@darqlabs/curator-sdk-react 0.6.1 → 0.8.0

package/dist/esm/mcpApps/hostBridge.js

@@ -0,0 +1,300 @@
+/**
+ * Host side of the MCP Apps (SEP-1865) bridge: JSON-RPC 2.0 over a message
+ * transport, from the widget to one rendered view.
+ *
+ * Pure. Knows nothing about React, iframes or the network: the caller hands
+ * it a `post` function to reach the view and feeds it every message the view
+ * sends. Everything the view may ask for is a `handlers` callback, so the
+ * whole protocol can be exercised in a unit test with a fake view.
+ *
+ * What the view may do, and what this bridge does with it:
+ *
+ *   ui/initialize                   → handshake; answers with host info,
+ *                                     capabilities and context
+ *   ui/notifications/initialized    → view is ready; deliver the tool input,
+ *                                     then the tool result once known
+ *   tools/call                      → handlers.callTool (the Curator data plane)
+ *   ui/message                      → handlers.sendMessage (app-reported text)
+ *   ui/update-model-context         → handlers.updateModelContext (surfaced only)
+ *   ui/open-link                    → handlers.openLink (http(s) only)
+ *   ui/request-display-mode         → always `inline` in v1
+ *   ui/notifications/size-changed   → handlers.onSizeChange
+ *   notifications/message           → handlers.onLog
+ *   ping                            → {}
+ *   anything else                   → JSON-RPC "method not found"
+ *
+ * Method names are the ones ext-apps 2.0 emits (`ui/…`). The deprecated
+ * `notifications/…` spellings assistant-ui also accepts are NOT supported:
+ * fewer names to reason about, and our reference view uses the current SDK.
+ */
+export const MCP_APPS_PROTOCOL_VERSION = "2026-01-26";
+const ERR = { invalidRequest: -32600, methodNotFound: -32601, invalidParams: -32602, internal: -32603 };
+const DEFAULT_MAX_MESSAGE_CHARS = 2048;
+// Control characters except tab / newline / carriage return.
+// eslint-disable-next-line no-control-regex
+const CONTROL_CHARS = /[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/g;
+function isRecord(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+/**
+ * The text of a spec-shaped `ui/message`: `{ role, content: [{type:"text", text}] }`.
+ * Also accepts a bare `{ text }` for lenient views. Control characters are
+ * stripped and the length capped; the result is plain text, never markup.
+ */
+export function extractMessageText(params, maxChars = DEFAULT_MAX_MESSAGE_CHARS) {
+    if (!isRecord(params))
+        return null;
+    let text = null;
+    if (Array.isArray(params.content)) {
+        text = params.content
+            .filter((c) => isRecord(c) && c.type === "text" && typeof c.text === "string")
+            .map((c) => c.text)
+            .join("\n");
+    }
+    else if (typeof params.text === "string") {
+        text = params.text;
+    }
+    if (text === null)
+        return null;
+    const clean = text.replace(CONTROL_CHARS, "").slice(0, maxChars).trim();
+    return clean.length > 0 ? clean : null;
+}
+/** Only web links leave the sandbox. */
+export function isOpenableUrl(url) {
+    if (typeof url !== "string")
+        return false;
+    try {
+        const u = new URL(url);
+        return u.protocol === "https:" || u.protocol === "http:";
+    }
+    catch {
+        return false;
+    }
+}
+export class McpAppHostBridge {
+    post;
+    handlers;
+    hostInfo;
+    hostContext;
+    maxMessageChars;
+    initialized = false;
+    closed = false;
+    nextId = 1;
+    pending = new Map();
+    /** Tool input, delivered on `initialized` (or immediately when already ready). */
+    toolInput;
+    toolInputSent = false;
+    /** Tool result, delivered after input once known. */
+    toolResult;
+    toolResultSent = false;
+    constructor(opts) {
+        this.post = opts.post;
+        this.handlers = opts.handlers;
+        this.hostInfo = opts.hostInfo ?? { name: "Curator", version: "1" };
+        this.hostContext = {
+            platform: "web",
+            displayMode: "inline",
+            availableDisplayModes: ["inline"],
+            ...opts.hostContext,
+        };
+        this.maxMessageChars = opts.maxMessageChars ?? DEFAULT_MAX_MESSAGE_CHARS;
+    }
+    get isInitialized() {
+        return this.initialized;
+    }
+    // ── host → view ─────────────────────────────────────────────────────────
+    setToolInput(args) {
+        this.toolInput = args;
+        this.flush();
+    }
+    setToolResult(result) {
+        this.toolResult = result;
+        this.flush();
+    }
+    notifyToolCancelled(reason) {
+        this.notify("ui/notifications/tool-cancelled", { reason });
+    }
+    updateHostContext(patch) {
+        this.hostContext = { ...this.hostContext, ...patch };
+        if (this.initialized)
+            this.notify("ui/notifications/host-context-changed", patch);
+    }
+    /** Ask the view to tear down; resolves when it answers or after `timeoutMs`. */
+    async teardown(timeoutMs = 500) {
+        if (this.closed)
+            return;
+        if (this.initialized) {
+            await Promise.race([
+                this.request("ui/resource-teardown", {}).catch(() => undefined),
+                new Promise((r) => setTimeout(r, timeoutMs)),
+            ]);
+        }
+        this.close();
+    }
+    close() {
+        this.closed = true;
+        for (const p of this.pending.values())
+            p.reject(new Error("bridge closed"));
+        this.pending.clear();
+    }
+    // ── view → host ─────────────────────────────────────────────────────────
+    /** Feed one message received from the view. Non-JSON-RPC traffic is ignored. */
+    onMessage(data) {
+        if (this.closed || !isRecord(data) || data.jsonrpc !== "2.0")
+            return;
+        if ("method" in data && typeof data.method === "string") {
+            if ("id" in data && (typeof data.id === "string" || typeof data.id === "number")) {
+                void this.handleRequest(data);
+            }
+            else {
+                this.handleNotification(data);
+            }
+            return;
+        }
+        if ("id" in data && (typeof data.id === "string" || typeof data.id === "number")) {
+            const pending = this.pending.get(data.id);
+            if (!pending)
+                return;
+            this.pending.delete(data.id);
+            const res = data;
+            if (res.error)
+                pending.reject(new Error(res.error.message));
+            else
+                pending.resolve(res.result);
+        }
+    }
+    async handleRequest(req) {
+        const params = isRecord(req.params) ? req.params : {};
+        try {
+            switch (req.method) {
+                case "ui/initialize": {
+                    const requested = typeof params.protocolVersion === "string" ? params.protocolVersion : MCP_APPS_PROTOCOL_VERSION;
+                    this.respond(req.id, {
+                        protocolVersion: requested,
+                        hostInfo: this.hostInfo,
+                        hostCapabilities: {
+                            openLinks: {},
+                            serverTools: {},
+                            message: { text: {} },
+                            updateModelContext: { text: {}, structuredContent: {} },
+                            logging: {},
+                        },
+                        hostContext: this.hostContext,
+                    });
+                    return;
+                }
+                case "ping":
+                    this.respond(req.id, {});
+                    return;
+                case "tools/call": {
+                    if (typeof params.name !== "string" || !params.name) {
+                        this.error(req.id, ERR.invalidParams, "`name` is required");
+                        return;
+                    }
+                    const args = isRecord(params.arguments) ? params.arguments : {};
+                    const meta = isRecord(params._meta) ? params._meta : undefined;
+                    const result = await this.handlers.callTool({
+                        name: params.name,
+                        arguments: args,
+                        ...(meta ? { _meta: meta } : {}),
+                    });
+                    this.respond(req.id, result);
+                    return;
+                }
+                case "ui/message": {
+                    const text = extractMessageText(params, this.maxMessageChars);
+                    if (!text) {
+                        this.error(req.id, ERR.invalidParams, "ui/message needs text content");
+                        return;
+                    }
+                    const accepted = await this.handlers.sendMessage(text);
+                    this.respond(req.id, accepted ? {} : { isError: true });
+                    return;
+                }
+                case "ui/update-model-context": {
+                    this.handlers.updateModelContext?.({
+                        content: params.content,
+                        structuredContent: params.structuredContent,
+                    });
+                    this.respond(req.id, {});
+                    return;
+                }
+                case "ui/open-link": {
+                    const ok = isOpenableUrl(params.url) && (this.handlers.openLink?.(params.url) ?? false);
+                    this.respond(req.id, ok ? {} : { isError: true });
+                    return;
+                }
+                case "ui/request-display-mode":
+                    // Inline only in v1; the host has final authority per spec.
+                    this.respond(req.id, { mode: "inline" });
+                    return;
+                default:
+                    this.error(req.id, ERR.methodNotFound, `${req.method} is not supported by this host`);
+            }
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            this.handlers.onError?.(err instanceof Error ? err : new Error(message));
+            // A refused/failed tool call is still a well-formed JSON-RPC error; the
+            // view decides how to show it.
+            this.error(req.id, ERR.internal, message);
+        }
+    }
+    handleNotification(n) {
+        const params = isRecord(n.params) ? n.params : {};
+        switch (n.method) {
+            case "ui/notifications/initialized":
+                this.initialized = true;
+                this.handlers.onInitialized?.();
+                this.flush();
+                return;
+            case "ui/notifications/size-changed":
+                this.handlers.onSizeChange?.({
+                    ...(typeof params.width === "number" ? { width: params.width } : {}),
+                    ...(typeof params.height === "number" ? { height: params.height } : {}),
+                });
+                return;
+            case "notifications/message":
+                this.handlers.onLog?.(params);
+                return;
+            default:
+                return;
+        }
+    }
+    // ── plumbing ────────────────────────────────────────────────────────────
+    flush() {
+        if (!this.initialized || this.closed)
+            return;
+        if (this.toolInput !== undefined && !this.toolInputSent) {
+            this.notify("ui/notifications/tool-input", { arguments: this.toolInput });
+            this.toolInputSent = true;
+        }
+        if (this.toolResult !== undefined && !this.toolResultSent) {
+            this.notify("ui/notifications/tool-result", this.toolResult);
+            this.toolResultSent = true;
+        }
+    }
+    notify(method, params) {
+        if (this.closed)
+            return;
+        this.post({ jsonrpc: "2.0", method, params });
+    }
+    request(method, params) {
+        const id = this.nextId++;
+        return new Promise((resolve, reject) => {
+            this.pending.set(id, { resolve, reject });
+            this.post({ jsonrpc: "2.0", id, method, params });
+        });
+    }
+    respond(id, result) {
+        if (this.closed)
+            return;
+        this.post({ jsonrpc: "2.0", id, result });
+    }
+    error(id, code, message) {
+        if (this.closed)
+            return;
+        this.post({ jsonrpc: "2.0", id, error: { code, message } });
+    }
+}
+//# sourceMappingURL=hostBridge.js.map

package/dist/esm/mcpApps/hostBridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hostBridge.js","sourceRoot":"","sources":["../../../src/mcpApps/hostBridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,YAAY,CAAA;AA+DrD,MAAM,GAAG,GAAG,EAAE,cAAc,EAAE,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAW,CAAA;AAChH,MAAM,yBAAyB,GAAG,IAAI,CAAA;AACtC,6DAA6D;AAC7D,4CAA4C;AAC5C,MAAM,aAAa,GAAG,iDAAiD,CAAA;AAEvE,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAe,EAAE,QAAQ,GAAG,yBAAyB;IACtF,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,IAAI,IAAI,GAAkB,IAAI,CAAA;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,IAAI,GAAG,MAAM,CAAC,OAAO;aAClB,MAAM,CACL,CAAC,CAAC,EAAuC,EAAE,CACzC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CACjE;aACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,IAAI,CAAC,IAAI,CAAC,CAAA;IACf,CAAC;SAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3C,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;IACpB,CAAC;IACD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAA;IACvE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;AACxC,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACzC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QACtB,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAA;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAM,OAAO,gBAAgB;IACV,IAAI,CAA4B;IAChC,QAAQ,CAAoB;IAC5B,QAAQ,CAAmC;IACpD,WAAW,CAAa;IACf,eAAe,CAAQ;IAEhC,WAAW,GAAG,KAAK,CAAA;IACnB,MAAM,GAAG,KAAK,CAAA;IACd,MAAM,GAAG,CAAC,CAAA;IACD,OAAO,GAAG,IAAI,GAAG,EAG/B,CAAA;IAEH,kFAAkF;IAC1E,SAAS,CAAqC;IAC9C,aAAa,GAAG,KAAK,CAAA;IAC7B,qDAAqD;IAC7C,UAAU,CAAgC;IAC1C,cAAc,GAAG,KAAK,CAAA;IAE9B,YAAY,IAAuB;QACjC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAA;QACrB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;QAC7B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAA;QAClE,IAAI,CAAC,WAAW,GAAG;YACjB,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,QAAQ;YACrB,qBAAqB,EAAE,CAAC,QAAQ,CAAC;YACjC,GAAG,IAAI,CAAC,WAAW;SACpB,CAAA;QACD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,yBAAyB,CAAA;IAC1E,CAAC;IAED,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,WAAW,CAAA;IACzB,CAAC;IAED,2EAA2E;IAE3E,YAAY,CAAC,IAA6B;QACxC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;QACrB,IAAI,CAAC,KAAK,EAAE,CAAA;IACd,CAAC;IAED,aAAa,CAAC,MAA0B;QACtC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAA;QACxB,IAAI,CAAC,KAAK,EAAE,CAAA;IACd,CAAC;IAED,mBAAmB,CAAC,MAAc;QAChC,IAAI,CAAC,MAAM,CAAC,iCAAiC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IAC5D,CAAC;IAED,iBAAiB,CAAC,KAAkB;QAClC,IAAI,CAAC,WAAW,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,KAAK,EAAE,CAAA;QACpD,IAAI,IAAI,CAAC,WAAW;YAAE,IAAI,CAAC,MAAM,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAA;IACnF,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,QAAQ,CAAC,SAAS,GAAG,GAAG;QAC5B,IAAI,IAAI,CAAC,MAAM;YAAE,OAAM;QACvB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjB,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;gBAC/D,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;aACnD,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAA;IACd,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAA;QAC3E,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;IAED,2EAA2E;IAE3E,gFAAgF;IAChF,SAAS,CAAC,IAAa;QACrB,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;YAAE,OAAM;QACpE,IAAI,QAAQ,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxD,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC;gBACjF,KAAK,IAAI,CAAC,aAAa,CAAC,IAAiC,CAAC,CAAA;YAC5D,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,kBAAkB,CAAC,IAAsC,CAAC,CAAA;YACjE,CAAC;YACD,OAAM;QACR,CAAC;QACD,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC;YACjF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACzC,IAAI,CAAC,OAAO;gBAAE,OAAM;YACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAC5B,MAAM,GAAG,GAAG,IAAkC,CAAA;YAC9C,IAAI,GAAG,CAAC,KAAK;gBAAE,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;;gBACtD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,GAAmB;QAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;QACrD,IAAI,CAAC;YACH,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;gBACnB,KAAK,eAAe,CAAC,CAAC,CAAC;oBACrB,MAAM,SAAS,GACb,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,yBAAyB,CAAA;oBACjG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;wBACnB,eAAe,EAAE,SAAS;wBAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,gBAAgB,EAAE;4BAChB,SAAS,EAAE,EAAE;4BACb,WAAW,EAAE,EAAE;4BACf,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;4BACrB,kBAAkB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE;4BACvD,OAAO,EAAE,EAAE;yBACZ;wBACD,WAAW,EAAE,IAAI,CAAC,WAAW;qBAC9B,CAAC,CAAA;oBACF,OAAM;gBACR,CAAC;gBACD,KAAK,MAAM;oBACT,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;oBACxB,OAAM;gBACR,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;wBACpD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAA;wBAC3D,OAAM;oBACR,CAAC;oBACD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAA;oBAC/D,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;oBAC9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;wBAC1C,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,SAAS,EAAE,IAAI;wBACf,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACjC,CAAC,CAAA;oBACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;oBAC5B,OAAM;gBACR,CAAC;gBACD,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,CAAA;oBAC7D,IAAI,CAAC,IAAI,EAAE,CAAC;wBACV,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAA;wBACtE,OAAM;oBACR,CAAC;oBACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;oBACtD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;oBACvD,OAAM;gBACR,CAAC;gBACD,KAAK,yBAAyB,CAAC,CAAC,CAAC;oBAC/B,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;wBACjC,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;qBAC5C,CAAC,CAAA;oBACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;oBACxB,OAAM;gBACR,CAAC;gBACD,KAAK,cAAc,CAAC,CAAC,CAAC;oBACpB,MAAM,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,CAAA;oBACvF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;oBACjD,OAAM;gBACR,CAAC;gBACD,KAAK,yBAAyB;oBAC5B,4DAA4D;oBAC5D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;oBACxC,OAAM;gBACR;oBACE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,cAAc,EAAE,GAAG,GAAG,CAAC,MAAM,gCAAgC,CAAC,CAAA;YACzF,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAChE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;YACxE,wEAAwE;YACxE,+BAA+B;YAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,CAAsB;QAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;QACjD,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;YACjB,KAAK,8BAA8B;gBACjC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;gBACvB,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAA;gBAC/B,IAAI,CAAC,KAAK,EAAE,CAAA;gBACZ,OAAM;YACR,KAAK,+BAA+B;gBAClC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;oBAC3B,GAAG,CAAC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpE,GAAG,CAAC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxE,CAAC,CAAA;gBACF,OAAM;YACR,KAAK,uBAAuB;gBAC1B,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAA;gBAC7B,OAAM;YACR;gBACE,OAAM;QACV,CAAC;IACH,CAAC;IAED,2EAA2E;IAEnE,KAAK;QACX,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM;YAAE,OAAM;QAC5C,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,6BAA6B,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAA;YACzE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAA;QAC3B,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAC1D,IAAI,CAAC,MAAM,CAAC,8BAA8B,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;YAC5D,IAAI,CAAC,cAAc,GAAG,IAAI,CAAA;QAC5B,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,MAAc,EAAE,MAAe;QAC5C,IAAI,IAAI,CAAC,MAAM;YAAE,OAAM;QACvB,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/C,CAAC;IAEO,OAAO,CAAC,MAAc,EAAE,MAAe;QAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAA;QACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;YACzC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QACnD,CAAC,CAAC,CAAA;IACJ,CAAC;IAEO,OAAO,CAAC,EAAmB,EAAE,MAAe;QAClD,IAAI,IAAI,CAAC,MAAM;YAAE,OAAM;QACvB,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IAC3C,CAAC;IAEO,KAAK,CAAC,EAAmB,EAAE,IAAY,EAAE,OAAe;QAC9D,IAAI,IAAI,CAAC,MAAM;YAAE,OAAM;QACvB,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;IAC7D,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@darqlabs/curator-sdk-react",
-  "version": "0.6.1",
+  "version": "0.8.0",
   "description": "Official React components for Curator — drop-in chat widget and headless hook backed by @darqlabs/curator-sdk.",
   "license": "MIT",
   "main": "./dist/cjs/index.js",
@@ -28,12 +28,13 @@
   },
   "dependencies": {
     "@assistant-ui/react": "^0.15.16",
-    "react-markdown": "^10.0.0"
+    "react-markdown": "^10.0.0",
+    "safe-content-frame": "0.0.27"
   },
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0",
     "react-dom": "^18.0.0 || ^19.0.0",
-    "@darqlabs/curator-sdk": "^0.6.1"
+    "@darqlabs/curator-sdk": "^0.8.0"
   },
   "devDependencies": {
     "@testing-library/react": "^16.1.0",
@@ -46,7 +47,7 @@
     "react-dom": "^18.3.0",
     "ts-jest": "^29.4.9",
     "typescript": "^5.9.3",
-    "@darqlabs/curator-sdk": "^0.6.1"
+    "@darqlabs/curator-sdk": "^0.8.0"
   },
   "keywords": [
     "curator",