@ethisyscore/extension-runtime 1.116.1 → 1.118.0

package/dist/host/index.cjs

@@ -685,6 +685,9 @@ var WorkerRemoteDomTransport = class {
       case "ethisys:mcp:invokeTool":
         this.dispatchMcp(message, "ethisys:mcp:invokeTool:result", (m) => this.handleInvokeTool(m));
         return;
+      case "ethisys:mcp:invokeOperation":
+        this.dispatchMcp(message, "ethisys:mcp:invokeOperation:result", (m) => this.handleInvokeOperation(m));
+        return;
       case "ethisys:mcp:getResource":
         this.dispatchMcp(message, "ethisys:mcp:getResource:result", (m) => this.handleGetResource(m));
         return;
@@ -782,6 +785,47 @@ var WorkerRemoteDomTransport = class {
     } catch {
     }
   }
+  /**
+   * The module-address twin of {@link handleInvokeTool}. Identical in every respect a reader
+   * should care about - same token mint, same disposed-before-token short circuit, same
+   * token-never-crosses-the-port rule - and deliberately NOT folded into one method with a
+   * branch: the two differ only in the request kind they build, and a shared method would put
+   * that branch inside the one place where getting the token handling wrong is unrecoverable.
+   */
+  async handleInvokeOperation(message) {
+    let token;
+    try {
+      token = await this.capabilityTokenProvider();
+    } catch (err) {
+      this.replyError(message.id, "ethisys:mcp:invokeOperation:result", err);
+      return;
+    }
+    if (this.disposed) {
+      return;
+    }
+    try {
+      const result = await this.mcpClient.fetch({
+        kind: "invokeOperation",
+        moduleKey: message.moduleKey,
+        operationKey: message.operationKey,
+        fallbackToolName: message.fallbackToolName,
+        args: message.args,
+        capabilityToken: token,
+        signal: this.requestSignal(message.id)
+      });
+      this.reportVersionSkew(result);
+      this.safePostMessage({
+        id: message.id,
+        type: "ethisys:mcp:invokeOperation:result",
+        ok: result.ok,
+        data: result.data,
+        error: result.error,
+        code: classifyHostResponse(result)
+      });
+    } catch (err) {
+      this.replyError(message.id, "ethisys:mcp:invokeOperation:result", err);
+    }
+  }
   async handleInvokeTool(message) {
     let token;
     try {
@@ -894,6 +938,7 @@ var WorkerRemoteDomTransport = class {
 var IFRAME_BRIDGE_PROTOCOL = "ethisys.iframe.bridge.v1";
 var InboundEnvelope = zod.z.discriminatedUnion("type", [
   zod.z.object({ type: zod.z.literal("ethisys:mcp:invokeTool"), id: zod.z.string().min(1), name: zod.z.string().min(1), args: zod.z.unknown(), nonce: zod.z.string() }),
+  zod.z.object({ type: zod.z.literal("ethisys:mcp:invokeOperation"), id: zod.z.string().min(1), moduleKey: zod.z.string().min(1), operationKey: zod.z.string().min(1), fallbackToolName: zod.z.string().min(1), args: zod.z.unknown(), nonce: zod.z.string() }),
   zod.z.object({ type: zod.z.literal("ethisys:mcp:getResource"), id: zod.z.string().min(1), uri: zod.z.string().min(1), nonce: zod.z.string() }),
   zod.z.object({ type: zod.z.literal("ethisys:event"), name: zod.z.string().min(1), payload: zod.z.unknown(), nonce: zod.z.string() })
 ]);
@@ -1021,7 +1066,7 @@ var IframeBridgeTransport = class {
     }
     if (this.isRateLimited()) {
       this.onSecurityEvent?.({ reason: "rate-limit-exceeded", type: message.type });
-      if (message.type === "ethisys:mcp:invokeTool" || message.type === "ethisys:mcp:getResource") {
+      if (message.type === "ethisys:mcp:invokeTool" || message.type === "ethisys:mcp:invokeOperation" || message.type === "ethisys:mcp:getResource") {
         this.safePostMessage({
           id: message.id,
           type: `${message.type}:result`,
@@ -1035,6 +1080,9 @@ var IframeBridgeTransport = class {
       case "ethisys:mcp:invokeTool":
         this.dispatchMcp(message, "ethisys:mcp:invokeTool:result", (m) => this.handleInvokeTool(m));
         return;
+      case "ethisys:mcp:invokeOperation":
+        this.dispatchMcp(message, "ethisys:mcp:invokeOperation:result", (m) => this.handleInvokeOperation(m));
+        return;
       case "ethisys:mcp:getResource":
         this.dispatchMcp(message, "ethisys:mcp:getResource:result", (m) => this.handleGetResource(m));
         return;
@@ -1069,6 +1117,47 @@ var IframeBridgeTransport = class {
       this.inFlightMcpRequests = Math.max(0, this.inFlightMcpRequests - 1);
     });
   }
+  /**
+   * The module-address twin of {@link handleInvokeTool}: same token mint, same
+   * disposed-before-token short circuit, same rule that no token ever rides the reply. Kept as its
+   * own method rather than a branch inside invokeTool, because the two differ only in the request
+   * they build and a shared body would put that branch in the one place where mishandling the
+   * token is unrecoverable.
+   */
+  async handleInvokeOperation(message) {
+    let token;
+    try {
+      token = await this.capabilityTokenProvider();
+    } catch (err) {
+      this.replyError(message.id, "ethisys:mcp:invokeOperation:result", err);
+      return;
+    }
+    if (this.disposed) {
+      return;
+    }
+    try {
+      const result = await this.mcpClient.fetch({
+        kind: "invokeOperation",
+        moduleKey: message.moduleKey,
+        operationKey: message.operationKey,
+        fallbackToolName: message.fallbackToolName,
+        args: message.args,
+        capabilityToken: token,
+        signal: this.abortController.signal
+      });
+      this.reportVersionSkew(result);
+      this.safePostMessage({
+        id: message.id,
+        type: "ethisys:mcp:invokeOperation:result",
+        ok: result.ok,
+        data: result.data,
+        error: result.error,
+        code: classifyHostResponse(result)
+      });
+    } catch (err) {
+      this.replyError(message.id, "ethisys:mcp:invokeOperation:result", err);
+    }
+  }
   async handleInvokeTool(message) {
     let token;
     try {