@noodleseed/one 0.135.0 → 0.137.0

package/node_modules/@noodle-borg/agent-kit/dist/skill-embedded-assistant-ref.js

@@ -516,14 +516,19 @@ export function renderEmbeddedAssistantReference() {
         '',
         '`settle` must await or catch the command promise; the same structured failure also appears in the hook `error` state.',
         '',
-        'The sample fails closed on input requests until you replace that branch with a form generated from `requestedSchema`. A custom renderer must show the complete confirmation review and both decisions, handle every part it supports, and surface an explicit unsupported state for the rest. For `data-view`, use `NoodleAppView` to render the linked App or deliberately map `resourceUri`/tool plus the bounded redacted `result` to an application-trusted native component. JSON result data is not the linked App UI. Never inject `part.data.html`, assign it to `srcdoc`, fetch a `ui://` URI, or reproduce the bridge with a direct Ext Apps dependency. Do not wrap this client in another chat transport or invent user messages for interaction continuations.',
+        'The sample fails closed on input requests until you replace that branch with a form generated from `requestedSchema`. A custom renderer must show the complete confirmation review and both decisions, handle every part it supports, and surface an explicit unsupported state for the rest. For `data-view`, use the canonical `<noodle-app-view>` host (or its React `NoodleAppView` adapter) to render the linked App, or deliberately map `resourceUri`/tool plus the bounded redacted `result` to an application-trusted native component. JSON result data is not the linked App UI. Never inject `part.data.html`, assign it to `srcdoc`, fetch a `ui://` URI, or reproduce the bridge with a direct Ext Apps dependency. Do not wrap this client in another chat transport or invent user messages for interaction continuations.',
         '',
-        '`NoodleAppView` owns one bridge for the semantic view identity: client + `view.id` + `view.resourceUri`. It retains the iframe across fresh payload/callback/theme rerenders, reads current payloads through refs, publishes later resolved-theme changes through MCP Apps host context, and sends standard App teardown only when that semantic identity changes or the component unmounts. Pass the same resolved application theme used by the conversation shell. Do not key an ancestor by a view object or callback. If the embedding page sets Content-Security-Policy, include the Noodle service origin in both `connect-src` and `frame-src`.',
+        '`<noodle-app-view>` owns one bridge for the semantic view identity: client + `view.id` + `view.resourceUri`; `NoodleAppView` delegates to it. The host retains the iframe across fresh payload/callback/theme rerenders, publishes later resolved-theme changes through MCP Apps host context, and sends standard App teardown when that semantic identity changes, the element disconnects, or the App requests teardown. App views remain inline by default; the host advertises only inline presentation and rejects widget fullscreen requests. Opt in with `allowFullscreen` on `NoodleAppView` or `allow-fullscreen` on `<noodle-app-view>` only when fullscreen is an intentional part of the customer-owned experience. When fullscreen is accepted, the shared host adds an accessible top-right exit control that returns the same mounted App to inline mode without losing its state. Pass the same resolved application theme used by the conversation shell. Do not key an ancestor by a view object or callback. If the embedding page sets Content-Security-Policy, include the Noodle service origin in both `connect-src` and `frame-src`.',
         '',
-        'Outside React, use the same DOM-free client directly. It keeps the session token in memory, exposes a React-free `UIMessage` transcript with typed parts, and never registers a custom element:',
+        'Outside React, use the same DOM-free client directly and import the isolated App-view entry only when rendering linked Apps. The client keeps the session token in memory, the transcript stays React-free, and the element owns only App presentation:',
+        '',
+        '```html',
+        '<noodle-app-view id="assistant-app-view"></noodle-app-view>',
+        '```',
         '',
         '```ts',
         'import { createAssistantClient } from "@noodleseed/assistant/client";',
+        'import "@noodleseed/assistant/app-view";',
         '',
         'const assistant = createAssistantClient({',
         '  sessionEndpoint: "/api/assistant/session",',
@@ -533,6 +538,11 @@ export function renderEmbeddedAssistantReference() {
         '  }),',
         '});',
         '',
+        'const appView = document.querySelector("#assistant-app-view");',
+        'if (!appView) throw new Error("Missing App view host");',
+        'appView.client = assistant;',
+        "appView.theme = document.documentElement.classList.contains('dark') ? 'dark' : 'light';",
+        '',
         'assistant.updateModelContext({',
         "  content: [{ type: 'text', text: 'The time-off form is mounted.' }],",
         "  structuredContent: { widget: { name: 'time-off', lifecycle: 'mounted' } },",
@@ -551,7 +561,7 @@ export function renderEmbeddedAssistantReference() {
         '        pending = { id: part.data.id, requestedSchema: part.data.requestedSchema };',
         '      }',
         "      if (part.type === 'data-view') {",
-        '        renderRegisteredView(part.data.resourceUri, part.data.result);',
+        '        appView.view = part.data;',
         '      }',
         '    }',
         '  }',
@@ -590,7 +600,7 @@ export function renderEmbeddedAssistantReference() {
         '});',
         '```',
         '',
-        '`data-view` means a completed tool has a linked MCP App view. In a customer-owned React renderer, pass that typed part and the existing client to `NoodleAppView`; it retains one bridge for client + `view.id` + `view.resourceUri` and requests standard App teardown on semantic replacement or unmount. That pair is transport identity: different call ids are distinct invocations and must not be deduplicated generically. If the product intentionally owns one current panel for a known resource, declare an application-owned slot map and replace only that slot. Deliberately map the bounded result to an application-trusted native component only when replacing the linked App UI.',
+        '`data-view` means a completed tool has a linked MCP App view. Pass that typed part and the existing client to `<noodle-app-view>` in Vue, Angular, or plain DOM, or to its `NoodleAppView` React adapter. It retains one bridge for client + `view.id` + `view.resourceUri` and requests standard App teardown on semantic replacement, disconnect, or App request. That pair is transport identity: different call ids are distinct invocations and must not be deduplicated generically. If the product intentionally owns one current panel for a known resource, declare an application-owned slot map and replace only that slot. Deliberately map the bounded result to an application-trusted native component only when replacing the linked App UI.',
         '',
         '`clientContext` and typed `pageContext` are recomputed for each turn. `updateContext(...)` remains the legacy session-exchange context; `updatePageContext(...)` replaces the fresh per-turn application hint. `updateModelContext({ content, structuredContent })` publishes one cohesive renderer snapshot for later message turns without starting a turn; every call replaces the prior snapshot rather than merging fields. These are untrusted data, not conversation history or authorization input, and the boundaries reject credential-shaped or unbounded updates. A message may re-exchange once after a pre-execution `401`; the client never auto-retries interaction decisions. `tool_proposed.arguments` is a complete schema-aware review projection and, for connector-backed tools, names the sole exact connector version/operation/resolved arguments. Sensitive/write-only fields are redacted; truncating or omitting any non-sensitive action field fails closed. Accept is bound to the server-held action and claims at most one execution attempt—clients cannot replace it. Normal terminal outcomes scrub private arguments and continuations immediately; only an accepted action still executing retains them for the one-hour unknown-outcome recovery window, after which it records `interaction_outcome_unknown` and scrubs. Without downstream idempotency this is not an exactly-once business-effect guarantee. To reconcile a lost response, explicitly repeat the same id and decision: the service returns its durable stored outcome without re-execution.',
         '',
@@ -615,7 +625,7 @@ export function renderEmbeddedAssistantReference() {
         '',
         '- Node.js 20+ for `@noodleseed/assistant/server`.',
         '- The package ships ESM and CommonJS with full export conditions; no bundler aliases, `transpilePackages`, or ambient type shims are needed. If resolution fails, the installed package version is outdated: update `@noodleseed/assistant` instead of adding workarounds.',
-        '- TypeScript `moduleResolution` `bundler` or `node16` recommended; classic `node` also resolves the `/client`, `/react`, `/react/client`, and `/server` subpaths.',
+        '- TypeScript `moduleResolution` `bundler` or `node16` recommended; classic `node` also resolves the `/app-view`, `/client`, `/react`, `/react/client`, and `/server` subpaths.',
         '',
         '## Verify the boundary',
         '',

package/node_modules/@noodleseed/assistant/README.md

@@ -2,8 +2,9 @@
 
 Customer-branded embedded assistant surfaces for Noodle Seed deployments.
 
-The package exports the canonical `<noodle-assistant>` Web Component, a managed React wrapper and secure
-`NoodleAppView` MCP App renderer from `@noodleseed/assistant/react`, a renderer-free React hook from
+The package exports the canonical `<noodle-assistant>` managed Web Component, the framework-neutral
+`<noodle-app-view>` MCP App host from `@noodleseed/assistant/app-view`, a managed React wrapper and
+`NoodleAppView` adapter from `@noodleseed/assistant/react`, a renderer-free React hook from
 `@noodleseed/assistant/react/client`, a DOM-free client from `@noodleseed/assistant/client`, and the
 backend-only `createAssistantSession` helper from `@noodleseed/assistant/server`. Light, dark, and automatic
 themes work without configuration; the component inherits the deployed MCP server's brand kit while slots,
@@ -376,20 +377,54 @@ if (part.type === "data-view") {
 }
 ```
 
-`NoodleAppView` owns the double iframe and AppBridge. Its lifecycle identity is the supplied client plus
+`<noodle-app-view>` owns the double iframe and AppBridge; `NoodleAppView` delegates to it. Its lifecycle identity is the supplied client plus
 `view.id` plus `view.resourceUri`: ordinary parent rerenders and fresh view/callback objects retain the
 iframe, while a semantic view replacement or unmount requests standard App teardown and closes the bridge.
 Do not also key an ancestor by the whole view object or a callback. Pass the embedding application's
 resolved `"light"` or `"dark"` theme; later changes are published through MCP Apps host context without
 replacing the iframe.
 
+App views stay inline by default. The host advertises only inline presentation and rejects an untrusted
+App's fullscreen request, so stale or third-party widget code cannot take over the embedding application's
+viewport. If fullscreen is an intentional part of the customer-owned experience, opt in explicitly with
+`allowFullscreen` on `NoodleAppView` or `allow-fullscreen` on `<noodle-app-view>`; do not enable it merely
+because a widget requests it. After an accepted fullscreen request, the host displays an accessible exit
+control in the top-right corner. It returns the same mounted App to inline mode without resetting its state.
+
+Vue, Angular, and plain DOM renderers use the same host without installing React. Import its dedicated entry
+once, then assign the complex values as element properties. In Vue, the explicit `.prop` modifier makes that
+boundary unambiguous:
+
+```vue
+<script setup lang="ts">
+import "@noodleseed/assistant/app-view";
+</script>
+
+<template>
+  <noodle-app-view
+    :client.prop="assistant"
+    :view.prop="part.data"
+    :theme="resolvedTheme"
+    @assistant-error="reportAssistantError"
+  />
+</template>
+```
+
+Configure Vue's `isCustomElement` for `noodle-app-view`. Angular uses the same element with `[client]`,
+`[view]`, and `[theme]` property bindings. Do not serialize `client` or `view` into attributes.
+
+`<noodle-app-view>` is the canonical host; `NoodleAppView` delegates to it. Both use the
+service-advertised sandbox URL, route App calls through the supplied client, publish theme changes without
+replacing the iframe, and request standard teardown on semantic replacement, disconnect, or an App teardown
+request.
+
 The App document owns its action intent: it calls standard `tools/call` after connecting and never relies on
 native form navigation. If that call needs input or confirmation, the same `client` publishes the normal
 pending interaction part for either managed or customer-owned rendering. The original App call stays pending
 and receives its MCP result after `client.respond(...)`; applications must not retry or translate the click.
 
-Outside React, subscribe to the DOM-free AI SDK `UIMessage` state without registering a custom element or
-touching browser storage:
+Outside React, subscribe to the DOM-free AI SDK `UIMessage` state without touching browser storage. The
+client itself registers no element; import `/app-view` only when the transcript renders linked MCP Apps:
 
 ```ts
 import { createAssistantClient } from "@noodleseed/assistant/client";
@@ -491,8 +526,8 @@ flow collects all elicited input before its first connector operation.
 
 A completed widget-linked tool emits typed `view_available` data with its call/interaction id, tool,
 `ui://` resource identity, optional title, bounded/redacted public result, and—on current services—the
-self-contained App document. This is an availability signal, not proof of rendering. A customer-owned React
-renderer either mounts the actual App with `NoodleAppView` or deliberately substitutes a component already
+self-contained App document. This is an availability signal, not proof of rendering. A customer-owned
+renderer either mounts the actual App with `<noodle-app-view>` (or its React `NoodleAppView` adapter) or deliberately substitutes a component already
 trusted by the application and selected by `resourceUri`/tool. The JSON `result` is data for a native
 component; serializing it is not a rendering of the linked App. Never fetch the `ui://` URI, inject
 `part.data.html`, or assign it to `srcdoc` yourself. The standard element also forwards the same detail as a
@@ -615,7 +650,7 @@ shadow-DOM selectors and classes are not public API.
 
 `theme="auto"` follows the browser's operating-system color preference. When the embedding application has
 its own theme toggle, pass its resolved `"light"` or `"dark"` value to `NoodleAssistant` and every
-`NoodleAppView`. Updates change the assistant in place and notify mounted MCP Apps through standard host
+`<noodle-app-view>`/`NoodleAppView`. Updates change the assistant in place and notify mounted MCP Apps through standard host
 context.
 
 Server branding controls customer name, themed logo/mark/avatar assets, semantic light/dark colors, density,

package/node_modules/@noodleseed/assistant/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@noodleseed/assistant",
   "version": "1.22.0",
-  "description": "Embed the Noodle Seed customer-branded assistant in your web app with a Web Component, managed or custom React UI, DOM-free client, and backend session helper. Authoring and deploying the server is @noodleseed/one.",
+  "description": "Embed the Noodle Seed customer-branded assistant in your web app with managed or framework-owned UI, a framework-neutral MCP App host, a DOM-free client, and a backend session helper. Authoring and deploying the server is @noodleseed/one.",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -26,6 +26,17 @@
       },
       "default": "./dist/index.js"
     },
+    "./app-view": {
+      "import": {
+        "types": "./dist/app-view.d.ts",
+        "default": "./dist/app-view.js"
+      },
+      "require": {
+        "types": "./dist/app-view.d.cts",
+        "default": "./dist/app-view.cjs"
+      },
+      "default": "./dist/app-view.js"
+    },
     "./client": {
       "import": {
         "types": "./dist/client.d.ts",
@@ -103,6 +114,9 @@
   "module": "./dist/index.js",
   "typesVersions": {
     "*": {
+      "app-view": [
+        "./dist/app-view.d.ts"
+      ],
       "react": [
         "./dist/react.d.ts"
       ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/one",
-  "version": "0.135.0",
+  "version": "0.137.0",
   "private": false,
   "description": "Noodle CLI by Noodle Seed — author, run, and deploy declarative MCP servers. Embedding the assistant in your own web app is @noodleseed/assistant.",
   "license": "Apache-2.0",