@mcpjam/inspector 3.12.4 → 3.12.5

package/dist/server/{chunk-5RE7KJ2M.js → chunk-4PYR7GMQ.js}

@@ -1,3 +1,13 @@
+import {
+  SERVER_HOSTNAME,
+  SERVER_PORT,
+  capabilityFingerprint,
+  capabilityMatches,
+  createCapabilityMutationLock,
+  mintCapabilityToken,
+  persistCapabilityState
+} from "./chunk-SH24KJBI.js";
+
 // server/utils/computers/browser-consent.ts
 import { watch } from "fs";
 import { homedir } from "os";
@@ -5,53 +15,14 @@ import { join } from "path";
 
 // server/utils/device-consent.ts
 import { lock } from "proper-lockfile";
-import { mkdir as mkdir2 } from "fs/promises";
-import { dirname as dirname2 } from "path";
-import { readFile, unlink } from "fs/promises";
-
-// server/utils/local-capability.ts
-import { createHash, randomBytes, timingSafeEqual } from "crypto";
-import { mkdir, writeFile, rename, chmod } from "fs/promises";
+import { mkdir } from "fs/promises";
 import { dirname } from "path";
-function mintCapabilityToken() {
-  return randomBytes(32).toString("base64url");
-}
-function capabilityFingerprint(token) {
-  return createHash("sha256").update(token, "utf8").digest("hex");
-}
-function capabilityMatches(token, hash) {
-  if (typeof token !== "string" || token.length < 16 || token.length > 256 || !/^[0-9a-f]{64}$/.test(hash))
-    return false;
-  return timingSafeEqual(
-    Buffer.from(capabilityFingerprint(token), "hex"),
-    Buffer.from(hash, "hex")
-  );
-}
-function createCapabilityMutationLock() {
-  let chain = Promise.resolve();
-  return function withLock(op) {
-    const run = chain.then(op, op);
-    chain = run.then(
-      () => void 0,
-      () => void 0
-    );
-    return run;
-  };
-}
-async function persistCapabilityState(file, state) {
-  await mkdir(dirname(file), { recursive: true, mode: 448 });
-  const tmp = `${file}.tmp`;
-  await writeFile(tmp, JSON.stringify(state), { mode: 384 });
-  await chmod(tmp, 384);
-  await rename(tmp, file);
-}
-
-// server/utils/device-consent.ts
+import { readFile, unlink } from "fs/promises";
 function createDeviceConsent(consentFilePath) {
   const serialize = createCapabilityMutationLock();
   const withConsentMutationLock = (operation) => serialize(async () => {
     const file = consentFilePath();
-    await mkdir2(dirname2(file), { recursive: true, mode: 448 });
+    await mkdir(dirname(file), { recursive: true, mode: 448 });
     const release = await lock(file, {
       realpath: false,
       retries: { retries: 40, minTimeout: 25, maxTimeout: 100 },
@@ -127,7 +98,7 @@ var consent = createDeviceConsent(
 );
 async function grantLocalBrowserConsent() {
   const grant = await consent.grant();
-  const { invalidateBrowserConsentLifetimes: invalidateBrowserConsentLifetimes2 } = await import("./consent-lifetime-PTGAZQSU.js");
+  const { invalidateBrowserConsentLifetimes: invalidateBrowserConsentLifetimes2 } = await import("./consent-lifetime-M7PS6RUU.js");
   await invalidateBrowserConsentLifetimes2(await consent.fingerprint());
   return grant;
 }
@@ -136,7 +107,7 @@ var getBrowserConsentFingerprint = consent.fingerprint;
 var verifyAndFingerprintBrowserConsent = consent.verifyAndFingerprint;
 async function revokeLocalBrowserConsent(token) {
   await consent.revoke(token);
-  const { invalidateBrowserConsentLifetimes: invalidateBrowserConsentLifetimes2 } = await import("./consent-lifetime-PTGAZQSU.js");
+  const { invalidateBrowserConsentLifetimes: invalidateBrowserConsentLifetimes2 } = await import("./consent-lifetime-M7PS6RUU.js");
   await invalidateBrowserConsentLifetimes2(await consent.fingerprint());
 }
 function watchBrowserConsentChanges(changed) {
@@ -159,111 +130,6 @@ import { networkInterfaces } from "os";
 import { isIP } from "net";
 import { lookup } from "dns/promises";
 
-// shared/hosted-web-timeouts.ts
-var WEB_CONNECT_TIMEOUT_MS = 1e4;
-var WEB_CALL_TIMEOUT_MS = 3e4;
-var WEB_STREAM_TIMEOUT_MS = 12e4;
-
-// server/config.ts
-var SERVER_PORT = process.env.SERVER_PORT ? parseInt(process.env.SERVER_PORT, 10) : 6274;
-var SERVER_HOSTNAME = process.env.ENVIRONMENT === "dev" ? "localhost" : "127.0.0.1";
-var LOCAL_SERVER_ADDR = `http://localhost:${SERVER_PORT}`;
-var HOSTED_MODE = process.env.VITE_MCPJAM_HOSTED_MODE === "true";
-var LOCAL_BROWSER_ENABLED = !HOSTED_MODE && process.env.MCPJAM_LOCAL_BROWSER_ENABLED !== "false";
-var LOCAL_COMPUTER_ENABLED = !HOSTED_MODE && process.env.MCPJAM_LOCAL_COMPUTER_ENABLED !== "false";
-var LOCAL_HARNESS_ENABLED = !HOSTED_MODE && process.env.MCPJAM_LOCAL_HARNESS_ENABLED === "true";
-var SCHEDULED_EVALS_WRITE_ENABLED = process.env.MCPJAM_SCHEDULED_EVALS_WRITE_ENABLED === "true";
-var WEBMCP_INSPECTOR_ENABLED = process.env.MCPJAM_WEBMCP_INSPECTOR_ENABLED !== "false";
-function webmcpInspectorHostedEnabled(env = process.env) {
-  return HOSTED_MODE && env.MCPJAM_WEBMCP_INSPECTOR_HOSTED_ENABLED === "1";
-}
-function webmcpInspectorReachable(env = process.env) {
-  if (!WEBMCP_INSPECTOR_ENABLED) return false;
-  return !HOSTED_MODE || webmcpInspectorHostedEnabled(env);
-}
-function hostedBrowserEnabled(env = process.env) {
-  return env.HOSTED_BROWSER_TOOLS_ENABLED === "1";
-}
-function browserShapeRedactionEnabled(env = process.env) {
-  return env.MCPJAM_BROWSER_SHAPE_REDACTION !== "0";
-}
-function browserSecretPlaceholdersEnabled(env = process.env) {
-  return env.MCPJAM_BROWSER_SECRET_PLACEHOLDERS === "1";
-}
-function webmcpPageToolsMode(env = process.env) {
-  return env.MCPJAM_WEBMCP_PAGE_TOOLS === "verbs" ? "verbs" : "first_class";
-}
-var EVAL_WIDGET_MODEL_CONTEXT = process.env.MCPJAM_EVAL_WIDGET_MODEL_CONTEXT === "true";
-var WEB_ALLOWED_ORIGINS = (process.env.WEB_ALLOWED_ORIGINS ?? "").split(",").map((origin) => origin.trim()).filter((origin) => origin.length > 0);
-var CLIENT_PORT = process.env.CLIENT_PORT || "5173";
-var DEFAULT_CORS_ORIGINS = [
-  `http://localhost:${CLIENT_PORT}`,
-  // Vite dev server
-  "http://localhost:8080",
-  // Electron renderer dev server
-  `http://localhost:${SERVER_PORT}`,
-  // Hono server
-  `http://127.0.0.1:${SERVER_PORT}`,
-  // Hono server production
-  "https://staging.mcpjam.com"
-  // Hosted deployment
-];
-var CORS_ORIGINS = HOSTED_MODE && WEB_ALLOWED_ORIGINS.length > 0 ? WEB_ALLOWED_ORIGINS : Array.from(/* @__PURE__ */ new Set([...DEFAULT_CORS_ORIGINS, ...WEB_ALLOWED_ORIGINS]));
-var CORS_OPTIONS = {
-  origin: CORS_ORIGINS,
-  credentials: true,
-  exposeHeaders: ["x-request-id", "x-mcpjam-error-origin"]
-};
-var ELICITATION_FORM_TTL_MS = 5 * 6e4;
-var ELICITATION_URL_CONSENT_TTL_MS = 2 * 6e4;
-var ELICITATION_POLL_INTERVAL_MS = 1e3;
-var ELICITATION_POLL_JITTER_MS = 250;
-var ELICITATION_POLL_MAX_FAILURES = 5;
-var ELICITATION_SERVICE_ROUTE_TIMEOUT_MS = 1e4;
-var ELICITATION_TIMEOUT_EXTENSION_MS = ELICITATION_FORM_TTL_MS + 3e4;
-var MRTR_CONTINUATION_TTL_MS = 10 * 6e4;
-var MRTR_CONTINUATION_ROUTE_TIMEOUT_MS = 1e4;
-var MRTR_CONTINUATION_LEASE_TTL_MS = 4 * MRTR_CONTINUATION_ROUTE_TIMEOUT_MS + WEB_CALL_TIMEOUT_MS + 6e4;
-var MRTR_RESUME_STATE_MAX_BYTES = 128 * 1024;
-var MRTR_DISPLAY_FIELD_MAX_BYTES = 16 * 1024;
-var MRTR_RESPONSE_CONTENT_MAX_BYTES = 64 * 1024;
-var MRTR_TEARDOWN_TIMEOUT_MS = 5e3;
-var MCPJAM_HOSTED_ORIGIN = process.env.MCPJAM_HOSTED_ORIGIN?.replace(/\/+$/, "") || "https://app.mcpjam.com";
-var MCPJAM_PUBLIC_ORIGIN = process.env.MCPJAM_PUBLIC_ORIGIN?.replace(/\/+$/, "") || null;
-function parseAllowedHosts(raw) {
-  return raw ? raw.split(",").map((h) => h.trim().toLowerCase()).filter((h) => h.length > 0) : [];
-}
-var ALLOWED_HOSTS = parseAllowedHosts(
-  process.env.MCPJAM_ALLOWED_HOSTS
-);
-var CANIUSE_LANDING_HOSTS = new Set(
-  (process.env.CANIUSE_LANDING_HOSTS ?? "caniuse.dev,www.caniuse.dev").split(",").map((h) => h.trim().toLowerCase()).filter((h) => h.length > 0)
-);
-var SCORE_LANDING_HOSTS = new Set(
-  (process.env.SCORE_LANDING_HOSTS ?? "score.mcpjam.com,www.score.mcpjam.com").split(",").map((h) => h.trim().toLowerCase()).filter((h) => h.length > 0)
-);
-var BARE_HOSTNAME = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$/;
-function parseSandboxHosts(raw) {
-  return new Set(
-    raw.split(",").map((h) => h.trim().toLowerCase()).filter((h) => BARE_HOSTNAME.test(h))
-  );
-}
-var SANDBOX_HOSTS = parseSandboxHosts(
-  process.env.SANDBOX_HOSTS ?? "sandbox.mcpjam.com,sandbox-staging.mcpjam.com"
-);
-function resolveSandboxIsolation(sandboxHosts = SANDBOX_HOSTS, hostedOrigin = MCPJAM_HOSTED_ORIGIN) {
-  if (sandboxHosts.size === 0) {
-    return "unset";
-  }
-  let appHost;
-  try {
-    appHost = new URL(hostedOrigin).hostname.toLowerCase();
-  } catch {
-    return "unset";
-  }
-  return sandboxHosts.has(appHost) ? "same-origin" : "ok";
-}
-
 // server/utils/inspector-frontend-url.ts
 function getInspectorFrontendUrl(options = {}) {
   const explicitFrontendUrl = process.env.MCPJAM_INSPECTOR_FRONTEND_URL?.trim() || process.env.FRONTEND_URL?.trim();
@@ -626,57 +492,10 @@ async function invalidateBrowserConsentLifetimes(current) {
 }
 
 export {
-  WEB_CONNECT_TIMEOUT_MS,
-  WEB_CALL_TIMEOUT_MS,
-  WEB_STREAM_TIMEOUT_MS,
-  SERVER_PORT,
-  LOCAL_SERVER_ADDR,
-  HOSTED_MODE,
-  LOCAL_BROWSER_ENABLED,
-  LOCAL_COMPUTER_ENABLED,
-  LOCAL_HARNESS_ENABLED,
-  SCHEDULED_EVALS_WRITE_ENABLED,
-  WEBMCP_INSPECTOR_ENABLED,
-  webmcpInspectorHostedEnabled,
-  webmcpInspectorReachable,
-  hostedBrowserEnabled,
-  browserShapeRedactionEnabled,
-  browserSecretPlaceholdersEnabled,
-  webmcpPageToolsMode,
-  EVAL_WIDGET_MODEL_CONTEXT,
-  WEB_ALLOWED_ORIGINS,
-  CORS_ORIGINS,
-  CORS_OPTIONS,
-  ELICITATION_FORM_TTL_MS,
-  ELICITATION_URL_CONSENT_TTL_MS,
-  ELICITATION_POLL_INTERVAL_MS,
-  ELICITATION_POLL_JITTER_MS,
-  ELICITATION_POLL_MAX_FAILURES,
-  ELICITATION_SERVICE_ROUTE_TIMEOUT_MS,
-  ELICITATION_TIMEOUT_EXTENSION_MS,
-  MRTR_CONTINUATION_TTL_MS,
-  MRTR_CONTINUATION_ROUTE_TIMEOUT_MS,
-  MRTR_CONTINUATION_LEASE_TTL_MS,
-  MRTR_RESUME_STATE_MAX_BYTES,
-  MRTR_DISPLAY_FIELD_MAX_BYTES,
-  MRTR_RESPONSE_CONTENT_MAX_BYTES,
-  MRTR_TEARDOWN_TIMEOUT_MS,
-  MCPJAM_HOSTED_ORIGIN,
-  MCPJAM_PUBLIC_ORIGIN,
-  parseAllowedHosts,
-  ALLOWED_HOSTS,
-  CANIUSE_LANDING_HOSTS,
-  SCORE_LANDING_HOSTS,
-  SANDBOX_HOSTS,
-  resolveSandboxIsolation,
   getInspectorFrontendUrl,
   registerBrowserController,
   createLocalBrowserSecurityPolicy,
   secureDriverContext,
-  mintCapabilityToken,
-  capabilityFingerprint,
-  capabilityMatches,
-  persistCapabilityState,
   createDeviceConsent,
   BROWSER_CONSENT_HEADER,
   grantLocalBrowserConsent,
@@ -687,4 +506,4 @@ export {
   createBrowserConsentLifetime,
   invalidateBrowserConsentLifetimes
 };
-//# sourceMappingURL=chunk-5RE7KJ2M.js.map
+//# sourceMappingURL=chunk-4PYR7GMQ.js.map