mcp-native 0.0.3 → 0.1.0

package/README.md

@@ -9,47 +9,57 @@
 [![license](https://img.shields.io/npm/l/mcp-native)](https://github.com/pablospaniard/mcp-native/blob/main/LICENSE)
 [![CI](https://github.com/pablospaniard/mcp-native/actions/workflows/ci.yml/badge.svg)](https://github.com/pablospaniard/mcp-native/actions/workflows/ci.yml)
 
-[GitHub](https://github.com/pablospaniard/mcp-native) · [Architecture](https://github.com/pablospaniard/mcp-native/blob/main/docs/RFC-0001-architecture.md) · [Contributing](https://github.com/pablospaniard/mcp-native/blob/main/CONTRIBUTING.md) · [Security](https://github.com/pablospaniard/mcp-native/blob/main/SECURITY.md)
+[GitHub](https://github.com/pablospaniard/mcp-native) · [Architecture](https://github.com/pablospaniard/mcp-native/blob/main/docs/RFC-0001-architecture.md) · [Standards status](https://github.com/pablospaniard/mcp-native/blob/main/docs/standards-compatibility.md) · [Contributing](https://github.com/pablospaniard/mcp-native/blob/main/CONTRIBUTING.md) · [Security](https://github.com/pablospaniard/mcp-native/blob/main/SECURITY.md)
 
 </div>
 
 > **Experimental:** MCP Native is a proof of concept, not a production-ready MCP or React Native runtime. APIs may change before `1.0.0`.
 
-`mcp-native` is the convenience package for the complete public API. It re-exports the runtime contracts, declarative surface parser, trusted native render-plan builder, and policy-gated WebView compatibility primitives from the focused `@mcp-native/*` packages.
+> **Compatibility:** the initial tool/resource boundary preserves MCP `2026-07-28` fields, but complete MCP conformance is still in progress. The current declarative `0.1` surface is not A2UI v1.0, and the WebView primitives are not a complete MCP Apps host. See the [standards compatibility matrix](https://github.com/pablospaniard/mcp-native/blob/main/docs/standards-compatibility.md).
+
+`mcp-native` is the convenience package for the runtime and UI APIs. It re-exports the runtime contracts, declarative surface parser, trusted native renderer and hooks, and policy-gated WebView compatibility primitives from focused `@mcp-native/*` packages. Transport adapters are installed separately.
 
 ## Install
 
 ```bash
-npm install mcp-native
+npm install mcp-native react
 ```
 
-The package is ESM-only and includes TypeScript declarations.
+Add `react-native` when mounting native surfaces. The package is ESM-only and includes TypeScript declarations.
 
 ## End-to-end preview
 
-```ts
+```tsx
 import {
+  McpNativeSurface,
   McpNativeRuntime,
-  createNativeRenderPlan,
+  createAllowlistActionPolicy,
   parseA2uiSurface,
+  useMcpNativeActionDispatcher,
   type McpClient,
 } from "mcp-native";
+import { Button, Text, TextInput, View } from "react-native";
+
+const components = { Button, Text, TextInput, View };
 
 const client: McpClient = {
   async listTools() {
-    return [];
+    return { tools: [] };
   },
   async callTool(name, arguments_) {
     return {
-      content: [{ type: "json", data: { name, arguments: arguments_ } }],
+      content: [{ type: "text", text: `Called ${name}` }],
+      structuredContent: { name, arguments: arguments_ },
     };
   },
   async readResource(uri) {
-    return { uri };
+    return { contents: [{ uri, text: "" }] };
   },
 };
 
-const runtime = new McpNativeRuntime(client);
+const runtime = new McpNativeRuntime(client, {
+  actionPolicy: createAllowlistActionPolicy([{ name: "continue_flow" }]),
+});
 
 const surface = parseA2uiSurface({
   version: "0.1",
@@ -68,37 +78,45 @@ const surface = parseA2uiSurface({
   },
 });
 
-const plan = createNativeRenderPlan(surface);
-const button = surface.root.type === "container" ? surface.root.children[1] : undefined;
+function NativeScreen() {
+  const onAction = useMcpNativeActionDispatcher(runtime, {
+    onError: (error) => console.error("MCP action failed", error),
+  });
 
-if (button?.type === "button") {
-  await runtime.dispatch(button.action);
+  return <McpNativeSurface surface={surface} components={components} onAction={onAction} />;
 }
 ```
 
-The host maps the trusted names in `plan` to locally bundled native components. MCP Native never downloads and executes server-provided React Native JavaScript.
+The host supplies the locally bundled native components and explicitly allows the tools a surface may dispatch, including their arguments. Without an `actionPolicy`, surface action dispatch is denied; trusted host code can still call `callTool()` directly after JSON validation. MCP Native never downloads and executes server-provided React Native JavaScript.
 
 ## Included packages
 
 | Package                                                                              | What it provides                                                                 |
 | ------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------- |
 | [`@mcp-native/core`](https://www.npmjs.com/package/@mcp-native/core)                 | MCP client contracts, runtime delegation, JSON types, and declared tool actions. |
-| [`@mcp-native/a2ui`](https://www.npmjs.com/package/@mcp-native/a2ui)                 | Strict parsing for the initial declarative surface model.                        |
-| [`@mcp-native/react-native`](https://www.npmjs.com/package/@mcp-native/react-native) | Serializable render plans with a fixed native component catalog.                 |
-| [`@mcp-native/webview`](https://www.npmjs.com/package/@mcp-native/webview)           | MIME validation and deny-by-default remote HTML policy.                          |
+| [`@mcp-native/a2ui`](https://www.npmjs.com/package/@mcp-native/a2ui)                 | Strict parsing for the internal `0.1` proof-of-concept surface.                  |
+| [`@mcp-native/react-native`](https://www.npmjs.com/package/@mcp-native/react-native) | Trusted render plans, React hooks, and a fixed host-owned component catalog.     |
+| [`@mcp-native/webview`](https://www.npmjs.com/package/@mcp-native/webview)           | HTML policy primitives for the planned MCP Apps compatibility path.              |
 
 Install an individual package instead when you only need one layer.
 
+Use the separately installable [`@mcp-native/mcp`](https://github.com/pablospaniard/mcp-native/tree/main/packages/mcp) package to connect these APIs to the official MCP TypeScript SDK without forcing that SDK dependency on every `mcp-native` consumer.
+
 ## What works today
 
 - transport-independent MCP runtime contracts;
 - strict validation for container, text, button, and text-input nodes;
 - declared tool-action dispatch;
+- strict A2UI resource-link resolution from tool results;
 - trusted render plans for `View`, `Text`, `Button`, and `TextInput`;
+- mounting through host-provided components with action and text-binding event translation;
+- memoized render-plan and safely observed asynchronous action-dispatch hooks;
 - policy-gated inline and remote HTML document descriptions;
+- MCP `2026-07-28` tool/resource field preservation through the official SDK adapter;
+- pinned current-protocol integration coverage through the SDK HTTP handler/fetch path;
 - ESM exports, TypeScript declarations, automated tests, and signed npm provenance.
 
-The project does not yet include an official MCP SDK adapter, mounted React Native components, streaming UI updates, capability negotiation, or a runnable mobile demo. Follow the [roadmap](https://github.com/pablospaniard/mcp-native#roadmap) for progress.
+The project does not yet include local binding state, streaming UI updates, capability negotiation, authentication helpers, or a runnable mobile demo. Follow the [roadmap](https://github.com/pablospaniard/mcp-native#roadmap) for progress.
 
 ## Security model
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-native",
-  "version": "0.0.3",
+  "version": "0.1.0",
   "description": "Convenience package for the MCP Native runtime.",
   "keywords": [
     "a2ui",
@@ -37,9 +37,18 @@
     "access": "public"
   },
   "dependencies": {
-    "@mcp-native/a2ui": "^0.0.3",
-    "@mcp-native/core": "^0.0.3",
-    "@mcp-native/react-native": "^0.0.3",
-    "@mcp-native/webview": "^0.0.3"
+    "@mcp-native/a2ui": "^0.1.0",
+    "@mcp-native/core": "^0.1.0",
+    "@mcp-native/react-native": "^0.1.0",
+    "@mcp-native/webview": "^0.1.0"
+  },
+  "peerDependencies": {
+    "react": ">=18.3.1 <20",
+    "react-native": ">=0.76.0 <1"
+  },
+  "peerDependenciesMeta": {
+    "react-native": {
+      "optional": true
+    }
   }
 }