@frontmcp/uipack 0.6.3 → 0.7.2

package/dependency/index.js

@@ -1192,23 +1192,8 @@ function getImportStats(source) {
   };
 }
 
-// libs/uipack/src/utils/escape-html.ts
-function escapeHtml(str) {
-  if (str === null || str === void 0) {
-    return "";
-  }
-  const s = String(str);
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
-function escapeHtmlAttr(str) {
-  return str.replace(/&/g, "&amp;").replace(/"/g, "&quot;");
-}
-function escapeJsString(str) {
-  return str.replace(/\\/g, "\\\\").replace(/'/g, "\\'").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
-function escapeScriptClose(jsonString) {
-  return jsonString.replace(/<\//g, "<\\/");
-}
+// libs/uipack/src/utils/index.ts
+var import_utils = require("@frontmcp/utils");
 
 // libs/uipack/src/dependency/import-map.ts
 function createImportMap(dependencies) {
@@ -1299,13 +1284,16 @@ function generateUMDShim(dependencies, options = {}) {
     console.warn('UMD shim failed:', e);
   }
 })();` : `window.__esm_shim = ${shimObject};`;
-  return minify ? code.replace(/\s+/g, " ").replace(/\s*([{},:])\s*/g, "$1") : code;
+  if (minify && code.length <= 1e5) {
+    return code.replace(/\s+/g, " ").replace(/\s*([{},:])\s*/g, "$1");
+  }
+  return code;
 }
 function generateCDNScriptTags(dependencies) {
   return dependencies.filter((dep) => !dep.esm).map((dep) => {
-    const attrs = [`src="${escapeHtmlAttr(dep.cdnUrl)}"`];
+    const attrs = [`src="${(0, import_utils.escapeHtmlAttr)(dep.cdnUrl)}"`];
     if (dep.integrity) {
-      attrs.push(`integrity="${escapeHtmlAttr(dep.integrity)}"`);
+      attrs.push(`integrity="${(0, import_utils.escapeHtmlAttr)(dep.integrity)}"`);
     }
     attrs.push('crossorigin="anonymous"');
     return `<script ${attrs.join(" ")}></script>`;
@@ -1313,9 +1301,9 @@ function generateCDNScriptTags(dependencies) {
 }
 function generateESMScriptTags(dependencies) {
   return dependencies.filter((dep) => dep.esm).map((dep) => {
-    const attrs = ['type="module"', `src="${escapeHtmlAttr(dep.cdnUrl)}"`];
+    const attrs = ['type="module"', `src="${(0, import_utils.escapeHtmlAttr)(dep.cdnUrl)}"`];
     if (dep.integrity) {
-      attrs.push(`integrity="${escapeHtmlAttr(dep.integrity)}"`);
+      attrs.push(`integrity="${(0, import_utils.escapeHtmlAttr)(dep.integrity)}"`);
     }
     attrs.push('crossorigin="anonymous"');
     return `<script ${attrs.join(" ")}></script>`;
@@ -1598,6 +1586,7 @@ var import_path = require("path");
 
 // libs/uipack/src/bundler/file-cache/hash-calculator.ts
 var import_crypto = require("crypto");
+var import_utils3 = require("@frontmcp/utils");
 function sha256(content) {
   return (0, import_crypto.createHash)("sha256").update(content, "utf8").digest("hex");
 }
@@ -1966,7 +1955,7 @@ function classNames(...classes) {
 }
 var builtinHelpers = {
   // Escaping
-  escapeHtml,
+  escapeHtml: import_utils.escapeHtml,
   // Formatting
   formatDate,
   formatCurrency,
@@ -2279,7 +2268,11 @@ function containsHandlebars(template) {
 }
 
 // libs/uipack/src/renderers/utils/detect.ts
+var MAX_TEMPLATE_LENGTH = 5e4;
 function containsMdxSyntax(source) {
+  if (source.length > MAX_TEMPLATE_LENGTH) {
+    return false;
+  }
   if (/<[A-Z][a-zA-Z0-9]*/.test(source)) {
     return true;
   }
@@ -2566,12 +2559,12 @@ var MdxClientRenderer = class {
       ...outputProps,
       ...props
     };
-    const escapedMdx = escapeScriptClose(JSON.stringify(template));
-    const escapedProps = escapeScriptClose(JSON.stringify(spreadProps));
-    const safeContainerId = escapeJsString(containerId);
-    const loadingHtml = showLoading ? `<div class="mdx-loading">${escapeHtml(loadingMessage)}</div>` : "";
+    const escapedMdx = (0, import_utils.escapeScriptClose)(JSON.stringify(template));
+    const escapedProps = (0, import_utils.escapeScriptClose)(JSON.stringify(spreadProps));
+    const safeContainerId = (0, import_utils.escapeJsString)(containerId);
+    const loadingHtml = showLoading ? `<div class="mdx-loading">${(0, import_utils.escapeHtml)(loadingMessage)}</div>` : "";
     return `
-<div id="${escapeHtml(containerId)}">${loadingHtml}</div>
+<div id="${(0, import_utils.escapeHtml)(containerId)}">${loadingHtml}</div>
 <script type="module">
 (async function() {
   try {
@@ -2912,7 +2905,7 @@ function safeInputToRecord(input) {
   return {};
 }
 var defaultHelpers = {
-  escapeHtml,
+  escapeHtml: import_utils.escapeHtml,
   formatDate: (date, format) => {
     const d = date instanceof Date ? date : new Date(date);
     if (format === "iso") return d.toISOString();

package/esm/adapters/index.mjs

@@ -28,16 +28,13 @@ function buildUIMeta(options) {
     case "generic-mcp":
     case "gemini":
     default:
-      meta["frontmcp/html"] = html;
-      meta["frontmcp/mimeType"] = "text/html+mcp";
-      if (rendererType) meta["frontmcp/type"] = rendererType;
-      if (contentHash) meta["frontmcp/contentHash"] = contentHash;
-      if (manifestUri) meta["frontmcp/manifestUri"] = manifestUri;
-      if (token) meta["frontmcp/widgetToken"] = token;
-      if (directUrl) meta["frontmcp/directUrl"] = directUrl;
       meta["ui/html"] = html;
       meta["ui/mimeType"] = "text/html+mcp";
       if (rendererType) meta["ui/type"] = rendererType;
+      if (contentHash) meta["ui/contentHash"] = contentHash;
+      if (manifestUri) meta["ui/manifestUri"] = manifestUri;
+      if (token) meta["ui/widgetToken"] = token;
+      if (directUrl) meta["ui/directUrl"] = directUrl;
       if (platformType === "claude") {
         return buildClaudeMeta(meta, uiConfig);
       } else if (platformType === "gemini") {
@@ -107,23 +104,36 @@ function buildFrontMCPCSP(csp) {
   return result;
 }
 function buildGenericMeta(meta, uiConfig) {
-  if (uiConfig.widgetAccessible) {
-    meta["frontmcp/widgetAccessible"] = true;
-  }
   if (uiConfig.csp) {
-    meta["frontmcp/widgetCSP"] = buildFrontMCPCSP(uiConfig.csp);
+    const csp = {};
+    if (uiConfig.csp.connectDomains?.length) {
+      csp.connectDomains = uiConfig.csp.connectDomains;
+    }
+    if (uiConfig.csp.resourceDomains?.length) {
+      csp.resourceDomains = uiConfig.csp.resourceDomains;
+    }
+    if (Object.keys(csp).length > 0) {
+      meta["ui/csp"] = csp;
+    }
   }
   if (uiConfig.displayMode) {
-    meta["frontmcp/displayMode"] = uiConfig.displayMode;
-  }
-  if (uiConfig.widgetDescription) {
-    meta["frontmcp/widgetDescription"] = uiConfig.widgetDescription;
+    const displayModeMap = {
+      inline: "inline",
+      fullscreen: "fullscreen",
+      pip: "pip",
+      widget: "inline",
+      panel: "fullscreen"
+    };
+    const mappedMode = displayModeMap[uiConfig.displayMode];
+    if (mappedMode) {
+      meta["ui/displayMode"] = mappedMode;
+    }
   }
   if (uiConfig.prefersBorder !== void 0) {
-    meta["frontmcp/prefersBorder"] = uiConfig.prefersBorder;
+    meta["ui/prefersBorder"] = uiConfig.prefersBorder;
   }
   if (uiConfig.sandboxDomain) {
-    meta["frontmcp/domain"] = uiConfig.sandboxDomain;
+    meta["ui/domain"] = uiConfig.sandboxDomain;
   }
   return meta;
 }
@@ -353,25 +363,15 @@ function platformSupportsWidgets(platformType) {
   return capabilities.supportsWidgets;
 }
 
-// libs/uipack/src/utils/safe-stringify.ts
-function safeStringify(value, space) {
-  const seen = /* @__PURE__ */ new WeakSet();
-  try {
-    return JSON.stringify(
-      value,
-      (_key, val) => {
-        if (typeof val === "object" && val !== null) {
-          if (seen.has(val)) return "[Circular]";
-          seen.add(val);
-        }
-        return val;
-      },
-      space
-    );
-  } catch {
-    return JSON.stringify({ error: "Output could not be serialized" });
-  }
-}
+// libs/uipack/src/utils/index.ts
+import {
+  safeStringify,
+  escapeHtml,
+  escapeHtmlAttr,
+  escapeJsString,
+  escapeScriptClose,
+  safeJsonForScript
+} from "@frontmcp/utils";
 
 // libs/uipack/src/adapters/response-builder.ts
 function buildToolResponseContent(options) {
@@ -394,12 +394,22 @@ function buildToolResponseContent(options) {
   }
   if (useStructuredContent) {
     if (htmlContent) {
-      return {
-        content: [{ type: "text", text: htmlContent }],
-        structuredContent: rawOutput,
-        contentCleared: false,
-        format: "structured-content"
-      };
+      const htmlInContent = platformType === "openai" || platformType === "ext-apps";
+      if (htmlInContent) {
+        return {
+          content: [{ type: "text", text: htmlContent }],
+          structuredContent: rawOutput,
+          contentCleared: false,
+          format: "structured-content"
+        };
+      } else {
+        return {
+          content: [{ type: "text", text: safeStringify(rawOutput) }],
+          structuredContent: rawOutput,
+          contentCleared: false,
+          format: "structured-content"
+        };
+      }
     }
     return {
       content: [{ type: "text", text: safeStringify(rawOutput) }],

package/esm/bridge-runtime/index.mjs

@@ -823,7 +823,11 @@ FrontMcpBridge.prototype._setupDataToolCallHandler = function() {
 };
 `.trim();
 }
+var MAX_MINIFY_CODE_LENGTH = 5e5;
 function minifyJS(code) {
+  if (code.length > MAX_MINIFY_CODE_LENGTH) {
+    return code;
+  }
   return code.replace(/\/\*[\s\S]*?\*\//g, "").replace(/\/\/.*$/gm, "").replace(/\s+/g, " ").replace(/\s*([{};,:()[\]])\s*/g, "$1").replace(/;\}/g, "}").trim();
 }
 function generatePlatformBundle(platform, options = {}) {

package/esm/build/index.mjs

@@ -8,34 +8,18 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
-// libs/uipack/src/utils/escape-html.ts
-function escapeHtml(str) {
-  if (str === null || str === void 0) {
-    return "";
-  }
-  const s = String(str);
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
-function escapeHtmlAttr(str) {
-  return str.replace(/&/g, "&amp;").replace(/"/g, "&quot;");
-}
-function escapeJsString(str) {
-  return str.replace(/\\/g, "\\\\").replace(/'/g, "\\'").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
-function escapeScriptClose(jsonString) {
-  return jsonString.replace(/<\//g, "<\\/");
-}
-var init_escape_html = __esm({
-  "libs/uipack/src/utils/escape-html.ts"() {
-    "use strict";
-  }
-});
-
 // libs/uipack/src/utils/index.ts
+import {
+  safeStringify,
+  escapeHtml,
+  escapeHtmlAttr,
+  escapeJsString,
+  escapeScriptClose,
+  safeJsonForScript
+} from "@frontmcp/utils";
 var init_utils = __esm({
   "libs/uipack/src/utils/index.ts"() {
     "use strict";
-    init_escape_html();
   }
 });
 
@@ -642,9 +626,9 @@ var init_handlebars = __esm({
 
 // libs/uipack/src/bundler/file-cache/hash-calculator.ts
 import { createHash } from "crypto";
-import { readFile } from "fs/promises";
 import { existsSync } from "fs";
 import { join as join2, dirname, resolve } from "path";
+import { readFile, readFileBuffer } from "@frontmcp/utils";
 function sha256(content) {
   return createHash("sha256").update(content, "utf8").digest("hex");
 }
@@ -653,7 +637,7 @@ function sha256Buffer(buffer) {
 }
 async function hashFile(filePath) {
   try {
-    const content = await readFile(filePath);
+    const content = await readFileBuffer(filePath);
     return sha256Buffer(content);
   } catch {
     return void 0;
@@ -699,7 +683,7 @@ async function collectLocalDependencies(filePath, baseDir, collected, maxDepth,
   if (!existsSync(filePath)) return;
   collected.add(filePath);
   try {
-    const content = await readFile(filePath, "utf8");
+    const content = await readFile(filePath);
     const imports = extractImportPaths(content);
     for (const importPath of imports) {
       if (!importPath.startsWith(".") && !importPath.startsWith("/")) {
@@ -1587,7 +1571,10 @@ function generateUMDShim(dependencies, options = {}) {
     console.warn('UMD shim failed:', e);
   }
 })();` : `window.__esm_shim = ${shimObject};`;
-  return minify ? code.replace(/\s+/g, " ").replace(/\s*([{},:])\s*/g, "$1") : code;
+  if (minify && code.length <= 1e5) {
+    return code.replace(/\s+/g, " ").replace(/\s*([{},:])\s*/g, "$1");
+  }
+  return code;
 }
 function generateCDNScriptTags(dependencies) {
   return dependencies.filter((dep) => !dep.esm).map((dep) => {
@@ -1865,10 +1852,10 @@ __export(filesystem_exports, {
   StorageNotInitializedError: () => StorageNotInitializedError,
   createFilesystemStorage: () => createFilesystemStorage
 });
-import { mkdir, readFile as readFile2, writeFile, readdir, unlink, rm } from "fs/promises";
 import { join as join3, dirname as dirname2 } from "path";
 import { existsSync as existsSync2 } from "fs";
 import { createHash as createHash2 } from "crypto";
+import { mkdir, readFile as readFile2, writeFile, readdir, unlink, rm } from "@frontmcp/utils";
 function createFilesystemStorage(options) {
   return new FilesystemStorage(options);
 }
@@ -2104,7 +2091,7 @@ var init_filesystem = __esm({
        */
       async writeEntry(filePath, entry) {
         await mkdir(dirname2(filePath), { recursive: true });
-        await writeFile(filePath, JSON.stringify(entry, null, 2), "utf8");
+        await writeFile(filePath, JSON.stringify(entry, null, 2));
       }
       /**
        * Ensure the storage is initialized.
@@ -2467,10 +2454,10 @@ __export(component_builder_exports, {
   createFilesystemBuilder: () => createFilesystemBuilder,
   createRedisBuilder: () => createRedisBuilder
 });
-import { readFile as readFile3 } from "fs/promises";
 import { existsSync as existsSync3 } from "fs";
 import { resolve as resolve2, extname, basename } from "path";
 import { randomUUID } from "crypto";
+import { readFile as readFile3 } from "@frontmcp/utils";
 async function createFilesystemBuilder(cacheDir = ".frontmcp-cache/builds") {
   const { FilesystemStorage: FilesystemStorage2 } = await Promise.resolve().then(() => (init_filesystem(), filesystem_exports));
   const storage = new FilesystemStorage2({ cacheDir });
@@ -3561,7 +3548,11 @@ FrontMcpBridge.prototype._setupDataToolCallHandler = function() {
 };
 `.trim();
 }
+var MAX_MINIFY_CODE_LENGTH = 5e5;
 function minifyJS(code) {
+  if (code.length > MAX_MINIFY_CODE_LENGTH) {
+    return code;
+  }
   return code.replace(/\/\*[\s\S]*?\*\//g, "").replace(/\/\/.*$/gm, "").replace(/\s+/g, " ").replace(/\s*([{};,:()[\]])\s*/g, "$1").replace(/;\}/g, "}").trim();
 }
 function generatePlatformBundle(platform, options = {}) {
@@ -4374,6 +4365,7 @@ function buildFrameworkRuntimeScriptsUniversal(options) {
 }
 
 // libs/uipack/src/renderers/utils/detect.ts
+var MAX_TEMPLATE_LENGTH = 5e4;
 function isReactComponent(value) {
   if (typeof value !== "function") {
     return false;
@@ -4402,6 +4394,9 @@ function isTemplateBuilderFunction(fn) {
   return true;
 }
 function containsJsx(source) {
+  if (source.length > MAX_TEMPLATE_LENGTH) {
+    return false;
+  }
   if (/<[A-Z][a-zA-Z0-9]*(\s|>|\/)/.test(source)) {
     return true;
   }
@@ -4426,6 +4421,9 @@ function containsJsx(source) {
   return false;
 }
 function containsMdxSyntax(source) {
+  if (source.length > MAX_TEMPLATE_LENGTH) {
+    return false;
+  }
   if (/<[A-Z][a-zA-Z0-9]*/.test(source)) {
     return true;
   }
@@ -5567,7 +5565,7 @@ function getSchemaPathStrings(schema, prefix = "output") {
 }
 
 // libs/uipack/src/validation/template-validator.ts
-init_expression_extractor();
+init_handlebars();
 function validateTemplate(template, outputSchema, options = {}) {
   const { inputSchema, warnOnOptional = true, suggestSimilar = true, maxSuggestionDistance = 3 } = options;
   const errors = [];

package/esm/bundler/index.mjs

@@ -40,10 +40,10 @@ __export(filesystem_exports, {
   StorageNotInitializedError: () => StorageNotInitializedError,
   createFilesystemStorage: () => createFilesystemStorage
 });
-import { mkdir, readFile, writeFile, readdir, unlink, rm } from "fs/promises";
 import { join, dirname } from "path";
 import { existsSync } from "fs";
 import { createHash } from "crypto";
+import { mkdir, readFile, writeFile, readdir, unlink, rm } from "@frontmcp/utils";
 function createFilesystemStorage(options) {
   return new FilesystemStorage(options);
 }
@@ -279,7 +279,7 @@ var init_filesystem = __esm({
        */
       async writeEntry(filePath, entry) {
         await mkdir(dirname(filePath), { recursive: true });
-        await writeFile(filePath, JSON.stringify(entry, null, 2), "utf8");
+        await writeFile(filePath, JSON.stringify(entry, null, 2));
       }
       /**
        * Ensure the storage is initialized.
@@ -1398,9 +1398,9 @@ init_redis();
 
 // libs/uipack/src/bundler/file-cache/hash-calculator.ts
 import { createHash as createHash2 } from "crypto";
-import { readFile as readFile2 } from "fs/promises";
 import { existsSync as existsSync2 } from "fs";
 import { join as join2, dirname as dirname2, resolve } from "path";
+import { readFile as readFile2, readFileBuffer } from "@frontmcp/utils";
 function sha256(content) {
   return createHash2("sha256").update(content, "utf8").digest("hex");
 }
@@ -1409,7 +1409,7 @@ function sha256Buffer(buffer) {
 }
 async function hashFile(filePath) {
   try {
-    const content = await readFile2(filePath);
+    const content = await readFileBuffer(filePath);
     return sha256Buffer(content);
   } catch {
     return void 0;
@@ -1470,7 +1470,7 @@ async function collectLocalDependencies(filePath, baseDir, collected, maxDepth,
   if (!existsSync2(filePath)) return;
   collected.add(filePath);
   try {
-    const content = await readFile2(filePath, "utf8");
+    const content = await readFile2(filePath);
     const imports = extractImportPaths(content);
     for (const importPath of imports) {
       if (!importPath.startsWith(".") && !importPath.startsWith("/")) {
@@ -1544,10 +1544,10 @@ function buildIdFromHash(hash) {
 }
 
 // libs/uipack/src/bundler/file-cache/component-builder.ts
-import { readFile as readFile3 } from "fs/promises";
 import { existsSync as existsSync3 } from "fs";
 import { resolve as resolve2, extname, basename } from "path";
 import { randomUUID } from "crypto";
+import { readFile as readFile3 } from "@frontmcp/utils";
 
 // libs/uipack/src/dependency/cdn-registry.ts
 var DEFAULT_CDN_REGISTRY = {
@@ -2310,10 +2310,15 @@ function parseImports(source) {
   };
 }
 
-// libs/uipack/src/utils/escape-html.ts
-function escapeHtmlAttr(str) {
-  return str.replace(/&/g, "&").replace(/"/g, """);
-}
+// libs/uipack/src/utils/index.ts
+import {
+  safeStringify,
+  escapeHtml,
+  escapeHtmlAttr,
+  escapeJsString,
+  escapeScriptClose,
+  safeJsonForScript
+} from "@frontmcp/utils";
 
 // libs/uipack/src/dependency/import-map.ts
 function createImportMap(dependencies) {
@@ -2360,7 +2365,10 @@ function generateUMDShim(dependencies, options = {}) {
     console.warn('UMD shim failed:', e);
   }
 })();` : `window.__esm_shim = ${shimObject};`;
-  return minify ? code.replace(/\s+/g, " ").replace(/\s*([{},:])\s*/g, "$1") : code;
+  if (minify && code.length <= 1e5) {
+    return code.replace(/\s+/g, " ").replace(/\s*([{},:])\s*/g, "$1");
+  }
+  return code;
 }
 function generateCDNScriptTags(dependencies) {
   return dependencies.filter((dep) => !dep.esm).map((dep) => {

package/esm/dependency/index.mjs

@@ -1074,23 +1074,15 @@ function getImportStats(source) {
   };
 }
 
-// libs/uipack/src/utils/escape-html.ts
-function escapeHtml(str) {
-  if (str === null || str === void 0) {
-    return "";
-  }
-  const s = String(str);
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
-function escapeHtmlAttr(str) {
-  return str.replace(/&/g, "&amp;").replace(/"/g, "&quot;");
-}
-function escapeJsString(str) {
-  return str.replace(/\\/g, "\\\\").replace(/'/g, "\\'").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
-function escapeScriptClose(jsonString) {
-  return jsonString.replace(/<\//g, "<\\/");
-}
+// libs/uipack/src/utils/index.ts
+import {
+  safeStringify,
+  escapeHtml,
+  escapeHtmlAttr,
+  escapeJsString,
+  escapeScriptClose,
+  safeJsonForScript
+} from "@frontmcp/utils";
 
 // libs/uipack/src/dependency/import-map.ts
 function createImportMap(dependencies) {
@@ -1181,7 +1173,10 @@ function generateUMDShim(dependencies, options = {}) {
     console.warn('UMD shim failed:', e);
   }
 })();` : `window.__esm_shim = ${shimObject};`;
-  return minify ? code.replace(/\s+/g, " ").replace(/\s*([{},:])\s*/g, "$1") : code;
+  if (minify && code.length <= 1e5) {
+    return code.replace(/\s+/g, " ").replace(/\s*([{},:])\s*/g, "$1");
+  }
+  return code;
 }
 function generateCDNScriptTags(dependencies) {
   return dependencies.filter((dep) => !dep.esm).map((dep) => {
@@ -1480,6 +1475,7 @@ import { resolve as resolvePath, isAbsolute, sep } from "path";
 
 // libs/uipack/src/bundler/file-cache/hash-calculator.ts
 import { createHash } from "crypto";
+import { readFile, readFileBuffer } from "@frontmcp/utils";
 function sha256(content) {
   return createHash("sha256").update(content, "utf8").digest("hex");
 }
@@ -2161,7 +2157,11 @@ function containsHandlebars(template) {
 }
 
 // libs/uipack/src/renderers/utils/detect.ts
+var MAX_TEMPLATE_LENGTH = 5e4;
 function containsMdxSyntax(source) {
+  if (source.length > MAX_TEMPLATE_LENGTH) {
+    return false;
+  }
   if (/<[A-Z][a-zA-Z0-9]*/.test(source)) {
     return true;
   }

package/esm/handlebars/index.mjs

@@ -1,11 +1,12 @@
-// libs/uipack/src/utils/escape-html.ts
-function escapeHtml(str) {
-  if (str === null || str === void 0) {
-    return "";
-  }
-  const s = String(str);
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
+// libs/uipack/src/utils/index.ts
+import {
+  safeStringify,
+  escapeHtml,
+  escapeHtmlAttr,
+  escapeJsString,
+  escapeScriptClose,
+  safeJsonForScript
+} from "@frontmcp/utils";
 
 // libs/uipack/src/handlebars/helpers.ts
 function formatDate(date, format) {