@ethisyscore/extension-runtime 1.116.1 → 1.118.0

package/dist/host/index.d.cts

@@ -3,8 +3,8 @@ import { C as ComponentRegistry } from '../registry-DpCx_LxF.cjs';
 export { P as PrimitiveProps } from '../registry-DpCx_LxF.cjs';
 import { SduiNode } from '@ethisyscore/protocol';
 export { PrimitiveName, SduiNode } from '@ethisyscore/protocol';
-import { M as McpHttpClient, f as VersionSkew } from '../transport-Cjpb_qPo.cjs';
-export { C as CAPABILITY_REJECTION_REASON_HEADER, D as DEFAULT_MAX_CONCURRENT_MCP_REQUESTS, E as EXTENSION_ACTIVE_VERSION_HEADER, a as EXTENSION_VERSION_HEADER, I as InputEventPayload, b as McpHttpRequest, c as McpHttpResponse, d as McpResponseMetadata, e as McpUploadRequest, V as VERSION_MISMATCH_REASON, g as VersionSkewSource, W as WORKER_TRANSPORT_PROTOCOL, h as WorkerCtor, i as WorkerHandshakePayload, j as WorkerLike, k as WorkerRemoteDomTransport, l as WorkerRemoteDomTransportOptions, m as detectVersionSkew } from '../transport-Cjpb_qPo.cjs';
+import { M as McpHttpClient, f as VersionSkew } from '../transport-DDPhdaXn.cjs';
+export { C as CAPABILITY_REJECTION_REASON_HEADER, D as DEFAULT_MAX_CONCURRENT_MCP_REQUESTS, E as EXTENSION_ACTIVE_VERSION_HEADER, a as EXTENSION_VERSION_HEADER, I as InputEventPayload, b as McpHttpRequest, c as McpHttpResponse, d as McpResponseMetadata, e as McpUploadRequest, V as VERSION_MISMATCH_REASON, g as VersionSkewSource, W as WORKER_TRANSPORT_PROTOCOL, h as WorkerCtor, i as WorkerHandshakePayload, j as WorkerLike, k as WorkerRemoteDomTransport, l as WorkerRemoteDomTransportOptions, m as detectVersionSkew } from '../transport-DDPhdaXn.cjs';
 export { RemoteReceiver, RemoteReceiverComment, RemoteReceiverElement, RemoteReceiverNode, RemoteReceiverParent, RemoteReceiverRoot, RemoteReceiverText } from '@remote-dom/core/receivers';
 export { RemoteComponentRendererMap, RemoteComponentRendererProps, RemoteRootRenderer, RemoteRootRendererProps, createRemoteComponentRenderer } from '@remote-dom/react/host';
 export { M as MCP_ERROR_CODES, a as McpErrorCode, b as McpToolError, c as classifyHostError, d as classifyHostResponse, i as isMcpErrorCode, e as isMcpToolError, f as isRetryableMcpErrorCode, m as mcpErrorCodeFromHttpStatus } from '../mcp-error-CCZQd8Xl.cjs';
@@ -358,6 +358,14 @@ declare class IframeBridgeTransport {
     private handlePortMessage;
     private isRateLimited;
     private dispatchMcp;
+    /**
+     * The module-address twin of {@link handleInvokeTool}: same token mint, same
+     * disposed-before-token short circuit, same rule that no token ever rides the reply. Kept as its
+     * own method rather than a branch inside invokeTool, because the two differ only in the request
+     * they build and a shared body would put that branch in the one place where mishandling the
+     * token is unrecoverable.
+     */
+    private handleInvokeOperation;
     private handleInvokeTool;
     /**
      * Raises the skew callback the first time this surface is seen to be running against a version

package/dist/host/index.d.ts

@@ -3,8 +3,8 @@ import { C as ComponentRegistry } from '../registry-DpCx_LxF.js';
 export { P as PrimitiveProps } from '../registry-DpCx_LxF.js';
 import { SduiNode } from '@ethisyscore/protocol';
 export { PrimitiveName, SduiNode } from '@ethisyscore/protocol';
-import { M as McpHttpClient, f as VersionSkew } from '../transport-B9mwIXYs.js';
-export { C as CAPABILITY_REJECTION_REASON_HEADER, D as DEFAULT_MAX_CONCURRENT_MCP_REQUESTS, E as EXTENSION_ACTIVE_VERSION_HEADER, a as EXTENSION_VERSION_HEADER, I as InputEventPayload, b as McpHttpRequest, c as McpHttpResponse, d as McpResponseMetadata, e as McpUploadRequest, V as VERSION_MISMATCH_REASON, g as VersionSkewSource, W as WORKER_TRANSPORT_PROTOCOL, h as WorkerCtor, i as WorkerHandshakePayload, j as WorkerLike, k as WorkerRemoteDomTransport, l as WorkerRemoteDomTransportOptions, m as detectVersionSkew } from '../transport-B9mwIXYs.js';
+import { M as McpHttpClient, f as VersionSkew } from '../transport-pNTjXJ3R.js';
+export { C as CAPABILITY_REJECTION_REASON_HEADER, D as DEFAULT_MAX_CONCURRENT_MCP_REQUESTS, E as EXTENSION_ACTIVE_VERSION_HEADER, a as EXTENSION_VERSION_HEADER, I as InputEventPayload, b as McpHttpRequest, c as McpHttpResponse, d as McpResponseMetadata, e as McpUploadRequest, V as VERSION_MISMATCH_REASON, g as VersionSkewSource, W as WORKER_TRANSPORT_PROTOCOL, h as WorkerCtor, i as WorkerHandshakePayload, j as WorkerLike, k as WorkerRemoteDomTransport, l as WorkerRemoteDomTransportOptions, m as detectVersionSkew } from '../transport-pNTjXJ3R.js';
 export { RemoteReceiver, RemoteReceiverComment, RemoteReceiverElement, RemoteReceiverNode, RemoteReceiverParent, RemoteReceiverRoot, RemoteReceiverText } from '@remote-dom/core/receivers';
 export { RemoteComponentRendererMap, RemoteComponentRendererProps, RemoteRootRenderer, RemoteRootRendererProps, createRemoteComponentRenderer } from '@remote-dom/react/host';
 export { M as MCP_ERROR_CODES, a as McpErrorCode, b as McpToolError, c as classifyHostError, d as classifyHostResponse, i as isMcpErrorCode, e as isMcpToolError, f as isRetryableMcpErrorCode, m as mcpErrorCodeFromHttpStatus } from '../mcp-error-CCZQd8Xl.js';
@@ -358,6 +358,14 @@ declare class IframeBridgeTransport {
     private handlePortMessage;
     private isRateLimited;
     private dispatchMcp;
+    /**
+     * The module-address twin of {@link handleInvokeTool}: same token mint, same
+     * disposed-before-token short circuit, same rule that no token ever rides the reply. Kept as its
+     * own method rather than a branch inside invokeTool, because the two differ only in the request
+     * they build and a shared body would put that branch in the one place where mishandling the
+     * token is unrecoverable.
+     */
+    private handleInvokeOperation;
     private handleInvokeTool;
     /**
      * Raises the skew callback the first time this surface is seen to be running against a version

package/dist/host/index.js

@@ -683,6 +683,9 @@ var WorkerRemoteDomTransport = class {
       case "ethisys:mcp:invokeTool":
         this.dispatchMcp(message, "ethisys:mcp:invokeTool:result", (m) => this.handleInvokeTool(m));
         return;
+      case "ethisys:mcp:invokeOperation":
+        this.dispatchMcp(message, "ethisys:mcp:invokeOperation:result", (m) => this.handleInvokeOperation(m));
+        return;
       case "ethisys:mcp:getResource":
         this.dispatchMcp(message, "ethisys:mcp:getResource:result", (m) => this.handleGetResource(m));
         return;
@@ -780,6 +783,47 @@ var WorkerRemoteDomTransport = class {
     } catch {
     }
   }
+  /**
+   * The module-address twin of {@link handleInvokeTool}. Identical in every respect a reader
+   * should care about - same token mint, same disposed-before-token short circuit, same
+   * token-never-crosses-the-port rule - and deliberately NOT folded into one method with a
+   * branch: the two differ only in the request kind they build, and a shared method would put
+   * that branch inside the one place where getting the token handling wrong is unrecoverable.
+   */
+  async handleInvokeOperation(message) {
+    let token;
+    try {
+      token = await this.capabilityTokenProvider();
+    } catch (err) {
+      this.replyError(message.id, "ethisys:mcp:invokeOperation:result", err);
+      return;
+    }
+    if (this.disposed) {
+      return;
+    }
+    try {
+      const result = await this.mcpClient.fetch({
+        kind: "invokeOperation",
+        moduleKey: message.moduleKey,
+        operationKey: message.operationKey,
+        fallbackToolName: message.fallbackToolName,
+        args: message.args,
+        capabilityToken: token,
+        signal: this.requestSignal(message.id)
+      });
+      this.reportVersionSkew(result);
+      this.safePostMessage({
+        id: message.id,
+        type: "ethisys:mcp:invokeOperation:result",
+        ok: result.ok,
+        data: result.data,
+        error: result.error,
+        code: classifyHostResponse(result)
+      });
+    } catch (err) {
+      this.replyError(message.id, "ethisys:mcp:invokeOperation:result", err);
+    }
+  }
   async handleInvokeTool(message) {
     let token;
     try {
@@ -892,6 +936,7 @@ var WorkerRemoteDomTransport = class {
 var IFRAME_BRIDGE_PROTOCOL = "ethisys.iframe.bridge.v1";
 var InboundEnvelope = z.discriminatedUnion("type", [
   z.object({ type: z.literal("ethisys:mcp:invokeTool"), id: z.string().min(1), name: z.string().min(1), args: z.unknown(), nonce: z.string() }),
+  z.object({ type: z.literal("ethisys:mcp:invokeOperation"), id: z.string().min(1), moduleKey: z.string().min(1), operationKey: z.string().min(1), fallbackToolName: z.string().min(1), args: z.unknown(), nonce: z.string() }),
   z.object({ type: z.literal("ethisys:mcp:getResource"), id: z.string().min(1), uri: z.string().min(1), nonce: z.string() }),
   z.object({ type: z.literal("ethisys:event"), name: z.string().min(1), payload: z.unknown(), nonce: z.string() })
 ]);
@@ -1019,7 +1064,7 @@ var IframeBridgeTransport = class {
     }
     if (this.isRateLimited()) {
       this.onSecurityEvent?.({ reason: "rate-limit-exceeded", type: message.type });
-      if (message.type === "ethisys:mcp:invokeTool" || message.type === "ethisys:mcp:getResource") {
+      if (message.type === "ethisys:mcp:invokeTool" || message.type === "ethisys:mcp:invokeOperation" || message.type === "ethisys:mcp:getResource") {
         this.safePostMessage({
           id: message.id,
           type: `${message.type}:result`,
@@ -1033,6 +1078,9 @@ var IframeBridgeTransport = class {
       case "ethisys:mcp:invokeTool":
         this.dispatchMcp(message, "ethisys:mcp:invokeTool:result", (m) => this.handleInvokeTool(m));
         return;
+      case "ethisys:mcp:invokeOperation":
+        this.dispatchMcp(message, "ethisys:mcp:invokeOperation:result", (m) => this.handleInvokeOperation(m));
+        return;
       case "ethisys:mcp:getResource":
         this.dispatchMcp(message, "ethisys:mcp:getResource:result", (m) => this.handleGetResource(m));
         return;
@@ -1067,6 +1115,47 @@ var IframeBridgeTransport = class {
       this.inFlightMcpRequests = Math.max(0, this.inFlightMcpRequests - 1);
     });
   }
+  /**
+   * The module-address twin of {@link handleInvokeTool}: same token mint, same
+   * disposed-before-token short circuit, same rule that no token ever rides the reply. Kept as its
+   * own method rather than a branch inside invokeTool, because the two differ only in the request
+   * they build and a shared body would put that branch in the one place where mishandling the
+   * token is unrecoverable.
+   */
+  async handleInvokeOperation(message) {
+    let token;
+    try {
+      token = await this.capabilityTokenProvider();
+    } catch (err) {
+      this.replyError(message.id, "ethisys:mcp:invokeOperation:result", err);
+      return;
+    }
+    if (this.disposed) {
+      return;
+    }
+    try {
+      const result = await this.mcpClient.fetch({
+        kind: "invokeOperation",
+        moduleKey: message.moduleKey,
+        operationKey: message.operationKey,
+        fallbackToolName: message.fallbackToolName,
+        args: message.args,
+        capabilityToken: token,
+        signal: this.abortController.signal
+      });
+      this.reportVersionSkew(result);
+      this.safePostMessage({
+        id: message.id,
+        type: "ethisys:mcp:invokeOperation:result",
+        ok: result.ok,
+        data: result.data,
+        error: result.error,
+        code: classifyHostResponse(result)
+      });
+    } catch (err) {
+      this.replyError(message.id, "ethisys:mcp:invokeOperation:result", err);
+    }
+  }
   async handleInvokeTool(message) {
     let token;
     try {