@jini-ai/ui 0.1.2 → 0.3.0

package/dist/features/mcp-ui/escape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"escape.js","sourceRoot":"","sources":["../../../src/features/mcp-ui/escape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAC3C,OAAO,IAAI;SACR,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;SACxB,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC;SAC7B,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC"}

package/dist/features/mcp-ui/index.d.ts

@@ -0,0 +1,28 @@
+/**
+ * @module features/mcp-ui
+ *
+ * The non-React half of MCP-UI support: the protocol vocabulary, the `ui://` resource shapes, the
+ * confirmation-token store, and the surface builders that turn typed props into a self-contained
+ * HTML document.
+ *
+ * **Nothing in this subtree imports React or emits JSX, and nothing should.** Everything here
+ * ultimately produces a string that runs inside a sandboxed iframe with no bundler, no module
+ * loader, and no React runtime — a JSX element would have nothing to render into. The React Host
+ * that mounts these documents lives at `../../react/mcp-ui/` and depends on this direction only:
+ * it calls into these builders, and they never call back.
+ *
+ * Published as `@jini-ai/ui/mcp-ui/surfaces` rather than only through the React entry point, because
+ * the natural consumer of the builders is a **server** — an MCP tool handler returning a
+ * confirmation dialog has no use for a React Host and should not have to resolve `react` to import
+ * a string builder. (The reference implementation, a separate product outside this monorepo, is
+ * exactly that consumer: it hand-rolled `createUIResource`/`escapeHtml`/`escapeJsString` and a
+ * delete-confirmation template because it had nothing to import.)
+ */
+export * from './confirmation-store.js';
+export * from './early-message-buffer.js';
+export * from './escape.js';
+export * from './protocol.js';
+export * from './resource.js';
+export * from './sandbox-proxy.js';
+export * from './surfaces/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/features/mcp-ui/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/features/mcp-ui/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC"}

package/dist/features/mcp-ui/index.js

@@ -0,0 +1,28 @@
+/**
+ * @module features/mcp-ui
+ *
+ * The non-React half of MCP-UI support: the protocol vocabulary, the `ui://` resource shapes, the
+ * confirmation-token store, and the surface builders that turn typed props into a self-contained
+ * HTML document.
+ *
+ * **Nothing in this subtree imports React or emits JSX, and nothing should.** Everything here
+ * ultimately produces a string that runs inside a sandboxed iframe with no bundler, no module
+ * loader, and no React runtime — a JSX element would have nothing to render into. The React Host
+ * that mounts these documents lives at `../../react/mcp-ui/` and depends on this direction only:
+ * it calls into these builders, and they never call back.
+ *
+ * Published as `@jini-ai/ui/mcp-ui/surfaces` rather than only through the React entry point, because
+ * the natural consumer of the builders is a **server** — an MCP tool handler returning a
+ * confirmation dialog has no use for a React Host and should not have to resolve `react` to import
+ * a string builder. (The reference implementation, a separate product outside this monorepo, is
+ * exactly that consumer: it hand-rolled `createUIResource`/`escapeHtml`/`escapeJsString` and a
+ * delete-confirmation template because it had nothing to import.)
+ */
+export * from './confirmation-store.js';
+export * from './early-message-buffer.js';
+export * from './escape.js';
+export * from './protocol.js';
+export * from './resource.js';
+export * from './sandbox-proxy.js';
+export * from './surfaces/index.js';
+//# sourceMappingURL=index.js.map

package/dist/features/mcp-ui/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/features/mcp-ui/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC"}

package/dist/features/mcp-ui/protocol.d.ts

@@ -0,0 +1,59 @@
+/**
+ * @module features/mcp-ui/protocol
+ *
+ * The MCP Apps wire vocabulary, re-exported from `@jini-ai/agentic`'s `mcp-ui-apps.ts` rather than
+ * restated here.
+ *
+ * `mcp-ui-apps.ts` is the spec-verified module (re-checked 2026-07-28 against
+ * `github.com/modelcontextprotocol/ext-apps`, both the 2026-01-26 [Stable] text and the draft), and
+ * it already carries the two things a second copy would immediately lose: the audit history for
+ * which lifecycle messages travel in which direction, and `isJsonRpcMessage`'s hardening against
+ * malformed `postMessage` input found by live adversarial testing. Duplicating any of it would
+ * create a second surface to keep in sync with a moving spec, so this module owns nothing of the
+ * envelope — it only re-exports it, plus adds the one constant that genuinely belongs to *this*
+ * package: {@link MCP_UI_VIEW_SANDBOX}.
+ *
+ * ## What this package adds on top
+ *
+ * `mcp-ui-apps.ts` deliberately models the *envelope* and nothing else — it is transport-free and
+ * touches no browser globals. It therefore has no notion of:
+ * - the `ui://` **resource** a tool returns to get a View rendered at all (see `resource.ts`); that
+ *   half comes from mcp-ui / MCP Apps' resource conventions, not from the JSON-RPC envelope.
+ * - the **HTML** a View is made of (see `surfaces/`).
+ * - a **Host implementation** (see `../../react/mcp-ui/`).
+ *
+ * Those are this package's three additions, and they are the only additions — everything about the
+ * messages crossing the boundary comes from the re-exports below.
+ */
+export { JINI_PAGE_ACTION_METHOD, JSON_RPC_ERROR_CODES, MCP_UI_HOST_NOTIFICATIONS, MCP_UI_HOST_REQUESTS, MCP_UI_SANDBOX_NOTE, MCP_UI_VIEW_METHODS, MCP_UI_VIEW_NOTIFICATIONS, createJsonRpcError, createJsonRpcNotification, createJsonRpcRequest, createJsonRpcResult, createPageActionRequest, isJsonRpcMessage, isJsonRpcRequest, } from '@jini-ai/agentic';
+export type { JsonRpcError, JsonRpcMessage, JsonRpcNotification, JsonRpcRequest, JsonRpcResponse, } from '@jini-ai/agentic';
+/**
+ * The `sandbox` attribute every View this package renders gets — `allow-scripts` and nothing else.
+ *
+ * Exported as a constant rather than written inline at the one `<iframe>` so it can be asserted by
+ * a test and so the reason travels with it. `allow-same-origin` is **never** added, and this is not
+ * a conservative default that a host may relax: a surface built by `surfaces/` is delivered via
+ * `srcdoc`, which inherits the embedder's origin unless the sandbox withholds it. Adding
+ * `allow-same-origin` to a `srcdoc` frame therefore hands the generated document full same-origin
+ * access to the host page — its cookies, its storage, its DOM.
+ *
+ * The MCP Apps spec's own example does include `allow-same-origin`, and that is correct *there*,
+ * for the reason `MCP_UI_SANDBOX_NOTE` spells out: spec Views are served from a separate origin
+ * behind a sandbox proxy, so the flag grants access only to that isolated origin. `srcdoc` has no
+ * separate origin to be isolated to. Copying the spec's line here would be the single worst bug
+ * this package could ship, which is why it is a constant with this comment attached.
+ *
+ * Consequences the surface builders must live with, all of them deliberate:
+ * - `localStorage` / `sessionStorage` throw `SecurityError` on first access in an opaque origin, so
+ *   generated surfaces never touch storage.
+ * - a View cannot know the host's origin, so it posts to `'*'`; the Host authenticates by
+ *   `event.source` identity instead (see `../../react/mcp-ui/useMcpUiHost.ts`).
+ */
+export declare const MCP_UI_VIEW_SANDBOX = "allow-scripts";
+/**
+ * The MCP Apps protocol version this package's Host advertises and its generated Views request.
+ * The 2026-01-26 [Stable] release — not the draft, even though `mcp-ui-apps.ts` models draft
+ * additions too, because advertising a version implies supporting all of it.
+ */
+export declare const MCP_UI_PROTOCOL_VERSION = "2026-01-26";
+//# sourceMappingURL=protocol.d.ts.map

package/dist/features/mcp-ui/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../../src/features/mcp-ui/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,yBAAyB,EACzB,kBAAkB,EAClB,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,mBAAmB,kBAAkB,CAAC;AAEnD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,eAAe,CAAC"}

package/dist/features/mcp-ui/protocol.js

@@ -0,0 +1,58 @@
+/**
+ * @module features/mcp-ui/protocol
+ *
+ * The MCP Apps wire vocabulary, re-exported from `@jini-ai/agentic`'s `mcp-ui-apps.ts` rather than
+ * restated here.
+ *
+ * `mcp-ui-apps.ts` is the spec-verified module (re-checked 2026-07-28 against
+ * `github.com/modelcontextprotocol/ext-apps`, both the 2026-01-26 [Stable] text and the draft), and
+ * it already carries the two things a second copy would immediately lose: the audit history for
+ * which lifecycle messages travel in which direction, and `isJsonRpcMessage`'s hardening against
+ * malformed `postMessage` input found by live adversarial testing. Duplicating any of it would
+ * create a second surface to keep in sync with a moving spec, so this module owns nothing of the
+ * envelope — it only re-exports it, plus adds the one constant that genuinely belongs to *this*
+ * package: {@link MCP_UI_VIEW_SANDBOX}.
+ *
+ * ## What this package adds on top
+ *
+ * `mcp-ui-apps.ts` deliberately models the *envelope* and nothing else — it is transport-free and
+ * touches no browser globals. It therefore has no notion of:
+ * - the `ui://` **resource** a tool returns to get a View rendered at all (see `resource.ts`); that
+ *   half comes from mcp-ui / MCP Apps' resource conventions, not from the JSON-RPC envelope.
+ * - the **HTML** a View is made of (see `surfaces/`).
+ * - a **Host implementation** (see `../../react/mcp-ui/`).
+ *
+ * Those are this package's three additions, and they are the only additions — everything about the
+ * messages crossing the boundary comes from the re-exports below.
+ */
+export { JINI_PAGE_ACTION_METHOD, JSON_RPC_ERROR_CODES, MCP_UI_HOST_NOTIFICATIONS, MCP_UI_HOST_REQUESTS, MCP_UI_SANDBOX_NOTE, MCP_UI_VIEW_METHODS, MCP_UI_VIEW_NOTIFICATIONS, createJsonRpcError, createJsonRpcNotification, createJsonRpcRequest, createJsonRpcResult, createPageActionRequest, isJsonRpcMessage, isJsonRpcRequest, } from '@jini-ai/agentic';
+/**
+ * The `sandbox` attribute every View this package renders gets — `allow-scripts` and nothing else.
+ *
+ * Exported as a constant rather than written inline at the one `<iframe>` so it can be asserted by
+ * a test and so the reason travels with it. `allow-same-origin` is **never** added, and this is not
+ * a conservative default that a host may relax: a surface built by `surfaces/` is delivered via
+ * `srcdoc`, which inherits the embedder's origin unless the sandbox withholds it. Adding
+ * `allow-same-origin` to a `srcdoc` frame therefore hands the generated document full same-origin
+ * access to the host page — its cookies, its storage, its DOM.
+ *
+ * The MCP Apps spec's own example does include `allow-same-origin`, and that is correct *there*,
+ * for the reason `MCP_UI_SANDBOX_NOTE` spells out: spec Views are served from a separate origin
+ * behind a sandbox proxy, so the flag grants access only to that isolated origin. `srcdoc` has no
+ * separate origin to be isolated to. Copying the spec's line here would be the single worst bug
+ * this package could ship, which is why it is a constant with this comment attached.
+ *
+ * Consequences the surface builders must live with, all of them deliberate:
+ * - `localStorage` / `sessionStorage` throw `SecurityError` on first access in an opaque origin, so
+ *   generated surfaces never touch storage.
+ * - a View cannot know the host's origin, so it posts to `'*'`; the Host authenticates by
+ *   `event.source` identity instead (see `../../react/mcp-ui/useMcpUiHost.ts`).
+ */
+export const MCP_UI_VIEW_SANDBOX = 'allow-scripts';
+/**
+ * The MCP Apps protocol version this package's Host advertises and its generated Views request.
+ * The 2026-01-26 [Stable] release — not the draft, even though `mcp-ui-apps.ts` models draft
+ * additions too, because advertising a version implies supporting all of it.
+ */
+export const MCP_UI_PROTOCOL_VERSION = '2026-01-26';
+//# sourceMappingURL=protocol.js.map

package/dist/features/mcp-ui/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../src/features/mcp-ui/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,yBAAyB,EACzB,kBAAkB,EAClB,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAU1B;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAEnD;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CAAC"}

package/dist/features/mcp-ui/resource.d.ts

@@ -0,0 +1,192 @@
+/**
+ * @module features/mcp-ui/resource
+ *
+ * The `ui://` resource half of MCP-UI: the wire shape a tool result carries so a host knows to
+ * render a View instead of handing text to the model, plus the parser a host uses to recognize one.
+ *
+ * This is the piece `@jini-ai/agentic`'s `mcp-ui-apps.ts` deliberately does not model — that module
+ * owns the JSON-RPC envelope crossing the iframe boundary once a View exists; nothing there says
+ * how a View comes to exist in the first place. That comes from the resource conventions:
+ * `@modelcontextprotocol/ext-apps` fixes `RESOURCE_MIME_TYPE = "text/html;profile=mcp-app"` and
+ * `RESOURCE_URI_META_KEY = "ui/resourceUri"`, and `@mcp-ui/server` declares the
+ * ``ui://${string}`` URI scheme and the wider MIME union reproduced in
+ * {@link UIResourceMimeType}.
+ *
+ * Ported from the reference implementation's `mcp-ui.ts`, minus that file's hand-rolled copy of the
+ * JSON-RPC envelope and its `UIActionResult` union: the reference implementation declared those
+ * because its tsconfig's
+ * `moduleResolution: "Node"` cannot read a modern package's `exports` map, and this package has no
+ * such constraint — the envelope comes from `protocol.ts`'s re-exports instead. See
+ * `surfaces/bridge.ts` for why the legacy `{type:'tool', payload}` action shape is not emitted.
+ */
+/** The `ui://` URI scheme MCP Apps fixes for UI resources. */
+export type UIResourceUri = `ui://${string}`;
+/**
+ * MIME types a UI resource may declare.
+ *
+ * This package emits {@link MCP_UI_MIME_TYPE}; the other two are accepted on the parse side because
+ * the published union lists them — `text/html` for pre-standardization mcp-ui hosts and
+ * `text/html+skybridge` for the Apps SDK adapter — and a resource built by some *other* server is
+ * exactly the case {@link parseUIResource} exists for.
+ */
+export type UIResourceMimeType = 'text/html' | 'text/html;profile=mcp-app' | 'text/html+skybridge';
+/**
+ * `RESOURCE_MIME_TYPE` from `@modelcontextprotocol/ext-apps` — the standardized MIME type for
+ * sandboxed HTML, chosen over the bare legacy `text/html` because it is the one SEP-1865 fixed and
+ * mcp-ui's own client accepts it either way.
+ */
+export declare const MCP_UI_MIME_TYPE: UIResourceMimeType;
+/** Every MIME type {@link parseUIResource} will accept, widest-first. */
+export declare const UI_RESOURCE_MIME_TYPES: readonly UIResourceMimeType[];
+/**
+ * `RESOURCE_URI_META_KEY` from `@modelcontextprotocol/ext-apps` — the `_meta` key a tool uses to
+ * point at a *pre-registered* UI template rather than carrying the HTML inline.
+ *
+ * This package builds inline resources (the original mcp-ui shape), so nothing here writes this
+ * key. It is exported so that a consumer adopting the template-registration flow uses the spec's
+ * key rather than inventing one.
+ */
+export declare const MCP_UI_RESOURCE_URI_META_KEY = "ui/resourceUri";
+/** `UI_METADATA_PREFIX` from `@mcp-ui/server` — the namespace for mcp-ui's resource `_meta` hints. */
+export declare const MCP_UI_METADATA_PREFIX = "mcpui.dev/ui-";
+/** The `_meta` key a host reads to size the frame instead of guessing. Value is a `[width, height]` CSS-length pair. */
+export declare const MCP_UI_PREFERRED_FRAME_SIZE_META_KEY = "mcpui.dev/ui-preferred-frame-size";
+/**
+ * This package's OWN `_meta` namespace, for hints that are not part of the `@mcp-ui/server` spec.
+ *
+ * Deliberately a different prefix from {@link MCP_UI_METADATA_PREFIX}: that one is `@mcp-ui/server`'s
+ * own namespace, and `preferred-frame-size` is one of *its* conventions. Minting a second key under
+ * it (however similar in shape) would assert a level of standardization this package has no
+ * authority to claim. Everything Jini-specific belongs here instead, where it plainly reads as this
+ * package's own addition.
+ */
+export declare const JINI_MCP_UI_METADATA_PREFIX = "x-jini-mcp-ui/";
+/**
+ * The `_meta` key a host reads to build a PARENT-DOM echo of a surface's action plan.
+ *
+ * Exists because a generated surface's `{title, actions}` (see `surfaces/confirmation.ts`'s
+ * `ConfirmationSurfaceSpec`) is otherwise flattened into an opaque HTML string before it ever
+ * reaches a host — unlike {@link MCP_UI_PREFERRED_FRAME_SIZE_META_KEY}, nothing carried it
+ * separately. A host cannot make a surface's pending confirmation and its action LABELS
+ * discoverable via `page.find_elements` (which cannot read into the sandboxed, opaque-origin
+ * iframe the real buttons render in — see `MCP_UI_VIEW_SANDBOX`) without either scraping that HTML
+ * or being handed the plan directly. This is the direct channel; see `McpUiSurfaceCard` in
+ * `@jini-ai/chat` for the host-side consumer.
+ */
+export declare const MCP_UI_ACTION_PLAN_META_KEY = "x-jini-mcp-ui/action-plan";
+/** One action in a surface's plan — the `_meta`-safe subset of `surfaces/document.ts`'s `SurfaceAction` (no `type`: that field only affects in-frame `<form>` submission, which has no parent-DOM equivalent). */
+export interface McpUiActionPlanAction {
+    readonly id: string;
+    readonly label: string;
+    readonly variant?: 'primary' | 'danger' | 'neutral';
+}
+/** What {@link MCP_UI_ACTION_PLAN_META_KEY} carries. */
+export interface McpUiActionPlan {
+    readonly title: string;
+    readonly description?: string;
+    readonly actions: readonly McpUiActionPlanAction[];
+}
+/** The text-bearing UI resource body (mcp-ui's `HTMLTextContent`). This package never emits the `blob` variant. */
+export interface UIResourceContent {
+    readonly uri: UIResourceUri;
+    readonly mimeType: UIResourceMimeType;
+    readonly text: string;
+    readonly _meta?: Readonly<Record<string, unknown>>;
+}
+/**
+ * An MCP `EmbeddedResource` carrying UI — the object a tool result's `content` array holds, and the
+ * object a host hands to its View renderer.
+ */
+export interface UIResource {
+    readonly type: 'resource';
+    readonly resource: UIResourceContent;
+}
+/** An MCP text content block — the model-readable half of a tool result. */
+export interface TextContent {
+    readonly type: 'text';
+    readonly text: string;
+}
+/**
+ * A tool result carrying both a model-readable text block and a human-facing UI resource.
+ *
+ * The split between the two halves is a security boundary, not formatting. Per MCP Apps' own
+ * security model a host renders the UI resource for the USER and does not feed its HTML to the
+ * model — so a secret embedded in the HTML is a secret the model never sees, while anything in
+ * `text` is something the model reads. `confirmation-store.ts`'s whole reason for existing depends
+ * on exactly that split.
+ */
+export interface UIToolResult {
+    readonly content: readonly [TextContent, UIResource];
+    readonly _meta?: Readonly<Record<string, unknown>>;
+}
+/**
+ * Builds a UI resource from self-contained HTML.
+ *
+ * @param spec.uri - The `ui://` identifier for this resource instance. A host may log, cache, or
+ * show it, so it must never carry a secret — key it by entity and version instead.
+ * @param spec.htmlString - Self-contained HTML. It renders in a sandboxed, opaque-origin iframe
+ * with no bundler and no network, so it must inline everything it needs; use `surfaces/` to build
+ * one rather than hand-rolling.
+ * @param spec.preferredFrameSize - `[width, height]` CSS lengths, written to the `_meta` key mcp-ui
+ * hosts read.
+ * @param spec.actionPlan - See {@link McpUiActionPlan}, written to {@link MCP_UI_ACTION_PLAN_META_KEY}.
+ * @param spec.meta - Extra `_meta` entries, merged after `preferredFrameSize`/`actionPlan` so a
+ * caller can override either.
+ * @returns The `EmbeddedResource` to place in a tool result's `content` array.
+ * @complexity O(1).
+ */
+export declare function createUIResource(spec: {
+    uri: UIResourceUri;
+    htmlString: string;
+    preferredFrameSize?: readonly [string, string];
+    actionPlan?: McpUiActionPlan;
+    meta?: Readonly<Record<string, unknown>>;
+}): UIResource;
+/**
+ * Assembles the two-part tool result: what the MODEL is told, and what the HUMAN is shown.
+ *
+ * @param spec.modelText - The model-readable block. Must not contain anything the UI resource keeps
+ * from the model (see {@link UIToolResult}).
+ * @param spec.ui - The UI resource, rendered to the human only.
+ * @param spec.meta - Optional result-level `_meta`.
+ * @complexity O(1).
+ */
+export declare function buildUIToolResult(spec: {
+    modelText: string;
+    ui: UIResource;
+    meta?: Readonly<Record<string, unknown>>;
+}): UIToolResult;
+/**
+ * Narrows an arbitrary value to a {@link UIResource}.
+ *
+ * The host side needs this because a tool result reaches it as `unknown` — it arrives over a
+ * transport from a server this package does not control, so "the resource is well-formed" is a
+ * claim to be checked, not assumed. A resource that fails any check is not rendered at all rather
+ * than rendered partially: a frame built from a non-string `text` would be `srcdoc="undefined"`,
+ * which renders as a visible, confusing blank rather than an honest absence.
+ *
+ * @param value - A candidate resource, e.g. one entry of a tool result's `content` array.
+ * @returns The narrowed resource, or `undefined` when the value is not one.
+ * @complexity O(1) — `text` is not scanned, only type-checked.
+ */
+export declare function parseUIResource(value: unknown): UIResource | undefined;
+/**
+ * Reads the `[width, height]` frame-size hint a resource's `_meta` may carry.
+ *
+ * @returns The pair, or `undefined` when absent or malformed — a host that gets `undefined` should
+ * size the frame itself rather than trusting a half-present hint.
+ */
+export declare function readPreferredFrameSize(resource: UIResource): readonly [string, string] | undefined;
+/**
+ * Reads the action-plan hint a resource's `_meta` may carry — see {@link MCP_UI_ACTION_PLAN_META_KEY}.
+ *
+ * Validated the same way {@link readPreferredFrameSize} is: a resource crosses a wire from a server
+ * this package does not control, so every field is checked rather than cast. A single malformed
+ * action invalidates the whole plan (never a partially-rendered mirror silently missing a button) —
+ * an `undefined` here means "the host builds no mirror for this surface", not "build one with what
+ * parsed".
+ *
+ * @returns The plan, or `undefined` when absent or malformed.
+ */
+export declare function readActionPlan(resource: UIResource): McpUiActionPlan | undefined;
+//# sourceMappingURL=resource.d.ts.map

package/dist/features/mcp-ui/resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.d.ts","sourceRoot":"","sources":["../../../src/features/mcp-ui/resource.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,8DAA8D;AAC9D,MAAM,MAAM,aAAa,GAAG,QAAQ,MAAM,EAAE,CAAC;AAE7C;;;;;;;GAOG;AACH,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,2BAA2B,GAAG,qBAAqB,CAAC;AAEnG;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE,kBAAgD,CAAC;AAEhF,yEAAyE;AACzE,eAAO,MAAM,sBAAsB,EAAE,SAAS,kBAAkB,EAI/D,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,mBAAmB,CAAC;AAE7D,sGAAsG;AACtG,eAAO,MAAM,sBAAsB,kBAAkB,CAAC;AAEtD,wHAAwH;AACxH,eAAO,MAAM,oCAAoC,sCAAkD,CAAC;AAEpG;;;;;;;;GAQG;AACH,eAAO,MAAM,2BAA2B,mBAAmB,CAAC;AAE5D;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,2BAA2B,8BAA8C,CAAC;AAEvF,kNAAkN;AAClN,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;CACrD;AAED,wDAAwD;AACxD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACpD;AAED,mHAAmH;AACnH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACpD;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;CACtC;AAED,4EAA4E;AAC5E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACrD,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACpD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,GAAG,EAAE,aAAa,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC1C,GAAG,UAAU,CAiBb;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,UAAU,CAAC;IACf,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC1C,GAAG,YAAY,CAKf;AAMD;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,CAyBtE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,UAAU,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAMlG;AAmBD;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,UAAU,GAAG,eAAe,GAAG,SAAS,CAgBhF"}

package/dist/features/mcp-ui/resource.js

@@ -0,0 +1,228 @@
+/**
+ * @module features/mcp-ui/resource
+ *
+ * The `ui://` resource half of MCP-UI: the wire shape a tool result carries so a host knows to
+ * render a View instead of handing text to the model, plus the parser a host uses to recognize one.
+ *
+ * This is the piece `@jini-ai/agentic`'s `mcp-ui-apps.ts` deliberately does not model — that module
+ * owns the JSON-RPC envelope crossing the iframe boundary once a View exists; nothing there says
+ * how a View comes to exist in the first place. That comes from the resource conventions:
+ * `@modelcontextprotocol/ext-apps` fixes `RESOURCE_MIME_TYPE = "text/html;profile=mcp-app"` and
+ * `RESOURCE_URI_META_KEY = "ui/resourceUri"`, and `@mcp-ui/server` declares the
+ * ``ui://${string}`` URI scheme and the wider MIME union reproduced in
+ * {@link UIResourceMimeType}.
+ *
+ * Ported from the reference implementation's `mcp-ui.ts`, minus that file's hand-rolled copy of the
+ * JSON-RPC envelope and its `UIActionResult` union: the reference implementation declared those
+ * because its tsconfig's
+ * `moduleResolution: "Node"` cannot read a modern package's `exports` map, and this package has no
+ * such constraint — the envelope comes from `protocol.ts`'s re-exports instead. See
+ * `surfaces/bridge.ts` for why the legacy `{type:'tool', payload}` action shape is not emitted.
+ */
+/**
+ * `RESOURCE_MIME_TYPE` from `@modelcontextprotocol/ext-apps` — the standardized MIME type for
+ * sandboxed HTML, chosen over the bare legacy `text/html` because it is the one SEP-1865 fixed and
+ * mcp-ui's own client accepts it either way.
+ */
+export const MCP_UI_MIME_TYPE = 'text/html;profile=mcp-app';
+/** Every MIME type {@link parseUIResource} will accept, widest-first. */
+export const UI_RESOURCE_MIME_TYPES = [
+    'text/html',
+    'text/html;profile=mcp-app',
+    'text/html+skybridge',
+];
+/**
+ * `RESOURCE_URI_META_KEY` from `@modelcontextprotocol/ext-apps` — the `_meta` key a tool uses to
+ * point at a *pre-registered* UI template rather than carrying the HTML inline.
+ *
+ * This package builds inline resources (the original mcp-ui shape), so nothing here writes this
+ * key. It is exported so that a consumer adopting the template-registration flow uses the spec's
+ * key rather than inventing one.
+ */
+export const MCP_UI_RESOURCE_URI_META_KEY = 'ui/resourceUri';
+/** `UI_METADATA_PREFIX` from `@mcp-ui/server` — the namespace for mcp-ui's resource `_meta` hints. */
+export const MCP_UI_METADATA_PREFIX = 'mcpui.dev/ui-';
+/** The `_meta` key a host reads to size the frame instead of guessing. Value is a `[width, height]` CSS-length pair. */
+export const MCP_UI_PREFERRED_FRAME_SIZE_META_KEY = `${MCP_UI_METADATA_PREFIX}preferred-frame-size`;
+/**
+ * This package's OWN `_meta` namespace, for hints that are not part of the `@mcp-ui/server` spec.
+ *
+ * Deliberately a different prefix from {@link MCP_UI_METADATA_PREFIX}: that one is `@mcp-ui/server`'s
+ * own namespace, and `preferred-frame-size` is one of *its* conventions. Minting a second key under
+ * it (however similar in shape) would assert a level of standardization this package has no
+ * authority to claim. Everything Jini-specific belongs here instead, where it plainly reads as this
+ * package's own addition.
+ */
+export const JINI_MCP_UI_METADATA_PREFIX = 'x-jini-mcp-ui/';
+/**
+ * The `_meta` key a host reads to build a PARENT-DOM echo of a surface's action plan.
+ *
+ * Exists because a generated surface's `{title, actions}` (see `surfaces/confirmation.ts`'s
+ * `ConfirmationSurfaceSpec`) is otherwise flattened into an opaque HTML string before it ever
+ * reaches a host — unlike {@link MCP_UI_PREFERRED_FRAME_SIZE_META_KEY}, nothing carried it
+ * separately. A host cannot make a surface's pending confirmation and its action LABELS
+ * discoverable via `page.find_elements` (which cannot read into the sandboxed, opaque-origin
+ * iframe the real buttons render in — see `MCP_UI_VIEW_SANDBOX`) without either scraping that HTML
+ * or being handed the plan directly. This is the direct channel; see `McpUiSurfaceCard` in
+ * `@jini-ai/chat` for the host-side consumer.
+ */
+export const MCP_UI_ACTION_PLAN_META_KEY = `${JINI_MCP_UI_METADATA_PREFIX}action-plan`;
+/**
+ * Builds a UI resource from self-contained HTML.
+ *
+ * @param spec.uri - The `ui://` identifier for this resource instance. A host may log, cache, or
+ * show it, so it must never carry a secret — key it by entity and version instead.
+ * @param spec.htmlString - Self-contained HTML. It renders in a sandboxed, opaque-origin iframe
+ * with no bundler and no network, so it must inline everything it needs; use `surfaces/` to build
+ * one rather than hand-rolling.
+ * @param spec.preferredFrameSize - `[width, height]` CSS lengths, written to the `_meta` key mcp-ui
+ * hosts read.
+ * @param spec.actionPlan - See {@link McpUiActionPlan}, written to {@link MCP_UI_ACTION_PLAN_META_KEY}.
+ * @param spec.meta - Extra `_meta` entries, merged after `preferredFrameSize`/`actionPlan` so a
+ * caller can override either.
+ * @returns The `EmbeddedResource` to place in a tool result's `content` array.
+ * @complexity O(1).
+ */
+export function createUIResource(spec) {
+    const meta = {
+        ...(spec.preferredFrameSize === undefined
+            ? {}
+            : { [MCP_UI_PREFERRED_FRAME_SIZE_META_KEY]: [...spec.preferredFrameSize] }),
+        ...(spec.actionPlan === undefined ? {} : { [MCP_UI_ACTION_PLAN_META_KEY]: spec.actionPlan }),
+        ...spec.meta,
+    };
+    return {
+        type: 'resource',
+        resource: {
+            uri: spec.uri,
+            mimeType: MCP_UI_MIME_TYPE,
+            text: spec.htmlString,
+            ...(Object.keys(meta).length === 0 ? {} : { _meta: meta }),
+        },
+    };
+}
+/**
+ * Assembles the two-part tool result: what the MODEL is told, and what the HUMAN is shown.
+ *
+ * @param spec.modelText - The model-readable block. Must not contain anything the UI resource keeps
+ * from the model (see {@link UIToolResult}).
+ * @param spec.ui - The UI resource, rendered to the human only.
+ * @param spec.meta - Optional result-level `_meta`.
+ * @complexity O(1).
+ */
+export function buildUIToolResult(spec) {
+    return {
+        content: [{ type: 'text', text: spec.modelText }, spec.ui],
+        ...(spec.meta === undefined ? {} : { _meta: spec.meta }),
+    };
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/**
+ * Narrows an arbitrary value to a {@link UIResource}.
+ *
+ * The host side needs this because a tool result reaches it as `unknown` — it arrives over a
+ * transport from a server this package does not control, so "the resource is well-formed" is a
+ * claim to be checked, not assumed. A resource that fails any check is not rendered at all rather
+ * than rendered partially: a frame built from a non-string `text` would be `srcdoc="undefined"`,
+ * which renders as a visible, confusing blank rather than an honest absence.
+ *
+ * @param value - A candidate resource, e.g. one entry of a tool result's `content` array.
+ * @returns The narrowed resource, or `undefined` when the value is not one.
+ * @complexity O(1) — `text` is not scanned, only type-checked.
+ */
+export function parseUIResource(value) {
+    if (!isRecord(value) || value['type'] !== 'resource')
+        return undefined;
+    const resource = value['resource'];
+    if (!isRecord(resource))
+        return undefined;
+    const uri = resource['uri'];
+    if (typeof uri !== 'string' || !uri.startsWith('ui://'))
+        return undefined;
+    const mimeType = resource['mimeType'];
+    if (typeof mimeType !== 'string')
+        return undefined;
+    if (!UI_RESOURCE_MIME_TYPES.includes(mimeType))
+        return undefined;
+    const text = resource['text'];
+    if (typeof text !== 'string')
+        return undefined;
+    const meta = resource['_meta'];
+    return {
+        type: 'resource',
+        resource: {
+            uri: uri,
+            mimeType: mimeType,
+            text,
+            ...(isRecord(meta) ? { _meta: meta } : {}),
+        },
+    };
+}
+/**
+ * Reads the `[width, height]` frame-size hint a resource's `_meta` may carry.
+ *
+ * @returns The pair, or `undefined` when absent or malformed — a host that gets `undefined` should
+ * size the frame itself rather than trusting a half-present hint.
+ */
+export function readPreferredFrameSize(resource) {
+    const raw = resource.resource._meta?.[MCP_UI_PREFERRED_FRAME_SIZE_META_KEY];
+    if (!Array.isArray(raw) || raw.length !== 2)
+        return undefined;
+    const [width, height] = raw;
+    if (typeof width !== 'string' || typeof height !== 'string')
+        return undefined;
+    return [width, height];
+}
+function isActionPlanVariant(value) {
+    return value === 'primary' || value === 'danger' || value === 'neutral';
+}
+function parseActionPlanAction(value) {
+    if (!isRecord(value))
+        return undefined;
+    const id = value['id'];
+    const label = value['label'];
+    if (typeof id !== 'string' || id === '' || typeof label !== 'string')
+        return undefined;
+    const variant = value['variant'];
+    if (variant === undefined)
+        return { id, label };
+    if (typeof variant !== 'string' || !isActionPlanVariant(variant))
+        return undefined;
+    return { id, label, variant };
+}
+/**
+ * Reads the action-plan hint a resource's `_meta` may carry — see {@link MCP_UI_ACTION_PLAN_META_KEY}.
+ *
+ * Validated the same way {@link readPreferredFrameSize} is: a resource crosses a wire from a server
+ * this package does not control, so every field is checked rather than cast. A single malformed
+ * action invalidates the whole plan (never a partially-rendered mirror silently missing a button) —
+ * an `undefined` here means "the host builds no mirror for this surface", not "build one with what
+ * parsed".
+ *
+ * @returns The plan, or `undefined` when absent or malformed.
+ */
+export function readActionPlan(resource) {
+    const raw = resource.resource._meta?.[MCP_UI_ACTION_PLAN_META_KEY];
+    if (!isRecord(raw))
+        return undefined;
+    const title = raw['title'];
+    if (typeof title !== 'string')
+        return undefined;
+    const description = raw['description'];
+    if (description !== undefined && typeof description !== 'string')
+        return undefined;
+    const rawActions = raw['actions'];
+    if (!Array.isArray(rawActions))
+        return undefined;
+    const actions = [];
+    for (const rawAction of rawActions) {
+        const action = parseActionPlanAction(rawAction);
+        if (action === undefined)
+            return undefined;
+        actions.push(action);
+    }
+    return { title, ...(description === undefined ? {} : { description }), actions };
+}
+//# sourceMappingURL=resource.js.map

package/dist/features/mcp-ui/resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.js","sourceRoot":"","sources":["../../../src/features/mcp-ui/resource.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAeH;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAuB,2BAA2B,CAAC;AAEhF,yEAAyE;AACzE,MAAM,CAAC,MAAM,sBAAsB,GAAkC;IACnE,WAAW;IACX,2BAA2B;IAC3B,qBAAqB;CACtB,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,gBAAgB,CAAC;AAE7D,sGAAsG;AACtG,MAAM,CAAC,MAAM,sBAAsB,GAAG,eAAe,CAAC;AAEtD,wHAAwH;AACxH,MAAM,CAAC,MAAM,oCAAoC,GAAG,GAAG,sBAAsB,sBAAsB,CAAC;AAEpG;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,gBAAgB,CAAC;AAE5D;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,2BAA2B,aAAa,CAAC;AAqDvF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAMhC;IACC,MAAM,IAAI,GAA4B;QACpC,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,CAAC,oCAAoC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,2BAA2B,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QAC5F,GAAG,IAAI,CAAC,IAAI;KACb,CAAC;IACF,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE;YACR,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,gBAAgB;YAC1B,IAAI,EAAE,IAAI,CAAC,UAAU;YACrB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SAC3D;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAIjC;IACC,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IACvE,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAE1C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAE1E,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACnD,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,QAA8B,CAAC;QAAE,OAAO,SAAS,CAAC;IAEvF,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAE/C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE;YACR,GAAG,EAAE,GAAoB;YACzB,QAAQ,EAAE,QAA8B;YACxC,IAAI;YACJ,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3C;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAoB;IACzD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,oCAAoC,CAAC,CAAC;IAC5E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,GAAyB,CAAC;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9E,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AACzB,CAAC;AAID,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,CAAC;AAC1E,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,EAAE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACvF,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IACjC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IAChD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACnF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,QAAoB;IACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,2BAA2B,CAAC,CAAC;IACnE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,WAAW,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IACvC,IAAI,WAAW,KAAK,SAAS,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACnF,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;AACnF,CAAC"}