systemprompt-mcp 0.44.0

Native Model Context Protocol (MCP) implementation for systemprompt.io. Orchestration, per-server OAuth2, RBAC middleware, and tool-call governance — the core of the AI governance pipeline.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114

//! Notice-message artifact renderer.
//!
//! [`MessageRenderer`] renders a [`MessageArtifact`] into an HTML
//! [`UiResource`]: one severity-styled line per [`NoticeLine`], which is what
//! CLI commands emit when they have status to report rather than data.
//!
//! Copyright (c) systemprompt.io — Business Source License 1.1.
//! See <https://systemprompt.io> for licensing details.

use super::html::{HtmlBuilder, base_styles, html_escape, mcp_app_bridge_script};
use super::typed::artifact_payload;
use crate::error::McpDomainResult;
use crate::services::ui_renderer::{CspPolicy, UiRenderer, UiResource};
use async_trait::async_trait;
use systemprompt_models::a2a::Artifact;
use systemprompt_models::artifacts::{ArtifactType, MessageArtifact, NoticeLine};

#[derive(Debug, Clone, Copy, Default)]
pub struct MessageRenderer;

impl MessageRenderer {
    pub const fn new() -> Self {
        Self
    }
}

#[async_trait]
impl UiRenderer for MessageRenderer {
    fn artifact_type(&self) -> ArtifactType {
        ArtifactType::Message
    }

    async fn render(&self, artifact: &Artifact) -> McpDomainResult<UiResource> {
        let message: MessageArtifact = artifact_payload(artifact)?;
        let title = artifact.title.as_deref().unwrap_or("Result");

        let body = format!(
            r#"<div class="container">
    <h1 class="mcp-app-title">{title}</h1>
    <ul class="notice-list" role="status" aria-live="polite">
        {lines_html}
    </ul>
</div>"#,
            title = html_escape(title),
            lines_html = render_lines(&message.messages),
        );

        let html = HtmlBuilder::new(title)
            .add_style(base_styles())
            .add_style(message_styles())
            .body(&body)
            .add_script(mcp_app_bridge_script())
            .build();

        Ok(UiResource::new(html).with_csp(self.csp_policy()))
    }

    fn csp_policy(&self) -> CspPolicy {
        CspPolicy::strict()
    }
}

fn render_lines(lines: &[NoticeLine]) -> String {
    if lines.is_empty() {
        return r#"<li class="notice notice-info">Command completed with no output.</li>"#
            .to_owned();
    }

    lines
        .iter()
        .map(|line| {
            let level = normalize_level(&line.level);
            // Why: Severity used to be carried by the marker dot and border colour
            // alone — a WCAG 1.4.1 failure on the one artifact type whose
            // entire job is to convey status. The word is visually hidden
            // because the colour already says it to anyone who can see it.
            format!(
                r#"<li class="notice notice-{level}"{alert}><span class="notice-marker" aria-hidden="true"></span><span class="visually-hidden">{label}: </span><span class="notice-text">{text}</span></li>"#,
                alert = if level == "error" {
                    r#" role="alert""#
                } else {
                    ""
                },
                label = html_escape(&level_label(&level)),
                level = html_escape(&level),
                text = html_escape(&line.text),
            )
        })
        .collect::<Vec<_>>()
        .join("\n")
}

fn normalize_level(level: &str) -> String {
    match level.to_ascii_lowercase().as_str() {
        "success" | "ok" => "success".to_owned(),
        "warn" | "warning" => "warning".to_owned(),
        "error" | "err" | "fail" | "failure" => "error".to_owned(),
        _ => "info".to_owned(),
    }
}

const fn message_styles() -> &'static str {
    include_str!("assets/css/message.css")
}

fn level_label(level: &str) -> String {
    match level {
        "error" => "Error",
        "warning" => "Warning",
        "success" => "Success",
        _ => "Info",
    }
    .to_owned()
}