@fitchmultz/pi-mcp-adapter 6.0.0 → 7.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (105) hide show
  1. package/CHANGELOG.md +26 -0
  2. package/README.md +12 -8
  3. package/dist/app-bridge.bundle.js +14 -14
  4. package/dist/config.js +41 -16
  5. package/dist/gateway-arguments.d.ts +1 -1
  6. package/dist/index.js +1 -1
  7. package/dist/lifecycle.d.ts +2 -2
  8. package/dist/lifecycle.js +2 -2
  9. package/dist/mcp-auth-flow.js +2 -2
  10. package/dist/mcp-auth.d.ts +1 -1
  11. package/dist/mcp-auth.js +3 -3
  12. package/dist/mcp-code.d.ts +6 -6
  13. package/dist/mcp-code.js +11 -10
  14. package/dist/mcp-oauth-provider.d.ts +5 -5
  15. package/dist/mcp-oauth-provider.js +5 -5
  16. package/dist/mcp-output-guard.d.ts +1 -1
  17. package/dist/mcp-panel.d.ts +2 -2
  18. package/dist/mcp-panel.js +2 -2
  19. package/dist/mcp-setup-panel.d.ts +5 -4
  20. package/dist/mcp-setup-panel.js +15 -7
  21. package/dist/mcp-trace.d.ts +1 -1
  22. package/dist/mcp-trace.js +1 -1
  23. package/dist/npx-resolver.js +8 -4
  24. package/dist/proxy-modes.d.ts +2 -2
  25. package/dist/proxy-modes.js +9 -9
  26. package/dist/sampling-handler.js +1 -0
  27. package/dist/search-ranking.js +6 -2
  28. package/dist/server-manager.d.ts +2 -2
  29. package/dist/server-manager.js +44 -27
  30. package/dist/session-recovery.d.ts +7 -4
  31. package/dist/session-recovery.js +76 -10
  32. package/dist/tool-metadata.d.ts +43 -43
  33. package/dist/tool-result-renderer.d.ts +3 -3
  34. package/dist/tool-result-renderer.js +3 -3
  35. package/dist/ui-resource-handler.d.ts +2 -2
  36. package/dist/ui-resource-handler.js +2 -2
  37. package/dist/ui-server.js +4 -3
  38. package/dist/ui-stream-types.d.ts +8 -8
  39. package/dist/unix-socket-transport.d.ts +1 -1
  40. package/dist/unix-socket-transport.js +1 -1
  41. package/dist/utils.d.ts +1 -0
  42. package/dist/utils.js +14 -0
  43. package/package.json +34 -98
  44. package/abort.ts +0 -34
  45. package/agent-dir.ts +0 -24
  46. package/app-bridge.bundle.js +0 -109
  47. package/banner.png +0 -0
  48. package/checkpoint.ts +0 -55
  49. package/commands.ts +0 -622
  50. package/config.ts +0 -1204
  51. package/consent-manager.ts +0 -25
  52. package/direct-tools.ts +0 -75
  53. package/elicitation-handler.ts +0 -349
  54. package/error-signal.ts +0 -21
  55. package/gateway-arguments.ts +0 -73
  56. package/glimpse-ui.ts +0 -80
  57. package/host-html-template.ts +0 -456
  58. package/index.ts +0 -767
  59. package/init.ts +0 -613
  60. package/legacy-migration.ts +0 -47
  61. package/lifecycle.ts +0 -165
  62. package/logger.ts +0 -127
  63. package/mcp-auth-flow.ts +0 -975
  64. package/mcp-auth.ts +0 -793
  65. package/mcp-callback-server.ts +0 -450
  66. package/mcp-code.ts +0 -412
  67. package/mcp-keyring-helper.cjs +0 -89
  68. package/mcp-oauth-provider.ts +0 -774
  69. package/mcp-output-guard.ts +0 -530
  70. package/mcp-panel.ts +0 -907
  71. package/mcp-script-worker.mjs +0 -131
  72. package/mcp-setup-panel.ts +0 -666
  73. package/mcp-status.ts +0 -110
  74. package/mcp-trace.ts +0 -295
  75. package/metadata-cache.ts +0 -271
  76. package/npx-resolver.ts +0 -488
  77. package/onboarding-state.ts +0 -58
  78. package/panel-keys.ts +0 -37
  79. package/prompts.ts +0 -337
  80. package/proxy-modes.ts +0 -1109
  81. package/resource-tools.ts +0 -52
  82. package/runtime-owner.ts +0 -123
  83. package/sampling-handler.ts +0 -276
  84. package/scripts/build-app-bridge.mjs +0 -15
  85. package/scripts/build.mjs +0 -132
  86. package/scripts/prepare.mjs +0 -103
  87. package/search-ranking.ts +0 -132
  88. package/server-manager.ts +0 -1320
  89. package/session-recovery.ts +0 -316
  90. package/state.ts +0 -64
  91. package/tool-approval.ts +0 -78
  92. package/tool-loader.ts +0 -153
  93. package/tool-metadata.ts +0 -240
  94. package/tool-registrar.ts +0 -74
  95. package/tool-result-renderer.ts +0 -294
  96. package/tsconfig.build.json +0 -13
  97. package/tsconfig.json +0 -16
  98. package/types.ts +0 -785
  99. package/ui-resource-handler.ts +0 -249
  100. package/ui-server.ts +0 -808
  101. package/ui-session.ts +0 -568
  102. package/ui-stream-types.ts +0 -89
  103. package/ui-tool-visibility.ts +0 -25
  104. package/unix-socket-transport.ts +0 -85
  105. package/utils.ts +0 -307
package/host-html-template.ts DELETED
@@ -1,456 +0,0 @@
1
- import type { UiHostContext, UiResourceContent, UiResourceCsp } from "./types.ts";
2
-
3
- // Use locally bundled AppBridge to avoid CDN Zod bundling issues
4
- const DEFAULT_APP_BRIDGE_MODULE_URL = "/app-bridge.bundle.js";
5
- const APP_SANDBOX = "allow-scripts allow-forms allow-modals allow-popups allow-downloads";
6
-
7
- export interface HostHtmlTemplateInput {
8
- sessionToken: string;
9
- uiResourceToken: string;
10
- serverName: string;
11
- toolName: string;
12
- toolArgs: Record<string, unknown>;
13
- resource: UiResourceContent;
14
- allowAttribute: string;
15
- requireToolConsent: boolean;
16
- hostContext?: UiHostContext;
17
- appBridgeModuleUrl?: string;
18
- }
19
-
20
- export function buildHostHtmlTemplate(input: HostHtmlTemplateInput): string {
21
- const hostContext = input.hostContext ?? {};
22
-
23
- const sessionToken = safeInlineJSON(input.sessionToken);
24
- const uiResourceToken = safeInlineJSON(input.uiResourceToken);
25
- const toolArgs = safeInlineJSON(input.toolArgs);
26
- const serverName = safeInlineJSON(input.serverName);
27
- const toolName = safeInlineJSON(input.toolName);
28
- const hostContextJson = safeInlineJSON(hostContext);
29
- const allowAttribute = safeInlineJSON(input.allowAttribute);
30
- const requireToolConsent = safeInlineJSON(input.requireToolConsent);
31
- const moduleUrl = safeInlineJSON(input.appBridgeModuleUrl ?? DEFAULT_APP_BRIDGE_MODULE_URL);
32
-
33
- return `<!doctype html>
34
- <html lang="en">
35
- <head>
36
- <meta charset="utf-8" />
37
- <meta name="viewport" content="width=device-width, initial-scale=1" />
38
- <title>MCP UI - ${escapeHtml(input.serverName)} / ${escapeHtml(input.toolName)}</title>
39
- <style>
40
- :root {
41
- color-scheme: light dark;
42
- --bg: #0f1115;
43
- --surface: #181c22;
44
- --text: #ecf0f5;
45
- --muted: #a9b2bf;
46
- --accent: #43c0ff;
47
- --border: rgba(255, 255, 255, 0.12);
48
- --good: #34d399;
49
- --warn: #fbbf24;
50
- --bad: #f87171;
51
- }
52
- @media (prefers-color-scheme: light) {
53
- :root {
54
- --bg: #f6f7fb;
55
- --surface: #ffffff;
56
- --text: #1d2939;
57
- --muted: #667085;
58
- --accent: #0ea5e9;
59
- --border: rgba(15, 23, 42, 0.14);
60
- --good: #059669;
61
- --warn: #b45309;
62
- --bad: #b91c1c;
63
- }
64
- }
65
- * { box-sizing: border-box; }
66
- html, body { margin: 0; padding: 0; height: 100%; font-family: ui-sans-serif, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; background: var(--bg); color: var(--text); }
67
- body { display: flex; flex-direction: column; min-height: 100vh; min-height: 100dvh; }
68
- header { background: var(--surface); border-bottom: 1px solid var(--border); padding: calc(10px + env(safe-area-inset-top, 0px)) calc(14px + env(safe-area-inset-right, 0px)) 10px calc(14px + env(safe-area-inset-left, 0px)); display: flex; align-items: center; justify-content: space-between; gap: 10px; }
69
- .title { display: flex; gap: 8px; align-items: baseline; min-width: 0; }
70
- .server { font-size: 12px; color: var(--muted); text-transform: uppercase; letter-spacing: 0.08em; white-space: nowrap; }
71
- .tool { font-size: 14px; font-weight: 600; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
72
- .badge { border: 1px solid var(--border); border-radius: 999px; padding: 2px 8px; font-size: 11px; color: var(--muted); white-space: nowrap; }
73
- .controls { display: flex; gap: 8px; align-items: center; }
74
- .status { font-size: 12px; color: var(--muted); white-space: nowrap; }
75
- button { border: 1px solid var(--border); background: transparent; color: var(--text); border-radius: 8px; padding: 6px 10px; cursor: pointer; font-size: 12px; }
76
- button.primary { border-color: color-mix(in srgb, var(--good) 40%, var(--border) 60%); color: var(--good); }
77
- button.danger { border-color: color-mix(in srgb, var(--bad) 40%, var(--border) 60%); color: var(--bad); }
78
- button:hover { background: color-mix(in srgb, var(--surface) 75%, var(--accent) 25%); }
79
- main { flex: 1; min-height: 0; padding: 10px; padding-inline: calc(10px + env(safe-area-inset-left, 0px)) calc(10px + env(safe-area-inset-right, 0px)); padding-bottom: calc(10px + env(safe-area-inset-bottom, 0px)); display: flex; }
80
- iframe { width: 100%; height: 100%; border: 1px solid var(--border); border-radius: 10px; background: white; }
81
- .overlay { position: fixed; inset: 0; background: color-mix(in srgb, var(--bg) 90%, black 10%); display: none; align-items: center; justify-content: center; z-index: 2; padding: 16px; }
82
- .overlay.visible { display: flex; }
83
- .panel { width: min(680px, calc(100vw - 40px)); background: var(--surface); border: 1px solid var(--border); border-radius: 12px; padding: 18px; }
84
- .panel h2 { margin: 0 0 8px; font-size: 16px; }
85
- .panel p { margin: 0; color: var(--muted); line-height: 1.4; font-size: 14px; white-space: pre-wrap; }
86
- @media (max-width: 640px) {
87
- header { align-items: stretch; flex-direction: column; gap: 8px; }
88
- .title { flex-wrap: wrap; row-gap: 4px; }
89
- .server { flex-basis: 100%; }
90
- .controls { width: 100%; }
91
- .status { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; }
92
- button { min-height: 44px; padding: 10px 14px; }
93
- main { padding: 6px; padding-inline: calc(6px + env(safe-area-inset-left, 0px)) calc(6px + env(safe-area-inset-right, 0px)); padding-bottom: calc(6px + env(safe-area-inset-bottom, 0px)); }
94
- iframe { border-radius: 6px; }
95
- .panel { width: 100%; }
96
- }
97
- </style>
98
- </head>
99
- <body>
100
- <header>
101
- <div class="title">
102
- <span class="server">MCP · <span id="server-name"></span></span>
103
- <span class="tool" id="tool-name"></span>
104
- <span class="badge">Sandboxed</span>
105
- </div>
106
- <div class="controls">
107
- <span class="status" id="status">Loading UI...</span>
108
- <button class="primary" id="done-btn" title="Cmd/Ctrl+Enter">Done</button>
109
- <button class="danger" id="cancel-btn" title="Escape">Cancel</button>
110
- </div>
111
- </header>
112
- <main>
113
- <iframe id="mcp-app" sandbox="${APP_SANDBOX}" referrerpolicy="no-referrer"></iframe>
114
- </main>
115
- <div class="overlay" id="error-overlay">
116
- <div class="panel">
117
- <h2>UI Error</h2>
118
- <p id="error-message"></p>
119
- </div>
120
- </div>
121
- <div class="overlay" id="completion-overlay">
122
- <div class="panel">
123
- <h2>Done</h2>
124
- <p>MCP UI session finished. You can close this page and return to Pi.</p>
125
- </div>
126
- </div>
127
- <script type="module">
128
- import { AppBridge, PostMessageTransport } from ${moduleUrl};
129
-
130
- const SESSION_TOKEN = ${sessionToken};
131
- const UI_RESOURCE_TOKEN = ${uiResourceToken};
132
- const SERVER_NAME = ${serverName};
133
- const TOOL_NAME = ${toolName};
134
- const TOOL_ARGS = ${toolArgs};
135
- const HOST_CONTEXT = ${hostContextJson};
136
- const ALLOW_ATTRIBUTE = ${allowAttribute};
137
- const REQUIRE_TOOL_CONSENT = ${requireToolConsent};
138
- const STREAM_CONTEXT_KEY = "pi-mcp-adapter/stream";
139
- const STREAM_PATCH_METHOD = "notifications/pi-mcp-adapter/ui-result-patch";
140
-
141
- const iframe = document.getElementById("mcp-app");
142
- const statusNode = document.getElementById("status");
143
- const doneBtn = document.getElementById("done-btn");
144
- const cancelBtn = document.getElementById("cancel-btn");
145
- const errorOverlay = document.getElementById("error-overlay");
146
- const completionOverlay = document.getElementById("completion-overlay");
147
- const errorMessage = document.getElementById("error-message");
148
-
149
- document.getElementById("server-name").textContent = SERVER_NAME;
150
- document.getElementById("tool-name").textContent = TOOL_NAME;
151
-
152
- const setStatus = (text, isError = false) => {
153
- statusNode.textContent = text;
154
- statusNode.style.color = isError ? "var(--bad)" : "var(--muted)";
155
- };
156
-
157
- const showError = (message) => {
158
- errorMessage.textContent = message;
159
- errorOverlay.classList.add("visible");
160
- setStatus("Error", true);
161
- };
162
-
163
- let completionPending = false;
164
- const showCompletion = () => {
165
- completionOverlay.classList.add("visible");
166
- setStatus("Complete");
167
- };
168
- const closeOrShowDone = () => {
169
- completionPending = true;
170
- window.close();
171
- setTimeout(() => {
172
- if (!document.hidden) {
173
- showCompletion();
174
- }
175
- }, 1000);
176
- };
177
- document.addEventListener("visibilitychange", () => {
178
- if (completionPending && !document.hidden) {
179
- showCompletion();
180
- }
181
- });
182
-
183
- const post = async (endpoint, params) => {
184
- const response = await fetch(endpoint, {
185
- method: "POST",
186
- headers: { "Content-Type": "application/json" },
187
- body: JSON.stringify({ token: SESSION_TOKEN, params }),
188
- });
189
-
190
- const body = await response.json().catch(() => ({ ok: false, error: "Invalid JSON response" }));
191
- if (!response.ok || !body.ok) {
192
- const message = body.error || ("HTTP " + response.status);
193
- throw new Error(message);
194
- }
195
- return body.result ?? {};
196
- };
197
-
198
- let consentGranted = !REQUIRE_TOOL_CONSENT;
199
- const initialStreamContext = HOST_CONTEXT?.[STREAM_CONTEXT_KEY];
200
- const streamMode = initialStreamContext?.mode === "stream-first" ? "stream-first" : "eager";
201
-
202
- const bridge = new AppBridge(
203
- null,
204
- { name: "pi", version: "1.0.0" },
205
- { serverTools: {}, openLinks: {}, logging: {}, updateModelContext: {}, message: {} },
206
- { hostContext: HOST_CONTEXT }
207
- );
208
-
209
- bridge.oncalltool = async (params) => {
210
- if (!consentGranted) {
211
- const accepted = window.confirm("Allow this UI to call server tools for this session?");
212
- if (!accepted) {
213
- await post("/proxy/ui/consent", { approved: false }).catch(() => {});
214
- return {
215
- isError: true,
216
- content: [{ type: "text", text: "Tool call denied by user." }],
217
- };
218
- }
219
- await post("/proxy/ui/consent", { approved: true });
220
- consentGranted = true;
221
- }
222
- const result = await post("/proxy/tools/call", params);
223
- // Notify agent about the tool call
224
- await post("/proxy/ui/message", {
225
- type: "intent",
226
- intent: "call_tool",
227
- params: { tool: params.name, arguments: params.arguments, isError: result.isError }
228
- }).catch(() => {});
229
- return result;
230
- };
231
-
232
- bridge.onmessage = async (params) => post("/proxy/ui/message", params);
233
- bridge.onupdatemodelcontext = async (params) => post("/proxy/ui/context", params);
234
-
235
- // Also listen for raw postMessage events with custom types (notify, prompt, intent, etc.)
236
- // These bypass the AppBridge protocol but are used by some MCP UI implementations
237
- window.addEventListener("message", async (event) => {
238
- if (event.source !== iframe.contentWindow) return;
239
- const data = event.data;
240
- if (!data || typeof data !== "object") return;
241
-
242
- // Skip AppBridge protocol messages (handled by bridge)
243
- if (data.jsonrpc || (typeof data.method === "string" && (data.method.startsWith("app/") || data.method.startsWith("host/")))) return;
244
-
245
- // Handle raw UI action messages
246
- const msgType = data.type;
247
- if (typeof msgType !== "string") return;
248
-
249
- if (msgType === "notify" || msgType === "prompt" || msgType === "intent" || msgType === "message") {
250
- // Standard MCP-UI types - preserve their semantics
251
- // Support both { type, payload: {...} } and { type, field: value } formats
252
- const { type: _, payload, ...directFields } = data;
253
- await post("/proxy/ui/message", { type: msgType, ...directFields, ...(payload || {}) }).catch(() => {});
254
- } else if (!msgType.startsWith("ui-lifecycle-") && !msgType.startsWith("ui-message-")) {
255
- // Any other custom type - forward as intent with type as intent name
256
- // (Skip internal lifecycle/ack messages)
257
- const payload = data.payload || {};
258
- await post("/proxy/ui/message", {
259
- type: "intent",
260
- intent: msgType,
261
- params: payload,
262
- }).catch(() => {});
263
- }
264
- });
265
- bridge.ondownloadfile = async (params) => post("/proxy/ui/download-file", params);
266
- bridge.onrequestdisplaymode = async (params) => post("/proxy/ui/request-display-mode", params);
267
- bridge.onopenlink = async (params) => {
268
- const result = await post("/proxy/ui/open-link", params);
269
- if (!result.isError) {
270
- window.open(params.url, "_blank", "noopener,noreferrer");
271
- // Notify agent about the link open
272
- await post("/proxy/ui/message", {
273
- type: "intent",
274
- intent: "open_link",
275
- params: { url: params.url }
276
- }).catch(() => {});
277
- }
278
- return result;
279
- };
280
-
281
- bridge.oninitialized = () => {
282
- if (streamMode !== "stream-first") {
283
- bridge.sendToolInput({ arguments: TOOL_ARGS });
284
- }
285
- setStatus(streamMode === "stream-first" ? "Streaming…" : "Connected");
286
- };
287
-
288
- bridge.onsizechange = ({ width, height }) => {
289
- if (typeof width === "number" && width > 0) {
290
- iframe.style.minWidth = Math.min(width, window.innerWidth - 24) + "px";
291
- }
292
- if (typeof height === "number" && height > 0) {
293
- iframe.style.height = Math.max(height, 320) + "px";
294
- }
295
- };
296
-
297
- if (ALLOW_ATTRIBUTE) {
298
- iframe.setAttribute("allow", ALLOW_ATTRIBUTE);
299
- }
300
-
301
- // Connect bridge BEFORE loading iframe to ensure we're listening when the app sends ui/initialize
302
- try {
303
- const transport = new PostMessageTransport(iframe.contentWindow, iframe.contentWindow);
304
- await bridge.connect(transport);
305
- } catch (error) {
306
- console.error("[host] Bridge connection failed:", error);
307
- showError("Failed to initialize AppBridge: " + String(error));
308
- }
309
-
310
- const iframeLoaded = new Promise((resolve) => {
311
- iframe.onload = resolve;
312
- });
313
- iframe.src = "/ui-app?resource=" + encodeURIComponent(UI_RESOURCE_TOKEN);
314
- await iframeLoaded;
315
-
316
- const eventSource = new EventSource("/events?session=" + encodeURIComponent(SESSION_TOKEN));
317
- eventSource.addEventListener("tool-input", (event) => {
318
- try {
319
- bridge.sendToolInput(JSON.parse(event.data));
320
- } catch (error) {
321
- showError("Failed to forward tool input: " + String(error));
322
- }
323
- });
324
- eventSource.addEventListener("tool-result", (event) => {
325
- try {
326
- bridge.sendToolResult(JSON.parse(event.data));
327
- } catch (error) {
328
- showError("Failed to forward tool result: " + String(error));
329
- }
330
- });
331
- eventSource.addEventListener("tool-cancelled", (event) => {
332
- try {
333
- bridge.sendToolCancelled(JSON.parse(event.data));
334
- } catch (error) {
335
- showError("Failed to forward cancellation: " + String(error));
336
- }
337
- });
338
- eventSource.addEventListener("result-patch", async (event) => {
339
- try {
340
- await bridge.notification({
341
- method: STREAM_PATCH_METHOD,
342
- params: JSON.parse(event.data),
343
- });
344
- } catch (error) {
345
- showError("Failed to forward stream patch: " + String(error));
346
- }
347
- });
348
- eventSource.addEventListener("host-context", (event) => {
349
- try {
350
- bridge.setHostContext(JSON.parse(event.data));
351
- } catch {}
352
- });
353
- eventSource.addEventListener("session-complete", async () => {
354
- await bridge.teardownResource({}).catch(() => {});
355
- eventSource.close();
356
- closeOrShowDone();
357
- });
358
- eventSource.onerror = () => {
359
- setStatus("Connection lost", true);
360
- };
361
-
362
- const heartbeat = setInterval(() => {
363
- post("/proxy/ui/heartbeat", {}).catch(() => {});
364
- }, 10000);
365
-
366
- const complete = async (reason) => {
367
- try {
368
- await post("/proxy/ui/complete", { reason });
369
- } catch {}
370
- try {
371
- await bridge.teardownResource({});
372
- } catch {}
373
- clearInterval(heartbeat);
374
- eventSource.close();
375
- closeOrShowDone();
376
- };
377
-
378
- doneBtn.addEventListener("click", () => complete("done"));
379
- cancelBtn.addEventListener("click", () => complete("cancel"));
380
- window.addEventListener("keydown", (event) => {
381
- if (event.key === "Escape") {
382
- event.preventDefault();
383
- complete("cancel");
384
- } else if ((event.metaKey || event.ctrlKey) && event.key === "Enter") {
385
- event.preventDefault();
386
- complete("done");
387
- }
388
- });
389
- </script>
390
- </body>
391
- </html>`;
392
- }
393
-
394
- export function buildCspMetaContent(csp: UiResourceCsp | undefined): string {
395
- const resourceDomains = sanitizeCspDomains(csp?.resourceDomains);
396
- const connectDomains = sanitizeCspDomains(csp?.connectDomains);
397
- const frameDomains = sanitizeCspDomains(csp?.frameDomains);
398
- const baseUriDomains = sanitizeCspDomains(csp?.baseUriDomains);
399
-
400
- return [
401
- "default-src 'none'",
402
- `sandbox ${APP_SANDBOX}`,
403
- toDirective("script-src", ["'self'", "'unsafe-inline'"], resourceDomains),
404
- toDirective("style-src", ["'self'", "'unsafe-inline'"], resourceDomains),
405
- toDirective("font-src", ["'self'"], resourceDomains),
406
- toDirective("img-src", ["'self'", "data:"], resourceDomains),
407
- toDirective("media-src", ["'self'", "data:"], resourceDomains),
408
- connectDomains.length > 0
409
- ? `connect-src ${connectDomains.join(" ")}`
410
- : "connect-src 'none'",
411
- frameDomains.length > 0
412
- ? `frame-src ${frameDomains.join(" ")}`
413
- : "frame-src 'none'",
414
- "worker-src 'none'",
415
- "object-src 'none'",
416
- baseUriDomains.length > 0
417
- ? `base-uri ${baseUriDomains.join(" ")}`
418
- : "base-uri 'self'",
419
- ].join("; ");
420
- }
421
-
422
- function toDirective(name: string, trustedSources: string[], domains: string[]): string {
423
- return `${name} ${[...new Set([...trustedSources, ...domains])].join(" ")}`;
424
- }
425
-
426
- function sanitizeCspDomains(domains: unknown): string[] {
427
- if (!Array.isArray(domains)) return [];
428
-
429
- return [...new Set(domains.filter(
430
- (domain): domain is string =>
431
- typeof domain === "string" &&
432
- domain.length > 0 &&
433
- // HTTP headers must be printable ASCII; rejecting all other code points also
434
- // excludes every C0/C1 control character before Node serializes the policy.
435
- /^[\x21-\x7E]+$/.test(domain) &&
436
- !/[;'"]/.test(domain),
437
- ))];
438
- }
439
-
440
- function safeInlineJSON(value: unknown): string {
441
- return JSON.stringify(value)
442
- .replace(/</g, "\\u003c")
443
- .replace(/>/g, "\\u003e")
444
- .replace(/&/g, "\\u0026")
445
- .replace(/\u2028/g, "\\u2028")
446
- .replace(/\u2029/g, "\\u2029");
447
- }
448
-
449
- function escapeHtml(value: string): string {
450
- return value
451
- .replace(/&/g, "&amp;")
452
- .replace(/</g, "&lt;")
453
- .replace(/>/g, "&gt;")
454
- .replace(/"/g, "&quot;")
455
- .replace(/'/g, "&#39;");
456
- }