@plitzi/sdk-server 0.32.8 → 0.32.10

package/dist/src/modules/mcp/apps/example/index.d.ts

@@ -0,0 +1,8 @@
+import { McpApp } from '../../types';
+/** The reference app: the smallest definition that works, kept as the template a new app is copied from.
+ *
+ *  It is deliberately NOT in the `apps` list — nothing renders it, since no tool points at it — so it costs a
+ *  real deployment nothing while the test suite still builds it, which is what keeps it from rotting. To turn it
+ *  into a real app: add it to `apps` in ../index.ts and give a tool `ui: { resourceUri: EXAMPLE_APP_URI }`. */
+export declare const EXAMPLE_APP_URI = "ui://plitzi/example.html";
+export declare const exampleApp: McpApp;

package/dist/src/modules/mcp/apps/example/view.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/src/modules/mcp/apps/index.d.ts

@@ -0,0 +1,8 @@
+import { McpApp } from '../types';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+/** Every MCP App this server serves. A new one is a folder beside `render/` (its definition + its view) and one
+ *  line here — the tool that opens it points at its `uri` through `ui: { resourceUri }`. Start from `example/`,
+ *  which is that same shape stripped to the minimum. */
+export declare const apps: McpApp[];
+export declare const registerApps: (server: McpServer) => void;
+export { RENDER_APP_URI } from './render';

package/dist/src/modules/mcp/apps/render/index.d.ts

@@ -0,0 +1,3 @@
+import { McpApp } from '../../types';
+export declare const RENDER_APP_URI = "ui://plitzi/render.html";
+export declare const renderApp: McpApp;

package/dist/src/modules/mcp/apps/render/view.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/src/modules/mcp/apps/shared/bundle.d.ts

@@ -0,0 +1 @@
+export declare const bundle: (entry: string) => Promise<string>;

package/dist/src/modules/mcp/apps/shared/index.d.ts

@@ -0,0 +1,2 @@
+export { registerApp } from './registerApp';
+export { require } from './resolve';

package/dist/src/modules/mcp/apps/shared/page.d.ts

@@ -0,0 +1,2 @@
+import { McpApp } from '../../types';
+export declare const page: (app: McpApp) => Promise<string>;

package/dist/src/modules/mcp/apps/shared/registerApp.d.ts

@@ -0,0 +1,5 @@
+import { McpApp } from '../../types';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+/** Serves the app as a self-contained page: no import map, no asset mounts, no cross-origin fetches, so the
+ *  strictest host sandbox runs it and no deployment has to serve anything extra. */
+export declare const registerApp: (server: McpServer, app: McpApp) => void;

package/dist/src/modules/mcp/apps/shared/resolve.d.ts

@@ -0,0 +1 @@
+export declare const require: NodeJS.Require;

package/dist/src/modules/mcp/apps/shared/zodEnglishOnly.d.ts

@@ -0,0 +1,4 @@
+import { Plugin } from 'esbuild';
+/** Drops zod's ~40 translations (194 KB): they are re-exported as a namespace, which no bundler can tree-shake.
+ *  English survives because zod imports `locales/en.js` directly, not through this index. */
+export declare const zodEnglishOnly: Plugin;

package/dist/src/modules/mcp/e2e/connector.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/src/modules/mcp/e2e/host.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/src/modules/mcp/e2e/index.d.ts

@@ -0,0 +1,6 @@
+/** An MCP Apps host in two halves, so the App can be exercised without Claude Desktop or ChatGPT: the CONNECTOR
+ *  (a real MCP client over Streamable HTTP) and the RENDERER (the ui:// page in a DOM, driven by AppBridge). */
+export { readAppPage, startMcpEndpoint } from './mcpEndpoint';
+export { startRenderingHost } from './renderingHost';
+export type { AppPage, McpEndpoint } from './mcpEndpoint';
+export type { RenderingHost } from './renderingHost';

package/dist/src/modules/mcp/e2e/mcpEndpoint.d.ts

@@ -0,0 +1,20 @@
+import { Client } from '@modelcontextprotocol/sdk/client/index.js';
+/** A live MCP endpoint on loopback — the same handler a deployment serves, transport and all. */
+export interface McpEndpoint {
+    url: string;
+    client: Client;
+    /** Raw fetch, for the probes a connector fires outside the JSON-RPC session. */
+    request: (init?: RequestInit & {
+        path?: string;
+    }) => Promise<Response>;
+    close: () => Promise<void>;
+}
+export interface AppPage {
+    html: string;
+    mimeType?: string;
+    meta?: Record<string, unknown>;
+}
+/** Start the endpoint and connect a real MCP client to it, as a remote connector does. */
+export declare const startMcpEndpoint: () => Promise<McpEndpoint>;
+/** Read a ui:// resource. A page that came back as a blob is a bug a host would meet as a blank frame. */
+export declare const readAppPage: (endpoint: McpEndpoint, uri: string) => Promise<AppPage>;

package/dist/src/modules/mcp/e2e/postMessageChannel.d.ts

@@ -0,0 +1,22 @@
+import { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
+import { JSONRPCMessage } from '@modelcontextprotocol/sdk/types.js';
+import { JSDOM } from 'jsdom';
+export interface ParentStub {
+    postMessage: (message: unknown) => void;
+    attach: (deliver: (message: unknown) => void) => void;
+}
+/** Stands in for the window an iframe posts to. It BUFFERS: the page starts parsing the moment the DOM is built,
+ *  so without the queue its `ui/initialize` is dropped and the handshake silently never completes. */
+export declare const parentStub: () => ParentStub;
+/** The host end of that channel, as a transport an AppBridge can connect to. */
+export declare class HostBridgeTransport implements Transport {
+    private readonly window;
+    private readonly parent;
+    onmessage?: (message: JSONRPCMessage) => void;
+    onclose?: () => void;
+    onerror?: (error: Error) => void;
+    constructor(window: JSDOM['window'], parent: ParentStub);
+    start(): Promise<void>;
+    send(message: JSONRPCMessage): Promise<void>;
+    close(): Promise<void>;
+}

package/dist/src/modules/mcp/e2e/renderingHost.d.ts

@@ -0,0 +1,14 @@
+import { AppBridge } from '@modelcontextprotocol/ext-apps/app-bridge';
+import { JSDOM } from 'jsdom';
+import { McpUiHostContext, McpUiToolResultNotification } from '@modelcontextprotocol/ext-apps';
+export interface RenderingHost {
+    bridge: AppBridge;
+    window: JSDOM['window'];
+    /** Deliver a tool result and let the App paint before assertions run. */
+    showResult: (result: McpUiToolResultNotification['params']) => Promise<void>;
+    text: () => string;
+    close: () => void;
+}
+/** Load a ui:// page into a DOM and complete the MCP Apps handshake against it, through the official AppBridge.
+ *  Resolves once the App is connected, so a test can push a tool result straight away. */
+export declare const startRenderingHost: (html: string, hostContext?: McpUiHostContext) => Promise<RenderingHost>;

package/dist/src/modules/mcp/handler.d.ts

@@ -1,12 +1,16 @@
 import { createMcpServer } from './server';
 import { PreviewClient, ScreenshotClient } from './types';
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { SSRAdapters, SSRRequest, McpLogger } from '@plitzi/sdk-shared';
 import { IncomingMessage, ServerResponse } from 'node:http';
+/** Per-request wiring the MCP service does not resolve itself: the renderer clients and the log sink. Everything
+ *  here is optional — the service degrades feature by feature. */
+export type McpRequestOptions = {
+    preview?: PreviewClient;
+    screenshot?: ScreenshotClient;
+    logger?: McpLogger;
+};
 export declare const readMcpBody: (req: IncomingMessage) => Promise<unknown>;
 export declare const serveMcp: (raw: IncomingMessage, res: ServerResponse, server: McpServer) => Promise<void>;
-export declare const handleMcp: (raw: IncomingMessage, res: ServerResponse, req: SSRRequest, adapters: SSRAdapters, preview?: PreviewClient, screenshot?: ScreenshotClient, logger?: McpLogger, renderApp?: {
-    sdkBase: string;
-    devMode?: boolean;
-}) => Promise<void>;
+export declare const handleMcp: (raw: IncomingMessage, res: ServerResponse, req: SSRRequest, adapters: SSRAdapters, options?: McpRequestOptions) => Promise<void>;
 export { createMcpServer };

package/dist/src/modules/mcp/index.d.ts

@@ -4,6 +4,7 @@ export { apply, validate, search, read, validateOperations, operation, tools } f
 export { computeVersion, buildAgentGuide } from './helpers';
 export { createHttpPreviewClient } from './previewClient';
 export { createHttpScreenshotClient } from './screenshotClient';
+export type { McpRequestOptions } from './handler';
 export type { HttpPreviewClientConfig } from './previewClient';
 export type { HttpScreenshotClientConfig } from './screenshotClient';
 export type { McpServerContext } from './server';

package/dist/src/modules/mcp/resources/register.d.ts

@@ -1,6 +1,6 @@
 import { McpLog, Space } from '../helpers';
 import { Env } from '../types';
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 /** Register every resource on the MCP server: fixed listings plus templated per-item reads. The space is
  *  loaded lazily via getSpace, so listing resources never touches the store — only reading one does. */
 export declare const registerResources: (server: McpServer, getSpace: () => Promise<Space>, env: Env, log: McpLog) => void;

package/dist/src/modules/mcp/resources/renderGuide.d.ts

@@ -1,4 +1,4 @@
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 export declare const RENDER_GUIDE_URI = "plitzi://render/guide";
 export declare const RENDER_TYPES_URI = "plitzi://render/types";
 export declare const registerRenderResources: (server: McpServer) => void;

package/dist/src/modules/mcp/server.d.ts

@@ -1,4 +1,4 @@
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { PreviewClient, ScreenshotClient } from './types';
 import { SSRAdapters, McpLogger } from '@plitzi/sdk-shared';
 /** The MCP service is stateless: every request resolves its own `spaceId` (from the request JWT) and reads the
@@ -18,13 +18,5 @@ export interface McpServerContext {
     /** Structured request-log sink. When set, every tool call and resource read emits an McpLogEvent to it (the
      *  consumer renders them); otherwise logging falls back to the console when MCP_DEBUG=1. */
     logger?: McpLogger;
-    /** MCP Apps: the interactive render view for plitzi_render. `sdkBase` is this server's absolute origin, which
-     *  serves the Plitzi SDK bundle under /sdk-assets; the iframe imports it and renders the widget client-side.
-     *  `devMode` picks the SDK vendor bundle name (dev vs prod split) to match the served bundle. Absent → the
-     *  ui:// view is not registered (the tool still returns its text summary + offlineData). */
-    renderApp?: {
-        sdkBase: string;
-        devMode?: boolean;
-    };
 }
-export declare const createMcpServer: ({ adapters, getSpaceId, preview, screenshot, logger, renderApp }: McpServerContext) => McpServer;
+export declare const createMcpServer: ({ adapters, getSpaceId, preview, screenshot, logger }: McpServerContext) => McpServer;

package/dist/src/modules/mcp/tools/apply/index.d.ts

@@ -179,8 +179,8 @@ export declare const applyShape: {
         userProvider: z.ZodOptional<z.ZodEnum<{
             "": "";
             custom: "custom";
-            basic: "basic";
             auth0: "auth0";
+            basic: "basic";
         }>>;
         auth0Domain: z.ZodOptional<z.ZodString>;
         auth0ClientId: z.ZodOptional<z.ZodString>;
@@ -395,9 +395,9 @@ export declare const applyShape: {
         type: z.ZodLiteral<"upsertStyleVariable">;
         category: z.ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: z.ZodString;
         value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodObject<{
@@ -409,9 +409,9 @@ export declare const applyShape: {
         type: z.ZodLiteral<"deleteStyleVariable">;
         category: z.ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: z.ZodString;
     }, z.core.$strip>], "type">>;

package/dist/src/modules/mcp/tools/operations/index.d.ts

@@ -175,8 +175,8 @@ export declare const operation: z.ZodDiscriminatedUnion<[z.ZodObject<{
     userProvider: z.ZodOptional<z.ZodEnum<{
         "": "";
         custom: "custom";
-        basic: "basic";
         auth0: "auth0";
+        basic: "basic";
     }>>;
     auth0Domain: z.ZodOptional<z.ZodString>;
     auth0ClientId: z.ZodOptional<z.ZodString>;
@@ -391,9 +391,9 @@ export declare const operation: z.ZodDiscriminatedUnion<[z.ZodObject<{
     type: z.ZodLiteral<"upsertStyleVariable">;
     category: z.ZodEnum<{
         color: "color";
-        custom: "custom";
         spacing: "spacing";
         shadow: "shadow";
+        custom: "custom";
     }>;
     name: z.ZodString;
     value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodObject<{
@@ -405,9 +405,9 @@ export declare const operation: z.ZodDiscriminatedUnion<[z.ZodObject<{
     type: z.ZodLiteral<"deleteStyleVariable">;
     category: z.ZodEnum<{
         color: "color";
-        custom: "custom";
         spacing: "spacing";
         shadow: "shadow";
+        custom: "custom";
     }>;
     name: z.ZodString;
 }, z.core.$strip>], "type">;
@@ -590,8 +590,8 @@ export declare const operations: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject
     userProvider: z.ZodOptional<z.ZodEnum<{
         "": "";
         custom: "custom";
-        basic: "basic";
         auth0: "auth0";
+        basic: "basic";
     }>>;
     auth0Domain: z.ZodOptional<z.ZodString>;
     auth0ClientId: z.ZodOptional<z.ZodString>;
@@ -806,9 +806,9 @@ export declare const operations: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject
     type: z.ZodLiteral<"upsertStyleVariable">;
     category: z.ZodEnum<{
         color: "color";
-        custom: "custom";
         spacing: "spacing";
         shadow: "shadow";
+        custom: "custom";
     }>;
     name: z.ZodString;
     value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodObject<{
@@ -820,9 +820,9 @@ export declare const operations: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject
     type: z.ZodLiteral<"deleteStyleVariable">;
     category: z.ZodEnum<{
         color: "color";
-        custom: "custom";
         spacing: "spacing";
         shadow: "shadow";
+        custom: "custom";
     }>;
     name: z.ZodString;
 }, z.core.$strip>], "type">>;

package/dist/src/modules/mcp/tools/operations/schema/operations.d.ts

@@ -189,8 +189,8 @@ export declare const elementOps: {
         userProvider: import('zod').ZodOptional<import('zod').ZodEnum<{
             "": "";
             custom: "custom";
-            basic: "basic";
             auth0: "auth0";
+            basic: "basic";
         }>>;
         auth0Domain: import('zod').ZodOptional<import('zod').ZodString>;
         auth0ClientId: import('zod').ZodOptional<import('zod').ZodString>;

package/dist/src/modules/mcp/tools/operations/schema/settings/patchSettings.d.ts

@@ -12,8 +12,8 @@ export declare const patchSettingsOp: z.ZodObject<{
     userProvider: z.ZodOptional<z.ZodEnum<{
         "": "";
         custom: "custom";
-        basic: "basic";
         auth0: "auth0";
+        basic: "basic";
     }>>;
     auth0Domain: z.ZodOptional<z.ZodString>;
     auth0ClientId: z.ZodOptional<z.ZodString>;

package/dist/src/modules/mcp/tools/operations/style/operations.d.ts

@@ -207,9 +207,9 @@ export declare const styleOps: {
         type: import('zod').ZodLiteral<"upsertStyleVariable">;
         category: import('zod').ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: import('zod').ZodString;
         value: import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber, import('zod').ZodObject<{
@@ -222,9 +222,9 @@ export declare const styleOps: {
         type: import('zod').ZodLiteral<"deleteStyleVariable">;
         category: import('zod').ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: import('zod').ZodString;
     }, import('zod/v4/core').$strip>;

package/dist/src/modules/mcp/tools/operations/style/shared.d.ts

@@ -43,9 +43,9 @@ declare const definitionSlotPatch: z.ZodObject<{
 export type DefinitionSlotPatch = z.infer<typeof definitionSlotPatch>;
 export declare const styleCategory: z.ZodEnum<{
     color: "color";
-    custom: "custom";
     spacing: "spacing";
     shadow: "shadow";
+    custom: "custom";
 }>;
 export declare const themeValue: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodObject<{
     light: z.ZodOptional<z.ZodString>;

package/dist/src/modules/mcp/tools/operations/style/variables/deleteStyleVariable.d.ts

@@ -5,9 +5,9 @@ export declare const deleteStyleVariableOp: z.ZodObject<{
     type: z.ZodLiteral<"deleteStyleVariable">;
     category: z.ZodEnum<{
         color: "color";
-        custom: "custom";
         spacing: "spacing";
         shadow: "shadow";
+        custom: "custom";
     }>;
     name: z.ZodString;
 }, z.core.$strip>;

package/dist/src/modules/mcp/tools/operations/style/variables/upsertStyleVariable.d.ts

@@ -5,9 +5,9 @@ export declare const upsertStyleVariableOp: z.ZodObject<{
     type: z.ZodLiteral<"upsertStyleVariable">;
     category: z.ZodEnum<{
         color: "color";
-        custom: "custom";
         spacing: "spacing";
         shadow: "shadow";
+        custom: "custom";
     }>;
     name: z.ZodString;
     value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodObject<{

package/dist/src/modules/mcp/tools/preview.d.ts

@@ -175,8 +175,8 @@ export declare const previewShape: {
         userProvider: z.ZodOptional<z.ZodEnum<{
             "": "";
             custom: "custom";
-            basic: "basic";
             auth0: "auth0";
+            basic: "basic";
         }>>;
         auth0Domain: z.ZodOptional<z.ZodString>;
         auth0ClientId: z.ZodOptional<z.ZodString>;
@@ -391,9 +391,9 @@ export declare const previewShape: {
         type: z.ZodLiteral<"upsertStyleVariable">;
         category: z.ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: z.ZodString;
         value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodObject<{
@@ -405,9 +405,9 @@ export declare const previewShape: {
         type: z.ZodLiteral<"deleteStyleVariable">;
         category: z.ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: z.ZodString;
     }, z.core.$strip>], "type">>>;

package/dist/src/modules/mcp/tools/render.d.ts

@@ -175,8 +175,8 @@ export declare const renderShape: {
         userProvider: import('zod').ZodOptional<import('zod').ZodEnum<{
             "": "";
             custom: "custom";
-            basic: "basic";
             auth0: "auth0";
+            basic: "basic";
         }>>;
         auth0Domain: import('zod').ZodOptional<import('zod').ZodString>;
         auth0ClientId: import('zod').ZodOptional<import('zod').ZodString>;
@@ -391,9 +391,9 @@ export declare const renderShape: {
         type: import('zod').ZodLiteral<"upsertStyleVariable">;
         category: import('zod').ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: import('zod').ZodString;
         value: import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber, import('zod').ZodObject<{
@@ -405,9 +405,9 @@ export declare const renderShape: {
         type: import('zod').ZodLiteral<"deleteStyleVariable">;
         category: import('zod').ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: import('zod').ZodString;
     }, import('zod/v4/core').$strip>], "type">>;

package/dist/src/modules/mcp/tools/screenshot.d.ts

@@ -175,8 +175,8 @@ export declare const screenshotShape: {
         userProvider: z.ZodOptional<z.ZodEnum<{
             "": "";
             custom: "custom";
-            basic: "basic";
             auth0: "auth0";
+            basic: "basic";
         }>>;
         auth0Domain: z.ZodOptional<z.ZodString>;
         auth0ClientId: z.ZodOptional<z.ZodString>;
@@ -391,9 +391,9 @@ export declare const screenshotShape: {
         type: z.ZodLiteral<"upsertStyleVariable">;
         category: z.ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: z.ZodString;
         value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodObject<{
@@ -405,9 +405,9 @@ export declare const screenshotShape: {
         type: z.ZodLiteral<"deleteStyleVariable">;
         category: z.ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: z.ZodString;
     }, z.core.$strip>], "type">>>;

package/dist/src/modules/mcp/tools/shared/tool.d.ts

@@ -1,6 +1,7 @@
 import { z, ZodObject, ZodRawShape } from 'zod';
 import { Space } from '../../helpers';
 import { PreviewClient, ScreenshotClient, ScreenshotImage, Env, Persisters } from '../../types';
+import { McpUiToolMeta } from '@modelcontextprotocol/ext-apps';
 import { CallToolResult } from '@modelcontextprotocol/sdk/types.js';
 /** Everything a tool needs at call time: the loaded space, the target environment, and the persisters (only the
  *  write tools use them). Built by whoever hosts the tools — the standalone MCP server or the in-process AI
@@ -35,10 +36,8 @@ export interface ToolSpec<Shape extends ZodRawShape> {
      *  or load a space for it — that keeps it callable with no auth, on the public surface. */
     spaceless?: boolean;
     /** MCP Apps: link this tool to an interactive UI resource (a `ui://` HTML page the host renders in a sandboxed
-     *  iframe, receiving the tool result). The `_meta.ui` the host reads is built from this. */
-    ui?: {
-        resourceUri: string;
-    };
+     *  iframe, receiving the tool result). Registered as the tool's `_meta.ui` — see registerAppTool. */
+    ui?: McpUiToolMeta;
     run: (input: z.infer<ZodObject<Shape>>, ctx: ToolContext) => unknown;
 }
 /** What the registry holds and the hosts register from: the same metadata plus a type-erased `execute` that
@@ -51,9 +50,7 @@ export interface ToolDef {
     access: 'read' | 'write';
     requires?: ToolRequires;
     spaceless?: boolean;
-    ui?: {
-        resourceUri: string;
-    };
+    ui?: McpUiToolMeta;
     execute: (args: unknown, ctx: ToolContext) => unknown;
 }
 /** Author a tool: give it its metadata, its input shape and a typed `run`. The returned descriptor parses the

package/dist/src/modules/mcp/tools/validate.d.ts

@@ -176,8 +176,8 @@ export declare const validateShape: {
         userProvider: import('zod').ZodOptional<import('zod').ZodEnum<{
             "": "";
             custom: "custom";
-            basic: "basic";
             auth0: "auth0";
+            basic: "basic";
         }>>;
         auth0Domain: import('zod').ZodOptional<import('zod').ZodString>;
         auth0ClientId: import('zod').ZodOptional<import('zod').ZodString>;
@@ -392,9 +392,9 @@ export declare const validateShape: {
         type: import('zod').ZodLiteral<"upsertStyleVariable">;
         category: import('zod').ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: import('zod').ZodString;
         value: import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber, import('zod').ZodObject<{
@@ -406,9 +406,9 @@ export declare const validateShape: {
         type: import('zod').ZodLiteral<"deleteStyleVariable">;
         category: import('zod').ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: import('zod').ZodString;
     }, import('zod/v4/core').$strip>], "type">>;

package/dist/src/modules/mcp/types/appTypes.d.ts

@@ -0,0 +1,13 @@
+import { McpUiResourceCsp } from '@modelcontextprotocol/ext-apps';
+/** A `ui://` page the host renders in a sandboxed iframe, linked from a tool through `_meta.ui.resourceUri`. */
+export interface McpApp {
+    uri: string;
+    name: string;
+    description: string;
+    title: string;
+    /** Absolute path to the view: the app's browser entry. */
+    entry: string;
+    /** Stylesheets to inline, by absolute path — lazy so a missing one only fails on read. */
+    styles?: () => string[];
+    csp?: McpUiResourceCsp;
+}

package/dist/src/modules/mcp/types/index.d.ts

@@ -1,4 +1,5 @@
 export type * from './aiSchema';
+export type * from './appTypes';
 export type * from './toolTypes';
 export type * from './previewTypes';
 export type * from './screenshotTypes';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plitzi/sdk-server",
-  "version": "0.32.8",
+  "version": "0.32.10",
   "license": "AGPL-3.0",
   "files": [
     "dist"
@@ -13,6 +13,11 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js",
       "default": "./dist/index.js"
+    },
+    "./mcp": {
+      "types": "./dist/mcp.d.ts",
+      "import": "./dist/mcp.js",
+      "default": "./dist/mcp.js"
     }
   },
   "repository": {
@@ -22,10 +27,11 @@
   "type": "module",
   "sideEffects": false,
   "dependencies": {
+    "@modelcontextprotocol/ext-apps": "^1.7.5",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@plitzi/plitzi-sdk": "0.32.8",
-    "@plitzi/sdk-schema": "0.32.8",
-    "@plitzi/sdk-shared": "0.32.8",
+    "@plitzi/plitzi-sdk": "0.32.10",
+    "@plitzi/sdk-schema": "0.32.10",
+    "@plitzi/sdk-shared": "0.32.10",
     "ejs": "^6.0.1",
     "esbuild": "^0.28.1",
     "zod": "^4.4.3"
@@ -36,12 +42,14 @@
   },
   "devDependencies": {
     "@types/ejs": "^3.1.5",
+    "@types/jsdom": "^28.0.3",
     "@types/node": "^26.1.1",
     "@types/react": "^19.2.17",
     "@vitejs/plugin-react": "^6.0.4",
     "@vitest/coverage-v8": "^4.1.10",
     "eslint": "^9.39.5",
     "eslint-plugin-import": "^2.32.0",
+    "jsdom": "^29.1.1",
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
     "tsx": "^4.23.1",
@@ -60,6 +68,7 @@
     "lint": "TIMING=1 eslint ./src",
     "typecheck": "tsc -p tsconfig.app.json --noEmit",
     "test": "vitest run",
+    "test:e2e": "vitest run src/modules/mcp/e2e",
     "test:coverage": "vitest run --coverage",
     "bench": "vitest bench --run"
   }