@jini-ai/ui 0.1.2 → 0.3.0

package/dist/features/mcp-ui/surfaces/form.js

@@ -0,0 +1,218 @@
+/**
+ * @module features/mcp-ui/surfaces/form
+ *
+ * Composes a field list into one complete input dialog: the same shell, details, status region and
+ * action row `confirmation.ts` uses, wrapped in a real `<form>` whose submit collects, coerces, and
+ * validates the fields before calling a tool.
+ *
+ * A real `<form>` rather than a div with a click handler, for two behaviors that would otherwise
+ * need reimplementing: Enter in a text field submits it, and `form.elements` gives the script a
+ * name-keyed control lookup without a DOM query per field.
+ *
+ * It carries `novalidate`, so the required-field check below is the only one that runs. Controls
+ * still get their `required` attribute — that is what a screen reader announces — but the browser's
+ * own validation UI is suppressed on purpose: its bubble is positioned against the viewport and gets
+ * clipped by the frame's bounds in the small iframe a surface renders in, and the surface already
+ * owns a live region that announces the same information without being clipped.
+ *
+ * ## Coercion is here, not at the tool
+ *
+ * Every value the DOM hands back is a string — `"3"`, `""`, `"true"`. A tool declaring a numeric
+ * parameter would receive a string and either reject it or, worse, coerce it somewhere further
+ * downstream where the failure is harder to attribute. So each field's declared kind drives the
+ * conversion at the only point that knows it: `number` becomes a number or `null` when blank,
+ * `boolean` reads `checked`, and `string`/`enum` pass through.
+ */
+import { createUIResource } from '../resource.js';
+import { escapeHtml, escapeJsValue } from '../escape.js';
+import { DEFAULT_SURFACE_STATUS_TEXT, SURFACE_SCRIPT_PRELUDE, renderActions, renderDetailList, renderStatusRegion, renderSurfaceDocument, renderSurfaceHeader, } from './document.js';
+import { renderFieldControl, toFieldReadSpecs } from './fields.js';
+const DEFAULT_APP = { appName: 'jini-mcp-ui-form', appVersion: '1' };
+/** The form element's id, fixed so the emitted script can find it without a fragile selector. */
+const FORM_ELEMENT_ID = 'mcpui-form';
+/**
+ * Renders the form dialog as a complete, self-contained HTML document.
+ *
+ * @param spec - See {@link FormSurfaceSpec}.
+ * @returns The full HTML string.
+ * @complexity O(n) in the number of fields plus the rendered length.
+ */
+export function renderFormDocument(spec) {
+    const text = { ...DEFAULT_SURFACE_STATUS_TEXT, ...spec.text };
+    // Not `type: 'submit'` — see the runtime script below for why a submit-typed button inside this
+    // particular `<form>` cannot work at all in production.
+    const actions = [
+        { id: 'submit', label: spec.submitLabel, variant: spec.danger === true ? 'danger' : 'primary' },
+    ];
+    if (spec.cancel !== undefined)
+        actions.push({ id: 'cancel', label: spec.cancel.label, variant: 'neutral' });
+    const controls = spec.fields.map(renderFieldControl).join('\n');
+    const warning = spec.warning === undefined ? '' : `<p class="mcpui-warning">${escapeHtml(spec.warning)}</p>`;
+    const bodyHtml = [
+        renderSurfaceHeader(spec.description === undefined ? { title: spec.title } : { title: spec.title, description: spec.description }),
+        renderDetailList(spec.details ?? []),
+        `<form id="${FORM_ELEMENT_ID}" novalidate>\n<fieldset class="mcpui-fields">\n${controls}\n</fieldset>\n${warning}\n${renderActions(actions)}\n</form>`,
+        renderStatusRegion(),
+    ]
+        .filter((fragment) => fragment !== '')
+        .join('\n');
+    const cancelPlan = spec.cancel?.toolName === undefined
+        ? null
+        : { toolName: spec.cancel.toolName, params: spec.cancel.params ?? {} };
+    const script = `(function () {
+  "use strict";
+${SURFACE_SCRIPT_PRELUDE}
+  var FIELDS = ${escapeJsValue(toFieldReadSpecs(spec.fields))};
+  var TOOL = ${escapeJsValue(spec.toolName)};
+  var BASE_PARAMS = ${escapeJsValue(spec.baseParams ?? {})};
+  var CANCEL = ${escapeJsValue(cancelPlan)};
+  var TEXT = ${escapeJsValue(text)};
+  var form = document.getElementById(${escapeJsValue(FORM_ELEMENT_ID)});
+
+  // form.elements[name] yields a RadioNodeList when several controls share a name and the BARE
+  // element when only one does. A one-option checklist would otherwise read as "no options" —
+  // silently, since a bare input has no length to iterate. Presence of "checked" is what tells the
+  // two apart: an input has it, a RadioNodeList does not.
+  function checkedValues(control) {
+    if (!control) return [];
+    var nodes = typeof control.length === "number" && !("checked" in control) ? control : [control];
+    var out = [];
+    for (var i = 0; i < nodes.length; i++) if (nodes[i] && nodes[i].checked) out.push(nodes[i].value);
+    return out;
+  }
+
+  function readField(field) {
+    var control = form.elements[field.name];
+    if (field.kind === "boolean") return control.checked;
+    if (field.kind === "number") return control.value === "" ? null : Number(control.value);
+    if (field.kind === "multi-enum") return checkedValues(control);
+    // Covers a radio-presented enum too: a RadioNodeList's own .value is the checked radio's
+    // value, or "" when none is checked — the same shape a <select> reports.
+    return control.value;
+  }
+
+  function isBlank(field, value) {
+    if (field.kind === "boolean") return value !== true;
+    if (field.kind === "number") return value === null || isNaN(value);
+    // Required means "choose at least one", never "choose this one" — see choice-group.ts on why
+    // the native required attribute is deliberately not used for a checkbox group.
+    if (field.kind === "multi-enum") return value.length === 0;
+    return value === "";
+  }
+
+  // NOT wired to the form's "submit" event. Per the WHATWG form submission algorithm, the
+  // sandboxed-forms browsing-context check runs BEFORE that event is ever dispatched, so in the
+  // real target sandbox (MCP_UI_VIEW_SANDBOX grants "allow-scripts" and nothing else -- no
+  // "allow-forms") clicking a type=submit button never fires "submit" at all: the browser blocks
+  // the attempt at the point of activation and no listener sees it, cancelable or not. A
+  // preventDefault() in a "submit" handler is consequently dead code here, unreachable no matter
+  // how it is written. The submit button is type=button (see the actions array above) for exactly
+  // this reason, and this function is called directly from its "click" handler below -- "click" is
+  // unaffected by the sandboxed-forms flag, which only ever gates form submission.
+  // In-flight guard for BOTH action paths. \`setBusy\` disables the action buttons and nothing else
+  // (see SURFACE_SCRIPT_PRELUDE), which is a complete guard on a surface whose only entry points
+  // are buttons -- but this one also has the Enter handler below, bound to controls setBusy leaves
+  // enabled on purpose (a busy form still has to be readable, and disabling every input mid-call
+  // would blow away focus and selection). Holding Enter therefore fired one \`tools/call\` per
+  // keydown repeat while the first was still pending: a confirmation-token tool would reject the
+  // extras, but an ordinary state-mutating one would simply run again. Cancel shares the flag so
+  // Enter cannot submit on top of an in-flight cancel either.
+  //
+  // Deliberately NOT cleared on success -- the success path tears the surface down, so re-arming
+  // would only reopen the window. Cleared on failure, matching what setBusy(false) already does
+  // there: a rejected call did not happen, and the human must be able to retry.
+  var pending = false;
+
+  function runSubmit() {
+    if (pending) return;
+    var params = {};
+    var key;
+    for (key in BASE_PARAMS) if (Object.prototype.hasOwnProperty.call(BASE_PARAMS, key)) params[key] = BASE_PARAMS[key];
+    var missing = [];
+    for (var i = 0; i < FIELDS.length; i++) {
+      var value = readField(FIELDS[i]);
+      if (FIELDS[i].required && isBlank(FIELDS[i], value)) missing.push(FIELDS[i].label);
+      params[FIELDS[i].name] = value;
+    }
+    if (missing.length > 0) {
+      setStatus(TEXT.missingPrefix + missing.join(", "), "invalid");
+      return;
+    }
+    pending = true;
+    setBusy(true);
+    setStatus(TEXT.working, "pending");
+    api.callTool(TOOL, params).then(function () {
+      setStatus(TEXT.done, "done");
+      api.requestTeardown();
+    }, function (error) {
+      pending = false;
+      setBusy(false);
+      setStatus(TEXT.failedPrefix + describeError(error), "failed");
+    });
+  }
+
+  // Enter-to-submit, restored deliberately rather than left to the (equally dead, same root cause)
+  // native behavior a single-line text input gets inside a real form. Scoped to the same controls
+  // the browser would have honored it for -- type=text/type=number inputs -- so Enter still inserts
+  // a newline in a multi-line textarea and still just toggles a checkbox.
+  form.addEventListener("keydown", function (event) {
+    if (event.key !== "Enter") return;
+    var target = event.target;
+    if (!target || target.tagName !== "INPUT") return;
+    var type = (target.getAttribute("type") || "text").toLowerCase();
+    if (type === "checkbox" || type === "radio") return;
+    event.preventDefault();
+    runSubmit();
+  });
+
+  for (var b = 0; b < actionButtons.length; b++) {
+    var action = actionButtons[b].getAttribute("data-mcpui-action");
+    if (action === "submit") {
+      actionButtons[b].addEventListener("click", runSubmit);
+      continue;
+    }
+    if (action !== "cancel") continue;
+    actionButtons[b].addEventListener("click", function () {
+      if (pending) return;
+      pending = true;
+      setBusy(true);
+      if (CANCEL === null) {
+        setStatus(TEXT.dismissed, "dismissed");
+        api.requestTeardown();
+        return;
+      }
+      setStatus(TEXT.working, "pending");
+      api.callTool(CANCEL.toolName, CANCEL.params).then(function () {
+        setStatus(TEXT.dismissed, "dismissed");
+        api.requestTeardown();
+      }, function (error) {
+        pending = false;
+        setBusy(false);
+        setStatus(TEXT.failedPrefix + describeError(error), "failed");
+      });
+    });
+  }
+}());`;
+    return renderSurfaceDocument({
+        title: spec.title,
+        bodyHtml,
+        script,
+        app: spec.app ?? DEFAULT_APP,
+        ...(spec.lang === undefined ? {} : { lang: spec.lang }),
+        ...(spec.tokens === undefined ? {} : { tokens: spec.tokens }),
+    });
+}
+/**
+ * Renders the form dialog as an MCP-UI resource, ready for a tool result's `content` array.
+ *
+ * @param spec.uri - The `ui://` identifier. Never key it by a confirmation token.
+ * @complexity O(n) in the number of fields plus the rendered length.
+ */
+export function buildFormSurface(spec) {
+    return createUIResource({
+        uri: spec.uri,
+        htmlString: renderFormDocument(spec),
+        ...(spec.preferredFrameSize === undefined ? {} : { preferredFrameSize: spec.preferredFrameSize }),
+    });
+}
+//# sourceMappingURL=form.js.map

package/dist/features/mcp-ui/surfaces/form.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"form.js","sourceRoot":"","sources":["../../../../src/features/mcp-ui/surfaces/form.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,gBAAgB,EAAuC,MAAM,gBAAgB,CAAC;AACvF,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,EACtB,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,GAIpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAqB,MAAM,aAAa,CAAC;AA8BtF,MAAM,WAAW,GAAqB,EAAE,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAEvF,iGAAiG;AACjG,MAAM,eAAe,GAAG,YAAY,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,MAAM,IAAI,GAAG,EAAE,GAAG,2BAA2B,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC9D,gGAAgG;IAChG,wDAAwD;IACxD,MAAM,OAAO,GAAoB;QAC/B,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE;KAChG,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAE5G,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,4BAA4B,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7G,MAAM,QAAQ,GAAG;QACf,mBAAmB,CACjB,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAC9G;QACD,gBAAgB,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACpC,aAAa,eAAe,mDAAmD,QAAQ,kBAAkB,OAAO,KAAK,aAAa,CAAC,OAAO,CAAC,WAAW;QACtJ,kBAAkB,EAAE;KACrB;SACE,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,EAAE,CAAC;SACrC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,UAAU,GACd,IAAI,CAAC,MAAM,EAAE,QAAQ,KAAK,SAAS;QACjC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;IAE3E,MAAM,MAAM,GAAG;;EAEf,sBAAsB;iBACP,aAAa,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;eAC9C,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;sBACrB,aAAa,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;iBACzC,aAAa,CAAC,UAAU,CAAC;eAC3B,aAAa,CAAC,IAAI,CAAC;uCACK,aAAa,CAAC,eAAe,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MA6H/D,CAAC;IAEL,OAAO,qBAAqB,CAAC;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ;QACR,MAAM;QACN,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,WAAW;QAC5B,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAA8F;IAE9F,OAAO,gBAAgB,CAAC;QACtB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,UAAU,EAAE,kBAAkB,CAAC,IAAI,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC;KAClG,CAAC,CAAC;AACL,CAAC"}

package/dist/features/mcp-ui/surfaces/index.d.ts

@@ -0,0 +1,12 @@
+export * from './bridge.js';
+export * from './checkbox.js';
+export * from './choice-group.js';
+export * from './confirmation.js';
+export * from './document.js';
+export * from './fields.js';
+export * from './form.js';
+export * from './outcome.js';
+export * from './select.js';
+export * from './text-input.js';
+export * from './tokens.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/features/mcp-ui/surfaces/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/features/mcp-ui/surfaces/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC"}

package/dist/features/mcp-ui/surfaces/index.js

@@ -0,0 +1,12 @@
+export * from './bridge.js';
+export * from './checkbox.js';
+export * from './choice-group.js';
+export * from './confirmation.js';
+export * from './document.js';
+export * from './fields.js';
+export * from './form.js';
+export * from './outcome.js';
+export * from './select.js';
+export * from './text-input.js';
+export * from './tokens.js';
+//# sourceMappingURL=index.js.map

package/dist/features/mcp-ui/surfaces/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/features/mcp-ui/surfaces/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC"}

package/dist/features/mcp-ui/surfaces/outcome.d.ts

@@ -0,0 +1,102 @@
+/**
+ * @module features/mcp-ui/surfaces/outcome
+ *
+ * A read-only RESULT surface: the human already answered a confirmation (or submitted a form, or a
+ * background action finished) and this is what actually happened, not what was proposed.
+ *
+ * ## Why this exists
+ *
+ * `document.ts`'s `DEFAULT_SURFACE_STATUS_TEXT.done` ("Done.") fires the instant a surface's
+ * `tools/call` RESOLVES — that proves the call reached the Host and came back, never that the
+ * underlying operation actually succeeded. A publish that 404s, a rejected credential, and a
+ * partial upload all resolve the SAME call and render the SAME "Done.". Worse, for a HELD-OPEN
+ * confirmation answered through `mcp-ui-tool-calls-route.ts`'s Shape 1 (an exchange delivery), the
+ * click's own `tools/call` round trip resolves the instant the answer is DELIVERED to the parked
+ * agent call (`{delivered: true}`, HTTP 202) — long before that parked call has actually finished
+ * doing the real work the human just approved. "Done." can fire before the real operation has even
+ * started.
+ *
+ * `McpUiSurfaceCard`'s own doc (`@jini-ai/chat`) already names the fix this builder exists to use:
+ * "a stream may re-send an updated document for a surface already on screen (a confirmation that
+ * became a result), so the LAST event for each URI wins." A caller that finishes a confirmed action
+ * re-emits THIS builder's resource under the SAME `ui://` URI the confirmation used, and the
+ * transcript replaces the dialog with the real result in place — no second frame, and (since
+ * `McpUiHost` keys its iframe by `sessionKey`, which defaults to the document text) no leftover
+ * Confirm/Cancel buttons a human could click again on a request that already ran.
+ *
+ * ## Why this is not `ConfirmationSurfaceSpec` with `confirm` made optional
+ *
+ * A confirmation's whole shape exists to hold a token the model must never read and to let a human
+ * ANSWER something. A result has already been answered — there is nothing left to confirm, cancel,
+ * or submit, so `confirm`/`cancel`'s tool-call plumbing has no honest value here. Reusing that type
+ * would mean either fabricating a placeholder `confirm` nobody should click, or forking the type at
+ * every call site into "sometimes required, sometimes not" — worse than a small, purpose-built
+ * sibling that carries only what a result needs.
+ *
+ * ## The one interactive element this DOES carry
+ *
+ * `openLinkUrl` renders a single button wired to the bridge's existing `openLink` (`ui/open-link`) —
+ * no new bridge plumbing: a `<a href>` is dead inside this package's sandboxed `srcdoc` frame (no
+ * `allow-top-navigation`), so `openLink` is the only way an isolated frame can navigate anything at
+ * all (`bridge.ts`'s own header). The URL is ALSO always rendered as a plain detail row regardless —
+ * copyable/selectable text that needs no script to be useful, matching this package's general
+ * "the document should say something true even if a caller never runs its script" posture.
+ */
+import { type UIResource, type UIResourceUri } from '../resource.js';
+import { type SurfaceDetail } from './document.js';
+import type { BridgeScriptSpec } from './bridge.js';
+import type { SurfaceTokenName } from './tokens.js';
+export interface SurfaceOutcomeSpec {
+    readonly title: string;
+    readonly description?: string;
+    /** The facts of what actually happened — same shape as a confirmation's own `details`, but
+     *  reporting the RESULT (e.g. the real URL, the real status) rather than what was proposed. */
+    readonly details?: readonly SurfaceDetail[];
+    /**
+     * Styles the status line and, when {@link openLinkUrl} is also present, the open-link button.
+     * THREE states, not a boolean — matching this package's own callers, which distinguish a genuine
+     * partial outcome (e.g. Tovu's static-publish "uploaded, but not yet confirmed reachable") from
+     * both a plain success and a plain failure specifically so neither is misreported: folding
+     * `'partial'` into `'success'` would claim something is live when it may not be reachable yet;
+     * folding it into `'failure'` would hide that the operation itself did NOT fail (nothing needs
+     * retrying, only a separate follow-up step). See `document.ts`'s own `[data-state="partial"]` rule
+     * for why this needs a third visual state as well as a third value here, not merely a third string
+     * that renders identically to one of the other two.
+     */
+    readonly state: 'success' | 'partial' | 'failure';
+    /** The one human-facing sentence explaining the outcome — the actionable message on failure, or a
+     *  short confirmation on success. Never a raw credential or provider response body; that boundary
+     *  is the CALLER's responsibility (this builder only renders what it is given). */
+    readonly message: string;
+    /** When present, renders one button ("Open site" by default) that calls the bridge's `openLink`.
+     *  Only meaningful alongside `state: 'success'` — a caller should not supply this for a failure. */
+    readonly openLinkUrl?: string;
+    readonly openLinkLabel?: string;
+    /** Identity reported to the Host in `ui/initialize`. Defaults to a generic one. */
+    readonly app?: BridgeScriptSpec;
+    readonly lang?: string;
+    readonly tokens?: Partial<Record<SurfaceTokenName, string>>;
+}
+/**
+ * Renders the outcome document as a complete, self-contained HTML document.
+ *
+ * @param spec - See {@link SurfaceOutcomeSpec}.
+ * @returns The full HTML string.
+ * @complexity O(n) in the rendered length.
+ */
+export declare function renderOutcomeDocument(spec: SurfaceOutcomeSpec): string;
+/**
+ * Renders the outcome document as an MCP-UI resource, ready to re-send under the SAME `ui://` URI a
+ * prior confirmation/form used for this exchange — see this module's header for why that URI reuse
+ * is the whole mechanism.
+ *
+ * @param spec.uri - MUST equal the URI of the surface being replaced (typically derived from the
+ * same exchange id) — a different URI would render as a SECOND, separate card rather than replacing
+ * the first.
+ * @complexity O(n) in the rendered length.
+ */
+export declare function buildOutcomeSurface(spec: SurfaceOutcomeSpec & {
+    uri: UIResourceUri;
+    preferredFrameSize?: readonly [string, string];
+}): UIResource;
+//# sourceMappingURL=outcome.d.ts.map

package/dist/features/mcp-ui/surfaces/outcome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outcome.d.ts","sourceRoot":"","sources":["../../../../src/features/mcp-ui/surfaces/outcome.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,EAAoB,KAAK,UAAU,EAAE,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEvF,OAAO,EAQL,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;mGAC+F;IAC/F,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAC5C;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;IAClD;;uFAEmF;IACnF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;wGACoG;IACpG,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,mFAAmF;IACnF,QAAQ,CAAC,GAAG,CAAC,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;CAC7D;AAMD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,CA2CtE;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,kBAAkB,GAAG;IAAE,GAAG,EAAE,aAAa,CAAC;IAAC,kBAAkB,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAAG,UAAU,CAUjJ"}

package/dist/features/mcp-ui/surfaces/outcome.js

@@ -0,0 +1,119 @@
+/**
+ * @module features/mcp-ui/surfaces/outcome
+ *
+ * A read-only RESULT surface: the human already answered a confirmation (or submitted a form, or a
+ * background action finished) and this is what actually happened, not what was proposed.
+ *
+ * ## Why this exists
+ *
+ * `document.ts`'s `DEFAULT_SURFACE_STATUS_TEXT.done` ("Done.") fires the instant a surface's
+ * `tools/call` RESOLVES — that proves the call reached the Host and came back, never that the
+ * underlying operation actually succeeded. A publish that 404s, a rejected credential, and a
+ * partial upload all resolve the SAME call and render the SAME "Done.". Worse, for a HELD-OPEN
+ * confirmation answered through `mcp-ui-tool-calls-route.ts`'s Shape 1 (an exchange delivery), the
+ * click's own `tools/call` round trip resolves the instant the answer is DELIVERED to the parked
+ * agent call (`{delivered: true}`, HTTP 202) — long before that parked call has actually finished
+ * doing the real work the human just approved. "Done." can fire before the real operation has even
+ * started.
+ *
+ * `McpUiSurfaceCard`'s own doc (`@jini-ai/chat`) already names the fix this builder exists to use:
+ * "a stream may re-send an updated document for a surface already on screen (a confirmation that
+ * became a result), so the LAST event for each URI wins." A caller that finishes a confirmed action
+ * re-emits THIS builder's resource under the SAME `ui://` URI the confirmation used, and the
+ * transcript replaces the dialog with the real result in place — no second frame, and (since
+ * `McpUiHost` keys its iframe by `sessionKey`, which defaults to the document text) no leftover
+ * Confirm/Cancel buttons a human could click again on a request that already ran.
+ *
+ * ## Why this is not `ConfirmationSurfaceSpec` with `confirm` made optional
+ *
+ * A confirmation's whole shape exists to hold a token the model must never read and to let a human
+ * ANSWER something. A result has already been answered — there is nothing left to confirm, cancel,
+ * or submit, so `confirm`/`cancel`'s tool-call plumbing has no honest value here. Reusing that type
+ * would mean either fabricating a placeholder `confirm` nobody should click, or forking the type at
+ * every call site into "sometimes required, sometimes not" — worse than a small, purpose-built
+ * sibling that carries only what a result needs.
+ *
+ * ## The one interactive element this DOES carry
+ *
+ * `openLinkUrl` renders a single button wired to the bridge's existing `openLink` (`ui/open-link`) —
+ * no new bridge plumbing: a `<a href>` is dead inside this package's sandboxed `srcdoc` frame (no
+ * `allow-top-navigation`), so `openLink` is the only way an isolated frame can navigate anything at
+ * all (`bridge.ts`'s own header). The URL is ALSO always rendered as a plain detail row regardless —
+ * copyable/selectable text that needs no script to be useful, matching this package's general
+ * "the document should say something true even if a caller never runs its script" posture.
+ */
+import { createUIResource } from '../resource.js';
+import { escapeHtml, escapeJsValue } from '../escape.js';
+import { renderActions, renderDetailList, renderStatusRegion, renderSurfaceDocument, renderSurfaceHeader, SURFACE_SCRIPT_PRELUDE, SURFACE_STATUS_ELEMENT_ID, } from './document.js';
+const DEFAULT_APP = { appName: 'jini-mcp-ui-outcome', appVersion: '1' };
+const DEFAULT_OPEN_LINK_LABEL = 'Open site';
+const OPEN_LINK_ACTION_ID = 'open-link';
+/**
+ * Renders the outcome document as a complete, self-contained HTML document.
+ *
+ * @param spec - See {@link SurfaceOutcomeSpec}.
+ * @returns The full HTML string.
+ * @complexity O(n) in the rendered length.
+ */
+export function renderOutcomeDocument(spec) {
+    const statusState = spec.state === 'success' ? 'done' : spec.state === 'partial' ? 'partial' : 'failed';
+    // Rendered directly into the status region rather than left for the script to set — this document
+    // has nothing further to wait on (unlike a confirmation, which starts idle and only reaches "done"
+    // after a click), so the true outcome should be visible from the FIRST paint, not a moment after
+    // the script runs.
+    const statusHtml = `<p class="mcpui-status" id="${SURFACE_STATUS_ELEMENT_ID}" role="status" aria-live="polite" data-state="${statusState}">${escapeHtml(spec.message)}</p>`;
+    const hasOpenLink = spec.openLinkUrl !== undefined;
+    const actionsHtml = hasOpenLink
+        ? renderActions([{ id: OPEN_LINK_ACTION_ID, label: spec.openLinkLabel ?? DEFAULT_OPEN_LINK_LABEL, variant: spec.state === 'success' ? 'primary' : 'neutral' }])
+        : '';
+    const bodyHtml = [
+        renderSurfaceHeader(spec.description === undefined ? { title: spec.title } : { title: spec.title, description: spec.description }),
+        renderDetailList(spec.details ?? []),
+        statusHtml,
+        actionsHtml,
+    ]
+        .filter((fragment) => fragment !== '')
+        .join('\n');
+    const script = hasOpenLink
+        ? `(function () {
+  "use strict";
+${SURFACE_SCRIPT_PRELUDE}
+  var OPEN_URL = ${escapeJsValue(spec.openLinkUrl)};
+  for (var i = 0; i < actionButtons.length; i++) {
+    actionButtons[i].addEventListener("click", function () { api.openLink(OPEN_URL); });
+  }
+}());`
+        // No prelude at all when there is nothing to wire up — a pure-display result needs no bridge
+        // calls and no `[data-mcpui-action]` scan.
+        : '(function () { "use strict"; }());';
+    return renderSurfaceDocument({
+        title: spec.title,
+        bodyHtml,
+        script,
+        app: spec.app ?? DEFAULT_APP,
+        ...(spec.lang === undefined ? {} : { lang: spec.lang }),
+        ...(spec.tokens === undefined ? {} : { tokens: spec.tokens }),
+    });
+}
+/**
+ * Renders the outcome document as an MCP-UI resource, ready to re-send under the SAME `ui://` URI a
+ * prior confirmation/form used for this exchange — see this module's header for why that URI reuse
+ * is the whole mechanism.
+ *
+ * @param spec.uri - MUST equal the URI of the surface being replaced (typically derived from the
+ * same exchange id) — a different URI would render as a SECOND, separate card rather than replacing
+ * the first.
+ * @complexity O(n) in the rendered length.
+ */
+export function buildOutcomeSurface(spec) {
+    return createUIResource({
+        uri: spec.uri,
+        htmlString: renderOutcomeDocument(spec),
+        ...(spec.preferredFrameSize === undefined ? {} : { preferredFrameSize: spec.preferredFrameSize }),
+        // No `actionPlan`: unlike a confirmation, this surface has nothing PENDING for
+        // `page.find_elements`'s parent-DOM mirror to describe (`McpUiSurfaceCard`'s own
+        // `readActionPlan`/`PendingSurfaceMirror` — that mirror exists for a confirmation a human has not
+        // yet answered; a result has already been answered).
+    });
+}
+//# sourceMappingURL=outcome.js.map

package/dist/features/mcp-ui/surfaces/outcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outcome.js","sourceRoot":"","sources":["../../../../src/features/mcp-ui/surfaces/outcome.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,EAAE,gBAAgB,EAAuC,MAAM,gBAAgB,CAAC;AACvF,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,yBAAyB,GAE1B,MAAM,eAAe,CAAC;AAoCvB,MAAM,WAAW,GAAqB,EAAE,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAC1F,MAAM,uBAAuB,GAAG,WAAW,CAAC;AAC5C,MAAM,mBAAmB,GAAG,WAAW,CAAC;AAExC;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAwB;IAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxG,kGAAkG;IAClG,mGAAmG;IACnG,iGAAiG;IACjG,mBAAmB;IACnB,MAAM,UAAU,GAAG,+BAA+B,yBAAyB,kDAAkD,WAAW,KAAK,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAE5K,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC;IACnD,MAAM,WAAW,GAAG,WAAW;QAC7B,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,IAAI,uBAAuB,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC/J,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,QAAQ,GAAG;QACf,mBAAmB,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAClI,gBAAgB,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACpC,UAAU;QACV,WAAW;KACZ;SACE,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,EAAE,CAAC;SACrC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,MAAM,GAAG,WAAW;QACxB,CAAC,CAAC;;EAEJ,sBAAsB;mBACL,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC;;;;MAI5C;QACF,6FAA6F;QAC7F,2CAA2C;QAC3C,CAAC,CAAC,oCAAoC,CAAC;IAEzC,OAAO,qBAAqB,CAAC;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ;QACR,MAAM;QACN,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,WAAW;QAC5B,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAiG;IACnI,OAAO,gBAAgB,CAAC;QACtB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,UAAU,EAAE,qBAAqB,CAAC,IAAI,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACjG,+EAA+E;QAC/E,iFAAiF;QACjF,kGAAkG;QAClG,qDAAqD;KACtD,CAAC,CAAC;AACL,CAAC"}

package/dist/features/mcp-ui/surfaces/select.d.ts

@@ -0,0 +1,35 @@
+export interface SelectOption {
+    /** The value posted back. */
+    readonly value: string;
+    /** What the human reads. Defaults to `value`. */
+    readonly label?: string;
+    readonly disabled?: boolean;
+}
+export interface SelectProps {
+    /** HTML `name`, DOM `id` suffix, and the params key the value is posted under. */
+    readonly name: string;
+    readonly label: string;
+    readonly options: readonly SelectOption[];
+    /** Which option starts selected. When it matches no option, nothing is pre-selected. */
+    readonly value?: string;
+    /** Help text, wired up with `aria-describedby`. */
+    readonly hint?: string;
+    /**
+     * Adds a leading empty option so "not answered yet" is representable, and marks the control
+     * `required` so submitting without choosing is blocked. Without it a `<select>` starts on its
+     * first option, which silently turns "the human never chose" into "the human chose the first one".
+     */
+    readonly required?: boolean;
+    /** Label for that leading empty option. Defaults to an em-dash. */
+    readonly placeholder?: string;
+    readonly disabled?: boolean;
+}
+/**
+ * Renders one enumerated field.
+ *
+ * @param props - See {@link SelectProps}.
+ * @returns An HTML fragment.
+ * @complexity O(n) in the number of options.
+ */
+export declare function renderSelect(props: SelectProps): string;
+//# sourceMappingURL=select.d.ts.map

package/dist/features/mcp-ui/surfaces/select.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"select.d.ts","sourceRoot":"","sources":["../../../../src/features/mcp-ui/surfaces/select.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,YAAY;IAC3B,6BAA6B;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,iDAAiD;IACjD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,kFAAkF;IAClF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;IAC1C,wFAAwF;IACxF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,mDAAmD;IACnD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAmBvD"}

package/dist/features/mcp-ui/surfaces/select.js

@@ -0,0 +1,36 @@
+/**
+ * @module features/mcp-ui/surfaces/select
+ *
+ * The enumerated-choice control fragment. A native `<select>` rather than a custom listbox: an
+ * isolated iframe has no shared component runtime to mount one from, and the native control already
+ * carries keyboard navigation, mobile pickers, and screen-reader semantics that a hand-rolled
+ * div-with-role would have to re-earn.
+ */
+import { escapeHtml } from '../escape.js';
+import { fieldDescribedBy, fieldElementId, renderFieldLabel } from './document.js';
+/**
+ * Renders one enumerated field.
+ *
+ * @param props - See {@link SelectProps}.
+ * @returns An HTML fragment.
+ * @complexity O(n) in the number of options.
+ */
+export function renderSelect(props) {
+    const id = fieldElementId(props.name);
+    const placeholderOption = props.required === true
+        ? `\n  <option value="" ${props.value === undefined ? 'selected ' : ''}disabled>${escapeHtml(props.placeholder ?? '—')}</option>`
+        : '';
+    const options = props.options
+        .map((option) => {
+        const selected = option.value === props.value ? ' selected' : '';
+        const disabled = option.disabled === true ? ' disabled' : '';
+        return `  <option value="${escapeHtml(option.value)}"${selected}${disabled}>${escapeHtml(option.label ?? option.value)}</option>`;
+    })
+        .join('\n');
+    const attributes = ` id="${escapeHtml(id)}" name="${escapeHtml(props.name)}"` +
+        (props.required === true ? ' required' : '') +
+        (props.disabled === true ? ' disabled' : '') +
+        fieldDescribedBy(props);
+    return `<div class="mcpui-field">\n${renderFieldLabel(props)}\n<select class="mcpui-select"${attributes}>${placeholderOption}\n${options}\n</select>\n</div>`;
+}
+//# sourceMappingURL=select.js.map

package/dist/features/mcp-ui/surfaces/select.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"select.js","sourceRoot":"","sources":["../../../../src/features/mcp-ui/surfaces/select.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AA8BnF;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,KAAkB;IAC7C,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,iBAAiB,GACrB,KAAK,CAAC,QAAQ,KAAK,IAAI;QACrB,CAAC,CAAC,wBAAwB,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,UAAU,CAAC,KAAK,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW;QACjI,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO;SAC1B,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACd,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,oBAAoB,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,QAAQ,GAAG,QAAQ,IAAI,UAAU,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;IACpI,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,UAAU,GACd,QAAQ,UAAU,CAAC,EAAE,CAAC,WAAW,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG;QAC1D,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO,8BAA8B,gBAAgB,CAAC,KAAK,CAAC,iCAAiC,UAAU,IAAI,iBAAiB,KAAK,OAAO,qBAAqB,CAAC;AAChK,CAAC"}

package/dist/features/mcp-ui/surfaces/text-input.d.ts

@@ -0,0 +1,35 @@
+export interface TextInputProps {
+    /** HTML `name`, DOM `id` suffix, and the params key the value is posted under. */
+    readonly name: string;
+    readonly label: string;
+    /** Pre-filled value. Numbers are stringified; `undefined` leaves the control empty. */
+    readonly value?: string | number;
+    readonly placeholder?: string;
+    /** Help text, wired up with `aria-describedby`. */
+    readonly hint?: string;
+    readonly required?: boolean;
+    readonly disabled?: boolean;
+    /** `'number'` also constrains the on-screen keyboard on touch devices, which `'text'` would not. */
+    readonly inputType?: 'text' | 'number';
+    /** Renders as `<input type="password">` — the value is never visible on screen, and browser
+     *  password managers may offer to remember it. Ignored when `inputType` is `'number'` (no such
+     *  thing as a masked number) and forces `multiline` off (no `<textarea type="password">` exists) —
+     *  same precedence `multiline`'s own doc comment already gives `inputType: 'number'`. */
+    readonly secret?: boolean;
+    /** Renders a `<textarea>`. Ignored when `inputType` is `'number'` — there is no multiline number. */
+    readonly multiline?: boolean;
+    readonly rows?: number;
+    /** Number-only constraints; ignored for text. */
+    readonly min?: number;
+    readonly max?: number;
+    readonly step?: number;
+}
+/**
+ * Renders one free-text field: its label, hint, and control, wrapped in `.mcpui-field`.
+ *
+ * @param props - See {@link TextInputProps}.
+ * @returns An HTML fragment. Not a whole document — compose it with `form.ts`.
+ * @complexity O(n) in the rendered length.
+ */
+export declare function renderTextInput(props: TextInputProps): string;
+//# sourceMappingURL=text-input.d.ts.map

package/dist/features/mcp-ui/surfaces/text-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"text-input.d.ts","sourceRoot":"","sources":["../../../../src/features/mcp-ui/surfaces/text-input.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,cAAc;IAC7B,kFAAkF;IAClF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,uFAAuF;IACvF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,mDAAmD;IACnD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,oGAAoG;IACpG,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IACvC;;;6FAGyF;IACzF,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,qGAAqG;IACrG,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,iDAAiD;IACjD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAwBD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAyB7D"}