@chatroomcp/chatroom 0.2.2 → 0.2.5

package/README.md

@@ -8,7 +8,7 @@
   English | <a href="./docs/README.zh-CN.md">简体中文</a> | <a href="https://doc.chatroomcp.com/">Documentation</a>
 </p>
 
-ChatRoom is a local MCP runtime that lets ChatGPT work with projects and processes on your device. Its WebUI provides workspace browsing, Git repository management, process monitoring, ChatRoom Cloud controls, and plugin-attributed operation logs.
+ChatRoom is a local MCP runtime that lets ChatGPT work with projects on your local device, run processes, or perform computer control. Its WebUI provides workspace browsing, Git repository and process management, computer control, ChatRoom Cloud management, and plugin-attributed operation logs.
 
 ## Install
 
@@ -20,6 +20,8 @@ chatroom init
 chatroom serve
 ```
 
+Windows users can also use [ChatRoom-Windows-Portable](https://github.com/dayearnew/ChatRoom-Windows-Portable) without configuring any dependencies themselves.
+
 Default local endpoints:
 
 ```text
@@ -27,13 +29,13 @@ WebUI  http://127.0.0.1:8765/
 MCP    http://127.0.0.1:8765/mcp
 ```
 
-`chatroom init` creates `~/.config/chatroom/config.json` and uses `~/Projects` as the default allowed workspace root.
+`chatroom init` creates the [configuration file](https://doc.chatroomcp.com/configuration) and uses `~/Projects` as the default allowed workspace root.
 
 ## Use with ChatGPT
 
 ChatGPT connects to ChatRoom through its MCP endpoint. For remote access, either enable ChatRoom Cloud from the WebUI or expose ChatRoom through your own HTTPS ingress and configure the corresponding public URL.
 
-Create a custom MCP app in ChatGPT Developer Mode, use the ChatRoom `/mcp` URL, and complete OAuth authorization with the `ownerToken` stored in `~/.config/chatroom/config.json`.
+Create a custom MCP app in ChatGPT Developer Mode, use the ChatRoom `/mcp` URL, and complete OAuth authorization with the `ownerToken` in the [configuration file](https://doc.chatroomcp.com/configuration).
 
 See [Use ChatRoom with ChatGPT](https://doc.chatroomcp.com/chatgpt) for the current ChatGPT setup flow.
 

package/dist/app/application.js

@@ -1,5 +1,6 @@
 import { AppDatabase } from "../infrastructure/database/app-database.js";
 import { OperationRepository } from "../infrastructure/database/operation-repository.js";
+import { McpToolSettingsRepository } from "../infrastructure/database/mcp-tool-settings-repository.js";
 import { OAuthRepository } from "../infrastructure/database/oauth-repository.js";
 import { PasskeyRepository } from "../infrastructure/database/passkey-repository.js";
 import { WebSessionRepository } from "../infrastructure/database/web-session-repository.js";
@@ -17,6 +18,7 @@ import { createCloudPlugin, CloudService } from "../plugins/cloud/plugin.js";
 import { createComputerPlugin, ComputerServiceToken, } from "../plugins/computer/plugin.js";
 import { createWebPlugin, WebServiceToken } from "../plugins/web/plugin.js";
 import { createChatRoomMcpHandler } from "../mcp/server/create-mcp-server.js";
+import { McpToolControl } from "../mcp/server/tool-control.js";
 import { HttpServer } from "../infrastructure/http/http-server.js";
 export async function createApplication(config) {
     const database = new AppDatabase(config.databasePath);
@@ -24,6 +26,7 @@ export async function createApplication(config) {
         const eventBus = new RuntimeEventBus();
         const operations = new OperationLog(new OperationRepository(database), eventBus, config.operations.maxPayloadBytes);
         operations.reconcileInterrupted();
+        const mcpTools = new McpToolControl(new McpToolSettingsRepository(database));
         const externalAccess = new ExternalAccessRegistry(config.auth);
         const auth = new AuthService(new OAuthRepository(database), new WebSessionRepository(database), config.auth);
         const passkeys = new PasskeyService(new PasskeyRepository(database));
@@ -32,6 +35,7 @@ export async function createApplication(config) {
             config,
             database,
             operations,
+            mcpTools,
             events: eventBus,
             externalAccess,
             services,

package/dist/infrastructure/database/mcp-tool-settings-repository.d.ts

@@ -0,0 +1,8 @@
+import type { McpToolSettingStore } from "../../mcp/server/tool-control.js";
+import type { AppDatabase } from "./app-database.js";
+export declare class McpToolSettingsRepository implements McpToolSettingStore {
+    private readonly database;
+    constructor(database: AppDatabase);
+    disabledTools(): string[];
+    setEnabled(name: string, enabled: boolean): void;
+}

package/dist/infrastructure/database/mcp-tool-settings-repository.js

@@ -0,0 +1,22 @@
+export class McpToolSettingsRepository {
+    database;
+    constructor(database) {
+        this.database = database;
+    }
+    disabledTools() {
+        return this.database.raw
+            .prepare("SELECT tool_name FROM mcp_tool_settings WHERE enabled=0")
+            .all().map((row) => row.tool_name);
+    }
+    setEnabled(name, enabled) {
+        this.database.raw
+            .prepare(`
+        INSERT INTO mcp_tool_settings(tool_name, enabled, updated_at)
+        VALUES(?,?,?)
+        ON CONFLICT(tool_name) DO UPDATE SET
+          enabled=excluded.enabled,
+          updated_at=excluded.updated_at
+      `)
+            .run(name, enabled ? 1 : 0, new Date().toISOString());
+    }
+}

package/dist/infrastructure/database/migrations.js

@@ -9,6 +9,10 @@ export function migrateDatabase(db) {
                 migrate0To1(db);
                 version = 1;
                 break;
+            case 1:
+                migrate1To2(db);
+                version = 2;
+                break;
             default:
                 throw new Error(`Unsupported ChatRoom database schema: ${version}`);
         }
@@ -35,6 +39,24 @@ function migrate0To1(db) {
         throw error;
     }
 }
+function migrate1To2(db) {
+    db.exec("BEGIN IMMEDIATE;");
+    try {
+        db.exec(`
+      CREATE TABLE IF NOT EXISTS mcp_tool_settings (
+        tool_name TEXT PRIMARY KEY,
+        enabled INTEGER NOT NULL CHECK(enabled IN (0, 1)),
+        updated_at TEXT NOT NULL
+      );
+      PRAGMA user_version = 2;
+      COMMIT;
+    `);
+    }
+    catch (error) {
+        db.exec("ROLLBACK;");
+        throw error;
+    }
+}
 function userVersion(db) {
     const row = db.prepare("PRAGMA user_version").get();
     const version = Number(row?.user_version ?? 0);

package/dist/infrastructure/database/schema.d.ts

@@ -1,2 +1,2 @@
-export declare const DATABASE_SCHEMA_VERSION = 1;
-export declare const DATABASE_SCHEMA = "\n  CREATE TABLE IF NOT EXISTS operations (\n    operation_id TEXT PRIMARY KEY,\n    plugin_id TEXT NOT NULL,\n    source TEXT NOT NULL,\n    action TEXT NOT NULL,\n    status TEXT NOT NULL,\n    process_id TEXT,\n    input_json TEXT NOT NULL,\n    output_json TEXT NOT NULL,\n    error_json TEXT NOT NULL,\n    input_truncated INTEGER NOT NULL DEFAULT 0,\n    output_truncated INTEGER NOT NULL DEFAULT 0,\n    started_at TEXT NOT NULL,\n    finished_at TEXT,\n    duration_ms INTEGER\n  );\n  CREATE INDEX IF NOT EXISTS operations_started_idx ON operations(started_at DESC);\n  CREATE INDEX IF NOT EXISTS operations_plugin_idx ON operations(plugin_id, started_at DESC);\n  CREATE INDEX IF NOT EXISTS operations_status_idx ON operations(status, started_at DESC);\n\n  CREATE TABLE IF NOT EXISTS oauth_clients (\n    client_id TEXT PRIMARY KEY,\n    name TEXT NOT NULL,\n    redirect_uris_json TEXT NOT NULL,\n    created_at TEXT NOT NULL\n  );\n  CREATE TABLE IF NOT EXISTS oauth_codes (\n    code_hash TEXT PRIMARY KEY,\n    client_id TEXT NOT NULL REFERENCES oauth_clients(client_id) ON DELETE CASCADE,\n    redirect_uri TEXT NOT NULL,\n    code_challenge TEXT NOT NULL,\n    scope TEXT NOT NULL,\n    expires_at TEXT NOT NULL,\n    used_at TEXT\n  );\n  CREATE INDEX IF NOT EXISTS oauth_code_expiry_idx ON oauth_codes(expires_at);\n  CREATE TABLE IF NOT EXISTS oauth_tokens (\n    token_hash TEXT PRIMARY KEY,\n    client_id TEXT NOT NULL REFERENCES oauth_clients(client_id) ON DELETE CASCADE,\n    scope TEXT NOT NULL,\n    expires_at TEXT NOT NULL,\n    revoked_at TEXT,\n    created_at TEXT NOT NULL\n  );\n  CREATE INDEX IF NOT EXISTS oauth_token_expiry_idx ON oauth_tokens(expires_at);\n  CREATE TABLE IF NOT EXISTS oauth_refresh_tokens (\n    token_hash TEXT PRIMARY KEY,\n    client_id TEXT NOT NULL REFERENCES oauth_clients(client_id) ON DELETE CASCADE,\n    scope TEXT NOT NULL,\n    expires_at TEXT NOT NULL,\n    revoked_at TEXT,\n    created_at TEXT NOT NULL\n  );\n  CREATE INDEX IF NOT EXISTS oauth_refresh_expiry_idx ON oauth_refresh_tokens(expires_at);\n\n  CREATE TABLE IF NOT EXISTS web_sessions (\n    token_hash TEXT PRIMARY KEY,\n    expires_at TEXT NOT NULL,\n    created_at TEXT NOT NULL\n  );\n  CREATE INDEX IF NOT EXISTS web_session_expiry_idx ON web_sessions(expires_at);\n\n  CREATE TABLE IF NOT EXISTS passkeys (\n    credential_id TEXT PRIMARY KEY,\n    public_key BLOB NOT NULL,\n    counter INTEGER NOT NULL,\n    transports_json TEXT NOT NULL,\n    device_type TEXT NOT NULL CHECK(device_type IN ('singleDevice','multiDevice')),\n    backed_up INTEGER NOT NULL,\n    name TEXT NOT NULL,\n    created_at TEXT NOT NULL,\n    last_used_at TEXT NOT NULL\n  );\n  CREATE INDEX IF NOT EXISTS passkeys_last_used_idx ON passkeys(last_used_at DESC);\n\n  CREATE TABLE IF NOT EXISTS computer_settings (\n    id INTEGER PRIMARY KEY CHECK(id = 1),\n    enabled INTEGER NOT NULL DEFAULT 0,\n    remote_access INTEGER NOT NULL DEFAULT 1,\n    updated_at TEXT NOT NULL\n  );\n\n";
+export declare const DATABASE_SCHEMA_VERSION = 2;
+export declare const DATABASE_SCHEMA = "\n  CREATE TABLE IF NOT EXISTS operations (\n    operation_id TEXT PRIMARY KEY,\n    plugin_id TEXT NOT NULL,\n    source TEXT NOT NULL,\n    action TEXT NOT NULL,\n    status TEXT NOT NULL,\n    process_id TEXT,\n    input_json TEXT NOT NULL,\n    output_json TEXT NOT NULL,\n    error_json TEXT NOT NULL,\n    input_truncated INTEGER NOT NULL DEFAULT 0,\n    output_truncated INTEGER NOT NULL DEFAULT 0,\n    started_at TEXT NOT NULL,\n    finished_at TEXT,\n    duration_ms INTEGER\n  );\n  CREATE INDEX IF NOT EXISTS operations_started_idx ON operations(started_at DESC);\n  CREATE INDEX IF NOT EXISTS operations_plugin_idx ON operations(plugin_id, started_at DESC);\n  CREATE INDEX IF NOT EXISTS operations_status_idx ON operations(status, started_at DESC);\n\n  CREATE TABLE IF NOT EXISTS oauth_clients (\n    client_id TEXT PRIMARY KEY,\n    name TEXT NOT NULL,\n    redirect_uris_json TEXT NOT NULL,\n    created_at TEXT NOT NULL\n  );\n  CREATE TABLE IF NOT EXISTS oauth_codes (\n    code_hash TEXT PRIMARY KEY,\n    client_id TEXT NOT NULL REFERENCES oauth_clients(client_id) ON DELETE CASCADE,\n    redirect_uri TEXT NOT NULL,\n    code_challenge TEXT NOT NULL,\n    scope TEXT NOT NULL,\n    expires_at TEXT NOT NULL,\n    used_at TEXT\n  );\n  CREATE INDEX IF NOT EXISTS oauth_code_expiry_idx ON oauth_codes(expires_at);\n  CREATE TABLE IF NOT EXISTS oauth_tokens (\n    token_hash TEXT PRIMARY KEY,\n    client_id TEXT NOT NULL REFERENCES oauth_clients(client_id) ON DELETE CASCADE,\n    scope TEXT NOT NULL,\n    expires_at TEXT NOT NULL,\n    revoked_at TEXT,\n    created_at TEXT NOT NULL\n  );\n  CREATE INDEX IF NOT EXISTS oauth_token_expiry_idx ON oauth_tokens(expires_at);\n  CREATE TABLE IF NOT EXISTS oauth_refresh_tokens (\n    token_hash TEXT PRIMARY KEY,\n    client_id TEXT NOT NULL REFERENCES oauth_clients(client_id) ON DELETE CASCADE,\n    scope TEXT NOT NULL,\n    expires_at TEXT NOT NULL,\n    revoked_at TEXT,\n    created_at TEXT NOT NULL\n  );\n  CREATE INDEX IF NOT EXISTS oauth_refresh_expiry_idx ON oauth_refresh_tokens(expires_at);\n\n  CREATE TABLE IF NOT EXISTS web_sessions (\n    token_hash TEXT PRIMARY KEY,\n    expires_at TEXT NOT NULL,\n    created_at TEXT NOT NULL\n  );\n  CREATE INDEX IF NOT EXISTS web_session_expiry_idx ON web_sessions(expires_at);\n\n  CREATE TABLE IF NOT EXISTS passkeys (\n    credential_id TEXT PRIMARY KEY,\n    public_key BLOB NOT NULL,\n    counter INTEGER NOT NULL,\n    transports_json TEXT NOT NULL,\n    device_type TEXT NOT NULL CHECK(device_type IN ('singleDevice','multiDevice')),\n    backed_up INTEGER NOT NULL,\n    name TEXT NOT NULL,\n    created_at TEXT NOT NULL,\n    last_used_at TEXT NOT NULL\n  );\n  CREATE INDEX IF NOT EXISTS passkeys_last_used_idx ON passkeys(last_used_at DESC);\n\n  CREATE TABLE IF NOT EXISTS computer_settings (\n    id INTEGER PRIMARY KEY CHECK(id = 1),\n    enabled INTEGER NOT NULL DEFAULT 0,\n    remote_access INTEGER NOT NULL DEFAULT 1,\n    updated_at TEXT NOT NULL\n  );\n\n  CREATE TABLE IF NOT EXISTS mcp_tool_settings (\n    tool_name TEXT PRIMARY KEY,\n    enabled INTEGER NOT NULL CHECK(enabled IN (0, 1)),\n    updated_at TEXT NOT NULL\n  );\n\n";

package/dist/infrastructure/database/schema.js

@@ -1,4 +1,4 @@
-export const DATABASE_SCHEMA_VERSION = 1;
+export const DATABASE_SCHEMA_VERSION = 2;
 export const DATABASE_SCHEMA = `
   CREATE TABLE IF NOT EXISTS operations (
     operation_id TEXT PRIMARY KEY,
@@ -82,4 +82,10 @@ export const DATABASE_SCHEMA = `
     updated_at TEXT NOT NULL
   );
 
+  CREATE TABLE IF NOT EXISTS mcp_tool_settings (
+    tool_name TEXT PRIMARY KEY,
+    enabled INTEGER NOT NULL CHECK(enabled IN (0, 1)),
+    updated_at TEXT NOT NULL
+  );
+
 `;

package/dist/mcp/server/plugin-mcp-registrar.d.ts

@@ -1,5 +1,6 @@
 import type { McpServer, StandardSchemaWithJSON, ToolAnnotations, CallToolResult } from "@modelcontextprotocol/server";
 import type { OperationLog } from "../../operations/operation-log.js";
+import type { McpToolControl } from "./tool-control.js";
 type PluginToolInput<Schema extends StandardSchemaWithJSON> = StandardSchemaWithJSON.InferOutput<Schema>;
 type PluginToolAction<Input> = string | ((input: Input) => string);
 export interface PluginToolExecution {
@@ -23,7 +24,8 @@ export declare class PluginMcpRegistrar {
     private readonly server;
     private readonly operations;
     private readonly pluginId;
-    constructor(server: McpServer, operations: OperationLog, pluginId: string);
+    private readonly toolControl;
+    constructor(server: McpServer | null, operations: OperationLog, pluginId: string, toolControl: McpToolControl);
     registerTool<InputSchema extends StandardSchemaWithJSON, OutputSchema extends StandardSchemaWithJSON>(name: string, config: PluginToolConfig<InputSchema, OutputSchema>, handler: (input: PluginToolInput<InputSchema>, execution: PluginToolExecution) => Promise<unknown> | unknown): void;
 }
 export {};

package/dist/mcp/server/plugin-mcp-registrar.js

@@ -4,12 +4,22 @@ export class PluginMcpRegistrar {
     server;
     operations;
     pluginId;
-    constructor(server, operations, pluginId) {
+    toolControl;
+    constructor(server, operations, pluginId, toolControl) {
         this.server = server;
         this.operations = operations;
         this.pluginId = pluginId;
+        this.toolControl = toolControl;
     }
     registerTool(name, config, handler) {
+        this.toolControl.define({
+            name,
+            pluginId: this.pluginId,
+            title: config.title,
+            description: config.description,
+        });
+        if (!this.server)
+            return;
         const { action, audit, present, ...toolConfig } = config;
         const callback = mcpTool(async (input) => {
             const operation = this.operations.start({
@@ -44,7 +54,8 @@ export class PluginMcpRegistrar {
                 throw error;
             }
         }, present);
-        this.server.registerTool(name, toolConfig, callback);
+        const registered = this.server.registerTool(name, toolConfig, callback);
+        this.toolControl.attach(name, registered);
     }
 }
 function operationReferences(input) {

package/dist/mcp/server/tool-control.d.ts

@@ -0,0 +1,31 @@
+import type { RegisteredTool } from "@modelcontextprotocol/server";
+export interface McpToolSettingStore {
+    disabledTools(): string[];
+    setEnabled(name: string, enabled: boolean): void;
+}
+export interface McpToolSummary {
+    name: string;
+    pluginId: string;
+    title: string;
+    description: string;
+    enabled: boolean;
+}
+interface McpToolDefinition {
+    name: string;
+    pluginId: string;
+    title: string;
+    description: string;
+}
+export declare class McpToolControl {
+    private readonly store;
+    private readonly disabled;
+    private readonly definitions;
+    private readonly handles;
+    constructor(store: McpToolSettingStore);
+    define(definition: McpToolDefinition): void;
+    attach(name: string, tool: RegisteredTool): void;
+    list(): McpToolSummary[];
+    setEnabled(name: string, enabled: boolean): McpToolSummary;
+    private updateHandles;
+}
+export {};

package/dist/mcp/server/tool-control.js

@@ -0,0 +1,71 @@
+import { ChatRoomError } from "../../core/errors/chatroom-error.js";
+export class McpToolControl {
+    store;
+    disabled = new Set();
+    definitions = new Map();
+    handles = new Map();
+    constructor(store) {
+        this.store = store;
+        for (const name of store.disabledTools())
+            this.disabled.add(name);
+    }
+    define(definition) {
+        const existing = this.definitions.get(definition.name);
+        if (existing && existing.pluginId !== definition.pluginId)
+            throw new Error(`MCP tool already belongs to another plugin: ${definition.name}`);
+        this.definitions.set(definition.name, definition);
+    }
+    attach(name, tool) {
+        let tools = this.handles.get(name);
+        if (!tools) {
+            tools = new Set();
+            this.handles.set(name, tools);
+        }
+        tools.add(new WeakRef(tool));
+        if (this.disabled.has(name))
+            tool.disable();
+    }
+    list() {
+        return [...this.definitions.values()]
+            .map((definition) => ({
+            ...definition,
+            enabled: !this.disabled.has(definition.name),
+        }))
+            .sort((left, right) => left.pluginId.localeCompare(right.pluginId) ||
+            left.name.localeCompare(right.name));
+    }
+    setEnabled(name, enabled) {
+        const definition = this.definitions.get(name);
+        if (!definition)
+            throw new ChatRoomError("NOT_FOUND", `Unknown MCP tool: ${name}`);
+        if (enabled === !this.disabled.has(name))
+            return { ...definition, enabled };
+        this.store.setEnabled(name, enabled);
+        if (enabled)
+            this.disabled.delete(name);
+        else
+            this.disabled.add(name);
+        this.updateHandles(name, enabled);
+        return { ...definition, enabled };
+    }
+    updateHandles(name, enabled) {
+        const handles = this.handles.get(name);
+        if (!handles)
+            return;
+        for (const reference of [...handles]) {
+            const tool = reference.deref();
+            if (!tool) {
+                handles.delete(reference);
+                continue;
+            }
+            if (tool.enabled === enabled)
+                continue;
+            if (enabled)
+                tool.enable();
+            else
+                tool.disable();
+        }
+        if (!handles.size)
+            this.handles.delete(name);
+    }
+}

package/dist/plugins/computer/computer-service.d.ts

@@ -9,10 +9,12 @@ export declare class ComputerService {
     private revision;
     private currentSnapshotId;
     private latestSnapshotValue;
+    private latestSnapshotCapturedAt;
     private queue;
     constructor(backend: ComputerBackend, settingsRepository: ComputerSettingsStore, events: RuntimeEventBus);
     settings(): ComputerSettings;
     latestSnapshot(scope: ComputerAccessScope): ComputerSnapshot | null;
+    latestSnapshotTimestamp(): string | null;
     requestPermission(permission: ComputerPermission): Promise<ComputerStatus>;
     status(): Promise<ComputerStatus>;
     setSettings(patch: Partial<Pick<ComputerSettings, "enabled" | "remoteAccess">>): ComputerSettings;

package/dist/plugins/computer/computer-service.js

@@ -7,6 +7,7 @@ export class ComputerService {
     revision = 0;
     currentSnapshotId = null;
     latestSnapshotValue = null;
+    latestSnapshotCapturedAt = null;
     queue = Promise.resolve();
     constructor(backend, settingsRepository, events) {
         this.backend = backend;
@@ -23,6 +24,9 @@ export class ComputerService {
         this.assertScopeAllowed(scope, settings);
         return this.latestSnapshotValue;
     }
+    latestSnapshotTimestamp() {
+        return this.latestSnapshotValue ? this.latestSnapshotCapturedAt : null;
+    }
     requestPermission(permission) {
         return this.serial(async () => {
             const base = await this.backend.requestPermission(permission);
@@ -38,6 +42,7 @@ export class ComputerService {
         if (!next.enabled) {
             this.currentSnapshotId = null;
             this.latestSnapshotValue = null;
+            this.latestSnapshotCapturedAt = null;
             void this.backend.dispose().catch(() => undefined);
         }
         this.events.emit({ type: "computer-settings", settings: next });
@@ -52,6 +57,7 @@ export class ComputerService {
             value.snapshotId = this.currentSnapshotId;
             value.revision = this.revision;
             this.latestSnapshotValue = value;
+            this.latestSnapshotCapturedAt = new Date().toISOString();
             return value;
         });
     }
@@ -67,14 +73,17 @@ export class ComputerService {
             this.currentSnapshotId = null;
             const result = await this.backend.action(request, ++this.revision);
             this.currentSnapshotId = result.snapshot?.snapshotId ?? null;
-            if (result.snapshot)
+            if (result.snapshot) {
                 this.latestSnapshotValue = result.snapshot;
+                this.latestSnapshotCapturedAt = new Date().toISOString();
+            }
             return result;
         });
     }
     async shutdown() {
         this.currentSnapshotId = null;
         this.latestSnapshotValue = null;
+        this.latestSnapshotCapturedAt = null;
         await this.backend.dispose();
     }
     assertActionBudget(request) {

package/dist/plugins/plugin-manager.js

@@ -12,12 +12,17 @@ export class PluginManager {
             await plugin.activate(this.context);
             this.active.push(plugin);
         }
+        for (const plugin of this.active) {
+            if (!plugin.registerMcp)
+                continue;
+            plugin.registerMcp(new PluginMcpRegistrar(null, this.context.operations, plugin.id, this.context.mcpTools));
+        }
     }
     registerMcp(server) {
         for (const plugin of this.active) {
             if (!plugin.registerMcp)
                 continue;
-            plugin.registerMcp(new PluginMcpRegistrar(server, this.context.operations, plugin.id));
+            plugin.registerMcp(new PluginMcpRegistrar(server, this.context.operations, plugin.id, this.context.mcpTools));
         }
     }
     async stop() {

package/dist/plugins/process/infrastructure/pty-process-backend.js

@@ -32,6 +32,10 @@ class PtyBackendProcess {
         this.processHandle.write(data);
     }
     kill(signal = "SIGTERM") {
+        if (process.platform === "win32") {
+            this.processHandle.kill();
+            return;
+        }
         this.processHandle.kill(signal);
     }
     onStdout(listener) {

package/dist/plugins/types.d.ts

@@ -2,6 +2,7 @@ import type { ChatRoomConfig } from "../config/types.js";
 import type { AppDatabase } from "../infrastructure/database/app-database.js";
 import type { PluginMcpRegistrar } from "../mcp/server/plugin-mcp-registrar.js";
 import type { OperationLog } from "../operations/operation-log.js";
+import type { McpToolControl } from "../mcp/server/tool-control.js";
 import type { RuntimeEventBus } from "../app/event-bus.js";
 import type { ExternalAccessRegistry } from "../app/external-access-registry.js";
 export interface ServiceToken<T> {
@@ -19,6 +20,7 @@ export interface PluginContext {
     config: ChatRoomConfig;
     database: AppDatabase;
     operations: OperationLog;
+    mcpTools: McpToolControl;
     events: RuntimeEventBus;
     externalAccess: ExternalAccessRegistry;
     services: ServiceRegistry;

package/dist/plugins/web/api-types.d.ts

@@ -7,6 +7,7 @@ export type { ComputerDisplay, ComputerPermission, ComputerStatus, GitBranch, Gi
 export interface ComputerPreviewView {
     snapshotId: string;
     revision: number;
+    capturedAt: string | null;
     display: ComputerDisplay | null;
     activeApp: string | null;
     activeWindow: string | null;

package/dist/plugins/web/http/api-router.js

@@ -55,6 +55,15 @@ export function createApiRouter(application, eventBus, auth, passkeys, ingress,
     });
     router.use(apiAuthentication(auth, ingress));
     router.get("/runtime", (_req, res) => res.json(runtimeStatus()));
+    router.get("/mcp/tools", (_req, res) => {
+        res.json(application.mcpTools.list());
+    });
+    router.patch("/mcp/tools/:toolName", (req, res) => {
+        const body = req.body;
+        if (typeof body.enabled !== "boolean")
+            throw new ChatRoomError("INVALID_INPUT", "enabled must be a boolean");
+        res.json(application.mcpTools.setEnabled(requireString(req.params.toolName, "toolName"), body.enabled));
+    });
     router.get("/auth/passkeys", (_req, res) => res.json(passkeys.list()));
     router.post("/auth/passkeys/register/options", asyncRoute(async (req, res) => {
         res.json(await passkeys.registrationOptions(ingress.webAuthnOrigin(req)));

package/dist/plugins/web/http/computer-api-router.js

@@ -40,7 +40,7 @@ export function createComputerApiRouter(computer, operations, ingress) {
     }));
     router.get("/computer/preview", (req, res) => {
         const scope = ingress.isExternalWeb(req) ? "remote" : "local";
-        res.json(presentPreview(computer.latestSnapshot(scope)));
+        res.json(presentPreview(computer.latestSnapshot(scope), computer.latestSnapshotTimestamp()));
     });
     router.post("/computer/snapshot", asyncRoute(async (req, res) => {
         const scope = ingress.isExternalWeb(req) ? "remote" : "local";
@@ -48,16 +48,17 @@ export function createComputerApiRouter(computer, operations, ingress) {
             includeScreenshot: true,
             includeElements: true,
         });
-        res.json(presentPreview(value));
+        res.json(presentPreview(value, computer.latestSnapshotTimestamp()));
     }));
     return router;
 }
-function presentPreview(value) {
+function presentPreview(value, capturedAt) {
     if (!value)
         return null;
     return {
         snapshotId: value.snapshotId,
         revision: value.revision,
+        capturedAt,
         display: value.display,
         activeApp: value.activeApp,
         activeWindow: value.activeWindow,

package/dist/plugins/web/http/workspace-api-router.js

@@ -1,11 +1,26 @@
 import { Router } from "express";
 import { ChatRoomError } from "../../../core/errors/chatroom-error.js";
 import { asyncRoute, requireString, } from "../../../presentation/http/http-utils.js";
+const MAX_WRITE_BYTES = 1024 * 1024;
 export function createWorkspaceApiRouter(application) {
     const router = Router();
     router.get("/workspaces", asyncRoute(async (_req, res) => {
         res.json(await application.workspaces.list());
     }));
+    router.post("/workspaces", asyncRoute(async (req, res) => {
+        const body = bodyRecord(req.body);
+        const parent = requireString(body.parent, "parent");
+        const name = requireString(body.name, "name");
+        res.json(await application.operations.run({
+            pluginId: "workspace",
+            source: "gui",
+            action: "create",
+            input: { parent, name },
+        }, () => application.workspaces.createProject(parent, name)));
+    }));
+    router.get("/workspace/roots", (_req, res) => {
+        res.json(application.workspaces.roots());
+    });
     router.get("/workspace", asyncRoute(async (req, res) => {
         res.json(await application.workspaces.info(requireString(req.query.root, "root")));
     }));
@@ -20,6 +35,22 @@ export function createWorkspaceApiRouter(application) {
             maxBytes: 2 * 1024 * 1024,
         }));
     }));
+    router.put("/workspace/file", asyncRoute(async (req, res) => {
+        const body = bodyRecord(req.body);
+        const fs = await application.workspaces.fs(requireString(body.root, "root"));
+        const filePath = requireString(body.path, "path");
+        if (typeof body.content !== "string")
+            throw new ChatRoomError("INVALID_INPUT", "content must be a string");
+        const bytes = Buffer.byteLength(body.content, "utf8");
+        if (bytes > MAX_WRITE_BYTES)
+            throw new ChatRoomError("INVALID_INPUT", `File content exceeds ${MAX_WRITE_BYTES} bytes`);
+        res.json(await application.operations.run({
+            pluginId: "workspace",
+            source: "gui",
+            action: "file.write",
+            input: { root: fs.root, path: filePath, bytes },
+        }, () => fs.write(filePath, body.content)));
+    }));
     router.get("/workspace/file/image", asyncRoute(async (req, res) => {
         const filePath = requireString(req.query.path, "path");
         const mime = imageMime(filePath);
@@ -37,6 +68,11 @@ export function createWorkspaceApiRouter(application) {
     }));
     return router;
 }
+function bodyRecord(value) {
+    return value && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : {};
+}
 function imageMime(filePath) {
     switch (filePath.split(".").pop()?.toLowerCase()) {
         case "png":

package/dist/plugins/web/plugin.js

@@ -10,7 +10,7 @@ export function createWebPlugin() {
         id: "web",
         activate(context) {
             context.services.provide(WebServiceToken, {
-                application: new WebRuntime(context.services.require(WorkspaceServiceToken), context.services.require(GitServiceToken), context.operations, context.services.require(ProcessService), context.services.require(ComputerServiceToken)),
+                application: new WebRuntime(context.services.require(WorkspaceServiceToken), context.services.require(GitServiceToken), context.operations, context.services.require(ProcessService), context.services.require(ComputerServiceToken), context.mcpTools),
             });
         },
     };

package/dist/plugins/web/runtime.d.ts

@@ -3,13 +3,15 @@ import type { ComputerService } from "../computer/computer-service.js";
 import type { GitService } from "../git/git-service.js";
 import type { ProcessSupervisor } from "../process/process-supervisor.js";
 import type { WorkspaceService } from "../workspace/workspace-service.js";
+import type { McpToolControl } from "../../mcp/server/tool-control.js";
 export declare class WebRuntime {
     readonly workspaces: WorkspaceService;
     readonly git: GitService;
     readonly operations: OperationLog;
     readonly processes: ProcessSupervisor;
     readonly computer: ComputerService;
-    constructor(workspaces: WorkspaceService, git: GitService, operations: OperationLog, processes: ProcessSupervisor, computer: ComputerService);
+    readonly mcpTools: McpToolControl;
+    constructor(workspaces: WorkspaceService, git: GitService, operations: OperationLog, processes: ProcessSupervisor, computer: ComputerService, mcpTools: McpToolControl);
     processKill(processId: string, force?: boolean): Promise<import("./api-types.js").ProcessSnapshot>;
     listProcesses(): import("./api-types.js").ProcessSnapshot[];
     getProcess(processId: string): import("./api-types.js").ProcessSnapshot;

package/dist/plugins/web/runtime.js

@@ -4,12 +4,14 @@ export class WebRuntime {
     operations;
     processes;
     computer;
-    constructor(workspaces, git, operations, processes, computer) {
+    mcpTools;
+    constructor(workspaces, git, operations, processes, computer, mcpTools) {
         this.workspaces = workspaces;
         this.git = git;
         this.operations = operations;
         this.processes = processes;
         this.computer = computer;
+        this.mcpTools = mcpTools;
     }
     processKill(processId, force = false) {
         return this.operations.run({

package/dist/plugins/workspace/mcp.js

@@ -2,6 +2,9 @@ import { z } from "zod";
 import { closedRead } from "../../mcp/server/tool-support.js";
 const workspaceInfoSchema = z.object({
     root: z.string(),
+    name: z.string(),
+    summary: z.string().nullable(),
+    presetPrompt: z.string().nullable(),
     instructions: z.string().nullable(),
     skills: z.array(z.object({
         name: z.string(),
@@ -12,7 +15,7 @@ const workspaceInfoSchema = z.object({
 export function registerWorkspaceTools(mcp, workspaces) {
     mcp.registerTool("workspace_info", {
         title: "Workspace info",
-        description: "Read project instructions and skill metadata for a directory within the configured allowed roots.",
+        description: "Read the complete workspace context for a project, including its summary, preset prompt, project instructions, and skill metadata.",
         inputSchema: z.object({ root: z.string() }),
         outputSchema: workspaceInfoSchema,
         annotations: closedRead,

package/dist/plugins/workspace/metadata.d.ts

@@ -1,4 +1,6 @@
 import type { WorkspaceFs } from "./workspace-fs.js";
 import type { WorkspaceSkill } from "./types.js";
+export declare function readSummary(fs: WorkspaceFs): Promise<string | null>;
+export declare function readPresetPrompt(fs: WorkspaceFs): Promise<string | null>;
 export declare function readInstructions(fs: WorkspaceFs): Promise<string | null>;
 export declare function readSkills(fs: WorkspaceFs): Promise<WorkspaceSkill[]>;