@ulearning/ai-sdk 0.0.0-stage → 1.0.0-next.0

package/dist/mcp-apps/app-frame.js

@@ -0,0 +1,213 @@
+"use client";
+import { useIsomorphicLayoutEffect } from "../utils/useIsomorphicLayoutEffect.js";
+import { createMcpAppBridge } from "./bridge.js";
+import { SandboxHost } from "../sandbox-host/SandboxHost.js";
+import { applyMcpAppCsp } from "./csp.js";
+import { defineComponent, h, shallowRef } from "vue";
+import { isRecord } from "@ulearning/ai-core/internal";
+// src/mcp-apps/app-frame.tsx
+const DEFAULT_PRODUCT = "assistant-ui-mcp-app";
+const INIT_TIMEOUT_MS = 5e3;
+const DEFAULT_MAX_HEIGHT = 800;
+const isPlainObject = (value) => {
+	if (!isRecord(value)) return false;
+	const prototype = Object.getPrototypeOf(value);
+	return prototype === null || prototype === Object.prototype;
+};
+const isSameHostContext = (a, b, depth = 0) => {
+	if (Object.is(a, b)) return true;
+	if (depth > 100) return false;
+	if (Array.isArray(a) || Array.isArray(b)) {
+		if (!Array.isArray(a) || !Array.isArray(b) || a.length !== b.length) return false;
+		for (let i = 0; i < a.length; i++) if (!isSameHostContext(a[i], b[i], depth + 1)) return false;
+		return true;
+	}
+	if (!isPlainObject(a) || !isPlainObject(b)) return false;
+	const aKeys = Object.keys(a);
+	return aKeys.length === Object.keys(b).length && aKeys.every((key) => Object.hasOwn(b, key) && isSameHostContext(a[key], b[key], depth + 1));
+};
+function useBridgeNotify(readValue, bridgeRef, widgetReadyRef, pendingRef, lastSentRef, notify, isEqual = Object.is) {
+	useIsomorphicLayoutEffect(() => {
+		const value = readValue();
+		if (!bridgeRef.value) return;
+		if (value === void 0 || isEqual(lastSentRef.value, value)) {
+			pendingRef.value = void 0;
+			return;
+		}
+		if (!widgetReadyRef.value) {
+			pendingRef.value = value;
+			return;
+		}
+		notify(bridgeRef.value, value);
+		lastSentRef.value = value;
+	}, () => [readValue()]);
+}
+function buildLiveHandlers(initial, liveRef, lifecycle) {
+	const live = () => liveRef.value.handlers;
+	const has = (key) => initial?.[key] !== void 0;
+	const out = {};
+	Object.defineProperty(out, "allowedTools", {
+		get: () => live()?.allowedTools,
+		enumerable: true,
+		configurable: true
+	});
+	const liveCall = (key) => ((p) => {
+		const fn = live()?.[key];
+		if (!fn) throw new Error(`${key} handler is no longer available`);
+		return fn(p);
+	});
+	if (has("callTool")) out.callTool = liveCall("callTool");
+	if (has("readResource")) out.readResource = liveCall("readResource");
+	if (has("listResources")) out.listResources = liveCall("listResources");
+	if (has("openLink")) out.openLink = liveCall("openLink");
+	if (has("sendMessage")) out.sendMessage = liveCall("sendMessage");
+	if (has("updateModelContext")) out.updateModelContext = liveCall("updateModelContext");
+	if (has("requestDisplayMode")) out.requestDisplayMode = liveCall("requestDisplayMode");
+	out.onSizeChange = (p) => {
+		lifecycle.onSizeChange(p);
+		live()?.onSizeChange?.(p);
+	};
+	out.onInitialized = (params) => {
+		lifecycle.onInitialized();
+		live()?.onInitialized?.(params);
+	};
+	out.onRequestTeardown = (p) => live()?.onRequestTeardown?.(p);
+	out.onLog = (p) => live()?.onLog?.(p);
+	out.onError = (e) => live()?.onError?.(e);
+	return out;
+}
+const McpAppFrame = defineComponent(function McpAppFrame(props) {
+	const bridgeRef = shallowRef(null);
+	const lastSentInputRef = shallowRef(void 0);
+	const lastSentOutputRef = shallowRef(void 0);
+	const lastSentHostContextRef = shallowRef(void 0);
+	const widgetReadyRef = shallowRef(false);
+	const pendingInputRef = shallowRef(void 0);
+	const pendingOutputRef = shallowRef(void 0);
+	const pendingHostContextRef = shallowRef(void 0);
+	const liveRef = shallowRef({
+		handlers: props.handlers,
+		hostInfo: props.hostInfo,
+		hostContext: props.hostContext,
+		input: props.input,
+		output: props.output
+	});
+	useIsomorphicLayoutEffect(() => {
+		liveRef.value = {
+			handlers: props.handlers,
+			hostInfo: props.hostInfo,
+			hostContext: props.hostContext,
+			input: props.input,
+			output: props.output
+		};
+	}, () => [
+		props.handlers,
+		props.hostInfo,
+		props.hostContext,
+		props.input,
+		props.output
+	]);
+	const createBridge = (frame, host) => {
+		const current = liveRef.value;
+		let initTimeoutId = null;
+		const flushPending = () => {
+			if (widgetReadyRef.value) return;
+			widgetReadyRef.value = true;
+			const b = bridgeRef.value;
+			if (!b) return;
+			if (pendingInputRef.value !== void 0) {
+				b.notifyToolInput(pendingInputRef.value);
+				lastSentInputRef.value = pendingInputRef.value;
+				pendingInputRef.value = void 0;
+			}
+			if (pendingOutputRef.value !== void 0) {
+				b.notifyToolResult(pendingOutputRef.value);
+				lastSentOutputRef.value = pendingOutputRef.value;
+				pendingOutputRef.value = void 0;
+			}
+			if (pendingHostContextRef.value !== void 0) {
+				b.notifyHostContextChanged(pendingHostContextRef.value);
+				lastSentHostContextRef.value = pendingHostContextRef.value;
+				pendingHostContextRef.value = void 0;
+			}
+		};
+		const wrappedHandlers = buildLiveHandlers(current.handlers, liveRef, {
+			onInitialized: () => {
+				if (initTimeoutId !== null) {
+					clearTimeout(initTimeoutId);
+					initTimeoutId = null;
+				}
+				flushPending();
+			},
+			onSizeChange: (p) => {
+				if (p.height != null) host.setHeight(p.height);
+			}
+		});
+		initTimeoutId = setTimeout(() => {
+			initTimeoutId = null;
+			flushPending();
+		}, INIT_TIMEOUT_MS);
+		const bridge = createMcpAppBridge({
+			frame,
+			handlers: wrappedHandlers,
+			hostInfo: current.hostInfo,
+			hostContext: current.hostContext
+		});
+		bridgeRef.value = bridge;
+		if (current.input !== void 0) pendingInputRef.value = current.input;
+		if (current.output !== void 0) pendingOutputRef.value = current.output;
+		lastSentHostContextRef.value = current.hostContext ?? {};
+		return {
+			onMessage: bridge.onMessage,
+			dispose: () => {
+				if (initTimeoutId !== null) {
+					clearTimeout(initTimeoutId);
+					initTimeoutId = null;
+				}
+				bridge.dispose();
+				bridgeRef.value = null;
+				lastSentInputRef.value = void 0;
+				lastSentOutputRef.value = void 0;
+				lastSentHostContextRef.value = void 0;
+				widgetReadyRef.value = false;
+				pendingInputRef.value = void 0;
+				pendingOutputRef.value = void 0;
+				pendingHostContextRef.value = void 0;
+			}
+		};
+	};
+	useBridgeNotify(() => props.input, bridgeRef, widgetReadyRef, pendingInputRef, lastSentInputRef, (b, v) => b.notifyToolInput(v));
+	useBridgeNotify(() => props.output, bridgeRef, widgetReadyRef, pendingOutputRef, lastSentOutputRef, (b, v) => b.notifyToolResult(v));
+	useBridgeNotify(() => props.hostContext, bridgeRef, widgetReadyRef, pendingHostContextRef, lastSentHostContextRef, (b, v) => b.notifyHostContextChanged(v), isSameHostContext);
+	return () => h(SandboxHost, {
+		content: { html: applyMcpAppCsp(props.resource.html, props.resource.meta?.csp) },
+		contentKey: props.app.serverId ? `${props.app.serverId} ${props.resource.uri}` : props.resource.uri,
+		sandbox: {
+			...props.sandbox,
+			product: props.sandbox?.product ?? DEFAULT_PRODUCT
+		},
+		maxHeight: props.maxHeight ?? DEFAULT_MAX_HEIGHT,
+		createBridge,
+		onError: (error) => liveRef.value.handlers?.onError?.(error),
+		containerProps: {
+			"data-mcp-app-resource": props.app.resourceUri,
+			"data-mcp-app-prefers-border": props.resource.meta?.prefersBorder ? "" : void 0
+		}
+	});
+}, {
+	name: "McpAppFrame",
+	props: [
+		"app",
+		"resource",
+		"input",
+		"output",
+		"sandbox",
+		"handlers",
+		"hostInfo",
+		"hostContext",
+		"maxHeight"
+	]
+});
+export { McpAppFrame };
+
+//# sourceMappingURL=app-frame.js.map

package/dist/mcp-apps/app-frame.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-frame.js","names":["defineComponent","h","shallowRef","ShallowRef","useIsomorphicLayoutEffect","McpAppBridge","createMcpAppBridge","SandboxHost","SandboxBridge","SandboxHostApi","SandboxHostFrame","McpAppBridgeHandlers","McpAppFrameProps","McpAppHostContext","isRecord","applyMcpAppCsp","DEFAULT_PRODUCT","INIT_TIMEOUT_MS","DEFAULT_MAX_HEIGHT","isPlainObject","value","Record","prototype","Object","getPrototypeOf","isSameHostContext","a","b","depth","is","Array","isArray","length","i","aKeys","keys","every","key","hasOwn","useBridgeNotify","readValue","T","bridgeRef","widgetReadyRef","pendingRef","lastSentRef","notify","bridge","v","isEqual","sent","next","undefined","LiveSnapshot","handlers","hostInfo","hostContext","input","output","FrameLifecycle","onInitialized","onSizeChange","params","width","height","buildLiveHandlers","initial","liveRef","lifecycle","live","has","K","out","defineProperty","get","allowedTools","enumerable","configurable","liveCall","NonNullable","p","fn","Error","callTool","readResource","listResources","openLink","sendMessage","updateModelContext","requestDisplayMode","onRequestTeardown","onLog","onError","e","McpAppFrame","props","lastSentInputRef","lastSentOutputRef","lastSentHostContextRef","pendingInputRef","pendingOutputRef","pendingHostContextRef","createBridge","frame","host","current","initTimeoutId","ReturnType","setTimeout","flushPending","notifyToolInput","notifyToolResult","notifyHostContextChanged","wrappedHandlers","clearTimeout","setHeight","onMessage","dispose","content","html","resource","meta","csp","contentKey","app","serverId","uri","sandbox","product","maxHeight","error","containerProps","resourceUri","prefersBorder","name"],"sources":["../../src/mcp-apps/app-frame.tsx"],"sourcesContent":["\"use client\";\n\nimport { defineComponent, h, shallowRef, type ShallowRef } from \"vue\";\nimport { useIsomorphicLayoutEffect } from \"../utils/useIsomorphicLayoutEffect\";\nimport { type McpAppBridge, createMcpAppBridge } from \"./bridge\";\nimport {\n  SandboxHost,\n  type SandboxBridge,\n  type SandboxHostApi,\n  type SandboxHostFrame,\n} from \"../sandbox-host/SandboxHost\";\nimport type {\n  McpAppBridgeHandlers,\n  McpAppFrameProps,\n  McpAppHostContext,\n} from \"./types\";\nimport { isRecord } from \"@ulearning/ai-core/internal\";\nimport { applyMcpAppCsp } from \"./csp\";\n\nconst DEFAULT_PRODUCT = \"assistant-ui-mcp-app\";\nconst INIT_TIMEOUT_MS = 5000;\nconst DEFAULT_MAX_HEIGHT = 800;\n\n// Only a plain object can be compared by its own keys. Structured clone carries\n// a Date, Map, or class instance to the widget intact, and those expose no\n// enumerable keys, so walking them would report two different values as equal.\nconst isPlainObject = (value: unknown): value is Record<string, unknown> => {\n  if (!isRecord(value)) return false;\n  const prototype = Object.getPrototypeOf(value);\n  return prototype === null || prototype === Object.prototype;\n};\n\n// Hosts commonly rebuild an equal context object on every render, and the\n// widget cannot tell a repeated notification apart from a real change. The\n// open index signature on McpAppHostContext admits values JSON rejects (an\n// undefined property value is enough), so leaves the walk cannot compare fall\n// back to identity rather than failing the whole comparison.\nconst isSameHostContext = (a: unknown, b: unknown, depth = 0): boolean => {\n  if (Object.is(a, b)) return true;\n  if (depth > 100) return false;\n  if (Array.isArray(a) || Array.isArray(b)) {\n    if (!Array.isArray(a) || !Array.isArray(b) || a.length !== b.length)\n      return false;\n    for (let i = 0; i < a.length; i++) {\n      if (!isSameHostContext(a[i], b[i], depth + 1)) return false;\n    }\n    return true;\n  }\n  if (!isPlainObject(a) || !isPlainObject(b)) return false;\n  const aKeys = Object.keys(a);\n  return (\n    aKeys.length === Object.keys(b).length &&\n    aKeys.every(\n      (key) =>\n        Object.hasOwn(b, key) && isSameHostContext(a[key], b[key], depth + 1),\n    )\n  );\n};\n\nfunction useBridgeNotify<T>(\n  readValue: () => T | undefined,\n  bridgeRef: ShallowRef<McpAppBridge | null>,\n  widgetReadyRef: ShallowRef<boolean>,\n  pendingRef: ShallowRef<T | undefined>,\n  lastSentRef: ShallowRef<T | undefined>,\n  notify: (bridge: McpAppBridge, v: T) => void,\n  isEqual: (sent: T | undefined, next: T) => boolean = Object.is,\n) {\n  useIsomorphicLayoutEffect(\n    () => {\n      const value = readValue();\n      if (!bridgeRef.value) return;\n      // Nothing to deliver, either because there is no value or because the\n      // widget already holds it; a queued value here is superseded and would\n      // otherwise flush after initialization as a stale update.\n      if (value === undefined || isEqual(lastSentRef.value, value)) {\n        pendingRef.value = undefined;\n        return;\n      }\n      if (!widgetReadyRef.value) {\n        pendingRef.value = value;\n        return;\n      }\n      notify(bridgeRef.value, value);\n      lastSentRef.value = value;\n    },\n    () => [readValue()],\n  );\n}\n\ntype LiveSnapshot = {\n  handlers: McpAppBridgeHandlers | undefined;\n  hostInfo: McpAppFrameProps[\"hostInfo\"];\n  hostContext: McpAppFrameProps[\"hostContext\"];\n  input: unknown;\n  output: unknown;\n};\n\ntype FrameLifecycle = {\n  onInitialized: () => void;\n  onSizeChange: (params: { width?: number; height?: number }) => void;\n};\n\n// Proxy each per-call handler through liveRef so the bridge always dispatches\n// to the latest handler reference (e.g. inline callbacks closing over state).\n// Capability presence is snapshot at mount: a handler added later requires a\n// remount (keyed on resource URI) to expose the capability to the widget.\n// allowedTools is the exception: it is never advertised in the ui/initialize\n// response, so it stays a live getter, which means this object must reach the\n// bridge uncopied and the frame passes its lifecycle work in rather than\n// wrapping the result.\nfunction buildLiveHandlers(\n  initial: McpAppBridgeHandlers | undefined,\n  liveRef: { readonly value: LiveSnapshot },\n  lifecycle: FrameLifecycle,\n): McpAppBridgeHandlers {\n  const live = () => liveRef.value.handlers;\n  const has = <K extends keyof McpAppBridgeHandlers>(key: K) =>\n    initial?.[key] !== undefined;\n  const out: McpAppBridgeHandlers = {};\n  Object.defineProperty(out, \"allowedTools\", {\n    get: () => live()?.allowedTools,\n    enumerable: true,\n    configurable: true,\n  });\n  const liveCall = <K extends keyof McpAppBridgeHandlers>(\n    key: K,\n  ): NonNullable<McpAppBridgeHandlers[K]> =>\n    ((p: unknown) => {\n      const fn = live()?.[key] as ((p: unknown) => unknown) | undefined;\n      if (!fn) {\n        throw new Error(`${key} handler is no longer available`);\n      }\n      return fn(p);\n    }) as NonNullable<McpAppBridgeHandlers[K]>;\n  if (has(\"callTool\")) out.callTool = liveCall(\"callTool\");\n  if (has(\"readResource\")) out.readResource = liveCall(\"readResource\");\n  if (has(\"listResources\")) out.listResources = liveCall(\"listResources\");\n  if (has(\"openLink\")) out.openLink = liveCall(\"openLink\");\n  if (has(\"sendMessage\")) out.sendMessage = liveCall(\"sendMessage\");\n  if (has(\"updateModelContext\"))\n    out.updateModelContext = liveCall(\"updateModelContext\");\n  if (has(\"requestDisplayMode\"))\n    out.requestDisplayMode = liveCall(\"requestDisplayMode\");\n  out.onSizeChange = (p) => {\n    lifecycle.onSizeChange(p);\n    live()?.onSizeChange?.(p);\n  };\n  out.onInitialized = (params) => {\n    lifecycle.onInitialized();\n    live()?.onInitialized?.(params);\n  };\n  out.onRequestTeardown = (p) => live()?.onRequestTeardown?.(p);\n  out.onLog = (p) => live()?.onLog?.(p);\n  out.onError = (e) => live()?.onError?.(e);\n  return out;\n}\n\nexport const McpAppFrame = defineComponent(\n  function McpAppFrame(props: McpAppFrameProps) {\n    const bridgeRef = shallowRef<McpAppBridge | null>(null);\n    const lastSentInputRef = shallowRef<unknown>(undefined);\n    const lastSentOutputRef = shallowRef<unknown>(undefined);\n    const lastSentHostContextRef = shallowRef<McpAppHostContext | undefined>(\n      undefined,\n    );\n    // Per MCP Apps spec, the host should defer notifications until the widget\n    // signals readiness via `notifications/initialized`. Until then, we record\n    // pending values and flush them on init.\n    const widgetReadyRef = shallowRef(false);\n    const pendingInputRef = shallowRef<unknown>(undefined);\n    const pendingOutputRef = shallowRef<unknown>(undefined);\n    const pendingHostContextRef = shallowRef<McpAppHostContext | undefined>(\n      undefined,\n    );\n\n    const liveRef = shallowRef<LiveSnapshot>({\n      handlers: props.handlers,\n      hostInfo: props.hostInfo,\n      hostContext: props.hostContext,\n      input: props.input,\n      output: props.output,\n    });\n    useIsomorphicLayoutEffect(\n      () => {\n        liveRef.value = {\n          handlers: props.handlers,\n          hostInfo: props.hostInfo,\n          hostContext: props.hostContext,\n          input: props.input,\n          output: props.output,\n        };\n      },\n      () => [\n        props.handlers,\n        props.hostInfo,\n        props.hostContext,\n        props.input,\n        props.output,\n      ],\n    );\n\n    const createBridge = (\n      frame: SandboxHostFrame,\n      host: SandboxHostApi,\n    ): SandboxBridge => {\n      const current = liveRef.value;\n      let initTimeoutId: ReturnType<typeof setTimeout> | null = null;\n\n      const flushPending = () => {\n        if (widgetReadyRef.value) return;\n        widgetReadyRef.value = true;\n        const b = bridgeRef.value;\n        if (!b) return;\n        if (pendingInputRef.value !== undefined) {\n          b.notifyToolInput(pendingInputRef.value);\n          lastSentInputRef.value = pendingInputRef.value;\n          pendingInputRef.value = undefined;\n        }\n        if (pendingOutputRef.value !== undefined) {\n          b.notifyToolResult(pendingOutputRef.value);\n          lastSentOutputRef.value = pendingOutputRef.value;\n          pendingOutputRef.value = undefined;\n        }\n        if (pendingHostContextRef.value !== undefined) {\n          b.notifyHostContextChanged(pendingHostContextRef.value);\n          lastSentHostContextRef.value = pendingHostContextRef.value;\n          pendingHostContextRef.value = undefined;\n        }\n      };\n\n      const wrappedHandlers = buildLiveHandlers(current.handlers, liveRef, {\n        onInitialized: () => {\n          if (initTimeoutId !== null) {\n            clearTimeout(initTimeoutId);\n            initTimeoutId = null;\n          }\n          flushPending();\n        },\n        onSizeChange: (p) => {\n          if (p.height != null) host.setHeight(p.height);\n        },\n      });\n\n      // Safety net: if the widget never sends notifications/initialized (broken\n      // or non-spec-compliant), flush the queue anyway so the host doesn't\n      // appear hung.\n      initTimeoutId = setTimeout(() => {\n        initTimeoutId = null;\n        flushPending();\n      }, INIT_TIMEOUT_MS);\n\n      const bridge = createMcpAppBridge({\n        frame,\n        handlers: wrappedHandlers,\n        hostInfo: current.hostInfo,\n        hostContext: current.hostContext,\n      });\n      bridgeRef.value = bridge;\n\n      if (current.input !== undefined) pendingInputRef.value = current.input;\n      if (current.output !== undefined) pendingOutputRef.value = current.output;\n      // hostContext is delivered inside the ui/initialize response, where the\n      // bridge defaults it to {}; recording that same normalized value keeps the\n      // first later change from repeating what the widget already holds.\n      lastSentHostContextRef.value = current.hostContext ?? {};\n\n      return {\n        onMessage: bridge.onMessage,\n        dispose: () => {\n          if (initTimeoutId !== null) {\n            clearTimeout(initTimeoutId);\n            initTimeoutId = null;\n          }\n          bridge.dispose();\n          bridgeRef.value = null;\n          lastSentInputRef.value = undefined;\n          lastSentOutputRef.value = undefined;\n          lastSentHostContextRef.value = undefined;\n          widgetReadyRef.value = false;\n          pendingInputRef.value = undefined;\n          pendingOutputRef.value = undefined;\n          pendingHostContextRef.value = undefined;\n        },\n      };\n    };\n\n    useBridgeNotify(\n      () => props.input,\n      bridgeRef,\n      widgetReadyRef,\n      pendingInputRef,\n      lastSentInputRef,\n      (b, v) => b.notifyToolInput(v),\n    );\n    useBridgeNotify(\n      () => props.output,\n      bridgeRef,\n      widgetReadyRef,\n      pendingOutputRef,\n      lastSentOutputRef,\n      (b, v) => b.notifyToolResult(v),\n    );\n    useBridgeNotify(\n      () => props.hostContext,\n      bridgeRef,\n      widgetReadyRef,\n      pendingHostContextRef,\n      lastSentHostContextRef,\n      (b, v) => b.notifyHostContextChanged(v),\n      isSameHostContext,\n    );\n\n    return () =>\n      h(SandboxHost, {\n        content: {\n          html: applyMcpAppCsp(props.resource.html, props.resource.meta?.csp),\n        },\n        contentKey: props.app.serverId\n          ? `${props.app.serverId} ${props.resource.uri}`\n          : props.resource.uri,\n        sandbox: {\n          ...props.sandbox,\n          product: props.sandbox?.product ?? DEFAULT_PRODUCT,\n        },\n        maxHeight: props.maxHeight ?? DEFAULT_MAX_HEIGHT,\n        createBridge,\n        onError: (error: Error) => liveRef.value.handlers?.onError?.(error),\n        containerProps: {\n          \"data-mcp-app-resource\": props.app.resourceUri,\n          \"data-mcp-app-prefers-border\": props.resource.meta?.prefersBorder\n            ? \"\"\n            : undefined,\n        },\n      });\n  },\n  {\n    name: \"McpAppFrame\",\n    props: [\n      \"app\",\n      \"resource\",\n      \"input\",\n      \"output\",\n      \"sandbox\",\n      \"handlers\",\n      \"hostInfo\",\n      \"hostContext\",\n      \"maxHeight\",\n    ],\n  },\n);\n"],"mappings":";;;;;;;;AAmBA,MAAMgB,kBAAkB;AACxB,MAAMC,kBAAkB;AACxB,MAAMC,qBAAqB;AAK3B,MAAMC,iBAAiBC,UAAqD;CAC1E,IAAI,CAACN,SAASM,KAAK,GAAG,OAAO;CAC7B,MAAME,YAAYC,OAAOC,eAAeJ,KAAK;CAC7C,OAAOE,cAAc,QAAQA,cAAcC,OAAOD;AACpD;AAOA,MAAMG,qBAAqBC,GAAYC,GAAYC,QAAQ,MAAe;CACxE,IAAIL,OAAOM,GAAGH,GAAGC,CAAC,GAAG,OAAO;CAC5B,IAAIC,QAAQ,KAAK,OAAO;CACxB,IAAIE,MAAMC,QAAQL,CAAC,KAAKI,MAAMC,QAAQJ,CAAC,GAAG;EACxC,IAAI,CAACG,MAAMC,QAAQL,CAAC,KAAK,CAACI,MAAMC,QAAQJ,CAAC,KAAKD,EAAEM,WAAWL,EAAEK,QAC3D,OAAO;EACT,KAAK,IAAIC,IAAI,GAAGA,IAAIP,EAAEM,QAAQC,KAC5B,IAAI,CAACR,kBAAkBC,EAAEO,IAAIN,EAAEM,IAAIL,QAAQ,CAAC,GAAG,OAAO;EAExD,OAAO;CACT;CACA,IAAI,CAACT,cAAcO,CAAC,KAAK,CAACP,cAAcQ,CAAC,GAAG,OAAO;CACnD,MAAMO,QAAQX,OAAOY,KAAKT,CAAC;CAC3B,OACEQ,MAAMF,WAAWT,OAAOY,KAAKR,CAAC,CAAC,CAACK,UAChCE,MAAME,OACHC,QACCd,OAAOe,OAAOX,GAAGU,GAAG,KAAKZ,kBAAkBC,EAAEW,MAAMV,EAAEU,MAAMT,QAAQ,CAAC,CACxE;AAEJ;AAEA,SAASW,gBACPC,WACAE,WACAC,gBACAC,YACAC,aACAC,QACAG,UAAqD1B,OAAOM,IAC5D;CACAzB,gCACQ;EACJ,MAAMgB,QAAQoB,UAAU;EACxB,IAAI,CAACE,UAAUtB,OAAO;EAItB,IAAIA,UAAUgC,KAAAA,KAAaH,QAAQJ,YAAYzB,OAAOA,KAAK,GAAG;GAC5DwB,WAAWxB,QAAQgC,KAAAA;GACnB;EACF;EACA,IAAI,CAACT,eAAevB,OAAO;GACzBwB,WAAWxB,QAAQA;GACnB;EACF;EACA0B,OAAOJ,UAAUtB,OAAOA,KAAK;EAC7ByB,YAAYzB,QAAQA;CACtB,SACM,CAACoB,UAAU,CAAC,CACpB;AACF;AAuBA,SAASyB,kBACPC,SACAC,SACAC,WACsB;CACtB,MAAMC,aAAaF,QAAQ/C,MAAMkC;CACjC,MAAMgB,OAA6CjC,QACjD6B,UAAU7B,SAASe,KAAAA;CACrB,MAAMoB,MAA4B,CAAC;CACnCjD,OAAOkD,eAAeD,KAAK,gBAAgB;EACzCE,WAAWL,KAAK,CAAC,EAAEM;EACnBC,YAAY;EACZC,cAAc;CAChB,CAAC;CACD,MAAMC,YACJzC,UAEE2C,MAAe;EACf,MAAMC,KAAKZ,KAAK,CAAC,GAAGhC;EACpB,IAAI,CAAC4C,IACH,MAAM,IAAIC,MAAM,GAAG7C,IAAG,gCAAiC;EAEzD,OAAO4C,GAAGD,CAAC;CACb;CACF,IAAIV,IAAI,UAAU,GAAGE,IAAIW,WAAWL,SAAS,UAAU;CACvD,IAAIR,IAAI,cAAc,GAAGE,IAAIY,eAAeN,SAAS,cAAc;CACnE,IAAIR,IAAI,eAAe,GAAGE,IAAIa,gBAAgBP,SAAS,eAAe;CACtE,IAAIR,IAAI,UAAU,GAAGE,IAAIc,WAAWR,SAAS,UAAU;CACvD,IAAIR,IAAI,aAAa,GAAGE,IAAIe,cAAcT,SAAS,aAAa;CAChE,IAAIR,IAAI,oBAAoB,GAC1BE,IAAIgB,qBAAqBV,SAAS,oBAAoB;CACxD,IAAIR,IAAI,oBAAoB,GAC1BE,IAAIiB,qBAAqBX,SAAS,oBAAoB;CACxDN,IAAIX,gBAAgBmB,MAAM;EACxBZ,UAAUP,aAAamB,CAAC;EACxBX,KAAK,CAAC,EAAER,eAAemB,CAAC;CAC1B;CACAR,IAAIZ,iBAAiBE,WAAW;EAC9BM,UAAUR,cAAc;EACxBS,KAAK,CAAC,EAAET,gBAAgBE,MAAM;CAChC;CACAU,IAAIkB,qBAAqBV,MAAMX,KAAK,CAAC,EAAEqB,oBAAoBV,CAAC;CAC5DR,IAAImB,SAASX,MAAMX,KAAK,CAAC,EAAEsB,QAAQX,CAAC;CACpCR,IAAIoB,WAAWC,MAAMxB,KAAK,CAAC,EAAEuB,UAAUC,CAAC;CACxC,OAAOrB;AACT;AAEA,MAAasB,cAAc9F,gBACzB,SAAS8F,YAAYC,OAAyB;CAC5C,MAAMrD,YAAYxC,WAAgC,IAAI;CACtD,MAAM8F,mBAAmB9F,WAAoBkD,KAAAA,CAAS;CACtD,MAAM6C,oBAAoB/F,WAAoBkD,KAAAA,CAAS;CACvD,MAAM8C,yBAAyBhG,WAC7BkD,KAAAA,CACF;CAIA,MAAMT,iBAAiBzC,WAAW,KAAK;CACvC,MAAMiG,kBAAkBjG,WAAoBkD,KAAAA,CAAS;CACrD,MAAMgD,mBAAmBlG,WAAoBkD,KAAAA,CAAS;CACtD,MAAMiD,wBAAwBnG,WAC5BkD,KAAAA,CACF;CAEA,MAAMe,UAAUjE,WAAyB;EACvCoD,UAAUyC,MAAMzC;EAChBC,UAAUwC,MAAMxC;EAChBC,aAAauC,MAAMvC;EACnBC,OAAOsC,MAAMtC;EACbC,QAAQqC,MAAMrC;CAChB,CAAC;CACDtD,gCACQ;EACJ+D,QAAQ/C,QAAQ;GACdkC,UAAUyC,MAAMzC;GAChBC,UAAUwC,MAAMxC;GAChBC,aAAauC,MAAMvC;GACnBC,OAAOsC,MAAMtC;GACbC,QAAQqC,MAAMrC;EAChB;CACF,SACM;EACJqC,MAAMzC;EACNyC,MAAMxC;EACNwC,MAAMvC;EACNuC,MAAMtC;EACNsC,MAAMrC;CAAM,CAEhB;CAEA,MAAM4C,gBACJC,OACAC,SACkB;EAClB,MAAMC,UAAUtC,QAAQ/C;EACxB,IAAIsF,gBAAsD;EAE1D,MAAMG,qBAAqB;GACzB,IAAIlE,eAAevB,OAAO;GAC1BuB,eAAevB,QAAQ;GACvB,MAAMO,IAAIe,UAAUtB;GACpB,IAAI,CAACO,GAAG;GACR,IAAIwE,gBAAgB/E,UAAUgC,KAAAA,GAAW;IACvCzB,EAAEmF,gBAAgBX,gBAAgB/E,KAAK;IACvC4E,iBAAiB5E,QAAQ+E,gBAAgB/E;IACzC+E,gBAAgB/E,QAAQgC,KAAAA;GAC1B;GACA,IAAIgD,iBAAiBhF,UAAUgC,KAAAA,GAAW;IACxCzB,EAAEoF,iBAAiBX,iBAAiBhF,KAAK;IACzC6E,kBAAkB7E,QAAQgF,iBAAiBhF;IAC3CgF,iBAAiBhF,QAAQgC,KAAAA;GAC3B;GACA,IAAIiD,sBAAsBjF,UAAUgC,KAAAA,GAAW;IAC7CzB,EAAEqF,yBAAyBX,sBAAsBjF,KAAK;IACtD8E,uBAAuB9E,QAAQiF,sBAAsBjF;IACrDiF,sBAAsBjF,QAAQgC,KAAAA;GAChC;EACF;EAEA,MAAM6D,kBAAkBhD,kBAAkBwC,QAAQnD,UAAUa,SAAS;GACnEP,qBAAqB;IACnB,IAAI8C,kBAAkB,MAAM;KAC1BQ,aAAaR,aAAa;KAC1BA,gBAAgB;IAClB;IACAG,aAAa;GACf;GACAhD,eAAemB,MAAM;IACnB,IAAIA,EAAEhB,UAAU,MAAMwC,KAAKW,UAAUnC,EAAEhB,MAAM;GAC/C;EACF,CAAC;EAKD0C,gBAAgBE,iBAAiB;GAC/BF,gBAAgB;GAChBG,aAAa;EACf,GAAG5F,eAAe;EAElB,MAAM8B,SAASzC,mBAAmB;GAChCiG;GACAjD,UAAU2D;GACV1D,UAAUkD,QAAQlD;GAClBC,aAAaiD,QAAQjD;EACvB,CAAC;EACDd,UAAUtB,QAAQ2B;EAElB,IAAI0D,QAAQhD,UAAUL,KAAAA,GAAW+C,gBAAgB/E,QAAQqF,QAAQhD;EACjE,IAAIgD,QAAQ/C,WAAWN,KAAAA,GAAWgD,iBAAiBhF,QAAQqF,QAAQ/C;EAInEwC,uBAAuB9E,QAAQqF,QAAQjD,eAAe,CAAC;EAEvD,OAAO;GACL4D,WAAWrE,OAAOqE;GAClBC,eAAe;IACb,IAAIX,kBAAkB,MAAM;KAC1BQ,aAAaR,aAAa;KAC1BA,gBAAgB;IAClB;IACA3D,OAAOsE,QAAQ;IACf3E,UAAUtB,QAAQ;IAClB4E,iBAAiB5E,QAAQgC,KAAAA;IACzB6C,kBAAkB7E,QAAQgC,KAAAA;IAC1B8C,uBAAuB9E,QAAQgC,KAAAA;IAC/BT,eAAevB,QAAQ;IACvB+E,gBAAgB/E,QAAQgC,KAAAA;IACxBgD,iBAAiBhF,QAAQgC,KAAAA;IACzBiD,sBAAsBjF,QAAQgC,KAAAA;GAChC;EACF;CACF;CAEAb,sBACQwD,MAAMtC,OACZf,WACAC,gBACAwD,iBACAH,mBACCrE,GAAGqB,MAAMrB,EAAEmF,gBAAgB9D,CAAC,CAC/B;CACAT,sBACQwD,MAAMrC,QACZhB,WACAC,gBACAyD,kBACAH,oBACCtE,GAAGqB,MAAMrB,EAAEoF,iBAAiB/D,CAAC,CAChC;CACAT,sBACQwD,MAAMvC,aACZd,WACAC,gBACA0D,uBACAH,yBACCvE,GAAGqB,MAAMrB,EAAEqF,yBAAyBhE,CAAC,GACtCvB,iBACF;CAEA,aACExB,EAAEM,aAAa;EACb+G,SAAS,EACPC,MAAMxG,eAAegF,MAAMyB,SAASD,MAAMxB,MAAMyB,SAASC,MAAMC,GAAG,EACpE;EACAC,YAAY5B,MAAM6B,IAAIC,WAClB,GAAG9B,MAAM6B,IAAIC,SAAQ,GAAI9B,MAAMyB,SAASM,QACxC/B,MAAMyB,SAASM;EACnBC,SAAS;GACP,GAAGhC,MAAMgC;GACTC,SAASjC,MAAMgC,SAASC,WAAWhH;EACrC;EACAiH,WAAWlC,MAAMkC,aAAa/G;EAC9BoF;EACAV,UAAUsC,UAAiB/D,QAAQ/C,MAAMkC,UAAUsC,UAAUsC,KAAK;EAClEC,gBAAgB;GACd,yBAAyBpC,MAAM6B,IAAIQ;GACnC,+BAA+BrC,MAAMyB,SAASC,MAAMY,gBAChD,KACAjF,KAAAA;EACN;CACF,CAAC;AACL,GACA;CACEkF,MAAM;CACNvC,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CAAW;AAEf,CACF"}

package/dist/mcp-apps/bridge.d.ts

@@ -0,0 +1,18 @@
+import type { SandboxHostFrame } from "../sandbox-host/SandboxHost.js";
+import { type McpAppBridgeHandlers, type McpAppHostContext, type McpAppHostInfo } from "./types.js";
+export type McpAppBridgeFrame = SandboxHostFrame;
+export type CreateMcpAppBridgeOptions = {
+    frame: McpAppBridgeFrame;
+    handlers?: McpAppBridgeHandlers | undefined;
+    hostInfo?: McpAppHostInfo | undefined;
+    hostContext?: McpAppHostContext | undefined;
+};
+export type McpAppBridge = {
+    onMessage: (event: MessageEvent) => void;
+    dispose: () => void;
+    notifyToolInput: (input: unknown) => void;
+    notifyToolResult: (result: unknown) => void;
+    notifyHostContextChanged: (hostContext: McpAppHostContext) => void;
+};
+export declare function createMcpAppBridge(opts: CreateMcpAppBridgeOptions): McpAppBridge;
+//# sourceMappingURL=bridge.d.ts.map

package/dist/mcp-apps/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAA6B;AAEnE,OAAO,EAEL,KAAK,oBAAoB,EAEzB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EAMpB,MAAM,YAAS;AAqDhB,MAAM,MAAM,iBAAiB,GAAG,gBAAgB;AAEhD,MAAM,MAAM,yBAAyB,GAAG;IACtC,KAAK,EAAE,iBAAiB;IACxB,QAAQ,CAAC,EAAE,oBAAoB,GAAG,SAAS;IAC3C,QAAQ,CAAC,EAAE,cAAc,GAAG,SAAS;IACrC,WAAW,CAAC,EAAE,iBAAiB,GAAG,SAAS;CAC5C;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,SAAS,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI;IACxC,OAAO,EAAE,MAAM,IAAI;IACnB,eAAe,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI;IACzC,gBAAgB,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI;IAC3C,wBAAwB,EAAE,CAAC,WAAW,EAAE,iBAAiB,KAAK,IAAI;CACnE;AA+CD,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,yBAAyB,GAC9B,YAAY","names":[],"ignoreList":[],"sources":["../../src/mcp-apps/bridge.ts"],"sourcesContent":[null]}

package/dist/mcp-apps/bridge.js

@@ -0,0 +1,319 @@
+import "./types.js";
+import { invokeUserCallback, isRecord } from "@ulearning/ai-core/internal";
+// src/mcp-apps/bridge.ts
+const VALID_DISPLAY_MODES = [
+	"inline",
+	"fullscreen",
+	"pip"
+];
+function isMcpAppDisplayMode(value) {
+	return VALID_DISPLAY_MODES.some((mode) => mode === value);
+}
+function isAppInfo(value) {
+	return isRecord(value) && typeof value.name === "string" && typeof value.version === "string";
+}
+function getAppCapabilities(value) {
+	if (!isRecord(value)) return void 0;
+	const { availableDisplayModes, ...rest } = value;
+	return {
+		...rest,
+		...Array.isArray(availableDisplayModes) ? { availableDisplayModes: Object.values(availableDisplayModes).filter(isMcpAppDisplayMode) } : {}
+	};
+}
+function getInitializeParams(params) {
+	if (!isRecord(params)) return {};
+	const appCapabilities = getAppCapabilities(params.appCapabilities);
+	return {
+		...isAppInfo(params.appInfo) ? { appInfo: params.appInfo } : {},
+		...appCapabilities ? { appCapabilities } : {},
+		...typeof params.protocolVersion === "string" ? { protocolVersion: params.protocolVersion } : {}
+	};
+}
+const DEFAULT_HOST_INFO = {
+	name: "assistant-ui",
+	version: "0.1"
+};
+const METHOD_ALIASES = {
+	"ui/notifications/initialized": "notifications/initialized",
+	"ui/notifications/size-changed": "notifications/size_changed",
+	"ui/request-display-mode": "requestDisplayMode",
+	"ui/open-link": "openLink",
+	"ui/update-model-context": "updateModelContext",
+	"ui/message": "sendMessage",
+	"notifications/message": "notifications/log"
+};
+const normalizeMethod = (method) => METHOD_ALIASES[method] ?? method;
+const JSONRPC_ERROR = {
+	parseError: -32700,
+	invalidRequest: -32600,
+	methodNotFound: -32601,
+	invalidParams: -32602,
+	internalError: -32603
+};
+function isJsonRpcMessage(value) {
+	if (!value || typeof value !== "object") return false;
+	const v = value;
+	return v.jsonrpc === "2.0" && typeof v.method === "string";
+}
+function isRequest(msg) {
+	return "id" in msg;
+}
+function isNotification(msg) {
+	return !("id" in msg);
+}
+function createMcpAppBridge(opts) {
+	const { frame, handlers = {}, hostInfo = DEFAULT_HOST_INFO, hostContext = {} } = opts;
+	let disposed = false;
+	let initializeParams = {};
+	const post = (msg) => {
+		if (disposed) return;
+		frame.sendMessage(msg);
+	};
+	const respond = (id, payload) => {
+		const res = {
+			jsonrpc: "2.0",
+			id,
+			...payload
+		};
+		post(res);
+	};
+	const errorResponse = (id, code, message, data) => {
+		respond(id, { error: {
+			code,
+			message,
+			...data !== void 0 ? { data } : {}
+		} });
+	};
+	const reportError = (error) => {
+		if (disposed) return;
+		invokeUserCallback("assistant-ui", "MCP App onError", handlers.onError?.bind(handlers), error);
+	};
+	const handleRequest = async (req) => {
+		try {
+			const params = req.params;
+			switch (normalizeMethod(req.method)) {
+				case "ui/initialize": {
+					initializeParams = getInitializeParams(params);
+					const requestedProtocolVersion = initializeParams.protocolVersion ?? "0.1";
+					respond(req.id, { result: {
+						protocolVersion: requestedProtocolVersion,
+						host: hostInfo,
+						hostInfo,
+						hostContext,
+						capabilities: {
+							tools: handlers.callTool ? {} : void 0,
+							resources: handlers.readResource || handlers.listResources ? {} : void 0,
+							ui: {
+								sendMessage: !!handlers.sendMessage,
+								openLink: !!handlers.openLink,
+								requestDisplayMode: !!handlers.requestDisplayMode,
+								updateModelContext: !!handlers.updateModelContext
+							}
+						},
+						hostCapabilities: {
+							...handlers.openLink ? { openLinks: {} } : {},
+							...handlers.callTool ? { serverTools: {} } : {},
+							...handlers.readResource || handlers.listResources ? { serverResources: {} } : {},
+							...handlers.updateModelContext ? { updateModelContext: { text: {} } } : {},
+							...handlers.sendMessage ? { message: { text: {} } } : {},
+							...handlers.onLog ? { logging: {} } : {}
+						}
+					} });
+					return;
+				}
+				case "tools/call": {
+					if (!handlers.callTool) {
+						errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "tools/call is not supported by this host");
+						return;
+					}
+					const callParams = params ?? {};
+					if (typeof callParams.name !== "string") {
+						errorResponse(req.id, JSONRPC_ERROR.invalidParams, "tools/call requires a string 'name'");
+						return;
+					}
+					if (handlers.allowedTools && !handlers.allowedTools.includes(callParams.name)) {
+						errorResponse(req.id, JSONRPC_ERROR.invalidParams, `tool '${callParams.name}' is not allowed for this app`);
+						return;
+					}
+					let callArgs;
+					if (callParams.arguments !== void 0) {
+						if (callParams.arguments === null || typeof callParams.arguments !== "object" || Array.isArray(callParams.arguments)) {
+							errorResponse(req.id, JSONRPC_ERROR.invalidParams, "tools/call 'arguments' must be an object");
+							return;
+						}
+						callArgs = callParams.arguments;
+					}
+					const result = await handlers.callTool({
+						name: callParams.name,
+						...callArgs !== void 0 ? { arguments: callArgs } : {}
+					});
+					respond(req.id, { result });
+					return;
+				}
+				case "resources/read": {
+					if (!handlers.readResource) {
+						errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "resources/read is not supported by this host");
+						return;
+					}
+					const readParams = params ?? {};
+					if (typeof readParams.uri !== "string") {
+						errorResponse(req.id, JSONRPC_ERROR.invalidParams, "resources/read requires a string 'uri'");
+						return;
+					}
+					respond(req.id, { result: await handlers.readResource({ uri: readParams.uri }) });
+					return;
+				}
+				case "resources/list":
+					if (!handlers.listResources) {
+						errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "resources/list is not supported by this host");
+						return;
+					}
+					respond(req.id, { result: await handlers.listResources(params) ?? null });
+					return;
+				case "openLink": {
+					if (!handlers.openLink) {
+						errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "openLink is not supported by this host");
+						return;
+					}
+					const linkParams = params ?? {};
+					if (typeof linkParams.url !== "string") {
+						errorResponse(req.id, JSONRPC_ERROR.invalidParams, "openLink requires a string 'url'");
+						return;
+					}
+					let linkProtocol;
+					try {
+						linkProtocol = new URL(linkParams.url).protocol;
+					} catch {
+						errorResponse(req.id, JSONRPC_ERROR.invalidParams, "openLink requires a valid URL");
+						return;
+					}
+					if (linkProtocol !== "https:" && linkProtocol !== "http:") {
+						errorResponse(req.id, JSONRPC_ERROR.invalidParams, "openLink only accepts http(s) URLs");
+						return;
+					}
+					respond(req.id, { result: await handlers.openLink({ url: linkParams.url }) });
+					return;
+				}
+				case "sendMessage":
+					if (!handlers.sendMessage) {
+						errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "sendMessage is not supported by this host");
+						return;
+					}
+					respond(req.id, { result: await handlers.sendMessage(params) ?? null });
+					return;
+				case "updateModelContext":
+					if (!handlers.updateModelContext) {
+						errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "updateModelContext is not supported by this host");
+						return;
+					}
+					respond(req.id, { result: await handlers.updateModelContext(params) ?? null });
+					return;
+				case "requestDisplayMode": {
+					if (!handlers.requestDisplayMode) {
+						errorResponse(req.id, JSONRPC_ERROR.methodNotFound, "requestDisplayMode is not supported by this host");
+						return;
+					}
+					const modeParams = params ?? {};
+					if (!isMcpAppDisplayMode(modeParams.mode)) {
+						errorResponse(req.id, JSONRPC_ERROR.invalidParams, "requestDisplayMode requires a valid 'mode'");
+						return;
+					}
+					respond(req.id, { result: await handlers.requestDisplayMode({ mode: modeParams.mode }) });
+					return;
+				}
+				default: errorResponse(req.id, JSONRPC_ERROR.methodNotFound, `Unknown method: ${req.method}`);
+			}
+		} catch (err) {
+			const error = err instanceof Error ? err : new Error(String(err));
+			reportError(error);
+			errorResponse(req.id, JSONRPC_ERROR.internalError, error.message);
+		}
+	};
+	const handleNotification = (note) => {
+		try {
+			switch (normalizeMethod(note.method)) {
+				case "notifications/initialized":
+					handlers.onInitialized?.(initializeParams);
+					return;
+				case "notifications/size_changed": {
+					const p = note.params ?? {};
+					handlers.onSizeChange?.({
+						...typeof p.width === "number" ? { width: p.width } : {},
+						...typeof p.height === "number" ? { height: p.height } : {}
+					});
+					return;
+				}
+				case "notifications/log":
+					handlers.onLog?.(note.params);
+					return;
+				case "notifications/request_teardown":
+					handlers.onRequestTeardown?.(note.params);
+					return;
+				case "notifications/error": {
+					const p = note.params ?? {};
+					reportError(new Error(typeof p.message === "string" ? p.message : "Widget error"));
+					return;
+				}
+				default: return;
+			}
+		} catch (err) {
+			const error = err instanceof Error ? err : new Error(String(err));
+			reportError(error);
+		}
+	};
+	const onMessage = (event) => {
+		if (disposed) return;
+		if (!isJsonRpcMessage(event.data)) return;
+		const msg = event.data;
+		if (isRequest(msg)) handleRequest(msg);
+		else if (isNotification(msg)) handleNotification(msg);
+	};
+	return {
+		onMessage,
+		dispose: () => {
+			disposed = true;
+		},
+		notifyToolInput: (input) => {
+			post({
+				jsonrpc: "2.0",
+				method: "notifications/tools/call/input",
+				params: { input }
+			});
+			post({
+				jsonrpc: "2.0",
+				method: "ui/notifications/tool-input",
+				params: isRecord(input) ? { arguments: input } : {}
+			});
+		},
+		notifyToolResult: (result) => {
+			post({
+				jsonrpc: "2.0",
+				method: "notifications/tools/call/result",
+				params: { result }
+			});
+			post({
+				jsonrpc: "2.0",
+				method: "ui/notifications/tool-result",
+				params: isRecord(result) ? result : { content: [{
+					type: "text",
+					text: String(result)
+				}] }
+			});
+		},
+		notifyHostContextChanged: (ctx) => {
+			post({
+				jsonrpc: "2.0",
+				method: "notifications/host_context/changed",
+				params: ctx
+			});
+			post({
+				jsonrpc: "2.0",
+				method: "ui/notifications/host-context-changed",
+				params: ctx
+			});
+		}
+	};
+}
+export { createMcpAppBridge };
+
+//# sourceMappingURL=bridge.js.map

package/dist/mcp-apps/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","names":[],"sources":["../../src/mcp-apps/bridge.ts"],"sourcesContent":["import type { SandboxHostFrame } from \"../sandbox-host/SandboxHost\";\nimport { invokeUserCallback } from \"@ulearning/ai-core/internal\";\nimport {\n  MCP_APP_PROTOCOL_VERSION,\n  type McpAppBridgeHandlers,\n  type McpAppDisplayMode,\n  type McpAppHostContext,\n  type McpAppHostInfo,\n  type McpAppInitializeParams,\n  type McpAppJsonRpcMessage,\n  type McpAppJsonRpcNotification,\n  type McpAppJsonRpcRequest,\n  type McpAppJsonRpcResponse,\n} from \"./types\";\nimport { isRecord } from \"@ulearning/ai-core/internal\";\n\nconst VALID_DISPLAY_MODES = [\n  \"inline\",\n  \"fullscreen\",\n  \"pip\",\n] as const satisfies readonly McpAppDisplayMode[];\n\nfunction isMcpAppDisplayMode(value: unknown): value is McpAppDisplayMode {\n  return VALID_DISPLAY_MODES.some((mode) => mode === value);\n}\n\nfunction isAppInfo(\n  value: unknown,\n): value is NonNullable<McpAppInitializeParams[\"appInfo\"]> {\n  return (\n    isRecord(value) &&\n    typeof value.name === \"string\" &&\n    typeof value.version === \"string\"\n  );\n}\n\nfunction getAppCapabilities(\n  value: unknown,\n): McpAppInitializeParams[\"appCapabilities\"] {\n  if (!isRecord(value)) return undefined;\n  const { availableDisplayModes, ...rest } = value;\n  return {\n    ...rest,\n    // Object.values reads only the entries present, so a sparse list claiming a huge length stays cheap, and the list's own methods are never called.\n    ...(Array.isArray(availableDisplayModes)\n      ? {\n          availableDisplayModes: Object.values(availableDisplayModes).filter(\n            isMcpAppDisplayMode,\n          ),\n        }\n      : {}),\n  };\n}\n\nfunction getInitializeParams(params: unknown): McpAppInitializeParams {\n  if (!isRecord(params)) return {};\n  const appCapabilities = getAppCapabilities(params.appCapabilities);\n  return {\n    ...(isAppInfo(params.appInfo) ? { appInfo: params.appInfo } : {}),\n    ...(appCapabilities ? { appCapabilities } : {}),\n    ...(typeof params.protocolVersion === \"string\"\n      ? { protocolVersion: params.protocolVersion }\n      : {}),\n  };\n}\n\nexport type McpAppBridgeFrame = SandboxHostFrame;\n\nexport type CreateMcpAppBridgeOptions = {\n  frame: McpAppBridgeFrame;\n  handlers?: McpAppBridgeHandlers | undefined;\n  hostInfo?: McpAppHostInfo | undefined;\n  hostContext?: McpAppHostContext | undefined;\n};\n\nexport type McpAppBridge = {\n  onMessage: (event: MessageEvent) => void;\n  dispose: () => void;\n  notifyToolInput: (input: unknown) => void;\n  notifyToolResult: (result: unknown) => void;\n  notifyHostContextChanged: (hostContext: McpAppHostContext) => void;\n};\n\nconst DEFAULT_HOST_INFO: McpAppHostInfo = {\n  name: \"assistant-ui\",\n  version: \"0.1\",\n};\n\n// Accept both the legacy method names and the MCP-UI 2026-01-26 names that\n// `ui/*` capable widgets (e.g. xmcp's host-bridge) emit. Normalize on input\n// so downstream switch statements only need to know the legacy names.\nconst METHOD_ALIASES: Record<string, string> = {\n  \"ui/notifications/initialized\": \"notifications/initialized\",\n  \"ui/notifications/size-changed\": \"notifications/size_changed\",\n  \"ui/request-display-mode\": \"requestDisplayMode\",\n  \"ui/open-link\": \"openLink\",\n  \"ui/update-model-context\": \"updateModelContext\",\n  \"ui/message\": \"sendMessage\",\n  \"notifications/message\": \"notifications/log\",\n};\n\nconst normalizeMethod = (method: string): string =>\n  METHOD_ALIASES[method] ?? method;\n\nconst JSONRPC_ERROR = {\n  parseError: -32700,\n  invalidRequest: -32600,\n  methodNotFound: -32601,\n  invalidParams: -32602,\n  internalError: -32603,\n} as const;\n\nfunction isJsonRpcMessage(value: unknown): value is McpAppJsonRpcMessage {\n  if (!value || typeof value !== \"object\") return false;\n  const v = value as Record<string, unknown>;\n  return v.jsonrpc === \"2.0\" && typeof v.method === \"string\";\n}\n\nfunction isRequest(msg: McpAppJsonRpcMessage): msg is McpAppJsonRpcRequest {\n  return \"id\" in msg;\n}\n\nfunction isNotification(\n  msg: McpAppJsonRpcMessage,\n): msg is McpAppJsonRpcNotification {\n  return !(\"id\" in msg);\n}\n\nexport function createMcpAppBridge(\n  opts: CreateMcpAppBridgeOptions,\n): McpAppBridge {\n  const {\n    frame,\n    handlers = {},\n    hostInfo = DEFAULT_HOST_INFO,\n    hostContext = {},\n  } = opts;\n  let disposed = false;\n  let initializeParams: McpAppInitializeParams = {};\n\n  const post = (msg: McpAppJsonRpcMessage) => {\n    if (disposed) return;\n    frame.sendMessage(msg);\n  };\n\n  const respond = (\n    id: McpAppJsonRpcRequest[\"id\"],\n    payload:\n      | { result: unknown }\n      | { error: { code: number; message: string; data?: unknown } },\n  ) => {\n    const res: McpAppJsonRpcResponse = {\n      jsonrpc: \"2.0\",\n      id,\n      ...payload,\n    };\n    post(res);\n  };\n\n  const errorResponse = (\n    id: McpAppJsonRpcRequest[\"id\"],\n    code: number,\n    message: string,\n    data?: unknown,\n  ) => {\n    respond(id, {\n      error: {\n        code,\n        message,\n        ...(data !== undefined ? { data } : {}),\n      },\n    });\n  };\n\n  const reportError = (error: Error) => {\n    if (disposed) return;\n    invokeUserCallback(\n      \"assistant-ui\",\n      \"MCP App onError\",\n      handlers.onError?.bind(handlers),\n      error,\n    );\n  };\n\n  const handleRequest = async (req: McpAppJsonRpcRequest) => {\n    try {\n      const params = req.params;\n\n      switch (normalizeMethod(req.method)) {\n        case \"ui/initialize\": {\n          initializeParams = getInitializeParams(params);\n          const requestedProtocolVersion =\n            initializeParams.protocolVersion ?? MCP_APP_PROTOCOL_VERSION;\n          respond(req.id, {\n            result: {\n              protocolVersion: requestedProtocolVersion,\n              host: hostInfo,\n              hostInfo,\n              hostContext,\n              capabilities: {\n                tools: handlers.callTool ? {} : undefined,\n                resources:\n                  handlers.readResource || handlers.listResources\n                    ? {}\n                    : undefined,\n                ui: {\n                  sendMessage: !!handlers.sendMessage,\n                  openLink: !!handlers.openLink,\n                  requestDisplayMode: !!handlers.requestDisplayMode,\n                  updateModelContext: !!handlers.updateModelContext,\n                },\n              },\n              hostCapabilities: {\n                ...(handlers.openLink ? { openLinks: {} } : {}),\n                ...(handlers.callTool ? { serverTools: {} } : {}),\n                ...(handlers.readResource || handlers.listResources\n                  ? { serverResources: {} }\n                  : {}),\n                ...(handlers.updateModelContext\n                  ? { updateModelContext: { text: {} } }\n                  : {}),\n                ...(handlers.sendMessage ? { message: { text: {} } } : {}),\n                ...(handlers.onLog ? { logging: {} } : {}),\n              },\n            },\n          });\n          return;\n        }\n\n        case \"tools/call\": {\n          if (!handlers.callTool) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"tools/call is not supported by this host\",\n            );\n            return;\n          }\n          const callParams = (params ?? {}) as {\n            name?: unknown;\n            arguments?: unknown;\n          };\n          if (typeof callParams.name !== \"string\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"tools/call requires a string 'name'\",\n            );\n            return;\n          }\n          if (\n            handlers.allowedTools &&\n            !handlers.allowedTools.includes(callParams.name)\n          ) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              `tool '${callParams.name}' is not allowed for this app`,\n            );\n            return;\n          }\n          let callArgs: Record<string, unknown> | undefined;\n          if (callParams.arguments !== undefined) {\n            if (\n              callParams.arguments === null ||\n              typeof callParams.arguments !== \"object\" ||\n              Array.isArray(callParams.arguments)\n            ) {\n              errorResponse(\n                req.id,\n                JSONRPC_ERROR.invalidParams,\n                \"tools/call 'arguments' must be an object\",\n              );\n              return;\n            }\n            callArgs = callParams.arguments as Record<string, unknown>;\n          }\n          const result = await handlers.callTool({\n            name: callParams.name,\n            ...(callArgs !== undefined ? { arguments: callArgs } : {}),\n          });\n          respond(req.id, { result });\n          return;\n        }\n\n        case \"resources/read\": {\n          if (!handlers.readResource) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"resources/read is not supported by this host\",\n            );\n            return;\n          }\n          const readParams = (params ?? {}) as { uri?: unknown };\n          if (typeof readParams.uri !== \"string\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"resources/read requires a string 'uri'\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: await handlers.readResource({ uri: readParams.uri }),\n          });\n          return;\n        }\n\n        case \"resources/list\": {\n          if (!handlers.listResources) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"resources/list is not supported by this host\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: (await handlers.listResources(params)) ?? null,\n          });\n          return;\n        }\n\n        case \"openLink\": {\n          if (!handlers.openLink) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"openLink is not supported by this host\",\n            );\n            return;\n          }\n          const linkParams = (params ?? {}) as { url?: unknown };\n          if (typeof linkParams.url !== \"string\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"openLink requires a string 'url'\",\n            );\n            return;\n          }\n          let linkProtocol: string;\n          try {\n            linkProtocol = new URL(linkParams.url).protocol;\n          } catch {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"openLink requires a valid URL\",\n            );\n            return;\n          }\n          if (linkProtocol !== \"https:\" && linkProtocol !== \"http:\") {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"openLink only accepts http(s) URLs\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: await handlers.openLink({ url: linkParams.url }),\n          });\n          return;\n        }\n\n        case \"sendMessage\": {\n          if (!handlers.sendMessage) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"sendMessage is not supported by this host\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: (await handlers.sendMessage(params)) ?? null,\n          });\n          return;\n        }\n\n        case \"updateModelContext\": {\n          if (!handlers.updateModelContext) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"updateModelContext is not supported by this host\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: (await handlers.updateModelContext(params)) ?? null,\n          });\n          return;\n        }\n\n        case \"requestDisplayMode\": {\n          if (!handlers.requestDisplayMode) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.methodNotFound,\n              \"requestDisplayMode is not supported by this host\",\n            );\n            return;\n          }\n          const modeParams = (params ?? {}) as { mode?: unknown };\n          if (!isMcpAppDisplayMode(modeParams.mode)) {\n            errorResponse(\n              req.id,\n              JSONRPC_ERROR.invalidParams,\n              \"requestDisplayMode requires a valid 'mode'\",\n            );\n            return;\n          }\n          respond(req.id, {\n            result: await handlers.requestDisplayMode({\n              mode: modeParams.mode,\n            }),\n          });\n          return;\n        }\n\n        default: {\n          errorResponse(\n            req.id,\n            JSONRPC_ERROR.methodNotFound,\n            `Unknown method: ${req.method}`,\n          );\n        }\n      }\n    } catch (err) {\n      const error = err instanceof Error ? err : new Error(String(err));\n      reportError(error);\n      errorResponse(req.id, JSONRPC_ERROR.internalError, error.message);\n    }\n  };\n\n  const handleNotification = (note: McpAppJsonRpcNotification) => {\n    try {\n      switch (normalizeMethod(note.method)) {\n        case \"notifications/initialized\": {\n          handlers.onInitialized?.(initializeParams);\n          return;\n        }\n        case \"notifications/size_changed\": {\n          const p = (note.params ?? {}) as { width?: number; height?: number };\n          handlers.onSizeChange?.({\n            ...(typeof p.width === \"number\" ? { width: p.width } : {}),\n            ...(typeof p.height === \"number\" ? { height: p.height } : {}),\n          });\n          return;\n        }\n        case \"notifications/log\": {\n          handlers.onLog?.(note.params);\n          return;\n        }\n        case \"notifications/request_teardown\": {\n          handlers.onRequestTeardown?.(note.params);\n          return;\n        }\n        case \"notifications/error\": {\n          const p = (note.params ?? {}) as { message?: string };\n          reportError(\n            new Error(\n              typeof p.message === \"string\" ? p.message : \"Widget error\",\n            ),\n          );\n          return;\n        }\n        default:\n          return;\n      }\n    } catch (err) {\n      const error = err instanceof Error ? err : new Error(String(err));\n      reportError(error);\n    }\n  };\n\n  // The host applies the cross-origin guard before delegating; this only\n  // validates the JSON-RPC envelope.\n  const onMessage = (event: MessageEvent) => {\n    if (disposed) return;\n    if (!isJsonRpcMessage(event.data)) return;\n\n    const msg = event.data;\n    if (isRequest(msg)) {\n      void handleRequest(msg);\n    } else if (isNotification(msg)) {\n      handleNotification(msg);\n    }\n  };\n\n  return {\n    onMessage,\n    dispose: () => {\n      disposed = true;\n    },\n    notifyToolInput: (input: unknown) => {\n      post({\n        jsonrpc: \"2.0\",\n        method: \"notifications/tools/call/input\",\n        params: { input },\n      });\n      post({\n        jsonrpc: \"2.0\",\n        method: \"ui/notifications/tool-input\",\n        params: isRecord(input) ? { arguments: input } : {},\n      });\n    },\n    notifyToolResult: (result: unknown) => {\n      post({\n        jsonrpc: \"2.0\",\n        method: \"notifications/tools/call/result\",\n        params: { result },\n      });\n      post({\n        jsonrpc: \"2.0\",\n        method: \"ui/notifications/tool-result\",\n        params: isRecord(result)\n          ? result\n          : { content: [{ type: \"text\", text: String(result) }] },\n      });\n    },\n    notifyHostContextChanged: (ctx: McpAppHostContext) => {\n      post({\n        jsonrpc: \"2.0\",\n        method: \"notifications/host_context/changed\",\n        params: ctx,\n      });\n      post({\n        jsonrpc: \"2.0\",\n        method: \"ui/notifications/host-context-changed\",\n        params: ctx,\n      });\n    },\n  };\n}\n"],"mappings":";;;AAgBA,MAAM,sBAAsB;CAC1B;CACA;CACA;AACF;AAEA,SAAS,oBAAoB,OAA4C;CACvE,OAAO,oBAAoB,MAAM,SAAS,SAAS,KAAK;AAC1D;AAEA,SAAS,UACP,OACyD;CACzD,OACE,SAAS,KAAK,KACd,OAAO,MAAM,SAAS,YACtB,OAAO,MAAM,YAAY;AAE7B;AAEA,SAAS,mBACP,OAC2C;CAC3C,IAAI,CAAC,SAAS,KAAK,GAAG,OAAO,KAAA;CAC7B,MAAM,EAAE,uBAAuB,GAAG,SAAS;CAC3C,OAAO;EACL,GAAG;EAEH,GAAI,MAAM,QAAQ,qBAAqB,IACnC,EACE,uBAAuB,OAAO,OAAO,qBAAqB,CAAC,CAAC,OAC1D,mBACF,EACF,IACA,CAAC;CACP;AACF;AAEA,SAAS,oBAAoB,QAAyC;CACpE,IAAI,CAAC,SAAS,MAAM,GAAG,OAAO,CAAC;CAC/B,MAAM,kBAAkB,mBAAmB,OAAO,eAAe;CACjE,OAAO;EACL,GAAI,UAAU,OAAO,OAAO,IAAI,EAAE,SAAS,OAAO,QAAQ,IAAI,CAAC;EAC/D,GAAI,kBAAkB,EAAE,gBAAgB,IAAI,CAAC;EAC7C,GAAI,OAAO,OAAO,oBAAoB,WAClC,EAAE,iBAAiB,OAAO,gBAAgB,IAC1C,CAAC;CACP;AACF;AAmBA,MAAM,oBAAoC;CACxC,MAAM;CACN,SAAS;AACX;AAKA,MAAM,iBAAyC;CAC7C,gCAAgC;CAChC,iCAAiC;CACjC,2BAA2B;CAC3B,gBAAgB;CAChB,2BAA2B;CAC3B,cAAc;CACd,yBAAyB;AAC3B;AAEA,MAAM,mBAAmB,WACvB,eAAe,WAAW;AAE5B,MAAM,gBAAgB;CACpB,YAAY;CACZ,gBAAgB;CAChB,gBAAgB;CAChB,eAAe;CACf,eAAe;AACjB;AAEA,SAAS,iBAAiB,OAA+C;CACvE,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAChD,MAAM,IAAI;CACV,OAAO,EAAE,YAAY,SAAS,OAAO,EAAE,WAAW;AACpD;AAEA,SAAS,UAAU,KAAwD;CACzE,OAAO,QAAQ;AACjB;AAEA,SAAS,eACP,KACkC;CAClC,OAAO,EAAE,QAAQ;AACnB;AAEA,SAAgB,mBACd,MACc;CACd,MAAM,EACJ,OACA,WAAW,CAAC,GACZ,WAAW,mBACX,cAAc,CAAC,MACb;CACJ,IAAI,WAAW;CACf,IAAI,mBAA2C,CAAC;CAEhD,MAAM,QAAQ,QAA8B;EAC1C,IAAI,UAAU;EACd,MAAM,YAAY,GAAG;CACvB;CAEA,MAAM,WACJ,IACA,YAGG;EACH,MAAM,MAA6B;GACjC,SAAS;GACT;GACA,GAAG;EACL;EACA,KAAK,GAAG;CACV;CAEA,MAAM,iBACJ,IACA,MACA,SACA,SACG;EACH,QAAQ,IAAI,EACV,OAAO;GACL;GACA;GACA,GAAI,SAAS,KAAA,IAAY,EAAE,KAAK,IAAI,CAAC;EACvC,EACF,CAAC;CACH;CAEA,MAAM,eAAe,UAAiB;EACpC,IAAI,UAAU;EACd,mBACE,gBACA,mBACA,SAAS,SAAS,KAAK,QAAQ,GAC/B,KACF;CACF;CAEA,MAAM,gBAAgB,OAAO,QAA8B;EACzD,IAAI;GACF,MAAM,SAAS,IAAI;GAEnB,QAAQ,gBAAgB,IAAI,MAAM,GAAlC;IACE,KAAK,iBAAiB;KACpB,mBAAmB,oBAAoB,MAAM;KAC7C,MAAM,2BACJ,iBAAiB,mBAAA;KACnB,QAAQ,IAAI,IAAI,EACd,QAAQ;MACN,iBAAiB;MACjB,MAAM;MACN;MACA;MACA,cAAc;OACZ,OAAO,SAAS,WAAW,CAAC,IAAI,KAAA;OAChC,WACE,SAAS,gBAAgB,SAAS,gBAC9B,CAAC,IACD,KAAA;OACN,IAAI;QACF,aAAa,CAAC,CAAC,SAAS;QACxB,UAAU,CAAC,CAAC,SAAS;QACrB,oBAAoB,CAAC,CAAC,SAAS;QAC/B,oBAAoB,CAAC,CAAC,SAAS;OACjC;MACF;MACA,kBAAkB;OAChB,GAAI,SAAS,WAAW,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC;OAC7C,GAAI,SAAS,WAAW,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC;OAC/C,GAAI,SAAS,gBAAgB,SAAS,gBAClC,EAAE,iBAAiB,CAAC,EAAE,IACtB,CAAC;OACL,GAAI,SAAS,qBACT,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,EAAE,IACnC,CAAC;OACL,GAAI,SAAS,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC;OACxD,GAAI,SAAS,QAAQ,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC;MAC1C;KACF,EACF,CAAC;KACD;IACF;IAEA,KAAK,cAAc;KACjB,IAAI,CAAC,SAAS,UAAU;MACtB,cACE,IAAI,IACJ,cAAc,gBACd,0CACF;MACA;KACF;KACA,MAAM,aAAc,UAAU,CAAC;KAI/B,IAAI,OAAO,WAAW,SAAS,UAAU;MACvC,cACE,IAAI,IACJ,cAAc,eACd,qCACF;MACA;KACF;KACA,IACE,SAAS,gBACT,CAAC,SAAS,aAAa,SAAS,WAAW,IAAI,GAC/C;MACA,cACE,IAAI,IACJ,cAAc,eACd,SAAS,WAAW,KAAK,8BAC3B;MACA;KACF;KACA,IAAI;KACJ,IAAI,WAAW,cAAc,KAAA,GAAW;MACtC,IACE,WAAW,cAAc,QACzB,OAAO,WAAW,cAAc,YAChC,MAAM,QAAQ,WAAW,SAAS,GAClC;OACA,cACE,IAAI,IACJ,cAAc,eACd,0CACF;OACA;MACF;MACA,WAAW,WAAW;KACxB;KACA,MAAM,SAAS,MAAM,SAAS,SAAS;MACrC,MAAM,WAAW;MACjB,GAAI,aAAa,KAAA,IAAY,EAAE,WAAW,SAAS,IAAI,CAAC;KAC1D,CAAC;KACD,QAAQ,IAAI,IAAI,EAAE,OAAO,CAAC;KAC1B;IACF;IAEA,KAAK,kBAAkB;KACrB,IAAI,CAAC,SAAS,cAAc;MAC1B,cACE,IAAI,IACJ,cAAc,gBACd,8CACF;MACA;KACF;KACA,MAAM,aAAc,UAAU,CAAC;KAC/B,IAAI,OAAO,WAAW,QAAQ,UAAU;MACtC,cACE,IAAI,IACJ,cAAc,eACd,wCACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAQ,MAAM,SAAS,aAAa,EAAE,KAAK,WAAW,IAAI,CAAC,EAC7D,CAAC;KACD;IACF;IAEA,KAAK;KACH,IAAI,CAAC,SAAS,eAAe;MAC3B,cACE,IAAI,IACJ,cAAc,gBACd,8CACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAS,MAAM,SAAS,cAAc,MAAM,KAAM,KACpD,CAAC;KACD;IAGF,KAAK,YAAY;KACf,IAAI,CAAC,SAAS,UAAU;MACtB,cACE,IAAI,IACJ,cAAc,gBACd,wCACF;MACA;KACF;KACA,MAAM,aAAc,UAAU,CAAC;KAC/B,IAAI,OAAO,WAAW,QAAQ,UAAU;MACtC,cACE,IAAI,IACJ,cAAc,eACd,kCACF;MACA;KACF;KACA,IAAI;KACJ,IAAI;MACF,eAAe,IAAI,IAAI,WAAW,GAAG,CAAC,CAAC;KACzC,QAAQ;MACN,cACE,IAAI,IACJ,cAAc,eACd,+BACF;MACA;KACF;KACA,IAAI,iBAAiB,YAAY,iBAAiB,SAAS;MACzD,cACE,IAAI,IACJ,cAAc,eACd,oCACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAQ,MAAM,SAAS,SAAS,EAAE,KAAK,WAAW,IAAI,CAAC,EACzD,CAAC;KACD;IACF;IAEA,KAAK;KACH,IAAI,CAAC,SAAS,aAAa;MACzB,cACE,IAAI,IACJ,cAAc,gBACd,2CACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAS,MAAM,SAAS,YAAY,MAAM,KAAM,KAClD,CAAC;KACD;IAGF,KAAK;KACH,IAAI,CAAC,SAAS,oBAAoB;MAChC,cACE,IAAI,IACJ,cAAc,gBACd,kDACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAS,MAAM,SAAS,mBAAmB,MAAM,KAAM,KACzD,CAAC;KACD;IAGF,KAAK,sBAAsB;KACzB,IAAI,CAAC,SAAS,oBAAoB;MAChC,cACE,IAAI,IACJ,cAAc,gBACd,kDACF;MACA;KACF;KACA,MAAM,aAAc,UAAU,CAAC;KAC/B,IAAI,CAAC,oBAAoB,WAAW,IAAI,GAAG;MACzC,cACE,IAAI,IACJ,cAAc,eACd,4CACF;MACA;KACF;KACA,QAAQ,IAAI,IAAI,EACd,QAAQ,MAAM,SAAS,mBAAmB,EACxC,MAAM,WAAW,KACnB,CAAC,EACH,CAAC;KACD;IACF;IAEA,SACE,cACE,IAAI,IACJ,cAAc,gBACd,mBAAmB,IAAI,QACzB;GAEJ;EACF,SAAS,KAAK;GACZ,MAAM,QAAQ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;GAChE,YAAY,KAAK;GACjB,cAAc,IAAI,IAAI,cAAc,eAAe,MAAM,OAAO;EAClE;CACF;CAEA,MAAM,sBAAsB,SAAoC;EAC9D,IAAI;GACF,QAAQ,gBAAgB,KAAK,MAAM,GAAnC;IACE,KAAK;KACH,SAAS,gBAAgB,gBAAgB;KACzC;IAEF,KAAK,8BAA8B;KACjC,MAAM,IAAK,KAAK,UAAU,CAAC;KAC3B,SAAS,eAAe;MACtB,GAAI,OAAO,EAAE,UAAU,WAAW,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;MACxD,GAAI,OAAO,EAAE,WAAW,WAAW,EAAE,QAAQ,EAAE,OAAO,IAAI,CAAC;KAC7D,CAAC;KACD;IACF;IACA,KAAK;KACH,SAAS,QAAQ,KAAK,MAAM;KAC5B;IAEF,KAAK;KACH,SAAS,oBAAoB,KAAK,MAAM;KACxC;IAEF,KAAK,uBAAuB;KAC1B,MAAM,IAAK,KAAK,UAAU,CAAC;KAC3B,YACE,IAAI,MACF,OAAO,EAAE,YAAY,WAAW,EAAE,UAAU,cAC9C,CACF;KACA;IACF;IACA,SACE;GACJ;EACF,SAAS,KAAK;GACZ,MAAM,QAAQ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;GAChE,YAAY,KAAK;EACnB;CACF;CAIA,MAAM,aAAa,UAAwB;EACzC,IAAI,UAAU;EACd,IAAI,CAAC,iBAAiB,MAAM,IAAI,GAAG;EAEnC,MAAM,MAAM,MAAM;EAClB,IAAI,UAAU,GAAG,GACf,cAAmB,GAAG;OACjB,IAAI,eAAe,GAAG,GAC3B,mBAAmB,GAAG;CAE1B;CAEA,OAAO;EACL;EACA,eAAe;GACb,WAAW;EACb;EACA,kBAAkB,UAAmB;GACnC,KAAK;IACH,SAAS;IACT,QAAQ;IACR,QAAQ,EAAE,MAAM;GAClB,CAAC;GACD,KAAK;IACH,SAAS;IACT,QAAQ;IACR,QAAQ,SAAS,KAAK,IAAI,EAAE,WAAW,MAAM,IAAI,CAAC;GACpD,CAAC;EACH;EACA,mBAAmB,WAAoB;GACrC,KAAK;IACH,SAAS;IACT,QAAQ;IACR,QAAQ,EAAE,OAAO;GACnB,CAAC;GACD,KAAK;IACH,SAAS;IACT,QAAQ;IACR,QAAQ,SAAS,MAAM,IACnB,SACA,EAAE,SAAS,CAAC;KAAE,MAAM;KAAQ,MAAM,OAAO,MAAM;IAAE,CAAC,EAAE;GAC1D,CAAC;EACH;EACA,2BAA2B,QAA2B;GACpD,KAAK;IACH,SAAS;IACT,QAAQ;IACR,QAAQ;GACV,CAAC;GACD,KAAK;IACH,SAAS;IACT,QAAQ;IACR,QAAQ;GACV,CAAC;EACH;CACF;AACF"}

package/dist/mcp-apps/csp.d.ts

@@ -0,0 +1,4 @@
+import type { McpAppResourceCSP } from "./types.js";
+export declare const buildMcpAppCsp: (csp?: McpAppResourceCSP) => string;
+export declare const applyMcpAppCsp: (html: string, csp?: McpAppResourceCSP) => string;
+//# sourceMappingURL=csp.d.ts.map

package/dist/mcp-apps/csp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csp.d.ts","mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAS;AAyChD,eAAO,MAAM,cAAc,GAAI,MAAM,iBAAiB,KAAG,MAyBxD;AAiDD,eAAO,MAAM,cAAc,GACzB,MAAM,MAAM,EACZ,MAAM,iBAAiB,KACtB,MAKF","names":[],"ignoreList":[],"sources":["../../src/mcp-apps/csp.ts"],"sourcesContent":[null]}