@fitchmultz/pi-mcp-adapter 5.0.0

package/ui-resource-handler.ts

@@ -0,0 +1,249 @@
+import { RESOURCE_MIME_TYPE } from "@modelcontextprotocol/ext-apps/app-bridge";
+import { UrlElicitationRequiredError, type ReadResourceResult } from "@modelcontextprotocol/client";
+import { logger } from "./logger.ts";
+import { SessionRecoveryAuthRequiredError, withSessionRecovery, type SessionRecoveryDeps } from "./session-recovery.ts";
+import type { McpServerManager } from "./server-manager.ts";
+import { isServerDisabled, type McpConfig, type UiResourceContent, type UiResourceCsp, type UiResourceMeta, type UiResourcePermissions } from "./types.ts";
+
+interface ResourceContentRecord {
+  uri?: string;
+  mimeType?: string;
+  text?: string;
+  blob?: string;
+  _meta?: Record<string, unknown>;
+}
+
+interface ReadUiResourceOptions {
+  config?: McpConfig;
+  signal?: AbortSignal;
+  onNeedsAuth?: SessionRecoveryDeps["onNeedsAuth"];
+}
+
+export class UiResourceHandler {
+  private log = logger.child({ component: "UiResourceHandler" });
+
+  constructor(private manager: McpServerManager, private config: McpConfig | undefined = undefined) {}
+
+  async readUiResource(serverName: string, uri: string, options: ReadUiResourceOptions = {}): Promise<UiResourceContent> {
+    const log = this.log.child({ server: serverName, uri });
+
+    if (!uri.startsWith("ui://")) {
+      throw new Error(`Invalid UI resource "${uri}": URI must start with ui://`);
+    }
+
+    log.debug("Fetching UI resource");
+
+    let result: ReadResourceResult;
+    try {
+      const config = options.config ?? this.config;
+      if (config && isServerDisabled(config.mcpServers[serverName])) {
+        throw new Error(`MCP server "${serverName}" is disabled`);
+      }
+      if (config) {
+        this.manager.touch(serverName);
+        this.manager.incrementInFlight(serverName);
+        try {
+          result = await withSessionRecovery(
+            {
+              manager: this.manager,
+              config,
+              ...(options.signal ? { signal: options.signal } : {}),
+              ...(options.onNeedsAuth ? { onNeedsAuth: options.onNeedsAuth } : {}),
+            },
+            serverName,
+            (connection) => connection.client.readResource({ uri }, this.manager.getRequestOptions(serverName, options.signal)),
+          );
+        } finally {
+          this.manager.decrementInFlight(serverName);
+          this.manager.touch(serverName);
+        }
+      } else {
+        result = await this.manager.readResource(serverName, uri, options.signal);
+      }
+    } catch (error) {
+      if (error instanceof UrlElicitationRequiredError || error instanceof SessionRecoveryAuthRequiredError) throw error;
+      const message = error instanceof Error ? error.message : String(error);
+      log.error("Failed to read resource", error instanceof Error ? error : undefined);
+      throw new Error(`Failed to fetch UI resource "${uri}": ${message}`,
+        error instanceof Error ? { cause: error } : undefined);
+    }
+
+    const content = selectContent(result, uri);
+    const mimeType = content.mimeType;
+
+    if (mimeType && !isHtmlMimeType(mimeType)) {
+      log.warn("Unsupported MIME type", { mimeType });
+      throw new Error(
+        `Invalid UI resource "${uri}": unsupported MIME type "${mimeType}" (expected text/html or ${RESOURCE_MIME_TYPE})`
+      );
+    }
+
+    const html = toHtml(content);
+    if (!html.trim()) {
+      log.warn("Resource content is empty");
+      throw new Error(`Invalid UI resource "${uri}": content is empty`);
+    }
+
+    const contentMeta = extractUiMeta(content._meta);
+    const listMeta = extractUiMeta(this.getListResourceMeta(serverName, uri));
+
+    log.debug("Resource loaded successfully", { 
+      contentLength: html.length,
+      hasCsp: !!contentMeta.csp || !!listMeta.csp,
+    });
+
+    return {
+      uri: content.uri ?? uri,
+      html,
+      mimeType: mimeType ?? RESOURCE_MIME_TYPE,
+      meta: {
+        ...((contentMeta.csp ?? listMeta.csp) !== undefined ? { csp: contentMeta.csp ?? listMeta.csp } : {}),
+        ...((contentMeta.permissions ?? listMeta.permissions) !== undefined
+          ? { permissions: contentMeta.permissions ?? listMeta.permissions }
+          : {}),
+        ...((contentMeta.domain ?? listMeta.domain) !== undefined ? { domain: contentMeta.domain ?? listMeta.domain } : {}),
+        ...((contentMeta.prefersBorder ?? listMeta.prefersBorder) !== undefined
+          ? { prefersBorder: contentMeta.prefersBorder ?? listMeta.prefersBorder }
+          : {}),
+      },
+    };
+  }
+
+  private getListResourceMeta(serverName: string, uri: string): Record<string, unknown> | undefined {
+    const connection = this.manager.getConnection(serverName);
+    if (!connection?.resources?.length) return undefined;
+    const resource = connection.resources.find((entry) => entry.uri === uri);
+    if (!resource || !resource._meta || typeof resource._meta !== "object") return undefined;
+    return resource._meta;
+  }
+}
+
+function selectContent(result: ReadResourceResult, preferredUri: string): ResourceContentRecord {
+  const contents = (result.contents ?? []) as ResourceContentRecord[];
+  if (contents.length === 0) {
+    throw new Error(`No contents returned for UI resource: ${preferredUri}`);
+  }
+
+  const byUri = contents.find((content) => content.uri === preferredUri);
+  if (byUri) return byUri;
+
+  const byHtmlMime = contents.find(
+    (content) => content.mimeType && isHtmlMimeType(content.mimeType)
+  );
+  if (byHtmlMime) return byHtmlMime;
+
+  const firstContent = contents[0];
+  if (!firstContent) {
+    throw new Error(`No contents returned for UI resource: ${preferredUri}`);
+  }
+  return firstContent;
+}
+
+function isHtmlMimeType(mimeType: string): boolean {
+  const normalized = mimeType.toLowerCase();
+  return normalized.startsWith("text/html") || normalized === RESOURCE_MIME_TYPE.toLowerCase();
+}
+
+function toHtml(content: ResourceContentRecord): string {
+  if (typeof content.text === "string") {
+    return content.text;
+  }
+
+  if (typeof content.blob === "string") {
+    return Buffer.from(content.blob, "base64").toString("utf-8");
+  }
+
+  throw new Error(`UI resource ${content.uri ?? "(unknown)"} did not include text or blob content`);
+}
+
+const OPENAI_CSP_FIELD_MAPPINGS = [
+  ["resource_domains", "resourceDomains"],
+  ["connect_domains", "connectDomains"],
+  ["frame_domains", "frameDomains"],
+] as const;
+
+const UI_CSP_DOMAIN_FIELDS: readonly (keyof UiResourceCsp)[] = [
+  "resourceDomains",
+  "connectDomains",
+  "frameDomains",
+  "baseUriDomains",
+];
+
+function extractUiMeta(meta: Record<string, unknown> | undefined): UiResourceMeta {
+  if (!meta || typeof meta !== "object") return {};
+
+  const ui = isRecord(meta.ui) ? meta.ui : undefined;
+  const out: UiResourceMeta = {};
+  const openAiCsp = hasOwnProperty(meta, "openai/widgetCSP")
+    ? normalizeOpenAiWidgetCsp(meta["openai/widgetCSP"])
+    : undefined;
+  const hasStandardCsp = !!ui && hasOwnProperty(ui, "csp");
+  const standardCspValue = hasStandardCsp ? ui.csp : undefined;
+
+  if (hasStandardCsp && !isRecord(standardCspValue)) {
+    // A declared canonical container takes precedence even when malformed.
+    out.csp = {};
+  } else {
+    const standardCsp = hasStandardCsp
+      ? normalizeUiResourceCsp(standardCspValue)
+      : undefined;
+    if (openAiCsp || standardCsp) {
+      out.csp = { ...openAiCsp, ...standardCsp };
+      if (isRecord(standardCspValue)) {
+        for (const [, standardField] of OPENAI_CSP_FIELD_MAPPINGS) {
+          if (hasOwnProperty(standardCspValue, standardField) && !copyStringArray(standardCspValue[standardField])) {
+            delete out.csp[standardField];
+          }
+        }
+      }
+    }
+  }
+
+  if (ui && isRecord(ui.permissions)) {
+    out.permissions = ui.permissions as UiResourcePermissions;
+  }
+  if (ui && typeof ui.domain === "string") {
+    out.domain = ui.domain;
+  }
+  if (ui && typeof ui.prefersBorder === "boolean") {
+    out.prefersBorder = ui.prefersBorder;
+  }
+
+  return out;
+}
+
+function normalizeUiResourceCsp(value: unknown): UiResourceCsp {
+  if (!isRecord(value)) return {};
+
+  const csp: UiResourceCsp = {};
+  for (const field of UI_CSP_DOMAIN_FIELDS) {
+    const domains = copyStringArray(value[field]);
+    if (domains) csp[field] = domains;
+  }
+  return csp;
+}
+
+function normalizeOpenAiWidgetCsp(value: unknown): UiResourceCsp {
+  if (!isRecord(value)) return {};
+
+  const csp: UiResourceCsp = {};
+  for (const [sourceField, targetField] of OPENAI_CSP_FIELD_MAPPINGS) {
+    const domains = copyStringArray(value[sourceField]);
+    if (domains) csp[targetField] = domains;
+  }
+  return csp;
+}
+
+function copyStringArray(value: unknown): string[] | undefined {
+  return Array.isArray(value) && value.every((entry) => typeof entry === "string")
+    ? [...value]
+    : undefined;
+}
+
+function hasOwnProperty(record: Record<string, unknown>, property: string): boolean {
+  return Object.prototype.hasOwnProperty.call(record, property);
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}