@dollhousemcp/mcp-server 2.0.14 → 2.0.16

package/scripts/pretooluse-codex.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+# pretooluse-codex.sh — Manual Codex hook wrapper for DollhouseMCP
+
+export DOLLHOUSE_HOOK_PLATFORM="codex"
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+exec bash "$SCRIPT_DIR/pretooluse-dollhouse.sh"

package/scripts/pretooluse-cursor.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+# pretooluse-cursor.sh — Manual Cursor hook wrapper for DollhouseMCP
+
+export DOLLHOUSE_HOOK_PLATFORM="cursor"
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+exec bash "$SCRIPT_DIR/pretooluse-dollhouse.sh"

package/scripts/pretooluse-dollhouse.sh

@@ -0,0 +1,110 @@
+#!/bin/bash
+# pretooluse-dollhouse.sh — PreToolUse hook for DollhouseMCP permission evaluation
+#
+# Routes permission checks through DollhouseMCP's evaluate_permission endpoint.
+# The DollhouseMCP web server runs alongside the MCP stdio server on a dynamic port.
+# Port discovery via ~/.dollhouse/run/permission-server.port
+#
+# Input:  JSON on stdin. Claude Code uses { tool_name, tool_input }.
+#         Other clients may expose { toolName, toolInput } or { tool, input }.
+# Output: JSON on stdout (platform-specific hook response; Claude Code expects
+# hookSpecificOutput.permissionDecision for PreToolUse)
+#
+# Fail-open: if the server is unreachable or returns an error, the hook allows
+# the action rather than blocking the user.
+#
+# Set DOLLHOUSE_HOOK_DEBUG=1 for debug logging to stderr.
+# Set DOLLHOUSE_HOOK_PLATFORM to override the platform sent to the server.
+
+PORT_FILE="$HOME/.dollhouse/run/permission-server.port"
+MAX_RETRIES=2
+INITIAL_TIMEOUT=5
+HOOK_PLATFORM="${DOLLHOUSE_HOOK_PLATFORM:-claude_code}"
+
+# Debug logging helper — writes to stderr so it doesn't pollute stdout
+debug() {
+  if [[ "${DOLLHOUSE_HOOK_DEBUG:-0}" == "1" ]]; then
+    echo "[pretooluse] $*" >&2
+  fi
+  return 0
+}
+
+# Discover the port from the port file
+if [[ -f "$PORT_FILE" ]]; then
+  PORT=$(cat "$PORT_FILE" 2>/dev/null)
+  debug "Port file found: $PORT"
+else
+  debug "No port file at $PORT_FILE — fail open"
+  exit 0
+fi
+
+# Validate port is a number
+if ! [[ "$PORT" =~ ^[0-9]+$ ]]; then
+  debug "Invalid port value: $PORT — fail open"
+  exit 0
+fi
+
+ENDPOINT="http://127.0.0.1:${PORT}/api/evaluate_permission"
+debug "Endpoint: $ENDPOINT"
+
+# Read the hook input from stdin
+INPUT=$(cat)
+
+# Extract tool_name and tool_input from the hook payload
+TOOL_NAME=$(echo "$INPUT" | jq -r '.tool_name // .toolName // .tool // .name // empty' 2>/dev/null)
+TOOL_INPUT=$(echo "$INPUT" | jq -c '.tool_input // .toolInput // .input // {}' 2>/dev/null)
+
+# If we can't parse the input, fail open
+if [[ -z "$TOOL_NAME" ]]; then
+  debug "Could not parse tool_name from input — fail open"
+  exit 0
+fi
+
+debug "Evaluating: $TOOL_NAME"
+debug "Platform: $HOOK_PLATFORM"
+
+if [[ -n "${DOLLHOUSE_SESSION_ID:-}" ]]; then
+  debug "Using DOLLHOUSE_SESSION_ID=${DOLLHOUSE_SESSION_ID}"
+fi
+
+PAYLOAD=$(jq -cn \
+  --arg tool_name "$TOOL_NAME" \
+  --arg platform "$HOOK_PLATFORM" \
+  --arg session_id "${DOLLHOUSE_SESSION_ID:-}" \
+  --argjson input "$TOOL_INPUT" \
+  '{
+    tool_name: $tool_name,
+    input: $input,
+    platform: $platform
+  } + (if ($session_id | length) > 0 then { session_id: $session_id } else {} end)')
+
+# Call the DollhouseMCP permission evaluation endpoint with exponential backoff.
+# Retry on transient failures (connection refused, timeout) but not on HTTP errors.
+ATTEMPT=0
+TIMEOUT=$INITIAL_TIMEOUT
+
+while [[ $ATTEMPT -le $MAX_RETRIES ]]; do
+  RESPONSE=$(curl -s --max-time "$TIMEOUT" -X POST "$ENDPOINT" \
+    -H "Content-Type: application/json" \
+    -d "$PAYLOAD" \
+    2>/dev/null)
+  CURL_EXIT=$?
+
+  if [[ $CURL_EXIT -eq 0 ]] && [[ -n "$RESPONSE" ]]; then
+    debug "Response (attempt $((ATTEMPT+1))): $RESPONSE"
+    echo "$RESPONSE"
+    exit 0
+  fi
+
+  ATTEMPT=$((ATTEMPT + 1))
+  if [[ $ATTEMPT -le $MAX_RETRIES ]]; then
+    BACKOFF=$((TIMEOUT * ATTEMPT))
+    debug "Attempt $ATTEMPT failed (curl exit $CURL_EXIT) — retrying in ${BACKOFF}s (timeout ${TIMEOUT}s → $((TIMEOUT * 2))s)"
+    sleep "$BACKOFF"
+    TIMEOUT=$((TIMEOUT * 2))
+  fi
+done
+
+# All retries exhausted — fail open
+debug "All $((MAX_RETRIES + 1)) attempts failed — fail open"
+exit 0

package/scripts/pretooluse-gemini.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+# pretooluse-gemini.sh — Manual Gemini CLI hook wrapper for DollhouseMCP
+
+export DOLLHOUSE_HOOK_PLATFORM="gemini"
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+exec bash "$SCRIPT_DIR/pretooluse-dollhouse.sh"

package/scripts/pretooluse-windsurf.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+# pretooluse-windsurf.sh — Manual Windsurf hook wrapper for DollhouseMCP
+
+export DOLLHOUSE_HOOK_PLATFORM="windsurf"
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+exec bash "$SCRIPT_DIR/pretooluse-dollhouse.sh"

package/server.json

@@ -3,7 +3,7 @@
   "name": "io.github.DollhouseMCP/mcp-server",
   "title": "DollhouseMCP",
   "description": "OSS to create Personas, Skills, Templates, Agents, and Memories to customize your AI experience.",
-  "version": "2.0.14",
+  "version": "2.0.16",
   "homepage": "https://dollhousemcp.com",
   "repository": {
     "type": "git",
@@ -29,7 +29,7 @@
     {
       "registryType": "npm",
       "identifier": "@dollhousemcp/mcp-server",
-      "version": "2.0.14",
+      "version": "2.0.16",
       "transport": {
         "type": "stdio"
       }