@nimblebrain/synapse 0.18.0 → 0.20.0

package/dist/synapse-ui.iife.global.js

@@ -1,6 +1,6 @@
-(function(){'use strict';var be=new Set(["auto","block","swap","fallback","optional"]),ke={"--color-background-primary":"#ffffff","--color-background-secondary":"#fafafa","--color-background-tertiary":"#f3f4f6","--color-text-primary":"#111827","--color-text-secondary":"#6b7280","--color-text-tertiary":"#9ca3af","--color-text-accent":"#2563eb","--nb-color-accent-foreground":"#ffffff","--color-border-primary":"#e5e7eb","--color-border-secondary":"#d1d5db","--color-ring-primary":"#2563eb","--nb-color-danger":"#dc2626","--nb-color-danger-foreground":"#ffffff","--nb-color-success":"#059669","--nb-color-warning":"#f59e0b","--nb-color-processing":"#7c3aed","--nb-color-processing-light":"#f3eeff","--nb-color-info-light":"#eef4ff"},Pe={"--color-background-primary":"#18181b","--color-background-secondary":"#27272a","--color-background-tertiary":"#2f2f34","--color-text-primary":"#fafafa","--color-text-secondary":"#a1a1aa","--color-text-tertiary":"#71717a","--color-text-accent":"#818cf8","--nb-color-accent-foreground":"#ffffff","--color-border-primary":"#3f3f46","--color-border-secondary":"#52525b","--color-ring-primary":"#818cf8","--nb-color-danger":"#f87171","--nb-color-danger-foreground":"#18181b","--nb-color-success":"#34d399","--nb-color-warning":"#fbbf24","--nb-color-processing":"#a78bfa","--nb-color-processing-light":"#2a2440","--nb-color-info-light":"#1e2a44"},Ee={light:ke,dark:Pe},Ie="synapse-defaults",G="synapse-theme-defaults",W=new Set;function ve(){return typeof document<"u"&&typeof document.getElementById=="function"&&typeof document.createElement=="function"&&typeof document.head?.prepend=="function"}function we(e){if(!ve())return;let o=Object.entries(Ee[e]).map(([a,p])=>`    ${a}: ${p};`).join(`
-`),n=`@layer ${Ie} {
+(function(){'use strict';function v(e,n){if(!e)return null;let a=e.getElementById(n)?.textContent;if(!a)return null;try{return JSON.parse(a)??null}catch{return null}}var ce={"--color-background-primary":"#ffffff","--color-background-secondary":"#fafafa","--color-background-tertiary":"#f3f4f6","--color-text-primary":"#111827","--color-text-secondary":"#6b7280","--color-text-tertiary":"#9ca3af","--color-text-accent":"#2563eb","--nb-color-accent-foreground":"#ffffff","--color-border-primary":"#e5e7eb","--color-border-secondary":"#d1d5db","--color-ring-primary":"#2563eb","--nb-color-danger":"#dc2626","--nb-color-danger-foreground":"#ffffff","--nb-color-success":"#059669","--nb-color-warning":"#f59e0b","--nb-color-processing":"#7c3aed","--nb-color-processing-light":"#f3eeff","--nb-color-info-light":"#eef4ff"},de={"--color-background-primary":"#18181b","--color-background-secondary":"#27272a","--color-background-tertiary":"#2f2f34","--color-text-primary":"#fafafa","--color-text-secondary":"#a1a1aa","--color-text-tertiary":"#71717a","--color-text-accent":"#818cf8","--nb-color-accent-foreground":"#ffffff","--color-border-primary":"#3f3f46","--color-border-secondary":"#52525b","--color-ring-primary":"#818cf8","--nb-color-danger":"#f87171","--nb-color-danger-foreground":"#18181b","--nb-color-success":"#34d399","--nb-color-warning":"#fbbf24","--nb-color-processing":"#a78bfa","--nb-color-processing-light":"#2a2440","--nb-color-info-light":"#1e2a44"},le={light:ce,dark:de},ue="synapse-defaults",D="synapse-theme-defaults",U=new Set;function pe(){return typeof document<"u"&&typeof document.getElementById=="function"&&typeof document.createElement=="function"&&typeof document.head?.prepend=="function"}function fe(e){if(!pe())return;let n=Object.entries(le[e]).map(([s,l])=>`    ${s}: ${l};`).join(`
+`),o=`@layer ${ue} {
   :root {
-${o}
+${n}
   }
-}`,s=document.getElementById(G);if(s){s.textContent!==n&&(s.textContent=n);return}let i=document.createElement("style");i.id=G,i.textContent=n,document.head.prepend(i);}function Ae(e,o){if(typeof document>"u")return;we(e);let n={};if(o&&typeof o=="object")for(let[i,a]of Object.entries(o))typeof i=="string"&&typeof a=="string"&&(n[i]=a);let s=document.documentElement.style;if(typeof s.removeProperty=="function")for(let i of W)i in n||s.removeProperty(i);for(let[i,a]of Object.entries(n))s.setProperty(i,a);W=new Set(Object.keys(n));}var F=new Set,Y="";function C(e){return Array.isArray(e)?JSON.stringify(e.map(o=>[o.family,o.src,o.weight,o.style,o.display])):""}function M(e){if(!Array.isArray(e))return;let o=e.filter(Oe);if(!(e.length>0&&o.length===0))return o}function Ce(e){let o=M(e);if(o===void 0||typeof document>"u"||!document.fonts||typeof FontFace>"u")return;let n=C(o);if(n!==Y){Y=n;for(let s of F)try{document.fonts.delete(s);}catch{}F.clear();for(let s of o)try{let i=new FontFace(s.family,s.src,{weight:s.weight,style:s.style,display:s.display&&be.has(s.display)?s.display:"swap"});document.fonts.add(i),F.add(i);}catch{}}}function Oe(e){if(!e||typeof e!="object")return  false;let o=e;return typeof o.family=="string"&&typeof o.src=="string"}function V(e,o,n){Ae(e,o),Ce(n);}function R(e){typeof document<"u"&&document.documentElement.setAttribute("data-theme",e.mode),V(e.mode,e.tokens,e.fontFaces);}function O(e){try{if(e?.matchMedia?.("(prefers-color-scheme: dark)").matches)return "dark"}catch{}return "light"}function h(e,o){return e==="light"||e==="dark"?e:o}var T=class extends Error{constructor(o,n){super(`"${o}" is not supported by the "${n}" host`),this.name="HostUnsupportedError";}},_="synapse-ui-data",Z="ui-lifecycle-iframe-ready",$="ui-lifecycle-iframe-render-data",B="ui-size-change",q="link",Q="prompt",U="openai:set_globals",X="2026-01-26",J="ui/initialize",ee="ui/notifications/initialized",te="ui/notifications/tool-result",ne="ui/notifications/host-context-changed",oe="ui/notifications/size-changed",re="ui/open-link",se="ui/message",ie="ui/resource-teardown",ae="tools/call";function ce(e,o){let n=()=>e.openai,s=n()?.toolOutput??null,i={mode:h(n()?.theme,"light"),tokens:{}},a=new Set,p=new Set,f=false,m=c=>{if(f)return;let l=c.detail?.globals;if(l){if("toolOutput"in l&&l.toolOutput!=null){s=l.toolOutput;for(let u of a)u(s);}if("theme"in l&&l.theme!=null){let u=h(l.theme,i.mode);if(u!==i.mode){i={mode:u,tokens:{}};for(let b of p)b(i);}}}};return {host:"chatgpt",getData:()=>s,onData(c){return a.add(c),()=>a.delete(c)},getTheme:()=>i,onTheme(c){return p.add(c),()=>p.delete(c)},async callTool(c,l){let u=n()?.callTool;if(!u)throw new T("callTool","chatgpt");return await u(c,l??{})},sendPrompt(c){let l=n();(l?.sendFollowUpMessage??l?.sendFollowupMessage)?.({prompt:c});},openLink(c){let l=n()?.openExternal;l?l({href:c}):e.open(c,"_blank","noopener,noreferrer");},resize(){},capabilities(){let c=n();return {pull:typeof c?.callTool=="function",sendPrompt:typeof c?.sendFollowUpMessage=="function"||typeof c?.sendFollowupMessage=="function",openLink:true}},start(){e.addEventListener(U,m,{passive:true}),s=n()?.toolOutput??s;},destroy(){f||(f=true,e.removeEventListener(U,m),a.clear(),p.clear());}}}function x(e,o){if(!e)return null;let s=e.getElementById(o)?.textContent;if(!s)return null;try{return JSON.parse(s)??null}catch{return null}}function L(e){if(e==null||typeof e!="object")return null;let o=e,n=o.renderData,s=n!=null&&typeof n=="object"?n:o;return s.toolOutput!=null?s.toolOutput:s.structuredContent!=null?s.structuredContent:s}function le(e,o){let n=o.dataElementId??_,s=null,i={mode:O(e),tokens:{}},a=new Set,p=false,f=null,m=c=>{if(p)return;let l=h(c.matches?"dark":"light",i.mode);if(l!==i.mode){i={mode:l,tokens:{}};for(let u of a)u(i);}};return {host:"generic",getData:()=>s,onData(){return ()=>{}},getTheme:()=>i,onTheme(c){return a.add(c),()=>a.delete(c)},async callTool(c){throw new T("callTool","generic")},sendPrompt(){},openLink(c){e.open(c,"_blank","noopener,noreferrer");},resize(){},capabilities(){return {pull:false,sendPrompt:false,openLink:true}},start(){s=x(e.document,n);try{f=e.matchMedia?.("(prefers-color-scheme: dark)")??null,f?.addEventListener?.("change",m);}catch{f=null;}},destroy(){p||(p=true,f?.removeEventListener?.("change",m),f=null,a.clear());}}}var _e="synapse/fontFaces";function xe(e){return M(e?.[_e])}function de(e,o){return xe(o)??e}var De=3e4;function pe(e,o){let n=o.dataElementId??_,s=o.autoResize!==false,i=null,a={mode:O(e),tokens:{}},p=new Set,f=new Set,m=false,c=false,l=1,u=new Map,b=-1,v=null,k=null,H=()=>e.parent??e;function P(t){H().postMessage(t,"*");}function D(t){c||P(t);}function N(t,r){P({jsonrpc:"2.0",method:t,params:r??{}});}function w(t,r){let d=l++;return new Promise((g,y)=>{let I=setTimeout(()=>{u.delete(d),y(new Error(`"${t}" timed out`));},De);u.set(d,{resolve:g,reject:y,timer:I}),P({jsonrpc:"2.0",id:d,method:t,params:r??{}});})}function z(t){if(t!=null){i=t;for(let r of p)r(t);}}function S(t){if(!t||typeof t!="object")return;let{mode:r,tokens:d,fontFaces:g}=a,y=false;if(t.theme!=null){let A=h(t.theme,r);A!==r&&(r=A,y=true);}let I=t.styles;I?.variables&&typeof I.variables=="object"&&(d={...d,...I.variables},y=true);let K=de(g,t);if(C(K)!==C(g)&&(g=K,y=true),y){a={mode:r,tokens:d,...g?{fontFaces:g}:{}};for(let A of f)A(a);}}function E(t){if(m)return;let r=typeof t=="number"?t:Math.ceil(e.document.body.scrollHeight);r!==b&&(b=r,N(oe,{height:r}),D({type:B,payload:{height:r}}));}function me(t){let r=Number(t.id),d=u.get(r);if(d)if(u.delete(r),clearTimeout(d.timer),t.error!=null){let g=t.error;d.reject(new Error(g.message??"request failed"));}else d.resolve(t.result);}function ge(t,r){if(t===te){let d=r.structuredContent;z(d??L(r));}else t===ne&&S(r);}function ye(t){t.method===ie&&P({jsonrpc:"2.0",id:t.id,result:{}});}function he(t){if(t.type===$||t.type==="renderData"){let{theme:r,...d}=t.payload??{};r!=null&&S({theme:r}),Object.keys(d).length>0&&z(L(d));}}let j=t=>{if(m||t.source&&t.source!==H())return;let r=t.data;if(!(!r||typeof r!="object")){if(r.jsonrpc!=="2.0"){he(r);return}r.id!=null&&("result"in r||"error"in r)?me(r):typeof r.method=="string"&&(r.id!=null?ye(r):ge(r.method,r.params??{}));}};function Te(){k=()=>E(),e.addEventListener("resize",k),typeof e.ResizeObserver<"u"&&(v=new e.ResizeObserver(()=>E()),v.observe(e.document.body));}return {host:"claude",getData:()=>i,onData(t){return p.add(t),()=>p.delete(t)},getTheme:()=>a,onTheme(t){return f.add(t),()=>f.delete(t)},async callTool(t,r){return await w(ae,{name:t,arguments:r??{}})},sendPrompt(t){w(se,{role:"user",content:[{type:"text",text:t}]}).catch(()=>{}),D({type:Q,payload:{prompt:t}});},openLink(t){w(re,{url:t}).catch(()=>{}),D({type:q,payload:{url:t}});},resize(t){E(t);},capabilities(){return {pull:true,sendPrompt:true,openLink:true}},start(){e.addEventListener("message",j),i=x(e.document,n),s&&Te(),P({type:Z}),w(J,{appInfo:{name:o.name??"synapse-ui",version:o.version??"0.0.0"},appCapabilities:{availableDisplayModes:["inline"]},protocolVersion:X}).then(t=>{m||(c=true,S(t?.hostContext),N(ee,{}),b=-1,E());}).catch(()=>{}),E();},destroy(){if(!m){m=true,e.removeEventListener("message",j),k&&e.removeEventListener("resize",k),k=null,v?.disconnect(),v=null;for(let t of u.values())clearTimeout(t.timer),t.reject(new Error("adapter destroyed"));u.clear(),p.clear(),f.clear();}}}}function Se(e){if(e.openai!=null)return "chatgpt";try{if(e.parent!=null&&e.parent!==e)return "claude"}catch{return "claude"}return "generic"}function Fe(e,o,n){switch(e){case "chatgpt":return ce(o);case "claude":case "nimblebrain":return pe(o,n);default:return le(o,n)}}function ue(e,o){let n=o.host??Se(e);return Fe(n,e,o)}function fe(e={}){let o=e.window??globalThis,n=ue(o,e);R(n.getTheme());let s=n.onTheme(R);n.start();let i=false;return {data:()=>n.getData(),onData:a=>n.onData(a),theme:()=>n.getTheme(),onTheme:a=>n.onTheme(a),callTool:(a,p)=>n.callTool(a,p),sendPrompt:a=>n.sendPrompt(a),openLink:a=>n.openLink(a),resize:a=>n.resize(a),capabilities:()=>n.capabilities(),host:()=>n.host,destroy(){i||(i=true,s(),n.destroy());}}}globalThis.SynapseUI={connect:fe};})();
+}`,a=document.getElementById(D);if(a){a.textContent!==o&&(a.textContent=o);return}let i=document.createElement("style");i.id=D,i.textContent=o,document.head.prepend(i);}function me(e,n){if(typeof document>"u")return;fe(e);let o={};if(n&&typeof n=="object")for(let[i,s]of Object.entries(n))typeof i=="string"&&typeof s=="string"&&(o[i]=s);let a=document.documentElement.style;if(typeof a.removeProperty=="function")for(let i of U)i in o||a.removeProperty(i);for(let[i,s]of Object.entries(o))a.setProperty(i,s);U=new Set(Object.keys(o));}function N(e,n){me(e,n);}function O(e){typeof document<"u"&&document.documentElement.setAttribute("data-theme",e.mode),N(e.mode,e.tokens);}var z="__mcp-host-fonts";function j(e){if(typeof document>"u"||document.getElementById(z))return;let n=document.createElement("style");n.id=z,n.textContent=e,document.head.appendChild(n);}function I(e){try{if(e?.matchMedia?.("(prefers-color-scheme: dark)").matches)return "dark"}catch{}return "light"}function C(e,n){return e==="light"||e==="dark"?e:n}var A=class extends Error{constructor(n,o){super(`"${n}" is not supported by the "${o}" host`),this.name="HostUnsupportedError";}},x=class extends Error{result;constructor(n,o){super(ge(o)??`tool "${n}" returned an error`),this.name="ToolCallError",this.result=o;}};function ge(e){let n=e?.content;if(Array.isArray(n))for(let o of n){let a=o;if(a?.type==="text"&&typeof a.text=="string"&&a.text!=="")return a.text}}function K(e){return e!=null&&typeof e=="object"&&e.isError===true}var w="synapse-ui-data",W="2026-01-26",F="ui/initialize",$="ui/notifications/initialized",G="ui/notifications/tool-result",Y="ui/notifications/host-context-changed",Z="ui/notifications/size-changed",q="ui/open-link",B="ui/message",Q="ui/resource-teardown",V="tools/call";function X(e,n){let o=n.dataElementId??w,a=null,i={mode:I(e),tokens:{}},s=new Set,l=false,d=null,p=u=>{if(l)return;let T=C(u.matches?"dark":"light",i.mode);if(T!==i.mode){i={mode:T,tokens:{}};for(let f of s)f(i);}};return {host:"generic",getData:()=>a,onData(){return ()=>{}},getTheme:()=>i,onTheme(u){return s.add(u),()=>s.delete(u)},async callTool(u){throw new A("callTool","generic")},sendPrompt(){},openLink(u){e.open(u,"_blank","noopener,noreferrer");},resize(){},capabilities(){return {pull:false,sendPrompt:false,openLink:true}},start(){a=v(e.document,o);try{d=e.matchMedia?.("(prefers-color-scheme: dark)")??null,d?.addEventListener?.("change",p);}catch{d=null;}},destroy(){l||(l=true,d?.removeEventListener?.("change",p),d=null,s.clear());}}}function J(e){let n=e?.styles?.css?.fonts;return typeof n=="string"&&n!==""?n:void 0}var ye=3e4;function ee(e,n){let o=n.dataElementId??w,a=n.autoResize!==false,i=null,s={mode:I(e),tokens:{}},l=new Set,d=new Set,p=false,u=false,T=1,f=new Map,S=-1,b=null,y=null,M=()=>e.parent??e;function _(t){M().postMessage(t,"*");}function R(t,r){_({jsonrpc:"2.0",method:t,params:r??{}});}function k(t,r){let c=T++;return new Promise((m,g)=>{let h=setTimeout(()=>{f.delete(c),g(new Error(`"${t}" timed out`));},ye);f.set(c,{resolve:m,reject:g,timer:h}),_({jsonrpc:"2.0",id:c,method:t,params:r??{}});})}function oe(t){if(t!=null){i=t;for(let r of l)r(t);}}function L(t){if(!t||typeof t!="object")return;let r=J(t);r!==void 0&&j(r);let{mode:c,tokens:m}=s,g=false;if(t.theme!=null){let P=C(t.theme,c);P!==c&&(c=P,g=true);}let h=t.styles;if(h?.variables&&typeof h.variables=="object"&&(m={...m,...h.variables},g=true),g){s={mode:c,tokens:m};for(let P of d)P(s);}}function E(t){if(p||!u)return;let r=typeof t=="number"?t:Math.ceil(e.document.body.scrollHeight);r!==S&&(S=r,R(Z,{height:r}));}function re(t){let r=Number(t.id),c=f.get(r);if(c)if(f.delete(r),clearTimeout(c.timer),t.error!=null){let m=t.error;c.reject(new Error(m.message??"request failed"));}else c.resolve(t.result);}function se(t,r){if(t===G){let c=r.structuredContent;oe(c??r);}else t===Y&&L(r);}function ie(t){t.method===Q&&_({jsonrpc:"2.0",id:t.id,result:{}});}let H=t=>{if(p||t.source&&t.source!==M())return;let r=t.data;!r||typeof r!="object"||r.jsonrpc!=="2.0"||(r.id!=null&&("result"in r||"error"in r)?re(r):typeof r.method=="string"&&(r.id!=null?ie(r):se(r.method,r.params??{})));};function ae(){y=()=>E(),e.addEventListener("resize",y),typeof e.ResizeObserver<"u"&&(b=new e.ResizeObserver(()=>E()),b.observe(e.document.body));}return {host:"mcp-apps",getData:()=>i,onData(t){return l.add(t),()=>l.delete(t)},getTheme:()=>s,onTheme(t){return d.add(t),()=>d.delete(t)},async callTool(t,r){return await k(V,{name:t,arguments:r??{}})},sendPrompt(t){k(B,{role:"user",content:[{type:"text",text:t}]}).catch(()=>{});},openLink(t){k(q,{url:t}).catch(()=>{});},resize(t){E(t);},capabilities(){return {pull:true,sendPrompt:true,openLink:true}},start(){e.addEventListener("message",H),i=v(e.document,o),a&&ae(),k(F,{appInfo:{name:n.name??"synapse-ui",version:n.version??"0.0.0"},appCapabilities:{availableDisplayModes:["inline"]},protocolVersion:W}).then(t=>{p||(L(t?.hostContext),R($,{}),u=true,E());}).catch(()=>{});},destroy(){if(!p){p=true,e.removeEventListener("message",H),y&&e.removeEventListener("resize",y),y=null,b?.disconnect(),b=null;for(let t of f.values())clearTimeout(t.timer),t.reject(new Error("adapter destroyed"));f.clear(),l.clear(),d.clear();}}}}function he(e){try{if(e.parent!=null&&e.parent!==e)return "mcp-apps"}catch{return "mcp-apps"}return "generic"}function Te(e,n,o){if(e==="mcp-apps")return ee(n,o);if(e==="generic")return X(n,o);throw new TypeError(`unknown host "${String(e)}": expected "mcp-apps" or "generic"`)}function te(e,n){let o=n.host??he(e);return Te(o,e,n)}function ne(e={}){let n=e.window??globalThis,o=te(n,e);O(o.getTheme());let a=o.onTheme(O);o.start();let i=false;return {data:()=>o.getData(),onData:s=>o.onData(s),theme:()=>o.getTheme(),onTheme:s=>o.onTheme(s),async callTool(s,l){let d=await o.callTool(s,l);if(K(d))throw new x(s,d);return d},sendPrompt:s=>o.sendPrompt(s),openLink:s=>o.openLink(s),resize:s=>o.resize(s),capabilities:()=>o.capabilities(),host:()=>o.host,destroy(){i||(i=true,a(),o.destroy());}}}globalThis.SynapseUI={connect:ne};})();

package/dist/{types-uEO4VFJ2.d.cts → types-BxPfGHKO.d.cts}

@@ -1,9 +1,10 @@
-import { McpUiHostContext } from '@modelcontextprotocol/ext-apps';
+import { McpUiHostContext, McpUiHostCapabilities } from '@modelcontextprotocol/ext-apps';
 import { ReadResourceRequest, ReadResourceResult, Task } from '@modelcontextprotocol/sdk/types.js';
 
 /**
  * Shape of the `tasks` capability advertised in `appCapabilities` on the
- * iframe side (and mirrored back by the host in `hostCapabilities.tasks`).
+ * iframe side, and mirrored back by the host in `hostCapabilities.experimental`
+ * under the MCP Tasks extension identifier (see `readHostTasksCapability`).
  *
  * Matches the MCP 2025-11-25 tasks utility: empty objects (`{}`) are used
  * as presence flags — NOT booleans — so future sub-fields can be added
@@ -46,13 +47,6 @@ interface CallToolAsTaskOptions {
      * "unlimited" explicitly.
      */
     ttl?: number;
-    /**
-     * Route the call through the internal-apps cross-server authz path
-     * (adds `params.server` set to this app's name). External apps MUST
-     * NOT pass this; spec doesn't touch it — it's a NimbleBrain-specific
-     * bridge convention mirroring `callTool`'s behavior.
-     */
-    internal?: boolean;
 }
 /**
  * Handle returned by `synapse.callToolAsTask`. Lifecycle mirrors the MCP
@@ -100,93 +94,9 @@ interface TaskHandle<TOutput = unknown> {
     onStatus(cb: (task: Task) => void): () => void;
 }
 
-/**
- * One `@font-face` a host asks the app to load.
- *
- * The token contract can name a font (`--font-sans: 'Hanken Grotesk', system-ui`)
- * but cannot *load* one — a CSS custom property carries a family name, never the
- * `@font-face` rule behind it. An app iframe is its own document and inherits no
- * `@font-face` from the host page, so a host that only sends tokens is naming a
- * family the app has no way to render. This descriptor is the missing half.
- *
- * The SDK ships **no font data** — it applies what the host sends. A host that
- * sends none leaves the web-safe fallbacks in `ui/tokens.ts` in force.
- */
-interface FontFaceDescriptor {
-    /** Family name, matching the one used in the host's `--font-*` token value. */
-    family: string;
-    /**
-     * CSS `src` descriptor. Local and absolute URLs work identically —
-     * `url('/fonts/x.woff2') format('woff2')` or `url('https://cdn.example/x.woff2')`.
-     * Whatever origin this names must satisfy the app iframe's `font-src` CSP.
-     */
-    src: string;
-    /** `font-weight` descriptor — a single weight (`400`) or a variable range (`400 700`). */
-    weight?: string;
-    /** `font-style` descriptor (`normal`, `italic`, …). */
-    style?: string;
-    /** `font-display` descriptor. Defaults to `swap` so text paints in the fallback first. */
-    display?: FontDisplayValue;
-}
-/** The CSS `font-display` values. Closed set — anything else is ignored. */
-type FontDisplayValue = "auto" | "block" | "swap" | "fallback" | "optional";
 interface Theme {
     mode: "light" | "dark";
     tokens: Record<string, string>;
-    /**
-     * Font faces the host wants loaded into the app document. Optional — a host
-     * that omits them leaves the web-safe fallbacks in force. Arrives over the
-     * wire as the `synapse/fontFaces` host-context extension.
-     */
-    fontFaces?: FontFaceDescriptor[];
-}
-interface DataChangedEvent {
-    source: "agent";
-    server: string;
-    tool: string;
-}
-/**
- * Built-in action types that Synapse handles natively.
- *
- * - `navigate` — select/focus a resource in the UI (e.g., a board, document, record)
- * - `notify`   — display a transient message (toast/banner)
- * - `refresh`  — force a full data refresh (heavier than datachanged)
- * - `confirm`  — request user confirmation before the agent proceeds
- *
- * Apps may also receive custom string types for domain-specific actions.
- */
-type BuiltinActionType = "navigate" | "notify" | "refresh" | "confirm";
-/**
- * A typed, declarative action sent from the agent/server to the UI.
- *
- * Actions are deterministic side effects of tool execution — the tool decides
- * what action to emit, not the LLM. The UI decides how to handle it.
- *
- * This mirrors Studio's ClientAction pattern, adapted for iframe postMessage.
- */
-interface AgentAction<TPayload = Record<string, unknown>> {
-    /** Discriminator — a BuiltinActionType or custom string. */
-    type: BuiltinActionType | (string & {});
-    /** Typed payload — shape depends on `type`. */
-    payload: TPayload;
-    /** If true, the UI should confirm with the user before executing. */
-    requiresConfirmation?: boolean;
-    /** Human-readable label for confirmation dialogs or logs. */
-    label?: string;
-}
-/** Payload for the built-in "navigate" action. */
-interface NavigatePayload {
-    /** Entity type (e.g., "board", "document", "task"). */
-    entity: string;
-    /** Entity ID to select/focus. */
-    id: string;
-    /** Optional sub-view or section within the entity. */
-    view?: string;
-}
-/** Payload for the built-in "notify" action. */
-interface NotifyPayload {
-    message: string;
-    level?: "info" | "success" | "warning" | "error";
 }
 interface ToolCallResult<T = unknown> {
     data: T;
@@ -254,11 +164,6 @@ interface ToolDefinition {
     inputSchema: Record<string, unknown>;
     outputSchema?: Record<string, unknown>;
 }
-interface HostInfo {
-    isNimbleBrain: boolean;
-    serverName: string;
-    protocolVersion: string;
-}
 interface ConnectOptions {
     /** App name — must match the bundle name registered with the host. */
     name: string;
@@ -266,12 +171,6 @@ interface ConnectOptions {
     version: string;
     /** Track the document height and re-send `size-changed` as it moves. */
     autoResize?: boolean;
-    /**
-     * Mark as an internal NimbleBrain app. Enables cross-server tool calls:
-     * `callTool` carries a `server` param so the host can route the call to a
-     * sibling server. External apps MUST NOT set this.
-     */
-    internal?: boolean;
     /**
      * Forward keyboard shortcuts from this iframe up to the host, so the host's
      * own shortcuts still fire while focus is inside the app.
@@ -280,8 +179,8 @@ interface ConnectOptions {
      * the clipboard keys the browser must handle itself); an array forwards
      * exactly the listed combos. Absent means no forwarding.
      *
-     * Only a NimbleBrain host consumes `synapse/keydown`, so forwarding stays
-     * off everywhere else — a `preventDefault` on a host that does nothing with
+     * Forwarding is on only where the host declares `ai.nimblebrain/keydown`, and
+     * stays off everywhere else — a `preventDefault` on a host that does nothing with
      * the key would swallow it for no one's benefit.
      */
     forwardKeys?: boolean | KeyForwardConfig[];
@@ -300,25 +199,15 @@ interface ToolResultData {
     structuredContent: unknown;
     raw: Record<string, unknown>;
 }
-/** Per-call overrides for {@link App.callTool}. */
-interface CallToolOptions {
-    /**
-     * Route the call to a sibling MCP server rather than the app's own.
-     * Internal apps only — the host rejects it otherwise. Defaults to this
-     * app's name when `connect({ internal: true })` was used, which is what
-     * makes a plain `callTool` work for an internal app.
-     */
-    server?: string;
-}
 /** Known short event names for {@link App.on}. */
-type AppEventName = "tool-result" | "tool-input" | "tool-input-partial" | "tool-cancelled" | "theme-changed" | "host-context-changed" | "data-changed" | "action" | "teardown";
+type AppEventName = "tool-result" | "tool-input" | "tool-input-partial" | "tool-cancelled" | "theme-changed" | "host-context-changed" | "teardown";
 /**
  * A connected app — what `connect()` resolves to, and the only runtime object
  * this SDK hands out.
  *
  * Deliberately small: it carries the ext-apps spec surface plus the state the
  * handshake established. NimbleBrain's own extensions (the file picker,
- * `action`, `downloadFile`) and the MCP tasks utility are composable functions
+ * `action`), `downloadFile` and the MCP tasks utility are composable functions
  * over this object rather than more methods on it.
  */
 interface App {
@@ -339,7 +228,20 @@ interface App {
      * host-specific fields as optional; another host will not send them.
      */
     readonly hostContext: McpUiHostContext;
-    /** True when the host identified itself as NimbleBrain in the handshake. */
+    /**
+     * What the host declared it supports, from the `ui/initialize` result. Every
+     * method here and every helper beside it checks this before it sends, and
+     * degrades in a documented way when the capability is absent. Read it to
+     * decide what to offer at all, rather than to find out from a no-op or an
+     * exception. NimbleBrain extensions are declared under `experimental`; see
+     * `hostSupports`.
+     */
+    readonly hostCapabilities: McpUiHostCapabilities;
+    /**
+     * True when the host identified itself as NimbleBrain in the handshake.
+     * Identity, not capability: nothing is gated on it except the NimbleBrain
+     * chat context on `sendMessage` (`_meta["ai.nimblebrain/context"]`), which other hosts ignore.
+     */
     readonly isNimbleBrainHost: boolean;
     /** True after `destroy()` has been called. */
     readonly destroyed: boolean;
@@ -359,11 +261,14 @@ interface App {
      *  notification exactly as sent, subscribe to the wire method instead:
      *  `on("ui/notifications/host-context-changed", …)`. */
     on(event: "host-context-changed", handler: (ctx: McpUiHostContext) => void): () => void;
-    on(event: "data-changed", handler: (event: DataChangedEvent) => void): () => void;
-    on(event: "action", handler: (action: AgentAction) => void): () => void;
     on(event: "teardown", handler: () => void): () => void;
     on(event: string, handler: (params: any) => void): () => void;
+    /** Report the frame's size (`ui/notifications/size-changed`). Every host accepts it. */
     resize(width?: number, height?: number): void;
+    /**
+     * Open a URL through the host (`ui/open-link`). Without `openLinks`, or when
+     * the host refuses, opens it with `window.open` instead.
+     */
     openLink(url: string): void;
     /**
      * Push the app's visible state to the agent (ext-apps
@@ -371,17 +276,35 @@ interface App {
      * `state` rides along as `structuredContent` for tools that need the ids.
      *
      * Sends immediately. Callers that push on every keystroke or selection
-     * change want `useModelContext`, which debounces.
+     * change want `useModelContext`, which debounces. A no-op when the host did
+     * not declare `updateModelContext`.
      */
     updateModelContext(state: Record<string, unknown>, summary?: string): void;
-    callTool<TOutput = unknown>(name: string, args?: Record<string, unknown>, options?: CallToolOptions): Promise<ToolCallResult<TOutput>>;
+    /**
+     * Call a tool on this app's own MCP server.
+     *
+     * An app reaches its own server and nothing else. A host scopes every call
+     * to the server that mounted the app, so there is no target to name and no
+     * option to pass — cross-source work belongs to the agent, which can call
+     * two servers and hand one's result to the other.
+     *
+     * Rejects with `HostCapabilityError`, without sending, when the host did not
+     * declare `serverTools`.
+     */
+    callTool<TOutput = unknown>(name: string, args?: Record<string, unknown>): Promise<ToolCallResult<TOutput>>;
     /**
      * Read an MCP resource from the originating server via the host bridge
      * (ext-apps `resources/read`). Named to mirror the ext-apps spec's
      * `App.readServerResource`.
+     *
+     * Rejects with `HostCapabilityError`, without sending, when the host did not
+     * declare `serverResources`.
      */
     readServerResource(params: ReadResourceRequest["params"]): Promise<ReadResourceResult>;
-    /** Send a user message into the agent conversation (ext-apps `ui/message`). */
+    /**
+     * Send a user message into the agent conversation (ext-apps `ui/message`).
+     * A no-op when the host did not declare `message`.
+     */
     sendMessage(text: string, context?: {
         action?: string;
         entity?: string;
@@ -389,4 +312,4 @@ interface App {
     destroy(): void;
 }
 
-export type { App as A, BuiltinActionType as B, ConnectOptions as C, DataChangedEvent as D, FileResult as F, HostInfo as H, KeyForwardConfig as K, ModelContext as M, NavigatePayload as N, RequestFileOptions as R, TaskHandle as T, CallToolAsTaskOptions as a, ToolCallResult as b, CallToolOptions as c, Theme as d, ToolResultData as e, ToolDefinition as f, FontFaceDescriptor as g, AgentAction as h, AppEventName as i, Dimensions as j, FontDisplayValue as k, NotifyPayload as l, TasksCapability as m };
+export type { App as A, ConnectOptions as C, Dimensions as D, FileResult as F, KeyForwardConfig as K, ModelContext as M, RequestFileOptions as R, TaskHandle as T, CallToolAsTaskOptions as a, ToolCallResult as b, Theme as c, ToolResultData as d, ToolDefinition as e, AppEventName as f, TasksCapability as g };

package/dist/{types-uEO4VFJ2.d.ts → types-BxPfGHKO.d.ts}

@@ -1,9 +1,10 @@
-import { McpUiHostContext } from '@modelcontextprotocol/ext-apps';
+import { McpUiHostContext, McpUiHostCapabilities } from '@modelcontextprotocol/ext-apps';
 import { ReadResourceRequest, ReadResourceResult, Task } from '@modelcontextprotocol/sdk/types.js';
 
 /**
  * Shape of the `tasks` capability advertised in `appCapabilities` on the
- * iframe side (and mirrored back by the host in `hostCapabilities.tasks`).
+ * iframe side, and mirrored back by the host in `hostCapabilities.experimental`
+ * under the MCP Tasks extension identifier (see `readHostTasksCapability`).
  *
  * Matches the MCP 2025-11-25 tasks utility: empty objects (`{}`) are used
  * as presence flags — NOT booleans — so future sub-fields can be added
@@ -46,13 +47,6 @@ interface CallToolAsTaskOptions {
      * "unlimited" explicitly.
      */
     ttl?: number;
-    /**
-     * Route the call through the internal-apps cross-server authz path
-     * (adds `params.server` set to this app's name). External apps MUST
-     * NOT pass this; spec doesn't touch it — it's a NimbleBrain-specific
-     * bridge convention mirroring `callTool`'s behavior.
-     */
-    internal?: boolean;
 }
 /**
  * Handle returned by `synapse.callToolAsTask`. Lifecycle mirrors the MCP
@@ -100,93 +94,9 @@ interface TaskHandle<TOutput = unknown> {
     onStatus(cb: (task: Task) => void): () => void;
 }
 
-/**
- * One `@font-face` a host asks the app to load.
- *
- * The token contract can name a font (`--font-sans: 'Hanken Grotesk', system-ui`)
- * but cannot *load* one — a CSS custom property carries a family name, never the
- * `@font-face` rule behind it. An app iframe is its own document and inherits no
- * `@font-face` from the host page, so a host that only sends tokens is naming a
- * family the app has no way to render. This descriptor is the missing half.
- *
- * The SDK ships **no font data** — it applies what the host sends. A host that
- * sends none leaves the web-safe fallbacks in `ui/tokens.ts` in force.
- */
-interface FontFaceDescriptor {
-    /** Family name, matching the one used in the host's `--font-*` token value. */
-    family: string;
-    /**
-     * CSS `src` descriptor. Local and absolute URLs work identically —
-     * `url('/fonts/x.woff2') format('woff2')` or `url('https://cdn.example/x.woff2')`.
-     * Whatever origin this names must satisfy the app iframe's `font-src` CSP.
-     */
-    src: string;
-    /** `font-weight` descriptor — a single weight (`400`) or a variable range (`400 700`). */
-    weight?: string;
-    /** `font-style` descriptor (`normal`, `italic`, …). */
-    style?: string;
-    /** `font-display` descriptor. Defaults to `swap` so text paints in the fallback first. */
-    display?: FontDisplayValue;
-}
-/** The CSS `font-display` values. Closed set — anything else is ignored. */
-type FontDisplayValue = "auto" | "block" | "swap" | "fallback" | "optional";
 interface Theme {
     mode: "light" | "dark";
     tokens: Record<string, string>;
-    /**
-     * Font faces the host wants loaded into the app document. Optional — a host
-     * that omits them leaves the web-safe fallbacks in force. Arrives over the
-     * wire as the `synapse/fontFaces` host-context extension.
-     */
-    fontFaces?: FontFaceDescriptor[];
-}
-interface DataChangedEvent {
-    source: "agent";
-    server: string;
-    tool: string;
-}
-/**
- * Built-in action types that Synapse handles natively.
- *
- * - `navigate` — select/focus a resource in the UI (e.g., a board, document, record)
- * - `notify`   — display a transient message (toast/banner)
- * - `refresh`  — force a full data refresh (heavier than datachanged)
- * - `confirm`  — request user confirmation before the agent proceeds
- *
- * Apps may also receive custom string types for domain-specific actions.
- */
-type BuiltinActionType = "navigate" | "notify" | "refresh" | "confirm";
-/**
- * A typed, declarative action sent from the agent/server to the UI.
- *
- * Actions are deterministic side effects of tool execution — the tool decides
- * what action to emit, not the LLM. The UI decides how to handle it.
- *
- * This mirrors Studio's ClientAction pattern, adapted for iframe postMessage.
- */
-interface AgentAction<TPayload = Record<string, unknown>> {
-    /** Discriminator — a BuiltinActionType or custom string. */
-    type: BuiltinActionType | (string & {});
-    /** Typed payload — shape depends on `type`. */
-    payload: TPayload;
-    /** If true, the UI should confirm with the user before executing. */
-    requiresConfirmation?: boolean;
-    /** Human-readable label for confirmation dialogs or logs. */
-    label?: string;
-}
-/** Payload for the built-in "navigate" action. */
-interface NavigatePayload {
-    /** Entity type (e.g., "board", "document", "task"). */
-    entity: string;
-    /** Entity ID to select/focus. */
-    id: string;
-    /** Optional sub-view or section within the entity. */
-    view?: string;
-}
-/** Payload for the built-in "notify" action. */
-interface NotifyPayload {
-    message: string;
-    level?: "info" | "success" | "warning" | "error";
 }
 interface ToolCallResult<T = unknown> {
     data: T;
@@ -254,11 +164,6 @@ interface ToolDefinition {
     inputSchema: Record<string, unknown>;
     outputSchema?: Record<string, unknown>;
 }
-interface HostInfo {
-    isNimbleBrain: boolean;
-    serverName: string;
-    protocolVersion: string;
-}
 interface ConnectOptions {
     /** App name — must match the bundle name registered with the host. */
     name: string;
@@ -266,12 +171,6 @@ interface ConnectOptions {
     version: string;
     /** Track the document height and re-send `size-changed` as it moves. */
     autoResize?: boolean;
-    /**
-     * Mark as an internal NimbleBrain app. Enables cross-server tool calls:
-     * `callTool` carries a `server` param so the host can route the call to a
-     * sibling server. External apps MUST NOT set this.
-     */
-    internal?: boolean;
     /**
      * Forward keyboard shortcuts from this iframe up to the host, so the host's
      * own shortcuts still fire while focus is inside the app.
@@ -280,8 +179,8 @@ interface ConnectOptions {
      * the clipboard keys the browser must handle itself); an array forwards
      * exactly the listed combos. Absent means no forwarding.
      *
-     * Only a NimbleBrain host consumes `synapse/keydown`, so forwarding stays
-     * off everywhere else — a `preventDefault` on a host that does nothing with
+     * Forwarding is on only where the host declares `ai.nimblebrain/keydown`, and
+     * stays off everywhere else — a `preventDefault` on a host that does nothing with
      * the key would swallow it for no one's benefit.
      */
     forwardKeys?: boolean | KeyForwardConfig[];
@@ -300,25 +199,15 @@ interface ToolResultData {
     structuredContent: unknown;
     raw: Record<string, unknown>;
 }
-/** Per-call overrides for {@link App.callTool}. */
-interface CallToolOptions {
-    /**
-     * Route the call to a sibling MCP server rather than the app's own.
-     * Internal apps only — the host rejects it otherwise. Defaults to this
-     * app's name when `connect({ internal: true })` was used, which is what
-     * makes a plain `callTool` work for an internal app.
-     */
-    server?: string;
-}
 /** Known short event names for {@link App.on}. */
-type AppEventName = "tool-result" | "tool-input" | "tool-input-partial" | "tool-cancelled" | "theme-changed" | "host-context-changed" | "data-changed" | "action" | "teardown";
+type AppEventName = "tool-result" | "tool-input" | "tool-input-partial" | "tool-cancelled" | "theme-changed" | "host-context-changed" | "teardown";
 /**
  * A connected app — what `connect()` resolves to, and the only runtime object
  * this SDK hands out.
  *
  * Deliberately small: it carries the ext-apps spec surface plus the state the
  * handshake established. NimbleBrain's own extensions (the file picker,
- * `action`, `downloadFile`) and the MCP tasks utility are composable functions
+ * `action`), `downloadFile` and the MCP tasks utility are composable functions
  * over this object rather than more methods on it.
  */
 interface App {
@@ -339,7 +228,20 @@ interface App {
      * host-specific fields as optional; another host will not send them.
      */
     readonly hostContext: McpUiHostContext;
-    /** True when the host identified itself as NimbleBrain in the handshake. */
+    /**
+     * What the host declared it supports, from the `ui/initialize` result. Every
+     * method here and every helper beside it checks this before it sends, and
+     * degrades in a documented way when the capability is absent. Read it to
+     * decide what to offer at all, rather than to find out from a no-op or an
+     * exception. NimbleBrain extensions are declared under `experimental`; see
+     * `hostSupports`.
+     */
+    readonly hostCapabilities: McpUiHostCapabilities;
+    /**
+     * True when the host identified itself as NimbleBrain in the handshake.
+     * Identity, not capability: nothing is gated on it except the NimbleBrain
+     * chat context on `sendMessage` (`_meta["ai.nimblebrain/context"]`), which other hosts ignore.
+     */
     readonly isNimbleBrainHost: boolean;
     /** True after `destroy()` has been called. */
     readonly destroyed: boolean;
@@ -359,11 +261,14 @@ interface App {
      *  notification exactly as sent, subscribe to the wire method instead:
      *  `on("ui/notifications/host-context-changed", …)`. */
     on(event: "host-context-changed", handler: (ctx: McpUiHostContext) => void): () => void;
-    on(event: "data-changed", handler: (event: DataChangedEvent) => void): () => void;
-    on(event: "action", handler: (action: AgentAction) => void): () => void;
     on(event: "teardown", handler: () => void): () => void;
     on(event: string, handler: (params: any) => void): () => void;
+    /** Report the frame's size (`ui/notifications/size-changed`). Every host accepts it. */
     resize(width?: number, height?: number): void;
+    /**
+     * Open a URL through the host (`ui/open-link`). Without `openLinks`, or when
+     * the host refuses, opens it with `window.open` instead.
+     */
     openLink(url: string): void;
     /**
      * Push the app's visible state to the agent (ext-apps
@@ -371,17 +276,35 @@ interface App {
      * `state` rides along as `structuredContent` for tools that need the ids.
      *
      * Sends immediately. Callers that push on every keystroke or selection
-     * change want `useModelContext`, which debounces.
+     * change want `useModelContext`, which debounces. A no-op when the host did
+     * not declare `updateModelContext`.
      */
     updateModelContext(state: Record<string, unknown>, summary?: string): void;
-    callTool<TOutput = unknown>(name: string, args?: Record<string, unknown>, options?: CallToolOptions): Promise<ToolCallResult<TOutput>>;
+    /**
+     * Call a tool on this app's own MCP server.
+     *
+     * An app reaches its own server and nothing else. A host scopes every call
+     * to the server that mounted the app, so there is no target to name and no
+     * option to pass — cross-source work belongs to the agent, which can call
+     * two servers and hand one's result to the other.
+     *
+     * Rejects with `HostCapabilityError`, without sending, when the host did not
+     * declare `serverTools`.
+     */
+    callTool<TOutput = unknown>(name: string, args?: Record<string, unknown>): Promise<ToolCallResult<TOutput>>;
     /**
      * Read an MCP resource from the originating server via the host bridge
      * (ext-apps `resources/read`). Named to mirror the ext-apps spec's
      * `App.readServerResource`.
+     *
+     * Rejects with `HostCapabilityError`, without sending, when the host did not
+     * declare `serverResources`.
      */
     readServerResource(params: ReadResourceRequest["params"]): Promise<ReadResourceResult>;
-    /** Send a user message into the agent conversation (ext-apps `ui/message`). */
+    /**
+     * Send a user message into the agent conversation (ext-apps `ui/message`).
+     * A no-op when the host did not declare `message`.
+     */
     sendMessage(text: string, context?: {
         action?: string;
         entity?: string;
@@ -389,4 +312,4 @@ interface App {
     destroy(): void;
 }
 
-export type { App as A, BuiltinActionType as B, ConnectOptions as C, DataChangedEvent as D, FileResult as F, HostInfo as H, KeyForwardConfig as K, ModelContext as M, NavigatePayload as N, RequestFileOptions as R, TaskHandle as T, CallToolAsTaskOptions as a, ToolCallResult as b, CallToolOptions as c, Theme as d, ToolResultData as e, ToolDefinition as f, FontFaceDescriptor as g, AgentAction as h, AppEventName as i, Dimensions as j, FontDisplayValue as k, NotifyPayload as l, TasksCapability as m };
+export type { App as A, ConnectOptions as C, Dimensions as D, FileResult as F, KeyForwardConfig as K, ModelContext as M, RequestFileOptions as R, TaskHandle as T, CallToolAsTaskOptions as a, ToolCallResult as b, Theme as c, ToolResultData as d, ToolDefinition as e, AppEventName as f, TasksCapability as g };