@nimblebrain/synapse 0.19.0 → 0.20.0

package/dist/vite/index.cjs

@@ -1,15 +1,14 @@
 'use strict';
 
-var chunkNP7ROSH2_cjs = require('../chunk-NP7ROSH2.cjs');
-require('../chunk-Q7SFCCGT.cjs');
+var chunkISV6HFQE_cjs = require('../chunk-ISV6HFQE.cjs');
 var child_process = require('child_process');
 var fs = require('fs');
 var path = require('path');
 
 var PROXIED_SERVER_METHODS = [
-  chunkNP7ROSH2_cjs.TOOLS_CALL_METHOD,
-  chunkNP7ROSH2_cjs.READ_RESOURCE_METHOD,
-  chunkNP7ROSH2_cjs.LIST_RESOURCES_METHOD
+  chunkISV6HFQE_cjs.TOOLS_CALL_METHOD,
+  chunkISV6HFQE_cjs.READ_RESOURCE_METHOD,
+  chunkISV6HFQE_cjs.LIST_RESOURCES_METHOD
 ];
 function synapseVite(options = {}) {
   const enablePreview = options.preview !== false;
@@ -19,7 +18,7 @@ function synapseVite(options = {}) {
   const pendingRequests = /* @__PURE__ */ new Map();
   const eventClients = /* @__PURE__ */ new Set();
   function forwardNotification(msg) {
-    if (msg.method !== chunkNP7ROSH2_cjs.RESOURCE_LIST_CHANGED_METHOD) return;
+    if (msg.method !== chunkISV6HFQE_cjs.RESOURCE_LIST_CHANGED_METHOD) return;
     const frame = `data: ${JSON.stringify({ method: msg.method, params: msg.params ?? {} })}
 
 `;
@@ -277,7 +276,9 @@ function vitePreviewHostHtml(appName) {
         post({ jsonrpc:"2.0", id:msg.id, result: {
           protocolVersion:"2026-01-26",
           hostInfo:{name:"nimblebrain",version:"preview"},
-          hostCapabilities:{openLinks:{},serverTools:{},serverResources:{listChanged:true}},
+          hostCapabilities:{openLinks:{},serverTools:{},serverResources:{listChanged:true},
+            updateModelContext:{text:{},structuredContent:{}},
+            experimental:{"ai.nimblebrain/action":{},"ai.nimblebrain/keydown":{}}},
           hostContext:{theme:dark?"dark":"light",styles:{variables:getTokens(dark)}}
         }});
         return;
@@ -308,10 +309,9 @@ function vitePreviewHostHtml(appName) {
       }
 
       // Log other messages
-      if (msg.method === "synapse/chat") console.log("[chat]", msg.params?.message);
-      else if (msg.method === "synapse/action") console.log("[action]", msg.params?.action, msg.params);
+      if (msg.method === "ai.nimblebrain/action") console.log("[action]", msg.params?.action, msg.params);
       else if (msg.method === "ui/update-model-context") { console.log("[model-context]", msg.params?.structuredContent); if (isRequest(msg)) post({jsonrpc:"2.0",id:msg.id,result:{}}); }
-      else if (msg.method === "synapse/keydown") { /* ignore */ }
+      else if (msg.method === "ai.nimblebrain/keydown") { /* ignore */ }
       else if (msg.method) console.log("[bridge]", msg.method, msg);
     });
 

package/dist/vite/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/vite/plugin.ts"],"names":["TOOLS_CALL_METHOD","READ_RESOURCE_METHOD","LIST_RESOURCES_METHOD","RESOURCE_LIST_CHANGED_METHOD","resolve","existsSync","readFileSync","join","spawn"],"mappings":";;;;;;;;AAwBA,IAAM,sBAAA,GAA4C;AAAA,EAChDA,mCAAA;AAAA,EACAC,sCAAA;AAAA,EACAC;AACF,CAAA;AAkDO,SAAS,WAAA,CAAY,OAAA,GAAoC,EAAC,EAAW;AAC1E,EAAA,MAAM,aAAA,GAAgB,QAAQ,OAAA,KAAY,KAAA;AAC1C,EAAA,IAAI,QAAA,GAA4B,IAAA;AAChC,EAAA,IAAI,OAAA,GAAU,QAAQ,OAAA,IAAW,KAAA;AACjC,EAAA,IAAI,aAAA,GAAqC,IAAA;AACzC,EAAA,MAAM,eAAA,uBAAsB,GAAA,EAG1B;AAEF,EAAA,MAAM,YAAA,uBAAmB,GAAA,EAAoB;AAO7C,EAAA,SAAS,oBAAoB,GAAA,EAAmD;AAC9E,IAAA,IAAI,GAAA,CAAI,WAAWC,8CAAA,EAA8B;AACjD,IAAA,MAAM,KAAA,GAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,EAAE,MAAA,EAAQ,GAAA,CAAI,MAAA,EAAQ,MAAA,EAAQ,GAAA,CAAI,MAAA,IAAU,EAAC,EAAG,CAAC;;AAAA,CAAA;AACvF,IAAA,KAAA,MAAW,MAAA,IAAU,YAAA,EAAc,MAAA,CAAO,KAAA,CAAM,KAAK,CAAA;AAAA,EACvD;AACA,EAAA,IAAI,YAAA,GAAe,EAAA;AAEnB,EAAA,SAAS,aAAa,IAAA,EAA+B;AACnD,IAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,QAAA,GACzBC,YAAA,CAAQ,OAAA,CAAQ,QAAQ,CAAA,GACxBA,YAAA,CAAQ,IAAA,EAAM,IAAA,EAAM,eAAe,CAAA;AAEvC,IAAA,IAAI,CAACC,aAAA,CAAW,YAAY,CAAA,EAAG,OAAO,IAAA;AACtC,IAAA,IAAI;AACF,MAAA,OAAO,IAAA,CAAK,KAAA,CAAMC,eAAA,CAAa,YAAA,EAAc,OAAO,CAAC,CAAA;AAAA,IACvD,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,SAAS,eAAA,CAAgB,GAAa,IAAA,EAA6B;AACjE,IAAA,IAAI,OAAA,CAAQ,SAAA,EAAW,OAAO,OAAA,CAAQ,SAAA;AACtC,IAAA,MAAM,GAAA,GAAM,EAAE,MAAA,EAAQ,UAAA;AACtB,IAAA,IAAI,CAAC,GAAA,EAAK,OAAA,EAAS,OAAO,IAAA;AAE1B,IAAA,MAAM,SAAA,GAAYF,YAAA,CAAQ,IAAA,EAAM,IAAI,CAAA;AACpC,IAAA,IAAI,MAAM,GAAA,CAAI,OAAA;AACd,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,IAAA,IAAQ,EAAC;AAG1B,IAAA,IAAI,QAAQ,QAAA,IAAYC,aAAA,CAAWE,UAAK,SAAA,EAAW,gBAAgB,CAAC,CAAA,EAAG;AACrE,MAAA,GAAA,GAAM,eAAA;AAAA,IACR;AAEA,IAAA,OAAO,CAAA,GAAA,EAAM,IAAA,CAAK,SAAA,CAAU,SAAS,CAAC,CAAA,IAAA,EAAO,GAAG,CAAA,CAAA,EAAI,IAAA,CAAK,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA;AAAA,EACpE;AAEA,EAAA,SAAS,YAAY,GAAA,EAAmB;AACtC,IAAA,aAAA,GAAgBC,oBAAM,GAAA,EAAK;AAAA,MACzB,KAAA,EAAO,IAAA;AAAA,MACP,KAAA,EAAO,CAAC,MAAA,EAAQ,MAAA,EAAQ,MAAM;AAAA,KAC/B,CAAA;AAED,IAAA,aAAA,CAAc,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAc;AAC9C,MAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,CAAC,CAAA,CAAE,CAAA;AAAA,IACrC,CAAC,CAAA;AAED,IAAA,aAAA,CAAc,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAc;AAC9C,MAAA,YAAA,IAAgB,EAAE,QAAA,EAAS;AAE3B,MAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,KAAA,CAAM,IAAI,CAAA;AACrC,MAAA,YAAA,GAAe,KAAA,CAAM,KAAI,IAAK,EAAA;AAC9B,MAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,QAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAK,EAAG;AAClB,QAAA,IAAI;AACF,UAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC3B,UAAA,IAAI,IAAI,EAAA,IAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,CAAI,EAAE,CAAA,EAAG;AACzC,YAAA,MAAM,CAAA,GAAI,eAAA,CAAgB,GAAA,CAAI,GAAA,CAAI,EAAE,CAAA;AACpC,YAAA,eAAA,CAAgB,MAAA,CAAO,IAAI,EAAE,CAAA;AAC7B,YAAA,CAAA,EAAG,QAAQ,GAAG,CAAA;AAAA,UAChB,WAAW,GAAA,CAAI,EAAA,KAAO,UAAa,OAAO,GAAA,CAAI,WAAW,QAAA,EAAU;AACjE,YAAA,mBAAA,CAAoB,GAAG,CAAA;AAAA,UACzB;AAAA,QACF,CAAA,CAAA,MAAQ;AAEN,UAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,IAAI;AAAA,CAAI,CAAA;AAAA,QAC1C;AAAA,MACF;AAAA,IACF,CAAC,CAAA;AAED,IAAA,aAAA,CAAc,EAAA,CAAG,MAAA,EAAQ,CAAC,IAAA,KAAS;AACjC,MAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,IAAA,KAAS,CAAA,EAAG;AAC/B,QAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,gCAAA,EAAmC,IAAI,CAAA,CAAE,CAAA;AAAA,MACzD;AACA,MAAA,aAAA,GAAgB,IAAA;AAAA,IAClB,CAAC,CAAA;AAGD,IAAA,YAAA,CAAa;AAAA,MACX,OAAA,EAAS,KAAA;AAAA,MACT,EAAA,EAAI,QAAA;AAAA,MACJ,MAAA,EAAQ,YAAA;AAAA,MACR,MAAA,EAAQ;AAAA,QACN,eAAA,EAAiB,YAAA;AAAA,QACjB,cAAc,EAAC;AAAA,QACf,UAAA,EAAY,EAAE,IAAA,EAAM,iBAAA,EAAmB,SAAS,OAAA;AAAQ;AAC1D,KACD,CAAA;AAAA,EACH;AAEA,EAAA,SAAS,aAAa,GAAA,EAAoC;AACxD,IAAA,IAAI,CAAC,aAAA,EAAe,KAAA,EAAO,QAAA,EAAU;AACrC,IAAA,aAAA,CAAc,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,SAAA,CAAU,GAAG,CAAC;AAAA,CAAI,CAAA;AAAA,EACtD;AAEA,EAAA,SAAS,UAAA,CAAW,QAAgB,MAAA,EAAmD;AACrF,IAAA,OAAO,IAAI,OAAA,CAAQ,CAACJ,QAAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,EAAA,GAAK,CAAA,QAAA,EAAW,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA,EAAI,IAAA,CAAK,MAAA,EAAO,CAAE,SAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,CAAA;AAC1E,MAAA,eAAA,CAAgB,IAAI,EAAA,EAAI,EAAE,OAAA,EAAAA,QAAAA,EAAS,QAAQ,CAAA;AAC3C,MAAA,YAAA,CAAa,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,MAAA,EAAQ,QAAQ,CAAA;AACnD,MAAA,UAAA,CAAW,MAAM;AACf,QAAA,IAAI,eAAA,CAAgB,GAAA,CAAI,EAAE,CAAA,EAAG;AAC3B,UAAA,eAAA,CAAgB,OAAO,EAAE,CAAA;AACzB,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,EAAG,MAAM,kBAAkB,CAAC,CAAA;AAAA,QAC/C;AAAA,MACF,GAAG,GAAK,CAAA;AAAA,IACV,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,SAAA;AAAA,IAEN,MAAA,GAAS;AACP,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ;AAAA,UACN,kCAAA,EAAoC,IAAA,CAAK,SAAA,CAAU,OAAO;AAAA,SAC5D;AAAA,QACA,MAAA,EAAQ;AAAA,UACN,GAAA,EAAK;AAAA,YACH,QAAA,EAAU,IAAA;AAAA,YACV,IAAA,EAAM;AAAA;AACR;AACF,OACF;AAAA,IACF,CAAA;AAAA,IAEA,eAAe,MAAA,EAAQ;AACrB,MAAA,QAAA,GAAW,YAAA,CAAa,OAAO,IAAI,CAAA;AACnC,MAAA,IAAI,UAAU,IAAA,EAAM;AAClB,QAAA,OAAA,GAAU,OAAA,CAAQ,WAAW,QAAA,CAAS,IAAA;AAAA,MACxC;AAAA,IACF,CAAA;AAAA,IAEA,gBAAgB,MAAA,EAAuB;AAErC,MAAA,IAAI,iBAAiB,QAAA,EAAU;AAC7B,QAAA,MAAM,GAAA,GAAM,eAAA,CAAgB,QAAA,EAAU,MAAA,CAAO,OAAO,IAAI,CAAA;AACxD,QAAA,IAAI,GAAA,EAAK;AACP,UAAA,OAAA,CAAQ,GAAA,CAAI;AAAA,iCAAA,EAAsC,GAAG;AAAA,CAAI,CAAA;AACzD,UAAA,WAAA,CAAY,GAAG,CAAA;AAAA,QACjB;AAAA,MACF;AAEA,MAAA,MAAA,CAAO,WAAA,CAAY,GAAA,CAAI,CAAC,GAAA,EAAK,KAAK,IAAA,KAAS;AAEzC,QAAA,GAAA,CAAI,SAAA,CAAU,+BAA+B,GAAG,CAAA;AAChD,QAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,GAAG,CAAA;AACjD,QAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,GAAG,CAAA;AAGjD,QAAA,IAAI,GAAA,CAAI,GAAA,KAAQ,YAAA,IAAgB,GAAA,CAAI,QAAQ,aAAA,EAAe;AACzD,UAAA,GAAA,CAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,aAAa,CAAA;AAClD,UAAA,GAAA,CAAI,GAAA,CAAI,mBAAA,CAAoB,OAAO,CAAC,CAAA;AACpC,UAAA;AAAA,QACF;AAGA,QAAA,IAAI,GAAA,CAAI,MAAA,KAAW,KAAA,IAAS,GAAA,CAAI,QAAQ,WAAA,EAAa;AACnD,UAAA,GAAA,CAAI,UAAU,GAAA,EAAK;AAAA,YACjB,cAAA,EAAgB,mBAAA;AAAA,YAChB,eAAA,EAAiB,UAAA;AAAA,YACjB,UAAA,EAAY;AAAA,WACb,CAAA;AACD,UAAA,GAAA,CAAI,MAAM,YAAY,CAAA;AACtB,UAAA,YAAA,CAAa,IAAI,GAAG,CAAA;AACpB,UAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM;AACpB,YAAA,YAAA,CAAa,OAAO,GAAG,CAAA;AAAA,UACzB,CAAC,CAAA;AACD,UAAA;AAAA,QACF;AAGA,QAAA,IAAI,GAAA,CAAI,MAAA,KAAW,MAAA,IAAU,GAAA,CAAI,QAAQ,QAAA,EAAU;AACjD,UAAA,IAAI,IAAA,GAAO,EAAA;AACX,UAAA,GAAA,CAAI,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AAChC,YAAA,IAAA,IAAQ,MAAM,QAAA,EAAS;AAAA,UACzB,CAAC,CAAA;AACD,UAAA,GAAA,CAAI,EAAA,CAAG,OAAO,YAAY;AACxB,YAAA,IAAI;AACF,cAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC3B,cAAA,IAAI,CAAC,sBAAA,CAAuB,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA,EAAG;AAChD,gBAAA,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,GAAA,CAAI,MAAM,CAAA,kCAAA,CAAoC,CAAA;AAAA,cACnE;AACA,cAAA,MAAM,MAAA,GAAS,MAAM,UAAA,CAAW,GAAA,CAAI,QAAQ,GAAA,CAAI,MAAA,IAAU,EAAE,CAAA;AAC5D,cAAA,GAAA,CAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,oBAAoB,CAAA;AACzD,cAAA,GAAA,CAAI,GAAA,CAAI,IAAA,CAAK,SAAA,CAAU,MAAM,CAAC,CAAA;AAAA,YAChC,SAAS,GAAA,EAAK;AACZ,cAAA,GAAA,CAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,oBAAoB,CAAA;AACzD,cAAA,GAAA,CAAI,GAAA;AAAA,gBACF,KAAK,SAAA,CAAU;AAAA,kBACb,OAAA,EAAS,KAAA;AAAA,kBACT,EAAA,EAAI,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,CAAE,EAAA;AAAA,kBACrB,OAAO,EAAE,IAAA,EAAM,KAAA,EAAQ,OAAA,EAAU,IAAc,OAAA;AAAQ,iBACxD;AAAA,eACH;AAAA,YACF;AAAA,UACF,CAAC,CAAA;AACD,UAAA;AAAA,QACF;AAEA,QAAA,IAAA,EAAK;AAAA,MACP,CAAC,CAAA;AAAA,IACH,CAAA;AAAA,IAEA,QAAA,GAAW;AAET,MAAA,IAAI,aAAA,EAAe;AACjB,QAAA,aAAA,CAAc,KAAK,SAAS,CAAA;AAC5B,QAAA,aAAA,GAAgB,IAAA;AAAA,MAClB;AAAA,IACF;AAAA,GACF;AACF;AAUO,SAAS,oBAAoB,OAAA,EAAyB;AAC3D,EAAA,OAAO,CAAA;AAAA;AAAA;AAAA;AAAA,SAAA,EAIE,OAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAA,EAgBO,OAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA,kBAAA,EAUZ,IAAA,CAAK,SAAA,CAAU,sBAAsB,CAAC,CAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,OAAA,CAAA;AAqG1D","file":"index.cjs","sourcesContent":["import { type ChildProcess, spawn } from \"node:child_process\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport type { ServerResponse } from \"node:http\";\nimport { join, resolve } from \"node:path\";\nimport type { Plugin, ViteDevServer } from \"vite\";\nimport {\n  LIST_RESOURCES_METHOD,\n  READ_RESOURCE_METHOD,\n  RESOURCE_LIST_CHANGED_METHOD,\n  TOOLS_CALL_METHOD,\n} from \"../event-map.js\";\n\n/**\n * The server-bound requests this host proxies, which is exactly what its\n * handshake announces: `serverTools` for the tool call, `serverResources` for\n * the two resource methods. An allowlist in both directions — the page sends\n * nothing else to `/__mcp`, and `/__mcp` forwards nothing else to the server,\n * so a method the host never announced cannot reach the server through it.\n *\n * Adding a method here without adding the matching capability below, or the\n * reverse, is the bug this list exists to make obvious: a host that answers\n * what it does not announce is unusable, and one that announces what it does\n * not answer leaves the caller waiting on a reply nobody will send.\n */\nconst PROXIED_SERVER_METHODS: readonly string[] = [\n  TOOLS_CALL_METHOD,\n  READ_RESOURCE_METHOD,\n  LIST_RESOURCES_METHOD,\n];\n\nexport interface SynapseVitePluginOptions {\n  /** App name. If omitted, reads from ../manifest.json */\n  appName?: string;\n  /** Path to manifest.json. Default: ../manifest.json (relative to ui/) */\n  manifest?: string;\n  /**\n   * Shell command to start the MCP server. If omitted, derived from manifest.\n   * The server runs in stdio mode — stdin/stdout JSON-RPC.\n   */\n  serverCmd?: string;\n  /** Set to false to disable the preview host page at /__preview */\n  preview?: boolean;\n}\n\ninterface Manifest {\n  name: string;\n  version?: string;\n  server?: {\n    type?: string;\n    entry_point?: string;\n    mcp_config?: {\n      command?: string;\n      args?: string[];\n    };\n  };\n}\n\n/**\n * Synapse Vite plugin — full local dev experience for MCP apps.\n *\n * What it does:\n * - Reads ../manifest.json to get app name and server config\n * - Spawns the MCP server as a child process (stdio mode)\n * - Serves a preview host page at /__preview that iframes your app\n * - Proxies the iframe's tool calls and resource reads through POST /__mcp to\n *   the server, the pair its handshake announces as `serverTools` and\n *   `serverResources`\n * - Forwards the server's `notifications/resources/list_changed` to the iframe\n *   (over GET /__events), as an MCP Apps host does, so `useDataSync` fires\n * - Handles the ext-apps handshake so Synapse hooks work\n * - HMR works inside the iframe — edit .tsx, see changes instantly\n *\n * Usage in vite.config.ts:\n *   import { synapseVite } from \"@nimblebrain/synapse/vite\";\n *   export default { plugins: [react(), viteSingleFile(), synapseVite()] };\n *\n * Then: cd ui && npm run dev && open http://localhost:5173/__preview\n */\nexport function synapseVite(options: SynapseVitePluginOptions = {}): Plugin {\n  const enablePreview = options.preview !== false;\n  let manifest: Manifest | null = null;\n  let appName = options.appName ?? \"app\";\n  let serverProcess: ChildProcess | null = null;\n  const pendingRequests = new Map<\n    string,\n    { resolve: (v: unknown) => void; reject: (e: Error) => void }\n  >();\n  // Preview pages listening on GET /__events for the server's notifications.\n  const eventClients = new Set<ServerResponse>();\n\n  /**\n   * Hand a server notification to every open preview page, which posts it into\n   * the app iframe. Only the one an MCP Apps host forwards to a view is passed\n   * on; anything else the server says stays between it and the dev server.\n   */\n  function forwardNotification(msg: { method?: unknown; params?: unknown }): void {\n    if (msg.method !== RESOURCE_LIST_CHANGED_METHOD) return;\n    const frame = `data: ${JSON.stringify({ method: msg.method, params: msg.params ?? {} })}\\n\\n`;\n    for (const client of eventClients) client.write(frame);\n  }\n  let serverBuffer = \"\";\n\n  function loadManifest(root: string): Manifest | null {\n    const manifestPath = options.manifest\n      ? resolve(options.manifest)\n      : resolve(root, \"..\", \"manifest.json\");\n\n    if (!existsSync(manifestPath)) return null;\n    try {\n      return JSON.parse(readFileSync(manifestPath, \"utf-8\"));\n    } catch {\n      return null;\n    }\n  }\n\n  function deriveServerCmd(m: Manifest, root: string): string | null {\n    if (options.serverCmd) return options.serverCmd;\n    const cfg = m.server?.mcp_config;\n    if (!cfg?.command) return null;\n\n    const serverDir = resolve(root, \"..\");\n    let cmd = cfg.command;\n    const args = cfg.args ?? [];\n\n    // Python projects: use `uv run` if pyproject.toml exists\n    if (cmd === \"python\" && existsSync(join(serverDir, \"pyproject.toml\"))) {\n      cmd = \"uv run python\";\n    }\n\n    return `cd ${JSON.stringify(serverDir)} && ${cmd} ${args.join(\" \")}`;\n  }\n\n  function startServer(cmd: string): void {\n    serverProcess = spawn(cmd, {\n      shell: true,\n      stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    });\n\n    serverProcess.stderr?.on(\"data\", (d: Buffer) => {\n      process.stderr.write(`  [mcp] ${d}`);\n    });\n\n    serverProcess.stdout?.on(\"data\", (d: Buffer) => {\n      serverBuffer += d.toString();\n      // Parse line-delimited JSON-RPC responses\n      const lines = serverBuffer.split(\"\\n\");\n      serverBuffer = lines.pop() ?? \"\"; // keep incomplete line\n      for (const line of lines) {\n        if (!line.trim()) continue;\n        try {\n          const msg = JSON.parse(line);\n          if (msg.id && pendingRequests.has(msg.id)) {\n            const p = pendingRequests.get(msg.id);\n            pendingRequests.delete(msg.id);\n            p?.resolve(msg);\n          } else if (msg.id === undefined && typeof msg.method === \"string\") {\n            forwardNotification(msg);\n          }\n        } catch {\n          // Not JSON — log it\n          process.stderr.write(`  [mcp] ${line}\\n`);\n        }\n      }\n    });\n\n    serverProcess.on(\"exit\", (code) => {\n      if (code !== null && code !== 0) {\n        console.error(`  [mcp] Server exited with code ${code}`);\n      }\n      serverProcess = null;\n    });\n\n    // Send initialize\n    sendToServer({\n      jsonrpc: \"2.0\",\n      id: \"init-1\",\n      method: \"initialize\",\n      params: {\n        protocolVersion: \"2024-11-05\",\n        capabilities: {},\n        clientInfo: { name: \"synapse-preview\", version: \"0.1.0\" },\n      },\n    });\n  }\n\n  function sendToServer(msg: Record<string, unknown>): void {\n    if (!serverProcess?.stdin?.writable) return;\n    serverProcess.stdin.write(`${JSON.stringify(msg)}\\n`);\n  }\n\n  function callServer(method: string, params: Record<string, unknown>): Promise<unknown> {\n    return new Promise((resolve, reject) => {\n      const id = `preview-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;\n      pendingRequests.set(id, { resolve, reject });\n      sendToServer({ jsonrpc: \"2.0\", id, method, params });\n      setTimeout(() => {\n        if (pendingRequests.has(id)) {\n          pendingRequests.delete(id);\n          reject(new Error(`${method} timed out (10s)`));\n        }\n      }, 10000);\n    });\n  }\n\n  return {\n    name: \"synapse\",\n\n    config() {\n      return {\n        define: {\n          \"import.meta.env.SYNAPSE_APP_NAME\": JSON.stringify(appName),\n        },\n        server: {\n          hmr: {\n            protocol: \"ws\",\n            host: \"localhost\",\n          },\n        },\n      };\n    },\n\n    configResolved(config) {\n      manifest = loadManifest(config.root);\n      if (manifest?.name) {\n        appName = options.appName ?? manifest.name;\n      }\n    },\n\n    configureServer(server: ViteDevServer) {\n      // Start MCP server\n      if (enablePreview && manifest) {\n        const cmd = deriveServerCmd(manifest, server.config.root);\n        if (cmd) {\n          console.log(`\\n  [synapse] Starting MCP server: ${cmd}\\n`);\n          startServer(cmd);\n        }\n      }\n\n      server.middlewares.use((req, res, next) => {\n        // CORS for iframe communication\n        res.setHeader(\"Access-Control-Allow-Origin\", \"*\");\n        res.setHeader(\"Access-Control-Allow-Methods\", \"*\");\n        res.setHeader(\"Access-Control-Allow-Headers\", \"*\");\n\n        // /__preview — bridge host page\n        if (req.url === \"/__preview\" || req.url === \"/__preview/\") {\n          res.writeHead(200, { \"Content-Type\": \"text/html\" });\n          res.end(vitePreviewHostHtml(appName));\n          return;\n        }\n\n        // GET /__events — the server's notifications, pushed to the preview page\n        if (req.method === \"GET\" && req.url === \"/__events\") {\n          res.writeHead(200, {\n            \"Content-Type\": \"text/event-stream\",\n            \"Cache-Control\": \"no-cache\",\n            Connection: \"keep-alive\",\n          });\n          res.write(\": open\\n\\n\");\n          eventClients.add(res);\n          req.on(\"close\", () => {\n            eventClients.delete(res);\n          });\n          return;\n        }\n\n        // POST /__mcp — the server-bound request proxy\n        if (req.method === \"POST\" && req.url === \"/__mcp\") {\n          let body = \"\";\n          req.on(\"data\", (chunk: Buffer) => {\n            body += chunk.toString();\n          });\n          req.on(\"end\", async () => {\n            try {\n              const msg = JSON.parse(body);\n              if (!PROXIED_SERVER_METHODS.includes(msg.method)) {\n                throw new Error(`${msg.method} is not a method this host proxies`);\n              }\n              const result = await callServer(msg.method, msg.params ?? {});\n              res.writeHead(200, { \"Content-Type\": \"application/json\" });\n              res.end(JSON.stringify(result));\n            } catch (err) {\n              res.writeHead(200, { \"Content-Type\": \"application/json\" });\n              res.end(\n                JSON.stringify({\n                  jsonrpc: \"2.0\",\n                  id: JSON.parse(body).id,\n                  error: { code: -32000, message: (err as Error).message },\n                }),\n              );\n            }\n          });\n          return;\n        }\n\n        next();\n      });\n    },\n\n    buildEnd() {\n      // Kill server on build end (for production builds)\n      if (serverProcess) {\n        serverProcess.kill(\"SIGTERM\");\n        serverProcess = null;\n      }\n    },\n  };\n}\n\n/**\n * The bridge host page the dev server serves at \\`/__preview\\`.\n *\n * Named apart from \\`previewHostHtml\\` in \\`src/preview/server.ts\\`, which is the\n * standalone \\`synapse preview\\` harness: this package has two hand-written\n * hosts, and the conformance suite drives both, so one name for two pages would\n * be a name that resolves to whichever was imported last.\n */\nexport function vitePreviewHostHtml(appName: string): string {\n  return `<!DOCTYPE html>\n<html>\n<head>\n  <meta charset=\"utf-8\" />\n  <title>${appName} — Synapse Preview</title>\n  <style>\n    * { margin: 0; padding: 0; box-sizing: border-box; }\n    body { font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif; background: #0f172a; color: #e2e8f0; }\n    header { padding: 10px 16px; background: #1e293b; border-bottom: 1px solid #334155; display: flex; align-items: center; gap: 10px; font-size: 13px; }\n    header .dot { width: 8px; height: 8px; border-radius: 50%; background: #22c55e; }\n    header .name { font-weight: 600; }\n    header .spacer { flex: 1; }\n    header button { background: #334155; border: none; color: #e2e8f0; padding: 3px 8px; border-radius: 4px; cursor: pointer; font-size: 12px; }\n    header .url { color: #64748b; font-size: 11px; font-family: monospace; }\n    iframe { width: 100%; height: calc(100vh - 41px); border: none; }\n  </style>\n</head>\n<body>\n  <header>\n    <span class=\"dot\"></span>\n    <span class=\"name\">${appName}</span>\n    <span class=\"spacer\"></span>\n    <button id=\"toggle\">Toggle Theme</button>\n    <span class=\"url\">Synapse Preview</span>\n  </header>\n  <iframe id=\"app\"></iframe>\n\n  <script>\n    var iframe = document.getElementById(\"app\");\n    var dark = true;\n    var PROXIED = ${JSON.stringify(PROXIED_SERVER_METHODS)};\n\n    // Every key here is one the spec's style-variable enum names. That enum is\n    // a strict record, so a single extra key makes a spec client reject the\n    // whole \\`ui/initialize\\` result and refuse to connect — not just ignore the\n    // key. The kit's own neutral defaults back anything a host leaves out.\n    function getTokens(d) {\n      return d ? {\n        \"--color-background-primary\":\"#0f172a\",\"--color-background-secondary\":\"#1e293b\",\n        \"--color-background-tertiary\":\"#2a374a\",\"--color-text-primary\":\"#e2e8f0\",\n        \"--color-text-secondary\":\"#94a3b8\",\"--color-text-tertiary\":\"#64748b\",\n        \"--color-border-primary\":\"#334155\",\"--color-border-secondary\":\"#475569\",\n        \"--color-ring-primary\":\"#6366f1\",\n        \"--border-radius-sm\":\"0.5rem\",\"--font-sans\":\"-apple-system,BlinkMacSystemFont,sans-serif\"\n      } : {\n        \"--color-background-primary\":\"#ffffff\",\"--color-background-secondary\":\"#f8fafc\",\n        \"--color-background-tertiary\":\"#f1f5f9\",\"--color-text-primary\":\"#0f172a\",\n        \"--color-text-secondary\":\"#64748b\",\"--color-text-tertiary\":\"#94a3b8\",\n        \"--color-border-primary\":\"#e2e8f0\",\"--color-border-secondary\":\"#cbd5e1\",\n        \"--color-ring-primary\":\"#6366f1\",\n        \"--border-radius-sm\":\"0.5rem\",\"--font-sans\":\"-apple-system,BlinkMacSystemFont,sans-serif\"\n      };\n    }\n\n    function post(msg) { iframe.contentWindow.postMessage(msg, \"*\"); }\n\n    // A request is a frame carrying an id — and \\`0\\` is a perfectly good id.\n    // The MCP SDK numbers from zero, so a truthiness test drops the first\n    // request every spec client ever sends, which is its \\`ui/initialize\\`.\n    function isRequest(msg) { return msg.id !== undefined && msg.id !== null; }\n\n    window.addEventListener(\"message\", async function(e) {\n      if (e.source !== iframe.contentWindow) return;\n      var msg = e.data;\n      if (!msg || typeof msg !== \"object\") return;\n\n      // ext-apps handshake\n      // \\`hostInfo\\`/\\`hostCapabilities\\` are the spec's field names, and a spec\n      // client validates the result against them — the official ext-apps\n      // \\`App\\` refuses to connect to anything else.\n      if (msg.method === \"ui/initialize\" && isRequest(msg)) {\n        post({ jsonrpc:\"2.0\", id:msg.id, result: {\n          protocolVersion:\"2026-01-26\",\n          hostInfo:{name:\"nimblebrain\",version:\"preview\"},\n          hostCapabilities:{openLinks:{},serverTools:{},serverResources:{listChanged:true}},\n          hostContext:{theme:dark?\"dark\":\"light\",styles:{variables:getTokens(dark)}}\n        }});\n        return;\n      }\n      if (msg.method === \"ui/notifications/initialized\") return;\n\n      // Server-bound requests — proxied via the Vite middleware. The set is\n      // exactly what \\`serverTools\\` and \\`serverResources\\` above announce, so\n      // neither is declared without something on the other end.\n      if (PROXIED.indexOf(msg.method) !== -1 && isRequest(msg)) {\n        var originalId = msg.id;\n        try {\n          var r = await fetch(\"/__mcp\", {\n            method:\"POST\", headers:{\"Content-Type\":\"application/json\"},\n            body: JSON.stringify({jsonrpc:\"2.0\",id:msg.id,method:msg.method,params:msg.params||{}})\n          });\n          var response = await r.json();\n          response.id = originalId;\n          post(response);\n          // The page announces no data change of its own. A change is the\n          // server's to announce, and that reaches the app over /__events. One\n          // fired here on the app's own call would loop: the call fires it, the\n          // app re-fetches, and the re-fetch fires it again.\n        } catch(err) {\n          post({jsonrpc:\"2.0\",id:originalId,error:{code:-32000,message:err.message}});\n        }\n        return;\n      }\n\n      // Log other messages\n      if (msg.method === \"synapse/chat\") console.log(\"[chat]\", msg.params?.message);\n      else if (msg.method === \"synapse/action\") console.log(\"[action]\", msg.params?.action, msg.params);\n      else if (msg.method === \"ui/update-model-context\") { console.log(\"[model-context]\", msg.params?.structuredContent); if (isRequest(msg)) post({jsonrpc:\"2.0\",id:msg.id,result:{}}); }\n      else if (msg.method === \"synapse/keydown\") { /* ignore */ }\n      else if (msg.method) console.log(\"[bridge]\", msg.method, msg);\n    });\n\n    document.getElementById(\"toggle\").onclick = function() {\n      dark = !dark;\n      document.body.style.background = dark ? \"#0f172a\" : \"#f1f5f9\";\n      post({jsonrpc:\"2.0\",method:\"ui/notifications/host-context-changed\",params:{theme:dark?\"dark\":\"light\",styles:{variables:getTokens(dark)}}});\n    };\n\n    // The server's own notifications, forwarded into the app as an MCP Apps\n    // host forwards them. The dev server passes on only the ones a host would.\n    new EventSource(\"/__events\").onmessage = function(e) {\n      var n = JSON.parse(e.data);\n      post({jsonrpc:\"2.0\",method:n.method,params:n.params});\n    };\n\n    // Load the iframe AFTER the message listener is attached to avoid\n    // a race where the app sends ui/initialize before the bridge is ready.\n    iframe.src = \"/\";\n  </script>\n</body>\n</html>`;\n}\n"]}
+{"version":3,"sources":["../../src/vite/plugin.ts"],"names":["TOOLS_CALL_METHOD","READ_RESOURCE_METHOD","LIST_RESOURCES_METHOD","RESOURCE_LIST_CHANGED_METHOD","resolve","existsSync","readFileSync","join","spawn"],"mappings":";;;;;;;AAwBA,IAAM,sBAAA,GAA4C;AAAA,EAChDA,mCAAA;AAAA,EACAC,sCAAA;AAAA,EACAC;AACF,CAAA;AAkDO,SAAS,WAAA,CAAY,OAAA,GAAoC,EAAC,EAAW;AAC1E,EAAA,MAAM,aAAA,GAAgB,QAAQ,OAAA,KAAY,KAAA;AAC1C,EAAA,IAAI,QAAA,GAA4B,IAAA;AAChC,EAAA,IAAI,OAAA,GAAU,QAAQ,OAAA,IAAW,KAAA;AACjC,EAAA,IAAI,aAAA,GAAqC,IAAA;AACzC,EAAA,MAAM,eAAA,uBAAsB,GAAA,EAG1B;AAEF,EAAA,MAAM,YAAA,uBAAmB,GAAA,EAAoB;AAO7C,EAAA,SAAS,oBAAoB,GAAA,EAAmD;AAC9E,IAAA,IAAI,GAAA,CAAI,WAAWC,8CAAA,EAA8B;AACjD,IAAA,MAAM,KAAA,GAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,EAAE,MAAA,EAAQ,GAAA,CAAI,MAAA,EAAQ,MAAA,EAAQ,GAAA,CAAI,MAAA,IAAU,EAAC,EAAG,CAAC;;AAAA,CAAA;AACvF,IAAA,KAAA,MAAW,MAAA,IAAU,YAAA,EAAc,MAAA,CAAO,KAAA,CAAM,KAAK,CAAA;AAAA,EACvD;AACA,EAAA,IAAI,YAAA,GAAe,EAAA;AAEnB,EAAA,SAAS,aAAa,IAAA,EAA+B;AACnD,IAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,QAAA,GACzBC,YAAA,CAAQ,OAAA,CAAQ,QAAQ,CAAA,GACxBA,YAAA,CAAQ,IAAA,EAAM,IAAA,EAAM,eAAe,CAAA;AAEvC,IAAA,IAAI,CAACC,aAAA,CAAW,YAAY,CAAA,EAAG,OAAO,IAAA;AACtC,IAAA,IAAI;AACF,MAAA,OAAO,IAAA,CAAK,KAAA,CAAMC,eAAA,CAAa,YAAA,EAAc,OAAO,CAAC,CAAA;AAAA,IACvD,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,SAAS,eAAA,CAAgB,GAAa,IAAA,EAA6B;AACjE,IAAA,IAAI,OAAA,CAAQ,SAAA,EAAW,OAAO,OAAA,CAAQ,SAAA;AACtC,IAAA,MAAM,GAAA,GAAM,EAAE,MAAA,EAAQ,UAAA;AACtB,IAAA,IAAI,CAAC,GAAA,EAAK,OAAA,EAAS,OAAO,IAAA;AAE1B,IAAA,MAAM,SAAA,GAAYF,YAAA,CAAQ,IAAA,EAAM,IAAI,CAAA;AACpC,IAAA,IAAI,MAAM,GAAA,CAAI,OAAA;AACd,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,IAAA,IAAQ,EAAC;AAG1B,IAAA,IAAI,QAAQ,QAAA,IAAYC,aAAA,CAAWE,UAAK,SAAA,EAAW,gBAAgB,CAAC,CAAA,EAAG;AACrE,MAAA,GAAA,GAAM,eAAA;AAAA,IACR;AAEA,IAAA,OAAO,CAAA,GAAA,EAAM,IAAA,CAAK,SAAA,CAAU,SAAS,CAAC,CAAA,IAAA,EAAO,GAAG,CAAA,CAAA,EAAI,IAAA,CAAK,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA;AAAA,EACpE;AAEA,EAAA,SAAS,YAAY,GAAA,EAAmB;AACtC,IAAA,aAAA,GAAgBC,oBAAM,GAAA,EAAK;AAAA,MACzB,KAAA,EAAO,IAAA;AAAA,MACP,KAAA,EAAO,CAAC,MAAA,EAAQ,MAAA,EAAQ,MAAM;AAAA,KAC/B,CAAA;AAED,IAAA,aAAA,CAAc,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAc;AAC9C,MAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,CAAC,CAAA,CAAE,CAAA;AAAA,IACrC,CAAC,CAAA;AAED,IAAA,aAAA,CAAc,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAc;AAC9C,MAAA,YAAA,IAAgB,EAAE,QAAA,EAAS;AAE3B,MAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,KAAA,CAAM,IAAI,CAAA;AACrC,MAAA,YAAA,GAAe,KAAA,CAAM,KAAI,IAAK,EAAA;AAC9B,MAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,QAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAK,EAAG;AAClB,QAAA,IAAI;AACF,UAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC3B,UAAA,IAAI,IAAI,EAAA,IAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,CAAI,EAAE,CAAA,EAAG;AACzC,YAAA,MAAM,CAAA,GAAI,eAAA,CAAgB,GAAA,CAAI,GAAA,CAAI,EAAE,CAAA;AACpC,YAAA,eAAA,CAAgB,MAAA,CAAO,IAAI,EAAE,CAAA;AAC7B,YAAA,CAAA,EAAG,QAAQ,GAAG,CAAA;AAAA,UAChB,WAAW,GAAA,CAAI,EAAA,KAAO,UAAa,OAAO,GAAA,CAAI,WAAW,QAAA,EAAU;AACjE,YAAA,mBAAA,CAAoB,GAAG,CAAA;AAAA,UACzB;AAAA,QACF,CAAA,CAAA,MAAQ;AAEN,UAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,IAAI;AAAA,CAAI,CAAA;AAAA,QAC1C;AAAA,MACF;AAAA,IACF,CAAC,CAAA;AAED,IAAA,aAAA,CAAc,EAAA,CAAG,MAAA,EAAQ,CAAC,IAAA,KAAS;AACjC,MAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,IAAA,KAAS,CAAA,EAAG;AAC/B,QAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,gCAAA,EAAmC,IAAI,CAAA,CAAE,CAAA;AAAA,MACzD;AACA,MAAA,aAAA,GAAgB,IAAA;AAAA,IAClB,CAAC,CAAA;AAGD,IAAA,YAAA,CAAa;AAAA,MACX,OAAA,EAAS,KAAA;AAAA,MACT,EAAA,EAAI,QAAA;AAAA,MACJ,MAAA,EAAQ,YAAA;AAAA,MACR,MAAA,EAAQ;AAAA,QACN,eAAA,EAAiB,YAAA;AAAA,QACjB,cAAc,EAAC;AAAA,QACf,UAAA,EAAY,EAAE,IAAA,EAAM,iBAAA,EAAmB,SAAS,OAAA;AAAQ;AAC1D,KACD,CAAA;AAAA,EACH;AAEA,EAAA,SAAS,aAAa,GAAA,EAAoC;AACxD,IAAA,IAAI,CAAC,aAAA,EAAe,KAAA,EAAO,QAAA,EAAU;AACrC,IAAA,aAAA,CAAc,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,SAAA,CAAU,GAAG,CAAC;AAAA,CAAI,CAAA;AAAA,EACtD;AAEA,EAAA,SAAS,UAAA,CAAW,QAAgB,MAAA,EAAmD;AACrF,IAAA,OAAO,IAAI,OAAA,CAAQ,CAACJ,QAAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,EAAA,GAAK,CAAA,QAAA,EAAW,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA,EAAI,IAAA,CAAK,MAAA,EAAO,CAAE,SAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,CAAA;AAC1E,MAAA,eAAA,CAAgB,IAAI,EAAA,EAAI,EAAE,OAAA,EAAAA,QAAAA,EAAS,QAAQ,CAAA;AAC3C,MAAA,YAAA,CAAa,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,MAAA,EAAQ,QAAQ,CAAA;AACnD,MAAA,UAAA,CAAW,MAAM;AACf,QAAA,IAAI,eAAA,CAAgB,GAAA,CAAI,EAAE,CAAA,EAAG;AAC3B,UAAA,eAAA,CAAgB,OAAO,EAAE,CAAA;AACzB,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,EAAG,MAAM,kBAAkB,CAAC,CAAA;AAAA,QAC/C;AAAA,MACF,GAAG,GAAK,CAAA;AAAA,IACV,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,SAAA;AAAA,IAEN,MAAA,GAAS;AACP,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ;AAAA,UACN,kCAAA,EAAoC,IAAA,CAAK,SAAA,CAAU,OAAO;AAAA,SAC5D;AAAA,QACA,MAAA,EAAQ;AAAA,UACN,GAAA,EAAK;AAAA,YACH,QAAA,EAAU,IAAA;AAAA,YACV,IAAA,EAAM;AAAA;AACR;AACF,OACF;AAAA,IACF,CAAA;AAAA,IAEA,eAAe,MAAA,EAAQ;AACrB,MAAA,QAAA,GAAW,YAAA,CAAa,OAAO,IAAI,CAAA;AACnC,MAAA,IAAI,UAAU,IAAA,EAAM;AAClB,QAAA,OAAA,GAAU,OAAA,CAAQ,WAAW,QAAA,CAAS,IAAA;AAAA,MACxC;AAAA,IACF,CAAA;AAAA,IAEA,gBAAgB,MAAA,EAAuB;AAErC,MAAA,IAAI,iBAAiB,QAAA,EAAU;AAC7B,QAAA,MAAM,GAAA,GAAM,eAAA,CAAgB,QAAA,EAAU,MAAA,CAAO,OAAO,IAAI,CAAA;AACxD,QAAA,IAAI,GAAA,EAAK;AACP,UAAA,OAAA,CAAQ,GAAA,CAAI;AAAA,iCAAA,EAAsC,GAAG;AAAA,CAAI,CAAA;AACzD,UAAA,WAAA,CAAY,GAAG,CAAA;AAAA,QACjB;AAAA,MACF;AAEA,MAAA,MAAA,CAAO,WAAA,CAAY,GAAA,CAAI,CAAC,GAAA,EAAK,KAAK,IAAA,KAAS;AAEzC,QAAA,GAAA,CAAI,SAAA,CAAU,+BAA+B,GAAG,CAAA;AAChD,QAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,GAAG,CAAA;AACjD,QAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,GAAG,CAAA;AAGjD,QAAA,IAAI,GAAA,CAAI,GAAA,KAAQ,YAAA,IAAgB,GAAA,CAAI,QAAQ,aAAA,EAAe;AACzD,UAAA,GAAA,CAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,aAAa,CAAA;AAClD,UAAA,GAAA,CAAI,GAAA,CAAI,mBAAA,CAAoB,OAAO,CAAC,CAAA;AACpC,UAAA;AAAA,QACF;AAGA,QAAA,IAAI,GAAA,CAAI,MAAA,KAAW,KAAA,IAAS,GAAA,CAAI,QAAQ,WAAA,EAAa;AACnD,UAAA,GAAA,CAAI,UAAU,GAAA,EAAK;AAAA,YACjB,cAAA,EAAgB,mBAAA;AAAA,YAChB,eAAA,EAAiB,UAAA;AAAA,YACjB,UAAA,EAAY;AAAA,WACb,CAAA;AACD,UAAA,GAAA,CAAI,MAAM,YAAY,CAAA;AACtB,UAAA,YAAA,CAAa,IAAI,GAAG,CAAA;AACpB,UAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM;AACpB,YAAA,YAAA,CAAa,OAAO,GAAG,CAAA;AAAA,UACzB,CAAC,CAAA;AACD,UAAA;AAAA,QACF;AAGA,QAAA,IAAI,GAAA,CAAI,MAAA,KAAW,MAAA,IAAU,GAAA,CAAI,QAAQ,QAAA,EAAU;AACjD,UAAA,IAAI,IAAA,GAAO,EAAA;AACX,UAAA,GAAA,CAAI,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AAChC,YAAA,IAAA,IAAQ,MAAM,QAAA,EAAS;AAAA,UACzB,CAAC,CAAA;AACD,UAAA,GAAA,CAAI,EAAA,CAAG,OAAO,YAAY;AACxB,YAAA,IAAI;AACF,cAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC3B,cAAA,IAAI,CAAC,sBAAA,CAAuB,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA,EAAG;AAChD,gBAAA,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,GAAA,CAAI,MAAM,CAAA,kCAAA,CAAoC,CAAA;AAAA,cACnE;AACA,cAAA,MAAM,MAAA,GAAS,MAAM,UAAA,CAAW,GAAA,CAAI,QAAQ,GAAA,CAAI,MAAA,IAAU,EAAE,CAAA;AAC5D,cAAA,GAAA,CAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,oBAAoB,CAAA;AACzD,cAAA,GAAA,CAAI,GAAA,CAAI,IAAA,CAAK,SAAA,CAAU,MAAM,CAAC,CAAA;AAAA,YAChC,SAAS,GAAA,EAAK;AACZ,cAAA,GAAA,CAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,oBAAoB,CAAA;AACzD,cAAA,GAAA,CAAI,GAAA;AAAA,gBACF,KAAK,SAAA,CAAU;AAAA,kBACb,OAAA,EAAS,KAAA;AAAA,kBACT,EAAA,EAAI,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,CAAE,EAAA;AAAA,kBACrB,OAAO,EAAE,IAAA,EAAM,KAAA,EAAQ,OAAA,EAAU,IAAc,OAAA;AAAQ,iBACxD;AAAA,eACH;AAAA,YACF;AAAA,UACF,CAAC,CAAA;AACD,UAAA;AAAA,QACF;AAEA,QAAA,IAAA,EAAK;AAAA,MACP,CAAC,CAAA;AAAA,IACH,CAAA;AAAA,IAEA,QAAA,GAAW;AAET,MAAA,IAAI,aAAA,EAAe;AACjB,QAAA,aAAA,CAAc,KAAK,SAAS,CAAA;AAC5B,QAAA,aAAA,GAAgB,IAAA;AAAA,MAClB;AAAA,IACF;AAAA,GACF;AACF;AAUO,SAAS,oBAAoB,OAAA,EAAyB;AAC3D,EAAA,OAAO,CAAA;AAAA;AAAA;AAAA;AAAA,SAAA,EAIE,OAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAA,EAgBO,OAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA,kBAAA,EAUZ,IAAA,CAAK,SAAA,CAAU,sBAAsB,CAAC,CAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,OAAA,CAAA;AAsG1D","file":"index.cjs","sourcesContent":["import { type ChildProcess, spawn } from \"node:child_process\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport type { ServerResponse } from \"node:http\";\nimport { join, resolve } from \"node:path\";\nimport type { Plugin, ViteDevServer } from \"vite\";\nimport {\n  LIST_RESOURCES_METHOD,\n  READ_RESOURCE_METHOD,\n  RESOURCE_LIST_CHANGED_METHOD,\n  TOOLS_CALL_METHOD,\n} from \"../event-map.js\";\n\n/**\n * The server-bound requests this host proxies, which is exactly what its\n * handshake announces: `serverTools` for the tool call, `serverResources` for\n * the two resource methods. An allowlist in both directions — the page sends\n * nothing else to `/__mcp`, and `/__mcp` forwards nothing else to the server,\n * so a method the host never announced cannot reach the server through it.\n *\n * Adding a method here without adding the matching capability below, or the\n * reverse, is the bug this list exists to make obvious: a host that answers\n * what it does not announce is unusable, and one that announces what it does\n * not answer leaves the caller waiting on a reply nobody will send.\n */\nconst PROXIED_SERVER_METHODS: readonly string[] = [\n  TOOLS_CALL_METHOD,\n  READ_RESOURCE_METHOD,\n  LIST_RESOURCES_METHOD,\n];\n\nexport interface SynapseVitePluginOptions {\n  /** App name. If omitted, reads from ../manifest.json */\n  appName?: string;\n  /** Path to manifest.json. Default: ../manifest.json (relative to ui/) */\n  manifest?: string;\n  /**\n   * Shell command to start the MCP server. If omitted, derived from manifest.\n   * The server runs in stdio mode — stdin/stdout JSON-RPC.\n   */\n  serverCmd?: string;\n  /** Set to false to disable the preview host page at /__preview */\n  preview?: boolean;\n}\n\ninterface Manifest {\n  name: string;\n  version?: string;\n  server?: {\n    type?: string;\n    entry_point?: string;\n    mcp_config?: {\n      command?: string;\n      args?: string[];\n    };\n  };\n}\n\n/**\n * Synapse Vite plugin — full local dev experience for MCP apps.\n *\n * What it does:\n * - Reads ../manifest.json to get app name and server config\n * - Spawns the MCP server as a child process (stdio mode)\n * - Serves a preview host page at /__preview that iframes your app\n * - Proxies the iframe's tool calls and resource reads through POST /__mcp to\n *   the server, the pair its handshake announces as `serverTools` and\n *   `serverResources`\n * - Forwards the server's `notifications/resources/list_changed` to the iframe\n *   (over GET /__events), as an MCP Apps host does, so `useDataSync` fires\n * - Handles the ext-apps handshake so Synapse hooks work\n * - HMR works inside the iframe — edit .tsx, see changes instantly\n *\n * Usage in vite.config.ts:\n *   import { synapseVite } from \"@nimblebrain/synapse/vite\";\n *   export default { plugins: [react(), viteSingleFile(), synapseVite()] };\n *\n * Then: cd ui && npm run dev && open http://localhost:5173/__preview\n */\nexport function synapseVite(options: SynapseVitePluginOptions = {}): Plugin {\n  const enablePreview = options.preview !== false;\n  let manifest: Manifest | null = null;\n  let appName = options.appName ?? \"app\";\n  let serverProcess: ChildProcess | null = null;\n  const pendingRequests = new Map<\n    string,\n    { resolve: (v: unknown) => void; reject: (e: Error) => void }\n  >();\n  // Preview pages listening on GET /__events for the server's notifications.\n  const eventClients = new Set<ServerResponse>();\n\n  /**\n   * Hand a server notification to every open preview page, which posts it into\n   * the app iframe. Only the one an MCP Apps host forwards to a view is passed\n   * on; anything else the server says stays between it and the dev server.\n   */\n  function forwardNotification(msg: { method?: unknown; params?: unknown }): void {\n    if (msg.method !== RESOURCE_LIST_CHANGED_METHOD) return;\n    const frame = `data: ${JSON.stringify({ method: msg.method, params: msg.params ?? {} })}\\n\\n`;\n    for (const client of eventClients) client.write(frame);\n  }\n  let serverBuffer = \"\";\n\n  function loadManifest(root: string): Manifest | null {\n    const manifestPath = options.manifest\n      ? resolve(options.manifest)\n      : resolve(root, \"..\", \"manifest.json\");\n\n    if (!existsSync(manifestPath)) return null;\n    try {\n      return JSON.parse(readFileSync(manifestPath, \"utf-8\"));\n    } catch {\n      return null;\n    }\n  }\n\n  function deriveServerCmd(m: Manifest, root: string): string | null {\n    if (options.serverCmd) return options.serverCmd;\n    const cfg = m.server?.mcp_config;\n    if (!cfg?.command) return null;\n\n    const serverDir = resolve(root, \"..\");\n    let cmd = cfg.command;\n    const args = cfg.args ?? [];\n\n    // Python projects: use `uv run` if pyproject.toml exists\n    if (cmd === \"python\" && existsSync(join(serverDir, \"pyproject.toml\"))) {\n      cmd = \"uv run python\";\n    }\n\n    return `cd ${JSON.stringify(serverDir)} && ${cmd} ${args.join(\" \")}`;\n  }\n\n  function startServer(cmd: string): void {\n    serverProcess = spawn(cmd, {\n      shell: true,\n      stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    });\n\n    serverProcess.stderr?.on(\"data\", (d: Buffer) => {\n      process.stderr.write(`  [mcp] ${d}`);\n    });\n\n    serverProcess.stdout?.on(\"data\", (d: Buffer) => {\n      serverBuffer += d.toString();\n      // Parse line-delimited JSON-RPC responses\n      const lines = serverBuffer.split(\"\\n\");\n      serverBuffer = lines.pop() ?? \"\"; // keep incomplete line\n      for (const line of lines) {\n        if (!line.trim()) continue;\n        try {\n          const msg = JSON.parse(line);\n          if (msg.id && pendingRequests.has(msg.id)) {\n            const p = pendingRequests.get(msg.id);\n            pendingRequests.delete(msg.id);\n            p?.resolve(msg);\n          } else if (msg.id === undefined && typeof msg.method === \"string\") {\n            forwardNotification(msg);\n          }\n        } catch {\n          // Not JSON — log it\n          process.stderr.write(`  [mcp] ${line}\\n`);\n        }\n      }\n    });\n\n    serverProcess.on(\"exit\", (code) => {\n      if (code !== null && code !== 0) {\n        console.error(`  [mcp] Server exited with code ${code}`);\n      }\n      serverProcess = null;\n    });\n\n    // Send initialize\n    sendToServer({\n      jsonrpc: \"2.0\",\n      id: \"init-1\",\n      method: \"initialize\",\n      params: {\n        protocolVersion: \"2024-11-05\",\n        capabilities: {},\n        clientInfo: { name: \"synapse-preview\", version: \"0.1.0\" },\n      },\n    });\n  }\n\n  function sendToServer(msg: Record<string, unknown>): void {\n    if (!serverProcess?.stdin?.writable) return;\n    serverProcess.stdin.write(`${JSON.stringify(msg)}\\n`);\n  }\n\n  function callServer(method: string, params: Record<string, unknown>): Promise<unknown> {\n    return new Promise((resolve, reject) => {\n      const id = `preview-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;\n      pendingRequests.set(id, { resolve, reject });\n      sendToServer({ jsonrpc: \"2.0\", id, method, params });\n      setTimeout(() => {\n        if (pendingRequests.has(id)) {\n          pendingRequests.delete(id);\n          reject(new Error(`${method} timed out (10s)`));\n        }\n      }, 10000);\n    });\n  }\n\n  return {\n    name: \"synapse\",\n\n    config() {\n      return {\n        define: {\n          \"import.meta.env.SYNAPSE_APP_NAME\": JSON.stringify(appName),\n        },\n        server: {\n          hmr: {\n            protocol: \"ws\",\n            host: \"localhost\",\n          },\n        },\n      };\n    },\n\n    configResolved(config) {\n      manifest = loadManifest(config.root);\n      if (manifest?.name) {\n        appName = options.appName ?? manifest.name;\n      }\n    },\n\n    configureServer(server: ViteDevServer) {\n      // Start MCP server\n      if (enablePreview && manifest) {\n        const cmd = deriveServerCmd(manifest, server.config.root);\n        if (cmd) {\n          console.log(`\\n  [synapse] Starting MCP server: ${cmd}\\n`);\n          startServer(cmd);\n        }\n      }\n\n      server.middlewares.use((req, res, next) => {\n        // CORS for iframe communication\n        res.setHeader(\"Access-Control-Allow-Origin\", \"*\");\n        res.setHeader(\"Access-Control-Allow-Methods\", \"*\");\n        res.setHeader(\"Access-Control-Allow-Headers\", \"*\");\n\n        // /__preview — bridge host page\n        if (req.url === \"/__preview\" || req.url === \"/__preview/\") {\n          res.writeHead(200, { \"Content-Type\": \"text/html\" });\n          res.end(vitePreviewHostHtml(appName));\n          return;\n        }\n\n        // GET /__events — the server's notifications, pushed to the preview page\n        if (req.method === \"GET\" && req.url === \"/__events\") {\n          res.writeHead(200, {\n            \"Content-Type\": \"text/event-stream\",\n            \"Cache-Control\": \"no-cache\",\n            Connection: \"keep-alive\",\n          });\n          res.write(\": open\\n\\n\");\n          eventClients.add(res);\n          req.on(\"close\", () => {\n            eventClients.delete(res);\n          });\n          return;\n        }\n\n        // POST /__mcp — the server-bound request proxy\n        if (req.method === \"POST\" && req.url === \"/__mcp\") {\n          let body = \"\";\n          req.on(\"data\", (chunk: Buffer) => {\n            body += chunk.toString();\n          });\n          req.on(\"end\", async () => {\n            try {\n              const msg = JSON.parse(body);\n              if (!PROXIED_SERVER_METHODS.includes(msg.method)) {\n                throw new Error(`${msg.method} is not a method this host proxies`);\n              }\n              const result = await callServer(msg.method, msg.params ?? {});\n              res.writeHead(200, { \"Content-Type\": \"application/json\" });\n              res.end(JSON.stringify(result));\n            } catch (err) {\n              res.writeHead(200, { \"Content-Type\": \"application/json\" });\n              res.end(\n                JSON.stringify({\n                  jsonrpc: \"2.0\",\n                  id: JSON.parse(body).id,\n                  error: { code: -32000, message: (err as Error).message },\n                }),\n              );\n            }\n          });\n          return;\n        }\n\n        next();\n      });\n    },\n\n    buildEnd() {\n      // Kill server on build end (for production builds)\n      if (serverProcess) {\n        serverProcess.kill(\"SIGTERM\");\n        serverProcess = null;\n      }\n    },\n  };\n}\n\n/**\n * The bridge host page the dev server serves at \\`/__preview\\`.\n *\n * Named apart from \\`previewHostHtml\\` in \\`src/preview/server.ts\\`, which is the\n * standalone \\`synapse preview\\` harness: this package has two hand-written\n * hosts, and the conformance suite drives both, so one name for two pages would\n * be a name that resolves to whichever was imported last.\n */\nexport function vitePreviewHostHtml(appName: string): string {\n  return `<!DOCTYPE html>\n<html>\n<head>\n  <meta charset=\"utf-8\" />\n  <title>${appName} — Synapse Preview</title>\n  <style>\n    * { margin: 0; padding: 0; box-sizing: border-box; }\n    body { font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif; background: #0f172a; color: #e2e8f0; }\n    header { padding: 10px 16px; background: #1e293b; border-bottom: 1px solid #334155; display: flex; align-items: center; gap: 10px; font-size: 13px; }\n    header .dot { width: 8px; height: 8px; border-radius: 50%; background: #22c55e; }\n    header .name { font-weight: 600; }\n    header .spacer { flex: 1; }\n    header button { background: #334155; border: none; color: #e2e8f0; padding: 3px 8px; border-radius: 4px; cursor: pointer; font-size: 12px; }\n    header .url { color: #64748b; font-size: 11px; font-family: monospace; }\n    iframe { width: 100%; height: calc(100vh - 41px); border: none; }\n  </style>\n</head>\n<body>\n  <header>\n    <span class=\"dot\"></span>\n    <span class=\"name\">${appName}</span>\n    <span class=\"spacer\"></span>\n    <button id=\"toggle\">Toggle Theme</button>\n    <span class=\"url\">Synapse Preview</span>\n  </header>\n  <iframe id=\"app\"></iframe>\n\n  <script>\n    var iframe = document.getElementById(\"app\");\n    var dark = true;\n    var PROXIED = ${JSON.stringify(PROXIED_SERVER_METHODS)};\n\n    // Every key here is one the spec's style-variable enum names. That enum is\n    // a strict record, so a single extra key makes a spec client reject the\n    // whole \\`ui/initialize\\` result and refuse to connect — not just ignore the\n    // key. The kit's own neutral defaults back anything a host leaves out.\n    function getTokens(d) {\n      return d ? {\n        \"--color-background-primary\":\"#0f172a\",\"--color-background-secondary\":\"#1e293b\",\n        \"--color-background-tertiary\":\"#2a374a\",\"--color-text-primary\":\"#e2e8f0\",\n        \"--color-text-secondary\":\"#94a3b8\",\"--color-text-tertiary\":\"#64748b\",\n        \"--color-border-primary\":\"#334155\",\"--color-border-secondary\":\"#475569\",\n        \"--color-ring-primary\":\"#6366f1\",\n        \"--border-radius-sm\":\"0.5rem\",\"--font-sans\":\"-apple-system,BlinkMacSystemFont,sans-serif\"\n      } : {\n        \"--color-background-primary\":\"#ffffff\",\"--color-background-secondary\":\"#f8fafc\",\n        \"--color-background-tertiary\":\"#f1f5f9\",\"--color-text-primary\":\"#0f172a\",\n        \"--color-text-secondary\":\"#64748b\",\"--color-text-tertiary\":\"#94a3b8\",\n        \"--color-border-primary\":\"#e2e8f0\",\"--color-border-secondary\":\"#cbd5e1\",\n        \"--color-ring-primary\":\"#6366f1\",\n        \"--border-radius-sm\":\"0.5rem\",\"--font-sans\":\"-apple-system,BlinkMacSystemFont,sans-serif\"\n      };\n    }\n\n    function post(msg) { iframe.contentWindow.postMessage(msg, \"*\"); }\n\n    // A request is a frame carrying an id — and \\`0\\` is a perfectly good id.\n    // The MCP SDK numbers from zero, so a truthiness test drops the first\n    // request every spec client ever sends, which is its \\`ui/initialize\\`.\n    function isRequest(msg) { return msg.id !== undefined && msg.id !== null; }\n\n    window.addEventListener(\"message\", async function(e) {\n      if (e.source !== iframe.contentWindow) return;\n      var msg = e.data;\n      if (!msg || typeof msg !== \"object\") return;\n\n      // ext-apps handshake\n      // \\`hostInfo\\`/\\`hostCapabilities\\` are the spec's field names, and a spec\n      // client validates the result against them — the official ext-apps\n      // \\`App\\` refuses to connect to anything else.\n      if (msg.method === \"ui/initialize\" && isRequest(msg)) {\n        post({ jsonrpc:\"2.0\", id:msg.id, result: {\n          protocolVersion:\"2026-01-26\",\n          hostInfo:{name:\"nimblebrain\",version:\"preview\"},\n          hostCapabilities:{openLinks:{},serverTools:{},serverResources:{listChanged:true},\n            updateModelContext:{text:{},structuredContent:{}},\n            experimental:{\"ai.nimblebrain/action\":{},\"ai.nimblebrain/keydown\":{}}},\n          hostContext:{theme:dark?\"dark\":\"light\",styles:{variables:getTokens(dark)}}\n        }});\n        return;\n      }\n      if (msg.method === \"ui/notifications/initialized\") return;\n\n      // Server-bound requests — proxied via the Vite middleware. The set is\n      // exactly what \\`serverTools\\` and \\`serverResources\\` above announce, so\n      // neither is declared without something on the other end.\n      if (PROXIED.indexOf(msg.method) !== -1 && isRequest(msg)) {\n        var originalId = msg.id;\n        try {\n          var r = await fetch(\"/__mcp\", {\n            method:\"POST\", headers:{\"Content-Type\":\"application/json\"},\n            body: JSON.stringify({jsonrpc:\"2.0\",id:msg.id,method:msg.method,params:msg.params||{}})\n          });\n          var response = await r.json();\n          response.id = originalId;\n          post(response);\n          // The page announces no data change of its own. A change is the\n          // server's to announce, and that reaches the app over /__events. One\n          // fired here on the app's own call would loop: the call fires it, the\n          // app re-fetches, and the re-fetch fires it again.\n        } catch(err) {\n          post({jsonrpc:\"2.0\",id:originalId,error:{code:-32000,message:err.message}});\n        }\n        return;\n      }\n\n      // Log other messages\n      if (msg.method === \"ai.nimblebrain/action\") console.log(\"[action]\", msg.params?.action, msg.params);\n      else if (msg.method === \"ui/update-model-context\") { console.log(\"[model-context]\", msg.params?.structuredContent); if (isRequest(msg)) post({jsonrpc:\"2.0\",id:msg.id,result:{}}); }\n      else if (msg.method === \"ai.nimblebrain/keydown\") { /* ignore */ }\n      else if (msg.method) console.log(\"[bridge]\", msg.method, msg);\n    });\n\n    document.getElementById(\"toggle\").onclick = function() {\n      dark = !dark;\n      document.body.style.background = dark ? \"#0f172a\" : \"#f1f5f9\";\n      post({jsonrpc:\"2.0\",method:\"ui/notifications/host-context-changed\",params:{theme:dark?\"dark\":\"light\",styles:{variables:getTokens(dark)}}});\n    };\n\n    // The server's own notifications, forwarded into the app as an MCP Apps\n    // host forwards them. The dev server passes on only the ones a host would.\n    new EventSource(\"/__events\").onmessage = function(e) {\n      var n = JSON.parse(e.data);\n      post({jsonrpc:\"2.0\",method:n.method,params:n.params});\n    };\n\n    // Load the iframe AFTER the message listener is attached to avoid\n    // a race where the app sends ui/initialize before the bridge is ready.\n    iframe.src = \"/\";\n  </script>\n</body>\n</html>`;\n}\n"]}

package/dist/vite/index.js

@@ -1,5 +1,4 @@
-import { TOOLS_CALL_METHOD, READ_RESOURCE_METHOD, LIST_RESOURCES_METHOD, RESOURCE_LIST_CHANGED_METHOD } from '../chunk-54W6IAHM.js';
-import '../chunk-PZ5AY32C.js';
+import { TOOLS_CALL_METHOD, READ_RESOURCE_METHOD, LIST_RESOURCES_METHOD, RESOURCE_LIST_CHANGED_METHOD } from '../chunk-H3INUKA3.js';
 import { spawn } from 'child_process';
 import { existsSync, readFileSync } from 'fs';
 import { resolve, join } from 'path';
@@ -275,7 +274,9 @@ function vitePreviewHostHtml(appName) {
         post({ jsonrpc:"2.0", id:msg.id, result: {
           protocolVersion:"2026-01-26",
           hostInfo:{name:"nimblebrain",version:"preview"},
-          hostCapabilities:{openLinks:{},serverTools:{},serverResources:{listChanged:true}},
+          hostCapabilities:{openLinks:{},serverTools:{},serverResources:{listChanged:true},
+            updateModelContext:{text:{},structuredContent:{}},
+            experimental:{"ai.nimblebrain/action":{},"ai.nimblebrain/keydown":{}}},
           hostContext:{theme:dark?"dark":"light",styles:{variables:getTokens(dark)}}
         }});
         return;
@@ -306,10 +307,9 @@ function vitePreviewHostHtml(appName) {
       }
 
       // Log other messages
-      if (msg.method === "synapse/chat") console.log("[chat]", msg.params?.message);
-      else if (msg.method === "synapse/action") console.log("[action]", msg.params?.action, msg.params);
+      if (msg.method === "ai.nimblebrain/action") console.log("[action]", msg.params?.action, msg.params);
       else if (msg.method === "ui/update-model-context") { console.log("[model-context]", msg.params?.structuredContent); if (isRequest(msg)) post({jsonrpc:"2.0",id:msg.id,result:{}}); }
-      else if (msg.method === "synapse/keydown") { /* ignore */ }
+      else if (msg.method === "ai.nimblebrain/keydown") { /* ignore */ }
       else if (msg.method) console.log("[bridge]", msg.method, msg);
     });
 

package/dist/vite/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/vite/plugin.ts"],"names":["resolve"],"mappings":";;;;;;AAwBA,IAAM,sBAAA,GAA4C;AAAA,EAChD,iBAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF,CAAA;AAkDO,SAAS,WAAA,CAAY,OAAA,GAAoC,EAAC,EAAW;AAC1E,EAAA,MAAM,aAAA,GAAgB,QAAQ,OAAA,KAAY,KAAA;AAC1C,EAAA,IAAI,QAAA,GAA4B,IAAA;AAChC,EAAA,IAAI,OAAA,GAAU,QAAQ,OAAA,IAAW,KAAA;AACjC,EAAA,IAAI,aAAA,GAAqC,IAAA;AACzC,EAAA,MAAM,eAAA,uBAAsB,GAAA,EAG1B;AAEF,EAAA,MAAM,YAAA,uBAAmB,GAAA,EAAoB;AAO7C,EAAA,SAAS,oBAAoB,GAAA,EAAmD;AAC9E,IAAA,IAAI,GAAA,CAAI,WAAW,4BAAA,EAA8B;AACjD,IAAA,MAAM,KAAA,GAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,EAAE,MAAA,EAAQ,GAAA,CAAI,MAAA,EAAQ,MAAA,EAAQ,GAAA,CAAI,MAAA,IAAU,EAAC,EAAG,CAAC;;AAAA,CAAA;AACvF,IAAA,KAAA,MAAW,MAAA,IAAU,YAAA,EAAc,MAAA,CAAO,KAAA,CAAM,KAAK,CAAA;AAAA,EACvD;AACA,EAAA,IAAI,YAAA,GAAe,EAAA;AAEnB,EAAA,SAAS,aAAa,IAAA,EAA+B;AACnD,IAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,QAAA,GACzB,OAAA,CAAQ,OAAA,CAAQ,QAAQ,CAAA,GACxB,OAAA,CAAQ,IAAA,EAAM,IAAA,EAAM,eAAe,CAAA;AAEvC,IAAA,IAAI,CAAC,UAAA,CAAW,YAAY,CAAA,EAAG,OAAO,IAAA;AACtC,IAAA,IAAI;AACF,MAAA,OAAO,IAAA,CAAK,KAAA,CAAM,YAAA,CAAa,YAAA,EAAc,OAAO,CAAC,CAAA;AAAA,IACvD,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,SAAS,eAAA,CAAgB,GAAa,IAAA,EAA6B;AACjE,IAAA,IAAI,OAAA,CAAQ,SAAA,EAAW,OAAO,OAAA,CAAQ,SAAA;AACtC,IAAA,MAAM,GAAA,GAAM,EAAE,MAAA,EAAQ,UAAA;AACtB,IAAA,IAAI,CAAC,GAAA,EAAK,OAAA,EAAS,OAAO,IAAA;AAE1B,IAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,IAAA,EAAM,IAAI,CAAA;AACpC,IAAA,IAAI,MAAM,GAAA,CAAI,OAAA;AACd,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,IAAA,IAAQ,EAAC;AAG1B,IAAA,IAAI,QAAQ,QAAA,IAAY,UAAA,CAAW,KAAK,SAAA,EAAW,gBAAgB,CAAC,CAAA,EAAG;AACrE,MAAA,GAAA,GAAM,eAAA;AAAA,IACR;AAEA,IAAA,OAAO,CAAA,GAAA,EAAM,IAAA,CAAK,SAAA,CAAU,SAAS,CAAC,CAAA,IAAA,EAAO,GAAG,CAAA,CAAA,EAAI,IAAA,CAAK,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA;AAAA,EACpE;AAEA,EAAA,SAAS,YAAY,GAAA,EAAmB;AACtC,IAAA,aAAA,GAAgB,MAAM,GAAA,EAAK;AAAA,MACzB,KAAA,EAAO,IAAA;AAAA,MACP,KAAA,EAAO,CAAC,MAAA,EAAQ,MAAA,EAAQ,MAAM;AAAA,KAC/B,CAAA;AAED,IAAA,aAAA,CAAc,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAc;AAC9C,MAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,CAAC,CAAA,CAAE,CAAA;AAAA,IACrC,CAAC,CAAA;AAED,IAAA,aAAA,CAAc,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAc;AAC9C,MAAA,YAAA,IAAgB,EAAE,QAAA,EAAS;AAE3B,MAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,KAAA,CAAM,IAAI,CAAA;AACrC,MAAA,YAAA,GAAe,KAAA,CAAM,KAAI,IAAK,EAAA;AAC9B,MAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,QAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAK,EAAG;AAClB,QAAA,IAAI;AACF,UAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC3B,UAAA,IAAI,IAAI,EAAA,IAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,CAAI,EAAE,CAAA,EAAG;AACzC,YAAA,MAAM,CAAA,GAAI,eAAA,CAAgB,GAAA,CAAI,GAAA,CAAI,EAAE,CAAA;AACpC,YAAA,eAAA,CAAgB,MAAA,CAAO,IAAI,EAAE,CAAA;AAC7B,YAAA,CAAA,EAAG,QAAQ,GAAG,CAAA;AAAA,UAChB,WAAW,GAAA,CAAI,EAAA,KAAO,UAAa,OAAO,GAAA,CAAI,WAAW,QAAA,EAAU;AACjE,YAAA,mBAAA,CAAoB,GAAG,CAAA;AAAA,UACzB;AAAA,QACF,CAAA,CAAA,MAAQ;AAEN,UAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,IAAI;AAAA,CAAI,CAAA;AAAA,QAC1C;AAAA,MACF;AAAA,IACF,CAAC,CAAA;AAED,IAAA,aAAA,CAAc,EAAA,CAAG,MAAA,EAAQ,CAAC,IAAA,KAAS;AACjC,MAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,IAAA,KAAS,CAAA,EAAG;AAC/B,QAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,gCAAA,EAAmC,IAAI,CAAA,CAAE,CAAA;AAAA,MACzD;AACA,MAAA,aAAA,GAAgB,IAAA;AAAA,IAClB,CAAC,CAAA;AAGD,IAAA,YAAA,CAAa;AAAA,MACX,OAAA,EAAS,KAAA;AAAA,MACT,EAAA,EAAI,QAAA;AAAA,MACJ,MAAA,EAAQ,YAAA;AAAA,MACR,MAAA,EAAQ;AAAA,QACN,eAAA,EAAiB,YAAA;AAAA,QACjB,cAAc,EAAC;AAAA,QACf,UAAA,EAAY,EAAE,IAAA,EAAM,iBAAA,EAAmB,SAAS,OAAA;AAAQ;AAC1D,KACD,CAAA;AAAA,EACH;AAEA,EAAA,SAAS,aAAa,GAAA,EAAoC;AACxD,IAAA,IAAI,CAAC,aAAA,EAAe,KAAA,EAAO,QAAA,EAAU;AACrC,IAAA,aAAA,CAAc,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,SAAA,CAAU,GAAG,CAAC;AAAA,CAAI,CAAA;AAAA,EACtD;AAEA,EAAA,SAAS,UAAA,CAAW,QAAgB,MAAA,EAAmD;AACrF,IAAA,OAAO,IAAI,OAAA,CAAQ,CAACA,QAAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,EAAA,GAAK,CAAA,QAAA,EAAW,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA,EAAI,IAAA,CAAK,MAAA,EAAO,CAAE,SAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,CAAA;AAC1E,MAAA,eAAA,CAAgB,IAAI,EAAA,EAAI,EAAE,OAAA,EAAAA,QAAAA,EAAS,QAAQ,CAAA;AAC3C,MAAA,YAAA,CAAa,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,MAAA,EAAQ,QAAQ,CAAA;AACnD,MAAA,UAAA,CAAW,MAAM;AACf,QAAA,IAAI,eAAA,CAAgB,GAAA,CAAI,EAAE,CAAA,EAAG;AAC3B,UAAA,eAAA,CAAgB,OAAO,EAAE,CAAA;AACzB,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,EAAG,MAAM,kBAAkB,CAAC,CAAA;AAAA,QAC/C;AAAA,MACF,GAAG,GAAK,CAAA;AAAA,IACV,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,SAAA;AAAA,IAEN,MAAA,GAAS;AACP,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ;AAAA,UACN,kCAAA,EAAoC,IAAA,CAAK,SAAA,CAAU,OAAO;AAAA,SAC5D;AAAA,QACA,MAAA,EAAQ;AAAA,UACN,GAAA,EAAK;AAAA,YACH,QAAA,EAAU,IAAA;AAAA,YACV,IAAA,EAAM;AAAA;AACR;AACF,OACF;AAAA,IACF,CAAA;AAAA,IAEA,eAAe,MAAA,EAAQ;AACrB,MAAA,QAAA,GAAW,YAAA,CAAa,OAAO,IAAI,CAAA;AACnC,MAAA,IAAI,UAAU,IAAA,EAAM;AAClB,QAAA,OAAA,GAAU,OAAA,CAAQ,WAAW,QAAA,CAAS,IAAA;AAAA,MACxC;AAAA,IACF,CAAA;AAAA,IAEA,gBAAgB,MAAA,EAAuB;AAErC,MAAA,IAAI,iBAAiB,QAAA,EAAU;AAC7B,QAAA,MAAM,GAAA,GAAM,eAAA,CAAgB,QAAA,EAAU,MAAA,CAAO,OAAO,IAAI,CAAA;AACxD,QAAA,IAAI,GAAA,EAAK;AACP,UAAA,OAAA,CAAQ,GAAA,CAAI;AAAA,iCAAA,EAAsC,GAAG;AAAA,CAAI,CAAA;AACzD,UAAA,WAAA,CAAY,GAAG,CAAA;AAAA,QACjB;AAAA,MACF;AAEA,MAAA,MAAA,CAAO,WAAA,CAAY,GAAA,CAAI,CAAC,GAAA,EAAK,KAAK,IAAA,KAAS;AAEzC,QAAA,GAAA,CAAI,SAAA,CAAU,+BAA+B,GAAG,CAAA;AAChD,QAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,GAAG,CAAA;AACjD,QAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,GAAG,CAAA;AAGjD,QAAA,IAAI,GAAA,CAAI,GAAA,KAAQ,YAAA,IAAgB,GAAA,CAAI,QAAQ,aAAA,EAAe;AACzD,UAAA,GAAA,CAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,aAAa,CAAA;AAClD,UAAA,GAAA,CAAI,GAAA,CAAI,mBAAA,CAAoB,OAAO,CAAC,CAAA;AACpC,UAAA;AAAA,QACF;AAGA,QAAA,IAAI,GAAA,CAAI,MAAA,KAAW,KAAA,IAAS,GAAA,CAAI,QAAQ,WAAA,EAAa;AACnD,UAAA,GAAA,CAAI,UAAU,GAAA,EAAK;AAAA,YACjB,cAAA,EAAgB,mBAAA;AAAA,YAChB,eAAA,EAAiB,UAAA;AAAA,YACjB,UAAA,EAAY;AAAA,WACb,CAAA;AACD,UAAA,GAAA,CAAI,MAAM,YAAY,CAAA;AACtB,UAAA,YAAA,CAAa,IAAI,GAAG,CAAA;AACpB,UAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM;AACpB,YAAA,YAAA,CAAa,OAAO,GAAG,CAAA;AAAA,UACzB,CAAC,CAAA;AACD,UAAA;AAAA,QACF;AAGA,QAAA,IAAI,GAAA,CAAI,MAAA,KAAW,MAAA,IAAU,GAAA,CAAI,QAAQ,QAAA,EAAU;AACjD,UAAA,IAAI,IAAA,GAAO,EAAA;AACX,UAAA,GAAA,CAAI,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AAChC,YAAA,IAAA,IAAQ,MAAM,QAAA,EAAS;AAAA,UACzB,CAAC,CAAA;AACD,UAAA,GAAA,CAAI,EAAA,CAAG,OAAO,YAAY;AACxB,YAAA,IAAI;AACF,cAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC3B,cAAA,IAAI,CAAC,sBAAA,CAAuB,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA,EAAG;AAChD,gBAAA,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,GAAA,CAAI,MAAM,CAAA,kCAAA,CAAoC,CAAA;AAAA,cACnE;AACA,cAAA,MAAM,MAAA,GAAS,MAAM,UAAA,CAAW,GAAA,CAAI,QAAQ,GAAA,CAAI,MAAA,IAAU,EAAE,CAAA;AAC5D,cAAA,GAAA,CAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,oBAAoB,CAAA;AACzD,cAAA,GAAA,CAAI,GAAA,CAAI,IAAA,CAAK,SAAA,CAAU,MAAM,CAAC,CAAA;AAAA,YAChC,SAAS,GAAA,EAAK;AACZ,cAAA,GAAA,CAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,oBAAoB,CAAA;AACzD,cAAA,GAAA,CAAI,GAAA;AAAA,gBACF,KAAK,SAAA,CAAU;AAAA,kBACb,OAAA,EAAS,KAAA;AAAA,kBACT,EAAA,EAAI,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,CAAE,EAAA;AAAA,kBACrB,OAAO,EAAE,IAAA,EAAM,KAAA,EAAQ,OAAA,EAAU,IAAc,OAAA;AAAQ,iBACxD;AAAA,eACH;AAAA,YACF;AAAA,UACF,CAAC,CAAA;AACD,UAAA;AAAA,QACF;AAEA,QAAA,IAAA,EAAK;AAAA,MACP,CAAC,CAAA;AAAA,IACH,CAAA;AAAA,IAEA,QAAA,GAAW;AAET,MAAA,IAAI,aAAA,EAAe;AACjB,QAAA,aAAA,CAAc,KAAK,SAAS,CAAA;AAC5B,QAAA,aAAA,GAAgB,IAAA;AAAA,MAClB;AAAA,IACF;AAAA,GACF;AACF;AAUO,SAAS,oBAAoB,OAAA,EAAyB;AAC3D,EAAA,OAAO,CAAA;AAAA;AAAA;AAAA;AAAA,SAAA,EAIE,OAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAA,EAgBO,OAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA,kBAAA,EAUZ,IAAA,CAAK,SAAA,CAAU,sBAAsB,CAAC,CAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,OAAA,CAAA;AAqG1D","file":"index.js","sourcesContent":["import { type ChildProcess, spawn } from \"node:child_process\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport type { ServerResponse } from \"node:http\";\nimport { join, resolve } from \"node:path\";\nimport type { Plugin, ViteDevServer } from \"vite\";\nimport {\n  LIST_RESOURCES_METHOD,\n  READ_RESOURCE_METHOD,\n  RESOURCE_LIST_CHANGED_METHOD,\n  TOOLS_CALL_METHOD,\n} from \"../event-map.js\";\n\n/**\n * The server-bound requests this host proxies, which is exactly what its\n * handshake announces: `serverTools` for the tool call, `serverResources` for\n * the two resource methods. An allowlist in both directions — the page sends\n * nothing else to `/__mcp`, and `/__mcp` forwards nothing else to the server,\n * so a method the host never announced cannot reach the server through it.\n *\n * Adding a method here without adding the matching capability below, or the\n * reverse, is the bug this list exists to make obvious: a host that answers\n * what it does not announce is unusable, and one that announces what it does\n * not answer leaves the caller waiting on a reply nobody will send.\n */\nconst PROXIED_SERVER_METHODS: readonly string[] = [\n  TOOLS_CALL_METHOD,\n  READ_RESOURCE_METHOD,\n  LIST_RESOURCES_METHOD,\n];\n\nexport interface SynapseVitePluginOptions {\n  /** App name. If omitted, reads from ../manifest.json */\n  appName?: string;\n  /** Path to manifest.json. Default: ../manifest.json (relative to ui/) */\n  manifest?: string;\n  /**\n   * Shell command to start the MCP server. If omitted, derived from manifest.\n   * The server runs in stdio mode — stdin/stdout JSON-RPC.\n   */\n  serverCmd?: string;\n  /** Set to false to disable the preview host page at /__preview */\n  preview?: boolean;\n}\n\ninterface Manifest {\n  name: string;\n  version?: string;\n  server?: {\n    type?: string;\n    entry_point?: string;\n    mcp_config?: {\n      command?: string;\n      args?: string[];\n    };\n  };\n}\n\n/**\n * Synapse Vite plugin — full local dev experience for MCP apps.\n *\n * What it does:\n * - Reads ../manifest.json to get app name and server config\n * - Spawns the MCP server as a child process (stdio mode)\n * - Serves a preview host page at /__preview that iframes your app\n * - Proxies the iframe's tool calls and resource reads through POST /__mcp to\n *   the server, the pair its handshake announces as `serverTools` and\n *   `serverResources`\n * - Forwards the server's `notifications/resources/list_changed` to the iframe\n *   (over GET /__events), as an MCP Apps host does, so `useDataSync` fires\n * - Handles the ext-apps handshake so Synapse hooks work\n * - HMR works inside the iframe — edit .tsx, see changes instantly\n *\n * Usage in vite.config.ts:\n *   import { synapseVite } from \"@nimblebrain/synapse/vite\";\n *   export default { plugins: [react(), viteSingleFile(), synapseVite()] };\n *\n * Then: cd ui && npm run dev && open http://localhost:5173/__preview\n */\nexport function synapseVite(options: SynapseVitePluginOptions = {}): Plugin {\n  const enablePreview = options.preview !== false;\n  let manifest: Manifest | null = null;\n  let appName = options.appName ?? \"app\";\n  let serverProcess: ChildProcess | null = null;\n  const pendingRequests = new Map<\n    string,\n    { resolve: (v: unknown) => void; reject: (e: Error) => void }\n  >();\n  // Preview pages listening on GET /__events for the server's notifications.\n  const eventClients = new Set<ServerResponse>();\n\n  /**\n   * Hand a server notification to every open preview page, which posts it into\n   * the app iframe. Only the one an MCP Apps host forwards to a view is passed\n   * on; anything else the server says stays between it and the dev server.\n   */\n  function forwardNotification(msg: { method?: unknown; params?: unknown }): void {\n    if (msg.method !== RESOURCE_LIST_CHANGED_METHOD) return;\n    const frame = `data: ${JSON.stringify({ method: msg.method, params: msg.params ?? {} })}\\n\\n`;\n    for (const client of eventClients) client.write(frame);\n  }\n  let serverBuffer = \"\";\n\n  function loadManifest(root: string): Manifest | null {\n    const manifestPath = options.manifest\n      ? resolve(options.manifest)\n      : resolve(root, \"..\", \"manifest.json\");\n\n    if (!existsSync(manifestPath)) return null;\n    try {\n      return JSON.parse(readFileSync(manifestPath, \"utf-8\"));\n    } catch {\n      return null;\n    }\n  }\n\n  function deriveServerCmd(m: Manifest, root: string): string | null {\n    if (options.serverCmd) return options.serverCmd;\n    const cfg = m.server?.mcp_config;\n    if (!cfg?.command) return null;\n\n    const serverDir = resolve(root, \"..\");\n    let cmd = cfg.command;\n    const args = cfg.args ?? [];\n\n    // Python projects: use `uv run` if pyproject.toml exists\n    if (cmd === \"python\" && existsSync(join(serverDir, \"pyproject.toml\"))) {\n      cmd = \"uv run python\";\n    }\n\n    return `cd ${JSON.stringify(serverDir)} && ${cmd} ${args.join(\" \")}`;\n  }\n\n  function startServer(cmd: string): void {\n    serverProcess = spawn(cmd, {\n      shell: true,\n      stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    });\n\n    serverProcess.stderr?.on(\"data\", (d: Buffer) => {\n      process.stderr.write(`  [mcp] ${d}`);\n    });\n\n    serverProcess.stdout?.on(\"data\", (d: Buffer) => {\n      serverBuffer += d.toString();\n      // Parse line-delimited JSON-RPC responses\n      const lines = serverBuffer.split(\"\\n\");\n      serverBuffer = lines.pop() ?? \"\"; // keep incomplete line\n      for (const line of lines) {\n        if (!line.trim()) continue;\n        try {\n          const msg = JSON.parse(line);\n          if (msg.id && pendingRequests.has(msg.id)) {\n            const p = pendingRequests.get(msg.id);\n            pendingRequests.delete(msg.id);\n            p?.resolve(msg);\n          } else if (msg.id === undefined && typeof msg.method === \"string\") {\n            forwardNotification(msg);\n          }\n        } catch {\n          // Not JSON — log it\n          process.stderr.write(`  [mcp] ${line}\\n`);\n        }\n      }\n    });\n\n    serverProcess.on(\"exit\", (code) => {\n      if (code !== null && code !== 0) {\n        console.error(`  [mcp] Server exited with code ${code}`);\n      }\n      serverProcess = null;\n    });\n\n    // Send initialize\n    sendToServer({\n      jsonrpc: \"2.0\",\n      id: \"init-1\",\n      method: \"initialize\",\n      params: {\n        protocolVersion: \"2024-11-05\",\n        capabilities: {},\n        clientInfo: { name: \"synapse-preview\", version: \"0.1.0\" },\n      },\n    });\n  }\n\n  function sendToServer(msg: Record<string, unknown>): void {\n    if (!serverProcess?.stdin?.writable) return;\n    serverProcess.stdin.write(`${JSON.stringify(msg)}\\n`);\n  }\n\n  function callServer(method: string, params: Record<string, unknown>): Promise<unknown> {\n    return new Promise((resolve, reject) => {\n      const id = `preview-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;\n      pendingRequests.set(id, { resolve, reject });\n      sendToServer({ jsonrpc: \"2.0\", id, method, params });\n      setTimeout(() => {\n        if (pendingRequests.has(id)) {\n          pendingRequests.delete(id);\n          reject(new Error(`${method} timed out (10s)`));\n        }\n      }, 10000);\n    });\n  }\n\n  return {\n    name: \"synapse\",\n\n    config() {\n      return {\n        define: {\n          \"import.meta.env.SYNAPSE_APP_NAME\": JSON.stringify(appName),\n        },\n        server: {\n          hmr: {\n            protocol: \"ws\",\n            host: \"localhost\",\n          },\n        },\n      };\n    },\n\n    configResolved(config) {\n      manifest = loadManifest(config.root);\n      if (manifest?.name) {\n        appName = options.appName ?? manifest.name;\n      }\n    },\n\n    configureServer(server: ViteDevServer) {\n      // Start MCP server\n      if (enablePreview && manifest) {\n        const cmd = deriveServerCmd(manifest, server.config.root);\n        if (cmd) {\n          console.log(`\\n  [synapse] Starting MCP server: ${cmd}\\n`);\n          startServer(cmd);\n        }\n      }\n\n      server.middlewares.use((req, res, next) => {\n        // CORS for iframe communication\n        res.setHeader(\"Access-Control-Allow-Origin\", \"*\");\n        res.setHeader(\"Access-Control-Allow-Methods\", \"*\");\n        res.setHeader(\"Access-Control-Allow-Headers\", \"*\");\n\n        // /__preview — bridge host page\n        if (req.url === \"/__preview\" || req.url === \"/__preview/\") {\n          res.writeHead(200, { \"Content-Type\": \"text/html\" });\n          res.end(vitePreviewHostHtml(appName));\n          return;\n        }\n\n        // GET /__events — the server's notifications, pushed to the preview page\n        if (req.method === \"GET\" && req.url === \"/__events\") {\n          res.writeHead(200, {\n            \"Content-Type\": \"text/event-stream\",\n            \"Cache-Control\": \"no-cache\",\n            Connection: \"keep-alive\",\n          });\n          res.write(\": open\\n\\n\");\n          eventClients.add(res);\n          req.on(\"close\", () => {\n            eventClients.delete(res);\n          });\n          return;\n        }\n\n        // POST /__mcp — the server-bound request proxy\n        if (req.method === \"POST\" && req.url === \"/__mcp\") {\n          let body = \"\";\n          req.on(\"data\", (chunk: Buffer) => {\n            body += chunk.toString();\n          });\n          req.on(\"end\", async () => {\n            try {\n              const msg = JSON.parse(body);\n              if (!PROXIED_SERVER_METHODS.includes(msg.method)) {\n                throw new Error(`${msg.method} is not a method this host proxies`);\n              }\n              const result = await callServer(msg.method, msg.params ?? {});\n              res.writeHead(200, { \"Content-Type\": \"application/json\" });\n              res.end(JSON.stringify(result));\n            } catch (err) {\n              res.writeHead(200, { \"Content-Type\": \"application/json\" });\n              res.end(\n                JSON.stringify({\n                  jsonrpc: \"2.0\",\n                  id: JSON.parse(body).id,\n                  error: { code: -32000, message: (err as Error).message },\n                }),\n              );\n            }\n          });\n          return;\n        }\n\n        next();\n      });\n    },\n\n    buildEnd() {\n      // Kill server on build end (for production builds)\n      if (serverProcess) {\n        serverProcess.kill(\"SIGTERM\");\n        serverProcess = null;\n      }\n    },\n  };\n}\n\n/**\n * The bridge host page the dev server serves at \\`/__preview\\`.\n *\n * Named apart from \\`previewHostHtml\\` in \\`src/preview/server.ts\\`, which is the\n * standalone \\`synapse preview\\` harness: this package has two hand-written\n * hosts, and the conformance suite drives both, so one name for two pages would\n * be a name that resolves to whichever was imported last.\n */\nexport function vitePreviewHostHtml(appName: string): string {\n  return `<!DOCTYPE html>\n<html>\n<head>\n  <meta charset=\"utf-8\" />\n  <title>${appName} — Synapse Preview</title>\n  <style>\n    * { margin: 0; padding: 0; box-sizing: border-box; }\n    body { font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif; background: #0f172a; color: #e2e8f0; }\n    header { padding: 10px 16px; background: #1e293b; border-bottom: 1px solid #334155; display: flex; align-items: center; gap: 10px; font-size: 13px; }\n    header .dot { width: 8px; height: 8px; border-radius: 50%; background: #22c55e; }\n    header .name { font-weight: 600; }\n    header .spacer { flex: 1; }\n    header button { background: #334155; border: none; color: #e2e8f0; padding: 3px 8px; border-radius: 4px; cursor: pointer; font-size: 12px; }\n    header .url { color: #64748b; font-size: 11px; font-family: monospace; }\n    iframe { width: 100%; height: calc(100vh - 41px); border: none; }\n  </style>\n</head>\n<body>\n  <header>\n    <span class=\"dot\"></span>\n    <span class=\"name\">${appName}</span>\n    <span class=\"spacer\"></span>\n    <button id=\"toggle\">Toggle Theme</button>\n    <span class=\"url\">Synapse Preview</span>\n  </header>\n  <iframe id=\"app\"></iframe>\n\n  <script>\n    var iframe = document.getElementById(\"app\");\n    var dark = true;\n    var PROXIED = ${JSON.stringify(PROXIED_SERVER_METHODS)};\n\n    // Every key here is one the spec's style-variable enum names. That enum is\n    // a strict record, so a single extra key makes a spec client reject the\n    // whole \\`ui/initialize\\` result and refuse to connect — not just ignore the\n    // key. The kit's own neutral defaults back anything a host leaves out.\n    function getTokens(d) {\n      return d ? {\n        \"--color-background-primary\":\"#0f172a\",\"--color-background-secondary\":\"#1e293b\",\n        \"--color-background-tertiary\":\"#2a374a\",\"--color-text-primary\":\"#e2e8f0\",\n        \"--color-text-secondary\":\"#94a3b8\",\"--color-text-tertiary\":\"#64748b\",\n        \"--color-border-primary\":\"#334155\",\"--color-border-secondary\":\"#475569\",\n        \"--color-ring-primary\":\"#6366f1\",\n        \"--border-radius-sm\":\"0.5rem\",\"--font-sans\":\"-apple-system,BlinkMacSystemFont,sans-serif\"\n      } : {\n        \"--color-background-primary\":\"#ffffff\",\"--color-background-secondary\":\"#f8fafc\",\n        \"--color-background-tertiary\":\"#f1f5f9\",\"--color-text-primary\":\"#0f172a\",\n        \"--color-text-secondary\":\"#64748b\",\"--color-text-tertiary\":\"#94a3b8\",\n        \"--color-border-primary\":\"#e2e8f0\",\"--color-border-secondary\":\"#cbd5e1\",\n        \"--color-ring-primary\":\"#6366f1\",\n        \"--border-radius-sm\":\"0.5rem\",\"--font-sans\":\"-apple-system,BlinkMacSystemFont,sans-serif\"\n      };\n    }\n\n    function post(msg) { iframe.contentWindow.postMessage(msg, \"*\"); }\n\n    // A request is a frame carrying an id — and \\`0\\` is a perfectly good id.\n    // The MCP SDK numbers from zero, so a truthiness test drops the first\n    // request every spec client ever sends, which is its \\`ui/initialize\\`.\n    function isRequest(msg) { return msg.id !== undefined && msg.id !== null; }\n\n    window.addEventListener(\"message\", async function(e) {\n      if (e.source !== iframe.contentWindow) return;\n      var msg = e.data;\n      if (!msg || typeof msg !== \"object\") return;\n\n      // ext-apps handshake\n      // \\`hostInfo\\`/\\`hostCapabilities\\` are the spec's field names, and a spec\n      // client validates the result against them — the official ext-apps\n      // \\`App\\` refuses to connect to anything else.\n      if (msg.method === \"ui/initialize\" && isRequest(msg)) {\n        post({ jsonrpc:\"2.0\", id:msg.id, result: {\n          protocolVersion:\"2026-01-26\",\n          hostInfo:{name:\"nimblebrain\",version:\"preview\"},\n          hostCapabilities:{openLinks:{},serverTools:{},serverResources:{listChanged:true}},\n          hostContext:{theme:dark?\"dark\":\"light\",styles:{variables:getTokens(dark)}}\n        }});\n        return;\n      }\n      if (msg.method === \"ui/notifications/initialized\") return;\n\n      // Server-bound requests — proxied via the Vite middleware. The set is\n      // exactly what \\`serverTools\\` and \\`serverResources\\` above announce, so\n      // neither is declared without something on the other end.\n      if (PROXIED.indexOf(msg.method) !== -1 && isRequest(msg)) {\n        var originalId = msg.id;\n        try {\n          var r = await fetch(\"/__mcp\", {\n            method:\"POST\", headers:{\"Content-Type\":\"application/json\"},\n            body: JSON.stringify({jsonrpc:\"2.0\",id:msg.id,method:msg.method,params:msg.params||{}})\n          });\n          var response = await r.json();\n          response.id = originalId;\n          post(response);\n          // The page announces no data change of its own. A change is the\n          // server's to announce, and that reaches the app over /__events. One\n          // fired here on the app's own call would loop: the call fires it, the\n          // app re-fetches, and the re-fetch fires it again.\n        } catch(err) {\n          post({jsonrpc:\"2.0\",id:originalId,error:{code:-32000,message:err.message}});\n        }\n        return;\n      }\n\n      // Log other messages\n      if (msg.method === \"synapse/chat\") console.log(\"[chat]\", msg.params?.message);\n      else if (msg.method === \"synapse/action\") console.log(\"[action]\", msg.params?.action, msg.params);\n      else if (msg.method === \"ui/update-model-context\") { console.log(\"[model-context]\", msg.params?.structuredContent); if (isRequest(msg)) post({jsonrpc:\"2.0\",id:msg.id,result:{}}); }\n      else if (msg.method === \"synapse/keydown\") { /* ignore */ }\n      else if (msg.method) console.log(\"[bridge]\", msg.method, msg);\n    });\n\n    document.getElementById(\"toggle\").onclick = function() {\n      dark = !dark;\n      document.body.style.background = dark ? \"#0f172a\" : \"#f1f5f9\";\n      post({jsonrpc:\"2.0\",method:\"ui/notifications/host-context-changed\",params:{theme:dark?\"dark\":\"light\",styles:{variables:getTokens(dark)}}});\n    };\n\n    // The server's own notifications, forwarded into the app as an MCP Apps\n    // host forwards them. The dev server passes on only the ones a host would.\n    new EventSource(\"/__events\").onmessage = function(e) {\n      var n = JSON.parse(e.data);\n      post({jsonrpc:\"2.0\",method:n.method,params:n.params});\n    };\n\n    // Load the iframe AFTER the message listener is attached to avoid\n    // a race where the app sends ui/initialize before the bridge is ready.\n    iframe.src = \"/\";\n  </script>\n</body>\n</html>`;\n}\n"]}
+{"version":3,"sources":["../../src/vite/plugin.ts"],"names":["resolve"],"mappings":";;;;;AAwBA,IAAM,sBAAA,GAA4C;AAAA,EAChD,iBAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF,CAAA;AAkDO,SAAS,WAAA,CAAY,OAAA,GAAoC,EAAC,EAAW;AAC1E,EAAA,MAAM,aAAA,GAAgB,QAAQ,OAAA,KAAY,KAAA;AAC1C,EAAA,IAAI,QAAA,GAA4B,IAAA;AAChC,EAAA,IAAI,OAAA,GAAU,QAAQ,OAAA,IAAW,KAAA;AACjC,EAAA,IAAI,aAAA,GAAqC,IAAA;AACzC,EAAA,MAAM,eAAA,uBAAsB,GAAA,EAG1B;AAEF,EAAA,MAAM,YAAA,uBAAmB,GAAA,EAAoB;AAO7C,EAAA,SAAS,oBAAoB,GAAA,EAAmD;AAC9E,IAAA,IAAI,GAAA,CAAI,WAAW,4BAAA,EAA8B;AACjD,IAAA,MAAM,KAAA,GAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,EAAE,MAAA,EAAQ,GAAA,CAAI,MAAA,EAAQ,MAAA,EAAQ,GAAA,CAAI,MAAA,IAAU,EAAC,EAAG,CAAC;;AAAA,CAAA;AACvF,IAAA,KAAA,MAAW,MAAA,IAAU,YAAA,EAAc,MAAA,CAAO,KAAA,CAAM,KAAK,CAAA;AAAA,EACvD;AACA,EAAA,IAAI,YAAA,GAAe,EAAA;AAEnB,EAAA,SAAS,aAAa,IAAA,EAA+B;AACnD,IAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,QAAA,GACzB,OAAA,CAAQ,OAAA,CAAQ,QAAQ,CAAA,GACxB,OAAA,CAAQ,IAAA,EAAM,IAAA,EAAM,eAAe,CAAA;AAEvC,IAAA,IAAI,CAAC,UAAA,CAAW,YAAY,CAAA,EAAG,OAAO,IAAA;AACtC,IAAA,IAAI;AACF,MAAA,OAAO,IAAA,CAAK,KAAA,CAAM,YAAA,CAAa,YAAA,EAAc,OAAO,CAAC,CAAA;AAAA,IACvD,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,SAAS,eAAA,CAAgB,GAAa,IAAA,EAA6B;AACjE,IAAA,IAAI,OAAA,CAAQ,SAAA,EAAW,OAAO,OAAA,CAAQ,SAAA;AACtC,IAAA,MAAM,GAAA,GAAM,EAAE,MAAA,EAAQ,UAAA;AACtB,IAAA,IAAI,CAAC,GAAA,EAAK,OAAA,EAAS,OAAO,IAAA;AAE1B,IAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,IAAA,EAAM,IAAI,CAAA;AACpC,IAAA,IAAI,MAAM,GAAA,CAAI,OAAA;AACd,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,IAAA,IAAQ,EAAC;AAG1B,IAAA,IAAI,QAAQ,QAAA,IAAY,UAAA,CAAW,KAAK,SAAA,EAAW,gBAAgB,CAAC,CAAA,EAAG;AACrE,MAAA,GAAA,GAAM,eAAA;AAAA,IACR;AAEA,IAAA,OAAO,CAAA,GAAA,EAAM,IAAA,CAAK,SAAA,CAAU,SAAS,CAAC,CAAA,IAAA,EAAO,GAAG,CAAA,CAAA,EAAI,IAAA,CAAK,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA;AAAA,EACpE;AAEA,EAAA,SAAS,YAAY,GAAA,EAAmB;AACtC,IAAA,aAAA,GAAgB,MAAM,GAAA,EAAK;AAAA,MACzB,KAAA,EAAO,IAAA;AAAA,MACP,KAAA,EAAO,CAAC,MAAA,EAAQ,MAAA,EAAQ,MAAM;AAAA,KAC/B,CAAA;AAED,IAAA,aAAA,CAAc,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAc;AAC9C,MAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,CAAC,CAAA,CAAE,CAAA;AAAA,IACrC,CAAC,CAAA;AAED,IAAA,aAAA,CAAc,MAAA,EAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAc;AAC9C,MAAA,YAAA,IAAgB,EAAE,QAAA,EAAS;AAE3B,MAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,KAAA,CAAM,IAAI,CAAA;AACrC,MAAA,YAAA,GAAe,KAAA,CAAM,KAAI,IAAK,EAAA;AAC9B,MAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,QAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAK,EAAG;AAClB,QAAA,IAAI;AACF,UAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC3B,UAAA,IAAI,IAAI,EAAA,IAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,CAAI,EAAE,CAAA,EAAG;AACzC,YAAA,MAAM,CAAA,GAAI,eAAA,CAAgB,GAAA,CAAI,GAAA,CAAI,EAAE,CAAA;AACpC,YAAA,eAAA,CAAgB,MAAA,CAAO,IAAI,EAAE,CAAA;AAC7B,YAAA,CAAA,EAAG,QAAQ,GAAG,CAAA;AAAA,UAChB,WAAW,GAAA,CAAI,EAAA,KAAO,UAAa,OAAO,GAAA,CAAI,WAAW,QAAA,EAAU;AACjE,YAAA,mBAAA,CAAoB,GAAG,CAAA;AAAA,UACzB;AAAA,QACF,CAAA,CAAA,MAAQ;AAEN,UAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,IAAI;AAAA,CAAI,CAAA;AAAA,QAC1C;AAAA,MACF;AAAA,IACF,CAAC,CAAA;AAED,IAAA,aAAA,CAAc,EAAA,CAAG,MAAA,EAAQ,CAAC,IAAA,KAAS;AACjC,MAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,IAAA,KAAS,CAAA,EAAG;AAC/B,QAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,gCAAA,EAAmC,IAAI,CAAA,CAAE,CAAA;AAAA,MACzD;AACA,MAAA,aAAA,GAAgB,IAAA;AAAA,IAClB,CAAC,CAAA;AAGD,IAAA,YAAA,CAAa;AAAA,MACX,OAAA,EAAS,KAAA;AAAA,MACT,EAAA,EAAI,QAAA;AAAA,MACJ,MAAA,EAAQ,YAAA;AAAA,MACR,MAAA,EAAQ;AAAA,QACN,eAAA,EAAiB,YAAA;AAAA,QACjB,cAAc,EAAC;AAAA,QACf,UAAA,EAAY,EAAE,IAAA,EAAM,iBAAA,EAAmB,SAAS,OAAA;AAAQ;AAC1D,KACD,CAAA;AAAA,EACH;AAEA,EAAA,SAAS,aAAa,GAAA,EAAoC;AACxD,IAAA,IAAI,CAAC,aAAA,EAAe,KAAA,EAAO,QAAA,EAAU;AACrC,IAAA,aAAA,CAAc,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,SAAA,CAAU,GAAG,CAAC;AAAA,CAAI,CAAA;AAAA,EACtD;AAEA,EAAA,SAAS,UAAA,CAAW,QAAgB,MAAA,EAAmD;AACrF,IAAA,OAAO,IAAI,OAAA,CAAQ,CAACA,QAAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,EAAA,GAAK,CAAA,QAAA,EAAW,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA,EAAI,IAAA,CAAK,MAAA,EAAO,CAAE,SAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,CAAA;AAC1E,MAAA,eAAA,CAAgB,IAAI,EAAA,EAAI,EAAE,OAAA,EAAAA,QAAAA,EAAS,QAAQ,CAAA;AAC3C,MAAA,YAAA,CAAa,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,MAAA,EAAQ,QAAQ,CAAA;AACnD,MAAA,UAAA,CAAW,MAAM;AACf,QAAA,IAAI,eAAA,CAAgB,GAAA,CAAI,EAAE,CAAA,EAAG;AAC3B,UAAA,eAAA,CAAgB,OAAO,EAAE,CAAA;AACzB,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,EAAG,MAAM,kBAAkB,CAAC,CAAA;AAAA,QAC/C;AAAA,MACF,GAAG,GAAK,CAAA;AAAA,IACV,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,SAAA;AAAA,IAEN,MAAA,GAAS;AACP,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ;AAAA,UACN,kCAAA,EAAoC,IAAA,CAAK,SAAA,CAAU,OAAO;AAAA,SAC5D;AAAA,QACA,MAAA,EAAQ;AAAA,UACN,GAAA,EAAK;AAAA,YACH,QAAA,EAAU,IAAA;AAAA,YACV,IAAA,EAAM;AAAA;AACR;AACF,OACF;AAAA,IACF,CAAA;AAAA,IAEA,eAAe,MAAA,EAAQ;AACrB,MAAA,QAAA,GAAW,YAAA,CAAa,OAAO,IAAI,CAAA;AACnC,MAAA,IAAI,UAAU,IAAA,EAAM;AAClB,QAAA,OAAA,GAAU,OAAA,CAAQ,WAAW,QAAA,CAAS,IAAA;AAAA,MACxC;AAAA,IACF,CAAA;AAAA,IAEA,gBAAgB,MAAA,EAAuB;AAErC,MAAA,IAAI,iBAAiB,QAAA,EAAU;AAC7B,QAAA,MAAM,GAAA,GAAM,eAAA,CAAgB,QAAA,EAAU,MAAA,CAAO,OAAO,IAAI,CAAA;AACxD,QAAA,IAAI,GAAA,EAAK;AACP,UAAA,OAAA,CAAQ,GAAA,CAAI;AAAA,iCAAA,EAAsC,GAAG;AAAA,CAAI,CAAA;AACzD,UAAA,WAAA,CAAY,GAAG,CAAA;AAAA,QACjB;AAAA,MACF;AAEA,MAAA,MAAA,CAAO,WAAA,CAAY,GAAA,CAAI,CAAC,GAAA,EAAK,KAAK,IAAA,KAAS;AAEzC,QAAA,GAAA,CAAI,SAAA,CAAU,+BAA+B,GAAG,CAAA;AAChD,QAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,GAAG,CAAA;AACjD,QAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,GAAG,CAAA;AAGjD,QAAA,IAAI,GAAA,CAAI,GAAA,KAAQ,YAAA,IAAgB,GAAA,CAAI,QAAQ,aAAA,EAAe;AACzD,UAAA,GAAA,CAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,aAAa,CAAA;AAClD,UAAA,GAAA,CAAI,GAAA,CAAI,mBAAA,CAAoB,OAAO,CAAC,CAAA;AACpC,UAAA;AAAA,QACF;AAGA,QAAA,IAAI,GAAA,CAAI,MAAA,KAAW,KAAA,IAAS,GAAA,CAAI,QAAQ,WAAA,EAAa;AACnD,UAAA,GAAA,CAAI,UAAU,GAAA,EAAK;AAAA,YACjB,cAAA,EAAgB,mBAAA;AAAA,YAChB,eAAA,EAAiB,UAAA;AAAA,YACjB,UAAA,EAAY;AAAA,WACb,CAAA;AACD,UAAA,GAAA,CAAI,MAAM,YAAY,CAAA;AACtB,UAAA,YAAA,CAAa,IAAI,GAAG,CAAA;AACpB,UAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM;AACpB,YAAA,YAAA,CAAa,OAAO,GAAG,CAAA;AAAA,UACzB,CAAC,CAAA;AACD,UAAA;AAAA,QACF;AAGA,QAAA,IAAI,GAAA,CAAI,MAAA,KAAW,MAAA,IAAU,GAAA,CAAI,QAAQ,QAAA,EAAU;AACjD,UAAA,IAAI,IAAA,GAAO,EAAA;AACX,UAAA,GAAA,CAAI,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AAChC,YAAA,IAAA,IAAQ,MAAM,QAAA,EAAS;AAAA,UACzB,CAAC,CAAA;AACD,UAAA,GAAA,CAAI,EAAA,CAAG,OAAO,YAAY;AACxB,YAAA,IAAI;AACF,cAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC3B,cAAA,IAAI,CAAC,sBAAA,CAAuB,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA,EAAG;AAChD,gBAAA,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,GAAA,CAAI,MAAM,CAAA,kCAAA,CAAoC,CAAA;AAAA,cACnE;AACA,cAAA,MAAM,MAAA,GAAS,MAAM,UAAA,CAAW,GAAA,CAAI,QAAQ,GAAA,CAAI,MAAA,IAAU,EAAE,CAAA;AAC5D,cAAA,GAAA,CAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,oBAAoB,CAAA;AACzD,cAAA,GAAA,CAAI,GAAA,CAAI,IAAA,CAAK,SAAA,CAAU,MAAM,CAAC,CAAA;AAAA,YAChC,SAAS,GAAA,EAAK;AACZ,cAAA,GAAA,CAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,oBAAoB,CAAA;AACzD,cAAA,GAAA,CAAI,GAAA;AAAA,gBACF,KAAK,SAAA,CAAU;AAAA,kBACb,OAAA,EAAS,KAAA;AAAA,kBACT,EAAA,EAAI,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,CAAE,EAAA;AAAA,kBACrB,OAAO,EAAE,IAAA,EAAM,KAAA,EAAQ,OAAA,EAAU,IAAc,OAAA;AAAQ,iBACxD;AAAA,eACH;AAAA,YACF;AAAA,UACF,CAAC,CAAA;AACD,UAAA;AAAA,QACF;AAEA,QAAA,IAAA,EAAK;AAAA,MACP,CAAC,CAAA;AAAA,IACH,CAAA;AAAA,IAEA,QAAA,GAAW;AAET,MAAA,IAAI,aAAA,EAAe;AACjB,QAAA,aAAA,CAAc,KAAK,SAAS,CAAA;AAC5B,QAAA,aAAA,GAAgB,IAAA;AAAA,MAClB;AAAA,IACF;AAAA,GACF;AACF;AAUO,SAAS,oBAAoB,OAAA,EAAyB;AAC3D,EAAA,OAAO,CAAA;AAAA;AAAA;AAAA;AAAA,SAAA,EAIE,OAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAA,EAgBO,OAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA,kBAAA,EAUZ,IAAA,CAAK,SAAA,CAAU,sBAAsB,CAAC,CAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,OAAA,CAAA;AAsG1D","file":"index.js","sourcesContent":["import { type ChildProcess, spawn } from \"node:child_process\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport type { ServerResponse } from \"node:http\";\nimport { join, resolve } from \"node:path\";\nimport type { Plugin, ViteDevServer } from \"vite\";\nimport {\n  LIST_RESOURCES_METHOD,\n  READ_RESOURCE_METHOD,\n  RESOURCE_LIST_CHANGED_METHOD,\n  TOOLS_CALL_METHOD,\n} from \"../event-map.js\";\n\n/**\n * The server-bound requests this host proxies, which is exactly what its\n * handshake announces: `serverTools` for the tool call, `serverResources` for\n * the two resource methods. An allowlist in both directions — the page sends\n * nothing else to `/__mcp`, and `/__mcp` forwards nothing else to the server,\n * so a method the host never announced cannot reach the server through it.\n *\n * Adding a method here without adding the matching capability below, or the\n * reverse, is the bug this list exists to make obvious: a host that answers\n * what it does not announce is unusable, and one that announces what it does\n * not answer leaves the caller waiting on a reply nobody will send.\n */\nconst PROXIED_SERVER_METHODS: readonly string[] = [\n  TOOLS_CALL_METHOD,\n  READ_RESOURCE_METHOD,\n  LIST_RESOURCES_METHOD,\n];\n\nexport interface SynapseVitePluginOptions {\n  /** App name. If omitted, reads from ../manifest.json */\n  appName?: string;\n  /** Path to manifest.json. Default: ../manifest.json (relative to ui/) */\n  manifest?: string;\n  /**\n   * Shell command to start the MCP server. If omitted, derived from manifest.\n   * The server runs in stdio mode — stdin/stdout JSON-RPC.\n   */\n  serverCmd?: string;\n  /** Set to false to disable the preview host page at /__preview */\n  preview?: boolean;\n}\n\ninterface Manifest {\n  name: string;\n  version?: string;\n  server?: {\n    type?: string;\n    entry_point?: string;\n    mcp_config?: {\n      command?: string;\n      args?: string[];\n    };\n  };\n}\n\n/**\n * Synapse Vite plugin — full local dev experience for MCP apps.\n *\n * What it does:\n * - Reads ../manifest.json to get app name and server config\n * - Spawns the MCP server as a child process (stdio mode)\n * - Serves a preview host page at /__preview that iframes your app\n * - Proxies the iframe's tool calls and resource reads through POST /__mcp to\n *   the server, the pair its handshake announces as `serverTools` and\n *   `serverResources`\n * - Forwards the server's `notifications/resources/list_changed` to the iframe\n *   (over GET /__events), as an MCP Apps host does, so `useDataSync` fires\n * - Handles the ext-apps handshake so Synapse hooks work\n * - HMR works inside the iframe — edit .tsx, see changes instantly\n *\n * Usage in vite.config.ts:\n *   import { synapseVite } from \"@nimblebrain/synapse/vite\";\n *   export default { plugins: [react(), viteSingleFile(), synapseVite()] };\n *\n * Then: cd ui && npm run dev && open http://localhost:5173/__preview\n */\nexport function synapseVite(options: SynapseVitePluginOptions = {}): Plugin {\n  const enablePreview = options.preview !== false;\n  let manifest: Manifest | null = null;\n  let appName = options.appName ?? \"app\";\n  let serverProcess: ChildProcess | null = null;\n  const pendingRequests = new Map<\n    string,\n    { resolve: (v: unknown) => void; reject: (e: Error) => void }\n  >();\n  // Preview pages listening on GET /__events for the server's notifications.\n  const eventClients = new Set<ServerResponse>();\n\n  /**\n   * Hand a server notification to every open preview page, which posts it into\n   * the app iframe. Only the one an MCP Apps host forwards to a view is passed\n   * on; anything else the server says stays between it and the dev server.\n   */\n  function forwardNotification(msg: { method?: unknown; params?: unknown }): void {\n    if (msg.method !== RESOURCE_LIST_CHANGED_METHOD) return;\n    const frame = `data: ${JSON.stringify({ method: msg.method, params: msg.params ?? {} })}\\n\\n`;\n    for (const client of eventClients) client.write(frame);\n  }\n  let serverBuffer = \"\";\n\n  function loadManifest(root: string): Manifest | null {\n    const manifestPath = options.manifest\n      ? resolve(options.manifest)\n      : resolve(root, \"..\", \"manifest.json\");\n\n    if (!existsSync(manifestPath)) return null;\n    try {\n      return JSON.parse(readFileSync(manifestPath, \"utf-8\"));\n    } catch {\n      return null;\n    }\n  }\n\n  function deriveServerCmd(m: Manifest, root: string): string | null {\n    if (options.serverCmd) return options.serverCmd;\n    const cfg = m.server?.mcp_config;\n    if (!cfg?.command) return null;\n\n    const serverDir = resolve(root, \"..\");\n    let cmd = cfg.command;\n    const args = cfg.args ?? [];\n\n    // Python projects: use `uv run` if pyproject.toml exists\n    if (cmd === \"python\" && existsSync(join(serverDir, \"pyproject.toml\"))) {\n      cmd = \"uv run python\";\n    }\n\n    return `cd ${JSON.stringify(serverDir)} && ${cmd} ${args.join(\" \")}`;\n  }\n\n  function startServer(cmd: string): void {\n    serverProcess = spawn(cmd, {\n      shell: true,\n      stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    });\n\n    serverProcess.stderr?.on(\"data\", (d: Buffer) => {\n      process.stderr.write(`  [mcp] ${d}`);\n    });\n\n    serverProcess.stdout?.on(\"data\", (d: Buffer) => {\n      serverBuffer += d.toString();\n      // Parse line-delimited JSON-RPC responses\n      const lines = serverBuffer.split(\"\\n\");\n      serverBuffer = lines.pop() ?? \"\"; // keep incomplete line\n      for (const line of lines) {\n        if (!line.trim()) continue;\n        try {\n          const msg = JSON.parse(line);\n          if (msg.id && pendingRequests.has(msg.id)) {\n            const p = pendingRequests.get(msg.id);\n            pendingRequests.delete(msg.id);\n            p?.resolve(msg);\n          } else if (msg.id === undefined && typeof msg.method === \"string\") {\n            forwardNotification(msg);\n          }\n        } catch {\n          // Not JSON — log it\n          process.stderr.write(`  [mcp] ${line}\\n`);\n        }\n      }\n    });\n\n    serverProcess.on(\"exit\", (code) => {\n      if (code !== null && code !== 0) {\n        console.error(`  [mcp] Server exited with code ${code}`);\n      }\n      serverProcess = null;\n    });\n\n    // Send initialize\n    sendToServer({\n      jsonrpc: \"2.0\",\n      id: \"init-1\",\n      method: \"initialize\",\n      params: {\n        protocolVersion: \"2024-11-05\",\n        capabilities: {},\n        clientInfo: { name: \"synapse-preview\", version: \"0.1.0\" },\n      },\n    });\n  }\n\n  function sendToServer(msg: Record<string, unknown>): void {\n    if (!serverProcess?.stdin?.writable) return;\n    serverProcess.stdin.write(`${JSON.stringify(msg)}\\n`);\n  }\n\n  function callServer(method: string, params: Record<string, unknown>): Promise<unknown> {\n    return new Promise((resolve, reject) => {\n      const id = `preview-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;\n      pendingRequests.set(id, { resolve, reject });\n      sendToServer({ jsonrpc: \"2.0\", id, method, params });\n      setTimeout(() => {\n        if (pendingRequests.has(id)) {\n          pendingRequests.delete(id);\n          reject(new Error(`${method} timed out (10s)`));\n        }\n      }, 10000);\n    });\n  }\n\n  return {\n    name: \"synapse\",\n\n    config() {\n      return {\n        define: {\n          \"import.meta.env.SYNAPSE_APP_NAME\": JSON.stringify(appName),\n        },\n        server: {\n          hmr: {\n            protocol: \"ws\",\n            host: \"localhost\",\n          },\n        },\n      };\n    },\n\n    configResolved(config) {\n      manifest = loadManifest(config.root);\n      if (manifest?.name) {\n        appName = options.appName ?? manifest.name;\n      }\n    },\n\n    configureServer(server: ViteDevServer) {\n      // Start MCP server\n      if (enablePreview && manifest) {\n        const cmd = deriveServerCmd(manifest, server.config.root);\n        if (cmd) {\n          console.log(`\\n  [synapse] Starting MCP server: ${cmd}\\n`);\n          startServer(cmd);\n        }\n      }\n\n      server.middlewares.use((req, res, next) => {\n        // CORS for iframe communication\n        res.setHeader(\"Access-Control-Allow-Origin\", \"*\");\n        res.setHeader(\"Access-Control-Allow-Methods\", \"*\");\n        res.setHeader(\"Access-Control-Allow-Headers\", \"*\");\n\n        // /__preview — bridge host page\n        if (req.url === \"/__preview\" || req.url === \"/__preview/\") {\n          res.writeHead(200, { \"Content-Type\": \"text/html\" });\n          res.end(vitePreviewHostHtml(appName));\n          return;\n        }\n\n        // GET /__events — the server's notifications, pushed to the preview page\n        if (req.method === \"GET\" && req.url === \"/__events\") {\n          res.writeHead(200, {\n            \"Content-Type\": \"text/event-stream\",\n            \"Cache-Control\": \"no-cache\",\n            Connection: \"keep-alive\",\n          });\n          res.write(\": open\\n\\n\");\n          eventClients.add(res);\n          req.on(\"close\", () => {\n            eventClients.delete(res);\n          });\n          return;\n        }\n\n        // POST /__mcp — the server-bound request proxy\n        if (req.method === \"POST\" && req.url === \"/__mcp\") {\n          let body = \"\";\n          req.on(\"data\", (chunk: Buffer) => {\n            body += chunk.toString();\n          });\n          req.on(\"end\", async () => {\n            try {\n              const msg = JSON.parse(body);\n              if (!PROXIED_SERVER_METHODS.includes(msg.method)) {\n                throw new Error(`${msg.method} is not a method this host proxies`);\n              }\n              const result = await callServer(msg.method, msg.params ?? {});\n              res.writeHead(200, { \"Content-Type\": \"application/json\" });\n              res.end(JSON.stringify(result));\n            } catch (err) {\n              res.writeHead(200, { \"Content-Type\": \"application/json\" });\n              res.end(\n                JSON.stringify({\n                  jsonrpc: \"2.0\",\n                  id: JSON.parse(body).id,\n                  error: { code: -32000, message: (err as Error).message },\n                }),\n              );\n            }\n          });\n          return;\n        }\n\n        next();\n      });\n    },\n\n    buildEnd() {\n      // Kill server on build end (for production builds)\n      if (serverProcess) {\n        serverProcess.kill(\"SIGTERM\");\n        serverProcess = null;\n      }\n    },\n  };\n}\n\n/**\n * The bridge host page the dev server serves at \\`/__preview\\`.\n *\n * Named apart from \\`previewHostHtml\\` in \\`src/preview/server.ts\\`, which is the\n * standalone \\`synapse preview\\` harness: this package has two hand-written\n * hosts, and the conformance suite drives both, so one name for two pages would\n * be a name that resolves to whichever was imported last.\n */\nexport function vitePreviewHostHtml(appName: string): string {\n  return `<!DOCTYPE html>\n<html>\n<head>\n  <meta charset=\"utf-8\" />\n  <title>${appName} — Synapse Preview</title>\n  <style>\n    * { margin: 0; padding: 0; box-sizing: border-box; }\n    body { font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif; background: #0f172a; color: #e2e8f0; }\n    header { padding: 10px 16px; background: #1e293b; border-bottom: 1px solid #334155; display: flex; align-items: center; gap: 10px; font-size: 13px; }\n    header .dot { width: 8px; height: 8px; border-radius: 50%; background: #22c55e; }\n    header .name { font-weight: 600; }\n    header .spacer { flex: 1; }\n    header button { background: #334155; border: none; color: #e2e8f0; padding: 3px 8px; border-radius: 4px; cursor: pointer; font-size: 12px; }\n    header .url { color: #64748b; font-size: 11px; font-family: monospace; }\n    iframe { width: 100%; height: calc(100vh - 41px); border: none; }\n  </style>\n</head>\n<body>\n  <header>\n    <span class=\"dot\"></span>\n    <span class=\"name\">${appName}</span>\n    <span class=\"spacer\"></span>\n    <button id=\"toggle\">Toggle Theme</button>\n    <span class=\"url\">Synapse Preview</span>\n  </header>\n  <iframe id=\"app\"></iframe>\n\n  <script>\n    var iframe = document.getElementById(\"app\");\n    var dark = true;\n    var PROXIED = ${JSON.stringify(PROXIED_SERVER_METHODS)};\n\n    // Every key here is one the spec's style-variable enum names. That enum is\n    // a strict record, so a single extra key makes a spec client reject the\n    // whole \\`ui/initialize\\` result and refuse to connect — not just ignore the\n    // key. The kit's own neutral defaults back anything a host leaves out.\n    function getTokens(d) {\n      return d ? {\n        \"--color-background-primary\":\"#0f172a\",\"--color-background-secondary\":\"#1e293b\",\n        \"--color-background-tertiary\":\"#2a374a\",\"--color-text-primary\":\"#e2e8f0\",\n        \"--color-text-secondary\":\"#94a3b8\",\"--color-text-tertiary\":\"#64748b\",\n        \"--color-border-primary\":\"#334155\",\"--color-border-secondary\":\"#475569\",\n        \"--color-ring-primary\":\"#6366f1\",\n        \"--border-radius-sm\":\"0.5rem\",\"--font-sans\":\"-apple-system,BlinkMacSystemFont,sans-serif\"\n      } : {\n        \"--color-background-primary\":\"#ffffff\",\"--color-background-secondary\":\"#f8fafc\",\n        \"--color-background-tertiary\":\"#f1f5f9\",\"--color-text-primary\":\"#0f172a\",\n        \"--color-text-secondary\":\"#64748b\",\"--color-text-tertiary\":\"#94a3b8\",\n        \"--color-border-primary\":\"#e2e8f0\",\"--color-border-secondary\":\"#cbd5e1\",\n        \"--color-ring-primary\":\"#6366f1\",\n        \"--border-radius-sm\":\"0.5rem\",\"--font-sans\":\"-apple-system,BlinkMacSystemFont,sans-serif\"\n      };\n    }\n\n    function post(msg) { iframe.contentWindow.postMessage(msg, \"*\"); }\n\n    // A request is a frame carrying an id — and \\`0\\` is a perfectly good id.\n    // The MCP SDK numbers from zero, so a truthiness test drops the first\n    // request every spec client ever sends, which is its \\`ui/initialize\\`.\n    function isRequest(msg) { return msg.id !== undefined && msg.id !== null; }\n\n    window.addEventListener(\"message\", async function(e) {\n      if (e.source !== iframe.contentWindow) return;\n      var msg = e.data;\n      if (!msg || typeof msg !== \"object\") return;\n\n      // ext-apps handshake\n      // \\`hostInfo\\`/\\`hostCapabilities\\` are the spec's field names, and a spec\n      // client validates the result against them — the official ext-apps\n      // \\`App\\` refuses to connect to anything else.\n      if (msg.method === \"ui/initialize\" && isRequest(msg)) {\n        post({ jsonrpc:\"2.0\", id:msg.id, result: {\n          protocolVersion:\"2026-01-26\",\n          hostInfo:{name:\"nimblebrain\",version:\"preview\"},\n          hostCapabilities:{openLinks:{},serverTools:{},serverResources:{listChanged:true},\n            updateModelContext:{text:{},structuredContent:{}},\n            experimental:{\"ai.nimblebrain/action\":{},\"ai.nimblebrain/keydown\":{}}},\n          hostContext:{theme:dark?\"dark\":\"light\",styles:{variables:getTokens(dark)}}\n        }});\n        return;\n      }\n      if (msg.method === \"ui/notifications/initialized\") return;\n\n      // Server-bound requests — proxied via the Vite middleware. The set is\n      // exactly what \\`serverTools\\` and \\`serverResources\\` above announce, so\n      // neither is declared without something on the other end.\n      if (PROXIED.indexOf(msg.method) !== -1 && isRequest(msg)) {\n        var originalId = msg.id;\n        try {\n          var r = await fetch(\"/__mcp\", {\n            method:\"POST\", headers:{\"Content-Type\":\"application/json\"},\n            body: JSON.stringify({jsonrpc:\"2.0\",id:msg.id,method:msg.method,params:msg.params||{}})\n          });\n          var response = await r.json();\n          response.id = originalId;\n          post(response);\n          // The page announces no data change of its own. A change is the\n          // server's to announce, and that reaches the app over /__events. One\n          // fired here on the app's own call would loop: the call fires it, the\n          // app re-fetches, and the re-fetch fires it again.\n        } catch(err) {\n          post({jsonrpc:\"2.0\",id:originalId,error:{code:-32000,message:err.message}});\n        }\n        return;\n      }\n\n      // Log other messages\n      if (msg.method === \"ai.nimblebrain/action\") console.log(\"[action]\", msg.params?.action, msg.params);\n      else if (msg.method === \"ui/update-model-context\") { console.log(\"[model-context]\", msg.params?.structuredContent); if (isRequest(msg)) post({jsonrpc:\"2.0\",id:msg.id,result:{}}); }\n      else if (msg.method === \"ai.nimblebrain/keydown\") { /* ignore */ }\n      else if (msg.method) console.log(\"[bridge]\", msg.method, msg);\n    });\n\n    document.getElementById(\"toggle\").onclick = function() {\n      dark = !dark;\n      document.body.style.background = dark ? \"#0f172a\" : \"#f1f5f9\";\n      post({jsonrpc:\"2.0\",method:\"ui/notifications/host-context-changed\",params:{theme:dark?\"dark\":\"light\",styles:{variables:getTokens(dark)}}});\n    };\n\n    // The server's own notifications, forwarded into the app as an MCP Apps\n    // host forwards them. The dev server passes on only the ones a host would.\n    new EventSource(\"/__events\").onmessage = function(e) {\n      var n = JSON.parse(e.data);\n      post({jsonrpc:\"2.0\",method:n.method,params:n.params});\n    };\n\n    // Load the iframe AFTER the message listener is attached to avoid\n    // a race where the app sends ui/initialize before the bridge is ready.\n    iframe.src = \"/\";\n  </script>\n</body>\n</html>`;\n}\n"]}

package/dist/{writer-HDRCQSX2.cjs → writer-NDK4U6C5.cjs}

@@ -1,14 +1,14 @@
 'use strict';
 
-require('./chunk-Q7SFCCGT.cjs');
 var fs = require('fs');
 var path = require('path');
 
+// src/codegen/writer.ts
 function writeOutput(content, outputPath) {
   fs.mkdirSync(path.dirname(outputPath), { recursive: true });
   fs.writeFileSync(outputPath, content, "utf-8");
 }
 
 exports.writeOutput = writeOutput;
-//# sourceMappingURL=writer-HDRCQSX2.cjs.map
-//# sourceMappingURL=writer-HDRCQSX2.cjs.map
+//# sourceMappingURL=writer-NDK4U6C5.cjs.map
+//# sourceMappingURL=writer-NDK4U6C5.cjs.map

package/dist/{writer-HDRCQSX2.cjs.map → writer-NDK4U6C5.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/codegen/writer.ts"],"names":["mkdirSync","dirname","writeFileSync"],"mappings":";;;;;;AAMO,SAAS,WAAA,CAAY,SAAiB,UAAA,EAA0B;AACrE,EAAAA,YAAA,CAAUC,aAAQ,UAAU,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAClD,EAAAC,gBAAA,CAAc,UAAA,EAAY,SAAS,OAAO,CAAA;AAC5C","file":"writer-HDRCQSX2.cjs","sourcesContent":["import { mkdirSync, writeFileSync } from \"node:fs\";\nimport { dirname } from \"node:path\";\n\n/**\n * Write generated TypeScript to a file, creating parent directories as needed.\n */\nexport function writeOutput(content: string, outputPath: string): void {\n  mkdirSync(dirname(outputPath), { recursive: true });\n  writeFileSync(outputPath, content, \"utf-8\");\n}\n"]}
+{"version":3,"sources":["../src/codegen/writer.ts"],"names":["mkdirSync","dirname","writeFileSync"],"mappings":";;;;;;AAMO,SAAS,WAAA,CAAY,SAAiB,UAAA,EAA0B;AACrE,EAAAA,YAAA,CAAUC,aAAQ,UAAU,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAClD,EAAAC,gBAAA,CAAc,UAAA,EAAY,SAAS,OAAO,CAAA;AAC5C","file":"writer-NDK4U6C5.cjs","sourcesContent":["import { mkdirSync, writeFileSync } from \"node:fs\";\nimport { dirname } from \"node:path\";\n\n/**\n * Write generated TypeScript to a file, creating parent directories as needed.\n */\nexport function writeOutput(content: string, outputPath: string): void {\n  mkdirSync(dirname(outputPath), { recursive: true });\n  writeFileSync(outputPath, content, \"utf-8\");\n}\n"]}

package/dist/{writer-QNDPMEYD.js → writer-ZNBXYUYC.js}

@@ -1,12 +1,12 @@
-import './chunk-PZ5AY32C.js';
 import { mkdirSync, writeFileSync } from 'fs';
 import { dirname } from 'path';
 
+// src/codegen/writer.ts
 function writeOutput(content, outputPath) {
   mkdirSync(dirname(outputPath), { recursive: true });
   writeFileSync(outputPath, content, "utf-8");
 }
 
 export { writeOutput };
-//# sourceMappingURL=writer-QNDPMEYD.js.map
-//# sourceMappingURL=writer-QNDPMEYD.js.map
+//# sourceMappingURL=writer-ZNBXYUYC.js.map
+//# sourceMappingURL=writer-ZNBXYUYC.js.map

package/dist/{writer-QNDPMEYD.js.map → writer-ZNBXYUYC.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/codegen/writer.ts"],"names":[],"mappings":";;;;AAMO,SAAS,WAAA,CAAY,SAAiB,UAAA,EAA0B;AACrE,EAAA,SAAA,CAAU,QAAQ,UAAU,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAClD,EAAA,aAAA,CAAc,UAAA,EAAY,SAAS,OAAO,CAAA;AAC5C","file":"writer-QNDPMEYD.js","sourcesContent":["import { mkdirSync, writeFileSync } from \"node:fs\";\nimport { dirname } from \"node:path\";\n\n/**\n * Write generated TypeScript to a file, creating parent directories as needed.\n */\nexport function writeOutput(content: string, outputPath: string): void {\n  mkdirSync(dirname(outputPath), { recursive: true });\n  writeFileSync(outputPath, content, \"utf-8\");\n}\n"]}
+{"version":3,"sources":["../src/codegen/writer.ts"],"names":[],"mappings":";;;;AAMO,SAAS,WAAA,CAAY,SAAiB,UAAA,EAA0B;AACrE,EAAA,SAAA,CAAU,QAAQ,UAAU,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAClD,EAAA,aAAA,CAAc,UAAA,EAAY,SAAS,OAAO,CAAA;AAC5C","file":"writer-ZNBXYUYC.js","sourcesContent":["import { mkdirSync, writeFileSync } from \"node:fs\";\nimport { dirname } from \"node:path\";\n\n/**\n * Write generated TypeScript to a file, creating parent directories as needed.\n */\nexport function writeOutput(content: string, outputPath: string): void {\n  mkdirSync(dirname(outputPath), { recursive: true });\n  writeFileSync(outputPath, content, \"utf-8\");\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nimblebrain/synapse",
-  "version": "0.19.0",
+  "version": "0.20.0",
   "description": "Agent-aware app SDK for the MCP ext-apps protocol",
   "type": "module",
   "exports": {
@@ -60,9 +60,10 @@
     "lint": "biome check .",
     "lint:fix": "biome check --write .",
     "format": "biome format --write .",
-    "ci": "npm run lint && npm run typecheck && npm run build && npm run test",
+    "ci": "npm run lint && npm run typecheck && npm run build && npm run size && npm run test",
     "prepublishOnly": "npm run build",
-    "conformance": "node conformance/run.mjs"
+    "conformance": "node conformance/run.mjs",
+    "size": "node scripts/size-budget.mjs"
   },
   "repository": {
     "type": "git",
@@ -75,6 +76,7 @@
   "author": "NimbleBrain Inc.",
   "peerDependencies": {
     "@modelcontextprotocol/ext-apps": "^1.7.5",
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "react": "^18.0.0 || ^19.0.0"
   },
   "peerDependenciesMeta": {
@@ -85,6 +87,7 @@
   "devDependencies": {
     "@biomejs/biome": "^2.4.9",
     "@modelcontextprotocol/ext-apps": "^1.7.5",
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "@testing-library/react": "^16.3.2",
     "@types/node": "^25.5.0",
     "@types/react": "^19.2.14",

package/dist/chunk-54W6IAHM.js

@@ -1,24 +0,0 @@
-import { RESOURCE_TEARDOWN_METHOD, TOOL_CANCELLED_METHOD, TOOL_INPUT_PARTIAL_METHOD, TOOL_INPUT_METHOD, TOOL_RESULT_METHOD } from '@modelcontextprotocol/ext-apps';
-
-// src/event-map.ts
-var TOOLS_CALL_METHOD = "tools/call";
-var RESOURCE_LIST_CHANGED_METHOD = "notifications/resources/list_changed";
-var READ_RESOURCE_METHOD = "resources/read";
-var LIST_RESOURCES_METHOD = "resources/list";
-var ACTION_METHOD = "synapse/action";
-var REQUEST_FILE_METHOD = "synapse/request-file";
-var KEYDOWN_METHOD = "synapse/keydown";
-var EVENT_MAP = {
-  "tool-result": TOOL_RESULT_METHOD,
-  "tool-input": TOOL_INPUT_METHOD,
-  "tool-input-partial": TOOL_INPUT_PARTIAL_METHOD,
-  "tool-cancelled": TOOL_CANCELLED_METHOD,
-  teardown: RESOURCE_TEARDOWN_METHOD
-};
-function resolveEventMethod(name) {
-  return EVENT_MAP[name] ?? name;
-}
-
-export { ACTION_METHOD, KEYDOWN_METHOD, LIST_RESOURCES_METHOD, READ_RESOURCE_METHOD, REQUEST_FILE_METHOD, RESOURCE_LIST_CHANGED_METHOD, TOOLS_CALL_METHOD, resolveEventMethod };
-//# sourceMappingURL=chunk-54W6IAHM.js.map
-//# sourceMappingURL=chunk-54W6IAHM.js.map

package/dist/chunk-54W6IAHM.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/event-map.ts"],"names":[],"mappings":";;;AAoBO,IAAM,iBAAA,GAA+C;AAYrD,IAAM,4BAAA,GACX;AACK,IAAM,oBAAA,GAAsD;AAC5D,IAAM,qBAAA,GAAwD;AAQ9D,IAAM,aAAA,GAAgB;AACtB,IAAM,mBAAA,GAAsB;AAC5B,IAAM,cAAA,GAAiB;AAc9B,IAAM,SAAA,GAAoC;AAAA,EACxC,aAAA,EAAe,kBAAA;AAAA,EACf,YAAA,EAAc,iBAAA;AAAA,EACd,oBAAA,EAAsB,yBAAA;AAAA,EACtB,gBAAA,EAAkB,qBAAA;AAAA,EAClB,QAAA,EAAU;AACZ,CAAA;AAMO,SAAS,mBAAmB,IAAA,EAAsB;AACvD,EAAA,OAAO,SAAA,CAAU,IAAI,CAAA,IAAK,IAAA;AAC5B","file":"chunk-54W6IAHM.js","sourcesContent":["import {\n  HOST_CONTEXT_CHANGED_METHOD,\n  RESOURCE_TEARDOWN_METHOD,\n  TOOL_CANCELLED_METHOD,\n  TOOL_INPUT_METHOD,\n  TOOL_INPUT_PARTIAL_METHOD,\n  TOOL_RESULT_METHOD,\n} from \"@modelcontextprotocol/ext-apps\";\nimport type {\n  CallToolRequest,\n  ListResourcesRequest,\n  ReadResourceRequest,\n  ResourceListChangedNotification,\n} from \"@modelcontextprotocol/sdk/types.js\";\n\n/**\n * A server's own `tools/call`. Core MCP, so the same reasoning as the resource\n * methods below: no constant to import, and typing the literal with the SDK's\n * own `method` field still breaks the build if it is renamed.\n */\nexport const TOOLS_CALL_METHOD: CallToolRequest[\"method\"] = \"tools/call\";\n\n/**\n * A server's own resource methods. Core MCP rather than ext-apps, so there are\n * no constants to import; typing each literal with the SDK's own `method` field\n * still breaks the build if one is renamed.\n *\n * `serverResources` in a host's `hostCapabilities` is the promise to carry all\n * three: the object itself says the host proxies resource reads, and its\n * `listChanged` says the host forwards the notification to that server's views.\n * A host announcing it owes an answer to every method here.\n */\nexport const RESOURCE_LIST_CHANGED_METHOD: ResourceListChangedNotification[\"method\"] =\n  \"notifications/resources/list_changed\";\nexport const READ_RESOURCE_METHOD: ReadResourceRequest[\"method\"] = \"resources/read\";\nexport const LIST_RESOURCES_METHOD: ListResourcesRequest[\"method\"] = \"resources/list\";\n\n/**\n * NimbleBrain extension methods. No spec equivalent, so no constant to import\n * — but naming them once here means no source file spells the wire string\n * twice, and the `synapse/` prefix keeps them visibly outside the spec.\n * Hosts that don't implement them simply never send them.\n */\nexport const ACTION_METHOD = \"synapse/action\";\nexport const REQUEST_FILE_METHOD = \"synapse/request-file\";\nexport const KEYDOWN_METHOD = \"synapse/keydown\";\n\n/**\n * Maps short event names used in App.on() to full MCP method names.\n * Uses canonical constants from @modelcontextprotocol/ext-apps to stay\n * in sync with the spec — if the spec changes a method name, this breaks\n * at compile time, not silently at runtime.\n *\n * `theme-changed` and `host-context-changed` are deliberately absent:\n * `connect()` routes both itself, because each is a typed *view* over the same\n * notification rather than its raw params. Listing them here would be a second\n * table nothing consults — the kind of copy that goes wrong quietly because\n * nothing reads it to notice.\n */\nconst EVENT_MAP: Record<string, string> = {\n  \"tool-result\": TOOL_RESULT_METHOD,\n  \"tool-input\": TOOL_INPUT_METHOD,\n  \"tool-input-partial\": TOOL_INPUT_PARTIAL_METHOD,\n  \"tool-cancelled\": TOOL_CANCELLED_METHOD,\n  teardown: RESOURCE_TEARDOWN_METHOD,\n};\n\n/**\n * Resolve a short event name to a full MCP method name.\n * Returns the mapped method if found, otherwise passes through as-is.\n */\nexport function resolveEventMethod(name: string): string {\n  return EVENT_MAP[name] ?? name;\n}\n\n/** The wire method behind the `theme-changed` / `host-context-changed` events. */\nexport { HOST_CONTEXT_CHANGED_METHOD };\n"]}

package/dist/chunk-DRLVEHCD.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/theme-defaults.ts","../src/detection.ts"],"names":[],"mappings":";AAyCA,IAAM,mBAAA,uBAA0B,GAAA,CAAsB;AAAA,EACpD,MAAA;AAAA,EACA,OAAA;AAAA,EACA,MAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAC,CAAA;AAQD,IAAM,KAAA,GAAgC;AAAA;AAAA,EAEpC,4BAAA,EAA8B,SAAA;AAAA,EAC9B,8BAAA,EAAgC,SAAA;AAAA,EAChC,6BAAA,EAA+B,SAAA;AAAA;AAAA,EAE/B,sBAAA,EAAwB,SAAA;AAAA,EACxB,wBAAA,EAA0B,SAAA;AAAA,EAC1B,uBAAA,EAAyB,SAAA;AAAA,EACzB,qBAAA,EAAuB,SAAA;AAAA,EACvB,8BAAA,EAAgC,SAAA;AAAA;AAAA,EAEhC,wBAAA,EAA0B,SAAA;AAAA,EAC1B,0BAAA,EAA4B,SAAA;AAAA,EAC5B,sBAAA,EAAwB,SAAA;AAAA;AAAA,EAExB,mBAAA,EAAqB,SAAA;AAAA,EACrB,8BAAA,EAAgC,SAAA;AAAA,EAChC,oBAAA,EAAsB,SAAA;AAAA,EACtB,oBAAA,EAAsB,SAAA;AAAA,EACtB,uBAAA,EAAyB,SAAA;AAAA,EACzB,6BAAA,EAA+B,SAAA;AAAA,EAC/B,uBAAA,EAAyB;AAC3B,CAAA;AASA,IAAM,IAAA,GAA+B;AAAA;AAAA,EAEnC,4BAAA,EAA8B,SAAA;AAAA,EAC9B,8BAAA,EAAgC,SAAA;AAAA,EAChC,6BAAA,EAA+B,SAAA;AAAA;AAAA,EAE/B,sBAAA,EAAwB,SAAA;AAAA,EACxB,wBAAA,EAA0B,SAAA;AAAA,EAC1B,uBAAA,EAAyB,SAAA;AAAA,EACzB,qBAAA,EAAuB,SAAA;AAAA,EACvB,8BAAA,EAAgC,SAAA;AAAA;AAAA,EAEhC,wBAAA,EAA0B,SAAA;AAAA,EAC1B,0BAAA,EAA4B,SAAA;AAAA,EAC5B,sBAAA,EAAwB,SAAA;AAAA;AAAA,EAExB,mBAAA,EAAqB,SAAA;AAAA;AAAA,EAErB,8BAAA,EAAgC,SAAA;AAAA,EAChC,oBAAA,EAAsB,SAAA;AAAA,EACtB,oBAAA,EAAsB,SAAA;AAAA,EACtB,uBAAA,EAAyB,SAAA;AAAA,EACzB,6BAAA,EAA+B,SAAA;AAAA,EAC/B,uBAAA,EAAyB;AAC3B,CAAA;AAMO,IAAM,kBAAA,GAAuE;AAAA,EAClF,KAAA,EAAO,KAAA;AAAA,EACP,IAAA,EAAM;AACR,CAAA;AAGO,IAAM,mBAAA,GAAsB,kBAAA;AAG5B,IAAM,iBAAA,GAAoB,wBAAA;AAIjC,IAAI,iBAAA,uBAAwB,GAAA,EAAY;AAsBxC,SAAS,oBAAA,GAAgC;AACvC,EAAA,OACE,OAAO,QAAA,KAAa,WAAA,IACpB,OAAO,SAAS,cAAA,KAAmB,UAAA,IACnC,OAAO,QAAA,CAAS,aAAA,KAAkB,UAAA,IAClC,OAAO,QAAA,CAAS,MAAM,OAAA,KAAY,UAAA;AAEtC;AAuBA,SAAS,uBAAuB,IAAA,EAA8B;AAC5D,EAAA,IAAI,CAAC,sBAAqB,EAAG;AAO7B,EAAA,MAAM,YAAA,GAAe,OAAO,OAAA,CAAQ,kBAAA,CAAmB,IAAI,CAAC,CAAA,CACzD,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA,KAAM,OAAO,CAAC,CAAA,EAAA,EAAK,CAAC,CAAA,CAAA,CAAG,CAAA,CACjC,KAAK,IAAI,CAAA;AACZ,EAAA,MAAM,GAAA,GAAM,UAAU,mBAAmB,CAAA;AAAA;AAAA,EAAkB,YAAY;AAAA;AAAA,CAAA,CAAA;AAEvE,EAAA,MAAM,QAAA,GAAW,QAAA,CAAS,cAAA,CAAe,iBAAiB,CAAA;AAC1D,EAAA,IAAI,QAAA,EAAU;AAEZ,IAAA,IAAI,QAAA,CAAS,WAAA,KAAgB,GAAA,EAAK,QAAA,CAAS,WAAA,GAAc,GAAA;AACzD,IAAA;AAAA,EACF;AACA,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,aAAA,CAAc,OAAO,CAAA;AACzC,EAAA,EAAA,CAAG,EAAA,GAAK,iBAAA;AACR,EAAA,EAAA,CAAG,WAAA,GAAc,GAAA;AAIjB,EAAA,QAAA,CAAS,IAAA,CAAK,QAAQ,EAAE,CAAA;AAC1B;AA2CO,SAAS,mBAAA,CACd,MACA,QAAA,EACM;AACN,EAAA,IAAI,OAAO,aAAa,WAAA,EAAa;AACrC,EAAA,sBAAA,CAAuB,IAAI,CAAA;AAU3B,EAAA,MAAM,WAAmC,EAAC;AAC1C,EAAA,IAAI,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AAC5C,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG;AAC7C,MAAA,IAAI,OAAO,MAAM,QAAA,IAAY,OAAO,MAAM,QAAA,EAAU,QAAA,CAAS,CAAC,CAAA,GAAI,CAAA;AAAA,IACpE;AAAA,EACF;AAEA,EAAA,MAAM,IAAA,GAAO,SAAS,eAAA,CAAgB,KAAA;AAQtC,EAAA,IAAI,OAAO,IAAA,CAAK,cAAA,KAAmB,UAAA,EAAY;AAC7C,IAAA,KAAA,MAAW,KAAK,iBAAA,EAAmB;AACjC,MAAA,IAAI,EAAE,CAAA,IAAK,QAAA,CAAA,EAAW,IAAA,CAAK,eAAe,CAAC,CAAA;AAAA,IAC7C;AAAA,EACF;AACA,EAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,EAAG,IAAA,CAAK,WAAA,CAAY,CAAA,EAAG,CAAC,CAAA;AACpE,EAAA,iBAAA,GAAoB,IAAI,GAAA,CAAI,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAC,CAAA;AACnD;AAGA,IAAM,YAAA,uBAAmB,GAAA,EAAc;AAGvC,IAAI,cAAA,GAAiB,EAAA;AAId,SAAS,aAAa,KAAA,EAAiE;AAC5F,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,KAAK,GAAG,OAAO,EAAA;AAClC,EAAA,OAAO,KAAK,SAAA,CAAU,KAAA,CAAM,IAAI,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,MAAA,EAAQ,CAAA,CAAE,GAAA,EAAK,EAAE,MAAA,EAAQ,CAAA,CAAE,OAAO,CAAA,CAAE,OAAO,CAAC,CAAC,CAAA;AACzF;AAeO,SAAS,mBAAmB,GAAA,EAAgD;AACjF,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,GAAG,GAAG,OAAO,MAAA;AAChC,EAAA,MAAM,MAAA,GAAS,GAAA,CAAI,MAAA,CAAO,oBAAoB,CAAA;AAC9C,EAAA,IAAI,IAAI,MAAA,GAAS,CAAA,IAAK,MAAA,CAAO,MAAA,KAAW,GAAG,OAAO,MAAA;AAClD,EAAA,OAAO,MAAA;AACT;AA4BO,SAAS,oBAAoB,KAAA,EAA+D;AAKjG,EAAA,MAAM,IAAA,GAAO,mBAAmB,KAAK,CAAA;AACrC,EAAA,IAAI,SAAS,MAAA,EAAW;AACxB,EAAA,IAAI,OAAO,aAAa,WAAA,EAAa;AAErC,EAAA,IAAI,CAAC,QAAA,CAAS,KAAA,IAAS,OAAO,aAAa,WAAA,EAAa;AAExD,EAAA,MAAM,GAAA,GAAM,aAAa,IAAI,CAAA;AAC7B,EAAA,IAAI,QAAQ,cAAA,EAAgB;AAC5B,EAAA,cAAA,GAAiB,GAAA;AAEjB,EAAA,KAAA,MAAW,QAAQ,YAAA,EAAc;AAC/B,IAAA,IAAI;AACF,MAAA,QAAA,CAAS,KAAA,CAAM,OAAO,IAAI,CAAA;AAAA,IAC5B,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACA,EAAA,YAAA,CAAa,KAAA,EAAM;AAEnB,EAAA,KAAA,MAAW,KAAK,IAAA,EAAM;AACpB,IAAA,IAAI;AACF,MAAA,MAAM,OAAO,IAAI,QAAA,CAAS,CAAA,CAAE,MAAA,EAAQ,EAAE,GAAA,EAAK;AAAA,QACzC,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,OAAO,CAAA,CAAE,KAAA;AAAA;AAAA;AAAA,QAGT,OAAA,EAAS,EAAE,OAAA,IAAW,mBAAA,CAAoB,IAAI,CAAA,CAAE,OAAO,CAAA,GAAI,CAAA,CAAE,OAAA,GAAU;AAAA,OACxE,CAAA;AACD,MAAA,QAAA,CAAS,KAAA,CAAM,IAAI,IAAI,CAAA;AACvB,MAAA,YAAA,CAAa,IAAI,IAAI,CAAA;AAAA,IACvB,CAAA,CAAA,MAAQ;AAAA,IAGR;AAAA,EACF;AACF;AAEA,SAAS,qBAAqB,KAAA,EAA6C;AACzE,EAAA,IAAI,CAAC,KAAA,IAAS,OAAO,KAAA,KAAU,UAAU,OAAO,KAAA;AAChD,EAAA,MAAM,CAAA,GAAI,KAAA;AACV,EAAA,OAAO,OAAO,CAAA,CAAE,MAAA,KAAW,QAAA,IAAY,OAAO,EAAE,GAAA,KAAQ,QAAA;AAC1D;AAcO,SAAS,UAAA,CACd,IAAA,EACA,QAAA,EACA,SAAA,EACM;AACN,EAAA,mBAAA,CAAoB,MAAM,QAAQ,CAAA;AAClC,EAAA,mBAAA,CAAoB,SAAS,CAAA;AAC/B;;;AClZO,IAAM,sBAAA,GAAyB;AAEtC,IAAM,aAAA,GAAuB;AAAA,EAC3B,IAAA,EAAM,OAAA;AAAA,EACN,QAAQ;AACV,CAAA;AAEO,SAAS,aAAa,GAAA,EAAmD;AAC9E,EAAA,IAAI,CAAC,GAAA,EAAK,OAAO,EAAE,GAAG,aAAA,EAAc;AAGpC,EAAA,MAAM,IAAA,GAAO,IAAI,KAAA,KAAU,OAAA,IAAW,IAAI,KAAA,KAAU,MAAA,GAAS,GAAA,CAAI,KAAA,GAAQ,aAAA,CAAc,IAAA;AAGvF,EAAA,MAAM,SAAA,GAAY,IAAI,MAAA,EAAQ,SAAA;AAC9B,EAAA,MAAM,MAAA,GACJ,SAAA,IAAa,OAAO,SAAA,KAAc,QAAA,IAAY,CAAC,KAAA,CAAM,OAAA,CAAQ,SAAS,CAAA,GACjE,SAAA,GACD,EAAC;AAOP,EAAA,OAAO,EAAE,MAAM,MAAA,EAAO;AACxB;AAgBO,SAAS,iBACd,GAAA,EACkC;AAClC,EAAA,OAAO,kBAAA,CAAmB,GAAA,GAAM,sBAAsB,CAAC,CAAA;AACzD;AAWO,SAAS,aAAA,CACd,MACA,GAAA,EACkC;AAClC,EAAA,OAAO,gBAAA,CAAiB,GAAG,CAAA,IAAK,IAAA;AAClC","file":"chunk-DRLVEHCD.js","sourcesContent":["/**\n * Theme-aware default backing for the `@nimblebrain/synapse/ui` token contract.\n *\n * `tokens` (see `ui/tokens.ts`) are `var(--token, fallback)` references. A CSS\n * `var()` fallback is a *static literal* — it cannot branch on light vs. dark.\n * So any var the host does NOT inject resolves to its single hardcoded (light)\n * fallback in BOTH themes. Pair such a token with a theme-aware one and you get\n * white-on-white in dark mode: it looks correct in light, passes `tsc`/build,\n * and only breaks when the theme is toggled.\n *\n * This module closes that gap with a default layer the SDK controls and that\n * CAN branch on theme. {@link applyThemeVariables} puts the neutral defaults for\n * the active `mode` in a cascade layer and the host's variables inline — so:\n *   - the host's (brand) values always win for the keys it provides, through\n *     either the protocol or a stylesheet it injects, and\n *   - any var nobody declares still resolves to a theme-correct neutral value.\n *\n * It's the `var()` fallback, but able to branch on theme. The values stay\n * neutral grays, a generic blue, and generic semantic hues for danger, success,\n * warning and processing — never a *brand* value. Brand arrives only by host\n * injection, mirroring `ui/tokens.ts`. `__tests__/ui/tokens.test.ts` holds the\n * line: every hex here must be in the sanctioned set. This keeps\n * the library host-agnostic while guaranteeing every token resolves correctly\n * in both themes even against an incomplete host, a standalone `connect()`\n * widget, or a third-party host.\n *\n * Font *faces* are the one part of theming CSS variables cannot carry — a token\n * names a family, it cannot load one. {@link applyThemeFontFaces} closes that\n * half, and {@link applyTheme} applies both together.\n *\n * Only theme-sensitive (color) vars are listed here. Theme-invariant vars\n * (radii, type scale, shadows, font stacks, weights, border widths) look the\n * same in both themes, so their static `var()` fallback is already correct —\n * they are intentionally absent. The `tokens` regression test enforces this\n * with a TOTAL partition: every referenced var must be either declared\n * theme-invariant (an explicit allowlist) or defined in both maps below, so a\n * newly added theme-sensitive token can't slip through unbacked.\n */\n\nimport type { FontDisplayValue, FontFaceDescriptor } from \"./types.js\";\n\nconst FONT_DISPLAY_VALUES = new Set<FontDisplayValue>([\n  \"auto\",\n  \"block\",\n  \"swap\",\n  \"fallback\",\n  \"optional\",\n]);\n\n/**\n * Light-theme neutral defaults. Values match the (light) fallbacks baked into\n * `tokens` — applying them changes nothing observable in light mode; they exist\n * so the light path flows through the same code as dark and so a standalone\n * render with an explicit `light` theme is backed identically to its fallbacks.\n */\nconst LIGHT: Record<string, string> = {\n  // ── Surfaces ──\n  \"--color-background-primary\": \"#ffffff\",\n  \"--color-background-secondary\": \"#fafafa\",\n  \"--color-background-tertiary\": \"#f3f4f6\",\n  // ── Text ──\n  \"--color-text-primary\": \"#111827\",\n  \"--color-text-secondary\": \"#6b7280\",\n  \"--color-text-tertiary\": \"#9ca3af\",\n  \"--color-text-accent\": \"#2563eb\",\n  \"--nb-color-accent-foreground\": \"#ffffff\",\n  // ── Border / ring ──\n  \"--color-border-primary\": \"#e5e7eb\",\n  \"--color-border-secondary\": \"#d1d5db\",\n  \"--color-ring-primary\": \"#2563eb\",\n  // ── Status / brand semantics ──\n  \"--nb-color-danger\": \"#dc2626\",\n  \"--nb-color-danger-foreground\": \"#ffffff\",\n  \"--nb-color-success\": \"#059669\",\n  \"--nb-color-warning\": \"#f59e0b\",\n  \"--nb-color-processing\": \"#7c3aed\",\n  \"--nb-color-processing-light\": \"#f3eeff\",\n  \"--nb-color-info-light\": \"#eef4ff\",\n};\n\n/**\n * Dark-theme neutral defaults. A monotonic neutral ladder — the three surface\n * tiers are the darkest, borders sit a step lighter so they stay visible\n * against every surface, and text inverts to light. \"Subtle\"/\"strong\" keep\n * their light-mode semantics: `bgSubtle` reads as a lifted hover/inset tint and\n * `borderStrong` is more prominent than `border`.\n */\nconst DARK: Record<string, string> = {\n  // ── Surfaces (base → lifted) ──\n  \"--color-background-primary\": \"#18181b\",\n  \"--color-background-secondary\": \"#27272a\",\n  \"--color-background-tertiary\": \"#2f2f34\",\n  // ── Text ──\n  \"--color-text-primary\": \"#fafafa\",\n  \"--color-text-secondary\": \"#a1a1aa\",\n  \"--color-text-tertiary\": \"#71717a\",\n  \"--color-text-accent\": \"#818cf8\",\n  \"--nb-color-accent-foreground\": \"#ffffff\",\n  // ── Border / ring (lighter than surfaces so they remain visible) ──\n  \"--color-border-primary\": \"#3f3f46\",\n  \"--color-border-secondary\": \"#52525b\",\n  \"--color-ring-primary\": \"#818cf8\",\n  // ── Status / brand semantics (brightened for contrast on dark) ──\n  \"--nb-color-danger\": \"#f87171\",\n  // Dark text on the brightened red: white on #f87171 is under 3:1.\n  \"--nb-color-danger-foreground\": \"#18181b\",\n  \"--nb-color-success\": \"#34d399\",\n  \"--nb-color-warning\": \"#fbbf24\",\n  \"--nb-color-processing\": \"#a78bfa\",\n  \"--nb-color-processing-light\": \"#2a2440\",\n  \"--nb-color-info-light\": \"#1e2a44\",\n};\n\n/**\n * The neutral default theme, keyed by mode. Exported for the regression test\n * that asserts every color var referenced by `tokens` is backed in both modes.\n */\nexport const DEFAULT_THEME_VARS: Record<\"light\" | \"dark\", Record<string, string>> = {\n  light: LIGHT,\n  dark: DARK,\n};\n\n/** Cascade layer holding the neutral defaults. Named so an app can order it. */\nexport const DEFAULTS_LAYER_NAME = \"synapse-defaults\";\n\n/** `id` of the single `<style>` element this module owns. */\nexport const DEFAULTS_STYLE_ID = \"synapse-theme-defaults\";\n\n/** Custom properties this module last wrote inline, so a later apply clears only\n *  what it owns and never an inline property the app set itself. */\nlet appliedInlineKeys = new Set<string>();\n\n/** Test seam — forget what was written inline so a fresh apply is observable. */\nexport function resetAppliedInlineKeys(): void {\n  appliedInlineKeys = new Set();\n}\n\n/**\n * Whether this document can host the defaults stylesheet.\n *\n * Not the same question as `typeof document !== \"undefined\"`. An embedder or a\n * test harness may install a *partial* `document` — `documentElement.style` plus\n * listeners and nothing else — which is everything this module needed while the\n * defaults were inline properties. Moving them into a stylesheet added three new\n * requirements (`getElementById`, `createElement`, `head.prepend`), and reaching\n * for them on such a document throws.\n *\n * A throw here is not contained: it unwinds through `applyTheme` into the\n * handshake, so an app in that environment never finishes connecting. The\n * default layer is a rendering nicety and the connection is not, so a document\n * that cannot carry a stylesheet gets no layer rather than no session.\n */\nfunction canInstallStylesheet(): boolean {\n  return (\n    typeof document !== \"undefined\" &&\n    typeof document.getElementById === \"function\" &&\n    typeof document.createElement === \"function\" &&\n    typeof document.head?.prepend === \"function\"\n  );\n}\n\n/**\n * Install the neutral defaults for `mode` as a cascade layer.\n *\n * A layer, not inline properties on `documentElement`, and that distinction is\n * the whole point: **a default has to lose.** An inline style outranks every\n * author stylesheet, so writing defaults there made them beat any rule a host or\n * app had written for the same var — the opposite of a fallback.\n *\n * A host cannot always deliver a var through the protocol.\n * `hostContext.styles.variables` is a closed enum, so a host whose design system\n * is larger than that enum has to put the remainder in a stylesheet it injects\n * into the app document. Those declarations are ordinary unlayered author rules.\n * Unlayered beats layered, so they now win — while a var nobody declares still\n * resolves to a neutral default, which is what this map is for.\n *\n * An app's own `:root` rule wins for the same reason, so overriding a default\n * needs no `!important` and no knowledge of this module.\n *\n * One element, replaced in place, so a mode flip swaps the whole map atomically\n * and repeat calls are cheap. SSR-safe.\n */\nfunction applyDefaultThemeLayer(mode: \"light\" | \"dark\"): void {\n  if (!canInstallStylesheet()) return;\n\n  // Safe to concatenate ONLY because every key and value here is module-local\n  // (`DEFAULT_THEME_VARS`). `applyThemeFontFaces` below deliberately avoids\n  // building CSS text for exactly this reason — a host-supplied value containing\n  // `}` would escape the rule. Never fold host or app input into this template;\n  // host variables go through `setProperty`, which cannot escape.\n  const declarations = Object.entries(DEFAULT_THEME_VARS[mode])\n    .map(([k, v]) => `    ${k}: ${v};`)\n    .join(\"\\n\");\n  const css = `@layer ${DEFAULTS_LAYER_NAME} {\\n  :root {\\n${declarations}\\n  }\\n}`;\n\n  const existing = document.getElementById(DEFAULTS_STYLE_ID);\n  if (existing) {\n    // Avoid a needless style invalidation when the mode hasn't changed.\n    if (existing.textContent !== css) existing.textContent = css;\n    return;\n  }\n  const el = document.createElement(\"style\");\n  el.id = DEFAULTS_STYLE_ID;\n  el.textContent = css;\n  // Prepended so this is the first layer the document declares, which puts it\n  // first in layer order — an app that declares its own layers sorts after, and\n  // therefore wins. Unlayered app rules win regardless of DOM order.\n  document.head.prepend(el);\n}\n\n/**\n * Apply theme CSS custom properties to the app document.\n *\n * The host's variables go inline on `documentElement`, where they outrank\n * everything; the neutral defaults for `mode` go into a cascade layer, where\n * they lose to any rule that actually declares the var. So a host value beats\n * this module's default through *either* channel — the protocol or a stylesheet\n * it injects — and a var nobody declares still resolves to a theme-correct\n * default. Only the protocol channel also outranks the app: a host's injected\n * stylesheet and the app's own `:root` are both unlayered rules of equal\n * specificity, so document order decides between them, not this module.\n *\n * A key this module wrote on a previous call and the incoming set does NOT carry\n * is *removed* inline rather than left behind, because a host may legitimately\n * narrow its key set: stop sending a var and it must stop applying, or it stays\n * pinned inline forever where the layer, the host's own stylesheet and the app's\n * own rules all cannot reach it. Removing lets the cascade resolve it against\n * those instead, which is the property this module exists to establish, and is\n * strictly less destructive than overwriting the key with our own default.\n *\n * Tracked as the set of keys last written, not as `DEFAULT_THEME_VARS`'s keys.\n * Those are two different sets: a host can send any spec-enum var, and ~25\n * theme-sensitive ones (`--color-text-danger`, `--color-background-inverse`, …)\n * have no neutral default, so keying the removal off the default map would pin\n * exactly those at the previous mode's value. Tracking what we wrote also means\n * this module never clears an inline property it did not set — an app writing its\n * own `documentElement.style` is left alone.\n *\n * Today an empty var set also arrives for a reason that is a bug rather than a\n * narrowing — `core.ts` replaces the host context wholesale, so a partial\n * `host-context-changed` that omits `styles` reads as \"no tokens\" (#46;\n * `connect.ts` already carries them forward). Fixing #46 is the better outcome —\n * it keeps the host's brand across a mode flip instead of collapsing to our\n * neutral — and does not make this loop unnecessary.\n *\n * SSR-safe (no-ops when `document` is unavailable). Idempotent — re-applying on\n * every theme change is correct and cheap.\n *\n * Prefer {@link applyTheme}: it applies variables *and* font faces together, so\n * a caller cannot wire up half a theme.\n */\nexport function applyThemeVariables(\n  mode: \"light\" | \"dark\",\n  hostVars: Record<string, string> | undefined | null,\n): void {\n  if (typeof document === \"undefined\") return;\n  applyDefaultThemeLayer(mode);\n\n  // ONE definition of \"the host provided this key\", read by both loops below.\n  // Wire data is untyped, so a key can arrive with a non-string value; that is\n  // not a provided value, so the clear loop must reach it. Two predicates —\n  // `k in hostVars` to clear, `typeof v === \"string\"` to write — leave such a key\n  // in the gap: neither removed nor written, so the previous theme's value stays\n  // pinned inline where the layer, the host's stylesheet and the app's `:root`\n  // all cannot reach it. That is the un-self-healing pin this module exists to\n  // eliminate, re-entered by a different door.\n  const incoming: Record<string, string> = {};\n  if (hostVars && typeof hostVars === \"object\") {\n    for (const [k, v] of Object.entries(hostVars)) {\n      if (typeof k === \"string\" && typeof v === \"string\") incoming[k] = v;\n    }\n  }\n\n  const root = document.documentElement.style;\n  // `removeProperty` is feature-checked and `setProperty` deliberately is not.\n  // The setter is the one capability this module has always required, so a\n  // document lacking it was never supported and gets no new promise here; the\n  // clear pass arrived with the defaults layer, so a `style` carrying only the\n  // setter is a shape that used to work. Dropping the clear pass for it is far\n  // better than throwing out of the loop and leaving the host's variables\n  // unwritten entirely.\n  if (typeof root.removeProperty === \"function\") {\n    for (const k of appliedInlineKeys) {\n      if (!(k in incoming)) root.removeProperty(k);\n    }\n  }\n  for (const [k, v] of Object.entries(incoming)) root.setProperty(k, v);\n  appliedInlineKeys = new Set(Object.keys(incoming));\n}\n\n/** The faces this module has added, so a re-apply replaces rather than accumulates. */\nconst managedFaces = new Set<FontFace>();\n\n/** Signature of the currently-applied set — lets a repeat call no-op. */\nlet appliedFontKey = \"\";\n\n/** Stable signature of a face list — the one comparison rule for \"same fonts?\",\n *  shared by the sink's re-apply guard and `onThemeChanged`'s equality filter. */\nexport function fontFacesKey(faces: readonly FontFaceDescriptor[] | undefined | null): string {\n  if (!Array.isArray(faces)) return \"\";\n  return JSON.stringify(faces.map((d) => [d.family, d.src, d.weight, d.style, d.display]));\n}\n\n/**\n * Normalise an untrusted face list into the one shape every layer trusts.\n *\n * THE rule, in one place:\n *   - not an array           → `undefined` — nothing was said, keep what's loaded\n *   - array, none usable     → `undefined` — a shape mistake is not a clear\n *   - array, some usable     → those entries\n *   - empty array            → `[]` — the explicit clear\n *\n * The wire and the sink each used to spell this out separately and drifted\n * apart, so a host whose descriptors were mis-shaped kept its typeface through\n * one path and lost it through the other. One predicate, one spelling.\n */\nexport function normalizeFontFaces(raw: unknown): FontFaceDescriptor[] | undefined {\n  if (!Array.isArray(raw)) return undefined;\n  const usable = raw.filter(isFontFaceDescriptor);\n  if (raw.length > 0 && usable.length === 0) return undefined;\n  return usable;\n}\n\n/**\n * Load host-supplied `@font-face`s into the app document.\n *\n * Uses the CSSOM {@link FontFace} constructor rather than building `@font-face`\n * CSS text. That is deliberate, and load-bearing for two reasons:\n *\n *  1. **No CSS-injection sink.** `family` and `src` are separate arguments, not\n *     concatenated into a stylesheet, so a host value containing `}` cannot\n *     escape the rule and inject arbitrary CSS into the app.\n *  2. **Uniform URL handling.** The `src` descriptor is parsed by the browser\n *     against the `src` grammar, so relative (`url('/fonts/x.woff2')`), absolute\n *     (`url('https://cdn.example/x.woff2')`) and `data:` forms all just work.\n *     A malformed descriptor throws `SyntaxError` here instead of silently\n *     producing dead CSS.\n *\n * The SDK ships no font data. A host that sends nothing leaves the web-safe\n * fallbacks in `ui/tokens.ts` in force — which is why omitting fonts entirely is\n * a supported configuration, not a degraded one.\n *\n * Faces are added but not force-loaded: the browser fetches a face when CSS\n * first matches it, so an unused weight costs nothing. `display` defaults to\n * `swap` so text paints in the fallback immediately rather than blocking.\n *\n * SSR-safe, and safe in environments without the CSS Font Loading API (older\n * jsdom): both no-op. Re-applying an unchanged set is a no-op.\n */\nexport function applyThemeFontFaces(faces: readonly FontFaceDescriptor[] | undefined | null): void {\n  // `normalizeFontFaces` owns what absent/garbage means. Reached from the public\n  // `applyHostTheme`, so the input here is not necessarily typed: a host\n  // building `fontFaces` from untrusted JSON can hand us mis-shaped entries,\n  // and reading those as \"clear\" would unload the typeface over a typo.\n  const next = normalizeFontFaces(faces);\n  if (next === undefined) return;\n  if (typeof document === \"undefined\") return;\n  // `document.fonts` (CSS Font Loading API) is absent in some test DOMs.\n  if (!document.fonts || typeof FontFace === \"undefined\") return;\n\n  const key = fontFacesKey(next);\n  if (key === appliedFontKey) return;\n  appliedFontKey = key;\n\n  for (const face of managedFaces) {\n    try {\n      document.fonts.delete(face);\n    } catch {\n      // Already evicted, or the API rejected the handle — nothing to undo.\n    }\n  }\n  managedFaces.clear();\n\n  for (const d of next) {\n    try {\n      const face = new FontFace(d.family, d.src, {\n        weight: d.weight,\n        style: d.style,\n        // Wire data is untyped: ignore an unrecognised `display` rather than let\n        // the constructor reject the descriptor and cost the app this face.\n        display: d.display && FONT_DISPLAY_VALUES.has(d.display) ? d.display : \"swap\",\n      });\n      document.fonts.add(face);\n      managedFaces.add(face);\n    } catch {\n      // Malformed descriptor — skip this face and keep the web-safe fallback.\n      // One bad entry must not cost the app the rest of its typography.\n    }\n  }\n}\n\nfunction isFontFaceDescriptor(value: unknown): value is FontFaceDescriptor {\n  if (!value || typeof value !== \"object\") return false;\n  const d = value as Partial<FontFaceDescriptor>;\n  return typeof d.family === \"string\" && typeof d.src === \"string\";\n}\n\n/**\n * Apply a resolved theme to the app document — CSS variables and font faces.\n *\n * This is the single path by which theming reaches the DOM: the handshake and\n * `host-context-changed` both funnel through here. Keeping colour and typography on one call is the point — two entry\n * points invite a caller to wire one and forget the other, shipping a host's\n * palette under the wrong typeface.\n *\n * Omitting `fontFaces` is safe and means \"leave the loaded faces alone\" (see\n * {@link applyThemeFontFaces}), so a caller re-applying a theme derived from a\n * partial host context cannot silently strip the host's typeface.\n */\nexport function applyTheme(\n  mode: \"light\" | \"dark\",\n  hostVars: Record<string, string> | undefined | null,\n  fontFaces?: readonly FontFaceDescriptor[] | null,\n): void {\n  applyThemeVariables(mode, hostVars);\n  applyThemeFontFaces(fontFaces);\n}\n\n/** Test seam — forget applied faces so a fresh apply is observable. */\nexport function resetAppliedFontFaces(): void {\n  managedFaces.clear();\n  appliedFontKey = \"\";\n}\n","import type { McpUiHostContext } from \"@modelcontextprotocol/ext-apps\";\nimport { normalizeFontFaces } from \"./theme-defaults.js\";\nimport type { FontFaceDescriptor, Theme } from \"./types\";\n\n/**\n * Host-context key carrying `@font-face` descriptors.\n *\n * A NimbleBrain extension (`synapse/` prefix), because the ext-apps spec has no\n * equivalent: `styles.variables` is a flat `Record<McpUiStyleVariableKey, string>`\n * that can name a font family but cannot carry the rule that loads it.\n * `McpUiHostContext` declares `[key: string]: unknown` for forward\n * compatibility, so riding an extra key is spec-legal, and hosts that don't send\n * it degrade to the web-safe token fallbacks.\n */\nexport const FONT_FACES_CONTEXT_KEY = \"synapse/fontFaces\";\n\nconst DEFAULT_THEME: Theme = {\n  mode: \"light\",\n  tokens: {},\n};\n\nexport function extractTheme(ctx: Partial<McpUiHostContext> | undefined): Theme {\n  if (!ctx) return { ...DEFAULT_THEME };\n\n  // Spec: theme is a string (\"light\" | \"dark\")\n  const mode = ctx.theme === \"light\" || ctx.theme === \"dark\" ? ctx.theme : DEFAULT_THEME.mode;\n\n  // Spec: tokens live under styles.variables\n  const variables = ctx.styles?.variables;\n  const tokens =\n    variables && typeof variables === \"object\" && !Array.isArray(variables)\n      ? (variables as Record<string, string>)\n      : {};\n\n  // Deliberately no `fontFaces` here. Faces are sticky across a partial context\n  // (see `foldFontFaces`), and this function sees only the context in hand — so\n  // populating the field would publish a NON-sticky value on the return type and\n  // invite `extractTheme(ctx).fontFaces`, which is the unload-on-toggle bug.\n  // `resolveTheme` overlays the sticky set; nothing else should.\n  return { mode, tokens };\n}\n\n/**\n * Read the `synapse/fontFaces` host-context extension.\n *\n * `undefined` and `[]` are **distinct answers**, because a host-context-changed\n * carries only the fields that changed:\n *   - `undefined` — the host said nothing about fonts, so keep what's loaded.\n *   - `[]` — the host explicitly sent an empty list, i.e. drop the faces.\n * Collapsing the two would leave a host no way to clear typography it had\n * previously set.\n *\n * Individual malformed entries are dropped rather than rejecting the batch —\n * one bad face must not cost the app the rest of its typography. Anything that\n * survives is still validated by the browser when the descriptor is built.\n */\nexport function extractFontFaces(\n  ctx: Partial<McpUiHostContext> | undefined,\n): FontFaceDescriptor[] | undefined {\n  return normalizeFontFaces(ctx?.[FONT_FACES_CONTEXT_KEY]);\n}\n\n/**\n * THE rule for merging incoming faces over what is already loaded, in one\n * place: **absent — or a batch with nothing usable — means unchanged; an\n * explicit list, including empty, replaces.**\n *\n * Every consumer of the host-context font extension folds through here. The\n * rule leaked one layer at a time when each site spelled it itself, so the\n * spelling now lives once and the call sites just call it.\n */\nexport function foldFontFaces(\n  prev: FontFaceDescriptor[] | undefined,\n  ctx: Partial<McpUiHostContext> | undefined,\n): FontFaceDescriptor[] | undefined {\n  return extractFontFaces(ctx) ?? prev;\n}\n"]}

package/dist/chunk-NP7ROSH2.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/event-map.ts"],"names":["TOOL_RESULT_METHOD","TOOL_INPUT_METHOD","TOOL_INPUT_PARTIAL_METHOD","TOOL_CANCELLED_METHOD","RESOURCE_TEARDOWN_METHOD"],"mappings":";;;;;AAoBO,IAAM,iBAAA,GAA+C;AAYrD,IAAM,4BAAA,GACX;AACK,IAAM,oBAAA,GAAsD;AAC5D,IAAM,qBAAA,GAAwD;AAQ9D,IAAM,aAAA,GAAgB;AACtB,IAAM,mBAAA,GAAsB;AAC5B,IAAM,cAAA,GAAiB;AAc9B,IAAM,SAAA,GAAoC;AAAA,EACxC,aAAA,EAAeA,0BAAA;AAAA,EACf,YAAA,EAAcC,yBAAA;AAAA,EACd,oBAAA,EAAsBC,iCAAA;AAAA,EACtB,gBAAA,EAAkBC,6BAAA;AAAA,EAClB,QAAA,EAAUC;AACZ,CAAA;AAMO,SAAS,mBAAmB,IAAA,EAAsB;AACvD,EAAA,OAAO,SAAA,CAAU,IAAI,CAAA,IAAK,IAAA;AAC5B","file":"chunk-NP7ROSH2.cjs","sourcesContent":["import {\n  HOST_CONTEXT_CHANGED_METHOD,\n  RESOURCE_TEARDOWN_METHOD,\n  TOOL_CANCELLED_METHOD,\n  TOOL_INPUT_METHOD,\n  TOOL_INPUT_PARTIAL_METHOD,\n  TOOL_RESULT_METHOD,\n} from \"@modelcontextprotocol/ext-apps\";\nimport type {\n  CallToolRequest,\n  ListResourcesRequest,\n  ReadResourceRequest,\n  ResourceListChangedNotification,\n} from \"@modelcontextprotocol/sdk/types.js\";\n\n/**\n * A server's own `tools/call`. Core MCP, so the same reasoning as the resource\n * methods below: no constant to import, and typing the literal with the SDK's\n * own `method` field still breaks the build if it is renamed.\n */\nexport const TOOLS_CALL_METHOD: CallToolRequest[\"method\"] = \"tools/call\";\n\n/**\n * A server's own resource methods. Core MCP rather than ext-apps, so there are\n * no constants to import; typing each literal with the SDK's own `method` field\n * still breaks the build if one is renamed.\n *\n * `serverResources` in a host's `hostCapabilities` is the promise to carry all\n * three: the object itself says the host proxies resource reads, and its\n * `listChanged` says the host forwards the notification to that server's views.\n * A host announcing it owes an answer to every method here.\n */\nexport const RESOURCE_LIST_CHANGED_METHOD: ResourceListChangedNotification[\"method\"] =\n  \"notifications/resources/list_changed\";\nexport const READ_RESOURCE_METHOD: ReadResourceRequest[\"method\"] = \"resources/read\";\nexport const LIST_RESOURCES_METHOD: ListResourcesRequest[\"method\"] = \"resources/list\";\n\n/**\n * NimbleBrain extension methods. No spec equivalent, so no constant to import\n * — but naming them once here means no source file spells the wire string\n * twice, and the `synapse/` prefix keeps them visibly outside the spec.\n * Hosts that don't implement them simply never send them.\n */\nexport const ACTION_METHOD = \"synapse/action\";\nexport const REQUEST_FILE_METHOD = \"synapse/request-file\";\nexport const KEYDOWN_METHOD = \"synapse/keydown\";\n\n/**\n * Maps short event names used in App.on() to full MCP method names.\n * Uses canonical constants from @modelcontextprotocol/ext-apps to stay\n * in sync with the spec — if the spec changes a method name, this breaks\n * at compile time, not silently at runtime.\n *\n * `theme-changed` and `host-context-changed` are deliberately absent:\n * `connect()` routes both itself, because each is a typed *view* over the same\n * notification rather than its raw params. Listing them here would be a second\n * table nothing consults — the kind of copy that goes wrong quietly because\n * nothing reads it to notice.\n */\nconst EVENT_MAP: Record<string, string> = {\n  \"tool-result\": TOOL_RESULT_METHOD,\n  \"tool-input\": TOOL_INPUT_METHOD,\n  \"tool-input-partial\": TOOL_INPUT_PARTIAL_METHOD,\n  \"tool-cancelled\": TOOL_CANCELLED_METHOD,\n  teardown: RESOURCE_TEARDOWN_METHOD,\n};\n\n/**\n * Resolve a short event name to a full MCP method name.\n * Returns the mapped method if found, otherwise passes through as-is.\n */\nexport function resolveEventMethod(name: string): string {\n  return EVENT_MAP[name] ?? name;\n}\n\n/** The wire method behind the `theme-changed` / `host-context-changed` events. */\nexport { HOST_CONTEXT_CHANGED_METHOD };\n"]}