skybridge 0.0.0-dev.da7ba17 → 0.0.0-dev.dafb590

package/dist/web/hooks/use-view-state.test.js

@@ -1,7 +1,6 @@
 import { act, renderHook, waitFor } from "@testing-library/react";
 import { afterEach, beforeEach, describe, expect, it, vi, } from "vitest";
-import { HostAdaptor } from "../bridges/adaptor.js";
-import { McpAppBridge } from "../bridges/mcp-app/index.js";
+import { McpAppAdaptor, McpAppBridge } from "../bridges/mcp-app/index.js";
 import { fireToolResultNotification, getMcpAppHostPostMessageMock, MockResizeObserver, } from "./test/utils.js";
 import { useViewState } from "./use-view-state.js";
 describe("useViewState", () => {
@@ -17,8 +16,6 @@ describe("useViewState", () => {
     afterEach(() => {
         vi.unstubAllGlobals();
         vi.resetAllMocks();
-        HostAdaptor.resetInstance();
-        McpAppBridge.resetInstance();
     });
     const defaultState = { count: 0, name: "test" };
     const windowState = { count: 5, name: "window" };
@@ -70,15 +67,14 @@ describe("useViewState (mcp-app host — localStorage persistence)", () => {
     beforeEach(() => {
         vi.stubGlobal("parent", { postMessage: getMcpAppHostPostMessageMock() });
         vi.stubGlobal("skybridge", { hostType: "mcp-app" });
-        vi.stubGlobal("openai", undefined);
         vi.stubGlobal("ResizeObserver", MockResizeObserver);
         localStorage.clear();
     });
     afterEach(() => {
         vi.unstubAllGlobals();
         vi.resetAllMocks();
-        HostAdaptor.resetInstance();
         McpAppBridge.resetInstance();
+        McpAppAdaptor.resetInstance();
         localStorage.clear();
     });
     it("should persist state to localStorage when viewUUID is available", async () => {

package/dist/web/hooks/use-view-state.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"use-view-state.test.js","sourceRoot":"","sources":["../../../src/web/hooks/use-view-state.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EACL,SAAS,EACT,UAAU,EACV,QAAQ,EACR,MAAM,EACN,EAAE,EAEF,EAAE,GACH,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAI,UAA0D,CAAC;IAE/D,UAAU,CAAC,GAAG,EAAE;QACd,UAAU,GAAG;YACX,WAAW,EAAE,IAAI;YACjB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;SACrD,CAAC;QACF,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACpC,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACtB,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,WAAW,CAAC,aAAa,EAAE,CAAC;QAC5B,YAAY,CAAC,aAAa,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAChD,MAAM,WAAW,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAEjD,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC;QAC9B,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;QAEhE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,UAAU,CAAC,WAAW,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;QACvD,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;QAEhE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAEhD,GAAG,CAAC,GAAG,EAAE;YACP,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC;YACrD,YAAY,EAAE,QAAQ;YACtB,cAAc,EAAE,EAAE;SACnB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8FAA8F,EAAE,KAAK,IAAI,EAAE;QAC5G,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;QAEhE,GAAG,CAAC,GAAG,EAAE;YACP,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC;YACrD,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE;YACxC,cAAc,EAAE,EAAE;SACnB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,UAAU,CAAC,WAAW,GAAG,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;QACxD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;QAE1E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAEhD,8CAA8C;QAC9C,UAAU,CAAC,WAAW,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;QACvD,sDAAsD;QACtD,QAAQ,EAAE,CAAC;QAEX,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wDAAwD,EAAE,GAAG,EAAE;IACtE,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,4BAA4B,EAAE,EAAE,CAAC,CAAC;QACzE,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;QACpD,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACnC,EAAE,CAAC,UAAU,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QACpD,YAAY,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACtB,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,WAAW,CAAC,aAAa,EAAE,CAAC;QAC5B,YAAY,CAAC,aAAa,EAAE,CAAC;QAC7B,YAAY,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,QAAQ,GAAG,eAAe,CAAC;QACjC,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAE1E,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACnB,0BAA0B,CAAC;gBACzB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;gBAC3C,iBAAiB,EAAE,EAAE;gBACrB,KAAK,EAAE,EAAE,QAAQ,EAAE;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,GAAG,EAAE;YACP,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,QAAQ,GAAG,eAAe,CAAC;QACjC,qDAAqD;QACrD,YAAY,CAAC,OAAO,CAClB,oBAAoB,QAAQ,EAAE,EAC9B,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CACvC,CAAC;QAEF,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAE1E,GAAG,CAAC,GAAG,EAAE;YACP,0BAA0B,CAAC;gBACzB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;gBAC3C,iBAAiB,EAAE,EAAE;gBACrB,KAAK,EAAE,EAAE,QAAQ,EAAE;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,GAAG,EAAE;YACjB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAE/D,GAAG,CAAC,GAAG,EAAE;YACP,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/C,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,QAAQ,GAAG,mBAAmB,CAAC;QACrC,YAAY,CAAC,OAAO,CAAC,oBAAoB,QAAQ,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAE1E,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAE/D,GAAG,CAAC,GAAG,EAAE;YACP,0BAA0B,CAAC;gBACzB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;gBAC3C,iBAAiB,EAAE,EAAE;gBACrB,KAAK,EAAE,EAAE,QAAQ,EAAE;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,GAAG,EAAE;YACjB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,QAAQ,GAAG,eAAe,CAAC;QACjC,MAAM,MAAM,GAAG,oBAAoB,QAAQ,EAAE,CAAC;QAC9C,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAE1D,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAE/D,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACnB,0BAA0B,CAAC;gBACzB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;gBAC3C,iBAAiB,EAAE,EAAE;gBACrB,KAAK,EAAE,EAAE,QAAQ,EAAE;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,GAAG,EAAE;YACP,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,gEAAgE;QAChE,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChD,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,+CAA+C;QAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,YAAY,CAAC,OAAO,CAClB,MAAM,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EACxE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CACtB,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEtC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;QACtC,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAE/D,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACnB,0BAA0B,CAAC;gBACzB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;gBAC3C,iBAAiB,EAAE,EAAE;gBACrB,KAAK,EAAE,EAAE,QAAQ,EAAE;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,GAAG,EAAE;YACP,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,sDAAsD;QACtD,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { act, renderHook, waitFor } from \"@testing-library/react\";\nimport {\n  afterEach,\n  beforeEach,\n  describe,\n  expect,\n  it,\n  type Mock,\n  vi,\n} from \"vitest\";\nimport { HostAdaptor } from \"../bridges/adaptor.js\";\nimport { McpAppBridge } from \"../bridges/mcp-app/index.js\";\nimport {\n  fireToolResultNotification,\n  getMcpAppHostPostMessageMock,\n  MockResizeObserver,\n} from \"./test/utils.js\";\nimport { useViewState } from \"./use-view-state.js\";\n\ndescribe(\"useViewState\", () => {\n  let OpenaiMock: { widgetState: unknown; setWidgetState: Mock };\n\n  beforeEach(() => {\n    OpenaiMock = {\n      widgetState: null,\n      setWidgetState: vi.fn().mockResolvedValue(undefined),\n    };\n    vi.stubGlobal(\"openai\", OpenaiMock);\n    vi.stubGlobal(\"skybridge\", { hostType: \"apps-sdk\" });\n  });\n\n  afterEach(() => {\n    vi.unstubAllGlobals();\n    vi.resetAllMocks();\n    HostAdaptor.resetInstance();\n    McpAppBridge.resetInstance();\n  });\n\n  const defaultState = { count: 0, name: \"test\" };\n  const windowState = { count: 5, name: \"window\" };\n\n  it(\"should initialize with default state when window.openai.widgetState is null\", () => {\n    OpenaiMock.widgetState = null;\n    const { result } = renderHook(() => useViewState(defaultState));\n\n    expect(result.current[0]).toEqual(defaultState);\n  });\n\n  it(\"should initialize with window.openai.widgetState when available\", () => {\n    OpenaiMock.widgetState = { modelContent: windowState };\n    const { result } = renderHook(() => useViewState(defaultState));\n\n    expect(result.current[0]).toEqual(windowState);\n  });\n\n  it(\"should call window.openai.setWidgetState when setViewState is called with a new state\", async () => {\n    const { result } = renderHook(() => useViewState(defaultState));\n    const newState = { count: 10, name: \"updated\" };\n\n    act(() => {\n      result.current[1](newState);\n    });\n\n    expect(OpenaiMock.setWidgetState).toHaveBeenCalledWith({\n      modelContent: newState,\n      privateContent: {},\n    });\n    expect(result.current[0]).toEqual(newState);\n  });\n\n  it(\"should call window.openai.setWidgetState when setViewState is called with a function updater\", async () => {\n    const { result } = renderHook(() => useViewState(defaultState));\n\n    act(() => {\n      result.current[1]((prev) => ({ ...prev, count: prev.count + 1 }));\n    });\n\n    expect(OpenaiMock.setWidgetState).toHaveBeenCalledWith({\n      modelContent: { count: 1, name: \"test\" },\n      privateContent: {},\n    });\n    expect(result.current[0]).toEqual({ count: 1, name: \"test\" });\n  });\n\n  it(\"should update state when window.openai.widgetState changes\", () => {\n    OpenaiMock.widgetState = { modelContent: defaultState };\n    const { result, rerender } = renderHook(() => useViewState(defaultState));\n\n    expect(result.current[0]).toEqual(defaultState);\n\n    // Simulate window.openai.widgetState changing\n    OpenaiMock.widgetState = { modelContent: windowState };\n    // Trigger re-render to simulate the useEffect running\n    rerender();\n\n    expect(result.current[0]).toEqual(windowState);\n  });\n});\n\ndescribe(\"useViewState (mcp-app host — localStorage persistence)\", () => {\n  beforeEach(() => {\n    vi.stubGlobal(\"parent\", { postMessage: getMcpAppHostPostMessageMock() });\n    vi.stubGlobal(\"skybridge\", { hostType: \"mcp-app\" });\n    vi.stubGlobal(\"openai\", undefined);\n    vi.stubGlobal(\"ResizeObserver\", MockResizeObserver);\n    localStorage.clear();\n  });\n\n  afterEach(() => {\n    vi.unstubAllGlobals();\n    vi.resetAllMocks();\n    HostAdaptor.resetInstance();\n    McpAppBridge.resetInstance();\n    localStorage.clear();\n  });\n\n  it(\"should persist state to localStorage when viewUUID is available\", async () => {\n    const viewUUID = \"test-uuid-123\";\n    const { result } = renderHook(() => useViewState({ page: 1, zoom: 100 }));\n\n    await act(async () => {\n      fireToolResultNotification({\n        content: [{ type: \"text\", text: \"result\" }],\n        structuredContent: {},\n        _meta: { viewUUID },\n      });\n    });\n\n    act(() => {\n      result.current[1]({ page: 3, zoom: 150 });\n    });\n\n    expect(result.current[0]).toEqual({ page: 3, zoom: 150 });\n    expect(localStorage.length).toBe(1);\n  });\n\n  it(\"should restore state from localStorage when viewUUID arrives\", async () => {\n    const viewUUID = \"test-uuid-456\";\n    // Pre-seed with the sb:{timestamp}:{viewUUID} format\n    localStorage.setItem(\n      `sb:1700000000000:${viewUUID}`,\n      JSON.stringify({ page: 5, zoom: 200 }),\n    );\n\n    const { result } = renderHook(() => useViewState({ page: 1, zoom: 100 }));\n\n    act(() => {\n      fireToolResultNotification({\n        content: [{ type: \"text\", text: \"result\" }],\n        structuredContent: {},\n        _meta: { viewUUID },\n      });\n    });\n\n    await waitFor(() => {\n      expect(result.current[0]).toEqual({ page: 5, zoom: 200 });\n    });\n  });\n\n  it(\"should not persist when no viewUUID is available\", () => {\n    const { result } = renderHook(() => useViewState({ page: 1 }));\n\n    act(() => {\n      result.current[1]({ page: 2 });\n    });\n\n    expect(result.current[0]).toEqual({ page: 2 });\n    expect(localStorage.length).toBe(0);\n  });\n\n  it(\"should handle corrupted localStorage data gracefully\", async () => {\n    const viewUUID = \"test-uuid-corrupt\";\n    localStorage.setItem(`sb:1700000000000:${viewUUID}`, \"not valid json{{{\");\n\n    const { result } = renderHook(() => useViewState({ page: 1 }));\n\n    act(() => {\n      fireToolResultNotification({\n        content: [{ type: \"text\", text: \"result\" }],\n        structuredContent: {},\n        _meta: { viewUUID },\n      });\n    });\n\n    await waitFor(() => {\n      expect(result.current[0]).toEqual({ page: 1 });\n    });\n  });\n\n  it(\"should refresh localStorage timestamp on each persist (LRU)\", async () => {\n    const viewUUID = \"lru-test-uuid\";\n    const oldKey = `sb:1000000000000:${viewUUID}`;\n    localStorage.setItem(oldKey, JSON.stringify({ page: 1 }));\n\n    const { result } = renderHook(() => useViewState({ page: 1 }));\n\n    await act(async () => {\n      fireToolResultNotification({\n        content: [{ type: \"text\", text: \"result\" }],\n        structuredContent: {},\n        _meta: { viewUUID },\n      });\n    });\n\n    act(() => {\n      result.current[1]({ page: 2 });\n    });\n\n    // Old key removed, replaced with a new one (still just 1 entry)\n    expect(localStorage.getItem(oldKey)).toBeNull();\n    expect(localStorage.length).toBe(1);\n  });\n\n  it(\"should evict oldest entries when exceeding max storage entries\", async () => {\n    // Fill localStorage with 200 entries (the max)\n    for (let i = 0; i < 200; i++) {\n      localStorage.setItem(\n        `sb:${String(1000000000000 + i)}:old-uuid-${String(i).padStart(4, \"0\")}`,\n        JSON.stringify({ i }),\n      );\n    }\n    expect(localStorage.length).toBe(200);\n\n    const viewUUID = \"eviction-test-uuid\";\n    const { result } = renderHook(() => useViewState({ page: 1 }));\n\n    await act(async () => {\n      fireToolResultNotification({\n        content: [{ type: \"text\", text: \"result\" }],\n        structuredContent: {},\n        _meta: { viewUUID },\n      });\n    });\n\n    act(() => {\n      result.current[1]({ page: 99 });\n    });\n\n    // Should have evicted the oldest entry to stay at 200\n    expect(localStorage.length).toBe(200);\n    expect(localStorage.getItem(\"sb:1000000000000:old-uuid-0000\")).toBeNull();\n  });\n});\n"]}
+{"version":3,"file":"use-view-state.test.js","sourceRoot":"","sources":["../../../src/web/hooks/use-view-state.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EACL,SAAS,EACT,UAAU,EACV,QAAQ,EACR,MAAM,EACN,EAAE,EAEF,EAAE,GACH,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAI,UAA0D,CAAC;IAE/D,UAAU,CAAC,GAAG,EAAE;QACd,UAAU,GAAG;YACX,WAAW,EAAE,IAAI;YACjB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;SACrD,CAAC;QACF,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACpC,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACtB,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAChD,MAAM,WAAW,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAEjD,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC;QAC9B,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;QAEhE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,UAAU,CAAC,WAAW,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;QACvD,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;QAEhE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAEhD,GAAG,CAAC,GAAG,EAAE;YACP,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC;YACrD,YAAY,EAAE,QAAQ;YACtB,cAAc,EAAE,EAAE;SACnB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8FAA8F,EAAE,KAAK,IAAI,EAAE;QAC5G,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;QAEhE,GAAG,CAAC,GAAG,EAAE;YACP,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC;YACrD,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE;YACxC,cAAc,EAAE,EAAE;SACnB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,UAAU,CAAC,WAAW,GAAG,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;QACxD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;QAE1E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAEhD,8CAA8C;QAC9C,UAAU,CAAC,WAAW,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;QACvD,sDAAsD;QACtD,QAAQ,EAAE,CAAC;QAEX,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wDAAwD,EAAE,GAAG,EAAE;IACtE,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,4BAA4B,EAAE,EAAE,CAAC,CAAC;QACzE,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;QACpD,EAAE,CAAC,UAAU,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QACpD,YAAY,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACtB,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,YAAY,CAAC,aAAa,EAAE,CAAC;QAC7B,aAAa,CAAC,aAAa,EAAE,CAAC;QAC9B,YAAY,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,QAAQ,GAAG,eAAe,CAAC;QACjC,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAE1E,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACnB,0BAA0B,CAAC;gBACzB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;gBAC3C,iBAAiB,EAAE,EAAE;gBACrB,KAAK,EAAE,EAAE,QAAQ,EAAE;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,GAAG,EAAE;YACP,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,QAAQ,GAAG,eAAe,CAAC;QACjC,qDAAqD;QACrD,YAAY,CAAC,OAAO,CAClB,oBAAoB,QAAQ,EAAE,EAC9B,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CACvC,CAAC;QAEF,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAE1E,GAAG,CAAC,GAAG,EAAE;YACP,0BAA0B,CAAC;gBACzB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;gBAC3C,iBAAiB,EAAE,EAAE;gBACrB,KAAK,EAAE,EAAE,QAAQ,EAAE;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,GAAG,EAAE;YACjB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAE/D,GAAG,CAAC,GAAG,EAAE;YACP,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/C,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,QAAQ,GAAG,mBAAmB,CAAC;QACrC,YAAY,CAAC,OAAO,CAAC,oBAAoB,QAAQ,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAE1E,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAE/D,GAAG,CAAC,GAAG,EAAE;YACP,0BAA0B,CAAC;gBACzB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;gBAC3C,iBAAiB,EAAE,EAAE;gBACrB,KAAK,EAAE,EAAE,QAAQ,EAAE;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,GAAG,EAAE;YACjB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,QAAQ,GAAG,eAAe,CAAC;QACjC,MAAM,MAAM,GAAG,oBAAoB,QAAQ,EAAE,CAAC;QAC9C,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAE1D,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAE/D,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACnB,0BAA0B,CAAC;gBACzB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;gBAC3C,iBAAiB,EAAE,EAAE;gBACrB,KAAK,EAAE,EAAE,QAAQ,EAAE;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,GAAG,EAAE;YACP,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,gEAAgE;QAChE,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChD,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,+CAA+C;QAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,YAAY,CAAC,OAAO,CAClB,MAAM,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EACxE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CACtB,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEtC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;QACtC,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAE/D,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACnB,0BAA0B,CAAC;gBACzB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;gBAC3C,iBAAiB,EAAE,EAAE;gBACrB,KAAK,EAAE,EAAE,QAAQ,EAAE;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,GAAG,EAAE;YACP,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,sDAAsD;QACtD,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { act, renderHook, waitFor } from \"@testing-library/react\";\nimport {\n  afterEach,\n  beforeEach,\n  describe,\n  expect,\n  it,\n  type Mock,\n  vi,\n} from \"vitest\";\nimport { McpAppAdaptor, McpAppBridge } from \"../bridges/mcp-app/index.js\";\nimport {\n  fireToolResultNotification,\n  getMcpAppHostPostMessageMock,\n  MockResizeObserver,\n} from \"./test/utils.js\";\nimport { useViewState } from \"./use-view-state.js\";\n\ndescribe(\"useViewState\", () => {\n  let OpenaiMock: { widgetState: unknown; setWidgetState: Mock };\n\n  beforeEach(() => {\n    OpenaiMock = {\n      widgetState: null,\n      setWidgetState: vi.fn().mockResolvedValue(undefined),\n    };\n    vi.stubGlobal(\"openai\", OpenaiMock);\n    vi.stubGlobal(\"skybridge\", { hostType: \"apps-sdk\" });\n  });\n\n  afterEach(() => {\n    vi.unstubAllGlobals();\n    vi.resetAllMocks();\n  });\n\n  const defaultState = { count: 0, name: \"test\" };\n  const windowState = { count: 5, name: \"window\" };\n\n  it(\"should initialize with default state when window.openai.widgetState is null\", () => {\n    OpenaiMock.widgetState = null;\n    const { result } = renderHook(() => useViewState(defaultState));\n\n    expect(result.current[0]).toEqual(defaultState);\n  });\n\n  it(\"should initialize with window.openai.widgetState when available\", () => {\n    OpenaiMock.widgetState = { modelContent: windowState };\n    const { result } = renderHook(() => useViewState(defaultState));\n\n    expect(result.current[0]).toEqual(windowState);\n  });\n\n  it(\"should call window.openai.setWidgetState when setViewState is called with a new state\", async () => {\n    const { result } = renderHook(() => useViewState(defaultState));\n    const newState = { count: 10, name: \"updated\" };\n\n    act(() => {\n      result.current[1](newState);\n    });\n\n    expect(OpenaiMock.setWidgetState).toHaveBeenCalledWith({\n      modelContent: newState,\n      privateContent: {},\n    });\n    expect(result.current[0]).toEqual(newState);\n  });\n\n  it(\"should call window.openai.setWidgetState when setViewState is called with a function updater\", async () => {\n    const { result } = renderHook(() => useViewState(defaultState));\n\n    act(() => {\n      result.current[1]((prev) => ({ ...prev, count: prev.count + 1 }));\n    });\n\n    expect(OpenaiMock.setWidgetState).toHaveBeenCalledWith({\n      modelContent: { count: 1, name: \"test\" },\n      privateContent: {},\n    });\n    expect(result.current[0]).toEqual({ count: 1, name: \"test\" });\n  });\n\n  it(\"should update state when window.openai.widgetState changes\", () => {\n    OpenaiMock.widgetState = { modelContent: defaultState };\n    const { result, rerender } = renderHook(() => useViewState(defaultState));\n\n    expect(result.current[0]).toEqual(defaultState);\n\n    // Simulate window.openai.widgetState changing\n    OpenaiMock.widgetState = { modelContent: windowState };\n    // Trigger re-render to simulate the useEffect running\n    rerender();\n\n    expect(result.current[0]).toEqual(windowState);\n  });\n});\n\ndescribe(\"useViewState (mcp-app host — localStorage persistence)\", () => {\n  beforeEach(() => {\n    vi.stubGlobal(\"parent\", { postMessage: getMcpAppHostPostMessageMock() });\n    vi.stubGlobal(\"skybridge\", { hostType: \"mcp-app\" });\n    vi.stubGlobal(\"ResizeObserver\", MockResizeObserver);\n    localStorage.clear();\n  });\n\n  afterEach(() => {\n    vi.unstubAllGlobals();\n    vi.resetAllMocks();\n    McpAppBridge.resetInstance();\n    McpAppAdaptor.resetInstance();\n    localStorage.clear();\n  });\n\n  it(\"should persist state to localStorage when viewUUID is available\", async () => {\n    const viewUUID = \"test-uuid-123\";\n    const { result } = renderHook(() => useViewState({ page: 1, zoom: 100 }));\n\n    await act(async () => {\n      fireToolResultNotification({\n        content: [{ type: \"text\", text: \"result\" }],\n        structuredContent: {},\n        _meta: { viewUUID },\n      });\n    });\n\n    act(() => {\n      result.current[1]({ page: 3, zoom: 150 });\n    });\n\n    expect(result.current[0]).toEqual({ page: 3, zoom: 150 });\n    expect(localStorage.length).toBe(1);\n  });\n\n  it(\"should restore state from localStorage when viewUUID arrives\", async () => {\n    const viewUUID = \"test-uuid-456\";\n    // Pre-seed with the sb:{timestamp}:{viewUUID} format\n    localStorage.setItem(\n      `sb:1700000000000:${viewUUID}`,\n      JSON.stringify({ page: 5, zoom: 200 }),\n    );\n\n    const { result } = renderHook(() => useViewState({ page: 1, zoom: 100 }));\n\n    act(() => {\n      fireToolResultNotification({\n        content: [{ type: \"text\", text: \"result\" }],\n        structuredContent: {},\n        _meta: { viewUUID },\n      });\n    });\n\n    await waitFor(() => {\n      expect(result.current[0]).toEqual({ page: 5, zoom: 200 });\n    });\n  });\n\n  it(\"should not persist when no viewUUID is available\", () => {\n    const { result } = renderHook(() => useViewState({ page: 1 }));\n\n    act(() => {\n      result.current[1]({ page: 2 });\n    });\n\n    expect(result.current[0]).toEqual({ page: 2 });\n    expect(localStorage.length).toBe(0);\n  });\n\n  it(\"should handle corrupted localStorage data gracefully\", async () => {\n    const viewUUID = \"test-uuid-corrupt\";\n    localStorage.setItem(`sb:1700000000000:${viewUUID}`, \"not valid json{{{\");\n\n    const { result } = renderHook(() => useViewState({ page: 1 }));\n\n    act(() => {\n      fireToolResultNotification({\n        content: [{ type: \"text\", text: \"result\" }],\n        structuredContent: {},\n        _meta: { viewUUID },\n      });\n    });\n\n    await waitFor(() => {\n      expect(result.current[0]).toEqual({ page: 1 });\n    });\n  });\n\n  it(\"should refresh localStorage timestamp on each persist (LRU)\", async () => {\n    const viewUUID = \"lru-test-uuid\";\n    const oldKey = `sb:1000000000000:${viewUUID}`;\n    localStorage.setItem(oldKey, JSON.stringify({ page: 1 }));\n\n    const { result } = renderHook(() => useViewState({ page: 1 }));\n\n    await act(async () => {\n      fireToolResultNotification({\n        content: [{ type: \"text\", text: \"result\" }],\n        structuredContent: {},\n        _meta: { viewUUID },\n      });\n    });\n\n    act(() => {\n      result.current[1]({ page: 2 });\n    });\n\n    // Old key removed, replaced with a new one (still just 1 entry)\n    expect(localStorage.getItem(oldKey)).toBeNull();\n    expect(localStorage.length).toBe(1);\n  });\n\n  it(\"should evict oldest entries when exceeding max storage entries\", async () => {\n    // Fill localStorage with 200 entries (the max)\n    for (let i = 0; i < 200; i++) {\n      localStorage.setItem(\n        `sb:${String(1000000000000 + i)}:old-uuid-${String(i).padStart(4, \"0\")}`,\n        JSON.stringify({ i }),\n      );\n    }\n    expect(localStorage.length).toBe(200);\n\n    const viewUUID = \"eviction-test-uuid\";\n    const { result } = renderHook(() => useViewState({ page: 1 }));\n\n    await act(async () => {\n      fireToolResultNotification({\n        content: [{ type: \"text\", text: \"result\" }],\n        structuredContent: {},\n        _meta: { viewUUID },\n      });\n    });\n\n    act(() => {\n      result.current[1]({ page: 99 });\n    });\n\n    // Should have evicted the oldest entry to stay at 200\n    expect(localStorage.length).toBe(200);\n    expect(localStorage.getItem(\"sb:1000000000000:old-uuid-0000\")).toBeNull();\n  });\n});\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skybridge",
-  "version": "0.0.0-dev.da7ba17",
+  "version": "0.0.0-dev.dafb590",
   "description": "Skybridge is a framework for building ChatGPT and MCP Apps",
   "repository": {
     "type": "git",

package/dist/server/auth/providers/auth0.d.ts

@@ -1,18 +0,0 @@
-import type { OAuthConfig } from "../index.js";
-import { type CustomProviderOptions } from "./custom.js";
-/**
- * OAuth provider for Auth0. `domain` is the tenant domain (e.g.
- * `acme.us.auth0.com`); `audience` is the API Identifier; `serverUrl` is this
- * server's public URL. Requires DCR enabled on the tenant.
- *
- * Auth0 can't use the client's resource indicator — `audience` must be *in* the
- * authorize request. So it runs as skybridge-as-AS (`serverUrl`, see
- * {@link customProvider}) and bakes `?audience=<id>` into the advertised
- * `authorization_endpoint`. The token's `aud` is the API; `verify.issuer` stays
- * Auth0 (the token's real `iss`).
- */
-export declare function auth0Provider(opts: {
-    domain: string;
-    audience: string;
-    serverUrl: string;
-} & Omit<CustomProviderOptions, "issuer" | "audience" | "baseUrl" | "serverUrl">): Promise<OAuthConfig>;

package/dist/server/auth/providers/auth0.js

@@ -1,31 +0,0 @@
-import { customProvider } from "./custom.js";
-import { toIssuerUrl } from "./shared.js";
-/**
- * OAuth provider for Auth0. `domain` is the tenant domain (e.g.
- * `acme.us.auth0.com`); `audience` is the API Identifier; `serverUrl` is this
- * server's public URL. Requires DCR enabled on the tenant.
- *
- * Auth0 can't use the client's resource indicator — `audience` must be *in* the
- * authorize request. So it runs as skybridge-as-AS (`serverUrl`, see
- * {@link customProvider}) and bakes `?audience=<id>` into the advertised
- * `authorization_endpoint`. The token's `aud` is the API; `verify.issuer` stays
- * Auth0 (the token's real `iss`).
- */
-export async function auth0Provider(opts) {
-    const { domain, audience, ...rest } = opts;
-    const config = await customProvider({
-        issuer: toIssuerUrl(domain),
-        audience,
-        ...rest,
-    });
-    const authUrl = new URL(config.oauthMetadata.authorization_endpoint);
-    authUrl.searchParams.set("audience", audience);
-    return {
-        ...config,
-        oauthMetadata: {
-            ...config.oauthMetadata,
-            authorization_endpoint: authUrl.href,
-        },
-    };
-}
-//# sourceMappingURL=auth0.js.map

package/dist/server/auth/providers/auth0.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth0.js","sourceRoot":"","sources":["../../../../src/server/auth/providers/auth0.ts"],"names":[],"mappings":"AACA,OAAO,EAA8B,cAAc,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAGC;IAED,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC;QAC3B,QAAQ;QACR,GAAG,IAAI;KACR,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC;IACrE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC/C,OAAO;QACL,GAAG,MAAM;QACT,aAAa,EAAE;YACb,GAAG,MAAM,CAAC,aAAa;YACvB,sBAAsB,EAAE,OAAO,CAAC,IAAI;SACrC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { OAuthConfig } from \"../index.js\";\nimport { type CustomProviderOptions, customProvider } from \"./custom.js\";\nimport { toIssuerUrl } from \"./shared.js\";\n\n/**\n * OAuth provider for Auth0. `domain` is the tenant domain (e.g.\n * `acme.us.auth0.com`); `audience` is the API Identifier; `serverUrl` is this\n * server's public URL. Requires DCR enabled on the tenant.\n *\n * Auth0 can't use the client's resource indicator — `audience` must be *in* the\n * authorize request. So it runs as skybridge-as-AS (`serverUrl`, see\n * {@link customProvider}) and bakes `?audience=<id>` into the advertised\n * `authorization_endpoint`. The token's `aud` is the API; `verify.issuer` stays\n * Auth0 (the token's real `iss`).\n */\nexport async function auth0Provider(\n  opts: { domain: string; audience: string; serverUrl: string } & Omit<\n    CustomProviderOptions,\n    \"issuer\" | \"audience\" | \"baseUrl\" | \"serverUrl\"\n  >,\n): Promise<OAuthConfig> {\n  const { domain, audience, ...rest } = opts;\n  const config = await customProvider({\n    issuer: toIssuerUrl(domain),\n    audience,\n    ...rest,\n  });\n  const authUrl = new URL(config.oauthMetadata.authorization_endpoint);\n  authUrl.searchParams.set(\"audience\", audience);\n  return {\n    ...config,\n    oauthMetadata: {\n      ...config.oauthMetadata,\n      authorization_endpoint: authUrl.href,\n    },\n  };\n}\n"]}

package/dist/server/auth/providers/auth0.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/server/auth/providers/auth0.test.js

@@ -1,48 +0,0 @@
-// @vitest-environment node
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { auth0Provider } from "./auth0.js";
-afterEach(() => vi.restoreAllMocks());
-function doc(issuer) {
-    return {
-        issuer,
-        authorization_endpoint: `${issuer}/authorize`,
-        token_endpoint: `${issuer}/oauth/token`,
-        registration_endpoint: `${issuer}/oidc/register`,
-        response_types_supported: ["code"],
-        scopes_supported: ["openid", "profile", "email"],
-        jwks_uri: `${issuer}/.well-known/jwks.json`,
-    };
-}
-describe("auth0Provider", () => {
-    it("advertises skybridge as the AS (static issuer) and bakes audience; verifies against Auth0", async () => {
-        const issuer = "https://acme.us.auth0.com";
-        vi.spyOn(globalThis, "fetch").mockResolvedValue(new Response(JSON.stringify(doc(issuer)), {
-            headers: { "content-type": "application/json" },
-        }));
-        const config = await auth0Provider({
-            domain: "acme.us.auth0.com",
-            audience: "https://api.example.com/",
-            serverUrl: "https://app.example.com/",
-            scopes: ["openid", "profile", "email"],
-        });
-        // skybridge is the advertised AS: static issuer = serverUrl (trailing slash stripped).
-        expect(config.oauthMetadata.issuer).toBe("https://app.example.com");
-        // AS metadata scopes match the advertised set (clients read scopes from here).
-        expect(config.oauthMetadata.scopes_supported).toEqual([
-            "openid",
-            "profile",
-            "email",
-        ]);
-        expect(config.scopesSupported).toEqual(["openid", "profile", "email"]);
-        // audience baked into the advertised authorize endpoint (still pointing at Auth0).
-        const url = new URL(config.oauthMetadata.authorization_endpoint);
-        expect(url.origin + url.pathname).toBe(`${issuer}/authorize`);
-        expect(url.searchParams.get("audience")).toBe("https://api.example.com/");
-        // baseUrl left unset so the PRM resource resolves per request (Alpic-safe).
-        expect(config.baseUrl).toBeUndefined();
-        // token verification still uses Auth0 as issuer + the API audience.
-        expect(config.verify.issuer).toBe(issuer);
-        expect(config.verify.audience).toBe("https://api.example.com/");
-    });
-});
-//# sourceMappingURL=auth0.test.js.map

package/dist/server/auth/providers/auth0.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth0.test.js","sourceRoot":"","sources":["../../../../src/server/auth/providers/auth0.test.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;AAEtC,SAAS,GAAG,CAAC,MAAc;IACzB,OAAO;QACL,MAAM;QACN,sBAAsB,EAAE,GAAG,MAAM,YAAY;QAC7C,cAAc,EAAE,GAAG,MAAM,cAAc;QACvC,qBAAqB,EAAE,GAAG,MAAM,gBAAgB;QAChD,wBAAwB,EAAE,CAAC,MAAM,CAAC;QAClC,gBAAgB,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;QAChD,QAAQ,EAAE,GAAG,MAAM,wBAAwB;KAC5C,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;QACzG,MAAM,MAAM,GAAG,2BAA2B,CAAC;QAC3C,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,iBAAiB,CAC7C,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE;YACxC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;YACjC,MAAM,EAAE,mBAAmB;YAC3B,QAAQ,EAAE,0BAA0B;YACpC,SAAS,EAAE,0BAA0B;YACrC,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;SACvC,CAAC,CAAC;QAEH,uFAAuF;QACvF,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACpE,+EAA+E;QAC/E,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC;YACpD,QAAQ;YACR,SAAS;YACT,OAAO;SACR,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QACvE,mFAAmF;QACnF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,YAAY,CAAC,CAAC;QAC9D,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC1E,4EAA4E;QAC5E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QACvC,oEAAoE;QACpE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["// @vitest-environment node\nimport { afterEach, describe, expect, it, vi } from \"vitest\";\nimport { auth0Provider } from \"./auth0.js\";\n\nafterEach(() => vi.restoreAllMocks());\n\nfunction doc(issuer: string) {\n  return {\n    issuer,\n    authorization_endpoint: `${issuer}/authorize`,\n    token_endpoint: `${issuer}/oauth/token`,\n    registration_endpoint: `${issuer}/oidc/register`,\n    response_types_supported: [\"code\"],\n    scopes_supported: [\"openid\", \"profile\", \"email\"],\n    jwks_uri: `${issuer}/.well-known/jwks.json`,\n  };\n}\n\ndescribe(\"auth0Provider\", () => {\n  it(\"advertises skybridge as the AS (static issuer) and bakes audience; verifies against Auth0\", async () => {\n    const issuer = \"https://acme.us.auth0.com\";\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValue(\n      new Response(JSON.stringify(doc(issuer)), {\n        headers: { \"content-type\": \"application/json\" },\n      }),\n    );\n\n    const config = await auth0Provider({\n      domain: \"acme.us.auth0.com\",\n      audience: \"https://api.example.com/\",\n      serverUrl: \"https://app.example.com/\",\n      scopes: [\"openid\", \"profile\", \"email\"],\n    });\n\n    // skybridge is the advertised AS: static issuer = serverUrl (trailing slash stripped).\n    expect(config.oauthMetadata.issuer).toBe(\"https://app.example.com\");\n    // AS metadata scopes match the advertised set (clients read scopes from here).\n    expect(config.oauthMetadata.scopes_supported).toEqual([\n      \"openid\",\n      \"profile\",\n      \"email\",\n    ]);\n    expect(config.scopesSupported).toEqual([\"openid\", \"profile\", \"email\"]);\n    // audience baked into the advertised authorize endpoint (still pointing at Auth0).\n    const url = new URL(config.oauthMetadata.authorization_endpoint);\n    expect(url.origin + url.pathname).toBe(`${issuer}/authorize`);\n    expect(url.searchParams.get(\"audience\")).toBe(\"https://api.example.com/\");\n    // baseUrl left unset so the PRM resource resolves per request (Alpic-safe).\n    expect(config.baseUrl).toBeUndefined();\n    // token verification still uses Auth0 as issuer + the API audience.\n    expect(config.verify.issuer).toBe(issuer);\n    expect(config.verify.audience).toBe(\"https://api.example.com/\");\n  });\n});\n"]}

package/dist/server/auth/providers/clerk.d.ts

@@ -1,14 +0,0 @@
-import type { OAuthConfig } from "../index.js";
-import { type CustomProviderOptions } from "./custom.js";
-/**
- * OAuth provider for Clerk. `domain` is the Frontend API URL (e.g.
- * `acme.clerk.accounts.dev`, or a production custom domain). Requires Dynamic
- * Client Registration enabled on the instance, and the OAuth application set to
- * issue JWT access tokens (opaque tokens can't be JWKS-verified).
- *
- * Clerk access tokens carry no `aud` claim, so there is no `audience` option —
- * verification is issuer + JWKS only (matching Clerk's own `mcpAuthClerk`).
- */
-export declare function clerkProvider(opts: {
-    domain: string;
-} & Omit<CustomProviderOptions, "issuer" | "audience">): Promise<OAuthConfig>;

package/dist/server/auth/providers/clerk.js

@@ -1,16 +0,0 @@
-import { customProvider } from "./custom.js";
-import { toIssuerUrl } from "./shared.js";
-/**
- * OAuth provider for Clerk. `domain` is the Frontend API URL (e.g.
- * `acme.clerk.accounts.dev`, or a production custom domain). Requires Dynamic
- * Client Registration enabled on the instance, and the OAuth application set to
- * issue JWT access tokens (opaque tokens can't be JWKS-verified).
- *
- * Clerk access tokens carry no `aud` claim, so there is no `audience` option —
- * verification is issuer + JWKS only (matching Clerk's own `mcpAuthClerk`).
- */
-export function clerkProvider(opts) {
-    const { domain, ...rest } = opts;
-    return customProvider({ issuer: toIssuerUrl(domain), ...rest });
-}
-//# sourceMappingURL=clerk.js.map

package/dist/server/auth/providers/clerk.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"clerk.js","sourceRoot":"","sources":["../../../../src/server/auth/providers/clerk.ts"],"names":[],"mappings":"AACA,OAAO,EAA8B,cAAc,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAC3B,IAA6E;IAE7E,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IACjC,OAAO,cAAc,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC","sourcesContent":["import type { OAuthConfig } from \"../index.js\";\nimport { type CustomProviderOptions, customProvider } from \"./custom.js\";\nimport { toIssuerUrl } from \"./shared.js\";\n\n/**\n * OAuth provider for Clerk. `domain` is the Frontend API URL (e.g.\n * `acme.clerk.accounts.dev`, or a production custom domain). Requires Dynamic\n * Client Registration enabled on the instance, and the OAuth application set to\n * issue JWT access tokens (opaque tokens can't be JWKS-verified).\n *\n * Clerk access tokens carry no `aud` claim, so there is no `audience` option —\n * verification is issuer + JWKS only (matching Clerk's own `mcpAuthClerk`).\n */\nexport function clerkProvider(\n  opts: { domain: string } & Omit<CustomProviderOptions, \"issuer\" | \"audience\">,\n): Promise<OAuthConfig> {\n  const { domain, ...rest } = opts;\n  return customProvider({ issuer: toIssuerUrl(domain), ...rest });\n}\n"]}

package/dist/server/auth/providers/clerk.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/server/auth/providers/clerk.test.js

@@ -1,28 +0,0 @@
-// @vitest-environment node
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { clerkProvider } from "./clerk.js";
-afterEach(() => vi.restoreAllMocks());
-function doc(issuer) {
-    return {
-        issuer,
-        authorization_endpoint: `${issuer}/oauth/authorize`,
-        token_endpoint: `${issuer}/oauth/token`,
-        registration_endpoint: `${issuer}/oauth/register`,
-        response_types_supported: ["code"],
-        scopes_supported: ["profile", "email"],
-        jwks_uri: `${issuer}/.well-known/jwks.json`,
-    };
-}
-describe("clerkProvider", () => {
-    it("verifies issuer + JWKS with no audience (Clerk tokens carry no aud)", async () => {
-        const issuer = "https://acme.clerk.accounts.dev";
-        const fetchSpy = vi.spyOn(globalThis, "fetch").mockResolvedValue(new Response(JSON.stringify(doc(issuer)), {
-            headers: { "content-type": "application/json" },
-        }));
-        const config = await clerkProvider({ domain: "acme.clerk.accounts.dev" });
-        expect(fetchSpy).toHaveBeenCalledWith(`${issuer}/.well-known/openid-configuration`, expect.anything());
-        expect(config.verify.issuer).toBe(issuer);
-        expect(config.verify.audience).toBeUndefined();
-    });
-});
-//# sourceMappingURL=clerk.test.js.map

package/dist/server/auth/providers/clerk.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"clerk.test.js","sourceRoot":"","sources":["../../../../src/server/auth/providers/clerk.test.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;AAEtC,SAAS,GAAG,CAAC,MAAc;IACzB,OAAO;QACL,MAAM;QACN,sBAAsB,EAAE,GAAG,MAAM,kBAAkB;QACnD,cAAc,EAAE,GAAG,MAAM,cAAc;QACvC,qBAAqB,EAAE,GAAG,MAAM,iBAAiB;QACjD,wBAAwB,EAAE,CAAC,MAAM,CAAC;QAClC,gBAAgB,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC;QACtC,QAAQ,EAAE,GAAG,MAAM,wBAAwB;KAC5C,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,MAAM,GAAG,iCAAiC,CAAC;QACjD,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,iBAAiB,CAC9D,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE;YACxC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAE1E,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CACnC,GAAG,MAAM,mCAAmC,EAC5C,MAAM,CAAC,QAAQ,EAAE,CAClB,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["// @vitest-environment node\nimport { afterEach, describe, expect, it, vi } from \"vitest\";\nimport { clerkProvider } from \"./clerk.js\";\n\nafterEach(() => vi.restoreAllMocks());\n\nfunction doc(issuer: string) {\n  return {\n    issuer,\n    authorization_endpoint: `${issuer}/oauth/authorize`,\n    token_endpoint: `${issuer}/oauth/token`,\n    registration_endpoint: `${issuer}/oauth/register`,\n    response_types_supported: [\"code\"],\n    scopes_supported: [\"profile\", \"email\"],\n    jwks_uri: `${issuer}/.well-known/jwks.json`,\n  };\n}\n\ndescribe(\"clerkProvider\", () => {\n  it(\"verifies issuer + JWKS with no audience (Clerk tokens carry no aud)\", async () => {\n    const issuer = \"https://acme.clerk.accounts.dev\";\n    const fetchSpy = vi.spyOn(globalThis, \"fetch\").mockResolvedValue(\n      new Response(JSON.stringify(doc(issuer)), {\n        headers: { \"content-type\": \"application/json\" },\n      }),\n    );\n\n    const config = await clerkProvider({ domain: \"acme.clerk.accounts.dev\" });\n\n    expect(fetchSpy).toHaveBeenCalledWith(\n      `${issuer}/.well-known/openid-configuration`,\n      expect.anything(),\n    );\n    expect(config.verify.issuer).toBe(issuer);\n    expect(config.verify.audience).toBeUndefined();\n  });\n});\n"]}

package/dist/server/auth/providers/descope.d.ts

@@ -1,15 +0,0 @@
-import type { OAuthConfig } from "../index.js";
-import { type CustomProviderOptions } from "./custom.js";
-/**
- * OAuth provider for a Descope MCP Server. `url` is the MCP Server's **Discovery
- * URL** (a.k.a. Issuer) from the console's Connection Information, e.g.
- * `https://api.descope.com/v1/apps/agentic/<projectId>/<mcpServerId>` (or your
- * custom domain). Requires DCR enabled on the MCP Server. For Descope with DCR
- * disabled and Alpic's DCR proxy, use {@link customProvider} with `serverUrl`
- * instead (see `examples/auth-descope-alpic`). The token `audience` defaults to
- * the **Project ID** derived from the URL — Descope binds `aud` to [DCR client
- * id, project id], not the server URL; pass `audience` to override.
- */
-export declare function descopeProvider(opts: {
-    url: string;
-} & Omit<CustomProviderOptions, "issuer">): Promise<OAuthConfig>;

package/dist/server/auth/providers/descope.js

@@ -1,33 +0,0 @@
-import { customProvider } from "./custom.js";
-/**
- * Derives the Descope Project ID from an MCP Server URL
- * (`…/agentic/<projectId>/<mcpServerId>`). Descope binds the token `aud` to the
- * project id, so it doubles as the audience.
- */
-function projectIdFromUrl(url) {
-    const projectId = url.match(/\/agentic\/([^/]+)\/[^/]+/)?.[1];
-    if (!projectId) {
-        throw new Error(`Could not derive the Descope project id from "${url}"; pass an explicit \`audience\`.`);
-    }
-    return projectId;
-}
-/**
- * OAuth provider for a Descope MCP Server. `url` is the MCP Server's **Discovery
- * URL** (a.k.a. Issuer) from the console's Connection Information, e.g.
- * `https://api.descope.com/v1/apps/agentic/<projectId>/<mcpServerId>` (or your
- * custom domain). Requires DCR enabled on the MCP Server. For Descope with DCR
- * disabled and Alpic's DCR proxy, use {@link customProvider} with `serverUrl`
- * instead (see `examples/auth-descope-alpic`). The token `audience` defaults to
- * the **Project ID** derived from the URL — Descope binds `aud` to [DCR client
- * id, project id], not the server URL; pass `audience` to override.
- */
-export function descopeProvider(opts) {
-    const { url, audience, ...rest } = opts;
-    const issuer = url.replace(/\/\.well-known\/[^?#]*$/, "").replace(/\/$/, "");
-    return customProvider({
-        issuer,
-        audience: audience ?? projectIdFromUrl(issuer),
-        ...rest,
-    });
-}
-//# sourceMappingURL=descope.js.map

package/dist/server/auth/providers/descope.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"descope.js","sourceRoot":"","sources":["../../../../src/server/auth/providers/descope.ts"],"names":[],"mappings":"AACA,OAAO,EAA8B,cAAc,EAAE,MAAM,aAAa,CAAC;AAEzE;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,iDAAiD,GAAG,mCAAmC,CACxF,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAC7B,IAA6D;IAE7D,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IACxC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7E,OAAO,cAAc,CAAC;QACpB,MAAM;QACN,QAAQ,EAAE,QAAQ,IAAI,gBAAgB,CAAC,MAAM,CAAC;QAC9C,GAAG,IAAI;KACR,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { OAuthConfig } from \"../index.js\";\nimport { type CustomProviderOptions, customProvider } from \"./custom.js\";\n\n/**\n * Derives the Descope Project ID from an MCP Server URL\n * (`…/agentic/<projectId>/<mcpServerId>`). Descope binds the token `aud` to the\n * project id, so it doubles as the audience.\n */\nfunction projectIdFromUrl(url: string): string {\n  const projectId = url.match(/\\/agentic\\/([^/]+)\\/[^/]+/)?.[1];\n  if (!projectId) {\n    throw new Error(\n      `Could not derive the Descope project id from \"${url}\"; pass an explicit \\`audience\\`.`,\n    );\n  }\n  return projectId;\n}\n\n/**\n * OAuth provider for a Descope MCP Server. `url` is the MCP Server's **Discovery\n * URL** (a.k.a. Issuer) from the console's Connection Information, e.g.\n * `https://api.descope.com/v1/apps/agentic/<projectId>/<mcpServerId>` (or your\n * custom domain). Requires DCR enabled on the MCP Server. For Descope with DCR\n * disabled and Alpic's DCR proxy, use {@link customProvider} with `serverUrl`\n * instead (see `examples/auth-descope-alpic`). The token `audience` defaults to\n * the **Project ID** derived from the URL — Descope binds `aud` to [DCR client\n * id, project id], not the server URL; pass `audience` to override.\n */\nexport function descopeProvider(\n  opts: { url: string } & Omit<CustomProviderOptions, \"issuer\">,\n): Promise<OAuthConfig> {\n  const { url, audience, ...rest } = opts;\n  const issuer = url.replace(/\\/\\.well-known\\/[^?#]*$/, \"\").replace(/\\/$/, \"\");\n  return customProvider({\n    issuer,\n    audience: audience ?? projectIdFromUrl(issuer),\n    ...rest,\n  });\n}\n"]}

package/dist/server/auth/providers/descope.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/server/auth/providers/descope.test.js

@@ -1,37 +0,0 @@
-// @vitest-environment node
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { descopeProvider } from "./descope.js";
-afterEach(() => vi.restoreAllMocks());
-function discoveryDoc(issuer) {
-    return {
-        issuer,
-        authorization_endpoint: `${issuer}/authorize`,
-        token_endpoint: `${issuer}/token`,
-        registration_endpoint: `${issuer}/register`,
-        response_types_supported: ["code"],
-        scopes_supported: ["openid"],
-        jwks_uri: `${issuer}/.well-known/jwks.json`,
-    };
-}
-function mockDiscovery(issuer) {
-    return vi.spyOn(globalThis, "fetch").mockResolvedValue(new Response(JSON.stringify(discoveryDoc(issuer)), {
-        headers: { "content-type": "application/json" },
-    }));
-}
-describe("descopeProvider", () => {
-    it("derives issuer and audience (project id) from the MCP Server URL", async () => {
-        const issuer = "https://api.descope.com/v1/apps/agentic/P123/MS456";
-        const fetchSpy = mockDiscovery(issuer);
-        const config = await descopeProvider({ url: issuer });
-        expect(fetchSpy).toHaveBeenCalledWith(`${issuer}/.well-known/openid-configuration`, expect.anything());
-        expect(config.verify.issuer).toBe(issuer);
-        expect(config.verify.audience).toBe("P123");
-    });
-    it("lets an explicit audience override the derived project id", async () => {
-        const issuer = "https://api.descope.com/v1/apps/agentic/P123/MS456";
-        mockDiscovery(issuer);
-        const config = await descopeProvider({ url: issuer, audience: "custom" });
-        expect(config.verify.audience).toBe("custom");
-    });
-});
-//# sourceMappingURL=descope.test.js.map

package/dist/server/auth/providers/descope.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"descope.test.js","sourceRoot":"","sources":["../../../../src/server/auth/providers/descope.test.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;AAEtC,SAAS,YAAY,CAAC,MAAc;IAClC,OAAO;QACL,MAAM;QACN,sBAAsB,EAAE,GAAG,MAAM,YAAY;QAC7C,cAAc,EAAE,GAAG,MAAM,QAAQ;QACjC,qBAAqB,EAAE,GAAG,MAAM,WAAW;QAC3C,wBAAwB,EAAE,CAAC,MAAM,CAAC;QAClC,gBAAgB,EAAE,CAAC,QAAQ,CAAC;QAC5B,QAAQ,EAAE,GAAG,MAAM,wBAAwB;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,iBAAiB,CACpD,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE;QACjD,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CACH,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,MAAM,GAAG,oDAAoD,CAAC;QACpE,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAEtD,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CACnC,GAAG,MAAM,mCAAmC,EAC5C,MAAM,CAAC,QAAQ,EAAE,CAClB,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,MAAM,GAAG,oDAAoD,CAAC;QACpE,aAAa,CAAC,MAAM,CAAC,CAAC;QAEtB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE1E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["// @vitest-environment node\nimport { afterEach, describe, expect, it, vi } from \"vitest\";\nimport { descopeProvider } from \"./descope.js\";\n\nafterEach(() => vi.restoreAllMocks());\n\nfunction discoveryDoc(issuer: string) {\n  return {\n    issuer,\n    authorization_endpoint: `${issuer}/authorize`,\n    token_endpoint: `${issuer}/token`,\n    registration_endpoint: `${issuer}/register`,\n    response_types_supported: [\"code\"],\n    scopes_supported: [\"openid\"],\n    jwks_uri: `${issuer}/.well-known/jwks.json`,\n  };\n}\n\nfunction mockDiscovery(issuer: string) {\n  return vi.spyOn(globalThis, \"fetch\").mockResolvedValue(\n    new Response(JSON.stringify(discoveryDoc(issuer)), {\n      headers: { \"content-type\": \"application/json\" },\n    }),\n  );\n}\n\ndescribe(\"descopeProvider\", () => {\n  it(\"derives issuer and audience (project id) from the MCP Server URL\", async () => {\n    const issuer = \"https://api.descope.com/v1/apps/agentic/P123/MS456\";\n    const fetchSpy = mockDiscovery(issuer);\n\n    const config = await descopeProvider({ url: issuer });\n\n    expect(fetchSpy).toHaveBeenCalledWith(\n      `${issuer}/.well-known/openid-configuration`,\n      expect.anything(),\n    );\n    expect(config.verify.issuer).toBe(issuer);\n    expect(config.verify.audience).toBe(\"P123\");\n  });\n\n  it(\"lets an explicit audience override the derived project id\", async () => {\n    const issuer = \"https://api.descope.com/v1/apps/agentic/P123/MS456\";\n    mockDiscovery(issuer);\n\n    const config = await descopeProvider({ url: issuer, audience: \"custom\" });\n\n    expect(config.verify.audience).toBe(\"custom\");\n  });\n});\n"]}

package/dist/server/auth/providers/shared.d.ts

@@ -1,2 +0,0 @@
-/** Normalises a bare host to an https issuer URL and strips a trailing slash. */
-export declare function toIssuerUrl(domain: string): string;

package/dist/server/auth/providers/shared.js

@@ -1,6 +0,0 @@
-/** Normalises a bare host to an https issuer URL and strips a trailing slash. */
-export function toIssuerUrl(domain) {
-    const withScheme = /^https?:\/\//.test(domain) ? domain : `https://${domain}`;
-    return withScheme.replace(/\/$/, "");
-}
-//# sourceMappingURL=shared.js.map

package/dist/server/auth/providers/shared.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../../../src/server/auth/providers/shared.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,EAAE,CAAC;IAC9E,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC","sourcesContent":["/** Normalises a bare host to an https issuer URL and strips a trailing slash. */\nexport function toIssuerUrl(domain: string): string {\n  const withScheme = /^https?:\\/\\//.test(domain) ? domain : `https://${domain}`;\n  return withScheme.replace(/\\/$/, \"\");\n}\n"]}

package/dist/server/auth/providers/shared.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/server/auth/providers/shared.test.js

@@ -1,10 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { toIssuerUrl } from "./shared.js";
-describe("toIssuerUrl", () => {
-    it("adds https to a bare host, preserves an explicit scheme, strips a trailing slash", () => {
-        expect(toIssuerUrl("acme.authkit.app")).toBe("https://acme.authkit.app");
-        expect(toIssuerUrl("https://acme.authkit.app/")).toBe("https://acme.authkit.app");
-        expect(toIssuerUrl("http://localhost:3000")).toBe("http://localhost:3000");
-    });
-});
-//# sourceMappingURL=shared.test.js.map

package/dist/server/auth/providers/shared.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"shared.test.js","sourceRoot":"","sources":["../../../../src/server/auth/providers/shared.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACzE,MAAM,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CACnD,0BAA0B,CAC3B,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { describe, expect, it } from \"vitest\";\nimport { toIssuerUrl } from \"./shared.js\";\n\ndescribe(\"toIssuerUrl\", () => {\n  it(\"adds https to a bare host, preserves an explicit scheme, strips a trailing slash\", () => {\n    expect(toIssuerUrl(\"acme.authkit.app\")).toBe(\"https://acme.authkit.app\");\n    expect(toIssuerUrl(\"https://acme.authkit.app/\")).toBe(\n      \"https://acme.authkit.app\",\n    );\n    expect(toIssuerUrl(\"http://localhost:3000\")).toBe(\"http://localhost:3000\");\n  });\n});\n"]}

package/dist/server/auth/providers/stytch.d.ts

@@ -1,12 +0,0 @@
-import type { OAuthConfig } from "../index.js";
-import { type CustomProviderOptions } from "./custom.js";
-/**
- * OAuth provider for Stytch Connected Apps. `domain` is the project domain,
- * e.g. `acme.customers.stytch.dev`, or a configured custom domain. Requires
- * DCR enabled in the Stytch dashboard. `audience` is the Stytch Project ID
- * (the default token audience).
- */
-export declare function stytchProvider(opts: {
-    domain: string;
-    audience: string;
-} & Omit<CustomProviderOptions, "issuer" | "audience">): Promise<OAuthConfig>;

package/dist/server/auth/providers/stytch.js

@@ -1,13 +0,0 @@
-import { customProvider } from "./custom.js";
-import { toIssuerUrl } from "./shared.js";
-/**
- * OAuth provider for Stytch Connected Apps. `domain` is the project domain,
- * e.g. `acme.customers.stytch.dev`, or a configured custom domain. Requires
- * DCR enabled in the Stytch dashboard. `audience` is the Stytch Project ID
- * (the default token audience).
- */
-export function stytchProvider(opts) {
-    const { domain, ...rest } = opts;
-    return customProvider({ issuer: toIssuerUrl(domain), ...rest });
-}
-//# sourceMappingURL=stytch.js.map

package/dist/server/auth/providers/stytch.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"stytch.js","sourceRoot":"","sources":["../../../../src/server/auth/providers/stytch.ts"],"names":[],"mappings":"AACA,OAAO,EAA8B,cAAc,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,IAGC;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IACjC,OAAO,cAAc,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC","sourcesContent":["import type { OAuthConfig } from \"../index.js\";\nimport { type CustomProviderOptions, customProvider } from \"./custom.js\";\nimport { toIssuerUrl } from \"./shared.js\";\n\n/**\n * OAuth provider for Stytch Connected Apps. `domain` is the project domain,\n * e.g. `acme.customers.stytch.dev`, or a configured custom domain. Requires\n * DCR enabled in the Stytch dashboard. `audience` is the Stytch Project ID\n * (the default token audience).\n */\nexport function stytchProvider(\n  opts: { domain: string; audience: string } & Omit<\n    CustomProviderOptions,\n    \"issuer\" | \"audience\"\n  >,\n): Promise<OAuthConfig> {\n  const { domain, ...rest } = opts;\n  return customProvider({ issuer: toIssuerUrl(domain), ...rest });\n}\n"]}

package/dist/server/auth/providers/workos.d.ts

@@ -1,11 +0,0 @@
-import type { OAuthConfig } from "../index.js";
-import { type CustomProviderOptions } from "./custom.js";
-/**
- * OAuth provider for WorkOS AuthKit. `domain` is the AuthKit domain, e.g.
- * `acme.authkit.app`. Requires DCR enabled in the WorkOS dashboard
- * (Connect → Configuration). `audience` is the MCP server's Resource Indicator.
- */
-export declare function workosProvider(opts: {
-    domain: string;
-    audience: string;
-} & Omit<CustomProviderOptions, "issuer" | "audience">): Promise<OAuthConfig>;

package/dist/server/auth/providers/workos.js

@@ -1,12 +0,0 @@
-import { customProvider } from "./custom.js";
-import { toIssuerUrl } from "./shared.js";
-/**
- * OAuth provider for WorkOS AuthKit. `domain` is the AuthKit domain, e.g.
- * `acme.authkit.app`. Requires DCR enabled in the WorkOS dashboard
- * (Connect → Configuration). `audience` is the MCP server's Resource Indicator.
- */
-export function workosProvider(opts) {
-    const { domain, ...rest } = opts;
-    return customProvider({ issuer: toIssuerUrl(domain), ...rest });
-}
-//# sourceMappingURL=workos.js.map

package/dist/server/auth/providers/workos.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"workos.js","sourceRoot":"","sources":["../../../../src/server/auth/providers/workos.ts"],"names":[],"mappings":"AACA,OAAO,EAA8B,cAAc,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,IAGC;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IACjC,OAAO,cAAc,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC","sourcesContent":["import type { OAuthConfig } from \"../index.js\";\nimport { type CustomProviderOptions, customProvider } from \"./custom.js\";\nimport { toIssuerUrl } from \"./shared.js\";\n\n/**\n * OAuth provider for WorkOS AuthKit. `domain` is the AuthKit domain, e.g.\n * `acme.authkit.app`. Requires DCR enabled in the WorkOS dashboard\n * (Connect → Configuration). `audience` is the MCP server's Resource Indicator.\n */\nexport function workosProvider(\n  opts: { domain: string; audience: string } & Omit<\n    CustomProviderOptions,\n    \"issuer\" | \"audience\"\n  >,\n): Promise<OAuthConfig> {\n  const { domain, ...rest } = opts;\n  return customProvider({ issuer: toIssuerUrl(domain), ...rest });\n}\n"]}

package/dist/web/bridges/adaptor.d.ts

@@ -1,51 +0,0 @@
-import type { Adaptor, AnyViewToolHandler, CallToolResponse, DownloadParams, DownloadResult, FileMetadata, HostContext, HostContextStore, OpenExternalOptions, RequestDisplayMode, RequestModalOptions, RequestSizeOptions, SendFollowUpMessageOptions, SetViewStateAction, UploadFileOptions, ViewToolConfig } from "./types.js";
-/**
- * @internal
- * Single composite implementation of {@link Adaptor}. Composes the MCP App
- * bridge (always present) with an optional `window.openai` overlay. Per-method
- * routing rules are encoded inline.
- */
-export declare class HostAdaptor implements Adaptor {
-    private static instance;
-    static getInstance(): HostAdaptor;
-    static resetInstance(): void;
-    private readonly mcp;
-    private readonly openai;
-    private readonly stores;
-    private _viewState;
-    private readonly viewStateListeners;
-    private _viewUUID;
-    private _polyfillDisplay;
-    private readonly polyfillDisplayListeners;
-    private readonly polyfillDisplayStore;
-    private readonly polyfillViewStateStore;
-    private unsubscribeViewUUID;
-    constructor();
-    /** @internal Release any subscriptions held on the underlying bridges. */
-    cleanup(): void;
-    getHostContextStore: <K extends keyof HostContext>(key: K) => HostContextStore<K>;
-    callTool: <ToolArgs extends Record<string, unknown> | null = null, ToolResponse extends CallToolResponse = CallToolResponse>(name: string, args: ToolArgs) => Promise<ToolResponse>;
-    registerViewTool: (config: ViewToolConfig, handler: AnyViewToolHandler) => (() => void);
-    requestDisplayMode: (mode: RequestDisplayMode) => Promise<{
-        [x: string]: unknown;
-        mode: "inline" | "fullscreen" | "pip";
-    }>;
-    requestClose: () => Promise<void>;
-    requestSize: (size: RequestSizeOptions) => Promise<void>;
-    sendFollowUpMessage: (prompt: string, options?: SendFollowUpMessageOptions) => Promise<void>;
-    openExternal: (href: string, options?: OpenExternalOptions) => void;
-    download: (params: DownloadParams) => Promise<DownloadResult>;
-    setViewState: (stateOrUpdater: SetViewStateAction) => Promise<void>;
-    uploadFile: (file: File, options?: UploadFileOptions) => Promise<FileMetadata>;
-    getFileDownloadUrl: (file: FileMetadata) => Promise<{
-        downloadUrl: string;
-    }>;
-    selectFiles: () => Promise<FileMetadata[]>;
-    openModal: (options: RequestModalOptions) => void;
-    setOpenInAppUrl: (href: string) => Promise<void>;
-    closeModal: () => void;
-    private trackFileIds;
-    private subscribeToViewUUID;
-    private restoreFromLocalStorage;
-    protected persistToLocalStorage(state: Record<string, unknown> | null): void;
-}