@ashx-j/lunr 0.1.0

package/dist/builtin-extensions/pi-mcp-adapter/ui-server.d.ts

@@ -0,0 +1,37 @@
+import type { CallToolResult } from "@modelcontextprotocol/sdk/types.js";
+import type { ConsentManager } from "./consent-manager.ts";
+import type { McpServerManager } from "./server-manager.ts";
+import { type UiHostContext, type UiMessageParams, type UiModelContextParams, type UiResourceContent, type UiSessionMessages, type UiStreamSummary } from "./types.ts";
+export interface UiServerOptions {
+    serverName: string;
+    toolName: string;
+    toolArgs: Record<string, unknown>;
+    resource: UiResourceContent;
+    manager: McpServerManager;
+    consentManager: ConsentManager;
+    hostContext?: UiHostContext;
+    initialResultPromise?: Promise<CallToolResult>;
+    sessionToken?: string;
+    port?: number;
+    onMessage?: (params: UiMessageParams) => Promise<void> | void;
+    onContextUpdate?: (params: UiModelContextParams) => Promise<void> | void;
+    onComplete?: (reason: string) => void;
+}
+export interface UiServerHandle {
+    url: string;
+    port: number;
+    sessionToken: string;
+    serverName: string;
+    toolName: string;
+    close: (reason?: string) => void;
+    sendToolInput: (args: Record<string, unknown>) => void;
+    sendToolResult: (result: CallToolResult) => void;
+    sendResultPatch: (result: CallToolResult) => void;
+    sendToolCancelled: (reason: string) => void;
+    sendHostContext: (context: UiHostContext) => void;
+    /** Get accumulated messages from this session */
+    getSessionMessages: () => UiSessionMessages;
+    getStreamSummary: () => UiStreamSummary | undefined;
+}
+export declare function startUiServer(options: UiServerOptions): Promise<UiServerHandle>;
+//# sourceMappingURL=ui-server.d.ts.map

package/dist/builtin-extensions/pi-mcp-adapter/ui-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-server.d.ts","sourceRoot":"","sources":["../../../src/builtin-extensions/pi-mcp-adapter/ui-server.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAEV,cAAc,EACf,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAI3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAML,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAIzB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACrB,MAAM,YAAY,CAAC;AAOpB,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,cAAc,EAAE,cAAc,CAAC;IAC/B,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B,oBAAoB,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC9D,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACzE,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CACvC;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACvD,cAAc,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI,CAAC;IACjD,eAAe,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI,CAAC;IAClD,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,eAAe,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,IAAI,CAAC;IAClD,iDAAiD;IACjD,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;IAC5C,gBAAgB,EAAE,MAAM,eAAe,GAAG,SAAS,CAAC;CACrD;AAED,wBAAsB,aAAa,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CA4drF","sourcesContent":["// @ts-nocheck\nimport http, { type IncomingMessage, type ServerResponse } from \"node:http\";\nimport fs from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { randomUUID } from \"node:crypto\";\nimport { buildAllowAttribute } from \"@modelcontextprotocol/ext-apps/app-bridge\";\nimport type {\n  CallToolRequest,\n  CallToolResult,\n} from \"@modelcontextprotocol/sdk/types.js\";\nimport type { ConsentManager } from \"./consent-manager.ts\";\nimport { ServerError, wrapError } from \"./errors.ts\";\nimport { buildHostHtmlTemplate, buildCspMetaContent, applyCspMeta } from \"./host-html-template.ts\";\nimport { logger } from \"./logger.ts\";\nimport type { McpServerManager } from \"./server-manager.ts\";\nimport {\n  extractUiPromptText,\n  getVisualizationStreamEnvelope,\n  type UiDisplayMode,\n  type UiDisplayModeRequest,\n  type UiDisplayModeResult,\n  type UiHostContext,\n  type UiMessageParams,\n  type UiModelContextParams,\n  type UiOpenLinkResult,\n  type UiProxyRequestBody,\n  type UiProxyResult,\n  type UiResourceContent,\n  type UiSessionMessages,\n  type UiStreamSummary,\n} from \"./types.ts\";\n\nconst MAX_BODY_SIZE = 2 * 1024 * 1024;\nconst ABANDONED_GRACE_MS = 60_000;\nconst WATCHDOG_INTERVAL_MS = 5_000;\nconst MAX_EVENT_LOG = 128;\n\nexport interface UiServerOptions {\n  serverName: string;\n  toolName: string;\n  toolArgs: Record<string, unknown>;\n  resource: UiResourceContent;\n  manager: McpServerManager;\n  consentManager: ConsentManager;\n  hostContext?: UiHostContext;\n  initialResultPromise?: Promise<CallToolResult>;\n  sessionToken?: string;\n  port?: number;\n  onMessage?: (params: UiMessageParams) => Promise<void> | void;\n  onContextUpdate?: (params: UiModelContextParams) => Promise<void> | void;\n  onComplete?: (reason: string) => void;\n}\n\nexport interface UiServerHandle {\n  url: string;\n  port: number;\n  sessionToken: string;\n  serverName: string;\n  toolName: string;\n  close: (reason?: string) => void;\n  sendToolInput: (args: Record<string, unknown>) => void;\n  sendToolResult: (result: CallToolResult) => void;\n  sendResultPatch: (result: CallToolResult) => void;\n  sendToolCancelled: (reason: string) => void;\n  sendHostContext: (context: UiHostContext) => void;\n  /** Get accumulated messages from this session */\n  getSessionMessages: () => UiSessionMessages;\n  getStreamSummary: () => UiStreamSummary | undefined;\n}\n\nexport async function startUiServer(options: UiServerOptions): Promise<UiServerHandle> {\n  const sessionToken = options.sessionToken ?? randomUUID();\n  const log = logger.child({ \n    component: \"UiServer\",\n    server: options.serverName,\n    tool: options.toolName,\n    session: sessionToken.slice(0, 8),\n  });\n\n  log.debug(\"Starting UI server\");\n\n  const sseClients = new Set<ServerResponse>();\n  let completed = false;\n  let lastHeartbeatAt = Date.now();\n  let watchdog: NodeJS.Timeout | null = null;\n  let currentDisplayMode: UiDisplayMode = options.hostContext?.displayMode ?? \"inline\";\n  let nextEventId = 1;\n  const eventLog: Array<{ id: number; name: string; payload: unknown }> = [];\n  let streamSummary: UiStreamSummary | undefined;\n\n  // Track messages from UI for retrieval\n  const sessionMessages: UiSessionMessages = {\n    prompts: [],\n    notifications: [],\n    intents: [],\n  };\n\n  const hostContext: UiHostContext = {\n    displayMode: currentDisplayMode,\n    availableDisplayModes: [\"inline\", \"fullscreen\", \"pip\"],\n    platform: \"desktop\",\n    ...options.hostContext,\n    // Only include toolInfo if caller provides full tool definition with inputSchema\n    // The App validates toolInfo.tool.inputSchema as required object\n  };\n\n  const initialStreamContext = hostContext[\"pi-mcp-adapter/stream\"];\n  if (initialStreamContext && typeof initialStreamContext === \"object\") {\n    const streamId = (initialStreamContext as { streamId?: unknown }).streamId;\n    const mode = (initialStreamContext as { mode?: unknown }).mode;\n    if (typeof streamId === \"string\" && (mode === \"eager\" || mode === \"stream-first\")) {\n      streamSummary = {\n        streamId,\n        mode,\n        frames: 0,\n        phases: [],\n      };\n    }\n  }\n\n  const touchHeartbeat = () => {\n    lastHeartbeatAt = Date.now();\n  };\n\n  const updateStreamSummary = (payload: unknown) => {\n    const envelope = getVisualizationStreamEnvelope((payload as { structuredContent?: unknown } | null)?.structuredContent);\n    if (!envelope) return;\n    if (!streamSummary) {\n      streamSummary = {\n        streamId: envelope.streamId,\n        mode: \"eager\",\n        frames: 0,\n        phases: [],\n      };\n    }\n    streamSummary.frames += 1;\n    if (!streamSummary.phases.includes(envelope.phase)) {\n      streamSummary.phases.push(envelope.phase);\n    }\n    streamSummary.finalStatus = envelope.status;\n    streamSummary.lastMessage = envelope.message;\n  };\n\n  const serializeEvent = (eventId: number, name: string, payload: unknown): string => {\n    return `id: ${eventId}\\nevent: ${name}\\ndata: ${JSON.stringify(payload)}\\n\\n`;\n  };\n\n  const getLatestCheckpointIndex = () => {\n    for (let index = eventLog.length - 1; index >= 0; index -= 1) {\n      const entry = eventLog[index];\n      const envelope = getVisualizationStreamEnvelope((entry.payload as { structuredContent?: unknown } | null)?.structuredContent);\n      if (envelope?.frameType === \"checkpoint\" || envelope?.frameType === \"final\") {\n        return index;\n      }\n    }\n    return -1;\n  };\n\n  const pruneEventLog = () => {\n    if (eventLog.length <= MAX_EVENT_LOG) return;\n    const latestCheckpointIndex = getLatestCheckpointIndex();\n\n    if (latestCheckpointIndex > 0) {\n      eventLog.splice(0, latestCheckpointIndex);\n    }\n\n    if (eventLog.length > MAX_EVENT_LOG) {\n      eventLog.splice(0, eventLog.length - MAX_EVENT_LOG);\n    }\n  };\n\n  const pushEvent = (name: string, payload: unknown) => {\n    if (completed) return;\n    const eventId = nextEventId++;\n    eventLog.push({ id: eventId, name, payload });\n    updateStreamSummary(payload);\n    pruneEventLog();\n    const chunk = serializeEvent(eventId, name, payload);\n    for (const client of sseClients) {\n      try {\n        client.write(chunk);\n      } catch {\n        sseClients.delete(client);\n      }\n    }\n  };\n\n  const replayEvents = (res: ServerResponse, lastEventIdHeader?: string | null) => {\n    const parsedLastId = lastEventIdHeader ? Number(lastEventIdHeader) : Number.NaN;\n    const eventsToReplay = Number.isFinite(parsedLastId)\n      ? eventLog.filter((entry) => entry.id > parsedLastId)\n      : (() => {\n          const latestCheckpointIndex = getLatestCheckpointIndex();\n          return latestCheckpointIndex >= 0 ? eventLog.slice(latestCheckpointIndex) : eventLog;\n        })();\n\n    for (const entry of eventsToReplay) {\n      try {\n        res.write(serializeEvent(entry.id, entry.name, entry.payload));\n      } catch {\n        sseClients.delete(res);\n        return;\n      }\n    }\n  };\n\n  const closeSse = () => {\n    for (const client of sseClients) {\n      try {\n        client.end();\n      } catch {}\n    }\n    sseClients.clear();\n  };\n\n  const stopWatchdog = () => {\n    if (!watchdog) return;\n    clearInterval(watchdog);\n    watchdog = null;\n  };\n\n  const markCompleted = (reason: string) => {\n    if (completed) return;\n    log.debug(\"Session completed\", { reason });\n    pushEvent(\"session-complete\", { reason });\n    completed = true;\n    stopWatchdog();\n    options.onComplete?.(reason);\n  };\n\n  const server = http.createServer(async (req, res) => {\n    try {\n      const method = req.method || \"GET\";\n      const url = new URL(req.url || \"/\", `http://${req.headers.host || \"127.0.0.1\"}`);\n\n      if (method === \"GET\" && url.pathname === \"/\") {\n        if (!validateTokenQuery(url, sessionToken, res)) return;\n        touchHeartbeat();\n\n        const html = buildHostHtmlTemplate({\n          sessionToken,\n          serverName: options.serverName,\n          toolName: options.toolName,\n          toolArgs: options.toolArgs,\n          resource: options.resource,\n          allowAttribute: buildAllowAttribute(options.resource.meta.permissions),\n          requireToolConsent: options.consentManager.requiresPrompt(options.serverName),\n          cacheToolConsent: options.consentManager.shouldCacheConsent(),\n          hostContext,\n        });\n\n        res.writeHead(200, {\n          \"Content-Type\": \"text/html; charset=utf-8\",\n          \"Cache-Control\": \"no-store\",\n        });\n        res.end(html);\n        return;\n      }\n\n      if (method === \"GET\" && url.pathname === \"/events\") {\n        if (!validateTokenQuery(url, sessionToken, res)) return;\n        touchHeartbeat();\n        log.debug(\"SSE client connected\", { clientCount: sseClients.size + 1 });\n        res.writeHead(200, {\n          \"Content-Type\": \"text/event-stream\",\n          \"Cache-Control\": \"no-cache, no-transform\",\n          Connection: \"keep-alive\",\n          \"X-Accel-Buffering\": \"no\",\n        });\n        res.write(\": connected\\n\\n\");\n        sseClients.add(res);\n        replayEvents(res, req.headers[\"last-event-id\"] ? String(req.headers[\"last-event-id\"]) : null);\n        req.on(\"close\", () => {\n          sseClients.delete(res);\n        });\n        return;\n      }\n\n      if (method === \"GET\" && url.pathname === \"/health\") {\n        if (!validateTokenQuery(url, sessionToken, res)) return;\n        sendJson(res, 200, { ok: true, result: { healthy: true } });\n        return;\n      }\n\n      if (method === \"GET\" && url.pathname === \"/ui-app\") {\n        if (!validateTokenQuery(url, sessionToken, res)) return;\n        touchHeartbeat();\n        // Serve the MCP app's UI HTML directly (avoids blob URL security issues)\n        // Apply CSP meta tag if specified in resource metadata\n        const cspContent = buildCspMetaContent(options.resource.meta.csp);\n        const appHtml = applyCspMeta(options.resource.html, cspContent);\n        res.writeHead(200, {\n          \"Content-Type\": \"text/html; charset=utf-8\",\n          \"Cache-Control\": \"no-store\",\n        });\n        res.end(appHtml);\n        return;\n      }\n\n      if (method === \"GET\" && url.pathname === \"/app-bridge.bundle.js\") {\n        // Serve the pre-bundled AppBridge module\n        const bundlePath = path.join(import.meta.dirname, \"app-bridge.bundle.js\");\n        try {\n          const content = await fs.readFile(bundlePath, \"utf-8\");\n          res.writeHead(200, {\n            \"Content-Type\": \"application/javascript\",\n            \"Cache-Control\": \"public, max-age=31536000\",\n          });\n          res.end(content);\n        } catch {\n          sendJson(res, 500, { ok: false, error: \"Bundle not found\" });\n        }\n        return;\n      }\n\n      if (method !== \"POST\") {\n        sendJson(res, 404, { ok: false, error: \"Not found\" });\n        return;\n      }\n\n      const body = await parseBody(req, res);\n      if (!body) return;\n      if (!validateTokenBody(body, sessionToken, res)) return;\n      const params = body.params ?? {};\n      touchHeartbeat();\n\n      if (url.pathname === \"/proxy/tools/call\") {\n        options.consentManager.ensureApproved(options.serverName);\n        const callParams = params as CallToolRequest[\"params\"];\n        if (!callParams || typeof callParams.name !== \"string\" || !callParams.name.trim()) {\n          sendJson(res, 400, { ok: false, error: \"Invalid tools/call params\" });\n          return;\n        }\n\n        const connection = options.manager.getConnection(options.serverName);\n        if (!connection || connection.status !== \"connected\") {\n          sendJson(res, 503, { ok: false, error: `Server \"${options.serverName}\" is not connected` });\n          return;\n        }\n\n        try {\n          options.manager.touch(options.serverName);\n          options.manager.incrementInFlight(options.serverName);\n          const result = await connection.client.callTool({\n            name: callParams.name,\n            arguments:\n              callParams.arguments && typeof callParams.arguments === \"object\" && !Array.isArray(callParams.arguments)\n                ? callParams.arguments\n                : {},\n          }, undefined, options.manager.getRequestOptions?.(options.serverName));\n          sendJson(res, 200, { ok: true, result });\n        } finally {\n          options.manager.decrementInFlight(options.serverName);\n          options.manager.touch(options.serverName);\n        }\n        return;\n      }\n\n      if (url.pathname === \"/proxy/ui/consent\") {\n        const approved = !!(params as { approved?: boolean }).approved;\n        options.consentManager.registerDecision(options.serverName, approved);\n        sendJson(res, 200, { ok: true, result: { approved } });\n        return;\n      }\n\n      if (url.pathname === \"/proxy/ui/message\") {\n        const msgParams = params as UiMessageParams;\n        const promptText = extractUiPromptText(msgParams);\n        \n        // Track messages by type (order: prompt → intent → notify)\n        // Must match the order in index.ts onMessage handler\n        if (promptText) {\n          sessionMessages.prompts.push(promptText);\n          log.debug(\"UI prompt received\", { prompt: promptText.slice(0, 100) });\n        } else if (msgParams.type === \"intent\" || msgParams.intent) {\n          const intentName = msgParams.intent ?? \"\";\n          if (intentName) {\n            sessionMessages.intents.push({ \n              intent: intentName, \n              params: msgParams.params \n            });\n            log.debug(\"UI intent received\", { intent: intentName });\n          }\n        } else if (msgParams.type === \"notify\" || msgParams.message) {\n          const notifyText = msgParams.message ?? \"\";\n          if (notifyText) {\n            sessionMessages.notifications.push(notifyText);\n            log.debug(\"UI notification\", { message: notifyText.slice(0, 100) });\n          }\n        }\n        \n        await options.onMessage?.(msgParams);\n        sendJson(res, 200, { ok: true, result: {} });\n        return;\n      }\n\n      if (url.pathname === \"/proxy/ui/context\") {\n        const ctxParams = params as UiModelContextParams;\n        log.debug(\"UI context update\", { hasContent: !!ctxParams.content });\n        await options.onContextUpdate?.(ctxParams);\n        sendJson(res, 200, { ok: true, result: {} });\n        return;\n      }\n\n      if (url.pathname === \"/proxy/ui/open-link\") {\n        const openParams = params as { url?: string };\n        if (!openParams?.url || typeof openParams.url !== \"string\") {\n          sendJson(res, 400, { ok: false, error: \"Invalid open-link params\" });\n          return;\n        }\n        let result: UiOpenLinkResult = {};\n        try {\n          new URL(openParams.url);\n        } catch {\n          result = { isError: true };\n        }\n        sendJson(res, 200, { ok: true, result });\n        return;\n      }\n\n      if (url.pathname === \"/proxy/ui/download-file\") {\n        sendJson(res, 200, { ok: true, result: { isError: true } });\n        return;\n      }\n\n      if (url.pathname === \"/proxy/ui/request-display-mode\") {\n        const displayParams = params as UiDisplayModeRequest;\n        const requested = displayParams?.mode;\n        const available = hostContext.availableDisplayModes ?? [\"inline\"];\n        if (requested && available.includes(requested)) {\n          currentDisplayMode = requested;\n        }\n        hostContext.displayMode = currentDisplayMode;\n        pushEvent(\"host-context\", { displayMode: currentDisplayMode });\n        const result: UiDisplayModeResult = { mode: currentDisplayMode };\n        sendJson(res, 200, { ok: true, result });\n        return;\n      }\n\n      if (url.pathname === \"/proxy/ui/heartbeat\") {\n        sendJson(res, 200, { ok: true, result: {} });\n        return;\n      }\n\n      if (url.pathname === \"/proxy/ui/complete\") {\n        const reason = typeof (params as { reason?: string }).reason === \"string\"\n          ? (params as { reason?: string }).reason!\n          : \"done\";\n        markCompleted(reason);\n        sendJson(res, 200, { ok: true, result: {} });\n        setTimeout(() => {\n          try {\n            server.close();\n          } catch {}\n          closeSse();\n        }, 20).unref();\n        return;\n      }\n\n      sendJson(res, 404, { ok: false, error: \"Not found\" });\n    } catch (error) {\n      const wrapped = wrapError(error, { server: options.serverName, tool: options.toolName });\n      const status = /approval required|denied/i.test(wrapped.message) ? 403 : 500;\n      if (status === 500) {\n        log.error(\"Request handler error\", error instanceof Error ? error : undefined);\n      }\n      sendJson(res, status, { ok: false, error: wrapped.message });\n    }\n  });\n\n  if (options.initialResultPromise) {\n    options.initialResultPromise.then(\n      (result) => pushEvent(\"tool-result\", result),\n      (error) => {\n        const reason = error instanceof Error ? error.message : String(error);\n        pushEvent(\"tool-cancelled\", { reason });\n      }\n    );\n  }\n\n  watchdog = setInterval(() => {\n    if (completed) return;\n    if (Date.now() - lastHeartbeatAt <= ABANDONED_GRACE_MS) return;\n    markCompleted(\"stale\");\n    try {\n      server.close();\n    } catch {}\n    closeSse();\n  }, WATCHDOG_INTERVAL_MS);\n  watchdog.unref();\n\n  return new Promise((resolve, reject) => {\n    const onError = (error: Error) => {\n      log.error(\"Failed to start server\", error);\n      reject(new ServerError(error.message, { port: options.port, cause: error }));\n    };\n\n    server.once(\"error\", onError);\n    server.listen(options.port ?? 0, \"127.0.0.1\", () => {\n      server.off(\"error\", onError);\n      const address = server.address();\n      if (!address || typeof address === \"string\") {\n        const err = new ServerError(\"invalid address\");\n        log.error(\"Invalid server address\", err);\n        reject(err);\n        return;\n      }\n\n      log.debug(\"Server started\", { port: address.port });\n\n      const handle: UiServerHandle = {\n        url: `http://localhost:${address.port}/?session=${sessionToken}`,\n        port: address.port,\n        sessionToken,\n        serverName: options.serverName,\n        toolName: options.toolName,\n        close: (reason?: string) => {\n          markCompleted(reason ?? \"closed\");\n          try {\n            server.close();\n          } catch {}\n          closeSse();\n        },\n        sendToolInput: (args: Record<string, unknown>) => {\n          pushEvent(\"tool-input\", { arguments: args });\n        },\n        sendToolResult: (result: CallToolResult) => {\n          pushEvent(\"tool-result\", result);\n        },\n        sendResultPatch: (result: CallToolResult) => {\n          pushEvent(\"result-patch\", result);\n        },\n        sendToolCancelled: (reason: string) => {\n          pushEvent(\"tool-cancelled\", { reason });\n        },\n        sendHostContext: (context: UiHostContext) => {\n          Object.assign(hostContext, context);\n          pushEvent(\"host-context\", context);\n        },\n        getSessionMessages: () => ({ ...sessionMessages }),\n        getStreamSummary: () => streamSummary ? { ...streamSummary, phases: [...streamSummary.phases] } : undefined,\n      };\n\n      resolve(handle);\n    });\n  });\n}\n\nasync function parseBody(\n  req: IncomingMessage,\n  res: ServerResponse,\n): Promise<UiProxyRequestBody<Record<string, unknown>> | null> {\n  try {\n    const body = await readBody(req);\n    if (!body || typeof body !== \"object\") {\n      sendJson(res, 400, { ok: false, error: \"Invalid request body\" });\n      return null;\n    }\n    return body as UiProxyRequestBody<Record<string, unknown>>;\n  } catch (error) {\n    sendJson(res, 400, { ok: false, error: error instanceof Error ? error.message : \"Invalid body\" });\n    return null;\n  }\n}\n\nfunction readBody(req: IncomingMessage): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    let size = 0;\n    const chunks: Buffer[] = [];\n\n    req.on(\"data\", (chunk: Buffer) => {\n      size += chunk.length;\n      if (size > MAX_BODY_SIZE) {\n        req.destroy();\n        reject(new Error(\"Request body too large\"));\n        return;\n      }\n      chunks.push(chunk);\n    });\n\n    req.on(\"end\", () => {\n      try {\n        resolve(JSON.parse(Buffer.concat(chunks).toString(\"utf-8\")));\n      } catch (error) {\n        reject(error);\n      }\n    });\n\n    req.on(\"error\", reject);\n  });\n}\n\nfunction validateTokenQuery(url: URL, expected: string, res: ServerResponse): boolean {\n  const token = url.searchParams.get(\"session\");\n  if (token !== expected) {\n    sendJson(res, 403, { ok: false, error: \"Invalid session\" });\n    return false;\n  }\n  return true;\n}\n\nfunction validateTokenBody(\n  body: UiProxyRequestBody<Record<string, unknown>>,\n  expected: string,\n  res: ServerResponse,\n): boolean {\n  if (body.token !== expected) {\n    sendJson(res, 403, { ok: false, error: \"Invalid session\" });\n    return false;\n  }\n  return true;\n}\n\nfunction sendJson<T>(\n  res: ServerResponse,\n  status: number,\n  payload: UiProxyResult<T>,\n): void {\n  res.writeHead(status, {\n    \"Content-Type\": \"application/json; charset=utf-8\",\n    \"Cache-Control\": \"no-store\",\n  });\n  res.end(JSON.stringify(payload));\n}\n"]}

package/dist/builtin-extensions/pi-mcp-adapter/ui-server.js

@@ -0,0 +1,524 @@
+// @ts-nocheck
+import http from "node:http";
+import fs from "node:fs/promises";
+import path from "node:path";
+import { randomUUID } from "node:crypto";
+import { buildAllowAttribute } from "@modelcontextprotocol/ext-apps/app-bridge";
+import { ServerError, wrapError } from "./errors.js";
+import { buildHostHtmlTemplate, buildCspMetaContent, applyCspMeta } from "./host-html-template.js";
+import { logger } from "./logger.js";
+import { extractUiPromptText, getVisualizationStreamEnvelope, } from "./types.js";
+const MAX_BODY_SIZE = 2 * 1024 * 1024;
+const ABANDONED_GRACE_MS = 60_000;
+const WATCHDOG_INTERVAL_MS = 5_000;
+const MAX_EVENT_LOG = 128;
+export async function startUiServer(options) {
+    const sessionToken = options.sessionToken ?? randomUUID();
+    const log = logger.child({
+        component: "UiServer",
+        server: options.serverName,
+        tool: options.toolName,
+        session: sessionToken.slice(0, 8),
+    });
+    log.debug("Starting UI server");
+    const sseClients = new Set();
+    let completed = false;
+    let lastHeartbeatAt = Date.now();
+    let watchdog = null;
+    let currentDisplayMode = options.hostContext?.displayMode ?? "inline";
+    let nextEventId = 1;
+    const eventLog = [];
+    let streamSummary;
+    // Track messages from UI for retrieval
+    const sessionMessages = {
+        prompts: [],
+        notifications: [],
+        intents: [],
+    };
+    const hostContext = {
+        displayMode: currentDisplayMode,
+        availableDisplayModes: ["inline", "fullscreen", "pip"],
+        platform: "desktop",
+        ...options.hostContext,
+        // Only include toolInfo if caller provides full tool definition with inputSchema
+        // The App validates toolInfo.tool.inputSchema as required object
+    };
+    const initialStreamContext = hostContext["pi-mcp-adapter/stream"];
+    if (initialStreamContext && typeof initialStreamContext === "object") {
+        const streamId = initialStreamContext.streamId;
+        const mode = initialStreamContext.mode;
+        if (typeof streamId === "string" && (mode === "eager" || mode === "stream-first")) {
+            streamSummary = {
+                streamId,
+                mode,
+                frames: 0,
+                phases: [],
+            };
+        }
+    }
+    const touchHeartbeat = () => {
+        lastHeartbeatAt = Date.now();
+    };
+    const updateStreamSummary = (payload) => {
+        const envelope = getVisualizationStreamEnvelope(payload?.structuredContent);
+        if (!envelope)
+            return;
+        if (!streamSummary) {
+            streamSummary = {
+                streamId: envelope.streamId,
+                mode: "eager",
+                frames: 0,
+                phases: [],
+            };
+        }
+        streamSummary.frames += 1;
+        if (!streamSummary.phases.includes(envelope.phase)) {
+            streamSummary.phases.push(envelope.phase);
+        }
+        streamSummary.finalStatus = envelope.status;
+        streamSummary.lastMessage = envelope.message;
+    };
+    const serializeEvent = (eventId, name, payload) => {
+        return `id: ${eventId}\nevent: ${name}\ndata: ${JSON.stringify(payload)}\n\n`;
+    };
+    const getLatestCheckpointIndex = () => {
+        for (let index = eventLog.length - 1; index >= 0; index -= 1) {
+            const entry = eventLog[index];
+            const envelope = getVisualizationStreamEnvelope(entry.payload?.structuredContent);
+            if (envelope?.frameType === "checkpoint" || envelope?.frameType === "final") {
+                return index;
+            }
+        }
+        return -1;
+    };
+    const pruneEventLog = () => {
+        if (eventLog.length <= MAX_EVENT_LOG)
+            return;
+        const latestCheckpointIndex = getLatestCheckpointIndex();
+        if (latestCheckpointIndex > 0) {
+            eventLog.splice(0, latestCheckpointIndex);
+        }
+        if (eventLog.length > MAX_EVENT_LOG) {
+            eventLog.splice(0, eventLog.length - MAX_EVENT_LOG);
+        }
+    };
+    const pushEvent = (name, payload) => {
+        if (completed)
+            return;
+        const eventId = nextEventId++;
+        eventLog.push({ id: eventId, name, payload });
+        updateStreamSummary(payload);
+        pruneEventLog();
+        const chunk = serializeEvent(eventId, name, payload);
+        for (const client of sseClients) {
+            try {
+                client.write(chunk);
+            }
+            catch {
+                sseClients.delete(client);
+            }
+        }
+    };
+    const replayEvents = (res, lastEventIdHeader) => {
+        const parsedLastId = lastEventIdHeader ? Number(lastEventIdHeader) : Number.NaN;
+        const eventsToReplay = Number.isFinite(parsedLastId)
+            ? eventLog.filter((entry) => entry.id > parsedLastId)
+            : (() => {
+                const latestCheckpointIndex = getLatestCheckpointIndex();
+                return latestCheckpointIndex >= 0 ? eventLog.slice(latestCheckpointIndex) : eventLog;
+            })();
+        for (const entry of eventsToReplay) {
+            try {
+                res.write(serializeEvent(entry.id, entry.name, entry.payload));
+            }
+            catch {
+                sseClients.delete(res);
+                return;
+            }
+        }
+    };
+    const closeSse = () => {
+        for (const client of sseClients) {
+            try {
+                client.end();
+            }
+            catch { }
+        }
+        sseClients.clear();
+    };
+    const stopWatchdog = () => {
+        if (!watchdog)
+            return;
+        clearInterval(watchdog);
+        watchdog = null;
+    };
+    const markCompleted = (reason) => {
+        if (completed)
+            return;
+        log.debug("Session completed", { reason });
+        pushEvent("session-complete", { reason });
+        completed = true;
+        stopWatchdog();
+        options.onComplete?.(reason);
+    };
+    const server = http.createServer(async (req, res) => {
+        try {
+            const method = req.method || "GET";
+            const url = new URL(req.url || "/", `http://${req.headers.host || "127.0.0.1"}`);
+            if (method === "GET" && url.pathname === "/") {
+                if (!validateTokenQuery(url, sessionToken, res))
+                    return;
+                touchHeartbeat();
+                const html = buildHostHtmlTemplate({
+                    sessionToken,
+                    serverName: options.serverName,
+                    toolName: options.toolName,
+                    toolArgs: options.toolArgs,
+                    resource: options.resource,
+                    allowAttribute: buildAllowAttribute(options.resource.meta.permissions),
+                    requireToolConsent: options.consentManager.requiresPrompt(options.serverName),
+                    cacheToolConsent: options.consentManager.shouldCacheConsent(),
+                    hostContext,
+                });
+                res.writeHead(200, {
+                    "Content-Type": "text/html; charset=utf-8",
+                    "Cache-Control": "no-store",
+                });
+                res.end(html);
+                return;
+            }
+            if (method === "GET" && url.pathname === "/events") {
+                if (!validateTokenQuery(url, sessionToken, res))
+                    return;
+                touchHeartbeat();
+                log.debug("SSE client connected", { clientCount: sseClients.size + 1 });
+                res.writeHead(200, {
+                    "Content-Type": "text/event-stream",
+                    "Cache-Control": "no-cache, no-transform",
+                    Connection: "keep-alive",
+                    "X-Accel-Buffering": "no",
+                });
+                res.write(": connected\n\n");
+                sseClients.add(res);
+                replayEvents(res, req.headers["last-event-id"] ? String(req.headers["last-event-id"]) : null);
+                req.on("close", () => {
+                    sseClients.delete(res);
+                });
+                return;
+            }
+            if (method === "GET" && url.pathname === "/health") {
+                if (!validateTokenQuery(url, sessionToken, res))
+                    return;
+                sendJson(res, 200, { ok: true, result: { healthy: true } });
+                return;
+            }
+            if (method === "GET" && url.pathname === "/ui-app") {
+                if (!validateTokenQuery(url, sessionToken, res))
+                    return;
+                touchHeartbeat();
+                // Serve the MCP app's UI HTML directly (avoids blob URL security issues)
+                // Apply CSP meta tag if specified in resource metadata
+                const cspContent = buildCspMetaContent(options.resource.meta.csp);
+                const appHtml = applyCspMeta(options.resource.html, cspContent);
+                res.writeHead(200, {
+                    "Content-Type": "text/html; charset=utf-8",
+                    "Cache-Control": "no-store",
+                });
+                res.end(appHtml);
+                return;
+            }
+            if (method === "GET" && url.pathname === "/app-bridge.bundle.js") {
+                // Serve the pre-bundled AppBridge module
+                const bundlePath = path.join(import.meta.dirname, "app-bridge.bundle.js");
+                try {
+                    const content = await fs.readFile(bundlePath, "utf-8");
+                    res.writeHead(200, {
+                        "Content-Type": "application/javascript",
+                        "Cache-Control": "public, max-age=31536000",
+                    });
+                    res.end(content);
+                }
+                catch {
+                    sendJson(res, 500, { ok: false, error: "Bundle not found" });
+                }
+                return;
+            }
+            if (method !== "POST") {
+                sendJson(res, 404, { ok: false, error: "Not found" });
+                return;
+            }
+            const body = await parseBody(req, res);
+            if (!body)
+                return;
+            if (!validateTokenBody(body, sessionToken, res))
+                return;
+            const params = body.params ?? {};
+            touchHeartbeat();
+            if (url.pathname === "/proxy/tools/call") {
+                options.consentManager.ensureApproved(options.serverName);
+                const callParams = params;
+                if (!callParams || typeof callParams.name !== "string" || !callParams.name.trim()) {
+                    sendJson(res, 400, { ok: false, error: "Invalid tools/call params" });
+                    return;
+                }
+                const connection = options.manager.getConnection(options.serverName);
+                if (!connection || connection.status !== "connected") {
+                    sendJson(res, 503, { ok: false, error: `Server "${options.serverName}" is not connected` });
+                    return;
+                }
+                try {
+                    options.manager.touch(options.serverName);
+                    options.manager.incrementInFlight(options.serverName);
+                    const result = await connection.client.callTool({
+                        name: callParams.name,
+                        arguments: callParams.arguments && typeof callParams.arguments === "object" && !Array.isArray(callParams.arguments)
+                            ? callParams.arguments
+                            : {},
+                    }, undefined, options.manager.getRequestOptions?.(options.serverName));
+                    sendJson(res, 200, { ok: true, result });
+                }
+                finally {
+                    options.manager.decrementInFlight(options.serverName);
+                    options.manager.touch(options.serverName);
+                }
+                return;
+            }
+            if (url.pathname === "/proxy/ui/consent") {
+                const approved = !!params.approved;
+                options.consentManager.registerDecision(options.serverName, approved);
+                sendJson(res, 200, { ok: true, result: { approved } });
+                return;
+            }
+            if (url.pathname === "/proxy/ui/message") {
+                const msgParams = params;
+                const promptText = extractUiPromptText(msgParams);
+                // Track messages by type (order: prompt → intent → notify)
+                // Must match the order in index.ts onMessage handler
+                if (promptText) {
+                    sessionMessages.prompts.push(promptText);
+                    log.debug("UI prompt received", { prompt: promptText.slice(0, 100) });
+                }
+                else if (msgParams.type === "intent" || msgParams.intent) {
+                    const intentName = msgParams.intent ?? "";
+                    if (intentName) {
+                        sessionMessages.intents.push({
+                            intent: intentName,
+                            params: msgParams.params
+                        });
+                        log.debug("UI intent received", { intent: intentName });
+                    }
+                }
+                else if (msgParams.type === "notify" || msgParams.message) {
+                    const notifyText = msgParams.message ?? "";
+                    if (notifyText) {
+                        sessionMessages.notifications.push(notifyText);
+                        log.debug("UI notification", { message: notifyText.slice(0, 100) });
+                    }
+                }
+                await options.onMessage?.(msgParams);
+                sendJson(res, 200, { ok: true, result: {} });
+                return;
+            }
+            if (url.pathname === "/proxy/ui/context") {
+                const ctxParams = params;
+                log.debug("UI context update", { hasContent: !!ctxParams.content });
+                await options.onContextUpdate?.(ctxParams);
+                sendJson(res, 200, { ok: true, result: {} });
+                return;
+            }
+            if (url.pathname === "/proxy/ui/open-link") {
+                const openParams = params;
+                if (!openParams?.url || typeof openParams.url !== "string") {
+                    sendJson(res, 400, { ok: false, error: "Invalid open-link params" });
+                    return;
+                }
+                let result = {};
+                try {
+                    new URL(openParams.url);
+                }
+                catch {
+                    result = { isError: true };
+                }
+                sendJson(res, 200, { ok: true, result });
+                return;
+            }
+            if (url.pathname === "/proxy/ui/download-file") {
+                sendJson(res, 200, { ok: true, result: { isError: true } });
+                return;
+            }
+            if (url.pathname === "/proxy/ui/request-display-mode") {
+                const displayParams = params;
+                const requested = displayParams?.mode;
+                const available = hostContext.availableDisplayModes ?? ["inline"];
+                if (requested && available.includes(requested)) {
+                    currentDisplayMode = requested;
+                }
+                hostContext.displayMode = currentDisplayMode;
+                pushEvent("host-context", { displayMode: currentDisplayMode });
+                const result = { mode: currentDisplayMode };
+                sendJson(res, 200, { ok: true, result });
+                return;
+            }
+            if (url.pathname === "/proxy/ui/heartbeat") {
+                sendJson(res, 200, { ok: true, result: {} });
+                return;
+            }
+            if (url.pathname === "/proxy/ui/complete") {
+                const reason = typeof params.reason === "string"
+                    ? params.reason
+                    : "done";
+                markCompleted(reason);
+                sendJson(res, 200, { ok: true, result: {} });
+                setTimeout(() => {
+                    try {
+                        server.close();
+                    }
+                    catch { }
+                    closeSse();
+                }, 20).unref();
+                return;
+            }
+            sendJson(res, 404, { ok: false, error: "Not found" });
+        }
+        catch (error) {
+            const wrapped = wrapError(error, { server: options.serverName, tool: options.toolName });
+            const status = /approval required|denied/i.test(wrapped.message) ? 403 : 500;
+            if (status === 500) {
+                log.error("Request handler error", error instanceof Error ? error : undefined);
+            }
+            sendJson(res, status, { ok: false, error: wrapped.message });
+        }
+    });
+    if (options.initialResultPromise) {
+        options.initialResultPromise.then((result) => pushEvent("tool-result", result), (error) => {
+            const reason = error instanceof Error ? error.message : String(error);
+            pushEvent("tool-cancelled", { reason });
+        });
+    }
+    watchdog = setInterval(() => {
+        if (completed)
+            return;
+        if (Date.now() - lastHeartbeatAt <= ABANDONED_GRACE_MS)
+            return;
+        markCompleted("stale");
+        try {
+            server.close();
+        }
+        catch { }
+        closeSse();
+    }, WATCHDOG_INTERVAL_MS);
+    watchdog.unref();
+    return new Promise((resolve, reject) => {
+        const onError = (error) => {
+            log.error("Failed to start server", error);
+            reject(new ServerError(error.message, { port: options.port, cause: error }));
+        };
+        server.once("error", onError);
+        server.listen(options.port ?? 0, "127.0.0.1", () => {
+            server.off("error", onError);
+            const address = server.address();
+            if (!address || typeof address === "string") {
+                const err = new ServerError("invalid address");
+                log.error("Invalid server address", err);
+                reject(err);
+                return;
+            }
+            log.debug("Server started", { port: address.port });
+            const handle = {
+                url: `http://localhost:${address.port}/?session=${sessionToken}`,
+                port: address.port,
+                sessionToken,
+                serverName: options.serverName,
+                toolName: options.toolName,
+                close: (reason) => {
+                    markCompleted(reason ?? "closed");
+                    try {
+                        server.close();
+                    }
+                    catch { }
+                    closeSse();
+                },
+                sendToolInput: (args) => {
+                    pushEvent("tool-input", { arguments: args });
+                },
+                sendToolResult: (result) => {
+                    pushEvent("tool-result", result);
+                },
+                sendResultPatch: (result) => {
+                    pushEvent("result-patch", result);
+                },
+                sendToolCancelled: (reason) => {
+                    pushEvent("tool-cancelled", { reason });
+                },
+                sendHostContext: (context) => {
+                    Object.assign(hostContext, context);
+                    pushEvent("host-context", context);
+                },
+                getSessionMessages: () => ({ ...sessionMessages }),
+                getStreamSummary: () => streamSummary ? { ...streamSummary, phases: [...streamSummary.phases] } : undefined,
+            };
+            resolve(handle);
+        });
+    });
+}
+async function parseBody(req, res) {
+    try {
+        const body = await readBody(req);
+        if (!body || typeof body !== "object") {
+            sendJson(res, 400, { ok: false, error: "Invalid request body" });
+            return null;
+        }
+        return body;
+    }
+    catch (error) {
+        sendJson(res, 400, { ok: false, error: error instanceof Error ? error.message : "Invalid body" });
+        return null;
+    }
+}
+function readBody(req) {
+    return new Promise((resolve, reject) => {
+        let size = 0;
+        const chunks = [];
+        req.on("data", (chunk) => {
+            size += chunk.length;
+            if (size > MAX_BODY_SIZE) {
+                req.destroy();
+                reject(new Error("Request body too large"));
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on("end", () => {
+            try {
+                resolve(JSON.parse(Buffer.concat(chunks).toString("utf-8")));
+            }
+            catch (error) {
+                reject(error);
+            }
+        });
+        req.on("error", reject);
+    });
+}
+function validateTokenQuery(url, expected, res) {
+    const token = url.searchParams.get("session");
+    if (token !== expected) {
+        sendJson(res, 403, { ok: false, error: "Invalid session" });
+        return false;
+    }
+    return true;
+}
+function validateTokenBody(body, expected, res) {
+    if (body.token !== expected) {
+        sendJson(res, 403, { ok: false, error: "Invalid session" });
+        return false;
+    }
+    return true;
+}
+function sendJson(res, status, payload) {
+    res.writeHead(status, {
+        "Content-Type": "application/json; charset=utf-8",
+        "Cache-Control": "no-store",
+    });
+    res.end(JSON.stringify(payload));
+}
+//# sourceMappingURL=ui-server.js.map