skybridge 0.0.0-dev.8092af3 → 0.0.0-dev.809d302

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (279) hide show
  1. package/README.md +24 -15
  2. package/dist/cli/detect-port.d.ts +18 -0
  3. package/dist/cli/detect-port.js +61 -0
  4. package/dist/cli/detect-port.js.map +1 -0
  5. package/dist/cli/header.js +1 -1
  6. package/dist/cli/header.js.map +1 -1
  7. package/dist/cli/run-command.js.map +1 -1
  8. package/dist/cli/telemetry.js.map +1 -1
  9. package/dist/cli/tunnel-control-server.d.ts +9 -0
  10. package/dist/cli/tunnel-control-server.js +31 -0
  11. package/dist/cli/tunnel-control-server.js.map +1 -0
  12. package/dist/cli/tunnel-control-server.test.js +39 -0
  13. package/dist/cli/tunnel-control-server.test.js.map +1 -0
  14. package/dist/cli/tunnel-handler.d.ts +3 -0
  15. package/dist/cli/tunnel-handler.js +48 -0
  16. package/dist/cli/tunnel-handler.js.map +1 -0
  17. package/dist/cli/tunnel-handler.test.js +105 -0
  18. package/dist/cli/tunnel-handler.test.js.map +1 -0
  19. package/dist/cli/tunnel.d.ts +57 -0
  20. package/dist/cli/tunnel.js +154 -0
  21. package/dist/cli/tunnel.js.map +1 -0
  22. package/dist/cli/tunnel.test.d.ts +1 -0
  23. package/dist/cli/tunnel.test.js +190 -0
  24. package/dist/cli/tunnel.test.js.map +1 -0
  25. package/dist/cli/types.d.ts +5 -0
  26. package/dist/cli/types.js +2 -0
  27. package/dist/cli/types.js.map +1 -0
  28. package/dist/cli/use-execute-steps.js.map +1 -1
  29. package/dist/cli/use-messages.d.ts +3 -0
  30. package/dist/cli/use-messages.js +11 -0
  31. package/dist/cli/use-messages.js.map +1 -0
  32. package/dist/cli/use-nodemon.d.ts +2 -6
  33. package/dist/cli/use-nodemon.js +30 -18
  34. package/dist/cli/use-nodemon.js.map +1 -1
  35. package/dist/cli/use-open-browser.d.ts +1 -0
  36. package/dist/cli/use-open-browser.js +44 -0
  37. package/dist/cli/use-open-browser.js.map +1 -0
  38. package/dist/cli/use-tunnel.d.ts +14 -0
  39. package/dist/cli/use-tunnel.js +131 -0
  40. package/dist/cli/use-tunnel.js.map +1 -0
  41. package/dist/cli/use-typescript-check.d.ts +1 -0
  42. package/dist/cli/use-typescript-check.js +41 -6
  43. package/dist/cli/use-typescript-check.js.map +1 -1
  44. package/dist/commands/build.js +63 -7
  45. package/dist/commands/build.js.map +1 -1
  46. package/dist/commands/dev.d.ts +4 -1
  47. package/dist/commands/dev.js +57 -8
  48. package/dist/commands/dev.js.map +1 -1
  49. package/dist/commands/start.d.ts +3 -1
  50. package/dist/commands/start.js +31 -15
  51. package/dist/commands/start.js.map +1 -1
  52. package/dist/commands/telemetry/disable.js.map +1 -1
  53. package/dist/commands/telemetry/enable.js.map +1 -1
  54. package/dist/commands/telemetry/status.js.map +1 -1
  55. package/dist/server/asset-base-url-transform-plugin.d.ts +5 -6
  56. package/dist/server/asset-base-url-transform-plugin.js +9 -10
  57. package/dist/server/asset-base-url-transform-plugin.js.map +1 -1
  58. package/dist/server/asset-base-url-transform-plugin.test.js +41 -13
  59. package/dist/server/asset-base-url-transform-plugin.test.js.map +1 -1
  60. package/dist/server/content-helpers.d.ts +27 -0
  61. package/dist/server/content-helpers.js +46 -0
  62. package/dist/server/content-helpers.js.map +1 -0
  63. package/dist/server/content-helpers.test.d.ts +1 -0
  64. package/dist/server/content-helpers.test.js +70 -0
  65. package/dist/server/content-helpers.test.js.map +1 -0
  66. package/dist/server/express.d.ts +11 -0
  67. package/dist/server/express.js +101 -0
  68. package/dist/server/express.js.map +1 -0
  69. package/dist/server/express.test.d.ts +1 -0
  70. package/dist/server/express.test.js +430 -0
  71. package/dist/server/express.test.js.map +1 -0
  72. package/dist/server/index.d.ts +5 -3
  73. package/dist/server/index.js +3 -2
  74. package/dist/server/index.js.map +1 -1
  75. package/dist/server/inferUtilityTypes.d.ts +6 -6
  76. package/dist/server/inferUtilityTypes.js.map +1 -1
  77. package/dist/server/metric.d.ts +14 -0
  78. package/dist/server/metric.js +62 -0
  79. package/dist/server/metric.js.map +1 -0
  80. package/dist/server/middleware.d.ts +124 -0
  81. package/dist/server/middleware.js +93 -0
  82. package/dist/server/middleware.js.map +1 -0
  83. package/dist/server/middleware.test-d.d.ts +1 -0
  84. package/dist/server/middleware.test-d.js +75 -0
  85. package/dist/server/middleware.test-d.js.map +1 -0
  86. package/dist/server/middleware.test.d.ts +1 -0
  87. package/dist/server/middleware.test.js +493 -0
  88. package/dist/server/middleware.test.js.map +1 -0
  89. package/dist/server/server.d.ts +175 -63
  90. package/dist/server/server.js +537 -64
  91. package/dist/server/server.js.map +1 -1
  92. package/dist/server/templateHelper.d.ts +5 -7
  93. package/dist/server/templateHelper.js +3 -22
  94. package/dist/server/templateHelper.js.map +1 -1
  95. package/dist/server/templates.generated.d.ts +4 -0
  96. package/dist/server/templates.generated.js +47 -0
  97. package/dist/server/templates.generated.js.map +1 -0
  98. package/dist/server/tunnel-proxy-router.d.ts +7 -0
  99. package/dist/server/tunnel-proxy-router.js +110 -0
  100. package/dist/server/tunnel-proxy-router.js.map +1 -0
  101. package/dist/server/tunnel-proxy-router.test.d.ts +1 -0
  102. package/dist/server/tunnel-proxy-router.test.js +229 -0
  103. package/dist/server/tunnel-proxy-router.test.js.map +1 -0
  104. package/dist/server/view-resource-resolution.test.d.ts +6 -0
  105. package/dist/server/view-resource-resolution.test.js +91 -0
  106. package/dist/server/view-resource-resolution.test.js.map +1 -0
  107. package/dist/server/viewsDevServer.d.ts +14 -0
  108. package/dist/server/viewsDevServer.js +45 -0
  109. package/dist/server/viewsDevServer.js.map +1 -0
  110. package/dist/test/utils.d.ts +13 -21
  111. package/dist/test/utils.js +42 -37
  112. package/dist/test/utils.js.map +1 -1
  113. package/dist/test/view.test.d.ts +1 -0
  114. package/dist/test/view.test.js +523 -0
  115. package/dist/test/view.test.js.map +1 -0
  116. package/dist/version.d.ts +1 -0
  117. package/dist/version.js +3 -0
  118. package/dist/version.js.map +1 -0
  119. package/dist/web/bridges/apps-sdk/adaptor.d.ts +11 -7
  120. package/dist/web/bridges/apps-sdk/adaptor.js +57 -19
  121. package/dist/web/bridges/apps-sdk/adaptor.js.map +1 -1
  122. package/dist/web/bridges/apps-sdk/bridge.d.ts +1 -1
  123. package/dist/web/bridges/apps-sdk/bridge.js.map +1 -1
  124. package/dist/web/bridges/apps-sdk/index.d.ts +1 -1
  125. package/dist/web/bridges/apps-sdk/index.js.map +1 -1
  126. package/dist/web/bridges/apps-sdk/types.d.ts +32 -14
  127. package/dist/web/bridges/apps-sdk/types.js.map +1 -1
  128. package/dist/web/bridges/apps-sdk/use-apps-sdk-context.js.map +1 -1
  129. package/dist/web/bridges/get-adaptor.js.map +1 -1
  130. package/dist/web/bridges/index.js.map +1 -1
  131. package/dist/web/bridges/mcp-app/adaptor.d.ts +23 -9
  132. package/dist/web/bridges/mcp-app/adaptor.js +150 -64
  133. package/dist/web/bridges/mcp-app/adaptor.js.map +1 -1
  134. package/dist/web/bridges/mcp-app/bridge.d.ts +13 -30
  135. package/dist/web/bridges/mcp-app/bridge.js +43 -196
  136. package/dist/web/bridges/mcp-app/bridge.js.map +1 -1
  137. package/dist/web/bridges/mcp-app/index.js.map +1 -1
  138. package/dist/web/bridges/mcp-app/types.js.map +1 -1
  139. package/dist/web/bridges/mcp-app/use-mcp-app-context.d.ts +5 -3
  140. package/dist/web/bridges/mcp-app/use-mcp-app-context.js +2 -2
  141. package/dist/web/bridges/mcp-app/use-mcp-app-context.js.map +1 -1
  142. package/dist/web/bridges/mcp-app/use-mcp-app-context.test.js +1 -41
  143. package/dist/web/bridges/mcp-app/use-mcp-app-context.test.js.map +1 -1
  144. package/dist/web/bridges/types.d.ts +32 -13
  145. package/dist/web/bridges/types.js.map +1 -1
  146. package/dist/web/bridges/use-host-context.js.map +1 -1
  147. package/dist/web/components/modal-provider.js +3 -5
  148. package/dist/web/components/modal-provider.js.map +1 -1
  149. package/dist/web/create-store.js +17 -3
  150. package/dist/web/create-store.js.map +1 -1
  151. package/dist/web/create-store.test.js +23 -20
  152. package/dist/web/create-store.test.js.map +1 -1
  153. package/dist/web/data-llm.d.ts +1 -1
  154. package/dist/web/data-llm.js +3 -3
  155. package/dist/web/data-llm.js.map +1 -1
  156. package/dist/web/data-llm.test.js +33 -30
  157. package/dist/web/data-llm.test.js.map +1 -1
  158. package/dist/web/generate-helpers.d.ts +20 -18
  159. package/dist/web/generate-helpers.js +20 -18
  160. package/dist/web/generate-helpers.js.map +1 -1
  161. package/dist/web/generate-helpers.test-d.js +26 -26
  162. package/dist/web/generate-helpers.test-d.js.map +1 -1
  163. package/dist/web/generate-helpers.test.js.map +1 -1
  164. package/dist/web/helpers/state.d.ts +2 -2
  165. package/dist/web/helpers/state.js +11 -11
  166. package/dist/web/helpers/state.js.map +1 -1
  167. package/dist/web/helpers/state.test.js +9 -9
  168. package/dist/web/helpers/state.test.js.map +1 -1
  169. package/dist/web/hooks/index.d.ts +4 -2
  170. package/dist/web/hooks/index.js +3 -1
  171. package/dist/web/hooks/index.js.map +1 -1
  172. package/dist/web/hooks/test/utils.js +4 -0
  173. package/dist/web/hooks/test/utils.js.map +1 -1
  174. package/dist/web/hooks/use-call-tool.js.map +1 -1
  175. package/dist/web/hooks/use-call-tool.test-d.js.map +1 -1
  176. package/dist/web/hooks/use-call-tool.test.js +0 -4
  177. package/dist/web/hooks/use-call-tool.test.js.map +1 -1
  178. package/dist/web/hooks/use-display-mode.d.ts +3 -3
  179. package/dist/web/hooks/use-display-mode.js.map +1 -1
  180. package/dist/web/hooks/use-display-mode.test-d.d.ts +1 -0
  181. package/dist/web/hooks/use-display-mode.test-d.js +8 -0
  182. package/dist/web/hooks/use-display-mode.test-d.js.map +1 -0
  183. package/dist/web/hooks/use-display-mode.test.js.map +1 -1
  184. package/dist/web/hooks/use-files.d.ts +2 -1
  185. package/dist/web/hooks/use-files.js +1 -0
  186. package/dist/web/hooks/use-files.js.map +1 -1
  187. package/dist/web/hooks/use-files.test.js +27 -3
  188. package/dist/web/hooks/use-files.test.js.map +1 -1
  189. package/dist/web/hooks/use-layout.js.map +1 -1
  190. package/dist/web/hooks/use-layout.test.js +3 -3
  191. package/dist/web/hooks/use-layout.test.js.map +1 -1
  192. package/dist/web/hooks/use-open-external.d.ts +3 -1
  193. package/dist/web/hooks/use-open-external.js +1 -1
  194. package/dist/web/hooks/use-open-external.js.map +1 -1
  195. package/dist/web/hooks/use-open-external.test.js +26 -11
  196. package/dist/web/hooks/use-open-external.test.js.map +1 -1
  197. package/dist/web/hooks/use-request-close.d.ts +2 -0
  198. package/dist/web/hooks/use-request-close.js +8 -0
  199. package/dist/web/hooks/use-request-close.js.map +1 -0
  200. package/dist/web/hooks/use-request-close.test.d.ts +1 -0
  201. package/dist/web/hooks/use-request-close.test.js +52 -0
  202. package/dist/web/hooks/use-request-close.test.js.map +1 -0
  203. package/dist/web/hooks/use-request-modal.d.ts +1 -1
  204. package/dist/web/hooks/use-request-modal.js +4 -4
  205. package/dist/web/hooks/use-request-modal.js.map +1 -1
  206. package/dist/web/hooks/use-request-modal.test.js +5 -1
  207. package/dist/web/hooks/use-request-modal.test.js.map +1 -1
  208. package/dist/web/hooks/use-request-size.d.ts +3 -0
  209. package/dist/web/hooks/use-request-size.js +8 -0
  210. package/dist/web/hooks/use-request-size.js.map +1 -0
  211. package/dist/web/hooks/use-request-size.test.d.ts +1 -0
  212. package/dist/web/hooks/use-request-size.test.js +65 -0
  213. package/dist/web/hooks/use-request-size.test.js.map +1 -0
  214. package/dist/web/hooks/use-send-follow-up-message.d.ts +2 -1
  215. package/dist/web/hooks/use-send-follow-up-message.js +2 -2
  216. package/dist/web/hooks/use-send-follow-up-message.js.map +1 -1
  217. package/dist/web/hooks/use-set-open-in-app-url.js.map +1 -1
  218. package/dist/web/hooks/use-set-open-in-app-url.test.js +5 -11
  219. package/dist/web/hooks/use-set-open-in-app-url.test.js.map +1 -1
  220. package/dist/web/hooks/use-tool-info.js.map +1 -1
  221. package/dist/web/hooks/use-tool-info.test-d.js.map +1 -1
  222. package/dist/web/hooks/use-tool-info.test.js +1 -1
  223. package/dist/web/hooks/use-tool-info.test.js.map +1 -1
  224. package/dist/web/hooks/use-user.js +18 -2
  225. package/dist/web/hooks/use-user.js.map +1 -1
  226. package/dist/web/hooks/use-user.test.js +29 -1
  227. package/dist/web/hooks/use-user.test.js.map +1 -1
  228. package/dist/web/hooks/use-view-state.d.ts +4 -0
  229. package/dist/web/hooks/use-view-state.js +32 -0
  230. package/dist/web/hooks/use-view-state.js.map +1 -0
  231. package/dist/web/hooks/use-view-state.test.d.ts +1 -0
  232. package/dist/web/hooks/use-view-state.test.js +177 -0
  233. package/dist/web/hooks/use-view-state.test.js.map +1 -0
  234. package/dist/web/index.d.ts +1 -2
  235. package/dist/web/index.js +1 -2
  236. package/dist/web/index.js.map +1 -1
  237. package/dist/web/mount-view.d.ts +1 -0
  238. package/dist/web/{mount-widget.js → mount-view.js} +2 -2
  239. package/dist/web/mount-view.js.map +1 -0
  240. package/dist/web/plugin/data-llm.test.js.map +1 -1
  241. package/dist/web/plugin/plugin.d.ts +4 -1
  242. package/dist/web/plugin/plugin.js +128 -18
  243. package/dist/web/plugin/plugin.js.map +1 -1
  244. package/dist/web/plugin/scan-views.d.ts +16 -0
  245. package/dist/web/plugin/scan-views.js +88 -0
  246. package/dist/web/plugin/scan-views.js.map +1 -0
  247. package/dist/web/plugin/scan-views.test.d.ts +1 -0
  248. package/dist/web/plugin/scan-views.test.js +99 -0
  249. package/dist/web/plugin/scan-views.test.js.map +1 -0
  250. package/dist/web/plugin/transform-data-llm.js +1 -1
  251. package/dist/web/plugin/transform-data-llm.js.map +1 -1
  252. package/dist/web/plugin/transform-data-llm.test.js.map +1 -1
  253. package/dist/web/plugin/validate-view.d.ts +1 -0
  254. package/dist/web/plugin/validate-view.js +9 -0
  255. package/dist/web/plugin/validate-view.js.map +1 -0
  256. package/dist/web/plugin/validate-view.test.d.ts +1 -0
  257. package/dist/web/plugin/validate-view.test.js +24 -0
  258. package/dist/web/plugin/validate-view.test.js.map +1 -0
  259. package/dist/web/proxy.js +0 -1
  260. package/dist/web/proxy.js.map +1 -1
  261. package/dist/web/types.js.map +1 -1
  262. package/package.json +44 -30
  263. package/tsconfig.base.json +33 -0
  264. package/dist/server/templates/development.hbs +0 -65
  265. package/dist/server/templates/production.hbs +0 -6
  266. package/dist/server/widgetsDevServer.d.ts +0 -12
  267. package/dist/server/widgetsDevServer.js +0 -52
  268. package/dist/server/widgetsDevServer.js.map +0 -1
  269. package/dist/test/widget.test.js +0 -255
  270. package/dist/test/widget.test.js.map +0 -1
  271. package/dist/web/hooks/use-widget-state.d.ts +0 -4
  272. package/dist/web/hooks/use-widget-state.js +0 -32
  273. package/dist/web/hooks/use-widget-state.js.map +0 -1
  274. package/dist/web/hooks/use-widget-state.test.js +0 -61
  275. package/dist/web/hooks/use-widget-state.test.js.map +0 -1
  276. package/dist/web/mount-widget.d.ts +0 -1
  277. package/dist/web/mount-widget.js.map +0 -1
  278. /package/dist/{test/widget.test.d.ts → cli/tunnel-control-server.test.d.ts} +0 -0
  279. /package/dist/{web/hooks/use-widget-state.test.d.ts → cli/tunnel-handler.test.d.ts} +0 -0
@@ -1,7 +1,14 @@
1
+ import crypto from "node:crypto";
1
2
  import { readFileSync } from "node:fs";
3
+ import http from "node:http";
2
4
  import path from "node:path";
3
- import { McpServer as McpServerBase, } from "@modelcontextprotocol/sdk/server/mcp.js";
5
+ import { Server as SdkServer, } from "@modelcontextprotocol/sdk/server/index.js";
6
+ import { McpServer as McpServerBase } from "@modelcontextprotocol/sdk/server/mcp.js";
4
7
  import { mergeWith, union } from "es-toolkit";
8
+ import express, {} from "express";
9
+ import { createApp } from "./express.js";
10
+ import { createMiddlewareEntry } from "./metric.js";
11
+ import { buildMiddlewareChain, getHandlerMaps } from "./middleware.js";
5
12
  import { templateHelper } from "./templateHelper.js";
6
13
  const mergeWithUnion = (target, source) => {
7
14
  return mergeWith(target, source, (targetVal, sourceVal) => {
@@ -10,111 +17,508 @@ const mergeWithUnion = (target, source) => {
10
17
  }
11
18
  });
12
19
  };
13
- export class McpServer extends McpServerBase {
14
- registerWidget(name, resourceConfig, toolConfig, toolCallback) {
15
- const userMeta = resourceConfig._meta;
16
- const toolMeta = {
17
- ...toolConfig._meta,
20
+ /**
21
+ * Drop the query string from a `ui://` view URI, leaving the bare path. The
22
+ * `?v=` cache key is the only query we append, so a plain split is enough and
23
+ * sidesteps `URL` normalization quirks on the non-special `ui:` scheme.
24
+ */
25
+ function stripQuery(uri) {
26
+ const queryIndex = uri.indexOf("?");
27
+ return queryIndex === -1 ? uri : uri.slice(0, queryIndex);
28
+ }
29
+ /**
30
+ * Coerce a tool handler's return value into an MCP `content` array. Strings
31
+ * become a single `TextContent`; a single block is wrapped in an array;
32
+ * `undefined` produces `[]`. Mostly used internally — exported so consumers
33
+ * who build content lazily can apply the same normalization.
34
+ */
35
+ export function normalizeContent(content) {
36
+ if (content === undefined) {
37
+ return [];
38
+ }
39
+ if (typeof content === "string") {
40
+ return [{ type: "text", text: content }];
41
+ }
42
+ if (Array.isArray(content)) {
43
+ return content;
44
+ }
45
+ return [content];
46
+ }
47
+ const McpServerBaseOmitted = McpServerBase;
48
+ export class McpServer extends McpServerBaseOmitted {
49
+ /**
50
+ * The underlying Express app. Use this to extend the HTTP server with
51
+ * custom routes, middleware, or settings — e.g.
52
+ * `server.express.get("/health", ...)`.
53
+ *
54
+ * `express.json()` is pre-applied. Register your handlers before `run()`;
55
+ * after `run()`, dev-mode middleware, the `/mcp` route, and the default
56
+ * error handler are appended in that order.
57
+ *
58
+ * Note: Alpic Cloud only routes traffic to `/mcp` — custom routes work
59
+ * locally and on self-hosted deployments.
60
+ */
61
+ express;
62
+ customErrorMiddleware = [];
63
+ mcpMiddlewareEntries = [];
64
+ mcpMiddlewareApplied = false;
65
+ claimedViews = new Map();
66
+ viewMetaBuilders = new Map();
67
+ /**
68
+ * Maps a view resource's query-less path to its canonical registered URI
69
+ * (the one carrying the `?v=` cache key). Lets `resources/read` resolve the
70
+ * underlying view no matter which version param the consumer sends, since
71
+ * the param is only a cache key, not part of the resource's identity.
72
+ */
73
+ viewUriByPath = new Map();
74
+ viteManifest = null;
75
+ serverInfo;
76
+ serverOptions;
77
+ constructor(serverInfo, options) {
78
+ super(serverInfo, options);
79
+ this.serverInfo = serverInfo;
80
+ this.serverOptions = options;
81
+ this.express = express();
82
+ this.express.use(express.json());
83
+ }
84
+ use(pathOrHandler, ...handlers) {
85
+ // Branching is load-bearing: Express's `app.use` overloads can't be
86
+ // resolved against a `string | RequestHandler` union, so we narrow.
87
+ if (typeof pathOrHandler === "string") {
88
+ this.express.use(pathOrHandler, ...handlers);
89
+ }
90
+ else {
91
+ this.express.use(pathOrHandler, ...handlers);
92
+ }
93
+ return this;
94
+ }
95
+ useOnError(pathOrHandler, ...handlers) {
96
+ if (typeof pathOrHandler === "string") {
97
+ this.customErrorMiddleware.push({ path: pathOrHandler, handlers });
98
+ }
99
+ else {
100
+ this.customErrorMiddleware.push({
101
+ handlers: [pathOrHandler, ...handlers],
102
+ });
103
+ }
104
+ return this;
105
+ }
106
+ mcpMiddleware(filterOrHandler,
107
+ // biome-ignore lint/suspicious/noExplicitAny: overloads narrow the handler type at call sites; implementation must accept all variants
108
+ maybeHandler) {
109
+ if (this.mcpMiddlewareApplied) {
110
+ throw new Error("Cannot register MCP middleware after run() or connect() has been called");
111
+ }
112
+ const handler = maybeHandler;
113
+ if (typeof filterOrHandler === "function") {
114
+ this.mcpMiddlewareEntries.push({
115
+ filter: null,
116
+ handler: filterOrHandler,
117
+ });
118
+ }
119
+ else if (handler) {
120
+ this.mcpMiddlewareEntries.push({
121
+ filter: filterOrHandler,
122
+ handler,
123
+ });
124
+ }
125
+ else {
126
+ throw new Error("mcpMiddleware requires a handler function when a filter is provided");
127
+ }
128
+ return this;
129
+ }
130
+ applyMcpMiddleware() {
131
+ if (this.mcpMiddlewareApplied) {
132
+ return;
133
+ }
134
+ this.mcpMiddlewareApplied = true;
135
+ // Surface view-resource _meta on `resources/list` (per ext-apps spec:
136
+ // hosts/checkers read CSP & domain at list time before fetching content).
137
+ const viewListMetaEntry = {
138
+ filter: "resources/list",
139
+ handler: async (_req, extra, next) => {
140
+ const result = (await next());
141
+ for (const resource of result.resources) {
142
+ const builder = this.viewMetaBuilders.get(resource.uri);
143
+ if (!builder) {
144
+ continue;
145
+ }
146
+ const meta = builder(extra);
147
+ resource._meta = {
148
+ ...(resource._meta ?? {}),
149
+ ...meta,
150
+ };
151
+ }
152
+ return result;
153
+ },
154
+ };
155
+ // Resolve a view's `resources/read` by its query-less path so the
156
+ // underlying asset is served no matter the `?v=` value (stale cache key,
157
+ // no param, etc.). The version param is a cache-busting hint for external
158
+ // consumers; it must not gate resolution. We rewrite the lookup URI to the
159
+ // canonical registered one, then restore the requested URI on the response
160
+ // so the consumer-facing URI is never rewritten.
161
+ const viewReadResolveEntry = {
162
+ filter: "resources/read",
163
+ handler: async (req, _extra, next) => {
164
+ const requested = req.params.uri;
165
+ if (typeof requested !== "string") {
166
+ return next();
167
+ }
168
+ const path = stripQuery(requested);
169
+ const canonical = this.viewUriByPath.get(path);
170
+ if (!canonical) {
171
+ return next();
172
+ }
173
+ req.params.uri = canonical;
174
+ try {
175
+ const result = (await next());
176
+ for (const content of result.contents ?? []) {
177
+ if (typeof content.uri === "string" &&
178
+ stripQuery(content.uri) === path) {
179
+ content.uri = requested;
180
+ }
181
+ }
182
+ return result;
183
+ }
184
+ finally {
185
+ // Restore the shared request params so middleware outer to us never
186
+ // observes the rewritten lookup URI after next() unwinds.
187
+ req.params.uri = requested;
188
+ }
189
+ },
190
+ };
191
+ const monitoringEntry = createMiddlewareEntry();
192
+ const entries = [
193
+ ...(monitoringEntry ? [monitoringEntry] : []),
194
+ viewListMetaEntry,
195
+ viewReadResolveEntry,
196
+ ...this.mcpMiddlewareEntries,
197
+ ];
198
+ if (entries.length === 0) {
199
+ return;
200
+ }
201
+ const { requestHandlers, notificationHandlers } = getHandlerMaps(this.server);
202
+ const instrumentMap = (map, isNotification) => {
203
+ for (const [method, handler] of map) {
204
+ map.set(method, buildMiddlewareChain(method, isNotification, handler, entries));
205
+ }
206
+ const originalSet = map.set.bind(map);
207
+ map.set = (method, handler) => originalSet(method, buildMiddlewareChain(method, isNotification, handler, entries));
208
+ };
209
+ instrumentMap(requestHandlers, false);
210
+ instrumentMap(notificationHandlers, true);
211
+ }
212
+ async connect(transport) {
213
+ this.applyMcpMiddleware();
214
+ return McpServerBase.prototype.connect.call(this, transport);
215
+ }
216
+ /**
217
+ * Per-request stateless connect. The SDK's `Protocol` only allows one
218
+ * transport per instance, so we can't reuse this `McpServer` across
219
+ * concurrent requests. The SDK's idiomatic fix is a `() => McpServer`
220
+ * factory, but that would break Skybridge's singleton API — so instead
221
+ * we build a fresh underlying `Server` per request and share the main
222
+ * server's handler maps by reference. The cast is unavoidable: there's
223
+ * no public API to inject handler maps. `getHandlerMaps` validates the
224
+ * read side and fails fast on SDK field renames.
225
+ */
226
+ async connectStatelessTransport(transport) {
227
+ this.applyMcpMiddleware();
228
+ const { requestHandlers, notificationHandlers } = getHandlerMaps(this.server);
229
+ const fresh = new SdkServer(this.serverInfo, this.serverOptions);
230
+ const target = fresh;
231
+ target._requestHandlers = requestHandlers;
232
+ target._notificationHandlers = notificationHandlers;
233
+ await fresh.connect(transport);
234
+ }
235
+ async run() {
236
+ this.applyMcpMiddleware();
237
+ const httpServer = http.createServer();
238
+ await createApp({
239
+ mcpServer: this,
240
+ httpServer,
241
+ errorMiddleware: this.customErrorMiddleware,
242
+ });
243
+ httpServer.on("request", this.express);
244
+ const port = parseInt(process.env.__PORT ?? "3000", 10);
245
+ await new Promise((resolve, reject) => {
246
+ httpServer.on("error", (error) => {
247
+ console.error("Failed to start server:", error);
248
+ reject(error);
249
+ });
250
+ httpServer.listen(port, () => {
251
+ resolve();
252
+ });
253
+ });
254
+ // On workerd, bridge the Node http server to a Workers fetch handler.
255
+ // The specifier is held in a variable to sidestep tsc's module resolution
256
+ // (`cloudflare:node` only exists under wrangler/workerd).
257
+ if (typeof navigator !== "undefined" &&
258
+ navigator.userAgent === "Cloudflare-Workers") {
259
+ const cloudflareNode = "cloudflare:node";
260
+ const { httpServerHandler } = await import(cloudflareNode);
261
+ return httpServerHandler({ port });
262
+ }
263
+ const shutdown = () => {
264
+ // Drop both handlers so a second signal falls through to Node's default
265
+ // (force-quit on a second Ctrl+C while drain is hanging).
266
+ process.off("SIGTERM", shutdown);
267
+ process.off("SIGINT", shutdown);
268
+ httpServer.close(() => process.exit(0));
269
+ // Force exit if connections don't drain in time so the port is still
270
+ // released promptly (e.g. for nodemon restarts).
271
+ setTimeout(() => process.exit(0), 3000).unref();
272
+ };
273
+ process.on("SIGTERM", shutdown);
274
+ process.on("SIGINT", shutdown);
275
+ return undefined;
276
+ }
277
+ enforceOneToolPerView(component, toolName) {
278
+ const existingTool = this.claimedViews.get(component);
279
+ if (existingTool) {
280
+ throw new Error(`skybridge: view "${component}" is already used by tool "${existingTool}". Tool "${toolName}" cannot also reference it — each view backs exactly one tool.`);
281
+ }
282
+ this.claimedViews.set(component, toolName);
283
+ }
284
+ resolveViewRequestContext(extra) {
285
+ const isProduction = process.env.NODE_ENV === "production";
286
+ const headers = extra?.requestInfo?.headers || {};
287
+ const header = (key) => {
288
+ const val = headers[key];
289
+ return Array.isArray(val) ? val[0] : val;
18
290
  };
19
- if (!resourceConfig.hosts || resourceConfig.hosts.includes("apps-sdk")) {
20
- const widgetConfig = {
291
+ const isClaude = header("user-agent") === "Claude-User";
292
+ let serverUrl;
293
+ const forwardedHost = header("x-forwarded-host");
294
+ const origin = header("origin");
295
+ const host = header("host");
296
+ if (forwardedHost) {
297
+ const proto = header("x-forwarded-proto") || "https";
298
+ serverUrl = `${proto}://${forwardedHost}`;
299
+ }
300
+ else if (origin) {
301
+ serverUrl = origin;
302
+ }
303
+ else if (host) {
304
+ const proto = ["127.0.0.1:", "localhost:"].some((p) => host.startsWith(p))
305
+ ? "http"
306
+ : "https";
307
+ serverUrl = `${proto}://${host}`;
308
+ }
309
+ else {
310
+ const devPort = process.env.__PORT || "3000";
311
+ serverUrl = `http://localhost:${devPort}`;
312
+ }
313
+ const connectDomains = [serverUrl];
314
+ if (!isProduction) {
315
+ const wsUrl = new URL(serverUrl);
316
+ wsUrl.protocol = wsUrl.protocol === "https:" ? "wss:" : "ws:";
317
+ connectDomains.push(wsUrl.origin);
318
+ }
319
+ let contentMetaOverrides = {};
320
+ if (isClaude) {
321
+ const pathname = extra?.requestInfo?.url?.pathname ?? "";
322
+ const rawUrl = header("x-alpic-forwarded-url") ?? `${serverUrl}${pathname}`;
323
+ // Strip a lone trailing slash so the hash matches the connector URL
324
+ // as registered with Claude (which has no trailing slash on bare origins).
325
+ const url = rawUrl.endsWith("/") ? rawUrl.slice(0, -1) : rawUrl;
326
+ const hash = crypto
327
+ .createHash("sha256")
328
+ .update(url)
329
+ .digest("hex")
330
+ .slice(0, 32);
331
+ contentMetaOverrides = { domain: `${hash}.claudemcpcontent.com` };
332
+ }
333
+ return { serverUrl, connectDomains, contentMetaOverrides };
334
+ }
335
+ registerViewResources(toolName, view, toolMeta) {
336
+ const hosts = view.hosts ?? ["apps-sdk", "mcp-app"];
337
+ // Append a content-derived version param so hosts (e.g. ChatGPT) bust
338
+ // their cache when the bundle changes, but keep the URI stable across
339
+ // `tools/list` calls when the bundle hasn't changed.
340
+ const versionParam = this.computeViewVersionParam(view.component);
341
+ if (hosts.includes("apps-sdk")) {
342
+ const viewResource = {
21
343
  hostType: "apps-sdk",
22
- uri: `ui://widgets/apps-sdk/${name}.html`,
344
+ uri: `ui://views/apps-sdk/${view.component}.html${versionParam}`,
23
345
  mimeType: "text/html+skybridge",
24
- buildContentMeta: ({ resourceDomains, connectDomains, domain }) => {
25
- const userUi = userMeta?.ui;
26
- const userCsp = userUi?.csp;
346
+ buildContentMeta: ({ resourceDomains, connectDomains, domain }, overrides) => {
27
347
  const defaults = {
28
348
  "openai/widgetCSP": {
29
349
  resource_domains: resourceDomains,
30
350
  connect_domains: connectDomains,
31
351
  },
32
352
  "openai/widgetDomain": domain,
33
- "openai/widgetDescription": toolConfig.description,
353
+ "openai/widgetDescription": view.description,
34
354
  };
35
- const fromUi = {
355
+ const fromView = {
36
356
  "openai/widgetCSP": {
37
- resource_domains: userCsp?.resourceDomains,
38
- connect_domains: userCsp?.connectDomains,
39
- frame_domains: userCsp?.frameDomains,
40
- redirect_domains: userCsp?.redirectDomains,
357
+ resource_domains: view.csp?.resourceDomains,
358
+ connect_domains: view.csp?.connectDomains,
359
+ frame_domains: view.csp?.frameDomains,
360
+ redirect_domains: view.csp?.redirectDomains,
41
361
  },
42
- "openai/widgetDomain": userUi?.domain,
43
- "openai/widgetPrefersBorder": userUi?.prefersBorder,
362
+ "openai/widgetDomain": view.domain,
363
+ "openai/widgetPrefersBorder": view.prefersBorder,
44
364
  };
45
- const directOpenaiKeys = Object.fromEntries(Object.entries(userMeta ?? {}).filter(([key]) => key.startsWith("openai/")));
46
- return mergeWithUnion(mergeWithUnion(defaults, fromUi), directOpenaiKeys);
365
+ const base = mergeWithUnion(mergeWithUnion(defaults, fromView), {
366
+ "openai/widgetDomain": overrides.domain,
367
+ });
368
+ if (view._meta) {
369
+ return { ...base, ...view._meta };
370
+ }
371
+ return base;
47
372
  },
48
373
  };
49
- this.registerWidgetResource({
50
- name,
51
- widgetConfig,
52
- resourceConfig,
374
+ this.registerViewResource({
375
+ name: toolName,
376
+ viewResource,
377
+ view,
53
378
  });
54
- toolMeta["openai/outputTemplate"] = widgetConfig.uri;
379
+ toolMeta["openai/outputTemplate"] = viewResource.uri;
55
380
  }
56
- if (!resourceConfig.hosts || resourceConfig.hosts.includes("mcp-app")) {
57
- const widgetConfig = {
381
+ if (hosts.includes("mcp-app")) {
382
+ const viewResource = {
58
383
  hostType: "mcp-app",
59
- uri: `ui://widgets/ext-apps/${name}.html`,
384
+ uri: `ui://views/ext-apps/${view.component}.html${versionParam}`,
60
385
  mimeType: "text/html;profile=mcp-app",
61
- buildContentMeta: ({ resourceDomains, connectDomains, domain }) => {
386
+ buildContentMeta: ({ resourceDomains, connectDomains, domain, baseUriDomains }, overrides) => {
62
387
  const defaults = {
63
388
  ui: {
64
389
  csp: {
65
390
  resourceDomains,
66
391
  connectDomains,
392
+ baseUriDomains,
67
393
  },
68
394
  domain,
69
395
  },
70
396
  };
71
- return mergeWithUnion(defaults, { ui: userMeta?.ui });
397
+ const fromView = {
398
+ ui: {
399
+ ...(view.description && { description: view.description }),
400
+ ...(view.prefersBorder !== undefined && {
401
+ prefersBorder: view.prefersBorder,
402
+ }),
403
+ ...(view.domain && { domain: view.domain }),
404
+ csp: {
405
+ ...(view.csp?.resourceDomains && {
406
+ resourceDomains: view.csp.resourceDomains,
407
+ }),
408
+ ...(view.csp?.connectDomains && {
409
+ connectDomains: view.csp.connectDomains,
410
+ }),
411
+ ...(view.csp?.frameDomains && {
412
+ frameDomains: view.csp.frameDomains,
413
+ }),
414
+ ...(view.csp?.baseUriDomains && {
415
+ baseUriDomains: view.csp.baseUriDomains,
416
+ }),
417
+ ...(view.csp?.redirectDomains && {
418
+ redirectDomains: view.csp.redirectDomains,
419
+ }),
420
+ },
421
+ },
422
+ };
423
+ const base = mergeWithUnion(mergeWithUnion(defaults, fromView), {
424
+ ui: overrides,
425
+ });
426
+ if (view._meta) {
427
+ return { ...base, ...view._meta };
428
+ }
429
+ return base;
72
430
  },
73
431
  };
74
- this.registerWidgetResource({
75
- name,
76
- widgetConfig,
77
- resourceConfig,
432
+ this.registerViewResource({
433
+ name: toolName,
434
+ viewResource,
435
+ view,
78
436
  });
79
- toolMeta.ui = { resourceUri: widgetConfig.uri };
437
+ // @ts-expect-error - For backwards compatibility with Claude current implementation of the specs
438
+ toolMeta["ui/resourceUri"] = viewResource.uri;
439
+ toolMeta.ui = { resourceUri: viewResource.uri };
80
440
  }
81
- this.registerTool(name, {
82
- ...toolConfig,
83
- _meta: toolMeta,
84
- }, toolCallback);
85
- return this;
86
- }
87
- registerTool(name, config, cb) {
88
- super.registerTool(name, config, cb);
89
- return this;
90
441
  }
91
- registerWidgetResource({ name, widgetConfig, resourceConfig, }) {
92
- const { hostType, uri: widgetUri, mimeType, buildContentMeta, } = widgetConfig;
93
- this.registerResource(name, widgetUri, { ...resourceConfig, _meta: resourceConfig._meta }, async (uri, extra) => {
442
+ registerViewResource({ name, viewResource, view, }) {
443
+ const { hostType, uri: viewUri, mimeType, buildContentMeta } = viewResource;
444
+ const buildMeta = (extra) => {
445
+ const { serverUrl, connectDomains, contentMetaOverrides } = this.resolveViewRequestContext(extra);
446
+ return buildContentMeta({
447
+ resourceDomains: [serverUrl],
448
+ connectDomains,
449
+ domain: serverUrl,
450
+ baseUriDomains: [serverUrl],
451
+ }, contentMetaOverrides);
452
+ };
453
+ this.viewMetaBuilders.set(viewUri, buildMeta);
454
+ this.viewUriByPath.set(stripQuery(viewUri), viewUri);
455
+ this.registerResource(name, viewUri, { description: view.description }, async (uri, extra) => {
94
456
  const isProduction = process.env.NODE_ENV === "production";
95
- const useForwardedHost = process.env.SKYBRIDGE_USE_FORWARDED_HOST === "true";
96
- const serverUrl = isProduction || useForwardedHost
97
- ? `https://${extra?.requestInfo?.headers?.["x-forwarded-host"] ?? extra?.requestInfo?.headers?.host}`
98
- : "http://localhost:3000";
457
+ const isClaude = extra?.requestInfo?.headers?.["user-agent"] === "Claude-User";
458
+ const headers = extra?.requestInfo?.headers || {};
459
+ const header = (key) => {
460
+ const val = headers[key];
461
+ return Array.isArray(val) ? val[0] : val;
462
+ };
463
+ let serverUrl;
464
+ const forwardedHost = header("x-forwarded-host");
465
+ const origin = header("origin");
466
+ const host = header("host");
467
+ if (forwardedHost) {
468
+ const proto = header("x-forwarded-proto") || "https";
469
+ serverUrl = `${proto}://${forwardedHost}`;
470
+ }
471
+ else if (origin) {
472
+ serverUrl = origin;
473
+ }
474
+ else if (host) {
475
+ const proto = ["127.0.0.1:", "localhost:"].some((p) => host.startsWith(p))
476
+ ? "http"
477
+ : "https";
478
+ serverUrl = `${proto}://${host}`;
479
+ }
480
+ else {
481
+ const devPort = process.env.__PORT || "3000";
482
+ serverUrl = `http://localhost:${devPort}`;
483
+ }
99
484
  const html = isProduction
100
485
  ? templateHelper.renderProduction({
101
486
  hostType,
102
487
  serverUrl,
103
- widgetFile: this.lookupDistFileWithIndexFallback(`src/widgets/${name}`),
104
- styleFile: this.lookupDistFile("style.css"),
488
+ viewFile: this.lookupViewFile(view.component),
489
+ styleFile: this.lookupDistFile("style.css") ?? "",
105
490
  })
106
491
  : templateHelper.renderDevelopment({
107
492
  hostType,
108
493
  serverUrl,
109
- widgetName: name,
494
+ viewName: view.component,
110
495
  });
111
- const VITE_HMR_WEBSOCKET_DEFAULT_URL = "ws://localhost:24678";
496
+ const connectDomains = [serverUrl];
497
+ if (!isProduction) {
498
+ const wsUrl = new URL(serverUrl);
499
+ wsUrl.protocol = wsUrl.protocol === "https:" ? "wss:" : "ws:";
500
+ connectDomains.push(wsUrl.origin);
501
+ }
502
+ let contentMetaOverrides = {};
503
+ if (isClaude) {
504
+ const pathname = extra?.requestInfo?.url?.pathname ?? "";
505
+ const rawUrl = header("x-alpic-forwarded-url") ?? `${serverUrl}${pathname}`;
506
+ // Strip a lone trailing slash so the hash matches the connector URL
507
+ // as registered with Claude (which has no trailing slash on bare origins).
508
+ const url = rawUrl.endsWith("/") ? rawUrl.slice(0, -1) : rawUrl;
509
+ const hash = crypto
510
+ .createHash("sha256")
511
+ .update(url)
512
+ .digest("hex")
513
+ .slice(0, 32);
514
+ contentMetaOverrides = { domain: `${hash}.claudemcpcontent.com` };
515
+ }
112
516
  const contentMeta = buildContentMeta({
113
517
  resourceDomains: [serverUrl],
114
- connectDomains: !isProduction ? [VITE_HMR_WEBSOCKET_DEFAULT_URL] : [],
518
+ connectDomains,
115
519
  domain: serverUrl,
116
520
  baseUriDomains: [serverUrl],
117
- });
521
+ }, contentMetaOverrides);
118
522
  return {
119
523
  contents: [
120
524
  { uri: uri.href, mimeType, text: html, _meta: contentMeta },
@@ -122,18 +526,87 @@ export class McpServer extends McpServerBase {
122
526
  };
123
527
  });
124
528
  }
529
+ wrapHandler(cb, { attachViewUUID }) {
530
+ return async (args, extra) => {
531
+ const result = await cb(args, extra);
532
+ return {
533
+ ...result,
534
+ content: normalizeContent(result.content),
535
+ ...(attachViewUUID && {
536
+ _meta: {
537
+ ...result._meta,
538
+ viewUUID: crypto.randomUUID(),
539
+ },
540
+ }),
541
+ };
542
+ };
543
+ }
544
+ computeViewVersionParam(viewName) {
545
+ if (process.env.NODE_ENV !== "production") {
546
+ return "";
547
+ }
548
+ try {
549
+ const viewFile = this.lookupViewFile(viewName);
550
+ const styleFile = this.lookupDistFile("style.css") ?? "";
551
+ const hash = crypto
552
+ .createHash("sha256")
553
+ .update(viewFile)
554
+ .update("\0")
555
+ .update(styleFile)
556
+ .digest("hex")
557
+ .slice(0, 8);
558
+ return `?v=${hash}`;
559
+ }
560
+ catch {
561
+ return "";
562
+ }
563
+ }
564
+ lookupViewFile(viewName) {
565
+ const manifest = this.readManifest();
566
+ for (const entry of Object.values(manifest)) {
567
+ if (entry?.isEntry && entry.name === viewName && entry.file) {
568
+ return entry.file;
569
+ }
570
+ }
571
+ throw new Error(`View "${viewName}" not found in Vite manifest. Did the build complete successfully? Look for an entry with name "${viewName}" in dist/assets/.vite/manifest.json.`);
572
+ }
125
573
  lookupDistFile(key) {
126
574
  const manifest = this.readManifest();
127
575
  return manifest[key]?.file;
128
576
  }
129
- lookupDistFileWithIndexFallback(basePath) {
130
- const manifest = this.readManifest();
131
- const flatFileKey = `${basePath}.tsx`;
132
- const indexFileKey = `${basePath}/index.tsx`;
133
- return manifest[flatFileKey]?.file ?? manifest[indexFileKey]?.file;
577
+ /**
578
+ * Inject the Vite manifest as a value rather than letting `readManifest()`
579
+ * load it from disk. Required for runtimes without a usable filesystem
580
+ * (Cloudflare Workers, etc.) — the user's `skybridge build` emits the
581
+ * manifest as a JS module which the entry imports and passes here.
582
+ */
583
+ setViteManifest(manifest) {
584
+ this.viteManifest = manifest;
585
+ return this;
134
586
  }
135
587
  readManifest() {
588
+ if (this.viteManifest) {
589
+ return this.viteManifest;
590
+ }
136
591
  return JSON.parse(readFileSync(path.join(process.cwd(), "dist", "assets", ".vite", "manifest.json"), "utf-8"));
137
592
  }
593
+ registerTool(...args) {
594
+ const baseFn = McpServerBase.prototype.registerTool;
595
+ if (typeof args[0] === "string") {
596
+ baseFn.call(this, args[0], args[1], args[2]);
597
+ return this;
598
+ }
599
+ const config = args[0];
600
+ const cb = args[1];
601
+ const { name, view, _meta: userToolMeta, ...toolFields } = config;
602
+ const toolMeta = { ...userToolMeta };
603
+ if (view) {
604
+ this.enforceOneToolPerView(view.component, name);
605
+ this.registerViewResources(name, view, toolMeta);
606
+ }
607
+ const wrappedCb = this.wrapHandler(cb, { attachViewUUID: Boolean(view) });
608
+ baseFn.call(this, name, { ...toolFields, _meta: toolMeta }, wrappedCb);
609
+ return this;
610
+ }
138
611
  }
139
612
  //# sourceMappingURL=server.js.map