@dipoleml/dcode-cli 1.0.0 → 1.2.0

package/node_modules/@dcode/shared/dist/mcp-apps/contract.example.js

@@ -0,0 +1,42 @@
+import { MCP_APPS_CSP_RELAXATION_META_KEY, MCP_APPS_SET_WIDGET_STATE_METHOD, PLUGIN_SANDBOX_PORT_NAME, buildMcpAppsClientCapabilities, buildMcpAppsCspExperimentalCapability, } from "./contract.js";
+/** 一个带 UI 资源的工具 `_meta` 归一化后应得到的描述。 */
+export const exampleToolUiDescriptor = {
+    resourceUri: "ui://example-plugin/widget.html",
+    visibility: ["model", "app"],
+    preferredDisplayMode: "inline",
+    csp: { connectDomains: ["https://api.example.com"], resourceDomains: [] },
+    prefersBorder: true,
+};
+/** main 登记成功后返回给 renderer 的句柄；partition 按 server 身份派生，同一 server 的页面共享。 */
+export const exampleSandboxHandle = {
+    instance: {
+        runtimeId: "test-agent",
+        generation: 1,
+        token: "test-token",
+        appIdentity: "a".repeat(64),
+    },
+    sandboxId: "sb-01",
+    initId: 1,
+    shellUrl: "dcode-sandbox://shell-sb-01/",
+    partition: "persist:plugin-sandbox-v1-0123456789abcdef",
+    // 句柄能带的全部资源级字段都写上：contract.test 用它过 host 的 strict 回包 schema，字段漏同步会在这里失败。
+    resourceMeta: {
+        prefersBorder: true,
+        heightHint: 320,
+        minFrameHeight: 120,
+        showInline: false,
+        permissions: ["clipboardWrite"],
+    },
+};
+/** agent 对 MCP server `initialize` 时宣告的 ui 扩展能力。 */
+export const exampleClientCapabilities = buildMcpAppsClientCapabilities();
+/** 宿主在 hostCapabilities.experimental 里宣告的 CSP 放宽键。 */
+export const exampleCspExperimental = buildMcpAppsCspExperimentalCapability();
+/** 资源级 `_meta` 里声明放宽的写法。 */
+export const exampleResourceMetaWithRelaxations = {
+    ui: { csp: { connectDomains: ["https://api.example.com"] } },
+    [MCP_APPS_CSP_RELAXATION_META_KEY]: { unsafeEval: true },
+};
+export const exampleSetWidgetStateMethod = MCP_APPS_SET_WIDGET_STATE_METHOD;
+export const examplePortName = PLUGIN_SANDBOX_PORT_NAME;
+//# sourceMappingURL=contract.example.js.map

package/node_modules/@dcode/shared/dist/mcp-apps/contract.js

@@ -0,0 +1,101 @@
+/**
+ * MCP Apps 协议契约：agent、host、renderer 与 main 共用的常量、工具 UI 元数据类型、沙箱句柄与登记载荷。
+ * 页面 ↔ 宿主的线协议（`ui/*` 方法、握手、版本协商、JSON-RPC）由官方 `@modelcontextprotocol/ext-apps` 定义，
+ * 这里只保留 DCode 自己的扩展键与限额。只放类型与常量；归一化与 schema 在同目录其他文件，经 index.ts 导出。
+ */
+/** MCP 扩展标识（规范「Extension Identifier」）；与官方 SDK `EXTENSION_ID` 一致。 */
+export const MCP_APPS_EXTENSION_ID = "io.modelcontextprotocol/ui";
+/** UI 资源 mimeType（规范 MUST）；与官方 SDK `RESOURCE_MIME_TYPE` 一致。 */
+export const MCP_APPS_RESOURCE_MIME_TYPE = "text/html;profile=mcp-app";
+/** 弃用的扁平键 `_meta["ui/resourceUri"]`；规范要求宿主 MUST 同时兼容，与官方 SDK `RESOURCE_URI_META_KEY` 一致。 */
+export const MCP_APPS_LEGACY_RESOURCE_URI_META_KEY = "ui/resourceUri";
+/** agent 对每个 MCP server 宣告的能力片段；放进 `Client` 构造参数的 `capabilities.extensions`。 */
+export function buildMcpAppsClientCapabilities() {
+    return { extensions: { [MCP_APPS_EXTENSION_ID]: { mimeTypes: [MCP_APPS_RESOURCE_MIME_TYPE] } } };
+}
+/** 宿主 hostInfo.name；hostInfo.version 只供页面 feature detect，与应用版本无关。 */
+export const MCP_APPS_HOST_NAME = "dcode";
+export const MCP_APPS_HOST_VERSION = "1";
+/** `ui/initialize` 握手超时（端口到达起算）与卸载前 `ui/resource-teardown` 的等待上限。 */
+export const MCP_APPS_HANDSHAKE_TIMEOUT_MS = 15_000;
+export const MCP_APPS_TEARDOWN_TIMEOUT_MS = 500;
+export const MCP_APPS_DEFAULT_TOOL_VISIBILITY = ["model", "app"];
+/**
+ * 资源级 `_meta["dcode/csp"]`：宿主缺省按规范块（只有 'self' 'unsafe-inline'），不放行 `'unsafe-eval'` /
+ * `'wasm-unsafe-eval'`；需要 eval / WebAssembly 的资源在这里显式声明。宿主经
+ * `hostCapabilities.experimental["dcode/csp"].flags` 宣告支持的键。
+ */
+export const MCP_APPS_CSP_RELAXATION_META_KEY = "dcode/csp";
+export const MCP_APPS_CSP_RELAXATION_FLAGS = ["unsafeEval", "wasmUnsafeEval"];
+export function buildMcpAppsCspExperimentalCapability() {
+    return { [MCP_APPS_CSP_RELAXATION_META_KEY]: { flags: [...MCP_APPS_CSP_RELAXATION_FLAGS] } };
+}
+/**
+ * 资源可声明的浏览器权限（规范草案 `UIResourceMeta.permissions` 的四键），顺序即归一化顺序。
+ * 宿主：未声明一律拒绝；camera / microphone / geolocation 首次使用时原生弹框确认，clipboardWrite 按声明放行。
+ */
+export const MCP_APPS_RESOURCE_PERMISSIONS = [
+    "camera",
+    "microphone",
+    "geolocation",
+    "clipboardWrite",
+];
+/** 规范权限键 → 插件 iframe `allow` 的 Permissions Policy 特性名。 */
+export const MCP_APPS_IFRAME_ALLOW_TOKENS = {
+    camera: "camera",
+    microphone: "microphone",
+    geolocation: "geolocation",
+    clipboardWrite: "clipboard-write",
+};
+/** 与官方 SDK `buildAllowAttribute` 同形：`"camera; clipboard-write"`；没有声明返回空串。 */
+export function buildMcpAppsIframeAllow(permissions) {
+    if (!permissions?.length)
+        return "";
+    return MCP_APPS_RESOURCE_PERMISSIONS.filter((key) => permissions.includes(key))
+        .map((key) => MCP_APPS_IFRAME_ALLOW_TOKENS[key])
+        .join("; ");
+}
+/** `_meta.ui.surface` / 清单 surface id 的长度与字符集（与 sandboxId 同源：可进 CSP host-source）。 */
+export const MCP_APPS_SURFACE_ID_MAX_CHARS = 128;
+export const MCP_APPS_SURFACE_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9_.-]*$/;
+export const MCP_APPS_UI_RESOURCE_SCHEME = "ui://";
+export const MCP_APPS_RESOURCE_URI_MAX_CHARS = 2048;
+/**
+ * `display.ui.structuredContent` / `widgetMeta` / `content` 的持久化上限（JSON 文本的 UTF-8 字节）。
+ * 超限不截断字符串（半截 JSON 没有意义）：字段整个省略，`truncated: true` 且 `truncatedBytes` 记被丢弃的字节数；
+ * 页面侧 `toolOutput` 为 null、`toolResponseMetadata["dcode/truncated"] = { bytes }`，可用 tools/call 重取。
+ */
+export const MCP_APPS_STRUCTURED_CONTENT_MAX_BYTES = 64 * 1024;
+export const MCP_APPS_WIDGET_META_MAX_BYTES = 16 * 1024;
+export const MCP_APPS_CONTENT_MAX_BYTES = 32 * 1024;
+export const MCP_APPS_TRUNCATED_META_KEY = "dcode/truncated";
+/** host 侧接受的 `ui://` HTML 上限与 mimeType 白名单（规范只认带 profile 的；无 profile 的 text/html 是有意的宽松超集）。 */
+// 官方 pdf-server 示例的单文件页面（内联 pdf.js）就有 4.3 MB，4 MiB 会把它拒掉；放到 16 MiB。
+export const MCP_APPS_HTML_MAX_BYTES = 16 * 1024 * 1024;
+export const MCP_APPS_HTML_MIME_TYPES = [MCP_APPS_RESOURCE_MIME_TYPE, "text/html"];
+/**
+ * 页面经 ui/update-model-context 与 ui/message 送来的 image 块：白名单三种位图，单张解码后 ≤ 4 MiB；
+ * 不在白名单或超限整个请求 -32602 `unsupported_content`。
+ */
+export const MCP_APPS_IMAGE_MIME_TYPES = ["image/png", "image/jpeg", "image/webp"];
+export const MCP_APPS_IMAGE_MAX_BYTES = 4 * 1024 * 1024;
+export { MCP_APPS_UI_READ_RESOURCE_MAX_BYTES, MCP_APPS_UI_READ_RESOURCE_MIME_ALLOWLIST, isMcpAppsUiReadResourceMimeAllowed, } from "./resourceMime.js";
+/**
+ * `hostCapabilities.experimental` 里 DCode 扩展的键。官方 SDK 的 zod 会剥掉标准位之外的未知能力键，
+ * 扩展一律放 experimental（规范预留位），页面按键 feature detect。
+ */
+export const MCP_APPS_WIDGET_STATE_EXPERIMENTAL_KEY = "dcode/widgetState";
+export const MCP_APPS_RESOURCE_SUBSCRIBE_EXPERIMENTAL_KEY = "dcode/resourceSubscribe";
+export const MCP_APPS_SURFACE_EXPERIMENTAL_KEY = "dcode/surface";
+/**
+ * DCode 扩展方法 `ui/set-widget-state { widgetState }`（MCP Apps 无 widgetState）：页面把界面状态交给宿主
+ * renderer 内存保存（不持久化，会话内重挂载可恢复）；初值经 hostContext 的 `dcode/widgetState` 键随握手下发。
+ */
+export const MCP_APPS_SET_WIDGET_STATE_METHOD = "ui/set-widget-state";
+export const MCP_APPS_WIDGET_STATE_CONTEXT_KEY = "dcode/widgetState";
+/** 宿主 renderer ↔ relay shell 之间唯一一条 MessageChannel 的名字；上面跑原始 JSON-RPC（官方 AppBridge / App）。 */
+export const PLUGIN_SANDBOX_PORT_NAME = "plugin-sandbox-rpc";
+export function buildPluginSandboxScopeId(scope) {
+    return scope.kind === "toolCall" ? `tool:${scope.toolCallId}` : `surface:${scope.surfaceId}`;
+}
+//# sourceMappingURL=contract.js.map

package/node_modules/@dcode/shared/dist/mcp-apps/contract.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=contract.test.d.ts.map

package/node_modules/@dcode/shared/dist/mcp-apps/contract.test.js

@@ -0,0 +1,64 @@
+import { describe, expect, it } from "vitest";
+import { MCP_APPS_EXTENSION_ID, MCP_APPS_RESOURCE_MIME_TYPE, MCP_APPS_UI_RESOURCE_SCHEME, MCP_APPS_LEGACY_RESOURCE_URI_META_KEY, buildMcpAppsClientCapabilities, isMcpAppsUiReadResourceMimeAllowed, } from "./contract.js";
+import { normalizeMcpAppCspRelaxations, normalizeMcpToolUiMeta } from "./toolMeta.js";
+import { exampleClientCapabilities, exampleResourceMetaWithRelaxations, exampleSandboxHandle, exampleToolUiDescriptor, } from "./contract.example.js";
+describe("mcp-apps-protocol contract", () => {
+    it.each([
+        ["PDF 文档", " Application/PDF ; version=1.7 "],
+        ["办公文档", "application/vnd.openxmlformats-officedocument.wordprocessingml.document"],
+        ["电子表格", "application/vnd.ms-excel"],
+        ["开放演示文档", "application/vnd.oasis.opendocument.presentation"],
+        ["矢量图片", "image/svg+xml; charset=utf-8"],
+        ["相机图片", "image/heic"],
+        ["动画图片", "image/gif"],
+        ["Audio", "audio/mpeg"],
+        ["WAV 别名", "audio/x-wav"],
+        ["Video", "video/mp4"],
+        ["Archived", "application/zip"],
+        ["GZIP 别名", "application/x-gzip"],
+        ["Font", "font/woff2"],
+        ["结构化数据", "application/yaml"],
+        ["JSON 模型", "model/gltf+json"],
+        ["已有文本前缀", "text/csv; charset=utf-8"],
+        ["已有二进制", "application/octet-stream"],
+        ["已有模型", "model/gltf-binary"],
+    ])("页面资源接纳%s（%s）", (_label, mimeType) => {
+        expect(isMcpAppsUiReadResourceMimeAllowed(mimeType)).toBe(true);
+    });
+    it.each([
+        "application/x-msdownload",
+        "application/x-executable",
+        "application/vnd.example.unknown",
+        "image/x-example-unknown",
+        "application/pdf-malware",
+        "application/pdf,application/x-msdownload",
+        "",
+        " ; charset=utf-8",
+    ])("资源扩容仍拒绝未知或不合法 MIME：%s", (mimeType) => {
+        expect(isMcpAppsUiReadResourceMimeAllowed(mimeType)).toBe(false);
+    });
+    it("扩展标识与 UI 资源 mimeType 与官方 SDK 常量一致", () => {
+        expect(MCP_APPS_EXTENSION_ID).toBe("io.modelcontextprotocol/ui");
+        expect(MCP_APPS_RESOURCE_MIME_TYPE).toBe("text/html;profile=mcp-app");
+        expect(MCP_APPS_LEGACY_RESOURCE_URI_META_KEY).toBe("ui/resourceUri");
+        expect(buildMcpAppsClientCapabilities()).toEqual(exampleClientCapabilities);
+    });
+    it("resourceUri 同时接受标准键、弃用扁平键与 openai/outputTemplate", () => {
+        expect(normalizeMcpToolUiMeta({ ui: { resourceUri: "ui://a/b" } })?.resourceUri).toBe("ui://a/b");
+        expect(normalizeMcpToolUiMeta({ "ui/resourceUri": "ui://a/c" })?.resourceUri).toBe("ui://a/c");
+        expect(normalizeMcpToolUiMeta({ "openai/outputTemplate": "ui://a/d" })?.resourceUri).toBe("ui://a/d");
+        expect(normalizeMcpToolUiMeta({ ui: { resourceUri: "https://a/b" } })).toBeNull();
+    });
+    it("dcode/csp 只认已知布尔键", () => {
+        expect(normalizeMcpAppCspRelaxations(exampleResourceMetaWithRelaxations)).toEqual({
+            unsafeEval: true,
+        });
+        expect(normalizeMcpAppCspRelaxations({ "dcode/csp": { unsafeEval: false, other: true } })).toBe(null);
+    });
+    it("示例描述与句柄满足契约形状", () => {
+        expect(exampleToolUiDescriptor.resourceUri.startsWith(MCP_APPS_UI_RESOURCE_SCHEME)).toBe(true);
+        expect(exampleSandboxHandle.shellUrl).toBe(`dcode-sandbox://shell-${exampleSandboxHandle.sandboxId}/`);
+        expect(exampleSandboxHandle.partition.startsWith("persist:plugin-sandbox-")).toBe(true);
+    });
+});
+//# sourceMappingURL=contract.test.js.map

package/node_modules/@dcode/shared/dist/mcp-apps/hostContract.d.ts

@@ -0,0 +1,47 @@
+/**
+ * MCP Apps 宿主侧契约的第二半：ui/download-file 项、tool-input / tool-result 载荷、宿主提供的 titleBar 与样式变量。
+ * hostInfo / hostCapabilities / hostContext 直接用官方 SDK 的 `McpUiHostCapabilities` / `McpUiHostContext`，不再重复定义。
+ */
+/**
+ * `ui/download-file { contents }` 的一项——MCP 标准的 EmbeddedResource（内联 text / blob）
+ * 或 ResourceLink（只有 uri，宿主经同插件 server `resources/read` 取内容）。
+ */
+export type McpAppsDownloadFileItem = {
+    type: "resource";
+    resource: {
+        uri: string;
+        name?: string;
+        mimeType?: string;
+        text?: string;
+        blob?: string;
+    };
+} | {
+    type: "resource_link";
+    uri: string;
+    name?: string;
+    mimeType?: string;
+};
+/** 单次 ui/download-file 的项数上限与单个文件解码后上限（与桌面 saveFile 的 50 MiB 同值）。 */
+export declare const MCP_APPS_DOWNLOAD_FILE_MAX_ITEMS = 16;
+export declare const MCP_APPS_DOWNLOAD_FILE_MAX_BYTES: number;
+/** MCP 内容块（text / image / resource…）；宿主只透传，不解释非 text 块。 */
+export type McpAppsContentBlock = Record<string, unknown>;
+/** `ui/notifications/tool-input` 与 `tool-result` 的载荷（与官方 SDK 通知参数同形）。 */
+export interface McpAppsToolInputPayload {
+    arguments?: Record<string, unknown>;
+}
+export interface McpAppsToolResultPayload {
+    content?: McpAppsContentBlock[];
+    structuredContent?: unknown;
+    isError?: boolean;
+    _meta?: Record<string, unknown>;
+}
+/** 宿主画在页面视口上方的面板头部；只在 fullscreen 给出（hostContext 允许附加键）。 */
+export interface McpAppsHostTitleBar {
+    height: number;
+    leftInset: number;
+    viewportLeftInset: number;
+}
+/** MCP Apps 标准样式变量（键名见官方 `McpUiStyleVariableKey`），值是页面可直接使用的 CSS 文本。 */
+export type McpAppsStyleVariables = Record<string, string>;
+//# sourceMappingURL=hostContract.d.ts.map

package/node_modules/@dcode/shared/dist/mcp-apps/hostContract.js

@@ -0,0 +1,8 @@
+/**
+ * MCP Apps 宿主侧契约的第二半：ui/download-file 项、tool-input / tool-result 载荷、宿主提供的 titleBar 与样式变量。
+ * hostInfo / hostCapabilities / hostContext 直接用官方 SDK 的 `McpUiHostCapabilities` / `McpUiHostContext`，不再重复定义。
+ */
+/** 单次 ui/download-file 的项数上限与单个文件解码后上限（与桌面 saveFile 的 50 MiB 同值）。 */
+export const MCP_APPS_DOWNLOAD_FILE_MAX_ITEMS = 16;
+export const MCP_APPS_DOWNLOAD_FILE_MAX_BYTES = 50 * 1024 * 1024;
+//# sourceMappingURL=hostContract.js.map

package/node_modules/@dcode/shared/dist/mcp-apps/index.d.ts

@@ -0,0 +1,9 @@
+export * from "./appTools.js";
+export * from "./content.js";
+export * from "./contract.js";
+export * from "./hostContract.js";
+export * from "./instance.js";
+export * from "./schemas.js";
+export * from "./sampling.js";
+export * from "./toolMeta.js";
+//# sourceMappingURL=index.d.ts.map

package/node_modules/@dcode/shared/dist/mcp-apps/index.js

@@ -0,0 +1,9 @@
+export * from "./appTools.js";
+export * from "./content.js";
+export * from "./contract.js";
+export * from "./hostContract.js";
+export * from "./instance.js";
+export * from "./schemas.js";
+export * from "./sampling.js";
+export * from "./toolMeta.js";
+//# sourceMappingURL=index.js.map

package/node_modules/@dcode/shared/dist/mcp-apps/instance.d.ts

@@ -0,0 +1,10 @@
+import { z } from "zod";
+/** Agent 签发的内存凭证；Main 的 initId 只用于端口握手。 */
+export declare const mcpAppInstanceSchema: z.ZodObject<{
+    runtimeId: z.ZodString;
+    generation: z.ZodNumber;
+    appIdentity: z.ZodString;
+    token: z.ZodString;
+}, z.core.$strict>;
+export type McpAppInstance = z.infer<typeof mcpAppInstanceSchema>;
+//# sourceMappingURL=instance.d.ts.map

package/node_modules/@dcode/shared/dist/mcp-apps/instance.js

@@ -0,0 +1,11 @@
+import { z } from "zod";
+/** Agent 签发的内存凭证；Main 的 initId 只用于端口握手。 */
+export const mcpAppInstanceSchema = z
+    .object({
+    runtimeId: z.string().min(1),
+    generation: z.number().int().positive(),
+    appIdentity: z.string().regex(/^[a-f0-9]{64}$/),
+    token: z.string().min(1),
+})
+    .strict();
+//# sourceMappingURL=instance.js.map

package/node_modules/@dcode/shared/dist/mcp-apps/module.d.ts

@@ -0,0 +1,12 @@
+/**
+ * mcp-apps-protocol 模块清单（architecture-governance managed 模块）。
+ * 纯 domain：MCP Apps 的 DCode 扩展常量、`_meta` 归一化、`display.ui` schema 与沙箱契约类型，零 IO。
+ * 页面 ↔ 宿主的线协议由官方 `@modelcontextprotocol/ext-apps` 承担，本模块不再持有状态机。
+ */
+export declare const mcpAppsProtocolModule: {
+    readonly id: "mcp-apps-protocol";
+    readonly requires: readonly [];
+    readonly provides: readonly ["mcp-apps-protocol"];
+    readonly publicEntrypoints: readonly ["index.ts", "contract.ts"];
+};
+//# sourceMappingURL=module.d.ts.map

package/node_modules/@dcode/shared/dist/mcp-apps/module.js

@@ -0,0 +1,12 @@
+/**
+ * mcp-apps-protocol 模块清单（architecture-governance managed 模块）。
+ * 纯 domain：MCP Apps 的 DCode 扩展常量、`_meta` 归一化、`display.ui` schema 与沙箱契约类型，零 IO。
+ * 页面 ↔ 宿主的线协议由官方 `@modelcontextprotocol/ext-apps` 承担，本模块不再持有状态机。
+ */
+export const mcpAppsProtocolModule = {
+    id: "mcp-apps-protocol",
+    requires: [],
+    provides: ["mcp-apps-protocol"],
+    publicEntrypoints: ["index.ts", "contract.ts"],
+};
+//# sourceMappingURL=module.js.map

package/node_modules/@dcode/shared/dist/mcp-apps/resourceMime.d.ts

@@ -0,0 +1,8 @@
+/**
+ * 页面发起的 `resources/read`（`mcp/uiReadResource`）单次结果总大小上限，以及 mimeType 白名单。
+ * 白名单项以 `/` 结尾表示前缀匹配（如 `text/`），否则精确匹配（忽略参数与大小写）。
+ */
+export declare const MCP_APPS_UI_READ_RESOURCE_MAX_BYTES: number;
+export declare const MCP_APPS_UI_READ_RESOURCE_MIME_ALLOWLIST: readonly string[];
+export declare function isMcpAppsUiReadResourceMimeAllowed(mimeType: string): boolean;
+//# sourceMappingURL=resourceMime.d.ts.map

package/node_modules/@dcode/shared/dist/mcp-apps/resourceMime.js

@@ -0,0 +1,73 @@
+/**
+ * 页面发起的 `resources/read`（`mcp/uiReadResource`）单次结果总大小上限，以及 mimeType 白名单。
+ * 白名单项以 `/` 结尾表示前缀匹配（如 `text/`），否则精确匹配（忽略参数与大小写）。
+ */
+export const MCP_APPS_UI_READ_RESOURCE_MAX_BYTES = 8 * 1024 * 1024;
+// 原列表遗漏 PDF 等常见资源，导致插件已握手却读不到文件；按明确 MIME 扩展，保留未知类型拒绝规则。
+export const MCP_APPS_UI_READ_RESOURCE_MIME_ALLOWLIST = [
+    "text/",
+    "application/json",
+    "application/xml",
+    "application/yaml",
+    "application/x-yaml",
+    // 文档与办公文件。
+    "application/pdf",
+    "application/rtf",
+    "application/msword",
+    "application/vnd.ms-excel",
+    "application/vnd.ms-powerpoint",
+    "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+    "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+    "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+    "application/vnd.oasis.opendocument.text",
+    "application/vnd.oasis.opendocument.spreadsheet",
+    "application/vnd.oasis.opendocument.presentation",
+    // 图片。
+    "image/png",
+    "image/jpeg",
+    "image/webp",
+    "image/svg+xml",
+    "image/gif",
+    "image/avif",
+    "image/bmp",
+    "image/tiff",
+    "image/x-icon",
+    "image/vnd.microsoft.icon",
+    "image/heic",
+    "image/heif",
+    // 音视频。
+    "audio/mpeg",
+    "audio/mp4",
+    "audio/ogg",
+    "audio/wav",
+    "audio/x-wav",
+    "audio/webm",
+    "audio/aac",
+    "audio/flac",
+    "video/mp4",
+    "video/webm",
+    "video/ogg",
+    "video/quicktime",
+    "video/mpeg",
+    // 归档、字体与模型只传输内容，由插件决定如何使用。
+    "application/zip",
+    "application/gzip",
+    "application/x-gzip",
+    "application/x-tar",
+    "application/x-7z-compressed",
+    "application/vnd.rar",
+    "font/woff",
+    "font/woff2",
+    "font/ttf",
+    "font/otf",
+    "model/gltf+json",
+    "model/gltf-binary",
+    "application/octet-stream",
+];
+export function isMcpAppsUiReadResourceMimeAllowed(mimeType) {
+    const essence = mimeType.split(";")[0].trim().toLowerCase();
+    if (!essence)
+        return false;
+    return MCP_APPS_UI_READ_RESOURCE_MIME_ALLOWLIST.some((entry) => entry.endsWith("/") ? essence.startsWith(entry) : essence === entry);
+}
+//# sourceMappingURL=resourceMime.js.map

package/node_modules/@dcode/shared/dist/mcp-apps/sampling.d.ts

@@ -0,0 +1,101 @@
+import { z } from "zod";
+export declare const MCP_APPS_SAMPLING_TIMEOUT_MS = 60000;
+export declare const MCP_APPS_SAMPLING_TRANSPORT_TIMEOUT_MS = 65000;
+export declare const MCP_APPS_SAMPLING_MAX_BYTES: number;
+export declare const MCP_APPS_SAMPLING_MAX_BLOCKS = 64;
+export declare const MCP_APPS_SAMPLING_MAX_PER_SESSION = 4;
+export declare const MCP_APPS_SAMPLING_MAX_PER_AGENT = 8;
+export declare const MCP_APPS_SAMPLING_MAX_OPERATIONS = 4096;
+/** 只开放宿主确实实现的官方子集；不静默剥除 tools/audio/模型配置等字段。 */
+export declare const mcpAppsSamplingParamsSchema: z.ZodObject<{
+    messages: z.ZodArray<z.ZodObject<{
+        role: z.ZodEnum<{
+            user: "user";
+            assistant: "assistant";
+        }>;
+        content: z.ZodUnion<readonly [z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"text">;
+            text: z.ZodString;
+            annotations: z.ZodOptional<z.ZodObject<{
+                audience: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    user: "user";
+                    assistant: "assistant";
+                }>>>;
+                priority: z.ZodOptional<z.ZodNumber>;
+                lastModified: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"image">;
+            mimeType: z.ZodEnum<{
+                "image/jpeg": "image/jpeg";
+                "image/png": "image/png";
+                "image/webp": "image/webp";
+            }>;
+            data: z.ZodString;
+            annotations: z.ZodOptional<z.ZodObject<{
+                audience: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    user: "user";
+                    assistant: "assistant";
+                }>>>;
+                priority: z.ZodOptional<z.ZodNumber>;
+                lastModified: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strict>], "type">, z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"text">;
+            text: z.ZodString;
+            annotations: z.ZodOptional<z.ZodObject<{
+                audience: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    user: "user";
+                    assistant: "assistant";
+                }>>>;
+                priority: z.ZodOptional<z.ZodNumber>;
+                lastModified: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"image">;
+            mimeType: z.ZodEnum<{
+                "image/jpeg": "image/jpeg";
+                "image/png": "image/png";
+                "image/webp": "image/webp";
+            }>;
+            data: z.ZodString;
+            annotations: z.ZodOptional<z.ZodObject<{
+                audience: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    user: "user";
+                    assistant: "assistant";
+                }>>>;
+                priority: z.ZodOptional<z.ZodNumber>;
+                lastModified: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strict>], "type">>]>;
+    }, z.core.$strict>>;
+    systemPrompt: z.ZodOptional<z.ZodString>;
+    maxTokens: z.ZodNumber;
+    includeContext: z.ZodOptional<z.ZodLiteral<"none">>;
+    modelPreferences: z.ZodOptional<z.ZodObject<{
+        hints: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>>;
+        costPriority: z.ZodOptional<z.ZodNumber>;
+        speedPriority: z.ZodOptional<z.ZodNumber>;
+        intelligencePriority: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strict>;
+export declare const mcpAppsSamplingResultSchema: z.ZodObject<{
+    role: z.ZodLiteral<"assistant">;
+    model: z.ZodString;
+    content: z.ZodObject<{
+        type: z.ZodLiteral<"text">;
+        text: z.ZodString;
+    }, z.core.$strict>;
+    stopReason: z.ZodString;
+}, z.core.$strict>;
+export type McpAppsSamplingParams = z.infer<typeof mcpAppsSamplingParamsSchema>;
+export type McpAppsSamplingResult = z.infer<typeof mcpAppsSamplingResultSchema>;
+//# sourceMappingURL=sampling.d.ts.map

package/node_modules/@dcode/shared/dist/mcp-apps/sampling.js

@@ -0,0 +1,107 @@
+import { z } from "zod";
+import { MCP_APPS_IMAGE_MAX_BYTES, MCP_APPS_IMAGE_MIME_TYPES } from "./contract.js";
+export const MCP_APPS_SAMPLING_TIMEOUT_MS = 60_000;
+export const MCP_APPS_SAMPLING_TRANSPORT_TIMEOUT_MS = 65_000;
+export const MCP_APPS_SAMPLING_MAX_BYTES = 8 * 1024 * 1024;
+export const MCP_APPS_SAMPLING_MAX_BLOCKS = 64;
+export const MCP_APPS_SAMPLING_MAX_PER_SESSION = 4;
+export const MCP_APPS_SAMPLING_MAX_PER_AGENT = 8;
+export const MCP_APPS_SAMPLING_MAX_OPERATIONS = 4096;
+const utf8Bytes = (text) => new TextEncoder().encode(text).byteLength;
+const annotations = z
+    .object({
+    audience: z.array(z.enum(["user", "assistant"])).optional(),
+    priority: z.number().min(0).max(1).optional(),
+    lastModified: z.string().optional(),
+})
+    .strict()
+    .optional();
+const samplingBlockSchema = z.discriminatedUnion("type", [
+    z
+        .object({
+        type: z.literal("text"),
+        text: z.string().max(MCP_APPS_SAMPLING_MAX_BYTES),
+        annotations,
+        _meta: z.record(z.string(), z.unknown()).optional(),
+    })
+        .strict(),
+    z
+        .object({
+        type: z.literal("image"),
+        mimeType: z.enum(MCP_APPS_IMAGE_MIME_TYPES),
+        data: z
+            .string()
+            .min(1)
+            .max(Math.ceil(MCP_APPS_IMAGE_MAX_BYTES / 3) * 4)
+            // 重复四字符分组会在 MiB 级图片上耗尽 V8 正则栈；平坦字符检查保持线性。
+            .refine((data) => data.length % 4 === 0 && /^[A-Za-z0-9+/]*={0,2}$/.test(data))
+            .refine((data) => decodedBytes(data) <= MCP_APPS_IMAGE_MAX_BYTES),
+        annotations,
+        _meta: z.record(z.string(), z.unknown()).optional(),
+    })
+        .strict(),
+]);
+const priority = z.number().min(0).max(1).optional();
+/** 只开放宿主确实实现的官方子集；不静默剥除 tools/audio/模型配置等字段。 */
+export const mcpAppsSamplingParamsSchema = z
+    .object({
+    messages: z
+        .array(z
+        .object({
+        role: z.enum(["user", "assistant"]),
+        content: z.union([
+            samplingBlockSchema,
+            z.array(samplingBlockSchema).min(1).max(MCP_APPS_SAMPLING_MAX_BLOCKS),
+        ]),
+    })
+        .strict())
+        .min(1)
+        .max(MCP_APPS_SAMPLING_MAX_BLOCKS),
+    systemPrompt: z.string().max(MCP_APPS_SAMPLING_MAX_BYTES).optional(),
+    maxTokens: z.number().int().positive().safe(),
+    includeContext: z.literal("none").optional(),
+    modelPreferences: z
+        .object({
+        hints: z
+            .array(z.object({ name: z.string().max(256).optional() }).strict())
+            .max(16)
+            .optional(),
+        costPriority: priority,
+        speedPriority: priority,
+        intelligencePriority: priority,
+    })
+        .strict()
+        .optional(),
+    metadata: z.record(z.string(), z.unknown()).optional(),
+    _meta: z.record(z.string(), z.unknown()).optional(),
+})
+    .strict()
+    .superRefine((params, ctx) => {
+    const blocks = params.messages.flatMap((message) => Array.isArray(message.content) ? message.content : [message.content]);
+    let bytes = utf8Bytes(params.systemPrompt ?? "");
+    for (const block of blocks)
+        bytes += block.type === "image" ? decodedBytes(block.data) : utf8Bytes(block.text);
+    // metadata 不转发给 provider，但仍计入边界预算，避免任意扩展字段绕过载荷限制。
+    const metadataBytes = utf8Bytes(JSON.stringify({
+        metadata: params.metadata,
+        _meta: params._meta,
+        blockMetadata: blocks.map((b) => ({ _meta: b._meta, annotations: b.annotations })),
+    }));
+    if (blocks.length > MCP_APPS_SAMPLING_MAX_BLOCKS ||
+        bytes + metadataBytes > MCP_APPS_SAMPLING_MAX_BYTES)
+        ctx.addIssue({ code: "custom", message: "Sampling content exceeds host limits" });
+});
+function decodedBytes(data) {
+    return (data.length * 3) / 4 - (data.endsWith("==") ? 2 : data.endsWith("=") ? 1 : 0);
+}
+export const mcpAppsSamplingResultSchema = z
+    .object({
+    role: z.literal("assistant"),
+    model: z.string().min(1),
+    content: z
+        .object({ type: z.literal("text"), text: z.string().max(MCP_APPS_SAMPLING_MAX_BYTES) })
+        .strict(),
+    stopReason: z.string().min(1),
+})
+    .strict();
+//# sourceMappingURL=sampling.js.map

package/node_modules/@dcode/shared/dist/mcp-apps/sampling.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sampling.test.d.ts.map