@jini-ai/ui 0.1.2 → 0.3.0

package/dist/react/hooks/useBrandFonts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useBrandFonts.d.ts","sourceRoot":"","sources":["../../../src/react/hooks/useBrandFonts.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,qBAAqB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CACtE;AAED,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,KAAK,EAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,EACpC,OAAO,GAAE,oBAAyB,GACjC,IAAI,CA+DN"}
+{"version":3,"file":"useBrandFonts.d.ts","sourceRoot":"","sources":["../../../src/react/hooks/useBrandFonts.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,qBAAqB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CACtE;AAED,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,KAAK,EAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,EACpC,OAAO,GAAE,oBAAyB,GACjC,IAAI,CAiEN"}

package/dist/react/hooks/useBrandFonts.js

@@ -5,6 +5,7 @@
 // down on change. Not tied to any one feature domain — feature-local hooks
 // live inside their own `features/<domain>/react/hooks/` instead.
 import { useEffect, useMemo } from 'react';
+import { FETCH_TIMEOUT_MS, fetchWithTimeout } from '@jini-ai/platform/fetch-with-timeout';
 export function useBrandFonts(projectId, fonts, options = {}) {
     const { resolveProjectAssetUrl } = options;
     const googleUrls = useMemo(() => {
@@ -33,9 +34,7 @@ export function useBrandFonts(projectId, fonts, options = {}) {
         let styleEl = null;
         void (async () => {
             try {
-                const resp = await fetch(resolveProjectAssetUrl(projectId, 'fonts/manifest.json'), {
-                    cache: 'no-store',
-                });
+                const resp = await fetchWithTimeout(resolveProjectAssetUrl(projectId, 'fonts/manifest.json'), { cache: 'no-store' }, { timeoutMs: FETCH_TIMEOUT_MS.QUICK });
                 if (!resp.ok)
                     return;
                 const data = (await resp.json());

package/dist/react/hooks/useBrandFonts.js.map

@@ -1 +1 @@
-{"version":3,"file":"useBrandFonts.js","sourceRoot":"","sources":["../../../src/react/hooks/useBrandFonts.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,kEAAkE;AAClE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAuB3C,MAAM,UAAU,aAAa,CAC3B,SAA6B,EAC7B,KAAoC,EACpC,UAAgC,EAAE;IAElC,MAAM,EAAE,sBAAsB,EAAE,GAAG,OAAO,CAAC;IAE3C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE;QAC9B,MAAM,IAAI,GAAG,KAAK;aACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;aAC5B,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,sCAAsC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAEZ,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC;YACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,EAAE;YACV,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1C,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAEjB,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,SAAS,IAAI,CAAC,sBAAsB;YAAE,OAAO;QAClD,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,OAAO,GAA4B,IAAI,CAAC;QAC5C,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,sBAAsB,CAAC,SAAS,EAAE,qBAAqB,CAAC,EAAE;oBACjF,KAAK,EAAE,UAAU;iBAClB,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO;gBACrB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAsB,CAAC;gBACtD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,IAAI,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO;gBAC5C,MAAM,GAAG,GAAG,KAAK;qBACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBACT,MAAM,GAAG,GAAG,sBAAsB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBACjE,OAAO;wBACL,cAAc;wBACd,mBAAmB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI;wBACjD,eAAe,GAAG,cAAc,CAAC,CAAC,MAAM,KAAK;wBAC7C,kBAAkB,CAAC,CAAC,MAAM,GAAG;wBAC7B,iBAAiB,CAAC,CAAC,KAAK,GAAG;wBAC3B,uBAAuB;wBACvB,GAAG;qBACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACf,CAAC,CAAC;qBACD,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;gBAC1C,OAAO,CAAC,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;gBACvC,OAAO,CAAC,WAAW,GAAG,GAAG,CAAC;gBAC1B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,6DAA6D;YAC/D,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,OAAO;gBAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAChC,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"useBrandFonts.js","sourceRoot":"","sources":["../../../src/react/hooks/useBrandFonts.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,kEAAkE;AAClE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAuB1F,MAAM,UAAU,aAAa,CAC3B,SAA6B,EAC7B,KAAoC,EACpC,UAAgC,EAAE;IAElC,MAAM,EAAE,sBAAsB,EAAE,GAAG,OAAO,CAAC;IAE3C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE;QAC9B,MAAM,IAAI,GAAG,KAAK;aACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;aAC5B,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,sCAAsC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAEZ,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC;YACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,EAAE;YACV,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1C,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAEjB,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,SAAS,IAAI,CAAC,sBAAsB;YAAE,OAAO;QAClD,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,OAAO,GAA4B,IAAI,CAAC;QAC5C,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CACjC,sBAAsB,CAAC,SAAS,EAAE,qBAAqB,CAAC,EACxD,EAAE,KAAK,EAAE,UAAU,EAAE,EACrB,EAAE,SAAS,EAAE,gBAAgB,CAAC,KAAK,EAAE,CACtC,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO;gBACrB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAsB,CAAC;gBACtD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,IAAI,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO;gBAC5C,MAAM,GAAG,GAAG,KAAK;qBACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBACT,MAAM,GAAG,GAAG,sBAAsB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBACjE,OAAO;wBACL,cAAc;wBACd,mBAAmB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI;wBACjD,eAAe,GAAG,cAAc,CAAC,CAAC,MAAM,KAAK;wBAC7C,kBAAkB,CAAC,CAAC,MAAM,GAAG;wBAC7B,iBAAiB,CAAC,CAAC,KAAK,GAAG;wBAC3B,uBAAuB;wBACvB,GAAG;qBACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACf,CAAC,CAAC;qBACD,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;gBAC1C,OAAO,CAAC,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;gBACvC,OAAO,CAAC,WAAW,GAAG,GAAG,CAAC;gBAC1B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,6DAA6D;YAC/D,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,OAAO;gBAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAChC,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC,CAAC;AAC1C,CAAC"}

package/dist/react/mcp-ui/McpUiHost.d.ts

@@ -0,0 +1,19 @@
+import { type McpUiHostOptions } from './useMcpUiHost.js';
+export interface McpUiHostProps extends McpUiHostOptions {
+    /** The frame's accessible name — forwarded to `AppRenderer`'s `hostInfo`-independent wrapper `<div>`; the iframe itself has no `title` attribute in `@mcp-ui/client`'s own markup, so this labels the wrapper instead. */
+    readonly title: string;
+    readonly className?: string;
+    /** Frame height before the View reports its own, and whenever `autoResize` is off. */
+    readonly initialHeight?: number;
+    /** Follow the View's reported height. Defaults to `true`. */
+    readonly autoResize?: boolean;
+    /** Ceiling for the followed height, so a View reporting an enormous size cannot push the rest of the page off-screen. */
+    readonly maxHeight?: number;
+}
+/**
+ * Renders a View and runs its protocol session.
+ *
+ * @param props - See {@link McpUiHostProps}.
+ */
+export declare function McpUiHost(props: McpUiHostProps): import("react").JSX.Element;
+//# sourceMappingURL=McpUiHost.d.ts.map

package/dist/react/mcp-ui/McpUiHost.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"McpUiHost.d.ts","sourceRoot":"","sources":["../../../src/react/mcp-ui/McpUiHost.tsx"],"names":[],"mappings":"AAYA,OAAO,EAAgB,KAAK,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAExE,MAAM,WAAW,cAAe,SAAQ,gBAAgB;IACtD,0NAA0N;IAC1N,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,sFAAsF;IACtF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,6DAA6D;IAC7D,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,yHAAyH;IACzH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAKD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,+BA0B9C"}

package/dist/react/mcp-ui/McpUiHost.js

@@ -0,0 +1,34 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+/**
+ * @module react/mcp-ui/McpUiHost
+ *
+ * Mounts one MCP-UI View through the real `@mcp-ui/client` `AppRenderer` — the sandboxed iframe, the
+ * handshake, and the frame sizing that follows the View's own `ui/notifications/size-changed` are
+ * all `AppRenderer`'s job now; this component supplies the chrome (title, class, height clamping)
+ * around it. See `useMcpUiHost.ts`'s module doc for what this swap changed and why.
+ *
+ * Thin on purpose, same as before — every protocol decision lives in `useMcpUiHost.ts`, so a
+ * consumer needing different chrome writes that chrome against the hook rather than forking this.
+ */
+import { AppRenderer } from '@mcp-ui/client';
+import { useMcpUiHost } from './useMcpUiHost.js';
+const DEFAULT_INITIAL_HEIGHT = 220;
+const DEFAULT_MAX_HEIGHT = 720;
+/**
+ * Renders a View and runs its protocol session.
+ *
+ * @param props - See {@link McpUiHostProps}.
+ */
+export function McpUiHost(props) {
+    const { title, className, initialHeight = DEFAULT_INITIAL_HEIGHT, autoResize = true, maxHeight = DEFAULT_MAX_HEIGHT } = props;
+    const host = useMcpUiHost(props);
+    const reported = host.size?.height;
+    const height = autoResize && reported !== undefined ? Math.min(Math.max(reported, 1), maxHeight) : initialHeight;
+    return (_jsx("div", { className: className, "data-mcpui-host": "", "data-mcpui-state": host.state, "aria-label": title, style: { display: 'block', width: '100%', height }, children: _jsx(AppRenderer
+        // Keyed by the session so replacing the document remounts `AppRenderer` — a fresh
+        // `AppBridge`, a fresh sandbox iframe, a fresh handshake. `AppRenderer` itself provides no
+        // "replace the document in place" mode; remount via `key` is the supported way to start a
+        // new session, per `@mcp-ui/client`'s own docs.
+        , { ref: host.rendererRef, ...host.rendererProps }, String(props.sessionKey ?? props.html)) }));
+}
+//# sourceMappingURL=McpUiHost.js.map

package/dist/react/mcp-ui/McpUiHost.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"McpUiHost.js","sourceRoot":"","sources":["../../../src/react/mcp-ui/McpUiHost.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAyB,MAAM,mBAAmB,CAAC;AAcxE,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,KAAqB;IAC7C,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,GAAG,sBAAsB,EAAE,UAAU,GAAG,IAAI,EAAE,SAAS,GAAG,kBAAkB,EAAE,GAAG,KAAK,CAAC;IAC9H,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAEjC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;IACnC,MAAM,MAAM,GAAG,UAAU,IAAI,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IAEjH,OAAO,CACL,cACE,SAAS,EAAE,SAAS,qBACJ,EAAE,sBACA,IAAI,CAAC,KAAK,gBAChB,KAAK,EACjB,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,YAElD,KAAC,WAAW;QACV,kFAAkF;QAClF,2FAA2F;QAC3F,0FAA0F;QAC1F,gDAAgD;YAEhD,GAAG,EAAE,IAAI,CAAC,WAAW,KACjB,IAAI,CAAC,aAAa,IAFjB,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,CAG3C,GACE,CACP,CAAC;AACJ,CAAC"}

package/dist/react/mcp-ui/host-message-source.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @module react/mcp-ui/host-message-source
+ *
+ * The single `window` message listener every MCP-UI Host in the page shares, installed at MODULE
+ * scope rather than in a React effect.
+ *
+ * This is the whole point of `features/mcp-ui/early-message-buffer.ts`, and the placement is the
+ * load-bearing part: this module is evaluated when it is first imported — before any Host component
+ * has mounted, and therefore before an iframe carrying a View could exist in the DOM. A View that
+ * posts `ui/initialize` the instant its script runs is heard, even if the Host's own effect has not
+ * run yet, because the listener was already installed and the buffer holds what arrives until a
+ * subscriber drains it.
+ *
+ * Doing this in a `useEffect` instead loses every message posted between mount-commit and effect-run
+ * — a window that a lazy import, a Suspense boundary, or one expensive sibling render makes real.
+ *
+ * The `typeof window` guard is for SSR: importing this module during a server render must not throw.
+ * Nothing subscribes there, and the module has no other side effect.
+ */
+import { type BufferedWindowMessage } from '../../features/mcp-ui/early-message-buffer.js';
+/** How a Host receives raw window messages. Injectable so a test can drive one without a real `postMessage`. */
+export type ViewMessageSource = (handler: (message: BufferedWindowMessage) => void) => () => void;
+/** The default {@link ViewMessageSource}: the shared, module-scope buffer above. */
+export declare const subscribeToViewMessages: ViewMessageSource;
+/** Backlogged message count — diagnostics and tests only. */
+export declare function viewMessageBacklogSize(): number;
+//# sourceMappingURL=host-message-source.d.ts.map

package/dist/react/mcp-ui/host-message-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-message-source.d.ts","sourceRoot":"","sources":["../../../src/react/mcp-ui/host-message-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,+CAA+C,CAAC;AAUvD,gHAAgH;AAChH,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,qBAAqB,KAAK,IAAI,KAAK,MAAM,IAAI,CAAC;AAElG,oFAAoF;AACpF,eAAO,MAAM,uBAAuB,EAAE,iBAA0D,CAAC;AAEjG,6DAA6D;AAC7D,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C"}

package/dist/react/mcp-ui/host-message-source.js

@@ -0,0 +1,33 @@
+/**
+ * @module react/mcp-ui/host-message-source
+ *
+ * The single `window` message listener every MCP-UI Host in the page shares, installed at MODULE
+ * scope rather than in a React effect.
+ *
+ * This is the whole point of `features/mcp-ui/early-message-buffer.ts`, and the placement is the
+ * load-bearing part: this module is evaluated when it is first imported — before any Host component
+ * has mounted, and therefore before an iframe carrying a View could exist in the DOM. A View that
+ * posts `ui/initialize` the instant its script runs is heard, even if the Host's own effect has not
+ * run yet, because the listener was already installed and the buffer holds what arrives until a
+ * subscriber drains it.
+ *
+ * Doing this in a `useEffect` instead loses every message posted between mount-commit and effect-run
+ * — a window that a lazy import, a Suspense boundary, or one expensive sibling render makes real.
+ *
+ * The `typeof window` guard is for SSR: importing this module during a server render must not throw.
+ * Nothing subscribes there, and the module has no other side effect.
+ */
+import { createEarlyMessageBuffer, } from '../../features/mcp-ui/early-message-buffer.js';
+const buffer = createEarlyMessageBuffer();
+if (typeof window !== 'undefined') {
+    window.addEventListener('message', (event) => {
+        buffer.push({ data: event.data, origin: event.origin, source: event.source });
+    });
+}
+/** The default {@link ViewMessageSource}: the shared, module-scope buffer above. */
+export const subscribeToViewMessages = (handler) => buffer.subscribe(handler);
+/** Backlogged message count — diagnostics and tests only. */
+export function viewMessageBacklogSize() {
+    return buffer.backlogSize;
+}
+//# sourceMappingURL=host-message-source.js.map

package/dist/react/mcp-ui/host-message-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-message-source.js","sourceRoot":"","sources":["../../../src/react/mcp-ui/host-message-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EACL,wBAAwB,GAEzB,MAAM,+CAA+C,CAAC;AAEvD,MAAM,MAAM,GAAG,wBAAwB,EAAE,CAAC;AAE1C,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;IAClC,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,KAAmB,EAAE,EAAE;QACzD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC;AAKD,oFAAoF;AACpF,MAAM,CAAC,MAAM,uBAAuB,GAAsB,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AAEjG,6DAA6D;AAC7D,MAAM,UAAU,sBAAsB;IACpC,OAAO,MAAM,CAAC,WAAW,CAAC;AAC5B,CAAC"}

package/dist/react/mcp-ui/index.d.ts

@@ -0,0 +1,23 @@
+/**
+ * @module react/mcp-ui
+ *
+ * The React Host for MCP-UI: the component that mounts a sandboxed View in the chat pane, runs the
+ * `ui/initialize` handshake, and forwards the View's `tools/call` requests to a host-supplied
+ * executor.
+ *
+ * This half owns React and the DOM; it never hand-builds HTML. The documents it mounts come from
+ * `@jini-ai/ui/mcp-ui/surfaces` (`../../features/mcp-ui/`), which owns no React. The dependency runs
+ * one way only.
+ *
+ * `McpUiSurfaceCard`/`registerMcpUiSurfaceRenderer` moved to `@jini-ai/chat/react` 2026-08-03: it's
+ * a chat-transcript ext-event renderer (chat domain), not a generic mcp-ui hosting primitive, and
+ * keeping it here would have made this package depend on `@jini-ai/chat` — a cycle, since
+ * `@jini-ai/chat` already depends on `@jini-ai/ui` for shared React primitives. `McpUiHost` and
+ * `useMcpUiHost` (the actual sandboxed-iframe hosting mechanics, reused by more than the chat
+ * integration) stay here.
+ */
+export * from './McpUiHost.js';
+export * from './host-message-source.js';
+export * from './useMcpUiHost.js';
+export * from '../../features/mcp-ui/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/react/mcp-ui/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/react/mcp-ui/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAKlC,cAAc,gCAAgC,CAAC"}

package/dist/react/mcp-ui/index.js

@@ -0,0 +1,26 @@
+/**
+ * @module react/mcp-ui
+ *
+ * The React Host for MCP-UI: the component that mounts a sandboxed View in the chat pane, runs the
+ * `ui/initialize` handshake, and forwards the View's `tools/call` requests to a host-supplied
+ * executor.
+ *
+ * This half owns React and the DOM; it never hand-builds HTML. The documents it mounts come from
+ * `@jini-ai/ui/mcp-ui/surfaces` (`../../features/mcp-ui/`), which owns no React. The dependency runs
+ * one way only.
+ *
+ * `McpUiSurfaceCard`/`registerMcpUiSurfaceRenderer` moved to `@jini-ai/chat/react` 2026-08-03: it's
+ * a chat-transcript ext-event renderer (chat domain), not a generic mcp-ui hosting primitive, and
+ * keeping it here would have made this package depend on `@jini-ai/chat` — a cycle, since
+ * `@jini-ai/chat` already depends on `@jini-ai/ui` for shared React primitives. `McpUiHost` and
+ * `useMcpUiHost` (the actual sandboxed-iframe hosting mechanics, reused by more than the chat
+ * integration) stay here.
+ */
+export * from './McpUiHost.js';
+export * from './host-message-source.js';
+export * from './useMcpUiHost.js';
+// Re-exported so a React consumer needs one import for the whole feature: the Host takes an HTML
+// string, and the builders are what produce one. `@jini-ai/ui/mcp-ui/surfaces` remains the entry
+// point for a server with no React in it at all.
+export * from '../../features/mcp-ui/index.js';
+//# sourceMappingURL=index.js.map

package/dist/react/mcp-ui/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/react/mcp-ui/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAElC,iGAAiG;AACjG,iGAAiG;AACjG,iDAAiD;AACjD,cAAc,gCAAgC,CAAC"}

package/dist/react/mcp-ui/useMcpUiHost.d.ts

@@ -0,0 +1,160 @@
+/**
+ * @module react/mcp-ui/useMcpUiHost
+ *
+ * The Host half of the MCP Apps handshake — now backed by the REAL, official `@mcp-ui/client`
+ * package (`AppRenderer`) instead of this package's own hand-rolled `postMessage` state machine.
+ *
+ * ## What changed, and why this file still exists at all
+ *
+ * The owner's decision (2026-08-18): stop hand-rolling MCP-UI client-side rendering; use
+ * `@mcp-ui/client` for real. This hook and {@link ../../features/mcp-ui/sandbox-proxy.js} are that
+ * swap's Host-side landing point. `useMcpUiHost`/`McpUiHost` are KEPT — same export names, same
+ * subpath (`@jini-ai/ui/mcp-ui`) — because real external consumers may already import them by name;
+ * see this session's report for what could and could not be held identical.
+ *
+ * The wire protocol did NOT change: every existing surface this package generates
+ * (`surfaces/document.ts`, `surfaces/bridge.ts`, `surfaces/confirmation.ts`, `surfaces/form.ts`, …)
+ * is untouched, and still speaks the same JSON-RPC-over-`postMessage` envelope to `window.parent`
+ * that it always has. What makes the swap possible without touching any of those builders is
+ * {@link ../../features/mcp-ui/sandbox-proxy.js}'s single-hop relay design — see that module's own
+ * doc for the exact mechanism and the security tradeoff it makes.
+ *
+ * ## What could NOT be held identical — read before assuming parity
+ *
+ * - **A new REQUIRED option: {@link McpUiHostOptions.sandboxProxyUrl}.** `@mcp-ui/client`'s
+ *   `AppRenderer` renders into a real, separately-served page rather than a `srcdoc` string, so
+ *   every caller now has to say where that page lives. There is no sane default — see
+ *   `sandbox-proxy.ts`'s doc for what has to serve it and where. This is the one addition to
+ *   `McpUiHostOptions` that could not be avoided; every other field below is either preserved or a
+ *   documented, deliberate reduction.
+ * - **`iframeRef` is gone.** `AppRenderer` owns its own iframe internally and does not expose it.
+ *   Nothing in this monorepo read `useMcpUiHost(...).iframeRef` outside `McpUiHost.tsx` itself
+ *   (verified by search before this swap), so this is believed to be safe, but it is a real removal
+ *   from the old `McpUiHostResult` shape, not a preserved one.
+ * - **`state` is coarser.** The old hand-rolled state machine could observe
+ *   `awaiting-initialize`/`awaiting-initialized` as DISTINCT states because it watched every
+ *   handshake message itself. `AppRenderer` does not expose an "initialized" callback (only
+ *   `onSizeChanged`, `onError`, and the imperative ref methods) — see {@link McpUiHostState}'s own
+ *   doc for exactly what this hook infers instead and the one assumption that inference rests on.
+ * - **`teardownAcknowledged` can no longer be genuinely tracked.** `AppRendererHandle.teardownResource()`
+ *   is synchronous, fire-and-forget — `@mcp-ui/client` exposes no signal for "the View acknowledged
+ *   teardown." The field is kept (so the shape still matches) but can only ever be `null` now. See
+ *   {@link McpUiHostResult.teardownAcknowledged}.
+ * - **`messageSource` (the test-injection seam) is gone.** There is no `postMessage` listening left
+ *   in this file to inject a fake source into — `AppRenderer` owns that internally. Tests against
+ *   this hook now drive real `AppRenderer` callbacks instead; see `__tests__/useMcpUiHost.test.tsx`.
+ *
+ * ## How a consumer uses this hook now
+ *
+ * `useMcpUiHost` cannot mount DOM by itself — `@mcp-ui/client`'s primitives are React COMPONENTS,
+ * not a framework-free state machine a hook can drive imperatively (the old implementation could,
+ * because it hand-rolled the iframe and the `postMessage` listening both). So this hook returns
+ * {@link McpUiHostResult.rendererProps}: a ready-to-spread props object for `@mcp-ui/client`'s
+ * `<AppRenderer>`. `McpUiHost.tsx` is the reference consumer — a caller building custom chrome
+ * writes `<AppRenderer key={sessionKey} {...host.rendererProps} />` the same way `McpUiHost.tsx`
+ * does, and reads `host.state`/`host.size` to build UI around it.
+ */
+import { type RefObject } from 'react';
+import type { AppRendererHandle, AppRendererProps } from '@mcp-ui/client';
+/**
+ * Vestigial after this swap — `@mcp-ui/client` owns the sandbox-proxy-ready handshake internally on
+ * a fixed, non-configurable 10s timeout this package cannot change. Kept exported (existing
+ * consumers/tests reference it) and repurposed below as this hook's OWN ready-watchdog timeout,
+ * which is a real, still-enforced behavior — see {@link McpUiHostOptions.initializedTimeoutMs}.
+ */
+export declare const DEFAULT_TEARDOWN_TIMEOUT_MS = 3000;
+/** How long {@link useMcpUiHost} waits for the View's first size report before giving up — see {@link McpUiHostState}. */
+export declare const DEFAULT_INITIALIZED_TIMEOUT_MS = 4000;
+/**
+ * Coarser than the old hand-rolled state machine's five states — see this module's own doc for why.
+ *
+ * `'ready'` is inferred from the View's FIRST `ui/notifications/size-changed` report, not observed
+ * directly: `@mcp-ui/client`'s `AppRenderer` exposes no "handshake complete" callback. This is a
+ * verified-true, not merely assumed, proxy for every surface `../../features/mcp-ui/surfaces/`
+ * generates — `surfaces/bridge.ts`'s `onHandshakeDone` calls `reportSize()` unconditionally, so a
+ * Jini-built surface always reports a size the instant it becomes ready. It is NOT a spec guarantee
+ * for an arbitrary third-party View that happens to never call `ui/notifications/size-changed`.
+ */
+export type McpUiHostState = 'awaiting-ready' | 'ready' | 'timed-out' | 'errored' | 'torn-down';
+/** One observable protocol moment. Purely informational, same as before — nothing here reads these back. */
+export interface McpUiHostEvent {
+    readonly direction: 'in' | 'out' | 'rejected' | 'refused' | 'timeout' | 'info';
+    readonly note: string;
+}
+export interface McpUiToolCall {
+    readonly name: string;
+    readonly arguments: Readonly<Record<string, unknown>>;
+}
+/**
+ * Executes a tool a View asked for. Unchanged from before this swap — see this hook's module doc
+ * for the verified runtime guarantee that a rejection is relayed to the View as a JSON-RPC error and
+ * a resolution is passed through as the `result` UNVALIDATED against any particular shape (checked
+ * directly against the installed `@modelcontextprotocol/sdk`'s `Protocol._onrequest`, not assumed).
+ */
+export type McpUiToolCallHandler = (call: McpUiToolCall) => Promise<unknown> | unknown;
+export interface McpUiHostOptions {
+    /** The View document. Unchanged in meaning; no longer mounted via `srcdoc` — see this module's doc. */
+    readonly html: string;
+    /**
+     * Where the sandbox proxy page (`../../features/mcp-ui/sandbox-proxy.js`'s `SANDBOX_PROXY_HTML`)
+     * is served. NEW, and required — see this module's own doc for why there is no sane default.
+     */
+    readonly sandboxProxyUrl: URL;
+    /**
+     * Reported to `@mcp-ui/client` as this View's `toolName`. Purely a label in this package's usage
+     * (no live MCP `client` is ever supplied, so `AppRenderer`'s tool/resource-fetching machinery
+     * that would otherwise consume this never runs) — defaults to a generic constant when omitted.
+     * A caller with a real tool name (e.g. `content_post_delete`) should pass it for clearer
+     * diagnostics/telemetry on `@mcp-ui/client`'s side.
+     */
+    readonly toolName?: string;
+    /** Changing this remounts the `<AppRenderer>` a consumer keys by it — see `McpUiHost.tsx`. */
+    readonly sessionKey?: string | number;
+    readonly onToolCall?: McpUiToolCallHandler;
+    /** Handles `ui/open-link`. Omit and the Host refuses the request (mirrors the old behavior). */
+    readonly onOpenLink?: (url: string) => void;
+    readonly onSizeChanged?: (size: {
+        readonly width: number;
+        readonly height: number;
+    }) => void;
+    readonly onEvent?: (event: McpUiHostEvent) => void;
+    readonly hostInfo?: {
+        readonly name: string;
+        readonly version: string;
+    };
+    readonly hostContext?: Readonly<Record<string, unknown>>;
+    /** How long to wait for the View's first size report before {@link McpUiHostState} becomes `'timed-out'`. */
+    readonly initializedTimeoutMs?: number;
+}
+export interface McpUiHostResult {
+    readonly state: McpUiHostState;
+    readonly size: {
+        readonly width: number;
+        readonly height: number;
+    } | null;
+    /** Best-effort: notifies the View, but see {@link teardownAcknowledged} — no acknowledgement is observable anymore. */
+    readonly requestTeardown: () => void;
+    /**
+     * Always `null` after this swap. `@mcp-ui/client`'s `AppRendererHandle.teardownResource()` is
+     * synchronous and fire-and-forget; nothing in its public API reports whether a View answered.
+     * Kept in this shape (rather than removed) so existing code reading it does not need an unrelated
+     * type-level change; see this module's own doc for the follow-up this leaves open.
+     */
+    readonly teardownAcknowledged: boolean | null;
+    /** Spread onto `<AppRenderer key={sessionKey ?? html} {...rendererProps} />` — see this module's own doc. */
+    readonly rendererProps: AppRendererProps;
+    /**
+     * Pass as `ref` on that same `<AppRenderer>` element. Separate from {@link rendererProps} because
+     * `ref` is not a member of `AppRendererProps` itself — `AppRenderer` is a `forwardRef` component,
+     * so React types it as an addition alongside the props, not a prop.
+     */
+    readonly rendererRef: RefObject<AppRendererHandle | null>;
+}
+/**
+ * Runs the Host-side protocol for one View, on top of `@mcp-ui/client`'s `AppRenderer`.
+ *
+ * @param options - See {@link McpUiHostOptions}.
+ * @returns See {@link McpUiHostResult}.
+ */
+export declare function useMcpUiHost(options: McpUiHostOptions): McpUiHostResult;
+//# sourceMappingURL=useMcpUiHost.d.ts.map

package/dist/react/mcp-ui/useMcpUiHost.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useMcpUiHost.d.ts","sourceRoot":"","sources":["../../../src/react/mcp-ui/useMcpUiHost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,OAAO,EAAqD,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAC1F,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAE1E;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,OAAQ,CAAC;AACjD,0HAA0H;AAC1H,eAAO,MAAM,8BAA8B,OAAQ,CAAC;AAEpD;;;;;;;;;GASG;AACH,MAAM,MAAM,cAAc,GAAG,gBAAgB,GAAG,OAAO,GAAG,WAAW,GAAG,SAAS,GAAG,WAAW,CAAC;AAEhG,4GAA4G;AAC5G,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,IAAI,GAAG,KAAK,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;IAC/E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAEvF,MAAM,WAAW,gBAAgB;IAC/B,uGAAuG;IACvG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,8FAA8F;IAC9F,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAC3C,gGAAgG;IAChG,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC7F,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IACnD,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACxE,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACzD,6GAA6G;IAC7G,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;CACxC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1E,uHAAuH;IACvH,QAAQ,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAC;IAC9C,6GAA6G;IAC7G,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC;IACzC;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;CAC3D;AAQD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,eAAe,CAgJvE"}

package/dist/react/mcp-ui/useMcpUiHost.js

@@ -0,0 +1,193 @@
+/**
+ * @module react/mcp-ui/useMcpUiHost
+ *
+ * The Host half of the MCP Apps handshake — now backed by the REAL, official `@mcp-ui/client`
+ * package (`AppRenderer`) instead of this package's own hand-rolled `postMessage` state machine.
+ *
+ * ## What changed, and why this file still exists at all
+ *
+ * The owner's decision (2026-08-18): stop hand-rolling MCP-UI client-side rendering; use
+ * `@mcp-ui/client` for real. This hook and {@link ../../features/mcp-ui/sandbox-proxy.js} are that
+ * swap's Host-side landing point. `useMcpUiHost`/`McpUiHost` are KEPT — same export names, same
+ * subpath (`@jini-ai/ui/mcp-ui`) — because real external consumers may already import them by name;
+ * see this session's report for what could and could not be held identical.
+ *
+ * The wire protocol did NOT change: every existing surface this package generates
+ * (`surfaces/document.ts`, `surfaces/bridge.ts`, `surfaces/confirmation.ts`, `surfaces/form.ts`, …)
+ * is untouched, and still speaks the same JSON-RPC-over-`postMessage` envelope to `window.parent`
+ * that it always has. What makes the swap possible without touching any of those builders is
+ * {@link ../../features/mcp-ui/sandbox-proxy.js}'s single-hop relay design — see that module's own
+ * doc for the exact mechanism and the security tradeoff it makes.
+ *
+ * ## What could NOT be held identical — read before assuming parity
+ *
+ * - **A new REQUIRED option: {@link McpUiHostOptions.sandboxProxyUrl}.** `@mcp-ui/client`'s
+ *   `AppRenderer` renders into a real, separately-served page rather than a `srcdoc` string, so
+ *   every caller now has to say where that page lives. There is no sane default — see
+ *   `sandbox-proxy.ts`'s doc for what has to serve it and where. This is the one addition to
+ *   `McpUiHostOptions` that could not be avoided; every other field below is either preserved or a
+ *   documented, deliberate reduction.
+ * - **`iframeRef` is gone.** `AppRenderer` owns its own iframe internally and does not expose it.
+ *   Nothing in this monorepo read `useMcpUiHost(...).iframeRef` outside `McpUiHost.tsx` itself
+ *   (verified by search before this swap), so this is believed to be safe, but it is a real removal
+ *   from the old `McpUiHostResult` shape, not a preserved one.
+ * - **`state` is coarser.** The old hand-rolled state machine could observe
+ *   `awaiting-initialize`/`awaiting-initialized` as DISTINCT states because it watched every
+ *   handshake message itself. `AppRenderer` does not expose an "initialized" callback (only
+ *   `onSizeChanged`, `onError`, and the imperative ref methods) — see {@link McpUiHostState}'s own
+ *   doc for exactly what this hook infers instead and the one assumption that inference rests on.
+ * - **`teardownAcknowledged` can no longer be genuinely tracked.** `AppRendererHandle.teardownResource()`
+ *   is synchronous, fire-and-forget — `@mcp-ui/client` exposes no signal for "the View acknowledged
+ *   teardown." The field is kept (so the shape still matches) but can only ever be `null` now. See
+ *   {@link McpUiHostResult.teardownAcknowledged}.
+ * - **`messageSource` (the test-injection seam) is gone.** There is no `postMessage` listening left
+ *   in this file to inject a fake source into — `AppRenderer` owns that internally. Tests against
+ *   this hook now drive real `AppRenderer` callbacks instead; see `__tests__/useMcpUiHost.test.tsx`.
+ *
+ * ## How a consumer uses this hook now
+ *
+ * `useMcpUiHost` cannot mount DOM by itself — `@mcp-ui/client`'s primitives are React COMPONENTS,
+ * not a framework-free state machine a hook can drive imperatively (the old implementation could,
+ * because it hand-rolled the iframe and the `postMessage` listening both). So this hook returns
+ * {@link McpUiHostResult.rendererProps}: a ready-to-spread props object for `@mcp-ui/client`'s
+ * `<AppRenderer>`. `McpUiHost.tsx` is the reference consumer — a caller building custom chrome
+ * writes `<AppRenderer key={sessionKey} {...host.rendererProps} />` the same way `McpUiHost.tsx`
+ * does, and reads `host.state`/`host.size` to build UI around it.
+ */
+import { useCallback, useEffect, useMemo, useRef, useState } from 'react';
+/**
+ * Vestigial after this swap — `@mcp-ui/client` owns the sandbox-proxy-ready handshake internally on
+ * a fixed, non-configurable 10s timeout this package cannot change. Kept exported (existing
+ * consumers/tests reference it) and repurposed below as this hook's OWN ready-watchdog timeout,
+ * which is a real, still-enforced behavior — see {@link McpUiHostOptions.initializedTimeoutMs}.
+ */
+export const DEFAULT_TEARDOWN_TIMEOUT_MS = 3_000;
+/** How long {@link useMcpUiHost} waits for the View's first size report before giving up — see {@link McpUiHostState}. */
+export const DEFAULT_INITIALIZED_TIMEOUT_MS = 4_000;
+const DEFAULT_TOOL_NAME = 'mcp-ui-surface';
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+/**
+ * Runs the Host-side protocol for one View, on top of `@mcp-ui/client`'s `AppRenderer`.
+ *
+ * @param options - See {@link McpUiHostOptions}.
+ * @returns See {@link McpUiHostResult}.
+ */
+export function useMcpUiHost(options) {
+    const { html, sandboxProxyUrl, sessionKey, initializedTimeoutMs = DEFAULT_INITIALIZED_TIMEOUT_MS } = options;
+    const [state, setState] = useState('awaiting-ready');
+    const [size, setSize] = useState(null);
+    const [teardownAcknowledged] = useState(null);
+    const stateRef = useRef('awaiting-ready');
+    const settledRef = useRef(false);
+    const handleRef = useRef(null);
+    // Every caller-supplied callback read through a ref, same reasoning as the pre-swap
+    // implementation: they are almost always inline arrow functions, and depending on them directly
+    // would recreate `rendererProps`'s callbacks (and therefore remount `AppRenderer`, restarting the
+    // whole handshake) on every render.
+    const optionsRef = useRef(options);
+    useEffect(() => {
+        optionsRef.current = options;
+    });
+    const setStateBoth = useCallback((next) => {
+        stateRef.current = next;
+        setState(next);
+    }, []);
+    const emit = useCallback((direction, note) => {
+        optionsRef.current.onEvent?.({ direction, note });
+    }, []);
+    const effectiveSessionKey = sessionKey ?? html;
+    // The ready-watchdog. See `McpUiHostState`'s own doc for why "first size report" stands in for
+    // "handshake complete" here, and this hook's module doc for why `@mcp-ui/client` itself gives us
+    // no better signal to watch instead.
+    useEffect(() => {
+        settledRef.current = false;
+        setStateBoth('awaiting-ready');
+        setSize(null);
+        const timer = setTimeout(() => {
+            if (settledRef.current)
+                return;
+            settledRef.current = true;
+            emit('timeout', `No size report from the View within ${initializedTimeoutMs}ms — treating the handshake as failed`);
+            setStateBoth('timed-out');
+        }, initializedTimeoutMs);
+        return () => clearTimeout(timer);
+        // eslint-disable-next-line react-hooks/exhaustive-deps -- effectiveSessionKey intentionally
+        // stands in for both `sessionKey` and `html` (mirrors the pre-swap effect's own `[sessionKey, ...]`).
+    }, [effectiveSessionKey, initializedTimeoutMs, emit, setStateBoth]);
+    const handleSizeChanged = useCallback((params) => {
+        if (!settledRef.current) {
+            settledRef.current = true;
+            emit('in', 'first size report received — treating the handshake as complete');
+            setStateBoth('ready');
+        }
+        const next = { width: params.width ?? 0, height: params.height ?? 0 };
+        setSize(next);
+        optionsRef.current.onSizeChanged?.(next);
+    }, [emit, setStateBoth]);
+    const handleError = useCallback((error) => {
+        emit('rejected', `AppRenderer error: ${errorMessage(error)}`);
+        if (!settledRef.current) {
+            settledRef.current = true;
+            setStateBoth('errored');
+        }
+    }, [emit, setStateBoth]);
+    const handleCallTool = useCallback(async (params) => {
+        const handler = optionsRef.current.onToolCall;
+        if (handler === undefined) {
+            emit('refused', 'tools/call received but this host has no tool executor');
+            throw new Error('This host executes no tools.');
+        }
+        const call = {
+            name: params.name,
+            arguments: (params.arguments ?? {}),
+        };
+        emit('in', `tools/call ${call.name}`);
+        try {
+            const result = await handler(call);
+            emit('out', `tools/call ${call.name} resolved`);
+            // See this hook's module doc: verified against the installed MCP SDK that a resolved
+            // handler value reaches the View as the JSON-RPC `result` completely unvalidated against
+            // any CallToolResult shape. This cast documents that gap; it is not a claim that `result`
+            // structurally satisfies CallToolResult.
+            return result;
+        }
+        catch (error) {
+            emit('out', `tools/call ${call.name} rejected`);
+            throw error;
+        }
+    }, [emit]);
+    const handleOpenLink = useCallback(async ({ url }) => {
+        const handler = optionsRef.current.onOpenLink;
+        if (handler === undefined) {
+            emit('refused', 'ui/open-link refused: no handler');
+            return { isError: true };
+        }
+        handler(url);
+        emit('out', 'ui/open-link handled');
+        return {};
+    }, [emit]);
+    const requestTeardown = useCallback(() => {
+        if (stateRef.current !== 'ready')
+            return;
+        handleRef.current?.teardownResource();
+        emit('out', 'requestTeardown sent (fire-and-forget — @mcp-ui/client exposes no acknowledgement signal, see module doc)');
+        setStateBoth('torn-down');
+    }, [emit, setStateBoth]);
+    const rendererProps = useMemo(() => ({
+        toolName: optionsRef.current.toolName ?? DEFAULT_TOOL_NAME,
+        sandbox: { url: sandboxProxyUrl },
+        html,
+        ...(optionsRef.current.hostInfo === undefined ? {} : { hostInfo: optionsRef.current.hostInfo }),
+        ...(optionsRef.current.hostContext === undefined ? {} : { hostContext: optionsRef.current.hostContext }),
+        onCallTool: handleCallTool,
+        onOpenLink: handleOpenLink,
+        onSizeChanged: handleSizeChanged,
+        onError: handleError,
+        // eslint-disable-next-line react-hooks/exhaustive-deps -- optionsRef.current.toolName/hostInfo/hostContext
+        // are read once per `html`/`sandboxProxyUrl` change intentionally, same ref-read pattern as the rest of this hook.
+    }), [html, sandboxProxyUrl, handleCallTool, handleOpenLink, handleSizeChanged, handleError]);
+    return { state, size, requestTeardown, teardownAcknowledged, rendererProps, rendererRef: handleRef };
+}
+//# sourceMappingURL=useMcpUiHost.js.map

package/dist/react/mcp-ui/useMcpUiHost.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useMcpUiHost.js","sourceRoot":"","sources":["../../../src/react/mcp-ui/useMcpUiHost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAkB,MAAM,OAAO,CAAC;AAG1F;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,CAAC;AACjD,0HAA0H;AAC1H,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,CAAC;AAoFpD,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAE3C,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,OAAyB;IACpD,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,oBAAoB,GAAG,8BAA8B,EAAE,GAAG,OAAO,CAAC;IAE7G,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAiB,gBAAgB,CAAC,CAAC;IACrE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAA2C,IAAI,CAAC,CAAC;IACjF,MAAM,CAAC,oBAAoB,CAAC,GAAG,QAAQ,CAAiB,IAAI,CAAC,CAAC;IAE9D,MAAM,QAAQ,GAAG,MAAM,CAAiB,gBAAgB,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,MAAM,CAAoB,IAAI,CAAC,CAAC;IAElD,oFAAoF;IACpF,gGAAgG;IAChG,kGAAkG;IAClG,oCAAoC;IACpC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACnC,SAAS,CAAC,GAAG,EAAE;QACb,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,IAAoB,EAAE,EAAE;QACxD,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,SAAsC,EAAE,IAAY,EAAE,EAAE;QAChF,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,mBAAmB,GAAG,UAAU,IAAI,IAAI,CAAC;IAE/C,+FAA+F;IAC/F,iGAAiG;IACjG,qCAAqC;IACrC,SAAS,CAAC,GAAG,EAAE;QACb,UAAU,CAAC,OAAO,GAAG,KAAK,CAAC;QAC3B,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,UAAU,CAAC,OAAO;gBAAE,OAAO;YAC/B,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;YAC1B,IAAI,CAAC,SAAS,EAAE,uCAAuC,oBAAoB,uCAAuC,CAAC,CAAC;YACpH,YAAY,CAAC,WAAW,CAAC,CAAC;QAC5B,CAAC,EAAE,oBAAoB,CAAC,CAAC;QACzB,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,4FAA4F;QAC5F,sGAAsG;IACxG,CAAC,EAAE,CAAC,mBAAmB,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;IAEpE,MAAM,iBAAiB,GAAG,WAAW,CACnC,CAAC,MAAM,EAAE,EAAE;QACT,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;YAC1B,IAAI,CAAC,IAAI,EAAE,iEAAiE,CAAC,CAAC;YAC9E,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC,EACD,CAAC,IAAI,EAAE,YAAY,CAAC,CACrB,CAAC;IAEF,MAAM,WAAW,GAAG,WAAW,CAC7B,CAAC,KAAK,EAAE,EAAE;QACR,IAAI,CAAC,UAAU,EAAE,sBAAsB,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;YAC1B,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,EACD,CAAC,IAAI,EAAE,YAAY,CAAC,CACrB,CAAC;IAEF,MAAM,cAAc,GAAG,WAAW,CAChC,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC;QAC9C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,SAAS,EAAE,wDAAwD,CAAC,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,IAAI,GAAkB;YAC1B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAA4B;SAC/D,CAAC;QACF,IAAI,CAAC,IAAI,EAAE,cAAc,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,KAAK,EAAE,cAAc,IAAI,CAAC,IAAI,WAAW,CAAC,CAAC;YAChD,qFAAqF;YACrF,yFAAyF;YACzF,0FAA0F;YAC1F,yCAAyC;YACzC,OAAO,MAA0E,CAAC;QACpF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,EAAE,cAAc,IAAI,CAAC,IAAI,WAAW,CAAC,CAAC;YAChD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,EACD,CAAC,IAAI,CAAC,CACP,CAAC;IAEF,MAAM,cAAc,GAAG,WAAW,CAChC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QAChB,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC;QAC9C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,SAAS,EAAE,kCAAkC,CAAC,CAAC;YACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,CAAC;QACb,IAAI,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;QACpC,OAAO,EAAE,CAAC;IACZ,CAAC,EACD,CAAC,IAAI,CAAC,CACP,CAAC;IAEF,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;QACvC,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO;YAAE,OAAO;QACzC,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,CAAC;QACtC,IAAI,CACF,KAAK,EACL,2GAA2G,CAC5G,CAAC;QACF,YAAY,CAAC,WAAW,CAAC,CAAC;IAC5B,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;IAEzB,MAAM,aAAa,GAAG,OAAO,CAC3B,GAAG,EAAE,CAAC,CAAC;QACL,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,IAAI,iBAAiB;QAC1D,OAAO,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE;QACjC,IAAI;QACJ,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC/F,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACxG,UAAU,EAAE,cAAc;QAC1B,UAAU,EAAE,cAAc;QAC1B,aAAa,EAAE,iBAAiB;QAChC,OAAO,EAAE,WAAW;QACpB,2GAA2G;QAC3G,mHAAmH;KACpH,CAAC,EACF,CAAC,IAAI,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,WAAW,CAAC,CACxF,CAAC;IAEF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,oBAAoB,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;AACvG,CAAC"}

package/dist/renderers/annotation-canvas/dependencies.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Composition root for the annotation-canvas slice's *default* binding.
+ * There is no real "transport" this package can bind to a port for — the
+ * actual submit semantics are entirely host-specific (see `ports.ts`) — so
+ * this file supplies a test/demo-only fake, mirroring the shape of every
+ * other slice's `dependencies.ts` (`@jini-ai/ui`'s `features/connectors/
+ * dependencies.ts` binds a real fetch; a host embedding this package
+ * supplies its own `AnnotationCanvasPort` instead of importing this file).
+ */
+import type { AnnotationCanvasPort } from './ports.js';
+/** A no-op binding: submits resolve `{ ok: true }` and no snapshot is ever captured. Useful for tests, storybook-style demos, and as a documented shape for a real host binding. */
+export declare function createFakeAnnotationCanvasPort(overrides?: Partial<AnnotationCanvasPort>): AnnotationCanvasPort;
+//# sourceMappingURL=dependencies.d.ts.map