@ggui-ai/mcp-server 0.25.0 → 0.27.0

package/dist/view-proof-gate.js

@@ -0,0 +1,167 @@
+/**
+ * The view-origin proof's measuring gate (ggui#1415, release N): for a tool
+ * that declares a view proof, verify the call's proof before the handler
+ * runs, put the verdict on the handler context, and name it on the
+ * `tool_invoked` line. It never refuses a call and never fails one: at this
+ * release the proof is measured, not enforced.
+ *
+ * Built once per server (`createViewProofGate`, holding the secret the ws
+ * envelopes are signed with) and run per call (`runViewProofGate`) from
+ * `buildMcpServer`'s per-tool callback.
+ */
+import { ViewProofRepeatCache, mintViewRoot, verifyViewProof, } from '@ggui-ai/mcp-server-core';
+import { createSessionRowReads, viewProofUseFor, } from '@ggui-ai/mcp-server-handlers';
+import { isViewProofTool } from '@ggui-ai/protocol/integrations/mcp-apps';
+/** Build a server's gate once; the secret stays in its closures. */
+export function createViewProofGate(opts) {
+    const now = opts.now ?? Date.now;
+    return {
+        verify: (input) => verifyViewProof(input, opts.secret),
+        keyable: (sessionId, appId) => mintViewRoot({ sessionId, appId, src: 'result' }, opts.secret).viewKey !== undefined,
+        sessionStore: opts.sessionStore,
+        keyedSince: opts.keyedSince,
+        repeatCache: new ViewProofRepeatCache(10 * 60 * 1000, 10_000, now),
+        now,
+    };
+}
+/**
+ * Refuse, at boot, a handler that declares a view proof on a tool the
+ * proof's bound-argument table does not name: no view can sign a call to
+ * it, so every call would read `missing` for a reason no one could find.
+ */
+export function assertViewProofDeclarations(handlers) {
+    const unbound = handlers.filter((h) => h.viewProof !== undefined && !isViewProofTool(h.name)).map((h) => h.name);
+    if (unbound.length > 0) {
+        throw new Error(`A view proof is declared on ${unbound.join(', ')}, which the view proof's bound-argument table does not name, so no view can sign a call to it. Remove the declaration, or add the tool to the table in @ggui-ai/protocol.`);
+    }
+}
+/** The tools whose declared proof a server without a verifier cannot check. */
+export function unverifiableViewProofTools(handlers) {
+    return handlers.filter((h) => h.viewProof !== undefined).map((h) => h.name);
+}
+const CLAIMED_SESSION_ID_MAX_CHARS = 128;
+const SECOND = 1000;
+const MINUTE = 60 * SECOND;
+const HOUR = 60 * MINUTE;
+const DAY = 24 * HOUR;
+function rootAge(ageMs) {
+    if (ageMs < 3 * MINUTE)
+        return 'lt_3m';
+    if (ageMs < HOUR)
+        return 'lt_1h';
+    if (ageMs < DAY)
+        return 'lt_1d';
+    if (ageMs < 7 * DAY)
+        return 'lt_7d';
+    if (ageMs < 30 * DAY)
+        return 'lt_30d';
+    return 'ge_30d';
+}
+function skew(deltaMs) {
+    const size = Math.abs(deltaMs);
+    if (size < 30 * SECOND)
+        return 'within_30s';
+    const side = deltaMs < 0 ? 'behind' : 'ahead';
+    if (size < 5 * MINUTE)
+        return `${side}_lt_5m`;
+    if (size < HOUR)
+        return `${side}_lt_1h`;
+    return `${side}_ge_1h`;
+}
+function claimed(sessionId) {
+    if (sessionId === '')
+        return {};
+    if (sessionId.length <= CLAIMED_SESSION_ID_MAX_CHARS)
+        return { claimedSessionId: sessionId };
+    return { claimedSessionId: sessionId.slice(0, CLAIMED_SESSION_ID_MAX_CHARS), claimedSessionIdTruncated: true };
+}
+async function classifyEra(gate, ctx, sessionId) {
+    const store = gate.sessionStore;
+    if (store === undefined || ctx.sessionRows === undefined)
+        return 'row_absent';
+    let row;
+    try {
+        row = await ctx.sessionRows.read(store, sessionId);
+    }
+    catch {
+        // A failed read is `row_absent`. The handler reads the same memoized
+        // rejection and names the failure on its own ownership line.
+        return 'row_absent';
+    }
+    if (row === null)
+        return 'row_absent';
+    if (row.appId !== ctx.appId)
+        return 'foreign';
+    if (!gate.keyable(sessionId, row.appId))
+        return 'unkeyed';
+    if (gate.keyedSince === undefined)
+        return 'legacy';
+    // A component or system render's creation time is epoch ms; an embedded
+    // MCP App's is an ISO string. One this server cannot read is `legacy`,
+    // the era that is accepted for life.
+    const createdAt = row.render.createdAt;
+    const createdMs = typeof createdAt === 'number' ? createdAt : Date.parse(createdAt);
+    if (!Number.isFinite(createdMs) || createdMs < gate.keyedSince)
+        return 'legacy';
+    return 'current';
+}
+/**
+ * Run the gate for one call. `gate` is undefined on a server with no
+ * verifier. Total: it never throws, and never changes what the handler
+ * answers; a declaration it cannot read leaves the call as it came.
+ */
+export async function runViewProofGate(gate, handler, input, ctx) {
+    let use;
+    try {
+        use = viewProofUseFor(handler.viewProof, input);
+    }
+    catch (err) {
+        return {
+            ctx,
+            fields: { viewProof: 'invalid', viewProofReason: 'verifier_error', viewProofErrorClass: errorName(err) },
+        };
+    }
+    if (use === undefined)
+        return { ctx, fields: {} };
+    if (gate === undefined)
+        return { ctx, fields: { viewProofUnverifiable: true } };
+    const toolName = handler.name;
+    if (!isViewProofTool(toolName))
+        return { ctx, fields: { viewProofUnverifiable: true } };
+    const sessionId = typeof input['sessionId'] === 'string' ? input['sessionId'] : '';
+    const verdict = gate.verify({ requestMeta: ctx.requestMeta, toolName, args: input, sessionId, appId: ctx.appId });
+    const withProof = { ...ctx, viewProof: verdict, sessionRows: ctx.sessionRows ?? createSessionRowReads() };
+    if (verdict.verdict === 'valid') {
+        const t = gate.now();
+        return {
+            ctx: withProof,
+            fields: {
+                viewProof: 'valid',
+                viewProofSessionId: sessionId,
+                viewProofRootAge: rootAge(t - verdict.rootIat * SECOND),
+                ...(verdict.src !== undefined ? { viewProofRootSrc: verdict.src } : {}),
+                viewProofSkew: skew(verdict.vtime - t),
+                ...(toolName === 'ggui_runtime_submit_action' && input['kind'] === 'dispatch'
+                    ? { viewProofActivation: verdict.userActivation }
+                    : {}),
+                ...(gate.repeatCache.observe(sessionId, verdict.nonce) ? { viewProofRepeat: true } : {}),
+            },
+        };
+    }
+    const era = use === 'required' ? await classifyEra(gate, withProof, sessionId) : undefined;
+    return {
+        ctx: withProof,
+        fields: {
+            viewProof: verdict.verdict,
+            viewProofReason: verdict.reason,
+            ...(verdict.verdict === 'invalid' && verdict.reason === 'verifier_error'
+                ? { viewProofErrorClass: verdict.errorClass }
+                : {}),
+            ...claimed(sessionId),
+            ...(era !== undefined ? { viewProofEra: era } : {}),
+        },
+    };
+}
+function errorName(err) {
+    return (err instanceof Error ? err.name : typeof err).slice(0, 64);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ggui-ai/mcp-server",
-  "version": "0.25.0",
+  "version": "0.27.0",
   "description": "Self-hosted MCP server for the ggui protocol. An HTTP/MCP binding layer over @ggui-ai/mcp-server-handlers and the reference adapters from @ggui-ai/mcp-server-core — run it via `ggui serve`.",
   "keywords": [
     "ggui",
@@ -28,30 +28,29 @@
     "@modelcontextprotocol/ext-apps": "^1.7.2",
     "@modelcontextprotocol/sdk": "^1.27.0",
     "express": "^5.2.1",
-    "nodemailer": "^9.1.1",
+    "nodemailer": "^10.0.13",
     "resend": "^6.12.2",
     "ws": "^8.20.1",
     "zod": "^4.3.6",
-    "@ggui-ai/console": "0.25.0",
-    "@ggui-ai/iframe-runtime": "0.25.0",
-    "@ggui-ai/design": "0.25.0",
-    "@ggui-ai/mcp-server-core": "0.25.0",
-    "@ggui-ai/mcp-server-handlers": "0.25.0",
-    "@ggui-ai/negotiator": "0.25.0",
-    "@ggui-ai/preview-a2ui": "0.25.0",
-    "@ggui-ai/project-config": "0.25.0",
-    "@ggui-ai/protocol": "0.25.0",
-    "@ggui-ai/ui-registry": "0.25.0",
-    "@ggui-ai/ui-gen": "0.25.0"
+    "@ggui-ai/console": "0.27.0",
+    "@ggui-ai/design": "0.27.0",
+    "@ggui-ai/iframe-runtime": "0.27.0",
+    "@ggui-ai/mcp-server-handlers": "0.27.0",
+    "@ggui-ai/mcp-server-core": "0.27.0",
+    "@ggui-ai/negotiator": "0.27.0",
+    "@ggui-ai/preview-a2ui": "0.27.0",
+    "@ggui-ai/protocol": "0.27.0",
+    "@ggui-ai/project-config": "0.27.0",
+    "@ggui-ai/ui-gen": "0.27.0",
+    "@ggui-ai/ui-registry": "0.27.0"
   },
   "devDependencies": {
     "@types/express": "^5.0.0",
     "@types/node": "^22.0.0",
-    "@types/nodemailer": "^8.0.0",
     "@types/ws": "^8.5.10",
     "typescript": "^5.0.0",
     "vitest": "^3.2.6",
-    "@ggui-ai/protocol-conformance": "0.25.0"
+    "@ggui-ai/protocol-conformance": "0.27.0"
   },
   "repository": {
     "type": "git",