@happyvertical/smrt-mcp-apps 0.0.0-stage → 0.51.38

package/AGENTS.md

@@ -0,0 +1,16 @@
+# @happyvertical/smrt-mcp-apps
+
+Browser-only view-side portable MCP Apps bridge. `src/index.ts` owns lifecycle,
+correlated transport and capability gates; `src/validation.ts` owns bounded JSON
+and the deliberately text/structured subset. No server credentials, Svelte,
+OpenAI symbols or browser authorization/REST engine belong here.
+
+The pinned upstream protocol/schema and known prose discrepancy are documented in
+[README.md](README.md). Never change the protocol or widen a modality silently.
+Host window and exact origin are immutable. Disposal rejects pending work.
+Public registries remain in smrt-ui; Svelte bindings use the smrt-web intent
+compiler through the explicit `smrt-svelte/mcp-apps` subpath.
+
+Run package build/typecheck/test/test:e2e/verify:pack plus the Svelte browser gate
+listed in README. `e2e/` is a synthetic host, not external-host compatibility
+proof. Keep the generated reference resource under 100 KiB and CSP no-network.

package/CLAUDE.md

@@ -0,0 +1 @@
+@AGENTS.md

package/LICENSE

@@ -0,0 +1,7 @@
+Copyright <2025> <Happy Vertical Corporation>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -1,3 +1,168 @@
-# Temporary Holding Version
+# @happyvertical/smrt-mcp-apps
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Framework-neutral, browser-only **view-side** bridge for portable MCP Apps.
+It is not a server adapter, host/sandbox implementation, authorization layer or
+WebMCP tool registrar. Importing it does not require a browser until construction.
+
+## Usage
+
+```ts
+import { McpAppBridge } from '@happyvertical/smrt-mcp-apps';
+
+const bridge = new McpAppBridge({
+  hostWindow: window.parent,
+  hostOrigin: 'https://trusted-host.example',
+  appInfo: { name: 'Opportunity viewer', version: '1.0.0' },
+});
+await bridge.connect();
+if (bridge.snapshot.hostCapabilities.serverTools) {
+  const result = await bridge.callTool('opportunity_list', {});
+  // Render text with textContent and validate domain-shaped structuredContent.
+}
+// Owning component unmount:
+bridge.dispose();
+```
+
+Supply the immediate parent window and its exact origin from trusted deployment
+configuration. Do not learn them from the first message, URL query, untrusted
+referrer or tool arguments. The same window and origin remain bound for the
+instance lifetime. HTTPS is required except explicit loopback HTTP development.
+Opaque (`null`) parent origins and wildcard targets are intentionally unsupported;
+a host with an opaque immediate sandbox proxy needs a reviewed transport design.
+The view itself may have an opaque origin. Host authentication stays outside it.
+
+## Supported contract
+
+Pinned upstream revision: `82221c0c8ce7661efa6771c9d461511b1650495f`.
+The [runtime schema](https://github.com/modelcontextprotocol/ext-apps/blob/82221c0c8ce7661efa6771c9d461511b1650495f/src/generated/schema.ts)
+is authoritative for implemented fields; its
+[protocol constant](https://github.com/modelcontextprotocol/ext-apps/blob/82221c0c8ce7661efa6771c9d461511b1650495f/src/spec.types.ts)
+is `2026-01-26`, independent of server MCP `2026-07-28`.
+The same revision's
+[prose examples](https://github.com/modelcontextprotocol/ext-apps/blob/82221c0c8ce7661efa6771c9d461511b1650495f/specification/2026-01-26/apps.mdx)
+differ: `ui/message` shows singleton content and omits message/context modality
+capabilities, whereas the runtime schema uses a content array, capability modality
+objects, required `hostContext`, optional tool-input arguments and optional
+cancellation reason. Contract tests pin these runtime shapes explicitly.
+
+Implemented methods: initialize/initialized, server `tools/call`, `ui/open-link`,
+text `ui/message`, text/structured `ui/update-model-context`, display-mode requests,
+size notifications, ping and resource teardown. Tool input/result/cancellation
+and host-context notifications are accepted only after initialization. Exactly one
+complete initial input and terminal result/cancellation are accepted; late or
+out-of-order updates are ignored. Partial input is ignored. No app-tools capability
+is advertised; inbound `tools/call` receives method-not-found. Resource proxying, sampling and downloads have no built-in typed adapter; an
+opt-in extension adapter may register a bounded contract below. Binary content
+in built-in tool results and executable host CSS remain unsupported.
+Unknown capabilities never grant a supported feature. Unsupported tool content
+modalities reject explicitly. Text and structured results remain available without
+interactive capabilities; consumers must retain a normal app/review URL fallback.
+
+Host context exposes only theme, display mode(s), platform, locale and timezone.
+Unknown context fields are ignored by the typed projection; executable CSS/tool
+definitions are never applied. `snapshot.rawHostContext` and
+`snapshot.rawHostCapabilities` retain bounded JSON for opt-in extension adapters.
+Context notifications merge into the raw context; capabilities remain fixed at
+handshake. Every snapshot/observer receives an isolated clone. Extension adapters
+must validate their own fields and treat raw data as untrusted; raw capabilities
+cannot enable typed methods or bypass their gates. There is no global arbitrary RPC method. Optional adapters must explicitly
+register the capability-gated contract described below. Unknown supported-field enum values fail closed. A missing display-mode
+list permits only inline. Host rejection (`isError: true`) and RPC errors propagate.
+
+Payload limits: 24 nested levels, 4096 array items, 1024 object keys, conservative
+128 KiB character/node budget; text blocks 32 KiB, 128 blocks; 32 pending requests;
+15-second default timeout (configurable 1–120000 ms). Arrays must be dense own data properties with no named/symbol properties; their iterators are never invoked. Cycles/non-JSON/accessors and
+prototype keys are rejected. Requests use per-instance random correlated IDs.
+Timeout, abort and disposal reject pending calls and send best-effort cancellation.
+Disposal removes the listener, aborts `signal`, and clears observers. Cancellation
+is not a rollback guarantee: server workflows retain idempotency/transaction rules.
+
+## Svelte and mounted interactions
+
+Explicitly import `useMcpApp` and `useMcpAppIntent` from
+`@happyvertical/smrt-svelte/mcp-apps`. `useMcpApp(() => options)` constructs only on
+mount and disposes on unmount; its state contains `bridge`, `snapshot` and `error`.
+Use `bridge.signal` or an owned abort signal for associated asynchronous work.
+
+`useMcpAppIntent(intent, binding)` binds an existing public view-intent declaration
+to a mounted ControlInteractionRegistry or DataSurfaceRegistry. It uses the public
+`compileViewIntentToolSpec` implementation and requires no `document.modelContext`.
+It is a component-local callable, never forwarded or advertised as a remote tool.
+Control proposals remain agent-sourced; existing trusted human staged review owns
+application of values. The component owns registry registrations and their cleanup.
+No new REST engine, browser permission engine or final-submission API is introduced.
+
+## Validation
+
+After `pnpm install` and documented dependency builds:
+
+- `pnpm --filter @happyvertical/smrt-mcp-apps build`
+- `pnpm --filter @happyvertical/smrt-mcp-apps typecheck`
+- `pnpm --filter @happyvertical/smrt-mcp-apps test`
+- `pnpm --filter @happyvertical/smrt-mcp-apps test:e2e`
+- `pnpm --filter @happyvertical/smrt-mcp-apps verify:pack`
+- `pnpm --filter @happyvertical/smrt-svelte check`
+- `pnpm --filter @happyvertical/smrt-svelte exec playwright test -c e2e/playwright.config.ts mcp-apps.spec.ts`
+
+The Chromium host fixture bundles an Iolaus-shaped synthetic list/detail viewer,
+prepares and reads it through the public M3 resource APIs, and routes host-proxied
+calls through `createMcpAppServer` with a server-owned synthetic principal.
+It checks resource digest/MIME/CSP metadata and revoked-resource/tool denial,
+raw generated HTML below 100 KiB, and hash-only script/style CSP with no external
+network/assets. Browser gates cover hostile messages, capability absence,
+repeated teardown/reconnect, late superseded results, and keyboard navigation at
+320/390px without horizontal overflow. The visible review URL wraps and remains
+copyable even where sandbox policy blocks opening a new window. The Svelte browser fixture uses real public registries and a genuine
+Playwright click to apply a staged proposal; fabricated approval is denied.
+These fixtures prove synthetic browser behavior only. No actual OpenAI or other
+external host compatibility is claimed. M3 resource metadata still requires the
+host to enforce CSP and sandbox permissions; the browser bridge cannot enforce a
+host's policy on its behalf. The reference view only opens a human-review URL and
+contains no candidate records or transmission/approval operation.
+
+
+## Optional extension contracts
+
+`bridge.registerExtension(definition)` returns a `McpAppExtension` only after the
+Apps handshake completes and the declaration's capability path selects a plain
+object in the initialized host capabilities. Declarations are trusted local code;
+never derive capability paths or method lists from host/model input. For example:
+
+```ts
+const resources = bridge.registerExtension({
+  id: 'example.resources',
+  capability: { path: ['experimental', 'example/resources'] },
+  methods: ['resources/read', 'resources/subscribe', 'resources/unsubscribe'],
+  notifications: ['notifications/resources/updated'],
+});
+const unsubscribe = resources.subscribe((method, params) => {
+  // Adapter validates its exact URI/schema/ownership before acting.
+});
+const result = await resources.request('resources/read', { uri: 'test://fixture' });
+// Validate the extension's exact result schema before consuming it.
+unsubscribe();
+resources.dispose();
+```
+
+If a wire capability declares a version, specify
+`capability.version: { key: 'version', supported: ['1'] }`; mismatches reject.
+Omit this field for capabilities without wire versions rather than inventing one.
+The bridge copies declarations and permits at most 16 registrations, 16 request
+methods and 16 notification names per registration, and 32 listeners per handle.
+Duplicate IDs/method ownership, unlisted requests, reserved lifecycle/tool methods
+and malformed JSON reject. Unknown notifications are ignored; host requests never
+invoke notification callbacks. Every observer receives isolated bounded data.
+
+Native `ui/message` and `ui/update-model-context` are narrow allowlist exceptions
+for extension metadata: the core capability and text/structured modality gates,
+user role, text-content shape/limits and failure-result checks still apply in
+addition to the extension capability. No image modality or tool-call bypass is
+introduced. Extension adapters own semantic metadata/result validation and any
+additional application authorization, not this transport API.
+
+The handle shares the existing bound host/origin, JSON budget, 32-pending limit,
+correlated IDs and timeout behavior. `signal` aborts on handle or bridge disposal;
+pending work rejects and later notifications/results cannot revive the handle.
+A new registration has a new lifetime. Adapters should request remote unsubscribe
+before disposal when practical; teardown aborts immediately and does not wait for
+a host acknowledgement. This is cancellation, not a server rollback guarantee.

package/dist/extensions.d.ts

@@ -0,0 +1,30 @@
+/** Trusted local declaration. Extension adapters own method-specific wire schemas. */
+export interface McpAppExtensionDefinition {
+    id: string;
+    capability: {
+        /** Own-property path into the initialized host's capability object. */
+        path: readonly string[];
+        /** Only declare this when the extension's wire capability actually has a version field. */
+        version?: {
+            key: string;
+            supported: readonly string[];
+        };
+    };
+    methods: readonly string[];
+    notifications: readonly string[];
+}
+/** One owner, one initialized bridge lifetime; no independent transport or authority. */
+export interface McpAppExtension {
+    readonly signal: AbortSignal;
+    request(method: string, params: Record<string, unknown>, signal?: AbortSignal): Promise<Record<string, unknown>>;
+    subscribe(listener: (method: string, params: Record<string, unknown>) => void): () => void;
+    dispose(): void;
+}
+export interface RegisteredExtension {
+    definition: McpAppExtensionDefinition;
+    lifetime: AbortController;
+    listeners: Set<(method: string, params: Record<string, unknown>) => void>;
+}
+/** Validate and copy the declaration before it can affect transport dispatch. */
+export declare function extensionDefinition(value: McpAppExtensionDefinition, capabilities: Record<string, unknown>): McpAppExtensionDefinition;
+//# sourceMappingURL=extensions.d.ts.map

package/dist/extensions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions.d.ts","sourceRoot":"","sources":["../src/extensions.ts"],"names":[],"mappings":"AAEA,sFAAsF;AACtF,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE;QACV,uEAAuE;QACvE,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;QACxB,2FAA2F;QAC3F,OAAO,CAAC,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;SAAE,CAAC;KACzD,CAAC;IACF,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AACD,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,OAAO,CACL,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpC,SAAS,CACP,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAClE,MAAM,IAAI,CAAC;IACd,OAAO,IAAI,IAAI,CAAC;CACjB;AACD,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,yBAAyB,CAAC;IACtC,QAAQ,EAAE,eAAe,CAAC;IAC1B,SAAS,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;CAC3E;AAOD,iFAAiF;AACjF,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,yBAAyB,EAChC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,yBAAyB,CA6D3B"}

package/dist/extensions.js

@@ -0,0 +1,61 @@
+import { json, object, string } from './validation.js';
+function name(value) {
+    const result = string(value, 128);
+    if (!/^[a-zA-Z][a-zA-Z0-9_.-]*(\/[a-zA-Z][a-zA-Z0-9_.-]*){1,4}$/.test(result))
+        throw new Error('Invalid extension method name');
+    return result;
+}
+/** Validate and copy the declaration before it can affect transport dispatch. */
+export function extensionDefinition(value, capabilities) {
+    json(value);
+    const input = object(value);
+    const extensionId = string(input.id, 64);
+    if (!/^[a-z][a-z0-9.-]{0,63}$/.test(extensionId))
+        throw new Error('Invalid extension id');
+    const capability = object(input.capability);
+    if (!Array.isArray(capability.path) ||
+        capability.path.length < 1 ||
+        capability.path.length > 4)
+        throw new Error('Invalid extension capability path');
+    let selected = capabilities;
+    for (const key of capability.path) {
+        string(key, 128);
+        const parent = object(selected);
+        if (!Object.hasOwn(parent, key))
+            throw new Error('Host extension capability unavailable');
+        selected = parent[key];
+    }
+    const supportedCapability = object(selected);
+    if (capability.version !== undefined) {
+        const version = object(capability.version);
+        const key = string(version.key, 128);
+        if (!Array.isArray(version.supported) ||
+            !version.supported.length ||
+            version.supported.length > 8)
+            throw new Error('Invalid extension versions');
+        for (const item of version.supported)
+            string(item, 64);
+        if (!Object.hasOwn(supportedCapability, key) ||
+            !version.supported.includes(supportedCapability[key]))
+            throw new Error('Unsupported host extension version');
+    }
+    for (const field of ['methods', 'notifications']) {
+        const names = input[field];
+        if (!Array.isArray(names) ||
+            names.length > 16 ||
+            new Set(names).size !== names.length)
+            throw new Error('Invalid extension allowlist');
+        for (const item of names) {
+            const method = name(item);
+            const nativeTextRequest = field === 'methods' &&
+                ['ui/message', 'ui/update-model-context'].includes(method);
+            if ((method.startsWith('ui/') && !nativeTextRequest) ||
+                method.startsWith('tools/') ||
+                method === 'notifications/cancelled' ||
+                (field === 'methods' && method.startsWith('notifications/')))
+                throw new Error('Reserved bridge method');
+        }
+    }
+    return structuredClone(value);
+}
+//# sourceMappingURL=extensions.js.map

package/dist/extensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions.js","sourceRoot":"","sources":["../src/extensions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAgCvD,SAAS,IAAI,CAAC,KAAc;IAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,2DAA2D,CAAC,IAAI,CAAC,MAAM,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,iFAAiF;AACjF,MAAM,UAAU,mBAAmB,CACjC,KAAgC,EAChC,YAAqC;IAErC,IAAI,CAAC,KAAK,CAAC,CAAC;IACZ,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,WAAW,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5C,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QAC/B,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QAC1B,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QAE1B,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,IAAI,QAAQ,GAAY,YAAY,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACjB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,mBAAmB,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACrC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;YACjC,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM;YACzB,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;YAE5B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,SAAS;YAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACvD,IACE,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,GAAG,CAAC;YACxC,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;YAErD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC1D,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,eAAe,CAAU,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACrB,KAAK,CAAC,MAAM,GAAG,EAAE;YACjB,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;YAEpC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,MAAM,iBAAiB,GACrB,KAAK,KAAK,SAAS;gBACnB,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC7D,IACE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBAChD,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAC3B,MAAM,KAAK,yBAAyB;gBACpC,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;gBAE5D,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,64 @@
+import type { McpAppExtension, McpAppExtensionDefinition } from './extensions.js';
+export type { McpAppExtension, McpAppExtensionDefinition, } from './extensions.js';
+import type { DisplayMode, HostCapabilities, HostContext, ToolResult } from './validation.js';
+export type { DisplayMode, HostCapabilities, HostContext, TextContent, ToolResult, } from './validation.js';
+/** Pinned independently from the server MCP protocol (2026-07-28). */
+export declare const MCP_APPS_PROTOCOL_VERSION = "2026-01-26";
+/** Exact upstream schema baseline, not a dependency on the SDK v1 helper. */
+export declare const MCP_APPS_SCHEMA_REVISION = "82221c0c8ce7661efa6771c9d461511b1650495f";
+export interface McpAppBridgeOptions {
+    /** The immediate parent (including a sandbox proxy), supplied by trusted app configuration. */
+    hostWindow: Window;
+    /** Exact parent origin. Opaque/null/wildcard origins are intentionally unsupported. */
+    hostOrigin: string;
+    appInfo: {
+        name: string;
+        version: string;
+    };
+    window?: Window;
+    timeoutMs?: number;
+    availableDisplayModes?: DisplayMode[];
+}
+export interface McpAppSnapshot {
+    state: 'idle' | 'connecting' | 'ready' | 'disposed';
+    hostCapabilities: HostCapabilities;
+    hostContext: HostContext;
+    /** Bounded JSON from the bound host, isolated on every snapshot. Extensions must validate their own fields. */
+    rawHostContext: Readonly<Record<string, unknown>>;
+    /** Informational extension negotiation only; never bypasses the bridge's typed capability gates. */
+    rawHostCapabilities: Readonly<Record<string, unknown>>;
+    toolInput?: Record<string, unknown>;
+    toolResult?: ToolResult;
+    cancelled?: boolean;
+}
+/** Portable view-side transport. It never registers browser closures as remote tools. */
+export declare class McpAppBridge {
+    #private;
+    constructor(options: McpAppBridgeOptions);
+    /** Aborts component-owned asynchronous work on host teardown or local disposal. */
+    get signal(): AbortSignal;
+    get snapshot(): McpAppSnapshot;
+    subscribe(listener: (snapshot: McpAppSnapshot) => void): () => void;
+    /** Negotiate once. Failed or timed-out negotiation closes this instance permanently. */
+    connect(): Promise<void>;
+    /**
+     * Opt in to a finite extension contract after initialization. The adapter must
+     * validate its method-specific schemas; this handle never bypasses transport,
+     * lifecycle, or native text-method capability checks.
+     */
+    registerExtension(declaration: McpAppExtensionDefinition): McpAppExtension;
+    /** Calls the server through the host. No credentials, tenant overrides or approval metadata. */
+    callTool(name: string, args?: Record<string, unknown>, signal?: AbortSignal): Promise<ToolResult>;
+    /** Human review destination only; applications own their approved URL allowlist. */
+    openLink(url: string, signal?: AbortSignal): Promise<void>;
+    sendMessage(text: string, signal?: AbortSignal): Promise<void>;
+    updateModelContext(value: {
+        text?: string;
+        structuredContent?: Record<string, unknown>;
+    }, signal?: AbortSignal): Promise<void>;
+    requestDisplayMode(value: DisplayMode, signal?: AbortSignal): Promise<DisplayMode>;
+    reportSize(width: number, height: number): void;
+    /** Idempotent. Pending requests reject; late responses and notifications have no owner. */
+    dispose(): void;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,yBAAyB,EAE1B,MAAM,iBAAiB,CAAC;AAGzB,YAAY,EACV,eAAe,EACf,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EACV,WAAW,EACX,gBAAgB,EAChB,WAAW,EACX,UAAU,EACX,MAAM,iBAAiB,CAAC;AAazB,YAAY,EACV,WAAW,EACX,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,UAAU,GACX,MAAM,iBAAiB,CAAC;AAEzB,sEAAsE;AACtE,eAAO,MAAM,yBAAyB,eAAe,CAAC;AACtD,6EAA6E;AAC7E,eAAO,MAAM,wBAAwB,6CACO,CAAC;AAC7C,MAAM,WAAW,mBAAmB;IAClC,+FAA+F;IAC/F,UAAU,EAAE,MAAM,CAAC;IACnB,uFAAuF;IACvF,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qBAAqB,CAAC,EAAE,WAAW,EAAE,CAAC;CACvC;AACD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,OAAO,GAAG,UAAU,CAAC;IACpD,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,WAAW,EAAE,WAAW,CAAC;IACzB,+GAA+G;IAC/G,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,oGAAoG;IACpG,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAMD,yFAAyF;AACzF,qBAAa,YAAY;;gBAwBX,OAAO,EAAE,mBAAmB;IAkCxC,mFAAmF;IACnF,IAAI,MAAM,IAAI,WAAW,CAExB;IACD,IAAI,QAAQ,IAAI,cAAc,CAE7B;IACD,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,cAAc,KAAK,IAAI,GAAG,MAAM,IAAI;IAqEnE,wFAAwF;IACxF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAiDxB;;;;OAIG;IACH,iBAAiB,CAAC,WAAW,EAAE,yBAAyB,GAAG,eAAe;IAsI1E,gGAAgG;IAC1F,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAClC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,UAAU,CAAC;IAStB,oFAAoF;IAC9E,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAO1D,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAe9D,kBAAkB,CACtB,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,EACrE,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC;IAeV,kBAAkB,CACtB,KAAK,EAAE,WAAW,EAClB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,WAAW,CAAC;IAoBvB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAoH/C,2FAA2F;IAC3F,OAAO,IAAI,IAAI;CA2BhB"}

package/dist/index.js

@@ -0,0 +1,495 @@
+import { extensionDefinition } from './extensions.js';
+import { capabilities, context, id, json, mode, object, string, success, toolResult, } from './validation.js';
+/** Pinned independently from the server MCP protocol (2026-07-28). */
+export const MCP_APPS_PROTOCOL_VERSION = '2026-01-26';
+/** Exact upstream schema baseline, not a dependency on the SDK v1 helper. */
+export const MCP_APPS_SCHEMA_REVISION = '82221c0c8ce7661efa6771c9d461511b1650495f';
+/** Portable view-side transport. It never registers browser closures as remote tools. */
+export class McpAppBridge {
+    #host;
+    #window;
+    #origin;
+    #timeout;
+    #appInfo;
+    #modes;
+    #prefix;
+    #pending = new Map();
+    #extensions = new Map();
+    #subscribers = new Set();
+    #lifetime = new AbortController();
+    #sequence = 0;
+    #inputReceived = false;
+    #terminalReceived = false;
+    #connect;
+    #snapshot = {
+        state: 'idle',
+        hostCapabilities: {},
+        hostContext: {},
+        rawHostContext: {},
+        rawHostCapabilities: {},
+    };
+    constructor(options) {
+        const origin = new URL(options.hostOrigin);
+        if (origin.origin !== options.hostOrigin ||
+            !['https:', 'http:'].includes(origin.protocol))
+            throw new Error('Expected exact HTTP(S) host origin');
+        if (origin.protocol === 'http:' &&
+            !['localhost', '127.0.0.1', '[::1]'].includes(origin.hostname))
+            throw new Error('Host origin requires HTTPS');
+        this.#window = options.window ?? window;
+        this.#host = options.hostWindow;
+        if (this.#host === this.#window)
+            throw new Error('MCP Apps requires an embedded host window');
+        this.#origin = options.hostOrigin;
+        this.#timeout = options.timeoutMs ?? 15000;
+        if (!Number.isSafeInteger(this.#timeout) ||
+            this.#timeout < 1 ||
+            this.#timeout > 120000)
+            throw new Error('Invalid request timeout');
+        this.#appInfo = {
+            name: string(options.appInfo.name, 128),
+            version: string(options.appInfo.version, 128),
+        };
+        this.#modes = (options.availableDisplayModes ?? ['inline']).map(mode);
+        if (!this.#modes.length || this.#modes.length > 3)
+            throw new Error('Invalid app display modes');
+        this.#prefix = this.#window.crypto.randomUUID();
+    }
+    /** Aborts component-owned asynchronous work on host teardown or local disposal. */
+    get signal() {
+        return this.#lifetime.signal;
+    }
+    get snapshot() {
+        return structuredClone(this.#snapshot);
+    }
+    subscribe(listener) {
+        if (this.#snapshot.state === 'disposed')
+            return () => { };
+        this.#subscribers.add(listener);
+        try {
+            listener(this.snapshot);
+        }
+        catch {
+            /* Observer owns its error reporting, including initial delivery. */
+        }
+        return () => {
+            this.#subscribers.delete(listener);
+        };
+    }
+    #emit() {
+        for (const listener of this.#subscribers) {
+            // One component observer cannot prevent transport cleanup or other observers.
+            try {
+                listener(this.snapshot);
+            }
+            catch {
+                /* Observer owns its error reporting. */
+            }
+        }
+    }
+    #post(message) {
+        json(message);
+        this.#host.postMessage(message, this.#origin);
+    }
+    #request(method, params, signal) {
+        if (this.#snapshot.state === 'disposed' || signal?.aborted)
+            return Promise.reject(new Error('MCP Apps request cancelled'));
+        if (this.#pending.size >= 32)
+            return Promise.reject(new Error('Too many pending MCP Apps requests'));
+        const requestId = `${this.#prefix}:${++this.#sequence}`;
+        return new Promise((resolve, reject) => {
+            const cancel = () => {
+                const pending = this.#pending.get(requestId);
+                if (!pending)
+                    return;
+                this.#pending.delete(requestId);
+                pending.cleanup();
+                reject(new Error('MCP Apps request cancelled or timed out'));
+                try {
+                    this.#post({
+                        jsonrpc: '2.0',
+                        method: 'notifications/cancelled',
+                        params: { requestId },
+                    });
+                }
+                catch {
+                    /* Local cancellation remains effective. */
+                }
+            };
+            const timer = setTimeout(cancel, this.#timeout);
+            const cleanup = () => {
+                clearTimeout(timer);
+                signal?.removeEventListener('abort', cancel);
+            };
+            this.#pending.set(requestId, { resolve, reject, cleanup });
+            signal?.addEventListener('abort', cancel, { once: true });
+            try {
+                this.#post({ jsonrpc: '2.0', id: requestId, method, params });
+            }
+            catch (error) {
+                this.#pending.delete(requestId);
+                cleanup();
+                reject(error);
+            }
+        });
+    }
+    /** Negotiate once. Failed or timed-out negotiation closes this instance permanently. */
+    connect() {
+        if (this.#connect)
+            return this.#connect;
+        if (this.#snapshot.state === 'disposed')
+            return Promise.reject(new Error('MCP Apps bridge disposed'));
+        this.#snapshot.state = 'connecting';
+        this.#window.addEventListener('message', this.#receive);
+        this.#connect = this.#request('ui/initialize', {
+            protocolVersion: MCP_APPS_PROTOCOL_VERSION,
+            appInfo: this.#appInfo,
+            appCapabilities: { availableDisplayModes: this.#modes },
+        })
+            .then((value) => {
+            if (this.#snapshot.state === 'disposed')
+                throw new Error('MCP Apps bridge disposed');
+            const result = object(value);
+            if (result.protocolVersion !== MCP_APPS_PROTOCOL_VERSION)
+                throw new Error('Unsupported MCP Apps protocol version');
+            const info = object(result.hostInfo);
+            string(info.name, 128);
+            string(info.version, 128);
+            this.#snapshot.hostCapabilities = capabilities(result.hostCapabilities);
+            this.#snapshot.hostContext = context(result.hostContext);
+            this.#snapshot.rawHostContext = structuredClone(object(result.hostContext));
+            this.#snapshot.rawHostCapabilities = structuredClone(object(result.hostCapabilities));
+            this.#post({ jsonrpc: '2.0', method: 'ui/notifications/initialized' });
+            this.#snapshot.state = 'ready';
+            this.#emit();
+        })
+            .catch((error) => {
+            this.dispose();
+            throw error;
+        });
+        // Publish only after reentrant observers can reuse the same negotiation.
+        this.#emit();
+        return this.#connect;
+    }
+    #ready() {
+        if (this.#snapshot.state !== 'ready')
+            throw new Error('MCP Apps bridge is not ready');
+    }
+    #require(capability) {
+        this.#ready();
+        if (!this.#snapshot.hostCapabilities[capability])
+            throw new Error(`Host capability unavailable: ${capability}`);
+    }
+    /**
+     * Opt in to a finite extension contract after initialization. The adapter must
+     * validate its method-specific schemas; this handle never bypasses transport,
+     * lifecycle, or native text-method capability checks.
+     */
+    registerExtension(declaration) {
+        this.#ready();
+        const definition = extensionDefinition(declaration, this.#snapshot.rawHostCapabilities);
+        if (this.#extensions.size >= 16 || this.#extensions.has(definition.id))
+            throw new Error('Extension already registered or registration limit reached');
+        const names = [...definition.methods, ...definition.notifications];
+        if (new Set(names).size !== names.length)
+            throw new Error('Extension request/notification collision');
+        for (const registered of this.#extensions.values()) {
+            const existing = [
+                ...registered.definition.methods,
+                ...registered.definition.notifications,
+            ];
+            if (names.some((name) => existing.includes(name)))
+                throw new Error('Extension method already registered');
+        }
+        const state = {
+            definition,
+            lifetime: new AbortController(),
+            listeners: new Set(),
+        };
+        this.#extensions.set(definition.id, state);
+        const active = () => {
+            this.#ready();
+            if (this.#extensions.get(definition.id) !== state ||
+                state.lifetime.signal.aborted)
+                throw new Error('MCP Apps extension disposed');
+        };
+        const dispose = () => {
+            if (this.#extensions.get(definition.id) !== state)
+                return;
+            this.#extensions.delete(definition.id);
+            state.listeners.clear();
+            state.lifetime.abort();
+        };
+        return Object.freeze({
+            signal: state.lifetime.signal,
+            request: async (method, params, signal) => {
+                active();
+                if (!definition.methods.includes(method))
+                    throw new Error('Extension method is not registered');
+                json(params);
+                object(params);
+                this.#validateNativeExtensionRequest(method, params);
+                const requestSignal = signal
+                    ? AbortSignal.any([state.lifetime.signal, signal])
+                    : state.lifetime.signal;
+                const result = await this.#request(method, structuredClone(params), requestSignal);
+                active();
+                if (requestSignal.aborted)
+                    throw new Error('MCP Apps extension request cancelled');
+                object(result);
+                if (method === 'ui/message' || method === 'ui/update-model-context')
+                    success(result);
+                return structuredClone(result);
+            },
+            subscribe: (listener) => {
+                active();
+                if (typeof listener !== 'function' || state.listeners.size >= 32)
+                    throw new Error('Invalid extension listener or listener limit reached');
+                state.listeners.add(listener);
+                return () => {
+                    state.listeners.delete(listener);
+                };
+            },
+            dispose,
+        });
+    }
+    #validateNativeExtensionRequest(method, params) {
+        if (method !== 'ui/message' && method !== 'ui/update-model-context')
+            return;
+        const capability = method === 'ui/message' ? 'message' : 'updateModelContext';
+        this.#require(capability);
+        const caps = this.#snapshot.hostCapabilities[capability];
+        if (method === 'ui/message' &&
+            (params.role !== 'user' || params.content === undefined))
+            throw new Error('Invalid native message shape');
+        if (params.content !== undefined) {
+            if (!caps?.text)
+                throw new Error('Host text modality unavailable');
+            const blocks = toolResult({ content: params.content }).content;
+            for (const block of blocks)
+                string(block.text, 16384);
+        }
+        if (method === 'ui/update-model-context' &&
+            params.structuredContent !== undefined) {
+            if (!this.#snapshot.hostCapabilities.updateModelContext?.structuredContent)
+                throw new Error('Host structured modality unavailable');
+            object(params.structuredContent);
+        }
+    }
+    #notifyExtensions(method, params) {
+        for (const state of [...this.#extensions.values()]) {
+            if (!state.definition.notifications.includes(method) ||
+                state.lifetime.signal.aborted)
+                continue;
+            for (const listener of [...state.listeners]) {
+                if (state.lifetime.signal.aborted || !state.listeners.has(listener))
+                    continue;
+                try {
+                    listener(method, structuredClone(params));
+                }
+                catch {
+                    /* Adapter owns schema and observer errors. */
+                }
+            }
+        }
+    }
+    /** Calls the server through the host. No credentials, tenant overrides or approval metadata. */
+    async callTool(name, args = {}, signal) {
+        this.#require('serverTools');
+        if (!/^[A-Za-z0-9_.-]{1,128}$/.test(name))
+            throw new Error('Invalid tool name');
+        object(args);
+        return toolResult(await this.#request('tools/call', { name, arguments: args }, signal));
+    }
+    /** Human review destination only; applications own their approved URL allowlist. */
+    async openLink(url, signal) {
+        this.#require('openLinks');
+        const parsed = new URL(string(url));
+        if (parsed.protocol !== 'https:' || parsed.username || parsed.password)
+            throw new Error('Expected credential-free HTTPS link');
+        success(await this.#request('ui/open-link', { url: parsed.href }, signal));
+    }
+    async sendMessage(text, signal) {
+        this.#require('message');
+        if (!this.#snapshot.hostCapabilities.message?.text)
+            throw new Error('Host text modality unavailable');
+        success(await this.#request('ui/message', {
+            role: 'user',
+            content: [{ type: 'text', text: string(text, 16384) }],
+        }, signal));
+    }
+    async updateModelContext(value, signal) {
+        this.#require('updateModelContext');
+        const caps = this.#snapshot.hostCapabilities.updateModelContext;
+        const params = {};
+        if (value.text !== undefined) {
+            if (!caps?.text)
+                throw new Error('Host text modality unavailable');
+            params.content = [{ type: 'text', text: string(value.text, 16384) }];
+        }
+        if (value.structuredContent !== undefined) {
+            if (!caps?.structuredContent)
+                throw new Error('Host structured modality unavailable');
+            params.structuredContent = object(value.structuredContent);
+        }
+        success(await this.#request('ui/update-model-context', params, signal));
+    }
+    async requestDisplayMode(value, signal) {
+        this.#ready();
+        const requested = mode(value);
+        if (!this.#modes.includes(requested) ||
+            !(this.#snapshot.hostContext.availableDisplayModes ?? ['inline']).includes(requested))
+            throw new Error('Display mode unavailable');
+        return mode(object(await this.#request('ui/request-display-mode', { mode: requested }, signal)).mode);
+    }
+    reportSize(width, height) {
+        this.#ready();
+        if (![width, height].every((v) => Number.isFinite(v) && v >= 0 && v <= 100000))
+            throw new Error('Invalid view dimensions');
+        this.#post({
+            jsonrpc: '2.0',
+            method: 'ui/notifications/size-changed',
+            params: { width, height },
+        });
+    }
+    #receive = (event) => {
+        if (event.source !== this.#host ||
+            event.origin !== this.#origin ||
+            this.#snapshot.state === 'disposed')
+            return;
+        try {
+            json(event.data);
+            const message = object(event.data);
+            if (message.jsonrpc !== '2.0')
+                return;
+            if (typeof message.method === 'string') {
+                if ('result' in message ||
+                    'error' in message ||
+                    this.#snapshot.state !== 'ready')
+                    return;
+                this.#incoming(message);
+                return;
+            }
+            if (!id(message.id) ||
+                typeof message.id !== 'string' ||
+                'result' in message === 'error' in message)
+                return;
+            const pending = this.#pending.get(message.id);
+            if (!pending)
+                return;
+            let error;
+            if ('error' in message) {
+                const failure = object(message.error);
+                if (!Number.isSafeInteger(failure.code))
+                    return;
+                error = new Error(`Host error ${failure.code}: ${string(failure.message, 4096)}`);
+            }
+            this.#pending.delete(message.id);
+            pending.cleanup();
+            if (error)
+                pending.reject(error);
+            else
+                pending.resolve(message.result);
+        }
+        catch {
+            /* Malformed/untrusted messages cannot change lifecycle or settle a request. */
+        }
+    };
+    #incoming(message) {
+        if ('id' in message) {
+            if (!id(message.id))
+                return;
+            if (message.method === 'ping' ||
+                message.method === 'ui/resource-teardown') {
+                if (message.params !== undefined)
+                    object(message.params);
+                try {
+                    this.#post({ jsonrpc: '2.0', id: message.id, result: {} });
+                }
+                finally {
+                    if (message.method === 'ui/resource-teardown')
+                        this.dispose();
+                }
+            }
+            else {
+                this.#post({
+                    jsonrpc: '2.0',
+                    id: message.id,
+                    error: { code: -32601, message: 'Method not found' },
+                });
+            }
+            return;
+        }
+        const params = object(message.params);
+        switch (message.method) {
+            case 'ui/notifications/host-context-changed': {
+                const projected = context(params);
+                const merged = { ...this.#snapshot.rawHostContext, ...params };
+                // Each notification is bounded, and accumulated extension state must be too.
+                json(merged);
+                this.#snapshot.hostContext = {
+                    ...this.#snapshot.hostContext,
+                    ...projected,
+                };
+                this.#snapshot.rawHostContext = structuredClone(merged);
+                break;
+            }
+            case 'ui/notifications/tool-input':
+                if (this.#inputReceived || this.#terminalReceived)
+                    return;
+                this.#snapshot.toolInput =
+                    params.arguments === undefined ? {} : object(params.arguments);
+                this.#inputReceived = true;
+                break;
+            case 'ui/notifications/tool-result':
+                if (!this.#inputReceived || this.#terminalReceived)
+                    return;
+                this.#snapshot.toolResult = toolResult(params);
+                this.#terminalReceived = true;
+                break;
+            case 'ui/notifications/tool-cancelled':
+                if (this.#terminalReceived)
+                    return;
+                if (params.reason !== undefined)
+                    string(params.reason);
+                this.#snapshot.cancelled = true;
+                this.#terminalReceived = true;
+                break;
+            default:
+                this.#notifyExtensions(message.method, params);
+                return;
+        }
+        this.#emit();
+    }
+    /** Idempotent. Pending requests reject; late responses and notifications have no owner. */
+    dispose() {
+        if (this.#snapshot.state === 'disposed')
+            return;
+        this.#snapshot.state = 'disposed';
+        this.#window.removeEventListener('message', this.#receive);
+        this.#lifetime.abort();
+        for (const state of this.#extensions.values()) {
+            state.listeners.clear();
+            state.lifetime.abort();
+        }
+        this.#extensions.clear();
+        for (const [requestId, pending] of this.#pending) {
+            pending.cleanup();
+            pending.reject(new Error('MCP Apps bridge disposed'));
+            try {
+                this.#post({
+                    jsonrpc: '2.0',
+                    method: 'notifications/cancelled',
+                    params: { requestId },
+                });
+            }
+            catch {
+                /* Best effort transport cancellation. */
+            }
+        }
+        this.#pending.clear();
+        this.#emit();
+        this.#subscribers.clear();
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAatD,OAAO,EACL,YAAY,EACZ,OAAO,EACP,EAAE,EACF,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,MAAM,EACN,OAAO,EACP,UAAU,GACX,MAAM,iBAAiB,CAAC;AAUzB,sEAAsE;AACtE,MAAM,CAAC,MAAM,yBAAyB,GAAG,YAAY,CAAC;AACtD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,wBAAwB,GACnC,0CAA0C,CAAC;AA4B7C,yFAAyF;AACzF,MAAM,OAAO,YAAY;IACd,KAAK,CAAS;IACd,OAAO,CAAS;IAChB,OAAO,CAAS;IAChB,QAAQ,CAAS;IACjB,QAAQ,CAAoC;IAC5C,MAAM,CAAgB;IACtB,OAAO,CAAS;IAChB,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACtC,WAAW,GAAG,IAAI,GAAG,EAA+B,CAAC;IACrD,YAAY,GAAG,IAAI,GAAG,EAAsC,CAAC;IAC7D,SAAS,GAAG,IAAI,eAAe,EAAE,CAAC;IAC3C,SAAS,GAAG,CAAC,CAAC;IACd,cAAc,GAAG,KAAK,CAAC;IACvB,iBAAiB,GAAG,KAAK,CAAC;IAC1B,QAAQ,CAAiB;IACzB,SAAS,GAAmB;QAC1B,KAAK,EAAE,MAAM;QACb,gBAAgB,EAAE,EAAE;QACpB,WAAW,EAAE,EAAE;QACf,cAAc,EAAE,EAAE;QAClB,mBAAmB,EAAE,EAAE;KACxB,CAAC;IAEF,YAAY,OAA4B;QACtC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3C,IACE,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,UAAU;YACpC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;YAE9C,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,IACE,MAAM,CAAC,QAAQ,KAAK,OAAO;YAC3B,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;YAE9D,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC;QAChC,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO;YAC7B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;QAC3C,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;YACpC,IAAI,CAAC,QAAQ,GAAG,CAAC;YACjB,IAAI,CAAC,QAAQ,GAAG,MAAM;YAEtB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,GAAG;YACd,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;YACvC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SAC9C,CAAC;QACF,IAAI,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,qBAAqB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IAClD,CAAC;IAED,mFAAmF;IACnF,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;IAC/B,CAAC;IACD,IAAI,QAAQ;QACV,OAAO,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IACD,SAAS,CAAC,QAA4C;QACpD,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,UAAU;YAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;QACzD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;QACD,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC,CAAC;IACJ,CAAC;IACD,KAAK;QACH,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACzC,8EAA8E;YAC9E,IAAI,CAAC;gBACH,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,wCAAwC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,CAAC,OAAgC;QACpC,IAAI,CAAC,OAAO,CAAC,CAAC;QACd,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IACD,QAAQ,CACN,MAAc,EACd,MAA+B,EAC/B,MAAoB;QAEpB,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,UAAU,IAAI,MAAM,EAAE,OAAO;YACxD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE;YAC1B,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,GAAG,EAAE;gBAClB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC7C,IAAI,CAAC,OAAO;oBAAE,OAAO;gBACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAChC,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC;gBAC7D,IAAI,CAAC;oBACH,IAAI,CAAC,KAAK,CAAC;wBACT,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,yBAAyB;wBACjC,MAAM,EAAE,EAAE,SAAS,EAAE;qBACtB,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,2CAA2C;gBAC7C,CAAC;YACH,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC/C,CAAC,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3D,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAChE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAChC,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,wFAAwF;IACxF,OAAO;QACL,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACxC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,UAAU;YACrC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,CAAC,KAAK,GAAG,YAAY,CAAC;QACpC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE;YAC7C,eAAe,EAAE,yBAAyB;YAC1C,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,eAAe,EAAE,EAAE,qBAAqB,EAAE,IAAI,CAAC,MAAM,EAAE;SACxD,CAAC;aACC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACd,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,UAAU;gBACrC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,MAAM,CAAC,eAAe,KAAK,yBAAyB;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,SAAS,CAAC,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACxE,IAAI,CAAC,SAAS,CAAC,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACzD,IAAI,CAAC,SAAS,CAAC,cAAc,GAAG,eAAe,CAC7C,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAC3B,CAAC;YACF,IAAI,CAAC,SAAS,CAAC,mBAAmB,GAAG,eAAe,CAClD,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAChC,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC,CAAC;YACvE,IAAI,CAAC,SAAS,CAAC,KAAK,GAAG,OAAO,CAAC;YAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACf,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACL,yEAAyE;QACzE,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IACD,MAAM;QACJ,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,OAAO;YAClC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACpD,CAAC;IACD,QAAQ,CAAC,UAAkC;QACzC,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,UAAU,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,gCAAgC,UAAU,EAAE,CAAC,CAAC;IAClE,CAAC;IACD;;;;OAIG;IACH,iBAAiB,CAAC,WAAsC;QACtD,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,MAAM,UAAU,GAAG,mBAAmB,CACpC,WAAW,EACX,IAAI,CAAC,SAAS,CAAC,mBAAmB,CACnC,CAAC;QACF,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;QACJ,MAAM,KAAK,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC;QACnE,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;YACtC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAG;gBACf,GAAG,UAAU,CAAC,UAAU,CAAC,OAAO;gBAChC,GAAG,UAAU,CAAC,UAAU,CAAC,aAAa;aACvC,CAAC;YACF,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,KAAK,GAAwB;YACjC,UAAU;YACV,QAAQ,EAAE,IAAI,eAAe,EAAE;YAC/B,SAAS,EAAE,IAAI,GAAG,EAAE;SACrB,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,IACE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,KAAK;gBAC7C,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO;gBAE7B,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnD,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,KAAK;gBAAE,OAAO;YAC1D,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACvC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YACxB,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;YAC7B,OAAO,EAAE,KAAK,EACZ,MAAc,EACd,MAA+B,EAC/B,MAAoB,EACpB,EAAE;gBACF,MAAM,EAAE,CAAC;gBACT,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACtC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACxD,IAAI,CAAC,MAAM,CAAC,CAAC;gBACb,MAAM,CAAC,MAAM,CAAC,CAAC;gBACf,IAAI,CAAC,+BAA+B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACrD,MAAM,aAAa,GAAG,MAAM;oBAC1B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBAClD,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAChC,MAAM,EACN,eAAe,CAAC,MAAM,CAAC,EACvB,aAAa,CACd,CAAC;gBACF,MAAM,EAAE,CAAC;gBACT,IAAI,aAAa,CAAC,OAAO;oBACvB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBAC1D,MAAM,CAAC,MAAM,CAAC,CAAC;gBACf,IAAI,MAAM,KAAK,YAAY,IAAI,MAAM,KAAK,yBAAyB;oBACjE,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClB,OAAO,eAAe,CAAC,MAAiC,CAAC,CAAC;YAC5D,CAAC;YACD,SAAS,EAAE,CACT,QAAmE,EACnE,EAAE;gBACF,MAAM,EAAE,CAAC;gBACT,IAAI,OAAO,QAAQ,KAAK,UAAU,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE;oBAC9D,MAAM,IAAI,KAAK,CACb,sDAAsD,CACvD,CAAC;gBACJ,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC9B,OAAO,GAAG,EAAE;oBACV,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACnC,CAAC,CAAC;YACJ,CAAC;YACD,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IACD,+BAA+B,CAC7B,MAAc,EACd,MAA+B;QAE/B,IAAI,MAAM,KAAK,YAAY,IAAI,MAAM,KAAK,yBAAyB;YAAE,OAAO;QAC5E,MAAM,UAAU,GACd,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC;QAC7D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACzD,IACE,MAAM,KAAK,YAAY;YACvB,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC;YAExD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,EAAE,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACnE,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC;YAC/D,KAAK,MAAM,KAAK,IAAI,MAAM;gBAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,IACE,MAAM,KAAK,yBAAyB;YACpC,MAAM,CAAC,iBAAiB,KAAK,SAAS,EACtC,CAAC;YACD,IACE,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,iBAAiB;gBAEtE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,iBAAiB,CAAC,MAAc,EAAE,MAA+B;QAC/D,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YACnD,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAChD,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO;gBAE7B,SAAS;YACX,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC5C,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;oBACjE,SAAS;gBACX,IAAI,CAAC;oBACH,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5C,CAAC;gBAAC,MAAM,CAAC;oBACP,8CAA8C;gBAChD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,gGAAgG;IAChG,KAAK,CAAC,QAAQ,CACZ,IAAY,EACZ,OAAgC,EAAE,EAClC,MAAoB;QAEpB,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC7B,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,CAAC;QACb,OAAO,UAAU,CACf,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,CACrE,CAAC;IACJ,CAAC;IACD,oFAAoF;IACpF,KAAK,CAAC,QAAQ,CAAC,GAAW,EAAE,MAAoB;QAC9C,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ;YACpE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,MAAoB;QAClD,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI;YAChD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,OAAO,CACL,MAAM,IAAI,CAAC,QAAQ,CACjB,YAAY,EACZ;YACE,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;SACvD,EACD,MAAM,CACP,CACF,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,kBAAkB,CACtB,KAAqE,EACrE,MAAoB;QAEpB,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,kBAAkB,CAAC;QAChE,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,EAAE,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACnE,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC,IAAI,EAAE,iBAAiB;gBAC1B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,MAAM,CAAC,iBAAiB,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,KAAK,CAAC,kBAAkB,CACtB,KAAkB,EAClB,MAAoB;QAEpB,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IACE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAChC,CAAC,CACC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,qBAAqB,IAAI,CAAC,QAAQ,CAAC,CAC/D,CAAC,QAAQ,CAAC,SAAS,CAAC;YAErB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,OAAO,IAAI,CACT,MAAM,CACJ,MAAM,IAAI,CAAC,QAAQ,CACjB,yBAAyB,EACzB,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,MAAM,CACP,CACF,CAAC,IAAI,CACP,CAAC;IACJ,CAAC;IACD,UAAU,CAAC,KAAa,EAAE,MAAc;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IACE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;YAE1E,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,CAAC;YACT,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,+BAA+B;YACvC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;SAC1B,CAAC,CAAC;IACL,CAAC;IACQ,QAAQ,GAAG,CAAC,KAAmB,EAAQ,EAAE;QAChD,IACE,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK;YAC3B,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO;YAC7B,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,UAAU;YAEnC,OAAO;QACT,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK;gBAAE,OAAO;YACtC,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACvC,IACE,QAAQ,IAAI,OAAO;oBACnB,OAAO,IAAI,OAAO;oBAClB,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,OAAO;oBAEhC,OAAO;gBACT,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBACxB,OAAO;YACT,CAAC;YACD,IACE,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;gBACf,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ;gBAC9B,QAAQ,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO;gBAE1C,OAAO;YACT,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,IAAI,KAAwB,CAAC;YAC7B,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;gBACvB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACtC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC;oBAAE,OAAO;gBAChD,KAAK,GAAG,IAAI,KAAK,CACf,cAAc,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAC/D,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACjC,OAAO,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,KAAK;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;;gBAC5B,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,+EAA+E;QACjF,CAAC;IACH,CAAC,CAAC;IACF,SAAS,CAAC,OAAgC;QACxC,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;gBAAE,OAAO;YAC5B,IACE,OAAO,CAAC,MAAM,KAAK,MAAM;gBACzB,OAAO,CAAC,MAAM,KAAK,sBAAsB,EACzC,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;oBAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACzD,IAAI,CAAC;oBACH,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC7D,CAAC;wBAAS,CAAC;oBACT,IAAI,OAAO,CAAC,MAAM,KAAK,sBAAsB;wBAAE,IAAI,CAAC,OAAO,EAAE,CAAC;gBAChE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,KAAK,CAAC;oBACT,OAAO,EAAE,KAAK;oBACd,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE;iBACrD,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtC,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;YACvB,KAAK,uCAAuC,CAAC,CAAC,CAAC;gBAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;gBAC/D,6EAA6E;gBAC7E,IAAI,CAAC,MAAM,CAAC,CAAC;gBACb,IAAI,CAAC,SAAS,CAAC,WAAW,GAAG;oBAC3B,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW;oBAC7B,GAAG,SAAS;iBACb,CAAC;gBACF,IAAI,CAAC,SAAS,CAAC,cAAc,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;gBACxD,MAAM;YACR,CAAC;YACD,KAAK,6BAA6B;gBAChC,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,iBAAiB;oBAAE,OAAO;gBAC1D,IAAI,CAAC,SAAS,CAAC,SAAS;oBACtB,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACjE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC3B,MAAM;YACR,KAAK,8BAA8B;gBACjC,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,iBAAiB;oBAAE,OAAO;gBAC3D,IAAI,CAAC,SAAS,CAAC,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;gBAC/C,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;gBAC9B,MAAM;YACR,KAAK,iCAAiC;gBACpC,IAAI,IAAI,CAAC,iBAAiB;oBAAE,OAAO;gBACnC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;oBAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACvD,IAAI,CAAC,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC;gBAChC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;gBAC9B,MAAM;YACR;gBACE,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAgB,EAAE,MAAM,CAAC,CAAC;gBACzD,OAAO;QACX,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IACD,2FAA2F;IAC3F,OAAO;QACL,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,UAAU;YAAE,OAAO;QAChD,IAAI,CAAC,SAAS,CAAC,KAAK,GAAG,UAAU,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YACxB,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjD,OAAO,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;YACtD,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC;oBACT,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,yBAAyB;oBACjC,MAAM,EAAE,EAAE,SAAS,EAAE;iBACtB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,yCAAyC;YAC3C,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;CACF"}

package/dist/validation.d.ts

@@ -0,0 +1,47 @@
+/** Bounded JSON only. Never stringify arbitrary incoming objects before checking depth. */
+export declare function json(value: unknown): void;
+export declare function record(v: unknown): v is Record<string, unknown>;
+export declare function object(v: unknown): Record<string, unknown>;
+export declare function string(v: unknown, max?: number): string;
+export declare function boolean(v: unknown): void;
+export declare function id(v: unknown): v is string | number;
+export type DisplayMode = 'inline' | 'fullscreen' | 'pip';
+export declare function mode(v: unknown): DisplayMode;
+export interface TextContent {
+    type: 'text';
+    text: string;
+}
+export interface ToolResult {
+    content: TextContent[];
+    structuredContent?: Record<string, unknown>;
+    isError?: boolean;
+}
+/** This bridge intentionally supports text + structured data, not binary content. */
+export declare function toolResult(v: unknown): ToolResult;
+export interface HostCapabilities {
+    openLinks?: Record<string, never>;
+    serverTools?: {
+        listChanged?: boolean;
+    };
+    message?: {
+        text?: Record<string, never>;
+    };
+    updateModelContext?: {
+        text?: Record<string, never>;
+        structuredContent?: Record<string, never>;
+    };
+}
+/** Unknown capabilities never grant behavior; known malformed fields fail closed. */
+export declare function capabilities(v: unknown): HostCapabilities;
+/** Deliberately non-executable subset: host CSS, tool definitions and unknown keys are not applied. */
+export interface HostContext {
+    theme?: 'light' | 'dark';
+    displayMode?: DisplayMode;
+    availableDisplayModes?: DisplayMode[];
+    platform?: 'web' | 'desktop' | 'mobile';
+    locale?: string;
+    timeZone?: string;
+}
+export declare function context(v: unknown): HostContext;
+export declare function success(v: unknown): void;
+//# sourceMappingURL=validation.d.ts.map

package/dist/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,wBAAgB,IAAI,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CA6CzC;AACD,wBAAgB,MAAM,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQ/D;AACD,wBAAgB,MAAM,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAG1D;AACD,wBAAgB,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,SAAO,GAAG,MAAM,CAIrD;AACD,wBAAgB,OAAO,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,CAExC;AACD,wBAAgB,EAAE,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,GAAG,MAAM,CAKnD;AACD,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,YAAY,GAAG,KAAK,CAAC;AAC1D,wBAAgB,IAAI,CAAC,CAAC,EAAE,OAAO,GAAG,WAAW,CAI5C;AACD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AACD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AACD,qFAAqF;AACrF,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,UAAU,CAkBjD;AACD,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAClC,WAAW,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACxC,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;KAAE,CAAC;IAC3C,kBAAkB,CAAC,EAAE;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;KAC3C,CAAC;CACH;AACD,qFAAqF;AACrF,wBAAgB,YAAY,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CA+BzD;AACD,uGAAuG;AACvG,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,qBAAqB,CAAC,EAAE,WAAW,EAAE,CAAC;IACtC,QAAQ,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AACD,wBAAgB,OAAO,CAAC,CAAC,EAAE,OAAO,GAAG,WAAW,CA0B/C;AACD,wBAAgB,OAAO,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,CAIxC"}

package/dist/validation.js

@@ -0,0 +1,169 @@
+/** Bounded JSON only. Never stringify arbitrary incoming objects before checking depth. */
+export function json(value) {
+    let budget = 131072;
+    const visit = (v, depth) => {
+        if (--budget < 0 || depth > 24)
+            throw new Error('MCP Apps payload exceeds limits');
+        if (v === null || typeof v === 'boolean')
+            return;
+        if (typeof v === 'number' && Number.isFinite(v))
+            return;
+        if (typeof v === 'string') {
+            budget -= v.length * 3;
+            if (budget < 0)
+                throw new Error('MCP Apps payload exceeds limits');
+            return;
+        }
+        if (Array.isArray(v)) {
+            const length = Object.getOwnPropertyDescriptor(v, 'length')?.value;
+            if (!Number.isSafeInteger(length) || length < 0 || length > 4096)
+                throw new Error('MCP Apps array exceeds limits');
+            // Structured clone preserves named array properties. JSON does not: reject
+            // them (including symbol iterators), holes and accessors before any reads.
+            if (Reflect.ownKeys(v).length !== length + 1)
+                throw new Error('Expected dense JSON array');
+            const values = [];
+            for (let index = 0; index < length; index++) {
+                const descriptor = Object.getOwnPropertyDescriptor(v, String(index));
+                if (!descriptor || !('value' in descriptor))
+                    throw new Error('Expected JSON array data property');
+                values.push(descriptor.value);
+            }
+            for (let index = 0; index < length; index++)
+                visit(values[index], depth + 1);
+            return;
+        }
+        if (!record(v))
+            throw new Error('Expected JSON object');
+        const keys = Object.keys(v);
+        if (keys.length > 1024)
+            throw new Error('MCP Apps object exceeds limits');
+        for (const key of keys) {
+            if (['__proto__', 'constructor', 'prototype'].includes(key))
+                throw new Error('Unsafe JSON key');
+            budget -= key.length * 3;
+            const descriptor = Object.getOwnPropertyDescriptor(v, key);
+            if (!descriptor || !('value' in descriptor))
+                throw new Error('Expected JSON property');
+            visit(descriptor.value, depth + 1);
+        }
+    };
+    visit(value, 0);
+}
+export function record(v) {
+    return (typeof v === 'object' &&
+        v !== null &&
+        !Array.isArray(v) &&
+        (Object.getPrototypeOf(v) === Object.prototype ||
+            Object.getPrototypeOf(v) === null));
+}
+export function object(v) {
+    if (!record(v))
+        throw new Error('Expected object');
+    return v;
+}
+export function string(v, max = 4096) {
+    if (typeof v !== 'string' || v.length > max)
+        throw new Error('Expected bounded string');
+    return v;
+}
+export function boolean(v) {
+    if (typeof v !== 'boolean')
+        throw new Error('Expected boolean');
+}
+export function id(v) {
+    return ((typeof v === 'string' && v.length > 0 && v.length <= 128) ||
+        (typeof v === 'number' && Number.isSafeInteger(v)));
+}
+export function mode(v) {
+    if (v !== 'inline' && v !== 'fullscreen' && v !== 'pip')
+        throw new Error('Unsupported display mode');
+    return v;
+}
+/** This bridge intentionally supports text + structured data, not binary content. */
+export function toolResult(v) {
+    const r = object(v);
+    if (!Array.isArray(r.content) || r.content.length > 128)
+        throw new Error('Invalid tool content');
+    const content = r.content.map((item) => {
+        const block = object(item);
+        if (block.type !== 'text')
+            throw new Error('Unsupported tool content modality');
+        return { type: 'text', text: string(block.text, 32768) };
+    });
+    if (r.isError !== undefined)
+        boolean(r.isError);
+    return {
+        content,
+        ...(r.structuredContent === undefined
+            ? {}
+            : { structuredContent: object(r.structuredContent) }),
+        ...(r.isError === undefined ? {} : { isError: r.isError }),
+    };
+}
+/** Unknown capabilities never grant behavior; known malformed fields fail closed. */
+export function capabilities(v) {
+    const input = object(v);
+    const out = {};
+    if (input.openLinks !== undefined) {
+        object(input.openLinks);
+        out.openLinks = {};
+    }
+    if (input.serverTools !== undefined) {
+        const tools = object(input.serverTools);
+        if (tools.listChanged !== undefined)
+            boolean(tools.listChanged);
+        out.serverTools =
+            tools.listChanged === undefined
+                ? {}
+                : { listChanged: tools.listChanged };
+    }
+    for (const key of ['message', 'updateModelContext']) {
+        if (input[key] === undefined)
+            continue;
+        const modalities = object(input[key]);
+        const value = {};
+        for (const modality of ['text', 'structuredContent']) {
+            if (modalities[modality] !== undefined) {
+                object(modalities[modality]);
+                value[modality] = {};
+            }
+        }
+        out[key] = value;
+    }
+    return out;
+}
+export function context(v) {
+    const input = object(v);
+    const out = {};
+    if (input.theme !== undefined) {
+        if (input.theme !== 'light' && input.theme !== 'dark')
+            throw new Error('Unsupported theme');
+        out.theme = input.theme;
+    }
+    if (input.displayMode !== undefined)
+        out.displayMode = mode(input.displayMode);
+    if (input.availableDisplayModes !== undefined) {
+        if (!Array.isArray(input.availableDisplayModes) ||
+            input.availableDisplayModes.length > 3)
+            throw new Error('Invalid modes');
+        out.availableDisplayModes = input.availableDisplayModes.map(mode);
+    }
+    if (input.platform !== undefined) {
+        if (!['web', 'desktop', 'mobile'].includes(string(input.platform)))
+            throw new Error('Unsupported platform');
+        out.platform = input.platform;
+    }
+    for (const key of ['locale', 'timeZone'])
+        if (input[key] !== undefined)
+            out[key] = string(input[key], 128);
+    return out;
+}
+export function success(v) {
+    const r = object(v);
+    if (r.isError !== undefined)
+        boolean(r.isError);
+    if (r.isError === true)
+        throw new Error('Host rejected request');
+}
+//# sourceMappingURL=validation.js.map

package/dist/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,MAAM,UAAU,IAAI,CAAC,KAAc;IACjC,IAAI,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,KAAa,EAAQ,EAAE;QAChD,IAAI,EAAE,MAAM,GAAG,CAAC,IAAI,KAAK,GAAG,EAAE;YAC5B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,SAAS;YAAE,OAAO;QACjD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO;QACxD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YACvB,IAAI,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,IAAI;gBAC9D,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,2EAA2E;YAC3E,2EAA2E;YAC3E,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,GAAG,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAc,EAAE,CAAC;YAC7B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACrE,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;oBACzC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACvD,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE;gBACzC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC1E,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACzD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YACzB,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC3D,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;gBACzC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC5C,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,CAAU;IAC/B,OAAO,CACL,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACV,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACjB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,SAAS;YAC5C,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CACrC,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,CAAU;IAC/B,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACnD,OAAO,CAAC,CAAC;AACX,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,CAAU,EAAE,GAAG,GAAG,IAAI;IAC3C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG;QACzC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,OAAO,CAAC,CAAC;AACX,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,CAAU;IAChC,IAAI,OAAO,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;AAClE,CAAC;AACD,MAAM,UAAU,EAAE,CAAC,CAAU;IAC3B,OAAO,CACL,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;QAC1D,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,CAAU;IAC7B,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,KAAK;QACrD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,OAAO,CAAC,CAAC;AACX,CAAC;AAUD,qFAAqF;AACrF,MAAM,UAAU,UAAU,CAAC,CAAU;IACnC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG;QACrD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YACvB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,OAAO,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO;QACL,OAAO;QACP,GAAG,CAAC,CAAC,CAAC,iBAAiB,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAkB,EAAE,CAAC;KACtE,CAAC;AACJ,CAAC;AAUD,qFAAqF;AACrF,MAAM,UAAU,YAAY,CAAC,CAAU;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACxB,GAAG,CAAC,SAAS,GAAG,EAAE,CAAC;IACrB,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;YAAE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChE,GAAG,CAAC,WAAW;YACb,KAAK,CAAC,WAAW,KAAK,SAAS;gBAC7B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAsB,EAAE,CAAC;IACtD,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAU,EAAE,CAAC;QAC7D,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,SAAS;QACvC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACtC,MAAM,KAAK,GAGP,EAAE,CAAC;QACP,KAAK,MAAM,QAAQ,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAU,EAAE,CAAC;YAC9D,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;gBACvC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC7B,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAUD,MAAM,UAAU,OAAO,CAAC,CAAU;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM;YACnD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QACjC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;QAC9C,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC;YAC3C,KAAK,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC;YAEtC,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACnC,GAAG,CAAC,qBAAqB,GAAG,KAAK,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAmC,CAAC;IAC3D,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAU;QAC/C,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACnE,OAAO,GAAG,CAAC;AACb,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,CAAU;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;AACnE,CAAC"}

package/package.json

@@ -1,6 +1,45 @@
 {
   "name": "@happyvertical/smrt-mcp-apps",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.51.38",
+  "description": "Framework-neutral browser bridge for portable MCP Apps",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "browser": "./dist/index.js",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "AGENTS.md",
+    "CLAUDE.md"
+  ],
+  "devDependencies": {
+    "@happyvertical/smrt-app-mcp": "0.51.38",
+    "@happyvertical/smrt-core": "0.51.38",
+    "@types/node": "24.13.6",
+    "typescript": "6.0.3",
+    "vitest": "4.1.10"
+  },
+  "author": "HappyVertical",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/happyvertical/smrt.git",
+    "directory": "packages/mcp-apps"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "test": "vitest run",
+    "test:e2e": "playwright test -c e2e/playwright.config.ts",
+    "verify:pack": "node ../../scripts/verify-package-types-exports.js ."
+  }
 }