@ethisyscore/extension-runtime 1.58.0 → 1.61.0

package/dist/host/index.cjs

@@ -287,6 +287,50 @@ function createInputEventCoalescer(sink, options = {}) {
   };
 }
 
+// src/host/version-skew.ts
+var EXTENSION_VERSION_HEADER = "x-extension-version";
+var EXTENSION_ACTIVE_VERSION_HEADER = "x-extension-active-version";
+var CAPABILITY_REJECTION_REASON_HEADER = "x-capability-token-rejection-reason";
+var VERSION_MISMATCH_REASON = "extensionversionmismatch";
+function readHeader(headers, name) {
+  if (!headers) {
+    return void 0;
+  }
+  const direct = headers[name];
+  if (direct !== void 0) {
+    return direct;
+  }
+  const lowered = name.toLowerCase();
+  for (const key of Object.keys(headers)) {
+    if (key.toLowerCase() === lowered) {
+      return headers[key];
+    }
+  }
+  return void 0;
+}
+function trimmedOrUndefined(value) {
+  const trimmed = value?.trim();
+  return trimmed !== void 0 && trimmed.length > 0 ? trimmed : void 0;
+}
+function detectVersionSkew(response, mountedExtensionVersion) {
+  const reason = trimmedOrUndefined(readHeader(response.headers, CAPABILITY_REJECTION_REASON_HEADER));
+  if (reason !== void 0 && reason.toLowerCase() === VERSION_MISMATCH_REASON) {
+    return {
+      activeVersion: trimmedOrUndefined(readHeader(response.headers, EXTENSION_ACTIVE_VERSION_HEADER)),
+      detectedFrom: "rejection"
+    };
+  }
+  if (!response.ok) {
+    return null;
+  }
+  const mounted = trimmedOrUndefined(mountedExtensionVersion);
+  const served = trimmedOrUndefined(readHeader(response.headers, EXTENSION_VERSION_HEADER));
+  if (mounted === void 0 || served === void 0 || served === mounted) {
+    return null;
+  }
+  return { activeVersion: served, detectedFrom: "response-stamp" };
+}
+
 // src/host/worker/bridge-envelopes.ts
 var BRIDGE_PUSH_THEME = "ethisys:bridge:theme";
 var BRIDGE_PUSH_LOCALE = "ethisys:bridge:locale";
@@ -306,6 +350,9 @@ var WorkerRemoteDomTransport = class {
   workerPort;
   mcpClient;
   capabilityTokenProvider;
+  mountedExtensionVersion;
+  onVersionSkew;
+  versionSkewReported = false;
   coalesceMs;
   maxConcurrentMcpRequests;
   abortController;
@@ -328,6 +375,8 @@ var WorkerRemoteDomTransport = class {
     }
     this.mcpClient = options.mcpClient;
     this.capabilityTokenProvider = options.capabilityToken;
+    this.mountedExtensionVersion = options.mountedExtensionVersion;
+    this.onVersionSkew = options.onVersionSkew;
     this.coalesceMs = options.coalesceMs ?? 16;
     this.maxConcurrentMcpRequests = Math.max(
       1,
@@ -611,6 +660,34 @@ var WorkerRemoteDomTransport = class {
   requestSignal(id) {
     return this.inFlightAborts.get(id)?.signal ?? this.abortController.signal;
   }
+  /**
+   * Raises the skew callback the first time this surface is seen to be running against a version
+   * that is no longer installed.
+   *
+   * Latched deliberately. A page typically has several MCP calls in flight, and after an upgrade
+   * every one of them reports the same skew — firing per response would ask the host to remount
+   * the same surface repeatedly, and the second remount would tear down the first. One signal per
+   * transport is all a remount needs, and the transport is discarded along with the surface.
+   *
+   * The callback is host code, so it is assumed to be able to throw. Two consequences are guarded
+   * here: the throw must not escape into the MCP handler's catch (which would reply `ok: false`
+   * for a call that actually succeeded), and it must not consume the latch (which would leave the
+   * surface with no response AND no further chance of being told to remount).
+   */
+  reportVersionSkew(response) {
+    if (this.versionSkewReported || this.onVersionSkew === void 0) {
+      return;
+    }
+    const skew = detectVersionSkew(response, this.mountedExtensionVersion);
+    if (skew === null) {
+      return;
+    }
+    try {
+      this.onVersionSkew(skew);
+      this.versionSkewReported = true;
+    } catch {
+    }
+  }
   async handleInvokeTool(message) {
     let token;
     try {
@@ -630,6 +707,7 @@ var WorkerRemoteDomTransport = class {
         capabilityToken: token,
         signal: this.requestSignal(message.id)
       });
+      this.reportVersionSkew(result);
       this.safePostMessage({
         id: message.id,
         type: "ethisys:mcp:invokeTool:result",
@@ -659,6 +737,7 @@ var WorkerRemoteDomTransport = class {
         capabilityToken: token,
         signal: this.requestSignal(message.id)
       });
+      this.reportVersionSkew(result);
       this.safePostMessage({
         id: message.id,
         type: "ethisys:mcp:getResource:result",
@@ -689,6 +768,7 @@ var WorkerRemoteDomTransport = class {
         capabilityToken: token,
         signal: this.requestSignal(message.id)
       });
+      this.reportVersionSkew(result);
       this.safePostMessage({
         id: message.id,
         type: "ethisys:mcp:uploadDocument:result",
@@ -731,6 +811,9 @@ var IframeBridgeTransport = class {
   maxConcurrentMcpRequests;
   maxMessagesPerSecond;
   onSecurityEvent;
+  mountedExtensionVersion;
+  onVersionSkew;
+  versionSkewReported = false;
   abortController = new AbortController();
   hostPort;
   framePort;
@@ -745,6 +828,8 @@ var IframeBridgeTransport = class {
     this.targetOrigin = options.targetOrigin;
     this.capabilityTokenProvider = options.capabilityToken;
     this.mcpClient = options.mcpClient;
+    this.mountedExtensionVersion = options.mountedExtensionVersion;
+    this.onVersionSkew = options.onVersionSkew;
     this.maxConcurrentMcpRequests = Math.max(1, options.maxConcurrentMcpRequests ?? DEFAULT_MAX_CONCURRENT_MCP_REQUESTS);
     this.maxMessagesPerSecond = Math.max(1, options.maxMessagesPerSecond ?? 64);
     this.onSecurityEvent = options.onSecurityEvent;
@@ -897,6 +982,7 @@ var IframeBridgeTransport = class {
         capabilityToken: token,
         signal: this.abortController.signal
       });
+      this.reportVersionSkew(result);
       this.safePostMessage({
         id: message.id,
         type: "ethisys:mcp:invokeTool:result",
@@ -908,6 +994,30 @@ var IframeBridgeTransport = class {
       this.replyError(message.id, "ethisys:mcp:invokeTool:result", err);
     }
   }
+  /**
+   * Raises the skew callback the first time this surface is seen to be running against a version
+   * that is no longer installed. Latched: a page usually has several MCP calls in flight and after
+   * an upgrade every one of them reports the same skew, so firing per response would ask the host
+   * to remount the same surface repeatedly and each remount would tear down the last.
+   *
+   * The callback is host code and may throw. That must neither escape into the MCP handler's catch
+   * (replying `ok: false` for a call that succeeded) nor consume the latch (leaving the surface with
+   * no response and no further chance of being told to remount).
+   */
+  reportVersionSkew(response) {
+    if (this.versionSkewReported || this.onVersionSkew === void 0) {
+      return;
+    }
+    const skew = detectVersionSkew(response, this.mountedExtensionVersion);
+    if (skew === null) {
+      return;
+    }
+    try {
+      this.onVersionSkew(skew);
+      this.versionSkewReported = true;
+    } catch {
+    }
+  }
   async handleGetResource(message) {
     let token;
     try {
@@ -926,6 +1036,7 @@ var IframeBridgeTransport = class {
         capabilityToken: token,
         signal: this.abortController.signal
       });
+      this.reportVersionSkew(result);
       this.safePostMessage({
         id: message.id,
         type: "ethisys:mcp:getResource:result",
@@ -965,16 +1076,21 @@ Object.defineProperty(exports, "createRemoteComponentRenderer", {
   enumerable: true,
   get: function () { return host.createRemoteComponentRenderer; }
 });
+exports.CAPABILITY_REJECTION_REASON_HEADER = CAPABILITY_REJECTION_REASON_HEADER;
 exports.CONTRACT_B_PRIMITIVES = CONTRACT_B_PRIMITIVES;
 exports.DEFAULT_MAX_CONCURRENT_MCP_REQUESTS = DEFAULT_MAX_CONCURRENT_MCP_REQUESTS;
 exports.DEFAULT_OFFSCREEN_COALESCE_MS = DEFAULT_OFFSCREEN_COALESCE_MS;
+exports.EXTENSION_ACTIVE_VERSION_HEADER = EXTENSION_ACTIVE_VERSION_HEADER;
+exports.EXTENSION_VERSION_HEADER = EXTENSION_VERSION_HEADER;
 exports.IFRAME_BRIDGE_PROTOCOL = IFRAME_BRIDGE_PROTOCOL;
 exports.IframeBridgeTransport = IframeBridgeTransport;
 exports.SemanticComponentRegistry = SemanticComponentRegistry;
+exports.VERSION_MISMATCH_REASON = VERSION_MISMATCH_REASON;
 exports.WORKER_TRANSPORT_PROTOCOL = WORKER_TRANSPORT_PROTOCOL;
 exports.WorkerRemoteDomTransport = WorkerRemoteDomTransport;
 exports.createInputEventCoalescer = createInputEventCoalescer;
 exports.createOffscreenCanvasTransfer = createOffscreenCanvasTransfer;
+exports.detectVersionSkew = detectVersionSkew;
 exports.evaluate = evaluate;
 exports.interpret = interpret;
 //# sourceMappingURL=index.cjs.map