@guuey/mcp-apps-host 0.5.0 → 0.6.0

package/dist/index.d.ts

@@ -8,7 +8,7 @@ export { asGguiRender, asGguiRenderBootstrap, blockGguiRender, gguiRenderResourc
 export { resolveViewMount, snapshotViewMount, toolResultViewMount, type LocatorViewMount, type ResolvedViewMount, type UiResourceReader, type ViewMount, type ViewMountChannel, } from "./card-mount.js";
 export { createMcpUiResourceReader, uiResourceChannel, type CreateMcpUiResourceReaderDeps, type McpResourceReadResult, } from "./reader.js";
 export { asToolCallResult, createMcpUiActionRelay, unavailableToolCallResult, UI_ACTION_TOOLS, UI_ACTION_UNAVAILABLE_TEXT, type CreateMcpUiActionRelayDeps, type McpToolCallContent, type McpToolCallResult, type McpToolStructuredContent, type UiActionRequest, } from "./action.js";
-export { initializeResult, initialViewHostState, teardownMessage, toolCallResponse, TOOLS_CALL_METHOD, viewHostElapsed, viewHostReceive, type ViewHostBehavior, type ViewHostEffect, type ViewHostOutbound, type ViewHostPhase, type ViewHostInfo, type ViewHostState, type ViewHostTransition, type ViewRequestId, } from "./view-host-protocol.js";
+export { initializeResult, initialViewHostState, resourceReadResponse, RESOURCES_READ_METHOD, teardownMessage, toolCallResponse, TOOLS_CALL_METHOD, viewHostElapsed, viewHostReceive, type ViewHostBehavior, type ViewHostEffect, type ViewHostOutbound, type ViewHostPhase, type ViewHostInfo, type ViewHostState, type ViewHostTransition, type ViewRequestId, } from "./view-host-protocol.js";
 export { attachViewHost, viewDocumentHtml, type AttachViewHostConfig, type ViewFrameLike, type ViewHostEvents, } from "./view-host.js";
 export { attachSandboxPageDelivery, isSandboxProxyReady, SANDBOX_PROXY_READY_METHOD, SANDBOX_RESOURCE_READY_METHOD, type SandboxPageDeliveryConfig, } from "./sandbox-page.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,4BAA4B,EAC5B,kBAAkB,EAClB,oBAAoB,EACpB,SAAS,EACT,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,oBAAoB,EACpB,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,GAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,gBAAgB,GACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EACjB,KAAK,6BAA6B,EAClC,KAAK,qBAAqB,GAC3B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,yBAAyB,EACzB,eAAe,EACf,0BAA0B,EAC1B,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,aAAa,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,0BAA0B,EAC1B,6BAA6B,EAC7B,KAAK,yBAAyB,GAC/B,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,4BAA4B,EAC5B,kBAAkB,EAClB,oBAAoB,EACpB,SAAS,EACT,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,oBAAoB,EACpB,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,GAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,gBAAgB,GACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EACjB,KAAK,6BAA6B,EAClC,KAAK,qBAAqB,GAC3B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,yBAAyB,EACzB,eAAe,EACf,0BAA0B,EAC1B,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,aAAa,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,0BAA0B,EAC1B,6BAA6B,EAC7B,KAAK,yBAAyB,GAC/B,MAAM,mBAAmB,CAAC"}

package/dist/index.js

@@ -8,6 +8,6 @@ export { asGguiRender, asGguiRenderBootstrap, blockGguiRender, gguiRenderResourc
 export { resolveViewMount, snapshotViewMount, toolResultViewMount, } from "./card-mount.js";
 export { createMcpUiResourceReader, uiResourceChannel, } from "./reader.js";
 export { asToolCallResult, createMcpUiActionRelay, unavailableToolCallResult, UI_ACTION_TOOLS, UI_ACTION_UNAVAILABLE_TEXT, } from "./action.js";
-export { initializeResult, initialViewHostState, teardownMessage, toolCallResponse, TOOLS_CALL_METHOD, viewHostElapsed, viewHostReceive, } from "./view-host-protocol.js";
+export { initializeResult, initialViewHostState, resourceReadResponse, RESOURCES_READ_METHOD, teardownMessage, toolCallResponse, TOOLS_CALL_METHOD, viewHostElapsed, viewHostReceive, } from "./view-host-protocol.js";
 export { attachViewHost, viewDocumentHtml, } from "./view-host.js";
 export { attachSandboxPageDelivery, isSandboxProxyReady, SANDBOX_PROXY_READY_METHOD, SANDBOX_RESOURCE_READY_METHOD, } from "./sandbox-page.js";

package/dist/react.d.ts

@@ -41,7 +41,7 @@ export type { AttachViewHostConfig, ViewFrameLike, ViewHostEvents } from "./view
 export { attachSandboxPageDelivery, isSandboxProxyReady, SANDBOX_PROXY_READY_METHOD, SANDBOX_RESOURCE_READY_METHOD, type SandboxPageDeliveryConfig, } from "./sandbox-page.js";
 export type { ViewHostPhase } from "./view-host-protocol.js";
 export type { ResolvedViewMount, ViewMount, ViewMountChannel } from "./card-mount.js";
-export interface GuueyViewProps extends Pick<AttachViewHostConfig, "hostCapabilities" | "hostInfo" | "hostContext" | "onCallTool" | "negotiationTimeoutMs"> {
+export interface GuueyViewProps extends Pick<AttachViewHostConfig, "hostCapabilities" | "hostInfo" | "hostContext" | "onCallTool" | "onReadResource" | "onSizeChanged" | "negotiationTimeoutMs"> {
     /** The resolved card to mount (see `toolResultViewMount`/`resolveViewMount`). */
     mount: ResolvedViewMount;
     /**
@@ -59,8 +59,23 @@ export interface GuueyViewProps extends Pick<AttachViewHostConfig, "hostCapabili
      * for its CSP + referrer checks to mean anything), never agent HTML.
      * The page must be a genuinely different origin; a same-origin URL is
      * refused with a labeled state, never mounted.
+     *
+     * `null` (as opposed to absent) means the two-origin mount is REQUIRED
+     * by the embedder's posture but no page is configured — the mount is
+     * refused with the same labeled state, and srcdoc is NEVER fallen back
+     * to (falling back would silently trade the caller's egress confinement
+     * for the page's CSP; the widget/Studio convergence posture).
      */
-    sandboxPageUrl?: string;
+    sandboxPageUrl?: string | null;
+    /**
+     * Apply the view's own size reports (`ui/notifications/size-changed` —
+     * spec surface) to the frame: a reported HEIGHT becomes the frame's
+     * height; width stays the container's (a transcript column owns its
+     * width). Default OFF — the primitive changes nothing for existing
+     * hosts; a caller's {@link AttachViewHostConfig.onSizeChanged} observer
+     * fires either way.
+     */
+    autoResize?: boolean;
     /**
      * Sandbox flags appended to the safe default (`allow-scripts`). Every
      * entry widens what agent-generated HTML may do — `allow-same-origin`

package/dist/react.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../src/react.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAAwC,KAAK,aAAa,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AACjG,OAAO,EAAoC,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE7F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClE,YAAY,EAAE,oBAAoB,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,0BAA0B,EAC1B,6BAA6B,EAC7B,KAAK,yBAAyB,GAC/B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,iBAAiB,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAKtF,MAAM,WAAW,cACf,SAAQ,IAAI,CACV,oBAAoB,EACpB,kBAAkB,GAAG,UAAU,GAAG,aAAa,GAAG,YAAY,GAAG,sBAAsB,CACxF;IACD,iFAAiF;IACjF,KAAK,EAAE,iBAAiB,CAAC;IACzB;;;;;;;;;;;;;;;OAeG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC;IACtC,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;IAC/C;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,SAAS,CAAC;CACpD;AA+BD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,SAAS,CAiI1D"}
+{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../src/react.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAAwC,KAAK,aAAa,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AACjG,OAAO,EAAoC,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE7F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClE,YAAY,EAAE,oBAAoB,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,0BAA0B,EAC1B,6BAA6B,EAC7B,KAAK,yBAAyB,GAC/B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,iBAAiB,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAKtF,MAAM,WAAW,cACf,SAAQ,IAAI,CACV,oBAAoB,EAClB,kBAAkB,GAClB,UAAU,GACV,aAAa,GACb,YAAY,GACZ,gBAAgB,GAChB,eAAe,GACf,sBAAsB,CACzB;IACD,iFAAiF;IACjF,KAAK,EAAE,iBAAiB,CAAC;IACzB;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;OAMG;IACH,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC;IACtC,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;IAC/C;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,SAAS,CAAC;CACpD;AA+BD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,SAAS,CA0J1D"}

package/dist/react.js

@@ -68,18 +68,23 @@ function defaultStatus(phase, channel) {
  * docblock for the sandbox and state contracts.
  */
 export function GuueyView(props) {
-    const { mount, sandboxPageUrl, dangerouslyAddSandboxFlags, allow, title, className, style, onPhaseChange, renderStatus, ...hostConfig } = props;
+    const { mount, sandboxPageUrl, autoResize, dangerouslyAddSandboxFlags, allow, title, className, style, onPhaseChange, renderStatus, ...hostConfig } = props;
     const frameRef = useRef(null);
     const [phase, setPhase] = useState("negotiating");
+    // The view's own size report, applied only under `autoResize`.
+    const [reportedHeight, setReportedHeight] = useState(undefined);
     const html = viewDocumentHtml(mount.resource);
     // Vet the sandbox page once per URL. Same-origin is REFUSED (the widget's
     // ResourceMount precedent, generalized): the whole point of the page is
     // being a different origin — same-origin would hand the relay page (and
     // through `allow-same-origin`, everything it can reach) the embedder's
-    // own origin.
+    // own origin. `null` — page mode required but unconfigured — refuses the
+    // same way: srcdoc is never a silent fallback for a confinement posture.
     const sandboxPage = useMemo(() => {
         if (sandboxPageUrl === undefined)
             return undefined;
+        if (sandboxPageUrl === null)
+            return "refused";
         let url;
         try {
             url = new URL(sandboxPageUrl);
@@ -95,13 +100,14 @@ export function GuueyView(props) {
     // The attachment is keyed to the mounted DOCUMENT, not to every render's
     // fresh callback identities — host config rides a ref so the effect's
     // dependency list is honestly just the document identity.
-    const latest = useRef({ hostConfig, onPhaseChange, dangerouslyAddSandboxFlags });
-    latest.current = { hostConfig, onPhaseChange, dangerouslyAddSandboxFlags };
+    const latest = useRef({ hostConfig, onPhaseChange, dangerouslyAddSandboxFlags, autoResize });
+    latest.current = { hostConfig, onPhaseChange, dangerouslyAddSandboxFlags, autoResize };
     useEffect(() => {
         // Keyed to the same identity the frame is (the resource uri): a new
         // document boots fresh, and the previous negotiation's phase must not
-        // paper over it.
+        // paper over it — nor must the previous document's reported size.
         setPhase("negotiating");
+        setReportedHeight(undefined);
         const frame = frameRef.current;
         if (frame === null || html === undefined)
             return;
@@ -115,6 +121,12 @@ export function GuueyView(props) {
                 setPhase(next);
                 latest.current.onPhaseChange?.(next);
             },
+            onSizeChanged: (size) => {
+                if (latest.current.autoResize === true && size.height !== undefined) {
+                    setReportedHeight(size.height);
+                }
+                latest.current.hostConfig.onSizeChanged?.(size);
+            },
         });
         if (page === undefined)
             return detachHost;
@@ -141,9 +153,14 @@ export function GuueyView(props) {
         return (_jsx("div", { className: className, style: { position: "relative", ...style }, children: _jsx("p", { role: "alert", style: { ...statusLineStyle, opacity: 1, pointerEvents: "auto" }, children: "This view could not be displayed \u2014 its resource carries no document." }) }));
     }
     if (sandboxPageUrl !== undefined && page === undefined) {
-        // A malformed or SAME-ORIGIN sandbox page is a configuration state, not
-        // a property of the card — refused, labeled, never mounted.
-        return (_jsx("div", { className: className, style: { position: "relative", ...style }, children: _jsx("p", { role: "alert", style: { ...statusLineStyle, opacity: 1, pointerEvents: "auto" }, children: "Interactive view unavailable \u2014 the sandbox page is not usable from this origin." }) }));
+        // A missing (null), malformed, or SAME-ORIGIN sandbox page is a
+        // configuration state, not a property of the card — refused, labeled,
+        // never mounted, and never silently downgraded to srcdoc. The copy
+        // names the configuration cause (an operator can act on it) without
+        // ever printing the offending URL.
+        return (_jsx("div", { className: className, style: { position: "relative", ...style }, children: _jsx("p", { role: "alert", style: { ...statusLineStyle, opacity: 1, pointerEvents: "auto" }, children: sandboxPageUrl === null
+                    ? "Interactive view unavailable — no sandbox page is configured."
+                    : "Interactive view unavailable — the sandbox page is not usable from this origin." }) }));
     }
     return (_jsxs("div", { className: className, style: { position: "relative", ...style }, children: [_jsx("iframe", { ref: frameRef, ...(page !== undefined ? { src: page.href } : { srcDoc: html }), title: title ?? DEFAULT_TITLE, 
                 // srcdoc mode: the INVARIANT — agent HTML in an opaque origin, extra
@@ -154,5 +171,14 @@ export function GuueyView(props) {
                 // and the caller's extra flags travel to THAT frame via the relay.
                 sandbox: page !== undefined
                     ? "allow-scripts allow-same-origin allow-forms"
-                    : ["allow-scripts", ...(dangerouslyAddSandboxFlags ?? [])].join(" "), allow: allow ?? "clipboard-write", style: { display: "block", width: "100%", height: "100%", border: 0 } }, `${page?.href ?? "srcdoc"}::${mount.resource.uri}`), renderStatus !== undefined ? renderStatus(phase) : defaultStatus(phase, mount.channel)] }));
+                    : ["allow-scripts", ...(dangerouslyAddSandboxFlags ?? [])].join(" "), allow: allow ?? "clipboard-write", 
+                // Under `autoResize`, the view's own height report wins over the
+                // fill-the-container default (width stays the container's — a
+                // transcript column owns its width).
+                style: {
+                    display: "block",
+                    width: "100%",
+                    height: autoResize === true && reportedHeight !== undefined ? reportedHeight : "100%",
+                    border: 0,
+                } }, `${page?.href ?? "srcdoc"}::${mount.resource.uri}`), renderStatus !== undefined ? renderStatus(phase) : defaultStatus(phase, mount.channel)] }));
 }

package/dist/view-host-protocol.d.ts

@@ -32,6 +32,7 @@
  */
 import { type McpUiHostCapabilities, type McpUiHostContext, type McpUiInitializeResult } from "@modelcontextprotocol/ext-apps";
 import type { McpToolStructuredContent } from "./action.js";
+import type { McpResourceReadResult } from "./reader.js";
 /**
  * The host identity in the initialize result — structurally the spec's
  * `Implementation` (which the ext-apps root does not re-export), narrowed
@@ -43,6 +44,15 @@ export interface ViewHostInfo {
 }
 /** The standard MCP method a view uses to reach host-proxied tools. */
 export declare const TOOLS_CALL_METHOD = "tools/call";
+/**
+ * The standard MCP method a view uses to read host-proxied resources —
+ * `ReadResourceRequest` in the spec's App→Host request union
+ * (`@modelcontextprotocol/ext-apps` `AppRequest`). A local constant, same
+ * as {@link TOOLS_CALL_METHOD}: the string is MCP-core vocabulary the
+ * ext-apps root does not re-export, and this package deliberately carries
+ * no `@modelcontextprotocol/sdk` dependency.
+ */
+export declare const RESOURCES_READ_METHOD = "resources/read";
 /** A JSON-RPC id as the wire allows it. */
 export type ViewRequestId = number | string;
 /** The messages this host posts INTO the view frame. */
@@ -105,6 +115,31 @@ export type ViewHostEffect = {
     id: ViewRequestId;
     name: string;
     arguments?: McpToolStructuredContent;
+} | {
+    /**
+     * A `resources/read` the config accepted for relaying (spec surface:
+     * `ReadResourceRequest` rides the App→Host union, and the matching
+     * advertisement is `hostCapabilities.serverResources`). The glue runs
+     * the read hook and posts {@link resourceReadResponse}. Only emitted
+     * when {@link ViewHostBehavior.resourceRelay} is true — unwired, the
+     * machine refuses in-band like every other unsupported request.
+     */
+    kind: "relay-resource-read";
+    id: ViewRequestId;
+    uri: string;
+} | {
+    /**
+     * The view reported its content size (`ui/notifications/size-changed`
+     * — spec notification, App → Host). At least one of the two fields is
+     * a finite number; a notification carrying neither is consumed
+     * silently instead. The glue forwards this to the embedder
+     * ({@link AttachViewHostConfig.onSizeChanged} in `view-host.ts`) —
+     * whether/how to resize the frame is the embedder's layout decision,
+     * never the machine's.
+     */
+    kind: "size-changed";
+    width?: number;
+    height?: number;
 };
 /**
  * The host identity/behavior the machine answers with. Everything here is
@@ -125,6 +160,8 @@ export interface ViewHostBehavior {
     hostContext: McpUiHostContext;
     /** Whether a `tools/call` relay hook is wired (see `view-host.ts`). */
     toolRelay: boolean;
+    /** Whether a `resources/read` relay hook is wired (see `view-host.ts`). */
+    resourceRelay: boolean;
 }
 /** The result of feeding one inbound frame (or the timeout) to the machine. */
 export interface ViewHostTransition {
@@ -137,6 +174,13 @@ export declare function initializeResult(behavior: ViewHostBehavior, requestedPr
 export declare function toolCallResponse(id: ViewRequestId, result: {
     [key: string]: unknown;
 }): ViewHostOutbound;
+/**
+ * Build the in-band response for a relayed `resources/read`. An entry
+ * becomes the spec's `ReadResourceResult` (`contents: [entry]`); `undefined`
+ * — a miss, a deny, or a relay failure alike — becomes the one
+ * `Resource not found` error (deny == miss, {@link RESOURCE_NOT_FOUND}).
+ */
+export declare function resourceReadResponse(id: ViewRequestId, entry: McpResourceReadResult | undefined): ViewHostOutbound;
 /**
  * The spec-mannered farewell a detaching host posts (`ui/resource-teardown`).
  * Sent WITHOUT an id — a host that is tearing the frame down cannot await a

package/dist/view-host-protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"view-host-protocol.d.ts","sourceRoot":"","sources":["../src/view-host-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,EAIL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC3B,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE5D;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAKD,uEAAuE;AACvE,eAAO,MAAM,iBAAiB,eAAe,CAAC;AAE9C,2CAA2C;AAC3C,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,CAAC;AAE5C,wDAAwD;AACxD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,aAAa,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACpC,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACpC,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,WAAW,GAAG,cAAc,CAAC;AAEzE,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,aAAa,CAAC;IACrB,0EAA0E;IAC1E,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAgB,oBAAoB,IAAI,aAAa,CAEpD;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,GAC9C;IACE;;;;;;OAMG;IACH,IAAI,EAAE,iBAAiB,CAAC;IACxB,EAAE,EAAE,aAAa,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,wBAAwB,CAAC;CACtC,CAAC;AAEN;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,YAAY,CAAC;IACvB;;;;;;;OAOG;IACH,gBAAgB,EAAE,qBAAqB,CAAC;IACxC,+DAA+D;IAC/D,WAAW,EAAE,gBAAgB,CAAC;IAC9B,uEAAuE;IACvE,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,aAAa,CAAC;IACrB,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAiCD,iFAAiF;AACjF,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,gBAAgB,EAC1B,wBAAwB,EAAE,OAAO,GAChC,qBAAqB,CAcvB;AAED,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GACjC,gBAAgB,CAElB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,IAAI,gBAAgB,CAElD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,aAAa,EACpB,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE,OAAO,GACZ,kBAAkB,CAuDpB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,aAAa,GAAG,aAAa,CAEnE"}
+{"version":3,"file":"view-host-protocol.d.ts","sourceRoot":"","sources":["../src/view-host-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,EAKL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC3B,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEzD;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAKD,uEAAuE;AACvE,eAAO,MAAM,iBAAiB,eAAe,CAAC;AAE9C;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,mBAAmB,CAAC;AAStD,2CAA2C;AAC3C,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,CAAC;AAE5C,wDAAwD;AACxD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,aAAa,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACpC,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACpC,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,WAAW,GAAG,cAAc,CAAC;AAEzE,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,aAAa,CAAC;IACrB,0EAA0E;IAC1E,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAgB,oBAAoB,IAAI,aAAa,CAEpD;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,GAC9C;IACE;;;;;;OAMG;IACH,IAAI,EAAE,iBAAiB,CAAC;IACxB,EAAE,EAAE,aAAa,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,wBAAwB,CAAC;CACtC,GACD;IACE;;;;;;;OAOG;IACH,IAAI,EAAE,qBAAqB,CAAC;IAC5B,EAAE,EAAE,aAAa,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;CACb,GACD;IACE;;;;;;;;OAQG;IACH,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEN;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,YAAY,CAAC;IACvB;;;;;;;OAOG;IACH,gBAAgB,EAAE,qBAAqB,CAAC;IACxC,+DAA+D;IAC/D,WAAW,EAAE,gBAAgB,CAAC;IAC9B,uEAAuE;IACvE,SAAS,EAAE,OAAO,CAAC;IACnB,2EAA2E;IAC3E,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,aAAa,CAAC;IACrB,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAiCD,iFAAiF;AACjF,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,gBAAgB,EAC1B,wBAAwB,EAAE,OAAO,GAChC,qBAAqB,CAcvB;AAED,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GACjC,gBAAgB,CAElB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,aAAa,EACjB,KAAK,EAAE,qBAAqB,GAAG,SAAS,GACvC,gBAAgB,CASlB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,IAAI,gBAAgB,CAElD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,aAAa,EACpB,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE,OAAO,GACZ,kBAAkB,CAuFpB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,aAAa,GAAG,aAAa,CAEnE"}

package/dist/view-host-protocol.js

@@ -30,11 +30,26 @@
  * view; everything ggui-specific stays in `ggui-render.ts` behind ggui's
  * own published protocol package.
  */
-import { INITIALIZE_METHOD, LATEST_PROTOCOL_VERSION, RESOURCE_TEARDOWN_METHOD, } from "@modelcontextprotocol/ext-apps";
+import { INITIALIZE_METHOD, LATEST_PROTOCOL_VERSION, RESOURCE_TEARDOWN_METHOD, SIZE_CHANGED_METHOD, } from "@modelcontextprotocol/ext-apps";
 /** JSON-RPC `method not found` — the spec's code, not an invented one. */
 const METHOD_NOT_SUPPORTED = -32601;
 /** The standard MCP method a view uses to reach host-proxied tools. */
 export const TOOLS_CALL_METHOD = "tools/call";
+/**
+ * The standard MCP method a view uses to read host-proxied resources —
+ * `ReadResourceRequest` in the spec's App→Host request union
+ * (`@modelcontextprotocol/ext-apps` `AppRequest`). A local constant, same
+ * as {@link TOOLS_CALL_METHOD}: the string is MCP-core vocabulary the
+ * ext-apps root does not re-export, and this package deliberately carries
+ * no `@modelcontextprotocol/sdk` dependency.
+ */
+export const RESOURCES_READ_METHOD = "resources/read";
+/**
+ * MCP's `Resource not found` JSON-RPC code — the one answer for a miss, a
+ * transport deny, AND a relay failure (deny == miss: the reader discipline,
+ * `reader.ts` — the view gets no oracle for which locators resolve).
+ */
+const RESOURCE_NOT_FOUND = -32002;
 export function initialViewHostState() {
     return { phase: "negotiating", initializedSeen: false };
 }
@@ -83,6 +98,22 @@ export function initializeResult(behavior, requestedProtocolVersion) {
 export function toolCallResponse(id, result) {
     return { jsonrpc: "2.0", id, result };
 }
+/**
+ * Build the in-band response for a relayed `resources/read`. An entry
+ * becomes the spec's `ReadResourceResult` (`contents: [entry]`); `undefined`
+ * — a miss, a deny, or a relay failure alike — becomes the one
+ * `Resource not found` error (deny == miss, {@link RESOURCE_NOT_FOUND}).
+ */
+export function resourceReadResponse(id, entry) {
+    if (entry === undefined) {
+        return {
+            jsonrpc: "2.0",
+            id,
+            error: { code: RESOURCE_NOT_FOUND, message: "resource unavailable" },
+        };
+    }
+    return { jsonrpc: "2.0", id, result: { contents: [entry] } };
+}
 /**
  * The spec-mannered farewell a detaching host posts (`ui/resource-teardown`).
  * Sent WITHOUT an id — a host that is tearing the frame down cannot await a
@@ -110,10 +141,29 @@ export function viewHostReceive(state, behavior, data) {
     if (req === undefined)
         return { state, effects: [] };
     if (req.id === undefined) {
-        // A notification. Track the one the handshake defines; consume the rest.
+        // A notification. Track the one the handshake defines, surface the one
+        // the embedder may act on; consume the rest.
         if (req.method === "ui/notifications/initialized" && !state.initializedSeen) {
             return { state: { ...state, initializedSeen: true }, effects: [] };
         }
+        if (req.method === SIZE_CHANGED_METHOD) {
+            const width = req.params?.["width"];
+            const height = req.params?.["height"];
+            const validWidth = typeof width === "number" && Number.isFinite(width);
+            const validHeight = typeof height === "number" && Number.isFinite(height);
+            if (validWidth || validHeight) {
+                return {
+                    state,
+                    effects: [
+                        {
+                            kind: "size-changed",
+                            ...(validWidth ? { width } : {}),
+                            ...(validHeight ? { height } : {}),
+                        },
+                    ],
+                };
+            }
+        }
         return { state, effects: [] };
     }
     if (req.method === INITIALIZE_METHOD) {
@@ -141,6 +191,18 @@ export function viewHostReceive(state, behavior, data) {
         }
         // fall through: a nameless tools/call is not a call we can relay.
     }
+    if (req.method === RESOURCES_READ_METHOD && behavior.resourceRelay) {
+        const uri = req.params?.["uri"];
+        if (typeof uri === "string") {
+            return { state, effects: [{ kind: "relay-resource-read", id: req.id, uri }] };
+        }
+        // fall through: a uri-less read is not a read we can relay.
+    }
+    const answered = [
+        INITIALIZE_METHOD,
+        ...(behavior.toolRelay ? [TOOLS_CALL_METHOD] : []),
+        ...(behavior.resourceRelay ? [RESOURCES_READ_METHOD] : []),
+    ];
     return {
         state,
         effects: [
@@ -151,7 +213,7 @@ export function viewHostReceive(state, behavior, data) {
                     id: req.id,
                     error: {
                         code: METHOD_NOT_SUPPORTED,
-                        message: `method_not_supported: ${req.method} — this host answers ${INITIALIZE_METHOD}${behavior.toolRelay ? ` and ${TOOLS_CALL_METHOD}` : ""} only`,
+                        message: `method_not_supported: ${req.method} — this host answers ${answered.join(", ")} only`,
                     },
                 },
             },

package/dist/view-host.d.ts

@@ -28,6 +28,7 @@
  * re-derived here against the pure machine + our own tests.
  */
 import { type ViewHostPhase } from "./view-host-protocol.js";
+import type { McpResourceReadResult } from "./reader.js";
 import { type McpToolCallResult, type UiActionRequest } from "./action.js";
 import type { McpUiResourcePayload } from "./block-ui.js";
 import type { McpUiHostCapabilities, McpUiHostContext } from "@modelcontextprotocol/ext-apps";
@@ -91,6 +92,28 @@ export interface AttachViewHostConfig {
      * `<GuueyView>` fills it from the mount automatically.
      */
     resourceUri?: string;
+    /**
+     * The `resources/read` relay — a PRIVILEGE boundary like
+     * {@link onCallTool}, default off: with no hook, the machine refuses
+     * `resources/read` in-band and advertises no `serverResources`. The hook
+     * is structurally the SAME transport `createMcpUiResourceReader`
+     * assembles over ({@link CreateMcpUiResourceReaderDeps.readResource}) —
+     * a host with a locator reader wires the identical function here. Trust
+     * rules ride the reader discipline (`reader.ts`): enforcement lives
+     * INSIDE the transport; a miss, a deny, and a throw all answer the view
+     * with the one `Resource not found` error (deny == miss — no oracle).
+     */
+    onReadResource?: (uri: string) => Promise<McpResourceReadResult | undefined>;
+    /**
+     * The view reported its content size (`ui/notifications/size-changed` —
+     * spec notification). Whether and how to resize the frame is the
+     * embedder's layout decision; `<GuueyView autoResize>` is one wiring of
+     * exactly this callback.
+     */
+    onSizeChanged?: (size: {
+        width?: number;
+        height?: number;
+    }) => void;
     /** Observe phase transitions (see {@link ViewHostPhase}). */
     onPhaseChange?: (phase: ViewHostPhase) => void;
     /**

package/dist/view-host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"view-host.d.ts","sourceRoot":"","sources":["../src/view-host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAQL,KAAK,aAAa,EAEnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAEL,KAAK,iBAAiB,EAEtB,KAAK,eAAe,EACrB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,KAAK,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAC9F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,aAAa,EAAE;QAAE,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7F,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,gBAAgB,CACd,IAAI,EAAE,SAAS,EACf,QAAQ,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,GAC5D,IAAI,CAAC;IACR,mBAAmB,CACjB,IAAI,EAAE,SAAS,EACf,QAAQ,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,GAC5D,IAAI,CAAC;CACT;AAED,MAAM,WAAW,oBAAoB;IACnC;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;IACzC,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACtE;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6DAA6D;IAC7D,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;IAC/C;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qEAAqE;IACrE,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AA6BD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,GAAE,oBAAyB,GAAG,MAAM,IAAI,CAgElG;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS,CAcnF"}
+{"version":3,"file":"view-host.d.ts","sourceRoot":"","sources":["../src/view-host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EASL,KAAK,aAAa,EAEnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAEL,KAAK,iBAAiB,EAEtB,KAAK,eAAe,EACrB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,KAAK,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAC9F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,aAAa,EAAE;QAAE,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7F,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,gBAAgB,CACd,IAAI,EAAE,SAAS,EACf,QAAQ,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,GAC5D,IAAI,CAAC;IACR,mBAAmB,CACjB,IAAI,EAAE,SAAS,EACf,QAAQ,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,GAC5D,IAAI,CAAC;CACT;AAED,MAAM,WAAW,oBAAoB;IACnC;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;IACzC,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACtE;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IAC7E;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACpE,6DAA6D;IAC7D,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;IAC/C;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qEAAqE;IACrE,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AAoDD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,GAAE,oBAAyB,GAAG,MAAM,IAAI,CAkFlG;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS,CAcnF"}

package/dist/view-host.js

@@ -27,7 +27,7 @@
  * Seeded from ggui's console `surface-host.ts` (donated, guuey#186 audit);
  * re-derived here against the pure machine + our own tests.
  */
-import { initialViewHostState, teardownMessage, toolCallResponse, viewHostElapsed, viewHostReceive, } from "./view-host-protocol.js";
+import { initialViewHostState, resourceReadResponse, teardownMessage, toolCallResponse, viewHostElapsed, viewHostReceive, } from "./view-host-protocol.js";
 import { unavailableToolCallResult, } from "./action.js";
 const DEFAULT_HOST_INFO = { name: "guuey-view-host", version: "1" };
 const DEFAULT_NEGOTIATION_TIMEOUT_MS = 8000;
@@ -43,14 +43,38 @@ function hostContextFor(frame, config) {
 }
 function behaviorFor(frame, config) {
     const relayWired = config.onCallTool !== undefined && config.resourceUri !== undefined;
+    const readWired = config.onReadResource !== undefined;
     return {
         hostInfo: config.hostInfo ?? DEFAULT_HOST_INFO,
         hostCapabilities: {
+            // A wired relay IS the implementation — advertise it; an explicit
+            // hostCapabilities entry still wins (the serverTools precedent).
             ...(relayWired ? { serverTools: {} } : {}),
+            ...(readWired ? { serverResources: {} } : {}),
             ...config.hostCapabilities,
         },
         hostContext: hostContextFor(frame, config),
         toolRelay: relayWired,
+        resourceRelay: readWired,
+    };
+}
+/**
+ * Re-narrow a read hook's answer at the trust boundary — hooks are embedder
+ * code (possibly plain JS), and the wire entry the view receives must be a
+ * real `contents[]` entry: `uri` required, a string payload arm required
+ * (a payload-less entry is a miss — the `createMcpUiResourceReader`
+ * discipline, applied to the WIRE entry rather than the mountable payload).
+ */
+function narrowReadEntry(entry) {
+    if (entry === undefined || typeof entry.uri !== "string")
+        return undefined;
+    if (typeof entry.text !== "string" && typeof entry.blob !== "string")
+        return undefined;
+    return {
+        uri: entry.uri,
+        ...(typeof entry.mimeType === "string" ? { mimeType: entry.mimeType } : {}),
+        ...(typeof entry.text === "string" ? { text: entry.text } : {}),
+        ...(typeof entry.blob === "string" ? { blob: entry.blob } : {}),
     };
 }
 /**
@@ -84,6 +108,15 @@ export function attachViewHost(frame, config = {}) {
         // same in-band unavailable the relay itself uses, never a hang.
         () => post(toolCallResponse(id, unavailableToolCallResult())));
     };
+    const relayRead = (id, uri) => {
+        const { onReadResource } = config;
+        if (onReadResource === undefined)
+            return; // machine-guarded invariant, as with `relay`
+        onReadResource(uri).then((entry) => post(resourceReadResponse(id, narrowReadEntry(entry))), 
+        // A throwing hook still owes the view an answer — the same not-found
+        // the reader discipline gives a deny (deny == miss), never a hang.
+        () => post(resourceReadResponse(id, undefined)));
+    };
     const onMessage = (event) => {
         if (frame.contentWindow === null || event.source !== frame.contentWindow)
             return;
@@ -92,8 +125,16 @@ export function attachViewHost(frame, config = {}) {
         for (const effect of effects) {
             if (effect.kind === "respond")
                 post(effect.message);
-            else
+            else if (effect.kind === "relay-tool-call")
                 relay(effect.id, effect.name, effect.arguments);
+            else if (effect.kind === "relay-resource-read")
+                relayRead(effect.id, effect.uri);
+            else {
+                config.onSizeChanged?.({
+                    ...(effect.width !== undefined ? { width: effect.width } : {}),
+                    ...(effect.height !== undefined ? { height: effect.height } : {}),
+                });
+            }
         }
     };
     // One listener, two subscription paths: the injectable seam for Node

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guuey/mcp-apps-host",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "The MCP Apps (SEP-1865) Host role for guuey's chat surfaces — view-mount narrowing across UI channels, ui:// locator rehydration by resources/read, and the sandbox-trust channel contract. Vendor-neutral: any spec-following MCP App mounts through it.",
   "license": "MIT",
   "type": "module",
@@ -35,7 +35,7 @@
   "dependencies": {
     "@ggui-ai/protocol": "0.9.0",
     "@modelcontextprotocol/ext-apps": "1.7.5",
-    "@silverprotocol/core": "0.4.1"
+    "@silverprotocol/core": "0.5.0"
   },
   "peerDependencies": {
     "react": ">=18"

package/src/index.ts

@@ -58,6 +58,8 @@ export {
 export {
   initializeResult,
   initialViewHostState,
+  resourceReadResponse,
+  RESOURCES_READ_METHOD,
   teardownMessage,
   toolCallResponse,
   TOOLS_CALL_METHOD,

package/src/react.tsx

@@ -56,7 +56,13 @@ const DEFAULT_TITLE = "Generated view";
 export interface GuueyViewProps
   extends Pick<
     AttachViewHostConfig,
-    "hostCapabilities" | "hostInfo" | "hostContext" | "onCallTool" | "negotiationTimeoutMs"
+    | "hostCapabilities"
+    | "hostInfo"
+    | "hostContext"
+    | "onCallTool"
+    | "onReadResource"
+    | "onSizeChanged"
+    | "negotiationTimeoutMs"
   > {
   /** The resolved card to mount (see `toolResultViewMount`/`resolveViewMount`). */
   mount: ResolvedViewMount;
@@ -75,8 +81,23 @@ export interface GuueyViewProps
    * for its CSP + referrer checks to mean anything), never agent HTML.
    * The page must be a genuinely different origin; a same-origin URL is
    * refused with a labeled state, never mounted.
+   *
+   * `null` (as opposed to absent) means the two-origin mount is REQUIRED
+   * by the embedder's posture but no page is configured — the mount is
+   * refused with the same labeled state, and srcdoc is NEVER fallen back
+   * to (falling back would silently trade the caller's egress confinement
+   * for the page's CSP; the widget/Studio convergence posture).
    */
-  sandboxPageUrl?: string;
+  sandboxPageUrl?: string | null;
+  /**
+   * Apply the view's own size reports (`ui/notifications/size-changed` —
+   * spec surface) to the frame: a reported HEIGHT becomes the frame's
+   * height; width stays the container's (a transcript column owns its
+   * width). Default OFF — the primitive changes nothing for existing
+   * hosts; a caller's {@link AttachViewHostConfig.onSizeChanged} observer
+   * fires either way.
+   */
+  autoResize?: boolean;
   /**
    * Sandbox flags appended to the safe default (`allow-scripts`). Every
    * entry widens what agent-generated HTML may do — `allow-same-origin`
@@ -140,6 +161,7 @@ export function GuueyView(props: GuueyViewProps): ReactNode {
   const {
     mount,
     sandboxPageUrl,
+    autoResize,
     dangerouslyAddSandboxFlags,
     allow,
     title,
@@ -151,15 +173,19 @@ export function GuueyView(props: GuueyViewProps): ReactNode {
   } = props;
   const frameRef = useRef<HTMLIFrameElement>(null);
   const [phase, setPhase] = useState<ViewHostPhase>("negotiating");
+  // The view's own size report, applied only under `autoResize`.
+  const [reportedHeight, setReportedHeight] = useState<number | undefined>(undefined);
   const html = viewDocumentHtml(mount.resource);
 
   // Vet the sandbox page once per URL. Same-origin is REFUSED (the widget's
   // ResourceMount precedent, generalized): the whole point of the page is
   // being a different origin — same-origin would hand the relay page (and
   // through `allow-same-origin`, everything it can reach) the embedder's
-  // own origin.
+  // own origin. `null` — page mode required but unconfigured — refuses the
+  // same way: srcdoc is never a silent fallback for a confinement posture.
   const sandboxPage: URL | "refused" | undefined = useMemo(() => {
     if (sandboxPageUrl === undefined) return undefined;
+    if (sandboxPageUrl === null) return "refused";
     let url: URL;
     try {
       url = new URL(sandboxPageUrl);
@@ -174,14 +200,15 @@ export function GuueyView(props: GuueyViewProps): ReactNode {
   // The attachment is keyed to the mounted DOCUMENT, not to every render's
   // fresh callback identities — host config rides a ref so the effect's
   // dependency list is honestly just the document identity.
-  const latest = useRef({ hostConfig, onPhaseChange, dangerouslyAddSandboxFlags });
-  latest.current = { hostConfig, onPhaseChange, dangerouslyAddSandboxFlags };
+  const latest = useRef({ hostConfig, onPhaseChange, dangerouslyAddSandboxFlags, autoResize });
+  latest.current = { hostConfig, onPhaseChange, dangerouslyAddSandboxFlags, autoResize };
 
   useEffect(() => {
     // Keyed to the same identity the frame is (the resource uri): a new
     // document boots fresh, and the previous negotiation's phase must not
-    // paper over it.
+    // paper over it — nor must the previous document's reported size.
     setPhase("negotiating");
+    setReportedHeight(undefined);
     const frame = frameRef.current;
     if (frame === null || html === undefined) return;
     if (sandboxPageUrl !== undefined && page === undefined) return; // refused config — nothing mounts
@@ -193,6 +220,12 @@ export function GuueyView(props: GuueyViewProps): ReactNode {
         setPhase(next);
         latest.current.onPhaseChange?.(next);
       },
+      onSizeChanged: (size) => {
+        if (latest.current.autoResize === true && size.height !== undefined) {
+          setReportedHeight(size.height);
+        }
+        latest.current.hostConfig.onSizeChanged?.(size);
+      },
     });
     if (page === undefined) return detachHost;
     // Two-origin mode: the page announces readiness, the document is
@@ -226,12 +259,17 @@ export function GuueyView(props: GuueyViewProps): ReactNode {
   }
 
   if (sandboxPageUrl !== undefined && page === undefined) {
-    // A malformed or SAME-ORIGIN sandbox page is a configuration state, not
-    // a property of the card — refused, labeled, never mounted.
+    // A missing (null), malformed, or SAME-ORIGIN sandbox page is a
+    // configuration state, not a property of the card — refused, labeled,
+    // never mounted, and never silently downgraded to srcdoc. The copy
+    // names the configuration cause (an operator can act on it) without
+    // ever printing the offending URL.
     return (
       <div className={className} style={{ position: "relative", ...style }}>
         <p role="alert" style={{ ...statusLineStyle, opacity: 1, pointerEvents: "auto" }}>
-          Interactive view unavailable — the sandbox page is not usable from this origin.
+          {sandboxPageUrl === null
+            ? "Interactive view unavailable — no sandbox page is configured."
+            : "Interactive view unavailable — the sandbox page is not usable from this origin."}
         </p>
       </div>
     );
@@ -260,7 +298,15 @@ export function GuueyView(props: GuueyViewProps): ReactNode {
             : ["allow-scripts", ...(dangerouslyAddSandboxFlags ?? [])].join(" ")
         }
         allow={allow ?? "clipboard-write"}
-        style={{ display: "block", width: "100%", height: "100%", border: 0 }}
+        // Under `autoResize`, the view's own height report wins over the
+        // fill-the-container default (width stays the container's — a
+        // transcript column owns its width).
+        style={{
+          display: "block",
+          width: "100%",
+          height: autoResize === true && reportedHeight !== undefined ? reportedHeight : "100%",
+          border: 0,
+        }}
       />
       {renderStatus !== undefined ? renderStatus(phase) : defaultStatus(phase, mount.channel)}
     </div>

package/src/view-host-protocol.ts

@@ -34,11 +34,13 @@ import {
   INITIALIZE_METHOD,
   LATEST_PROTOCOL_VERSION,
   RESOURCE_TEARDOWN_METHOD,
+  SIZE_CHANGED_METHOD,
   type McpUiHostCapabilities,
   type McpUiHostContext,
   type McpUiInitializeResult,
 } from "@modelcontextprotocol/ext-apps";
 import type { McpToolStructuredContent } from "./action.js";
+import type { McpResourceReadResult } from "./reader.js";
 
 /**
  * The host identity in the initialize result — structurally the spec's
@@ -56,6 +58,23 @@ const METHOD_NOT_SUPPORTED = -32601;
 /** The standard MCP method a view uses to reach host-proxied tools. */
 export const TOOLS_CALL_METHOD = "tools/call";
 
+/**
+ * The standard MCP method a view uses to read host-proxied resources —
+ * `ReadResourceRequest` in the spec's App→Host request union
+ * (`@modelcontextprotocol/ext-apps` `AppRequest`). A local constant, same
+ * as {@link TOOLS_CALL_METHOD}: the string is MCP-core vocabulary the
+ * ext-apps root does not re-export, and this package deliberately carries
+ * no `@modelcontextprotocol/sdk` dependency.
+ */
+export const RESOURCES_READ_METHOD = "resources/read";
+
+/**
+ * MCP's `Resource not found` JSON-RPC code — the one answer for a miss, a
+ * transport deny, AND a relay failure (deny == miss: the reader discipline,
+ * `reader.ts` — the view gets no oracle for which locators resolve).
+ */
+const RESOURCE_NOT_FOUND = -32002;
+
 /** A JSON-RPC id as the wire allows it. */
 export type ViewRequestId = number | string;
 
@@ -117,6 +136,33 @@ export type ViewHostEffect =
       id: ViewRequestId;
       name: string;
       arguments?: McpToolStructuredContent;
+    }
+  | {
+      /**
+       * A `resources/read` the config accepted for relaying (spec surface:
+       * `ReadResourceRequest` rides the App→Host union, and the matching
+       * advertisement is `hostCapabilities.serverResources`). The glue runs
+       * the read hook and posts {@link resourceReadResponse}. Only emitted
+       * when {@link ViewHostBehavior.resourceRelay} is true — unwired, the
+       * machine refuses in-band like every other unsupported request.
+       */
+      kind: "relay-resource-read";
+      id: ViewRequestId;
+      uri: string;
+    }
+  | {
+      /**
+       * The view reported its content size (`ui/notifications/size-changed`
+       * — spec notification, App → Host). At least one of the two fields is
+       * a finite number; a notification carrying neither is consumed
+       * silently instead. The glue forwards this to the embedder
+       * ({@link AttachViewHostConfig.onSizeChanged} in `view-host.ts`) —
+       * whether/how to resize the frame is the embedder's layout decision,
+       * never the machine's.
+       */
+      kind: "size-changed";
+      width?: number;
+      height?: number;
     };
 
 /**
@@ -138,6 +184,8 @@ export interface ViewHostBehavior {
   hostContext: McpUiHostContext;
   /** Whether a `tools/call` relay hook is wired (see `view-host.ts`). */
   toolRelay: boolean;
+  /** Whether a `resources/read` relay hook is wired (see `view-host.ts`). */
+  resourceRelay: boolean;
 }
 
 /** The result of feeding one inbound frame (or the timeout) to the machine. */
@@ -205,6 +253,26 @@ export function toolCallResponse(
   return { jsonrpc: "2.0", id, result };
 }
 
+/**
+ * Build the in-band response for a relayed `resources/read`. An entry
+ * becomes the spec's `ReadResourceResult` (`contents: [entry]`); `undefined`
+ * — a miss, a deny, or a relay failure alike — becomes the one
+ * `Resource not found` error (deny == miss, {@link RESOURCE_NOT_FOUND}).
+ */
+export function resourceReadResponse(
+  id: ViewRequestId,
+  entry: McpResourceReadResult | undefined,
+): ViewHostOutbound {
+  if (entry === undefined) {
+    return {
+      jsonrpc: "2.0",
+      id,
+      error: { code: RESOURCE_NOT_FOUND, message: "resource unavailable" },
+    };
+  }
+  return { jsonrpc: "2.0", id, result: { contents: [entry] } };
+}
+
 /**
  * The spec-mannered farewell a detaching host posts (`ui/resource-teardown`).
  * Sent WITHOUT an id — a host that is tearing the frame down cannot await a
@@ -237,10 +305,29 @@ export function viewHostReceive(
   if (req === undefined) return { state, effects: [] };
 
   if (req.id === undefined) {
-    // A notification. Track the one the handshake defines; consume the rest.
+    // A notification. Track the one the handshake defines, surface the one
+    // the embedder may act on; consume the rest.
     if (req.method === "ui/notifications/initialized" && !state.initializedSeen) {
       return { state: { ...state, initializedSeen: true }, effects: [] };
     }
+    if (req.method === SIZE_CHANGED_METHOD) {
+      const width = req.params?.["width"];
+      const height = req.params?.["height"];
+      const validWidth = typeof width === "number" && Number.isFinite(width);
+      const validHeight = typeof height === "number" && Number.isFinite(height);
+      if (validWidth || validHeight) {
+        return {
+          state,
+          effects: [
+            {
+              kind: "size-changed",
+              ...(validWidth ? { width } : {}),
+              ...(validHeight ? { height } : {}),
+            },
+          ],
+        };
+      }
+    }
     return { state, effects: [] };
   }
 
@@ -271,6 +358,19 @@ export function viewHostReceive(
     // fall through: a nameless tools/call is not a call we can relay.
   }
 
+  if (req.method === RESOURCES_READ_METHOD && behavior.resourceRelay) {
+    const uri = req.params?.["uri"];
+    if (typeof uri === "string") {
+      return { state, effects: [{ kind: "relay-resource-read", id: req.id, uri }] };
+    }
+    // fall through: a uri-less read is not a read we can relay.
+  }
+
+  const answered = [
+    INITIALIZE_METHOD,
+    ...(behavior.toolRelay ? [TOOLS_CALL_METHOD] : []),
+    ...(behavior.resourceRelay ? [RESOURCES_READ_METHOD] : []),
+  ];
   return {
     state,
     effects: [
@@ -281,7 +381,7 @@ export function viewHostReceive(
           id: req.id,
           error: {
             code: METHOD_NOT_SUPPORTED,
-            message: `method_not_supported: ${req.method} — this host answers ${INITIALIZE_METHOD}${behavior.toolRelay ? ` and ${TOOLS_CALL_METHOD}` : ""} only`,
+            message: `method_not_supported: ${req.method} — this host answers ${answered.join(", ")} only`,
           },
         },
       },

package/src/view-host.ts

@@ -29,6 +29,7 @@
  */
 import {
   initialViewHostState,
+  resourceReadResponse,
   teardownMessage,
   toolCallResponse,
   viewHostElapsed,
@@ -38,6 +39,7 @@ import {
   type ViewHostPhase,
   type ViewHostState,
 } from "./view-host-protocol.js";
+import type { McpResourceReadResult } from "./reader.js";
 import {
   unavailableToolCallResult,
   type McpToolCallResult,
@@ -107,6 +109,25 @@ export interface AttachViewHostConfig {
    * `<GuueyView>` fills it from the mount automatically.
    */
   resourceUri?: string;
+  /**
+   * The `resources/read` relay — a PRIVILEGE boundary like
+   * {@link onCallTool}, default off: with no hook, the machine refuses
+   * `resources/read` in-band and advertises no `serverResources`. The hook
+   * is structurally the SAME transport `createMcpUiResourceReader`
+   * assembles over ({@link CreateMcpUiResourceReaderDeps.readResource}) —
+   * a host with a locator reader wires the identical function here. Trust
+   * rules ride the reader discipline (`reader.ts`): enforcement lives
+   * INSIDE the transport; a miss, a deny, and a throw all answer the view
+   * with the one `Resource not found` error (deny == miss — no oracle).
+   */
+  onReadResource?: (uri: string) => Promise<McpResourceReadResult | undefined>;
+  /**
+   * The view reported its content size (`ui/notifications/size-changed` —
+   * spec notification). Whether and how to resize the frame is the
+   * embedder's layout decision; `<GuueyView autoResize>` is one wiring of
+   * exactly this callback.
+   */
+  onSizeChanged?: (size: { width?: number; height?: number }) => void;
   /** Observe phase transitions (see {@link ViewHostPhase}). */
   onPhaseChange?: (phase: ViewHostPhase) => void;
   /**
@@ -136,14 +157,37 @@ function hostContextFor(frame: ViewFrameLike, config: AttachViewHostConfig): Mcp
 
 function behaviorFor(frame: ViewFrameLike, config: AttachViewHostConfig): ViewHostBehavior {
   const relayWired = config.onCallTool !== undefined && config.resourceUri !== undefined;
+  const readWired = config.onReadResource !== undefined;
   return {
     hostInfo: config.hostInfo ?? DEFAULT_HOST_INFO,
     hostCapabilities: {
+      // A wired relay IS the implementation — advertise it; an explicit
+      // hostCapabilities entry still wins (the serverTools precedent).
       ...(relayWired ? { serverTools: {} } : {}),
+      ...(readWired ? { serverResources: {} } : {}),
       ...config.hostCapabilities,
     },
     hostContext: hostContextFor(frame, config),
     toolRelay: relayWired,
+    resourceRelay: readWired,
+  };
+}
+
+/**
+ * Re-narrow a read hook's answer at the trust boundary — hooks are embedder
+ * code (possibly plain JS), and the wire entry the view receives must be a
+ * real `contents[]` entry: `uri` required, a string payload arm required
+ * (a payload-less entry is a miss — the `createMcpUiResourceReader`
+ * discipline, applied to the WIRE entry rather than the mountable payload).
+ */
+function narrowReadEntry(entry: McpResourceReadResult | undefined): McpResourceReadResult | undefined {
+  if (entry === undefined || typeof entry.uri !== "string") return undefined;
+  if (typeof entry.text !== "string" && typeof entry.blob !== "string") return undefined;
+  return {
+    uri: entry.uri,
+    ...(typeof entry.mimeType === "string" ? { mimeType: entry.mimeType } : {}),
+    ...(typeof entry.text === "string" ? { text: entry.text } : {}),
+    ...(typeof entry.blob === "string" ? { blob: entry.blob } : {}),
   };
 }
 
@@ -183,13 +227,31 @@ export function attachViewHost(frame: ViewFrameLike, config: AttachViewHostConfi
     );
   };
 
+  const relayRead = (id: number | string, uri: string): void => {
+    const { onReadResource } = config;
+    if (onReadResource === undefined) return; // machine-guarded invariant, as with `relay`
+    onReadResource(uri).then(
+      (entry) => post(resourceReadResponse(id, narrowReadEntry(entry))),
+      // A throwing hook still owes the view an answer — the same not-found
+      // the reader discipline gives a deny (deny == miss), never a hang.
+      () => post(resourceReadResponse(id, undefined)),
+    );
+  };
+
   const onMessage = (event: { data: unknown; source: unknown }): void => {
     if (frame.contentWindow === null || event.source !== frame.contentWindow) return;
     const { state: next, effects } = viewHostReceive(state, behaviorFor(frame, config), event.data);
     setState(next);
     for (const effect of effects) {
       if (effect.kind === "respond") post(effect.message);
-      else relay(effect.id, effect.name, effect.arguments);
+      else if (effect.kind === "relay-tool-call") relay(effect.id, effect.name, effect.arguments);
+      else if (effect.kind === "relay-resource-read") relayRead(effect.id, effect.uri);
+      else {
+        config.onSizeChanged?.({
+          ...(effect.width !== undefined ? { width: effect.width } : {}),
+          ...(effect.height !== undefined ? { height: effect.height } : {}),
+        });
+      }
     }
   };