@frontmcp/uipack 1.10.8 → 1.10.9-rc.2

package/esm/shell/index.mjs

@@ -1,84 +1,4 @@
-// libs/uipack/src/bridge-runtime/iife-generator.ts
-var WIDGET_CALL_META_KEY = "frontmcp/widgetCall";
-var MCP_APPS_DISPLAY_MODES = ["inline", "fullscreen", "pip"];
-function generateBridgeIIFE(options = {}) {
-  const { debug = false, trustedOrigins = [], minify = false } = options;
-  const adapters = options.adapters || ["openai", "ext-apps", "claude", "gemini", "generic"];
-  const parts = [];
-  parts.push("(function() {");
-  parts.push('"use strict";');
-  parts.push("");
-  if (debug) {
-    parts.push('function log(msg) { console.log("[FrontMcpBridge] " + msg); }');
-  } else {
-    parts.push("function log() {}");
-  }
-  parts.push("");
-  parts.push("var DEFAULT_SAFE_AREA = { top: 0, bottom: 0, left: 0, right: 0 };");
-  parts.push("");
-  parts.push(generateContextDetection());
-  parts.push("");
-  parts.push(generateBaseCapabilities());
-  parts.push("");
-  if (adapters.includes("openai")) {
-    parts.push(generateOpenAIAdapter());
-    parts.push("");
-  }
-  if (adapters.includes("ext-apps")) {
-    parts.push(generateExtAppsAdapter(trustedOrigins));
-    parts.push("");
-  }
-  if (adapters.includes("claude")) {
-    parts.push(generateClaudeAdapter());
-    parts.push("");
-  }
-  if (adapters.includes("gemini")) {
-    parts.push(generateGeminiAdapter());
-    parts.push("");
-  }
-  if (adapters.includes("generic")) {
-    parts.push(generateGenericAdapter());
-    parts.push("");
-  }
-  parts.push(generatePlatformDetection(adapters));
-  parts.push("");
-  parts.push(generateBridgeClass());
-  parts.push("");
-  parts.push("var bridge = new FrontMcpBridge();");
-  parts.push("bridge.initialize().then(function() {");
-  parts.push('  log("Bridge initialized with adapter: " + bridge.adapterId);');
-  parts.push('  window.dispatchEvent(new CustomEvent("bridge:ready", { detail: { adapter: bridge.adapterId } }));');
-  parts.push("  if (window.__mcpDisplayMode) bridge.requestDisplayMode(window.__mcpDisplayMode).catch(function() {});");
-  parts.push("}).catch(function(err) {");
-  parts.push('  console.error("[FrontMcpBridge] Init failed:", err);');
-  parts.push('  window.dispatchEvent(new CustomEvent("bridge:error", { detail: { error: err } }));');
-  parts.push("});");
-  parts.push("");
-  parts.push("window.FrontMcpBridge = bridge;");
-  parts.push("");
-  parts.push(generateAutoResize());
-  parts.push("function __showLoading() {");
-  parts.push('  var root = document.getElementById("root");');
-  parts.push("  if (root && !root.hasChildNodes()) {");
-  parts.push(
-    `    root.innerHTML = '<div style="display:flex;align-items:center;justify-content:center;padding:2rem;color:#6b7280;font-family:system-ui,sans-serif"><div style="text-align:center"><div style="width:24px;height:24px;border:2px solid #e5e7eb;border-top-color:#3b82f6;border-radius:50%;animation:__spin 0.6s linear infinite;margin:0 auto 12px"></div><div style="font-size:0.875rem">Loading widget...</div></div></div><style>@keyframes __spin{to{transform:rotate(360deg)}}</style>';`
-  );
-  parts.push("  }");
-  parts.push("}");
-  parts.push('if (document.readyState === "loading") {');
-  parts.push('  document.addEventListener("DOMContentLoaded", __showLoading);');
-  parts.push("} else {");
-  parts.push("  __showLoading();");
-  parts.push("}");
-  parts.push("})();");
-  const code = parts.join("\n");
-  if (minify) {
-    return minifyJS(code);
-  }
-  return code;
-}
-function generateAutoResize() {
-  return `
+var WIDGET_CALL_META_KEY="frontmcp/widgetCall";var MCP_APPS_DISPLAY_MODES=["inline","fullscreen","pip"];function generateBridgeIIFE(options={}){const{debug=false,trustedOrigins=[],minify=false}=options;const adapters=options.adapters||["openai","ext-apps","claude","gemini","generic"];const parts=[];parts.push("(function() {");parts.push('"use strict";');parts.push("");if(debug){parts.push('function log(msg) { console.log("[FrontMcpBridge] " + msg); }')}else{parts.push("function log() {}")}parts.push("");parts.push("var DEFAULT_SAFE_AREA = { top: 0, bottom: 0, left: 0, right: 0 };");parts.push("");parts.push(generateContextDetection());parts.push("");parts.push(generateBaseCapabilities());parts.push("");if(adapters.includes("openai")){parts.push(generateOpenAIAdapter());parts.push("")}if(adapters.includes("ext-apps")){parts.push(generateExtAppsAdapter(trustedOrigins));parts.push("")}if(adapters.includes("claude")){parts.push(generateClaudeAdapter());parts.push("")}if(adapters.includes("gemini")){parts.push(generateGeminiAdapter());parts.push("")}if(adapters.includes("generic")){parts.push(generateGenericAdapter());parts.push("")}parts.push(generatePlatformDetection(adapters));parts.push("");parts.push(generateBridgeClass());parts.push("");parts.push("var bridge = new FrontMcpBridge();");parts.push("bridge.initialize().then(function() {");parts.push('  log("Bridge initialized with adapter: " + bridge.adapterId);');parts.push('  window.dispatchEvent(new CustomEvent("bridge:ready", { detail: { adapter: bridge.adapterId } }));');parts.push("  if (window.__mcpDisplayMode) bridge.requestDisplayMode(window.__mcpDisplayMode).catch(function() {});");parts.push("}).catch(function(err) {");parts.push('  console.error("[FrontMcpBridge] Init failed:", err);');parts.push('  window.dispatchEvent(new CustomEvent("bridge:error", { detail: { error: err } }));');parts.push("});");parts.push("");parts.push("window.FrontMcpBridge = bridge;");parts.push("");parts.push(generateAutoResize());parts.push("function __showLoading() {");parts.push('  var root = document.getElementById("root");');parts.push("  if (root && !root.hasChildNodes()) {");parts.push(`    root.innerHTML = '<div style="display:flex;align-items:center;justify-content:center;padding:2rem;color:#6b7280;font-family:system-ui,sans-serif"><div style="text-align:center"><div style="width:24px;height:24px;border:2px solid #e5e7eb;border-top-color:#3b82f6;border-radius:50%;animation:__spin 0.6s linear infinite;margin:0 auto 12px"></div><div style="font-size:0.875rem">Loading widget...</div></div></div><style>@keyframes __spin{to{transform:rotate(360deg)}}</style>';`);parts.push("  }");parts.push("}");parts.push('if (document.readyState === "loading") {');parts.push('  document.addEventListener("DOMContentLoaded", __showLoading);');parts.push("} else {");parts.push("  __showLoading();");parts.push("}");parts.push("})();");const code=parts.join("\n");if(minify){return minifyJS(code)}return code}function generateAutoResize(){return`
 function __applySizingCss(sizing) {
   if (typeof document === 'undefined' || !document.documentElement) return;
   function toLen(v) { return typeof v === 'number' ? v + 'px' : v; }
@@ -213,10 +133,7 @@ function __initAutoResize() {
   }
 }
 __initAutoResize();
-`.trim();
-}
-function generateContextDetection() {
-  return `
+`.trim()}function generateContextDetection(){return`
 function detectTheme() {
   if (typeof window !== 'undefined' && window.matchMedia) {
     return window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light';
@@ -303,10 +220,7 @@ function readInjectedData() {
   }
   return data;
 }
-`.trim();
-}
-function generateBaseCapabilities() {
-  return `
+`.trim()}function generateBaseCapabilities(){return`
 var DEFAULT_CAPABILITIES = {
   canCallTools: false,
   canSendMessages: false,
@@ -316,10 +230,7 @@ var DEFAULT_CAPABILITIES = {
   supportsDisplayModes: false,
   supportsTheme: true
 };
-`.trim();
-}
-function generateOpenAIAdapter() {
-  return `
+`.trim()}function generateOpenAIAdapter(){return`
 var OpenAIAdapter = {
   id: 'openai',
   name: 'OpenAI ChatGPT',
@@ -404,11 +315,7 @@ var OpenAIAdapter = {
     return Promise.resolve();
   }
 };
-`.trim();
-}
-function generateExtAppsAdapter(trustedOrigins) {
-  const originsArray = trustedOrigins.length > 0 ? JSON.stringify(trustedOrigins) : "[]";
-  return `
+`.trim()}function generateExtAppsAdapter(trustedOrigins){const originsArray=trustedOrigins.length>0?JSON.stringify(trustedOrigins):"[]";return`
 var ExtAppsAdapter = {
   id: 'ext-apps',
   name: 'ext-apps (SEP-1865)',
@@ -751,10 +658,7 @@ var ExtAppsAdapter = {
     return this.sendRequest('ui/unregisterTool', { name: name });
   }
 };
-`.trim();
-}
-function generateClaudeAdapter() {
-  return `
+`.trim()}function generateClaudeAdapter(){return`
 var ClaudeAdapter = {
   id: 'claude',
   name: 'Claude (Anthropic)',
@@ -815,10 +719,7 @@ var ClaudeAdapter = {
     return Promise.resolve();
   }
 };
-`.trim();
-}
-function generateGeminiAdapter() {
-  return `
+`.trim()}function generateGeminiAdapter(){return`
 var GeminiAdapter = {
   id: 'gemini',
   name: 'Google Gemini',
@@ -869,10 +770,7 @@ var GeminiAdapter = {
     return Promise.resolve();
   }
 };
-`.trim();
-}
-function generateGenericAdapter() {
-  return `
+`.trim()}function generateGenericAdapter(){return`
 var GenericAdapter = {
   id: 'generic',
   name: 'Generic Web',
@@ -907,26 +805,7 @@ var GenericAdapter = {
     return Promise.resolve();
   }
 };
-`.trim();
-}
-function generatePlatformDetection(adapters) {
-  const adapterVars = adapters.map((a) => {
-    switch (a) {
-      case "openai":
-        return "OpenAIAdapter";
-      case "ext-apps":
-        return "ExtAppsAdapter";
-      case "claude":
-        return "ClaudeAdapter";
-      case "gemini":
-        return "GeminiAdapter";
-      case "generic":
-        return "GenericAdapter";
-      default:
-        return "";
-    }
-  }).filter(Boolean);
-  return `
+`.trim()}function generatePlatformDetection(adapters){const adapterVars=adapters.map(a=>{switch(a){case"openai":return"OpenAIAdapter";case"ext-apps":return"ExtAppsAdapter";case"claude":return"ClaudeAdapter";case"gemini":return"GeminiAdapter";case"generic":return"GenericAdapter";default:return""}}).filter(Boolean);return`
 var ADAPTERS = [${adapterVars.join(", ")}].sort(function(a, b) { return b.priority - a.priority; });
 
 function detectPlatform() {
@@ -939,10 +818,7 @@ function detectPlatform() {
   log('No platform detected, using generic');
   return GenericAdapter;
 }
-`.trim();
-}
-function generateBridgeClass() {
-  return `
+`.trim()}function generateBridgeClass(){return`
 function FrontMcpBridge() {
   this._adapter = null;
   this._initialized = false;
@@ -1318,626 +1194,16 @@ FrontMcpBridge.prototype._setupDataToolCallHandler = function() {
     }
   }, true); // Use capture phase to handle before React handlers
 };
-`.trim();
-}
-var MAX_MINIFY_CODE_LENGTH = 5e5;
-function minifyJS(code) {
-  if (code.length > MAX_MINIFY_CODE_LENGTH) {
-    return code;
-  }
-  const out = [];
-  let inBlockComment = false;
-  for (const raw of code.split("\n")) {
-    const line = raw.trim();
-    if (inBlockComment) {
-      if (line.includes("*/")) inBlockComment = false;
-      continue;
-    }
-    if (line === "" || line.startsWith("//")) continue;
-    if (line.startsWith("/*")) {
-      if (!line.includes("*/")) inBlockComment = true;
-      continue;
-    }
-    out.push(line);
-  }
-  return out.join("\n");
-}
-function generatePlatformBundle(platform, options = {}) {
-  const platformAdapters = {
-    chatgpt: ["openai", "generic"],
-    claude: ["claude", "generic"],
-    gemini: ["gemini", "generic"],
-    universal: ["openai", "ext-apps", "claude", "gemini", "generic"]
-  };
-  return generateBridgeIIFE({
-    ...options,
-    adapters: platformAdapters[platform]
-  });
-}
-var UNIVERSAL_BRIDGE_SCRIPT = generateBridgeIIFE();
-var BRIDGE_SCRIPT_TAGS = {
-  universal: `<script>${UNIVERSAL_BRIDGE_SCRIPT}</script>`,
-  chatgpt: `<script>${generatePlatformBundle("chatgpt")}</script>`,
-  claude: `<script>${generatePlatformBundle("claude")}</script>`,
-  gemini: `<script>${generatePlatformBundle("gemini")}</script>`
-};
-
-// libs/uipack/src/shell/csp.ts
-var DEFAULT_CDN_DOMAINS = [
-  "https://cdn.jsdelivr.net",
-  "https://cdnjs.cloudflare.com",
-  "https://fonts.googleapis.com",
-  "https://fonts.gstatic.com",
-  "https://esm.sh"
-];
-var DEFAULT_CSP_DIRECTIVES = [
-  "default-src 'none'",
-  `script-src 'self' 'unsafe-inline' ${DEFAULT_CDN_DOMAINS.join(" ")}`,
-  `style-src 'self' 'unsafe-inline' ${DEFAULT_CDN_DOMAINS.join(" ")}`,
-  `img-src 'self' data: ${DEFAULT_CDN_DOMAINS.join(" ")}`,
-  `font-src 'self' data: ${DEFAULT_CDN_DOMAINS.join(" ")}`,
-  `connect-src ${DEFAULT_CDN_DOMAINS.join(" ")}`,
-  "object-src 'self' data:"
-];
-var RESTRICTIVE_CSP_DIRECTIVES = [
-  "default-src 'none'",
-  "script-src 'self' 'unsafe-inline'",
-  "style-src 'self' 'unsafe-inline'",
-  "img-src 'self' data:",
-  "font-src 'self' data:",
-  "connect-src 'none'",
-  "object-src 'self' data:"
-];
-function buildCSPDirectives(csp) {
-  if (!csp) {
-    return [...DEFAULT_CSP_DIRECTIVES];
-  }
-  const validResourceDomains = sanitizeCSPDomains(csp.resourceDomains);
-  const validConnectDomains = sanitizeCSPDomains(csp.connectDomains);
-  const allResourceDomains = [.../* @__PURE__ */ new Set([...DEFAULT_CDN_DOMAINS, ...validResourceDomains])];
-  const directives = [
-    "default-src 'none'",
-    `script-src 'self' 'unsafe-inline' ${allResourceDomains.join(" ")}`,
-    `style-src 'self' 'unsafe-inline' ${allResourceDomains.join(" ")}`
-  ];
-  const imgSources = ["'self'", "data:", ...allResourceDomains];
-  directives.push(`img-src ${imgSources.join(" ")}`);
-  const fontSources = ["'self'", "data:", ...allResourceDomains];
-  directives.push(`font-src ${fontSources.join(" ")}`);
-  const connectSources = [.../* @__PURE__ */ new Set([...allResourceDomains, ...validConnectDomains])];
-  directives.push(`connect-src ${connectSources.join(" ")}`);
-  directives.push("object-src 'self' data:");
-  return directives;
-}
-function buildCSPMetaTag(csp) {
-  const directives = buildCSPDirectives(csp);
-  const content = directives.join("; ");
-  return `<meta http-equiv="Content-Security-Policy" content="${escapeAttribute(content)}">`;
-}
-var LOOPBACK_HOSTS = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]"]);
-function validateCSPDomain(domain) {
-  if (typeof domain !== "string" || /[\s;,'"]/.test(domain)) return false;
-  if (/[?#]/.test(domain)) return false;
-  if (domain.includes("*")) {
-    const wildcard = /^(?:https|wss):\/\/\*\.(.*)$/.exec(domain);
-    return wildcard !== null && /^([a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}$/.test(wildcard[1]);
-  }
-  try {
-    const url = new URL(domain);
-    if (url.protocol === "https:" || url.protocol === "wss:") return true;
-    return (url.protocol === "http:" || url.protocol === "ws:") && LOOPBACK_HOSTS.has(url.hostname);
-  } catch {
-    return false;
-  }
-}
-var reportedInvalidDomains = /* @__PURE__ */ new Set();
-function sanitizeCSPDomains(domains) {
-  if (!domains) return [];
-  const valid = [];
-  for (const domain of domains) {
-    if (validateCSPDomain(domain)) {
-      valid.push(domain);
-    } else if (!reportedInvalidDomains.has(domain)) {
-      reportedInvalidDomains.add(domain);
-      console.warn(
-        `Invalid CSP domain ignored: ${domain} (expected an https:// or wss:// origin, or http:// / ws:// on localhost)`
-      );
-    }
-  }
-  return valid;
-}
-function escapeAttribute(str) {
-  return str.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
-}
-
-// libs/uipack/src/shell/custom-shell-types.ts
-var SHELL_PLACEHOLDER_NAMES = ["CSP", "DATA", "BRIDGE", "CONTENT", "TITLE"];
-var SHELL_PLACEHOLDERS = {
-  CSP: "{{CSP}}",
-  DATA: "{{DATA}}",
-  BRIDGE: "{{BRIDGE}}",
-  CONTENT: "{{CONTENT}}",
-  TITLE: "{{TITLE}}"
-};
-var REQUIRED_PLACEHOLDERS = ["CONTENT"];
-var OPTIONAL_PLACEHOLDERS = ["CSP", "DATA", "BRIDGE", "TITLE"];
-function isInlineShellSource(source) {
-  return typeof source === "object" && source !== null && "inline" in source;
-}
-function isUrlShellSource(source) {
-  return typeof source === "object" && source !== null && "url" in source;
-}
-function isNpmShellSource(source) {
-  return typeof source === "object" && source !== null && "npm" in source;
-}
-
-// libs/uipack/src/shell/custom-shell-applier.ts
-var PLACEHOLDER_PATTERN = new RegExp(`\\{\\{(${SHELL_PLACEHOLDER_NAMES.join("|")})\\}\\}`, "g");
-var VALUE_KEYS = {
-  CSP: "csp",
-  DATA: "data",
-  BRIDGE: "bridge",
-  CONTENT: "content",
-  TITLE: "title"
-};
-function applyShellTemplate(template, values) {
-  return template.replace(PLACEHOLDER_PATTERN, (_token, name) => values[VALUE_KEYS[name]]);
-}
-
-// libs/uipack/src/shell/custom-shell-validator.ts
-function validateShellTemplate(template) {
-  const found = {};
-  for (const name of SHELL_PLACEHOLDER_NAMES) {
-    found[name] = template.includes(SHELL_PLACEHOLDERS[name]);
-  }
-  const missingRequired = REQUIRED_PLACEHOLDERS.filter((name) => !found[name]);
-  const missingOptional = OPTIONAL_PLACEHOLDERS.filter((name) => !found[name]);
-  return {
-    valid: missingRequired.length === 0,
-    found,
-    missingRequired,
-    missingOptional
-  };
-}
-
-// libs/uipack/src/utils/index.ts
-function escapeHtml(str) {
-  if (str === null || str === void 0) {
-    return "";
-  }
-  const s = String(str);
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
-var SCRIPT_UNSAFE_CHARACTERS = /[<>&\u2028\u2029]/g;
-function toUnicodeEscape(character) {
-  return `\\u${character.charCodeAt(0).toString(16).padStart(4, "0")}`;
-}
-function safeJsonForScript(value) {
-  if (value === void 0) {
-    return "null";
-  }
-  try {
-    const jsonString = JSON.stringify(value, (_key, val) => {
-      if (typeof val === "bigint") {
-        return val.toString();
-      }
-      return val;
-    });
-    if (jsonString === void 0) {
-      return "null";
-    }
-    return jsonString.replace(SCRIPT_UNSAFE_CHARACTERS, toUnicodeEscape);
-  } catch {
-    return '{"error":"Value could not be serialized"}';
-  }
-}
-
-// libs/uipack/src/shell/trusted-html.ts
-var TRUSTED_HTML = /* @__PURE__ */ Symbol.for("@frontmcp/uipack/trusted-html");
-function trustedHtml(markup) {
-  const value = String(markup);
-  return Object.freeze({ [TRUSTED_HTML]: value, toString: () => value });
-}
-function isTrustedHtml(value) {
-  return typeof value === "object" && value !== null && typeof value[TRUSTED_HTML] === "string";
-}
-function interpolate(value) {
-  if (isTrustedHtml(value)) return value[TRUSTED_HTML];
-  if (Array.isArray(value)) return value.map(interpolate).join("");
-  if (value === false) return "";
-  return escapeHtml(value);
-}
-function html(strings, ...values) {
-  let markup = strings[0];
-  for (let index = 0; index < values.length; index++) {
-    markup += interpolate(values[index]) + strings[index + 1];
-  }
-  return trustedHtml(markup);
-}
-
-// libs/uipack/src/shell/data-injector.ts
-function hasSizing(sizing) {
-  if (!sizing) return false;
-  return sizing.preferredHeight !== void 0 || sizing.minHeight !== void 0 || sizing.maxHeight !== void 0 || sizing.aspectRatio !== void 0 || sizing.autoResize !== void 0;
-}
-function buildDataInjectionScript(options) {
-  const { toolName, input, output, structuredContent, sizing, displayMode } = options;
-  const lines = [
-    `window.__mcpAppsEnabled = true;`,
-    `window.__mcpToolName = ${safeJsonForScript(toolName)};`,
-    `window.__mcpToolInput = ${safeJsonForScript(input ?? null)};`,
-    `window.__mcpToolOutput = ${safeJsonForScript(output ?? null)};`,
-    `window.__mcpStructuredContent = ${safeJsonForScript(structuredContent ?? null)};`
-  ];
-  if (hasSizing(sizing)) {
-    lines.push(`window.__mcpWidgetSizing = ${safeJsonForScript(sizing)};`);
-  }
-  if (displayMode && displayMode !== "inline") {
-    lines.push(`window.__mcpDisplayMode = ${safeJsonForScript(displayMode)};`);
-  }
-  return `<script>
+`.trim()}var MAX_MINIFY_CODE_LENGTH=5e5;function minifyJS(code){if(code.length>MAX_MINIFY_CODE_LENGTH){return code}const out=[];let inBlockComment=false;for(const raw of code.split("\n")){const line=raw.trim();if(inBlockComment){if(line.includes("*/"))inBlockComment=false;continue}if(line===""||line.startsWith("//"))continue;if(line.startsWith("/*")){if(!line.includes("*/"))inBlockComment=true;continue}out.push(line)}return out.join("\n")}function generatePlatformBundle(platform,options={}){const platformAdapters={chatgpt:["openai","generic"],claude:["claude","generic"],gemini:["gemini","generic"],universal:["openai","ext-apps","claude","gemini","generic"]};return generateBridgeIIFE({...options,adapters:platformAdapters[platform]})}var UNIVERSAL_BRIDGE_SCRIPT=generateBridgeIIFE();var BRIDGE_SCRIPT_TAGS={universal:`<script>${UNIVERSAL_BRIDGE_SCRIPT}</script>`,chatgpt:`<script>${generatePlatformBundle("chatgpt")}</script>`,claude:`<script>${generatePlatformBundle("claude")}</script>`,gemini:`<script>${generatePlatformBundle("gemini")}</script>`};var DEFAULT_CDN_DOMAINS=["https://cdn.jsdelivr.net","https://cdnjs.cloudflare.com","https://fonts.googleapis.com","https://fonts.gstatic.com","https://esm.sh"];var DEFAULT_CSP_DIRECTIVES=["default-src 'none'",`script-src 'self' 'unsafe-inline' ${DEFAULT_CDN_DOMAINS.join(" ")}`,`style-src 'self' 'unsafe-inline' ${DEFAULT_CDN_DOMAINS.join(" ")}`,`img-src 'self' data: ${DEFAULT_CDN_DOMAINS.join(" ")}`,`font-src 'self' data: ${DEFAULT_CDN_DOMAINS.join(" ")}`,`connect-src ${DEFAULT_CDN_DOMAINS.join(" ")}`,"object-src 'self' data:"];var RESTRICTIVE_CSP_DIRECTIVES=["default-src 'none'","script-src 'self' 'unsafe-inline'","style-src 'self' 'unsafe-inline'","img-src 'self' data:","font-src 'self' data:","connect-src 'none'","object-src 'self' data:"];function buildCSPDirectives(csp){if(!csp){return[...DEFAULT_CSP_DIRECTIVES]}const validResourceDomains=sanitizeCSPDomains(csp.resourceDomains);const validConnectDomains=sanitizeCSPDomains(csp.connectDomains);const allResourceDomains=[...new Set([...DEFAULT_CDN_DOMAINS,...validResourceDomains])];const directives=["default-src 'none'",`script-src 'self' 'unsafe-inline' ${allResourceDomains.join(" ")}`,`style-src 'self' 'unsafe-inline' ${allResourceDomains.join(" ")}`];const imgSources=["'self'","data:",...allResourceDomains];directives.push(`img-src ${imgSources.join(" ")}`);const fontSources=["'self'","data:",...allResourceDomains];directives.push(`font-src ${fontSources.join(" ")}`);const connectSources=[...new Set([...allResourceDomains,...validConnectDomains])];directives.push(`connect-src ${connectSources.join(" ")}`);directives.push("object-src 'self' data:");return directives}function buildCSPMetaTag(csp){const directives=buildCSPDirectives(csp);const content=directives.join("; ");return`<meta http-equiv="Content-Security-Policy" content="${escapeAttribute(content)}">`}var LOOPBACK_HOSTS=new Set(["localhost","127.0.0.1","[::1]"]);function validateCSPDomain(domain){if(typeof domain!=="string"||/[\s;,'"]/.test(domain))return false;if(/[?#]/.test(domain))return false;if(domain.includes("*")){const wildcard=/^(?:https|wss):\/\/\*\.(.*)$/.exec(domain);return wildcard!==null&&/^([a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}$/.test(wildcard[1])}try{const url=new URL(domain);if(url.protocol==="https:"||url.protocol==="wss:")return true;return(url.protocol==="http:"||url.protocol==="ws:")&&LOOPBACK_HOSTS.has(url.hostname)}catch{return false}}var reportedInvalidDomains=new Set;function sanitizeCSPDomains(domains){if(!domains)return[];const valid=[];for(const domain of domains){if(validateCSPDomain(domain)){valid.push(domain)}else if(!reportedInvalidDomains.has(domain)){reportedInvalidDomains.add(domain);console.warn(`Invalid CSP domain ignored: ${domain} (expected an https:// or wss:// origin, or http:// / ws:// on localhost)`)}}return valid}function escapeAttribute(str){return str.replace(/&/g,"&amp;").replace(/"/g,"&quot;").replace(/'/g,"&#39;").replace(/</g,"&lt;").replace(/>/g,"&gt;")}var SHELL_PLACEHOLDER_NAMES=["CSP","DATA","BRIDGE","CONTENT","TITLE"];var SHELL_PLACEHOLDERS={CSP:"{{CSP}}",DATA:"{{DATA}}",BRIDGE:"{{BRIDGE}}",CONTENT:"{{CONTENT}}",TITLE:"{{TITLE}}"};var REQUIRED_PLACEHOLDERS=["CONTENT"];var OPTIONAL_PLACEHOLDERS=["CSP","DATA","BRIDGE","TITLE"];function isInlineShellSource(source){return typeof source==="object"&&source!==null&&"inline"in source}function isUrlShellSource(source){return typeof source==="object"&&source!==null&&"url"in source}function isNpmShellSource(source){return typeof source==="object"&&source!==null&&"npm"in source}var PLACEHOLDER_PATTERN=new RegExp(`\\{\\{(${SHELL_PLACEHOLDER_NAMES.join("|")})\\}\\}`,"g");var VALUE_KEYS={CSP:"csp",DATA:"data",BRIDGE:"bridge",CONTENT:"content",TITLE:"title"};function applyShellTemplate(template,values){return template.replace(PLACEHOLDER_PATTERN,(_token,name)=>values[VALUE_KEYS[name]])}function validateShellTemplate(template){const found={};for(const name of SHELL_PLACEHOLDER_NAMES){found[name]=template.includes(SHELL_PLACEHOLDERS[name])}const missingRequired=REQUIRED_PLACEHOLDERS.filter(name=>!found[name]);const missingOptional=OPTIONAL_PLACEHOLDERS.filter(name=>!found[name]);return{valid:missingRequired.length===0,found,missingRequired,missingOptional}}function escapeHtml(str){if(str===null||str===void 0){return""}const s=String(str);return s.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#39;").replace(/\u2028/g,"\\u2028").replace(/\u2029/g,"\\u2029")}var SCRIPT_UNSAFE_CHARACTERS=/[<>&\u2028\u2029]/g;function toUnicodeEscape(character){return`\\u${character.charCodeAt(0).toString(16).padStart(4,"0")}`}function safeJsonForScript(value){if(value===void 0){return"null"}try{const jsonString=JSON.stringify(value,(_key,val)=>{if(typeof val==="bigint"){return val.toString()}return val});if(jsonString===void 0){return"null"}return jsonString.replace(SCRIPT_UNSAFE_CHARACTERS,toUnicodeEscape)}catch{return'{"error":"Value could not be serialized"}'}}var TRUSTED_HTML=Symbol.for("@frontmcp/uipack/trusted-html");function trustedHtml(markup){const value=String(markup);return Object.freeze({[TRUSTED_HTML]:value,toString:()=>value})}function isTrustedHtml(value){return typeof value==="object"&&value!==null&&typeof value[TRUSTED_HTML]==="string"}function interpolate(value){if(isTrustedHtml(value))return value[TRUSTED_HTML];if(Array.isArray(value))return value.map(interpolate).join("");if(value===false)return"";return escapeHtml(value)}function html(strings,...values){let markup=strings[0];for(let index=0;index<values.length;index++){markup+=interpolate(values[index])+strings[index+1]}return trustedHtml(markup)}function hasSizing(sizing){if(!sizing)return false;return sizing.preferredHeight!==void 0||sizing.minHeight!==void 0||sizing.maxHeight!==void 0||sizing.aspectRatio!==void 0||sizing.autoResize!==void 0}function buildDataInjectionScript(options){const{toolName,input,output,structuredContent,sizing,displayMode}=options;const lines=[`window.__mcpAppsEnabled = true;`,`window.__mcpToolName = ${safeJsonForScript(toolName)};`,`window.__mcpToolInput = ${safeJsonForScript(input??null)};`,`window.__mcpToolOutput = ${safeJsonForScript(output??null)};`,`window.__mcpStructuredContent = ${safeJsonForScript(structuredContent??null)};`];if(hasSizing(sizing)){lines.push(`window.__mcpWidgetSizing = ${safeJsonForScript(sizing)};`)}if(displayMode&&displayMode!=="inline"){lines.push(`window.__mcpDisplayMode = ${safeJsonForScript(displayMode)};`)}return`<script>
 ${lines.join("\n")}
-</script>`;
-}
-function buildCustomDataInjectionScript(descriptor) {
-  if (descriptor.script !== void 0) {
-    return descriptor.script;
-  }
-  if (descriptor.globalKey !== void 0) {
-    return `<script>window[${safeJsonForScript(descriptor.globalKey)}] = ${safeJsonForScript(
-      descriptor.value ?? null
-    )};</script>`;
-  }
-  return "";
-}
-var _uniqueIdCounter = 0;
-function createTemplateHelpers() {
-  return {
-    escapeHtml: (str) => escapeHtml(str),
-    formatDate: (date, format) => {
-      const d = date instanceof Date ? date : new Date(date);
-      if (isNaN(d.getTime())) return String(date);
-      if (format === "iso") return d.toISOString();
-      if (format === "date") return d.toLocaleDateString();
-      if (format === "time") return d.toLocaleTimeString();
-      return d.toLocaleString();
-    },
-    formatCurrency: (amount, currency = "USD") => {
-      return new Intl.NumberFormat("en-US", {
-        style: "currency",
-        currency
-      }).format(amount);
-    },
-    uniqueId: (prefix = "mcp") => {
-      return `${prefix}-${++_uniqueIdCounter}`;
-    },
-    jsonEmbed: (data) => safeJsonForScript(data),
-    html,
-    trustedHtml
-  };
-}
-
-// libs/uipack/src/shell/sizing-css.ts
-function sanitizeCssValue(value) {
-  return value.replace(/[<>{};]/g, "").trim();
-}
-function toCssLength(value) {
-  return typeof value === "number" ? `${value}px` : sanitizeCssValue(value);
-}
-function buildSizingStyleTag(sizing) {
-  if (!hasSizing(sizing)) return "";
-  const hasCssSizing = sizing.preferredHeight !== void 0 || sizing.minHeight !== void 0 || sizing.maxHeight !== void 0 || sizing.aspectRatio !== void 0;
-  if (!hasCssSizing) return "";
-  const rootRules = [];
-  const docRules = ["margin: 0;"];
-  if (sizing.preferredHeight !== void 0) {
-    const h = toCssLength(sizing.preferredHeight);
-    docRules.push(`height: ${h};`);
-    rootRules.push(`min-height: ${h};`);
-  }
-  if (sizing.minHeight !== void 0) {
-    const mh = toCssLength(sizing.minHeight);
-    docRules.push(`min-height: ${mh};`);
-    rootRules.push(`min-height: ${mh};`);
-  }
-  if (sizing.maxHeight !== void 0) {
-    const mx = toCssLength(sizing.maxHeight);
-    docRules.push(`max-height: ${mx};`);
-    rootRules.push(`max-height: ${mx};`);
-  }
-  if (sizing.aspectRatio !== void 0) {
-    const ar = typeof sizing.aspectRatio === "number" ? String(sizing.aspectRatio) : sanitizeCssValue(sizing.aspectRatio);
-    if (ar) rootRules.push(`aspect-ratio: ${ar};`);
-  }
-  const parts = [`html, body { ${docRules.join(" ")} }`];
-  if (rootRules.length > 0) {
-    parts.push(`#root { ${rootRules.join(" ")} }`);
-  }
-  return `<style>${parts.join("\n")}</style>`;
-}
-
-// libs/uipack/src/shell/builder.ts
-function resolveDataInjectionScript(args) {
-  if (args.dataInjection) {
-    return buildCustomDataInjectionScript(args.dataInjection);
-  }
-  return buildDataInjectionScript({
-    toolName: args.toolName,
-    input: args.input,
-    output: args.output,
-    structuredContent: args.structuredContent,
-    sizing: args.sizing,
-    displayMode: args.displayMode
-  });
-}
-function buildShell(content, config) {
-  const {
-    toolName,
-    csp,
-    withShell = true,
-    input,
-    output,
-    structuredContent,
-    includeBridge = true,
-    title,
-    sizing,
-    displayMode
-  } = config;
-  const { customShell, dataInjection } = config;
-  const dataScript = resolveDataInjectionScript({
-    dataInjection,
-    toolName,
-    input,
-    output,
-    structuredContent,
-    sizing,
-    displayMode
-  });
-  if (!withShell) {
-    const html3 = `${dataScript}
-${content}`;
-    return {
-      html: html3,
-      hash: simpleHash(html3),
-      size: Buffer.byteLength(html3, "utf-8")
-    };
-  }
-  if (customShell) {
-    return buildCustomShell(content, customShell, {
-      csp,
-      toolName,
-      input,
-      output,
-      structuredContent,
-      includeBridge,
-      title,
-      sizing,
-      displayMode,
-      dataInjection
-    });
-  }
-  const headParts = [
-    '<meta charset="UTF-8">',
-    '<meta name="viewport" content="width=device-width, initial-scale=1.0">'
-  ];
-  if (title) {
-    headParts.push(`<title>${escapeHtmlForTag(title)}</title>`);
-  }
-  headParts.push(buildCSPMetaTag(csp));
-  headParts.push(dataScript);
-  const sizingStyle = buildSizingStyleTag(sizing);
-  if (sizingStyle) {
-    headParts.push(sizingStyle);
-  }
-  if (includeBridge) {
-    const bridgeScript = generateBridgeIIFE({ minify: true });
-    headParts.push(`<script>${bridgeScript}</script>`);
-  }
-  const html2 = `<!DOCTYPE html>
+</script>`}function buildCustomDataInjectionScript(descriptor){if(descriptor.script!==void 0){return descriptor.script}if(descriptor.globalKey!==void 0){return`<script>window[${safeJsonForScript(descriptor.globalKey)}] = ${safeJsonForScript(descriptor.value??null)};</script>`}return""}var _uniqueIdCounter=0;function createTemplateHelpers(){return{escapeHtml:str=>escapeHtml(str),formatDate:(date,format)=>{const d=date instanceof Date?date:new Date(date);if(isNaN(d.getTime()))return String(date);if(format==="iso")return d.toISOString();if(format==="date")return d.toLocaleDateString();if(format==="time")return d.toLocaleTimeString();return d.toLocaleString()},formatCurrency:(amount,currency="USD")=>{return new Intl.NumberFormat("en-US",{style:"currency",currency}).format(amount)},uniqueId:(prefix="mcp")=>{return`${prefix}-${++_uniqueIdCounter}`},jsonEmbed:data=>safeJsonForScript(data),html,trustedHtml}}function sanitizeCssValue(value){return value.replace(/[<>{};]/g,"").trim()}function toCssLength(value){return typeof value==="number"?`${value}px`:sanitizeCssValue(value)}function buildSizingStyleTag(sizing){if(!hasSizing(sizing))return"";const hasCssSizing=sizing.preferredHeight!==void 0||sizing.minHeight!==void 0||sizing.maxHeight!==void 0||sizing.aspectRatio!==void 0;if(!hasCssSizing)return"";const rootRules=[];const docRules=["margin: 0;"];if(sizing.preferredHeight!==void 0){const h=toCssLength(sizing.preferredHeight);docRules.push(`height: ${h};`);rootRules.push(`min-height: ${h};`)}if(sizing.minHeight!==void 0){const mh=toCssLength(sizing.minHeight);docRules.push(`min-height: ${mh};`);rootRules.push(`min-height: ${mh};`)}if(sizing.maxHeight!==void 0){const mx=toCssLength(sizing.maxHeight);docRules.push(`max-height: ${mx};`);rootRules.push(`max-height: ${mx};`)}if(sizing.aspectRatio!==void 0){const ar=typeof sizing.aspectRatio==="number"?String(sizing.aspectRatio):sanitizeCssValue(sizing.aspectRatio);if(ar)rootRules.push(`aspect-ratio: ${ar};`)}const parts=[`html, body { ${docRules.join(" ")} }`];if(rootRules.length>0){parts.push(`#root { ${rootRules.join(" ")} }`)}return`<style>${parts.join("\n")}</style>`}function resolveDataInjectionScript(args){if(args.dataInjection){return buildCustomDataInjectionScript(args.dataInjection)}return buildDataInjectionScript({toolName:args.toolName,input:args.input,output:args.output,structuredContent:args.structuredContent,sizing:args.sizing,displayMode:args.displayMode})}function buildShell(content,config){const{toolName,csp,withShell=true,input,output,structuredContent,includeBridge=true,title,sizing,displayMode}=config;const{customShell,dataInjection}=config;const dataScript=resolveDataInjectionScript({dataInjection,toolName,input,output,structuredContent,sizing,displayMode});if(!withShell){const html3=`${dataScript}
+${content}`;return{html:html3,hash:simpleHash(html3),size:Buffer.byteLength(html3,"utf-8")}}if(customShell){return buildCustomShell(content,customShell,{csp,toolName,input,output,structuredContent,includeBridge,title,sizing,displayMode,dataInjection})}const headParts=['<meta charset="UTF-8">','<meta name="viewport" content="width=device-width, initial-scale=1.0">'];if(title){headParts.push(`<title>${escapeHtmlForTag(title)}</title>`)}headParts.push(buildCSPMetaTag(csp));headParts.push(dataScript);const sizingStyle=buildSizingStyleTag(sizing);if(sizingStyle){headParts.push(sizingStyle)}if(includeBridge){const bridgeScript=generateBridgeIIFE({minify:true});headParts.push(`<script>${bridgeScript}</script>`)}const html2=`<!DOCTYPE html>
 <html lang="en">
 <head>
-${headParts.map((p) => `  ${p}`).join("\n")}
+${headParts.map(p=>`  ${p}`).join("\n")}
 </head>
 <body>
 ${content}
 </body>
-</html>`;
-  return {
-    html: html2,
-    hash: simpleHash(html2),
-    size: Buffer.byteLength(html2, "utf-8")
-  };
-}
-function buildCustomShell(content, customShell, ctx) {
-  let template;
-  if (typeof customShell === "string") {
-    const validation = validateShellTemplate(customShell);
-    if (!validation.valid) {
-      throw new Error(
-        `Custom shell template is missing required placeholder(s): ${validation.missingRequired.map((n) => `{{${n}}}`).join(", ")}`
-      );
-    }
-    template = customShell;
-  } else {
-    template = customShell.template;
-  }
-  const cspTag = buildCSPMetaTag(ctx.csp);
-  const dataScript = resolveDataInjectionScript({
-    dataInjection: ctx.dataInjection,
-    toolName: ctx.toolName,
-    input: ctx.input,
-    output: ctx.output,
-    structuredContent: ctx.structuredContent,
-    sizing: ctx.sizing,
-    displayMode: ctx.displayMode
-  });
-  const sizingStyle = buildSizingStyleTag(ctx.sizing);
-  const dataWithSizing = sizingStyle ? `${dataScript}
-${sizingStyle}` : dataScript;
-  let bridgeHtml = "";
-  if (ctx.includeBridge) {
-    const bridgeScript = generateBridgeIIFE({ minify: true });
-    bridgeHtml = `<script>${bridgeScript}</script>`;
-  }
-  const html2 = applyShellTemplate(template, {
-    csp: cspTag,
-    data: dataWithSizing,
-    bridge: bridgeHtml,
-    content,
-    title: ctx.title ? escapeHtmlForTag(ctx.title) : ""
-  });
-  return {
-    html: html2,
-    hash: simpleHash(html2),
-    size: Buffer.byteLength(html2, "utf-8")
-  };
-}
-function simpleHash(str) {
-  let hash = 0;
-  for (let i = 0; i < str.length; i++) {
-    const char = str.charCodeAt(i);
-    hash = (hash << 5) - hash + char | 0;
-  }
-  return Math.abs(hash).toString(16).padStart(8, "0");
-}
-function escapeHtmlForTag(str) {
-  return str.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
-}
-
-// libs/uipack/src/shell/custom-shell-resolver.ts
-var DEFAULT_TIMEOUT_MS = 1e4;
-var templateCache = /* @__PURE__ */ new Map();
-async function resolveShellTemplate(source, options) {
-  if (isInlineShellSource(source)) {
-    return resolveInline(source.inline);
-  }
-  if (isUrlShellSource(source)) {
-    const cacheKey = `url:${source.url}`;
-    if (!options?.noCache) {
-      const cached = templateCache.get(cacheKey);
-      if (cached) return cached;
-    }
-    const template = await fetchWithTimeout(source.url, source.timeout ?? DEFAULT_TIMEOUT_MS);
-    const resolved = buildResolved(template, "url");
-    if (!options?.noCache) {
-      templateCache.set(cacheKey, resolved);
-    }
-    return resolved;
-  }
-  if (isNpmShellSource(source)) {
-    const specifier = source.version ? `${source.npm}@${source.version}` : source.npm;
-    const cacheKey = `npm:${specifier}`;
-    if (!options?.noCache) {
-      const cached = templateCache.get(cacheKey);
-      if (cached) return cached;
-    }
-    const template = await resolveNpmTemplate(source, specifier, options?.resolver);
-    const resolved = buildResolved(template, "npm");
-    if (!options?.noCache) {
-      templateCache.set(cacheKey, resolved);
-    }
-    return resolved;
-  }
-  throw new Error('Invalid custom shell source: must have "inline", "url", or "npm" property');
-}
-function clearShellTemplateCache() {
-  templateCache.clear();
-}
-function resolveInline(template) {
-  return buildResolved(template, "inline");
-}
-function buildResolved(template, sourceType) {
-  const validation = validateShellTemplate(template);
-  if (!validation.valid) {
-    throw new Error(
-      `Custom shell template is missing required placeholder(s): ${validation.missingRequired.map((n) => `{{${n}}}`).join(", ")}`
-    );
-  }
-  return { template, sourceType, validation };
-}
-async function fetchWithTimeout(url, timeoutMs) {
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), timeoutMs);
-  try {
-    const response = await fetch(url, { signal: controller.signal });
-    if (!response.ok) {
-      throw new Error(`Failed to fetch shell template from ${url}: HTTP ${response.status}`);
-    }
-    return await response.text();
-  } catch (err) {
-    if (err instanceof Error && err.name === "AbortError") {
-      throw new Error(`Shell template fetch timed out after ${timeoutMs}ms: ${url}`);
-    }
-    throw err;
-  } finally {
-    clearTimeout(timer);
-  }
-}
-async function resolveNpmTemplate(source, specifier, resolver) {
-  const cdnUrl = resolveNpmToCdnUrl(specifier, resolver);
-  const moduleText = await fetchWithTimeout(cdnUrl, DEFAULT_TIMEOUT_MS);
-  return extractTemplateFromModule(moduleText, source.exportName);
-}
-function resolveNpmToCdnUrl(specifier, resolver) {
-  if (resolver) {
-    const resolved = resolver.resolve(specifier);
-    if (resolved) {
-      return resolved.value;
-    }
-  }
-  return `https://esm.sh/${specifier}`;
-}
-function extractTemplateFromModule(moduleText, exportName) {
-  if (exportName && exportName !== "default") {
-    const namedPattern = new RegExp(
-      `export\\s+(?:const|let|var)\\s+${escapeRegExp(exportName)}\\s*=\\s*\`([\\s\\S]*?)\``
-    );
-    const namedMatch = moduleText.match(namedPattern);
-    if (namedMatch) {
-      return namedMatch[1];
-    }
-    throw new Error(
-      `Could not extract named export "${exportName}" from npm shell package. The package must export a template literal string.`
-    );
-  }
-  const defaultPattern = /export\s+default\s+`([\s\S]*?)`/;
-  const defaultMatch = moduleText.match(defaultPattern);
-  if (defaultMatch) {
-    return defaultMatch[1];
-  }
-  throw new Error(
-    "Could not extract default export from npm shell package. The package must export a template literal string (e.g., export default `<html>...</html>`)."
-  );
-}
-function escapeRegExp(str) {
-  return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-export {
-  DEFAULT_CDN_DOMAINS,
-  DEFAULT_CSP_DIRECTIVES,
-  OPTIONAL_PLACEHOLDERS,
-  REQUIRED_PLACEHOLDERS,
-  RESTRICTIVE_CSP_DIRECTIVES,
-  SHELL_PLACEHOLDERS,
-  SHELL_PLACEHOLDER_NAMES,
-  applyShellTemplate,
-  buildCSPDirectives,
-  buildCSPMetaTag,
-  buildCustomDataInjectionScript,
-  buildDataInjectionScript,
-  buildShell,
-  buildSizingStyleTag,
-  clearShellTemplateCache,
-  createTemplateHelpers,
-  hasSizing,
-  html,
-  isInlineShellSource,
-  isNpmShellSource,
-  isTrustedHtml,
-  isUrlShellSource,
-  resolveShellTemplate,
-  sanitizeCSPDomains,
-  trustedHtml,
-  validateCSPDomain,
-  validateShellTemplate
-};
+</html>`;return{html:html2,hash:simpleHash(html2),size:Buffer.byteLength(html2,"utf-8")}}function buildCustomShell(content,customShell,ctx){let template;if(typeof customShell==="string"){const validation=validateShellTemplate(customShell);if(!validation.valid){throw new Error(`Custom shell template is missing required placeholder(s): ${validation.missingRequired.map(n=>`{{${n}}}`).join(", ")}`)}template=customShell}else{template=customShell.template}const cspTag=buildCSPMetaTag(ctx.csp);const dataScript=resolveDataInjectionScript({dataInjection:ctx.dataInjection,toolName:ctx.toolName,input:ctx.input,output:ctx.output,structuredContent:ctx.structuredContent,sizing:ctx.sizing,displayMode:ctx.displayMode});const sizingStyle=buildSizingStyleTag(ctx.sizing);const dataWithSizing=sizingStyle?`${dataScript}
+${sizingStyle}`:dataScript;let bridgeHtml="";if(ctx.includeBridge){const bridgeScript=generateBridgeIIFE({minify:true});bridgeHtml=`<script>${bridgeScript}</script>`}const html2=applyShellTemplate(template,{csp:cspTag,data:dataWithSizing,bridge:bridgeHtml,content,title:ctx.title?escapeHtmlForTag(ctx.title):""});return{html:html2,hash:simpleHash(html2),size:Buffer.byteLength(html2,"utf-8")}}function simpleHash(str){let hash=0;for(let i=0;i<str.length;i++){const char=str.charCodeAt(i);hash=(hash<<5)-hash+char|0}return Math.abs(hash).toString(16).padStart(8,"0")}function escapeHtmlForTag(str){return str.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;")}var DEFAULT_TIMEOUT_MS=1e4;var templateCache=new Map;async function resolveShellTemplate(source,options){if(isInlineShellSource(source)){return resolveInline(source.inline)}if(isUrlShellSource(source)){const cacheKey=`url:${source.url}`;if(!options?.noCache){const cached=templateCache.get(cacheKey);if(cached)return cached}const template=await fetchWithTimeout(source.url,source.timeout??DEFAULT_TIMEOUT_MS);const resolved=buildResolved(template,"url");if(!options?.noCache){templateCache.set(cacheKey,resolved)}return resolved}if(isNpmShellSource(source)){const specifier=source.version?`${source.npm}@${source.version}`:source.npm;const cacheKey=`npm:${specifier}`;if(!options?.noCache){const cached=templateCache.get(cacheKey);if(cached)return cached}const template=await resolveNpmTemplate(source,specifier,options?.resolver);const resolved=buildResolved(template,"npm");if(!options?.noCache){templateCache.set(cacheKey,resolved)}return resolved}throw new Error('Invalid custom shell source: must have "inline", "url", or "npm" property')}function clearShellTemplateCache(){templateCache.clear()}function resolveInline(template){return buildResolved(template,"inline")}function buildResolved(template,sourceType){const validation=validateShellTemplate(template);if(!validation.valid){throw new Error(`Custom shell template is missing required placeholder(s): ${validation.missingRequired.map(n=>`{{${n}}}`).join(", ")}`)}return{template,sourceType,validation}}async function fetchWithTimeout(url,timeoutMs){const controller=new AbortController;const timer=setTimeout(()=>controller.abort(),timeoutMs);try{const response=await fetch(url,{signal:controller.signal});if(!response.ok){throw new Error(`Failed to fetch shell template from ${url}: HTTP ${response.status}`)}return await response.text()}catch(err){if(err instanceof Error&&err.name==="AbortError"){throw new Error(`Shell template fetch timed out after ${timeoutMs}ms: ${url}`)}throw err}finally{clearTimeout(timer)}}async function resolveNpmTemplate(source,specifier,resolver){const cdnUrl=resolveNpmToCdnUrl(specifier,resolver);const moduleText=await fetchWithTimeout(cdnUrl,DEFAULT_TIMEOUT_MS);return extractTemplateFromModule(moduleText,source.exportName)}function resolveNpmToCdnUrl(specifier,resolver){if(resolver){const resolved=resolver.resolve(specifier);if(resolved){return resolved.value}}return`https://esm.sh/${specifier}`}function extractTemplateFromModule(moduleText,exportName){if(exportName&&exportName!=="default"){const namedPattern=new RegExp(`export\\s+(?:const|let|var)\\s+${escapeRegExp(exportName)}\\s*=\\s*\`([\\s\\S]*?)\``);const namedMatch=moduleText.match(namedPattern);if(namedMatch){return namedMatch[1]}throw new Error(`Could not extract named export "${exportName}" from npm shell package. The package must export a template literal string.`)}const defaultPattern=/export\s+default\s+`([\s\S]*?)`/;const defaultMatch=moduleText.match(defaultPattern);if(defaultMatch){return defaultMatch[1]}throw new Error("Could not extract default export from npm shell package. The package must export a template literal string (e.g., export default `<html>...</html>`).")}function escapeRegExp(str){return str.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}export{DEFAULT_CDN_DOMAINS,DEFAULT_CSP_DIRECTIVES,OPTIONAL_PLACEHOLDERS,REQUIRED_PLACEHOLDERS,RESTRICTIVE_CSP_DIRECTIVES,SHELL_PLACEHOLDERS,SHELL_PLACEHOLDER_NAMES,applyShellTemplate,buildCSPDirectives,buildCSPMetaTag,buildCustomDataInjectionScript,buildDataInjectionScript,buildShell,buildSizingStyleTag,clearShellTemplateCache,createTemplateHelpers,hasSizing,html,isInlineShellSource,isNpmShellSource,isTrustedHtml,isUrlShellSource,resolveShellTemplate,sanitizeCSPDomains,trustedHtml,validateCSPDomain,validateShellTemplate};