@herbertgao/pi-extensions 2026.9.17 → 2026.9.18

package/node_modules/pi-mcp-adapter/consent-manager.ts

@@ -1,95 +0,0 @@
-import { ConsentError } from "./errors.ts";
-import { logger } from "./logger.ts";
-import type { SessionApprovalWriter } from "./session-approvals.ts";
-
-export type ToolConsentMode = "never" | "once-per-server" | "always";
-
-export class ConsentManager {
-  private approvedServers = new Set<string>();
-  private deniedServers = new Set<string>();
-  private log = logger.child({ component: "ConsentManager" });
-
-  constructor(
-    private mode: ToolConsentMode = "once-per-server",
-    private persistDecision?: SessionApprovalWriter,
-  ) {
-    this.log.debug("Initialized", { mode });
-  }
-
-  requiresPrompt(serverName: string): boolean {
-    if (this.mode === "never") return false;
-    if (this.deniedServers.has(serverName)) return true;
-    if (this.mode === "always") return true;
-    return !this.approvedServers.has(serverName);
-  }
-
-  shouldCacheConsent(): boolean {
-    return this.mode !== "always";
-  }
-
-  registerDecision(serverName: string, approved: boolean): void {
-    this.applyDecision(serverName, approved);
-    try {
-      this.persistDecision?.({
-        version: 1,
-        kind: "iframe",
-        decision: approved ? "allow" : "deny",
-        serverName,
-      });
-    } catch (error) {
-      const detail = error instanceof Error ? error.message : String(error);
-      this.log.debug("Failed to persist consent decision", { server: serverName, error: detail });
-    }
-  }
-
-  /** Apply a persisted decision without writing it back to the session. */
-  restoreDecision(serverName: string, approved: boolean): void {
-    if (this.mode === "always" && approved) {
-      // Restored "always" grants cannot be reused. A later grant still
-      // overrides an earlier denial.
-      this.approvedServers.delete(serverName);
-      this.deniedServers.delete(serverName);
-      return;
-    }
-    this.applyDecision(serverName, approved);
-  }
-
-  ensureApproved(serverName: string): void {
-    if (this.mode === "never") return;
-    if (this.deniedServers.has(serverName)) {
-      throw new ConsentError(serverName, { denied: true });
-    }
-    if (!this.approvedServers.has(serverName)) {
-      throw new ConsentError(serverName, { requiresApproval: true });
-    }
-    if (this.mode === "always") {
-      this.approvedServers.delete(serverName);
-    }
-  }
-
-  clear(serverName?: string): void {
-    if (serverName) {
-      this.approvedServers.delete(serverName);
-      this.deniedServers.delete(serverName);
-      this.log.debug("Cleared consent for server", { server: serverName });
-      return;
-    }
-    this.approvedServers.clear();
-    this.deniedServers.clear();
-    this.log.debug("Cleared all consent records");
-  }
-
-  private applyDecision(serverName: string, approved: boolean): void {
-    this.deniedServers.delete(serverName);
-    this.approvedServers.delete(serverName);
-
-    if (approved) {
-      this.approvedServers.add(serverName);
-      this.log.debug("Consent granted", { server: serverName });
-      return;
-    }
-
-    this.deniedServers.add(serverName);
-    this.log.debug("Consent denied", { server: serverName });
-  }
-}

package/node_modules/pi-mcp-adapter/direct-tool-surface.ts

@@ -1,244 +0,0 @@
-import { Check, Errors } from "typebox/value";
-import type { DirectToolSpec, McpConfig, ToolPrefix } from "./types.ts";
-import { createToolSelectorCandidateIndex, formatToolName, getToolNameCandidates, isServerDisabled, isToolAllowed, resolveToolPrefix, resolveUniqueNameOwnership } from "./types.ts";
-import type { MetadataCache } from "./metadata-cache.ts";
-import { isServerCacheValid, parseDirectToolSelectors } from "./metadata-cache.ts";
-export { getMissingConfiguredDirectToolServers } from "./metadata-cache.ts";
-import { isUiToolVisibleToModel } from "./ui-tool-visibility.ts";
-import { resourceNameToToolName } from "./resource-tools.ts";
-
-const BUILTIN_NAMES = new Set(["read", "bash", "edit", "write", "grep", "find", "ls", "mcp"]);
-export const DIRECT_TOOLS_ADVISORY_THRESHOLD = 75;
-
-export function getLargeDirectToolsAdvisory(config: McpConfig, specs: readonly DirectToolSpec[]): string | undefined {
-  if (config.settings?.warnOnLargeDirectTools === false) return undefined;
-  const eagerCount = specs.filter((spec) => !spec.lazy).length;
-  if (eagerCount < DIRECT_TOOLS_ADVISORY_THRESHOLD) return undefined;
-  return `MCP: ${eagerCount} direct tools resolved. Each direct tool adds prompt context; README guidance recommends targeted sets of 5-20 tools and using the proxy or an explicit string[] when 75+ direct tools would be registered. Set settings.warnOnLargeDirectTools to false to hide this advisory.`;
-}
-
-/**
- * Recover one model-emitted JSON layer for schema-declared object and array
- * properties, then validate the complete input against the same schema.
- */
-export function prepareDirectToolArguments(inputSchema: unknown, args: unknown): unknown {
-  if (!inputSchema || typeof inputSchema !== "object" || Array.isArray(inputSchema)) return args;
-  const schema = inputSchema as Record<string, unknown>;
-  if (schema.type !== "object") return args;
-  const input = args && typeof args === "object" && !Array.isArray(args)
-    ? args as Record<string, unknown>
-    : null;
-  const properties = schema.properties;
-  let prepared: Record<string, unknown> | undefined;
-
-  if (input && properties && typeof properties === "object" && !Array.isArray(properties)) {
-    for (const [name, propertySchema] of Object.entries(properties)) {
-      if (!Object.hasOwn(input, name) || typeof input[name] !== "string"
-        || !propertySchema || typeof propertySchema !== "object" || Array.isArray(propertySchema)) continue;
-      // A valid string may be intentional (for example, string | object).
-      // Only recover JSON when the advertised property rejects the raw value.
-      if (Check(propertySchema as never, input[name])) continue;
-      try {
-        const parsed: unknown = JSON.parse(input[name] as string);
-        const isContainer = Array.isArray(parsed)
-          || (parsed !== null && typeof parsed === "object");
-        if (isContainer && Check(propertySchema as never, parsed)) {
-          prepared ??= { ...input };
-          prepared[name] = parsed;
-        }
-      } catch {
-        // Validation below reports malformed or shape-incompatible values.
-      }
-    }
-  }
-
-  const candidate = prepared ?? args;
-  if (!Check(inputSchema as never, candidate)) {
-    const errors = Errors(inputSchema as never, candidate);
-    const issues = errors.slice(0, 8).map((error) => ({
-      instancePath: error.instancePath || "/",
-      keyword: error.keyword,
-      message: error.message,
-    }));
-    throw new TypeError(`MCP direct tool arguments do not match the advertised input schema: ${JSON.stringify({
-      issues,
-      total: errors.length,
-      truncated: errors.length > issues.length,
-    })}`);
-  }
-  return candidate;
-}
-
-export function resolveDirectTools(
-  config: McpConfig,
-  cache: MetadataCache | null,
-  prefix: ToolPrefix,
-  envOverride?: string[],
-  unavailableServers: ReadonlySet<string> = new Set(),
-  reservedNames?: Set<string>,
-): DirectToolSpec[] {
-  const specs: DirectToolSpec[] = [];
-  if (!cache) return specs;
-
-  const envSelection = envOverride ? parseDirectToolSelectors(envOverride) : null;
-  const globalDirect = config.settings?.directTools;
-
-  for (const [serverName, definition] of Object.entries(config.mcpServers)) {
-    if (isServerDisabled(definition)) continue;
-    const serverCache = cache.servers[serverName];
-    if (!serverCache || !isServerCacheValid(serverCache, definition)) continue;
-
-    let toolFilter: true | string[] | false = false;
-    let lazy = false;
-
-    if (envSelection) {
-      if (envSelection.servers.has(serverName)) {
-        toolFilter = true;
-      } else if (envSelection.tools.has(serverName)) {
-        toolFilter = [...envSelection.tools.get(serverName)!];
-      }
-    } else {
-      const selected = definition.directTools !== undefined ? definition.directTools : globalDirect;
-      if (selected === "search") {
-        // Real tools with real schemas, but registered inactive; the model
-        // reaches them through mcp({ search }), which activates the matches.
-        toolFilter = true;
-        lazy = true;
-      } else if (selected !== undefined) {
-        toolFilter = selected;
-      }
-    }
-
-    if (!toolFilter) continue;
-
-    const effectivePrefix = resolveToolPrefix(definition, prefix);
-    const hasToolFilters =
-      (Array.isArray(definition.includeTools) && definition.includeTools.length > 0) ||
-      (Array.isArray(definition.excludeTools) && definition.excludeTools.length > 0);
-    const selectorCandidateIndex = hasToolFilters ? (() => {
-      const candidates = new Set<string>();
-      for (const [otherServerName, otherDefinition] of Object.entries(config.mcpServers)) {
-        const otherCache = cache.servers[otherServerName];
-        if (!otherCache || !isServerCacheValid(otherCache, otherDefinition) || isServerDisabled(otherDefinition)) continue;
-        const otherPrefix = resolveToolPrefix(otherDefinition, prefix);
-        for (const otherTool of otherCache.tools ?? []) {
-          if (!isUiToolVisibleToModel(otherTool.uiVisibility)) continue;
-          for (const candidate of getToolNameCandidates(otherTool.name, otherServerName, otherPrefix, false)) candidates.add(candidate);
-        }
-        if (otherDefinition.exposeResources !== false) {
-          for (const resource of otherCache.resources ?? []) {
-            const baseName = `read_${resourceNameToToolName(resource.name)}`;
-            for (const candidate of getToolNameCandidates(baseName, otherServerName, otherPrefix, false)) candidates.add(candidate);
-          }
-        }
-      }
-      return createToolSelectorCandidateIndex(candidates);
-    })() : undefined;
-
-    for (const tool of serverCache.tools ?? []) {
-      if (!isUiToolVisibleToModel(tool.uiVisibility)) continue;
-      if (toolFilter !== true && !toolFilter.includes(tool.name)) continue;
-      if (!isToolAllowed(tool.name, serverName, effectivePrefix, definition.includeTools, definition.excludeTools, selectorCandidateIndex)) continue;
-      const prefixedName = formatToolName(tool.name, serverName, effectivePrefix);
-      if (BUILTIN_NAMES.has(prefixedName)) {
-        console.warn(`MCP: skipping direct tool "${prefixedName}" (collides with builtin)`);
-        continue;
-      }
-      specs.push({
-        ...(lazy ? { lazy: true } : {}),
-        serverName,
-        originalName: tool.name,
-        prefixedName,
-        description: tool.description ?? "",
-        ...(tool.inputSchema !== undefined ? { inputSchema: tool.inputSchema } : {}),
-        ...(tool.uiResourceUri !== undefined ? { uiResourceUri: tool.uiResourceUri } : {}),
-        ...(tool.uiStreamMode !== undefined ? { uiStreamMode: tool.uiStreamMode } : {}),
-      });
-    }
-
-    if (definition.exposeResources !== false) {
-      for (const resource of serverCache.resources ?? []) {
-        const baseName = `read_${resourceNameToToolName(resource.name)}`;
-        if (toolFilter !== true && !toolFilter.includes(baseName)) continue;
-        if (!isToolAllowed(baseName, serverName, effectivePrefix, definition.includeTools, definition.excludeTools, selectorCandidateIndex)) continue;
-        const prefixedName = formatToolName(baseName, serverName, effectivePrefix);
-        if (BUILTIN_NAMES.has(prefixedName)) {
-          console.warn(`MCP: skipping direct resource tool "${prefixedName}" (collides with builtin)`);
-          continue;
-        }
-        specs.push({
-          ...(lazy ? { lazy: true } : {}),
-          serverName,
-          originalName: baseName,
-          prefixedName,
-          description: resource.description ?? `Read resource: ${resource.uri}`,
-          resourceUri: resource.uri,
-        });
-      }
-    }
-  }
-
-  const ownership = resolveUniqueNameOwnership(specs, (spec) => spec.prefixedName);
-  for (const [name, colliding] of ownership.collisions) {
-    console.warn(`MCP: skipping colliding direct name "${name}" from ${colliding.map((spec) => `"${spec.serverName}"`).join(", ")}`);
-  }
-  const uniqueSpecs = ownership.unique;
-  for (const spec of uniqueSpecs) reservedNames?.add(spec.prefixedName);
-
-  const emittedSpecs = unavailableServers.size === 0
-    ? uniqueSpecs
-    : uniqueSpecs.filter((spec) => !unavailableServers.has(spec.serverName));
-
-  return emittedSpecs;
-}
-
-/**
- * Pure function of config: the description must stay byte-stable across
- * runtime metadata changes (tool counts, instructions, connection state) so
- * re-registering the proxy tool never rewrites the cached prompt prefix.
- * Live counts/status belong to `mcp({ })`, full instructions to
- * `mcp({ instructions })`.
- */
-export function buildProxyDescription(config: McpConfig): string {
-  let desc = `MCP gateway — URL installation, server status, tool search/describe, auth, and single MCP tool calls. When a user supplies an MCP endpoint URL, install it with the install action. When one request needs several MCP calls with logic between them, use mcpScript. Non-MCP Pi tools should be called directly, not through mcp.\n`;
-
-  const serverNames = Object.keys(config.mcpServers)
-    .filter((serverName) => !isServerDisabled(config.mcpServers[serverName]));
-  if (serverNames.length > 0) {
-    desc += `\nServers: ${serverNames.join(", ")}\n`;
-  }
-
-  // Search-mode tools are real tools held inactive. Say how they wake up, or
-  // the model reads mcp({ tool }) as the only way in and never gets a schema.
-  const searchModeServers = serverNames.filter((serverName) => {
-    const definition = config.mcpServers[serverName];
-    const selected = definition?.directTools !== undefined ? definition.directTools : config.settings?.directTools;
-    return selected === "search";
-  });
-  if (searchModeServers.length > 0) {
-    desc += `\nSearch-mode servers (${searchModeServers.join(", ")}): their tools become real, schema-backed tools the first time mcp({ search }) matches them or mcp({ tool }) calls them — after that, call them directly by name.\n`;
-  }
-
-  const disabledServers = Object.entries(config.mcpServers)
-    .filter(([, definition]) => isServerDisabled(definition))
-    .map(([serverName]) => serverName);
-  if (disabledServers.length > 0) {
-    desc += `\nDisabled servers (enable with /mcp enable <server> and /reload): ${disabledServers.join(", ")}\n`;
-  }
-
-  desc += `\nUsage:\n`;
-  desc += `  mcp({ action: "install", url: "https://example.com/mcp" }) → Install, connect, and authenticate an MCP URL\n`;
-  desc += `  mcp({ })                              → Show server status and tool counts\n`;
-  desc += `  mcp({ server: "name" })               → List tools from server\n`;
-  desc += `  mcp({ search: "query" })              → Search MCP tools by name/description\n`;
-  desc += `  mcp({ describe: "tool_name" })        → Show tool details and parameters\n`;
-  desc += `  mcp({ instructions: "name" })         → Show full server usage instructions\n`;
-  desc += `  mcp({ connect: "server-name" })       → Connect to a server and refresh metadata\n`;
-  desc += `  mcp({ tool: "name", args: { key: "value" } })         → Call a tool (object args; JSON string also accepted)\n`;
-  desc += `  mcp({ action: "ui-messages" })        → Retrieve accumulated messages from completed UI sessions\n`;
-  desc += `  mcp({ action: "auth-start", server: "name" })      → Open OAuth and watch for completion\n`;
-  desc += `  mcp({ action: "auth-complete", server: "name", args: { redirectUrl: "..." } }) → Complete manual OAuth\n`;
-  desc += `\nMode: action > tool (call) > connect > describe > instructions > search > server (list) > nothing (status)`;
-
-  return desc;
-}