@onereach/idw-apps 0.1.2-beta.6.0

package/dist/hostStateChannel.js

@@ -0,0 +1,104 @@
+import { IdwAppMessageType, envelope, isIdwAppToHostMessage, } from './protocol';
+import { cloneJsonSerializableState } from './stateStore';
+/**
+ * Host half of the IDW state channel.
+ *
+ * IDW extension (not part of the standard MCP Apps bridge): listens for
+ * `idw:app:*` messages coming from the target iframe and answers get/set-state
+ * requests. Every inbound message is validated against `iframe.contentWindow`
+ * so a sibling frame cannot spoof state traffic.
+ */
+export function createHostStateChannel(options) {
+    const { hostWindow, iframe, getState, applyAppState, handleAction, expectedOrigin, resolveTargetOrigin, } = options;
+    // Standard external MCP Apps do not install this channel. Do not send
+    // unsolicited IDW frames to them; an inbound IDW message is the app's opt-in.
+    let appHasUsedIdwChannel = false;
+    function postToApp(message) {
+        const target = iframe.contentWindow;
+        if (!target) {
+            return;
+        }
+        target.postMessage(envelope(message), resolveTargetOrigin(iframe));
+    }
+    function errorResult(message) {
+        return {
+            content: [{
+                    type: 'text',
+                    text: message,
+                }],
+            isError: true,
+        };
+    }
+    async function handleMessage(event) {
+        // Security: only trust messages coming from *this* app iframe.
+        if (event.source !== iframe.contentWindow) {
+            return;
+        }
+        if (expectedOrigin
+            && expectedOrigin !== '*'
+            && event.origin !== undefined
+            && event.origin !== expectedOrigin) {
+            return;
+        }
+        const message = event.data;
+        if (!isIdwAppToHostMessage(message)) {
+            return;
+        }
+        appHasUsedIdwChannel = true;
+        event.stopImmediatePropagation?.();
+        if (message.type === IdwAppMessageType.GetState) {
+            postToApp({
+                type: IdwAppMessageType.StateResult,
+                requestId: message.requestId,
+                state: cloneJsonSerializableState(getState()),
+            });
+            return;
+        }
+        if (message.type === IdwAppMessageType.CallAction) {
+            let result;
+            try {
+                result = handleAction
+                    ? await handleAction(message.action)
+                    : errorResult('No IDW action handler is configured for this app');
+            }
+            catch (error) {
+                result = errorResult(error instanceof Error ? error.message : String(error));
+            }
+            postToApp({
+                type: IdwAppMessageType.ActionResult,
+                requestId: message.requestId,
+                result,
+            });
+            return;
+        }
+        // SetState: update local state first (never block the iframe on persistence),
+        // then acknowledge with the stored value.
+        applyAppState(cloneJsonSerializableState(message.state));
+        postToApp({
+            type: IdwAppMessageType.StateResult,
+            requestId: message.requestId ?? '',
+            state: cloneJsonSerializableState(getState()),
+        });
+    }
+    return {
+        start() {
+            appHasUsedIdwChannel = false;
+            hostWindow.addEventListener('message', handleMessage, true);
+        },
+        stop() {
+            hostWindow.removeEventListener('message', handleMessage, true);
+            appHasUsedIdwChannel = false;
+        },
+        /** Push a host-initiated state update after the app has opted into the IDW channel. */
+        pushState(state) {
+            if (!appHasUsedIdwChannel) {
+                return;
+            }
+            postToApp({
+                type: IdwAppMessageType.StateChanged,
+                state: cloneJsonSerializableState(state),
+            });
+        },
+    };
+}
+//# sourceMappingURL=hostStateChannel.js.map

package/dist/hostStateChannel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hostStateChannel.js","sourceRoot":"","sources":["../src/hostStateChannel.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,QAAQ,EACR,qBAAqB,GACtB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AA2C1D;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACrE,MAAM,EACJ,UAAU,EACV,MAAM,EACN,QAAQ,EACR,aAAa,EACb,YAAY,EACZ,cAAc,EACd,mBAAmB,GACpB,GAAG,OAAO,CAAC;IACZ,sEAAsE;IACtE,8EAA8E;IAC9E,IAAI,oBAAoB,GAAG,KAAK,CAAC;IAEjC,SAAS,SAAS,CAAC,OAAuC;QACxD,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QACD,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,SAAS,WAAW,CAAC,OAAe;QAClC,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,OAAO;iBACd,CAAC;YACF,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,aAAa,CAAC,KAAuB;QAClD,+DAA+D;QAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,IACE,cAAc;eACX,cAAc,KAAK,GAAG;eACtB,KAAK,CAAC,MAAM,KAAK,SAAS;eAC1B,KAAK,CAAC,MAAM,KAAK,cAAc,EAClC,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC;QAC3B,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QACD,oBAAoB,GAAG,IAAI,CAAC;QAC5B,KAAK,CAAC,wBAAwB,EAAE,EAAE,CAAC;QAEnC,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,CAAC,QAAQ,EAAE,CAAC;YAChD,SAAS,CAAC;gBACR,IAAI,EAAE,iBAAiB,CAAC,WAAW;gBACnC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,KAAK,EAAE,0BAA0B,CAAC,QAAQ,EAAE,CAAC;aAC9C,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,CAAC,UAAU,EAAE,CAAC;YAClD,IAAI,MAAuB,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,GAAG,YAAY;oBACnB,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC;oBACpC,CAAC,CAAC,WAAW,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,WAAW,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/E,CAAC;YACD,SAAS,CAAC;gBACR,IAAI,EAAE,iBAAiB,CAAC,YAAY;gBACpC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM;aACP,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,8EAA8E;QAC9E,0CAA0C;QAC1C,aAAa,CAAC,0BAA0B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,SAAS,CAAC;YACR,IAAI,EAAE,iBAAiB,CAAC,WAAW;YACnC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE;YAClC,KAAK,EAAE,0BAA0B,CAAC,QAAQ,EAAE,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,KAAK;YACH,oBAAoB,GAAG,KAAK,CAAC;YAC7B,UAAU,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI;YACF,UAAU,CAAC,mBAAmB,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;YAC/D,oBAAoB,GAAG,KAAK,CAAC;QAC/B,CAAC;QACD,uFAAuF;QACvF,SAAS,CAAC,KAAc;YACtB,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC1B,OAAO;YACT,CAAC;YACD,SAAS,CAAC;gBACR,IAAI,EAAE,iBAAiB,CAAC,YAAY;gBACpC,KAAK,EAAE,0BAA0B,CAAC,KAAK,CAAC;aACzC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export { DEFAULT_IDW_AUTH_TOKEN_ACTION, createIdwAppBridge, } from './createIdwAppBridge';
+export { AppBridge as McpAppBridge, PostMessageTransport as McpAppBridgePostMessageTransport, } from '@modelcontextprotocol/ext-apps/app-bridge';
+export { createHostStateChannel } from './hostStateChannel';
+export type { HostStateChannelOptions, HostWindowLike, IframeLike, MessageEventLike, WindowPostLike, } from './hostStateChannel';
+export { StateStore, cloneJsonSerializableState } from './stateStore';
+export { IDW_APP_PROTOCOL_VERSION, IdwAppMessageType, isIdwAppMessage, isIdwAppToHostMessage, isIdwHostToAppMessage, } from './protocol';
+export type { IdwActionResultMessage, IdwAppMessage, IdwAppToHostMessage, IdwCallActionMessage, IdwHostToAppMessage, IdwGetStateMessage, IdwSetStateMessage, IdwStateChangedMessage, IdwStateResultMessage, } from './protocol';
+export type { AppCapabilities, CallToolParams, CallToolResult, AppToolCallOptions, AppToolCallParams, AppToolCallResult, AppToolListOptions, AppToolListParams, AppToolListResult, CreateIdwAppBridgeOptions, DownloadFileParams, DownloadFileResult, HostCapabilities, HostContext, IdwActionParams, IdwActionResult, IdwAppAuthContext, IdwAppAuthOptions, IdwAppBridge, IdwAppSurface, IdwHostContextBlock, IdwHostInfo, IdwOrTokenProvider, IdwRuntimeContext, IdwRuntimeUpdate, ListPromptsParams, ListPromptsResult, ListResourceTemplatesParams, ListResourceTemplatesResult, ListResourcesParams, ListResourcesResult, MessageParams, MessageResult, OpenLinkParams, PromptListChangedParams, ReadResourceParams, ReadResourceResult, RequestDisplayModeParams, RequestDisplayModeResult, RequestTeardownParams, ResourceListChangedParams, SizeChangeParams, SupportedContentBlockModalities, ToolInputParams, ToolListChangedParams, ToolResultParams, UpdateModelContextParams, } from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,SAAS,IAAI,YAAY,EACzB,oBAAoB,IAAI,gCAAgC,GACzD,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,YAAY,EACV,uBAAuB,EACvB,cAAc,EACd,UAAU,EACV,gBAAgB,EAChB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,EACL,wBAAwB,EACxB,iBAAiB,EACjB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,sBAAsB,EACtB,aAAa,EACb,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,eAAe,EACf,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,2BAA2B,EAC3B,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,cAAc,EACd,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,EACrB,yBAAyB,EACzB,gBAAgB,EAChB,+BAA+B,EAC/B,eAAe,EACf,qBAAqB,EACrB,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,SAAS,CAAC"}

package/dist/index.js

@@ -0,0 +1,6 @@
+export { DEFAULT_IDW_AUTH_TOKEN_ACTION, createIdwAppBridge, } from './createIdwAppBridge';
+export { AppBridge as McpAppBridge, PostMessageTransport as McpAppBridgePostMessageTransport, } from '@modelcontextprotocol/ext-apps/app-bridge';
+export { createHostStateChannel } from './hostStateChannel';
+export { StateStore, cloneJsonSerializableState } from './stateStore';
+export { IDW_APP_PROTOCOL_VERSION, IdwAppMessageType, isIdwAppMessage, isIdwAppToHostMessage, isIdwHostToAppMessage, } from './protocol';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,SAAS,IAAI,YAAY,EACzB,oBAAoB,IAAI,gCAAgC,GACzD,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAQ5D,OAAO,EAAE,UAAU,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,EACL,wBAAwB,EACxB,iBAAiB,EACjB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,YAAY,CAAC"}

package/dist/protocol.d.ts

@@ -0,0 +1,81 @@
+/**
+ * IDW app <-> host message protocol.
+ *
+ * This is an IDW-specific extension that runs *alongside* the standard MCP Apps
+ * bridge (`@modelcontextprotocol/ext-apps`). MCP traffic keeps flowing over the
+ * bridge's own `PostMessageTransport`; this channel carries the lightweight
+ * IDW/OpenAI widget-state API and IDW host actions (`window.idw.app` / `window.openai`).
+ *
+ * Messages are namespaced so they are distinguishable from MCP JSON-RPC frames.
+ * Both sides validate `event.source`/target window before trusting a message and
+ * consume recognized IDW messages before the MCP postMessage transport parses them.
+ */
+export declare const IDW_APP_PROTOCOL_VERSION = 1;
+export declare const IdwAppMessageType: {
+    /** App -> Host: request the current state snapshot. */
+    readonly GetState: "idw:app:get-state";
+    /** App -> Host: replace the whole state object. */
+    readonly SetState: "idw:app:set-state";
+    /** App -> Host: request an IDW host/platform action. */
+    readonly CallAction: "idw:app:call-action";
+    /** Host -> App: response to {@link IdwAppMessageType.GetState}/{@link IdwAppMessageType.SetState}. */
+    readonly StateResult: "idw:app:state-result";
+    /** Host -> App: host-initiated state update (e.g. initial state or external change). */
+    readonly StateChanged: "idw:app:state-changed";
+    /** Host -> App: response to {@link IdwAppMessageType.CallAction}. */
+    readonly ActionResult: "idw:app:action-result";
+};
+export type IdwAppMessageType = (typeof IdwAppMessageType)[keyof typeof IdwAppMessageType];
+interface IdwAppMessageBase {
+    channel: 'idw:app';
+    version: number;
+}
+export interface IdwGetStateMessage extends IdwAppMessageBase {
+    type: typeof IdwAppMessageType.GetState;
+    requestId: string;
+}
+export interface IdwSetStateMessage extends IdwAppMessageBase {
+    type: typeof IdwAppMessageType.SetState;
+    requestId?: string;
+    state: unknown;
+}
+export interface IdwCallActionMessage extends IdwAppMessageBase {
+    type: typeof IdwAppMessageType.CallAction;
+    requestId: string;
+    action: {
+        name: string;
+        arguments?: Record<string, unknown>;
+    };
+}
+export interface IdwStateResultMessage extends IdwAppMessageBase {
+    type: typeof IdwAppMessageType.StateResult;
+    requestId: string;
+    state: unknown;
+}
+export interface IdwStateChangedMessage extends IdwAppMessageBase {
+    type: typeof IdwAppMessageType.StateChanged;
+    state: unknown;
+}
+export interface IdwActionResultMessage extends IdwAppMessageBase {
+    type: typeof IdwAppMessageType.ActionResult;
+    requestId: string;
+    result: unknown;
+}
+export type IdwAppToHostMessage = IdwGetStateMessage | IdwSetStateMessage | IdwCallActionMessage;
+export type IdwHostToAppMessage = IdwStateResultMessage | IdwStateChangedMessage | IdwActionResultMessage;
+export type IdwAppMessage = IdwAppToHostMessage | IdwHostToAppMessage;
+/** Type guard: is this an IDW app-channel message (any direction)? */
+export declare function isIdwAppMessage(value: unknown): value is IdwAppMessage;
+/** Type guard: message sent by the app to the host. */
+export declare function isIdwAppToHostMessage(value: unknown): value is IdwAppToHostMessage;
+/** Type guard: message sent by the host to the app. */
+export declare function isIdwHostToAppMessage(value: unknown): value is IdwHostToAppMessage;
+type DistributiveOmit<T, K extends keyof never> = T extends unknown ? Omit<T, K> : never;
+/** An outgoing message without the shared channel/version envelope fields. */
+export type IdwAppMessageBody = DistributiveOmit<IdwAppMessage, keyof IdwAppMessageBase>;
+/** Attach the shared channel/version envelope to an outgoing message. */
+export declare function envelope(message: IdwAppMessageBody): IdwAppMessage;
+/** Generate a process-unique request id for correlating get-state responses. */
+export declare function nextRequestId(): string;
+export {};
+//# sourceMappingURL=protocol.d.ts.map

package/dist/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C,eAAO,MAAM,iBAAiB;IAC5B,uDAAuD;;IAEvD,mDAAmD;;IAEnD,wDAAwD;;IAExD,sGAAsG;;IAEtG,wFAAwF;;IAExF,qEAAqE;;CAE7D,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAC3B,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAE7D,UAAU,iBAAiB;IACzB,OAAO,EAAE,SAAS,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAmB,SAAQ,iBAAiB;IAC3D,IAAI,EAAE,OAAO,iBAAiB,CAAC,QAAQ,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAmB,SAAQ,iBAAiB;IAC3D,IAAI,EAAE,OAAO,iBAAiB,CAAC,QAAQ,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,IAAI,EAAE,OAAO,iBAAiB,CAAC,UAAU,CAAC;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACrC,CAAC;CACH;AAED,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC9D,IAAI,EAAE,OAAO,iBAAiB,CAAC,WAAW,CAAC;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,sBAAuB,SAAQ,iBAAiB;IAC/D,IAAI,EAAE,OAAO,iBAAiB,CAAC,YAAY,CAAC;IAC5C,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,sBAAuB,SAAQ,iBAAiB;IAC/D,IAAI,EAAE,OAAO,iBAAiB,CAAC,YAAY,CAAC;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,mBAAmB,GAAG,kBAAkB,GAAG,kBAAkB,GAAG,oBAAoB,CAAC;AACjG,MAAM,MAAM,mBAAmB,GAAG,qBAAqB,GAAG,sBAAsB,GAAG,sBAAsB,CAAC;AAC1G,MAAM,MAAM,aAAa,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;AAQtE,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAKtE;AAED,uDAAuD;AACvD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAOlF;AAED,uDAAuD;AACvD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAOlF;AAED,KAAK,gBAAgB,CAAC,CAAC,EAAE,CAAC,SAAS,MAAM,KAAK,IAAI,CAAC,SAAS,OAAO,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;AAEzF,8EAA8E;AAC9E,MAAM,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,aAAa,EAAE,MAAM,iBAAiB,CAAC,CAAC;AAEzF,yEAAyE;AACzE,wBAAgB,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,aAAa,CAMlE;AAID,gFAAgF;AAChF,wBAAgB,aAAa,IAAI,MAAM,CAGtC"}

package/dist/protocol.js

@@ -0,0 +1,67 @@
+/**
+ * IDW app <-> host message protocol.
+ *
+ * This is an IDW-specific extension that runs *alongside* the standard MCP Apps
+ * bridge (`@modelcontextprotocol/ext-apps`). MCP traffic keeps flowing over the
+ * bridge's own `PostMessageTransport`; this channel carries the lightweight
+ * IDW/OpenAI widget-state API and IDW host actions (`window.idw.app` / `window.openai`).
+ *
+ * Messages are namespaced so they are distinguishable from MCP JSON-RPC frames.
+ * Both sides validate `event.source`/target window before trusting a message and
+ * consume recognized IDW messages before the MCP postMessage transport parses them.
+ */
+export const IDW_APP_PROTOCOL_VERSION = 1;
+export const IdwAppMessageType = {
+    /** App -> Host: request the current state snapshot. */
+    GetState: 'idw:app:get-state',
+    /** App -> Host: replace the whole state object. */
+    SetState: 'idw:app:set-state',
+    /** App -> Host: request an IDW host/platform action. */
+    CallAction: 'idw:app:call-action',
+    /** Host -> App: response to {@link IdwAppMessageType.GetState}/{@link IdwAppMessageType.SetState}. */
+    StateResult: 'idw:app:state-result',
+    /** Host -> App: host-initiated state update (e.g. initial state or external change). */
+    StateChanged: 'idw:app:state-changed',
+    /** Host -> App: response to {@link IdwAppMessageType.CallAction}. */
+    ActionResult: 'idw:app:action-result',
+};
+const CHANNEL = 'idw:app';
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+/** Type guard: is this an IDW app-channel message (any direction)? */
+export function isIdwAppMessage(value) {
+    return isRecord(value)
+        && value.channel === CHANNEL
+        && value.version === IDW_APP_PROTOCOL_VERSION
+        && typeof value.type === 'string';
+}
+/** Type guard: message sent by the app to the host. */
+export function isIdwAppToHostMessage(value) {
+    return isIdwAppMessage(value)
+        && (value.type === IdwAppMessageType.GetState
+            || value.type === IdwAppMessageType.SetState
+            || value.type === IdwAppMessageType.CallAction);
+}
+/** Type guard: message sent by the host to the app. */
+export function isIdwHostToAppMessage(value) {
+    return isIdwAppMessage(value)
+        && (value.type === IdwAppMessageType.StateResult
+            || value.type === IdwAppMessageType.StateChanged
+            || value.type === IdwAppMessageType.ActionResult);
+}
+/** Attach the shared channel/version envelope to an outgoing message. */
+export function envelope(message) {
+    return {
+        channel: CHANNEL,
+        version: IDW_APP_PROTOCOL_VERSION,
+        ...message,
+    };
+}
+let requestCounter = 0;
+/** Generate a process-unique request id for correlating get-state responses. */
+export function nextRequestId() {
+    requestCounter += 1;
+    return `idw-app-${Date.now().toString(36)}-${requestCounter.toString(36)}`;
+}
+//# sourceMappingURL=protocol.js.map

package/dist/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,uDAAuD;IACvD,QAAQ,EAAE,mBAAmB;IAC7B,mDAAmD;IACnD,QAAQ,EAAE,mBAAmB;IAC7B,wDAAwD;IACxD,UAAU,EAAE,qBAAqB;IACjC,sGAAsG;IACtG,WAAW,EAAE,sBAAsB;IACnC,wFAAwF;IACxF,YAAY,EAAE,uBAAuB;IACrC,qEAAqE;IACrE,YAAY,EAAE,uBAAuB;CAC7B,CAAC;AAmDX,MAAM,OAAO,GAAG,SAAS,CAAC;AAE1B,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,QAAQ,CAAC,KAAK,CAAC;WACjB,KAAK,CAAC,OAAO,KAAK,OAAO;WACzB,KAAK,CAAC,OAAO,KAAK,wBAAwB;WAC1C,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AACtC,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,OAAO,eAAe,CAAC,KAAK,CAAC;WACxB,CACD,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC,QAAQ;eACtC,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC,QAAQ;eACzC,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC,UAAU,CAC/C,CAAC;AACN,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,OAAO,eAAe,CAAC,KAAK,CAAC;WACxB,CACD,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC,WAAW;eACzC,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC,YAAY;eAC7C,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC,YAAY,CACjD,CAAC;AACN,CAAC;AAOD,yEAAyE;AACzE,MAAM,UAAU,QAAQ,CAAC,OAA0B;IACjD,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,wBAAwB;QACjC,GAAG,OAAO;KACM,CAAC;AACrB,CAAC;AAED,IAAI,cAAc,GAAG,CAAC,CAAC;AAEvB,gFAAgF;AAChF,MAAM,UAAU,aAAa;IAC3B,cAAc,IAAI,CAAC,CAAC;IACpB,OAAO,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7E,CAAC"}

package/dist/stateStore.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Validate and clone widget state through JSON semantics before it crosses a
+ * postMessage / persistence boundary. `undefined` is allowed as the package's
+ * internal "no state yet" sentinel.
+ */
+export declare function cloneJsonSerializableState<T = unknown>(state: T): T;
+/**
+ * Minimal in-memory holder for the durable widget/view state of a single app
+ * instance.
+ *
+ * State semantics (see README):
+ * - lightweight, JSON-serializable widget/view state only — never tool results;
+ * - `set` replaces the whole state object;
+ * - persistence is the caller's responsibility (via `onStateChange`), not this
+ *   store's — it only tracks the latest value known to the wrapper.
+ */
+export declare class StateStore {
+    private state;
+    constructor(initialState?: unknown);
+    get(): unknown;
+    set(next: unknown): void;
+}
+//# sourceMappingURL=stateStore.d.ts.map

package/dist/stateStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stateStore.d.ts","sourceRoot":"","sources":["../src/stateStore.ts"],"names":[],"mappings":"AA8CA;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAMnE;AAED;;;;;;;;;GASG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,KAAK,CAAU;gBAEX,YAAY,CAAC,EAAE,OAAO;IAIlC,GAAG,IAAI,OAAO;IAId,GAAG,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI;CAGzB"}

package/dist/stateStore.js

@@ -0,0 +1,70 @@
+function assertJsonSerializable(value, path = '$', seen = new WeakSet()) {
+    if (value === undefined) {
+        return;
+    }
+    const valueType = typeof value;
+    if (valueType === 'string'
+        || valueType === 'boolean'
+        || value === null) {
+        return;
+    }
+    if (valueType === 'number') {
+        if (!Number.isFinite(value)) {
+            throw new TypeError(`IDW app state must be JSON-serializable; ${path} is not a finite number`);
+        }
+        return;
+    }
+    if (valueType === 'bigint' || valueType === 'function' || valueType === 'symbol') {
+        throw new TypeError(`IDW app state must be JSON-serializable; ${path} is ${valueType}`);
+    }
+    if (!value || valueType !== 'object') {
+        return;
+    }
+    if (seen.has(value)) {
+        throw new TypeError(`IDW app state must be JSON-serializable; ${path} contains a circular reference`);
+    }
+    seen.add(value);
+    if (Array.isArray(value)) {
+        value.forEach((item, index) => assertJsonSerializable(item, `${path}[${index}]`, seen));
+        seen.delete(value);
+        return;
+    }
+    for (const [key, item] of Object.entries(value)) {
+        assertJsonSerializable(item, `${path}.${key}`, seen);
+    }
+    seen.delete(value);
+}
+/**
+ * Validate and clone widget state through JSON semantics before it crosses a
+ * postMessage / persistence boundary. `undefined` is allowed as the package's
+ * internal "no state yet" sentinel.
+ */
+export function cloneJsonSerializableState(state) {
+    assertJsonSerializable(state);
+    if (state === undefined) {
+        return state;
+    }
+    return JSON.parse(JSON.stringify(state));
+}
+/**
+ * Minimal in-memory holder for the durable widget/view state of a single app
+ * instance.
+ *
+ * State semantics (see README):
+ * - lightweight, JSON-serializable widget/view state only — never tool results;
+ * - `set` replaces the whole state object;
+ * - persistence is the caller's responsibility (via `onStateChange`), not this
+ *   store's — it only tracks the latest value known to the wrapper.
+ */
+export class StateStore {
+    constructor(initialState) {
+        this.state = cloneJsonSerializableState(initialState);
+    }
+    get() {
+        return this.state;
+    }
+    set(next) {
+        this.state = cloneJsonSerializableState(next);
+    }
+}
+//# sourceMappingURL=stateStore.js.map

package/dist/stateStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stateStore.js","sourceRoot":"","sources":["../src/stateStore.ts"],"names":[],"mappings":"AAAA,SAAS,sBAAsB,CAAC,KAAc,EAAE,IAAI,GAAG,GAAG,EAAE,OAAO,IAAI,OAAO,EAAU;IACtF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;IAC/B,IACE,SAAS,KAAK,QAAQ;WACnB,SAAS,KAAK,SAAS;WACvB,KAAK,KAAK,IAAI,EACjB,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC,4CAA4C,IAAI,yBAAyB,CAAC,CAAC;QACjG,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,UAAU,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QACjF,MAAM,IAAI,SAAS,CAAC,4CAA4C,IAAI,OAAO,SAAS,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,CAAC,KAAK,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,SAAS,CAAC,4CAA4C,IAAI,gCAAgC,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEhB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO;IACT,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,sBAAsB,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAc,KAAQ;IAC9D,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAM,CAAC;AAChD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,UAAU;IAGrB,YAAY,YAAsB;QAChC,IAAI,CAAC,KAAK,GAAG,0BAA0B,CAAC,YAAY,CAAC,CAAC;IACxD,CAAC;IAED,GAAG;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,GAAG,CAAC,IAAa;QACf,IAAI,CAAC,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;CACF"}