@mapbox/mcp-server 0.11.0 → 0.12.3

package/dist/commonjs/resources/resourceRegistry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resourceRegistry.d.ts","sourceRoot":"","sources":["../../../src/resources/resourceRegistry.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAI/D,eAAO,MAAM,aAAa,8FAMhB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D,wBAAgB,eAAe,IAAI,SAAS,gBAAgB,EAAE,CAE7D;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAY1E"}
+{"version":3,"file":"resourceRegistry.d.ts","sourceRoot":"","sources":["../../../src/resources/resourceRegistry.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAI/D,eAAO,MAAM,aAAa,uHAOhB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D,wBAAgB,eAAe,IAAI,SAAS,gBAAgB,EAAE,CAE7D;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAY1E"}

package/dist/commonjs/resources/resourceRegistry.js

@@ -9,6 +9,7 @@ exports.getResourceByUri = getResourceByUri;
 const CategoryListResource_js_1 = require("./category-list/CategoryListResource.js");
 const TemporaryDataResource_js_1 = require("./temporary/TemporaryDataResource.js");
 const StaticMapUIResource_js_1 = require("./ui-apps/StaticMapUIResource.js");
+const DirectionsAppUIResource_js_1 = require("./ui-apps/DirectionsAppUIResource.js");
 const VersionResource_js_1 = require("./version/VersionResource.js");
 const httpPipeline_js_1 = require("../utils/httpPipeline.js");
 // Central registry of all resources
@@ -17,6 +18,7 @@ exports.ALL_RESOURCES = [
     new CategoryListResource_js_1.CategoryListResource({ httpRequest: httpPipeline_js_1.httpRequest }),
     new TemporaryDataResource_js_1.TemporaryDataResource(),
     new StaticMapUIResource_js_1.StaticMapUIResource(),
+    new DirectionsAppUIResource_js_1.DirectionsAppUIResource({ httpRequest: httpPipeline_js_1.httpRequest }),
     new VersionResource_js_1.VersionResource()
 ];
 function getAllResources() {

package/dist/commonjs/resources/resourceRegistry.js.map

@@ -1 +1 @@
-{"version":3,"file":"resourceRegistry.js","sourceRoot":"","sources":["../../../src/resources/resourceRegistry.ts"],"names":[],"mappings":";AAAA,6BAA6B;AAC7B,kCAAkC;;;AAoBlC,0CAEC;AAED,4CAYC;AAlCD,kCAAkC;AAClC,qFAA+E;AAC/E,mFAA6E;AAC7E,6EAAuE;AACvE,qEAA+D;AAC/D,8DAAuD;AAEvD,oCAAoC;AACvB,QAAA,aAAa,GAAG;IAC3B,oCAAoC;IACpC,IAAI,8CAAoB,CAAC,EAAE,WAAW,EAAX,6BAAW,EAAE,CAAC;IACzC,IAAI,gDAAqB,EAAE;IAC3B,IAAI,4CAAmB,EAAE;IACzB,IAAI,oCAAe,EAAE;CACb,CAAC;AAIX,SAAgB,eAAe;IAC7B,OAAO,qBAAa,CAAC;AACvB,CAAC;AAED,SAAgB,gBAAgB,CAAC,GAAW;IAC1C,yBAAyB;IACzB,MAAM,UAAU,GAAG,qBAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAC1E,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAElC,gFAAgF;IAChF,OAAO,qBAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QACrC,uDAAuD;QACvD,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;QAC5C,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"resourceRegistry.js","sourceRoot":"","sources":["../../../src/resources/resourceRegistry.ts"],"names":[],"mappings":";AAAA,6BAA6B;AAC7B,kCAAkC;;;AAsBlC,0CAEC;AAED,4CAYC;AApCD,kCAAkC;AAClC,qFAA+E;AAC/E,mFAA6E;AAC7E,6EAAuE;AACvE,qFAA+E;AAC/E,qEAA+D;AAC/D,8DAAuD;AAEvD,oCAAoC;AACvB,QAAA,aAAa,GAAG;IAC3B,oCAAoC;IACpC,IAAI,8CAAoB,CAAC,EAAE,WAAW,EAAX,6BAAW,EAAE,CAAC;IACzC,IAAI,gDAAqB,EAAE;IAC3B,IAAI,4CAAmB,EAAE;IACzB,IAAI,oDAAuB,CAAC,EAAE,WAAW,EAAX,6BAAW,EAAE,CAAC;IAC5C,IAAI,oCAAe,EAAE;CACb,CAAC;AAIX,SAAgB,eAAe;IAC7B,OAAO,qBAAa,CAAC;AACvB,CAAC;AAED,SAAgB,gBAAgB,CAAC,GAAW;IAC1C,yBAAyB;IACzB,MAAM,UAAU,GAAG,qBAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAC1E,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAElC,gFAAgF;IAChF,OAAO,qBAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QACrC,uDAAuD;QACvD,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;QAC5C,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commonjs/resources/temporary/TemporaryDataResource.d.ts

@@ -1,5 +1,6 @@
 import { BaseResource } from '../BaseResource.js';
-import type { ReadResourceResult } from '@modelcontextprotocol/sdk/types.js';
+import type { RequestHandlerExtra } from '@modelcontextprotocol/sdk/shared/protocol.js';
+import type { ReadResourceResult, ServerNotification, ServerRequest } from '@modelcontextprotocol/sdk/types.js';
 /**
  * Resource for temporary data storage (large tool responses).
  * Serves JSON text for structured data and binary blobs for image data.
@@ -9,6 +10,6 @@ export declare class TemporaryDataResource extends BaseResource {
     readonly uri = "mapbox://temp/{id}";
     readonly description = "Temporary storage for large tool responses. Data expires after TTL.";
     readonly mimeType = "application/json";
-    read(uri: string): Promise<ReadResourceResult>;
+    read(uri: string, extra?: RequestHandlerExtra<ServerRequest, ServerNotification>): Promise<ReadResourceResult>;
 }
 //# sourceMappingURL=TemporaryDataResource.d.ts.map

package/dist/commonjs/resources/temporary/TemporaryDataResource.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TemporaryDataResource.d.ts","sourceRoot":"","sources":["../../../../src/resources/temporary/TemporaryDataResource.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAG7E;;;GAGG;AACH,qBAAa,qBAAsB,SAAQ,YAAY;IACrD,QAAQ,CAAC,IAAI,oBAAoB;IACjC,QAAQ,CAAC,GAAG,wBAAwB;IACpC,QAAQ,CAAC,WAAW,yEACoD;IACxE,QAAQ,CAAC,QAAQ,sBAAsB;IAEjC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAsCrD"}
+{"version":3,"file":"TemporaryDataResource.d.ts","sourceRoot":"","sources":["../../../../src/resources/temporary/TemporaryDataResource.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACd,MAAM,oCAAoC,CAAC;AAI5C;;;GAGG;AACH,qBAAa,qBAAsB,SAAQ,YAAY;IACrD,QAAQ,CAAC,IAAI,oBAAoB;IACjC,QAAQ,CAAC,GAAG,wBAAwB;IACpC,QAAQ,CAAC,WAAW,yEACoD;IACxE,QAAQ,CAAC,QAAQ,sBAAsB;IAEjC,IAAI,CACR,GAAG,EAAE,MAAM,EACX,KAAK,CAAC,EAAE,mBAAmB,CAAC,aAAa,EAAE,kBAAkB,CAAC,GAC7D,OAAO,CAAC,kBAAkB,CAAC;CA8D/B"}

package/dist/commonjs/resources/temporary/TemporaryDataResource.js

@@ -5,6 +5,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.TemporaryDataResource = void 0;
 const BaseResource_js_1 = require("../BaseResource.js");
 const temporaryResourceManager_js_1 = require("../../utils/temporaryResourceManager.js");
+const jwtUtils_js_1 = require("../../utils/jwtUtils.js");
 /**
  * Resource for temporary data storage (large tool responses).
  * Serves JSON text for structured data and binary blobs for image data.
@@ -14,18 +15,39 @@ class TemporaryDataResource extends BaseResource_js_1.BaseResource {
     uri = 'mapbox://temp/{id}';
     description = 'Temporary storage for large tool responses. Data expires after TTL.';
     mimeType = 'application/json';
-    async read(uri) {
+    async read(uri, extra) {
+        const notFound = {
+            contents: [
+                {
+                    uri: uri,
+                    mimeType: 'text/plain',
+                    text: 'Resource not found or expired. Temporary resources have a 30-minute TTL.'
+                }
+            ]
+        };
         const resource = temporaryResourceManager_js_1.temporaryResourceManager.get(uri);
         if (!resource) {
-            return {
-                contents: [
-                    {
-                        uri: uri,
-                        mimeType: 'text/plain',
-                        text: 'Resource not found or expired. Temporary resources have a 30-minute TTL.'
-                    }
-                ]
-            };
+            return notFound;
+        }
+        // Enforce per-account ownership: only the account that created the resource
+        // may read it. Resolve the requester the same way tools resolve their token
+        // (request auth first, then the env token). A mismatch returns the SAME
+        // "not found" response as a missing resource, so a caller cannot probe
+        // whether someone else's resource exists.
+        //
+        // The env-token fallback is for stdio/single-user mode only. In hosted
+        // multi-tenant deployments MAPBOX_ACCESS_TOKEN is NOT set and every request
+        // carries its own bearer token via authInfo; the request token therefore
+        // always wins and the env fallback never applies cross-tenant. Do not set a
+        // shared MAPBOX_ACCESS_TOKEN in a multi-tenant deployment or all env-less
+        // reads would resolve to that one account.
+        const requesterToken = extra?.authInfo?.token ??
+            process.env.MAPBOX_ACCESS_TOKEN;
+        const requester = requesterToken
+            ? (0, jwtUtils_js_1.getUserNameFromToken)(requesterToken)
+            : undefined;
+        if (!resource.owner || !requester || resource.owner !== requester) {
+            return notFound;
         }
         // For image data, return as blob
         if (resource.mimeType?.startsWith('image/')) {

package/dist/commonjs/resources/temporary/TemporaryDataResource.js.map

@@ -1 +1 @@
-{"version":3,"file":"TemporaryDataResource.js","sourceRoot":"","sources":["../../../../src/resources/temporary/TemporaryDataResource.ts"],"names":[],"mappings":";AAAA,6BAA6B;AAC7B,kCAAkC;;;AAElC,wDAAkD;AAElD,yFAAmF;AAEnF;;;GAGG;AACH,MAAa,qBAAsB,SAAQ,8BAAY;IAC5C,IAAI,GAAG,gBAAgB,CAAC;IACxB,GAAG,GAAG,oBAAoB,CAAC;IAC3B,WAAW,GAClB,qEAAqE,CAAC;IAC/D,QAAQ,GAAG,kBAAkB,CAAC;IAEvC,KAAK,CAAC,IAAI,CAAC,GAAW;QACpB,MAAM,QAAQ,GAAG,sDAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEnD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,QAAQ,EAAE;oBACR;wBACE,GAAG,EAAE,GAAG;wBACR,QAAQ,EAAE,YAAY;wBACtB,IAAI,EAAE,0EAA0E;qBACjF;iBACF;aACF,CAAC;QACJ,CAAC;QAED,iCAAiC;QACjC,IAAI,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,OAAO;gBACL,QAAQ,EAAE;oBACR;wBACE,GAAG;wBACH,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,IAAI,EAAE,QAAQ,CAAC,IAAc;qBAC9B;iBACF;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,GAAG,EAAE,GAAG;oBACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;iBAC7C;aACF;SACF,CAAC;IACJ,CAAC;CACF;AA7CD,sDA6CC"}
+{"version":3,"file":"TemporaryDataResource.js","sourceRoot":"","sources":["../../../../src/resources/temporary/TemporaryDataResource.ts"],"names":[],"mappings":";AAAA,6BAA6B;AAC7B,kCAAkC;;;AAElC,wDAAkD;AAOlD,yFAAmF;AACnF,yDAA+D;AAE/D;;;GAGG;AACH,MAAa,qBAAsB,SAAQ,8BAAY;IAC5C,IAAI,GAAG,gBAAgB,CAAC;IACxB,GAAG,GAAG,oBAAoB,CAAC;IAC3B,WAAW,GAClB,qEAAqE,CAAC;IAC/D,QAAQ,GAAG,kBAAkB,CAAC;IAEvC,KAAK,CAAC,IAAI,CACR,GAAW,EACX,KAA8D;QAE9D,MAAM,QAAQ,GAAuB;YACnC,QAAQ,EAAE;gBACR;oBACE,GAAG,EAAE,GAAG;oBACR,QAAQ,EAAE,YAAY;oBACtB,IAAI,EAAE,0EAA0E;iBACjF;aACF;SACF,CAAC;QAEF,MAAM,QAAQ,GAAG,sDAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEnD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,4EAA4E;QAC5E,4EAA4E;QAC5E,wEAAwE;QACxE,uEAAuE;QACvE,0CAA0C;QAC1C,EAAE;QACF,uEAAuE;QACvE,4EAA4E;QAC5E,yEAAyE;QACzE,4EAA4E;QAC5E,0EAA0E;QAC1E,2CAA2C;QAC3C,MAAM,cAAc,GACjB,KAAK,EAAE,QAAQ,EAAE,KAA4B;YAC9C,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAClC,MAAM,SAAS,GAAG,cAAc;YAC9B,CAAC,CAAC,IAAA,kCAAoB,EAAC,cAAc,CAAC;YACtC,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAClE,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,iCAAiC;QACjC,IAAI,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,OAAO;gBACL,QAAQ,EAAE;oBACR;wBACE,GAAG;wBACH,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,IAAI,EAAE,QAAQ,CAAC,IAAc;qBAC9B;iBACF;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,GAAG,EAAE,GAAG;oBACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;iBAC7C;aACF;SACF,CAAC;IACJ,CAAC;CACF;AAxED,sDAwEC"}

package/dist/commonjs/resources/ui-apps/DirectionsAppUIResource.d.ts

@@ -0,0 +1,28 @@
+import type { RequestHandlerExtra } from '@modelcontextprotocol/sdk/shared/protocol.js';
+import type { ReadResourceResult, ServerNotification, ServerRequest } from '@modelcontextprotocol/sdk/types.js';
+import { BaseResource } from '../BaseResource.js';
+import type { HttpRequest } from '../../utils/types.js';
+/**
+ * MCP Apps resource for `directions_tool` — serves the HTML at
+ * `ui://mapbox/directions-app/index.html`. The iframe waits for the host to
+ * deliver the tool result via the `ui/notifications/tool-result` postMessage
+ * event and renders the route from `structuredContent.routes[0]`.
+ *
+ * The legacy MCP-UI pathway (inline `rawHtml` on the tool result) uses the
+ * same HTML template via `renderDirectionsAppHtml` with geometry baked in at
+ * tool-execute time.
+ */
+export declare class DirectionsAppUIResource extends BaseResource {
+    readonly name = "Directions App UI";
+    readonly uri = "ui://mapbox/directions-app/index.html";
+    readonly description = "Interactive UI for visualizing a Mapbox directions route with Mapbox GL JS (MCP Apps)";
+    readonly mimeType = "text/html;profile=mcp-app";
+    private readonly httpRequest;
+    private readonly apiEndpoint;
+    constructor(params: {
+        httpRequest: HttpRequest;
+        apiEndpoint?: () => string;
+    });
+    read(_uri: string, extra?: RequestHandlerExtra<ServerRequest, ServerNotification>): Promise<ReadResourceResult>;
+}
+//# sourceMappingURL=DirectionsAppUIResource.d.ts.map

package/dist/commonjs/resources/ui-apps/DirectionsAppUIResource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DirectionsAppUIResource.d.ts","sourceRoot":"","sources":["../../../../src/resources/ui-apps/DirectionsAppUIResource.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACd,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAIxD;;;;;;;;;GASG;AACH,qBAAa,uBAAwB,SAAQ,YAAY;IACvD,QAAQ,CAAC,IAAI,uBAAuB;IACpC,QAAQ,CAAC,GAAG,2CAA2C;IACvD,QAAQ,CAAC,WAAW,2FACsE;IAC1F,QAAQ,CAAC,QAAQ,+BAAsB;IAEvC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAe;gBAE/B,MAAM,EAAE;QAClB,WAAW,EAAE,WAAW,CAAC;QACzB,WAAW,CAAC,EAAE,MAAM,MAAM,CAAC;KAC5B;IAQK,IAAI,CACR,IAAI,EAAE,MAAM,EACZ,KAAK,CAAC,EAAE,mBAAmB,CAAC,aAAa,EAAE,kBAAkB,CAAC,GAC7D,OAAO,CAAC,kBAAkB,CAAC;CAuC/B"}

package/dist/commonjs/resources/ui-apps/DirectionsAppUIResource.js

@@ -0,0 +1,71 @@
+"use strict";
+// Copyright (c) Mapbox, Inc.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DirectionsAppUIResource = void 0;
+const server_1 = require("@modelcontextprotocol/ext-apps/server");
+const BaseResource_js_1 = require("../BaseResource.js");
+const mapboxPublicToken_js_1 = require("../../utils/mapboxPublicToken.js");
+const directionsAppHtml_js_1 = require("./directionsAppHtml.js");
+/**
+ * MCP Apps resource for `directions_tool` — serves the HTML at
+ * `ui://mapbox/directions-app/index.html`. The iframe waits for the host to
+ * deliver the tool result via the `ui/notifications/tool-result` postMessage
+ * event and renders the route from `structuredContent.routes[0]`.
+ *
+ * The legacy MCP-UI pathway (inline `rawHtml` on the tool result) uses the
+ * same HTML template via `renderDirectionsAppHtml` with geometry baked in at
+ * tool-execute time.
+ */
+class DirectionsAppUIResource extends BaseResource_js_1.BaseResource {
+    name = 'Directions App UI';
+    uri = 'ui://mapbox/directions-app/index.html';
+    description = 'Interactive UI for visualizing a Mapbox directions route with Mapbox GL JS (MCP Apps)';
+    mimeType = server_1.RESOURCE_MIME_TYPE;
+    httpRequest;
+    apiEndpoint;
+    constructor(params) {
+        super();
+        this.httpRequest = params.httpRequest;
+        this.apiEndpoint =
+            params.apiEndpoint ??
+                (() => process.env.MAPBOX_API_ENDPOINT || 'https://api.mapbox.com/');
+    }
+    async read(_uri, extra) {
+        const accessToken = extra?.authInfo?.token ||
+            process.env.MAPBOX_ACCESS_TOKEN ||
+            '';
+        const publicToken = await (0, mapboxPublicToken_js_1.resolveMapboxPublicToken)({
+            accessToken,
+            apiEndpoint: this.apiEndpoint(),
+            httpRequest: this.httpRequest
+        });
+        const html = (0, directionsAppHtml_js_1.renderDirectionsAppHtml)({
+            publicToken: publicToken ?? ''
+        });
+        return {
+            contents: [
+                {
+                    uri: this.uri,
+                    mimeType: server_1.RESOURCE_MIME_TYPE,
+                    text: html,
+                    _meta: {
+                        ui: {
+                            csp: {
+                                connectDomains: [
+                                    'https://*.mapbox.com',
+                                    'https://events.mapbox.com'
+                                ],
+                                resourceDomains: ['https://api.mapbox.com'],
+                                workerDomains: ['blob:']
+                            },
+                            preferredSize: { width: 1000, height: 600 }
+                        }
+                    }
+                }
+            ]
+        };
+    }
+}
+exports.DirectionsAppUIResource = DirectionsAppUIResource;
+//# sourceMappingURL=DirectionsAppUIResource.js.map

package/dist/commonjs/resources/ui-apps/DirectionsAppUIResource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DirectionsAppUIResource.js","sourceRoot":"","sources":["../../../../src/resources/ui-apps/DirectionsAppUIResource.ts"],"names":[],"mappings":";AAAA,6BAA6B;AAC7B,kCAAkC;;;AAQlC,kEAA2E;AAC3E,wDAAkD;AAElD,2EAA4E;AAC5E,iEAAiE;AAEjE;;;;;;;;;GASG;AACH,MAAa,uBAAwB,SAAQ,8BAAY;IAC9C,IAAI,GAAG,mBAAmB,CAAC;IAC3B,GAAG,GAAG,uCAAuC,CAAC;IAC9C,WAAW,GAClB,uFAAuF,CAAC;IACjF,QAAQ,GAAG,2BAAkB,CAAC;IAEtB,WAAW,CAAc;IACzB,WAAW,CAAe;IAE3C,YAAY,MAGX;QACC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACtC,IAAI,CAAC,WAAW;YACd,MAAM,CAAC,WAAW;gBAClB,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,yBAAyB,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,IAAI,CACR,IAAY,EACZ,KAA8D;QAE9D,MAAM,WAAW,GACd,KAAK,EAAE,QAAQ,EAAE,KAA4B;YAC9C,OAAO,CAAC,GAAG,CAAC,mBAAmB;YAC/B,EAAE,CAAC;QAEL,MAAM,WAAW,GAAG,MAAM,IAAA,+CAAwB,EAAC;YACjD,WAAW;YACX,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;YAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,IAAA,8CAAuB,EAAC;YACnC,WAAW,EAAE,WAAW,IAAI,EAAE;SAC/B,CAAC,CAAC;QAEH,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,QAAQ,EAAE,2BAAkB;oBAC5B,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE;wBACL,EAAE,EAAE;4BACF,GAAG,EAAE;gCACH,cAAc,EAAE;oCACd,sBAAsB;oCACtB,2BAA2B;iCAC5B;gCACD,eAAe,EAAE,CAAC,wBAAwB,CAAC;gCAC3C,aAAa,EAAE,CAAC,OAAO,CAAC;6BACzB;4BACD,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;yBAC5C;qBACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC;CACF;AA/DD,0DA+DC"}

package/dist/commonjs/resources/ui-apps/directionsAppHtml.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Render the directions MCP App HTML.
+ *
+ * The same template is consumed by two ingress paths:
+ *
+ * 1. **MCP Apps spec** — `DirectionsAppUIResource` reads this resource at
+ *    `ui://mapbox/directions-app/index.html`. The iframe loads, the agent's
+ *    tool result is delivered via the `ui/notifications/tool-result`
+ *    postMessage event, and `extractRoute()` pulls the route out of
+ *    `structuredContent.routes[0]`.
+ *
+ * 2. **Legacy MCP-UI spec** — `directions_tool` inlines a `rawHtml`
+ *    UIResource into its content array (gated by `isMcpUiEnabled()`). The
+ *    HTML is generated at tool-execute time with the route geometry already
+ *    baked in as an `initialData` script block, so the iframe renders
+ *    immediately without needing the host to deliver the tool result.
+ *
+ * One source of truth for the rendering logic; two slim entry conditions.
+ */
+export declare const MAPBOX_GL_VERSION = "3.12.0";
+export interface DirectionsAppInitialData {
+    geometry: {
+        type: string;
+        coordinates: [number, number][];
+    };
+    summary?: string;
+}
+export declare function renderDirectionsAppHtml(params: {
+    publicToken: string;
+    glVersion?: string;
+    initialData?: DirectionsAppInitialData;
+}): string;
+//# sourceMappingURL=directionsAppHtml.d.ts.map

package/dist/commonjs/resources/ui-apps/directionsAppHtml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"directionsAppHtml.d.ts","sourceRoot":"","sources":["../../../../src/resources/ui-apps/directionsAppHtml.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,eAAO,MAAM,iBAAiB,WAAW,CAAC;AAE1C,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAA;KAAE,CAAC;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,wBAAwB,CAAC;CACxC,GAAG,MAAM,CAgbT"}