@derive-to/artifacts 0.0.0-stage → 0.6.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,199 @@
-# Temporary Holding Version
+# @derive-to/artifacts
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Put AI-built pages in your product, with versions, comments, shared state, live presence and
+sharing. Built on [MCP Apps](https://github.com/modelcontextprotocol/ext-apps).
+
+MCP Apps made interactive UI portable: ChatGPT, Claude, VS Code and other hosts render a
+sandboxed HTML view and talk to it over `postMessage`. It leaves out persistence and
+collaboration. @derive-to/artifacts adds exactly that, as an extension to MCP Apps rather than a
+parallel protocol:
+
+- **Every artifact is an MCP App view.** It renders in any MCP Apps host, and its shared state
+  saves through ordinary MCP tools there too. A host that speaks the extension also gets
+  comments, live updates and cursors.
+- **Comments anchored to text** that survive edits elsewhere on the page. Comments, shared state, editing and presence are each a plugin; presence is off unless you add it.
+- **Shared state** for votes, checklists, polls and small boards: optimistic, one value per
+  person where it should be, conflict-free under concurrent writes.
+- **Your app stays in charge.** Your sessions, your database. The kit asks one question,
+  `can(principal, verb, artifact)`, on one ladder: view, interact, comment, edit, manage.
+- **Sharing when you want it.** An optional piece answers that question for you: owners,
+  people grants, space access and share links, with agents capped below their person.
+- **No new infrastructure.** A few `oa_*` tables in the Postgres you already run, through the
+  client you already have. S3 optional. No Redis, no queue.
+
+![An artifact with anchored comments, live votes, and presence in the example host](docs/example-host.png)
+
+## Try it
+
+```bash
+nvm use && corepack enable && pnpm install
+pnpm dev
+```
+
+Open http://localhost:5173, pick a person, select some text and comment. Open a second browser
+profile as someone else to watch votes and comments arrive live. If the demo ports are taken,
+set `OPEN_ARTIFACT_DEMO_API_PORT`, `OPEN_ARTIFACT_DEMO_SANDBOX_PORT` and
+`OPEN_ARTIFACT_DEMO_WEB_PORT`.
+
+## One package, five entry points
+
+```
+your page ── @derive-to/artifacts/react ── @derive-to/artifacts/host (AppBridge)
+                                              │  MCP Apps: tools/call + artifact/* notifications
+sandbox origin ── relay ── artifact HTML + @derive-to/artifacts/runtime (App)
+
+your server ── @derive-to/artifacts/server (Hono) ── /api for your page, /api/mcp for agents
+                                              │
+                            your can() + Postgres (+ S3, optional)
+```
+
+| Import | Runs in | What it holds |
+| --- | --- | --- |
+| `@derive-to/artifacts` | anywhere | The contract: tool specs, notifications, schemas, limits, the verb ladder, roles, error codes |
+| `@derive-to/artifacts/source` | anywhere | The source engine: anchors, quote and structural edits, element hashes, Markdown and HTML projections |
+| `@derive-to/artifacts/runtime` | sandbox origin | The relay, `window.artifact` inside each artifact, the viewer for other MCP Apps hosts |
+| `@derive-to/artifacts/host` | your page | Mounts an artifact with the official `AppBridge`; a typed client for the server |
+| `@derive-to/artifacts/react` | your page | `ArtifactProvider`, `ArtifactStage`, `CommentRail`, `Presence`, editing and history controls |
+| `@derive-to/artifacts/server` | Node | A Hono app for artifacts, versions, comments, state, files, live events and MCP; adapters under `/server/postgres`, `/server/sqlite`, `/server/s3`; sharing under `/server/sharing` |
+
+The layers never reach upward: the protocol imports nothing, the runtime runs in untrusted
+frames and never touches Node, and only the server runs on the server. `pnpm lint:boundaries`
+holds that line. React is an optional peer, so a server-only host installs no UI.
+
+## Add it to your app
+
+On the server, mount the API and run the sandbox on its own origin:
+
+```ts
+import { createArtifactServer, createSandboxServer, loadKitAssets, starterKit } from "@derive-to/artifacts/server"
+import { postgres } from "@derive-to/artifacts/server/postgres"
+import { postgresSharing, sharing } from "@derive-to/artifacts/server/sharing"
+
+const sql = { query: (text, params) => pool.query(text, params) } // the pool you already have
+const backend = postgres({ sql })
+await backend.migrate()
+
+const share = sharing({
+  store: postgresSharing({ sql }),                      // await it.migrate() once, like the backend
+  seat: (actorId, space) => orgs.role(actorId, space),  // null when they are not a member
+})
+
+const assets = await loadKitAssets()
+app.route("/api", createArtifactServer({
+  ...backend,
+  assets,
+  sandboxOrigin: "https://sandbox.example.com",
+  host: {
+    actor: (c) => mySession(c),                         // who is asking, or null
+    link: (c) => c.req.query("share") ?? null,          // the share link they came by, if any
+    space: (c) => mySession(c)?.orgId ?? "",            // the tenant; artifacts never cross it
+    ...share.host,                                      // can, permissions, canCreate, onDelete
+  },
+  plugins: [...starterKit(), share.plugin],
+}))
+serveOnSandboxOrigin(createSandboxServer({
+  hostOrigins: ["https://app.example.com"],
+  relayScript: assets.relay,
+  blobs: backend.blobs,
+}))
+```
+
+The sandbox needs its own hostname, not a path on your app: that keeps artifact code away from
+your cookies.
+
+In the page:
+
+```tsx
+import { createArtifactClient } from "@derive-to/artifacts/host"
+import { ArtifactProvider, ArtifactStage, CommentRail, EditControls, VersionHistory } from "@derive-to/artifacts/react"
+import "@derive-to/artifacts/styles.css"
+
+const client = createArtifactClient({ baseUrl: "/api" })
+
+<ArtifactProvider client={client} artifactId={id} sandboxUrl="https://sandbox.example.com/sandbox.html">
+  <EditControls />
+  <ArtifactStage version={shown} />
+  <CommentRail />
+  <VersionHistory selected={shown} onSelect={setShown} />
+</ArtifactProvider>
+```
+
+Components read MCP Apps host style variables (`--color-background-primary` and friends), so
+your theme carries through.
+
+## Access and sharing
+
+`can(who, verb, artifact)` is asked for each verb on its own. `who` is `{ actor, link }`: the
+signed-in actor, if any, and the share link the request came by, if any; a link never pretends
+to be a person. The kit holds the answers to the ladder, so a verb above a refused one is never
+held, and an artifact outside the request's space, or one the caller cannot view, is a 404 on
+every face (REST, MCP, live).
+
+`@derive-to/artifacts/server/sharing` is one way to answer it. The creator owns. Members of the
+space open at their seat when the artifact's space access is `member`. Grants add people. The
+share link adds its role, clamped to viewer for anyone not signed in. An agent acts for a
+person, lowered to its cap. A sharer gives at most the role they hold. Those rules are proven
+for every input in [`lean/`](lean), and a law test runs the TypeScript over the same 9,000
+cases. See [docs/concepts.md](docs/concepts.md).
+
+## Plugins
+
+Everything beyond artifacts and versions is a plugin, including the defaults.
+
+| Plugin | What it adds | Your app supplies |
+| --- | --- | --- |
+| `starterKit()` | comments, shared state, editing text in place; each can be turned off | nothing |
+| `presence()` (or `starterKit({ presence: true })`) | live cursors and who is here. Off by default: without it the page sends no cursor and draws no avatars | nothing |
+| `sharing().plugin` | the routes a sharing dialog needs | a store and, optionally, seats and agents |
+| `mentions()` | `@` suggestions, `artifact_people` for agents | `search(query, viewer, artifact)` |
+| `notifications()` | mentioned, commented and resolved notices, only to people who can view | `deliver(notice)` |
+| `moderation()` | refuses comments and pages before they are saved | `check(input)` returning a reason |
+| `componentPack()` | your custom elements inside artifacts, a catalog for agents, publish-time checks | components, their script, their tools |
+| `mcpAuth()` | OAuth discovery and 401s for `/api/mcp` | your authorization server |
+| `rateLimit()` | per-person limits on publishes, comments and state changes | optionally a shared `take()` |
+| `webhook()` | signed event deliveries to any URL | a URL and a secret |
+
+Write your own with `definePlugin` and `defineTool`: [docs/plugins.md](docs/plugins.md).
+
+## Agents and other MCP hosts
+
+`/api/mcp` is a stateless MCP endpoint (Streamable HTTP) that runs as the request's principal.
+Agents get `artifact_list`, `artifact_read`, `artifact_create`, `artifact_publish`,
+`artifact_upload_asset`, the comment tools and `artifact_read_state`. `artifact_open` renders an
+artifact inside Claude, ChatGPT, VS Code or any MCP Apps host through a generic viewer, and its
+votes and edits save to your server from there too.
+
+## Errors
+
+Every refusal answers `{ error, code }`: a sentence for a person and a registered code for
+code. [docs/errors.md](docs/errors.md) is generated from the one table in
+`src/protocol/errors.ts`.
+
+## More
+
+- [examples/acme](examples/acme): Acme Docs, a sample host with two companies, four people, an
+  agent and share links, and the end-to-end proof that nothing crosses a company, grant or link
+
+- [docs/concepts.md](docs/concepts.md): the model, access, sharing, errors, and what is proven
+- [docs/hosting.md](docs/hosting.md): slides, fullscreen, layout editing, reports, links, the comment rail
+- [docs/authoring.md](docs/authoring.md): writing an artifact, `window.artifact`, slides on phones
+- [docs/deploying.md](docs/deploying.md): Postgres, an S3-compatible bucket, and the sandbox hostname, from one process
+- [docs/storage.md](docs/storage.md): adapters, Postgres deployment, exports, uploaded assets
+- [docs/plugins.md](docs/plugins.md), [docs/source-core.md](docs/source-core.md), [docs/collection-core.md](docs/collection-core.md)
+- [docs/releasing.md](docs/releasing.md): versions and npm
+- [spec/artifact-extension.md](spec/artifact-extension.md): the extension protocol
+- [SECURITY.md](SECURITY.md)
+
+## Develop
+
+`pnpm verify` runs what CI runs: Biome, type-aware Oxlint, the repository guards in `scripts/`
+(layer boundaries, MCP Apps compatibility, a guard on every route, design tokens, environment,
+the error registry, the release manifest), knip, type checks, tests with coverage, bundle
+budgets, publint, are-the-types-wrong and an install-from-tarball consumer check.
+`pnpm lint:proofs` builds the Lean model and checks its table. See [AGENTS.md](AGENTS.md).
+
+The previous packages, `@aniraga/open-artifact-*`, stay on npm at 0.5.x for existing hosts.
+
+## License
+
+[Apache-2.0](LICENSE)

package/dist/host/bridge.d.ts

@@ -0,0 +1,38 @@
+import { AppBridge, type McpUiHostContext } from "@modelcontextprotocol/ext-apps/app-bridge";
+import { type Actor, type ArtifactFeature, type Params } from "../protocol/index.js";
+import type { ArtifactClient } from "./client.js";
+import type { createEmitter } from "./emitter.js";
+export interface ViewEvents extends Record<string, unknown> {
+    selection: Params<"selection">;
+    positions: Params<"anchorPositions">;
+    activated: Params<"anchorActivated">;
+    cursor: Params<"cursor">;
+    edits: Params<"edits">;
+    page: Params<"page">;
+    layoutReady: Params<"layoutReady">;
+    slide: Params<"slide">;
+    exitPresent: Params<"exitPresent">;
+    escape: Params<"escape">;
+    resize: {
+        height: number;
+    };
+}
+export interface BridgeOptions {
+    client: ArtifactClient;
+    artifactId: string;
+    actor: Actor | null;
+    features: ArtifactFeature[];
+    emitter: ReturnType<typeof createEmitter<ViewEvents>>;
+    /** The theme, styles, and locale the view starts with. */
+    hostContext?: McpUiHostContext | undefined;
+    /** Return true when the host handles a link in its own UI. Otherwise open a new tab. */
+    onOpenLink?: ((url: string) => boolean | Promise<boolean>) | undefined;
+}
+/** An MCP Apps AppBridge that also speaks the artifact extension. Standard MCP Apps behaviour
+ *  (size, links, host context) is the SDK's; this only adds artifact/* handlers. */
+export declare const createBridge: (options: BridgeOptions) => {
+    bridge: AppBridge;
+    notify: <K extends "stateChanged" | "anchors" | "focusAnchor" | "editing" | "present" | "selectedLink" | "snapshot">(key: K, params: Params<K>) => void;
+    speaks: () => boolean;
+};
+//# sourceMappingURL=bridge.d.ts.map

package/dist/host/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../src/host/bridge.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,2CAA2C,CAAA;AAC5F,OAAO,EACL,KAAK,KAAK,EACV,KAAK,eAAe,EAIpB,KAAK,MAAM,EAEZ,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAEjD,MAAM,WAAW,UAAW,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACzD,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,CAAA;IAC9B,SAAS,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAA;IACpC,SAAS,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAA;IACpC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;IACxB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IACtB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IACpB,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC,CAAA;IAClC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IACtB,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC,CAAA;IAClC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;IACxB,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,cAAc,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAA;IACnB,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,OAAO,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,UAAU,CAAC,CAAC,CAAA;IACrD,0DAA0D;IAC1D,WAAW,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAA;IAC1C,wFAAwF;IACxF,UAAU,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,SAAS,CAAA;CACvE;AAyFD;oFACoF;AACpF,eAAO,MAAM,YAAY,YAAa,aAAa;;aAiC/C,CAAC,SACG,cAAc,GACd,SAAS,GACT,aAAa,GACb,SAAS,GACT,SAAS,GACT,cAAc,GACd,UAAU,OAET,CAAC,UACE,MAAM,CAAC,CAAC,CAAC;;CAQpB,CAAA"}

package/dist/host/bridge.js

@@ -0,0 +1,86 @@
+import { AppBridge } from "@modelcontextprotocol/ext-apps/app-bridge";
+import { EXTENSION_VERSION, extensionCapability, methods, readViewExtension, } from "../protocol/index.js";
+const HOST_INFO = { name: "open-artifact-host", version: EXTENSION_VERSION };
+/** Writes must come from a real click or keypress in the frame: the browser grants the
+ *  host page transient activation when the user interacts with a descendant frame. Without
+ *  this, a page could write on load and attribute it to everyone who merely viewed it. */
+const requireGesture = () => {
+    const activation = globalThis.navigator?.userActivation;
+    if (activation && !activation.isActive)
+        throw new Error("Interact with the artifact first.");
+};
+/** MCP Apps visibility: tools default to both the model and the app. */
+const visibleToApps = (tool) => (tool._meta?.["ui"]?.visibility ?? ["app"]).includes("app");
+/** The artifact's tool calls, forwarded to the server's MCP endpoint like any MCP Apps host
+ *  would, with three rules on top: only tools visible to apps, writes only after a real
+ *  gesture, and only for the artifact mounted here (a page cannot reach another artifact). */
+const answerTools = (bridge, { client, artifactId }) => {
+    bridge.oncalltool = async ({ name, arguments: args = {} }) => {
+        try {
+            const tool = (await client.listTools()).find((each) => each.name === name);
+            if (!tool || !visibleToApps(tool))
+                return refusal(`${name} is not available to artifacts.`);
+            if (!tool.annotations?.readOnlyHint)
+                requireGesture();
+            const pinned = "artifactId" in (tool.inputSchema.properties ?? {}) ? { ...args, artifactId } : args;
+            return await client.callTool(name, pinned);
+        }
+        catch (error) {
+            return refusal(error instanceof Error ? error.message : "The call was refused.");
+        }
+    };
+};
+const refusal = (text) => ({ isError: true, content: [{ type: "text", text }] });
+const wireViewNotifications = (bridge, { emitter }) => {
+    const { selection, anchorPositions, anchorActivated, cursor, edits, page, layoutReady, slide, exitPresent, escape: escapeNotification, } = methods;
+    bridge.setNotificationHandler(selection.method, { params: selection.params }, (params) => emitter.emit("selection", params));
+    bridge.setNotificationHandler(anchorPositions.method, { params: anchorPositions.params }, (params) => emitter.emit("positions", params));
+    bridge.setNotificationHandler(anchorActivated.method, { params: anchorActivated.params }, (params) => emitter.emit("activated", params));
+    bridge.setNotificationHandler(cursor.method, { params: cursor.params }, (params) => emitter.emit("cursor", params));
+    bridge.setNotificationHandler(edits.method, { params: edits.params }, (params) => emitter.emit("edits", params));
+    bridge.setNotificationHandler(page.method, { params: page.params }, (params) => emitter.emit("page", params));
+    bridge.setNotificationHandler(layoutReady.method, { params: layoutReady.params }, (params) => emitter.emit("layoutReady", params));
+    bridge.setNotificationHandler(slide.method, { params: slide.params }, (params) => emitter.emit("slide", params));
+    bridge.setNotificationHandler(exitPresent.method, { params: exitPresent.params }, (params) => emitter.emit("exitPresent", params));
+    bridge.setNotificationHandler(escapeNotification.method, { params: escapeNotification.params }, (params) => emitter.emit("escape", params));
+};
+/** An MCP Apps AppBridge that also speaks the artifact extension. Standard MCP Apps behaviour
+ *  (size, links, host context) is the SDK's; this only adds artifact/* handlers. */
+export const createBridge = (options) => {
+    const bridge = new AppBridge(null, HOST_INFO, {
+        openLinks: {},
+        serverTools: {},
+        experimental: extensionCapability({
+            version: EXTENSION_VERSION,
+            features: options.features,
+            actor: options.actor,
+        }),
+    }, { hostContext: options.hostContext ?? {} });
+    answerTools(bridge, options);
+    wireViewNotifications(bridge, options);
+    bridge.onopenlink = async ({ url }) => {
+        const destination = new URL(url);
+        if (!["http:", "https:", "mailto:", "tel:"].includes(destination.protocol)) {
+            throw new Error("Unsupported link protocol");
+        }
+        if (await options.onOpenLink?.(url))
+            return {};
+        // Open in the trusted host, outside the artifact sandbox.
+        window.open(destination.href, "_blank", "noopener,noreferrer");
+        return {};
+    };
+    bridge.onsizechange = ({ height }) => {
+        if (typeof height === "number")
+            options.emitter.emit("resize", { height });
+    };
+    /** Send a host → view notification once the view has said it speaks the extension. */
+    const notify = (key, params) => {
+        if (!readViewExtension(bridge.getAppCapabilities()))
+            return;
+        void bridge.notification({ method: methods[key].method, params });
+    };
+    /** True once the view has said it speaks the extension. */
+    const speaks = () => Boolean(readViewExtension(bridge.getAppCapabilities()));
+    return { bridge, notify, speaks };
+};
+//# sourceMappingURL=bridge.js.map

package/dist/host/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../src/host/bridge.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAyB,MAAM,2CAA2C,CAAA;AAC5F,OAAO,EAGL,iBAAiB,EACjB,mBAAmB,EACnB,OAAO,EAEP,iBAAiB,GAClB,MAAM,sBAAsB,CAAA;AA8B7B,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAA;AAE5E;;0FAE0F;AAC1F,MAAM,cAAc,GAAG,GAAG,EAAE;IAC1B,MAAM,UAAU,GAAI,UAAU,CAAC,SAAmC,EAAE,cAAc,CAAA;IAClF,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;AAC9F,CAAC,CAAA;AAED,wEAAwE;AACxE,MAAM,aAAa,GAAG,CAAC,IAAU,EAAE,EAAE,CACnC,CAAE,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAA2C,EAAE,UAAU,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAC7F,KAAK,CACN,CAAA;AAEH;;8FAE8F;AAC9F,MAAM,WAAW,GAAG,CAAC,MAAiB,EAAE,EAAE,MAAM,EAAE,UAAU,EAAiB,EAAE,EAAE;IAC/E,MAAM,CAAC,UAAU,GAAG,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,EAAE;QAC3D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;YAC1E,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;gBAAE,OAAO,OAAO,CAAC,GAAG,IAAI,iCAAiC,CAAC,CAAA;YAC3F,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY;gBAAE,cAAc,EAAE,CAAA;YACrD,MAAM,MAAM,GACV,YAAY,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;YACtF,OAAO,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,OAAO,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAA;QAClF,CAAC;IACH,CAAC,CAAA;AACH,CAAC,CAAA;AAED,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;AAEjG,MAAM,qBAAqB,GAAG,CAAC,MAAiB,EAAE,EAAE,OAAO,EAAiB,EAAE,EAAE;IAC9E,MAAM,EACJ,SAAS,EACT,eAAe,EACf,eAAe,EACf,MAAM,EACN,KAAK,EACL,IAAI,EACJ,WAAW,EACX,KAAK,EACL,WAAW,EACX,MAAM,EAAE,kBAAkB,GAC3B,GAAG,OAAO,CAAA;IACX,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CACvF,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAClC,CAAA;IACD,MAAM,CAAC,sBAAsB,CAC3B,eAAe,CAAC,MAAM,EACtB,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,EAClC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAC9C,CAAA;IACD,MAAM,CAAC,sBAAsB,CAC3B,eAAe,CAAC,MAAM,EACtB,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,EAClC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAC9C,CAAA;IACD,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CACjF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAC/B,CAAA;IACD,MAAM,CAAC,sBAAsB,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAC/E,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAC9B,CAAA;IACD,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAC7E,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAC7B,CAAA;IACD,MAAM,CAAC,sBAAsB,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAC3F,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CACpC,CAAA;IACD,MAAM,CAAC,sBAAsB,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAC/E,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAC9B,CAAA;IACD,MAAM,CAAC,sBAAsB,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAC3F,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CACpC,CAAA;IACD,MAAM,CAAC,sBAAsB,CAC3B,kBAAkB,CAAC,MAAM,EACzB,EAAE,MAAM,EAAE,kBAAkB,CAAC,MAAM,EAAE,EACrC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAC3C,CAAA;AACH,CAAC,CAAA;AAED;oFACoF;AACpF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAsB,EAAE,EAAE;IACrD,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,IAAI,EACJ,SAAS,EACT;QACE,SAAS,EAAE,EAAE;QACb,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,mBAAmB,CAAC;YAChC,OAAO,EAAE,iBAAiB;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC;KACH,EACD,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,CAC3C,CAAA;IACD,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC5B,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACtC,MAAM,CAAC,UAAU,GAAG,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QACpC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;QAC9C,CAAC;QACD,IAAI,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAA;QAC9C,0DAA0D;QAC1D,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAA;QAC9D,OAAO,EAAE,CAAA;IACX,CAAC,CAAA;IACD,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;QACnC,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IAC5E,CAAC,CAAA;IAED,sFAAsF;IACtF,MAAM,MAAM,GAAG,CAUb,GAAM,EACN,MAAiB,EACjB,EAAE;QACF,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAAE,OAAM;QAC3D,KAAK,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACnE,CAAC,CAAA;IACD,2DAA2D;IAC3D,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAA;IAC5E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AACnC,CAAC,CAAA"}