@frontmcp/ui 0.7.2 → 0.8.1

package/bridge/adapters/claude.adapter.d.ts

@@ -35,7 +35,10 @@ export declare class ClaudeAdapter extends BaseAdapter {
     readonly priority = 60;
     constructor();
     /**
-     * Check if we're running in a Claude artifact/widget context.
+     * Check if we're running in a Claude legacy artifact/widget context.
+     *
+     * Claude MCP Apps (2026+) uses the ext-apps adapter instead.
+     * This adapter only handles legacy Claude artifacts without MCP Apps support.
      */
     canHandle(): boolean;
     /**

package/bridge/adapters/claude.adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude.adapter.d.ts","sourceRoot":"","sources":["../../../src/bridge/adapters/claude.adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAwB,MAAM,gBAAgB,CAAC;AAEnE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,aAAc,SAAQ,WAAW;IAC5C,QAAQ,CAAC,EAAE,YAAY;IACvB,QAAQ,CAAC,IAAI,wBAAwB;IACrC,QAAQ,CAAC,QAAQ,MAAM;;IAgBvB;;OAEG;IACH,SAAS,IAAI,OAAO;IA0BpB;;OAEG;IACY,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAU1C;;;OAGG;IACY,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMnD;;OAEG;IACY,kBAAkB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAKpE;;OAEG;IACY,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAS5C;;OAEG;IACH,OAAO,CAAC,mBAAmB;CAoB5B;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,aAAa,CAEnD"}
+{"version":3,"file":"claude.adapter.d.ts","sourceRoot":"","sources":["../../../src/bridge/adapters/claude.adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAwB,MAAM,gBAAgB,CAAC;AAEnE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,aAAc,SAAQ,WAAW;IAC5C,QAAQ,CAAC,EAAE,YAAY;IACvB,QAAQ,CAAC,IAAI,wBAAwB;IACrC,QAAQ,CAAC,QAAQ,MAAM;;IAgBvB;;;;;OAKG;IACH,SAAS,IAAI,OAAO;IAgCpB;;OAEG;IACY,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAU1C;;;OAGG;IACY,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMnD;;OAEG;IACY,kBAAkB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAKpE;;OAEG;IACY,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAS5C;;OAEG;IACH,OAAO,CAAC,mBAAmB;CAoB5B;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,aAAa,CAEnD"}

package/bridge/adapters/ext-apps.adapter.d.ts

@@ -55,10 +55,17 @@ export declare class ExtAppsAdapter extends BaseAdapter {
     private _pendingRequests;
     private _requestId;
     private _trustedOrigin;
+    private _originTrustPending;
     private _hostCapabilities;
     constructor(config?: ExtAppsAdapterConfig);
     /**
-     * Check if we're in an iframe (potential ext-apps context).
+     * Check if we're in an iframe with explicit ext-apps context.
+     *
+     * This adapter requires explicit ext-apps markers to avoid incorrectly
+     * matching other iframe-based platforms (e.g., Claude legacy artifacts).
+     *
+     * Claude MCP Apps (2026+) uses the ext-apps protocol - detected via
+     * __mcpAppsEnabled flag, which takes precedence over legacy Claude markers.
      */
     canHandle(): boolean;
     /**
@@ -74,6 +81,46 @@ export declare class ExtAppsAdapter extends BaseAdapter {
     openLink(url: string): Promise<void>;
     requestDisplayMode(mode: DisplayMode): Promise<void>;
     requestClose(): Promise<void>;
+    /**
+     * Update the model context with widget state.
+     *
+     * This allows the widget to pass contextual information to the model,
+     * which can be used to inform subsequent interactions.
+     *
+     * @param context - The context data to update
+     * @param merge - Whether to merge with existing context (default: true)
+     */
+    updateModelContext(context: unknown, merge?: boolean): Promise<void>;
+    /**
+     * Send a log message to the host.
+     *
+     * Allows the widget to forward log messages to the host for debugging
+     * or monitoring purposes.
+     *
+     * @param level - Log level (debug, info, warn, error)
+     * @param message - Log message
+     * @param data - Optional additional data
+     */
+    log(level: 'debug' | 'info' | 'warn' | 'error', message: string, data?: unknown): Promise<void>;
+    /**
+     * Register a widget-defined tool.
+     *
+     * Allows the widget to dynamically register tools that can be
+     * invoked by the model or user.
+     *
+     * @param name - Tool name
+     * @param description - Tool description
+     * @param inputSchema - Tool input schema (JSON Schema format)
+     */
+    registerTool(name: string, description: string, inputSchema: Record<string, unknown>): Promise<void>;
+    /**
+     * Unregister a widget-defined tool.
+     *
+     * Removes a previously registered tool.
+     *
+     * @param name - Tool name to unregister
+     */
+    unregisterTool(name: string): Promise<void>;
     /**
      * Setup postMessage listener for incoming messages.
      */
@@ -122,6 +169,10 @@ export declare class ExtAppsAdapter extends BaseAdapter {
      * Post a message to the parent window.
      */
     private _postMessage;
+    /**
+     * Validate that the handshake response has the expected structure.
+     */
+    private _isValidInitializeResult;
     /**
      * Perform the ui/initialize handshake with the host.
      */
@@ -129,6 +180,9 @@ export declare class ExtAppsAdapter extends BaseAdapter {
     /**
      * Check if an origin is trusted.
      * Uses trust-on-first-use if no explicit origins configured.
+     *
+     * Security note: Trust-on-first-use has inherent risks. For production,
+     * always configure explicit trustedOrigins in adapter config.
      */
     private _isOriginTrusted;
     /**
@@ -140,4 +194,10 @@ export declare class ExtAppsAdapter extends BaseAdapter {
  * Factory function for creating ext-apps adapter instances.
  */
 export declare function createExtAppsAdapter(config?: ExtAppsAdapterConfig): ExtAppsAdapter;
+/**
+ * Error thrown when a feature is not supported by the host.
+ */
+export declare class ExtAppsNotSupportedError extends Error {
+    constructor(message: string);
+}
 //# sourceMappingURL=ext-apps.adapter.d.ts.map

package/bridge/adapters/ext-apps.adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ext-apps.adapter.d.ts","sourceRoot":"","sources":["../../../src/bridge/adapters/ext-apps.adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,WAAW,EAUX,aAAa,EACd,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,WAAW,EAAwB,MAAM,gBAAgB,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,oBAAqB,SAAQ,aAAa;IACzD,OAAO,CAAC,EAAE;QACR,qFAAqF;QACrF,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,qCAAqC;QACrC,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,wCAAwC;QACxC,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,kDAAkD;QAClD,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,gDAAgD;QAChD,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,cAAe,SAAQ,WAAW;IAC7C,QAAQ,CAAC,EAAE,cAAc;IACzB,QAAQ,CAAC,IAAI,yBAAyB;IACtC,QAAQ,CAAC,QAAQ,MAAM;IAEvB,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,gBAAgB,CAA8C;IACtE,OAAO,CAAC,gBAAgB,CAOV;IACd,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,iBAAiB,CAAmD;gBAEhE,MAAM,CAAC,EAAE,oBAAoB;IAazC;;OAEG;IACH,SAAS,IAAI,OAAO;IAmBpB;;OAEG;IACY,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAe1C;;OAEG;IACM,OAAO,IAAI,IAAI;IAqBT,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAWvE,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3C,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASpC,kBAAkB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAKpD,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ5C;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAU7B;;OAEG;IACH,OAAO,CAAC,cAAc;IAuBtB;;OAEG;IACH,OAAO,CAAC,eAAe;IAcvB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA4B3B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAOxB;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAO/B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAczB;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAsBhC;;OAEG;IACH,OAAO,CAAC,gBAAgB;IASxB;;OAEG;IACH,OAAO,CAAC,YAAY;IA2BpB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IASzB;;OAEG;IACH,OAAO,CAAC,YAAY;IAWpB;;OAEG;YACW,iBAAiB;IAmD/B;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAoBxB;;OAEG;IACH,OAAO,CAAC,gBAAgB;CAUzB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,CAAC,EAAE,oBAAoB,GAAG,cAAc,CAElF"}
+{"version":3,"file":"ext-apps.adapter.d.ts","sourceRoot":"","sources":["../../../src/bridge/adapters/ext-apps.adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,WAAW,EAUX,aAAa,EACd,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,WAAW,EAAwB,MAAM,gBAAgB,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,oBAAqB,SAAQ,aAAa;IACzD,OAAO,CAAC,EAAE;QACR,qFAAqF;QACrF,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,qCAAqC;QACrC,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,wCAAwC;QACxC,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,kDAAkD;QAClD,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,gDAAgD;QAChD,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,cAAe,SAAQ,WAAW;IAC7C,QAAQ,CAAC,EAAE,cAAc;IACzB,QAAQ,CAAC,IAAI,yBAAyB;IACtC,QAAQ,CAAC,QAAQ,MAAM;IAEvB,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,gBAAgB,CAA8C;IACtE,OAAO,CAAC,gBAAgB,CAOV;IACd,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,mBAAmB,CAAS;IACpC,OAAO,CAAC,iBAAiB,CAAmD;gBAEhE,MAAM,CAAC,EAAE,oBAAoB;IAazC;;;;;;;;OAQG;IACH,SAAS,IAAI,OAAO;IA4CpB;;OAEG;IACY,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAwB1C;;OAEG;IACM,OAAO,IAAI,IAAI;IAqBT,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAWvE,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3C,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASpC,kBAAkB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAKpD,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ5C;;;;;;;;OAQG;IACG,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,UAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAQvE;;;;;;;;;OASG;IACG,GAAG,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAWrG;;;;;;;;;OASG;IACG,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ1G;;;;;;OAMG;IACG,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYjD;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAU7B;;OAEG;IACH,OAAO,CAAC,cAAc;IAuBtB;;OAEG;IACH,OAAO,CAAC,eAAe;IAcvB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA4B3B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAOxB;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAO/B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAczB;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAsBhC;;OAEG;IACH,OAAO,CAAC,gBAAgB;IASxB;;OAEG;IACH,OAAO,CAAC,YAAY;IA2BpB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IASzB;;OAEG;IACH,OAAO,CAAC,YAAY;IAWpB;;OAEG;IACH,OAAO,CAAC,wBAAwB;IA0BhC;;OAEG;YACW,iBAAiB;IA0D/B;;;;;;OAMG;IACH,OAAO,CAAC,gBAAgB;IAgCxB;;OAEG;IACH,OAAO,CAAC,gBAAgB;CAUzB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,CAAC,EAAE,oBAAoB,GAAG,cAAc,CAElF;AAED;;GAEG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,OAAO,EAAE,MAAM;CAI5B"}

package/bridge/index.js

@@ -1049,6 +1049,8 @@ var ExtAppsAdapter = class extends BaseAdapter {
   _pendingRequests = /* @__PURE__ */ new Map();
   _requestId = 0;
   _trustedOrigin;
+  _originTrustPending = false;
+  // Guard against race condition in trust-on-first-use
   _hostCapabilities = {};
   constructor(config) {
     super();
@@ -1062,7 +1064,13 @@ var ExtAppsAdapter = class extends BaseAdapter {
     };
   }
   /**
-   * Check if we're in an iframe (potential ext-apps context).
+   * Check if we're in an iframe with explicit ext-apps context.
+   *
+   * This adapter requires explicit ext-apps markers to avoid incorrectly
+   * matching other iframe-based platforms (e.g., Claude legacy artifacts).
+   *
+   * Claude MCP Apps (2026+) uses the ext-apps protocol - detected via
+   * __mcpAppsEnabled flag, which takes precedence over legacy Claude markers.
    */
   canHandle() {
     if (typeof window === "undefined") return false;
@@ -1070,8 +1078,24 @@ var ExtAppsAdapter = class extends BaseAdapter {
     if (!inIframe) return false;
     const win = window;
     if (win.openai?.canvas) return false;
+    if (win.openai && typeof win.openai.callTool === "function") return false;
     if (win.__mcpPlatform === "ext-apps") return true;
-    return true;
+    if (win.__extAppsInitialized) return true;
+    if (win.__mcpAppsEnabled) return true;
+    if (win.claude) return false;
+    if (win.__claudeArtifact) return false;
+    if (win.__mcpPlatform === "claude") return false;
+    if (typeof location !== "undefined") {
+      try {
+        const url = new URL(location.href);
+        const hostname = url.hostname.toLowerCase();
+        const isClaudeHost = hostname === "claude.ai" || hostname.endsWith(".claude.ai");
+        const isAnthropicHost = hostname === "anthropic.com" || hostname.endsWith(".anthropic.com");
+        if (isClaudeHost || isAnthropicHost) return false;
+      } catch {
+      }
+    }
+    return false;
   }
   /**
    * Initialize the ext-apps adapter with protocol handshake.
@@ -1079,9 +1103,17 @@ var ExtAppsAdapter = class extends BaseAdapter {
   async initialize() {
     if (this._initialized) return;
     this._setupMessageListener();
-    await super.initialize();
-    await this._performHandshake();
-    this._initialized = true;
+    try {
+      await super.initialize();
+      await this._performHandshake();
+      this._initialized = true;
+    } catch (error) {
+      if (this._messageListener && typeof window !== "undefined") {
+        window.removeEventListener("message", this._messageListener);
+        this._messageListener = void 0;
+      }
+      throw error;
+    }
   }
   /**
    * Dispose adapter resources.
@@ -1103,7 +1135,7 @@ var ExtAppsAdapter = class extends BaseAdapter {
   // ============================================
   async callTool(name, args) {
     if (!this._hostCapabilities.serverToolProxy) {
-      throw new Error("Server tool proxy not supported by host");
+      throw new ExtAppsNotSupportedError("Server tool proxy not supported by host");
     }
     return this._sendRequest("ui/callServerTool", {
       name,
@@ -1127,6 +1159,71 @@ var ExtAppsAdapter = class extends BaseAdapter {
     await this._sendRequest("ui/close", {});
   }
   // ============================================
+  // Extended ext-apps Methods (Full Specification)
+  // ============================================
+  /**
+   * Update the model context with widget state.
+   *
+   * This allows the widget to pass contextual information to the model,
+   * which can be used to inform subsequent interactions.
+   *
+   * @param context - The context data to update
+   * @param merge - Whether to merge with existing context (default: true)
+   */
+  async updateModelContext(context, merge = true) {
+    if (!this._hostCapabilities.modelContextUpdate) {
+      throw new ExtAppsNotSupportedError("Model context update not supported by host");
+    }
+    await this._sendRequest("ui/updateModelContext", { context, merge });
+  }
+  /**
+   * Send a log message to the host.
+   *
+   * Allows the widget to forward log messages to the host for debugging
+   * or monitoring purposes.
+   *
+   * @param level - Log level (debug, info, warn, error)
+   * @param message - Log message
+   * @param data - Optional additional data
+   */
+  async log(level, message, data) {
+    if (!this._hostCapabilities.logging) {
+      const logFn = console[level] || console.log;
+      logFn(`[Widget] ${message}`, data);
+      return;
+    }
+    await this._sendRequest("ui/log", { level, message, data });
+  }
+  /**
+   * Register a widget-defined tool.
+   *
+   * Allows the widget to dynamically register tools that can be
+   * invoked by the model or user.
+   *
+   * @param name - Tool name
+   * @param description - Tool description
+   * @param inputSchema - Tool input schema (JSON Schema format)
+   */
+  async registerTool(name, description, inputSchema) {
+    if (!this._hostCapabilities.widgetTools) {
+      throw new ExtAppsNotSupportedError("Widget tool registration not supported by host");
+    }
+    await this._sendRequest("ui/registerTool", { name, description, inputSchema });
+  }
+  /**
+   * Unregister a widget-defined tool.
+   *
+   * Removes a previously registered tool.
+   *
+   * @param name - Tool name to unregister
+   */
+  async unregisterTool(name) {
+    if (!this._hostCapabilities.widgetTools) {
+      throw new ExtAppsNotSupportedError("Widget tool unregistration not supported by host");
+    }
+    await this._sendRequest("ui/unregisterTool", { name });
+  }
+  // ============================================
   // Private: Message Handling
   // ============================================
   /**
@@ -1207,7 +1304,7 @@ var ExtAppsAdapter = class extends BaseAdapter {
    * Handle partial tool input (streaming).
    */
   _handleToolInputPartial(params) {
-    this._toolInput = { ...this._toolInput, ...params.arguments };
+    this._toolInput = { ...this._toolInput, ...params.arguments || {} };
     this._emitBridgeEvent("tool:input-partial", { arguments: this._toolInput });
   }
   /**
@@ -1301,6 +1398,20 @@ var ExtAppsAdapter = class extends BaseAdapter {
   // ============================================
   // Private: Handshake
   // ============================================
+  /**
+   * Validate that the handshake response has the expected structure.
+   */
+  _isValidInitializeResult(result) {
+    if (!result || typeof result !== "object") return false;
+    const r = result;
+    if (r["hostCapabilities"] !== void 0 && (typeof r["hostCapabilities"] !== "object" || r["hostCapabilities"] === null || Array.isArray(r["hostCapabilities"]))) {
+      return false;
+    }
+    if (r["hostContext"] !== void 0 && (typeof r["hostContext"] !== "object" || r["hostContext"] === null || Array.isArray(r["hostContext"]))) {
+      return false;
+    }
+    return true;
+  }
   /**
    * Perform the ui/initialize handshake with the host.
    */
@@ -1318,7 +1429,11 @@ var ExtAppsAdapter = class extends BaseAdapter {
       protocolVersion: this._config.options?.protocolVersion || "2024-11-05"
     };
     try {
-      const result = await this._sendRequest("ui/initialize", params);
+      const rawResult = await this._sendRequest("ui/initialize", params);
+      if (!this._isValidInitializeResult(rawResult)) {
+        throw new Error("Invalid ui/initialize response structure");
+      }
+      const result = rawResult;
       this._hostCapabilities = result.hostCapabilities || {};
       this._capabilities = {
         ...this._capabilities,
@@ -1345,6 +1460,9 @@ var ExtAppsAdapter = class extends BaseAdapter {
   /**
    * Check if an origin is trusted.
    * Uses trust-on-first-use if no explicit origins configured.
+   *
+   * Security note: Trust-on-first-use has inherent risks. For production,
+   * always configure explicit trustedOrigins in adapter config.
    */
   _isOriginTrusted(origin) {
     const trustedOrigins = this._config.options?.trustedOrigins;
@@ -1352,7 +1470,12 @@ var ExtAppsAdapter = class extends BaseAdapter {
       return trustedOrigins.includes(origin);
     }
     if (!this._trustedOrigin) {
+      if (this._originTrustPending) {
+        return false;
+      }
+      this._originTrustPending = true;
       this._trustedOrigin = origin;
+      this._originTrustPending = false;
       return true;
     }
     return this._trustedOrigin === origin;
@@ -1376,6 +1499,12 @@ var ExtAppsAdapter = class extends BaseAdapter {
 function createExtAppsAdapter(config) {
   return new ExtAppsAdapter(config);
 }
+var ExtAppsNotSupportedError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "ExtAppsNotSupportedError";
+  }
+};
 
 // libs/ui/src/bridge/adapters/claude.adapter.ts
 var ClaudeAdapter = class extends BaseAdapter {
@@ -1403,11 +1532,17 @@ var ClaudeAdapter = class extends BaseAdapter {
     };
   }
   /**
-   * Check if we're running in a Claude artifact/widget context.
+   * Check if we're running in a Claude legacy artifact/widget context.
+   *
+   * Claude MCP Apps (2026+) uses the ext-apps adapter instead.
+   * This adapter only handles legacy Claude artifacts without MCP Apps support.
    */
   canHandle() {
     if (typeof window === "undefined") return false;
     const win = window;
+    if (win.__mcpAppsEnabled) return false;
+    if (win.__mcpPlatform === "ext-apps") return false;
+    if (win.__extAppsInitialized) return false;
     if (win.__mcpPlatform === "claude") return true;
     if (win.claude) return true;
     if (win.__claudeArtifact) return true;

package/bridge/types.d.ts

@@ -267,10 +267,20 @@ export interface ExtAppsInitializeResult {
         version: string;
     };
     hostCapabilities: {
+        /** Host supports opening links */
         openLink?: boolean;
+        /** Host supports proxying tool calls to the MCP server */
         serverToolProxy?: boolean;
+        /** Host supports reading resources */
         resourceRead?: boolean;
+        /** Host supports logging */
         logging?: boolean;
+        /** Host supports model context updates */
+        modelContextUpdate?: boolean;
+        /** Host supports widget-defined tools */
+        widgetTools?: boolean;
+        /** Supported display modes */
+        displayModes?: ('inline' | 'fullscreen' | 'pip')[];
     };
     hostContext: HostContext;
 }

package/bridge/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/bridge/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,YAAY,GAAG,KAAK,GAAG,UAAU,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,kBAAkB;IAClB,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,SAAS,CAAC;IACnC,4CAA4C;IAC5C,KAAK,EAAE,OAAO,CAAC;IACf,2BAA2B;IAC3B,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,oBAAoB;IACpB,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC;IACxB,2BAA2B;IAC3B,WAAW,EAAE,WAAW,CAAC;IACzB,oBAAoB;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8BAA8B;IAC9B,SAAS,EAAE,aAAa,CAAC;IACzB,uBAAuB;IACvB,QAAQ,EAAE,cAAc,CAAC;IACzB,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,CAAC;CAClD;AAMD;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,uCAAuC;IACvC,YAAY,EAAE,OAAO,CAAC;IACtB,sDAAsD;IACtD,eAAe,EAAE,OAAO,CAAC;IACzB,8BAA8B;IAC9B,YAAY,EAAE,OAAO,CAAC;IACtB,+CAA+C;IAC/C,eAAe,EAAE,OAAO,CAAC;IACzB,uCAAuC;IACvC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,sDAAsD;IACtD,oBAAoB,EAAE,OAAO,CAAC;IAC9B,+BAA+B;IAC/B,aAAa,EAAE,OAAO,CAAC;IACvB,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAMD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,uEAAuE;IACvE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,kCAAkC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,8BAA8B;IAC9B,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAM3C;;;OAGG;IACH,SAAS,IAAI,OAAO,CAAC;IAErB;;;;OAIG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5B;;;OAGG;IACH,OAAO,IAAI,IAAI,CAAC;IAMhB,wBAAwB;IACxB,QAAQ,IAAI,OAAO,GAAG,MAAM,CAAC;IAE7B,+BAA+B;IAC/B,cAAc,IAAI,WAAW,CAAC;IAE9B,0BAA0B;IAC1B,YAAY,IAAI,aAAa,CAAC;IAE9B,wBAAwB;IACxB,SAAS,IAAI,MAAM,CAAC;IAEpB,+BAA+B;IAC/B,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAExC,6BAA6B;IAC7B,aAAa,IAAI,OAAO,CAAC;IAEzB,6CAA6C;IAC7C,oBAAoB,IAAI,OAAO,CAAC;IAEhC,iCAAiC;IACjC,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE1C,2BAA2B;IAC3B,WAAW,IAAI,cAAc,CAAC;IAE9B,wBAAwB;IACxB,WAAW,IAAI,YAAY,GAAG,SAAS,CAAC;IAExC,4BAA4B;IAC5B,cAAc,IAAI,WAAW,CAAC;IAM9B;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAExE;;;OAGG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5C;;;OAGG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAErC;;;OAGG;IACH,kBAAkB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAErD;;OAEG;IACH,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9B;;;OAGG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAMrD;;;;OAIG;IACH,eAAe,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAE/E;;;;OAIG;IACH,YAAY,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAC/D;AAMD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,kCAAkC;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,wBAAwB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,qDAAqD;IACrD,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,0CAA0C;IAC1C,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B,mCAAmC;IACnC,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,0DAA0D;IAC1D,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAE1B,iCAAiC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;CAChD;AAMD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,cAAe,SAAQ,cAAc;IACpD,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACrD,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,eAAe,EAAE;QACf,KAAK,CAAC,EAAE;YACN,WAAW,EAAE,OAAO,CAAC;SACtB,CAAC;KACH,CAAC;IACF,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,gBAAgB,EAAE;QAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IACF,WAAW,EAAE,WAAW,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD;;GAEG;AACH,MAAM,MAAM,eAAe,GACvB,cAAc,GACd,cAAc,GACd,wBAAwB,GACxB,gBAAgB,GAChB,YAAY,GACZ,oBAAoB,GACpB,aAAa,GACb,gBAAgB,CAAC;AAErB;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACpC,cAAc,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,wBAAwB,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,gBAAgB,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,YAAY,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IACrD,oBAAoB,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IAC7D,aAAa,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACjE,gBAAgB,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACvC;AAMD;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,EAAE,aAAa,KAAK,eAAe,CAAC;AAEzE;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,cAAc,CAAC;IACxB,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAMD;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,wCAAwC;IACxC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAE9B,yBAAyB;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAEvC,mCAAmC;IACnC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAEvD;;OAEG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5B;;OAEG;IACH,UAAU,IAAI,eAAe,GAAG,SAAS,CAAC;IAE1C;;OAEG;IACH,aAAa,CAAC,GAAG,EAAE,MAAM,mBAAmB,GAAG,OAAO,CAAC;IAEvD;;OAEG;IACH,OAAO,IAAI,IAAI,CAAC;IAGhB,QAAQ,IAAI,OAAO,GAAG,MAAM,CAAC;IAC7B,cAAc,IAAI,WAAW,CAAC;IAC9B,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,aAAa,IAAI,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxE,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,kBAAkB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACrD,eAAe,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAC/E,YAAY,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAC/D"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/bridge/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,YAAY,GAAG,KAAK,GAAG,UAAU,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,kBAAkB;IAClB,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,SAAS,CAAC;IACnC,4CAA4C;IAC5C,KAAK,EAAE,OAAO,CAAC;IACf,2BAA2B;IAC3B,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,oBAAoB;IACpB,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC;IACxB,2BAA2B;IAC3B,WAAW,EAAE,WAAW,CAAC;IACzB,oBAAoB;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8BAA8B;IAC9B,SAAS,EAAE,aAAa,CAAC;IACzB,uBAAuB;IACvB,QAAQ,EAAE,cAAc,CAAC;IACzB,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,CAAC;CAClD;AAMD;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,uCAAuC;IACvC,YAAY,EAAE,OAAO,CAAC;IACtB,sDAAsD;IACtD,eAAe,EAAE,OAAO,CAAC;IACzB,8BAA8B;IAC9B,YAAY,EAAE,OAAO,CAAC;IACtB,+CAA+C;IAC/C,eAAe,EAAE,OAAO,CAAC;IACzB,uCAAuC;IACvC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,sDAAsD;IACtD,oBAAoB,EAAE,OAAO,CAAC;IAC9B,+BAA+B;IAC/B,aAAa,EAAE,OAAO,CAAC;IACvB,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAMD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,uEAAuE;IACvE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,kCAAkC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,8BAA8B;IAC9B,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAM3C;;;OAGG;IACH,SAAS,IAAI,OAAO,CAAC;IAErB;;;;OAIG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5B;;;OAGG;IACH,OAAO,IAAI,IAAI,CAAC;IAMhB,wBAAwB;IACxB,QAAQ,IAAI,OAAO,GAAG,MAAM,CAAC;IAE7B,+BAA+B;IAC/B,cAAc,IAAI,WAAW,CAAC;IAE9B,0BAA0B;IAC1B,YAAY,IAAI,aAAa,CAAC;IAE9B,wBAAwB;IACxB,SAAS,IAAI,MAAM,CAAC;IAEpB,+BAA+B;IAC/B,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAExC,6BAA6B;IAC7B,aAAa,IAAI,OAAO,CAAC;IAEzB,6CAA6C;IAC7C,oBAAoB,IAAI,OAAO,CAAC;IAEhC,iCAAiC;IACjC,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE1C,2BAA2B;IAC3B,WAAW,IAAI,cAAc,CAAC;IAE9B,wBAAwB;IACxB,WAAW,IAAI,YAAY,GAAG,SAAS,CAAC;IAExC,4BAA4B;IAC5B,cAAc,IAAI,WAAW,CAAC;IAM9B;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAExE;;;OAGG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5C;;;OAGG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAErC;;;OAGG;IACH,kBAAkB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAErD;;OAEG;IACH,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9B;;;OAGG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAMrD;;;;OAIG;IACH,eAAe,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAE/E;;;;OAIG;IACH,YAAY,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAC/D;AAMD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,kCAAkC;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,wBAAwB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,qDAAqD;IACrD,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,0CAA0C;IAC1C,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B,mCAAmC;IACnC,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,0DAA0D;IAC1D,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAE1B,iCAAiC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;CAChD;AAMD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,cAAe,SAAQ,cAAc;IACpD,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACrD,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,eAAe,EAAE;QACf,KAAK,CAAC,EAAE;YACN,WAAW,EAAE,OAAO,CAAC;SACtB,CAAC;KACH,CAAC;IACF,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,gBAAgB,EAAE;QAChB,kCAAkC;QAClC,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,0DAA0D;QAC1D,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,sCAAsC;QACtC,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,4BAA4B;QAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,0CAA0C;QAC1C,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B,yCAAyC;QACzC,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,8BAA8B;QAC9B,YAAY,CAAC,EAAE,CAAC,QAAQ,GAAG,YAAY,GAAG,KAAK,CAAC,EAAE,CAAC;KACpD,CAAC;IACF,WAAW,EAAE,WAAW,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD;;GAEG;AACH,MAAM,MAAM,eAAe,GACvB,cAAc,GACd,cAAc,GACd,wBAAwB,GACxB,gBAAgB,GAChB,YAAY,GACZ,oBAAoB,GACpB,aAAa,GACb,gBAAgB,CAAC;AAErB;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACpC,cAAc,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,wBAAwB,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,gBAAgB,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,YAAY,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IACrD,oBAAoB,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IAC7D,aAAa,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACjE,gBAAgB,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACvC;AAMD;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,EAAE,aAAa,KAAK,eAAe,CAAC;AAEzE;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,cAAc,CAAC;IACxB,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAMD;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,wCAAwC;IACxC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAE9B,yBAAyB;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAEvC,mCAAmC;IACnC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAEvD;;OAEG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5B;;OAEG;IACH,UAAU,IAAI,eAAe,GAAG,SAAS,CAAC;IAE1C;;OAEG;IACH,aAAa,CAAC,GAAG,EAAE,MAAM,mBAAmB,GAAG,OAAO,CAAC;IAEvD;;OAEG;IACH,OAAO,IAAI,IAAI,CAAC;IAGhB,QAAQ,IAAI,OAAO,GAAG,MAAM,CAAC;IAC7B,cAAc,IAAI,WAAW,CAAC;IAC9B,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,aAAa,IAAI,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxE,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,kBAAkB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACrD,eAAe,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAC/E,YAAY,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAC/D"}

package/esm/bridge/index.mjs

@@ -997,6 +997,8 @@ var ExtAppsAdapter = class extends BaseAdapter {
   _pendingRequests = /* @__PURE__ */ new Map();
   _requestId = 0;
   _trustedOrigin;
+  _originTrustPending = false;
+  // Guard against race condition in trust-on-first-use
   _hostCapabilities = {};
   constructor(config) {
     super();
@@ -1010,7 +1012,13 @@ var ExtAppsAdapter = class extends BaseAdapter {
     };
   }
   /**
-   * Check if we're in an iframe (potential ext-apps context).
+   * Check if we're in an iframe with explicit ext-apps context.
+   *
+   * This adapter requires explicit ext-apps markers to avoid incorrectly
+   * matching other iframe-based platforms (e.g., Claude legacy artifacts).
+   *
+   * Claude MCP Apps (2026+) uses the ext-apps protocol - detected via
+   * __mcpAppsEnabled flag, which takes precedence over legacy Claude markers.
    */
   canHandle() {
     if (typeof window === "undefined") return false;
@@ -1018,8 +1026,24 @@ var ExtAppsAdapter = class extends BaseAdapter {
     if (!inIframe) return false;
     const win = window;
     if (win.openai?.canvas) return false;
+    if (win.openai && typeof win.openai.callTool === "function") return false;
     if (win.__mcpPlatform === "ext-apps") return true;
-    return true;
+    if (win.__extAppsInitialized) return true;
+    if (win.__mcpAppsEnabled) return true;
+    if (win.claude) return false;
+    if (win.__claudeArtifact) return false;
+    if (win.__mcpPlatform === "claude") return false;
+    if (typeof location !== "undefined") {
+      try {
+        const url = new URL(location.href);
+        const hostname = url.hostname.toLowerCase();
+        const isClaudeHost = hostname === "claude.ai" || hostname.endsWith(".claude.ai");
+        const isAnthropicHost = hostname === "anthropic.com" || hostname.endsWith(".anthropic.com");
+        if (isClaudeHost || isAnthropicHost) return false;
+      } catch {
+      }
+    }
+    return false;
   }
   /**
    * Initialize the ext-apps adapter with protocol handshake.
@@ -1027,9 +1051,17 @@ var ExtAppsAdapter = class extends BaseAdapter {
   async initialize() {
     if (this._initialized) return;
     this._setupMessageListener();
-    await super.initialize();
-    await this._performHandshake();
-    this._initialized = true;
+    try {
+      await super.initialize();
+      await this._performHandshake();
+      this._initialized = true;
+    } catch (error) {
+      if (this._messageListener && typeof window !== "undefined") {
+        window.removeEventListener("message", this._messageListener);
+        this._messageListener = void 0;
+      }
+      throw error;
+    }
   }
   /**
    * Dispose adapter resources.
@@ -1051,7 +1083,7 @@ var ExtAppsAdapter = class extends BaseAdapter {
   // ============================================
   async callTool(name, args) {
     if (!this._hostCapabilities.serverToolProxy) {
-      throw new Error("Server tool proxy not supported by host");
+      throw new ExtAppsNotSupportedError("Server tool proxy not supported by host");
     }
     return this._sendRequest("ui/callServerTool", {
       name,
@@ -1075,6 +1107,71 @@ var ExtAppsAdapter = class extends BaseAdapter {
     await this._sendRequest("ui/close", {});
   }
   // ============================================
+  // Extended ext-apps Methods (Full Specification)
+  // ============================================
+  /**
+   * Update the model context with widget state.
+   *
+   * This allows the widget to pass contextual information to the model,
+   * which can be used to inform subsequent interactions.
+   *
+   * @param context - The context data to update
+   * @param merge - Whether to merge with existing context (default: true)
+   */
+  async updateModelContext(context, merge = true) {
+    if (!this._hostCapabilities.modelContextUpdate) {
+      throw new ExtAppsNotSupportedError("Model context update not supported by host");
+    }
+    await this._sendRequest("ui/updateModelContext", { context, merge });
+  }
+  /**
+   * Send a log message to the host.
+   *
+   * Allows the widget to forward log messages to the host for debugging
+   * or monitoring purposes.
+   *
+   * @param level - Log level (debug, info, warn, error)
+   * @param message - Log message
+   * @param data - Optional additional data
+   */
+  async log(level, message, data) {
+    if (!this._hostCapabilities.logging) {
+      const logFn = console[level] || console.log;
+      logFn(`[Widget] ${message}`, data);
+      return;
+    }
+    await this._sendRequest("ui/log", { level, message, data });
+  }
+  /**
+   * Register a widget-defined tool.
+   *
+   * Allows the widget to dynamically register tools that can be
+   * invoked by the model or user.
+   *
+   * @param name - Tool name
+   * @param description - Tool description
+   * @param inputSchema - Tool input schema (JSON Schema format)
+   */
+  async registerTool(name, description, inputSchema) {
+    if (!this._hostCapabilities.widgetTools) {
+      throw new ExtAppsNotSupportedError("Widget tool registration not supported by host");
+    }
+    await this._sendRequest("ui/registerTool", { name, description, inputSchema });
+  }
+  /**
+   * Unregister a widget-defined tool.
+   *
+   * Removes a previously registered tool.
+   *
+   * @param name - Tool name to unregister
+   */
+  async unregisterTool(name) {
+    if (!this._hostCapabilities.widgetTools) {
+      throw new ExtAppsNotSupportedError("Widget tool unregistration not supported by host");
+    }
+    await this._sendRequest("ui/unregisterTool", { name });
+  }
+  // ============================================
   // Private: Message Handling
   // ============================================
   /**
@@ -1155,7 +1252,7 @@ var ExtAppsAdapter = class extends BaseAdapter {
    * Handle partial tool input (streaming).
    */
   _handleToolInputPartial(params) {
-    this._toolInput = { ...this._toolInput, ...params.arguments };
+    this._toolInput = { ...this._toolInput, ...params.arguments || {} };
     this._emitBridgeEvent("tool:input-partial", { arguments: this._toolInput });
   }
   /**
@@ -1249,6 +1346,20 @@ var ExtAppsAdapter = class extends BaseAdapter {
   // ============================================
   // Private: Handshake
   // ============================================
+  /**
+   * Validate that the handshake response has the expected structure.
+   */
+  _isValidInitializeResult(result) {
+    if (!result || typeof result !== "object") return false;
+    const r = result;
+    if (r["hostCapabilities"] !== void 0 && (typeof r["hostCapabilities"] !== "object" || r["hostCapabilities"] === null || Array.isArray(r["hostCapabilities"]))) {
+      return false;
+    }
+    if (r["hostContext"] !== void 0 && (typeof r["hostContext"] !== "object" || r["hostContext"] === null || Array.isArray(r["hostContext"]))) {
+      return false;
+    }
+    return true;
+  }
   /**
    * Perform the ui/initialize handshake with the host.
    */
@@ -1266,7 +1377,11 @@ var ExtAppsAdapter = class extends BaseAdapter {
       protocolVersion: this._config.options?.protocolVersion || "2024-11-05"
     };
     try {
-      const result = await this._sendRequest("ui/initialize", params);
+      const rawResult = await this._sendRequest("ui/initialize", params);
+      if (!this._isValidInitializeResult(rawResult)) {
+        throw new Error("Invalid ui/initialize response structure");
+      }
+      const result = rawResult;
       this._hostCapabilities = result.hostCapabilities || {};
       this._capabilities = {
         ...this._capabilities,
@@ -1293,6 +1408,9 @@ var ExtAppsAdapter = class extends BaseAdapter {
   /**
    * Check if an origin is trusted.
    * Uses trust-on-first-use if no explicit origins configured.
+   *
+   * Security note: Trust-on-first-use has inherent risks. For production,
+   * always configure explicit trustedOrigins in adapter config.
    */
   _isOriginTrusted(origin) {
     const trustedOrigins = this._config.options?.trustedOrigins;
@@ -1300,7 +1418,12 @@ var ExtAppsAdapter = class extends BaseAdapter {
       return trustedOrigins.includes(origin);
     }
     if (!this._trustedOrigin) {
+      if (this._originTrustPending) {
+        return false;
+      }
+      this._originTrustPending = true;
       this._trustedOrigin = origin;
+      this._originTrustPending = false;
       return true;
     }
     return this._trustedOrigin === origin;
@@ -1324,6 +1447,12 @@ var ExtAppsAdapter = class extends BaseAdapter {
 function createExtAppsAdapter(config) {
   return new ExtAppsAdapter(config);
 }
+var ExtAppsNotSupportedError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "ExtAppsNotSupportedError";
+  }
+};
 
 // libs/ui/src/bridge/adapters/claude.adapter.ts
 var ClaudeAdapter = class extends BaseAdapter {
@@ -1351,11 +1480,17 @@ var ClaudeAdapter = class extends BaseAdapter {
     };
   }
   /**
-   * Check if we're running in a Claude artifact/widget context.
+   * Check if we're running in a Claude legacy artifact/widget context.
+   *
+   * Claude MCP Apps (2026+) uses the ext-apps adapter instead.
+   * This adapter only handles legacy Claude artifacts without MCP Apps support.
    */
   canHandle() {
     if (typeof window === "undefined") return false;
     const win = window;
+    if (win.__mcpAppsEnabled) return false;
+    if (win.__mcpPlatform === "ext-apps") return false;
+    if (win.__extAppsInitialized) return false;
     if (win.__mcpPlatform === "claude") return true;
     if (win.claude) return true;
     if (win.__claudeArtifact) return true;

package/esm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/ui",
-  "version": "0.7.2",
+  "version": "0.8.1",
   "description": "FrontMCP UI - React components and hooks for MCP applications",
   "author": "AgentFront <info@agentfront.dev>",
   "homepage": "https://docs.agentfront.dev",
@@ -52,6 +52,9 @@
     },
     "./esm": null
   },
+  "engines": {
+    "node": ">=22.0.0"
+  },
   "dependencies": {
     "@mdx-js/mdx": "^3.1.1",
     "@swc/core": "^1.5.0",
@@ -61,7 +64,7 @@
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0",
     "react-dom": "^18.0.0 || ^19.0.0",
-    "@frontmcp/uipack": "0.7.2"
+    "@frontmcp/uipack": "0.8.1"
   },
   "devDependencies": {
     "@types/react": "^19.0.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/ui",
-  "version": "0.7.2",
+  "version": "0.8.1",
   "description": "FrontMCP UI - React components and hooks for MCP applications",
   "author": "AgentFront <info@agentfront.dev>",
   "homepage": "https://docs.agentfront.dev",
@@ -52,6 +52,9 @@
     },
     "./esm": null
   },
+  "engines": {
+    "node": ">=22.0.0"
+  },
   "dependencies": {
     "@mdx-js/mdx": "^3.1.1",
     "@swc/core": "^1.5.0",
@@ -61,7 +64,7 @@
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0",
     "react-dom": "^18.0.0 || ^19.0.0",
-    "@frontmcp/uipack": "0.7.2"
+    "@frontmcp/uipack": "0.8.1"
   },
   "devDependencies": {
     "@types/react": "^19.0.0",