@herbertgao/pi-extensions 2026.9.17 → 2026.9.18

package/node_modules/pi-mcp-adapter/sampling-handler.ts

@@ -1,261 +0,0 @@
-import type { Api, AssistantMessage, Message, Model, TextContent } from "@earendil-works/pi-ai";
-import { truncateAtWord } from "./utils.ts";
-import { throwIfAborted } from "./abort.ts";
-import type { ExtensionUIContext, ModelRegistry } from "@earendil-works/pi-coding-agent";
-import type { Client } from "@modelcontextprotocol/client";
-import {
-  type CreateMessageRequest,
-  type CreateMessageResult,
-  type ModelPreferences,
-  type SamplingMessage,
-  type SamplingMessageContentBlock,
-} from "@modelcontextprotocol/client";
-
-export type SamplingUIContext = Pick<ExtensionUIContext, "confirm">;
-export type SamplingModelRegistry = Pick<ModelRegistry, "getAvailable" | "complete">;
-
-export interface SamplingHandlerOptions {
-  serverName: string;
-  autoApprove: boolean;
-  ui?: SamplingUIContext;
-  modelRegistry: SamplingModelRegistry;
-  getCurrentModel: () => Model<Api> | undefined;
-  getSignal: () => AbortSignal | undefined;
-}
-
-export type ServerSamplingConfig = Omit<SamplingHandlerOptions, "serverName">;
-
-export function registerSamplingHandler(client: Client, options: SamplingHandlerOptions): void {
-  client.setRequestHandler("sampling/createMessage", request => {
-    return handleSamplingRequest(options, request);
-  });
-}
-
-export async function handleSamplingRequest(
-  options: SamplingHandlerOptions,
-  request: CreateMessageRequest,
-): Promise<CreateMessageResult> {
-  const params = request.params;
-  const signal = options.getSignal();
-  throwIfAborted(signal);
-
-  if ("task" in params && params.task) {
-    throw new Error("MCP sampling tasks are not supported");
-  }
-  if (params.includeContext && params.includeContext !== "none") {
-    throw new Error("MCP sampling context inclusion is not supported");
-  }
-  if (params.tools?.length) {
-    throw new Error("MCP sampling tool use is not supported");
-  }
-  if (params.toolChoice) {
-    throw new Error("MCP sampling tool choice is not supported");
-  }
-  if (params.stopSequences?.length) {
-    throw new Error("MCP sampling stop sequences are not supported");
-  }
-
-  const messages = params.messages.map(convertSamplingMessage);
-  const model = resolveSamplingModel(options, params.modelPreferences);
-  throwIfAborted(signal);
-  await confirmSampling(
-    options,
-    "Approve MCP sampling request",
-    formatRequestApproval(options.serverName, `${model.provider}/${model.id}`, params.systemPrompt, messages),
-  );
-  throwIfAborted(signal);
-
-  const result = await options.modelRegistry.complete(
-    model,
-    {
-      ...(params.systemPrompt !== undefined ? { systemPrompt: params.systemPrompt } : {}),
-      messages,
-    },
-    {
-      maxTokens: params.maxTokens,
-      ...(params.temperature !== undefined ? { temperature: params.temperature } : {}),
-      ...(params.metadata !== undefined ? { metadata: params.metadata as Record<string, unknown> } : {}),
-      ...(signal ? { signal } : {}),
-    },
-  );
-
-  const converted = convertAssistantResult(result);
-  throwIfAborted(signal);
-  await confirmSampling(
-    options,
-    "Return MCP sampling response",
-    formatResponseApproval(options.serverName, converted),
-  );
-  return converted;
-}
-
-function formatRequestApproval(
-  serverName: string,
-  modelName: string,
-  systemPrompt: string | undefined,
-  messages: Message[],
-): string {
-  const lines = [`${serverName} wants to sample ${messages.length} message${messages.length === 1 ? "" : "s"} with ${modelName}.`];
-  if (systemPrompt) {
-    lines.push(`System: ${truncateAtWord(systemPrompt, 400)}`);
-  }
-  for (const [index, message] of messages.entries()) {
-    lines.push(`${index + 1}. ${message.role}: ${truncateAtWord(messageText(message), 400)}`);
-  }
-  return lines.join("\n\n");
-}
-
-function formatResponseApproval(serverName: string, response: CreateMessageResult): string {
-  const text = response.content.type === "text" ? response.content.text : `[${response.content.type} content]`;
-  return `${serverName} will receive this response from ${response.model}:\n\n${truncateAtWord(text, 1000)}`;
-}
-
-function messageText(message: Message): string {
-  if (typeof message.content === "string") return message.content;
-  return message.content.map((block) => {
-    if (block.type === "text") return block.text;
-    if (block.type === "image") return `[image: ${block.mimeType}]`;
-    if (block.type === "thinking") return "[thinking]";
-    if (block.type === "toolCall") return `[tool call: ${block.name}]`;
-    return "[content]";
-  }).join("\n");
-}
-
-function resolveSamplingModel(
-  options: SamplingHandlerOptions,
-  modelPreferences: ModelPreferences | undefined,
-): Model<Api> {
-  const candidates: Model<Api>[] = [];
-  const availableModels = options.modelRegistry.getAvailable();
-
-  for (const hint of modelPreferences?.hints ?? []) {
-    const normalizedHint = hint.name?.trim().toLowerCase();
-    if (!normalizedHint) continue;
-    for (const model of availableModels) {
-      const searchableNames = [`${model.provider}/${model.id}`, model.id, model.name];
-      if (searchableNames.some((name) => name.toLowerCase().includes(normalizedHint))) {
-        addSamplingCandidate(candidates, model);
-      }
-    }
-  }
-
-  const currentModel = options.getCurrentModel();
-  if (currentModel) addSamplingCandidate(candidates, currentModel);
-
-  for (const model of availableModels) {
-    addSamplingCandidate(candidates, model);
-  }
-
-  const signal = options.getSignal();
-  throwIfAborted(signal);
-  const model = candidates[0];
-  if (model) return model;
-  throw new Error("No Pi model is available for MCP sampling");
-}
-
-function addSamplingCandidate(candidates: Model<Api>[], model: Model<Api>): void {
-  if (!candidates.some((candidate) => candidate.provider === model.provider && candidate.id === model.id)) {
-    candidates.push(model);
-  }
-}
-
-async function confirmSampling(options: SamplingHandlerOptions, title: string, message: string): Promise<void> {
-  if (options.autoApprove) return;
-  if (!options.ui) {
-    throw new Error("MCP sampling requires interactive approval. Set settings.samplingAutoApprove to true to allow it without UI.");
-  }
-  const approved = await options.ui.confirm(title, message);
-  if (!approved) {
-    throw new Error("MCP sampling request was declined");
-  }
-}
-
-function convertSamplingMessage(message: SamplingMessage): Message {
-  const blocks = Array.isArray(message.content) ? message.content : [message.content];
-  if (message.role === "user") {
-    return {
-      role: "user",
-      content: blocks.map(convertUserContent),
-      timestamp: Date.now(),
-    };
-  }
-
-  return {
-    role: "assistant",
-    content: blocks.map(convertAssistantContent),
-    api: "mcp-sampling",
-    provider: "mcp",
-    model: "sampling-request",
-    usage: zeroUsage(),
-    stopReason: "stop",
-    timestamp: Date.now(),
-  };
-}
-
-function convertUserContent(block: SamplingMessageContentBlock): TextContent {
-  if (block.type === "text") {
-    return { type: "text", text: block.text };
-  }
-  throw new Error(`MCP sampling ${block.type} content is not supported`);
-}
-
-function convertAssistantContent(block: SamplingMessageContentBlock): TextContent {
-  if (block.type === "text") {
-    return { type: "text", text: block.text };
-  }
-  throw new Error(`MCP sampling assistant ${block.type} content is not supported`);
-}
-
-function convertAssistantResult(message: AssistantMessage): CreateMessageResult {
-  if (message.stopReason === "error") {
-    throw new Error(message.errorMessage ?? "MCP sampling model call failed");
-  }
-  if (message.stopReason === "aborted") {
-    throw new Error(message.errorMessage ?? "MCP sampling model call was aborted");
-  }
-
-  const text = message.content
-    .map((block) => {
-      if (block.type === "text") return block.text;
-      if (block.type === "thinking") return undefined;
-      throw new Error(`MCP sampling result ${block.type} content is not supported`);
-    })
-    .filter((value): value is string => value !== undefined)
-    .join("\n\n")
-    .trim();
-
-  if (!text) {
-    throw new Error("MCP sampling result did not contain text content");
-  }
-
-  return {
-    role: "assistant",
-    content: { type: "text", text },
-    model: `${message.provider}/${message.model}`,
-    stopReason: mapStopReason(message.stopReason),
-  };
-}
-
-function mapStopReason(reason: AssistantMessage["stopReason"]): CreateMessageResult["stopReason"] {
-  if (reason === "stop") return "endTurn";
-  if (reason === "length") return "maxTokens";
-  if (reason === "toolUse") return "toolUse";
-  return reason;
-}
-
-function zeroUsage(): AssistantMessage["usage"] {
-  return {
-    input: 0,
-    output: 0,
-    cacheRead: 0,
-    cacheWrite: 0,
-    totalTokens: 0,
-    cost: {
-      input: 0,
-      output: 0,
-      cacheRead: 0,
-      cacheWrite: 0,
-      total: 0,
-    },
-  };
-}

package/node_modules/pi-mcp-adapter/sandbox-proxy-template.ts

@@ -1,144 +0,0 @@
-/**
- * The proxy is served from a different loopback origin than the trusted host.
- * `allow-same-origin` is safe here because this document never contains the
- * host's session capability; provider HTML is loaded into the nested frame.
- */
-export const SANDBOX_PROXY_SANDBOX =
-  "allow-scripts allow-forms allow-modals allow-popups allow-downloads allow-same-origin";
-export const SANDBOX_INNER_SANDBOX = SANDBOX_PROXY_SANDBOX;
-export const SANDBOX_PROXY_PATH = "/sandbox";
-export const SANDBOX_RESOURCE_PATH_PREFIX = "/resource/";
-
-export interface SandboxProxyTemplateInput {
-  parentOrigin: string;
-  resourcePath: string;
-  allowAttribute: string;
-}
-
-/**
- * Build the static document used by the trusted, second-origin sandbox proxy.
- * The per-session values are the exact parent host origin and opaque resource path.
- */
-export function buildSandboxProxyHtml(input: SandboxProxyTemplateInput): string {
-  const parentOrigin = safeInlineJSON(input.parentOrigin);
-  const resourcePath = safeInlineJSON(input.resourcePath);
-  const allowAttribute = escapeHtmlAttribute(input.allowAttribute);
-
-  return `<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8" />
-  <meta name="viewport" content="width=device-width, initial-scale=1" />
-  <title>MCP App Sandbox</title>
-  <style>
-    html, body { margin: 0; padding: 0; width: 100%; height: 100%; overflow: hidden; background: transparent; }
-    iframe { display: block; width: 100%; height: 100%; border: 0; }
-  </style>
-</head>
-<body>
-  <iframe id="mcp-app" title="MCP App" sandbox="${SANDBOX_INNER_SANDBOX}" allow="${allowAttribute}" referrerpolicy="no-referrer"></iframe>
-  <script>
-    const EXPECTED_PARENT_ORIGIN = ${parentOrigin};
-    const RESOURCE_PATH = ${resourcePath};
-    const SANDBOX_PROXY_READY_METHOD = "ui/notifications/sandbox-proxy-ready";
-    const SANDBOX_RESOURCE_READY_METHOD = "ui/notifications/sandbox-resource-ready";
-    const MAX_PENDING_MESSAGES = 64;
-    const innerFrame = document.getElementById("mcp-app");
-    const pendingToInner = [];
-    let innerReady = false;
-
-    innerFrame.addEventListener("load", () => {
-      if (innerFrame.getAttribute("src") === RESOURCE_PATH) flushPendingMessages();
-    });
-
-    const isObject = (value) => value !== null && typeof value === "object";
-    const isMessageFromParent = (event) =>
-      event.source === window.parent && event.origin === EXPECTED_PARENT_ORIGIN;
-    const isMessageFromInner = (event) =>
-      event.source === innerFrame.contentWindow && event.origin === window.location.origin;
-
-    const postToParent = (data) => {
-      window.parent.postMessage(data, EXPECTED_PARENT_ORIGIN);
-    };
-
-    const postToInner = (data) => {
-      if (!innerReady || !innerFrame.contentWindow) {
-        if (pendingToInner.length < MAX_PENDING_MESSAGES) pendingToInner.push(data);
-        return;
-      }
-      innerFrame.contentWindow.postMessage(data, window.location.origin);
-    };
-
-    const flushPendingMessages = () => {
-      if (!innerFrame.contentWindow) return;
-      innerReady = true;
-      for (const data of pendingToInner.splice(0)) {
-        innerFrame.contentWindow.postMessage(data, window.location.origin);
-      }
-    };
-
-    window.addEventListener("message", (event) => {
-      if (isMessageFromParent(event)) {
-        const data = event.data;
-        if (!isObject(data)) return;
-        if (data.method === SANDBOX_RESOURCE_READY_METHOD) {
-          innerReady = false;
-          innerFrame.setAttribute("src", RESOURCE_PATH);
-          return;
-        }
-        if (data.method === SANDBOX_PROXY_READY_METHOD) return;
-        if (typeof data.method === "string" && data.method.startsWith("ui/notifications/sandbox-")) return;
-        postToInner(data);
-        return;
-      }
-
-      if (!isMessageFromInner(event)) return;
-      const data = event.data;
-      if (!isObject(data)) return;
-      if (typeof data.method === "string" && data.method.startsWith("ui/notifications/sandbox-")) return;
-      postToParent(data);
-    });
-
-    postToParent({
-      jsonrpc: "2.0",
-      method: SANDBOX_PROXY_READY_METHOD,
-      params: {},
-    });
-  </script>
-</body>
-</html>`;
-}
-
-function escapeHtmlAttribute(value: string): string {
-  return value.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
-}
-
-/**
- * CSP for the proxy document itself. It contains only the inline relay script
- * and a same-origin nested frame. Provider policy is applied on the resource
- * navigation response, not inherited from this relay document.
- */
-export function buildSandboxProxyCsp(): string {
-  return [
-    "default-src 'none'",
-    "script-src 'unsafe-inline'",
-    "style-src 'unsafe-inline'",
-    "frame-src 'self'",
-    "connect-src 'none'",
-    "worker-src 'none'",
-    "object-src 'none'",
-    "base-uri 'none'",
-    `sandbox ${SANDBOX_PROXY_SANDBOX}`,
-  ].join("; ");
-}
-
-function safeInlineJSON(value: unknown): string {
-  const json = JSON.stringify(value);
-  if (json === undefined) return "undefined";
-  return json
-    .replace(/</g, "\\u003c")
-    .replace(/>/g, "\\u003e")
-    .replace(/&/g, "\\u0026")
-    .replace(/\u2028/g, "\\u2028")
-    .replace(/\u2029/g, "\\u2029");
-}