@nuwax-ai/openui-mcp 0.1.8 → 0.1.10

package/CHANGELOG.md

@@ -0,0 +1,24 @@
+# Changelog
+
+## 0.1.10
+
+- Serve the optional shared OpenUI Runtime page for both inline and sidecar
+  Artifacts; PC Web inline remains direct-Renderer-first.
+- Add the `desktop-query` page transport used by the conversation-scoped Nuwax
+  PC proxy.
+- Use relative Runtime asset and Artifact URLs so non-root proxy prefixes work.
+- Send `OPENUI_READY` and `OPENUI_RESIZE` messages for iframe integration and
+  automatic height updates.
+- Import the official OpenUI UI stylesheet inside the Runtime page to isolate it
+  from host reset styles.
+- Correct required validation for dates, date ranges, wrapped values, and option
+  groups.
+- Localize required validation messages for English, Simplified Chinese,
+  Traditional Chinese, and Japanese.
+- Add cache-versioned Runtime assets and synchronize the npm package, MCP server,
+  and page asset versions.
+
+## 0.1.9 and earlier
+
+- Initial `nuwax_render_openui` tool, Artifact contract, authoring prompt, DSL
+  schema resources, stdio/Streamable HTTP transports, and sidecar Runtime.

package/README.md

@@ -1,10 +1,11 @@
 # Nuwax OpenUI MCP
 
 OpenUI over MCP for Nuwax Agent sessions. One MCP tool publishes a validated,
-versioned OpenUI artifact that a host can render in either of two places:
+versioned OpenUI artifact that a host can present in either of two places:
 
-- **inline** — native OpenUI React UI directly under the existing tool bar;
-- **sidecar** — a trusted page URL opened in the existing preview iframe.
+- **inline** — rendered directly by the host Renderer by default, with an
+  optional OpenUI Runtime iframe mode;
+- **sidecar** — the same Runtime page opened in the preview area or a full page.
 
 The project intentionally does not replace the host's chat transport, session
 model, permission system, or tool status UI.
@@ -16,8 +17,12 @@ This repository contains the first executable foundation:
 - `nuwax_render_openui` MCP tool;
 - `nuwax.openui/v1` input and structured-result contract;
 - stdio and Streamable HTTP transports;
-- inline artifacts and sidecar page artifacts;
-- an OpenUI React sidecar renderer;
+- direct Renderer and page Runtime options for inline artifacts;
+- one OpenUI React page Runtime shared by iframe-inline and sidecar artifacts;
+- relative-path and desktop-query transports for proxied Runtime pages;
+- `OPENUI_READY` / `OPENUI_RESIZE` page messages for iframe auto-sizing;
+- localized required validation, including date and date-range values;
+- isolated Runtime styles, independent from the Nuwax host reset stylesheet;
 - source policy, artifact TTL, Host validation, CSP, and tests.
 
 The default artifact store is in-memory. Production deployments should provide
@@ -29,10 +34,21 @@ a durable, tenant-aware `ArtifactStore` and authentication at the edge.
 Agent
   └─ MCP call: nuwax_render_openui
        └─ validate + persist artifact
-            ├─ inline   → structuredContent → host OpenUI Renderer
-            └─ sidecar  → signed/trusted page URL → preview iframe
+            ├─ structuredContent → host discovers the artifact
+            ├─ inline → host Renderer (default)
+            └─ shared Runtime page
+                 ├─ inline iframe (optional)
+                 └─ sidecar preview / full page
 ```
 
+`presentation.mode` controls where the host presents the Artifact; it does not
+force an inline rendering technology. PC hosts should default inline Artifacts
+to the direct Renderer and may explicitly select the iframe Runtime for stronger
+style isolation or cross-client page reuse. `GET /openui/pages/:id` is available
+for both inline and sidecar artifacts. For backward compatibility, only sidecar
+structured results currently contain `artifact.page.url`; an iframe-inline host
+builds its trusted page URL from its configured proxy route and `artifactId`.
+
 OpenUI runtime queries and mutations are intentionally not proxied in the first
 release. They must be added behind a host-controlled MCP proxy with tenant,
 conversation, artifact, allowlist, permission, and audit checks.
@@ -80,8 +96,8 @@ Example MCP client configuration:
 
 The stdio process starts the sidecar HTTP server by default and both transports
 share the same in-memory artifact store. Set
-`NUWAX_OPENUI_SIDECAR_SERVER_ENABLED=false` only when inline rendering is the
-sole requirement or another process owns the sidecar service.
+`NUWAX_OPENUI_SIDECAR_SERVER_ENABLED=false` only when another process owns the
+page Runtime service. Page-based inline rendering also needs this service.
 
 For NuwaClaw, configure this server as persistent so all Agent sessions share
 one process and one sidecar port:
@@ -91,7 +107,7 @@ one process and one sidecar port:
   "mcpServers": {
     "nuwax-openui": {
       "command": "npx",
-      "args": ["-y", "@nuwax-ai/openui-mcp@0.1.4"],
+      "args": ["-y", "@nuwax-ai/openui-mcp@0.1.10"],
       "env": {
         "NUWAX_OPENUI_HOST": "127.0.0.1",
         "NUWAX_OPENUI_PORT": "8787",
@@ -124,7 +140,33 @@ Endpoints:
 | `POST /mcp`                 | MCP Streamable HTTP                |
 | `GET /healthz`              | Health check                       |
 | `GET /openui/artifacts/:id` | Artifact document for the renderer |
-| `GET /openui/pages/:id`     | Sidecar page                       |
+| `GET /openui/pages/:id`     | Shared inline/sidecar Runtime page |
+| `GET /openui/assets/*`      | Runtime JavaScript and CSS         |
+
+### Proxied page transports
+
+The default page uses relative path assets and Artifact lookup:
+
+```text
+GET /openui/pages/{artifactId}
+  ├─ ../assets/sidecar.css
+  ├─ ../assets/sidecar.js
+  └─ ../artifacts/{artifactId}
+```
+
+For the Nuwax PC desktop/file proxy, request the page with
+`?transport=desktop-query`. The generated page keeps all subsequent requests on
+the same conversation-scoped URL and changes only the query:
+
+```text
+?openui=css
+?openui=js
+?openui=artifact&artifactId={artifactId}
+```
+
+The query transport is a page transport convention, not a general-purpose
+proxy. The Nuwax host must derive the conversation and target service from its
+authenticated context and must not accept an arbitrary upstream URL.
 
 ## Tool contract
 
@@ -196,21 +238,79 @@ runtime behavior.
 
 ## Host integration
 
-For inline mode, mount the OpenUI renderer inside the existing tool block:
+PC Web inline supports two rendering strategies. The direct Renderer is the
+default because it has no local Runtime/network dependency and integrates with
+the existing conversation lifecycle:
+
+```tsx
+<Renderer
+  library={openuiLibrary}
+  response={artifact.document.source}
+  isStreaming={false}
+/>
+```
+
+The host may explicitly select iframe mode for isolation or page-runtime
+testing:
 
 ```tsx
 <ToolProcessShell header={existingToolBar}>
-  <Renderer
-    library={nuwaxOpenUiLibrary}
-    response={artifact.document.source}
-    isStreaming={status === 'receiving'}
+  <iframe
+    src={resolveTrustedOpenUiPageUrl(artifact.artifactId)}
+    sandbox="allow-scripts"
+    title={artifact.title}
   />
 </ToolProcessShell>
 ```
 
-For sidecar mode, use `artifact.page.url` only after the host validates its
-origin and artifact context. Use a dedicated restrictive iframe sandbox; do not
-reuse a broad legacy sandbox profile.
+For sidecar mode, `artifact.page.url` can be used only after the host validates
+its origin and artifact context. Use a dedicated restrictive iframe sandbox;
+do not reuse a broad legacy sandbox profile.
+
+### Page bridge and automatic height
+
+After an Artifact is loaded, the Runtime sends these messages to its parent:
+
+```ts
+type OpenUiRuntimeMessage =
+  | {
+      type: 'OPENUI_READY';
+      protocolVersion: 'nuwax.openui-page/v1';
+      artifactId: string;
+    }
+  | {
+      type: 'OPENUI_RESIZE';
+      protocolVersion: 'nuwax.openui-page/v1';
+      artifactId: string;
+      height: number;
+    };
+```
+
+The current Runtime uses `ResizeObserver` on its rendered root, so form
+validation messages, date selection, expanding content, and responsive wrapping
+can update the iframe height. The host must validate `event.source`, the trusted
+Runtime origin, `protocolVersion`, and `artifactId` before applying the height.
+It should also clamp the height and provide an expand/scroll fallback for large
+documents.
+
+The v1 bridge currently reports readiness and size only. Host context, actions,
+nonce/sequence replay protection, and native/mobile WebView bridges are planned
+extensions and must not be assumed by clients yet.
+
+### Runtime styles, validation, and locale
+
+The page Runtime imports the official `@openuidev/react-ui` stylesheet inside
+its own document. This prevents host rules such as `button { color: inherit }`
+from overriding iframe-rendered OpenUI button colors. A direct Renderer shares
+the host document and must load the official layered stylesheet plus scoped,
+unlayered compatibility overrides for host reset rules.
+
+The page Runtime replaces the built-in `required` validator to correctly accept
+`Date`, date-range objects, wrapped values, and selected checkbox maps. Required
+messages follow `navigator.language` for English, Simplified Chinese,
+Traditional Chinese, and Japanese. Unknown locales fall back to English. A host
+using the direct Renderer must install the equivalent validator integration in
+its own JavaScript context; Nuwax PC Web does this through its i18n runtime.
 
 ## Security model
 

package/dist/server/index.d.ts

@@ -1,5 +1,6 @@
 export * from './artifact-store.js';
 export * from './contracts.js';
+export * from './version.js';
 export * from './mcp-server.js';
 export * from './openui-validator.js';
 export * from './policy.js';

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC"}

package/dist/server/index.js

@@ -1,5 +1,6 @@
 export * from './artifact-store.js';
 export * from './contracts.js';
+export * from './version.js';
 export * from './mcp-server.js';
 export * from './openui-validator.js';
 export * from './policy.js';

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC"}

package/dist/server/mcp-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../../src/mcp-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAepE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,mBAAmB,GACjC,SAAS,CAsJX"}
+{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../../src/mcp-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAgBpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,mBAAmB,GACjC,SAAS,CAsJX"}

package/dist/server/mcp-server.js

@@ -1,12 +1,13 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { z } from 'zod';
 import { OPENUI_AUTHORING_PROMPT_NAME, OPENUI_GUIDE_RESOURCE_URI, OPENUI_REFERENCE_TOOL_NAME, OPENUI_SCHEMA_RESOURCE_URI, OPENUI_TOOL_NAME, openUiReferenceInputSchema, openUiArtifactSchema, renderOpenUiInputSchema, } from './contracts.js';
+import { OPENUI_MCP_VERSION } from './version.js';
 import { getOpenUiDslSchema, getOpenUiReference } from './openui-reference.js';
 import { OpenUiPolicyError } from './policy.js';
 export function createOpenUiMcpServer(renderService) {
     const server = new McpServer({
         name: 'nuwax-openui-mcp',
-        version: '0.1.4',
+        version: OPENUI_MCP_VERSION,
     });
     server.registerResource('nuwax-openui-dsl-schema', OPENUI_SCHEMA_RESOURCE_URI, {
         title: 'Nuwax OpenUI Lang v0.5 JSON Schema',

package/dist/server/mcp-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-server.js","sourceRoot":"","sources":["../../src/mcp-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,EAC1B,gBAAgB,EAChB,0BAA0B,EAC1B,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGhD,MAAM,UAAU,qBAAqB,CACnC,aAAkC;IAElC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,MAAM,CAAC,gBAAgB,CACrB,yBAAyB,EACzB,0BAA0B,EAC1B;QACE,KAAK,EAAE,oCAAoC;QAC3C,WAAW,EACT,6GAA6G;QAC/G,QAAQ,EAAE,yBAAyB;KACpC,EACD,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACR,QAAQ,EAAE;YACR;gBACE,GAAG,EAAE,GAAG,CAAC,IAAI;gBACb,QAAQ,EAAE,yBAAyB;gBACnC,IAAI,EAAE,kBAAkB,EAAE;aAC3B;SACF;KACF,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,gBAAgB,CACrB,8BAA8B,EAC9B,yBAAyB,EACzB;QACE,KAAK,EAAE,wCAAwC;QAC/C,WAAW,EACT,kHAAkH;QACpH,QAAQ,EAAE,YAAY;KACvB,EACD,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACR,QAAQ,EAAE;YACR;gBACE,GAAG,EAAE,GAAG,CAAC,IAAI;gBACb,QAAQ,EAAE,YAAY;gBACtB,IAAI,EAAE,kBAAkB,CAAC,KAAK,CAAC;aAChC;SACF;KACF,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,cAAc,CACnB,4BAA4B,EAC5B;QACE,KAAK,EAAE,iCAAiC;QACxC,WAAW,EACT,6GAA6G;QAC/G,UAAU,EAAE,EAAE,OAAO,EAAE,0BAA0B,CAAC,KAAK,CAAC,OAAO,EAAE;KAClE,EACD,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAChB,WAAW,EAAE,UAAU,OAAO,yBAAyB;QACvD,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAe;gBACrB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,0CAA0C,gBAAgB,8BAA8B;iBAC7H;aACF;SACF;KACF,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,0BAA0B,EAC1B;QACE,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EACT,oYAAoY;QACtY,WAAW,EAAE,0BAA0B;QACvC,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9B,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EACF,MAAM,KAAK,QAAQ;oBACjB,CAAC,CAAC,kBAAkB,EAAE;oBACtB,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC;aAClC;SACF;KACF,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EACT,4wBAA4wB;QAC9wB,WAAW,EAAE,uBAAuB;QACpC,YAAY,EAAE,oBAAoB;QAClC,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EAAE,KAAK,EAAE,EAAE;QACd,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnD,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EACF,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,QAAQ;4BACrC,CAAC,CAAC,iCAAiC,QAAQ,CAAC,UAAU,EAAE;4BACxD,CAAC,CAAC,kCAAkC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE;qBAC7D;iBACF;gBACD,iBAAiB,EAAE,QAAQ;aAC5B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GACX,KAAK,YAAY,CAAC,CAAC,QAAQ;gBACzB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC;gBACxB,CAAC,CAAC,KAAK,YAAY,KAAK;oBACtB,CAAC,CAAC,KAAK,CAAC,OAAO;oBACf,CAAC,CAAC,kCAAkC,CAAC;YAC3C,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,GAAG,OAAO,2CAA2C,0BAA0B,8FAA8F;qBACpL;iBACF;gBACD,KAAK,EACH,KAAK,YAAY,iBAAiB;oBAChC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;oBACtB,CAAC,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE;aAC1C,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"mcp-server.js","sourceRoot":"","sources":["../../src/mcp-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,EAC1B,gBAAgB,EAChB,0BAA0B,EAC1B,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGhD,MAAM,UAAU,qBAAqB,CACnC,aAAkC;IAElC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,kBAAkB;KAC5B,CAAC,CAAC;IAEH,MAAM,CAAC,gBAAgB,CACrB,yBAAyB,EACzB,0BAA0B,EAC1B;QACE,KAAK,EAAE,oCAAoC;QAC3C,WAAW,EACT,6GAA6G;QAC/G,QAAQ,EAAE,yBAAyB;KACpC,EACD,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACR,QAAQ,EAAE;YACR;gBACE,GAAG,EAAE,GAAG,CAAC,IAAI;gBACb,QAAQ,EAAE,yBAAyB;gBACnC,IAAI,EAAE,kBAAkB,EAAE;aAC3B;SACF;KACF,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,gBAAgB,CACrB,8BAA8B,EAC9B,yBAAyB,EACzB;QACE,KAAK,EAAE,wCAAwC;QAC/C,WAAW,EACT,kHAAkH;QACpH,QAAQ,EAAE,YAAY;KACvB,EACD,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACR,QAAQ,EAAE;YACR;gBACE,GAAG,EAAE,GAAG,CAAC,IAAI;gBACb,QAAQ,EAAE,YAAY;gBACtB,IAAI,EAAE,kBAAkB,CAAC,KAAK,CAAC;aAChC;SACF;KACF,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,cAAc,CACnB,4BAA4B,EAC5B;QACE,KAAK,EAAE,iCAAiC;QACxC,WAAW,EACT,6GAA6G;QAC/G,UAAU,EAAE,EAAE,OAAO,EAAE,0BAA0B,CAAC,KAAK,CAAC,OAAO,EAAE;KAClE,EACD,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAChB,WAAW,EAAE,UAAU,OAAO,yBAAyB;QACvD,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAe;gBACrB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,0CAA0C,gBAAgB,8BAA8B;iBAC7H;aACF;SACF;KACF,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,0BAA0B,EAC1B;QACE,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EACT,oYAAoY;QACtY,WAAW,EAAE,0BAA0B;QACvC,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9B,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EACF,MAAM,KAAK,QAAQ;oBACjB,CAAC,CAAC,kBAAkB,EAAE;oBACtB,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC;aAClC;SACF;KACF,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EACT,4wBAA4wB;QAC9wB,WAAW,EAAE,uBAAuB;QACpC,YAAY,EAAE,oBAAoB;QAClC,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EAAE,KAAK,EAAE,EAAE;QACd,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnD,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EACF,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,QAAQ;4BACrC,CAAC,CAAC,iCAAiC,QAAQ,CAAC,UAAU,EAAE;4BACxD,CAAC,CAAC,kCAAkC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE;qBAC7D;iBACF;gBACD,iBAAiB,EAAE,QAAQ;aAC5B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GACX,KAAK,YAAY,CAAC,CAAC,QAAQ;gBACzB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC;gBACxB,CAAC,CAAC,KAAK,YAAY,KAAK;oBACtB,CAAC,CAAC,KAAK,CAAC,OAAO;oBACf,CAAC,CAAC,kCAAkC,CAAC;YAC3C,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,GAAG,OAAO,2CAA2C,0BAA0B,8FAA8F;qBACpL;iBACF;gBACD,KAAK,EACH,KAAK,YAAY,iBAAiB;oBAChC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;oBACtB,CAAC,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE;aAC1C,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/page-template.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"page-template.d.ts","sourceRoot":"","sources":["../../src/page-template.ts"],"names":[],"mappings":"AASA,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,SAAS,GAAE,MAAM,GAAG,eAAwB,GAC3C,MAAM,CAmBR"}
+{"version":3,"file":"page-template.d.ts","sourceRoot":"","sources":["../../src/page-template.ts"],"names":[],"mappings":"AAWA,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,SAAS,GAAE,MAAM,GAAG,eAAwB,GAC3C,MAAM,CAuBR"}

package/dist/server/page-template.js

@@ -1,3 +1,4 @@
+import { OPENUI_MCP_VERSION } from './version.js';
 function escapeHtml(value) {
     return value
         .replaceAll('&', '&')
@@ -7,8 +8,12 @@ function escapeHtml(value) {
         .replaceAll("'", ''');
 }
 export function createSidecarPageHtml(artifactId, title, transport = 'path') {
-    const stylesheetUrl = transport === 'desktop-query' ? '?openui=css' : '../assets/sidecar.css';
-    const scriptUrl = transport === 'desktop-query' ? '?openui=js' : '../assets/sidecar.js';
+    const stylesheetUrl = transport === 'desktop-query'
+        ? `?openui=css&v=${OPENUI_MCP_VERSION}`
+        : `../assets/sidecar.css?v=${OPENUI_MCP_VERSION}`;
+    const scriptUrl = transport === 'desktop-query'
+        ? `?openui=js&v=${OPENUI_MCP_VERSION}`
+        : `../assets/sidecar.js?v=${OPENUI_MCP_VERSION}`;
     return `<!doctype html>
 <html lang="en">
   <head>

package/dist/server/page-template.js.map

@@ -1 +1 @@
-{"version":3,"file":"page-template.js","sourceRoot":"","sources":["../../src/page-template.ts"],"names":[],"mappings":"AAAA,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK;SACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC;SACzB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EAClB,KAAa,EACb,YAAsC,MAAM;IAE5C,MAAM,aAAa,GACjB,SAAS,KAAK,eAAe,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAC1E,MAAM,SAAS,GACb,SAAS,KAAK,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC;IACxE,OAAO;;;;;;aAMI,UAAU,CAAC,KAAK,CAAC;mCACK,aAAa;;;wCAGR,UAAU,CAAC,UAAU,CAAC;iCAC7B,SAAS;;QAElC,CAAC;AACT,CAAC"}
+{"version":3,"file":"page-template.js","sourceRoot":"","sources":["../../src/page-template.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK;SACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC;SACzB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EAClB,KAAa,EACb,YAAsC,MAAM;IAE5C,MAAM,aAAa,GACjB,SAAS,KAAK,eAAe;QAC3B,CAAC,CAAC,iBAAiB,kBAAkB,EAAE;QACvC,CAAC,CAAC,2BAA2B,kBAAkB,EAAE,CAAC;IACtD,MAAM,SAAS,GACb,SAAS,KAAK,eAAe;QAC3B,CAAC,CAAC,gBAAgB,kBAAkB,EAAE;QACtC,CAAC,CAAC,0BAA0B,kBAAkB,EAAE,CAAC;IACrD,OAAO;;;;;;aAMI,UAAU,CAAC,KAAK,CAAC;mCACK,aAAa;;;wCAGR,UAAU,CAAC,UAAU,CAAC;iCAC7B,SAAS;;QAElC,CAAC;AACT,CAAC"}

package/dist/server/version.d.ts

@@ -0,0 +1,2 @@
+export declare const OPENUI_MCP_VERSION = "0.1.10";
+//# sourceMappingURL=version.d.ts.map

package/dist/server/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,kBAAkB,WAAW,CAAC"}

package/dist/server/version.js

@@ -0,0 +1,2 @@
+export const OPENUI_MCP_VERSION = '0.1.10';
+//# sourceMappingURL=version.js.map

package/dist/server/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nuwax-ai/openui-mcp",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "OpenUI over MCP for Nuwax, with inline and sidecar rendering contracts.",
   "type": "module",
   "license": "Apache-2.0",
@@ -32,6 +32,7 @@
   "files": [
     "dist",
     "README.md",
+    "CHANGELOG.md",
     "LICENSE"
   ],
   "scripts": {