mountly-mcp 0.0.0 → 3.1.0

package/dist/chunk-4HC3OWAQ.js

@@ -0,0 +1,185 @@
+// src/json-render/mcp.ts
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+import {
+  EXTENSION_ID,
+  RESOURCE_MIME_TYPE,
+  getUiCapability,
+  registerAppResource,
+  registerAppTool
+} from "@modelcontextprotocol/ext-apps/server";
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { InMemoryTransport } from "@modelcontextprotocol/sdk/inMemory.js";
+var DEFAULT_RESOURCE_URI = "ui://json-render/view.html";
+var DEFAULT_TOOL_NAME = "render_ui";
+var LOOSE_SPEC_SCHEMA = z.looseObject({
+  root: z.string(),
+  elements: z.record(z.string(), z.unknown()),
+  state: z.unknown().optional()
+});
+function resolveInputSchema(options) {
+  if (options.inputSchema) return options.inputSchema;
+  const { catalog } = options;
+  if (typeof catalog.zodSchema !== "function") {
+    return { spec: LOOSE_SPEC_SCHEMA };
+  }
+  return { spec: z.union([catalog.zodSchema(), LOOSE_SPEC_SCHEMA]) };
+}
+function resolveDescription(options) {
+  if (options.description) return options.description;
+  const base = "Render an interactive UI. The `spec` argument must be a json-render spec conforming to the catalog.";
+  const prompt = typeof options.catalog.prompt === "function" ? options.catalog.prompt() : "";
+  return prompt ? `${base}
+
+${prompt}` : base;
+}
+function pickToolInputSpec(args) {
+  if (!args || typeof args !== "object") return args;
+  const record = args;
+  if (record.spec !== void 0) return record.spec;
+  return record;
+}
+function assertUiUri(uri) {
+  if (!uri.startsWith("ui://")) {
+    throw new Error(
+      `mountly-mcp/json-render: resourceUri must use 'ui://' scheme (received '${uri}')`
+    );
+  }
+}
+function registerJsonRenderResource(server, options) {
+  const uri = options.resourceUri ?? DEFAULT_RESOURCE_URI;
+  assertUiUri(uri);
+  const name = options.name ?? "json_render_ui";
+  const description = options.description ?? "Interactive json-render MCP App view.";
+  const registered = registerAppResource(
+    server,
+    name,
+    uri,
+    {
+      mimeType: RESOURCE_MIME_TYPE,
+      description,
+      _meta: {
+        ui: {
+          prefersBorder: true,
+          csp: { connectDomains: [], resourceDomains: [], frameDomains: [] }
+        }
+      }
+    },
+    async () => ({
+      contents: [
+        {
+          uri,
+          mimeType: RESOURCE_MIME_TYPE,
+          text: options.html,
+          _meta: {
+            ui: {
+              prefersBorder: true,
+              csp: { connectDomains: [], resourceDomains: [], frameDomains: [] }
+            }
+          }
+        }
+      ]
+    })
+  );
+  return { uri, remove: () => registered.remove() };
+}
+function registerJsonRenderTool(server, options) {
+  const name = options.name ?? DEFAULT_TOOL_NAME;
+  const resourceUri = options.resourceUri ?? DEFAULT_RESOURCE_URI;
+  assertUiUri(resourceUri);
+  const description = resolveDescription(options);
+  const visibility = options.visibility === void 0 ? ["model", "app"] : typeof options.visibility === "string" ? [options.visibility] : [...options.visibility];
+  const registered = registerAppTool(
+    server,
+    name,
+    {
+      title: options.title,
+      description,
+      inputSchema: resolveInputSchema(options),
+      _meta: {
+        ui: {
+          resourceUri,
+          visibility
+        }
+      }
+    },
+    (async (args) => {
+      const spec = pickToolInputSpec(args);
+      const validation = options.catalog.validate?.(spec);
+      const validSpec = validation?.success ? validation.data : spec;
+      return {
+        // Two shapes on purpose. `content[0].text` is the wire format
+        // `@json-render/mcp` emits and its iframe hook reads, so an app built
+        // against that package renders a Mountly server unchanged.
+        // `structuredContent` is what Mountly's own hosts and tests read.
+        content: [{ type: "text", text: JSON.stringify(validSpec) }],
+        structuredContent: { spec: validSpec }
+      };
+    })
+  );
+  return { name, remove: () => registered.remove() };
+}
+function createJsonRenderMcpApp(options) {
+  const configured = new McpServer(
+    { name: options.name, version: options.version },
+    { capabilities: { resources: {}, tools: {} } }
+  );
+  configured.server.registerCapabilities({
+    extensions: { [EXTENSION_ID]: { mimeTypes: [RESOURCE_MIME_TYPE] } }
+  });
+  const resourceUri = options.tool?.resourceUri ?? DEFAULT_RESOURCE_URI;
+  assertUiUri(resourceUri);
+  const toolName = options.tool?.name ?? DEFAULT_TOOL_NAME;
+  const resource = registerJsonRenderResource(configured, {
+    resourceUri,
+    html: options.html,
+    name: "json_render_ui"
+  });
+  const tool = registerJsonRenderTool(configured, {
+    catalog: options.catalog,
+    name: toolName,
+    title: options.tool?.title,
+    description: options.tool?.description,
+    resourceUri,
+    visibility: options.tool?.visibility,
+    inputSchema: options.tool?.inputSchema
+  });
+  const previousInitialized = configured.server.oninitialized;
+  const handleInitialized = () => {
+    previousInitialized?.();
+    const ui = getUiCapability(configured.server.getClientCapabilities());
+    if (ui?.mimeTypes?.includes(RESOURCE_MIME_TYPE)) return;
+    resource.remove();
+    tool.remove();
+  };
+  configured.server.oninitialized = handleInitialized;
+  return {
+    async connectInProcess(connectOptions) {
+      const [clientTransport, serverTransport] = InMemoryTransport.createLinkedPair();
+      await configured.connect(serverTransport);
+      const client = new Client(
+        { name: `${options.name}-inprocess-client`, version: options.version },
+        connectOptions?.ui ?? true ? {
+          capabilities: {
+            extensions: { [EXTENSION_ID]: { mimeTypes: [RESOURCE_MIME_TYPE] } }
+          }
+        } : void 0
+      );
+      await client.connect(clientTransport);
+      return { client };
+    },
+    async listen(transport) {
+      await configured.connect(transport);
+    },
+    async close() {
+      await configured.close();
+    }
+  };
+}
+
+export {
+  registerJsonRenderResource,
+  registerJsonRenderTool,
+  createJsonRenderMcpApp
+};
+//# sourceMappingURL=chunk-4HC3OWAQ.js.map

package/dist/chunk-4HC3OWAQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/json-render/mcp.ts"],"sourcesContent":["import { McpServer } from \"@modelcontextprotocol/sdk/server/mcp.js\";\nimport { z } from \"zod\";\nimport {\n  EXTENSION_ID,\n  RESOURCE_MIME_TYPE,\n  getUiCapability,\n  registerAppResource,\n  registerAppTool,\n} from \"@modelcontextprotocol/ext-apps/server\";\nimport type { McpUiToolVisibility } from \"@modelcontextprotocol/ext-apps\";\nimport type { Catalog } from \"@json-render/core\";\nimport { Client } from \"@modelcontextprotocol/sdk/client/index.js\";\nimport { InMemoryTransport } from \"@modelcontextprotocol/sdk/inMemory.js\";\nimport type { Transport } from \"@modelcontextprotocol/sdk/shared/transport.js\";\nimport type { RunningMcpAppServer } from \"../server/index.js\";\n\nexport interface JsonRenderToolOptions {\n  /** MCP tool name. */\n  name?: string;\n  /** Human-readable tool title. */\n  title?: string;\n  /** Tool description for model selection. */\n  description?: string;\n  /** ui:// resource linked to this tool. */\n  resourceUri?: string;\n  /** Tool visibility in MCP Apps hosts. */\n  visibility?: McpUiToolVisibility | ReadonlyArray<McpUiToolVisibility>;\n  /** Optional explicit input schema override. */\n  inputSchema?: object;\n}\n\nexport interface RegisterJsonRenderResourceOptions {\n  resourceUri?: string;\n  name?: string;\n  description?: string;\n  html: string;\n}\n\nexport interface RegisterJsonRenderToolOptions {\n  catalog: Catalog;\n  name?: string;\n  title?: string;\n  description?: string;\n  resourceUri?: string;\n  visibility?: McpUiToolVisibility | ReadonlyArray<McpUiToolVisibility>;\n  inputSchema?: object;\n}\n\nexport interface CreateJsonRenderMcpAppOptions {\n  name: string;\n  version: string;\n  catalog: Catalog;\n  html: string;\n  tool?: JsonRenderToolOptions;\n}\n\nconst DEFAULT_RESOURCE_URI = \"ui://json-render/view.html\";\nconst DEFAULT_TOOL_NAME = \"render_ui\";\n\n/**\n * A spec shape loose enough to survive real model output. `@json-render/core`\n * generates a *strict* catalog schema: as of 0.20 `visible` is optional, but\n * `children` is still required on every element — the omission models make on\n * roughly a third of first attempts. Gating tool input on the strict schema\n * alone turns that into an SDK-level rejection before the handler can repair\n * anything. (`@json-render/mcp` passes the strict schema straight through and\n * inherits that failure.) Delete this branch once `children` is optional too.\n */\nconst LOOSE_SPEC_SCHEMA = z.looseObject({\n  root: z.string(),\n  elements: z.record(z.string(), z.unknown()),\n  state: z.unknown().optional(),\n});\n\n/**\n * The tool's input shape, matching `@json-render/mcp`: a single `spec`\n * argument typed by the catalog. Must be a Zod *raw shape* (a plain object of\n * Zod types) — handing the SDK a bare `ZodType` yields an empty\n * `{ type: \"object\", properties: {} }` schema, which tells the model nothing.\n */\nfunction resolveInputSchema(options: RegisterJsonRenderToolOptions): object {\n  if (options.inputSchema) return options.inputSchema;\n  const { catalog } = options;\n  if (typeof catalog.zodSchema !== \"function\") {\n    return { spec: LOOSE_SPEC_SCHEMA };\n  }\n  // The catalog branch documents the exact component vocabulary to the model;\n  // the loose branch keeps a near-miss spec from being rejected outright. The\n  // handler still validates against the catalog and reports what it repaired.\n  return { spec: z.union([catalog.zodSchema(), LOOSE_SPEC_SCHEMA]) };\n}\n\n/**\n * Catalogs carry their own model-facing prompt (component list, prop shapes,\n * authoring rules). Appending it is what makes the tool usable by a model —\n * a bare one-line description leaves it guessing at the component vocabulary.\n */\nfunction resolveDescription(options: RegisterJsonRenderToolOptions): string {\n  if (options.description) return options.description;\n  const base =\n    \"Render an interactive UI. The `spec` argument must be a json-render spec conforming to the catalog.\";\n  const prompt = typeof options.catalog.prompt === \"function\" ? options.catalog.prompt() : \"\";\n  return prompt ? `${base}\\n\\n${prompt}` : base;\n}\n\n/**\n * Unwrap the tool arguments. The declared shape is `{ spec }`, but a spec\n * passed at the top level is accepted too — hosts and hand-written clients do\n * both, and a spec is identifiable by its `root`/`elements` pair.\n */\nfunction pickToolInputSpec(args: unknown): unknown {\n  if (!args || typeof args !== \"object\") return args;\n  const record = args as Record<string, unknown>;\n  if (record.spec !== undefined) return record.spec;\n  return record;\n}\n\nfunction assertUiUri(uri: string): void {\n  if (!uri.startsWith(\"ui://\")) {\n    throw new Error(\n      `mountly-mcp/json-render: resourceUri must use 'ui://' scheme (received '${uri}')`,\n    );\n  }\n}\n\nexport function registerJsonRenderResource(\n  server: McpServer,\n  options: RegisterJsonRenderResourceOptions,\n): { uri: string; remove(): void } {\n  const uri = options.resourceUri ?? DEFAULT_RESOURCE_URI;\n  assertUiUri(uri);\n  const name = options.name ?? \"json_render_ui\";\n  const description = options.description ?? \"Interactive json-render MCP App view.\";\n  const registered = registerAppResource(\n    server,\n    name,\n    uri,\n    {\n      mimeType: RESOURCE_MIME_TYPE,\n      description,\n      _meta: {\n        ui: {\n          prefersBorder: true,\n          csp: { connectDomains: [], resourceDomains: [], frameDomains: [] },\n        },\n      },\n    },\n    async () => ({\n      contents: [\n        {\n          uri,\n          mimeType: RESOURCE_MIME_TYPE,\n          text: options.html,\n          _meta: {\n            ui: {\n              prefersBorder: true,\n              csp: { connectDomains: [], resourceDomains: [], frameDomains: [] },\n            },\n          },\n        },\n      ],\n    }),\n  );\n  return { uri, remove: () => registered.remove() };\n}\n\nexport function registerJsonRenderTool(\n  server: McpServer,\n  options: RegisterJsonRenderToolOptions,\n): { name: string; remove(): void } {\n  const name = options.name ?? DEFAULT_TOOL_NAME;\n  const resourceUri = options.resourceUri ?? DEFAULT_RESOURCE_URI;\n  assertUiUri(resourceUri);\n  const description = resolveDescription(options);\n  const visibility =\n    options.visibility === undefined\n      ? [\"model\", \"app\"]\n      : typeof options.visibility === \"string\"\n        ? [options.visibility]\n        : [...options.visibility];\n\n  const registered = registerAppTool(\n    server,\n    name,\n    {\n      title: options.title,\n      description,\n      inputSchema: resolveInputSchema(options) as never,\n      _meta: {\n        ui: {\n          resourceUri,\n          visibility,\n        },\n      },\n    } as never,\n    (async (args: unknown) => {\n      const spec = pickToolInputSpec(args);\n      // Repair-tolerant, like `@json-render/mcp`: a spec that fails catalog\n      // validation is still rendered rather than dropped — the renderer skips\n      // what it cannot resolve, and a partial UI beats a blank iframe.\n      const validation = options.catalog.validate?.(spec);\n      const validSpec = validation?.success ? validation.data : spec;\n      return {\n        // Two shapes on purpose. `content[0].text` is the wire format\n        // `@json-render/mcp` emits and its iframe hook reads, so an app built\n        // against that package renders a Mountly server unchanged.\n        // `structuredContent` is what Mountly's own hosts and tests read.\n        content: [{ type: \"text\", text: JSON.stringify(validSpec) }],\n        structuredContent: { spec: validSpec },\n      };\n    }) as never,\n  );\n  return { name, remove: () => registered.remove() };\n}\n\nexport function createJsonRenderMcpApp(\n  options: CreateJsonRenderMcpAppOptions,\n): RunningMcpAppServer {\n  const configured = new McpServer(\n    { name: options.name, version: options.version },\n    { capabilities: { resources: {}, tools: {} } },\n  );\n  configured.server.registerCapabilities({\n    extensions: { [EXTENSION_ID]: { mimeTypes: [RESOURCE_MIME_TYPE] } },\n  } as never);\n\n  const resourceUri = options.tool?.resourceUri ?? DEFAULT_RESOURCE_URI;\n  assertUiUri(resourceUri);\n  const toolName = options.tool?.name ?? DEFAULT_TOOL_NAME;\n  const resource = registerJsonRenderResource(configured, {\n    resourceUri,\n    html: options.html,\n    name: \"json_render_ui\",\n  });\n  const tool = registerJsonRenderTool(configured, {\n    catalog: options.catalog,\n    name: toolName,\n    title: options.tool?.title,\n    description: options.tool?.description,\n    resourceUri,\n    visibility: options.tool?.visibility,\n    inputSchema: options.tool?.inputSchema,\n  });\n  const previousInitialized = configured.server.oninitialized;\n  const handleInitialized = () => {\n    previousInitialized?.();\n    const ui = getUiCapability(configured.server.getClientCapabilities());\n    if (ui?.mimeTypes?.includes(RESOURCE_MIME_TYPE)) return;\n    resource.remove();\n    tool.remove();\n  };\n  configured.server.oninitialized = handleInitialized;\n\n  return {\n    async connectInProcess(connectOptions) {\n      const [clientTransport, serverTransport] = InMemoryTransport.createLinkedPair();\n      await configured.connect(serverTransport);\n      const client = new Client(\n        { name: `${options.name}-inprocess-client`, version: options.version },\n        (connectOptions?.ui ?? true)\n          ? ({\n              capabilities: {\n                extensions: { [EXTENSION_ID]: { mimeTypes: [RESOURCE_MIME_TYPE] } },\n              },\n            } as never)\n          : undefined,\n      );\n      await client.connect(clientTransport);\n      return { client };\n    },\n    async listen(transport: Transport) {\n      await configured.connect(transport);\n    },\n    async close() {\n      await configured.close();\n    },\n  };\n}\n"],"mappings":";AAAA,SAAS,iBAAiB;AAC1B,SAAS,SAAS;AAClB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,SAAS,cAAc;AACvB,SAAS,yBAAyB;AA4ClC,IAAM,uBAAuB;AAC7B,IAAM,oBAAoB;AAW1B,IAAM,oBAAoB,EAAE,YAAY;AAAA,EACtC,MAAM,EAAE,OAAO;AAAA,EACf,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EAC1C,OAAO,EAAE,QAAQ,EAAE,SAAS;AAC9B,CAAC;AAQD,SAAS,mBAAmB,SAAgD;AAC1E,MAAI,QAAQ,YAAa,QAAO,QAAQ;AACxC,QAAM,EAAE,QAAQ,IAAI;AACpB,MAAI,OAAO,QAAQ,cAAc,YAAY;AAC3C,WAAO,EAAE,MAAM,kBAAkB;AAAA,EACnC;AAIA,SAAO,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,UAAU,GAAG,iBAAiB,CAAC,EAAE;AACnE;AAOA,SAAS,mBAAmB,SAAgD;AAC1E,MAAI,QAAQ,YAAa,QAAO,QAAQ;AACxC,QAAM,OACJ;AACF,QAAM,SAAS,OAAO,QAAQ,QAAQ,WAAW,aAAa,QAAQ,QAAQ,OAAO,IAAI;AACzF,SAAO,SAAS,GAAG,IAAI;AAAA;AAAA,EAAO,MAAM,KAAK;AAC3C;AAOA,SAAS,kBAAkB,MAAwB;AACjD,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,QAAM,SAAS;AACf,MAAI,OAAO,SAAS,OAAW,QAAO,OAAO;AAC7C,SAAO;AACT;AAEA,SAAS,YAAY,KAAmB;AACtC,MAAI,CAAC,IAAI,WAAW,OAAO,GAAG;AAC5B,UAAM,IAAI;AAAA,MACR,2EAA2E,GAAG;AAAA,IAChF;AAAA,EACF;AACF;AAEO,SAAS,2BACd,QACA,SACiC;AACjC,QAAM,MAAM,QAAQ,eAAe;AACnC,cAAY,GAAG;AACf,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,cAAc,QAAQ,eAAe;AAC3C,QAAM,aAAa;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU;AAAA,MACV;AAAA,MACA,OAAO;AAAA,QACL,IAAI;AAAA,UACF,eAAe;AAAA,UACf,KAAK,EAAE,gBAAgB,CAAC,GAAG,iBAAiB,CAAC,GAAG,cAAc,CAAC,EAAE;AAAA,QACnE;AAAA,MACF;AAAA,IACF;AAAA,IACA,aAAa;AAAA,MACX,UAAU;AAAA,QACR;AAAA,UACE;AAAA,UACA,UAAU;AAAA,UACV,MAAM,QAAQ;AAAA,UACd,OAAO;AAAA,YACL,IAAI;AAAA,cACF,eAAe;AAAA,cACf,KAAK,EAAE,gBAAgB,CAAC,GAAG,iBAAiB,CAAC,GAAG,cAAc,CAAC,EAAE;AAAA,YACnE;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,KAAK,QAAQ,MAAM,WAAW,OAAO,EAAE;AAClD;AAEO,SAAS,uBACd,QACA,SACkC;AAClC,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,cAAc,QAAQ,eAAe;AAC3C,cAAY,WAAW;AACvB,QAAM,cAAc,mBAAmB,OAAO;AAC9C,QAAM,aACJ,QAAQ,eAAe,SACnB,CAAC,SAAS,KAAK,IACf,OAAO,QAAQ,eAAe,WAC5B,CAAC,QAAQ,UAAU,IACnB,CAAC,GAAG,QAAQ,UAAU;AAE9B,QAAM,aAAa;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,MACE,OAAO,QAAQ;AAAA,MACf;AAAA,MACA,aAAa,mBAAmB,OAAO;AAAA,MACvC,OAAO;AAAA,QACL,IAAI;AAAA,UACF;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,KACC,OAAO,SAAkB;AACxB,YAAM,OAAO,kBAAkB,IAAI;AAInC,YAAM,aAAa,QAAQ,QAAQ,WAAW,IAAI;AAClD,YAAM,YAAY,YAAY,UAAU,WAAW,OAAO;AAC1D,aAAO;AAAA;AAAA;AAAA;AAAA;AAAA,QAKL,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,KAAK,UAAU,SAAS,EAAE,CAAC;AAAA,QAC3D,mBAAmB,EAAE,MAAM,UAAU;AAAA,MACvC;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,MAAM,QAAQ,MAAM,WAAW,OAAO,EAAE;AACnD;AAEO,SAAS,uBACd,SACqB;AACrB,QAAM,aAAa,IAAI;AAAA,IACrB,EAAE,MAAM,QAAQ,MAAM,SAAS,QAAQ,QAAQ;AAAA,IAC/C,EAAE,cAAc,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,EAAE,EAAE;AAAA,EAC/C;AACA,aAAW,OAAO,qBAAqB;AAAA,IACrC,YAAY,EAAE,CAAC,YAAY,GAAG,EAAE,WAAW,CAAC,kBAAkB,EAAE,EAAE;AAAA,EACpE,CAAU;AAEV,QAAM,cAAc,QAAQ,MAAM,eAAe;AACjD,cAAY,WAAW;AACvB,QAAM,WAAW,QAAQ,MAAM,QAAQ;AACvC,QAAM,WAAW,2BAA2B,YAAY;AAAA,IACtD;AAAA,IACA,MAAM,QAAQ;AAAA,IACd,MAAM;AAAA,EACR,CAAC;AACD,QAAM,OAAO,uBAAuB,YAAY;AAAA,IAC9C,SAAS,QAAQ;AAAA,IACjB,MAAM;AAAA,IACN,OAAO,QAAQ,MAAM;AAAA,IACrB,aAAa,QAAQ,MAAM;AAAA,IAC3B;AAAA,IACA,YAAY,QAAQ,MAAM;AAAA,IAC1B,aAAa,QAAQ,MAAM;AAAA,EAC7B,CAAC;AACD,QAAM,sBAAsB,WAAW,OAAO;AAC9C,QAAM,oBAAoB,MAAM;AAC9B,0BAAsB;AACtB,UAAM,KAAK,gBAAgB,WAAW,OAAO,sBAAsB,CAAC;AACpE,QAAI,IAAI,WAAW,SAAS,kBAAkB,EAAG;AACjD,aAAS,OAAO;AAChB,SAAK,OAAO;AAAA,EACd;AACA,aAAW,OAAO,gBAAgB;AAElC,SAAO;AAAA,IACL,MAAM,iBAAiB,gBAAgB;AACrC,YAAM,CAAC,iBAAiB,eAAe,IAAI,kBAAkB,iBAAiB;AAC9E,YAAM,WAAW,QAAQ,eAAe;AACxC,YAAM,SAAS,IAAI;AAAA,QACjB,EAAE,MAAM,GAAG,QAAQ,IAAI,qBAAqB,SAAS,QAAQ,QAAQ;AAAA,QACpE,gBAAgB,MAAM,OAClB;AAAA,UACC,cAAc;AAAA,YACZ,YAAY,EAAE,CAAC,YAAY,GAAG,EAAE,WAAW,CAAC,kBAAkB,EAAE,EAAE;AAAA,UACpE;AAAA,QACF,IACA;AAAA,MACN;AACA,YAAM,OAAO,QAAQ,eAAe;AACpC,aAAO,EAAE,OAAO;AAAA,IAClB;AAAA,IACA,MAAM,OAAO,WAAsB;AACjC,YAAM,WAAW,QAAQ,SAAS;AAAA,IACpC;AAAA,IACA,MAAM,QAAQ;AACZ,YAAM,WAAW,MAAM;AAAA,IACzB;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-4WAKOYMK.js

@@ -0,0 +1,196 @@
+import {
+  LATEST_PROTOCOL_VERSION,
+  RESOURCE_MIME_TYPE
+} from "./chunk-DQLQOMDM.js";
+import {
+  escapeInlineScript,
+  serializeInlineScriptValue
+} from "./chunk-YJA4H6IB.js";
+
+// src/build/index.ts
+import { readFile, writeFile } from "fs/promises";
+import { fileURLToPath } from "url";
+import { resolve } from "path";
+
+// src/build/emit-html.ts
+function escapeAttr(value) {
+  return value.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+function escapeStyle(value) {
+  return value.replace(/<\/style/gi, "<\\/style");
+}
+function configScript(config) {
+  if (!config) return [];
+  const assignments = [];
+  if (config.awaitToolResult !== void 0) {
+    assignments.push(
+      `globalThis.__mountlyMcpAwaitToolResult__=${serializeInlineScriptValue(config.awaitToolResult)};`
+    );
+  }
+  if (config.displayModes !== void 0) {
+    assignments.push(
+      `globalThis.__mountlyMcpAvailableDisplayModes__=${serializeInlineScriptValue(config.displayModes)};`
+    );
+  }
+  if (config.streamToolInput !== void 0) {
+    assignments.push(
+      `globalThis.__mountlyMcpStreamToolInput__=${serializeInlineScriptValue(config.streamToolInput)};`
+    );
+  }
+  if (assignments.length === 0) return [];
+  return [`<script>${assignments.join("")}</script>`];
+}
+function emitHtml(input) {
+  const head = [
+    `<meta charset="utf-8">`,
+    `<meta name="mountly-mcp-protocol" content="${LATEST_PROTOCOL_VERSION}">`,
+    `<meta name="mountly-mcp-uri" content="${escapeAttr(input.uri)}">`
+  ];
+  if (input.mode === "self-contained") {
+    head.push(`<style>${escapeStyle(input.css)}</style>`);
+    const body2 = [
+      `<div id="mountly-mcp-root"></div>`,
+      ...configScript(input.config),
+      `<script type="module">${escapeInlineScript(input.js)}
+${escapeInlineScript(input.bridgeRuntimeJs)}</script>`
+    ];
+    return template(head, body2);
+  }
+  head.push(`<link rel="stylesheet" href="${escapeAttr(input.cssUrl)}">`);
+  const body = [
+    `<div id="mountly-mcp-root"></div>`,
+    ...configScript(input.config),
+    `<script type="module" src="${escapeAttr(input.jsUrl)}"></script>`,
+    `<script type="module">${escapeInlineScript(input.bridgeRuntimeJs)}</script>`
+  ];
+  return template(head, body);
+}
+function template(head, body) {
+  return `<!doctype html>
+<html data-mountly-mcp>
+<head>
+${head.join("\n")}
+</head>
+<body>
+${body.join("\n")}
+</body>
+</html>`;
+}
+
+// src/build/emit-meta.ts
+function assertUiUri(uri) {
+  if (!uri.startsWith("ui://")) {
+    throw new Error(`mountly-mcp: UI resource uri must use the 'ui://' scheme (received '${uri}')`);
+  }
+}
+function emitMeta(input) {
+  assertUiUri(input.uri);
+  const ui = {};
+  if (input.csp) ui.csp = input.csp;
+  if (input.permissions) ui.permissions = input.permissions;
+  if (input.domain !== void 0) ui.domain = input.domain;
+  if (input.prefersBorder !== void 0) ui.prefersBorder = input.prefersBorder;
+  const decl = {
+    protocolVersion: LATEST_PROTOCOL_VERSION,
+    uri: input.uri,
+    name: input.name,
+    mimeType: RESOURCE_MIME_TYPE,
+    awaitToolResult: input.awaitToolResult ?? true,
+    displayModes: input.displayModes ?? ["inline"],
+    _meta: { ui }
+  };
+  if (input.description !== void 0) decl.description = input.description;
+  return decl;
+}
+
+// src/build/index.ts
+function getBridgeRuntimePath() {
+  return fileURLToPath(import.meta.resolve("mountly-mcp/bridge/iframe-entry.js"));
+}
+function defaultBridgeRuntimePath() {
+  return getBridgeRuntimePath();
+}
+async function buildMcpResourceFromSource(options) {
+  const { js, css, ...rest } = options;
+  return writeResource({ ...rest, mode: "self-contained", js, css: css ?? "" });
+}
+async function buildMcpResource(options) {
+  if (!("cdn" in options)) {
+    const js = await readFile(options.entry, "utf8");
+    const css = options.cssEntry ? await readFile(options.cssEntry, "utf8") : "";
+    return writeResource({ ...options, mode: "self-contained", js, css });
+  }
+  return writeResource({ ...options, mode: "cdn" });
+}
+async function writeResource(options) {
+  const bridgeRuntimeJs = await readFile(
+    options.bridgeRuntimePath ?? defaultBridgeRuntimePath(),
+    "utf8"
+  );
+  const declaration = emitMeta({
+    uri: options.uri,
+    name: options.name,
+    description: options.description,
+    awaitToolResult: options.awaitToolResult,
+    displayModes: options.displayModes,
+    csp: options.mode === "cdn" ? mergeCdnIntoCsp(options.csp, options.cdn) : options.csp,
+    permissions: options.permissions,
+    domain: options.domain,
+    prefersBorder: options.prefersBorder
+  });
+  const config = {
+    awaitToolResult: declaration.awaitToolResult,
+    displayModes: declaration.displayModes,
+    streamToolInput: options.streamToolInput ?? false
+  };
+  const html = options.mode === "cdn" ? emitHtml({
+    mode: "cdn",
+    uri: options.uri,
+    jsUrl: options.cdn.jsUrl,
+    cssUrl: options.cdn.cssUrl,
+    bridgeRuntimeJs,
+    config
+  }) : emitHtml({
+    mode: "self-contained",
+    uri: options.uri,
+    js: options.js,
+    css: options.css,
+    bridgeRuntimeJs,
+    config
+  });
+  const metaPath = `${options.output}.meta.json`;
+  await writeFile(options.output, html, "utf8");
+  await writeFile(metaPath, JSON.stringify(declaration, null, 2), "utf8");
+  const htmlPath = resolve(options.output);
+  return {
+    htmlPath,
+    metaPath: resolve(metaPath),
+    declaration,
+    artifact: {
+      name: declaration.name,
+      uri: declaration.uri,
+      htmlPath,
+      metaPath: resolve(metaPath),
+      declaration
+    }
+  };
+}
+function mergeCdnIntoCsp(csp, cdn) {
+  const jsOrigin = new URL(cdn.jsUrl).origin;
+  const cssOrigin = new URL(cdn.cssUrl).origin;
+  const merged = { ...csp ?? {} };
+  const existing = new Set(merged.resourceDomains ?? []);
+  existing.add(jsOrigin);
+  existing.add(cssOrigin);
+  merged.resourceDomains = Array.from(existing);
+  return merged;
+}
+
+export {
+  emitHtml,
+  emitMeta,
+  getBridgeRuntimePath,
+  buildMcpResourceFromSource,
+  buildMcpResource
+};
+//# sourceMappingURL=chunk-4WAKOYMK.js.map

package/dist/chunk-4WAKOYMK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/build/index.ts","../src/build/emit-html.ts","../src/build/emit-meta.ts"],"sourcesContent":["import { readFile, writeFile } from \"node:fs/promises\";\nimport { fileURLToPath } from \"node:url\";\nimport { resolve } from \"node:path\";\nimport type {\n  McpUiDisplayMode,\n  McpUiResourceCsp,\n  McpUiResourcePermissions,\n} from \"@modelcontextprotocol/ext-apps\";\nimport type { McpResourceDeclaration } from \"../types.js\";\nimport type { McpAppArtifact } from \"../artifact/index.js\";\nimport { emitHtml } from \"./emit-html.js\";\nimport { emitMeta } from \"./emit-meta.js\";\n\n/**\n * Absolute path to the iframe bridge runtime shipped with this package.\n *\n * `buildMcpResource` inlines this file's contents into the emitted HTML so\n * the widget can speak the MCP Apps postMessage protocol. Use this when you\n * need to point another build tool at the runtime, or when you want a\n * stable, version-pinned alternative to passing `bridgeRuntimePath` yourself.\n *\n * Resolves relative to the installed package, so it works identically in\n * monorepos and in projects that installed mountly-mcp from npm.\n */\nexport function getBridgeRuntimePath(): string {\n  // Ask the module resolver rather than walking up from __dirname: the subpath\n  // is a declared export, so this holds wherever a bundler puts this file.\n  return fileURLToPath(import.meta.resolve(\"mountly-mcp/bridge/iframe-entry.js\"));\n}\n\nfunction defaultBridgeRuntimePath(): string {\n  return getBridgeRuntimePath();\n}\n\nexport interface BuildSelfContainedOptions {\n  entry: string;\n  uri: string;\n  name: string;\n  output: string;\n  description?: string;\n  awaitToolResult?: boolean;\n  displayModes?: ReadonlyArray<McpUiDisplayMode>;\n  /**\n   * Render progressive states from `ui/notifications/tool-input-partial`.\n   * Off by default — see `RunBridgeOptions.streamToolInput`.\n   */\n  streamToolInput?: boolean;\n  csp?: McpUiResourceCsp;\n  /** Sandbox permissions requested by the view (camera/microphone/geolocation/clipboardWrite). */\n  permissions?: McpUiResourcePermissions;\n  /** Dedicated sandbox origin (host-dependent format). */\n  domain?: string;\n  /** Whether the view requests the host to show a visible border + background. */\n  prefersBorder?: boolean;\n  cssEntry?: string;\n  bridgeRuntimePath?: string;\n}\n\nexport interface BuildCdnOptions extends BuildSelfContainedOptions {\n  cdn: { jsUrl: string; cssUrl: string };\n}\n\nexport type BuildOptions = BuildSelfContainedOptions | BuildCdnOptions;\n\nexport interface BuildResult {\n  htmlPath: string;\n  metaPath: string;\n  declaration: McpResourceDeclaration;\n  artifact: McpAppArtifact;\n}\n\nexport interface BuildFromSourceOptions extends Omit<\n  BuildSelfContainedOptions,\n  \"entry\" | \"cssEntry\"\n> {\n  /** The bundled widget JS. */\n  js: string;\n  /** The widget's CSS, if it has any. */\n  css?: string;\n}\n\n/**\n * Same as {@link buildMcpResource}, but taking the bundle in memory instead of\n * from disk — for bundler plugins that already hold the emitted sources and\n * shouldn't have to guess when they land on the filesystem.\n */\nexport async function buildMcpResourceFromSource(\n  options: BuildFromSourceOptions,\n): Promise<BuildResult> {\n  const { js, css, ...rest } = options;\n  return writeResource({ ...rest, mode: \"self-contained\", js, css: css ?? \"\" });\n}\n\nexport async function buildMcpResource(options: BuildOptions): Promise<BuildResult> {\n  if (!(\"cdn\" in options)) {\n    const js = await readFile(options.entry, \"utf8\");\n    const css = options.cssEntry ? await readFile(options.cssEntry, \"utf8\") : \"\";\n    return writeResource({ ...options, mode: \"self-contained\", js, css });\n  }\n  return writeResource({ ...options, mode: \"cdn\" });\n}\n\ntype ResourceMeta = Omit<BuildSelfContainedOptions, \"entry\" | \"cssEntry\">;\n\ntype WriteResourceOptions =\n  | (ResourceMeta & { mode: \"self-contained\"; js: string; css: string })\n  | (ResourceMeta & { mode: \"cdn\"; cdn: BuildCdnOptions[\"cdn\"] });\n\nasync function writeResource(options: WriteResourceOptions): Promise<BuildResult> {\n  const bridgeRuntimeJs = await readFile(\n    options.bridgeRuntimePath ?? defaultBridgeRuntimePath(),\n    \"utf8\",\n  );\n\n  const declaration = emitMeta({\n    uri: options.uri,\n    name: options.name,\n    description: options.description,\n    awaitToolResult: options.awaitToolResult,\n    displayModes: options.displayModes,\n    csp: options.mode === \"cdn\" ? mergeCdnIntoCsp(options.csp, options.cdn) : options.csp,\n    permissions: options.permissions,\n    domain: options.domain,\n    prefersBorder: options.prefersBorder,\n  });\n\n  // Same values the sidecar declares, so the view's `ui/initialize` matches it.\n  const config = {\n    awaitToolResult: declaration.awaitToolResult,\n    displayModes: declaration.displayModes,\n    streamToolInput: options.streamToolInput ?? false,\n  };\n\n  const html =\n    options.mode === \"cdn\"\n      ? emitHtml({\n          mode: \"cdn\",\n          uri: options.uri,\n          jsUrl: options.cdn.jsUrl,\n          cssUrl: options.cdn.cssUrl,\n          bridgeRuntimeJs,\n          config,\n        })\n      : emitHtml({\n          mode: \"self-contained\",\n          uri: options.uri,\n          js: options.js,\n          css: options.css,\n          bridgeRuntimeJs,\n          config,\n        });\n\n  const metaPath = `${options.output}.meta.json`;\n  await writeFile(options.output, html, \"utf8\");\n  await writeFile(metaPath, JSON.stringify(declaration, null, 2), \"utf8\");\n\n  const htmlPath = resolve(options.output);\n  return {\n    htmlPath,\n    metaPath: resolve(metaPath),\n    declaration,\n    artifact: {\n      name: declaration.name,\n      uri: declaration.uri,\n      htmlPath,\n      metaPath: resolve(metaPath),\n      declaration,\n    },\n  };\n}\n\nfunction mergeCdnIntoCsp(\n  csp: McpUiResourceCsp | undefined,\n  cdn: { jsUrl: string; cssUrl: string },\n): McpUiResourceCsp {\n  const jsOrigin = new URL(cdn.jsUrl).origin;\n  const cssOrigin = new URL(cdn.cssUrl).origin;\n  const merged: McpUiResourceCsp = { ...(csp ?? {}) };\n  const existing = new Set(merged.resourceDomains ?? []);\n  existing.add(jsOrigin);\n  existing.add(cssOrigin);\n  merged.resourceDomains = Array.from(existing);\n  return merged;\n}\n\nexport { emitHtml } from \"./emit-html.js\";\nexport { emitMeta } from \"./emit-meta.js\";\n","import { MCP_APPS_PROTOCOL_VERSION } from \"../schema.js\";\nimport type { McpUiDisplayMode } from \"@modelcontextprotocol/ext-apps\";\nimport { escapeInlineScript, serializeInlineScriptValue } from \"../html.js\";\n\n/**\n * Runtime config the emitted HTML hands to the inlined bridge\n * (`bridge/iframe-entry.ts` reads these off `globalThis`). Without it the view\n * falls back to `awaitToolResult: true` / `availableDisplayModes: [\"inline\"]`,\n * regardless of what the build declared in the sidecar.\n */\nexport interface EmitHtmlConfig {\n  awaitToolResult?: boolean;\n  displayModes?: ReadonlyArray<McpUiDisplayMode>;\n  streamToolInput?: boolean;\n}\n\nexport interface EmitHtmlSelfContainedInput {\n  mode: \"self-contained\";\n  uri: string;\n  js: string;\n  css: string;\n  bridgeRuntimeJs: string;\n  config?: EmitHtmlConfig;\n}\n\nexport interface EmitHtmlCdnInput {\n  mode: \"cdn\";\n  uri: string;\n  jsUrl: string;\n  cssUrl: string;\n  bridgeRuntimeJs: string;\n  config?: EmitHtmlConfig;\n}\n\nexport type EmitHtmlInput = EmitHtmlSelfContainedInput | EmitHtmlCdnInput;\n\nfunction escapeAttr(value: string): string {\n  return value\n    .replace(/&/g, \"&amp;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\");\n}\n\nfunction escapeStyle(value: string): string {\n  return value.replace(/<\\/style/gi, \"<\\\\/style\");\n}\n\n/**\n * Classic (non-module) script so it runs at parse time — before the deferred\n * module scripts that boot the bridge.\n */\nfunction configScript(config: EmitHtmlConfig | undefined): string[] {\n  if (!config) return [];\n  const assignments: string[] = [];\n  if (config.awaitToolResult !== undefined) {\n    assignments.push(\n      `globalThis.__mountlyMcpAwaitToolResult__=${serializeInlineScriptValue(config.awaitToolResult)};`,\n    );\n  }\n  if (config.displayModes !== undefined) {\n    assignments.push(\n      `globalThis.__mountlyMcpAvailableDisplayModes__=${serializeInlineScriptValue(config.displayModes)};`,\n    );\n  }\n  if (config.streamToolInput !== undefined) {\n    assignments.push(\n      `globalThis.__mountlyMcpStreamToolInput__=${serializeInlineScriptValue(config.streamToolInput)};`,\n    );\n  }\n  if (assignments.length === 0) return [];\n  return [`<script>${assignments.join(\"\")}</script>`];\n}\n\nexport function emitHtml(input: EmitHtmlInput): string {\n  const head = [\n    `<meta charset=\"utf-8\">`,\n    `<meta name=\"mountly-mcp-protocol\" content=\"${MCP_APPS_PROTOCOL_VERSION}\">`,\n    `<meta name=\"mountly-mcp-uri\" content=\"${escapeAttr(input.uri)}\">`,\n  ];\n\n  if (input.mode === \"self-contained\") {\n    head.push(`<style>${escapeStyle(input.css)}</style>`);\n    const body = [\n      `<div id=\"mountly-mcp-root\"></div>`,\n      ...configScript(input.config),\n      `<script type=\"module\">${escapeInlineScript(input.js)}\\n${escapeInlineScript(input.bridgeRuntimeJs)}</script>`,\n    ];\n    return template(head, body);\n  }\n\n  head.push(`<link rel=\"stylesheet\" href=\"${escapeAttr(input.cssUrl)}\">`);\n  // The widget bundle MUST load before the bridge: module scripts execute in\n  // document order, and the bridge reads `__mountlyMcpWidget__` synchronously.\n  const body = [\n    `<div id=\"mountly-mcp-root\"></div>`,\n    ...configScript(input.config),\n    `<script type=\"module\" src=\"${escapeAttr(input.jsUrl)}\"></script>`,\n    `<script type=\"module\">${escapeInlineScript(input.bridgeRuntimeJs)}</script>`,\n  ];\n  return template(head, body);\n}\n\nfunction template(head: string[], body: string[]): string {\n  return `<!doctype html>\n<html data-mountly-mcp>\n<head>\n${head.join(\"\\n\")}\n</head>\n<body>\n${body.join(\"\\n\")}\n</body>\n</html>`;\n}\n","import { MCP_APPS_MIME, MCP_APPS_PROTOCOL_VERSION } from \"../schema.js\";\nimport type {\n  McpUiDisplayMode,\n  McpUiResourceCsp,\n  McpUiResourcePermissions,\n} from \"@modelcontextprotocol/ext-apps\";\nimport type { McpResourceDeclaration } from \"../types.js\";\n\nexport interface EmitMetaInput {\n  uri: string;\n  name: string;\n  description?: string;\n  awaitToolResult?: boolean;\n  displayModes?: ReadonlyArray<McpUiDisplayMode>;\n  csp?: McpUiResourceCsp;\n  /** Sandbox permissions requested by the view (camera/microphone/geolocation/clipboardWrite). */\n  permissions?: McpUiResourcePermissions;\n  /** Dedicated sandbox origin requested by the view (host-dependent format). */\n  domain?: string;\n  /** Whether the view requests the host to show a visible border + background. */\n  prefersBorder?: boolean;\n}\n\nfunction assertUiUri(uri: string): void {\n  if (!uri.startsWith(\"ui://\")) {\n    throw new Error(`mountly-mcp: UI resource uri must use the 'ui://' scheme (received '${uri}')`);\n  }\n}\n\nexport function emitMeta(input: EmitMetaInput): McpResourceDeclaration {\n  assertUiUri(input.uri);\n\n  const ui: McpResourceDeclaration[\"_meta\"][\"ui\"] = {};\n  if (input.csp) ui.csp = input.csp;\n  if (input.permissions) ui.permissions = input.permissions;\n  if (input.domain !== undefined) ui.domain = input.domain;\n  if (input.prefersBorder !== undefined) ui.prefersBorder = input.prefersBorder;\n\n  const decl: McpResourceDeclaration = {\n    protocolVersion: MCP_APPS_PROTOCOL_VERSION,\n    uri: input.uri,\n    name: input.name,\n    mimeType: MCP_APPS_MIME,\n    awaitToolResult: input.awaitToolResult ?? true,\n    displayModes: input.displayModes ?? [\"inline\"],\n    _meta: { ui },\n  };\n  if (input.description !== undefined) decl.description = input.description;\n  return decl;\n}\n"],"mappings":";;;;;;;;;;AAAA,SAAS,UAAU,iBAAiB;AACpC,SAAS,qBAAqB;AAC9B,SAAS,eAAe;;;ACkCxB,SAAS,WAAW,OAAuB;AACzC,SAAO,MACJ,QAAQ,MAAM,OAAO,EACrB,QAAQ,MAAM,QAAQ,EACtB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,MAAM;AACzB;AAEA,SAAS,YAAY,OAAuB;AAC1C,SAAO,MAAM,QAAQ,cAAc,WAAW;AAChD;AAMA,SAAS,aAAa,QAA8C;AAClE,MAAI,CAAC,OAAQ,QAAO,CAAC;AACrB,QAAM,cAAwB,CAAC;AAC/B,MAAI,OAAO,oBAAoB,QAAW;AACxC,gBAAY;AAAA,MACV,4CAA4C,2BAA2B,OAAO,eAAe,CAAC;AAAA,IAChG;AAAA,EACF;AACA,MAAI,OAAO,iBAAiB,QAAW;AACrC,gBAAY;AAAA,MACV,kDAAkD,2BAA2B,OAAO,YAAY,CAAC;AAAA,IACnG;AAAA,EACF;AACA,MAAI,OAAO,oBAAoB,QAAW;AACxC,gBAAY;AAAA,MACV,4CAA4C,2BAA2B,OAAO,eAAe,CAAC;AAAA,IAChG;AAAA,EACF;AACA,MAAI,YAAY,WAAW,EAAG,QAAO,CAAC;AACtC,SAAO,CAAC,WAAW,YAAY,KAAK,EAAE,CAAC,WAAW;AACpD;AAEO,SAAS,SAAS,OAA8B;AACrD,QAAM,OAAO;AAAA,IACX;AAAA,IACA,8CAA8C,uBAAyB;AAAA,IACvE,yCAAyC,WAAW,MAAM,GAAG,CAAC;AAAA,EAChE;AAEA,MAAI,MAAM,SAAS,kBAAkB;AACnC,SAAK,KAAK,UAAU,YAAY,MAAM,GAAG,CAAC,UAAU;AACpD,UAAMA,QAAO;AAAA,MACX;AAAA,MACA,GAAG,aAAa,MAAM,MAAM;AAAA,MAC5B,yBAAyB,mBAAmB,MAAM,EAAE,CAAC;AAAA,EAAK,mBAAmB,MAAM,eAAe,CAAC;AAAA,IACrG;AACA,WAAO,SAAS,MAAMA,KAAI;AAAA,EAC5B;AAEA,OAAK,KAAK,gCAAgC,WAAW,MAAM,MAAM,CAAC,IAAI;AAGtE,QAAM,OAAO;AAAA,IACX;AAAA,IACA,GAAG,aAAa,MAAM,MAAM;AAAA,IAC5B,8BAA8B,WAAW,MAAM,KAAK,CAAC;AAAA,IACrD,yBAAyB,mBAAmB,MAAM,eAAe,CAAC;AAAA,EACpE;AACA,SAAO,SAAS,MAAM,IAAI;AAC5B;AAEA,SAAS,SAAS,MAAgB,MAAwB;AACxD,SAAO;AAAA;AAAA;AAAA,EAGP,KAAK,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA,EAGf,KAAK,KAAK,IAAI,CAAC;AAAA;AAAA;AAGjB;;;AC1FA,SAAS,YAAY,KAAmB;AACtC,MAAI,CAAC,IAAI,WAAW,OAAO,GAAG;AAC5B,UAAM,IAAI,MAAM,uEAAuE,GAAG,IAAI;AAAA,EAChG;AACF;AAEO,SAAS,SAAS,OAA8C;AACrE,cAAY,MAAM,GAAG;AAErB,QAAM,KAA4C,CAAC;AACnD,MAAI,MAAM,IAAK,IAAG,MAAM,MAAM;AAC9B,MAAI,MAAM,YAAa,IAAG,cAAc,MAAM;AAC9C,MAAI,MAAM,WAAW,OAAW,IAAG,SAAS,MAAM;AAClD,MAAI,MAAM,kBAAkB,OAAW,IAAG,gBAAgB,MAAM;AAEhE,QAAM,OAA+B;AAAA,IACnC,iBAAiB;AAAA,IACjB,KAAK,MAAM;AAAA,IACX,MAAM,MAAM;AAAA,IACZ,UAAU;AAAA,IACV,iBAAiB,MAAM,mBAAmB;AAAA,IAC1C,cAAc,MAAM,gBAAgB,CAAC,QAAQ;AAAA,IAC7C,OAAO,EAAE,GAAG;AAAA,EACd;AACA,MAAI,MAAM,gBAAgB,OAAW,MAAK,cAAc,MAAM;AAC9D,SAAO;AACT;;;AFzBO,SAAS,uBAA+B;AAG7C,SAAO,cAAc,YAAY,QAAQ,oCAAoC,CAAC;AAChF;AAEA,SAAS,2BAAmC;AAC1C,SAAO,qBAAqB;AAC9B;AAsDA,eAAsB,2BACpB,SACsB;AACtB,QAAM,EAAE,IAAI,KAAK,GAAG,KAAK,IAAI;AAC7B,SAAO,cAAc,EAAE,GAAG,MAAM,MAAM,kBAAkB,IAAI,KAAK,OAAO,GAAG,CAAC;AAC9E;AAEA,eAAsB,iBAAiB,SAA6C;AAClF,MAAI,EAAE,SAAS,UAAU;AACvB,UAAM,KAAK,MAAM,SAAS,QAAQ,OAAO,MAAM;AAC/C,UAAM,MAAM,QAAQ,WAAW,MAAM,SAAS,QAAQ,UAAU,MAAM,IAAI;AAC1E,WAAO,cAAc,EAAE,GAAG,SAAS,MAAM,kBAAkB,IAAI,IAAI,CAAC;AAAA,EACtE;AACA,SAAO,cAAc,EAAE,GAAG,SAAS,MAAM,MAAM,CAAC;AAClD;AAQA,eAAe,cAAc,SAAqD;AAChF,QAAM,kBAAkB,MAAM;AAAA,IAC5B,QAAQ,qBAAqB,yBAAyB;AAAA,IACtD;AAAA,EACF;AAEA,QAAM,cAAc,SAAS;AAAA,IAC3B,KAAK,QAAQ;AAAA,IACb,MAAM,QAAQ;AAAA,IACd,aAAa,QAAQ;AAAA,IACrB,iBAAiB,QAAQ;AAAA,IACzB,cAAc,QAAQ;AAAA,IACtB,KAAK,QAAQ,SAAS,QAAQ,gBAAgB,QAAQ,KAAK,QAAQ,GAAG,IAAI,QAAQ;AAAA,IAClF,aAAa,QAAQ;AAAA,IACrB,QAAQ,QAAQ;AAAA,IAChB,eAAe,QAAQ;AAAA,EACzB,CAAC;AAGD,QAAM,SAAS;AAAA,IACb,iBAAiB,YAAY;AAAA,IAC7B,cAAc,YAAY;AAAA,IAC1B,iBAAiB,QAAQ,mBAAmB;AAAA,EAC9C;AAEA,QAAM,OACJ,QAAQ,SAAS,QACb,SAAS;AAAA,IACP,MAAM;AAAA,IACN,KAAK,QAAQ;AAAA,IACb,OAAO,QAAQ,IAAI;AAAA,IACnB,QAAQ,QAAQ,IAAI;AAAA,IACpB;AAAA,IACA;AAAA,EACF,CAAC,IACD,SAAS;AAAA,IACP,MAAM;AAAA,IACN,KAAK,QAAQ;AAAA,IACb,IAAI,QAAQ;AAAA,IACZ,KAAK,QAAQ;AAAA,IACb;AAAA,IACA;AAAA,EACF,CAAC;AAEP,QAAM,WAAW,GAAG,QAAQ,MAAM;AAClC,QAAM,UAAU,QAAQ,QAAQ,MAAM,MAAM;AAC5C,QAAM,UAAU,UAAU,KAAK,UAAU,aAAa,MAAM,CAAC,GAAG,MAAM;AAEtE,QAAM,WAAW,QAAQ,QAAQ,MAAM;AACvC,SAAO;AAAA,IACL;AAAA,IACA,UAAU,QAAQ,QAAQ;AAAA,IAC1B;AAAA,IACA,UAAU;AAAA,MACR,MAAM,YAAY;AAAA,MAClB,KAAK,YAAY;AAAA,MACjB;AAAA,MACA,UAAU,QAAQ,QAAQ;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,gBACP,KACA,KACkB;AAClB,QAAM,WAAW,IAAI,IAAI,IAAI,KAAK,EAAE;AACpC,QAAM,YAAY,IAAI,IAAI,IAAI,MAAM,EAAE;AACtC,QAAM,SAA2B,EAAE,GAAI,OAAO,CAAC,EAAG;AAClD,QAAM,WAAW,IAAI,IAAI,OAAO,mBAAmB,CAAC,CAAC;AACrD,WAAS,IAAI,QAAQ;AACrB,WAAS,IAAI,SAAS;AACtB,SAAO,kBAAkB,MAAM,KAAK,QAAQ;AAC5C,SAAO;AACT;","names":["body"]}

package/dist/chunk-5EHNJCMF.js

@@ -0,0 +1,58 @@
+// src/json-render/spec-stream.ts
+import { createSpecStreamCompiler } from "@json-render/core";
+import {
+  compileSpecStream,
+  createJsonRenderTransform,
+  createSpecStreamCompiler as createSpecStreamCompiler2,
+  parseSpecStreamLine
+} from "@json-render/core";
+async function* compileTextStreamToSpecs(textStream) {
+  const compiler = createSpecStreamCompiler();
+  let buffer = "";
+  for await (const delta of textStream) {
+    buffer += delta;
+    const lines = buffer.split("\n");
+    buffer = lines.pop() ?? "";
+    for (const line of lines) {
+      if (!line.trim()) continue;
+      const { result } = compiler.push(`${line}
+`);
+      yield { ...result };
+    }
+  }
+  if (buffer.trim()) {
+    const { result } = compiler.push(`${buffer}
+`);
+    yield { ...result };
+  }
+  return compiler.getResult();
+}
+function specToPatchLines(spec) {
+  const lines = [JSON.stringify({ op: "add", path: "/elements", value: {} })];
+  if (spec.state !== void 0) {
+    lines.push(JSON.stringify({ op: "add", path: "/state", value: spec.state }));
+  }
+  lines.push(JSON.stringify({ op: "add", path: "/root", value: spec.root }));
+  const seen = /* @__PURE__ */ new Set();
+  const queue = [spec.root];
+  while (queue.length) {
+    const key = queue.shift();
+    if (seen.has(key) || !spec.elements[key]) continue;
+    seen.add(key);
+    const el = spec.elements[key];
+    const path = `/elements/${key.replace(/~/g, "~0").replace(/\//g, "~1")}`;
+    lines.push(JSON.stringify({ op: "add", path, value: el }));
+    for (const child of el.children ?? []) queue.push(child);
+  }
+  return lines;
+}
+
+export {
+  compileTextStreamToSpecs,
+  specToPatchLines,
+  compileSpecStream,
+  createJsonRenderTransform,
+  createSpecStreamCompiler2 as createSpecStreamCompiler,
+  parseSpecStreamLine
+};
+//# sourceMappingURL=chunk-5EHNJCMF.js.map

package/dist/chunk-5EHNJCMF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/json-render/spec-stream.ts"],"sourcesContent":["import { createSpecStreamCompiler } from \"@json-render/core\";\nimport type { Spec } from \"@json-render/core\";\n\n// json-render's streaming primitives, re-exported so the consumer side\n// (compile patches → progressive spec) is one import away.\nexport {\n  compileSpecStream,\n  createJsonRenderTransform,\n  createSpecStreamCompiler,\n  parseSpecStreamLine,\n} from \"@json-render/core\";\n\n/**\n * Drive json-render's stream compiler from a raw text stream of JSONL patches,\n * yielding the progressively-built spec after each complete line. This is the\n * live \"model token → patch → spec\" path, decoupled from any AI SDK so it can\n * drive a real model (see `streamSpec` in `mountly-mcp/json-render/server`), replay\n * a saved transcript, bridge a custom transport, or be unit-tested with a\n * hand-written stream. Buffers partial lines across chunk boundaries. The\n * generator's *return* value is the final compiled spec (before `autoFixSpec`).\n *\n * ```ts\n * for await (const partial of compileTextStreamToSpecs(result.textStream)) {\n *   render(partial); // each yield is one more element built\n * }\n * ```\n */\nexport async function* compileTextStreamToSpecs(\n  textStream: AsyncIterable<string>,\n): AsyncGenerator<Spec, Spec, void> {\n  const compiler = createSpecStreamCompiler<Spec>();\n  let buffer = \"\";\n  for await (const delta of textStream) {\n    buffer += delta;\n    const lines = buffer.split(\"\\n\");\n    // Keep the trailing partial line for the next chunk.\n    buffer = lines.pop() ?? \"\";\n    for (const line of lines) {\n      if (!line.trim()) continue;\n      const { result } = compiler.push(`${line}\\n`);\n      yield { ...result };\n    }\n  }\n  if (buffer.trim()) {\n    const { result } = compiler.push(`${buffer}\\n`);\n    yield { ...result };\n  }\n  return compiler.getResult();\n}\n\n/**\n * Turn a finished spec into json-render's streaming patch format — ordered\n * RFC-6902 JSONL lines (`/elements` scaffold, `/state`, `/root`, then each\n * element parent-before-child). Feed these to a `createSpecStreamCompiler` to\n * replay the build progressively, so a known spec streams in the same way a\n * live model would emit it. Pure spec work — no AI SDK dependency.\n */\nexport function specToPatchLines(spec: Spec): string[] {\n  const lines: string[] = [JSON.stringify({ op: \"add\", path: \"/elements\", value: {} })];\n  if (spec.state !== undefined) {\n    lines.push(JSON.stringify({ op: \"add\", path: \"/state\", value: spec.state }));\n  }\n  lines.push(JSON.stringify({ op: \"add\", path: \"/root\", value: spec.root }));\n\n  // Breadth-first from the root so parents stream before their children.\n  const seen = new Set<string>();\n  const queue = [spec.root];\n  while (queue.length) {\n    const key = queue.shift() as string;\n    if (seen.has(key) || !spec.elements[key]) continue;\n    seen.add(key);\n    const el = spec.elements[key];\n    const path = `/elements/${key.replace(/~/g, \"~0\").replace(/\\//g, \"~1\")}`;\n    lines.push(JSON.stringify({ op: \"add\", path, value: el }));\n    for (const child of el.children ?? []) queue.push(child);\n  }\n  return lines;\n}\n"],"mappings":";AAAA,SAAS,gCAAgC;AAKzC;AAAA,EACE;AAAA,EACA;AAAA,EACA,4BAAAA;AAAA,EACA;AAAA,OACK;AAiBP,gBAAuB,yBACrB,YACkC;AAClC,QAAM,WAAW,yBAA+B;AAChD,MAAI,SAAS;AACb,mBAAiB,SAAS,YAAY;AACpC,cAAU;AACV,UAAM,QAAQ,OAAO,MAAM,IAAI;AAE/B,aAAS,MAAM,IAAI,KAAK;AACxB,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,KAAK,KAAK,EAAG;AAClB,YAAM,EAAE,OAAO,IAAI,SAAS,KAAK,GAAG,IAAI;AAAA,CAAI;AAC5C,YAAM,EAAE,GAAG,OAAO;AAAA,IACpB;AAAA,EACF;AACA,MAAI,OAAO,KAAK,GAAG;AACjB,UAAM,EAAE,OAAO,IAAI,SAAS,KAAK,GAAG,MAAM;AAAA,CAAI;AAC9C,UAAM,EAAE,GAAG,OAAO;AAAA,EACpB;AACA,SAAO,SAAS,UAAU;AAC5B;AASO,SAAS,iBAAiB,MAAsB;AACrD,QAAM,QAAkB,CAAC,KAAK,UAAU,EAAE,IAAI,OAAO,MAAM,aAAa,OAAO,CAAC,EAAE,CAAC,CAAC;AACpF,MAAI,KAAK,UAAU,QAAW;AAC5B,UAAM,KAAK,KAAK,UAAU,EAAE,IAAI,OAAO,MAAM,UAAU,OAAO,KAAK,MAAM,CAAC,CAAC;AAAA,EAC7E;AACA,QAAM,KAAK,KAAK,UAAU,EAAE,IAAI,OAAO,MAAM,SAAS,OAAO,KAAK,KAAK,CAAC,CAAC;AAGzE,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,QAAQ,CAAC,KAAK,IAAI;AACxB,SAAO,MAAM,QAAQ;AACnB,UAAM,MAAM,MAAM,MAAM;AACxB,QAAI,KAAK,IAAI,GAAG,KAAK,CAAC,KAAK,SAAS,GAAG,EAAG;AAC1C,SAAK,IAAI,GAAG;AACZ,UAAM,KAAK,KAAK,SAAS,GAAG;AAC5B,UAAM,OAAO,aAAa,IAAI,QAAQ,MAAM,IAAI,EAAE,QAAQ,OAAO,IAAI,CAAC;AACtE,UAAM,KAAK,KAAK,UAAU,EAAE,IAAI,OAAO,MAAM,OAAO,GAAG,CAAC,CAAC;AACzD,eAAW,SAAS,GAAG,YAAY,CAAC,EAAG,OAAM,KAAK,KAAK;AAAA,EACzD;AACA,SAAO;AACT;","names":["createSpecStreamCompiler"]}

package/dist/chunk-6QHKKFO3.js

@@ -0,0 +1,30 @@
+import {
+  escapeInlineScript,
+  serializeInlineScriptValue
+} from "./chunk-YJA4H6IB.js";
+
+// src/sandbox/index.ts
+function sandboxProxyHtml(hostOrigin, options = {}) {
+  const runtime = options.sandboxEntryScript ?? "";
+  return `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<title>mountly-mcp sandbox proxy</title>
+<style>
+  html, body { margin: 0; padding: 0; width: 100%; height: 100%; background: transparent; }
+  #inner { width: 100%; height: 100%; border: 0; background: white; }
+</style>
+</head>
+<body>
+<script>globalThis.__mountlyMcpSandbox__ = ${serializeInlineScriptValue({ hostOrigin })};</script>
+<script>${escapeInlineScript(runtime)}</script>
+</body>
+</html>
+`;
+}
+
+export {
+  sandboxProxyHtml
+};
+//# sourceMappingURL=chunk-6QHKKFO3.js.map

package/dist/chunk-6QHKKFO3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sandbox/index.ts"],"sourcesContent":["/**\n * Standalone sandbox proxy HTML for external hosts (Vercel AI SDK, etc.).\n *\n * The dev host already builds this internally, but external hosts need it too —\n * every host has to serve the proxy page on a separate origin (spec §8.4), and\n * hand-writing it is error-prone and drifts from the canonical CSP/permissions\n * logic in `sandbox-entry`.\n *\n * The proxy page is a thin HTML shell: it sets `__mountlyMcpSandbox__` with the\n * host origin and then runs the sandbox entry script (an IIFE). Hosts provide\n * the entry script themselves because loading strategy varies — some inline it,\n * others serve it as a separate `<script src>`.\n */\nimport { escapeInlineScript, serializeInlineScriptValue } from \"../html.js\";\n\nexport interface SandboxProxyHtmlOptions {\n  /**\n   * The compiled sandbox entry IIFE to inline. When omitted the page emits an\n   * empty `<script>` — the caller must arrange for the runtime to load another\n   * way (e.g. a `<script src>` tag).\n   */\n  sandboxEntryScript?: string;\n}\n\n/**\n * Return the complete sandbox proxy HTML document for the given host origin.\n *\n * This is the security boundary described in MCP Apps §8.4: it runs on an\n * origin distinct from the host, receives the view HTML over postMessage,\n * injects the CSP the sidecar declared, and relays messages.\n */\nexport function sandboxProxyHtml(\n  hostOrigin: string,\n  options: SandboxProxyHtmlOptions = {},\n): string {\n  const runtime = options.sandboxEntryScript ?? \"\";\n  return `<!doctype html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\">\n<title>mountly-mcp sandbox proxy</title>\n<style>\n  html, body { margin: 0; padding: 0; width: 100%; height: 100%; background: transparent; }\n  #inner { width: 100%; height: 100%; border: 0; background: white; }\n</style>\n</head>\n<body>\n<script>globalThis.__mountlyMcpSandbox__ = ${serializeInlineScriptValue({ hostOrigin })};</script>\n<script>${escapeInlineScript(runtime)}</script>\n</body>\n</html>\n`;\n}\n"],"mappings":";;;;;;AA+BO,SAAS,iBACd,YACA,UAAmC,CAAC,GAC5B;AACR,QAAM,UAAU,QAAQ,sBAAsB;AAC9C,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,6CAWoC,2BAA2B,EAAE,WAAW,CAAC,CAAC;AAAA,UAC7E,mBAAmB,OAAO,CAAC;AAAA;AAAA;AAAA;AAIrC;","names":[]}