFDN,YAAY,mBAAmBsB,EAE9B;CAAC,IAAAC;CAAA,IAAAjB,EAAA,QAAAY,UAAAZ,EAAA,QAAAe,qBAAAf,EAAA,QAAAI,QAAAJ,EAAA,QAAAS,OAAA;EAGAQ,KAAA,oBAAAG,QAAA,MAAA;GAAA,GACMX;GACEG,MAAAA;GACQG,cAAAA;GAAiB,GAC3BX;EAAI,CAAA;EACRJ,EAAA,MAAAY;EAAAZ,EAAA,MAAAe;EAAAf,EAAA,MAAAI;EAAAJ,EAAA,MAAAS;EAAAT,EAAA,MAAAiB;CAAA,OAAAA,KAAAjB,EAAA;CAAA,OALFiB;AAKE;AAINtB,4BAA4BuB,cAAc"}
+{"version":3,"file":"AssistantModalRoot.js","names":["c","_c","FC","useState","Popover","PopoverPrimitive","ScopedProps","usePopoverScope","useAuiEvent","AssistantModalPrimitiveRoot","Props","PopoverProps","unstable_openOnRunStart","t0","$","__scopeAssistantModal","onOpenChange","open","rest","t1","t2","defaultOpen","undefined","scope","modalOpen","setOpen","isOpen","t3","open_0","openChangeHandler","t4","t5","displayName","_c","PopoverPrimitive"],"sources":["../../../src/primitives/assistantModal/AssistantModalRoot.tsx"],"sourcesContent":["\"use client\";\n\nimport { type FC, useState } from \"react\";\nimport { Popover as PopoverPrimitive } from \"radix-ui\";\nimport { type ScopedProps, usePopoverScope } from \"./scope\";\nimport { useAuiEvent } from \"@assistant-ui/store\";\n\nexport namespace AssistantModalPrimitiveRoot {\n  export type Props = PopoverPrimitive.PopoverProps & {\n    /** @deprecated Experimental since 2024-10-12. Not scheduled for removal; the API may change in any release. */\n    unstable_openOnRunStart?: boolean | undefined;\n  };\n}\n\nexport const AssistantModalPrimitiveRoot: FC<\n  AssistantModalPrimitiveRoot.Props\n> = ({\n  __scopeAssistantModal,\n  defaultOpen = false,\n  unstable_openOnRunStart = true,\n  open,\n  onOpenChange,\n  ...rest\n}: ScopedProps<AssistantModalPrimitiveRoot.Props>) => {\n  const scope = usePopoverScope(__scopeAssistantModal);\n\n  const [modalOpen, setOpen] = useState(defaultOpen);\n  const isOpen = open ?? modalOpen;\n\n  const openChangeHandler = (open: boolean) => {\n    onOpenChange?.(open);\n    setOpen(open);\n  };\n\n  useAuiEvent(\"thread.runStart\", () => {\n    if (unstable_openOnRunStart && !isOpen) openChangeHandler(true);\n  });\n\n  return (\n    <PopoverPrimitive.Root\n      {...scope}\n      open={isOpen}\n      onOpenChange={openChangeHandler}\n      {...rest}\n    />\n  );\n};\n\nAssistantModalPrimitiveRoot.displayName = \"AssistantModalPrimitive.Root\";\n"],"mappings":";;;;;;;;AAcA,MAAaS,+BAETI,OAAA;CAAA,MAAAC,IAAAb,EAAA,EAAA;CAAA,IAAAc;CAAA,IAAAC;CAAA,IAAAC;CAAA,IAAAC;CAAA,IAAAC;CAAA,IAAAC;CAAA,IAAAN,EAAA,OAAAD,IAAA;EAAC,CAAA,CAAAE,uBAAAM,aAAAF,IAAAP,yBAAAQ,IAAAH,MAAAD,cAAA,GAAAE,QAAAL;EAO4CC,EAAA,KAAAD;EAAAC,EAAA,KAAAC;EAAAD,EAAA,KAAAE;EAAAF,EAAA,KAAAG;EAAAH,EAAA,KAAAI;EAAAJ,EAAA,KAAAK;EAAAL,EAAA,KAAAM;CAAA,OAAA;EAAAL,wBAAAD,EAAA;EAAAE,eAAAF,EAAA;EAAAG,OAAAH,EAAA;EAAAI,OAAAJ,EAAA;EAAAK,KAAAL,EAAA;EAAAM,KAAAN,EAAA;CAAA;CAL/C,MAAAO,cAAAF,OAAAG,KAAAA,IAAA,QAAAH;CACA,MAAAP,0BAAAQ,OAAAE,KAAAA,IAAA,OAAAF;CAKA,MAAAG,QAAchB,gBAAgBQ,qBAAqB;CAEnD,MAAA,CAAAS,WAAAC,WAA6BtB,SAASkB,WAAW;CACjD,MAAAK,SAAeT,QAAAO;CAAkB,IAAAG;CAAA,IAAAb,EAAA,OAAAE,cAAA;EAEPW,MAAAC,WAAA;GACxBZ,eAAeC,MAAI;GACnBQ,QAAQR,MAAI;EAAC;EACdH,EAAA,KAAAE;EAAAF,EAAA,KAAAa;CAAA,OAAAA,KAAAb,EAAA;CAHD,MAAAe,oBAA0BF;CAGxB,IAAAG;CAAA,IAAAhB,EAAA,OAAAY,UAAAZ,EAAA,QAAAe,qBAAAf,EAAA,QAAAF,yBAAA;EAE6BkB,WAAA;GAC7B,IAAIlB,2BAAA,CAA4Bc,QAAQG,kBAAkB,IAAI;EAAE;EACjEf,EAAA,KAAAY;EAAAZ,EAAA,MAAAe;EAAAf,EAAA,MAAAF;EAAAE,EAAA,MAAAgB;CAAA,OAAAA,KAAAhB,EAAA;CAFDN,YAAY,mBAAmBsB,EAE9B;CAAC,IAAAC;CAAA,IAAAjB,EAAA,QAAAY,UAAAZ,EAAA,QAAAe,qBAAAf,EAAA,QAAAI,QAAAJ,EAAA,QAAAS,OAAA;EAGAQ,KAAA,oBAAAG,QAAA,MAAA;GAAA,GACMX;GACEG,MAAAA;GACQG,cAAAA;GAAiB,GAC3BX;EAAI,CAAA;EACRJ,EAAA,MAAAY;EAAAZ,EAAA,MAAAe;EAAAf,EAAA,MAAAI;EAAAJ,EAAA,MAAAS;EAAAT,EAAA,MAAAiB;CAAA,OAAAA,KAAAjB,EAAA;CAAA,OALFiB;AAKE;AAINtB,4BAA4BuB,cAAc"}

package/dist/primitives/attachment.d.ts

@@ -1,5 +1,7 @@
 export { AttachmentPrimitiveRoot as Root } from "./attachment/AttachmentRoot.js";
-export { AttachmentPrimitiveThumb as unstable_Thumb } from "./attachment/AttachmentThumb.js";
+export { 
+/** @deprecated Experimental since 2024-10-10. Not scheduled for removal; the API may change in any release. */
+AttachmentPrimitiveThumb as unstable_Thumb, } from "./attachment/AttachmentThumb.js";
 export { AttachmentPrimitiveName as Name } from "./attachment/AttachmentName.js";
 export { AttachmentPrimitiveRemove as Remove } from "./attachment/AttachmentRemove.js";
 //# sourceMappingURL=attachment.d.ts.map

package/dist/primitives/attachment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"attachment.d.ts","sourceRoot":"","sources":["../../src/primitives/attachment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,IAAI,IAAI,EAAE,uCAAoC;AAC9E,OAAO,EAAE,wBAAwB,IAAI,cAAc,EAAE,wCAAqC;AAC1F,OAAO,EAAE,uBAAuB,IAAI,IAAI,EAAE,uCAAoC;AAC9E,OAAO,EAAE,yBAAyB,IAAI,MAAM,EAAE,yCAAsC"}
+{"version":3,"file":"attachment.d.ts","sourceRoot":"","sources":["../../src/primitives/attachment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,IAAI,IAAI,EAAE,uCAAoC;AAC9E,OAAO;AACL,+GAA+G;AAC/G,wBAAwB,IAAI,cAAc,GAC3C,wCAAqC;AACtC,OAAO,EAAE,uBAAuB,IAAI,IAAI,EAAE,uCAAoC;AAC9E,OAAO,EAAE,yBAAyB,IAAI,MAAM,EAAE,yCAAsC"}

package/dist/primitives/attachment.js.map

@@ -1 +1 @@
-{"version":3,"file":"attachment.js","names":["AttachmentPrimitiveRoot","Root","AttachmentPrimitiveThumb","unstable_Thumb","AttachmentPrimitiveName","Name","AttachmentPrimitiveRemove","Remove"],"sources":["../../src/primitives/attachment.ts"],"sourcesContent":["export { AttachmentPrimitiveRoot as Root } from \"./attachment/AttachmentRoot\";\nexport { AttachmentPrimitiveThumb as unstable_Thumb } from \"./attachment/AttachmentThumb\";\nexport { AttachmentPrimitiveName as Name } from \"./attachment/AttachmentName\";\nexport { AttachmentPrimitiveRemove as Remove } from \"./attachment/AttachmentRemove\";\n"],"mappings":""}
+{"version":3,"file":"attachment.js","names":["AttachmentPrimitiveRoot","Root","AttachmentPrimitiveThumb","unstable_Thumb","AttachmentPrimitiveName","Name","AttachmentPrimitiveRemove","Remove"],"sources":["../../src/primitives/attachment.ts"],"sourcesContent":["export { AttachmentPrimitiveRoot as Root } from \"./attachment/AttachmentRoot\";\nexport {\n  /** @deprecated Experimental since 2024-10-10. Not scheduled for removal; the API may change in any release. */\n  AttachmentPrimitiveThumb as unstable_Thumb,\n} from \"./attachment/AttachmentThumb\";\nexport { AttachmentPrimitiveName as Name } from \"./attachment/AttachmentName\";\nexport { AttachmentPrimitiveRemove as Remove } from \"./attachment/AttachmentRemove\";\n"],"mappings":""}

package/dist/primitives/composer/ComposerAttachmentDropzone.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ComposerAttachmentDropzone.d.ts","sourceRoot":"","sources":["../../../src/primitives/composer/ComposerAttachmentDropzone.tsx"],"names":[],"mappings":"AAEA,OAAO,EAKL,KAAK,YAAY,EAElB,MAAM,OAAO,CAAC;AAIf,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAI/B,yBAAiB,mCAAmC,CAAC;IACnD,KAAY,OAAO,GAAG,cAAc,CAAC;IACrC,KAAY,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC,cAAc,CAAC,GAAG;QACzD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC9B,MAAM,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;QAClC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;KAChC,CAAC;CACH;AAED,eAAO,MAAM,mCAAmC;cANlC,OAAO,GAAG,SAAS;aACpB,YAAY,GAAG,SAAS;eACtB,OAAO,GAAG,SAAS;wCA2GhC,CAAC"}
+{"version":3,"file":"ComposerAttachmentDropzone.d.ts","sourceRoot":"","sources":["../../../src/primitives/composer/ComposerAttachmentDropzone.tsx"],"names":[],"mappings":"AAEA,OAAO,EAKL,KAAK,YAAY,EAElB,MAAM,OAAO,CAAC;AAIf,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAI/B,yBAAiB,mCAAmC,CAAC;IACnD,KAAY,OAAO,GAAG,cAAc,CAAC;IACrC,KAAY,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC,cAAc,CAAC,GAAG;QACzD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC9B,MAAM,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;QAClC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;KAChC,CAAC;CACH;AAED,eAAO,MAAM,mCAAmC;cANlC,OAAO,GAAG,SAAS;aACpB,YAAY,GAAG,SAAS;eACtB,OAAO,GAAG,SAAS;wCA6GhC,CAAC"}

package/dist/primitives/composer/ComposerAttachmentDropzone.js

@@ -1,7 +1,7 @@
 "use client";
 import { renderSlot } from "../../utils/Primitive.js";
 import { forwardRef, isValidElement, useCallback, useEffect, useState } from "@assistant-ui/tap/react-shim";
-import { useAui } from "@assistant-ui/store";
+import { useAui, useAuiState } from "@assistant-ui/store";
 import { jsx } from "react/jsx-runtime";
 import { composeEventHandlers } from "radix-ui/internal";
 import { Slot } from "radix-ui";
@@ -9,44 +9,46 @@ import { Slot } from "radix-ui";
 const ComposerPrimitiveAttachmentDropzone = forwardRef(({ disabled, asChild = false, render, children, ...rest }, ref) => {
 	const [isDragging, setIsDragging] = useState(false);
 	const aui = useAui();
+	const disabledByThread = useAuiState((s) => s.thread.isDisabled);
+	const isDisabled = disabled || disabledByThread;
 	useEffect(() => {
-		if (!disabled) return;
+		if (!isDisabled) return;
 		setIsDragging(false);
-	}, [disabled]);
+	}, [isDisabled]);
 	const handleDragEnterCapture = useCallback((e) => {
 		if (!e.dataTransfer.types.includes("Files")) return;
 		e.preventDefault();
-		if (disabled || !aui.thread.getState().capabilities.attachments) {
+		if (isDisabled || !aui.thread.getState().capabilities.attachments) {
 			e.dataTransfer.dropEffect = "none";
 			return;
 		}
 		setIsDragging(true);
-	}, [disabled, aui]);
+	}, [isDisabled, aui]);
 	const handleDragOverCapture = useCallback((e_0) => {
 		if (!e_0.dataTransfer.types.includes("Files")) return;
 		e_0.preventDefault();
-		if (disabled || !aui.thread.getState().capabilities.attachments) {
+		if (isDisabled || !aui.thread.getState().capabilities.attachments) {
 			e_0.dataTransfer.dropEffect = "none";
 			return;
 		}
 		if (!isDragging) setIsDragging(true);
 	}, [
-		disabled,
+		isDisabled,
 		isDragging,
 		aui
 	]);
 	const handleDragLeaveCapture = useCallback((e_1) => {
-		if (disabled) return;
+		if (isDisabled) return;
 		e_1.preventDefault();
 		const next = e_1.relatedTarget;
 		if (next && e_1.currentTarget.contains(next)) return;
 		setIsDragging(false);
-	}, [disabled]);
+	}, [isDisabled]);
 	const handleDrop = useCallback(async (e_2) => {
 		setIsDragging(false);
 		if (!e_2.dataTransfer.types.includes("Files")) return;
 		e_2.preventDefault();
-		if (disabled) return;
+		if (isDisabled) return;
 		const files = Array.from(e_2.dataTransfer.files);
 		if (!aui.thread.getState().capabilities.attachments || files.length === 0) return;
 		await Promise.all(files.map(async (file) => {
@@ -54,9 +56,9 @@ const ComposerPrimitiveAttachmentDropzone = forwardRef(({ disabled, asChild = fa
 				await aui.composer.addAttachment(file);
 			} catch {}
 		}));
-	}, [disabled, aui]);
+	}, [isDisabled, aui]);
 	const mergedProps = {
-		...isDragging && !disabled ? { "data-dragging": "true" } : null,
+		...isDragging && !isDisabled ? { "data-dragging": "true" } : null,
 		...rest,
 		onDragEnterCapture: composeEventHandlers(rest.onDragEnterCapture, handleDragEnterCapture),
 		onDragOverCapture: composeEventHandlers(rest.onDragOverCapture, handleDragOverCapture),