@mcp-native/a2ui 0.0.3 → 0.2.0

package/README.md

@@ -8,13 +8,13 @@
 [![downloads](https://img.shields.io/npm/dm/@mcp-native/a2ui)](https://www.npmjs.com/package/@mcp-native/a2ui)
 [![license](https://img.shields.io/npm/l/@mcp-native/a2ui)](https://github.com/pablospaniard/mcp-native/blob/main/LICENSE)
 
-[GitHub](https://github.com/pablospaniard/mcp-native) · [Architecture](https://github.com/pablospaniard/mcp-native/blob/main/docs/RFC-0001-architecture.md) · [Security](https://github.com/pablospaniard/mcp-native/blob/main/SECURITY.md)
+[GitHub](https://github.com/pablospaniard/mcp-native) · [Architecture](https://github.com/pablospaniard/mcp-native/blob/main/docs/RFC-0001-architecture.md) · [Standards status](https://github.com/pablospaniard/mcp-native/blob/main/docs/standards-compatibility.md) · [Security](https://github.com/pablospaniard/mcp-native/blob/main/SECURITY.md)
 
 </div>
 
-> **Experimental:** this package implements MCP Native's deliberately small `0.1` proof-of-concept surface. It is not a claim of complete A2UI specification compatibility.
+> **Experimental:** this package implements MCP Native's deliberately small internal `0.1` proof-of-concept surface. `0.1` is not an A2UI protocol version, and this package does not currently claim A2UI v1.0 compatibility.
 
-`@mcp-native/a2ui` parses untrusted JSON or JavaScript values into a validated, typed surface before a host renders anything. Unknown versions, node types, action types, and invalid JSON values fail closed with an `A2uiParseError`.
+`@mcp-native/a2ui` resolves explicitly typed resource links and parses untrusted JSON or JavaScript values into a validated, typed surface before a host renders anything. Unknown or ambiguous resources fail with `A2uiResourceError`; unknown versions, node types, action types, non-plain objects, oversized trees, and invalid JSON values fail with `A2uiParseError`. Surfaces are capped at `A2UI_MAX_DEPTH` (32) and `A2UI_MAX_NODES` (256).
 
 ## Install
 
@@ -65,6 +65,81 @@ const surface = parseA2uiSurface(
 );
 ```
 
+## Resolve a tool-result resource
+
+An MCP tool may return a `resource_link` for a declarative surface. Pass the connected runtime or any `A2uiResourceReader` to the resolver:
+
+```ts
+import { resolveA2uiResourceFromToolResult } from "@mcp-native/a2ui";
+
+const toolResult = await runtime.callTool("open_profile");
+const resolved = await resolveA2uiResourceFromToolResult(runtime, toolResult);
+
+console.log(resolved.uri);
+console.log(resolved.surface.root);
+```
+
+Resolution succeeds only when:
+
+1. the tool result is not marked as an error;
+2. it contains exactly one `resource_link` with MIME type `application/a2ui+json`;
+3. `resources/read` returns exactly one item with the same URI and MIME type;
+4. that item contains text, not a blob;
+5. the text passes `parseA2uiSurface`.
+
+Other tool content and non-A2UI resource links may coexist with the surface link. MCP Native never guesses a MIME type or chooses between multiple matching surfaces.
+
+The prototype's `application/a2ui+json` resource convention comes from earlier A2UI-over-MCP work. The [A2UI v1.0 Candidate protocol](https://github.com/a2ui-project/a2ui/blob/7541f953050cd58b80f0bf5d85fe2d63192af305/specification/v1_0/docs/a2ui_protocol.md) is transport-agnostic and uses a stream of `v1.0` envelopes. Recognizing this media type does not establish v1.0 conformance.
+
+The official v1.0 surface-store state now has a strict static adapter into the internal trusted render plan. This does not evolve the custom `0.1` object into a competing wire protocol. See the [compatibility matrix and conformance roadmap](https://github.com/pablospaniard/mcp-native/blob/main/docs/standards-compatibility.md).
+
+## A2UI-over-MCP capability binding
+
+The package exports an experimental project-owned binding under `io.github.pablospaniard/mcp-native-a2ui`. It is enabled only when both peers advertise the exact binding version, A2UI Candidate revision, JSONL resource transport, and MIME type:
+
+```ts
+import { A2UI_MCP_EXTENSION_CAPABILITIES, negotiateA2uiMcpBinding } from "@mcp-native/a2ui";
+
+const result = negotiateA2uiMcpBinding(
+  adapter.getClientExtensionSettings(),
+  adapter.getServerExtensionSettings(),
+);
+```
+
+A fallback result means the host uses ordinary MCP text or structured data. A resource link, MIME type, or `_meta` value never activates the binding by itself. The exact capability exchange, ordered `resource-text-jsonl` mapping, and failure behavior are documented in the [project binding contract](https://github.com/pablospaniard/mcp-native/blob/main/docs/a2ui-mcp-binding.md).
+
+## Official v1.0 envelopes and surface store
+
+After mutual negotiation, hosts can resolve a JSONL resource and apply lifecycle envelopes:
+
+```ts
+import {
+  A2UI_MCP_EXTENSION_CAPABILITIES,
+  A2uiSurfaceStore,
+  createA2uiV1BasicCatalogPolicy,
+  negotiateA2uiMcpBinding,
+  resolveA2uiV1JsonlFromToolResult,
+} from "@mcp-native/a2ui";
+
+const binding = negotiateA2uiMcpBinding(
+  A2UI_MCP_EXTENSION_CAPABILITIES,
+  adapter.getServerExtensionSettings(),
+);
+const { envelopes } = await resolveA2uiV1JsonlFromToolResult(runtime, toolResult, binding);
+const store = new A2uiSurfaceStore();
+store.applyAll(envelopes);
+
+const surface = store.getValidated(
+  "surface-id",
+  createA2uiV1BasicCatalogPolicy({
+    allowedComponentNames: ["Column", "Text", "Button"],
+    allowedEventNames: ["continue"],
+  }),
+);
+```
+
+Only `createSurface`, `updateComponents`, `updateDataModel`, and `deleteSurface` envelopes are accepted in this milestone. Raw store snapshots may be incomplete while ordered updates arrive. The store bounds retained surfaces and components; `getValidated` is the required pre-render boundary for the pinned basic catalog, explicit host component/event/function allowlists, reachable child references and cycles, template-aware binding paths, and component placement rules. The React Native package adapts the supported static subset after revalidation. Function-call envelopes, dynamic templates, mounted v1 interactions, and renderer-to-agent messages remain deferred. The custom `0.1` resolver is unchanged and never receives a failed v1 stream.
+
 ## Supported surface
 
 | Node         | Required fields         | Purpose                                                |
@@ -78,25 +153,47 @@ The only supported action is `{ type: "tool", name, arguments? }`. Arguments mus
 
 ## Public API
 
-| Export                    | Purpose                                              |
-| ------------------------- | ---------------------------------------------------- |
-| `parseA2uiSurface`        | Validates input and returns a typed `A2uiSurface`.   |
-| `A2uiParseError`          | Error thrown for malformed or unsupported input.     |
-| `A2UI_VERSION`            | Current proof-of-concept wire version, `"0.1"`.      |
-| `A2uiSurface`, `A2uiNode` | Validated surface and node unions.                   |
-| Node interfaces           | Typed container, text, button, and text-input nodes. |
+| Export                                                                                                    | Purpose                                                          |
+| --------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------- |
+| `resolveA2uiResourceFromToolResult`                                                                       | Reads and parses the single explicit A2UI link in a tool result. |
+| `parseA2uiSurface`                                                                                        | Validates input and returns a typed `A2uiSurface`.               |
+| `A2uiResourceError`, `A2uiParseError`                                                                     | Specific resolution and parsing failures.                        |
+| `A2UI_MIME_TYPE`, `A2UI_VERSION`                                                                          | Exact media type and current proof-of-concept version.           |
+| `A2UI_MAX_DEPTH`, `A2UI_MAX_NODES`                                                                        | Container-tree complexity limits.                                |
+| `A2UI_MAX_SOURCE_LENGTH`, `A2UI_MAX_STRING_LENGTH`                                                        | Serialized-input and string-field limits.                        |
+| `A2UI_MCP_EXTENSION_ID`, `A2UI_MCP_EXTENSION_CAPABILITIES`                                                | Exact project-owned extension declaration.                       |
+| `negotiateA2uiMcpBinding`, `A2uiMcpBindingNegotiation`, `A2uiMcpBindingGrant`                             | Exact-match negotiation with typed fallback reasons.             |
+| `A2UI_MCP_BINDING_VERSION`, `A2UI_MCP_PROTOCOL_VERSION`, `A2UI_MCP_SCHEMA_REVISION`, `A2UI_MCP_TRANSPORT` | Pinned binding and Candidate transport values.                   |
+| `parseA2uiV1Envelope`, `parseA2uiV1Jsonl`                                                                 | Schema-validate v1 lifecycle envelopes and JSONL batches.        |
+| `A2uiSurfaceStore`                                                                                        | Ordered lifecycle state plus policy-gated `getValidated`.        |
+| `createA2uiV1BasicCatalogPolicy`, `A2uiV1SurfaceValidationPolicy`                                         | Explicit host allowlists for components, events, and functions.  |
+| `validateA2uiV1SurfaceState`                                                                              | Revalidate a complete snapshot at another public trust boundary. |
+| `A2UI_V1_BASIC_CATALOG_ID`, catalog name constants                                                        | Exact pinned catalog identity and selectable host capabilities.  |
+| `resolveA2uiV1JsonlFromToolResult`, `ResolvedA2uiV1JsonlResource`                                         | Resolve a JSONL A2UI resource without using the `0.1` parser.    |
+| `A2UI_V1_PROTOCOL_VERSION`, `A2UI_V1_MAX_SOURCE_LENGTH`, `A2UI_V1_MAX_ENVELOPES`, store limit constants   | v1 protocol and complexity limits.                               |
+| `ResolvedA2uiResource`                                                                                    | URI, MIME type, and validated surface returned by the resolver.  |
+| `A2uiSurface`, `A2uiNode`                                                                                 | Validated surface and node unions.                               |
+| Node interfaces                                                                                           | Typed container, text, button, and text-input nodes.             |
 
 ## Security behavior
 
 - Input is treated as untrusted at the parser boundary.
-- Unknown surface versions, nodes, and actions are rejected.
-- Tool arguments are recursively constrained to JSON values.
+- Resolution requires an exact MIME type, URI match, and unambiguous text content.
+- Errored tool results and binary A2UI resources are rejected.
+- Unknown surface versions, node types, action types, and undeclared fields are rejected.
+- Serialized surfaces, string fields, and tool-argument JSON graphs have fixed complexity limits.
+- Tool arguments are recursively constrained to finite, acyclic JSON values in plain objects.
+- JSON keys such as `__proto__` are preserved as ordinary own data properties without changing object prototypes.
 - Parsing never resolves components or executes server-provided code.
+- Renderer-ready v1 snapshots require a complete acyclic root-reachable graph and explicit host allowlists.
+- Relative bindings and `@index` are accepted only inside dynamic-list template context.
+- Catalog functions and agent events are denied unless named by host policy.
+- `formatString` is accepted only when explicitly allowlisted and its `value` is a literal string. Its interpolation language is parsed with depth, expression-count, and cumulative-source limits; every embedded binding and named function call is validated against template scope, the host allowlist, and the pinned catalog schema. Runtime-provided format sources are rejected because their interpolations cannot be inspected before rendering. This validation does not execute renderer functions.
 - Successful parsing does not grant device capabilities or permission to call a tool; the host still owns those decisions.
 
 ## Next layer
 
-Use [`@mcp-native/react-native`](https://www.npmjs.com/package/@mcp-native/react-native) to convert a validated surface into a trusted native render plan, or install [`mcp-native`](https://www.npmjs.com/package/mcp-native) for the complete public API.
+Use [`@mcp-native/react-native`](https://www.npmjs.com/package/@mcp-native/react-native) to adapt the supported static v1 subset or the custom `0.1` surface into a trusted native render plan. Install [`mcp-native`](https://www.npmjs.com/package/mcp-native) for the combined runtime and UI APIs.
 
 ## License
 

package/dist/binding.d.ts

@@ -0,0 +1,33 @@
+import type { McpExtensionSettings } from "@mcp-native/core";
+import { A2UI_MIME_TYPE } from "./mime.js";
+import { A2UI_MCP_SCHEMA_REVISION } from "./schema-revision.js";
+/** Project-owned MCP binding for carrying ordered official A2UI messages. */
+export declare const A2UI_MCP_EXTENSION_ID: "io.github.pablospaniard/mcp-native-a2ui";
+export declare const A2UI_MCP_BINDING_VERSION: "0.1";
+export declare const A2UI_MCP_PROTOCOL_VERSION: "v1.0";
+export declare const A2UI_MCP_TRANSPORT: "resource-text-jsonl";
+/** Reuse this exact map for SDK advertisement and local negotiation. */
+export declare const A2UI_MCP_EXTENSION_CAPABILITIES: McpExtensionSettings;
+export type A2uiMcpBindingNegotiation = {
+    readonly kind: "fallback";
+    readonly identifier: typeof A2UI_MCP_EXTENSION_ID;
+    readonly reason: "client-unsupported" | "server-unsupported" | "incompatible-settings";
+} | {
+    readonly kind: "negotiated";
+    readonly identifier: typeof A2UI_MCP_EXTENSION_ID;
+    readonly bindingVersion: typeof A2UI_MCP_BINDING_VERSION;
+    readonly protocolVersion: typeof A2UI_MCP_PROTOCOL_VERSION;
+    readonly schemaRevision: typeof A2UI_MCP_SCHEMA_REVISION;
+    readonly transport: typeof A2UI_MCP_TRANSPORT;
+    readonly mimeType: typeof A2UI_MIME_TYPE;
+};
+export type A2uiMcpBindingGrant = Extract<A2uiMcpBindingNegotiation, {
+    kind: "negotiated";
+}>;
+/**
+ * Enables the project A2UI binding only for an exact, mutual settings match.
+ * A fallback result means callers must use ordinary MCP text/structured data.
+ */
+export declare function negotiateA2uiMcpBinding(clientExtensions: unknown, serverExtensions: unknown): A2uiMcpBindingNegotiation;
+export declare function isA2uiMcpBindingGrant(value: unknown): value is A2uiMcpBindingGrant;
+//# sourceMappingURL=binding.d.ts.map

package/dist/binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.d.ts","sourceRoot":"","sources":["../src/binding.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAc,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAEzE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,6EAA6E;AAC7E,eAAO,MAAM,qBAAqB,EAAG,yCAAkD,CAAC;AACxF,eAAO,MAAM,wBAAwB,EAAG,KAAc,CAAC;AACvD,eAAO,MAAM,yBAAyB,EAAG,MAAe,CAAC;AACzD,eAAO,MAAM,kBAAkB,EAAG,qBAA8B,CAAC;AAoBjE,wEAAwE;AACxE,eAAO,MAAM,+BAA+B,EAAE,oBAE5C,CAAC;AAEH,MAAM,MAAM,yBAAyB,GACjC;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,OAAO,qBAAqB,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE,oBAAoB,GAAG,oBAAoB,GAAG,uBAAuB,CAAC;CACxF,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,qBAAqB,CAAC;IAClD,QAAQ,CAAC,cAAc,EAAE,OAAO,wBAAwB,CAAC;IACzD,QAAQ,CAAC,eAAe,EAAE,OAAO,yBAAyB,CAAC;IAC3D,QAAQ,CAAC,cAAc,EAAE,OAAO,wBAAwB,CAAC;IACzD,QAAQ,CAAC,SAAS,EAAE,OAAO,kBAAkB,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,OAAO,cAAc,CAAC;CAC1C,CAAC;AAEN,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC,yBAAyB,EAAE;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC,CAAC;AAE7F;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,gBAAgB,EAAE,OAAO,EACzB,gBAAgB,EAAE,OAAO,GACxB,yBAAyB,CAgC3B;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAgBlF"}

package/dist/binding.js

@@ -0,0 +1,83 @@
+import { negotiateMcpExtension } from "@mcp-native/core";
+import { A2UI_MIME_TYPE } from "./mime.js";
+import { A2UI_MCP_SCHEMA_REVISION } from "./schema-revision.js";
+/** Project-owned MCP binding for carrying ordered official A2UI messages. */
+export const A2UI_MCP_EXTENSION_ID = "io.github.pablospaniard/mcp-native-a2ui";
+export const A2UI_MCP_BINDING_VERSION = "0.1";
+export const A2UI_MCP_PROTOCOL_VERSION = "v1.0";
+export const A2UI_MCP_TRANSPORT = "resource-text-jsonl";
+const a2uiMcpSettings = Object.freeze({
+    bindingVersion: A2UI_MCP_BINDING_VERSION,
+    protocolVersion: A2UI_MCP_PROTOCOL_VERSION,
+    schemaRevision: A2UI_MCP_SCHEMA_REVISION,
+    transport: A2UI_MCP_TRANSPORT,
+    mimeType: A2UI_MIME_TYPE,
+});
+const A2UI_MCP_BINDING_GRANT_KEYS = [
+    "kind",
+    "identifier",
+    "bindingVersion",
+    "protocolVersion",
+    "schemaRevision",
+    "transport",
+    "mimeType",
+];
+/** Reuse this exact map for SDK advertisement and local negotiation. */
+export const A2UI_MCP_EXTENSION_CAPABILITIES = Object.freeze({
+    [A2UI_MCP_EXTENSION_ID]: a2uiMcpSettings,
+});
+/**
+ * Enables the project A2UI binding only for an exact, mutual settings match.
+ * A fallback result means callers must use ordinary MCP text/structured data.
+ */
+export function negotiateA2uiMcpBinding(clientExtensions, serverExtensions) {
+    const negotiation = negotiateMcpExtension(A2UI_MCP_EXTENSION_ID, clientExtensions, serverExtensions);
+    if (negotiation.kind === "fallback") {
+        return {
+            kind: "fallback",
+            identifier: A2UI_MCP_EXTENSION_ID,
+            reason: negotiation.reason,
+        };
+    }
+    if (!matchesA2uiMcpSettings(negotiation.clientSettings) ||
+        !matchesA2uiMcpSettings(negotiation.serverSettings)) {
+        return {
+            kind: "fallback",
+            identifier: A2UI_MCP_EXTENSION_ID,
+            reason: "incompatible-settings",
+        };
+    }
+    return {
+        kind: "negotiated",
+        identifier: A2UI_MCP_EXTENSION_ID,
+        bindingVersion: A2UI_MCP_BINDING_VERSION,
+        protocolVersion: A2UI_MCP_PROTOCOL_VERSION,
+        schemaRevision: A2UI_MCP_SCHEMA_REVISION,
+        transport: A2UI_MCP_TRANSPORT,
+        mimeType: A2UI_MIME_TYPE,
+    };
+}
+export function isA2uiMcpBindingGrant(value) {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        return false;
+    }
+    const grant = value;
+    return (Object.keys(grant).length === A2UI_MCP_BINDING_GRANT_KEYS.length &&
+        A2UI_MCP_BINDING_GRANT_KEYS.every((key) => Object.hasOwn(grant, key)) &&
+        grant.kind === "negotiated" &&
+        grant.identifier === A2UI_MCP_EXTENSION_ID &&
+        grant.bindingVersion === A2UI_MCP_BINDING_VERSION &&
+        grant.protocolVersion === A2UI_MCP_PROTOCOL_VERSION &&
+        grant.schemaRevision === A2UI_MCP_SCHEMA_REVISION &&
+        grant.transport === A2UI_MCP_TRANSPORT &&
+        grant.mimeType === A2UI_MIME_TYPE);
+}
+function matchesA2uiMcpSettings(settings) {
+    return (Object.keys(settings).length === 5 &&
+        settings.bindingVersion === A2UI_MCP_BINDING_VERSION &&
+        settings.protocolVersion === A2UI_MCP_PROTOCOL_VERSION &&
+        settings.schemaRevision === A2UI_MCP_SCHEMA_REVISION &&
+        settings.transport === A2UI_MCP_TRANSPORT &&
+        settings.mimeType === A2UI_MIME_TYPE);
+}
+//# sourceMappingURL=binding.js.map

package/dist/binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.js","sourceRoot":"","sources":["../src/binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAGzD,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,6EAA6E;AAC7E,MAAM,CAAC,MAAM,qBAAqB,GAAG,yCAAkD,CAAC;AACxF,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAc,CAAC;AACvD,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAe,CAAC;AACzD,MAAM,CAAC,MAAM,kBAAkB,GAAG,qBAA8B,CAAC;AAEjE,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IACpC,cAAc,EAAE,wBAAwB;IACxC,eAAe,EAAE,yBAAyB;IAC1C,cAAc,EAAE,wBAAwB;IACxC,SAAS,EAAE,kBAAkB;IAC7B,QAAQ,EAAE,cAAc;CACzB,CAAsB,CAAC;AAExB,MAAM,2BAA2B,GAAG;IAClC,MAAM;IACN,YAAY;IACZ,gBAAgB;IAChB,iBAAiB;IACjB,gBAAgB;IAChB,WAAW;IACX,UAAU;CACF,CAAC;AAEX,wEAAwE;AACxE,MAAM,CAAC,MAAM,+BAA+B,GAAyB,MAAM,CAAC,MAAM,CAAC;IACjF,CAAC,qBAAqB,CAAC,EAAE,eAAe;CACzC,CAAC,CAAC;AAoBH;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,gBAAyB,EACzB,gBAAyB;IAEzB,MAAM,WAAW,GAAG,qBAAqB,CACvC,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,CACjB,CAAC;IACF,IAAI,WAAW,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACpC,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,qBAAqB;YACjC,MAAM,EAAE,WAAW,CAAC,MAAM;SAC3B,CAAC;IACJ,CAAC;IACD,IACE,CAAC,sBAAsB,CAAC,WAAW,CAAC,cAAc,CAAC;QACnD,CAAC,sBAAsB,CAAC,WAAW,CAAC,cAAc,CAAC,EACnD,CAAC;QACD,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,qBAAqB;YACjC,MAAM,EAAE,uBAAuB;SAChC,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,qBAAqB;QACjC,cAAc,EAAE,wBAAwB;QACxC,eAAe,EAAE,yBAAyB;QAC1C,cAAc,EAAE,wBAAwB;QACxC,SAAS,EAAE,kBAAkB;QAC7B,QAAQ,EAAE,cAAc;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,OAAO,CACL,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,2BAA2B,CAAC,MAAM;QAChE,2BAA2B,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACrE,KAAK,CAAC,IAAI,KAAK,YAAY;QAC3B,KAAK,CAAC,UAAU,KAAK,qBAAqB;QAC1C,KAAK,CAAC,cAAc,KAAK,wBAAwB;QACjD,KAAK,CAAC,eAAe,KAAK,yBAAyB;QACnD,KAAK,CAAC,cAAc,KAAK,wBAAwB;QACjD,KAAK,CAAC,SAAS,KAAK,kBAAkB;QACtC,KAAK,CAAC,QAAQ,KAAK,cAAc,CAClC,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAoB;IAClD,OAAO,CACL,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC;QAClC,QAAQ,CAAC,cAAc,KAAK,wBAAwB;QACpD,QAAQ,CAAC,eAAe,KAAK,yBAAyB;QACtD,QAAQ,CAAC,cAAc,KAAK,wBAAwB;QACpD,QAAQ,CAAC,SAAS,KAAK,kBAAkB;QACzC,QAAQ,CAAC,QAAQ,KAAK,cAAc,CACrC,CAAC;AACJ,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,7 @@
+export declare class A2uiParseError extends Error {
+    constructor(message: string, options?: ErrorOptions);
+}
+export declare class A2uiResourceError extends Error {
+    constructor(message: string, options?: ErrorOptions);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,EAGlD;CACF;AAED,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,EAGlD;CACF"}

package/dist/errors.js

@@ -0,0 +1,13 @@
+export class A2uiParseError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = "A2uiParseError";
+    }
+}
+export class A2uiResourceError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = "A2uiResourceError";
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe,EAAE,OAAsB;QACjD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe,EAAE,OAAsB;QACjD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF"}

package/dist/index.d.ts

@@ -1,5 +1,21 @@
-import type { ToolAction } from "@mcp-native/core";
+import type { McpToolCallResult, ToolAction } from "@mcp-native/core";
+import { A2UI_MIME_TYPE, type A2uiResourceReader } from "./mime.js";
+export { A2uiParseError, A2uiResourceError } from "./errors.js";
+export { A2UI_MIME_TYPE, type A2uiResourceReader } from "./mime.js";
+export { A2UI_MCP_SCHEMA_REVISION } from "./schema-revision.js";
+export { A2UI_MCP_BINDING_VERSION, A2UI_MCP_EXTENSION_CAPABILITIES, A2UI_MCP_EXTENSION_ID, A2UI_MCP_PROTOCOL_VERSION, A2UI_MCP_TRANSPORT, isA2uiMcpBindingGrant, negotiateA2uiMcpBinding, } from "./binding.js";
+export type { A2uiMcpBindingGrant, A2uiMcpBindingNegotiation } from "./binding.js";
+export { A2UI_V1_MAX_ENVELOPES, A2UI_V1_MAX_SOURCE_LENGTH, A2UI_V1_PROTOCOL_VERSION, A2UI_V1_BASIC_CATALOG_ID, A2UI_V1_BASIC_COMPONENT_NAMES, A2UI_V1_BASIC_FUNCTION_NAMES, A2UI_V1_SYSTEM_FUNCTION_NAMES, A2UI_V1_MAX_COMPONENTS, A2UI_V1_MAX_SURFACES, A2uiSurfaceStore, createA2uiV1BasicCatalogPolicy, parseA2uiV1Envelope, parseA2uiV1Jsonl, resolveA2uiV1JsonlFromToolResult, validateA2uiV1SurfaceState, } from "./v1/index.js";
+export type { A2uiV1BasicCatalogPolicyOptions, A2uiV1Component, A2uiV1CreateSurfaceEnvelope, A2uiV1DeleteSurfaceEnvelope, A2uiV1Envelope, A2uiV1EnvelopeKind, A2uiV1SurfaceState, A2uiV1SurfaceValidationPolicy, A2uiV1UpdateComponentsEnvelope, A2uiV1UpdateDataModelEnvelope, ResolvedA2uiV1JsonlResource, } from "./v1/index.js";
 export declare const A2UI_VERSION: "0.1";
+/** Maximum nesting depth for container trees (root is depth 0). */
+export declare const A2UI_MAX_DEPTH = 32;
+/** Maximum number of nodes allowed in a single surface. */
+export declare const A2UI_MAX_NODES = 256;
+/** Maximum UTF-16 code units accepted in a serialized surface. */
+export declare const A2UI_MAX_SOURCE_LENGTH = 1048576;
+/** Maximum UTF-16 code units accepted in one surface string field. */
+export declare const A2UI_MAX_STRING_LENGTH = 65536;
 interface A2uiNodeBase {
     readonly id: string;
 }
@@ -27,9 +43,15 @@ export interface A2uiSurface {
     readonly version: typeof A2UI_VERSION;
     readonly root: A2uiNode;
 }
-export declare class A2uiParseError extends Error {
-    constructor(message: string);
+export interface ResolvedA2uiResource {
+    readonly uri: string;
+    readonly mimeType: typeof A2UI_MIME_TYPE;
+    readonly surface: A2uiSurface;
 }
+/**
+ * Resolves the single explicitly typed A2UI resource link in a successful
+ * tool result, reads it through the host client, and validates its surface.
+ */
+export declare function resolveA2uiResourceFromToolResult(reader: A2uiResourceReader, toolResult: McpToolCallResult): Promise<ResolvedA2uiResource>;
 export declare function parseA2uiSurface(input: string | unknown): A2uiSurface;
-export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAyB,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE1E,eAAO,MAAM,YAAY,EAAG,KAAc,CAAC;AAE3C,UAAU,YAAY;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAkB,SAAQ,YAAY;IACrD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,QAAQ,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAe,SAAQ,YAAY;IAClD,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAkB,SAAQ,YAAY;IACrD,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,QAAQ,GAAG,cAAc,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,YAAY,CAAC;AAE7F,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,YAAY,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;CACzB;AAED,qBAAa,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,WAAW,CAsBrE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAGV,iBAAiB,EACjB,UAAU,EACX,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EACL,wBAAwB,EACxB,+BAA+B,EAC/B,qBAAqB,EACrB,yBAAyB,EACzB,kBAAkB,EAClB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACnF,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,6BAA6B,EAC7B,4BAA4B,EAC5B,6BAA6B,EAC7B,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EAChB,8BAA8B,EAC9B,mBAAmB,EACnB,gBAAgB,EAChB,gCAAgC,EAChC,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,+BAA+B,EAC/B,eAAe,EACf,2BAA2B,EAC3B,2BAA2B,EAC3B,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,6BAA6B,EAC7B,8BAA8B,EAC9B,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,YAAY,EAAG,KAAc,CAAC;AAE3C,mEAAmE;AACnE,eAAO,MAAM,cAAc,KAAK,CAAC;AACjC,2DAA2D;AAC3D,eAAO,MAAM,cAAc,MAAM,CAAC;AAClC,kEAAkE;AAClE,eAAO,MAAM,sBAAsB,UAAY,CAAC;AAChD,sEAAsE;AACtE,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAE7C,UAAU,YAAY;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAkB,SAAQ,YAAY;IACrD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,QAAQ,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAe,SAAQ,YAAY;IAClD,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAkB,SAAQ,YAAY;IACrD,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,QAAQ,GAAG,cAAc,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,YAAY,CAAC;AAE7F,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,YAAY,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,OAAO,cAAc,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAsB,iCAAiC,CACrD,MAAM,EAAE,kBAAkB,EAC1B,UAAU,EAAE,iBAAiB,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CAuC/B;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,WAAW,CA2BrE"}

package/dist/index.js

@@ -1,13 +1,57 @@
+import { parseMcpNativeAction } from "@mcp-native/core";
+import { A2uiParseError, A2uiResourceError } from "./errors.js";
+import { A2UI_MIME_TYPE } from "./mime.js";
+export { A2uiParseError, A2uiResourceError } from "./errors.js";
+export { A2UI_MIME_TYPE } from "./mime.js";
+export { A2UI_MCP_SCHEMA_REVISION } from "./schema-revision.js";
+export { A2UI_MCP_BINDING_VERSION, A2UI_MCP_EXTENSION_CAPABILITIES, A2UI_MCP_EXTENSION_ID, A2UI_MCP_PROTOCOL_VERSION, A2UI_MCP_TRANSPORT, isA2uiMcpBindingGrant, negotiateA2uiMcpBinding, } from "./binding.js";
+export { A2UI_V1_MAX_ENVELOPES, A2UI_V1_MAX_SOURCE_LENGTH, A2UI_V1_PROTOCOL_VERSION, A2UI_V1_BASIC_CATALOG_ID, A2UI_V1_BASIC_COMPONENT_NAMES, A2UI_V1_BASIC_FUNCTION_NAMES, A2UI_V1_SYSTEM_FUNCTION_NAMES, A2UI_V1_MAX_COMPONENTS, A2UI_V1_MAX_SURFACES, A2uiSurfaceStore, createA2uiV1BasicCatalogPolicy, parseA2uiV1Envelope, parseA2uiV1Jsonl, resolveA2uiV1JsonlFromToolResult, validateA2uiV1SurfaceState, } from "./v1/index.js";
 export const A2UI_VERSION = "0.1";
-export class A2uiParseError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = "A2uiParseError";
+/** Maximum nesting depth for container trees (root is depth 0). */
+export const A2UI_MAX_DEPTH = 32;
+/** Maximum number of nodes allowed in a single surface. */
+export const A2UI_MAX_NODES = 256;
+/** Maximum UTF-16 code units accepted in a serialized surface. */
+export const A2UI_MAX_SOURCE_LENGTH = 1_048_576;
+/** Maximum UTF-16 code units accepted in one surface string field. */
+export const A2UI_MAX_STRING_LENGTH = 65_536;
+/**
+ * Resolves the single explicitly typed A2UI resource link in a successful
+ * tool result, reads it through the host client, and validates its surface.
+ */
+export async function resolveA2uiResourceFromToolResult(reader, toolResult) {
+    if (toolResult.isError !== undefined && typeof toolResult.isError !== "boolean") {
+        throw new A2uiResourceError("Expected tool result.isError to be a boolean");
     }
+    if (toolResult.isError === true) {
+        throw new A2uiResourceError("Cannot resolve an A2UI resource from an errored tool result");
+    }
+    const links = expectContentArray(toolResult.content).flatMap((block, index) => parseA2uiResourceLink(block, `tool result.content[${index}]`));
+    if (links.length !== 1) {
+        throw new A2uiResourceError(`Expected exactly one ${A2UI_MIME_TYPE} resource link, received ${links.length}`);
+    }
+    const link = links[0];
+    const readResult = await reader.readResource(link.uri);
+    const resources = expectResourceContents(readResult).filter((resource) => resource.uri === link.uri && resource.mimeType === A2UI_MIME_TYPE);
+    if (resources.length !== 1) {
+        throw new A2uiResourceError(`Expected exactly one ${A2UI_MIME_TYPE} text resource for ${link.uri}, received ${resources.length}`);
+    }
+    const resource = resources[0];
+    if (typeof resource.text !== "string" || resource.blob !== undefined) {
+        throw new A2uiResourceError(`Expected a text-only A2UI resource for ${link.uri}`);
+    }
+    return {
+        uri: link.uri,
+        mimeType: A2UI_MIME_TYPE,
+        surface: parseA2uiSurface(resource.text),
+    };
 }
 export function parseA2uiSurface(input) {
     let value = input;
     if (typeof input === "string") {
+        if (input.length > A2UI_MAX_SOURCE_LENGTH) {
+            throw new A2uiParseError(`A2UI source exceeds maximum length of ${A2UI_MAX_SOURCE_LENGTH}`);
+        }
         try {
             value = JSON.parse(input);
         }
@@ -17,29 +61,44 @@ export function parseA2uiSurface(input) {
         }
     }
     const surface = expectObject(value, "surface");
+    expectOnlyKeys(surface, ["root", "version"], "surface");
     const version = expectString(surface.version, "surface.version");
     if (version !== A2UI_VERSION) {
         throw new A2uiParseError(`Unsupported A2UI version: ${version}`);
     }
+    const seenIds = new Set();
     return {
         version: A2UI_VERSION,
-        root: parseNode(surface.root, "surface.root"),
+        root: parseNode(surface.root, "surface.root", seenIds, 0),
     };
 }
-function parseNode(value, path) {
+function parseNode(value, path, seenIds, depth) {
+    if (depth > A2UI_MAX_DEPTH) {
+        throw new A2uiParseError(`A2UI surface exceeds maximum depth of ${A2UI_MAX_DEPTH} at ${path}`);
+    }
+    if (seenIds.size >= A2UI_MAX_NODES) {
+        throw new A2uiParseError(`A2UI surface exceeds maximum of ${A2UI_MAX_NODES} nodes`);
+    }
     const node = expectObject(value, path);
     const id = expectString(node.id, `${path}.id`);
+    if (seenIds.has(id)) {
+        throw new A2uiParseError(`Duplicate node id at ${path}: ${id}`);
+    }
+    seenIds.add(id);
     const type = expectString(node.type, `${path}.type`);
     switch (type) {
         case "container":
+            expectOnlyKeys(node, ["children", "id", "type"], path);
             return {
                 id,
                 type,
-                children: expectArray(node.children, `${path}.children`).map((child, index) => parseNode(child, `${path}.children[${index}]`)),
+                children: expectArray(node.children, `${path}.children`).map((child, index) => parseNode(child, `${path}.children[${index}]`, seenIds, depth + 1)),
             };
         case "text":
+            expectOnlyKeys(node, ["id", "text", "type"], path);
             return { id, type, text: expectString(node.text, `${path}.text`) };
         case "button":
+            expectOnlyKeys(node, ["action", "id", "label", "type"], path);
             return {
                 id,
                 type,
@@ -47,6 +106,7 @@ function parseNode(value, path) {
                 action: parseToolAction(node.action, `${path}.action`),
             };
         case "text-input": {
+            expectOnlyKeys(node, ["binding", "id", "label", "type", "value"], path);
             const label = expectString(node.label, `${path}.label`);
             const valueField = optionalString(node.value, `${path}.value`);
             const binding = optionalString(node.binding, `${path}.binding`);
@@ -63,26 +123,95 @@ function parseNode(value, path) {
     }
 }
 function parseToolAction(value, path) {
-    const action = expectObject(value, path);
-    const type = expectString(action.type, `${path}.type`);
-    if (type !== "tool") {
-        throw new A2uiParseError(`Unsupported action type at ${path}: ${type}`);
+    try {
+        return parseMcpNativeAction(value, path);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : `Invalid tool action at ${path}`;
+        throw new A2uiParseError(message, { cause: error });
     }
-    const arguments_ = action.arguments;
-    return {
-        type,
-        name: expectString(action.name, `${path}.name`),
-        ...(arguments_ === undefined
-            ? {}
-            : { arguments: expectJsonObject(arguments_, `${path}.arguments`) }),
-    };
 }
 function expectObject(value, path) {
     if (value === null || typeof value !== "object" || Array.isArray(value)) {
         throw new A2uiParseError(`Expected an object at ${path}`);
     }
+    const prototype = Object.getPrototypeOf(value);
+    if (prototype !== Object.prototype && prototype !== null) {
+        throw new A2uiParseError(`Expected a plain object at ${path}`);
+    }
+    const ownProperties = Object.create(null);
+    for (const key of Object.keys(value)) {
+        ownProperties[key] = value[key];
+    }
+    return ownProperties;
+}
+function expectContentArray(value) {
+    if (!Array.isArray(value)) {
+        throw new A2uiResourceError("Expected an array at tool result.content");
+    }
     return value;
 }
+function parseA2uiResourceLink(value, path) {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        throw new A2uiResourceError(`Expected a content object at ${path}`);
+    }
+    const block = value;
+    if (typeof block.type !== "string") {
+        throw new A2uiResourceError(`Expected a content type at ${path}.type`);
+    }
+    if (block.type !== "resource_link") {
+        return [];
+    }
+    if (typeof block.name !== "string") {
+        throw new A2uiResourceError(`Expected a string at ${path}.name`);
+    }
+    if (typeof block.uri !== "string") {
+        throw new A2uiResourceError(`Expected a string at ${path}.uri`);
+    }
+    if (block.mimeType !== undefined && typeof block.mimeType !== "string") {
+        throw new A2uiResourceError(`Expected a string at ${path}.mimeType`);
+    }
+    return block.mimeType === A2UI_MIME_TYPE ? [{ uri: block.uri }] : [];
+}
+function expectResourceContents(value) {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        throw new A2uiResourceError("Expected an object from resources/read");
+    }
+    const contents = value.contents;
+    if (!Array.isArray(contents)) {
+        throw new A2uiResourceError("Expected an array at resource result.contents");
+    }
+    return contents.map((content, index) => {
+        if (content === null || typeof content !== "object" || Array.isArray(content)) {
+            throw new A2uiResourceError(`Expected an object at resource result.contents[${index}]`);
+        }
+        const resource = content;
+        const uri = resource.uri;
+        if (typeof uri !== "string") {
+            throw new A2uiResourceError(`Expected a string at resource result.contents[${index}].uri`);
+        }
+        const mimeType = resource.mimeType;
+        if (mimeType !== undefined && typeof mimeType !== "string") {
+            throw new A2uiResourceError(`Expected a string at resource result.contents[${index}].mimeType`);
+        }
+        const text = resource.text;
+        if (text !== undefined && typeof text !== "string") {
+            throw new A2uiResourceError(`Expected a string at resource result.contents[${index}].text`);
+        }
+        const blob = resource.blob;
+        if (blob !== undefined && typeof blob !== "string") {
+            throw new A2uiResourceError(`Expected a string at resource result.contents[${index}].blob`);
+        }
+        const common = {
+            uri,
+            ...(mimeType === undefined ? {} : { mimeType }),
+        };
+        if ((text === undefined) === (blob === undefined)) {
+            throw new A2uiResourceError(`Expected exactly one of text or blob at resource result.contents[${index}]`);
+        }
+        return text === undefined ? { ...common, blob: blob } : { ...common, text };
+    });
+}
 function expectArray(value, path) {
     if (!Array.isArray(value)) {
         throw new A2uiParseError(`Expected an array at ${path}`);
@@ -93,29 +222,20 @@ function expectString(value, path) {
     if (typeof value !== "string") {
         throw new A2uiParseError(`Expected a string at ${path}`);
     }
+    if (value.length > A2UI_MAX_STRING_LENGTH) {
+        throw new A2uiParseError(`String at ${path} exceeds maximum length of ${A2UI_MAX_STRING_LENGTH}`);
+    }
     return value;
 }
 function optionalString(value, path) {
     return value === undefined ? undefined : expectString(value, path);
 }
-function expectJsonObject(value, path) {
-    const object = expectObject(value, path);
-    const result = {};
-    for (const [key, child] of Object.entries(object)) {
-        result[key] = expectJsonValue(child, `${path}.${key}`);
-    }
-    return result;
-}
-function expectJsonValue(value, path) {
-    if (value === null ||
-        typeof value === "boolean" ||
-        typeof value === "number" ||
-        typeof value === "string") {
-        return value;
-    }
-    if (Array.isArray(value)) {
-        return value.map((child, index) => expectJsonValue(child, `${path}[${index}]`));
+function expectOnlyKeys(object, allowedKeys, path) {
+    const allowed = new Set(allowedKeys);
+    for (const key of Object.keys(object)) {
+        if (!allowed.has(key)) {
+            throw new A2uiParseError(`Unsupported field ${JSON.stringify(key)} at ${path}`);
+        }
     }
-    return expectJsonObject(value, path);
 }
 //# sourceMappingURL=index.js.map