sunpeak 0.18.1 → 0.18.2

package/dist/mcp/index.d.ts

@@ -2,6 +2,8 @@ export { runMCPServer, type MCPServerConfig, type MCPServerHandle } from './serv
 export type { SimulationWithDist, AppToolConfig, ToolHandlerExtra, CallToolResult, AuthInfo, ServerConfig, } from './types.js';
 export { createMcpHandler, createHandler, createProductionMcpServer, startProductionHttpServer, setJsonLogging, } from './production-server.js';
 export type { ProductionTool, ProductionResource, ProductionServerConfig, HttpServerOptions, AuthFunction, WebAuthFunction, WebHandlerConfig, } from './production-server.js';
+export { resolveDomain, computeClaudeDomain, computeChatGPTDomain, injectResolvedDomain, injectDefaultDomain, } from './resolve-domain.js';
+export type { DomainConfig } from './resolve-domain.js';
 export { FAVICON_BASE64, FAVICON_DATA_URI, FAVICON_BUFFER } from './favicon.js';
 export { registerAppTool, registerAppResource, getUiCapability, EXTENSION_ID, RESOURCE_URI_META_KEY, RESOURCE_MIME_TYPE, } from '@modelcontextprotocol/ext-apps/server';
 export type { McpUiAppToolConfig, McpUiAppResourceConfig, ToolConfig, ToolCallback, ReadResourceCallback, ResourceMetadata, } from '@modelcontextprotocol/ext-apps/server';

package/dist/mcp/index.js

@@ -9,7 +9,7 @@ import "http";
 import { Http2ServerRequest } from "http2";
 import { Readable } from "stream";
 import crypto$1 from "crypto";
-import { randomUUID } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 //#region src/mcp/favicon.ts
 var FAVICON_BASE64 = "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";
 /** Data URI for use in serverInfo.icons[].src (inline, no fetch needed). */
@@ -9002,6 +9002,101 @@ function dZ(Z) {
 	return Z.extensions?.[OQ];
 }
 //#endregion
+//#region src/mcp/resolve-domain.ts
+/**
+* Resolve a domain config to a single string for the given host.
+*
+* Lookup order: `map[clientName]` → `map['default']` → `undefined`.
+* If `domain` is a plain string, it's returned as-is regardless of host.
+*/
+function resolveDomain(domain, clientName) {
+	if (domain === void 0) return void 0;
+	if (typeof domain === "string") return domain;
+	if (clientName && domain[clientName]) return domain[clientName];
+	return domain["default"];
+}
+/**
+* Compute the Claude sandbox domain for a given MCP server URL.
+*
+* Claude uses the first 32 hex characters of a SHA-256 hash of the server URL
+* as a subdomain of `claudemcpcontent.com`.
+*
+* @example
+* ```ts
+* computeClaudeDomain('https://example.com/mcp')
+* // → 'a904794854a047f6b936c2d62d57a3c0.claudemcpcontent.com'
+* ```
+*/
+function computeClaudeDomain(serverUrl) {
+	return `${createHash("sha256").update(serverUrl).digest("hex").slice(0, 32)}.claudemcpcontent.com`;
+}
+/**
+* Compute the ChatGPT sandbox domain for a given MCP server URL.
+*
+* ChatGPT derives a subdomain from the server URL by replacing non-alphanumeric
+* characters with hyphens and appending `.oaiusercontent.com`.
+*
+* @example
+* ```ts
+* computeChatGPTDomain('https://www.example.com/mcp')
+* // → 'www-example-com.oaiusercontent.com'
+* ```
+*/
+function computeChatGPTDomain(serverUrl) {
+	let hostname;
+	try {
+		hostname = new URL(serverUrl).hostname;
+	} catch {
+		hostname = serverUrl;
+	}
+	return `${hostname.replace(/[^a-zA-Z0-9]+/g, "-").replace(/^-|-$/g, "")}.oaiusercontent.com`;
+}
+/**
+* Inject a resolved domain into resource metadata.
+*
+* If the `_meta.ui.domain` field is a map (Record), it's resolved to a single
+* string using `clientName`. If it's already a string or absent, the metadata
+* is returned unchanged.
+*/
+function injectResolvedDomain(meta, clientName) {
+	if (!meta) return meta;
+	const ui = meta.ui;
+	if (!ui) return meta;
+	const domain = ui.domain;
+	if (domain === void 0 || typeof domain === "string") return meta;
+	const resolved = resolveDomain(domain, clientName);
+	const { domain: _removed, ...restUi } = ui;
+	return {
+		...meta,
+		ui: {
+			...restUi,
+			...resolved !== void 0 ? { domain: resolved } : {}
+		}
+	};
+}
+/**
+* Auto-compute a default domain for the connecting host when the resource
+* metadata has no domain set.
+*
+* Returns the metadata unchanged if `_meta.ui.domain` is already present.
+* Otherwise, computes a host-appropriate domain from the server URL.
+*/
+function injectDefaultDomain(meta, clientName, serverUrl) {
+	const ui = meta?.ui ?? {};
+	if (typeof ui.domain === "string") return meta;
+	let domain;
+	if (clientName === "openai-mcp" || clientName?.startsWith("chatgpt")) domain = computeChatGPTDomain(serverUrl);
+	else if (clientName === "claude") domain = computeClaudeDomain(serverUrl);
+	if (!domain) return meta ?? {};
+	return {
+		...meta,
+		ui: {
+			...ui,
+			domain
+		}
+	};
+}
+//#endregion
 //#region src/mcp/server.ts
 var localDevServerUrl = "http://localhost:8000";
 var localHmrWsUrl = "ws://localhost:24678";
@@ -9128,6 +9223,19 @@ function createAppServer(config, simulations, viteMode) {
 		resources: {},
 		tools: {}
 	} });
+	let clientName;
+	mcpServer.server.oninitialized = () => {
+		clientName = mcpServer.server.getClientVersion()?.name;
+		for (const [, handle] of resourceHandles) {
+			const currentMeta = handle.metadata?._meta;
+			const resolved = injectResolvedDomain(currentMeta, clientName) ?? currentMeta;
+			const withDefault = injectDefaultDomain(resolved, clientName, localDevServerUrl);
+			if (withDefault !== resolved) handle.update({ metadata: {
+				...handle.metadata,
+				_meta: withDefault
+			} });
+		}
+	};
 	const registeredUriSet = /* @__PURE__ */ new Set();
 	const registeredToolNames = /* @__PURE__ */ new Set();
 	const resourceHandles = /* @__PURE__ */ new Map();
@@ -9150,7 +9258,8 @@ function createAppServer(config, simulations, viteMode) {
 					_meta: listMeta
 				}, async (readUri, extra) => {
 					const prodBuild = needsProdBuild(extra?.requestInfo?.headers ?? {});
-					const readMeta = viteMode && !prodBuild ? injectViteCSP(resourceMeta) : resourceMeta;
+					const baseMeta = viteMode && !prodBuild ? injectViteCSP(resourceMeta) : resourceMeta;
+					const readMeta = injectDefaultDomain(injectResolvedDomain(baseMeta, clientName) ?? baseMeta, clientName, localDevServerUrl);
 					let content;
 					try {
 						content = getResourceHtml(simulation, viteMode, prodBuild);
@@ -9545,7 +9654,7 @@ function log(level, msg, extra) {
 * Resources serve pre-built HTML with their _meta preserved.
 */
 function createProductionMcpServer(config) {
-	const { name = "sunpeak-app", version = "0.1.0", serverInfo, tools, resources } = config;
+	const { name = "sunpeak-app", version = "0.1.0", serverInfo, tools, resources, serverUrl } = config;
 	const mcpServer = new McpServer({
 		name: serverInfo?.name ?? name,
 		version: serverInfo?.version ?? version,
@@ -9561,9 +9670,23 @@ function createProductionMcpServer(config) {
 		resources: {},
 		tools: {}
 	} });
+	let clientName;
+	mcpServer.server.oninitialized = () => {
+		clientName = mcpServer.server.getClientVersion()?.name;
+		for (const handle of resourceHandles) {
+			const currentMeta = handle.metadata?._meta;
+			const resolved = injectResolvedDomain(currentMeta, clientName) ?? currentMeta;
+			const withDefault = serverUrl ? injectDefaultDomain(resolved, clientName, serverUrl) : resolved;
+			if (withDefault !== resolved) handle.update({ metadata: {
+				...handle.metadata,
+				_meta: withDefault
+			} });
+		}
+	};
 	const resourceByName = /* @__PURE__ */ new Map();
 	for (const res of resources) resourceByName.set(res.name, res);
 	const registeredResources = /* @__PURE__ */ new Set();
+	const resourceHandles = [];
 	let toolCount = 0;
 	for (const tool of tools) {
 		const makeCallback = () => {
@@ -9591,15 +9714,20 @@ function createProductionMcpServer(config) {
 		if (res) {
 			if (!registeredResources.has(res.uri)) {
 				registeredResources.add(res.uri);
-				fZ(mcpServer, res.name, res.uri, {
+				const handle = fZ(mcpServer, res.name, res.uri, {
 					description: res.description,
 					_meta: res._meta
-				}, async () => ({ contents: [{
-					uri: res.uri,
-					mimeType: d,
-					text: res.html,
-					_meta: res._meta
-				}] }));
+				}, async () => {
+					const resolved = injectResolvedDomain(res._meta, clientName) ?? res._meta;
+					const readMeta = serverUrl ? injectDefaultDomain(resolved, clientName, serverUrl) : resolved;
+					return { contents: [{
+						uri: res.uri,
+						mimeType: d,
+						text: res.html,
+						_meta: readMeta
+					}] };
+				});
+				resourceHandles.push(handle);
 			}
 			const toolConfig = {
 				title: tool.tool.title,
@@ -9868,13 +9996,14 @@ function createHandler(config) {
 			}));
 		}
 		if (req.method === "POST") {
-			const { name, version, serverInfo, tools, resources } = config;
+			const { name, version, serverInfo, tools, resources, serverUrl } = config;
 			const server = createProductionMcpServer({
 				name,
 				version,
 				serverInfo,
 				tools,
-				resources
+				resources,
+				serverUrl
 			});
 			const transport = new WebStandardStreamableHTTPServerTransport({
 				sessionIdGenerator: () => randomUUID(),
@@ -10029,6 +10158,6 @@ function startProductionHttpServer(config, portOrOptions) {
 	process.on("SIGINT", () => void shutdown());
 }
 //#endregion
-export { OQ as EXTENSION_ID, FAVICON_BASE64, FAVICON_BUFFER, FAVICON_DATA_URI, d as RESOURCE_MIME_TYPE, v as RESOURCE_URI_META_KEY, createHandler, createMcpHandler, createProductionMcpServer, dZ as getUiCapability, fZ as registerAppResource, uZ as registerAppTool, runMCPServer, setJsonLogging, startProductionHttpServer };
+export { OQ as EXTENSION_ID, FAVICON_BASE64, FAVICON_BUFFER, FAVICON_DATA_URI, d as RESOURCE_MIME_TYPE, v as RESOURCE_URI_META_KEY, computeChatGPTDomain, computeClaudeDomain, createHandler, createMcpHandler, createProductionMcpServer, dZ as getUiCapability, injectDefaultDomain, injectResolvedDomain, fZ as registerAppResource, uZ as registerAppTool, resolveDomain, runMCPServer, setJsonLogging, startProductionHttpServer };
 
 //# sourceMappingURL=index.js.map