@frontmcp/uipack 0.6.2 → 0.7.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/uipack",
-  "version": "0.6.2",
+  "version": "0.7.1",
   "description": "FrontMCP UIpack - Bundling, build tools, and platform adapters for MCP UI development (React-free core)",
   "author": "AgentFront <info@agentfront.dev>",
   "homepage": "https://docs.agentfront.dev",
@@ -55,8 +55,9 @@
     "./esm": null
   },
   "dependencies": {
+    "@frontmcp/utils": "0.7.1",
     "@swc/core": "^1.5.0",
-    "enclave-vm": "^1.0.3",
+    "enclave-vm": "^2.7.0",
     "esbuild": "^0.27.1",
     "handlebars": "^4.7.8",
     "zod": "^4.0.0"

package/preview/generic-preview.d.ts

@@ -2,9 +2,8 @@
  * Generic Preview Handler
  *
  * Generates metadata for generic MCP clients.
- * Uses frontmcp/* namespace with ui/* fallback for compatibility.
- *
- * Behaves like OpenAI but with different metadata namespaces.
+ * Uses ui/* namespace for maximum compatibility with MCP clients
+ * (Claude, Cursor, etc.).
  *
  * @packageDocumentation
  */
@@ -12,8 +11,8 @@ import type { PreviewHandler, DiscoveryPreviewOptions, ExecutionPreviewOptions,
 /**
  * Preview handler for generic MCP clients.
  *
- * Uses the same patterns as OpenAI but with frontmcp/* namespace
- * and ui/* fallback for maximum compatibility.
+ * Uses the ui/* namespace for maximum compatibility with
+ * MCP clients (Claude, Cursor, etc.).
  *
  * @example
  * ```typescript

package/preview/generic-preview.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generic-preview.d.ts","sourceRoot":"","sources":["../../src/preview/generic-preview.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,uBAAuB,EACvB,uBAAuB,EACvB,aAAa,EACb,aAAa,EAGd,MAAM,SAAS,CAAC;AAsBjB;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,cAAe,YAAW,cAAc;IACnD,QAAQ,CAAC,QAAQ,EAAG,SAAS,CAAU;IAEvC;;OAEG;IACH,YAAY,CAAC,OAAO,EAAE,uBAAuB,GAAG,aAAa;IAkB7D;;OAEG;IACH,YAAY,CAAC,OAAO,EAAE,uBAAuB,GAAG,aAAa;IAsB7D,OAAO,CAAC,kBAAkB;IAqB1B,OAAO,CAAC,kBAAkB;IAiB1B,OAAO,CAAC,kBAAkB;IAgB1B,OAAO,CAAC,kBAAkB;IA4B1B,OAAO,CAAC,kBAAkB;IA+B1B,OAAO,CAAC,kBAAkB;IAwB1B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAuCzB;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;CA6BhC"}
+{"version":3,"file":"generic-preview.d.ts","sourceRoot":"","sources":["../../src/preview/generic-preview.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,uBAAuB,EACvB,uBAAuB,EACvB,aAAa,EACb,aAAa,EAGd,MAAM,SAAS,CAAC;AAsBjB;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,cAAe,YAAW,cAAc;IACnD,QAAQ,CAAC,QAAQ,EAAG,SAAS,CAAU;IAEvC;;OAEG;IACH,YAAY,CAAC,OAAO,EAAE,uBAAuB,GAAG,aAAa;IAkB7D;;OAEG;IACH,YAAY,CAAC,OAAO,EAAE,uBAAuB,GAAG,aAAa;IAsB7D,OAAO,CAAC,kBAAkB;IAoB1B,OAAO,CAAC,kBAAkB;IAkB1B,OAAO,CAAC,kBAAkB;IAgB1B,OAAO,CAAC,kBAAkB;IA2B1B,OAAO,CAAC,kBAAkB;IA8B1B,OAAO,CAAC,kBAAkB;IAuB1B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAuCzB;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;CA6BhC"}

package/preview/types.d.ts

@@ -165,7 +165,15 @@ export interface ClaudeMetaFields {
     'claude/prefersBorder'?: boolean;
 }
 /**
- * FrontMCP/Generic metadata fields.
+ * Generic MCP metadata fields.
+ * Uses ui/* namespace for maximum compatibility with MCP clients.
+ *
+ * Note: This type includes both legacy frontmcp/* and new ui/* keys
+ * for type compatibility during the migration period. New code should
+ * only emit ui/* keys. The frontmcp/* keys will be removed in a future
+ * major version.
+ *
+ * @deprecated frontmcp/* keys are deprecated - use ui/* keys instead
  */
 export interface FrontMCPMetaFields {
     'frontmcp/html'?: string;
@@ -177,6 +185,12 @@ export interface FrontMCPMetaFields {
     };
     'ui/html'?: string;
     'ui/mimeType'?: string;
+    'ui/resourceUri'?: string;
+    'ui/component'?: string;
+    'ui/widgetCSP'?: {
+        connectDomains?: string[];
+        resourceDomains?: string[];
+    };
 }
 /**
  * Combined metadata fields for all platforms.

package/preview/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/preview/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAG7D,YAAY,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAMhE;;;;;;;;;;GAUG;AACH,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAMvD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,WAAW,EAAE,aAAa,CAAC;IAE3B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,WAAW,EAAE,aAAa,CAAC;IAE3B;;OAEG;IACH,KAAK,EAAE,OAAO,CAAC;IAEf;;OAEG;IACH,MAAM,EAAE,OAAO,CAAC;IAEhB;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB;;OAEG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAEzB;;OAEG;IACH,WAAW,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IAErC;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAMD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE/B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE/B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;OAEG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAMD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAE5B;;;;;OAKG;IACH,YAAY,CAAC,OAAO,EAAE,uBAAuB,GAAG,aAAa,CAAC;IAE9D;;;;;OAKG;IACH,YAAY,CAAC,OAAO,EAAE,uBAAuB,GAAG,aAAa,CAAC;CAC/D;AAMD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE;QACnB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC;IACF,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,oBAAoB,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC9C,+BAA+B,CAAC,EAAE,OAAO,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oBAAoB,CAAC,EAAE;QACrB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC;IACF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,kBAAkB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/preview/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAG7D,YAAY,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAMhE;;;;;;;;;;GAUG;AACH,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAMvD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,WAAW,EAAE,aAAa,CAAC;IAE3B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,WAAW,EAAE,aAAa,CAAC;IAE3B;;OAEG;IACH,KAAK,EAAE,OAAO,CAAC;IAEf;;OAEG;IACH,MAAM,EAAE,OAAO,CAAC;IAEhB;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB;;OAEG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAEzB;;OAEG;IACH,WAAW,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IAErC;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAMD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE/B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE/B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;OAEG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAMD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAE5B;;;;;OAKG;IACH,YAAY,CAAC,OAAO,EAAE,uBAAuB,GAAG,aAAa,CAAC;IAE9D;;;;;OAKG;IACH,YAAY,CAAC,OAAO,EAAE,uBAAuB,GAAG,aAAa,CAAC;CAC/D;AAMD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE;QACnB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC;IACF,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,oBAAoB,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC9C,+BAA+B,CAAC,EAAE,OAAO,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,kBAAkB;IAEjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oBAAoB,CAAC,EAAE;QACrB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC;IAEF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE;QACf,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;KAC5B,CAAC;CACH;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,kBAAkB,CAAC"}

package/registry/index.js

@@ -570,31 +570,12 @@ var init_theme2 = __esm({
   }
 });
 
-// libs/uipack/src/utils/escape-html.ts
-function escapeHtml(str) {
-  if (str === null || str === void 0) {
-    return "";
-  }
-  const s = String(str);
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
-function escapeJsString(str) {
-  return str.replace(/\\/g, "\\\\").replace(/'/g, "\\'").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
-function escapeScriptClose(jsonString) {
-  return jsonString.replace(/<\//g, "<\\/");
-}
-var init_escape_html = __esm({
-  "libs/uipack/src/utils/escape-html.ts"() {
-    "use strict";
-  }
-});
-
 // libs/uipack/src/utils/index.ts
+var import_utils;
 var init_utils = __esm({
   "libs/uipack/src/utils/index.ts"() {
     "use strict";
-    init_escape_html();
+    import_utils = require("@frontmcp/utils");
   }
 });
 
@@ -848,6 +829,9 @@ function isTemplateBuilderFunction(fn) {
   return true;
 }
 function containsJsx(source) {
+  if (source.length > MAX_TEMPLATE_LENGTH) {
+    return false;
+  }
   if (/<[A-Z][a-zA-Z0-9]*(\s|>|\/)/.test(source)) {
     return true;
   }
@@ -872,6 +856,9 @@ function containsJsx(source) {
   return false;
 }
 function containsMdxSyntax(source) {
+  if (source.length > MAX_TEMPLATE_LENGTH) {
+    return false;
+  }
   if (/<[A-Z][a-zA-Z0-9]*/.test(source)) {
     return true;
   }
@@ -945,9 +932,11 @@ function detectTemplateType(template) {
     reason: "Unknown template type, defaulting to HTML"
   };
 }
+var MAX_TEMPLATE_LENGTH;
 var init_detect = __esm({
   "libs/uipack/src/renderers/utils/detect.ts"() {
     "use strict";
+    MAX_TEMPLATE_LENGTH = 5e4;
   }
 });
 
@@ -1137,7 +1126,7 @@ var init_helpers = __esm({
     idCounter = 0;
     builtinHelpers = {
       // Escaping
-      escapeHtml,
+      escapeHtml: import_utils.escapeHtml,
       // Formatting
       formatDate,
       formatCurrency,
@@ -1308,7 +1297,7 @@ __export(handlebars_exports, {
   createHandlebarsRenderer: () => createHandlebarsRenderer,
   defaultValue: () => defaultValue,
   eq: () => eq,
-  escapeHtml: () => escapeHtml,
+  escapeHtml: () => import_utils.escapeHtml,
   extractAll: () => extractAll,
   extractExpressions: () => extractExpressions,
   extractInputPaths: () => extractInputPaths,
@@ -1954,12 +1943,12 @@ var init_mdx_client_renderer = __esm({
           ...outputProps,
           ...props
         };
-        const escapedMdx = escapeScriptClose(JSON.stringify(template));
-        const escapedProps = escapeScriptClose(JSON.stringify(spreadProps));
-        const safeContainerId = escapeJsString(containerId);
-        const loadingHtml = showLoading ? `<div class="mdx-loading">${escapeHtml(loadingMessage)}</div>` : "";
+        const escapedMdx = (0, import_utils.escapeScriptClose)(JSON.stringify(template));
+        const escapedProps = (0, import_utils.escapeScriptClose)(JSON.stringify(spreadProps));
+        const safeContainerId = (0, import_utils.escapeJsString)(containerId);
+        const loadingHtml = showLoading ? `<div class="mdx-loading">${(0, import_utils.escapeHtml)(loadingMessage)}</div>` : "";
         return `
-<div id="${escapeHtml(containerId)}">${loadingHtml}</div>
+<div id="${(0, import_utils.escapeHtml)(containerId)}">${loadingHtml}</div>
 <script type="module">
 (async function() {
   try {
@@ -2031,7 +2020,10 @@ async function loadSwcTransform() {
     return swcTransform;
   }
   try {
-    const swc = await import("@swc/core");
+    const swc = await import(
+      /* webpackIgnore: true */
+      "@swc/core"
+    );
     swcTransform = swc.transform;
     return swcTransform;
   } catch {
@@ -2164,11 +2156,12 @@ var init_renderers = __esm({
 function sha256(content) {
   return (0, import_crypto.createHash)("sha256").update(content, "utf8").digest("hex");
 }
-var import_crypto;
+var import_crypto, import_utils6;
 var init_hash_calculator = __esm({
   "libs/uipack/src/bundler/file-cache/hash-calculator.ts"() {
     "use strict";
     import_crypto = require("crypto");
+    import_utils6 = require("@frontmcp/utils");
   }
 });
 
@@ -3019,7 +3012,11 @@ FrontMcpBridge.prototype._setupDataToolCallHandler = function() {
 };
 `.trim();
 }
+var MAX_MINIFY_CODE_LENGTH = 5e5;
 function minifyJS(code) {
+  if (code.length > MAX_MINIFY_CODE_LENGTH) {
+    return code;
+  }
   return code.replace(/\/\*[\s\S]*?\*\//g, "").replace(/\/\/.*$/gm, "").replace(/\s+/g, " ").replace(/\s*([{};,:()[\]])\s*/g, "$1").replace(/;\}/g, "}").trim();
 }
 function generatePlatformBundle(platform, options = {}) {
@@ -3126,7 +3123,7 @@ function createTemplateHelpers() {
     /**
      * Escape HTML special characters to prevent XSS
      */
-    escapeHtml,
+    escapeHtml: import_utils.escapeHtml,
     /**
      * Format a date for display
      */
@@ -3243,7 +3240,7 @@ function wrapToolUIUniversal(options) {
     resourceMode
   });
   const bridgeScript = includeBridge ? BRIDGE_SCRIPT_TAGS.universal : "";
-  const pageTitle = title || `${escapeHtml(toolName)} - Tool Result`;
+  const pageTitle = title || `${(0, import_utils.escapeHtml)(toolName)} - Tool Result`;
   return `<!DOCTYPE html>
 <html lang="en">
 <head>
@@ -3468,7 +3465,7 @@ function wrapLeanWidgetShell(options) {
 <head>
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>${escapeHtml(title || toolName)}</title>
+  <title>${(0, import_utils.escapeHtml)(title || toolName)}</title>
   ${fontPreconnect}
   ${fontStylesheets}
   ${tailwindScript}
@@ -3869,7 +3866,7 @@ function wrapHybridWidgetShell(options) {
 <head>
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>${escapeHtml(title || toolName)}</title>
+  <title>${(0, import_utils.escapeHtml)(title || toolName)}</title>
   ${fontPreconnect}
   ${fontStylesheets}
   ${tailwindScript}
@@ -4411,7 +4408,7 @@ function wrapStaticWidgetUniversal(options) {
     }, 100);
   }
   </script>` : "";
-  const pageTitle = title || `${escapeHtml(toolName)} - Tool Widget`;
+  const pageTitle = title || `${(0, import_utils.escapeHtml)(toolName)} - Tool Widget`;
   const loaderHtml = isReactBased && componentCode && !hasEmbeddedData ? `
   <!-- Loading State -->
   <div id="frontmcp-loader" style="display: flex; align-items: center; justify-content: center; padding: 2rem; gap: 0.5rem;">
@@ -4461,7 +4458,11 @@ function wrapStaticWidgetUniversal(options) {
 }
 
 // libs/uipack/src/registry/render-template.ts
+var MAX_MDX_SOURCE_LENGTH = 1e5;
 function containsMdxSyntax2(source) {
+  if (source.length > MAX_MDX_SOURCE_LENGTH) {
+    return false;
+  }
   if (/<[A-Z][a-zA-Z0-9]*/.test(source)) {
     return true;
   }
@@ -4629,16 +4630,13 @@ function buildUIMeta(options) {
     case "generic-mcp":
     case "gemini":
     default:
-      meta["frontmcp/html"] = html;
-      meta["frontmcp/mimeType"] = "text/html+mcp";
-      if (rendererType) meta["frontmcp/type"] = rendererType;
-      if (contentHash) meta["frontmcp/contentHash"] = contentHash;
-      if (manifestUri) meta["frontmcp/manifestUri"] = manifestUri;
-      if (token) meta["frontmcp/widgetToken"] = token;
-      if (directUrl) meta["frontmcp/directUrl"] = directUrl;
       meta["ui/html"] = html;
       meta["ui/mimeType"] = "text/html+mcp";
       if (rendererType) meta["ui/type"] = rendererType;
+      if (contentHash) meta["ui/contentHash"] = contentHash;
+      if (manifestUri) meta["ui/manifestUri"] = manifestUri;
+      if (token) meta["ui/widgetToken"] = token;
+      if (directUrl) meta["ui/directUrl"] = directUrl;
       if (platformType === "claude") {
         return buildClaudeMeta(meta, uiConfig);
       } else if (platformType === "gemini") {
@@ -4687,34 +4685,37 @@ function buildIDEMeta(meta, uiConfig) {
   }
   return meta;
 }
-function buildFrontMCPCSP(csp) {
-  const result = {};
-  if (csp.connectDomains?.length) {
-    result.connectDomains = csp.connectDomains;
-  }
-  if (csp.resourceDomains?.length) {
-    result.resourceDomains = csp.resourceDomains;
-  }
-  return result;
-}
 function buildGenericMeta(meta, uiConfig) {
-  if (uiConfig.widgetAccessible) {
-    meta["frontmcp/widgetAccessible"] = true;
-  }
   if (uiConfig.csp) {
-    meta["frontmcp/widgetCSP"] = buildFrontMCPCSP(uiConfig.csp);
+    const csp = {};
+    if (uiConfig.csp.connectDomains?.length) {
+      csp.connectDomains = uiConfig.csp.connectDomains;
+    }
+    if (uiConfig.csp.resourceDomains?.length) {
+      csp.resourceDomains = uiConfig.csp.resourceDomains;
+    }
+    if (Object.keys(csp).length > 0) {
+      meta["ui/csp"] = csp;
+    }
   }
   if (uiConfig.displayMode) {
-    meta["frontmcp/displayMode"] = uiConfig.displayMode;
-  }
-  if (uiConfig.widgetDescription) {
-    meta["frontmcp/widgetDescription"] = uiConfig.widgetDescription;
+    const displayModeMap = {
+      inline: "inline",
+      fullscreen: "fullscreen",
+      pip: "pip",
+      widget: "inline",
+      panel: "fullscreen"
+    };
+    const mappedMode = displayModeMap[uiConfig.displayMode];
+    if (mappedMode) {
+      meta["ui/displayMode"] = mappedMode;
+    }
   }
   if (uiConfig.prefersBorder !== void 0) {
-    meta["frontmcp/prefersBorder"] = uiConfig.prefersBorder;
+    meta["ui/prefersBorder"] = uiConfig.prefersBorder;
   }
   if (uiConfig.sandboxDomain) {
-    meta["frontmcp/domain"] = uiConfig.sandboxDomain;
+    meta["ui/domain"] = uiConfig.sandboxDomain;
   }
   return meta;
 }
@@ -4988,7 +4989,7 @@ function getSchemaPathStrings(schema, prefix = "output") {
 }
 
 // libs/uipack/src/validation/template-validator.ts
-init_expression_extractor();
+init_handlebars();
 function validateTemplate(template, outputSchema, options = {}) {
   const { inputSchema, warnOnOptional = true, suggestSimilar = true, maxSuggestionDistance = 3 } = options;
   const errors = [];
@@ -5338,7 +5339,7 @@ function safeInputToRecord(input) {
   return {};
 }
 var defaultHelpers = {
-  escapeHtml,
+  escapeHtml: import_utils.escapeHtml,
   formatDate: (date, format) => {
     const d = date instanceof Date ? date : new Date(date);
     if (format === "iso") return d.toISOString();

package/registry/render-template.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"render-template.d.ts","sourceRoot":"","sources":["../../src/registry/render-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAmB,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAOrF;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAsCzD;AAkCD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAyB3D;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,+CAA+C;IAE/C,QAAQ,EAAE,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC;IAC/E,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,4CAA4C;IAC5C,MAAM,EAAE,OAAO,CAAC;IAChB,4CAA4C;IAC5C,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,oDAAoD;IAEpD,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CACrC;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAuBzE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE;IAAE,EAAE,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,QAAQ,IAAI;IAAE,EAAE,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;CAAE,CAG9G;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmGpG"}
+{"version":3,"file":"render-template.d.ts","sourceRoot":"","sources":["../../src/registry/render-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAmB,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAYrF;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CA2CzD;AAkCD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAyB3D;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,+CAA+C;IAE/C,QAAQ,EAAE,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC;IAC/E,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,4CAA4C;IAC5C,MAAM,EAAE,OAAO,CAAC;IAChB,4CAA4C;IAC5C,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,oDAAoD;IAEpD,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CACrC;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAuBzE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE;IAAE,EAAE,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,QAAQ,IAAI;IAAE,EAAE,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;CAAE,CAG9G;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmGpG"}

package/renderers/index.js

@@ -30,31 +30,12 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// libs/uipack/src/utils/escape-html.ts
-function escapeHtml(str) {
-  if (str === null || str === void 0) {
-    return "";
-  }
-  const s = String(str);
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
-function escapeJsString(str) {
-  return str.replace(/\\/g, "\\\\").replace(/'/g, "\\'").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
-function escapeScriptClose(jsonString) {
-  return jsonString.replace(/<\//g, "<\\/");
-}
-var init_escape_html = __esm({
-  "libs/uipack/src/utils/escape-html.ts"() {
-    "use strict";
-  }
-});
-
 // libs/uipack/src/utils/index.ts
+var import_utils;
 var init_utils = __esm({
   "libs/uipack/src/utils/index.ts"() {
     "use strict";
-    init_escape_html();
+    import_utils = require("@frontmcp/utils");
   }
 });
 
@@ -244,7 +225,7 @@ var init_helpers = __esm({
     idCounter = 0;
     builtinHelpers = {
       // Escaping
-      escapeHtml,
+      escapeHtml: import_utils.escapeHtml,
       // Formatting
       formatDate,
       formatCurrency,
@@ -415,7 +396,7 @@ __export(handlebars_exports, {
   createHandlebarsRenderer: () => createHandlebarsRenderer,
   defaultValue: () => defaultValue,
   eq: () => eq,
-  escapeHtml: () => escapeHtml,
+  escapeHtml: () => import_utils.escapeHtml,
   extractAll: () => extractAll,
   extractExpressions: () => extractExpressions,
   extractInputPaths: () => extractInputPaths,
@@ -932,6 +913,7 @@ var CLAUDE_PLATFORM = {
 };
 
 // libs/uipack/src/renderers/utils/detect.ts
+var MAX_TEMPLATE_LENGTH = 5e4;
 function isReactComponent(value) {
   if (typeof value !== "function") {
     return false;
@@ -960,6 +942,9 @@ function isTemplateBuilderFunction(fn) {
   return true;
 }
 function containsJsx(source) {
+  if (source.length > MAX_TEMPLATE_LENGTH) {
+    return false;
+  }
   if (/<[A-Z][a-zA-Z0-9]*(\s|>|\/)/.test(source)) {
     return true;
   }
@@ -984,6 +969,9 @@ function containsJsx(source) {
   return false;
 }
 function containsMdxSyntax(source) {
+  if (source.length > MAX_TEMPLATE_LENGTH) {
+    return false;
+  }
   if (/<[A-Z][a-zA-Z0-9]*/.test(source)) {
     return true;
   }
@@ -1437,12 +1425,12 @@ var MdxClientRenderer = class {
       ...outputProps,
       ...props
     };
-    const escapedMdx = escapeScriptClose(JSON.stringify(template));
-    const escapedProps = escapeScriptClose(JSON.stringify(spreadProps));
-    const safeContainerId = escapeJsString(containerId);
-    const loadingHtml = showLoading ? `<div class="mdx-loading">${escapeHtml(loadingMessage)}</div>` : "";
+    const escapedMdx = (0, import_utils.escapeScriptClose)(JSON.stringify(template));
+    const escapedProps = (0, import_utils.escapeScriptClose)(JSON.stringify(spreadProps));
+    const safeContainerId = (0, import_utils.escapeJsString)(containerId);
+    const loadingHtml = showLoading ? `<div class="mdx-loading">${(0, import_utils.escapeHtml)(loadingMessage)}</div>` : "";
     return `
-<div id="${escapeHtml(containerId)}">${loadingHtml}</div>
+<div id="${(0, import_utils.escapeHtml)(containerId)}">${loadingHtml}</div>
 <script type="module">
 (async function() {
   try {
@@ -1519,7 +1507,10 @@ async function loadSwcTransform() {
     return swcTransform;
   }
   try {
-    const swc = await import("@swc/core");
+    const swc = await import(
+      /* webpackIgnore: true */
+      "@swc/core"
+    );
     swcTransform = swc.transform;
     return swcTransform;
   } catch {

package/renderers/utils/detect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../../../src/renderers/utils/detect.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAuCxD;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAa/D;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAqCnD;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAkCzD;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,OAAO,GAAG;IACrD,IAAI,EAAE,OAAO,GAAG,KAAK,GAAG,YAAY,GAAG,eAAe,GAAG,aAAa,CAAC;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB,CA8DA"}
+{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../../../src/renderers/utils/detect.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAQH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAuCxD;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAa/D;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CA0CnD;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAuCzD;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,OAAO,GAAG;IACrD,IAAI,EAAE,OAAO,GAAG,KAAK,GAAG,YAAY,GAAG,eAAe,GAAG,aAAa,CAAC;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB,CA8DA"}

package/renderers/utils/transpiler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transpiler.d.ts","sourceRoot":"","sources":["../../../src/renderers/utils/transpiler.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAEhD;;GAEG;AACH,UAAU,mBAAmB;IAC3B,+BAA+B;IAC/B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,wBAAwB;IACxB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,wEAAwE;IACxE,UAAU,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACrC,sDAAsD;IACtD,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAyCD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,eAAe,CAAC,CAwD9G;AAED;;;;GAIG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC,CAGvD;AAED;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAKjH;AAED;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAKjH"}
+{"version":3,"file":"transpiler.d.ts","sourceRoot":"","sources":["../../../src/renderers/utils/transpiler.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAEhD;;GAEG;AACH,UAAU,mBAAmB;IAC3B,+BAA+B;IAC/B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,wBAAwB;IACxB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,wEAAwE;IACxE,UAAU,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACrC,sDAAsD;IACtD,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AA2CD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,eAAe,CAAC,CAwD9G;AAED;;;;GAIG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC,CAGvD;AAED;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAKjH;AAED;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAKjH"}

package/runtime/index.js

@@ -30,25 +30,12 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// libs/uipack/src/utils/escape-html.ts
-function escapeHtml(str) {
-  if (str === null || str === void 0) {
-    return "";
-  }
-  const s = String(str);
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
-var init_escape_html = __esm({
-  "libs/uipack/src/utils/escape-html.ts"() {
-    "use strict";
-  }
-});
-
 // libs/uipack/src/utils/index.ts
+var import_utils;
 var init_utils = __esm({
   "libs/uipack/src/utils/index.ts"() {
     "use strict";
-    init_escape_html();
+    import_utils = require("@frontmcp/utils");
   }
 });
 
@@ -238,7 +225,7 @@ var init_helpers = __esm({
     idCounter = 0;
     builtinHelpers = {
       // Escaping
-      escapeHtml,
+      escapeHtml: import_utils.escapeHtml,
       // Formatting
       formatDate,
       formatCurrency,
@@ -409,7 +396,7 @@ __export(handlebars_exports, {
   createHandlebarsRenderer: () => createHandlebarsRenderer,
   defaultValue: () => defaultValue,
   eq: () => eq,
-  escapeHtml: () => escapeHtml,
+  escapeHtml: () => import_utils.escapeHtml,
   extractAll: () => extractAll,
   extractExpressions: () => extractExpressions,
   extractInputPaths: () => extractInputPaths,
@@ -1831,7 +1818,11 @@ FrontMcpBridge.prototype._setupDataToolCallHandler = function() {
 };
 `.trim();
 }
+var MAX_MINIFY_CODE_LENGTH = 5e5;
 function minifyJS(code) {
+  if (code.length > MAX_MINIFY_CODE_LENGTH) {
+    return code;
+  }
   return code.replace(/\/\*[\s\S]*?\*\//g, "").replace(/\/\/.*$/gm, "").replace(/\s+/g, " ").replace(/\s*([{};,:()[\]])\s*/g, "$1").replace(/;\}/g, "}").trim();
 }
 function generatePlatformBundle(platform, options = {}) {
@@ -2985,7 +2976,11 @@ function detectPIIType(value) {
   if (isIPv4(value)) return "IP";
   return null;
 }
+var MAX_PII_TEXT_LENGTH = 1e5;
 function redactPIIFromText(text) {
+  if (text.length > MAX_PII_TEXT_LENGTH) {
+    return text;
+  }
   let result = text;
   result = result.replace(PII_PATTERNS.creditCardInText, REDACTION_TOKENS.CARD);
   result = result.replace(PII_PATTERNS.ssnInText, REDACTION_TOKENS.ID);
@@ -3104,7 +3099,7 @@ function createTemplateHelpers() {
     /**
      * Escape HTML special characters to prevent XSS
      */
-    escapeHtml,
+    escapeHtml: import_utils.escapeHtml,
     /**
      * Format a date for display
      */
@@ -3208,7 +3203,7 @@ function wrapToolUI(options) {
     widgetAccessible,
     hostContext
   });
-  const pageTitle = title || `${escapeHtml(toolName)} - Tool Result`;
+  const pageTitle = title || `${(0, import_utils.escapeHtml)(toolName)} - Tool Result`;
   return `<!DOCTYPE html>
 <html lang="en">
 <head>
@@ -3361,7 +3356,7 @@ function wrapToolUIUniversal(options) {
     resourceMode
   });
   const bridgeScript = includeBridge ? BRIDGE_SCRIPT_TAGS.universal : "";
-  const pageTitle = title || `${escapeHtml(toolName)} - Tool Result`;
+  const pageTitle = title || `${(0, import_utils.escapeHtml)(toolName)} - Tool Result`;
   return `<!DOCTYPE html>
 <html lang="en">
 <head>
@@ -3475,7 +3470,7 @@ function wrapToolUIMinimal(options) {
   window.__mcpWidgetAccessible = ${helpers.jsonEmbed(widgetAccessible)};
   window.__mcpHostContext = ${helpers.jsonEmbed(contextData)};
 </script>`;
-  const pageTitle = title || `${escapeHtml(toolName)} - Tool Result`;
+  const pageTitle = title || `${(0, import_utils.escapeHtml)(toolName)} - Tool Result`;
   return `<!DOCTYPE html>
 <html lang="en">
 <head>
@@ -3625,7 +3620,7 @@ function wrapLeanWidgetShell(options) {
 <head>
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>${escapeHtml(title || toolName)}</title>
+  <title>${(0, import_utils.escapeHtml)(title || toolName)}</title>
   ${fontPreconnect}
   ${fontStylesheets}
   ${tailwindScript}
@@ -4026,7 +4021,7 @@ function wrapHybridWidgetShell(options) {
 <head>
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>${escapeHtml(title || toolName)}</title>
+  <title>${(0, import_utils.escapeHtml)(title || toolName)}</title>
   ${fontPreconnect}
   ${fontStylesheets}
   ${tailwindScript}
@@ -4568,7 +4563,7 @@ function wrapStaticWidgetUniversal(options) {
     }, 100);
   }
   </script>` : "";
-  const pageTitle = title || `${escapeHtml(toolName)} - Tool Widget`;
+  const pageTitle = title || `${(0, import_utils.escapeHtml)(toolName)} - Tool Widget`;
   const loaderHtml = isReactBased && componentCode && !hasEmbeddedData ? `
   <!-- Loading State -->
   <div id="frontmcp-loader" style="display: flex; align-items: center; justify-content: center; padding: 2rem; gap: 0.5rem;">
@@ -4667,7 +4662,7 @@ function wrapToolUIForClaude(options) {
   window.__mcpToolInput = ${helpers.jsonEmbed(input)};
   window.__mcpToolOutput = ${helpers.jsonEmbed(output)};
 </script>`;
-  const pageTitle = title || `${escapeHtml(toolName)} - Tool Result`;
+  const pageTitle = title || `${(0, import_utils.escapeHtml)(toolName)} - Tool Result`;
   return `<!DOCTYPE html>
 <html lang="en">
 <head>

package/runtime/sanitizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sanitizer.d.ts","sourceRoot":"","sources":["../../src/runtime/sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;CAOnB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;CA8BxB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC;AAEnF;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,IAAI,EAAE,IAAI,GAAG,MAAM,EAAE,GAAG,WAAW,CAAC;IAEpC;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE9C;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE9C;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAInD;AAED;;GAEG;AACH,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE5C;AAED;;GAEG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE7C;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,OAAO,gBAAgB,GAAG,IAAI,CAOjF;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAWtD;AA0FD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,IAAI,GAAE,IAAI,GAAG,MAAM,EAAE,GAAG,WAAkB,GACzC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAczB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAC7B,IAAI,GAAE,IAAI,GAAG,MAAM,EAAE,GAAG,WAAkB,GACzC,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE7D;AAED;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CACvB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9B;IACD,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CA0CA"}
+{"version":3,"file":"sanitizer.d.ts","sourceRoot":"","sources":["../../src/runtime/sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;CAOnB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;CA8BxB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC;AAEnF;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,IAAI,EAAE,IAAI,GAAG,MAAM,EAAE,GAAG,WAAW,CAAC;IAEpC;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE9C;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE9C;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAInD;AAED;;GAEG;AACH,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE5C;AAED;;GAEG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE7C;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,OAAO,gBAAgB,GAAG,IAAI,CAOjF;AAQD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAgBtD;AA0FD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,IAAI,GAAE,IAAI,GAAG,MAAM,EAAE,GAAG,WAAkB,GACzC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAczB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAC7B,IAAI,GAAE,IAAI,GAAG,MAAM,EAAE,GAAG,WAAkB,GACzC,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE7D;AAED;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CACvB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9B;IACD,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CA0CA"}