skybridge 0.0.0-dev.d5d28ed → 0.0.0-dev.d5dcd8e

package/dist/server/auth/providers/authplane.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authplane.js","sourceRoot":"","sources":["../../../../src/server/auth/providers/authplane.ts"],"names":[],"mappings":"AACA,OAAO,EAA8B,cAAc,EAAE,MAAM,aAAa,CAAC;AAqCzE;;;;GAIG;AACH,SAAS,eAAe,CAAC,KAAa,EAAE,MAAc;IACpD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,wBAAwB,MAAM,mCAAmC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CACzF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,wBAAwB,MAAM,6CAA6C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CACnG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,wBAAwB,MAAM,+BAA+B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,wBAAwB,MAAM,uCAAuC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAC7F,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAA8B;IAE9B,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAErD,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClC,MAAM,cAAc,GAAG,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAE7D,0EAA0E;IAC1E,6EAA6E;IAC7E,8EAA8E;IAC9E,0EAA0E;IAC1E,gEAAgE;IAChE,IAAI,cAAc,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,mFAAmF;YACjF,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,qBAAqB,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI;YACvF,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,6GAA6G,CAC1J,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAAC;QACpB,MAAM;QACN,QAAQ,EAAE,QAAQ,IAAI,QAAQ;QAC9B,OAAO,EAAE,QAAQ;QACjB,GAAG,IAAI;KACR,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { OAuthConfig } from \"../index.js\";\nimport { type CustomProviderOptions, customProvider } from \"./custom.js\";\n\n/** Options accepted by {@link authplaneProvider}. */\nexport type AuthplaneProviderOptions = {\n  /**\n   * The authorization server's issuer identifier (RFC 8414 §2) — your\n   * Authplane deployment, e.g. `https://auth.acme.com` (or\n   * `http://localhost:9000` in local development).\n   */\n  issuer: string;\n  /**\n   * This server's resource identifier (RFC 9728 §1.2): the public URL clients\n   * reach, advertised as the `resource` field of its protected-resource\n   * metadata. Required, unlike the other providers.\n   *\n   * Authplane binds the access token's `aud` to the RFC 8707 `resource`\n   * parameter the client sends, and the client takes that value from the\n   * advertised metadata. Setting it explicitly gives the deployment one fixed\n   * identifier, which is what the audience is checked against.\n   *\n   * Resource identifiers are compared by exact string match, so give it in the\n   * form it will be advertised and register that same string in Authplane. RFC\n   * 8707 §2 asks for the most specific URI available, e.g.\n   * `https://acme.example.com/mcp`.\n   */\n  resource: string;\n  /**\n   * Expected token `aud`. Defaults to `resource`.\n   *\n   * RFC 8707 §2 lets an authorization server use the resource identifier\n   * verbatim as the audience or map it to another value; set this only for a\n   * resource configured in Authplane with such an override, and pass that\n   * value verbatim.\n   */\n  audience?: string;\n} & Omit<CustomProviderOptions, \"issuer\" | \"audience\" | \"baseUrl\">;\n\n/**\n * Rejects anything that cannot serve as an OAuth identifier: RFC 8707 §2\n * requires an absolute URI and forbids a fragment, and the discovery and\n * protected-resource metadata URLs are both built from the scheme and host.\n */\nfunction parseIdentifier(value: string, option: string): URL {\n  let parsed: URL;\n  try {\n    parsed = new URL(value);\n  } catch {\n    throw new Error(\n      `authplaneProvider: \\`${option}\\` must be an absolute URL, got ${JSON.stringify(value)}`,\n    );\n  }\n  if (parsed.protocol !== \"https:\" && parsed.protocol !== \"http:\") {\n    throw new Error(\n      `authplaneProvider: \\`${option}\\` must use the http or https scheme, got ${JSON.stringify(value)}`,\n    );\n  }\n  if (!parsed.host) {\n    throw new Error(\n      `authplaneProvider: \\`${option}\\` must include a host, got ${JSON.stringify(value)}`,\n    );\n  }\n  if (parsed.hash) {\n    throw new Error(\n      `authplaneProvider: \\`${option}\\` must not include a fragment, got ${JSON.stringify(value)}`,\n    );\n  }\n  return parsed;\n}\n\n/**\n * OAuth provider for Authplane. `issuer` is the authorization server's issuer\n * identifier and `resource` is this server's resource identifier, which also\n * supplies the expected token audience.\n *\n * Dynamic Client Registration is supported natively, so no registration proxy\n * is needed: clients register with Authplane directly and this server stays out\n * of the authorization path. Pass `serverUrl` to advertise this server as the\n * authorization server instead (see {@link customProvider}).\n */\nexport function authplaneProvider(\n  opts: AuthplaneProviderOptions,\n): Promise<OAuthConfig> {\n  const { issuer, resource, audience, ...rest } = opts;\n\n  parseIdentifier(issuer, \"issuer\");\n  const parsedResource = parseIdentifier(resource, \"resource\");\n\n  // The advertised resource is the URL-normalised form of this value. Where\n  // normalisation would change the string — a bare origin gaining a root path,\n  // an uppercase host, an explicit default port — the configured and advertised\n  // identifiers would differ, and the audience check compares them exactly.\n  // Require the advertised form up front so the two always match.\n  if (parsedResource.href !== resource) {\n    throw new Error(\n      `authplaneProvider: \\`resource\\` must be given in the form it will be advertised. ` +\n        `${JSON.stringify(resource)} is advertised as ${JSON.stringify(parsedResource.href)}. ` +\n        `Use ${JSON.stringify(parsedResource.href)}, or a path-qualified URL such as \"https://acme.example.com/mcp\", and register the same value in Authplane.`,\n    );\n  }\n\n  return customProvider({\n    issuer,\n    audience: audience ?? resource,\n    baseUrl: resource,\n    ...rest,\n  });\n}\n"]}

package/dist/server/auth/providers/authplane.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/server/auth/providers/authplane.test.js

@@ -1,138 +0,0 @@
-// @vitest-environment node
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { authplaneProvider } from "./authplane.js";
-afterEach(() => vi.restoreAllMocks());
-const ISSUER = "https://auth.acme.com";
-function discoveryDoc(issuer, scopes) {
-    return {
-        issuer,
-        authorization_endpoint: `${issuer}/authorize`,
-        token_endpoint: `${issuer}/token`,
-        registration_endpoint: `${issuer}/register`,
-        response_types_supported: ["code"],
-        scopes_supported: scopes,
-        jwks_uri: `${issuer}/.well-known/jwks.json`,
-    };
-}
-function mockDiscovery(docs) {
-    return vi
-        .spyOn(globalThis, "fetch")
-        .mockImplementation(async (input) => {
-        const url = String(input);
-        const entry = Object.entries(docs).find(([issuer]) => url === `${issuer}/.well-known/openid-configuration`);
-        if (entry === undefined) {
-            return new Response(null, { status: 404 });
-        }
-        return new Response(JSON.stringify(discoveryDoc(...entry)), {
-            headers: { "content-type": "application/json" },
-        });
-    });
-}
-describe("authplaneProvider", () => {
-    it("derives the audience from the resource the server advertises", async () => {
-        mockDiscovery({ [ISSUER]: ["checkout"] });
-        const config = await authplaneProvider({
-            issuer: ISSUER,
-            resource: "https://coffee.example.com/mcp",
-        });
-        expect(config.verify.audience).toBe("https://coffee.example.com/mcp");
-        expect(config.verify.issuer).toBe(ISSUER);
-        expect(config.verify.jwksUri).toBe(`${ISSUER}/.well-known/jwks.json`);
-        expect(config.baseUrl).toBe("https://coffee.example.com/mcp");
-    });
-    it.each([
-        "https://coffee.example.com/mcp",
-        "https://coffee.example.com/v2/mcp",
-        "https://coffee.example.com/",
-        "http://localhost:3000/mcp",
-        "https://coffee.example.com:8443/mcp",
-    ])("passes %s through as both resource and audience", async (resource) => {
-        mockDiscovery({ [ISSUER]: ["checkout"] });
-        const config = await authplaneProvider({ issuer: ISSUER, resource });
-        expect(config.baseUrl).toBe(resource);
-        expect(config.verify.audience).toBe(resource);
-    });
-    // The metadata router serialises the resource identifier through `URL` before
-    // advertising it. Anything that serialisation would rewrite is refused here,
-    // so the advertised identifier is always the configured one.
-    it.each([
-        // Pathless origin — gains a root path.
-        ["https://coffee.example.com", "https://coffee.example.com/"],
-        ["http://localhost:3000", "http://localhost:3000/"],
-        // Uppercase host — lowercased.
-        ["https://COFFEE.EXAMPLE.COM/mcp", "https://coffee.example.com/mcp"],
-        // Explicit default port — dropped.
-        ["https://coffee.example.com:443/mcp", "https://coffee.example.com/mcp"],
-    ])("rejects %s and names %s instead", async (resource, published) => {
-        const fetchSpy = mockDiscovery({ [ISSUER]: ["checkout"] });
-        expect(() => authplaneProvider({ issuer: ISSUER, resource })).toThrow(`is advertised as ${JSON.stringify(published)}`);
-        expect(fetchSpy).not.toHaveBeenCalled();
-    });
-    it("lets an explicit audience override the default", async () => {
-        mockDiscovery({ [ISSUER]: ["checkout"] });
-        const config = await authplaneProvider({
-            issuer: ISSUER,
-            resource: "https://coffee.example.com/mcp",
-            audience: "urn:acme:coffee",
-        });
-        expect(config.verify.audience).toBe("urn:acme:coffee");
-    });
-    it.each([
-        ["coffee.example.com/mcp", /must be an absolute URL/],
-        ["ftp://coffee.example.com/mcp", /must use the http or https scheme/],
-        ["https://coffee.example.com/mcp#frag", /must not include a fragment/],
-    ])("rejects the malformed resource %s", async (resource, message) => {
-        const fetchSpy = mockDiscovery({ [ISSUER]: ["checkout"] });
-        expect(() => authplaneProvider({ issuer: ISSUER, resource })).toThrow(message);
-        expect(fetchSpy).not.toHaveBeenCalled();
-    });
-    it("rejects a malformed issuer before any discovery", async () => {
-        const fetchSpy = mockDiscovery({ [ISSUER]: ["checkout"] });
-        expect(() => authplaneProvider({
-            issuer: "auth.acme.com",
-            resource: "https://coffee.example.com/mcp",
-        })).toThrow(/`issuer` must be an absolute URL/);
-        expect(fetchSpy).not.toHaveBeenCalled();
-    });
-    it("accepts an issuer carrying a trailing slash", async () => {
-        // Discovery resolves the issuer itself; the provider passes it through
-        // rather than rewriting the operator's value.
-        mockDiscovery({ [ISSUER]: ["checkout"] });
-        const config = await authplaneProvider({
-            issuer: `${ISSUER}/`,
-            resource: "https://coffee.example.com/mcp",
-        });
-        expect(config.verify.issuer).toBe(ISSUER);
-    });
-    it("accepts a local http issuer for development", async () => {
-        const local = "http://localhost:9000";
-        mockDiscovery({ [local]: ["checkout"] });
-        const config = await authplaneProvider({
-            issuer: local,
-            resource: "http://localhost:3000/mcp",
-        });
-        expect(config.verify.issuer).toBe(local);
-        expect(config.verify.audience).toBe("http://localhost:3000/mcp");
-    });
-    it("forwards scopes and the required-scope floor", async () => {
-        mockDiscovery({ [ISSUER]: ["checkout", "profile"] });
-        const config = await authplaneProvider({
-            issuer: ISSUER,
-            resource: "https://coffee.example.com/mcp",
-            scopes: ["checkout"],
-            requiredScopes: ["checkout"],
-        });
-        expect(config.scopesSupported).toEqual(["checkout"]);
-        expect(config.requiredScopes).toEqual(["checkout"]);
-    });
-    it("advertises the registration endpoint for dynamic client registration", async () => {
-        mockDiscovery({ [ISSUER]: ["checkout"] });
-        const config = await authplaneProvider({
-            issuer: ISSUER,
-            resource: "https://coffee.example.com/mcp",
-        });
-        expect(config.oauthMetadata.issuer).toBe(ISSUER);
-        expect(config.oauthMetadata.registration_endpoint).toBe(`${ISSUER}/register`);
-    });
-});
-//# sourceMappingURL=authplane.test.js.map

package/dist/server/auth/providers/authplane.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authplane.test.js","sourceRoot":"","sources":["../../../../src/server/auth/providers/authplane.test.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;AAEtC,MAAM,MAAM,GAAG,uBAAuB,CAAC;AAEvC,SAAS,YAAY,CAAC,MAAc,EAAE,MAAgB;IACpD,OAAO;QACL,MAAM;QACN,sBAAsB,EAAE,GAAG,MAAM,YAAY;QAC7C,cAAc,EAAE,GAAG,MAAM,QAAQ;QACjC,qBAAqB,EAAE,GAAG,MAAM,WAAW;QAC3C,wBAAwB,EAAE,CAAC,MAAM,CAAC;QAClC,gBAAgB,EAAE,MAAM;QACxB,QAAQ,EAAE,GAAG,MAAM,wBAAwB;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAA8B;IACnD,OAAO,EAAE;SACN,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC;SAC1B,kBAAkB,CAAC,KAAK,EAAE,KAAwB,EAAE,EAAE;QACrD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CACrC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,MAAM,mCAAmC,CACnE,CAAC;QACF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE;YAC1D,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC;AAED,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,gCAAgC;SAC3C,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,wBAAwB,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,gCAAgC;QAChC,mCAAmC;QACnC,6BAA6B;QAC7B,2BAA2B;QAC3B,qCAAqC;KACtC,CAAC,CAAC,iDAAiD,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;QACvE,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAErE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,6EAA6E;IAC7E,6DAA6D;IAC7D,EAAE,CAAC,IAAI,CAAC;QACN,uCAAuC;QACvC,CAAC,4BAA4B,EAAE,6BAA6B,CAAC;QAC7D,CAAC,uBAAuB,EAAE,wBAAwB,CAAC;QACnD,+BAA+B;QAC/B,CAAC,gCAAgC,EAAE,gCAAgC,CAAC;QACpE,mCAAmC;QACnC,CAAC,oCAAoC,EAAE,gCAAgC,CAAC;KACzE,CAAC,CAAC,iCAAiC,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE;QAClE,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAE3D,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CACnE,oBAAoB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAChD,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,gCAAgC;YAC1C,QAAQ,EAAE,iBAAiB;SAC5B,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,wBAAwB,EAAE,yBAAyB,CAAC;QACrD,CAAC,8BAA8B,EAAE,mCAAmC,CAAC;QACrE,CAAC,qCAAqC,EAAE,6BAA6B,CAAC;KACvE,CAAC,CAAC,mCAAmC,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QAClE,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAE3D,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CACnE,OAAO,CACR,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAE3D,MAAM,CAAC,GAAG,EAAE,CACV,iBAAiB,CAAC;YAChB,MAAM,EAAE,eAAe;YACvB,QAAQ,EAAE,gCAAgC;SAC3C,CAAC,CACH,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;QAC9C,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,uEAAuE;QACvE,8CAA8C;QAC9C,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,GAAG,MAAM,GAAG;YACpB,QAAQ,EAAE,gCAAgC;SAC3C,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,KAAK,GAAG,uBAAuB,CAAC;QACtC,aAAa,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAEzC,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,2BAA2B;SACtC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,gCAAgC;YAC1C,MAAM,EAAE,CAAC,UAAU,CAAC;YACpB,cAAc,EAAE,CAAC,UAAU,CAAC;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,gCAAgC;SAC3C,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC,IAAI,CACrD,GAAG,MAAM,WAAW,CACrB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["// @vitest-environment node\nimport { afterEach, describe, expect, it, vi } from \"vitest\";\nimport { authplaneProvider } from \"./authplane.js\";\n\nafterEach(() => vi.restoreAllMocks());\n\nconst ISSUER = \"https://auth.acme.com\";\n\nfunction discoveryDoc(issuer: string, scopes: string[]) {\n  return {\n    issuer,\n    authorization_endpoint: `${issuer}/authorize`,\n    token_endpoint: `${issuer}/token`,\n    registration_endpoint: `${issuer}/register`,\n    response_types_supported: [\"code\"],\n    scopes_supported: scopes,\n    jwks_uri: `${issuer}/.well-known/jwks.json`,\n  };\n}\n\nfunction mockDiscovery(docs: Record<string, string[]>) {\n  return vi\n    .spyOn(globalThis, \"fetch\")\n    .mockImplementation(async (input: RequestInfo | URL) => {\n      const url = String(input);\n      const entry = Object.entries(docs).find(\n        ([issuer]) => url === `${issuer}/.well-known/openid-configuration`,\n      );\n      if (entry === undefined) {\n        return new Response(null, { status: 404 });\n      }\n      return new Response(JSON.stringify(discoveryDoc(...entry)), {\n        headers: { \"content-type\": \"application/json\" },\n      });\n    });\n}\n\ndescribe(\"authplaneProvider\", () => {\n  it(\"derives the audience from the resource the server advertises\", async () => {\n    mockDiscovery({ [ISSUER]: [\"checkout\"] });\n\n    const config = await authplaneProvider({\n      issuer: ISSUER,\n      resource: \"https://coffee.example.com/mcp\",\n    });\n\n    expect(config.verify.audience).toBe(\"https://coffee.example.com/mcp\");\n    expect(config.verify.issuer).toBe(ISSUER);\n    expect(config.verify.jwksUri).toBe(`${ISSUER}/.well-known/jwks.json`);\n    expect(config.baseUrl).toBe(\"https://coffee.example.com/mcp\");\n  });\n\n  it.each([\n    \"https://coffee.example.com/mcp\",\n    \"https://coffee.example.com/v2/mcp\",\n    \"https://coffee.example.com/\",\n    \"http://localhost:3000/mcp\",\n    \"https://coffee.example.com:8443/mcp\",\n  ])(\"passes %s through as both resource and audience\", async (resource) => {\n    mockDiscovery({ [ISSUER]: [\"checkout\"] });\n\n    const config = await authplaneProvider({ issuer: ISSUER, resource });\n\n    expect(config.baseUrl).toBe(resource);\n    expect(config.verify.audience).toBe(resource);\n  });\n\n  // The metadata router serialises the resource identifier through `URL` before\n  // advertising it. Anything that serialisation would rewrite is refused here,\n  // so the advertised identifier is always the configured one.\n  it.each([\n    // Pathless origin — gains a root path.\n    [\"https://coffee.example.com\", \"https://coffee.example.com/\"],\n    [\"http://localhost:3000\", \"http://localhost:3000/\"],\n    // Uppercase host — lowercased.\n    [\"https://COFFEE.EXAMPLE.COM/mcp\", \"https://coffee.example.com/mcp\"],\n    // Explicit default port — dropped.\n    [\"https://coffee.example.com:443/mcp\", \"https://coffee.example.com/mcp\"],\n  ])(\"rejects %s and names %s instead\", async (resource, published) => {\n    const fetchSpy = mockDiscovery({ [ISSUER]: [\"checkout\"] });\n\n    expect(() => authplaneProvider({ issuer: ISSUER, resource })).toThrow(\n      `is advertised as ${JSON.stringify(published)}`,\n    );\n    expect(fetchSpy).not.toHaveBeenCalled();\n  });\n\n  it(\"lets an explicit audience override the default\", async () => {\n    mockDiscovery({ [ISSUER]: [\"checkout\"] });\n\n    const config = await authplaneProvider({\n      issuer: ISSUER,\n      resource: \"https://coffee.example.com/mcp\",\n      audience: \"urn:acme:coffee\",\n    });\n\n    expect(config.verify.audience).toBe(\"urn:acme:coffee\");\n  });\n\n  it.each([\n    [\"coffee.example.com/mcp\", /must be an absolute URL/],\n    [\"ftp://coffee.example.com/mcp\", /must use the http or https scheme/],\n    [\"https://coffee.example.com/mcp#frag\", /must not include a fragment/],\n  ])(\"rejects the malformed resource %s\", async (resource, message) => {\n    const fetchSpy = mockDiscovery({ [ISSUER]: [\"checkout\"] });\n\n    expect(() => authplaneProvider({ issuer: ISSUER, resource })).toThrow(\n      message,\n    );\n    expect(fetchSpy).not.toHaveBeenCalled();\n  });\n\n  it(\"rejects a malformed issuer before any discovery\", async () => {\n    const fetchSpy = mockDiscovery({ [ISSUER]: [\"checkout\"] });\n\n    expect(() =>\n      authplaneProvider({\n        issuer: \"auth.acme.com\",\n        resource: \"https://coffee.example.com/mcp\",\n      }),\n    ).toThrow(/`issuer` must be an absolute URL/);\n    expect(fetchSpy).not.toHaveBeenCalled();\n  });\n\n  it(\"accepts an issuer carrying a trailing slash\", async () => {\n    // Discovery resolves the issuer itself; the provider passes it through\n    // rather than rewriting the operator's value.\n    mockDiscovery({ [ISSUER]: [\"checkout\"] });\n\n    const config = await authplaneProvider({\n      issuer: `${ISSUER}/`,\n      resource: \"https://coffee.example.com/mcp\",\n    });\n\n    expect(config.verify.issuer).toBe(ISSUER);\n  });\n\n  it(\"accepts a local http issuer for development\", async () => {\n    const local = \"http://localhost:9000\";\n    mockDiscovery({ [local]: [\"checkout\"] });\n\n    const config = await authplaneProvider({\n      issuer: local,\n      resource: \"http://localhost:3000/mcp\",\n    });\n\n    expect(config.verify.issuer).toBe(local);\n    expect(config.verify.audience).toBe(\"http://localhost:3000/mcp\");\n  });\n\n  it(\"forwards scopes and the required-scope floor\", async () => {\n    mockDiscovery({ [ISSUER]: [\"checkout\", \"profile\"] });\n\n    const config = await authplaneProvider({\n      issuer: ISSUER,\n      resource: \"https://coffee.example.com/mcp\",\n      scopes: [\"checkout\"],\n      requiredScopes: [\"checkout\"],\n    });\n\n    expect(config.scopesSupported).toEqual([\"checkout\"]);\n    expect(config.requiredScopes).toEqual([\"checkout\"]);\n  });\n\n  it(\"advertises the registration endpoint for dynamic client registration\", async () => {\n    mockDiscovery({ [ISSUER]: [\"checkout\"] });\n\n    const config = await authplaneProvider({\n      issuer: ISSUER,\n      resource: \"https://coffee.example.com/mcp\",\n    });\n\n    expect(config.oauthMetadata.issuer).toBe(ISSUER);\n    expect(config.oauthMetadata.registration_endpoint).toBe(\n      `${ISSUER}/register`,\n    );\n  });\n});\n"]}

package/dist/web/hooks/use-host-info.d.ts

@@ -1,22 +0,0 @@
-/**
- * Known host applications, as normalized slugs. Unrecognized hosts surface
- * their raw `hostInfo.name` string instead.
- */
-export type Host = "chatgpt" | "claude" | "cursor" | "goose" | "mistral-vibe" | "alpic";
-export type HostInfo = {
-    name: Host | (string & {}) | undefined;
-    version: string | undefined;
-};
-/**
- * Identity of the host application rendering the view, from the MCP Apps
- * `ui/initialize` handshake. `name` is normalized to a {@link Host} slug when
- * recognized, otherwise the raw string; both fields are `undefined` until the
- * handshake resolves (the view renders first and re-renders once it lands).
- *
- * @example
- * ```tsx
- * const { name } = useHostInfo();
- * if (name === "claude") return <ClaudeLayout />;
- * ```
- */
-export declare function useHostInfo(): HostInfo;

package/dist/web/hooks/use-host-info.js

@@ -1,30 +0,0 @@
-import { useMcpAppContext } from "../bridges/index.js";
-const HOST_BY_REPORTED_NAME = {
-    chatgpt: "chatgpt",
-    Claude: "claude",
-    Cursor: "cursor",
-    "MCP-UI Host": "goose",
-    "Le Chat": "mistral-vibe",
-    "alpic-playground": "alpic",
-};
-/**
- * Identity of the host application rendering the view, from the MCP Apps
- * `ui/initialize` handshake. `name` is normalized to a {@link Host} slug when
- * recognized, otherwise the raw string; both fields are `undefined` until the
- * handshake resolves (the view renders first and re-renders once it lands).
- *
- * @example
- * ```tsx
- * const { name } = useHostInfo();
- * if (name === "claude") return <ClaudeLayout />;
- * ```
- */
-export function useHostInfo() {
-    const hostInfo = useMcpAppContext("hostInfo");
-    const name = hostInfo?.name;
-    return {
-        name: name !== undefined ? (HOST_BY_REPORTED_NAME[name] ?? name) : undefined,
-        version: hostInfo?.version,
-    };
-}
-//# sourceMappingURL=use-host-info.js.map

package/dist/web/hooks/use-host-info.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"use-host-info.js","sourceRoot":"","sources":["../../../src/web/hooks/use-host-info.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAcvD,MAAM,qBAAqB,GAAyB;IAClD,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,aAAa,EAAE,OAAO;IACtB,SAAS,EAAE,cAAc;IACzB,kBAAkB,EAAE,OAAO;CAC5B,CAAC;AAOF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,CAAC;IAE5B,OAAO;QACL,IAAI,EACF,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;QACxE,OAAO,EAAE,QAAQ,EAAE,OAAO;KAC3B,CAAC;AACJ,CAAC","sourcesContent":["import { useMcpAppContext } from \"../bridges/index.js\";\n\n/**\n * Known host applications, as normalized slugs. Unrecognized hosts surface\n * their raw `hostInfo.name` string instead.\n */\nexport type Host =\n  | \"chatgpt\"\n  | \"claude\"\n  | \"cursor\"\n  | \"goose\"\n  | \"mistral-vibe\"\n  | \"alpic\";\n\nconst HOST_BY_REPORTED_NAME: Record<string, Host> = {\n  chatgpt: \"chatgpt\",\n  Claude: \"claude\",\n  Cursor: \"cursor\",\n  \"MCP-UI Host\": \"goose\",\n  \"Le Chat\": \"mistral-vibe\",\n  \"alpic-playground\": \"alpic\",\n};\n\nexport type HostInfo = {\n  name: Host | (string & {}) | undefined;\n  version: string | undefined;\n};\n\n/**\n * Identity of the host application rendering the view, from the MCP Apps\n * `ui/initialize` handshake. `name` is normalized to a {@link Host} slug when\n * recognized, otherwise the raw string; both fields are `undefined` until the\n * handshake resolves (the view renders first and re-renders once it lands).\n *\n * @example\n * ```tsx\n * const { name } = useHostInfo();\n * if (name === \"claude\") return <ClaudeLayout />;\n * ```\n */\nexport function useHostInfo(): HostInfo {\n  const hostInfo = useMcpAppContext(\"hostInfo\");\n  const name = hostInfo?.name;\n\n  return {\n    name:\n      name !== undefined ? (HOST_BY_REPORTED_NAME[name] ?? name) : undefined,\n    version: hostInfo?.version,\n  };\n}\n"]}

package/dist/web/hooks/use-host-info.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/web/hooks/use-host-info.test.js

@@ -1,59 +0,0 @@
-import { renderHook, waitFor } from "@testing-library/react";
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { HostAdaptor } from "../bridges/adaptor.js";
-import { McpAppBridge } from "../bridges/mcp-app/bridge.js";
-import { getMcpAppHostPostMessageMock, MockResizeObserver, } from "./test/utils.js";
-import { useHostInfo } from "./use-host-info.js";
-const stubHost = (hostInfo) => {
-    vi.stubGlobal("parent", {
-        postMessage: getMcpAppHostPostMessageMock({}, { hostInfo }),
-    });
-};
-describe("useHostInfo", () => {
-    beforeEach(() => {
-        HostAdaptor.resetInstance();
-        McpAppBridge.resetInstance();
-        vi.stubGlobal("openai", undefined);
-        vi.stubGlobal("skybridge", { hostType: "mcp-app" });
-        vi.stubGlobal("ResizeObserver", MockResizeObserver);
-    });
-    afterEach(() => {
-        vi.unstubAllGlobals();
-        vi.resetAllMocks();
-        McpAppBridge.resetInstance();
-        HostAdaptor.resetInstance();
-    });
-    it("is undefined before the handshake resolves, then populated after", async () => {
-        stubHost({ name: "Claude", version: "1.2.3" });
-        const { result } = renderHook(() => useHostInfo());
-        expect(result.current.name).toBeUndefined();
-        expect(result.current.version).toBeUndefined();
-        await waitFor(() => {
-            expect(result.current.name).toBe("claude");
-            expect(result.current.version).toBe("1.2.3");
-        });
-    });
-    it.each([
-        ["chatgpt", "chatgpt"],
-        ["Claude", "claude"],
-        ["Cursor", "cursor"],
-        ["MCP-UI Host", "goose"],
-        ["Le Chat", "mistral-vibe"],
-        ["alpic-playground", "alpic"],
-    ])("normalizes reported name %j to slug %j", async (reported, slug) => {
-        stubHost({ name: reported, version: "1.0.0" });
-        const { result } = renderHook(() => useHostInfo());
-        await waitFor(() => {
-            expect(result.current.name).toBe(slug);
-        });
-    });
-    it("preserves an unrecognized reported name as-is", async () => {
-        stubHost({ name: "Some Future Host", version: "9.9.9" });
-        const { result } = renderHook(() => useHostInfo());
-        await waitFor(() => {
-            expect(result.current.name).toBe("Some Future Host");
-            expect(result.current.version).toBe("9.9.9");
-        });
-    });
-});
-//# sourceMappingURL=use-host-info.test.js.map

package/dist/web/hooks/use-host-info.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"use-host-info.test.js","sourceRoot":"","sources":["../../../src/web/hooks/use-host-info.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EACL,4BAA4B,EAC5B,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAa,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,QAAQ,GAAG,CAAC,QAA4C,EAAE,EAAE;IAChE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE;QACtB,WAAW,EAAE,4BAA4B,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;KAC5D,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,UAAU,CAAC,GAAG,EAAE;QACd,WAAW,CAAC,aAAa,EAAE,CAAC;QAC5B,YAAY,CAAC,aAAa,EAAE,CAAC;QAC7B,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACnC,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;QACpD,EAAE,CAAC,UAAU,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACtB,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,YAAY,CAAC,aAAa,EAAE,CAAC;QAC7B,WAAW,CAAC,aAAa,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/C,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAEnD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QAE/C,MAAM,OAAO,CAAC,GAAG,EAAE;YACjB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAiB;QACtB,CAAC,SAAS,EAAE,SAAS,CAAC;QACtB,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACpB,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACpB,CAAC,aAAa,EAAE,OAAO,CAAC;QACxB,CAAC,SAAS,EAAE,cAAc,CAAC;QAC3B,CAAC,kBAAkB,EAAE,OAAO,CAAC;KAC9B,CAAC,CAAC,wCAAwC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QACpE,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/C,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAEnD,MAAM,OAAO,CAAC,GAAG,EAAE;YACjB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,QAAQ,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACzD,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAEnD,MAAM,OAAO,CAAC,GAAG,EAAE;YACjB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACrD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { renderHook, waitFor } from \"@testing-library/react\";\nimport { afterEach, beforeEach, describe, expect, it, vi } from \"vitest\";\nimport { HostAdaptor } from \"../bridges/adaptor.js\";\nimport { McpAppBridge } from \"../bridges/mcp-app/bridge.js\";\nimport {\n  getMcpAppHostPostMessageMock,\n  MockResizeObserver,\n} from \"./test/utils.js\";\nimport { type Host, useHostInfo } from \"./use-host-info.js\";\n\nconst stubHost = (hostInfo?: { name: string; version: string }) => {\n  vi.stubGlobal(\"parent\", {\n    postMessage: getMcpAppHostPostMessageMock({}, { hostInfo }),\n  });\n};\n\ndescribe(\"useHostInfo\", () => {\n  beforeEach(() => {\n    HostAdaptor.resetInstance();\n    McpAppBridge.resetInstance();\n    vi.stubGlobal(\"openai\", undefined);\n    vi.stubGlobal(\"skybridge\", { hostType: \"mcp-app\" });\n    vi.stubGlobal(\"ResizeObserver\", MockResizeObserver);\n  });\n\n  afterEach(() => {\n    vi.unstubAllGlobals();\n    vi.resetAllMocks();\n    McpAppBridge.resetInstance();\n    HostAdaptor.resetInstance();\n  });\n\n  it(\"is undefined before the handshake resolves, then populated after\", async () => {\n    stubHost({ name: \"Claude\", version: \"1.2.3\" });\n    const { result } = renderHook(() => useHostInfo());\n\n    expect(result.current.name).toBeUndefined();\n    expect(result.current.version).toBeUndefined();\n\n    await waitFor(() => {\n      expect(result.current.name).toBe(\"claude\");\n      expect(result.current.version).toBe(\"1.2.3\");\n    });\n  });\n\n  it.each<[string, Host]>([\n    [\"chatgpt\", \"chatgpt\"],\n    [\"Claude\", \"claude\"],\n    [\"Cursor\", \"cursor\"],\n    [\"MCP-UI Host\", \"goose\"],\n    [\"Le Chat\", \"mistral-vibe\"],\n    [\"alpic-playground\", \"alpic\"],\n  ])(\"normalizes reported name %j to slug %j\", async (reported, slug) => {\n    stubHost({ name: reported, version: \"1.0.0\" });\n    const { result } = renderHook(() => useHostInfo());\n\n    await waitFor(() => {\n      expect(result.current.name).toBe(slug);\n    });\n  });\n\n  it(\"preserves an unrecognized reported name as-is\", async () => {\n    stubHost({ name: \"Some Future Host\", version: \"9.9.9\" });\n    const { result } = renderHook(() => useHostInfo());\n\n    await waitFor(() => {\n      expect(result.current.name).toBe(\"Some Future Host\");\n      expect(result.current.version).toBe(\"9.9.9\");\n    });\n  });\n});\n"]}