@copilotkit/mcp-apps-renderer 1.71.2

package/dist/follow-up.mjs

@@ -0,0 +1,33 @@
+//#region src/follow-up.ts
+/**
+* Run an MCP app `ui/message` follow-up, scoped to the thread it was enqueued
+* for (issue #5819).
+*
+* The MCP request queue delays follow-up work until the agent is idle. There is
+* a single shared registry agent per id, and switching threads overwrites its
+* `threadId`/`messages` in place. So if the host switches threads while a
+* follow-up is queued, running it now would execute against — and stream into —
+* the now-foreground thread.
+*
+* - **Same thread** (the common case): run on the shared agent, unchanged.
+* - **Thread changed**: the shared agent has moved on, so the follow-up can no
+*   longer run in its originating thread's context. Drop it rather than leak it
+*   into the current thread. (The MCP app already received its `ui/message` ack
+*   at enqueue time; only the optional agent turn is skipped.)
+*
+* @internal exported for testing.
+*/
+async function ɵrunMcpFollowUp({ host, agent, capturedThreadId }) {
+	const currentThreadId = agent.threadId || "default";
+	const originThreadId = capturedThreadId || "default";
+	if (currentThreadId === originThreadId) return host.runAgent({ agent });
+	console.warn(`[MCPAppsRenderer] ui/message follow-up dropped: the thread changed (${originThreadId} → ${currentThreadId}) between enqueue and execution, so running it would leak into the now-foreground thread.`);
+	return {
+		result: void 0,
+		newMessages: []
+	};
+}
+
+//#endregion
+export { ɵrunMcpFollowUp };
+//# sourceMappingURL=follow-up.mjs.map

package/dist/follow-up.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"follow-up.mjs","names":[],"sources":["../src/follow-up.ts"],"sourcesContent":["import type { AbstractAgent, RunAgentResult } from \"@ag-ui/client\";\n\n/**\n * The subset of `CopilotKitCore` that {@link ɵrunMcpFollowUp} depends on.\n * Declared structurally so the runner can be unit-tested without a full core.\n */\nexport interface ɵMcpFollowUpHost {\n  runAgent(params: { agent: AbstractAgent }): Promise<RunAgentResult>;\n}\n\n/**\n * Run an MCP app `ui/message` follow-up, scoped to the thread it was enqueued\n * for (issue #5819).\n *\n * The MCP request queue delays follow-up work until the agent is idle. There is\n * a single shared registry agent per id, and switching threads overwrites its\n * `threadId`/`messages` in place. So if the host switches threads while a\n * follow-up is queued, running it now would execute against — and stream into —\n * the now-foreground thread.\n *\n * - **Same thread** (the common case): run on the shared agent, unchanged.\n * - **Thread changed**: the shared agent has moved on, so the follow-up can no\n *   longer run in its originating thread's context. Drop it rather than leak it\n *   into the current thread. (The MCP app already received its `ui/message` ack\n *   at enqueue time; only the optional agent turn is skipped.)\n *\n * @internal exported for testing.\n */\nexport async function ɵrunMcpFollowUp({\n  host,\n  agent,\n  capturedThreadId,\n}: {\n  host: ɵMcpFollowUpHost;\n  agent: AbstractAgent;\n  capturedThreadId: string;\n}): Promise<RunAgentResult> {\n  const currentThreadId = agent.threadId || \"default\";\n  const originThreadId = capturedThreadId || \"default\";\n\n  if (currentThreadId === originThreadId) {\n    return host.runAgent({ agent });\n  }\n\n  console.warn(\n    \"[MCPAppsRenderer] ui/message follow-up dropped: the thread changed \" +\n      `(${originThreadId} → ${currentThreadId}) between enqueue and execution, ` +\n      \"so running it would leak into the now-foreground thread.\",\n  );\n  return { result: undefined, newMessages: [] };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA4BA,eAAsB,gBAAgB,EACpC,MACA,OACA,oBAK0B;CAC1B,MAAM,kBAAkB,MAAM,YAAY;CAC1C,MAAM,iBAAiB,oBAAoB;AAE3C,KAAI,oBAAoB,eACtB,QAAO,KAAK,SAAS,EAAE,OAAO,CAAC;AAGjC,SAAQ,KACN,uEACM,eAAe,KAAK,gBAAgB,2FAE3C;AACD,QAAO;EAAE,QAAQ;EAAW,aAAa,EAAE;EAAE"}

package/dist/index.d.mts

@@ -0,0 +1,7 @@
+import { MCPAppsActivityType, MCP_OPEN_LINK_BLOCKED_SCHEMES } from "./constants.mjs";
+import { MCPAppsActivityContent, MCPAppsActivityContentSchema } from "./content-schema.mjs";
+import { buildSandboxHTML } from "./sandbox.mjs";
+import { MCPAppsRequestQueue, mcpAppsRequestQueue } from "./request-queue.mjs";
+import { ɵMcpFollowUpHost, ɵrunMcpFollowUp } from "./follow-up.mjs";
+import { BindMcpAppOptions, FetchedResource, MCP_APPS_PROTOCOL_VERSION, McpAppSession, McpAppSessionHooks, bindMcpApp } from "./session.mjs";
+export { BindMcpAppOptions, FetchedResource, MCPAppsActivityContent, MCPAppsActivityContentSchema, MCPAppsActivityType, MCPAppsRequestQueue, MCP_APPS_PROTOCOL_VERSION, MCP_OPEN_LINK_BLOCKED_SCHEMES, McpAppSession, McpAppSessionHooks, bindMcpApp, buildSandboxHTML, mcpAppsRequestQueue, ɵMcpFollowUpHost, ɵrunMcpFollowUp };

package/dist/index.mjs

@@ -0,0 +1,8 @@
+import { MCPAppsActivityType, MCP_OPEN_LINK_BLOCKED_SCHEMES } from "./constants.mjs";
+import { MCPAppsActivityContentSchema } from "./content-schema.mjs";
+import { buildSandboxHTML } from "./sandbox.mjs";
+import { MCPAppsRequestQueue, mcpAppsRequestQueue } from "./request-queue.mjs";
+import { ɵrunMcpFollowUp } from "./follow-up.mjs";
+import { MCP_APPS_PROTOCOL_VERSION, bindMcpApp } from "./session.mjs";
+
+export { MCPAppsActivityContentSchema, MCPAppsActivityType, MCPAppsRequestQueue, MCP_APPS_PROTOCOL_VERSION, MCP_OPEN_LINK_BLOCKED_SCHEMES, bindMcpApp, buildSandboxHTML, mcpAppsRequestQueue, ɵrunMcpFollowUp };

package/dist/request-queue.d.mts

@@ -0,0 +1,31 @@
+import { AbstractAgent, RunAgentResult } from "@ag-ui/client";
+
+//#region src/request-queue.d.ts
+/**
+ * Queue for serializing MCP app requests to an agent.
+ * Ensures requests wait for the agent to stop running and are processed one at a time.
+ */
+declare class MCPAppsRequestQueue {
+  private queues;
+  private processing;
+  /**
+   * Add a request to the queue for a specific agent thread.
+   * Returns a promise that resolves when the request completes.
+   */
+  enqueue(agent: AbstractAgent, request: () => Promise<RunAgentResult>): Promise<RunAgentResult>;
+  /**
+   * Drain a thread's queue one request at a time, waiting for the agent to go
+   * idle before each. Re-entrant-safe (a single processor per thread) and drops
+   * the thread's map entries once fully drained to keep the shared queue bounded.
+   */
+  private processQueue;
+  /**
+   * Resolve once the agent is not running. Subscribes to run-finalized/failed and
+   * also polls as a fallback for reconnect scenarios where events do not fire.
+   */
+  private waitForAgentIdle;
+}
+declare const mcpAppsRequestQueue: MCPAppsRequestQueue;
+//#endregion
+export { MCPAppsRequestQueue, mcpAppsRequestQueue };
+//# sourceMappingURL=request-queue.d.mts.map

package/dist/request-queue.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-queue.d.mts","names":[],"sources":["../src/request-queue.ts"],"mappings":";;;;;AAMA;;cAAa,mBAAA;EAAA,QACH,MAAA;EAAA,QAQA,UAAA;EAQS;;;;EAFX,OAAA,CACJ,KAAA,EAAO,aAAA,EACP,OAAA,QAAe,OAAA,CAAQ,cAAA,IACtB,OAAA,CAAQ,cAAA;EAjBH;;;;;EAAA,QAyCM,YAAA;EAzBW;;;;EAAA,QA6EjB,gBAAA;AAAA;AAAA,cA8BG,mBAAA,EAAmB,mBAAA"}

package/dist/request-queue.mjs

@@ -0,0 +1,93 @@
+//#region src/request-queue.ts
+/**
+* Queue for serializing MCP app requests to an agent.
+* Ensures requests wait for the agent to stop running and are processed one at a time.
+*/
+var MCPAppsRequestQueue = class {
+	constructor() {
+		this.queues = /* @__PURE__ */ new Map();
+		this.processing = /* @__PURE__ */ new Map();
+	}
+	/**
+	* Add a request to the queue for a specific agent thread.
+	* Returns a promise that resolves when the request completes.
+	*/
+	async enqueue(agent, request) {
+		const threadId = agent.threadId || "default";
+		return new Promise((resolve, reject) => {
+			let queue = this.queues.get(threadId);
+			if (!queue) {
+				queue = [];
+				this.queues.set(threadId, queue);
+			}
+			queue.push({
+				execute: request,
+				resolve,
+				reject
+			});
+			this.processQueue(threadId, agent);
+		});
+	}
+	/**
+	* Drain a thread's queue one request at a time, waiting for the agent to go
+	* idle before each. Re-entrant-safe (a single processor per thread) and drops
+	* the thread's map entries once fully drained to keep the shared queue bounded.
+	*/
+	async processQueue(threadId, agent) {
+		if (this.processing.get(threadId)) return;
+		this.processing.set(threadId, true);
+		try {
+			const queue = this.queues.get(threadId);
+			if (!queue) return;
+			while (queue.length > 0) {
+				const item = queue[0];
+				try {
+					await this.waitForAgentIdle(agent);
+					const result = await item.execute();
+					item.resolve(result);
+				} catch (error) {
+					item.reject(error instanceof Error ? error : new Error(String(error)));
+				}
+				queue.shift();
+			}
+		} finally {
+			const queue = this.queues.get(threadId);
+			if (!queue || queue.length === 0) {
+				this.queues.delete(threadId);
+				this.processing.delete(threadId);
+			} else this.processing.set(threadId, false);
+		}
+	}
+	/**
+	* Resolve once the agent is not running. Subscribes to run-finalized/failed and
+	* also polls as a fallback for reconnect scenarios where events do not fire.
+	*/
+	waitForAgentIdle(agent) {
+		return new Promise((resolve) => {
+			if (!agent.isRunning) {
+				resolve();
+				return;
+			}
+			let done = false;
+			const finish = () => {
+				if (done) return;
+				done = true;
+				clearInterval(checkInterval);
+				sub.unsubscribe();
+				resolve();
+			};
+			const sub = agent.subscribe({
+				onRunFinalized: finish,
+				onRunFailed: finish
+			});
+			const checkInterval = setInterval(() => {
+				if (!agent.isRunning) finish();
+			}, 500);
+		});
+	}
+};
+const mcpAppsRequestQueue = new MCPAppsRequestQueue();
+
+//#endregion
+export { MCPAppsRequestQueue, mcpAppsRequestQueue };
+//# sourceMappingURL=request-queue.mjs.map

package/dist/request-queue.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-queue.mjs","names":[],"sources":["../src/request-queue.ts"],"sourcesContent":["import type { AbstractAgent, RunAgentResult } from \"@ag-ui/client\";\n\n/**\n * Queue for serializing MCP app requests to an agent.\n * Ensures requests wait for the agent to stop running and are processed one at a time.\n */\nexport class MCPAppsRequestQueue {\n  private queues = new Map<\n    string,\n    Array<{\n      execute: () => Promise<RunAgentResult>;\n      resolve: (result: RunAgentResult) => void;\n      reject: (error: Error) => void;\n    }>\n  >();\n  private processing = new Map<string, boolean>();\n\n  /**\n   * Add a request to the queue for a specific agent thread.\n   * Returns a promise that resolves when the request completes.\n   */\n  async enqueue(\n    agent: AbstractAgent,\n    request: () => Promise<RunAgentResult>,\n  ): Promise<RunAgentResult> {\n    const threadId = agent.threadId || \"default\";\n\n    return new Promise((resolve, reject) => {\n      // Get or create queue for this thread\n      let queue = this.queues.get(threadId);\n      if (!queue) {\n        queue = [];\n        this.queues.set(threadId, queue);\n      }\n\n      // Add request to queue\n      queue.push({ execute: request, resolve, reject });\n\n      // Start processing if not already running\n      this.processQueue(threadId, agent);\n    });\n  }\n\n  /**\n   * Drain a thread's queue one request at a time, waiting for the agent to go\n   * idle before each. Re-entrant-safe (a single processor per thread) and drops\n   * the thread's map entries once fully drained to keep the shared queue bounded.\n   */\n  private async processQueue(\n    threadId: string,\n    agent: AbstractAgent,\n  ): Promise<void> {\n    // If already processing this queue, return\n    if (this.processing.get(threadId)) {\n      return;\n    }\n\n    this.processing.set(threadId, true);\n\n    try {\n      const queue = this.queues.get(threadId);\n      if (!queue) return;\n\n      while (queue.length > 0) {\n        const item = queue[0]!;\n\n        try {\n          // Wait for any active run to complete before processing\n          await this.waitForAgentIdle(agent);\n\n          // Execute the request\n          const result = await item.execute();\n          item.resolve(result);\n        } catch (error) {\n          item.reject(\n            error instanceof Error ? error : new Error(String(error)),\n          );\n        }\n\n        // Remove processed item\n        queue.shift();\n      }\n    } finally {\n      // Drop the drained thread entries from both maps. `mcpAppsRequestQueue` is\n      // shared for the page lifetime, so retaining an entry per thread id would\n      // grow unbounded as threads come and go.\n      const queue = this.queues.get(threadId);\n      if (!queue || queue.length === 0) {\n        this.queues.delete(threadId);\n        this.processing.delete(threadId);\n      } else {\n        this.processing.set(threadId, false);\n      }\n    }\n  }\n\n  /**\n   * Resolve once the agent is not running. Subscribes to run-finalized/failed and\n   * also polls as a fallback for reconnect scenarios where events do not fire.\n   */\n  private waitForAgentIdle(agent: AbstractAgent): Promise<void> {\n    return new Promise((resolve) => {\n      if (!agent.isRunning) {\n        resolve();\n        return;\n      }\n\n      let done = false;\n      const finish = () => {\n        if (done) return;\n        done = true;\n        clearInterval(checkInterval);\n        sub.unsubscribe();\n        resolve();\n      };\n\n      const sub = agent.subscribe({\n        onRunFinalized: finish,\n        onRunFailed: finish,\n      });\n\n      // Fallback for reconnect scenarios where events don't fire\n      const checkInterval = setInterval(() => {\n        if (!agent.isRunning) finish();\n      }, 500);\n    });\n  }\n}\n\n// Shared per-thread queue instance for all MCP app requests.\nexport const mcpAppsRequestQueue = new MCPAppsRequestQueue();\n"],"mappings":";;;;;AAMA,IAAa,sBAAb,MAAiC;;gCACd,IAAI,KAOlB;oCACkB,IAAI,KAAsB;;;;;;CAM/C,MAAM,QACJ,OACA,SACyB;EACzB,MAAM,WAAW,MAAM,YAAY;AAEnC,SAAO,IAAI,SAAS,SAAS,WAAW;GAEtC,IAAI,QAAQ,KAAK,OAAO,IAAI,SAAS;AACrC,OAAI,CAAC,OAAO;AACV,YAAQ,EAAE;AACV,SAAK,OAAO,IAAI,UAAU,MAAM;;AAIlC,SAAM,KAAK;IAAE,SAAS;IAAS;IAAS;IAAQ,CAAC;AAGjD,QAAK,aAAa,UAAU,MAAM;IAClC;;;;;;;CAQJ,MAAc,aACZ,UACA,OACe;AAEf,MAAI,KAAK,WAAW,IAAI,SAAS,CAC/B;AAGF,OAAK,WAAW,IAAI,UAAU,KAAK;AAEnC,MAAI;GACF,MAAM,QAAQ,KAAK,OAAO,IAAI,SAAS;AACvC,OAAI,CAAC,MAAO;AAEZ,UAAO,MAAM,SAAS,GAAG;IACvB,MAAM,OAAO,MAAM;AAEnB,QAAI;AAEF,WAAM,KAAK,iBAAiB,MAAM;KAGlC,MAAM,SAAS,MAAM,KAAK,SAAS;AACnC,UAAK,QAAQ,OAAO;aACb,OAAO;AACd,UAAK,OACH,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,MAAM,CAAC,CAC1D;;AAIH,UAAM,OAAO;;YAEP;GAIR,MAAM,QAAQ,KAAK,OAAO,IAAI,SAAS;AACvC,OAAI,CAAC,SAAS,MAAM,WAAW,GAAG;AAChC,SAAK,OAAO,OAAO,SAAS;AAC5B,SAAK,WAAW,OAAO,SAAS;SAEhC,MAAK,WAAW,IAAI,UAAU,MAAM;;;;;;;CAS1C,AAAQ,iBAAiB,OAAqC;AAC5D,SAAO,IAAI,SAAS,YAAY;AAC9B,OAAI,CAAC,MAAM,WAAW;AACpB,aAAS;AACT;;GAGF,IAAI,OAAO;GACX,MAAM,eAAe;AACnB,QAAI,KAAM;AACV,WAAO;AACP,kBAAc,cAAc;AAC5B,QAAI,aAAa;AACjB,aAAS;;GAGX,MAAM,MAAM,MAAM,UAAU;IAC1B,gBAAgB;IAChB,aAAa;IACd,CAAC;GAGF,MAAM,gBAAgB,kBAAkB;AACtC,QAAI,CAAC,MAAM,UAAW,SAAQ;MAC7B,IAAI;IACP;;;AAKN,MAAa,sBAAsB,IAAI,qBAAqB"}

package/dist/sandbox.d.mts

@@ -0,0 +1,16 @@
+//#region src/sandbox.d.ts
+/**
+ * Build the sandbox-proxy HTML document loaded into the outer iframe.
+ *
+ * The proxy relays postMessage between the host and the inner sandboxed widget
+ * and announces `ui/notifications/sandbox-proxy-ready` once ready. `extraCspDomains`
+ * (from the resource's `_meta.ui.csp`) are appended to the `script-src`/`frame-src`
+ * CSP directives so a widget can load its own approved origins.
+ *
+ * @param extraCspDomains Optional additional origins allowed by the sandbox CSP.
+ * @returns The complete sandbox-proxy HTML document as a string.
+ */
+declare function buildSandboxHTML(extraCspDomains?: string[]): string;
+//#endregion
+export { buildSandboxHTML };
+//# sourceMappingURL=sandbox.d.mts.map

package/dist/sandbox.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.mts","names":[],"sources":["../src/sandbox.ts"],"mappings":";;AAWA;;;;;;;;;;iBAAgB,gBAAA,CAAiB,eAAA"}

package/dist/sandbox.mjs

@@ -0,0 +1,52 @@
+//#region src/sandbox.ts
+/**
+* Build the sandbox-proxy HTML document loaded into the outer iframe.
+*
+* The proxy relays postMessage between the host and the inner sandboxed widget
+* and announces `ui/notifications/sandbox-proxy-ready` once ready. `extraCspDomains`
+* (from the resource's `_meta.ui.csp`) are appended to the `script-src`/`frame-src`
+* CSP directives so a widget can load its own approved origins.
+*
+* @param extraCspDomains Optional additional origins allowed by the sandbox CSP.
+* @returns The complete sandbox-proxy HTML document as a string.
+*/
+function buildSandboxHTML(extraCspDomains) {
+	const baseScriptSrc = "'self' 'wasm-unsafe-eval' 'unsafe-inline' 'unsafe-eval' blob: data: http://localhost:* https://localhost:*";
+	const baseFrameSrc = "* blob: data: http://localhost:* https://localhost:*";
+	const extra = extraCspDomains?.length ? " " + extraCspDomains.join(" ") : "";
+	return `<!doctype html>
+<html>
+<head>
+<meta charset="utf-8" />
+<meta http-equiv="Content-Security-Policy" content="default-src 'self'; img-src * data: blob: 'unsafe-inline'; media-src * blob: data:; font-src * blob: data:; script-src ${baseScriptSrc + extra}; style-src * blob: data: 'unsafe-inline'; connect-src *; frame-src ${baseFrameSrc + extra}; base-uri 'self';" />
+<style>html,body{margin:0;padding:0;height:100%;width:100%;overflow:hidden}*{box-sizing:border-box}iframe{background-color:transparent;border:none;padding:0;overflow:hidden;width:100%;height:100%}</style>
+</head>
+<body>
+<script>
+if(window.self===window.top){throw new Error("This file must be used in an iframe.")}
+const inner=document.createElement("iframe");
+inner.style="width:100%;height:100%;border:none;";
+inner.setAttribute("sandbox","allow-scripts allow-same-origin allow-forms");
+document.body.appendChild(inner);
+window.addEventListener("message",async(event)=>{
+if(event.source===window.parent){
+if(event.data&&event.data.method==="ui/notifications/sandbox-resource-ready"){
+const{html,sandbox}=event.data.params;
+if(typeof sandbox==="string")inner.setAttribute("sandbox",sandbox);
+if(typeof html==="string")inner.srcdoc=html;
+}else if(inner&&inner.contentWindow){
+inner.contentWindow.postMessage(event.data,"*");
+}
+}else if(event.source===inner.contentWindow){
+window.parent.postMessage(event.data,"*");
+}
+});
+window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/sandbox-proxy-ready",params:{}},"*");
+<\/script>
+</body>
+</html>`;
+}
+
+//#endregion
+export { buildSandboxHTML };
+//# sourceMappingURL=sandbox.mjs.map

package/dist/sandbox.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.mjs","names":[],"sources":["../src/sandbox.ts"],"sourcesContent":["/**\n * Build the sandbox-proxy HTML document loaded into the outer iframe.\n *\n * The proxy relays postMessage between the host and the inner sandboxed widget\n * and announces `ui/notifications/sandbox-proxy-ready` once ready. `extraCspDomains`\n * (from the resource's `_meta.ui.csp`) are appended to the `script-src`/`frame-src`\n * CSP directives so a widget can load its own approved origins.\n *\n * @param extraCspDomains Optional additional origins allowed by the sandbox CSP.\n * @returns The complete sandbox-proxy HTML document as a string.\n */\nexport function buildSandboxHTML(extraCspDomains?: string[]): string {\n  const baseScriptSrc =\n    \"'self' 'wasm-unsafe-eval' 'unsafe-inline' 'unsafe-eval' blob: data: http://localhost:* https://localhost:*\";\n  const baseFrameSrc = \"* blob: data: http://localhost:* https://localhost:*\";\n  const extra = extraCspDomains?.length ? \" \" + extraCspDomains.join(\" \") : \"\";\n  const scriptSrc = baseScriptSrc + extra;\n  const frameSrc = baseFrameSrc + extra;\n\n  return `<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\" />\n<meta http-equiv=\"Content-Security-Policy\" content=\"default-src 'self'; img-src * data: blob: 'unsafe-inline'; media-src * blob: data:; font-src * blob: data:; script-src ${scriptSrc}; style-src * blob: data: 'unsafe-inline'; connect-src *; frame-src ${frameSrc}; base-uri 'self';\" />\n<style>html,body{margin:0;padding:0;height:100%;width:100%;overflow:hidden}*{box-sizing:border-box}iframe{background-color:transparent;border:none;padding:0;overflow:hidden;width:100%;height:100%}</style>\n</head>\n<body>\n<script>\nif(window.self===window.top){throw new Error(\"This file must be used in an iframe.\")}\nconst inner=document.createElement(\"iframe\");\ninner.style=\"width:100%;height:100%;border:none;\";\ninner.setAttribute(\"sandbox\",\"allow-scripts allow-same-origin allow-forms\");\ndocument.body.appendChild(inner);\nwindow.addEventListener(\"message\",async(event)=>{\nif(event.source===window.parent){\nif(event.data&&event.data.method===\"ui/notifications/sandbox-resource-ready\"){\nconst{html,sandbox}=event.data.params;\nif(typeof sandbox===\"string\")inner.setAttribute(\"sandbox\",sandbox);\nif(typeof html===\"string\")inner.srcdoc=html;\n}else if(inner&&inner.contentWindow){\ninner.contentWindow.postMessage(event.data,\"*\");\n}\n}else if(event.source===inner.contentWindow){\nwindow.parent.postMessage(event.data,\"*\");\n}\n});\nwindow.parent.postMessage({jsonrpc:\"2.0\",method:\"ui/notifications/sandbox-proxy-ready\",params:{}},\"*\");\n</script>\n</body>\n</html>`;\n}\n"],"mappings":";;;;;;;;;;;;AAWA,SAAgB,iBAAiB,iBAAoC;CACnE,MAAM,gBACJ;CACF,MAAM,eAAe;CACrB,MAAM,QAAQ,iBAAiB,SAAS,MAAM,gBAAgB,KAAK,IAAI,GAAG;AAI1E,QAAO;;;;6KAHW,gBAAgB,MAOmJ,sEANpK,eAAe,MAMoO"}

package/dist/session.d.mts

@@ -0,0 +1,81 @@
+import { MCPAppsActivityContent } from "./content-schema.mjs";
+import { ɵMcpFollowUpHost } from "./follow-up.mjs";
+import { AbstractAgent } from "@ag-ui/client";
+import { CallToolResult } from "@modelcontextprotocol/sdk/types.js";
+
+//#region src/session.d.ts
+/**
+ * The MCP Apps protocol version this host negotiates. Sourced directly from the
+ * ext-apps bridge (single source of truth, no hand-maintained literal). It lives
+ * here (a bridge-side module) rather than in the bridge-free `./constants` /
+ * `./activity` entry so the lightweight activity-registration surface stays free
+ * of the ext-apps bundle; consumers that need the version import it from the
+ * package root, which already loads the bridge.
+ */
+declare const MCP_APPS_PROTOCOL_VERSION = "2026-01-26";
+/** A resource fetched from the MCP server via the agent proxy. */
+interface FetchedResource {
+  uri: string;
+  mimeType?: string;
+  text?: string;
+  blob?: string;
+  _meta?: {
+    ui?: {
+      prefersBorder?: boolean;
+      csp?: {
+        connectDomains?: string[];
+        resourceDomains?: string[];
+      };
+    };
+  };
+}
+/** Reactive callbacks the framework adapter wires to its own state. */
+interface McpAppSessionHooks {
+  /** The widget reported a new content size (ui/notifications/size-changed). */
+  onSizeChanged?(size: {
+    width?: number;
+    height?: number;
+  }): void;
+  /** The widget finished initializing (safe to push tool input/result). */
+  onInitialized?(): void;
+  /** The fetched resource metadata (e.g. prefersBorder) is available. */
+  onResource?(resource: FetchedResource): void;
+  /** Setup failed (resource fetch, connect, ...). */
+  onError?(err: Error): void;
+}
+interface BindMcpAppOptions {
+  /**
+   * The sandbox iframe. The adapter creates and OWNS this element (mounts it in
+   * its render model, sizes it, removes it on unmount). The session only
+   * configures the sandbox contract (sandbox attr, testid, srcdoc) and talks to
+   * it through the bridge - it never creates, moves, or removes the iframe.
+   */
+  iframe: HTMLIFrameElement;
+  /** Returns the current activity content (resourceUri, serverHash, tool input/result). */
+  getContent: () => MCPAppsActivityContent;
+  /** Returns the current agent (may change across renders). */
+  getAgent: () => AbstractAgent | undefined;
+  /** CopilotKit host, for ui/message follow-up runs (issue #5819). */
+  host: ɵMcpFollowUpHost;
+  hooks?: McpAppSessionHooks;
+}
+interface McpAppSession {
+  /** Forward the tool call input to the widget (host -> app). Buffered until ready. */
+  sendToolInput(args: Record<string, unknown>): void;
+  /** Forward the tool result to the widget (host -> app). Buffered until ready. */
+  sendToolResult(result: CallToolResult): void;
+  /** Disconnect the bridge and release listeners. Does NOT remove the iframe. */
+  teardown(): void;
+}
+/**
+ * Bind an MCP App to a host-provided sandbox iframe: fetch the widget resource
+ * through the agent, connect the ext-apps `AppBridge` over a PostMessage
+ * transport, and wire the app<->host protocol (ui/message, ui/open-link,
+ * tools/call + resources/read proxy, size, host context). Framework-agnostic:
+ * the React/Vue/Angular renderers create the iframe and wire reactive state via
+ * `hooks`, but all protocol logic lives here.
+ */
+declare function bindMcpApp(opts: BindMcpAppOptions): McpAppSession;
+//#endregion
+export { BindMcpAppOptions, FetchedResource, MCP_APPS_PROTOCOL_VERSION, McpAppSession, McpAppSessionHooks, bindMcpApp };
+//# sourceMappingURL=session.d.mts.map

package/dist/session.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.mts","names":[],"sources":["../src/session.ts"],"mappings":";;;;;;;;AAwBA;;;;;AA0BA;cA1Ba,yBAAA;;UA0BI,eAAA;EACf,GAAA;EACA,QAAA;EACA,IAAA;EACA,IAAA;EACA,KAAA;IACE,EAAA;MACE,aAAA;MACA,GAAA;QACE,cAAA;QACA,eAAA;MAAA;IAAA;EAAA;AAAA;;UAOS,kBAAA;EAEf;EAAA,aAAA,EAAe,IAAA;IAAQ,KAAA;IAAgB,MAAA;EAAA;EAIvC;EAFA,aAAA;EAEY;EAAZ,UAAA,EAAY,QAAA,EAAU,eAAA;EAER;EAAd,OAAA,EAAS,GAAA,EAAK,KAAA;AAAA;AAAA,UAGC,iBAAA;EAAA;;;;;;EAOf,MAAA,EAAQ,iBAAA;EAOA;EALR,UAAA,QAAkB,sBAAA;EAKQ;EAH1B,QAAA,QAAgB,aAAA;EAJR;EAMR,IAAA,EAAM,gBAAA;EACN,KAAA,GAAQ,kBAAA;AAAA;AAAA,UAGO,aAAA;EAJf;EAMA,aAAA,CAAc,IAAA,EAAM,MAAA;EALpB;EAOA,cAAA,CAAe,MAAA,EAAQ,cAAA;EAPG;EAS1B,QAAA;AAAA;;;;;;;;;iBAWc,UAAA,CAAW,IAAA,EAAM,iBAAA,GAAoB,aAAA"}

package/dist/session.mjs

@@ -0,0 +1,221 @@
+import { MCP_OPEN_LINK_BLOCKED_SCHEMES } from "./constants.mjs";
+import { buildSandboxHTML } from "./sandbox.mjs";
+import { mcpAppsRequestQueue } from "./request-queue.mjs";
+import { ɵrunMcpFollowUp } from "./follow-up.mjs";
+import { z } from "zod";
+import { AppBridge, LATEST_PROTOCOL_VERSION, PostMessageTransport } from "@modelcontextprotocol/ext-apps/app-bridge";
+import { randomUUID } from "@copilotkit/shared";
+
+//#region src/session.ts
+/**
+* The MCP Apps protocol version this host negotiates. Sourced directly from the
+* ext-apps bridge (single source of truth, no hand-maintained literal). It lives
+* here (a bridge-side module) rather than in the bridge-free `./constants` /
+* `./activity` entry so the lightweight activity-registration surface stays free
+* of the ext-apps bundle; consumers that need the version import it from the
+* package root, which already loads the bridge.
+*/
+const MCP_APPS_PROTOCOL_VERSION = LATEST_PROTOCOL_VERSION;
+/**
+* Permissive `ui/message` schema. ext-apps restricts the request to
+* `role: "user"` with no `followUp`, but CopilotKit intentionally extends
+* `ui/message` with `role` ("user" | "assistant") and `followUp` (documented
+* behavior with dedicated tests). We register our own handler (instead of the
+* bridge's strict `onmessage`) so those extensions survive.
+*
+* Going forward, widgets SHOULD pass the extensions under
+* `params._meta.copilotkit`; the top-level `role`/`followUp` fields are the
+* legacy channel, kept for backward compatibility and slated for deprecation.
+*/
+const CopilotKitUiMessageSchema = z.object({
+	method: z.literal("ui/message"),
+	params: z.object({
+		role: z.string().optional(),
+		content: z.array(z.any()).optional(),
+		followUp: z.boolean().optional(),
+		_meta: z.record(z.string(), z.any()).optional()
+	}).passthrough()
+});
+/**
+* Bind an MCP App to a host-provided sandbox iframe: fetch the widget resource
+* through the agent, connect the ext-apps `AppBridge` over a PostMessage
+* transport, and wire the app<->host protocol (ui/message, ui/open-link,
+* tools/call + resources/read proxy, size, host context). Framework-agnostic:
+* the React/Vue/Angular renderers create the iframe and wire reactive state via
+* `hooks`, but all protocol logic lives here.
+*/
+function bindMcpApp(opts) {
+	const { iframe, getContent, getAgent, host, hooks } = opts;
+	let disposed = false;
+	let ready = false;
+	let bridge = null;
+	let pendingToolInput;
+	let pendingToolResult;
+	/** Flush any buffered tool input/result to the widget once it is initialized. */
+	const flushPending = () => {
+		if (!ready || !bridge) return;
+		if (pendingToolInput !== void 0) {
+			bridge.sendToolInput({ arguments: pendingToolInput });
+			pendingToolInput = void 0;
+		}
+		if (pendingToolResult !== void 0) {
+			bridge.sendToolResult(pendingToolResult);
+			pendingToolResult = void 0;
+		}
+	};
+	/** Fetch the widget resource (`resources/read`) through the agent proxy queue. */
+	const fetchResource = async () => {
+		const agent = getAgent();
+		if (!agent) throw new Error("No agent available to fetch resource");
+		const { resourceUri, serverHash, serverId } = getContent();
+		const resource = (await mcpAppsRequestQueue.enqueue(agent, () => agent.runAgent({ forwardedProps: { __proxiedMCPRequest: {
+			serverHash,
+			serverId,
+			method: "resources/read",
+			params: { uri: resourceUri }
+		} } }))).result?.contents?.[0];
+		if (!resource) throw new Error("No resource content in response");
+		return resource;
+	};
+	/**
+	* Fetch the resource, configure + load the sandbox iframe, construct the
+	* AppBridge, wire the app->host handlers, and connect the transport.
+	*/
+	const setup = async () => {
+		try {
+			const resource = await fetchResource();
+			if (disposed) return;
+			hooks?.onResource?.(resource);
+			iframe.setAttribute("sandbox", "allow-scripts allow-same-origin allow-forms");
+			iframe.setAttribute("data-testid", "mcp-app-iframe");
+			iframe.setAttribute("title", "Interactive MCP application");
+			const cspDomains = resource._meta?.ui?.csp?.resourceDomains;
+			iframe.srcdoc = buildSandboxHTML(cspDomains);
+			const win = iframe.contentWindow;
+			if (!win) throw new Error("Sandbox iframe has no contentWindow");
+			let html;
+			if (resource.text) html = resource.text;
+			else if (resource.blob) html = atob(resource.blob);
+			else throw new Error("Resource has no text or blob content");
+			bridge = new AppBridge(null, {
+				name: "CopilotKit MCP Apps Host",
+				version: "1.0.0"
+			}, {
+				openLinks: {},
+				logging: {},
+				message: { text: {} }
+			}, { hostContext: {
+				theme: "light",
+				platform: "web"
+			} });
+			bridge.onsandboxready = () => {
+				bridge?.sendSandboxResourceReady({ html });
+			};
+			bridge.setRequestHandler(CopilotKitUiMessageSchema, async (req) => {
+				const currentAgent = getAgent();
+				if (!currentAgent) {
+					console.warn("[MCPAppsRenderer] ui/message: No agent available");
+					return { isError: false };
+				}
+				try {
+					const params = req.params;
+					const ck = params._meta?.copilotkit ?? {};
+					const role = ck.role || params.role || "user";
+					const textContent = params.content?.filter((c) => c.type === "text" && c.text).map((c) => c.text).join("\n") || "";
+					if (textContent) currentAgent.addMessage({
+						id: randomUUID(),
+						role,
+						content: textContent
+					});
+					if ((ck.followUp ?? params.followUp ?? role === "user") && textContent) {
+						const capturedThreadId = currentAgent.threadId || "default";
+						mcpAppsRequestQueue.enqueue(currentAgent, () => ɵrunMcpFollowUp({
+							host,
+							agent: currentAgent,
+							capturedThreadId
+						})).catch((err) => console.error("[MCPAppsRenderer] ui/message agent run failed:", err));
+					}
+					return { isError: false };
+				} catch (err) {
+					console.error("[MCPAppsRenderer] ui/message error:", err);
+					return { isError: true };
+				}
+			});
+			bridge.onopenlink = async ({ url }) => {
+				let parsed;
+				try {
+					parsed = new URL(url);
+				} catch {
+					console.warn("[MCPAppsRenderer] ui/open-link rejected: unparseable url");
+					return { isError: true };
+				}
+				if (MCP_OPEN_LINK_BLOCKED_SCHEMES.has(parsed.protocol)) {
+					console.warn("[MCPAppsRenderer] ui/open-link rejected: blocked scheme", parsed.protocol);
+					return { isError: true };
+				}
+				window.open(url, "_blank", "noopener,noreferrer");
+				return { isError: false };
+			};
+			bridge.oncalltool = async (params) => {
+				const { serverHash, serverId } = getContent();
+				const currentAgent = getAgent();
+				if (!serverHash) throw new Error("No server hash available for proxying");
+				if (!currentAgent) throw new Error("No agent available for proxying");
+				return (await mcpAppsRequestQueue.enqueue(currentAgent, () => currentAgent.runAgent({ forwardedProps: { __proxiedMCPRequest: {
+					serverHash,
+					serverId,
+					method: "tools/call",
+					params
+				} } }))).result || { content: [] };
+			};
+			bridge.onsizechange = (p) => {
+				if (disposed) return;
+				const { width, height } = p || {};
+				hooks?.onSizeChanged?.({
+					width: typeof width === "number" ? width : void 0,
+					height: typeof height === "number" ? height : void 0
+				});
+			};
+			bridge.oninitialized = () => {
+				if (disposed) return;
+				ready = true;
+				hooks?.onInitialized?.();
+				flushPending();
+			};
+			bridge.onloggingmessage = (p) => {
+				console.log("[MCPAppsRenderer] App log:", p);
+			};
+			const transport = new PostMessageTransport(win, win);
+			await bridge.connect(transport);
+			if (disposed) {
+				await bridge.close();
+				bridge = null;
+				return;
+			}
+		} catch (err) {
+			console.error("[MCPAppsRenderer] Setup error:", err);
+			if (!disposed) hooks?.onError?.(err instanceof Error ? err : new Error(String(err)));
+		}
+	};
+	setup();
+	return {
+		sendToolInput(args) {
+			pendingToolInput = args;
+			flushPending();
+		},
+		sendToolResult(result) {
+			pendingToolResult = result;
+			flushPending();
+		},
+		teardown() {
+			disposed = true;
+			const b = bridge;
+			bridge = null;
+			b?.close();
+		}
+	};
+}
+
+//#endregion
+export { MCP_APPS_PROTOCOL_VERSION, bindMcpApp };
+//# sourceMappingURL=session.mjs.map

package/dist/session.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.mjs","names":[],"sources":["../src/session.ts"],"sourcesContent":["import {\n  AppBridge,\n  LATEST_PROTOCOL_VERSION,\n  PostMessageTransport,\n} from \"@modelcontextprotocol/ext-apps/app-bridge\";\nimport type { AbstractAgent } from \"@ag-ui/client\";\nimport type { CallToolResult } from \"@modelcontextprotocol/sdk/types.js\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"@copilotkit/shared\";\nimport { buildSandboxHTML } from \"./sandbox\";\nimport { mcpAppsRequestQueue } from \"./request-queue\";\nimport { ɵrunMcpFollowUp } from \"./follow-up\";\nimport type { ɵMcpFollowUpHost } from \"./follow-up\";\nimport { MCP_OPEN_LINK_BLOCKED_SCHEMES } from \"./constants\";\nimport type { MCPAppsActivityContent } from \"./content-schema\";\n\n/**\n * The MCP Apps protocol version this host negotiates. Sourced directly from the\n * ext-apps bridge (single source of truth, no hand-maintained literal). It lives\n * here (a bridge-side module) rather than in the bridge-free `./constants` /\n * `./activity` entry so the lightweight activity-registration surface stays free\n * of the ext-apps bundle; consumers that need the version import it from the\n * package root, which already loads the bridge.\n */\nexport const MCP_APPS_PROTOCOL_VERSION = LATEST_PROTOCOL_VERSION;\n\n/**\n * Permissive `ui/message` schema. ext-apps restricts the request to\n * `role: \"user\"` with no `followUp`, but CopilotKit intentionally extends\n * `ui/message` with `role` (\"user\" | \"assistant\") and `followUp` (documented\n * behavior with dedicated tests). We register our own handler (instead of the\n * bridge's strict `onmessage`) so those extensions survive.\n *\n * Going forward, widgets SHOULD pass the extensions under\n * `params._meta.copilotkit`; the top-level `role`/`followUp` fields are the\n * legacy channel, kept for backward compatibility and slated for deprecation.\n */\nconst CopilotKitUiMessageSchema = z.object({\n  method: z.literal(\"ui/message\"),\n  params: z\n    .object({\n      role: z.string().optional(),\n      content: z.array(z.any()).optional(),\n      followUp: z.boolean().optional(),\n      _meta: z.record(z.string(), z.any()).optional(),\n    })\n    .passthrough(),\n});\n\n/** A resource fetched from the MCP server via the agent proxy. */\nexport interface FetchedResource {\n  uri: string;\n  mimeType?: string;\n  text?: string;\n  blob?: string;\n  _meta?: {\n    ui?: {\n      prefersBorder?: boolean;\n      csp?: {\n        connectDomains?: string[];\n        resourceDomains?: string[];\n      };\n    };\n  };\n}\n\n/** Reactive callbacks the framework adapter wires to its own state. */\nexport interface McpAppSessionHooks {\n  /** The widget reported a new content size (ui/notifications/size-changed). */\n  onSizeChanged?(size: { width?: number; height?: number }): void;\n  /** The widget finished initializing (safe to push tool input/result). */\n  onInitialized?(): void;\n  /** The fetched resource metadata (e.g. prefersBorder) is available. */\n  onResource?(resource: FetchedResource): void;\n  /** Setup failed (resource fetch, connect, ...). */\n  onError?(err: Error): void;\n}\n\nexport interface BindMcpAppOptions {\n  /**\n   * The sandbox iframe. The adapter creates and OWNS this element (mounts it in\n   * its render model, sizes it, removes it on unmount). The session only\n   * configures the sandbox contract (sandbox attr, testid, srcdoc) and talks to\n   * it through the bridge - it never creates, moves, or removes the iframe.\n   */\n  iframe: HTMLIFrameElement;\n  /** Returns the current activity content (resourceUri, serverHash, tool input/result). */\n  getContent: () => MCPAppsActivityContent;\n  /** Returns the current agent (may change across renders). */\n  getAgent: () => AbstractAgent | undefined;\n  /** CopilotKit host, for ui/message follow-up runs (issue #5819). */\n  host: ɵMcpFollowUpHost;\n  hooks?: McpAppSessionHooks;\n}\n\nexport interface McpAppSession {\n  /** Forward the tool call input to the widget (host -> app). Buffered until ready. */\n  sendToolInput(args: Record<string, unknown>): void;\n  /** Forward the tool result to the widget (host -> app). Buffered until ready. */\n  sendToolResult(result: CallToolResult): void;\n  /** Disconnect the bridge and release listeners. Does NOT remove the iframe. */\n  teardown(): void;\n}\n\n/**\n * Bind an MCP App to a host-provided sandbox iframe: fetch the widget resource\n * through the agent, connect the ext-apps `AppBridge` over a PostMessage\n * transport, and wire the app<->host protocol (ui/message, ui/open-link,\n * tools/call + resources/read proxy, size, host context). Framework-agnostic:\n * the React/Vue/Angular renderers create the iframe and wire reactive state via\n * `hooks`, but all protocol logic lives here.\n */\nexport function bindMcpApp(opts: BindMcpAppOptions): McpAppSession {\n  const { iframe, getContent, getAgent, host, hooks } = opts;\n\n  let disposed = false;\n  let ready = false;\n  let bridge: AppBridge | null = null;\n  let pendingToolInput: Record<string, unknown> | undefined;\n  let pendingToolResult: CallToolResult | undefined;\n\n  /** Flush any buffered tool input/result to the widget once it is initialized. */\n  const flushPending = () => {\n    if (!ready || !bridge) return;\n    if (pendingToolInput !== undefined) {\n      void bridge.sendToolInput({ arguments: pendingToolInput });\n      pendingToolInput = undefined;\n    }\n    if (pendingToolResult !== undefined) {\n      void bridge.sendToolResult(pendingToolResult);\n      pendingToolResult = undefined;\n    }\n  };\n\n  /** Fetch the widget resource (`resources/read`) through the agent proxy queue. */\n  const fetchResource = async (): Promise<FetchedResource> => {\n    const agent = getAgent();\n    if (!agent) {\n      throw new Error(\"No agent available to fetch resource\");\n    }\n    const { resourceUri, serverHash, serverId } = getContent();\n    const runResult = await mcpAppsRequestQueue.enqueue(agent, () =>\n      agent.runAgent({\n        forwardedProps: {\n          __proxiedMCPRequest: {\n            serverHash,\n            serverId,\n            method: \"resources/read\",\n            params: { uri: resourceUri },\n          },\n        },\n      }),\n    );\n    const resultData = runResult.result as\n      | { contents?: FetchedResource[] }\n      | undefined;\n    const resource = resultData?.contents?.[0];\n    if (!resource) {\n      throw new Error(\"No resource content in response\");\n    }\n    return resource;\n  };\n\n  /**\n   * Fetch the resource, configure + load the sandbox iframe, construct the\n   * AppBridge, wire the app->host handlers, and connect the transport.\n   */\n  const setup = async () => {\n    try {\n      const resource = await fetchResource();\n      if (disposed) return;\n      hooks?.onResource?.(resource);\n\n      // Configure the sandbox iframe (contract shared across frontends).\n      iframe.setAttribute(\n        \"sandbox\",\n        \"allow-scripts allow-same-origin allow-forms\",\n      );\n      // Cross-frontend MCP-apps surface contract: every frontend must expose the\n      // sandbox iframe under the SAME testid so one shared probe (harness\n      // `d5-mcp-apps`) and one shared e2e spec can assert the surface mounted\n      // without per-frontend selectors.\n      iframe.setAttribute(\"data-testid\", \"mcp-app-iframe\");\n      iframe.setAttribute(\"title\", \"Interactive MCP application\");\n\n      const cspDomains = resource._meta?.ui?.csp?.resourceDomains;\n      iframe.srcdoc = buildSandboxHTML(cspDomains);\n\n      const win = iframe.contentWindow;\n      if (!win) {\n        throw new Error(\"Sandbox iframe has no contentWindow\");\n      }\n\n      let html: string;\n      if (resource.text) {\n        html = resource.text;\n      } else if (resource.blob) {\n        html = atob(resource.blob);\n      } else {\n        throw new Error(\"Resource has no text or blob content\");\n      }\n\n      bridge = new AppBridge(\n        null,\n        { name: \"CopilotKit MCP Apps Host\", version: \"1.0.0\" },\n        { openLinks: {}, logging: {}, message: { text: {} } },\n        // Seed the host context at construction so it is already in place when\n        // the widget's ui/initialize is handled (deterministic, not a race).\n        { hostContext: { theme: \"light\", platform: \"web\" } },\n      );\n\n      // Sandbox handshake: on proxy ready, load the widget HTML into the inner\n      // sandboxed iframe.\n      bridge.onsandboxready = () => {\n        void bridge?.sendSandboxResourceReady({ html });\n      };\n\n      // --- App -> host requests ---\n      // ui/message: custom handler preserving CopilotKit role/followUp extensions\n      // (via _meta.copilotkit first, then legacy top-level fields).\n      bridge.setRequestHandler(CopilotKitUiMessageSchema, async (req) => {\n        const currentAgent = getAgent();\n        if (!currentAgent) {\n          console.warn(\"[MCPAppsRenderer] ui/message: No agent available\");\n          return { isError: false };\n        }\n        try {\n          const params = req.params;\n          const ck = (params._meta?.copilotkit ?? {}) as {\n            role?: string;\n            followUp?: boolean;\n          };\n          const role =\n            (ck.role as \"user\" | \"assistant\") ||\n            (params.role as \"user\" | \"assistant\") ||\n            \"user\";\n          const textContent =\n            (\n              params.content as\n                | Array<{ type: string; text?: string }>\n                | undefined\n            )\n              ?.filter((c) => c.type === \"text\" && c.text)\n              .map((c) => c.text)\n              .join(\"\\n\") || \"\";\n          if (textContent) {\n            currentAgent.addMessage({\n              id: randomUUID(),\n              role,\n              content: textContent,\n            });\n          }\n          const followUp = ck.followUp ?? params.followUp;\n          const shouldFollowUp = followUp ?? role === \"user\";\n          if (shouldFollowUp && textContent) {\n            const capturedThreadId = currentAgent.threadId || \"default\";\n            mcpAppsRequestQueue\n              .enqueue(currentAgent, () =>\n                ɵrunMcpFollowUp({\n                  host,\n                  agent: currentAgent,\n                  capturedThreadId,\n                }),\n              )\n              .catch((err) =>\n                console.error(\n                  \"[MCPAppsRenderer] ui/message agent run failed:\",\n                  err,\n                ),\n              );\n          }\n          return { isError: false };\n        } catch (err) {\n          console.error(\"[MCPAppsRenderer] ui/message error:\", err);\n          return { isError: true };\n        }\n      });\n\n      bridge.onopenlink = async ({ url }) => {\n        // The bridge validates `url` as a string but not the scheme. Block only\n        // the script-executing / attacker-HTML schemes; everything else\n        // (https universal links, custom-scheme deep links) is allowed.\n        let parsed: URL;\n        try {\n          parsed = new URL(url);\n        } catch {\n          console.warn(\n            \"[MCPAppsRenderer] ui/open-link rejected: unparseable url\",\n          );\n          return { isError: true };\n        }\n        if (MCP_OPEN_LINK_BLOCKED_SCHEMES.has(parsed.protocol)) {\n          console.warn(\n            \"[MCPAppsRenderer] ui/open-link rejected: blocked scheme\",\n            parsed.protocol,\n          );\n          return { isError: true };\n        }\n        window.open(url, \"_blank\", \"noopener,noreferrer\");\n        return { isError: false };\n      };\n\n      bridge.oncalltool = async (params) => {\n        const { serverHash, serverId } = getContent();\n        const currentAgent = getAgent();\n        if (!serverHash) {\n          throw new Error(\"No server hash available for proxying\");\n        }\n        if (!currentAgent) {\n          throw new Error(\"No agent available for proxying\");\n        }\n        const runResult = await mcpAppsRequestQueue.enqueue(currentAgent, () =>\n          currentAgent.runAgent({\n            forwardedProps: {\n              __proxiedMCPRequest: {\n                serverHash,\n                serverId,\n                method: \"tools/call\",\n                params,\n              },\n            },\n          }),\n        );\n        return (runResult.result as CallToolResult) || { content: [] };\n      };\n\n      // --- App -> host notifications ---\n      bridge.onsizechange = (p) => {\n        if (disposed) return;\n        const { width, height } = (p || {}) as {\n          width?: number;\n          height?: number;\n        };\n        hooks?.onSizeChanged?.({\n          width: typeof width === \"number\" ? width : undefined,\n          height: typeof height === \"number\" ? height : undefined,\n        });\n      };\n      bridge.oninitialized = () => {\n        if (disposed) return;\n        ready = true;\n        hooks?.onInitialized?.();\n        flushPending();\n      };\n      bridge.onloggingmessage = (p) => {\n        console.log(\"[MCPAppsRenderer] App log:\", p);\n      };\n\n      const transport = new PostMessageTransport(win, win);\n      await bridge.connect(transport);\n      if (disposed) {\n        await bridge.close();\n        bridge = null;\n        return;\n      }\n    } catch (err) {\n      console.error(\"[MCPAppsRenderer] Setup error:\", err);\n      if (!disposed) {\n        hooks?.onError?.(err instanceof Error ? err : new Error(String(err)));\n      }\n    }\n  };\n\n  void setup();\n\n  return {\n    sendToolInput(args) {\n      pendingToolInput = args;\n      flushPending();\n    },\n    sendToolResult(result) {\n      pendingToolResult = result;\n      flushPending();\n    },\n    teardown() {\n      disposed = true;\n      const b = bridge;\n      bridge = null;\n      void b?.close();\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAwBA,MAAa,4BAA4B;;;;;;;;;;;;AAazC,MAAM,4BAA4B,EAAE,OAAO;CACzC,QAAQ,EAAE,QAAQ,aAAa;CAC/B,QAAQ,EACL,OAAO;EACN,MAAM,EAAE,QAAQ,CAAC,UAAU;EAC3B,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,UAAU;EACpC,UAAU,EAAE,SAAS,CAAC,UAAU;EAChC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,UAAU;EAChD,CAAC,CACD,aAAa;CACjB,CAAC;;;;;;;;;AAiEF,SAAgB,WAAW,MAAwC;CACjE,MAAM,EAAE,QAAQ,YAAY,UAAU,MAAM,UAAU;CAEtD,IAAI,WAAW;CACf,IAAI,QAAQ;CACZ,IAAI,SAA2B;CAC/B,IAAI;CACJ,IAAI;;CAGJ,MAAM,qBAAqB;AACzB,MAAI,CAAC,SAAS,CAAC,OAAQ;AACvB,MAAI,qBAAqB,QAAW;AAClC,GAAK,OAAO,cAAc,EAAE,WAAW,kBAAkB,CAAC;AAC1D,sBAAmB;;AAErB,MAAI,sBAAsB,QAAW;AACnC,GAAK,OAAO,eAAe,kBAAkB;AAC7C,uBAAoB;;;;CAKxB,MAAM,gBAAgB,YAAsC;EAC1D,MAAM,QAAQ,UAAU;AACxB,MAAI,CAAC,MACH,OAAM,IAAI,MAAM,uCAAuC;EAEzD,MAAM,EAAE,aAAa,YAAY,aAAa,YAAY;EAgB1D,MAAM,YAfY,MAAM,oBAAoB,QAAQ,aAClD,MAAM,SAAS,EACb,gBAAgB,EACd,qBAAqB;GACnB;GACA;GACA,QAAQ;GACR,QAAQ,EAAE,KAAK,aAAa;GAC7B,EACF,EACF,CAAC,CACH,EAC4B,QAGA,WAAW;AACxC,MAAI,CAAC,SACH,OAAM,IAAI,MAAM,kCAAkC;AAEpD,SAAO;;;;;;CAOT,MAAM,QAAQ,YAAY;AACxB,MAAI;GACF,MAAM,WAAW,MAAM,eAAe;AACtC,OAAI,SAAU;AACd,UAAO,aAAa,SAAS;AAG7B,UAAO,aACL,WACA,8CACD;AAKD,UAAO,aAAa,eAAe,iBAAiB;AACpD,UAAO,aAAa,SAAS,8BAA8B;GAE3D,MAAM,aAAa,SAAS,OAAO,IAAI,KAAK;AAC5C,UAAO,SAAS,iBAAiB,WAAW;GAE5C,MAAM,MAAM,OAAO;AACnB,OAAI,CAAC,IACH,OAAM,IAAI,MAAM,sCAAsC;GAGxD,IAAI;AACJ,OAAI,SAAS,KACX,QAAO,SAAS;YACP,SAAS,KAClB,QAAO,KAAK,SAAS,KAAK;OAE1B,OAAM,IAAI,MAAM,uCAAuC;AAGzD,YAAS,IAAI,UACX,MACA;IAAE,MAAM;IAA4B,SAAS;IAAS,EACtD;IAAE,WAAW,EAAE;IAAE,SAAS,EAAE;IAAE,SAAS,EAAE,MAAM,EAAE,EAAE;IAAE,EAGrD,EAAE,aAAa;IAAE,OAAO;IAAS,UAAU;IAAO,EAAE,CACrD;AAID,UAAO,uBAAuB;AAC5B,IAAK,QAAQ,yBAAyB,EAAE,MAAM,CAAC;;AAMjD,UAAO,kBAAkB,2BAA2B,OAAO,QAAQ;IACjE,MAAM,eAAe,UAAU;AAC/B,QAAI,CAAC,cAAc;AACjB,aAAQ,KAAK,mDAAmD;AAChE,YAAO,EAAE,SAAS,OAAO;;AAE3B,QAAI;KACF,MAAM,SAAS,IAAI;KACnB,MAAM,KAAM,OAAO,OAAO,cAAc,EAAE;KAI1C,MAAM,OACH,GAAG,QACH,OAAO,QACR;KACF,MAAM,cAEF,OAAO,SAIL,QAAQ,MAAM,EAAE,SAAS,UAAU,EAAE,KAAK,CAC3C,KAAK,MAAM,EAAE,KAAK,CAClB,KAAK,KAAK,IAAI;AACnB,SAAI,YACF,cAAa,WAAW;MACtB,IAAI,YAAY;MAChB;MACA,SAAS;MACV,CAAC;AAIJ,UAFiB,GAAG,YAAY,OAAO,YACJ,SAAS,WACtB,aAAa;MACjC,MAAM,mBAAmB,aAAa,YAAY;AAClD,0BACG,QAAQ,oBACP,gBAAgB;OACd;OACA,OAAO;OACP;OACD,CAAC,CACH,CACA,OAAO,QACN,QAAQ,MACN,kDACA,IACD,CACF;;AAEL,YAAO,EAAE,SAAS,OAAO;aAClB,KAAK;AACZ,aAAQ,MAAM,uCAAuC,IAAI;AACzD,YAAO,EAAE,SAAS,MAAM;;KAE1B;AAEF,UAAO,aAAa,OAAO,EAAE,UAAU;IAIrC,IAAI;AACJ,QAAI;AACF,cAAS,IAAI,IAAI,IAAI;YACf;AACN,aAAQ,KACN,2DACD;AACD,YAAO,EAAE,SAAS,MAAM;;AAE1B,QAAI,8BAA8B,IAAI,OAAO,SAAS,EAAE;AACtD,aAAQ,KACN,2DACA,OAAO,SACR;AACD,YAAO,EAAE,SAAS,MAAM;;AAE1B,WAAO,KAAK,KAAK,UAAU,sBAAsB;AACjD,WAAO,EAAE,SAAS,OAAO;;AAG3B,UAAO,aAAa,OAAO,WAAW;IACpC,MAAM,EAAE,YAAY,aAAa,YAAY;IAC7C,MAAM,eAAe,UAAU;AAC/B,QAAI,CAAC,WACH,OAAM,IAAI,MAAM,wCAAwC;AAE1D,QAAI,CAAC,aACH,OAAM,IAAI,MAAM,kCAAkC;AAcpD,YAZkB,MAAM,oBAAoB,QAAQ,oBAClD,aAAa,SAAS,EACpB,gBAAgB,EACd,qBAAqB;KACnB;KACA;KACA,QAAQ;KACR;KACD,EACF,EACF,CAAC,CACH,EACiB,UAA6B,EAAE,SAAS,EAAE,EAAE;;AAIhE,UAAO,gBAAgB,MAAM;AAC3B,QAAI,SAAU;IACd,MAAM,EAAE,OAAO,WAAY,KAAK,EAAE;AAIlC,WAAO,gBAAgB;KACrB,OAAO,OAAO,UAAU,WAAW,QAAQ;KAC3C,QAAQ,OAAO,WAAW,WAAW,SAAS;KAC/C,CAAC;;AAEJ,UAAO,sBAAsB;AAC3B,QAAI,SAAU;AACd,YAAQ;AACR,WAAO,iBAAiB;AACxB,kBAAc;;AAEhB,UAAO,oBAAoB,MAAM;AAC/B,YAAQ,IAAI,8BAA8B,EAAE;;GAG9C,MAAM,YAAY,IAAI,qBAAqB,KAAK,IAAI;AACpD,SAAM,OAAO,QAAQ,UAAU;AAC/B,OAAI,UAAU;AACZ,UAAM,OAAO,OAAO;AACpB,aAAS;AACT;;WAEK,KAAK;AACZ,WAAQ,MAAM,kCAAkC,IAAI;AACpD,OAAI,CAAC,SACH,QAAO,UAAU,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,IAAI,CAAC,CAAC;;;AAK3E,CAAK,OAAO;AAEZ,QAAO;EACL,cAAc,MAAM;AAClB,sBAAmB;AACnB,iBAAc;;EAEhB,eAAe,QAAQ;AACrB,uBAAoB;AACpB,iBAAc;;EAEhB,WAAW;AACT,cAAW;GACX,MAAM,IAAI;AACV,YAAS;AACT,GAAK,GAAG,OAAO;;EAElB"}