@noodleseed/assistant 1.25.0 → 1.26.0

package/README.md

@@ -6,10 +6,10 @@ The package exports the canonical `<noodle-assistant>` managed Web Component, th
 `<noodle-app-view>` MCP App host from `@noodleseed/assistant/app-view`, a managed React wrapper and
 `NoodleAppView` adapter from `@noodleseed/assistant/react`, a renderer-free React hook from
 `@noodleseed/assistant/react/client`, a DOM-free client from `@noodleseed/assistant/client`, and the
-backend-only `createAssistantSession` helper from `@noodleseed/assistant/server`. Light, dark, and automatic
-themes work without configuration; the component inherits the deployed MCP server's brand kit while slots,
-methods, events, and semantic CSS variables let a SaaS developer integrate it without depending on internal
-DOM selectors.
+backend-only `createAssistantSession` helper from `@noodleseed/assistant/server`. The component inherits the
+deployed MCP server's brand kit while slots, methods, events, and semantic CSS variables let a SaaS developer
+integrate it without depending on internal DOM selectors. Light, dark, automatic host-page matching, and
+host-page inversion work without replacing conversation or App DOM.
 
 Never pass an embed client secret, model key, MCP token, or raw application session into the browser
 component. Exchange the already-authenticated user from the customer backend and return only the short-lived
@@ -22,7 +22,7 @@ The model configuration and SaaS integration credentials have different owners:
 | Noodle deployment | `ASSISTANT_MODEL_BASE_URL`, `ASSISTANT_MODEL`, `ASSISTANT_MODEL_API_KEY`             | Managed with `noodle variables set` / `noodle secrets set` |
 | Customer backend  | `NOODLE_SERVICE_URL`, `NOODLE_ASSISTANT_CLIENT_ID`, `NOODLE_ASSISTANT_CLIENT_SECRET` | Backend environment or secret manager only                 |
 
-`allowedOrigins` accepts exact origins. Production origins must be HTTPS; plain HTTP is accepted only for
+`access.origins` accepts exact origins. Production origins must be HTTPS; plain HTTP is accepted only for
 loopback development origins such as `http://localhost:3000`. Local MCP authoring remains available without
 login, but an external browser embed needs an active deployment before its deployment-bound client can be
 created.
@@ -35,8 +35,8 @@ troubleshooting) lives at <https://docs.noodleseed.dev/guides/embedded-assistant
 the server itself is `@noodleseed/one` (`npm install -g @noodleseed/one`).
 
 If your page sends a `Content-Security-Policy`, allow the Noodle service origin in `connect-src` (turns and
-event streams) and the exact session-advertised `endpoints.sandbox` origin in `frame-src` (it may be a
-dedicated sandbox origin, so your `script-src` can stay strict). Details are in the guide's
+event streams) **and** `frame-src` (app widgets render inside a hosted sandbox document served from the
+service origin, `endpoints.sandbox`, so your `script-src` can stay strict). Details are in the guide's
 "Content-Security-Policy on your page" section.
 
 ## Quick start
@@ -55,6 +55,7 @@ structure and treatment in `embeddedAssistant({ presentation })`:
 
 ```ts
 import {
+  authenticatedWebsite,
   embeddedAssistant,
   openAICompatible,
   secret,
@@ -83,19 +84,23 @@ export default server(
         model: variable("ASSISTANT_MODEL"),
         apiKey: secret("ASSISTANT_MODEL_API_KEY"),
       }),
-      allowedOrigins: ["http://localhost:3000", "https://app.acme.example"],
+      access: authenticatedWebsite({
+        origins: ["http://localhost:3000", "https://app.acme.example"],
+      }),
       layout: {
         mode: "floating",
-        position: "bottom-right",
-        panelWidth: 520,
+        position: "bottom-center",
+        panelWidth: 970,
         panelMinHeight: 540,
-        panelMaxHeight: 740,
-        edgeOffset: 24,
+        panelMaxHeight: 1025,
+        edgeOffset: 20,
       },
-      behavior: { showTimestamps: true },
+      theme: "invert",
+      behavior: { showTimestamps: true, showPoweredBy: false },
       labels: {
         welcomeHeading: "How can Acme help?",
         welcomeMessage: "Fast answers from the tools your team already uses.",
+        launcherPlaceholder: "Ask Acme anything",
         composerPlaceholder: "Message Acme Support…",
         sessionReady: "Acme support is online",
       },
@@ -107,6 +112,7 @@ export default server(
           radius: 20,
         },
         launcher: {
+          style: "bubble",
           icon: "chat",
           size: "lg",
           status: "session",
@@ -144,10 +150,15 @@ markup-looking text stays text. `presentation.panel.radius` is a bounded panel-s
 not a second color or identity source. An HTTPS or packaged SVG referenced by `branding.logo`, `branding.mark`, or
 `branding.avatar` is a bounded asset, not inline renderer markup.
 
-If `presentation` is omitted, the rounded Halo-inspired baseline remains: a frosted glass panel with a 24px
-radius, soft elevation, subtle border/motion, medium brand-mark launcher without status or effect,
-undecorated header, pill composer and action controls, and rounded user bubbles with plain assistant messages
-at comfortable width. Partial objects merge with those defaults.
+With UI overrides omitted, the complete managed baseline remains: a bottom-center frosted launcher pill that
+morphs into a prompt input before opening; a 970px outer desktop shell with 20px side padding, 85vh height,
+1025px maximum height, and a 24px panel using the built-in `#F8F8F8` light and `#0C0A09` dark surfaces;
+bottom prompt chips and pill composer; plain assistant messages and 85%-wide user bubbles; a Noodle Seed
+attribution row; and safe-area-aware mobile fullscreen.
+The generic prompt chips ship as defaults, while an authored list—including `[]`—replaces them. Set
+`presentation.launcher.style` to `bubble` for a direct-open 44px launcher. The baseline does not include the
+“Available on ChatGPT” promotion. Partial configuration objects merge with the remaining defaults;
+`presentation.panel.surface: "glass"` remains available when a translucent panel is intentional.
 
 ### Configure and deploy
 
@@ -294,6 +305,22 @@ import "@noodleseed/assistant";
 ></noodle-assistant>
 ```
 
+That single element is the complete managed assistant in React, Vue, Angular, or plain DOM. The
+default pill expands into a prompt first; set `presentation.launcher.style: "bubble"` in `server.ts` when the
+launcher should open the panel directly. Frameworks must treat `noodle-assistant` as a custom element.
+
+When the host needs an authenticated fetch wrapper, assign complex values as properties before connecting
+the element so the first session exchange already carries the application's credentials:
+
+```ts
+import type { NoodleAssistantElement } from "@noodleseed/assistant";
+
+const assistant = document.createElement("noodle-assistant") as NoodleAssistantElement;
+assistant.fetch = authenticatedFetch;
+assistant.sessionEndpoint = "/api/assistant/session";
+document.body.append(assistant);
+```
+
 Or use React:
 
 ```tsx
@@ -410,8 +437,13 @@ import "@noodleseed/assistant/app-view";
 </template>
 ```
 
-Framework setup, lifecycle ownership, sandbox/CSP behavior, and staged diagnostics are owned by the
-[Bring your own UI guide](https://docs.noodleseed.dev/docs/guides/bring-your-own-ui).
+Configure Vue's `isCustomElement` for `noodle-app-view`. Angular uses the same element with `[client]`,
+`[view]`, and `[theme]` property bindings. Do not serialize `client` or `view` into attributes.
+
+`<noodle-app-view>` is the canonical host; `NoodleAppView` delegates to it. Both use the
+service-advertised sandbox URL, route App calls through the supplied client, publish theme changes without
+replacing the iframe, and request standard teardown on semantic replacement, disconnect, or an App teardown
+request.
 
 The App document owns its action intent: it calls standard `tools/call` after connecting and never relies on
 native form navigation. If that call needs input or confirmation, the same `client` publishes the normal
@@ -636,24 +668,31 @@ noodle-assistant {
 ```
 
 For each matching region or token, precedence is the typed host appearance object, then host-provided slot
-content or a public CSS custom property, then compiled server `presentation`/`branding`, then built-in
-defaults. The public slots are `launcher-icon`,
+content or a public CSS custom property, then the saved environment operator override, compiled server
+`presentation`/`branding`, and built-in defaults. The public slots are `launcher-icon`,
 `header-leading`, `header-actions`, `empty-state`, `composer-leading`, `composer-trailing`, and
 `conversation-footer`; slotted host DOM replaces the renderer fallback for that region. Slots are a trusted
 embedding-page integration API, not a way to put HTML or callbacks in deployment configuration. Internal
 shadow-DOM selectors and classes are not public API.
 
-`theme="auto"` follows the browser's operating-system color preference. When the embedding application has
+The Console **Assistant** tab and `noodle assistant appearance show|apply|reset` manage that environment
+override. Existing embed code does not change: public elements load its non-secret configuration before
+first paint without spending a session mint, while authenticated elements receive it from session exchange.
+Each new session pins one resolved revision; an open conversation remains visually stable.
+
+`theme="auto"` follows an explicit `light`/`dark` host-page class or data attribute, then the browser's
+operating-system preference; `theme="invert"` selects the opposite host mode. When the embedding application has
 its own theme toggle, pass its resolved `"light"` or `"dark"` value to `NoodleAssistant` and every
 `<noodle-app-view>`/`NoodleAppView`. Updates change the assistant in place and notify mounted MCP Apps through standard host
 context.
 
 Server branding controls customer name, themed logo/mark/avatar assets, semantic light/dark colors, density,
-radius, typography, and automatic theme. `embeddedAssistant(...)` controls floating/inline/drawer layout,
-position and dimensions, mobile and launcher/header/avatar/timestamp behavior, visible labels, suggested
+radius, typography, and automatic theme. `embeddedAssistant(...)` controls theme selection,
+floating/inline/drawer layout, position and dimensions, mobile and launcher/header/avatar/timestamp/attribution behavior, visible labels, suggested
 prompts, privacy/terms links, locale, and text direction.
 Named slots cover launcher/header/composer/footer extensions. Public methods include `open`, `close`,
 `toggle`, `focusComposer`, `sendMessage`, `stop`, `reconnect`, `updateContext`, `updateModelContext`, `respond`, `confirmTool`, and `resetSession`;
+lifecycle properties include `sessionEndpoint`, `embedId`, `serviceUrl`, `fetch`, and `appearance`;
 lifecycle, message, tool-proposal, interaction-resolution, view-availability, context, and error events
 support application integration. `confirmTool(id)` remains the compatibility shorthand for
 `respond(id, { action: 'accept' })`.

package/dist/{app-view-element-BM4lral-.d.ts → app-view-element-C_ATXseu.d.ts}

@@ -1,10 +1,9 @@
-import { A as AssistantClient, a as AssistantViewAvailableDetail, e as AssistantErrorDetail } from './client-BkogON2A.js';
+import { A as AssistantClient, a as AssistantViewAvailableDetail, e as AssistantErrorDetail } from './client-BheCOERq.js';
 
 declare const APP_VIEW_TAG_NAME = "noodle-app-view";
 interface AssistantAppViewErrorDetail {
-    readonly code: 'view_render_timeout' | 'view_bridge_error';
+    readonly code: 'view_render_timeout';
     readonly retryable: false;
-    readonly stage: 'sandbox_load' | 'sandbox_proxy' | 'app_initialize';
 }
 declare global {
     interface HTMLElementTagNameMap {

package/dist/{app-view-element-9ojWWYov.d.cts → app-view-element-CiFVNIke.d.cts}

@@ -1,10 +1,9 @@
-import { A as AssistantClient, a as AssistantViewAvailableDetail, e as AssistantErrorDetail } from './client-C07ppTU_.cjs';
+import { A as AssistantClient, a as AssistantViewAvailableDetail, e as AssistantErrorDetail } from './client-BiMRVxjs.cjs';
 
 declare const APP_VIEW_TAG_NAME = "noodle-app-view";
 interface AssistantAppViewErrorDetail {
-    readonly code: 'view_render_timeout' | 'view_bridge_error';
+    readonly code: 'view_render_timeout';
     readonly retryable: false;
-    readonly stage: 'sandbox_load' | 'sandbox_proxy' | 'app_initialize';
 }
 declare global {
     interface HTMLElementTagNameMap {

package/dist/app-view.cjs

@@ -15197,7 +15197,7 @@ __export(app_view_exports, {
 });
 module.exports = __toCommonJS(app_view_exports);
 
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_supports-color@7.2.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
 init_v4();
 var RELATED_TASK_META_KEY = "io.modelcontextprotocol/related-task";
 var JSONRPC_VERSION = "2.0";
@@ -16718,7 +16718,7 @@ var UrlElicitationRequiredError = class extends McpError {
 // ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/mini/parse.js
 init_core2();
 
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_supports-color@7.2.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-compat.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-compat.js
 function isZ4Schema(s2) {
   const schema = s2;
   return !!schema._zod;
@@ -16781,7 +16781,7 @@ function getLiteralValue(schema) {
   return void 0;
 }
 
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_supports-color@7.2.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/interfaces.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/interfaces.js
 function isTerminal(status) {
   return status === "completed" || status === "failed" || status === "cancelled";
 }
@@ -16789,7 +16789,7 @@ function isTerminal(status) {
 // ../../node_modules/.pnpm/zod-to-json-schema@3.25.2_zod@4.4.3/node_modules/zod-to-json-schema/dist/esm/parsers/string.js
 var ALPHA_NUMERIC = new Set("ABCDEFGHIJKLMNOPQRSTUVXYZabcdefghijklmnopqrstuvxyz0123456789");
 
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_supports-color@7.2.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-json-schema-compat.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-json-schema-compat.js
 function getMethodLiteral(schema) {
   const shape = getObjectShape(schema);
   const methodSchema = shape?.method;
@@ -16810,7 +16810,7 @@ function parseWithCompat(schema, data) {
   return result.data;
 }
 
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_supports-color@7.2.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/protocol.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/protocol.js
 var DEFAULT_REQUEST_TIMEOUT_MSEC = 6e4;
 var Protocol = class {
   constructor(_options) {
@@ -17922,15 +17922,6 @@ var E = class {
   sessionId;
   setProtocolVersion;
 };
-function AZ(X) {
-  if (!X) return "";
-  let Y = [];
-  if (X.camera) Y.push("camera");
-  if (X.microphone) Y.push("microphone");
-  if (X.geolocation) Y.push("geolocation");
-  if (X.clipboardWrite) Y.push("clipboard-write");
-  return Y.join("; ");
-}
 var KX = [j];
 var DX = class extends _ {
   _client;
@@ -18201,131 +18192,34 @@ function GX(X, Y) {
   return JSON.stringify(X) === JSON.stringify(Y);
 }
 
-// src/app-sandbox-policy.ts
-var MAX_DOMAINS_PER_DIRECTIVE = 32;
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function isLoopback(hostname3) {
-  return hostname3 === "localhost" || hostname3 === "127.0.0.1" || hostname3 === "[::1]";
-}
-function normalizeDomain(value, connect) {
-  if (value.length > 512 || /[;\r\n'"\s]/u.test(value)) return void 0;
-  try {
-    const parsed = new URL(value);
-    const secure = parsed.protocol === "https:" || connect && parsed.protocol === "wss:";
-    const local = isLoopback(parsed.hostname) && (parsed.protocol === "http:" || connect && parsed.protocol === "ws:");
-    if (!secure && !local) return void 0;
-    if (parsed.username || parsed.password || parsed.pathname !== "/" || parsed.search || parsed.hash) {
-      return void 0;
-    }
-    return parsed.origin;
-  } catch {
-    return void 0;
-  }
-}
-function normalizeDomains(values, connect) {
-  const normalized = [
-    ...new Set(
-      values.slice(0, MAX_DOMAINS_PER_DIRECTIVE).map((value) => typeof value === "string" ? normalizeDomain(value, connect) : void 0).filter((value) => value !== void 0)
-    )
-  ];
-  return normalized;
-}
-function resolveAssistantAppSandboxPolicy(resourceMeta) {
-  if (!isRecord(resourceMeta)) return {};
-  const rawCsp = resourceMeta.csp;
-  const csp = isRecord(rawCsp) ? {
-    ...Array.isArray(rawCsp.connectDomains) ? { connectDomains: normalizeDomains(rawCsp.connectDomains, true) } : {},
-    ...Array.isArray(rawCsp.resourceDomains) ? { resourceDomains: normalizeDomains(rawCsp.resourceDomains, false) } : {},
-    ...Array.isArray(rawCsp.frameDomains) ? { frameDomains: normalizeDomains(rawCsp.frameDomains, false) } : {},
-    ...Array.isArray(rawCsp.baseUriDomains) ? { baseUriDomains: normalizeDomains(rawCsp.baseUriDomains, false) } : {}
-  } : void 0;
-  const rawPermissions = resourceMeta.permissions;
-  const permissions = isRecord(rawPermissions) ? {
-    ...isRecord(rawPermissions.camera) ? { camera: {} } : {},
-    ...isRecord(rawPermissions.microphone) ? { microphone: {} } : {},
-    ...isRecord(rawPermissions.geolocation) ? { geolocation: {} } : {},
-    ...isRecord(rawPermissions.clipboardWrite) ? { clipboardWrite: {} } : {}
-  } : void 0;
-  const allowAttribute = AZ(permissions);
-  return {
-    ...csp === void 0 ? {} : { csp },
-    ...permissions === void 0 ? {} : { permissions },
-    ...allowAttribute ? { allowAttribute } : {}
-  };
-}
-function assistantAppSandboxUrl(sandboxUrl, policy) {
-  const parsed = new URL(sandboxUrl);
-  if (policy.csp) parsed.searchParams.set("csp", JSON.stringify(policy.csp));
-  const parentOrigin = globalThis.location?.origin;
-  if (parentOrigin && parentOrigin !== "null") {
-    parsed.hash = new URLSearchParams({ parentOrigin }).toString();
-  }
-  return parsed.href;
-}
-
 // src/app-host.ts
-var PROXY_DOCUMENT = `<!doctype html><meta charset="utf-8"><style>html,body,iframe{border:0;margin:0;width:100%;height:100%;overflow:hidden}body{background:transparent}</style><body><script>
-let inner,loaded=false;
-if(self===top)throw new Error('The assistant sandbox relay must be embedded');
-const standardSandbox='allow-scripts allow-same-origin allow-forms';
-const rawParentOrigin=new URLSearchParams(location.hash.slice(1)).get('parentOrigin');
-let expectedParentOrigin;
-try{const parsed=new URL(rawParentOrigin||'');if(parsed.origin===rawParentOrigin&&/^https?:$/.test(parsed.protocol))expectedParentOrigin=parsed.origin}catch{}
-const parentTarget=expectedParentOrigin||'*';
-const ownOrigin=self.origin;
+var PROXY_DOCUMENT = `<!doctype html><meta charset="utf-8"><style>html,body,iframe{border:0;margin:0;width:100%;height:100%;overflow:hidden}body{background:transparent}</style><script>
+let inner;
 const ready={jsonrpc:'2.0',method:'ui/notifications/sandbox-proxy-ready',params:{}};
 // Re-announce until the host acknowledges with the resource: when this document is hosted
 // cross-origin, the first announcement can arrive before the host's load handler is listening.
-const announce=setInterval(()=>parent.postMessage(ready,parentTarget),120);
+const announce=setInterval(()=>parent.postMessage(ready,'*'),120);
 setTimeout(()=>clearInterval(announce),15000);
 addEventListener('message',(event)=>{
   if(event.source===parent){
-    if(expectedParentOrigin&&event.origin!==expectedParentOrigin)return;
     const message=event.data;
     if(message?.method==='ui/notifications/sandbox-resource-ready'){
       clearInterval(announce);
-      if(loaded)return;
-      loaded=true;
-      const requestedSandbox=message.params?.sandbox;
+      if(inner)return;
       inner=document.createElement('iframe');
-      inner.setAttribute('sandbox',requestedSandbox===standardSandbox?standardSandbox:'allow-scripts');
+      inner.setAttribute('sandbox',message.params?.sandbox||'allow-scripts');
       inner.setAttribute('referrerpolicy','no-referrer');
-      const permissions=message.params?.permissions;
-      const allow=[];
-      if(permissions?.camera)allow.push('camera');
-      if(permissions?.microphone)allow.push('microphone');
-      if(permissions?.geolocation)allow.push('geolocation');
-      if(permissions?.clipboardWrite)allow.push('clipboard-write');
-      if(allow.length)inner.setAttribute('allow',allow.join('; '));
-      document.body.append(inner);
-      let html=String(message.params?.html||'');
-      const csp=message.params?.csp;
-      if(csp&&typeof csp==='object'){
-        const list=(value,fallback)=>Array.isArray(value)&&value.length?value.join(' '):fallback;
-        const resources=Array.isArray(csp.resourceDomains)?csp.resourceDomains:[];
-        const suffix=resources.length?' '+resources.join(' '):'';
-        const policy=["default-src 'none'","script-src 'unsafe-inline'"+suffix,"style-src 'unsafe-inline'"+suffix,'img-src data: blob:'+suffix,'font-src data: blob:'+suffix,'media-src data: blob:'+suffix,'worker-src blob:'+suffix,'connect-src '+list(csp.connectDomains,"'none'"),'frame-src '+list(csp.frameDomains,"'none'"),"object-src 'none'","form-action 'none'",'base-uri '+list(csp.baseUriDomains,"'none'")].join('; ');
-        const meta='<meta http-equiv="Content-Security-Policy" content="'+policy.replace(/&/g,'&amp;').replace(/"/g,'&quot;')+'">';
-        const doctype=html.match(/^\\s*<!doctype[^>]*>/i);
-        html=doctype?html.slice(0,doctype[0].length)+meta+html.slice(doctype[0].length):meta+html;
-      }
-      try{
-        const doc=inner.contentDocument||inner.contentWindow?.document;
-        if(!doc)throw new Error('document unavailable');
-        doc.open();doc.write(html);doc.close();
-      }catch{inner.srcdoc=html}
+      inner.srcdoc=String(message.params?.html||'');
+      document.body.replaceChildren(inner);
       return;
     }
     inner?.contentWindow?.postMessage(message,'*');
   } else if(inner && event.source===inner.contentWindow) {
-    if(event.origin!==ownOrigin)return;
-    parent.postMessage(event.data,parentTarget);
+    parent.postMessage(event.data,'*');
   }
 });
-parent.postMessage(ready,parentTarget);
-</script></body>`;
+parent.postMessage(ready,'*');
+</script>`;
 function isAllowedAppLink(value, allowedDomains, baseUrl) {
   try {
     const parsed = new URL(value, baseUrl);
@@ -18352,42 +18246,16 @@ function createAssistantAppHostContext(theme, allowFullscreen = false, displayMo
 }
 var APP_RENDER_TIMEOUT_MS = 1e4;
 var APP_TEARDOWN_TIMEOUT_MS = 1e3;
-var STANDARD_SANDBOX = "allow-scripts allow-same-origin allow-forms";
 var mountedApps = /* @__PURE__ */ new WeakMap();
 function resolveSandboxUrl(value) {
   if (!value) return void 0;
   try {
     const parsed = new URL(value);
-    const loopback = parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1" || parsed.hostname === "[::1]";
-    const permittedProtocol = parsed.protocol === "https:" || parsed.protocol === "http:" && loopback;
-    const embedderOrigin = globalThis.location?.origin;
-    if (!permittedProtocol || embedderOrigin && embedderOrigin !== "null" && parsed.origin === embedderOrigin) {
-      return void 0;
-    }
-    return parsed.href;
+    return parsed.protocol === "https:" || parsed.protocol === "http:" ? parsed.href : void 0;
   } catch {
     return void 0;
   }
 }
-function copyAppJson(value, depth = 0) {
-  if (depth > 64) throw new Error("App payload nesting exceeds the host limit");
-  if (value === null || typeof value === "string" || typeof value === "boolean") return value;
-  if (typeof value === "number") {
-    if (!Number.isFinite(value)) throw new Error("App payload numbers must be finite");
-    return value;
-  }
-  if (Array.isArray(value)) return value.map((entry) => copyAppJson(entry, depth + 1));
-  const copied = {};
-  for (const [key, entry] of Object.entries(value)) {
-    Object.defineProperty(copied, key, {
-      value: copyAppJson(entry, depth + 1),
-      enumerable: true,
-      configurable: true,
-      writable: true
-    });
-  }
-  return copied;
-}
 function mountAssistantApp(detail, actions, options = {}) {
   if (!detail.html) return void 0;
   const card = document.createElement("section");
@@ -18408,25 +18276,16 @@ function mountAssistantApp(detail, actions, options = {}) {
   const frame = document.createElement("iframe");
   frame.className = "noodle-app-frame";
   frame.title = detail.title ?? detail.tool;
-  const policy = resolveAssistantAppSandboxPolicy(detail.resourceMeta);
+  frame.setAttribute("sandbox", "allow-scripts");
   frame.setAttribute("referrerpolicy", "no-referrer");
   const sandboxUrl = resolveSandboxUrl(options.sandboxUrl);
-  const appliedPolicy = sandboxUrl ? policy : { csp: policy.csp ?? {} };
-  if (sandboxUrl) {
-    frame.setAttribute("sandbox", STANDARD_SANDBOX);
-    if (policy.allowAttribute) frame.setAttribute("allow", policy.allowAttribute);
-    frame.src = assistantAppSandboxUrl(sandboxUrl, policy);
-  } else {
-    frame.setAttribute("sandbox", "allow-scripts");
-    frame.srcdoc = PROXY_DOCUMENT;
-  }
+  if (sandboxUrl) frame.src = sandboxUrl;
+  else frame.srcdoc = PROXY_DOCUMENT;
   card.append(frame);
   let mountedBridge;
   let mountedTransport;
   let destroyed = false;
   let initialized = false;
-  let renderFailed = false;
-  let renderStage = "sandbox_load";
   let currentTheme = actions.theme;
   let displayMode = "inline";
   let hostContext = createAssistantAppHostContext(
@@ -18435,15 +18294,6 @@ function mountAssistantApp(detail, actions, options = {}) {
     displayMode
   );
   let destroyPromise;
-  let transportClosePromise;
-  let renderTimer;
-  const closeTransport = () => {
-    if (transportClosePromise) return transportClosePromise;
-    const closing = mountedTransport?.close().catch(() => {
-    }) ?? Promise.resolve();
-    transportClosePromise = closing;
-    return closing;
-  };
   const applyDisplayMode = (requestedMode) => {
     displayMode = requestedMode === "fullscreen" && options.allowFullscreen === true ? "fullscreen" : "inline";
     card.toggleAttribute("data-fullscreen", displayMode === "fullscreen");
@@ -18461,26 +18311,18 @@ function mountAssistantApp(detail, actions, options = {}) {
     applyDisplayMode("inline");
     frame.focus();
   });
-  const showRenderFailure = (code) => {
-    if (code === "view_render_timeout" && initialized || destroyed || renderFailed || !frame.isConnected)
-      return;
-    renderFailed = true;
-    clearTimeout(renderTimer);
+  const renderTimer = setTimeout(() => {
+    if (initialized || !frame.isConnected) return;
     const note = document.createElement("div");
     note.className = "noodle-app-fallback";
     note.textContent = "This app view could not be displayed.";
     frame.replaceWith(note);
-    options.onRenderFailure?.({ code, retryable: false, stage: renderStage });
-    void closeTransport();
-  };
-  renderTimer = setTimeout(() => {
-    showRenderFailure("view_render_timeout");
+    options.onRenderFailure?.({ code: "view_render_timeout", retryable: false });
   }, APP_RENDER_TIMEOUT_MS);
   frame.addEventListener(
     "load",
     () => {
-      if (destroyed || renderFailed) return;
-      renderStage = "sandbox_proxy";
+      if (destroyed) return;
       const target = frame.contentWindow;
       if (!target) return;
       const bridge = new DX(
@@ -18491,11 +18333,7 @@ function mountAssistantApp(detail, actions, options = {}) {
           serverTools: {},
           serverResources: {},
           updateModelContext: { text: {}, structuredContent: {} },
-          message: { text: {} },
-          sandbox: {
-            ...appliedPolicy.csp === void 0 ? {} : { csp: appliedPolicy.csp },
-            ...appliedPolicy.permissions === void 0 ? {} : { permissions: appliedPolicy.permissions }
-          }
+          message: { text: {} }
         },
         {
           hostContext
@@ -18503,15 +18341,13 @@ function mountAssistantApp(detail, actions, options = {}) {
       );
       mountedBridge = bridge;
       bridge.onsandboxready = () => {
-        if (destroyed || renderFailed) return;
-        renderStage = "app_initialize";
+        if (destroyed) return;
         const current = options.getDetail?.() ?? detail;
         void bridge.sendSandboxResourceReady({
           html: current.html,
-          sandbox: sandboxUrl ? STANDARD_SANDBOX : "allow-scripts",
-          ...appliedPolicy.csp === void 0 ? {} : { csp: appliedPolicy.csp },
-          ...appliedPolicy.permissions === void 0 ? {} : { permissions: appliedPolicy.permissions }
-        }).catch(() => showRenderFailure("view_bridge_error"));
+          sandbox: "allow-scripts",
+          ...current.resourceMeta ?? {}
+        });
       };
       bridge.onsizechange = ({ height }) => {
         if (destroyed) return;
@@ -18575,30 +18411,21 @@ function mountAssistantApp(detail, actions, options = {}) {
         return await actions.client.requestApp("resources/read", params);
       };
       bridge.oninitialized = () => {
-        if (destroyed || renderFailed) return;
-        try {
-          const current = options.getDetail?.() ?? detail;
-          const copiedArguments = copyAppJson(current.arguments ?? {});
-          const copiedResult = copyAppJson(current.result);
-          const argumentsRecord = typeof copiedArguments === "object" && copiedArguments !== null && !Array.isArray(copiedArguments) ? copiedArguments : {};
-          initialized = true;
-          clearTimeout(renderTimer);
-          bridge.setHostContext(hostContext);
-          void Promise.all([
-            bridge.sendToolInput({ arguments: argumentsRecord }),
-            bridge.sendToolResult({
-              content: [{ type: "text", text: JSON.stringify(copiedResult) }],
-              ...typeof copiedResult === "object" && copiedResult !== null && !Array.isArray(copiedResult) ? { structuredContent: copiedResult } : {}
-            })
-          ]).catch(() => showRenderFailure("view_bridge_error"));
-        } catch {
-          showRenderFailure("view_bridge_error");
-        }
+        if (destroyed) return;
+        initialized = true;
+        clearTimeout(renderTimer);
+        bridge.setHostContext(hostContext);
+        const current = options.getDetail?.() ?? detail;
+        void bridge.sendToolInput({ arguments: current.arguments ?? {} });
+        void bridge.sendToolResult({
+          content: [{ type: "text", text: JSON.stringify(current.result) }],
+          ...typeof current.result === "object" && current.result !== null && !Array.isArray(current.result) ? { structuredContent: current.result } : {}
+        });
       };
       const transport = new E(target, target);
       mountedTransport = transport;
       void bridge.connect(transport).catch(() => {
-        showRenderFailure("view_bridge_error");
+        void destroy();
       });
     },
     { once: true }
@@ -18624,7 +18451,8 @@ function mountAssistantApp(detail, actions, options = {}) {
         }
       } catch {
       }
-      await closeTransport();
+      await mountedTransport?.close().catch(() => {
+      });
       card.remove();
       mountedApps.delete(card);
     })();