@classic-homes/agent-chat 0.0.0-stage → 0.1.0

package/dist/ui-frame-protocol.js

@@ -0,0 +1,73 @@
+/**
+ * MCP-UI sandbox protocol. The host page embeds an iframe on a separate origin (the agent-api
+ * sandbox, `/frame`), hands it HTML over postMessage (never in the URL) and receives a small
+ * set of actions back. Everything from the frame is untrusted: origins and sources are
+ * verified, URLs restricted to https, and tool requests are never run without the user.
+ */
+export const UI_FRAME_READY = 'ui-lifecycle-iframe-ready';
+export const UI_FRAME_RENDER = 'agent-ui:render';
+export const MIN_FRAME_HEIGHT = 120;
+export const MAX_FRAME_HEIGHT = 1200;
+/** Parse a message from the sandbox into a FrameAction, or null when it is not one. */
+export function parseFrameMessage(data) {
+    if (!data || typeof data !== 'object')
+        return null;
+    const m = data;
+    const type = m.type;
+    if (type === UI_FRAME_READY)
+        return { type: 'ready' };
+    if (type === 'ui-size-change') {
+        const payload = (m.payload ?? m);
+        const height = Number(payload.height);
+        if (!Number.isFinite(height))
+            return null;
+        return {
+            type: 'size',
+            height: Math.min(MAX_FRAME_HEIGHT, Math.max(MIN_FRAME_HEIGHT, Math.round(height))),
+        };
+    }
+    const payload = (m.payload ?? {});
+    switch (type) {
+        case 'prompt':
+            return typeof payload.prompt === 'string'
+                ? { type: 'prompt', prompt: payload.prompt.slice(0, 8_000) }
+                : null;
+        case 'intent':
+            return typeof payload.intent === 'string'
+                ? { type: 'intent', intent: payload.intent.slice(0, 200), params: asRecord(payload.params) }
+                : null;
+        case 'tool':
+            return typeof payload.toolName === 'string'
+                ? {
+                    type: 'tool',
+                    toolName: payload.toolName.slice(0, 128),
+                    params: asRecord(payload.params),
+                }
+                : null;
+        case 'link':
+            return typeof payload.url === 'string' && /^https:\/\//i.test(payload.url)
+                ? { type: 'link', url: payload.url.slice(0, 2_000) }
+                : null;
+        case 'notify':
+            return typeof payload.message === 'string'
+                ? { type: 'notify', message: payload.message.slice(0, 500) }
+                : null;
+    }
+    return null;
+}
+function asRecord(value) {
+    return value && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+/** True when a message event came from our sandbox frame and nowhere else. */
+export function isFromFrame(event, frame, sandboxOrigin) {
+    return !!frame && event.source === frame.contentWindow && event.origin === sandboxOrigin;
+}
+/** Text an intent or prompt action becomes in the composer. */
+export function composerTextFor(action) {
+    if (action.type === 'prompt')
+        return action.prompt;
+    const params = action.params ? ` ${JSON.stringify(action.params)}` : '';
+    return `${action.intent}${params}`;
+}

package/dist/ui-frame-protocol.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ui-frame-protocol.test.d.ts.map

package/dist/ui-frame-protocol.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-frame-protocol.test.d.ts","sourceRoot":"","sources":["../src/lib/ui-frame-protocol.test.ts"],"names":[],"mappings":""}

package/dist/ui-frame-protocol.test.js

@@ -0,0 +1,34 @@
+import { describe, expect, it } from 'vitest';
+import { composerTextFor, parseFrameMessage } from './ui-frame-protocol.js';
+describe('parseFrameMessage', () => {
+    it('accepts the MCP-UI action set and clamps sizes', () => {
+        expect(parseFrameMessage({ type: 'ui-lifecycle-iframe-ready' })).toEqual({ type: 'ready' });
+        expect(parseFrameMessage({ type: 'ui-size-change', payload: { height: 5000 } })).toEqual({
+            type: 'size',
+            height: 1200,
+        });
+        expect(parseFrameMessage({ type: 'ui-size-change', payload: { height: 10 } })).toEqual({
+            type: 'size',
+            height: 120,
+        });
+        expect(parseFrameMessage({ type: 'prompt', payload: { prompt: 'Show lot 12' } })).toEqual({
+            type: 'prompt',
+            prompt: 'Show lot 12',
+        });
+        expect(parseFrameMessage({
+            type: 'tool',
+            payload: { toolName: 'search_homes', params: { q: 'x' } },
+        })).toEqual({ type: 'tool', toolName: 'search_homes', params: { q: 'x' } });
+        expect(composerTextFor({ type: 'intent', intent: 'open_home', params: { id: 1 } })).toBe('open_home {"id":1}');
+    });
+    it('rejects non-https links and unknown shapes', () => {
+        expect(parseFrameMessage({ type: 'link', payload: { url: 'javascript:alert(1)' } })).toBeNull();
+        expect(parseFrameMessage({ type: 'link', payload: { url: 'http://x.example' } })).toBeNull();
+        expect(parseFrameMessage({
+            type: 'link',
+            payload: { url: 'https://hotsheet.classichomes.com/l/1' },
+        })).toEqual({ type: 'link', url: 'https://hotsheet.classichomes.com/l/1' });
+        expect(parseFrameMessage('nope')).toBeNull();
+        expect(parseFrameMessage({ type: 'eval', payload: {} })).toBeNull();
+    });
+});

package/package.json

@@ -1,6 +1,50 @@
 {
   "name": "@classic-homes/agent-chat",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0",
+  "private": false,
+  "type": "module",
+  "description": "Svelte 5 chat UI for Classic Agent: session state, message list, composer, tool timeline, artifacts and MCP-UI sandbox frames. Consumed by the Classic App.",
+  "svelte": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "svelte": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@classic-homes/agent-client": "0.1.0",
+    "@classic-homes/agent-contracts": "0.1.0",
+    "dompurify": "3.4.17"
+  },
+  "peerDependencies": {
+    "@classic-homes/theme-svelte": "^1.34.0",
+    "svelte": "^5.0.0"
+  },
+  "devDependencies": {
+    "@classic-homes/theme-svelte": "1.34.0",
+    "@sveltejs/package": "3.0.2",
+    "@sveltejs/vite-plugin-svelte": "7.3.1",
+    "svelte": "5.57.3",
+    "svelte-check": "4.7.7",
+    "vite": "8.3.5"
+  },
+  "license": "UNLICENSED",
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Classic-Homes/classic-agent.git",
+    "directory": "packages/agent-chat"
+  },
+  "scripts": {
+    "build": "svelte-package -i src/lib -o dist",
+    "typecheck": "svelte-check --tsconfig ./tsconfig.json --threshold error"
+  }
 }

package/README.md

@@ -1,3 +0,0 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.