@modelcontextprotocol/ext-apps 0.3.1 → 0.4.1

package/dist/src/generated/schema.d.ts

@@ -23,7 +23,7 @@ export declare const McpUiStyleVariableKeySchema: z.ZodUnion<readonly [z.ZodLite
 export declare const McpUiStylesSchema: z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"--color-background-primary">, z.ZodLiteral<"--color-background-secondary">, z.ZodLiteral<"--color-background-tertiary">, z.ZodLiteral<"--color-background-inverse">, z.ZodLiteral<"--color-background-ghost">, z.ZodLiteral<"--color-background-info">, z.ZodLiteral<"--color-background-danger">, z.ZodLiteral<"--color-background-success">, z.ZodLiteral<"--color-background-warning">, z.ZodLiteral<"--color-background-disabled">, z.ZodLiteral<"--color-text-primary">, z.ZodLiteral<"--color-text-secondary">, z.ZodLiteral<"--color-text-tertiary">, z.ZodLiteral<"--color-text-inverse">, z.ZodLiteral<"--color-text-ghost">, z.ZodLiteral<"--color-text-info">, z.ZodLiteral<"--color-text-danger">, z.ZodLiteral<"--color-text-success">, z.ZodLiteral<"--color-text-warning">, z.ZodLiteral<"--color-text-disabled">, z.ZodLiteral<"--color-text-ghost">, z.ZodLiteral<"--color-border-primary">, z.ZodLiteral<"--color-border-secondary">, z.ZodLiteral<"--color-border-tertiary">, z.ZodLiteral<"--color-border-inverse">, z.ZodLiteral<"--color-border-ghost">, z.ZodLiteral<"--color-border-info">, z.ZodLiteral<"--color-border-danger">, z.ZodLiteral<"--color-border-success">, z.ZodLiteral<"--color-border-warning">, z.ZodLiteral<"--color-border-disabled">, z.ZodLiteral<"--color-ring-primary">, z.ZodLiteral<"--color-ring-secondary">, z.ZodLiteral<"--color-ring-inverse">, z.ZodLiteral<"--color-ring-info">, z.ZodLiteral<"--color-ring-danger">, z.ZodLiteral<"--color-ring-success">, z.ZodLiteral<"--color-ring-warning">, z.ZodLiteral<"--font-sans">, z.ZodLiteral<"--font-mono">, z.ZodLiteral<"--font-weight-normal">, z.ZodLiteral<"--font-weight-medium">, z.ZodLiteral<"--font-weight-semibold">, z.ZodLiteral<"--font-weight-bold">, z.ZodLiteral<"--font-text-xs-size">, z.ZodLiteral<"--font-text-sm-size">, z.ZodLiteral<"--font-text-md-size">, z.ZodLiteral<"--font-text-lg-size">, z.ZodLiteral<"--font-heading-xs-size">, z.ZodLiteral<"--font-heading-sm-size">, z.ZodLiteral<"--font-heading-md-size">, z.ZodLiteral<"--font-heading-lg-size">, z.ZodLiteral<"--font-heading-xl-size">, z.ZodLiteral<"--font-heading-2xl-size">, z.ZodLiteral<"--font-heading-3xl-size">, z.ZodLiteral<"--font-text-xs-line-height">, z.ZodLiteral<"--font-text-sm-line-height">, z.ZodLiteral<"--font-text-md-line-height">, z.ZodLiteral<"--font-text-lg-line-height">, z.ZodLiteral<"--font-heading-xs-line-height">, z.ZodLiteral<"--font-heading-sm-line-height">, z.ZodLiteral<"--font-heading-md-line-height">, z.ZodLiteral<"--font-heading-lg-line-height">, z.ZodLiteral<"--font-heading-xl-line-height">, z.ZodLiteral<"--font-heading-2xl-line-height">, z.ZodLiteral<"--font-heading-3xl-line-height">, z.ZodLiteral<"--border-radius-xs">, z.ZodLiteral<"--border-radius-sm">, z.ZodLiteral<"--border-radius-md">, z.ZodLiteral<"--border-radius-lg">, z.ZodLiteral<"--border-radius-xl">, z.ZodLiteral<"--border-radius-full">, z.ZodLiteral<"--border-width-regular">, z.ZodLiteral<"--shadow-hairline">, z.ZodLiteral<"--shadow-sm">, z.ZodLiteral<"--shadow-md">, z.ZodLiteral<"--shadow-lg">]>, z.ZodUnion<readonly [z.ZodString, z.ZodUndefined]>>;
 /**
  * @description Request to open an external URL in the host's default browser.
- * @see {@link app.App.sendOpenLink} for the method that sends this request
+ * @see {@link app!App.openLink} for the method that sends this request
  */
 export declare const McpUiOpenLinkRequestSchema: z.ZodObject<{
     method: z.ZodLiteral<"ui/open-link">;
@@ -55,24 +55,28 @@ export declare const McpUiSandboxProxyReadyNotificationSchema: z.ZodObject<{
     params: z.ZodObject<{}, z.core.$strip>;
 }, z.core.$strip>;
 /**
- * @description Notification containing HTML resource for the sandbox proxy to load.
- * @internal
- * @see https://github.com/modelcontextprotocol/ext-apps/blob/main/specification/draft/apps.mdx#sandbox-proxy
+ * @description Content Security Policy configuration for UI resources.
  */
-export declare const McpUiSandboxResourceReadyNotificationSchema: z.ZodObject<{
-    method: z.ZodLiteral<"ui/notifications/sandbox-resource-ready">;
-    params: z.ZodObject<{
-        html: z.ZodString;
-        sandbox: z.ZodOptional<z.ZodString>;
-        csp: z.ZodOptional<z.ZodObject<{
-            connectDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
-            resourceDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
-        }, z.core.$strip>>;
-    }, z.core.$strip>;
+export declare const McpUiResourceCspSchema: z.ZodObject<{
+    connectDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    resourceDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    frameDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    baseUriDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+/**
+ * @description Sandbox permissions requested by the UI resource.
+ * Hosts MAY honor these by setting appropriate iframe `allow` attributes.
+ * Apps SHOULD NOT assume permissions are granted; use JS feature detection as fallback.
+ */
+export declare const McpUiResourcePermissionsSchema: z.ZodObject<{
+    camera: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+    microphone: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+    geolocation: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+    clipboardWrite: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
 }, z.core.$strip>;
 /**
- * @description Notification of UI size changes (bidirectional: Guest <-> Host).
- * @see {@link app.App.sendSizeChanged} for the method to send this from Guest UI
+ * @description Notification of UI size changes (Guest UI -> Host).
+ * @see {@link app!App.sendSizeChanged} for the method to send this from Guest UI
  */
 export declare const McpUiSizeChangedNotificationSchema: z.ZodObject<{
     method: z.ZodLiteral<"ui/notifications/size-changed">;
@@ -127,7 +131,7 @@ export declare const McpUiHostStylesSchema: z.ZodObject<{
 }, z.core.$strip>;
 /**
  * @description Request for graceful shutdown of the Guest UI (Host -> Guest UI).
- * @see {@link app-bridge.AppBridge.teardownResource} for the host method that sends this
+ * @see {@link app-bridge!AppBridge.teardownResource} for the host method that sends this
  */
 export declare const McpUiResourceTeardownRequestSchema: z.ZodObject<{
     method: z.ZodLiteral<"ui/resource-teardown">;
@@ -138,6 +142,14 @@ export declare const McpUiResourceTeardownRequestSchema: z.ZodObject<{
  * @see {@link McpUiResourceTeardownRequest}
  */
 export declare const McpUiResourceTeardownResultSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+export declare const McpUiSupportedContentBlockModalitiesSchema: z.ZodObject<{
+    text: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+    image: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+    audio: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+    resource: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+    resourceLink: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+    structuredContent: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+}, z.core.$strip>;
 /**
  * @description Capabilities supported by the host application.
  * @see {@link McpUiInitializeResult} for the initialization result that includes these capabilities
@@ -152,9 +164,39 @@ export declare const McpUiHostCapabilitiesSchema: z.ZodObject<{
         listChanged: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>;
     logging: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+    sandbox: z.ZodOptional<z.ZodObject<{
+        permissions: z.ZodOptional<z.ZodObject<{
+            camera: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+            microphone: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+            geolocation: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+            clipboardWrite: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+        }, z.core.$strip>>;
+        csp: z.ZodOptional<z.ZodObject<{
+            connectDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            resourceDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            frameDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            baseUriDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    updateModelContext: z.ZodOptional<z.ZodObject<{
+        text: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+        image: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+        audio: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+        resource: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+        resourceLink: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+        structuredContent: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+    }, z.core.$strip>>;
+    message: z.ZodOptional<z.ZodObject<{
+        text: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+        image: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+        audio: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+        resource: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+        resourceLink: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+        structuredContent: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 /**
- * @description Capabilities provided by the Guest UI (App).
+ * @description Capabilities provided by the Guest UI ({@link app!App}).
  * @see {@link McpUiInitializeRequest} for the initialization request that includes these capabilities
  */
 export declare const McpUiAppCapabilitiesSchema: z.ZodObject<{
@@ -165,19 +207,12 @@ export declare const McpUiAppCapabilitiesSchema: z.ZodObject<{
 }, z.core.$strip>;
 /**
  * @description Notification that Guest UI has completed initialization (Guest UI -> Host).
- * @see {@link app.App.connect} for the method that sends this notification
+ * @see {@link app!App.connect} for the method that sends this notification
  */
 export declare const McpUiInitializedNotificationSchema: z.ZodObject<{
     method: z.ZodLiteral<"ui/notifications/initialized">;
     params: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
 }, z.core.$strip>;
-/**
- * @description Content Security Policy configuration for UI resources.
- */
-export declare const McpUiResourceCspSchema: z.ZodObject<{
-    connectDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    resourceDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
-}, z.core.$strip>;
 /**
  * @description UI Resource metadata for security and rendering configuration.
  */
@@ -185,6 +220,14 @@ export declare const McpUiResourceMetaSchema: z.ZodObject<{
     csp: z.ZodOptional<z.ZodObject<{
         connectDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
         resourceDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        frameDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        baseUriDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+    permissions: z.ZodOptional<z.ZodObject<{
+        camera: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+        microphone: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+        geolocation: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+        clipboardWrite: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
     }, z.core.$strip>>;
     domain: z.ZodOptional<z.ZodString>;
     prefersBorder: z.ZodOptional<z.ZodBoolean>;
@@ -193,7 +236,7 @@ export declare const McpUiResourceMetaSchema: z.ZodObject<{
  * @description Request to change the display mode of the UI.
  * The host will respond with the actual display mode that was set,
  * which may differ from the requested mode if not supported.
- * @see {@link app.App.requestDisplayMode} for the method that sends this request
+ * @see {@link app!App.requestDisplayMode} for the method that sends this request
  */
 export declare const McpUiRequestDisplayModeRequestSchema: z.ZodObject<{
     method: z.ZodLiteral<"ui/request-display-mode">;
@@ -221,7 +264,7 @@ export declare const McpUiToolMetaSchema: z.ZodObject<{
 }, z.core.$strip>;
 /**
  * @description Request to send a message to the host's chat interface.
- * @see {@link app.App.sendMessage} for the method that sends this request
+ * @see {@link app!App.sendMessage} for the method that sends this request
  */
 export declare const McpUiMessageRequestSchema: z.ZodObject<{
     method: z.ZodLiteral<"ui/message">;
@@ -315,6 +358,30 @@ export declare const McpUiMessageRequestSchema: z.ZodObject<{
         }, z.core.$strip>]>>;
     }, z.core.$strip>;
 }, z.core.$strip>;
+/**
+ * @description Notification containing HTML resource for the sandbox proxy to load.
+ * @internal
+ * @see https://github.com/modelcontextprotocol/ext-apps/blob/main/specification/draft/apps.mdx#sandbox-proxy
+ */
+export declare const McpUiSandboxResourceReadyNotificationSchema: z.ZodObject<{
+    method: z.ZodLiteral<"ui/notifications/sandbox-resource-ready">;
+    params: z.ZodObject<{
+        html: z.ZodString;
+        sandbox: z.ZodOptional<z.ZodString>;
+        csp: z.ZodOptional<z.ZodObject<{
+            connectDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            resourceDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            frameDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            baseUriDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
+        permissions: z.ZodOptional<z.ZodObject<{
+            camera: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+            microphone: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+            geolocation: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+            clipboardWrite: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
 /**
  * @description Notification containing tool execution result (Host -> Guest UI).
  */
@@ -579,9 +646,113 @@ export declare const McpUiHostContextChangedNotificationSchema: z.ZodObject<{
         }, z.core.$strip>>;
     }, z.core.$loose>;
 }, z.core.$strip>;
+/**
+ * @description Request to update the agent's context without requiring a follow-up action (Guest UI -> Host).
+ *
+ * Unlike `notifications/message` which is for debugging/logging, this request is intended
+ * to update the Host's model context. Each request overwrites the previous context sent by the Guest UI.
+ * Unlike messages, context updates do not trigger follow-ups.
+ *
+ * The host will typically defer sending the context to the model until the next user message
+ * (including `ui/message`), and will only send the last update received.
+ *
+ * @see {@link app.App.updateModelContext} for the method that sends this request
+ */
+export declare const McpUiUpdateModelContextRequestSchema: z.ZodObject<{
+    method: z.ZodLiteral<"ui/update-model-context">;
+    params: z.ZodObject<{
+        content: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
+            type: z.ZodLiteral<"text">;
+            text: z.ZodString;
+            annotations: z.ZodOptional<z.ZodObject<{
+                audience: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    user: "user";
+                    assistant: "assistant";
+                }>>>;
+                priority: z.ZodOptional<z.ZodNumber>;
+                lastModified: z.ZodOptional<z.ZodISODateTime>;
+            }, z.core.$strip>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strip>, z.ZodObject<{
+            type: z.ZodLiteral<"image">;
+            data: z.ZodString;
+            mimeType: z.ZodString;
+            annotations: z.ZodOptional<z.ZodObject<{
+                audience: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    user: "user";
+                    assistant: "assistant";
+                }>>>;
+                priority: z.ZodOptional<z.ZodNumber>;
+                lastModified: z.ZodOptional<z.ZodISODateTime>;
+            }, z.core.$strip>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strip>, z.ZodObject<{
+            type: z.ZodLiteral<"audio">;
+            data: z.ZodString;
+            mimeType: z.ZodString;
+            annotations: z.ZodOptional<z.ZodObject<{
+                audience: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    user: "user";
+                    assistant: "assistant";
+                }>>>;
+                priority: z.ZodOptional<z.ZodNumber>;
+                lastModified: z.ZodOptional<z.ZodISODateTime>;
+            }, z.core.$strip>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strip>, z.ZodObject<{
+            uri: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            mimeType: z.ZodOptional<z.ZodString>;
+            annotations: z.ZodOptional<z.ZodObject<{
+                audience: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    user: "user";
+                    assistant: "assistant";
+                }>>>;
+                priority: z.ZodOptional<z.ZodNumber>;
+                lastModified: z.ZodOptional<z.ZodISODateTime>;
+            }, z.core.$strip>>;
+            _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
+            icons: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                src: z.ZodString;
+                mimeType: z.ZodOptional<z.ZodString>;
+                sizes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                theme: z.ZodOptional<z.ZodEnum<{
+                    light: "light";
+                    dark: "dark";
+                }>>;
+            }, z.core.$strip>>>;
+            name: z.ZodString;
+            title: z.ZodOptional<z.ZodString>;
+            type: z.ZodLiteral<"resource_link">;
+        }, z.core.$strip>, z.ZodObject<{
+            type: z.ZodLiteral<"resource">;
+            resource: z.ZodUnion<readonly [z.ZodObject<{
+                uri: z.ZodString;
+                mimeType: z.ZodOptional<z.ZodString>;
+                _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                text: z.ZodString;
+            }, z.core.$strip>, z.ZodObject<{
+                uri: z.ZodString;
+                mimeType: z.ZodOptional<z.ZodString>;
+                _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                blob: z.ZodString;
+            }, z.core.$strip>]>;
+            annotations: z.ZodOptional<z.ZodObject<{
+                audience: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    user: "user";
+                    assistant: "assistant";
+                }>>>;
+                priority: z.ZodOptional<z.ZodNumber>;
+                lastModified: z.ZodOptional<z.ZodISODateTime>;
+            }, z.core.$strip>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strip>]>>>;
+        structuredContent: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
 /**
  * @description Initialization request sent from Guest UI to Host.
- * @see {@link app.App.connect} for the method that sends this request
+ * @see {@link app!App.connect} for the method that sends this request
  */
 export declare const McpUiInitializeRequestSchema: z.ZodObject<{
     method: z.ZodLiteral<"ui/initialize">;
@@ -643,6 +814,36 @@ export declare const McpUiInitializeResultSchema: z.ZodObject<{
             listChanged: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>>;
         logging: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+        sandbox: z.ZodOptional<z.ZodObject<{
+            permissions: z.ZodOptional<z.ZodObject<{
+                camera: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+                microphone: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+                geolocation: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+                clipboardWrite: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+            }, z.core.$strip>>;
+            csp: z.ZodOptional<z.ZodObject<{
+                connectDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                resourceDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                frameDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                baseUriDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        updateModelContext: z.ZodOptional<z.ZodObject<{
+            text: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+            image: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+            audio: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+            resource: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+            resourceLink: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+            structuredContent: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+        }, z.core.$strip>>;
+        message: z.ZodOptional<z.ZodObject<{
+            text: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+            image: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+            audio: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+            resource: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+            resourceLink: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+            structuredContent: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+        }, z.core.$strip>>;
     }, z.core.$strip>;
     hostContext: z.ZodObject<{
         toolInfo: z.ZodOptional<z.ZodObject<{

package/dist/src/generated/schema.test.d.ts

@@ -8,7 +8,8 @@ export type McpUiOpenLinkRequestSchemaInferredType = z.infer<typeof generated.Mc
 export type McpUiOpenLinkResultSchemaInferredType = z.infer<typeof generated.McpUiOpenLinkResultSchema>;
 export type McpUiMessageResultSchemaInferredType = z.infer<typeof generated.McpUiMessageResultSchema>;
 export type McpUiSandboxProxyReadyNotificationSchemaInferredType = z.infer<typeof generated.McpUiSandboxProxyReadyNotificationSchema>;
-export type McpUiSandboxResourceReadyNotificationSchemaInferredType = z.infer<typeof generated.McpUiSandboxResourceReadyNotificationSchema>;
+export type McpUiResourceCspSchemaInferredType = z.infer<typeof generated.McpUiResourceCspSchema>;
+export type McpUiResourcePermissionsSchemaInferredType = z.infer<typeof generated.McpUiResourcePermissionsSchema>;
 export type McpUiSizeChangedNotificationSchemaInferredType = z.infer<typeof generated.McpUiSizeChangedNotificationSchema>;
 export type McpUiToolInputNotificationSchemaInferredType = z.infer<typeof generated.McpUiToolInputNotificationSchema>;
 export type McpUiToolInputPartialNotificationSchemaInferredType = z.infer<typeof generated.McpUiToolInputPartialNotificationSchema>;
@@ -17,18 +18,20 @@ export type McpUiHostCssSchemaInferredType = z.infer<typeof generated.McpUiHostC
 export type McpUiHostStylesSchemaInferredType = z.infer<typeof generated.McpUiHostStylesSchema>;
 export type McpUiResourceTeardownRequestSchemaInferredType = z.infer<typeof generated.McpUiResourceTeardownRequestSchema>;
 export type McpUiResourceTeardownResultSchemaInferredType = z.infer<typeof generated.McpUiResourceTeardownResultSchema>;
+export type McpUiSupportedContentBlockModalitiesSchemaInferredType = z.infer<typeof generated.McpUiSupportedContentBlockModalitiesSchema>;
 export type McpUiHostCapabilitiesSchemaInferredType = z.infer<typeof generated.McpUiHostCapabilitiesSchema>;
 export type McpUiAppCapabilitiesSchemaInferredType = z.infer<typeof generated.McpUiAppCapabilitiesSchema>;
 export type McpUiInitializedNotificationSchemaInferredType = z.infer<typeof generated.McpUiInitializedNotificationSchema>;
-export type McpUiResourceCspSchemaInferredType = z.infer<typeof generated.McpUiResourceCspSchema>;
 export type McpUiResourceMetaSchemaInferredType = z.infer<typeof generated.McpUiResourceMetaSchema>;
 export type McpUiRequestDisplayModeRequestSchemaInferredType = z.infer<typeof generated.McpUiRequestDisplayModeRequestSchema>;
 export type McpUiRequestDisplayModeResultSchemaInferredType = z.infer<typeof generated.McpUiRequestDisplayModeResultSchema>;
 export type McpUiToolVisibilitySchemaInferredType = z.infer<typeof generated.McpUiToolVisibilitySchema>;
 export type McpUiToolMetaSchemaInferredType = z.infer<typeof generated.McpUiToolMetaSchema>;
 export type McpUiMessageRequestSchemaInferredType = z.infer<typeof generated.McpUiMessageRequestSchema>;
+export type McpUiSandboxResourceReadyNotificationSchemaInferredType = z.infer<typeof generated.McpUiSandboxResourceReadyNotificationSchema>;
 export type McpUiToolResultNotificationSchemaInferredType = z.infer<typeof generated.McpUiToolResultNotificationSchema>;
 export type McpUiHostContextSchemaInferredType = z.infer<typeof generated.McpUiHostContextSchema>;
 export type McpUiHostContextChangedNotificationSchemaInferredType = z.infer<typeof generated.McpUiHostContextChangedNotificationSchema>;
+export type McpUiUpdateModelContextRequestSchemaInferredType = z.infer<typeof generated.McpUiUpdateModelContextRequestSchema>;
 export type McpUiInitializeRequestSchemaInferredType = z.infer<typeof generated.McpUiInitializeRequestSchema>;
 export type McpUiInitializeResultSchemaInferredType = z.infer<typeof generated.McpUiInitializeResultSchema>;

package/dist/src/message-transport.d.ts

@@ -1,39 +1,38 @@
 import { JSONRPCMessage, MessageExtraInfo } from "@modelcontextprotocol/sdk/types.js";
 import { Transport, TransportSendOptions } from "@modelcontextprotocol/sdk/shared/transport.js";
 /**
- * JSON-RPC transport using window.postMessage for iframe↔parent communication.
+ * JSON-RPC transport using `window.postMessage` for iframe↔parent communication.
  *
  * This transport enables bidirectional communication between MCP Apps running in
- * iframes and their host applications using the browser's postMessage API. It
- * implements the MCP SDK's Transport interface.
+ * iframes and their host applications using the browser's `postMessage` API. It
+ * implements the MCP SDK's `Transport` interface.
  *
  * ## Security
  *
- * The `eventSource` parameter provides origin validation by filtering messages
- * from specific sources. Guest UIs typically don't need to specify this (they only
- * communicate with their parent), but hosts should validate the iframe source for
- * security.
+ * The `eventSource` parameter is required and validates the message source window
+ * by checking `event.source`. For guest UIs, pass `window.parent`.
+ * For hosts, pass `iframe.contentWindow` to validate the iframe source.
  *
  * ## Usage
  *
- * **Guest UI (default)**:
+ * **Guest UI**:
  * ```typescript
- * const transport = new PostMessageTransport(window.parent);
+ * const transport = new PostMessageTransport(window.parent, window.parent);
  * await app.connect(transport);
  * ```
  *
- * **Host (with source validation)**:
+ * **Host**:
  * ```typescript
  * const iframe = document.getElementById('app-iframe') as HTMLIFrameElement;
  * const transport = new PostMessageTransport(
  *   iframe.contentWindow!,
- *   iframe.contentWindow  // Validate messages from this iframe only
+ *   iframe.contentWindow!
  * );
  * await bridge.connect(transport);
  * ```
  *
- * @see {@link app.App.connect} for Guest UI usage
- * @see {@link app-bridge.AppBridge.connect} for Host usage
+ * @see {@link app!App.connect} for Guest UI usage
+ * @see {@link app-bridge!AppBridge.connect} for Host usage
  */
 export declare class PostMessageTransport implements Transport {
     private eventTarget;
@@ -42,22 +41,21 @@ export declare class PostMessageTransport implements Transport {
     /**
      * Create a new PostMessageTransport.
      *
-     * @param eventTarget - Target window to send messages to (default: window.parent)
-     * @param eventSource - Optional source validation. If specified, only messages from
-     *   this source will be accepted. Guest UIs typically don't need this (they only
-     *   receive from parent), but hosts should validate the iframe source.
+     * @param eventTarget - Target window to send messages to (default: `window.parent`)
+     * @param eventSource - Source window for message validation. For guests, pass
+     *   `window.parent`. For hosts, pass `iframe.contentWindow`.
      *
      * @example Guest UI connecting to parent
      * ```typescript
-     * const transport = new PostMessageTransport(window.parent);
+     * const transport = new PostMessageTransport(window.parent, window.parent);
      * ```
      *
-     * @example Host connecting to iframe with validation
+     * @example Host connecting to iframe
      * ```typescript
      * const iframe = document.getElementById('app') as HTMLIFrameElement;
      * const transport = new PostMessageTransport(
      *   iframe.contentWindow!,
-     *   iframe.contentWindow  // Only accept messages from this iframe
+     *   iframe.contentWindow!
      * );
      * ```
      */
@@ -72,7 +70,7 @@ export declare class PostMessageTransport implements Transport {
     /**
      * Send a JSON-RPC message to the target window.
      *
-     * Messages are sent using postMessage with "*" origin, meaning they are visible
+     * Messages are sent using `postMessage` with `"*"` origin, meaning they are visible
      * to all frames. The receiver should validate the message source for security.
      *
      * @param message - JSON-RPC message to send
@@ -114,7 +112,7 @@ export declare class PostMessageTransport implements Transport {
      * Optional session identifier for this transport connection.
      *
      * Set by the MCP SDK to track the connection session. Not required for
-     * PostMessageTransport functionality.
+     * `PostMessageTransport` functionality.
      */
     sessionId?: string;
     /**