test(apps): address PR #1272 review feedback

- core/mcp/apps.ts: convert getAppResourceUri from a typed const re-export to
  a function declaration so its export style matches isAppTool. Behavior is
  unchanged.
- core/mcp/apps.ts: document the filter-iteration implication on isAppTool —
  callers using tools.filter(isAppTool) will halt on a server-malformed URI.
- apps.test.ts: add the symmetric isAppTool false-case for `_meta.ui` present
  without `resourceUri`.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: cliffhall

clients/web/src/test/core/apps.test.ts

@@ -82,6 +82,10 @@ describe("isAppTool", () => {
     expect(isAppTool(toolWith({ other: "value" }))).toBe(false);
   });
 
+  it("returns false when _meta.ui exists without resourceUri", () => {
+    expect(isAppTool(toolWith({ ui: { visibility: ["model"] } }))).toBe(false);
+  });
+
   it("propagates the underlying throw for an invalid URI", () => {
     expect(() =>
       isAppTool(toolWith({ ui: { resourceUri: "not-a-ui-uri" } })),

core/mcp/apps.ts

@@ -14,16 +14,23 @@ import type { Tool } from "@modelcontextprotocol/sdk/types.js";
  * silently dropping the tool, because a malformed URI is a server bug worth
  * making visible.
  *
- * Re-exported from `@modelcontextprotocol/ext-apps/app-bridge` so that web,
- * CLI, and TUI all consume the same implementation through `@inspector/core`.
+ * Wraps `getToolUiResourceUri` from `@modelcontextprotocol/ext-apps/app-bridge`
+ * so that web, CLI, and TUI all consume the same implementation through
+ * `@inspector/core`.
  */
-export const getAppResourceUri: (tool: Tool) => string | undefined =
-  getToolUiResourceUri;
+export function getAppResourceUri(tool: Tool): string | undefined {
+  return getToolUiResourceUri(tool);
+}
 
 /**
  * Single source of truth for App-tool detection across all Inspector clients.
  * Wraps {@link getAppResourceUri}; throws on a malformed `_meta.ui.resourceUri`
  * for the same reason.
+ *
+ * Note: because this throws on malformed URIs, callers using
+ * `tools.filter(isAppTool)` will halt iteration on the first bad tool. Wrap in
+ * a try/catch (or a safe-predicate helper) at the call site if you need to
+ * tolerate mixed-validity tool lists.
  */
 export function isAppTool(tool: Tool): boolean {
   return getAppResourceUri(tool) !== undefined;