@beeos-ai/device-mcp-server 0.3.0 → 0.4.2

package/dist/util/package-name.js

@@ -0,0 +1,41 @@
+/**
+ * Android package-name validation.
+ *
+ * mobile-mcp parity (round 3): mirrors `validatePackageName` from
+ * `mobile-mcp/src/utils.ts` — `[a-zA-Z0-9._]` only, with no leading dot
+ * relaxation since Android's own package-name grammar (RFC-1034 segments
+ * separated by `.`) maps cleanly onto this character class.
+ *
+ * Used at the MCP tool boundary (`terminate_app`, `uninstall_app`) to fail
+ * a malformed input EARLY — before it travels through the runner, gets
+ * shell-escaped by `sh\`...\``, and produces a confusing "package not
+ * found" error from `pm uninstall`. We deliberately do NOT call this in
+ * `launch_app` because that handler accepts user-friendly display names
+ * (e.g. "WeChat" -> `com.tencent.mm`) which are mapped to package ids
+ * inside the backend.
+ */
+import { DeviceError } from "@beeos-ai/device-common";
+const PACKAGE_NAME_RE = /^[a-zA-Z0-9._]+$/;
+const MAX_PACKAGE_NAME_LENGTH = 255;
+/**
+ * Throw `DeviceError({ subtype: "invalid_args" })` if `name` doesn't match
+ * the Android package-name grammar. Returns `name` unchanged on success so
+ * callers can write `assertValidPackageName(args.pkg)` inline.
+ *
+ * Empty / non-string / over-length inputs all reject. Defaults inherit
+ * `userActionable=true` from the `invalid_args` subtype so the LLM sees a
+ * plain-text actionable response instead of an `isError` protocol failure.
+ */
+export function assertValidPackageName(name) {
+    if (typeof name !== "string" || name.length === 0) {
+        throw new DeviceError("package name must be a non-empty string", { subtype: "invalid_args", retriable: false });
+    }
+    if (name.length > MAX_PACKAGE_NAME_LENGTH) {
+        throw new DeviceError(`package name '${name.slice(0, 32)}…' exceeds ${MAX_PACKAGE_NAME_LENGTH} chars`, { subtype: "invalid_args", retriable: false });
+    }
+    if (!PACKAGE_NAME_RE.test(name)) {
+        throw new DeviceError(`package name '${name}' contains invalid characters (allowed: a-z A-Z 0-9 . _)`, { subtype: "invalid_args", retriable: false });
+    }
+    return name;
+}
+//# sourceMappingURL=package-name.js.map

package/dist/util/package-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-name.js","sourceRoot":"","sources":["../../src/util/package-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAC3C,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,WAAW,CACnB,yCAAyC,EACzC,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,CAC9C,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAC1C,MAAM,IAAI,WAAW,CACnB,iBAAiB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,uBAAuB,QAAQ,EAC/E,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,CAC9C,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,WAAW,CACnB,iBAAiB,IAAI,0DAA0D,EAC/E,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,CAC9C,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@beeos-ai/device-mcp-server",
-  "version": "0.3.0",
-  "description": "In-pod HTTP MCP tool server for BeeOS device-agent (Android / desktop / mobile sandboxes).",
+  "version": "0.4.2",
+  "description": "Singleton multi-device MCP tool server for BeeOS device-agent (Android / desktop / mobile sandboxes). Implements the Model Context Protocol over Streamable HTTP and stdio.",
   "license": "Apache-2.0",
   "type": "module",
   "main": "dist/index.js",
@@ -34,13 +34,15 @@
     "node": ">=20"
   },
   "dependencies": {
-    "fastify": "^5.8.5",
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "express": "^4.22.1",
     "pino": "^10.3.1",
     "sharp": "^0.34.5",
     "zod": "^4.3.6",
     "@beeos-ai/device-common": "0.3.0"
   },
   "devDependencies": {
+    "@types/express": "^4.17.25",
     "@types/node": "^22.0.0",
     "tsx": "^4.19.0",
     "typescript": "^5.8.0",

package/dist/server/action-mapping.d.ts

@@ -1,21 +0,0 @@
-/**
- * action-mapping — translate a unified `Action` (`type+target+payload`) into
- * the matching MCP tool name + arguments.
- *
- * Used by `POST /act` so callers can hand the server a high-level Action and
- * skip wiring up a tool name themselves. Mirrors the Python reference's
- * `_action_to_call` table.
- */
-import { type Action, type ActionType } from "@beeos-ai/device-common";
-export interface ToolCall {
-    toolName: string;
-    args: Record<string, unknown>;
-}
-export interface UnsupportedActionResult {
-    /** Terminal verbs (`done`, `fail`, `wait`, `call_for_user`) — server replies
-     *  with `{ ok: true, action }` and does NOT touch the backend. */
-    terminal: true;
-    type: ActionType;
-}
-export type ActionMappingResult = ToolCall | UnsupportedActionResult;
-export declare function mapActionToTool(action: Action): ActionMappingResult;

package/dist/server/action-mapping.js

@@ -1,153 +0,0 @@
-/**
- * action-mapping — translate a unified `Action` (`type+target+payload`) into
- * the matching MCP tool name + arguments.
- *
- * Used by `POST /act` so callers can hand the server a high-level Action and
- * skip wiring up a tool name themselves. Mirrors the Python reference's
- * `_action_to_call` table.
- */
-import { TERMINAL_ACTIONS, } from "@beeos-ai/device-common";
-export function mapActionToTool(action) {
-    if (TERMINAL_ACTIONS.has(action.type) || action.type === "wait") {
-        return { terminal: true, type: action.type };
-    }
-    const target = action.target;
-    const payload = action.payload ?? {};
-    switch (action.type) {
-        case "click":
-        case "tap":
-        case "double_click":
-        case "right_click":
-        case "long_press":
-        case "move": {
-            const xy = pointFromTarget(target);
-            return {
-                toolName: action.type === "move" ? "move" : action.type,
-                args: {
-                    ...xy,
-                    ...(action.type === "click" && payload.button ? { button: payload.button } : {}),
-                    ...(action.type === "click" && payload.clicks ? { clicks: payload.clicks } : {}),
-                    ...(action.type === "long_press" && payload.durationMs
-                        ? { durationMs: payload.durationMs }
-                        : {}),
-                },
-            };
-        }
-        case "drag":
-        case "swipe": {
-            const seg = segmentFromTarget(target);
-            return {
-                toolName: action.type,
-                args: {
-                    ...seg,
-                    ...(payload.durationMs ? { durationMs: payload.durationMs } : {}),
-                },
-            };
-        }
-        case "scroll": {
-            const xy = target ? pointFromTarget(target) : { x: 0, y: 0 };
-            return {
-                toolName: "scroll",
-                args: {
-                    ...xy,
-                    direction: payload.direction ?? "down",
-                    ...(payload.amount ? { amount: payload.amount } : {}),
-                },
-            };
-        }
-        case "type":
-            return {
-                toolName: "type",
-                args: { text: payload.text ?? "" },
-            };
-        case "key":
-            return {
-                toolName: "key",
-                args: { key: payload.key ?? payload.keycode ?? "" },
-            };
-        case "hotkey":
-            return {
-                toolName: "hotkey",
-                args: { keys: payload.keys ?? [] },
-            };
-        case "back":
-            return { toolName: "back", args: {} };
-        case "home":
-            return { toolName: "home", args: {} };
-        case "navigate":
-            return {
-                toolName: "back",
-                args: {},
-            };
-        case "launch_app": {
-            const fromTarget = target && (target.kind === "text" || target.kind === "selector")
-                ? target.value
-                : undefined;
-            const pkg = fromTarget ??
-                payload.pkg ??
-                payload.appName ??
-                payload.packageOrName ??
-                payload.package ??
-                "";
-            return {
-                toolName: "launch_app",
-                args: {
-                    pkg,
-                    ...(payload.activity ? { activity: payload.activity } : {}),
-                },
-            };
-        }
-        case "screenshot":
-            return { toolName: "screenshot", args: {} };
-        case "ui_dump":
-            return {
-                toolName: "ui_dump",
-                args: {
-                    ...(payload.query ? { query: payload.query } : {}),
-                    ...(payload.format ? { format: payload.format } : {}),
-                },
-            };
-        case "execute_command":
-        case "run_code":
-            return {
-                toolName: "execute_command",
-                args: {
-                    body: payload.body ?? payload.command ?? "",
-                    ...(payload.timeoutS ? { timeoutS: payload.timeoutS } : {}),
-                    ...(payload.cwd ? { cwd: payload.cwd } : {}),
-                },
-            };
-        case "file_read": {
-            const path = payload.path ??
-                (target && (target.kind === "text" || target.kind === "selector")
-                    ? target.value
-                    : "");
-            return { toolName: "file_read", args: { path } };
-        }
-        case "file_write": {
-            const path = payload.path ??
-                (target && (target.kind === "text" || target.kind === "selector")
-                    ? target.value
-                    : "");
-            return {
-                toolName: "file_write",
-                args: { path, contentB64: payload.contentB64 ?? "" },
-            };
-        }
-        default:
-            throw new Error(`unsupported action type: ${String(action.type)}`);
-    }
-}
-function pointFromTarget(target) {
-    if (target && target.kind === "point") {
-        return { x: target.x, y: target.y };
-    }
-    throw new TypeError("action.target must be {kind:'point', x, y} for this action type");
-}
-function segmentFromTarget(target) {
-    if (target && target.kind === "box") {
-        return { x1: target.x1, y1: target.y1, x2: target.x2, y2: target.y2 };
-    }
-    throw new TypeError("action.target must be {kind:'box', x1, y1, x2, y2} for this action type");
-}
-//# sourceMappingURL=action-mapping.js.map

package/dist/server/action-mapping.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"action-mapping.js","sourceRoot":"","sources":["../../src/server/action-mapping.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,gBAAgB,GAGjB,MAAM,yBAAyB,CAAC;AAgBjC,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,IAAI,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAChE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IAErC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,OAAO,CAAC;QACb,KAAK,KAAK,CAAC;QACX,KAAK,cAAc,CAAC;QACpB,KAAK,aAAa,CAAC;QACnB,KAAK,YAAY,CAAC;QAClB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YACnC,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI;gBACvD,IAAI,EAAE;oBACJ,GAAG,EAAE;oBACL,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChF,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChF,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,CAAC,UAAU;wBACpD,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE;wBACpC,CAAC,CAAC,EAAE,CAAC;iBACR;aACF,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,GAAG,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACtC,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,IAAI;gBACrB,IAAI,EAAE;oBACJ,GAAG,GAAG;oBACN,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClE;aACF,CAAC;QACJ,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7D,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE;oBACJ,GAAG,EAAE;oBACL,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM;oBACtC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtD;aACF,CAAC;QACJ,CAAC;QAED,KAAK,MAAM;YACT,OAAO;gBACL,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE;aACnC,CAAC;QAEJ,KAAK,KAAK;YACR,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE;aACpD,CAAC;QAEJ,KAAK,QAAQ;YACX,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE;aACnC,CAAC;QAEJ,KAAK,MAAM;YACT,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACxC,KAAK,MAAM;YACT,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAExC,KAAK,UAAU;YACb,OAAO;gBACL,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,EAAE;aACT,CAAC;QAEJ,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,UAAU,GACd,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC;gBAC9D,CAAC,CAAC,MAAM,CAAC,KAAK;gBACd,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,GAAG,GACP,UAAU;gBACV,OAAO,CAAC,GAAG;gBACX,OAAO,CAAC,OAAO;gBACf,OAAO,CAAC,aAAa;gBACrB,OAAO,CAAC,OAAO;gBACf,EAAE,CAAC;YACL,OAAO;gBACL,QAAQ,EAAE,YAAY;gBACtB,IAAI,EAAE;oBACJ,GAAG;oBACH,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5D;aACF,CAAC;QACJ,CAAC;QAED,KAAK,YAAY;YACf,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC9C,KAAK,SAAS;YACZ,OAAO;gBACL,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE;oBACJ,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClD,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtD;aACF,CAAC;QAEJ,KAAK,iBAAiB,CAAC;QACvB,KAAK,UAAU;YACb,OAAO;gBACL,QAAQ,EAAE,iBAAiB;gBAC3B,IAAI,EAAE;oBACJ,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,IAAI,EAAE;oBAC3C,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3D,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7C;aACF,CAAC;QAEJ,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,IAAI,GACR,OAAO,CAAC,IAAI;gBACZ,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC;oBAC/D,CAAC,CAAC,MAAM,CAAC,KAAK;oBACd,CAAC,CAAC,EAAE,CAAC,CAAC;YACV,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;QACnD,CAAC;QAED,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,IAAI,GACR,OAAO,CAAC,IAAI;gBACZ,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC;oBAC/D,CAAC,CAAC,MAAM,CAAC,KAAK;oBACd,CAAC,CAAC,EAAE,CAAC,CAAC;YACV,OAAO;gBACL,QAAQ,EAAE,YAAY;gBACtB,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE;aACrD,CAAC;QACJ,CAAC;QAED;YACE,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAAwB;IAC/C,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACtC,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;IACtC,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,iEAAiE,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAwB;IAMjD,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACpC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,IAAI,SAAS,CACjB,yEAAyE,CAC1E,CAAC;AACJ,CAAC"}