mountly-mcp 4.3.0 → 4.5.0

package/README.md

@@ -207,10 +207,98 @@ function Library() {
 }
 ```
 
+**Entrypoint types** place one View on several ChatGPT surfaces. Other hosts
+ignore `openai/ui` and render the View inline:
+
+| `type`     | ChatGPT surface                                 | Extra fields                     |
+| ---------- | ----------------------------------------------- | -------------------------------- |
+| `global`   | Persistent sidebar panel                        | `quickAction` (sidebar shortcut) |
+| `thread`   | Conversation panel beside the chat              | none                             |
+| `file`     | File viewer/editor for matching extensions      | `extensions`                     |
+| `settings` | Plugin settings page                            | `searchTerms`                    |
+
+A file viewer receives the opened file as tool input. Parse it with the SDK schema:
+
+```ts
+import { OpenAIFileEntrypointInputSchema } from "@openai/mcp-extensions/server";
+
+{
+  name: "parts.open_cad",
+  resourceUri: "ui://parts/cad-viewer",
+  config: {
+    inputSchema: OpenAIFileEntrypointInputSchema.shape,
+    _meta: openaiUiToolMeta({
+      entrypoints: [{ type: "file", extensions: [".step", ".stl"] }],
+    }),
+  },
+  handler: async ({ file }) => ({ structuredContent: { name: file.name, uri: file.resourceUri } }),
+}
+```
+
 Smoke in ChatGPT: serve Streamable HTTP at `/mcp`, enable Developer mode, add the
 connector, then open a `global` entrypoint from the Desktop sidebar. See the
 [host matrix](https://mountly.dev/mcp-apps/host-matrix/).
 
+## MCP Events (experimental)
+
+`mountly-mcp/events` lets your server wake a ChatGPT conversation when something
+changes, such as a finished deploy or a new comment. It implements webhook
+delivery from the draft MCP Events spec: Standard Webhooks signing, callback
+challenge verification, retries with backoff, and `410` cleanup. The API follows
+the draft spec.
+
+You need an **MCP 2.0** server (`@modelcontextprotocol/server` v2, protocol
+`2026-07-28`). Register the helpers as custom methods:
+
+```ts
+import { McpServer, createMcpHandler } from "@modelcontextprotocol/server";
+import { defineEvents } from "mountly-mcp/events";
+import { z } from "zod";
+
+const events = defineEvents({
+  events: {
+    "deploy.finished": {
+      description: "A deploy for the app finished.",
+      input: z.object({ app: z.string() }),
+      payload: z.object({ app: z.string(), id: z.string(), status: z.enum(["ok", "failed"]) }),
+    },
+  },
+  store: subscriptionsTable, // get/set/delete/values; a Map is fine for dev
+  authorize: ({ arguments: args, authInfo }) => canSeeApp(authInfo, args.app),
+});
+
+const handler = createMcpHandler(() => {
+  const server = new McpServer({ name: "deploys", version: "1.0.0" });
+  server.server.registerCapabilities({ events: {} });
+  const params = z.looseObject({});
+  server.server.setRequestHandler("events/list", { params }, () => events.list());
+  server.server.setRequestHandler("events/subscribe", { params }, (p, ctx) =>
+    events.subscribe(p, { authInfo: ctx.http?.authInfo }));
+  server.server.setRequestHandler("events/unsubscribe", { params }, (p, ctx) =>
+    events.unsubscribe(p, { authInfo: ctx.http?.authInfo }));
+  return server;
+});
+
+// Later, when it happens:
+await events.emit(
+  "deploy.finished",
+  { app: "web", id: "d_42", status: "ok" },
+  (args) => args.app === "web",
+);
+```
+
+Give the events server at least one tool. ChatGPT creates a connector once
+`tools/list` succeeds.
+
+`authorize` runs on subscribe and again before each delivery, using the principal
+stored at subscribe time, so revoking access stops delivery. Callback URLs use
+`https:`; pass `allowCallbackUrl` to restrict them further. Keep `authInfo`
+serializable when your store persists subscriptions.
+
+ChatGPT subscribes from Work chats and processes events asynchronously. See the
+[`mcp-chatgpt-plugin` example](https://github.com/jagreehal/mountly/tree/main/docs/examples/mcp-chatgpt-plugin) for a
+full walkthrough.
+
 ## Verify
 
 ```bash
@@ -281,6 +369,7 @@ the view sends the agent its next turn with the current page. The
 | `mountly-mcp/artifact`    | Manifest APIs                           |
 | `mountly-mcp/server`      | `registerMcpApps`                       |
 | `mountly-mcp/openai/server` | ChatGPT helpers (`enableOpenAiExtensions`, `openaiUiToolMeta`) |
+| `mountly-mcp/events`      | Experimental MCP Events (`defineEvents`, `signWebhook`) |
 | `mountly-mcp/dev`         | Local host helpers                      |
 | `mountly-mcp/testing`     | `verifyMcpApps`                         |
 | `mountly-mcp/json-render` | Generative path                         |

package/dist/artifact/declaration.d.ts

@@ -0,0 +1,61 @@
+/**
+ * The parts of an artifact that need no filesystem: its types, and the checks
+ * a resource declaration must pass. Kept apart so a server on a runtime without
+ * `node:fs` (Cloudflare Workers) can register Views held in memory.
+ */
+import { LATEST_PROTOCOL_VERSION } from "@modelcontextprotocol/ext-apps";
+import type { McpResourceDeclaration } from "../types.js";
+export declare const MCP_APP_MANIFEST_VERSION: 1;
+export declare const MCP_APP_MANIFEST_FILE = "mountly-mcp.manifest.json";
+export interface McpAppArtifact {
+    /** Developer-facing unique key. */
+    name: string;
+    /** Protocol identity. */
+    uri: string;
+    /** Absolute path to the self-contained View HTML. */
+    htmlPath: string;
+    /** Absolute path to the transitional per-View sidecar. */
+    metaPath: string;
+    declaration: McpResourceDeclaration;
+}
+export interface McpAppManifestEntry {
+    name: string;
+    uri: string;
+    /** Path relative to the manifest, unless explicitly absolute. */
+    html: string;
+    /** Path relative to the manifest, unless explicitly absolute. */
+    meta: string;
+    declaration: McpResourceDeclaration;
+}
+export interface McpAppManifest {
+    formatVersion: typeof MCP_APP_MANIFEST_VERSION;
+    protocolVersion: typeof LATEST_PROTOCOL_VERSION;
+    apps: ReadonlyArray<McpAppManifestEntry>;
+}
+export type ConformanceSeverity = "error" | "warning";
+export interface ConformanceDiagnostic {
+    severity: ConformanceSeverity;
+    code: string;
+    message: string;
+    source?: string;
+}
+export declare class McpAppConformanceError extends Error {
+    readonly diagnostics: ReadonlyArray<ConformanceDiagnostic>;
+    constructor(diagnostics: ReadonlyArray<ConformanceDiagnostic>);
+}
+export declare function object(value: unknown): Record<string, unknown> | undefined;
+export declare function inspectMcpResourceDeclaration(value: unknown, source?: string): ReadonlyArray<ConformanceDiagnostic>;
+export declare function parseMcpResourceDeclaration(value: unknown, source?: string): McpResourceDeclaration;
+/**
+ * A View held in memory rather than on disk: what `mountly-mcp build` writes to
+ * `mountly-mcp.views.js` for servers that cannot read files.
+ */
+export interface McpAppSource {
+    name: string;
+    uri: string;
+    declaration: McpResourceDeclaration;
+    /** The self-contained View HTML. */
+    html: string;
+}
+/** Check an in-memory View the way `readMcpAppArtifact` checks one on disk. */
+export declare function parseMcpAppSource(value: McpAppSource, expectedUri?: string): McpAppSource;

package/dist/artifact/index.d.ts

@@ -1,45 +1,5 @@
-import { LATEST_PROTOCOL_VERSION } from "@modelcontextprotocol/ext-apps";
-import type { McpResourceDeclaration } from "../types.js";
-export declare const MCP_APP_MANIFEST_VERSION: 1;
-export declare const MCP_APP_MANIFEST_FILE = "mountly-mcp.manifest.json";
-export interface McpAppArtifact {
-    /** Developer-facing unique key. */
-    name: string;
-    /** Protocol identity. */
-    uri: string;
-    /** Absolute path to the self-contained View HTML. */
-    htmlPath: string;
-    /** Absolute path to the transitional per-View sidecar. */
-    metaPath: string;
-    declaration: McpResourceDeclaration;
-}
-export interface McpAppManifestEntry {
-    name: string;
-    uri: string;
-    /** Path relative to the manifest, unless explicitly absolute. */
-    html: string;
-    /** Path relative to the manifest, unless explicitly absolute. */
-    meta: string;
-    declaration: McpResourceDeclaration;
-}
-export interface McpAppManifest {
-    formatVersion: typeof MCP_APP_MANIFEST_VERSION;
-    protocolVersion: typeof LATEST_PROTOCOL_VERSION;
-    apps: ReadonlyArray<McpAppManifestEntry>;
-}
-export type ConformanceSeverity = "error" | "warning";
-export interface ConformanceDiagnostic {
-    severity: ConformanceSeverity;
-    code: string;
-    message: string;
-    source?: string;
-}
-export declare class McpAppConformanceError extends Error {
-    readonly diagnostics: ReadonlyArray<ConformanceDiagnostic>;
-    constructor(diagnostics: ReadonlyArray<ConformanceDiagnostic>);
-}
-export declare function inspectMcpResourceDeclaration(value: unknown, source?: string): ReadonlyArray<ConformanceDiagnostic>;
-export declare function parseMcpResourceDeclaration(value: unknown, source?: string): McpResourceDeclaration;
+import { type McpAppArtifact, type McpAppManifest } from "./declaration.js";
+export { MCP_APP_MANIFEST_FILE, MCP_APP_MANIFEST_VERSION, McpAppConformanceError, inspectMcpResourceDeclaration, parseMcpAppSource, parseMcpResourceDeclaration, type ConformanceDiagnostic, type ConformanceSeverity, type McpAppArtifact, type McpAppManifest, type McpAppManifestEntry, type McpAppSource, } from "./declaration.js";
 export declare function readMcpAppArtifact(htmlPath: string, expectedUri?: string): Promise<McpAppArtifact>;
 export declare function writeMcpAppManifest(path: string, artifacts: ReadonlyArray<McpAppArtifact>): Promise<McpAppManifest>;
 export declare function readMcpAppManifest(path: string): Promise<{

package/dist/artifact/index.js

@@ -1,18 +1,22 @@
+import {
+  readMcpAppArtifact,
+  readMcpAppManifest,
+  writeMcpAppManifest
+} from "../chunk-RLDSMU5M.js";
 import {
   MCP_APP_MANIFEST_FILE,
   MCP_APP_MANIFEST_VERSION,
   McpAppConformanceError,
   inspectMcpResourceDeclaration,
-  parseMcpResourceDeclaration,
-  readMcpAppArtifact,
-  readMcpAppManifest,
-  writeMcpAppManifest
-} from "../chunk-DKK26TRS.js";
+  parseMcpAppSource,
+  parseMcpResourceDeclaration
+} from "../chunk-6T5EIQGE.js";
 export {
   MCP_APP_MANIFEST_FILE,
   MCP_APP_MANIFEST_VERSION,
   McpAppConformanceError,
   inspectMcpResourceDeclaration,
+  parseMcpAppSource,
   parseMcpResourceDeclaration,
   readMcpAppArtifact,
   readMcpAppManifest,

package/dist/chunk-6T5EIQGE.js

@@ -0,0 +1,104 @@
+// src/artifact/declaration.ts
+import {
+  McpUiDisplayModeSchema,
+  McpUiResourceMetaSchema,
+  RESOURCE_MIME_TYPE,
+  LATEST_PROTOCOL_VERSION
+} from "@modelcontextprotocol/ext-apps";
+var MCP_APP_MANIFEST_VERSION = 1;
+var MCP_APP_MANIFEST_FILE = "mountly-mcp.manifest.json";
+var McpAppConformanceError = class extends Error {
+  constructor(diagnostics) {
+    super(diagnostics.map((d) => `${d.code}: ${d.message}`).join("\n"));
+    this.name = "McpAppConformanceError";
+    this.diagnostics = diagnostics;
+  }
+};
+function object(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+function inspectMcpResourceDeclaration(value, source) {
+  const diagnostics = [];
+  const add = (code, message) => {
+    diagnostics.push({ severity: "error", code, message, source });
+  };
+  const candidate = object(value);
+  if (!candidate) {
+    add("artifact/not-object", "resource declaration must be an object");
+    return diagnostics;
+  }
+  if (candidate.protocolVersion !== LATEST_PROTOCOL_VERSION) {
+    add(
+      "artifact/protocol-version",
+      `sidecar protocolVersion must be '${LATEST_PROTOCOL_VERSION}' (received '${String(candidate.protocolVersion)}')`
+    );
+  }
+  if (typeof candidate.uri !== "string" || !candidate.uri.startsWith("ui://")) {
+    add("artifact/uri", `uri must use the 'ui://' scheme (received '${String(candidate.uri)}')`);
+  }
+  if (typeof candidate.name !== "string" || candidate.name.trim() === "") {
+    add("artifact/name", "name must be a non-empty string");
+  }
+  if (candidate.mimeType !== RESOURCE_MIME_TYPE) {
+    add(
+      "artifact/mime-type",
+      `sidecar mimeType must be '${RESOURCE_MIME_TYPE}' (received '${String(candidate.mimeType)}')`
+    );
+  }
+  if (typeof candidate.awaitToolResult !== "boolean") {
+    add("artifact/await-tool-result", "awaitToolResult must be a boolean");
+  }
+  if (!Array.isArray(candidate.displayModes) || candidate.displayModes.length === 0 || candidate.displayModes.some((mode) => !McpUiDisplayModeSchema.safeParse(mode).success)) {
+    add("artifact/display-modes", "displayModes must contain supported MCP Apps display modes");
+  }
+  const meta = object(candidate._meta);
+  const ui = meta && object(meta.ui);
+  if (!ui || !McpUiResourceMetaSchema.safeParse(ui).success) {
+    add("artifact/resource-meta", "_meta.ui must be valid MCP Apps resource metadata");
+  }
+  return diagnostics;
+}
+function parseMcpResourceDeclaration(value, source) {
+  const diagnostics = inspectMcpResourceDeclaration(value, source);
+  if (diagnostics.length > 0) throw new McpAppConformanceError(diagnostics);
+  return value;
+}
+function parseMcpAppSource(value, expectedUri) {
+  const source = value.name ? `view '${value.name}'` : "in-memory view";
+  if (typeof value.html !== "string" || !/^\s*<!doctype html>/i.test(value.html)) {
+    throw new McpAppConformanceError([
+      {
+        severity: "error",
+        code: "artifact/html5",
+        message: "View HTML must start with an HTML5 doctype",
+        source
+      }
+    ]);
+  }
+  const declaration = parseMcpResourceDeclaration(value.declaration, source);
+  if (declaration.name !== value.name || declaration.uri !== value.uri) {
+    throw new Error(`mountly-mcp: ${source} identity does not match its declaration`);
+  }
+  if (expectedUri !== void 0 && declaration.uri !== expectedUri) {
+    throw new McpAppConformanceError([
+      {
+        severity: "error",
+        code: "artifact/uri-mismatch",
+        message: `registration uri '${expectedUri}' does not match declared uri '${declaration.uri}'`,
+        source
+      }
+    ]);
+  }
+  return value;
+}
+
+export {
+  MCP_APP_MANIFEST_VERSION,
+  MCP_APP_MANIFEST_FILE,
+  McpAppConformanceError,
+  object,
+  inspectMcpResourceDeclaration,
+  parseMcpResourceDeclaration,
+  parseMcpAppSource
+};
+//# sourceMappingURL=chunk-6T5EIQGE.js.map

package/dist/chunk-6T5EIQGE.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/artifact/declaration.ts"],"sourcesContent":["/**\n * The parts of an artifact that need no filesystem: its types, and the checks\n * a resource declaration must pass. Kept apart so a server on a runtime without\n * `node:fs` (Cloudflare Workers) can register Views held in memory.\n */\nimport {\n  McpUiDisplayModeSchema,\n  McpUiResourceMetaSchema,\n  RESOURCE_MIME_TYPE,\n  LATEST_PROTOCOL_VERSION,\n} from \"@modelcontextprotocol/ext-apps\";\nimport type { McpResourceDeclaration } from \"../types.js\";\n\nexport const MCP_APP_MANIFEST_VERSION = 1 as const;\nexport const MCP_APP_MANIFEST_FILE = \"mountly-mcp.manifest.json\";\n\nexport interface McpAppArtifact {\n  /** Developer-facing unique key. */\n  name: string;\n  /** Protocol identity. */\n  uri: string;\n  /** Absolute path to the self-contained View HTML. */\n  htmlPath: string;\n  /** Absolute path to the transitional per-View sidecar. */\n  metaPath: string;\n  declaration: McpResourceDeclaration;\n}\n\nexport interface McpAppManifestEntry {\n  name: string;\n  uri: string;\n  /** Path relative to the manifest, unless explicitly absolute. */\n  html: string;\n  /** Path relative to the manifest, unless explicitly absolute. */\n  meta: string;\n  declaration: McpResourceDeclaration;\n}\n\nexport interface McpAppManifest {\n  formatVersion: typeof MCP_APP_MANIFEST_VERSION;\n  protocolVersion: typeof LATEST_PROTOCOL_VERSION;\n  apps: ReadonlyArray<McpAppManifestEntry>;\n}\n\nexport type ConformanceSeverity = \"error\" | \"warning\";\n\nexport interface ConformanceDiagnostic {\n  severity: ConformanceSeverity;\n  code: string;\n  message: string;\n  source?: string;\n}\n\nexport class McpAppConformanceError extends Error {\n  readonly diagnostics: ReadonlyArray<ConformanceDiagnostic>;\n\n  constructor(diagnostics: ReadonlyArray<ConformanceDiagnostic>) {\n    super(diagnostics.map((d) => `${d.code}: ${d.message}`).join(\"\\n\"));\n    this.name = \"McpAppConformanceError\";\n    this.diagnostics = diagnostics;\n  }\n}\n\nexport function object(value: unknown): Record<string, unknown> | undefined {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : undefined;\n}\n\nexport function inspectMcpResourceDeclaration(\n  value: unknown,\n  source?: string,\n): ReadonlyArray<ConformanceDiagnostic> {\n  const diagnostics: ConformanceDiagnostic[] = [];\n  const add = (code: string, message: string): void => {\n    diagnostics.push({ severity: \"error\", code, message, source });\n  };\n  const candidate = object(value);\n  if (!candidate) {\n    add(\"artifact/not-object\", \"resource declaration must be an object\");\n    return diagnostics;\n  }\n  if (candidate.protocolVersion !== LATEST_PROTOCOL_VERSION) {\n    add(\n      \"artifact/protocol-version\",\n      `sidecar protocolVersion must be '${LATEST_PROTOCOL_VERSION}' (received '${String(candidate.protocolVersion)}')`,\n    );\n  }\n  if (typeof candidate.uri !== \"string\" || !candidate.uri.startsWith(\"ui://\")) {\n    add(\"artifact/uri\", `uri must use the 'ui://' scheme (received '${String(candidate.uri)}')`);\n  }\n  if (typeof candidate.name !== \"string\" || candidate.name.trim() === \"\") {\n    add(\"artifact/name\", \"name must be a non-empty string\");\n  }\n  if (candidate.mimeType !== RESOURCE_MIME_TYPE) {\n    add(\n      \"artifact/mime-type\",\n      `sidecar mimeType must be '${RESOURCE_MIME_TYPE}' (received '${String(candidate.mimeType)}')`,\n    );\n  }\n  if (typeof candidate.awaitToolResult !== \"boolean\") {\n    add(\"artifact/await-tool-result\", \"awaitToolResult must be a boolean\");\n  }\n  if (\n    !Array.isArray(candidate.displayModes) ||\n    candidate.displayModes.length === 0 ||\n    candidate.displayModes.some((mode) => !McpUiDisplayModeSchema.safeParse(mode).success)\n  ) {\n    add(\"artifact/display-modes\", \"displayModes must contain supported MCP Apps display modes\");\n  }\n  const meta = object(candidate._meta);\n  const ui = meta && object(meta.ui);\n  if (!ui || !McpUiResourceMetaSchema.safeParse(ui).success) {\n    add(\"artifact/resource-meta\", \"_meta.ui must be valid MCP Apps resource metadata\");\n  }\n  return diagnostics;\n}\n\nexport function parseMcpResourceDeclaration(\n  value: unknown,\n  source?: string,\n): McpResourceDeclaration {\n  const diagnostics = inspectMcpResourceDeclaration(value, source);\n  if (diagnostics.length > 0) throw new McpAppConformanceError(diagnostics);\n  return value as McpResourceDeclaration;\n}\n\n/**\n * A View held in memory rather than on disk: what `mountly-mcp build` writes to\n * `mountly-mcp.views.js` for servers that cannot read files.\n */\nexport interface McpAppSource {\n  name: string;\n  uri: string;\n  declaration: McpResourceDeclaration;\n  /** The self-contained View HTML. */\n  html: string;\n}\n\n/** Check an in-memory View the way `readMcpAppArtifact` checks one on disk. */\nexport function parseMcpAppSource(value: McpAppSource, expectedUri?: string): McpAppSource {\n  const source = value.name ? `view '${value.name}'` : \"in-memory view\";\n  if (typeof value.html !== \"string\" || !/^\\s*<!doctype html>/i.test(value.html)) {\n    throw new McpAppConformanceError([\n      {\n        severity: \"error\",\n        code: \"artifact/html5\",\n        message: \"View HTML must start with an HTML5 doctype\",\n        source,\n      },\n    ]);\n  }\n  const declaration = parseMcpResourceDeclaration(value.declaration, source);\n  if (declaration.name !== value.name || declaration.uri !== value.uri) {\n    throw new Error(`mountly-mcp: ${source} identity does not match its declaration`);\n  }\n  if (expectedUri !== undefined && declaration.uri !== expectedUri) {\n    throw new McpAppConformanceError([\n      {\n        severity: \"error\",\n        code: \"artifact/uri-mismatch\",\n        message: `registration uri '${expectedUri}' does not match declared uri '${declaration.uri}'`,\n        source,\n      },\n    ]);\n  }\n  return value;\n}\n"],"mappings":";AAKA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGA,IAAM,2BAA2B;AACjC,IAAM,wBAAwB;AAuC9B,IAAM,yBAAN,cAAqC,MAAM;AAAA,EAGhD,YAAY,aAAmD;AAC7D,UAAM,YAAY,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI,CAAC;AAClE,SAAK,OAAO;AACZ,SAAK,cAAc;AAAA,EACrB;AACF;AAEO,SAAS,OAAO,OAAqD;AAC1E,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK,IACrE,QACD;AACN;AAEO,SAAS,8BACd,OACA,QACsC;AACtC,QAAM,cAAuC,CAAC;AAC9C,QAAM,MAAM,CAAC,MAAc,YAA0B;AACnD,gBAAY,KAAK,EAAE,UAAU,SAAS,MAAM,SAAS,OAAO,CAAC;AAAA,EAC/D;AACA,QAAM,YAAY,OAAO,KAAK;AAC9B,MAAI,CAAC,WAAW;AACd,QAAI,uBAAuB,wCAAwC;AACnE,WAAO;AAAA,EACT;AACA,MAAI,UAAU,oBAAoB,yBAAyB;AACzD;AAAA,MACE;AAAA,MACA,oCAAoC,uBAAuB,gBAAgB,OAAO,UAAU,eAAe,CAAC;AAAA,IAC9G;AAAA,EACF;AACA,MAAI,OAAO,UAAU,QAAQ,YAAY,CAAC,UAAU,IAAI,WAAW,OAAO,GAAG;AAC3E,QAAI,gBAAgB,8CAA8C,OAAO,UAAU,GAAG,CAAC,IAAI;AAAA,EAC7F;AACA,MAAI,OAAO,UAAU,SAAS,YAAY,UAAU,KAAK,KAAK,MAAM,IAAI;AACtE,QAAI,iBAAiB,iCAAiC;AAAA,EACxD;AACA,MAAI,UAAU,aAAa,oBAAoB;AAC7C;AAAA,MACE;AAAA,MACA,6BAA6B,kBAAkB,gBAAgB,OAAO,UAAU,QAAQ,CAAC;AAAA,IAC3F;AAAA,EACF;AACA,MAAI,OAAO,UAAU,oBAAoB,WAAW;AAClD,QAAI,8BAA8B,mCAAmC;AAAA,EACvE;AACA,MACE,CAAC,MAAM,QAAQ,UAAU,YAAY,KACrC,UAAU,aAAa,WAAW,KAClC,UAAU,aAAa,KAAK,CAAC,SAAS,CAAC,uBAAuB,UAAU,IAAI,EAAE,OAAO,GACrF;AACA,QAAI,0BAA0B,4DAA4D;AAAA,EAC5F;AACA,QAAM,OAAO,OAAO,UAAU,KAAK;AACnC,QAAM,KAAK,QAAQ,OAAO,KAAK,EAAE;AACjC,MAAI,CAAC,MAAM,CAAC,wBAAwB,UAAU,EAAE,EAAE,SAAS;AACzD,QAAI,0BAA0B,mDAAmD;AAAA,EACnF;AACA,SAAO;AACT;AAEO,SAAS,4BACd,OACA,QACwB;AACxB,QAAM,cAAc,8BAA8B,OAAO,MAAM;AAC/D,MAAI,YAAY,SAAS,EAAG,OAAM,IAAI,uBAAuB,WAAW;AACxE,SAAO;AACT;AAeO,SAAS,kBAAkB,OAAqB,aAAoC;AACzF,QAAM,SAAS,MAAM,OAAO,SAAS,MAAM,IAAI,MAAM;AACrD,MAAI,OAAO,MAAM,SAAS,YAAY,CAAC,uBAAuB,KAAK,MAAM,IAAI,GAAG;AAC9E,UAAM,IAAI,uBAAuB;AAAA,MAC/B;AAAA,QACE,UAAU;AAAA,QACV,MAAM;AAAA,QACN,SAAS;AAAA,QACT;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AACA,QAAM,cAAc,4BAA4B,MAAM,aAAa,MAAM;AACzE,MAAI,YAAY,SAAS,MAAM,QAAQ,YAAY,QAAQ,MAAM,KAAK;AACpE,UAAM,IAAI,MAAM,gBAAgB,MAAM,0CAA0C;AAAA,EAClF;AACA,MAAI,gBAAgB,UAAa,YAAY,QAAQ,aAAa;AAChE,UAAM,IAAI,uBAAuB;AAAA,MAC/B;AAAA,QACE,UAAU;AAAA,QACV,MAAM;AAAA,QACN,SAAS,qBAAqB,WAAW,kCAAkC,YAAY,GAAG;AAAA,QAC1F;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO;AACT;","names":[]}

package/dist/chunk-BLT2MK32.js

@@ -0,0 +1,35 @@
+// src/download.ts
+async function base64(blob) {
+  const bytes = new Uint8Array(await blob.arrayBuffer());
+  let binary = "";
+  for (let i = 0; i < bytes.length; i += 32768) {
+    binary += String.fromCharCode(...bytes.subarray(i, i + 32768));
+  }
+  return btoa(binary);
+}
+async function downloadFile(app, file) {
+  const text = typeof file.data === "string";
+  const mimeType = file.mimeType || (text ? "text/plain" : file.data.type) || "application/octet-stream";
+  if (app?.getHostCapabilities()?.downloadFile) {
+    const uri = `file:///${encodeURIComponent(file.name)}`;
+    const resource = text ? { uri, mimeType, text: file.data } : { uri, mimeType, blob: await base64(file.data) };
+    const { isError } = await app.downloadFile({ contents: [{ type: "resource", resource }] });
+    return !isError;
+  }
+  const blob = text ? new Blob([file.data], { type: mimeType }) : file.data;
+  const url = URL.createObjectURL(blob);
+  const link = document.createElement("a");
+  link.href = url;
+  link.download = file.name;
+  link.hidden = true;
+  document.body.append(link);
+  link.click();
+  link.remove();
+  setTimeout(() => URL.revokeObjectURL(url), 1e3);
+  return true;
+}
+
+export {
+  downloadFile
+};
+//# sourceMappingURL=chunk-BLT2MK32.js.map

package/dist/chunk-BLT2MK32.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/download.ts"],"sourcesContent":["import type { App } from \"@modelcontextprotocol/ext-apps\";\n\nexport interface DownloadableFile {\n  /** The name the user saves it as. */\n  name: string;\n  data: Blob | string;\n  /** Defaults to the Blob's own type, or `text/plain` for a string. */\n  mimeType?: string;\n}\n\nasync function base64(blob: Blob): Promise<string> {\n  const bytes = new Uint8Array(await blob.arrayBuffer());\n  let binary = \"\";\n  // Chunked: spreading a whole large file into one call overflows the stack.\n  for (let i = 0; i < bytes.length; i += 0x8000) {\n    binary += String.fromCharCode(...bytes.subarray(i, i + 0x8000));\n  }\n  return btoa(binary);\n}\n\n/**\n * Hand the user a file. A View's iframe usually cannot download on its own, so\n * a host that supports `ui/download-file` is asked to save it, with its own\n * confirmation. Anywhere else — a host without it, the dev harness, an ordinary\n * page — an `<a download>` is clicked, which a strict sandbox may still block.\n *\n * Resolves `false` when the host declined or the user cancelled.\n */\nexport async function downloadFile(app: App | undefined, file: DownloadableFile): Promise<boolean> {\n  const text = typeof file.data === \"string\";\n  const mimeType =\n    file.mimeType || (text ? \"text/plain\" : (file.data as Blob).type) || \"application/octet-stream\";\n\n  if (app?.getHostCapabilities()?.downloadFile) {\n    const uri = `file:///${encodeURIComponent(file.name)}`;\n    const resource = text\n      ? { uri, mimeType, text: file.data as string }\n      : { uri, mimeType, blob: await base64(file.data as Blob) };\n    const { isError } = await app.downloadFile({ contents: [{ type: \"resource\", resource }] });\n    return !isError;\n  }\n\n  const blob = text ? new Blob([file.data], { type: mimeType }) : (file.data as Blob);\n  const url = URL.createObjectURL(blob);\n  const link = document.createElement(\"a\");\n  link.href = url;\n  link.download = file.name;\n  link.hidden = true;\n  document.body.append(link);\n  link.click();\n  link.remove();\n  // Revoking on the same tick can cancel the download in some browsers.\n  setTimeout(() => URL.revokeObjectURL(url), 1000);\n  return true;\n}\n"],"mappings":";AAUA,eAAe,OAAO,MAA6B;AACjD,QAAM,QAAQ,IAAI,WAAW,MAAM,KAAK,YAAY,CAAC;AACrD,MAAI,SAAS;AAEb,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,OAAQ;AAC7C,cAAU,OAAO,aAAa,GAAG,MAAM,SAAS,GAAG,IAAI,KAAM,CAAC;AAAA,EAChE;AACA,SAAO,KAAK,MAAM;AACpB;AAUA,eAAsB,aAAa,KAAsB,MAA0C;AACjG,QAAM,OAAO,OAAO,KAAK,SAAS;AAClC,QAAM,WACJ,KAAK,aAAa,OAAO,eAAgB,KAAK,KAAc,SAAS;AAEvE,MAAI,KAAK,oBAAoB,GAAG,cAAc;AAC5C,UAAM,MAAM,WAAW,mBAAmB,KAAK,IAAI,CAAC;AACpD,UAAM,WAAW,OACb,EAAE,KAAK,UAAU,MAAM,KAAK,KAAe,IAC3C,EAAE,KAAK,UAAU,MAAM,MAAM,OAAO,KAAK,IAAY,EAAE;AAC3D,UAAM,EAAE,QAAQ,IAAI,MAAM,IAAI,aAAa,EAAE,UAAU,CAAC,EAAE,MAAM,YAAY,SAAS,CAAC,EAAE,CAAC;AACzF,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,OAAO,OAAO,IAAI,KAAK,CAAC,KAAK,IAAI,GAAG,EAAE,MAAM,SAAS,CAAC,IAAK,KAAK;AACtE,QAAM,MAAM,IAAI,gBAAgB,IAAI;AACpC,QAAM,OAAO,SAAS,cAAc,GAAG;AACvC,OAAK,OAAO;AACZ,OAAK,WAAW,KAAK;AACrB,OAAK,SAAS;AACd,WAAS,KAAK,OAAO,IAAI;AACzB,OAAK,MAAM;AACX,OAAK,OAAO;AAEZ,aAAW,MAAM,IAAI,gBAAgB,GAAG,GAAG,GAAI;AAC/C,SAAO;AACT;","names":[]}

package/dist/{chunk-HIAIQVK5.js → chunk-QIA76O6M.js}

@@ -1,6 +1,9 @@
 import {
   McpContext
 } from "./chunk-4SZHJ4MK.js";
+import {
+  downloadFile
+} from "./chunk-BLT2MK32.js";
 import {
   publishMcpView
 } from "./chunk-5L3QHYWK.js";
@@ -71,6 +74,10 @@ function useUpdateModelContext() {
     await app.updateModelContext(params);
   };
 }
+function useDownload() {
+  const { app } = useEnsuredContext();
+  return (file) => downloadFile(app, file);
+}
 function useAutoResize(...args) {
   return useAutoResizeBase(...args);
 }
@@ -110,7 +117,8 @@ export {
   useHostStyles,
   useDocumentTheme,
   useUpdateModelContext,
+  useDownload,
   useAutoResize,
   createMcpView
 };
-//# sourceMappingURL=chunk-HIAIQVK5.js.map
+//# sourceMappingURL=chunk-QIA76O6M.js.map

package/dist/chunk-QIA76O6M.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/react/hooks.ts","../src/react/create-view.ts"],"sourcesContent":["import { useContext } from \"react\";\nimport {\n  useAutoResize as useAutoResizeBase,\n  useDocumentTheme as useDocumentThemeBase,\n  useHostFonts as useHostFontsBase,\n  useHostStyleVariables as useHostStyleVariablesBase,\n  useHostStyles as useHostStylesBase,\n} from \"@modelcontextprotocol/ext-apps/react\";\nimport type {\n  App,\n  McpUiDisplayMode,\n  McpUiHostContext,\n  McpUiUpdateModelContextRequest,\n} from \"@modelcontextprotocol/ext-apps\";\nimport { downloadFile, type DownloadableFile } from \"../download.js\";\nimport { McpContext } from \"./context.js\";\n\nfunction useEnsuredContext() {\n  const ctx = useContext(McpContext);\n  if (!ctx) {\n    throw new Error(\n      \"mountly-mcp/react: useMcpApp/useToolInput/etc must be used inside a View wrapped with createMcpView().\",\n    );\n  }\n  return ctx;\n}\n\n/** The view-side ext-apps App. Use this to call server tools, send messages, open links, etc. */\nexport function useMcpApp(): App {\n  return useEnsuredContext().app;\n}\n\n/** Complete notification params; read the tool arguments from `.arguments`. */\nexport function useToolInput<T = unknown>(): T | undefined {\n  return useEnsuredContext().toolInput as T | undefined;\n}\n\n/**\n * Streaming tool arguments (`ui/notifications/tool-input-partial`), present only\n * when the bridge runs with `streamToolInput`. Best-effort recovered JSON —\n * fields may be missing or change between notifications, so render loading\n * states from it, never critical operations. Undefined once the complete\n * {@link useToolInput} arrives.\n */\nexport function useToolInputPartial<T = unknown>(): Partial<T> | undefined {\n  return useEnsuredContext().toolInputPartial as Partial<T> | undefined;\n}\n\n/** Complete MCP tool result; structured data is available at `.structuredContent`. */\nexport function useToolResult<T = unknown>(): T | undefined {\n  return useEnsuredContext().toolResult as T | undefined;\n}\n\n/** Latest host context snapshot (theme, styles, displayMode, container dimensions, etc.). */\nexport function useHostContext(): McpUiHostContext | undefined {\n  return useEnsuredContext().hostContext;\n}\n\n/** Current display mode reported by the host. */\nexport function useDisplayMode(): McpUiDisplayMode | undefined {\n  return useHostContext()?.displayMode;\n}\n\n/**\n * Request a display mode change, resolving to the mode the host actually\n * applied — which the spec allows to differ from the one asked for.\n *\n * Modes the host didn't list in `availableDisplayModes` are never requested\n * (the spec requires views to check first); the current mode comes back\n * unchanged instead.\n */\nexport function useRequestDisplayMode(): (\n  mode: McpUiDisplayMode,\n) => Promise<McpUiDisplayMode | undefined> {\n  const { app, hostContext } = useEnsuredContext();\n  return async (mode) => {\n    const available = hostContext?.availableDisplayModes;\n    if (available && !available.includes(mode)) return hostContext?.displayMode;\n    const result = await app.requestDisplayMode({ mode });\n    return result.mode;\n  };\n}\n\n/** Apply host CSS variables (and react to host-context changes). */\nexport function useHostStyleVariables(): void {\n  const { app, hostContext } = useEnsuredContext();\n  useHostStyleVariablesBase(app, hostContext ?? null);\n}\n\n/** Apply host-provided `@font-face`/`@import` rules. */\nexport function useHostFonts(): void {\n  const { app, hostContext } = useEnsuredContext();\n  useHostFontsBase(app, hostContext ?? null);\n}\n\n/** One-shot helper: apply both host style variables and host fonts. */\nexport function useHostStyles(): void {\n  const { app, hostContext } = useEnsuredContext();\n  useHostStylesBase(app, hostContext ?? null);\n}\n\n/** Track the document theme reactively. */\nexport function useDocumentTheme() {\n  return useDocumentThemeBase();\n}\n\n/**\n * Return a function that calls `app.updateModelContext(params)`.\n *\n * Context updates are available to the model in future turns without\n * triggering an immediate response. Only the last update is kept.\n */\nexport function useUpdateModelContext(): (\n  params: McpUiUpdateModelContextRequest[\"params\"],\n) => Promise<void> {\n  const { app } = useEnsuredContext();\n  return async (params) => {\n    await app.updateModelContext(params);\n  };\n}\n\n/**\n * Return a function that hands the user a file: through the host's\n * `ui/download-file` where it has one, else an ordinary `<a download>`.\n * Resolves `false` when the host declined or the user cancelled.\n */\nexport function useDownload(): (file: DownloadableFile) => Promise<boolean> {\n  const { app } = useEnsuredContext();\n  return (file) => downloadFile(app, file);\n}\n\n/** Manually control auto-resize (rarely needed — the bridge calls setupSizeChangedNotifications by default). */\nexport function useAutoResize(...args: Parameters<typeof useAutoResizeBase>) {\n  return useAutoResizeBase(...args);\n}\n","/**\n * Wraps a React component as an MCP Apps View and publishes it for the bridge.\n * One call is enough — no manual global assign.\n */\nimport { createElement, type ComponentType } from \"react\";\nimport { createWidget } from \"mountly-react\";\nimport type { AdapterOptions } from \"mountly/adapter\";\nimport type { McpView, McpViewProps } from \"../types.js\";\nimport { publishMcpView } from \"../publish.js\";\nimport { McpContext, type McpContextValue } from \"./context.js\";\n\nexport function createMcpView<P extends object>(\n  Component: ComponentType<P>,\n  options?: AdapterOptions,\n): McpView {\n  const Wrapped = (props: P & McpViewProps) => {\n    const { mcp, toolInput, toolInputPartial, toolResult, hostContext, ...rest } =\n      props as McpViewProps & P;\n    const value: McpContextValue = {\n      app: mcp,\n      toolInput,\n      toolInputPartial,\n      toolResult,\n      hostContext,\n    };\n    return createElement(\n      McpContext.Provider,\n      { value },\n      createElement(Component as ComponentType, rest as P),\n    );\n  };\n  return publishMcpView(createWidget(Wrapped as ComponentType<P & McpViewProps>, options));\n}\n"],"mappings":";;;;;;;;;;;AAAA,SAAS,kBAAkB;AAC3B;AAAA,EACE,iBAAiB;AAAA,EACjB,oBAAoB;AAAA,EACpB,gBAAgB;AAAA,EAChB,yBAAyB;AAAA,EACzB,iBAAiB;AAAA,OACZ;AAUP,SAAS,oBAAoB;AAC3B,QAAM,MAAM,WAAW,UAAU;AACjC,MAAI,CAAC,KAAK;AACR,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAGO,SAAS,YAAiB;AAC/B,SAAO,kBAAkB,EAAE;AAC7B;AAGO,SAAS,eAA2C;AACzD,SAAO,kBAAkB,EAAE;AAC7B;AASO,SAAS,sBAA2D;AACzE,SAAO,kBAAkB,EAAE;AAC7B;AAGO,SAAS,gBAA4C;AAC1D,SAAO,kBAAkB,EAAE;AAC7B;AAGO,SAAS,iBAA+C;AAC7D,SAAO,kBAAkB,EAAE;AAC7B;AAGO,SAAS,iBAA+C;AAC7D,SAAO,eAAe,GAAG;AAC3B;AAUO,SAAS,wBAE2B;AACzC,QAAM,EAAE,KAAK,YAAY,IAAI,kBAAkB;AAC/C,SAAO,OAAO,SAAS;AACrB,UAAM,YAAY,aAAa;AAC/B,QAAI,aAAa,CAAC,UAAU,SAAS,IAAI,EAAG,QAAO,aAAa;AAChE,UAAM,SAAS,MAAM,IAAI,mBAAmB,EAAE,KAAK,CAAC;AACpD,WAAO,OAAO;AAAA,EAChB;AACF;AAGO,SAAS,wBAA8B;AAC5C,QAAM,EAAE,KAAK,YAAY,IAAI,kBAAkB;AAC/C,4BAA0B,KAAK,eAAe,IAAI;AACpD;AAGO,SAAS,eAAqB;AACnC,QAAM,EAAE,KAAK,YAAY,IAAI,kBAAkB;AAC/C,mBAAiB,KAAK,eAAe,IAAI;AAC3C;AAGO,SAAS,gBAAsB;AACpC,QAAM,EAAE,KAAK,YAAY,IAAI,kBAAkB;AAC/C,oBAAkB,KAAK,eAAe,IAAI;AAC5C;AAGO,SAAS,mBAAmB;AACjC,SAAO,qBAAqB;AAC9B;AAQO,SAAS,wBAEG;AACjB,QAAM,EAAE,IAAI,IAAI,kBAAkB;AAClC,SAAO,OAAO,WAAW;AACvB,UAAM,IAAI,mBAAmB,MAAM;AAAA,EACrC;AACF;AAOO,SAAS,cAA4D;AAC1E,QAAM,EAAE,IAAI,IAAI,kBAAkB;AAClC,SAAO,CAAC,SAAS,aAAa,KAAK,IAAI;AACzC;AAGO,SAAS,iBAAiB,MAA4C;AAC3E,SAAO,kBAAkB,GAAG,IAAI;AAClC;;;AClIA,SAAS,qBAAyC;AAClD,SAAS,oBAAoB;AAMtB,SAAS,cACd,WACA,SACS;AACT,QAAM,UAAU,CAAC,UAA4B;AAC3C,UAAM,EAAE,KAAK,WAAW,kBAAkB,YAAY,aAAa,GAAG,KAAK,IACzE;AACF,UAAM,QAAyB;AAAA,MAC7B,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,MACL,WAAW;AAAA,MACX,EAAE,MAAM;AAAA,MACR,cAAc,WAA4B,IAAS;AAAA,IACrD;AAAA,EACF;AACA,SAAO,eAAe,aAAa,SAA4C,OAAO,CAAC;AACzF;","names":[]}

package/dist/{chunk-DKK26TRS.js → chunk-RLDSMU5M.js}

@@ -1,70 +1,14 @@
+import {
+  MCP_APP_MANIFEST_VERSION,
+  McpAppConformanceError,
+  object,
+  parseMcpResourceDeclaration
+} from "./chunk-6T5EIQGE.js";
+
 // src/artifact/index.ts
 import { readFile, writeFile } from "fs/promises";
 import { dirname, isAbsolute, relative, resolve } from "path";
-import {
-  McpUiDisplayModeSchema,
-  McpUiResourceMetaSchema,
-  RESOURCE_MIME_TYPE,
-  LATEST_PROTOCOL_VERSION
-} from "@modelcontextprotocol/ext-apps";
-var MCP_APP_MANIFEST_VERSION = 1;
-var MCP_APP_MANIFEST_FILE = "mountly-mcp.manifest.json";
-var McpAppConformanceError = class extends Error {
-  constructor(diagnostics) {
-    super(diagnostics.map((d) => `${d.code}: ${d.message}`).join("\n"));
-    this.name = "McpAppConformanceError";
-    this.diagnostics = diagnostics;
-  }
-};
-function object(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
-}
-function inspectMcpResourceDeclaration(value, source) {
-  const diagnostics = [];
-  const add = (code, message) => {
-    diagnostics.push({ severity: "error", code, message, source });
-  };
-  const candidate = object(value);
-  if (!candidate) {
-    add("artifact/not-object", "resource declaration must be an object");
-    return diagnostics;
-  }
-  if (candidate.protocolVersion !== LATEST_PROTOCOL_VERSION) {
-    add(
-      "artifact/protocol-version",
-      `sidecar protocolVersion must be '${LATEST_PROTOCOL_VERSION}' (received '${String(candidate.protocolVersion)}')`
-    );
-  }
-  if (typeof candidate.uri !== "string" || !candidate.uri.startsWith("ui://")) {
-    add("artifact/uri", `uri must use the 'ui://' scheme (received '${String(candidate.uri)}')`);
-  }
-  if (typeof candidate.name !== "string" || candidate.name.trim() === "") {
-    add("artifact/name", "name must be a non-empty string");
-  }
-  if (candidate.mimeType !== RESOURCE_MIME_TYPE) {
-    add(
-      "artifact/mime-type",
-      `sidecar mimeType must be '${RESOURCE_MIME_TYPE}' (received '${String(candidate.mimeType)}')`
-    );
-  }
-  if (typeof candidate.awaitToolResult !== "boolean") {
-    add("artifact/await-tool-result", "awaitToolResult must be a boolean");
-  }
-  if (!Array.isArray(candidate.displayModes) || candidate.displayModes.length === 0 || candidate.displayModes.some((mode) => !McpUiDisplayModeSchema.safeParse(mode).success)) {
-    add("artifact/display-modes", "displayModes must contain supported MCP Apps display modes");
-  }
-  const meta = object(candidate._meta);
-  const ui = meta && object(meta.ui);
-  if (!ui || !McpUiResourceMetaSchema.safeParse(ui).success) {
-    add("artifact/resource-meta", "_meta.ui must be valid MCP Apps resource metadata");
-  }
-  return diagnostics;
-}
-function parseMcpResourceDeclaration(value, source) {
-  const diagnostics = inspectMcpResourceDeclaration(value, source);
-  if (diagnostics.length > 0) throw new McpAppConformanceError(diagnostics);
-  return value;
-}
+import { LATEST_PROTOCOL_VERSION } from "@modelcontextprotocol/ext-apps";
 async function readMcpAppArtifact(htmlPath, expectedUri) {
   const absoluteHtmlPath = resolve(htmlPath);
   const metaPath = `${absoluteHtmlPath}.meta.json`;
@@ -187,13 +131,8 @@ async function readMcpAppManifest(path) {
 }
 
 export {
-  MCP_APP_MANIFEST_VERSION,
-  MCP_APP_MANIFEST_FILE,
-  McpAppConformanceError,
-  inspectMcpResourceDeclaration,
-  parseMcpResourceDeclaration,
   readMcpAppArtifact,
   writeMcpAppManifest,
   readMcpAppManifest
 };
-//# sourceMappingURL=chunk-DKK26TRS.js.map
+//# sourceMappingURL=chunk-RLDSMU5M.js.map

package/dist/chunk-RLDSMU5M.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/artifact/index.ts"],"sourcesContent":["import { readFile, writeFile } from \"node:fs/promises\";\nimport { dirname, isAbsolute, relative, resolve } from \"node:path\";\nimport { LATEST_PROTOCOL_VERSION } from \"@modelcontextprotocol/ext-apps\";\nimport {\n  MCP_APP_MANIFEST_VERSION,\n  McpAppConformanceError,\n  object,\n  parseMcpResourceDeclaration,\n  type McpAppArtifact,\n  type McpAppManifest,\n} from \"./declaration.js\";\n\nexport {\n  MCP_APP_MANIFEST_FILE,\n  MCP_APP_MANIFEST_VERSION,\n  McpAppConformanceError,\n  inspectMcpResourceDeclaration,\n  parseMcpAppSource,\n  parseMcpResourceDeclaration,\n  type ConformanceDiagnostic,\n  type ConformanceSeverity,\n  type McpAppArtifact,\n  type McpAppManifest,\n  type McpAppManifestEntry,\n  type McpAppSource,\n} from \"./declaration.js\";\n\nexport async function readMcpAppArtifact(\n  htmlPath: string,\n  expectedUri?: string,\n): Promise<McpAppArtifact> {\n  const absoluteHtmlPath = resolve(htmlPath);\n  const metaPath = `${absoluteHtmlPath}.meta.json`;\n  const [html, raw] = await Promise.all([\n    readFile(absoluteHtmlPath, \"utf8\"),\n    readFile(metaPath, \"utf8\"),\n  ]);\n  if (!/^\\s*<!doctype html>/i.test(html)) {\n    throw new McpAppConformanceError([\n      {\n        severity: \"error\",\n        code: \"artifact/html5\",\n        message: \"View HTML must start with an HTML5 doctype\",\n        source: absoluteHtmlPath,\n      },\n    ]);\n  }\n  let decoded: unknown;\n  try {\n    decoded = JSON.parse(raw);\n  } catch (error) {\n    throw new McpAppConformanceError([\n      {\n        severity: \"error\",\n        code: \"artifact/meta-json\",\n        message: `metadata is not valid JSON: ${error instanceof Error ? error.message : String(error)}`,\n        source: metaPath,\n      },\n    ]);\n  }\n  const declaration = parseMcpResourceDeclaration(decoded, metaPath);\n  if (expectedUri !== undefined && declaration.uri !== expectedUri) {\n    throw new McpAppConformanceError([\n      {\n        severity: \"error\",\n        code: \"artifact/uri-mismatch\",\n        message: `registration uri '${expectedUri}' does not match sidecar uri '${declaration.uri}'`,\n        source: metaPath,\n      },\n    ]);\n  }\n  return {\n    name: declaration.name,\n    uri: declaration.uri,\n    htmlPath: absoluteHtmlPath,\n    metaPath,\n    declaration,\n  };\n}\n\nfunction manifestPath(path: string, base: string): string {\n  return isAbsolute(path) ? path : resolve(base, path);\n}\n\nexport async function writeMcpAppManifest(\n  path: string,\n  artifacts: ReadonlyArray<McpAppArtifact>,\n): Promise<McpAppManifest> {\n  const absolutePath = resolve(path);\n  const base = dirname(absolutePath);\n  const names = new Set<string>();\n  const uris = new Set<string>();\n  for (const artifact of artifacts) {\n    if (names.has(artifact.name))\n      throw new Error(`mountly-mcp: duplicate app name '${artifact.name}'`);\n    if (uris.has(artifact.uri)) throw new Error(`mountly-mcp: duplicate app uri '${artifact.uri}'`);\n    names.add(artifact.name);\n    uris.add(artifact.uri);\n  }\n  const manifest: McpAppManifest = {\n    formatVersion: MCP_APP_MANIFEST_VERSION,\n    protocolVersion: LATEST_PROTOCOL_VERSION,\n    apps: artifacts.map((artifact) => ({\n      name: artifact.name,\n      uri: artifact.uri,\n      html: relative(base, artifact.htmlPath),\n      meta: relative(base, artifact.metaPath),\n      declaration: artifact.declaration,\n    })),\n  };\n  await writeFile(absolutePath, JSON.stringify(manifest, null, 2), \"utf8\");\n  return manifest;\n}\n\nexport async function readMcpAppManifest(path: string): Promise<{\n  path: string;\n  manifest: McpAppManifest;\n  artifacts: ReadonlyArray<McpAppArtifact>;\n}> {\n  const absolutePath = resolve(path);\n  const base = dirname(absolutePath);\n  let decoded: unknown;\n  try {\n    decoded = JSON.parse(await readFile(absolutePath, \"utf8\"));\n  } catch (error) {\n    throw new Error(\n      `mountly-mcp: could not read manifest '${absolutePath}': ${error instanceof Error ? error.message : String(error)}`,\n    );\n  }\n  const candidate = object(decoded);\n  if (\n    candidate?.formatVersion !== MCP_APP_MANIFEST_VERSION ||\n    candidate.protocolVersion !== LATEST_PROTOCOL_VERSION ||\n    !Array.isArray(candidate.apps)\n  ) {\n    throw new Error(\n      `mountly-mcp: '${absolutePath}' is not a supported mountly-mcp manifest (expected formatVersion ${MCP_APP_MANIFEST_VERSION})`,\n    );\n  }\n  const manifest = decoded as McpAppManifest;\n  const names = new Set<string>();\n  const uris = new Set<string>();\n  const artifacts: McpAppArtifact[] = [];\n  for (const entry of manifest.apps) {\n    if (names.has(entry.name)) throw new Error(`mountly-mcp: duplicate app name '${entry.name}'`);\n    if (uris.has(entry.uri)) throw new Error(`mountly-mcp: duplicate app uri '${entry.uri}'`);\n    names.add(entry.name);\n    uris.add(entry.uri);\n    const declaration = parseMcpResourceDeclaration(entry.declaration, absolutePath);\n    if (declaration.name !== entry.name || declaration.uri !== entry.uri) {\n      throw new Error(\n        `mountly-mcp: manifest identity does not match declaration for '${entry.name}'`,\n      );\n    }\n    artifacts.push({\n      name: entry.name,\n      uri: entry.uri,\n      htmlPath: manifestPath(entry.html, base),\n      metaPath: manifestPath(entry.meta, base),\n      declaration,\n    });\n  }\n  return { path: absolutePath, manifest, artifacts };\n}\n"],"mappings":";;;;;;;;AAAA,SAAS,UAAU,iBAAiB;AACpC,SAAS,SAAS,YAAY,UAAU,eAAe;AACvD,SAAS,+BAA+B;AAyBxC,eAAsB,mBACpB,UACA,aACyB;AACzB,QAAM,mBAAmB,QAAQ,QAAQ;AACzC,QAAM,WAAW,GAAG,gBAAgB;AACpC,QAAM,CAAC,MAAM,GAAG,IAAI,MAAM,QAAQ,IAAI;AAAA,IACpC,SAAS,kBAAkB,MAAM;AAAA,IACjC,SAAS,UAAU,MAAM;AAAA,EAC3B,CAAC;AACD,MAAI,CAAC,uBAAuB,KAAK,IAAI,GAAG;AACtC,UAAM,IAAI,uBAAuB;AAAA,MAC/B;AAAA,QACE,UAAU;AAAA,QACV,MAAM;AAAA,QACN,SAAS;AAAA,QACT,QAAQ;AAAA,MACV;AAAA,IACF,CAAC;AAAA,EACH;AACA,MAAI;AACJ,MAAI;AACF,cAAU,KAAK,MAAM,GAAG;AAAA,EAC1B,SAAS,OAAO;AACd,UAAM,IAAI,uBAAuB;AAAA,MAC/B;AAAA,QACE,UAAU;AAAA,QACV,MAAM;AAAA,QACN,SAAS,+BAA+B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,QAC9F,QAAQ;AAAA,MACV;AAAA,IACF,CAAC;AAAA,EACH;AACA,QAAM,cAAc,4BAA4B,SAAS,QAAQ;AACjE,MAAI,gBAAgB,UAAa,YAAY,QAAQ,aAAa;AAChE,UAAM,IAAI,uBAAuB;AAAA,MAC/B;AAAA,QACE,UAAU;AAAA,QACV,MAAM;AAAA,QACN,SAAS,qBAAqB,WAAW,iCAAiC,YAAY,GAAG;AAAA,QACzF,QAAQ;AAAA,MACV;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO;AAAA,IACL,MAAM,YAAY;AAAA,IAClB,KAAK,YAAY;AAAA,IACjB,UAAU;AAAA,IACV;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,aAAa,MAAc,MAAsB;AACxD,SAAO,WAAW,IAAI,IAAI,OAAO,QAAQ,MAAM,IAAI;AACrD;AAEA,eAAsB,oBACpB,MACA,WACyB;AACzB,QAAM,eAAe,QAAQ,IAAI;AACjC,QAAM,OAAO,QAAQ,YAAY;AACjC,QAAM,QAAQ,oBAAI,IAAY;AAC9B,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,YAAY,WAAW;AAChC,QAAI,MAAM,IAAI,SAAS,IAAI;AACzB,YAAM,IAAI,MAAM,oCAAoC,SAAS,IAAI,GAAG;AACtE,QAAI,KAAK,IAAI,SAAS,GAAG,EAAG,OAAM,IAAI,MAAM,mCAAmC,SAAS,GAAG,GAAG;AAC9F,UAAM,IAAI,SAAS,IAAI;AACvB,SAAK,IAAI,SAAS,GAAG;AAAA,EACvB;AACA,QAAM,WAA2B;AAAA,IAC/B,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,MAAM,UAAU,IAAI,CAAC,cAAc;AAAA,MACjC,MAAM,SAAS;AAAA,MACf,KAAK,SAAS;AAAA,MACd,MAAM,SAAS,MAAM,SAAS,QAAQ;AAAA,MACtC,MAAM,SAAS,MAAM,SAAS,QAAQ;AAAA,MACtC,aAAa,SAAS;AAAA,IACxB,EAAE;AAAA,EACJ;AACA,QAAM,UAAU,cAAc,KAAK,UAAU,UAAU,MAAM,CAAC,GAAG,MAAM;AACvE,SAAO;AACT;AAEA,eAAsB,mBAAmB,MAItC;AACD,QAAM,eAAe,QAAQ,IAAI;AACjC,QAAM,OAAO,QAAQ,YAAY;AACjC,MAAI;AACJ,MAAI;AACF,cAAU,KAAK,MAAM,MAAM,SAAS,cAAc,MAAM,CAAC;AAAA,EAC3D,SAAS,OAAO;AACd,UAAM,IAAI;AAAA,MACR,yCAAyC,YAAY,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,IACnH;AAAA,EACF;AACA,QAAM,YAAY,OAAO,OAAO;AAChC,MACE,WAAW,kBAAkB,4BAC7B,UAAU,oBAAoB,2BAC9B,CAAC,MAAM,QAAQ,UAAU,IAAI,GAC7B;AACA,UAAM,IAAI;AAAA,MACR,iBAAiB,YAAY,qEAAqE,wBAAwB;AAAA,IAC5H;AAAA,EACF;AACA,QAAM,WAAW;AACjB,QAAM,QAAQ,oBAAI,IAAY;AAC9B,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,YAA8B,CAAC;AACrC,aAAW,SAAS,SAAS,MAAM;AACjC,QAAI,MAAM,IAAI,MAAM,IAAI,EAAG,OAAM,IAAI,MAAM,oCAAoC,MAAM,IAAI,GAAG;AAC5F,QAAI,KAAK,IAAI,MAAM,GAAG,EAAG,OAAM,IAAI,MAAM,mCAAmC,MAAM,GAAG,GAAG;AACxF,UAAM,IAAI,MAAM,IAAI;AACpB,SAAK,IAAI,MAAM,GAAG;AAClB,UAAM,cAAc,4BAA4B,MAAM,aAAa,YAAY;AAC/E,QAAI,YAAY,SAAS,MAAM,QAAQ,YAAY,QAAQ,MAAM,KAAK;AACpE,YAAM,IAAI;AAAA,QACR,kEAAkE,MAAM,IAAI;AAAA,MAC9E;AAAA,IACF;AACA,cAAU,KAAK;AAAA,MACb,MAAM,MAAM;AAAA,MACZ,KAAK,MAAM;AAAA,MACX,UAAU,aAAa,MAAM,MAAM,IAAI;AAAA,MACvC,UAAU,aAAa,MAAM,MAAM,IAAI;AAAA,MACvC;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO,EAAE,MAAM,cAAc,UAAU,UAAU;AACnD;","names":[]}