systemprompt-mcp 0.36.0

Native Model Context Protocol (MCP) implementation for systemprompt.io. Orchestration, per-server OAuth2, RBAC middleware, and tool-call governance — the core of the AI governance pipeline.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125

//! HTML builder for artifact UI rendering.
//!
//! Every document built here opens with the generated `MCP_UI` constants and
//! closes with the frame-sizing script, so app code addresses protocol
//! methods through [`UiMethod`](systemprompt_models::mcp::UiMethod) rather
//! than string literals, and no renderer has to opt into host size
//! negotiation.
//!
//! Copyright (c) systemprompt.io — Business Source License 1.1.
//! See <https://systemprompt.io> for licensing details.

use crate::services::ui_renderer::active_theme;
use systemprompt_models::mcp::ui_method_js_constants;

#[derive(Debug)]
pub struct HtmlBuilder {
    title: String,
    styles: Vec<String>,
    scripts: Vec<String>,
    body: String,
}

impl HtmlBuilder {
    pub fn new(title: &str) -> Self {
        Self {
            title: title.to_owned(),
            styles: Vec::new(),
            scripts: Vec::new(),
            body: String::new(),
        }
    }

    pub fn add_style(mut self, css: &str) -> Self {
        self.styles.push(css.to_owned());
        self
    }

    pub fn add_script(mut self, js: &str) -> Self {
        self.scripts.push(js.to_owned());
        self
    }

    pub fn body(mut self, html: &str) -> Self {
        html.clone_into(&mut self.body);
        self
    }

    pub fn build(self) -> String {
        let theme = active_theme();

        let mut sheets = vec![design_tokens().to_owned()];
        if let Some(theme) = theme {
            sheets.push(format!(":root {{\n{}\n}}", theme.tokens));
        }
        sheets.extend(self.styles);
        if let Some(theme) = theme
            && !theme.extra_css.is_empty()
        {
            sheets.push(theme.extra_css.to_owned());
        }
        let styles = format!("<style>\n{}\n</style>", sheets.join("\n"));

        let scripts = {
            let mut all = vec![ui_method_js_constants()];
            all.extend(self.scripts);
            all.push(frame_script().to_owned());
            format!("<script>\n{}\n</script>", all.join("\n"))
        };

        format!(
            r#"<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>{title}</title>
    {styles}
</head>
<body>
{body}
{scripts}
</body>
</html>"#,
            title = html_escape(&self.title),
            styles = styles,
            body = self.body,
            scripts = scripts,
        )
    }
}

pub fn html_escape(s: &str) -> String {
    s.replace('&', "&amp;")
        .replace('<', "&lt;")
        .replace('>', "&gt;")
        .replace('"', "&quot;")
        .replace('\'', "&#39;")
}

pub fn json_to_js_literal(value: &serde_json::Value) -> String {
    serde_json::to_string(value).unwrap_or_else(|_| "null".to_owned())
}

pub const fn base_styles() -> &'static str {
    include_str!("assets/css/base.css")
}

pub const fn design_tokens() -> &'static str {
    include_str!("assets/css/tokens.css")
}

pub const fn mcp_app_bridge_script() -> &'static str {
    include_str!("assets/js/bridge.js")
}

pub const fn frame_script() -> &'static str {
    include_str!("assets/js/frame.js")
}

pub fn artifact_shell_template() -> String {
    include_str!("assets/html/artifact-shell.html")
        .replace(MCP_UI_CONSTANTS_PLACEHOLDER, &ui_method_js_constants())
}

const MCP_UI_CONSTANTS_PLACEHOLDER: &str = "/*MCP_UI_CONSTANTS*/";