@jini-ai/ui 0.3.9 → 0.3.11

package/dist/features/i18n/dictionaries/settings-dialog.en.js

@@ -48,6 +48,8 @@ export const SETTINGS_DIALOG_EN = {
     'Copy': 'Copy',
     'Copy to clipboard': 'Copy to clipboard',
     'Could not load live models: {message}': 'Could not load live models: {message}',
+    'No API key — connection test needs the key from this browser.': 'No API key — connection test needs the key from this browser.',
+    'No API key — model discovery needs the key from this browser.': 'No API key — model discovery needs the key from this browser.',
     'Could not load skills: {error}': 'Could not load skills: {error}',
     'Could not reach the daemon: {error}': 'Could not reach the daemon: {error}',
     'Could not reach the server. Showing local changes only.': 'Could not reach the server. Showing local changes only.',

package/dist/features/i18n/dictionaries/settings-dialog.es.js

@@ -48,6 +48,8 @@ export const SETTINGS_DIALOG_ES = {
     'Copy': 'Copiar',
     'Copy to clipboard': 'Copiar al portapapeles',
     'Could not load live models: {message}': 'No se pudieron cargar los modelos en vivo: {message}',
+    'No API key — connection test needs the key from this browser.': 'Sin clave de API: la prueba de conexión necesita la clave desde este navegador.',
+    'No API key — model discovery needs the key from this browser.': 'Sin clave de API: la detección de modelos necesita la clave desde este navegador.',
     'Could not load skills: {error}': 'No se pudieron cargar las skills: {error}',
     'Could not reach the daemon: {error}': 'No se pudo contactar con el daemon: {error}',
     'Could not reach the server. Showing local changes only.': 'No se pudo contactar con el servidor. Mostrando solo cambios locales.',

package/dist/features/i18n/dictionaries/settings-dialog.fa.js

@@ -48,6 +48,8 @@ export const SETTINGS_DIALOG_FA = {
     'Copy': 'کپی',
     'Copy to clipboard': 'کپی در کلیپ‌بورد',
     'Could not load live models: {message}': 'بارگذاری مدل‌های زنده ممکن نشد: {message}',
+    'No API key — connection test needs the key from this browser.': 'کلید API وجود ندارد — آزمون اتصال به کلید از همین مرورگر نیاز دارد.',
+    'No API key — model discovery needs the key from this browser.': 'کلید API وجود ندارد — کشف مدل‌ها به کلید از همین مرورگر نیاز دارد.',
     'Could not load skills: {error}': 'بارگذاری مهارت‌ها ممکن نشد: {error}',
     'Could not reach the daemon: {error}': 'ارتباط با دیمون برقرار نشد: {error}',
     'Could not reach the server. Showing local changes only.': 'ارتباط با سرور برقرار نشد. فقط تغییرات محلی نمایش داده می‌شود.',

package/dist/features/i18n/dictionaries/settings-dialog.fr.js

@@ -48,6 +48,8 @@ export const SETTINGS_DIALOG_FR = {
     'Copy': 'Copier',
     'Copy to clipboard': 'Copier dans le presse-papiers',
     'Could not load live models: {message}': 'Impossible de charger les modèles en direct : {message}',
+    'No API key — connection test needs the key from this browser.': 'Aucune clé API — le test de connexion nécessite la clé depuis ce navigateur.',
+    'No API key — model discovery needs the key from this browser.': 'Aucune clé API — la découverte des modèles nécessite la clé depuis ce navigateur.',
     'Could not load skills: {error}': 'Impossible de charger les compétences : {error}',
     'Could not reach the daemon: {error}': 'Impossible de contacter le daemon : {error}',
     'Could not reach the server. Showing local changes only.': 'Impossible de contacter le serveur. Affichage des modifications locales uniquement.',

package/dist/features/i18n/dictionaries/settings-dialog.hi.js

@@ -48,6 +48,8 @@ export const SETTINGS_DIALOG_HI = {
     'Copy': 'कॉपी करें',
     'Copy to clipboard': 'क्लिपबोर्ड पर कॉपी करें',
     'Could not load live models: {message}': 'लाइव मॉडल लोड नहीं हो सके: {message}',
+    'No API key — connection test needs the key from this browser.': 'कोई API कुंजी नहीं — कनेक्शन परीक्षण के लिए इस ब्राउज़र से कुंजी चाहिए।',
+    'No API key — model discovery needs the key from this browser.': 'कोई API कुंजी नहीं — मॉडल खोजने के लिए इस ब्राउज़र से कुंजी चाहिए।',
     'Could not load skills: {error}': 'स्किल्स लोड नहीं हो सकीं: {error}',
     'Could not reach the daemon: {error}': 'डेमन तक नहीं पहुंच सके: {error}',
     'Could not reach the server. Showing local changes only.': 'सर्वर तक नहीं पहुंच सके। केवल स्थानीय बदलाव दिखाए जा रहे हैं।',

package/dist/features/i18n/dictionaries/settings-dialog.hu.js

@@ -48,6 +48,8 @@ export const SETTINGS_DIALOG_HU = {
     'Copy': 'Másolás',
     'Copy to clipboard': 'Másolás vágólapra',
     'Could not load live models: {message}': 'Nem sikerült betölteni az élő modelleket: {message}',
+    'No API key — connection test needs the key from this browser.': 'Nincs API-kulcs — a kapcsolati teszthez a kulcs szükséges ebből a böngészőből.',
+    'No API key — model discovery needs the key from this browser.': 'Nincs API-kulcs — a modellek felderítéséhez a kulcs szükséges ebből a böngészőből.',
     'Could not load skills: {error}': 'Nem sikerült betölteni a képességeket: {error}',
     'Could not reach the daemon: {error}': 'Nem sikerült elérni a démont: {error}',
     'Could not reach the server. Showing local changes only.': 'Nem sikerült elérni a szervert. Csak a helyi módosítások jelennek meg.',

package/dist/features/i18n/dictionaries/settings-dialog.id.js

@@ -48,6 +48,8 @@ export const SETTINGS_DIALOG_ID = {
     'Copy': 'Salin',
     'Copy to clipboard': 'Salin ke clipboard',
     'Could not load live models: {message}': 'Tidak dapat memuat model live: {message}',
+    'No API key — connection test needs the key from this browser.': 'Tidak ada kunci API — uji koneksi memerlukan kunci dari browser ini.',
+    'No API key — model discovery needs the key from this browser.': 'Tidak ada kunci API — penemuan model memerlukan kunci dari browser ini.',
     'Could not load skills: {error}': 'Tidak dapat memuat skill: {error}',
     'Could not reach the daemon: {error}': 'Tidak dapat menjangkau daemon: {error}',
     'Could not reach the server. Showing local changes only.': 'Tidak dapat menjangkau server. Hanya menampilkan perubahan lokal.',

package/dist/features/i18n/dictionaries/settings-dialog.it.js

@@ -48,6 +48,8 @@ export const SETTINGS_DIALOG_IT = {
     'Copy': 'Copia',
     'Copy to clipboard': 'Copia negli appunti',
     'Could not load live models: {message}': 'Impossibile caricare i modelli in tempo reale: {message}',
+    'No API key — connection test needs the key from this browser.': 'Nessuna chiave API — il test di connessione richiede la chiave da questo browser.',
+    'No API key — model discovery needs the key from this browser.': 'Nessuna chiave API — il rilevamento dei modelli richiede la chiave da questo browser.',
     'Could not load skills: {error}': 'Impossibile caricare le competenze: {error}',
     'Could not reach the daemon: {error}': 'Impossibile contattare il daemon: {error}',
     'Could not reach the server. Showing local changes only.': 'Impossibile contattare il server. Vengono mostrate solo le modifiche locali.',

package/dist/features/i18n/dictionaries/settings-dialog.ja.js

@@ -48,6 +48,8 @@ export const SETTINGS_DIALOG_JA = {
     'Copy': 'コピー',
     'Copy to clipboard': 'クリップボードにコピー',
     'Could not load live models: {message}': 'ライブモデルを読み込めませんでした：{message}',
+    'No API key — connection test needs the key from this browser.': 'API キーがありません — 接続テストには、このブラウザーからのキーが必要です。',
+    'No API key — model discovery needs the key from this browser.': 'API キーがありません — モデルの検出には、このブラウザーからのキーが必要です。',
     'Could not load skills: {error}': 'スキルを読み込めませんでした：{error}',
     'Could not reach the daemon: {error}': 'デーモンに接続できませんでした：{error}',
     'Could not reach the server. Showing local changes only.': 'サーバーに接続できませんでした。ローカルの変更のみ表示しています。',

package/dist/features/i18n/dictionaries/settings-dialog.ko.js

@@ -48,6 +48,8 @@ export const SETTINGS_DIALOG_KO = {
     'Copy': '복사',
     'Copy to clipboard': '클립보드에 복사',
     'Could not load live models: {message}': '실시간 모델을 불러올 수 없습니다: {message}',
+    'No API key — connection test needs the key from this browser.': 'API 키가 없습니다 — 연결 테스트에는 이 브라우저의 키가 필요합니다.',
+    'No API key — model discovery needs the key from this browser.': 'API 키가 없습니다 — 모델 검색에는 이 브라우저의 키가 필요합니다.',
     'Could not load skills: {error}': '스킬을 불러올 수 없습니다: {error}',
     'Could not reach the daemon: {error}': '데몬에 연결할 수 없습니다: {error}',
     'Could not reach the server. Showing local changes only.': '서버에 연결할 수 없습니다. 로컬 변경 사항만 표시합니다.',

package/dist/features/i18n/dictionaries/settings-dialog.pl.js

@@ -48,6 +48,8 @@ export const SETTINGS_DIALOG_PL = {
     'Copy': 'Kopiuj',
     'Copy to clipboard': 'Kopiuj do schowka',
     'Could not load live models: {message}': 'Nie udało się wczytać modeli na żywo: {message}',
+    'No API key — connection test needs the key from this browser.': 'Brak klucza API — test połączenia wymaga klucza z tej przeglądarki.',
+    'No API key — model discovery needs the key from this browser.': 'Brak klucza API — wykrywanie modeli wymaga klucza z tej przeglądarki.',
     'Could not load skills: {error}': 'Nie udało się wczytać umiejętności: {error}',
     'Could not reach the daemon: {error}': 'Nie udało się połączyć z demonem: {error}',
     'Could not reach the server. Showing local changes only.': 'Nie udało się połączyć z serwerem. Wyświetlane są tylko zmiany lokalne.',

package/dist/features/i18n/dictionaries/settings-dialog.pt-BR.js

@@ -48,6 +48,8 @@ export const SETTINGS_DIALOG_PT_BR = {
     'Copy': 'Copiar',
     'Copy to clipboard': 'Copiar para a área de transferência',
     'Could not load live models: {message}': 'Não foi possível carregar os modelos em tempo real: {message}',
+    'No API key — connection test needs the key from this browser.': 'Sem chave de API — o teste de conexão precisa da chave deste navegador.',
+    'No API key — model discovery needs the key from this browser.': 'Sem chave de API — a descoberta de modelos precisa da chave deste navegador.',
     'Could not load skills: {error}': 'Não foi possível carregar as skills: {error}',
     'Could not reach the daemon: {error}': 'Não foi possível contatar o daemon: {error}',
     'Could not reach the server. Showing local changes only.': 'Não foi possível contatar o servidor. Mostrando apenas as alterações locais.',

package/dist/features/i18n/dictionaries/settings-dialog.ru.js

@@ -48,6 +48,8 @@ export const SETTINGS_DIALOG_RU = {
     'Copy': 'Копировать',
     'Copy to clipboard': 'Копировать в буфер обмена',
     'Could not load live models: {message}': 'Не удалось загрузить актуальные модели: {message}',
+    'No API key — connection test needs the key from this browser.': 'Нет API-ключа — для проверки подключения нужен ключ из этого браузера.',
+    'No API key — model discovery needs the key from this browser.': 'Нет API-ключа — для поиска моделей нужен ключ из этого браузера.',
     'Could not load skills: {error}': 'Не удалось загрузить навыки: {error}',
     'Could not reach the daemon: {error}': 'Не удалось связаться с демоном: {error}',
     'Could not reach the server. Showing local changes only.': 'Не удалось связаться с сервером. Показаны только локальные изменения.',

package/dist/features/i18n/dictionaries/settings-dialog.th.js

@@ -48,6 +48,8 @@ export const SETTINGS_DIALOG_TH = {
     'Copy': 'คัดลอก',
     'Copy to clipboard': 'คัดลอกไปยังคลิปบอร์ด',
     'Could not load live models: {message}': 'ไม่สามารถโหลดโมเดลแบบเรียลไทม์ได้: {message}',
+    'No API key — connection test needs the key from this browser.': 'ไม่มีคีย์ API — การทดสอบการเชื่อมต่อต้องใช้คีย์จากเบราว์เซอร์นี้',
+    'No API key — model discovery needs the key from this browser.': 'ไม่มีคีย์ API — การค้นหาโมเดลต้องใช้คีย์จากเบราว์เซอร์นี้',
     'Could not load skills: {error}': 'ไม่สามารถโหลดทักษะได้: {error}',
     'Could not reach the daemon: {error}': 'ไม่สามารถติดต่อดีมอนได้: {error}',
     'Could not reach the server. Showing local changes only.': 'ไม่สามารถติดต่อเซิร์ฟเวอร์ได้ กำลังแสดงเฉพาะการเปลี่ยนแปลงในเครื่อง',

package/dist/features/i18n/dictionaries/settings-dialog.tr.js

@@ -48,6 +48,8 @@ export const SETTINGS_DIALOG_TR = {
     'Copy': 'Kopyala',
     'Copy to clipboard': 'Panoya kopyala',
     'Could not load live models: {message}': 'Canlı modeller yüklenemedi: {message}',
+    'No API key — connection test needs the key from this browser.': 'API anahtarı yok — bağlantı testi için bu tarayıcıdan anahtar gerekiyor.',
+    'No API key — model discovery needs the key from this browser.': 'API anahtarı yok — model keşfi için bu tarayıcıdan anahtar gerekiyor.',
     'Could not load skills: {error}': 'Beceriler yüklenemedi: {error}',
     'Could not reach the daemon: {error}': 'Arka plan sürecine ulaşılamadı: {error}',
     'Could not reach the server. Showing local changes only.': 'Sunucuya ulaşılamadı. Yalnızca yerel değişiklikler gösteriliyor.',

package/dist/features/i18n/dictionaries/settings-dialog.uk.js

@@ -48,6 +48,8 @@ export const SETTINGS_DIALOG_UK = {
     'Copy': 'Копіювати',
     'Copy to clipboard': 'Копіювати в буфер обміну',
     'Could not load live models: {message}': 'Не вдалося завантажити актуальні моделі: {message}',
+    'No API key — connection test needs the key from this browser.': 'Немає API-ключа — для перевірки підключення потрібен ключ із цього браузера.',
+    'No API key — model discovery needs the key from this browser.': 'Немає API-ключа — для пошуку моделей потрібен ключ із цього браузера.',
     'Could not load skills: {error}': 'Не вдалося завантажити навички: {error}',
     'Could not reach the daemon: {error}': 'Не вдалося з\'єднатися з демоном: {error}',
     'Could not reach the server. Showing local changes only.': 'Не вдалося з\'єднатися з сервером. Показано лише локальні зміни.',

package/dist/features/i18n/dictionaries/settings-dialog.ur.js

@@ -48,6 +48,8 @@ export const SETTINGS_DIALOG_UR = {
     'Copy': 'کاپی کریں',
     'Copy to clipboard': 'کلپ بورڈ پر کاپی کریں',
     'Could not load live models: {message}': 'لائیو ماڈلز لوڈ نہیں ہو سکے: {message}',
+    'No API key — connection test needs the key from this browser.': 'کوئی API کلید نہیں — کنکشن ٹیسٹ کے لیے اسی براؤزر سے کلید درکار ہے۔',
+    'No API key — model discovery needs the key from this browser.': 'کوئی API کلید نہیں — ماڈلز کی دریافت کے لیے اسی براؤزر سے کلید درکار ہے۔',
     'Could not load skills: {error}': 'اسکلز لوڈ نہیں ہو سکیں: {error}',
     'Could not reach the daemon: {error}': 'ڈیمن تک رسائی نہیں ہو سکی: {error}',
     'Could not reach the server. Showing local changes only.': 'سرور تک رسائی نہیں ہو سکی۔ صرف مقامی تبدیلیاں دکھائی جا رہی ہیں۔',

package/dist/features/i18n/dictionaries/settings-dialog.zh-CN.js

@@ -48,6 +48,8 @@ export const SETTINGS_DIALOG_ZH_CN = {
     'Copy': '复制',
     'Copy to clipboard': '复制到剪贴板',
     'Could not load live models: {message}': '无法加载实时模型列表：{message}',
+    'No API key — connection test needs the key from this browser.': '没有 API 密钥——连接测试需要来自此浏览器的密钥。',
+    'No API key — model discovery needs the key from this browser.': '没有 API 密钥——模型发现需要来自此浏览器的密钥。',
     'Could not load skills: {error}': '无法加载技能：{error}',
     'Could not reach the daemon: {error}': '无法连接到守护进程：{error}',
     'Could not reach the server. Showing local changes only.': '无法连接到服务器，仅显示本地更改。',

package/dist/features/i18n/dictionaries/settings-dialog.zh-TW.js

@@ -48,6 +48,8 @@ export const SETTINGS_DIALOG_ZH_TW = {
     'Copy': '複製',
     'Copy to clipboard': '複製到剪貼簿',
     'Could not load live models: {message}': '無法載入即時模型清單：{message}',
+    'No API key — connection test needs the key from this browser.': '沒有 API 金鑰——連線測試需要來自此瀏覽器的金鑰。',
+    'No API key — model discovery needs the key from this browser.': '沒有 API 金鑰——模型探索需要來自此瀏覽器的金鑰。',
     'Could not load skills: {error}': '無法載入技能：{error}',
     'Could not reach the daemon: {error}': '無法連上背景程序：{error}',
     'Could not reach the server. Showing local changes only.': '無法連上伺服器，僅顯示本機變更。',

package/dist/features/mcp-ui/surfaces/bridge.js

@@ -150,6 +150,7 @@ export function renderBridgeScript(spec) {
   function toError(error) {
     var failure = new Error(error && typeof error.message === "string" ? error.message : "Host returned an error");
     if (error && typeof error.code === "number") failure.code = error.code;
+    if (error && error.data !== undefined) failure.data = error.data;
     return failure;
   }
 

package/dist/features/mcp-ui/surfaces/confirmation.d.ts

@@ -59,6 +59,14 @@ export interface ConfirmationSurfaceSpec {
     readonly lang?: string;
     readonly tokens?: Partial<Record<SurfaceTokenName, string>>;
 }
+/**
+ * How long the dialog must have been visible before a confirm click counts, in ms. A click sooner
+ * than a person could have read the dialog is ignored — the same dwell browsers put on permission
+ * prompts against clickjacking, and a guard against an automated click racing the render. Longer
+ * than the ~1 s render-to-confirm gap of the incident it was added for. The confirm button is
+ * rendered disabled and enabled when the dwell ends, so a person sees why an early click does nothing.
+ */
+export declare const CONFIRM_DWELL_MS = 1500;
 export declare function renderConfirmationDocument(spec: ConfirmationSurfaceSpec): string;
 /**
  * Renders the confirmation dialog as an MCP-UI resource, ready for a tool result's `content` array.

package/dist/features/mcp-ui/surfaces/confirmation.js

@@ -30,6 +30,14 @@
 import { createUIResource } from '../resource.js';
 import { escapeHtml, escapeJsValue } from '../escape.js';
 import { DEFAULT_SURFACE_STATUS_TEXT, SURFACE_SCRIPT_PRELUDE, renderActions, renderDetailList, renderStatusRegion, renderSurfaceDocument, renderSurfaceHeader, } from './document.js';
+/**
+ * How long the dialog must have been visible before a confirm click counts, in ms. A click sooner
+ * than a person could have read the dialog is ignored — the same dwell browsers put on permission
+ * prompts against clickjacking, and a guard against an automated click racing the render. Longer
+ * than the ~1 s render-to-confirm gap of the incident it was added for. The confirm button is
+ * rendered disabled and enabled when the dwell ends, so a person sees why an early click does nothing.
+ */
+export const CONFIRM_DWELL_MS = 1500;
 const DEFAULT_APP = { appName: 'jini-mcp-ui-confirmation', appVersion: '1' };
 function isToolAction(action) {
     return action !== undefined && 'toolName' in action;
@@ -65,7 +73,8 @@ export function renderConfirmationDocument(spec) {
         renderSurfaceHeader(spec.description === undefined ? { title: spec.title } : { title: spec.title, description: spec.description }),
         renderDetailList(spec.details ?? []),
         warning,
-        renderActions(actions),
+        // Confirm starts disabled; the script enables it once the dwell has run out.
+        renderActions(actions.map((action) => (action.id === 'confirm' ? { ...action, disabled: true } : action))),
         renderStatusRegion(),
     ]
         .filter((fragment) => fragment !== '')
@@ -86,14 +95,62 @@ export function renderConfirmationDocument(spec) {
 ${SURFACE_SCRIPT_PRELUDE}
   var PLAN = ${escapeJsValue(plan)};
   var TEXT = ${escapeJsValue(text)};
+  var DWELL_MS = ${CONFIRM_DWELL_MS};
+
+  // Monotonic where available: a wall clock set backwards would otherwise stretch the dwell.
+  function now() {
+    return typeof performance !== "undefined" && typeof performance.now === "function" ? performance.now() : Date.now();
+  }
+  // Set while a call is in flight and for good once one settles the dialog. The disabled buttons
+  // already block clicks in a browser; this makes the guarantee not depend on the DOM honoring that.
+  var locked = false;
+
+  // When the dialog last became visible; null while hidden. A dialog that loads in a background tab
+  // has not been seen, so its dwell starts when it is shown, and restarts each time it is shown again.
+  var visibleSince = null;
+  var dwellTimer = null;
+  var confirmButton = document.querySelector('[data-mcpui-action="confirm"]');
+
+  function dwellDone() {
+    return visibleSince !== null && now() - visibleSince >= DWELL_MS;
+  }
+  // Confirm is enabled exactly when the dwell has run out and no call holds the dialog.
+  function syncConfirm() {
+    if (confirmButton !== null && !locked) confirmButton.disabled = !dwellDone();
+  }
+  // Re-checks rather than trusts the timer: setTimeout and now() are different clocks, and a timer
+  // that fired a hair early must not leave confirm disabled for good.
+  function onDwellTimer() {
+    dwellTimer = null;
+    if (visibleSince === null) return;
+    var left = DWELL_MS - (now() - visibleSince);
+    if (left > 0) dwellTimer = setTimeout(onDwellTimer, left);
+    else syncConfirm();
+  }
+  function onVisibilityChange() {
+    if (dwellTimer !== null) clearTimeout(dwellTimer);
+    dwellTimer = null;
+    visibleSince = document.visibilityState === "hidden" ? null : now();
+    syncConfirm();
+    if (visibleSince !== null) dwellTimer = setTimeout(onDwellTimer, DWELL_MS);
+  }
+  onVisibilityChange();
+  document.addEventListener("visibilitychange", onVisibilityChange);
 
   for (var i = 0; i < actionButtons.length; i++) {
     actionButtons[i].addEventListener("click", onClick);
   }
 
   function onClick(event) {
-    var step = PLAN[event.currentTarget.getAttribute("data-mcpui-action")];
+    // Only a click the browser attributes to the user counts. element.click() and dispatchEvent
+    // from any script in this document produce isTrusted === false.
+    if (event.isTrusted !== true || locked) return;
+    var action = event.currentTarget.getAttribute("data-mcpui-action");
+    var step = PLAN[action];
     if (step === undefined) return;
+    // Cancel is exempt: backing out early is never the harm this guards against.
+    if (action === "confirm" && !dwellDone()) return;
+    locked = true;
     if (step === null) {
       setBusy(true);
       setStatus(TEXT.dismissed, "dismissed");
@@ -106,10 +163,12 @@ ${SURFACE_SCRIPT_PRELUDE}
       setStatus(TEXT.done, "done");
       api.requestTeardown();
     }, function (error) {
-      // Re-enabled on failure: a rejected call did not happen, so the human must be able to retry
-      // or cancel rather than be left with a dead dialog reporting an error it cannot act on.
-      setBusy(false);
-      setStatus(TEXT.failedPrefix + describeError(error), "failed");
+      // Re-enabled on failure (a rejected call did not happen, so the human must be able to retry
+      // or cancel), unless the Host says this dialog is no longer pending -- see reportCallFailure.
+      if (!reportCallFailure(error)) return;
+      locked = false;
+      // reportCallFailure re-enabled every button; confirm still waits out an unfinished dwell.
+      syncConfirm();
     });
   }
 }());`;

package/dist/features/mcp-ui/surfaces/document.d.ts

@@ -8,7 +8,7 @@ import { type SurfaceTokenName } from './tokens.js';
  * be a color no caller could reskin. `var(--x, fallback)` appears only where a value is genuinely
  * optional.
  */
-export declare const SURFACE_BASE_CSS = "*, *::before, *::after { box-sizing: border-box; }\nhtml, body { margin: 0; padding: 0; }\nbody {\n  /* Transparent, not var(--jini-mcpui-bg): this document has no page of its own to paint. It is an\n     allow-scripts-only sandboxed iframe embedded directly in a host's chat transcript, and html's\n     background is left at its (also transparent) initial value, so the host's own pane shows\n     straight through to .mcpui-surface below rather than through a second, unrelated rectangle of\n     fill color sitting between the two. --jini-mcpui-bg stays declared for a caller styling\n     something else via extraCss -- nothing in this stylesheet reads it anymore. */\n  background: transparent;\n  color: var(--jini-mcpui-text);\n  font-family: var(--jini-mcpui-font);\n  font-size: 14px;\n  line-height: 1.5;\n  padding: 16px;\n  -webkit-font-smoothing: antialiased;\n}\n.mcpui-surface {\n  background: linear-gradient(135deg,\n    color-mix(in srgb, var(--jini-mcpui-accent) 5%, var(--jini-mcpui-panel)) 0%,\n    var(--jini-mcpui-panel) 60%);\n  border: 1px solid color-mix(in srgb, var(--jini-mcpui-accent) 18%, var(--jini-mcpui-border));\n  border-radius: var(--jini-mcpui-radius-md);\n  box-shadow: var(--jini-mcpui-surface-shadow);\n  padding: 18px 20px 16px;\n  max-width: 640px;\n  margin: 0 auto;\n}\n.mcpui-title {\n  margin: 0;\n  font-size: 16px;\n  font-weight: 600;\n  letter-spacing: -0.01em;\n  color: var(--jini-mcpui-text-strong);\n}\n.mcpui-description { margin: 6px 0 0; color: var(--jini-mcpui-text-muted); }\n.mcpui-details {\n  display: grid;\n  grid-template-columns: max-content minmax(0, 1fr);\n  gap: 4px 14px;\n  margin: 14px 0 0;\n}\n.mcpui-details dt { color: var(--jini-mcpui-text-soft); font-weight: 500; }\n.mcpui-details dd { margin: 0; overflow-wrap: anywhere; color: var(--jini-mcpui-text); }\n.mcpui-warning {\n  margin: 14px 0 0;\n  padding: 9px 11px;\n  border-radius: var(--jini-mcpui-radius-md);\n  border: 1px solid var(--jini-mcpui-danger);\n  background: var(--jini-mcpui-danger-tint);\n  color: var(--jini-mcpui-text-strong);\n}\n.mcpui-fields { display: flex; flex-direction: column; gap: 12px; margin: 16px 0 0; border: 0; padding: 0; }\n.mcpui-field { display: flex; flex-direction: column; gap: 4px; }\n.mcpui-field-inline { flex-direction: row; align-items: flex-start; gap: 8px; }\n.mcpui-label { font-weight: 500; color: var(--jini-mcpui-text-strong); }\n.mcpui-required { color: var(--jini-mcpui-accent); margin-left: 2px; }\n.mcpui-hint { color: var(--jini-mcpui-text-soft); font-size: 13px; }\n.mcpui-input, .mcpui-select, .mcpui-textarea {\n  font: inherit;\n  color: var(--jini-mcpui-text);\n  background: var(--jini-mcpui-panel);\n  border: 1px solid color-mix(in srgb, var(--jini-mcpui-accent) 14%, var(--jini-mcpui-border-strong));\n  border-radius: var(--jini-mcpui-radius-sm);\n  padding: 7px 9px;\n  width: 100%;\n  min-width: 0;\n}\n.mcpui-textarea { resize: vertical; min-height: 72px; font-family: var(--jini-mcpui-font); }\n.mcpui-checkbox { margin: 3px 0 0; accent-color: var(--jini-mcpui-accent); }\n.mcpui-choice-group { border: 0; padding: 0; margin: 0; min-width: 0; }\n.mcpui-choice { display: flex; flex-direction: row; align-items: flex-start; gap: 8px; margin: 6px 0 0; }\n.mcpui-choice-label { color: var(--jini-mcpui-text); font-weight: 400; }\n.mcpui-input:focus-visible, .mcpui-select:focus-visible, .mcpui-textarea:focus-visible,\n.mcpui-checkbox:focus-visible, .mcpui-button:focus-visible {\n  outline: 2px solid var(--jini-mcpui-accent-ring);\n  outline-offset: 1px;\n  border-color: var(--jini-mcpui-accent);\n}\n.mcpui-actions { display: flex; flex-wrap: wrap; gap: 8px; margin: 18px 0 0; }\n.mcpui-button {\n  font: inherit;\n  font-weight: 500;\n  padding: 7px 15px;\n  border-radius: var(--jini-mcpui-radius-pill);\n  border: 1px solid color-mix(in srgb, var(--jini-mcpui-accent) 14%, var(--jini-mcpui-border-strong));\n  background: var(--jini-mcpui-panel);\n  color: var(--jini-mcpui-text);\n  cursor: pointer;\n}\n.mcpui-button:hover:not([disabled]) { background: var(--jini-mcpui-accent-tint); }\n.mcpui-button-primary {\n  background: var(--jini-mcpui-accent);\n  border-color: var(--jini-mcpui-accent);\n  color: var(--jini-mcpui-panel);\n}\n.mcpui-button-primary:hover:not([disabled]) { background: var(--jini-mcpui-accent-hover); border-color: var(--jini-mcpui-accent-hover); }\n.mcpui-button-danger {\n  background: var(--jini-mcpui-danger);\n  border-color: var(--jini-mcpui-danger);\n  color: var(--jini-mcpui-panel);\n}\n.mcpui-button-danger:hover:not([disabled]) { background: var(--jini-mcpui-danger-hover); border-color: var(--jini-mcpui-danger-hover); }\n.mcpui-button[disabled] { opacity: 0.55; cursor: default; }\n.mcpui-status { margin: 12px 0 0; min-height: 1.4em; color: var(--jini-mcpui-text-muted); }\n.mcpui-status[data-state=\"failed\"], .mcpui-status[data-state=\"invalid\"] { color: var(--jini-mcpui-danger); }\n.mcpui-status[data-state=\"done\"] { color: var(--jini-mcpui-text-strong); }\n/* Neither a plain success nor a failure \u2014 e.g. an outcome surface reporting \"uploaded, not yet\n   reachable\" (outcome.ts's own state: partial). Distinct from both --jini-mcpui-danger (would\n   wrongly read as \"this failed\") and --jini-mcpui-text-strong (would wrongly read as \"this is\n   fully done\"); the accent token reads as \"worth a second look\" without asserting either. */\n.mcpui-status[data-state=\"partial\"] { color: var(--jini-mcpui-accent); }\n.mcpui-code { font-family: var(--jini-mcpui-font-mono); font-size: 13px; color: var(--jini-mcpui-text-faint); }";
+export declare const SURFACE_BASE_CSS = "*, *::before, *::after { box-sizing: border-box; }\nhtml, body { margin: 0; padding: 0; }\nbody {\n  /* Transparent, not var(--jini-mcpui-bg): this document has no page of its own to paint. It is an\n     allow-scripts-only sandboxed iframe embedded directly in a host's chat transcript, and html's\n     background is left at its (also transparent) initial value, so the host's own pane shows\n     straight through to .mcpui-surface below rather than through a second, unrelated rectangle of\n     fill color sitting between the two. --jini-mcpui-bg stays declared for a caller styling\n     something else via extraCss -- nothing in this stylesheet reads it anymore. */\n  background: transparent;\n  color: var(--jini-mcpui-text);\n  font-family: var(--jini-mcpui-font);\n  font-size: 14px;\n  line-height: 1.5;\n  padding: 16px;\n  -webkit-font-smoothing: antialiased;\n}\n.mcpui-surface {\n  background: linear-gradient(135deg,\n    color-mix(in srgb, var(--jini-mcpui-accent) 5%, var(--jini-mcpui-panel)) 0%,\n    var(--jini-mcpui-panel) 60%);\n  border: 1px solid color-mix(in srgb, var(--jini-mcpui-accent) 18%, var(--jini-mcpui-border));\n  border-radius: var(--jini-mcpui-radius-md);\n  box-shadow: var(--jini-mcpui-surface-shadow);\n  padding: 18px 20px 16px;\n  max-width: 640px;\n  margin: 0 auto;\n}\n.mcpui-title {\n  margin: 0;\n  font-size: 16px;\n  font-weight: 600;\n  letter-spacing: -0.01em;\n  color: var(--jini-mcpui-text-strong);\n}\n.mcpui-description { margin: 6px 0 0; color: var(--jini-mcpui-text-muted); }\n.mcpui-details {\n  display: grid;\n  grid-template-columns: max-content minmax(0, 1fr);\n  gap: 4px 14px;\n  margin: 14px 0 0;\n}\n.mcpui-details dt { color: var(--jini-mcpui-text-soft); font-weight: 500; }\n.mcpui-details dd { margin: 0; overflow-wrap: anywhere; color: var(--jini-mcpui-text); }\n.mcpui-warning {\n  margin: 14px 0 0;\n  padding: 9px 11px;\n  border-radius: var(--jini-mcpui-radius-md);\n  border: 1px solid var(--jini-mcpui-danger);\n  background: var(--jini-mcpui-danger-tint);\n  color: var(--jini-mcpui-text-strong);\n}\n.mcpui-fields { display: flex; flex-direction: column; gap: 12px; margin: 16px 0 0; border: 0; padding: 0; }\n.mcpui-field { display: flex; flex-direction: column; gap: 4px; }\n.mcpui-field-inline { flex-direction: row; align-items: flex-start; gap: 8px; }\n.mcpui-label { font-weight: 500; color: var(--jini-mcpui-text-strong); }\n.mcpui-required { color: var(--jini-mcpui-accent); margin-left: 2px; }\n.mcpui-hint { color: var(--jini-mcpui-text-soft); font-size: 13px; }\n.mcpui-input, .mcpui-select, .mcpui-textarea {\n  font: inherit;\n  color: var(--jini-mcpui-text);\n  background: var(--jini-mcpui-panel);\n  border: 1px solid color-mix(in srgb, var(--jini-mcpui-accent) 14%, var(--jini-mcpui-border-strong));\n  border-radius: var(--jini-mcpui-radius-sm);\n  padding: 7px 9px;\n  width: 100%;\n  min-width: 0;\n}\n.mcpui-textarea { resize: vertical; min-height: 72px; font-family: var(--jini-mcpui-font); }\n.mcpui-checkbox { margin: 3px 0 0; accent-color: var(--jini-mcpui-accent); }\n.mcpui-choice-group { border: 0; padding: 0; margin: 0; min-width: 0; }\n.mcpui-choice { display: flex; flex-direction: row; align-items: flex-start; gap: 8px; margin: 6px 0 0; }\n.mcpui-choice-label { color: var(--jini-mcpui-text); font-weight: 400; }\n.mcpui-input:focus-visible, .mcpui-select:focus-visible, .mcpui-textarea:focus-visible,\n.mcpui-checkbox:focus-visible, .mcpui-button:focus-visible {\n  outline: 2px solid var(--jini-mcpui-accent-ring);\n  outline-offset: 1px;\n  border-color: var(--jini-mcpui-accent);\n}\n.mcpui-actions { display: flex; flex-wrap: wrap; gap: 8px; margin: 18px 0 0; }\n.mcpui-button {\n  font: inherit;\n  font-weight: 500;\n  padding: 7px 15px;\n  border-radius: var(--jini-mcpui-radius-pill);\n  border: 1px solid color-mix(in srgb, var(--jini-mcpui-accent) 14%, var(--jini-mcpui-border-strong));\n  background: var(--jini-mcpui-panel);\n  color: var(--jini-mcpui-text);\n  cursor: pointer;\n}\n.mcpui-button:hover:not([disabled]) { background: var(--jini-mcpui-accent-tint); }\n.mcpui-button-primary {\n  background: var(--jini-mcpui-accent);\n  border-color: var(--jini-mcpui-accent);\n  color: var(--jini-mcpui-panel);\n}\n.mcpui-button-primary:hover:not([disabled]) { background: var(--jini-mcpui-accent-hover); border-color: var(--jini-mcpui-accent-hover); }\n.mcpui-button-danger {\n  background: var(--jini-mcpui-danger);\n  border-color: var(--jini-mcpui-danger);\n  color: var(--jini-mcpui-panel);\n}\n.mcpui-button-danger:hover:not([disabled]) { background: var(--jini-mcpui-danger-hover); border-color: var(--jini-mcpui-danger-hover); }\n.mcpui-button[disabled] { opacity: 0.55; cursor: default; }\n.mcpui-status { margin: 12px 0 0; min-height: 1.4em; color: var(--jini-mcpui-text-muted); }\n.mcpui-status[data-state=\"failed\"], .mcpui-status[data-state=\"invalid\"], .mcpui-status[data-state=\"expired\"] { color: var(--jini-mcpui-danger); }\n.mcpui-status[data-state=\"done\"] { color: var(--jini-mcpui-text-strong); }\n/* Neither a plain success nor a failure \u2014 e.g. an outcome surface reporting \"uploaded, not yet\n   reachable\" (outcome.ts's own state: partial). Distinct from both --jini-mcpui-danger (would\n   wrongly read as \"this failed\") and --jini-mcpui-text-strong (would wrongly read as \"this is\n   fully done\"); the accent token reads as \"worth a second look\" without asserting either. */\n.mcpui-status[data-state=\"partial\"] { color: var(--jini-mcpui-accent); }\n.mcpui-code { font-family: var(--jini-mcpui-font-mono); font-size: 13px; color: var(--jini-mcpui-text-faint); }";
 /**
  * The Content-Security-Policy every generated surface declares in its own `<head>`.
  *
@@ -76,6 +76,12 @@ export interface SurfaceDetail {
 export declare function renderDetailList(details: readonly SurfaceDetail[]): string;
 /** Renders the polite live region every surface reports outcomes through. Its id is fixed so surface scripts can find it. */
 export declare function renderStatusRegion(): string;
+/**
+ * The `error.data.code` a Host relays when the dialog a call came from is no longer waiting for an
+ * answer (answered elsewhere, expired, or its run is gone). Retrying cannot succeed, so a surface
+ * that sees it keeps its buttons disabled instead of re-arming them.
+ */
+export declare const SURFACE_NOT_PENDING_ERROR_CODE = "SURFACE_NOT_PENDING";
 /** The id {@link renderStatusRegion} emits and {@link SURFACE_SCRIPT_PRELUDE} looks up. */
 export declare const SURFACE_STATUS_ELEMENT_ID = "mcpui-status";
 /**
@@ -96,6 +102,8 @@ export interface SurfaceStatusText {
     readonly dismissed: string;
     /** Prefixed to the comma-joined labels of unfilled required fields. */
     readonly missingPrefix: string;
+    /** Shown when the Host says the dialog is no longer pending; the buttons stay disabled. */
+    readonly expired: string;
 }
 export declare const DEFAULT_SURFACE_STATUS_TEXT: SurfaceStatusText;
 /**
@@ -150,6 +158,8 @@ export interface SurfaceAction {
      * than that sandbox; every current builder passes `button` (the default).
      */
     readonly type?: 'button' | 'submit';
+    /** Renders the button `disabled`; the surface script decides when to enable it. */
+    readonly disabled?: boolean;
 }
 /**
  * Renders the action row.

package/dist/features/mcp-ui/surfaces/document.js

@@ -128,7 +128,7 @@ body {
 .mcpui-button-danger:hover:not([disabled]) { background: var(--jini-mcpui-danger-hover); border-color: var(--jini-mcpui-danger-hover); }
 .mcpui-button[disabled] { opacity: 0.55; cursor: default; }
 .mcpui-status { margin: 12px 0 0; min-height: 1.4em; color: var(--jini-mcpui-text-muted); }
-.mcpui-status[data-state="failed"], .mcpui-status[data-state="invalid"] { color: var(--jini-mcpui-danger); }
+.mcpui-status[data-state="failed"], .mcpui-status[data-state="invalid"], .mcpui-status[data-state="expired"] { color: var(--jini-mcpui-danger); }
 .mcpui-status[data-state="done"] { color: var(--jini-mcpui-text-strong); }
 /* Neither a plain success nor a failure — e.g. an outcome surface reporting "uploaded, not yet
    reachable" (outcome.ts's own state: partial). Distinct from both --jini-mcpui-danger (would
@@ -217,6 +217,12 @@ export function renderDetailList(details) {
 export function renderStatusRegion() {
     return `<p class="mcpui-status" id="${SURFACE_STATUS_ELEMENT_ID}" role="status" aria-live="polite" data-state="idle"></p>`;
 }
+/**
+ * The `error.data.code` a Host relays when the dialog a call came from is no longer waiting for an
+ * answer (answered elsewhere, expired, or its run is gone). Retrying cannot succeed, so a surface
+ * that sees it keeps its buttons disabled instead of re-arming them.
+ */
+export const SURFACE_NOT_PENDING_ERROR_CODE = 'SURFACE_NOT_PENDING';
 /** The id {@link renderStatusRegion} emits and {@link SURFACE_SCRIPT_PRELUDE} looks up. */
 export const SURFACE_STATUS_ELEMENT_ID = 'mcpui-status';
 export const DEFAULT_SURFACE_STATUS_TEXT = {
@@ -225,6 +231,7 @@ export const DEFAULT_SURFACE_STATUS_TEXT = {
     failedPrefix: 'Failed: ',
     dismissed: 'Dismissed.',
     missingPrefix: 'Please complete: ',
+    expired: 'This dialog expired. Ask again.',
 };
 /**
  * The JavaScript preamble every surface script opens with: the bridge handle, the status region,
@@ -248,6 +255,19 @@ function setBusy(busy) {
 }
 function describeError(error) {
   return error && typeof error.message === "string" ? error.message : String(error);
+}
+// Reports a rejected tool call and returns whether the human may try again. A rejected call did not
+// happen, so normally the buttons re-arm; but a dialog the Host no longer waits on cannot succeed,
+// and live-looking buttons there only invite clicks that fail the same way. Reads TEXT, which each
+// surface script declares after this prelude.
+function reportCallFailure(error) {
+  if (error && error.data && error.data.code === ${JSON.stringify(SURFACE_NOT_PENDING_ERROR_CODE)}) {
+    setStatus(TEXT.expired, "expired");
+    return false;
+  }
+  setBusy(false);
+  setStatus(TEXT.failedPrefix + describeError(error), "failed");
+  return true;
 }`;
 /**
  * A field name that is simultaneously an HTML `name`, part of a DOM `id`, and a key in the JSON
@@ -319,7 +339,7 @@ export function renderActions(actions) {
         // would accept. That is unenforced on purpose (see the function doc above: `page.find_elements`
         // can never reach this document to resolve it either way), so failing loudly here would refuse
         // markup for a reason that can never matter to the one consumer that can actually query it.
-        return `  <button type="${action.type ?? 'button'}" class="mcpui-button${variantClass}" data-mcpui-action="${escapeHtml(action.id)}" ${AGENT_ELEMENT_ATTRIBUTE}="mcpui-action-${escapeHtml(action.id)}" ${AGENT_ROLE_ATTRIBUTE}="button" ${AGENT_LABEL_ATTRIBUTE}="${label}">${label}</button>`;
+        return `  <button type="${action.type ?? 'button'}" class="mcpui-button${variantClass}" data-mcpui-action="${escapeHtml(action.id)}" ${AGENT_ELEMENT_ATTRIBUTE}="mcpui-action-${escapeHtml(action.id)}" ${AGENT_ROLE_ATTRIBUTE}="button" ${AGENT_LABEL_ATTRIBUTE}="${label}"${action.disabled === true ? ' disabled' : ''}>${label}</button>`;
     })
         .join('\n');
     return `<div class="mcpui-actions">\n${buttons}\n</div>`;

package/dist/features/mcp-ui/surfaces/form.js

@@ -120,7 +120,8 @@ ${SURFACE_SCRIPT_PRELUDE}
   //
   // Deliberately NOT cleared on success -- the success path tears the surface down, so re-arming
   // would only reopen the window. Cleared on failure, matching what setBusy(false) already does
-  // there: a rejected call did not happen, and the human must be able to retry.
+  // there: a rejected call did not happen, and the human must be able to retry -- unless the Host
+  // says the dialog is no longer pending, where a retry cannot succeed (see reportCallFailure).
   var pending = false;
 
   function runSubmit() {
@@ -145,9 +146,7 @@ ${SURFACE_SCRIPT_PRELUDE}
       setStatus(TEXT.done, "done");
       api.requestTeardown();
     }, function (error) {
-      pending = false;
-      setBusy(false);
-      setStatus(TEXT.failedPrefix + describeError(error), "failed");
+      if (reportCallFailure(error)) pending = false;
     });
   }
 
@@ -155,8 +154,10 @@ ${SURFACE_SCRIPT_PRELUDE}
   // native behavior a single-line text input gets inside a real form. Scoped to the same controls
   // the browser would have honored it for -- type=text/type=number inputs -- so Enter still inserts
   // a newline in a multi-line textarea and still just toggles a checkbox.
+  // Only what the browser attributes to a person counts: element.click(), dispatchEvent and a
+  // synthetic keydown from any script produce isTrusted === false, and submit and cancel call tools.
   form.addEventListener("keydown", function (event) {
-    if (event.key !== "Enter") return;
+    if (event.isTrusted !== true || event.key !== "Enter") return;
     var target = event.target;
     if (!target || target.tagName !== "INPUT") return;
     var type = (target.getAttribute("type") || "text").toLowerCase();
@@ -168,12 +169,14 @@ ${SURFACE_SCRIPT_PRELUDE}
   for (var b = 0; b < actionButtons.length; b++) {
     var action = actionButtons[b].getAttribute("data-mcpui-action");
     if (action === "submit") {
-      actionButtons[b].addEventListener("click", runSubmit);
+      actionButtons[b].addEventListener("click", function (event) {
+        if (event.isTrusted === true) runSubmit();
+      });
       continue;
     }
     if (action !== "cancel") continue;
-    actionButtons[b].addEventListener("click", function () {
-      if (pending) return;
+    actionButtons[b].addEventListener("click", function (event) {
+      if (event.isTrusted !== true || pending) return;
       pending = true;
       setBusy(true);
       if (CANCEL === null) {
@@ -186,9 +189,7 @@ ${SURFACE_SCRIPT_PRELUDE}
         setStatus(TEXT.dismissed, "dismissed");
         api.requestTeardown();
       }, function (error) {
-        pending = false;
-        setBusy(false);
-        setStatus(TEXT.failedPrefix + describeError(error), "failed");
+        if (reportCallFailure(error)) pending = false;
       });
     });
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jini-ai/ui",
-  "version": "0.3.9",
+  "version": "0.3.11",
   "description": "Generic, product-neutral React UI primitives and feature domains. Framework-free types, decision rules, catalogs, and host port contracts live behind ./core (no React, no DOM). The Excalidraw and Lexical editors live behind ./sketch-editor and ./lexical-rich-text-editor; the GrapesJS-backed inline HTML editor lives behind ./html-editor.",
   "license": "Apache-2.0",
   "repository": {
@@ -102,13 +102,14 @@
     "clsx": "^2.1.1",
     "micromark": "^4.0.0",
     "micromark-extension-gfm": "^3.0.0",
+    "parse5": "^8.0.1",
     "recharts": "^3.10.1",
     "shiki": "^1.24.4",
     "tailwind-merge": "^2.6.0",
     "zod": "^3.25.76",
-    "@jini-ai/protocol": "0.3.0",
+    "@jini-ai/agentic": "0.3.6",
     "@jini-ai/platform": "0.3.0",
-    "@jini-ai/agentic": "0.3.6"
+    "@jini-ai/protocol": "0.3.0"
   },
   "devDependencies": {
     "@excalidraw/excalidraw": "0.18.1",