@mihcm/ai-ui 0.14.1

package/README.md

@@ -0,0 +1,100 @@
+# @mihcm/ai-ui
+
+Zod-validated component descriptors and a safe renderer for AI-generated MiHCM UI.
+
+This package is the only approved path for rendering model-generated UI. It keeps AI output constrained to an explicit component allowlist and validates every descriptor before render.
+
+## Current release
+
+Current published version: **0.14.1**.
+
+This release follows `@mihcm/ui@0.14.1`. Descriptor validation and the renderer allowlist remain unchanged; the package stays aligned with the current UI surface and dependency train.
+
+## Install
+
+```bash
+pnpm add @mihcm/ai-ui @mihcm/ui zod
+```
+
+## Usage
+
+```tsx
+import { renderComponentDescriptor, componentDescriptorSchema } from '@mihcm/ai-ui';
+
+const descriptor = componentDescriptorSchema.parse({
+  component: 'Button',
+  props: {
+    children: 'Approve request',
+    variant: 'default',
+  },
+});
+
+export function GeneratedAction() {
+  return renderComponentDescriptor(descriptor);
+}
+```
+
+## What is included
+
+- Zod schemas for supported MiHCM component descriptors.
+- Shared safe schemas for text, class names, relative URLs, and HTTPS image URLs.
+- Renderer switch for allowlisted components only.
+- AI tool descriptions that reflect the live allowlist.
+- Coverage governance that marks each UI primitive as `supported`, `host-composed`, or `blocked`.
+
+## Recent additions and fixes
+
+- Added the `Link` descriptor and renderer case with safe relative, hash, or HTTPS href validation.
+- Added semantic `Text.as` support for safe `span`, paragraph, label, emphasis, and heading tags.
+- Updated coverage guidance so `Button`, `Link`, `Text`, and form-like descriptors preserve native HTML semantics and accessible names.
+- Extended the `SectionHeader` descriptor with safe enum-backed spacing, surface, border, radius, and shadow props; raw class names remain host-owned.
+- Added `AI_UI_COMPONENT_COVERAGE` so every UI primitive has an explicit AI-UI decision.
+- Added the coverage test script that verifies coverage, schema files, renderer cases, and tool-prompt allowlist sync.
+- Tightened URL validation for model-controlled Avatar images and Breadcrumb hrefs.
+- Added shared safe URL schemas to prevent raw `z.string().url()` from allowing unsafe schemes.
+- Updated tool descriptions to derive from the live allowlist instead of stale hardcoded examples.
+
+## Security contract
+
+- Never use `eval`, `new Function`, dynamic imports, or model-provided component paths.
+- Never render raw HTML from a descriptor.
+- Never accept model-controlled filesystem paths.
+- Only render components in the explicit allowlist.
+- Validate descriptors with Zod before rendering.
+- Validate navigation hrefs with `safeHrefSchema`; reject `javascript:`, protocol-relative URLs, and arbitrary schemes.
+- Keep generated text structural: use `Text.as` for headings and paragraphs instead of relying on visual size alone.
+- Keep unsafe or host-owned primitives marked as `host-composed` or `blocked`.
+
+## Supported vs host-composed
+
+`supported` means a model may emit the descriptor directly.
+
+`host-composed` means the host application owns state, async data, callbacks, or layout context and may compose the component itself after validating model intent.
+
+`blocked` means the primitive is not safe or useful for model-controlled render output.
+
+## Maintainer checklist
+
+When changing UI primitives:
+
+1. Update `AI_UI_COMPONENT_COVERAGE`.
+2. Add or update the Zod schema for supported descriptors.
+3. Add or update the renderer switch case.
+4. Keep model-controlled URLs on safe relative/hash/HTTPS schemas.
+5. Run the AI-UI coverage test.
+6. Update docs and add a changeset before publishing.
+
+## Build and test
+
+```bash
+cd src
+pnpm -F @mihcm/ai-ui build
+pnpm -F @mihcm/ai-ui typecheck
+pnpm -F @mihcm/ai-ui test
+```
+
+## Related docs
+
+- `src/apps/docs/app/ai-ui/page.mdx`
+- `docs/security-playbook.md`
+- `docs/CONVENTIONS.md`

package/dist/coverage.d.ts

@@ -0,0 +1,17 @@
+import { ALLOWED_COMPONENTS, type AllowedComponent } from './schemas/index.js';
+export declare const UI_COMPONENTS: readonly ["AccessLevelGroup", "Accordion", "Alert", "AlertDialog", "AspectRatio", "Avatar", "AvatarGroup", "Badge", "Banner", "BarList", "Breadcrumb", "Button", "Calendar", "Card", "Carousel", "CategoryBar", "Chart", "Checkbox", "CheckboxGrid", "Collapsible", "Combobox", "Command", "ContextMenu", "DataTable", "DatePicker", "Dialog", "Drawer", "DropdownMenu", "Dropzone", "EmptyState", "Form", "HoverCard", "IconSidebar", "Input", "InputOTP", "Label", "Link", "Logo", "MainSidebar", "Menubar", "NavigationMenu", "NotificationBadge", "PageShell", "Pagination", "Popover", "Popper", "Progress", "ProgressCircle", "RadioGroup", "RadioCardGroup", "Resizable", "RichTextEditor", "ScrollArea", "SearchField", "SectionHeader", "Select", "Separator", "Sheet", "Sidebar", "Skeleton", "Slider", "SortableList", "SparkChart", "StatCard", "StatusBadge", "Switch", "Table", "Tabs", "TabNavigation", "Tag", "Text", "Textarea", "TitleBar", "Toast", "Toggle", "Tooltip", "TopBar", "TransferList", "Tracker"];
+export type UIComponentName = (typeof UI_COMPONENTS)[number];
+export type AIUICoverageStatus = 'supported' | 'host-composed' | 'blocked';
+export interface AIUIComponentCoverage {
+    component: UIComponentName;
+    status: AIUICoverageStatus;
+    schema?: string;
+    reason: string;
+}
+type SupportedAIUIComponent = Exclude<AllowedComponent, 'Stack'>;
+export declare const AI_UI_SUPPORTED_COMPONENTS: SupportedAIUIComponent[];
+export declare const AI_UI_COMPONENT_COVERAGE: readonly AIUIComponentCoverage[];
+export declare function isAIUISupportedComponent(component: string): component is (typeof ALLOWED_COMPONENTS)[number];
+export declare function getAIUIComponentCoverage(component: string): AIUIComponentCoverage | undefined;
+export {};
+//# sourceMappingURL=coverage.d.ts.map

package/dist/coverage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage.d.ts","sourceRoot":"","sources":["../src/coverage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE/E,eAAO,MAAM,aAAa,k+BAgFhB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,MAAM,MAAM,kBAAkB,GAC1B,WAAW,GACX,eAAe,GACf,SAAS,CAAC;AAEd,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,eAAe,CAAC;IAC3B,MAAM,EAAE,kBAAkB,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,KAAK,sBAAsB,GAAG,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;AAEjE,eAAO,MAAM,0BAA0B,0BAED,CAAC;AAiOvC,eAAO,MAAM,wBAAwB,EAAE,SAAS,qBAAqB,EAWb,CAAC;AAEzD,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,GAChB,SAAS,IAAI,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAElD;AAED,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,GAChB,qBAAqB,GAAG,SAAS,CAEnC"}

package/dist/coverage.js

@@ -0,0 +1,320 @@
+import { ALLOWED_COMPONENTS } from './schemas/index.js';
+export const UI_COMPONENTS = [
+    'AccessLevelGroup',
+    'Accordion',
+    'Alert',
+    'AlertDialog',
+    'AspectRatio',
+    'Avatar',
+    'AvatarGroup',
+    'Badge',
+    'Banner',
+    'BarList',
+    'Breadcrumb',
+    'Button',
+    'Calendar',
+    'Card',
+    'Carousel',
+    'CategoryBar',
+    'Chart',
+    'Checkbox',
+    'CheckboxGrid',
+    'Collapsible',
+    'Combobox',
+    'Command',
+    'ContextMenu',
+    'DataTable',
+    'DatePicker',
+    'Dialog',
+    'Drawer',
+    'DropdownMenu',
+    'Dropzone',
+    'EmptyState',
+    'Form',
+    'HoverCard',
+    'IconSidebar',
+    'Input',
+    'InputOTP',
+    'Label',
+    'Link',
+    'Logo',
+    'MainSidebar',
+    'Menubar',
+    'NavigationMenu',
+    'NotificationBadge',
+    'PageShell',
+    'Pagination',
+    'Popover',
+    'Popper',
+    'Progress',
+    'ProgressCircle',
+    'RadioGroup',
+    'RadioCardGroup',
+    'Resizable',
+    'RichTextEditor',
+    'ScrollArea',
+    'SearchField',
+    'SectionHeader',
+    'Select',
+    'Separator',
+    'Sheet',
+    'Sidebar',
+    'Skeleton',
+    'Slider',
+    'SortableList',
+    'SparkChart',
+    'StatCard',
+    'StatusBadge',
+    'Switch',
+    'Table',
+    'Tabs',
+    'TabNavigation',
+    'Tag',
+    'Text',
+    'Textarea',
+    'TitleBar',
+    'Toast',
+    'Toggle',
+    'Tooltip',
+    'TopBar',
+    'TransferList',
+    'Tracker',
+];
+export const AI_UI_SUPPORTED_COMPONENTS = ALLOWED_COMPONENTS.filter((component) => component !== 'Stack');
+const supportedReasons = {
+    Accordion: 'Bounded item array; content is plain text; host owns state.',
+    Alert: 'Plain text feedback only; variant enum is constrained.',
+    AlertDialog: 'Host owns open state; action labels are plain text and no handler body is accepted.',
+    Avatar: 'Image URL, fallback, size, and status are Zod constrained.',
+    AvatarGroup: 'Bounded avatar array with URL/fallback-only entries.',
+    Badge: 'Short text label with constrained variants.',
+    Banner: 'Plain text message with constrained tone and dismissibility.',
+    Breadcrumb: 'Flat bounded label/href list; no arbitrary children.',
+    Button: 'Text-only semantic button; action is an id resolved by the host action map and web type defaults to button.',
+    Card: 'Plain title, description, and body; no arbitrary nested React nodes.',
+    Checkbox: 'Host owns state; descriptor provides label and initial state only.',
+    Dialog: 'Host owns open state; body is plain text.',
+    DropdownMenu: 'Flat menu items only; no arbitrary submenus or handler code.',
+    EmptyState: 'Text-only empty state; action is host-resolved by id.',
+    Input: 'Host owns value/change; safe input types only.',
+    Label: 'Plain text label with constrained tone and association token.',
+    Link: 'Semantic anchor with bounded label, href, variant, and external marker props; host should allowlist hrefs.',
+    Pagination: 'Numeric page data only; renderer computes links.',
+    Progress: 'Numeric value and constrained presentation props only.',
+    RadioGroup: 'Bounded option array; host owns state.',
+    SectionHeader: 'Text-only header; action slot is intentionally omitted.',
+    Select: 'Bounded option array; host owns value/change.',
+    Separator: 'Orientation enum only.',
+    Sheet: 'Host owns open state; title/description/side/size only.',
+    StatCard: 'Text metric and constrained tone only.',
+    StatusBadge: 'Short text label with constrained tone; icon slot omitted.',
+    Switch: 'Host owns state; descriptor provides label and initial state only.',
+    Table: 'Bounded columns/rows with string cell values only.',
+    Tabs: 'Bounded tab array with plain text content.',
+    Tag: 'Short label with constrained variant/size/removable state.',
+    Text: 'Plain text with constrained typography props and safe semantic text tags.',
+    Textarea: 'Host owns value/change; descriptor cannot provide form data.',
+    TitleBar: 'Text-only title/supertitle; icon and action slots omitted.',
+    Toggle: 'Host owns pressed state; descriptor provides label and initial state only.',
+};
+const deferredComponents = {
+    AccessLevelGroup: {
+        status: 'host-composed',
+        reason: 'Authorization semantics must be bound to product policy and host data, not model output.',
+    },
+    AspectRatio: {
+        status: 'host-composed',
+        reason: 'Layout-only primitive; host should wrap trusted media/content descriptors.',
+    },
+    BarList: {
+        status: 'host-composed',
+        reason: 'Ranked metrics, links, and value formatting must be supplied by trusted host data.',
+    },
+    Calendar: {
+        status: 'host-composed',
+        reason: 'Date selection, locale, disabled rules, and range policy need host-owned business rules.',
+    },
+    Carousel: {
+        status: 'host-composed',
+        reason: 'Requires trusted slide content and motion policy; model output should not define arbitrary slide trees.',
+    },
+    CategoryBar: {
+        status: 'host-composed',
+        reason: 'Segment values and labels are host analytics data and need host-owned color semantics.',
+    },
+    Chart: {
+        status: 'host-composed',
+        reason: 'Chart data, series mapping, and formatter functions must be host-supplied and audited.',
+    },
+    CheckboxGrid: {
+        status: 'host-composed',
+        reason: 'Bulk selection rules and option source are application data owned by the host.',
+    },
+    Collapsible: {
+        status: 'host-composed',
+        reason: 'Generic disclosure slots can contain arbitrary content; compose from safe child descriptors instead.',
+    },
+    Combobox: {
+        status: 'host-composed',
+        reason: 'Async search, option loading, and filtering must be host-owned.',
+    },
+    Command: {
+        status: 'host-composed',
+        reason: 'Command execution and shortcuts must come from a host allowlist.',
+    },
+    ContextMenu: {
+        status: 'host-composed',
+        reason: 'Context-sensitive actions must be host allowlisted and bound to trusted targets.',
+    },
+    DataTable: {
+        status: 'host-composed',
+        reason: 'Large data, custom renderers, filtering, and sorting policy must be host-owned.',
+    },
+    DatePicker: {
+        status: 'host-composed',
+        reason: 'Date parsing, time zones, disabled dates, and submit wiring require host policy.',
+    },
+    Drawer: {
+        status: 'host-composed',
+        reason: 'Slot-based overlay; use Sheet descriptor for bounded AI-generated drawer-like output.',
+    },
+    Dropzone: {
+        status: 'blocked',
+        reason: 'File selection handles user files and validation policy; model output must not request uploads.',
+    },
+    Form: {
+        status: 'blocked',
+        reason: 'Model-defined forms can collect sensitive data; hosts must compose explicit validated fields.',
+    },
+    HoverCard: {
+        status: 'host-composed',
+        reason: 'Overlay timing/content slots should wrap safe descriptors chosen by the host.',
+    },
+    IconSidebar: {
+        status: 'host-composed',
+        reason: 'Navigation destinations and icons must be host-owned.',
+    },
+    InputOTP: {
+        status: 'blocked',
+        reason: 'OTP fields handle authentication secrets and must never be model-generated.',
+    },
+    Logo: {
+        status: 'host-composed',
+        reason: 'Brand usage must follow approved asset policy and host-selected brand variants.',
+    },
+    MainSidebar: {
+        status: 'host-composed',
+        reason: 'Navigation structure and destinations must be host-owned.',
+    },
+    Menubar: {
+        status: 'host-composed',
+        reason: 'Nested menu actions and shortcuts must be host allowlisted.',
+    },
+    NavigationMenu: {
+        status: 'host-composed',
+        reason: 'Product navigation, links, and mega-menu content must be host-owned.',
+    },
+    NotificationBadge: {
+        status: 'host-composed',
+        reason: 'Decorative count badge needs parent context and host-owned notification data.',
+    },
+    PageShell: {
+        status: 'host-composed',
+        reason: 'Application shell slots are structural and must be assembled by the host.',
+    },
+    Popover: {
+        status: 'host-composed',
+        reason: 'Generic overlay slots can contain arbitrary content; host should render safe descriptors inside.',
+    },
+    Popper: {
+        status: 'host-composed',
+        reason: 'Positioning primitive; content and trigger semantics must be host-owned.',
+    },
+    ProgressCircle: {
+        status: 'host-composed',
+        reason: 'KPI values and thresholds must be host-owned; use Progress descriptor for simple bounded bars.',
+    },
+    RadioCardGroup: {
+        status: 'host-composed',
+        reason: 'Card option content can contain rich product-specific details; host should define options.',
+    },
+    Resizable: {
+        status: 'host-composed',
+        reason: 'Panel layout state and resize constraints must be host-owned.',
+    },
+    RichTextEditor: {
+        status: 'blocked',
+        reason: 'Rich text can carry unsafe markup and user content; keep host-controlled and sanitized.',
+    },
+    ScrollArea: {
+        status: 'host-composed',
+        reason: 'Layout utility; host should wrap safe descriptor output.',
+    },
+    SearchField: {
+        status: 'host-composed',
+        reason: 'Search query state, async results, and telemetry must be host-owned.',
+    },
+    Sidebar: {
+        status: 'host-composed',
+        reason: 'Low-level shell/navigation primitive with application-owned state and links.',
+    },
+    Skeleton: {
+        status: 'host-composed',
+        reason: 'Loading placeholders should reflect host data-fetching state.',
+    },
+    Slider: {
+        status: 'host-composed',
+        reason: 'Numeric range state and commit behavior must be host-owned.',
+    },
+    SortableList: {
+        status: 'host-composed',
+        reason: 'Drag ordering changes application state; host must own item identity and persistence.',
+    },
+    SparkChart: {
+        status: 'host-composed',
+        reason: 'Chart values and scale decisions must come from trusted host analytics data.',
+    },
+    TabNavigation: {
+        status: 'host-composed',
+        reason: 'Navigation targets and routing state must be host-owned.',
+    },
+    Toast: {
+        status: 'host-composed',
+        reason: 'Notification lifecycle and deduplication must be host-owned.',
+    },
+    Tooltip: {
+        status: 'host-composed',
+        reason: 'Tooltip trigger/content pairing belongs to the host component tree.',
+    },
+    TopBar: {
+        status: 'host-composed',
+        reason: 'Authenticated user, navigation, and utility actions must be host-owned.',
+    },
+    TransferList: {
+        status: 'host-composed',
+        reason: 'Bulk assignment semantics and source/target data must be host-owned.',
+    },
+    Tracker: {
+        status: 'host-composed',
+        reason: 'Status timelines represent host data and should not be generated as arbitrary model state.',
+    },
+};
+export const AI_UI_COMPONENT_COVERAGE = [
+    ...AI_UI_SUPPORTED_COMPONENTS.map((component) => ({
+        component,
+        status: 'supported',
+        schema: `${component}Descriptor`,
+        reason: supportedReasons[component],
+    })),
+    ...Object.entries(deferredComponents).map(([component, entry]) => ({
+        component: component,
+        ...entry,
+    })),
+].sort((a, b) => a.component.localeCompare(b.component));
+export function isAIUISupportedComponent(component) {
+    return ALLOWED_COMPONENTS.includes(component);
+}
+export function getAIUIComponentCoverage(component) {
+    return AI_UI_COMPONENT_COVERAGE.find((entry) => entry.component === component);
+}
+//# sourceMappingURL=coverage.js.map

package/dist/coverage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage.js","sourceRoot":"","sources":["../src/coverage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAyB,MAAM,oBAAoB,CAAC;AAE/E,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,kBAAkB;IAClB,WAAW;IACX,OAAO;IACP,aAAa;IACb,aAAa;IACb,QAAQ;IACR,aAAa;IACb,OAAO;IACP,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,QAAQ;IACR,UAAU;IACV,MAAM;IACN,UAAU;IACV,aAAa;IACb,OAAO;IACP,UAAU;IACV,cAAc;IACd,aAAa;IACb,UAAU;IACV,SAAS;IACT,aAAa;IACb,WAAW;IACX,YAAY;IACZ,QAAQ;IACR,QAAQ;IACR,cAAc;IACd,UAAU;IACV,YAAY;IACZ,MAAM;IACN,WAAW;IACX,aAAa;IACb,OAAO;IACP,UAAU;IACV,OAAO;IACP,MAAM;IACN,MAAM;IACN,aAAa;IACb,SAAS;IACT,gBAAgB;IAChB,mBAAmB;IACnB,WAAW;IACX,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,UAAU;IACV,gBAAgB;IAChB,YAAY;IACZ,gBAAgB;IAChB,WAAW;IACX,gBAAgB;IAChB,YAAY;IACZ,aAAa;IACb,eAAe;IACf,QAAQ;IACR,WAAW;IACX,OAAO;IACP,SAAS;IACT,UAAU;IACV,QAAQ;IACR,cAAc;IACd,YAAY;IACZ,UAAU;IACV,aAAa;IACb,QAAQ;IACR,OAAO;IACP,MAAM;IACN,eAAe;IACf,KAAK;IACL,MAAM;IACN,UAAU;IACV,UAAU;IACV,OAAO;IACP,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,cAAc;IACd,SAAS;CACD,CAAC;AAkBX,MAAM,CAAC,MAAM,0BAA0B,GAAG,kBAAkB,CAAC,MAAM,CACjE,CAAC,SAAS,EAAuC,EAAE,CAAC,SAAS,KAAK,OAAO,CACrC,CAAC;AAEvC,MAAM,gBAAgB,GAAgE;IACpF,SAAS,EAAE,6DAA6D;IACxE,KAAK,EAAE,wDAAwD;IAC/D,WAAW,EAAE,qFAAqF;IAClG,MAAM,EAAE,4DAA4D;IACpE,WAAW,EAAE,sDAAsD;IACnE,KAAK,EAAE,6CAA6C;IACpD,MAAM,EAAE,8DAA8D;IACtE,UAAU,EAAE,sDAAsD;IAClE,MAAM,EAAE,6GAA6G;IACrH,IAAI,EAAE,sEAAsE;IAC5E,QAAQ,EAAE,oEAAoE;IAC9E,MAAM,EAAE,2CAA2C;IACnD,YAAY,EAAE,8DAA8D;IAC5E,UAAU,EAAE,uDAAuD;IACnE,KAAK,EAAE,gDAAgD;IACvD,KAAK,EAAE,+DAA+D;IACtE,IAAI,EAAE,4GAA4G;IAClH,UAAU,EAAE,kDAAkD;IAC9D,QAAQ,EAAE,wDAAwD;IAClE,UAAU,EAAE,wCAAwC;IACpD,aAAa,EAAE,yDAAyD;IACxE,MAAM,EAAE,+CAA+C;IACvD,SAAS,EAAE,wBAAwB;IACnC,KAAK,EAAE,yDAAyD;IAChE,QAAQ,EAAE,wCAAwC;IAClD,WAAW,EAAE,4DAA4D;IACzE,MAAM,EAAE,oEAAoE;IAC5E,KAAK,EAAE,oDAAoD;IAC3D,IAAI,EAAE,4CAA4C;IAClD,GAAG,EAAE,4DAA4D;IACjE,IAAI,EAAE,2EAA2E;IACjF,QAAQ,EAAE,8DAA8D;IACxE,QAAQ,EAAE,4DAA4D;IACtE,MAAM,EAAE,4EAA4E;CACrF,CAAC;AAEF,MAAM,kBAAkB,GAAG;IACzB,gBAAgB,EAAE;QAChB,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,0FAA0F;KACnG;IACD,WAAW,EAAE;QACX,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,4EAA4E;KACrF;IACD,OAAO,EAAE;QACP,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,oFAAoF;KAC7F;IACD,QAAQ,EAAE;QACR,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,0FAA0F;KACnG;IACD,QAAQ,EAAE;QACR,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,yGAAyG;KAClH;IACD,WAAW,EAAE;QACX,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,wFAAwF;KACjG;IACD,KAAK,EAAE;QACL,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,wFAAwF;KACjG;IACD,YAAY,EAAE;QACZ,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,gFAAgF;KACzF;IACD,WAAW,EAAE;QACX,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,sGAAsG;KAC/G;IACD,QAAQ,EAAE;QACR,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,iEAAiE;KAC1E;IACD,OAAO,EAAE;QACP,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,kEAAkE;KAC3E;IACD,WAAW,EAAE;QACX,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,kFAAkF;KAC3F;IACD,SAAS,EAAE;QACT,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,iFAAiF;KAC1F;IACD,UAAU,EAAE;QACV,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,kFAAkF;KAC3F;IACD,MAAM,EAAE;QACN,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,uFAAuF;KAChG;IACD,QAAQ,EAAE;QACR,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,iGAAiG;KAC1G;IACD,IAAI,EAAE;QACJ,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,+FAA+F;KACxG;IACD,SAAS,EAAE;QACT,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,+EAA+E;KACxF;IACD,WAAW,EAAE;QACX,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,uDAAuD;KAChE;IACD,QAAQ,EAAE;QACR,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,6EAA6E;KACtF;IACD,IAAI,EAAE;QACJ,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,iFAAiF;KAC1F;IACD,WAAW,EAAE;QACX,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,2DAA2D;KACpE;IACD,OAAO,EAAE;QACP,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,6DAA6D;KACtE;IACD,cAAc,EAAE;QACd,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,sEAAsE;KAC/E;IACD,iBAAiB,EAAE;QACjB,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,+EAA+E;KACxF;IACD,SAAS,EAAE;QACT,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,2EAA2E;KACpF;IACD,OAAO,EAAE;QACP,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,kGAAkG;KAC3G;IACD,MAAM,EAAE;QACN,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,0EAA0E;KACnF;IACD,cAAc,EAAE;QACd,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,gGAAgG;KACzG;IACD,cAAc,EAAE;QACd,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,4FAA4F;KACrG;IACD,SAAS,EAAE;QACT,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,+DAA+D;KACxE;IACD,cAAc,EAAE;QACd,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,yFAAyF;KAClG;IACD,UAAU,EAAE;QACV,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,0DAA0D;KACnE;IACD,WAAW,EAAE;QACX,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,sEAAsE;KAC/E;IACD,OAAO,EAAE;QACP,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,8EAA8E;KACvF;IACD,QAAQ,EAAE;QACR,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,+DAA+D;KACxE;IACD,MAAM,EAAE;QACN,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,6DAA6D;KACtE;IACD,YAAY,EAAE;QACZ,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,uFAAuF;KAChG;IACD,UAAU,EAAE;QACV,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,8EAA8E;KACvF;IACD,aAAa,EAAE;QACb,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,0DAA0D;KACnE;IACD,KAAK,EAAE;QACL,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,8DAA8D;KACvE;IACD,OAAO,EAAE;QACP,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,qEAAqE;KAC9E;IACD,MAAM,EAAE;QACN,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,yEAAyE;KAClF;IACD,YAAY,EAAE;QACZ,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,sEAAsE;KAC/E;IACD,OAAO,EAAE;QACP,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,4FAA4F;KACrG;CAIF,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAqC;IACxE,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAChD,SAAS;QACT,MAAM,EAAE,WAAoB;QAC5B,MAAM,EAAE,GAAG,SAAS,YAAY;QAChC,MAAM,EAAE,gBAAgB,CAAC,SAAS,CAAC;KACpC,CAAC,CAAC;IACH,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACjE,SAAS,EAAE,SAA4B;QACvC,GAAG,KAAK;KACT,CAAC,CAAC;CACJ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAEzD,MAAM,UAAU,wBAAwB,CACtC,SAAiB;IAEjB,OAAQ,kBAAwC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,SAAiB;IAEjB,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;AACjF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { renderDescriptor, AIUIRenderError } from './renderer.js';
+export * from './schemas/index.js';
+export { AI_UI_COMPONENT_COVERAGE, AI_UI_SUPPORTED_COMPONENTS, UI_COMPONENTS, getAIUIComponentCoverage, isAIUISupportedComponent, type AIUIComponentCoverage, type AIUICoverageStatus, type UIComponentName, } from './coverage.js';
+export { renderUITool, renderUIToolDescription, renderUIToolSchema } from './tools.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAClE,cAAc,oBAAoB,CAAC;AACnC,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,aAAa,EACb,wBAAwB,EACxB,wBAAwB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,eAAe,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+export { renderDescriptor, AIUIRenderError } from './renderer.js';
+export * from './schemas/index.js';
+export { AI_UI_COMPONENT_COVERAGE, AI_UI_SUPPORTED_COMPONENTS, UI_COMPONENTS, getAIUIComponentCoverage, isAIUISupportedComponent, } from './coverage.js';
+export { renderUITool, renderUIToolDescription, renderUIToolSchema } from './tools.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAClE,cAAc,oBAAoB,CAAC;AACnC,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,aAAa,EACb,wBAAwB,EACxB,wBAAwB,GAIzB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC"}

package/dist/renderer.d.ts

@@ -0,0 +1,36 @@
+/**
+ * AI-UI renderer — validates a model-produced descriptor and renders it as
+ * @mihcm/ui. Same renderer works in React, Next.js, and React Native
+ * because the underlying primitives are universal.
+ *
+ * Security contract:
+ *  - Every descriptor is parsed by `componentDescriptorSchema` (AI-UI-01).
+ *  - Component names must appear in `ALLOWED_COMPONENTS` (AI-UI-02).
+ *  - No dynamic code evaluation, no raw HTML, ever (AI-UI-03/04/05).
+ *  - Action handlers are looked up by id from a server-supplied map — we
+ *    never accept arbitrary URLs or function bodies.
+ *
+ * Wiki: docs/components/<each>.md
+ */
+import { type ReactElement } from 'react';
+export declare class AIUIRenderError extends Error {
+    name: string;
+    readonly details?: unknown;
+    constructor(message: string, details?: unknown);
+}
+interface RenderOptions {
+    /**
+     * Map of action ids → safe handlers. The model can only reference handlers
+     * by id; it never gets to define them.
+     */
+    actions?: Record<string, () => void>;
+}
+/**
+ * Render a model-supplied descriptor (already JSON-parsed) into React nodes.
+ *
+ * Throws `AIUIRenderError` if validation fails. Callers should render an
+ * "I couldn't render that" fallback rather than propagating the error to UI.
+ */
+export declare function renderDescriptor(raw: unknown, options?: RenderOptions): ReactElement;
+export {};
+//# sourceMappingURL=renderer.d.ts.map

package/dist/renderer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderer.d.ts","sourceRoot":"","sources":["../src/renderer.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAsB,KAAK,YAAY,EAAkB,MAAM,OAAO,CAAC;AAyH9E,qBAAa,eAAgB,SAAQ,KAAK;IAC/B,IAAI,SAAqB;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;gBAEf,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO;CAI/C;AAED,UAAU,aAAa;IACrB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC;CACtC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,OAAO,EACZ,OAAO,GAAE,aAAkB,GAC1B,YAAY,CASd"}