@toon-protocol/views 0.2.0

package/dist/a2ui/A2UIRenderer.d.ts

@@ -0,0 +1,47 @@
+/**
+ * A2UIRenderer — branch 2 of the NIP-on-TOON render trust gradient (medium
+ * trust). Renders an A2UI `surfaceUpdate` template, bound to a decoded TOON
+ * event as the `dataModelUpdate`, using the client's OWN audited component
+ * primitives — never provider code. See toon-meta#58, toon-client#89.
+ *
+ * Binding convention (spec §"Branch 2"):
+ *   - the `kind:31036` renderer `content` = the A2UI `surfaceUpdate` (template),
+ *   - the decoded event = the `dataModelUpdate` (data), and
+ *   - the `["a2ui", "<version>"]` tag selects the renderer version.
+ *
+ * Standard-catalog-only invariant: only the A2UI "Basic" catalog is rendered
+ * here. {@link validateA2uiRenderer} is the gate; a custom component or custom
+ * behavior REFUSES and signals a drop to branch 3 (sandboxed mcp-ui) — this
+ * component never renders a refused surface, it renders nothing and reports the
+ * fallback via {@link A2UIRendererProps.onFallback}.
+ */
+import { type FC } from 'react';
+import { type NostrEvent } from '../types.js';
+import { type A2uiGateRefuse } from './validate.js';
+/** Inputs to {@link A2UIRenderer}, mirroring the branch-2 dispatch decision. */
+export interface A2UIRendererProps {
+    /**
+     * The resolved `kind:31036` renderer event — its `content` is the A2UI
+     * `surfaceUpdate` template and its `tags` carry the `["a2ui", …]` version.
+     * (The `A2uiDecision.renderer` from `@toon-protocol/client`'s `renderDispatch`.)
+     */
+    renderer: NostrEvent;
+    /**
+     * The decoded TOON event fed in as the `dataModelUpdate` root. (The
+     * `A2uiDecision.event` — already decoded via `core.decodeEventFromToon`.)
+     */
+    event: NostrEvent;
+    /**
+     * Called when the standard-catalog-only gate REFUSES the surface, signalling
+     * the host to drop to another branch (`'mcp-ui'` = branch 3, `'native'` =
+     * fall through to branch 1/4). The renderer itself renders nothing in this
+     * case — the host owns the fallback render.
+     */
+    onFallback?: (refusal: A2uiGateRefuse) => void;
+}
+/**
+ * Branch 2 entry point. Runs the standard-catalog-only gate, then renders the
+ * surface at medium trust — or signals a fallback and renders nothing.
+ */
+export declare const A2UIRenderer: FC<A2UIRendererProps>;
+//# sourceMappingURL=A2UIRenderer.d.ts.map

package/dist/a2ui/A2UIRenderer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"A2UIRenderer.d.ts","sourceRoot":"","sources":["../../src/a2ui/A2UIRenderer.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAW,KAAK,EAAE,EAAkB,MAAM,OAAO,CAAC;AAGzD,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAM9C,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAG1E,gFAAgF;AAChF,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,QAAQ,EAAE,UAAU,CAAC;IACrB;;;OAGG;IACH,KAAK,EAAE,UAAU,CAAC;IAClB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;CAChD;AAuGD;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAc9C,CAAC"}

package/dist/a2ui/A2UIRenderer.js

@@ -0,0 +1,106 @@
+import { jsx as _jsx, Fragment as _Fragment } from "react/jsx-runtime";
+/**
+ * A2UIRenderer — branch 2 of the NIP-on-TOON render trust gradient (medium
+ * trust). Renders an A2UI `surfaceUpdate` template, bound to a decoded TOON
+ * event as the `dataModelUpdate`, using the client's OWN audited component
+ * primitives — never provider code. See toon-meta#58, toon-client#89.
+ *
+ * Binding convention (spec §"Branch 2"):
+ *   - the `kind:31036` renderer `content` = the A2UI `surfaceUpdate` (template),
+ *   - the decoded event = the `dataModelUpdate` (data), and
+ *   - the `["a2ui", "<version>"]` tag selects the renderer version.
+ *
+ * Standard-catalog-only invariant: only the A2UI "Basic" catalog is rendered
+ * here. {@link validateA2uiRenderer} is the gate; a custom component or custom
+ * behavior REFUSES and signals a drop to branch 3 (sandboxed mcp-ui) — this
+ * component never renders a refused surface, it renders nothing and reports the
+ * fallback via {@link A2UIRendererProps.onFallback}.
+ */
+import { useMemo } from 'react';
+import { Separator } from '@/components/ui/separator.js';
+import { cn } from '@/lib/utils.js';
+import {} from '../types.js';
+import {} from './types.js';
+import { validateA2uiRenderer } from './validate.js';
+import { dataModelFromEvent, resolveText, stringProp } from './binding.js';
+/** Resolve a node's children to component nodes, preserving order. */
+function childNodes(node, byId) {
+    if (!Array.isArray(node.children))
+        return [];
+    return node.children
+        .map((id) => byId.get(id))
+        .filter((n) => n !== undefined);
+}
+/** Render one Basic-catalog node and its subtree. Pure — no behavior executed. */
+function renderNode(node, byId, model, seen) {
+    // Cycle guard — a malformed template must never recurse forever.
+    if (seen.has(node.id))
+        return null;
+    seen.add(node.id);
+    const kids = childNodes(node, byId).map((child) => (_jsx(RenderChild, { node: child, byId: byId, model: model, seen: seen }, child.id)));
+    switch (node.component) {
+        case 'Text': {
+            const text = resolveText(node['text'], model);
+            return _jsx("p", { className: "text-sm leading-relaxed whitespace-pre-wrap break-words", children: text });
+        }
+        case 'Heading': {
+            const text = resolveText(node['text'] ?? node['title'], model);
+            return _jsx("h3", { className: "text-base font-semibold leading-tight", children: text });
+        }
+        case 'Image': {
+            const src = stringProp(node, 'src', model) ?? stringProp(node, 'url', model);
+            const alt = stringProp(node, 'alt', model) ?? '';
+            if (!src)
+                return null;
+            return _jsx("img", { src: src, alt: alt, className: "max-w-full rounded-md" });
+        }
+        case 'Icon': {
+            // Render the icon name as a label; we do not load arbitrary icon code.
+            const name = stringProp(node, 'name', model) ?? stringProp(node, 'icon', model) ?? '';
+            return _jsx("span", { "aria-hidden": true, className: "text-muted-foreground text-xs", children: name });
+        }
+        case 'Divider':
+            return _jsx(Separator, { className: "my-2" });
+        case 'Row':
+            return _jsx("div", { className: "flex flex-row flex-wrap items-start gap-3", children: kids });
+        case 'Column':
+            return _jsx("div", { className: "flex flex-col gap-2", children: kids });
+        case 'List':
+            return _jsx("div", { className: "flex flex-col divide-y divide-border", children: kids });
+        case 'Card':
+            return (_jsx("div", { className: "flex flex-col gap-2 rounded-lg border border-border bg-card p-4 text-card-foreground shadow-sm", children: kids }));
+        default:
+            // Unreachable: the gate already refused any non-Basic component.
+            return null;
+    }
+}
+const RenderChild = ({ node, byId, model, seen }) => _jsx(_Fragment, { children: renderNode(node, byId, model, new Set(seen)) });
+/** Render an already-validated surface against a data model. */
+function A2UISurface({ surface, root, model, }) {
+    const byId = useMemo(() => {
+        const m = new Map();
+        for (const c of surface.components)
+            m.set(c.id, c);
+        return m;
+    }, [surface]);
+    const rootNode = byId.get(root);
+    if (!rootNode)
+        return null;
+    return (_jsx("div", { "data-a2ui-surface": surface.surfaceId ?? 'main', "data-trust": "medium", className: cn('flex flex-col gap-2'), children: renderNode(rootNode, byId, model, new Set()) }));
+}
+/**
+ * Branch 2 entry point. Runs the standard-catalog-only gate, then renders the
+ * surface at medium trust — or signals a fallback and renders nothing.
+ */
+export const A2UIRenderer = ({ renderer, event, onFallback }) => {
+    const gate = useMemo(() => validateA2uiRenderer(renderer.content, renderer.tags), [renderer.content, renderer.tags]);
+    const model = useMemo(() => dataModelFromEvent(event), [event]);
+    if (!gate.ok) {
+        // The host owns the fallback render (branch 3 iframe / branch 1-4). We only
+        // signal; we never render a refused surface at medium trust.
+        onFallback?.(gate);
+        return null;
+    }
+    return _jsx(A2UISurface, { surface: gate.surface, root: gate.root, model: model });
+};
+//# sourceMappingURL=A2UIRenderer.js.map

package/dist/a2ui/A2UIRenderer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"A2UIRenderer.js","sourceRoot":"","sources":["../../src/a2ui/A2UIRenderer.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,OAAO,EAA2B,MAAM,OAAO,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAmB,MAAM,aAAa,CAAC;AAC9C,OAAO,EAIN,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,oBAAoB,EAAuB,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAwB3E,sEAAsE;AACtE,SAAS,UAAU,CACjB,IAAuB,EACvB,IAAoC;IAEpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7C,OAAO,IAAI,CAAC,QAAQ;SACjB,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;SACzB,MAAM,CAAC,CAAC,CAAC,EAA0B,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;AAC5D,CAAC;AAED,kFAAkF;AAClF,SAAS,UAAU,CACjB,IAAuB,EACvB,IAAoC,EACpC,KAAoB,EACpB,IAAiB;IAEjB,iEAAiE;IACjE,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAElB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CACjD,KAAC,WAAW,IAAgB,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,IAA3D,KAAK,CAAC,EAAE,CAAuD,CAClF,CAAC,CAAC;IAEH,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;YAC9C,OAAO,YAAG,SAAS,EAAC,yDAAyD,YAAE,IAAI,GAAK,CAAC;QAC3F,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;YAC/D,OAAO,aAAI,SAAS,EAAC,uCAAuC,YAAE,IAAI,GAAM,CAAC;QAC3E,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC7E,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YACjD,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,OAAO,cAAK,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,EAAC,uBAAuB,GAAG,CAAC;QACvE,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,uEAAuE;YACvE,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YACtF,OAAO,oCAAkB,SAAS,EAAC,+BAA+B,YAAE,IAAI,GAAQ,CAAC;QACnF,CAAC;QACD,KAAK,SAAS;YACZ,OAAO,KAAC,SAAS,IAAC,SAAS,EAAC,MAAM,GAAG,CAAC;QACxC,KAAK,KAAK;YACR,OAAO,cAAK,SAAS,EAAC,2CAA2C,YAAE,IAAI,GAAO,CAAC;QACjF,KAAK,QAAQ;YACX,OAAO,cAAK,SAAS,EAAC,qBAAqB,YAAE,IAAI,GAAO,CAAC;QAC3D,KAAK,MAAM;YACT,OAAO,cAAK,SAAS,EAAC,sCAAsC,YAAE,IAAI,GAAO,CAAC;QAC5E,KAAK,MAAM;YACT,OAAO,CACL,cAAK,SAAS,EAAC,gGAAgG,YAC5G,IAAI,GACD,CACP,CAAC;QACJ;YACE,iEAAiE;YACjE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,WAAW,GAKZ,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,4BAAG,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,GAAI,CAAC;AAE1F,gEAAgE;AAChE,SAAS,WAAW,CAAC,EACnB,OAAO,EACP,IAAI,EACJ,KAAK,GAKN;IACC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE;QACxB,MAAM,CAAC,GAAG,IAAI,GAAG,EAA6B,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,UAAU;YAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC;IACX,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACd,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,CACL,mCACqB,OAAO,CAAC,SAAS,IAAI,MAAM,gBACnC,QAAQ,EACnB,SAAS,EAAE,EAAE,CAAC,qBAAqB,CAAC,YAEnC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC,GACzC,CACP,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAA0B,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE;IACrF,MAAM,IAAI,GAAG,OAAO,CAClB,GAAG,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,EAC3D,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAClC,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAEhE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,4EAA4E;QAC5E,6DAA6D;QAC7D,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAC,WAAW,IAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,GAAI,CAAC;AAC/E,CAAC,CAAC"}

package/dist/a2ui/binding.d.ts

@@ -0,0 +1,46 @@
+/**
+ * A2UI data binding — resolve component-node prop values against the
+ * `dataModelUpdate` root, and build that root from a decoded TOON event.
+ *
+ * A prop value is either a literal (string / number / boolean, or the v0.8
+ * `{ literalString }` form) or a `{ path }` JSON-Pointer binding into the data
+ * model. Branch 2 binds the *decoded event* as the data-model root, so e.g.
+ * `{ "path": "/content" }` resolves to the event's content.
+ *
+ * Resolution is pure data lookup — no `eval`, no function execution (that would
+ * be client-defined behavior, which the gate already refuses).
+ */
+import { type NostrEvent, getTagValue } from '../types.js';
+import { type A2uiBoundValue, type A2uiDataModel } from './types.js';
+/**
+ * Build the A2UI `dataModelUpdate` root object from a decoded TOON event.
+ *
+ * The event's first-class fields are exposed at the root so templates can bind
+ * `{ path: "/content" }`, `{ path: "/pubkey" }`, `{ path: "/kind" }`, etc.; tags
+ * are exposed both raw (`/tags`) and indexed by name (`/tag/<name>` → first
+ * value) for ergonomic `{ path: "/tag/title" }`-style binds.
+ *
+ * NOTE: in production the dispatch hands branch 2 an already-decoded event
+ * (`core.decodeEventFromToon(event)`); this helper just projects that
+ * `NostrEvent` into the data-model shape. It deliberately does not import
+ * `@toon-protocol/core` — the views package stays browser-bundle-safe and the
+ * decode happens upstream (see #88 / the toon#36 resolution spike).
+ */
+export declare function dataModelFromEvent(event: NostrEvent): A2uiDataModel;
+/**
+ * Resolve a JSON Pointer (RFC 6901, e.g. `/content` or `/tag/title`) against the
+ * data model. Returns `undefined` for any segment that is missing.
+ */
+export declare function resolvePath(model: A2uiDataModel, pointer: string): unknown;
+/**
+ * Resolve a bound prop value to a concrete primitive. Literals pass through
+ * (including the v0.8 `{ literalString }` form); `{ path }` bindings resolve
+ * against the model.
+ */
+export declare function resolveValue(value: A2uiBoundValue | unknown, model: A2uiDataModel): unknown;
+/** Resolve a bound value and coerce it to a display string (never throws). */
+export declare function resolveText(value: unknown, model: A2uiDataModel): string;
+/** Read a string prop from a node by name (literal or binding), or `undefined`. */
+export declare function stringProp(node: Record<string, unknown>, name: string, model: A2uiDataModel): string | undefined;
+export { getTagValue };
+//# sourceMappingURL=binding.d.ts.map

package/dist/a2ui/binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.d.ts","sourceRoot":"","sources":["../../src/a2ui/binding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,KAAK,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAErE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,aAAa,CAcnE;AAOD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAY1E;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAY3F;AAED,8EAA8E;AAC9E,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,GAAG,MAAM,CAMxE;AAED,mFAAmF;AACnF,wBAAgB,UAAU,CACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,aAAa,GACnB,MAAM,GAAG,SAAS,CAIpB;AAED,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/dist/a2ui/binding.js

@@ -0,0 +1,111 @@
+/**
+ * A2UI data binding — resolve component-node prop values against the
+ * `dataModelUpdate` root, and build that root from a decoded TOON event.
+ *
+ * A prop value is either a literal (string / number / boolean, or the v0.8
+ * `{ literalString }` form) or a `{ path }` JSON-Pointer binding into the data
+ * model. Branch 2 binds the *decoded event* as the data-model root, so e.g.
+ * `{ "path": "/content" }` resolves to the event's content.
+ *
+ * Resolution is pure data lookup — no `eval`, no function execution (that would
+ * be client-defined behavior, which the gate already refuses).
+ */
+import { getTagValue } from '../types.js';
+import {} from './types.js';
+/**
+ * Build the A2UI `dataModelUpdate` root object from a decoded TOON event.
+ *
+ * The event's first-class fields are exposed at the root so templates can bind
+ * `{ path: "/content" }`, `{ path: "/pubkey" }`, `{ path: "/kind" }`, etc.; tags
+ * are exposed both raw (`/tags`) and indexed by name (`/tag/<name>` → first
+ * value) for ergonomic `{ path: "/tag/title" }`-style binds.
+ *
+ * NOTE: in production the dispatch hands branch 2 an already-decoded event
+ * (`core.decodeEventFromToon(event)`); this helper just projects that
+ * `NostrEvent` into the data-model shape. It deliberately does not import
+ * `@toon-protocol/core` — the views package stays browser-bundle-safe and the
+ * decode happens upstream (see #88 / the toon#36 resolution spike).
+ */
+export function dataModelFromEvent(event) {
+    const tag = {};
+    for (const t of event.tags) {
+        if (t[0] !== undefined && t[1] !== undefined && !(t[0] in tag))
+            tag[t[0]] = t[1];
+    }
+    return {
+        id: event.id,
+        pubkey: event.pubkey,
+        created_at: event.created_at,
+        kind: event.kind,
+        content: event.content,
+        tags: event.tags,
+        tag,
+    };
+}
+/** Type guard: a `{ path }` JSON-Pointer binding. */
+function isPathBinding(v) {
+    return typeof v === 'object' && v !== null && typeof v.path === 'string';
+}
+/**
+ * Resolve a JSON Pointer (RFC 6901, e.g. `/content` or `/tag/title`) against the
+ * data model. Returns `undefined` for any segment that is missing.
+ */
+export function resolvePath(model, pointer) {
+    if (pointer === '' || pointer === '/')
+        return model;
+    const segments = pointer
+        .replace(/^\//, '')
+        .split('/')
+        .map((s) => s.replace(/~1/g, '/').replace(/~0/g, '~'));
+    let cur = model;
+    for (const seg of segments) {
+        if (cur == null || typeof cur !== 'object')
+            return undefined;
+        cur = cur[seg];
+    }
+    return cur;
+}
+/**
+ * Resolve a bound prop value to a concrete primitive. Literals pass through
+ * (including the v0.8 `{ literalString }` form); `{ path }` bindings resolve
+ * against the model.
+ */
+export function resolveValue(value, model) {
+    if (value === null)
+        return null;
+    const t = typeof value;
+    if (t === 'string' || t === 'number' || t === 'boolean')
+        return value;
+    if (isPathBinding(value))
+        return resolvePath(model, value.path);
+    if (t === 'object') {
+        const obj = value;
+        if ('literalString' in obj)
+            return obj['literalString'];
+        if ('literalNumber' in obj)
+            return obj['literalNumber'];
+        if ('literalBoolean' in obj)
+            return obj['literalBoolean'];
+    }
+    return value;
+}
+/** Resolve a bound value and coerce it to a display string (never throws). */
+export function resolveText(value, model) {
+    const resolved = resolveValue(value, model);
+    if (resolved == null)
+        return '';
+    if (typeof resolved === 'string')
+        return resolved;
+    if (typeof resolved === 'number' || typeof resolved === 'boolean')
+        return String(resolved);
+    return JSON.stringify(resolved);
+}
+/** Read a string prop from a node by name (literal or binding), or `undefined`. */
+export function stringProp(node, name, model) {
+    if (!(name in node) || node[name] === undefined)
+        return undefined;
+    const resolved = resolveValue(node[name], model);
+    return typeof resolved === 'string' ? resolved : resolved == null ? undefined : String(resolved);
+}
+export { getTagValue };
+//# sourceMappingURL=binding.js.map

package/dist/a2ui/binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.js","sourceRoot":"","sources":["../../src/a2ui/binding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAmB,WAAW,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAA2C,MAAM,YAAY,CAAC;AAErE;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAiB;IAClD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG;KACJ,CAAC;AACJ,CAAC;AAED,qDAAqD;AACrD,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,OAAQ,CAAwB,CAAC,IAAI,KAAK,QAAQ,CAAC;AACnG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAoB,EAAE,OAAe;IAC/D,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,QAAQ,GAAG,OAAO;SACrB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAClB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACzD,IAAI,GAAG,GAAY,KAAK,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC7D,GAAG,GAAI,GAA+B,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,KAA+B,EAAE,KAAoB;IAChF,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,CAAC,GAAG,OAAO,KAAK,CAAC;IACvB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtE,IAAI,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,IAAI,eAAe,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC,eAAe,CAAC,CAAC;QACxD,IAAI,eAAe,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC,eAAe,CAAC,CAAC;QACxD,IAAI,gBAAgB,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,KAAc,EAAE,KAAoB;IAC9D,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5C,IAAI,QAAQ,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAChC,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAClD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3F,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,UAAU,CACxB,IAA6B,EAC7B,IAAY,EACZ,KAAoB;IAEpB,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IACjD,OAAO,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACnG,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/dist/a2ui/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Branch 2 — A2UI declarative renderer (medium trust) for the NIP-on-TOON render
+ * trust gradient (toon-meta#58, toon-client#89).
+ *
+ * Renders an A2UI `surfaceUpdate` template bound to a decoded TOON event
+ * (`dataModelUpdate`) using the client's own audited "Basic" catalog — never
+ * provider code. The standard-catalog-only gate ({@link validateA2uiRenderer})
+ * refuses custom components / behavior and signals a drop to branch 3.
+ *
+ * The React renderer (`A2UIRenderer`) is part of the views *app bundle* (React),
+ * not the Node barrel, so it is exported from here rather than `src/index.ts`.
+ */
+export { A2UIRenderer, type A2UIRendererProps } from './A2UIRenderer.js';
+export { validateA2uiRenderer, readA2uiVersion, type A2uiGateResult, type A2uiGatePass, type A2uiGateRefuse, type A2uiFallbackBranch, } from './validate.js';
+export { dataModelFromEvent, resolvePath, resolveValue } from './binding.js';
+export { A2UI_BASIC_CATALOG, A2UI_BASIC_CATALOG_SET, SUPPORTED_A2UI_VERSION, SUPPORTED_A2UI_VERSIONS, type A2uiBasicComponent, type A2uiComponentNode, type A2uiSurfaceUpdate, type A2uiDataModel, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/a2ui/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/a2ui/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,kBAAkB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,aAAa,GACnB,MAAM,YAAY,CAAC"}

package/dist/a2ui/index.js

@@ -0,0 +1,17 @@
+/**
+ * Branch 2 — A2UI declarative renderer (medium trust) for the NIP-on-TOON render
+ * trust gradient (toon-meta#58, toon-client#89).
+ *
+ * Renders an A2UI `surfaceUpdate` template bound to a decoded TOON event
+ * (`dataModelUpdate`) using the client's own audited "Basic" catalog — never
+ * provider code. The standard-catalog-only gate ({@link validateA2uiRenderer})
+ * refuses custom components / behavior and signals a drop to branch 3.
+ *
+ * The React renderer (`A2UIRenderer`) is part of the views *app bundle* (React),
+ * not the Node barrel, so it is exported from here rather than `src/index.ts`.
+ */
+export { A2UIRenderer } from './A2UIRenderer.js';
+export { validateA2uiRenderer, readA2uiVersion, } from './validate.js';
+export { dataModelFromEvent, resolvePath, resolveValue } from './binding.js';
+export { A2UI_BASIC_CATALOG, A2UI_BASIC_CATALOG_SET, SUPPORTED_A2UI_VERSION, SUPPORTED_A2UI_VERSIONS, } from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/a2ui/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/a2ui/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAA0B,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACL,oBAAoB,EACpB,eAAe,GAKhB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,GAKxB,MAAM,YAAY,CAAC"}

package/dist/a2ui/types.d.ts

@@ -0,0 +1,101 @@
+/**
+ * A2UI message + catalog types for branch 2 of the NIP-on-TOON render trust
+ * gradient (toon-meta#58, toon-client#89).
+ *
+ * Branch 2 renders an **unknown** Nostr kind through the client's *own audited*
+ * A2UI catalog at MEDIUM trust — never provider code. The binding convention
+ * (spec §"Branch 2 — A2UI binding convention"):
+ *
+ *   - the `kind:31036` renderer's `content` is the A2UI **`surfaceUpdate`** — the
+ *     durable template stored once on the renderer event, and
+ *   - the decoded TOON event (`core.decodeEventFromToon` → NostrEvent) is fed in
+ *     as the **`dataModelUpdate`** — the data bound into the template.
+ *
+ * These types model the **v0.8-flavoured** A2UI envelope the spec/issue#89 name
+ * (`surfaceUpdate` / `dataModelUpdate` / `beginRendering`) using A2UI v0.9's
+ * *flattened* component-node shape (`{ id, component: "<Type>", ...props }`),
+ * which is what the catalog gate validates. We model only what branch 2 needs;
+ * the wider A2UI surface (createSurface/theme/streaming, client-defined
+ * functions) is intentionally **out of scope** here — see the deferral notes.
+ *
+ * Standard-catalog-only invariant (critical): only the A2UI **"Basic"** catalog
+ * is permitted at medium trust. Any custom/non-standard component reference, or
+ * any client-defined behavior, must REFUSE to render here and signal a drop to
+ * branch 3 (sandboxed mcp-ui). Enforcement lives in `validate.ts`.
+ */
+/**
+ * The A2UI **Basic** (standard) catalog component types we support at medium
+ * trust. Deliberately a *curated, presentational* subset of the published Basic
+ * catalog: static layout + content components that are safe to render from
+ * untrusted template data with no client-defined behavior.
+ *
+ * Components in the published Basic catalog that imply behavior / interactivity
+ * or client-defined functions (Button actions, TextField/CheckBox/Slider/
+ * ChoicePicker/DateTimeInput inputs, Modal, Tabs, Video/AudioPlayer) are
+ * intentionally NOT in this set: branch 2 is a *read-only* binding of decoded
+ * event data into a template. A surface that references them is treated as
+ * carrying custom behavior and is dropped to branch 3. (Deferred — see #90.)
+ */
+export declare const A2UI_BASIC_CATALOG: readonly ["Text", "Heading", "Image", "Icon", "Row", "Column", "List", "Card", "Divider"];
+/** A supported Basic-catalog component type. */
+export type A2uiBasicComponent = (typeof A2UI_BASIC_CATALOG)[number];
+/** O(1) membership set for the catalog gate. */
+export declare const A2UI_BASIC_CATALOG_SET: ReadonlySet<string>;
+/**
+ * The A2UI version this renderer implements. The `["a2ui", "<version>"]` tag on
+ * the `kind:31036` renderer is checked against this; an unsupported version
+ * falls through gracefully (the dispatch can route to branch 1/4). We accept the
+ * v0.8 binding-convention vocabulary the spec names.
+ */
+export declare const SUPPORTED_A2UI_VERSION = "v0.8";
+/**
+ * Versions this renderer accepts. A renderer with no `["a2ui", …]` tag is
+ * treated as the supported default (the `m`-tag already selected A2UI).
+ */
+export declare const SUPPORTED_A2UI_VERSIONS: ReadonlySet<string>;
+/**
+ * A data-bound property value: either a literal, or a `{ path }` JSON-Pointer
+ * binding into the `dataModelUpdate` root. We accept both the v0.9 short form
+ * (`{ path: "/a/b" }`) and the v0.8 long form (`{ literalString: "…" }`).
+ */
+export type A2uiBoundValue = string | number | boolean | {
+    path: string;
+} | {
+    literalString: string;
+} | {
+    literalNumber: number;
+} | {
+    literalBoolean: boolean;
+};
+/**
+ * A single A2UI component node (flattened form). `component` names the type;
+ * `children` references child node ids; all other keys are component props that
+ * may carry literals or `{ path }` bindings.
+ */
+export interface A2uiComponentNode {
+    /** Unique node id. The tree root has `id: "root"` by convention. */
+    id: string;
+    /** The component type name (validated against the Basic catalog). */
+    component: string;
+    /** Child node ids (for container components: Row / Column / List / Card). */
+    children?: string[];
+    /** Remaining props (literals or `{ path }` bindings). */
+    [prop: string]: unknown;
+}
+/** The `surfaceUpdate` carried in the `kind:31036` renderer `content`. */
+export interface A2uiSurfaceUpdate {
+    surfaceId?: string;
+    /** The flat list of component nodes making up the template. */
+    components: A2uiComponentNode[];
+    /**
+     * Optional explicit root id (v0.8 `beginRendering.root`). Defaults to the node
+     * with `id: "root"`, else the first component.
+     */
+    root?: string;
+}
+/**
+ * The `dataModelUpdate` — the root data object bound into the template. Branch 2
+ * feeds the decoded TOON event here (see {@link dataModelFromEvent}).
+ */
+export type A2uiDataModel = Record<string, unknown>;
+//# sourceMappingURL=types.d.ts.map

package/dist/a2ui/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/a2ui/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,kBAAkB,2FAUrB,CAAC;AAEX,gDAAgD;AAChD,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAErE,gDAAgD;AAChD,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAA+B,CAAC;AAEvF;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAE7C;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAAqC,CAAC;AAE9F;;;;GAIG;AACH,MAAM,MAAM,cAAc,GACtB,MAAM,GACN,MAAM,GACN,OAAO,GACP;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,aAAa,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,aAAa,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,cAAc,EAAE,OAAO,CAAA;CAAE,CAAC;AAEhC;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,oEAAoE;IACpE,EAAE,EAAE,MAAM,CAAC;IACX,qEAAqE;IACrE,SAAS,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,yDAAyD;IACzD,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;CACzB;AAED,0EAA0E;AAC1E,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC"}

package/dist/a2ui/types.js

@@ -0,0 +1,64 @@
+/**
+ * A2UI message + catalog types for branch 2 of the NIP-on-TOON render trust
+ * gradient (toon-meta#58, toon-client#89).
+ *
+ * Branch 2 renders an **unknown** Nostr kind through the client's *own audited*
+ * A2UI catalog at MEDIUM trust — never provider code. The binding convention
+ * (spec §"Branch 2 — A2UI binding convention"):
+ *
+ *   - the `kind:31036` renderer's `content` is the A2UI **`surfaceUpdate`** — the
+ *     durable template stored once on the renderer event, and
+ *   - the decoded TOON event (`core.decodeEventFromToon` → NostrEvent) is fed in
+ *     as the **`dataModelUpdate`** — the data bound into the template.
+ *
+ * These types model the **v0.8-flavoured** A2UI envelope the spec/issue#89 name
+ * (`surfaceUpdate` / `dataModelUpdate` / `beginRendering`) using A2UI v0.9's
+ * *flattened* component-node shape (`{ id, component: "<Type>", ...props }`),
+ * which is what the catalog gate validates. We model only what branch 2 needs;
+ * the wider A2UI surface (createSurface/theme/streaming, client-defined
+ * functions) is intentionally **out of scope** here — see the deferral notes.
+ *
+ * Standard-catalog-only invariant (critical): only the A2UI **"Basic"** catalog
+ * is permitted at medium trust. Any custom/non-standard component reference, or
+ * any client-defined behavior, must REFUSE to render here and signal a drop to
+ * branch 3 (sandboxed mcp-ui). Enforcement lives in `validate.ts`.
+ */
+/**
+ * The A2UI **Basic** (standard) catalog component types we support at medium
+ * trust. Deliberately a *curated, presentational* subset of the published Basic
+ * catalog: static layout + content components that are safe to render from
+ * untrusted template data with no client-defined behavior.
+ *
+ * Components in the published Basic catalog that imply behavior / interactivity
+ * or client-defined functions (Button actions, TextField/CheckBox/Slider/
+ * ChoicePicker/DateTimeInput inputs, Modal, Tabs, Video/AudioPlayer) are
+ * intentionally NOT in this set: branch 2 is a *read-only* binding of decoded
+ * event data into a template. A surface that references them is treated as
+ * carrying custom behavior and is dropped to branch 3. (Deferred — see #90.)
+ */
+export const A2UI_BASIC_CATALOG = [
+    'Text',
+    'Heading',
+    'Image',
+    'Icon',
+    'Row',
+    'Column',
+    'List',
+    'Card',
+    'Divider',
+];
+/** O(1) membership set for the catalog gate. */
+export const A2UI_BASIC_CATALOG_SET = new Set(A2UI_BASIC_CATALOG);
+/**
+ * The A2UI version this renderer implements. The `["a2ui", "<version>"]` tag on
+ * the `kind:31036` renderer is checked against this; an unsupported version
+ * falls through gracefully (the dispatch can route to branch 1/4). We accept the
+ * v0.8 binding-convention vocabulary the spec names.
+ */
+export const SUPPORTED_A2UI_VERSION = 'v0.8';
+/**
+ * Versions this renderer accepts. A renderer with no `["a2ui", …]` tag is
+ * treated as the supported default (the `m`-tag already selected A2UI).
+ */
+export const SUPPORTED_A2UI_VERSIONS = new Set([SUPPORTED_A2UI_VERSION]);
+//# sourceMappingURL=types.js.map

package/dist/a2ui/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/a2ui/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;IACN,KAAK;IACL,QAAQ;IACR,MAAM;IACN,MAAM;IACN,SAAS;CACD,CAAC;AAKX,gDAAgD;AAChD,MAAM,CAAC,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAEvF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAE7C;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC"}

package/dist/a2ui/validate.d.ts

@@ -0,0 +1,55 @@
+/**
+ * The standard-catalog-only validation gate for branch 2 (A2UI, medium trust).
+ *
+ * This is the security boundary of the A2UI branch. Medium trust is reserved for
+ * renderers that stay ENTIRELY within the A2UI "Basic" standard catalog and
+ * carry no client-defined behavior. Anything else must be REFUSED here and
+ * dropped to branch 3 (the sandboxed mcp-ui path) — never rendered at medium
+ * trust against the client's own primitives.
+ *
+ * The gate returns a discriminated {@link A2uiGateResult}:
+ *   - `{ ok: true, surface, root }`            → render at medium trust, or
+ *   - `{ ok: false, fallback: 'mcp-ui', … }`   → drop to branch 3 (custom comp /
+ *                                                 behavior), or
+ *   - `{ ok: false, fallback: 'native', … }`   → unsupported A2UI version /
+ *                                                 unparseable; let the dispatch
+ *                                                 fall through (branch 1/4).
+ *
+ * The renderer NEVER renders a surface the gate refused.
+ */
+import { type A2uiSurfaceUpdate } from './types.js';
+/** Where a refusal sends the event next. */
+export type A2uiFallbackBranch = 'mcp-ui' | 'native';
+/** A passed gate: the parsed surface + resolved root id, safe to render. */
+export interface A2uiGatePass {
+    ok: true;
+    surface: A2uiSurfaceUpdate;
+    /** Resolved root node id (`"root"` by convention, else explicit/first). */
+    root: string;
+}
+/**
+ * A refused gate. `fallback` names the branch the dispatch should drop to:
+ * `'mcp-ui'` for the standard-catalog-only invariant (custom component or custom
+ * behavior present), `'native'` for an unsupported/unparseable renderer that
+ * should fall through to branch 1/4.
+ */
+export interface A2uiGateRefuse {
+    ok: false;
+    fallback: A2uiFallbackBranch;
+    /** Stable machine reason, safe to log. */
+    reason: 'unsupported-version' | 'unparseable-surface' | 'empty-surface' | 'custom-component' | 'custom-behavior' | 'missing-root';
+    /** Human-readable detail (e.g. the offending component name). */
+    detail: string;
+}
+export type A2uiGateResult = A2uiGatePass | A2uiGateRefuse;
+/** Read the `["a2ui", "<version>"]` tag value, or `undefined`. */
+export declare function readA2uiVersion(tags: string[][]): string | undefined;
+/**
+ * Validate the A2UI renderer for branch 2.
+ *
+ * @param content   the `kind:31036` renderer `content` (the JSON `surfaceUpdate`)
+ * @param tags      the renderer event tags (read for the `a2ui` version tag)
+ * @returns a {@link A2uiGateResult} — pass (render) or refuse (fall back).
+ */
+export declare function validateA2uiRenderer(content: string, tags: string[][]): A2uiGateResult;
+//# sourceMappingURL=validate.d.ts.map

package/dist/a2ui/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/a2ui/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,YAAY,CAAC;AAEpB,4CAA4C;AAC5C,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAErD,4EAA4E;AAC5E,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,iBAAiB,CAAC;IAC3B,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,KAAK,CAAC;IACV,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,0CAA0C;IAC1C,MAAM,EACF,qBAAqB,GACrB,qBAAqB,GACrB,eAAe,GACf,kBAAkB,GAClB,iBAAiB,GACjB,cAAc,CAAC;IACnB,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,cAAc,CAAC;AAU3D,kEAAkE;AAClE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,GAAG,SAAS,CAGpE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,cAAc,CAqEtF"}