vite-plugin-aipanel 1.2.8 → 1.2.9

package/es/core/mcp-proxy.d.ts

@@ -1,5 +1,12 @@
+/** chrome-devtools-mcp 的核心受保护参数（用户不可覆盖；始终最后注入确保生效） */
+export declare const CORE_MCP_ARGS: readonly ["--auto-connect", "--no-usage-statistics", "--no-performance-crux", "--no-page-id-routing"];
+/** 过滤用户透传参数：剔除与核心受保护 flag 冲突的项，其余原样保留 */
+export declare function filterUserMcpArgs(userArgs: readonly string[]): string[];
 export interface McpProxyOptions {
-    args?: string[];
+    /** 用户透传的额外 CLI 参数（追加；与核心受保护项冲突的会被剔除） */
+    userArgs?: string[];
+    /** 用户透传的额外环境变量（合并到 process.env 之上） */
+    env?: Record<string, string>;
     idleTimeout?: number;
 }
 export declare class McpProxy {

package/es/core/mcp-proxy.mjs

@@ -17,13 +17,41 @@ var __privateWrapper = (obj, member, setter, getter) => ({
     return __privateGet(obj, member, getter);
   }
 });
-var _proc, _rl, _messageId, _internalIdBase, _pending, _args, _startPromise, _lastExit, _stderrTail, _idleTimer, _idleTimeout, _McpProxy_instances, doStart_fn, formatNotAvailable_fn, resetIdleTimer_fn;
+var _proc, _rl, _messageId, _internalIdBase, _pending, _args, _env, _startPromise, _lastExit, _stderrTail, _idleTimer, _idleTimeout, _McpProxy_instances, doStart_fn, formatNotAvailable_fn, resetIdleTimer_fn;
 import { spawn } from "node:child_process";
 import { createInterface } from "node:readline";
 import crypto from "node:crypto";
 import path from "node:path";
 import { createLogger, createPackageRequire, resolvePackageDir } from "@aipanel/core/node";
 const log = createLogger("McpProxy");
+const CORE_MCP_ARGS = [
+  "--auto-connect",
+  "--no-usage-statistics",
+  "--no-performance-crux",
+  // chrome-devtools-mcp >=1.8.0 默认开启 pageIdRouting（要求每个页面级工具都传 pageId）。
+  // 代理层已自行校验 pageId 并用 select_page 选中目标页面后再转发，故显式关闭，
+  // 避免底层工具 schema 强制必填 pageId 导致转发时的参数校验失败。
+  "--no-page-id-routing"
+];
+const PROTECTED_FLAGS = /* @__PURE__ */ new Set([
+  "auto-connect",
+  "usage-statistics",
+  "performance-crux",
+  "page-id-routing"
+]);
+function canonicalFlagName(arg) {
+  let flag = arg.trim();
+  if (!flag.startsWith("-")) return null;
+  flag = flag.replace(/^--?/, "").split("=")[0] ?? "";
+  if (flag.startsWith("no-")) flag = flag.slice(3);
+  return flag || null;
+}
+function filterUserMcpArgs(userArgs) {
+  return userArgs.filter((arg) => {
+    const name = canonicalFlagName(arg);
+    return name === null || !PROTECTED_FLAGS.has(name);
+  });
+}
 function resolveChromeDevToolsMcpBin() {
   const pluginDir = resolvePackageDir("vite-plugin-aipanel");
   const require2 = createPackageRequire(pluginDir);
@@ -43,6 +71,7 @@ class McpProxy {
     __privateAdd(this, _internalIdBase, 1e6);
     __privateAdd(this, _pending, /* @__PURE__ */ new Map());
     __privateAdd(this, _args);
+    __privateAdd(this, _env);
     __privateAdd(this, _startPromise, null);
     /** 最近一次进程退出信息，用于生成精确错误（无退出记录时为 null） */
     __privateAdd(this, _lastExit, null);
@@ -51,15 +80,14 @@ class McpProxy {
     __privateAdd(this, _idleTimer, null);
     __privateAdd(this, _idleTimeout);
     __publicField(this, "sessionId");
-    __privateSet(this, _args, options.args ?? [
-      "--auto-connect",
-      "--no-usage-statistics",
-      "--no-performance-crux",
-      // chrome-devtools-mcp >=1.8.0 默认开启 pageIdRouting（要求每个页面级工具都传 pageId）。
-      // 代理层已自行校验 pageId 并用 select_page 选中目标页面后再转发，故显式关闭，
-      // 避免底层工具 schema 强制必填 pageId 导致转发时的参数校验失败。
-      "--no-page-id-routing"
-    ]);
+    const userArgs = options.userArgs ?? [];
+    const filtered = filterUserMcpArgs(userArgs);
+    if (filtered.length !== userArgs.length) {
+      const dropped = userArgs.filter((a) => !filtered.includes(a));
+      log.warn("chrome MCP \u7528\u6237\u53C2\u6570\u4E0E\u6838\u5FC3\u53D7\u4FDD\u62A4\u9879\u51B2\u7A81\uFF0C\u5DF2\u5FFD\u7565", { dropped });
+    }
+    __privateSet(this, _args, [...filtered, ...CORE_MCP_ARGS]);
+    __privateSet(this, _env, options.env);
     __privateSet(this, _idleTimeout, options.idleTimeout ?? 0);
     this.sessionId = crypto.randomUUID();
   }
@@ -153,6 +181,7 @@ _messageId = new WeakMap();
 _internalIdBase = new WeakMap();
 _pending = new WeakMap();
 _args = new WeakMap();
+_env = new WeakMap();
 _startPromise = new WeakMap();
 _lastExit = new WeakMap();
 _stderrTail = new WeakMap();
@@ -166,7 +195,8 @@ doStart_fn = async function() {
     __privateSet(this, _lastExit, null);
     __privateSet(this, _stderrTail, []);
     __privateSet(this, _proc, spawn(process.execPath, [binPath, ...__privateGet(this, _args)], {
-      stdio: ["pipe", "pipe", "pipe"]
+      stdio: ["pipe", "pipe", "pipe"],
+      env: { ...process.env, ...__privateGet(this, _env) }
     }));
     log.debug("Using local chrome-devtools-mcp");
   } catch {
@@ -255,5 +285,7 @@ resetIdleTimer_fn = function() {
   }, __privateGet(this, _idleTimeout)));
 };
 export {
-  McpProxy
+  CORE_MCP_ARGS,
+  McpProxy,
+  filterUserMcpArgs
 };

package/es/core/proxy-server.mjs

@@ -1,5 +1,6 @@
 import http from "http";
-import { createLogger, BRIDGE_SCRIPT_PATH } from "@aipanel/core";
+import { BRIDGE_SCRIPT_PATH } from "@aipanel/core";
+import { createLogger } from "@aipanel/core/node";
 const log = createLogger("ProxyServer");
 function startProxyServer(targetUrl, port, options = {}) {
   return new Promise((resolve, reject) => {
@@ -53,18 +54,20 @@ function startProxyServer(targetUrl, port, options = {}) {
           });
           proxyRes.on("end", () => {
             let body = Buffer.concat(chunks).toString("utf-8");
-            if (body.match(/<\/head>/i)) {
-              body = body.replace(
-                /<\/head>/i,
-                `<script src="${BRIDGE_SCRIPT_PATH}"></script></head>`
-              );
-            } else if (body.match(/<\/body>/i)) {
-              body = body.replace(
-                /<\/body>/i,
-                `<script src="${BRIDGE_SCRIPT_PATH}"></script></body>`
-              );
-            } else {
-              body += `<script src="${BRIDGE_SCRIPT_PATH}"></script>`;
+            if (bridgeScript.trim().length > 0) {
+              if (body.match(/<\/head>/i)) {
+                body = body.replace(
+                  /<\/head>/i,
+                  `<script src="${BRIDGE_SCRIPT_PATH}"></script></head>`
+                );
+              } else if (body.match(/<\/body>/i)) {
+                body = body.replace(
+                  /<\/body>/i,
+                  `<script src="${BRIDGE_SCRIPT_PATH}"></script></body>`
+                );
+              } else {
+                body += `<script src="${BRIDGE_SCRIPT_PATH}"></script>`;
+              }
             }
             const headers = {};
             for (const [key, value] of Object.entries(proxyRes.headers)) {

package/es/index.mjs

@@ -5,6 +5,7 @@ import {
   CONTEXT_API_PATH,
   DEFAULT_PROXY_PORT,
   MCP_API_PATH,
+  SESSION_ID_KEY,
   resolvePluginConfig,
   setVerbose
 } from "@aipanel/core";
@@ -35,7 +36,7 @@ const SILENT_CONTEXT_SCRIPT = `<script>
     if (!force && key === last) return;
     last = key;
     var sessionId = "";
-    try { sessionId = sessionStorage.getItem("_aipanel_pk") || ""; } catch (e) {}
+    try { sessionId = sessionStorage.getItem("${SESSION_ID_KEY}") || ""; } catch (e) {}
     fetch(API, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
@@ -91,7 +92,12 @@ function createAIPanelPlugin(options = {}) {
   let activeTabId = DEFAULT_TAB;
   const serviceInstanceId = crypto.randomUUID();
   const sseClients = /* @__PURE__ */ new Set();
-  const mcpProxy = new McpProxy({ idleTimeout: 5 * 60 * 1e3 });
+  const mcpProxy = new McpProxy({
+    idleTimeout: 5 * 60 * 1e3,
+    // 用户 chrome MCP 透传：追加 args/env（核心受保护参数不可覆盖，由 McpProxy 过滤）
+    userArgs: config.chromeMcp?.args,
+    env: config.chromeMcp?.env
+  });
   let provider = null;
   const service = new AIPanelService(
     config,
@@ -307,7 +313,7 @@ function createAIPanelPlugin(options = {}) {
       ];
       const titleInject = `<script>
         (function () {
-          var KEY = "_aipanel_pk";
+          var KEY = "${SESSION_ID_KEY}";
           if (!sessionStorage.getItem(KEY)) {
             sessionStorage.setItem(KEY, "[" + Math.random().toString(36).slice(2, 10) + "]");
           }

package/es/utils/format-bridge.mjs

@@ -2,20 +2,27 @@
 import fs from "fs";
 import http from "http";
 import path from "path";
+import {
+  DEFAULT_HOSTNAME,
+  ENV_VSCODE_PORT,
+  VSCODE_EXTENSION_PORT,
+  VSCODE_ROUTE_FORMAT,
+  VSCODE_ROUTE_HEALTH
+} from "@aipanel/core";
 const filePath = process.argv[2];
 if (!filePath) {
   console.error("Usage: node format-bridge.cjs <filePath>");
   process.exit(1);
 }
 const absPath = path.resolve(filePath);
-const PORT = parseInt(process.env.AIPANEL_VSCODE_PORT || "", 10) || 51939;
+const PORT = parseInt(process.env[ENV_VSCODE_PORT] || "", 10) || VSCODE_EXTENSION_PORT;
 function touchFile() {
   const now = /* @__PURE__ */ new Date();
   fs.utimesSync(absPath, now, now);
 }
 function probeHealth() {
   return new Promise((resolve) => {
-    const req = http.get(`http://127.0.0.1:${PORT}/health`, (res) => {
+    const req = http.get(`http://${DEFAULT_HOSTNAME}:${PORT}${VSCODE_ROUTE_HEALTH}`, (res) => {
       res.resume();
       resolve(res.statusCode === 200);
     });
@@ -31,9 +38,9 @@ function formatViaExtension() {
     const body = JSON.stringify({ filePath: absPath });
     const req = http.request(
       {
-        hostname: "127.0.0.1",
+        hostname: DEFAULT_HOSTNAME,
         port: PORT,
-        path: "/format",
+        path: VSCODE_ROUTE_FORMAT,
         method: "POST",
         headers: { "Content-Type": "application/json" },
         timeout: 5e3