@nuwax-ai/openui-mcp 0.1.0

package/dist/server/http-app.js

@@ -0,0 +1,84 @@
+import { existsSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import express from 'express';
+import { createOpenUiMcpServer } from './mcp-server.js';
+import { createSidecarPageHtml } from './page-template.js';
+function requestHost(request) {
+    return (request.headers.host ?? '').split(':')[0] ?? '';
+}
+function addSecurityHeaders(response, frameAncestors) {
+    response.setHeader('Referrer-Policy', 'no-referrer');
+    response.setHeader('X-Content-Type-Options', 'nosniff');
+    response.setHeader('Content-Security-Policy', `default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; object-src 'none'; base-uri 'none'; form-action 'self'; frame-ancestors ${frameAncestors.join(' ')}`);
+}
+export function createHttpApp(dependencies) {
+    const { config, renderService, store } = dependencies;
+    const app = express();
+    app.disable('x-powered-by');
+    app.use(express.json({ limit: '1mb' }));
+    app.use((request, response, next) => {
+        if (!config.allowedHosts.includes(requestHost(request))) {
+            response.status(421).json({ error: 'Untrusted Host header.' });
+            return;
+        }
+        next();
+    });
+    app.get('/healthz', (_request, response) => {
+        response.json({ status: 'ok', service: 'nuwax-openui-mcp' });
+    });
+    app.post('/mcp', async (request, response) => {
+        const server = createOpenUiMcpServer(renderService);
+        const transport = new StreamableHTTPServerTransport({
+            sessionIdGenerator: undefined,
+            enableJsonResponse: true,
+        });
+        response.on('close', () => {
+            void transport.close();
+            void server.close();
+        });
+        try {
+            await server.connect(transport);
+            await transport.handleRequest(request, response, request.body);
+        }
+        catch (error) {
+            if (!response.headersSent) {
+                response.status(500).json({
+                    error: error instanceof Error ? error.message : 'MCP request failed.',
+                });
+            }
+        }
+    });
+    app.get('/openui/artifacts/:artifactId', async (request, response) => {
+        const artifact = await store.get(request.params.artifactId);
+        if (!artifact) {
+            response.status(404).json({ error: 'Artifact not found or expired.' });
+            return;
+        }
+        response.setHeader('Cache-Control', 'private, no-store');
+        response.json(artifact);
+    });
+    app.get('/openui/pages/:artifactId', async (request, response) => {
+        const artifact = await store.get(request.params.artifactId);
+        if (!artifact || artifact.presentation.mode !== 'sidecar') {
+            response.status(404).send('Artifact not found or expired.');
+            return;
+        }
+        addSecurityHeaders(response, config.frameAncestors);
+        response.setHeader('Cache-Control', 'private, no-store');
+        response
+            .type('html')
+            .send(createSidecarPageHtml(artifact.artifactId, artifact.title));
+    });
+    const moduleDirectory = dirname(fileURLToPath(import.meta.url));
+    const webAssetsDirectory = resolve(moduleDirectory, '../web');
+    if (existsSync(webAssetsDirectory)) {
+        app.use('/openui/assets', express.static(webAssetsDirectory, {
+            immutable: true,
+            maxAge: '1y',
+        }));
+    }
+    return app;
+}
+//# sourceMappingURL=http-app.js.map

package/dist/server/http-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-app.js","sourceRoot":"","sources":["../../src/http-app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,OAAsD,MAAM,SAAS,CAAC;AAI7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAS3D,SAAS,WAAW,CAAC,OAAgB;IACnC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,kBAAkB,CACzB,QAAkB,EAClB,cAAwB;IAExB,QAAQ,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IACrD,QAAQ,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IACxD,QAAQ,CAAC,SAAS,CAChB,yBAAyB,EACzB,8LAA8L,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACzN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,YAAiC;IAC7D,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC;IACtD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5B,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAExC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QAClC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACxD,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;QACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;YAClD,kBAAkB,EAAE,SAAS;YAC7B,kBAAkB,EAAE,IAAI;SACzB,CAAC,CAAC;QAEH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,SAAS,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAC1B,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACxB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB;iBACtE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QACnE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;QACzD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC/D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC1D,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QACD,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;QACpD,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;QACzD,QAAQ;aACL,IAAI,CAAC,MAAM,CAAC;aACZ,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,MAAM,kBAAkB,GAAG,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IAC9D,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,GAAG,CACL,gBAAgB,EAChB,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE;YACjC,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,IAAI;SACb,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/server/http.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+//# sourceMappingURL=http.d.ts.map

package/dist/server/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/http.ts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC"}

package/dist/server/http.js

@@ -0,0 +1,22 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+import { loadConfig } from './config.js';
+import { createHttpApp } from './http-app.js';
+import { createRuntime } from './runtime.js';
+const config = loadConfig();
+const runtime = createRuntime(config);
+const app = createHttpApp({ config, ...runtime });
+const server = app.listen(config.port, config.host, () => {
+    console.log(`nuwax-openui-mcp listening at ${config.baseUrl} (MCP: ${config.baseUrl}/mcp)`);
+});
+function shutdown() {
+    server.close((error) => {
+        if (error) {
+            console.error(error);
+            process.exitCode = 1;
+        }
+    });
+}
+process.on('SIGINT', shutdown);
+process.on('SIGTERM', shutdown);
+//# sourceMappingURL=http.js.map

package/dist/server/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/http.ts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AAEvB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;AAC5B,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;AACtC,MAAM,GAAG,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;AAElD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;IACvD,OAAO,CAAC,GAAG,CACT,iCAAiC,MAAM,CAAC,OAAO,UAAU,MAAM,CAAC,OAAO,OAAO,CAC/E,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,SAAS,QAAQ;IACf,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACrB,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC"}

package/dist/server/index.d.ts

@@ -0,0 +1,7 @@
+export * from './artifact-store.js';
+export * from './contracts.js';
+export * from './mcp-server.js';
+export * from './openui-validator.js';
+export * from './policy.js';
+export * from './render-service.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC"}

package/dist/server/index.js

@@ -0,0 +1,7 @@
+export * from './artifact-store.js';
+export * from './contracts.js';
+export * from './mcp-server.js';
+export * from './openui-validator.js';
+export * from './policy.js';
+export * from './render-service.js';
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC"}

package/dist/server/mcp-server.d.ts

@@ -0,0 +1,4 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { RenderOpenUiService } from './render-service.js';
+export declare function createOpenUiMcpServer(renderService: RenderOpenUiService): McpServer;
+//# sourceMappingURL=mcp-server.d.ts.map

package/dist/server/mcp-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../../src/mcp-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AASpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,mBAAmB,GACjC,SAAS,CAkDX"}

package/dist/server/mcp-server.js

@@ -0,0 +1,47 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { z } from 'zod';
+import { OPENUI_TOOL_NAME, openUiArtifactSchema, renderOpenUiInputSchema, } from './contracts.js';
+import { OpenUiPolicyError } from './policy.js';
+export function createOpenUiMcpServer(renderService) {
+    const server = new McpServer({
+        name: 'nuwax-openui-mcp',
+        version: '0.1.0',
+    });
+    server.registerTool(OPENUI_TOOL_NAME, {
+        title: 'Render Nuwax OpenUI',
+        description: 'Validate and publish an OpenUI Lang document for Nuwax. Use inline for compact UI inside the tool block, or sidecar for a full page opened in the Nuwax preview iframe.',
+        inputSchema: renderOpenUiInputSchema,
+        outputSchema: openUiArtifactSchema,
+    }, async (input) => {
+        try {
+            const artifact = await renderService.render(input);
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: artifact.presentation.mode === 'inline'
+                            ? `OpenUI inline artifact ready: ${artifact.artifactId}`
+                            : `OpenUI sidecar artifact ready: ${artifact.page?.url}`,
+                    },
+                ],
+                structuredContent: artifact,
+            };
+        }
+        catch (error) {
+            const message = error instanceof z.ZodError
+                ? z.prettifyError(error)
+                : error instanceof Error
+                    ? error.message
+                    : 'Unknown OpenUI validation error.';
+            return {
+                isError: true,
+                content: [{ type: 'text', text: message }],
+                _meta: error instanceof OpenUiPolicyError
+                    ? { code: error.code }
+                    : { code: 'invalid-openui-document' },
+            };
+        }
+    });
+    return server;
+}
+//# sourceMappingURL=mcp-server.js.map

package/dist/server/mcp-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.js","sourceRoot":"","sources":["../../src/mcp-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGhD,MAAM,UAAU,qBAAqB,CACnC,aAAkC;IAElC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EACT,yKAAyK;QAC3K,WAAW,EAAE,uBAAuB;QACpC,YAAY,EAAE,oBAAoB;KACnC,EACD,KAAK,EAAE,KAAK,EAAE,EAAE;QACd,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnD,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EACF,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,QAAQ;4BACrC,CAAC,CAAC,iCAAiC,QAAQ,CAAC,UAAU,EAAE;4BACxD,CAAC,CAAC,kCAAkC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE;qBAC7D;iBACF;gBACD,iBAAiB,EAAE,QAAQ;aAC5B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GACX,KAAK,YAAY,CAAC,CAAC,QAAQ;gBACzB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC;gBACxB,CAAC,CAAC,KAAK,YAAY,KAAK;oBACtB,CAAC,CAAC,KAAK,CAAC,OAAO;oBACf,CAAC,CAAC,kCAAkC,CAAC;YAC3C,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;gBACnD,KAAK,EACH,KAAK,YAAY,iBAAiB;oBAChC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;oBACtB,CAAC,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE;aAC1C,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/openui-validator.d.ts

@@ -0,0 +1,6 @@
+export declare class OpenUiDocumentError extends Error {
+    readonly details: string[];
+    constructor(details: string[]);
+}
+export declare function validateOpenUiDocument(source: string): void;
+//# sourceMappingURL=openui-validator.d.ts.map

package/dist/server/openui-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openui-validator.d.ts","sourceRoot":"","sources":["../../src/openui-validator.ts"],"names":[],"mappings":"AAKA,qBAAa,mBAAoB,SAAQ,KAAK;aAChB,OAAO,EAAE,MAAM,EAAE;gBAAjB,OAAO,EAAE,MAAM,EAAE;CAI9C;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAiB3D"}

package/dist/server/openui-validator.js

@@ -0,0 +1,31 @@
+import { createParser } from '@openuidev/react-lang';
+import { openuiLibrary } from '@openuidev/react-ui/genui-lib';
+const parser = createParser(openuiLibrary.toJSONSchema(), 'Stack');
+export class OpenUiDocumentError extends Error {
+    details;
+    constructor(details) {
+        super(`Invalid OpenUI document: ${details.join('; ')}`);
+        this.details = details;
+        this.name = 'OpenUiDocumentError';
+    }
+}
+export function validateOpenUiDocument(source) {
+    const result = parser.parse(source);
+    const errors = result.meta.errors.map((error) => error.message);
+    if (!result.root)
+        errors.push('The document has no renderable root.');
+    if (result.root && result.root.typeName !== 'Stack') {
+        errors.push('The root component must be Stack.');
+    }
+    if (result.meta.incomplete)
+        errors.push('The document is incomplete.');
+    if (result.meta.unresolved.length > 0) {
+        errors.push(`Unresolved references: ${result.meta.unresolved.join(', ')}.`);
+    }
+    if (result.meta.orphaned.length > 0) {
+        errors.push(`Orphaned statements: ${result.meta.orphaned.join(', ')}.`);
+    }
+    if (errors.length > 0)
+        throw new OpenUiDocumentError(errors);
+}
+//# sourceMappingURL=openui-validator.js.map

package/dist/server/openui-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openui-validator.js","sourceRoot":"","sources":["../../src/openui-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAE9D,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC,YAAY,EAAE,EAAE,OAAO,CAAC,CAAC;AAEnE,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAChB;IAA5B,YAA4B,OAAiB;QAC3C,KAAK,CAAC,4BAA4B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAD9B,YAAO,GAAP,OAAO,CAAU;QAE3C,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAEhE,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU;QAAE,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,wBAAwB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC/D,CAAC"}

package/dist/server/page-template.d.ts

@@ -0,0 +1,2 @@
+export declare function createSidecarPageHtml(artifactId: string, title: string): string;
+//# sourceMappingURL=page-template.d.ts.map

package/dist/server/page-template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-template.d.ts","sourceRoot":"","sources":["../../src/page-template.ts"],"names":[],"mappings":"AASA,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,GACZ,MAAM,CAeR"}

package/dist/server/page-template.js

@@ -0,0 +1,25 @@
+function escapeHtml(value) {
+    return value
+        .replaceAll('&', '&')
+        .replaceAll('<', '&lt;')
+        .replaceAll('>', '&gt;')
+        .replaceAll('"', '&quot;')
+        .replaceAll("'", '&#039;');
+}
+export function createSidecarPageHtml(artifactId, title) {
+    return `<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <meta name="referrer" content="no-referrer" />
+    <title>${escapeHtml(title)}</title>
+    <link rel="stylesheet" href="/openui/assets/sidecar.css" />
+  </head>
+  <body>
+    <main id="root" data-artifact-id="${escapeHtml(artifactId)}"></main>
+    <script type="module" src="/openui/assets/sidecar.js"></script>
+  </body>
+</html>`;
+}
+//# sourceMappingURL=page-template.js.map

package/dist/server/page-template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-template.js","sourceRoot":"","sources":["../../src/page-template.ts"],"names":[],"mappings":"AAAA,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK;SACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC;SACzB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EAClB,KAAa;IAEb,OAAO;;;;;;aAMI,UAAU,CAAC,KAAK,CAAC;;;;wCAIU,UAAU,CAAC,UAAU,CAAC;;;QAGtD,CAAC;AACT,CAAC"}

package/dist/server/policy.d.ts

@@ -0,0 +1,7 @@
+import type { RenderOpenUiInput } from './contracts.js';
+export declare class OpenUiPolicyError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export declare function enforceOpenUiPolicy(input: RenderOpenUiInput): void;
+//# sourceMappingURL=policy.d.ts.map

package/dist/server/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAcxD,qBAAa,iBAAkB,SAAQ,KAAK;aAExB,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EAC5B,OAAO,EAAE,MAAM;CAKlB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAoClE"}

package/dist/server/policy.js

@@ -0,0 +1,41 @@
+const FORBIDDEN_SOURCE_PATTERNS = [
+    { code: 'raw-script', pattern: /<\s*script\b/i },
+    { code: 'javascript-url', pattern: /javascript\s*:/i },
+    { code: 'html-data-url', pattern: /data\s*:\s*text\/html/i },
+    { code: 'dynamic-import', pattern: /\bimport\s*\(/i },
+    { code: 'eval', pattern: /\beval\s*\(/i },
+    { code: 'function-constructor', pattern: /\bFunction\s*\(/ },
+];
+const MAX_LINES = 2_000;
+const MAX_BINDINGS = 32;
+export class OpenUiPolicyError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'OpenUiPolicyError';
+    }
+}
+export function enforceOpenUiPolicy(input) {
+    const lineCount = input.document.source.split(/\r?\n/).length;
+    if (lineCount > MAX_LINES) {
+        throw new OpenUiPolicyError('too-many-lines', `OpenUI document exceeds ${MAX_LINES} lines.`);
+    }
+    if (input.bindings.tools.length > MAX_BINDINGS) {
+        throw new OpenUiPolicyError('too-many-bindings', `OpenUI document exceeds ${MAX_BINDINGS} tool bindings.`);
+    }
+    const duplicateBindings = new Set();
+    for (const binding of input.bindings.tools) {
+        const key = `${binding.serverId}:${binding.toolName}`;
+        if (duplicateBindings.has(key)) {
+            throw new OpenUiPolicyError('duplicate-binding', `Duplicate MCP binding: ${key}.`);
+        }
+        duplicateBindings.add(key);
+    }
+    for (const forbidden of FORBIDDEN_SOURCE_PATTERNS) {
+        if (forbidden.pattern.test(input.document.source)) {
+            throw new OpenUiPolicyError(forbidden.code, `OpenUI document contains forbidden content: ${forbidden.code}.`);
+        }
+    }
+}
+//# sourceMappingURL=policy.js.map

package/dist/server/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/policy.ts"],"names":[],"mappings":"AAEA,MAAM,yBAAyB,GAA6C;IAC1E,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE;IAChD,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,iBAAiB,EAAE;IACtD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,wBAAwB,EAAE;IAC5D,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE;IACrD,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE;IACzC,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,iBAAiB,EAAE;CAC7D,CAAC;AAEF,MAAM,SAAS,GAAG,KAAK,CAAC;AACxB,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAExB;IADlB,YACkB,IAAY,EAC5B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAQ;QAI5B,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAwB;IAC1D,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAC9D,IAAI,SAAS,GAAG,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,iBAAiB,CACzB,gBAAgB,EAChB,2BAA2B,SAAS,SAAS,CAC9C,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;QAC/C,MAAM,IAAI,iBAAiB,CACzB,mBAAmB,EACnB,2BAA2B,YAAY,iBAAiB,CACzD,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5C,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtD,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,iBAAiB,CACzB,mBAAmB,EACnB,0BAA0B,GAAG,GAAG,CACjC,CAAC;QACJ,CAAC;QACD,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,yBAAyB,EAAE,CAAC;QAClD,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,iBAAiB,CACzB,SAAS,CAAC,IAAI,EACd,+CAA+C,SAAS,CAAC,IAAI,GAAG,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/server/render-service.d.ts

@@ -0,0 +1,13 @@
+import { type OpenUiArtifact } from './contracts.js';
+import type { ArtifactStore } from './artifact-store.js';
+export interface RenderServiceOptions {
+    baseUrl: string;
+    artifactTtlSeconds: number;
+}
+export declare class RenderOpenUiService {
+    private readonly store;
+    private readonly options;
+    constructor(store: ArtifactStore, options: RenderServiceOptions);
+    render(rawInput: unknown): Promise<OpenUiArtifact>;
+}
+//# sourceMappingURL=render-service.d.ts.map

package/dist/server/render-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-service.d.ts","sourceRoot":"","sources":["../../src/render-service.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,cAAc,EAEpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIzD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAUD,qBAAa,mBAAmB;IAE5B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,oBAAoB;IAG1C,MAAM,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC;CAwCzD"}

package/dist/server/render-service.js

@@ -0,0 +1,54 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { openUiArtifactSchema, renderOpenUiInputSchema, } from './contracts.js';
+import { validateOpenUiDocument } from './openui-validator.js';
+import { enforceOpenUiPolicy } from './policy.js';
+function createDigest(source) {
+    return `sha256:${createHash('sha256').update(source).digest('hex')}`;
+}
+function trimTrailingSlash(value) {
+    return value.replace(/\/+$/, '');
+}
+export class RenderOpenUiService {
+    store;
+    options;
+    constructor(store, options) {
+        this.store = store;
+        this.options = options;
+    }
+    async render(rawInput) {
+        const input = renderOpenUiInputSchema.parse(rawInput);
+        enforceOpenUiPolicy(input);
+        validateOpenUiDocument(input.document.source);
+        const artifactId = randomUUID();
+        const createdAt = new Date();
+        const expiresAt = new Date(createdAt.getTime() + this.options.artifactTtlSeconds * 1_000);
+        const artifact = {
+            type: 'nuwax.openui',
+            schemaVersion: input.schemaVersion,
+            artifactId,
+            title: input.title,
+            presentation: input.presentation,
+            document: {
+                ...input.document,
+                digest: createDigest(input.document.source),
+            },
+            bindings: input.bindings,
+            fallback: input.fallback,
+            createdAt: createdAt.toISOString(),
+            expiresAt: expiresAt.toISOString(),
+            ...(input.presentation.mode === 'sidecar'
+                ? {
+                    page: {
+                        url: `${trimTrailingSlash(this.options.baseUrl)}/openui/pages/${artifactId}`,
+                        expiresAt: expiresAt.toISOString(),
+                        sandboxProfile: 'openui-sidecar-v1',
+                    },
+                }
+                : {}),
+        };
+        const validatedArtifact = openUiArtifactSchema.parse(artifact);
+        await this.store.put(validatedArtifact);
+        return validatedArtifact;
+    }
+}
+//# sourceMappingURL=render-service.js.map

package/dist/server/render-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-service.js","sourceRoot":"","sources":["../../src/render-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GAGxB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAOlD,SAAS,YAAY,CAAC,MAAc;IAClC,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,OAAO,mBAAmB;IAEX;IACA;IAFnB,YACmB,KAAoB,EACpB,OAA6B;QAD7B,UAAK,GAAL,KAAK,CAAe;QACpB,YAAO,GAAP,OAAO,CAAsB;IAC7C,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,QAAiB;QAC5B,MAAM,KAAK,GAAsB,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzE,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3B,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE9C,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,GAAG,KAAK,CAC9D,CAAC;QAEF,MAAM,QAAQ,GAAmB;YAC/B,IAAI,EAAE,cAAc;YACpB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,UAAU;YACV,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ,EAAE;gBACR,GAAG,KAAK,CAAC,QAAQ;gBACjB,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;aAC5C;YACD,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,SAAS;gBACvC,CAAC,CAAC;oBACE,IAAI,EAAE;wBACJ,GAAG,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,UAAU,EAAE;wBAC5E,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;wBAClC,cAAc,EAAE,mBAA4B;qBAC7C;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QAEF,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACxC,OAAO,iBAAiB,CAAC;IAC3B,CAAC;CACF"}

package/dist/server/runtime.d.ts

@@ -0,0 +1,8 @@
+import { InMemoryArtifactStore } from './artifact-store.js';
+import type { AppConfig } from './config.js';
+import { RenderOpenUiService } from './render-service.js';
+export declare function createRuntime(config: AppConfig): {
+    store: InMemoryArtifactStore;
+    renderService: RenderOpenUiService;
+};
+//# sourceMappingURL=runtime.d.ts.map

package/dist/server/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS;;;EAQ9C"}

package/dist/server/runtime.js

@@ -0,0 +1,11 @@
+import { InMemoryArtifactStore } from './artifact-store.js';
+import { RenderOpenUiService } from './render-service.js';
+export function createRuntime(config) {
+    const store = new InMemoryArtifactStore();
+    const renderService = new RenderOpenUiService(store, {
+        baseUrl: config.baseUrl,
+        artifactTtlSeconds: config.artifactTtlSeconds,
+    });
+    return { store, renderService };
+}
+//# sourceMappingURL=runtime.js.map

package/dist/server/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,UAAU,aAAa,CAAC,MAAiB;IAC7C,MAAM,KAAK,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAC1C,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC,KAAK,EAAE;QACnD,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;KAC9C,CAAC,CAAC;IAEH,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;AAClC,CAAC"}

package/dist/server/stdio.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+//# sourceMappingURL=stdio.d.ts.map

package/dist/server/stdio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../../src/stdio.ts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC"}

package/dist/server/stdio.js

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { loadConfig } from './config.js';
+import { createOpenUiMcpServer } from './mcp-server.js';
+import { createRuntime } from './runtime.js';
+const config = loadConfig();
+const { renderService } = createRuntime(config);
+const server = createOpenUiMcpServer(renderService);
+const transport = new StdioServerTransport();
+await server.connect(transport);
+process.on('SIGINT', () => {
+    void server.close().finally(() => process.exit(0));
+});
+//# sourceMappingURL=stdio.js.map

package/dist/server/stdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../src/stdio.ts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AAEvB,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;AAC5B,MAAM,EAAE,aAAa,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;AAChD,MAAM,MAAM,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;AACpD,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAE7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAEhC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;IACxB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC"}

package/dist/web/sidecar.css

@@ -0,0 +1 @@
+:root{color:#172033;background:#f6f8fb;font-family:Inter,ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif;font-synthesis:none;text-rendering:optimizeLegibility}*{box-sizing:border-box}html,body,#root{min-height:100%;margin:0}body{min-width:320px}.openui-sidecar{width:min(1440px,100%);min-height:100vh;margin:0 auto;padding:24px}.openui-state{display:grid;min-height:100vh;place-items:center;color:#647089}.openui-error{color:#b42318}