@maxhealth.tech/prefab 0.3.18 → 0.3.19

package/dist/mcp/resource.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resource.d.ts","sourceRoot":"","sources":["../../src/mcp/resource.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAiB,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAA;AAC7G,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAMpE,gDAAgD;AAChD,MAAM,WAAW,SAAS;IACxB,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,0CAA0C;IAC1C,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,oCAAoC;IACpC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;CAC1B;AAED,yDAAyD;AACzD,MAAM,WAAW,iBAAiB;IAChC,0DAA0D;IAC1D,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,gEAAgE;IAChE,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,8DAA8D;IAC9D,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,0DAA0D;IAC1D,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,iCAAiC;IACjC,GAAG,CAAC,EAAE,SAAS,CAAA;IACf,sDAAsD;IACtD,WAAW,CAAC,EAAE,iBAAiB,CAAA;CAChC;AAED,yEAAyE;AACzE,UAAU,qBAAqB;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACnC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;CACvC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAgB,YAAY,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG;IAAE,EAAE,EAAE;QAAE,GAAG,CAAC,EAAE,SAAS,CAAC;QAAC,WAAW,CAAC,EAAE,qBAAqB,CAAA;KAAE,CAAA;CAAE,CAqB5H;AAED,2DAA2D;AAC3D,eAAO,MAAM,eAAe;QAxBuC;QAAE,GAAG,CAAC,EAAE,SAAS,CAAC;QAAC,WAAW,CAAC,EAAE,qBAAqB,CAAA;KAAE;CA0BzH,CAAA;AAIF,kDAAkD;AAClD,eAAO,MAAM,mBAAmB,uBAAuB,CAAA;AAEvD,4CAA4C;AAC5C,eAAO,MAAM,YAAY,8BAA8B,CAAA;AAEvD;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,cAAc,+BAA+B,CAAA;AAE1D;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,YAAY,CAGvD,CAAA;AAkBD,MAAM,WAAW,mBAAmB;IAClC,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,WAAW,CAAA;CAC1B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,YAAY,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,MAAM,CA4BlE;AAID,MAAM,WAAW,qBAAqB;IACpC,iDAAiD;IACjD,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,+CAA+C;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oFAAoF;IACpF,GAAG,CAAC,EAAE,SAAS,CAAA;IACf,kCAAkC;IAClC,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAC/B,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,iDAAiD;IACjD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;OAGG;IACH,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB;;;OAGG;IACH,KAAK,CAAC,EAAE,YAAY,CAAA;IACpB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,gFAAgF;IAChF,SAAS,CAAC,EAAE,YAAY,CAAA;CACzB;AAED,4FAA4F;AAC5F,MAAM,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,qBAAqB,CAAC,uBAAuB,CAAC,CAAC,CAAA;AAEvG,sDAAsD;AACtD,UAAU,qBAAqB;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CACrD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,gBAAgB,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAA;IAC3G,QAAQ,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAA;IACnG,mFAAmF;IACnF,MAAM,CAAC,EAAE;QAAE,oBAAoB,CAAC,CAAC,YAAY,EAAE,qBAAqB,GAAG,IAAI,CAAA;KAAE,CAAA;IAC7E,6DAA6D;IAC7D,oBAAoB,CAAC,CAAC,YAAY,EAAE,qBAAqB,GAAG,IAAI,CAAA;CACjE;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAC1B,IAAI,CAAC,EAAE,YAAY,EACnB,QAAQ,GAAE,QAAQ,CAAC,YAAY,CAAwB,GACtD,QAAQ,CAAC,YAAY,CAAC,CAUxB;AAkBD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,IAAI,CA0DnG"}
+{"version":3,"file":"resource.d.ts","sourceRoot":"","sources":["../../src/mcp/resource.ts"],"names":[],"mappings":"AAAA,oKAAoK;AAKpK,OAAO,KAAK,EAAE,YAAY,EAAiB,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAA;AAC7G,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAMpE,gDAAgD;AAChD,MAAM,WAAW,SAAS;IACxB,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,0CAA0C;IAC1C,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,oCAAoC;IACpC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;CAC1B;AAED,yDAAyD;AACzD,MAAM,WAAW,iBAAiB;IAChC,0DAA0D;IAC1D,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,gEAAgE;IAChE,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,8DAA8D;IAC9D,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,0DAA0D;IAC1D,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,iCAAiC;IACjC,GAAG,CAAC,EAAE,SAAS,CAAA;IACf,sDAAsD;IACtD,WAAW,CAAC,EAAE,iBAAiB,CAAA;CAChC;AAED,yEAAyE;AACzE,UAAU,qBAAqB;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACnC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;CACvC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,YAAY,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG;IAAE,EAAE,EAAE;QAAE,GAAG,CAAC,EAAE,SAAS,CAAC;QAAC,WAAW,CAAC,EAAE,qBAAqB,CAAA;KAAE,CAAA;CAAE,CAqB5H;AAED,2DAA2D;AAC3D,eAAO,MAAM,eAAe;QAxBuC;QAAE,GAAG,CAAC,EAAE,SAAS,CAAC;QAAC,WAAW,CAAC,EAAE,qBAAqB,CAAA;KAAE;CA0BzH,CAAA;AAIF,kDAAkD;AAClD,eAAO,MAAM,mBAAmB,uBAAuB,CAAA;AAEvD,4CAA4C;AAC5C,eAAO,MAAM,YAAY,8BAA8B,CAAA;AAEvD,4HAA4H;AAC5H,eAAO,MAAM,cAAc,+BAA+B,CAAA;AAE1D,wGAAwG;AACxG,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,YAAY,CAGvD,CAAA;AAYD,MAAM,WAAW,mBAAmB;IAClC,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,8GAA8G;IAC9G,WAAW,CAAC,EAAE,WAAW,CAAA;CAC1B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,MAAM,CA2BlE;AAID,MAAM,WAAW,qBAAqB;IACpC,iDAAiD;IACjD,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,+CAA+C;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oFAAoF;IACpF,GAAG,CAAC,EAAE,SAAS,CAAA;IACf,kCAAkC;IAClC,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAC/B,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,iDAAiD;IACjD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,mDAAmD;IACnD,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,oHAAoH;IACpH,KAAK,CAAC,EAAE,YAAY,CAAA;IACpB,2HAA2H;IAC3H,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,gFAAgF;IAChF,SAAS,CAAC,EAAE,YAAY,CAAA;CACzB;AAED,4FAA4F;AAC5F,MAAM,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,qBAAqB,CAAC,uBAAuB,CAAC,CAAC,CAAA;AAEvG,sDAAsD;AACtD,UAAU,qBAAqB;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CACrD;AAED,gHAAgH;AAChH,MAAM,WAAW,aAAa;IAC5B,gBAAgB,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAA;IAC3G,QAAQ,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAA;IACnG,mFAAmF;IACnF,MAAM,CAAC,EAAE;QAAE,oBAAoB,CAAC,CAAC,YAAY,EAAE,qBAAqB,GAAG,IAAI,CAAA;KAAE,CAAA;IAC7E,6DAA6D;IAC7D,oBAAoB,CAAC,CAAC,YAAY,EAAE,qBAAqB,GAAG,IAAI,CAAA;CACjE;AAED,wHAAwH;AACxH,wBAAgB,YAAY,CAC1B,IAAI,CAAC,EAAE,YAAY,EACnB,QAAQ,GAAE,QAAQ,CAAC,YAAY,CAAwB,GACtD,QAAQ,CAAC,YAAY,CAAC,CAUxB;AAcD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAsDnG"}

package/dist/mcp/resource.js

@@ -1,25 +1,11 @@
-/**
- * MCP Apps resource helpers — register the prefab viewer as a `ui://` resource.
- *
- * Covers the three things every MCP Apps host checks and the two the
- * 2026-07-28 protocol revision added:
- *   - the `text/html;profile=mcp-app` MIME type,
- *   - `_meta.ui` CSP / permissions on BOTH the listing and the content item,
- *   - the viewer HTML itself (CDN-pinned to this exact package version),
- *   - `ttlMs` / `cacheScope` on the read result (SEP-2549 `CacheableResult`),
- *   - the `io.modelcontextprotocol/ui` extension capability (SEP-2133).
- */
+/** Register the prefab viewer as a `ui://` MCP Apps resource: MIME type, `_meta.ui` on listing and content, CDN-pinned HTML, cache fields, extension capability. */
 import { VERSION } from '../app.js';
 import { createLogger } from '../core/logger.js';
 import { escapeHtml } from '../core/escape.js';
 import { themeBridgeCss } from './theme-bridge.js';
 const log = createLogger('mcp');
 /**
- * Generate the `_meta` object for MCP Apps `ui://` resource registration.
- *
- * Includes CSP and Permission Policy configuration per the MCP Apps spec.
- * Use on both the resource listing AND the content item (VS Code reads
- * only the content item; other hosts may read either).
+ * The `_meta` (CSP, permissions) for a `ui://` resource. Put it on the listing and the content item: VS Code reads only the latter.
  *
  * @example
  * ```ts
@@ -79,54 +65,21 @@ export const PREFAB_CDN_META = resourceMeta({
 export const PREFAB_RESOURCE_URI = 'ui://prefab/viewer';
 /** MIME type required by MCP Apps hosts. */
 export const MCP_APP_MIME = 'text/html;profile=mcp-app';
-/**
- * Capability key for the MCP Apps extension (versioned independently of core).
- *
- * The identifier is `…/ui`, and the trap here is that `…/apps` looks right and is
- * wrong. The normative source is the MCP Apps spec, which states "This extension is
- * identified as: `io.modelcontextprotocol/ui`" in both the current `2026-01-26`
- * revision and the draft, and the reference implementation agrees:
- * `ext-apps/src/server/index.ts` exports `EXTENSION_ID = "io.modelcontextprotocol/ui"`.
- *
- * `io.modelcontextprotocol/apps` appears only as illustrative "e.g." text in the Rust
- * and C# SDKs' generic `ServerCapabilities.extensions` doc comments (and their test
- * fixtures), showing the SHAPE of the extensions map rather than naming this extension.
- * Copying it from there declares the capability under a key no host looks up, which
- * fails silently: rendering still works, because hosts fall back to detecting apps via
- * `_meta.ui` plus the MIME type, so only the SEP-2133 declaration is lost.
- *
- * Duplicated as a literal rather than imported, because prefab ships zero dependencies.
- */
+/** The MCP Apps extension id, `…/ui` per the spec and ext-apps (`…/apps` in some SDK doc examples is only illustrative). */
 export const APPS_EXTENSION = 'io.modelcontextprotocol/ui';
-/**
- * Default cache hint for the viewer resource.
- *
- * The HTML is a pure function of this package's `VERSION` (the CDN base pins
- * the exact version), so it cannot change for a given server build — it is
- * safely shared-cacheable. Without this the SDK falls back to the conservative
- * `{ ttlMs: 0, cacheScope: 'private' }` and the viewer is re-fetched every time.
- */
+/** Viewer cache hint: the HTML is a pure function of `VERSION`, so it is shared-cacheable for a day. */
 export const DEFAULT_VIEWER_CACHE = {
     ttlMs: 86_400_000, // 24h
     cacheScope: 'public',
 };
-/**
- * Runtime whitelist for {@link McpCacheScope}.
- *
- * Kept as a value (not just the union type) so the guard in `resolveCache` still
- * rejects a bad scope handed over from untyped JS — a `!==` chain against the
- * union narrows itself away and validates nothing.
- */
+/** Runtime list of {@link McpCacheScope}, so untyped JS callers are validated too. */
 const CACHE_SCOPES = ['public', 'private'];
 /** CDN base for the @maxhealth.tech/prefab package (exact version, never stale). */
 function cdnBase() {
     return `https://cdn.jsdelivr.net/npm/@maxhealth.tech/prefab@${VERSION}/dist`;
 }
 /**
- * Generate the HTML page for a prefab MCP Apps viewer resource.
- *
- * Returns the minimal HTML that loads `prefab.css` and `renderer.auto.min.js`
- * from the CDN, plus any additional scripts/stylesheets you specify.
+ * The viewer HTML: `prefab.css` and `renderer.auto.min.js` from the CDN, plus your scripts and stylesheets.
  *
  * @example
  * ```ts
@@ -141,8 +94,7 @@ function cdnBase() {
 export function rendererHtml(options) {
     const title = options?.title ?? 'Prefab';
     const base = options?.cdnBase ?? cdnBase();
-    // Order in <head> is load-bearing: prefab.css, then the bridge (which must win
-    // over it), then the caller's stylesheets as the outermost override.
+    // Order matters: prefab.css, then the bridge, then the caller's stylesheets.
     const bridge = options?.themeBridge
         ? `  <style>\n${themeBridgeCss(options.themeBridge)}\n  </style>\n`
         : '';
@@ -166,15 +118,7 @@ ${bridge}${extraStyles}</head>
 ${extraScripts}</body>
 </html>`;
 }
-/**
- * Fill in and validate the `CacheableResult` fields, rejecting values the SDK
- * would silently discard in favour of `ttlMs: 0`.
- *
- * `defaults` differ per resource kind: the viewer HTML is a pure function of the
- * package version and is safely shared-cacheable, while an `a2ui://` surface is
- * rebuilt on every read and defaults to no caching. Exported so `./a2ui.ts`
- * resolves its hints through the same guard rather than restating it.
- */
+/** Fill in and validate `CacheableResult` fields, throwing on values the SDK would silently replace with `ttlMs: 0`. */
 export function resolveCache(hint, defaults = DEFAULT_VIEWER_CACHE) {
     const ttlMs = hint?.ttlMs ?? defaults.ttlMs;
     if (!Number.isSafeInteger(ttlMs) || ttlMs < 0) {
@@ -188,8 +132,6 @@ export function resolveCache(hint, defaults = DEFAULT_VIEWER_CACHE) {
 }
 /** Declare the MCP Apps extension capability, tolerating servers that cannot. */
 function declareAppsExtension(server) {
-    // Not named `declare` — that is a TS modifier keyword at statement position
-    // and some transpilers refuse to parse a call to a binding of that name.
     const declareCaps = server.registerCapabilities?.bind(server)
         ?? server.server?.registerCapabilities?.bind(server.server);
     if (declareCaps == null)
@@ -198,16 +140,11 @@ function declareAppsExtension(server) {
         declareCaps({ extensions: { [APPS_EXTENSION]: {} } });
     }
     catch (e) {
-        // Both SDK generations throw when called after connect. The server still
-        // serves the resource — it just does not advertise the extension.
         log.warn(`could not declare the ${APPS_EXTENSION} capability (register the viewer before connecting):`, e);
     }
 }
 /**
- * Register the prefab viewer as a `ui://` resource on an MCP server.
- *
- * Handles the MIME type, CSP on both listing and content item, HTML generation,
- * the `CacheableResult` fields and the Apps extension capability in one call.
+ * Register the prefab viewer as a `ui://` resource. The CSP admits jsDelivr and every origin the page loads from.
  *
  * @example
  * ```ts
@@ -236,17 +173,17 @@ export function registerViewerResource(server, options) {
             baseUriDomains: options.csp.baseUriDomains ?? [],
         }
         : { resourceDomains: ['https://cdn.jsdelivr.net'] };
-    // Add script origins to CSP resourceDomains
-    if (options?.scripts && options.scripts.length > 0) {
-        const scriptOrigins = options.scripts
-            .map(url => { try {
-            return new URL(url).origin;
+    const loadedFrom = [...(options?.scripts ?? []), ...(options?.stylesheets ?? []), ...(options?.cdnBase != null ? [options.cdnBase] : [])];
+    const loadedOrigins = loadedFrom.flatMap(url => {
+        try {
+            return [new URL(url).origin];
         }
         catch {
-            return null;
-        } })
-            .filter((o) => o !== null);
-        csp.resourceDomains = [...new Set([...(csp.resourceDomains ?? []), ...scriptOrigins])];
+            return [];
+        }
+    });
+    if (loadedOrigins.length > 0) {
+        csp.resourceDomains = [...new Set([...(csp.resourceDomains ?? []), ...loadedOrigins])];
     }
     const meta = resourceMeta({ csp, permissions: options?.permissions });
     const html = rendererHtml({
@@ -268,13 +205,9 @@ export function registerViewerResource(server, options) {
                 text: html,
                 _meta: meta,
             }],
-        // Handler-provided cache fields take precedence over any server hint, and
-        // make the result spec-compliant on servers that fill in nothing.
         ttlMs: cache.ttlMs,
         cacheScope: cache.cacheScope,
     });
-    // registerResource is the current API in both SDK generations; resource() is
-    // the v1 overload that v2 dropped.
     const register = server.registerResource?.bind(server) ?? server.resource?.bind(server);
     if (register == null) {
         throw new TypeError('registerViewerResource: server exposes neither registerResource() nor resource()');

package/dist/mcp/resource.js.map

@@ -1 +1 @@
-{"version":3,"file":"resource.js","sourceRoot":"","sources":["../../src/mcp/resource.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,OAAO,EAAE,cAAc,EAAoB,MAAM,mBAAmB,CAAA;AAEpE,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;AA2C/B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,UAAU,YAAY,CAAC,OAA6B;IACxD,MAAM,EAAE,GAA6D,EAAE,CAAA;IAEvE,IAAI,OAAO,EAAE,GAAG,EAAE,CAAC;QACjB,EAAE,CAAC,GAAG,GAAG;YACP,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE;YAClD,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE;YAChD,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE;YAC5C,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE;SACjD,CAAA;IACH,CAAC;IAED,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;QACzB,EAAE,CAAC,WAAW,GAAG,EAAE,CAAA;QACnB,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM;YAAE,EAAE,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE,CAAA;QAC1D,IAAI,OAAO,CAAC,WAAW,CAAC,UAAU;YAAE,EAAE,CAAC,WAAW,CAAC,UAAU,GAAG,EAAE,CAAA;QAClE,IAAI,OAAO,CAAC,WAAW,CAAC,WAAW;YAAE,EAAE,CAAC,WAAW,CAAC,WAAW,GAAG,EAAE,CAAA;QACpE,IAAI,OAAO,CAAC,WAAW,CAAC,cAAc;YAAE,EAAE,CAAC,WAAW,CAAC,cAAc,GAAG,EAAE,CAAA;IAC5E,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,CAAA;AACf,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC;IAC1C,GAAG,EAAE,EAAE,eAAe,EAAE,CAAC,0BAA0B,CAAC,EAAE;CACvD,CAAC,CAAA;AAEF,gFAAgF;AAEhF,kDAAkD;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAAoB,CAAA;AAEvD,4CAA4C;AAC5C,MAAM,CAAC,MAAM,YAAY,GAAG,2BAA2B,CAAA;AAEvD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,4BAA4B,CAAA;AAE1D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA2B;IAC1D,KAAK,EAAE,UAAU,EAAE,MAAM;IACzB,UAAU,EAAE,QAAQ;CACrB,CAAA;AAED;;;;;;GAMG;AACH,MAAM,YAAY,GAA6B,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;AAEpE,oFAAoF;AACpF,SAAS,OAAO;IACd,OAAO,uDAAuD,OAAO,OAAO,CAAA;AAC9E,CAAC;AAwBD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,YAAY,CAAC,OAA6B;IACxD,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,QAAQ,CAAA;IACxC,MAAM,IAAI,GAAG,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,CAAA;IAC1C,+EAA+E;IAC/E,qEAAqE;IACrE,MAAM,MAAM,GAAG,OAAO,EAAE,WAAW;QACjC,CAAC,CAAC,cAAc,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,gBAAgB;QACnE,CAAC,CAAC,EAAE,CAAA;IACN,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,WAAW,IAAI,EAAE,CAAC;SAC7C,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,8CAA8C,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;SAC7E,IAAI,CAAC,IAAI,CAAC,CAAA;IACb,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;SAC1C,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,8BAA8B,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC;SACtE,IAAI,CAAC,IAAI,CAAC,CAAA;IAEb,OAAO;;;;;WAKE,UAAU,CAAC,KAAK,CAAC;6CACiB,IAAI;EAC/C,MAAM,GAAG,WAAW;;;6BAGO,IAAI;EAC/B,YAAY;QACN,CAAA;AACR,CAAC;AAwED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAmB,EACnB,WAAmC,oBAAoB;IAEvD,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAA;IAC3C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,UAAU,CAAC,wDAAwD,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;IACrG,CAAC;IACD,MAAM,UAAU,GAAkB,IAAI,EAAE,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAA;IACzE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,UAAU,CAAC,uDAAuD,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,CAAA;IACzG,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;AAC9B,CAAC;AAED,iFAAiF;AACjF,SAAS,oBAAoB,CAAC,MAAqB;IACjD,4EAA4E;IAC5E,yEAAyE;IACzE,MAAM,WAAW,GAAG,MAAM,CAAC,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC;WACxD,MAAM,CAAC,MAAM,EAAE,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC7D,IAAI,WAAW,IAAI,IAAI;QAAE,OAAM;IAC/B,IAAI,CAAC;QACH,WAAW,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;IACvD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,yEAAyE;QACzE,kEAAkE;QAClE,GAAG,CAAC,IAAI,CAAC,yBAAyB,cAAc,sDAAsD,EAAE,CAAC,CAAC,CAAA;IAC5G,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAqB,EAAE,OAA+B;IAC3F,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,mBAAmB,CAAA;IAC/C,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,eAAe,CAAA;IAC/C,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IAE1C,8DAA8D;IAC9D,MAAM,GAAG,GAAc,OAAO,EAAE,GAAG;QACjC,CAAC,CAAC;YACE,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,0BAA0B,CAAC,CAAC,CAAC;YACnG,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE;YAChD,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE;YAC5C,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE;SACjD;QACH,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAA;IAErD,4CAA4C;IAC5C,IAAI,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO;aAClC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC;YAAC,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAA;QAAC,CAAC,CAAC,CAAC,CAAC;aACxE,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAA;QACzC,GAAG,CAAC,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;IACxF,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;IACrE,MAAM,IAAI,GAAG,YAAY,CAAC;QACxB,KAAK;QACL,OAAO,EAAE,OAAO,EAAE,OAAO;QACzB,WAAW,EAAE,OAAO,EAAE,WAAW;QACjC,OAAO,EAAE,OAAO,EAAE,OAAO;QACzB,WAAW,EAAE,OAAO,EAAE,WAAW;KAClC,CAAC,CAAA;IAEF,IAAI,OAAO,EAAE,iBAAiB,KAAK,KAAK;QAAE,oBAAoB,CAAC,MAAM,CAAC,CAAA;IAEtE,iEAAiE;IACjE,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAE5D,MAAM,MAAM,GAAmB,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IAC/F,MAAM,OAAO,GAAwB,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;QACpE,QAAQ,EAAE,CAAC;gBACT,GAAG,EAAE,WAAW,CAAC,QAAQ,EAAE;gBAC3B,QAAQ,EAAE,YAAY;gBACtB,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACZ,CAAC;QACF,0EAA0E;QAC1E,kEAAkE;QAClE,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAA;IAEF,6EAA6E;IAC7E,mCAAmC;IACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;IACvF,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,SAAS,CAAC,kFAAkF,CAAC,CAAA;IACzG,CAAC;IACD,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;AACtC,CAAC"}
+{"version":3,"file":"resource.js","sourceRoot":"","sources":["../../src/mcp/resource.ts"],"names":[],"mappings":"AAAA,oKAAoK;AAEpK,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,OAAO,EAAE,cAAc,EAAoB,MAAM,mBAAmB,CAAA;AAEpE,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;AA2C/B;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,YAAY,CAAC,OAA6B;IACxD,MAAM,EAAE,GAA6D,EAAE,CAAA;IAEvE,IAAI,OAAO,EAAE,GAAG,EAAE,CAAC;QACjB,EAAE,CAAC,GAAG,GAAG;YACP,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE;YAClD,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE;YAChD,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE;YAC5C,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE;SACjD,CAAA;IACH,CAAC;IAED,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;QACzB,EAAE,CAAC,WAAW,GAAG,EAAE,CAAA;QACnB,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM;YAAE,EAAE,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE,CAAA;QAC1D,IAAI,OAAO,CAAC,WAAW,CAAC,UAAU;YAAE,EAAE,CAAC,WAAW,CAAC,UAAU,GAAG,EAAE,CAAA;QAClE,IAAI,OAAO,CAAC,WAAW,CAAC,WAAW;YAAE,EAAE,CAAC,WAAW,CAAC,WAAW,GAAG,EAAE,CAAA;QACpE,IAAI,OAAO,CAAC,WAAW,CAAC,cAAc;YAAE,EAAE,CAAC,WAAW,CAAC,cAAc,GAAG,EAAE,CAAA;IAC5E,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,CAAA;AACf,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC;IAC1C,GAAG,EAAE,EAAE,eAAe,EAAE,CAAC,0BAA0B,CAAC,EAAE;CACvD,CAAC,CAAA;AAEF,gFAAgF;AAEhF,kDAAkD;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAAoB,CAAA;AAEvD,4CAA4C;AAC5C,MAAM,CAAC,MAAM,YAAY,GAAG,2BAA2B,CAAA;AAEvD,4HAA4H;AAC5H,MAAM,CAAC,MAAM,cAAc,GAAG,4BAA4B,CAAA;AAE1D,wGAAwG;AACxG,MAAM,CAAC,MAAM,oBAAoB,GAA2B;IAC1D,KAAK,EAAE,UAAU,EAAE,MAAM;IACzB,UAAU,EAAE,QAAQ;CACrB,CAAA;AAED,sFAAsF;AACtF,MAAM,YAAY,GAA6B,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;AAEpE,oFAAoF;AACpF,SAAS,OAAO;IACd,OAAO,uDAAuD,OAAO,OAAO,CAAA;AAC9E,CAAC;AAiBD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,YAAY,CAAC,OAA6B;IACxD,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,QAAQ,CAAA;IACxC,MAAM,IAAI,GAAG,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,CAAA;IAC1C,6EAA6E;IAC7E,MAAM,MAAM,GAAG,OAAO,EAAE,WAAW;QACjC,CAAC,CAAC,cAAc,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,gBAAgB;QACnE,CAAC,CAAC,EAAE,CAAA;IACN,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,WAAW,IAAI,EAAE,CAAC;SAC7C,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,8CAA8C,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;SAC7E,IAAI,CAAC,IAAI,CAAC,CAAA;IACb,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;SAC1C,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,8BAA8B,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC;SACtE,IAAI,CAAC,IAAI,CAAC,CAAA;IAEb,OAAO;;;;;WAKE,UAAU,CAAC,KAAK,CAAC;6CACiB,IAAI;EAC/C,MAAM,GAAG,WAAW;;;6BAGO,IAAI;EAC/B,YAAY;QACN,CAAA;AACR,CAAC;AAuDD,wHAAwH;AACxH,MAAM,UAAU,YAAY,CAC1B,IAAmB,EACnB,WAAmC,oBAAoB;IAEvD,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAA;IAC3C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,UAAU,CAAC,wDAAwD,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;IACrG,CAAC;IACD,MAAM,UAAU,GAAkB,IAAI,EAAE,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAA;IACzE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,UAAU,CAAC,uDAAuD,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,CAAA;IACzG,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;AAC9B,CAAC;AAED,iFAAiF;AACjF,SAAS,oBAAoB,CAAC,MAAqB;IACjD,MAAM,WAAW,GAAG,MAAM,CAAC,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC;WACxD,MAAM,CAAC,MAAM,EAAE,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC7D,IAAI,WAAW,IAAI,IAAI;QAAE,OAAM;IAC/B,IAAI,CAAC;QACH,WAAW,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;IACvD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,IAAI,CAAC,yBAAyB,cAAc,sDAAsD,EAAE,CAAC,CAAC,CAAA;IAC5G,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAqB,EAAE,OAA+B;IAC3F,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,mBAAmB,CAAA;IAC/C,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,eAAe,CAAA;IAC/C,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IAE1C,8DAA8D;IAC9D,MAAM,GAAG,GAAc,OAAO,EAAE,GAAG;QACjC,CAAC,CAAC;YACE,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,0BAA0B,CAAC,CAAC,CAAC;YACnG,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE;YAChD,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE;YAC5C,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE;SACjD;QACH,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAA;IAErD,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACzI,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;QAC7C,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAA;QAAC,CAAC;IAC1D,CAAC,CAAC,CAAA;IACF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;IACxF,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;IACrE,MAAM,IAAI,GAAG,YAAY,CAAC;QACxB,KAAK;QACL,OAAO,EAAE,OAAO,EAAE,OAAO;QACzB,WAAW,EAAE,OAAO,EAAE,WAAW;QACjC,OAAO,EAAE,OAAO,EAAE,OAAO;QACzB,WAAW,EAAE,OAAO,EAAE,WAAW;KAClC,CAAC,CAAA;IAEF,IAAI,OAAO,EAAE,iBAAiB,KAAK,KAAK;QAAE,oBAAoB,CAAC,MAAM,CAAC,CAAA;IAEtE,iEAAiE;IACjE,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAE5D,MAAM,MAAM,GAAmB,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IAC/F,MAAM,OAAO,GAAwB,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;QACpE,QAAQ,EAAE,CAAC;gBACT,GAAG,EAAE,WAAW,CAAC,QAAQ,EAAE;gBAC3B,QAAQ,EAAE,YAAY;gBACtB,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;aACZ,CAAC;QACF,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAA;IAEF,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;IACvF,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,SAAS,CAAC,kFAAkF,CAAC,CAAA;IACzG,CAAC;IACD,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;AACtC,CAAC"}

package/dist/mcp/result.d.ts

@@ -1,36 +1,11 @@
-/**
- * MCP tool-result envelope.
- *
- * Every prefab display helper returns the same shape: the wire JSON as a text
- * content block plus `structuredContent` for MCP Apps hosts to hand to the
- * iframe. Building that envelope in one place keeps the `display_*` builders
- * identical by construction.
- *
- * `structuredContent` is typed through the generic rather than widened to
- * `Record<string, unknown>`, so callers keep the wire type and no cast is
- * needed anywhere (protocol revision 2026-07-28 loosened the field to any JSON
- * value — SEP-2106).
- *
- * `resultType` (SEP-2322) is deliberately NOT set here. It is a wire-only
- * discriminator owned by the SDK's protocol layer: `@modelcontextprotocol/server`
- * stamps it at its 2026-era encode seam and strips it before results reach
- * consumers, which is why its public result types do not declare it.
- *
- * The one handler-authored case is `resultType: 'input_required'`, which a
- * completed result never carries. That case is built by `./input-required.ts`
- * and returned instead of a tool result, so it never travels through here.
- */
+/** The one tool-result envelope every `display_*` helper returns. `resultType` (SEP-2322) is left to the SDK, which stamps it on encode. */
 import type { McpDisplayResult } from './types.js';
 export interface ToolResultOptions {
     /** Flag the result as failed (hosts render it as a tool error). */
     isError?: boolean;
 }
 /**
- * Wrap a JSON payload as an MCP tool result.
- *
- * The payload is serialized into `content[0].text` (for hosts and models that
- * read text) and passed through as `structuredContent` (for MCP Apps iframes,
- * which receive it via `ui/notifications/tool-result`).
+ * Wrap a JSON payload as an MCP tool result: serialized into `content[0].text` and passed through as `structuredContent`.
  *
  * @example
  * ```ts

package/dist/mcp/result.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../src/mcp/result.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAElD,MAAM,WAAW,iBAAiB;IAChC,mEAAmE;IACnE,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAO1F"}
+{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../src/mcp/result.ts"],"names":[],"mappings":"AAAA,4IAA4I;AAE5I,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAElD,MAAM,WAAW,iBAAiB;IAChC,mEAAmE;IACnE,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAO1F"}

package/dist/mcp/result.js

@@ -1,31 +1,6 @@
+/** The one tool-result envelope every `display_*` helper returns. `resultType` (SEP-2322) is left to the SDK, which stamps it on encode. */
 /**
- * MCP tool-result envelope.
- *
- * Every prefab display helper returns the same shape: the wire JSON as a text
- * content block plus `structuredContent` for MCP Apps hosts to hand to the
- * iframe. Building that envelope in one place keeps the `display_*` builders
- * identical by construction.
- *
- * `structuredContent` is typed through the generic rather than widened to
- * `Record<string, unknown>`, so callers keep the wire type and no cast is
- * needed anywhere (protocol revision 2026-07-28 loosened the field to any JSON
- * value — SEP-2106).
- *
- * `resultType` (SEP-2322) is deliberately NOT set here. It is a wire-only
- * discriminator owned by the SDK's protocol layer: `@modelcontextprotocol/server`
- * stamps it at its 2026-era encode seam and strips it before results reach
- * consumers, which is why its public result types do not declare it.
- *
- * The one handler-authored case is `resultType: 'input_required'`, which a
- * completed result never carries. That case is built by `./input-required.ts`
- * and returned instead of a tool result, so it never travels through here.
- */
-/**
- * Wrap a JSON payload as an MCP tool result.
- *
- * The payload is serialized into `content[0].text` (for hosts and models that
- * read text) and passed through as `structuredContent` (for MCP Apps iframes,
- * which receive it via `ui/notifications/tool-result`).
+ * Wrap a JSON payload as an MCP tool result: serialized into `content[0].text` and passed through as `structuredContent`.
  *
  * @example
  * ```ts

package/dist/mcp/result.js.map

@@ -1 +1 @@
-{"version":3,"file":"result.js","sourceRoot":"","sources":["../../src/mcp/result.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AASH;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,UAAU,CAAI,OAAU,EAAE,OAA2B;IACnE,MAAM,MAAM,GAAwB;QAClC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,iBAAiB,EAAE,OAAO;KAC3B,CAAA;IACD,IAAI,OAAO,EAAE,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAA;IAC3C,OAAO,MAAM,CAAA;AACf,CAAC"}
+{"version":3,"file":"result.js","sourceRoot":"","sources":["../../src/mcp/result.ts"],"names":[],"mappings":"AAAA,4IAA4I;AAS5I;;;;;;;;;;GAUG;AACH,MAAM,UAAU,UAAU,CAAI,OAAU,EAAE,OAA2B;IACnE,MAAM,MAAM,GAAwB;QAClC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,iBAAiB,EAAE,OAAO;KAC3B,CAAA;IACD,IAAI,OAAO,EAAE,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAA;IAC3C,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/mcp/theme-bridge.d.ts

@@ -1,20 +1,6 @@
 /**
- * VS Code theme bridge for the viewer HTML.
- *
- * `prefab.css` resolves every token through a fallback chain: MCP Apps host
- * variable first, then the VS Code webview variable, then a static default.
- * That ordering is right in general, but it means a host which defines the MCP
- * Apps `--color-*` variables shadows the VS Code ones entirely, and the viewer
- * stops following the user's editor theme.
- *
- * This module emits a stylesheet that re-declares the affected tokens with the
- * VS Code variable *first* and the MCP Apps layer dropped, at a specificity and
- * document position that beat each of `prefab.css`'s four token blocks. It is
- * opt-in via `rendererHtml({ themeBridge: 'vscode' })`.
- *
- * The table below is the single source of truth for the mapping.
- * `test/theme-bridge.test.ts` cross-checks every entry against `prefab.css`, so
- * the bridge cannot drift from the base theme it overrides.
+ * VS Code theme bridge: re-declares tokens with the `--vscode-*` variable first, so a host's MCP Apps `--color-*`
+ * layer no longer shadows the editor theme. `test/theme-bridge.test.ts` checks the table against `prefab.css`.
  */
 /** How one prefab token is sourced from the VS Code webview. */
 export interface VsCodeTokenSource {
@@ -25,30 +11,13 @@ export interface VsCodeTokenSource {
     /** Dark-scheme fallback. Omitted for scheme-independent tokens (fonts). */
     dark?: string;
 }
-/**
- * prefab tokens that VS Code can supply, with the same variables and static
- * fallbacks `prefab.css` uses. Tokens VS Code has no equivalent for (`--success`,
- * `--warning`, shadows, radii) are deliberately absent: the bridge only overrides
- * what the editor can actually provide.
- */
+/** prefab tokens VS Code can supply, with `prefab.css`'s own fallbacks; tokens it cannot supply are absent. */
 export declare const VSCODE_BRIDGE: Readonly<Record<string, VsCodeTokenSource>>;
 /** Supported theme bridges. */
 export type ThemeBridge = 'vscode';
 /**
- * Generate the theme-bridge CSS (the contents of a `<style>` element).
- *
- * Mirrors the selectors `prefab.css` uses for *host-driven* tokens, so the
- * override lands in both schemes rather than only in light mode: the `:root`
- * default (alongside `[data-theme="light"]`, whose higher specificity would
- * otherwise win) and the `prefers-color-scheme: dark` media block. Each selector
- * matches its counterpart's specificity and is emitted after `prefab.css`, so it
- * wins on document order.
- *
- * `:root[data-theme="dark"]` is deliberately NOT bridged. That block is
- * prefab's standalone dark palette with static values and no host chain at all,
- * the explicit separation of host theming (which cascades) from the manual theme
- * toggle. Overriding it would make an app that pins `data-theme="dark"` follow
- * the editor instead of its own choice.
+ * The theme-bridge CSS, matching `prefab.css`'s host-driven selectors in both schemes. `[data-theme="dark"]` is
+ * left alone, so an app that pins it keeps its own palette.
  *
  * @example
  * ```ts

package/dist/mcp/theme-bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"theme-bridge.d.ts","sourceRoot":"","sources":["../../src/mcp/theme-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,gEAAgE;AAChE,MAAM,WAAW,iBAAiB;IAChC,oDAAoD;IACpD,MAAM,EAAE,MAAM,CAAA;IACd,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAA;IACb,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CA2BrE,CAAA;AAED,+BAA+B;AAC/B,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAA;AAqBlC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAe1D"}
+{"version":3,"file":"theme-bridge.d.ts","sourceRoot":"","sources":["../../src/mcp/theme-bridge.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,gEAAgE;AAChE,MAAM,WAAW,iBAAiB;IAChC,oDAAoD;IACpD,MAAM,EAAE,MAAM,CAAA;IACd,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAA;IACb,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,+GAA+G;AAC/G,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CA2BrE,CAAA;AAED,+BAA+B;AAC/B,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAA;AAelC;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAe1D"}

package/dist/mcp/theme-bridge.js

@@ -1,27 +1,8 @@
 /**
- * VS Code theme bridge for the viewer HTML.
- *
- * `prefab.css` resolves every token through a fallback chain: MCP Apps host
- * variable first, then the VS Code webview variable, then a static default.
- * That ordering is right in general, but it means a host which defines the MCP
- * Apps `--color-*` variables shadows the VS Code ones entirely, and the viewer
- * stops following the user's editor theme.
- *
- * This module emits a stylesheet that re-declares the affected tokens with the
- * VS Code variable *first* and the MCP Apps layer dropped, at a specificity and
- * document position that beat each of `prefab.css`'s four token blocks. It is
- * opt-in via `rendererHtml({ themeBridge: 'vscode' })`.
- *
- * The table below is the single source of truth for the mapping.
- * `test/theme-bridge.test.ts` cross-checks every entry against `prefab.css`, so
- * the bridge cannot drift from the base theme it overrides.
- */
-/**
- * prefab tokens that VS Code can supply, with the same variables and static
- * fallbacks `prefab.css` uses. Tokens VS Code has no equivalent for (`--success`,
- * `--warning`, shadows, radii) are deliberately absent: the bridge only overrides
- * what the editor can actually provide.
+ * VS Code theme bridge: re-declares tokens with the `--vscode-*` variable first, so a host's MCP Apps `--color-*`
+ * layer no longer shadows the editor theme. `test/theme-bridge.test.ts` checks the table against `prefab.css`.
  */
+/** prefab tokens VS Code can supply, with `prefab.css`'s own fallbacks; tokens it cannot supply are absent. */
 export const VSCODE_BRIDGE = {
     'background': { vscode: 'vscode-editor-background', light: '#ffffff', dark: '#09090b' },
     'foreground': { vscode: 'vscode-editor-foreground', light: '#09090b', dark: '#fafafa' },
@@ -50,13 +31,7 @@ export const VSCODE_BRIDGE = {
         light: 'ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace',
     },
 };
-/**
- * Runtime whitelist for {@link ThemeBridge}.
- *
- * Kept as a value, not just the union type, so the guard in `themeBridgeCss`
- * still rejects a bad name handed over from untyped JS. A `!==` chain against a
- * single-member union narrows itself away and validates nothing.
- */
+/** Runtime list of {@link ThemeBridge}, so untyped JS callers are validated too. */
 const THEME_BRIDGES = ['vscode'];
 function declarations(scheme, indent) {
     return Object.entries(VSCODE_BRIDGE)
@@ -68,20 +43,8 @@ function declarations(scheme, indent) {
         .join('\n');
 }
 /**
- * Generate the theme-bridge CSS (the contents of a `<style>` element).
- *
- * Mirrors the selectors `prefab.css` uses for *host-driven* tokens, so the
- * override lands in both schemes rather than only in light mode: the `:root`
- * default (alongside `[data-theme="light"]`, whose higher specificity would
- * otherwise win) and the `prefers-color-scheme: dark` media block. Each selector
- * matches its counterpart's specificity and is emitted after `prefab.css`, so it
- * wins on document order.
- *
- * `:root[data-theme="dark"]` is deliberately NOT bridged. That block is
- * prefab's standalone dark palette with static values and no host chain at all,
- * the explicit separation of host theming (which cascades) from the manual theme
- * toggle. Overriding it would make an app that pins `data-theme="dark"` follow
- * the editor instead of its own choice.
+ * The theme-bridge CSS, matching `prefab.css`'s host-driven selectors in both schemes. `[data-theme="dark"]` is
+ * left alone, so an app that pins it keeps its own palette.
  *
  * @example
  * ```ts

package/dist/mcp/theme-bridge.js.map

@@ -1 +1 @@
-{"version":3,"file":"theme-bridge.js","sourceRoot":"","sources":["../../src/mcp/theme-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAYH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAgD;IACxE,YAAY,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACvF,YAAY,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACvF,MAAM,EAAE,EAAE,MAAM,EAAE,gCAAgC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACvF,iBAAiB,EAAE,EAAE,MAAM,EAAE,gCAAgC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IAClG,SAAS,EAAE,EAAE,MAAM,EAAE,qCAAqC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IAC/F,oBAAoB,EAAE,EAAE,MAAM,EAAE,qCAAqC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IAC1G,SAAS,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACpF,oBAAoB,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IAC/F,WAAW,EAAE,EAAE,MAAM,EAAE,mCAAmC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IAC/F,sBAAsB,EAAE,EAAE,MAAM,EAAE,mCAAmC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IAC1G,OAAO,EAAE,EAAE,MAAM,EAAE,gCAAgC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACxF,kBAAkB,EAAE,EAAE,MAAM,EAAE,8BAA8B,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACjG,QAAQ,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACtF,mBAAmB,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACjG,aAAa,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACtF,QAAQ,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IAC9E,OAAO,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACjF,MAAM,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IAC3E,WAAW,EAAE;QACX,MAAM,EAAE,oBAAoB;QAC5B,KAAK,EAAE,uGAAuG;KAC/G;IACD,WAAW,EAAE;QACX,MAAM,EAAE,2BAA2B;QACnC,KAAK,EAAE,oGAAoG;KAC5G;CACF,CAAA;AAKD;;;;;;GAMG;AACH,MAAM,aAAa,GAA2B,CAAC,QAAQ,CAAC,CAAA;AAExD,SAAS,YAAY,CAAC,MAAwB,EAAE,MAAc;IAC5D,OAAO,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;SACjC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC;SACjE,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE;QACpB,MAAM,QAAQ,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAA;QACtE,OAAO,GAAG,MAAM,KAAK,KAAK,WAAW,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAA;IAClE,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAA;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,cAAc,CAAC,MAAmB;IAChD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,UAAU,CAAC,wBAAwB,MAAM,EAAE,CAAC,CAAA;IACxD,CAAC;IAED,OAAO;;EAEP,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC;;;;;EAK3B,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC;;EAE5B,CAAA;AACF,CAAC"}
+{"version":3,"file":"theme-bridge.js","sourceRoot":"","sources":["../../src/mcp/theme-bridge.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAYH,+GAA+G;AAC/G,MAAM,CAAC,MAAM,aAAa,GAAgD;IACxE,YAAY,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACvF,YAAY,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACvF,MAAM,EAAE,EAAE,MAAM,EAAE,gCAAgC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACvF,iBAAiB,EAAE,EAAE,MAAM,EAAE,gCAAgC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IAClG,SAAS,EAAE,EAAE,MAAM,EAAE,qCAAqC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IAC/F,oBAAoB,EAAE,EAAE,MAAM,EAAE,qCAAqC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IAC1G,SAAS,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACpF,oBAAoB,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IAC/F,WAAW,EAAE,EAAE,MAAM,EAAE,mCAAmC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IAC/F,sBAAsB,EAAE,EAAE,MAAM,EAAE,mCAAmC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IAC1G,OAAO,EAAE,EAAE,MAAM,EAAE,gCAAgC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACxF,kBAAkB,EAAE,EAAE,MAAM,EAAE,8BAA8B,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACjG,QAAQ,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACtF,mBAAmB,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACjG,aAAa,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACtF,QAAQ,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IAC9E,OAAO,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACjF,MAAM,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IAC3E,WAAW,EAAE;QACX,MAAM,EAAE,oBAAoB;QAC5B,KAAK,EAAE,uGAAuG;KAC/G;IACD,WAAW,EAAE;QACX,MAAM,EAAE,2BAA2B;QACnC,KAAK,EAAE,oGAAoG;KAC5G;CACF,CAAA;AAKD,oFAAoF;AACpF,MAAM,aAAa,GAA2B,CAAC,QAAQ,CAAC,CAAA;AAExD,SAAS,YAAY,CAAC,MAAwB,EAAE,MAAc;IAC5D,OAAO,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;SACjC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC;SACjE,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE;QACpB,MAAM,QAAQ,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAA;QACtE,OAAO,GAAG,MAAM,KAAK,KAAK,WAAW,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAA;IAClE,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAA;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,MAAmB;IAChD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,UAAU,CAAC,wBAAwB,MAAM,EAAE,CAAC,CAAA;IACxD,CAAC;IAED,OAAO;;EAEP,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC;;;;;EAK3B,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC;;EAE5B,CAAA;AACF,CAAC"}

package/dist/mcp/types.d.ts

@@ -1,26 +1,6 @@
 /**
- * MCP protocol types used by display helpers.
- *
- * These are structurally compatible with the SDK's `CallToolResult` and
- * `ReadResourceResult` — prefab helpers can be returned directly from SDK
- * handlers without casting.
- *
- * **Every shape here is a `type` alias, not an `interface`, and that is a
- * correctness requirement rather than a style choice.** The SDK's result types
- * are passthrough (`{ [x: string]: unknown }`), and TypeScript grants an
- * *implicit index signature* only to aliases of object types — never to
- * interfaces, whose key set is not final because declaration merging can reopen
- * them. An interface here therefore fails the one thing these types exist for:
- *
- *     Type 'McpResourceReadResult<…>' is not assignable to type '{ [x: string]: unknown; … }'.
- *       Index signature for type 'string' is missing in type 'McpResourceReadResult<…>'.
- *
- * `eslint.config.ts` flips `consistent-type-definitions` to `'type'` for this
- * file so the linter enforces that instead of fighting it, and
- * `test/mcp-types.test.ts` guards the assignability itself.
- *
- * @see https://github.com/microsoft/TypeScript/issues/15300
- * @see https://spec.modelcontextprotocol.io/specification/server/tools/
+ * MCP result types assignable to the SDK's without a cast. All are `type` aliases on purpose: only aliases get the implicit
+ * index signature the SDK's passthrough types require (TypeScript#15300); `test/mcp-types.test.ts` guards it.
  */
 /** MCP text content block (compatible with SDK's TextContent) */
 export type McpTextContent = {
@@ -37,24 +17,14 @@ export type McpImageContent = {
     annotations?: Record<string, unknown>;
     _meta?: Record<string, unknown>;
 };
-/**
- * Text resource contents (has `text`, never `blob`).
- *
- * Declared as a type alias, not an interface, and the difference is load-bearing.
- * The SDK's resource types are passthrough (`{ [x: string]: unknown }`), and
- * TypeScript grants an *implicit index signature* only to type aliases of object
- * types — never to interfaces, since an interface can be reopened by declaration
- * merging and so its key set is not final. Declaring this as an interface makes
- * it fail to satisfy the SDK's shape with "Index signature for type 'string' is
- * missing", which a consumer can only work around by casting.
- */
+/** Text resource contents (has `text`, never `blob`). */
 export type McpTextResourceContents = {
     uri: string;
     mimeType?: string;
     text: string;
     _meta?: Record<string, unknown>;
 };
-/** Blob resource contents (has `blob`, never `text`). See {@link McpTextResourceContents} on the alias. */
+/** Blob resource contents (has `blob`, never `text`). */
 export type McpBlobResourceContents = {
     uri: string;
     mimeType?: string;
@@ -70,22 +40,7 @@ export type McpResourceContent = {
 };
 /** Any MCP content block */
 export type McpContent = McpTextContent | McpImageContent | McpResourceContent;
-/**
- * MCP tool result — returned from tool handlers.
- *
- * Structurally assignable to the SDK's `CallToolResult`. The index signature
- * allows the SDK's `Result` base interface to be satisfied without a cast.
- *
- * `structuredContent` is generic rather than `Record<string, unknown>`: protocol
- * revision 2026-07-28 loosened it to any JSON value (SEP-2106), and keeping the
- * payload type lets callers read it back without casting.
- *
- * The wire discriminator `resultType` (SEP-2322) is intentionally absent. The
- * SDK's protocol layer stamps it on encode and strips it before results reach
- * consumers, so handlers do not author it for ordinary complete results. The
- * index signature still admits `resultType: 'input_required'` for the one case
- * a handler does own — multi-round-trip interim results.
- */
+/** A tool result assignable to the SDK's `CallToolResult`; `structuredContent` keeps its payload type (any JSON since SEP-2106). */
 export type McpToolResult<S = unknown> = {
     content: McpContent[];
     /** Structured payload forwarded to MCP Apps iframes via ui/notifications/tool-result. */
@@ -94,54 +49,20 @@ export type McpToolResult<S = unknown> = {
     _meta?: Record<string, unknown>;
     [key: string]: unknown;
 };
-/**
- * A tool result whose `structuredContent` is guaranteed present.
- *
- * `McpToolResult.structuredContent` is optional because a hand-written result
- * may legitimately omit it. Every prefab display helper populates it, and
- * saying so in the return type spares callers a null check on a field that is
- * never absent — reading `result.structuredContent.view` should not need one.
- *
- * Assignable to `McpToolResult<S>` in every position, so widening a helper's
- * return type to this breaks nothing.
- */
+/** A tool result whose `structuredContent` is always present, as every prefab display helper returns. */
 export type McpDisplayResult<S> = McpToolResult<S> & {
     structuredContent: S;
 };
-/**
- * Cache scopes defined for cacheable results.
- *
- * `public` — the result may be stored by shared caches.
- * `private` — only the requesting client may cache it.
- */
+/** `public`: shared caches may store the result; `private`: only the requesting client may. */
 export type McpCacheScope = 'public' | 'private';
-/**
- * Cache fields required on results from the cacheable operations
- * (`tools/list`, `prompts/list`, `resources/list`, `resources/templates/list`,
- * `resources/read`, `server/discover`).
- *
- * Values a handler returns on the result take precedence over any hint
- * configured on the server; when neither is present the SDK falls back to the
- * conservative `{ ttlMs: 0, cacheScope: 'private' }` — i.e. no caching.
- */
+/** Cache fields of cacheable results (SEP-2549). The result's own values beat a server hint; with neither, nothing is cached. */
 export type McpCacheHint = {
     /** Cache lifetime in milliseconds. Must be a non-negative safe integer. */
     ttlMs?: number;
     /** Whether shared caches may store the result. */
     cacheScope?: McpCacheScope;
 };
-/**
- * A `resources/read` result carrying the required cache fields.
- *
- * Generic over the contents kind so a handler that only ever returns text (the
- * prefab viewer, for one) does not force callers to narrow the union.
- *
- * A type alias rather than an interface, so it satisfies the SDK's passthrough
- * `ReadResourceResult` (`{ [x: string]: unknown }`) without a cast. See
- * {@link McpTextResourceContents} for why the distinction matters — returning
- * this straight from an SDK read handler is the whole point of the type, and as
- * an interface it did not typecheck there.
- */
+/** A `resources/read` result with its required cache fields, generic over the contents kind. */
 export type McpResourceReadResult<C extends McpTextResourceContents | McpBlobResourceContents = McpTextResourceContents | McpBlobResourceContents> = {
     contents: C[];
     /** Cache lifetime in milliseconds. */
@@ -149,16 +70,7 @@ export type McpResourceReadResult<C extends McpTextResourceContents | McpBlobRes
     /** Whether shared caches may store the result. */
     cacheScope: McpCacheScope;
 };
-/**
- * The restricted JSON Schema an elicitation may request.
- *
- * Protocol revision 2026-07-28 replaced server-initiated `elicitation/create`
- * pushes with Multi Round-Trip Requests: a handler *returns* an
- * {@link McpInputRequiredResult}, the client answers the embedded requests and
- * retries the original call. The schema is deliberately flat — top-level
- * primitive properties only, no nesting — because it has to render as a form in
- * hosts that have no UI surface of their own.
- */
+/** A flat elicitation property schema, for {@link McpInputRequiredResult} (Multi Round-Trip, revision 2026-07-28). */
 export type McpStringSchema = {
     type: 'string';
     title?: string;
@@ -237,14 +149,7 @@ export type McpElicitResult = {
     content?: Record<string, string | number | boolean | string[]>;
 };
 export type McpInputResponses = Record<string, McpElicitResult>;
-/**
- * A result asking the client for input before the call can complete.
- *
- * At least one of `inputRequests` or `requestState` must be present, and
- * `resultType` must be `'input_required'`: a server on this revision always
- * stamps the discriminator, and a client that does not see it treats the result
- * as `'complete'` and never retries.
- */
+/** A result asking for input before the call completes; carries `inputRequests`, `requestState` or both. */
 export type McpInputRequiredResult = {
     resultType: 'input_required';
     inputRequests?: McpInputRequests;