@ractive-ch/tab-mcp 0.4.0 → 0.5.1

package/oauth/pairing.d.ts

@@ -19,6 +19,8 @@ export interface PairingTarget {
 export interface PairingContext {
     requestId: string;
     browserId: string;
+    /** The address being paired: the routing key of the return trip (DEC-098). */
+    addressId: string;
 }
 export type PairingResult = 
 /** Paired; `subject` is recorded on the grant (identity binding, DEC-077). */

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@ractive-ch/tab-mcp",
-	"version": "0.4.0",
+	"version": "0.5.1",
 	"description": "Relay that lets AI agents call the MCP tools of a web page open in a browser tab",
 	"type": "module",
 	"bin": {

package/protocol.d.ts

@@ -21,6 +21,8 @@ export declare const CloseCode: {
     readonly replaced: 4005;
     /** Reserved in the protocol (`rate_limited`); the relay does not send it yet. */
     readonly rateLimited: 4008;
+    /** The address id in the `/tab` URL is not the secret's (DEC-098). */
+    readonly addressMismatch: 4009;
 };
 export type ByeReason = "replaced" | "expired" | "idle" | "shutdown" | "user";
 export interface Limits {
@@ -112,7 +114,7 @@ export interface ErrorMessage {
     round?: number;
 }
 export type RelayMessage = SessionMessage | PingMessage | ByeMessage | HttpRequestMessage | HttpCancelMessage | PairingCodeMessage | GrantAddedMessage | GrantRemovedMessage | IdentityBoundMessage | ErrorMessage;
-export type ErrorCode = "bad_message" | "unknown_type" | "unknown_id" | "too_large" | "rate_limited" | "identity_refused";
+export type ErrorCode = "bad_message" | "unknown_type" | "unknown_id" | "too_large" | "rate_limited" | "identity_refused" | "address_mismatch";
 export interface HelloMessage {
     type: "hello";
     library: {
@@ -127,6 +129,12 @@ export interface HelloMessage {
         name: string;
     };
     secret: string;
+    /**
+     * Revoke every grant of the address as the session claims it, before the
+     * `session` answer (which then lists none): a page taking its address back
+     * from whoever took it over (DEC-095).
+     */
+    revokeAll?: boolean;
 }
 export interface PongMessage {
     type: "pong";

package/relay.d.ts

@@ -37,6 +37,8 @@ export interface RelayTestHooks extends AuthorizationTestMode {
     assertionKeys?: KeySource;
     /** A smaller relay-wide replay cache for tab assertions. */
     maxSeenAssertions?: number;
+    /** How long `/healthz` waits before a new read while one hangs. */
+    healthRetryMs?: number;
 }
 /** Start a relay. Returns once the server listens. */
 export declare function createRelay(options?: CreateRelayOptions): Relay;

package/session.d.ts

@@ -58,6 +58,11 @@ export declare class TabSession {
     /** The site this session's origin belongs to (DEC-045). */
     readonly site: Site;
     readonly openedAt: number;
+    /**
+     * The address id the `/tab` URL named (`?a=`, DEC-098), checked against
+     * the secret in `hello`; `undefined` for libraries that do not send it.
+     */
+    readonly expectedAddress: string | undefined;
     /** Set once `hello` was accepted. */
     addressId: string | undefined;
     /** The app name `/authorize` shows: the site's name, else the page's claim. */
@@ -75,7 +80,7 @@ export declare class TabSession {
      */
     identityUnchecked: boolean;
     readonly pending: Map<string, Exchange>;
-    constructor(ws: SocketLike, ip: string, origin: string, site: Site, host: SessionHost);
+    constructor(ws: SocketLike, ip: string, origin: string, site: Site, host: SessionHost, expectedAddress?: string);
     get ready(): boolean;
     /** Whether the page's "Connect your AI app" dialog is open. */
     get pairingOpen(): boolean;