@plitzi/sdk-server 0.32.9 → 0.32.11

package/dist/src/modules/mcp/tools/operations/index.d.ts

@@ -175,8 +175,8 @@ export declare const operation: z.ZodDiscriminatedUnion<[z.ZodObject<{
     userProvider: z.ZodOptional<z.ZodEnum<{
         "": "";
         custom: "custom";
-        basic: "basic";
         auth0: "auth0";
+        basic: "basic";
     }>>;
     auth0Domain: z.ZodOptional<z.ZodString>;
     auth0ClientId: z.ZodOptional<z.ZodString>;
@@ -391,9 +391,9 @@ export declare const operation: z.ZodDiscriminatedUnion<[z.ZodObject<{
     type: z.ZodLiteral<"upsertStyleVariable">;
     category: z.ZodEnum<{
         color: "color";
-        custom: "custom";
         spacing: "spacing";
         shadow: "shadow";
+        custom: "custom";
     }>;
     name: z.ZodString;
     value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodObject<{
@@ -405,9 +405,9 @@ export declare const operation: z.ZodDiscriminatedUnion<[z.ZodObject<{
     type: z.ZodLiteral<"deleteStyleVariable">;
     category: z.ZodEnum<{
         color: "color";
-        custom: "custom";
         spacing: "spacing";
         shadow: "shadow";
+        custom: "custom";
     }>;
     name: z.ZodString;
 }, z.core.$strip>], "type">;
@@ -590,8 +590,8 @@ export declare const operations: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject
     userProvider: z.ZodOptional<z.ZodEnum<{
         "": "";
         custom: "custom";
-        basic: "basic";
         auth0: "auth0";
+        basic: "basic";
     }>>;
     auth0Domain: z.ZodOptional<z.ZodString>;
     auth0ClientId: z.ZodOptional<z.ZodString>;
@@ -806,9 +806,9 @@ export declare const operations: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject
     type: z.ZodLiteral<"upsertStyleVariable">;
     category: z.ZodEnum<{
         color: "color";
-        custom: "custom";
         spacing: "spacing";
         shadow: "shadow";
+        custom: "custom";
     }>;
     name: z.ZodString;
     value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodObject<{
@@ -820,9 +820,9 @@ export declare const operations: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject
     type: z.ZodLiteral<"deleteStyleVariable">;
     category: z.ZodEnum<{
         color: "color";
-        custom: "custom";
         spacing: "spacing";
         shadow: "shadow";
+        custom: "custom";
     }>;
     name: z.ZodString;
 }, z.core.$strip>], "type">>;

package/dist/src/modules/mcp/tools/operations/schema/operations.d.ts

@@ -189,8 +189,8 @@ export declare const elementOps: {
         userProvider: import('zod').ZodOptional<import('zod').ZodEnum<{
             "": "";
             custom: "custom";
-            basic: "basic";
             auth0: "auth0";
+            basic: "basic";
         }>>;
         auth0Domain: import('zod').ZodOptional<import('zod').ZodString>;
         auth0ClientId: import('zod').ZodOptional<import('zod').ZodString>;

package/dist/src/modules/mcp/tools/operations/schema/settings/patchSettings.d.ts

@@ -12,8 +12,8 @@ export declare const patchSettingsOp: z.ZodObject<{
     userProvider: z.ZodOptional<z.ZodEnum<{
         "": "";
         custom: "custom";
-        basic: "basic";
         auth0: "auth0";
+        basic: "basic";
     }>>;
     auth0Domain: z.ZodOptional<z.ZodString>;
     auth0ClientId: z.ZodOptional<z.ZodString>;

package/dist/src/modules/mcp/tools/operations/style/operations.d.ts

@@ -207,9 +207,9 @@ export declare const styleOps: {
         type: import('zod').ZodLiteral<"upsertStyleVariable">;
         category: import('zod').ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: import('zod').ZodString;
         value: import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber, import('zod').ZodObject<{
@@ -222,9 +222,9 @@ export declare const styleOps: {
         type: import('zod').ZodLiteral<"deleteStyleVariable">;
         category: import('zod').ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: import('zod').ZodString;
     }, import('zod/v4/core').$strip>;

package/dist/src/modules/mcp/tools/operations/style/shared.d.ts

@@ -43,9 +43,9 @@ declare const definitionSlotPatch: z.ZodObject<{
 export type DefinitionSlotPatch = z.infer<typeof definitionSlotPatch>;
 export declare const styleCategory: z.ZodEnum<{
     color: "color";
-    custom: "custom";
     spacing: "spacing";
     shadow: "shadow";
+    custom: "custom";
 }>;
 export declare const themeValue: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodObject<{
     light: z.ZodOptional<z.ZodString>;

package/dist/src/modules/mcp/tools/operations/style/variables/deleteStyleVariable.d.ts

@@ -5,9 +5,9 @@ export declare const deleteStyleVariableOp: z.ZodObject<{
     type: z.ZodLiteral<"deleteStyleVariable">;
     category: z.ZodEnum<{
         color: "color";
-        custom: "custom";
         spacing: "spacing";
         shadow: "shadow";
+        custom: "custom";
     }>;
     name: z.ZodString;
 }, z.core.$strip>;

package/dist/src/modules/mcp/tools/operations/style/variables/upsertStyleVariable.d.ts

@@ -5,9 +5,9 @@ export declare const upsertStyleVariableOp: z.ZodObject<{
     type: z.ZodLiteral<"upsertStyleVariable">;
     category: z.ZodEnum<{
         color: "color";
-        custom: "custom";
         spacing: "spacing";
         shadow: "shadow";
+        custom: "custom";
     }>;
     name: z.ZodString;
     value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodObject<{

package/dist/src/modules/mcp/tools/preview.d.ts

@@ -175,8 +175,8 @@ export declare const previewShape: {
         userProvider: z.ZodOptional<z.ZodEnum<{
             "": "";
             custom: "custom";
-            basic: "basic";
             auth0: "auth0";
+            basic: "basic";
         }>>;
         auth0Domain: z.ZodOptional<z.ZodString>;
         auth0ClientId: z.ZodOptional<z.ZodString>;
@@ -391,9 +391,9 @@ export declare const previewShape: {
         type: z.ZodLiteral<"upsertStyleVariable">;
         category: z.ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: z.ZodString;
         value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodObject<{
@@ -405,9 +405,9 @@ export declare const previewShape: {
         type: z.ZodLiteral<"deleteStyleVariable">;
         category: z.ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: z.ZodString;
     }, z.core.$strip>], "type">>>;

package/dist/src/modules/mcp/tools/render.d.ts

@@ -175,8 +175,8 @@ export declare const renderShape: {
         userProvider: import('zod').ZodOptional<import('zod').ZodEnum<{
             "": "";
             custom: "custom";
-            basic: "basic";
             auth0: "auth0";
+            basic: "basic";
         }>>;
         auth0Domain: import('zod').ZodOptional<import('zod').ZodString>;
         auth0ClientId: import('zod').ZodOptional<import('zod').ZodString>;
@@ -391,9 +391,9 @@ export declare const renderShape: {
         type: import('zod').ZodLiteral<"upsertStyleVariable">;
         category: import('zod').ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: import('zod').ZodString;
         value: import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber, import('zod').ZodObject<{
@@ -405,9 +405,9 @@ export declare const renderShape: {
         type: import('zod').ZodLiteral<"deleteStyleVariable">;
         category: import('zod').ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: import('zod').ZodString;
     }, import('zod/v4/core').$strip>], "type">>;

package/dist/src/modules/mcp/tools/screenshot.d.ts

@@ -175,8 +175,8 @@ export declare const screenshotShape: {
         userProvider: z.ZodOptional<z.ZodEnum<{
             "": "";
             custom: "custom";
-            basic: "basic";
             auth0: "auth0";
+            basic: "basic";
         }>>;
         auth0Domain: z.ZodOptional<z.ZodString>;
         auth0ClientId: z.ZodOptional<z.ZodString>;
@@ -391,9 +391,9 @@ export declare const screenshotShape: {
         type: z.ZodLiteral<"upsertStyleVariable">;
         category: z.ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: z.ZodString;
         value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodObject<{
@@ -405,9 +405,9 @@ export declare const screenshotShape: {
         type: z.ZodLiteral<"deleteStyleVariable">;
         category: z.ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: z.ZodString;
     }, z.core.$strip>], "type">>>;

package/dist/src/modules/mcp/tools/shared/tool.d.ts

@@ -1,6 +1,7 @@
 import { z, ZodObject, ZodRawShape } from 'zod';
 import { Space } from '../../helpers';
 import { PreviewClient, ScreenshotClient, ScreenshotImage, Env, Persisters } from '../../types';
+import { McpUiToolMeta } from '@modelcontextprotocol/ext-apps';
 import { CallToolResult } from '@modelcontextprotocol/sdk/types.js';
 /** Everything a tool needs at call time: the loaded space, the target environment, and the persisters (only the
  *  write tools use them). Built by whoever hosts the tools — the standalone MCP server or the in-process AI
@@ -35,10 +36,8 @@ export interface ToolSpec<Shape extends ZodRawShape> {
      *  or load a space for it — that keeps it callable with no auth, on the public surface. */
     spaceless?: boolean;
     /** MCP Apps: link this tool to an interactive UI resource (a `ui://` HTML page the host renders in a sandboxed
-     *  iframe, receiving the tool result). The `_meta.ui` the host reads is built from this. */
-    ui?: {
-        resourceUri: string;
-    };
+     *  iframe, receiving the tool result). Registered as the tool's `_meta.ui` — see registerAppTool. */
+    ui?: McpUiToolMeta;
     run: (input: z.infer<ZodObject<Shape>>, ctx: ToolContext) => unknown;
 }
 /** What the registry holds and the hosts register from: the same metadata plus a type-erased `execute` that
@@ -51,9 +50,7 @@ export interface ToolDef {
     access: 'read' | 'write';
     requires?: ToolRequires;
     spaceless?: boolean;
-    ui?: {
-        resourceUri: string;
-    };
+    ui?: McpUiToolMeta;
     execute: (args: unknown, ctx: ToolContext) => unknown;
 }
 /** Author a tool: give it its metadata, its input shape and a typed `run`. The returned descriptor parses the

package/dist/src/modules/mcp/tools/validate.d.ts

@@ -176,8 +176,8 @@ export declare const validateShape: {
         userProvider: import('zod').ZodOptional<import('zod').ZodEnum<{
             "": "";
             custom: "custom";
-            basic: "basic";
             auth0: "auth0";
+            basic: "basic";
         }>>;
         auth0Domain: import('zod').ZodOptional<import('zod').ZodString>;
         auth0ClientId: import('zod').ZodOptional<import('zod').ZodString>;
@@ -392,9 +392,9 @@ export declare const validateShape: {
         type: import('zod').ZodLiteral<"upsertStyleVariable">;
         category: import('zod').ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: import('zod').ZodString;
         value: import('zod').ZodUnion<readonly [import('zod').ZodString, import('zod').ZodNumber, import('zod').ZodObject<{
@@ -406,9 +406,9 @@ export declare const validateShape: {
         type: import('zod').ZodLiteral<"deleteStyleVariable">;
         category: import('zod').ZodEnum<{
             color: "color";
-            custom: "custom";
             spacing: "spacing";
             shadow: "shadow";
+            custom: "custom";
         }>;
         name: import('zod').ZodString;
     }, import('zod/v4/core').$strip>], "type">>;

package/dist/src/modules/mcp/types/appTypes.d.ts

@@ -0,0 +1,13 @@
+import { McpUiResourceCsp } from '@modelcontextprotocol/ext-apps';
+/** A `ui://` page the host renders in a sandboxed iframe, linked from a tool through `_meta.ui.resourceUri`. */
+export interface McpApp {
+    uri: string;
+    name: string;
+    description: string;
+    title: string;
+    /** Absolute path to the view: the app's browser entry. */
+    entry: string;
+    /** Stylesheets to inline, by absolute path — lazy so a missing one only fails on read. */
+    styles?: () => string[];
+    csp?: McpUiResourceCsp;
+}

package/dist/src/modules/mcp/types/index.d.ts

@@ -1,4 +1,5 @@
 export type * from './aiSchema';
+export type * from './appTypes';
 export type * from './toolTypes';
 export type * from './previewTypes';
 export type * from './screenshotTypes';

package/dist/src/plugins/validate.d.ts

@@ -0,0 +1,9 @@
+import { PluginSource } from '@plitzi/sdk-shared';
+/** The file a plugin source needs on disk, or null when nothing local is involved — a remote URL (fetched and
+ *  cached at request time) or a component handed in directly. */
+export declare const localSourcePath: (source: PluginSource) => string | null;
+/** Fail at boot on a plugin whose entry file is missing. A plugin entry is a plain string path in the server
+ *  config, so nothing — not tsc, not eslint — notices when that file is moved or deleted; without this check the
+ *  server starts happily and only dies on the first render that needs the plugin, with an esbuild resolve error
+ *  far from its cause. */
+export declare const assertPluginSources: (plugins: Record<string, PluginSource>) => void;

package/dist/src/plugins/validate.test.d.ts

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plitzi/sdk-server",
-  "version": "0.32.9",
+  "version": "0.32.11",
   "license": "AGPL-3.0",
   "files": [
     "dist"
@@ -13,6 +13,11 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js",
       "default": "./dist/index.js"
+    },
+    "./mcp": {
+      "types": "./dist/mcp.d.ts",
+      "import": "./dist/mcp.js",
+      "default": "./dist/mcp.js"
     }
   },
   "repository": {
@@ -22,10 +27,11 @@
   "type": "module",
   "sideEffects": false,
   "dependencies": {
+    "@modelcontextprotocol/ext-apps": "^1.7.5",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@plitzi/plitzi-sdk": "0.32.9",
-    "@plitzi/sdk-schema": "0.32.9",
-    "@plitzi/sdk-shared": "0.32.9",
+    "@plitzi/plitzi-sdk": "0.32.11",
+    "@plitzi/sdk-schema": "0.32.11",
+    "@plitzi/sdk-shared": "0.32.11",
     "ejs": "^6.0.1",
     "esbuild": "^0.28.1",
     "zod": "^4.4.3"
@@ -36,12 +42,14 @@
   },
   "devDependencies": {
     "@types/ejs": "^3.1.5",
+    "@types/jsdom": "^28.0.3",
     "@types/node": "^26.1.1",
     "@types/react": "^19.2.17",
     "@vitejs/plugin-react": "^6.0.4",
     "@vitest/coverage-v8": "^4.1.10",
     "eslint": "^9.39.5",
     "eslint-plugin-import": "^2.32.0",
+    "jsdom": "^29.1.1",
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
     "tsx": "^4.23.1",
@@ -60,6 +68,7 @@
     "lint": "TIMING=1 eslint ./src",
     "typecheck": "tsc -p tsconfig.app.json --noEmit",
     "test": "vitest run",
+    "test:e2e": "vitest run src/modules/mcp/e2e",
     "test:coverage": "vitest run --coverage",
     "bench": "vitest bench --run"
   }

package/dist/modules/mcp/resources/renderApp.js

@@ -1,182 +0,0 @@
-//#region src/modules/mcp/resources/renderApp.ts
-var RENDER_APP_URI = "ui://plitzi/render.html";
-var RENDER_APP_MIME = "text/html;profile=mcp-app";
-var RENDER_APP_CSP = {
-	resourceDomains: [
-		"*",
-		"data:",
-		"blob:"
-	],
-	connectDomains: ["*"]
-};
-var RENDER_APP_META = {
-	ui: { csp: RENDER_APP_CSP },
-	"openai/widgetCSP": {
-		resource_domains: RENDER_APP_CSP.resourceDomains,
-		connect_domains: RENDER_APP_CSP.connectDomains
-	}
-};
-var appHtml = (sdkBase, devMode) => {
-	const js = `${sdkBase}/sdk-assets/plitzi-sdk.js`;
-	const vendor = `${sdkBase}/sdk-assets/${devMode ? "plitzi-sdk-dev-vendor.js" : "plitzi-sdk-vendor.js"}`;
-	return `<!doctype html>
-<html lang="en">
-  <head>
-    <meta charset="utf-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <title>Plitzi widget</title>
-    <link rel="modulepreload" href="${vendor}" crossorigin />
-    <script type="importmap">
-      {
-        "imports": {
-          "react": "${vendor}",
-          "react-dom": "${vendor}",
-          "react-dom/client": "${vendor}",
-          "react/jsx-runtime": "${vendor}",
-          "react/compiler-runtime": "${vendor}",
-          "@plitzi/plitzi-sdk": "${js}"
-        }
-      }
-    <\/script>
-    <link href="${`${sdkBase}/sdk-assets/plitzi-sdk.css`}" rel="stylesheet" />
-    <style>
-      html,
-      body {
-        margin: 0;
-      }
-      #plitzi:empty::after {
-        content: 'Rendering…';
-        display: block;
-        padding: 16px;
-        font: 14px system-ui, sans-serif;
-        color: #64748b;
-      }
-    </style>
-  </head>
-  <body>
-    <div id="plitzi" class="plitzi-root-container"></div>
-    <script type="module">
-      const send = msg => window.parent.postMessage(msg, '*');
-      const root = document.getElementById('plitzi');
-      let mounted = false;
-
-      // Replace the 'Rendering…' placeholder with an explicit failure panel — otherwise a tool that returns
-      // { rendered:false } (no offlineData) or an SDK that fails to load would leave the iframe stuck forever.
-      const showError = (title, details) => {
-        mounted = true;
-        root.textContent = '';
-        const box = document.createElement('div');
-        box.setAttribute('style', 'padding:16px;font:13px/1.5 system-ui,sans-serif;color:#b91c1c');
-        const h = document.createElement('strong');
-        h.textContent = title;
-        box.appendChild(h);
-        if (details) {
-          const pre = document.createElement('pre');
-          pre.setAttribute('style', 'margin:8px 0 0;white-space:pre-wrap;color:#7f1d1d;font-size:12px');
-          pre.textContent = details;
-          box.appendChild(pre);
-        }
-
-        root.appendChild(box);
-      };
-
-      // The failed-render text is the tool's JSON summary ({ rendered:false, errors:[{path,message,hint}] }).
-      const errorText = params => {
-        const item = Array.isArray(params && params.content) ? params.content.find(c => c.type === 'text') : undefined;
-        if (!item) {
-          return '';
-        }
-
-        try {
-          const parsed = JSON.parse(item.text);
-          if (Array.isArray(parsed.errors)) {
-            return parsed.errors
-              .map(e => '• ' + (e.path ? e.path + ': ' : '') + e.message + (e.hint ? ' — ' + e.hint : ''))
-              .join('\\n');
-          }
-
-          return item.text;
-        } catch {
-          return item.text;
-        }
-      };
-
-      const mount = async params => {
-        if (mounted) {
-          return;
-        }
-
-        const offlineData = params && params.structuredContent && params.structuredContent.offlineData;
-        if (!offlineData) {
-          showError('Render failed', errorText(params) || 'The tool returned no widget data.');
-
-          return;
-        }
-
-        mounted = true;
-        try {
-          const { render } = await import('@plitzi/plitzi-sdk');
-          render('plitzi', { offlineData, offlineMode: true, environment: 'main', renderMode: 'raw' }, {}, false, false);
-        } catch (err) {
-          showError('SDK failed to load', String((err && err.message) || err));
-        }
-      };
-
-      window.addEventListener('message', event => {
-        const msg = event.data;
-        if (!msg || msg.jsonrpc !== '2.0') {
-          return;
-        }
-
-        // Reply to the initialize result: the host withholds tool data until it gets our 'initialized' notification.
-        if (msg.id === 1 && 'result' in msg) {
-          send({ jsonrpc: '2.0', method: 'ui/notifications/initialized', params: {} });
-
-          return;
-        }
-
-        if (msg.method === 'ui/notifications/tool-result') {
-          void mount(msg.params);
-        }
-      });
-
-      // Start the handshake immediately — nothing external blocks it, so the iframe is 'ready' at once.
-      send({
-        jsonrpc: '2.0',
-        id: 1,
-        method: 'ui/initialize',
-        params: {
-          protocolVersion: '2025-06-18',
-          appInfo: { name: 'Plitzi Widget', version: '1.0.0' },
-          appCapabilities: { availableDisplayModes: ['inline'] }
-        }
-      });
-    <\/script>
-  </body>
-</html>`;
-};
-var appCache = /* @__PURE__ */ new Map();
-var getAppHtml = (sdkBase, devMode) => {
-	const key = `${devMode ? "dev" : "prod"}|${sdkBase}`;
-	let html = appCache.get(key);
-	if (!html) {
-		html = appHtml(sdkBase, devMode);
-		appCache.set(key, html);
-	}
-	return html;
-};
-var registerRenderApp = (server, sdkBase, devMode) => {
-	const html = getAppHtml(sdkBase, devMode);
-	server.registerResource("plitzi-render-app", RENDER_APP_URI, {
-		description: "Interactive view that renders a plitzi_render widget with the Plitzi SDK (client-side).",
-		mimeType: RENDER_APP_MIME,
-		_meta: RENDER_APP_META
-	}, () => ({ contents: [{
-		uri: RENDER_APP_URI,
-		mimeType: RENDER_APP_MIME,
-		text: html,
-		_meta: RENDER_APP_META
-	}] }));
-};
-//#endregion
-export { RENDER_APP_URI, registerRenderApp };

package/dist/server.d.ts

@@ -1 +0,0 @@
-export {}