zidane-ui 9.1.14 → 9.1.17

package/dist/adapters/browser-keybindings-host.d.ts

@@ -1,4 +1,4 @@
-import { KeybindingsHost } from "../keybindings/headless/host.js";
+import { KeyOverrides, KeybindingsHost } from "../keybindings/headless/host.js";
 import "../keybindings/headless/index.js";
 //#region src/adapters/browser-keybindings-host.d.ts
 /** Options of {@link createBrowserKeybindingsHost}. */
@@ -7,7 +7,15 @@ interface BrowserKeybindingsHostOptions {
   storage?: Pick<Storage, 'getItem' | 'setItem' | 'removeItem'>;
   /** The key. Default: `zg:keybindings:v1`. */
   key?: string;
+  /** The defaults over the catalog's. Default: `browserKeybindingDefaults()` for this platform. */
+  defaults?: KeyOverrides;
 }
+/**
+ * The chords a browser page receives, for the actions whose catalog chord it doesn't.
+ *
+ * @param mac - A Mac's browser. Default: this page's platform.
+ */
+declare function browserKeybindingDefaults(mac?: boolean): KeyOverrides;
 /**
  * Creates a {@link KeybindingsHost} over the browser's storage: the overrides and `save`.
  *
@@ -15,4 +23,4 @@ interface BrowserKeybindingsHostOptions {
  */
 declare function createBrowserKeybindingsHost(options?: BrowserKeybindingsHostOptions): KeybindingsHost;
 //#endregion
-export { BrowserKeybindingsHostOptions, createBrowserKeybindingsHost };
+export { BrowserKeybindingsHostOptions, browserKeybindingDefaults, createBrowserKeybindingsHost };

package/dist/adapters/browser-keybindings-host.js

@@ -5,9 +5,46 @@ import { createKeybindingOverrides } from "../keybindings/headless/overrides.js"
 * `localStorage`: the web app's. zidane-server keeps no keybindings (the
 * protocol leaves them client-local, and `~/.zidane/keybindings.json` is the
 * desktop app's), so the overrides live in the page's storage as one JSON map.
+*
+* A browser keeps some chords for itself (Ctrl+W, Ctrl+N and Ctrl+T off a
+* Mac, ⌘N and ⌘W on one), and off a Mac there is no ⌘ key: the host's
+* `defaults` (`browserKeybindingDefaults`) give those actions chords a page
+* receives.
 */
 /** The key the overrides live under by default. */
 const KEYBINDINGS_KEY = "zg:keybindings:v1";
+/** On a Mac, a browser keeps ⌘N and ⌘W: the Ctrl chords stay. */
+const MAC_BROWSER_DEFAULTS = {
+	newSession: "ctrl+n",
+	closeTab: "ctrl+w"
+};
+/** Off a Mac there is no ⌘, and the browser keeps Ctrl+W, Ctrl+N and Ctrl+T. */
+const OTHER_BROWSER_DEFAULTS = {
+	openSettings: "ctrl+,",
+	openPalette: "ctrl+k",
+	cancelToolCall: "alt+k",
+	newSession: "alt+n",
+	openTodos: "alt+t",
+	closeTab: "alt+w",
+	cycleAgent: "alt+shift+i",
+	toggleSidebar: "ctrl+b",
+	navigateBack: "alt+left",
+	navigateForward: "alt+right",
+	tabNext: "ctrl+alt+right",
+	tabPrev: "ctrl+alt+left",
+	toggleTerminal: "ctrl+`"
+};
+/**
+* The chords a browser page receives, for the actions whose catalog chord it doesn't.
+*
+* @param mac - A Mac's browser. Default: this page's platform.
+*/
+function browserKeybindingDefaults(mac = isMacPlatform()) {
+	return mac ? MAC_BROWSER_DEFAULTS : OTHER_BROWSER_DEFAULTS;
+}
+function isMacPlatform() {
+	return typeof navigator !== "undefined" && navigator.platform.toLowerCase().includes("mac");
+}
 const pageStorage = {
 	getItem: (key) => localStorage.getItem(key),
 	setItem: (key, value) => localStorage.setItem(key, value),
@@ -19,13 +56,14 @@ const pageStorage = {
 * @param options - The storage and the key.
 */
 function createBrowserKeybindingsHost(options = {}) {
-	const { storage = pageStorage, key = KEYBINDINGS_KEY } = options;
+	const { storage = pageStorage, key = KEYBINDINGS_KEY, defaults = browserKeybindingDefaults() } = options;
 	const state = createKeybindingOverrides(async () => {
 		const raw = storage.getItem(key);
 		return raw === null ? void 0 : JSON.parse(raw);
 	});
 	return {
 		...state,
+		defaults,
 		async save(overrides) {
 			try {
 				if (Object.keys(overrides).length === 0) storage.removeItem(key);
@@ -37,4 +75,4 @@ function createBrowserKeybindingsHost(options = {}) {
 	};
 }
 //#endregion
-export { createBrowserKeybindingsHost };
+export { browserKeybindingDefaults, createBrowserKeybindingsHost };

package/dist/adapters/index.d.ts

@@ -1,5 +1,5 @@
 import { BrowserAppearanceHostOptions, createBrowserAppearanceHost } from "./browser-appearance-host.js";
-import { BrowserKeybindingsHostOptions, createBrowserKeybindingsHost } from "./browser-keybindings-host.js";
+import { BrowserKeybindingsHostOptions, browserKeybindingDefaults, createBrowserKeybindingsHost } from "./browser-keybindings-host.js";
 import { BrowserWorkspaceHostOptions, createBrowserWorkspaceHost } from "./browser-workspace-host.js";
 import { EXTENSION_HOST_MODULES_GLOBAL, ExtensionHostModule, ExtensionHostModuleSources, ExtensionHostModules, ExtensionModuleLinkError, ExtensionModuleLoad, ExtensionModuleLoadError, LinkedExtensionModule, ServerExtensionBundle, ServerExtensionBundleLookup, ServerExtensionModuleLoader, ServerExtensionModuleLoaderOptions, ServerWebviewSources, ServerWebviewSourcesOptions, createServerExtensionModuleLoader, createServerWebviewSources, installExtensionHostModules, linkExtensionModule } from "./extension-modules.js";
 import { RunContext, RunFn, RunHost, RunHostOptions, createRunHost } from "./run-host.js";
@@ -21,9 +21,10 @@ import { SERVER_MACHINES_HOST_ID, ServerMachinesHost, ServerMachinesHostOptions,
 import { ServerOnboardingHost, ServerOnboardingHostOptions, createServerOnboardingHost } from "./server-onboarding-host.js";
 import { ServerSettingsHost, ServerSettingsHostOptions, createServerSettingsHost } from "./server-settings-host.js";
 import { ServerSidebarHostOptions, createServerSidebarHost } from "./server-sidebar-host.js";
+import { ServerViewsHostOptions, createServerViewsHost } from "./server-views-host.js";
 import { ExtensionFlowStepHandler, ExtensionsClientAnnounce, ServerExtensionAssetsAccess, ServerExtensionCommandWire, ServerExtensionCommands, ServerExtensionDialogs, ServerExtensionsHost, ServerExtensionsHostOptions, createServerExtensionsHost } from "./server-extensions-host.js";
 import { applyLiveEvent, closeThinkingSegment, finishLive } from "../chat/headless/streams/live-events.js";
 import { LiveState, LiveStateOptions, LiveTranscript, createLiveState } from "./live.js";
 import "./live-events.js";
 import { StreamPacer, StreamPacerOptions, createStreamPacer } from "./stream-pacer.js";
-export { AnswerBody, BrowserAppearanceHostOptions, BrowserKeybindingsHostOptions, BrowserWorkspaceHostOptions, EXTENSION_HOST_MODULES_GLOBAL, ExtensionFlowStepHandler, ExtensionHostModule, ExtensionHostModuleSources, ExtensionHostModules, ExtensionModuleLinkError, ExtensionModuleLoad, ExtensionModuleLoadError, ExtensionsClientAnnounce, FromWorker, HydrateResponse, LinkedExtensionModule, LiveState, LiveStateOptions, LiveTranscript, MessageEndpoint, RunContext, RunFn, RunHost, RunHostOptions, SERVER_AUTH_CHECK_PATH, SERVER_MACHINES_HOST_ID, SSE_HISTORY_RECORDS_VERSION, SSE_PROTOCOL_HEADER, SSE_PROTOCOL_VERSION, SendBody, ServerApprovalsHostOptions, ServerCallError, type ServerClient, type ServerClientOptions, type ServerClientState, ServerComposerHost, ServerComposerHostOptions, ServerConnectionError, ServerExtensionAssetsAccess, ServerExtensionBundle, ServerExtensionBundleLookup, ServerExtensionCommandWire, ServerExtensionCommands, ServerExtensionDialogs, ServerExtensionModuleLoader, ServerExtensionModuleLoaderOptions, ServerExtensionsHost, ServerExtensionsHostOptions, ServerFilesHostOptions, ServerGitHostOptions, ServerHost, ServerHostOptions, ServerMachinesHost, ServerMachinesHostOptions, ServerOnboardingHost, ServerOnboardingHostOptions, ServerPaletteHost, ServerPaletteHostOptions, type ServerRefusal, ServerSessionHost, ServerSessionHostOptions, ServerSettingsHost, ServerSettingsHostOptions, ServerSidebarHostOptions, ServerTerminalHostOptions, ServerWebviewSources, ServerWebviewSourcesOptions, SseHost, SseHostOptions, SseParser, SseRecord, StreamPacer, StreamPacerOptions, StreamRecord, ToWorker, WORKER_PROTOCOL_VERSION, WorkerHostOptions, WorkerRunInput, applyLiveEvent, attachmentsFromPreviews, closeThinkingSegment, createBrowserAppearanceHost, createBrowserKeybindingsHost, createBrowserWorkspaceHost, createLiveState, createRunHost, createServerApprovalsHost, createServerClient, createServerComposerHost, createServerExtensionModuleLoader, createServerExtensionsHost, createServerFilesHost, createServerGitHost, createServerHost, createServerMachinesHost, createServerOnboardingHost, createServerPaletteHost, createServerSessionHost, createServerSettingsHost, createServerSidebarHost, createServerTerminalHost, createServerWebviewSources, createSseHost, createSseParser, createStreamPacer, createWorkerHost, decodeFromWorker, decodeToWorker, encodeSseRecord, exposeRunHost, finishLive, formatCursor, installExtensionHostModules, linkExtensionModule, parseCursor, toChatModelProviders, toChatSession, toSidebarListSession };
+export { AnswerBody, BrowserAppearanceHostOptions, BrowserKeybindingsHostOptions, BrowserWorkspaceHostOptions, EXTENSION_HOST_MODULES_GLOBAL, ExtensionFlowStepHandler, ExtensionHostModule, ExtensionHostModuleSources, ExtensionHostModules, ExtensionModuleLinkError, ExtensionModuleLoad, ExtensionModuleLoadError, ExtensionsClientAnnounce, FromWorker, HydrateResponse, LinkedExtensionModule, LiveState, LiveStateOptions, LiveTranscript, MessageEndpoint, RunContext, RunFn, RunHost, RunHostOptions, SERVER_AUTH_CHECK_PATH, SERVER_MACHINES_HOST_ID, SSE_HISTORY_RECORDS_VERSION, SSE_PROTOCOL_HEADER, SSE_PROTOCOL_VERSION, SendBody, ServerApprovalsHostOptions, ServerCallError, type ServerClient, type ServerClientOptions, type ServerClientState, ServerComposerHost, ServerComposerHostOptions, ServerConnectionError, ServerExtensionAssetsAccess, ServerExtensionBundle, ServerExtensionBundleLookup, ServerExtensionCommandWire, ServerExtensionCommands, ServerExtensionDialogs, ServerExtensionModuleLoader, ServerExtensionModuleLoaderOptions, ServerExtensionsHost, ServerExtensionsHostOptions, ServerFilesHostOptions, ServerGitHostOptions, ServerHost, ServerHostOptions, ServerMachinesHost, ServerMachinesHostOptions, ServerOnboardingHost, ServerOnboardingHostOptions, ServerPaletteHost, ServerPaletteHostOptions, type ServerRefusal, ServerSessionHost, ServerSessionHostOptions, ServerSettingsHost, ServerSettingsHostOptions, ServerSidebarHostOptions, ServerTerminalHostOptions, ServerViewsHostOptions, ServerWebviewSources, ServerWebviewSourcesOptions, SseHost, SseHostOptions, SseParser, SseRecord, StreamPacer, StreamPacerOptions, StreamRecord, ToWorker, WORKER_PROTOCOL_VERSION, WorkerHostOptions, WorkerRunInput, applyLiveEvent, attachmentsFromPreviews, browserKeybindingDefaults, closeThinkingSegment, createBrowserAppearanceHost, createBrowserKeybindingsHost, createBrowserWorkspaceHost, createLiveState, createRunHost, createServerApprovalsHost, createServerClient, createServerComposerHost, createServerExtensionModuleLoader, createServerExtensionsHost, createServerFilesHost, createServerGitHost, createServerHost, createServerMachinesHost, createServerOnboardingHost, createServerPaletteHost, createServerSessionHost, createServerSettingsHost, createServerSidebarHost, createServerTerminalHost, createServerViewsHost, createServerWebviewSources, createSseHost, createSseParser, createStreamPacer, createWorkerHost, decodeFromWorker, decodeToWorker, encodeSseRecord, exposeRunHost, finishLive, formatCursor, installExtensionHostModules, linkExtensionModule, parseCursor, toChatModelProviders, toChatSession, toSidebarListSession };

package/dist/adapters/index.js

@@ -1,5 +1,5 @@
 import { createBrowserAppearanceHost } from "./browser-appearance-host.js";
-import { createBrowserKeybindingsHost } from "./browser-keybindings-host.js";
+import { browserKeybindingDefaults, createBrowserKeybindingsHost } from "./browser-keybindings-host.js";
 import { createBrowserWorkspaceHost } from "./browser-workspace-host.js";
 import { EXTENSION_HOST_MODULES_GLOBAL, ExtensionModuleLinkError, ExtensionModuleLoadError, createServerExtensionModuleLoader, createServerWebviewSources, installExtensionHostModules, linkExtensionModule } from "./extension-modules.js";
 import { applyLiveEvent, closeThinkingSegment, finishLive } from "../chat/headless/streams/live-events.js";
@@ -23,6 +23,7 @@ import { SERVER_MACHINES_HOST_ID, createServerMachinesHost } from "./server-mach
 import { createServerOnboardingHost } from "./server-onboarding-host.js";
 import { createServerSettingsHost } from "./server-settings-host.js";
 import { createServerSidebarHost } from "./server-sidebar-host.js";
+import { createServerViewsHost } from "./server-views-host.js";
 import { createServerExtensionsHost } from "./server-extensions-host.js";
 import { createStreamPacer } from "./stream-pacer.js";
-export { EXTENSION_HOST_MODULES_GLOBAL, ExtensionModuleLinkError, ExtensionModuleLoadError, SERVER_AUTH_CHECK_PATH, SERVER_MACHINES_HOST_ID, SSE_HISTORY_RECORDS_VERSION, SSE_PROTOCOL_HEADER, SSE_PROTOCOL_VERSION, ServerCallError, ServerConnectionError, WORKER_PROTOCOL_VERSION, applyLiveEvent, attachmentsFromPreviews, closeThinkingSegment, createBrowserAppearanceHost, createBrowserKeybindingsHost, createBrowserWorkspaceHost, createLiveState, createRunHost, createServerApprovalsHost, createServerClient, createServerComposerHost, createServerExtensionModuleLoader, createServerExtensionsHost, createServerFilesHost, createServerGitHost, createServerHost, createServerMachinesHost, createServerOnboardingHost, createServerPaletteHost, createServerSessionHost, createServerSettingsHost, createServerSidebarHost, createServerTerminalHost, createServerWebviewSources, createSseHost, createSseParser, createStreamPacer, createWorkerHost, decodeFromWorker, decodeToWorker, encodeSseRecord, exposeRunHost, finishLive, formatCursor, installExtensionHostModules, linkExtensionModule, parseCursor, toChatModelProviders, toChatSession, toSidebarListSession };
+export { EXTENSION_HOST_MODULES_GLOBAL, ExtensionModuleLinkError, ExtensionModuleLoadError, SERVER_AUTH_CHECK_PATH, SERVER_MACHINES_HOST_ID, SSE_HISTORY_RECORDS_VERSION, SSE_PROTOCOL_HEADER, SSE_PROTOCOL_VERSION, ServerCallError, ServerConnectionError, WORKER_PROTOCOL_VERSION, applyLiveEvent, attachmentsFromPreviews, browserKeybindingDefaults, closeThinkingSegment, createBrowserAppearanceHost, createBrowserKeybindingsHost, createBrowserWorkspaceHost, createLiveState, createRunHost, createServerApprovalsHost, createServerClient, createServerComposerHost, createServerExtensionModuleLoader, createServerExtensionsHost, createServerFilesHost, createServerGitHost, createServerHost, createServerMachinesHost, createServerOnboardingHost, createServerPaletteHost, createServerSessionHost, createServerSettingsHost, createServerSidebarHost, createServerTerminalHost, createServerViewsHost, createServerWebviewSources, createSseHost, createSseParser, createStreamPacer, createWorkerHost, decodeFromWorker, decodeToWorker, encodeSseRecord, exposeRunHost, finishLive, formatCursor, installExtensionHostModules, linkExtensionModule, parseCursor, toChatModelProviders, toChatSession, toSidebarListSession };

package/dist/adapters/server-custom-frame.d.ts

@@ -0,0 +1,22 @@
+import { CustomFrame, CustomFrameRequest } from "../views/headless/host.js";
+//#region src/adapters/server-custom-frame.d.ts
+/** Where Custom pages are minted. */
+interface ServerCustomFramesOptions {
+  /** The server's origin, `https://zidane.example`. */
+  origin: string;
+  /** The client token. Absent: a server with auth off. */
+  token?: string;
+  /** Default `fetch`. */
+  fetch?: typeof fetch;
+}
+/** The iframe's `sandbox` attribute. Never `allow-same-origin`. */
+declare const CUSTOM_IFRAME_SANDBOX = "allow-scripts";
+/**
+ * Mints one Custom page and builds its iframe.
+ *
+ * @param options - The server's origin and token.
+ * @param request - The node, the theme.
+ */
+declare function createServerCustomFrame(options: ServerCustomFramesOptions, request: CustomFrameRequest): Promise<CustomFrame>;
+//#endregion
+export { CUSTOM_IFRAME_SANDBOX, ServerCustomFramesOptions, createServerCustomFrame };

package/dist/adapters/server-custom-frame.js

@@ -0,0 +1,163 @@
+import { MCP_APP_PERMISSIONS, SERVER_VIEWS_CUSTOM_PATH, customDataMessage, customThemeMessage, mcpAppAllowAttribute, parseCustomFrameMessage, parseMcpAppRpc } from "zidane/chat/pure";
+//#region src/adapters/server-custom-frame.ts
+/**
+* Custom frames on zidane-server (docs/VIEWS.md, Custom code): the server
+* mints the page of one `<Custom>` node under a short-lived ticket
+* (`POST /zidane/views/custom`, with the token), and an iframe with
+* `sandbox="allow-scripts"` loads it (never `srcdoc`, never
+* `allow-same-origin`). The page's response carries the `sandbox` CSP.
+* Only messages from this iframe's window, with the opaque origin and the
+* page's channel, reach the listener. A link, an image or a chord counts
+* only while this window has user activation (a click or a key press in the
+* page gives it one), so a page cannot send them on its own. A theme change
+* and new data go the other way: the page's bridge takes
+* `customThemeMessage` and `customDataMessage` from this window only.
+* Sent before the page has loaded, the latest of each waits for its load:
+* a message posted to a page still loading is lost.
+*/
+/** The iframe's `sandbox` attribute. Never `allow-same-origin`. */
+const CUSTOM_IFRAME_SANDBOX = "allow-scripts";
+/** Whether a message needs a real click or key press: it opens something, or runs a shortcut. */
+const needsActivation = (message) => message.kind === "open-link" || message.kind === "image" || message.kind === "key";
+/** Whether this window has user activation now. A browser without the API: true (the page's bridge checked). */
+function activated() {
+	const activation = navigator.userActivation;
+	return activation ? activation.isActive : true;
+}
+/**
+* Mints one Custom page and builds its iframe.
+*
+* @param options - The server's origin and token.
+* @param request - The node, the theme.
+*/
+async function createServerCustomFrame(options, request) {
+	const response = await (options.fetch ?? ((input, init) => fetch(input, init)))(`${options.origin}${SERVER_VIEWS_CUSTOM_PATH}`, {
+		method: "POST",
+		credentials: "omit",
+		headers: {
+			"content-type": "application/json",
+			...options.token ? { authorization: `Bearer ${options.token}` } : {}
+		},
+		body: JSON.stringify({
+			sessionId: request.sessionId,
+			id: request.viewId,
+			path: [...request.path],
+			original: request.original,
+			theme: request.theme,
+			...request.state ? { state: request.state } : {},
+			...request.permissions && request.permissions.length > 0 ? { permissions: [...request.permissions] } : {}
+		})
+	});
+	if (!response.ok) throw new Error(`The server answered ${response.status} for the custom part.`);
+	const minted = await response.json();
+	const { url, channel } = minted;
+	if (typeof url !== "string" || !url.startsWith(`${SERVER_VIEWS_CUSTOM_PATH}/`) || typeof channel !== "string") throw new Error("The server answered with no page.");
+	if (minted.kind === "mcp-app") return mcpAppFrame(`${options.origin}${url}`, minted.permissions);
+	const iframe = document.createElement("iframe");
+	iframe.setAttribute("sandbox", CUSTOM_IFRAME_SANDBOX);
+	iframe.setAttribute("referrerpolicy", "no-referrer");
+	iframe.setAttribute("allow", "");
+	iframe.setAttribute("loading", "eager");
+	iframe.src = `${options.origin}${url}`;
+	let loaded = false;
+	const waiting = {};
+	const post = (message) => iframe.contentWindow?.postMessage(message, "*");
+	const onLoad = () => {
+		loaded = true;
+		if (waiting.theme !== void 0) post(waiting.theme);
+		if (waiting.data !== void 0) post(waiting.data);
+		delete waiting.theme;
+		delete waiting.data;
+	};
+	iframe.addEventListener("load", onLoad);
+	const listeners = /* @__PURE__ */ new Set();
+	const onMessage = (event) => {
+		if (event.source === null || event.source !== iframe.contentWindow || event.origin !== "null") return;
+		const message = parseCustomFrameMessage(event.data, channel);
+		if (!message || needsActivation(message) && !activated()) return;
+		for (const listener of [...listeners]) listener(message);
+	};
+	window.addEventListener("message", onMessage);
+	let disposed = false;
+	return {
+		element: iframe,
+		listen(onEvent) {
+			listeners.add(onEvent);
+			return () => listeners.delete(onEvent);
+		},
+		setTheme(theme) {
+			if (disposed) return;
+			const message = customThemeMessage(channel, theme);
+			if (loaded) post(message);
+			else waiting.theme = message;
+		},
+		setData(data) {
+			const message = customDataMessage(channel, data);
+			if (disposed || !message) return;
+			if (loaded) post(message);
+			else waiting.data = message;
+		},
+		dispose() {
+			if (disposed) return;
+			disposed = true;
+			window.removeEventListener("message", onMessage);
+			iframe.removeEventListener("load", onLoad);
+			listeners.clear();
+			iframe.removeAttribute("src");
+			iframe.remove();
+		}
+	};
+}
+/**
+* An MCP app's iframe (docs/VIEWS.md, MCP Apps): the same sandbox as a
+* Custom page, plus the permissions the person allowed in its `allow`
+* attribute. The app speaks JSON-RPC with `postMessage` objects: only
+* messages from this iframe's window and the sandbox's opaque origin, each
+* checked for its shape and size, reach the listener, marked with whether
+* this window has user activation now.
+*/
+function mcpAppFrame(src, rawPermissions) {
+	const permissions = Array.isArray(rawPermissions) ? MCP_APP_PERMISSIONS.filter((name) => rawPermissions.includes(name)) : [];
+	const iframe = document.createElement("iframe");
+	iframe.setAttribute("sandbox", CUSTOM_IFRAME_SANDBOX);
+	iframe.setAttribute("referrerpolicy", "no-referrer");
+	iframe.setAttribute("allow", mcpAppAllowAttribute(permissions));
+	iframe.setAttribute("loading", "eager");
+	iframe.src = src;
+	const listeners = /* @__PURE__ */ new Set();
+	const onMessage = (event) => {
+		if (event.source === null || event.source !== iframe.contentWindow || event.origin !== "null") return;
+		const message = parseMcpAppRpc(event.data);
+		if (!message) return;
+		const active = activated();
+		for (const listener of [...listeners]) listener({
+			kind: "rpc",
+			message,
+			active
+		});
+	};
+	window.addEventListener("message", onMessage);
+	let disposed = false;
+	return {
+		element: iframe,
+		kind: "mcp-app",
+		permissions,
+		listen(onEvent) {
+			listeners.add(onEvent);
+			return () => listeners.delete(onEvent);
+		},
+		postRpc(message) {
+			if (!disposed) iframe.contentWindow?.postMessage(message, "*");
+		},
+		dispose() {
+			if (disposed) return;
+			disposed = true;
+			window.removeEventListener("message", onMessage);
+			listeners.clear();
+			iframe.removeAttribute("src");
+			iframe.remove();
+		}
+	};
+}
+//#endregion
+export { CUSTOM_IFRAME_SANDBOX, createServerCustomFrame };

package/dist/adapters/server-extensions-host.js

@@ -1,8 +1,8 @@
 import { writable } from "../chat/headless/store.js";
-import { ExtensionsHostError } from "../extensions/headless/host.js";
 import { createServerWebviewSources } from "./extension-modules.js";
 import { createDialogQueue } from "../extensions/headless/dialog-queue.js";
 import { createUiEffectChannel } from "../extensions/headless/effect-channel.js";
+import { ExtensionsHostError } from "../extensions/headless/host.js";
 import { EXTENSION_TOKENS } from "../extensions/headless/wire.js";
 import { ServerCallError, ServerConnectionError, createExtensionsClient } from "zidane/ipc/browser";
 //#region src/adapters/server-extensions-host.ts

package/dist/adapters/server-host.js

@@ -1,4 +1,5 @@
 import { writable } from "../chat/headless/store.js";
+import { promptOriginWire } from "../chat/headless/prompt-origin.js";
 import { createLiveState } from "./live.js";
 import { createServerClient } from "./server-client.js";
 import { wireOriginal } from "../chat/headless/send-flow.js";
@@ -491,7 +492,7 @@ function createServerHost(options) {
 			} } : {}
 		},
 		transcript: (sessionId) => state.readable(sessionId, { loadEarlier: () => void loadEarlier(sessionId) }),
-		async send({ sessionId, prompt, attachments, model, thinking, activatedSkills, echo, keepDraft, delivery }) {
+		async send({ sessionId, prompt, attachments, model, thinking, activatedSkills, echo, keepDraft, delivery, origin, literal }) {
 			if (echo !== false && !delivery) state.echoPrompt(sessionId, prompt, attachments?.map(({ original: _original, ...a }) => a));
 			await applyChoice(sessionId, model, thinking);
 			const uploads = (attachments ?? []).flatMap((a) => {
@@ -512,7 +513,9 @@ function createServerHost(options) {
 					requestId: crypto.randomUUID(),
 					...activatedSkills?.length ? { activatedSkills: [...activatedSkills] } : {},
 					...uploads.length ? { attachments: uploads } : {},
-					...keepDraft ? { keepDraft: true } : {}
+					...keepDraft ? { keepDraft: true } : {},
+					...origin ? { origin: promptOriginWire(origin) } : {},
+					...literal ? { literal: true } : {}
 				});
 				return;
 			}
@@ -522,7 +525,9 @@ function createServerHost(options) {
 				requestId: crypto.randomUUID(),
 				...activatedSkills?.length ? { activatedSkills: [...activatedSkills] } : {},
 				...uploads.length ? { attachments: uploads } : {},
-				...keepDraft ? { keepDraft: true } : {}
+				...keepDraft ? { keepDraft: true } : {},
+				...origin ? { origin: promptOriginWire(origin) } : {},
+				...literal ? { literal: true } : {}
 			});
 		},
 		async providerReady() {

package/dist/adapters/server-machines-host.js

@@ -1,7 +1,7 @@
-import { machinesError } from "../machines/headless/host.js";
-import { createMachineLists, createOnlineMachines, lazyReadable } from "../machines/headless/stores.js";
 import { closableClient } from "./closable-client.js";
+import { machinesError } from "../machines/headless/host.js";
 import { createPresenceStore } from "../machines/headless/presence.js";
+import { createMachineLists, createOnlineMachines, lazyReadable } from "../machines/headless/stores.js";
 import { createHostSyncReads } from "../machines/headless/sync.js";
 import { serverOAuthFlow } from "./server-oauth-flow.js";
 import { formatJoinString } from "zidane/ipc/browser";
@@ -72,6 +72,7 @@ function createServerMachinesHost(options) {
 			kind: "server",
 			name: hello?.hostName ?? fallbackName,
 			status,
+			...serverUrl ? { url: serverUrl } : {},
 			...error ? { error } : {},
 			...hello?.appVersion ? { serverVersion: hello.appVersion } : {},
 			...hello?.startedAt ? { startedAt: hello.startedAt } : {},

package/dist/adapters/server-settings-host.js

@@ -1,6 +1,6 @@
 import { writable } from "../chat/headless/store.js";
-import { DEFAULT_SETTINGS } from "../settings/headless/catalog.js";
 import { closableClient } from "./closable-client.js";
+import { DEFAULT_SETTINGS } from "../settings/headless/catalog.js";
 import { serverSettingsSections } from "./server-settings-sections.js";
 import { serverSettingsAccounts } from "./server-settings-accounts.js";
 import { serverSettingsModels } from "./server-settings-models.js";

package/dist/adapters/server-views-host.d.ts

@@ -0,0 +1,24 @@
+import { ViewsHost } from "../views/headless/host.js";
+import { ServerCustomFramesOptions } from "./server-custom-frame.js";
+import { ServerClient } from "zidane/ipc/browser";
+//#region src/adapters/server-views-host.d.ts
+/** Options for {@link createServerViewsHost}. */
+interface ServerViewsHostOptions {
+  /** The client to speak through, shared with the chat host (`createServerHost(…).client`). */
+  client: ServerClient;
+  /**
+   * Where Custom pages are minted: the server's origin and the token
+   * (`POST /zidane/views/custom`). Absent, or a server without
+   * `views.reportProblem`: `<Custom>` shows its title and alt text.
+   */
+  customFrames?: ServerCustomFramesOptions;
+}
+/**
+ * Creates a {@link ViewsHost} over a zidane-server client. It listens to the
+ * client only while something reads it.
+ *
+ * @param options - The client to speak through.
+ */
+declare function createServerViewsHost(options: ServerViewsHostOptions): ViewsHost;
+//#endregion
+export { ServerViewsHostOptions, createServerViewsHost };

package/dist/adapters/server-views-host.js

@@ -0,0 +1,78 @@
+import { downloadInBrowser } from "../views/headless/download.js";
+import { createViewsHost } from "../views/headless/store.js";
+import { createServerCustomFrame } from "./server-custom-frame.js";
+//#region src/adapters/server-views-host.ts
+/**
+* Creates a {@link ViewsHost} over a zidane-server client. It listens to the
+* client only while something reads it.
+*
+* @param options - The client to speak through.
+*/
+function createServerViewsHost(options) {
+	const { client, customFrames } = options;
+	const customCode = client.can("views.reportProblem");
+	return createViewsHost({
+		...customCode && customFrames ? { customFrame: (request) => createServerCustomFrame(customFrames, request) } : {},
+		...customCode ? { reportProblem: (sessionId, id, problem, path) => client.call("views.reportProblem", {
+			sessionId,
+			id,
+			problem,
+			...path ? { path } : {}
+		}) } : {},
+		...client.can("views.meta") ? { meta: (sessionId) => client.call("views.meta", { sessionId }) } : {},
+		...client.can("views.get") ? { get: (sessionId, ids) => client.call("views.get", {
+			sessionId,
+			ids
+		}) } : {},
+		...client.can("views.setHeights") ? { setHeights: (sessionId, id, heights) => client.call("views.setHeights", {
+			sessionId,
+			id,
+			heights: [...heights]
+		}) } : {},
+		...client.can("views.refresh") ? { refresh: (sessionId, id) => client.call("views.refresh", {
+			sessionId,
+			id
+		}) } : {},
+		...client.can("views.resolve") ? {
+			resolve: (sessionId, nodes) => client.call("views.resolve", {
+				sessionId,
+				nodes
+			}),
+			onData: (listener) => client.onSignal((signal) => {
+				if (signal.kind === "views:data") listener(signal.components);
+			})
+		} : {},
+		...client.can("views.runAction") ? { runAction: (sessionId, id, path, original) => client.call("views.runAction", {
+			sessionId,
+			id,
+			path,
+			...original ? { original: true } : {}
+		}) } : {},
+		...client.can("views.appRequest") ? {
+			appRequest: (sessionId, id, method, params) => client.call("views.appRequest", {
+				sessionId,
+				id,
+				method,
+				params
+			}),
+			downloadFile: downloadInBrowser
+		} : {},
+		...client.can("views.image") ? { image: (sessionId, source) => client.call("views.image", {
+			sessionId,
+			source
+		}) } : {},
+		...client.can("views.setState") ? { setState: (sessionId, viewId, state) => client.call("views.setState", {
+			sessionId,
+			viewId,
+			state
+		}) } : {},
+		...client.can("views.meta") ? { onChanged: (listener) => client.onSignal((signal) => {
+			if (signal.kind === "views:changed") listener({
+				sessionId: signal.sessionId,
+				ids: signal.ids
+			});
+		}) } : {}
+	});
+}
+//#endregion
+export { createServerViewsHost };

package/dist/app/AppHostProvider.d.ts

@@ -1,5 +1,6 @@
 import { ChatLabels } from "../chat/headless/labels.js";
 import { ExtensionModuleLoader } from "../extensions/ExtensionComponent.js";
+import { TerminalAssets } from "../terminal/TerminalProvider.js";
 import { AppHost } from "./headless/app-host.js";
 import { ReactNode } from "react";
 //#region src/app/AppHostProvider.d.ts
@@ -11,6 +12,8 @@ interface AppHostProviderProps {
   chatLabels?: Partial<ChatLabels>;
   /** Loads an extension's `ui.tsx` module for the extension components (`ExtensionsProvider`'s `loadModule`). Absent: extension items draw their data. */
   loadExtensionModule?: ExtensionModuleLoader;
+  /** The files a terminal loads (`zidane-ui/terminal/assets` in a Vite app), passed to `TerminalProvider`. */
+  terminalAssets?: TerminalAssets;
   /** The app's components. */
   children: ReactNode;
 }
@@ -19,7 +22,7 @@ interface AppHostProviderProps {
  *
  * @param props - Provider props: the `host`, optional `chatLabels`, and the `children` to render.
  */
-declare function AppHostProvider({ host, chatLabels, loadExtensionModule, children: app }: AppHostProviderProps): import("react").JSX.Element;
+declare function AppHostProvider({ host, chatLabels, loadExtensionModule, terminalAssets, children: app }: AppHostProviderProps): import("react").JSX.Element;
 /** Returns the {@link AppHost} from the nearest {@link AppHostProvider}. Throws when called outside one. */
 declare function useAppHost(): AppHost;
 //#endregion

package/dist/app/AppHostProvider.js

@@ -15,9 +15,10 @@ import { PaletteProvider } from "../palette/PaletteProvider.js";
 import { SessionProvider } from "../session/SessionProvider.js";
 import { SettingsProvider } from "../settings/SettingsProvider.js";
 import { TerminalProvider } from "../terminal/TerminalProvider.js";
+import { ViewsProvider } from "../views/ViewsProvider.js";
 import { WorkspaceHostProvider } from "../workspace/WorkspaceProvider.js";
-import { jsx } from "react/jsx-runtime";
 import { createContext, useContext } from "react";
+import { jsx } from "react/jsx-runtime";
 //#region src/app/AppHostProvider.tsx
 /**
 * Puts an `AppHost` in context, and each area's host in its own provider, so
@@ -30,7 +31,7 @@ import { createContext, useContext } from "react";
 * Today that is `ChatProvider` when `host.chat` is present,
 * `SessionProvider` when `host.session` is, `ApprovalsProvider` when
 * `host.approvals` is, `ExtensionsProvider` when `host.extensions` is, `FilesProvider` when `host.files` is, `GitProvider` when `host.git` is, `MachinesProvider` when `host.machines` is, `SettingsProvider` when `host.settings` is, `TerminalProvider` when `host.terminal` is, `KeybindingsProvider` when `host.keybindings` is and
-* `AppearanceProvider` when `host.appearance` is, and always a `KeyCommandsProvider` (the key command
+* `AppearanceProvider` when `host.appearance` is, `ViewsProvider` when `host.views` is, and always a `KeyCommandsProvider` (the key command
 * registry: register shortcuts with `useKeyCommands`) and a `NoticeStackProvider` (`useNotify`). `host.workspace` goes in
 * context for each `WorkspaceProvider` below (`WorkspaceHostProvider`), and
 * `host.onboarding` for each `OnboardingProvider` below (`OnboardingHostProvider`), `host.composer`
@@ -44,7 +45,7 @@ const AppHostContext = createContext(null);
 *
 * @param props - Provider props: the `host`, optional `chatLabels`, and the `children` to render.
 */
-function AppHostProvider({ host, chatLabels, loadExtensionModule, children: app }) {
+function AppHostProvider({ host, chatLabels, loadExtensionModule, terminalAssets, children: app }) {
 	const onboarding = host.onboarding ? /* @__PURE__ */ jsx(OnboardingHostProvider, {
 		host: host.onboarding,
 		children: app
@@ -57,10 +58,15 @@ function AppHostProvider({ host, chatLabels, loadExtensionModule, children: app
 		host: host.sidebar,
 		children: composer
 	}) : composer;
-	const terminal = host.terminal ? /* @__PURE__ */ jsx(TerminalProvider, {
-		host: host.terminal,
+	const views = host.views ? /* @__PURE__ */ jsx(ViewsProvider, {
+		host: host.views,
 		children: sidebar
 	}) : sidebar;
+	const terminal = host.terminal ? /* @__PURE__ */ jsx(TerminalProvider, {
+		host: host.terminal,
+		...terminalAssets,
+		children: views
+	}) : views;
 	const workspace = host.workspace ? /* @__PURE__ */ jsx(WorkspaceHostProvider, {
 		host: host.workspace,
 		children: terminal

package/dist/app/ModalProvider.js

@@ -5,8 +5,8 @@ import { buttonClass } from "../components/button.js";
 import { ErrorBoundary, ErrorDetails } from "../components/ErrorBoundary.js";
 import { Keycap } from "../components/Keycap.js";
 import { useAppearanceState } from "../appearance/AppearanceProvider.js";
-import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 import { createContext, useCallback, useContext, useEffect, useLayoutEffect, useMemo, useRef, useState } from "react";
+import { Fragment as Fragment$1, jsx, jsxs } from "react/jsx-runtime";
 import { AnimatePresence, motion, useIsPresent } from "motion/react";
 //#region src/app/ModalProvider.tsx
 /**
@@ -481,7 +481,7 @@ function ScreenShell({ title, description, lead, screenLabel, onClose, aside, as
 				className: "shrink-0 px-3 pb-2",
 				children: aside.search
 			}),
-			narrowPane === "aside" ? /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsx("div", {
+			narrowPane === "aside" ? /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx("div", {
 				className: "flex-1 min-h-0 flex flex-col px-2 pt-1",
 				children: aside.nav
 			}), asideFooter && /* @__PURE__ */ jsx("div", {

package/dist/app/NoticeStack.js

@@ -1,8 +1,8 @@
 import { useLabels } from "../labels.js";
 import { IconButton } from "../components/IconButton.js";
 import { Notice } from "../components/Notice.js";
-import { jsx, jsxs } from "react/jsx-runtime";
 import { createContext, useCallback, useContext, useEffect, useRef, useState } from "react";
+import { jsx, jsxs } from "react/jsx-runtime";
 //#region src/app/NoticeStack.tsx
 /**
 * The app's transient notices: what an action that has no surface of its own

package/dist/app/headless/app-host.d.ts

@@ -14,6 +14,7 @@ import { OnboardingHost } from "../../onboarding/headless/host.js";
 import { MachinesHost } from "../../machines/headless/host.js";
 import { SettingsHost } from "../../settings/headless/host.js";
 import { SidebarHost } from "../../chat/headless/sidebar/host.js";
+import { ViewsHost } from "../../views/headless/host.js";
 //#region src/app/headless/app-host.d.ts
 /** Every area's host an app offers. An area whose host is absent is not shown. */
 interface AppHost {
@@ -47,6 +48,8 @@ interface AppHost {
   sidebar?: SidebarHost;
   /** The terminals: listing, opening and viewing them per scope. Absent: no terminal drawer or tab. */
   terminal?: TerminalHost;
+  /** The stored views of each session (docs/VIEWS.md): their meta, trees, heights and refresh. Absent: a view fence shows its source. */
+  views?: ViewsHost;
   /** Where the side panel's layouts live, and the extension panels. Absent: layouts last as long as the page, no extension panels. */
   workspace?: WorkspaceHost;
 }

package/dist/app/useConfirm.js

@@ -1,7 +1,7 @@
 import { CONFIRM_TITLE_ID, ConfirmDialog } from "../components/ConfirmDialog.js";
 import { useModal, useOptionalModal } from "./ModalProvider.js";
-import { jsx } from "react/jsx-runtime";
 import { useCallback } from "react";
+import { jsx } from "react/jsx-runtime";
 //#region src/app/useConfirm.tsx
 /**
 * The in-app replacement for `window.confirm()`: the design system's ConfirmDialog