@frontmcp/uipack 1.10.8 → 1.10.9-rc.2

package/esm/index.mjs

@@ -1,220 +1,7 @@
 var __frontmcpModule = typeof process !== "undefined" && typeof process.getBuiltinModule === "function" ? process.getBuiltinModule("module") : undefined;
 const require = __frontmcpModule ? __frontmcpModule.createRequire(import.meta.url || 'file:///') : undefined;
 // __frontmcpCreateRequire
-var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
-  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
-}) : x)(function(x) {
-  if (typeof require !== "undefined") return require.apply(this, arguments);
-  throw Error('Dynamic require of "' + x + '" is not supported');
-});
-
-// libs/uipack/src/types/ui-runtime.ts
-function isUIType(value) {
-  return typeof value === "string" && ["html", "react", "mdx", "markdown", "auto"].includes(value);
-}
-function isBundlingMode(value) {
-  return typeof value === "string" && ["static", "dynamic"].includes(value);
-}
-function isResourceMode(value) {
-  return typeof value === "string" && ["cdn", "inline"].includes(value);
-}
-function isDisplayMode(value) {
-  return typeof value === "string" && ["inline", "fullscreen", "pip"].includes(value);
-}
-function isOutputMode(value) {
-  return typeof value === "string" && ["code-only", "full-ssr"].includes(value);
-}
-var DEFAULT_CSP_BY_TYPE = {
-  html: {
-    scriptSrc: ["'self'", "'unsafe-inline'"],
-    styleSrc: ["'self'", "'unsafe-inline'"],
-    connectSrc: []
-  },
-  react: {
-    scriptSrc: ["'self'", "'unsafe-inline'", "https://unpkg.com"],
-    styleSrc: ["'self'", "'unsafe-inline'"],
-    connectSrc: []
-  },
-  mdx: {
-    scriptSrc: ["'self'", "'unsafe-inline'", "https://unpkg.com"],
-    styleSrc: ["'self'", "'unsafe-inline'"],
-    connectSrc: []
-  },
-  markdown: {
-    scriptSrc: ["'self'", "'unsafe-inline'"],
-    styleSrc: ["'self'", "'unsafe-inline'"],
-    connectSrc: []
-  },
-  auto: {
-    scriptSrc: ["'self'", "'unsafe-inline'", "https://unpkg.com"],
-    styleSrc: ["'self'", "'unsafe-inline'"],
-    connectSrc: []
-  }
-};
-var DEFAULT_RENDERER_ASSETS = {
-  html: {
-    handlebars: { url: "https://unpkg.com/handlebars@latest/dist/handlebars.runtime.min.js" }
-  },
-  react: {
-    react: { url: "https://unpkg.com/react@18/umd/react.production.min.js" },
-    reactDom: { url: "https://unpkg.com/react-dom@18/umd/react-dom.production.min.js" }
-  },
-  mdx: {
-    react: { url: "https://unpkg.com/react@18/umd/react.production.min.js" },
-    reactDom: { url: "https://unpkg.com/react-dom@18/umd/react-dom.production.min.js" },
-    markdown: { url: "https://unpkg.com/marked@latest/marked.min.js" }
-  },
-  markdown: {
-    markdown: { url: "https://unpkg.com/marked@latest/marked.min.js" }
-  },
-  auto: {
-    react: { url: "https://unpkg.com/react@18/umd/react.production.min.js" },
-    reactDom: { url: "https://unpkg.com/react-dom@18/umd/react-dom.production.min.js" },
-    markdown: { url: "https://unpkg.com/marked@latest/marked.min.js" },
-    handlebars: { url: "https://unpkg.com/handlebars@latest/dist/handlebars.runtime.min.js" }
-  }
-};
-
-// libs/uipack/src/utils/index.ts
-function safeStringify(value, space) {
-  const seen = /* @__PURE__ */ new WeakSet();
-  try {
-    return JSON.stringify(
-      value,
-      (_key, val) => {
-        if (typeof val === "object" && val !== null) {
-          if (seen.has(val)) return "[Circular]";
-          seen.add(val);
-        }
-        return val;
-      },
-      space
-    );
-  } catch {
-    return JSON.stringify({ error: "Output could not be serialized" });
-  }
-}
-function escapeHtml(str) {
-  if (str === null || str === void 0) {
-    return "";
-  }
-  const s = String(str);
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
-function escapeHtmlAttr(str) {
-  return str.replace(/&/g, "&amp;").replace(/"/g, "&quot;");
-}
-function escapeJsString(str) {
-  return str.replace(/\\/g, "\\\\").replace(/'/g, "\\'").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
-}
-function escapeScriptClose(jsonString) {
-  return jsonString.replace(/<\//g, "<\\/");
-}
-var SCRIPT_UNSAFE_CHARACTERS = /[<>&\u2028\u2029]/g;
-function toUnicodeEscape(character) {
-  return `\\u${character.charCodeAt(0).toString(16).padStart(4, "0")}`;
-}
-function safeJsonForScript(value) {
-  if (value === void 0) {
-    return "null";
-  }
-  try {
-    const jsonString = JSON.stringify(value, (_key, val) => {
-      if (typeof val === "bigint") {
-        return val.toString();
-      }
-      return val;
-    });
-    if (jsonString === void 0) {
-      return "null";
-    }
-    return jsonString.replace(SCRIPT_UNSAFE_CHARACTERS, toUnicodeEscape);
-  } catch {
-    return '{"error":"Value could not be serialized"}';
-  }
-}
-
-// libs/uipack/src/bridge-runtime/iife-generator.ts
-var WIDGET_CALL_META_KEY = "frontmcp/widgetCall";
-var MCP_APPS_DISPLAY_MODES = ["inline", "fullscreen", "pip"];
-function generateBridgeIIFE(options = {}) {
-  const { debug = false, trustedOrigins = [], minify = false } = options;
-  const adapters = options.adapters || ["openai", "ext-apps", "claude", "gemini", "generic"];
-  const parts = [];
-  parts.push("(function() {");
-  parts.push('"use strict";');
-  parts.push("");
-  if (debug) {
-    parts.push('function log(msg) { console.log("[FrontMcpBridge] " + msg); }');
-  } else {
-    parts.push("function log() {}");
-  }
-  parts.push("");
-  parts.push("var DEFAULT_SAFE_AREA = { top: 0, bottom: 0, left: 0, right: 0 };");
-  parts.push("");
-  parts.push(generateContextDetection());
-  parts.push("");
-  parts.push(generateBaseCapabilities());
-  parts.push("");
-  if (adapters.includes("openai")) {
-    parts.push(generateOpenAIAdapter());
-    parts.push("");
-  }
-  if (adapters.includes("ext-apps")) {
-    parts.push(generateExtAppsAdapter(trustedOrigins));
-    parts.push("");
-  }
-  if (adapters.includes("claude")) {
-    parts.push(generateClaudeAdapter());
-    parts.push("");
-  }
-  if (adapters.includes("gemini")) {
-    parts.push(generateGeminiAdapter());
-    parts.push("");
-  }
-  if (adapters.includes("generic")) {
-    parts.push(generateGenericAdapter());
-    parts.push("");
-  }
-  parts.push(generatePlatformDetection(adapters));
-  parts.push("");
-  parts.push(generateBridgeClass());
-  parts.push("");
-  parts.push("var bridge = new FrontMcpBridge();");
-  parts.push("bridge.initialize().then(function() {");
-  parts.push('  log("Bridge initialized with adapter: " + bridge.adapterId);');
-  parts.push('  window.dispatchEvent(new CustomEvent("bridge:ready", { detail: { adapter: bridge.adapterId } }));');
-  parts.push("  if (window.__mcpDisplayMode) bridge.requestDisplayMode(window.__mcpDisplayMode).catch(function() {});");
-  parts.push("}).catch(function(err) {");
-  parts.push('  console.error("[FrontMcpBridge] Init failed:", err);');
-  parts.push('  window.dispatchEvent(new CustomEvent("bridge:error", { detail: { error: err } }));');
-  parts.push("});");
-  parts.push("");
-  parts.push("window.FrontMcpBridge = bridge;");
-  parts.push("");
-  parts.push(generateAutoResize());
-  parts.push("function __showLoading() {");
-  parts.push('  var root = document.getElementById("root");');
-  parts.push("  if (root && !root.hasChildNodes()) {");
-  parts.push(
-    `    root.innerHTML = '<div style="display:flex;align-items:center;justify-content:center;padding:2rem;color:#6b7280;font-family:system-ui,sans-serif"><div style="text-align:center"><div style="width:24px;height:24px;border:2px solid #e5e7eb;border-top-color:#3b82f6;border-radius:50%;animation:__spin 0.6s linear infinite;margin:0 auto 12px"></div><div style="font-size:0.875rem">Loading widget...</div></div></div><style>@keyframes __spin{to{transform:rotate(360deg)}}</style>';`
-  );
-  parts.push("  }");
-  parts.push("}");
-  parts.push('if (document.readyState === "loading") {');
-  parts.push('  document.addEventListener("DOMContentLoaded", __showLoading);');
-  parts.push("} else {");
-  parts.push("  __showLoading();");
-  parts.push("}");
-  parts.push("})();");
-  const code = parts.join("\n");
-  if (minify) {
-    return minifyJS(code);
-  }
-  return code;
-}
-function generateAutoResize() {
-  return `
+var __require=(x=>typeof require!=="undefined"?require:typeof Proxy!=="undefined"?new Proxy(x,{get:(a,b)=>(typeof require!=="undefined"?require:a)[b]}):x)(function(x){if(typeof require!=="undefined")return require.apply(this,arguments);throw Error('Dynamic require of "'+x+'" is not supported')});function isUIType(value){return typeof value==="string"&&["html","react","mdx","markdown","auto"].includes(value)}function isBundlingMode(value){return typeof value==="string"&&["static","dynamic"].includes(value)}function isResourceMode(value){return typeof value==="string"&&["cdn","inline"].includes(value)}function isDisplayMode(value){return typeof value==="string"&&["inline","fullscreen","pip"].includes(value)}function isOutputMode(value){return typeof value==="string"&&["code-only","full-ssr"].includes(value)}var DEFAULT_CSP_BY_TYPE={html:{scriptSrc:["'self'","'unsafe-inline'"],styleSrc:["'self'","'unsafe-inline'"],connectSrc:[]},react:{scriptSrc:["'self'","'unsafe-inline'","https://unpkg.com"],styleSrc:["'self'","'unsafe-inline'"],connectSrc:[]},mdx:{scriptSrc:["'self'","'unsafe-inline'","https://unpkg.com"],styleSrc:["'self'","'unsafe-inline'"],connectSrc:[]},markdown:{scriptSrc:["'self'","'unsafe-inline'"],styleSrc:["'self'","'unsafe-inline'"],connectSrc:[]},auto:{scriptSrc:["'self'","'unsafe-inline'","https://unpkg.com"],styleSrc:["'self'","'unsafe-inline'"],connectSrc:[]}};var DEFAULT_RENDERER_ASSETS={html:{handlebars:{url:"https://unpkg.com/handlebars@latest/dist/handlebars.runtime.min.js"}},react:{react:{url:"https://unpkg.com/react@18/umd/react.production.min.js"},reactDom:{url:"https://unpkg.com/react-dom@18/umd/react-dom.production.min.js"}},mdx:{react:{url:"https://unpkg.com/react@18/umd/react.production.min.js"},reactDom:{url:"https://unpkg.com/react-dom@18/umd/react-dom.production.min.js"},markdown:{url:"https://unpkg.com/marked@latest/marked.min.js"}},markdown:{markdown:{url:"https://unpkg.com/marked@latest/marked.min.js"}},auto:{react:{url:"https://unpkg.com/react@18/umd/react.production.min.js"},reactDom:{url:"https://unpkg.com/react-dom@18/umd/react-dom.production.min.js"},markdown:{url:"https://unpkg.com/marked@latest/marked.min.js"},handlebars:{url:"https://unpkg.com/handlebars@latest/dist/handlebars.runtime.min.js"}}};function safeStringify(value,space){const seen=new WeakSet;try{return JSON.stringify(value,(_key,val)=>{if(typeof val==="object"&&val!==null){if(seen.has(val))return"[Circular]";seen.add(val)}return val},space)}catch{return JSON.stringify({error:"Output could not be serialized"})}}function escapeHtml(str){if(str===null||str===void 0){return""}const s=String(str);return s.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#39;").replace(/\u2028/g,"\\u2028").replace(/\u2029/g,"\\u2029")}function escapeHtmlAttr(str){return str.replace(/&/g,"&amp;").replace(/"/g,"&quot;")}function escapeJsString(str){return str.replace(/\\/g,"\\\\").replace(/'/g,"\\'").replace(/"/g,'\\"').replace(/\n/g,"\\n").replace(/\r/g,"\\r").replace(/\t/g,"\\t").replace(/\u2028/g,"\\u2028").replace(/\u2029/g,"\\u2029")}function escapeScriptClose(jsonString){return jsonString.replace(/<\//g,"<\\/")}var SCRIPT_UNSAFE_CHARACTERS=/[<>&\u2028\u2029]/g;function toUnicodeEscape(character){return`\\u${character.charCodeAt(0).toString(16).padStart(4,"0")}`}function safeJsonForScript(value){if(value===void 0){return"null"}try{const jsonString=JSON.stringify(value,(_key,val)=>{if(typeof val==="bigint"){return val.toString()}return val});if(jsonString===void 0){return"null"}return jsonString.replace(SCRIPT_UNSAFE_CHARACTERS,toUnicodeEscape)}catch{return'{"error":"Value could not be serialized"}'}}var WIDGET_CALL_META_KEY="frontmcp/widgetCall";var MCP_APPS_DISPLAY_MODES=["inline","fullscreen","pip"];function generateBridgeIIFE(options={}){const{debug=false,trustedOrigins=[],minify=false}=options;const adapters=options.adapters||["openai","ext-apps","claude","gemini","generic"];const parts=[];parts.push("(function() {");parts.push('"use strict";');parts.push("");if(debug){parts.push('function log(msg) { console.log("[FrontMcpBridge] " + msg); }')}else{parts.push("function log() {}")}parts.push("");parts.push("var DEFAULT_SAFE_AREA = { top: 0, bottom: 0, left: 0, right: 0 };");parts.push("");parts.push(generateContextDetection());parts.push("");parts.push(generateBaseCapabilities());parts.push("");if(adapters.includes("openai")){parts.push(generateOpenAIAdapter());parts.push("")}if(adapters.includes("ext-apps")){parts.push(generateExtAppsAdapter(trustedOrigins));parts.push("")}if(adapters.includes("claude")){parts.push(generateClaudeAdapter());parts.push("")}if(adapters.includes("gemini")){parts.push(generateGeminiAdapter());parts.push("")}if(adapters.includes("generic")){parts.push(generateGenericAdapter());parts.push("")}parts.push(generatePlatformDetection(adapters));parts.push("");parts.push(generateBridgeClass());parts.push("");parts.push("var bridge = new FrontMcpBridge();");parts.push("bridge.initialize().then(function() {");parts.push('  log("Bridge initialized with adapter: " + bridge.adapterId);');parts.push('  window.dispatchEvent(new CustomEvent("bridge:ready", { detail: { adapter: bridge.adapterId } }));');parts.push("  if (window.__mcpDisplayMode) bridge.requestDisplayMode(window.__mcpDisplayMode).catch(function() {});");parts.push("}).catch(function(err) {");parts.push('  console.error("[FrontMcpBridge] Init failed:", err);');parts.push('  window.dispatchEvent(new CustomEvent("bridge:error", { detail: { error: err } }));');parts.push("});");parts.push("");parts.push("window.FrontMcpBridge = bridge;");parts.push("");parts.push(generateAutoResize());parts.push("function __showLoading() {");parts.push('  var root = document.getElementById("root");');parts.push("  if (root && !root.hasChildNodes()) {");parts.push(`    root.innerHTML = '<div style="display:flex;align-items:center;justify-content:center;padding:2rem;color:#6b7280;font-family:system-ui,sans-serif"><div style="text-align:center"><div style="width:24px;height:24px;border:2px solid #e5e7eb;border-top-color:#3b82f6;border-radius:50%;animation:__spin 0.6s linear infinite;margin:0 auto 12px"></div><div style="font-size:0.875rem">Loading widget...</div></div></div><style>@keyframes __spin{to{transform:rotate(360deg)}}</style>';`);parts.push("  }");parts.push("}");parts.push('if (document.readyState === "loading") {');parts.push('  document.addEventListener("DOMContentLoaded", __showLoading);');parts.push("} else {");parts.push("  __showLoading();");parts.push("}");parts.push("})();");const code=parts.join("\n");if(minify){return minifyJS(code)}return code}function generateAutoResize(){return`
 function __applySizingCss(sizing) {
   if (typeof document === 'undefined' || !document.documentElement) return;
   function toLen(v) { return typeof v === 'number' ? v + 'px' : v; }
@@ -349,10 +136,7 @@ function __initAutoResize() {
   }
 }
 __initAutoResize();
-`.trim();
-}
-function generateContextDetection() {
-  return `
+`.trim()}function generateContextDetection(){return`
 function detectTheme() {
   if (typeof window !== 'undefined' && window.matchMedia) {
     return window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light';
@@ -439,10 +223,7 @@ function readInjectedData() {
   }
   return data;
 }
-`.trim();
-}
-function generateBaseCapabilities() {
-  return `
+`.trim()}function generateBaseCapabilities(){return`
 var DEFAULT_CAPABILITIES = {
   canCallTools: false,
   canSendMessages: false,
@@ -452,10 +233,7 @@ var DEFAULT_CAPABILITIES = {
   supportsDisplayModes: false,
   supportsTheme: true
 };
-`.trim();
-}
-function generateOpenAIAdapter() {
-  return `
+`.trim()}function generateOpenAIAdapter(){return`
 var OpenAIAdapter = {
   id: 'openai',
   name: 'OpenAI ChatGPT',
@@ -540,11 +318,7 @@ var OpenAIAdapter = {
     return Promise.resolve();
   }
 };
-`.trim();
-}
-function generateExtAppsAdapter(trustedOrigins) {
-  const originsArray = trustedOrigins.length > 0 ? JSON.stringify(trustedOrigins) : "[]";
-  return `
+`.trim()}function generateExtAppsAdapter(trustedOrigins){const originsArray=trustedOrigins.length>0?JSON.stringify(trustedOrigins):"[]";return`
 var ExtAppsAdapter = {
   id: 'ext-apps',
   name: 'ext-apps (SEP-1865)',
@@ -887,10 +661,7 @@ var ExtAppsAdapter = {
     return this.sendRequest('ui/unregisterTool', { name: name });
   }
 };
-`.trim();
-}
-function generateClaudeAdapter() {
-  return `
+`.trim()}function generateClaudeAdapter(){return`
 var ClaudeAdapter = {
   id: 'claude',
   name: 'Claude (Anthropic)',
@@ -951,10 +722,7 @@ var ClaudeAdapter = {
     return Promise.resolve();
   }
 };
-`.trim();
-}
-function generateGeminiAdapter() {
-  return `
+`.trim()}function generateGeminiAdapter(){return`
 var GeminiAdapter = {
   id: 'gemini',
   name: 'Google Gemini',
@@ -1005,10 +773,7 @@ var GeminiAdapter = {
     return Promise.resolve();
   }
 };
-`.trim();
-}
-function generateGenericAdapter() {
-  return `
+`.trim()}function generateGenericAdapter(){return`
 var GenericAdapter = {
   id: 'generic',
   name: 'Generic Web',
@@ -1043,26 +808,7 @@ var GenericAdapter = {
     return Promise.resolve();
   }
 };
-`.trim();
-}
-function generatePlatformDetection(adapters) {
-  const adapterVars = adapters.map((a) => {
-    switch (a) {
-      case "openai":
-        return "OpenAIAdapter";
-      case "ext-apps":
-        return "ExtAppsAdapter";
-      case "claude":
-        return "ClaudeAdapter";
-      case "gemini":
-        return "GeminiAdapter";
-      case "generic":
-        return "GenericAdapter";
-      default:
-        return "";
-    }
-  }).filter(Boolean);
-  return `
+`.trim()}function generatePlatformDetection(adapters){const adapterVars=adapters.map(a=>{switch(a){case"openai":return"OpenAIAdapter";case"ext-apps":return"ExtAppsAdapter";case"claude":return"ClaudeAdapter";case"gemini":return"GeminiAdapter";case"generic":return"GenericAdapter";default:return""}}).filter(Boolean);return`
 var ADAPTERS = [${adapterVars.join(", ")}].sort(function(a, b) { return b.priority - a.priority; });
 
 function detectPlatform() {
@@ -1075,10 +821,7 @@ function detectPlatform() {
   log('No platform detected, using generic');
   return GenericAdapter;
 }
-`.trim();
-}
-function generateBridgeClass() {
-  return `
+`.trim()}function generateBridgeClass(){return`
 function FrontMcpBridge() {
   this._adapter = null;
   this._initialized = false;
@@ -1454,3228 +1197,152 @@ FrontMcpBridge.prototype._setupDataToolCallHandler = function() {
     }
   }, true); // Use capture phase to handle before React handlers
 };
-`.trim();
-}
-var MAX_MINIFY_CODE_LENGTH = 5e5;
-function minifyJS(code) {
-  if (code.length > MAX_MINIFY_CODE_LENGTH) {
-    return code;
-  }
-  const out = [];
-  let inBlockComment = false;
-  for (const raw of code.split("\n")) {
-    const line = raw.trim();
-    if (inBlockComment) {
-      if (line.includes("*/")) inBlockComment = false;
-      continue;
-    }
-    if (line === "" || line.startsWith("//")) continue;
-    if (line.startsWith("/*")) {
-      if (!line.includes("*/")) inBlockComment = true;
-      continue;
-    }
-    out.push(line);
-  }
-  return out.join("\n");
-}
-function generatePlatformBundle(platform, options = {}) {
-  const platformAdapters = {
-    chatgpt: ["openai", "generic"],
-    claude: ["claude", "generic"],
-    gemini: ["gemini", "generic"],
-    universal: ["openai", "ext-apps", "claude", "gemini", "generic"]
-  };
-  return generateBridgeIIFE({
-    ...options,
-    adapters: platformAdapters[platform]
-  });
-}
-var UNIVERSAL_BRIDGE_SCRIPT = generateBridgeIIFE();
-var BRIDGE_SCRIPT_TAGS = {
-  universal: `<script>${UNIVERSAL_BRIDGE_SCRIPT}</script>`,
-  chatgpt: `<script>${generatePlatformBundle("chatgpt")}</script>`,
-  claude: `<script>${generatePlatformBundle("claude")}</script>`,
-  gemini: `<script>${generatePlatformBundle("gemini")}</script>`
-};
-
-// libs/uipack/src/typings/types.ts
-var DEFAULT_ALLOWED_PACKAGES = ["react", "react-dom", "react/jsx-runtime", "zod", "@frontmcp/*"];
-var DEFAULT_TYPE_FETCHER_OPTIONS = {
-  allowedPackages: [...DEFAULT_ALLOWED_PACKAGES],
-  maxDepth: 4,
-  timeout: 1e4,
-  maxConcurrency: 5,
-  cdnBaseUrl: "https://esm.sh"
-};
-var TYPE_CACHE_PREFIX = "types:";
-var DEFAULT_TYPE_CACHE_TTL = 60 * 60 * 1e3;
-
-// libs/uipack/src/typings/cache/cache-adapter.ts
-var DEFAULT_CACHE_OPTIONS = {
-  maxSize: 500,
-  defaultTtl: 60 * 60 * 1e3,
-  // 1 hour
-  trackStats: true
-};
-
-// libs/uipack/src/typings/cache/memory-cache.ts
-var MemoryTypeCache = class {
-  cache = /* @__PURE__ */ new Map();
-  maxSize;
-  defaultTtl;
-  trackStats;
-  /** Cache statistics */
-  stats = {
-    hits: 0,
-    misses: 0,
-    evictions: 0
-  };
-  constructor(options = {}) {
-    const opts = { ...DEFAULT_CACHE_OPTIONS, ...options };
-    this.maxSize = opts.maxSize;
-    this.defaultTtl = opts.defaultTtl;
-    this.trackStats = opts.trackStats;
-  }
-  /**
-   * Get a cached entry by key.
-   */
-  async get(key) {
-    const internal = this.cache.get(key);
-    if (!internal) {
-      if (this.trackStats) this.stats.misses++;
-      return void 0;
-    }
-    if (internal.expiresAt > 0 && Date.now() > internal.expiresAt) {
-      this.cache.delete(key);
-      if (this.trackStats) this.stats.misses++;
-      return void 0;
-    }
-    this.cache.delete(key);
-    internal.entry.accessCount++;
-    this.cache.set(key, internal);
-    if (this.trackStats) this.stats.hits++;
-    return internal.entry;
-  }
-  /**
-   * Store an entry in the cache.
-   */
-  async set(key, entry, ttl) {
-    if (this.cache.size >= this.maxSize && !this.cache.has(key)) {
-      const oldestKey = this.cache.keys().next().value;
-      if (oldestKey) {
-        this.cache.delete(oldestKey);
-        if (this.trackStats) this.stats.evictions++;
-      }
-    }
-    const effectiveTtl = ttl ?? this.defaultTtl;
-    const expiresAt = effectiveTtl > 0 ? Date.now() + effectiveTtl : 0;
-    this.cache.set(key, { entry, expiresAt });
-  }
-  /**
-   * Check if a key exists in the cache.
-   */
-  async has(key) {
-    const internal = this.cache.get(key);
-    if (!internal) return false;
-    if (internal.expiresAt > 0 && Date.now() > internal.expiresAt) {
-      this.cache.delete(key);
-      return false;
-    }
-    return true;
-  }
-  /**
-   * Delete a cached entry.
-   */
-  async delete(key) {
-    return this.cache.delete(key);
-  }
-  /**
-   * Clear all cached entries.
-   */
-  async clear() {
-    this.cache.clear();
-    this.stats = { hits: 0, misses: 0, evictions: 0 };
-  }
-  /**
-   * Get cache statistics.
-   */
-  async getStats() {
-    let totalSize = 0;
-    for (const { entry } of this.cache.values()) {
-      totalSize += entry.size;
-    }
-    const total = this.stats.hits + this.stats.misses;
-    return {
-      entries: this.cache.size,
-      totalSize,
-      hits: this.stats.hits,
-      misses: this.stats.misses,
-      hitRate: total > 0 ? this.stats.hits / total : 0
-    };
-  }
-  /**
-   * Get current cache size.
-   */
-  get size() {
-    return this.cache.size;
-  }
-  /**
-   * Get number of evictions.
-   */
-  get evictions() {
-    return this.stats.evictions;
-  }
-  /**
-   * Clean up expired entries.
-   * Call periodically to free memory from expired entries.
-   *
-   * @returns Number of entries cleaned up
-   */
-  cleanup() {
-    const now = Date.now();
-    let cleaned = 0;
-    for (const [key, internal] of this.cache.entries()) {
-      if (internal.expiresAt > 0 && now > internal.expiresAt) {
-        this.cache.delete(key);
-        cleaned++;
-      }
-    }
-    return cleaned;
+`.trim()}var MAX_MINIFY_CODE_LENGTH=5e5;function minifyJS(code){if(code.length>MAX_MINIFY_CODE_LENGTH){return code}const out=[];let inBlockComment=false;for(const raw of code.split("\n")){const line=raw.trim();if(inBlockComment){if(line.includes("*/"))inBlockComment=false;continue}if(line===""||line.startsWith("//"))continue;if(line.startsWith("/*")){if(!line.includes("*/"))inBlockComment=true;continue}out.push(line)}return out.join("\n")}function generatePlatformBundle(platform,options={}){const platformAdapters={chatgpt:["openai","generic"],claude:["claude","generic"],gemini:["gemini","generic"],universal:["openai","ext-apps","claude","gemini","generic"]};return generateBridgeIIFE({...options,adapters:platformAdapters[platform]})}var UNIVERSAL_BRIDGE_SCRIPT=generateBridgeIIFE();var BRIDGE_SCRIPT_TAGS={universal:`<script>${UNIVERSAL_BRIDGE_SCRIPT}</script>`,chatgpt:`<script>${generatePlatformBundle("chatgpt")}</script>`,claude:`<script>${generatePlatformBundle("claude")}</script>`,gemini:`<script>${generatePlatformBundle("gemini")}</script>`};var DEFAULT_ALLOWED_PACKAGES=["react","react-dom","react/jsx-runtime","zod","@frontmcp/*"];var DEFAULT_TYPE_FETCHER_OPTIONS={allowedPackages:[...DEFAULT_ALLOWED_PACKAGES],maxDepth:4,timeout:1e4,maxConcurrency:5,cdnBaseUrl:"https://esm.sh"};var TYPE_CACHE_PREFIX="types:";var DEFAULT_TYPE_CACHE_TTL=60*60*1e3;var DEFAULT_CACHE_OPTIONS={maxSize:500,defaultTtl:60*60*1e3,trackStats:true};var MemoryTypeCache=class{cache=new Map;maxSize;defaultTtl;trackStats;stats={hits:0,misses:0,evictions:0};constructor(options={}){const opts={...DEFAULT_CACHE_OPTIONS,...options};this.maxSize=opts.maxSize;this.defaultTtl=opts.defaultTtl;this.trackStats=opts.trackStats}async get(key){const internal=this.cache.get(key);if(!internal){if(this.trackStats)this.stats.misses++;return void 0}if(internal.expiresAt>0&&Date.now()>internal.expiresAt){this.cache.delete(key);if(this.trackStats)this.stats.misses++;return void 0}this.cache.delete(key);internal.entry.accessCount++;this.cache.set(key,internal);if(this.trackStats)this.stats.hits++;return internal.entry}async set(key,entry,ttl){if(this.cache.size>=this.maxSize&&!this.cache.has(key)){const oldestKey=this.cache.keys().next().value;if(oldestKey){this.cache.delete(oldestKey);if(this.trackStats)this.stats.evictions++}}const effectiveTtl=ttl??this.defaultTtl;const expiresAt=effectiveTtl>0?Date.now()+effectiveTtl:0;this.cache.set(key,{entry,expiresAt})}async has(key){const internal=this.cache.get(key);if(!internal)return false;if(internal.expiresAt>0&&Date.now()>internal.expiresAt){this.cache.delete(key);return false}return true}async delete(key){return this.cache.delete(key)}async clear(){this.cache.clear();this.stats={hits:0,misses:0,evictions:0}}async getStats(){let totalSize=0;for(const{entry}of this.cache.values()){totalSize+=entry.size}const total=this.stats.hits+this.stats.misses;return{entries:this.cache.size,totalSize,hits:this.stats.hits,misses:this.stats.misses,hitRate:total>0?this.stats.hits/total:0}}get size(){return this.cache.size}get evictions(){return this.stats.evictions}cleanup(){const now=Date.now();let cleaned=0;for(const[key,internal]of this.cache.entries()){if(internal.expiresAt>0&&now>internal.expiresAt){this.cache.delete(key);cleaned++}}return cleaned}};var globalTypeCache=new MemoryTypeCache({maxSize:500,defaultTtl:60*60*1e3});var IMPORT_PATTERN=/^import\s+(?:type\s+)?(?:(?:\{[^}]*\}|\*\s+as\s+\w+|\w+)\s+from\s+)?['"]([^'"]+)['"]/gm;var EXPORT_FROM_PATTERN=/^export\s+(?:\{[^}]*\}|\*)\s+from\s+['"]([^'"]+)['"]/gm;var REFERENCE_TYPES_PATTERN=/^\/\/\/\s*<reference\s+types\s*=\s*['"]([^'"]+)['"]\s*\/>/gm;var REFERENCE_PATH_PATTERN=/^\/\/\/\s*<reference\s+path\s*=\s*['"]([^'"]+)['"]\s*\/>/gm;var DECLARE_MODULE_PATTERN=/^declare\s+module\s+['"]([^'"]+)['"]/gm;function parseDtsImports(content){const imports=[];const externalPackages=new Set;const relativeImports=new Set;const lines=content.split("\n");for(let i=0;i<lines.length;i++){const line=lines[i];const lineNum=i+1;IMPORT_PATTERN.lastIndex=0;let match=IMPORT_PATTERN.exec(line);if(match){const specifier=match[1];imports.push({type:"import",specifier,statement:line.trim(),line:lineNum});categorizeSpecifier(specifier,externalPackages,relativeImports)}EXPORT_FROM_PATTERN.lastIndex=0;match=EXPORT_FROM_PATTERN.exec(line);if(match){const specifier=match[1];imports.push({type:"export",specifier,statement:line.trim(),line:lineNum});categorizeSpecifier(specifier,externalPackages,relativeImports)}REFERENCE_TYPES_PATTERN.lastIndex=0;match=REFERENCE_TYPES_PATTERN.exec(line);if(match){const specifier=match[1];imports.push({type:"reference",specifier,statement:line.trim(),line:lineNum});externalPackages.add(getPackageFromSpecifier(specifier))}REFERENCE_PATH_PATTERN.lastIndex=0;match=REFERENCE_PATH_PATTERN.exec(line);if(match){const specifier=match[1];imports.push({type:"reference",specifier,statement:line.trim(),line:lineNum});relativeImports.add(specifier)}DECLARE_MODULE_PATTERN.lastIndex=0;match=DECLARE_MODULE_PATTERN.exec(line);if(match){const specifier=match[1];imports.push({type:"declare-module",specifier,statement:line.trim(),line:lineNum})}}return{imports,externalPackages:Array.from(externalPackages),relativeImports:Array.from(relativeImports)}}function categorizeSpecifier(specifier,externalPackages,relativeImports){if(isRelativeImport(specifier)){relativeImports.add(specifier)}else{externalPackages.add(getPackageFromSpecifier(specifier))}}function isRelativeImport(specifier){return specifier.startsWith("./")||specifier.startsWith("../")||specifier.startsWith("/")||/^[A-Za-z]:/.test(specifier)}function getPackageFromSpecifier(specifier){if(specifier.startsWith("@")){const parts=specifier.split("/");if(parts.length>=2){return`${parts[0]}/${parts[1]}`}return specifier}const slashIndex=specifier.indexOf("/");if(slashIndex>0){return specifier.substring(0,slashIndex)}return specifier}function getSubpathFromSpecifier(specifier){const packageName=getPackageFromSpecifier(specifier);if(specifier.length>packageName.length+1){return specifier.substring(packageName.length+1)}return void 0}var MAX_IMPORT_STATEMENT_LENGTH=2e3;function parseImportStatement(statement){if(statement.length>MAX_IMPORT_STATEMENT_LENGTH){return null}const namedMatch=/import\s+(?:\{[^}]*\}|\*\s+as\s+\w+|\w+)\s+from\s+['"]([^'"]+)['"]/.exec(statement);if(namedMatch){return namedMatch[1]}const sideEffectMatch=/import\s+['"]([^'"]+)['"]/.exec(statement);if(sideEffectMatch){return sideEffectMatch[1]}return null}function combineDtsContents(contents){const seenReferences=new Set;const references=[];const declarations=[];for(const[url,content]of contents.entries()){const lines=content.split("\n");let inReferences=true;for(const line of lines){const trimmed=line.trim();if(trimmed.startsWith("///")){if(!seenReferences.has(trimmed)){seenReferences.add(trimmed);references.push(trimmed)}continue}if(inReferences&&trimmed===""){continue}inReferences=false;if(declarations.length===0||declarations[declarations.length-1]!==""){if(trimmed!==""){if(!declarations.some(d=>d.includes(`// Source: ${url}`))){declarations.push(`
+// Source: ${url}`)}}}declarations.push(line)}}const parts=[];if(references.length>0){parts.push(references.join("\n"));parts.push("")}parts.push(declarations.join("\n").trim());return parts.join("\n")}var Semaphore=class{permits;waiting=[];constructor(permits){this.permits=permits}async acquire(){if(this.permits>0){this.permits--;return}return new Promise(resolve=>{this.waiting.push(resolve)})}release(){if(this.waiting.length>0){const next=this.waiting.shift();next?.()}else{this.permits++}}};var TypeFetcher=class{maxDepth;timeout;maxConcurrency;cdnBaseUrl;fetchFn;cache;allowedPatterns;allowlistEnabled;_initialized=false;constructor(options={},cache){this.maxDepth=options.maxDepth??2;this.timeout=options.timeout??1e4;this.maxConcurrency=options.maxConcurrency??5;this.cdnBaseUrl=options.cdnBaseUrl??"https://esm.sh";this.fetchFn=options.fetch??globalThis.fetch.bind(globalThis);this.cache=cache??globalTypeCache;if(options.allowedPackages===false){this.allowlistEnabled=false;this.allowedPatterns=[]}else{this.allowlistEnabled=true;this.allowedPatterns=[...DEFAULT_ALLOWED_PACKAGES,...options.allowedPackages??[]]}}isPackageAllowed(packageName){if(!this.allowlistEnabled){return true}return this.allowedPatterns.some(pattern=>{if(pattern.includes("*")){const escaped=pattern.replace(/[.+?^${}()|[\]\\]/g,"\\$&").replace(/\*/g,".*");const regex=new RegExp(`^${escaped}$`);return regex.test(packageName)}return packageName===pattern||packageName.startsWith(pattern+"/")})}async initialize(options){if(this._initialized){const stats2=await this.cache.getStats();return{loaded:[],failed:[],cached:stats2.entries}}const loaded=[];const failed=[];const packagesToLoad=this.allowedPatterns.filter(p=>!p.includes("*"));for(const pkg of packagesToLoad){const result=await this.fetchBatch({imports:[`import * from "${pkg}"`],timeout:options?.timeout??this.timeout});if(result.results.length>0){loaded.push(pkg)}else if(result.errors.length>0){failed.push(pkg)}}this._initialized=true;const stats=await this.cache.getStats();return{loaded,failed,cached:stats.entries}}get initialized(){return this._initialized}get allowedPackagePatterns(){return this.allowedPatterns}async fetchBatch(request){const startTime=Date.now();const results=[];const errors=[];let cacheHits=0;let networkRequests=0;const maxDepth=request.maxDepth??this.maxDepth;const timeout=request.timeout??this.timeout;const maxConcurrency=request.maxConcurrency??this.maxConcurrency;const skipCache=request.skipCache??false;const versionOverrides=request.versionOverrides??{};const semaphore=new Semaphore(maxConcurrency);const promises=request.imports.map(async importStatement=>{await semaphore.acquire();try{const specifier=parseImportStatement(importStatement);if(!specifier){errors.push({specifier:importStatement,code:"INVALID_SPECIFIER",message:`Could not parse import statement: ${importStatement}`});return}const packageName=getPackageFromSpecifier(specifier);if(!this.isPackageAllowed(packageName)){errors.push({specifier,code:"PACKAGE_NOT_ALLOWED",message:`Package "${packageName}" is not in the allowlist`});return}const version=versionOverrides[packageName]??"latest";const cacheKey=`${TYPE_CACHE_PREFIX}${packageName}@${version}`;if(!skipCache){const cached=await this.cache.get(cacheKey);if(cached){cacheHits++;results.push(cached.result);return}}const result=await this.fetchTypesForSpecifier(specifier,{maxDepth,timeout,version});if(result.success){results.push(result.data);networkRequests+=result.fetchCount;const entry={result:result.data,cachedAt:Date.now(),size:result.data.content.length,accessCount:1};await this.cache.set(cacheKey,entry)}else{errors.push(result.error);networkRequests+=result.fetchCount}}finally{semaphore.release()}});await Promise.all(promises);return{results,errors,totalTimeMs:Date.now()-startTime,cacheHits,networkRequests}}async fetchTypesForSpecifier(specifier,options){let fetchCount=0;const fetchedUrls=[];const visitedUrls=new Set;const contents=new Map;try{const resolution=await this.resolvePackage(specifier,options.version,options.timeout);if(!resolution){return{success:false,error:{specifier,code:"PACKAGE_NOT_FOUND",message:`Could not resolve package: ${specifier}`},fetchCount}}fetchCount++;const fetchResult=await this.fetchRecursive(resolution.typesUrl,options.maxDepth,options.timeout,visitedUrls,contents);fetchCount+=fetchResult.fetchCount;fetchedUrls.push(...fetchResult.fetchedUrls);if(!fetchResult.success){return{success:false,error:{specifier,code:fetchResult.errorCode,message:fetchResult.errorMessage??"Unknown error",url:fetchResult.errorUrl},fetchCount}}const files=buildTypeFiles(contents,resolution.packageName,resolution.version,resolution.subpath);const combinedContent=combineDtsContents(contents);const result={specifier,resolvedPackage:resolution.packageName,subpath:resolution.subpath,version:resolution.version,content:combinedContent,files,fetchedUrls,fetchedAt:new Date().toISOString()};return{success:true,data:result,fetchCount}}catch(error){return{success:false,error:{specifier,code:"NETWORK_ERROR",message:error instanceof Error?error.message:String(error)},fetchCount}}}async resolvePackage(specifier,version,timeout){const packageName=getPackageFromSpecifier(specifier);const subpath=getSubpathFromSpecifier(specifier);const versionSuffix=version==="latest"?"":`@${version}`;const baseUrl=`${this.cdnBaseUrl}/${packageName}${versionSuffix}`;const urlsToTry=subpath?[`${baseUrl}/${subpath}`,baseUrl]:[baseUrl];for(const url of urlsToTry){try{const response=await this.fetchWithTimeout(url,timeout,"HEAD");if(response.ok){const typesHeader=response.headers.get("X-TypeScript-Types");if(typesHeader){const typesUrl=typesHeader.startsWith("/")?`${this.cdnBaseUrl}${typesHeader}`:typesHeader;const versionMatch=/@(\d+\.\d+\.\d+[^/]*)/.exec(typesUrl);const resolvedVersion=versionMatch?versionMatch[1]:version;return{packageName,subpath,version:resolvedVersion,typesUrl}}}}catch{continue}}return null}async fetchRecursive(url,depth,timeout,visited,contents){if(visited.has(url)){return{success:true,fetchCount:0,fetchedUrls:[]}}visited.add(url);let fetchCount=1;const fetchedUrls=[url];try{const response=await this.fetchWithTimeout(url,timeout,"GET");if(!response.ok){return{success:false,fetchCount,fetchedUrls,errorCode:"NETWORK_ERROR",errorMessage:`HTTP ${response.status}: ${response.statusText}`,errorUrl:url}}const content=await response.text();contents.set(url,content);if(depth<=0){return{success:true,fetchCount,fetchedUrls}}const parsed=parseDtsImports(content);for(const pkg of parsed.externalPackages){if(pkg.startsWith("@types/")||isBuiltinModule(pkg)){continue}const resolution=await this.resolvePackage(pkg,"latest",timeout);fetchCount++;if(resolution&&!visited.has(resolution.typesUrl)){const result=await this.fetchRecursive(resolution.typesUrl,depth-1,timeout,visited,contents);fetchCount+=result.fetchCount;fetchedUrls.push(...result.fetchedUrls)}}for(const relativePath of parsed.relativeImports){const resolvedUrl=resolveRelativeUrl(url,relativePath);if(resolvedUrl&&!visited.has(resolvedUrl)){const result=await this.fetchRecursive(resolvedUrl,depth-1,timeout,visited,contents);fetchCount+=result.fetchCount;fetchedUrls.push(...result.fetchedUrls)}}return{success:true,fetchCount,fetchedUrls}}catch(error){const isTimeout=error instanceof Error&&error.message.includes("timeout");return{success:false,fetchCount,fetchedUrls,errorCode:isTimeout?"TIMEOUT":"NETWORK_ERROR",errorMessage:error instanceof Error?error.message:String(error),errorUrl:url}}}async fetchWithTimeout(url,timeout,method){const controller=new AbortController;const timeoutId=setTimeout(()=>controller.abort(),timeout);try{const response=await this.fetchFn(url,{method,signal:controller.signal,headers:{Accept:"application/typescript, text/plain, */*"}});return response}finally{clearTimeout(timeoutId)}}};function isBuiltinModule(name){const builtins=new Set(["assert","buffer","child_process","cluster","console","constants","crypto","dgram","dns","domain","events","fs","http","https","module","net","os","path","punycode","querystring","readline","repl","stream","string_decoder","sys","timers","tls","tty","url","util","v8","vm","zlib","node:assert","node:buffer","node:child_process","node:cluster","node:console","node:constants","node:crypto","node:dgram","node:dns","node:domain","node:events","node:fs","node:http","node:https","node:module","node:net","node:os","node:path","node:punycode","node:querystring","node:readline","node:repl","node:stream","node:string_decoder","node:sys","node:timers","node:tls","node:tty","node:url","node:util","node:v8","node:vm","node:zlib"]);return builtins.has(name)}function resolveRelativeUrl(base,relative){try{let path=relative;if(!path.endsWith(".d.ts")&&!path.endsWith(".ts")){path=`${path}.d.ts`}const resolved=new URL(path,base);return resolved.toString()}catch{return null}}function buildTypeFiles(contents,packageName,version,subpath){const files=[];for(const[url,content]of contents.entries()){const virtualPath=urlToVirtualPath(url,packageName,version);files.push({path:virtualPath,url,content})}if(subpath){const aliasPath=`node_modules/${packageName}/${subpath}/index.d.ts`;const aliasExists=files.some(f=>f.path===aliasPath);if(!aliasExists){const aliasContent=`// Auto-generated alias for ${packageName}/${subpath}
+export * from '${getRelativeImportPath(subpath)}';
+`;files.push({path:aliasPath,url:"",content:aliasContent})}}return files}function getRelativeImportPath(subpath){const depth=subpath.split("/").length;const prefix="../".repeat(depth);return`${prefix}index`}function urlToVirtualPath(url,packageName,version){try{const urlObj=new URL(url);const pathname=urlObj.pathname;const cleanPath=pathname.replace(/^\/v\d+\//,"/");const versionedPackage=`${packageName}@${version}`;const packageIndex=cleanPath.indexOf(versionedPackage);if(packageIndex!==-1){const afterPackageVersion=cleanPath.substring(packageIndex+versionedPackage.length);const relativePath=afterPackageVersion.startsWith("/")?afterPackageVersion.substring(1):afterPackageVersion;return`node_modules/${packageName}/${relativePath||"index.d.ts"}`}const packagePattern=new RegExp(`/${escapeRegExp(packageName)}@[^/]+(/.*)?$`);const match=pathname.match(packagePattern);if(match){const filePath=match[1]?match[1].substring(1):"index.d.ts";return`node_modules/${packageName}/${filePath}`}return`node_modules/${packageName}/${pathname.split("/").pop()||"index.d.ts"}`}catch{return`node_modules/${packageName}/index.d.ts`}}function escapeRegExp(string){return string.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function createTypeFetcher(options,cache){return new TypeFetcher(options,cache)}var DEFAULT_CDN_REGISTRY={react:{packageName:"react",defaultVersion:"19.2.4",providers:{cloudflare:{url:"https://cdnjs.cloudflare.com/ajax/libs/react/19.2.4/umd/react.production.min.js",global:"React",crossorigin:"anonymous"},jsdelivr:{url:"https://cdn.jsdelivr.net/npm/react@19.2.4/umd/react.production.min.js",global:"React",crossorigin:"anonymous"},unpkg:{url:"https://unpkg.com/react@19.2.4/umd/react.production.min.js",global:"React",crossorigin:"anonymous"},"esm.sh":{url:"https://esm.sh/react@19.2.4",esm:true,crossorigin:"anonymous"}},preferredProviders:["esm.sh","cloudflare","jsdelivr","unpkg"],metadata:{description:"A JavaScript library for building user interfaces",homepage:"https://react.dev",license:"MIT"}},"react-dom":{packageName:"react-dom",defaultVersion:"19.2.4",providers:{cloudflare:{url:"https://cdnjs.cloudflare.com/ajax/libs/react-dom/19.2.4/umd/react-dom.production.min.js",global:"ReactDOM",crossorigin:"anonymous",peerDependencies:["react"]},jsdelivr:{url:"https://cdn.jsdelivr.net/npm/react-dom@19.2.4/umd/react-dom.production.min.js",global:"ReactDOM",crossorigin:"anonymous",peerDependencies:["react"]},unpkg:{url:"https://unpkg.com/react-dom@19.2.4/umd/react-dom.production.min.js",global:"ReactDOM",crossorigin:"anonymous",peerDependencies:["react"]},"esm.sh":{url:"https://esm.sh/react-dom@19.2.4",esm:true,crossorigin:"anonymous",peerDependencies:["react"]}},preferredProviders:["esm.sh","cloudflare","jsdelivr","unpkg"],metadata:{description:"React package for working with the DOM",homepage:"https://react.dev",license:"MIT"}},"chart.js":{packageName:"chart.js",defaultVersion:"4.5.1",providers:{cloudflare:{url:"https://cdnjs.cloudflare.com/ajax/libs/Chart.js/4.5.1/chart.umd.min.js",global:"Chart",crossorigin:"anonymous"},jsdelivr:{url:"https://cdn.jsdelivr.net/npm/chart.js@4.5.1/dist/chart.umd.min.js",global:"Chart",crossorigin:"anonymous"},unpkg:{url:"https://unpkg.com/chart.js@4.5.1/dist/chart.umd.min.js",global:"Chart",crossorigin:"anonymous"}},preferredProviders:["esm.sh","cloudflare","jsdelivr","unpkg"],metadata:{description:"Simple yet flexible JavaScript charting library",homepage:"https://www.chartjs.org",license:"MIT"}},d3:{packageName:"d3",defaultVersion:"7.9.0",providers:{cloudflare:{url:"https://cdnjs.cloudflare.com/ajax/libs/d3/7.9.0/d3.min.js",integrity:"sha512-vc58qvvBdrDR4etbxMdlTt4GBQk1qjvyORR2nrsPsFPyrs+/u5c3+1Ct6upOgdZoIl7eq6k3a1UPDSNAQi/32A==",global:"d3",crossorigin:"anonymous"},jsdelivr:{url:"https://cdn.jsdelivr.net/npm/d3@7.9.0/dist/d3.min.js",global:"d3",crossorigin:"anonymous"},unpkg:{url:"https://unpkg.com/d3@7.9.0/dist/d3.min.js",global:"d3",crossorigin:"anonymous"}},preferredProviders:["esm.sh","cloudflare","jsdelivr","unpkg"],metadata:{description:"Data-Driven Documents",homepage:"https://d3js.org",license:"ISC"}},lodash:{packageName:"lodash",defaultVersion:"4.17.21",providers:{cloudflare:{url:"https://cdnjs.cloudflare.com/ajax/libs/lodash.js/4.17.21/lodash.min.js",integrity:"sha512-WFN04846sdKMIP5LKNphMaWzU7YpMyCU245etK3g/2ARYbPK9Ub18eG+ljU96qKRCWh+quCY7yefSmlkQw1ANQ==",global:"_",crossorigin:"anonymous"},jsdelivr:{url:"https://cdn.jsdelivr.net/npm/lodash@4.17.21/lodash.min.js",global:"_",crossorigin:"anonymous"},unpkg:{url:"https://unpkg.com/lodash@4.17.21/lodash.min.js",global:"_",crossorigin:"anonymous"}},preferredProviders:["esm.sh","cloudflare","jsdelivr","unpkg"],metadata:{description:"A modern JavaScript utility library",homepage:"https://lodash.com",license:"MIT"}}};function lookupPackage(packageName,registry=DEFAULT_CDN_REGISTRY){return registry[packageName]}function getPackageCDNUrl(packageName,providerOrder=["esm.sh","cloudflare","jsdelivr","unpkg"],registry=DEFAULT_CDN_REGISTRY){const entry=lookupPackage(packageName,registry);if(!entry)return void 0;for(const provider of providerOrder){const config=entry.providers[provider];if(config?.url){return config.url}}for(const provider of Object.keys(entry.providers)){const config=entry.providers[provider];if(config?.url){return config.url}}return void 0}function getRegisteredPackages(registry=DEFAULT_CDN_REGISTRY){return Object.keys(registry)}function isPackageRegistered(packageName,registry=DEFAULT_CDN_REGISTRY){return packageName in registry}function mergeRegistries(customRegistry){return{...DEFAULT_CDN_REGISTRY,...customRegistry}}function getPackagePeerDependencies(packageName,registry=DEFAULT_CDN_REGISTRY){const entry=lookupPackage(packageName,registry);if(!entry)return[];for(const provider of Object.keys(entry.providers)){const config=entry.providers[provider];if(config?.peerDependencies){return config.peerDependencies}}return[]}var IMPORT_PATTERNS={named:/import\s*\{([^}]+)\}\s*from\s*['"]([^'"]+)['"]/g,default:/import\s+(\w+)\s+from\s*['"]([^'"]+)['"]/g,namespace:/import\s*\*\s*as\s+(\w+)\s+from\s*['"]([^'"]+)['"]/g,sideEffect:/import\s*['"]([^'"]+)['"]/g,dynamic:/(?:await\s+)?import\s*\(\s*['"]([^'"]+)['"]\s*\)/g,defaultAndNamed:/import\s+(\w+)\s*,\s*\{([^}]+)\}\s*from\s*['"]([^'"]+)['"]/g,defaultAndNamespace:/import\s+(\w+)\s*,\s*\*\s*as\s+(\w+)\s+from\s*['"]([^'"]+)['"]/g,reExport:/export\s*\{[^}]+\}\s*from\s*['"]([^'"]+)['"]/g,reExportAll:/export\s*\*\s*from\s*['"]([^'"]+)['"]/g};function parseNamedImports(namedString){return namedString.split(",").map(s=>s.trim()).filter(s=>s.length>0).map(s=>{const asMatch=s.match(/^(\w+)\s+as\s+\w+$/);return asMatch?asMatch[1]:s})}function isRelativeImport2(specifier){return specifier.startsWith("./")||specifier.startsWith("../")||specifier.startsWith("/")}function isExternalImport(specifier){return!isRelativeImport2(specifier)&&!specifier.startsWith("#")}function getPackageName(specifier){if(specifier.startsWith("@")){const parts=specifier.split("/");if(parts.length>=2){return`${parts[0]}/${parts[1]}`}return specifier}const firstSlash=specifier.indexOf("/");return firstSlash===-1?specifier:specifier.slice(0,firstSlash)}function getLineNumber(source,index){let line=1;for(let i=0;i<index&&i<source.length;i++){if(source[i]==="\n"){line++}}return line}function getColumnNumber(source,index){let column=0;for(let i=index-1;i>=0&&source[i]!=="\n";i--){column++}return column}function parseImports(source){const imports=[];const seenStatements=new Set;const addImport=imp=>{const key=`${imp.type}:${imp.specifier}:${imp.statement}`;if(!seenStatements.has(key)){seenStatements.add(key);imports.push(imp)}};let match;const defaultAndNamedRegex=new RegExp(IMPORT_PATTERNS.defaultAndNamed.source,"g");while((match=defaultAndNamedRegex.exec(source))!==null){const[statement,defaultName,namedString,specifier]=match;addImport({statement,specifier,type:"default",defaultImport:defaultName,namedImports:parseNamedImports(namedString),line:getLineNumber(source,match.index),column:getColumnNumber(source,match.index)})}const defaultAndNamespaceRegex=new RegExp(IMPORT_PATTERNS.defaultAndNamespace.source,"g");while((match=defaultAndNamespaceRegex.exec(source))!==null){const[statement,defaultName,namespaceName,specifier]=match;addImport({statement,specifier,type:"default",defaultImport:defaultName,namespaceImport:namespaceName,line:getLineNumber(source,match.index),column:getColumnNumber(source,match.index)})}const namedRegex=new RegExp(IMPORT_PATTERNS.named.source,"g");while((match=namedRegex.exec(source))!==null){const[statement,namedString,specifier]=match;addImport({statement,specifier,type:"named",namedImports:parseNamedImports(namedString),line:getLineNumber(source,match.index),column:getColumnNumber(source,match.index)})}const defaultRegex=new RegExp(IMPORT_PATTERNS.default.source,"g");while((match=defaultRegex.exec(source))!==null){const[statement,defaultName,specifier]=match;const afterMatch=source.slice(match.index+match[0].length-specifier.length-2);if(afterMatch.startsWith(","))continue;addImport({statement,specifier,type:"default",defaultImport:defaultName,line:getLineNumber(source,match.index),column:getColumnNumber(source,match.index)})}const namespaceRegex=new RegExp(IMPORT_PATTERNS.namespace.source,"g");while((match=namespaceRegex.exec(source))!==null){const[statement,namespaceName,specifier]=match;addImport({statement,specifier,type:"namespace",namespaceImport:namespaceName,line:getLineNumber(source,match.index),column:getColumnNumber(source,match.index)})}const sideEffectRegex=new RegExp(IMPORT_PATTERNS.sideEffect.source,"g");while((match=sideEffectRegex.exec(source))!==null){const[statement,specifier]=match;const beforeMatch=source.slice(Math.max(0,match.index-50),match.index);if(beforeMatch.includes("from"))continue;addImport({statement,specifier,type:"side-effect",line:getLineNumber(source,match.index),column:getColumnNumber(source,match.index)})}const dynamicRegex=new RegExp(IMPORT_PATTERNS.dynamic.source,"g");while((match=dynamicRegex.exec(source))!==null){const[statement,specifier]=match;addImport({statement,specifier,type:"dynamic",line:getLineNumber(source,match.index),column:getColumnNumber(source,match.index)})}const reExportRegex=new RegExp(IMPORT_PATTERNS.reExport.source,"g");while((match=reExportRegex.exec(source))!==null){const[statement,specifier]=match;addImport({statement,specifier,type:"named",line:getLineNumber(source,match.index),column:getColumnNumber(source,match.index)})}const reExportAllRegex=new RegExp(IMPORT_PATTERNS.reExportAll.source,"g");while((match=reExportAllRegex.exec(source))!==null){const[statement,specifier]=match;addImport({statement,specifier,type:"namespace",line:getLineNumber(source,match.index),column:getColumnNumber(source,match.index)})}const externalImports=imports.filter(imp=>isExternalImport(imp.specifier));const relativeImports=imports.filter(imp=>isRelativeImport2(imp.specifier));const externalPackages=[...new Set(externalImports.map(imp=>getPackageName(imp.specifier)))];return{imports,externalImports,relativeImports,externalPackages}}function extractExternalPackages(source){return parseImports(source).externalPackages}var DEFAULT_FALLBACK_CDN="https://esm.sh";function createResolverWithOverrides(overrides,baseOptions){const base=createEsmShResolver(baseOptions);return{overrides,resolve(specifier,context){if(overrides[specifier]){return{value:overrides[specifier],type:"url"}}for(const[prefix,url]of Object.entries(overrides)){if(specifier.startsWith(prefix+"/")){const subpath=specifier.slice(prefix.length);return{value:url+subpath,type:"url"}}}return base.resolve(specifier,context)}}}function createEsmShResolver(options={}){const{fallbackCdnBase=DEFAULT_FALLBACK_CDN,registry=DEFAULT_CDN_REGISTRY,providerOrder=["esm.sh","cloudflare","jsdelivr","unpkg"]}=options;return{resolve(specifier,_context){if(specifier.startsWith("./")||specifier.startsWith("../")||specifier.startsWith("/")){return null}if(specifier.startsWith("node:")||specifier.startsWith("#")){return null}const pkgName=getPackageName(specifier);const entry=lookupPackage(pkgName,registry);if(entry){for(const provider of providerOrder){const config=entry.providers[provider];if(config?.url){const subpath=specifier.slice(pkgName.length);if(subpath&&config.url.includes("esm.sh/")){return{value:config.url+subpath,type:"url",integrity:config.integrity}}if(subpath){return{value:`${fallbackCdnBase}/${specifier}`,type:"url"}}if(config.global&&!config.esm){return{value:config.url,type:"url",integrity:config.integrity}}return{value:config.url,type:"url",integrity:config.integrity}}}}return{value:`${fallbackCdnBase}/${specifier}`,type:"url"}}}}function createImportMapFromResolved(resolved){const imports={};const integrity={};for(const[specifier,res]of Object.entries(resolved)){if(res.type==="url"){imports[specifier]=res.value;if(res.integrity){integrity[res.value]=res.integrity}}}return{imports,integrity:Object.keys(integrity).length>0?integrity:void 0}}function createImportMap(dependencies){const imports={};const integrity={};for(const dep of dependencies){imports[dep.packageName]=dep.cdnUrl;if(dep.integrity){integrity[dep.cdnUrl]=dep.integrity}}return{imports,integrity:Object.keys(integrity).length>0?integrity:void 0}}function mergeImportMaps(...maps){const imports={};const integrity={};const scopes={};for(const map of maps){Object.assign(imports,map.imports);if(map.integrity){Object.assign(integrity,map.integrity)}if(map.scopes){for(const[scope,mappings]of Object.entries(map.scopes)){scopes[scope]={...scopes[scope],...mappings}}}}return{imports,integrity:Object.keys(integrity).length>0?integrity:void 0,scopes:Object.keys(scopes).length>0?scopes:void 0}}function generateImportMapScriptTag(map){const json=JSON.stringify(map,null,2).replace(/<\//g,"<\\/");return`<script type="importmap">
+${json}
+</script>`}function generateImportMapScriptTagMinified(map){const json=JSON.stringify(map).replace(/<\//g,"<\\/");return`<script type="importmap">${json}</script>`}function generateCDNScriptTags(dependencies){return dependencies.filter(dep=>!dep.esm).map(dep=>{const attrs=[`src="${escapeHtmlAttr(dep.cdnUrl)}"`];if(dep.integrity){attrs.push(`integrity="${escapeHtmlAttr(dep.integrity)}"`)}attrs.push('crossorigin="anonymous"');return`<script ${attrs.join(" ")}></script>`})}function generateDependencyHTML(dependencies,options={}){const{minify=false}=options;const parts=[];const importMap=createImportMap(dependencies);const importMapTag=minify?generateImportMapScriptTagMinified(importMap):generateImportMapScriptTag(importMap);parts.push(importMapTag);const umdTags=generateCDNScriptTags(dependencies);parts.push(...umdTags);return parts.join(minify?"":"\n")}function validateImportMap(map){const errors=[];if(typeof map!=="object"||map===null){return{valid:false,errors:["Import map must be an object"]}}const obj=map;if(!obj["imports"]){errors.push('Import map must have an "imports" field')}else if(typeof obj["imports"]!=="object"||obj["imports"]===null){errors.push('"imports" must be an object')}else{const imports=obj["imports"];for(const[key,value]of Object.entries(imports)){if(typeof value!=="string"){errors.push(`Import "${key}" must map to a string URL`)}else if(!value.startsWith("https://")){errors.push(`Import "${key}" URL must use HTTPS: ${value}`)}}}if(obj["integrity"]!==void 0){if(typeof obj["integrity"]!=="object"||obj["integrity"]===null){errors.push('"integrity" must be an object')}else{const integrity=obj["integrity"];for(const[url,hash]of Object.entries(integrity)){if(typeof hash!=="string"){errors.push(`Integrity for "${url}" must be a string`)}else if(!hash.match(/^sha(256|384|512)-/)){errors.push(`Invalid integrity hash format for "${url}": ${hash}`)}}}}return{valid:errors.length===0,errors}}function rewriteImports(source,options={}){const{resolver=createEsmShResolver(),skipPackages=[],overrides={}}=options;const skipSet=new Set(skipPackages);const rewrites=new Map;const fallbackPackages=[];const parsed=parseImports(source);const specifierMap=new Map;for(const imp of parsed.externalImports){const specifier=imp.specifier;if(specifierMap.has(specifier))continue;if(specifier.startsWith("node:"))continue;const pkgName=getPackageName(specifier);if(skipSet.has(pkgName))continue;if(overrides[specifier]){specifierMap.set(specifier,overrides[specifier]);continue}if(overrides[pkgName]){const subpath=specifier.slice(pkgName.length);specifierMap.set(specifier,overrides[pkgName]+subpath);continue}const resolved=resolver.resolve(specifier);if(resolved&&resolved.type==="url"){specifierMap.set(specifier,resolved.value)}}let code=source;for(const[specifier,cdnUrl]of specifierMap){const escaped=escapeRegExp2(specifier);const singleQuotePattern=new RegExp(`((?:import|export)\\s+(?:[^'"]*\\s+)?from\\s+)'${escaped}'`,"g");const doubleQuotePattern=new RegExp(`((?:import|export)\\s+(?:[^'"]*\\s+)?from\\s+)"${escaped}"`,"g");const dynamicSinglePattern=new RegExp(`(import\\s*\\(\\s*)'${escaped}'`,"g");const dynamicDoublePattern=new RegExp(`(import\\s*\\(\\s*)"${escaped}"`,"g");const sideEffectSinglePattern=new RegExp(`(import\\s+)'${escaped}'`,"g");const sideEffectDoublePattern=new RegExp(`(import\\s+)"${escaped}"`,"g");const beforeLength=code.length;code=code.replace(singleQuotePattern,`$1'${cdnUrl}'`).replace(doubleQuotePattern,`$1"${cdnUrl}"`).replace(dynamicSinglePattern,`$1'${cdnUrl}'`).replace(dynamicDoublePattern,`$1"${cdnUrl}"`).replace(sideEffectSinglePattern,`$1'${cdnUrl}'`).replace(sideEffectDoublePattern,`$1"${cdnUrl}"`);if(code.length!==beforeLength||code!==source){rewrites.set(specifier,cdnUrl)}}return{code,rewrittenCount:rewrites.size,rewrites,fallbackPackages}}function escapeRegExp2(str){return str.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}var DEFAULT_CDN_DOMAINS=["https://cdn.jsdelivr.net","https://cdnjs.cloudflare.com","https://fonts.googleapis.com","https://fonts.gstatic.com","https://esm.sh"];var DEFAULT_CSP_DIRECTIVES=["default-src 'none'",`script-src 'self' 'unsafe-inline' ${DEFAULT_CDN_DOMAINS.join(" ")}`,`style-src 'self' 'unsafe-inline' ${DEFAULT_CDN_DOMAINS.join(" ")}`,`img-src 'self' data: ${DEFAULT_CDN_DOMAINS.join(" ")}`,`font-src 'self' data: ${DEFAULT_CDN_DOMAINS.join(" ")}`,`connect-src ${DEFAULT_CDN_DOMAINS.join(" ")}`,"object-src 'self' data:"];var RESTRICTIVE_CSP_DIRECTIVES=["default-src 'none'","script-src 'self' 'unsafe-inline'","style-src 'self' 'unsafe-inline'","img-src 'self' data:","font-src 'self' data:","connect-src 'none'","object-src 'self' data:"];function buildCSPDirectives(csp){if(!csp){return[...DEFAULT_CSP_DIRECTIVES]}const validResourceDomains=sanitizeCSPDomains(csp.resourceDomains);const validConnectDomains=sanitizeCSPDomains(csp.connectDomains);const allResourceDomains=[...new Set([...DEFAULT_CDN_DOMAINS,...validResourceDomains])];const directives=["default-src 'none'",`script-src 'self' 'unsafe-inline' ${allResourceDomains.join(" ")}`,`style-src 'self' 'unsafe-inline' ${allResourceDomains.join(" ")}`];const imgSources=["'self'","data:",...allResourceDomains];directives.push(`img-src ${imgSources.join(" ")}`);const fontSources=["'self'","data:",...allResourceDomains];directives.push(`font-src ${fontSources.join(" ")}`);const connectSources=[...new Set([...allResourceDomains,...validConnectDomains])];directives.push(`connect-src ${connectSources.join(" ")}`);directives.push("object-src 'self' data:");return directives}function buildCSPMetaTag(csp){const directives=buildCSPDirectives(csp);const content=directives.join("; ");return`<meta http-equiv="Content-Security-Policy" content="${escapeAttribute(content)}">`}var LOOPBACK_HOSTS=new Set(["localhost","127.0.0.1","[::1]"]);function validateCSPDomain(domain){if(typeof domain!=="string"||/[\s;,'"]/.test(domain))return false;if(/[?#]/.test(domain))return false;if(domain.includes("*")){const wildcard=/^(?:https|wss):\/\/\*\.(.*)$/.exec(domain);return wildcard!==null&&/^([a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}$/.test(wildcard[1])}try{const url=new URL(domain);if(url.protocol==="https:"||url.protocol==="wss:")return true;return(url.protocol==="http:"||url.protocol==="ws:")&&LOOPBACK_HOSTS.has(url.hostname)}catch{return false}}var reportedInvalidDomains=new Set;function sanitizeCSPDomains(domains){if(!domains)return[];const valid=[];for(const domain of domains){if(validateCSPDomain(domain)){valid.push(domain)}else if(!reportedInvalidDomains.has(domain)){reportedInvalidDomains.add(domain);console.warn(`Invalid CSP domain ignored: ${domain} (expected an https:// or wss:// origin, or http:// / ws:// on localhost)`)}}return valid}function escapeAttribute(str){return str.replace(/&/g,"&amp;").replace(/"/g,"&quot;").replace(/'/g,"&#39;").replace(/</g,"&lt;").replace(/>/g,"&gt;")}var SHELL_PLACEHOLDER_NAMES=["CSP","DATA","BRIDGE","CONTENT","TITLE"];var SHELL_PLACEHOLDERS={CSP:"{{CSP}}",DATA:"{{DATA}}",BRIDGE:"{{BRIDGE}}",CONTENT:"{{CONTENT}}",TITLE:"{{TITLE}}"};var REQUIRED_PLACEHOLDERS=["CONTENT"];var OPTIONAL_PLACEHOLDERS=["CSP","DATA","BRIDGE","TITLE"];function isInlineShellSource(source){return typeof source==="object"&&source!==null&&"inline"in source}function isUrlShellSource(source){return typeof source==="object"&&source!==null&&"url"in source}function isNpmShellSource(source){return typeof source==="object"&&source!==null&&"npm"in source}var PLACEHOLDER_PATTERN=new RegExp(`\\{\\{(${SHELL_PLACEHOLDER_NAMES.join("|")})\\}\\}`,"g");var VALUE_KEYS={CSP:"csp",DATA:"data",BRIDGE:"bridge",CONTENT:"content",TITLE:"title"};function applyShellTemplate(template,values){return template.replace(PLACEHOLDER_PATTERN,(_token,name)=>values[VALUE_KEYS[name]])}function validateShellTemplate(template){const found={};for(const name of SHELL_PLACEHOLDER_NAMES){found[name]=template.includes(SHELL_PLACEHOLDERS[name])}const missingRequired=REQUIRED_PLACEHOLDERS.filter(name=>!found[name]);const missingOptional=OPTIONAL_PLACEHOLDERS.filter(name=>!found[name]);return{valid:missingRequired.length===0,found,missingRequired,missingOptional}}var TRUSTED_HTML=Symbol.for("@frontmcp/uipack/trusted-html");function trustedHtml(markup){const value=String(markup);return Object.freeze({[TRUSTED_HTML]:value,toString:()=>value})}function isTrustedHtml(value){return typeof value==="object"&&value!==null&&typeof value[TRUSTED_HTML]==="string"}function interpolate(value){if(isTrustedHtml(value))return value[TRUSTED_HTML];if(Array.isArray(value))return value.map(interpolate).join("");if(value===false)return"";return escapeHtml(value)}function html(strings,...values){let markup=strings[0];for(let index=0;index<values.length;index++){markup+=interpolate(values[index])+strings[index+1]}return trustedHtml(markup)}function hasSizing(sizing){if(!sizing)return false;return sizing.preferredHeight!==void 0||sizing.minHeight!==void 0||sizing.maxHeight!==void 0||sizing.aspectRatio!==void 0||sizing.autoResize!==void 0}function buildDataInjectionScript(options){const{toolName,input,output,structuredContent,sizing,displayMode}=options;const lines=[`window.__mcpAppsEnabled = true;`,`window.__mcpToolName = ${safeJsonForScript(toolName)};`,`window.__mcpToolInput = ${safeJsonForScript(input??null)};`,`window.__mcpToolOutput = ${safeJsonForScript(output??null)};`,`window.__mcpStructuredContent = ${safeJsonForScript(structuredContent??null)};`];if(hasSizing(sizing)){lines.push(`window.__mcpWidgetSizing = ${safeJsonForScript(sizing)};`)}if(displayMode&&displayMode!=="inline"){lines.push(`window.__mcpDisplayMode = ${safeJsonForScript(displayMode)};`)}return`<script>
+${lines.join("\n")}
+</script>`}function buildCustomDataInjectionScript(descriptor){if(descriptor.script!==void 0){return descriptor.script}if(descriptor.globalKey!==void 0){return`<script>window[${safeJsonForScript(descriptor.globalKey)}] = ${safeJsonForScript(descriptor.value??null)};</script>`}return""}var _uniqueIdCounter=0;function createTemplateHelpers(){return{escapeHtml:str=>escapeHtml(str),formatDate:(date,format)=>{const d=date instanceof Date?date:new Date(date);if(isNaN(d.getTime()))return String(date);if(format==="iso")return d.toISOString();if(format==="date")return d.toLocaleDateString();if(format==="time")return d.toLocaleTimeString();return d.toLocaleString()},formatCurrency:(amount,currency="USD")=>{return new Intl.NumberFormat("en-US",{style:"currency",currency}).format(amount)},uniqueId:(prefix="mcp")=>{return`${prefix}-${++_uniqueIdCounter}`},jsonEmbed:data=>safeJsonForScript(data),html,trustedHtml}}function sanitizeCssValue(value){return value.replace(/[<>{};]/g,"").trim()}function toCssLength(value){return typeof value==="number"?`${value}px`:sanitizeCssValue(value)}function buildSizingStyleTag(sizing){if(!hasSizing(sizing))return"";const hasCssSizing=sizing.preferredHeight!==void 0||sizing.minHeight!==void 0||sizing.maxHeight!==void 0||sizing.aspectRatio!==void 0;if(!hasCssSizing)return"";const rootRules=[];const docRules=["margin: 0;"];if(sizing.preferredHeight!==void 0){const h=toCssLength(sizing.preferredHeight);docRules.push(`height: ${h};`);rootRules.push(`min-height: ${h};`)}if(sizing.minHeight!==void 0){const mh=toCssLength(sizing.minHeight);docRules.push(`min-height: ${mh};`);rootRules.push(`min-height: ${mh};`)}if(sizing.maxHeight!==void 0){const mx=toCssLength(sizing.maxHeight);docRules.push(`max-height: ${mx};`);rootRules.push(`max-height: ${mx};`)}if(sizing.aspectRatio!==void 0){const ar=typeof sizing.aspectRatio==="number"?String(sizing.aspectRatio):sanitizeCssValue(sizing.aspectRatio);if(ar)rootRules.push(`aspect-ratio: ${ar};`)}const parts=[`html, body { ${docRules.join(" ")} }`];if(rootRules.length>0){parts.push(`#root { ${rootRules.join(" ")} }`)}return`<style>${parts.join("\n")}</style>`}function resolveDataInjectionScript(args){if(args.dataInjection){return buildCustomDataInjectionScript(args.dataInjection)}return buildDataInjectionScript({toolName:args.toolName,input:args.input,output:args.output,structuredContent:args.structuredContent,sizing:args.sizing,displayMode:args.displayMode})}function buildShell(content,config){const{toolName,csp,withShell=true,input,output,structuredContent,includeBridge=true,title,sizing,displayMode}=config;const{customShell,dataInjection}=config;const dataScript=resolveDataInjectionScript({dataInjection,toolName,input,output,structuredContent,sizing,displayMode});if(!withShell){const html3=`${dataScript}
+${content}`;return{html:html3,hash:simpleHash(html3),size:Buffer.byteLength(html3,"utf-8")}}if(customShell){return buildCustomShell(content,customShell,{csp,toolName,input,output,structuredContent,includeBridge,title,sizing,displayMode,dataInjection})}const headParts=['<meta charset="UTF-8">','<meta name="viewport" content="width=device-width, initial-scale=1.0">'];if(title){headParts.push(`<title>${escapeHtmlForTag(title)}</title>`)}headParts.push(buildCSPMetaTag(csp));headParts.push(dataScript);const sizingStyle=buildSizingStyleTag(sizing);if(sizingStyle){headParts.push(sizingStyle)}if(includeBridge){const bridgeScript=generateBridgeIIFE({minify:true});headParts.push(`<script>${bridgeScript}</script>`)}const html2=`<!DOCTYPE html>
+<html lang="en">
+<head>
+${headParts.map(p=>`  ${p}`).join("\n")}
+</head>
+<body>
+${content}
+</body>
+</html>`;return{html:html2,hash:simpleHash(html2),size:Buffer.byteLength(html2,"utf-8")}}function buildCustomShell(content,customShell,ctx){let template;if(typeof customShell==="string"){const validation=validateShellTemplate(customShell);if(!validation.valid){throw new Error(`Custom shell template is missing required placeholder(s): ${validation.missingRequired.map(n=>`{{${n}}}`).join(", ")}`)}template=customShell}else{template=customShell.template}const cspTag=buildCSPMetaTag(ctx.csp);const dataScript=resolveDataInjectionScript({dataInjection:ctx.dataInjection,toolName:ctx.toolName,input:ctx.input,output:ctx.output,structuredContent:ctx.structuredContent,sizing:ctx.sizing,displayMode:ctx.displayMode});const sizingStyle=buildSizingStyleTag(ctx.sizing);const dataWithSizing=sizingStyle?`${dataScript}
+${sizingStyle}`:dataScript;let bridgeHtml="";if(ctx.includeBridge){const bridgeScript=generateBridgeIIFE({minify:true});bridgeHtml=`<script>${bridgeScript}</script>`}const html2=applyShellTemplate(template,{csp:cspTag,data:dataWithSizing,bridge:bridgeHtml,content,title:ctx.title?escapeHtmlForTag(ctx.title):""});return{html:html2,hash:simpleHash(html2),size:Buffer.byteLength(html2,"utf-8")}}function simpleHash(str){let hash=0;for(let i=0;i<str.length;i++){const char=str.charCodeAt(i);hash=(hash<<5)-hash+char|0}return Math.abs(hash).toString(16).padStart(8,"0")}function escapeHtmlForTag(str){return str.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;")}var DEFAULT_TIMEOUT_MS=1e4;var templateCache=new Map;async function resolveShellTemplate(source,options){if(isInlineShellSource(source)){return resolveInline(source.inline)}if(isUrlShellSource(source)){const cacheKey=`url:${source.url}`;if(!options?.noCache){const cached=templateCache.get(cacheKey);if(cached)return cached}const template=await fetchWithTimeout(source.url,source.timeout??DEFAULT_TIMEOUT_MS);const resolved=buildResolved(template,"url");if(!options?.noCache){templateCache.set(cacheKey,resolved)}return resolved}if(isNpmShellSource(source)){const specifier=source.version?`${source.npm}@${source.version}`:source.npm;const cacheKey=`npm:${specifier}`;if(!options?.noCache){const cached=templateCache.get(cacheKey);if(cached)return cached}const template=await resolveNpmTemplate(source,specifier,options?.resolver);const resolved=buildResolved(template,"npm");if(!options?.noCache){templateCache.set(cacheKey,resolved)}return resolved}throw new Error('Invalid custom shell source: must have "inline", "url", or "npm" property')}function clearShellTemplateCache(){templateCache.clear()}function resolveInline(template){return buildResolved(template,"inline")}function buildResolved(template,sourceType){const validation=validateShellTemplate(template);if(!validation.valid){throw new Error(`Custom shell template is missing required placeholder(s): ${validation.missingRequired.map(n=>`{{${n}}}`).join(", ")}`)}return{template,sourceType,validation}}async function fetchWithTimeout(url,timeoutMs){const controller=new AbortController;const timer=setTimeout(()=>controller.abort(),timeoutMs);try{const response=await fetch(url,{signal:controller.signal});if(!response.ok){throw new Error(`Failed to fetch shell template from ${url}: HTTP ${response.status}`)}return await response.text()}catch(err){if(err instanceof Error&&err.name==="AbortError"){throw new Error(`Shell template fetch timed out after ${timeoutMs}ms: ${url}`)}throw err}finally{clearTimeout(timer)}}async function resolveNpmTemplate(source,specifier,resolver){const cdnUrl=resolveNpmToCdnUrl(specifier,resolver);const moduleText=await fetchWithTimeout(cdnUrl,DEFAULT_TIMEOUT_MS);return extractTemplateFromModule(moduleText,source.exportName)}function resolveNpmToCdnUrl(specifier,resolver){if(resolver){const resolved=resolver.resolve(specifier);if(resolved){return resolved.value}}return`https://esm.sh/${specifier}`}function extractTemplateFromModule(moduleText,exportName){if(exportName&&exportName!=="default"){const namedPattern=new RegExp(`export\\s+(?:const|let|var)\\s+${escapeRegExp3(exportName)}\\s*=\\s*\`([\\s\\S]*?)\``);const namedMatch=moduleText.match(namedPattern);if(namedMatch){return namedMatch[1]}throw new Error(`Could not extract named export "${exportName}" from npm shell package. The package must export a template literal string.`)}const defaultPattern=/export\s+default\s+`([\s\S]*?)`/;const defaultMatch=moduleText.match(defaultPattern);if(defaultMatch){return defaultMatch[1]}throw new Error("Could not extract default export from npm shell package. The package must export a template literal string (e.g., export default `<html>...</html>`).")}function escapeRegExp3(str){return str.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function isNpmSource(source){return typeof source==="object"&&source!==null&&"npm"in source}function isFileSource(source){return typeof source==="object"&&source!==null&&"file"in source}function isImportSource(source){return typeof source==="object"&&source!==null&&"import"in source}function isFunctionSource(source){return typeof source==="function"}var FRONTMCP_META_KEY="__frontmcp_meta";function isFrontmcpUiResolvable(...candidatePaths){try{const nodeFs=__require("fs");const nodePath=__require("path");const ORG="@frontmcp";const PKG="ui";for(const candidate of candidatePaths){let dir=candidate;while(true){const pkgJson=nodePath.join(dir,"node_modules",ORG,PKG,"package.json");if(nodeFs.existsSync(pkgJson))return true;const parent=nodePath.dirname(dir);if(parent===dir)break;dir=parent}}return false}catch{return false}}function loadEsbuild(filename){try{return __require("esbuild")}catch(err){if(!isMissingEsbuild(err))throw err;const subject=filename?`FileSource widget "${filename}"`:"A FileSource widget";throw new Error(`${subject} needs esbuild, which is not installed. @frontmcp/uipack loads esbuild on demand to bundle FileSource widgets (.tsx/.jsx) when the tool is called, so it must be installed where the server runs: \`npm install esbuild\` (in "dependencies", not "devDependencies"). Projects created with \`frontmcp create\` already get it through the \`frontmcp\` package.`,{cause:err})}}function isMissingEsbuild(err){if(!(err instanceof Error))return false;return err.code==="MODULE_NOT_FOUND"&&/Cannot find module ['"]esbuild['"]/.test(err.message)}function transpileReactSource(source,filename){const esbuild=loadEsbuild(filename);const loader=filename?.endsWith(".tsx")?"tsx":"jsx";const result=esbuild.transformSync(source,{loader,jsx:"transform",jsxFactory:"React.createElement",jsxFragment:"React.Fragment",format:"esm",target:"es2020",define:{"process.env.NODE_ENV":'"production"'}});return result.code}function bundleFileSource(source,filename,resolveDir,componentName,options={}){if(!isFrontmcpUiResolvable(resolveDir,process.cwd())){throw new Error(`FileSource widget "${filename}" requires the @frontmcp/ui package, which provides the React bridge mount that's injected at bundle time. Install it (e.g. \`npm install @frontmcp/ui\` or \`yarn add @frontmcp/ui\`) and try again.`)}const esbuild=loadEsbuild(filename);const mountCode=`
+// --- Auto-generated mount ---
+import { createElement as __h } from 'react';
+import { createRoot } from 'react-dom/client';
+import { McpBridgeProvider } from '@frontmcp/ui/react';
+var __root = document.getElementById('root');
+if (__root) {
+  var __reactRoot = createRoot(__root);
+  function __hasData(v) { return v !== undefined; }
+  function __render(output) {
+    __reactRoot.render(
+      __h(McpBridgeProvider, null,
+        __h(${componentName}, { output: output !== undefined ? output : null, input: window.__mcpToolInput, loading: !__hasData(output) })
+      )
+    );
   }
-};
-var globalTypeCache = new MemoryTypeCache({
-  maxSize: 500,
-  defaultTtl: 60 * 60 * 1e3
-  // 1 hour
-});
-
-// libs/uipack/src/typings/dts-parser.ts
-var IMPORT_PATTERN = /^import\s+(?:type\s+)?(?:(?:\{[^}]*\}|\*\s+as\s+\w+|\w+)\s+from\s+)?['"]([^'"]+)['"]/gm;
-var EXPORT_FROM_PATTERN = /^export\s+(?:\{[^}]*\}|\*)\s+from\s+['"]([^'"]+)['"]/gm;
-var REFERENCE_TYPES_PATTERN = /^\/\/\/\s*<reference\s+types\s*=\s*['"]([^'"]+)['"]\s*\/>/gm;
-var REFERENCE_PATH_PATTERN = /^\/\/\/\s*<reference\s+path\s*=\s*['"]([^'"]+)['"]\s*\/>/gm;
-var DECLARE_MODULE_PATTERN = /^declare\s+module\s+['"]([^'"]+)['"]/gm;
-function parseDtsImports(content) {
-  const imports = [];
-  const externalPackages = /* @__PURE__ */ new Set();
-  const relativeImports = /* @__PURE__ */ new Set();
-  const lines = content.split("\n");
-  for (let i = 0; i < lines.length; i++) {
-    const line = lines[i];
-    const lineNum = i + 1;
-    IMPORT_PATTERN.lastIndex = 0;
-    let match = IMPORT_PATTERN.exec(line);
-    if (match) {
-      const specifier = match[1];
-      imports.push({
-        type: "import",
-        specifier,
-        statement: line.trim(),
-        line: lineNum
-      });
-      categorizeSpecifier(specifier, externalPackages, relativeImports);
-    }
-    EXPORT_FROM_PATTERN.lastIndex = 0;
-    match = EXPORT_FROM_PATTERN.exec(line);
-    if (match) {
-      const specifier = match[1];
-      imports.push({
-        type: "export",
-        specifier,
-        statement: line.trim(),
-        line: lineNum
-      });
-      categorizeSpecifier(specifier, externalPackages, relativeImports);
-    }
-    REFERENCE_TYPES_PATTERN.lastIndex = 0;
-    match = REFERENCE_TYPES_PATTERN.exec(line);
-    if (match) {
-      const specifier = match[1];
-      imports.push({
-        type: "reference",
-        specifier,
-        statement: line.trim(),
-        line: lineNum
-      });
-      externalPackages.add(getPackageFromSpecifier(specifier));
-    }
-    REFERENCE_PATH_PATTERN.lastIndex = 0;
-    match = REFERENCE_PATH_PATTERN.exec(line);
-    if (match) {
-      const specifier = match[1];
-      imports.push({
-        type: "reference",
-        specifier,
-        statement: line.trim(),
-        line: lineNum
-      });
-      relativeImports.add(specifier);
-    }
-    DECLARE_MODULE_PATTERN.lastIndex = 0;
-    match = DECLARE_MODULE_PATTERN.exec(line);
-    if (match) {
-      const specifier = match[1];
-      imports.push({
-        type: "declare-module",
-        specifier,
-        statement: line.trim(),
-        line: lineNum
-      });
-    }
+  // Render immediately (component shows loading state until data arrives)
+  __render(undefined);
+  // 1. Try OpenAI SDK (toolOutput set synchronously or after load)
+  if (typeof window !== 'undefined') {
+    if (!window.openai) window.openai = {};
+    var __cur = window.openai.toolOutput;
+    if (__hasData(__cur)) { __render(__cur); }
+    Object.defineProperty(window.openai, 'toolOutput', {
+      get: function() { return __cur; },
+      set: function(v) { __cur = v; __render(v); },
+      configurable: true, enumerable: true
+    });
   }
-  return {
-    imports,
-    externalPackages: Array.from(externalPackages),
-    relativeImports: Array.from(relativeImports)
-  };
-}
-function categorizeSpecifier(specifier, externalPackages, relativeImports) {
-  if (isRelativeImport(specifier)) {
-    relativeImports.add(specifier);
+  // 2. Try injected data globals (null: the page carries no call's data, e.g. compiled at startup)
+  if (__hasData(window.__mcpToolOutput) && window.__mcpToolOutput !== null) { __render(window.__mcpToolOutput); }
+  // 3. Listen for bridge tool-result (ext-apps / MCP Inspector)
+  var __bridge = window.FrontMcpBridge;
+  if (__bridge && typeof __bridge.onToolResult === 'function') {
+    __bridge.onToolResult(function(data) { __render(data); });
   } else {
-    externalPackages.add(getPackageFromSpecifier(specifier));
-  }
-}
-function isRelativeImport(specifier) {
-  return specifier.startsWith("./") || specifier.startsWith("../") || specifier.startsWith("/") || // Check for Windows-style paths
-  /^[A-Za-z]:/.test(specifier);
-}
-function getPackageFromSpecifier(specifier) {
-  if (specifier.startsWith("@")) {
-    const parts = specifier.split("/");
-    if (parts.length >= 2) {
-      return `${parts[0]}/${parts[1]}`;
-    }
-    return specifier;
-  }
-  const slashIndex = specifier.indexOf("/");
-  if (slashIndex > 0) {
-    return specifier.substring(0, slashIndex);
-  }
-  return specifier;
-}
-function getSubpathFromSpecifier(specifier) {
-  const packageName = getPackageFromSpecifier(specifier);
-  if (specifier.length > packageName.length + 1) {
-    return specifier.substring(packageName.length + 1);
-  }
-  return void 0;
-}
-var MAX_IMPORT_STATEMENT_LENGTH = 2e3;
-function parseImportStatement(statement) {
-  if (statement.length > MAX_IMPORT_STATEMENT_LENGTH) {
-    return null;
-  }
-  const namedMatch = /import\s+(?:\{[^}]*\}|\*\s+as\s+\w+|\w+)\s+from\s+['"]([^'"]+)['"]/.exec(statement);
-  if (namedMatch) {
-    return namedMatch[1];
-  }
-  const sideEffectMatch = /import\s+['"]([^'"]+)['"]/.exec(statement);
-  if (sideEffectMatch) {
-    return sideEffectMatch[1];
+    // 4. Fallback: listen for tool:result CustomEvent (standalone / MCP Inspector)
+    window.addEventListener('tool:result', function(e) {
+      var d = e.detail;
+      if (d) __render(d.structuredContent !== undefined ? d.structuredContent : d.content !== undefined ? d.content : d);
+    });
   }
-  return null;
+}`;const loader={".tsx":"tsx",".jsx":"jsx"};const stdinLoader=filename.endsWith(".tsx")?"tsx":"jsx";const alias={};try{const nodePath=__require("path");const nodeFs=__require("fs");const candidates=[nodePath.join(process.cwd(),"node_modules","@frontmcp","ui","dist","esm"),nodePath.join(resolveDir,"node_modules","@frontmcp","ui","dist","esm")];for(const uiEsmBase of candidates){if(!nodeFs.existsSync(uiEsmBase))continue;const subpaths=["components","react","theme","bridge","runtime"];for(const sub of subpaths){const mjs=nodePath.join(uiEsmBase,sub,"index.mjs");if(nodeFs.existsSync(mjs))alias[`@frontmcp/ui/${sub}`]=mjs}if(Object.keys(alias).length>0)break}}catch{}try{const result=esbuild.buildSync({stdin:{contents:source+"\n"+mountCode,loader:stdinLoader,resolveDir,sourcefile:filename},bundle:true,write:false,format:"esm",target:"es2020",jsx:"automatic",external:options.bundleReact?[]:["react","react-dom","react/jsx-runtime","react/jsx-dev-runtime"],alias,define:{"process.env.NODE_ENV":'"production"'},platform:"browser",treeShaking:true,logLevel:"warning",loader});return{code:result.outputFiles[0].text}}catch(err){const message=err instanceof Error?err.message:String(err);throw new Error(`Failed to bundle FileSource "${filename}": ${message}. If the error mentions @frontmcp/ui or @frontmcp/uipack, ensure both packages are installed in the consuming project.`,{cause:err})}}function extractDefaultExportName(code){let match=code.match(/export\s+default\s+(?:function|class)\s+(\w+)/);if(match)return match[1];match=code.match(/export\s+default\s+(\w+)\s*;/);if(match)return match[1];return null}var DEFAULT_META={mcpAware:false,renderer:"auto"};function resolveUISource(source,options){if(options?.inlineReact&&options?.transformOnly){throw new Error("resolveUISource: `inlineReact` and `transformOnly` are mutually exclusive \u2014 set at most one.")}const resolver=options?.resolver??createEsmShResolver();if(isNpmSource(source)){return resolveNpmSource(source,resolver)}if(isImportSource(source)){return resolveImportSource(source)}if(isFileSource(source)){return resolveFileSource(source,{inlineReact:options?.inlineReact,transformOnly:options?.transformOnly})}if(isFunctionSource(source)){return resolveFunctionSource(source,options?.input,options?.output)}throw new Error("Unknown UISource type")}function resolveNpmSource(source,resolver){const specifier=source.version?`${source.npm}@${source.version}`:source.npm;const pkgName=getPackageName(source.npm);const resolved=resolver.resolve(specifier);const url=resolved?.value??`https://esm.sh/${specifier}`;const peerDeps=[];if(pkgName!=="react"&&pkgName!=="react-dom"){peerDeps.push("react","react-dom")}return{mode:"module",url,exportName:source.exportName??"default",meta:{...DEFAULT_META,renderer:"react"},peerDependencies:peerDeps}}function resolveImportSource(source){return{mode:"module",url:source.import,exportName:source.exportName??"default",meta:{...DEFAULT_META},peerDependencies:[]}}var BUILD_DIR_SEGMENTS=new Set(["dist","build","out"]);function missingWidgetError(filePath,cause){const sourceWidget=findSourceWidget(filePath);const error=new Error(`FileSource widget not found (ENOENT): no file at "${filePath}". The widget source is read from this path when the tool is called, so it has to exist where the compiled tool runs \u2014 a path built from \`__dirname\` or \`import.meta.url\` points into the build output once the tool is compiled. tsc does not copy \`*.widget.tsx\` / \`*.widget.jsx\` files into its output; \`frontmcp build\` does, and any other build needs a step that copies them next to the compiled tool.`+(sourceWidget?` The source widget exists at "${sourceWidget}" \u2014 copy it to "${filePath}", or build with \`frontmcp build\`.`:""),{cause});error.code="ENOENT";error.path=filePath;return error}function findSourceWidget(filePath){const path=__require("path");const fs=__require("fs");const parts=filePath.split(path.sep);for(let i=parts.length-2;i>=0;i--){if(!BUILD_DIR_SEGMENTS.has(parts[i]))continue;const candidates=[[...parts.slice(0,i),"src",...parts.slice(i+1)]];if(parts.length-i>2)candidates.push([...parts.slice(0,i),"src",...parts.slice(i+2)]);candidates.push([...parts.slice(0,i),...parts.slice(i+1)]);for(const candidate of candidates){const candidatePath=candidate.join(path.sep);try{if(fs.existsSync(candidatePath))return candidatePath}catch{}}return void 0}return void 0}function resolveFileSource(source,options={}){const path=__require("path");const ext=path.extname(source.file).toLowerCase();if(ext===".tsx"||ext===".jsx"){const fs=__require("fs");const wasRelative=!path.isAbsolute(source.file);const filePath=wasRelative?path.resolve(process.cwd(),source.file):source.file;let rawSource;try{rawSource=fs.readFileSync(filePath,"utf-8")}catch(err){const isNotFound=err?.code==="ENOENT";if(isNotFound&&wasRelative){throw new Error(`FileSource widget "${source.file}" not found at "${filePath}". Relative paths are resolved against process.cwd() ("${process.cwd()}"), not the tool file's directory. To anchor the path to the tool file, pass an absolute path \u2014 e.g. \`{ file: fileURLToPath(new URL('./widget.tsx', import.meta.url)) }\` from \`node:url\` (see issue #444).`,{cause:err})}if(isNotFound)throw missingWidgetError(filePath,err);throw err}const componentName=source.exportName||extractDefaultExportName(rawSource)||"Component";if(options.transformOnly===true){const code=transpileReactSource(rawSource,path.basename(filePath));const parsed2=parseImports(code);return{mode:"module",code,imports:[...new Set(parsed2.externalImports.map(i=>i.specifier))],exportName:componentName,meta:{mcpAware:true,renderer:"react"},peerDependencies:source.peerDependencies||["react","react-dom"],bundled:false}}const bundled=bundleFileSource(rawSource,source.file,path.dirname(filePath),componentName,{bundleReact:options.inlineReact===true});const parsed=parseImports(bundled.code);return{mode:"module",code:bundled.code,imports:[...new Set(parsed.externalImports.map(i=>i.specifier))],exportName:componentName,meta:{mcpAware:true,renderer:"react"},peerDependencies:source.peerDependencies||["react","react-dom"],bundled:true}}if(source.inline){return{mode:"inline",html:`<!-- File source: ${source.file} (inline mode - content to be resolved at build time) -->`,exportName:"default",meta:{...DEFAULT_META,renderer:"html"},peerDependencies:[]}}return{mode:"module",url:source.file,exportName:"default",meta:{...DEFAULT_META},peerDependencies:[]}}function resolveFunctionSource(source,input,output){const html2=source(input,output);return{mode:"inline",html:html2,exportName:"default",meta:{mcpAware:false,renderer:"html"},peerDependencies:[]}}function generateMountScript(resolved,propsMapping){if(resolved.mode!=="module"||!resolved.url){return""}const componentImport=resolved.exportName==="default"?`import Component from '${resolved.url}';`:`import { ${resolved.exportName} as Component } from '${resolved.url}';`;if(resolved.meta.mcpAware){return`${componentImport}
+import React from 'react';
+import { createRoot } from 'react-dom/client';
+createRoot(document.getElementById('root'))
+  .render(React.createElement(Component));`}const propsCode=propsMapping?generateMappedPropsCode(propsMapping):"window.__mcpToolOutput";return`${componentImport}
+import React from 'react';
+import { createRoot } from 'react-dom/client';
+const output = window.__mcpToolOutput || {};
+const props = ${propsCode};
+createRoot(document.getElementById('root'))
+  .render(React.createElement(Component, props));`}function generateMappedPropsCode(mapping){const entries=Object.entries(mapping).map(([prop,path])=>{const accessPath=path.split(".").map(part=>`[${safeJsonForScript(part)}]`).join("");return`${safeJsonForScript(prop)}: output${accessPath}`}).join(", ");return`({ ${entries} })`}var DEFAULT_WIDGET_MOUNT={moduleSpecifier:"@frontmcp/ui/react",wrapperImportName:"McpBridgeProvider"};function renderComponent(config,shellConfig){const resolver=shellConfig.resolver??createEsmShResolver();const resolved=resolveUISource(config.source,{resolver,input:shellConfig.input,output:shellConfig.output,inlineReact:config.inlineReact===true,transformOnly:config.transformOnly===true});const mergedShellConfig={...shellConfig,withShell:config.withShell??shellConfig.withShell,includeBridge:config.includeBridge??shellConfig.includeBridge,customShell:config.customShell??shellConfig.customShell};if(resolved.mode==="inline"){return buildShell(resolved.html??"",mergedShellConfig)}const content=buildModuleContent(resolved,resolver,config.props,shellConfig.mount);return buildShell(content,mergedShellConfig)}function buildModuleContent(resolved,resolver,propsMapping,mount=DEFAULT_WIDGET_MOUNT){const parts=[];if(resolved.code&&resolved.bundled){const importEntries={};for(const spec of resolved.imports||[]){const depResolved=resolver.resolve(spec);if(depResolved){importEntries[spec]=depResolved}}if(Object.keys(importEntries).length>0){const importMap=createImportMapFromResolved(importEntries);parts.push(generateImportMapScriptTag(importMap))}parts.push('<div id="root"></div>');parts.push(`<script type="module">
+${resolved.code}
+</script>`)}else if(resolved.code){const importEntries={};const allSpecifiers=new Set([...resolved.imports||[],"react-dom/client",mount.moduleSpecifier,"react/jsx-runtime","react/jsx-dev-runtime"]);if(mount===DEFAULT_WIDGET_MOUNT){allSpecifiers.add("react-dom/server");allSpecifiers.add("react-dom/static")}const coreDeps=new Set(["react","react-dom","react-dom/client","react/jsx-runtime","react/jsx-dev-runtime","react-dom/server","react-dom/static"]);for(const spec of allSpecifiers){const depResolved=resolver.resolve(spec);if(depResolved){if(!coreDeps.has(spec)&&depResolved.value?.includes("esm.sh")){importEntries[spec]={...depResolved,value:addExternalParam(depResolved.value,["react","react-dom"])}}else{importEntries[spec]=depResolved}}}if(importEntries["react-dom"]&&!importEntries["react-dom/client"]){const rdc=resolver.resolve("react-dom/client");if(rdc)importEntries["react-dom/client"]=rdc}if(Object.keys(importEntries).length>0){const importMap=createImportMapFromResolved(importEntries);parts.push(generateImportMapScriptTag(importMap))}const mountNodeId=mount.mountNodeId??"root";parts.push(`<div id="${mountNodeId}">${mount.mountNodeInnerHtml??""}</div>`);const mountCode=generateInlineMountCode(resolved.exportName,mount);parts.push(`<script type="module">
+${resolved.code}
+${mountCode}
+</script>`)}else{const importEntries={};for(const dep of resolved.peerDependencies){const depResolved=resolver.resolve(dep);if(depResolved){importEntries[dep]=depResolved}}if(importEntries["react-dom"]){const reactDomClient=resolver.resolve("react-dom/client");if(reactDomClient){importEntries["react-dom/client"]=reactDomClient}}if(Object.keys(importEntries).length>0){const importMap=createImportMapFromResolved(importEntries);parts.push(generateImportMapScriptTag(importMap))}parts.push('<div id="root"></div>');const mountScript=generateMountScript(resolved,propsMapping);if(mountScript){parts.push(`<script type="module">
+${mountScript}
+</script>`)}}return parts.join("\n")}function addExternalParam(url,externals){const sep=url.includes("?")?"&":"?";return`${url}${sep}external=${externals.join(",")}`}function generateInlineMountCode(componentName,mount){if(mount.generate){return mount.generate(componentName)}const wrapperName=mount.wrapperImportName??"McpBridgeProvider";const wrapperAlias=`__${wrapperName}`;const mountNodeId=mount.mountNodeId??"root";return`
+// --- Mount ---
+import { createRoot as __createRoot } from 'react-dom/client';
+import { ${wrapperName} as ${wrapperAlias} } from '${mount.moduleSpecifier}';
+const __root = document.getElementById('${mountNodeId}');
+if (__root) {
+  __createRoot(__root).render(
+    React.createElement(${wrapperAlias}, null,
+      React.createElement(${componentName})
+    )
+  );
+}`}var MCP_APPS_MIME_TYPE="text/html;profile=mcp-app";var MCP_APPS_EXTENSION_ID="io.modelcontextprotocol/ui";function resolveServingMode(options){const{configuredMode,platformType}=options;if(platformType==="gemini"){return{mode:configuredMode,supportsUI:false,effectiveMode:null,useStructuredContent:false,reason:"Gemini does not support MCP Apps UI"}}const effectiveMode=configuredMode==="auto"?"inline":configuredMode;if(effectiveMode==="hybrid"){const hybridCapable=platformType==="openai"||platformType==="ext-apps"||platformType==="cursor";if(!hybridCapable){return{mode:configuredMode,supportsUI:false,effectiveMode:null,useStructuredContent:false,reason:`Platform ${platformType} does not support hybrid serving mode`}}}const useStructuredContent=platformType==="openai"||platformType==="ext-apps"||platformType==="generic-mcp"||platformType==="unknown";return{mode:configuredMode,supportsUI:true,effectiveMode,useStructuredContent,reason:`Platform ${platformType} supports UI, mode: ${effectiveMode}`}}function buildToolResponseContent(options){const{rawOutput,htmlContent,servingMode,useStructuredContent,platformType}=options;const textSummary=typeof rawOutput==="string"?rawOutput:rawOutput!==null&&rawOutput!==void 0?JSON.stringify(rawOutput):"";const result={content:[{type:"text",text:textSummary}]};if(useStructuredContent&&rawOutput!==null&&rawOutput!==void 0){const structured=typeof rawOutput==="object"&&!Array.isArray(rawOutput)?rawOutput:{value:rawOutput};result.structuredContent=structured}if(htmlContent&&servingMode==="inline"){const htmlKey="ui/html";result._meta={[htmlKey]:htmlContent};result.format="html"}return result}function isUIRenderFailure(result){if(typeof result!=="object"||result===null){return false}const rec=result;return typeof rec["reason"]==="string"&&!("meta"in rec)}var CHART_TYPES=new Set(["bar","line","pie","area","scatter","doughnut","radar","polarArea","bubble"]);var MERMAID_PREFIXES=["flowchart","graph","sequenceDiagram","classDiagram","stateDiagram","erDiagram","gantt","pie","gitGraph","journey","mindmap","timeline","quadrantChart","sankey","xychart"];var PDF_MAGIC="JVBERi";var BASE64_PATTERN=/^[A-Za-z0-9+/=\r\n]+$/;function detectContentType(value){if(value===null||value===void 0){return"text"}if(typeof value==="object"&&!Array.isArray(value)){const obj=value;if(typeof obj["type"]==="string"&&CHART_TYPES.has(obj["type"])){return"chart"}return"json"}if(typeof value==="string"){const trimmed=value.trimStart();if(trimmed.startsWith(PDF_MAGIC)){return BASE64_PATTERN.test(trimmed.trimEnd())?"pdf":"text"}for(const prefix of MERMAID_PREFIXES){if(trimmed.startsWith(prefix)){return"mermaid"}}if(trimmed.includes("<")&&trimmed.includes(">")){return"html"}return"text"}return"text"}var CHART_JS_CDN="https://esm.sh/chart.js@4/auto";var MERMAID_CDN="https://esm.sh/mermaid@11/dist/mermaid.esm.min.mjs";function buildChartHtml(chartJson){const chartData=safeJsonForScript(chartJson);const content=`
+<canvas id="chart" style="max-width:100%;max-height:80vh;"></canvas>
+<script type="module">
+import Chart from '${CHART_JS_CDN}';
+const ctx = document.getElementById('chart').getContext('2d');
+new Chart(ctx, ${chartData});
+</script>`;const result=buildShell(content,{toolName:"chart",csp:{resourceDomains:["https://esm.sh"],connectDomains:["https://esm.sh"]},includeBridge:false});return result.html}function buildMermaidHtml(mermaidCode){const escaped=escapeHtml(mermaidCode);const content=`
+<pre class="mermaid">${escaped}</pre>
+<script type="module">
+import mermaid from '${MERMAID_CDN}';
+mermaid.initialize({ startOnLoad: true, theme: 'default' });
+</script>`;const result=buildShell(content,{toolName:"mermaid",csp:{resourceDomains:["https://esm.sh"],connectDomains:["https://esm.sh"]},includeBridge:false});return result.html}function buildPdfHtml(base64){const content=`
+<div id="pdf-container" style="width:100%;overflow:auto;text-align:center;"></div>
+<script type="module">
+import * as pdfjsLib from 'https://esm.sh/pdfjs-dist@4/build/pdf.min.mjs';
+pdfjsLib.GlobalWorkerOptions.workerSrc = 'https://esm.sh/pdfjs-dist@4/build/pdf.worker.min.mjs';
+
+const base64 = ${safeJsonForScript(base64)};
+const binaryStr = atob(base64);
+const bytes = new Uint8Array(binaryStr.length);
+for (let i = 0; i < binaryStr.length; i++) bytes[i] = binaryStr.charCodeAt(i);
+
+const pdf = await pdfjsLib.getDocument({ data: bytes }).promise;
+const container = document.getElementById('pdf-container');
+for (let i = 1; i <= pdf.numPages; i++) {
+  const page = await pdf.getPage(i);
+  const viewport = page.getViewport({ scale: 1.5 });
+  const canvas = document.createElement('canvas');
+  canvas.width = viewport.width;
+  canvas.height = viewport.height;
+  canvas.style.marginBottom = '8px';
+  container.appendChild(canvas);
+  await page.render({ canvasContext: canvas.getContext('2d'), viewport }).promise;
 }
-function combineDtsContents(contents) {
-  const seenReferences = /* @__PURE__ */ new Set();
-  const references = [];
-  const declarations = [];
-  for (const [url, content] of contents.entries()) {
-    const lines = content.split("\n");
-    let inReferences = true;
-    for (const line of lines) {
-      const trimmed = line.trim();
-      if (trimmed.startsWith("///")) {
-        if (!seenReferences.has(trimmed)) {
-          seenReferences.add(trimmed);
-          references.push(trimmed);
-        }
-        continue;
-      }
-      if (inReferences && trimmed === "") {
-        continue;
-      }
-      inReferences = false;
-      if (declarations.length === 0 || declarations[declarations.length - 1] !== "") {
-        if (trimmed !== "") {
-          if (!declarations.some((d) => d.includes(`// Source: ${url}`))) {
-            declarations.push(`
-// Source: ${url}`);
-          }
-        }
-      }
-      declarations.push(line);
-    }
-  }
-  const parts = [];
-  if (references.length > 0) {
-    parts.push(references.join("\n"));
-    parts.push("");
-  }
-  parts.push(declarations.join("\n").trim());
-  return parts.join("\n");
-}
-
-// libs/uipack/src/typings/type-fetcher.ts
-var Semaphore = class {
-  permits;
-  waiting = [];
-  constructor(permits) {
-    this.permits = permits;
-  }
-  async acquire() {
-    if (this.permits > 0) {
-      this.permits--;
-      return;
-    }
-    return new Promise((resolve) => {
-      this.waiting.push(resolve);
-    });
-  }
-  release() {
-    if (this.waiting.length > 0) {
-      const next = this.waiting.shift();
-      next?.();
-    } else {
-      this.permits++;
-    }
-  }
-};
-var TypeFetcher = class {
-  maxDepth;
-  timeout;
-  maxConcurrency;
-  cdnBaseUrl;
-  fetchFn;
-  cache;
-  allowedPatterns;
-  allowlistEnabled;
-  _initialized = false;
-  constructor(options = {}, cache) {
-    this.maxDepth = options.maxDepth ?? 2;
-    this.timeout = options.timeout ?? 1e4;
-    this.maxConcurrency = options.maxConcurrency ?? 5;
-    this.cdnBaseUrl = options.cdnBaseUrl ?? "https://esm.sh";
-    this.fetchFn = options.fetch ?? globalThis.fetch.bind(globalThis);
-    this.cache = cache ?? globalTypeCache;
-    if (options.allowedPackages === false) {
-      this.allowlistEnabled = false;
-      this.allowedPatterns = [];
-    } else {
-      this.allowlistEnabled = true;
-      this.allowedPatterns = [...DEFAULT_ALLOWED_PACKAGES, ...options.allowedPackages ?? []];
-    }
-  }
-  /**
-   * Check if a package is allowed by the allowlist.
-   * Supports glob patterns (e.g., '@frontmcp/*' matches '@frontmcp/ui').
-   *
-   * @param packageName - The package name to check
-   * @returns true if the package is allowed
-   */
-  isPackageAllowed(packageName) {
-    if (!this.allowlistEnabled) {
-      return true;
-    }
-    return this.allowedPatterns.some((pattern) => {
-      if (pattern.includes("*")) {
-        const escaped = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
-        const regex = new RegExp(`^${escaped}$`);
-        return regex.test(packageName);
-      }
-      return packageName === pattern || packageName.startsWith(pattern + "/");
-    });
-  }
-  /**
-   * Initialize the TypeFetcher by pre-loading allowed packages.
-   * This fetches types for all allowed packages and caches them.
-   *
-   * @param options - Options for initialization
-   * @returns Summary of initialization results
-   */
-  async initialize(options) {
-    if (this._initialized) {
-      const stats2 = await this.cache.getStats();
-      return { loaded: [], failed: [], cached: stats2.entries };
-    }
-    const loaded = [];
-    const failed = [];
-    const packagesToLoad = this.allowedPatterns.filter((p) => !p.includes("*"));
-    for (const pkg of packagesToLoad) {
-      const result = await this.fetchBatch({
-        imports: [`import * from "${pkg}"`],
-        timeout: options?.timeout ?? this.timeout
-      });
-      if (result.results.length > 0) {
-        loaded.push(pkg);
-      } else if (result.errors.length > 0) {
-        failed.push(pkg);
-      }
-    }
-    this._initialized = true;
-    const stats = await this.cache.getStats();
-    return { loaded, failed, cached: stats.entries };
-  }
-  /**
-   * Whether the fetcher has been initialized.
-   */
-  get initialized() {
-    return this._initialized;
-  }
-  /**
-   * Get the list of allowed package patterns.
-   */
-  get allowedPackagePatterns() {
-    return this.allowedPatterns;
-  }
-  /**
-   * Fetch types for a batch of import statements.
-   *
-   * @param request - Batch request configuration
-   * @returns Batch result with results and errors
-   */
-  async fetchBatch(request) {
-    const startTime = Date.now();
-    const results = [];
-    const errors = [];
-    let cacheHits = 0;
-    let networkRequests = 0;
-    const maxDepth = request.maxDepth ?? this.maxDepth;
-    const timeout = request.timeout ?? this.timeout;
-    const maxConcurrency = request.maxConcurrency ?? this.maxConcurrency;
-    const skipCache = request.skipCache ?? false;
-    const versionOverrides = request.versionOverrides ?? {};
-    const semaphore = new Semaphore(maxConcurrency);
-    const promises = request.imports.map(async (importStatement) => {
-      await semaphore.acquire();
-      try {
-        const specifier = parseImportStatement(importStatement);
-        if (!specifier) {
-          errors.push({
-            specifier: importStatement,
-            code: "INVALID_SPECIFIER",
-            message: `Could not parse import statement: ${importStatement}`
-          });
-          return;
-        }
-        const packageName = getPackageFromSpecifier(specifier);
-        if (!this.isPackageAllowed(packageName)) {
-          errors.push({
-            specifier,
-            code: "PACKAGE_NOT_ALLOWED",
-            message: `Package "${packageName}" is not in the allowlist`
-          });
-          return;
-        }
-        const version = versionOverrides[packageName] ?? "latest";
-        const cacheKey = `${TYPE_CACHE_PREFIX}${packageName}@${version}`;
-        if (!skipCache) {
-          const cached = await this.cache.get(cacheKey);
-          if (cached) {
-            cacheHits++;
-            results.push(cached.result);
-            return;
-          }
-        }
-        const result = await this.fetchTypesForSpecifier(specifier, {
-          maxDepth,
-          timeout,
-          version
-        });
-        if (result.success) {
-          results.push(result.data);
-          networkRequests += result.fetchCount;
-          const entry = {
-            result: result.data,
-            cachedAt: Date.now(),
-            size: result.data.content.length,
-            accessCount: 1
-          };
-          await this.cache.set(cacheKey, entry);
-        } else {
-          errors.push(result.error);
-          networkRequests += result.fetchCount;
-        }
-      } finally {
-        semaphore.release();
-      }
-    });
-    await Promise.all(promises);
-    return {
-      results,
-      errors,
-      totalTimeMs: Date.now() - startTime,
-      cacheHits,
-      networkRequests
-    };
-  }
-  /**
-   * Fetch types for a single import specifier.
-   */
-  async fetchTypesForSpecifier(specifier, options) {
-    let fetchCount = 0;
-    const fetchedUrls = [];
-    const visitedUrls = /* @__PURE__ */ new Set();
-    const contents = /* @__PURE__ */ new Map();
-    try {
-      const resolution = await this.resolvePackage(specifier, options.version, options.timeout);
-      if (!resolution) {
-        return {
-          success: false,
-          error: {
-            specifier,
-            code: "PACKAGE_NOT_FOUND",
-            message: `Could not resolve package: ${specifier}`
-          },
-          fetchCount
-        };
-      }
-      fetchCount++;
-      const fetchResult = await this.fetchRecursive(
-        resolution.typesUrl,
-        options.maxDepth,
-        options.timeout,
-        visitedUrls,
-        contents
-      );
-      fetchCount += fetchResult.fetchCount;
-      fetchedUrls.push(...fetchResult.fetchedUrls);
-      if (!fetchResult.success) {
-        return {
-          success: false,
-          error: {
-            specifier,
-            code: fetchResult.errorCode,
-            message: fetchResult.errorMessage ?? "Unknown error",
-            url: fetchResult.errorUrl
-          },
-          fetchCount
-        };
-      }
-      const files = buildTypeFiles(contents, resolution.packageName, resolution.version, resolution.subpath);
-      const combinedContent = combineDtsContents(contents);
-      const result = {
-        specifier,
-        resolvedPackage: resolution.packageName,
-        subpath: resolution.subpath,
-        version: resolution.version,
-        content: combinedContent,
-        files,
-        fetchedUrls,
-        fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
-      };
-      return { success: true, data: result, fetchCount };
-    } catch (error) {
-      return {
-        success: false,
-        error: {
-          specifier,
-          code: "NETWORK_ERROR",
-          message: error instanceof Error ? error.message : String(error)
-        },
-        fetchCount
-      };
-    }
-  }
-  /**
-   * Resolve a package specifier to a types URL.
-   * Uses path fallback: try full path, then remove last segment until found.
-   */
-  async resolvePackage(specifier, version, timeout) {
-    const packageName = getPackageFromSpecifier(specifier);
-    const subpath = getSubpathFromSpecifier(specifier);
-    const versionSuffix = version === "latest" ? "" : `@${version}`;
-    const baseUrl = `${this.cdnBaseUrl}/${packageName}${versionSuffix}`;
-    const urlsToTry = subpath ? [`${baseUrl}/${subpath}`, baseUrl] : [baseUrl];
-    for (const url of urlsToTry) {
-      try {
-        const response = await this.fetchWithTimeout(url, timeout, "HEAD");
-        if (response.ok) {
-          const typesHeader = response.headers.get("X-TypeScript-Types");
-          if (typesHeader) {
-            const typesUrl = typesHeader.startsWith("/") ? `${this.cdnBaseUrl}${typesHeader}` : typesHeader;
-            const versionMatch = /@(\d+\.\d+\.\d+[^/]*)/.exec(typesUrl);
-            const resolvedVersion = versionMatch ? versionMatch[1] : version;
-            return {
-              packageName,
-              subpath,
-              version: resolvedVersion,
-              typesUrl
-            };
-          }
-        }
-      } catch {
-        continue;
-      }
-    }
-    return null;
-  }
-  /**
-   * Recursively fetch .d.ts files.
-   */
-  async fetchRecursive(url, depth, timeout, visited, contents) {
-    if (visited.has(url)) {
-      return { success: true, fetchCount: 0, fetchedUrls: [] };
-    }
-    visited.add(url);
-    let fetchCount = 1;
-    const fetchedUrls = [url];
-    try {
-      const response = await this.fetchWithTimeout(url, timeout, "GET");
-      if (!response.ok) {
-        return {
-          success: false,
-          fetchCount,
-          fetchedUrls,
-          errorCode: "NETWORK_ERROR",
-          errorMessage: `HTTP ${response.status}: ${response.statusText}`,
-          errorUrl: url
-        };
-      }
-      const content = await response.text();
-      contents.set(url, content);
-      if (depth <= 0) {
-        return { success: true, fetchCount, fetchedUrls };
-      }
-      const parsed = parseDtsImports(content);
-      for (const pkg of parsed.externalPackages) {
-        if (pkg.startsWith("@types/") || isBuiltinModule(pkg)) {
-          continue;
-        }
-        const resolution = await this.resolvePackage(pkg, "latest", timeout);
-        fetchCount++;
-        if (resolution && !visited.has(resolution.typesUrl)) {
-          const result = await this.fetchRecursive(resolution.typesUrl, depth - 1, timeout, visited, contents);
-          fetchCount += result.fetchCount;
-          fetchedUrls.push(...result.fetchedUrls);
-        }
-      }
-      for (const relativePath of parsed.relativeImports) {
-        const resolvedUrl = resolveRelativeUrl(url, relativePath);
-        if (resolvedUrl && !visited.has(resolvedUrl)) {
-          const result = await this.fetchRecursive(resolvedUrl, depth - 1, timeout, visited, contents);
-          fetchCount += result.fetchCount;
-          fetchedUrls.push(...result.fetchedUrls);
-        }
-      }
-      return { success: true, fetchCount, fetchedUrls };
-    } catch (error) {
-      const isTimeout = error instanceof Error && error.message.includes("timeout");
-      return {
-        success: false,
-        fetchCount,
-        fetchedUrls,
-        errorCode: isTimeout ? "TIMEOUT" : "NETWORK_ERROR",
-        errorMessage: error instanceof Error ? error.message : String(error),
-        errorUrl: url
-      };
-    }
-  }
-  /**
-   * Fetch with timeout support.
-   */
-  async fetchWithTimeout(url, timeout, method) {
-    const controller = new AbortController();
-    const timeoutId = setTimeout(() => controller.abort(), timeout);
-    try {
-      const response = await this.fetchFn(url, {
-        method,
-        signal: controller.signal,
-        headers: {
-          Accept: "application/typescript, text/plain, */*"
-        }
-      });
-      return response;
-    } finally {
-      clearTimeout(timeoutId);
-    }
-  }
-};
-function isBuiltinModule(name) {
-  const builtins = /* @__PURE__ */ new Set([
-    "assert",
-    "buffer",
-    "child_process",
-    "cluster",
-    "console",
-    "constants",
-    "crypto",
-    "dgram",
-    "dns",
-    "domain",
-    "events",
-    "fs",
-    "http",
-    "https",
-    "module",
-    "net",
-    "os",
-    "path",
-    "punycode",
-    "querystring",
-    "readline",
-    "repl",
-    "stream",
-    "string_decoder",
-    "sys",
-    "timers",
-    "tls",
-    "tty",
-    "url",
-    "util",
-    "v8",
-    "vm",
-    "zlib",
-    // Node.js prefixed modules
-    "node:assert",
-    "node:buffer",
-    "node:child_process",
-    "node:cluster",
-    "node:console",
-    "node:constants",
-    "node:crypto",
-    "node:dgram",
-    "node:dns",
-    "node:domain",
-    "node:events",
-    "node:fs",
-    "node:http",
-    "node:https",
-    "node:module",
-    "node:net",
-    "node:os",
-    "node:path",
-    "node:punycode",
-    "node:querystring",
-    "node:readline",
-    "node:repl",
-    "node:stream",
-    "node:string_decoder",
-    "node:sys",
-    "node:timers",
-    "node:tls",
-    "node:tty",
-    "node:url",
-    "node:util",
-    "node:v8",
-    "node:vm",
-    "node:zlib"
-  ]);
-  return builtins.has(name);
-}
-function resolveRelativeUrl(base, relative) {
-  try {
-    let path = relative;
-    if (!path.endsWith(".d.ts") && !path.endsWith(".ts")) {
-      path = `${path}.d.ts`;
-    }
-    const resolved = new URL(path, base);
-    return resolved.toString();
-  } catch {
-    return null;
-  }
-}
-function buildTypeFiles(contents, packageName, version, subpath) {
-  const files = [];
-  for (const [url, content] of contents.entries()) {
-    const virtualPath = urlToVirtualPath(url, packageName, version);
-    files.push({
-      path: virtualPath,
-      url,
-      content
-    });
-  }
-  if (subpath) {
-    const aliasPath = `node_modules/${packageName}/${subpath}/index.d.ts`;
-    const aliasExists = files.some((f) => f.path === aliasPath);
-    if (!aliasExists) {
-      const aliasContent = `// Auto-generated alias for ${packageName}/${subpath}
-export * from '${getRelativeImportPath(subpath)}';
-`;
-      files.push({
-        path: aliasPath,
-        url: "",
-        // No actual URL - this is synthesized
-        content: aliasContent
-      });
-    }
-  }
-  return files;
-}
-function getRelativeImportPath(subpath) {
-  const depth = subpath.split("/").length;
-  const prefix = "../".repeat(depth);
-  return `${prefix}index`;
-}
-function urlToVirtualPath(url, packageName, version) {
-  try {
-    const urlObj = new URL(url);
-    const pathname = urlObj.pathname;
-    const cleanPath = pathname.replace(/^\/v\d+\//, "/");
-    const versionedPackage = `${packageName}@${version}`;
-    const packageIndex = cleanPath.indexOf(versionedPackage);
-    if (packageIndex !== -1) {
-      const afterPackageVersion = cleanPath.substring(packageIndex + versionedPackage.length);
-      const relativePath = afterPackageVersion.startsWith("/") ? afterPackageVersion.substring(1) : afterPackageVersion;
-      return `node_modules/${packageName}/${relativePath || "index.d.ts"}`;
-    }
-    const packagePattern = new RegExp(`/${escapeRegExp(packageName)}@[^/]+(/.*)?$`);
-    const match = pathname.match(packagePattern);
-    if (match) {
-      const filePath = match[1] ? match[1].substring(1) : "index.d.ts";
-      return `node_modules/${packageName}/${filePath}`;
-    }
-    return `node_modules/${packageName}/${pathname.split("/").pop() || "index.d.ts"}`;
-  } catch {
-    return `node_modules/${packageName}/index.d.ts`;
-  }
-}
-function escapeRegExp(string) {
-  return string.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-function createTypeFetcher(options, cache) {
-  return new TypeFetcher(options, cache);
-}
-
-// libs/uipack/src/resolver/cdn-registry.ts
-var DEFAULT_CDN_REGISTRY = {
-  react: {
-    packageName: "react",
-    defaultVersion: "19.2.4",
-    providers: {
-      cloudflare: {
-        url: "https://cdnjs.cloudflare.com/ajax/libs/react/19.2.4/umd/react.production.min.js",
-        global: "React",
-        crossorigin: "anonymous"
-      },
-      jsdelivr: {
-        url: "https://cdn.jsdelivr.net/npm/react@19.2.4/umd/react.production.min.js",
-        global: "React",
-        crossorigin: "anonymous"
-      },
-      unpkg: {
-        url: "https://unpkg.com/react@19.2.4/umd/react.production.min.js",
-        global: "React",
-        crossorigin: "anonymous"
-      },
-      "esm.sh": {
-        url: "https://esm.sh/react@19.2.4",
-        esm: true,
-        crossorigin: "anonymous"
-      }
-    },
-    preferredProviders: ["esm.sh", "cloudflare", "jsdelivr", "unpkg"],
-    metadata: {
-      description: "A JavaScript library for building user interfaces",
-      homepage: "https://react.dev",
-      license: "MIT"
-    }
-  },
-  "react-dom": {
-    packageName: "react-dom",
-    defaultVersion: "19.2.4",
-    providers: {
-      cloudflare: {
-        url: "https://cdnjs.cloudflare.com/ajax/libs/react-dom/19.2.4/umd/react-dom.production.min.js",
-        global: "ReactDOM",
-        crossorigin: "anonymous",
-        peerDependencies: ["react"]
-      },
-      jsdelivr: {
-        url: "https://cdn.jsdelivr.net/npm/react-dom@19.2.4/umd/react-dom.production.min.js",
-        global: "ReactDOM",
-        crossorigin: "anonymous",
-        peerDependencies: ["react"]
-      },
-      unpkg: {
-        url: "https://unpkg.com/react-dom@19.2.4/umd/react-dom.production.min.js",
-        global: "ReactDOM",
-        crossorigin: "anonymous",
-        peerDependencies: ["react"]
-      },
-      "esm.sh": {
-        url: "https://esm.sh/react-dom@19.2.4",
-        esm: true,
-        crossorigin: "anonymous",
-        peerDependencies: ["react"]
-      }
-    },
-    preferredProviders: ["esm.sh", "cloudflare", "jsdelivr", "unpkg"],
-    metadata: {
-      description: "React package for working with the DOM",
-      homepage: "https://react.dev",
-      license: "MIT"
-    }
-  },
-  "chart.js": {
-    packageName: "chart.js",
-    defaultVersion: "4.5.1",
-    providers: {
-      cloudflare: {
-        url: "https://cdnjs.cloudflare.com/ajax/libs/Chart.js/4.5.1/chart.umd.min.js",
-        global: "Chart",
-        crossorigin: "anonymous"
-      },
-      jsdelivr: {
-        url: "https://cdn.jsdelivr.net/npm/chart.js@4.5.1/dist/chart.umd.min.js",
-        global: "Chart",
-        crossorigin: "anonymous"
-      },
-      unpkg: {
-        url: "https://unpkg.com/chart.js@4.5.1/dist/chart.umd.min.js",
-        global: "Chart",
-        crossorigin: "anonymous"
-      }
-    },
-    preferredProviders: ["esm.sh", "cloudflare", "jsdelivr", "unpkg"],
-    metadata: {
-      description: "Simple yet flexible JavaScript charting library",
-      homepage: "https://www.chartjs.org",
-      license: "MIT"
-    }
-  },
-  d3: {
-    packageName: "d3",
-    defaultVersion: "7.9.0",
-    providers: {
-      cloudflare: {
-        url: "https://cdnjs.cloudflare.com/ajax/libs/d3/7.9.0/d3.min.js",
-        integrity: "sha512-vc58qvvBdrDR4etbxMdlTt4GBQk1qjvyORR2nrsPsFPyrs+/u5c3+1Ct6upOgdZoIl7eq6k3a1UPDSNAQi/32A==",
-        global: "d3",
-        crossorigin: "anonymous"
-      },
-      jsdelivr: {
-        url: "https://cdn.jsdelivr.net/npm/d3@7.9.0/dist/d3.min.js",
-        global: "d3",
-        crossorigin: "anonymous"
-      },
-      unpkg: {
-        url: "https://unpkg.com/d3@7.9.0/dist/d3.min.js",
-        global: "d3",
-        crossorigin: "anonymous"
-      }
-    },
-    preferredProviders: ["esm.sh", "cloudflare", "jsdelivr", "unpkg"],
-    metadata: {
-      description: "Data-Driven Documents",
-      homepage: "https://d3js.org",
-      license: "ISC"
-    }
-  },
-  lodash: {
-    packageName: "lodash",
-    defaultVersion: "4.17.21",
-    providers: {
-      cloudflare: {
-        url: "https://cdnjs.cloudflare.com/ajax/libs/lodash.js/4.17.21/lodash.min.js",
-        integrity: "sha512-WFN04846sdKMIP5LKNphMaWzU7YpMyCU245etK3g/2ARYbPK9Ub18eG+ljU96qKRCWh+quCY7yefSmlkQw1ANQ==",
-        global: "_",
-        crossorigin: "anonymous"
-      },
-      jsdelivr: {
-        url: "https://cdn.jsdelivr.net/npm/lodash@4.17.21/lodash.min.js",
-        global: "_",
-        crossorigin: "anonymous"
-      },
-      unpkg: {
-        url: "https://unpkg.com/lodash@4.17.21/lodash.min.js",
-        global: "_",
-        crossorigin: "anonymous"
-      }
-    },
-    preferredProviders: ["esm.sh", "cloudflare", "jsdelivr", "unpkg"],
-    metadata: {
-      description: "A modern JavaScript utility library",
-      homepage: "https://lodash.com",
-      license: "MIT"
-    }
-  }
-};
-function lookupPackage(packageName, registry = DEFAULT_CDN_REGISTRY) {
-  return registry[packageName];
-}
-function getPackageCDNUrl(packageName, providerOrder = ["esm.sh", "cloudflare", "jsdelivr", "unpkg"], registry = DEFAULT_CDN_REGISTRY) {
-  const entry = lookupPackage(packageName, registry);
-  if (!entry) return void 0;
-  for (const provider of providerOrder) {
-    const config = entry.providers[provider];
-    if (config?.url) {
-      return config.url;
-    }
-  }
-  for (const provider of Object.keys(entry.providers)) {
-    const config = entry.providers[provider];
-    if (config?.url) {
-      return config.url;
-    }
-  }
-  return void 0;
-}
-function getRegisteredPackages(registry = DEFAULT_CDN_REGISTRY) {
-  return Object.keys(registry);
-}
-function isPackageRegistered(packageName, registry = DEFAULT_CDN_REGISTRY) {
-  return packageName in registry;
-}
-function mergeRegistries(customRegistry) {
-  return {
-    ...DEFAULT_CDN_REGISTRY,
-    ...customRegistry
-  };
-}
-function getPackagePeerDependencies(packageName, registry = DEFAULT_CDN_REGISTRY) {
-  const entry = lookupPackage(packageName, registry);
-  if (!entry) return [];
-  for (const provider of Object.keys(entry.providers)) {
-    const config = entry.providers[provider];
-    if (config?.peerDependencies) {
-      return config.peerDependencies;
-    }
-  }
-  return [];
-}
-
-// libs/uipack/src/resolver/import-parser.ts
-var IMPORT_PATTERNS = {
-  named: /import\s*\{([^}]+)\}\s*from\s*['"]([^'"]+)['"]/g,
-  default: /import\s+(\w+)\s+from\s*['"]([^'"]+)['"]/g,
-  namespace: /import\s*\*\s*as\s+(\w+)\s+from\s*['"]([^'"]+)['"]/g,
-  sideEffect: /import\s*['"]([^'"]+)['"]/g,
-  dynamic: /(?:await\s+)?import\s*\(\s*['"]([^'"]+)['"]\s*\)/g,
-  defaultAndNamed: /import\s+(\w+)\s*,\s*\{([^}]+)\}\s*from\s*['"]([^'"]+)['"]/g,
-  defaultAndNamespace: /import\s+(\w+)\s*,\s*\*\s*as\s+(\w+)\s+from\s*['"]([^'"]+)['"]/g,
-  reExport: /export\s*\{[^}]+\}\s*from\s*['"]([^'"]+)['"]/g,
-  reExportAll: /export\s*\*\s*from\s*['"]([^'"]+)['"]/g
-};
-function parseNamedImports(namedString) {
-  return namedString.split(",").map((s) => s.trim()).filter((s) => s.length > 0).map((s) => {
-    const asMatch = s.match(/^(\w+)\s+as\s+\w+$/);
-    return asMatch ? asMatch[1] : s;
-  });
-}
-function isRelativeImport2(specifier) {
-  return specifier.startsWith("./") || specifier.startsWith("../") || specifier.startsWith("/");
-}
-function isExternalImport(specifier) {
-  return !isRelativeImport2(specifier) && !specifier.startsWith("#");
-}
-function getPackageName(specifier) {
-  if (specifier.startsWith("@")) {
-    const parts = specifier.split("/");
-    if (parts.length >= 2) {
-      return `${parts[0]}/${parts[1]}`;
-    }
-    return specifier;
-  }
-  const firstSlash = specifier.indexOf("/");
-  return firstSlash === -1 ? specifier : specifier.slice(0, firstSlash);
-}
-function getLineNumber(source, index) {
-  let line = 1;
-  for (let i = 0; i < index && i < source.length; i++) {
-    if (source[i] === "\n") {
-      line++;
-    }
-  }
-  return line;
-}
-function getColumnNumber(source, index) {
-  let column = 0;
-  for (let i = index - 1; i >= 0 && source[i] !== "\n"; i--) {
-    column++;
-  }
-  return column;
-}
-function parseImports(source) {
-  const imports = [];
-  const seenStatements = /* @__PURE__ */ new Set();
-  const addImport = (imp) => {
-    const key = `${imp.type}:${imp.specifier}:${imp.statement}`;
-    if (!seenStatements.has(key)) {
-      seenStatements.add(key);
-      imports.push(imp);
-    }
-  };
-  let match;
-  const defaultAndNamedRegex = new RegExp(IMPORT_PATTERNS.defaultAndNamed.source, "g");
-  while ((match = defaultAndNamedRegex.exec(source)) !== null) {
-    const [statement, defaultName, namedString, specifier] = match;
-    addImport({
-      statement,
-      specifier,
-      type: "default",
-      defaultImport: defaultName,
-      namedImports: parseNamedImports(namedString),
-      line: getLineNumber(source, match.index),
-      column: getColumnNumber(source, match.index)
-    });
-  }
-  const defaultAndNamespaceRegex = new RegExp(IMPORT_PATTERNS.defaultAndNamespace.source, "g");
-  while ((match = defaultAndNamespaceRegex.exec(source)) !== null) {
-    const [statement, defaultName, namespaceName, specifier] = match;
-    addImport({
-      statement,
-      specifier,
-      type: "default",
-      defaultImport: defaultName,
-      namespaceImport: namespaceName,
-      line: getLineNumber(source, match.index),
-      column: getColumnNumber(source, match.index)
-    });
-  }
-  const namedRegex = new RegExp(IMPORT_PATTERNS.named.source, "g");
-  while ((match = namedRegex.exec(source)) !== null) {
-    const [statement, namedString, specifier] = match;
-    addImport({
-      statement,
-      specifier,
-      type: "named",
-      namedImports: parseNamedImports(namedString),
-      line: getLineNumber(source, match.index),
-      column: getColumnNumber(source, match.index)
-    });
-  }
-  const defaultRegex = new RegExp(IMPORT_PATTERNS.default.source, "g");
-  while ((match = defaultRegex.exec(source)) !== null) {
-    const [statement, defaultName, specifier] = match;
-    const afterMatch = source.slice(match.index + match[0].length - specifier.length - 2);
-    if (afterMatch.startsWith(",")) continue;
-    addImport({
-      statement,
-      specifier,
-      type: "default",
-      defaultImport: defaultName,
-      line: getLineNumber(source, match.index),
-      column: getColumnNumber(source, match.index)
-    });
-  }
-  const namespaceRegex = new RegExp(IMPORT_PATTERNS.namespace.source, "g");
-  while ((match = namespaceRegex.exec(source)) !== null) {
-    const [statement, namespaceName, specifier] = match;
-    addImport({
-      statement,
-      specifier,
-      type: "namespace",
-      namespaceImport: namespaceName,
-      line: getLineNumber(source, match.index),
-      column: getColumnNumber(source, match.index)
-    });
-  }
-  const sideEffectRegex = new RegExp(IMPORT_PATTERNS.sideEffect.source, "g");
-  while ((match = sideEffectRegex.exec(source)) !== null) {
-    const [statement, specifier] = match;
-    const beforeMatch = source.slice(Math.max(0, match.index - 50), match.index);
-    if (beforeMatch.includes("from")) continue;
-    addImport({
-      statement,
-      specifier,
-      type: "side-effect",
-      line: getLineNumber(source, match.index),
-      column: getColumnNumber(source, match.index)
-    });
-  }
-  const dynamicRegex = new RegExp(IMPORT_PATTERNS.dynamic.source, "g");
-  while ((match = dynamicRegex.exec(source)) !== null) {
-    const [statement, specifier] = match;
-    addImport({
-      statement,
-      specifier,
-      type: "dynamic",
-      line: getLineNumber(source, match.index),
-      column: getColumnNumber(source, match.index)
-    });
-  }
-  const reExportRegex = new RegExp(IMPORT_PATTERNS.reExport.source, "g");
-  while ((match = reExportRegex.exec(source)) !== null) {
-    const [statement, specifier] = match;
-    addImport({
-      statement,
-      specifier,
-      type: "named",
-      line: getLineNumber(source, match.index),
-      column: getColumnNumber(source, match.index)
-    });
-  }
-  const reExportAllRegex = new RegExp(IMPORT_PATTERNS.reExportAll.source, "g");
-  while ((match = reExportAllRegex.exec(source)) !== null) {
-    const [statement, specifier] = match;
-    addImport({
-      statement,
-      specifier,
-      type: "namespace",
-      line: getLineNumber(source, match.index),
-      column: getColumnNumber(source, match.index)
-    });
-  }
-  const externalImports = imports.filter((imp) => isExternalImport(imp.specifier));
-  const relativeImports = imports.filter((imp) => isRelativeImport2(imp.specifier));
-  const externalPackages = [...new Set(externalImports.map((imp) => getPackageName(imp.specifier)))];
-  return {
-    imports,
-    externalImports,
-    relativeImports,
-    externalPackages
-  };
-}
-function extractExternalPackages(source) {
-  return parseImports(source).externalPackages;
-}
-
-// libs/uipack/src/resolver/esm-sh.resolver.ts
-var DEFAULT_FALLBACK_CDN = "https://esm.sh";
-function createResolverWithOverrides(overrides, baseOptions) {
-  const base = createEsmShResolver(baseOptions);
-  return {
-    overrides,
-    resolve(specifier, context) {
-      if (overrides[specifier]) {
-        return { value: overrides[specifier], type: "url" };
-      }
-      for (const [prefix, url] of Object.entries(overrides)) {
-        if (specifier.startsWith(prefix + "/")) {
-          const subpath = specifier.slice(prefix.length);
-          return { value: url + subpath, type: "url" };
-        }
-      }
-      return base.resolve(specifier, context);
-    }
-  };
-}
-function createEsmShResolver(options = {}) {
-  const {
-    fallbackCdnBase = DEFAULT_FALLBACK_CDN,
-    registry = DEFAULT_CDN_REGISTRY,
-    providerOrder = ["esm.sh", "cloudflare", "jsdelivr", "unpkg"]
-  } = options;
-  return {
-    resolve(specifier, _context) {
-      if (specifier.startsWith("./") || specifier.startsWith("../") || specifier.startsWith("/")) {
-        return null;
-      }
-      if (specifier.startsWith("node:") || specifier.startsWith("#")) {
-        return null;
-      }
-      const pkgName = getPackageName(specifier);
-      const entry = lookupPackage(pkgName, registry);
-      if (entry) {
-        for (const provider of providerOrder) {
-          const config = entry.providers[provider];
-          if (config?.url) {
-            const subpath = specifier.slice(pkgName.length);
-            if (subpath && config.url.includes("esm.sh/")) {
-              return {
-                value: config.url + subpath,
-                type: "url",
-                integrity: config.integrity
-              };
-            }
-            if (subpath) {
-              return {
-                value: `${fallbackCdnBase}/${specifier}`,
-                type: "url"
-              };
-            }
-            if (config.global && !config.esm) {
-              return {
-                value: config.url,
-                type: "url",
-                integrity: config.integrity
-              };
-            }
-            return {
-              value: config.url,
-              type: "url",
-              integrity: config.integrity
-            };
-          }
-        }
-      }
-      return {
-        value: `${fallbackCdnBase}/${specifier}`,
-        type: "url"
-      };
-    }
-  };
-}
-
-// libs/uipack/src/resolver/import-map.ts
-function createImportMapFromResolved(resolved) {
-  const imports = {};
-  const integrity = {};
-  for (const [specifier, res] of Object.entries(resolved)) {
-    if (res.type === "url") {
-      imports[specifier] = res.value;
-      if (res.integrity) {
-        integrity[res.value] = res.integrity;
-      }
-    }
-  }
-  return {
-    imports,
-    integrity: Object.keys(integrity).length > 0 ? integrity : void 0
-  };
-}
-function createImportMap(dependencies) {
-  const imports = {};
-  const integrity = {};
-  for (const dep of dependencies) {
-    imports[dep.packageName] = dep.cdnUrl;
-    if (dep.integrity) {
-      integrity[dep.cdnUrl] = dep.integrity;
-    }
-  }
-  return {
-    imports,
-    integrity: Object.keys(integrity).length > 0 ? integrity : void 0
-  };
-}
-function mergeImportMaps(...maps) {
-  const imports = {};
-  const integrity = {};
-  const scopes = {};
-  for (const map of maps) {
-    Object.assign(imports, map.imports);
-    if (map.integrity) {
-      Object.assign(integrity, map.integrity);
-    }
-    if (map.scopes) {
-      for (const [scope, mappings] of Object.entries(map.scopes)) {
-        scopes[scope] = { ...scopes[scope], ...mappings };
-      }
-    }
-  }
-  return {
-    imports,
-    integrity: Object.keys(integrity).length > 0 ? integrity : void 0,
-    scopes: Object.keys(scopes).length > 0 ? scopes : void 0
-  };
-}
-function generateImportMapScriptTag(map) {
-  const json = JSON.stringify(map, null, 2).replace(/<\//g, "<\\/");
-  return `<script type="importmap">
-${json}
-</script>`;
-}
-function generateImportMapScriptTagMinified(map) {
-  const json = JSON.stringify(map).replace(/<\//g, "<\\/");
-  return `<script type="importmap">${json}</script>`;
-}
-function generateCDNScriptTags(dependencies) {
-  return dependencies.filter((dep) => !dep.esm).map((dep) => {
-    const attrs = [`src="${escapeHtmlAttr(dep.cdnUrl)}"`];
-    if (dep.integrity) {
-      attrs.push(`integrity="${escapeHtmlAttr(dep.integrity)}"`);
-    }
-    attrs.push('crossorigin="anonymous"');
-    return `<script ${attrs.join(" ")}></script>`;
-  });
-}
-function generateDependencyHTML(dependencies, options = {}) {
-  const { minify = false } = options;
-  const parts = [];
-  const importMap = createImportMap(dependencies);
-  const importMapTag = minify ? generateImportMapScriptTagMinified(importMap) : generateImportMapScriptTag(importMap);
-  parts.push(importMapTag);
-  const umdTags = generateCDNScriptTags(dependencies);
-  parts.push(...umdTags);
-  return parts.join(minify ? "" : "\n");
-}
-function validateImportMap(map) {
-  const errors = [];
-  if (typeof map !== "object" || map === null) {
-    return { valid: false, errors: ["Import map must be an object"] };
-  }
-  const obj = map;
-  if (!obj["imports"]) {
-    errors.push('Import map must have an "imports" field');
-  } else if (typeof obj["imports"] !== "object" || obj["imports"] === null) {
-    errors.push('"imports" must be an object');
-  } else {
-    const imports = obj["imports"];
-    for (const [key, value] of Object.entries(imports)) {
-      if (typeof value !== "string") {
-        errors.push(`Import "${key}" must map to a string URL`);
-      } else if (!value.startsWith("https://")) {
-        errors.push(`Import "${key}" URL must use HTTPS: ${value}`);
-      }
-    }
-  }
-  if (obj["integrity"] !== void 0) {
-    if (typeof obj["integrity"] !== "object" || obj["integrity"] === null) {
-      errors.push('"integrity" must be an object');
-    } else {
-      const integrity = obj["integrity"];
-      for (const [url, hash] of Object.entries(integrity)) {
-        if (typeof hash !== "string") {
-          errors.push(`Integrity for "${url}" must be a string`);
-        } else if (!hash.match(/^sha(256|384|512)-/)) {
-          errors.push(`Invalid integrity hash format for "${url}": ${hash}`);
-        }
-      }
-    }
-  }
-  return { valid: errors.length === 0, errors };
-}
-
-// libs/uipack/src/resolver/import-rewriter.ts
-function rewriteImports(source, options = {}) {
-  const { resolver = createEsmShResolver(), skipPackages = [], overrides = {} } = options;
-  const skipSet = new Set(skipPackages);
-  const rewrites = /* @__PURE__ */ new Map();
-  const fallbackPackages = [];
-  const parsed = parseImports(source);
-  const specifierMap = /* @__PURE__ */ new Map();
-  for (const imp of parsed.externalImports) {
-    const specifier = imp.specifier;
-    if (specifierMap.has(specifier)) continue;
-    if (specifier.startsWith("node:")) continue;
-    const pkgName = getPackageName(specifier);
-    if (skipSet.has(pkgName)) continue;
-    if (overrides[specifier]) {
-      specifierMap.set(specifier, overrides[specifier]);
-      continue;
-    }
-    if (overrides[pkgName]) {
-      const subpath = specifier.slice(pkgName.length);
-      specifierMap.set(specifier, overrides[pkgName] + subpath);
-      continue;
-    }
-    const resolved = resolver.resolve(specifier);
-    if (resolved && resolved.type === "url") {
-      specifierMap.set(specifier, resolved.value);
-    }
-  }
-  let code = source;
-  for (const [specifier, cdnUrl] of specifierMap) {
-    const escaped = escapeRegExp2(specifier);
-    const singleQuotePattern = new RegExp(`((?:import|export)\\s+(?:[^'"]*\\s+)?from\\s+)'${escaped}'`, "g");
-    const doubleQuotePattern = new RegExp(`((?:import|export)\\s+(?:[^'"]*\\s+)?from\\s+)"${escaped}"`, "g");
-    const dynamicSinglePattern = new RegExp(`(import\\s*\\(\\s*)'${escaped}'`, "g");
-    const dynamicDoublePattern = new RegExp(`(import\\s*\\(\\s*)"${escaped}"`, "g");
-    const sideEffectSinglePattern = new RegExp(`(import\\s+)'${escaped}'`, "g");
-    const sideEffectDoublePattern = new RegExp(`(import\\s+)"${escaped}"`, "g");
-    const beforeLength = code.length;
-    code = code.replace(singleQuotePattern, `$1'${cdnUrl}'`).replace(doubleQuotePattern, `$1"${cdnUrl}"`).replace(dynamicSinglePattern, `$1'${cdnUrl}'`).replace(dynamicDoublePattern, `$1"${cdnUrl}"`).replace(sideEffectSinglePattern, `$1'${cdnUrl}'`).replace(sideEffectDoublePattern, `$1"${cdnUrl}"`);
-    if (code.length !== beforeLength || code !== source) {
-      rewrites.set(specifier, cdnUrl);
-    }
-  }
-  return {
-    code,
-    rewrittenCount: rewrites.size,
-    rewrites,
-    fallbackPackages
-  };
-}
-function escapeRegExp2(str) {
-  return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-
-// libs/uipack/src/shell/csp.ts
-var DEFAULT_CDN_DOMAINS = [
-  "https://cdn.jsdelivr.net",
-  "https://cdnjs.cloudflare.com",
-  "https://fonts.googleapis.com",
-  "https://fonts.gstatic.com",
-  "https://esm.sh"
-];
-var DEFAULT_CSP_DIRECTIVES = [
-  "default-src 'none'",
-  `script-src 'self' 'unsafe-inline' ${DEFAULT_CDN_DOMAINS.join(" ")}`,
-  `style-src 'self' 'unsafe-inline' ${DEFAULT_CDN_DOMAINS.join(" ")}`,
-  `img-src 'self' data: ${DEFAULT_CDN_DOMAINS.join(" ")}`,
-  `font-src 'self' data: ${DEFAULT_CDN_DOMAINS.join(" ")}`,
-  `connect-src ${DEFAULT_CDN_DOMAINS.join(" ")}`,
-  "object-src 'self' data:"
-];
-var RESTRICTIVE_CSP_DIRECTIVES = [
-  "default-src 'none'",
-  "script-src 'self' 'unsafe-inline'",
-  "style-src 'self' 'unsafe-inline'",
-  "img-src 'self' data:",
-  "font-src 'self' data:",
-  "connect-src 'none'",
-  "object-src 'self' data:"
-];
-function buildCSPDirectives(csp) {
-  if (!csp) {
-    return [...DEFAULT_CSP_DIRECTIVES];
-  }
-  const validResourceDomains = sanitizeCSPDomains(csp.resourceDomains);
-  const validConnectDomains = sanitizeCSPDomains(csp.connectDomains);
-  const allResourceDomains = [.../* @__PURE__ */ new Set([...DEFAULT_CDN_DOMAINS, ...validResourceDomains])];
-  const directives = [
-    "default-src 'none'",
-    `script-src 'self' 'unsafe-inline' ${allResourceDomains.join(" ")}`,
-    `style-src 'self' 'unsafe-inline' ${allResourceDomains.join(" ")}`
-  ];
-  const imgSources = ["'self'", "data:", ...allResourceDomains];
-  directives.push(`img-src ${imgSources.join(" ")}`);
-  const fontSources = ["'self'", "data:", ...allResourceDomains];
-  directives.push(`font-src ${fontSources.join(" ")}`);
-  const connectSources = [.../* @__PURE__ */ new Set([...allResourceDomains, ...validConnectDomains])];
-  directives.push(`connect-src ${connectSources.join(" ")}`);
-  directives.push("object-src 'self' data:");
-  return directives;
-}
-function buildCSPMetaTag(csp) {
-  const directives = buildCSPDirectives(csp);
-  const content = directives.join("; ");
-  return `<meta http-equiv="Content-Security-Policy" content="${escapeAttribute(content)}">`;
-}
-var LOOPBACK_HOSTS = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]"]);
-function validateCSPDomain(domain) {
-  if (typeof domain !== "string" || /[\s;,'"]/.test(domain)) return false;
-  if (/[?#]/.test(domain)) return false;
-  if (domain.includes("*")) {
-    const wildcard = /^(?:https|wss):\/\/\*\.(.*)$/.exec(domain);
-    return wildcard !== null && /^([a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}$/.test(wildcard[1]);
-  }
-  try {
-    const url = new URL(domain);
-    if (url.protocol === "https:" || url.protocol === "wss:") return true;
-    return (url.protocol === "http:" || url.protocol === "ws:") && LOOPBACK_HOSTS.has(url.hostname);
-  } catch {
-    return false;
-  }
-}
-var reportedInvalidDomains = /* @__PURE__ */ new Set();
-function sanitizeCSPDomains(domains) {
-  if (!domains) return [];
-  const valid = [];
-  for (const domain of domains) {
-    if (validateCSPDomain(domain)) {
-      valid.push(domain);
-    } else if (!reportedInvalidDomains.has(domain)) {
-      reportedInvalidDomains.add(domain);
-      console.warn(
-        `Invalid CSP domain ignored: ${domain} (expected an https:// or wss:// origin, or http:// / ws:// on localhost)`
-      );
-    }
-  }
-  return valid;
-}
-function escapeAttribute(str) {
-  return str.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
-}
-
-// libs/uipack/src/shell/custom-shell-types.ts
-var SHELL_PLACEHOLDER_NAMES = ["CSP", "DATA", "BRIDGE", "CONTENT", "TITLE"];
-var SHELL_PLACEHOLDERS = {
-  CSP: "{{CSP}}",
-  DATA: "{{DATA}}",
-  BRIDGE: "{{BRIDGE}}",
-  CONTENT: "{{CONTENT}}",
-  TITLE: "{{TITLE}}"
-};
-var REQUIRED_PLACEHOLDERS = ["CONTENT"];
-var OPTIONAL_PLACEHOLDERS = ["CSP", "DATA", "BRIDGE", "TITLE"];
-function isInlineShellSource(source) {
-  return typeof source === "object" && source !== null && "inline" in source;
-}
-function isUrlShellSource(source) {
-  return typeof source === "object" && source !== null && "url" in source;
-}
-function isNpmShellSource(source) {
-  return typeof source === "object" && source !== null && "npm" in source;
-}
-
-// libs/uipack/src/shell/custom-shell-applier.ts
-var PLACEHOLDER_PATTERN = new RegExp(`\\{\\{(${SHELL_PLACEHOLDER_NAMES.join("|")})\\}\\}`, "g");
-var VALUE_KEYS = {
-  CSP: "csp",
-  DATA: "data",
-  BRIDGE: "bridge",
-  CONTENT: "content",
-  TITLE: "title"
-};
-function applyShellTemplate(template, values) {
-  return template.replace(PLACEHOLDER_PATTERN, (_token, name) => values[VALUE_KEYS[name]]);
-}
-
-// libs/uipack/src/shell/custom-shell-validator.ts
-function validateShellTemplate(template) {
-  const found = {};
-  for (const name of SHELL_PLACEHOLDER_NAMES) {
-    found[name] = template.includes(SHELL_PLACEHOLDERS[name]);
-  }
-  const missingRequired = REQUIRED_PLACEHOLDERS.filter((name) => !found[name]);
-  const missingOptional = OPTIONAL_PLACEHOLDERS.filter((name) => !found[name]);
-  return {
-    valid: missingRequired.length === 0,
-    found,
-    missingRequired,
-    missingOptional
-  };
-}
-
-// libs/uipack/src/shell/trusted-html.ts
-var TRUSTED_HTML = /* @__PURE__ */ Symbol.for("@frontmcp/uipack/trusted-html");
-function trustedHtml(markup) {
-  const value = String(markup);
-  return Object.freeze({ [TRUSTED_HTML]: value, toString: () => value });
-}
-function isTrustedHtml(value) {
-  return typeof value === "object" && value !== null && typeof value[TRUSTED_HTML] === "string";
-}
-function interpolate(value) {
-  if (isTrustedHtml(value)) return value[TRUSTED_HTML];
-  if (Array.isArray(value)) return value.map(interpolate).join("");
-  if (value === false) return "";
-  return escapeHtml(value);
-}
-function html(strings, ...values) {
-  let markup = strings[0];
-  for (let index = 0; index < values.length; index++) {
-    markup += interpolate(values[index]) + strings[index + 1];
-  }
-  return trustedHtml(markup);
-}
-
-// libs/uipack/src/shell/data-injector.ts
-function hasSizing(sizing) {
-  if (!sizing) return false;
-  return sizing.preferredHeight !== void 0 || sizing.minHeight !== void 0 || sizing.maxHeight !== void 0 || sizing.aspectRatio !== void 0 || sizing.autoResize !== void 0;
-}
-function buildDataInjectionScript(options) {
-  const { toolName, input, output, structuredContent, sizing, displayMode } = options;
-  const lines = [
-    `window.__mcpAppsEnabled = true;`,
-    `window.__mcpToolName = ${safeJsonForScript(toolName)};`,
-    `window.__mcpToolInput = ${safeJsonForScript(input ?? null)};`,
-    `window.__mcpToolOutput = ${safeJsonForScript(output ?? null)};`,
-    `window.__mcpStructuredContent = ${safeJsonForScript(structuredContent ?? null)};`
-  ];
-  if (hasSizing(sizing)) {
-    lines.push(`window.__mcpWidgetSizing = ${safeJsonForScript(sizing)};`);
-  }
-  if (displayMode && displayMode !== "inline") {
-    lines.push(`window.__mcpDisplayMode = ${safeJsonForScript(displayMode)};`);
-  }
-  return `<script>
-${lines.join("\n")}
-</script>`;
-}
-function buildCustomDataInjectionScript(descriptor) {
-  if (descriptor.script !== void 0) {
-    return descriptor.script;
-  }
-  if (descriptor.globalKey !== void 0) {
-    return `<script>window[${safeJsonForScript(descriptor.globalKey)}] = ${safeJsonForScript(
-      descriptor.value ?? null
-    )};</script>`;
-  }
-  return "";
-}
-var _uniqueIdCounter = 0;
-function createTemplateHelpers() {
-  return {
-    escapeHtml: (str) => escapeHtml(str),
-    formatDate: (date, format) => {
-      const d = date instanceof Date ? date : new Date(date);
-      if (isNaN(d.getTime())) return String(date);
-      if (format === "iso") return d.toISOString();
-      if (format === "date") return d.toLocaleDateString();
-      if (format === "time") return d.toLocaleTimeString();
-      return d.toLocaleString();
-    },
-    formatCurrency: (amount, currency = "USD") => {
-      return new Intl.NumberFormat("en-US", {
-        style: "currency",
-        currency
-      }).format(amount);
-    },
-    uniqueId: (prefix = "mcp") => {
-      return `${prefix}-${++_uniqueIdCounter}`;
-    },
-    jsonEmbed: (data) => safeJsonForScript(data),
-    html,
-    trustedHtml
-  };
-}
-
-// libs/uipack/src/shell/sizing-css.ts
-function sanitizeCssValue(value) {
-  return value.replace(/[<>{};]/g, "").trim();
-}
-function toCssLength(value) {
-  return typeof value === "number" ? `${value}px` : sanitizeCssValue(value);
-}
-function buildSizingStyleTag(sizing) {
-  if (!hasSizing(sizing)) return "";
-  const hasCssSizing = sizing.preferredHeight !== void 0 || sizing.minHeight !== void 0 || sizing.maxHeight !== void 0 || sizing.aspectRatio !== void 0;
-  if (!hasCssSizing) return "";
-  const rootRules = [];
-  const docRules = ["margin: 0;"];
-  if (sizing.preferredHeight !== void 0) {
-    const h = toCssLength(sizing.preferredHeight);
-    docRules.push(`height: ${h};`);
-    rootRules.push(`min-height: ${h};`);
-  }
-  if (sizing.minHeight !== void 0) {
-    const mh = toCssLength(sizing.minHeight);
-    docRules.push(`min-height: ${mh};`);
-    rootRules.push(`min-height: ${mh};`);
-  }
-  if (sizing.maxHeight !== void 0) {
-    const mx = toCssLength(sizing.maxHeight);
-    docRules.push(`max-height: ${mx};`);
-    rootRules.push(`max-height: ${mx};`);
-  }
-  if (sizing.aspectRatio !== void 0) {
-    const ar = typeof sizing.aspectRatio === "number" ? String(sizing.aspectRatio) : sanitizeCssValue(sizing.aspectRatio);
-    if (ar) rootRules.push(`aspect-ratio: ${ar};`);
-  }
-  const parts = [`html, body { ${docRules.join(" ")} }`];
-  if (rootRules.length > 0) {
-    parts.push(`#root { ${rootRules.join(" ")} }`);
-  }
-  return `<style>${parts.join("\n")}</style>`;
-}
-
-// libs/uipack/src/shell/builder.ts
-function resolveDataInjectionScript(args) {
-  if (args.dataInjection) {
-    return buildCustomDataInjectionScript(args.dataInjection);
-  }
-  return buildDataInjectionScript({
-    toolName: args.toolName,
-    input: args.input,
-    output: args.output,
-    structuredContent: args.structuredContent,
-    sizing: args.sizing,
-    displayMode: args.displayMode
-  });
-}
-function buildShell(content, config) {
-  const {
-    toolName,
-    csp,
-    withShell = true,
-    input,
-    output,
-    structuredContent,
-    includeBridge = true,
-    title,
-    sizing,
-    displayMode
-  } = config;
-  const { customShell, dataInjection } = config;
-  const dataScript = resolveDataInjectionScript({
-    dataInjection,
-    toolName,
-    input,
-    output,
-    structuredContent,
-    sizing,
-    displayMode
-  });
-  if (!withShell) {
-    const html3 = `${dataScript}
-${content}`;
-    return {
-      html: html3,
-      hash: simpleHash(html3),
-      size: Buffer.byteLength(html3, "utf-8")
-    };
-  }
-  if (customShell) {
-    return buildCustomShell(content, customShell, {
-      csp,
-      toolName,
-      input,
-      output,
-      structuredContent,
-      includeBridge,
-      title,
-      sizing,
-      displayMode,
-      dataInjection
-    });
-  }
-  const headParts = [
-    '<meta charset="UTF-8">',
-    '<meta name="viewport" content="width=device-width, initial-scale=1.0">'
-  ];
-  if (title) {
-    headParts.push(`<title>${escapeHtmlForTag(title)}</title>`);
-  }
-  headParts.push(buildCSPMetaTag(csp));
-  headParts.push(dataScript);
-  const sizingStyle = buildSizingStyleTag(sizing);
-  if (sizingStyle) {
-    headParts.push(sizingStyle);
-  }
-  if (includeBridge) {
-    const bridgeScript = generateBridgeIIFE({ minify: true });
-    headParts.push(`<script>${bridgeScript}</script>`);
-  }
-  const html2 = `<!DOCTYPE html>
-<html lang="en">
-<head>
-${headParts.map((p) => `  ${p}`).join("\n")}
-</head>
-<body>
-${content}
-</body>
-</html>`;
-  return {
-    html: html2,
-    hash: simpleHash(html2),
-    size: Buffer.byteLength(html2, "utf-8")
-  };
-}
-function buildCustomShell(content, customShell, ctx) {
-  let template;
-  if (typeof customShell === "string") {
-    const validation = validateShellTemplate(customShell);
-    if (!validation.valid) {
-      throw new Error(
-        `Custom shell template is missing required placeholder(s): ${validation.missingRequired.map((n) => `{{${n}}}`).join(", ")}`
-      );
-    }
-    template = customShell;
-  } else {
-    template = customShell.template;
-  }
-  const cspTag = buildCSPMetaTag(ctx.csp);
-  const dataScript = resolveDataInjectionScript({
-    dataInjection: ctx.dataInjection,
-    toolName: ctx.toolName,
-    input: ctx.input,
-    output: ctx.output,
-    structuredContent: ctx.structuredContent,
-    sizing: ctx.sizing,
-    displayMode: ctx.displayMode
-  });
-  const sizingStyle = buildSizingStyleTag(ctx.sizing);
-  const dataWithSizing = sizingStyle ? `${dataScript}
-${sizingStyle}` : dataScript;
-  let bridgeHtml = "";
-  if (ctx.includeBridge) {
-    const bridgeScript = generateBridgeIIFE({ minify: true });
-    bridgeHtml = `<script>${bridgeScript}</script>`;
-  }
-  const html2 = applyShellTemplate(template, {
-    csp: cspTag,
-    data: dataWithSizing,
-    bridge: bridgeHtml,
-    content,
-    title: ctx.title ? escapeHtmlForTag(ctx.title) : ""
-  });
-  return {
-    html: html2,
-    hash: simpleHash(html2),
-    size: Buffer.byteLength(html2, "utf-8")
-  };
-}
-function simpleHash(str) {
-  let hash = 0;
-  for (let i = 0; i < str.length; i++) {
-    const char = str.charCodeAt(i);
-    hash = (hash << 5) - hash + char | 0;
-  }
-  return Math.abs(hash).toString(16).padStart(8, "0");
-}
-function escapeHtmlForTag(str) {
-  return str.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
-}
-
-// libs/uipack/src/shell/custom-shell-resolver.ts
-var DEFAULT_TIMEOUT_MS = 1e4;
-var templateCache = /* @__PURE__ */ new Map();
-async function resolveShellTemplate(source, options) {
-  if (isInlineShellSource(source)) {
-    return resolveInline(source.inline);
-  }
-  if (isUrlShellSource(source)) {
-    const cacheKey = `url:${source.url}`;
-    if (!options?.noCache) {
-      const cached = templateCache.get(cacheKey);
-      if (cached) return cached;
-    }
-    const template = await fetchWithTimeout(source.url, source.timeout ?? DEFAULT_TIMEOUT_MS);
-    const resolved = buildResolved(template, "url");
-    if (!options?.noCache) {
-      templateCache.set(cacheKey, resolved);
-    }
-    return resolved;
-  }
-  if (isNpmShellSource(source)) {
-    const specifier = source.version ? `${source.npm}@${source.version}` : source.npm;
-    const cacheKey = `npm:${specifier}`;
-    if (!options?.noCache) {
-      const cached = templateCache.get(cacheKey);
-      if (cached) return cached;
-    }
-    const template = await resolveNpmTemplate(source, specifier, options?.resolver);
-    const resolved = buildResolved(template, "npm");
-    if (!options?.noCache) {
-      templateCache.set(cacheKey, resolved);
-    }
-    return resolved;
-  }
-  throw new Error('Invalid custom shell source: must have "inline", "url", or "npm" property');
-}
-function clearShellTemplateCache() {
-  templateCache.clear();
-}
-function resolveInline(template) {
-  return buildResolved(template, "inline");
-}
-function buildResolved(template, sourceType) {
-  const validation = validateShellTemplate(template);
-  if (!validation.valid) {
-    throw new Error(
-      `Custom shell template is missing required placeholder(s): ${validation.missingRequired.map((n) => `{{${n}}}`).join(", ")}`
-    );
-  }
-  return { template, sourceType, validation };
-}
-async function fetchWithTimeout(url, timeoutMs) {
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), timeoutMs);
-  try {
-    const response = await fetch(url, { signal: controller.signal });
-    if (!response.ok) {
-      throw new Error(`Failed to fetch shell template from ${url}: HTTP ${response.status}`);
-    }
-    return await response.text();
-  } catch (err) {
-    if (err instanceof Error && err.name === "AbortError") {
-      throw new Error(`Shell template fetch timed out after ${timeoutMs}ms: ${url}`);
-    }
-    throw err;
-  } finally {
-    clearTimeout(timer);
-  }
-}
-async function resolveNpmTemplate(source, specifier, resolver) {
-  const cdnUrl = resolveNpmToCdnUrl(specifier, resolver);
-  const moduleText = await fetchWithTimeout(cdnUrl, DEFAULT_TIMEOUT_MS);
-  return extractTemplateFromModule(moduleText, source.exportName);
-}
-function resolveNpmToCdnUrl(specifier, resolver) {
-  if (resolver) {
-    const resolved = resolver.resolve(specifier);
-    if (resolved) {
-      return resolved.value;
-    }
-  }
-  return `https://esm.sh/${specifier}`;
-}
-function extractTemplateFromModule(moduleText, exportName) {
-  if (exportName && exportName !== "default") {
-    const namedPattern = new RegExp(
-      `export\\s+(?:const|let|var)\\s+${escapeRegExp3(exportName)}\\s*=\\s*\`([\\s\\S]*?)\``
-    );
-    const namedMatch = moduleText.match(namedPattern);
-    if (namedMatch) {
-      return namedMatch[1];
-    }
-    throw new Error(
-      `Could not extract named export "${exportName}" from npm shell package. The package must export a template literal string.`
-    );
-  }
-  const defaultPattern = /export\s+default\s+`([\s\S]*?)`/;
-  const defaultMatch = moduleText.match(defaultPattern);
-  if (defaultMatch) {
-    return defaultMatch[1];
-  }
-  throw new Error(
-    "Could not extract default export from npm shell package. The package must export a template literal string (e.g., export default `<html>...</html>`)."
-  );
-}
-function escapeRegExp3(str) {
-  return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-
-// libs/uipack/src/component/types.ts
-function isNpmSource(source) {
-  return typeof source === "object" && source !== null && "npm" in source;
-}
-function isFileSource(source) {
-  return typeof source === "object" && source !== null && "file" in source;
-}
-function isImportSource(source) {
-  return typeof source === "object" && source !== null && "import" in source;
-}
-function isFunctionSource(source) {
-  return typeof source === "function";
-}
-var FRONTMCP_META_KEY = "__frontmcp_meta";
-
-// libs/uipack/src/component/ui-availability.ts
-function isFrontmcpUiResolvable(...candidatePaths) {
-  try {
-    const nodeFs = __require("fs");
-    const nodePath = __require("path");
-    const ORG = "@frontmcp";
-    const PKG = "ui";
-    for (const candidate of candidatePaths) {
-      let dir = candidate;
-      while (true) {
-        const pkgJson = nodePath.join(dir, "node_modules", ORG, PKG, "package.json");
-        if (nodeFs.existsSync(pkgJson)) return true;
-        const parent = nodePath.dirname(dir);
-        if (parent === dir) break;
-        dir = parent;
-      }
-    }
-    return false;
-  } catch {
-    return false;
-  }
-}
-
-// libs/uipack/src/component/transpiler.ts
-function loadEsbuild(filename) {
-  try {
-    return __require("esbuild");
-  } catch (err) {
-    if (!isMissingEsbuild(err)) throw err;
-    const subject = filename ? `FileSource widget "${filename}"` : "A FileSource widget";
-    throw new Error(
-      `${subject} needs esbuild, which is not installed. @frontmcp/uipack loads esbuild on demand to bundle FileSource widgets (.tsx/.jsx) when the tool is called, so it must be installed where the server runs: \`npm install esbuild\` (in "dependencies", not "devDependencies"). Projects created with \`frontmcp create\` already get it through the \`frontmcp\` package.`,
-      { cause: err }
-    );
-  }
-}
-function isMissingEsbuild(err) {
-  if (!(err instanceof Error)) return false;
-  return err.code === "MODULE_NOT_FOUND" && /Cannot find module ['"]esbuild['"]/.test(err.message);
-}
-function transpileReactSource(source, filename) {
-  const esbuild = loadEsbuild(filename);
-  const loader = filename?.endsWith(".tsx") ? "tsx" : "jsx";
-  const result = esbuild.transformSync(source, {
-    loader,
-    jsx: "transform",
-    jsxFactory: "React.createElement",
-    jsxFragment: "React.Fragment",
-    format: "esm",
-    target: "es2020",
-    define: { "process.env.NODE_ENV": '"production"' }
-  });
-  return result.code;
-}
-function bundleFileSource(source, filename, resolveDir, componentName, options = {}) {
-  if (!isFrontmcpUiResolvable(resolveDir, process.cwd())) {
-    throw new Error(
-      `FileSource widget "${filename}" requires the @frontmcp/ui package, which provides the React bridge mount that's injected at bundle time. Install it (e.g. \`npm install @frontmcp/ui\` or \`yarn add @frontmcp/ui\`) and try again.`
-    );
-  }
-  const esbuild = loadEsbuild(filename);
-  const mountCode = `
-// --- Auto-generated mount ---
-import { createElement as __h } from 'react';
-import { createRoot } from 'react-dom/client';
-import { McpBridgeProvider } from '@frontmcp/ui/react';
-var __root = document.getElementById('root');
-if (__root) {
-  var __reactRoot = createRoot(__root);
-  function __hasData(v) { return v !== undefined; }
-  function __render(output) {
-    __reactRoot.render(
-      __h(McpBridgeProvider, null,
-        __h(${componentName}, { output: output !== undefined ? output : null, input: window.__mcpToolInput, loading: !__hasData(output) })
-      )
-    );
-  }
-  // Render immediately (component shows loading state until data arrives)
-  __render(undefined);
-  // 1. Try OpenAI SDK (toolOutput set synchronously or after load)
-  if (typeof window !== 'undefined') {
-    if (!window.openai) window.openai = {};
-    var __cur = window.openai.toolOutput;
-    if (__hasData(__cur)) { __render(__cur); }
-    Object.defineProperty(window.openai, 'toolOutput', {
-      get: function() { return __cur; },
-      set: function(v) { __cur = v; __render(v); },
-      configurable: true, enumerable: true
-    });
-  }
-  // 2. Try injected data globals (null: the page carries no call's data, e.g. compiled at startup)
-  if (__hasData(window.__mcpToolOutput) && window.__mcpToolOutput !== null) { __render(window.__mcpToolOutput); }
-  // 3. Listen for bridge tool-result (ext-apps / MCP Inspector)
-  var __bridge = window.FrontMcpBridge;
-  if (__bridge && typeof __bridge.onToolResult === 'function') {
-    __bridge.onToolResult(function(data) { __render(data); });
-  } else {
-    // 4. Fallback: listen for tool:result CustomEvent (standalone / MCP Inspector)
-    window.addEventListener('tool:result', function(e) {
-      var d = e.detail;
-      if (d) __render(d.structuredContent !== undefined ? d.structuredContent : d.content !== undefined ? d.content : d);
-    });
-  }
-}`;
-  const loader = {
-    ".tsx": "tsx",
-    ".jsx": "jsx"
-  };
-  const stdinLoader = filename.endsWith(".tsx") ? "tsx" : "jsx";
-  const alias = {};
-  try {
-    const nodePath = __require("path");
-    const nodeFs = __require("fs");
-    const candidates = [
-      nodePath.join(process.cwd(), "node_modules", "@frontmcp", "ui", "dist", "esm"),
-      nodePath.join(resolveDir, "node_modules", "@frontmcp", "ui", "dist", "esm")
-    ];
-    for (const uiEsmBase of candidates) {
-      if (!nodeFs.existsSync(uiEsmBase)) continue;
-      const subpaths = ["components", "react", "theme", "bridge", "runtime"];
-      for (const sub of subpaths) {
-        const mjs = nodePath.join(uiEsmBase, sub, "index.mjs");
-        if (nodeFs.existsSync(mjs)) alias[`@frontmcp/ui/${sub}`] = mjs;
-      }
-      if (Object.keys(alias).length > 0) break;
-    }
-  } catch {
-  }
-  try {
-    const result = esbuild.buildSync({
-      stdin: {
-        contents: source + "\n" + mountCode,
-        loader: stdinLoader,
-        resolveDir,
-        sourcefile: filename
-      },
-      bundle: true,
-      write: false,
-      format: "esm",
-      target: "es2020",
-      jsx: "automatic",
-      // When `bundleReact` is set (resourceMode: 'inline'), React itself is
-      // bundled — required for hosts that block external script execution
-      // such as Claude (#454). Otherwise React stays external and is loaded
-      // via the import map emitted by the renderer.
-      external: options.bundleReact ? [] : ["react", "react-dom", "react/jsx-runtime", "react/jsx-dev-runtime"],
-      alias,
-      define: { "process.env.NODE_ENV": '"production"' },
-      platform: "browser",
-      treeShaking: true,
-      logLevel: "warning",
-      loader
-    });
-    return { code: result.outputFiles[0].text };
-  } catch (err) {
-    const message = err instanceof Error ? err.message : String(err);
-    throw new Error(
-      `Failed to bundle FileSource "${filename}": ${message}. If the error mentions @frontmcp/ui or @frontmcp/uipack, ensure both packages are installed in the consuming project.`,
-      { cause: err }
-    );
-  }
-}
-function extractDefaultExportName(code) {
-  let match = code.match(/export\s+default\s+(?:function|class)\s+(\w+)/);
-  if (match) return match[1];
-  match = code.match(/export\s+default\s+(\w+)\s*;/);
-  if (match) return match[1];
-  return null;
-}
-
-// libs/uipack/src/component/loader.ts
-var DEFAULT_META = {
-  mcpAware: false,
-  renderer: "auto"
-};
-function resolveUISource(source, options) {
-  if (options?.inlineReact && options?.transformOnly) {
-    throw new Error("resolveUISource: `inlineReact` and `transformOnly` are mutually exclusive \u2014 set at most one.");
-  }
-  const resolver = options?.resolver ?? createEsmShResolver();
-  if (isNpmSource(source)) {
-    return resolveNpmSource(source, resolver);
-  }
-  if (isImportSource(source)) {
-    return resolveImportSource(source);
-  }
-  if (isFileSource(source)) {
-    return resolveFileSource(source, { inlineReact: options?.inlineReact, transformOnly: options?.transformOnly });
-  }
-  if (isFunctionSource(source)) {
-    return resolveFunctionSource(source, options?.input, options?.output);
-  }
-  throw new Error("Unknown UISource type");
-}
-function resolveNpmSource(source, resolver) {
-  const specifier = source.version ? `${source.npm}@${source.version}` : source.npm;
-  const pkgName = getPackageName(source.npm);
-  const resolved = resolver.resolve(specifier);
-  const url = resolved?.value ?? `https://esm.sh/${specifier}`;
-  const peerDeps = [];
-  if (pkgName !== "react" && pkgName !== "react-dom") {
-    peerDeps.push("react", "react-dom");
-  }
-  return {
-    mode: "module",
-    url,
-    exportName: source.exportName ?? "default",
-    meta: { ...DEFAULT_META, renderer: "react" },
-    peerDependencies: peerDeps
-  };
-}
-function resolveImportSource(source) {
-  return {
-    mode: "module",
-    url: source.import,
-    exportName: source.exportName ?? "default",
-    meta: { ...DEFAULT_META },
-    peerDependencies: []
-  };
-}
-var BUILD_DIR_SEGMENTS = /* @__PURE__ */ new Set(["dist", "build", "out"]);
-function missingWidgetError(filePath, cause) {
-  const sourceWidget = findSourceWidget(filePath);
-  const error = new Error(
-    `FileSource widget not found (ENOENT): no file at "${filePath}". The widget source is read from this path when the tool is called, so it has to exist where the compiled tool runs \u2014 a path built from \`__dirname\` or \`import.meta.url\` points into the build output once the tool is compiled. tsc does not copy \`*.widget.tsx\` / \`*.widget.jsx\` files into its output; \`frontmcp build\` does, and any other build needs a step that copies them next to the compiled tool.` + (sourceWidget ? ` The source widget exists at "${sourceWidget}" \u2014 copy it to "${filePath}", or build with \`frontmcp build\`.` : ""),
-    { cause }
-  );
-  error.code = "ENOENT";
-  error.path = filePath;
-  return error;
-}
-function findSourceWidget(filePath) {
-  const path = __require("path");
-  const fs = __require("fs");
-  const parts = filePath.split(path.sep);
-  for (let i = parts.length - 2; i >= 0; i--) {
-    if (!BUILD_DIR_SEGMENTS.has(parts[i])) continue;
-    const candidates = [[...parts.slice(0, i), "src", ...parts.slice(i + 1)]];
-    if (parts.length - i > 2) candidates.push([...parts.slice(0, i), "src", ...parts.slice(i + 2)]);
-    candidates.push([...parts.slice(0, i), ...parts.slice(i + 1)]);
-    for (const candidate of candidates) {
-      const candidatePath = candidate.join(path.sep);
-      try {
-        if (fs.existsSync(candidatePath)) return candidatePath;
-      } catch {
-      }
-    }
-    return void 0;
-  }
-  return void 0;
-}
-function resolveFileSource(source, options = {}) {
-  const path = __require("path");
-  const ext = path.extname(source.file).toLowerCase();
-  if (ext === ".tsx" || ext === ".jsx") {
-    const fs = __require("fs");
-    const wasRelative = !path.isAbsolute(source.file);
-    const filePath = wasRelative ? path.resolve(process.cwd(), source.file) : source.file;
-    let rawSource;
-    try {
-      rawSource = fs.readFileSync(filePath, "utf-8");
-    } catch (err) {
-      const isNotFound = err?.code === "ENOENT";
-      if (isNotFound && wasRelative) {
-        throw new Error(
-          `FileSource widget "${source.file}" not found at "${filePath}". Relative paths are resolved against process.cwd() ("${process.cwd()}"), not the tool file's directory. To anchor the path to the tool file, pass an absolute path \u2014 e.g. \`{ file: fileURLToPath(new URL('./widget.tsx', import.meta.url)) }\` from \`node:url\` (see issue #444).`,
-          { cause: err }
-        );
-      }
-      if (isNotFound) throw missingWidgetError(filePath, err);
-      throw err;
-    }
-    const componentName = source.exportName || extractDefaultExportName(rawSource) || "Component";
-    if (options.transformOnly === true) {
-      const code = transpileReactSource(rawSource, path.basename(filePath));
-      const parsed2 = parseImports(code);
-      return {
-        mode: "module",
-        code,
-        imports: [...new Set(parsed2.externalImports.map((i) => i.specifier))],
-        exportName: componentName,
-        meta: { mcpAware: true, renderer: "react" },
-        peerDependencies: source.peerDependencies || ["react", "react-dom"],
-        bundled: false
-      };
-    }
-    const bundled = bundleFileSource(rawSource, source.file, path.dirname(filePath), componentName, {
-      bundleReact: options.inlineReact === true
-    });
-    const parsed = parseImports(bundled.code);
-    return {
-      mode: "module",
-      code: bundled.code,
-      imports: [...new Set(parsed.externalImports.map((i) => i.specifier))],
-      exportName: componentName,
-      meta: { mcpAware: true, renderer: "react" },
-      peerDependencies: source.peerDependencies || ["react", "react-dom"],
-      bundled: true
-    };
-  }
-  if (source.inline) {
-    return {
-      mode: "inline",
-      html: `<!-- File source: ${source.file} (inline mode - content to be resolved at build time) -->`,
-      exportName: "default",
-      meta: { ...DEFAULT_META, renderer: "html" },
-      peerDependencies: []
-    };
-  }
-  return {
-    mode: "module",
-    url: source.file,
-    exportName: "default",
-    meta: { ...DEFAULT_META },
-    peerDependencies: []
-  };
-}
-function resolveFunctionSource(source, input, output) {
-  const html2 = source(input, output);
-  return {
-    mode: "inline",
-    html: html2,
-    exportName: "default",
-    meta: { mcpAware: false, renderer: "html" },
-    peerDependencies: []
-  };
-}
-function generateMountScript(resolved, propsMapping) {
-  if (resolved.mode !== "module" || !resolved.url) {
-    return "";
-  }
-  const componentImport = resolved.exportName === "default" ? `import Component from '${resolved.url}';` : `import { ${resolved.exportName} as Component } from '${resolved.url}';`;
-  if (resolved.meta.mcpAware) {
-    return `${componentImport}
-import React from 'react';
-import { createRoot } from 'react-dom/client';
-createRoot(document.getElementById('root'))
-  .render(React.createElement(Component));`;
-  }
-  const propsCode = propsMapping ? generateMappedPropsCode(propsMapping) : "window.__mcpToolOutput";
-  return `${componentImport}
-import React from 'react';
-import { createRoot } from 'react-dom/client';
-const output = window.__mcpToolOutput || {};
-const props = ${propsCode};
-createRoot(document.getElementById('root'))
-  .render(React.createElement(Component, props));`;
-}
-function generateMappedPropsCode(mapping) {
-  const entries = Object.entries(mapping).map(([prop, path]) => {
-    const accessPath = path.split(".").map((part) => `[${safeJsonForScript(part)}]`).join("");
-    return `${safeJsonForScript(prop)}: output${accessPath}`;
-  }).join(", ");
-  return `({ ${entries} })`;
-}
-
-// libs/uipack/src/component/renderer.ts
-var DEFAULT_WIDGET_MOUNT = {
-  moduleSpecifier: "@frontmcp/ui/react",
-  wrapperImportName: "McpBridgeProvider"
-};
-function renderComponent(config, shellConfig) {
-  const resolver = shellConfig.resolver ?? createEsmShResolver();
-  const resolved = resolveUISource(config.source, {
-    resolver,
-    input: shellConfig.input,
-    output: shellConfig.output,
-    inlineReact: config.inlineReact === true,
-    transformOnly: config.transformOnly === true
-  });
-  const mergedShellConfig = {
-    ...shellConfig,
-    withShell: config.withShell ?? shellConfig.withShell,
-    includeBridge: config.includeBridge ?? shellConfig.includeBridge,
-    customShell: config.customShell ?? shellConfig.customShell
-  };
-  if (resolved.mode === "inline") {
-    return buildShell(resolved.html ?? "", mergedShellConfig);
-  }
-  const content = buildModuleContent(resolved, resolver, config.props, shellConfig.mount);
-  return buildShell(content, mergedShellConfig);
-}
-function buildModuleContent(resolved, resolver, propsMapping, mount = DEFAULT_WIDGET_MOUNT) {
-  const parts = [];
-  if (resolved.code && resolved.bundled) {
-    const importEntries = {};
-    for (const spec of resolved.imports || []) {
-      const depResolved = resolver.resolve(spec);
-      if (depResolved) {
-        importEntries[spec] = depResolved;
-      }
-    }
-    if (Object.keys(importEntries).length > 0) {
-      const importMap = createImportMapFromResolved(importEntries);
-      parts.push(generateImportMapScriptTag(importMap));
-    }
-    parts.push('<div id="root"></div>');
-    parts.push(`<script type="module">
-${resolved.code}
-</script>`);
-  } else if (resolved.code) {
-    const importEntries = {};
-    const allSpecifiers = /* @__PURE__ */ new Set([
-      ...resolved.imports || [],
-      "react-dom/client",
-      // needed by mount script
-      mount.moduleSpecifier,
-      // mounter/provider package (e.g. @frontmcp/ui/react)
-      // React subpath entries needed by esm.sh externalized modules:
-      "react/jsx-runtime",
-      "react/jsx-dev-runtime"
-    ]);
-    if (mount === DEFAULT_WIDGET_MOUNT) {
-      allSpecifiers.add("react-dom/server");
-      allSpecifiers.add("react-dom/static");
-    }
-    const coreDeps = /* @__PURE__ */ new Set([
-      "react",
-      "react-dom",
-      "react-dom/client",
-      "react/jsx-runtime",
-      "react/jsx-dev-runtime",
-      "react-dom/server",
-      "react-dom/static"
-    ]);
-    for (const spec of allSpecifiers) {
-      const depResolved = resolver.resolve(spec);
-      if (depResolved) {
-        if (!coreDeps.has(spec) && depResolved.value?.includes("esm.sh")) {
-          importEntries[spec] = {
-            ...depResolved,
-            value: addExternalParam(depResolved.value, ["react", "react-dom"])
-          };
-        } else {
-          importEntries[spec] = depResolved;
-        }
-      }
-    }
-    if (importEntries["react-dom"] && !importEntries["react-dom/client"]) {
-      const rdc = resolver.resolve("react-dom/client");
-      if (rdc) importEntries["react-dom/client"] = rdc;
-    }
-    if (Object.keys(importEntries).length > 0) {
-      const importMap = createImportMapFromResolved(importEntries);
-      parts.push(generateImportMapScriptTag(importMap));
-    }
-    const mountNodeId = mount.mountNodeId ?? "root";
-    parts.push(`<div id="${mountNodeId}">${mount.mountNodeInnerHtml ?? ""}</div>`);
-    const mountCode = generateInlineMountCode(resolved.exportName, mount);
-    parts.push(`<script type="module">
-${resolved.code}
-${mountCode}
-</script>`);
-  } else {
-    const importEntries = {};
-    for (const dep of resolved.peerDependencies) {
-      const depResolved = resolver.resolve(dep);
-      if (depResolved) {
-        importEntries[dep] = depResolved;
-      }
-    }
-    if (importEntries["react-dom"]) {
-      const reactDomClient = resolver.resolve("react-dom/client");
-      if (reactDomClient) {
-        importEntries["react-dom/client"] = reactDomClient;
-      }
-    }
-    if (Object.keys(importEntries).length > 0) {
-      const importMap = createImportMapFromResolved(importEntries);
-      parts.push(generateImportMapScriptTag(importMap));
-    }
-    parts.push('<div id="root"></div>');
-    const mountScript = generateMountScript(resolved, propsMapping);
-    if (mountScript) {
-      parts.push(`<script type="module">
-${mountScript}
-</script>`);
-    }
-  }
-  return parts.join("\n");
-}
-function addExternalParam(url, externals) {
-  const sep = url.includes("?") ? "&" : "?";
-  return `${url}${sep}external=${externals.join(",")}`;
-}
-function generateInlineMountCode(componentName, mount) {
-  if (mount.generate) {
-    return mount.generate(componentName);
-  }
-  const wrapperName = mount.wrapperImportName ?? "McpBridgeProvider";
-  const wrapperAlias = `__${wrapperName}`;
-  const mountNodeId = mount.mountNodeId ?? "root";
-  return `
-// --- Mount ---
-import { createRoot as __createRoot } from 'react-dom/client';
-import { ${wrapperName} as ${wrapperAlias} } from '${mount.moduleSpecifier}';
-const __root = document.getElementById('${mountNodeId}');
-if (__root) {
-  __createRoot(__root).render(
-    React.createElement(${wrapperAlias}, null,
-      React.createElement(${componentName})
-    )
-  );
-}`;
-}
-
-// libs/uipack/src/adapters/constants.ts
-var MCP_APPS_MIME_TYPE = "text/html;profile=mcp-app";
-var MCP_APPS_EXTENSION_ID = "io.modelcontextprotocol/ui";
-
-// libs/uipack/src/adapters/serving-mode.ts
-function resolveServingMode(options) {
-  const { configuredMode, platformType } = options;
-  if (platformType === "gemini") {
-    return {
-      mode: configuredMode,
-      supportsUI: false,
-      effectiveMode: null,
-      useStructuredContent: false,
-      reason: "Gemini does not support MCP Apps UI"
-    };
-  }
-  const effectiveMode = configuredMode === "auto" ? "inline" : configuredMode;
-  if (effectiveMode === "hybrid") {
-    const hybridCapable = platformType === "openai" || platformType === "ext-apps" || platformType === "cursor";
-    if (!hybridCapable) {
-      return {
-        mode: configuredMode,
-        supportsUI: false,
-        effectiveMode: null,
-        useStructuredContent: false,
-        reason: `Platform ${platformType} does not support hybrid serving mode`
-      };
-    }
-  }
-  const useStructuredContent = platformType === "openai" || platformType === "ext-apps" || platformType === "generic-mcp" || platformType === "unknown";
-  return {
-    mode: configuredMode,
-    supportsUI: true,
-    effectiveMode,
-    useStructuredContent,
-    reason: `Platform ${platformType} supports UI, mode: ${effectiveMode}`
-  };
-}
-
-// libs/uipack/src/adapters/response-builder.ts
-function buildToolResponseContent(options) {
-  const { rawOutput, htmlContent, servingMode, useStructuredContent, platformType } = options;
-  const textSummary = typeof rawOutput === "string" ? rawOutput : rawOutput !== null && rawOutput !== void 0 ? JSON.stringify(rawOutput) : "";
-  const result = {
-    content: [{ type: "text", text: textSummary }]
-  };
-  if (useStructuredContent && rawOutput !== null && rawOutput !== void 0) {
-    const structured = typeof rawOutput === "object" && !Array.isArray(rawOutput) ? rawOutput : { value: rawOutput };
-    result.structuredContent = structured;
-  }
-  if (htmlContent && servingMode === "inline") {
-    const htmlKey = "ui/html";
-    result._meta = {
-      [htmlKey]: htmlContent
-    };
-    result.format = "html";
-  }
-  return result;
-}
-
-// libs/uipack/src/adapters/render-failure.ts
-function isUIRenderFailure(result) {
-  if (typeof result !== "object" || result === null) {
-    return false;
-  }
-  const rec = result;
-  return typeof rec["reason"] === "string" && !("meta" in rec);
-}
-
-// libs/uipack/src/adapters/content-detector.ts
-var CHART_TYPES = /* @__PURE__ */ new Set(["bar", "line", "pie", "area", "scatter", "doughnut", "radar", "polarArea", "bubble"]);
-var MERMAID_PREFIXES = [
-  "flowchart",
-  "graph",
-  "sequenceDiagram",
-  "classDiagram",
-  "stateDiagram",
-  "erDiagram",
-  "gantt",
-  "pie",
-  "gitGraph",
-  "journey",
-  "mindmap",
-  "timeline",
-  "quadrantChart",
-  "sankey",
-  "xychart"
-];
-var PDF_MAGIC = "JVBERi";
-var BASE64_PATTERN = /^[A-Za-z0-9+/=\r\n]+$/;
-function detectContentType(value) {
-  if (value === null || value === void 0) {
-    return "text";
-  }
-  if (typeof value === "object" && !Array.isArray(value)) {
-    const obj = value;
-    if (typeof obj["type"] === "string" && CHART_TYPES.has(obj["type"])) {
-      return "chart";
-    }
-    return "json";
-  }
-  if (typeof value === "string") {
-    const trimmed = value.trimStart();
-    if (trimmed.startsWith(PDF_MAGIC)) {
-      return BASE64_PATTERN.test(trimmed.trimEnd()) ? "pdf" : "text";
-    }
-    for (const prefix of MERMAID_PREFIXES) {
-      if (trimmed.startsWith(prefix)) {
-        return "mermaid";
-      }
-    }
-    if (trimmed.includes("<") && trimmed.includes(">")) {
-      return "html";
-    }
-    return "text";
-  }
-  return "text";
-}
-
-// libs/uipack/src/adapters/content-renderers.ts
-var CHART_JS_CDN = "https://esm.sh/chart.js@4/auto";
-var MERMAID_CDN = "https://esm.sh/mermaid@11/dist/mermaid.esm.min.mjs";
-function buildChartHtml(chartJson) {
-  const chartData = safeJsonForScript(chartJson);
-  const content = `
-<canvas id="chart" style="max-width:100%;max-height:80vh;"></canvas>
-<script type="module">
-import Chart from '${CHART_JS_CDN}';
-const ctx = document.getElementById('chart').getContext('2d');
-new Chart(ctx, ${chartData});
-</script>`;
-  const result = buildShell(content, {
-    toolName: "chart",
-    csp: {
-      resourceDomains: ["https://esm.sh"],
-      connectDomains: ["https://esm.sh"]
-    },
-    includeBridge: false
-  });
-  return result.html;
-}
-function buildMermaidHtml(mermaidCode) {
-  const escaped = escapeHtml(mermaidCode);
-  const content = `
-<pre class="mermaid">${escaped}</pre>
-<script type="module">
-import mermaid from '${MERMAID_CDN}';
-mermaid.initialize({ startOnLoad: true, theme: 'default' });
-</script>`;
-  const result = buildShell(content, {
-    toolName: "mermaid",
-    csp: {
-      resourceDomains: ["https://esm.sh"],
-      connectDomains: ["https://esm.sh"]
-    },
-    includeBridge: false
-  });
-  return result.html;
-}
-function buildPdfHtml(base64) {
-  const content = `
-<div id="pdf-container" style="width:100%;overflow:auto;text-align:center;"></div>
-<script type="module">
-import * as pdfjsLib from 'https://esm.sh/pdfjs-dist@4/build/pdf.min.mjs';
-pdfjsLib.GlobalWorkerOptions.workerSrc = 'https://esm.sh/pdfjs-dist@4/build/pdf.worker.min.mjs';
-
-const base64 = ${safeJsonForScript(base64)};
-const binaryStr = atob(base64);
-const bytes = new Uint8Array(binaryStr.length);
-for (let i = 0; i < binaryStr.length; i++) bytes[i] = binaryStr.charCodeAt(i);
-
-const pdf = await pdfjsLib.getDocument({ data: bytes }).promise;
-const container = document.getElementById('pdf-container');
-for (let i = 1; i <= pdf.numPages; i++) {
-  const page = await pdf.getPage(i);
-  const viewport = page.getViewport({ scale: 1.5 });
-  const canvas = document.createElement('canvas');
-  canvas.width = viewport.width;
-  canvas.height = viewport.height;
-  canvas.style.marginBottom = '8px';
-  container.appendChild(canvas);
-  await page.render({ canvasContext: canvas.getContext('2d'), viewport }).promise;
-}
-</script>`;
-  const result = buildShell(content, {
-    toolName: "pdf",
-    csp: {
-      resourceDomains: ["https://esm.sh"],
-      connectDomains: ["https://esm.sh"]
-    },
-    includeBridge: false
-  });
-  return result.html;
-}
-function wrapDetectedContent(value) {
-  const contentType = detectContentType(value);
-  switch (contentType) {
-    case "chart":
-      return buildChartHtml(value);
-    case "mermaid":
-      return buildMermaidHtml(value);
-    case "pdf":
-      return buildPdfHtml(value);
-    case "html":
-      return void 0;
-    default:
-      return void 0;
-  }
-}
-
-// libs/uipack/src/adapters/markdown.ts
-var SAFE_HREF = /^(https?:|mailto:|\/|#)/i;
-function emphasis(text) {
-  return text.replace(/\*\*([^*]+)\*\*/g, "<strong>$1</strong>").replace(/\*([^*]+)\*/g, "<em>$1</em>");
-}
-function inline(text) {
-  const stash = [];
-  const hold = (html2) => `\uE000${stash.push(html2) - 1}\uE000`;
-  let out = escapeHtml(text.replace(/\uE000/g, "")).replace(
-    /`([^`]+)`/g,
-    (_m, code) => hold(`<code>${code}</code>`)
-  );
-  out = out.replace(
-    /\[([^\]]+)\]\(([^)\s]+)\)/g,
-    (_m, label, href) => SAFE_HREF.test(href) ? hold(`<a href="${href}" rel="noopener noreferrer">${emphasis(label)}</a>`) : label
-  );
-  out = emphasis(out);
-  for (let i = 0; i < 2; i++) out = out.replace(/\uE000(\d+)\uE000/g, (_m, n) => stash[Number(n)]);
-  return out;
-}
-function markdownToHtml(source) {
-  const lines = source.replace(/\r\n?/g, "\n").split("\n");
-  const blocks = [];
-  let paragraph = [];
-  let list;
-  const flushParagraph = () => {
-    if (paragraph.length > 0) blocks.push(`<p>${inline(paragraph.join(" "))}</p>`);
-    paragraph = [];
-  };
-  const flushList = () => {
-    if (list)
-      blocks.push(`<${list.tag}>${list.items.map((item) => `<li>${inline(item)}</li>`).join("")}</${list.tag}>`);
-    list = void 0;
-  };
-  for (let i = 0; i < lines.length; i++) {
-    const line = lines[i];
-    const fence = /^\s*(`{3,})/.exec(line);
-    if (fence) {
-      flushParagraph();
-      flushList();
-      const fenceLength = fence[1].length;
-      const isClosing = (l) => {
-        const m = /^\s*(`{3,})\s*$/.exec(l);
-        return m !== null && m[1].length >= fenceLength;
-      };
-      const code = [];
-      for (i++; i < lines.length && !isClosing(lines[i]); i++) code.push(lines[i]);
-      blocks.push(`<pre><code>${escapeHtml(code.join("\n"))}
-</code></pre>`);
-      continue;
-    }
-    const heading = /^(#{1,6})\s+(.*)$/.exec(line);
-    if (heading) {
-      flushParagraph();
-      flushList();
-      blocks.push(`<h${heading[1].length}>${inline(heading[2].trim())}</h${heading[1].length}>`);
-      continue;
-    }
-    const item = /^\s*([-*+]|\d+\.)\s+(.*)$/.exec(line);
-    if (item) {
-      flushParagraph();
-      const tag = /\d/.test(item[1]) ? "ol" : "ul";
-      if (list && list.tag !== tag) flushList();
-      list ??= { tag, items: [] };
-      list.items.push(item[2]);
-      continue;
-    }
-    if (line.trim() === "") {
-      flushParagraph();
-      flushList();
-      continue;
-    }
-    flushList();
-    paragraph.push(line.trim());
-  }
-  flushParagraph();
-  flushList();
-  return blocks.join("\n");
-}
-
-// libs/uipack/src/adapters/type-detector.ts
-function detectUIType(template) {
-  if (template === null || template === void 0) {
-    return "auto";
-  }
-  if (typeof template === "object" && template !== null && "file" in template) {
-    const file = template.file;
-    if (/\.(tsx|jsx)$/i.test(file)) return "react";
-  }
-  if (typeof template === "function") {
-    const proto = template.prototype;
-    if (proto && typeof proto.render === "function") {
-      return "react";
-    }
-    const asRecord = template;
-    if (asRecord["$$typeof"] !== void 0) {
-      return "react";
-    }
-    if (template.name && /^[A-Z]/.test(template.name)) {
-      return "react";
-    }
-    return "html";
-  }
-  if (typeof template === "string") {
-    if (template.includes("<") && template.includes(">")) {
-      return "html";
-    }
-    return "markdown";
-  }
-  return "auto";
-}
-
-// libs/uipack/src/adapters/template-renderer.ts
-function buildCspConfig(resolver, extra) {
-  const cspResourceDomains = ["https://esm.sh"];
-  const cspConnectDomains = ["https://esm.sh"];
-  for (const domain of extra?.resourceDomains ?? []) {
-    if (!cspResourceDomains.includes(domain)) cspResourceDomains.push(domain);
-  }
-  for (const domain of extra?.connectDomains ?? []) {
-    if (!cspConnectDomains.includes(domain)) cspConnectDomains.push(domain);
-  }
-  if (resolver && "overrides" in resolver) {
-    const overrides = resolver.overrides;
-    if (overrides) {
-      for (const url of Object.values(overrides)) {
-        try {
-          const origin = new URL(url).origin;
-          if (!cspResourceDomains.includes(origin)) cspResourceDomains.push(origin);
-          if (!cspConnectDomains.includes(origin)) cspConnectDomains.push(origin);
-        } catch {
-        }
-      }
-    }
-  }
-  return { resourceDomains: cspResourceDomains, connectDomains: cspConnectDomains };
-}
-var STRING_RESULT_DOCS = "https://frontmcp.dev/learn/your-first-widget";
-var noticedStringResultTools = /* @__PURE__ */ new Set();
-function noticeStringResult(toolName, logger) {
-  if (noticedStringResultTools.has(toolName)) return;
-  noticedStringResultTools.add(toolName);
-  logger.warn(
-    `[frontmcp] The UI template of tool "${toolName}" returned a plain string containing markup. Since 1.9.2, FrontMCP HTML-escapes plain string results by default, so it is shown as text. Build the markup with ctx.helpers.html\`\u2026\` (interpolated values are escaped) or wrap safe markup with ctx.helpers.trustedHtml(). Set ui.escapeStringResults: false to render plain strings as markup, or true to silence this notice. See ${STRING_RESULT_DOCS}`
-  );
-}
-function renderUnwrappedResult(rawResult, options) {
-  if (isTrustedHtml(rawResult)) {
-    return String(rawResult);
-  }
-  if (typeof rawResult !== "string") {
-    return `<pre>${escapeHtml(JSON.stringify(rawResult, null, 2))}</pre>`;
-  }
-  const looksLikeMarkup = detectContentType(rawResult) === "html";
-  if (looksLikeMarkup && options.escapeStringResults === false) {
-    return rawResult;
-  }
-  if (looksLikeMarkup && options.escapeStringResults === void 0) {
-    noticeStringResult(options.toolName, options.logger ?? console);
-  }
-  return escapeHtml(rawResult);
-}
-var warnedComponentReferences = /* @__PURE__ */ new WeakMap();
-function warnComponentReference(template, toolName, logger) {
-  const warned = warnedComponentReferences.get(template) ?? /* @__PURE__ */ new Set();
-  if (warned.has(toolName)) return;
-  warned.add(toolName);
-  warnedComponentReferences.set(template, warned);
-  logger.warn(
-    `[FrontMCP] Tool "${toolName}": \`ui.template\` is a React component reference, which cannot be bundled (there is no source file to compile), so the widget would render an empty page. Use \`template: { file: './widget.tsx' }\` instead.`
-  );
-}
-var COMPILED_JSX_PATTERN = /\b(?:React\.createElement|_?jsx(?:s|DEV)?)\)?\s*\(/;
-function isComponentReference(template) {
-  if (isReactTypedObject(template)) return true;
-  if (typeof template !== "function" || detectUIType(template) !== "react") return false;
-  return isDefinitelyReactComponent(template) || COMPILED_JSX_PATTERN.test(Function.prototype.toString.call(template));
-}
-function warnIfComponentReference(toolName, template, logger = console) {
-  if (!isComponentReference(template)) return false;
-  warnComponentReference(template, toolName, logger);
-  return true;
-}
-function isReactTypedObject(value) {
-  return typeof value === "object" && value !== null && "$$typeof" in value;
-}
-function isDefinitelyReactComponent(template) {
-  if (typeof template !== "function") return false;
-  const proto = template.prototype;
-  return typeof proto?.render === "function" || template["$$typeof"] !== void 0;
-}
-function renderToolTemplate(options) {
-  const { toolName, input, output, template, resolver, platformType, sizing } = options;
-  const uiType = detectUIType(template);
-  const resourceMode = options.resourceMode ?? (platformType === "claude" ? "inline" : "cdn");
-  const shellConfig = {
-    toolName,
-    input,
-    output,
-    includeBridge: true,
-    resolver,
-    sizing,
-    displayMode: options.displayMode,
-    csp: options.csp ? buildCspConfig(resolver, options.csp) : void 0
-  };
-  let html2;
-  let hash = "";
-  let size = 0;
-  if (typeof template === "object" && template !== null && "file" in template) {
-    const result = renderComponent(
-      { source: template, inlineReact: resourceMode === "inline" },
-      { ...shellConfig, csp: buildCspConfig(resolver, options.csp) }
-    );
-    html2 = result.html;
-    hash = result.hash;
-    size = result.size;
-  } else if (typeof template === "function") {
-    const helpers = createTemplateHelpers();
-    const ctx = { input: input ?? {}, output: output ?? {}, helpers };
-    let rawResult;
-    let isHtmlBuilder = uiType !== "react" || !isDefinitelyReactComponent(template);
-    if (isHtmlBuilder) {
-      try {
-        rawResult = template(ctx);
-        isHtmlBuilder = !isReactTypedObject(rawResult);
-      } catch (error) {
-        if (uiType !== "react") throw error;
-        isHtmlBuilder = false;
-      }
-    }
-    if (!isHtmlBuilder) {
-      warnComponentReference(template, toolName, options.logger ?? console);
-      const shellResult = buildShell('<div id="root"></div>', shellConfig);
-      html2 = shellResult.html;
-      hash = shellResult.hash;
-      size = shellResult.size;
-    } else {
-      const wrapped = isTrustedHtml(rawResult) ? void 0 : wrapDetectedContent(rawResult);
-      if (wrapped) {
-        html2 = wrapped;
-      } else {
-        const shellResult = buildShell(renderUnwrappedResult(rawResult, options), shellConfig);
-        html2 = shellResult.html;
-        hash = shellResult.hash;
-        size = shellResult.size;
-      }
-    }
-  } else if (typeof template === "string") {
-    const shellResult = buildShell(uiType === "markdown" ? markdownToHtml(template) : template, shellConfig);
-    html2 = shellResult.html;
-    hash = shellResult.hash;
-    size = shellResult.size;
-  } else {
-    if (isReactTypedObject(template)) warnComponentReference(template, toolName, options.logger ?? console);
-    const shellResult = buildShell('<div id="root"></div>', shellConfig);
-    html2 = shellResult.html;
-    hash = shellResult.hash;
-    size = shellResult.size;
-  }
-  const htmlKey = "ui/html";
-  const meta = {
-    [htmlKey]: html2,
-    "ui/type": uiType,
-    "ui/mimeType": MCP_APPS_MIME_TYPE
-  };
-  if (hasSizing(sizing)) {
-    if (sizing.preferredHeight !== void 0) meta["ui/preferredHeight"] = sizing.preferredHeight;
-    if (sizing.minHeight !== void 0) meta["ui/minHeight"] = sizing.minHeight;
-    if (sizing.maxHeight !== void 0) meta["ui/maxHeight"] = sizing.maxHeight;
-    if (sizing.aspectRatio !== void 0) meta["ui/aspectRatio"] = sizing.aspectRatio;
-  }
-  return {
-    html: html2,
-    uiType,
-    hash,
-    size: size || Buffer.byteLength(html2, "utf8"),
-    meta
-  };
-}
-
-// libs/uipack/src/adapters/base-template.ts
-function createDefaultBaseTemplate(options) {
-  const { toolName } = options;
-  const safeToolName = escapeHtml(toolName);
-  const bridgeScript = `<script>${generateBridgeIIFE({ minify: true })}</script>`;
-  const content = `
-${bridgeScript}
-<div id="root">
-  <div style="font-family:system-ui,sans-serif;padding:1rem;color:#374151;">
-    <p style="color:#6b7280;font-size:0.875rem;">Waiting for tool output...</p>
-    <p style="color:#9ca3af;font-size:0.75rem;">Tool: <code>${safeToolName}</code></p>
-  </div>
-</div>
-<script>
-(function() {
-  var bridge = window.FrontMcpBridge;
-  if (bridge && typeof bridge.onToolResult === 'function') {
-    bridge.onToolResult(function(data) {
-      var root = document.getElementById('root');
-      if (root && data) {
-        // textContent, not innerHTML: the previous version escaped only < and >, leaving
-        // the rendered JSON wrong wherever the data contained an entity, and relying on a
-        // hand-rolled replace for safety (GHSA-rhr9-vhpf-jqp7).
-        var pre = document.createElement('pre');
-        pre.setAttribute('style', 'font-family:monospace;white-space:pre-wrap;padding:1rem;');
-        pre.textContent = JSON.stringify(data, null, 2);
-        root.replaceChildren(pre);
+</script>`;const result=buildShell(content,{toolName:"pdf",csp:{resourceDomains:["https://esm.sh"],connectDomains:["https://esm.sh"]},includeBridge:false});return result.html}function wrapDetectedContent(value){const contentType=detectContentType(value);switch(contentType){case"chart":return buildChartHtml(value);case"mermaid":return buildMermaidHtml(value);case"pdf":return buildPdfHtml(value);case"html":return void 0;default:return void 0}}var SAFE_HREF=/^(https?:|mailto:|\/|#)/i;function emphasis(text){return text.replace(/\*\*([^*]+)\*\*/g,"<strong>$1</strong>").replace(/\*([^*]+)\*/g,"<em>$1</em>")}function inline(text){const stash=[];const hold=html2=>`\uE000${stash.push(html2)-1}\uE000`;let out=escapeHtml(text.replace(/\uE000/g,"")).replace(/`([^`]+)`/g,(_m,code)=>hold(`<code>${code}</code>`));out=out.replace(/\[([^\]]+)\]\(([^)\s]+)\)/g,(_m,label,href)=>SAFE_HREF.test(href)?hold(`<a href="${href}" rel="noopener noreferrer">${emphasis(label)}</a>`):label);out=emphasis(out);for(let i=0;i<2;i++)out=out.replace(/\uE000(\d+)\uE000/g,(_m,n)=>stash[Number(n)]);return out}function markdownToHtml(source){const lines=source.replace(/\r\n?/g,"\n").split("\n");const blocks=[];let paragraph=[];let list;const flushParagraph=()=>{if(paragraph.length>0)blocks.push(`<p>${inline(paragraph.join(" "))}</p>`);paragraph=[]};const flushList=()=>{if(list)blocks.push(`<${list.tag}>${list.items.map(item=>`<li>${inline(item)}</li>`).join("")}</${list.tag}>`);list=void 0};for(let i=0;i<lines.length;i++){const line=lines[i];const fence=/^\s*(`{3,})/.exec(line);if(fence){flushParagraph();flushList();const fenceLength=fence[1].length;const isClosing=l=>{const m=/^\s*(`{3,})\s*$/.exec(l);return m!==null&&m[1].length>=fenceLength};const code=[];for(i++;i<lines.length&&!isClosing(lines[i]);i++)code.push(lines[i]);blocks.push(`<pre><code>${escapeHtml(code.join("\n"))}
+</code></pre>`);continue}const heading=/^(#{1,6})\s+(.*)$/.exec(line);if(heading){flushParagraph();flushList();blocks.push(`<h${heading[1].length}>${inline(heading[2].trim())}</h${heading[1].length}>`);continue}const item=/^\s*([-*+]|\d+\.)\s+(.*)$/.exec(line);if(item){flushParagraph();const tag=/\d/.test(item[1])?"ol":"ul";if(list&&list.tag!==tag)flushList();list??={tag,items:[]};list.items.push(item[2]);continue}if(line.trim()===""){flushParagraph();flushList();continue}flushList();paragraph.push(line.trim())}flushParagraph();flushList();return blocks.join("\n")}function detectUIType(template){if(template===null||template===void 0){return"auto"}if(typeof template==="object"&&template!==null&&"file"in template){const file=template.file;if(/\.(tsx|jsx)$/i.test(file))return"react"}if(typeof template==="function"){const proto=template.prototype;if(proto&&typeof proto.render==="function"){return"react"}const asRecord=template;if(asRecord["$$typeof"]!==void 0){return"react"}if(template.name&&/^[A-Z]/.test(template.name)){return"react"}return"html"}if(typeof template==="string"){if(template.includes("<")&&template.includes(">")){return"html"}return"markdown"}return"auto"}function buildCspConfig(resolver,extra){const cspResourceDomains=["https://esm.sh"];const cspConnectDomains=["https://esm.sh"];for(const domain of extra?.resourceDomains??[]){if(!cspResourceDomains.includes(domain))cspResourceDomains.push(domain)}for(const domain of extra?.connectDomains??[]){if(!cspConnectDomains.includes(domain))cspConnectDomains.push(domain)}if(resolver&&"overrides"in resolver){const overrides=resolver.overrides;if(overrides){for(const url of Object.values(overrides)){try{const origin=new URL(url).origin;if(!cspResourceDomains.includes(origin))cspResourceDomains.push(origin);if(!cspConnectDomains.includes(origin))cspConnectDomains.push(origin)}catch{}}}}return{resourceDomains:cspResourceDomains,connectDomains:cspConnectDomains}}var STRING_RESULT_DOCS="https://frontmcp.dev/learn/your-first-widget";var noticedStringResultTools=new Set;function noticeStringResult(toolName,logger){if(noticedStringResultTools.has(toolName))return;noticedStringResultTools.add(toolName);logger.warn(`[frontmcp] The UI template of tool "${toolName}" returned a plain string containing markup. Since 1.9.2, FrontMCP HTML-escapes plain string results by default, so it is shown as text. Build the markup with ctx.helpers.html\`\u2026\` (interpolated values are escaped) or wrap safe markup with ctx.helpers.trustedHtml(). Set ui.escapeStringResults: false to render plain strings as markup, or true to silence this notice. See ${STRING_RESULT_DOCS}`)}function renderUnwrappedResult(rawResult,options){if(isTrustedHtml(rawResult)){return String(rawResult)}if(typeof rawResult!=="string"){return`<pre>${escapeHtml(JSON.stringify(rawResult,null,2))}</pre>`}const looksLikeMarkup=detectContentType(rawResult)==="html";if(looksLikeMarkup&&options.escapeStringResults===false){return rawResult}if(looksLikeMarkup&&options.escapeStringResults===void 0){noticeStringResult(options.toolName,options.logger??console)}return escapeHtml(rawResult)}var warnedComponentReferences=new WeakMap;function warnComponentReference(template,toolName,logger){const warned=warnedComponentReferences.get(template)??new Set;if(warned.has(toolName))return;warned.add(toolName);warnedComponentReferences.set(template,warned);logger.warn(`[FrontMCP] Tool "${toolName}": \`ui.template\` is a React component reference, which cannot be bundled (there is no source file to compile), so the widget would render an empty page. Use \`template: { file: './widget.tsx' }\` instead.`)}var COMPILED_JSX_PATTERN=/\b(?:React\.createElement|_?jsx(?:s|DEV)?)\)?\s*\(/;function isComponentReference(template){if(isReactTypedObject(template))return true;if(typeof template!=="function"||detectUIType(template)!=="react")return false;return isDefinitelyReactComponent(template)||COMPILED_JSX_PATTERN.test(Function.prototype.toString.call(template))}function warnIfComponentReference(toolName,template,logger=console){if(!isComponentReference(template))return false;warnComponentReference(template,toolName,logger);return true}function isReactTypedObject(value){return typeof value==="object"&&value!==null&&"$$typeof"in value}function isDefinitelyReactComponent(template){if(typeof template!=="function")return false;const proto=template.prototype;return typeof proto?.render==="function"||template["$$typeof"]!==void 0}function renderToolTemplate(options){const{toolName,input,output,template,resolver,platformType,sizing}=options;const uiType=detectUIType(template);const resourceMode=options.resourceMode??(platformType==="claude"?"inline":"cdn");const shellConfig={toolName,input,output,includeBridge:true,resolver,sizing,displayMode:options.displayMode,csp:options.csp?buildCspConfig(resolver,options.csp):void 0};let html2;let hash="";let size=0;if(typeof template==="object"&&template!==null&&"file"in template){const result=renderComponent({source:template,inlineReact:resourceMode==="inline"},{...shellConfig,csp:buildCspConfig(resolver,options.csp)});html2=result.html;hash=result.hash;size=result.size}else if(typeof template==="function"){const helpers=createTemplateHelpers();const ctx={input:input??{},output:output??{},helpers};let rawResult;let isHtmlBuilder=uiType!=="react"||!isDefinitelyReactComponent(template);if(isHtmlBuilder){try{rawResult=template(ctx);isHtmlBuilder=!isReactTypedObject(rawResult)}catch(error){if(uiType!=="react")throw error;isHtmlBuilder=false}}if(!isHtmlBuilder){warnComponentReference(template,toolName,options.logger??console);const shellResult=buildShell('<div id="root"></div>',shellConfig);html2=shellResult.html;hash=shellResult.hash;size=shellResult.size}else{const wrapped=isTrustedHtml(rawResult)?void 0:wrapDetectedContent(rawResult);if(wrapped){html2=wrapped}else{const shellResult=buildShell(renderUnwrappedResult(rawResult,options),shellConfig);html2=shellResult.html;hash=shellResult.hash;size=shellResult.size}}}else if(typeof template==="string"){const shellResult=buildShell(uiType==="markdown"?markdownToHtml(template):template,shellConfig);html2=shellResult.html;hash=shellResult.hash;size=shellResult.size}else{if(isReactTypedObject(template))warnComponentReference(template,toolName,options.logger??console);const shellResult=buildShell('<div id="root"></div>',shellConfig);html2=shellResult.html;hash=shellResult.hash;size=shellResult.size}const htmlKey="ui/html";const meta={[htmlKey]:html2,"ui/type":uiType,"ui/mimeType":MCP_APPS_MIME_TYPE};if(hasSizing(sizing)){if(sizing.preferredHeight!==void 0)meta["ui/preferredHeight"]=sizing.preferredHeight;if(sizing.minHeight!==void 0)meta["ui/minHeight"]=sizing.minHeight;if(sizing.maxHeight!==void 0)meta["ui/maxHeight"]=sizing.maxHeight;if(sizing.aspectRatio!==void 0)meta["ui/aspectRatio"]=sizing.aspectRatio}return{html:html2,uiType,hash,size:size||Buffer.byteLength(html2,"utf8"),meta}}function createDefaultBaseTemplate(options){const{toolName}=options;const safeToolName=escapeHtml(toolName);const bridgeScript=`<script>${generateBridgeIIFE({minify:true})}</script>`;const content=`
+${bridgeScript}
+<div id="root">
+  <div style="font-family:system-ui,sans-serif;padding:1rem;color:#374151;">
+    <p style="color:#6b7280;font-size:0.875rem;">Waiting for tool output...</p>
+    <p style="color:#9ca3af;font-size:0.75rem;">Tool: <code>${safeToolName}</code></p>
+  </div>
+</div>
+<script>
+(function() {
+  var bridge = window.FrontMcpBridge;
+  if (bridge && typeof bridge.onToolResult === 'function') {
+    bridge.onToolResult(function(data) {
+      var root = document.getElementById('root');
+      if (root && data) {
+        // textContent, not innerHTML: the previous version escaped only < and >, leaving
+        // the rendered JSON wrong wherever the data contained an entity, and relying on a
+        // hand-rolled replace for safety (GHSA-rhr9-vhpf-jqp7).
+        var pre = document.createElement('pre');
+        pre.setAttribute('style', 'font-family:monospace;white-space:pre-wrap;padding:1rem;');
+        pre.textContent = JSON.stringify(data, null, 2);
+        root.replaceChildren(pre);
       }
     });
   }
 })();
-</script>`;
-  const result = buildShell(content, {
-    toolName,
-    includeBridge: false,
-    // Bridge already included via inline script above
-    title: `Widget: ${toolName}`
-  });
-  return result.html;
-}
-
-// libs/uipack/src/adapters/cdn-info.ts
-var ESM_SH_BASE = "https://esm.sh";
-var REACT_DEPS = [
-  { name: "react", url: `${ESM_SH_BASE}/react@18` },
-  { name: "react-dom", url: `${ESM_SH_BASE}/react-dom@18` }
-];
-function buildCDNInfoForUIType(uiType) {
-  const deps = [];
-  switch (uiType) {
-    case "react":
-      deps.push(...REACT_DEPS);
-      break;
-    case "mdx":
-      deps.push(...REACT_DEPS);
-      deps.push({ name: "marked", url: `${ESM_SH_BASE}/marked@latest` });
-      break;
-    case "markdown":
-      deps.push({ name: "marked", url: `${ESM_SH_BASE}/marked@latest` });
-      break;
-    case "auto":
-      deps.push(...REACT_DEPS);
-      deps.push({ name: "marked", url: `${ESM_SH_BASE}/marked@latest` });
-      break;
-    case "html":
-    default:
-      break;
-  }
-  return {
-    base: ESM_SH_BASE,
-    dependencies: deps
-  };
-}
-export {
-  BRIDGE_SCRIPT_TAGS,
-  DEFAULT_CDN_DOMAINS,
-  DEFAULT_CDN_REGISTRY,
-  DEFAULT_CSP_BY_TYPE,
-  DEFAULT_CSP_DIRECTIVES,
-  DEFAULT_RENDERER_ASSETS,
-  DEFAULT_CACHE_OPTIONS as DEFAULT_TYPE_CACHE_OPTIONS,
-  DEFAULT_TYPE_CACHE_TTL,
-  DEFAULT_TYPE_FETCHER_OPTIONS,
-  FRONTMCP_META_KEY,
-  MCP_APPS_EXTENSION_ID,
-  MCP_APPS_MIME_TYPE,
-  MemoryTypeCache,
-  OPTIONAL_PLACEHOLDERS,
-  REQUIRED_PLACEHOLDERS,
-  RESTRICTIVE_CSP_DIRECTIVES,
-  SHELL_PLACEHOLDERS,
-  SHELL_PLACEHOLDER_NAMES,
-  TYPE_CACHE_PREFIX,
-  TypeFetcher,
-  UNIVERSAL_BRIDGE_SCRIPT,
-  applyShellTemplate,
-  buildCDNInfoForUIType,
-  buildCSPDirectives,
-  buildCSPMetaTag,
-  buildChartHtml,
-  buildCustomDataInjectionScript,
-  buildDataInjectionScript,
-  buildMermaidHtml,
-  buildPdfHtml,
-  buildShell,
-  buildToolResponseContent,
-  bundleFileSource,
-  clearShellTemplateCache,
-  combineDtsContents,
-  createDefaultBaseTemplate,
-  createEsmShResolver,
-  createImportMap,
-  createImportMapFromResolved,
-  createResolverWithOverrides,
-  createTemplateHelpers,
-  createTypeFetcher,
-  detectContentType,
-  detectUIType,
-  escapeHtml,
-  escapeHtmlAttr,
-  escapeJsString,
-  escapeScriptClose,
-  extractDefaultExportName,
-  extractExternalPackages,
-  generateBridgeIIFE,
-  generateCDNScriptTags,
-  generateDependencyHTML,
-  generateImportMapScriptTag,
-  generateImportMapScriptTagMinified,
-  generateMountScript,
-  generatePlatformBundle,
-  getPackageCDNUrl,
-  getPackageFromSpecifier,
-  getPackageName,
-  getPackagePeerDependencies,
-  getRegisteredPackages,
-  getSubpathFromSpecifier,
-  globalTypeCache,
-  html,
-  isBundlingMode,
-  isDisplayMode,
-  isFileSource,
-  isFunctionSource,
-  isImportSource,
-  isInlineShellSource,
-  isNpmShellSource,
-  isNpmSource,
-  isOutputMode,
-  isPackageRegistered,
-  isRelativeImport,
-  isResourceMode,
-  isTrustedHtml,
-  isUIRenderFailure,
-  isUIType,
-  isUrlShellSource,
-  lookupPackage,
-  mergeImportMaps,
-  mergeRegistries,
-  parseDtsImports,
-  parseImportStatement,
-  parseImports,
-  renderComponent,
-  renderToolTemplate,
-  resolveServingMode,
-  resolveShellTemplate,
-  resolveUISource,
-  rewriteImports,
-  safeJsonForScript,
-  safeStringify,
-  sanitizeCSPDomains,
-  transpileReactSource,
-  trustedHtml,
-  validateCSPDomain,
-  validateImportMap,
-  validateShellTemplate,
-  warnIfComponentReference,
-  wrapDetectedContent
-};
+</script>`;const result=buildShell(content,{toolName,includeBridge:false,title:`Widget: ${toolName}`});return result.html}var ESM_SH_BASE="https://esm.sh";var REACT_DEPS=[{name:"react",url:`${ESM_SH_BASE}/react@18`},{name:"react-dom",url:`${ESM_SH_BASE}/react-dom@18`}];function buildCDNInfoForUIType(uiType){const deps=[];switch(uiType){case"react":deps.push(...REACT_DEPS);break;case"mdx":deps.push(...REACT_DEPS);deps.push({name:"marked",url:`${ESM_SH_BASE}/marked@latest`});break;case"markdown":deps.push({name:"marked",url:`${ESM_SH_BASE}/marked@latest`});break;case"auto":deps.push(...REACT_DEPS);deps.push({name:"marked",url:`${ESM_SH_BASE}/marked@latest`});break;case"html":default:break}return{base:ESM_SH_BASE,dependencies:deps}}export{BRIDGE_SCRIPT_TAGS,DEFAULT_CDN_DOMAINS,DEFAULT_CDN_REGISTRY,DEFAULT_CSP_BY_TYPE,DEFAULT_CSP_DIRECTIVES,DEFAULT_RENDERER_ASSETS,DEFAULT_CACHE_OPTIONS as DEFAULT_TYPE_CACHE_OPTIONS,DEFAULT_TYPE_CACHE_TTL,DEFAULT_TYPE_FETCHER_OPTIONS,FRONTMCP_META_KEY,MCP_APPS_EXTENSION_ID,MCP_APPS_MIME_TYPE,MemoryTypeCache,OPTIONAL_PLACEHOLDERS,REQUIRED_PLACEHOLDERS,RESTRICTIVE_CSP_DIRECTIVES,SHELL_PLACEHOLDERS,SHELL_PLACEHOLDER_NAMES,TYPE_CACHE_PREFIX,TypeFetcher,UNIVERSAL_BRIDGE_SCRIPT,applyShellTemplate,buildCDNInfoForUIType,buildCSPDirectives,buildCSPMetaTag,buildChartHtml,buildCustomDataInjectionScript,buildDataInjectionScript,buildMermaidHtml,buildPdfHtml,buildShell,buildToolResponseContent,bundleFileSource,clearShellTemplateCache,combineDtsContents,createDefaultBaseTemplate,createEsmShResolver,createImportMap,createImportMapFromResolved,createResolverWithOverrides,createTemplateHelpers,createTypeFetcher,detectContentType,detectUIType,escapeHtml,escapeHtmlAttr,escapeJsString,escapeScriptClose,extractDefaultExportName,extractExternalPackages,generateBridgeIIFE,generateCDNScriptTags,generateDependencyHTML,generateImportMapScriptTag,generateImportMapScriptTagMinified,generateMountScript,generatePlatformBundle,getPackageCDNUrl,getPackageFromSpecifier,getPackageName,getPackagePeerDependencies,getRegisteredPackages,getSubpathFromSpecifier,globalTypeCache,html,isBundlingMode,isDisplayMode,isFileSource,isFunctionSource,isImportSource,isInlineShellSource,isNpmShellSource,isNpmSource,isOutputMode,isPackageRegistered,isRelativeImport,isResourceMode,isTrustedHtml,isUIRenderFailure,isUIType,isUrlShellSource,lookupPackage,mergeImportMaps,mergeRegistries,parseDtsImports,parseImportStatement,parseImports,renderComponent,renderToolTemplate,resolveServingMode,resolveShellTemplate,resolveUISource,rewriteImports,safeJsonForScript,safeStringify,sanitizeCSPDomains,transpileReactSource,trustedHtml,validateCSPDomain,validateImportMap,validateShellTemplate,warnIfComponentReference,wrapDetectedContent};