@mcpjam/inspector 3.12.3 → 3.12.5

package/dist/server/chunk-SH24KJBI.js

@@ -0,0 +1,194 @@
+// shared/hosted-web-timeouts.ts
+var WEB_CONNECT_TIMEOUT_MS = 1e4;
+var WEB_CALL_TIMEOUT_MS = 3e4;
+var WEB_STREAM_TIMEOUT_MS = 12e4;
+
+// server/config.ts
+var SERVER_PORT = process.env.SERVER_PORT ? parseInt(process.env.SERVER_PORT, 10) : 6274;
+var SERVER_HOSTNAME = process.env.ENVIRONMENT === "dev" ? "localhost" : "127.0.0.1";
+var LOCAL_SERVER_ADDR = `http://localhost:${SERVER_PORT}`;
+var HOSTED_MODE = process.env.VITE_MCPJAM_HOSTED_MODE === "true";
+var LOCAL_BROWSER_ENABLED = !HOSTED_MODE && process.env.MCPJAM_LOCAL_BROWSER_ENABLED !== "false";
+var LOCAL_COMPUTER_ENABLED = !HOSTED_MODE && process.env.MCPJAM_LOCAL_COMPUTER_ENABLED !== "false";
+var LOCAL_HARNESS_ENABLED = !HOSTED_MODE && process.env.MCPJAM_LOCAL_HARNESS_ENABLED !== "false";
+var SCHEDULED_EVALS_WRITE_ENABLED = process.env.MCPJAM_SCHEDULED_EVALS_WRITE_ENABLED === "true";
+var WEBMCP_INSPECTOR_ENABLED = process.env.MCPJAM_WEBMCP_INSPECTOR_ENABLED !== "false";
+function webmcpInspectorHostedEnabled(env = process.env) {
+  return HOSTED_MODE && env.MCPJAM_WEBMCP_INSPECTOR_HOSTED_ENABLED === "1";
+}
+function webmcpInspectorReachable(env = process.env) {
+  if (!WEBMCP_INSPECTOR_ENABLED) return false;
+  return !HOSTED_MODE || webmcpInspectorHostedEnabled(env);
+}
+function hostedBrowserEnabled(env = process.env) {
+  return env.HOSTED_BROWSER_TOOLS_ENABLED === "1";
+}
+function browserShapeRedactionEnabled(env = process.env) {
+  return env.MCPJAM_BROWSER_SHAPE_REDACTION !== "0";
+}
+function browserSecretPlaceholdersEnabled(env = process.env) {
+  return env.MCPJAM_BROWSER_SECRET_PLACEHOLDERS === "1";
+}
+function webmcpPageToolsMode(env = process.env) {
+  return env.MCPJAM_WEBMCP_PAGE_TOOLS === "verbs" ? "verbs" : "first_class";
+}
+var EVAL_WIDGET_MODEL_CONTEXT = process.env.MCPJAM_EVAL_WIDGET_MODEL_CONTEXT === "true";
+var WEB_ALLOWED_ORIGINS = (process.env.WEB_ALLOWED_ORIGINS ?? "").split(",").map((origin) => origin.trim()).filter((origin) => origin.length > 0);
+var CLIENT_PORT = process.env.CLIENT_PORT || "5173";
+var DEFAULT_CORS_ORIGINS = [
+  `http://localhost:${CLIENT_PORT}`,
+  // Vite dev server
+  "http://localhost:8080",
+  // Electron renderer dev server
+  `http://localhost:${SERVER_PORT}`,
+  // Hono server
+  `http://127.0.0.1:${SERVER_PORT}`,
+  // Hono server production
+  "https://staging.mcpjam.com"
+  // Hosted deployment
+];
+var CORS_ORIGINS = HOSTED_MODE && WEB_ALLOWED_ORIGINS.length > 0 ? WEB_ALLOWED_ORIGINS : Array.from(/* @__PURE__ */ new Set([...DEFAULT_CORS_ORIGINS, ...WEB_ALLOWED_ORIGINS]));
+var CORS_OPTIONS = {
+  origin: CORS_ORIGINS,
+  credentials: true,
+  exposeHeaders: ["x-request-id", "x-mcpjam-error-origin", "X-MCPJam-Session"]
+};
+var ELICITATION_FORM_TTL_MS = 5 * 6e4;
+var ELICITATION_URL_CONSENT_TTL_MS = 2 * 6e4;
+var ELICITATION_POLL_INTERVAL_MS = 1e3;
+var ELICITATION_POLL_JITTER_MS = 250;
+var ELICITATION_POLL_MAX_FAILURES = 5;
+var ELICITATION_SERVICE_ROUTE_TIMEOUT_MS = 1e4;
+var ELICITATION_TIMEOUT_EXTENSION_MS = ELICITATION_FORM_TTL_MS + 3e4;
+var MRTR_CONTINUATION_TTL_MS = 10 * 6e4;
+var MRTR_CONTINUATION_ROUTE_TIMEOUT_MS = 1e4;
+var MRTR_CONTINUATION_LEASE_TTL_MS = 4 * MRTR_CONTINUATION_ROUTE_TIMEOUT_MS + WEB_CALL_TIMEOUT_MS + 6e4;
+var MRTR_RESUME_STATE_MAX_BYTES = 128 * 1024;
+var MRTR_DISPLAY_FIELD_MAX_BYTES = 16 * 1024;
+var MRTR_RESPONSE_CONTENT_MAX_BYTES = 64 * 1024;
+var MRTR_TEARDOWN_TIMEOUT_MS = 5e3;
+var MCPJAM_HOSTED_ORIGIN = process.env.MCPJAM_HOSTED_ORIGIN?.replace(/\/+$/, "") || "https://app.mcpjam.com";
+var MCPJAM_PUBLIC_ORIGIN = process.env.MCPJAM_PUBLIC_ORIGIN?.replace(/\/+$/, "") || null;
+function parseAllowedHosts(raw) {
+  return raw ? raw.split(",").map((h) => h.trim().toLowerCase()).filter((h) => h.length > 0) : [];
+}
+var ALLOWED_HOSTS = parseAllowedHosts(
+  process.env.MCPJAM_ALLOWED_HOSTS
+);
+var CANIUSE_LANDING_HOSTS = new Set(
+  (process.env.CANIUSE_LANDING_HOSTS ?? "caniuse.dev,www.caniuse.dev").split(",").map((h) => h.trim().toLowerCase()).filter((h) => h.length > 0)
+);
+var SCORE_LANDING_HOSTS = new Set(
+  (process.env.SCORE_LANDING_HOSTS ?? "score.mcpjam.com,www.score.mcpjam.com").split(",").map((h) => h.trim().toLowerCase()).filter((h) => h.length > 0)
+);
+var BARE_HOSTNAME = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$/;
+function parseSandboxHosts(raw) {
+  return new Set(
+    raw.split(",").map((h) => h.trim().toLowerCase()).filter((h) => BARE_HOSTNAME.test(h))
+  );
+}
+var SANDBOX_HOSTS = parseSandboxHosts(
+  process.env.SANDBOX_HOSTS ?? "sandbox.mcpjam.com,sandbox-staging.mcpjam.com"
+);
+function resolveSandboxIsolation(sandboxHosts = SANDBOX_HOSTS, hostedOrigin = MCPJAM_HOSTED_ORIGIN) {
+  if (sandboxHosts.size === 0) {
+    return "unset";
+  }
+  let appHost;
+  try {
+    appHost = new URL(hostedOrigin).hostname.toLowerCase();
+  } catch {
+    return "unset";
+  }
+  return sandboxHosts.has(appHost) ? "same-origin" : "ok";
+}
+
+// server/utils/local-capability.ts
+import { createHash, randomBytes, timingSafeEqual } from "crypto";
+import { mkdir, writeFile, rename, chmod } from "fs/promises";
+import { dirname } from "path";
+function mintCapabilityToken() {
+  return randomBytes(32).toString("base64url");
+}
+function capabilityFingerprint(token) {
+  return createHash("sha256").update(token, "utf8").digest("hex");
+}
+function capabilityMatches(token, hash) {
+  if (typeof token !== "string" || token.length < 16 || token.length > 256 || !/^[0-9a-f]{64}$/.test(hash))
+    return false;
+  return timingSafeEqual(
+    Buffer.from(capabilityFingerprint(token), "hex"),
+    Buffer.from(hash, "hex")
+  );
+}
+function createCapabilityMutationLock() {
+  let chain = Promise.resolve();
+  return function withLock(op) {
+    const run = chain.then(op, op);
+    chain = run.then(
+      () => void 0,
+      () => void 0
+    );
+    return run;
+  };
+}
+async function persistCapabilityState(file, state) {
+  await mkdir(dirname(file), { recursive: true, mode: 448 });
+  const tmp = `${file}.tmp`;
+  await writeFile(tmp, JSON.stringify(state), { mode: 384 });
+  await chmod(tmp, 384);
+  await rename(tmp, file);
+}
+
+export {
+  WEB_CONNECT_TIMEOUT_MS,
+  WEB_CALL_TIMEOUT_MS,
+  WEB_STREAM_TIMEOUT_MS,
+  SERVER_PORT,
+  SERVER_HOSTNAME,
+  LOCAL_SERVER_ADDR,
+  HOSTED_MODE,
+  LOCAL_BROWSER_ENABLED,
+  LOCAL_COMPUTER_ENABLED,
+  LOCAL_HARNESS_ENABLED,
+  SCHEDULED_EVALS_WRITE_ENABLED,
+  WEBMCP_INSPECTOR_ENABLED,
+  webmcpInspectorHostedEnabled,
+  webmcpInspectorReachable,
+  hostedBrowserEnabled,
+  browserShapeRedactionEnabled,
+  browserSecretPlaceholdersEnabled,
+  webmcpPageToolsMode,
+  EVAL_WIDGET_MODEL_CONTEXT,
+  WEB_ALLOWED_ORIGINS,
+  CORS_ORIGINS,
+  CORS_OPTIONS,
+  ELICITATION_FORM_TTL_MS,
+  ELICITATION_URL_CONSENT_TTL_MS,
+  ELICITATION_POLL_INTERVAL_MS,
+  ELICITATION_POLL_JITTER_MS,
+  ELICITATION_POLL_MAX_FAILURES,
+  ELICITATION_SERVICE_ROUTE_TIMEOUT_MS,
+  ELICITATION_TIMEOUT_EXTENSION_MS,
+  MRTR_CONTINUATION_TTL_MS,
+  MRTR_CONTINUATION_ROUTE_TIMEOUT_MS,
+  MRTR_CONTINUATION_LEASE_TTL_MS,
+  MRTR_RESUME_STATE_MAX_BYTES,
+  MRTR_DISPLAY_FIELD_MAX_BYTES,
+  MRTR_RESPONSE_CONTENT_MAX_BYTES,
+  MRTR_TEARDOWN_TIMEOUT_MS,
+  MCPJAM_HOSTED_ORIGIN,
+  MCPJAM_PUBLIC_ORIGIN,
+  parseAllowedHosts,
+  ALLOWED_HOSTS,
+  CANIUSE_LANDING_HOSTS,
+  SCORE_LANDING_HOSTS,
+  SANDBOX_HOSTS,
+  resolveSandboxIsolation,
+  mintCapabilityToken,
+  capabilityFingerprint,
+  capabilityMatches,
+  createCapabilityMutationLock,
+  persistCapabilityState
+};
+//# sourceMappingURL=chunk-SH24KJBI.js.map

package/dist/server/{consent-lifetime-PTGAZQSU.js → consent-lifetime-M7PS6RUU.js}

@@ -1,10 +1,11 @@
 import {
   createBrowserConsentLifetime,
   invalidateBrowserConsentLifetimes
-} from "./chunk-5RE7KJ2M.js";
+} from "./chunk-4PYR7GMQ.js";
+import "./chunk-SH24KJBI.js";
 import "./chunk-PZ5AY32C.js";
 export {
   createBrowserConsentLifetime,
   invalidateBrowserConsentLifetimes
 };
-//# sourceMappingURL=consent-lifetime-PTGAZQSU.js.map
+//# sourceMappingURL=consent-lifetime-M7PS6RUU.js.map

package/dist/server/harness-install-cli.js

@@ -1,7 +1,7 @@
 import {
   installRuntimePack,
   readRuntimeInstallStatus
-} from "./chunk-WGJHSGJP.js";
+} from "./chunk-QA6VJT6A.js";
 import "./chunk-PZ5AY32C.js";
 
 // server/harness-install-cli.ts