@akon-labs/nexus-cli 0.1.9 → 0.1.10

package/dist/extensions/mcp/ui-resource-handler.js

@@ -0,0 +1,210 @@
+import { UrlElicitationRequiredError } from "@modelcontextprotocol/client";
+import { ResourceFetchError, ResourceParseError } from "./errors.js";
+import { logger } from "./logger.js";
+import { SessionRecoveryAuthRequiredError, withSessionRecovery } from "./session-recovery.js";
+import { isServerDisabled, } from "./types.js";
+import { RESOURCE_MIME_TYPE } from "./ui-app-bridge-helpers.js";
+export class UiResourceHandler {
+    log = logger.child({ component: "UiResourceHandler" });
+    manager;
+    config;
+    constructor(manager, config = undefined) {
+        this.manager = manager;
+        this.config = config;
+    }
+    async readUiResource(serverName, uri, options = {}) {
+        const log = this.log.child({ server: serverName, uri });
+        if (!uri.startsWith("ui://")) {
+            throw new ResourceParseError(uri, "URI must start with ui://", { server: serverName });
+        }
+        log.debug("Fetching UI resource");
+        let result;
+        try {
+            const config = options.config ?? this.config;
+            if (config && isServerDisabled(config.mcpServers[serverName])) {
+                throw new Error(`MCP server "${serverName}" is disabled`);
+            }
+            if (config) {
+                this.manager.touch(serverName);
+                this.manager.incrementInFlight(serverName);
+                try {
+                    result = await withSessionRecovery({
+                        manager: this.manager,
+                        config,
+                        ...(options.signal ? { signal: options.signal } : {}),
+                        ...(options.onNeedsAuth ? { onNeedsAuth: options.onNeedsAuth } : {}),
+                    }, serverName, (connection) => connection.client.readResource({ uri }, this.manager.getRequestOptions(serverName, options.signal)));
+                }
+                finally {
+                    this.manager.decrementInFlight(serverName);
+                    this.manager.touch(serverName);
+                }
+            }
+            else {
+                result = await this.manager.readResource(serverName, uri, options.signal);
+            }
+        }
+        catch (error) {
+            if (error instanceof UrlElicitationRequiredError || error instanceof SessionRecoveryAuthRequiredError)
+                throw error;
+            const message = error instanceof Error ? error.message : String(error);
+            log.error("Failed to read resource", error instanceof Error ? error : undefined);
+            throw new ResourceFetchError(uri, message, {
+                server: serverName,
+                ...(error instanceof Error ? { cause: error } : {}),
+            });
+        }
+        const content = selectContent(result, uri);
+        const mimeType = content.mimeType;
+        if (mimeType && !isHtmlMimeType(mimeType)) {
+            log.warn("Unsupported MIME type", { mimeType });
+            throw new ResourceParseError(uri, `unsupported MIME type "${mimeType}" (expected text/html or ${RESOURCE_MIME_TYPE})`, { server: serverName, mimeType });
+        }
+        const html = toHtml(content);
+        if (!html.trim()) {
+            log.warn("Resource content is empty");
+            throw new ResourceParseError(uri, "content is empty", { server: serverName });
+        }
+        const contentMeta = extractUiMeta(content._meta);
+        const listMeta = extractUiMeta(this.getListResourceMeta(serverName, uri));
+        log.debug("Resource loaded successfully", {
+            contentLength: html.length,
+            hasCsp: !!contentMeta.csp || !!listMeta.csp,
+        });
+        return {
+            uri: content.uri ?? uri,
+            html,
+            mimeType: mimeType ?? RESOURCE_MIME_TYPE,
+            meta: {
+                ...((contentMeta.csp ?? listMeta.csp) !== undefined ? { csp: contentMeta.csp ?? listMeta.csp } : {}),
+                ...((contentMeta.permissions ?? listMeta.permissions) !== undefined
+                    ? { permissions: contentMeta.permissions ?? listMeta.permissions }
+                    : {}),
+                ...((contentMeta.domain ?? listMeta.domain) !== undefined
+                    ? { domain: contentMeta.domain ?? listMeta.domain }
+                    : {}),
+                ...((contentMeta.prefersBorder ?? listMeta.prefersBorder) !== undefined
+                    ? { prefersBorder: contentMeta.prefersBorder ?? listMeta.prefersBorder }
+                    : {}),
+            },
+        };
+    }
+    getListResourceMeta(serverName, uri) {
+        const connection = this.manager.getConnection(serverName);
+        if (!connection?.resources?.length)
+            return undefined;
+        const resource = connection.resources.find((entry) => entry.uri === uri);
+        if (!resource || !resource._meta || typeof resource._meta !== "object")
+            return undefined;
+        return resource._meta;
+    }
+}
+function selectContent(result, preferredUri) {
+    const contents = (result.contents ?? []);
+    if (contents.length === 0) {
+        throw new Error(`No contents returned for UI resource: ${preferredUri}`);
+    }
+    const byUri = contents.find((content) => content.uri === preferredUri);
+    if (byUri)
+        return byUri;
+    const byHtmlMime = contents.find((content) => content.mimeType && isHtmlMimeType(content.mimeType));
+    if (byHtmlMime)
+        return byHtmlMime;
+    const firstContent = contents[0];
+    if (!firstContent) {
+        throw new Error(`No contents returned for UI resource: ${preferredUri}`);
+    }
+    return firstContent;
+}
+function isHtmlMimeType(mimeType) {
+    const normalized = mimeType.toLowerCase();
+    return normalized.startsWith("text/html") || normalized === RESOURCE_MIME_TYPE.toLowerCase();
+}
+function toHtml(content) {
+    if (typeof content.text === "string") {
+        return content.text;
+    }
+    if (typeof content.blob === "string") {
+        return Buffer.from(content.blob, "base64").toString("utf-8");
+    }
+    throw new Error(`UI resource ${content.uri ?? "(unknown)"} did not include text or blob content`);
+}
+const OPENAI_CSP_FIELD_MAPPINGS = [
+    ["resource_domains", "resourceDomains"],
+    ["connect_domains", "connectDomains"],
+    ["frame_domains", "frameDomains"],
+];
+const UI_CSP_DOMAIN_FIELDS = [
+    "resourceDomains",
+    "connectDomains",
+    "frameDomains",
+    "baseUriDomains",
+];
+function extractUiMeta(meta) {
+    if (!meta || typeof meta !== "object")
+        return {};
+    const ui = isRecord(meta.ui) ? meta.ui : undefined;
+    const out = {};
+    const openAiCsp = Object.hasOwn(meta, "openai/widgetCSP")
+        ? normalizeOpenAiWidgetCsp(meta["openai/widgetCSP"])
+        : undefined;
+    const hasStandardCsp = !!ui && Object.hasOwn(ui, "csp");
+    const standardCspValue = hasStandardCsp ? ui.csp : undefined;
+    if (hasStandardCsp && !isRecord(standardCspValue)) {
+        // A declared canonical container takes precedence even when malformed.
+        out.csp = {};
+    }
+    else {
+        const standardCsp = hasStandardCsp ? normalizeUiResourceCsp(standardCspValue) : undefined;
+        if (openAiCsp || standardCsp) {
+            out.csp = { ...openAiCsp, ...standardCsp };
+            if (isRecord(standardCspValue)) {
+                for (const [, standardField] of OPENAI_CSP_FIELD_MAPPINGS) {
+                    if (Object.hasOwn(standardCspValue, standardField) &&
+                        !copyStringArray(standardCspValue[standardField])) {
+                        delete out.csp[standardField];
+                    }
+                }
+            }
+        }
+    }
+    if (ui && isRecord(ui.permissions)) {
+        out.permissions = ui.permissions;
+    }
+    if (ui && typeof ui.domain === "string") {
+        out.domain = ui.domain;
+    }
+    if (ui && typeof ui.prefersBorder === "boolean") {
+        out.prefersBorder = ui.prefersBorder;
+    }
+    return out;
+}
+function normalizeUiResourceCsp(value) {
+    if (!isRecord(value))
+        return {};
+    const csp = {};
+    for (const field of UI_CSP_DOMAIN_FIELDS) {
+        const domains = copyStringArray(value[field]);
+        if (domains)
+            csp[field] = domains;
+    }
+    return csp;
+}
+function normalizeOpenAiWidgetCsp(value) {
+    if (!isRecord(value))
+        return {};
+    const csp = {};
+    for (const [sourceField, targetField] of OPENAI_CSP_FIELD_MAPPINGS) {
+        const domains = copyStringArray(value[sourceField]);
+        if (domains)
+            csp[targetField] = domains;
+    }
+    return csp;
+}
+function copyStringArray(value) {
+    return Array.isArray(value) && value.every((entry) => typeof entry === "string") ? [...value] : undefined;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=ui-resource-handler.js.map

package/dist/extensions/mcp/ui-resource-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-resource-handler.js","sourceRoot":"","sources":["../../../src/extensions/mcp/ui-resource-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AACpG,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,gCAAgC,EAA4B,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACxH,OAAO,EACN,gBAAgB,GAMhB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAgBhE,MAAM,OAAO,iBAAiB;IACrB,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACvD,OAAO,CAAmB;IAC1B,MAAM,CAAwB;IAEtC,YAAY,OAAyB,EAAE,MAAM,GAA0B,SAAS,EAAE;QACjF,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IAAA,CACrB;IAED,KAAK,CAAC,cAAc,CACnB,UAAkB,EAClB,GAAW,EACX,OAAO,GAA0B,EAAE,EACN;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QAExD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,2BAA2B,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACxF,CAAC;QAED,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAElC,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;YAC7C,IAAI,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;gBAC/D,MAAM,IAAI,KAAK,CAAC,eAAe,UAAU,eAAe,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACZ,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAC/B,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;gBAC3C,IAAI,CAAC;oBACJ,MAAM,GAAG,MAAM,mBAAmB,CACjC;wBACC,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM;wBACN,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACrD,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACpE,EACD,UAAU,EACV,CAAC,UAAU,EAAE,EAAE,CACd,UAAU,CAAC,MAAM,CAAC,YAAY,CAC7B,EAAE,GAAG,EAAE,EACP,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAC1D,CACF,CAAC;gBACH,CAAC;wBAAS,CAAC;oBACV,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;oBAC3C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAChC,CAAC;YACF,CAAC;iBAAM,CAAC;gBACP,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3E,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,2BAA2B,IAAI,KAAK,YAAY,gCAAgC;gBACpG,MAAM,KAAK,CAAC;YACb,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,GAAG,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACjF,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE;gBAC1C,MAAM,EAAE,UAAU;gBAClB,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAElC,IAAI,QAAQ,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,kBAAkB,CAC3B,GAAG,EACH,0BAA0B,QAAQ,4BAA4B,kBAAkB,GAAG,EACnF,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAChC,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YACtC,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;QAE1E,GAAG,CAAC,KAAK,CAAC,8BAA8B,EAAE;YACzC,aAAa,EAAE,IAAI,CAAC,MAAM;YAC1B,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG;SAC3C,CAAC,CAAC;QAEH,OAAO;YACN,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG;YACvB,IAAI;YACJ,QAAQ,EAAE,QAAQ,IAAI,kBAAkB;YACxC,IAAI,EAAE;gBACL,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpG,GAAG,CAAC,CAAC,WAAW,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,CAAC,KAAK,SAAS;oBAClE,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,EAAE;oBAClE,CAAC,CAAC,EAAE,CAAC;gBACN,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,SAAS;oBACxD,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE;oBACnD,CAAC,CAAC,EAAE,CAAC;gBACN,GAAG,CAAC,CAAC,WAAW,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa,CAAC,KAAK,SAAS;oBACtE,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa,EAAE;oBACxE,CAAC,CAAC,EAAE,CAAC;aACN;SACD,CAAC;IAAA,CACF;IAEO,mBAAmB,CAAC,UAAkB,EAAE,GAAW,EAAuC;QACjG,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM;YAAE,OAAO,SAAS,CAAC;QACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QACzE,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzF,OAAO,QAAQ,CAAC,KAAK,CAAC;IAAA,CACtB;CACD;AAED,SAAS,aAAa,CAAC,MAA0B,EAAE,YAAoB,EAAyB;IAC/F,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IACpE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,yCAAyC,YAAY,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC;IACvE,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAExB,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,IAAI,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpG,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAElC,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,YAAY,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,yCAAyC,YAAY,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,YAAY,CAAC;AAAA,CACpB;AAED,SAAS,cAAc,CAAC,QAAgB,EAAW;IAClD,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC1C,OAAO,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,UAAU,KAAK,kBAAkB,CAAC,WAAW,EAAE,CAAC;AAAA,CAC7F;AAED,SAAS,MAAM,CAAC,OAA8B,EAAU;IACvD,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,OAAO,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,eAAe,OAAO,CAAC,GAAG,IAAI,WAAW,uCAAuC,CAAC,CAAC;AAAA,CAClG;AAED,MAAM,yBAAyB,GAAG;IACjC,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;IACvC,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;IACrC,CAAC,eAAe,EAAE,cAAc,CAAC;CACxB,CAAC;AAEX,MAAM,oBAAoB,GAAqC;IAC9D,iBAAiB;IACjB,gBAAgB;IAChB,cAAc;IACd,gBAAgB;CAChB,CAAC;AAEF,SAAS,aAAa,CAAC,IAAyC,EAAkB;IACjF,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEjD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACnD,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC;QACxD,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACpD,CAAC,CAAC,SAAS,CAAC;IACb,MAAM,cAAc,GAAG,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACxD,MAAM,gBAAgB,GAAG,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAE7D,IAAI,cAAc,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACnD,uEAAuE;QACvE,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;IACd,CAAC;SAAM,CAAC;QACP,MAAM,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC;YAC9B,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,SAAS,EAAE,GAAG,WAAW,EAAE,CAAC;YAC3C,IAAI,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAChC,KAAK,MAAM,CAAC,EAAE,aAAa,CAAC,IAAI,yBAAyB,EAAE,CAAC;oBAC3D,IACC,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,aAAa,CAAC;wBAC9C,CAAC,eAAe,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,EAChD,CAAC;wBACF,OAAO,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;oBAC/B,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,EAAE,IAAI,QAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,WAAW,GAAG,EAAE,CAAC,WAAoC,CAAC;IAC3D,CAAC;IACD,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC;IACxB,CAAC;IACD,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,aAAa,GAAG,EAAE,CAAC,aAAa,CAAC;IACtC,CAAC;IAED,OAAO,GAAG,CAAC;AAAA,CACX;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAiB;IAC9D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEhC,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,oBAAoB,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,IAAI,OAAO;YAAE,GAAG,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;IACnC,CAAC;IACD,OAAO,GAAG,CAAC;AAAA,CACX;AAED,SAAS,wBAAwB,CAAC,KAAc,EAAiB;IAChE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEhC,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,yBAAyB,EAAE,CAAC;QACpE,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QACpD,IAAI,OAAO;YAAE,GAAG,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,CAAC;AAAA,CACX;AAED,SAAS,eAAe,CAAC,KAAc,EAAwB;IAC9D,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CAC1G;AAED,SAAS,QAAQ,CAAC,KAAc,EAAoC;IACnE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAAA,CAC5E","sourcesContent":["import { type ReadResourceResult, UrlElicitationRequiredError } from \"@modelcontextprotocol/client\";\nimport { ResourceFetchError, ResourceParseError } from \"./errors.ts\";\nimport { logger } from \"./logger.ts\";\nimport type { McpServerManager } from \"./server-manager.ts\";\nimport { SessionRecoveryAuthRequiredError, type SessionRecoveryDeps, withSessionRecovery } from \"./session-recovery.ts\";\nimport {\n\tisServerDisabled,\n\ttype McpConfig,\n\ttype UiResourceContent,\n\ttype UiResourceCsp,\n\ttype UiResourceMeta,\n\ttype UiResourcePermissions,\n} from \"./types.ts\";\nimport { RESOURCE_MIME_TYPE } from \"./ui-app-bridge-helpers.ts\";\n\ninterface ResourceContentRecord {\n\turi?: string;\n\tmimeType?: string;\n\ttext?: string;\n\tblob?: string;\n\t_meta?: Record<string, unknown>;\n}\n\ninterface ReadUiResourceOptions {\n\tconfig?: McpConfig;\n\tsignal?: AbortSignal;\n\tonNeedsAuth?: SessionRecoveryDeps[\"onNeedsAuth\"];\n}\n\nexport class UiResourceHandler {\n\tprivate log = logger.child({ component: \"UiResourceHandler\" });\n\tprivate manager: McpServerManager;\n\tprivate config: McpConfig | undefined;\n\n\tconstructor(manager: McpServerManager, config: McpConfig | undefined = undefined) {\n\t\tthis.manager = manager;\n\t\tthis.config = config;\n\t}\n\n\tasync readUiResource(\n\t\tserverName: string,\n\t\turi: string,\n\t\toptions: ReadUiResourceOptions = {},\n\t): Promise<UiResourceContent> {\n\t\tconst log = this.log.child({ server: serverName, uri });\n\n\t\tif (!uri.startsWith(\"ui://\")) {\n\t\t\tthrow new ResourceParseError(uri, \"URI must start with ui://\", { server: serverName });\n\t\t}\n\n\t\tlog.debug(\"Fetching UI resource\");\n\n\t\tlet result: ReadResourceResult;\n\t\ttry {\n\t\t\tconst config = options.config ?? this.config;\n\t\t\tif (config && isServerDisabled(config.mcpServers[serverName])) {\n\t\t\t\tthrow new Error(`MCP server \"${serverName}\" is disabled`);\n\t\t\t}\n\t\t\tif (config) {\n\t\t\t\tthis.manager.touch(serverName);\n\t\t\t\tthis.manager.incrementInFlight(serverName);\n\t\t\t\ttry {\n\t\t\t\t\tresult = await withSessionRecovery(\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tmanager: this.manager,\n\t\t\t\t\t\t\tconfig,\n\t\t\t\t\t\t\t...(options.signal ? { signal: options.signal } : {}),\n\t\t\t\t\t\t\t...(options.onNeedsAuth ? { onNeedsAuth: options.onNeedsAuth } : {}),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tserverName,\n\t\t\t\t\t\t(connection) =>\n\t\t\t\t\t\t\tconnection.client.readResource(\n\t\t\t\t\t\t\t\t{ uri },\n\t\t\t\t\t\t\t\tthis.manager.getRequestOptions(serverName, options.signal),\n\t\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t\t} finally {\n\t\t\t\t\tthis.manager.decrementInFlight(serverName);\n\t\t\t\t\tthis.manager.touch(serverName);\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tresult = await this.manager.readResource(serverName, uri, options.signal);\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tif (error instanceof UrlElicitationRequiredError || error instanceof SessionRecoveryAuthRequiredError)\n\t\t\t\tthrow error;\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\tlog.error(\"Failed to read resource\", error instanceof Error ? error : undefined);\n\t\t\tthrow new ResourceFetchError(uri, message, {\n\t\t\t\tserver: serverName,\n\t\t\t\t...(error instanceof Error ? { cause: error } : {}),\n\t\t\t});\n\t\t}\n\n\t\tconst content = selectContent(result, uri);\n\t\tconst mimeType = content.mimeType;\n\n\t\tif (mimeType && !isHtmlMimeType(mimeType)) {\n\t\t\tlog.warn(\"Unsupported MIME type\", { mimeType });\n\t\t\tthrow new ResourceParseError(\n\t\t\t\turi,\n\t\t\t\t`unsupported MIME type \"${mimeType}\" (expected text/html or ${RESOURCE_MIME_TYPE})`,\n\t\t\t\t{ server: serverName, mimeType },\n\t\t\t);\n\t\t}\n\n\t\tconst html = toHtml(content);\n\t\tif (!html.trim()) {\n\t\t\tlog.warn(\"Resource content is empty\");\n\t\t\tthrow new ResourceParseError(uri, \"content is empty\", { server: serverName });\n\t\t}\n\n\t\tconst contentMeta = extractUiMeta(content._meta);\n\t\tconst listMeta = extractUiMeta(this.getListResourceMeta(serverName, uri));\n\n\t\tlog.debug(\"Resource loaded successfully\", {\n\t\t\tcontentLength: html.length,\n\t\t\thasCsp: !!contentMeta.csp || !!listMeta.csp,\n\t\t});\n\n\t\treturn {\n\t\t\turi: content.uri ?? uri,\n\t\t\thtml,\n\t\t\tmimeType: mimeType ?? RESOURCE_MIME_TYPE,\n\t\t\tmeta: {\n\t\t\t\t...((contentMeta.csp ?? listMeta.csp) !== undefined ? { csp: contentMeta.csp ?? listMeta.csp } : {}),\n\t\t\t\t...((contentMeta.permissions ?? listMeta.permissions) !== undefined\n\t\t\t\t\t? { permissions: contentMeta.permissions ?? listMeta.permissions }\n\t\t\t\t\t: {}),\n\t\t\t\t...((contentMeta.domain ?? listMeta.domain) !== undefined\n\t\t\t\t\t? { domain: contentMeta.domain ?? listMeta.domain }\n\t\t\t\t\t: {}),\n\t\t\t\t...((contentMeta.prefersBorder ?? listMeta.prefersBorder) !== undefined\n\t\t\t\t\t? { prefersBorder: contentMeta.prefersBorder ?? listMeta.prefersBorder }\n\t\t\t\t\t: {}),\n\t\t\t},\n\t\t};\n\t}\n\n\tprivate getListResourceMeta(serverName: string, uri: string): Record<string, unknown> | undefined {\n\t\tconst connection = this.manager.getConnection(serverName);\n\t\tif (!connection?.resources?.length) return undefined;\n\t\tconst resource = connection.resources.find((entry) => entry.uri === uri);\n\t\tif (!resource || !resource._meta || typeof resource._meta !== \"object\") return undefined;\n\t\treturn resource._meta;\n\t}\n}\n\nfunction selectContent(result: ReadResourceResult, preferredUri: string): ResourceContentRecord {\n\tconst contents = (result.contents ?? []) as ResourceContentRecord[];\n\tif (contents.length === 0) {\n\t\tthrow new Error(`No contents returned for UI resource: ${preferredUri}`);\n\t}\n\n\tconst byUri = contents.find((content) => content.uri === preferredUri);\n\tif (byUri) return byUri;\n\n\tconst byHtmlMime = contents.find((content) => content.mimeType && isHtmlMimeType(content.mimeType));\n\tif (byHtmlMime) return byHtmlMime;\n\n\tconst firstContent = contents[0];\n\tif (!firstContent) {\n\t\tthrow new Error(`No contents returned for UI resource: ${preferredUri}`);\n\t}\n\treturn firstContent;\n}\n\nfunction isHtmlMimeType(mimeType: string): boolean {\n\tconst normalized = mimeType.toLowerCase();\n\treturn normalized.startsWith(\"text/html\") || normalized === RESOURCE_MIME_TYPE.toLowerCase();\n}\n\nfunction toHtml(content: ResourceContentRecord): string {\n\tif (typeof content.text === \"string\") {\n\t\treturn content.text;\n\t}\n\n\tif (typeof content.blob === \"string\") {\n\t\treturn Buffer.from(content.blob, \"base64\").toString(\"utf-8\");\n\t}\n\n\tthrow new Error(`UI resource ${content.uri ?? \"(unknown)\"} did not include text or blob content`);\n}\n\nconst OPENAI_CSP_FIELD_MAPPINGS = [\n\t[\"resource_domains\", \"resourceDomains\"],\n\t[\"connect_domains\", \"connectDomains\"],\n\t[\"frame_domains\", \"frameDomains\"],\n] as const;\n\nconst UI_CSP_DOMAIN_FIELDS: readonly (keyof UiResourceCsp)[] = [\n\t\"resourceDomains\",\n\t\"connectDomains\",\n\t\"frameDomains\",\n\t\"baseUriDomains\",\n];\n\nfunction extractUiMeta(meta: Record<string, unknown> | undefined): UiResourceMeta {\n\tif (!meta || typeof meta !== \"object\") return {};\n\n\tconst ui = isRecord(meta.ui) ? meta.ui : undefined;\n\tconst out: UiResourceMeta = {};\n\tconst openAiCsp = Object.hasOwn(meta, \"openai/widgetCSP\")\n\t\t? normalizeOpenAiWidgetCsp(meta[\"openai/widgetCSP\"])\n\t\t: undefined;\n\tconst hasStandardCsp = !!ui && Object.hasOwn(ui, \"csp\");\n\tconst standardCspValue = hasStandardCsp ? ui.csp : undefined;\n\n\tif (hasStandardCsp && !isRecord(standardCspValue)) {\n\t\t// A declared canonical container takes precedence even when malformed.\n\t\tout.csp = {};\n\t} else {\n\t\tconst standardCsp = hasStandardCsp ? normalizeUiResourceCsp(standardCspValue) : undefined;\n\t\tif (openAiCsp || standardCsp) {\n\t\t\tout.csp = { ...openAiCsp, ...standardCsp };\n\t\t\tif (isRecord(standardCspValue)) {\n\t\t\t\tfor (const [, standardField] of OPENAI_CSP_FIELD_MAPPINGS) {\n\t\t\t\t\tif (\n\t\t\t\t\t\tObject.hasOwn(standardCspValue, standardField) &&\n\t\t\t\t\t\t!copyStringArray(standardCspValue[standardField])\n\t\t\t\t\t) {\n\t\t\t\t\t\tdelete out.csp[standardField];\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\tif (ui && isRecord(ui.permissions)) {\n\t\tout.permissions = ui.permissions as UiResourcePermissions;\n\t}\n\tif (ui && typeof ui.domain === \"string\") {\n\t\tout.domain = ui.domain;\n\t}\n\tif (ui && typeof ui.prefersBorder === \"boolean\") {\n\t\tout.prefersBorder = ui.prefersBorder;\n\t}\n\n\treturn out;\n}\n\nfunction normalizeUiResourceCsp(value: unknown): UiResourceCsp {\n\tif (!isRecord(value)) return {};\n\n\tconst csp: UiResourceCsp = {};\n\tfor (const field of UI_CSP_DOMAIN_FIELDS) {\n\t\tconst domains = copyStringArray(value[field]);\n\t\tif (domains) csp[field] = domains;\n\t}\n\treturn csp;\n}\n\nfunction normalizeOpenAiWidgetCsp(value: unknown): UiResourceCsp {\n\tif (!isRecord(value)) return {};\n\n\tconst csp: UiResourceCsp = {};\n\tfor (const [sourceField, targetField] of OPENAI_CSP_FIELD_MAPPINGS) {\n\t\tconst domains = copyStringArray(value[sourceField]);\n\t\tif (domains) csp[targetField] = domains;\n\t}\n\treturn csp;\n}\n\nfunction copyStringArray(value: unknown): string[] | undefined {\n\treturn Array.isArray(value) && value.every((entry) => typeof entry === \"string\") ? [...value] : undefined;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n"]}

package/dist/extensions/mcp/ui-server.d.ts

@@ -0,0 +1,52 @@
+import type { CallToolResult } from "@modelcontextprotocol/client";
+import type { ConsentManager } from "./consent-manager.ts";
+import type { McpServerManager } from "./server-manager.ts";
+import { type SessionRecoveryDeps } from "./session-recovery.ts";
+import type { McpExtensionState } from "./state.ts";
+import { type McpConfig, type UiHostContext, type UiMessageParams, type UiModelContextParams, type UiResourceContent, type UiSessionMessages, type UiStreamSummary } from "./types.ts";
+export interface UiServerOptions {
+    serverName: string;
+    toolName: string;
+    toolArgs: Record<string, unknown>;
+    resource: UiResourceContent;
+    manager: McpServerManager;
+    /**
+     * Live extension config, used to re-read the server definition when
+     * recovering a terminated Streamable HTTP session (see
+     * session-recovery.ts). Optional so existing embedders/tests that don't
+     * need session recovery aren't forced to supply it; without it, proxied
+     * tool calls run without recovery (unchanged pre-existing behavior).
+     */
+    config?: McpConfig;
+    /** Live state enables TUI approval prompts for iframe-originated tool calls. */
+    state?: McpExtensionState;
+    onNeedsAuth?: SessionRecoveryDeps["onNeedsAuth"];
+    consentManager: ConsentManager;
+    hostContext?: UiHostContext;
+    initialResultPromise?: Promise<CallToolResult>;
+    sessionToken?: string;
+    port?: number;
+    onMessage?: (params: UiMessageParams) => Promise<void> | void;
+    onContextUpdate?: (params: UiModelContextParams) => Promise<void> | void;
+    onComplete?: (reason: string) => void;
+}
+export interface UiServerHandle {
+    url: string;
+    port: number;
+    sessionToken: string;
+    serverName: string;
+    toolName: string;
+    viewer?: "browser" | "glimpse" | "suppressed";
+    windowOpen?: boolean;
+    close: (reason?: string) => void;
+    sendToolInput: (args: Record<string, unknown>) => void;
+    sendToolResult: (result: CallToolResult) => void;
+    sendResultPatch: (result: CallToolResult) => void;
+    sendToolCancelled: (reason: string) => void;
+    sendHostContext: (context: UiHostContext) => void;
+    /** Get accumulated messages from this session */
+    getSessionMessages: () => UiSessionMessages;
+    getStreamSummary: () => UiStreamSummary | undefined;
+}
+export declare function startUiServer(options: UiServerOptions): Promise<UiServerHandle>;
+//# sourceMappingURL=ui-server.d.ts.map

package/dist/extensions/mcp/ui-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-server.d.ts","sourceRoot":"","sources":["../../../src/extensions/mcp/ui-server.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAmB,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEpF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAK3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAoC,KAAK,mBAAmB,EAAuB,MAAM,uBAAuB,CAAC;AACxH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,OAAO,EAKN,KAAK,SAAS,EAId,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAIzB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,MAAM,YAAY,CAAC;AAcpB,MAAM,WAAW,eAAe;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,EAAE,gBAAgB,CAAC;IAC1B;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,gFAAgF;IAChF,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,WAAW,CAAC,EAAE,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACjD,cAAc,EAAE,cAAc,CAAC;IAC/B,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B,oBAAoB,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC9D,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACzE,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,cAAc;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,YAAY,CAAC;IAC9C,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACvD,cAAc,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI,CAAC;IACjD,eAAe,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI,CAAC;IAClD,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,eAAe,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,IAAI,CAAC;IAClD,iDAAiD;IACjD,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;IAC5C,gBAAgB,EAAE,MAAM,eAAe,GAAG,SAAS,CAAC;CACpD;AAED,wBAAsB,aAAa,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAmrBrF","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport fs from \"node:fs/promises\";\nimport http, { type IncomingMessage, type ServerResponse } from \"node:http\";\nimport path from \"node:path\";\nimport type { CallToolRequest, CallToolResult } from \"@modelcontextprotocol/client\";\nimport { ContentBlockSchema } from \"@modelcontextprotocol/core\";\nimport type { ConsentManager } from \"./consent-manager.ts\";\nimport { ServerError, wrapError } from \"./errors.ts\";\nimport { buildCspMetaContent, buildHostHtmlTemplate } from \"./host-html-template.ts\";\nimport { logger } from \"./logger.ts\";\nimport { resourceNameToToolName } from \"./resource-tools.ts\";\nimport type { McpServerManager } from \"./server-manager.ts\";\nimport { SessionRecoveryAuthRequiredError, type SessionRecoveryDeps, withSessionRecovery } from \"./session-recovery.ts\";\nimport type { McpExtensionState } from \"./state.ts\";\nimport { ensureToolCallApproved, isToolCallApprovalRequired } from \"./tool-approval.ts\";\nimport {\n\tcreateUiModelContextUpdate,\n\textractUiPromptText,\n\tgetVisualizationStreamEnvelope,\n\tisServerDisabled,\n\ttype McpConfig,\n\ttype UiDisplayMode,\n\ttype UiDisplayModeRequest,\n\ttype UiDisplayModeResult,\n\ttype UiHostContext,\n\ttype UiMessageParams,\n\ttype UiModelContextParams,\n\ttype UiOpenLinkResult,\n\ttype UiProxyRequestBody,\n\ttype UiProxyResult,\n\ttype UiResourceContent,\n\ttype UiSessionMessages,\n\ttype UiStreamSummary,\n} from \"./types.ts\";\nimport { buildAllowAttribute } from \"./ui-app-bridge-helpers.ts\";\nimport { extractUiToolVisibility, isUiToolCallableByApp, isUiToolVisibleToModel } from \"./ui-tool-visibility.ts\";\nimport { formatAuthRequiredMessage, normalizeToolArguments } from \"./utils.ts\";\n\nconst MAX_BODY_SIZE = 2 * 1024 * 1024;\nconst ABANDONED_GRACE_MS = 60_000;\nconst WATCHDOG_INTERVAL_MS = 5_000;\nconst MAX_EVENT_LOG = 128;\nconst MAX_CONTEXT_UPDATES = 20;\nconst MOSHI_DISCOVERY_PORT_START = 8377;\nconst MOSHI_DISCOVERY_PORT_END = 8396;\nlet nextMoshiDiscoveryPort = MOSHI_DISCOVERY_PORT_START;\n\nexport interface UiServerOptions {\n\tserverName: string;\n\ttoolName: string;\n\ttoolArgs: Record<string, unknown>;\n\tresource: UiResourceContent;\n\tmanager: McpServerManager;\n\t/**\n\t * Live extension config, used to re-read the server definition when\n\t * recovering a terminated Streamable HTTP session (see\n\t * session-recovery.ts). Optional so existing embedders/tests that don't\n\t * need session recovery aren't forced to supply it; without it, proxied\n\t * tool calls run without recovery (unchanged pre-existing behavior).\n\t */\n\tconfig?: McpConfig;\n\t/** Live state enables TUI approval prompts for iframe-originated tool calls. */\n\tstate?: McpExtensionState;\n\tonNeedsAuth?: SessionRecoveryDeps[\"onNeedsAuth\"];\n\tconsentManager: ConsentManager;\n\thostContext?: UiHostContext;\n\tinitialResultPromise?: Promise<CallToolResult>;\n\tsessionToken?: string;\n\tport?: number;\n\tonMessage?: (params: UiMessageParams) => Promise<void> | void;\n\tonContextUpdate?: (params: UiModelContextParams) => Promise<void> | void;\n\tonComplete?: (reason: string) => void;\n}\n\nexport interface UiServerHandle {\n\turl: string;\n\tport: number;\n\tsessionToken: string;\n\tserverName: string;\n\ttoolName: string;\n\tviewer?: \"browser\" | \"glimpse\" | \"suppressed\";\n\twindowOpen?: boolean;\n\tclose: (reason?: string) => void;\n\tsendToolInput: (args: Record<string, unknown>) => void;\n\tsendToolResult: (result: CallToolResult) => void;\n\tsendResultPatch: (result: CallToolResult) => void;\n\tsendToolCancelled: (reason: string) => void;\n\tsendHostContext: (context: UiHostContext) => void;\n\t/** Get accumulated messages from this session */\n\tgetSessionMessages: () => UiSessionMessages;\n\tgetStreamSummary: () => UiStreamSummary | undefined;\n}\n\nexport async function startUiServer(options: UiServerOptions): Promise<UiServerHandle> {\n\tconst sessionToken = options.sessionToken ?? randomUUID();\n\tconst uiResourceToken = randomUUID();\n\tconst log = logger.child({\n\t\tcomponent: \"UiServer\",\n\t\tserver: options.serverName,\n\t\ttool: options.toolName,\n\t\tsession: sessionToken.slice(0, 8),\n\t});\n\n\tlog.debug(\"Starting UI server\");\n\n\tconst sseClients = new Set<ServerResponse>();\n\tlet completed = false;\n\tlet lastHeartbeatAt = Date.now();\n\tlet watchdog: NodeJS.Timeout | null = null;\n\tlet currentDisplayMode: UiDisplayMode = options.hostContext?.displayMode ?? \"inline\";\n\tlet nextEventId = 1;\n\tconst eventLog: Array<{ id: number; name: string; payload: unknown }> = [];\n\tlet latestCheckpointEventId: number | undefined;\n\tlet streamSummary: UiStreamSummary | undefined;\n\n\t// Track messages from UI for retrieval\n\tconst sessionMessages: UiSessionMessages = {\n\t\tprompts: [],\n\t\tnotifications: [],\n\t\tintents: [],\n\t\tcontexts: [],\n\t};\n\n\tconst hostContext: UiHostContext = {\n\t\tdisplayMode: currentDisplayMode,\n\t\tavailableDisplayModes: [\"inline\", \"fullscreen\", \"pip\"],\n\t\tplatform: \"desktop\",\n\t\t...options.hostContext,\n\t\t// Only include toolInfo if caller provides full tool definition with inputSchema\n\t\t// The App validates toolInfo.tool.inputSchema as required object\n\t};\n\n\tconst initialStreamContext = hostContext[\"nexus-mcp/stream\"];\n\tif (initialStreamContext && typeof initialStreamContext === \"object\") {\n\t\tconst streamId = (initialStreamContext as { streamId?: unknown }).streamId;\n\t\tconst mode = (initialStreamContext as { mode?: unknown }).mode;\n\t\tif (typeof streamId === \"string\" && (mode === \"eager\" || mode === \"stream-first\")) {\n\t\t\tstreamSummary = {\n\t\t\t\tstreamId,\n\t\t\t\tmode,\n\t\t\t\tframes: 0,\n\t\t\t\tphases: [],\n\t\t\t};\n\t\t}\n\t}\n\n\tconst isAppOnlyTool = (toolName: string): boolean => {\n\t\tconst toolDefinition = options.manager\n\t\t\t.getConnection(options.serverName)\n\t\t\t?.tools?.find((tool) => tool.name === toolName);\n\t\tif (!toolDefinition) return false;\n\t\tconst visibility = extractUiToolVisibility(toolDefinition._meta);\n\t\treturn isUiToolCallableByApp(visibility) && !isUiToolVisibleToModel(visibility);\n\t};\n\n\tconst recordUiMessage = async (msgParams: UiMessageParams): Promise<void> => {\n\t\tconst promptText = extractUiPromptText(msgParams);\n\n\t\t// Track messages by type (order: prompt → intent → notify)\n\t\t// Must match the order in index.ts onMessage handler\n\t\tif (promptText) {\n\t\t\tsessionMessages.prompts.push(promptText);\n\t\t\tlog.debug(\"UI prompt received\", { prompt: promptText.slice(0, 100) });\n\t\t} else if (msgParams.type === \"intent\" || msgParams.intent) {\n\t\t\tconst intentName = msgParams.intent ?? \"\";\n\t\t\tif (intentName) {\n\t\t\t\tsessionMessages.intents.push({\n\t\t\t\t\tintent: intentName,\n\t\t\t\t\t...(msgParams.params !== undefined ? { params: msgParams.params } : {}),\n\t\t\t\t});\n\t\t\t\tlog.debug(\"UI intent received\", { intent: intentName });\n\t\t\t}\n\t\t} else if (msgParams.type === \"notify\" || msgParams.message) {\n\t\t\tconst notifyText = msgParams.message ?? \"\";\n\t\t\tif (notifyText) {\n\t\t\t\tsessionMessages.notifications.push(notifyText);\n\t\t\t\tlog.debug(\"UI notification\", { message: notifyText.slice(0, 100) });\n\t\t\t}\n\t\t}\n\n\t\tawait options.onMessage?.(msgParams);\n\t};\n\n\tconst touchHeartbeat = () => {\n\t\tlastHeartbeatAt = Date.now();\n\t};\n\n\tconst updateStreamSummary = (eventId: number, payload: unknown) => {\n\t\tconst envelope = getVisualizationStreamEnvelope(\n\t\t\t(payload as { structuredContent?: unknown } | null)?.structuredContent,\n\t\t);\n\t\tif (!envelope) return;\n\t\tif (envelope.frameType === \"checkpoint\" || envelope.frameType === \"final\") {\n\t\t\tlatestCheckpointEventId = eventId;\n\t\t}\n\t\tif (!streamSummary) {\n\t\t\tstreamSummary = {\n\t\t\t\tstreamId: envelope.streamId,\n\t\t\t\tmode: \"eager\",\n\t\t\t\tframes: 0,\n\t\t\t\tphases: [],\n\t\t\t};\n\t\t}\n\t\tstreamSummary.frames += 1;\n\t\tif (!streamSummary.phases.includes(envelope.phase)) {\n\t\t\tstreamSummary.phases.push(envelope.phase);\n\t\t}\n\t\tstreamSummary.finalStatus = envelope.status;\n\t\tif (envelope.message !== undefined) streamSummary.lastMessage = envelope.message;\n\t\telse delete streamSummary.lastMessage;\n\t};\n\n\tconst serializeEvent = (eventId: number, name: string, payload: unknown): string => {\n\t\treturn `id: ${eventId}\\nevent: ${name}\\ndata: ${JSON.stringify(payload)}\\n\\n`;\n\t};\n\n\tconst getLatestCheckpointIndex = () => {\n\t\tconst firstEventId = eventLog[0]?.id;\n\t\tif (latestCheckpointEventId === undefined || firstEventId === undefined || latestCheckpointEventId < firstEventId)\n\t\t\treturn -1;\n\t\treturn latestCheckpointEventId - firstEventId;\n\t};\n\n\tconst pruneEventLog = () => {\n\t\tif (eventLog.length <= MAX_EVENT_LOG) return;\n\t\tconst latestCheckpointIndex = getLatestCheckpointIndex();\n\n\t\tif (latestCheckpointIndex > 0) {\n\t\t\teventLog.splice(0, latestCheckpointIndex);\n\t\t}\n\n\t\tif (eventLog.length > MAX_EVENT_LOG) {\n\t\t\teventLog.splice(0, eventLog.length - MAX_EVENT_LOG);\n\t\t}\n\t};\n\n\tconst pushEvent = (name: string, payload: unknown) => {\n\t\tif (completed) return;\n\t\tconst eventId = nextEventId++;\n\t\teventLog.push({ id: eventId, name, payload });\n\t\tupdateStreamSummary(eventId, payload);\n\t\tpruneEventLog();\n\t\tconst chunk = serializeEvent(eventId, name, payload);\n\t\tfor (const client of sseClients) {\n\t\t\ttry {\n\t\t\t\tclient.write(chunk);\n\t\t\t} catch {\n\t\t\t\tsseClients.delete(client);\n\t\t\t}\n\t\t}\n\t};\n\n\tconst replayEvents = (res: ServerResponse, lastEventIdHeader?: string | null) => {\n\t\tconst parsedLastId = lastEventIdHeader ? Number(lastEventIdHeader) : Number.NaN;\n\t\tconst eventsToReplay = Number.isFinite(parsedLastId)\n\t\t\t? eventLog.filter((entry) => entry.id > parsedLastId)\n\t\t\t: (() => {\n\t\t\t\t\tconst latestCheckpointIndex = getLatestCheckpointIndex();\n\t\t\t\t\treturn latestCheckpointIndex >= 0 ? eventLog.slice(latestCheckpointIndex) : eventLog;\n\t\t\t\t})();\n\n\t\tfor (const entry of eventsToReplay) {\n\t\t\ttry {\n\t\t\t\tres.write(serializeEvent(entry.id, entry.name, entry.payload));\n\t\t\t} catch {\n\t\t\t\tsseClients.delete(res);\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\t};\n\n\tconst closeSse = () => {\n\t\tfor (const client of sseClients) {\n\t\t\ttry {\n\t\t\t\tclient.end();\n\t\t\t} catch {}\n\t\t}\n\t\tsseClients.clear();\n\t};\n\n\tconst stopWatchdog = () => {\n\t\tif (!watchdog) return;\n\t\tclearInterval(watchdog);\n\t\twatchdog = null;\n\t};\n\n\tconst markCompleted = (reason: string) => {\n\t\tif (completed) return;\n\t\tlog.debug(\"Session completed\", { reason });\n\t\tpushEvent(\"session-complete\", { reason });\n\t\tcompleted = true;\n\t\tstopWatchdog();\n\t\toptions.onComplete?.(reason);\n\t};\n\n\tconst server = http.createServer(async (req, res) => {\n\t\ttry {\n\t\t\tconst method = req.method || \"GET\";\n\t\t\tconst hostHeader = req.headers.host;\n\t\t\tconst url = new URL(req.url || \"/\", `http://${hostHeader || \"127.0.0.1\"}`);\n\t\t\tif (hostHeader !== undefined && !isAllowedHost(url.hostname)) {\n\t\t\t\tsendText(res, 403, \"Invalid host\");\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (method === \"HEAD\" && url.pathname === \"/\") {\n\t\t\t\tres.writeHead(200, { \"Content-Type\": \"text/html; charset=utf-8\" });\n\t\t\t\tres.end();\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (method === \"GET\" && url.pathname === \"/\") {\n\t\t\t\tif (!url.searchParams.has(\"session\")) {\n\t\t\t\t\tres.writeHead(200, { \"Content-Type\": \"text/html; charset=utf-8\", \"Cache-Control\": \"no-store\" });\n\t\t\t\t\tres.end(\n\t\t\t\t\t\t'<!doctype html><html><head><meta charset=\"utf-8\"><title>MCP UI</title></head>' +\n\t\t\t\t\t\t\t\"<body><p>Open the authenticated MCP UI URL shown by Nexus.</p></body></html>\",\n\t\t\t\t\t);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tif (!validateTokenQuery(url, sessionToken, res)) return;\n\t\t\t\ttouchHeartbeat();\n\n\t\t\t\tconst html = buildHostHtmlTemplate({\n\t\t\t\t\tsessionToken,\n\t\t\t\t\tuiResourceToken,\n\t\t\t\t\tserverName: options.serverName,\n\t\t\t\t\ttoolName: options.toolName,\n\t\t\t\t\ttoolArgs: options.toolArgs,\n\t\t\t\t\tresource: options.resource,\n\t\t\t\t\tallowAttribute: buildAllowAttribute(options.resource.meta.permissions),\n\t\t\t\t\trequireToolConsent: options.consentManager.requiresPrompt(options.serverName),\n\t\t\t\t\tcacheToolConsent: options.consentManager.shouldCacheConsent(),\n\t\t\t\t\thostContext,\n\t\t\t\t});\n\n\t\t\t\tres.writeHead(200, {\n\t\t\t\t\t\"Content-Type\": \"text/html; charset=utf-8\",\n\t\t\t\t\t\"Cache-Control\": \"no-store\",\n\t\t\t\t});\n\t\t\t\tres.end(html);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (method === \"GET\" && url.pathname === \"/events\") {\n\t\t\t\tif (!validateTokenQuery(url, sessionToken, res)) return;\n\t\t\t\ttouchHeartbeat();\n\t\t\t\tlog.debug(\"SSE client connected\", { clientCount: sseClients.size + 1 });\n\t\t\t\tres.writeHead(200, {\n\t\t\t\t\t\"Content-Type\": \"text/event-stream\",\n\t\t\t\t\t\"Cache-Control\": \"no-cache, no-transform\",\n\t\t\t\t\tConnection: \"keep-alive\",\n\t\t\t\t\t\"X-Accel-Buffering\": \"no\",\n\t\t\t\t});\n\t\t\t\tres.write(\": connected\\n\\n\");\n\t\t\t\tsseClients.add(res);\n\t\t\t\treplayEvents(res, req.headers[\"last-event-id\"] ? String(req.headers[\"last-event-id\"]) : null);\n\t\t\t\treq.on(\"close\", () => {\n\t\t\t\t\tsseClients.delete(res);\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (method === \"GET\" && url.pathname === \"/health\") {\n\t\t\t\tif (!validateTokenQuery(url, sessionToken, res)) return;\n\t\t\t\tsendJson(res, 200, { ok: true, result: { healthy: true } });\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (method === \"GET\" && url.pathname === \"/ui-app\") {\n\t\t\t\tif (!validateTokenQuery(url, uiResourceToken, res, \"resource\")) return;\n\t\t\t\ttouchHeartbeat();\n\t\t\t\t// Enforce host metadata independently of where app HTML places its document head.\n\t\t\t\tconst cspContent = buildCspMetaContent(options.resource.meta.csp);\n\t\t\t\tres.writeHead(200, {\n\t\t\t\t\t\"Content-Type\": \"text/html; charset=utf-8\",\n\t\t\t\t\t\"Cache-Control\": \"no-store\",\n\t\t\t\t\t\"Content-Security-Policy\": cspContent,\n\t\t\t\t});\n\t\t\t\tres.end(options.resource.html);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (method === \"GET\" && url.pathname === \"/app-bridge.bundle.js\") {\n\t\t\t\t// Serve the pre-bundled AppBridge module\n\t\t\t\tconst bundlePath = path.join(import.meta.dirname, \"app-bridge.bundle.js\");\n\t\t\t\ttry {\n\t\t\t\t\tconst content = await fs.readFile(bundlePath, \"utf-8\");\n\t\t\t\t\tres.writeHead(200, {\n\t\t\t\t\t\t\"Content-Type\": \"application/javascript\",\n\t\t\t\t\t\t\"Cache-Control\": \"public, max-age=31536000\",\n\t\t\t\t\t});\n\t\t\t\t\tres.end(content);\n\t\t\t\t} catch {\n\t\t\t\t\tsendJson(res, 500, { ok: false, error: \"Bundle not found\" });\n\t\t\t\t}\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (method !== \"POST\") {\n\t\t\t\tsendJson(res, 404, { ok: false, error: \"Not found\" });\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst body = await parseBody(req, res);\n\t\t\tif (!body) return;\n\t\t\tif (!validateTokenBody(body, sessionToken, res)) return;\n\t\t\tconst params = body.params ?? {};\n\t\t\ttouchHeartbeat();\n\n\t\t\tif (url.pathname === \"/proxy/tools/call\") {\n\t\t\t\toptions.consentManager.ensureApproved(options.serverName);\n\t\t\t\tconst callParams = params as CallToolRequest[\"params\"];\n\t\t\t\tif (!callParams || typeof callParams.name !== \"string\" || !callParams.name.trim()) {\n\t\t\t\t\tsendJson(res, 400, { ok: false, error: \"Invalid tools/call params\" });\n\t\t\t\t\treturn;\n\t\t\t\t}\n\n\t\t\t\tconst connection = options.manager.getConnection(options.serverName);\n\t\t\t\tif (!connection || connection.status !== \"connected\") {\n\t\t\t\t\tsendJson(res, 503, { ok: false, error: `Server \"${options.serverName}\" is not connected` });\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tif (\n\t\t\t\t\tisServerDisabled(options.config?.mcpServers[options.serverName]) ||\n\t\t\t\t\tisServerDisabled(connection.definition)\n\t\t\t\t) {\n\t\t\t\t\tsendJson(res, 503, { ok: false, error: `Server \"${options.serverName}\" is disabled` });\n\t\t\t\t\treturn;\n\t\t\t\t}\n\n\t\t\t\tconst toolDefinitions = Array.isArray(connection.tools) ? connection.tools : [];\n\t\t\t\tconst toolDefinition = toolDefinitions.find((tool) => tool.name === callParams.name);\n\t\t\t\tif (!toolDefinition) {\n\t\t\t\t\tsendJson(res, 403, { ok: false, error: `MCP tool \"${callParams.name}\" is not callable by apps` });\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tconst uiVisibility = extractUiToolVisibility(toolDefinition._meta);\n\t\t\t\tif (!isUiToolCallableByApp(uiVisibility)) {\n\t\t\t\t\tsendJson(res, 403, { ok: false, error: `MCP tool \"${callParams.name}\" is not callable by apps` });\n\t\t\t\t\treturn;\n\t\t\t\t}\n\n\t\t\t\tlet normalizedArguments: Record<string, unknown>;\n\t\t\t\ttry {\n\t\t\t\t\tnormalizedArguments = normalizeToolArguments(\n\t\t\t\t\t\tcallParams.arguments,\n\t\t\t\t\t\t`tool \"${callParams.name}\" arguments`,\n\t\t\t\t\t);\n\t\t\t\t} catch (error) {\n\t\t\t\t\tsendJson(res, 400, { ok: false, error: error instanceof Error ? error.message : String(error) });\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tconst callArgs = {\n\t\t\t\t\tname: callParams.name,\n\t\t\t\t\targuments: normalizedArguments,\n\t\t\t\t};\n\t\t\t\tconst toolMeta = {\n\t\t\t\t\tname: callParams.name,\n\t\t\t\t\toriginalName: callParams.name,\n\t\t\t\t\tdescription: toolDefinition?.description ?? \"\",\n\t\t\t\t\t...(toolDefinition?.inputSchema !== undefined ? { inputSchema: toolDefinition.inputSchema } : {}),\n\t\t\t\t\t...(uiVisibility !== undefined ? { uiVisibility } : {}),\n\t\t\t\t};\n\t\t\t\tconst approvalMetadata = new Map(options.state?.toolMetadata);\n\t\t\t\tconst definition =\n\t\t\t\t\toptions.config?.mcpServers[options.serverName] ?? options.state?.config.mcpServers[options.serverName];\n\t\t\t\tapprovalMetadata.set(options.serverName, [\n\t\t\t\t\t...connection.tools.map((tool) => ({\n\t\t\t\t\t\tname: tool.name,\n\t\t\t\t\t\toriginalName: tool.name,\n\t\t\t\t\t\tdescription: tool.description ?? \"\",\n\t\t\t\t\t})),\n\t\t\t\t\t...(definition?.exposeResources !== false\n\t\t\t\t\t\t? (connection.resources ?? []).map((resource) => {\n\t\t\t\t\t\t\t\tconst originalName = `read_${resourceNameToToolName(resource.name)}`;\n\t\t\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\t\t\tname: originalName,\n\t\t\t\t\t\t\t\t\toriginalName,\n\t\t\t\t\t\t\t\t\tdescription: resource.description ?? `Read resource: ${resource.uri}`,\n\t\t\t\t\t\t\t\t};\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t: []),\n\t\t\t\t]);\n\t\t\t\tconst approval = options.state\n\t\t\t\t\t? await ensureToolCallApproved(\n\t\t\t\t\t\t\toptions.state,\n\t\t\t\t\t\t\toptions.serverName,\n\t\t\t\t\t\t\ttoolMeta,\n\t\t\t\t\t\t\tcallArgs.arguments,\n\t\t\t\t\t\t\toptions.state.owner?.signal,\n\t\t\t\t\t\t\t\"iframe\",\n\t\t\t\t\t\t\tapprovalMetadata,\n\t\t\t\t\t\t)\n\t\t\t\t\t: options.config &&\n\t\t\t\t\t\t\tisToolCallApprovalRequired(options.config, options.serverName, toolMeta, approvalMetadata)\n\t\t\t\t\t\t? { ok: false as const, reason: \"approval_required_headless\" as const }\n\t\t\t\t\t\t: { ok: true as const };\n\t\t\t\tif (approval.ok === false) {\n\t\t\t\t\tconst denied = approval.reason === \"denied\";\n\t\t\t\t\tconst message = denied\n\t\t\t\t\t\t? `The user declined approval to run MCP tool \"${callParams.name}\" on server \"${options.serverName}\".`\n\t\t\t\t\t\t: `MCP tool \"${callParams.name}\" on server \"${options.serverName}\" is approval-gated and requires an interactive session.`;\n\t\t\t\t\tsendJson(res, 200, {\n\t\t\t\t\t\tok: true,\n\t\t\t\t\t\tresult: {\n\t\t\t\t\t\t\tcontent: [{ type: \"text\" as const, text: message }],\n\t\t\t\t\t\t\tdetails: {\n\t\t\t\t\t\t\t\terror: denied ? \"approval_denied\" : \"approval_required\",\n\t\t\t\t\t\t\t\tserver: options.serverName,\n\t\t\t\t\t\t\t\ttool: callParams.name,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\n\t\t\t\ttry {\n\t\t\t\t\toptions.manager.touch(options.serverName);\n\t\t\t\t\toptions.manager.incrementInFlight(options.serverName);\n\t\t\t\t\tconst result = options.config\n\t\t\t\t\t\t? await withSessionRecovery(\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\tmanager: options.manager,\n\t\t\t\t\t\t\t\t\tconfig: options.config,\n\t\t\t\t\t\t\t\t\t...(options.onNeedsAuth ? { onNeedsAuth: options.onNeedsAuth } : {}),\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\toptions.serverName,\n\t\t\t\t\t\t\t\t(conn) =>\n\t\t\t\t\t\t\t\t\tconn.client.callTool(callArgs, options.manager.getRequestOptions?.(options.serverName)),\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t: await connection.client.callTool(callArgs, options.manager.getRequestOptions?.(options.serverName));\n\t\t\t\t\tsendJson(res, 200, { ok: true, result });\n\t\t\t\t} finally {\n\t\t\t\t\toptions.manager.decrementInFlight(options.serverName);\n\t\t\t\t\toptions.manager.touch(options.serverName);\n\t\t\t\t}\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (url.pathname === \"/proxy/ui/consent\") {\n\t\t\t\tconst approved = !!(params as { approved?: boolean }).approved;\n\t\t\t\toptions.consentManager.registerDecision(options.serverName, approved);\n\t\t\t\tsendJson(res, 200, { ok: true, result: { approved } });\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (url.pathname === \"/proxy/ui/generated-tool-call-intent\") {\n\t\t\t\tconst tool = typeof params.tool === \"string\" ? params.tool : undefined;\n\t\t\t\tif (tool && isAppOnlyTool(tool)) {\n\t\t\t\t\tlog.debug(\"Ignored generated app-only tool call intent\", { tool });\n\t\t\t\t} else {\n\t\t\t\t\tawait recordUiMessage({\n\t\t\t\t\t\ttype: \"intent\",\n\t\t\t\t\t\tintent: \"call_tool\",\n\t\t\t\t\t\tparams: {\n\t\t\t\t\t\t\t...(tool !== undefined ? { tool } : {}),\n\t\t\t\t\t\t\t...(params.arguments !== undefined ? { arguments: params.arguments } : {}),\n\t\t\t\t\t\t\t...(params.isError !== undefined ? { isError: params.isError } : {}),\n\t\t\t\t\t\t},\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t\tsendJson(res, 200, { ok: true, result: {} });\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (url.pathname === \"/proxy/ui/message\") {\n\t\t\t\tawait recordUiMessage(params as UiMessageParams);\n\t\t\t\tsendJson(res, 200, { ok: true, result: {} });\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (url.pathname === \"/proxy/ui/context\") {\n\t\t\t\tconst content = params.content;\n\t\t\t\tconst structuredContent = params.structuredContent;\n\t\t\t\tif (\n\t\t\t\t\t(content !== undefined &&\n\t\t\t\t\t\t(!Array.isArray(content) || content.some((block) => !ContentBlockSchema.safeParse(block).success))) ||\n\t\t\t\t\t(structuredContent !== undefined &&\n\t\t\t\t\t\t(!structuredContent || typeof structuredContent !== \"object\" || Array.isArray(structuredContent)))\n\t\t\t\t) {\n\t\t\t\t\tsendJson(res, 400, { ok: false, error: \"Invalid update-model-context params\" });\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tconst ctxParams: UiModelContextParams = {\n\t\t\t\t\t...(content !== undefined ? { content: content as NonNullable<UiModelContextParams[\"content\"]> } : {}),\n\t\t\t\t\t...(structuredContent !== undefined\n\t\t\t\t\t\t? { structuredContent: structuredContent as Record<string, unknown> }\n\t\t\t\t\t\t: {}),\n\t\t\t\t};\n\t\t\t\tconst update = createUiModelContextUpdate(ctxParams);\n\t\t\t\tif (update) {\n\t\t\t\t\tsessionMessages.contexts.push(update);\n\t\t\t\t\twhile (sessionMessages.contexts.length > MAX_CONTEXT_UPDATES) {\n\t\t\t\t\t\tsessionMessages.contexts.shift();\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tlog.debug(\"UI context update\", { hasContent: !!ctxParams.content, hasUpdate: !!update });\n\t\t\t\tawait options.onContextUpdate?.(ctxParams);\n\t\t\t\tsendJson(res, 200, { ok: true, result: {} });\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (url.pathname === \"/proxy/ui/open-link\") {\n\t\t\t\tconst openParams = params as { url?: string };\n\t\t\t\tif (!openParams?.url || typeof openParams.url !== \"string\") {\n\t\t\t\t\tsendJson(res, 400, { ok: false, error: \"Invalid open-link params\" });\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tlet result: UiOpenLinkResult = {};\n\t\t\t\ttry {\n\t\t\t\t\tconst externalUrl = new URL(openParams.url);\n\t\t\t\t\tif (\n\t\t\t\t\t\t(externalUrl.protocol !== \"http:\" && externalUrl.protocol !== \"https:\") ||\n\t\t\t\t\t\texternalUrl.username ||\n\t\t\t\t\t\texternalUrl.password\n\t\t\t\t\t) {\n\t\t\t\t\t\tresult = { isError: true };\n\t\t\t\t\t}\n\t\t\t\t} catch {\n\t\t\t\t\tresult = { isError: true };\n\t\t\t\t}\n\t\t\t\tsendJson(res, 200, { ok: true, result });\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (url.pathname === \"/proxy/ui/download-file\") {\n\t\t\t\tsendJson(res, 200, { ok: true, result: { isError: true } });\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (url.pathname === \"/proxy/ui/request-display-mode\") {\n\t\t\t\tconst displayParams = params as UiDisplayModeRequest;\n\t\t\t\tconst requested = displayParams?.mode;\n\t\t\t\tconst available = hostContext.availableDisplayModes ?? [\"inline\"];\n\t\t\t\tif (requested && available.includes(requested)) {\n\t\t\t\t\tcurrentDisplayMode = requested;\n\t\t\t\t}\n\t\t\t\thostContext.displayMode = currentDisplayMode;\n\t\t\t\tpushEvent(\"host-context\", { displayMode: currentDisplayMode });\n\t\t\t\tconst result: UiDisplayModeResult = { mode: currentDisplayMode };\n\t\t\t\tsendJson(res, 200, { ok: true, result });\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (url.pathname === \"/proxy/ui/heartbeat\") {\n\t\t\t\tsendJson(res, 200, { ok: true, result: {} });\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (url.pathname === \"/proxy/ui/complete\") {\n\t\t\t\tconst reason =\n\t\t\t\t\ttypeof (params as { reason?: string }).reason === \"string\"\n\t\t\t\t\t\t? (params as { reason?: string }).reason!\n\t\t\t\t\t\t: \"done\";\n\t\t\t\tmarkCompleted(reason);\n\t\t\t\tsendJson(res, 200, { ok: true, result: {} });\n\t\t\t\tsetTimeout(() => {\n\t\t\t\t\ttry {\n\t\t\t\t\t\tserver.close();\n\t\t\t\t\t} catch {}\n\t\t\t\t\tcloseSse();\n\t\t\t\t}, 20).unref();\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tsendJson(res, 404, { ok: false, error: \"Not found\" });\n\t\t} catch (error) {\n\t\t\tif (error instanceof SessionRecoveryAuthRequiredError) {\n\t\t\t\tconst fallback = `Server \"${options.serverName}\" requires OAuth authentication. Run mcp({ action: \"auth-start\", server: \"${options.serverName}\" }) to get a browser URL, or /mcp-auth ${options.serverName} in an interactive local session.`;\n\t\t\t\tconst message =\n\t\t\t\t\terror.authMessage ??\n\t\t\t\t\t(options.config ? formatAuthRequiredMessage(options.config, options.serverName, fallback) : fallback);\n\t\t\t\tsendJson(res, 401, { ok: false, error: message });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst wrapped = wrapError(error, { server: options.serverName, tool: options.toolName });\n\t\t\tconst status = /approval required|denied/i.test(wrapped.message) ? 403 : 500;\n\t\t\tif (status === 500) {\n\t\t\t\tlog.error(\"Request handler error\", error instanceof Error ? error : undefined);\n\t\t\t}\n\t\t\tsendJson(res, status, { ok: false, error: wrapped.message });\n\t\t}\n\t});\n\n\tif (options.initialResultPromise) {\n\t\toptions.initialResultPromise.then(\n\t\t\t(result) => pushEvent(\"tool-result\", result),\n\t\t\t(error) => {\n\t\t\t\tconst reason = error instanceof Error ? error.message : String(error);\n\t\t\t\tpushEvent(\"tool-cancelled\", { reason });\n\t\t\t},\n\t\t);\n\t}\n\n\twatchdog = setInterval(() => {\n\t\tif (completed) return;\n\t\tif (Date.now() - lastHeartbeatAt <= ABANDONED_GRACE_MS) return;\n\t\tmarkCompleted(\"stale\");\n\t\ttry {\n\t\t\tserver.close();\n\t\t} catch {}\n\t\tcloseSse();\n\t}, WATCHDOG_INTERVAL_MS);\n\twatchdog.unref();\n\n\treturn new Promise((resolve, reject) => {\n\t\tconst candidates = resolvePortCandidates(options.port);\n\t\tlet candidateIndex = 0;\n\n\t\tconst listen = () => {\n\t\t\tserver.once(\"error\", onError);\n\t\t\tserver.listen(candidates[candidateIndex], \"127.0.0.1\", onListening);\n\t\t};\n\n\t\tconst onError = (error: NodeJS.ErrnoException) => {\n\t\t\tserver.off(\"listening\", onListening);\n\t\t\tif (error.code === \"EADDRINUSE\" && candidateIndex < candidates.length - 1) {\n\t\t\t\tcandidateIndex += 1;\n\t\t\t\tlisten();\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tlog.error(\"Failed to start server\", error);\n\t\t\tconst port = candidates[candidateIndex];\n\t\t\treject(\n\t\t\t\tnew ServerError(error.message, {\n\t\t\t\t\t...(port !== undefined ? { port } : {}),\n\t\t\t\t\tcause: error,\n\t\t\t\t}),\n\t\t\t);\n\t\t};\n\n\t\tconst onListening = () => {\n\t\t\tserver.off(\"error\", onError);\n\t\t\tconst address = server.address();\n\t\t\tif (!address || typeof address === \"string\") {\n\t\t\t\tconst err = new ServerError(\"invalid address\");\n\t\t\t\tlog.error(\"Invalid server address\", err);\n\t\t\t\treject(err);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tlog.debug(\"Server started\", { port: address.port });\n\t\t\trememberMoshiDiscoveryPort(address.port);\n\n\t\t\tconst handle: UiServerHandle = {\n\t\t\t\turl: `http://localhost:${address.port}/?session=${sessionToken}`,\n\t\t\t\tport: address.port,\n\t\t\t\tsessionToken,\n\t\t\t\tserverName: options.serverName,\n\t\t\t\ttoolName: options.toolName,\n\t\t\t\tclose: (reason?: string) => {\n\t\t\t\t\tmarkCompleted(reason ?? \"closed\");\n\t\t\t\t\ttry {\n\t\t\t\t\t\tserver.close();\n\t\t\t\t\t} catch {}\n\t\t\t\t\tcloseSse();\n\t\t\t\t},\n\t\t\t\tsendToolInput: (args: Record<string, unknown>) => {\n\t\t\t\t\tpushEvent(\"tool-input\", { arguments: args });\n\t\t\t\t},\n\t\t\t\tsendToolResult: (result: CallToolResult) => {\n\t\t\t\t\tpushEvent(\"tool-result\", result);\n\t\t\t\t},\n\t\t\t\tsendResultPatch: (result: CallToolResult) => {\n\t\t\t\t\tpushEvent(\"result-patch\", result);\n\t\t\t\t},\n\t\t\t\tsendToolCancelled: (reason: string) => {\n\t\t\t\t\tpushEvent(\"tool-cancelled\", { reason });\n\t\t\t\t},\n\t\t\t\tsendHostContext: (context: UiHostContext) => {\n\t\t\t\t\tObject.assign(hostContext, context);\n\t\t\t\t\tpushEvent(\"host-context\", context);\n\t\t\t\t},\n\t\t\t\tgetSessionMessages: () => ({ ...sessionMessages }),\n\t\t\t\tgetStreamSummary: () =>\n\t\t\t\t\tstreamSummary ? { ...streamSummary, phases: [...streamSummary.phases] } : undefined,\n\t\t\t};\n\n\t\t\tresolve(handle);\n\t\t};\n\n\t\tlisten();\n\t});\n}\n\nasync function parseBody(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n): Promise<UiProxyRequestBody<Record<string, unknown>> | null> {\n\ttry {\n\t\tconst body = await readBody(req);\n\t\tif (!body || typeof body !== \"object\") {\n\t\t\tsendJson(res, 400, { ok: false, error: \"Invalid request body\" });\n\t\t\treturn null;\n\t\t}\n\t\treturn body as UiProxyRequestBody<Record<string, unknown>>;\n\t} catch (error) {\n\t\tsendJson(res, 400, { ok: false, error: error instanceof Error ? error.message : \"Invalid body\" });\n\t\treturn null;\n\t}\n}\n\nfunction readBody(req: IncomingMessage): Promise<unknown> {\n\treturn new Promise((resolve, reject) => {\n\t\tlet size = 0;\n\t\tconst chunks: Buffer[] = [];\n\n\t\treq.on(\"data\", (chunk: Buffer) => {\n\t\t\tsize += chunk.length;\n\t\t\tif (size > MAX_BODY_SIZE) {\n\t\t\t\treq.destroy();\n\t\t\t\treject(new Error(\"Request body too large\"));\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tchunks.push(chunk);\n\t\t});\n\n\t\treq.on(\"end\", () => {\n\t\t\ttry {\n\t\t\t\tresolve(JSON.parse(Buffer.concat(chunks).toString(\"utf-8\")));\n\t\t\t} catch (error) {\n\t\t\t\treject(error);\n\t\t\t}\n\t\t});\n\n\t\treq.on(\"error\", reject);\n\t});\n}\n\nfunction resolvePortCandidates(port: number | undefined): number[] {\n\tif (port !== undefined) return [port];\n\tconst candidates: number[] = [];\n\tconst count = MOSHI_DISCOVERY_PORT_END - MOSHI_DISCOVERY_PORT_START + 1;\n\tfor (let offset = 0; offset < count; offset += 1) {\n\t\tconst candidate =\n\t\t\tMOSHI_DISCOVERY_PORT_START + ((nextMoshiDiscoveryPort - MOSHI_DISCOVERY_PORT_START + offset) % count);\n\t\tcandidates.push(candidate);\n\t}\n\tcandidates.push(0);\n\treturn candidates;\n}\n\nfunction rememberMoshiDiscoveryPort(port: number): void {\n\tif (port < MOSHI_DISCOVERY_PORT_START || port > MOSHI_DISCOVERY_PORT_END) return;\n\tnextMoshiDiscoveryPort = port >= MOSHI_DISCOVERY_PORT_END ? MOSHI_DISCOVERY_PORT_START : port + 1;\n}\n\nfunction isAllowedHost(hostname: string): boolean {\n\treturn hostname === \"localhost\" || hostname === \"127.0.0.1\" || hostname === \"[::1]\";\n}\n\nfunction validateTokenQuery(url: URL, expected: string, res: ServerResponse, parameter = \"session\"): boolean {\n\tconst token = url.searchParams.get(parameter);\n\tif (token !== expected) {\n\t\tsendJson(res, 403, { ok: false, error: \"Invalid session\" });\n\t\treturn false;\n\t}\n\treturn true;\n}\n\nfunction validateTokenBody(\n\tbody: UiProxyRequestBody<Record<string, unknown>>,\n\texpected: string,\n\tres: ServerResponse,\n): boolean {\n\tif (body.token !== expected) {\n\t\tsendJson(res, 403, { ok: false, error: \"Invalid session\" });\n\t\treturn false;\n\t}\n\treturn true;\n}\n\nfunction sendJson<T>(res: ServerResponse, status: number, payload: UiProxyResult<T>): void {\n\tres.writeHead(status, {\n\t\t\"Content-Type\": \"application/json; charset=utf-8\",\n\t\t\"Cache-Control\": \"no-store\",\n\t});\n\tres.end(JSON.stringify(payload));\n}\n\nfunction sendText(res: ServerResponse, status: number, text: string): void {\n\tres.writeHead(status, {\n\t\t\"Content-Type\": \"text/plain; charset=utf-8\",\n\t\t\"Cache-Control\": \"no-store\",\n\t});\n\tres.end(text);\n}\n"]}