@fitchmultz/pi-mcp-adapter 6.0.0 → 7.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (111) hide show
  1. package/CHANGELOG.md +33 -0
  2. package/OAUTH.md +1 -1
  3. package/README.md +27 -18
  4. package/dist/app-bridge.bundle.js +14 -14
  5. package/dist/config.js +41 -16
  6. package/dist/direct-tools.js +1 -1
  7. package/dist/gateway-arguments.d.ts +1 -1
  8. package/dist/index.js +38 -59
  9. package/dist/lifecycle.d.ts +2 -2
  10. package/dist/lifecycle.js +2 -2
  11. package/dist/mcp-auth-flow.js +2 -2
  12. package/dist/mcp-auth.d.ts +1 -1
  13. package/dist/mcp-auth.js +3 -3
  14. package/dist/mcp-code.d.ts +6 -6
  15. package/dist/mcp-code.js +11 -10
  16. package/dist/mcp-oauth-provider.d.ts +5 -5
  17. package/dist/mcp-oauth-provider.js +5 -5
  18. package/dist/mcp-output-guard.d.ts +1 -1
  19. package/dist/mcp-output-guard.js +1 -1
  20. package/dist/mcp-panel.d.ts +2 -2
  21. package/dist/mcp-panel.js +2 -2
  22. package/dist/mcp-setup-panel.d.ts +5 -4
  23. package/dist/mcp-setup-panel.js +15 -7
  24. package/dist/mcp-trace.d.ts +1 -1
  25. package/dist/mcp-trace.js +1 -1
  26. package/dist/npx-resolver.js +8 -4
  27. package/dist/proxy-modes.d.ts +2 -2
  28. package/dist/proxy-modes.js +20 -19
  29. package/dist/sampling-handler.js +1 -0
  30. package/dist/search-ranking.js +6 -2
  31. package/dist/server-manager.d.ts +2 -2
  32. package/dist/server-manager.js +44 -27
  33. package/dist/session-recovery.d.ts +7 -4
  34. package/dist/session-recovery.js +76 -10
  35. package/dist/tool-loader.d.ts +7 -2
  36. package/dist/tool-loader.js +56 -5
  37. package/dist/tool-metadata.d.ts +43 -43
  38. package/dist/tool-result-renderer.d.ts +3 -3
  39. package/dist/tool-result-renderer.js +3 -3
  40. package/dist/ui-resource-handler.d.ts +2 -2
  41. package/dist/ui-resource-handler.js +2 -2
  42. package/dist/ui-server.js +5 -4
  43. package/dist/ui-stream-types.d.ts +8 -8
  44. package/dist/unix-socket-transport.d.ts +1 -1
  45. package/dist/unix-socket-transport.js +1 -1
  46. package/dist/utils.d.ts +1 -0
  47. package/dist/utils.js +14 -0
  48. package/package.json +34 -98
  49. package/skills/mcp-scripting/SKILL.md +2 -0
  50. package/abort.ts +0 -34
  51. package/agent-dir.ts +0 -24
  52. package/app-bridge.bundle.js +0 -109
  53. package/banner.png +0 -0
  54. package/checkpoint.ts +0 -55
  55. package/commands.ts +0 -622
  56. package/config.ts +0 -1204
  57. package/consent-manager.ts +0 -25
  58. package/direct-tools.ts +0 -75
  59. package/elicitation-handler.ts +0 -349
  60. package/error-signal.ts +0 -21
  61. package/gateway-arguments.ts +0 -73
  62. package/glimpse-ui.ts +0 -80
  63. package/host-html-template.ts +0 -456
  64. package/index.ts +0 -767
  65. package/init.ts +0 -613
  66. package/legacy-migration.ts +0 -47
  67. package/lifecycle.ts +0 -165
  68. package/logger.ts +0 -127
  69. package/mcp-auth-flow.ts +0 -975
  70. package/mcp-auth.ts +0 -793
  71. package/mcp-callback-server.ts +0 -450
  72. package/mcp-code.ts +0 -412
  73. package/mcp-keyring-helper.cjs +0 -89
  74. package/mcp-oauth-provider.ts +0 -774
  75. package/mcp-output-guard.ts +0 -530
  76. package/mcp-panel.ts +0 -907
  77. package/mcp-script-worker.mjs +0 -131
  78. package/mcp-setup-panel.ts +0 -666
  79. package/mcp-status.ts +0 -110
  80. package/mcp-trace.ts +0 -295
  81. package/metadata-cache.ts +0 -271
  82. package/npx-resolver.ts +0 -488
  83. package/onboarding-state.ts +0 -58
  84. package/panel-keys.ts +0 -37
  85. package/prompts.ts +0 -337
  86. package/proxy-modes.ts +0 -1109
  87. package/resource-tools.ts +0 -52
  88. package/runtime-owner.ts +0 -123
  89. package/sampling-handler.ts +0 -276
  90. package/scripts/build-app-bridge.mjs +0 -15
  91. package/scripts/build.mjs +0 -132
  92. package/scripts/prepare.mjs +0 -103
  93. package/search-ranking.ts +0 -132
  94. package/server-manager.ts +0 -1320
  95. package/session-recovery.ts +0 -316
  96. package/state.ts +0 -64
  97. package/tool-approval.ts +0 -78
  98. package/tool-loader.ts +0 -153
  99. package/tool-metadata.ts +0 -240
  100. package/tool-registrar.ts +0 -74
  101. package/tool-result-renderer.ts +0 -294
  102. package/tsconfig.build.json +0 -13
  103. package/tsconfig.json +0 -16
  104. package/types.ts +0 -785
  105. package/ui-resource-handler.ts +0 -249
  106. package/ui-server.ts +0 -808
  107. package/ui-session.ts +0 -568
  108. package/ui-stream-types.ts +0 -89
  109. package/ui-tool-visibility.ts +0 -25
  110. package/unix-socket-transport.ts +0 -85
  111. package/utils.ts +0 -307
package/host-html-template.ts DELETED
@@ -1,456 +0,0 @@
1
- import type { UiHostContext, UiResourceContent, UiResourceCsp } from "./types.ts";
2
-
3
- // Use locally bundled AppBridge to avoid CDN Zod bundling issues
4
- const DEFAULT_APP_BRIDGE_MODULE_URL = "/app-bridge.bundle.js";
5
- const APP_SANDBOX = "allow-scripts allow-forms allow-modals allow-popups allow-downloads";
6
-
7
- export interface HostHtmlTemplateInput {
8
- sessionToken: string;
9
- uiResourceToken: string;
10
- serverName: string;
11
- toolName: string;
12
- toolArgs: Record<string, unknown>;
13
- resource: UiResourceContent;
14
- allowAttribute: string;
15
- requireToolConsent: boolean;
16
- hostContext?: UiHostContext;
17
- appBridgeModuleUrl?: string;
18
- }
19
-
20
- export function buildHostHtmlTemplate(input: HostHtmlTemplateInput): string {
21
- const hostContext = input.hostContext ?? {};
22
-
23
- const sessionToken = safeInlineJSON(input.sessionToken);
24
- const uiResourceToken = safeInlineJSON(input.uiResourceToken);
25
- const toolArgs = safeInlineJSON(input.toolArgs);
26
- const serverName = safeInlineJSON(input.serverName);
27
- const toolName = safeInlineJSON(input.toolName);
28
- const hostContextJson = safeInlineJSON(hostContext);
29
- const allowAttribute = safeInlineJSON(input.allowAttribute);
30
- const requireToolConsent = safeInlineJSON(input.requireToolConsent);
31
- const moduleUrl = safeInlineJSON(input.appBridgeModuleUrl ?? DEFAULT_APP_BRIDGE_MODULE_URL);
32
-
33
- return `<!doctype html>
34
- <html lang="en">
35
- <head>
36
- <meta charset="utf-8" />
37
- <meta name="viewport" content="width=device-width, initial-scale=1" />
38
- <title>MCP UI - ${escapeHtml(input.serverName)} / ${escapeHtml(input.toolName)}</title>
39
- <style>
40
- :root {
41
- color-scheme: light dark;
42
- --bg: #0f1115;
43
- --surface: #181c22;
44
- --text: #ecf0f5;
45
- --muted: #a9b2bf;
46
- --accent: #43c0ff;
47
- --border: rgba(255, 255, 255, 0.12);
48
- --good: #34d399;
49
- --warn: #fbbf24;
50
- --bad: #f87171;
51
- }
52
- @media (prefers-color-scheme: light) {
53
- :root {
54
- --bg: #f6f7fb;
55
- --surface: #ffffff;
56
- --text: #1d2939;
57
- --muted: #667085;
58
- --accent: #0ea5e9;
59
- --border: rgba(15, 23, 42, 0.14);
60
- --good: #059669;
61
- --warn: #b45309;
62
- --bad: #b91c1c;
63
- }
64
- }
65
- * { box-sizing: border-box; }
66
- html, body { margin: 0; padding: 0; height: 100%; font-family: ui-sans-serif, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; background: var(--bg); color: var(--text); }
67
- body { display: flex; flex-direction: column; min-height: 100vh; min-height: 100dvh; }
68
- header { background: var(--surface); border-bottom: 1px solid var(--border); padding: calc(10px + env(safe-area-inset-top, 0px)) calc(14px + env(safe-area-inset-right, 0px)) 10px calc(14px + env(safe-area-inset-left, 0px)); display: flex; align-items: center; justify-content: space-between; gap: 10px; }
69
- .title { display: flex; gap: 8px; align-items: baseline; min-width: 0; }
70
- .server { font-size: 12px; color: var(--muted); text-transform: uppercase; letter-spacing: 0.08em; white-space: nowrap; }
71
- .tool { font-size: 14px; font-weight: 600; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
72
- .badge { border: 1px solid var(--border); border-radius: 999px; padding: 2px 8px; font-size: 11px; color: var(--muted); white-space: nowrap; }
73
- .controls { display: flex; gap: 8px; align-items: center; }
74
- .status { font-size: 12px; color: var(--muted); white-space: nowrap; }
75
- button { border: 1px solid var(--border); background: transparent; color: var(--text); border-radius: 8px; padding: 6px 10px; cursor: pointer; font-size: 12px; }
76
- button.primary { border-color: color-mix(in srgb, var(--good) 40%, var(--border) 60%); color: var(--good); }
77
- button.danger { border-color: color-mix(in srgb, var(--bad) 40%, var(--border) 60%); color: var(--bad); }
78
- button:hover { background: color-mix(in srgb, var(--surface) 75%, var(--accent) 25%); }
79
- main { flex: 1; min-height: 0; padding: 10px; padding-inline: calc(10px + env(safe-area-inset-left, 0px)) calc(10px + env(safe-area-inset-right, 0px)); padding-bottom: calc(10px + env(safe-area-inset-bottom, 0px)); display: flex; }
80
- iframe { width: 100%; height: 100%; border: 1px solid var(--border); border-radius: 10px; background: white; }
81
- .overlay { position: fixed; inset: 0; background: color-mix(in srgb, var(--bg) 90%, black 10%); display: none; align-items: center; justify-content: center; z-index: 2; padding: 16px; }
82
- .overlay.visible { display: flex; }
83
- .panel { width: min(680px, calc(100vw - 40px)); background: var(--surface); border: 1px solid var(--border); border-radius: 12px; padding: 18px; }
84
- .panel h2 { margin: 0 0 8px; font-size: 16px; }
85
- .panel p { margin: 0; color: var(--muted); line-height: 1.4; font-size: 14px; white-space: pre-wrap; }
86
- @media (max-width: 640px) {
87
- header { align-items: stretch; flex-direction: column; gap: 8px; }
88
- .title { flex-wrap: wrap; row-gap: 4px; }
89
- .server { flex-basis: 100%; }
90
- .controls { width: 100%; }
91
- .status { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; }
92
- button { min-height: 44px; padding: 10px 14px; }
93
- main { padding: 6px; padding-inline: calc(6px + env(safe-area-inset-left, 0px)) calc(6px + env(safe-area-inset-right, 0px)); padding-bottom: calc(6px + env(safe-area-inset-bottom, 0px)); }
94
- iframe { border-radius: 6px; }
95
- .panel { width: 100%; }
96
- }
97
- </style>
98
- </head>
99
- <body>
100
- <header>
101
- <div class="title">
102
- <span class="server">MCP · <span id="server-name"></span></span>
103
- <span class="tool" id="tool-name"></span>
104
- <span class="badge">Sandboxed</span>
105
- </div>
106
- <div class="controls">
107
- <span class="status" id="status">Loading UI...</span>
108
- <button class="primary" id="done-btn" title="Cmd/Ctrl+Enter">Done</button>
109
- <button class="danger" id="cancel-btn" title="Escape">Cancel</button>
110
- </div>
111
- </header>
112
- <main>
113
- <iframe id="mcp-app" sandbox="${APP_SANDBOX}" referrerpolicy="no-referrer"></iframe>
114
- </main>
115
- <div class="overlay" id="error-overlay">
116
- <div class="panel">
117
- <h2>UI Error</h2>
118
- <p id="error-message"></p>
119
- </div>
120
- </div>
121
- <div class="overlay" id="completion-overlay">
122
- <div class="panel">
123
- <h2>Done</h2>
124
- <p>MCP UI session finished. You can close this page and return to Pi.</p>
125
- </div>
126
- </div>
127
- <script type="module">
128
- import { AppBridge, PostMessageTransport } from ${moduleUrl};
129
-
130
- const SESSION_TOKEN = ${sessionToken};
131
- const UI_RESOURCE_TOKEN = ${uiResourceToken};
132
- const SERVER_NAME = ${serverName};
133
- const TOOL_NAME = ${toolName};
134
- const TOOL_ARGS = ${toolArgs};
135
- const HOST_CONTEXT = ${hostContextJson};
136
- const ALLOW_ATTRIBUTE = ${allowAttribute};
137
- const REQUIRE_TOOL_CONSENT = ${requireToolConsent};
138
- const STREAM_CONTEXT_KEY = "pi-mcp-adapter/stream";
139
- const STREAM_PATCH_METHOD = "notifications/pi-mcp-adapter/ui-result-patch";
140
-
141
- const iframe = document.getElementById("mcp-app");
142
- const statusNode = document.getElementById("status");
143
- const doneBtn = document.getElementById("done-btn");
144
- const cancelBtn = document.getElementById("cancel-btn");
145
- const errorOverlay = document.getElementById("error-overlay");
146
- const completionOverlay = document.getElementById("completion-overlay");
147
- const errorMessage = document.getElementById("error-message");
148
-
149
- document.getElementById("server-name").textContent = SERVER_NAME;
150
- document.getElementById("tool-name").textContent = TOOL_NAME;
151
-
152
- const setStatus = (text, isError = false) => {
153
- statusNode.textContent = text;
154
- statusNode.style.color = isError ? "var(--bad)" : "var(--muted)";
155
- };
156
-
157
- const showError = (message) => {
158
- errorMessage.textContent = message;
159
- errorOverlay.classList.add("visible");
160
- setStatus("Error", true);
161
- };
162
-
163
- let completionPending = false;
164
- const showCompletion = () => {
165
- completionOverlay.classList.add("visible");
166
- setStatus("Complete");
167
- };
168
- const closeOrShowDone = () => {
169
- completionPending = true;
170
- window.close();
171
- setTimeout(() => {
172
- if (!document.hidden) {
173
- showCompletion();
174
- }
175
- }, 1000);
176
- };
177
- document.addEventListener("visibilitychange", () => {
178
- if (completionPending && !document.hidden) {
179
- showCompletion();
180
- }
181
- });
182
-
183
- const post = async (endpoint, params) => {
184
- const response = await fetch(endpoint, {
185
- method: "POST",
186
- headers: { "Content-Type": "application/json" },
187
- body: JSON.stringify({ token: SESSION_TOKEN, params }),
188
- });
189
-
190
- const body = await response.json().catch(() => ({ ok: false, error: "Invalid JSON response" }));
191
- if (!response.ok || !body.ok) {
192
- const message = body.error || ("HTTP " + response.status);
193
- throw new Error(message);
194
- }
195
- return body.result ?? {};
196
- };
197
-
198
- let consentGranted = !REQUIRE_TOOL_CONSENT;
199
- const initialStreamContext = HOST_CONTEXT?.[STREAM_CONTEXT_KEY];
200
- const streamMode = initialStreamContext?.mode === "stream-first" ? "stream-first" : "eager";
201
-
202
- const bridge = new AppBridge(
203
- null,
204
- { name: "pi", version: "1.0.0" },
205
- { serverTools: {}, openLinks: {}, logging: {}, updateModelContext: {}, message: {} },
206
- { hostContext: HOST_CONTEXT }
207
- );
208
-
209
- bridge.oncalltool = async (params) => {
210
- if (!consentGranted) {
211
- const accepted = window.confirm("Allow this UI to call server tools for this session?");
212
- if (!accepted) {
213
- await post("/proxy/ui/consent", { approved: false }).catch(() => {});
214
- return {
215
- isError: true,
216
- content: [{ type: "text", text: "Tool call denied by user." }],
217
- };
218
- }
219
- await post("/proxy/ui/consent", { approved: true });
220
- consentGranted = true;
221
- }
222
- const result = await post("/proxy/tools/call", params);
223
- // Notify agent about the tool call
224
- await post("/proxy/ui/message", {
225
- type: "intent",
226
- intent: "call_tool",
227
- params: { tool: params.name, arguments: params.arguments, isError: result.isError }
228
- }).catch(() => {});
229
- return result;
230
- };
231
-
232
- bridge.onmessage = async (params) => post("/proxy/ui/message", params);
233
- bridge.onupdatemodelcontext = async (params) => post("/proxy/ui/context", params);
234
-
235
- // Also listen for raw postMessage events with custom types (notify, prompt, intent, etc.)
236
- // These bypass the AppBridge protocol but are used by some MCP UI implementations
237
- window.addEventListener("message", async (event) => {
238
- if (event.source !== iframe.contentWindow) return;
239
- const data = event.data;
240
- if (!data || typeof data !== "object") return;
241
-
242
- // Skip AppBridge protocol messages (handled by bridge)
243
- if (data.jsonrpc || (typeof data.method === "string" && (data.method.startsWith("app/") || data.method.startsWith("host/")))) return;
244
-
245
- // Handle raw UI action messages
246
- const msgType = data.type;
247
- if (typeof msgType !== "string") return;
248
-
249
- if (msgType === "notify" || msgType === "prompt" || msgType === "intent" || msgType === "message") {
250
- // Standard MCP-UI types - preserve their semantics
251
- // Support both { type, payload: {...} } and { type, field: value } formats
252
- const { type: _, payload, ...directFields } = data;
253
- await post("/proxy/ui/message", { type: msgType, ...directFields, ...(payload || {}) }).catch(() => {});
254
- } else if (!msgType.startsWith("ui-lifecycle-") && !msgType.startsWith("ui-message-")) {
255
- // Any other custom type - forward as intent with type as intent name
256
- // (Skip internal lifecycle/ack messages)
257
- const payload = data.payload || {};
258
- await post("/proxy/ui/message", {
259
- type: "intent",
260
- intent: msgType,
261
- params: payload,
262
- }).catch(() => {});
263
- }
264
- });
265
- bridge.ondownloadfile = async (params) => post("/proxy/ui/download-file", params);
266
- bridge.onrequestdisplaymode = async (params) => post("/proxy/ui/request-display-mode", params);
267
- bridge.onopenlink = async (params) => {
268
- const result = await post("/proxy/ui/open-link", params);
269
- if (!result.isError) {
270
- window.open(params.url, "_blank", "noopener,noreferrer");
271
- // Notify agent about the link open
272
- await post("/proxy/ui/message", {
273
- type: "intent",
274
- intent: "open_link",
275
- params: { url: params.url }
276
- }).catch(() => {});
277
- }
278
- return result;
279
- };
280
-
281
- bridge.oninitialized = () => {
282
- if (streamMode !== "stream-first") {
283
- bridge.sendToolInput({ arguments: TOOL_ARGS });
284
- }
285
- setStatus(streamMode === "stream-first" ? "Streaming…" : "Connected");
286
- };
287
-
288
- bridge.onsizechange = ({ width, height }) => {
289
- if (typeof width === "number" && width > 0) {
290
- iframe.style.minWidth = Math.min(width, window.innerWidth - 24) + "px";
291
- }
292
- if (typeof height === "number" && height > 0) {
293
- iframe.style.height = Math.max(height, 320) + "px";
294
- }
295
- };
296
-
297
- if (ALLOW_ATTRIBUTE) {
298
- iframe.setAttribute("allow", ALLOW_ATTRIBUTE);
299
- }
300
-
301
- // Connect bridge BEFORE loading iframe to ensure we're listening when the app sends ui/initialize
302
- try {
303
- const transport = new PostMessageTransport(iframe.contentWindow, iframe.contentWindow);
304
- await bridge.connect(transport);
305
- } catch (error) {
306
- console.error("[host] Bridge connection failed:", error);
307
- showError("Failed to initialize AppBridge: " + String(error));
308
- }
309
-
310
- const iframeLoaded = new Promise((resolve) => {
311
- iframe.onload = resolve;
312
- });
313
- iframe.src = "/ui-app?resource=" + encodeURIComponent(UI_RESOURCE_TOKEN);
314
- await iframeLoaded;
315
-
316
- const eventSource = new EventSource("/events?session=" + encodeURIComponent(SESSION_TOKEN));
317
- eventSource.addEventListener("tool-input", (event) => {
318
- try {
319
- bridge.sendToolInput(JSON.parse(event.data));
320
- } catch (error) {
321
- showError("Failed to forward tool input: " + String(error));
322
- }
323
- });
324
- eventSource.addEventListener("tool-result", (event) => {
325
- try {
326
- bridge.sendToolResult(JSON.parse(event.data));
327
- } catch (error) {
328
- showError("Failed to forward tool result: " + String(error));
329
- }
330
- });
331
- eventSource.addEventListener("tool-cancelled", (event) => {
332
- try {
333
- bridge.sendToolCancelled(JSON.parse(event.data));
334
- } catch (error) {
335
- showError("Failed to forward cancellation: " + String(error));
336
- }
337
- });
338
- eventSource.addEventListener("result-patch", async (event) => {
339
- try {
340
- await bridge.notification({
341
- method: STREAM_PATCH_METHOD,
342
- params: JSON.parse(event.data),
343
- });
344
- } catch (error) {
345
- showError("Failed to forward stream patch: " + String(error));
346
- }
347
- });
348
- eventSource.addEventListener("host-context", (event) => {
349
- try {
350
- bridge.setHostContext(JSON.parse(event.data));
351
- } catch {}
352
- });
353
- eventSource.addEventListener("session-complete", async () => {
354
- await bridge.teardownResource({}).catch(() => {});
355
- eventSource.close();
356
- closeOrShowDone();
357
- });
358
- eventSource.onerror = () => {
359
- setStatus("Connection lost", true);
360
- };
361
-
362
- const heartbeat = setInterval(() => {
363
- post("/proxy/ui/heartbeat", {}).catch(() => {});
364
- }, 10000);
365
-
366
- const complete = async (reason) => {
367
- try {
368
- await post("/proxy/ui/complete", { reason });
369
- } catch {}
370
- try {
371
- await bridge.teardownResource({});
372
- } catch {}
373
- clearInterval(heartbeat);
374
- eventSource.close();
375
- closeOrShowDone();
376
- };
377
-
378
- doneBtn.addEventListener("click", () => complete("done"));
379
- cancelBtn.addEventListener("click", () => complete("cancel"));
380
- window.addEventListener("keydown", (event) => {
381
- if (event.key === "Escape") {
382
- event.preventDefault();
383
- complete("cancel");
384
- } else if ((event.metaKey || event.ctrlKey) && event.key === "Enter") {
385
- event.preventDefault();
386
- complete("done");
387
- }
388
- });
389
- </script>
390
- </body>
391
- </html>`;
392
- }
393
-
394
- export function buildCspMetaContent(csp: UiResourceCsp | undefined): string {
395
- const resourceDomains = sanitizeCspDomains(csp?.resourceDomains);
396
- const connectDomains = sanitizeCspDomains(csp?.connectDomains);
397
- const frameDomains = sanitizeCspDomains(csp?.frameDomains);
398
- const baseUriDomains = sanitizeCspDomains(csp?.baseUriDomains);
399
-
400
- return [
401
- "default-src 'none'",
402
- `sandbox ${APP_SANDBOX}`,
403
- toDirective("script-src", ["'self'", "'unsafe-inline'"], resourceDomains),
404
- toDirective("style-src", ["'self'", "'unsafe-inline'"], resourceDomains),
405
- toDirective("font-src", ["'self'"], resourceDomains),
406
- toDirective("img-src", ["'self'", "data:"], resourceDomains),
407
- toDirective("media-src", ["'self'", "data:"], resourceDomains),
408
- connectDomains.length > 0
409
- ? `connect-src ${connectDomains.join(" ")}`
410
- : "connect-src 'none'",
411
- frameDomains.length > 0
412
- ? `frame-src ${frameDomains.join(" ")}`
413
- : "frame-src 'none'",
414
- "worker-src 'none'",
415
- "object-src 'none'",
416
- baseUriDomains.length > 0
417
- ? `base-uri ${baseUriDomains.join(" ")}`
418
- : "base-uri 'self'",
419
- ].join("; ");
420
- }
421
-
422
- function toDirective(name: string, trustedSources: string[], domains: string[]): string {
423
- return `${name} ${[...new Set([...trustedSources, ...domains])].join(" ")}`;
424
- }
425
-
426
- function sanitizeCspDomains(domains: unknown): string[] {
427
- if (!Array.isArray(domains)) return [];
428
-
429
- return [...new Set(domains.filter(
430
- (domain): domain is string =>
431
- typeof domain === "string" &&
432
- domain.length > 0 &&
433
- // HTTP headers must be printable ASCII; rejecting all other code points also
434
- // excludes every C0/C1 control character before Node serializes the policy.
435
- /^[\x21-\x7E]+$/.test(domain) &&
436
- !/[;'"]/.test(domain),
437
- ))];
438
- }
439
-
440
- function safeInlineJSON(value: unknown): string {
441
- return JSON.stringify(value)
442
- .replace(/</g, "\\u003c")
443
- .replace(/>/g, "\\u003e")
444
- .replace(/&/g, "\\u0026")
445
- .replace(/\u2028/g, "\\u2028")
446
- .replace(/\u2029/g, "\\u2029");
447
- }
448
-
449
- function escapeHtml(value: string): string {
450
- return value
451
- .replace(/&/g, "&amp;")
452
- .replace(/</g, "&lt;")
453
- .replace(/>/g, "&gt;")
454
- .replace(/"/g, "&quot;")
455
- .replace(/'/g, "&#39;");
456
- }