@zackbart/connecta 0.22.3 → 0.24.0

package/templates/node/README.md

@@ -44,79 +44,72 @@ So commit the `package-lock.json` that the `npm install` above wrote on this
 machine: from then on the build context carries it and every build takes the
 reproducible `npm ci` path.
 
-## Turn on the operator surface
+## Select optional modules
 
-Out of the box this deployment serves the seven-tool MCP surface and a
-read-only operator UI: open `http://localhost:8787/`, paste the bearer, and you
-get Connections. The other three pages are configuration away, and each one is
-a commented block in `src/index.ts` — uncomment it, set the variables it names
-in `.env`, restart. Do them in this order; the last two lean on the first, and
-Credentials wants one thing more than a block, called out in step 2.
+The template explicitly enables `ui: operatorUi()` from
+`@zackbart/connecta/ui`. Open `http://localhost:8787/` and supply the configured
+bearer to inspect Connections. Omit that option and import for an API-only
+server. OAuth callbacks remain in core even with no UI.
 
-**1. Operator sign-in (Clerk).** A bearer token is a client key. It may call
-tools and read connector status, but it may not write a credential or issue an
-access token — that would make one shared secret a deployment-admin key. An
-interactive identity is what unlocks the actionable half:
+Connection management needs an interactive identity. A configured bearer is a
+client key and never authorizes browser credential mutations. To enable Clerk:
 
 ```sh
-npm install @clerk/backend    # optional peer; it does not install with Connecta
+npm install @clerk/backend
 ```
 
-Set `CLERK_PUBLISHABLE_KEY` and `CLERK_SECRET_KEY`, uncomment the `clerkAuth`
-import, the two `process.env.CLERK_*` reads, and the `clerkAuth({ … })` entry in
-`auth`. Enable Dynamic Client Registration on the Clerk instance (OAuth
-Applications → DCR) if MCP clients should sign in through it too, and set
-`PUBLIC_URL` first — Clerk redirects back to it.
+Set `CLERK_PUBLISHABLE_KEY` and `CLERK_SECRET_KEY`, enable the corresponding
+`clerkAuth` import and auth entry in `src/index.ts`, and set `PUBLIC_URL`.
+Enable Dynamic Client Registration on the Clerk instance if MCP clients should
+sign in with OAuth. Connecta no longer issues named client access tokens; keep
+the configured bearer only for clients that need it.
 
-Clerk remains the identity provider when several people share this Docker
-deployment. Uncomment the `identity` block in `src/index.ts` to give each Clerk
-principal a config-derived connector view and to choose operators. Add
-`authScope: "personal"` to a connector when each person should supply their own
-credential or finish their own downstream OAuth flow. Without those options,
-all connectors and auth stay shared exactly as before.
+Set the code-owned identity resolvers deliberately. `connectorAccess` governs
+use; `credentialAdministration` permits shared-auth changes, and
+`personalConnection` permits the signed-in principal's personal-auth changes.
+Both management permissions default to none. Use `authScope: "personal"` for a
+connector where each person should connect their own downstream account.
+`activityAccess` separately selects readers of global activity.
 
-**2. Credential vault.** Uncomment `credentials` and set
+### Credential vault
+
+Import `encryptedCredentialVault` from `@zackbart/connecta/credentials`, then
+set `vault: encryptedCredentialVault(storage, credentialKey)`. Set
 `CONNECTA_CREDENTIAL_KEY` to a base64 32-byte AES key:
 
 ```sh
 node -e "console.log(crypto.randomBytes(32).toString('base64'))"
 ```
 
-Every connector that declares a `credential` slot then becomes editable at
-`/credentials`, with values encrypted in the state file. The shipped `time`
-connector declares none — telling the time needs no secret — so the key alone
-leaves the page hidden, which is the honest state for a page with nothing on
-it. Add `credential: { label: "API token" }` to an `api()` connector (the
-commented shape is in `src/index.ts`) and read it in a handler with
-`await ctx.credential?.get()`, or use a provider connector such as `notion()`,
-which declares its own; Credentials appears for a signed-in operator on the
-next restart. Keep the key anywhere
-except that file — it is the only thing standing between a copied state file
-and the secrets in it — and note that losing it makes stored values
-unreadable. A saved replacement takes effect on the next call; nothing
-restarts, and the deployment never probes a credential to see whether it still
-works. It fails at use, loudly, and the agent is routed to `/credentials`.
-
-**3. Access tokens.** Uncomment `accessTokens: {}`. A signed-in operator can
-then mint named, revocable Bearer tokens at `/tokens` for header-capable
-clients that will not do OAuth. Secrets are shown once and only their hashes
-are stored, so a lost token is reissued, never recovered.
-
-**4. Activity.** Uncomment the `activity` block and the `fileActivityStore`
-import. `/activity` then answers with who called what, when, how long it took,
-and whether it worked — never arguments, results, generated code, or raw error
-messages, because the store is never handed one. `src/file-activity.ts` is
-yours: it appends a line per call and rewrites the log down to the newest 5,000
-events once it runs a slack window past that, so the file holds a few hundred
-more than the ceiling between rewrites rather than being rewritten on every
-call. That is a retention policy chosen for a single container and worth
-revisiting for anything busier. In Docker the log lands on the same volume as
-the state file.
-
-None of this changes what agents can reach. Operator pages manage the
-authentication material behind capabilities this file already declares; the
-connector set, the tool catalog, and its annotations are `src/index.ts`'s
-business and stay that way.
+Keep this key outside the state file. Losing it makes saved values unreadable;
+upgrades must reuse it. The shipped `time` connector declares no credential
+slot. Add `credential: { label: "API token" }` to an `api()` connector and read
+it through `await ctx.credential?.get()`, or use a provider such as `notion()`
+that declares its own slot. Authorized humans manage the slot inside that
+connection on `/`; there is no separate Credentials tab.
+
+A saved replacement takes effect on the next call. Connecta tests credentials
+only on an explicit action and otherwise fails at use. Without a vault or UI,
+static credential recovery reports unavailable instead of offering a dead link.
+
+### Activity history and diagnostics
+
+Import `activityHistory` from `@zackbart/connecta/activity` and wire the template's
+`fileActivityStore` through `activity: activityHistory({ store })`. The Activity
+tab appears for authorized readers when the store supports listing. Omit this
+option and its store wiring to record no activity.
+
+`src/file-activity.ts` belongs to the deployment. It appends payload-free events
+and periodically retains the newest 5,000, allowing a small slack window between
+rewrites. Docker stores the log on the state volume. It records no arguments,
+results, generated code, or raw errors. Adjust retention in that file if needed.
+
+Diagnostics are independent. Keep the default logger or provide your own;
+`logger: "silent"` suppresses diagnostic output explicitly.
+
+The UI displays connections and current permissions. Configuration still owns
+the connector set, tool definitions, and access rules. There is no token tab,
+team roster, or policy editor.
 
 ## Deployment contract
 
@@ -153,11 +146,7 @@ Connecta doctor passed: 1 connector(s), QuickJS executed, prescribed seven-tool
 `QuickJS` is this deployment's sandbox, reported by the deployment itself —
 swap the executor and doctor names the one that actually ran the program.
 
-That is deliberate. Doctor holds a bearer, and a bearer learns the model-facing
-surface, not the deployment's configuration topology: whether this deployment
-issues access tokens or keeps a credential vault is operator data, and a client
-key is not an operator. Confirm the operator surface the way an operator will —
-sign in at `/` and check that the pages you turned on are there: Tokens and
-Activity once their blocks are uncommented, and Credentials once the vault has
-a connector credential slot to show. The nav lists a page only when this
-deployment can serve it, so an absent page is a report, not a fault.
+Doctor verifies the MCP contract. Verify UI behavior separately: sign in at `/`,
+confirm the visible connections and their permitted auth controls, and check
+Activity only when you enabled a readable history store. A missing optional
+feature should not leave a tab behind.

package/templates/node/package.json

@@ -15,7 +15,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@zackbart/connecta": "0.22.3",
+    "@zackbart/connecta": "0.24.0",
     "quickjs-emscripten": "0.32.0"
   },
   "devDependencies": {

package/templates/node/src/file-activity.ts

@@ -27,7 +27,7 @@ import type {
   ActivityStore,
   ToolCallActivityEvent,
 } from "@zackbart/connecta";
-import { InvalidActivityCursorError } from "@zackbart/connecta";
+import { InvalidActivityCursorError } from "@zackbart/connecta/activity";
 
 /**
  * Events allowed past `maxEvents` before the log is rewritten. Trimming on the

package/templates/node/src/index.ts

@@ -1,3 +1,7 @@
+import { bearerToken } from "@zackbart/connecta/auth/bearer";
+import { operatorUi } from "@zackbart/connecta/ui";
+// import { encryptedCredentialVault } from "@zackbart/connecta/credentials";
+// import { activityHistory } from "@zackbart/connecta/activity";
 /**
  * Prescribed Connecta deployment.
  *
@@ -20,7 +24,7 @@
  *   CONNECTA_CREDENTIAL_KEY  vault key, once the credentials block is on
  *   CONNECTA_ACTIVITY_FILE   activity log, once the activity block is on
  */
-import { api, bearerToken, createConnecta } from "@zackbart/connecta";
+import { api, createConnecta } from "@zackbart/connecta";
 import { fileStorage, listen } from "@zackbart/connecta/node";
 import { quickJsExecutor } from "@zackbart/connecta/quickjs";
 // Operator sign-in. Needs `npm install @clerk/backend` — it is an optional
@@ -74,7 +78,7 @@ const connecta = createConnecta({
   // identity: {
   //   connectorAccess: ({ principal }) =>
   //     principal?.id === "user_admin" ? "all" : ["time"],
-  //   operatorAccess: ({ id }) => id === "user_admin",
+  //   activityAccess: ({ id }) => id === "user_admin",
   // },
   publicUrl,
   // Required: model-written programs run in a bounded QuickJS child.
@@ -84,24 +88,19 @@ const connecta = createConnecta({
   // with this key — so keep the key out of that file and out of source:
   //   node -e "console.log(crypto.randomBytes(32).toString('base64'))"
   // Rotating a credential takes effect on the next call; no restart.
-  // credentials: { encryptionKey: process.env.CONNECTA_CREDENTIAL_KEY },
-  //
-  // Named, revocable Bearer tokens for MCP clients, issued at /tokens by a
-  // signed-in operator. Secrets are shown once; only their hashes are stored.
-  // Requires the Clerk block above — there is nobody to authorize issuance
-  // otherwise.
-  // accessTokens: {},
-  //
+  // vault: encryptedCredentialVault(storage, process.env.CONNECTA_CREDENTIAL_KEY!),
   // Payload-free activity history at /activity: who called what, when, how
   // long it took, and whether it worked. Never arguments, results, generated
   // code, or raw error messages. Commented because retention is yours to
   // choose — see src/file-activity.ts.
-  // activity: {
+  // activity: activityHistory({
   //   store: fileActivityStore(
   //     process.env.CONNECTA_ACTIVITY_FILE || "./.connecta-activity.jsonl",
   //   ),
   //   deploymentId: "production",
-  // },
+  // }),
+  ui: operatorUi(),
+  identity: { credentialAdministration: () => "all", personalConnection: () => "all" },
   connectors: [
     api("time", {
       description: "Time — current timestamp",

package/dist/access-tokens.d.ts

@@ -1,31 +0,0 @@
-import type { IdentityReference, InboundAuth, KVStorage } from "./types.js";
-export interface AccessTokenMetadata {
-    id: string;
-    name: string;
-    tokenPrefix: string;
-    createdAt: string;
-    revokedAt?: string;
-}
-export interface CreatedAccessToken {
-    token: string;
-    accessToken: AccessTokenMetadata;
-}
-/**
- * Deployment-scoped personal access tokens. Secret material is never
- * recoverable: authentication indexes a SHA-256 digest of a random 256-bit
- * token, while separately enumerable metadata powers operator management.
- */
-export declare class AccessTokenManager {
-    private readonly storage;
-    readonly auth: InboundAuth;
-    private readonly maxActive;
-    constructor(storage: KVStorage, options?: {
-        maxActive?: number;
-    });
-    private read;
-    list(): Promise<AccessTokenMetadata[]>;
-    create(name: unknown, createdBy: string | IdentityReference): Promise<CreatedAccessToken>;
-    rename(id: string, name: unknown): Promise<AccessTokenMetadata | null>;
-    revoke(id: string, revokedBy: string): Promise<AccessTokenMetadata | null>;
-    private authorize;
-}

package/dist/access-tokens.js

@@ -1,236 +0,0 @@
-import { validIdentityReference } from "./identity.js";
-const TOKEN_PREFIX = "cta_";
-const TOKEN_BYTES = 32;
-const TOKEN_VALUE_RE = /^cta_[A-Za-z0-9_-]{43}$/;
-const RECORD_PREFIX = "access-token:v1:record:";
-const LOOKUP_PREFIX = "access-token:v1:lookup:";
-const MAX_NAME_CHARACTERS = 80;
-const DEFAULT_MAX_ACTIVE = 100;
-const MAX_CONFIGURED_ACTIVE = 1_000;
-const encoder = new TextEncoder();
-function recordKey(id) {
-    return `${RECORD_PREFIX}${id}`;
-}
-function lookupKey(hash) {
-    return `${LOOKUP_PREFIX}${hash}`;
-}
-function bytesToBase64Url(bytes) {
-    let binary = "";
-    for (const byte of bytes)
-        binary += String.fromCharCode(byte);
-    return btoa(binary)
-        .replaceAll("+", "-")
-        .replaceAll("/", "_")
-        .replace(/=+$/u, "");
-}
-function bytesToHex(bytes) {
-    return [...bytes]
-        .map((byte) => byte.toString(16).padStart(2, "0"))
-        .join("");
-}
-async function hashToken(token) {
-    return bytesToHex(new Uint8Array(await crypto.subtle.digest("SHA-256", encoder.encode(token))));
-}
-function normalizeName(value) {
-    if (typeof value !== "string") {
-        throw new Error("Token name must be a string");
-    }
-    const compact = value.replace(/\s+/gu, " ").trim();
-    if (!compact)
-        throw new Error("Token name cannot be empty");
-    if (Array.from(compact).length > MAX_NAME_CHARACTERS) {
-        throw new Error(`Token name cannot exceed ${MAX_NAME_CHARACTERS} characters`);
-    }
-    return compact;
-}
-function parseRecord(raw) {
-    try {
-        const value = JSON.parse(raw);
-        if (value.version !== 1 ||
-            typeof value.id !== "string" ||
-            !/^[0-9a-f-]{36}$/u.test(value.id) ||
-            typeof value.name !== "string" ||
-            typeof value.tokenHash !== "string" ||
-            !/^[0-9a-f]{64}$/u.test(value.tokenHash) ||
-            typeof value.tokenPrefix !== "string" ||
-            typeof value.createdAt !== "string" ||
-            typeof value.createdBy !== "string" ||
-            (value.principal !== undefined &&
-                !validIdentityReference(value.principal)) ||
-            (value.revokedAt !== undefined &&
-                typeof value.revokedAt !== "string") ||
-            (value.revokedBy !== undefined &&
-                typeof value.revokedBy !== "string")) {
-            throw new Error("invalid token record");
-        }
-        return value;
-    }
-    catch {
-        throw new Error("Stored access token metadata is invalid or corrupted");
-    }
-}
-function parseLookup(raw) {
-    try {
-        const value = JSON.parse(raw);
-        return value.version === 1 && typeof value.id === "string"
-            ? { version: 1, id: value.id }
-            : null;
-    }
-    catch {
-        return null;
-    }
-}
-function metadata(record) {
-    return {
-        id: record.id,
-        name: record.name,
-        tokenPrefix: record.tokenPrefix,
-        createdAt: record.createdAt,
-        ...(record.revokedAt ? { revokedAt: record.revokedAt } : {}),
-    };
-}
-function unauthorized() {
-    return {
-        ok: false,
-        response: new Response(JSON.stringify({ error: "unauthorized" }), {
-            status: 401,
-            headers: {
-                "Content-Type": "application/json",
-                "WWW-Authenticate": "Bearer",
-            },
-        }),
-    };
-}
-/**
- * Deployment-scoped personal access tokens. Secret material is never
- * recoverable: authentication indexes a SHA-256 digest of a random 256-bit
- * token, while separately enumerable metadata powers operator management.
- */
-export class AccessTokenManager {
-    storage;
-    auth;
-    maxActive;
-    constructor(storage, options = {}) {
-        this.storage = storage;
-        if (!storage.list) {
-            throw new Error("accessTokens requires a storage adapter that implements list(prefix)");
-        }
-        const maxActive = options.maxActive ?? DEFAULT_MAX_ACTIVE;
-        if (!Number.isInteger(maxActive) ||
-            maxActive < 1 ||
-            maxActive > MAX_CONFIGURED_ACTIVE) {
-            throw new Error(`accessTokens.maxActive must be a whole number from 1 to ${MAX_CONFIGURED_ACTIVE}`);
-        }
-        this.maxActive = maxActive;
-        this.auth = {
-            kind: "access_token",
-            activityActorNamespace: "connecta:access-tokens:v1",
-            activityActorLabel: async (id) => {
-                try {
-                    return (await this.read(id))?.name;
-                }
-                catch {
-                    return undefined;
-                }
-            },
-            authorize: (request) => this.authorize(request),
-        };
-    }
-    async read(id) {
-        const raw = await this.storage.get(recordKey(id));
-        return raw ? parseRecord(raw) : null;
-    }
-    async list() {
-        const keys = await this.storage.list(RECORD_PREFIX);
-        const records = await Promise.all(keys.map(async (key) => {
-            const raw = await this.storage.get(key);
-            return raw ? parseRecord(raw) : null;
-        }));
-        return records
-            .filter((record) => Boolean(record))
-            .sort((a, b) => b.createdAt.localeCompare(a.createdAt))
-            .map(metadata);
-    }
-    async create(name, createdBy) {
-        const normalizedName = normalizeName(name);
-        const active = (await this.list()).filter((token) => !token.revokedAt);
-        if (active.length >= this.maxActive) {
-            throw new Error(`This deployment already has the maximum of ${this.maxActive} active access tokens`);
-        }
-        const secretBytes = crypto.getRandomValues(new Uint8Array(TOKEN_BYTES));
-        const token = TOKEN_PREFIX + bytesToBase64Url(secretBytes);
-        const hash = await hashToken(token);
-        if (await this.storage.get(lookupKey(hash))) {
-            throw new Error("Access token collision; create another token");
-        }
-        const record = {
-            version: 1,
-            id: crypto.randomUUID(),
-            name: normalizedName,
-            tokenHash: hash,
-            tokenPrefix: token.slice(0, 12),
-            createdAt: new Date().toISOString(),
-            createdBy: typeof createdBy === "string"
-                ? createdBy
-                : `${createdBy.namespace}:${createdBy.id}`,
-            ...(typeof createdBy === "string"
-                ? {}
-                : { principal: { ...createdBy } }),
-        };
-        await this.storage.set(recordKey(record.id), JSON.stringify(record));
-        try {
-            await this.storage.set(lookupKey(hash), JSON.stringify({ version: 1, id: record.id }));
-        }
-        catch (error) {
-            await this.storage.delete(recordKey(record.id)).catch(() => { });
-            throw error;
-        }
-        return { token, accessToken: metadata(record) };
-    }
-    async rename(id, name) {
-        const record = await this.read(id);
-        if (!record)
-            return null;
-        record.name = normalizeName(name);
-        await this.storage.set(recordKey(id), JSON.stringify(record));
-        return metadata(record);
-    }
-    async revoke(id, revokedBy) {
-        const record = await this.read(id);
-        if (!record)
-            return null;
-        if (!record.revokedAt) {
-            // Admission disappears first. A metadata-write failure may leave the UI
-            // calling the record active, but can never leave a token labelled
-            // revoked while its lookup still admits requests.
-            await this.storage.delete(lookupKey(record.tokenHash));
-            record.revokedAt = new Date().toISOString();
-            record.revokedBy = revokedBy;
-            await this.storage.set(recordKey(id), JSON.stringify(record));
-        }
-        return metadata(record);
-    }
-    async authorize(request) {
-        const header = request.headers.get("authorization") ?? "";
-        const match = /^Bearer\s+(.+)$/iu.exec(header);
-        const token = match?.[1];
-        if (!token || !TOKEN_VALUE_RE.test(token))
-            return unauthorized();
-        const hash = await hashToken(token);
-        const lookupRaw = await this.storage.get(lookupKey(hash));
-        if (!lookupRaw)
-            return unauthorized();
-        const lookup = parseLookup(lookupRaw);
-        if (!lookup)
-            return unauthorized();
-        const record = await this.read(lookup.id);
-        if (!record || record.revokedAt || record.tokenHash !== hash) {
-            return unauthorized();
-        }
-        return {
-            ok: true,
-            subjectId: record.id,
-            ...(record.principal ? { principal: { ...record.principal } } : {}),
-        };
-    }
-}

package/dist/apps-shell.d.ts

@@ -1,37 +0,0 @@
-/**
- * The one MCP Apps template connecta serves (`U5`, `U6`).
- *
- * A build-time string constant, not a file read at startup: the core is
- * Web-API-only so it runs unchanged on Workers, and the same bytes have to
- * serve everywhere. The shell is display-only: it renders whatever HTML a
- * program handed `connecta.ui` inside a nested `srcdoc` frame and forwards no
- * channel back from that frame to the host, so program-authored markup is
- * inert beyond its own pixels.
- *
- * The address carries a version segment because hosts are permitted to
- * prefetch and cache templates by URI: change these bytes, bump the version.
- */
-/** The only `ui://` URI in the system. No program input reaches it. */
-export declare const PROGRAM_UI_RESOURCE_URI = "ui://connecta/program-ui/v3";
-/** The mimeType the Apps spec requires of an HTML template. */
-export declare const PROGRAM_UI_MIME_TYPE = "text/html;profile=mcp-app";
-/**
- * The result `_meta` key carrying the payload (`U3`). A plain single-label
- * prefix rather than the reverse-DNS form MCP's SHOULD prefers: connecta has
- * no domain to reverse, and fabricating one to satisfy a SHOULD is a worse
- * answer than the shape the key format's MUST already permits.
- */
-export declare const PROGRAM_UI_META_KEY = "connecta/ui";
-/** The one extension identifier connecta advertises (`U11`). */
-export declare const MCP_APPS_EXTENSION = "io.modelcontextprotocol/ui";
-/**
- * The shell document. Dependency-free and deliberately small: it speaks the
- * Apps postMessage dialect (`ui/initialize`, `ui/notifications/initialized`,
- * `ui/notifications/tool-result`, `ui/notifications/size-changed`,
- * `ui/resource-teardown`), lifts `_meta["connecta/ui"].html` out of the
- * delivered tool result, and puts it in a frame. It declares no CSP domains,
- * so the host applies its restrictive default and the `srcdoc` frame inherits
- * `default-src 'none'`. The payload gets scripts and local interactivity, and
- * no network.
- */
-export declare const PROGRAM_UI_SHELL_HTML = "<!doctype html>\n<html lang=\"en\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n    <title>connecta program view</title>\n    <style>\n      html,\n      body {\n        margin: 0;\n        padding: 0;\n        background: transparent;\n      }\n      #program-view {\n        display: block;\n        width: 100%;\n        min-height: 480px;\n        border: 0;\n      }\n    </style>\n  </head>\n  <body>\n    <iframe\n      id=\"program-view\"\n      title=\"Program-rendered view\"\n      sandbox=\"allow-scripts\"\n      srcdoc=\"\"\n    ></iframe>\n    <script>\n      (function () {\n        \"use strict\";\n        // The host frame is the only peer this shell speaks to, in either\n        // direction. The payload frame below is sandboxed to scripts alone,\n        // with no same-origin escape, and is never handed a reply path:\n        // anything it posts fails the source check and is dropped. There is\n        // no bridge from program HTML to the host, by construction rather\n        // than by validation.\n        var host = window.parent;\n        var view = document.getElementById(\"program-view\");\n        var initializeId = \"connecta-ui-initialize\";\n        var lastWidth = 0;\n        var lastHeight = 0;\n\n        function send(message) {\n          if (!host || host === window) return;\n          host.postMessage(message, \"*\");\n        }\n\n        function notify(method, params) {\n          send({ jsonrpc: \"2.0\", method: method, params: params });\n        }\n\n        // Program views are fixed-height by construction. The shell has no\n        // bridge to the payload frame \u2014 that is the security posture, not an\n        // omission \u2014 so it can never learn the payload's content height, and\n        // what it reports here is its own box: the min-height above, unless\n        // the host has given it more. Taller content scrolls inside the inner\n        // frame rather than growing the view. Raising the min-height is the\n        // only lever; a content-height signal would cost the isolation.\n        function reportSize() {\n          var width = Math.ceil(document.documentElement.clientWidth);\n          var height = Math.ceil(document.documentElement.scrollHeight);\n          if (width === lastWidth && height === lastHeight) return;\n          lastWidth = width;\n          lastHeight = height;\n          notify(\"ui/notifications/size-changed\", {\n            width: width,\n            height: height\n          });\n        }\n\n        function payloadHtml(result) {\n          if (!result || typeof result !== \"object\") return null;\n          var meta = result._meta;\n          if (!meta || typeof meta !== \"object\") return null;\n          var payload = meta[\"connecta/ui\"];\n          if (!payload || typeof payload !== \"object\") return null;\n          var html = payload.html;\n          return typeof html === \"string\" && html.length > 0 ? html : null;\n        }\n\n        function render(params) {\n          var html =\n            payloadHtml(params) ||\n            payloadHtml(params && params.result) ||\n            payloadHtml(params && params.toolResult);\n          if (html === null) return;\n          view.srcdoc = html;\n          reportSize();\n        }\n\n        window.addEventListener(\"message\", function (event) {\n          if (event.source !== host) return;\n          var message = event.data;\n          if (!message || message.jsonrpc !== \"2.0\") return;\n          if (message.method === \"ui/notifications/tool-result\") {\n            render(message.params);\n            return;\n          }\n          if (message.method === \"ui/resource-teardown\") {\n            // A host->view request, not a notification: the host waits for\n            // this reply before it tears the view down. There is nothing to\n            // release, so answer immediately rather than make it time out.\n            if (message.id !== undefined && message.id !== null) {\n              send({ jsonrpc: \"2.0\", id: message.id, result: {} });\n            }\n            return;\n          }\n          // Only a completed handshake earns \"initialized\". A JSON-RPC error\n          // response carries the same id, and announcing initialization on one\n          // would assert a handshake that never happened.\n          if (message.id === initializeId && message.result !== undefined) {\n            notify(\"ui/notifications/initialized\", {});\n          }\n        });\n\n        window.addEventListener(\"resize\", reportSize);\n        view.addEventListener(\"load\", reportSize);\n\n        // Every field here is required by the Apps initialize schema, and a\n        // conforming host rejects the request outright when one is missing \u2014\n        // which would strand the shell before any tool result arrives.\n        send({\n          jsonrpc: \"2.0\",\n          id: initializeId,\n          method: \"ui/initialize\",\n          params: {\n            appInfo: { name: \"connecta program view\", version: \"1\" },\n            appCapabilities: {},\n            protocolVersion: \"2026-01-26\"\n          }\n        });\n        reportSize();\n      })();\n    </script>\n  </body>\n</html>\n";